Disassembly of File: Ekd3.exe
Code Offset = 00000400, Code Size = 00078C00
Data Offset = 0007B000, Data Size = 00008C00

Number of Objects = 0005 (dec), Imagebase = 00400000h

   Object01: .text    RVA: 00001000 Offset: 00000400 Size: 00078C00 Flags: 60000020
   Object02: .rdata   RVA: 0007A000 Offset: 00079000 Size: 00002000 Flags: 40000040
   Object03: .data    RVA: 0007C000 Offset: 0007B000 Size: 00008C00 Flags: C0000040
   Object04: .idata   RVA: 000BD000 Offset: 00083C00 Size: 00001600 Flags: C0000040
   Object05: .rsrc    RVA: 000BF000 Offset: 00085200 Size: 00024A00 Flags: 40000040


+++++++++++++++++++ MENU INFORMATION ++++++++++++++++++

Number of Menus =    4 (decimal)


APPMENU

      cH(F) {Popup}
           }e(L)      [ID=0066h]
           X(S)      [ID=0065h]
            {Popup}
           8_(X)    [ID=0068h]

      (O) {Popup}
           (K)    [ID=006Bh]
              _(E)  [ID=006Dh]

      o(I) {Popup}
           fo(B)    [ID=0069h]
           g,o(T)    [ID=006Ah]
           6\Sw      [ID=0070h]
           :)(J)   [ID=006Ch]

      .(H) {Popup}
           H,o       [ID=9C89h]


DBGMENU

      cH(F) {Popup}
           }e(L)      [ID=0066h]
           X(S)      [ID=0065h]
            {Popup}
           8_(X)    [ID=0068h]

      (O) {Popup}
           (K)    [ID=006Bh]
              _(E)  [ID=006Dh]

      o(I) {Popup}
           fo(B)    [ID=0069h]
           g,o(T)    [ID=006Ah]
           6\Sw      [ID=0070h]
           :)(J)   [ID=006Ch]

      DEBUG(R) {Popup}
           f@^    [ID=009Bh]
           fh        [ID=009Ch]
           nQSw {Popup}
                n         [ID=00A1h]
                Sw         [ID=00A3h]

            {Popup}
                0bH       [ID=009Eh]
                        [ID=009Fh]

           fh       [ID=00A0h]
                    [ID=00A2h]
           BMP>CHIP   [ID=9C71h]
           MAPEDIT    [ID=9C6Eh]
           OBJEDIT    [ID=9C6Fh]

      .(H) {Popup}
           "         [ID=9C85h]
           ."       [ID=9C86h]
           .(      [ID=9C87h]
            {Popup}
           H,o       [ID=9C89h]


MAPMENU

      ATR {Popup}
           LOAD       [ID=9CB1h]
           INIT       [ID=9CB4h]
                     [ID=9CBFh]
           0        [ID=9CC0h]
           1        [ID=9CC1h]
           2        [ID=9CC2h]
           3        [ID=9CC3h]
           Mn0      [ID=9CC7h]
           Mn1      [ID=9CC8h]
           Mn2      [ID=9CC9h]
           Mn3      [ID=9CCAh]
           6لMn     [ID=9CA5h]
            {Popup}

      MAP {Popup}
           0}e       [ID=9CB3h]
           SAVE       [ID=9C6Ch]
           INIT       [ID=9C70h]
            {Popup}
                          [ID=9CA6h]
                          [ID=9CB0h]

           >'
p {Popup}
                          [ID=9C68h]
                         [ID=9C69h]
                         [ID=9C6Ah]
                         [ID=9C6Bh]

           DISP {Popup}
                oCG LOAD  [ID=9CB2h]
                GAME VIEW  [ID=9CBBh]
                e       [ID=9CA4h]
                h:       [ID=9CC4h]


SMAPMENU

      s(C)      [ID=9CBDh]

+++++++++++++++++ DIALOG INFORMATION ++++++++++++++++++

Number of Dialogs =   26 (decimal)

Name:    APPVERSION, # of Controls=005, Caption:"", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"s" 
     002 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     003 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     004 - ControlID:FFFF, Control Class:"STATIC" Control Text:"    Version 1.0" 
     005 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Copyright(C) *>  Ic 1997" 
Name:       KANKYOU, # of Controls=000, Caption:"", ClassName:""
Name: DialogID_0091, # of Controls=004, Caption:"pn}", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"n" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:FFFF, Control Class:"STATIC" Control Text:"	epn	n." 
     004 - ControlID:0402, Control Class:"LISTBOX" Control Text:"" 
Name: DialogID_00A6, # of Controls=011, Caption:"fo", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"s" 
     002 - ControlID:0403, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:0404, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:03EA, Control Class:"STATIC" Control Text:"" 
     005 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Lv." 
     006 - ControlID:03F7, Control Class:"STATIC" Control Text:"@^" 
     007 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     008 - ControlID:03F8, Control Class:"STATIC" Control Text:"" 
     009 - ControlID:03FA, Control Class:"STATIC" Control Text:"" 
     010 - ControlID:0434, Control Class:"STATIC" Control Text:"" 
     011 - ControlID:0001, Control Class:"" Control Text:"" 
Name: DialogID_00A7, # of Controls=000, Caption:"Swo", ClassName:""
Name: DialogID_00B2, # of Controls=018, Caption:"", ClassName:""
     001 - ControlID:FFFF, Control Class:"BUTTON" Control Text:";" 
     002 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"2" 
     003 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"z" 
     004 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     005 - ControlID:03EE, Control Class:"STATIC" Control Text:"255" 
     006 - ControlID:03EF, Control Class:"STATIC" Control Text:"255" 
     007 - ControlID:03F0, Control Class:"STATIC" Control Text:"255" 
     008 - ControlID:03F1, Control Class:"STATIC" Control Text:"255" 
     009 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"}-" 
     010 - ControlID:03F3, Control Class:"STATIC" Control Text:"255" 
     011 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"Ow" 
     012 - ControlID:03F4, Control Class:"STATIC" Control Text:"255" 
     013 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     014 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     015 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     016 - ControlID:03FD, Control Class:"STATIC" Control Text:"1000" 
     017 - ControlID:03F2, Control Class:"STATIC" Control Text:"255" 
     018 - ControlID:03F5, Control Class:"STATIC" Control Text:"255" 
Name: DialogID_00B3, # of Controls=015, Caption:"", ClassName:""
     001 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     002 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:03FD, Control Class:"STATIC" Control Text:"1000" 
     005 - ControlID:03F2, Control Class:"STATIC" Control Text:"255" 
     006 - ControlID:03F5, Control Class:"STATIC" Control Text:"255" 
     007 - ControlID:03FE, Control Class:"STATIC" Control Text:"1000" 
     008 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     009 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     010 - ControlID:03F3, Control Class:"STATIC" Control Text:"255" 
     011 - ControlID:052B, Control Class:"BUTTON" Control Text:"@" 
     012 - ControlID:0432, Control Class:"STATIC" Control Text:"65535" 
     013 - ControlID:0001, Control Class:"" Control Text:"" 
     014 - ControlID:0000, Control Class:"BUTTON" Control Text:"s" 
     015 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
Name: DialogID_00BA, # of Controls=000, Caption:"", ClassName:""
Name: DialogID_00BB, # of Controls=011, Caption:"Xe	", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"n" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     004 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     005 - ControlID:03F7, Control Class:"STATIC" Control Text:"" 
     006 - ControlID:FFFF, Control Class:"STATIC" Control Text:";I" 
     007 - ControlID:03F9, Control Class:"STATIC" Control Text:"0" 
     008 - ControlID:03F8, Control Class:"STATIC" Control Text:"aaaaaaaK" 
     009 - ControlID:0434, Control Class:"STATIC" Control Text:"" 
     010 - ControlID:0433, Control Class:"STATIC" Control Text:"0" 
     011 - ControlID:03FA, Control Class:"STATIC" Control Text:"" 
Name: DialogID_00C1, # of Controls=004, Caption:"", ClassName:""
     001 - ControlID:0403, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0404, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:0422, Control Class:"BUTTON" Control Text:"8_" 
     004 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
Name: DialogID_00C3, # of Controls=011, Caption:"}e", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"n" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:03F7, Control Class:"STATIC" Control Text:"a aU aaaaaaaaaa" 
     005 - ControlID:03F8, Control Class:"STATIC" Control Text:"aaaaaaaK" 
     006 - ControlID:FFFF, Control Class:"STATIC" Control Text:";҄I" 
     007 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     008 - ControlID:0434, Control Class:"STATIC" Control Text:"" 
     009 - ControlID:0433, Control Class:"STATIC" Control Text:"255" 
     010 - ControlID:FFFF, Control Class:"STATIC" Control Text:"" 
     011 - ControlID:03FA, Control Class:"STATIC" Control Text:"" 
Name: DialogID_00C8, # of Controls=004, Caption:"", ClassName:""
     001 - ControlID:03EB, Control Class:"LISTBOX" Control Text:"" 
     002 - ControlID:052E, Control Class:"STATIC" Control Text:"@Sw" 
     003 - ControlID:0513, Control Class:"STATIC" Control Text:"" 
     004 - ControlID:052F, Control Class:"STATIC" Control Text:"" 
Name: DialogID_00CD, # of Controls=014, Caption:"", ClassName:""
     001 - ControlID:FFFF, Control Class:"STATIC" Control Text:";" 
     002 - ControlID:FFFF, Control Class:"STATIC" Control Text:"2" 
     003 - ControlID:FFFF, Control Class:"STATIC" Control Text:"z" 
     004 - ControlID:053B, Control Class:"STATIC" Control Text:"" 
     005 - ControlID:04FF, Control Class:"STATIC" Control Text:"" 
     006 - ControlID:0500, Control Class:"STATIC" Control Text:"" 
     007 - ControlID:0501, Control Class:"STATIC" Control Text:"v" 
     008 - ControlID:0502, Control Class:"STATIC" Control Text:"" 
     009 - ControlID:FFFF, Control Class:"STATIC" Control Text:"8" 
     010 - ControlID:FFFF, Control Class:"STATIC" Control Text:"G" 
     011 - ControlID:FFFF, Control Class:"STATIC" Control Text:"M" 
     012 - ControlID:FFFF, Control Class:"STATIC" Control Text:"goaaaaaaaaaaaaa" 
     013 - ControlID:0001, Control Class:"BUTTON" Control Text:"n" 
     014 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
Name: DialogID_00CE, # of Controls=001, Caption:"", ClassName:""
     001 - ControlID:FFFF, Control Class:"STATIC" Control Text:"goaaaaaaaaaaaaa" 
Name: DialogID_00CF, # of Controls=004, Caption:"Xpn", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"n" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:FFFF, Control Class:"STATIC" Control Text:"	遨XMn	n." 
     004 - ControlID:0402, Control Class:"LISTBOX" Control Text:"" 
Name: DialogID_00D0, # of Controls=000, Caption:"", ClassName:""
Name: DialogID_00D2, # of Controls=005, Caption:"o", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"f(&R)" 
     003 - ControlID:03F0, Control Class:"COMBOBOX" Control Text:"" 
     004 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"Sw" 
     005 - ControlID:03F1, Control Class:"COMBOBOX" Control Text:"" 
Name: DialogID_00D4, # of Controls=002, Caption:"fo", ClassName:""
     001 - ControlID:0002, Control Class:"BUTTON" Control Text:"s" 
     002 - ControlID:0001, Control Class:"" Control Text:"" 
Name: DialogID_00DA, # of Controls=200, Caption:"e", ClassName:""
     001 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     003 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     004 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     005 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     006 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     007 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     008 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     009 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     010 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     011 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     012 - ControlID:0000, Control Class:"BUTTON" Control Text:"@h" 
     013 - ControlID:0000, Control Class:"BUTTON" Control Text:"@h" 
     014 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     015 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     016 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     017 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     018 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     019 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     020 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     021 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     022 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     023 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     024 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     025 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     026 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     027 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     028 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     029 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     030 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     031 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     032 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     033 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     034 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     035 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     036 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     037 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     038 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     039 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     040 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     041 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     042 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     043 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     044 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     045 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     046 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     047 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     048 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     049 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     050 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     051 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     052 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     053 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     054 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     055 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     056 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     057 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     058 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     059 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     060 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     061 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     062 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     063 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     064 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     065 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     066 - ControlID:0001, Control Class:"BUTTON" Control Text:"n" 
     067 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     068 - ControlID:043C, Control Class:"BUTTON" Control Text:"" 
     069 - ControlID:043B, Control Class:"BUTTON" Control Text:"" 
     070 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     071 - ControlID:0001, Control Class:"" Control Text:"" 
     072 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     073 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     074 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     075 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     076 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     077 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     078 - ControlID:0000, Control Class:"BUTTON" Control Text:"@h" 
     079 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     080 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     081 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     082 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     083 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     084 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     085 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     086 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     087 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     088 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     089 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     090 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     091 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     092 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     093 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     094 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     095 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     096 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     097 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     098 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     099 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     100 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     101 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     102 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     103 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     104 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     105 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     106 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     107 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     108 - ControlID:0001, Control Class:"BUTTON" Control Text:"n" 
     109 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     110 - ControlID:043F, Control Class:"STATIC" Control Text:"" 
     111 - ControlID:0473, Control Class:"STATIC" Control Text:"" 
     112 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     113 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Lv." 
     114 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"fo" 
     115 - ControlID:0474, Control Class:"STATIC" Control Text:"1000" 
     116 - ControlID:03FF, Control Class:"STATIC" Control Text:"1000" 
     117 - ControlID:0400, Control Class:"STATIC" Control Text:"1000" 
     118 - ControlID:03FE, Control Class:"STATIC" Control Text:"1000" 
     119 - ControlID:0475, Control Class:"STATIC" Control Text:"" 
     120 - ControlID:0401, Control Class:"STATIC" Control Text:"1000" 
     121 - ControlID:0535, Control Class:"STATIC" Control Text:"iYK" 
     122 - ControlID:0536, Control Class:"STATIC" Control Text:"99" 
     123 - ControlID:0537, Control Class:"STATIC" Control Text:"" 
     124 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"z" 
     125 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"2" 
     126 - ControlID:FFFF, Control Class:"BUTTON" Control Text:";" 
     127 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     128 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     129 - ControlID:053E, Control Class:"BUTTON" Control Text:"" 
     130 - ControlID:053F, Control Class:"BUTTON" Control Text:"" 
     131 - ControlID:0540, Control Class:"BUTTON" Control Text:"" 
     132 - ControlID:0001, Control Class:"" Control Text:"" 
     133 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     134 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     135 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     136 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     137 - ControlID:0000, Control Class:"BUTTON" Control Text:"Fh" 
     138 - ControlID:0000, Control Class:"BUTTON" Control Text:"@h" 
     139 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     140 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     141 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     142 - ControlID:0000, Control Class:"STATIC" Control Text:"@" 
     143 - ControlID:0000, Control Class:"STATIC" Control Text:"50000" 
     144 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     145 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     146 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     147 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     148 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     149 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     150 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     151 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     152 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     153 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     154 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     155 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     156 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     157 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     158 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     159 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     160 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     161 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     162 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     163 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     164 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     165 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     166 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     167 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     168 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     169 - ControlID:0000, Control Class:"STATIC" Control Text:"fh" 
     170 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     171 - ControlID:0001, Control Class:"" Control Text:"" 
     172 - ControlID:0000, Control Class:"BUTTON" Control Text:"6\" 
     173 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     174 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     175 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     176 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     177 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     178 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     179 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     180 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     181 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     182 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     183 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     184 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     185 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     186 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     187 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     188 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     189 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     190 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     191 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     192 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     193 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     194 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     195 - ControlID:0000, Control Class:"BUTTON" Control Text:"P" 
     196 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     197 - ControlID:0000, Control Class:"BUTTON" Control Text:"fo" 
     198 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     199 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     200 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
Name: DialogID_00E9, # of Controls=003, Caption:"", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"n" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:043C, Control Class:"BUTTON" Control Text:"" 
Name: DialogID_00EA, # of Controls=003, Caption:"ӓ", ClassName:""
     001 - ControlID:043C, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:043B, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
Name: DialogID_00EB, # of Controls=200, Caption:"e", ClassName:""
     001 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     003 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     005 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     006 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     007 - ControlID:0000, Control Class:"BUTTON" Control Text:"@h" 
     008 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     009 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     010 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     011 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     012 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     013 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     014 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     015 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     016 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     017 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     018 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     019 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     020 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     021 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     022 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     023 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     024 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     025 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     026 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     027 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     028 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     029 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     030 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     031 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     032 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     033 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     034 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     035 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     036 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     037 - ControlID:0001, Control Class:"BUTTON" Control Text:"n" 
     038 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     039 - ControlID:043F, Control Class:"STATIC" Control Text:"" 
     040 - ControlID:0473, Control Class:"STATIC" Control Text:"" 
     041 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     042 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Lv." 
     043 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"fo" 
     044 - ControlID:0474, Control Class:"STATIC" Control Text:"1000" 
     045 - ControlID:03FF, Control Class:"STATIC" Control Text:"1000" 
     046 - ControlID:0400, Control Class:"STATIC" Control Text:"1000" 
     047 - ControlID:03FE, Control Class:"STATIC" Control Text:"1000" 
     048 - ControlID:0475, Control Class:"STATIC" Control Text:"" 
     049 - ControlID:0401, Control Class:"STATIC" Control Text:"1000" 
     050 - ControlID:0535, Control Class:"STATIC" Control Text:"iYK" 
     051 - ControlID:0536, Control Class:"STATIC" Control Text:"99" 
     052 - ControlID:0537, Control Class:"STATIC" Control Text:"" 
     053 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"z" 
     054 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"2" 
     055 - ControlID:FFFF, Control Class:"BUTTON" Control Text:";" 
     056 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     057 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     058 - ControlID:053E, Control Class:"BUTTON" Control Text:"" 
     059 - ControlID:053F, Control Class:"BUTTON" Control Text:"" 
     060 - ControlID:0540, Control Class:"BUTTON" Control Text:"" 
     061 - ControlID:0001, Control Class:"" Control Text:"" 
     062 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     063 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     064 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     065 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     066 - ControlID:0000, Control Class:"BUTTON" Control Text:"Fh" 
     067 - ControlID:0000, Control Class:"BUTTON" Control Text:"@h" 
     068 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     069 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     070 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     071 - ControlID:0000, Control Class:"STATIC" Control Text:"@" 
     072 - ControlID:0000, Control Class:"STATIC" Control Text:"50000" 
     073 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     074 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     075 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     076 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     077 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     078 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     079 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     080 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     081 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     082 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     083 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     084 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     085 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     086 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     087 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     088 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     089 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     090 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     091 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     092 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     093 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     094 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     095 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     096 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     097 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     098 - ControlID:0000, Control Class:"STATIC" Control Text:"fh" 
     099 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     100 - ControlID:0001, Control Class:"" Control Text:"" 
     101 - ControlID:0000, Control Class:"BUTTON" Control Text:"6\" 
     102 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     103 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     104 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     105 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     106 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     107 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     108 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     109 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     110 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     111 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     112 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     113 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     114 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     115 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     116 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     117 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     118 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     119 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     120 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     121 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     122 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     123 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     124 - ControlID:0000, Control Class:"BUTTON" Control Text:"P" 
     125 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     126 - ControlID:0000, Control Class:"BUTTON" Control Text:"fo" 
     127 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     128 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     129 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     130 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     131 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     132 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     133 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     134 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     135 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     136 - ControlID:0000, Control Class:"BUTTON" Control Text:"fo" 
     137 - ControlID:0001, Control Class:"" Control Text:"" 
     138 - ControlID:0000, Control Class:"BUTTON" Control Text:"n" 
     139 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     140 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     141 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     142 - ControlID:0000, Control Class:"STATIC" Control Text:"( 	" 
     143 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     144 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     145 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     146 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     147 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     148 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     149 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     150 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     151 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     152 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     153 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     154 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     155 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     156 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     157 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     158 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     159 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     160 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     161 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     162 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     163 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     164 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     165 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     166 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     167 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     168 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     169 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     170 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     171 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     172 - ControlID:0001, Control Class:"" Control Text:"" 
     173 - ControlID:0000, Control Class:"BUTTON" Control Text:";" 
     174 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     175 - ControlID:0000, Control Class:"BUTTON" Control Text:"-" 
     176 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     177 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     178 - ControlID:0000, Control Class:"BUTTON" Control Text:"Z" 
     179 - ControlID:0000, Control Class:"BUTTON" Control Text:"
Z" 
     180 - ControlID:0000, Control Class:"BUTTON" Control Text:"Z" 
     181 - ControlID:0000, Control Class:"BUTTON" Control Text:"
Z" 
     182 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     183 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     184 - ControlID:0000, Control Class:"STATIC" Control Text:"10/10" 
     185 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     186 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     187 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     188 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     189 - ControlID:0000, Control Class:"STATIC" Control Text:"E" 
     190 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     191 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     192 - ControlID:0000, Control Class:"STATIC" Control Text:"1000/1000" 
     193 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     194 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     195 - ControlID:0000, Control Class:"STATIC" Control Text:"E" 
     196 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     197 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     198 - ControlID:0000, Control Class:"STATIC" Control Text:"1000/1000" 
     199 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     200 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
Name: DialogID_00EC, # of Controls=029, Caption:"	f", ClassName:""
     001 - ControlID:0001, Control Class:"BUTTON" Control Text:"n" 
     002 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:043F, Control Class:"STATIC" Control Text:"" 
     004 - ControlID:0473, Control Class:"STATIC" Control Text:"" 
     005 - ControlID:03F9, Control Class:"STATIC" Control Text:"99" 
     006 - ControlID:FFFF, Control Class:"STATIC" Control Text:"Lv." 
     007 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"fo" 
     008 - ControlID:0474, Control Class:"STATIC" Control Text:"1000" 
     009 - ControlID:03FF, Control Class:"STATIC" Control Text:"1000" 
     010 - ControlID:0400, Control Class:"STATIC" Control Text:"1000" 
     011 - ControlID:03FE, Control Class:"STATIC" Control Text:"1000" 
     012 - ControlID:0475, Control Class:"STATIC" Control Text:"" 
     013 - ControlID:0401, Control Class:"STATIC" Control Text:"1000" 
     014 - ControlID:0535, Control Class:"STATIC" Control Text:"iYK" 
     015 - ControlID:0536, Control Class:"STATIC" Control Text:"99" 
     016 - ControlID:0537, Control Class:"STATIC" Control Text:"" 
     017 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"z" 
     018 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"2" 
     019 - ControlID:FFFF, Control Class:"BUTTON" Control Text:";" 
     020 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     021 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"E" 
     022 - ControlID:053E, Control Class:"BUTTON" Control Text:"" 
     023 - ControlID:053F, Control Class:"BUTTON" Control Text:"" 
     024 - ControlID:0540, Control Class:"BUTTON" Control Text:"" 
     025 - ControlID:0001, Control Class:"" Control Text:"" 
     026 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     027 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     028 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     029 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
Name: DialogID_00ED, # of Controls=200, Caption:"k", ClassName:""
     001 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     002 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     003 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     004 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     005 - ControlID:0000, Control Class:"BUTTON" Control Text:"Fh" 
     006 - ControlID:0000, Control Class:"BUTTON" Control Text:"@h" 
     007 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     008 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     009 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     010 - ControlID:0000, Control Class:"STATIC" Control Text:"@" 
     011 - ControlID:0000, Control Class:"STATIC" Control Text:"50000" 
     012 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     013 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     014 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     015 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     016 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     017 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     018 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     019 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     020 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     021 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     022 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     023 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     024 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     025 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     026 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     027 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     028 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     029 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     030 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     031 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     032 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     033 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     034 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     035 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     036 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     037 - ControlID:0000, Control Class:"STATIC" Control Text:"fh" 
     038 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     039 - ControlID:0001, Control Class:"" Control Text:"" 
     040 - ControlID:0000, Control Class:"BUTTON" Control Text:"6\" 
     041 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     042 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     043 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     044 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     045 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     046 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     047 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     048 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     049 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     050 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     051 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     052 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     053 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     054 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     055 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     056 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     057 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     058 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     059 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     060 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     061 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     062 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     063 - ControlID:0000, Control Class:"BUTTON" Control Text:"P" 
     064 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     065 - ControlID:0000, Control Class:"BUTTON" Control Text:"fo" 
     066 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     067 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     068 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     069 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     070 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     071 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     072 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     073 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     074 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     075 - ControlID:0000, Control Class:"BUTTON" Control Text:"fo" 
     076 - ControlID:0001, Control Class:"" Control Text:"" 
     077 - ControlID:0000, Control Class:"BUTTON" Control Text:"n" 
     078 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     079 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     080 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     081 - ControlID:0000, Control Class:"STATIC" Control Text:"( 	" 
     082 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     083 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     084 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     085 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     086 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     087 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     088 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     089 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     090 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     091 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     092 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     093 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     094 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     095 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     096 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     097 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     098 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     099 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     100 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     101 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     102 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     103 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     104 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     105 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     106 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     107 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     108 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     109 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     110 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     111 - ControlID:0001, Control Class:"" Control Text:"" 
     112 - ControlID:0000, Control Class:"BUTTON" Control Text:";" 
     113 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     114 - ControlID:0000, Control Class:"BUTTON" Control Text:"-" 
     115 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     116 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     117 - ControlID:0000, Control Class:"BUTTON" Control Text:"Z" 
     118 - ControlID:0000, Control Class:"BUTTON" Control Text:"
Z" 
     119 - ControlID:0000, Control Class:"BUTTON" Control Text:"Z" 
     120 - ControlID:0000, Control Class:"BUTTON" Control Text:"
Z" 
     121 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     122 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     123 - ControlID:0000, Control Class:"STATIC" Control Text:"10/10" 
     124 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     125 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     126 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     127 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     128 - ControlID:0000, Control Class:"STATIC" Control Text:"E" 
     129 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     130 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     131 - ControlID:0000, Control Class:"STATIC" Control Text:"1000/1000" 
     132 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     133 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     134 - ControlID:0000, Control Class:"STATIC" Control Text:"E" 
     135 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     136 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     137 - ControlID:0000, Control Class:"STATIC" Control Text:"1000/1000" 
     138 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     139 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     140 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     141 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     142 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     143 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     144 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     145 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     146 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     147 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     148 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     149 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     150 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     151 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     152 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     153 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     154 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     155 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     156 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     157 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     158 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     159 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     160 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     161 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     162 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     163 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     164 - ControlID:0000, Control Class:"BUTTON" Control Text:"
" 
     165 - ControlID:0000, Control Class:"BUTTON" Control Text:"L
" 
     166 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     167 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     168 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     169 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     170 - ControlID:0000, Control Class:"STATIC" Control Text:"50000" 
     171 - ControlID:0000, Control Class:"STATIC" Control Text:"@" 
     172 - ControlID:0000, Control Class:"BUTTON" Control Text:"}" 
     173 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     174 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     175 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     176 - ControlID:0507, Control Class:"BUTTON" Control Text:";" 
     177 - ControlID:0508, Control Class:"BUTTON" Control Text:"" 
     178 - ControlID:0509, Control Class:"BUTTON" Control Text:"Sw" 
     179 - ControlID:050B, Control Class:"BUTTON" Control Text:"I" 
     180 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     181 - ControlID:050C, Control Class:"BUTTON" Control Text:"" 
     182 - ControlID:0509, Control Class:"BUTTON" Control Text:"" 
     183 - ControlID:050A, Control Class:"BUTTON" Control Text:"" 
     184 - ControlID:050C, Control Class:"BUTTON" Control Text:"" 
     185 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     186 - ControlID:050B, Control Class:"BUTTON" Control Text:"" 
     187 - ControlID:0003, Control Class:"BUTTON" Control Text:"(" 
     188 - ControlID:0004, Control Class:"BUTTON" Control Text:"" 
     189 - ControlID:0005, Control Class:"BUTTON" Control Text:"
" 
     190 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     191 - ControlID:0001, Control Class:"" Control Text:"" 
     192 - ControlID:0000, Control Class:"BUTTON" Control Text:"s" 
     193 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     194 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     195 - ControlID:0000, Control Class:"STATIC" Control Text:"^'a" 
     196 - ControlID:0000, Control Class:"STATIC" Control Text:"9999" 
     197 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     198 - ControlID:0014, Control Class:"" Control Text:"" 
     199 - ControlID:0014, Control Class:"" Control Text:"" 
     200 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
Name: DialogID_00EE, # of Controls=200, Caption:"4", ClassName:""
     001 - ControlID:0000, Control Class:"BUTTON" Control Text:"6\" 
     002 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     004 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     005 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     006 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     007 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     008 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     009 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     010 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     011 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     012 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     013 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     014 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     015 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     016 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     017 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     018 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     019 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     020 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     021 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     022 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     023 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     024 - ControlID:0000, Control Class:"BUTTON" Control Text:"P" 
     025 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     026 - ControlID:0000, Control Class:"BUTTON" Control Text:"fo" 
     027 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     028 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     029 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     030 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     031 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     032 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     033 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     034 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     035 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     036 - ControlID:0000, Control Class:"BUTTON" Control Text:"fo" 
     037 - ControlID:0001, Control Class:"" Control Text:"" 
     038 - ControlID:0000, Control Class:"BUTTON" Control Text:"n" 
     039 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     040 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     041 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     042 - ControlID:0000, Control Class:"STATIC" Control Text:"( 	" 
     043 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     044 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     045 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     046 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     047 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     048 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     049 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     050 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     051 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     052 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     053 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     054 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     055 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     056 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     057 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     058 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     059 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     060 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     061 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     062 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     063 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     064 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     065 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     066 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     067 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     068 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     069 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     070 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     071 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     072 - ControlID:0001, Control Class:"" Control Text:"" 
     073 - ControlID:0000, Control Class:"BUTTON" Control Text:";" 
     074 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     075 - ControlID:0000, Control Class:"BUTTON" Control Text:"-" 
     076 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     077 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     078 - ControlID:0000, Control Class:"BUTTON" Control Text:"Z" 
     079 - ControlID:0000, Control Class:"BUTTON" Control Text:"
Z" 
     080 - ControlID:0000, Control Class:"BUTTON" Control Text:"Z" 
     081 - ControlID:0000, Control Class:"BUTTON" Control Text:"
Z" 
     082 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     083 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     084 - ControlID:0000, Control Class:"STATIC" Control Text:"10/10" 
     085 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     086 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     087 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     088 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     089 - ControlID:0000, Control Class:"STATIC" Control Text:"E" 
     090 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     091 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     092 - ControlID:0000, Control Class:"STATIC" Control Text:"1000/1000" 
     093 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     094 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     095 - ControlID:0000, Control Class:"STATIC" Control Text:"E" 
     096 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     097 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     098 - ControlID:0000, Control Class:"STATIC" Control Text:"1000/1000" 
     099 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     100 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     101 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     102 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     103 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     104 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     105 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     106 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     107 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     108 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     109 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     110 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     111 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     112 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     113 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     114 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     115 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     116 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     117 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     118 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     119 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     120 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     121 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     122 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     123 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     124 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     125 - ControlID:0000, Control Class:"BUTTON" Control Text:"
" 
     126 - ControlID:0000, Control Class:"BUTTON" Control Text:"L
" 
     127 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     128 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     129 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     130 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     131 - ControlID:0000, Control Class:"STATIC" Control Text:"50000" 
     132 - ControlID:0000, Control Class:"STATIC" Control Text:"@" 
     133 - ControlID:0000, Control Class:"BUTTON" Control Text:"}" 
     134 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     135 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     136 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     137 - ControlID:0507, Control Class:"BUTTON" Control Text:";" 
     138 - ControlID:0508, Control Class:"BUTTON" Control Text:"" 
     139 - ControlID:0509, Control Class:"BUTTON" Control Text:"Sw" 
     140 - ControlID:050B, Control Class:"BUTTON" Control Text:"I" 
     141 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     142 - ControlID:050C, Control Class:"BUTTON" Control Text:"" 
     143 - ControlID:0509, Control Class:"BUTTON" Control Text:"" 
     144 - ControlID:050A, Control Class:"BUTTON" Control Text:"" 
     145 - ControlID:050C, Control Class:"BUTTON" Control Text:"" 
     146 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     147 - ControlID:050B, Control Class:"BUTTON" Control Text:"" 
     148 - ControlID:0003, Control Class:"BUTTON" Control Text:"(" 
     149 - ControlID:0004, Control Class:"BUTTON" Control Text:"" 
     150 - ControlID:0005, Control Class:"BUTTON" Control Text:"
" 
     151 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     152 - ControlID:0001, Control Class:"" Control Text:"" 
     153 - ControlID:0000, Control Class:"BUTTON" Control Text:"s" 
     154 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     155 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     156 - ControlID:0000, Control Class:"STATIC" Control Text:"^'a" 
     157 - ControlID:0000, Control Class:"STATIC" Control Text:"9999" 
     158 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     159 - ControlID:0014, Control Class:"" Control Text:"" 
     160 - ControlID:0014, Control Class:"" Control Text:"" 
     161 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     162 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     163 - ControlID:0521, Control Class:"LISTBOX" Control Text:"" 
     164 - ControlID:0001, Control Class:"" Control Text:"" 
     165 - ControlID:0000, Control Class:"BUTTON" Control Text:"s" 
     166 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     167 - ControlID:0000, Control Class:"STATIC" Control Text:"150" 
     168 - ControlID:0000, Control Class:"STATIC" Control Text:"^'a" 
     169 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     170 - ControlID:0015, Control Class:"" Control Text:"" 
     171 - ControlID:0015, Control Class:"" Control Text:"" 
     172 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     173 - ControlID:003B, Control Class:"" Control Text:"" 
     174 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     175 - ControlID:003A, Control Class:"" Control Text:"" 
     176 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     177 - ControlID:0532, Control Class:"BUTTON" Control Text:"/" 
     178 - ControlID:0533, Control Class:"BUTTON" Control Text:"
" 
     179 - ControlID:0534, Control Class:"STATIC" Control Text:"TEXT" 
     180 - ControlID:0537, Control Class:"STATIC" Control Text:"" 
     181 - ControlID:04F8, Control Class:"STATIC" Control Text:"Static" 
     182 - ControlID:04F9, Control Class:"STATIC" Control Text:"Static" 
     183 - ControlID:04FA, Control Class:"STATIC" Control Text:"Static" 
     184 - ControlID:0001, Control Class:"" Control Text:"" 
     185 - ControlID:0000, Control Class:"BUTTON" Control Text:"n" 
     186 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     187 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     188 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     189 - ControlID:0000, Control Class:"STATIC" Control Text:"150" 
     190 - ControlID:0000, Control Class:"STATIC" Control Text:"^'a" 
     191 - ControlID:0014, Control Class:"" Control Text:"" 
     192 - ControlID:001A, Control Class:"" Control Text:"" 
     193 - ControlID:003C, Control Class:"" Control Text:"" 
     194 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     195 - ControlID:003C, Control Class:"" Control Text:"" 
     196 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     197 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     198 - ControlID:0008, Control Class:"" Control Text:"" 
     199 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     200 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
Name: DialogID_00F2, # of Controls=200, Caption:"e", ClassName:""
     001 - ControlID:0000, Control Class:"BUTTON" Control Text:"n" 
     002 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     003 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     004 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     005 - ControlID:0000, Control Class:"STATIC" Control Text:"( 	" 
     006 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     007 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     008 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     009 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     010 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     011 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     012 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     013 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     014 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     015 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     016 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     017 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     018 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     019 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     020 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     021 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     022 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     023 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     024 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     025 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     026 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     027 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     028 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     029 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     030 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     031 - ControlID:0000, Control Class:"STATIC" Control Text:"+999" 
     032 - ControlID:0000, Control Class:"STATIC" Control Text:"8*hW" 
     033 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     034 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     035 - ControlID:0001, Control Class:"" Control Text:"" 
     036 - ControlID:0000, Control Class:"BUTTON" Control Text:";" 
     037 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     038 - ControlID:0000, Control Class:"BUTTON" Control Text:"-" 
     039 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     040 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     041 - ControlID:0000, Control Class:"BUTTON" Control Text:"Z" 
     042 - ControlID:0000, Control Class:"BUTTON" Control Text:"
Z" 
     043 - ControlID:0000, Control Class:"BUTTON" Control Text:"Z" 
     044 - ControlID:0000, Control Class:"BUTTON" Control Text:"
Z" 
     045 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     046 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     047 - ControlID:0000, Control Class:"STATIC" Control Text:"10/10" 
     048 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     049 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     050 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     051 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     052 - ControlID:0000, Control Class:"STATIC" Control Text:"E" 
     053 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     054 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     055 - ControlID:0000, Control Class:"STATIC" Control Text:"1000/1000" 
     056 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     057 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     058 - ControlID:0000, Control Class:"STATIC" Control Text:"E" 
     059 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     060 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     061 - ControlID:0000, Control Class:"STATIC" Control Text:"1000/1000" 
     062 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     063 - ControlID:0000, Control Class:"STATIC" Control Text:"255/255" 
     064 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     065 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     066 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     067 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     068 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     069 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     070 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     071 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     072 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     073 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     074 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     075 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     076 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     077 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     078 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     079 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     080 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     081 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     082 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     083 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     084 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     085 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     086 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     087 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     088 - ControlID:0000, Control Class:"BUTTON" Control Text:"
" 
     089 - ControlID:0000, Control Class:"BUTTON" Control Text:"L
" 
     090 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     091 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     092 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     093 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     094 - ControlID:0000, Control Class:"STATIC" Control Text:"50000" 
     095 - ControlID:0000, Control Class:"STATIC" Control Text:"@" 
     096 - ControlID:0000, Control Class:"BUTTON" Control Text:"}" 
     097 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     098 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     099 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     100 - ControlID:0507, Control Class:"BUTTON" Control Text:";" 
     101 - ControlID:0508, Control Class:"BUTTON" Control Text:"" 
     102 - ControlID:0509, Control Class:"BUTTON" Control Text:"Sw" 
     103 - ControlID:050B, Control Class:"BUTTON" Control Text:"I" 
     104 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     105 - ControlID:050C, Control Class:"BUTTON" Control Text:"" 
     106 - ControlID:0509, Control Class:"BUTTON" Control Text:"" 
     107 - ControlID:050A, Control Class:"BUTTON" Control Text:"" 
     108 - ControlID:050C, Control Class:"BUTTON" Control Text:"" 
     109 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     110 - ControlID:050B, Control Class:"BUTTON" Control Text:"" 
     111 - ControlID:0003, Control Class:"BUTTON" Control Text:"(" 
     112 - ControlID:0004, Control Class:"BUTTON" Control Text:"" 
     113 - ControlID:0005, Control Class:"BUTTON" Control Text:"
" 
     114 - ControlID:0002, Control Class:"BUTTON" Control Text:"" 
     115 - ControlID:0001, Control Class:"" Control Text:"" 
     116 - ControlID:0000, Control Class:"BUTTON" Control Text:"s" 
     117 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     118 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     119 - ControlID:0000, Control Class:"STATIC" Control Text:"^'a" 
     120 - ControlID:0000, Control Class:"STATIC" Control Text:"9999" 
     121 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     122 - ControlID:0014, Control Class:"" Control Text:"" 
     123 - ControlID:0014, Control Class:"" Control Text:"" 
     124 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     125 - ControlID:FFFF, Control Class:"BUTTON" Control Text:"" 
     126 - ControlID:0521, Control Class:"LISTBOX" Control Text:"" 
     127 - ControlID:0001, Control Class:"" Control Text:"" 
     128 - ControlID:0000, Control Class:"BUTTON" Control Text:"s" 
     129 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     130 - ControlID:0000, Control Class:"STATIC" Control Text:"150" 
     131 - ControlID:0000, Control Class:"STATIC" Control Text:"^'a" 
     132 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     133 - ControlID:0015, Control Class:"" Control Text:"" 
     134 - ControlID:0015, Control Class:"" Control Text:"" 
     135 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     136 - ControlID:003B, Control Class:"" Control Text:"" 
     137 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     138 - ControlID:003A, Control Class:"" Control Text:"" 
     139 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     140 - ControlID:0532, Control Class:"BUTTON" Control Text:"/" 
     141 - ControlID:0533, Control Class:"BUTTON" Control Text:"
" 
     142 - ControlID:0534, Control Class:"STATIC" Control Text:"TEXT" 
     143 - ControlID:0537, Control Class:"STATIC" Control Text:"" 
     144 - ControlID:04F8, Control Class:"STATIC" Control Text:"Static" 
     145 - ControlID:04F9, Control Class:"STATIC" Control Text:"Static" 
     146 - ControlID:04FA, Control Class:"STATIC" Control Text:"Static" 
     147 - ControlID:0001, Control Class:"" Control Text:"" 
     148 - ControlID:0000, Control Class:"BUTTON" Control Text:"n" 
     149 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     150 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     151 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     152 - ControlID:0000, Control Class:"STATIC" Control Text:"150" 
     153 - ControlID:0000, Control Class:"STATIC" Control Text:"^'a" 
     154 - ControlID:0014, Control Class:"" Control Text:"" 
     155 - ControlID:001A, Control Class:"" Control Text:"" 
     156 - ControlID:003C, Control Class:"" Control Text:"" 
     157 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     158 - ControlID:003C, Control Class:"" Control Text:"" 
     159 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     160 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     161 - ControlID:0008, Control Class:"" Control Text:"" 
     162 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     163 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     164 - ControlID:000A, Control Class:"" Control Text:"" 
     165 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     166 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     167 - ControlID:000A, Control Class:"" Control Text:"" 
     168 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     169 - ControlID:000A, Control Class:"" Control Text:"" 
     170 - ControlID:000A, Control Class:"" Control Text:"" 
     171 - ControlID:0036, Control Class:"" Control Text:"" 
     172 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     173 - ControlID:0001, Control Class:"" Control Text:"" 
     174 - ControlID:0000, Control Class:"BUTTON" Control Text:"s" 
     175 - ControlID:0001, Control Class:"" Control Text:"" 
     176 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     177 - ControlID:0000, Control Class:"BUTTON" Control Text:"'" 
     178 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     179 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     180 - ControlID:0000, Control Class:"BUTTON" Control Text:"" 
     181 - ControlID:0000, Control Class:"STATIC" Control Text:"@" 
     182 - ControlID:0000, Control Class:"STATIC" Control Text:"50000" 
     183 - ControlID:0000, Control Class:"COMBOBOX" Control Text:"" 
     184 - ControlID:0000, Control Class:"STATIC" Control Text:"Lv." 
     185 - ControlID:0000, Control Class:"STATIC" Control Text:"99" 
     186 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     187 - ControlID:0000, Control Class:"STATIC" Control Text:";" 
     188 - ControlID:0000, Control Class:"STATIC" Control Text:"2" 
     189 - ControlID:0000, Control Class:"STATIC" Control Text:"z" 
     190 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     191 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     192 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     193 - ControlID:0000, Control Class:"STATIC" Control Text:"1000" 
     194 - ControlID:0000, Control Class:"STATIC" Control Text:"" 
     195 - ControlID:0000, Control Class:"STATIC" Control Text:"}-" 
     196 - ControlID:0000, Control Class:"STATIC" Control Text:"Ow" 
     197 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     198 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     199 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 
     200 - ControlID:0000, Control Class:"STATIC" Control Text:"255" 

+++++++++++++++++++ IMPORTED FUNCTIONS ++++++++++++++++++
Number of Imported Modules =    6 (decimal)

   Import Module 001: WINMM.dll
   Import Module 002: COMCTL32.dll
   Import Module 003: KERNEL32.dll
   Import Module 004: USER32.dll
   Import Module 005: GDI32.dll
   Import Module 006: koeicda.dll

+++++++++++++++++++ IMPORT MODULE DETAILS +++++++++++++++

   Import Module 001: WINMM.dll

 Addr:000BD76E hint(0090) Name: sndPlaySoundA
 Addr:000BD75C hint(0032) Name: mciSendCommandA

   Import Module 002: COMCTL32.dll

 Addr:000BD7DC hint(0014) Name: ImageList_BeginDrag
 Addr:000BD7F2 hint(0019) Name: ImageList_DragLeave
 Addr:000BD788 hint(001A) Name: ImageList_DragMove
 Addr:000BD79E hint(001E) Name: ImageList_EndDrag
 Addr:000BD7B2 hint(0017) Name: ImageList_Destroy
 Addr:000BD7C6 hint(0018) Name: ImageList_DragEnter
 Addr:000BD848 hint(0008) Name: CreateToolbarEx
 Addr:000BD808 hint(0016) Name: ImageList_Create
 Addr:000BD81C hint(002D) Name: ImageList_ReplaceIcon
 Addr:000BD834 hint(0021) Name: ImageList_GetIcon
 Addr:80000011 hint(0011) Name: InitCommonControls

   Import Module 003: KERNEL32.dll

 Addr:000BD99C hint(006C) Name: ExitThread
 Addr:000BD9AA hint(0247) Name: TerminateThread
 Addr:000BD968 hint(00E7) Name: GetExitCodeThread
 Addr:000BD98C hint(01E2) Name: ResumeThread
 Addr:000BD97C hint(0241) Name: SuspendThread
 Addr:000BD92C hint(014F) Name: GetVolumeInformationA
 Addr:000BD954 hint(0233) Name: SetThreadPriority
 Addr:000BD944 hint(0043) Name: CreateThread
 Addr:000BD8FE hint(007E) Name: FindClose
 Addr:000BD91C hint(00DF) Name: GetDriveTypeA
 Addr:000BD90A hint(0082) Name: FindFirstFileA
 Addr:000BD8D6 hint(027B) Name: WriteFile
 Addr:000BD8F0 hint(004E) Name: DeleteFileA
 Addr:000BD8E2 hint(0018) Name: CloseHandle
 Addr:000BD8AA hint(0031) Name: CreateFileA
 Addr:000BD8C4 hint(0219) Name: SetFilePointer
 Addr:000BD8B8 hint(01D6) Name: ReadFile
 Addr:000BD878 hint(0098) Name: FreeLibrary
 Addr:000BD892 hint(00D1) Name: GetCurrentDirectoryA
 Addr:000BD886 hint(02A1) Name: lstrlenA
 Addr:000BD868 hint(0190) Name: LoadLibraryA
 Addr:000BE39C hint(0155) Name: GlobalAlloc
 Addr:000BE38E hint(0160) Name: GlobalLock
 Addr:000BE3AA hint(0145) Name: GetTickCount
 Addr:000BE370 hint(015C) Name: GlobalFree
 Addr:000BE360 hint(014D) Name: GetVersionExA
 Addr:000BE37E hint(0166) Name: GlobalUnlock
 Addr:000BE340 hint(018D) Name: LCMapStringA
 Addr:000BE32E hint(012E) Name: GetStringTypeW
 Addr:000BE350 hint(018E) Name: LCMapStringW
 Addr:000BE31C hint(012B) Name: GetStringTypeA
 Addr:000BE2FC hint(0180) Name: IsBadCodePtr
 Addr:000BE2EC hint(0186) Name: IsBadWritePtr
 Addr:000BE30C hint(025B) Name: VirtualAlloc
 Addr:000BE2BE hint(0236) Name: SetUnhandledExceptionFilter
 Addr:000BE2B0 hint(025E) Name: VirtualFree
 Addr:000BE2DC hint(0183) Name: IsBadReadPtr
 Addr:000BE294 hint(016C) Name: HeapDestroy
 Addr:000BE286 hint(00EF) Name: GetFileType
 Addr:000BE2A2 hint(016A) Name: HeapCreate
 Addr:000BE264 hint(021B) Name: SetHandleCount
 Addr:000BE258 hint(0109) Name: GetOEMCP
 Addr:000BE276 hint(012A) Name: GetStdHandle
 Addr:000BE242 hint(00A3) Name: GetCPInfo
 Addr:000BE22C hint(026E) Name: WideCharToMultiByte
 Addr:000BE24E hint(009D) Name: GetACP
 Addr:000BE1FA hint(00E1) Name: GetEnvironmentStrings
 Addr:000BE1E0 hint(0097) Name: FreeEnvironmentStringsW
 Addr:000BE212 hint(00E3) Name: GetEnvironmentStringsW
 Addr:000BE1B0 hint(0096) Name: FreeEnvironmentStringsA
 Addr:000BE19A hint(00FC) Name: GetModuleFileNameA
 Addr:000BE1CA hint(01AB) Name: MultiByteToWideChar
 Addr:000BE16C hint(0116) Name: GetProcAddress
 Addr:000BE160 hint(016E) Name: HeapFree
 Addr:000BE17E hint(0250) Name: UnhandledExceptionFilter
 Addr:000BE140 hint(00D3) Name: GetCurrentProcess
 Addr:000BE12C hint(0246) Name: TerminateProcess
 Addr:000BE154 hint(0172) Name: HeapSize
 Addr:000BE112 hint(0168) Name: HeapAlloc
 Addr:000BE104 hint(0171) Name: HeapReAlloc
 Addr:000BE11E hint(006B) Name: ExitProcess
 Addr:000BE0E4 hint(00AA) Name: GetCommandLineA
 Addr:000BE0D2 hint(0128) Name: GetStartupInfoA
 Addr:000BE0F6 hint(014C) Name: GetVersion
 Addr:000BE0BE hint(00FE) Name: GetModuleHandleA
 Addr:000BE0B2 hint(01E5) Name: RtlUnwind

   Import Module 004: USER32.dll

 Addr:000BDEC0 hint(00B0) Name: EnableMenuItem
 Addr:000BDED2 hint(010D) Name: GetMenuItemCount
 Addr:000BDEE6 hint(0030) Name: CheckMenuItem
 Addr:000BDEF6 hint(016B) Name: IsZoomed
 Addr:000BDF02 hint(020C) Name: SetScrollRange
 Addr:000BDEA6 hint(017E) Name: LoadMenuA
 Addr:000BDEB2 hint(0128) Name: GetSubMenu
 Addr:000BDB2C hint(0011) Name: CallNextHookEx
 Addr:000BDB1E hint(0172) Name: LoadCursorA
 Addr:000BDB12 hint(01EC) Name: SetCursor
 Addr:000BDB02 hint(01B1) Name: PostMessageA
 Addr:000BDAEC hint(01D8) Name: SendDlgItemMessageA
 Addr:000BDAE0 hint(00B4) Name: EndDialog
 Addr:000BDF14 hint(0125) Name: GetScrollPos
 Addr:000BDE80 hint(0089) Name: DestroyMenu
 Addr:000BDAA8 hint(005C) Name: DdeClientTransaction
 Addr:000BDA9C hint(0203) Name: SetParent
 Addr:000BDA8E hint(019D) Name: MoveWindow
 Addr:000BDB96 hint(021E) Name: SetWindowPos
 Addr:000BDA74 hint(00A5) Name: DrawIconEx
 Addr:000BDA5E hint(004B) Name: CreateDialogParamA
 Addr:000BDA4E hint(0251) Name: UpdateWindow
 Addr:000BDA42 hint(01F5) Name: SetFocus
 Addr:000BDA32 hint(01DA) Name: SendMessageA
 Addr:000BDA24 hint(0009) Name: BeginPaint
 Addr:000BDA18 hint(00B6) Name: EndPaint
 Addr:000BDA0A hint(00F3) Name: GetDlgItem
 Addr:000BD9F8 hint(0221) Name: SetWindowTextA
 Addr:000BD9F0 hint(00EE) Name: GetDC
 Addr:000BD9E4 hint(01CD) Name: ReleaseDC
 Addr:000BDE9C hint(01FB) Name: SetMenu
 Addr:000BDB3E hint(0152) Name: InvalidateRect
 Addr:000BDE50 hint(0108) Name: GetLastActivePopup
 Addr:000BDE72 hint(00CD) Name: FindWindowA
 Addr:000BDB50 hint(0248) Name: UnhookWindowsHookEx
 Addr:000BDE26 hint(0266) Name: wvsprintfA
 Addr:000BDE40 hint(022B) Name: ShowScrollBar
 Addr:000BDE34 hint(025E) Name: WinHelpA
 Addr:000BDB7A hint(0143) Name: GetWindowThreadProcessId
 Addr:000BDE1A hint(0167) Name: IsWindow
 Addr:000BDB66 hint(0225) Name: SetWindowsHookExA
 Addr:000BDDC0 hint(0001) Name: AdjustWindowRect
 Addr:000BDDE8 hint(0088) Name: DestroyIcon
 Addr:000BDDD4 hint(000A) Name: BringWindowToTop
 Addr:000BDD8C hint(016A) Name: IsWindowVisible
 Addr:000BDDAE hint(0080) Name: DefWindowProcA
 Addr:000BDD9E hint(020B) Name: SetScrollPos
 Addr:000BDD60 hint(00EB) Name: GetCursor
 Addr:000BDD7A hint(01E2) Name: SetActiveWindow
 Addr:000BDD6C hint(00D8) Name: GetCapture
 Addr:000BDD2E hint(0216) Name: SetTimer
 Addr:000BDD4E hint(0168) Name: IsWindowEnabled
 Addr:000BDD3A hint(012C) Name: GetSystemMetrics
 Addr:000BDD06 hint(00CC) Name: FillRect
 Addr:000BDD22 hint(016D) Name: KillTimer
 Addr:000BDD12 hint(00B2) Name: EnableWindow
 Addr:000BDCDA hint(00D5) Name: GetActiveWindow
 Addr:000BDCFC hint(0109) Name: GetMenu
 Addr:000BDCEC hint(0112) Name: GetMenuState
 Addr:000BDCAC hint(0087) Name: DestroyCursor
 Addr:000BDCCC hint(0229) Name: ShowCursor
 Addr:000BDCBC hint(01EE) Name: SetCursorPos
 Addr:000BDC7A hint(01D3) Name: ScreenToClient
 Addr:000BDC9C hint(013D) Name: GetWindowRect
 Addr:000BDC8C hint(00ED) Name: GetCursorPos
 Addr:000BDC46 hint(00F2) Name: GetDlgCtrlID
 Addr:000BDC68 hint(013A) Name: GetWindowLongA
 Addr:000BDC56 hint(021B) Name: SetWindowLongA
 Addr:000BDC14 hint(01E3) Name: SetCapture
 Addr:000BDC38 hint(0183) Name: LoadStringA
 Addr:000BDC22 hint(0198) Name: MessageBoxIndirectA
 Addr:000BDBDA hint(011D) Name: GetParent
 Addr:000BDBFE hint(013C) Name: GetWindowPlacement
 Addr:000BDBE6 hint(0033) Name: ChildWindowFromPoint
 Addr:000BDBA6 hint(0036) Name: ClientToScreen
 Addr:000BDBC8 hint(01CC) Name: ReleaseCapture
 Addr:000BDBB8 hint(00E4) Name: GetClientRect
 Addr:000BDACE hint(008E) Name: DialogBoxParamA
 Addr:000BDAC0 hint(0195) Name: MessageBoxA
 Addr:000BDA82 hint(0176) Name: LoadIconA
 Addr:000BE3BA hint(0090) Name: DispatchMessageA
 Addr:000BE3CE hint(0245) Name: TranslateMessage
 Addr:000BE3E2 hint(01AF) Name: PeekMessageA
 Addr:000BE3F2 hint(0234) Name: SystemParametersInfoA
 Addr:000BE40A hint(01B3) Name: PostQuitMessage
 Addr:000BE41C hint(008A) Name: DestroyWindow
 Addr:000BD9D6 hint(022D) Name: ShowWindow
 Addr:000BD9CA hint(0264) Name: wsprintfA
 Addr:000BDE66 hint(0164) Name: IsIconic
 Addr:000BDDF6 hint(0055) Name: CreateWindowExA
 Addr:000BDE08 hint(01BE) Name: RegisterClassA
 Addr:000BDE8E hint(00A6) Name: DrawMenuBar

   Import Module 005: GDI32.dll

 Addr:000BE55C hint(0035) Name: CreatePalette
 Addr:000BE56C hint(00FC) Name: GetSystemPaletteEntries
 Addr:000BE470 hint(0025) Name: CreateDIBitmap
 Addr:000BE4A6 hint(014A) Name: SelectObject
 Addr:000BE462 hint(0161) Name: SetMapMode
 Addr:000BE4B6 hint(0043) Name: DeleteDC
 Addr:000BE44E hint(00EF) Name: GetPaletteEntries
 Addr:000BE482 hint(001F) Name: CreateCompatibleDC
 Addr:000BDF3A hint(0046) Name: DeleteObject
 Addr:000BDF4A hint(0040) Name: CreateSolidBrush
 Addr:000BDF30 hint(0122) Name: PatBlt
 Addr:000BDF6C hint(00C7) Name: GetDeviceCaps
 Addr:000BDF7C hint(0036) Name: CreatePatternBrush
 Addr:000BDF5E hint(0150) Name: SetBkColor
 Addr:000BDFA2 hint(010B) Name: GetTextMetricsA
 Addr:000BDF92 hint(0019) Name: CreateBitmap
 Addr:000BE53A hint(00EA) Name: GetObjectA
 Addr:000BE548 hint(0156) Name: SetDIBColorTable
 Addr:000BE512 hint(016E) Name: SetStretchBltMode
 Addr:000BE500 hint(0006) Name: AnimatePalette
 Addr:000BE526 hint(0024) Name: CreateDIBSection
 Addr:000BE43E hint(014B) Name: SelectPalette
 Addr:000BE42C hint(0137) Name: RealizePalette
 Addr:000BE498 hint(002B) Name: CreateFontA
 Addr:000BE4E4 hint(0172) Name: SetTextColor
 Addr:000BE4F4 hint(0151) Name: SetBkMode
 Addr:000BE4C2 hint(000A) Name: BitBlt
 Addr:000BE4CC hint(00C6) Name: GetDIBits
 Addr:000BE4D8 hint(0183) Name: TextOutA

   Import Module 006: koeicda.dll

 Addr:000BE090 hint(0004) Name: CDAudioGetNumTracks
 Addr:000BE054 hint(0011) Name: CDAudioResume
 Addr:000BE044 hint(000E) Name: CDAudioPause
 Addr:000BE036 hint(0012) Name: CDAudioStop
 Addr:000BE078 hint(0005) Name: CDAudioGetPlayingPos
 Addr:000BE064 hint(000A) Name: CDAudioIsPlaying
 Addr:000BDFF6 hint(0013) Name: CDAudioTerminate
 Addr:000BDFE2 hint(0008) Name: CDAudioInitialize
 Addr:000BDFCC hint(0003) Name: CDAudioGetNumDrives
 Addr:000BDFBE hint(000D) Name: CDAudioOpen
 Addr:000BE00A hint(0010) Name: CDAudioPlayTrack
 Addr:000BE01E hint(0002) Name: CDAudioGetDriveLetter

+++++++++++++++++++ EXPORTED FUNCTIONS ++++++++++++++++++
Number of Exported Functions = 0000 (decimal)




+++++++++++++++++++ ASSEMBLY CODE LISTING ++++++++++++++++++
//********************** Start of Code in Object .text **************
Program Entry Point = 0046FD90 (Ekd3.exe File Offset:000E8D90)


:00401000 55                      push ebp
:00401001 8BEC                    mov ebp, esp
:00401003 83EC08                  sub esp, 00000008
:00401006 817D0820030000          cmp dword ptr [ebp+08], 00000320
:0040100D 7207                    jb 00401016
:0040100F 0CFF                    or al, FF
:00401011 E9C9000000              jmp 004010DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040100D(C)
|
:00401016 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401019 6BC950                  imul ecx, 00000050
:0040101C 81C1787F4900            add ecx, 00497F78
:00401022 E879210000              call 004031A0
:00401027 8845FC                  mov byte ptr [ebp-04], al
:0040102A 8B4508                  mov eax, dword ptr [ebp+08]
:0040102D 8945F8                  mov dword ptr [ebp-08], eax
:00401030 817DF896000000          cmp dword ptr [ebp-08], 00000096
:00401037 0F87A0000000            ja 004010DD
:0040103D 8B55F8                  mov edx, dword ptr [ebp-08]
:00401040 33C9                    xor ecx, ecx
:00401042 8A8A13114000            mov cl, byte ptr [edx+00401113]
:00401048 FF248DE3104000          jmp dword ptr [4*ecx+004010E3]
:0040104F 8B45FC                  mov eax, dword ptr [ebp-04]
:00401052 25FF000000              and eax, 000000FF
:00401057 F7D8                    neg eax
:00401059 1BC0                    sbb eax, eax
:0040105B F7D8                    neg eax
:0040105D 0594000000              add eax, 00000094
:00401062 EB7B                    jmp 004010DF
:00401064 8B45FC                  mov eax, dword ptr [ebp-04]
:00401067 25FF000000              and eax, 000000FF
:0040106C F7D8                    neg eax
:0040106E 1BC0                    sbb eax, eax
:00401070 F7D8                    neg eax
:00401072 0596000000              add eax, 00000096
:00401077 EB66                    jmp 004010DF
:00401079 8B45FC                  mov eax, dword ptr [ebp-04]
:0040107C 25FF000000              and eax, 000000FF
:00401081 33C9                    xor ecx, ecx
:00401083 83F802                  cmp eax, 00000002
:00401086 0F95C1                  setne cl
:00401089 81C198000000            add ecx, 00000098
:0040108F 8AC1                    mov al, cl
:00401091 EB4C                    jmp 004010DF
:00401093 8B55FC                  mov edx, dword ptr [ebp-04]
:00401096 81E2FF000000            and edx, 000000FF
:0040109C 33C0                    xor eax, eax
:0040109E 83FA06                  cmp edx, 00000006
:004010A1 0F95C0                  setne al
:004010A4 059A000000              add eax, 0000009A
:004010A9 EB34                    jmp 004010DF
:004010AB 8B45FC                  mov eax, dword ptr [ebp-04]
:004010AE 25FF000000              and eax, 000000FF
:004010B3 33C9                    xor ecx, ecx
:004010B5 83F814                  cmp eax, 00000014
:004010B8 0F95C1                  setne cl
:004010BB 81C19C000000            add ecx, 0000009C
:004010C1 8AC1                    mov al, cl
:004010C3 EB1A                    jmp 004010DF
:004010C5 B09E                    mov al, 9E
:004010C7 EB16                    jmp 004010DF
:004010C9 B09F                    mov al, 9F
:004010CB EB12                    jmp 004010DF
:004010CD B0A0                    mov al, A0
:004010CF EB0E                    jmp 004010DF
:004010D1 B0A1                    mov al, A1
:004010D3 EB0A                    jmp 004010DF
:004010D5 B0A2                    mov al, A2
:004010D7 EB06                    jmp 004010DF
:004010D9 B0A3                    mov al, A3
:004010DB EB02                    jmp 004010DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401037(C)
|
:004010DD 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401011(U), :00401062(U), :00401077(U), :00401091(U), :004010A9(U)
|:004010C3(U), :004010C7(U), :004010CB(U), :004010CF(U), :004010D3(U)
|:004010D7(U), :004010DB(U)
|
:004010DF 8BE5                    mov esp, ebp
:004010E1 5D                      pop ebp
:004010E2 C3                      ret



:004010E3 4F104000                DWORD 0040104F
:004010E7 79104000                DWORD 00401079
:004010EB 64104000                DWORD 00401064
:004010EF 93104000                DWORD 00401093
:004010F3 AB104000                DWORD 004010AB
:004010F7 D5104000                DWORD 004010D5
:004010FB D9104000                DWORD 004010D9
:004010FF C9104000                DWORD 004010C9
:00401103 C5104000                DWORD 004010C5
:00401107 D1104000                DWORD 004010D1
:0040110B CD104000                DWORD 004010CD
:0040110F DD104000                DWORD 004010DD


:00401113 0001                    add byte ptr [ecx], al
:00401115 0203                    add al, byte ptr [ebx]
:00401117 0B040B                  or eax, dword ptr [ebx+ecx]
:0040111A 0B0B                    or ecx, dword ptr [ebx]
:0040111C 0B0B                    or ecx, dword ptr [ebx]
:0040111E 0B0B                    or ecx, dword ptr [ebx]
:00401120 0B0B                    or ecx, dword ptr [ebx]
:00401122 0B0B                    or ecx, dword ptr [ebx]
:00401124 0B0B                    or ecx, dword ptr [ebx]
:00401126 0B0B                    or ecx, dword ptr [ebx]
:00401128 0B0B                    or ecx, dword ptr [ebx]
:0040112A 0B0B                    or ecx, dword ptr [ebx]
:0040112C 0B0B                    or ecx, dword ptr [ebx]
:0040112E 0B0B                    or ecx, dword ptr [ebx]
:00401130 0B0B                    or ecx, dword ptr [ebx]
:00401132 0B0B                    or ecx, dword ptr [ebx]
:00401134 0B0B                    or ecx, dword ptr [ebx]
:00401136 0B0B                    or ecx, dword ptr [ebx]
:00401138 0B0B                    or ecx, dword ptr [ebx]
:0040113A 0B0B                    or ecx, dword ptr [ebx]
:0040113C 0B0B                    or ecx, dword ptr [ebx]
:0040113E 0B0B                    or ecx, dword ptr [ebx]
:00401140 0B0B                    or ecx, dword ptr [ebx]
:00401142 0B0B                    or ecx, dword ptr [ebx]
:00401144 0B0B                    or ecx, dword ptr [ebx]
:00401146 0B0B                    or ecx, dword ptr [ebx]
:00401148 0B0B                    or ecx, dword ptr [ebx]
:0040114A 0B0B                    or ecx, dword ptr [ebx]
:0040114C 0B0B                    or ecx, dword ptr [ebx]
:0040114E 0B0B                    or ecx, dword ptr [ebx]
:00401150 0B0B                    or ecx, dword ptr [ebx]
:00401152 0B0B                    or ecx, dword ptr [ebx]
:00401154 0B0B                    or ecx, dword ptr [ebx]
:00401156 0B0B                    or ecx, dword ptr [ebx]
:00401158 0B0B                    or ecx, dword ptr [ebx]
:0040115A 0B0B                    or ecx, dword ptr [ebx]
:0040115C 0B0B                    or ecx, dword ptr [ebx]
:0040115E 0B0B                    or ecx, dword ptr [ebx]
:00401160 0B0B                    or ecx, dword ptr [ebx]
:00401162 0B0B                    or ecx, dword ptr [ebx]
:00401164 0B0B                    or ecx, dword ptr [ebx]
:00401166 0B0B                    or ecx, dword ptr [ebx]
:00401168 0B0B                    or ecx, dword ptr [ebx]
:0040116A 0B0B                    or ecx, dword ptr [ebx]
:0040116C 050B0B0B0B              add eax, 0B0B0B0B
:00401171 0B0B                    or ecx, dword ptr [ebx]
:00401173 0B0B                    or ecx, dword ptr [ebx]
:00401175 0B0B                    or ecx, dword ptr [ebx]
:00401177 0B0B                    or ecx, dword ptr [ebx]
:00401179 0B0B                    or ecx, dword ptr [ebx]
:0040117B 0B06                    or eax, dword ptr [esi]
:0040117D 07                      pop es
:0040117E 0B0B                    or ecx, dword ptr [ebx]
:00401180 0B0B                    or ecx, dword ptr [ebx]
:00401182 0B0B                    or ecx, dword ptr [ebx]
:00401184 0B0B                    or ecx, dword ptr [ebx]
:00401186 0B0B                    or ecx, dword ptr [ebx]
:00401188 0B0B                    or ecx, dword ptr [ebx]
:0040118A 0B0B                    or ecx, dword ptr [ebx]
:0040118C 0B0B                    or ecx, dword ptr [ebx]
:0040118E 0B0B                    or ecx, dword ptr [ebx]
:00401190 0B0B                    or ecx, dword ptr [ebx]
:00401192 0B0B                    or ecx, dword ptr [ebx]
:00401194 0809                    or byte ptr [ecx], cl
:00401196 0B0B                    or ecx, dword ptr [ebx]
:00401198 0B0B                    or ecx, dword ptr [ebx]
:0040119A 0B0B                    or ecx, dword ptr [ebx]
:0040119C 0B0B                    or ecx, dword ptr [ebx]
:0040119E 0B0B                    or ecx, dword ptr [ebx]
:004011A0 0B0B                    or ecx, dword ptr [ebx]
:004011A2 0B0B                    or ecx, dword ptr [ebx]
:004011A4 0B0B                    or ecx, dword ptr [ebx]
:004011A6 0B0B                    or ecx, dword ptr [ebx]
:004011A8 0B0A                    or ecx, dword ptr [edx]

* Referenced by a CALL at Addresses:
|:004249A3   , :004320B9   , :00458A31   , :0046BE14   
|
:004011AA 55                      push ebp
:004011AB 8BEC                    mov ebp, esp
:004011AD 83EC08                  sub esp, 00000008
:004011B0 894DF8                  mov dword ptr [ebp-08], ecx
:004011B3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004011B6 E8C51F0000              call 00403180
:004011BB 50                      push eax
:004011BC E83FFEFFFF              call 00401000
:004011C1 83C404                  add esp, 00000004
:004011C4 8845FC                  mov byte ptr [ebp-04], al
:004011C7 8B45FC                  mov eax, dword ptr [ebp-04]
:004011CA 25FF000000              and eax, 000000FF
:004011CF 3DFF000000              cmp eax, 000000FF
:004011D4 752F                    jne 00401205
:004011D6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004011D9 E8C21F0000              call 004031A0
:004011DE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004011E1 E8BA1F0000              call 004031A0
:004011E6 25FF000000              and eax, 000000FF
:004011EB 3D94000000              cmp eax, 00000094
:004011F0 7D13                    jge 00401205
:004011F2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004011F5 E8A61F0000              call 004031A0
:004011FA 25FF000000              and eax, 000000FF
:004011FF 83E802                  sub eax, 00000002
:00401202 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004011D4(C), :004011F0(C)
|
:00401205 8A45FC                  mov al, byte ptr [ebp-04]
:00401208 8BE5                    mov esp, ebp
:0040120A 5D                      pop ebp
:0040120B C3                      ret



* Referenced by a CALL at Addresses:
|:004047C6   , :004159DB   , :004394E6   , :0043955A   
|
:0040120C 55                      push ebp
:0040120D 8BEC                    mov ebp, esp
:0040120F 817D0820030000          cmp dword ptr [ebp+08], 00000320
:00401216 7204                    jb 0040121C
:00401218 33C0                    xor eax, eax
:0040121A EB11                    jmp 0040122D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401216(C)
|
:0040121C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040121F 6BC950                  imul ecx, 00000050
:00401222 81C1787F4900            add ecx, 00497F78
:00401228 E8D71E0000              call 00403104

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040121A(U)
|
:0040122D 5D                      pop ebp
:0040122E C3                      ret



* Referenced by a CALL at Addresses:
|:0041FA49   , :004611F7   , :004612BD   
|
:0040122F 55                      push ebp
:00401230 8BEC                    mov ebp, esp
:00401232 8B4508                  mov eax, dword ptr [ebp+08]
:00401235 80E40F                  and ah, 0F
:00401238 5D                      pop ebp
:00401239 C3                      ret



* Referenced by a CALL at Addresses:
|:00401404   , :0040255F   , :0040260F   , :0042B547   , :0042B927   
|:0046D0B3   , :0046D0C1   , :0046D2C8   
|
:0040123A 55                      push ebp
:0040123B 8BEC                    mov ebp, esp
:0040123D 83EC0C                  sub esp, 0000000C
:00401240 894DF8                  mov dword ptr [ebp-08], ecx
:00401243 C645FCFF                mov [ebp-04], FF
:00401247 8B4508                  mov eax, dword ptr [ebp+08]
:0040124A 8945F4                  mov dword ptr [ebp-0C], eax
:0040124D 837DF410                cmp dword ptr [ebp-0C], 00000010
:00401251 0F873B010000            ja 00401392
:00401257 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040125A FF248D9A134000          jmp dword ptr [4*ecx+0040139A]
:00401261 8B55F8                  mov edx, dword ptr [ebp-08]
:00401264 33C0                    xor eax, eax
:00401266 8A4228                  mov al, byte ptr [edx+28]
:00401269 E926010000              jmp 00401394
:0040126E 8B45F8                  mov eax, dword ptr [ebp-08]
:00401271 33C9                    xor ecx, ecx
:00401273 8A4829                  mov cl, byte ptr [eax+29]
:00401276 8BC1                    mov eax, ecx
:00401278 E917010000              jmp 00401394
:0040127D 8B55F8                  mov edx, dword ptr [ebp-08]
:00401280 33C0                    xor eax, eax
:00401282 8A422A                  mov al, byte ptr [edx+2A]
:00401285 E90A010000              jmp 00401394
:0040128A 8B45F8                  mov eax, dword ptr [ebp-08]
:0040128D 33C9                    xor ecx, ecx
:0040128F 8A482B                  mov cl, byte ptr [eax+2B]
:00401292 8BC1                    mov eax, ecx
:00401294 E9FB000000              jmp 00401394
:00401299 8B55F8                  mov edx, dword ptr [ebp-08]
:0040129C 33C0                    xor eax, eax
:0040129E 8A422C                  mov al, byte ptr [edx+2C]
:004012A1 E9EE000000              jmp 00401394
:004012A6 8B45F8                  mov eax, dword ptr [ebp-08]
:004012A9 33C9                    xor ecx, ecx
:004012AB 8A482D                  mov cl, byte ptr [eax+2D]
:004012AE 8BC1                    mov eax, ecx
:004012B0 E9DF000000              jmp 00401394
:004012B5 8B55F8                  mov edx, dword ptr [ebp-08]
:004012B8 33C0                    xor eax, eax
:004012BA 8A422E                  mov al, byte ptr [edx+2E]
:004012BD E9D2000000              jmp 00401394
:004012C2 8B45F8                  mov eax, dword ptr [ebp-08]
:004012C5 8B4008                  mov eax, dword ptr [eax+08]
:004012C8 E9C7000000              jmp 00401394
:004012CD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004012D0 33C0                    xor eax, eax
:004012D2 8A4133                  mov al, byte ptr [ecx+33]
:004012D5 E9BA000000              jmp 00401394
:004012DA 8B55F8                  mov edx, dword ptr [ebp-08]
:004012DD 33C0                    xor eax, eax
:004012DF 8A4231                  mov al, byte ptr [edx+31]
:004012E2 E9AD000000              jmp 00401394
:004012E7 8B45F8                  mov eax, dword ptr [ebp-08]
:004012EA 33C9                    xor ecx, ecx
:004012EC 8A4832                  mov cl, byte ptr [eax+32]
:004012EF 8BC1                    mov eax, ecx
:004012F1 E99E000000              jmp 00401394
:004012F6 8B55F8                  mov edx, dword ptr [ebp-08]
:004012F9 8B4204                  mov eax, dword ptr [edx+04]
:004012FC E993000000              jmp 00401394
:00401301 8B45F8                  mov eax, dword ptr [ebp-08]
:00401304 33C9                    xor ecx, ecx
:00401306 8A4802                  mov cl, byte ptr [eax+02]
:00401309 8BC1                    mov eax, ecx
:0040130B E984000000              jmp 00401394
:00401310 8B55F8                  mov edx, dword ptr [ebp-08]
:00401313 33C0                    xor eax, eax
:00401315 8A4230                  mov al, byte ptr [edx+30]
:00401318 EB7A                    jmp 00401394
:0040131A 8B45F8                  mov eax, dword ptr [ebp-08]
:0040131D 33C9                    xor ecx, ecx
:0040131F 8A482F                  mov cl, byte ptr [eax+2F]
:00401322 8BC1                    mov eax, ecx
:00401324 EB6E                    jmp 00401394
:00401326 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401329 E8C79E0600              call 0046B1F5
:0040132E 8845FC                  mov byte ptr [ebp-04], al
:00401331 8B55FC                  mov edx, dword ptr [ebp-04]
:00401334 81E2FF000000            and edx, 000000FF
:0040133A 81FAFF000000            cmp edx, 000000FF
:00401340 7419                    je 0040135B
:00401342 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401345 81E1FF000000            and ecx, 000000FF
:0040134B 6BC924                  imul ecx, 00000024
:0040134E 81C1B83B4B00            add ecx, 004B3BB8
:00401354 E8871F0000              call 004032E0
:00401359 EB39                    jmp 00401394

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401340(C)
|
:0040135B 33C0                    xor eax, eax
:0040135D EB35                    jmp 00401394
:0040135F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401362 E88E9E0600              call 0046B1F5
:00401367 8845FC                  mov byte ptr [ebp-04], al
:0040136A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040136D 25FF000000              and eax, 000000FF
:00401372 3DFF000000              cmp eax, 000000FF
:00401377 7419                    je 00401392
:00401379 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040137C 81E1FF000000            and ecx, 000000FF
:00401382 6BC924                  imul ecx, 00000024
:00401385 81C1B83B4B00            add ecx, 004B3BB8
:0040138B E8701F0000              call 00403300
:00401390 EB02                    jmp 00401394

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401251(C), :00401377(C)
|
:00401392 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401269(U), :00401278(U), :00401285(U), :00401294(U), :004012A1(U)
|:004012B0(U), :004012BD(U), :004012C8(U), :004012D5(U), :004012E2(U)
|:004012F1(U), :004012FC(U), :0040130B(U), :00401318(U), :00401324(U)
|:00401359(U), :0040135D(U), :00401390(U)
|
:00401394 8BE5                    mov esp, ebp
:00401396 5D                      pop ebp
:00401397 C20400                  ret 0004



:0040139A 61124000                DWORD 00401261
:0040139E 6E124000                DWORD 0040126E
:004013A2 7D124000                DWORD 0040127D
:004013A6 8A124000                DWORD 0040128A
:004013AA C2124000                DWORD 004012C2
:004013AE 99124000                DWORD 00401299
:004013B2 A6124000                DWORD 004012A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013A2(C)
|
:004013B6 B5124000                DWORD 004012B5
:004013BA E7124000                DWORD 004012E7
:004013BE CD124000                DWORD 004012CD
:004013C2 F6124000                DWORD 004012F6
:004013C6 01134000                DWORD 00401301
:004013CA 10134000                DWORD 00401310
:004013CE 1A134000                DWORD 0040131A
:004013D2 DA124000                DWORD 004012DA
:004013D6 26134000                DWORD 00401326
:004013DA 5F134000                DWORD 0040135F



* Referenced by a CALL at Addresses:
|:00404AA9   , :004074C5   , :004089BD   , :0044A88E   
|
:004013DE 55                      push ebp
:004013DF 8BEC                    mov ebp, esp
:004013E1 817D0820030000          cmp dword ptr [ebp+08], 00000320
:004013E8 7306                    jnb 004013F0
:004013EA 837D0C11                cmp dword ptr [ebp+0C], 00000011
:004013EE 7604                    jbe 004013F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013E8(C)
|
:004013F0 33C0                    xor eax, eax
:004013F2 EB15                    jmp 00401409

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013EE(C)
|
:004013F4 8B450C                  mov eax, dword ptr [ebp+0C]
:004013F7 50                      push eax
:004013F8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004013FB 6BC950                  imul ecx, 00000050
:004013FE 81C1787F4900            add ecx, 00497F78
:00401404 E831FEFFFF              call 0040123A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004013F2(U)
|
:00401409 5D                      pop ebp
:0040140A C3                      ret



* Referenced by a CALL at Addresses:
|:004018CE   , :00401908   
|
:0040140B 55                      push ebp
:0040140C 8BEC                    mov ebp, esp
:0040140E 83EC10                  sub esp, 00000010
:00401411 894DF4                  mov dword ptr [ebp-0C], ecx
:00401414 C745FC00000000          mov [ebp-04], 00000000
:0040141B C645F8FF                mov [ebp-08], FF
:0040141F 8B4508                  mov eax, dword ptr [ebp+08]
:00401422 8945F0                  mov dword ptr [ebp-10], eax
:00401425 837DF010                cmp dword ptr [ebp-10], 00000010
:00401429 0F8728040000            ja 00401857
:0040142F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00401432 FF248D5D184000          jmp dword ptr [4*ecx+0040185D]
:00401439 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401440 741D                    je 0040145F
:00401442 68FF000000              push 000000FF
:00401447 8B5510                  mov edx, dword ptr [ebp+10]
:0040144A 52                      push edx
:0040144B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040144E 33C9                    xor ecx, ecx
:00401450 8A4828                  mov cl, byte ptr [eax+28]
:00401453 51                      push ecx
:00401454 E8A76E0700              call 00478300
:00401459 83C40C                  add esp, 0000000C
:0040145C 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401440(C)
|
:0040145F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401462 8A450C                  mov al, byte ptr [ebp+0C]
:00401465 884228                  mov byte ptr [edx+28], al
:00401468 E9EA030000              jmp 00401857
:0040146D 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401474 741D                    je 00401493
:00401476 68FF000000              push 000000FF
:0040147B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0040147E 51                      push ecx
:0040147F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401482 33C0                    xor eax, eax
:00401484 8A4229                  mov al, byte ptr [edx+29]
:00401487 50                      push eax
:00401488 E8736E0700              call 00478300
:0040148D 83C40C                  add esp, 0000000C
:00401490 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401474(C)
|
:00401493 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401496 8A550C                  mov dl, byte ptr [ebp+0C]
:00401499 885129                  mov byte ptr [ecx+29], dl
:0040149C E9B6030000              jmp 00401857
:004014A1 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004014A8 741D                    je 004014C7
:004014AA 68FF000000              push 000000FF
:004014AF 8B4510                  mov eax, dword ptr [ebp+10]
:004014B2 50                      push eax
:004014B3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004014B6 33D2                    xor edx, edx
:004014B8 8A512A                  mov dl, byte ptr [ecx+2A]
:004014BB 52                      push edx
:004014BC E83F6E0700              call 00478300
:004014C1 83C40C                  add esp, 0000000C
:004014C4 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004014A8(C)
|
:004014C7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004014CA 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004014CD 88482A                  mov byte ptr [eax+2A], cl
:004014D0 E982030000              jmp 00401857
:004014D5 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004014DC 741D                    je 004014FB
:004014DE 68FF000000              push 000000FF
:004014E3 8B5510                  mov edx, dword ptr [ebp+10]
:004014E6 52                      push edx
:004014E7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004014EA 33C9                    xor ecx, ecx
:004014EC 8A482B                  mov cl, byte ptr [eax+2B]
:004014EF 51                      push ecx
:004014F0 E80B6E0700              call 00478300
:004014F5 83C40C                  add esp, 0000000C
:004014F8 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004014DC(C)
|
:004014FB 8B55F4                  mov edx, dword ptr [ebp-0C]
:004014FE 8A450C                  mov al, byte ptr [ebp+0C]
:00401501 88422B                  mov byte ptr [edx+2B], al
:00401504 E94E030000              jmp 00401857
:00401509 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401510 741D                    je 0040152F
:00401512 68FF000000              push 000000FF
:00401517 8B4D10                  mov ecx, dword ptr [ebp+10]
:0040151A 51                      push ecx
:0040151B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040151E 33C0                    xor eax, eax
:00401520 8A422C                  mov al, byte ptr [edx+2C]
:00401523 50                      push eax
:00401524 E8D76D0700              call 00478300
:00401529 83C40C                  add esp, 0000000C
:0040152C 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401510(C)
|
:0040152F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401532 8A550C                  mov dl, byte ptr [ebp+0C]
:00401535 88512C                  mov byte ptr [ecx+2C], dl
:00401538 E91A030000              jmp 00401857
:0040153D 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401544 741D                    je 00401563
:00401546 68FF000000              push 000000FF
:0040154B 8B4510                  mov eax, dword ptr [ebp+10]
:0040154E 50                      push eax
:0040154F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401552 33D2                    xor edx, edx
:00401554 8A512D                  mov dl, byte ptr [ecx+2D]
:00401557 52                      push edx
:00401558 E8A36D0700              call 00478300
:0040155D 83C40C                  add esp, 0000000C
:00401560 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401544(C)
|
:00401563 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401566 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00401569 88482D                  mov byte ptr [eax+2D], cl
:0040156C E9E6020000              jmp 00401857
:00401571 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401578 741D                    je 00401597
:0040157A 68FF000000              push 000000FF
:0040157F 8B5510                  mov edx, dword ptr [ebp+10]
:00401582 52                      push edx
:00401583 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401586 33C9                    xor ecx, ecx
:00401588 8A482E                  mov cl, byte ptr [eax+2E]
:0040158B 51                      push ecx
:0040158C E86F6D0700              call 00478300
:00401591 83C40C                  add esp, 0000000C
:00401594 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401578(C)
|
:00401597 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040159A 8A450C                  mov al, byte ptr [ebp+0C]
:0040159D 88422E                  mov byte ptr [edx+2E], al
:004015A0 E9B2020000              jmp 00401857
:004015A5 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004015AC 741B                    je 004015C9
:004015AE 68E8030000              push 000003E8
:004015B3 8B4D10                  mov ecx, dword ptr [ebp+10]
:004015B6 51                      push ecx
:004015B7 8B55F4                  mov edx, dword ptr [ebp-0C]
:004015BA 8B4208                  mov eax, dword ptr [edx+08]
:004015BD 50                      push eax
:004015BE E83D6D0700              call 00478300
:004015C3 83C40C                  add esp, 0000000C
:004015C6 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004015AC(C)
|
:004015C9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004015CC 8B550C                  mov edx, dword ptr [ebp+0C]
:004015CF 895108                  mov dword ptr [ecx+08], edx
:004015D2 E980020000              jmp 00401857
:004015D7 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004015DE 741A                    je 004015FA
:004015E0 6A63                    push 00000063
:004015E2 8B4510                  mov eax, dword ptr [ebp+10]
:004015E5 50                      push eax
:004015E6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004015E9 33D2                    xor edx, edx
:004015EB 8A5132                  mov dl, byte ptr [ecx+32]
:004015EE 52                      push edx
:004015EF E80C6D0700              call 00478300
:004015F4 83C40C                  add esp, 0000000C
:004015F7 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004015DE(C)
|
:004015FA 8B45F4                  mov eax, dword ptr [ebp-0C]
:004015FD 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00401600 884832                  mov byte ptr [eax+32], cl
:00401603 E94F020000              jmp 00401857
:00401608 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:0040160F 741D                    je 0040162E
:00401611 68FF000000              push 000000FF
:00401616 8B5510                  mov edx, dword ptr [ebp+10]
:00401619 52                      push edx
:0040161A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040161D 33C9                    xor ecx, ecx
:0040161F 8A4831                  mov cl, byte ptr [eax+31]
:00401622 51                      push ecx
:00401623 E8D86C0700              call 00478300
:00401628 83C40C                  add esp, 0000000C
:0040162B 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040160F(C)
|
:0040162E 837D0C20                cmp dword ptr [ebp+0C], 00000020
:00401632 7309                    jnb 0040163D
:00401634 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401637 8A450C                  mov al, byte ptr [ebp+0C]
:0040163A 884231                  mov byte ptr [edx+31], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401632(C)
|
:0040163D E915020000              jmp 00401857
:00401642 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401649 741B                    je 00401666
:0040164B 684C010000              push 0000014C
:00401650 8B4D10                  mov ecx, dword ptr [ebp+10]
:00401653 51                      push ecx
:00401654 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401657 8B4204                  mov eax, dword ptr [edx+04]
:0040165A 50                      push eax
:0040165B E8A06C0700              call 00478300
:00401660 83C40C                  add esp, 0000000C
:00401663 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401649(C)
|
:00401666 817D0C4C010000          cmp dword ptr [ebp+0C], 0000014C
:0040166D 7309                    jnb 00401678
:0040166F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401672 8B550C                  mov edx, dword ptr [ebp+0C]
:00401675 895104                  mov dword ptr [ecx+04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040166D(C)
|
:00401678 E9DA010000              jmp 00401857
:0040167D 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00401684 741A                    je 004016A0
:00401686 6A4C                    push 0000004C
:00401688 8B4510                  mov eax, dword ptr [ebp+10]
:0040168B 50                      push eax
:0040168C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040168F 33D2                    xor edx, edx
:00401691 8A5102                  mov dl, byte ptr [ecx+02]
:00401694 52                      push edx
:00401695 E8666C0700              call 00478300
:0040169A 83C40C                  add esp, 0000000C
:0040169D 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401684(C)
|
:004016A0 837D0C4C                cmp dword ptr [ebp+0C], 0000004C
:004016A4 7309                    jnb 004016AF
:004016A6 8B45F4                  mov eax, dword ptr [ebp-0C]
:004016A9 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004016AC 884802                  mov byte ptr [eax+02], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004016A4(C)
|
:004016AF E9A3010000              jmp 00401857
:004016B4 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004016BB 741A                    je 004016D7
:004016BD 6A13                    push 00000013
:004016BF 8B5510                  mov edx, dword ptr [ebp+10]
:004016C2 52                      push edx
:004016C3 8B45F4                  mov eax, dword ptr [ebp-0C]
:004016C6 33C9                    xor ecx, ecx
:004016C8 8A4830                  mov cl, byte ptr [eax+30]
:004016CB 51                      push ecx
:004016CC E82F6C0700              call 00478300
:004016D1 83C40C                  add esp, 0000000C
:004016D4 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004016BB(C)
|
:004016D7 837D0C13                cmp dword ptr [ebp+0C], 00000013
:004016DB 7309                    jnb 004016E6
:004016DD 8B55F4                  mov edx, dword ptr [ebp-0C]
:004016E0 8A450C                  mov al, byte ptr [ebp+0C]
:004016E3 884230                  mov byte ptr [edx+30], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004016DB(C)
|
:004016E6 E96C010000              jmp 00401857
:004016EB 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004016F2 741A                    je 0040170E
:004016F4 6A0E                    push 0000000E
:004016F6 8B4D10                  mov ecx, dword ptr [ebp+10]
:004016F9 51                      push ecx
:004016FA 8B55F4                  mov edx, dword ptr [ebp-0C]
:004016FD 33C0                    xor eax, eax
:004016FF 8A422F                  mov al, byte ptr [edx+2F]
:00401702 50                      push eax
:00401703 E8F86B0700              call 00478300
:00401708 83C40C                  add esp, 0000000C
:0040170B 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004016F2(C)
|
:0040170E 837D0C0E                cmp dword ptr [ebp+0C], 0000000E
:00401712 7309                    jnb 0040171D
:00401714 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401717 8A550C                  mov dl, byte ptr [ebp+0C]
:0040171A 88512F                  mov byte ptr [ecx+2F], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401712(C)
|
:0040171D E935010000              jmp 00401857
:00401722 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401725 E8CB9A0600              call 0046B1F5
:0040172A 8845F8                  mov byte ptr [ebp-08], al
:0040172D 8B45F8                  mov eax, dword ptr [ebp-08]
:00401730 25FF000000              and eax, 000000FF
:00401735 3DFF000000              cmp eax, 000000FF
:0040173A 741A                    je 00401756
:0040173C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040173F 81E1FF000000            and ecx, 000000FF
:00401745 6BC924                  imul ecx, 00000024
:00401748 81C1B83B4B00            add ecx, 004B3BB8
:0040174E E88D1B0000              call 004032E0
:00401753 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040173A(C)
|
:00401756 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:0040175D 7415                    je 00401774
:0040175F 6A0E                    push 0000000E
:00401761 8B4D10                  mov ecx, dword ptr [ebp+10]
:00401764 51                      push ecx
:00401765 8B55FC                  mov edx, dword ptr [ebp-04]
:00401768 52                      push edx
:00401769 E8926B0700              call 00478300
:0040176E 83C40C                  add esp, 0000000C
:00401771 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040175D(C)
|
:00401774 8B45F8                  mov eax, dword ptr [ebp-08]
:00401777 25FF000000              and eax, 000000FF
:0040177C 3DFF000000              cmp eax, 000000FF
:00401781 741B                    je 0040179E
:00401783 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00401786 51                      push ecx
:00401787 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040178A 81E1FF000000            and ecx, 000000FF
:00401790 6BC924                  imul ecx, 00000024
:00401793 81C1B83B4B00            add ecx, 004B3BB8
:00401799 E8771A0300              call 00433215

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401781(C)
|
:0040179E E9B4000000              jmp 00401857
:004017A3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004017A6 E84A9A0600              call 0046B1F5
:004017AB 8845F8                  mov byte ptr [ebp-08], al
:004017AE 8B55F8                  mov edx, dword ptr [ebp-08]
:004017B1 81E2FF000000            and edx, 000000FF
:004017B7 81FAFF000000            cmp edx, 000000FF
:004017BD 741A                    je 004017D9
:004017BF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004017C2 81E1FF000000            and ecx, 000000FF
:004017C8 6BC924                  imul ecx, 00000024
:004017CB 81C1B83B4B00            add ecx, 004B3BB8
:004017D1 E82A1B0000              call 00403300
:004017D6 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004017BD(C)
|
:004017D9 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004017E0 7415                    je 004017F7
:004017E2 6A0E                    push 0000000E
:004017E4 8B4510                  mov eax, dword ptr [ebp+10]
:004017E7 50                      push eax
:004017E8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004017EB 51                      push ecx
:004017EC E80F6B0700              call 00478300
:004017F1 83C40C                  add esp, 0000000C
:004017F4 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004017E0(C)
|
:004017F7 8B55F8                  mov edx, dword ptr [ebp-08]
:004017FA 81E2FF000000            and edx, 000000FF
:00401800 81FAFF000000            cmp edx, 000000FF
:00401806 741B                    je 00401823
:00401808 8B450C                  mov eax, dword ptr [ebp+0C]
:0040180B 50                      push eax
:0040180C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040180F 81E1FF000000            and ecx, 000000FF
:00401815 6BC924                  imul ecx, 00000024
:00401818 81C1B83B4B00            add ecx, 004B3BB8
:0040181E E8331A0300              call 00433256

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401806(C)
|
:00401823 EB32                    jmp 00401857
:00401825 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:0040182C 741A                    je 00401848
:0040182E 6A64                    push 00000064
:00401830 8B4D10                  mov ecx, dword ptr [ebp+10]
:00401833 51                      push ecx
:00401834 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401837 33C0                    xor eax, eax
:00401839 8A4233                  mov al, byte ptr [edx+33]
:0040183C 50                      push eax
:0040183D E8BE6A0700              call 00478300
:00401842 83C40C                  add esp, 0000000C
:00401845 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040182C(C)
|
:00401848 837D0C64                cmp dword ptr [ebp+0C], 00000064
:0040184C 7309                    jnb 00401857
:0040184E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401851 8A550C                  mov dl, byte ptr [ebp+0C]
:00401854 885133                  mov byte ptr [ecx+33], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401429(C), :00401468(U), :0040149C(U), :004014D0(U), :00401504(U)
|:00401538(U), :0040156C(U), :004015A0(U), :004015D2(U), :00401603(U)
|:0040163D(U), :00401678(U), :004016AF(U), :004016E6(U), :0040171D(U)
|:0040179E(U), :00401823(U), :0040184C(C)
|
:00401857 8BE5                    mov esp, ebp
:00401859 5D                      pop ebp
:0040185A C20C00                  ret 000C



:0040185D 39144000                DWORD 00401439
:00401861 6D144000                DWORD 0040146D
:00401865 A1144000                DWORD 004014A1
:00401869 D5144000                DWORD 004014D5
:0040186D A5154000                DWORD 004015A5
:00401871 09154000                DWORD 00401509
:00401875 3D154000                DWORD 0040153D
:00401879 71154000                DWORD 00401571
:0040187D D7154000                DWORD 004015D7
:00401881 25184000                DWORD 00401825
:00401885 42164000                DWORD 00401642
:00401889 7D164000                DWORD 0040167D
:0040188D B4164000                DWORD 004016B4
:00401891 EB164000                DWORD 004016EB
:00401895 08164000                DWORD 00401608
:00401899 22174000                DWORD 00401722
:0040189D A3174000                DWORD 004017A3



* Referenced by a CALL at Addresses:
|:00404AC0   , :0040897F   , :004089F3   , :0040B03F   
|
:004018A1 55                      push ebp
:004018A2 8BEC                    mov ebp, esp
:004018A4 817D0820030000          cmp dword ptr [ebp+08], 00000320
:004018AB 7706                    ja 004018B3
:004018AD 837D0C11                cmp dword ptr [ebp+0C], 00000011
:004018B1 7602                    jbe 004018B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018AB(C)
|
:004018B3 EB1E                    jmp 004018D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018B1(C)
|
:004018B5 68FFFF0000              push 0000FFFF
:004018BA 8B4510                  mov eax, dword ptr [ebp+10]
:004018BD 50                      push eax
:004018BE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004018C1 51                      push ecx
:004018C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004018C5 6BC950                  imul ecx, 00000050
:004018C8 81C1787F4900            add ecx, 00497F78
:004018CE E838FBFFFF              call 0040140B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018B3(U)
|
:004018D3 5D                      pop ebp
:004018D4 C3                      ret



* Referenced by a CALL at Addresses:
|:00401B88   , :004089A0   , :00433F5A   
|
:004018D5 55                      push ebp
:004018D6 8BEC                    mov ebp, esp
:004018D8 817D0820030000          cmp dword ptr [ebp+08], 00000320
:004018DF 770F                    ja 004018F0
:004018E1 837D0C11                cmp dword ptr [ebp+0C], 00000011
:004018E5 7709                    ja 004018F0
:004018E7 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:004018EE 7502                    jne 004018F2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004018DF(C), :004018E5(C)
|
:004018F0 EB1B                    jmp 0040190D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018EE(C)
|
:004018F2 8B4510                  mov eax, dword ptr [ebp+10]
:004018F5 50                      push eax
:004018F6 6A00                    push 00000000
:004018F8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004018FB 51                      push ecx
:004018FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004018FF 6BC950                  imul ecx, 00000050
:00401902 81C1787F4900            add ecx, 00497F78
:00401908 E8FEFAFFFF              call 0040140B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004018F0(U)
|
:0040190D 5D                      pop ebp
:0040190E C3                      ret


:0040190F 55                      push ebp
:00401910 8BEC                    mov ebp, esp
:00401912 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401915 6BC922                  imul ecx, 00000022
:00401918 81C1D0474900            add ecx, 004947D0
:0040191E E81D190000              call 00403240
:00401923 5D                      pop ebp
:00401924 C3                      ret



* Referenced by a CALL at Addresses:
|:00401C91   , :0043403E   
|
:00401925 55                      push ebp
:00401926 8BEC                    mov ebp, esp
:00401928 51                      push ecx
:00401929 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040192C 6BC922                  imul ecx, 00000022
:0040192F 81C1D0474900            add ecx, 004947D0
:00401935 E826E50000              call 0040FE60
:0040193A 8845FC                  mov byte ptr [ebp-04], al
:0040193D 8B45FC                  mov eax, dword ptr [ebp-04]
:00401940 25FF000000              and eax, 000000FF
:00401945 83F811                  cmp eax, 00000011
:00401948 7F04                    jg 0040194E
:0040194A 32C0                    xor al, al
:0040194C EB52                    jmp 004019A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401948(C)
|
:0040194E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401951 81E1FF000000            and ecx, 000000FF
:00401957 83F91B                  cmp ecx, 0000001B
:0040195A 7C04                    jl 00401960
:0040195C B009                    mov al, 09
:0040195E EB40                    jmp 004019A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040195A(C)
|
:00401960 8B55FC                  mov edx, dword ptr [ebp-04]
:00401963 81E2FF000000            and edx, 000000FF
:00401969 83FA25                  cmp edx, 00000025
:0040196C 7C04                    jl 00401972
:0040196E B00A                    mov al, 0A
:00401970 EB2E                    jmp 004019A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040196C(C)
|
:00401972 8B45FC                  mov eax, dword ptr [ebp-04]
:00401975 25FF000000              and eax, 000000FF
:0040197A 83F819                  cmp eax, 00000019
:0040197D 7504                    jne 00401983
:0040197F B007                    mov al, 07
:00401981 EB1D                    jmp 004019A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040197D(C)
|
:00401983 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401986 81E1FF000000            and ecx, 000000FF
:0040198C 83F91A                  cmp ecx, 0000001A
:0040198F 7504                    jne 00401995
:00401991 B008                    mov al, 08
:00401993 EB0B                    jmp 004019A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040198F(C)
|
:00401995 8B45FC                  mov eax, dword ptr [ebp-04]
:00401998 25FF000000              and eax, 000000FF
:0040199D 83E811                  sub eax, 00000011

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040194C(U), :0040195E(U), :00401970(U), :00401981(U), :00401993(U)
|
:004019A0 8BE5                    mov esp, ebp
:004019A2 5D                      pop ebp
:004019A3 C3                      ret



* Referenced by a CALL at Address:
|:004343DF   
|
:004019A4 55                      push ebp
:004019A5 8BEC                    mov ebp, esp
:004019A7 51                      push ecx
:004019A8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004019AB 6BC950                  imul ecx, 00000050
:004019AE 81C1787F4900            add ecx, 00497F78
:004019B4 E8E7170000              call 004031A0
:004019B9 8845FC                  mov byte ptr [ebp-04], al
:004019BC 8B45FC                  mov eax, dword ptr [ebp-04]
:004019BF 25FF000000              and eax, 000000FF
:004019C4 83F820                  cmp eax, 00000020
:004019C7 7D0F                    jge 004019D8
:004019C9 8B45FC                  mov eax, dword ptr [ebp-04]
:004019CC 25FF000000              and eax, 000000FF
:004019D1 99                      cdq
:004019D2 2BC2                    sub eax, edx
:004019D4 D1F8                    sar eax, 1
:004019D6 EB02                    jmp 004019DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004019C7(C)
|
:004019D8 B010                    mov al, 10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004019D6(U)
|
:004019DA 8BE5                    mov esp, ebp
:004019DC 5D                      pop ebp
:004019DD C3                      ret



* Referenced by a CALL at Addresses:
|:00401AD4   , :00401BF8   , :0040B071   , :004137C8   , :004341A7   
|:00439824   , :0043AC83   , :004524E2   
|
:004019DE 55                      push ebp
:004019DF 8BEC                    mov ebp, esp
:004019E1 83EC08                  sub esp, 00000008
:004019E4 894DF8                  mov dword ptr [ebp-08], ecx
:004019E7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004019EA 6BC922                  imul ecx, 00000022
:004019ED 81C1D0474900            add ecx, 004947D0
:004019F3 E868E40000              call 0040FE60
:004019F8 8845FC                  mov byte ptr [ebp-04], al
:004019FB 8B45FC                  mov eax, dword ptr [ebp-04]
:004019FE 25FF000000              and eax, 000000FF
:00401A03 83F811                  cmp eax, 00000011
:00401A06 7E04                    jle 00401A0C
:00401A08 33C0                    xor eax, eax
:00401A0A EB27                    jmp 00401A33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A06(C)
|
:00401A0C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401A0F 81E1FF000000            and ecx, 000000FF
:00401A15 51                      push ecx
:00401A16 8B55F8                  mov edx, dword ptr [ebp-08]
:00401A19 33C0                    xor eax, eax
:00401A1B 8A4231                  mov al, byte ptr [edx+31]
:00401A1E 8BC8                    mov ecx, eax
:00401A20 6BC91C                  imul ecx, 0000001C
:00401A23 81C178794A00            add ecx, 004A7978
:00401A29 E892180000              call 004032C0
:00401A2E 25FF000000              and eax, 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A0A(U)
|
:00401A33 8BE5                    mov esp, ebp
:00401A35 5D                      pop ebp
:00401A36 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00401ABA   , :00401CB1   , :00412BC5   , :00414233   , :004147B1   
|:00416075   , :0046366A   , :00464868   
|
:00401A39 55                      push ebp
:00401A3A 8BEC                    mov ebp, esp
:00401A3C 83EC08                  sub esp, 00000008
:00401A3F 894DF8                  mov dword ptr [ebp-08], ecx
:00401A42 8B4D08                  mov ecx, dword ptr [ebp+08]
:00401A45 6BC922                  imul ecx, 00000022
:00401A48 81C1D0474900            add ecx, 004947D0
:00401A4E E80DE40000              call 0040FE60
:00401A53 8845FC                  mov byte ptr [ebp-04], al
:00401A56 8B45FC                  mov eax, dword ptr [ebp-04]
:00401A59 25FF000000              and eax, 000000FF
:00401A5E 83F825                  cmp eax, 00000025
:00401A61 7C04                    jl 00401A67
:00401A63 33C0                    xor eax, eax
:00401A65 EB3A                    jmp 00401AA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A61(C)
|
:00401A67 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401A6A 81E1FF000000            and ecx, 000000FF
:00401A70 83F911                  cmp ecx, 00000011
:00401A73 7E07                    jle 00401A7C
:00401A75 B801000000              mov eax, 00000001
:00401A7A EB25                    jmp 00401AA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401A73(C)
|
:00401A7C 8B55FC                  mov edx, dword ptr [ebp-04]
:00401A7F 81E2FF000000            and edx, 000000FF
:00401A85 52                      push edx
:00401A86 8B45F8                  mov eax, dword ptr [ebp-08]
:00401A89 33C9                    xor ecx, ecx
:00401A8B 8A4831                  mov cl, byte ptr [eax+31]
:00401A8E 6BC91C                  imul ecx, 0000001C
:00401A91 81C178794A00            add ecx, 004A7978
:00401A97 E824180000              call 004032C0
:00401A9C 25FF000000              and eax, 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401A65(U), :00401A7A(U)
|
:00401AA1 8BE5                    mov esp, ebp
:00401AA3 5D                      pop ebp
:00401AA4 C20400                  ret 0004


:00401AA7 55                      push ebp
:00401AA8 8BEC                    mov ebp, esp
:00401AAA 8B4508                  mov eax, dword ptr [ebp+08]
:00401AAD 50                      push eax
:00401AAE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00401AB1 6BC950                  imul ecx, 00000050
:00401AB4 81C1787F4900            add ecx, 00497F78
:00401ABA E87AFFFFFF              call 00401A39
:00401ABF 5D                      pop ebp
:00401AC0 C3                      ret



* Referenced by a CALL at Addresses:
|:004087B1   , :004394C9   
|
:00401AC1 55                      push ebp
:00401AC2 8BEC                    mov ebp, esp
:00401AC4 8B4508                  mov eax, dword ptr [ebp+08]
:00401AC7 50                      push eax
:00401AC8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00401ACB 6BC950                  imul ecx, 00000050
:00401ACE 81C1787F4900            add ecx, 00497F78
:00401AD4 E805FFFFFF              call 004019DE
:00401AD9 5D                      pop ebp
:00401ADA C3                      ret



* Referenced by a CALL at Addresses:
|:00402587   , :004027CA   , :0040AEEB   , :004212F8   
|
:00401ADB 55                      push ebp
:00401ADC 8BEC                    mov ebp, esp
:00401ADE 83EC18                  sub esp, 00000018
:00401AE1 894DE8                  mov dword ptr [ebp-18], ecx
:00401AE4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00401AE7 E894160000              call 00403180
:00401AEC 8945F0                  mov dword ptr [ebp-10], eax
:00401AEF B863000000              mov eax, 00000063
:00401AF4 2B4508                  sub eax, dword ptr [ebp+08]
:00401AF7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00401AFA 33D2                    xor edx, edx
:00401AFC 8A5132                  mov dl, byte ptr [ecx+32]
:00401AFF 3BC2                    cmp eax, edx
:00401B01 7314                    jnb 00401B17
:00401B03 8B45E8                  mov eax, dword ptr [ebp-18]
:00401B06 33C9                    xor ecx, ecx
:00401B08 8A4832                  mov cl, byte ptr [eax+32]
:00401B0B BA63000000              mov edx, 00000063
:00401B10 2BD1                    sub edx, ecx
:00401B12 8855FC                  mov byte ptr [ebp-04], dl
:00401B15 EB06                    jmp 00401B1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B01(C)
|
:00401B17 8A4508                  mov al, byte ptr [ebp+08]
:00401B1A 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B15(U)
|
:00401B1D C745F800000000          mov [ebp-08], 00000000
:00401B24 EB09                    jmp 00401B2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B92(U)
|
:00401B26 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401B29 83C101                  add ecx, 00000001
:00401B2C 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B24(U)
|
:00401B2F 837DF808                cmp dword ptr [ebp-08], 00000008
:00401B33 7D5F                    jge 00401B94
:00401B35 8B55F8                  mov edx, dword ptr [ebp-08]
:00401B38 52                      push edx
:00401B39 8B45E8                  mov eax, dword ptr [ebp-18]
:00401B3C 33C9                    xor ecx, ecx
:00401B3E 8A4831                  mov cl, byte ptr [eax+31]
:00401B41 6BC91C                  imul ecx, 0000001C
:00401B44 81C178794A00            add ecx, 004A7978
:00401B4A E851170000              call 004032A0
:00401B4F 25FF000000              and eax, 000000FF
:00401B54 8945F4                  mov dword ptr [ebp-0C], eax
:00401B57 837DF400                cmp dword ptr [ebp-0C], 00000000
:00401B5B 7435                    je 00401B92
:00401B5D C745EC00000000          mov [ebp-14], 00000000
:00401B64 EB09                    jmp 00401B6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B90(U)
|
:00401B66 8B55EC                  mov edx, dword ptr [ebp-14]
:00401B69 83C201                  add edx, 00000001
:00401B6C 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B64(U)
|
:00401B6F 8B45FC                  mov eax, dword ptr [ebp-04]
:00401B72 25FF000000              and eax, 000000FF
:00401B77 3945EC                  cmp dword ptr [ebp-14], eax
:00401B7A 7D16                    jge 00401B92
:00401B7C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401B7F 51                      push ecx
:00401B80 8B55F8                  mov edx, dword ptr [ebp-08]
:00401B83 52                      push edx
:00401B84 8B45F0                  mov eax, dword ptr [ebp-10]
:00401B87 50                      push eax
:00401B88 E848FDFFFF              call 004018D5
:00401B8D 83C40C                  add esp, 0000000C
:00401B90 EBD4                    jmp 00401B66

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401B5B(C), :00401B7A(C)
|
:00401B92 EB92                    jmp 00401B26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401B33(C)
|
:00401B94 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00401B97 8A5132                  mov dl, byte ptr [ecx+32]
:00401B9A 0255FC                  add dl, byte ptr [ebp-04]
:00401B9D 8B45E8                  mov eax, dword ptr [ebp-18]
:00401BA0 885032                  mov byte ptr [eax+32], dl
:00401BA3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00401BA6 8A4132                  mov al, byte ptr [ecx+32]
:00401BA9 8BE5                    mov esp, ebp
:00401BAB 5D                      pop ebp
:00401BAC C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00401D31   , :00401D64   , :00401D97   , :00401DCA   , :00401DFD   
|:00401E2E   , :0040216D   , :00402191   
|
:00401BAF 55                      push ebp
:00401BB0 8BEC                    mov ebp, esp
:00401BB2 83EC20                  sub esp, 00000020
:00401BB5 894DE4                  mov dword ptr [ebp-1C], ecx
:00401BB8 C645FC00                mov [ebp-04], 00
:00401BBC C645ECFF                mov [ebp-14], FF
:00401BC0 837D0800                cmp dword ptr [ebp+08], 00000000
:00401BC4 0F8585000000            jne 00401C4F
:00401BCA 8B45E4                  mov eax, dword ptr [ebp-1C]
:00401BCD 33C9                    xor ecx, ecx
:00401BCF 8A4834                  mov cl, byte ptr [eax+34]
:00401BD2 81F9FF000000            cmp ecx, 000000FF
:00401BD8 7459                    je 00401C33
:00401BDA 8B55E4                  mov edx, dword ptr [ebp-1C]
:00401BDD 33C0                    xor eax, eax
:00401BDF 8A4234                  mov al, byte ptr [edx+34]
:00401BE2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00401BE5 8A540135                mov dl, byte ptr [ecx+eax+35]
:00401BE9 8855EC                  mov byte ptr [ebp-14], dl
:00401BEC 8B45EC                  mov eax, dword ptr [ebp-14]
:00401BEF 25FF000000              and eax, 000000FF
:00401BF4 50                      push eax
:00401BF5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00401BF8 E8E1FDFFFF              call 004019DE
:00401BFD 85C0                    test eax, eax
:00401BFF 7518                    jne 00401C19
:00401C01 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00401C04 C64134FF                mov [ecx+34], FF
:00401C08 8B450C                  mov eax, dword ptr [ebp+0C]
:00401C0B F7D8                    neg eax
:00401C0D 1BC0                    sbb eax, eax
:00401C0F 25FF000000              and eax, 000000FF
:00401C14 E9FF000000              jmp 00401D18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401BFF(C)
|
:00401C19 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00401C1C 81E1FF000000            and ecx, 000000FF
:00401C22 6BC922                  imul ecx, 00000022
:00401C25 81C1D0474900            add ecx, 004947D0
:00401C2B E830160000              call 00403260
:00401C30 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401BD8(C)
|
:00401C33 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00401C37 7508                    jne 00401C41
:00401C39 8A55FC                  mov dl, byte ptr [ebp-04]
:00401C3C 8855E3                  mov byte ptr [ebp-1D], dl
:00401C3F EB06                    jmp 00401C47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401C37(C)
|
:00401C41 8A45EC                  mov al, byte ptr [ebp-14]
:00401C44 8845E3                  mov byte ptr [ebp-1D], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401C3F(U)
|
:00401C47 8A45E3                  mov al, byte ptr [ebp-1D]
:00401C4A E9C9000000              jmp 00401D18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401BC4(C)
|
:00401C4F C645F000                mov [ebp-10], 00
:00401C53 EB09                    jmp 00401C5E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401CFC(U)
|
:00401C55 8A4DF0                  mov cl, byte ptr [ebp-10]
:00401C58 80C101                  add cl, 01
:00401C5B 884DF0                  mov byte ptr [ebp-10], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401C53(U)
|
:00401C5E 8B55F0                  mov edx, dword ptr [ebp-10]
:00401C61 81E2FF000000            and edx, 000000FF
:00401C67 83FA08                  cmp edx, 00000008
:00401C6A 0F8D91000000            jnl 00401D01
:00401C70 8B45F0                  mov eax, dword ptr [ebp-10]
:00401C73 25FF000000              and eax, 000000FF
:00401C78 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00401C7B 33D2                    xor edx, edx
:00401C7D 8A540135                mov dl, byte ptr [ecx+eax+35]
:00401C81 8955F8                  mov dword ptr [ebp-08], edx
:00401C84 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:00401C8B 746F                    je 00401CFC
:00401C8D 8B45F8                  mov eax, dword ptr [ebp-08]
:00401C90 50                      push eax
:00401C91 E88FFCFFFF              call 00401925
:00401C96 83C404                  add esp, 00000004
:00401C99 8845E8                  mov byte ptr [ebp-18], al
:00401C9C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00401C9F 81E1FF000000            and ecx, 000000FF
:00401CA5 3B4D08                  cmp ecx, dword ptr [ebp+08]
:00401CA8 7552                    jne 00401CFC
:00401CAA 8B55F8                  mov edx, dword ptr [ebp-08]
:00401CAD 52                      push edx
:00401CAE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00401CB1 E883FDFFFF              call 00401A39
:00401CB6 85C0                    test eax, eax
:00401CB8 7442                    je 00401CFC
:00401CBA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401CBD 6BC922                  imul ecx, 00000022
:00401CC0 81C1D0474900            add ecx, 004947D0
:00401CC6 E895150000              call 00403260
:00401CCB 8845F4                  mov byte ptr [ebp-0C], al
:00401CCE 8B45FC                  mov eax, dword ptr [ebp-04]
:00401CD1 25FF000000              and eax, 000000FF
:00401CD6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401CD9 81E1FF000000            and ecx, 000000FF
:00401CDF 3BC1                    cmp eax, ecx
:00401CE1 7D19                    jge 00401CFC
:00401CE3 8B55F0                  mov edx, dword ptr [ebp-10]
:00401CE6 81E2FF000000            and edx, 000000FF
:00401CEC 8B45E4                  mov eax, dword ptr [ebp-1C]
:00401CEF 8A4C1035                mov cl, byte ptr [eax+edx+35]
:00401CF3 884DEC                  mov byte ptr [ebp-14], cl
:00401CF6 8A55F4                  mov dl, byte ptr [ebp-0C]
:00401CF9 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401C8B(C), :00401CA8(C), :00401CB8(C), :00401CE1(C)
|
:00401CFC E954FFFFFF              jmp 00401C55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401C6A(C)
|
:00401D01 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00401D05 7508                    jne 00401D0F
:00401D07 8A45FC                  mov al, byte ptr [ebp-04]
:00401D0A 8845E2                  mov byte ptr [ebp-1E], al
:00401D0D EB06                    jmp 00401D15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401D05(C)
|
:00401D0F 8A4DEC                  mov cl, byte ptr [ebp-14]
:00401D12 884DE2                  mov byte ptr [ebp-1E], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401D0D(U)
|
:00401D15 8A45E2                  mov al, byte ptr [ebp-1E]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401C14(U), :00401C4A(U)
|
:00401D18 8BE5                    mov esp, ebp
:00401D1A 5D                      pop ebp
:00401D1B C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00412D45   , :004143B3   , :00414931   , :004161F5   , :004174F7   
|:0041776F   , :004179E4   , :00417C5C   , :00424B67   , :00424D5A   
|:0042CC4D   , :0042CCD6   , :00432DD2   , :00458E62   , :00458E9C   
|:0045962E   , :004633A3   , :004637CF   , :004649E8   , :004653C3   
|:0046ACA5   , :0046CFC4   , :0046CFCE   , :0046D16C   
|
:00401D1E 55                      push ebp
:00401D1F 8BEC                    mov ebp, esp
:00401D21 51                      push ecx
:00401D22 894DFC                  mov dword ptr [ebp-04], ecx
:00401D25 68F4010000              push 000001F4
:00401D2A 6A00                    push 00000000
:00401D2C 6A00                    push 00000000
:00401D2E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401D31 E879FEFFFF              call 00401BAF
:00401D36 25FF000000              and eax, 000000FF
:00401D3B 50                      push eax
:00401D3C 8B45FC                  mov eax, dword ptr [ebp-04]
:00401D3F 33C9                    xor ecx, ecx
:00401D41 8A4828                  mov cl, byte ptr [eax+28]
:00401D44 51                      push ecx
:00401D45 E8B6650700              call 00478300
:00401D4A 83C40C                  add esp, 0000000C
:00401D4D 8BE5                    mov esp, ebp
:00401D4F 5D                      pop ebp
:00401D50 C3                      ret



* Referenced by a CALL at Addresses:
|:00412E5A   , :004144C8   , :00414A46   , :0041630A   , :0041752E   
|:004177A6   , :00417A1B   , :00417C93   , :00424BF1   , :00424DE4   
|:0042CC8A   , :0042CD13   , :00432EB9   , :00458F10   , :00458F4A   
|:00459648   , :004633DA   , :004638C7   , :00464AFD   , :004653FA   
|:0046ACB0   , :0046CFE0   , :0046CFEA   , :0046D196   
|
:00401D51 55                      push ebp
:00401D52 8BEC                    mov ebp, esp
:00401D54 51                      push ecx
:00401D55 894DFC                  mov dword ptr [ebp-04], ecx
:00401D58 68F4010000              push 000001F4
:00401D5D 6A00                    push 00000000
:00401D5F 6A01                    push 00000001
:00401D61 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401D64 E846FEFFFF              call 00401BAF
:00401D69 25FF000000              and eax, 000000FF
:00401D6E 50                      push eax
:00401D6F 8B45FC                  mov eax, dword ptr [ebp-04]
:00401D72 33C9                    xor ecx, ecx
:00401D74 8A4829                  mov cl, byte ptr [eax+29]
:00401D77 51                      push ecx
:00401D78 E883650700              call 00478300
:00401D7D 83C40C                  add esp, 0000000C
:00401D80 8BE5                    mov esp, ebp
:00401D82 5D                      pop ebp
:00401D83 C3                      ret



* Referenced by a CALL at Addresses:
|:00412EDF   , :0041454D   , :00414ACB   , :0041638F   , :00417565   
|:004177DD   , :00417A52   , :00417CCA   , :00424BC3   , :00424DB6   
|:00429BE6   , :00429C0B   , :00429DF7   , :00429EC9   , :0042A067   
|:0042A07A   , :0042A094   , :0042A0A7   , :0042A113   , :0042A12F   
|:0042A14F   , :0042A16B   , :0042D4F5   , :00432EE7   , :00433A91   
|:00433B61   , :00458FBE   , :00458FF8   , :00463411   , :00463947   
|:00464B82   , :00465431   , :0046ACBB   , :0046CFFC   , :0046D006   
|:0046D1C0   
|
:00401D84 55                      push ebp
:00401D85 8BEC                    mov ebp, esp
:00401D87 51                      push ecx
:00401D88 894DFC                  mov dword ptr [ebp-04], ecx
:00401D8B 68F4010000              push 000001F4
:00401D90 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00401D92 6A02                    push 00000002
:00401D94 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401D97 E813FEFFFF              call 00401BAF
:00401D9C 25FF000000              and eax, 000000FF
:00401DA1 50                      push eax
:00401DA2 8B45FC                  mov eax, dword ptr [ebp-04]
:00401DA5 33C9                    xor ecx, ecx
:00401DA7 8A482A                  mov cl, byte ptr [eax+2A]
:00401DAA 51                      push ecx
:00401DAB E850650700              call 00478300
:00401DB0 83C40C                  add esp, 0000000C
:00401DB3 8BE5                    mov esp, ebp
:00401DB5 5D                      pop ebp
:00401DB6 C3                      ret



* Referenced by a CALL at Addresses:
|:00412F64   , :004145D2   , :00414B50   , :00416414   , :0041759C   
|:00417814   , :00417A89   , :00417D01   , :00424C52   , :00424E45   
|:0042980A   , :00429985   , :00429C2B   , :00429E1D   , :00429EF5   
|:0042A0CE   , :0042BA61   , :0042D50E   , :00432F44   , :00432FAB   
|:00436BA5   , :00463448   , :004639C7   , :00464C07   , :00465468   
|:0046AE11   , :0046AE3E   , :0046D018   , :0046D022   , :0046D1EA   
|
:00401DB7 55                      push ebp
:00401DB8 8BEC                    mov ebp, esp
:00401DBA 51                      push ecx
:00401DBB 894DFC                  mov dword ptr [ebp-04], ecx
:00401DBE 68F4010000              push 000001F4
:00401DC3 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00401DC5 6A03                    push 00000003
:00401DC7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401DCA E8E0FDFFFF              call 00401BAF
:00401DCF 25FF000000              and eax, 000000FF
:00401DD4 50                      push eax
:00401DD5 8B45FC                  mov eax, dword ptr [ebp-04]
:00401DD8 33C9                    xor ecx, ecx
:00401DDA 8A482B                  mov cl, byte ptr [eax+2B]
:00401DDD 51                      push ecx
:00401DDE E81D650700              call 00478300
:00401DE3 83C40C                  add esp, 0000000C
:00401DE6 8BE5                    mov esp, ebp
:00401DE8 5D                      pop ebp
:00401DE9 C3                      ret



* Referenced by a CALL at Addresses:
|:0040AEC6   , :0040AF20   , :00412FE3   , :00414651   , :00414BCF   
|:00416493   , :004175D3   , :0041784B   , :00417AC0   , :00417D38   
|:00420408   , :0042055F   , :004205BA   , :00420FB9   , :00421090   
|:00423447   , :004235CF   , :0042396B   , :004247F9   , :00424A2A   
|:00428EF9   , :00429A0D   , :00429A69   , :00429DDE   , :0042A374   
|:0042B5B4   , :0043322C   , :004337C8   , :00433820   , :0043382C   
|:00433863   , :004339C3   , :004339D3   , :00433EB5   , :00433FA5   
|:00434FBE   , :00437594   , :00437604   , :00437AF5   , :00437E63   
|:00437E89   , :00437EAD   , :00437ED3   , :00438206   , :00438220   
|:0043824B   , :0043826D   , :00439729   , :00439E13   , :0043B910   
|:0043F990   , :00440FF0   , :004419C1   , :00441AAC   , :00441B11   
|:00441B1D   , :00441E1B   , :0044A55A   , :0044A585   , :0044A85A   
|:0044AA45   , :0044EF00   , :00450BB1   , :00450BC9   , :004512C6   
|:0045130C   , :004516AD   , :00451728   , :0045318A   , :004531DD   
|:00453C2B   , :00453E05   , :00453F2B   , :0045422D   , :0045430E   
|:0045458B   , :004545F9   , :004550AB   , :004550DE   , :004550F9   
|:00455119   , :0045512E   , :0045515B   , :004553A1   , :004553FD   
|:00455418   , :00455438   , :0045544D   , :0045547A   , :00458F67   
|:00458FA1   , :0045CF5C   , :0045E9CD   , :0045FA5C   , :00460EFC   
|:0046347F   , :00463A41   , :00464C86   , :0046549F   , :0046AF23   
|:0046B026   , :0046D034   , :0046D03E   , :0046D214   
|
:00401DEA 55                      push ebp
:00401DEB 8BEC                    mov ebp, esp
:00401DED 51                      push ecx
:00401DEE 894DFC                  mov dword ptr [ebp-04], ecx
:00401DF1 68E8030000              push 000003E8
:00401DF6 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00401DF8 6A04                    push 00000004
:00401DFA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401DFD E8ADFDFFFF              call 00401BAF
:00401E02 25FF000000              and eax, 000000FF
:00401E07 50                      push eax
:00401E08 8B45FC                  mov eax, dword ptr [ebp-04]
:00401E0B 8B4808                  mov ecx, dword ptr [eax+08]
:00401E0E 51                      push ecx
:00401E0F E8EC640700              call 00478300
:00401E14 83C40C                  add esp, 0000000C
:00401E17 8BE5                    mov esp, ebp
:00401E19 5D                      pop ebp
:00401E1A C3                      ret



* Referenced by a CALL at Addresses:
|:0040AF4F   , :00413068   , :004146D6   , :00414C54   , :00416518   
|:0041760A   , :00417882   , :00417AF7   , :00417D6F   , :0042064F   
|:00420697   , :0042071B   , :00420763   , :00420FD5   , :004210AC   
|:00423658   , :0042484A   , :00424A35   , :0042A1E8   , :0042A23E   
|:0042A2C2   , :0042A318   , :0042B5D0   , :0043326D   , :00433ECC   
|:00433FB3   , :00434FFB   , :0043691B   , :00437155   , :00437161   
|:00438465   , :00438487   , :004384A9   , :00439753   , :00439E4B   
|:0043F1E1   , :0043F1F9   , :0043F271   , :0043F27D   , :0044A685   
|:0044A6B0   , :0044A86D   , :0044AA7E   , :0044EF11   , :0045312E   
|:0045314C   , :004533E0   , :0045444B   , :00454B83   , :004551C3   
|:004551D8   , :00455205   , :00455501   , :00455516   , :00455543   
|:00458EB9   , :00458EF3   , :0045B225   , :0045CF85   , :0045FA76   
|:00460F2C   , :004634B6   , :00463AC1   , :00464D0B   , :004654D6   
|:0046AF2E   , :0046B054   , :0046D050   , :0046D05A   , :0046D23E   
|
:00401E1B 55                      push ebp
:00401E1C 8BEC                    mov ebp, esp
:00401E1E 51                      push ecx
:00401E1F 894DFC                  mov dword ptr [ebp-04], ecx
:00401E22 68F4010000              push 000001F4
:00401E27 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00401E29 6A05                    push 00000005
:00401E2B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401E2E E87CFDFFFF              call 00401BAF
:00401E33 25FF000000              and eax, 000000FF
:00401E38 50                      push eax
:00401E39 8B45FC                  mov eax, dword ptr [ebp-04]
:00401E3C 33C9                    xor ecx, ecx
:00401E3E 8A482C                  mov cl, byte ptr [eax+2C]
:00401E41 51                      push ecx
:00401E42 E8B9640700              call 00478300
:00401E47 83C40C                  add esp, 0000000C
:00401E4A 8BE5                    mov esp, ebp
:00401E4C 5D                      pop ebp
:00401E4D C3                      ret



* Referenced by a CALL at Addresses:
|:00412D74   , :004143E2   , :00414960   , :00416224   , :00417641   
|:004178B9   , :00417B2E   , :00417DA6   , :00424B95   , :00424D88   
|:0042B0FD   , :004336C3   , :004634ED   , :004637FE   , :00464A17   
|:0046550D   , :0046AE5E   , :0046AE8B   , :0046D069   , :0046D073   
|:0046D268   
|
:00401E4E 55                      push ebp
:00401E4F 8BEC                    mov ebp, esp
:00401E51 83EC08                  sub esp, 00000008
:00401E54 894DF8                  mov dword ptr [ebp-08], ecx
:00401E57 C745FC00000000          mov [ebp-04], 00000000
:00401E5E 8B45F8                  mov eax, dword ptr [ebp-08]
:00401E61 33C9                    xor ecx, ecx
:00401E63 8A4834                  mov cl, byte ptr [eax+34]
:00401E66 81F9FF000000            cmp ecx, 000000FF
:00401E6C 742E                    je 00401E9C
:00401E6E 8B55F8                  mov edx, dword ptr [ebp-08]
:00401E71 33C0                    xor eax, eax
:00401E73 8A4234                  mov al, byte ptr [edx+34]
:00401E76 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401E79 33D2                    xor edx, edx
:00401E7B 8A540135                mov dl, byte ptr [ecx+eax+35]
:00401E7F 8BCA                    mov ecx, edx
:00401E81 6BC922                  imul ecx, 00000022
:00401E84 81C1D0474900            add ecx, 004947D0
:00401E8A E8F1130000              call 00403280
:00401E8F 25FF000000              and eax, 000000FF
:00401E94 99                      cdq
:00401E95 2BC2                    sub eax, edx
:00401E97 D1F8                    sar eax, 1
:00401E99 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401E6C(C)
|
:00401E9C 68F4010000              push 000001F4
:00401EA1 8B45FC                  mov eax, dword ptr [ebp-04]
:00401EA4 50                      push eax
:00401EA5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401EA8 33D2                    xor edx, edx
:00401EAA 8A512D                  mov dl, byte ptr [ecx+2D]
:00401EAD 52                      push edx
:00401EAE E84D640700              call 00478300
:00401EB3 83C40C                  add esp, 0000000C
:00401EB6 8BE5                    mov esp, ebp
:00401EB8 5D                      pop ebp
:00401EB9 C3                      ret



* Referenced by a CALL at Addresses:
|:00412DA3   , :00414411   , :0041498F   , :00416253   , :00417678   
|:004178F0   , :00417B65   , :00417DDD   , :004224CB   , :004224E4   
|:00424C1F   , :00424E12   , :00429879   , :0042B161   , :00432F11   
|:00443F2D   , :00443F5F   , :00463524   , :0046382D   , :00464A46   
|:00465544   , :0046AEAB   , :0046AEDD   , :0046D082   , :0046D092   
|:0046D28F   
|
:00401EBA 55                      push ebp
:00401EBB 8BEC                    mov ebp, esp
:00401EBD 51                      push ecx
:00401EBE 894DFC                  mov dword ptr [ebp-04], ecx
:00401EC1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00401EC4 E87D010000              call 00402046
:00401EC9 50                      push eax
:00401ECA 8B45FC                  mov eax, dword ptr [ebp-04]
:00401ECD 8A482E                  mov cl, byte ptr [eax+2E]
:00401ED0 51                      push ecx
:00401ED1 E88A640700              call 00478360
:00401ED6 83C408                  add esp, 00000008
:00401ED9 8BE5                    mov esp, ebp
:00401EDB 5D                      pop ebp
:00401EDC C3                      ret



* Referenced by a CALL at Address:
|:00401F45   
|
:00401EDD 55                      push ebp
:00401EDE 8BEC                    mov ebp, esp
:00401EE0 83EC0C                  sub esp, 0000000C
:00401EE3 894DF4                  mov dword ptr [ebp-0C], ecx
:00401EE6 C645FC00                mov [ebp-04], 00
:00401EEA C645F800                mov [ebp-08], 00
:00401EEE EB08                    jmp 00401EF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F26(U)
|
:00401EF0 8A45F8                  mov al, byte ptr [ebp-08]
:00401EF3 0401                    add al, 01
:00401EF5 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401EEE(U)
|
:00401EF8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401EFB 81E1FF000000            and ecx, 000000FF
:00401F01 83F908                  cmp ecx, 00000008
:00401F04 7D22                    jge 00401F28
:00401F06 8B55F8                  mov edx, dword ptr [ebp-08]
:00401F09 81E2FF000000            and edx, 000000FF
:00401F0F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00401F12 33C9                    xor ecx, ecx
:00401F14 8A4C1035                mov cl, byte ptr [eax+edx+35]
:00401F18 394D08                  cmp dword ptr [ebp+08], ecx
:00401F1B 7509                    jne 00401F26
:00401F1D 8A55FC                  mov dl, byte ptr [ebp-04]
:00401F20 80C201                  add dl, 01
:00401F23 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F1B(C)
|
:00401F26 EBC8                    jmp 00401EF0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F04(C)
|
:00401F28 8A45FC                  mov al, byte ptr [ebp-04]
:00401F2B 8BE5                    mov esp, ebp
:00401F2D 5D                      pop ebp
:00401F2E C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00439454   , :00439864   
|
:00401F31 55                      push ebp
:00401F32 8BEC                    mov ebp, esp
:00401F34 83EC14                  sub esp, 00000014
:00401F37 894DEC                  mov dword ptr [ebp-14], ecx
:00401F3A C645FCFF                mov [ebp-04], FF
:00401F3E 8B4508                  mov eax, dword ptr [ebp+08]
:00401F41 50                      push eax
:00401F42 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00401F45 E893FFFFFF              call 00401EDD
:00401F4A 8845F8                  mov byte ptr [ebp-08], al
:00401F4D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00401F50 81E1FF000000            and ecx, 000000FF
:00401F56 85C9                    test ecx, ecx
:00401F58 7507                    jne 00401F61
:00401F5A 0CFF                    or al, FF
:00401F5C E9A2000000              jmp 00402003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F58(C)
|
:00401F61 8B55F8                  mov edx, dword ptr [ebp-08]
:00401F64 81E2FF000000            and edx, 000000FF
:00401F6A 83FA01                  cmp edx, 00000001
:00401F6D 753F                    jne 00401FAE
:00401F6F C645F400                mov [ebp-0C], 00
:00401F73 EB08                    jmp 00401F7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401FAA(U)
|
:00401F75 8A45F4                  mov al, byte ptr [ebp-0C]
:00401F78 0401                    add al, 01
:00401F7A 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F73(U)
|
:00401F7D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00401F80 81E1FF000000            and ecx, 000000FF
:00401F86 83F908                  cmp ecx, 00000008
:00401F89 7D21                    jge 00401FAC
:00401F8B 8B55F4                  mov edx, dword ptr [ebp-0C]
:00401F8E 81E2FF000000            and edx, 000000FF
:00401F94 8B45EC                  mov eax, dword ptr [ebp-14]
:00401F97 33C9                    xor ecx, ecx
:00401F99 8A4C1035                mov cl, byte ptr [eax+edx+35]
:00401F9D 394D08                  cmp dword ptr [ebp+08], ecx
:00401FA0 7508                    jne 00401FAA
:00401FA2 8A55F4                  mov dl, byte ptr [ebp-0C]
:00401FA5 8855FC                  mov byte ptr [ebp-04], dl
:00401FA8 EB02                    jmp 00401FAC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401FA0(C)
|
:00401FAA EBC9                    jmp 00401F75

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401F89(C), :00401FA8(U)
|
:00401FAC EB52                    jmp 00402000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F6D(C)
|
:00401FAE C645F000                mov [ebp-10], 00
:00401FB2 EB08                    jmp 00401FBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401FFE(U)
|
:00401FB4 8A45F0                  mov al, byte ptr [ebp-10]
:00401FB7 0401                    add al, 01
:00401FB9 8845F0                  mov byte ptr [ebp-10], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401FB2(U)
|
:00401FBC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00401FBF 81E1FF000000            and ecx, 000000FF
:00401FC5 83F908                  cmp ecx, 00000008
:00401FC8 7D36                    jge 00402000
:00401FCA 8B55F0                  mov edx, dword ptr [ebp-10]
:00401FCD 81E2FF000000            and edx, 000000FF
:00401FD3 8B45EC                  mov eax, dword ptr [ebp-14]
:00401FD6 33C9                    xor ecx, ecx
:00401FD8 8A4C1035                mov cl, byte ptr [eax+edx+35]
:00401FDC 394D08                  cmp dword ptr [ebp+08], ecx
:00401FDF 751D                    jne 00401FFE
:00401FE1 8B55F0                  mov edx, dword ptr [ebp-10]
:00401FE4 81E2FF000000            and edx, 000000FF
:00401FEA 8B45EC                  mov eax, dword ptr [ebp-14]
:00401FED 33C9                    xor ecx, ecx
:00401FEF 8A4834                  mov cl, byte ptr [eax+34]
:00401FF2 3BD1                    cmp edx, ecx
:00401FF4 7408                    je 00401FFE
:00401FF6 8A55F0                  mov dl, byte ptr [ebp-10]
:00401FF9 8855FC                  mov byte ptr [ebp-04], dl
:00401FFC EB02                    jmp 00402000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401FDF(C), :00401FF4(C)
|
:00401FFE EBB4                    jmp 00401FB4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00401FAC(U), :00401FC8(C), :00401FFC(U)
|
:00402000 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00401F5C(U)
|
:00402003 8BE5                    mov esp, ebp
:00402005 5D                      pop ebp
:00402006 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00408709   , :0040B059   , :00418F43   , :0042AAD9   , :004373C8   
|:00439611   , :00439804   , :0043AC71   , :00442212   , :004524CE   
|:004566E4   , :0046B9C0   
|
:00402009 55                      push ebp
:0040200A 8BEC                    mov ebp, esp
:0040200C 83EC08                  sub esp, 00000008
:0040200F 894DF8                  mov dword ptr [ebp-08], ecx
:00402012 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402015 E8A6110000              call 004031C0
:0040201A 25FF000000              and eax, 000000FF
:0040201F 8945FC                  mov dword ptr [ebp-04], eax
:00402022 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00402029 7414                    je 0040203F
:0040202B 8A45FC                  mov al, byte ptr [ebp-04]
:0040202E 50                      push eax
:0040202F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402032 E8A9110000              call 004031E0
:00402037 25FF000000              and eax, 000000FF
:0040203C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402029(C)
|
:0040203F 8B45FC                  mov eax, dword ptr [ebp-04]
:00402042 8BE5                    mov esp, ebp
:00402044 5D                      pop ebp
:00402045 C3                      ret



* Referenced by a CALL at Address:
|:00401EC4   
|
:00402046 55                      push ebp
:00402047 8BEC                    mov ebp, esp
:00402049 83EC0C                  sub esp, 0000000C
:0040204C 894DF4                  mov dword ptr [ebp-0C], ecx
:0040204F C645FC00                mov [ebp-04], 00
:00402053 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402056 E865110000              call 004031C0
:0040205B 8845F8                  mov byte ptr [ebp-08], al
:0040205E 8B45F8                  mov eax, dword ptr [ebp-08]
:00402061 25FF000000              and eax, 000000FF
:00402066 3DFF000000              cmp eax, 000000FF
:0040206B 7425                    je 00402092
:0040206D 8A4DF8                  mov cl, byte ptr [ebp-08]
:00402070 51                      push ecx
:00402071 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402074 E867110000              call 004031E0
:00402079 8AC8                    mov cl, al
:0040207B 81E1FF000000            and ecx, 000000FF
:00402081 6BC922                  imul ecx, 00000022
:00402084 81C1D0474900            add ecx, 004947D0
:0040208A E8414B0300              call 00436BD0
:0040208F 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040206B(C)
|
:00402092 8A45FC                  mov al, byte ptr [ebp-04]
:00402095 8BE5                    mov esp, ebp
:00402097 5D                      pop ebp
:00402098 C3                      ret



* Referenced by a CALL at Address:
|:004334A6   
|
:00402099 55                      push ebp
:0040209A 8BEC                    mov ebp, esp
:0040209C 83EC0C                  sub esp, 0000000C
:0040209F 894DF4                  mov dword ptr [ebp-0C], ecx
:004020A2 C645FC00                mov [ebp-04], 00
:004020A6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004020A9 E812110000              call 004031C0
:004020AE 8845F8                  mov byte ptr [ebp-08], al
:004020B1 8B45F8                  mov eax, dword ptr [ebp-08]
:004020B4 25FF000000              and eax, 000000FF
:004020B9 3DFF000000              cmp eax, 000000FF
:004020BE 7425                    je 004020E5
:004020C0 8A4DF8                  mov cl, byte ptr [ebp-08]
:004020C3 51                      push ecx
:004020C4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004020C7 E814110000              call 004031E0
:004020CC 8AC8                    mov cl, al
:004020CE 81E1FF000000            and ecx, 000000FF
:004020D4 6BC922                  imul ecx, 00000022
:004020D7 81C1D0474900            add ecx, 004947D0
:004020DD E82E4B0300              call 00436C10
:004020E2 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004020BE(C)
|
:004020E5 8A45FC                  mov al, byte ptr [ebp-04]
:004020E8 8BE5                    mov esp, ebp
:004020EA 5D                      pop ebp
:004020EB C3                      ret



* Referenced by a CALL at Addresses:
|:004334C4   , :004513FE   
|
:004020EC 55                      push ebp
:004020ED 8BEC                    mov ebp, esp
:004020EF 83EC0C                  sub esp, 0000000C
:004020F2 894DF4                  mov dword ptr [ebp-0C], ecx
:004020F5 C645FC00                mov [ebp-04], 00
:004020F9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004020FC E8BF100000              call 004031C0
:00402101 8845F8                  mov byte ptr [ebp-08], al
:00402104 8B45F8                  mov eax, dword ptr [ebp-08]
:00402107 25FF000000              and eax, 000000FF
:0040210C 3DFF000000              cmp eax, 000000FF
:00402111 7425                    je 00402138
:00402113 8A4DF8                  mov cl, byte ptr [ebp-08]
:00402116 51                      push ecx
:00402117 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040211A E8C1100000              call 004031E0
:0040211F 8AC8                    mov cl, al
:00402121 81E1FF000000            and ecx, 000000FF
:00402127 6BC922                  imul ecx, 00000022
:0040212A 81C1D0474900            add ecx, 004947D0
:00402130 E81B4B0300              call 00436C50
:00402135 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402111(C)
|
:00402138 8A45FC                  mov al, byte ptr [ebp-04]
:0040213B 8BE5                    mov esp, ebp
:0040213D 5D                      pop ebp
:0040213E C3                      ret



* Referenced by a CALL at Address:
|:00432FE9   
|
:0040213F 55                      push ebp
:00402140 8BEC                    mov ebp, esp
:00402142 83EC08                  sub esp, 00000008
:00402145 894DF8                  mov dword ptr [ebp-08], ecx
:00402148 8B45F8                  mov eax, dword ptr [ebp-08]
:0040214B 33C9                    xor ecx, ecx
:0040214D 8A4831                  mov cl, byte ptr [eax+31]
:00402150 6BC91C                  imul ecx, 0000001C
:00402153 81C178794A00            add ecx, 004A7978
:00402159 E822C30200              call 0042E480
:0040215E 8845FC                  mov byte ptr [ebp-04], al
:00402161 68FF000000              push 000000FF
:00402166 6A00                    push 00000000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00402168 6A07                    push 00000007
:0040216A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040216D E83DFAFFFF              call 00401BAF
:00402172 50                      push eax
:00402173 8A55FC                  mov dl, byte ptr [ebp-04]
:00402176 52                      push edx
:00402177 E8C4610700              call 00478340
:0040217C 83C40C                  add esp, 0000000C
:0040217F 8BE5                    mov esp, ebp
:00402181 5D                      pop ebp
:00402182 C3                      ret



* Referenced by a CALL at Address:
|:00402507   
|
:00402183 55                      push ebp
:00402184 8BEC                    mov ebp, esp
:00402186 51                      push ecx
:00402187 894DFC                  mov dword ptr [ebp-04], ecx
:0040218A 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0040218C 6A08                    push 00000008
:0040218E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00402191 E819FAFFFF              call 00401BAF
:00402196 8BE5                    mov esp, ebp
:00402198 5D                      pop ebp
:00402199 C3                      ret



* Referenced by a CALL at Addresses:
|:00439B43   , :004661A4   
|
:0040219A 55                      push ebp
:0040219B 8BEC                    mov ebp, esp
:0040219D 83EC08                  sub esp, 00000008
:004021A0 894DF8                  mov dword ptr [ebp-08], ecx
:004021A3 C645FC00                mov [ebp-04], 00
:004021A7 EB08                    jmp 004021B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021DB(U)
|
:004021A9 8A45FC                  mov al, byte ptr [ebp-04]
:004021AC 0401                    add al, 01
:004021AE 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021A7(U)
|
:004021B1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004021B4 81E1FF000000            and ecx, 000000FF
:004021BA 83F908                  cmp ecx, 00000008
:004021BD 7D1E                    jge 004021DD
:004021BF 8B55FC                  mov edx, dword ptr [ebp-04]
:004021C2 81E2FF000000            and edx, 000000FF
:004021C8 8B45F8                  mov eax, dword ptr [ebp-08]
:004021CB 33C9                    xor ecx, ecx
:004021CD 8A4C1035                mov cl, byte ptr [eax+edx+35]
:004021D1 3B4D08                  cmp ecx, dword ptr [ebp+08]
:004021D4 7505                    jne 004021DB
:004021D6 8A45FC                  mov al, byte ptr [ebp-04]
:004021D9 EB04                    jmp 004021DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021D4(C)
|
:004021DB EBCC                    jmp 004021A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021BD(C)
|
:004021DD 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021D9(U)
|
:004021DF 8BE5                    mov esp, ebp
:004021E1 5D                      pop ebp
:004021E2 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00439678   
|
:004021E5 55                      push ebp
:004021E6 8BEC                    mov ebp, esp
:004021E8 83EC08                  sub esp, 00000008
:004021EB 894DF8                  mov dword ptr [ebp-08], ecx
:004021EE C745FC00000000          mov [ebp-04], 00000000
:004021F5 EB09                    jmp 00402200

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040222D(U)
|
:004021F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004021FA 83C001                  add eax, 00000001
:004021FD 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004021F5(U)
|
:00402200 837DFC08                cmp dword ptr [ebp-04], 00000008
:00402204 7329                    jnb 0040222F
:00402206 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402209 034DFC                  add ecx, dword ptr [ebp-04]
:0040220C 33D2                    xor edx, edx
:0040220E 8A5135                  mov dl, byte ptr [ecx+35]
:00402211 3B5508                  cmp edx, dword ptr [ebp+08]
:00402214 7517                    jne 0040222D
:00402216 8A450C                  mov al, byte ptr [ebp+0C]
:00402219 50                      push eax
:0040221A 8A4DFC                  mov cl, byte ptr [ebp-04]
:0040221D 51                      push ecx
:0040221E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402221 E8DA0F0000              call 00403200
:00402226 B801000000              mov eax, 00000001
:0040222B EB04                    jmp 00402231

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402214(C)
|
:0040222D EBC8                    jmp 004021F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402204(C)
|
:0040222F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040222B(U)
|
:00402231 8BE5                    mov esp, ebp
:00402233 5D                      pop ebp
:00402234 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040228C   , :00438855   , :004392AB   
|
:00402237 55                      push ebp
:00402238 8BEC                    mov ebp, esp
:0040223A 83EC0C                  sub esp, 0000000C
:0040223D 894DF4                  mov dword ptr [ebp-0C], ecx
:00402240 C745FC00000000          mov [ebp-04], 00000000
:00402247 8B45FC                  mov eax, dword ptr [ebp-04]
:0040224A 8945F8                  mov dword ptr [ebp-08], eax
:0040224D EB09                    jmp 00402258

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402279(U)
|
:0040224F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402252 83C101                  add ecx, 00000001
:00402255 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040224D(U)
|
:00402258 837DF808                cmp dword ptr [ebp-08], 00000008
:0040225C 731D                    jnb 0040227B
:0040225E 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402261 0355F8                  add edx, dword ptr [ebp-08]
:00402264 33C0                    xor eax, eax
:00402266 8A4235                  mov al, byte ptr [edx+35]
:00402269 3DFF000000              cmp eax, 000000FF
:0040226E 7409                    je 00402279
:00402270 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00402273 83C101                  add ecx, 00000001
:00402276 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040226E(C)
|
:00402279 EBD4                    jmp 0040224F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040225C(C)
|
:0040227B 8A45FC                  mov al, byte ptr [ebp-04]
:0040227E 8BE5                    mov esp, ebp
:00402280 5D                      pop ebp
:00402281 C3                      ret



* Referenced by a CALL at Addresses:
|:00402363   , :00413887   , :0042D93B   , :00439435   
|
:00402282 55                      push ebp
:00402283 8BEC                    mov ebp, esp
:00402285 51                      push ecx
:00402286 894DFC                  mov dword ptr [ebp-04], ecx
:00402289 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040228C E8A6FFFFFF              call 00402237
:00402291 25FF000000              and eax, 000000FF
:00402296 33C9                    xor ecx, ecx
:00402298 83F808                  cmp eax, 00000008
:0040229B 0F95C1                  setne cl
:0040229E 8BC1                    mov eax, ecx
:004022A0 8BE5                    mov esp, ebp
:004022A2 5D                      pop ebp
:004022A3 C3                      ret



* Referenced by a CALL at Addresses:
|:00402386   , :0042D973   , :004340A1   , :004340BE   , :004340D8   
|:004340F2   , :0043410C   , :00434126   , :0043420A   , :00439535   
|
:004022A4 55                      push ebp
:004022A5 8BEC                    mov ebp, esp
:004022A7 83EC08                  sub esp, 00000008
:004022AA 894DF8                  mov dword ptr [ebp-08], ecx
:004022AD C745FC00000000          mov [ebp-04], 00000000
:004022B4 EB09                    jmp 004022BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004022EA(U)
|
:004022B6 8B45FC                  mov eax, dword ptr [ebp-04]
:004022B9 83C001                  add eax, 00000001
:004022BC 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004022B4(U)
|
:004022BF 837DFC08                cmp dword ptr [ebp-04], 00000008
:004022C3 7327                    jnb 004022EC
:004022C5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004022C8 034DFC                  add ecx, dword ptr [ebp-04]
:004022CB 33D2                    xor edx, edx
:004022CD 8A5135                  mov dl, byte ptr [ecx+35]
:004022D0 81FAFF000000            cmp edx, 000000FF
:004022D6 7512                    jne 004022EA
:004022D8 8A4508                  mov al, byte ptr [ebp+08]
:004022DB 50                      push eax
:004022DC 8A4DFC                  mov cl, byte ptr [ebp-04]
:004022DF 51                      push ecx
:004022E0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004022E3 E8180F0000              call 00403200
:004022E8 EB02                    jmp 004022EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004022D6(C)
|
:004022EA EBCA                    jmp 004022B6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004022C3(C), :004022E8(U)
|
:004022EC 8B45FC                  mov eax, dword ptr [ebp-04]
:004022EF 8BE5                    mov esp, ebp
:004022F1 5D                      pop ebp
:004022F2 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00404691   , :004046B2   , :0040A9DE   
|
:004022F5 55                      push ebp
:004022F6 8BEC                    mov ebp, esp
:004022F8 83EC78                  sub esp, 00000078
:004022FB 894D8C                  mov dword ptr [ebp-74], ecx
:004022FE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402301 6BC922                  imul ecx, 00000022
:00402304 81C1D0474900            add ecx, 004947D0
:0040230A E8E1330000              call 004056F0
:0040230F 8945FC                  mov dword ptr [ebp-04], eax
:00402312 C7459400000000          mov [ebp-6C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040249F(U)
|
:00402319 817D08FF000000          cmp dword ptr [ebp+08], 000000FF
:00402320 723E                    jb 00402360
:00402322 B978294B00              mov ecx, 004B2978
:00402327 E89E220000              call 004045CA
:0040232C 85C0                    test eax, eax
:0040232E 742B                    je 0040235B
:00402330 8B45FC                  mov eax, dword ptr [ebp-04]
:00402333 50                      push eax

* Possible StringData Ref from Data Obj ->"y%szBiܮwF"
                                  |
:00402334 6840C14700              push 0047C140
:00402339 6A00                    push 00000000
:0040233B E8F3F00200              call 00431433
:00402340 83C40C                  add esp, 0000000C
:00402343 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402346 51                      push ecx
:00402347 B978294B00              mov ecx, 004B2978
:0040234C E89D220000              call 004045EE
:00402351 B801000000              mov eax, 00000001
:00402356 E949010000              jmp 004024A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040232E(C)
|
:0040235B E99D000000              jmp 004023FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402320(C)
|
:00402360 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00402363 E81AFFFFFF              call 00402282
:00402368 85C0                    test eax, eax
:0040236A 7429                    je 00402395
:0040236C 8B55FC                  mov edx, dword ptr [ebp-04]
:0040236F 52                      push edx

* Possible StringData Ref from Data Obj ->"oFy%szI"
                                  |
:00402370 6854C14700              push 0047C154
:00402375 6A00                    push 00000000
:00402377 E8B7F00200              call 00431433
:0040237C 83C40C                  add esp, 0000000C
:0040237F 8B4508                  mov eax, dword ptr [ebp+08]
:00402382 50                      push eax
:00402383 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00402386 E819FFFFFF              call 004022A4
:0040238B B801000000              mov eax, 00000001
:00402390 E90F010000              jmp 004024A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040236A(C)
|
:00402395 B978294B00              mov ecx, 004B2978
:0040239A E82B220000              call 004045CA
:0040239F 85C0                    test eax, eax
:004023A1 745A                    je 004023FD
:004023A3 C7459401000000          mov [ebp-6C], 00000001
:004023AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004023AD 51                      push ecx

* Possible StringData Ref from Data Obj ->"YF躡FC
y%szJܮwܡH"
                                  |
:004023AE 6864C14700              push 0047C164
:004023B3 8D5598                  lea edx, dword ptr [ebp-68]
:004023B6 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004023B7 FF1504D74B00            Call dword ptr [004BD704]
:004023BD 83C40C                  add esp, 0000000C
:004023C0 6A00                    push 00000000
:004023C2 8D4598                  lea eax, dword ptr [ebp-68]
:004023C5 50                      push eax
:004023C6 E815750600              call 004698E0
:004023CB 83C408                  add esp, 00000008
:004023CE 85C0                    test eax, eax
:004023D0 742B                    je 004023FD
:004023D2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004023D5 51                      push ecx

* Possible StringData Ref from Data Obj ->"y%szBiܮwF"
                                  |
:004023D6 6888C14700              push 0047C188
:004023DB 6A00                    push 00000000
:004023DD E851F00200              call 00431433
:004023E2 83C40C                  add esp, 0000000C
:004023E5 8B5508                  mov edx, dword ptr [ebp+08]
:004023E8 52                      push edx
:004023E9 B978294B00              mov ecx, 004B2978
:004023EE E8FB210000              call 004045EE
:004023F3 B801000000              mov eax, 00000001
:004023F8 E9A7000000              jmp 004024A4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040235B(U), :004023A1(C), :004023D0(C)
|
:004023FD 837D9400                cmp dword ptr [ebp-6C], 00000000
:00402401 7409                    je 0040240C

* Possible StringData Ref from Data Obj ->"D㲾ʨܮwܡH"
                                  |
:00402403 C745889CC14700          mov [ebp-78], 0047C19C
:0040240A EB07                    jmp 00402413

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402401(C)
|

* Possible StringData Ref from Data Obj ->"ʭܮwDܡH"
                                  |
:0040240C C74588B4C14700          mov [ebp-78], 0047C1B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040240A(U)
|
:00402413 8B4588                  mov eax, dword ptr [ebp-78]
:00402416 50                      push eax
:00402417 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040241A 51                      push ecx

* Possible StringData Ref from Data Obj ->"ay%szC
%s"
                                  |
:0040241B 68C8C14700              push 0047C1C8
:00402420 8D5598                  lea edx, dword ptr [ebp-68]
:00402423 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00402424 FF1504D74B00            Call dword ptr [004BD704]
:0040242A 83C410                  add esp, 00000010
:0040242D 6A00                    push 00000000
:0040242F 8D4598                  lea eax, dword ptr [ebp-68]
:00402432 50                      push eax
:00402433 E8A8740600              call 004698E0
:00402438 83C408                  add esp, 00000008
:0040243B 85C0                    test eax, eax
:0040243D 7421                    je 00402460
:0040243F 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00402442 E8390D0000              call 00403180
:00402447 50                      push eax
:00402448 E81E260000              call 00404A6B
:0040244D 83C404                  add esp, 00000004
:00402450 894590                  mov dword ptr [ebp-70], eax
:00402453 837D9000                cmp dword ptr [ebp-70], 00000000
:00402457 7405                    je 0040245E
:00402459 E8BF860500              call 0045AB1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402457(C)
|
:0040245E EB3F                    jmp 0040249F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040243D(C)
|
:00402460 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00402463 51                      push ecx

* Possible StringData Ref from Data Obj ->"y%szܡH"
                                  |
:00402464 68DCC14700              push 0047C1DC
:00402469 8D5598                  lea edx, dword ptr [ebp-68]
:0040246C 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0040246D FF1504D74B00            Call dword ptr [004BD704]
:00402473 83C40C                  add esp, 0000000C
:00402476 6A00                    push 00000000
:00402478 8D4598                  lea eax, dword ptr [ebp-68]
:0040247B 50                      push eax
:0040247C E85F740600              call 004698E0
:00402481 83C408                  add esp, 00000008
:00402484 85C0                    test eax, eax
:00402486 7417                    je 0040249F
:00402488 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040248B 51                      push ecx

* Possible StringData Ref from Data Obj ->"Fy%szC"
                                  |
:0040248C 68ECC14700              push 0047C1EC
:00402491 6A00                    push 00000000
:00402493 E89BEF0200              call 00431433
:00402498 83C40C                  add esp, 0000000C
:0040249B 33C0                    xor eax, eax
:0040249D EB05                    jmp 004024A4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040245E(U), :00402486(C)
|
:0040249F E975FEFFFF              jmp 00402319

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402356(U), :00402390(U), :004023F8(U), :0040249D(U)
|
:004024A4 8BE5                    mov esp, ebp
:004024A6 5D                      pop ebp
:004024A7 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042B57D   , :0043D231   , :0043D8E3   , :0043DBB7   , :0043DF12   
|:0043E27A   , :0043E57A   , :0043E872   , :0043EB69   , :0043F18E   
|:0043F431   , :0043F69B   , :0043F81D   , :0043FA32   , :0043FBC6   
|:0043FFE9   , :004403AF   , :00440608   , :00440851   , :00440A03   
|:00440CB9   , :00440E75   , :00441098   , :00443D8B   , :0045F17C   
|
:004024AA 55                      push ebp
:004024AB 8BEC                    mov ebp, esp
:004024AD 81EC70020000            sub esp, 00000270
:004024B3 898D90FDFFFF            mov dword ptr [ebp+FFFFFD90], ecx
:004024B9 C785C0FDFFFF00000000    mov dword ptr [ebp+FFFFFDC0], 00000000
:004024C3 8B8D90FDFFFF            mov ecx, dword ptr [ebp+FFFFFD90]
:004024C9 E8B20C0000              call 00403180
:004024CE 8985B4FDFFFF            mov dword ptr [ebp+FFFFFDB4], eax
:004024D4 81BDB4FDFFFFC8000000    cmp dword ptr [ebp+FFFFFDB4], 000000C8
:004024DE 7710                    ja 004024F0
:004024E0 8B8590FDFFFF            mov eax, dword ptr [ebp+FFFFFD90]
:004024E6 33C9                    xor ecx, ecx
:004024E8 8A4832                  mov cl, byte ptr [eax+32]
:004024EB 83F963                  cmp ecx, 00000063
:004024EE 720B                    jb 004024FB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004024DE(C)
|
:004024F0 8B85C0FDFFFF            mov eax, dword ptr [ebp+FFFFFDC0]
:004024F6 E94D020000              jmp 00402748

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004024EE(C)
|
:004024FB 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004024FF 7418                    je 00402519
:00402501 8B8D90FDFFFF            mov ecx, dword ptr [ebp+FFFFFD90]
:00402507 E877FCFFFF              call 00402183
:0040250C 25FF000000              and eax, 000000FF
:00402511 8B5508                  mov edx, dword ptr [ebp+08]
:00402514 03D0                    add edx, eax
:00402516 895508                  mov dword ptr [ebp+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004024FF(C)
|
:00402519 EB09                    jmp 00402524

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040271D(U)
|
:0040251B 8B4508                  mov eax, dword ptr [ebp+08]
:0040251E 83E864                  sub eax, 00000064
:00402521 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402519(U)
|
:00402524 837D0864                cmp dword ptr [ebp+08], 00000064
:00402528 0F82F4010000            jb 00402722
:0040252E C785BCFDFFFF00000000    mov dword ptr [ebp+FFFFFDBC], 00000000
:00402538 EB0F                    jmp 00402549

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402571(U)
|
:0040253A 8B8DBCFDFFFF            mov ecx, dword ptr [ebp+FFFFFDBC]
:00402540 83C101                  add ecx, 00000001
:00402543 898DBCFDFFFF            mov dword ptr [ebp+FFFFFDBC], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402538(U)
|
:00402549 83BDBCFDFFFF08          cmp dword ptr [ebp+FFFFFDBC], 00000008
:00402550 7321                    jnb 00402573
:00402552 8B95BCFDFFFF            mov edx, dword ptr [ebp+FFFFFDBC]
:00402558 52                      push edx
:00402559 8B8D90FDFFFF            mov ecx, dword ptr [ebp+FFFFFD90]
:0040255F E8D6ECFFFF              call 0040123A
:00402564 8B8DBCFDFFFF            mov ecx, dword ptr [ebp+FFFFFDBC]
:0040256A 89848D94FDFFFF          mov dword ptr [ebp+4*ecx-0000026C], eax
:00402571 EBC7                    jmp 0040253A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402550(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00402573 6A05                    push 00000005
:00402575 B9F8544B00              mov ecx, 004B54F8
:0040257A E89B6F0600              call 0046951A
:0040257F 6A01                    push 00000001
:00402581 8B8D90FDFFFF            mov ecx, dword ptr [ebp+FFFFFD90]
:00402587 E84FF5FFFF              call 00401ADB
:0040258C 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00402590 0F8487010000            je 0040271D
:00402596 C685F8FDFFFF00          mov byte ptr [ebp+FFFFFDF8], 00
:0040259D 8B9590FDFFFF            mov edx, dword ptr [ebp+FFFFFD90]
:004025A3 33C0                    xor eax, eax
:004025A5 8A4232                  mov al, byte ptr [edx+32]
:004025A8 50                      push eax
:004025A9 8B8D90FDFFFF            mov ecx, dword ptr [ebp+FFFFFD90]
:004025AF 83C10C                  add ecx, 0000000C
:004025B2 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sŦ%uFI
"
                                  |
:004025B3 68FCC14700              push 0047C1FC
:004025B8 8D95C4FDFFFF            lea edx, dword ptr [ebp+FFFFFDC4]
:004025BE 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004025BF FF1504D74B00            Call dword ptr [004BD704]
:004025C5 83C410                  add esp, 00000010
:004025C8 8D85C4FDFFFF            lea eax, dword ptr [ebp+FFFFFDC4]
:004025CE 50                      push eax
:004025CF 8D8DF8FDFFFF            lea ecx, dword ptr [ebp+FFFFFDF8]
:004025D5 51                      push ecx
:004025D6 E8555F0700              call 00478530
:004025DB 83C408                  add esp, 00000008
:004025DE C785BCFDFFFF00000000    mov dword ptr [ebp+FFFFFDBC], 00000000
:004025E8 EB0F                    jmp 004025F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040265B(U)
|
:004025EA 8B95BCFDFFFF            mov edx, dword ptr [ebp+FFFFFDBC]
:004025F0 83C201                  add edx, 00000001
:004025F3 8995BCFDFFFF            mov dword ptr [ebp+FFFFFDBC], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004025E8(U)
|
:004025F9 83BDBCFDFFFF08          cmp dword ptr [ebp+FFFFFDBC], 00000008
:00402600 735B                    jnb 0040265D
:00402602 8B85BCFDFFFF            mov eax, dword ptr [ebp+FFFFFDBC]
:00402608 50                      push eax
:00402609 8B8D90FDFFFF            mov ecx, dword ptr [ebp+FFFFFD90]
:0040260F E826ECFFFF              call 0040123A
:00402614 8B8DBCFDFFFF            mov ecx, dword ptr [ebp+FFFFFDBC]
:0040261A 2B848D94FDFFFF          sub eax, dword ptr [ebp+4*ecx-0000026C]
:00402621 50                      push eax
:00402622 8B95BCFDFFFF            mov edx, dword ptr [ebp+FFFFFDBC]
:00402628 8B049588D64700          mov eax, dword ptr [4*edx+0047D688]
:0040262F 50                      push eax

* Possible StringData Ref from Data Obj ->"%6sW[F%2uC
"
                                  |
:00402630 6810C24700              push 0047C210
:00402635 8D8DC4FDFFFF            lea ecx, dword ptr [ebp+FFFFFDC4]
:0040263B 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0040263C FF1504D74B00            Call dword ptr [004BD704]
:00402642 83C410                  add esp, 00000010
:00402645 8D95C4FDFFFF            lea edx, dword ptr [ebp+FFFFFDC4]
:0040264B 52                      push edx
:0040264C 8D85F8FDFFFF            lea eax, dword ptr [ebp+FFFFFDF8]
:00402652 50                      push eax
:00402653 E8F85E0700              call 00478550
:00402658 83C408                  add esp, 00000008
:0040265B EB8D                    jmp 004025EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402600(C)
|
:0040265D 8D8DF8FDFFFF            lea ecx, dword ptr [ebp+FFFFFDF8]
:00402663 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00402664 6A05                    push 00000005
:00402666 E8C8ED0200              call 00431433
:0040266B 83C408                  add esp, 00000008
:0040266E C685F8FDFFFF00          mov byte ptr [ebp+FFFFFDF8], 00
:00402675 C785B8FDFFFF00000000    mov dword ptr [ebp+FFFFFDB8], 00000000
:0040267F EB0F                    jmp 00402690

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402718(U)
|
:00402681 8B95B8FDFFFF            mov edx, dword ptr [ebp+FFFFFDB8]
:00402687 83C201                  add edx, 00000001
:0040268A 8995B8FDFFFF            mov dword ptr [ebp+FFFFFDB8], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040267F(U)
|
:00402690 83BDB8FDFFFF41          cmp dword ptr [ebp+FFFFFDB8], 00000041
:00402697 0F8380000000            jnb 0040271D
:0040269D 8B8590FDFFFF            mov eax, dword ptr [ebp+FFFFFD90]
:004026A3 33C9                    xor ecx, ecx
:004026A5 8A4831                  mov cl, byte ptr [eax+31]
:004026A8 51                      push ecx
:004026A9 8B8DB8FDFFFF            mov ecx, dword ptr [ebp+FFFFFDB8]
:004026AF 6BC931                  imul ecx, 00000031
:004026B2 81C1001D4B00            add ecx, 004B1D00
:004026B8 E853FD0000              call 00412410
:004026BD 25FF000000              and eax, 000000FF
:004026C2 8B9590FDFFFF            mov edx, dword ptr [ebp+FFFFFD90]
:004026C8 33C9                    xor ecx, ecx
:004026CA 8A4A32                  mov cl, byte ptr [edx+32]
:004026CD 3BC1                    cmp eax, ecx
:004026CF 7547                    jne 00402718

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004026D1 6A05                    push 00000005
:004026D3 B9F8544B00              mov ecx, 004B54F8
:004026D8 E83D6E0600              call 0046951A
:004026DD 8B8DB8FDFFFF            mov ecx, dword ptr [ebp+FFFFFDB8]
:004026E3 6BC931                  imul ecx, 00000031
:004026E6 81C1001D4B00            add ecx, 004B1D00
:004026EC E8FF2F0000              call 004056F0
:004026F1 50                      push eax

* Possible StringData Ref from Data Obj ->"Ƿ|%sFI"
                                  |
:004026F2 6820C24700              push 0047C220
:004026F7 8D95F8FDFFFF            lea edx, dword ptr [ebp+FFFFFDF8]
:004026FD 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004026FE FF1504D74B00            Call dword ptr [004BD704]
:00402704 83C40C                  add esp, 0000000C
:00402707 8D85F8FDFFFF            lea eax, dword ptr [ebp+FFFFFDF8]
:0040270D 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040270E 6A05                    push 00000005
:00402710 E81EED0200              call 00431433
:00402715 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004026CF(C)
|
:00402718 E964FFFFFF              jmp 00402681

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402590(C), :00402697(C)
|
:0040271D E9F9FDFFFF              jmp 0040251B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402528(C)
|
:00402722 8B8D90FDFFFF            mov ecx, dword ptr [ebp+FFFFFD90]
:00402728 8A5508                  mov dl, byte ptr [ebp+08]
:0040272B 885133                  mov byte ptr [ecx+33], dl
:0040272E 8B8D90FDFFFF            mov ecx, dword ptr [ebp+FFFFFD90]
:00402734 E8470A0000              call 00403180
:00402739 50                      push eax
:0040273A E8DDA30600              call 0046CB1C
:0040273F 83C404                  add esp, 00000004
:00402742 8B85C0FDFFFF            mov eax, dword ptr [ebp+FFFFFDC0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004024F6(U)
|
:00402748 8BE5                    mov esp, ebp
:0040274A 5D                      pop ebp
:0040274B C20800                  ret 0008



* Referenced by a CALL at Address:
|:0046237E   
|
:0040274E 55                      push ebp
:0040274F 8BEC                    mov ebp, esp
:00402751 83EC0C                  sub esp, 0000000C
:00402754 894DF4                  mov dword ptr [ebp-0C], ecx
:00402757 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040275A E8210A0000              call 00403180
:0040275F 8945F8                  mov dword ptr [ebp-08], eax
:00402762 817DF8C8000000          cmp dword ptr [ebp-08], 000000C8
:00402769 720D                    jb 00402778
:0040276B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040276E 33C9                    xor ecx, ecx
:00402770 8A4832                  mov cl, byte ptr [eax+32]
:00402773 83F963                  cmp ecx, 00000063
:00402776 7205                    jb 0040277D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402769(C)
|
:00402778 E9CA000000              jmp 00402847

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402776(C)
|
:0040277D C745FC00000000          mov [ebp-04], 00000000
:00402784 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402787 33C0                    xor eax, eax
:00402789 8A4232                  mov al, byte ptr [edx+32]
:0040278C 83F80A                  cmp eax, 0000000A
:0040278F 7D10                    jge 004027A1
:00402791 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402794 33D2                    xor edx, edx
:00402796 8A5132                  mov dl, byte ptr [ecx+32]
:00402799 6BD20A                  imul edx, 0000000A
:0040279C 8955FC                  mov dword ptr [ebp-04], edx
:0040279F EB07                    jmp 004027A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040278F(C)
|
:004027A1 C745FC64000000          mov [ebp-04], 00000064

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040279F(U)
|
:004027A8 8B4508                  mov eax, dword ptr [ebp+08]
:004027AB 3B45FC                  cmp eax, dword ptr [ebp-04]
:004027AE 7C7D                    jl 0040282D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040282B(U)
|
:004027B0 B901000000              mov ecx, 00000001
:004027B5 85C9                    test ecx, ecx
:004027B7 7474                    je 0040282D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004027B9 6A05                    push 00000005
:004027BB B9F8544B00              mov ecx, 004B54F8
:004027C0 E8556D0600              call 0046951A
:004027C5 6A01                    push 00000001
:004027C7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004027CA E80CF3FFFF              call 00401ADB
:004027CF 8B55F4                  mov edx, dword ptr [ebp-0C]
:004027D2 33C0                    xor eax, eax
:004027D4 8A4232                  mov al, byte ptr [edx+32]
:004027D7 50                      push eax
:004027D8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004027DB 83C10C                  add ecx, 0000000C
:004027DE 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sŦ%uFI"
                                  |
:004027DF 6830C24700              push 0047C230
:004027E4 6A00                    push 00000000
:004027E6 E848EC0200              call 00431433
:004027EB 83C410                  add esp, 00000010
:004027EE 8B5508                  mov edx, dword ptr [ebp+08]
:004027F1 2B55FC                  sub edx, dword ptr [ebp-04]
:004027F4 895508                  mov dword ptr [ebp+08], edx
:004027F7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004027FA 33C9                    xor ecx, ecx
:004027FC 8A4832                  mov cl, byte ptr [eax+32]
:004027FF 83F90A                  cmp ecx, 0000000A
:00402802 7D10                    jge 00402814
:00402804 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402807 33C0                    xor eax, eax
:00402809 8A4232                  mov al, byte ptr [edx+32]
:0040280C 6BC00A                  imul eax, 0000000A
:0040280F 8945FC                  mov dword ptr [ebp-04], eax
:00402812 EB07                    jmp 0040281B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402802(C)
|
:00402814 C745FC64000000          mov [ebp-04], 00000064

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402812(U)
|
:0040281B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040281E 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:00402821 7C06                    jl 00402829
:00402823 837D0800                cmp dword ptr [ebp+08], 00000000
:00402827 7D02                    jge 0040282B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402821(C)
|
:00402829 EB02                    jmp 0040282D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402827(C)
|
:0040282B EB83                    jmp 004027B0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004027AE(C), :004027B7(C), :00402829(U)
|
:0040282D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402830 8A4508                  mov al, byte ptr [ebp+08]
:00402833 884233                  mov byte ptr [edx+33], al
:00402836 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402839 E842090000              call 00403180
:0040283E 50                      push eax
:0040283F E8D8A20600              call 0046CB1C
:00402844 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402778(U)
|
:00402847 8BE5                    mov esp, ebp
:00402849 5D                      pop ebp
:0040284A C20400                  ret 0004



* Referenced by a CALL at Address:
|:00433F4A   
|
:0040284D 55                      push ebp
:0040284E 8BEC                    mov ebp, esp
:00402850 83EC14                  sub esp, 00000014
:00402853 894DF0                  mov dword ptr [ebp-10], ecx
:00402856 C745F800000000          mov [ebp-08], 00000000
:0040285D 8B45F0                  mov eax, dword ptr [ebp-10]
:00402860 33C9                    xor ecx, ecx
:00402862 8A4832                  mov cl, byte ptr [eax+32]
:00402865 894DF4                  mov dword ptr [ebp-0C], ecx
:00402868 8B55F0                  mov edx, dword ptr [ebp-10]
:0040286B 33C0                    xor eax, eax
:0040286D 8A4231                  mov al, byte ptr [edx+31]
:00402870 99                      cdq
:00402871 33C2                    xor eax, edx
:00402873 2BC2                    sub eax, edx
:00402875 83E001                  and eax, 00000001
:00402878 33C2                    xor eax, edx
:0040287A 2BC2                    sub eax, edx
:0040287C 8945EC                  mov dword ptr [ebp-14], eax
:0040287F 837DEC00                cmp dword ptr [ebp-14], 00000000
:00402883 7461                    je 004028E6
:00402885 837DEC01                cmp dword ptr [ebp-14], 00000001
:00402889 7405                    je 00402890
:0040288B E989000000              jmp 00402919

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402889(C)
|
:00402890 837DF414                cmp dword ptr [ebp-0C], 00000014
:00402894 7302                    jnb 00402898
:00402896 EB4E                    jmp 004028E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402894(C)
|
:00402898 8B4508                  mov eax, dword ptr [ebp+08]
:0040289B 50                      push eax
:0040289C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040289F 33D2                    xor edx, edx
:004028A1 8A5131                  mov dl, byte ptr [ecx+31]
:004028A4 8BCA                    mov ecx, edx
:004028A6 83E901                  sub ecx, 00000001
:004028A9 6BC91C                  imul ecx, 0000001C
:004028AC 81C178794A00            add ecx, 004A7978
:004028B2 E8E9090000              call 004032A0
:004028B7 25FF000000              and eax, 000000FF
:004028BC 8945FC                  mov dword ptr [ebp-04], eax
:004028BF 8B45FC                  mov eax, dword ptr [ebp-04]
:004028C2 6BC014                  imul eax, 00000014
:004028C5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004028C8 03C8                    add ecx, eax
:004028CA 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:004028CD 6A14                    push 00000014
:004028CF 8B55F0                  mov edx, dword ptr [ebp-10]
:004028D2 8A4232                  mov al, byte ptr [edx+32]
:004028D5 50                      push eax
:004028D6 E8855A0700              call 00478360
:004028DB 83C408                  add esp, 00000008
:004028DE 25FF000000              and eax, 000000FF
:004028E3 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402883(C), :00402896(U)
|
:004028E6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004028E9 51                      push ecx
:004028EA 8B55F0                  mov edx, dword ptr [ebp-10]
:004028ED 33C0                    xor eax, eax
:004028EF 8A4231                  mov al, byte ptr [edx+31]
:004028F2 8BC8                    mov ecx, eax
:004028F4 6BC91C                  imul ecx, 0000001C
:004028F7 81C178794A00            add ecx, 004A7978
:004028FD E89E090000              call 004032A0
:00402902 25FF000000              and eax, 000000FF
:00402907 8945FC                  mov dword ptr [ebp-04], eax
:0040290A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040290D 0FAF4DFC                imul ecx, dword ptr [ebp-04]
:00402911 8B55F8                  mov edx, dword ptr [ebp-08]
:00402914 03D1                    add edx, ecx
:00402916 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040288B(U)
|
:00402919 8B45F8                  mov eax, dword ptr [ebp-08]
:0040291C 8BE5                    mov esp, ebp
:0040291E 5D                      pop ebp
:0040291F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040F446   , :0040F4AA   
|
:00402922 55                      push ebp
:00402923 8BEC                    mov ebp, esp
:00402925 83EC14                  sub esp, 00000014
:00402928 894DEC                  mov dword ptr [ebp-14], ecx
:0040292B 8B4508                  mov eax, dword ptr [ebp+08]
:0040292E 80CC10                  or ah, 10
:00402931 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402934 668901                  mov word ptr [ecx], ax
:00402937 8B550C                  mov edx, dword ptr [ebp+0C]
:0040293A 8955FC                  mov dword ptr [ebp-04], edx
:0040293D 8B45EC                  mov eax, dword ptr [ebp-14]
:00402940 83C00C                  add eax, 0000000C
:00402943 8945F8                  mov dword ptr [ebp-08], eax
:00402946 C745F000000000          mov [ebp-10], 00000000
:0040294D EB09                    jmp 00402958

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040297A(U)
|
:0040294F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00402952 83C101                  add ecx, 00000001
:00402955 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040294D(U)
|
:00402958 837DF00C                cmp dword ptr [ebp-10], 0000000C
:0040295C 731E                    jnb 0040297C
:0040295E 8B55F8                  mov edx, dword ptr [ebp-08]
:00402961 8B45FC                  mov eax, dword ptr [ebp-04]
:00402964 8A08                    mov cl, byte ptr [eax]
:00402966 880A                    mov byte ptr [edx], cl
:00402968 8B55F8                  mov edx, dword ptr [ebp-08]
:0040296B 83C201                  add edx, 00000001
:0040296E 8955F8                  mov dword ptr [ebp-08], edx
:00402971 8B45FC                  mov eax, dword ptr [ebp-04]
:00402974 83C001                  add eax, 00000001
:00402977 8945FC                  mov dword ptr [ebp-04], eax
:0040297A EBD3                    jmp 0040294F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040295C(C)
|
:0040297C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040297F C60100                  mov byte ptr [ecx], 00
:00402982 8B550C                  mov edx, dword ptr [ebp+0C]
:00402985 83C20D                  add edx, 0000000D
:00402988 89550C                  mov dword ptr [ebp+0C], edx
:0040298B 8B450C                  mov eax, dword ptr [ebp+0C]
:0040298E 8945FC                  mov dword ptr [ebp-04], eax
:00402991 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402994 83C119                  add ecx, 00000019
:00402997 894DF8                  mov dword ptr [ebp-08], ecx
:0040299A C745F000000000          mov [ebp-10], 00000000
:004029A1 EB09                    jmp 004029AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004029CE(U)
|
:004029A3 8B55F0                  mov edx, dword ptr [ebp-10]
:004029A6 83C201                  add edx, 00000001
:004029A9 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004029A1(U)
|
:004029AC 837DF00E                cmp dword ptr [ebp-10], 0000000E
:004029B0 731E                    jnb 004029D0
:004029B2 8B45F8                  mov eax, dword ptr [ebp-08]
:004029B5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004029B8 8A11                    mov dl, byte ptr [ecx]
:004029BA 8810                    mov byte ptr [eax], dl
:004029BC 8B45F8                  mov eax, dword ptr [ebp-08]
:004029BF 83C001                  add eax, 00000001
:004029C2 8945F8                  mov dword ptr [ebp-08], eax
:004029C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004029C8 83C101                  add ecx, 00000001
:004029CB 894DFC                  mov dword ptr [ebp-04], ecx
:004029CE EBD3                    jmp 004029A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004029B0(C)
|
:004029D0 8B55F8                  mov edx, dword ptr [ebp-08]
:004029D3 C60200                  mov byte ptr [edx], 00
:004029D6 8B450C                  mov eax, dword ptr [ebp+0C]
:004029D9 83C00F                  add eax, 0000000F
:004029DC 89450C                  mov dword ptr [ebp+0C], eax
:004029DF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004029E2 33D2                    xor edx, edx
:004029E4 8A11                    mov dl, byte ptr [ecx]
:004029E6 8955F4                  mov dword ptr [ebp-0C], edx
:004029E9 8B450C                  mov eax, dword ptr [ebp+0C]
:004029EC 83C001                  add eax, 00000001
:004029EF 89450C                  mov dword ptr [ebp+0C], eax
:004029F2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004029F5 33D2                    xor edx, edx
:004029F7 8A11                    mov dl, byte ptr [ecx]
:004029F9 C1E208                  shl edx, 08
:004029FC 8B45F4                  mov eax, dword ptr [ebp-0C]
:004029FF 03C2                    add eax, edx
:00402A01 8945F4                  mov dword ptr [ebp-0C], eax
:00402A04 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402A07 83C101                  add ecx, 00000001
:00402A0A 894D0C                  mov dword ptr [ebp+0C], ecx
:00402A0D 837D1000                cmp dword ptr [ebp+10], 00000000
:00402A11 751F                    jne 00402A32
:00402A13 8B55EC                  mov edx, dword ptr [ebp-14]
:00402A16 8B45F4                  mov eax, dword ptr [ebp-0C]
:00402A19 894204                  mov dword ptr [edx+04], eax
:00402A1C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402A1F 8B550C                  mov edx, dword ptr [ebp+0C]
:00402A22 8A02                    mov al, byte ptr [edx]
:00402A24 884102                  mov byte ptr [ecx+02], al
:00402A27 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402A2A 83C101                  add ecx, 00000001
:00402A2D 894D0C                  mov dword ptr [ebp+0C], ecx
:00402A30 EB09                    jmp 00402A3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402A11(C)
|
:00402A32 8B550C                  mov edx, dword ptr [ebp+0C]
:00402A35 83C201                  add edx, 00000001
:00402A38 89550C                  mov dword ptr [ebp+0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402A30(U)
|
:00402A3B 8B45EC                  mov eax, dword ptr [ebp-14]
:00402A3E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402A41 8A11                    mov dl, byte ptr [ecx]
:00402A43 88502F                  mov byte ptr [eax+2F], dl
:00402A46 8B450C                  mov eax, dword ptr [ebp+0C]
:00402A49 83C001                  add eax, 00000001
:00402A4C 89450C                  mov dword ptr [ebp+0C], eax
:00402A4F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402A52 8B550C                  mov edx, dword ptr [ebp+0C]
:00402A55 8A02                    mov al, byte ptr [edx]
:00402A57 884130                  mov byte ptr [ecx+30], al
:00402A5A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402A5D 83C101                  add ecx, 00000001
:00402A60 894D0C                  mov dword ptr [ebp+0C], ecx
:00402A63 8B55EC                  mov edx, dword ptr [ebp-14]
:00402A66 8B450C                  mov eax, dword ptr [ebp+0C]
:00402A69 8A08                    mov cl, byte ptr [eax]
:00402A6B 884A28                  mov byte ptr [edx+28], cl
:00402A6E 8B550C                  mov edx, dword ptr [ebp+0C]
:00402A71 83C201                  add edx, 00000001
:00402A74 89550C                  mov dword ptr [ebp+0C], edx
:00402A77 8B45EC                  mov eax, dword ptr [ebp-14]
:00402A7A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402A7D 8A11                    mov dl, byte ptr [ecx]
:00402A7F 885029                  mov byte ptr [eax+29], dl
:00402A82 8B450C                  mov eax, dword ptr [ebp+0C]
:00402A85 83C001                  add eax, 00000001
:00402A88 89450C                  mov dword ptr [ebp+0C], eax
:00402A8B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402A8E 8B550C                  mov edx, dword ptr [ebp+0C]
:00402A91 8A02                    mov al, byte ptr [edx]
:00402A93 88412A                  mov byte ptr [ecx+2A], al
:00402A96 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402A99 83C101                  add ecx, 00000001
:00402A9C 894D0C                  mov dword ptr [ebp+0C], ecx
:00402A9F 8B55EC                  mov edx, dword ptr [ebp-14]
:00402AA2 8B450C                  mov eax, dword ptr [ebp+0C]
:00402AA5 8A08                    mov cl, byte ptr [eax]
:00402AA7 884A2B                  mov byte ptr [edx+2B], cl
:00402AAA 8B550C                  mov edx, dword ptr [ebp+0C]
:00402AAD 83C201                  add edx, 00000001
:00402AB0 89550C                  mov dword ptr [ebp+0C], edx
:00402AB3 8B450C                  mov eax, dword ptr [ebp+0C]
:00402AB6 33C9                    xor ecx, ecx
:00402AB8 8A08                    mov cl, byte ptr [eax]
:00402ABA 894DF4                  mov dword ptr [ebp-0C], ecx
:00402ABD 8B550C                  mov edx, dword ptr [ebp+0C]
:00402AC0 83C201                  add edx, 00000001
:00402AC3 89550C                  mov dword ptr [ebp+0C], edx
:00402AC6 8B450C                  mov eax, dword ptr [ebp+0C]
:00402AC9 33C9                    xor ecx, ecx
:00402ACB 8A08                    mov cl, byte ptr [eax]
:00402ACD C1E108                  shl ecx, 08
:00402AD0 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402AD3 03D1                    add edx, ecx
:00402AD5 8955F4                  mov dword ptr [ebp-0C], edx
:00402AD8 8B450C                  mov eax, dword ptr [ebp+0C]
:00402ADB 83C001                  add eax, 00000001
:00402ADE 89450C                  mov dword ptr [ebp+0C], eax
:00402AE1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402AE4 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402AE7 895108                  mov dword ptr [ecx+08], edx
:00402AEA 8B45EC                  mov eax, dword ptr [ebp-14]
:00402AED 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402AF0 8A11                    mov dl, byte ptr [ecx]
:00402AF2 88502C                  mov byte ptr [eax+2C], dl
:00402AF5 8B450C                  mov eax, dword ptr [ebp+0C]
:00402AF8 83C001                  add eax, 00000001
:00402AFB 89450C                  mov dword ptr [ebp+0C], eax
:00402AFE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402B01 8B550C                  mov edx, dword ptr [ebp+0C]
:00402B04 8A02                    mov al, byte ptr [edx]
:00402B06 88412D                  mov byte ptr [ecx+2D], al
:00402B09 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402B0C 83C101                  add ecx, 00000001
:00402B0F 894D0C                  mov dword ptr [ebp+0C], ecx
:00402B12 8B55EC                  mov edx, dword ptr [ebp-14]
:00402B15 8B450C                  mov eax, dword ptr [ebp+0C]
:00402B18 8A08                    mov cl, byte ptr [eax]
:00402B1A 884A2E                  mov byte ptr [edx+2E], cl
:00402B1D 8B550C                  mov edx, dword ptr [ebp+0C]
:00402B20 83C201                  add edx, 00000001
:00402B23 89550C                  mov dword ptr [ebp+0C], edx
:00402B26 8B45EC                  mov eax, dword ptr [ebp-14]
:00402B29 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402B2C 8A11                    mov dl, byte ptr [ecx]
:00402B2E 885031                  mov byte ptr [eax+31], dl
:00402B31 8B450C                  mov eax, dword ptr [ebp+0C]
:00402B34 83C001                  add eax, 00000001
:00402B37 89450C                  mov dword ptr [ebp+0C], eax
:00402B3A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402B3D 8B550C                  mov edx, dword ptr [ebp+0C]
:00402B40 8A02                    mov al, byte ptr [edx]
:00402B42 884132                  mov byte ptr [ecx+32], al
:00402B45 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402B48 83C101                  add ecx, 00000001
:00402B4B 894D0C                  mov dword ptr [ebp+0C], ecx
:00402B4E 8B55EC                  mov edx, dword ptr [ebp-14]
:00402B51 8B450C                  mov eax, dword ptr [ebp+0C]
:00402B54 8A08                    mov cl, byte ptr [eax]
:00402B56 884A33                  mov byte ptr [edx+33], cl
:00402B59 8B550C                  mov edx, dword ptr [ebp+0C]
:00402B5C 83C201                  add edx, 00000001
:00402B5F 89550C                  mov dword ptr [ebp+0C], edx
:00402B62 8B45EC                  mov eax, dword ptr [ebp-14]
:00402B65 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00402B68 8A11                    mov dl, byte ptr [ecx]
:00402B6A 885034                  mov byte ptr [eax+34], dl
:00402B6D 8B450C                  mov eax, dword ptr [ebp+0C]
:00402B70 83C001                  add eax, 00000001
:00402B73 89450C                  mov dword ptr [ebp+0C], eax
:00402B76 C745F000000000          mov [ebp-10], 00000000
:00402B7D EB09                    jmp 00402B88

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402BA5(U)
|
:00402B7F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00402B82 83C101                  add ecx, 00000001
:00402B85 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402B7D(U)
|
:00402B88 837DF008                cmp dword ptr [ebp-10], 00000008
:00402B8C 7319                    jnb 00402BA7
:00402B8E 8B55EC                  mov edx, dword ptr [ebp-14]
:00402B91 0355F0                  add edx, dword ptr [ebp-10]
:00402B94 8B450C                  mov eax, dword ptr [ebp+0C]
:00402B97 8A08                    mov cl, byte ptr [eax]
:00402B99 884A35                  mov byte ptr [edx+35], cl
:00402B9C 8B550C                  mov edx, dword ptr [ebp+0C]
:00402B9F 83C201                  add edx, 00000001
:00402BA2 89550C                  mov dword ptr [ebp+0C], edx
:00402BA5 EBD8                    jmp 00402B7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402B8C(C)
|
:00402BA7 8B45EC                  mov eax, dword ptr [ebp-14]
:00402BAA 33C9                    xor ecx, ecx
:00402BAC 8A4834                  mov cl, byte ptr [eax+34]
:00402BAF 83F908                  cmp ecx, 00000008
:00402BB2 7D3F                    jge 00402BF3
:00402BB4 8B55EC                  mov edx, dword ptr [ebp-14]
:00402BB7 33C0                    xor eax, eax
:00402BB9 8A4234                  mov al, byte ptr [edx+34]
:00402BBC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402BBF 33D2                    xor edx, edx
:00402BC1 8A540135                mov dl, byte ptr [ecx+eax+35]
:00402BC5 81FAFF000000            cmp edx, 000000FF
:00402BCB 7526                    jne 00402BF3
:00402BCD 8B45EC                  mov eax, dword ptr [ebp-14]
:00402BD0 83C00C                  add eax, 0000000C
:00402BD3 50                      push eax
:00402BD4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402BD7 33D2                    xor edx, edx
:00402BD9 8A5134                  mov dl, byte ptr [ecx+34]
:00402BDC 52                      push edx

* Possible StringData Ref from Data Obj ->"˳%d.%s"
                                  |
:00402BDD 6844C24700              push 0047C244
:00402BE2 6A00                    push 00000000
:00402BE4 E84AE80200              call 00431433
:00402BE9 83C410                  add esp, 00000010
:00402BEC 8B45EC                  mov eax, dword ptr [ebp-14]
:00402BEF C64034FF                mov [eax+34], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402BB2(C), :00402BCB(C)
|
:00402BF3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00402BF6 817908E8030000          cmp dword ptr [ecx+08], 000003E8
:00402BFD 760A                    jbe 00402C09
:00402BFF 8B55EC                  mov edx, dword ptr [ebp-14]
:00402C02 C74208E8030000          mov [edx+08], 000003E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402BFD(C)
|
:00402C09 8B45EC                  mov eax, dword ptr [ebp-14]
:00402C0C 33C9                    xor ecx, ecx
:00402C0E 8A4832                  mov cl, byte ptr [eax+32]
:00402C11 85C9                    test ecx, ecx
:00402C13 7507                    jne 00402C1C
:00402C15 8B55EC                  mov edx, dword ptr [ebp-14]
:00402C18 C6423201                mov [edx+32], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402C13(C)
|
:00402C1C 8B450C                  mov eax, dword ptr [ebp+0C]
:00402C1F 8BE5                    mov esp, ebp
:00402C21 5D                      pop ebp
:00402C22 C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0040EE84   
|
:00402C25 55                      push ebp
:00402C26 8BEC                    mov ebp, esp
:00402C28 83EC08                  sub esp, 00000008
:00402C2B 894DF8                  mov dword ptr [ebp-08], ecx
:00402C2E 8B45F8                  mov eax, dword ptr [ebp-08]
:00402C31 8B4804                  mov ecx, dword ptr [eax+04]
:00402C34 81E1FF000000            and ecx, 000000FF
:00402C3A 8B5508                  mov edx, dword ptr [ebp+08]
:00402C3D 880A                    mov byte ptr [edx], cl
:00402C3F 8B4508                  mov eax, dword ptr [ebp+08]
:00402C42 83C001                  add eax, 00000001
:00402C45 894508                  mov dword ptr [ebp+08], eax
:00402C48 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402C4B 8B5104                  mov edx, dword ptr [ecx+04]
:00402C4E C1EA08                  shr edx, 08
:00402C51 8B4508                  mov eax, dword ptr [ebp+08]
:00402C54 8810                    mov byte ptr [eax], dl
:00402C56 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402C59 83C101                  add ecx, 00000001
:00402C5C 894D08                  mov dword ptr [ebp+08], ecx
:00402C5F 8B5508                  mov edx, dword ptr [ebp+08]
:00402C62 8B45F8                  mov eax, dword ptr [ebp-08]
:00402C65 8A4802                  mov cl, byte ptr [eax+02]
:00402C68 880A                    mov byte ptr [edx], cl
:00402C6A 8B5508                  mov edx, dword ptr [ebp+08]
:00402C6D 83C201                  add edx, 00000001
:00402C70 895508                  mov dword ptr [ebp+08], edx
:00402C73 8B4508                  mov eax, dword ptr [ebp+08]
:00402C76 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402C79 8A512F                  mov dl, byte ptr [ecx+2F]
:00402C7C 8810                    mov byte ptr [eax], dl
:00402C7E 8B4508                  mov eax, dword ptr [ebp+08]
:00402C81 83C001                  add eax, 00000001
:00402C84 894508                  mov dword ptr [ebp+08], eax
:00402C87 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402C8A 8B55F8                  mov edx, dword ptr [ebp-08]
:00402C8D 8A4230                  mov al, byte ptr [edx+30]
:00402C90 8801                    mov byte ptr [ecx], al
:00402C92 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402C95 83C101                  add ecx, 00000001
:00402C98 894D08                  mov dword ptr [ebp+08], ecx
:00402C9B 8B5508                  mov edx, dword ptr [ebp+08]
:00402C9E 8B45F8                  mov eax, dword ptr [ebp-08]
:00402CA1 8A4828                  mov cl, byte ptr [eax+28]
:00402CA4 880A                    mov byte ptr [edx], cl
:00402CA6 8B5508                  mov edx, dword ptr [ebp+08]
:00402CA9 83C201                  add edx, 00000001
:00402CAC 895508                  mov dword ptr [ebp+08], edx
:00402CAF 8B4508                  mov eax, dword ptr [ebp+08]
:00402CB2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402CB5 8A5129                  mov dl, byte ptr [ecx+29]
:00402CB8 8810                    mov byte ptr [eax], dl
:00402CBA 8B4508                  mov eax, dword ptr [ebp+08]
:00402CBD 83C001                  add eax, 00000001
:00402CC0 894508                  mov dword ptr [ebp+08], eax
:00402CC3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402CC6 8B55F8                  mov edx, dword ptr [ebp-08]
:00402CC9 8A422A                  mov al, byte ptr [edx+2A]
:00402CCC 8801                    mov byte ptr [ecx], al
:00402CCE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402CD1 83C101                  add ecx, 00000001
:00402CD4 894D08                  mov dword ptr [ebp+08], ecx
:00402CD7 8B5508                  mov edx, dword ptr [ebp+08]
:00402CDA 8B45F8                  mov eax, dword ptr [ebp-08]
:00402CDD 8A482B                  mov cl, byte ptr [eax+2B]
:00402CE0 880A                    mov byte ptr [edx], cl
:00402CE2 8B5508                  mov edx, dword ptr [ebp+08]
:00402CE5 83C201                  add edx, 00000001
:00402CE8 895508                  mov dword ptr [ebp+08], edx
:00402CEB 8B45F8                  mov eax, dword ptr [ebp-08]
:00402CEE 8B4808                  mov ecx, dword ptr [eax+08]
:00402CF1 81E1FF000000            and ecx, 000000FF
:00402CF7 8B5508                  mov edx, dword ptr [ebp+08]
:00402CFA 880A                    mov byte ptr [edx], cl
:00402CFC 8B4508                  mov eax, dword ptr [ebp+08]
:00402CFF 83C001                  add eax, 00000001
:00402D02 894508                  mov dword ptr [ebp+08], eax
:00402D05 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402D08 8B5108                  mov edx, dword ptr [ecx+08]
:00402D0B C1EA08                  shr edx, 08
:00402D0E 8B4508                  mov eax, dword ptr [ebp+08]
:00402D11 8810                    mov byte ptr [eax], dl
:00402D13 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402D16 83C101                  add ecx, 00000001
:00402D19 894D08                  mov dword ptr [ebp+08], ecx
:00402D1C 8B5508                  mov edx, dword ptr [ebp+08]
:00402D1F 8B45F8                  mov eax, dword ptr [ebp-08]
:00402D22 8A482C                  mov cl, byte ptr [eax+2C]
:00402D25 880A                    mov byte ptr [edx], cl
:00402D27 8B5508                  mov edx, dword ptr [ebp+08]
:00402D2A 83C201                  add edx, 00000001
:00402D2D 895508                  mov dword ptr [ebp+08], edx
:00402D30 8B4508                  mov eax, dword ptr [ebp+08]
:00402D33 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402D36 8A512D                  mov dl, byte ptr [ecx+2D]
:00402D39 8810                    mov byte ptr [eax], dl
:00402D3B 8B4508                  mov eax, dword ptr [ebp+08]
:00402D3E 83C001                  add eax, 00000001
:00402D41 894508                  mov dword ptr [ebp+08], eax
:00402D44 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402D47 8B55F8                  mov edx, dword ptr [ebp-08]
:00402D4A 8A422E                  mov al, byte ptr [edx+2E]
:00402D4D 8801                    mov byte ptr [ecx], al
:00402D4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402D52 83C101                  add ecx, 00000001
:00402D55 894D08                  mov dword ptr [ebp+08], ecx
:00402D58 8B5508                  mov edx, dword ptr [ebp+08]
:00402D5B 8B45F8                  mov eax, dword ptr [ebp-08]
:00402D5E 8A4831                  mov cl, byte ptr [eax+31]
:00402D61 880A                    mov byte ptr [edx], cl
:00402D63 8B5508                  mov edx, dword ptr [ebp+08]
:00402D66 83C201                  add edx, 00000001
:00402D69 895508                  mov dword ptr [ebp+08], edx
:00402D6C 8B4508                  mov eax, dword ptr [ebp+08]
:00402D6F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402D72 8A5132                  mov dl, byte ptr [ecx+32]
:00402D75 8810                    mov byte ptr [eax], dl
:00402D77 8B4508                  mov eax, dword ptr [ebp+08]
:00402D7A 83C001                  add eax, 00000001
:00402D7D 894508                  mov dword ptr [ebp+08], eax
:00402D80 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402D83 8B55F8                  mov edx, dword ptr [ebp-08]
:00402D86 8A4233                  mov al, byte ptr [edx+33]
:00402D89 8801                    mov byte ptr [ecx], al
:00402D8B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402D8E 83C101                  add ecx, 00000001
:00402D91 894D08                  mov dword ptr [ebp+08], ecx
:00402D94 8B5508                  mov edx, dword ptr [ebp+08]
:00402D97 8B45F8                  mov eax, dword ptr [ebp-08]
:00402D9A 8A4834                  mov cl, byte ptr [eax+34]
:00402D9D 880A                    mov byte ptr [edx], cl
:00402D9F 8B5508                  mov edx, dword ptr [ebp+08]
:00402DA2 83C201                  add edx, 00000001
:00402DA5 895508                  mov dword ptr [ebp+08], edx
:00402DA8 C745FC00000000          mov [ebp-04], 00000000
:00402DAF EB09                    jmp 00402DBA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402DD7(U)
|
:00402DB1 8B45FC                  mov eax, dword ptr [ebp-04]
:00402DB4 83C001                  add eax, 00000001
:00402DB7 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402DAF(U)
|
:00402DBA 837DFC08                cmp dword ptr [ebp-04], 00000008
:00402DBE 7319                    jnb 00402DD9
:00402DC0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00402DC3 034DFC                  add ecx, dword ptr [ebp-04]
:00402DC6 8B5508                  mov edx, dword ptr [ebp+08]
:00402DC9 8A4135                  mov al, byte ptr [ecx+35]
:00402DCC 8802                    mov byte ptr [edx], al
:00402DCE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402DD1 83C101                  add ecx, 00000001
:00402DD4 894D08                  mov dword ptr [ebp+08], ecx
:00402DD7 EBD8                    jmp 00402DB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402DBE(C)
|
:00402DD9 8B4508                  mov eax, dword ptr [ebp+08]
:00402DDC 8BE5                    mov esp, ebp
:00402DDE 5D                      pop ebp
:00402DDF C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040E793   
|
:00402DE2 55                      push ebp
:00402DE3 8BEC                    mov ebp, esp
:00402DE5 83EC0C                  sub esp, 0000000C
:00402DE8 894DF4                  mov dword ptr [ebp-0C], ecx
:00402DEB 8B4508                  mov eax, dword ptr [ebp+08]
:00402DEE 33C9                    xor ecx, ecx
:00402DF0 8A08                    mov cl, byte ptr [eax]
:00402DF2 894DFC                  mov dword ptr [ebp-04], ecx
:00402DF5 8B5508                  mov edx, dword ptr [ebp+08]
:00402DF8 83C201                  add edx, 00000001
:00402DFB 895508                  mov dword ptr [ebp+08], edx
:00402DFE 8B4508                  mov eax, dword ptr [ebp+08]
:00402E01 33C9                    xor ecx, ecx
:00402E03 8A08                    mov cl, byte ptr [eax]
:00402E05 C1E108                  shl ecx, 08
:00402E08 8B55FC                  mov edx, dword ptr [ebp-04]
:00402E0B 03D1                    add edx, ecx
:00402E0D 8955FC                  mov dword ptr [ebp-04], edx
:00402E10 8B4508                  mov eax, dword ptr [ebp+08]
:00402E13 83C001                  add eax, 00000001
:00402E16 894508                  mov dword ptr [ebp+08], eax
:00402E19 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402E1C 8B55FC                  mov edx, dword ptr [ebp-04]
:00402E1F 895104                  mov dword ptr [ecx+04], edx
:00402E22 8B45F4                  mov eax, dword ptr [ebp-0C]
:00402E25 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402E28 8A11                    mov dl, byte ptr [ecx]
:00402E2A 885002                  mov byte ptr [eax+02], dl
:00402E2D 8B4508                  mov eax, dword ptr [ebp+08]
:00402E30 83C001                  add eax, 00000001
:00402E33 894508                  mov dword ptr [ebp+08], eax
:00402E36 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402E39 8B5508                  mov edx, dword ptr [ebp+08]
:00402E3C 8A02                    mov al, byte ptr [edx]
:00402E3E 88412F                  mov byte ptr [ecx+2F], al
:00402E41 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402E44 83C101                  add ecx, 00000001
:00402E47 894D08                  mov dword ptr [ebp+08], ecx
:00402E4A 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402E4D 8B4508                  mov eax, dword ptr [ebp+08]
:00402E50 8A08                    mov cl, byte ptr [eax]
:00402E52 884A30                  mov byte ptr [edx+30], cl
:00402E55 8B5508                  mov edx, dword ptr [ebp+08]
:00402E58 83C201                  add edx, 00000001
:00402E5B 895508                  mov dword ptr [ebp+08], edx
:00402E5E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00402E61 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402E64 8A11                    mov dl, byte ptr [ecx]
:00402E66 885028                  mov byte ptr [eax+28], dl
:00402E69 8B4508                  mov eax, dword ptr [ebp+08]
:00402E6C 83C001                  add eax, 00000001
:00402E6F 894508                  mov dword ptr [ebp+08], eax
:00402E72 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402E75 8B5508                  mov edx, dword ptr [ebp+08]
:00402E78 8A02                    mov al, byte ptr [edx]
:00402E7A 884129                  mov byte ptr [ecx+29], al
:00402E7D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402E80 83C101                  add ecx, 00000001
:00402E83 894D08                  mov dword ptr [ebp+08], ecx
:00402E86 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402E89 8B4508                  mov eax, dword ptr [ebp+08]
:00402E8C 8A08                    mov cl, byte ptr [eax]
:00402E8E 884A2A                  mov byte ptr [edx+2A], cl
:00402E91 8B5508                  mov edx, dword ptr [ebp+08]
:00402E94 83C201                  add edx, 00000001
:00402E97 895508                  mov dword ptr [ebp+08], edx
:00402E9A 8B45F4                  mov eax, dword ptr [ebp-0C]
:00402E9D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402EA0 8A11                    mov dl, byte ptr [ecx]
:00402EA2 88502B                  mov byte ptr [eax+2B], dl
:00402EA5 8B4508                  mov eax, dword ptr [ebp+08]
:00402EA8 83C001                  add eax, 00000001
:00402EAB 894508                  mov dword ptr [ebp+08], eax
:00402EAE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402EB1 33D2                    xor edx, edx
:00402EB3 8A11                    mov dl, byte ptr [ecx]
:00402EB5 8955FC                  mov dword ptr [ebp-04], edx
:00402EB8 8B4508                  mov eax, dword ptr [ebp+08]
:00402EBB 83C001                  add eax, 00000001
:00402EBE 894508                  mov dword ptr [ebp+08], eax
:00402EC1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402EC4 33D2                    xor edx, edx
:00402EC6 8A11                    mov dl, byte ptr [ecx]
:00402EC8 C1E208                  shl edx, 08
:00402ECB 8B45FC                  mov eax, dword ptr [ebp-04]
:00402ECE 03C2                    add eax, edx
:00402ED0 8945FC                  mov dword ptr [ebp-04], eax
:00402ED3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402ED6 83C101                  add ecx, 00000001
:00402ED9 894D08                  mov dword ptr [ebp+08], ecx
:00402EDC 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402EDF 8B45FC                  mov eax, dword ptr [ebp-04]
:00402EE2 894208                  mov dword ptr [edx+08], eax
:00402EE5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402EE8 8B5508                  mov edx, dword ptr [ebp+08]
:00402EEB 8A02                    mov al, byte ptr [edx]
:00402EED 88412C                  mov byte ptr [ecx+2C], al
:00402EF0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402EF3 83C101                  add ecx, 00000001
:00402EF6 894D08                  mov dword ptr [ebp+08], ecx
:00402EF9 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402EFC 8B4508                  mov eax, dword ptr [ebp+08]
:00402EFF 8A08                    mov cl, byte ptr [eax]
:00402F01 884A2D                  mov byte ptr [edx+2D], cl
:00402F04 8B5508                  mov edx, dword ptr [ebp+08]
:00402F07 83C201                  add edx, 00000001
:00402F0A 895508                  mov dword ptr [ebp+08], edx
:00402F0D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00402F10 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402F13 8A11                    mov dl, byte ptr [ecx]
:00402F15 88502E                  mov byte ptr [eax+2E], dl
:00402F18 8B4508                  mov eax, dword ptr [ebp+08]
:00402F1B 83C001                  add eax, 00000001
:00402F1E 894508                  mov dword ptr [ebp+08], eax
:00402F21 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402F24 8B5508                  mov edx, dword ptr [ebp+08]
:00402F27 8A02                    mov al, byte ptr [edx]
:00402F29 884131                  mov byte ptr [ecx+31], al
:00402F2C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402F2F 83C101                  add ecx, 00000001
:00402F32 894D08                  mov dword ptr [ebp+08], ecx
:00402F35 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402F38 8B4508                  mov eax, dword ptr [ebp+08]
:00402F3B 8A08                    mov cl, byte ptr [eax]
:00402F3D 884A32                  mov byte ptr [edx+32], cl
:00402F40 8B5508                  mov edx, dword ptr [ebp+08]
:00402F43 83C201                  add edx, 00000001
:00402F46 895508                  mov dword ptr [ebp+08], edx
:00402F49 8B45F4                  mov eax, dword ptr [ebp-0C]
:00402F4C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402F4F 8A11                    mov dl, byte ptr [ecx]
:00402F51 885033                  mov byte ptr [eax+33], dl
:00402F54 8B4508                  mov eax, dword ptr [ebp+08]
:00402F57 83C001                  add eax, 00000001
:00402F5A 894508                  mov dword ptr [ebp+08], eax
:00402F5D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402F60 8B5508                  mov edx, dword ptr [ebp+08]
:00402F63 8A02                    mov al, byte ptr [edx]
:00402F65 884134                  mov byte ptr [ecx+34], al
:00402F68 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402F6B 83C101                  add ecx, 00000001
:00402F6E 894D08                  mov dword ptr [ebp+08], ecx
:00402F71 C745F800000000          mov [ebp-08], 00000000
:00402F78 EB09                    jmp 00402F83

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402FA0(U)
|
:00402F7A 8B55F8                  mov edx, dword ptr [ebp-08]
:00402F7D 83C201                  add edx, 00000001
:00402F80 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402F78(U)
|
:00402F83 837DF808                cmp dword ptr [ebp-08], 00000008
:00402F87 7319                    jnb 00402FA2
:00402F89 8B45F4                  mov eax, dword ptr [ebp-0C]
:00402F8C 0345F8                  add eax, dword ptr [ebp-08]
:00402F8F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00402F92 8A11                    mov dl, byte ptr [ecx]
:00402F94 885035                  mov byte ptr [eax+35], dl
:00402F97 8B4508                  mov eax, dword ptr [ebp+08]
:00402F9A 83C001                  add eax, 00000001
:00402F9D 894508                  mov dword ptr [ebp+08], eax
:00402FA0 EBD8                    jmp 00402F7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00402F87(C)
|
:00402FA2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402FA5 33D2                    xor edx, edx
:00402FA7 8A5134                  mov dl, byte ptr [ecx+34]
:00402FAA 83FA08                  cmp edx, 00000008
:00402FAD 7D3E                    jge 00402FED
:00402FAF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00402FB2 33C9                    xor ecx, ecx
:00402FB4 8A4834                  mov cl, byte ptr [eax+34]
:00402FB7 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402FBA 33C0                    xor eax, eax
:00402FBC 8A440A35                mov al, byte ptr [edx+ecx+35]
:00402FC0 3DFF000000              cmp eax, 000000FF
:00402FC5 7526                    jne 00402FED
:00402FC7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402FCA 83C10C                  add ecx, 0000000C
:00402FCD 51                      push ecx
:00402FCE 8B55F4                  mov edx, dword ptr [ebp-0C]
:00402FD1 33C0                    xor eax, eax
:00402FD3 8A4234                  mov al, byte ptr [edx+34]
:00402FD6 50                      push eax

* Possible StringData Ref from Data Obj ->"˳%d.%s"
                                  |
:00402FD7 6850C24700              push 0047C250
:00402FDC 6A00                    push 00000000
:00402FDE E850E40200              call 00431433
:00402FE3 83C410                  add esp, 00000010
:00402FE6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00402FE9 C64134FF                mov [ecx+34], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00402FAD(C), :00402FC5(C)
|
:00402FED 8B4508                  mov eax, dword ptr [ebp+08]
:00402FF0 8BE5                    mov esp, ebp
:00402FF2 5D                      pop ebp
:00402FF3 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040F630   
|
:00402FF6 55                      push ebp
:00402FF7 8BEC                    mov ebp, esp
:00402FF9 83EC08                  sub esp, 00000008
:00402FFC 894DF8                  mov dword ptr [ebp-08], ecx
:00402FFF C745FC00000000          mov [ebp-04], 00000000
:00403006 EB09                    jmp 00403011

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040302E(U)
|
:00403008 8B45FC                  mov eax, dword ptr [ebp-04]
:0040300B 83C001                  add eax, 00000001
:0040300E 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403006(U)
|
:00403011 837DFC24                cmp dword ptr [ebp-04], 00000024
:00403015 7319                    jnb 00403030
:00403017 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040301A 034DFC                  add ecx, dword ptr [ebp-04]
:0040301D 8B5508                  mov edx, dword ptr [ebp+08]
:00403020 8A02                    mov al, byte ptr [edx]
:00403022 884124                  mov byte ptr [ecx+24], al
:00403025 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403028 83C101                  add ecx, 00000001
:0040302B 894D08                  mov dword ptr [ebp+08], ecx
:0040302E EBD8                    jmp 00403008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403015(C)
|
:00403030 C745FC00000000          mov [ebp-04], 00000000
:00403037 EB09                    jmp 00403042

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040305E(U)
|
:00403039 8B55FC                  mov edx, dword ptr [ebp-04]
:0040303C 83C201                  add edx, 00000001
:0040303F 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403037(U)
|
:00403042 837DFC24                cmp dword ptr [ebp-04], 00000024
:00403046 7318                    jnb 00403060
:00403048 8B45F8                  mov eax, dword ptr [ebp-08]
:0040304B 0345FC                  add eax, dword ptr [ebp-04]
:0040304E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403051 8A11                    mov dl, byte ptr [ecx]
:00403053 8810                    mov byte ptr [eax], dl
:00403055 8B4508                  mov eax, dword ptr [ebp+08]
:00403058 83C001                  add eax, 00000001
:0040305B 894508                  mov dword ptr [ebp+08], eax
:0040305E EBD9                    jmp 00403039

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403046(C)
|
:00403060 8B4508                  mov eax, dword ptr [ebp+08]
:00403063 8BE5                    mov esp, ebp
:00403065 5D                      pop ebp
:00403066 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040F5D0   
|
:00403069 55                      push ebp
:0040306A 8BEC                    mov ebp, esp
:0040306C 83EC08                  sub esp, 00000008
:0040306F 894DF8                  mov dword ptr [ebp-08], ecx
:00403072 8B45F8                  mov eax, dword ptr [ebp-08]
:00403075 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403078 8A11                    mov dl, byte ptr [ecx]
:0040307A 8810                    mov byte ptr [eax], dl
:0040307C 8B4508                  mov eax, dword ptr [ebp+08]
:0040307F 83C001                  add eax, 00000001
:00403082 894508                  mov dword ptr [ebp+08], eax
:00403085 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403088 8B5508                  mov edx, dword ptr [ebp+08]
:0040308B 8A02                    mov al, byte ptr [edx]
:0040308D 884101                  mov byte ptr [ecx+01], al
:00403090 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403093 83C101                  add ecx, 00000001
:00403096 894D08                  mov dword ptr [ebp+08], ecx
:00403099 C745FC00000000          mov [ebp-04], 00000000
:004030A0 EB09                    jmp 004030AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030C8(U)
|
:004030A2 8B55FC                  mov edx, dword ptr [ebp-04]
:004030A5 83C201                  add edx, 00000001
:004030A8 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030A0(U)
|
:004030AB 837DFC08                cmp dword ptr [ebp-04], 00000008
:004030AF 7319                    jnb 004030CA
:004030B1 8B45F8                  mov eax, dword ptr [ebp-08]
:004030B4 0345FC                  add eax, dword ptr [ebp-04]
:004030B7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004030BA 8A11                    mov dl, byte ptr [ecx]
:004030BC 885002                  mov byte ptr [eax+02], dl
:004030BF 8B4508                  mov eax, dword ptr [ebp+08]
:004030C2 83C001                  add eax, 00000001
:004030C5 894508                  mov dword ptr [ebp+08], eax
:004030C8 EBD8                    jmp 004030A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030AF(C)
|
:004030CA C745FC00000000          mov [ebp-04], 00000000
:004030D1 EB09                    jmp 004030DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030F9(U)
|
:004030D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004030D6 83C101                  add ecx, 00000001
:004030D9 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030D1(U)
|
:004030DC 837DFC12                cmp dword ptr [ebp-04], 00000012
:004030E0 7319                    jnb 004030FB
:004030E2 8B55F8                  mov edx, dword ptr [ebp-08]
:004030E5 0355FC                  add edx, dword ptr [ebp-04]
:004030E8 8B4508                  mov eax, dword ptr [ebp+08]
:004030EB 8A08                    mov cl, byte ptr [eax]
:004030ED 884A0A                  mov byte ptr [edx+0A], cl
:004030F0 8B5508                  mov edx, dword ptr [ebp+08]
:004030F3 83C201                  add edx, 00000001
:004030F6 895508                  mov dword ptr [ebp+08], edx
:004030F9 EBD8                    jmp 004030D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004030E0(C)
|
:004030FB 8B4508                  mov eax, dword ptr [ebp+08]
:004030FE 8BE5                    mov esp, ebp
:00403100 5D                      pop ebp
:00403101 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00401228   , :004137F3   , :00415A28   , :00415A5A   , :0041A794   
|:0041FB8B   , :0041FCD2   , :00423C76   , :00423D3C   , :00424A4D   
|:00424C7F   , :00426239   , :0042637D   , :00426449   , :0042841E   
|:004284E8   , :00428660   , :0042873E   , :00429828   , :0042989C   
|:0042B252   , :0042B624   , :0042B8AC   , :00430175   , :00436A05   
|:00458DB2   , :0045B0BD   , :00462C79   , :00462D9A   , :004651B5   
|:004651F2   , :00465DBC   , :0046BC4D   , :0046D159   
|
:00403104 55                      push ebp
:00403105 8BEC                    mov ebp, esp
:00403107 83EC0C                  sub esp, 0000000C
:0040310A 894DF4                  mov dword ptr [ebp-0C], ecx
:0040310D C745FC00000000          mov [ebp-04], 00000000
:00403114 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403117 83C00C                  add eax, 0000000C
:0040311A 8945F8                  mov dword ptr [ebp-08], eax
:0040311D EB09                    jmp 00403128

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403167(U)
|
:0040311F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403122 83C101                  add ecx, 00000001
:00403125 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040311D(U)
|
:00403128 8B55F8                  mov edx, dword ptr [ebp-08]
:0040312B 0FBE02                  movsx eax, byte ptr [edx]
:0040312E 85C0                    test eax, eax
:00403130 7437                    je 00403169
:00403132 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00403135 0FBE11                  movsx edx, byte ptr [ecx]
:00403138 83FA30                  cmp edx, 00000030
:0040313B 7C0B                    jl 00403148
:0040313D 8B45F8                  mov eax, dword ptr [ebp-08]
:00403140 0FBE08                  movsx ecx, byte ptr [eax]
:00403143 83F939                  cmp ecx, 00000039
:00403146 7E17                    jle 0040315F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040313B(C)
|
:00403148 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040314B 0355FC                  add edx, dword ptr [ebp-04]
:0040314E 8B45F8                  mov eax, dword ptr [ebp-08]
:00403151 8A08                    mov cl, byte ptr [eax]
:00403153 884A3D                  mov byte ptr [edx+3D], cl
:00403156 8B55FC                  mov edx, dword ptr [ebp-04]
:00403159 83C201                  add edx, 00000001
:0040315C 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403146(C)
|
:0040315F 837DFC0E                cmp dword ptr [ebp-04], 0000000E
:00403163 7E02                    jle 00403167
:00403165 EB02                    jmp 00403169

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403163(C)
|
:00403167 EBB6                    jmp 0040311F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403130(C), :00403165(U)
|
:00403169 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040316C 0345FC                  add eax, dword ptr [ebp-04]
:0040316F C6403D00                mov [eax+3D], 00
:00403173 8B45F4                  mov eax, dword ptr [ebp-0C]
:00403176 83C03D                  add eax, 0000003D
:00403179 8BE5                    mov esp, ebp
:0040317B 5D                      pop ebp
:0040317C C3                      ret


:0040317D CC                      int 03
:0040317E CC                      int 03
:0040317F CC                      int 03

* Referenced by a CALL at Addresses:
|:004011B6   , :00401AE7   , :00402442   , :004024C9   , :00402734   
|:0040275A   , :00402839   , :00415A1A   , :0041FA96   , :00420F97   
|:004303CC   , :0044ED2F   , :0044EEBD   , :0044EEEF   , :0045AB0D   
|:00462A3D   , :00462A47   , :00462BA0   , :0046B0D4   , :0046B153   
|:0046B26A   , :0046BE03   , :0046CCBA   
|
:00403180 55                      push ebp
:00403181 8BEC                    mov ebp, esp
:00403183 51                      push ecx
:00403184 894DFC                  mov dword ptr [ebp-04], ecx
:00403187 8B45FC                  mov eax, dword ptr [ebp-04]
:0040318A 33C9                    xor ecx, ecx
:0040318C 668B08                  mov cx, word ptr [eax]
:0040318F 8BC1                    mov eax, ecx
:00403191 80E40F                  and ah, 0F
:00403194 8BE5                    mov esp, ebp
:00403196 5D                      pop ebp
:00403197 C3                      ret


:00403198 CC                      int 03
:00403199 CC                      int 03
:0040319A CC                      int 03
:0040319B CC                      int 03
:0040319C CC                      int 03
:0040319D CC                      int 03
:0040319E CC                      int 03
:0040319F CC                      int 03

* Referenced by a CALL at Addresses:
|:00401022   , :004011D9   , :004011E1   , :004011F5   , :004019B4   
|:004159C5   , :00421460   , :004218A8   , :004218CA   , :004225B3   
|:004236ED   , :0042370F   , :00423750   , :00423772   , :004237AF   
|:004237D1   , :00423AD5   , :00425124   , :00425138   , :00425337   
|:0042547E   , :00425612   , :00425717   , :004258EB   , :004258FF   
|:00425A0F   , :00425A23   , :00425C66   , :00425C7A   , :00425E66   
|:0042662A   , :00428830   , :004293B2   , :004293D0   , :0042A8E3   
|:0042AA66   , :0042B1D1   , :0042B1EB   , :0042B9C7   , :00436B07   
|:00436F95   , :004394FB   , :00443EF9   , :00451F0A   , :00451F38   
|:00455058   , :004552CC   , :00458DE7   , :00462A56   , :00462A66   
|:00462DAA   , :0046B31D   
|
:004031A0 55                      push ebp
:004031A1 8BEC                    mov ebp, esp
:004031A3 51                      push ecx
:004031A4 894DFC                  mov dword ptr [ebp-04], ecx
:004031A7 8B45FC                  mov eax, dword ptr [ebp-04]
:004031AA 8A4031                  mov al, byte ptr [eax+31]
:004031AD 8BE5                    mov esp, ebp
:004031AF 5D                      pop ebp
:004031B0 C3                      ret


:004031B1 CC                      int 03
:004031B2 CC                      int 03
:004031B3 CC                      int 03
:004031B4 CC                      int 03
:004031B5 CC                      int 03
:004031B6 CC                      int 03
:004031B7 CC                      int 03
:004031B8 CC                      int 03
:004031B9 CC                      int 03
:004031BA CC                      int 03
:004031BB CC                      int 03
:004031BC CC                      int 03
:004031BD CC                      int 03
:004031BE CC                      int 03
:004031BF CC                      int 03

* Referenced by a CALL at Addresses:
|:00402015   , :00402056   , :004020A9   , :004020FC   , :004086EF   
|:00417470   , :004176E5   , :0041795D   , :00417BD2   , :0041834A   
|:0041FDF5   , :0042D811   , :00433181   , :004341C5   , :00438A20   
|:00439473   , :00443AF9   , :00444131   , :004511DF   , :004524AA   
|:0046331C   , :00465339   
|
:004031C0 55                      push ebp
:004031C1 8BEC                    mov ebp, esp
:004031C3 51                      push ecx
:004031C4 894DFC                  mov dword ptr [ebp-04], ecx
:004031C7 8B45FC                  mov eax, dword ptr [ebp-04]
:004031CA 8A4034                  mov al, byte ptr [eax+34]
:004031CD 8BE5                    mov esp, ebp
:004031CF 5D                      pop ebp
:004031D0 C3                      ret


:004031D1 CC                      int 03
:004031D2 CC                      int 03
:004031D3 CC                      int 03
:004031D4 CC                      int 03
:004031D5 CC                      int 03
:004031D6 CC                      int 03
:004031D7 CC                      int 03
:004031D8 CC                      int 03
:004031D9 CC                      int 03
:004031DA CC                      int 03
:004031DB CC                      int 03
:004031DC CC                      int 03
:004031DD CC                      int 03
:004031DE CC                      int 03
:004031DF CC                      int 03

* Referenced by a CALL at Addresses:
|:00402032   , :00402074   , :004020C7   , :0040211A   , :00408744   
|:004137AB   , :004138F1   , :00414E1F   , :004150F9   , :0041578B   
|:0041584B   , :00416AEE   , :00417496   , :0041770E   , :00417983   
|:00417BFB   , :00419020   , :0042D82C   , :004331AC   , :00434024   
|:00444158   , :004614F0   , :00462EB9   , :00463108   , :00463295   
|:00463342   , :004640FB   , :004642EC   , :00464F63   , :00465083   
|:00465362   , :00465C35   , :00465CEC   , :00466274   , :00466291   
|:0046654F   , :0046BB45   
|
:004031E0 55                      push ebp
:004031E1 8BEC                    mov ebp, esp
:004031E3 51                      push ecx
:004031E4 894DFC                  mov dword ptr [ebp-04], ecx
:004031E7 8B4508                  mov eax, dword ptr [ebp+08]
:004031EA 25FF000000              and eax, 000000FF
:004031EF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004031F2 8A440135                mov al, byte ptr [ecx+eax+35]
:004031F6 8BE5                    mov esp, ebp
:004031F8 5D                      pop ebp
:004031F9 C20400                  ret 0004


:004031FC CC                      int 03
:004031FD CC                      int 03
:004031FE CC                      int 03
:004031FF CC                      int 03

* Referenced by a CALL at Addresses:
|:00402221   , :004022E3   , :00408766   , :00408786   , :0041371F   
|:0041396C   , :00414E87   , :00414EA1   , :00416956   , :00416B73   
|:00416C08   , :00416CD1   , :00418FA4   , :00418FD7   , :0041954A   
|:00421638   , :004341F3   , :00439551   , :00439B57   
|
:00403200 55                      push ebp
:00403201 8BEC                    mov ebp, esp
:00403203 51                      push ecx
:00403204 894DFC                  mov dword ptr [ebp-04], ecx
:00403207 8B4508                  mov eax, dword ptr [ebp+08]
:0040320A 25FF000000              and eax, 000000FF
:0040320F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403212 8A550C                  mov dl, byte ptr [ebp+0C]
:00403215 88540135                mov byte ptr [ecx+eax+35], dl
:00403219 8B45FC                  mov eax, dword ptr [ebp-04]
:0040321C 33C9                    xor ecx, ecx
:0040321E 8A4834                  mov cl, byte ptr [eax+34]
:00403221 8B5508                  mov edx, dword ptr [ebp+08]
:00403224 81E2FF000000            and edx, 000000FF
:0040322A 3BCA                    cmp ecx, edx
:0040322C 7507                    jne 00403235
:0040322E 8B45FC                  mov eax, dword ptr [ebp-04]
:00403231 C64034FF                mov [eax+34], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040322C(C)
|
:00403235 8BE5                    mov esp, ebp
:00403237 5D                      pop ebp
:00403238 C20800                  ret 0008


:0040323B CC                      int 03
:0040323C CC                      int 03
:0040323D CC                      int 03
:0040323E CC                      int 03
:0040323F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040191E   , :00404E13   , :0040C036   , :0040C051   , :0040C0B9   
|:0041866C   , :00463141   , :004631F9   , :00464FA3   , :00464FDA   
|:00465D39   
|
:00403240 55                      push ebp
:00403241 8BEC                    mov ebp, esp
:00403243 51                      push ecx
:00403244 894DFC                  mov dword ptr [ebp-04], ecx
:00403247 8B45FC                  mov eax, dword ptr [ebp-04]
:0040324A 8A4013                  mov al, byte ptr [eax+13]
:0040324D 8BE5                    mov esp, ebp
:0040324F 5D                      pop ebp
:00403250 C3                      ret


:00403251 CC                      int 03
:00403252 CC                      int 03
:00403253 CC                      int 03
:00403254 CC                      int 03
:00403255 CC                      int 03
:00403256 CC                      int 03
:00403257 CC                      int 03
:00403258 CC                      int 03
:00403259 CC                      int 03
:0040325A CC                      int 03
:0040325B CC                      int 03
:0040325C CC                      int 03
:0040325D CC                      int 03
:0040325E CC                      int 03
:0040325F CC                      int 03

* Referenced by a CALL at Addresses:
|:00401C2B   , :00401CC6   , :00412C17   , :00412E34   , :00412EB9   
|:00412F3E   , :00412FBD   , :00413042   , :00414285   , :004144A2   
|:00414527   , :004145AC   , :0041462B   , :004146B0   , :00414803   
|:00414A20   , :00414AA5   , :00414B2A   , :00414BA9   , :00414C2E   
|:004160C7   , :004162E4   , :00416369   , :004163EE   , :0041646D   
|:004164F2   , :004186D3   , :00418C0C   , :00418C1C   , :004381C0   
|:00438429   , :0043AA81   , :0043AB31   , :004622AD   , :004622E9   
|:0046231B   , :0046233C   , :004636A1   , :004638A1   , :00463921   
|:004639A1   , :00463A1B   , :00463A9B   , :004648BA   , :00464AD7   
|:00464B5C   , :00464BE1   , :00464C60   , :00464CE5   , :00465E07   
|:0046635B   , :00466374   
|
:00403260 55                      push ebp
:00403261 8BEC                    mov ebp, esp
:00403263 51                      push ecx
:00403264 894DFC                  mov dword ptr [ebp-04], ecx
:00403267 8B45FC                  mov eax, dword ptr [ebp-04]
:0040326A 8A4016                  mov al, byte ptr [eax+16]
:0040326D 8BE5                    mov esp, ebp
:0040326F 5D                      pop ebp
:00403270 C3                      ret


:00403271 CC                      int 03
:00403272 CC                      int 03
:00403273 CC                      int 03
:00403274 CC                      int 03
:00403275 CC                      int 03
:00403276 CC                      int 03
:00403277 CC                      int 03
:00403278 CC                      int 03
:00403279 CC                      int 03
:0040327A CC                      int 03
:0040327B CC                      int 03
:0040327C CC                      int 03
:0040327D CC                      int 03
:0040327E CC                      int 03
:0040327F CC                      int 03

* Referenced by a CALL at Addresses:
|:00401E8A   , :00412C5B   , :004142C9   , :00414847   , :0041610B   
|:004636E5   , :004648FE   
|
:00403280 55                      push ebp
:00403281 8BEC                    mov ebp, esp
:00403283 51                      push ecx
:00403284 894DFC                  mov dword ptr [ebp-04], ecx
:00403287 8B45FC                  mov eax, dword ptr [ebp-04]
:0040328A 8A4017                  mov al, byte ptr [eax+17]
:0040328D 8BE5                    mov esp, ebp
:0040328F 5D                      pop ebp
:00403290 C3                      ret


:00403291 CC                      int 03
:00403292 CC                      int 03
:00403293 CC                      int 03
:00403294 CC                      int 03
:00403295 CC                      int 03
:00403296 CC                      int 03
:00403297 CC                      int 03
:00403298 CC                      int 03
:00403299 CC                      int 03
:0040329A CC                      int 03
:0040329B CC                      int 03
:0040329C CC                      int 03
:0040329D CC                      int 03
:0040329E CC                      int 03
:0040329F CC                      int 03

* Referenced by a CALL at Addresses:
|:00401B4A   , :004028B2   , :004028FD   
|
:004032A0 55                      push ebp
:004032A1 8BEC                    mov ebp, esp
:004032A3 51                      push ecx
:004032A4 894DFC                  mov dword ptr [ebp-04], ecx
:004032A7 8B45FC                  mov eax, dword ptr [ebp-04]
:004032AA 034508                  add eax, dword ptr [ebp+08]
:004032AD 8A4002                  mov al, byte ptr [eax+02]
:004032B0 8BE5                    mov esp, ebp
:004032B2 5D                      pop ebp
:004032B3 C20400                  ret 0004


:004032B6 CC                      int 03
:004032B7 CC                      int 03
:004032B8 CC                      int 03
:004032B9 CC                      int 03
:004032BA CC                      int 03
:004032BB CC                      int 03
:004032BC CC                      int 03
:004032BD CC                      int 03
:004032BE CC                      int 03
:004032BF CC                      int 03

* Referenced by a CALL at Addresses:
|:00401A29   , :00401A97   , :00403D39   
|
:004032C0 55                      push ebp
:004032C1 8BEC                    mov ebp, esp
:004032C3 51                      push ecx
:004032C4 894DFC                  mov dword ptr [ebp-04], ecx
:004032C7 8B45FC                  mov eax, dword ptr [ebp-04]
:004032CA 034508                  add eax, dword ptr [ebp+08]
:004032CD 8A400A                  mov al, byte ptr [eax+0A]
:004032D0 8BE5                    mov esp, ebp
:004032D2 5D                      pop ebp
:004032D3 C20400                  ret 0004


:004032D6 CC                      int 03
:004032D7 CC                      int 03
:004032D8 CC                      int 03
:004032D9 CC                      int 03
:004032DA CC                      int 03
:004032DB CC                      int 03
:004032DC CC                      int 03
:004032DD CC                      int 03
:004032DE CC                      int 03
:004032DF CC                      int 03

* Referenced by a CALL at Addresses:
|:00401354   , :0040174E   , :0040748C   , :0040AEAD   , :00420801   
|:00420850   , :00420BB3   , :004375B1   , :0043761A   , :00437820   
|:00437AD2   , :00437DF3   , :00437E06   , :00437E2B   , :00437E3F   
|:00437FEA   , :00438015   , :00438044   , :0043806E   , :004381FC   
|:00438233   , :0043825E   , :00438280   , :004383F7   , :0043976D   
|:00439E09   , :0043B931   , :0043C711   , :0043F986   , :00441014   
|:004415CB   , :004415D8   , :004415F1   , :00441601   , :0044160F   
|:00441628   , :00441DF4   , :00443EC8   , :00444889   , :00447A91   
|:00447AAA   , :0044A33E   , :0044A44D   , :0044A54D   , :0044A575   
|:0044A5A7   , :0044A5C5   , :004512A7   , :004512F6   , :0045168F   
|:004516FE   , :00453180   , :004531D3   , :0045341C   , :00453432   
|:00453C1E   , :00453DDC   , :00453F0F   , :00454211   , :004542F2   
|:0045457E   , :004545EC   , :00454C05   , :00454C20   , :0045B14F   
|:0045E9E7   , :0045E9FD   , :0045EA59   , :00460645   , :00460999   
|:004609BD   , :004609EB   , :00460A0A   , :00460EE8   , :0046AF73   
|
:004032E0 55                      push ebp
:004032E1 8BEC                    mov ebp, esp
:004032E3 51                      push ecx
:004032E4 894DFC                  mov dword ptr [ebp-04], ecx
:004032E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004032EA 8B4010                  mov eax, dword ptr [eax+10]
:004032ED 8BE5                    mov esp, ebp
:004032EF 5D                      pop ebp
:004032F0 C3                      ret


:004032F1 CC                      int 03
:004032F2 CC                      int 03
:004032F3 CC                      int 03
:004032F4 CC                      int 03
:004032F5 CC                      int 03
:004032F6 CC                      int 03
:004032F7 CC                      int 03
:004032F8 CC                      int 03
:004032F9 CC                      int 03
:004032FA CC                      int 03
:004032FB CC                      int 03
:004032FC CC                      int 03
:004032FD CC                      int 03
:004032FE CC                      int 03
:004032FF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040138B   , :004017D1   , :004074A8   , :00420468   , :00420475   
|:0042081A   , :00420869   , :00420BC4   , :00421157   , :00421898   
|:004218BA   , :00421B94   , :0042219E   , :004221AB   , :004224AA   
|:004224B7   , :00423204   , :00423437   , :004235BF   , :00423648   
|:004236DD   , :004236FF   , :00423740   , :00423762   , :0042379F   
|:004237C1   , :0042395B   , :00423AC5   , :00423D2C   , :00424F3B   
|:00424F4A   , :00425103   , :00425110   , :00425316   , :00425323   
|:0042546E   , :004255F1   , :004255FE   , :00425703   , :004258CA   
|:004258D7   , :004259EE   , :004259FB   , :00425B3A   , :00425B47   
|:00425BC9   , :00425BD6   , :00425DBF   , :00425DCC   , :00425E56   
|:00426108   , :00426117   , :0042790E   , :0042795D   , :00427B2B   
|:00427B71   , :0042840E   , :00428479   , :004284D8   , :00428558   
|:004285E5   , :00428650   , :004286A6   , :0042872E   , :00428820   
|:00428EE9   , :004297C1   , :004297CC   , :00429954   , :0042995F   
|:0042A22A   , :0042A304   , :0042A8D3   , :0042ADE2   , :0042ADED   
|:0042B0DE   , :0042B0E9   , :0042B242   , :0042B3DF   , :0042B4C1   
|:0042B4CE   , :0042B614   , :0042CC39   , :0042CCC2   , :00437148   
|:0043716B   , :0043730A   , :004378A2   , :00438478   , :0043849A   
|:004384BC   , :00438632   , :004397A4   , :00439E41   , :0043CF75   
|:0043CF97   , :0043CFB2   , :0043CFCF   , :0043D19B   , :0043F097   
|:0043F0C3   , :0043F1D7   , :0043F21B   , :0043F264   , :0043F290   
|:0044359D   , :004435BE   , :004435DF   , :00443EE0   , :0044A37B   
|:0044A467   , :0044A678   , :0044A6A0   , :0044A6D2   , :0044A6F0   
|:00450E0E   , :00450EB7   , :00453142   , :004533D6   , :00454174   
|:0045418F   , :0045443E   , :00454B76   , :0045AE31   , :0045B169   
|:0045B334   , :00460F18   , :0046AF8D   
|
:00403300 55                      push ebp
:00403301 8BEC                    mov ebp, esp
:00403303 51                      push ecx
:00403304 894DFC                  mov dword ptr [ebp-04], ecx
:00403307 8B45FC                  mov eax, dword ptr [ebp-04]
:0040330A 8B4014                  mov eax, dword ptr [eax+14]
:0040330D 8BE5                    mov esp, ebp
:0040330F 5D                      pop ebp
:00403310 C3                      ret


:00403311 CC                      int 03
:00403312 CC                      int 03
:00403313 CC                      int 03
:00403314 CC                      int 03
:00403315 CC                      int 03
:00403316 CC                      int 03
:00403317 CC                      int 03
:00403318 CC                      int 03
:00403319 CC                      int 03
:0040331A CC                      int 03
:0040331B CC                      int 03
:0040331C CC                      int 03
:0040331D CC                      int 03
:0040331E CC                      int 03
:0040331F CC                      int 03

* Referenced by a CALL at Address:
|:0040F50D   
|
:00403320 55                      push ebp
:00403321 8BEC                    mov ebp, esp
:00403323 83EC14                  sub esp, 00000014
:00403326 894DEC                  mov dword ptr [ebp-14], ecx
:00403329 8B4508                  mov eax, dword ptr [ebp+08]
:0040332C 8945FC                  mov dword ptr [ebp-04], eax
:0040332F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00403332 894DF8                  mov dword ptr [ebp-08], ecx
:00403335 C745F000000000          mov [ebp-10], 00000000
:0040333C EB09                    jmp 00403347

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403369(U)
|
:0040333E 8B55F0                  mov edx, dword ptr [ebp-10]
:00403341 83C201                  add edx, 00000001
:00403344 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040333C(U)
|
:00403347 837DF010                cmp dword ptr [ebp-10], 00000010
:0040334B 731E                    jnb 0040336B
:0040334D 8B45F8                  mov eax, dword ptr [ebp-08]
:00403350 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403353 8A11                    mov dl, byte ptr [ecx]
:00403355 8810                    mov byte ptr [eax], dl
:00403357 8B45F8                  mov eax, dword ptr [ebp-08]
:0040335A 83C001                  add eax, 00000001
:0040335D 8945F8                  mov dword ptr [ebp-08], eax
:00403360 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403363 83C101                  add ecx, 00000001
:00403366 894DFC                  mov dword ptr [ebp-04], ecx
:00403369 EBD3                    jmp 0040333E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040334B(C)
|
:0040336B 8B55F8                  mov edx, dword ptr [ebp-08]
:0040336E C60200                  mov byte ptr [edx], 00
:00403371 8B4508                  mov eax, dword ptr [ebp+08]
:00403374 83C011                  add eax, 00000011
:00403377 894508                  mov dword ptr [ebp+08], eax
:0040337A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040337D 8B5508                  mov edx, dword ptr [ebp+08]
:00403380 8A02                    mov al, byte ptr [edx]
:00403382 884111                  mov byte ptr [ecx+11], al
:00403385 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403388 83C101                  add ecx, 00000001
:0040338B 894D08                  mov dword ptr [ebp+08], ecx
:0040338E 8B55EC                  mov edx, dword ptr [ebp-14]
:00403391 8B4508                  mov eax, dword ptr [ebp+08]
:00403394 8A08                    mov cl, byte ptr [eax]
:00403396 884A12                  mov byte ptr [edx+12], cl
:00403399 8B5508                  mov edx, dword ptr [ebp+08]
:0040339C 83C201                  add edx, 00000001
:0040339F 895508                  mov dword ptr [ebp+08], edx
:004033A2 8B45EC                  mov eax, dword ptr [ebp-14]
:004033A5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004033A8 8A11                    mov dl, byte ptr [ecx]
:004033AA 885013                  mov byte ptr [eax+13], dl
:004033AD 8B4508                  mov eax, dword ptr [ebp+08]
:004033B0 83C001                  add eax, 00000001
:004033B3 894508                  mov dword ptr [ebp+08], eax
:004033B6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004033B9 8B5508                  mov edx, dword ptr [ebp+08]
:004033BC 8A02                    mov al, byte ptr [edx]
:004033BE 884114                  mov byte ptr [ecx+14], al
:004033C1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004033C4 83C101                  add ecx, 00000001
:004033C7 894D08                  mov dword ptr [ebp+08], ecx
:004033CA 8B55EC                  mov edx, dword ptr [ebp-14]
:004033CD 8B4508                  mov eax, dword ptr [ebp+08]
:004033D0 8A08                    mov cl, byte ptr [eax]
:004033D2 884A15                  mov byte ptr [edx+15], cl
:004033D5 8B5508                  mov edx, dword ptr [ebp+08]
:004033D8 83C201                  add edx, 00000001
:004033DB 895508                  mov dword ptr [ebp+08], edx
:004033DE 8B45EC                  mov eax, dword ptr [ebp-14]
:004033E1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004033E4 8A11                    mov dl, byte ptr [ecx]
:004033E6 885016                  mov byte ptr [eax+16], dl
:004033E9 8B4508                  mov eax, dword ptr [ebp+08]
:004033EC 83C001                  add eax, 00000001
:004033EF 894508                  mov dword ptr [ebp+08], eax
:004033F2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004033F5 8B5508                  mov edx, dword ptr [ebp+08]
:004033F8 8A02                    mov al, byte ptr [edx]
:004033FA 884117                  mov byte ptr [ecx+17], al
:004033FD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403400 83C101                  add ecx, 00000001
:00403403 894D08                  mov dword ptr [ebp+08], ecx
:00403406 8B55EC                  mov edx, dword ptr [ebp-14]
:00403409 8B4508                  mov eax, dword ptr [ebp+08]
:0040340C 8A08                    mov cl, byte ptr [eax]
:0040340E 884A18                  mov byte ptr [edx+18], cl
:00403411 8B5508                  mov edx, dword ptr [ebp+08]
:00403414 83C201                  add edx, 00000001
:00403417 895508                  mov dword ptr [ebp+08], edx
:0040341A 8B45EC                  mov eax, dword ptr [ebp-14]
:0040341D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403420 8A11                    mov dl, byte ptr [ecx]
:00403422 885019                  mov byte ptr [eax+19], dl
:00403425 8B4508                  mov eax, dword ptr [ebp+08]
:00403428 83C001                  add eax, 00000001
:0040342B 894508                  mov dword ptr [ebp+08], eax
:0040342E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00403431 8B5508                  mov edx, dword ptr [ebp+08]
:00403434 8A02                    mov al, byte ptr [edx]
:00403436 88411A                  mov byte ptr [ecx+1A], al
:00403439 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040343C 83C101                  add ecx, 00000001
:0040343F 894D08                  mov dword ptr [ebp+08], ecx
:00403442 8B5508                  mov edx, dword ptr [ebp+08]
:00403445 33C0                    xor eax, eax
:00403447 8A02                    mov al, byte ptr [edx]
:00403449 8945F4                  mov dword ptr [ebp-0C], eax
:0040344C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040344F 83C101                  add ecx, 00000001
:00403452 894D08                  mov dword ptr [ebp+08], ecx
:00403455 8B5508                  mov edx, dword ptr [ebp+08]
:00403458 33C0                    xor eax, eax
:0040345A 8A02                    mov al, byte ptr [edx]
:0040345C C1E008                  shl eax, 08
:0040345F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00403462 03C8                    add ecx, eax
:00403464 894DF4                  mov dword ptr [ebp-0C], ecx
:00403467 8B5508                  mov edx, dword ptr [ebp+08]
:0040346A 83C201                  add edx, 00000001
:0040346D 895508                  mov dword ptr [ebp+08], edx
:00403470 8B45EC                  mov eax, dword ptr [ebp-14]
:00403473 668B4DF4                mov cx, word ptr [ebp-0C]
:00403477 6689481C                mov word ptr [eax+1C], cx
:0040347B 8B5508                  mov edx, dword ptr [ebp+08]
:0040347E 33C0                    xor eax, eax
:00403480 8A02                    mov al, byte ptr [edx]
:00403482 8945F4                  mov dword ptr [ebp-0C], eax
:00403485 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403488 83C101                  add ecx, 00000001
:0040348B 894D08                  mov dword ptr [ebp+08], ecx
:0040348E 8B5508                  mov edx, dword ptr [ebp+08]
:00403491 33C0                    xor eax, eax
:00403493 8A02                    mov al, byte ptr [edx]
:00403495 C1E008                  shl eax, 08
:00403498 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040349B 03C8                    add ecx, eax
:0040349D 894DF4                  mov dword ptr [ebp-0C], ecx
:004034A0 8B5508                  mov edx, dword ptr [ebp+08]
:004034A3 83C201                  add edx, 00000001
:004034A6 895508                  mov dword ptr [ebp+08], edx
:004034A9 8B45EC                  mov eax, dword ptr [ebp-14]
:004034AC 668B4DF4                mov cx, word ptr [ebp-0C]
:004034B0 6689481E                mov word ptr [eax+1E], cx
:004034B4 8B5508                  mov edx, dword ptr [ebp+08]
:004034B7 33C0                    xor eax, eax
:004034B9 8A02                    mov al, byte ptr [edx]
:004034BB 8945F4                  mov dword ptr [ebp-0C], eax
:004034BE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004034C1 83C101                  add ecx, 00000001
:004034C4 894D08                  mov dword ptr [ebp+08], ecx
:004034C7 8B5508                  mov edx, dword ptr [ebp+08]
:004034CA 33C0                    xor eax, eax
:004034CC 8A02                    mov al, byte ptr [edx]
:004034CE C1E008                  shl eax, 08
:004034D1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004034D4 03C8                    add ecx, eax
:004034D6 894DF4                  mov dword ptr [ebp-0C], ecx
:004034D9 8B5508                  mov edx, dword ptr [ebp+08]
:004034DC 83C201                  add edx, 00000001
:004034DF 895508                  mov dword ptr [ebp+08], edx
:004034E2 8B45EC                  mov eax, dword ptr [ebp-14]
:004034E5 668B4DF4                mov cx, word ptr [ebp-0C]
:004034E9 66894820                mov word ptr [eax+20], cx
:004034ED 8B4508                  mov eax, dword ptr [ebp+08]
:004034F0 8BE5                    mov esp, ebp
:004034F2 5D                      pop ebp
:004034F3 C20400                  ret 0004


:004034F6 55                      push ebp
:004034F7 8BEC                    mov ebp, esp
:004034F9 817D08A3010000          cmp dword ptr [ebp+08], 000001A3
:00403500 730D                    jnb 0040350F
:00403502 8B4508                  mov eax, dword ptr [ebp+08]
:00403505 6BC022                  imul eax, 00000022
:00403508 05D0474900              add eax, 004947D0
:0040350D EB02                    jmp 00403511

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403500(C)
|
:0040350F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040350D(U)
|
:00403511 5D                      pop ebp
:00403512 C3                      ret



* Referenced by a CALL at Addresses:
|:00439485   , :004394D9   , :00439567   , :0043961F   , :00439640   
|:00439681   , :004398B5   , :004398C8   , :00439921   , :0043997B   
|:004399B9   , :00461519   , :004615EF   , :00461753   , :00461780   
|:004617AD   , :004617D4   , :00461935   , :00461987   , :004619E2   
|:00461BD0   , :00461C22   , :00461C7D   , :00466076   , :004660B0   
|:004660F0   , :0046B9F2   , :0046BB5F   , :0046BBBA   
|
:00403513 55                      push ebp
:00403514 8BEC                    mov ebp, esp
:00403516 817D08A3010000          cmp dword ptr [ebp+08], 000001A3
:0040351D 7204                    jb 00403523
:0040351F 33C0                    xor eax, eax
:00403521 EB11                    jmp 00403534

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040351D(C)
|
:00403523 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403526 6BC922                  imul ecx, 00000022
:00403529 81C1D0474900            add ecx, 004947D0
:0040352F E8BC210000              call 004056F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403521(U)
|
:00403534 5D                      pop ebp
:00403535 C3                      ret



* Referenced by a CALL at Addresses:
|:00403B3B   , :00418684   , :0042D87B   , :0043742D   , :00465DD8   
|
:00403536 55                      push ebp
:00403537 8BEC                    mov ebp, esp
:00403539 51                      push ecx
:0040353A 894DFC                  mov dword ptr [ebp-04], ecx
:0040353D 8B45FC                  mov eax, dword ptr [ebp-04]
:00403540 33C9                    xor ecx, ecx
:00403542 8A4811                  mov cl, byte ptr [eax+11]
:00403545 83F911                  cmp ecx, 00000011
:00403548 7F12                    jg 0040355C
:0040354A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040354D 33C0                    xor eax, eax
:0040354F 8A4211                  mov al, byte ptr [edx+11]
:00403552 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00403553 B903000000              mov ecx, 00000003
:00403558 F7F9                    idiv ecx
:0040355A EB24                    jmp 00403580

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403548(C)
|
:0040355C 8B55FC                  mov edx, dword ptr [ebp-04]
:0040355F 33C0                    xor eax, eax
:00403561 8A4211                  mov al, byte ptr [edx+11]
:00403564 83F81A                  cmp eax, 0000001A
:00403567 7F04                    jg 0040356D
:00403569 B006                    mov al, 06
:0040356B EB13                    jmp 00403580

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403567(C)
|
:0040356D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403570 33D2                    xor edx, edx
:00403572 8A5111                  mov dl, byte ptr [ecx+11]
:00403575 83FA24                  cmp edx, 00000024
:00403578 7F04                    jg 0040357E
:0040357A B007                    mov al, 07
:0040357C EB02                    jmp 00403580

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403578(C)
|
:0040357E B008                    mov al, 08

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040355A(U), :0040356B(U), :0040357C(U)
|
:00403580 8BE5                    mov esp, ebp
:00403582 5D                      pop ebp
:00403583 C3                      ret



* Referenced by a CALL at Addresses:
|:004035BF   , :004035E1   , :00403603   , :00403625   , :00403647   
|:00403669   , :00403690   , :004036BA   , :004038EB   , :0046D6FA   
|
:00403584 55                      push ebp
:00403585 8BEC                    mov ebp, esp
:00403587 6A64                    push 00000064
:00403589 8B4508                  mov eax, dword ptr [ebp+08]
:0040358C 50                      push eax
:0040358D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00403590 6BC964                  imul ecx, 00000064
:00403593 51                      push ecx
:00403594 B9D4174B00              mov ecx, 004B17D4
:00403599 E846A50000              call 0040DAE4
:0040359E 8B5508                  mov edx, dword ptr [ebp+08]
:004035A1 C6426400                mov [edx+64], 00
:004035A5 5D                      pop ebp
:004035A6 C3                      ret



* Referenced by a CALL at Addresses:
|:00404FE4   , :0045BF73   
|
:004035A7 55                      push ebp
:004035A8 8BEC                    mov ebp, esp
:004035AA 837D0C40                cmp dword ptr [ebp+0C], 00000040
:004035AE 7602                    jbe 004035B2
:004035B0 EB15                    jmp 004035C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004035AE(C)
|
:004035B2 8B450C                  mov eax, dword ptr [ebp+0C]
:004035B5 0500010000              add eax, 00000100
:004035BA 50                      push eax
:004035BB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004035BE 51                      push ecx
:004035BF E8C0FFFFFF              call 00403584
:004035C4 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004035B0(U)
|
:004035C7 5D                      pop ebp
:004035C8 C3                      ret



* Referenced by a CALL at Address:
|:004347F8   
|
:004035C9 55                      push ebp
:004035CA 8BEC                    mov ebp, esp
:004035CC 837D0C38                cmp dword ptr [ebp+0C], 00000038
:004035D0 7602                    jbe 004035D4
:004035D2 EB15                    jmp 004035E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004035D0(C)
|
:004035D4 8B450C                  mov eax, dword ptr [ebp+0C]
:004035D7 054B010000              add eax, 0000014B
:004035DC 50                      push eax
:004035DD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004035E0 51                      push ecx
:004035E1 E89EFFFFFF              call 00403584
:004035E6 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004035D2(U)
|
:004035E9 5D                      pop ebp
:004035EA C3                      ret



* Referenced by a CALL at Address:
|:0043482A   
|
:004035EB 55                      push ebp
:004035EC 8BEC                    mov ebp, esp
:004035EE 837D0C38                cmp dword ptr [ebp+0C], 00000038
:004035F2 7602                    jbe 004035F6
:004035F4 EB15                    jmp 0040360B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004035F2(C)
|
:004035F6 8B450C                  mov eax, dword ptr [ebp+0C]
:004035F9 0587010000              add eax, 00000187
:004035FE 50                      push eax
:004035FF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403602 51                      push ecx
:00403603 E87CFFFFFF              call 00403584
:00403608 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004035F4(U)
|
:0040360B 5D                      pop ebp
:0040360C C3                      ret



* Referenced by a CALL at Addresses:
|:0040E17E   , :0040F2F2   , :0045F2A1   
|
:0040360D 55                      push ebp
:0040360E 8BEC                    mov ebp, esp
:00403610 837D0C1E                cmp dword ptr [ebp+0C], 0000001E
:00403614 7602                    jbe 00403618
:00403616 EB15                    jmp 0040362D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403614(C)
|
:00403618 8B450C                  mov eax, dword ptr [ebp+0C]
:0040361B 05C3010000              add eax, 000001C3
:00403620 50                      push eax
:00403621 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403624 51                      push ecx
:00403625 E85AFFFFFF              call 00403584
:0040362A 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403616(U)
|
:0040362D 5D                      pop ebp
:0040362E C3                      ret



* Referenced by a CALL at Address:
|:0041205F   
|
:0040362F 55                      push ebp
:00403630 8BEC                    mov ebp, esp
:00403632 837D0C0C                cmp dword ptr [ebp+0C], 0000000C
:00403636 7602                    jbe 0040363A
:00403638 EB15                    jmp 0040364F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403636(C)
|
:0040363A 8B450C                  mov eax, dword ptr [ebp+0C]
:0040363D 05EB010000              add eax, 000001EB
:00403642 50                      push eax
:00403643 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403646 51                      push ecx
:00403647 E838FFFFFF              call 00403584
:0040364C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403638(U)
|
:0040364F 5D                      pop ebp
:00403650 C3                      ret



* Referenced by a CALL at Address:
|:00412076   
|
:00403651 55                      push ebp
:00403652 8BEC                    mov ebp, esp
:00403654 837D0C0C                cmp dword ptr [ebp+0C], 0000000C
:00403658 7602                    jbe 0040365C
:0040365A EB15                    jmp 00403671

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403658(C)
|
:0040365C 8B450C                  mov eax, dword ptr [ebp+0C]
:0040365F 05FF010000              add eax, 000001FF
:00403664 50                      push eax
:00403665 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403668 51                      push ecx
:00403669 E816FFFFFF              call 00403584
:0040366E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040365A(U)
|
:00403671 5D                      pop ebp
:00403672 C3                      ret



* Referenced by a CALL at Addresses:
|:004250EA   , :004252FD   , :004254D9   , :004257B2   , :004259BD   
|:00425BB0   , :00425C46   , :00425E3B   , :00425EB2   
|
:00403673 55                      push ebp
:00403674 8BEC                    mov ebp, esp
:00403676 817D0CB6000000          cmp dword ptr [ebp+0C], 000000B6
:0040367D 7604                    jbe 00403683
:0040367F 33C0                    xor eax, eax
:00403681 EB1A                    jmp 0040369D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040367D(C)
|
:00403683 8B450C                  mov eax, dword ptr [ebp+0C]
:00403686 058F020000              add eax, 0000028F
:0040368B 50                      push eax
:0040368C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040368F 51                      push ecx
:00403690 E8EFFEFFFF              call 00403584
:00403695 83C408                  add esp, 00000008
:00403698 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403681(U)
|
:0040369D 5D                      pop ebp
:0040369E C3                      ret


:0040369F 55                      push ebp
:004036A0 8BEC                    mov ebp, esp
:004036A2 817D0C83000000          cmp dword ptr [ebp+0C], 00000083
:004036A9 7602                    jbe 004036AD
:004036AB EB15                    jmp 004036C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004036A9(C)
|
:004036AD 8B450C                  mov eax, dword ptr [ebp+0C]
:004036B0 0513020000              add eax, 00000213
:004036B5 50                      push eax
:004036B6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004036B9 51                      push ecx
:004036BA E8C5FEFFFF              call 00403584
:004036BF 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004036AB(U)
|
:004036C2 5D                      pop ebp
:004036C3 C3                      ret



* Referenced by a CALL at Address:
|:00403CE7   
|
:004036C4 55                      push ebp
:004036C5 8BEC                    mov ebp, esp
:004036C7 6AFF                    push FFFFFFFF
:004036C9 68DC944700              push 004794DC
:004036CE 64A100000000            mov eax, dword ptr fs:[00000000]
:004036D4 50                      push eax
:004036D5 64892500000000          mov dword ptr fs:[00000000], esp
:004036DC 81EC10010000            sub esp, 00000110
:004036E2 898DE4FEFFFF            mov dword ptr [ebp+FFFFFEE4], ecx
:004036E8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004036EE E84D1F0000              call 00405640
:004036F3 C745FC00000000          mov [ebp-04], 00000000
:004036FA 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00403700 8A4819                  mov cl, byte ptr [eax+19]
:00403703 884DF0                  mov byte ptr [ebp-10], cl
:00403706 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0040370C 8A421A                  mov al, byte ptr [edx+1A]
:0040370F 8885E8FEFFFF            mov byte ptr [ebp+FFFFFEE8], al
:00403715 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00403718 81E1FF000000            and ecx, 000000FF
:0040371E 81F9FF000000            cmp ecx, 000000FF
:00403724 7504                    jne 0040372A
:00403726 C645F000                mov [ebp-10], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403724(C)
|
:0040372A 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:00403730 81E2FF000000            and edx, 000000FF
:00403736 81FAFF000000            cmp edx, 000000FF
:0040373C 7507                    jne 00403745
:0040373E C685E8FEFFFF00          mov byte ptr [ebp+FFFFFEE8], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040373C(C)
|
:00403745 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0040374B 33C9                    xor ecx, ecx
:0040374D 8A4811                  mov cl, byte ptr [eax+11]
:00403750 83F911                  cmp ecx, 00000011
:00403753 7E3B                    jle 00403790
:00403755 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0040375B 33C0                    xor eax, eax
:0040375D 8A4211                  mov al, byte ptr [edx+11]
:00403760 83F817                  cmp eax, 00000017
:00403763 742B                    je 00403790
:00403765 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0040376B 33D2                    xor edx, edx
:0040376D 8A5111                  mov dl, byte ptr [ecx+11]
:00403770 83FA1B                  cmp edx, 0000001B
:00403773 7C10                    jl 00403785
:00403775 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0040377B 33C9                    xor ecx, ecx
:0040377D 8A4811                  mov cl, byte ptr [eax+11]
:00403780 83F924                  cmp ecx, 00000024
:00403783 7E0B                    jle 00403790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403773(C)
|
:00403785 C645F010                mov [ebp-10], 10
:00403789 C685E8FEFFFF0A          mov byte ptr [ebp+FFFFFEE8], 0A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403753(C), :00403763(C), :00403783(C)
|

* Possible StringData Ref from Data Obj ->"HITAREA.E3"
                                  |
:00403790 68B0D44700              push 0047D4B0
:00403795 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040379B E835DA0000              call 004111D5
:004037A0 68A82A4B00              push 004B2AA8
:004037A5 8B55F0                  mov edx, dword ptr [ebp-10]
:004037A8 81E2FF000000            and edx, 000000FF
:004037AE 52                      push edx
:004037AF 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004037B5 E86FDB0000              call 00411329
:004037BA 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004037C0 E860A40000              call 0040DC25
:004037C5 6A00                    push 00000000
:004037C7 A120544B00              mov eax, dword ptr [004B5420]
:004037CC 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004037CD FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004037D3 6A05                    push 00000005
:004037D5 E8351E0700              call 0047560F
:004037DA 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004037DD 6A07                    push 00000007
:004037DF E812250700              call 00475CF6
:004037E4 83C404                  add esp, 00000004
:004037E7 6A00                    push 00000000
:004037E9 6A00                    push 00000000
:004037EB 6A00                    push 00000000
:004037ED E82B250700              call 00475D1D
:004037F2 83C40C                  add esp, 0000000C
:004037F5 68A82A4B00              push 004B2AA8
:004037FA 8B0D44B04700            mov ecx, dword ptr [0047B044]
:00403800 51                      push ecx
:00403801 8B1540B04700            mov edx, dword ptr [0047B040]
:00403807 52                      push edx
:00403808 6A00                    push 00000000
:0040380A 6A00                    push 00000000
:0040380C E8E3320700              call 00476AF4
:00403811 83C414                  add esp, 00000014

* Possible StringData Ref from Data Obj ->"EFFAREA.E3"
                                  |
:00403814 68C0D44700              push 0047D4C0
:00403819 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040381F E8B1D90000              call 004111D5
:00403824 6830864A00              push 004A8630
:00403829 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0040382F 25FF000000              and eax, 000000FF
:00403834 50                      push eax
:00403835 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040383B E8E9DA0000              call 00411329
:00403840 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00403846 E8DAA30000              call 0040DC25
:0040384B 6A00                    push 00000000
:0040384D 8B0D24544B00            mov ecx, dword ptr [004B5424]
:00403853 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403854 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to String Resource ID=00006: ""
                                  |
:0040385A 6A06                    push 00000006
:0040385C E8AE1D0700              call 0047560F
:00403861 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00403864 6A07                    push 00000007
:00403866 E88B240700              call 00475CF6
:0040386B 83C404                  add esp, 00000004
:0040386E 6A00                    push 00000000
:00403870 6A00                    push 00000000
:00403872 6A00                    push 00000000
:00403874 E8A4240700              call 00475D1D
:00403879 83C40C                  add esp, 0000000C
:0040387C 6830864A00              push 004A8630
:00403881 8B1554B04700            mov edx, dword ptr [0047B054]
:00403887 52                      push edx
:00403888 A150B04700              mov eax, dword ptr [0047B050]
:0040388D 50                      push eax
:0040388E 6A00                    push 00000000
:00403890 6A00                    push 00000000
:00403892 E85D320700              call 00476AF4
:00403897 83C414                  add esp, 00000014
:0040389A 6A00                    push 00000000
:0040389C E86E1D0700              call 0047560F
:004038A1 83C404                  add esp, 00000004
:004038A4 E8343D0600              call 004675DD
:004038A9 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004038B0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004038B6 E8A51D0000              call 00405660
:004038BB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004038BE 64890D00000000          mov dword ptr fs:[00000000], ecx
:004038C5 8BE5                    mov esp, ebp
:004038C7 5D                      pop ebp
:004038C8 C3                      ret



* Referenced by a CALL at Addresses:
|:00403DF1   , :00403F1A   
|
:004038C9 55                      push ebp
:004038CA 8BEC                    mov ebp, esp
:004038CC 81ECD4020000            sub esp, 000002D4
:004038D2 898D2CFDFFFF            mov dword ptr [ebp+FFFFFD2C], ecx
:004038D8 8B852CFDFFFF            mov eax, dword ptr [ebp+FFFFFD2C]
:004038DE 33C9                    xor ecx, ecx
:004038E0 8A4814                  mov cl, byte ptr [eax+14]
:004038E3 51                      push ecx
:004038E4 8D9598FEFFFF            lea edx, dword ptr [ebp+FFFFFE98]
:004038EA 52                      push edx
:004038EB E894FCFFFF              call 00403584
:004038F0 83C408                  add esp, 00000008
:004038F3 8B852CFDFFFF            mov eax, dword ptr [ebp+FFFFFD2C]
:004038F9 8A4811                  mov cl, byte ptr [eax+11]
:004038FC 51                      push ecx
:004038FD 8D9534FDFFFF            lea edx, dword ptr [ebp+FFFFFD34]
:00403903 52                      push edx
:00403904 E8E9030000              call 00403CF2
:00403909 83C408                  add esp, 00000008
:0040390C 8D8534FDFFFF            lea eax, dword ptr [ebp+FFFFFD34]
:00403912 50                      push eax
:00403913 8D8D98FEFFFF            lea ecx, dword ptr [ebp+FFFFFE98]
:00403919 51                      push ecx
:0040391A E8314C0700              call 00478550
:0040391F 83C408                  add esp, 00000008
:00403922 8B952CFDFFFF            mov edx, dword ptr [ebp+FFFFFD2C]
:00403928 33C0                    xor eax, eax
:0040392A 8A4211                  mov al, byte ptr [edx+11]
:0040392D 83F811                  cmp eax, 00000011
:00403930 7E4D                    jle 0040397F
:00403932 6A00                    push 00000000
:00403934 6829050000              push 00000529
:00403939 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040393C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040393D FF1510D64B00            Call dword ptr [004BD610]
:00403943 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403944 FF1500D74B00            Call dword ptr [004BD700]
:0040394A 6A00                    push 00000000
:0040394C 68FC030000              push 000003FC
:00403951 8B5508                  mov edx, dword ptr [ebp+08]
:00403954 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403955 FF1510D64B00            Call dword ptr [004BD610]
:0040395B 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0040395C FF1500D74B00            Call dword ptr [004BD700]
:00403962 6A00                    push 00000000
:00403964 6807040000              push 00000407
:00403969 8B4508                  mov eax, dword ptr [ebp+08]
:0040396C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040396D FF1510D64B00            Call dword ptr [004BD610]
:00403973 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403974 FF1500D74B00            Call dword ptr [004BD700]
:0040397A E99E000000              jmp 00403A1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403930(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040397F 6A05                    push 00000005
:00403981 6829050000              push 00000529
:00403986 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403989 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040398A FF1510D64B00            Call dword ptr [004BD610]
:00403990 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403991 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00403997 6A05                    push 00000005
:00403999 68FC030000              push 000003FC
:0040399E 8B5508                  mov edx, dword ptr [ebp+08]
:004039A1 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004039A2 FF1510D64B00            Call dword ptr [004BD610]
:004039A8 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004039A9 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004039AF 6A05                    push 00000005
:004039B1 6807040000              push 00000407
:004039B6 8B4508                  mov eax, dword ptr [ebp+08]
:004039B9 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004039BA FF1510D64B00            Call dword ptr [004BD610]
:004039C0 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004039C1 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004039C7 6A0A                    push 0000000A
:004039C9 8D8D34FEFFFF            lea ecx, dword ptr [ebp+FFFFFE34]
:004039CF 51                      push ecx
:004039D0 8B952CFDFFFF            mov edx, dword ptr [ebp+FFFFFD2C]
:004039D6 33C0                    xor eax, eax
:004039D8 8A4217                  mov al, byte ptr [edx+17]
:004039DB 50                      push eax
:004039DC E8DF6B0600              call 0046A5C0
:004039E1 83C40C                  add esp, 0000000C
:004039E4 50                      push eax
:004039E5 68FC030000              push 000003FC
:004039EA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004039ED 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004039EE FF1510D64B00            Call dword ptr [004BD610]
:004039F4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004039F5 FF1514D64B00            Call dword ptr [004BD614]
:004039FB 68FF000000              push 000000FF
:00403A00 8B952CFDFFFF            mov edx, dword ptr [ebp+FFFFFD2C]
:00403A06 660FB64217              movzx ax, byte ptr [edx+17]
:00403A0B 50                      push eax
:00403A0C 6807040000              push 00000407
:00403A11 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403A14 51                      push ecx
:00403A15 E810720600              call 0046AC2A
:00403A1A 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040397A(U)
|
:00403A1D 8B952CFDFFFF            mov edx, dword ptr [ebp+FFFFFD2C]
:00403A23 33C0                    xor eax, eax
:00403A25 8A4211                  mov al, byte ptr [edx+11]
:00403A28 83F817                  cmp eax, 00000017
:00403A2B 754D                    jne 00403A7A
:00403A2D 6A00                    push 00000000
:00403A2F 682D050000              push 0000052D
:00403A34 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403A37 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403A38 FF1510D64B00            Call dword ptr [004BD610]
:00403A3E 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403A3F FF1500D74B00            Call dword ptr [004BD700]
:00403A45 6A00                    push 00000000
:00403A47 68FB030000              push 000003FB
:00403A4C 8B5508                  mov edx, dword ptr [ebp+08]
:00403A4F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403A50 FF1510D64B00            Call dword ptr [004BD610]
:00403A56 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403A57 FF1500D74B00            Call dword ptr [004BD700]
:00403A5D 6A00                    push 00000000
:00403A5F 6806040000              push 00000406
:00403A64 8B4508                  mov eax, dword ptr [ebp+08]
:00403A67 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403A68 FF1510D64B00            Call dword ptr [004BD610]
:00403A6E 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403A6F FF1500D74B00            Call dword ptr [004BD700]
:00403A75 E99E000000              jmp 00403B18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403A2B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00403A7A 6A05                    push 00000005
:00403A7C 682D050000              push 0000052D
:00403A81 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403A84 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403A85 FF1510D64B00            Call dword ptr [004BD610]
:00403A8B 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403A8C FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00403A92 6A05                    push 00000005
:00403A94 68FB030000              push 000003FB
:00403A99 8B5508                  mov edx, dword ptr [ebp+08]
:00403A9C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403A9D FF1510D64B00            Call dword ptr [004BD610]
:00403AA3 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403AA4 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00403AAA 6A05                    push 00000005
:00403AAC 6806040000              push 00000406
:00403AB1 8B4508                  mov eax, dword ptr [ebp+08]
:00403AB4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403AB5 FF1510D64B00            Call dword ptr [004BD610]
:00403ABB 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403ABC FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00403AC2 6A0A                    push 0000000A
:00403AC4 8D8D34FEFFFF            lea ecx, dword ptr [ebp+FFFFFE34]
:00403ACA 51                      push ecx
:00403ACB 8B952CFDFFFF            mov edx, dword ptr [ebp+FFFFFD2C]
:00403AD1 33C0                    xor eax, eax
:00403AD3 8A4216                  mov al, byte ptr [edx+16]
:00403AD6 50                      push eax
:00403AD7 E8E46A0600              call 0046A5C0
:00403ADC 83C40C                  add esp, 0000000C
:00403ADF 50                      push eax
:00403AE0 68FB030000              push 000003FB
:00403AE5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403AE8 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403AE9 FF1510D64B00            Call dword ptr [004BD610]
:00403AEF 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00403AF0 FF1514D64B00            Call dword ptr [004BD614]
:00403AF6 68FF000000              push 000000FF
:00403AFB 8B952CFDFFFF            mov edx, dword ptr [ebp+FFFFFD2C]
:00403B01 660FB64216              movzx ax, byte ptr [edx+16]
:00403B06 50                      push eax
:00403B07 6806040000              push 00000406
:00403B0C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403B0F 51                      push ecx
:00403B10 E815710600              call 0046AC2A
:00403B15 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403A75(U)
|
:00403B18 8D9598FEFFFF            lea edx, dword ptr [ebp+FFFFFE98]
:00403B1E 52                      push edx
:00403B1F 682E040000              push 0000042E
:00403B24 8B4508                  mov eax, dword ptr [ebp+08]
:00403B27 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403B28 FF1510D64B00            Call dword ptr [004BD610]
:00403B2E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00403B2F FF1514D64B00            Call dword ptr [004BD614]
:00403B35 8B8D2CFDFFFF            mov ecx, dword ptr [ebp+FFFFFD2C]
:00403B3B E8F6F9FFFF              call 00403536
:00403B40 25FF000000              and eax, 000000FF
:00403B45 8B0C8510D64700          mov ecx, dword ptr [4*eax+0047D610]
:00403B4C 51                      push ecx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:03FF, "1000"
                                  |
:00403B4D 68FF030000              push 000003FF
:00403B52 8B5508                  mov edx, dword ptr [ebp+08]
:00403B55 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403B56 FF1510D64B00            Call dword ptr [004BD610]
:00403B5C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00403B5D FF1514D64B00            Call dword ptr [004BD614]
:00403B63 8B852CFDFFFF            mov eax, dword ptr [ebp+FFFFFD2C]
:00403B69 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:00403B6A 68F8030000              push 000003F8
:00403B6F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403B72 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403B73 FF1510D64B00            Call dword ptr [004BD610]
:00403B79 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00403B7A FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00403B80 6A0A                    push 0000000A
:00403B82 8D9534FEFFFF            lea edx, dword ptr [ebp+FFFFFE34]
:00403B88 52                      push edx
:00403B89 8B852CFDFFFF            mov eax, dword ptr [ebp+FFFFFD2C]
:00403B8F 33C9                    xor ecx, ecx
:00403B91 8A4818                  mov cl, byte ptr [eax+18]
:00403B94 51                      push ecx
:00403B95 E8266A0600              call 0046A5C0
:00403B9A 83C40C                  add esp, 0000000C
:00403B9D 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03FD, "1000"
                                  |
:00403B9E 68FD030000              push 000003FD
:00403BA3 8B5508                  mov edx, dword ptr [ebp+08]
:00403BA6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403BA7 FF1510D64B00            Call dword ptr [004BD610]
:00403BAD 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00403BAE FF1514D64B00            Call dword ptr [004BD614]
:00403BB4 68FF000000              push 000000FF
:00403BB9 8B852CFDFFFF            mov eax, dword ptr [ebp+FFFFFD2C]
:00403BBF 660FB64818              movzx cx, byte ptr [eax+18]
:00403BC4 51                      push ecx
:00403BC5 6808040000              push 00000408
:00403BCA 8B5508                  mov edx, dword ptr [ebp+08]
:00403BCD 52                      push edx
:00403BCE E857700600              call 0046AC2A
:00403BD3 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00403BD6 6A0A                    push 0000000A
:00403BD8 8D8534FEFFFF            lea eax, dword ptr [ebp+FFFFFE34]
:00403BDE 50                      push eax
:00403BDF 8B8D2CFDFFFF            mov ecx, dword ptr [ebp+FFFFFD2C]
:00403BE5 33D2                    xor edx, edx
:00403BE7 8A5112                  mov dl, byte ptr [ecx+12]
:00403BEA 6BD20A                  imul edx, 0000000A
:00403BED 52                      push edx
:00403BEE E8CD690600              call 0046A5C0
:00403BF3 83C40C                  add esp, 0000000C
:00403BF6 50                      push eax

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:03FE, "1000"
                                  |
:00403BF7 68FE030000              push 000003FE
:00403BFC 8B4508                  mov eax, dword ptr [ebp+08]
:00403BFF 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403C00 FF1510D64B00            Call dword ptr [004BD610]
:00403C06 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00403C07 FF1514D64B00            Call dword ptr [004BD614]
:00403C0D 68F6090000              push 000009F6
:00403C12 8B8D2CFDFFFF            mov ecx, dword ptr [ebp+FFFFFD2C]
:00403C18 33D2                    xor edx, edx
:00403C1A 8A5112                  mov dl, byte ptr [ecx+12]
:00403C1D 6BD20A                  imul edx, 0000000A
:00403C20 52                      push edx
:00403C21 6809040000              push 00000409
:00403C26 8B4508                  mov eax, dword ptr [ebp+08]
:00403C29 50                      push eax
:00403C2A E8FB6F0600              call 0046AC2A
:00403C2F 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00403C32 6A0A                    push 0000000A
:00403C34 8D8D34FEFFFF            lea ecx, dword ptr [ebp+FFFFFE34]
:00403C3A 51                      push ecx
:00403C3B 8B952CFDFFFF            mov edx, dword ptr [ebp+FFFFFD2C]
:00403C41 33C0                    xor eax, eax
:00403C43 8A4212                  mov al, byte ptr [edx+12]
:00403C46 6BC00A                  imul eax, 0000000A
:00403C49 50                      push eax
:00403C4A E871690600              call 0046A5C0
:00403C4F 83C40C                  add esp, 0000000C
:00403C52 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:00403C53 68FA030000              push 000003FA
:00403C58 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403C5B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403C5C FF1510D64B00            Call dword ptr [004BD610]
:00403C62 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00403C63 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00403C69 6A0A                    push 0000000A
:00403C6B 8D9534FEFFFF            lea edx, dword ptr [ebp+FFFFFE34]
:00403C71 52                      push edx
:00403C72 8B852CFDFFFF            mov eax, dword ptr [ebp+FFFFFD2C]
:00403C78 33C9                    xor ecx, ecx
:00403C7A 8A481A                  mov cl, byte ptr [eax+1A]
:00403C7D 51                      push ecx
:00403C7E E83D690600              call 0046A5C0
:00403C83 83C40C                  add esp, 0000000C
:00403C86 50                      push eax
:00403C87 68E9030000              push 000003E9
:00403C8C 8B5508                  mov edx, dword ptr [ebp+08]
:00403C8F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403C90 FF1510D64B00            Call dword ptr [004BD610]
:00403C96 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00403C97 FF1514D64B00            Call dword ptr [004BD614]
:00403C9D 6815040000              push 00000415
:00403CA2 8B4508                  mov eax, dword ptr [ebp+08]
:00403CA5 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403CA6 FF1510D64B00            Call dword ptr [004BD610]
:00403CAC 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00403CAD FF1518D64B00            Call dword ptr [004BD618]
:00403CB3 898530FDFFFF            mov dword ptr [ebp+FFFFFD30], eax
:00403CB9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00403CBC 51                      push ecx
:00403CBD 8B9530FDFFFF            mov edx, dword ptr [ebp+FFFFFD30]
:00403CC3 52                      push edx
:00403CC4 8B4508                  mov eax, dword ptr [ebp+08]
:00403CC7 50                      push eax
:00403CC8 E8DF100000              call 00404DAC
:00403CCD 83C40C                  add esp, 0000000C
:00403CD0 8B8D30FDFFFF            mov ecx, dword ptr [ebp+FFFFFD30]
:00403CD6 51                      push ecx
:00403CD7 8B5508                  mov edx, dword ptr [ebp+08]
:00403CDA 52                      push edx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00403CDB FF151CD64B00            Call dword ptr [004BD61C]
:00403CE1 8B8D2CFDFFFF            mov ecx, dword ptr [ebp+FFFFFD2C]
:00403CE7 E8D8F9FFFF              call 004036C4
:00403CEC 8BE5                    mov esp, ebp
:00403CEE 5D                      pop ebp
:00403CEF C20800                  ret 0008



* Referenced by a CALL at Address:
|:00403904   
|
:00403CF2 55                      push ebp
:00403CF3 8BEC                    mov ebp, esp
:00403CF5 51                      push ecx
:00403CF6 8B4508                  mov eax, dword ptr [ebp+08]
:00403CF9 C60000                  mov byte ptr [eax], 00
:00403CFC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00403CFF 81E1FF000000            and ecx, 000000FF
:00403D05 83F911                  cmp ecx, 00000011
:00403D08 7E02                    jle 00403D0C
:00403D0A EB76                    jmp 00403D82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D08(C)
|
:00403D0C C745FC00000000          mov [ebp-04], 00000000
:00403D13 EB09                    jmp 00403D1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D6F(U)
|
:00403D15 8B55FC                  mov edx, dword ptr [ebp-04]
:00403D18 83C201                  add edx, 00000001
:00403D1B 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D13(U)
|
:00403D1E 837DFC20                cmp dword ptr [ebp-04], 00000020
:00403D22 734D                    jnb 00403D71
:00403D24 8B450C                  mov eax, dword ptr [ebp+0C]
:00403D27 25FF000000              and eax, 000000FF
:00403D2C 50                      push eax
:00403D2D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403D30 6BC91C                  imul ecx, 0000001C
:00403D33 81C178794A00            add ecx, 004A7978
:00403D39 E882F5FFFF              call 004032C0
:00403D3E 25FF000000              and eax, 000000FF
:00403D43 85C0                    test eax, eax
:00403D45 7428                    je 00403D6F
:00403D47 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00403D4A 8B148DB0D64700          mov edx, dword ptr [4*ecx+0047D6B0]
:00403D51 52                      push edx
:00403D52 8B4508                  mov eax, dword ptr [ebp+08]
:00403D55 50                      push eax
:00403D56 E8F5470700              call 00478550
:00403D5B 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->","
                                  |
:00403D5E 685CC24700              push 0047C25C
:00403D63 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403D66 51                      push ecx
:00403D67 E8E4470700              call 00478550
:00403D6C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D45(C)
|
:00403D6F EBA4                    jmp 00403D15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D22(C)
|

* Possible StringData Ref from Data Obj ->"iH˳ơC"
                                  |
:00403D71 6860C24700              push 0047C260
:00403D76 8B5508                  mov edx, dword ptr [ebp+08]
:00403D79 52                      push edx
:00403D7A E8D1470700              call 00478550
:00403D7F 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D0A(U)
|
:00403D82 8BE5                    mov esp, ebp
:00403D84 5D                      pop ebp
:00403D85 C3                      ret


:00403D86 55                      push ebp
:00403D87 8BEC                    mov ebp, esp
:00403D89 83EC48                  sub esp, 00000048
:00403D8C 8B450C                  mov eax, dword ptr [ebp+0C]
:00403D8F 8945BC                  mov dword ptr [ebp-44], eax
:00403D92 817DBC10010000          cmp dword ptr [ebp-44], 00000110
:00403D99 7718                    ja 00403DB3
:00403D9B 817DBC10010000          cmp dword ptr [ebp-44], 00000110
:00403DA2 7433                    je 00403DD7
:00403DA4 837DBC0F                cmp dword ptr [ebp-44], 0000000F
:00403DA8 0F84AA000000            je 00403E58
:00403DAE E93A010000              jmp 00403EED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403D99(C)
|
:00403DB3 817DBC11010000          cmp dword ptr [ebp-44], 00000111
:00403DBA 0F84E5000000            je 00403EA5
:00403DC0 817DBC12010000          cmp dword ptr [ebp-44], 00000112
:00403DC7 7449                    je 00403E12
:00403DC9 817DBC11030000          cmp dword ptr [ebp-44], 00000311
:00403DD0 7429                    je 00403DFB
:00403DD2 E916010000              jmp 00403EED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403DA2(C)
|
:00403DD7 8B0D80AA4800            mov ecx, dword ptr [0048AA80]
:00403DDD 51                      push ecx
:00403DDE 8B5508                  mov edx, dword ptr [ebp+08]
:00403DE1 52                      push edx
:00403DE2 8B0D80AA4800            mov ecx, dword ptr [0048AA80]
:00403DE8 6BC922                  imul ecx, 00000022
:00403DEB 81C1D0474900            add ecx, 004947D0
:00403DF1 E8D3FAFFFF              call 004038C9
:00403DF6 E9F2000000              jmp 00403EED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403DD0(C)
|
:00403DFB 6A00                    push 00000000
:00403DFD 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:00403DFF 6A06                    push 00000006
:00403E01 A1B0554B00              mov eax, dword ptr [004B55B0]
:00403E06 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00403E07 FF1504D64B00            Call dword ptr [004BD604]
:00403E0D E9DB000000              jmp 00403EED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403DC7(C)
|
:00403E12 8B4D10                  mov ecx, dword ptr [ebp+10]
:00403E15 894DB8                  mov dword ptr [ebp-48], ecx
:00403E18 817DB820F00000          cmp dword ptr [ebp-48], 0000F020
:00403E1F 740B                    je 00403E2C
:00403E21 817DB820F10000          cmp dword ptr [ebp-48], 0000F120
:00403E28 7404                    je 00403E2E
:00403E2A EB27                    jmp 00403E53

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E1F(C)
|
:00403E2C EB25                    jmp 00403E53

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403E28(C)
|
:00403E2E 6A00                    push 00000000
:00403E30 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:00403E32 6A06                    push 00000006
:00403E34 8B1518544B00            mov edx, dword ptr [004B5418]
:00403E3A 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00403E3B FF1504D64B00            Call dword ptr [004BD604]
:00403E41 6A00                    push 00000000
:00403E43 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:00403E45 6A06                    push 00000006
:00403E47 A1B0554B00              mov eax, dword ptr [004B55B0]
:00403E4C 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00403E4D FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403E2A(U), :00403E2C(U)
|
:00403E53 E995000000              jmp 00403EED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403DA8(C)
|
:00403E58 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00403E5B 51                      push ecx
:00403E5C 6815040000              push 00000415
:00403E61 8B5508                  mov edx, dword ptr [ebp+08]
:00403E64 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403E65 FF1510D64B00            Call dword ptr [004BD610]
:00403E6B 50                      push eax

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:00403E6C FF1508D64B00            Call dword ptr [004BD608]
:00403E72 68FFFF0000              push 0000FFFF
:00403E77 8B45C0                  mov eax, dword ptr [ebp-40]
:00403E7A 50                      push eax
:00403E7B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403E7E 51                      push ecx
:00403E7F E8280F0000              call 00404DAC
:00403E84 83C40C                  add esp, 0000000C
:00403E87 8D55C0                  lea edx, dword ptr [ebp-40]
:00403E8A 52                      push edx
:00403E8B 6815040000              push 00000415
:00403E90 8B4508                  mov eax, dword ptr [ebp+08]
:00403E93 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00403E94 FF1510D64B00            Call dword ptr [004BD610]
:00403E9A 50                      push eax

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:00403E9B FF150CD64B00            Call dword ptr [004BD60C]
:00403EA1 33C0                    xor eax, eax
:00403EA3 EB4A                    jmp 00403EEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403DBA(C)
|
:00403EA5 8B4D10                  mov ecx, dword ptr [ebp+10]
:00403EA8 81E1FFFF0000            and ecx, 0000FFFF
:00403EAE 83F901                  cmp ecx, 00000001
:00403EB1 740E                    je 00403EC1
:00403EB3 8B5510                  mov edx, dword ptr [ebp+10]
:00403EB6 81E2FFFF0000            and edx, 0000FFFF
:00403EBC 83FA02                  cmp edx, 00000002
:00403EBF 750E                    jne 00403ECF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403EB1(C)
|
:00403EC1 6A00                    push 00000000
:00403EC3 A168624B00              mov eax, dword ptr [004B6268]
:00403EC8 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403EC9 FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403EBF(C)
|
:00403ECF 8B4D10                  mov ecx, dword ptr [ebp+10]
:00403ED2 81E1FFFF0000            and ecx, 0000FFFF
:00403ED8 81F9A9040000            cmp ecx, 000004A9
:00403EDE 750D                    jne 00403EED
:00403EE0 684C090000              push 0000094C
:00403EE5 E8E15B0600              call 00469ACB
:00403EEA 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00403DAE(U), :00403DD2(U), :00403DF6(U), :00403E0D(U), :00403E53(U)
|:00403EDE(C)
|
:00403EED 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403EA3(U)
|
:00403EEF 8BE5                    mov esp, ebp
:00403EF1 5D                      pop ebp
:00403EF2 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:004194D5   , :0046477A   , :00466560   , :0046C554   
|
:00403EF5 55                      push ebp
:00403EF6 8BEC                    mov ebp, esp
:00403EF8 817D08A3010000          cmp dword ptr [ebp+08], 000001A3
:00403EFF 7202                    jb 00403F03
:00403F01 EB4E                    jmp 00403F51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403EFF(C)
|
:00403F03 8B4508                  mov eax, dword ptr [ebp+08]
:00403F06 50                      push eax
:00403F07 8B0D68624B00            mov ecx, dword ptr [004B6268]
:00403F0D 51                      push ecx
:00403F0E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00403F11 6BC922                  imul ecx, 00000022
:00403F14 81C1D0474900            add ecx, 004947D0
:00403F1A E8AAF9FFFF              call 004038C9
:00403F1F 8B1568624B00            mov edx, dword ptr [004B6268]
:00403F25 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00403F26 FF15FCD54B00            Call dword ptr [004BD5FC]

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00403F2C 6A09                    push 00000009
:00403F2E A168624B00              mov eax, dword ptr [004B6268]
:00403F33 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403F34 FF1500D74B00            Call dword ptr [004BD700]
:00403F3A 6A00                    push 00000000
:00403F3C E8CE160700              call 0047560F
:00403F41 83C404                  add esp, 00000004
:00403F44 8B0D68624B00            mov ecx, dword ptr [004B6268]
:00403F4A 51                      push ecx

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:00403F4B FF1500D64B00            Call dword ptr [004BD600]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403F01(U)
|
:00403F51 5D                      pop ebp
:00403F52 C3                      ret



* Referenced by a CALL at Address:
|:0046CBB5   
|
:00403F53 55                      push ebp
:00403F54 8BEC                    mov ebp, esp
:00403F56 C70580AA480000000000    mov dword ptr [0048AA80], 00000000
:00403F60 6A00                    push 00000000
:00403F62 68863D4000              push 00403D86
:00403F67 A1B0554B00              mov eax, dword ptr [004B55B0]
:00403F6C 50                      push eax

* Possible Reference to Dialog: DialogID_00A7 
                                  |
:00403F6D 68A7000000              push 000000A7
:00403F72 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00403F78 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00403F79 FF15F8D54B00            Call dword ptr [004BD5F8]
:00403F7F A368624B00              mov dword ptr [004B6268], eax
:00403F84 833D68624B0000          cmp dword ptr [004B6268], 00000000
:00403F8B 7504                    jne 00403F91
:00403F8D 33C0                    xor eax, eax
:00403F8F EB14                    jmp 00403FA5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403F8B(C)
|
:00403F91 6A00                    push 00000000
:00403F93 8B1568624B00            mov edx, dword ptr [004B6268]
:00403F99 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00403F9A FF1500D74B00            Call dword ptr [004BD700]
:00403FA0 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403F8F(U)
|
:00403FA5 5D                      pop ebp
:00403FA6 C3                      ret



* Referenced by a CALL at Address:
|:0040E654   
|
:00403FA7 55                      push ebp
:00403FA8 8BEC                    mov ebp, esp
:00403FAA 83EC0C                  sub esp, 0000000C
:00403FAD 894DF4                  mov dword ptr [ebp-0C], ecx
:00403FB0 8B4508                  mov eax, dword ptr [ebp+08]
:00403FB3 33C9                    xor ecx, ecx
:00403FB5 8A08                    mov cl, byte ptr [eax]
:00403FB7 894DFC                  mov dword ptr [ebp-04], ecx
:00403FBA 8B5508                  mov edx, dword ptr [ebp+08]
:00403FBD 83C201                  add edx, 00000001
:00403FC0 895508                  mov dword ptr [ebp+08], edx
:00403FC3 8B4508                  mov eax, dword ptr [ebp+08]
:00403FC6 33C9                    xor ecx, ecx
:00403FC8 8A08                    mov cl, byte ptr [eax]
:00403FCA C1E108                  shl ecx, 08
:00403FCD 8B55FC                  mov edx, dword ptr [ebp-04]
:00403FD0 03D1                    add edx, ecx
:00403FD2 8955FC                  mov dword ptr [ebp-04], edx
:00403FD5 8B4508                  mov eax, dword ptr [ebp+08]
:00403FD8 83C001                  add eax, 00000001
:00403FDB 894508                  mov dword ptr [ebp+08], eax
:00403FDE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00403FE1 8B55FC                  mov edx, dword ptr [ebp-04]
:00403FE4 8911                    mov dword ptr [ecx], edx
:00403FE6 C745F800000000          mov [ebp-08], 00000000
:00403FED EB09                    jmp 00403FF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404015(U)
|
:00403FEF 8B45F8                  mov eax, dword ptr [ebp-08]
:00403FF2 83C001                  add eax, 00000001
:00403FF5 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403FED(U)
|
:00403FF8 837DF804                cmp dword ptr [ebp-08], 00000004
:00403FFC 7319                    jnb 00404017
:00403FFE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00404001 034DF8                  add ecx, dword ptr [ebp-08]
:00404004 8B5508                  mov edx, dword ptr [ebp+08]
:00404007 8A02                    mov al, byte ptr [edx]
:00404009 884104                  mov byte ptr [ecx+04], al
:0040400C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040400F 83C101                  add ecx, 00000001
:00404012 894D08                  mov dword ptr [ebp+08], ecx
:00404015 EBD8                    jmp 00403FEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00403FFC(C)
|
:00404017 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040401A 8B4508                  mov eax, dword ptr [ebp+08]
:0040401D 8A08                    mov cl, byte ptr [eax]
:0040401F 884A08                  mov byte ptr [edx+08], cl
:00404022 8B5508                  mov edx, dword ptr [ebp+08]
:00404025 83C201                  add edx, 00000001
:00404028 895508                  mov dword ptr [ebp+08], edx
:0040402B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040402E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404031 8A11                    mov dl, byte ptr [ecx]
:00404033 885011                  mov byte ptr [eax+11], dl
:00404036 8B4508                  mov eax, dword ptr [ebp+08]
:00404039 83C001                  add eax, 00000001
:0040403C 894508                  mov dword ptr [ebp+08], eax
:0040403F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404042 33D2                    xor edx, edx
:00404044 8A11                    mov dl, byte ptr [ecx]
:00404046 8955FC                  mov dword ptr [ebp-04], edx
:00404049 8B4508                  mov eax, dword ptr [ebp+08]
:0040404C 83C001                  add eax, 00000001
:0040404F 894508                  mov dword ptr [ebp+08], eax
:00404052 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404055 33D2                    xor edx, edx
:00404057 8A11                    mov dl, byte ptr [ecx]
:00404059 C1E208                  shl edx, 08
:0040405C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040405F 03C2                    add eax, edx
:00404061 8945FC                  mov dword ptr [ebp-04], eax
:00404064 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404067 83C101                  add ecx, 00000001
:0040406A 894D08                  mov dword ptr [ebp+08], ecx
:0040406D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00404070 668B45FC                mov ax, word ptr [ebp-04]
:00404074 6689420A                mov word ptr [edx+0A], ax
:00404078 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040407B 33D2                    xor edx, edx
:0040407D 8A11                    mov dl, byte ptr [ecx]
:0040407F 8955FC                  mov dword ptr [ebp-04], edx
:00404082 8B4508                  mov eax, dword ptr [ebp+08]
:00404085 83C001                  add eax, 00000001
:00404088 894508                  mov dword ptr [ebp+08], eax
:0040408B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040408E 33D2                    xor edx, edx
:00404090 8A11                    mov dl, byte ptr [ecx]
:00404092 C1E208                  shl edx, 08
:00404095 8B45FC                  mov eax, dword ptr [ebp-04]
:00404098 03C2                    add eax, edx
:0040409A 8945FC                  mov dword ptr [ebp-04], eax
:0040409D 8B4D08                  mov ecx, dword ptr [ebp+08]
:004040A0 83C101                  add ecx, 00000001
:004040A3 894D08                  mov dword ptr [ebp+08], ecx
:004040A6 8B55F4                  mov edx, dword ptr [ebp-0C]
:004040A9 668B45FC                mov ax, word ptr [ebp-04]
:004040AD 6689420C                mov word ptr [edx+0C], ax
:004040B1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004040B4 8B5508                  mov edx, dword ptr [ebp+08]
:004040B7 8A02                    mov al, byte ptr [edx]
:004040B9 88410E                  mov byte ptr [ecx+0E], al
:004040BC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004040BF 83C101                  add ecx, 00000001
:004040C2 894D08                  mov dword ptr [ebp+08], ecx
:004040C5 8B55F4                  mov edx, dword ptr [ebp-0C]
:004040C8 8B4508                  mov eax, dword ptr [ebp+08]
:004040CB 8A08                    mov cl, byte ptr [eax]
:004040CD 884A0F                  mov byte ptr [edx+0F], cl
:004040D0 8B5508                  mov edx, dword ptr [ebp+08]
:004040D3 83C201                  add edx, 00000001
:004040D6 895508                  mov dword ptr [ebp+08], edx
:004040D9 8B45F4                  mov eax, dword ptr [ebp-0C]
:004040DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004040DF 8A11                    mov dl, byte ptr [ecx]
:004040E1 885010                  mov byte ptr [eax+10], dl
:004040E4 8B4508                  mov eax, dword ptr [ebp+08]
:004040E7 83C001                  add eax, 00000001
:004040EA 894508                  mov dword ptr [ebp+08], eax
:004040ED 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004040F0 8B5508                  mov edx, dword ptr [ebp+08]
:004040F3 8A02                    mov al, byte ptr [edx]
:004040F5 884112                  mov byte ptr [ecx+12], al
:004040F8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004040FB 83C101                  add ecx, 00000001
:004040FE 894D08                  mov dword ptr [ebp+08], ecx
:00404101 8B55F4                  mov edx, dword ptr [ebp-0C]
:00404104 8B4508                  mov eax, dword ptr [ebp+08]
:00404107 8A08                    mov cl, byte ptr [eax]
:00404109 884A13                  mov byte ptr [edx+13], cl
:0040410C 8B5508                  mov edx, dword ptr [ebp+08]
:0040410F 83C201                  add edx, 00000001
:00404112 895508                  mov dword ptr [ebp+08], edx
:00404115 8B45F4                  mov eax, dword ptr [ebp-0C]
:00404118 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040411B 8A11                    mov dl, byte ptr [ecx]
:0040411D 885014                  mov byte ptr [eax+14], dl
:00404120 8B4508                  mov eax, dword ptr [ebp+08]
:00404123 83C001                  add eax, 00000001
:00404126 894508                  mov dword ptr [ebp+08], eax
:00404129 C745F800000000          mov [ebp-08], 00000000
:00404130 EB09                    jmp 0040413B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040415B(U)
|
:00404132 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00404135 83C101                  add ecx, 00000001
:00404138 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404130(U)
|
:0040413B 837DF808                cmp dword ptr [ebp-08], 00000008
:0040413F 731C                    jnb 0040415D
:00404141 8B55F4                  mov edx, dword ptr [ebp-0C]
:00404144 0355F8                  add edx, dword ptr [ebp-08]
:00404147 8B4508                  mov eax, dword ptr [ebp+08]
:0040414A 8A08                    mov cl, byte ptr [eax]
:0040414C 888A26010000            mov byte ptr [edx+00000126], cl
:00404152 8B5508                  mov edx, dword ptr [ebp+08]
:00404155 83C201                  add edx, 00000001
:00404158 895508                  mov dword ptr [ebp+08], edx
:0040415B EBD5                    jmp 00404132

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040413F(C)
|
:0040415D C745F800000000          mov [ebp-08], 00000000
:00404164 EB09                    jmp 0040416F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041B2(U)
|
:00404166 8B45F8                  mov eax, dword ptr [ebp-08]
:00404169 83C001                  add eax, 00000001
:0040416C 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404164(U)
|
:0040416F 837DF808                cmp dword ptr [ebp-08], 00000008
:00404173 733F                    jnb 004041B4
:00404175 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404178 33D2                    xor edx, edx
:0040417A 8A11                    mov dl, byte ptr [ecx]
:0040417C 8955FC                  mov dword ptr [ebp-04], edx
:0040417F 8B4508                  mov eax, dword ptr [ebp+08]
:00404182 83C001                  add eax, 00000001
:00404185 894508                  mov dword ptr [ebp+08], eax
:00404188 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040418B 33D2                    xor edx, edx
:0040418D 8A11                    mov dl, byte ptr [ecx]
:0040418F C1E208                  shl edx, 08
:00404192 8B45FC                  mov eax, dword ptr [ebp-04]
:00404195 03C2                    add eax, edx
:00404197 8945FC                  mov dword ptr [ebp-04], eax
:0040419A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040419D 83C101                  add ecx, 00000001
:004041A0 894D08                  mov dword ptr [ebp+08], ecx
:004041A3 8B55F8                  mov edx, dword ptr [ebp-08]
:004041A6 8B45F4                  mov eax, dword ptr [ebp-0C]
:004041A9 668B4DFC                mov cx, word ptr [ebp-04]
:004041AD 66894C5016              mov word ptr [eax+2*edx+16], cx
:004041B2 EBB2                    jmp 00404166

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404173(C)
|
:004041B4 C745F800000000          mov [ebp-08], 00000000
:004041BB EB09                    jmp 004041C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040420C(U)
|
:004041BD 8B55F8                  mov edx, dword ptr [ebp-08]
:004041C0 83C201                  add edx, 00000001
:004041C3 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041BB(U)
|
:004041C6 817DF880000000          cmp dword ptr [ebp-08], 00000080
:004041CD 733F                    jnb 0040420E
:004041CF 8B4508                  mov eax, dword ptr [ebp+08]
:004041D2 33C9                    xor ecx, ecx
:004041D4 8A08                    mov cl, byte ptr [eax]
:004041D6 894DFC                  mov dword ptr [ebp-04], ecx
:004041D9 8B5508                  mov edx, dword ptr [ebp+08]
:004041DC 83C201                  add edx, 00000001
:004041DF 895508                  mov dword ptr [ebp+08], edx
:004041E2 8B4508                  mov eax, dword ptr [ebp+08]
:004041E5 33C9                    xor ecx, ecx
:004041E7 8A08                    mov cl, byte ptr [eax]
:004041E9 C1E108                  shl ecx, 08
:004041EC 8B55FC                  mov edx, dword ptr [ebp-04]
:004041EF 03D1                    add edx, ecx
:004041F1 8955FC                  mov dword ptr [ebp-04], edx
:004041F4 8B4508                  mov eax, dword ptr [ebp+08]
:004041F7 83C001                  add eax, 00000001
:004041FA 894508                  mov dword ptr [ebp+08], eax
:004041FD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00404200 8B55F4                  mov edx, dword ptr [ebp-0C]
:00404203 668B45FC                mov ax, word ptr [ebp-04]
:00404207 6689444A26              mov word ptr [edx+2*ecx+26], ax
:0040420C EBAF                    jmp 004041BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004041CD(C)
|
:0040420E 8B4508                  mov eax, dword ptr [ebp+08]
:00404211 8BE5                    mov esp, ebp
:00404213 5D                      pop ebp
:00404214 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040ED7F   
|
:00404217 55                      push ebp
:00404218 8BEC                    mov ebp, esp
:0040421A 83EC08                  sub esp, 00000008
:0040421D 894DF8                  mov dword ptr [ebp-08], ecx
:00404220 8B45F8                  mov eax, dword ptr [ebp-08]
:00404223 8B08                    mov ecx, dword ptr [eax]
:00404225 81E1FF000000            and ecx, 000000FF
:0040422B 8B5508                  mov edx, dword ptr [ebp+08]
:0040422E 880A                    mov byte ptr [edx], cl
:00404230 8B4508                  mov eax, dword ptr [ebp+08]
:00404233 83C001                  add eax, 00000001
:00404236 894508                  mov dword ptr [ebp+08], eax
:00404239 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040423C 8B11                    mov edx, dword ptr [ecx]
:0040423E C1EA08                  shr edx, 08
:00404241 8B4508                  mov eax, dword ptr [ebp+08]
:00404244 8810                    mov byte ptr [eax], dl
:00404246 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404249 83C101                  add ecx, 00000001
:0040424C 894D08                  mov dword ptr [ebp+08], ecx
:0040424F C745FC00000000          mov [ebp-04], 00000000
:00404256 EB09                    jmp 00404261

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040427E(U)
|
:00404258 8B55FC                  mov edx, dword ptr [ebp-04]
:0040425B 83C201                  add edx, 00000001
:0040425E 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404256(U)
|
:00404261 837DFC04                cmp dword ptr [ebp-04], 00000004
:00404265 7319                    jnb 00404280
:00404267 8B45F8                  mov eax, dword ptr [ebp-08]
:0040426A 0345FC                  add eax, dword ptr [ebp-04]
:0040426D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404270 8A5004                  mov dl, byte ptr [eax+04]
:00404273 8811                    mov byte ptr [ecx], dl
:00404275 8B4508                  mov eax, dword ptr [ebp+08]
:00404278 83C001                  add eax, 00000001
:0040427B 894508                  mov dword ptr [ebp+08], eax
:0040427E EBD8                    jmp 00404258

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404265(C)
|
:00404280 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404283 8B55F8                  mov edx, dword ptr [ebp-08]
:00404286 8A4208                  mov al, byte ptr [edx+08]
:00404289 8801                    mov byte ptr [ecx], al
:0040428B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040428E 83C101                  add ecx, 00000001
:00404291 894D08                  mov dword ptr [ebp+08], ecx
:00404294 8B5508                  mov edx, dword ptr [ebp+08]
:00404297 8B45F8                  mov eax, dword ptr [ebp-08]
:0040429A 8A4811                  mov cl, byte ptr [eax+11]
:0040429D 880A                    mov byte ptr [edx], cl
:0040429F 8B5508                  mov edx, dword ptr [ebp+08]
:004042A2 83C201                  add edx, 00000001
:004042A5 895508                  mov dword ptr [ebp+08], edx
:004042A8 8B45F8                  mov eax, dword ptr [ebp-08]
:004042AB 33C9                    xor ecx, ecx
:004042AD 668B480A                mov cx, word ptr [eax+0A]
:004042B1 81E1FF000000            and ecx, 000000FF
:004042B7 8B5508                  mov edx, dword ptr [ebp+08]
:004042BA 880A                    mov byte ptr [edx], cl
:004042BC 8B4508                  mov eax, dword ptr [ebp+08]
:004042BF 83C001                  add eax, 00000001
:004042C2 894508                  mov dword ptr [ebp+08], eax
:004042C5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004042C8 33D2                    xor edx, edx
:004042CA 668B510A                mov dx, word ptr [ecx+0A]
:004042CE C1FA08                  sar edx, 08
:004042D1 8B4508                  mov eax, dword ptr [ebp+08]
:004042D4 8810                    mov byte ptr [eax], dl
:004042D6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004042D9 83C101                  add ecx, 00000001
:004042DC 894D08                  mov dword ptr [ebp+08], ecx
:004042DF 8B55F8                  mov edx, dword ptr [ebp-08]
:004042E2 33C0                    xor eax, eax
:004042E4 668B420C                mov ax, word ptr [edx+0C]
:004042E8 25FF000000              and eax, 000000FF
:004042ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:004042F0 8801                    mov byte ptr [ecx], al
:004042F2 8B5508                  mov edx, dword ptr [ebp+08]
:004042F5 83C201                  add edx, 00000001
:004042F8 895508                  mov dword ptr [ebp+08], edx
:004042FB 8B45F8                  mov eax, dword ptr [ebp-08]
:004042FE 33C9                    xor ecx, ecx
:00404300 668B480C                mov cx, word ptr [eax+0C]
:00404304 C1F908                  sar ecx, 08
:00404307 8B5508                  mov edx, dword ptr [ebp+08]
:0040430A 880A                    mov byte ptr [edx], cl
:0040430C 8B4508                  mov eax, dword ptr [ebp+08]
:0040430F 83C001                  add eax, 00000001
:00404312 894508                  mov dword ptr [ebp+08], eax
:00404315 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404318 8B55F8                  mov edx, dword ptr [ebp-08]
:0040431B 8A420E                  mov al, byte ptr [edx+0E]
:0040431E 8801                    mov byte ptr [ecx], al
:00404320 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404323 83C101                  add ecx, 00000001
:00404326 894D08                  mov dword ptr [ebp+08], ecx
:00404329 8B5508                  mov edx, dword ptr [ebp+08]
:0040432C 8B45F8                  mov eax, dword ptr [ebp-08]
:0040432F 8A480F                  mov cl, byte ptr [eax+0F]
:00404332 880A                    mov byte ptr [edx], cl
:00404334 8B5508                  mov edx, dword ptr [ebp+08]
:00404337 83C201                  add edx, 00000001
:0040433A 895508                  mov dword ptr [ebp+08], edx
:0040433D 8B4508                  mov eax, dword ptr [ebp+08]
:00404340 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00404343 8A5110                  mov dl, byte ptr [ecx+10]
:00404346 8810                    mov byte ptr [eax], dl
:00404348 8B4508                  mov eax, dword ptr [ebp+08]
:0040434B 83C001                  add eax, 00000001
:0040434E 894508                  mov dword ptr [ebp+08], eax
:00404351 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404354 8B55F8                  mov edx, dword ptr [ebp-08]
:00404357 8A4212                  mov al, byte ptr [edx+12]
:0040435A 8801                    mov byte ptr [ecx], al
:0040435C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040435F 83C101                  add ecx, 00000001
:00404362 894D08                  mov dword ptr [ebp+08], ecx
:00404365 8B5508                  mov edx, dword ptr [ebp+08]
:00404368 8B45F8                  mov eax, dword ptr [ebp-08]
:0040436B 8A4813                  mov cl, byte ptr [eax+13]
:0040436E 880A                    mov byte ptr [edx], cl
:00404370 8B5508                  mov edx, dword ptr [ebp+08]
:00404373 83C201                  add edx, 00000001
:00404376 895508                  mov dword ptr [ebp+08], edx
:00404379 8B4508                  mov eax, dword ptr [ebp+08]
:0040437C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040437F 8A5114                  mov dl, byte ptr [ecx+14]
:00404382 8810                    mov byte ptr [eax], dl
:00404384 8B4508                  mov eax, dword ptr [ebp+08]
:00404387 83C001                  add eax, 00000001
:0040438A 894508                  mov dword ptr [ebp+08], eax
:0040438D C745FC00000000          mov [ebp-04], 00000000
:00404394 EB09                    jmp 0040439F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043BF(U)
|
:00404396 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00404399 83C101                  add ecx, 00000001
:0040439C 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404394(U)
|
:0040439F 837DFC08                cmp dword ptr [ebp-04], 00000008
:004043A3 731C                    jnb 004043C1
:004043A5 8B55F8                  mov edx, dword ptr [ebp-08]
:004043A8 0355FC                  add edx, dword ptr [ebp-04]
:004043AB 8B4508                  mov eax, dword ptr [ebp+08]
:004043AE 8A8A26010000            mov cl, byte ptr [edx+00000126]
:004043B4 8808                    mov byte ptr [eax], cl
:004043B6 8B5508                  mov edx, dword ptr [ebp+08]
:004043B9 83C201                  add edx, 00000001
:004043BC 895508                  mov dword ptr [ebp+08], edx
:004043BF EBD5                    jmp 00404396

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043A3(C)
|
:004043C1 C745FC00000000          mov [ebp-04], 00000000
:004043C8 EB09                    jmp 004043D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404417(U)
|
:004043CA 8B45FC                  mov eax, dword ptr [ebp-04]
:004043CD 83C001                  add eax, 00000001
:004043D0 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043C8(U)
|
:004043D3 837DFC08                cmp dword ptr [ebp-04], 00000008
:004043D7 7340                    jnb 00404419
:004043D9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004043DC 8B55F8                  mov edx, dword ptr [ebp-08]
:004043DF 33C0                    xor eax, eax
:004043E1 668B444A16              mov ax, word ptr [edx+2*ecx+16]
:004043E6 25FF000000              and eax, 000000FF
:004043EB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004043EE 8801                    mov byte ptr [ecx], al
:004043F0 8B5508                  mov edx, dword ptr [ebp+08]
:004043F3 83C201                  add edx, 00000001
:004043F6 895508                  mov dword ptr [ebp+08], edx
:004043F9 8B45FC                  mov eax, dword ptr [ebp-04]
:004043FC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004043FF 33D2                    xor edx, edx
:00404401 668B544116              mov dx, word ptr [ecx+2*eax+16]
:00404406 C1FA08                  sar edx, 08
:00404409 8B4508                  mov eax, dword ptr [ebp+08]
:0040440C 8810                    mov byte ptr [eax], dl
:0040440E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404411 83C101                  add ecx, 00000001
:00404414 894D08                  mov dword ptr [ebp+08], ecx
:00404417 EBB1                    jmp 004043CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004043D7(C)
|
:00404419 C745FC00000000          mov [ebp-04], 00000000
:00404420 EB09                    jmp 0040442B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404473(U)
|
:00404422 8B55FC                  mov edx, dword ptr [ebp-04]
:00404425 83C201                  add edx, 00000001
:00404428 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404420(U)
|
:0040442B 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:00404432 7341                    jnb 00404475
:00404434 8B45FC                  mov eax, dword ptr [ebp-04]
:00404437 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040443A 33D2                    xor edx, edx
:0040443C 668B544126              mov dx, word ptr [ecx+2*eax+26]
:00404441 81E2FF000000            and edx, 000000FF
:00404447 8B4508                  mov eax, dword ptr [ebp+08]
:0040444A 8810                    mov byte ptr [eax], dl
:0040444C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040444F 83C101                  add ecx, 00000001
:00404452 894D08                  mov dword ptr [ebp+08], ecx
:00404455 8B55FC                  mov edx, dword ptr [ebp-04]
:00404458 8B45F8                  mov eax, dword ptr [ebp-08]
:0040445B 33C9                    xor ecx, ecx
:0040445D 668B4C5026              mov cx, word ptr [eax+2*edx+26]
:00404462 C1F908                  sar ecx, 08
:00404465 8B5508                  mov edx, dword ptr [ebp+08]
:00404468 880A                    mov byte ptr [edx], cl
:0040446A 8B4508                  mov eax, dword ptr [ebp+08]
:0040446D 83C001                  add eax, 00000001
:00404470 894508                  mov dword ptr [ebp+08], eax
:00404473 EBAD                    jmp 00404422

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404432(C)
|
:00404475 8B4508                  mov eax, dword ptr [ebp+08]
:00404478 8BE5                    mov esp, ebp
:0040447A 5D                      pop ebp
:0040447B C20400                  ret 0004


:0040447E 55                      push ebp
:0040447F 8BEC                    mov ebp, esp
:00404481 83EC08                  sub esp, 00000008
:00404484 894DF8                  mov dword ptr [ebp-08], ecx
:00404487 8B45F8                  mov eax, dword ptr [ebp-08]
:0040448A 33C9                    xor ecx, ecx
:0040448C 668B480A                mov cx, word ptr [eax+0A]
:00404490 894DFC                  mov dword ptr [ebp-04], ecx
:00404493 8B55F8                  mov edx, dword ptr [ebp-08]
:00404496 668B420A                mov ax, word ptr [edx+0A]
:0040449A 6625FFEF                and ax, EFFF
:0040449E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004044A1 6689410A                mov word ptr [ecx+0A], ax
:004044A5 8B45FC                  mov eax, dword ptr [ebp-04]
:004044A8 8BE5                    mov esp, ebp
:004044AA 5D                      pop ebp
:004044AB C3                      ret



* Referenced by a CALL at Addresses:
|:0042F965   , :004676D4   
|
:004044AC 55                      push ebp
:004044AD 8BEC                    mov ebp, esp
:004044AF 51                      push ecx
:004044B0 894DFC                  mov dword ptr [ebp-04], ecx
:004044B3 8B45FC                  mov eax, dword ptr [ebp-04]
:004044B6 33C9                    xor ecx, ecx
:004044B8 668B480C                mov cx, word ptr [eax+0C]
:004044BC 8BC1                    mov eax, ecx
:004044BE 8BE5                    mov esp, ebp
:004044C0 5D                      pop ebp
:004044C1 C3                      ret



* Referenced by a CALL at Address:
|:0042F934   
|
:004044C2 55                      push ebp
:004044C3 8BEC                    mov ebp, esp
:004044C5 51                      push ecx
:004044C6 894DFC                  mov dword ptr [ebp-04], ecx
:004044C9 8B45FC                  mov eax, dword ptr [ebp-04]
:004044CC 668B4D08                mov cx, word ptr [ebp+08]
:004044D0 6689480C                mov word ptr [eax+0C], cx
:004044D4 8BE5                    mov esp, ebp
:004044D6 5D                      pop ebp
:004044D7 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046128C   , :0046186B   , :004618B1   , :004618F7   , :00464421   
|:00465FE2   , :00466016   , :0046604A   , :0046613D   
|
:004044DA 55                      push ebp
:004044DB 8BEC                    mov ebp, esp
:004044DD 83EC08                  sub esp, 00000008
:004044E0 894DF8                  mov dword ptr [ebp-08], ecx
:004044E3 C745FC00000000          mov [ebp-04], 00000000
:004044EA EB09                    jmp 004044F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404515(U)
|
:004044EC 8B45FC                  mov eax, dword ptr [ebp-04]
:004044EF 83C001                  add eax, 00000001
:004044F2 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004044EA(U)
|
:004044F5 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:004044FC 7319                    jnb 00404517
:004044FE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00404501 8B55F8                  mov edx, dword ptr [ebp-08]
:00404504 33C0                    xor eax, eax
:00404506 668B444A26              mov ax, word ptr [edx+2*ecx+26]
:0040450B 3B4508                  cmp eax, dword ptr [ebp+08]
:0040450E 7505                    jne 00404515
:00404510 8B45FC                  mov eax, dword ptr [ebp-04]
:00404513 EB07                    jmp 0040451C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040450E(C)
|
:00404515 EBD5                    jmp 004044EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004044FC(C)
|
:00404517 B8FFFF0000              mov eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404513(U)
|
:0040451C 8BE5                    mov esp, ebp
:0040451E 5D                      pop ebp
:0040451F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046181D   , :00461833   , :00461849   
|
:00404522 55                      push ebp
:00404523 8BEC                    mov ebp, esp
:00404525 83EC08                  sub esp, 00000008
:00404528 894DF8                  mov dword ptr [ebp-08], ecx
:0040452B C745FC00000000          mov [ebp-04], 00000000
:00404532 EB09                    jmp 0040453D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040456F(U)
|
:00404534 8B45FC                  mov eax, dword ptr [ebp-04]
:00404537 83C001                  add eax, 00000001
:0040453A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404532(U)
|
:0040453D 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:00404544 732B                    jnb 00404571
:00404546 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00404549 8B55F8                  mov edx, dword ptr [ebp-08]
:0040454C 33C0                    xor eax, eax
:0040454E 668B444A26              mov ax, word ptr [edx+2*ecx+26]
:00404553 3B4508                  cmp eax, dword ptr [ebp+08]
:00404556 7517                    jne 0040456F
:00404558 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040455B 51                      push ecx
:0040455C 8B55FC                  mov edx, dword ptr [ebp-04]
:0040455F 52                      push edx
:00404560 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00404563 E818110000              call 00405680
:00404568 B801000000              mov eax, 00000001
:0040456D EB04                    jmp 00404573

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404556(C)
|
:0040456F EBC3                    jmp 00404534

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404544(C)
|
:00404571 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040456D(U)
|
:00404573 8BE5                    mov esp, ebp
:00404575 5D                      pop ebp
:00404576 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004045D4   , :00407966   , :00461EBA   
|
:00404579 55                      push ebp
:0040457A 8BEC                    mov ebp, esp
:0040457C 83EC0C                  sub esp, 0000000C
:0040457F 894DF4                  mov dword ptr [ebp-0C], ecx
:00404582 C745FC00000000          mov [ebp-04], 00000000
:00404589 8B45FC                  mov eax, dword ptr [ebp-04]
:0040458C 8945F8                  mov dword ptr [ebp-08], eax
:0040458F EB09                    jmp 0040459A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004045C1(U)
|
:00404591 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00404594 83C101                  add ecx, 00000001
:00404597 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040458F(U)
|
:0040459A 817DF880000000          cmp dword ptr [ebp-08], 00000080
:004045A1 7320                    jnb 004045C3
:004045A3 8B55F8                  mov edx, dword ptr [ebp-08]
:004045A6 8B45F4                  mov eax, dword ptr [ebp-0C]
:004045A9 33C9                    xor ecx, ecx
:004045AB 668B4C5026              mov cx, word ptr [eax+2*edx+26]
:004045B0 81F9FFFF0000            cmp ecx, 0000FFFF
:004045B6 7409                    je 004045C1
:004045B8 8B55FC                  mov edx, dword ptr [ebp-04]
:004045BB 83C201                  add edx, 00000001
:004045BE 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004045B6(C)
|
:004045C1 EBCE                    jmp 00404591

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004045A1(C)
|
:004045C3 8A45FC                  mov al, byte ptr [ebp-04]
:004045C6 8BE5                    mov esp, ebp
:004045C8 5D                      pop ebp
:004045C9 C3                      ret



* Referenced by a CALL at Addresses:
|:00402327   , :0040239A   , :00404656   , :004139B3   , :0042D8ED   
|:0042D984   , :00461643   
|
:004045CA 55                      push ebp
:004045CB 8BEC                    mov ebp, esp
:004045CD 51                      push ecx
:004045CE 894DFC                  mov dword ptr [ebp-04], ecx
:004045D1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004045D4 E8A0FFFFFF              call 00404579
:004045D9 25FF000000              and eax, 000000FF
:004045DE 33C9                    xor ecx, ecx
:004045E0 3D80000000              cmp eax, 00000080
:004045E5 0F95C1                  setne cl
:004045E8 8BC1                    mov eax, ecx
:004045EA 8BE5                    mov esp, ebp
:004045EC 5D                      pop ebp
:004045ED C3                      ret



* Referenced by a CALL at Addresses:
|:0040234C   , :004023EE   , :00404666   , :0040DF8C   , :0042D927   
|:0042D9DC   , :00461655   , :00461DB9   , :00461DD3   , :00461DED   
|
:004045EE 55                      push ebp
:004045EF 8BEC                    mov ebp, esp
:004045F1 83EC08                  sub esp, 00000008
:004045F4 894DF8                  mov dword ptr [ebp-08], ecx
:004045F7 C745FC00000000          mov [ebp-04], 00000000
:004045FE EB09                    jmp 00404609

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404638(U)
|
:00404600 8B45FC                  mov eax, dword ptr [ebp-04]
:00404603 83C001                  add eax, 00000001
:00404606 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004045FE(U)
|
:00404609 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:00404610 7328                    jnb 0040463A
:00404612 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00404615 8B55F8                  mov edx, dword ptr [ebp-08]
:00404618 33C0                    xor eax, eax
:0040461A 668B444A26              mov ax, word ptr [edx+2*ecx+26]
:0040461F 3DFFFF0000              cmp eax, 0000FFFF
:00404624 7512                    jne 00404638
:00404626 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404629 51                      push ecx
:0040462A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040462D 52                      push edx
:0040462E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00404631 E84A100000              call 00405680
:00404636 EB02                    jmp 0040463A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404624(C)
|
:00404638 EBC6                    jmp 00404600

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404610(C), :00404636(U)
|
:0040463A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040463D 8BE5                    mov esp, ebp
:0040463F 5D                      pop ebp
:00404640 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040AD43   
|
:00404643 55                      push ebp
:00404644 8BEC                    mov ebp, esp
:00404646 83EC08                  sub esp, 00000008
:00404649 894DF8                  mov dword ptr [ebp-08], ecx
:0040464C C745FC01000000          mov [ebp-04], 00000001
:00404653 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00404656 E86FFFFFFF              call 004045CA
:0040465B 85C0                    test eax, eax
:0040465D 741B                    je 0040467A
:0040465F 8B4508                  mov eax, dword ptr [ebp+08]
:00404662 50                      push eax
:00404663 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00404666 E883FFFFFF              call 004045EE
:0040466B 33C9                    xor ecx, ecx
:0040466D 3D80000000              cmp eax, 00000080
:00404672 0F95C1                  setne cl
:00404675 894DFC                  mov dword ptr [ebp-04], ecx
:00404678 EB40                    jmp 004046BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040465D(C)
|
:0040467A 6A00                    push 00000000
:0040467C E80F980000              call 0040DE90
:00404681 83C404                  add esp, 00000004
:00404684 85C0                    test eax, eax
:00404686 7413                    je 0040469B
:00404688 8B5508                  mov edx, dword ptr [ebp+08]
:0040468B 52                      push edx
:0040468C B9787F4900              mov ecx, 00497F78
:00404691 E85FDCFFFF              call 004022F5
:00404696 8945FC                  mov dword ptr [ebp-04], eax
:00404699 EB1F                    jmp 004046BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404686(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040469B 6A02                    push 00000002
:0040469D E8EE970000              call 0040DE90
:004046A2 83C404                  add esp, 00000004
:004046A5 85C0                    test eax, eax
:004046A7 7411                    je 004046BA
:004046A9 8B4508                  mov eax, dword ptr [ebp+08]
:004046AC 50                      push eax
:004046AD B918804900              mov ecx, 00498018
:004046B2 E83EDCFFFF              call 004022F5
:004046B7 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404678(U), :00404699(U), :004046A7(C)
|
:004046BA 8B45FC                  mov eax, dword ptr [ebp-04]
:004046BD 8BE5                    mov esp, ebp
:004046BF 5D                      pop ebp
:004046C0 C20400                  ret 0004


:004046C3 55                      push ebp
:004046C4 8BEC                    mov ebp, esp
:004046C6 83EC08                  sub esp, 00000008
:004046C9 894DF8                  mov dword ptr [ebp-08], ecx
:004046CC C745FC00000000          mov [ebp-04], 00000000
:004046D3 EB09                    jmp 004046DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404702(U)
|
:004046D5 8B45FC                  mov eax, dword ptr [ebp-04]
:004046D8 83C001                  add eax, 00000001
:004046DB 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004046D3(U)
|
:004046DE 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:004046E5 731D                    jnb 00404704
:004046E7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004046EA 660FB611                movzx dx, byte ptr [ecx]
:004046EE 8B45FC                  mov eax, dword ptr [ebp-04]
:004046F1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004046F4 6689544126              mov word ptr [ecx+2*eax+26], dx
:004046F9 8B5508                  mov edx, dword ptr [ebp+08]
:004046FC 83C201                  add edx, 00000001
:004046FF 895508                  mov dword ptr [ebp+08], edx
:00404702 EBD1                    jmp 004046D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004046E5(C)
|
:00404704 8BE5                    mov esp, ebp
:00404706 5D                      pop ebp
:00404707 C20400                  ret 0004


:0040470A 55                      push ebp
:0040470B 8BEC                    mov ebp, esp
:0040470D 83EC08                  sub esp, 00000008
:00404710 894DF8                  mov dword ptr [ebp-08], ecx
:00404713 C745FC00000000          mov [ebp-04], 00000000
:0040471A EB09                    jmp 00404725

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404746(U)
|
:0040471C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040471F 83C001                  add eax, 00000001
:00404722 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040471A(U)
|
:00404725 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:0040472C 731A                    jnb 00404748
:0040472E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404731 8B55FC                  mov edx, dword ptr [ebp-04]
:00404734 8B45F8                  mov eax, dword ptr [ebp-08]
:00404737 8A545026                mov dl, byte ptr [eax+2*edx+26]
:0040473B 8811                    mov byte ptr [ecx], dl
:0040473D 8B4508                  mov eax, dword ptr [ebp+08]
:00404740 83C001                  add eax, 00000001
:00404743 894508                  mov dword ptr [ebp+08], eax
:00404746 EBD4                    jmp 0040471C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040472C(C)
|
:00404748 8BE5                    mov esp, ebp
:0040474A 5D                      pop ebp
:0040474B C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040F977   
|
:0040474E 55                      push ebp
:0040474F 8BEC                    mov ebp, esp
:00404751 51                      push ecx
:00404752 894DFC                  mov dword ptr [ebp-04], ecx
:00404755 8B45FC                  mov eax, dword ptr [ebp-04]
:00404758 33C9                    xor ecx, ecx
:0040475A 668B480A                mov cx, word ptr [eax+0A]
:0040475E 8BC1                    mov eax, ecx
:00404760 234508                  and eax, dword ptr [ebp+08]
:00404763 F7D8                    neg eax
:00404765 1BC0                    sbb eax, eax
:00404767 F7D8                    neg eax
:00404769 8BE5                    mov esp, ebp
:0040476B 5D                      pop ebp
:0040476C C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040F728   
|
:0040476F 55                      push ebp
:00404770 8BEC                    mov ebp, esp
:00404772 51                      push ecx
:00404773 894DFC                  mov dword ptr [ebp-04], ecx
:00404776 8B45FC                  mov eax, dword ptr [ebp-04]
:00404779 33C9                    xor ecx, ecx
:0040477B 668B480A                mov cx, word ptr [eax+0A]
:0040477F 0B4D08                  or ecx, dword ptr [ebp+08]
:00404782 51                      push ecx
:00404783 B978294B00              mov ecx, 004B2978
:00404788 E893AA0100              call 0041F220
:0040478D 8BE5                    mov esp, ebp
:0040478F 5D                      pop ebp
:00404790 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040F738   
|
:00404793 55                      push ebp
:00404794 8BEC                    mov ebp, esp
:00404796 51                      push ecx
:00404797 894DFC                  mov dword ptr [ebp-04], ecx
:0040479A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040479D 33C9                    xor ecx, ecx
:0040479F 668B480A                mov cx, word ptr [eax+0A]
:004047A3 8B5508                  mov edx, dword ptr [ebp+08]
:004047A6 F7D2                    not edx
:004047A8 23CA                    and ecx, edx
:004047AA 51                      push ecx
:004047AB B978294B00              mov ecx, 004B2978
:004047B0 E86BAA0100              call 0041F220
:004047B5 8BE5                    mov esp, ebp
:004047B7 5D                      pop ebp
:004047B8 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040ABE4   
|
:004047BB 55                      push ebp
:004047BC 8BEC                    mov ebp, esp
:004047BE 51                      push ecx
:004047BF 894DFC                  mov dword ptr [ebp-04], ecx
:004047C2 8B4508                  mov eax, dword ptr [ebp+08]
:004047C5 50                      push eax
:004047C6 E841CAFFFF              call 0040120C
:004047CB 83C404                  add esp, 00000004
:004047CE 50                      push eax

* Possible StringData Ref from Data Obj ->"%sFP"
                                  |
:004047CF 686CC24700              push 0047C26C
:004047D4 6A00                    push 00000000
:004047D6 E858CC0200              call 00431433
:004047DB 83C40C                  add esp, 0000000C
:004047DE 6A00                    push 00000000
:004047E0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004047E3 6BC950                  imul ecx, 00000050
:004047E6 81C1787F4900            add ecx, 00497F78
:004047EC E8AF0E0000              call 004056A0
:004047F1 B801000000              mov eax, 00000001
:004047F6 8BE5                    mov esp, ebp
:004047F8 5D                      pop ebp
:004047F9 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040AD01   
|
:004047FC 55                      push ebp
:004047FD 8BEC                    mov ebp, esp
:004047FF 83EC08                  sub esp, 00000008
:00404802 894DF8                  mov dword ptr [ebp-08], ecx
:00404805 B978294B00              mov ecx, 004B2978
:0040480A E8D1210300              call 004369E0
:0040480F 8945FC                  mov dword ptr [ebp-04], eax
:00404812 6850C30000              push 0000C350
:00404817 8B4508                  mov eax, dword ptr [ebp+08]
:0040481A 50                      push eax
:0040481B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040481E 51                      push ecx
:0040481F E8DC3A0700              call 00478300
:00404824 83C40C                  add esp, 0000000C
:00404827 8945FC                  mov dword ptr [ebp-04], eax
:0040482A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040482D 52                      push edx
:0040482E B978294B00              mov ecx, 004B2978
:00404833 E8880E0000              call 004056C0
:00404838 33C0                    xor eax, eax
:0040483A 8BE5                    mov esp, ebp
:0040483C 5D                      pop ebp
:0040483D C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040AD11   
|
:00404840 55                      push ebp
:00404841 8BEC                    mov ebp, esp
:00404843 83EC08                  sub esp, 00000008
:00404846 894DF8                  mov dword ptr [ebp-08], ecx
:00404849 B978294B00              mov ecx, 004B2978
:0040484E E88D210300              call 004369E0
:00404853 8945FC                  mov dword ptr [ebp-04], eax
:00404856 8B4508                  mov eax, dword ptr [ebp+08]
:00404859 50                      push eax
:0040485A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040485D 51                      push ecx
:0040485E E8BD3A0700              call 00478320
:00404863 83C408                  add esp, 00000008
:00404866 8945FC                  mov dword ptr [ebp-04], eax
:00404869 8B55FC                  mov edx, dword ptr [ebp-04]
:0040486C 52                      push edx
:0040486D B978294B00              mov ecx, 004B2978
:00404872 E8490E0000              call 004056C0
:00404877 8BE5                    mov esp, ebp
:00404879 5D                      pop ebp
:0040487A C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040E6CD   
|
:0040487D 55                      push ebp
:0040487E 8BEC                    mov ebp, esp
:00404880 51                      push ecx
:00404881 894DFC                  mov dword ptr [ebp-04], ecx
:00404884 8B45FC                  mov eax, dword ptr [ebp-04]
:00404887 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040488A 8A11                    mov dl, byte ptr [ecx]
:0040488C 8810                    mov byte ptr [eax], dl
:0040488E 8B4508                  mov eax, dword ptr [ebp+08]
:00404891 83C001                  add eax, 00000001
:00404894 894508                  mov dword ptr [ebp+08], eax
:00404897 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040489A 8B5508                  mov edx, dword ptr [ebp+08]
:0040489D 8A02                    mov al, byte ptr [edx]
:0040489F 884101                  mov byte ptr [ecx+01], al
:004048A2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004048A5 83C101                  add ecx, 00000001
:004048A8 894D08                  mov dword ptr [ebp+08], ecx
:004048AB 8B55FC                  mov edx, dword ptr [ebp-04]
:004048AE 8B4508                  mov eax, dword ptr [ebp+08]
:004048B1 8A08                    mov cl, byte ptr [eax]
:004048B3 884A02                  mov byte ptr [edx+02], cl
:004048B6 8B5508                  mov edx, dword ptr [ebp+08]
:004048B9 83C201                  add edx, 00000001
:004048BC 895508                  mov dword ptr [ebp+08], edx
:004048BF 8B45FC                  mov eax, dword ptr [ebp-04]
:004048C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004048C5 8A11                    mov dl, byte ptr [ecx]
:004048C7 885003                  mov byte ptr [eax+03], dl
:004048CA 8B4508                  mov eax, dword ptr [ebp+08]
:004048CD 83C001                  add eax, 00000001
:004048D0 894508                  mov dword ptr [ebp+08], eax
:004048D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004048D6 8B5508                  mov edx, dword ptr [ebp+08]
:004048D9 8A02                    mov al, byte ptr [edx]
:004048DB 884104                  mov byte ptr [ecx+04], al
:004048DE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004048E1 83C101                  add ecx, 00000001
:004048E4 894D08                  mov dword ptr [ebp+08], ecx
:004048E7 8B55FC                  mov edx, dword ptr [ebp-04]
:004048EA 8B4508                  mov eax, dword ptr [ebp+08]
:004048ED 8A08                    mov cl, byte ptr [eax]
:004048EF 884A05                  mov byte ptr [edx+05], cl
:004048F2 8B5508                  mov edx, dword ptr [ebp+08]
:004048F5 83C201                  add edx, 00000001
:004048F8 895508                  mov dword ptr [ebp+08], edx
:004048FB 8B45FC                  mov eax, dword ptr [ebp-04]
:004048FE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404901 8A11                    mov dl, byte ptr [ecx]
:00404903 885006                  mov byte ptr [eax+06], dl
:00404906 8B4508                  mov eax, dword ptr [ebp+08]
:00404909 83C001                  add eax, 00000001
:0040490C 894508                  mov dword ptr [ebp+08], eax
:0040490F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00404912 8B5508                  mov edx, dword ptr [ebp+08]
:00404915 8A02                    mov al, byte ptr [edx]
:00404917 884107                  mov byte ptr [ecx+07], al
:0040491A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040491D 83C101                  add ecx, 00000001
:00404920 894D08                  mov dword ptr [ebp+08], ecx
:00404923 8B55FC                  mov edx, dword ptr [ebp-04]
:00404926 8B4508                  mov eax, dword ptr [ebp+08]
:00404929 8A08                    mov cl, byte ptr [eax]
:0040492B 884A08                  mov byte ptr [edx+08], cl
:0040492E 8B5508                  mov edx, dword ptr [ebp+08]
:00404931 83C201                  add edx, 00000001
:00404934 895508                  mov dword ptr [ebp+08], edx
:00404937 8B45FC                  mov eax, dword ptr [ebp-04]
:0040493A C6400900                mov [eax+09], 00
:0040493E 8B4508                  mov eax, dword ptr [ebp+08]
:00404941 8BE5                    mov esp, ebp
:00404943 5D                      pop ebp
:00404944 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040EDDD   
|
:00404947 55                      push ebp
:00404948 8BEC                    mov ebp, esp
:0040494A 51                      push ecx
:0040494B 894DFC                  mov dword ptr [ebp-04], ecx
:0040494E 8B4508                  mov eax, dword ptr [ebp+08]
:00404951 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00404954 8A11                    mov dl, byte ptr [ecx]
:00404956 8810                    mov byte ptr [eax], dl
:00404958 8B4508                  mov eax, dword ptr [ebp+08]
:0040495B 83C001                  add eax, 00000001
:0040495E 894508                  mov dword ptr [ebp+08], eax
:00404961 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404964 8B55FC                  mov edx, dword ptr [ebp-04]
:00404967 8A4201                  mov al, byte ptr [edx+01]
:0040496A 8801                    mov byte ptr [ecx], al
:0040496C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040496F 83C101                  add ecx, 00000001
:00404972 894D08                  mov dword ptr [ebp+08], ecx
:00404975 8B5508                  mov edx, dword ptr [ebp+08]
:00404978 8B45FC                  mov eax, dword ptr [ebp-04]
:0040497B 8A4802                  mov cl, byte ptr [eax+02]
:0040497E 880A                    mov byte ptr [edx], cl
:00404980 8B5508                  mov edx, dword ptr [ebp+08]
:00404983 83C201                  add edx, 00000001
:00404986 895508                  mov dword ptr [ebp+08], edx
:00404989 8B4508                  mov eax, dword ptr [ebp+08]
:0040498C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040498F 8A5103                  mov dl, byte ptr [ecx+03]
:00404992 8810                    mov byte ptr [eax], dl
:00404994 8B4508                  mov eax, dword ptr [ebp+08]
:00404997 83C001                  add eax, 00000001
:0040499A 894508                  mov dword ptr [ebp+08], eax
:0040499D 8B4D08                  mov ecx, dword ptr [ebp+08]
:004049A0 8B55FC                  mov edx, dword ptr [ebp-04]
:004049A3 8A4204                  mov al, byte ptr [edx+04]
:004049A6 8801                    mov byte ptr [ecx], al
:004049A8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004049AB 83C101                  add ecx, 00000001
:004049AE 894D08                  mov dword ptr [ebp+08], ecx
:004049B1 8B5508                  mov edx, dword ptr [ebp+08]
:004049B4 8B45FC                  mov eax, dword ptr [ebp-04]
:004049B7 8A4805                  mov cl, byte ptr [eax+05]
:004049BA 880A                    mov byte ptr [edx], cl
:004049BC 8B5508                  mov edx, dword ptr [ebp+08]
:004049BF 83C201                  add edx, 00000001
:004049C2 895508                  mov dword ptr [ebp+08], edx
:004049C5 8B4508                  mov eax, dword ptr [ebp+08]
:004049C8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004049CB 8A5106                  mov dl, byte ptr [ecx+06]
:004049CE 8810                    mov byte ptr [eax], dl
:004049D0 8B4508                  mov eax, dword ptr [ebp+08]
:004049D3 83C001                  add eax, 00000001
:004049D6 894508                  mov dword ptr [ebp+08], eax
:004049D9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004049DC 8B55FC                  mov edx, dword ptr [ebp-04]
:004049DF 8A4207                  mov al, byte ptr [edx+07]
:004049E2 8801                    mov byte ptr [ecx], al
:004049E4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004049E7 83C101                  add ecx, 00000001
:004049EA 894D08                  mov dword ptr [ebp+08], ecx
:004049ED 8B5508                  mov edx, dword ptr [ebp+08]
:004049F0 8B45FC                  mov eax, dword ptr [ebp-04]
:004049F3 8A4808                  mov cl, byte ptr [eax+08]
:004049F6 880A                    mov byte ptr [edx], cl
:004049F8 8B5508                  mov edx, dword ptr [ebp+08]
:004049FB 83C201                  add edx, 00000001
:004049FE 895508                  mov dword ptr [ebp+08], edx
:00404A01 8B4508                  mov eax, dword ptr [ebp+08]
:00404A04 8BE5                    mov esp, ebp
:00404A06 5D                      pop ebp
:00404A07 C20400                  ret 0004


:00404A0A 55                      push ebp
:00404A0B 8BEC                    mov ebp, esp
:00404A0D 8B4508                  mov eax, dword ptr [ebp+08]
:00404A10 25FF000000              and eax, 000000FF
:00404A15 83F80C                  cmp eax, 0000000C
:00404A18 7D15                    jge 00404A2F
:00404A1A 8B4508                  mov eax, dword ptr [ebp+08]
:00404A1D 25FF000000              and eax, 000000FF
:00404A22 69C0EC000000            imul eax, 000000EC
:00404A28 0550D24A00              add eax, 004AD250
:00404A2D EB02                    jmp 00404A31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404A18(C)
|
:00404A2F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404A2D(U)
|
:00404A31 5D                      pop ebp
:00404A32 C3                      ret



* Referenced by a CALL at Addresses:
|:0040E1CE   , :0040F24D   , :00411EEF   , :004120E4   
|
:00404A33 55                      push ebp
:00404A34 8BEC                    mov ebp, esp
:00404A36 837D080C                cmp dword ptr [ebp+08], 0000000C
:00404A3A 7204                    jb 00404A40
:00404A3C 33C0                    xor eax, eax
:00404A3E EB14                    jmp 00404A54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404A3A(C)
|
:00404A40 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404A43 69C9EC000000            imul ecx, 000000EC
:00404A49 81C150D24A00            add ecx, 004AD250
:00404A4F E89C0C0000              call 004056F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404A3E(U)
|
:00404A54 5D                      pop ebp
:00404A55 C3                      ret


:00404A56 55                      push ebp
:00404A57 8BEC                    mov ebp, esp
:00404A59 8B4508                  mov eax, dword ptr [ebp+08]
:00404A5C 2D50D24A00              sub eax, 004AD250
:00404A61 99                      cdq

* Possible Reference to Dialog: DialogID_00EC 
                                  |
:00404A62 B9EC000000              mov ecx, 000000EC
:00404A67 F7F9                    idiv ecx
:00404A69 5D                      pop ebp
:00404A6A C3                      ret



* Referenced by a CALL at Addresses:
|:00402448   , :0041A72B   , :0041A78A   , :0042FBE0   
|
:00404A6B 55                      push ebp
:00404A6C 8BEC                    mov ebp, esp
:00404A6E 817D0820030000          cmp dword ptr [ebp+08], 00000320
:00404A75 730D                    jnb 00404A84
:00404A77 8B4508                  mov eax, dword ptr [ebp+08]
:00404A7A 6BC050                  imul eax, 00000050
:00404A7D 05787F4900              add eax, 00497F78
:00404A82 EB02                    jmp 00404A86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404A75(C)
|
:00404A84 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404A82(U)
|
:00404A86 5D                      pop ebp
:00404A87 C3                      ret



* Referenced by a CALL at Addresses:
|:004334DB   , :004413C7   , :0044A87B   
|
:00404A88 55                      push ebp
:00404A89 8BEC                    mov ebp, esp
:00404A8B 8B4508                  mov eax, dword ptr [ebp+08]
:00404A8E 2D787F4900              sub eax, 00497F78
:00404A93 99                      cdq
:00404A94 B950000000              mov ecx, 00000050
:00404A99 F7F9                    idiv ecx
:00404A9B 5D                      pop ebp
:00404A9C C3                      ret



* Referenced by a CALL at Addresses:
|:0040867A   , :004086CE   
|
:00404A9D 55                      push ebp
:00404A9E 8BEC                    mov ebp, esp
:00404AA0 51                      push ecx
:00404AA1 8B4510                  mov eax, dword ptr [ebp+10]
:00404AA4 50                      push eax
:00404AA5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404AA8 51                      push ecx
:00404AA9 E830C9FFFF              call 004013DE
:00404AAE 83C408                  add esp, 00000008
:00404AB1 8945FC                  mov dword ptr [ebp-04], eax
:00404AB4 8B55FC                  mov edx, dword ptr [ebp-04]
:00404AB7 52                      push edx
:00404AB8 8B4510                  mov eax, dword ptr [ebp+10]
:00404ABB 50                      push eax
:00404ABC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00404ABF 51                      push ecx
:00404AC0 E8DCCDFFFF              call 004018A1
:00404AC5 83C40C                  add esp, 0000000C
:00404AC8 33C0                    xor eax, eax
:00404ACA 8BE5                    mov esp, ebp
:00404ACC 5D                      pop ebp
:00404ACD C3                      ret



* Referenced by a CALL at Address:
|:0040AC21   
|
:00404ACE 55                      push ebp
:00404ACF 8BEC                    mov ebp, esp
:00404AD1 8A450C                  mov al, byte ptr [ebp+0C]
:00404AD4 50                      push eax
:00404AD5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404AD8 6BC950                  imul ecx, 00000050
:00404ADB 81C1787F4900            add ecx, 00497F78
:00404AE1 E8BA0B0000              call 004056A0
:00404AE6 33C0                    xor eax, eax
:00404AE8 5D                      pop ebp
:00404AE9 C3                      ret


:00404AEA 55                      push ebp
:00404AEB 8BEC                    mov ebp, esp
:00404AED B978294B00              mov ecx, 004B2978
:00404AF2 E8090C0000              call 00405700
:00404AF7 25FF000000              and eax, 000000FF
:00404AFC 33C9                    xor ecx, ecx
:00404AFE 8A88C4D54700            mov cl, byte ptr [eax+0047D5C4]
:00404B04 8BC1                    mov eax, ecx
:00404B06 5D                      pop ebp
:00404B07 C3                      ret



* Referenced by a CALL at Address:
|:0040F570   
|
:00404B08 55                      push ebp
:00404B09 8BEC                    mov ebp, esp
:00404B0B 83EC20                  sub esp, 00000020
:00404B0E 894DE8                  mov dword ptr [ebp-18], ecx
:00404B11 8B45E8                  mov eax, dword ptr [ebp-18]
:00404B14 8945F4                  mov dword ptr [ebp-0C], eax
:00404B17 C745F000000000          mov [ebp-10], 00000000
:00404B1E EB09                    jmp 00404B29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B4B(U)
|
:00404B20 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00404B23 83C101                  add ecx, 00000001
:00404B26 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B1E(U)
|
:00404B29 837DF008                cmp dword ptr [ebp-10], 00000008
:00404B2D 731E                    jnb 00404B4D
:00404B2F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00404B32 8B4508                  mov eax, dword ptr [ebp+08]
:00404B35 8A08                    mov cl, byte ptr [eax]
:00404B37 880A                    mov byte ptr [edx], cl
:00404B39 8B55F4                  mov edx, dword ptr [ebp-0C]
:00404B3C 83C201                  add edx, 00000001
:00404B3F 8955F4                  mov dword ptr [ebp-0C], edx
:00404B42 8B4508                  mov eax, dword ptr [ebp+08]
:00404B45 83C001                  add eax, 00000001
:00404B48 894508                  mov dword ptr [ebp+08], eax
:00404B4B EBD3                    jmp 00404B20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B2D(C)
|
:00404B4D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00404B50 C60100                  mov byte ptr [ecx], 00
:00404B53 8B5508                  mov edx, dword ptr [ebp+08]
:00404B56 83C201                  add edx, 00000001
:00404B59 895508                  mov dword ptr [ebp+08], edx
:00404B5C C745FC00000000          mov [ebp-04], 00000000
:00404B63 EB09                    jmp 00404B6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404BBE(U)
|
:00404B65 8B45FC                  mov eax, dword ptr [ebp-04]
:00404B68 83C001                  add eax, 00000001
:00404B6B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B63(U)
|
:00404B6E 837DFC03                cmp dword ptr [ebp-04], 00000003
:00404B72 734C                    jnb 00404BC0
:00404B74 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404B77 33D2                    xor edx, edx
:00404B79 8A11                    mov dl, byte ptr [ecx]
:00404B7B 8955E4                  mov dword ptr [ebp-1C], edx
:00404B7E 8B45E4                  mov eax, dword ptr [ebp-1C]
:00404B81 50                      push eax
:00404B82 6A00                    push 00000000
:00404B84 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00404B87 51                      push ecx
:00404B88 8B5508                  mov edx, dword ptr [ebp+08]
:00404B8B 83C201                  add edx, 00000001
:00404B8E 895508                  mov dword ptr [ebp+08], edx
:00404B91 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00404B94 E8870B0000              call 00405720
:00404B99 8B4508                  mov eax, dword ptr [ebp+08]
:00404B9C 33C9                    xor ecx, ecx
:00404B9E 8A08                    mov cl, byte ptr [eax]
:00404BA0 894DE0                  mov dword ptr [ebp-20], ecx
:00404BA3 8B55E0                  mov edx, dword ptr [ebp-20]
:00404BA6 52                      push edx
:00404BA7 6A01                    push 00000001
:00404BA9 8B45FC                  mov eax, dword ptr [ebp-04]
:00404BAC 50                      push eax
:00404BAD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404BB0 83C101                  add ecx, 00000001
:00404BB3 894D08                  mov dword ptr [ebp+08], ecx
:00404BB6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00404BB9 E8620B0000              call 00405720
:00404BBE EBA5                    jmp 00404B65

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404B72(C)
|
:00404BC0 C745F000000000          mov [ebp-10], 00000000
:00404BC7 EB09                    jmp 00404BD2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404BEF(U)
|
:00404BC9 8B55F0                  mov edx, dword ptr [ebp-10]
:00404BCC 83C201                  add edx, 00000001
:00404BCF 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404BC7(U)
|
:00404BD2 837DF00C                cmp dword ptr [ebp-10], 0000000C
:00404BD6 7319                    jnb 00404BF1
:00404BD8 8B45E8                  mov eax, dword ptr [ebp-18]
:00404BDB 0345F0                  add eax, dword ptr [ebp-10]
:00404BDE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404BE1 8A11                    mov dl, byte ptr [ecx]
:00404BE3 885011                  mov byte ptr [eax+11], dl
:00404BE6 8B4508                  mov eax, dword ptr [ebp+08]
:00404BE9 83C001                  add eax, 00000001
:00404BEC 894508                  mov dword ptr [ebp+08], eax
:00404BEF EBD8                    jmp 00404BC9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404BD6(C)
|
:00404BF1 C745F000000000          mov [ebp-10], 00000000
:00404BF8 EB09                    jmp 00404C03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404C67(U)
|
:00404BFA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00404BFD 83C101                  add ecx, 00000001
:00404C00 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404BF8(U)
|
:00404C03 837DF003                cmp dword ptr [ebp-10], 00000003
:00404C07 7360                    jnb 00404C69
:00404C09 C745EC00000000          mov [ebp-14], 00000000
:00404C10 EB09                    jmp 00404C1B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404C65(U)
|
:00404C12 8B55EC                  mov edx, dword ptr [ebp-14]
:00404C15 83C201                  add edx, 00000001
:00404C18 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404C10(U)
|
:00404C1B 837DEC10                cmp dword ptr [ebp-14], 00000010
:00404C1F 7346                    jnb 00404C67
:00404C21 8B4508                  mov eax, dword ptr [ebp+08]
:00404C24 33C9                    xor ecx, ecx
:00404C26 8A08                    mov cl, byte ptr [eax]
:00404C28 894DF8                  mov dword ptr [ebp-08], ecx
:00404C2B 8B5508                  mov edx, dword ptr [ebp+08]
:00404C2E 83C201                  add edx, 00000001
:00404C31 895508                  mov dword ptr [ebp+08], edx
:00404C34 8B4508                  mov eax, dword ptr [ebp+08]
:00404C37 33C9                    xor ecx, ecx
:00404C39 8A08                    mov cl, byte ptr [eax]
:00404C3B C1E108                  shl ecx, 08
:00404C3E 8B55F8                  mov edx, dword ptr [ebp-08]
:00404C41 03D1                    add edx, ecx
:00404C43 8955F8                  mov dword ptr [ebp-08], edx
:00404C46 8B4508                  mov eax, dword ptr [ebp+08]
:00404C49 83C001                  add eax, 00000001
:00404C4C 894508                  mov dword ptr [ebp+08], eax
:00404C4F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00404C52 C1E106                  shl ecx, 06
:00404C55 8B55E8                  mov edx, dword ptr [ebp-18]
:00404C58 8D440A20                lea eax, dword ptr [edx+ecx+20]
:00404C5C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00404C5F 8B55F8                  mov edx, dword ptr [ebp-08]
:00404C62 891488                  mov dword ptr [eax+4*ecx], edx
:00404C65 EBAB                    jmp 00404C12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404C1F(C)
|
:00404C67 EB91                    jmp 00404BFA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404C07(C)
|
:00404C69 C745F000000000          mov [ebp-10], 00000000
:00404C70 EB09                    jmp 00404C7B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404C9B(U)
|
:00404C72 8B45F0                  mov eax, dword ptr [ebp-10]
:00404C75 83C001                  add eax, 00000001
:00404C78 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404C70(U)
|
:00404C7B 837DF00B                cmp dword ptr [ebp-10], 0000000B
:00404C7F 731C                    jnb 00404C9D
:00404C81 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00404C84 034DF0                  add ecx, dword ptr [ebp-10]
:00404C87 8B5508                  mov edx, dword ptr [ebp+08]
:00404C8A 8A02                    mov al, byte ptr [edx]
:00404C8C 8881E0000000            mov byte ptr [ecx+000000E0], al
:00404C92 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404C95 83C101                  add ecx, 00000001
:00404C98 894D08                  mov dword ptr [ebp+08], ecx
:00404C9B EBD5                    jmp 00404C72

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404C7F(C)
|
:00404C9D 8B4508                  mov eax, dword ptr [ebp+08]
:00404CA0 8BE5                    mov esp, ebp
:00404CA2 5D                      pop ebp
:00404CA3 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040F690   
|
:00404CA6 55                      push ebp
:00404CA7 8BEC                    mov ebp, esp
:00404CA9 83EC0C                  sub esp, 0000000C
:00404CAC 894DF4                  mov dword ptr [ebp-0C], ecx
:00404CAF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00404CB2 8945FC                  mov dword ptr [ebp-04], eax
:00404CB5 C745F800000000          mov [ebp-08], 00000000
:00404CBC EB09                    jmp 00404CC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404CE9(U)
|
:00404CBE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00404CC1 83C101                  add ecx, 00000001
:00404CC4 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404CBC(U)
|
:00404CC7 837DF80A                cmp dword ptr [ebp-08], 0000000A
:00404CCB 731E                    jnb 00404CEB
:00404CCD 8B55FC                  mov edx, dword ptr [ebp-04]
:00404CD0 8B4508                  mov eax, dword ptr [ebp+08]
:00404CD3 8A08                    mov cl, byte ptr [eax]
:00404CD5 880A                    mov byte ptr [edx], cl
:00404CD7 8B55FC                  mov edx, dword ptr [ebp-04]
:00404CDA 83C201                  add edx, 00000001
:00404CDD 8955FC                  mov dword ptr [ebp-04], edx
:00404CE0 8B4508                  mov eax, dword ptr [ebp+08]
:00404CE3 83C001                  add eax, 00000001
:00404CE6 894508                  mov dword ptr [ebp+08], eax
:00404CE9 EBD3                    jmp 00404CBE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404CCB(C)
|
:00404CEB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00404CEE C60100                  mov byte ptr [ecx], 00
:00404CF1 8B5508                  mov edx, dword ptr [ebp+08]
:00404CF4 83C201                  add edx, 00000001
:00404CF7 895508                  mov dword ptr [ebp+08], edx
:00404CFA 8B45F4                  mov eax, dword ptr [ebp-0C]
:00404CFD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404D00 8A11                    mov dl, byte ptr [ecx]
:00404D02 88500B                  mov byte ptr [eax+0B], dl
:00404D05 8B4508                  mov eax, dword ptr [ebp+08]
:00404D08 83C001                  add eax, 00000001
:00404D0B 894508                  mov dword ptr [ebp+08], eax
:00404D0E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00404D11 8B5508                  mov edx, dword ptr [ebp+08]
:00404D14 8A02                    mov al, byte ptr [edx]
:00404D16 88410C                  mov byte ptr [ecx+0C], al
:00404D19 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404D1C 83C101                  add ecx, 00000001
:00404D1F 894D08                  mov dword ptr [ebp+08], ecx
:00404D22 8B55F4                  mov edx, dword ptr [ebp-0C]
:00404D25 8B4508                  mov eax, dword ptr [ebp+08]
:00404D28 8A08                    mov cl, byte ptr [eax]
:00404D2A 884A0D                  mov byte ptr [edx+0D], cl
:00404D2D 8B5508                  mov edx, dword ptr [ebp+08]
:00404D30 83C201                  add edx, 00000001
:00404D33 895508                  mov dword ptr [ebp+08], edx
:00404D36 8B45F4                  mov eax, dword ptr [ebp-0C]
:00404D39 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404D3C 8A11                    mov dl, byte ptr [ecx]
:00404D3E 88500E                  mov byte ptr [eax+0E], dl
:00404D41 8B4508                  mov eax, dword ptr [ebp+08]
:00404D44 83C001                  add eax, 00000001
:00404D47 894508                  mov dword ptr [ebp+08], eax
:00404D4A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00404D4D 8B5508                  mov edx, dword ptr [ebp+08]
:00404D50 8A02                    mov al, byte ptr [edx]
:00404D52 88410F                  mov byte ptr [ecx+0F], al
:00404D55 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404D58 83C101                  add ecx, 00000001
:00404D5B 894D08                  mov dword ptr [ebp+08], ecx
:00404D5E 8B55F4                  mov edx, dword ptr [ebp-0C]
:00404D61 8B4508                  mov eax, dword ptr [ebp+08]
:00404D64 8A08                    mov cl, byte ptr [eax]
:00404D66 884A10                  mov byte ptr [edx+10], cl
:00404D69 8B5508                  mov edx, dword ptr [ebp+08]
:00404D6C 83C201                  add edx, 00000001
:00404D6F 895508                  mov dword ptr [ebp+08], edx
:00404D72 C745F800000000          mov [ebp-08], 00000000
:00404D79 EB09                    jmp 00404D84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404DA1(U)
|
:00404D7B 8B45F8                  mov eax, dword ptr [ebp-08]
:00404D7E 83C001                  add eax, 00000001
:00404D81 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404D79(U)
|
:00404D84 837DF820                cmp dword ptr [ebp-08], 00000020
:00404D88 7319                    jnb 00404DA3
:00404D8A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00404D8D 034DF8                  add ecx, dword ptr [ebp-08]
:00404D90 8B5508                  mov edx, dword ptr [ebp+08]
:00404D93 8A02                    mov al, byte ptr [edx]
:00404D95 884111                  mov byte ptr [ecx+11], al
:00404D98 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404D9B 83C101                  add ecx, 00000001
:00404D9E 894D08                  mov dword ptr [ebp+08], ecx
:00404DA1 EBD8                    jmp 00404D7B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404D88(C)
|
:00404DA3 8B4508                  mov eax, dword ptr [ebp+08]
:00404DA6 8BE5                    mov esp, ebp
:00404DA8 5D                      pop ebp
:00404DA9 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00403CC8   , :00403E7F   
|
:00404DAC 55                      push ebp
:00404DAD 8BEC                    mov ebp, esp
:00404DAF 83EC08                  sub esp, 00000008
:00404DB2 817D10FFFF0000          cmp dword ptr [ebp+10], 0000FFFF
:00404DB9 7408                    je 00404DC3
:00404DBB 8B4510                  mov eax, dword ptr [ebp+10]
:00404DBE A3246C4800              mov dword ptr [00486C24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404DB9(C)
|
:00404DC3 813D246C4800A3010000    cmp dword ptr [00486C24], 000001A3
:00404DCD 0F8381000000            jnb 00404E54
:00404DD3 6824010000              push 00000124
:00404DD8 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00404DDE 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00404DDF FF15E4D64B00            Call dword ptr [004BD6E4]
:00404DE5 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00404DE8 6A03                    push 00000003
:00404DEA 6A00                    push 00000000
:00404DEC 6A00                    push 00000000
:00404DEE 6A20                    push 00000020
:00404DF0 6A20                    push 00000020
:00404DF2 8B55F8                  mov edx, dword ptr [ebp-08]
:00404DF5 52                      push edx
:00404DF6 6A00                    push 00000000
:00404DF8 6A00                    push 00000000
:00404DFA 8B450C                  mov eax, dword ptr [ebp+0C]
:00404DFD 50                      push eax

* Reference To: USER32.DrawIconEx, Ord:00A5h
                                  |
:00404DFE FF15F4D54B00            Call dword ptr [004BD5F4]
:00404E04 8B0D246C4800            mov ecx, dword ptr [00486C24]
:00404E0A 6BC922                  imul ecx, 00000022
:00404E0D 81C1D0474900            add ecx, 004947D0
:00404E13 E828E4FFFF              call 00403240
:00404E18 25FF000000              and eax, 000000FF
:00404E1D 05FA000000              add eax, 000000FA
:00404E22 25FFFF0000              and eax, 0000FFFF
:00404E27 50                      push eax
:00404E28 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00404E2E 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00404E2F FF15E4D64B00            Call dword ptr [004BD6E4]
:00404E35 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00404E38 6A03                    push 00000003
:00404E3A 6A00                    push 00000000
:00404E3C 6A00                    push 00000000
:00404E3E 6A20                    push 00000020
:00404E40 6A20                    push 00000020
:00404E42 8B55FC                  mov edx, dword ptr [ebp-04]
:00404E45 52                      push edx
:00404E46 6A00                    push 00000000
:00404E48 6A00                    push 00000000
:00404E4A 8B450C                  mov eax, dword ptr [ebp+0C]
:00404E4D 50                      push eax

* Reference To: USER32.DrawIconEx, Ord:00A5h
                                  |
:00404E4E FF15F4D54B00            Call dword ptr [004BD5F4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404DCD(C)
|
:00404E54 8BE5                    mov esp, ebp
:00404E56 5D                      pop ebp
:00404E57 C3                      ret


:00404E58 55                      push ebp
:00404E59 8BEC                    mov ebp, esp
:00404E5B 51                      push ecx
:00404E5C 894DFC                  mov dword ptr [ebp-04], ecx
:00404E5F 8B45FC                  mov eax, dword ptr [ebp-04]
:00404E62 C74004FF000000          mov [eax+04], 000000FF
:00404E69 8BE5                    mov esp, ebp
:00404E6B 5D                      pop ebp
:00404E6C C3                      ret



* Referenced by a CALL at Address:
|:00405629   
|
:00404E6D 55                      push ebp
:00404E6E 8BEC                    mov ebp, esp
:00404E70 51                      push ecx
:00404E71 894DFC                  mov dword ptr [ebp-04], ecx
:00404E74 8B45FC                  mov eax, dword ptr [ebp-04]
:00404E77 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404E7A 8908                    mov dword ptr [eax], ecx
:00404E7C 8BE5                    mov esp, ebp
:00404E7E 5D                      pop ebp
:00404E7F C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046C3BE   
|
:00404E82 55                      push ebp
:00404E83 8BEC                    mov ebp, esp
:00404E85 83EC14                  sub esp, 00000014
:00404E88 894DEC                  mov dword ptr [ebp-14], ecx
:00404E8B 8B45EC                  mov eax, dword ptr [ebp-14]
:00404E8E 833800                  cmp dword ptr [eax], 00000000
:00404E91 7505                    jne 00404E98
:00404E93 E9C3010000              jmp 0040505B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404E91(C)
|
:00404E98 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404E9B 81E1FF000000            and ecx, 000000FF
:00404EA1 83F941                  cmp ecx, 00000041
:00404EA4 7C05                    jl 00404EAB
:00404EA6 E9B0010000              jmp 0040505B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404EA4(C)
|
:00404EAB 8B5508                  mov edx, dword ptr [ebp+08]
:00404EAE 81E2FF000000            and edx, 000000FF
:00404EB4 8B45EC                  mov eax, dword ptr [ebp-14]
:00404EB7 895004                  mov dword ptr [eax+04], edx
:00404EBA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404EBD 81E1FF000000            and ecx, 000000FF
:00404EC3 6BC931                  imul ecx, 00000031
:00404EC6 81C1001D4B00            add ecx, 004B1D00
:00404ECC E81F080000              call 004056F0
:00404ED1 50                      push eax
:00404ED2 6822050000              push 00000522
:00404ED7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00404EDA 8B11                    mov edx, dword ptr [ecx]
:00404EDC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00404EDD FF1510D64B00            Call dword ptr [004BD610]
:00404EE3 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00404EE4 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00404EEA 6A0A                    push 0000000A
:00404EEC 8D45F4                  lea eax, dword ptr [ebp-0C]
:00404EEF 50                      push eax
:00404EF0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404EF3 81E1FF000000            and ecx, 000000FF
:00404EF9 6BC931                  imul ecx, 00000031
:00404EFC 81C1001D4B00            add ecx, 004B1D00
:00404F02 E8F9AE0000              call 0040FE00
:00404F07 25FF000000              and eax, 000000FF
:00404F0C 50                      push eax
:00404F0D E8AE560600              call 0046A5C0
:00404F12 83C40C                  add esp, 0000000C
:00404F15 50                      push eax
:00404F16 6823050000              push 00000523
:00404F1B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00404F1E 8B11                    mov edx, dword ptr [ecx]
:00404F20 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00404F21 FF1510D64B00            Call dword ptr [004BD610]
:00404F27 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00404F28 FF1514D64B00            Call dword ptr [004BD614]
:00404F2E 68FF000000              push 000000FF
:00404F33 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404F36 81E1FF000000            and ecx, 000000FF
:00404F3C 6BC931                  imul ecx, 00000031
:00404F3F 81C1001D4B00            add ecx, 004B1D00
:00404F45 E8B6AE0000              call 0040FE00
:00404F4A 660FB6C0                movzx ax, al
:00404F4E 50                      push eax
:00404F4F 6824050000              push 00000524
:00404F54 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00404F57 8B11                    mov edx, dword ptr [ecx]
:00404F59 52                      push edx
:00404F5A E8CB5C0600              call 0046AC2A
:00404F5F 83C410                  add esp, 00000010
:00404F62 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404F65 81E1FF000000            and ecx, 000000FF
:00404F6B 6BC931                  imul ecx, 00000031
:00404F6E 81C1001D4B00            add ecx, 004B1D00
:00404F74 E8C7070000              call 00405740
:00404F79 8845F0                  mov byte ptr [ebp-10], al
:00404F7C 8B45F0                  mov eax, dword ptr [ebp-10]
:00404F7F 25FF000000              and eax, 000000FF
:00404F84 3DFF000000              cmp eax, 000000FF
:00404F89 742B                    je 00404FB6
:00404F8B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00404F8E 81E1FF000000            and ecx, 000000FF
:00404F94 8B148D10D64700          mov edx, dword ptr [4*ecx+0047D610]
:00404F9B 52                      push edx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:03FF, "1000"
                                  |
:00404F9C 68FF030000              push 000003FF
:00404FA1 8B45EC                  mov eax, dword ptr [ebp-14]
:00404FA4 8B08                    mov ecx, dword ptr [eax]
:00404FA6 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00404FA7 FF1510D64B00            Call dword ptr [004BD610]
:00404FAD 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00404FAE FF1514D64B00            Call dword ptr [004BD614]
:00404FB4 EB1D                    jmp 00404FD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404F89(C)
|

* Possible StringData Ref from Data Obj ->"S"
                                  |
:00404FB6 687CC24700              push 0047C27C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:03FF, "1000"
                                  |
:00404FBB 68FF030000              push 000003FF
:00404FC0 8B55EC                  mov edx, dword ptr [ebp-14]
:00404FC3 8B02                    mov eax, dword ptr [edx]
:00404FC5 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00404FC6 FF1510D64B00            Call dword ptr [004BD610]
:00404FCC 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00404FCD FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00404FB4(U)
|
:00404FD3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00404FD6 81E1FF000000            and ecx, 000000FF
:00404FDC 51                      push ecx
:00404FDD 8B55EC                  mov edx, dword ptr [ebp-14]
:00404FE0 83C20C                  add edx, 0000000C
:00404FE3 52                      push edx
:00404FE4 E8BEE5FFFF              call 004035A7
:00404FE9 83C408                  add esp, 00000008
:00404FEC 8B45EC                  mov eax, dword ptr [ebp-14]
:00404FEF 83C00C                  add eax, 0000000C
:00404FF2 50                      push eax
:00404FF3 6825050000              push 00000525
:00404FF8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00404FFB 8B11                    mov edx, dword ptr [ecx]
:00404FFD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00404FFE FF1510D64B00            Call dword ptr [004BD610]
:00405004 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00405005 FF1514D64B00            Call dword ptr [004BD614]
:0040500B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040500E E857030000              call 0040536A
:00405013 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00405016 E805010000              call 00405120
:0040501B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040501E E825020000              call 00405248
:00405023 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00405026 E84F000000              call 0040507A
:0040502B 8B45EC                  mov eax, dword ptr [ebp-14]
:0040502E 8B08                    mov ecx, dword ptr [eax]
:00405030 51                      push ecx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00405031 FF15FCD54B00            Call dword ptr [004BD5FC]

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00405037 6A09                    push 00000009
:00405039 8B55EC                  mov edx, dword ptr [ebp-14]
:0040503C 8B02                    mov eax, dword ptr [edx]
:0040503E 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0040503F FF1500D74B00            Call dword ptr [004BD700]
:00405045 6A00                    push 00000000
:00405047 E8C3050700              call 0047560F
:0040504C 83C404                  add esp, 00000004
:0040504F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00405052 8B11                    mov edx, dword ptr [ecx]
:00405054 52                      push edx

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:00405055 FF1500D64B00            Call dword ptr [004BD600]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00404E93(U), :00404EA6(U)
|
:0040505B 8BE5                    mov esp, ebp
:0040505D 5D                      pop ebp
:0040505E C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004055B9   , :0046CC00   , :0046CC49   
|
:00405061 55                      push ebp
:00405062 8BEC                    mov ebp, esp
:00405064 51                      push ecx
:00405065 894DFC                  mov dword ptr [ebp-04], ecx
:00405068 6A00                    push 00000000
:0040506A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040506D 8B08                    mov ecx, dword ptr [eax]
:0040506F 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405070 FF1500D74B00            Call dword ptr [004BD700]
:00405076 8BE5                    mov esp, ebp
:00405078 5D                      pop ebp
:00405079 C3                      ret



* Referenced by a CALL at Address:
|:00405026   
|
:0040507A 55                      push ebp
:0040507B 8BEC                    mov ebp, esp
:0040507D 51                      push ecx
:0040507E 894DFC                  mov dword ptr [ebp-04], ecx
:00405081 6827050000              push 00000527
:00405086 8B45FC                  mov eax, dword ptr [ebp-04]
:00405089 8B08                    mov ecx, dword ptr [eax]
:0040508B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040508C FF1510D64B00            Call dword ptr [004BD610]
:00405092 50                      push eax
:00405093 8B1534544B00            mov edx, dword ptr [004B5434]
:00405099 52                      push edx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0040509A FF15E8D54B00            Call dword ptr [004BD5E8]
:004050A0 6A00                    push 00000000
:004050A2 A194B04700              mov eax, dword ptr [0047B094]
:004050A7 50                      push eax
:004050A8 8B0D90B04700            mov ecx, dword ptr [0047B090]
:004050AE 51                      push ecx
:004050AF 6A00                    push 00000000
:004050B1 6A00                    push 00000000
:004050B3 8B1534544B00            mov edx, dword ptr [004B5434]
:004050B9 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004050BA FF15ECD54B00            Call dword ptr [004BD5EC]
:004050C0 6828050000              push 00000528
:004050C5 8B45FC                  mov eax, dword ptr [ebp-04]
:004050C8 8B08                    mov ecx, dword ptr [eax]
:004050CA 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004050CB FF1510D64B00            Call dword ptr [004BD610]
:004050D1 50                      push eax
:004050D2 8B1538544B00            mov edx, dword ptr [004B5438]
:004050D8 52                      push edx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:004050D9 FF15E8D54B00            Call dword ptr [004BD5E8]
:004050DF 6A00                    push 00000000
:004050E1 A1A4B04700              mov eax, dword ptr [0047B0A4]
:004050E6 50                      push eax
:004050E7 8B0DA0B04700            mov ecx, dword ptr [0047B0A0]
:004050ED 51                      push ecx
:004050EE 6A00                    push 00000000
:004050F0 6A00                    push 00000000
:004050F2 8B1538544B00            mov edx, dword ptr [004B5438]
:004050F8 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004050F9 FF15ECD54B00            Call dword ptr [004BD5EC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004050FF 6A05                    push 00000005
:00405101 A134544B00              mov eax, dword ptr [004B5434]
:00405106 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405107 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040510D 6A05                    push 00000005
:0040510F 8B0D38544B00            mov ecx, dword ptr [004B5438]
:00405115 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00405116 FF1500D74B00            Call dword ptr [004BD700]
:0040511C 8BE5                    mov esp, ebp
:0040511E 5D                      pop ebp
:0040511F C3                      ret



* Referenced by a CALL at Address:
|:00405016   
|
:00405120 55                      push ebp
:00405121 8BEC                    mov ebp, esp
:00405123 6AFF                    push FFFFFFFF
:00405125 68F2944700              push 004794F2
:0040512A 64A100000000            mov eax, dword ptr fs:[00000000]
:00405130 50                      push eax
:00405131 64892500000000          mov dword ptr fs:[00000000], esp
:00405138 81EC0C010000            sub esp, 0000010C
:0040513E 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx
:00405144 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040514A E8F1040000              call 00405640
:0040514F C745FC00000000          mov [ebp-04], 00000000
:00405156 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0040515C 8B4804                  mov ecx, dword ptr [eax+04]
:0040515F 6BC931                  imul ecx, 00000031
:00405162 81C1001D4B00            add ecx, 004B1D00
:00405168 E8F3050000              call 00405760
:0040516D 8885ECFEFFFF            mov byte ptr [ebp+FFFFFEEC], al
:00405173 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:00405179 81E1FF000000            and ecx, 000000FF
:0040517F 81F9FF000000            cmp ecx, 000000FF
:00405185 7507                    jne 0040518E
:00405187 C685ECFEFFFF10          mov byte ptr [ebp+FFFFFEEC], 10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405185(C)
|

* Possible StringData Ref from Data Obj ->"HITAREA.E3"
                                  |
:0040518E 68B0D44700              push 0047D4B0
:00405193 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00405199 E837C00000              call 004111D5
:0040519E 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:004051A4 83C271                  add edx, 00000071
:004051A7 52                      push edx
:004051A8 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:004051AE 25FF000000              and eax, 000000FF
:004051B3 50                      push eax
:004051B4 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004051BA E86AC10000              call 00411329
:004051BF 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004051C5 E85B8A0000              call 0040DC25
:004051CA 6A00                    push 00000000
:004051CC 8B0D34544B00            mov ecx, dword ptr [004B5434]
:004051D2 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004051D3 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004051D9 6A0A                    push 0000000A
:004051DB E82F040700              call 0047560F
:004051E0 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004051E3 6A07                    push 00000007
:004051E5 E80C0B0700              call 00475CF6
:004051EA 83C404                  add esp, 00000004
:004051ED 6A00                    push 00000000
:004051EF 6A00                    push 00000000
:004051F1 6A00                    push 00000000
:004051F3 E8250B0700              call 00475D1D
:004051F8 83C40C                  add esp, 0000000C
:004051FB 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:00405201 83C271                  add edx, 00000071
:00405204 52                      push edx
:00405205 A194B04700              mov eax, dword ptr [0047B094]
:0040520A 50                      push eax
:0040520B 8B0D90B04700            mov ecx, dword ptr [0047B090]
:00405211 51                      push ecx
:00405212 6A00                    push 00000000
:00405214 6A00                    push 00000000
:00405216 E8D9180700              call 00476AF4
:0040521B 83C414                  add esp, 00000014
:0040521E 6A00                    push 00000000
:00405220 E8EA030700              call 0047560F
:00405225 83C404                  add esp, 00000004
:00405228 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040522F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00405235 E826040000              call 00405660
:0040523A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040523D 64890D00000000          mov dword ptr fs:[00000000], ecx
:00405244 8BE5                    mov esp, ebp
:00405246 5D                      pop ebp
:00405247 C3                      ret



* Referenced by a CALL at Address:
|:0040501E   
|
:00405248 55                      push ebp
:00405249 8BEC                    mov ebp, esp
:0040524B 6AFF                    push FFFFFFFF
:0040524D 6808954700              push 00479508
:00405252 64A100000000            mov eax, dword ptr fs:[00000000]
:00405258 50                      push eax
:00405259 64892500000000          mov dword ptr fs:[00000000], esp
:00405260 81EC0C010000            sub esp, 0000010C
:00405266 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx
:0040526C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00405272 E8C9030000              call 00405640
:00405277 C745FC00000000          mov [ebp-04], 00000000
:0040527E 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00405284 8B4804                  mov ecx, dword ptr [eax+04]
:00405287 6BC931                  imul ecx, 00000031
:0040528A 81C1001D4B00            add ecx, 004B1D00
:00405290 E8EB040000              call 00405780
:00405295 8845F0                  mov byte ptr [ebp-10], al
:00405298 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040529B 81E1FF000000            and ecx, 000000FF
:004052A1 81F9FF000000            cmp ecx, 000000FF
:004052A7 7504                    jne 004052AD
:004052A9 C645F000                mov [ebp-10], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004052A7(C)
|

* Possible StringData Ref from Data Obj ->"EFFAREA.E3"
                                  |
:004052AD 68C0D44700              push 0047D4C0
:004052B2 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004052B8 E818BF0000              call 004111D5
:004052BD 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:004052C3 81C271100000            add edx, 00001071
:004052C9 52                      push edx
:004052CA 8B45F0                  mov eax, dword ptr [ebp-10]
:004052CD 25FF000000              and eax, 000000FF
:004052D2 50                      push eax
:004052D3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004052D9 E84BC00000              call 00411329
:004052DE 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004052E4 E83C890000              call 0040DC25
:004052E9 6A00                    push 00000000
:004052EB 8B0D38544B00            mov ecx, dword ptr [004B5438]
:004052F1 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004052F2 FF1500D74B00            Call dword ptr [004BD700]
:004052F8 6A0B                    push 0000000B
:004052FA E810030700              call 0047560F
:004052FF 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00405302 6A07                    push 00000007
:00405304 E8ED090700              call 00475CF6
:00405309 83C404                  add esp, 00000004
:0040530C 6A00                    push 00000000
:0040530E 6A00                    push 00000000
:00405310 6A00                    push 00000000
:00405312 E8060A0700              call 00475D1D
:00405317 83C40C                  add esp, 0000000C
:0040531A 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:00405320 81C271100000            add edx, 00001071
:00405326 52                      push edx
:00405327 A1A4B04700              mov eax, dword ptr [0047B0A4]
:0040532C 50                      push eax
:0040532D 8B0DA0B04700            mov ecx, dword ptr [0047B0A0]
:00405333 51                      push ecx
:00405334 6A00                    push 00000000
:00405336 6A00                    push 00000000
:00405338 E8B7170700              call 00476AF4
:0040533D 83C414                  add esp, 00000014
:00405340 6A00                    push 00000000
:00405342 E8C8020700              call 0047560F
:00405347 83C404                  add esp, 00000004
:0040534A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00405351 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00405357 E804030000              call 00405660
:0040535C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040535F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00405366 8BE5                    mov esp, ebp
:00405368 5D                      pop ebp
:00405369 C3                      ret



* Referenced by a CALL at Address:
|:0040500E   
|
:0040536A 55                      push ebp
:0040536B 8BEC                    mov ebp, esp
:0040536D 83EC08                  sub esp, 00000008
:00405370 894DF8                  mov dword ptr [ebp-08], ecx
:00405373 6826050000              push 00000526
:00405378 8B45F8                  mov eax, dword ptr [ebp-08]
:0040537B 8B08                    mov ecx, dword ptr [eax]
:0040537D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040537E FF1510D64B00            Call dword ptr [004BD610]
:00405384 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00405385 FF1518D64B00            Call dword ptr [004BD618]
:0040538B 8945FC                  mov dword ptr [ebp-04], eax
:0040538E 8B55FC                  mov edx, dword ptr [ebp-04]
:00405391 52                      push edx
:00405392 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00405395 E814000000              call 004053AE
:0040539A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040539D 50                      push eax
:0040539E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004053A1 8B11                    mov edx, dword ptr [ecx]
:004053A3 52                      push edx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:004053A4 FF151CD64B00            Call dword ptr [004BD61C]
:004053AA 8BE5                    mov esp, ebp
:004053AC 5D                      pop ebp
:004053AD C3                      ret



* Referenced by a CALL at Addresses:
|:00405395   , :00405578   
|
:004053AE 55                      push ebp
:004053AF 8BEC                    mov ebp, esp
:004053B1 83EC08                  sub esp, 00000008
:004053B4 894DF8                  mov dword ptr [ebp-08], ecx
:004053B7 8B45F8                  mov eax, dword ptr [ebp-08]
:004053BA 8B4804                  mov ecx, dword ptr [eax+04]
:004053BD 6BC931                  imul ecx, 00000031
:004053C0 81C1001D4B00            add ecx, 004B1D00
:004053C6 E8656D0500              call 0045C130
:004053CB 25FF000000              and eax, 000000FF
:004053D0 83C064                  add eax, 00000064
:004053D3 25FFFF0000              and eax, 0000FFFF
:004053D8 50                      push eax
:004053D9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004053DC 8B5108                  mov edx, dword ptr [ecx+08]
:004053DF 52                      push edx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:004053E0 FF15E4D64B00            Call dword ptr [004BD6E4]
:004053E6 8945FC                  mov dword ptr [ebp-04], eax
:004053E9 837DFC00                cmp dword ptr [ebp-04], 00000000
:004053ED 756A                    jne 00405459
:004053EF 8B45F8                  mov eax, dword ptr [ebp-08]
:004053F2 8B4808                  mov ecx, dword ptr [eax+08]
:004053F5 51                      push ecx

* Reference To: KERNEL32.FreeLibrary, Ord:0098h
                                  |
:004053F6 FF15E0D44B00            Call dword ptr [004BD4E0]

* Possible StringData Ref from Data Obj ->"MgcIcon.dll"
                                  |
:004053FC 68F0D44700              push 0047D4F0
:00405401 E82E840000              call 0040D834
:00405406 83C404                  add esp, 00000004
:00405409 50                      push eax

* Reference To: KERNEL32.LoadLibraryA, Ord:0190h
                                  |
:0040540A FF15ECD44B00            Call dword ptr [004BD4EC]
:00405410 8B55F8                  mov edx, dword ptr [ebp-08]
:00405413 894208                  mov dword ptr [edx+08], eax
:00405416 8B45F8                  mov eax, dword ptr [ebp-08]
:00405419 8B4808                  mov ecx, dword ptr [eax+08]
:0040541C 51                      push ecx
:0040541D B9B04B4800              mov ecx, 00484BB0
:00405422 E8698E0200              call 0042E290
:00405427 8B55F8                  mov edx, dword ptr [ebp-08]
:0040542A 8B4A04                  mov ecx, dword ptr [edx+04]
:0040542D 6BC931                  imul ecx, 00000031
:00405430 81C1001D4B00            add ecx, 004B1D00
:00405436 E8F56C0500              call 0045C130
:0040543B 25FF000000              and eax, 000000FF
:00405440 83C064                  add eax, 00000064
:00405443 25FFFF0000              and eax, 0000FFFF
:00405448 50                      push eax
:00405449 8B45F8                  mov eax, dword ptr [ebp-08]
:0040544C 8B4808                  mov ecx, dword ptr [eax+08]
:0040544F 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00405450 FF15E4D64B00            Call dword ptr [004BD6E4]
:00405456 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004053ED(C)
|
:00405459 682100F000              push 00F00021
:0040545E 6A20                    push 00000020
:00405460 6A20                    push 00000020
:00405462 6A00                    push 00000000
:00405464 6A00                    push 00000000
:00405466 8B5508                  mov edx, dword ptr [ebp+08]
:00405469 52                      push edx

* Reference To: GDI32.PatBlt, Ord:0122h
                                  |
:0040546A FF154CD44B00            Call dword ptr [004BD44C]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00405470 6A03                    push 00000003
:00405472 6A00                    push 00000000
:00405474 6A00                    push 00000000
:00405476 6A20                    push 00000020
:00405478 6A20                    push 00000020
:0040547A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040547D 50                      push eax
:0040547E 6A00                    push 00000000
:00405480 6A00                    push 00000000
:00405482 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405485 51                      push ecx

* Reference To: USER32.DrawIconEx, Ord:00A5h
                                  |
:00405486 FF15F4D54B00            Call dword ptr [004BD5F4]
:0040548C 8BE5                    mov esp, ebp
:0040548E 5D                      pop ebp
:0040548F C20400                  ret 0004


:00405492 55                      push ebp
:00405493 8BEC                    mov ebp, esp
:00405495 E807000000              call 004054A1
:0040549A E811000000              call 004054B0
:0040549F 5D                      pop ebp
:004054A0 C3                      ret



* Referenced by a CALL at Address:
|:00405495   
|
:004054A1 55                      push ebp
:004054A2 8BEC                    mov ebp, esp
:004054A4 B9B04B4800              mov ecx, 00484BB0
:004054A9 E8F2020000              call 004057A0
:004054AE 5D                      pop ebp
:004054AF C3                      ret



* Referenced by a CALL at Address:
|:0040549A   
|
:004054B0 55                      push ebp
:004054B1 8BEC                    mov ebp, esp
:004054B3 68C2544000              push 004054C2
:004054B8 E8F39F0600              call 0046F4B0
:004054BD 83C404                  add esp, 00000004
:004054C0 5D                      pop ebp
:004054C1 C3                      ret


:004054C2 55                      push ebp
:004054C3 8BEC                    mov ebp, esp
:004054C5 B9B04B4800              mov ecx, 00484BB0
:004054CA E831950200              call 0042EA00
:004054CF 5D                      pop ebp
:004054D0 C3                      ret


:004054D1 55                      push ebp
:004054D2 8BEC                    mov ebp, esp
:004054D4 83EC48                  sub esp, 00000048
:004054D7 8B450C                  mov eax, dword ptr [ebp+0C]
:004054DA 8945B8                  mov dword ptr [ebp-48], eax
:004054DD 837DB80F                cmp dword ptr [ebp-48], 0000000F
:004054E1 7711                    ja 004054F4
:004054E3 837DB80F                cmp dword ptr [ebp-48], 0000000F
:004054E7 746C                    je 00405555
:004054E9 837DB802                cmp dword ptr [ebp-48], 00000002
:004054ED 744A                    je 00405539
:004054EF E9E8000000              jmp 004055DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004054E1(C)
|
:004054F4 817DB810010000          cmp dword ptr [ebp-48], 00000110
:004054FB 7412                    je 0040550F
:004054FD 817DB811010000          cmp dword ptr [ebp-48], 00000111
:00405504 0F848F000000            je 00405599
:0040550A E9CD000000              jmp 004055DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004054FB(C)
|

* Possible StringData Ref from Data Obj ->"MgcIcon.dll"
                                  |
:0040550F 68F0D44700              push 0047D4F0
:00405514 E81B830000              call 0040D834
:00405519 83C404                  add esp, 00000004
:0040551C 50                      push eax

* Reference To: KERNEL32.LoadLibraryA, Ord:0190h
                                  |
:0040551D FF15ECD44B00            Call dword ptr [004BD4EC]
:00405523 8945FC                  mov dword ptr [ebp-04], eax
:00405526 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405529 51                      push ecx
:0040552A B9B04B4800              mov ecx, 00484BB0
:0040552F E85C8D0200              call 0042E290
:00405534 E9A3000000              jmp 004055DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004054ED(C)
|
:00405539 B9B04B4800              mov ecx, 00484BB0
:0040553E E88D560500              call 0045ABD0
:00405543 8945FC                  mov dword ptr [ebp-04], eax
:00405546 8B55FC                  mov edx, dword ptr [ebp-04]
:00405549 52                      push edx

* Reference To: KERNEL32.FreeLibrary, Ord:0098h
                                  |
:0040554A FF15E0D44B00            Call dword ptr [004BD4E0]
:00405550 E987000000              jmp 004055DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004054E7(C)
|
:00405555 8D45BC                  lea eax, dword ptr [ebp-44]
:00405558 50                      push eax
:00405559 6826050000              push 00000526
:0040555E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405561 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00405562 FF1510D64B00            Call dword ptr [004BD610]
:00405568 50                      push eax

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:00405569 FF1508D64B00            Call dword ptr [004BD608]
:0040556F 8B55BC                  mov edx, dword ptr [ebp-44]
:00405572 52                      push edx
:00405573 B9B04B4800              mov ecx, 00484BB0
:00405578 E831FEFFFF              call 004053AE
:0040557D 8D45BC                  lea eax, dword ptr [ebp-44]
:00405580 50                      push eax
:00405581 6826050000              push 00000526
:00405586 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405589 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040558A FF1510D64B00            Call dword ptr [004BD610]
:00405590 50                      push eax

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:00405591 FF150CD64B00            Call dword ptr [004BD60C]
:00405597 EB43                    jmp 004055DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405504(C)
|
:00405599 8B5510                  mov edx, dword ptr [ebp+10]
:0040559C 81E2FFFF0000            and edx, 0000FFFF
:004055A2 83FA01                  cmp edx, 00000001
:004055A5 740D                    je 004055B4
:004055A7 8B4510                  mov eax, dword ptr [ebp+10]
:004055AA 25FFFF0000              and eax, 0000FFFF
:004055AF 83F802                  cmp eax, 00000002
:004055B2 750A                    jne 004055BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004055A5(C)
|
:004055B4 B9B04B4800              mov ecx, 00484BB0
:004055B9 E8A3FAFFFF              call 00405061

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004055B2(C)
|
:004055BE 8B4D10                  mov ecx, dword ptr [ebp+10]
:004055C1 81E1FFFF0000            and ecx, 0000FFFF
:004055C7 81F9A9040000            cmp ecx, 000004A9
:004055CD 750D                    jne 004055DC
:004055CF 6847090000              push 00000947
:004055D4 E8F2440600              call 00469ACB
:004055D9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004054EF(U), :0040550A(U), :00405534(U), :00405550(U), :00405597(U)
|:004055CD(C)
|
:004055DC 33C0                    xor eax, eax
:004055DE 8BE5                    mov esp, ebp
:004055E0 5D                      pop ebp
:004055E1 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0046CBC2   
|
:004055E4 55                      push ebp
:004055E5 8BEC                    mov ebp, esp
:004055E7 51                      push ecx
:004055E8 6A00                    push 00000000
:004055EA 68D1544000              push 004054D1
:004055EF A1B0554B00              mov eax, dword ptr [004B55B0]
:004055F4 50                      push eax
:004055F5 681D010000              push 0000011D
:004055FA 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00405600 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:00405601 FF15F8D54B00            Call dword ptr [004BD5F8]
:00405607 8945FC                  mov dword ptr [ebp-04], eax
:0040560A 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040560E 7504                    jne 00405614
:00405610 33C0                    xor eax, eax
:00405612 EB1F                    jmp 00405633

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040560E(C)
|
:00405614 6A00                    push 00000000
:00405616 8B55FC                  mov edx, dword ptr [ebp-04]
:00405619 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0040561A FF1500D74B00            Call dword ptr [004BD700]
:00405620 8B45FC                  mov eax, dword ptr [ebp-04]
:00405623 50                      push eax
:00405624 B9B04B4800              mov ecx, 00484BB0
:00405629 E83FF8FFFF              call 00404E6D
:0040562E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405612(U)
|
:00405633 8BE5                    mov esp, ebp
:00405635 5D                      pop ebp
:00405636 C3                      ret


:00405637 CC                      int 03
:00405638 CC                      int 03
:00405639 CC                      int 03
:0040563A CC                      int 03
:0040563B CC                      int 03
:0040563C CC                      int 03
:0040563D CC                      int 03
:0040563E CC                      int 03
:0040563F CC                      int 03

* Referenced by a CALL at Addresses:
|:004036EE   , :0040514A   , :00405272   , :0040F358   , :0040FF84   
|:0041AA3A   , :0041CF8E   , :00421781   , :00424360   , :004264F5   
|:0042A4AD   , :0042A648   , :0042AB0D   , :0042BAF4   , :0042BE19   
|:0042C222   , :0042C5B7   , :0042C7BC   , :0042CF3E   , :0042D037   
|:0042D130   , :0042E84C   , :0042E88B   , :0042EA54   , :00432A28   
|:0043448B   , :004345A6   , :00442CC4   , :004430F9   , :004432C6   
|:00444F54   , :00445979   , :0044680A   , :00446B0E   , :00446DF9   
|:0044741E   , :00447780   , :00448403   , :00458024   , :004589F9   
|:0045A252   , :0045A4A5   , :0045BD18   , :0045C562   , :0045C6B7   
|:0045C7F0   , :0046BEC2   
|
:00405640 55                      push ebp
:00405641 8BEC                    mov ebp, esp
:00405643 51                      push ecx
:00405644 894DFC                  mov dword ptr [ebp-04], ecx
:00405647 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040564A E851010000              call 004057A0
:0040564F 8B45FC                  mov eax, dword ptr [ebp-04]
:00405652 8BE5                    mov esp, ebp
:00405654 5D                      pop ebp
:00405655 C3                      ret


:00405656 CC                      int 03
:00405657 CC                      int 03
:00405658 CC                      int 03
:00405659 CC                      int 03
:0040565A CC                      int 03
:0040565B CC                      int 03
:0040565C CC                      int 03
:0040565D CC                      int 03
:0040565E CC                      int 03
:0040565F CC                      int 03

* Referenced by a CALL at Addresses:
|:004038B6   , :00405235   , :00405357   , :0040F38E   , :0040F3D4   
|:0040F403   , :0040FFDF   , :0041005E   , :0041AB3E   , :0041D254   
|:0042187A   , :004244A8   , :004265FC   , :0042A4EB   , :0042A560   
|:0042A686   , :0042A75F   , :0042ABA4   , :0042BB32   , :0042BC3C   
|:0042BE57   , :0042BF30   , :0042C285   , :0042C2FA   , :0042C5F5   
|:0042C66A   , :0042C7FA   , :0042C86F   , :0042CFF8   , :0042D0F1   
|:0042D20A   , :0042E86D   , :0042E8AC   , :0042EB21   , :00432A54   
|:00432A7F   , :00432ABD   , :00432AE3   , :00432CA1   , :00434556   
|:0043469B   , :00442D8F   , :00443277   , :004434D1   , :00444FBF   
|:00445021   , :00445054   , :00445078   , :004459DA   , :00445A3A   
|:00445A70   , :00445B43   , :00445BA4   , :00445BDA   , :00445C0D   
|:004461B1   , :0044688F   , :004468C7   , :00446952   , :004469AB   
|:004469E1   , :00446A5D   , :00446A94   , :00446B79   , :00446BD0   
|:00446C03   , :00446C27   , :00446E4F   , :00446EB0   , :00446EE6   
|:00446F60   , :00446FC1   , :00446FF7   , :00447081   , :004470E1   
|:00447117   , :00447283   , :004474EE   , :00447552   , :00447588   
|:0044772A   , :004477C7   , :00447849   , :00447899   , :004478CF   
|:00447948   , :0044797F   , :0044847B   , :004484A9   , :004484D8   
|:0045805C   , :004580B2   , :004580E5   , :00458109   , :00458B77   
|:0045A3DF   , :0045A632   , :0045BDF5   , :0045C678   , :0045C7B1   
|:0045C8CB   , :0046BFC0   , :004794D6   , :004794EC   , :00479502   
|:00479618   , :00479636   , :00479656   , :0047966C   , :00479686   
|:0047969C   , :004796B2   , :004796C8   , :004796DE   , :004796F4   
|:0047970A   , :00479720   , :00479736   , :0047974C   , :00479762   
|:00479778   , :0047978E   , :004797A4   , :004797C6   , :00479826   
|:0047983C   , :00479852   , :00479876   , :0047988C   , :004798A2   
|:004798C6   , :004798DC   , :004798F2   , :00479908   , :0047991E   
|:00479934   , :0047994A   , :00479960   , :00479976   , :00479996   
|:004799D6   , :004799EC   , :00479A06   , :00479A26   , :00479A3C   
|:00479A52   , :00479A96   
|
:00405660 55                      push ebp
:00405661 8BEC                    mov ebp, esp
:00405663 51                      push ecx
:00405664 894DFC                  mov dword ptr [ebp-04], ecx
:00405667 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040566A E83A820000              call 0040D8A9
:0040566F 8BE5                    mov esp, ebp
:00405671 5D                      pop ebp
:00405672 C3                      ret


:00405673 CC                      int 03
:00405674 CC                      int 03
:00405675 CC                      int 03
:00405676 CC                      int 03
:00405677 CC                      int 03
:00405678 CC                      int 03
:00405679 CC                      int 03
:0040567A CC                      int 03
:0040567B CC                      int 03
:0040567C CC                      int 03
:0040567D CC                      int 03
:0040567E CC                      int 03
:0040567F CC                      int 03

* Referenced by a CALL at Addresses:
|:00404563   , :00404631   , :00413744   , :00413952   , :004169CB   
|:00416B59   , :00416CE4   , :00416D4B   , :00418ED7   , :00418F06   
|:0041951B   
|
:00405680 55                      push ebp
:00405681 8BEC                    mov ebp, esp
:00405683 51                      push ecx
:00405684 894DFC                  mov dword ptr [ebp-04], ecx
:00405687 8B4508                  mov eax, dword ptr [ebp+08]
:0040568A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040568D 668B550C                mov dx, word ptr [ebp+0C]
:00405691 6689544126              mov word ptr [ecx+2*eax+26], dx
:00405696 8BE5                    mov esp, ebp
:00405698 5D                      pop ebp
:00405699 C20800                  ret 0008


:0040569C CC                      int 03
:0040569D CC                      int 03
:0040569E CC                      int 03
:0040569F CC                      int 03

* Referenced by a CALL at Addresses:
|:004047EC   , :00404AE1   , :00428568   , :004286B6   , :004355D4   
|:004602E4   , :0046039E   , :004603BB   
|
:004056A0 55                      push ebp
:004056A1 8BEC                    mov ebp, esp
:004056A3 51                      push ecx
:004056A4 894DFC                  mov dword ptr [ebp-04], ecx
:004056A7 8B45FC                  mov eax, dword ptr [ebp-04]
:004056AA 8A4D08                  mov cl, byte ptr [ebp+08]
:004056AD 884830                  mov byte ptr [eax+30], cl
:004056B0 8BE5                    mov esp, ebp
:004056B2 5D                      pop ebp
:004056B3 C20400                  ret 0004


:004056B6 CC                      int 03
:004056B7 CC                      int 03
:004056B8 CC                      int 03
:004056B9 CC                      int 03
:004056BA CC                      int 03
:004056BB CC                      int 03
:004056BC CC                      int 03
:004056BD CC                      int 03
:004056BE CC                      int 03
:004056BF CC                      int 03

* Referenced by a CALL at Addresses:
|:00404833   , :00404872   , :0040ACF1   , :00416A83   , :00418317   
|:0041FB36   , :0041FC23   , :00428DC8   , :00428DED   , :00440BFF   
|:00440C23   , :00440E38   , :00461E08   
|
:004056C0 55                      push ebp
:004056C1 8BEC                    mov ebp, esp
:004056C3 83EC08                  sub esp, 00000008
:004056C6 894DFC                  mov dword ptr [ebp-04], ecx
:004056C9 817D0850C30000          cmp dword ptr [ebp+08], 0000C350
:004056D0 7308                    jnb 004056DA
:004056D2 8B4508                  mov eax, dword ptr [ebp+08]
:004056D5 8945F8                  mov dword ptr [ebp-08], eax
:004056D8 EB07                    jmp 004056E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004056D0(C)
|
:004056DA C745F850C30000          mov [ebp-08], 0000C350

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004056D8(U)
|
:004056E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004056E4 8B55F8                  mov edx, dword ptr [ebp-08]
:004056E7 8911                    mov dword ptr [ecx], edx
:004056E9 8BE5                    mov esp, ebp
:004056EB 5D                      pop ebp
:004056EC C20400                  ret 0004


:004056EF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040230A   , :004026EC   , :0040352F   , :00404A4F   , :00404ECC   
|:0040C6ED   , :004121CD   , :0041343C   , :004137E1   , :00416A2F   
|:004174AC   , :00417724   , :00417999   , :00417C11   , :004182C9   
|:004187BF   , :004187D2   , :004187EF   , :0041899E   , :0042331C   
|:004255A1   , :0042587A   , :00425F7A   , :0042BA13   , :0042D8D0   
|:0042DE1A   , :0042E90A   , :0042E915   , :00431FC8   , :00432A15   
|:00435150   , :004369BD   , :004369C8   , :00438B3C   , :00438BB0   
|:0043ADA4   , :0043B51B   , :0043B805   , :0043BAC9   , :0043BCE2   
|:0043BF37   , :0043C0F2   , :0043C326   , :0043C4CE   , :0043C68B   
|:0043C8FB   , :0043CB62   , :0043CDAF   , :0043CE6A   , :0043D369   
|:0043D5AC   , :0043D7D8   , :0043DAAC   , :0043DCEE   , :0043E051   
|:0043E14C   , :0043E472   , :0043E641   , :0043E73C   , :0043EA20   
|:0043EE5B   , :0043F789   , :0043F8E8   , :0043FB61   , :0043FECF   
|:0044033F   , :004404D8   , :00440769   , :004408EF   , :00440AF4   
|:00440D5B   , :00440F13   , :004410B4   , :00441255   , :00442037   
|:00442071   , :0044207B   , :004422AF   , :00442DC3   , :00442E8E   
|:00442F8D   , :004442B0   , :00448162   , :004484F9   , :00448A15   
|:00448A1D   , :00449420   , :00449716   , :0044A0B5   , :0044AB57   
|:0044AC93   , :0044AC9E   , :0044ACA9   , :0044ACB7   , :0044AF4E   
|:0044CC38   , :0044CC4D   , :0044CD52   , :0044CD79   , :0044CEC7   
|:0044CEDC   , :0044D2A2   , :0044DD27   , :0044DDC2   , :0044DDCA   
|:0044EFA0   , :0044F14A   , :0044F542   , :0044F55B   , :0044F677   
|:0044F916   , :00450D56   , :00450F8B   , :004518E8   , :004518F0   
|:00451DDD   , :00451DE5   , :00452622   , :00453AAB   , :00455B6D   
|:0045646F   , :004566C1   , :004566C9   , :00456B2F   , :0045AC3A   
|:0045ACE7   , :0045BB00   , :0045C1A1   , :0045E0A7   , :0045E954   
|:0045F76D   , :0045FBE2   , :0045FDAA   , :0045FECE   , :00460786   
|:00460AFD   , :00460C5B   , :00462ED2   , :00463358   , :00465378   
|:00465D22   , :00465EA5   , :00465EF1   , :00465F3A   , :0046B3AF   
|:0046B450   
|
:004056F0 55                      push ebp
:004056F1 8BEC                    mov ebp, esp
:004056F3 51                      push ecx
:004056F4 894DFC                  mov dword ptr [ebp-04], ecx
:004056F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004056FA 8BE5                    mov esp, ebp
:004056FC 5D                      pop ebp
:004056FD C3                      ret


:004056FE CC                      int 03
:004056FF CC                      int 03

* Referenced by a CALL at Addresses:
|:00404AF2   , :0040ECC6   , :00411A49   , :00411BBA   , :00411BE8   
|:00411D26   , :00416A00   , :00418289   , :004186A3   , :004189E0   
|:00418A8A   , :00418BE8   , :00418BF8   , :00461E48   , :00461E6F   
|:00461E96   
|
:00405700 55                      push ebp
:00405701 8BEC                    mov ebp, esp
:00405703 51                      push ecx
:00405704 894DFC                  mov dword ptr [ebp-04], ecx
:00405707 8B45FC                  mov eax, dword ptr [ebp-04]
:0040570A 8A4012                  mov al, byte ptr [eax+12]
:0040570D 8BE5                    mov esp, ebp
:0040570F 5D                      pop ebp
:00405710 C3                      ret


:00405711 CC                      int 03
:00405712 CC                      int 03
:00405713 CC                      int 03
:00405714 CC                      int 03
:00405715 CC                      int 03
:00405716 CC                      int 03
:00405717 CC                      int 03
:00405718 CC                      int 03
:00405719 CC                      int 03
:0040571A CC                      int 03
:0040571B CC                      int 03
:0040571C CC                      int 03
:0040571D CC                      int 03
:0040571E CC                      int 03
:0040571F CC                      int 03

* Referenced by a CALL at Addresses:
|:00404B94   , :00404BB9   
|
:00405720 55                      push ebp
:00405721 8BEC                    mov ebp, esp
:00405723 51                      push ecx
:00405724 894DFC                  mov dword ptr [ebp-04], ecx
:00405727 8B4508                  mov eax, dword ptr [ebp+08]
:0040572A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040572D 8D1441                  lea edx, dword ptr [ecx+2*eax]
:00405730 8B45FC                  mov eax, dword ptr [ebp-04]
:00405733 8A4D10                  mov cl, byte ptr [ebp+10]
:00405736 884C1009                mov byte ptr [eax+edx+09], cl
:0040573A 8BE5                    mov esp, ebp
:0040573C 5D                      pop ebp
:0040573D C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:00404F74   , :00407952   , :00411AF9   , :00412187   , :004121E2   
|:00417324   , :0042339C   , :0042D845   , :0042D862   , :004373F9   
|:0045BB43   , :0045BB57   , :0045BC74   , :0045BC84   , :0045BFDC   
|
:00405740 55                      push ebp
:00405741 8BEC                    mov ebp, esp
:00405743 51                      push ecx
:00405744 894DFC                  mov dword ptr [ebp-04], ecx
:00405747 8B45FC                  mov eax, dword ptr [ebp-04]
:0040574A 8A400F                  mov al, byte ptr [eax+0F]
:0040574D 8BE5                    mov esp, ebp
:0040574F 5D                      pop ebp
:00405750 C3                      ret


:00405751 CC                      int 03
:00405752 CC                      int 03
:00405753 CC                      int 03
:00405754 CC                      int 03
:00405755 CC                      int 03
:00405756 CC                      int 03
:00405757 CC                      int 03
:00405758 CC                      int 03
:00405759 CC                      int 03
:0040575A CC                      int 03
:0040575B CC                      int 03
:0040575C CC                      int 03
:0040575D CC                      int 03
:0040575E CC                      int 03
:0040575F CC                      int 03

* Referenced by a CALL at Addresses:
|:00405168   , :0043B425   , :0043B6C9   , :0043B9D3   , :0043BBF9   
|:0043BE13   , :0043C007   , :0043C221   , :0043C3D0   , :0043C58D   
|:0043C7D5   , :0043CA4B   , :0043CD43   , :0043D27E   , :0043D498   
|:0043D673   , :0043D92F   , :0043DC03   , :0043E046   , :0043E336   
|:0043E636   , :0043E947   , :0043ED8E   , :0043F2BC   , :0043F457   
|:0043F6C5   , :0043F843   , :0043FA69   , :0043FDD7   , :00440224   
|:0044041B   , :00440631   , :00440A44   , :0045375A   , :00453BCA   
|:0045C072   
|
:00405760 55                      push ebp
:00405761 8BEC                    mov ebp, esp
:00405763 51                      push ecx
:00405764 894DFC                  mov dword ptr [ebp-04], ecx
:00405767 8B45FC                  mov eax, dword ptr [ebp-04]
:0040576A 8A400C                  mov al, byte ptr [eax+0C]
:0040576D 8BE5                    mov esp, ebp
:0040576F 5D                      pop ebp
:00405770 C3                      ret


:00405771 CC                      int 03
:00405772 CC                      int 03
:00405773 CC                      int 03
:00405774 CC                      int 03
:00405775 CC                      int 03
:00405776 CC                      int 03
:00405777 CC                      int 03
:00405778 CC                      int 03
:00405779 CC                      int 03
:0040577A CC                      int 03
:0040577B CC                      int 03
:0040577C CC                      int 03
:0040577D CC                      int 03
:0040577E CC                      int 03
:0040577F CC                      int 03

* Referenced by a CALL at Addresses:
|:00405290   , :00428842   , :004288D3   , :004288E5   , :00428A82   
|:0043383D   , :00434913   , :00434933   , :00435277   , :00435288   
|:004356BF   , :004388DF   , :00439018   , :00439152   , :00439C02   
|:00439ED1   , :0043A0B3   , :0043A573   , :0043A9B7   , :0043ACE0   
|:0043B411   , :0043B439   , :0043B6B5   , :0043B6DD   , :0043B9BF   
|:0043B9E7   , :0043BBE5   , :0043BC0D   , :0043BDFF   , :0043BE27   
|:0043BFF3   , :0043C01B   , :0043C20D   , :0043C23C   , :0043C3BC   
|:0043C3E4   , :0043C579   , :0043C5A1   , :0043C7C1   , :0043C7E9   
|:0043CA37   , :0043CA5F   , :0043CD57   , :0043CD6B   , :0043D26A   
|:0043D292   , :0043D484   , :0043D4AC   , :0043D65F   , :0043D687   
|:0043D91B   , :0043D943   , :0043DBEF   , :0043DC17   , :0043E032   
|:0043E062   , :0043E322   , :0043E34A   , :0043E622   , :0043E652   
|:0043E933   , :0043E95B   , :0043ED7A   , :0043EDA2   , :0043F2D0   
|:0043F2E4   , :0043F46B   , :0043F47F   , :0043F6D9   , :0043F6ED   
|:0043F857   , :0043F86B   , :0043FA7D   , :0043FA91   , :0043FDEB   
|:0043FDFF   , :00440238   , :00440407   , :0044042F   , :00440645   
|:00440876   , :00440A58   , :00440CE2   , :00440E9A   , :00441CCA   
|:0044A24C   , :0044DDE5   , :0044F4E0   , :00450D2A   , :00450D40   
|:0045132A   , :00452488   , :00452548   , :0045287A   , :004528E1   
|:00452902   , :00452C56   , :004537B2   , :00453BE4   , :00454CAE   
|:00454CCF   , :0045577D   , :00456749   , :0045C07D   , :0045D723   
|:0045E112   , :0045E74A   , :0045E83F   , :0045FBC3   
|
:00405780 55                      push ebp
:00405781 8BEC                    mov ebp, esp
:00405783 51                      push ecx
:00405784 894DFC                  mov dword ptr [ebp-04], ecx
:00405787 8B45FC                  mov eax, dword ptr [ebp-04]
:0040578A 8A400D                  mov al, byte ptr [eax+0D]
:0040578D 8BE5                    mov esp, ebp
:0040578F 5D                      pop ebp
:00405790 C3                      ret


:00405791 CC                      int 03
:00405792 CC                      int 03
:00405793 CC                      int 03
:00405794 CC                      int 03
:00405795 CC                      int 03
:00405796 CC                      int 03
:00405797 CC                      int 03
:00405798 CC                      int 03
:00405799 CC                      int 03
:0040579A CC                      int 03
:0040579B CC                      int 03
:0040579C CC                      int 03
:0040579D CC                      int 03
:0040579E CC                      int 03
:0040579F CC                      int 03

* Referenced by a CALL at Addresses:
|:004054A9   , :0040564A   , :0040BBB3   , :0040BDE3   , :0040C025   
|:0040E03B   , :0040E40C   , :0040EC35   , :0040F0B6   , :0042E8CA   
|:0042EA63   , :0042EDEF   , :00444997   , :0046EF0F   
|
:004057A0 55                      push ebp
:004057A1 8BEC                    mov ebp, esp
:004057A3 51                      push ecx
:004057A4 894DFC                  mov dword ptr [ebp-04], ecx
:004057A7 8B45FC                  mov eax, dword ptr [ebp-04]
:004057AA C70000000000            mov dword ptr [eax], 00000000
:004057B0 8B45FC                  mov eax, dword ptr [ebp-04]
:004057B3 8BE5                    mov esp, ebp
:004057B5 5D                      pop ebp
:004057B6 C3                      ret


:004057B7 CC                      int 03
:004057B8 CC                      int 03
:004057B9 CC                      int 03
:004057BA CC                      int 03
:004057BB CC                      int 03
:004057BC CC                      int 03
:004057BD CC                      int 03
:004057BE CC                      int 03
:004057BF CC                      int 03
:004057C0 55                      push ebp
:004057C1 8BEC                    mov ebp, esp
:004057C3 E802000000              call 004057CA
:004057C8 5D                      pop ebp
:004057C9 C3                      ret



* Referenced by a CALL at Address:
|:004057C3   
|
:004057CA 55                      push ebp
:004057CB 8BEC                    mov ebp, esp
:004057CD B9306D4800              mov ecx, 00486D30
:004057D2 E81E060000              call 00405DF5
:004057D7 5D                      pop ebp
:004057D8 C3                      ret



* Referenced by a CALL at Addresses:
|:00405814   , :0040582F   , :00405AD2   
|
:004057D9 55                      push ebp
:004057DA 8BEC                    mov ebp, esp
:004057DC 51                      push ecx
:004057DD 837D0C0A                cmp dword ptr [ebp+0C], 0000000A
:004057E1 7D21                    jge 00405804
:004057E3 8B450C                  mov eax, dword ptr [ebp+0C]
:004057E6 83C030                  add eax, 00000030
:004057E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004057EC 8B11                    mov edx, dword ptr [ecx]
:004057EE 8802                    mov byte ptr [edx], al
:004057F0 8B4508                  mov eax, dword ptr [ebp+08]
:004057F3 8B08                    mov ecx, dword ptr [eax]
:004057F5 83C101                  add ecx, 00000001
:004057F8 8B5508                  mov edx, dword ptr [ebp+08]
:004057FB 890A                    mov dword ptr [edx], ecx
:004057FD B801000000              mov eax, 00000001
:00405802 EB39                    jmp 0040583D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004057E1(C)
|
:00405804 8B450C                  mov eax, dword ptr [ebp+0C]
:00405807 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00405808 B90A000000              mov ecx, 0000000A
:0040580D F7F9                    idiv ecx
:0040580F 50                      push eax
:00405810 8B5508                  mov edx, dword ptr [ebp+08]
:00405813 52                      push edx
:00405814 E8C0FFFFFF              call 004057D9
:00405819 83C408                  add esp, 00000008
:0040581C 8945FC                  mov dword ptr [ebp-04], eax
:0040581F 8B450C                  mov eax, dword ptr [ebp+0C]
:00405822 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00405823 B90A000000              mov ecx, 0000000A
:00405828 F7F9                    idiv ecx
:0040582A 52                      push edx
:0040582B 8B5508                  mov edx, dword ptr [ebp+08]
:0040582E 52                      push edx
:0040582F E8A5FFFFFF              call 004057D9
:00405834 83C408                  add esp, 00000008
:00405837 8B45FC                  mov eax, dword ptr [ebp-04]
:0040583A 83C001                  add eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405802(U)
|
:0040583D 8BE5                    mov esp, ebp
:0040583F 5D                      pop ebp
:00405840 C3                      ret



* Referenced by a CALL at Addresses:
|:0040587D   , :00405899   , :00405AF8   
|
:00405841 55                      push ebp
:00405842 8BEC                    mov ebp, esp
:00405844 51                      push ecx
:00405845 837D0C0A                cmp dword ptr [ebp+0C], 0000000A
:00405849 7321                    jnb 0040586C
:0040584B 8B450C                  mov eax, dword ptr [ebp+0C]
:0040584E 83C030                  add eax, 00000030
:00405851 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405854 8B11                    mov edx, dword ptr [ecx]
:00405856 8802                    mov byte ptr [edx], al
:00405858 8B4508                  mov eax, dword ptr [ebp+08]
:0040585B 8B08                    mov ecx, dword ptr [eax]
:0040585D 83C101                  add ecx, 00000001
:00405860 8B5508                  mov edx, dword ptr [ebp+08]
:00405863 890A                    mov dword ptr [edx], ecx
:00405865 B801000000              mov eax, 00000001
:0040586A EB3B                    jmp 004058A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405849(C)
|
:0040586C 8B450C                  mov eax, dword ptr [ebp+0C]
:0040586F 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00405871 B90A000000              mov ecx, 0000000A
:00405876 F7F1                    div ecx
:00405878 50                      push eax
:00405879 8B5508                  mov edx, dword ptr [ebp+08]
:0040587C 52                      push edx
:0040587D E8BFFFFFFF              call 00405841
:00405882 83C408                  add esp, 00000008
:00405885 8945FC                  mov dword ptr [ebp-04], eax
:00405888 8B450C                  mov eax, dword ptr [ebp+0C]
:0040588B 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0040588D B90A000000              mov ecx, 0000000A
:00405892 F7F1                    div ecx
:00405894 52                      push edx
:00405895 8B5508                  mov edx, dword ptr [ebp+08]
:00405898 52                      push edx
:00405899 E8A3FFFFFF              call 00405841
:0040589E 83C408                  add esp, 00000008
:004058A1 8B45FC                  mov eax, dword ptr [ebp-04]
:004058A4 83C001                  add eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040586A(U)
|
:004058A7 8BE5                    mov esp, ebp
:004058A9 5D                      pop ebp
:004058AA C3                      ret



* Referenced by a CALL at Address:
|:00406BE4   
|
:004058AB 55                      push ebp
:004058AC 8BEC                    mov ebp, esp
:004058AE 83EC64                  sub esp, 00000064
:004058B1 C745FC286C4800          mov [ebp-04], 00486C28
:004058B8 8B4508                  mov eax, dword ptr [ebp+08]
:004058BB 8B08                    mov ecx, dword ptr [eax]
:004058BD 894DBC                  mov dword ptr [ebp-44], ecx
:004058C0 8B5508                  mov edx, dword ptr [ebp+08]
:004058C3 83C204                  add edx, 00000004
:004058C6 895508                  mov dword ptr [ebp+08], edx
:004058C9 8B4508                  mov eax, dword ptr [ebp+08]
:004058CC 8945B8                  mov dword ptr [ebp-48], eax
:004058CF C745B400000000          mov [ebp-4C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405D23(U)
|
:004058D6 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004058D9 8A11                    mov dl, byte ptr [ecx]
:004058DB 8855D8                  mov byte ptr [ebp-28], dl
:004058DE 8B45D8                  mov eax, dword ptr [ebp-28]
:004058E1 25FF000000              and eax, 000000FF
:004058E6 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004058E9 83C101                  add ecx, 00000001
:004058EC 894DBC                  mov dword ptr [ebp-44], ecx
:004058EF 85C0                    test eax, eax
:004058F1 0F8431040000            je 00405D28
:004058F7 837DB400                cmp dword ptr [ebp-4C], 00000000
:004058FB 0F8527040000            jne 00405D28
:00405901 8B55D8                  mov edx, dword ptr [ebp-28]
:00405904 81E2FF000000            and edx, 000000FF
:0040590A 83FA25                  cmp edx, 00000025
:0040590D 0F85E1030000            jne 00405CF4
:00405913 8D45E0                  lea eax, dword ptr [ebp-20]
:00405916 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00405919 C745C406000000          mov [ebp-3C], 00000006
:00405920 C745B000000000          mov [ebp-50], 00000000
:00405927 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0040592A 894DF8                  mov dword ptr [ebp-08], ecx
:0040592D 8B55F8                  mov edx, dword ptr [ebp-08]
:00405930 8955C0                  mov dword ptr [ebp-40], edx
:00405933 8B45C0                  mov eax, dword ptr [ebp-40]
:00405936 8945CC                  mov dword ptr [ebp-34], eax
:00405939 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0040593C 894DD0                  mov dword ptr [ebp-30], ecx
:0040593F C745D400000000          mov [ebp-2C], 00000000
:00405946 8B55BC                  mov edx, dword ptr [ebp-44]
:00405949 33C0                    xor eax, eax
:0040594B 8A02                    mov al, byte ptr [edx]
:0040594D 83F82D                  cmp eax, 0000002D
:00405950 7510                    jne 00405962
:00405952 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00405955 83C101                  add ecx, 00000001
:00405958 894DBC                  mov dword ptr [ebp-44], ecx
:0040595B C745D001000000          mov [ebp-30], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405950(C)
|
:00405962 8B55BC                  mov edx, dword ptr [ebp-44]
:00405965 8A02                    mov al, byte ptr [edx]
:00405967 8845D8                  mov byte ptr [ebp-28], al
:0040596A 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0040596D 81E1FF000000            and ecx, 000000FF
:00405973 83E930                  sub ecx, 00000030
:00405976 F7D9                    neg ecx
:00405978 1AC9                    sbb cl, cl
:0040597A 80E1F0                  and cl, F0
:0040597D 80C130                  add cl, 30
:00405980 884DC8                  mov byte ptr [ebp-38], cl
:00405983 8A55D8                  mov dl, byte ptr [ebp-28]
:00405986 52                      push edx
:00405987 E874120000              call 00406C00
:0040598C 83C404                  add esp, 00000004
:0040598F 85C0                    test eax, eax
:00405991 7411                    je 004059A4
:00405993 8D45BC                  lea eax, dword ptr [ebp-44]
:00405996 50                      push eax
:00405997 E813040000              call 00405DAF
:0040599C 83C404                  add esp, 00000004
:0040599F 8945AC                  mov dword ptr [ebp-54], eax
:004059A2 EB07                    jmp 004059AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405991(C)
|
:004059A4 C745AC00000000          mov [ebp-54], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004059A2(U)
|
:004059AB 8B4DAC                  mov ecx, dword ptr [ebp-54]
:004059AE 894DDC                  mov dword ptr [ebp-24], ecx
:004059B1 8B55BC                  mov edx, dword ptr [ebp-44]
:004059B4 8A02                    mov al, byte ptr [edx]
:004059B6 8845D8                  mov byte ptr [ebp-28], al
:004059B9 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004059BC 81E1FF000000            and ecx, 000000FF
:004059C2 8B55BC                  mov edx, dword ptr [ebp-44]
:004059C5 83C201                  add edx, 00000001
:004059C8 8955BC                  mov dword ptr [ebp-44], edx
:004059CB 83F92E                  cmp ecx, 0000002E
:004059CE 7527                    jne 004059F7
:004059D0 8D45BC                  lea eax, dword ptr [ebp-44]
:004059D3 50                      push eax
:004059D4 E8D6030000              call 00405DAF
:004059D9 83C404                  add esp, 00000004
:004059DC 8945C4                  mov dword ptr [ebp-3C], eax
:004059DF C745CC01000000          mov [ebp-34], 00000001
:004059E6 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004059E9 8A11                    mov dl, byte ptr [ecx]
:004059EB 8855D8                  mov byte ptr [ebp-28], dl
:004059EE 8B45BC                  mov eax, dword ptr [ebp-44]
:004059F1 83C001                  add eax, 00000001
:004059F4 8945BC                  mov dword ptr [ebp-44], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004059CE(C)
|
:004059F7 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004059FA 81E1FF000000            and ecx, 000000FF
:00405A00 83F96C                  cmp ecx, 0000006C
:00405A03 7518                    jne 00405A1D
:00405A05 C745C001000000          mov [ebp-40], 00000001
:00405A0C 8B55BC                  mov edx, dword ptr [ebp-44]
:00405A0F 8A02                    mov al, byte ptr [edx]
:00405A11 8845D8                  mov byte ptr [ebp-28], al
:00405A14 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00405A17 83C101                  add ecx, 00000001
:00405A1A 894DBC                  mov dword ptr [ebp-44], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405A03(C)
|
:00405A1D 8A55D8                  mov dl, byte ptr [ebp-28]
:00405A20 52                      push edx
:00405A21 E81A120000              call 00406C40
:00405A26 83C404                  add esp, 00000004
:00405A29 25FF000000              and eax, 000000FF
:00405A2E 8945A8                  mov dword ptr [ebp-58], eax
:00405A31 837DA855                cmp dword ptr [ebp-58], 00000055
:00405A35 0F8788020000            ja 00405CC3
:00405A3B 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00405A3E 33C0                    xor eax, eax
:00405A40 8A81595D4000            mov al, byte ptr [ecx+00405D59]
:00405A46 FF2485415D4000          jmp dword ptr [4*eax+00405D41]
:00405A4D 837DC000                cmp dword ptr [ebp-40], 00000000
:00405A51 742E                    je 00405A81
:00405A53 8B55B8                  mov edx, dword ptr [ebp-48]
:00405A56 833A00                  cmp dword ptr [edx], 00000000
:00405A59 7D26                    jge 00405A81
:00405A5B 8B45B8                  mov eax, dword ptr [ebp-48]
:00405A5E 8B08                    mov ecx, dword ptr [eax]
:00405A60 F7D9                    neg ecx
:00405A62 8B55B8                  mov edx, dword ptr [ebp-48]
:00405A65 890A                    mov dword ptr [edx], ecx
:00405A67 8B45F4                  mov eax, dword ptr [ebp-0C]
:00405A6A C6002D                  mov byte ptr [eax], 2D
:00405A6D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405A70 83C101                  add ecx, 00000001
:00405A73 894DF4                  mov dword ptr [ebp-0C], ecx
:00405A76 8B55DC                  mov edx, dword ptr [ebp-24]
:00405A79 83EA01                  sub edx, 00000001
:00405A7C 8955DC                  mov dword ptr [ebp-24], edx
:00405A7F EB32                    jmp 00405AB3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405A51(C), :00405A59(C)
|
:00405A81 837DC000                cmp dword ptr [ebp-40], 00000000
:00405A85 752C                    jne 00405AB3
:00405A87 8B45B8                  mov eax, dword ptr [ebp-48]
:00405A8A 833800                  cmp dword ptr [eax], 00000000
:00405A8D 7D24                    jge 00405AB3
:00405A8F 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00405A92 8B11                    mov edx, dword ptr [ecx]
:00405A94 F7DA                    neg edx
:00405A96 8B45B8                  mov eax, dword ptr [ebp-48]
:00405A99 8910                    mov dword ptr [eax], edx
:00405A9B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405A9E C6012D                  mov byte ptr [ecx], 2D
:00405AA1 8B55F4                  mov edx, dword ptr [ebp-0C]
:00405AA4 83C201                  add edx, 00000001
:00405AA7 8955F4                  mov dword ptr [ebp-0C], edx
:00405AAA 8B45DC                  mov eax, dword ptr [ebp-24]
:00405AAD 83E801                  sub eax, 00000001
:00405AB0 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405A7F(U), :00405A85(C), :00405A8D(C)
|
:00405AB3 837DC000                cmp dword ptr [ebp-40], 00000000
:00405AB7 7426                    je 00405ADF
:00405AB9 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00405ABC 8B11                    mov edx, dword ptr [ecx]
:00405ABE 8955A4                  mov dword ptr [ebp-5C], edx
:00405AC1 8B45A4                  mov eax, dword ptr [ebp-5C]
:00405AC4 50                      push eax
:00405AC5 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00405AC8 51                      push ecx
:00405AC9 8B55B8                  mov edx, dword ptr [ebp-48]
:00405ACC 83C204                  add edx, 00000004
:00405ACF 8955B8                  mov dword ptr [ebp-48], edx
:00405AD2 E802FDFFFF              call 004057D9
:00405AD7 83C408                  add esp, 00000008
:00405ADA 8945A0                  mov dword ptr [ebp-60], eax
:00405ADD EB24                    jmp 00405B03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405AB7(C)
|
:00405ADF 8B45B8                  mov eax, dword ptr [ebp-48]
:00405AE2 8B08                    mov ecx, dword ptr [eax]
:00405AE4 894D9C                  mov dword ptr [ebp-64], ecx
:00405AE7 8B559C                  mov edx, dword ptr [ebp-64]
:00405AEA 52                      push edx
:00405AEB 8D45F4                  lea eax, dword ptr [ebp-0C]
:00405AEE 50                      push eax
:00405AEF 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00405AF2 83C104                  add ecx, 00000004
:00405AF5 894DB8                  mov dword ptr [ebp-48], ecx
:00405AF8 E844FDFFFF              call 00405841
:00405AFD 83C408                  add esp, 00000008
:00405B00 8945A0                  mov dword ptr [ebp-60], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405ADD(U)
|
:00405B03 8B55DC                  mov edx, dword ptr [ebp-24]
:00405B06 2B55A0                  sub edx, dword ptr [ebp-60]
:00405B09 8955DC                  mov dword ptr [ebp-24], edx
:00405B0C E927020000              jmp 00405D38
:00405B11 8B45B8                  mov eax, dword ptr [ebp-48]
:00405B14 8B08                    mov ecx, dword ptr [eax]
:00405B16 894DF4                  mov dword ptr [ebp-0C], ecx
:00405B19 8B55B8                  mov edx, dword ptr [ebp-48]
:00405B1C 83C204                  add edx, 00000004
:00405B1F 8955B8                  mov dword ptr [ebp-48], edx
:00405B22 837DF400                cmp dword ptr [ebp-0C], 00000000
:00405B26 7507                    jne 00405B2F
:00405B28 C745F4786D4800          mov [ebp-0C], 00486D78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405B26(C)
|
:00405B2F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00405B32 50                      push eax
:00405B33 E8D8290700              call 00478510
:00405B38 83C404                  add esp, 00000004
:00405B3B 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00405B3E 2BC8                    sub ecx, eax
:00405B40 894DDC                  mov dword ptr [ebp-24], ecx
:00405B43 E9EB010000              jmp 00405D33
:00405B48 8B55F4                  mov edx, dword ptr [ebp-0C]
:00405B4B 8B45B8                  mov eax, dword ptr [ebp-48]
:00405B4E 8A08                    mov cl, byte ptr [eax]
:00405B50 880A                    mov byte ptr [edx], cl
:00405B52 8B55F4                  mov edx, dword ptr [ebp-0C]
:00405B55 83C201                  add edx, 00000001
:00405B58 8955F4                  mov dword ptr [ebp-0C], edx
:00405B5B 8B45B8                  mov eax, dword ptr [ebp-48]
:00405B5E 83C004                  add eax, 00000004
:00405B61 8945B8                  mov dword ptr [ebp-48], eax
:00405B64 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00405B67 83E901                  sub ecx, 00000001
:00405B6A 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405D38(U)
|
:00405B6D C745CC00000000          mov [ebp-34], 00000000
:00405B74 8B55F4                  mov edx, dword ptr [ebp-0C]
:00405B77 C60200                  mov byte ptr [edx], 00
:00405B7A 8D45E0                  lea eax, dword ptr [ebp-20]
:00405B7D 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405D33(U)
|
:00405B80 837DD000                cmp dword ptr [ebp-30], 00000000
:00405B84 754D                    jne 00405BD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405BD1(U)
|
:00405B86 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00405B89 8B55DC                  mov edx, dword ptr [ebp-24]
:00405B8C 83EA01                  sub edx, 00000001
:00405B8F 8955DC                  mov dword ptr [ebp-24], edx
:00405B92 85C9                    test ecx, ecx
:00405B94 7E3D                    jle 00405BD3
:00405B96 837DB001                cmp dword ptr [ebp-50], 00000001
:00405B9A 7504                    jne 00405BA0
:00405B9C C645C830                mov [ebp-38], 30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405B9A(C)
|
:00405BA0 833D286D480001          cmp dword ptr [00486D28], 00000001
:00405BA7 7513                    jne 00405BBC
:00405BA9 8B45FC                  mov eax, dword ptr [ebp-04]
:00405BAC 8A4DC8                  mov cl, byte ptr [ebp-38]
:00405BAF 8808                    mov byte ptr [eax], cl
:00405BB1 8B55FC                  mov edx, dword ptr [ebp-04]
:00405BB4 83C201                  add edx, 00000001
:00405BB7 8955FC                  mov dword ptr [ebp-04], edx
:00405BBA EB15                    jmp 00405BD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405BA7(C)
|
:00405BBC 8B45D4                  mov eax, dword ptr [ebp-2C]
:00405BBF 50                      push eax
:00405BC0 8A4DC8                  mov cl, byte ptr [ebp-38]
:00405BC3 51                      push ecx
:00405BC4 B9306D4800              mov ecx, 00486D30
:00405BC9 E810050000              call 004060DE
:00405BCE 8945B4                  mov dword ptr [ebp-4C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405BBA(U)
|
:00405BD1 EBB3                    jmp 00405B86

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405B84(C), :00405B94(C), :00405C74(U)
|
:00405BD3 8B55F4                  mov edx, dword ptr [ebp-0C]
:00405BD6 33C0                    xor eax, eax
:00405BD8 8A02                    mov al, byte ptr [edx]
:00405BDA 85C0                    test eax, eax
:00405BDC 0F8497000000            je 00405C79
:00405BE2 837DCC00                cmp dword ptr [ebp-34], 00000000
:00405BE6 7406                    je 00405BEE
:00405BE8 837DC400                cmp dword ptr [ebp-3C], 00000000
:00405BEC 7E7D                    jle 00405C6B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405BE6(C)
|
:00405BEE 837DF800                cmp dword ptr [ebp-08], 00000000
:00405BF2 740C                    je 00405C00
:00405BF4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405BF7 33D2                    xor edx, edx
:00405BF9 8A11                    mov dl, byte ptr [ecx]
:00405BFB 83FA20                  cmp edx, 00000020
:00405BFE 746B                    je 00405C6B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405BF2(C)
|
:00405C00 837DF800                cmp dword ptr [ebp-08], 00000000
:00405C04 7427                    je 00405C2D
:00405C06 8B45F4                  mov eax, dword ptr [ebp-0C]
:00405C09 33C9                    xor ecx, ecx
:00405C0B 8A08                    mov cl, byte ptr [eax]
:00405C0D 81F981000000            cmp ecx, 00000081
:00405C13 7518                    jne 00405C2D
:00405C15 8B55F4                  mov edx, dword ptr [ebp-0C]
:00405C18 33C0                    xor eax, eax
:00405C1A 8A4201                  mov al, byte ptr [edx+01]
:00405C1D 83F840                  cmp eax, 00000040
:00405C20 750B                    jne 00405C2D
:00405C22 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405C25 83C101                  add ecx, 00000001
:00405C28 894DF4                  mov dword ptr [ebp-0C], ecx
:00405C2B EB3E                    jmp 00405C6B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405C04(C), :00405C13(C), :00405C20(C)
|
:00405C2D 833D286D480001          cmp dword ptr [00486D28], 00000001
:00405C34 7515                    jne 00405C4B
:00405C36 8B55FC                  mov edx, dword ptr [ebp-04]
:00405C39 8B45F4                  mov eax, dword ptr [ebp-0C]
:00405C3C 8A08                    mov cl, byte ptr [eax]
:00405C3E 880A                    mov byte ptr [edx], cl
:00405C40 8B55FC                  mov edx, dword ptr [ebp-04]
:00405C43 83C201                  add edx, 00000001
:00405C46 8955FC                  mov dword ptr [ebp-04], edx
:00405C49 EB17                    jmp 00405C62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405C34(C)
|
:00405C4B 8B45D4                  mov eax, dword ptr [ebp-2C]
:00405C4E 50                      push eax
:00405C4F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405C52 8A11                    mov dl, byte ptr [ecx]
:00405C54 52                      push edx
:00405C55 B9306D4800              mov ecx, 00486D30
:00405C5A E87F040000              call 004060DE
:00405C5F 8945B4                  mov dword ptr [ebp-4C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405C49(U)
|
:00405C62 8B45C4                  mov eax, dword ptr [ebp-3C]
:00405C65 83E801                  sub eax, 00000001
:00405C68 8945C4                  mov dword ptr [ebp-3C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405BEC(C), :00405BFE(C), :00405C2B(U)
|
:00405C6B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00405C6E 83C101                  add ecx, 00000001
:00405C71 894DF4                  mov dword ptr [ebp-0C], ecx
:00405C74 E95AFFFFFF              jmp 00405BD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405BDC(C)
|
:00405C79 837DD000                cmp dword ptr [ebp-30], 00000000
:00405C7D 743D                    je 00405CBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405CBA(U)
|
:00405C7F 8B55DC                  mov edx, dword ptr [ebp-24]
:00405C82 8B45DC                  mov eax, dword ptr [ebp-24]
:00405C85 83E801                  sub eax, 00000001
:00405C88 8945DC                  mov dword ptr [ebp-24], eax
:00405C8B 85D2                    test edx, edx
:00405C8D 7E2D                    jle 00405CBC
:00405C8F 833D286D480001          cmp dword ptr [00486D28], 00000001
:00405C96 7511                    jne 00405CA9
:00405C98 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405C9B C60120                  mov byte ptr [ecx], 20
:00405C9E 8B55FC                  mov edx, dword ptr [ebp-04]
:00405CA1 83C201                  add edx, 00000001
:00405CA4 8955FC                  mov dword ptr [ebp-04], edx
:00405CA7 EB11                    jmp 00405CBA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405C96(C)
|
:00405CA9 6A00                    push 00000000
:00405CAB 6A20                    push 00000020
:00405CAD B9306D4800              mov ecx, 00486D30
:00405CB2 E827040000              call 004060DE
:00405CB7 8945B4                  mov dword ptr [ebp-4C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405CA7(U)
|
:00405CBA EBC3                    jmp 00405C7F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405C7D(C), :00405C8D(C)
|
:00405CBC EB34                    jmp 00405CF2
:00405CBE 8B45B4                  mov eax, dword ptr [ebp-4C]
:00405CC1 EB7A                    jmp 00405D3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405A35(C)
|
:00405CC3 833D286D480001          cmp dword ptr [00486D28], 00000001
:00405CCA 7513                    jne 00405CDF
:00405CCC 8B45FC                  mov eax, dword ptr [ebp-04]
:00405CCF 8A4DD8                  mov cl, byte ptr [ebp-28]
:00405CD2 8808                    mov byte ptr [eax], cl
:00405CD4 8B55FC                  mov edx, dword ptr [ebp-04]
:00405CD7 83C201                  add edx, 00000001
:00405CDA 8955FC                  mov dword ptr [ebp-04], edx
:00405CDD EB13                    jmp 00405CF2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405CCA(C)
|
:00405CDF 6A00                    push 00000000
:00405CE1 8A45D8                  mov al, byte ptr [ebp-28]
:00405CE4 50                      push eax
:00405CE5 B9306D4800              mov ecx, 00486D30
:00405CEA E8EF030000              call 004060DE
:00405CEF 8945B4                  mov dword ptr [ebp-4C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405CBC(U), :00405CDD(U)
|
:00405CF2 EB2F                    jmp 00405D23

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040590D(C)
|
:00405CF4 833D286D480001          cmp dword ptr [00486D28], 00000001
:00405CFB 7513                    jne 00405D10
:00405CFD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405D00 8A55D8                  mov dl, byte ptr [ebp-28]
:00405D03 8811                    mov byte ptr [ecx], dl
:00405D05 8B45FC                  mov eax, dword ptr [ebp-04]
:00405D08 83C001                  add eax, 00000001
:00405D0B 8945FC                  mov dword ptr [ebp-04], eax
:00405D0E EB13                    jmp 00405D23

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405CFB(C)
|
:00405D10 6A00                    push 00000000
:00405D12 8A4DD8                  mov cl, byte ptr [ebp-28]
:00405D15 51                      push ecx
:00405D16 B9306D4800              mov ecx, 00486D30
:00405D1B E8BE030000              call 004060DE
:00405D20 8945B4                  mov dword ptr [ebp-4C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405CF2(U), :00405D0E(U)
|
:00405D23 E9AEFBFFFF              jmp 004058D6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004058F1(C), :004058FB(C)
|
:00405D28 8B55FC                  mov edx, dword ptr [ebp-04]
:00405D2B C60200                  mov byte ptr [edx], 00
:00405D2E 8B45B4                  mov eax, dword ptr [ebp-4C]
:00405D31 EB0A                    jmp 00405D3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405B43(U)
|
:00405D33 E948FEFFFF              jmp 00405B80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405B0C(U)
|
:00405D38 E930FEFFFF              jmp 00405B6D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00405CC1(U), :00405D31(U)
|
:00405D3D 8BE5                    mov esp, ebp
:00405D3F 5D                      pop ebp
:00405D40 C3                      ret



:00405D41 BE5C4000                DWORD 00405CBE
:00405D45 485B4000                DWORD 00405B48
:00405D49 4D5A4000                DWORD 00405A4D
:00405D4D 115B4000                DWORD 00405B11
:00405D51 B35A4000                DWORD 00405AB3
:00405D55 C35C4000                DWORD 00405CC3


:00405D59 000505050505            add byte ptr [05050505], al
:00405D5F 0505050505              add eax, 05050505
:00405D64 0505050505              add eax, 05050505
:00405D69 0505050505              add eax, 05050505
:00405D6E 0505050505              add eax, 05050505
:00405D73 0505050505              add eax, 05050505
:00405D78 0505050505              add eax, 05050505
:00405D7D 0505050505              add eax, 05050505
:00405D82 0505050505              add eax, 05050505
:00405D87 0505050505              add eax, 05050505
:00405D8C 0505050505              add eax, 05050505
:00405D91 0505050505              add eax, 05050505
:00405D96 0505050505              add eax, 05050505
:00405D9B 0501020505              add eax, 05050201
:00405DA0 0505050505              add eax, 05050505
:00405DA5 0505050505              add eax, 05050505
:00405DAA 0505030504              add eax, 04050305

* Referenced by a CALL at Addresses:
|:00405997   , :004059D4   
|
:00405DAF 55                      push ebp
:00405DB0 8BEC                    mov ebp, esp
:00405DB2 83EC08                  sub esp, 00000008
:00405DB5 C745F800000000          mov [ebp-08], 00000000
:00405DBC EB0D                    jmp 00405DCB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405DEC(U)
|
:00405DBE 8B4508                  mov eax, dword ptr [ebp+08]
:00405DC1 8B08                    mov ecx, dword ptr [eax]
:00405DC3 83C101                  add ecx, 00000001
:00405DC6 8B5508                  mov edx, dword ptr [ebp+08]
:00405DC9 890A                    mov dword ptr [edx], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405DBC(U)
|
:00405DCB 8B4508                  mov eax, dword ptr [ebp+08]
:00405DCE 8B08                    mov ecx, dword ptr [eax]
:00405DD0 33D2                    xor edx, edx
:00405DD2 8A11                    mov dl, byte ptr [ecx]
:00405DD4 83EA30                  sub edx, 00000030
:00405DD7 8955FC                  mov dword ptr [ebp-04], edx
:00405DDA 837DFC0A                cmp dword ptr [ebp-04], 0000000A
:00405DDE 730E                    jnb 00405DEE
:00405DE0 8B45F8                  mov eax, dword ptr [ebp-08]
:00405DE3 6BC00A                  imul eax, 0000000A
:00405DE6 0345FC                  add eax, dword ptr [ebp-04]
:00405DE9 8945F8                  mov dword ptr [ebp-08], eax
:00405DEC EBD0                    jmp 00405DBE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405DDE(C)
|
:00405DEE 8B45F8                  mov eax, dword ptr [ebp-08]
:00405DF1 8BE5                    mov esp, ebp
:00405DF3 5D                      pop ebp
:00405DF4 C3                      ret



* Referenced by a CALL at Address:
|:004057D2   
|
:00405DF5 55                      push ebp
:00405DF6 8BEC                    mov ebp, esp
:00405DF8 51                      push ecx
:00405DF9 894DFC                  mov dword ptr [ebp-04], ecx
:00405DFC 8B45FC                  mov eax, dword ptr [ebp-04]
:00405DFF C7401400000000          mov [eax+14], 00000000
:00405E06 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405E09 C7410C00000000          mov [ecx+0C], 00000000
:00405E10 8B55FC                  mov edx, dword ptr [ebp-04]
:00405E13 C7420800000000          mov [edx+08], 00000000
:00405E1A 8B45FC                  mov eax, dword ptr [ebp-04]
:00405E1D C7400400000000          mov [eax+04], 00000000
:00405E24 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00405E27 C7411C08000000          mov [ecx+1C], 00000008
:00405E2E 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible Ref to Menu: DBGMENU, Item: ""
                                  |
:00405E31 C742109F000000          mov [edx+10], 0000009F
:00405E38 8B45FC                  mov eax, dword ptr [ebp-04]
:00405E3B C74018D8030000          mov [eax+18], 000003D8
:00405E42 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405E45 C6412500                mov [ecx+25], 00
:00405E49 8B55FC                  mov edx, dword ptr [ebp-04]
:00405E4C C6422412                mov [edx+24], 12
:00405E50 8B45FC                  mov eax, dword ptr [ebp-04]
:00405E53 C7403800000000          mov [eax+38], 00000000
:00405E5A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405E5D C7412000000000          mov [ecx+20], 00000000
:00405E64 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00405E66 6A0A                    push 0000000A
:00405E68 8B55FC                  mov edx, dword ptr [ebp-04]
:00405E6B 83C23C                  add edx, 0000003C
:00405E6E 52                      push edx
:00405E6F E86C270700              call 004785E0
:00405E74 83C40C                  add esp, 0000000C
:00405E77 8B45FC                  mov eax, dword ptr [ebp-04]
:00405E7A C7403400000000          mov [eax+34], 00000000
:00405E81 8B45FC                  mov eax, dword ptr [ebp-04]
:00405E84 8BE5                    mov esp, ebp
:00405E86 5D                      pop ebp
:00405E87 C3                      ret



* Referenced by a CALL at Addresses:
|:00405F19   , :004061DD   , :00406BB5   
|
:00405E88 55                      push ebp
:00405E89 8BEC                    mov ebp, esp
:00405E8B 83EC08                  sub esp, 00000008
:00405E8E 894DF8                  mov dword ptr [ebp-08], ecx
:00405E91 8B45F8                  mov eax, dword ptr [ebp-08]
:00405E94 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00405E97 8B5010                  mov edx, dword ptr [eax+10]
:00405E9A 2B510C                  sub edx, dword ptr [ecx+0C]
:00405E9D 83C201                  add edx, 00000001
:00405EA0 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405EB4(U)
|
:00405EA3 8B4508                  mov eax, dword ptr [ebp+08]
:00405EA6 3B45FC                  cmp eax, dword ptr [ebp-04]
:00405EA9 720B                    jb 00405EB6
:00405EAB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405EAE 2B4DFC                  sub ecx, dword ptr [ebp-04]
:00405EB1 894D08                  mov dword ptr [ebp+08], ecx
:00405EB4 EBED                    jmp 00405EA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405EA9(C)
|
:00405EB6 8B55F8                  mov edx, dword ptr [ebp-08]
:00405EB9 8B4508                  mov eax, dword ptr [ebp+08]
:00405EBC 03420C                  add eax, dword ptr [edx+0C]
:00405EBF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00405EC2 894104                  mov dword ptr [ecx+04], eax
:00405EC5 8BE5                    mov esp, ebp
:00405EC7 5D                      pop ebp
:00405EC8 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00405F25   , :004061BA   
|
:00405ECB 55                      push ebp
:00405ECC 8BEC                    mov ebp, esp
:00405ECE 83EC08                  sub esp, 00000008
:00405ED1 894DFC                  mov dword ptr [ebp-04], ecx
:00405ED4 8B45FC                  mov eax, dword ptr [ebp-04]
:00405ED7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405EDA 034814                  add ecx, dword ptr [eax+14]
:00405EDD 8B55FC                  mov edx, dword ptr [ebp-04]
:00405EE0 3B4A18                  cmp ecx, dword ptr [edx+18]
:00405EE3 730E                    jnb 00405EF3
:00405EE5 8B45FC                  mov eax, dword ptr [ebp-04]
:00405EE8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405EEB 034814                  add ecx, dword ptr [eax+14]
:00405EEE 894DF8                  mov dword ptr [ebp-08], ecx
:00405EF1 EB09                    jmp 00405EFC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405EE3(C)
|
:00405EF3 8B55FC                  mov edx, dword ptr [ebp-04]
:00405EF6 8B4218                  mov eax, dword ptr [edx+18]
:00405EF9 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405EF1(U)
|
:00405EFC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405EFF 8B55F8                  mov edx, dword ptr [ebp-08]
:00405F02 895108                  mov dword ptr [ecx+08], edx
:00405F05 8BE5                    mov esp, ebp
:00405F07 5D                      pop ebp
:00405F08 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00410327   , :00411B33   , :0042EBB3   , :0042FB8C   , :0043016A   
|:004308EB   , :00430E67   , :00431400   , :00431871   , :00431B5E   
|:00434F14   , :00434F43   , :00434FB6   , :00434FF3   , :0043503C   
|:0043508B   , :00435461   , :00449FFE   , :0044A29E   , :0044A2EC   
|:0044AA3D   , :0044AA76   , :0044AAAF   , :0044E3D2   , :0044E411   
|:0045EEFA   , :004678B2   , :00468C44   , :00468C9A   
|
:00405F0B 55                      push ebp
:00405F0C 8BEC                    mov ebp, esp
:00405F0E 51                      push ecx
:00405F0F 894DFC                  mov dword ptr [ebp-04], ecx
:00405F12 8B4508                  mov eax, dword ptr [ebp+08]
:00405F15 50                      push eax
:00405F16 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405F19 E86AFFFFFF              call 00405E88
:00405F1E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00405F21 51                      push ecx
:00405F22 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405F25 E8A1FFFFFF              call 00405ECB
:00405F2A 8BE5                    mov esp, ebp
:00405F2C 5D                      pop ebp
:00405F2D C20800                  ret 0008



* Referenced by a CALL at Address:
|:00406251   
|
:00405F30 55                      push ebp
:00405F31 8BEC                    mov ebp, esp
:00405F33 83EC08                  sub esp, 00000008
:00405F36 894DF8                  mov dword ptr [ebp-08], ecx
:00405F39 8B45F8                  mov eax, dword ptr [ebp-08]
:00405F3C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00405F3F 8B5010                  mov edx, dword ptr [eax+10]
:00405F42 2B510C                  sub edx, dword ptr [ecx+0C]
:00405F45 83C201                  add edx, 00000001
:00405F48 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405F5C(U)
|
:00405F4B 8B4508                  mov eax, dword ptr [ebp+08]
:00405F4E 3B45FC                  cmp eax, dword ptr [ebp-04]
:00405F51 720B                    jb 00405F5E
:00405F53 8B4D08                  mov ecx, dword ptr [ebp+08]
:00405F56 2B4DFC                  sub ecx, dword ptr [ebp-04]
:00405F59 894D08                  mov dword ptr [ebp+08], ecx
:00405F5C EBED                    jmp 00405F4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405F51(C)
|
:00405F5E 8B55F8                  mov edx, dword ptr [ebp-08]
:00405F61 8B4508                  mov eax, dword ptr [ebp+08]
:00405F64 03420C                  add eax, dword ptr [edx+0C]
:00405F67 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00405F6A 89411C                  mov dword ptr [ecx+1C], eax
:00405F6D 8BE5                    mov esp, ebp
:00405F6F 5D                      pop ebp
:00405F70 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004063D9   , :00406454   
|
:00405F73 55                      push ebp
:00405F74 8BEC                    mov ebp, esp
:00405F76 51                      push ecx
:00405F77 894DFC                  mov dword ptr [ebp-04], ecx
:00405F7A 8B45FC                  mov eax, dword ptr [ebp-04]
:00405F7D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405F80 8B511C                  mov edx, dword ptr [ecx+1C]
:00405F83 895004                  mov dword ptr [eax+04], edx
:00405F86 8B45FC                  mov eax, dword ptr [ebp-04]
:00405F89 33C9                    xor ecx, ecx
:00405F8B 8A4824                  mov cl, byte ptr [eax+24]
:00405F8E 8B55FC                  mov edx, dword ptr [ebp-04]
:00405F91 8B4208                  mov eax, dword ptr [edx+08]
:00405F94 03C1                    add eax, ecx
:00405F96 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405F99 3B4118                  cmp eax, dword ptr [ecx+18]
:00405F9C 7716                    ja 00405FB4
:00405F9E 8B55FC                  mov edx, dword ptr [ebp-04]
:00405FA1 33C0                    xor eax, eax
:00405FA3 8A4224                  mov al, byte ptr [edx+24]
:00405FA6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405FA9 8B5108                  mov edx, dword ptr [ecx+08]
:00405FAC 03D0                    add edx, eax
:00405FAE 8B45FC                  mov eax, dword ptr [ebp-04]
:00405FB1 895008                  mov dword ptr [eax+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00405F9C(C)
|
:00405FB4 8BE5                    mov esp, ebp
:00405FB6 5D                      pop ebp
:00405FB7 C3                      ret



* Referenced by a CALL at Addresses:
|:0040623A   , :00411B18   , :004120BF   , :0042EBBF   , :00430144   
|:00430253   , :0043082D   , :00430920   , :00430959   , :00430E9B   
|:004313E2   , :00431768   , :00431A54   , :00431BFD   , :00434EED   
|:00434F28   , :00434F92   , :00435021   , :004350B6   , :004353D6   
|:004356E6   , :004356F4   , :00435702   , :00435722   , :00435730   
|:0043574E   , :0043576A   , :00443B38   , :00449F30   , :0044A286   
|:0044A2D4   , :0044AA11   , :0044E2FF   , :0045EF12   , :004678BE   
|:00468B45   , :00468B53   
|
:00405FB8 55                      push ebp
:00405FB9 8BEC                    mov ebp, esp
:00405FBB 51                      push ecx
:00405FBC 894DFC                  mov dword ptr [ebp-04], ecx
:00405FBF 8B45FC                  mov eax, dword ptr [ebp-04]
:00405FC2 8A4D08                  mov cl, byte ptr [ebp+08]
:00405FC5 884801                  mov byte ptr [eax+01], cl
:00405FC8 8B55FC                  mov edx, dword ptr [ebp-04]
:00405FCB 33C0                    xor eax, eax
:00405FCD 8A4202                  mov al, byte ptr [edx+02]
:00405FD0 50                      push eax
:00405FD1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00405FD4 33D2                    xor edx, edx
:00405FD6 8A5101                  mov dl, byte ptr [ecx+01]
:00405FD9 52                      push edx
:00405FDA 8B45FC                  mov eax, dword ptr [ebp-04]
:00405FDD 33C9                    xor ecx, ecx
:00405FDF 8A08                    mov cl, byte ptr [eax]
:00405FE1 51                      push ecx
:00405FE2 E87EFD0600              call 00475D65
:00405FE7 83C40C                  add esp, 0000000C
:00405FEA 8BE5                    mov esp, ebp
:00405FEC 5D                      pop ebp
:00405FED C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004062BD   , :00411A5D   , :0042EBCB   , :0042FE49   , :00430839   
|:004313EE   , :00431774   , :00431A60   , :00434EF9   , :004353E2   
|:00443B44   , :00449F3C   , :0044A9E1   , :0044E30B   , :004678CA   
|:00468B5F   
|
:00405FF0 55                      push ebp
:00405FF1 8BEC                    mov ebp, esp
:00405FF3 51                      push ecx
:00405FF4 894DFC                  mov dword ptr [ebp-04], ecx
:00405FF7 8B45FC                  mov eax, dword ptr [ebp-04]
:00405FFA 8A4D08                  mov cl, byte ptr [ebp+08]
:00405FFD 884802                  mov byte ptr [eax+02], cl
:00406000 8B55FC                  mov edx, dword ptr [ebp-04]
:00406003 33C0                    xor eax, eax
:00406005 8A4202                  mov al, byte ptr [edx+02]
:00406008 50                      push eax
:00406009 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040600C 33D2                    xor edx, edx
:0040600E 8A5101                  mov dl, byte ptr [ecx+01]
:00406011 52                      push edx
:00406012 8B45FC                  mov eax, dword ptr [ebp-04]
:00406015 33C9                    xor ecx, ecx
:00406017 8A08                    mov cl, byte ptr [eax]
:00406019 51                      push ecx
:0040601A E846FD0600              call 00475D65
:0040601F 83C40C                  add esp, 0000000C
:00406022 8BE5                    mov esp, ebp
:00406024 5D                      pop ebp
:00406025 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00406310   , :00449F54   , :0044AA05   
|
:00406028 55                      push ebp
:00406029 8BEC                    mov ebp, esp
:0040602B 51                      push ecx
:0040602C 894DFC                  mov dword ptr [ebp-04], ecx
:0040602F 8B45FC                  mov eax, dword ptr [ebp-04]
:00406032 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406035 894820                  mov dword ptr [eax+20], ecx
:00406038 8BE5                    mov esp, ebp
:0040603A 5D                      pop ebp
:0040603B C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040632A   , :00410333   , :0041035B   , :00449F48   , :0044A0A2   
|:0044A9F9   , :0044AAE8   
|
:0040603E 55                      push ebp
:0040603F 8BEC                    mov ebp, esp
:00406041 51                      push ecx
:00406042 894DFC                  mov dword ptr [ebp-04], ecx
:00406045 8B45FC                  mov eax, dword ptr [ebp-04]
:00406048 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040604B 894834                  mov dword ptr [eax+34], ecx
:0040604E 8BE5                    mov esp, ebp
:00406050 5D                      pop ebp
:00406051 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00406268   , :00411C49   , :0042FE3D   , :00430821   , :004313D6   
|:0043175C   , :00431A48   , :00431BF1   , :00434EE1   , :004353CA   
|:00443B2C   , :00449F1C   , :0044A272   , :0044A9ED   , :0044E2F3   
|:0045EF06   , :00468B2A   
|
:00406054 55                      push ebp
:00406055 8BEC                    mov ebp, esp
:00406057 51                      push ecx
:00406058 894DFC                  mov dword ptr [ebp-04], ecx
:0040605B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040605E 8A4D08                  mov cl, byte ptr [ebp+08]
:00406061 8808                    mov byte ptr [eax], cl
:00406063 8B55FC                  mov edx, dword ptr [ebp-04]
:00406066 33C0                    xor eax, eax
:00406068 8A4202                  mov al, byte ptr [edx+02]
:0040606B 50                      push eax
:0040606C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040606F 33D2                    xor edx, edx
:00406071 8A5101                  mov dl, byte ptr [ecx+01]
:00406074 52                      push edx
:00406075 8B45FC                  mov eax, dword ptr [ebp-04]
:00406078 33C9                    xor ecx, ecx
:0040607A 8A08                    mov cl, byte ptr [eax]
:0040607C 51                      push ecx
:0040607D E8E3FC0600              call 00475D65
:00406082 83C40C                  add esp, 0000000C
:00406085 8BE5                    mov esp, ebp
:00406087 5D                      pop ebp
:00406088 C20400                  ret 0004


:0040608B 55                      push ebp
:0040608C 8BEC                    mov ebp, esp
:0040608E 51                      push ecx
:0040608F 894DFC                  mov dword ptr [ebp-04], ecx
:00406092 817D08C8030000          cmp dword ptr [ebp+08], 000003C8
:00406099 7709                    ja 004060A4
:0040609B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040609E 8A4D08                  mov cl, byte ptr [ebp+08]
:004060A1 884824                  mov byte ptr [eax+24], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406099(C)
|
:004060A4 8BE5                    mov esp, ebp
:004060A6 5D                      pop ebp
:004060A7 C20400                  ret 0004


:004060AA 55                      push ebp
:004060AB 8BEC                    mov ebp, esp
:004060AD 51                      push ecx
:004060AE 894DFC                  mov dword ptr [ebp-04], ecx
:004060B1 817D089F000000          cmp dword ptr [ebp+08], 0000009F
:004060B8 7709                    ja 004060C3
:004060BA 8B45FC                  mov eax, dword ptr [ebp-04]
:004060BD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004060C0 894810                  mov dword ptr [eax+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004060B8(C)
|
:004060C3 8BE5                    mov esp, ebp
:004060C5 5D                      pop ebp
:004060C6 C20400                  ret 0004


:004060C9 55                      push ebp
:004060CA 8BEC                    mov ebp, esp
:004060CC 51                      push ecx
:004060CD 894DFC                  mov dword ptr [ebp-04], ecx
:004060D0 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible Ref to Menu: DBGMENU, Item: ""
                                  |
:004060D3 C740109F000000          mov [eax+10], 0000009F
:004060DA 8BE5                    mov esp, ebp
:004060DC 5D                      pop ebp
:004060DD C3                      ret



* Referenced by a CALL at Addresses:
|:00405BC9   , :00405C5A   , :00405CB2   , :00405CEA   , :00405D1B   
|:00406B39   
|
:004060DE 55                      push ebp
:004060DF 8BEC                    mov ebp, esp
:004060E1 83EC2C                  sub esp, 0000002C
:004060E4 894DEC                  mov dword ptr [ebp-14], ecx
:004060E7 C745F000000000          mov [ebp-10], 00000000
:004060EE 8B45EC                  mov eax, dword ptr [ebp-14]
:004060F1 8B4838                  mov ecx, dword ptr [eax+38]
:004060F4 894DE8                  mov dword ptr [ebp-18], ecx
:004060F7 8B55E8                  mov edx, dword ptr [ebp-18]
:004060FA 83EA01                  sub edx, 00000001
:004060FD 8955E8                  mov dword ptr [ebp-18], edx
:00406100 837DE809                cmp dword ptr [ebp-18], 00000009
:00406104 0F872A020000            ja 00406334
:0040610A 8B45E8                  mov eax, dword ptr [ebp-18]
:0040610D FF248523654000          jmp dword ptr [4*eax+00406523]
:00406114 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406117 81E1FF000000            and ecx, 000000FF
:0040611D 894DE4                  mov dword ptr [ebp-1C], ecx
:00406120 8B55E4                  mov edx, dword ptr [ebp-1C]
:00406123 83EA3D                  sub edx, 0000003D
:00406126 8955E4                  mov dword ptr [ebp-1C], edx
:00406129 837DE41A                cmp dword ptr [ebp-1C], 0000001A
:0040612D 7773                    ja 004061A2
:0040612F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00406132 33C0                    xor eax, eax
:00406134 8A816F654000            mov al, byte ptr [ecx+0040656F]
:0040613A FF24854B654000          jmp dword ptr [4*eax+0040654B]
:00406141 8B55EC                  mov edx, dword ptr [ebp-14]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00406144 C7423802000000          mov [edx+38], 00000002
:0040614B EB55                    jmp 004061A2
:0040614D 8B45EC                  mov eax, dword ptr [ebp-14]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00406150 C7403804000000          mov [eax+38], 00000004
:00406157 EB49                    jmp 004061A2
:00406159 8B4DEC                  mov ecx, dword ptr [ebp-14]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040615C C7413805000000          mov [ecx+38], 00000005
:00406163 EB3D                    jmp 004061A2
:00406165 8B55EC                  mov edx, dword ptr [ebp-14]

* Possible Reference to String Resource ID=00006: ""
                                  |
:00406168 C7423806000000          mov [edx+38], 00000006
:0040616F EB31                    jmp 004061A2
:00406171 6A01                    push 00000001
:00406173 E8B8940200              call 0042F630
:00406178 83C404                  add esp, 00000004
:0040617B E998030000              jmp 00406518
:00406180 8B45EC                  mov eax, dword ptr [ebp-14]

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00406183 C7403808000000          mov [eax+38], 00000008
:0040618A EB16                    jmp 004061A2
:0040618C 8B4DEC                  mov ecx, dword ptr [ebp-14]

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0040618F C7413809000000          mov [ecx+38], 00000009
:00406196 EB0A                    jmp 004061A2
:00406198 8B55EC                  mov edx, dword ptr [ebp-14]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0040619B C742380A000000          mov [edx+38], 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040612D(C), :0040614B(U), :00406157(U), :00406163(U), :0040616F(U)
|:0040618A(U), :00406196(U)
|
:004061A2 E96C030000              jmp 00406513
:004061A7 8B4508                  mov eax, dword ptr [ebp+08]
:004061AA 25FF000000              and eax, 000000FF
:004061AF 8D0CC500FFFFFF          lea ecx, dword ptr [8*eax+FFFFFF00]
:004061B6 51                      push ecx
:004061B7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004061BA E80CFDFFFF              call 00405ECB
:004061BF 8B55EC                  mov edx, dword ptr [ebp-14]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004061C2 C7423803000000          mov [edx+38], 00000003
:004061C9 E945030000              jmp 00406513
:004061CE 8B4508                  mov eax, dword ptr [ebp+08]
:004061D1 25FF000000              and eax, 000000FF
:004061D6 83E820                  sub eax, 00000020
:004061D9 50                      push eax
:004061DA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004061DD E8A6FCFFFF              call 00405E88

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040623F(U), :00406256(U), :0040626D(U), :004062C2(U), :00406315(U)
|:0040632F(U), :00406518(U)
|
:004061E2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004061E5 C7413800000000          mov [ecx+38], 00000000
:004061EC E922030000              jmp 00406513
:004061F1 8A5508                  mov dl, byte ptr [ebp+08]
:004061F4 52                      push edx
:004061F5 E8060A0000              call 00406C00
:004061FA 83C404                  add esp, 00000004
:004061FD 85C0                    test eax, eax
:004061FF 7410                    je 00406211
:00406201 8B4508                  mov eax, dword ptr [ebp+08]
:00406204 25FF000000              and eax, 000000FF
:00406209 83E830                  sub eax, 00000030
:0040620C 8845E3                  mov byte ptr [ebp-1D], al
:0040620F EB17                    jmp 00406228

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004061FF(C)
|
:00406211 8A4D08                  mov cl, byte ptr [ebp+08]
:00406214 51                      push ecx
:00406215 E8260A0000              call 00406C40
:0040621A 83C404                  add esp, 00000004
:0040621D 25FF000000              and eax, 000000FF
:00406222 83E837                  sub eax, 00000037
:00406225 8845E3                  mov byte ptr [ebp-1D], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040620F(U)
|
:00406228 8A55E3                  mov dl, byte ptr [ebp-1D]
:0040622B 885508                  mov byte ptr [ebp+08], dl
:0040622E 8B4508                  mov eax, dword ptr [ebp+08]
:00406231 25FF000000              and eax, 000000FF
:00406236 50                      push eax
:00406237 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040623A E879FDFFFF              call 00405FB8
:0040623F EBA1                    jmp 004061E2
:00406241 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406244 81E1FF000000            and ecx, 000000FF
:0040624A 83E920                  sub ecx, 00000020
:0040624D 51                      push ecx
:0040624E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00406251 E8DAFCFFFF              call 00405F30
:00406256 EB8A                    jmp 004061E2
:00406258 8B5508                  mov edx, dword ptr [ebp+08]
:0040625B 81E2FF000000            and edx, 000000FF
:00406261 83EA30                  sub edx, 00000030
:00406264 52                      push edx
:00406265 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00406268 E8E7FDFFFF              call 00406054
:0040626D E970FFFFFF              jmp 004061E2
:00406272 8A4508                  mov al, byte ptr [ebp+08]
:00406275 50                      push eax
:00406276 E885090000              call 00406C00
:0040627B 83C404                  add esp, 00000004
:0040627E 85C0                    test eax, eax
:00406280 7411                    je 00406293
:00406282 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406285 81E1FF000000            and ecx, 000000FF
:0040628B 83E930                  sub ecx, 00000030
:0040628E 884DE2                  mov byte ptr [ebp-1E], cl
:00406291 EB17                    jmp 004062AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406280(C)
|
:00406293 8A5508                  mov dl, byte ptr [ebp+08]
:00406296 52                      push edx
:00406297 E8A4090000              call 00406C40
:0040629C 83C404                  add esp, 00000004
:0040629F 25FF000000              and eax, 000000FF
:004062A4 83E837                  sub eax, 00000037
:004062A7 8845E2                  mov byte ptr [ebp-1E], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406291(U)
|
:004062AA 8A45E2                  mov al, byte ptr [ebp-1E]
:004062AD 884508                  mov byte ptr [ebp+08], al
:004062B0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004062B3 81E1FF000000            and ecx, 000000FF
:004062B9 51                      push ecx
:004062BA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004062BD E82EFDFFFF              call 00405FF0
:004062C2 E91BFFFFFF              jmp 004061E2
:004062C7 8A5508                  mov dl, byte ptr [ebp+08]
:004062CA 52                      push edx
:004062CB E830090000              call 00406C00
:004062D0 83C404                  add esp, 00000004
:004062D3 85C0                    test eax, eax
:004062D5 7410                    je 004062E7
:004062D7 8B4508                  mov eax, dword ptr [ebp+08]
:004062DA 25FF000000              and eax, 000000FF
:004062DF 83E830                  sub eax, 00000030
:004062E2 8845E1                  mov byte ptr [ebp-1F], al
:004062E5 EB17                    jmp 004062FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004062D5(C)
|
:004062E7 8A4D08                  mov cl, byte ptr [ebp+08]
:004062EA 51                      push ecx
:004062EB E850090000              call 00406C40
:004062F0 83C404                  add esp, 00000004
:004062F3 25FF000000              and eax, 000000FF
:004062F8 83E837                  sub eax, 00000037
:004062FB 8845E1                  mov byte ptr [ebp-1F], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004062E5(U)
|
:004062FE 8A55E1                  mov dl, byte ptr [ebp-1F]
:00406301 885508                  mov byte ptr [ebp+08], dl
:00406304 8B4508                  mov eax, dword ptr [ebp+08]
:00406307 25FF000000              and eax, 000000FF
:0040630C 50                      push eax
:0040630D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00406310 E813FDFFFF              call 00406028
:00406315 E9C8FEFFFF              jmp 004061E2
:0040631A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040631D 81E1FF000000            and ecx, 000000FF
:00406323 83E930                  sub ecx, 00000030
:00406326 51                      push ecx
:00406327 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040632A E80FFDFFFF              call 0040603E
:0040632F E9AEFEFFFF              jmp 004061E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406104(C)
|
:00406334 8B55EC                  mov edx, dword ptr [ebp-14]
:00406337 33C0                    xor eax, eax
:00406339 8A4225                  mov al, byte ptr [edx+25]
:0040633C 85C0                    test eax, eax
:0040633E 7424                    je 00406364
:00406340 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00406343 33D2                    xor edx, edx
:00406345 8A5125                  mov dl, byte ptr [ecx+25]
:00406348 C1E208                  shl edx, 08
:0040634B 8B4508                  mov eax, dword ptr [ebp+08]
:0040634E 25FF000000              and eax, 000000FF
:00406353 03D0                    add edx, eax
:00406355 8955FC                  mov dword ptr [ebp-04], edx
:00406358 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040635B C6412500                mov [ecx+25], 00
:0040635F E999000000              jmp 004063FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040633E(C)
|
:00406364 837D0C02                cmp dword ptr [ebp+0C], 00000002
:00406368 742E                    je 00406398
:0040636A 8B5508                  mov edx, dword ptr [ebp+08]
:0040636D 81E2FF000000            and edx, 000000FF
:00406373 81FAA1000000            cmp edx, 000000A1
:00406379 7C1D                    jl 00406398
:0040637B 8B4508                  mov eax, dword ptr [ebp+08]
:0040637E 25FF000000              and eax, 000000FF
:00406383 3DFE000000              cmp eax, 000000FE
:00406388 7F0E                    jg 00406398
:0040638A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040638D 8A5508                  mov dl, byte ptr [ebp+08]
:00406390 885125                  mov byte ptr [ecx+25], dl
:00406393 E97B010000              jmp 00406513

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406368(C), :00406379(C), :00406388(C)
|
:00406398 8B4508                  mov eax, dword ptr [ebp+08]
:0040639B 25FF000000              and eax, 000000FF
:004063A0 83F81B                  cmp eax, 0000001B
:004063A3 750F                    jne 004063B4
:004063A5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004063A8 C7413801000000          mov [ecx+38], 00000001
:004063AF E95F010000              jmp 00406513

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004063A3(C)
|
:004063B4 8B5508                  mov edx, dword ptr [ebp+08]
:004063B7 81E2FF000000            and edx, 000000FF
:004063BD 83FA20                  cmp edx, 00000020
:004063C0 7D2F                    jge 004063F1
:004063C2 8A4508                  mov al, byte ptr [ebp+08]
:004063C5 8845DC                  mov byte ptr [ebp-24], al
:004063C8 807DDC0A                cmp byte ptr [ebp-24], 0A
:004063CC 7408                    je 004063D6
:004063CE 807DDC0D                cmp byte ptr [ebp-24], 0D
:004063D2 740C                    je 004063E0
:004063D4 EB16                    jmp 004063EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004063CC(C)
|
:004063D6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004063D9 E895FBFFFF              call 00405F73
:004063DE EB0C                    jmp 004063EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004063D2(C)
|
:004063E0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004063E3 8B55EC                  mov edx, dword ptr [ebp-14]
:004063E6 8B421C                  mov eax, dword ptr [edx+1C]
:004063E9 894104                  mov dword ptr [ecx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004063D4(U), :004063DE(U)
|
:004063EC E922010000              jmp 00406513

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004063C0(C)
|
:004063F1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004063F4 81E1FF000000            and ecx, 000000FF
:004063FA 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040635F(U)
|
:004063FD 817DFC00020000          cmp dword ptr [ebp-04], 00000200
:00406404 1BD2                    sbb edx, edx
:00406406 F7DA                    neg edx
:00406408 8955F8                  mov dword ptr [ebp-08], edx
:0040640B 837DF800                cmp dword ptr [ebp-08], 00000000
:0040640F 740B                    je 0040641C
:00406411 8B45EC                  mov eax, dword ptr [ebp-14]
:00406414 8B4810                  mov ecx, dword ptr [eax+10]
:00406417 894DD8                  mov dword ptr [ebp-28], ecx
:0040641A EB0C                    jmp 00406428

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040640F(C)
|
:0040641C 8B55EC                  mov edx, dword ptr [ebp-14]
:0040641F 8B4210                  mov eax, dword ptr [edx+10]
:00406422 83E801                  sub eax, 00000001
:00406425 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040641A(U)
|
:00406428 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040642B 8B5104                  mov edx, dword ptr [ecx+04]
:0040642E 3B55D8                  cmp edx, dword ptr [ebp-28]
:00406431 7626                    jbe 00406459
:00406433 8B45EC                  mov eax, dword ptr [ebp-14]
:00406436 8178109F000000          cmp dword ptr [eax+10], 0000009F
:0040643D 7412                    je 00406451
:0040643F 817DFC22210000          cmp dword ptr [ebp-04], 00002122
:00406446 7209                    jb 00406451
:00406448 817DFC25210000          cmp dword ptr [ebp-04], 00002125
:0040644F 7608                    jbe 00406459

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040643D(C), :00406446(C)
|
:00406451 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00406454 E81AFBFFFF              call 00405F73

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406431(C), :0040644F(C)
|
:00406459 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040645C 51                      push ecx
:0040645D 8B55FC                  mov edx, dword ptr [ebp-04]
:00406460 52                      push edx
:00406461 8B45EC                  mov eax, dword ptr [ebp-14]
:00406464 8B4808                  mov ecx, dword ptr [eax+08]
:00406467 51                      push ecx
:00406468 8B55EC                  mov edx, dword ptr [ebp-14]
:0040646B 8B4204                  mov eax, dword ptr [edx+04]
:0040646E 50                      push eax
:0040646F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00406472 E8E2030000              call 00406859
:00406477 8945F0                  mov dword ptr [ebp-10], eax
:0040647A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040647D 33D2                    xor edx, edx
:0040647F 8A11                    mov dl, byte ptr [ecx]
:00406481 83E240                  and edx, 00000040
:00406484 F7DA                    neg edx
:00406486 1BD2                    sbb edx, edx
:00406488 F7DA                    neg edx
:0040648A 83C201                  add edx, 00000001
:0040648D 8955F4                  mov dword ptr [ebp-0C], edx
:00406490 8B45EC                  mov eax, dword ptr [ebp-14]
:00406493 33C9                    xor ecx, ecx
:00406495 8A08                    mov cl, byte ptr [eax]
:00406497 83E120                  and ecx, 00000020
:0040649A 85C9                    test ecx, ecx
:0040649C 7446                    je 004064E4
:0040649E 8B55EC                  mov edx, dword ptr [ebp-14]
:004064A1 33C0                    xor eax, eax
:004064A3 8A4224                  mov al, byte ptr [edx+24]
:004064A6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004064A9 33D2                    xor edx, edx
:004064AB 8A11                    mov dl, byte ptr [ecx]
:004064AD 81E2C0000000            and edx, 000000C0
:004064B3 F7DA                    neg edx
:004064B5 1BD2                    sbb edx, edx
:004064B7 83E210                  and edx, 00000010
:004064BA 03C2                    add eax, edx
:004064BC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004064BF 8B5108                  mov edx, dword ptr [ecx+08]
:004064C2 03D0                    add edx, eax
:004064C4 8B45EC                  mov eax, dword ptr [ebp-14]
:004064C7 895008                  mov dword ptr [eax+08], edx
:004064CA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004064CD 8B55EC                  mov edx, dword ptr [ebp-14]
:004064D0 8B4108                  mov eax, dword ptr [ecx+08]
:004064D3 3B4218                  cmp eax, dword ptr [edx+18]
:004064D6 760A                    jbe 004064E2
:004064D8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004064DB C7410800000000          mov [ecx+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004064D6(C)
|
:004064E2 EB2F                    jmp 00406513

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040649C(C)
|
:004064E4 837D0C01                cmp dword ptr [ebp+0C], 00000001
:004064E8 7509                    jne 004064F3

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004064EA C745D404000000          mov [ebp-2C], 00000004
:004064F1 EB11                    jmp 00406504

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004064E8(C)
|
:004064F3 8B55F8                  mov edx, dword ptr [ebp-08]
:004064F6 F7DA                    neg edx
:004064F8 1BD2                    sbb edx, edx
:004064FA 83C202                  add edx, 00000002
:004064FD 0FAF55F4                imul edx, dword ptr [ebp-0C]
:00406501 8955D4                  mov dword ptr [ebp-2C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004064F1(U)
|
:00406504 8B45EC                  mov eax, dword ptr [ebp-14]
:00406507 8B4804                  mov ecx, dword ptr [eax+04]
:0040650A 034DD4                  add ecx, dword ptr [ebp-2C]
:0040650D 8B55EC                  mov edx, dword ptr [ebp-14]
:00406510 894A04                  mov dword ptr [edx+04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004061A2(U), :004061C9(U), :004061EC(U), :00406393(U), :004063AF(U)
|:004063EC(U), :004064E2(U)
|
:00406513 8B45F0                  mov eax, dword ptr [ebp-10]
:00406516 EB05                    jmp 0040651D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040617B(U)
|
:00406518 E9C5FCFFFF              jmp 004061E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406516(U)
|
:0040651D 8BE5                    mov esp, ebp
:0040651F 5D                      pop ebp
:00406520 C20800                  ret 0008



:00406523 14614000                DWORD 00406114
:00406527 A7614000                DWORD 004061A7
:0040652B CE614000                DWORD 004061CE
:0040652F F1614000                DWORD 004061F1
:00406533 41624000                DWORD 00406241
:00406537 58624000                DWORD 00406258
:0040653B 34634000                DWORD 00406334
:0040653F 72624000                DWORD 00406272
:00406543 C7624000                DWORD 004062C7
:00406547 1A634000                DWORD 0040631A
:0040654B 41614000                DWORD 00406141
:0040654F 80614000                DWORD 00406180
:00406553 4D614000                DWORD 0040614D
:00406557 8C614000                DWORD 0040618C
:0040655B 98614000                DWORD 00406198
:0040655F 65614000                DWORD 00406165
:00406563 59614000                DWORD 00406159
:00406567 71614000                DWORD 00406171
:0040656B A2614000                DWORD 004061A2


:0040656F 0008                    add byte ptr [eax], cl
:00406571 0808                    or byte ptr [eax], cl
:00406573 0801                    or byte ptr [ecx], al
:00406575 0208                    add cl, byte ptr [eax]
:00406577 0803                    or byte ptr [ebx], al
:00406579 0408                    add al, 08
:0040657B 0808                    or byte ptr [eax], cl
:0040657D 0808                    or byte ptr [eax], cl
:0040657F 0508080808              add eax, 08080808
:00406584 06                      push es
:00406585 0808                    or byte ptr [eax], cl
:00406587 0808                    or byte ptr [eax], cl
:00406589 07                      pop es

* Referenced by a CALL at Address:
|:00406959   
|
:0040658A 55                      push ebp
:0040658B 8BEC                    mov ebp, esp
:0040658D 83EC18                  sub esp, 00000018
:00406590 8B4510                  mov eax, dword ptr [ebp+10]
:00406593 C1E004                  shl eax, 04
:00406596 50                      push eax
:00406597 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040659A 51                      push ecx
:0040659B 8B5508                  mov edx, dword ptr [ebp+08]
:0040659E 52                      push edx
:0040659F E81C200700              call 004785C0
:004065A4 83C40C                  add esp, 0000000C
:004065A7 837D1001                cmp dword ptr [ebp+10], 00000001
:004065AB 0F844B010000            je 004066FC
:004065B1 8B450C                  mov eax, dword ptr [ebp+0C]
:004065B4 8945FC                  mov dword ptr [ebp-04], eax
:004065B7 C745F800000000          mov [ebp-08], 00000000
:004065BE EB09                    jmp 004065C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406615(U)
|
:004065C0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004065C3 83C101                  add ecx, 00000001
:004065C6 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004065BE(U)
|
:004065C9 837DF810                cmp dword ptr [ebp-08], 00000010
:004065CD 7D48                    jge 00406617
:004065CF 8B55FC                  mov edx, dword ptr [ebp-04]
:004065D2 668B02                  mov ax, word ptr [edx]
:004065D5 668945F4                mov word ptr [ebp-0C], ax
:004065D9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004065DC 81E1FFFF0000            and ecx, 0000FFFF
:004065E2 D1E1                    shl ecx, 1
:004065E4 8B55F4                  mov edx, dword ptr [ebp-0C]
:004065E7 81E2FFFF0000            and edx, 0000FFFF
:004065ED C1FA0F                  sar edx, 0F
:004065F0 0BCA                    or ecx, edx
:004065F2 81E1FEFF0000            and ecx, 0000FFFE
:004065F8 66894DF4                mov word ptr [ebp-0C], cx
:004065FC 8B45FC                  mov eax, dword ptr [ebp-04]
:004065FF 668B08                  mov cx, word ptr [eax]
:00406602 660B4DF4                or cx, word ptr [ebp-0C]
:00406606 8B55FC                  mov edx, dword ptr [ebp-04]
:00406609 66890A                  mov word ptr [edx], cx
:0040660C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040660F 83C002                  add eax, 00000002
:00406612 8945FC                  mov dword ptr [ebp-04], eax
:00406615 EBA9                    jmp 004065C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004065CD(C)
|
:00406617 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040661A 894DFC                  mov dword ptr [ebp-04], ecx
:0040661D C745F800000000          mov [ebp-08], 00000000
:00406624 EB09                    jmp 0040662F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040667A(U)
|
:00406626 8B55F8                  mov edx, dword ptr [ebp-08]
:00406629 83C201                  add edx, 00000001
:0040662C 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406624(U)
|
:0040662F 837DF810                cmp dword ptr [ebp-08], 00000010
:00406633 7D47                    jge 0040667C
:00406635 8B45FC                  mov eax, dword ptr [ebp-04]
:00406638 668B08                  mov cx, word ptr [eax]
:0040663B 66894DF0                mov word ptr [ebp-10], cx
:0040663F 8B55F0                  mov edx, dword ptr [ebp-10]
:00406642 81E2FFFF0000            and edx, 0000FFFF
:00406648 D1FA                    sar edx, 1
:0040664A 8B45F0                  mov eax, dword ptr [ebp-10]
:0040664D 25FFFF0000              and eax, 0000FFFF
:00406652 C1E00F                  shl eax, 0F
:00406655 0BD0                    or edx, eax
:00406657 81E2FEFF0000            and edx, 0000FFFE
:0040665D 668955F0                mov word ptr [ebp-10], dx
:00406661 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406664 668B11                  mov dx, word ptr [ecx]
:00406667 660B55F0                or dx, word ptr [ebp-10]
:0040666B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040666E 668910                  mov word ptr [eax], dx
:00406671 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406674 83C102                  add ecx, 00000002
:00406677 894DFC                  mov dword ptr [ebp-04], ecx
:0040667A EBAA                    jmp 00406626

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406633(C)
|
:0040667C 8B550C                  mov edx, dword ptr [ebp+0C]
:0040667F 8955FC                  mov dword ptr [ebp-04], edx
:00406682 C745F800000000          mov [ebp-08], 00000000
:00406689 EB09                    jmp 00406694

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004066B6(U)
|
:0040668B 8B45F8                  mov eax, dword ptr [ebp-08]
:0040668E 83C001                  add eax, 00000001
:00406691 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406689(U)
|
:00406694 837DF80F                cmp dword ptr [ebp-08], 0000000F
:00406698 7D1E                    jge 004066B8
:0040669A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040669D 8B55FC                  mov edx, dword ptr [ebp-04]
:004066A0 668B01                  mov ax, word ptr [ecx]
:004066A3 660B4202                or ax, word ptr [edx+02]
:004066A7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004066AA 668901                  mov word ptr [ecx], ax
:004066AD 8B55FC                  mov edx, dword ptr [ebp-04]
:004066B0 83C202                  add edx, 00000002
:004066B3 8955FC                  mov dword ptr [ebp-04], edx
:004066B6 EBD3                    jmp 0040668B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406698(C)
|
:004066B8 8B450C                  mov eax, dword ptr [ebp+0C]
:004066BB 83C01E                  add eax, 0000001E
:004066BE 8945FC                  mov dword ptr [ebp-04], eax
:004066C1 C745F800000000          mov [ebp-08], 00000000
:004066C8 EB09                    jmp 004066D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004066F5(U)
|
:004066CA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004066CD 83C101                  add ecx, 00000001
:004066D0 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004066C8(U)
|
:004066D3 837DF80F                cmp dword ptr [ebp-08], 0000000F
:004066D7 7D1E                    jge 004066F7
:004066D9 8B55FC                  mov edx, dword ptr [ebp-04]
:004066DC 8B45FC                  mov eax, dword ptr [ebp-04]
:004066DF 668B0A                  mov cx, word ptr [edx]
:004066E2 660B48FE                or cx, word ptr [eax-02]
:004066E6 8B55FC                  mov edx, dword ptr [ebp-04]
:004066E9 66890A                  mov word ptr [edx], cx
:004066EC 8B45FC                  mov eax, dword ptr [ebp-04]
:004066EF 83E802                  sub eax, 00000002
:004066F2 8945FC                  mov dword ptr [ebp-04], eax
:004066F5 EBD3                    jmp 004066CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004066D7(C)
|
:004066F7 E912010000              jmp 0040680E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004065AB(C)
|
:004066FC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004066FF 894DEC                  mov dword ptr [ebp-14], ecx
:00406702 C745E800000000          mov [ebp-18], 00000000
:00406709 EB09                    jmp 00406714

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040674A(U)
|
:0040670B 8B55E8                  mov edx, dword ptr [ebp-18]
:0040670E 83C201                  add edx, 00000001
:00406711 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406709(U)
|
:00406714 837DE810                cmp dword ptr [ebp-18], 00000010
:00406718 7D32                    jge 0040674C
:0040671A 8B45EC                  mov eax, dword ptr [ebp-14]
:0040671D 33C9                    xor ecx, ecx
:0040671F 8A08                    mov cl, byte ptr [eax]
:00406721 D1E1                    shl ecx, 1
:00406723 8B55EC                  mov edx, dword ptr [ebp-14]
:00406726 33C0                    xor eax, eax
:00406728 8A02                    mov al, byte ptr [edx]
:0040672A C1F807                  sar eax, 07
:0040672D 0BC8                    or ecx, eax
:0040672F 81E1FE000000            and ecx, 000000FE
:00406735 8B55EC                  mov edx, dword ptr [ebp-14]
:00406738 8A02                    mov al, byte ptr [edx]
:0040673A 0AC1                    or al, cl
:0040673C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040673F 8801                    mov byte ptr [ecx], al
:00406741 8B55EC                  mov edx, dword ptr [ebp-14]
:00406744 83C201                  add edx, 00000001
:00406747 8955EC                  mov dword ptr [ebp-14], edx
:0040674A EBBF                    jmp 0040670B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406718(C)
|
:0040674C 8B450C                  mov eax, dword ptr [ebp+0C]
:0040674F 8945EC                  mov dword ptr [ebp-14], eax
:00406752 C745E800000000          mov [ebp-18], 00000000
:00406759 EB09                    jmp 00406764

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406797(U)
|
:0040675B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040675E 83C101                  add ecx, 00000001
:00406761 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406759(U)
|
:00406764 837DE810                cmp dword ptr [ebp-18], 00000010
:00406768 7D2F                    jge 00406799
:0040676A 8B55EC                  mov edx, dword ptr [ebp-14]
:0040676D 33C0                    xor eax, eax
:0040676F 8A02                    mov al, byte ptr [edx]
:00406771 D1F8                    sar eax, 1
:00406773 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00406776 33D2                    xor edx, edx
:00406778 8A11                    mov dl, byte ptr [ecx]
:0040677A C1E207                  shl edx, 07
:0040677D 0BC2                    or eax, edx
:0040677F 83E07F                  and eax, 0000007F
:00406782 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00406785 8A11                    mov dl, byte ptr [ecx]
:00406787 0AD0                    or dl, al
:00406789 8B45EC                  mov eax, dword ptr [ebp-14]
:0040678C 8810                    mov byte ptr [eax], dl
:0040678E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00406791 83C101                  add ecx, 00000001
:00406794 894DEC                  mov dword ptr [ebp-14], ecx
:00406797 EBC2                    jmp 0040675B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406768(C)
|
:00406799 8B550C                  mov edx, dword ptr [ebp+0C]
:0040679C 8955EC                  mov dword ptr [ebp-14], edx
:0040679F C745E800000000          mov [ebp-18], 00000000
:004067A6 EB09                    jmp 004067B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067D0(U)
|
:004067A8 8B45E8                  mov eax, dword ptr [ebp-18]
:004067AB 83C001                  add eax, 00000001
:004067AE 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067A6(U)
|
:004067B1 837DE80F                cmp dword ptr [ebp-18], 0000000F
:004067B5 7D1B                    jge 004067D2
:004067B7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004067BA 8B55EC                  mov edx, dword ptr [ebp-14]
:004067BD 8A01                    mov al, byte ptr [ecx]
:004067BF 0A4201                  or al, byte ptr [edx+01]
:004067C2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004067C5 8801                    mov byte ptr [ecx], al
:004067C7 8B55EC                  mov edx, dword ptr [ebp-14]
:004067CA 83C201                  add edx, 00000001
:004067CD 8955EC                  mov dword ptr [ebp-14], edx
:004067D0 EBD6                    jmp 004067A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067B5(C)
|
:004067D2 8B450C                  mov eax, dword ptr [ebp+0C]
:004067D5 83C00F                  add eax, 0000000F
:004067D8 8945EC                  mov dword ptr [ebp-14], eax
:004067DB C745E800000000          mov [ebp-18], 00000000
:004067E2 EB09                    jmp 004067ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040680C(U)
|
:004067E4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004067E7 83C101                  add ecx, 00000001
:004067EA 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004067E2(U)
|
:004067ED 837DE80F                cmp dword ptr [ebp-18], 0000000F
:004067F1 7D1B                    jge 0040680E
:004067F3 8B55EC                  mov edx, dword ptr [ebp-14]
:004067F6 8B45EC                  mov eax, dword ptr [ebp-14]
:004067F9 8A0A                    mov cl, byte ptr [edx]
:004067FB 0A48FF                  or cl, byte ptr [eax-01]
:004067FE 8B55EC                  mov edx, dword ptr [ebp-14]
:00406801 880A                    mov byte ptr [edx], cl
:00406803 8B45EC                  mov eax, dword ptr [ebp-14]
:00406806 83E801                  sub eax, 00000001
:00406809 8945EC                  mov dword ptr [ebp-14], eax
:0040680C EBD6                    jmp 004067E4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004066F7(U), :004067F1(C)
|
:0040680E 8BE5                    mov esp, ebp
:00406810 5D                      pop ebp
:00406811 C3                      ret


:00406812 55                      push ebp
:00406813 8BEC                    mov ebp, esp
:00406815 6A00                    push 00000000
:00406817 8B4518                  mov eax, dword ptr [ebp+18]
:0040681A 25FF000000              and eax, 000000FF
:0040681F 50                      push eax
:00406820 8B4D18                  mov ecx, dword ptr [ebp+18]
:00406823 81E100FF0000            and ecx, 0000FF00
:00406829 C1E908                  shr ecx, 08
:0040682C 51                      push ecx
:0040682D E833F50600              call 00475D65
:00406832 83C40C                  add esp, 0000000C
:00406835 8B551C                  mov edx, dword ptr [ebp+1C]
:00406838 52                      push edx
:00406839 8B4514                  mov eax, dword ptr [ebp+14]
:0040683C 50                      push eax
:0040683D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00406840 C1E103                  shl ecx, 03
:00406843 51                      push ecx
:00406844 8B550C                  mov edx, dword ptr [ebp+0C]
:00406847 52                      push edx
:00406848 8B4508                  mov eax, dword ptr [ebp+08]
:0040684B C1E003                  shl eax, 03
:0040684E 50                      push eax
:0040684F E887050700              call 00476DDB
:00406854 83C414                  add esp, 00000014
:00406857 5D                      pop ebp
:00406858 C3                      ret



* Referenced by a CALL at Address:
|:00406472   
|
:00406859 55                      push ebp
:0040685A 8BEC                    mov ebp, esp
:0040685C 81EC10010000            sub esp, 00000110
:00406862 898DF0FEFFFF            mov dword ptr [ebp+FFFFFEF0], ecx
:00406868 C7451400000000          mov [ebp+14], 00000000
:0040686F C785F4FEFFFF01000000    mov dword ptr [ebp+FFFFFEF4], 00000001
:00406879 837D1030                cmp dword ptr [ebp+10], 00000030
:0040687D 723A                    jb 004068B9
:0040687F 837D1039                cmp dword ptr [ebp+10], 00000039
:00406883 7734                    ja 004068B9
:00406885 6A10                    push 00000010
:00406887 8D4580                  lea eax, dword ptr [ebp-80]
:0040688A 50                      push eax
:0040688B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0040688E 83E930                  sub ecx, 00000030
:00406891 C1E104                  shl ecx, 04
:00406894 81C188C24700            add ecx, 0047C288
:0040689A 51                      push ecx
:0040689B E8201D0700              call 004785C0
:004068A0 83C40C                  add esp, 0000000C
:004068A3 C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:004068AD C785FCFEFFFF01000000    mov dword ptr [ebp+FFFFFEFC], 00000001
:004068B7 EB5C                    jmp 00406915

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040687D(C), :00406883(C)
|
:004068B9 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:004068BF 33C0                    xor eax, eax
:004068C1 8A02                    mov al, byte ptr [edx]
:004068C3 83E020                  and eax, 00000020
:004068C6 85C0                    test eax, eax
:004068C8 740C                    je 004068D6

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004068CA C785FCFEFFFF02000000    mov dword ptr [ebp+FFFFFEFC], 00000002
:004068D4 EB3F                    jmp 00406915

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004068C8(C)
|
:004068D6 817D1000020000          cmp dword ptr [ebp+10], 00000200
:004068DD 731C                    jnb 004068FB
:004068DF C785FCFEFFFF01000000    mov dword ptr [ebp+FFFFFEFC], 00000001
:004068E9 8D4D80                  lea ecx, dword ptr [ebp-80]
:004068EC 51                      push ecx
:004068ED 8B5510                  mov edx, dword ptr [ebp+10]
:004068F0 52                      push edx
:004068F1 E8AF080700              call 004771A5
:004068F6 83C408                  add esp, 00000008
:004068F9 EB1A                    jmp 00406915

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004068DD(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004068FB C785FCFEFFFF02000000    mov dword ptr [ebp+FFFFFEFC], 00000002
:00406905 8D4580                  lea eax, dword ptr [ebp-80]
:00406908 50                      push eax
:00406909 8B4D10                  mov ecx, dword ptr [ebp+10]
:0040690C 51                      push ecx
:0040690D E8DF070700              call 004770F1
:00406912 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004068B7(U), :004068D4(U), :004068F9(U)
|
:00406915 83BDF4FEFFFF01          cmp dword ptr [ebp+FFFFFEF4], 00000001
:0040691C 7513                    jne 00406931
:0040691E 8B95FCFEFFFF            mov edx, dword ptr [ebp+FFFFFEFC]
:00406924 52                      push edx
:00406925 8D4580                  lea eax, dword ptr [ebp-80]
:00406928 50                      push eax
:00406929 E84B010000              call 00406A79
:0040692E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040691C(C)
|
:00406931 C785F8FEFFFF10000000    mov dword ptr [ebp+FFFFFEF8], 00000010
:0040693B 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:00406941 83793400                cmp dword ptr [ecx+34], 00000000
:00406945 745B                    je 004069A2
:00406947 8B95FCFEFFFF            mov edx, dword ptr [ebp+FFFFFEFC]
:0040694D 52                      push edx
:0040694E 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:00406954 50                      push eax
:00406955 8D4D80                  lea ecx, dword ptr [ebp-80]
:00406958 51                      push ecx
:00406959 E82CFCFFFF              call 0040658A
:0040695E 83C40C                  add esp, 0000000C
:00406961 6A00                    push 00000000
:00406963 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:00406969 8B4220                  mov eax, dword ptr [edx+20]
:0040696C 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040696D 6A04                    push 00000004
:0040696F E8F1F30600              call 00475D65
:00406974 83C40C                  add esp, 0000000C
:00406977 8D8D00FFFFFF            lea ecx, dword ptr [ebp+FFFFFF00]
:0040697D 51                      push ecx
:0040697E 8B95F8FEFFFF            mov edx, dword ptr [ebp+FFFFFEF8]
:00406984 52                      push edx
:00406985 8B85FCFEFFFF            mov eax, dword ptr [ebp+FFFFFEFC]
:0040698B C1E003                  shl eax, 03
:0040698E 50                      push eax
:0040698F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00406992 51                      push ecx
:00406993 8B5508                  mov edx, dword ptr [ebp+08]
:00406996 C1E203                  shl edx, 03
:00406999 52                      push edx
:0040699A E83C040700              call 00476DDB
:0040699F 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406945(C)
|
:004069A2 8B85F0FEFFFF            mov eax, dword ptr [ebp+FFFFFEF0]
:004069A8 33C9                    xor ecx, ecx
:004069AA 8A4802                  mov cl, byte ptr [eax+02]
:004069AD 85C9                    test ecx, ecx
:004069AF 754B                    jne 004069FC
:004069B1 6A00                    push 00000000
:004069B3 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:004069B9 33C0                    xor eax, eax
:004069BB 8A4201                  mov al, byte ptr [edx+01]
:004069BE 50                      push eax
:004069BF 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:004069C5 33D2                    xor edx, edx
:004069C7 8A11                    mov dl, byte ptr [ecx]
:004069C9 52                      push edx
:004069CA E896F30600              call 00475D65
:004069CF 83C40C                  add esp, 0000000C
:004069D2 8D4580                  lea eax, dword ptr [ebp-80]
:004069D5 50                      push eax
:004069D6 8B8DF8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF8]
:004069DC 51                      push ecx
:004069DD 8B95FCFEFFFF            mov edx, dword ptr [ebp+FFFFFEFC]
:004069E3 C1E203                  shl edx, 03
:004069E6 52                      push edx
:004069E7 8B450C                  mov eax, dword ptr [ebp+0C]
:004069EA 50                      push eax
:004069EB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004069EE C1E103                  shl ecx, 03
:004069F1 51                      push ecx
:004069F2 E8E4030700              call 00476DDB
:004069F7 83C414                  add esp, 00000014
:004069FA EB4A                    jmp 00406A46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004069AF(C)
|
:004069FC 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:00406A02 33C0                    xor eax, eax
:00406A04 8A4202                  mov al, byte ptr [edx+02]
:00406A07 50                      push eax
:00406A08 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:00406A0E 33D2                    xor edx, edx
:00406A10 8A5101                  mov dl, byte ptr [ecx+01]
:00406A13 52                      push edx
:00406A14 6A00                    push 00000000
:00406A16 E84AF30600              call 00475D65
:00406A1B 83C40C                  add esp, 0000000C
:00406A1E 8D4580                  lea eax, dword ptr [ebp-80]
:00406A21 50                      push eax
:00406A22 8B8DF8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF8]
:00406A28 51                      push ecx
:00406A29 8B95FCFEFFFF            mov edx, dword ptr [ebp+FFFFFEFC]
:00406A2F C1E203                  shl edx, 03
:00406A32 52                      push edx
:00406A33 8B450C                  mov eax, dword ptr [ebp+0C]
:00406A36 50                      push eax
:00406A37 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406A3A C1E103                  shl ecx, 03
:00406A3D 51                      push ecx
:00406A3E E898030700              call 00476DDB
:00406A43 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004069FA(U)
|
:00406A46 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:00406A4C 33C0                    xor eax, eax
:00406A4E 8A4202                  mov al, byte ptr [edx+02]
:00406A51 50                      push eax
:00406A52 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:00406A58 33D2                    xor edx, edx
:00406A5A 8A5101                  mov dl, byte ptr [ecx+01]
:00406A5D 52                      push edx
:00406A5E 8B85F0FEFFFF            mov eax, dword ptr [ebp+FFFFFEF0]
:00406A64 33C9                    xor ecx, ecx
:00406A66 8A08                    mov cl, byte ptr [eax]
:00406A68 51                      push ecx
:00406A69 E8F7F20600              call 00475D65
:00406A6E 83C40C                  add esp, 0000000C
:00406A71 33C0                    xor eax, eax
:00406A73 8BE5                    mov esp, ebp
:00406A75 5D                      pop ebp
:00406A76 C21000                  ret 0010



* Referenced by a CALL at Address:
|:00406929   
|
:00406A79 55                      push ebp
:00406A7A 8BEC                    mov ebp, esp
:00406A7C 83EC08                  sub esp, 00000008
:00406A7F 837D0C01                cmp dword ptr [ebp+0C], 00000001
:00406A83 7502                    jne 00406A87
:00406A85 EB7C                    jmp 00406B03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406A83(C)
|
:00406A87 8B4508                  mov eax, dword ptr [ebp+08]
:00406A8A 8945FC                  mov dword ptr [ebp-04], eax
:00406A8D C745F800000000          mov [ebp-08], 00000000
:00406A94 EB12                    jmp 00406AA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406B01(U)
|
:00406A96 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406A99 83C101                  add ecx, 00000001
:00406A9C 894DF8                  mov dword ptr [ebp-08], ecx
:00406A9F 8B55FC                  mov edx, dword ptr [ebp-04]
:00406AA2 83C201                  add edx, 00000001
:00406AA5 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406A94(U)
|
:00406AA8 8B450C                  mov eax, dword ptr [ebp+0C]
:00406AAB C1E004                  shl eax, 04
:00406AAE 3945F8                  cmp dword ptr [ebp-08], eax
:00406AB1 7D50                    jge 00406B03
:00406AB3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406AB6 33D2                    xor edx, edx
:00406AB8 8A11                    mov dl, byte ptr [ecx]
:00406ABA D1E2                    shl edx, 1
:00406ABC 8B45FC                  mov eax, dword ptr [ebp-04]
:00406ABF 8A08                    mov cl, byte ptr [eax]
:00406AC1 0ACA                    or cl, dl
:00406AC3 8B55FC                  mov edx, dword ptr [ebp-04]
:00406AC6 880A                    mov byte ptr [edx], cl
:00406AC8 837D0C01                cmp dword ptr [ebp+0C], 00000001
:00406ACC 7433                    je 00406B01
:00406ACE 8B45F8                  mov eax, dword ptr [ebp-08]
:00406AD1 99                      cdq
:00406AD2 33C2                    xor eax, edx
:00406AD4 2BC2                    sub eax, edx
:00406AD6 83E001                  and eax, 00000001
:00406AD9 33C2                    xor eax, edx
:00406ADB 2BC2                    sub eax, edx
:00406ADD 85C0                    test eax, eax
:00406ADF 7520                    jne 00406B01
:00406AE1 8B45FC                  mov eax, dword ptr [ebp-04]
:00406AE4 33C9                    xor ecx, ecx
:00406AE6 8A4801                  mov cl, byte ptr [eax+01]
:00406AE9 81E180000000            and ecx, 00000080
:00406AEF F7D9                    neg ecx
:00406AF1 1BC9                    sbb ecx, ecx
:00406AF3 F7D9                    neg ecx
:00406AF5 8B55FC                  mov edx, dword ptr [ebp-04]
:00406AF8 8A02                    mov al, byte ptr [edx]
:00406AFA 0AC1                    or al, cl
:00406AFC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00406AFF 8801                    mov byte ptr [ecx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406ACC(C), :00406ADF(C)
|
:00406B01 EB93                    jmp 00406A96

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406A85(U), :00406AB1(C)
|
:00406B03 8BE5                    mov esp, ebp
:00406B05 5D                      pop ebp
:00406B06 C3                      ret



* Referenced by a CALL at Addresses:
|:00406B62   , :00406BC7   
|
:00406B07 55                      push ebp
:00406B08 8BEC                    mov ebp, esp
:00406B0A 83EC08                  sub esp, 00000008
:00406B0D C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406B49(U)
|
:00406B14 8B450C                  mov eax, dword ptr [ebp+0C]
:00406B17 33C9                    xor ecx, ecx
:00406B19 8A08                    mov cl, byte ptr [eax]
:00406B1B 85C9                    test ecx, ecx
:00406B1D 742C                    je 00406B4B
:00406B1F 6A00                    push 00000000
:00406B21 8B550C                  mov edx, dword ptr [ebp+0C]
:00406B24 8A02                    mov al, byte ptr [edx]
:00406B26 8845FB                  mov byte ptr [ebp-05], al
:00406B29 8A4DFB                  mov cl, byte ptr [ebp-05]
:00406B2C 51                      push ecx
:00406B2D 8B550C                  mov edx, dword ptr [ebp+0C]
:00406B30 83C201                  add edx, 00000001
:00406B33 89550C                  mov dword ptr [ebp+0C], edx
:00406B36 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406B39 E8A0F5FFFF              call 004060DE
:00406B3E 8945FC                  mov dword ptr [ebp-04], eax
:00406B41 837DFC00                cmp dword ptr [ebp-04], 00000000
:00406B45 7402                    je 00406B49
:00406B47 EB02                    jmp 00406B4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406B45(C)
|
:00406B49 EBC9                    jmp 00406B14

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406B1D(C), :00406B47(U)
|
:00406B4B 8B45FC                  mov eax, dword ptr [ebp-04]
:00406B4E 8BE5                    mov esp, ebp
:00406B50 5D                      pop ebp
:00406B51 C3                      ret



* Referenced by a CALL at Addresses:
|:00411B42   , :0043140E   , :00431B6F   , :0045EF25   
|
:00406B52 55                      push ebp
:00406B53 8BEC                    mov ebp, esp
:00406B55 E8D9950000              call 00410133
:00406B5A 8B450C                  mov eax, dword ptr [ebp+0C]
:00406B5D 50                      push eax
:00406B5E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406B61 51                      push ecx
:00406B62 E8A0FFFFFF              call 00406B07
:00406B67 83C408                  add esp, 00000008
:00406B6A E8DF950000              call 0041014E
:00406B6F 5D                      pop ebp
:00406B70 C3                      ret


:00406B71 55                      push ebp
:00406B72 8BEC                    mov ebp, esp
:00406B74 83EC0C                  sub esp, 0000000C
:00406B77 8B4510                  mov eax, dword ptr [ebp+10]
:00406B7A 50                      push eax
:00406B7B E890190700              call 00478510
:00406B80 83C404                  add esp, 00000004
:00406B83 8945F8                  mov dword ptr [ebp-08], eax
:00406B86 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00406B89 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:00406B8C 760D                    jbe 00406B9B
:00406B8E 8B550C                  mov edx, dword ptr [ebp+0C]
:00406B91 2B55F8                  sub edx, dword ptr [ebp-08]
:00406B94 D1EA                    shr edx, 1
:00406B96 8955F4                  mov dword ptr [ebp-0C], edx
:00406B99 EB07                    jmp 00406BA2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406B8C(C)
|
:00406B9B C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406B99(U)
|
:00406BA2 8B45F4                  mov eax, dword ptr [ebp-0C]
:00406BA5 8945FC                  mov dword ptr [ebp-04], eax
:00406BA8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406BAB 8B5104                  mov edx, dword ptr [ecx+04]
:00406BAE 0355FC                  add edx, dword ptr [ebp-04]
:00406BB1 52                      push edx
:00406BB2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406BB5 E8CEF2FFFF              call 00405E88
:00406BBA E874950000              call 00410133
:00406BBF 8B4510                  mov eax, dword ptr [ebp+10]
:00406BC2 50                      push eax
:00406BC3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406BC6 51                      push ecx
:00406BC7 E83BFFFFFF              call 00406B07
:00406BCC 83C408                  add esp, 00000008
:00406BCF E87A950000              call 0041014E
:00406BD4 8BE5                    mov esp, ebp
:00406BD6 5D                      pop ebp
:00406BD7 C3                      ret



* Referenced by a CALL at Addresses:
|:0041034C   , :0042EBDE   , :0042FB9F   , :00430185   , :00430945   
|:00430EBF   , :00431887   , :00434F63   , :00434F83   , :00434FD5   
|:00435012   , :0043506D   , :004350A7   , :00435475   , :00435782   
|:0044A033   , :0044A2C5   , :0044A31F   , :0044AA59   , :0044AA92   
|:0044AAD9   , :0044E3A9   , :0044E3F2   , :0044E430   , :0044E454   
|:004678D8   , :00468CB0   
|
:00406BD8 55                      push ebp
:00406BD9 8BEC                    mov ebp, esp
:00406BDB E853950000              call 00410133
:00406BE0 8D450C                  lea eax, dword ptr [ebp+0C]
:00406BE3 50                      push eax
:00406BE4 E8C2ECFFFF              call 004058AB
:00406BE9 83C404                  add esp, 00000004
:00406BEC E85D950000              call 0041014E
:00406BF1 5D                      pop ebp
:00406BF2 C3                      ret


:00406BF3 CC                      int 03
:00406BF4 CC                      int 03
:00406BF5 CC                      int 03
:00406BF6 CC                      int 03
:00406BF7 CC                      int 03
:00406BF8 CC                      int 03
:00406BF9 CC                      int 03
:00406BFA CC                      int 03
:00406BFB CC                      int 03
:00406BFC CC                      int 03
:00406BFD CC                      int 03
:00406BFE CC                      int 03
:00406BFF CC                      int 03

* Referenced by a CALL at Addresses:
|:00405987   , :004061F5   , :00406276   , :004062CB   
|
:00406C00 55                      push ebp
:00406C01 8BEC                    mov ebp, esp
:00406C03 51                      push ecx
:00406C04 8B4508                  mov eax, dword ptr [ebp+08]
:00406C07 25FF000000              and eax, 000000FF
:00406C0C 83F830                  cmp eax, 00000030
:00406C0F 7C17                    jl 00406C28
:00406C11 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406C14 81E1FF000000            and ecx, 000000FF
:00406C1A 83F939                  cmp ecx, 00000039
:00406C1D 7F09                    jg 00406C28
:00406C1F C745FC01000000          mov [ebp-04], 00000001
:00406C26 EB07                    jmp 00406C2F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406C0F(C), :00406C1D(C)
|
:00406C28 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406C26(U)
|
:00406C2F 8B45FC                  mov eax, dword ptr [ebp-04]
:00406C32 8BE5                    mov esp, ebp
:00406C34 5D                      pop ebp
:00406C35 C3                      ret


:00406C36 CC                      int 03
:00406C37 CC                      int 03
:00406C38 CC                      int 03
:00406C39 CC                      int 03
:00406C3A CC                      int 03
:00406C3B CC                      int 03
:00406C3C CC                      int 03
:00406C3D CC                      int 03
:00406C3E CC                      int 03
:00406C3F CC                      int 03

* Referenced by a CALL at Addresses:
|:00405A21   , :00406215   , :00406297   , :004062EB   
|
:00406C40 55                      push ebp
:00406C41 8BEC                    mov ebp, esp
:00406C43 51                      push ecx
:00406C44 8B4508                  mov eax, dword ptr [ebp+08]
:00406C47 25FF000000              and eax, 000000FF
:00406C4C 83F861                  cmp eax, 00000061
:00406C4F 7C1F                    jl 00406C70
:00406C51 8B4D08                  mov ecx, dword ptr [ebp+08]
:00406C54 81E1FF000000            and ecx, 000000FF
:00406C5A 83F97A                  cmp ecx, 0000007A
:00406C5D 7F11                    jg 00406C70
:00406C5F 8B5508                  mov edx, dword ptr [ebp+08]
:00406C62 81E2FF000000            and edx, 000000FF
:00406C68 83EA20                  sub edx, 00000020
:00406C6B 8955FC                  mov dword ptr [ebp-04], edx
:00406C6E EB0B                    jmp 00406C7B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406C4F(C), :00406C5D(C)
|
:00406C70 8B4508                  mov eax, dword ptr [ebp+08]
:00406C73 25FF000000              and eax, 000000FF
:00406C78 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406C6E(U)
|
:00406C7B 8A45FC                  mov al, byte ptr [ebp-04]
:00406C7E 8BE5                    mov esp, ebp
:00406C80 5D                      pop ebp
:00406C81 C3                      ret


:00406C82 CC                      int 03
:00406C83 CC                      int 03
:00406C84 CC                      int 03
:00406C85 CC                      int 03
:00406C86 CC                      int 03
:00406C87 CC                      int 03
:00406C88 CC                      int 03
:00406C89 CC                      int 03
:00406C8A CC                      int 03
:00406C8B CC                      int 03
:00406C8C CC                      int 03
:00406C8D CC                      int 03
:00406C8E CC                      int 03
:00406C8F CC                      int 03
:00406C90 55                      push ebp
:00406C91 8BEC                    mov ebp, esp
:00406C93 E807000000              call 00406C9F
:00406C98 E811000000              call 00406CAE
:00406C9D 5D                      pop ebp
:00406C9E C3                      ret



* Referenced by a CALL at Address:
|:00406C93   
|
:00406C9F 55                      push ebp
:00406CA0 8BEC                    mov ebp, esp
:00406CA2 B9806D4800              mov ecx, 00486D80
:00406CA7 E874590000              call 0040C620
:00406CAC 5D                      pop ebp
:00406CAD C3                      ret



* Referenced by a CALL at Address:
|:00406C98   
|
:00406CAE 55                      push ebp
:00406CAF 8BEC                    mov ebp, esp
:00406CB1 68C06C4000              push 00406CC0
:00406CB6 E8F5870600              call 0046F4B0
:00406CBB 83C404                  add esp, 00000004
:00406CBE 5D                      pop ebp
:00406CBF C3                      ret


:00406CC0 55                      push ebp
:00406CC1 8BEC                    mov ebp, esp
:00406CC3 B9806D4800              mov ecx, 00486D80
:00406CC8 E833590000              call 0040C600
:00406CCD 5D                      pop ebp
:00406CCE C3                      ret


:00406CCF 55                      push ebp
:00406CD0 8BEC                    mov ebp, esp
:00406CD2 83EC0C                  sub esp, 0000000C
:00406CD5 894DF8                  mov dword ptr [ebp-08], ecx
:00406CD8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406CDB E8425F0000              call 0040CC22
:00406CE0 668945FC                mov word ptr [ebp-04], ax
:00406CE4 8B45FC                  mov eax, dword ptr [ebp-04]
:00406CE7 25FFFF0000              and eax, 0000FFFF
:00406CEC 8945F4                  mov dword ptr [ebp-0C], eax
:00406CEF 837DF44E                cmp dword ptr [ebp-0C], 0000004E
:00406CF3 0F87ED040000            ja 004071E6
:00406CF9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00406CFC FF248DEF714000          jmp dword ptr [4*ecx+004071EF]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00406D03 B803000000              mov eax, 00000003
:00406D08 E9DE040000              jmp 004071EB

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00406D0D B804000000              mov eax, 00000004
:00406D12 E9D4040000              jmp 004071EB
:00406D17 8B55F8                  mov edx, dword ptr [ebp-08]
:00406D1A 52                      push edx
:00406D1B E80B060000              call 0040732B
:00406D20 83C404                  add esp, 00000004
:00406D23 E9C3040000              jmp 004071EB
:00406D28 8B45F8                  mov eax, dword ptr [ebp-08]
:00406D2B 50                      push eax
:00406D2C E804060000              call 00407335
:00406D31 83C404                  add esp, 00000004
:00406D34 E9B2040000              jmp 004071EB
:00406D39 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406D3C 51                      push ecx
:00406D3D E8D5070000              call 00407517
:00406D42 83C404                  add esp, 00000004
:00406D45 E9A1040000              jmp 004071EB
:00406D4A 8B55F8                  mov edx, dword ptr [ebp-08]
:00406D4D 52                      push edx
:00406D4E E8CE080000              call 00407621
:00406D53 83C404                  add esp, 00000004
:00406D56 E990040000              jmp 004071EB
:00406D5B 8B45F8                  mov eax, dword ptr [ebp-08]
:00406D5E 50                      push eax
:00406D5F E859090000              call 004076BD
:00406D64 83C404                  add esp, 00000004
:00406D67 E97F040000              jmp 004071EB
:00406D6C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406D6F 51                      push ecx
:00406D70 E8A0090000              call 00407715
:00406D75 83C404                  add esp, 00000004
:00406D78 E96E040000              jmp 004071EB
:00406D7D 8B55F8                  mov edx, dword ptr [ebp-08]
:00406D80 52                      push edx
:00406D81 E8E8090000              call 0040776E
:00406D86 83C404                  add esp, 00000004
:00406D89 E95D040000              jmp 004071EB
:00406D8E 8B45F8                  mov eax, dword ptr [ebp-08]
:00406D91 50                      push eax
:00406D92 E80A0B0000              call 004078A1
:00406D97 83C404                  add esp, 00000004
:00406D9A E94C040000              jmp 004071EB
:00406D9F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406DA2 51                      push ecx
:00406DA3 E80F0C0000              call 004079B7
:00406DA8 83C404                  add esp, 00000004
:00406DAB E93B040000              jmp 004071EB
:00406DB0 8B55F8                  mov edx, dword ptr [ebp-08]
:00406DB3 52                      push edx
:00406DB4 E8BF0C0000              call 00407A78
:00406DB9 83C404                  add esp, 00000004
:00406DBC E92A040000              jmp 004071EB
:00406DC1 8B45F8                  mov eax, dword ptr [ebp-08]
:00406DC4 50                      push eax
:00406DC5 E81B0D0000              call 00407AE5
:00406DCA 83C404                  add esp, 00000004
:00406DCD E919040000              jmp 004071EB
:00406DD2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406DD5 51                      push ecx
:00406DD6 E8CA0F0000              call 00407DA5
:00406DDB 83C404                  add esp, 00000004
:00406DDE E908040000              jmp 004071EB
:00406DE3 8B55F8                  mov edx, dword ptr [ebp-08]
:00406DE6 52                      push edx
:00406DE7 E836100000              call 00407E22
:00406DEC 83C404                  add esp, 00000004
:00406DEF E9F7030000              jmp 004071EB
:00406DF4 8B45F8                  mov eax, dword ptr [ebp-08]
:00406DF7 50                      push eax
:00406DF8 E8E7120000              call 004080E4
:00406DFD 83C404                  add esp, 00000004
:00406E00 E9E6030000              jmp 004071EB
:00406E05 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406E08 51                      push ecx
:00406E09 E8F7120000              call 00408105
:00406E0E 83C404                  add esp, 00000004
:00406E11 E9D5030000              jmp 004071EB
:00406E16 8B55F8                  mov edx, dword ptr [ebp-08]
:00406E19 52                      push edx
:00406E1A E807130000              call 00408126
:00406E1F 83C404                  add esp, 00000004
:00406E22 E9C4030000              jmp 004071EB
:00406E27 8B45F8                  mov eax, dword ptr [ebp-08]
:00406E2A 50                      push eax
:00406E2B E829160000              call 00408459
:00406E30 83C404                  add esp, 00000004
:00406E33 E9B3030000              jmp 004071EB
:00406E38 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406E3B 51                      push ecx
:00406E3C E84F170000              call 00408590
:00406E41 83C404                  add esp, 00000004
:00406E44 E9A2030000              jmp 004071EB
:00406E49 8B55F8                  mov edx, dword ptr [ebp-08]
:00406E4C 52                      push edx
:00406E4D E875170000              call 004085C7
:00406E52 83C404                  add esp, 00000004
:00406E55 E991030000              jmp 004071EB
:00406E5A 8B45F8                  mov eax, dword ptr [ebp-08]
:00406E5D 50                      push eax
:00406E5E E86E170000              call 004085D1
:00406E63 83C404                  add esp, 00000004
:00406E66 E980030000              jmp 004071EB
:00406E6B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406E6E 51                      push ecx
:00406E6F E87F190000              call 004087F3
:00406E74 83C404                  add esp, 00000004
:00406E77 E96F030000              jmp 004071EB
:00406E7C 8B55F8                  mov edx, dword ptr [ebp-08]
:00406E7F 52                      push edx
:00406E80 E8991B0000              call 00408A1E
:00406E85 83C404                  add esp, 00000004
:00406E88 E95E030000              jmp 004071EB
:00406E8D 8B45F8                  mov eax, dword ptr [ebp-08]
:00406E90 50                      push eax
:00406E91 E8B21B0000              call 00408A48
:00406E96 83C404                  add esp, 00000004
:00406E99 E94D030000              jmp 004071EB
:00406E9E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406EA1 51                      push ecx
:00406EA2 E8E41B0000              call 00408A8B
:00406EA7 83C404                  add esp, 00000004
:00406EAA E93C030000              jmp 004071EB
:00406EAF 8B55F8                  mov edx, dword ptr [ebp-08]
:00406EB2 52                      push edx
:00406EB3 E87E1C0000              call 00408B36
:00406EB8 83C404                  add esp, 00000004
:00406EBB E92B030000              jmp 004071EB
:00406EC0 8B45F8                  mov eax, dword ptr [ebp-08]
:00406EC3 50                      push eax
:00406EC4 E8E3210000              call 004090AC
:00406EC9 83C404                  add esp, 00000004
:00406ECC E91A030000              jmp 004071EB
:00406ED1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406ED4 51                      push ecx
:00406ED5 E8D8290000              call 004098B2
:00406EDA 83C404                  add esp, 00000004
:00406EDD E909030000              jmp 004071EB
:00406EE2 8B55F8                  mov edx, dword ptr [ebp-08]
:00406EE5 52                      push edx
:00406EE6 E8342A0000              call 0040991F
:00406EEB 83C404                  add esp, 00000004
:00406EEE E9F8020000              jmp 004071EB
:00406EF3 8B45F8                  mov eax, dword ptr [ebp-08]
:00406EF6 50                      push eax
:00406EF7 E82F2B0000              call 00409A2B
:00406EFC 83C404                  add esp, 00000004
:00406EFF E9E7020000              jmp 004071EB
:00406F04 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406F07 51                      push ecx
:00406F08 E86A2C0000              call 00409B77
:00406F0D 83C404                  add esp, 00000004
:00406F10 E9D6020000              jmp 004071EB
:00406F15 8B55F8                  mov edx, dword ptr [ebp-08]
:00406F18 52                      push edx
:00406F19 E86A2D0000              call 00409C88
:00406F1E 83C404                  add esp, 00000004
:00406F21 E9C5020000              jmp 004071EB
:00406F26 8B45F8                  mov eax, dword ptr [ebp-08]
:00406F29 50                      push eax
:00406F2A E8F72D0000              call 00409D26
:00406F2F 83C404                  add esp, 00000004
:00406F32 E9B4020000              jmp 004071EB
:00406F37 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406F3A 51                      push ecx
:00406F3B E85D2E0000              call 00409D9D
:00406F40 83C404                  add esp, 00000004
:00406F43 E9A3020000              jmp 004071EB
:00406F48 8B55F8                  mov edx, dword ptr [ebp-08]
:00406F4B 52                      push edx
:00406F4C E8C02E0000              call 00409E11
:00406F51 83C404                  add esp, 00000004
:00406F54 E992020000              jmp 004071EB
:00406F59 8B45F8                  mov eax, dword ptr [ebp-08]
:00406F5C 50                      push eax
:00406F5D E83B300000              call 00409F9D
:00406F62 83C404                  add esp, 00000004
:00406F65 E981020000              jmp 004071EB
:00406F6A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406F6D 51                      push ecx
:00406F6E E839300000              call 00409FAC
:00406F73 83C404                  add esp, 00000004
:00406F76 E970020000              jmp 004071EB
:00406F7B 8B55F8                  mov edx, dword ptr [ebp-08]
:00406F7E 52                      push edx
:00406F7F E81F320000              call 0040A1A3
:00406F84 83C404                  add esp, 00000004
:00406F87 E95F020000              jmp 004071EB
:00406F8C 8B45F8                  mov eax, dword ptr [ebp-08]
:00406F8F 50                      push eax
:00406F90 E868320000              call 0040A1FD
:00406F95 83C404                  add esp, 00000004
:00406F98 E94E020000              jmp 004071EB
:00406F9D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406FA0 51                      push ecx
:00406FA1 E8AA320000              call 0040A250
:00406FA6 83C404                  add esp, 00000004
:00406FA9 E93D020000              jmp 004071EB
:00406FAE 8B55F8                  mov edx, dword ptr [ebp-08]
:00406FB1 52                      push edx
:00406FB2 E8CF320000              call 0040A286
:00406FB7 83C404                  add esp, 00000004
:00406FBA E92C020000              jmp 004071EB
:00406FBF 8B45F8                  mov eax, dword ptr [ebp-08]
:00406FC2 50                      push eax
:00406FC3 E8F4320000              call 0040A2BC
:00406FC8 83C404                  add esp, 00000004
:00406FCB E91B020000              jmp 004071EB
:00406FD0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00406FD3 51                      push ecx
:00406FD4 E820330000              call 0040A2F9
:00406FD9 83C404                  add esp, 00000004
:00406FDC E90A020000              jmp 004071EB
:00406FE1 8B55F8                  mov edx, dword ptr [ebp-08]
:00406FE4 52                      push edx
:00406FE5 E8D3340000              call 0040A4BD
:00406FEA 83C404                  add esp, 00000004
:00406FED E9F9010000              jmp 004071EB
:00406FF2 8B45F8                  mov eax, dword ptr [ebp-08]
:00406FF5 50                      push eax
:00406FF6 E8C1350000              call 0040A5BC
:00406FFB 83C404                  add esp, 00000004
:00406FFE E9E8010000              jmp 004071EB
:00407003 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407006 51                      push ecx
:00407007 E8D5350000              call 0040A5E1
:0040700C 83C404                  add esp, 00000004
:0040700F E9D7010000              jmp 004071EB
:00407014 8B55F8                  mov edx, dword ptr [ebp-08]
:00407017 52                      push edx
:00407018 E8D3350000              call 0040A5F0
:0040701D 83C404                  add esp, 00000004
:00407020 E9C6010000              jmp 004071EB
:00407025 8B45F8                  mov eax, dword ptr [ebp-08]
:00407028 50                      push eax
:00407029 E84E360000              call 0040A67C
:0040702E 83C404                  add esp, 00000004
:00407031 E9B5010000              jmp 004071EB
:00407036 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407039 51                      push ecx
:0040703A E847360000              call 0040A686
:0040703F 83C404                  add esp, 00000004
:00407042 E9A4010000              jmp 004071EB
:00407047 8B55F8                  mov edx, dword ptr [ebp-08]
:0040704A 52                      push edx
:0040704B E8CE360000              call 0040A71E
:00407050 83C404                  add esp, 00000004
:00407053 E993010000              jmp 004071EB
:00407058 8B45F8                  mov eax, dword ptr [ebp-08]
:0040705B 50                      push eax
:0040705C E829370000              call 0040A78A
:00407061 83C404                  add esp, 00000004
:00407064 E982010000              jmp 004071EB
:00407069 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040706C 51                      push ecx
:0040706D E847380000              call 0040A8B9
:00407072 83C404                  add esp, 00000004
:00407075 E971010000              jmp 004071EB
:0040707A 8B55F8                  mov edx, dword ptr [ebp-08]
:0040707D 52                      push edx
:0040707E E879380000              call 0040A8FC
:00407083 83C404                  add esp, 00000004
:00407086 E960010000              jmp 004071EB
:0040708B 8B45F8                  mov eax, dword ptr [ebp-08]
:0040708E 50                      push eax
:0040708F E8AB380000              call 0040A93F
:00407094 83C404                  add esp, 00000004
:00407097 E94F010000              jmp 004071EB
:0040709C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040709F 51                      push ecx
:004070A0 E8A4380000              call 0040A949
:004070A5 83C404                  add esp, 00000004
:004070A8 E93E010000              jmp 004071EB
:004070AD 8B55F8                  mov edx, dword ptr [ebp-08]
:004070B0 52                      push edx
:004070B1 E8A7380000              call 0040A95D
:004070B6 83C404                  add esp, 00000004
:004070B9 E92D010000              jmp 004071EB
:004070BE 8B45F8                  mov eax, dword ptr [ebp-08]
:004070C1 50                      push eax
:004070C2 E834390000              call 0040A9FB
:004070C7 83C404                  add esp, 00000004
:004070CA E91C010000              jmp 004071EB
:004070CF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004070D2 51                      push ecx
:004070D3 E8893A0000              call 0040AB61
:004070D8 83C404                  add esp, 00000004
:004070DB E90B010000              jmp 004071EB
:004070E0 8B55F8                  mov edx, dword ptr [ebp-08]
:004070E3 52                      push edx
:004070E4 E8493B0000              call 0040AC32
:004070E9 83C404                  add esp, 00000004
:004070EC E9FA000000              jmp 004071EB
:004070F1 8B45F8                  mov eax, dword ptr [ebp-08]
:004070F4 50                      push eax
:004070F5 E8DD3C0000              call 0040ADD7
:004070FA 83C404                  add esp, 00000004
:004070FD E9E9000000              jmp 004071EB
:00407102 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407105 51                      push ecx
:00407106 E87D3E0000              call 0040AF88
:0040710B 83C404                  add esp, 00000004
:0040710E E9D8000000              jmp 004071EB
:00407113 8B55F8                  mov edx, dword ptr [ebp-08]
:00407116 52                      push edx
:00407117 E8F73F0000              call 0040B113
:0040711C 83C404                  add esp, 00000004
:0040711F E9C7000000              jmp 004071EB
:00407124 8B45F8                  mov eax, dword ptr [ebp-08]
:00407127 50                      push eax
:00407128 E825400000              call 0040B152
:0040712D 83C404                  add esp, 00000004
:00407130 E9B6000000              jmp 004071EB
:00407135 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407138 51                      push ecx
:00407139 E866400000              call 0040B1A4
:0040713E 83C404                  add esp, 00000004
:00407141 E9A5000000              jmp 004071EB
:00407146 8B55F8                  mov edx, dword ptr [ebp-08]
:00407149 52                      push edx
:0040714A E8A9430000              call 0040B4F8
:0040714F 83C404                  add esp, 00000004
:00407152 E994000000              jmp 004071EB
:00407157 8B45F8                  mov eax, dword ptr [ebp-08]
:0040715A 50                      push eax
:0040715B E8A2430000              call 0040B502
:00407160 83C404                  add esp, 00000004
:00407163 E983000000              jmp 004071EB
:00407168 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040716B 51                      push ecx
:0040716C E83B450000              call 0040B6AC
:00407171 83C404                  add esp, 00000004
:00407174 EB75                    jmp 004071EB
:00407176 8B55F8                  mov edx, dword ptr [ebp-08]
:00407179 52                      push edx
:0040717A E84C450000              call 0040B6CB
:0040717F 83C404                  add esp, 00000004
:00407182 EB67                    jmp 004071EB
:00407184 8B45F8                  mov eax, dword ptr [ebp-08]
:00407187 50                      push eax
:00407188 E8A6450000              call 0040B733
:0040718D 83C404                  add esp, 00000004
:00407190 EB59                    jmp 004071EB
:00407192 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407195 51                      push ecx
:00407196 E80C460000              call 0040B7A7
:0040719B 83C404                  add esp, 00000004
:0040719E EB4B                    jmp 004071EB
:004071A0 8B55F8                  mov edx, dword ptr [ebp-08]
:004071A3 52                      push edx
:004071A4 E81D460000              call 0040B7C6
:004071A9 83C404                  add esp, 00000004
:004071AC EB3D                    jmp 004071EB
:004071AE 8B45F8                  mov eax, dword ptr [ebp-08]
:004071B1 50                      push eax
:004071B2 E852460000              call 0040B809
:004071B7 83C404                  add esp, 00000004
:004071BA EB2F                    jmp 004071EB
:004071BC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004071BF 51                      push ecx
:004071C0 E893460000              call 0040B858
:004071C5 83C404                  add esp, 00000004
:004071C8 EB21                    jmp 004071EB
:004071CA 8B55F8                  mov edx, dword ptr [ebp-08]
:004071CD 52                      push edx
:004071CE E8D7460000              call 0040B8AA
:004071D3 83C404                  add esp, 00000004
:004071D6 EB13                    jmp 004071EB
:004071D8 8B45F8                  mov eax, dword ptr [ebp-08]
:004071DB 50                      push eax
:004071DC E801470000              call 0040B8E2
:004071E1 83C404                  add esp, 00000004
:004071E4 EB05                    jmp 004071EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00406CF3(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004071E6 B805000000              mov eax, 00000005

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00406D08(U), :00406D12(U), :00406D23(U), :00406D34(U), :00406D45(U)
|:00406D56(U), :00406D67(U), :00406D78(U), :00406D89(U), :00406D9A(U)
|:00406DAB(U), :00406DBC(U), :00406DCD(U), :00406DDE(U), :00406DEF(U)
|:00406E00(U), :00406E11(U), :00406E22(U), :00406E33(U), :00406E44(U)
|:00406E55(U), :00406E66(U), :00406E77(U), :00406E88(U), :00406E99(U)
|:00406EAA(U), :00406EBB(U), :00406ECC(U), :00406EDD(U), :00406EEE(U)
|:00406EFF(U), :00406F10(U), :00406F21(U), :00406F32(U), :00406F43(U)
|:00406F54(U), :00406F65(U), :00406F76(U), :00406F87(U), :00406F98(U)
|:00406FA9(U), :00406FBA(U), :00406FCB(U), :00406FDC(U), :00406FED(U)
|:00406FFE(U), :0040700F(U), :00407020(U), :00407031(U), :00407042(U)
|:00407053(U), :00407064(U), :00407075(U), :00407086(U), :00407097(U)
|:004070A8(U), :004070B9(U), :004070CA(U), :004070DB(U), :004070EC(U)
|:004070FD(U), :0040710E(U), :0040711F(U), :00407130(U), :00407141(U)
|:00407152(U), :00407163(U), :00407174(U), :00407182(U), :00407190(U)
|:0040719E(U), :004071AC(U), :004071BA(U), :004071C8(U), :004071D6(U)
|:004071E4(U)
|
:004071EB 8BE5                    mov esp, ebp
:004071ED 5D                      pop ebp
:004071EE C3                      ret



:004071EF 036D4000                DWORD 00406D03
:004071F3 0D6D4000                DWORD 00406D0D
:004071F7 176D4000                DWORD 00406D17
:004071FB 286D4000                DWORD 00406D28
:004071FF 396D4000                DWORD 00406D39
:00407203 4A6D4000                DWORD 00406D4A
:00407207 5B6D4000                DWORD 00406D5B
:0040720B 6C6D4000                DWORD 00406D6C
:0040720F 7D6D4000                DWORD 00406D7D
:00407213 8E6D4000                DWORD 00406D8E
:00407217 9F6D4000                DWORD 00406D9F
:0040721B B06D4000                DWORD 00406DB0
:0040721F C16D4000                DWORD 00406DC1
:00407223 D26D4000                DWORD 00406DD2
:00407227 E36D4000                DWORD 00406DE3
:0040722B F46D4000                DWORD 00406DF4
:0040722F 056E4000                DWORD 00406E05
:00407233 166E4000                DWORD 00406E16
:00407237 276E4000                DWORD 00406E27
:0040723B 386E4000                DWORD 00406E38
:0040723F 496E4000                DWORD 00406E49
:00407243 5A6E4000                DWORD 00406E5A
:00407247 6B6E4000                DWORD 00406E6B
:0040724B 7C6E4000                DWORD 00406E7C
:0040724F 8D6E4000                DWORD 00406E8D
:00407253 9E6E4000                DWORD 00406E9E
:00407257 E6714000                DWORD 004071E6
:0040725B E6714000                DWORD 004071E6
:0040725F AF6E4000                DWORD 00406EAF
:00407263 C06E4000                DWORD 00406EC0
:00407267 D16E4000                DWORD 00406ED1
:0040726B E26E4000                DWORD 00406EE2
:0040726F F36E4000                DWORD 00406EF3
:00407273 046F4000                DWORD 00406F04
:00407277 156F4000                DWORD 00406F15
:0040727B 266F4000                DWORD 00406F26
:0040727F 376F4000                DWORD 00406F37
:00407283 486F4000                DWORD 00406F48
:00407287 596F4000                DWORD 00406F59
:0040728B 6A6F4000                DWORD 00406F6A
:0040728F 7B6F4000                DWORD 00406F7B
:00407293 8C6F4000                DWORD 00406F8C
:00407297 9D6F4000                DWORD 00406F9D
:0040729B AE6F4000                DWORD 00406FAE
:0040729F BF6F4000                DWORD 00406FBF
:004072A3 D06F4000                DWORD 00406FD0
:004072A7 E16F4000                DWORD 00406FE1
:004072AB F26F4000                DWORD 00406FF2
:004072AF 03704000                DWORD 00407003
:004072B3 14704000                DWORD 00407014
:004072B7 25704000                DWORD 00407025
:004072BB 36704000                DWORD 00407036
:004072BF 47704000                DWORD 00407047
:004072C3 58704000                DWORD 00407058
:004072C7 69704000                DWORD 00407069
:004072CB 7A704000                DWORD 0040707A
:004072CF 8B704000                DWORD 0040708B
:004072D3 9C704000                DWORD 0040709C
:004072D7 AD704000                DWORD 004070AD
:004072DB BE704000                DWORD 004070BE
:004072DF CF704000                DWORD 004070CF
:004072E3 E0704000                DWORD 004070E0
:004072E7 F1704000                DWORD 004070F1
:004072EB 02714000                DWORD 00407102
:004072EF 13714000                DWORD 00407113
:004072F3 24714000                DWORD 00407124
:004072F7 35714000                DWORD 00407135
:004072FB 46714000                DWORD 00407146
:004072FF 57714000                DWORD 00407157
:00407303 68714000                DWORD 00407168
:00407307 76714000                DWORD 00407176
:0040730B 84714000                DWORD 00407184
:0040730F 92714000                DWORD 00407192
:00407313 A0714000                DWORD 004071A0
:00407317 AE714000                DWORD 004071AE
:0040731B BC714000                DWORD 004071BC
:0040731F CA714000                DWORD 004071CA
:00407323 E6714000                DWORD 004071E6
:00407327 D8714000                DWORD 004071D8



* Referenced by a CALL at Address:
|:00406D1B   
|
:0040732B 55                      push ebp
:0040732C 8BEC                    mov ebp, esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004072EC(C)
|

* Possible Reference to String Resource ID=00006: ""
                                  |
:0040732E B806000000              mov eax, 00000006
:00407333 5D                      pop ebp
:00407334 C3                      ret



* Referenced by a CALL at Address:
|:00406D2C   
|
:00407335 55                      push ebp
:00407336 8BEC                    mov ebp, esp
:00407338 83EC1C                  sub esp, 0000001C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040733B 6A02                    push 00000002
:0040733D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407340 E848510000              call 0040C48D
:00407345 668945FC                mov word ptr [ebp-04], ax
:00407349 8B45FC                  mov eax, dword ptr [ebp-04]
:0040734C 25FFFF0000              and eax, 0000FFFF
:00407351 3D00800000              cmp eax, 00008000
:00407356 750A                    jne 00407362

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407358 B805000000              mov eax, 00000005
:0040735D E9B1010000              jmp 00407513

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407356(C)
|
:00407362 6A23                    push 00000023
:00407364 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407367 E821510000              call 0040C48D
:0040736C 668945F4                mov word ptr [ebp-0C], ax
:00407370 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407373 81E1FFFF0000            and ecx, 0000FFFF
:00407379 81F900800000            cmp ecx, 00008000
:0040737F 750A                    jne 0040738B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407381 B805000000              mov eax, 00000005
:00407386 E988010000              jmp 00407513

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040737F(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040738B 6A04                    push 00000004
:0040738D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407390 E8F8500000              call 0040C48D
:00407395 8945F8                  mov dword ptr [ebp-08], eax
:00407398 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040739F 750A                    jne 004073AB

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004073A1 B805000000              mov eax, 00000005
:004073A6 E968010000              jmp 00407513

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040739F(C)
|
:004073AB 6A24                    push 00000024
:004073AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004073B0 E8D8500000              call 0040C48D
:004073B5 668945F0                mov word ptr [ebp-10], ax
:004073B9 8B55F0                  mov edx, dword ptr [ebp-10]
:004073BC 81E2FFFF0000            and edx, 0000FFFF
:004073C2 81FA00800000            cmp edx, 00008000
:004073C8 750A                    jne 004073D4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004073CA B805000000              mov eax, 00000005
:004073CF E93F010000              jmp 00407513

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004073C8(C)
|
:004073D4 E899A10000              call 00411572
:004073D9 85C0                    test eax, eax
:004073DB 742E                    je 0040740B
:004073DD 8B45FC                  mov eax, dword ptr [ebp-04]
:004073E0 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:004073E5 3D00040000              cmp eax, 00000400
:004073EA 7C1F                    jl 0040740B
:004073EC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004073EF 81E1FFFF0000            and ecx, 0000FFFF
:004073F5 81F902040000            cmp ecx, 00000402
:004073FB 7F0E                    jg 0040740B
:004073FD B9C84F4B00              mov ecx, 004B4FC8
:00407402 E8E9370500              call 0045ABF0
:00407407 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004073DB(C), :004073EA(C), :004073FB(C)
|
:0040740B C745EC00000000          mov [ebp-14], 00000000
:00407412 E85BA10000              call 00411572
:00407417 85C0                    test eax, eax
:00407419 0F8493000000            je 004074B2
:0040741F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407422 81E2FFFF0000            and edx, 0000FFFF
:00407428 83FA0F                  cmp edx, 0000000F
:0040742B 740D                    je 0040743A
:0040742D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00407430 25FFFF0000              and eax, 0000FFFF
:00407435 83F810                  cmp eax, 00000010
:00407438 7578                    jne 004074B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040742B(C)
|
:0040743A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040743D 81E1FFFF0000            and ecx, 0000FFFF
:00407443 6BC950                  imul ecx, 00000050
:00407446 81C1787F4900            add ecx, 00497F78
:0040744C E8A43D0600              call 0046B1F5
:00407451 8845E8                  mov byte ptr [ebp-18], al
:00407454 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00407457 81E1FF000000            and ecx, 000000FF
:0040745D 81F9FF000000            cmp ecx, 000000FF
:00407463 7507                    jne 0040746C
:00407465 33C0                    xor eax, eax
:00407467 E9A7000000              jmp 00407513

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407463(C)
|
:0040746C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040746F 81E2FFFF0000            and edx, 0000FFFF
:00407475 83FA0F                  cmp edx, 0000000F
:00407478 751C                    jne 00407496
:0040747A 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040747D 81E1FF000000            and ecx, 000000FF
:00407483 6BC924                  imul ecx, 00000024
:00407486 81C1B83B4B00            add ecx, 004B3BB8
:0040748C E84FBEFFFF              call 004032E0
:00407491 8945EC                  mov dword ptr [ebp-14], eax
:00407494 EB1A                    jmp 004074B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407478(C)
|
:00407496 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00407499 81E1FF000000            and ecx, 000000FF
:0040749F 6BC924                  imul ecx, 00000024
:004074A2 81C1B83B4B00            add ecx, 004B3BB8
:004074A8 E853BEFFFF              call 00403300
:004074AD 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407494(U)
|
:004074B0 EB1E                    jmp 004074D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407419(C), :00407438(C)
|
:004074B2 8B45F4                  mov eax, dword ptr [ebp-0C]
:004074B5 25FFFF0000              and eax, 0000FFFF
:004074BA 50                      push eax
:004074BB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004074BE 81E1FFFF0000            and ecx, 0000FFFF
:004074C4 51                      push ecx
:004074C5 E8149FFFFF              call 004013DE
:004074CA 83C408                  add esp, 00000008
:004074CD 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004074B0(U)
|
:004074D0 8B55F0                  mov edx, dword ptr [ebp-10]
:004074D3 81E2FFFF0000            and edx, 0000FFFF
:004074D9 8955E4                  mov dword ptr [ebp-1C], edx
:004074DC 837DE400                cmp dword ptr [ebp-1C], 00000000
:004074E0 7408                    je 004074EA
:004074E2 837DE401                cmp dword ptr [ebp-1C], 00000001
:004074E6 7411                    je 004074F9
:004074E8 EB1C                    jmp 00407506

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004074E0(C)
|
:004074EA 8B45EC                  mov eax, dword ptr [ebp-14]
:004074ED 33C9                    xor ecx, ecx
:004074EF 3B45F8                  cmp eax, dword ptr [ebp-08]
:004074F2 0F9DC1                  setnl cl
:004074F5 8BC1                    mov eax, ecx
:004074F7 EB1A                    jmp 00407513

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004074E6(C)
|
:004074F9 8B55EC                  mov edx, dword ptr [ebp-14]
:004074FC 33C0                    xor eax, eax
:004074FE 3B55F8                  cmp edx, dword ptr [ebp-08]
:00407501 0F9CC0                  setl al
:00407504 EB0D                    jmp 00407513

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004074E8(U)
|
:00407506 8B45EC                  mov eax, dword ptr [ebp-14]
:00407509 33C9                    xor ecx, ecx
:0040750B 3B45F8                  cmp eax, dword ptr [ebp-08]
:0040750E 0F94C1                  sete cl
:00407511 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040735D(U), :00407386(U), :004073A6(U), :004073CF(U), :00407467(U)
|:004074F7(U), :00407504(U)
|
:00407513 8BE5                    mov esp, ebp
:00407515 5D                      pop ebp
:00407516 C3                      ret



* Referenced by a CALL at Address:
|:00406D3D   
|
:00407517 55                      push ebp
:00407518 8BEC                    mov ebp, esp
:0040751A 83EC14                  sub esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040751D 6A03                    push 00000003
:0040751F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407522 E8664F0000              call 0040C48D
:00407527 668945F0                mov word ptr [ebp-10], ax
:0040752B 8B45F0                  mov eax, dword ptr [ebp-10]
:0040752E 25FFFF0000              and eax, 0000FFFF
:00407533 3D00800000              cmp eax, 00008000
:00407538 750A                    jne 00407544

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040753A B805000000              mov eax, 00000005
:0040753F E9D9000000              jmp 0040761D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407538(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00407544 6A04                    push 00000004
:00407546 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407549 E83F4F0000              call 0040C48D
:0040754E 8945FC                  mov dword ptr [ebp-04], eax
:00407551 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:00407558 750A                    jne 00407564

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040755A B805000000              mov eax, 00000005
:0040755F E9B9000000              jmp 0040761D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407558(C)
|
:00407564 6A24                    push 00000024
:00407566 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407569 E81F4F0000              call 0040C48D
:0040756E 668945F4                mov word ptr [ebp-0C], ax
:00407572 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407575 81E1FFFF0000            and ecx, 0000FFFF
:0040757B 81F900800000            cmp ecx, 00008000
:00407581 750A                    jne 0040758D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407583 B805000000              mov eax, 00000005
:00407588 E990000000              jmp 0040761D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407581(C)
|
:0040758D C745F800000000          mov [ebp-08], 00000000
:00407594 8B55F0                  mov edx, dword ptr [ebp-10]
:00407597 81E2FFFF0000            and edx, 0000FFFF
:0040759D 85D2                    test edx, edx
:0040759F 7419                    je 004075BA
:004075A1 6A01                    push 00000001
:004075A3 B9784E4B00              mov ecx, 004B4E78
:004075A8 E8DE7F0500              call 0045F58B
:004075AD 25FF000000              and eax, 000000FF
:004075B2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004075B5 03C8                    add ecx, eax
:004075B7 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040759F(C)
|
:004075BA 8B55F0                  mov edx, dword ptr [ebp-10]
:004075BD 81E2FFFF0000            and edx, 0000FFFF
:004075C3 83FA01                  cmp edx, 00000001
:004075C6 7419                    je 004075E1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004075C8 6A02                    push 00000002
:004075CA B9784E4B00              mov ecx, 004B4E78
:004075CF E8B77F0500              call 0045F58B
:004075D4 25FF000000              and eax, 000000FF
:004075D9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004075DC 03C8                    add ecx, eax
:004075DE 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004075C6(C)
|
:004075E1 8B55F4                  mov edx, dword ptr [ebp-0C]
:004075E4 81E2FFFF0000            and edx, 0000FFFF
:004075EA 8955EC                  mov dword ptr [ebp-14], edx
:004075ED 837DEC00                cmp dword ptr [ebp-14], 00000000
:004075F1 7408                    je 004075FB
:004075F3 837DEC01                cmp dword ptr [ebp-14], 00000001
:004075F7 740D                    je 00407606
:004075F9 EB17                    jmp 00407612

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004075F1(C)
|
:004075FB 8B45F8                  mov eax, dword ptr [ebp-08]
:004075FE 3B45FC                  cmp eax, dword ptr [ebp-04]
:00407601 1BC0                    sbb eax, eax
:00407603 40                      inc eax
:00407604 EB17                    jmp 0040761D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004075F7(C)
|
:00407606 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407609 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:0040760C 1BC0                    sbb eax, eax
:0040760E F7D8                    neg eax
:00407610 EB0B                    jmp 0040761D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004075F9(U)
|
:00407612 8B55F8                  mov edx, dword ptr [ebp-08]
:00407615 33C0                    xor eax, eax
:00407617 3B55FC                  cmp edx, dword ptr [ebp-04]
:0040761A 0F94C0                  sete al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040753F(U), :0040755F(U), :00407588(U), :00407604(U), :00407610(U)
|
:0040761D 8BE5                    mov esp, ebp
:0040761F 5D                      pop ebp
:00407620 C3                      ret



* Referenced by a CALL at Address:
|:00406D4E   
|
:00407621 55                      push ebp
:00407622 8BEC                    mov ebp, esp
:00407624 83EC10                  sub esp, 00000010

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00407627 6A04                    push 00000004
:00407629 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040762C E85C4E0000              call 0040C48D
:00407631 8945F8                  mov dword ptr [ebp-08], eax
:00407634 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040763B 7507                    jne 00407644

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040763D B805000000              mov eax, 00000005
:00407642 EB75                    jmp 004076B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040763B(C)
|
:00407644 6A24                    push 00000024
:00407646 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407649 E83F4E0000              call 0040C48D
:0040764E 668945F4                mov word ptr [ebp-0C], ax
:00407652 8B45F4                  mov eax, dword ptr [ebp-0C]
:00407655 25FFFF0000              and eax, 0000FFFF
:0040765A 3D00800000              cmp eax, 00008000
:0040765F 7507                    jne 00407668

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407661 B805000000              mov eax, 00000005
:00407666 EB51                    jmp 004076B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040765F(C)
|
:00407668 33C9                    xor ecx, ecx
:0040766A 8A0D7A4E4B00            mov cl, byte ptr [004B4E7A]
:00407670 83C101                  add ecx, 00000001
:00407673 894DFC                  mov dword ptr [ebp-04], ecx
:00407676 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407679 81E2FFFF0000            and edx, 0000FFFF
:0040767F 8955F0                  mov dword ptr [ebp-10], edx
:00407682 837DF000                cmp dword ptr [ebp-10], 00000000
:00407686 7408                    je 00407690
:00407688 837DF001                cmp dword ptr [ebp-10], 00000001
:0040768C 7411                    je 0040769F
:0040768E EB1C                    jmp 004076AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407686(C)
|
:00407690 8B45FC                  mov eax, dword ptr [ebp-04]
:00407693 33C9                    xor ecx, ecx
:00407695 3B45F8                  cmp eax, dword ptr [ebp-08]
:00407698 0F9DC1                  setnl cl
:0040769B 8BC1                    mov eax, ecx
:0040769D EB1A                    jmp 004076B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040768C(C)
|
:0040769F 8B55FC                  mov edx, dword ptr [ebp-04]
:004076A2 33C0                    xor eax, eax
:004076A4 3B55F8                  cmp edx, dword ptr [ebp-08]
:004076A7 0F9CC0                  setl al
:004076AA EB0D                    jmp 004076B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040768E(U)
|
:004076AC 8B45FC                  mov eax, dword ptr [ebp-04]
:004076AF 33C9                    xor ecx, ecx
:004076B1 3B45F8                  cmp eax, dword ptr [ebp-08]
:004076B4 0F94C1                  sete cl
:004076B7 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407642(U), :00407666(U), :0040769D(U), :004076AA(U)
|
:004076B9 8BE5                    mov esp, ebp
:004076BB 5D                      pop ebp
:004076BC C3                      ret



* Referenced by a CALL at Address:
|:00406D5F   
|
:004076BD 55                      push ebp
:004076BE 8BEC                    mov ebp, esp
:004076C0 83EC08                  sub esp, 00000008
:004076C3 6A25                    push 00000025
:004076C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004076C8 E8C04D0000              call 0040C48D
:004076CD 668945FC                mov word ptr [ebp-04], ax
:004076D1 8B45FC                  mov eax, dword ptr [ebp-04]
:004076D4 25FFFF0000              and eax, 0000FFFF
:004076D9 3D00800000              cmp eax, 00008000
:004076DE 7507                    jne 004076E7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004076E0 B805000000              mov eax, 00000005
:004076E5 EB2A                    jmp 00407711

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004076DE(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004076E7 6A04                    push 00000004
:004076E9 8D4DF8                  lea ecx, dword ptr [ebp-08]
:004076EC 51                      push ecx
:004076ED 6A00                    push 00000000
:004076EF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004076F2 E824580000              call 0040CF1B
:004076F7 8B55F8                  mov edx, dword ptr [ebp-08]
:004076FA 81E2FFFF0000            and edx, 0000FFFF
:00407700 8B45FC                  mov eax, dword ptr [ebp-04]
:00407703 25FFFF0000              and eax, 0000FFFF
:00407708 33C9                    xor ecx, ecx
:0040770A 3BD0                    cmp edx, eax
:0040770C 0F94C1                  sete cl
:0040770F 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004076E5(U)
|
:00407711 8BE5                    mov esp, ebp
:00407713 5D                      pop ebp
:00407714 C3                      ret



* Referenced by a CALL at Address:
|:00406D70   
|
:00407715 55                      push ebp
:00407716 8BEC                    mov ebp, esp
:00407718 83EC08                  sub esp, 00000008
:0040771B 6A26                    push 00000026
:0040771D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407720 E8684D0000              call 0040C48D
:00407725 668945F8                mov word ptr [ebp-08], ax
:00407729 8B45F8                  mov eax, dword ptr [ebp-08]
:0040772C 25FFFF0000              and eax, 0000FFFF
:00407731 3D00800000              cmp eax, 00008000
:00407736 7507                    jne 0040773F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407738 B805000000              mov eax, 00000005
:0040773D EB2B                    jmp 0040776A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407736(C)
|

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:0040773F 684CC34700              push 0047C34C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00407744 6A02                    push 00000002
:00407746 E8E89C0200              call 00431433
:0040774B 83C408                  add esp, 00000008
:0040774E 8945FC                  mov dword ptr [ebp-04], eax
:00407751 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407754 81E1FFFF0000            and ecx, 0000FFFF
:0040775A 8B55F8                  mov edx, dword ptr [ebp-08]
:0040775D 81E2FFFF0000            and edx, 0000FFFF
:00407763 33C0                    xor eax, eax
:00407765 3BCA                    cmp ecx, edx
:00407767 0F94C0                  sete al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040773D(U)
|
:0040776A 8BE5                    mov esp, ebp
:0040776C 5D                      pop ebp
:0040776D C3                      ret



* Referenced by a CALL at Address:
|:00406D81   
|
:0040776E 55                      push ebp
:0040776F 8BEC                    mov ebp, esp
:00407771 83EC1C                  sub esp, 0000001C
:00407774 C745F001000000          mov [ebp-10], 00000001
:0040777B 6A35                    push 00000035
:0040777D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407780 E8084D0000              call 0040C48D
:00407785 668945FC                mov word ptr [ebp-04], ax
:00407789 8B45FC                  mov eax, dword ptr [ebp-04]
:0040778C 25FFFF0000              and eax, 0000FFFF
:00407791 3D00800000              cmp eax, 00008000
:00407796 750A                    jne 004077A2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407798 B805000000              mov eax, 00000005
:0040779D E9FB000000              jmp 0040789D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407796(C)
|
:004077A2 C745F800000000          mov [ebp-08], 00000000
:004077A9 EB09                    jmp 004077B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407809(U)
|
:004077AB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004077AE 83C101                  add ecx, 00000001
:004077B1 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004077A9(U)
|
:004077B4 8B55FC                  mov edx, dword ptr [ebp-04]
:004077B7 81E2FFFF0000            and edx, 0000FFFF
:004077BD 3955F8                  cmp dword ptr [ebp-08], edx
:004077C0 7D49                    jge 0040780B
:004077C2 6A01                    push 00000001
:004077C4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004077C7 E8C14C0000              call 0040C48D
:004077CC 668945E8                mov word ptr [ebp-18], ax
:004077D0 8B45E8                  mov eax, dword ptr [ebp-18]
:004077D3 25FFFF0000              and eax, 0000FFFF
:004077D8 3D00800000              cmp eax, 00008000
:004077DD 750A                    jne 004077E9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004077DF B805000000              mov eax, 00000005
:004077E4 E9B4000000              jmp 0040789D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004077DD(C)
|
:004077E9 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004077EC 81E1FFFF0000            and ecx, 0000FFFF
:004077F2 51                      push ecx
:004077F3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004077F6 E84D4D0000              call 0040C548
:004077FB F7D8                    neg eax
:004077FD 1BC0                    sbb eax, eax
:004077FF F7D8                    neg eax
:00407801 8B55F0                  mov edx, dword ptr [ebp-10]
:00407804 23D0                    and edx, eax
:00407806 8955F0                  mov dword ptr [ebp-10], edx
:00407809 EBA0                    jmp 004077AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004077C0(C)
|
:0040780B 6A35                    push 00000035
:0040780D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407810 E8784C0000              call 0040C48D
:00407815 668945EC                mov word ptr [ebp-14], ax
:00407819 8B45EC                  mov eax, dword ptr [ebp-14]
:0040781C 25FFFF0000              and eax, 0000FFFF
:00407821 3D00800000              cmp eax, 00008000
:00407826 7507                    jne 0040782F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407828 B805000000              mov eax, 00000005
:0040782D EB6E                    jmp 0040789D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407826(C)
|
:0040782F C745F400000000          mov [ebp-0C], 00000000
:00407836 EB09                    jmp 00407841

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407892(U)
|
:00407838 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040783B 83C101                  add ecx, 00000001
:0040783E 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407836(U)
|
:00407841 8B55EC                  mov edx, dword ptr [ebp-14]
:00407844 81E2FFFF0000            and edx, 0000FFFF
:0040784A 3955F4                  cmp dword ptr [ebp-0C], edx
:0040784D 7D45                    jge 00407894
:0040784F 6A01                    push 00000001
:00407851 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407854 E8344C0000              call 0040C48D
:00407859 668945E4                mov word ptr [ebp-1C], ax
:0040785D 8B45E4                  mov eax, dword ptr [ebp-1C]
:00407860 25FFFF0000              and eax, 0000FFFF
:00407865 3D00800000              cmp eax, 00008000
:0040786A 7507                    jne 00407873

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040786C B805000000              mov eax, 00000005
:00407871 EB2A                    jmp 0040789D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040786A(C)
|
:00407873 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00407876 81E1FFFF0000            and ecx, 0000FFFF
:0040787C 51                      push ecx
:0040787D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407880 E8C34C0000              call 0040C548
:00407885 F7D8                    neg eax
:00407887 1BC0                    sbb eax, eax
:00407889 40                      inc eax
:0040788A 8B55F0                  mov edx, dword ptr [ebp-10]
:0040788D 23D0                    and edx, eax
:0040788F 8955F0                  mov dword ptr [ebp-10], edx
:00407892 EBA4                    jmp 00407838

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040784D(C)
|
:00407894 33C0                    xor eax, eax
:00407896 837DF000                cmp dword ptr [ebp-10], 00000000
:0040789A 0F95C0                  setne al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040779D(U), :004077E4(U), :0040782D(U), :00407871(U)
|
:0040789D 8BE5                    mov esp, ebp
:0040789F 5D                      pop ebp
:004078A0 C3                      ret



* Referenced by a CALL at Address:
|:00406D92   
|
:004078A1 55                      push ebp
:004078A2 8BEC                    mov ebp, esp
:004078A4 83EC18                  sub esp, 00000018
:004078A7 6A28                    push 00000028
:004078A9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004078AC E8DC4B0000              call 0040C48D
:004078B1 668945F4                mov word ptr [ebp-0C], ax
:004078B5 8B45F4                  mov eax, dword ptr [ebp-0C]
:004078B8 25FFFF0000              and eax, 0000FFFF
:004078BD 3D00800000              cmp eax, 00008000
:004078C2 750A                    jne 004078CE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004078C4 B805000000              mov eax, 00000005
:004078C9 E9E5000000              jmp 004079B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004078C2(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004078CE 6A04                    push 00000004
:004078D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004078D3 E8B54B0000              call 0040C48D
:004078D8 8945FC                  mov dword ptr [ebp-04], eax
:004078DB 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:004078E2 750A                    jne 004078EE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004078E4 B805000000              mov eax, 00000005
:004078E9 E9C5000000              jmp 004079B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004078E2(C)
|
:004078EE 6A24                    push 00000024
:004078F0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004078F3 E8954B0000              call 0040C48D
:004078F8 668945F8                mov word ptr [ebp-08], ax
:004078FC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004078FF 81E1FFFF0000            and ecx, 0000FFFF
:00407905 81F900800000            cmp ecx, 00008000
:0040790B 750A                    jne 00407917

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040790D B805000000              mov eax, 00000005
:00407912 E99C000000              jmp 004079B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040790B(C)
|
:00407917 C745F000000000          mov [ebp-10], 00000000
:0040791E 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407921 81E2FFFF0000            and edx, 0000FFFF
:00407927 8955EC                  mov dword ptr [ebp-14], edx
:0040792A 837DEC00                cmp dword ptr [ebp-14], 00000000
:0040792E 740E                    je 0040793E
:00407930 837DEC01                cmp dword ptr [ebp-14], 00000001
:00407934 7417                    je 0040794D
:00407936 837DEC02                cmp dword ptr [ebp-14], 00000002
:0040793A 7425                    je 00407961
:0040793C EB35                    jmp 00407973

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040792E(C)
|
:0040793E B978294B00              mov ecx, 004B2978
:00407943 E898F00200              call 004369E0
:00407948 8945F0                  mov dword ptr [ebp-10], eax
:0040794B EB26                    jmp 00407973

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407934(C)
|
:0040794D B978294B00              mov ecx, 004B2978
:00407952 E8E9DDFFFF              call 00405740
:00407957 25FF000000              and eax, 000000FF
:0040795C 8945F0                  mov dword ptr [ebp-10], eax
:0040795F EB12                    jmp 00407973

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040793A(C)
|
:00407961 B978294B00              mov ecx, 004B2978
:00407966 E80ECCFFFF              call 00404579
:0040796B 25FF000000              and eax, 000000FF
:00407970 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040793C(U), :0040794B(U), :0040795F(U)
|
:00407973 8B45F8                  mov eax, dword ptr [ebp-08]
:00407976 25FFFF0000              and eax, 0000FFFF
:0040797B 8945E8                  mov dword ptr [ebp-18], eax
:0040797E 837DE800                cmp dword ptr [ebp-18], 00000000
:00407982 7408                    je 0040798C
:00407984 837DE801                cmp dword ptr [ebp-18], 00000001
:00407988 740F                    je 00407999
:0040798A EB1A                    jmp 004079A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407982(C)
|
:0040798C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040798F 33C0                    xor eax, eax
:00407991 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:00407994 0F9DC0                  setnl al
:00407997 EB1A                    jmp 004079B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407988(C)
|
:00407999 8B55F0                  mov edx, dword ptr [ebp-10]
:0040799C 33C0                    xor eax, eax
:0040799E 3B55FC                  cmp edx, dword ptr [ebp-04]
:004079A1 0F9CC0                  setl al
:004079A4 EB0D                    jmp 004079B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040798A(U)
|
:004079A6 8B45F0                  mov eax, dword ptr [ebp-10]
:004079A9 33C9                    xor ecx, ecx
:004079AB 3B45FC                  cmp eax, dword ptr [ebp-04]
:004079AE 0F94C1                  sete cl
:004079B1 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004078C9(U), :004078E9(U), :00407912(U), :00407997(U), :004079A4(U)
|
:004079B3 8BE5                    mov esp, ebp
:004079B5 5D                      pop ebp
:004079B6 C3                      ret



* Referenced by a CALL at Address:
|:00406DA3   
|
:004079B7 55                      push ebp
:004079B8 8BEC                    mov ebp, esp
:004079BA 83EC14                  sub esp, 00000014
:004079BD 6A1C                    push 0000001C
:004079BF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004079C2 E8C64A0000              call 0040C48D
:004079C7 668945FC                mov word ptr [ebp-04], ax
:004079CB 8B45FC                  mov eax, dword ptr [ebp-04]
:004079CE 25FFFF0000              and eax, 0000FFFF
:004079D3 3D00800000              cmp eax, 00008000
:004079D8 750A                    jne 004079E4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004079DA B805000000              mov eax, 00000005
:004079DF E990000000              jmp 00407A74

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004079D8(C)
|
:004079E4 6A0C                    push 0000000C
:004079E6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004079E9 E89F4A0000              call 0040C48D
:004079EE 668945F4                mov word ptr [ebp-0C], ax
:004079F2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004079F5 81E1FFFF0000            and ecx, 0000FFFF
:004079FB 81F900800000            cmp ecx, 00008000
:00407A01 7507                    jne 00407A0A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407A03 B805000000              mov eax, 00000005
:00407A08 EB6A                    jmp 00407A74

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407A01(C)
|
:00407A0A B978294B00              mov ecx, 004B2978
:00407A0F E89C4E0000              call 0040C8B0
:00407A14 83E040                  and eax, 00000040
:00407A17 85C0                    test eax, eax
:00407A19 7457                    je 00407A72
:00407A1B C745F8D8174B00          mov [ebp-08], 004B17D8
:00407A22 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407A25 E8664E0000              call 0040C890
:00407A2A 25FF000000              and eax, 000000FF
:00407A2F 8945EC                  mov dword ptr [ebp-14], eax
:00407A32 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407A35 E8A6A50300              call 00441FE0
:00407A3A 25FF000000              and eax, 000000FF
:00407A3F 8945F0                  mov dword ptr [ebp-10], eax
:00407A42 E81C9B0000              call 00411563
:00407A47 25FF000000              and eax, 000000FF
:00407A4C 85C0                    test eax, eax
:00407A4E 7522                    jne 00407A72
:00407A50 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407A53 81E2FFFF0000            and edx, 0000FFFF
:00407A59 3955F0                  cmp dword ptr [ebp-10], edx
:00407A5C 7514                    jne 00407A72
:00407A5E 8B45FC                  mov eax, dword ptr [ebp-04]
:00407A61 25FFFF0000              and eax, 0000FFFF
:00407A66 3945EC                  cmp dword ptr [ebp-14], eax
:00407A69 7507                    jne 00407A72
:00407A6B B801000000              mov eax, 00000001
:00407A70 EB02                    jmp 00407A74

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407A19(C), :00407A4E(C), :00407A5C(C), :00407A69(C)
|
:00407A72 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004079DF(U), :00407A08(U), :00407A70(U)
|
:00407A74 8BE5                    mov esp, ebp
:00407A76 5D                      pop ebp
:00407A77 C3                      ret



* Referenced by a CALL at Address:
|:00406DB4   
|
:00407A78 55                      push ebp
:00407A79 8BEC                    mov ebp, esp
:00407A7B 83EC08                  sub esp, 00000008

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00407A7E 6A02                    push 00000002
:00407A80 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407A83 E8054A0000              call 0040C48D
:00407A88 668945F8                mov word ptr [ebp-08], ax
:00407A8C 8B45F8                  mov eax, dword ptr [ebp-08]
:00407A8F 25FFFF0000              and eax, 0000FFFF
:00407A94 3D00800000              cmp eax, 00008000
:00407A99 7507                    jne 00407AA2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407A9B B805000000              mov eax, 00000005
:00407AA0 EB3F                    jmp 00407AE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407A99(C)
|
:00407AA2 B978294B00              mov ecx, 004B2978
:00407AA7 E8044E0000              call 0040C8B0
:00407AAC 83E020                  and eax, 00000020
:00407AAF 85C0                    test eax, eax
:00407AB1 742C                    je 00407ADF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00407AB3 6A04                    push 00000004
:00407AB5 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00407AB8 51                      push ecx
:00407AB9 6A01                    push 00000001
:00407ABB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407ABE E858540000              call 0040CF1B
:00407AC3 8B55FC                  mov edx, dword ptr [ebp-04]
:00407AC6 81E2FFFF0000            and edx, 0000FFFF
:00407ACC 8B45F8                  mov eax, dword ptr [ebp-08]
:00407ACF 25FFFF0000              and eax, 0000FFFF
:00407AD4 33C9                    xor ecx, ecx
:00407AD6 3BD0                    cmp edx, eax
:00407AD8 0F94C1                  sete cl
:00407ADB 8BC1                    mov eax, ecx
:00407ADD EB02                    jmp 00407AE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407AB1(C)
|
:00407ADF 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407AA0(U), :00407ADD(U)
|
:00407AE1 8BE5                    mov esp, ebp
:00407AE3 5D                      pop ebp
:00407AE4 C3                      ret



* Referenced by a CALL at Address:
|:00406DC5   
|
:00407AE5 55                      push ebp
:00407AE6 8BEC                    mov ebp, esp
:00407AE8 83EC24                  sub esp, 00000024

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00407AEB 6A02                    push 00000002
:00407AED 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407AF0 E898490000              call 0040C48D
:00407AF5 668945F8                mov word ptr [ebp-08], ax
:00407AF9 8B45F8                  mov eax, dword ptr [ebp-08]
:00407AFC 25FFFF0000              and eax, 0000FFFF
:00407B01 3D00800000              cmp eax, 00008000
:00407B06 750A                    jne 00407B12

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407B08 B805000000              mov eax, 00000005
:00407B0D E98F020000              jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407B06(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00407B12 6A02                    push 00000002
:00407B14 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407B17 E871490000              call 0040C48D
:00407B1C 668945EC                mov word ptr [ebp-14], ax
:00407B20 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407B23 81E1FFFF0000            and ecx, 0000FFFF
:00407B29 81F900800000            cmp ecx, 00008000
:00407B2F 750A                    jne 00407B3B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407B31 B805000000              mov eax, 00000005
:00407B36 E966020000              jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407B2F(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00407B3B 6A08                    push 00000008
:00407B3D 8D55F0                  lea edx, dword ptr [ebp-10]
:00407B40 52                      push edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00407B41 6A02                    push 00000002
:00407B43 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407B46 E8D0530000              call 0040CF1B
:00407B4B E8229A0000              call 00411572
:00407B50 85C0                    test eax, eax
:00407B52 7507                    jne 00407B5B
:00407B54 33C0                    xor eax, eax
:00407B56 E946020000              jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407B52(C)
|
:00407B5B 8B45F8                  mov eax, dword ptr [ebp-08]
:00407B5E 25FFFF0000              and eax, 0000FFFF
:00407B63 3D20030000              cmp eax, 00000320
:00407B68 7D7E                    jge 00407BE8
:00407B6A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407B6D 81E1FFFF0000            and ecx, 0000FFFF
:00407B73 81F920030000            cmp ecx, 00000320
:00407B79 7D6D                    jge 00407BE8
:00407B7B 8B55F0                  mov edx, dword ptr [ebp-10]
:00407B7E 81E2FFFF0000            and edx, 0000FFFF
:00407B84 8B45F8                  mov eax, dword ptr [ebp-08]
:00407B87 25FFFF0000              and eax, 0000FFFF
:00407B8C 3BD0                    cmp edx, eax
:00407B8E 7516                    jne 00407BA6
:00407B90 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407B93 81E1FFFF0000            and ecx, 0000FFFF
:00407B99 8B55EC                  mov edx, dword ptr [ebp-14]
:00407B9C 81E2FFFF0000            and edx, 0000FFFF
:00407BA2 3BCA                    cmp ecx, edx
:00407BA4 7433                    je 00407BD9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407B8E(C)
|
:00407BA6 8B45F0                  mov eax, dword ptr [ebp-10]
:00407BA9 25FFFF0000              and eax, 0000FFFF
:00407BAE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407BB1 81E1FFFF0000            and ecx, 0000FFFF
:00407BB7 3BC1                    cmp eax, ecx
:00407BB9 7515                    jne 00407BD0
:00407BBB 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407BBE 81E2FFFF0000            and edx, 0000FFFF
:00407BC4 8B45F8                  mov eax, dword ptr [ebp-08]
:00407BC7 25FFFF0000              and eax, 0000FFFF
:00407BCC 3BD0                    cmp edx, eax
:00407BCE 7409                    je 00407BD9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407BB9(C)
|
:00407BD0 C745E400000000          mov [ebp-1C], 00000000
:00407BD7 EB07                    jmp 00407BE0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407BA4(C), :00407BCE(C)
|
:00407BD9 C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407BD7(U)
|
:00407BE0 8B45E4                  mov eax, dword ptr [ebp-1C]
:00407BE3 E9B9010000              jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407B68(C), :00407B79(C)
|
:00407BE8 817DF020030000          cmp dword ptr [ebp-10], 00000320
:00407BEF 7E07                    jle 00407BF8
:00407BF1 33C0                    xor eax, eax
:00407BF3 E9A9010000              jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407BEF(C)
|
:00407BF8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00407BFB 6BC950                  imul ecx, 00000050
:00407BFE 81C1787F4900            add ecx, 00497F78
:00407C04 E8EC350600              call 0046B1F5
:00407C09 8845FC                  mov byte ptr [ebp-04], al
:00407C0C 817DF420030000          cmp dword ptr [ebp-0C], 00000320
:00407C13 7E07                    jle 00407C1C
:00407C15 33C0                    xor eax, eax
:00407C17 E985010000              jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C13(C)
|
:00407C1C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407C1F 6BC950                  imul ecx, 00000050
:00407C22 81C1787F4900            add ecx, 00497F78
:00407C28 E8C8350600              call 0046B1F5
:00407C2D 8845E8                  mov byte ptr [ebp-18], al
:00407C30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407C33 81E1FF000000            and ecx, 000000FF
:00407C39 81F9FF000000            cmp ecx, 000000FF
:00407C3F 7411                    je 00407C52
:00407C41 8B55E8                  mov edx, dword ptr [ebp-18]
:00407C44 81E2FF000000            and edx, 000000FF
:00407C4A 81FAFF000000            cmp edx, 000000FF
:00407C50 7507                    jne 00407C59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C3F(C)
|
:00407C52 33C0                    xor eax, eax
:00407C54 E948010000              jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C50(C)
|
:00407C59 8B45F8                  mov eax, dword ptr [ebp-08]
:00407C5C 25FFFF0000              and eax, 0000FFFF
:00407C61 8945E0                  mov dword ptr [ebp-20], eax
:00407C64 817DE000040000          cmp dword ptr [ebp-20], 00000400
:00407C6B 741B                    je 00407C88
:00407C6D 817DE001040000          cmp dword ptr [ebp-20], 00000401
:00407C74 7455                    je 00407CCB
:00407C76 817DE002040000          cmp dword ptr [ebp-20], 00000402
:00407C7D 0F84B6000000            je 00407D39
:00407C83 E917010000              jmp 00407D9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C6B(C)
|
:00407C88 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407C8B 81E1FFFF0000            and ecx, 0000FFFF
:00407C91 8B55EC                  mov edx, dword ptr [ebp-14]
:00407C94 81E2FFFF0000            and edx, 0000FFFF
:00407C9A 3BCA                    cmp ecx, edx
:00407C9C 741E                    je 00407CBC
:00407C9E 8B45F0                  mov eax, dword ptr [ebp-10]
:00407CA1 25FFFF0000              and eax, 0000FFFF
:00407CA6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407CA9 81E1FFFF0000            and ecx, 0000FFFF
:00407CAF 3BC1                    cmp eax, ecx
:00407CB1 7409                    je 00407CBC
:00407CB3 C745DC00000000          mov [ebp-24], 00000000
:00407CBA EB07                    jmp 00407CC3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407C9C(C), :00407CB1(C)
|
:00407CBC C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407CBA(U)
|
:00407CC3 8B45DC                  mov eax, dword ptr [ebp-24]
:00407CC6 E9D6000000              jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C74(C)
|
:00407CCB 8B55F4                  mov edx, dword ptr [ebp-0C]
:00407CCE 81E2FFFF0000            and edx, 0000FFFF
:00407CD4 8B45EC                  mov eax, dword ptr [ebp-14]
:00407CD7 25FFFF0000              and eax, 0000FFFF
:00407CDC 3BD0                    cmp edx, eax
:00407CDE 7522                    jne 00407D02
:00407CE0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407CE3 81E1FF000000            and ecx, 000000FF
:00407CE9 6BC924                  imul ecx, 00000024
:00407CEC 81C1B83B4B00            add ecx, 004B3BB8
:00407CF2 E8194C0000              call 0040C910
:00407CF7 F7D8                    neg eax
:00407CF9 1BC0                    sbb eax, eax
:00407CFB F7D8                    neg eax
:00407CFD E99F000000              jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407CDE(C)
|
:00407D02 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00407D05 81E1FFFF0000            and ecx, 0000FFFF
:00407D0B 8B55EC                  mov edx, dword ptr [ebp-14]
:00407D0E 81E2FFFF0000            and edx, 0000FFFF
:00407D14 3BCA                    cmp ecx, edx
:00407D16 751F                    jne 00407D37
:00407D18 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00407D1B 81E1FF000000            and ecx, 000000FF
:00407D21 6BC924                  imul ecx, 00000024
:00407D24 81C1B83B4B00            add ecx, 004B3BB8
:00407D2A E8E14B0000              call 0040C910
:00407D2F F7D8                    neg eax
:00407D31 1BC0                    sbb eax, eax
:00407D33 F7D8                    neg eax
:00407D35 EB6A                    jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407D16(C)
|
:00407D37 EB66                    jmp 00407D9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407C7D(C)
|
:00407D39 8B45F4                  mov eax, dword ptr [ebp-0C]
:00407D3C 25FFFF0000              and eax, 0000FFFF
:00407D41 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00407D44 81E1FFFF0000            and ecx, 0000FFFF
:00407D4A 3BC1                    cmp eax, ecx
:00407D4C 751E                    jne 00407D6C
:00407D4E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407D51 81E1FF000000            and ecx, 000000FF
:00407D57 6BC924                  imul ecx, 00000024
:00407D5A 81C1B83B4B00            add ecx, 004B3BB8
:00407D60 E8AB4B0000              call 0040C910
:00407D65 F7D8                    neg eax
:00407D67 1BC0                    sbb eax, eax
:00407D69 40                      inc eax
:00407D6A EB35                    jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407D4C(C)
|
:00407D6C 8B55F0                  mov edx, dword ptr [ebp-10]
:00407D6F 81E2FFFF0000            and edx, 0000FFFF
:00407D75 8B45EC                  mov eax, dword ptr [ebp-14]
:00407D78 25FFFF0000              and eax, 0000FFFF
:00407D7D 3BD0                    cmp edx, eax
:00407D7F 751E                    jne 00407D9F
:00407D81 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00407D84 81E1FF000000            and ecx, 000000FF
:00407D8A 6BC924                  imul ecx, 00000024
:00407D8D 81C1B83B4B00            add ecx, 004B3BB8
:00407D93 E8784B0000              call 0040C910
:00407D98 F7D8                    neg eax
:00407D9A 1BC0                    sbb eax, eax
:00407D9C 40                      inc eax
:00407D9D EB02                    jmp 00407DA1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407C83(U), :00407D37(U), :00407D7F(C)
|
:00407D9F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407B0D(U), :00407B36(U), :00407B56(U), :00407BE3(U), :00407BF3(U)
|:00407C17(U), :00407C54(U), :00407CC6(U), :00407CFD(U), :00407D35(U)
|:00407D6A(U), :00407D9D(U)
|
:00407DA1 8BE5                    mov esp, ebp
:00407DA3 5D                      pop ebp
:00407DA4 C3                      ret



* Referenced by a CALL at Address:
|:00406DD6   
|
:00407DA5 55                      push ebp
:00407DA6 8BEC                    mov ebp, esp
:00407DA8 83EC0C                  sub esp, 0000000C
:00407DAB 6A0C                    push 0000000C
:00407DAD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407DB0 E8D8460000              call 0040C48D
:00407DB5 668945F4                mov word ptr [ebp-0C], ax
:00407DB9 8B45F4                  mov eax, dword ptr [ebp-0C]
:00407DBC 25FFFF0000              and eax, 0000FFFF
:00407DC1 3D00800000              cmp eax, 00008000
:00407DC6 7507                    jne 00407DCF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407DC8 B805000000              mov eax, 00000005
:00407DCD EB4F                    jmp 00407E1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407DC6(C)
|
:00407DCF C745F8D8174B00          mov [ebp-08], 004B17D8
:00407DD6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407DD9 E802A20300              call 00441FE0
:00407DDE 25FF000000              and eax, 000000FF
:00407DE3 8945FC                  mov dword ptr [ebp-04], eax
:00407DE6 B978294B00              mov ecx, 004B2978
:00407DEB E8C04A0000              call 0040C8B0
:00407DF0 2580000000              and eax, 00000080
:00407DF5 85C0                    test eax, eax
:00407DF7 7423                    je 00407E1C
:00407DF9 E865970000              call 00411563
:00407DFE 25FF000000              and eax, 000000FF
:00407E03 85C0                    test eax, eax
:00407E05 7515                    jne 00407E1C
:00407E07 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407E0A 81E1FFFF0000            and ecx, 0000FFFF
:00407E10 394DFC                  cmp dword ptr [ebp-04], ecx
:00407E13 7507                    jne 00407E1C
:00407E15 B801000000              mov eax, 00000001
:00407E1A EB02                    jmp 00407E1E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407DF7(C), :00407E05(C), :00407E13(C)
|
:00407E1C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407DCD(U), :00407E1A(U)
|
:00407E1E 8BE5                    mov esp, ebp
:00407E20 5D                      pop ebp
:00407E21 C3                      ret



* Referenced by a CALL at Address:
|:00406DE7   
|
:00407E22 55                      push ebp
:00407E23 8BEC                    mov ebp, esp
:00407E25 83EC30                  sub esp, 00000030
:00407E28 C645E4FF                mov [ebp-1C], FF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00407E2C 6A02                    push 00000002
:00407E2E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407E31 E857460000              call 0040C48D
:00407E36 668945FC                mov word ptr [ebp-04], ax
:00407E3A 8B45FC                  mov eax, dword ptr [ebp-04]
:00407E3D 25FFFF0000              and eax, 0000FFFF
:00407E42 3D00800000              cmp eax, 00008000
:00407E47 750A                    jne 00407E53

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407E49 B805000000              mov eax, 00000005
:00407E4E E98D020000              jmp 004080E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407E47(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00407E53 6A04                    push 00000004
:00407E55 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407E58 E830460000              call 0040C48D
:00407E5D 8945EC                  mov dword ptr [ebp-14], eax
:00407E60 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:00407E67 750A                    jne 00407E73

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407E69 B805000000              mov eax, 00000005
:00407E6E E96D020000              jmp 004080E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407E67(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00407E73 6A04                    push 00000004
:00407E75 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407E78 E810460000              call 0040C48D
:00407E7D 8945E8                  mov dword ptr [ebp-18], eax
:00407E80 817DE800000080          cmp dword ptr [ebp-18], 80000000
:00407E87 750A                    jne 00407E93

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00407E89 B805000000              mov eax, 00000005
:00407E8E E94D020000              jmp 004080E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407E87(C)
|
:00407E93 6A0C                    push 0000000C
:00407E95 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00407E98 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00407E99 6A03                    push 00000003
:00407E9B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00407E9E E878500000              call 0040CF1B
:00407EA3 8B55FC                  mov edx, dword ptr [ebp-04]
:00407EA6 81E2FFFF0000            and edx, 0000FFFF
:00407EAC 85D2                    test edx, edx
:00407EAE 7C09                    jl 00407EB9
:00407EB0 E8BD960000              call 00411572
:00407EB5 85C0                    test eax, eax
:00407EB7 7507                    jne 00407EC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407EAE(C)
|
:00407EB9 33C0                    xor eax, eax
:00407EBB E920020000              jmp 004080E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407EB7(C)
|
:00407EC0 8B45FC                  mov eax, dword ptr [ebp-04]
:00407EC3 25FFFF0000              and eax, 0000FFFF
:00407EC8 3D20030000              cmp eax, 00000320
:00407ECD 7E29                    jle 00407EF8
:00407ECF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00407ED2 81E1FFFF0000            and ecx, 0000FFFF
:00407ED8 81F900040000            cmp ecx, 00000400
:00407EDE 7C11                    jl 00407EF1
:00407EE0 8B55FC                  mov edx, dword ptr [ebp-04]
:00407EE3 81E2FFFF0000            and edx, 0000FFFF
:00407EE9 81FA02040000            cmp edx, 00000402
:00407EEF 7E07                    jle 00407EF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407EDE(C)
|
:00407EF1 33C0                    xor eax, eax
:00407EF3 E9E8010000              jmp 004080E0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407ECD(C), :00407EEF(C)
|
:00407EF8 8B45FC                  mov eax, dword ptr [ebp-04]
:00407EFB 25FFFF0000              and eax, 0000FFFF
:00407F00 8945E0                  mov dword ptr [ebp-20], eax
:00407F03 817DE000040000          cmp dword ptr [ebp-20], 00000400
:00407F0A 741B                    je 00407F27
:00407F0C 817DE001040000          cmp dword ptr [ebp-20], 00000401
:00407F13 743A                    je 00407F4F
:00407F15 817DE002040000          cmp dword ptr [ebp-20], 00000402
:00407F1C 0F84DA000000            je 00407FFC
:00407F22 E97C010000              jmp 004080A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407F0A(C)
|
:00407F27 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00407F2A 3B4DEC                  cmp ecx, dword ptr [ebp-14]
:00407F2D 7511                    jne 00407F40
:00407F2F 8B55F8                  mov edx, dword ptr [ebp-08]
:00407F32 3B55E8                  cmp edx, dword ptr [ebp-18]
:00407F35 7509                    jne 00407F40
:00407F37 C745DC01000000          mov [ebp-24], 00000001
:00407F3E EB07                    jmp 00407F47

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407F2D(C), :00407F35(C)
|
:00407F40 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407F3E(U)
|
:00407F47 8B45DC                  mov eax, dword ptr [ebp-24]
:00407F4A E991010000              jmp 004080E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407F13(C)
|
:00407F4F 837DF400                cmp dword ptr [ebp-0C], 00000000
:00407F53 0F8C9E000000            jl 00407FF7
:00407F59 837DF800                cmp dword ptr [ebp-08], 00000000
:00407F5D 0F8C94000000            jl 00407FF7
:00407F63 33C0                    xor eax, eax
:00407F65 A0C44E4B00              mov al, byte ptr [004B4EC4]
:00407F6A 3945F4                  cmp dword ptr [ebp-0C], eax
:00407F6D 0F8D84000000            jnl 00407FF7
:00407F73 33C9                    xor ecx, ecx
:00407F75 8A0DC54E4B00            mov cl, byte ptr [004B4EC5]
:00407F7B 394DF8                  cmp dword ptr [ebp-08], ecx
:00407F7E 7D77                    jge 00407FF7
:00407F80 837DF000                cmp dword ptr [ebp-10], 00000000
:00407F84 7C71                    jl 00407FF7
:00407F86 817DF020030000          cmp dword ptr [ebp-10], 00000320
:00407F8D 7D68                    jge 00407FF7
:00407F8F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00407F92 6BC950                  imul ecx, 00000050
:00407F95 81C1787F4900            add ecx, 00497F78
:00407F9B E855320600              call 0046B1F5
:00407FA0 8845E4                  mov byte ptr [ebp-1C], al
:00407FA3 8B55E4                  mov edx, dword ptr [ebp-1C]
:00407FA6 81E2FF000000            and edx, 000000FF
:00407FAC 81FAFF000000            cmp edx, 000000FF
:00407FB2 7443                    je 00407FF7
:00407FB4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00407FB7 81E1FF000000            and ecx, 000000FF
:00407FBD 6BC924                  imul ecx, 00000024
:00407FC0 81C1B83B4B00            add ecx, 004B3BB8
:00407FC6 E845490000              call 0040C910
:00407FCB 85C0                    test eax, eax
:00407FCD 7428                    je 00407FF7
:00407FCF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00407FD2 3B45EC                  cmp eax, dword ptr [ebp-14]
:00407FD5 7511                    jne 00407FE8
:00407FD7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00407FDA 3B4DE8                  cmp ecx, dword ptr [ebp-18]
:00407FDD 7509                    jne 00407FE8
:00407FDF C745D801000000          mov [ebp-28], 00000001
:00407FE6 EB07                    jmp 00407FEF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407FD5(C), :00407FDD(C)
|
:00407FE8 C745D800000000          mov [ebp-28], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407FE6(U)
|
:00407FEF 8B45D8                  mov eax, dword ptr [ebp-28]
:00407FF2 E9E9000000              jmp 004080E0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407F53(C), :00407F5D(C), :00407F6D(C), :00407F7E(C), :00407F84(C)
|:00407F8D(C), :00407FB2(C), :00407FCD(C)
|
:00407FF7 E9E2000000              jmp 004080DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407F1C(C)
|
:00407FFC 837DF400                cmp dword ptr [ebp-0C], 00000000
:00408000 0F8C9B000000            jl 004080A1
:00408006 837DF800                cmp dword ptr [ebp-08], 00000000
:0040800A 0F8C91000000            jl 004080A1
:00408010 33D2                    xor edx, edx
:00408012 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:00408018 3955F4                  cmp dword ptr [ebp-0C], edx
:0040801B 0F8D80000000            jnl 004080A1
:00408021 33C0                    xor eax, eax
:00408023 A0C54E4B00              mov al, byte ptr [004B4EC5]
:00408028 3945F8                  cmp dword ptr [ebp-08], eax
:0040802B 7D74                    jge 004080A1
:0040802D 837DF000                cmp dword ptr [ebp-10], 00000000
:00408031 7C6E                    jl 004080A1
:00408033 817DF020030000          cmp dword ptr [ebp-10], 00000320
:0040803A 7D65                    jge 004080A1
:0040803C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040803F 6BC950                  imul ecx, 00000050
:00408042 81C1787F4900            add ecx, 00497F78
:00408048 E8A8310600              call 0046B1F5
:0040804D 8845E4                  mov byte ptr [ebp-1C], al
:00408050 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00408053 81E1FF000000            and ecx, 000000FF
:00408059 81F9FF000000            cmp ecx, 000000FF
:0040805F 7440                    je 004080A1
:00408061 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00408064 81E1FF000000            and ecx, 000000FF
:0040806A 6BC924                  imul ecx, 00000024
:0040806D 81C1B83B4B00            add ecx, 004B3BB8
:00408073 E898480000              call 0040C910
:00408078 85C0                    test eax, eax
:0040807A 7525                    jne 004080A1
:0040807C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040807F 3B55EC                  cmp edx, dword ptr [ebp-14]
:00408082 7511                    jne 00408095
:00408084 8B45F8                  mov eax, dword ptr [ebp-08]
:00408087 3B45E8                  cmp eax, dword ptr [ebp-18]
:0040808A 7509                    jne 00408095
:0040808C C745D401000000          mov [ebp-2C], 00000001
:00408093 EB07                    jmp 0040809C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408082(C), :0040808A(C)
|
:00408095 C745D400000000          mov [ebp-2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408093(U)
|
:0040809C 8B45D4                  mov eax, dword ptr [ebp-2C]
:0040809F EB3F                    jmp 004080E0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408000(C), :0040800A(C), :0040801B(C), :0040802B(C), :00408031(C)
|:0040803A(C), :0040805F(C), :0040807A(C)
|
:004080A1 EB3B                    jmp 004080DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00407F22(U)
|
:004080A3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004080A6 81E1FFFF0000            and ecx, 0000FFFF
:004080AC 8B55FC                  mov edx, dword ptr [ebp-04]
:004080AF 81E2FFFF0000            and edx, 0000FFFF
:004080B5 3BCA                    cmp ecx, edx
:004080B7 7519                    jne 004080D2
:004080B9 8B45F4                  mov eax, dword ptr [ebp-0C]
:004080BC 3B45EC                  cmp eax, dword ptr [ebp-14]
:004080BF 7511                    jne 004080D2
:004080C1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004080C4 3B4DE8                  cmp ecx, dword ptr [ebp-18]
:004080C7 7509                    jne 004080D2
:004080C9 C745D001000000          mov [ebp-30], 00000001
:004080D0 EB07                    jmp 004080D9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004080B7(C), :004080BF(C), :004080C7(C)
|
:004080D2 C745D000000000          mov [ebp-30], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004080D0(U)
|
:004080D9 8B45D0                  mov eax, dword ptr [ebp-30]
:004080DC EB02                    jmp 004080E0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407FF7(U), :004080A1(U)
|
:004080DE 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00407E4E(U), :00407E6E(U), :00407E8E(U), :00407EBB(U), :00407EF3(U)
|:00407F4A(U), :00407FF2(U), :0040809F(U), :004080DC(U)
|
:004080E0 8BE5                    mov esp, ebp
:004080E2 5D                      pop ebp
:004080E3 C3                      ret



* Referenced by a CALL at Address:
|:00406DF8   
|
:004080E4 55                      push ebp
:004080E5 8BEC                    mov ebp, esp
:004080E7 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004080E8 6A04                    push 00000004
:004080EA 8D45FC                  lea eax, dword ptr [ebp-04]
:004080ED 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004080EE 6A05                    push 00000005
:004080F0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004080F3 E8234E0000              call 0040CF1B
:004080F8 33C0                    xor eax, eax
:004080FA 837DFC01                cmp dword ptr [ebp-04], 00000001
:004080FE 0F94C0                  sete al
:00408101 8BE5                    mov esp, ebp
:00408103 5D                      pop ebp
:00408104 C3                      ret



* Referenced by a CALL at Address:
|:00406E09   
|
:00408105 55                      push ebp
:00408106 8BEC                    mov ebp, esp
:00408108 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408109 6A04                    push 00000004
:0040810B 8D45FC                  lea eax, dword ptr [ebp-04]
:0040810E 50                      push eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:0040810F 6A06                    push 00000006
:00408111 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408114 E8024E0000              call 0040CF1B
:00408119 33C0                    xor eax, eax
:0040811B 837DFC01                cmp dword ptr [ebp-04], 00000001
:0040811F 0F94C0                  sete al
:00408122 8BE5                    mov esp, ebp
:00408124 5D                      pop ebp
:00408125 C3                      ret



* Referenced by a CALL at Address:
|:00406E1A   
|
:00408126 55                      push ebp
:00408127 8BEC                    mov ebp, esp
:00408129 83EC28                  sub esp, 00000028
:0040812C C645E0FF                mov [ebp-20], FF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00408130 6A02                    push 00000002
:00408132 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408135 E853430000              call 0040C48D
:0040813A 668945FC                mov word ptr [ebp-04], ax
:0040813E 8B45FC                  mov eax, dword ptr [ebp-04]
:00408141 25FFFF0000              and eax, 0000FFFF
:00408146 3D00800000              cmp eax, 00008000
:0040814B 750A                    jne 00408157

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040814D B805000000              mov eax, 00000005
:00408152 E9FE020000              jmp 00408455

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040814B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408157 6A04                    push 00000004
:00408159 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040815C E82C430000              call 0040C48D
:00408161 8945E4                  mov dword ptr [ebp-1C], eax
:00408164 817DE400000080          cmp dword ptr [ebp-1C], 80000000
:0040816B 750A                    jne 00408177

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040816D B805000000              mov eax, 00000005
:00408172 E9DE020000              jmp 00408455

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040816B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408177 6A04                    push 00000004
:00408179 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040817C E80C430000              call 0040C48D
:00408181 8945DC                  mov dword ptr [ebp-24], eax
:00408184 817DDC00000080          cmp dword ptr [ebp-24], 80000000
:0040818B 750A                    jne 00408197

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040818D B805000000              mov eax, 00000005
:00408192 E9BE020000              jmp 00408455

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040818B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408197 6A04                    push 00000004
:00408199 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040819C E8EC420000              call 0040C48D
:004081A1 8945F8                  mov dword ptr [ebp-08], eax
:004081A4 817DF800000080          cmp dword ptr [ebp-08], 80000000
:004081AB 750A                    jne 004081B7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004081AD B805000000              mov eax, 00000005
:004081B2 E99E020000              jmp 00408455

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004081AB(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004081B7 6A04                    push 00000004
:004081B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004081BC E8CC420000              call 0040C48D
:004081C1 8945F4                  mov dword ptr [ebp-0C], eax
:004081C4 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:004081CB 750A                    jne 004081D7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004081CD B805000000              mov eax, 00000005
:004081D2 E97E020000              jmp 00408455

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004081CB(C)
|
:004081D7 6A0C                    push 0000000C
:004081D9 8D4DE8                  lea ecx, dword ptr [ebp-18]
:004081DC 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004081DD 6A03                    push 00000003
:004081DF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004081E2 E8344D0000              call 0040CF1B
:004081E7 8B55FC                  mov edx, dword ptr [ebp-04]
:004081EA 81E2FFFF0000            and edx, 0000FFFF
:004081F0 85D2                    test edx, edx
:004081F2 7C09                    jl 004081FD
:004081F4 E879930000              call 00411572
:004081F9 85C0                    test eax, eax
:004081FB 7507                    jne 00408204

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004081F2(C)
|
:004081FD 33C0                    xor eax, eax
:004081FF E951020000              jmp 00408455

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004081FB(C)
|
:00408204 8B45FC                  mov eax, dword ptr [ebp-04]
:00408207 25FFFF0000              and eax, 0000FFFF
:0040820C 3D20030000              cmp eax, 00000320
:00408211 7E29                    jle 0040823C
:00408213 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408216 81E1FFFF0000            and ecx, 0000FFFF
:0040821C 81F900040000            cmp ecx, 00000400
:00408222 7C11                    jl 00408235
:00408224 8B55FC                  mov edx, dword ptr [ebp-04]
:00408227 81E2FFFF0000            and edx, 0000FFFF
:0040822D 81FA02040000            cmp edx, 00000402
:00408233 7E07                    jle 0040823C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408222(C)
|
:00408235 33C0                    xor eax, eax
:00408237 E919020000              jmp 00408455

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408211(C), :00408233(C)
|
:0040823C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040823F 25FFFF0000              and eax, 0000FFFF
:00408244 8945D8                  mov dword ptr [ebp-28], eax
:00408247 817DD800040000          cmp dword ptr [ebp-28], 00000400
:0040824E 741B                    je 0040826B
:00408250 817DD801040000          cmp dword ptr [ebp-28], 00000401
:00408257 7467                    je 004082C0
:00408259 817DD802040000          cmp dword ptr [ebp-28], 00000402
:00408260 0F8408010000            je 0040836E
:00408266 E9AC010000              jmp 00408417

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040824E(C)
|
:0040826B 837DEC00                cmp dword ptr [ebp-14], 00000000
:0040826F 7C4A                    jl 004082BB
:00408271 837DF000                cmp dword ptr [ebp-10], 00000000
:00408275 7C44                    jl 004082BB
:00408277 33C9                    xor ecx, ecx
:00408279 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0040827F 394DEC                  cmp dword ptr [ebp-14], ecx
:00408282 7D37                    jge 004082BB
:00408284 33D2                    xor edx, edx
:00408286 8A15C54E4B00            mov dl, byte ptr [004B4EC5]
:0040828C 3955F0                  cmp dword ptr [ebp-10], edx
:0040828F 7D2A                    jge 004082BB
:00408291 8B45EC                  mov eax, dword ptr [ebp-14]
:00408294 3B45E4                  cmp eax, dword ptr [ebp-1C]
:00408297 7C22                    jl 004082BB
:00408299 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040829C 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:0040829F 7F1A                    jg 004082BB
:004082A1 8B55F0                  mov edx, dword ptr [ebp-10]
:004082A4 3B55DC                  cmp edx, dword ptr [ebp-24]
:004082A7 7C12                    jl 004082BB
:004082A9 8B45F0                  mov eax, dword ptr [ebp-10]
:004082AC 3B45F4                  cmp eax, dword ptr [ebp-0C]
:004082AF 7F0A                    jg 004082BB
:004082B1 B801000000              mov eax, 00000001
:004082B6 E99A010000              jmp 00408455

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040826F(C), :00408275(C), :00408282(C), :0040828F(C), :00408297(C)
|:0040829F(C), :004082A7(C), :004082AF(C)
|
:004082BB E993010000              jmp 00408453

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408257(C)
|
:004082C0 837DEC00                cmp dword ptr [ebp-14], 00000000
:004082C4 0F8C9F000000            jl 00408369
:004082CA 837DF000                cmp dword ptr [ebp-10], 00000000
:004082CE 0F8C95000000            jl 00408369
:004082D4 33C9                    xor ecx, ecx
:004082D6 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:004082DC 394DEC                  cmp dword ptr [ebp-14], ecx
:004082DF 0F8D84000000            jnl 00408369
:004082E5 33D2                    xor edx, edx
:004082E7 8A15C54E4B00            mov dl, byte ptr [004B4EC5]
:004082ED 3955F0                  cmp dword ptr [ebp-10], edx
:004082F0 7D77                    jge 00408369
:004082F2 837DE800                cmp dword ptr [ebp-18], 00000000
:004082F6 7C71                    jl 00408369
:004082F8 817DE820030000          cmp dword ptr [ebp-18], 00000320
:004082FF 7D68                    jge 00408369
:00408301 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00408304 6BC950                  imul ecx, 00000050
:00408307 81C1787F4900            add ecx, 00497F78
:0040830D E8E32E0600              call 0046B1F5
:00408312 8845E0                  mov byte ptr [ebp-20], al
:00408315 8B45E0                  mov eax, dword ptr [ebp-20]
:00408318 25FF000000              and eax, 000000FF
:0040831D 3DFF000000              cmp eax, 000000FF
:00408322 7445                    je 00408369
:00408324 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00408327 81E1FF000000            and ecx, 000000FF
:0040832D 6BC924                  imul ecx, 00000024
:00408330 81C1B83B4B00            add ecx, 004B3BB8
:00408336 E8D5450000              call 0040C910
:0040833B 85C0                    test eax, eax
:0040833D 742A                    je 00408369
:0040833F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408342 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:00408345 7C22                    jl 00408369
:00408347 8B55EC                  mov edx, dword ptr [ebp-14]
:0040834A 3B55F8                  cmp edx, dword ptr [ebp-08]
:0040834D 7F1A                    jg 00408369
:0040834F 8B45F0                  mov eax, dword ptr [ebp-10]
:00408352 3B45DC                  cmp eax, dword ptr [ebp-24]
:00408355 7C12                    jl 00408369
:00408357 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040835A 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:0040835D 7F0A                    jg 00408369
:0040835F B801000000              mov eax, 00000001
:00408364 E9EC000000              jmp 00408455

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004082C4(C), :004082CE(C), :004082DF(C), :004082F0(C), :004082F6(C)
|:004082FF(C), :00408322(C), :0040833D(C), :00408345(C), :0040834D(C)
|:00408355(C), :0040835D(C)
|
:00408369 E9E5000000              jmp 00408453

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408260(C)
|
:0040836E 837DEC00                cmp dword ptr [ebp-14], 00000000
:00408372 0F8C9D000000            jl 00408415
:00408378 837DF000                cmp dword ptr [ebp-10], 00000000
:0040837C 0F8C93000000            jl 00408415
:00408382 33D2                    xor edx, edx
:00408384 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0040838A 3955EC                  cmp dword ptr [ebp-14], edx
:0040838D 0F8D82000000            jnl 00408415
:00408393 33C0                    xor eax, eax
:00408395 A0C54E4B00              mov al, byte ptr [004B4EC5]
:0040839A 3945F0                  cmp dword ptr [ebp-10], eax
:0040839D 7D76                    jge 00408415
:0040839F 837DE800                cmp dword ptr [ebp-18], 00000000
:004083A3 7C70                    jl 00408415
:004083A5 817DE820030000          cmp dword ptr [ebp-18], 00000320
:004083AC 7D67                    jge 00408415
:004083AE 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004083B1 6BC950                  imul ecx, 00000050
:004083B4 81C1787F4900            add ecx, 00497F78
:004083BA E8362E0600              call 0046B1F5
:004083BF 8845E0                  mov byte ptr [ebp-20], al
:004083C2 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004083C5 81E1FF000000            and ecx, 000000FF
:004083CB 81F9FF000000            cmp ecx, 000000FF
:004083D1 7442                    je 00408415
:004083D3 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004083D6 81E1FF000000            and ecx, 000000FF
:004083DC 6BC924                  imul ecx, 00000024
:004083DF 81C1B83B4B00            add ecx, 004B3BB8
:004083E5 E826450000              call 0040C910
:004083EA 85C0                    test eax, eax
:004083EC 7527                    jne 00408415
:004083EE 8B55EC                  mov edx, dword ptr [ebp-14]
:004083F1 3B55E4                  cmp edx, dword ptr [ebp-1C]
:004083F4 7C1F                    jl 00408415
:004083F6 8B45EC                  mov eax, dword ptr [ebp-14]
:004083F9 3B45F8                  cmp eax, dword ptr [ebp-08]
:004083FC 7F17                    jg 00408415
:004083FE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00408401 3B4DDC                  cmp ecx, dword ptr [ebp-24]
:00408404 7C0F                    jl 00408415
:00408406 8B55F0                  mov edx, dword ptr [ebp-10]
:00408409 3B55F4                  cmp edx, dword ptr [ebp-0C]
:0040840C 7F07                    jg 00408415
:0040840E B801000000              mov eax, 00000001
:00408413 EB40                    jmp 00408455

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408372(C), :0040837C(C), :0040838D(C), :0040839D(C), :004083A3(C)
|:004083AC(C), :004083D1(C), :004083EC(C), :004083F4(C), :004083FC(C)
|:00408404(C), :0040840C(C)
|
:00408415 EB3C                    jmp 00408453

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408266(U)
|
:00408417 8B45E8                  mov eax, dword ptr [ebp-18]
:0040841A 25FFFF0000              and eax, 0000FFFF
:0040841F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408422 81E1FFFF0000            and ecx, 0000FFFF
:00408428 3BC1                    cmp eax, ecx
:0040842A 7527                    jne 00408453
:0040842C 8B55EC                  mov edx, dword ptr [ebp-14]
:0040842F 3B55E4                  cmp edx, dword ptr [ebp-1C]
:00408432 7C1F                    jl 00408453
:00408434 8B45EC                  mov eax, dword ptr [ebp-14]
:00408437 3B45F8                  cmp eax, dword ptr [ebp-08]
:0040843A 7F17                    jg 00408453
:0040843C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040843F 3B4DDC                  cmp ecx, dword ptr [ebp-24]
:00408442 7C0F                    jl 00408453
:00408444 8B55F0                  mov edx, dword ptr [ebp-10]
:00408447 3B55F4                  cmp edx, dword ptr [ebp-0C]
:0040844A 7F07                    jg 00408453
:0040844C B801000000              mov eax, 00000001
:00408451 EB02                    jmp 00408455

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004082BB(U), :00408369(U), :00408415(U), :0040842A(C), :00408432(C)
|:0040843A(C), :00408442(C), :0040844A(C)
|
:00408453 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408152(U), :00408172(U), :00408192(U), :004081B2(U), :004081D2(U)
|:004081FF(U), :00408237(U), :004082B6(U), :00408364(U), :00408413(U)
|:00408451(U)
|
:00408455 8BE5                    mov esp, ebp
:00408457 5D                      pop ebp
:00408458 C3                      ret



* Referenced by a CALL at Address:
|:00406E2B   
|
:00408459 55                      push ebp
:0040845A 8BEC                    mov ebp, esp
:0040845C 81EC54040000            sub esp, 00000454

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408462 6A05                    push 00000005
:00408464 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408467 E821400000              call 0040C48D
:0040846C 8945F4                  mov dword ptr [ebp-0C], eax
:0040846F 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:00408476 750A                    jne 00408482

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408478 B805000000              mov eax, 00000005
:0040847D E90A010000              jmp 0040858C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408476(C)
|
:00408482 8B45F4                  mov eax, dword ptr [ebp-0C]
:00408485 50                      push eax
:00408486 8D8DACFBFFFF            lea ecx, dword ptr [ebp+FFFFFBAC]
:0040848C 51                      push ecx
:0040848D B9806D4800              mov ecx, 00486D80
:00408492 E8C0340000              call 0040B957
:00408497 8D55B4                  lea edx, dword ptr [ebp-4C]
:0040849A 8955FC                  mov dword ptr [ebp-04], edx
:0040849D 8D85ACFBFFFF            lea eax, dword ptr [ebp+FFFFFBAC]
:004084A3 8945B0                  mov dword ptr [ebp-50], eax
:004084A6 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408543(U)
|
:004084AD 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004084B0 33D2                    xor edx, edx
:004084B2 8A11                    mov dl, byte ptr [ecx]
:004084B4 85D2                    test edx, edx
:004084B6 0F848C000000            je 00408548
:004084BC 8B45FC                  mov eax, dword ptr [ebp-04]
:004084BF 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004084C2 8908                    mov dword ptr [eax], ecx
:004084C4 8B55FC                  mov edx, dword ptr [ebp-04]
:004084C7 83C204                  add edx, 00000004
:004084CA 8955FC                  mov dword ptr [ebp-04], edx
:004084CD 8B45F8                  mov eax, dword ptr [ebp-08]
:004084D0 83C001                  add eax, 00000001
:004084D3 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408502(U)
|
:004084D6 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004084D9 33D2                    xor edx, edx
:004084DB 8A11                    mov dl, byte ptr [ecx]
:004084DD 83FA0A                  cmp edx, 0000000A
:004084E0 7422                    je 00408504
:004084E2 8B45B0                  mov eax, dword ptr [ebp-50]
:004084E5 33C9                    xor ecx, ecx
:004084E7 8A08                    mov cl, byte ptr [eax]
:004084E9 83F90D                  cmp ecx, 0000000D
:004084EC 7416                    je 00408504
:004084EE 8B55B0                  mov edx, dword ptr [ebp-50]
:004084F1 33C0                    xor eax, eax
:004084F3 8A02                    mov al, byte ptr [edx]
:004084F5 85C0                    test eax, eax
:004084F7 740B                    je 00408504
:004084F9 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004084FC 83C101                  add ecx, 00000001
:004084FF 894DB0                  mov dword ptr [ebp-50], ecx
:00408502 EBD2                    jmp 004084D6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004084E0(C), :004084EC(C), :004084F7(C)
|
:00408504 8B55B0                  mov edx, dword ptr [ebp-50]
:00408507 33C0                    xor eax, eax
:00408509 8A02                    mov al, byte ptr [edx]
:0040850B 85C0                    test eax, eax
:0040850D 7502                    jne 00408511
:0040850F EB37                    jmp 00408548

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040850D(C)
|
:00408511 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00408514 C60100                  mov byte ptr [ecx], 00
:00408517 8B55B0                  mov edx, dword ptr [ebp-50]
:0040851A 83C201                  add edx, 00000001
:0040851D 8955B0                  mov dword ptr [ebp-50], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408541(U)
|
:00408520 8B45B0                  mov eax, dword ptr [ebp-50]
:00408523 33C9                    xor ecx, ecx
:00408525 8A08                    mov cl, byte ptr [eax]
:00408527 83F90A                  cmp ecx, 0000000A
:0040852A 740C                    je 00408538
:0040852C 8B55B0                  mov edx, dword ptr [ebp-50]
:0040852F 33C0                    xor eax, eax
:00408531 8A02                    mov al, byte ptr [edx]
:00408533 83F80D                  cmp eax, 0000000D
:00408536 750B                    jne 00408543

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040852A(C)
|
:00408538 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0040853B 83C101                  add ecx, 00000001
:0040853E 894DB0                  mov dword ptr [ebp-50], ecx
:00408541 EBDD                    jmp 00408520

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408536(C)
|
:00408543 E965FFFFFF              jmp 004084AD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004084B6(C), :0040850F(U)
|
:00408548 8B55FC                  mov edx, dword ptr [ebp-04]
:0040854B C70200000000            mov dword ptr [edx], 00000000
:00408551 6A00                    push 00000000
:00408553 6A00                    push 00000000
:00408555 6A00                    push 00000000
:00408557 6A01                    push 00000001
:00408559 8A45F8                  mov al, byte ptr [ebp-08]
:0040855C 50                      push eax
:0040855D 8D4DB4                  lea ecx, dword ptr [ebp-4C]
:00408560 51                      push ecx

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:00408561 6A70                    push 00000070
:00408563 68E0000000              push 000000E0
:00408568 E8737E0200              call 004303E0
:0040856D 83C420                  add esp, 00000020
:00408570 25FF000000              and eax, 000000FF
:00408575 8945AC                  mov dword ptr [ebp-54], eax
:00408578 8B55AC                  mov edx, dword ptr [ebp-54]
:0040857B 83C201                  add edx, 00000001
:0040857E 52                      push edx
:0040857F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408582 E8FA3F0000              call 0040C581
:00408587 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040847D(U)
|
:0040858C 8BE5                    mov esp, ebp
:0040858E 5D                      pop ebp
:0040858F C3                      ret



* Referenced by a CALL at Address:
|:00406E3C   
|
:00408590 55                      push ebp
:00408591 8BEC                    mov ebp, esp
:00408593 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408594 6A04                    push 00000004
:00408596 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408599 E8EF3E0000              call 0040C48D
:0040859E 8945FC                  mov dword ptr [ebp-04], eax
:004085A1 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:004085A8 7507                    jne 004085B1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004085AA B805000000              mov eax, 00000005
:004085AF EB12                    jmp 004085C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004085A8(C)
|
:004085B1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004085B4 E8E13F0000              call 0040C59A
:004085B9 33C9                    xor ecx, ecx
:004085BB 3945FC                  cmp dword ptr [ebp-04], eax
:004085BE 0F94C1                  sete cl
:004085C1 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004085AF(U)
|
:004085C3 8BE5                    mov esp, ebp
:004085C5 5D                      pop ebp
:004085C6 C3                      ret



* Referenced by a CALL at Address:
|:00406E4D   
|
:004085C7 55                      push ebp
:004085C8 8BEC                    mov ebp, esp
:004085CA B801000000              mov eax, 00000001
:004085CF 5D                      pop ebp
:004085D0 C3                      ret



* Referenced by a CALL at Address:
|:00406E5E   
|
:004085D1 55                      push ebp
:004085D2 8BEC                    mov ebp, esp
:004085D4 83EC20                  sub esp, 00000020

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004085D7 6A02                    push 00000002
:004085D9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004085DC E8AC3E0000              call 0040C48D
:004085E1 668945F8                mov word ptr [ebp-08], ax
:004085E5 8B45F8                  mov eax, dword ptr [ebp-08]
:004085E8 25FFFF0000              and eax, 0000FFFF
:004085ED 3D00800000              cmp eax, 00008000
:004085F2 750A                    jne 004085FE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004085F4 B805000000              mov eax, 00000005
:004085F9 E9F1010000              jmp 004087EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004085F2(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004085FE 6A02                    push 00000002
:00408600 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408603 E8853E0000              call 0040C48D
:00408608 668945F4                mov word ptr [ebp-0C], ax
:0040860C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040860F 81E1FFFF0000            and ecx, 0000FFFF
:00408615 81F900800000            cmp ecx, 00008000
:0040861B 750A                    jne 00408627

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040861D B805000000              mov eax, 00000005
:00408622 E9C8010000              jmp 004087EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040861B(C)
|
:00408627 6A23                    push 00000023
:00408629 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040862C E85C3E0000              call 0040C48D
:00408631 668945EC                mov word ptr [ebp-14], ax
:00408635 8B55EC                  mov edx, dword ptr [ebp-14]
:00408638 81E2FFFF0000            and edx, 0000FFFF
:0040863E 81FA00800000            cmp edx, 00008000
:00408644 750A                    jne 00408650

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408646 B805000000              mov eax, 00000005
:0040864B E99F010000              jmp 004087EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408644(C)
|
:00408650 8B45EC                  mov eax, dword ptr [ebp-14]
:00408653 25FFFF0000              and eax, 0000FFFF
:00408658 83F811                  cmp eax, 00000011
:0040865B 7D2A                    jge 00408687
:0040865D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00408660 81E1FFFF0000            and ecx, 0000FFFF
:00408666 51                      push ecx
:00408667 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040866A 81E2FFFF0000            and edx, 0000FFFF
:00408670 52                      push edx
:00408671 8B45F8                  mov eax, dword ptr [ebp-08]
:00408674 25FFFF0000              and eax, 0000FFFF
:00408679 50                      push eax
:0040867A E81EC4FFFF              call 00404A9D
:0040867F 83C40C                  add esp, 0000000C
:00408682 E951010000              jmp 004087D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040865B(C)
|
:00408687 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040868A 81E1FFFF0000            and ecx, 0000FFFF
:00408690 83F911                  cmp ecx, 00000011
:00408693 7548                    jne 004086DD
:00408695 C645E400                mov [ebp-1C], 00
:00408699 EB09                    jmp 004086A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004086D6(U)
|
:0040869B 8A55E4                  mov dl, byte ptr [ebp-1C]
:0040869E 80C201                  add dl, 01
:004086A1 8855E4                  mov byte ptr [ebp-1C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408699(U)
|
:004086A4 8B45E4                  mov eax, dword ptr [ebp-1C]
:004086A7 25FF000000              and eax, 000000FF
:004086AC 83F809                  cmp eax, 00000009
:004086AF 7D27                    jge 004086D8
:004086B1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004086B4 81E1FF000000            and ecx, 000000FF
:004086BA 51                      push ecx
:004086BB 8B55F4                  mov edx, dword ptr [ebp-0C]
:004086BE 81E2FFFF0000            and edx, 0000FFFF
:004086C4 52                      push edx
:004086C5 8B45F8                  mov eax, dword ptr [ebp-08]
:004086C8 25FFFF0000              and eax, 0000FFFF
:004086CD 50                      push eax
:004086CE E8CAC3FFFF              call 00404A9D
:004086D3 83C40C                  add esp, 0000000C
:004086D6 EBC3                    jmp 0040869B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004086AF(C)
|
:004086D8 E9FB000000              jmp 004087D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408693(C)
|
:004086DD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004086E0 81E1FFFF0000            and ecx, 0000FFFF
:004086E6 6BC950                  imul ecx, 00000050
:004086E9 81C1787F4900            add ecx, 00497F78
:004086EF E8CCAAFFFF              call 004031C0
:004086F4 8845E8                  mov byte ptr [ebp-18], al
:004086F7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004086FA 81E1FFFF0000            and ecx, 0000FFFF
:00408700 6BC950                  imul ecx, 00000050
:00408703 81C1787F4900            add ecx, 00497F78
:00408709 E8FB98FFFF              call 00402009
:0040870E 8845FC                  mov byte ptr [ebp-04], al
:00408711 C645E000                mov [ebp-20], 00
:00408715 EB09                    jmp 00408720

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040878B(U)
|
:00408717 8A4DE0                  mov cl, byte ptr [ebp-20]
:0040871A 80C101                  add cl, 01
:0040871D 884DE0                  mov byte ptr [ebp-20], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408715(U)
|
:00408720 8B55E0                  mov edx, dword ptr [ebp-20]
:00408723 81E2FF000000            and edx, 000000FF
:00408729 83FA08                  cmp edx, 00000008
:0040872C 7D5F                    jge 0040878D
:0040872E 8A45E0                  mov al, byte ptr [ebp-20]
:00408731 50                      push eax
:00408732 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408735 81E1FFFF0000            and ecx, 0000FFFF
:0040873B 6BC950                  imul ecx, 00000050
:0040873E 81C1787F4900            add ecx, 00497F78
:00408744 E897AAFFFF              call 004031E0
:00408749 8845F0                  mov byte ptr [ebp-10], al
:0040874C 8A4DF0                  mov cl, byte ptr [ebp-10]
:0040874F 51                      push ecx
:00408750 8A55E0                  mov dl, byte ptr [ebp-20]
:00408753 52                      push edx
:00408754 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00408757 81E1FFFF0000            and ecx, 0000FFFF
:0040875D 6BC950                  imul ecx, 00000050
:00408760 81C1787F4900            add ecx, 00497F78
:00408766 E895AAFFFF              call 00403200
:0040876B 68FF000000              push 000000FF
:00408770 8A45E0                  mov al, byte ptr [ebp-20]
:00408773 50                      push eax
:00408774 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00408777 81E1FFFF0000            and ecx, 0000FFFF
:0040877D 6BC950                  imul ecx, 00000050
:00408780 81C1787F4900            add ecx, 00497F78
:00408786 E875AAFFFF              call 00403200
:0040878B EB8A                    jmp 00408717

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040872C(C)
|
:0040878D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408790 81E1FF000000            and ecx, 000000FF
:00408796 81F9FF000000            cmp ecx, 000000FF
:0040879C 743A                    je 004087D8
:0040879E 8B55F4                  mov edx, dword ptr [ebp-0C]
:004087A1 81E2FFFF0000            and edx, 0000FFFF
:004087A7 52                      push edx
:004087A8 8B45FC                  mov eax, dword ptr [ebp-04]
:004087AB 25FF000000              and eax, 000000FF
:004087B0 50                      push eax
:004087B1 E80B93FFFF              call 00401AC1
:004087B6 83C408                  add esp, 00000008
:004087B9 85C0                    test eax, eax
:004087BB 741B                    je 004087D8
:004087BD 8A4DE8                  mov cl, byte ptr [ebp-18]
:004087C0 51                      push ecx
:004087C1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004087C4 81E1FFFF0000            and ecx, 0000FFFF
:004087CA 6BC950                  imul ecx, 00000050
:004087CD 81C1787F4900            add ecx, 00497F78
:004087D3 E8F8400000              call 0040C8D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408682(U), :004086D8(U), :0040879C(C), :004087BB(C)
|
:004087D8 8B55F4                  mov edx, dword ptr [ebp-0C]
:004087DB 81E2FFFF0000            and edx, 0000FFFF
:004087E1 52                      push edx
:004087E2 E835430600              call 0046CB1C
:004087E7 83C404                  add esp, 00000004
:004087EA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004085F9(U), :00408622(U), :0040864B(U)
|
:004087EF 8BE5                    mov esp, ebp
:004087F1 5D                      pop ebp
:004087F2 C3                      ret



* Referenced by a CALL at Address:
|:00406E6F   
|
:004087F3 55                      push ebp
:004087F4 8BEC                    mov ebp, esp
:004087F6 83EC18                  sub esp, 00000018

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004087F9 6A02                    push 00000002
:004087FB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004087FE E88A3C0000              call 0040C48D
:00408803 668945FC                mov word ptr [ebp-04], ax
:00408807 8B45FC                  mov eax, dword ptr [ebp-04]
:0040880A 25FFFF0000              and eax, 0000FFFF
:0040880F 3D00800000              cmp eax, 00008000
:00408814 750A                    jne 00408820

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408816 B805000000              mov eax, 00000005
:0040881B E9FA010000              jmp 00408A1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408814(C)
|
:00408820 6A23                    push 00000023
:00408822 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408825 E8633C0000              call 0040C48D
:0040882A 668945F0                mov word ptr [ebp-10], ax
:0040882E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00408831 81E1FFFF0000            and ecx, 0000FFFF
:00408837 81F900800000            cmp ecx, 00008000
:0040883D 750A                    jne 00408849

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040883F B805000000              mov eax, 00000005
:00408844 E9D1010000              jmp 00408A1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040883D(C)
|
:00408849 6A34                    push 00000034
:0040884B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040884E E83A3C0000              call 0040C48D
:00408853 668945F4                mov word ptr [ebp-0C], ax
:00408857 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040885A 81E2FFFF0000            and edx, 0000FFFF
:00408860 81FA00800000            cmp edx, 00008000
:00408866 750A                    jne 00408872

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408868 B805000000              mov eax, 00000005
:0040886D E9A8010000              jmp 00408A1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408866(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408872 6A04                    push 00000004
:00408874 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408877 E8113C0000              call 0040C48D
:0040887C 8945F8                  mov dword ptr [ebp-08], eax
:0040887F 817DF800000080          cmp dword ptr [ebp-08], 80000000
:00408886 750A                    jne 00408892

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408888 B805000000              mov eax, 00000005
:0040888D E988010000              jmp 00408A1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408886(C)
|
:00408892 E8DB8C0000              call 00411572
:00408897 85C0                    test eax, eax
:00408899 742E                    je 004088C9
:0040889B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040889E 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:004088A3 3D00040000              cmp eax, 00000400
:004088A8 7C1F                    jl 004088C9
:004088AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004088AD 81E1FFFF0000            and ecx, 0000FFFF
:004088B3 81F902040000            cmp ecx, 00000402
:004088B9 7F0E                    jg 004088C9
:004088BB B9C84F4B00              mov ecx, 004B4FC8
:004088C0 E82B230500              call 0045ABF0
:004088C5 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408899(C), :004088A8(C), :004088B9(C)
|
:004088C9 E8A48C0000              call 00411572
:004088CE 85C0                    test eax, eax
:004088D0 7525                    jne 004088F7
:004088D2 8B55F0                  mov edx, dword ptr [ebp-10]
:004088D5 81E2FFFF0000            and edx, 0000FFFF
:004088DB 83FA0F                  cmp edx, 0000000F
:004088DE 740D                    je 004088ED
:004088E0 8B45F0                  mov eax, dword ptr [ebp-10]
:004088E3 25FFFF0000              and eax, 0000FFFF
:004088E8 83F810                  cmp eax, 00000010
:004088EB 750A                    jne 004088F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004088DE(C)
|
:004088ED B801000000              mov eax, 00000001
:004088F2 E923010000              jmp 00408A1A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004088D0(C), :004088EB(C)
|
:004088F7 E8768C0000              call 00411572
:004088FC 85C0                    test eax, eax
:004088FE 7445                    je 00408945
:00408900 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00408903 81E1FFFF0000            and ecx, 0000FFFF
:00408909 83F90F                  cmp ecx, 0000000F
:0040890C 740E                    je 0040891C
:0040890E 8B55F0                  mov edx, dword ptr [ebp-10]
:00408911 81E2FFFF0000            and edx, 0000FFFF
:00408917 83FA10                  cmp edx, 00000010
:0040891A 7529                    jne 00408945

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040890C(C)
|
:0040891C 8B45F8                  mov eax, dword ptr [ebp-08]
:0040891F 50                      push eax
:00408920 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00408923 51                      push ecx
:00408924 8A55F0                  mov dl, byte ptr [ebp-10]
:00408927 52                      push edx
:00408928 8B45FC                  mov eax, dword ptr [ebp-04]
:0040892B 25FFFF0000              and eax, 0000FFFF
:00408930 50                      push eax
:00408931 B9C84F4B00              mov ecx, 004B4FC8
:00408936 E840850500              call 00460E7B
:0040893B B801000000              mov eax, 00000001
:00408940 E9D5000000              jmp 00408A1A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004088FE(C), :0040891A(C)
|
:00408945 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00408948 81E1FFFF0000            and ecx, 0000FFFF
:0040894E 894DE8                  mov dword ptr [ebp-18], ecx
:00408951 837DE800                cmp dword ptr [ebp-18], 00000000
:00408955 7411                    je 00408968
:00408957 837DE801                cmp dword ptr [ebp-18], 00000001
:0040895B 742C                    je 00408989
:0040895D 837DE802                cmp dword ptr [ebp-18], 00000002
:00408961 7447                    je 004089AA
:00408963 E995000000              jmp 004089FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408955(C)
|
:00408968 8B55F8                  mov edx, dword ptr [ebp-08]
:0040896B 52                      push edx
:0040896C 8B45F0                  mov eax, dword ptr [ebp-10]
:0040896F 25FFFF0000              and eax, 0000FFFF
:00408974 50                      push eax
:00408975 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408978 81E1FFFF0000            and ecx, 0000FFFF
:0040897E 51                      push ecx
:0040897F E81D8FFFFF              call 004018A1
:00408984 83C40C                  add esp, 0000000C
:00408987 EB7B                    jmp 00408A04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040895B(C)
|
:00408989 8B55F8                  mov edx, dword ptr [ebp-08]
:0040898C 52                      push edx
:0040898D 8B45F0                  mov eax, dword ptr [ebp-10]
:00408990 25FFFF0000              and eax, 0000FFFF
:00408995 50                      push eax
:00408996 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408999 81E1FFFF0000            and ecx, 0000FFFF
:0040899F 51                      push ecx
:004089A0 E8308FFFFF              call 004018D5
:004089A5 83C40C                  add esp, 0000000C
:004089A8 EB5A                    jmp 00408A04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408961(C)
|
:004089AA 8B55F0                  mov edx, dword ptr [ebp-10]
:004089AD 81E2FFFF0000            and edx, 0000FFFF
:004089B3 52                      push edx
:004089B4 8B45FC                  mov eax, dword ptr [ebp-04]
:004089B7 25FFFF0000              and eax, 0000FFFF
:004089BC 50                      push eax
:004089BD E81C8AFFFF              call 004013DE
:004089C2 83C408                  add esp, 00000008
:004089C5 8945EC                  mov dword ptr [ebp-14], eax
:004089C8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004089CB 51                      push ecx
:004089CC 8B55EC                  mov edx, dword ptr [ebp-14]
:004089CF 52                      push edx
:004089D0 E84BF90600              call 00478320
:004089D5 83C408                  add esp, 00000008
:004089D8 8945EC                  mov dword ptr [ebp-14], eax
:004089DB 8B45EC                  mov eax, dword ptr [ebp-14]
:004089DE 50                      push eax
:004089DF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004089E2 81E1FFFF0000            and ecx, 0000FFFF
:004089E8 51                      push ecx
:004089E9 8B55FC                  mov edx, dword ptr [ebp-04]
:004089EC 81E2FFFF0000            and edx, 0000FFFF
:004089F2 52                      push edx
:004089F3 E8A98EFFFF              call 004018A1
:004089F8 83C40C                  add esp, 0000000C
:004089FB EB07                    jmp 00408A04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408963(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004089FD B805000000              mov eax, 00000005
:00408A02 EB16                    jmp 00408A1A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408987(U), :004089A8(U), :004089FB(U)
|
:00408A04 8B45FC                  mov eax, dword ptr [ebp-04]
:00408A07 25FFFF0000              and eax, 0000FFFF
:00408A0C 50                      push eax
:00408A0D E80A410600              call 0046CB1C
:00408A12 83C404                  add esp, 00000004
:00408A15 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040881B(U), :00408844(U), :0040886D(U), :0040888D(U), :004088F2(U)
|:00408940(U), :00408A02(U)
|
:00408A1A 8BE5                    mov esp, ebp
:00408A1C 5D                      pop ebp
:00408A1D C3                      ret



* Referenced by a CALL at Address:
|:00406E80   
|
:00408A1E 55                      push ebp
:00408A1F 8BEC                    mov ebp, esp
:00408A21 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408A22 6A05                    push 00000005
:00408A24 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408A27 E8613A0000              call 0040C48D
:00408A2C 8945FC                  mov dword ptr [ebp-04], eax
:00408A2F 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:00408A36 7507                    jne 00408A3F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408A38 B805000000              mov eax, 00000005
:00408A3D EB05                    jmp 00408A44

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408A36(C)
|
:00408A3F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408A3D(U)
|
:00408A44 8BE5                    mov esp, ebp
:00408A46 5D                      pop ebp
:00408A47 C3                      ret



* Referenced by a CALL at Address:
|:00406E91   
|
:00408A48 55                      push ebp
:00408A49 8BEC                    mov ebp, esp
:00408A4B 51                      push ecx
:00408A4C 6A1B                    push 0000001B
:00408A4E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408A51 E8373A0000              call 0040C48D
:00408A56 668945FC                mov word ptr [ebp-04], ax
:00408A5A 8B45FC                  mov eax, dword ptr [ebp-04]
:00408A5D 25FFFF0000              and eax, 0000FFFF
:00408A62 3D00800000              cmp eax, 00008000
:00408A67 7507                    jne 00408A70

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408A69 B805000000              mov eax, 00000005
:00408A6E EB17                    jmp 00408A87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408A67(C)
|
:00408A70 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408A73 81E1FFFF0000            and ecx, 0000FFFF
:00408A79 51                      push ecx
:00408A7A E810910200              call 00431B8F
:00408A7F 83C404                  add esp, 00000004
:00408A82 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408A6E(U)
|
:00408A87 8BE5                    mov esp, ebp
:00408A89 5D                      pop ebp
:00408A8A C3                      ret



* Referenced by a CALL at Address:
|:00406EA2   
|
:00408A8B 55                      push ebp
:00408A8C 8BEC                    mov ebp, esp
:00408A8E 83EC10                  sub esp, 00000010

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408A91 6A04                    push 00000004
:00408A93 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408A96 E8F2390000              call 0040C48D
:00408A9B 8945F4                  mov dword ptr [ebp-0C], eax
:00408A9E 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:00408AA5 750A                    jne 00408AB1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408AA7 B805000000              mov eax, 00000005
:00408AAC E981000000              jmp 00408B32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408AA5(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408AB1 6A04                    push 00000004
:00408AB3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408AB6 E8D2390000              call 0040C48D
:00408ABB 8945F0                  mov dword ptr [ebp-10], eax
:00408ABE 817DF000000080          cmp dword ptr [ebp-10], 80000000
:00408AC5 7507                    jne 00408ACE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408AC7 B805000000              mov eax, 00000005
:00408ACC EB64                    jmp 00408B32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408AC5(C)
|
:00408ACE 6A29                    push 00000029
:00408AD0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408AD3 E8B5390000              call 0040C48D
:00408AD8 668945F8                mov word ptr [ebp-08], ax
:00408ADC 8B45F8                  mov eax, dword ptr [ebp-08]
:00408ADF 25FFFF0000              and eax, 0000FFFF
:00408AE4 3D00800000              cmp eax, 00008000
:00408AE9 7507                    jne 00408AF2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408AEB B805000000              mov eax, 00000005
:00408AF0 EB40                    jmp 00408B32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408AE9(C)
|
:00408AF2 6A2A                    push 0000002A
:00408AF4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408AF7 E891390000              call 0040C48D
:00408AFC 8945FC                  mov dword ptr [ebp-04], eax
:00408AFF 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:00408B06 7507                    jne 00408B0F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408B08 B805000000              mov eax, 00000005
:00408B0D EB23                    jmp 00408B32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408B06(C)
|
:00408B0F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00408B12 51                      push ecx
:00408B13 8B55F8                  mov edx, dword ptr [ebp-08]
:00408B16 81E2FFFF0000            and edx, 0000FFFF
:00408B1C 52                      push edx
:00408B1D 8B45F0                  mov eax, dword ptr [ebp-10]
:00408B20 50                      push eax
:00408B21 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00408B24 51                      push ecx
:00408B25 E80F8F0000              call 00411A39
:00408B2A 83C410                  add esp, 00000010
:00408B2D B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408AAC(U), :00408ACC(U), :00408AF0(U), :00408B0D(U)
|
:00408B32 8BE5                    mov esp, ebp
:00408B34 5D                      pop ebp
:00408B35 C3                      ret



* Referenced by a CALL at Address:
|:00406EB3   
|
:00408B36 55                      push ebp
:00408B37 8BEC                    mov ebp, esp
:00408B39 81EC20030000            sub esp, 00000320
:00408B3F C7851CFDFFFF00000000    mov dword ptr [ebp+FFFFFD1C], 00000000
:00408B49 EB0F                    jmp 00408B5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408B86(U)
|
:00408B4B 8B851CFDFFFF            mov eax, dword ptr [ebp+FFFFFD1C]
:00408B51 83C001                  add eax, 00000001
:00408B54 89851CFDFFFF            mov dword ptr [ebp+FFFFFD1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408B49(U)
|
:00408B5A 83BD1CFDFFFF5A          cmp dword ptr [ebp+FFFFFD1C], 0000005A
:00408B61 7D25                    jge 00408B88
:00408B63 8B8D1CFDFFFF            mov ecx, dword ptr [ebp+FFFFFD1C]
:00408B69 51                      push ecx
:00408B6A B9806D4800              mov ecx, 00486D80
:00408B6F E85C3E0000              call 0040C9D0
:00408B74 898518FDFFFF            mov dword ptr [ebp+FFFFFD18], eax
:00408B7A 8B9518FDFFFF            mov edx, dword ptr [ebp+FFFFFD18]
:00408B80 C702FFFF0000            mov dword ptr [edx], 0000FFFF
:00408B86 EBC3                    jmp 00408B4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408B61(C)
|
:00408B88 6A26                    push 00000026
:00408B8A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408B8D E8FB380000              call 0040C48D
:00408B92 668945FC                mov word ptr [ebp-04], ax
:00408B96 8B45FC                  mov eax, dword ptr [ebp-04]
:00408B99 25FFFF0000              and eax, 0000FFFF
:00408B9E 3D00800000              cmp eax, 00008000
:00408BA3 750A                    jne 00408BAF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408BA5 B805000000              mov eax, 00000005
:00408BAA E9F9040000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408BA3(C)
|
:00408BAF 6A26                    push 00000026
:00408BB1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408BB4 E8D4380000              call 0040C48D
:00408BB9 66898510FDFFFF          mov word ptr [ebp+FFFFFD10], ax
:00408BC0 8B8D10FDFFFF            mov ecx, dword ptr [ebp+FFFFFD10]
:00408BC6 81E1FFFF0000            and ecx, 0000FFFF
:00408BCC 81F900800000            cmp ecx, 00008000
:00408BD2 750A                    jne 00408BDE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408BD4 B805000000              mov eax, 00000005
:00408BD9 E9CA040000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408BD2(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408BDE 6A04                    push 00000004
:00408BE0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408BE3 E8A5380000              call 0040C48D
:00408BE8 898504FDFFFF            mov dword ptr [ebp+FFFFFD04], eax
:00408BEE 81BD04FDFFFF00000080    cmp dword ptr [ebp+FFFFFD04], 80000000
:00408BF8 750A                    jne 00408C04

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408BFA B805000000              mov eax, 00000005
:00408BFF E9A4040000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408BF8(C)
|
:00408C04 6A32                    push 00000032
:00408C06 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408C09 E87F380000              call 0040C48D
:00408C0E 66898514FDFFFF          mov word ptr [ebp+FFFFFD14], ax
:00408C15 8B9514FDFFFF            mov edx, dword ptr [ebp+FFFFFD14]
:00408C1B 81E2FFFF0000            and edx, 0000FFFF
:00408C21 81FA00800000            cmp edx, 00008000
:00408C27 750A                    jne 00408C33

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408C29 B805000000              mov eax, 00000005
:00408C2E E975040000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408C27(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00408C33 6A02                    push 00000002
:00408C35 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408C38 E850380000              call 0040C48D
:00408C3D 66898524FDFFFF          mov word ptr [ebp+FFFFFD24], ax
:00408C44 8B8524FDFFFF            mov eax, dword ptr [ebp+FFFFFD24]
:00408C4A 25FFFF0000              and eax, 0000FFFF
:00408C4F 3D00800000              cmp eax, 00008000
:00408C54 750A                    jne 00408C60

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408C56 B805000000              mov eax, 00000005
:00408C5B E948040000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408C54(C)
|
:00408C60 6A32                    push 00000032
:00408C62 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408C65 E823380000              call 0040C48D
:00408C6A 66898508FDFFFF          mov word ptr [ebp+FFFFFD08], ax
:00408C71 8B8D08FDFFFF            mov ecx, dword ptr [ebp+FFFFFD08]
:00408C77 81E1FFFF0000            and ecx, 0000FFFF
:00408C7D 81F900800000            cmp ecx, 00008000
:00408C83 750A                    jne 00408C8F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408C85 B805000000              mov eax, 00000005
:00408C8A E919040000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408C83(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00408C8F 6A02                    push 00000002
:00408C91 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408C94 E8F4370000              call 0040C48D
:00408C99 66898520FDFFFF          mov word ptr [ebp+FFFFFD20], ax
:00408CA0 8B9520FDFFFF            mov edx, dword ptr [ebp+FFFFFD20]
:00408CA6 81E2FFFF0000            and edx, 0000FFFF
:00408CAC 81FA00800000            cmp edx, 00008000
:00408CB2 750A                    jne 00408CBE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408CB4 B805000000              mov eax, 00000005
:00408CB9 E9EA030000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408CB2(C)
|
:00408CBE 8B45FC                  mov eax, dword ptr [ebp-04]
:00408CC1 25FFFF0000              and eax, 0000FFFF
:00408CC6 F7D8                    neg eax
:00408CC8 1BC0                    sbb eax, eax
:00408CCA F7D8                    neg eax
:00408CCC 66A3C08D4800            mov word ptr [00488DC0], ax
:00408CD2 8A8D10FDFFFF            mov cl, byte ptr [ebp+FFFFFD10]
:00408CD8 880D17A04800            mov byte ptr [0048A017], cl
:00408CDE 8B9504FDFFFF            mov edx, dword ptr [ebp+FFFFFD04]
:00408CE4 52                      push edx
:00408CE5 B9806D4800              mov ecx, 00486D80
:00408CEA E8013D0000              call 0040C9F0
:00408CEF 8B8524FDFFFF            mov eax, dword ptr [ebp+FFFFFD24]
:00408CF5 25FFFF0000              and eax, 0000FFFF
:00408CFA 33C9                    xor ecx, ecx
:00408CFC 3DFFFF0000              cmp eax, 0000FFFF
:00408D01 0F95C1                  setne cl
:00408D04 66890D0CA04800          mov word ptr [0048A00C], cx
:00408D0B 668B9524FDFFFF          mov dx, word ptr [ebp+FFFFFD24]
:00408D12 6689150EA04800          mov word ptr [0048A00E], dx
:00408D19 8B8520FDFFFF            mov eax, dword ptr [ebp+FFFFFD20]
:00408D1F 25FFFF0000              and eax, 0000FFFF
:00408D24 33C9                    xor ecx, ecx
:00408D26 3DFFFF0000              cmp eax, 0000FFFF
:00408D2B 0F95C1                  setne cl
:00408D2E 66890D10A04800          mov word ptr [0048A010], cx
:00408D35 668B9520FDFFFF          mov dx, word ptr [ebp+FFFFFD20]
:00408D3C 66891512A04800          mov word ptr [0048A012], dx
:00408D43 C745F800000000          mov [ebp-08], 00000000
:00408D4A C7850CFDFFFF00000000    mov dword ptr [ebp+FFFFFD0C], 00000000
:00408D54 EB0F                    jmp 00408D65

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040909E(U)
|
:00408D56 8B850CFDFFFF            mov eax, dword ptr [ebp+FFFFFD0C]
:00408D5C 83C001                  add eax, 00000001
:00408D5F 89850CFDFFFF            mov dword ptr [ebp+FFFFFD0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408D54(U)
|
:00408D65 83BD0CFDFFFF1E          cmp dword ptr [ebp+FFFFFD0C], 0000001E
:00408D6C 0F8D31030000            jnl 004090A3

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00408D72 6A02                    push 00000002
:00408D74 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408D77 E811370000              call 0040C48D
:00408D7C 668985F8FCFFFF          mov word ptr [ebp+FFFFFCF8], ax
:00408D83 8B8DF8FCFFFF            mov ecx, dword ptr [ebp+FFFFFCF8]
:00408D89 81E1FFFF0000            and ecx, 0000FFFF
:00408D8F 81F900800000            cmp ecx, 00008000
:00408D95 750A                    jne 00408DA1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408D97 B805000000              mov eax, 00000005
:00408D9C E907030000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408D95(C)
|
:00408DA1 8B950CFDFFFF            mov edx, dword ptr [ebp+FFFFFD0C]
:00408DA7 6BD218                  imul edx, 00000018
:00408DAA 668B85F8FCFFFF          mov ax, word ptr [ebp+FFFFFCF8]
:00408DB1 6689841528FDFFFF        mov word ptr [ebp+edx-000002D8], ax
:00408DB9 6A26                    push 00000026
:00408DBB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408DBE E8CA360000              call 0040C48D
:00408DC3 668985E4FCFFFF          mov word ptr [ebp+FFFFFCE4], ax
:00408DCA 8B8DE4FCFFFF            mov ecx, dword ptr [ebp+FFFFFCE4]
:00408DD0 81E1FFFF0000            and ecx, 0000FFFF
:00408DD6 81F900800000            cmp ecx, 00008000
:00408DDC 750A                    jne 00408DE8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408DDE B805000000              mov eax, 00000005
:00408DE3 E9C0020000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408DDC(C)
|
:00408DE8 8B950CFDFFFF            mov edx, dword ptr [ebp+FFFFFD0C]
:00408DEE 6BD218                  imul edx, 00000018
:00408DF1 668B85E4FCFFFF          mov ax, word ptr [ebp+FFFFFCE4]
:00408DF8 668984152AFDFFFF        mov word ptr [ebp+edx-000002D6], ax
:00408E00 6A26                    push 00000026
:00408E02 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408E05 E883360000              call 0040C48D
:00408E0A 668985ECFCFFFF          mov word ptr [ebp+FFFFFCEC], ax
:00408E11 8B8DECFCFFFF            mov ecx, dword ptr [ebp+FFFFFCEC]
:00408E17 81E1FFFF0000            and ecx, 0000FFFF
:00408E1D 81F900800000            cmp ecx, 00008000
:00408E23 750A                    jne 00408E2F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408E25 B805000000              mov eax, 00000005
:00408E2A E979020000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408E23(C)
|
:00408E2F 8B950CFDFFFF            mov edx, dword ptr [ebp+FFFFFD0C]
:00408E35 6BD218                  imul edx, 00000018
:00408E38 668B85ECFCFFFF          mov ax, word ptr [ebp+FFFFFCEC]
:00408E3F 668984152CFDFFFF        mov word ptr [ebp+edx-000002D4], ax
:00408E47 6A26                    push 00000026
:00408E49 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408E4C E83C360000              call 0040C48D
:00408E51 66898500FDFFFF          mov word ptr [ebp+FFFFFD00], ax
:00408E58 8B8D00FDFFFF            mov ecx, dword ptr [ebp+FFFFFD00]
:00408E5E 81E1FFFF0000            and ecx, 0000FFFF
:00408E64 81F900800000            cmp ecx, 00008000
:00408E6A 750A                    jne 00408E76

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408E6C B805000000              mov eax, 00000005
:00408E71 E932020000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408E6A(C)
|
:00408E76 8B950CFDFFFF            mov edx, dword ptr [ebp+FFFFFD0C]
:00408E7C 6BD218                  imul edx, 00000018
:00408E7F 668B8500FDFFFF          mov ax, word ptr [ebp+FFFFFD00]
:00408E86 668984152EFDFFFF        mov word ptr [ebp+edx-000002D2], ax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408E8E 6A04                    push 00000004
:00408E90 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408E93 E8F5350000              call 0040C48D
:00408E98 8985E8FCFFFF            mov dword ptr [ebp+FFFFFCE8], eax
:00408E9E 81BDE8FCFFFF00000080    cmp dword ptr [ebp+FFFFFCE8], 80000000
:00408EA8 750A                    jne 00408EB4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408EAA B805000000              mov eax, 00000005
:00408EAF E9F4010000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408EA8(C)
|
:00408EB4 8B8D0CFDFFFF            mov ecx, dword ptr [ebp+FFFFFD0C]
:00408EBA 6BC918                  imul ecx, 00000018
:00408EBD 8B95E8FCFFFF            mov edx, dword ptr [ebp+FFFFFCE8]
:00408EC3 89940D30FDFFFF          mov dword ptr [ebp+ecx-000002D0], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00408ECA 6A04                    push 00000004
:00408ECC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408ECF E8B9350000              call 0040C48D
:00408ED4 8985E0FCFFFF            mov dword ptr [ebp+FFFFFCE0], eax
:00408EDA 81BDE0FCFFFF00000080    cmp dword ptr [ebp+FFFFFCE0], 80000000
:00408EE4 750A                    jne 00408EF0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408EE6 B805000000              mov eax, 00000005
:00408EEB E9B8010000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408EE4(C)
|
:00408EF0 8B850CFDFFFF            mov eax, dword ptr [ebp+FFFFFD0C]
:00408EF6 6BC018                  imul eax, 00000018
:00408EF9 8B8DE0FCFFFF            mov ecx, dword ptr [ebp+FFFFFCE0]
:00408EFF 898C0534FDFFFF          mov dword ptr [ebp+eax-000002CC], ecx
:00408F06 6A2B                    push 0000002B
:00408F08 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408F0B E87D350000              call 0040C48D
:00408F10 668985F0FCFFFF          mov word ptr [ebp+FFFFFCF0], ax
:00408F17 8B95F0FCFFFF            mov edx, dword ptr [ebp+FFFFFCF0]
:00408F1D 81E2FFFF0000            and edx, 0000FFFF
:00408F23 81FA00800000            cmp edx, 00008000
:00408F29 750A                    jne 00408F35

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408F2B B805000000              mov eax, 00000005
:00408F30 E973010000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408F29(C)
|
:00408F35 8B850CFDFFFF            mov eax, dword ptr [ebp+FFFFFD0C]
:00408F3B 6BC018                  imul eax, 00000018
:00408F3E 668B8DF0FCFFFF          mov cx, word ptr [ebp+FFFFFCF0]
:00408F45 66898C0538FDFFFF        mov word ptr [ebp+eax-000002C8], cx
:00408F4D 6A33                    push 00000033
:00408F4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408F52 E836350000              call 0040C48D
:00408F57 668985F4FCFFFF          mov word ptr [ebp+FFFFFCF4], ax
:00408F5E 8B95F4FCFFFF            mov edx, dword ptr [ebp+FFFFFCF4]
:00408F64 81E2FFFF0000            and edx, 0000FFFF
:00408F6A 81FA00800000            cmp edx, 00008000
:00408F70 750A                    jne 00408F7C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408F72 B805000000              mov eax, 00000005
:00408F77 E92C010000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408F70(C)
|
:00408F7C 8B850CFDFFFF            mov eax, dword ptr [ebp+FFFFFD0C]
:00408F82 6BC018                  imul eax, 00000018
:00408F85 668B8DF4FCFFFF          mov cx, word ptr [ebp+FFFFFCF4]
:00408F8C 66898C053AFDFFFF        mov word ptr [ebp+eax-000002C6], cx
:00408F94 6A17                    push 00000017
:00408F96 8B4D08                  mov ecx, dword ptr [ebp+08]
:00408F99 E8EF340000              call 0040C48D
:00408F9E 668985FCFCFFFF          mov word ptr [ebp+FFFFFCFC], ax
:00408FA5 8B95FCFCFFFF            mov edx, dword ptr [ebp+FFFFFCFC]
:00408FAB 81E2FFFF0000            and edx, 0000FFFF
:00408FB1 81FA00800000            cmp edx, 00008000
:00408FB7 750A                    jne 00408FC3

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00408FB9 B805000000              mov eax, 00000005
:00408FBE E9E5000000              jmp 004090A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408FB7(C)
|
:00408FC3 8B850CFDFFFF            mov eax, dword ptr [ebp+FFFFFD0C]
:00408FC9 6BC018                  imul eax, 00000018
:00408FCC 668B8DFCFCFFFF          mov cx, word ptr [ebp+FFFFFCFC]
:00408FD3 66898C053CFDFFFF        mov word ptr [ebp+eax-000002C4], cx
:00408FDB 8B95F8FCFFFF            mov edx, dword ptr [ebp+FFFFFCF8]
:00408FE1 81E2FFFF0000            and edx, 0000FFFF
:00408FE7 81FAFFFF0000            cmp edx, 0000FFFF
:00408FED 0F84AB000000            je 0040909E
:00408FF3 8B45F8                  mov eax, dword ptr [ebp-08]
:00408FF6 50                      push eax
:00408FF7 B9806D4800              mov ecx, 00486D80
:00408FFC E8CF390000              call 0040C9D0
:00409001 898518FDFFFF            mov dword ptr [ebp+FFFFFD18], eax
:00409007 8B8DF8FCFFFF            mov ecx, dword ptr [ebp+FFFFFCF8]
:0040900D 81E1FFFF0000            and ecx, 0000FFFF
:00409013 8B9518FDFFFF            mov edx, dword ptr [ebp+FFFFFD18]
:00409019 890A                    mov dword ptr [edx], ecx
:0040901B 8B8518FDFFFF            mov eax, dword ptr [ebp+FFFFFD18]
:00409021 8A8DE8FCFFFF            mov cl, byte ptr [ebp+FFFFFCE8]
:00409027 884804                  mov byte ptr [eax+04], cl
:0040902A 8B9518FDFFFF            mov edx, dword ptr [ebp+FFFFFD18]
:00409030 8A85E0FCFFFF            mov al, byte ptr [ebp+FFFFFCE0]
:00409036 884205                  mov byte ptr [edx+05], al
:00409039 8B8DE4FCFFFF            mov ecx, dword ptr [ebp+FFFFFCE4]
:0040903F 81E1FFFF0000            and ecx, 0000FFFF
:00409045 F7D9                    neg ecx
:00409047 1BC9                    sbb ecx, ecx
:00409049 41                      inc ecx
:0040904A 8B9500FDFFFF            mov edx, dword ptr [ebp+FFFFFD00]
:00409050 81E2FFFF0000            and edx, 0000FFFF
:00409056 F7DA                    neg edx
:00409058 1BD2                    sbb edx, edx
:0040905A 83E202                  and edx, 00000002
:0040905D 0BCA                    or ecx, edx
:0040905F 8B85F0FCFFFF            mov eax, dword ptr [ebp+FFFFFCF0]
:00409065 25FFFF0000              and eax, 0000FFFF
:0040906A 83E801                  sub eax, 00000001
:0040906D F7D8                    neg eax
:0040906F 1BC0                    sbb eax, eax
:00409071 24FC                    and al, FC
:00409073 83C004                  add eax, 00000004
:00409076 0BC8                    or ecx, eax
:00409078 8B9518FDFFFF            mov edx, dword ptr [ebp+FFFFFD18]
:0040907E 894A08                  mov dword ptr [edx+08], ecx
:00409081 8B85FCFCFFFF            mov eax, dword ptr [ebp+FFFFFCFC]
:00409087 25FFFF0000              and eax, 0000FFFF
:0040908C 8B8D18FDFFFF            mov ecx, dword ptr [ebp+FFFFFD18]
:00409092 894114                  mov dword ptr [ecx+14], eax
:00409095 8B55F8                  mov edx, dword ptr [ebp-08]
:00409098 83C201                  add edx, 00000001
:0040909B 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408FED(C)
|
:0040909E E9B3FCFFFF              jmp 00408D56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00408D6C(C)
|
:004090A3 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00408BAA(U), :00408BD9(U), :00408BFF(U), :00408C2E(U), :00408C5B(U)
|:00408C8A(U), :00408CB9(U), :00408D9C(U), :00408DE3(U), :00408E2A(U)
|:00408E71(U), :00408EAF(U), :00408EEB(U), :00408F30(U), :00408F77(U)
|:00408FBE(U)
|
:004090A8 8BE5                    mov esp, ebp
:004090AA 5D                      pop ebp
:004090AB C3                      ret



* Referenced by a CALL at Address:
|:00406EC4   
|
:004090AC 55                      push ebp
:004090AD 8BEC                    mov ebp, esp
:004090AF B840120000              mov eax, 00001240
:004090B4 E867640600              call 0046F520
:004090B9 6A26                    push 00000026
:004090BB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004090BE E8CA330000              call 0040C48D
:004090C3 66898524EEFFFF          mov word ptr [ebp+FFFFEE24], ax
:004090CA 8B8524EEFFFF            mov eax, dword ptr [ebp+FFFFEE24]
:004090D0 25FFFF0000              and eax, 0000FFFF
:004090D5 3D00800000              cmp eax, 00008000
:004090DA 750A                    jne 004090E6

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004090DC B805000000              mov eax, 00000005
:004090E1 E9AC070000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004090DA(C)
|
:004090E6 8B8D24EEFFFF            mov ecx, dword ptr [ebp+FFFFEE24]
:004090EC 81E1FFFF0000            and ecx, 0000FFFF
:004090F2 894DFC                  mov dword ptr [ebp-04], ecx
:004090F5 C745F800000000          mov [ebp-08], 00000000
:004090FC EB09                    jmp 00409107

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409138(U), :00409142(U), :00409154(U)
|
:004090FE 8B55F8                  mov edx, dword ptr [ebp-08]
:00409101 83C201                  add edx, 00000001
:00409104 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004090FC(U)
|
:00409107 837DF85A                cmp dword ptr [ebp-08], 0000005A
:0040910B 7D49                    jge 00409156
:0040910D 8B45F8                  mov eax, dword ptr [ebp-08]
:00409110 6BC034                  imul eax, 00000034
:00409113 81B8C48D4800FFFF0000    cmp dword ptr [eax+00488DC4], 0000FFFF
:0040911D 7435                    je 00409154
:0040911F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409122 6BC934                  imul ecx, 00000034
:00409125 8B91CC8D4800            mov edx, dword ptr [ecx+00488DCC]
:0040912B 83E201                  and edx, 00000001
:0040912E 85D2                    test edx, edx
:00409130 740A                    je 0040913C
:00409132 837DFC00                cmp dword ptr [ebp-04], 00000000
:00409136 7402                    je 0040913A
:00409138 EBC4                    jmp 004090FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409136(C)
|
:0040913A EB08                    jmp 00409144

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409130(C)
|
:0040913C 837DFC00                cmp dword ptr [ebp-04], 00000000
:00409140 7502                    jne 00409144
:00409142 EBBA                    jmp 004090FE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040913A(U), :00409140(C)
|
:00409144 8B45F8                  mov eax, dword ptr [ebp-08]
:00409147 6BC034                  imul eax, 00000034
:0040914A C780C48D4800FFFF0000    mov dword ptr [ebx+00488DC4], 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040911D(C)
|
:00409154 EBA8                    jmp 004090FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040910B(C)
|
:00409156 C745F800000000          mov [ebp-08], 00000000
:0040915D EB09                    jmp 00409168

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409888(U)
|
:0040915F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409162 83C101                  add ecx, 00000001
:00409165 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040915D(U)
|
:00409168 837DF83C                cmp dword ptr [ebp-08], 0000003C
:0040916C 0F8D1B070000            jnl 0040988D

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00409172 6A02                    push 00000002
:00409174 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409177 E811330000              call 0040C48D
:0040917C 66898510EEFFFF          mov word ptr [ebp+FFFFEE10], ax
:00409183 8B9510EEFFFF            mov edx, dword ptr [ebp+FFFFEE10]
:00409189 81E2FFFF0000            and edx, 0000FFFF
:0040918F 81FA00800000            cmp edx, 00008000
:00409195 750A                    jne 004091A1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409197 B805000000              mov eax, 00000005
:0040919C E9F1060000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409195(C)
|
:004091A1 8B45F8                  mov eax, dword ptr [ebp-08]
:004091A4 6BC04C                  imul eax, 0000004C
:004091A7 668B8D10EEFFFF          mov cx, word ptr [ebp+FFFFEE10]
:004091AE 66898C0528EEFFFF        mov word ptr [ebp+eax-000011D8], cx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004091B6 6A04                    push 00000004
:004091B8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004091BB E8CD320000              call 0040C48D
:004091C0 8985E0EDFFFF            mov dword ptr [ebp+FFFFEDE0], eax
:004091C6 81BDE0EDFFFF00000080    cmp dword ptr [ebp+FFFFEDE0], 80000000
:004091D0 750A                    jne 004091DC

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004091D2 B805000000              mov eax, 00000005
:004091D7 E9B6060000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004091D0(C)
|
:004091DC 8B55F8                  mov edx, dword ptr [ebp-08]
:004091DF 6BD24C                  imul edx, 0000004C
:004091E2 8B85E0EDFFFF            mov eax, dword ptr [ebp+FFFFEDE0]
:004091E8 8984152CEEFFFF          mov dword ptr [ebp+edx-000011D4], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004091EF 6A04                    push 00000004
:004091F1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004091F4 E894320000              call 0040C48D
:004091F9 8985D8EDFFFF            mov dword ptr [ebp+FFFFEDD8], eax
:004091FF 81BDD8EDFFFF00000080    cmp dword ptr [ebp+FFFFEDD8], 80000000
:00409209 750A                    jne 00409215

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040920B B805000000              mov eax, 00000005
:00409210 E97D060000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409209(C)
|
:00409215 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409218 6BC94C                  imul ecx, 0000004C
:0040921B 8B95D8EDFFFF            mov edx, dword ptr [ebp+FFFFEDD8]
:00409221 89940D30EEFFFF          mov dword ptr [ebp+ecx-000011D0], edx
:00409228 6A2B                    push 0000002B
:0040922A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040922D E85B320000              call 0040C48D
:00409232 668985F4EDFFFF          mov word ptr [ebp+FFFFEDF4], ax
:00409239 8B85F4EDFFFF            mov eax, dword ptr [ebp+FFFFEDF4]
:0040923F 25FFFF0000              and eax, 0000FFFF
:00409244 3D00800000              cmp eax, 00008000
:00409249 750A                    jne 00409255

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040924B B805000000              mov eax, 00000005
:00409250 E93D060000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409249(C)
|
:00409255 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409258 6BC94C                  imul ecx, 0000004C
:0040925B 668B95F4EDFFFF          mov dx, word ptr [ebp+FFFFEDF4]
:00409262 6689940D34EEFFFF        mov word ptr [ebp+ecx-000011CC], dx
:0040926A 6A33                    push 00000033
:0040926C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040926F E819320000              call 0040C48D
:00409274 668985F8EDFFFF          mov word ptr [ebp+FFFFEDF8], ax
:0040927B 8B85F8EDFFFF            mov eax, dword ptr [ebp+FFFFEDF8]
:00409281 25FFFF0000              and eax, 0000FFFF
:00409286 3D00800000              cmp eax, 00008000
:0040928B 750A                    jne 00409297

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040928D B805000000              mov eax, 00000005
:00409292 E9FB050000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040928B(C)
|
:00409297 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040929A 6BC94C                  imul ecx, 0000004C
:0040929D 668B95F8EDFFFF          mov dx, word ptr [ebp+FFFFEDF8]
:004092A4 6689940D36EEFFFF        mov word ptr [ebp+ecx-000011CA], dx
:004092AC 6A26                    push 00000026
:004092AE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004092B1 E8D7310000              call 0040C48D
:004092B6 668985FCEDFFFF          mov word ptr [ebp+FFFFEDFC], ax
:004092BD 8B85FCEDFFFF            mov eax, dword ptr [ebp+FFFFEDFC]
:004092C3 25FFFF0000              and eax, 0000FFFF
:004092C8 3D00800000              cmp eax, 00008000
:004092CD 750A                    jne 004092D9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004092CF B805000000              mov eax, 00000005
:004092D4 E9B9050000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004092CD(C)
|
:004092D9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004092DC 6BC94C                  imul ecx, 0000004C
:004092DF 668B95FCEDFFFF          mov dx, word ptr [ebp+FFFFEDFC]
:004092E6 6689940D38EEFFFF        mov word ptr [ebp+ecx-000011C8], dx
:004092EE 6A26                    push 00000026
:004092F0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004092F3 E895310000              call 0040C48D
:004092F8 6689851CEEFFFF          mov word ptr [ebp+FFFFEE1C], ax
:004092FF 8B851CEEFFFF            mov eax, dword ptr [ebp+FFFFEE1C]
:00409305 25FFFF0000              and eax, 0000FFFF
:0040930A 3D00800000              cmp eax, 00008000
:0040930F 750A                    jne 0040931B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409311 B805000000              mov eax, 00000005
:00409316 E977050000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040930F(C)
|
:0040931B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040931E 6BC94C                  imul ecx, 0000004C
:00409321 668B951CEEFFFF          mov dx, word ptr [ebp+FFFFEE1C]
:00409328 6689940D3AEEFFFF        mov word ptr [ebp+ecx-000011C6], dx

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00409330 6A07                    push 00000007
:00409332 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409335 E853310000              call 0040C48D
:0040933A 66898508EEFFFF          mov word ptr [ebp+FFFFEE08], ax
:00409341 8B8508EEFFFF            mov eax, dword ptr [ebp+FFFFEE08]
:00409347 25FFFF0000              and eax, 0000FFFF
:0040934C 3D00800000              cmp eax, 00008000
:00409351 750A                    jne 0040935D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409353 B805000000              mov eax, 00000005
:00409358 E935050000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409351(C)
|
:0040935D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409360 6BC94C                  imul ecx, 0000004C
:00409363 668B9508EEFFFF          mov dx, word ptr [ebp+FFFFEE08]
:0040936A 6689940D3CEEFFFF        mov word ptr [ebp+ecx-000011C4], dx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00409372 6A02                    push 00000002
:00409374 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409377 E811310000              call 0040C48D
:0040937C 6689850CEEFFFF          mov word ptr [ebp+FFFFEE0C], ax
:00409383 8B850CEEFFFF            mov eax, dword ptr [ebp+FFFFEE0C]
:00409389 25FFFF0000              and eax, 0000FFFF
:0040938E 3D00800000              cmp eax, 00008000
:00409393 750A                    jne 0040939F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409395 B805000000              mov eax, 00000005
:0040939A E9F3040000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409393(C)
|
:0040939F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004093A2 6BC94C                  imul ecx, 0000004C
:004093A5 668B950CEEFFFF          mov dx, word ptr [ebp+FFFFEE0C]
:004093AC 6689940D3EEEFFFF        mov word ptr [ebp+ecx-000011C2], dx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004093B4 6A04                    push 00000004
:004093B6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004093B9 E8CF300000              call 0040C48D
:004093BE 8985DCEDFFFF            mov dword ptr [ebp+FFFFEDDC], eax
:004093C4 81BDDCEDFFFF00000080    cmp dword ptr [ebp+FFFFEDDC], 80000000
:004093CE 750A                    jne 004093DA

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004093D0 B805000000              mov eax, 00000005
:004093D5 E9B8040000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004093CE(C)
|
:004093DA 8B45F8                  mov eax, dword ptr [ebp-08]
:004093DD 6BC04C                  imul eax, 0000004C
:004093E0 8B8DDCEDFFFF            mov ecx, dword ptr [ebp+FFFFEDDC]
:004093E6 898C0540EEFFFF          mov dword ptr [ebp+eax-000011C0], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004093ED 6A04                    push 00000004
:004093EF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004093F2 E896300000              call 0040C48D
:004093F7 898514EEFFFF            mov dword ptr [ebp+FFFFEE14], eax
:004093FD 81BD14EEFFFF00000080    cmp dword ptr [ebp+FFFFEE14], 80000000
:00409407 750A                    jne 00409413

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409409 B805000000              mov eax, 00000005
:0040940E E97F040000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409407(C)
|
:00409413 8B55F8                  mov edx, dword ptr [ebp-08]
:00409416 6BD24C                  imul edx, 0000004C
:00409419 8B8514EEFFFF            mov eax, dword ptr [ebp+FFFFEE14]
:0040941F 89841544EEFFFF          mov dword ptr [ebp+edx-000011BC], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00409426 6A03                    push 00000003
:00409428 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040942B E85D300000              call 0040C48D
:00409430 668985CCEDFFFF          mov word ptr [ebp+FFFFEDCC], ax
:00409437 8B8DCCEDFFFF            mov ecx, dword ptr [ebp+FFFFEDCC]
:0040943D 81E1FFFF0000            and ecx, 0000FFFF
:00409443 81F900800000            cmp ecx, 00008000
:00409449 750A                    jne 00409455

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040944B B805000000              mov eax, 00000005
:00409450 E93D040000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409449(C)
|
:00409455 8B55F8                  mov edx, dword ptr [ebp-08]
:00409458 6BD24C                  imul edx, 0000004C
:0040945B 668B85CCEDFFFF          mov ax, word ptr [ebp+FFFFEDCC]
:00409462 6689841548EEFFFF        mov word ptr [ebp+edx-000011B8], ax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040946A 6A04                    push 00000004
:0040946C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040946F E819300000              call 0040C48D
:00409474 898520EEFFFF            mov dword ptr [ebp+FFFFEE20], eax
:0040947A 81BD20EEFFFF00000080    cmp dword ptr [ebp+FFFFEE20], 80000000
:00409484 750A                    jne 00409490

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409486 B805000000              mov eax, 00000005
:0040948B E902040000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409484(C)
|
:00409490 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409493 6BC94C                  imul ecx, 0000004C
:00409496 8B9520EEFFFF            mov edx, dword ptr [ebp+FFFFEE20]
:0040949C 89940D4CEEFFFF          mov dword ptr [ebp+ecx-000011B4], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004094A3 6A04                    push 00000004
:004094A5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004094A8 E8E02F0000              call 0040C48D
:004094AD 8985E8EDFFFF            mov dword ptr [ebp+FFFFEDE8], eax
:004094B3 81BDE8EDFFFF00000080    cmp dword ptr [ebp+FFFFEDE8], 80000000
:004094BD 750A                    jne 004094C9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004094BF B805000000              mov eax, 00000005
:004094C4 E9C9030000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004094BD(C)
|
:004094C9 8B45F8                  mov eax, dword ptr [ebp-08]
:004094CC 6BC04C                  imul eax, 0000004C
:004094CF 8B8DE8EDFFFF            mov ecx, dword ptr [ebp+FFFFEDE8]
:004094D5 898C0550EEFFFF          mov dword ptr [ebp+eax-000011B0], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004094DC 6A04                    push 00000004
:004094DE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004094E1 E8A72F0000              call 0040C48D
:004094E6 898504EEFFFF            mov dword ptr [ebp+FFFFEE04], eax
:004094EC 81BD04EEFFFF00000080    cmp dword ptr [ebp+FFFFEE04], 80000000
:004094F6 750A                    jne 00409502

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004094F8 B805000000              mov eax, 00000005
:004094FD E990030000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004094F6(C)
|
:00409502 8B55F8                  mov edx, dword ptr [ebp-08]
:00409505 6BD24C                  imul edx, 0000004C
:00409508 8B8504EEFFFF            mov eax, dword ptr [ebp+FFFFEE04]
:0040950E 89841554EEFFFF          mov dword ptr [ebp+edx-000011AC], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409515 6A04                    push 00000004
:00409517 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040951A E86E2F0000              call 0040C48D
:0040951F 8985ECEDFFFF            mov dword ptr [ebp+FFFFEDEC], eax
:00409525 81BDECEDFFFF00000080    cmp dword ptr [ebp+FFFFEDEC], 80000000
:0040952F 750A                    jne 0040953B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409531 B805000000              mov eax, 00000005
:00409536 E957030000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040952F(C)
|
:0040953B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040953E 6BC94C                  imul ecx, 0000004C
:00409541 8B95ECEDFFFF            mov edx, dword ptr [ebp+FFFFEDEC]
:00409547 89940D58EEFFFF          mov dword ptr [ebp+ecx-000011A8], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040954E 6A04                    push 00000004
:00409550 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409553 E8352F0000              call 0040C48D
:00409558 8985D4EDFFFF            mov dword ptr [ebp+FFFFEDD4], eax
:0040955E 81BDD4EDFFFF00000080    cmp dword ptr [ebp+FFFFEDD4], 80000000
:00409568 750A                    jne 00409574

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040956A B805000000              mov eax, 00000005
:0040956F E91E030000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409568(C)
|
:00409574 8B45F8                  mov eax, dword ptr [ebp-08]
:00409577 6BC04C                  imul eax, 0000004C
:0040957A 8B8DD4EDFFFF            mov ecx, dword ptr [ebp+FFFFEDD4]
:00409580 898C055CEEFFFF          mov dword ptr [ebp+eax-000011A4], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409587 6A04                    push 00000004
:00409589 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040958C E8FC2E0000              call 0040C48D
:00409591 8985D0EDFFFF            mov dword ptr [ebp+FFFFEDD0], eax
:00409597 81BDD0EDFFFF00000080    cmp dword ptr [ebp+FFFFEDD0], 80000000
:004095A1 750A                    jne 004095AD

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004095A3 B805000000              mov eax, 00000005
:004095A8 E9E5020000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004095A1(C)
|
:004095AD 8B55F8                  mov edx, dword ptr [ebp-08]
:004095B0 6BD24C                  imul edx, 0000004C
:004095B3 8B85D0EDFFFF            mov eax, dword ptr [ebp+FFFFEDD0]
:004095B9 89841560EEFFFF          mov dword ptr [ebp+edx-000011A0], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004095C0 6A04                    push 00000004
:004095C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004095C5 E8C32E0000              call 0040C48D
:004095CA 8985F0EDFFFF            mov dword ptr [ebp+FFFFEDF0], eax
:004095D0 81BDF0EDFFFF00000080    cmp dword ptr [ebp+FFFFEDF0], 80000000
:004095DA 750A                    jne 004095E6

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004095DC B805000000              mov eax, 00000005
:004095E1 E9AC020000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004095DA(C)
|
:004095E6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004095E9 6BC94C                  imul ecx, 0000004C
:004095EC 8B95F0EDFFFF            mov edx, dword ptr [ebp+FFFFEDF0]
:004095F2 89940D64EEFFFF          mov dword ptr [ebp+ecx-0000119C], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004095F9 6A04                    push 00000004
:004095FB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004095FE E88A2E0000              call 0040C48D
:00409603 898500EEFFFF            mov dword ptr [ebp+FFFFEE00], eax
:00409609 81BD00EEFFFF00000080    cmp dword ptr [ebp+FFFFEE00], 80000000
:00409613 750A                    jne 0040961F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409615 B805000000              mov eax, 00000005
:0040961A E973020000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409613(C)
|
:0040961F 8B45F8                  mov eax, dword ptr [ebp-08]
:00409622 6BC04C                  imul eax, 0000004C
:00409625 8B8D00EEFFFF            mov ecx, dword ptr [ebp+FFFFEE00]
:0040962B 898C0568EEFFFF          mov dword ptr [ebp+eax-00001198], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409632 6A04                    push 00000004
:00409634 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409637 E8512E0000              call 0040C48D
:0040963C 8985E4EDFFFF            mov dword ptr [ebp+FFFFEDE4], eax
:00409642 81BDE4EDFFFF00000080    cmp dword ptr [ebp+FFFFEDE4], 80000000
:0040964C 750A                    jne 00409658

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040964E B805000000              mov eax, 00000005
:00409653 E93A020000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040964C(C)
|
:00409658 8B55F8                  mov edx, dword ptr [ebp-08]
:0040965B 6BD24C                  imul edx, 0000004C
:0040965E 8B85E4EDFFFF            mov eax, dword ptr [ebp+FFFFEDE4]
:00409664 8984156CEEFFFF          mov dword ptr [ebp+edx-00001194], eax
:0040966B 6A17                    push 00000017
:0040966D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409670 E8182E0000              call 0040C48D
:00409675 66898518EEFFFF          mov word ptr [ebp+FFFFEE18], ax
:0040967C 8B8D18EEFFFF            mov ecx, dword ptr [ebp+FFFFEE18]
:00409682 81E1FFFF0000            and ecx, 0000FFFF
:00409688 81F900800000            cmp ecx, 00008000
:0040968E 750A                    jne 0040969A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409690 B805000000              mov eax, 00000005
:00409695 E9F8010000              jmp 00409892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040968E(C)
|
:0040969A 8B55F8                  mov edx, dword ptr [ebp-08]
:0040969D 6BD24C                  imul edx, 0000004C
:004096A0 668B8518EEFFFF          mov ax, word ptr [ebp+FFFFEE18]
:004096A7 6689841570EEFFFF        mov word ptr [ebp+edx-00001190], ax
:004096AF 8B8D10EEFFFF            mov ecx, dword ptr [ebp+FFFFEE10]
:004096B5 81E1FFFF0000            and ecx, 0000FFFF
:004096BB 81F9FFFF0000            cmp ecx, 0000FFFF
:004096C1 0F84C1010000            je 00409888
:004096C7 C785C4EDFFFFFFFFFFFF    mov dword ptr [ebp+FFFFEDC4], FFFFFFFF
:004096D1 C785C8EDFFFF00000000    mov dword ptr [ebp+FFFFEDC8], 00000000
:004096DB EB0F                    jmp 004096EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040971F(U)
|
:004096DD 8B95C8EDFFFF            mov edx, dword ptr [ebp+FFFFEDC8]
:004096E3 83C201                  add edx, 00000001
:004096E6 8995C8EDFFFF            mov dword ptr [ebp+FFFFEDC8], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004096DB(U)
|
:004096EC 83BDC8EDFFFF5A          cmp dword ptr [ebp+FFFFEDC8], 0000005A
:004096F3 7D2C                    jge 00409721
:004096F5 8B85C8EDFFFF            mov eax, dword ptr [ebp+FFFFEDC8]
:004096FB 6BC034                  imul eax, 00000034
:004096FE 81B8C48D4800FFFF0000    cmp dword ptr [eax+00488DC4], 0000FFFF
:00409708 7515                    jne 0040971F
:0040970A 83BDC4EDFFFFFF          cmp dword ptr [ebp+FFFFEDC4], FFFFFFFF
:00409711 750C                    jne 0040971F
:00409713 8B8DC8EDFFFF            mov ecx, dword ptr [ebp+FFFFEDC8]
:00409719 898DC4EDFFFF            mov dword ptr [ebp+FFFFEDC4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409708(C), :00409711(C)
|
:0040971F EBBC                    jmp 004096DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004096F3(C)
|
:00409721 8B9510EEFFFF            mov edx, dword ptr [ebp+FFFFEE10]
:00409727 81E2FFFF0000            and edx, 0000FFFF
:0040972D 8B85C4EDFFFF            mov eax, dword ptr [ebp+FFFFEDC4]
:00409733 6BC034                  imul eax, 00000034
:00409736 8990C48D4800            mov dword ptr [eax+00488DC4], edx
:0040973C 8B8DC4EDFFFF            mov ecx, dword ptr [ebp+FFFFEDC4]
:00409742 6BC934                  imul ecx, 00000034
:00409745 8A95E0EDFFFF            mov dl, byte ptr [ebp+FFFFEDE0]
:0040974B 8891C88D4800            mov byte ptr [ecx+00488DC8], dl
:00409751 8B85C4EDFFFF            mov eax, dword ptr [ebp+FFFFEDC4]
:00409757 6BC034                  imul eax, 00000034
:0040975A 8A8DD8EDFFFF            mov cl, byte ptr [ebp+FFFFEDD8]
:00409760 8888C98D4800            mov byte ptr [eax+00488DC9], cl
:00409766 33D2                    xor edx, edx
:00409768 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040976C 0F94C2                  sete dl
:0040976F 8B851CEEFFFF            mov eax, dword ptr [ebp+FFFFEE1C]
:00409775 25FFFF0000              and eax, 0000FFFF
:0040977A F7D8                    neg eax
:0040977C 1BC0                    sbb eax, eax
:0040977E 83E002                  and eax, 00000002
:00409781 0BD0                    or edx, eax
:00409783 8B8DF4EDFFFF            mov ecx, dword ptr [ebp+FFFFEDF4]
:00409789 81E1FFFF0000            and ecx, 0000FFFF
:0040978F 83E901                  sub ecx, 00000001
:00409792 F7D9                    neg ecx
:00409794 1BC9                    sbb ecx, ecx
:00409796 83E1FC                  and ecx, FFFFFFFC
:00409799 83C104                  add ecx, 00000004
:0040979C 0BD1                    or edx, ecx
:0040979E 8B85C4EDFFFF            mov eax, dword ptr [ebp+FFFFEDC4]
:004097A4 6BC034                  imul eax, 00000034
:004097A7 8990CC8D4800            mov dword ptr [eax+00488DCC], edx
:004097AD 8B8DC4EDFFFF            mov ecx, dword ptr [ebp+FFFFEDC4]
:004097B3 6BC934                  imul ecx, 00000034
:004097B6 8A9508EEFFFF            mov dl, byte ptr [ebp+FFFFEE08]
:004097BC 8891D08D4800            mov byte ptr [ecx+00488DD0], dl
:004097C2 8B85C4EDFFFF            mov eax, dword ptr [ebp+FFFFEDC4]
:004097C8 6BC034                  imul eax, 00000034
:004097CB 8A8DF8EDFFFF            mov cl, byte ptr [ebp+FFFFEDF8]
:004097D1 8888D68D4800            mov byte ptr [eax+00488DD6], cl
:004097D7 8B95C4EDFFFF            mov edx, dword ptr [ebp+FFFFEDC4]
:004097DD 6BD234                  imul edx, 00000034
:004097E0 8A85CCEDFFFF            mov al, byte ptr [ebp+FFFFEDCC]
:004097E6 8882D48D4800            mov byte ptr [edx+00488DD4], al
:004097EC 8B8DC4EDFFFF            mov ecx, dword ptr [ebp+FFFFEDC4]
:004097F2 6BC934                  imul ecx, 00000034
:004097F5 8A9520EEFFFF            mov dl, byte ptr [ebp+FFFFEE20]
:004097FB 8891D58D4800            mov byte ptr [ecx+00488DD5], dl
:00409801 8B8518EEFFFF            mov eax, dword ptr [ebp+FFFFEE18]
:00409807 25FFFF0000              and eax, 0000FFFF
:0040980C 8B8DC4EDFFFF            mov ecx, dword ptr [ebp+FFFFEDC4]
:00409812 6BC934                  imul ecx, 00000034
:00409815 8981D88D4800            mov dword ptr [ecx+00488DD8], eax
:0040981B 8B9508EEFFFF            mov edx, dword ptr [ebp+FFFFEE08]
:00409821 81E2FFFF0000            and edx, 0000FFFF
:00409827 8995C0EDFFFF            mov dword ptr [ebp+FFFFEDC0], edx
:0040982D 83BDC0EDFFFF06          cmp dword ptr [ebp+FFFFEDC0], 00000006
:00409834 7752                    ja 00409888
:00409836 8B85C0EDFFFF            mov eax, dword ptr [ebp+FFFFEDC0]
:0040983C FF248596984000          jmp dword ptr [4*eax+00409896]
:00409843 EB43                    jmp 00409888
:00409845 8B8DC4EDFFFF            mov ecx, dword ptr [ebp+FFFFEDC4]
:0040984B 6BC934                  imul ecx, 00000034
:0040984E 668B950CEEFFFF          mov dx, word ptr [ebp+FFFFEE0C]
:00409855 668991D28D4800          mov word ptr [ecx+00488DD2], dx
:0040985C EB2A                    jmp 00409888
:0040985E 8B85C4EDFFFF            mov eax, dword ptr [ebp+FFFFEDC4]
:00409864 6BC034                  imul eax, 00000034
:00409867 8A8DDCEDFFFF            mov cl, byte ptr [ebp+FFFFEDDC]
:0040986D 8888D28D4800            mov byte ptr [eax+00488DD2], cl
:00409873 8B95C4EDFFFF            mov edx, dword ptr [ebp+FFFFEDC4]
:00409879 6BD234                  imul edx, 00000034
:0040987C 8A8514EEFFFF            mov al, byte ptr [ebp+FFFFEE14]
:00409882 8882D38D4800            mov byte ptr [edx+00488DD3], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004096C1(C), :00409834(C), :00409843(U), :0040985C(U)
|
:00409888 E9D2F8FFFF              jmp 0040915F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040916C(C)
|
:0040988D B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004090E1(U), :0040919C(U), :004091D7(U), :00409210(U), :00409250(U)
|:00409292(U), :004092D4(U), :00409316(U), :00409358(U), :0040939A(U)
|:004093D5(U), :0040940E(U), :00409450(U), :0040948B(U), :004094C4(U)
|:004094FD(U), :00409536(U), :0040956F(U), :004095A8(U), :004095E1(U)
|:0040961A(U), :00409653(U), :00409695(U)
|
:00409892 8BE5                    mov esp, ebp
:00409894 5D                      pop ebp
:00409895 C3                      ret



:00409896 43984000                DWORD 00409843
:0040989A 88984000                DWORD 00409888
:0040989E 88984000                DWORD 00409888
:004098A2 45984000                DWORD 00409845
:004098A6 5E984000                DWORD 0040985E
:004098AA 45984000                DWORD 00409845
:004098AE 5E984000                DWORD 0040985E



* Referenced by a CALL at Address:
|:00406ED5   
|
:004098B2 55                      push ebp
:004098B3 8BEC                    mov ebp, esp
:004098B5 83EC0C                  sub esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004098B8 6A04                    push 00000004
:004098BA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004098BD E8CB2B0000              call 0040C48D
:004098C2 8945F8                  mov dword ptr [ebp-08], eax
:004098C5 817DF800000080          cmp dword ptr [ebp-08], 80000000
:004098CC 7507                    jne 004098D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004098CE B805000000              mov eax, 00000005
:004098D3 EB46                    jmp 0040991B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004098CC(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004098D5 6A04                    push 00000004
:004098D7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004098DA E8AE2B0000              call 0040C48D
:004098DF 8945F4                  mov dword ptr [ebp-0C], eax
:004098E2 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:004098E9 7507                    jne 004098F2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004098EB B805000000              mov eax, 00000005
:004098F0 EB29                    jmp 0040991B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004098E9(C)
|
:004098F2 6A0B                    push 0000000B
:004098F4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004098F7 E8912B0000              call 0040C48D
:004098FC 668945FC                mov word ptr [ebp-04], ax
:00409900 8B45FC                  mov eax, dword ptr [ebp-04]
:00409903 25FFFF0000              and eax, 0000FFFF
:00409908 3D00800000              cmp eax, 00008000
:0040990D 7507                    jne 00409916

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040990F B805000000              mov eax, 00000005
:00409914 EB05                    jmp 0040991B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040990D(C)
|
:00409916 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004098D3(U), :004098F0(U), :00409914(U)
|
:0040991B 8BE5                    mov esp, ebp
:0040991D 5D                      pop ebp
:0040991E C3                      ret



* Referenced by a CALL at Address:
|:00406EE6   
|
:0040991F 55                      push ebp
:00409920 8BEC                    mov ebp, esp
:00409922 83EC14                  sub esp, 00000014

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00409925 6A02                    push 00000002
:00409927 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040992A E85E2B0000              call 0040C48D
:0040992F 668945FC                mov word ptr [ebp-04], ax
:00409933 8B45FC                  mov eax, dword ptr [ebp-04]
:00409936 25FFFF0000              and eax, 0000FFFF
:0040993B 3D00800000              cmp eax, 00008000
:00409940 750A                    jne 0040994C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409942 B805000000              mov eax, 00000005
:00409947 E9DB000000              jmp 00409A27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409940(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040994C 6A04                    push 00000004
:0040994E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409951 E8372B0000              call 0040C48D
:00409956 8945F0                  mov dword ptr [ebp-10], eax
:00409959 817DF000000080          cmp dword ptr [ebp-10], 80000000
:00409960 750A                    jne 0040996C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409962 B805000000              mov eax, 00000005
:00409967 E9BB000000              jmp 00409A27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409960(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040996C 6A04                    push 00000004
:0040996E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409971 E8172B0000              call 0040C48D
:00409976 8945EC                  mov dword ptr [ebp-14], eax
:00409979 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:00409980 750A                    jne 0040998C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409982 B805000000              mov eax, 00000005
:00409987 E99B000000              jmp 00409A27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409980(C)
|
:0040998C 6A2B                    push 0000002B
:0040998E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409991 E8F72A0000              call 0040C48D
:00409996 668945F8                mov word ptr [ebp-08], ax
:0040999A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040999D 81E1FFFF0000            and ecx, 0000FFFF
:004099A3 81F900800000            cmp ecx, 00008000
:004099A9 7507                    jne 004099B2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004099AB B805000000              mov eax, 00000005
:004099B0 EB75                    jmp 00409A27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004099A9(C)
|
:004099B2 6A0D                    push 0000000D
:004099B4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004099B7 E8D12A0000              call 0040C48D
:004099BC 668945F4                mov word ptr [ebp-0C], ax
:004099C0 8B55F4                  mov edx, dword ptr [ebp-0C]
:004099C3 81E2FFFF0000            and edx, 0000FFFF
:004099C9 81FA00800000            cmp edx, 00008000
:004099CF 7507                    jne 004099D8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004099D1 B805000000              mov eax, 00000005
:004099D6 EB4F                    jmp 00409A27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004099CF(C)
|
:004099D8 E8957B0000              call 00411572
:004099DD 85C0                    test eax, eax
:004099DF 7525                    jne 00409A06
:004099E1 668B45F4                mov ax, word ptr [ebp-0C]
:004099E5 50                      push eax
:004099E6 668B4DF8                mov cx, word ptr [ebp-08]
:004099EA 51                      push ecx
:004099EB 6A00                    push 00000000
:004099ED 668B55EC                mov dx, word ptr [ebp-14]
:004099F1 52                      push edx
:004099F2 668B45F0                mov ax, word ptr [ebp-10]
:004099F6 50                      push eax
:004099F7 668B4DFC                mov cx, word ptr [ebp-04]
:004099FB 51                      push ecx
:004099FC E81A400100              call 0041DA1B
:00409A01 83C418                  add esp, 00000018
:00409A04 EB1C                    jmp 00409A22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004099DF(C)
|
:00409A06 8A55EC                  mov dl, byte ptr [ebp-14]
:00409A09 52                      push edx
:00409A0A 8A45F0                  mov al, byte ptr [ebp-10]
:00409A0D 50                      push eax
:00409A0E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00409A11 81E1FFFF0000            and ecx, 0000FFFF
:00409A17 51                      push ecx
:00409A18 B9C84F4B00              mov ecx, 004B4FC8
:00409A1D E81A5E0500              call 0045F83C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A04(U)
|
:00409A22 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409947(U), :00409967(U), :00409987(U), :004099B0(U), :004099D6(U)
|
:00409A27 8BE5                    mov esp, ebp
:00409A29 5D                      pop ebp
:00409A2A C3                      ret



* Referenced by a CALL at Address:
|:00406EF7   
|
:00409A2B 55                      push ebp
:00409A2C 8BEC                    mov ebp, esp
:00409A2E 83EC1C                  sub esp, 0000001C
:00409A31 6A2C                    push 0000002C
:00409A33 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409A36 E8522A0000              call 0040C48D
:00409A3B 668945F0                mov word ptr [ebp-10], ax
:00409A3F 8B45F0                  mov eax, dword ptr [ebp-10]
:00409A42 25FFFF0000              and eax, 0000FFFF
:00409A47 3D00800000              cmp eax, 00008000
:00409A4C 750A                    jne 00409A58

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409A4E B805000000              mov eax, 00000005
:00409A53 E91B010000              jmp 00409B73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A4C(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00409A58 6A02                    push 00000002
:00409A5A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409A5D E82B2A0000              call 0040C48D
:00409A62 668945FC                mov word ptr [ebp-04], ax
:00409A66 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00409A69 81E1FFFF0000            and ecx, 0000FFFF
:00409A6F 81F900800000            cmp ecx, 00008000
:00409A75 750A                    jne 00409A81

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409A77 B805000000              mov eax, 00000005
:00409A7C E9F2000000              jmp 00409B73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A75(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409A81 6A04                    push 00000004
:00409A83 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409A86 E8022A0000              call 0040C48D
:00409A8B 8945EC                  mov dword ptr [ebp-14], eax
:00409A8E 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:00409A95 750A                    jne 00409AA1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409A97 B805000000              mov eax, 00000005
:00409A9C E9D2000000              jmp 00409B73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409A95(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409AA1 6A04                    push 00000004
:00409AA3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409AA6 E8E2290000              call 0040C48D
:00409AAB 8945E4                  mov dword ptr [ebp-1C], eax
:00409AAE 817DE400000080          cmp dword ptr [ebp-1C], 80000000
:00409AB5 750A                    jne 00409AC1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409AB7 B805000000              mov eax, 00000005
:00409ABC E9B2000000              jmp 00409B73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409AB5(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409AC1 6A04                    push 00000004
:00409AC3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409AC6 E8C2290000              call 0040C48D
:00409ACB 8945F8                  mov dword ptr [ebp-08], eax
:00409ACE 817DF800000080          cmp dword ptr [ebp-08], 80000000
:00409AD5 750A                    jne 00409AE1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409AD7 B805000000              mov eax, 00000005
:00409ADC E992000000              jmp 00409B73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409AD5(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409AE1 6A04                    push 00000004
:00409AE3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409AE6 E8A2290000              call 0040C48D
:00409AEB 8945F4                  mov dword ptr [ebp-0C], eax
:00409AEE 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:00409AF5 7507                    jne 00409AFE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409AF7 B805000000              mov eax, 00000005
:00409AFC EB75                    jmp 00409B73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409AF5(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00409AFE 6A03                    push 00000003
:00409B00 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409B03 E885290000              call 0040C48D
:00409B08 668945E8                mov word ptr [ebp-18], ax
:00409B0C 8B55E8                  mov edx, dword ptr [ebp-18]
:00409B0F 81E2FFFF0000            and edx, 0000FFFF
:00409B15 81FA00800000            cmp edx, 00008000
:00409B1B 7507                    jne 00409B24

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409B1D B805000000              mov eax, 00000005
:00409B22 EB4F                    jmp 00409B73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409B1B(C)
|
:00409B24 8B45F0                  mov eax, dword ptr [ebp-10]
:00409B27 25FFFF0000              and eax, 0000FFFF
:00409B2C 85C0                    test eax, eax
:00409B2E 7517                    jne 00409B47
:00409B30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00409B33 81E1FFFF0000            and ecx, 0000FFFF
:00409B39 80CD10                  or ch, 10
:00409B3C 51                      push ecx
:00409B3D E8F8380100              call 0041D43A
:00409B42 83C404                  add esp, 00000004
:00409B45 EB27                    jmp 00409B6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409B2E(C)
|
:00409B47 E8267A0000              call 00411572
:00409B4C 85C0                    test eax, eax
:00409B4E 741E                    je 00409B6E
:00409B50 8A55E8                  mov dl, byte ptr [ebp-18]
:00409B53 52                      push edx
:00409B54 8A45F4                  mov al, byte ptr [ebp-0C]
:00409B57 50                      push eax
:00409B58 8A4DF8                  mov cl, byte ptr [ebp-08]
:00409B5B 51                      push ecx
:00409B5C 8A55E4                  mov dl, byte ptr [ebp-1C]
:00409B5F 52                      push edx
:00409B60 8A45EC                  mov al, byte ptr [ebp-14]
:00409B63 50                      push eax
:00409B64 B9C84F4B00              mov ecx, 004B4FC8
:00409B69 E80C6C0500              call 0046077A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409B45(U), :00409B4E(C)
|
:00409B6E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409A53(U), :00409A7C(U), :00409A9C(U), :00409ABC(U), :00409ADC(U)
|:00409AFC(U), :00409B22(U)
|
:00409B73 8BE5                    mov esp, ebp
:00409B75 5D                      pop ebp
:00409B76 C3                      ret



* Referenced by a CALL at Address:
|:00406F08   
|
:00409B77 55                      push ebp
:00409B78 8BEC                    mov ebp, esp
:00409B7A 83EC10                  sub esp, 00000010

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00409B7D 6A02                    push 00000002
:00409B7F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409B82 E806290000              call 0040C48D
:00409B87 668945FC                mov word ptr [ebp-04], ax
:00409B8B 8B45FC                  mov eax, dword ptr [ebp-04]
:00409B8E 25FFFF0000              and eax, 0000FFFF
:00409B93 3D00800000              cmp eax, 00008000
:00409B98 750A                    jne 00409BA4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409B9A B805000000              mov eax, 00000005
:00409B9F E9E0000000              jmp 00409C84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409B98(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409BA4 6A04                    push 00000004
:00409BA6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409BA9 E8DF280000              call 0040C48D
:00409BAE 8945F4                  mov dword ptr [ebp-0C], eax
:00409BB1 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:00409BB8 750A                    jne 00409BC4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409BBA B805000000              mov eax, 00000005
:00409BBF E9C0000000              jmp 00409C84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409BB8(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409BC4 6A04                    push 00000004
:00409BC6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409BC9 E8BF280000              call 0040C48D
:00409BCE 8945F0                  mov dword ptr [ebp-10], eax
:00409BD1 817DF000000080          cmp dword ptr [ebp-10], 80000000
:00409BD8 750A                    jne 00409BE4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409BDA B805000000              mov eax, 00000005
:00409BDF E9A0000000              jmp 00409C84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409BD8(C)
|
:00409BE4 6A2B                    push 0000002B
:00409BE6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409BE9 E89F280000              call 0040C48D
:00409BEE 668945F8                mov word ptr [ebp-08], ax
:00409BF2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409BF5 81E1FFFF0000            and ecx, 0000FFFF
:00409BFB 81F900800000            cmp ecx, 00008000
:00409C01 7507                    jne 00409C0A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409C03 B805000000              mov eax, 00000005
:00409C08 EB7A                    jmp 00409C84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409C01(C)
|
:00409C0A E863790000              call 00411572
:00409C0F 85C0                    test eax, eax
:00409C11 7423                    je 00409C36
:00409C13 8A55F0                  mov dl, byte ptr [ebp-10]
:00409C16 52                      push edx
:00409C17 8A45F4                  mov al, byte ptr [ebp-0C]
:00409C1A 50                      push eax
:00409C1B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00409C1E 81E1FFFF0000            and ecx, 0000FFFF
:00409C24 51                      push ecx
:00409C25 B9C84F4B00              mov ecx, 004B4FC8
:00409C2A E8FE5E0500              call 0045FB2D
:00409C2F B801000000              mov eax, 00000001
:00409C34 EB4E                    jmp 00409C84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409C11(C)
|
:00409C36 668B55F8                mov dx, word ptr [ebp-08]
:00409C3A 52                      push edx
:00409C3B 668B45F0                mov ax, word ptr [ebp-10]
:00409C3F 50                      push eax
:00409C40 668B4DF4                mov cx, word ptr [ebp-0C]
:00409C44 51                      push ecx
:00409C45 8B55FC                  mov edx, dword ptr [ebp-04]
:00409C48 81E2FFFF0000            and edx, 0000FFFF
:00409C4E 80CE10                  or dh, 10
:00409C51 52                      push edx
:00409C52 E81E3F0100              call 0041DB75
:00409C57 83C410                  add esp, 00000010
:00409C5A B9806D4800              mov ecx, 00486D80
:00409C5F E80C2C0000              call 0040C870
:00409C64 25FFFF0000              and eax, 0000FFFF
:00409C69 83F821                  cmp eax, 00000021
:00409C6C 7511                    jne 00409C7F
:00409C6E 6A00                    push 00000000
:00409C70 E8B35C0200              call 0042F928
:00409C75 83C404                  add esp, 00000004
:00409C78 B801000000              mov eax, 00000001
:00409C7D EB05                    jmp 00409C84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409C6C(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00409C7F B802000000              mov eax, 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409B9F(U), :00409BBF(U), :00409BDF(U), :00409C08(U), :00409C34(U)
|:00409C7D(U)
|
:00409C84 8BE5                    mov esp, ebp
:00409C86 5D                      pop ebp
:00409C87 C3                      ret



* Referenced by a CALL at Address:
|:00406F19   
|
:00409C88 55                      push ebp
:00409C89 8BEC                    mov ebp, esp
:00409C8B 83EC0C                  sub esp, 0000000C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00409C8E 6A02                    push 00000002
:00409C90 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409C93 E8F5270000              call 0040C48D
:00409C98 668945FC                mov word ptr [ebp-04], ax
:00409C9C 8B45FC                  mov eax, dword ptr [ebp-04]
:00409C9F 25FFFF0000              and eax, 0000FFFF
:00409CA4 3D00800000              cmp eax, 00008000
:00409CA9 7507                    jne 00409CB2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409CAB B805000000              mov eax, 00000005
:00409CB0 EB70                    jmp 00409D22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409CA9(C)
|
:00409CB2 6A0D                    push 0000000D
:00409CB4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409CB7 E8D1270000              call 0040C48D
:00409CBC 668945F4                mov word ptr [ebp-0C], ax
:00409CC0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00409CC3 81E1FFFF0000            and ecx, 0000FFFF
:00409CC9 81F900800000            cmp ecx, 00008000
:00409CCF 7507                    jne 00409CD8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409CD1 B805000000              mov eax, 00000005
:00409CD6 EB4A                    jmp 00409D22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409CCF(C)
|
:00409CD8 6A2B                    push 0000002B
:00409CDA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409CDD E8AB270000              call 0040C48D
:00409CE2 668945F8                mov word ptr [ebp-08], ax
:00409CE6 8B55F8                  mov edx, dword ptr [ebp-08]
:00409CE9 81E2FFFF0000            and edx, 0000FFFF
:00409CEF 81FA00800000            cmp edx, 00008000
:00409CF5 7507                    jne 00409CFE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409CF7 B805000000              mov eax, 00000005
:00409CFC EB24                    jmp 00409D22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409CF5(C)
|
:00409CFE 668B45F8                mov ax, word ptr [ebp-08]
:00409D02 50                      push eax
:00409D03 668B4DF4                mov cx, word ptr [ebp-0C]
:00409D07 51                      push ecx
:00409D08 8B55FC                  mov edx, dword ptr [ebp-04]
:00409D0B 81E2FFFF0000            and edx, 0000FFFF
:00409D11 80CE10                  or dh, 10
:00409D14 52                      push edx
:00409D15 E894370100              call 0041D4AE
:00409D1A 83C40C                  add esp, 0000000C
:00409D1D B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409CB0(U), :00409CD6(U), :00409CFC(U)
|
:00409D22 8BE5                    mov esp, ebp
:00409D24 5D                      pop ebp
:00409D25 C3                      ret



* Referenced by a CALL at Address:
|:00406F2A   
|
:00409D26 55                      push ebp
:00409D27 8BEC                    mov ebp, esp
:00409D29 83EC08                  sub esp, 00000008

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00409D2C 6A02                    push 00000002
:00409D2E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409D31 E857270000              call 0040C48D
:00409D36 668945FC                mov word ptr [ebp-04], ax
:00409D3A 8B45FC                  mov eax, dword ptr [ebp-04]
:00409D3D 25FFFF0000              and eax, 0000FFFF
:00409D42 3D00800000              cmp eax, 00008000
:00409D47 7507                    jne 00409D50

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409D49 B805000000              mov eax, 00000005
:00409D4E EB49                    jmp 00409D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409D47(C)
|
:00409D50 6A0D                    push 0000000D
:00409D52 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409D55 E833270000              call 0040C48D
:00409D5A 668945F8                mov word ptr [ebp-08], ax
:00409D5E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409D61 81E1FFFF0000            and ecx, 0000FFFF
:00409D67 81F900800000            cmp ecx, 00008000
:00409D6D 7507                    jne 00409D76

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409D6F B805000000              mov eax, 00000005
:00409D74 EB23                    jmp 00409D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409D6D(C)
|
:00409D76 68FFFF0000              push 0000FFFF
:00409D7B 668B55F8                mov dx, word ptr [ebp-08]
:00409D7F 52                      push edx
:00409D80 8B45FC                  mov eax, dword ptr [ebp-04]
:00409D83 25FFFF0000              and eax, 0000FFFF
:00409D88 80CC10                  or ah, 10
:00409D8B 50                      push eax
:00409D8C E81D370100              call 0041D4AE
:00409D91 83C40C                  add esp, 0000000C
:00409D94 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409D4E(U), :00409D74(U)
|
:00409D99 8BE5                    mov esp, ebp
:00409D9B 5D                      pop ebp
:00409D9C C3                      ret



* Referenced by a CALL at Address:
|:00406F3B   
|
:00409D9D 55                      push ebp
:00409D9E 8BEC                    mov ebp, esp
:00409DA0 83EC08                  sub esp, 00000008

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00409DA3 6A02                    push 00000002
:00409DA5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409DA8 E8E0260000              call 0040C48D
:00409DAD 668945FC                mov word ptr [ebp-04], ax
:00409DB1 8B45FC                  mov eax, dword ptr [ebp-04]
:00409DB4 25FFFF0000              and eax, 0000FFFF
:00409DB9 3D00800000              cmp eax, 00008000
:00409DBE 7507                    jne 00409DC7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409DC0 B805000000              mov eax, 00000005
:00409DC5 EB46                    jmp 00409E0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409DBE(C)
|
:00409DC7 6A13                    push 00000013
:00409DC9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409DCC E8BC260000              call 0040C48D
:00409DD1 668945F8                mov word ptr [ebp-08], ax
:00409DD5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00409DD8 81E1FFFF0000            and ecx, 0000FFFF
:00409DDE 81F900800000            cmp ecx, 00008000
:00409DE4 7507                    jne 00409DED

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409DE6 B805000000              mov eax, 00000005
:00409DEB EB20                    jmp 00409E0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409DE4(C)
|
:00409DED 8A55F8                  mov dl, byte ptr [ebp-08]
:00409DF0 52                      push edx
:00409DF1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00409DF4 81E1FFFF0000            and ecx, 0000FFFF
:00409DFA 6BC950                  imul ecx, 00000050
:00409DFD 81C1787F4900            add ecx, 00497F78
:00409E03 E8E82A0000              call 0040C8F0
:00409E08 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409DC5(U), :00409DEB(U)
|
:00409E0D 8BE5                    mov esp, ebp
:00409E0F 5D                      pop ebp
:00409E10 C3                      ret



* Referenced by a CALL at Address:
|:00406F4C   
|
:00409E11 55                      push ebp
:00409E12 8BEC                    mov ebp, esp
:00409E14 83EC20                  sub esp, 00000020
:00409E17 6A2D                    push 0000002D
:00409E19 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409E1C E86C260000              call 0040C48D
:00409E21 668945FC                mov word ptr [ebp-04], ax
:00409E25 8B45FC                  mov eax, dword ptr [ebp-04]
:00409E28 25FFFF0000              and eax, 0000FFFF
:00409E2D 3D00800000              cmp eax, 00008000
:00409E32 750A                    jne 00409E3E

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409E34 B805000000              mov eax, 00000005
:00409E39 E95B010000              jmp 00409F99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409E32(C)
|
:00409E3E 6A0C                    push 0000000C
:00409E40 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409E43 E845260000              call 0040C48D
:00409E48 668945EC                mov word ptr [ebp-14], ax
:00409E4C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00409E4F 81E1FFFF0000            and ecx, 0000FFFF
:00409E55 81F900800000            cmp ecx, 00008000
:00409E5B 750A                    jne 00409E67

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409E5D B805000000              mov eax, 00000005
:00409E62 E932010000              jmp 00409F99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409E5B(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:00409E67 6A1A                    push 0000001A
:00409E69 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409E6C E81C260000              call 0040C48D
:00409E71 668945F4                mov word ptr [ebp-0C], ax
:00409E75 8B55F4                  mov edx, dword ptr [ebp-0C]
:00409E78 81E2FFFF0000            and edx, 0000FFFF
:00409E7E 81FA00800000            cmp edx, 00008000
:00409E84 750A                    jne 00409E90

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409E86 B805000000              mov eax, 00000005
:00409E8B E909010000              jmp 00409F99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409E84(C)
|
:00409E90 6A1C                    push 0000001C
:00409E92 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409E95 E8F3250000              call 0040C48D
:00409E9A 668945F8                mov word ptr [ebp-08], ax
:00409E9E 8B45F8                  mov eax, dword ptr [ebp-08]
:00409EA1 25FFFF0000              and eax, 0000FFFF
:00409EA6 3D00800000              cmp eax, 00008000
:00409EAB 750A                    jne 00409EB7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409EAD B805000000              mov eax, 00000005
:00409EB2 E9E2000000              jmp 00409F99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409EAB(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409EB7 6A04                    push 00000004
:00409EB9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409EBC E8CC250000              call 0040C48D
:00409EC1 8945E8                  mov dword ptr [ebp-18], eax
:00409EC4 817DE800000080          cmp dword ptr [ebp-18], 80000000
:00409ECB 750A                    jne 00409ED7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409ECD B805000000              mov eax, 00000005
:00409ED2 E9C2000000              jmp 00409F99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409ECB(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00409ED7 6A04                    push 00000004
:00409ED9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409EDC E8AC250000              call 0040C48D
:00409EE1 8945E4                  mov dword ptr [ebp-1C], eax
:00409EE4 817DE400000080          cmp dword ptr [ebp-1C], 80000000
:00409EEB 750A                    jne 00409EF7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409EED B805000000              mov eax, 00000005
:00409EF2 E9A2000000              jmp 00409F99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409EEB(C)
|
:00409EF7 6A2B                    push 0000002B
:00409EF9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409EFC E88C250000              call 0040C48D
:00409F01 668945F0                mov word ptr [ebp-10], ax
:00409F05 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00409F08 81E1FFFF0000            and ecx, 0000FFFF
:00409F0E 81F900800000            cmp ecx, 00008000
:00409F14 7507                    jne 00409F1D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409F16 B805000000              mov eax, 00000005
:00409F1B EB7C                    jmp 00409F99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409F14(C)
|
:00409F1D 8B55FC                  mov edx, dword ptr [ebp-04]
:00409F20 81E2FFFF0000            and edx, 0000FFFF
:00409F26 8955E0                  mov dword ptr [ebp-20], edx
:00409F29 837DE000                cmp dword ptr [ebp-20], 00000000
:00409F2D 7422                    je 00409F51
:00409F2F 837DE001                cmp dword ptr [ebp-20], 00000001
:00409F33 7430                    je 00409F65
:00409F35 837DE002                cmp dword ptr [ebp-20], 00000002
:00409F39 7402                    je 00409F3D
:00409F3B EB3A                    jmp 00409F77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409F39(C)
|
:00409F3D 668B45EC                mov ax, word ptr [ebp-14]
:00409F41 50                      push eax
:00409F42 668B4DF8                mov cx, word ptr [ebp-08]
:00409F46 51                      push ecx
:00409F47 E8A6760000              call 004115F2
:00409F4C 83C408                  add esp, 00000008
:00409F4F EB26                    jmp 00409F77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409F2D(C)
|
:00409F51 668B55EC                mov dx, word ptr [ebp-14]
:00409F55 52                      push edx
:00409F56 668B45F8                mov ax, word ptr [ebp-08]
:00409F5A 50                      push eax
:00409F5B E817770000              call 00411677
:00409F60 83C408                  add esp, 00000008
:00409F63 EB12                    jmp 00409F77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409F33(C)
|
:00409F65 668B4DEC                mov cx, word ptr [ebp-14]
:00409F69 51                      push ecx
:00409F6A 668B55F8                mov dx, word ptr [ebp-08]
:00409F6E 52                      push edx
:00409F6F E83B760000              call 004115AF
:00409F74 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409F3B(U), :00409F4F(U), :00409F63(U)
|
:00409F77 6A01                    push 00000001
:00409F79 B9D8174B00              mov ecx, 004B17D8
:00409F7E E89DCF0200              call 00436F20
:00409F83 8B45EC                  mov eax, dword ptr [ebp-14]
:00409F86 25FFFF0000              and eax, 0000FFFF
:00409F8B 50                      push eax
:00409F8C E824780000              call 004117B5
:00409F91 83C404                  add esp, 00000004
:00409F94 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409E39(U), :00409E62(U), :00409E8B(U), :00409EB2(U), :00409ED2(U)
|:00409EF2(U), :00409F1B(U)
|
:00409F99 8BE5                    mov esp, ebp
:00409F9B 5D                      pop ebp
:00409F9C C3                      ret



* Referenced by a CALL at Address:
|:00406F5D   
|
:00409F9D 55                      push ebp
:00409F9E 8BEC                    mov ebp, esp
:00409FA0 E8DC090100              call 0041A981
:00409FA5 B801000000              mov eax, 00000001
:00409FAA 5D                      pop ebp
:00409FAB C3                      ret



* Referenced by a CALL at Address:
|:00406F6E   
|
:00409FAC 55                      push ebp
:00409FAD 8BEC                    mov ebp, esp
:00409FAF 81EC14040000            sub esp, 00000414
:00409FB5 66C785ECFBFFFFFFFF      mov word ptr [ebp+FFFFFBEC], FFFF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409FBE 6A05                    push 00000005
:00409FC0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00409FC3 E8C5240000              call 0040C48D
:00409FC8 8945F8                  mov dword ptr [ebp-08], eax
:00409FCB 817DF800000080          cmp dword ptr [ebp-08], 80000000
:00409FD2 750A                    jne 00409FDE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00409FD4 B805000000              mov eax, 00000005
:00409FD9 E9C1010000              jmp 0040A19F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00409FD2(C)
|
:00409FDE 8B45F8                  mov eax, dword ptr [ebp-08]
:00409FE1 8945FC                  mov dword ptr [ebp-04], eax
:00409FE4 C745F400000000          mov [ebp-0C], 00000000
:00409FEB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00409FEE 33D2                    xor edx, edx
:00409FF0 8A11                    mov dl, byte ptr [ecx]
:00409FF2 83FA24                  cmp edx, 00000024
:00409FF5 7535                    jne 0040A02C
:00409FF7 8B45FC                  mov eax, dword ptr [ebp-04]
:00409FFA 33C9                    xor ecx, ecx
:00409FFC 8A4801                  mov cl, byte ptr [eax+01]
:00409FFF 83F926                  cmp ecx, 00000026
:0040A002 7528                    jne 0040A02C
:0040A004 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A007 83C201                  add edx, 00000001
:0040A00A 8955FC                  mov dword ptr [ebp-04], edx
:0040A00D 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A010 83C001                  add eax, 00000001
:0040A013 8945FC                  mov dword ptr [ebp-04], eax
:0040A016 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040A019 51                      push ecx
:0040A01A E863790200              call 00431982
:0040A01F 83C404                  add esp, 00000004
:0040A022 B801000000              mov eax, 00000001
:0040A027 E973010000              jmp 0040A19F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409FF5(C), :0040A002(C), :0040A194(C)
|
:0040A02C C745F400000000          mov [ebp-0C], 00000000
:0040A033 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A036 33C0                    xor eax, eax
:0040A038 8A02                    mov al, byte ptr [edx]
:0040A03A 83F826                  cmp eax, 00000026
:0040A03D 0F859E000000            jne 0040A0E1
:0040A043 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040A046 83C101                  add ecx, 00000001
:0040A049 894DFC                  mov dword ptr [ebp-04], ecx
:0040A04C E821750000              call 00411572
:0040A051 85C0                    test eax, eax
:0040A053 7428                    je 0040A07D
:0040A055 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A058 33C0                    xor eax, eax
:0040A05A 8A02                    mov al, byte ptr [edx]
:0040A05C 83F80A                  cmp eax, 0000000A
:0040A05F 751C                    jne 0040A07D
:0040A061 B9C84F4B00              mov ecx, 004B4FC8
:0040A066 E8850B0500              call 0045ABF0
:0040A06B 668985ECFBFFFF          mov word ptr [ebp+FFFFFBEC], ax
:0040A072 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040A075 83C101                  add ecx, 00000001
:0040A078 894DFC                  mov dword ptr [ebp-04], ecx
:0040A07B EB64                    jmp 0040A0E1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A053(C), :0040A05F(C), :0040A0B5(U)
|
:0040A07D 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A080 33C0                    xor eax, eax
:0040A082 8A02                    mov al, byte ptr [edx]
:0040A084 83F80A                  cmp eax, 0000000A
:0040A087 742E                    je 0040A0B7
:0040A089 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040A08C 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A08F 8A02                    mov al, byte ptr [edx]
:0040A091 88840DF0FBFFFF          mov byte ptr [ebp+ecx-00000410], al
:0040A098 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040A09B 83C101                  add ecx, 00000001
:0040A09E 894DF4                  mov dword ptr [ebp-0C], ecx
:0040A0A1 817DF400040000          cmp dword ptr [ebp-0C], 00000400
:0040A0A8 7602                    jbe 0040A0AC
:0040A0AA EB0B                    jmp 0040A0B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A0A8(C)
|
:0040A0AC 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A0AF 83C201                  add edx, 00000001
:0040A0B2 8955FC                  mov dword ptr [ebp-04], edx
:0040A0B5 EBC6                    jmp 0040A07D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A087(C), :0040A0AA(U)
|
:0040A0B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A0BA 83C001                  add eax, 00000001
:0040A0BD 8945FC                  mov dword ptr [ebp-04], eax
:0040A0C0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040A0C3 C6840DF0FBFFFF00        mov byte ptr [ebp+ecx-00000410], 00
:0040A0CB 8D95F0FBFFFF            lea edx, dword ptr [ebp+FFFFFBF0]
:0040A0D1 52                      push edx
:0040A0D2 E804650000              call 004105DB
:0040A0D7 83C404                  add esp, 00000004
:0040A0DA 668985ECFBFFFF          mov word ptr [ebp+FFFFFBEC], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A03D(C), :0040A07B(U)
|
:0040A0E1 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A0E4 50                      push eax
:0040A0E5 8D8DF0FBFFFF            lea ecx, dword ptr [ebp+FFFFFBF0]
:0040A0EB 51                      push ecx
:0040A0EC B9806D4800              mov ecx, 00486D80
:0040A0F1 E861180000              call 0040B957
:0040A0F6 E877740000              call 00411572
:0040A0FB 85C0                    test eax, eax
:0040A0FD 7414                    je 0040A113
:0040A0FF 8B95ECFBFFFF            mov edx, dword ptr [ebp+FFFFFBEC]
:0040A105 81E2FFFF0000            and edx, 0000FFFF
:0040A10B 81FAFFFF0000            cmp edx, 0000FFFF
:0040A111 751F                    jne 0040A132

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A0FD(C)
|
:0040A113 6A20                    push 00000020
:0040A115 8B85ECFBFFFF            mov eax, dword ptr [ebp+FFFFFBEC]
:0040A11B 25FFFF0000              and eax, 0000FFFF
:0040A120 50                      push eax
:0040A121 8D8DF0FBFFFF            lea ecx, dword ptr [ebp+FFFFFBF0]
:0040A127 51                      push ecx
:0040A128 E8815A0200              call 0042FBAE
:0040A12D 83C40C                  add esp, 0000000C
:0040A130 EB1E                    jmp 0040A150

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A111(C)
|
:0040A132 8B95ECFBFFFF            mov edx, dword ptr [ebp+FFFFFBEC]
:0040A138 81E2FFFF0000            and edx, 0000FFFF
:0040A13E 52                      push edx
:0040A13F 8D85F0FBFFFF            lea eax, dword ptr [ebp+FFFFFBF0]
:0040A145 50                      push eax
:0040A146 B9C84F4B00              mov ecx, 004B4FC8
:0040A14B E8EF5B0500              call 0045FD3F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A130(U), :0040A188(U)
|
:0040A150 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040A153 33D2                    xor edx, edx
:0040A155 8A11                    mov dl, byte ptr [ecx]
:0040A157 85D2                    test edx, edx
:0040A159 742F                    je 0040A18A
:0040A15B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A15E 33C9                    xor ecx, ecx
:0040A160 8A08                    mov cl, byte ptr [eax]
:0040A162 83F90A                  cmp ecx, 0000000A
:0040A165 7518                    jne 0040A17F
:0040A167 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A16A 33C0                    xor eax, eax
:0040A16C 8A4201                  mov al, byte ptr [edx+01]
:0040A16F 83F826                  cmp eax, 00000026
:0040A172 750B                    jne 0040A17F
:0040A174 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040A177 83C101                  add ecx, 00000001
:0040A17A 894DFC                  mov dword ptr [ebp-04], ecx
:0040A17D EB0B                    jmp 0040A18A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A165(C), :0040A172(C)
|
:0040A17F 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A182 83C201                  add edx, 00000001
:0040A185 8955FC                  mov dword ptr [ebp-04], edx
:0040A188 EBC6                    jmp 0040A150

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A159(C), :0040A17D(U)
|
:0040A18A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A18D 33C9                    xor ecx, ecx
:0040A18F 8A08                    mov cl, byte ptr [eax]
:0040A191 83F926                  cmp ecx, 00000026
:0040A194 0F8492FEFFFF            je 0040A02C
:0040A19A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00409FD9(U), :0040A027(U)
|
:0040A19F 8BE5                    mov esp, ebp
:0040A1A1 5D                      pop ebp
:0040A1A2 C3                      ret



* Referenced by a CALL at Address:
|:00406F7F   
|
:0040A1A3 55                      push ebp
:0040A1A4 8BEC                    mov ebp, esp
:0040A1A6 81EC04040000            sub esp, 00000404

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A1AC 6A05                    push 00000005
:0040A1AE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A1B1 E8D7220000              call 0040C48D
:0040A1B6 8945FC                  mov dword ptr [ebp-04], eax
:0040A1B9 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040A1C0 7507                    jne 0040A1C9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A1C2 B805000000              mov eax, 00000005
:0040A1C7 EB30                    jmp 0040A1F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A1C0(C)
|
:0040A1C9 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A1CC 50                      push eax
:0040A1CD 8D8DFCFBFFFF            lea ecx, dword ptr [ebp+FFFFFBFC]
:0040A1D3 51                      push ecx
:0040A1D4 B9806D4800              mov ecx, 00486D80
:0040A1D9 E879170000              call 0040B957
:0040A1DE 6A20                    push 00000020
:0040A1E0 68FFFF0000              push 0000FFFF
:0040A1E5 8D95FCFBFFFF            lea edx, dword ptr [ebp+FFFFFBFC]
:0040A1EB 52                      push edx
:0040A1EC E8BD590200              call 0042FBAE
:0040A1F1 83C40C                  add esp, 0000000C
:0040A1F4 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A1C7(U)
|
:0040A1F9 8BE5                    mov esp, ebp
:0040A1FB 5D                      pop ebp
:0040A1FC C3                      ret



* Referenced by a CALL at Address:
|:00406F90   
|
:0040A1FD 55                      push ebp
:0040A1FE 8BEC                    mov ebp, esp
:0040A200 81EC04040000            sub esp, 00000404

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A206 6A05                    push 00000005
:0040A208 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A20B E87D220000              call 0040C48D
:0040A210 8945FC                  mov dword ptr [ebp-04], eax
:0040A213 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040A21A 7507                    jne 0040A223

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A21C B805000000              mov eax, 00000005
:0040A221 EB29                    jmp 0040A24C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A21A(C)
|
:0040A223 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A226 50                      push eax
:0040A227 8D8DFCFBFFFF            lea ecx, dword ptr [ebp+FFFFFBFC]
:0040A22D 51                      push ecx
:0040A22E B9806D4800              mov ecx, 00486D80
:0040A233 E81F170000              call 0040B957
:0040A238 8D95FCFBFFFF            lea edx, dword ptr [ebp+FFFFFBFC]
:0040A23E 52                      push edx
:0040A23F E894750000              call 004117D8
:0040A244 83C404                  add esp, 00000004
:0040A247 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A221(U)
|
:0040A24C 8BE5                    mov esp, ebp
:0040A24E 5D                      pop ebp
:0040A24F C3                      ret



* Referenced by a CALL at Address:
|:00406FA1   
|
:0040A250 55                      push ebp
:0040A251 8BEC                    mov ebp, esp
:0040A253 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A254 6A05                    push 00000005
:0040A256 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A259 E82F220000              call 0040C48D
:0040A25E 8945FC                  mov dword ptr [ebp-04], eax
:0040A261 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040A268 7507                    jne 0040A271

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A26A B805000000              mov eax, 00000005
:0040A26F EB11                    jmp 0040A282

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A268(C)
|
:0040A271 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A274 50                      push eax
:0040A275 E811730000              call 0041158B
:0040A27A 83C404                  add esp, 00000004
:0040A27D B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A26F(U)
|
:0040A282 8BE5                    mov esp, ebp
:0040A284 5D                      pop ebp
:0040A285 C3                      ret



* Referenced by a CALL at Address:
|:00406FB2   
|
:0040A286 55                      push ebp
:0040A287 8BEC                    mov ebp, esp
:0040A289 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A28A 6A05                    push 00000005
:0040A28C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A28F E8F9210000              call 0040C48D
:0040A294 8945FC                  mov dword ptr [ebp-04], eax
:0040A297 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040A29E 7507                    jne 0040A2A7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A2A0 B805000000              mov eax, 00000005
:0040A2A5 EB11                    jmp 0040A2B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A29E(C)
|
:0040A2A7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A2AA 50                      push eax
:0040A2AB E828750000              call 004117D8
:0040A2B0 83C404                  add esp, 00000004
:0040A2B3 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A2A5(U)
|
:0040A2B8 8BE5                    mov esp, ebp
:0040A2BA 5D                      pop ebp
:0040A2BB C3                      ret



* Referenced by a CALL at Address:
|:00406FC3   
|
:0040A2BC 55                      push ebp
:0040A2BD 8BEC                    mov ebp, esp
:0040A2BF 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A2C0 6A05                    push 00000005
:0040A2C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A2C5 E8C3210000              call 0040C48D
:0040A2CA 8945FC                  mov dword ptr [ebp-04], eax
:0040A2CD 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040A2D4 7507                    jne 0040A2DD

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A2D6 B805000000              mov eax, 00000005
:0040A2DB EB18                    jmp 0040A2F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A2D4(C)
|
:0040A2DD 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A2E0 50                      push eax
:0040A2E1 6818A04800              push 0048A018
:0040A2E6 B9806D4800              mov ecx, 00486D80
:0040A2EB E867160000              call 0040B957
:0040A2F0 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A2DB(U)
|
:0040A2F5 8BE5                    mov esp, ebp
:0040A2F7 5D                      pop ebp
:0040A2F8 C3                      ret



* Referenced by a CALL at Address:
|:00406FD4   
|
:0040A2F9 55                      push ebp
:0040A2FA 8BEC                    mov ebp, esp
:0040A2FC 83EC1C                  sub esp, 0000001C
:0040A2FF 6A2D                    push 0000002D
:0040A301 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A304 E884210000              call 0040C48D
:0040A309 668945FC                mov word ptr [ebp-04], ax
:0040A30D 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A310 25FFFF0000              and eax, 0000FFFF
:0040A315 3D00800000              cmp eax, 00008000
:0040A31A 750A                    jne 0040A326

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A31C B805000000              mov eax, 00000005
:0040A321 E983010000              jmp 0040A4A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A31A(C)
|
:0040A326 6A0C                    push 0000000C
:0040A328 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A32B E85D210000              call 0040C48D
:0040A330 668945F0                mov word ptr [ebp-10], ax
:0040A334 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040A337 81E1FFFF0000            and ecx, 0000FFFF
:0040A33D 81F900800000            cmp ecx, 00008000
:0040A343 750A                    jne 0040A34F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A345 B805000000              mov eax, 00000005
:0040A34A E95A010000              jmp 0040A4A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A343(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:0040A34F 6A1A                    push 0000001A
:0040A351 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A354 E834210000              call 0040C48D
:0040A359 668945F4                mov word ptr [ebp-0C], ax
:0040A35D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040A360 81E2FFFF0000            and edx, 0000FFFF
:0040A366 81FA00800000            cmp edx, 00008000
:0040A36C 750A                    jne 0040A378

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A36E B805000000              mov eax, 00000005
:0040A373 E931010000              jmp 0040A4A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A36C(C)
|
:0040A378 6A1C                    push 0000001C
:0040A37A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A37D E80B210000              call 0040C48D
:0040A382 668945F8                mov word ptr [ebp-08], ax
:0040A386 8B45F8                  mov eax, dword ptr [ebp-08]
:0040A389 25FFFF0000              and eax, 0000FFFF
:0040A38E 3D00800000              cmp eax, 00008000
:0040A393 750A                    jne 0040A39F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A395 B805000000              mov eax, 00000005
:0040A39A E90A010000              jmp 0040A4A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A393(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:0040A39F 6A15                    push 00000015
:0040A3A1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A3A4 E8E4200000              call 0040C48D
:0040A3A9 668945EC                mov word ptr [ebp-14], ax
:0040A3AD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040A3B0 81E1FFFF0000            and ecx, 0000FFFF
:0040A3B6 81F900800000            cmp ecx, 00008000
:0040A3BC 750A                    jne 0040A3C8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A3BE B805000000              mov eax, 00000005
:0040A3C3 E9E1000000              jmp 0040A4A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A3BC(C)
|
:0040A3C8 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A3CB 81E2FFFF0000            and edx, 0000FFFF
:0040A3D1 8955E8                  mov dword ptr [ebp-18], edx
:0040A3D4 837DE803                cmp dword ptr [ebp-18], 00000003
:0040A3D8 0F879C000000            ja 0040A47A
:0040A3DE 8B45E8                  mov eax, dword ptr [ebp-18]
:0040A3E1 FF2485ADA44000          jmp dword ptr [4*eax+0040A4AD]
:0040A3E8 668B4DF0                mov cx, word ptr [ebp-10]
:0040A3EC 51                      push ecx
:0040A3ED 668B55EC                mov dx, word ptr [ebp-14]
:0040A3F1 52                      push edx
:0040A3F2 E83D720000              call 00411634
:0040A3F7 83C408                  add esp, 00000008
:0040A3FA 8A45EC                  mov al, byte ptr [ebp-14]
:0040A3FD A2784E4B00              mov byte ptr [004B4E78], al
:0040A402 EB76                    jmp 0040A47A
:0040A404 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040A407 81E1FFFF0000            and ecx, 0000FFFF
:0040A40D 894DE4                  mov dword ptr [ebp-1C], ecx
:0040A410 837DE400                cmp dword ptr [ebp-1C], 00000000
:0040A414 7408                    je 0040A41E
:0040A416 837DE401                cmp dword ptr [ebp-1C], 00000001
:0040A41A 740E                    je 0040A42A
:0040A41C EB18                    jmp 0040A436

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A414(C)
|
:0040A41E C705C045490000000000    mov dword ptr [004945C0], 00000000
:0040A428 EB16                    jmp 0040A440

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A41A(C)
|
:0040A42A C705C045490001000000    mov dword ptr [004945C0], 00000001
:0040A434 EB0A                    jmp 0040A440

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A41C(U)
|
:0040A436 C705C045490000000000    mov dword ptr [004945C0], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A428(U), :0040A434(U)
|
:0040A440 668B55F0                mov dx, word ptr [ebp-10]
:0040A444 52                      push edx
:0040A445 668B45F8                mov ax, word ptr [ebp-08]
:0040A449 50                      push eax
:0040A44A E8A3710000              call 004115F2
:0040A44F 83C408                  add esp, 00000008
:0040A452 EB26                    jmp 0040A47A
:0040A454 668B4DF0                mov cx, word ptr [ebp-10]
:0040A458 51                      push ecx
:0040A459 668B55F8                mov dx, word ptr [ebp-08]
:0040A45D 52                      push edx
:0040A45E E814720000              call 00411677
:0040A463 83C408                  add esp, 00000008
:0040A466 EB12                    jmp 0040A47A
:0040A468 668B45F0                mov ax, word ptr [ebp-10]
:0040A46C 50                      push eax
:0040A46D 668B4DF8                mov cx, word ptr [ebp-08]
:0040A471 51                      push ecx
:0040A472 E838710000              call 004115AF
:0040A477 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A3D8(C), :0040A402(U), :0040A452(U), :0040A466(U)
|
:0040A47A 6A00                    push 00000000
:0040A47C B9D8174B00              mov ecx, 004B17D8
:0040A481 E89ACA0200              call 00436F20
:0040A486 8B55F0                  mov edx, dword ptr [ebp-10]
:0040A489 81E2FFFF0000            and edx, 0000FFFF
:0040A48F 52                      push edx
:0040A490 E820730000              call 004117B5
:0040A495 83C404                  add esp, 00000004
:0040A498 A13CC74A00              mov eax, dword ptr [004AC73C]
:0040A49D 0C02                    or al, 02
:0040A49F A33CC74A00              mov dword ptr [004AC73C], eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040A4A4 B802000000              mov eax, 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A321(U), :0040A34A(U), :0040A373(U), :0040A39A(U), :0040A3C3(U)
|
:0040A4A9 8BE5                    mov esp, ebp
:0040A4AB 5D                      pop ebp
:0040A4AC C3                      ret



:0040A4AD 54A44000                DWORD 0040A454
:0040A4B1 68A44000                DWORD 0040A468
:0040A4B5 04A44000                DWORD 0040A404
:0040A4B9 E8A34000                DWORD 0040A3E8



* Referenced by a CALL at Address:
|:00406FE5   
|
:0040A4BD 55                      push ebp
:0040A4BE 8BEC                    mov ebp, esp
:0040A4C0 83EC18                  sub esp, 00000018
:0040A4C3 6A2D                    push 0000002D
:0040A4C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A4C8 E8C01F0000              call 0040C48D
:0040A4CD 668945FC                mov word ptr [ebp-04], ax
:0040A4D1 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A4D4 25FFFF0000              and eax, 0000FFFF
:0040A4D9 3D00800000              cmp eax, 00008000
:0040A4DE 750A                    jne 0040A4EA

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A4E0 B805000000              mov eax, 00000005
:0040A4E5 E9CE000000              jmp 0040A5B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A4DE(C)
|
:0040A4EA 6A0C                    push 0000000C
:0040A4EC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A4EF E8991F0000              call 0040C48D
:0040A4F4 668945F0                mov word ptr [ebp-10], ax
:0040A4F8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040A4FB 81E1FFFF0000            and ecx, 0000FFFF
:0040A501 81F900800000            cmp ecx, 00008000
:0040A507 750A                    jne 0040A513

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A509 B805000000              mov eax, 00000005
:0040A50E E9A5000000              jmp 0040A5B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A507(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:0040A513 6A1A                    push 0000001A
:0040A515 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A518 E8701F0000              call 0040C48D
:0040A51D 668945F4                mov word ptr [ebp-0C], ax
:0040A521 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040A524 81E2FFFF0000            and edx, 0000FFFF
:0040A52A 81FA00800000            cmp edx, 00008000
:0040A530 7507                    jne 0040A539

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A532 B805000000              mov eax, 00000005
:0040A537 EB7F                    jmp 0040A5B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A530(C)
|
:0040A539 6A1C                    push 0000001C
:0040A53B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A53E E84A1F0000              call 0040C48D
:0040A543 668945F8                mov word ptr [ebp-08], ax
:0040A547 8B45F8                  mov eax, dword ptr [ebp-08]
:0040A54A 25FFFF0000              and eax, 0000FFFF
:0040A54F 3D00800000              cmp eax, 00008000
:0040A554 7507                    jne 0040A55D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A556 B805000000              mov eax, 00000005
:0040A55B EB5B                    jmp 0040A5B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A554(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A55D 6A04                    push 00000004
:0040A55F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A562 E8261F0000              call 0040C48D
:0040A567 8945EC                  mov dword ptr [ebp-14], eax
:0040A56A 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:0040A571 7507                    jne 0040A57A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A573 B805000000              mov eax, 00000005
:0040A578 EB3E                    jmp 0040A5B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A571(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A57A 6A04                    push 00000004
:0040A57C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A57F E8091F0000              call 0040C48D
:0040A584 8945E8                  mov dword ptr [ebp-18], eax
:0040A587 817DE800000080          cmp dword ptr [ebp-18], 80000000
:0040A58E 7507                    jne 0040A597

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A590 B805000000              mov eax, 00000005
:0040A595 EB21                    jmp 0040A5B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A58E(C)
|
:0040A597 668B4DE8                mov cx, word ptr [ebp-18]
:0040A59B 51                      push ecx
:0040A59C 668B55EC                mov dx, word ptr [ebp-14]
:0040A5A0 52                      push edx
:0040A5A1 668B45F8                mov ax, word ptr [ebp-08]
:0040A5A5 50                      push eax
:0040A5A6 668B4DFC                mov cx, word ptr [ebp-04]
:0040A5AA 51                      push ecx
:0040A5AB E80A710000              call 004116BA
:0040A5B0 83C410                  add esp, 00000010
:0040A5B3 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A4E5(U), :0040A50E(U), :0040A537(U), :0040A55B(U), :0040A578(U)
|:0040A595(U)
|
:0040A5B8 8BE5                    mov esp, ebp
:0040A5BA 5D                      pop ebp
:0040A5BB C3                      ret



* Referenced by a CALL at Address:
|:00406FF6   
|
:0040A5BC 55                      push ebp
:0040A5BD 8BEC                    mov ebp, esp
:0040A5BF E89F6F0000              call 00411563
:0040A5C4 25FF000000              and eax, 000000FF
:0040A5C9 83F802                  cmp eax, 00000002
:0040A5CC 7507                    jne 0040A5D5
:0040A5CE E84F2E0100              call 0041D422
:0040A5D3 EB05                    jmp 0040A5DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A5CC(C)
|
:0040A5D5 E84A5B0000              call 00410124

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A5D3(U)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040A5DA B802000000              mov eax, 00000002
:0040A5DF 5D                      pop ebp
:0040A5E0 C3                      ret



* Referenced by a CALL at Address:
|:00407007   
|
:0040A5E1 55                      push ebp
:0040A5E2 8BEC                    mov ebp, esp
:0040A5E4 E8EE5A0000              call 004100D7
:0040A5E9 B801000000              mov eax, 00000001
:0040A5EE 5D                      pop ebp
:0040A5EF C3                      ret



* Referenced by a CALL at Address:
|:00407018   
|
:0040A5F0 55                      push ebp
:0040A5F1 8BEC                    mov ebp, esp
:0040A5F3 83EC0C                  sub esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A5F6 6A04                    push 00000004
:0040A5F8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A5FB E88D1E0000              call 0040C48D
:0040A600 8945F8                  mov dword ptr [ebp-08], eax
:0040A603 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040A60A 7507                    jne 0040A613

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A60C B805000000              mov eax, 00000005
:0040A611 EB65                    jmp 0040A678

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A60A(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A613 6A04                    push 00000004
:0040A615 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A618 E8701E0000              call 0040C48D
:0040A61D 8945F4                  mov dword ptr [ebp-0C], eax
:0040A620 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:0040A627 7507                    jne 0040A630

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A629 B805000000              mov eax, 00000005
:0040A62E EB48                    jmp 0040A678

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A627(C)
|
:0040A630 6A10                    push 00000010
:0040A632 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A635 E8531E0000              call 0040C48D
:0040A63A 668945FC                mov word ptr [ebp-04], ax
:0040A63E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A641 25FFFF0000              and eax, 0000FFFF
:0040A646 3D00800000              cmp eax, 00008000
:0040A64B 7507                    jne 0040A654

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A64D B805000000              mov eax, 00000005
:0040A652 EB24                    jmp 0040A678

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A64B(C)
|
:0040A654 E8196F0000              call 00411572
:0040A659 85C0                    test eax, eax
:0040A65B 7416                    je 0040A673
:0040A65D 8A4DFC                  mov cl, byte ptr [ebp-04]
:0040A660 51                      push ecx
:0040A661 8A55F4                  mov dl, byte ptr [ebp-0C]
:0040A664 52                      push edx
:0040A665 8A45F8                  mov al, byte ptr [ebp-08]
:0040A668 50                      push eax
:0040A669 B9C84F4B00              mov ecx, 004B4FC8
:0040A66E E82E590500              call 0045FFA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A65B(C)
|
:0040A673 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A611(U), :0040A62E(U), :0040A652(U)
|
:0040A678 8BE5                    mov esp, ebp
:0040A67A 5D                      pop ebp
:0040A67B C3                      ret



* Referenced by a CALL at Address:
|:00407029   
|
:0040A67C 55                      push ebp
:0040A67D 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040A67F B802000000              mov eax, 00000002
:0040A684 5D                      pop ebp
:0040A685 C3                      ret



* Referenced by a CALL at Address:
|:0040703A   
|
:0040A686 55                      push ebp
:0040A687 8BEC                    mov ebp, esp
:0040A689 83EC10                  sub esp, 00000010

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A68C 6A04                    push 00000004
:0040A68E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A691 E8F71D0000              call 0040C48D
:0040A696 8945FC                  mov dword ptr [ebp-04], eax
:0040A699 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040A6A0 7507                    jne 0040A6A9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A6A2 B805000000              mov eax, 00000005
:0040A6A7 EB71                    jmp 0040A71A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A6A0(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A6A9 6A04                    push 00000004
:0040A6AB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A6AE E8DA1D0000              call 0040C48D
:0040A6B3 8945F8                  mov dword ptr [ebp-08], eax
:0040A6B6 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040A6BD 7507                    jne 0040A6C6

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A6BF B805000000              mov eax, 00000005
:0040A6C4 EB54                    jmp 0040A71A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A6BD(C)
|
:0040A6C6 8B45F8                  mov eax, dword ptr [ebp-08]
:0040A6C9 6BC003                  imul eax, 00000003
:0040A6CC 83F878                  cmp eax, 00000078
:0040A6CF 730B                    jnb 0040A6DC
:0040A6D1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A6D4 6BC903                  imul ecx, 00000003
:0040A6D7 894DF4                  mov dword ptr [ebp-0C], ecx
:0040A6DA EB07                    jmp 0040A6E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A6CF(C)
|
:0040A6DC C745F478000000          mov [ebp-0C], 00000078

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A6DA(U)
|
:0040A6E3 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A6E6 6BD203                  imul edx, 00000003
:0040A6E9 81FA90000000            cmp edx, 00000090
:0040A6EF 730B                    jnb 0040A6FC
:0040A6F1 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A6F4 6BC003                  imul eax, 00000003
:0040A6F7 8945F0                  mov dword ptr [ebp-10], eax
:0040A6FA EB07                    jmp 0040A703

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A6EF(C)
|
:0040A6FC C745F090000000          mov [ebp-10], 00000090

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A6FA(U)
|
:0040A703 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0040A706 51                      push ecx
:0040A707 8A55F0                  mov dl, byte ptr [ebp-10]
:0040A70A 52                      push edx
:0040A70B B958494B00              mov ecx, 004B4958
:0040A710 E87B320400              call 0044D990
:0040A715 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A6A7(U), :0040A6C4(U)
|
:0040A71A 8BE5                    mov esp, ebp
:0040A71C 5D                      pop ebp
:0040A71D C3                      ret



* Referenced by a CALL at Address:
|:0040704B   
|
:0040A71E 55                      push ebp
:0040A71F 8BEC                    mov ebp, esp
:0040A721 83EC08                  sub esp, 00000008

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040A724 6A04                    push 00000004
:0040A726 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A729 E85F1D0000              call 0040C48D
:0040A72E 8945FC                  mov dword ptr [ebp-04], eax
:0040A731 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040A738 7507                    jne 0040A741

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A73A B805000000              mov eax, 00000005
:0040A73F EB45                    jmp 0040A786

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A738(C)
|
:0040A741 6A27                    push 00000027
:0040A743 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A746 E8421D0000              call 0040C48D
:0040A74B 668945F8                mov word ptr [ebp-08], ax
:0040A74F 8B45F8                  mov eax, dword ptr [ebp-08]
:0040A752 25FFFF0000              and eax, 0000FFFF
:0040A757 3D00800000              cmp eax, 00008000
:0040A75C 7507                    jne 0040A765

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A75E B805000000              mov eax, 00000005
:0040A763 EB21                    jmp 0040A786

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A75C(C)
|
:0040A765 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A768 81E1FFFF0000            and ecx, 0000FFFF
:0040A76E F7D9                    neg ecx
:0040A770 1BC9                    sbb ecx, ecx
:0040A772 F7D9                    neg ecx
:0040A774 51                      push ecx
:0040A775 8B55FC                  mov edx, dword ptr [ebp-04]
:0040A778 52                      push edx
:0040A779 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A77C E8E61D0000              call 0040C567
:0040A781 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A73F(U), :0040A763(U)
|
:0040A786 8BE5                    mov esp, ebp
:0040A788 5D                      pop ebp
:0040A789 C3                      ret



* Referenced by a CALL at Address:
|:0040705C   
|
:0040A78A 55                      push ebp
:0040A78B 8BEC                    mov ebp, esp
:0040A78D 83EC40                  sub esp, 00000040
:0040A790 6A0C                    push 0000000C
:0040A792 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A795 E8F31C0000              call 0040C48D
:0040A79A 668945CC                mov word ptr [ebp-34], ax
:0040A79E 8B45CC                  mov eax, dword ptr [ebp-34]
:0040A7A1 25FFFF0000              and eax, 0000FFFF
:0040A7A6 3D00800000              cmp eax, 00008000
:0040A7AB 750A                    jne 0040A7B7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A7AD B805000000              mov eax, 00000005
:0040A7B2 E9FE000000              jmp 0040A8B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A7AB(C)
|
:0040A7B7 66C745D00000            mov [ebp-30], 0000
:0040A7BD 66C745C80000            mov [ebp-38], 0000
:0040A7C3 EB0C                    jmp 0040A7D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A82D(U)
|
:0040A7C5 668B4DC8                mov cx, word ptr [ebp-38]
:0040A7C9 6683C101                add cx, 0001
:0040A7CD 66894DC8                mov word ptr [ebp-38], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A7C3(U)
|
:0040A7D1 8B55C8                  mov edx, dword ptr [ebp-38]
:0040A7D4 81E2FFFF0000            and edx, 0000FFFF
:0040A7DA 8B45CC                  mov eax, dword ptr [ebp-34]
:0040A7DD 25FFFF0000              and eax, 0000FFFF
:0040A7E2 3BD0                    cmp edx, eax
:0040A7E4 7D49                    jge 0040A82F
:0040A7E6 6A01                    push 00000001
:0040A7E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A7EB E89D1C0000              call 0040C48D
:0040A7F0 668945C0                mov word ptr [ebp-40], ax
:0040A7F4 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040A7F7 81E1FFFF0000            and ecx, 0000FFFF
:0040A7FD 81F900800000            cmp ecx, 00008000
:0040A803 750A                    jne 0040A80F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A805 B805000000              mov eax, 00000005
:0040A80A E9A6000000              jmp 0040A8B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A803(C)
|
:0040A80F 8B55D0                  mov edx, dword ptr [ebp-30]
:0040A812 81E2FFFF0000            and edx, 0000FFFF
:0040A818 668B45C0                mov ax, word ptr [ebp-40]
:0040A81C 66894455D4              mov word ptr [ebp+2*edx-2C], ax
:0040A821 668B4DD0                mov cx, word ptr [ebp-30]
:0040A825 6683C101                add cx, 0001
:0040A829 66894DD0                mov word ptr [ebp-30], cx
:0040A82D EB96                    jmp 0040A7C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A7E4(C)
|
:0040A82F 6A26                    push 00000026
:0040A831 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A834 E8541C0000              call 0040C48D
:0040A839 668945C4                mov word ptr [ebp-3C], ax
:0040A83D 8B55C4                  mov edx, dword ptr [ebp-3C]
:0040A840 81E2FFFF0000            and edx, 0000FFFF
:0040A846 81FA00800000            cmp edx, 00008000
:0040A84C 7507                    jne 0040A855

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A84E B805000000              mov eax, 00000005
:0040A853 EB60                    jmp 0040A8B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A84C(C)
|
:0040A855 8B45C4                  mov eax, dword ptr [ebp-3C]
:0040A858 25FFFF0000              and eax, 0000FFFF
:0040A85D 83F801                  cmp eax, 00000001
:0040A860 750A                    jne 0040A86C
:0040A862 6AFF                    push FFFFFFFF
:0040A864 E8FF6E0000              call 00411768
:0040A869 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A860(C)
|
:0040A86C 66C745C80000            mov [ebp-38], 0000
:0040A872 EB0C                    jmp 0040A880

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A8AE(U)
|
:0040A874 668B4DC8                mov cx, word ptr [ebp-38]
:0040A878 6683C101                add cx, 0001
:0040A87C 66894DC8                mov word ptr [ebp-38], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A872(U)
|
:0040A880 8B55C8                  mov edx, dword ptr [ebp-38]
:0040A883 81E2FFFF0000            and edx, 0000FFFF
:0040A889 8B45CC                  mov eax, dword ptr [ebp-34]
:0040A88C 25FFFF0000              and eax, 0000FFFF
:0040A891 3BD0                    cmp edx, eax
:0040A893 7D1B                    jge 0040A8B0
:0040A895 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0040A898 81E1FFFF0000            and ecx, 0000FFFF
:0040A89E 33D2                    xor edx, edx
:0040A8A0 668B544DD4              mov dx, word ptr [ebp+2*ecx-2C]
:0040A8A5 52                      push edx
:0040A8A6 E8BD6E0000              call 00411768
:0040A8AB 83C404                  add esp, 00000004
:0040A8AE EBC4                    jmp 0040A874

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A893(C)
|
:0040A8B0 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A7B2(U), :0040A80A(U), :0040A853(U)
|
:0040A8B5 8BE5                    mov esp, ebp
:0040A8B7 5D                      pop ebp
:0040A8B8 C3                      ret



* Referenced by a CALL at Address:
|:0040706D   
|
:0040A8B9 55                      push ebp
:0040A8BA 8BEC                    mov ebp, esp
:0040A8BC 51                      push ecx
:0040A8BD 6A2E                    push 0000002E
:0040A8BF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A8C2 E8C61B0000              call 0040C48D
:0040A8C7 668945FC                mov word ptr [ebp-04], ax
:0040A8CB 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A8CE 25FFFF0000              and eax, 0000FFFF
:0040A8D3 3D00800000              cmp eax, 00008000
:0040A8D8 7507                    jne 0040A8E1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A8DA B805000000              mov eax, 00000005
:0040A8DF EB17                    jmp 0040A8F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A8D8(C)
|
:0040A8E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040A8E4 81E1FFFF0000            and ecx, 0000FFFF
:0040A8EA 51                      push ecx
:0040A8EB E838500200              call 0042F928
:0040A8F0 83C404                  add esp, 00000004
:0040A8F3 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A8DF(U)
|
:0040A8F8 8BE5                    mov esp, ebp
:0040A8FA 5D                      pop ebp
:0040A8FB C3                      ret



* Referenced by a CALL at Address:
|:0040707E   
|
:0040A8FC 55                      push ebp
:0040A8FD 8BEC                    mov ebp, esp
:0040A8FF 51                      push ecx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:0036, ""
                                  |
:0040A900 6A36                    push 00000036
:0040A902 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A905 E8831B0000              call 0040C48D
:0040A90A 668945FC                mov word ptr [ebp-04], ax
:0040A90E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040A911 25FFFF0000              and eax, 0000FFFF
:0040A916 3D00800000              cmp eax, 00008000
:0040A91B 7507                    jne 0040A924

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A91D B805000000              mov eax, 00000005
:0040A922 EB17                    jmp 0040A93B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A91B(C)
|
:0040A924 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040A927 81E1FFFF0000            and ecx, 0000FFFF
:0040A92D 51                      push ecx
:0040A92E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A931 E8781C0000              call 0040C5AE
:0040A936 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A922(U)
|
:0040A93B 8BE5                    mov esp, ebp
:0040A93D 5D                      pop ebp
:0040A93E C3                      ret



* Referenced by a CALL at Address:
|:0040708F   
|
:0040A93F 55                      push ebp
:0040A940 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0040A942 B808000000              mov eax, 00000008
:0040A947 5D                      pop ebp
:0040A948 C3                      ret



* Referenced by a CALL at Address:
|:004070A0   
|
:0040A949 55                      push ebp
:0040A94A 8BEC                    mov ebp, esp
:0040A94C 6A00                    push 00000000
:0040A94E E8D54F0200              call 0042F928
:0040A953 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0040A956 B807000000              mov eax, 00000007
:0040A95B 5D                      pop ebp
:0040A95C C3                      ret



* Referenced by a CALL at Address:
|:004070B1   
|
:0040A95D 55                      push ebp
:0040A95E 8BEC                    mov ebp, esp
:0040A960 83EC0C                  sub esp, 0000000C
:0040A963 6A17                    push 00000017
:0040A965 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040A968 E8201B0000              call 0040C48D
:0040A96D 668945F8                mov word ptr [ebp-08], ax
:0040A971 8B45F8                  mov eax, dword ptr [ebp-08]
:0040A974 25FFFF0000              and eax, 0000FFFF
:0040A979 3D00800000              cmp eax, 00008000
:0040A97E 7507                    jne 0040A987

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040A980 B805000000              mov eax, 00000005
:0040A985 EB70                    jmp 0040A9F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A97E(C)
|
:0040A987 C745F400000000          mov [ebp-0C], 00000000
:0040A98E E8DF6B0000              call 00411572
:0040A993 85C0                    test eax, eax
:0040A995 740D                    je 0040A9A4
:0040A997 B9C84F4B00              mov ecx, 004B4FC8
:0040A99C E84F020500              call 0045ABF0
:0040A9A1 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A995(C)
|
:0040A9A4 817DF420030000          cmp dword ptr [ebp-0C], 00000320
:0040A9AB 7D06                    jge 0040A9B3
:0040A9AD 837DF400                cmp dword ptr [ebp-0C], 00000000
:0040A9B1 7515                    jne 0040A9C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A9AB(C)
|
:0040A9B3 6A00                    push 00000000
:0040A9B5 E8D6340000              call 0040DE90
:0040A9BA 83C404                  add esp, 00000004
:0040A9BD 85C0                    test eax, eax
:0040A9BF 7507                    jne 0040A9C8

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040A9C1 C745F402000000          mov [ebp-0C], 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040A9B1(C), :0040A9BF(C)
|
:0040A9C8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040A9CB 81E1FFFF0000            and ecx, 0000FFFF
:0040A9D1 51                      push ecx
:0040A9D2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040A9D5 6BC950                  imul ecx, 00000050
:0040A9D8 81C1787F4900            add ecx, 00497F78
:0040A9DE E81279FFFF              call 004022F5
:0040A9E3 8945FC                  mov dword ptr [ebp-04], eax
:0040A9E6 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040A9E9 52                      push edx
:0040A9EA E82D210600              call 0046CB1C
:0040A9EF 83C404                  add esp, 00000004
:0040A9F2 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040A985(U)
|
:0040A9F7 8BE5                    mov esp, ebp
:0040A9F9 5D                      pop ebp
:0040A9FA C3                      ret



* Referenced by a CALL at Address:
|:004070C2   
|
:0040A9FB 55                      push ebp
:0040A9FC 8BEC                    mov ebp, esp
:0040A9FE 83EC18                  sub esp, 00000018

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040AA01 6A02                    push 00000002
:0040AA03 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AA06 E8821A0000              call 0040C48D
:0040AA0B 668945FC                mov word ptr [ebp-04], ax
:0040AA0F 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AA12 25FFFF0000              and eax, 0000FFFF
:0040AA17 3D00800000              cmp eax, 00008000
:0040AA1C 750A                    jne 0040AA28

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AA1E B805000000              mov eax, 00000005
:0040AA23 E919010000              jmp 0040AB41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AA1C(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0040AA28 6A07                    push 00000007
:0040AA2A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AA2D E85B1A0000              call 0040C48D
:0040AA32 668945F4                mov word ptr [ebp-0C], ax
:0040AA36 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040AA39 81E1FFFF0000            and ecx, 0000FFFF
:0040AA3F 81F900800000            cmp ecx, 00008000
:0040AA45 750A                    jne 0040AA51

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AA47 B805000000              mov eax, 00000005
:0040AA4C E9F0000000              jmp 0040AB41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AA45(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040AA51 6A02                    push 00000002
:0040AA53 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AA56 E8321A0000              call 0040C48D
:0040AA5B 668945F8                mov word ptr [ebp-08], ax
:0040AA5F 8B55F8                  mov edx, dword ptr [ebp-08]
:0040AA62 81E2FFFF0000            and edx, 0000FFFF
:0040AA68 81FA00800000            cmp edx, 00008000
:0040AA6E 750A                    jne 0040AA7A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AA70 B805000000              mov eax, 00000005
:0040AA75 E9C7000000              jmp 0040AB41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AA6E(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040AA7A 6A04                    push 00000004
:0040AA7C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AA7F E8091A0000              call 0040C48D
:0040AA84 8945F0                  mov dword ptr [ebp-10], eax
:0040AA87 817DF000000080          cmp dword ptr [ebp-10], 80000000
:0040AA8E 750A                    jne 0040AA9A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AA90 B805000000              mov eax, 00000005
:0040AA95 E9A7000000              jmp 0040AB41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AA8E(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040AA9A 6A04                    push 00000004
:0040AA9C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AA9F E8E9190000              call 0040C48D
:0040AAA4 8945EC                  mov dword ptr [ebp-14], eax
:0040AAA7 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:0040AAAE 750A                    jne 0040AABA

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AAB0 B805000000              mov eax, 00000005
:0040AAB5 E987000000              jmp 0040AB41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AAAE(C)
|
:0040AABA E8B36A0000              call 00411572
:0040AABF 85C0                    test eax, eax
:0040AAC1 7507                    jne 0040AACA
:0040AAC3 B801000000              mov eax, 00000001
:0040AAC8 EB77                    jmp 0040AB41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AAC1(C)
|
:0040AACA 8A45F4                  mov al, byte ptr [ebp-0C]
:0040AACD 50                      push eax
:0040AACE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040AAD1 81E1FFFF0000            and ecx, 0000FFFF
:0040AAD7 51                      push ecx
:0040AAD8 B9C84F4B00              mov ecx, 004B4FC8
:0040AADD E850530500              call 0045FE32
:0040AAE2 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040AAE5 81E2FFFF0000            and edx, 0000FFFF
:0040AAEB 8955E8                  mov dword ptr [ebp-18], edx
:0040AAEE 837DE806                cmp dword ptr [ebp-18], 00000006
:0040AAF2 7748                    ja 0040AB3C
:0040AAF4 8B45E8                  mov eax, dword ptr [ebp-18]
:0040AAF7 FF248545AB4000          jmp dword ptr [4*eax+0040AB45]
:0040AAFE EB3C                    jmp 0040AB3C
:0040AB00 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040AB03 81E1FF000000            and ecx, 000000FF
:0040AB09 51                      push ecx
:0040AB0A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040AB0D 81E2FFFF0000            and edx, 0000FFFF
:0040AB13 52                      push edx
:0040AB14 B9C84F4B00              mov ecx, 004B4FC8
:0040AB19 E83C5A0500              call 0046055A
:0040AB1E EB1C                    jmp 0040AB3C
:0040AB20 8A45EC                  mov al, byte ptr [ebp-14]
:0040AB23 50                      push eax
:0040AB24 8A4DF0                  mov cl, byte ptr [ebp-10]
:0040AB27 51                      push ecx
:0040AB28 8B55FC                  mov edx, dword ptr [ebp-04]
:0040AB2B 81E2FFFF0000            and edx, 0000FFFF
:0040AB31 52                      push edx
:0040AB32 B9C84F4B00              mov ecx, 004B4FC8
:0040AB37 E88F590500              call 004604CB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AAF2(C), :0040AAFE(U), :0040AB1E(U)
|
:0040AB3C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AA23(U), :0040AA4C(U), :0040AA75(U), :0040AA95(U), :0040AAB5(U)
|:0040AAC8(U)
|
:0040AB41 8BE5                    mov esp, ebp
:0040AB43 5D                      pop ebp
:0040AB44 C3                      ret



:0040AB45 FEAA4000                DWORD 0040AAFE
:0040AB49 3CAB4000                DWORD 0040AB3C
:0040AB4D 3CAB4000                DWORD 0040AB3C
:0040AB51 00AB4000                DWORD 0040AB00
:0040AB55 20AB4000                DWORD 0040AB20
:0040AB59 00AB4000                DWORD 0040AB00
:0040AB5D 20AB4000                DWORD 0040AB20



* Referenced by a CALL at Address:
|:004070D3   
|
:0040AB61 55                      push ebp
:0040AB62 8BEC                    mov ebp, esp
:0040AB64 83EC08                  sub esp, 00000008

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040AB67 6A02                    push 00000002
:0040AB69 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AB6C E81C190000              call 0040C48D
:0040AB71 668945FC                mov word ptr [ebp-04], ax
:0040AB75 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AB78 25FFFF0000              and eax, 0000FFFF
:0040AB7D 3D00800000              cmp eax, 00008000
:0040AB82 750A                    jne 0040AB8E

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AB84 B805000000              mov eax, 00000005
:0040AB89 E9A0000000              jmp 0040AC2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AB82(C)
|
:0040AB8E 6A0E                    push 0000000E
:0040AB90 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AB93 E8F5180000              call 0040C48D
:0040AB98 668945F8                mov word ptr [ebp-08], ax
:0040AB9C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040AB9F 81E1FFFF0000            and ecx, 0000FFFF
:0040ABA5 81F900800000            cmp ecx, 00008000
:0040ABAB 7507                    jne 0040ABB4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040ABAD B805000000              mov eax, 00000005
:0040ABB2 EB7A                    jmp 0040AC2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ABAB(C)
|
:0040ABB4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040ABB7 81E1FFFF0000            and ecx, 0000FFFF
:0040ABBD 6BC950                  imul ecx, 00000050
:0040ABC0 81C1787F4900            add ecx, 00497F78
:0040ABC6 E8651D0000              call 0040C930
:0040ABCB 25FF000000              and eax, 000000FF
:0040ABD0 83F801                  cmp eax, 00000001
:0040ABD3 7516                    jne 0040ABEB
:0040ABD5 8B55FC                  mov edx, dword ptr [ebp-04]
:0040ABD8 81E2FFFF0000            and edx, 0000FFFF
:0040ABDE 52                      push edx
:0040ABDF B978294B00              mov ecx, 004B2978
:0040ABE4 E8D29BFFFF              call 004047BB
:0040ABE9 EB3E                    jmp 0040AC29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ABD3(C)
|
:0040ABEB E882690000              call 00411572
:0040ABF0 85C0                    test eax, eax
:0040ABF2 741A                    je 0040AC0E
:0040ABF4 8A45F8                  mov al, byte ptr [ebp-08]
:0040ABF7 50                      push eax
:0040ABF8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040ABFB 81E1FFFF0000            and ecx, 0000FFFF
:0040AC01 51                      push ecx
:0040AC02 B9C84F4B00              mov ecx, 004B4FC8
:0040AC07 E85C560500              call 00460268
:0040AC0C EB1B                    jmp 0040AC29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ABF2(C)
|
:0040AC0E 8B55F8                  mov edx, dword ptr [ebp-08]
:0040AC11 81E2FFFF0000            and edx, 0000FFFF
:0040AC17 52                      push edx
:0040AC18 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AC1B 25FFFF0000              and eax, 0000FFFF
:0040AC20 50                      push eax
:0040AC21 E8A89EFFFF              call 00404ACE
:0040AC26 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040ABE9(U), :0040AC0C(U)
|
:0040AC29 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AB89(U), :0040ABB2(U)
|
:0040AC2E 8BE5                    mov esp, ebp
:0040AC30 5D                      pop ebp
:0040AC31 C3                      ret



* Referenced by a CALL at Address:
|:004070E4   
|
:0040AC32 55                      push ebp
:0040AC33 8BEC                    mov ebp, esp
:0040AC35 83EC18                  sub esp, 00000018
:0040AC38 6A28                    push 00000028
:0040AC3A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AC3D E84B180000              call 0040C48D
:0040AC42 668945F4                mov word ptr [ebp-0C], ax
:0040AC46 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040AC49 25FFFF0000              and eax, 0000FFFF
:0040AC4E 3D00800000              cmp eax, 00008000
:0040AC53 750A                    jne 0040AC5F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AC55 B805000000              mov eax, 00000005
:0040AC5A E960010000              jmp 0040ADBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AC53(C)
|
:0040AC5F 6A34                    push 00000034
:0040AC61 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AC64 E824180000              call 0040C48D
:0040AC69 668945F8                mov word ptr [ebp-08], ax
:0040AC6D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040AC70 81E1FFFF0000            and ecx, 0000FFFF
:0040AC76 81F900800000            cmp ecx, 00008000
:0040AC7C 750A                    jne 0040AC88

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AC7E B805000000              mov eax, 00000005
:0040AC83 E937010000              jmp 0040ADBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AC7C(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040AC88 6A04                    push 00000004
:0040AC8A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AC8D E8FB170000              call 0040C48D
:0040AC92 8945FC                  mov dword ptr [ebp-04], eax
:0040AC95 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040AC9C 750A                    jne 0040ACA8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AC9E B805000000              mov eax, 00000005
:0040ACA3 E917010000              jmp 0040ADBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AC9C(C)
|
:0040ACA8 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040ACAB 81E2FFFF0000            and edx, 0000FFFF
:0040ACB1 8955F0                  mov dword ptr [ebp-10], edx
:0040ACB4 837DF004                cmp dword ptr [ebp-10], 00000004
:0040ACB8 0F87FC000000            ja 0040ADBA
:0040ACBE 8B45F0                  mov eax, dword ptr [ebp-10]
:0040ACC1 FF2485C3AD4000          jmp dword ptr [4*eax+0040ADC3]
:0040ACC8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040ACCB 81E1FFFF0000            and ecx, 0000FFFF
:0040ACD1 894DEC                  mov dword ptr [ebp-14], ecx
:0040ACD4 837DEC00                cmp dword ptr [ebp-14], 00000000
:0040ACD8 740E                    je 0040ACE8
:0040ACDA 837DEC01                cmp dword ptr [ebp-14], 00000001
:0040ACDE 7418                    je 0040ACF8
:0040ACE0 837DEC02                cmp dword ptr [ebp-14], 00000002
:0040ACE4 7422                    je 0040AD08
:0040ACE6 EB30                    jmp 0040AD18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ACD8(C)
|
:0040ACE8 8B55FC                  mov edx, dword ptr [ebp-04]
:0040ACEB 52                      push edx
:0040ACEC B978294B00              mov ecx, 004B2978
:0040ACF1 E8CAA9FFFF              call 004056C0
:0040ACF6 EB2A                    jmp 0040AD22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ACDE(C)
|
:0040ACF8 8B45FC                  mov eax, dword ptr [ebp-04]
:0040ACFB 50                      push eax
:0040ACFC B978294B00              mov ecx, 004B2978
:0040AD01 E8F69AFFFF              call 004047FC
:0040AD06 EB1A                    jmp 0040AD22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ACE4(C)
|
:0040AD08 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040AD0B 51                      push ecx
:0040AD0C B978294B00              mov ecx, 004B2978
:0040AD11 E82A9BFFFF              call 00404840
:0040AD16 EB0A                    jmp 0040AD22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ACE6(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AD18 B805000000              mov eax, 00000005
:0040AD1D E99D000000              jmp 0040ADBF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040ACF6(U), :0040AD06(U), :0040AD16(U)
|
:0040AD22 E993000000              jmp 0040ADBA
:0040AD27 8A55FC                  mov dl, byte ptr [ebp-04]
:0040AD2A 52                      push edx
:0040AD2B B978294B00              mov ecx, 004B2978
:0040AD30 E81B1C0000              call 0040C950
:0040AD35 E980000000              jmp 0040ADBA
:0040AD3A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AD3D 50                      push eax
:0040AD3E B978294B00              mov ecx, 004B2978
:0040AD43 E8FB98FFFF              call 00404643
:0040AD48 EB70                    jmp 0040ADBA
:0040AD4A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040AD4D 81E1FFFF0000            and ecx, 0000FFFF
:0040AD53 894DE8                  mov dword ptr [ebp-18], ecx
:0040AD56 837DE800                cmp dword ptr [ebp-18], 00000000
:0040AD5A 740E                    je 0040AD6A
:0040AD5C 837DE801                cmp dword ptr [ebp-18], 00000001
:0040AD60 741E                    je 0040AD80
:0040AD62 837DE802                cmp dword ptr [ebp-18], 00000002
:0040AD66 742A                    je 0040AD92
:0040AD68 EB39                    jmp 0040ADA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AD5A(C)
|
:0040AD6A 837DFC08                cmp dword ptr [ebp-04], 00000008
:0040AD6E 770E                    ja 0040AD7E
:0040AD70 8A55FC                  mov dl, byte ptr [ebp-04]
:0040AD73 52                      push edx
:0040AD74 B978294B00              mov ecx, 004B2978
:0040AD79 E8321C0000              call 0040C9B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AD6E(C)
|
:0040AD7E EB2A                    jmp 0040ADAA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AD60(C)
|
:0040AD80 A028C34700              mov al, byte ptr [0047C328]
:0040AD85 50                      push eax
:0040AD86 B978294B00              mov ecx, 004B2978
:0040AD8B E8201C0000              call 0040C9B0
:0040AD90 EB18                    jmp 0040ADAA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AD66(C)
|
:0040AD92 B978294B00              mov ecx, 004B2978
:0040AD97 E8F41B0000              call 0040C990
:0040AD9C A228C34700              mov byte ptr [0047C328], al
:0040ADA1 EB07                    jmp 0040ADAA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AD68(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040ADA3 B805000000              mov eax, 00000005
:0040ADA8 EB15                    jmp 0040ADBF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AD7E(U), :0040AD90(U), :0040ADA1(U)
|
:0040ADAA EB0E                    jmp 0040ADBA
:0040ADAC 8A4DFC                  mov cl, byte ptr [ebp-04]
:0040ADAF 51                      push ecx
:0040ADB0 B978294B00              mov ecx, 004B2978
:0040ADB5 E8B61B0000              call 0040C970

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040ACB8(C), :0040AD22(U), :0040AD35(U), :0040AD48(U), :0040ADAA(U)
|
:0040ADBA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AC5A(U), :0040AC83(U), :0040ACA3(U), :0040AD1D(U), :0040ADA8(U)
|
:0040ADBF 8BE5                    mov esp, ebp
:0040ADC1 5D                      pop ebp
:0040ADC2 C3                      ret



:0040ADC3 C8AC4000                DWORD 0040ACC8
:0040ADC7 27AD4000                DWORD 0040AD27
:0040ADCB 3AAD4000                DWORD 0040AD3A
:0040ADCF 4AAD4000                DWORD 0040AD4A
:0040ADD3 ACAD4000                DWORD 0040ADAC



* Referenced by a CALL at Address:
|:004070F5   
|
:0040ADD7 55                      push ebp
:0040ADD8 8BEC                    mov ebp, esp
:0040ADDA 83EC10                  sub esp, 00000010
:0040ADDD 56                      push esi

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040ADDE 6A02                    push 00000002
:0040ADE0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040ADE3 E8A5160000              call 0040C48D
:0040ADE8 668945FC                mov word ptr [ebp-04], ax
:0040ADEC 8B45FC                  mov eax, dword ptr [ebp-04]
:0040ADEF 25FFFF0000              and eax, 0000FFFF
:0040ADF4 3D00800000              cmp eax, 00008000
:0040ADF9 750A                    jne 0040AE05

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040ADFB B805000000              mov eax, 00000005
:0040AE00 E97E010000              jmp 0040AF83

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ADF9(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040AE05 6A04                    push 00000004
:0040AE07 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AE0A E87E160000              call 0040C48D
:0040AE0F 8945F8                  mov dword ptr [ebp-08], eax
:0040AE12 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040AE19 750A                    jne 0040AE25

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AE1B B805000000              mov eax, 00000005
:0040AE20 E95E010000              jmp 0040AF83

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AE19(C)
|
:0040AE25 E848670000              call 00411572
:0040AE2A 85C0                    test eax, eax
:0040AE2C 7430                    je 0040AE5E
:0040AE2E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040AE31 81E1FFFF0000            and ecx, 0000FFFF
:0040AE37 81F900040000            cmp ecx, 00000400
:0040AE3D 7C1F                    jl 0040AE5E
:0040AE3F 8B55FC                  mov edx, dword ptr [ebp-04]
:0040AE42 81E2FFFF0000            and edx, 0000FFFF
:0040AE48 81FA02040000            cmp edx, 00000402
:0040AE4E 7F0E                    jg 0040AE5E
:0040AE50 B9C84F4B00              mov ecx, 004B4FC8
:0040AE55 E896FD0400              call 0045ABF0
:0040AE5A 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AE2C(C), :0040AE3D(C), :0040AE4E(C)
|
:0040AE5E C645F0FF                mov [ebp-10], FF
:0040AE62 C745F400000000          mov [ebp-0C], 00000000
:0040AE69 E804670000              call 00411572
:0040AE6E 85C0                    test eax, eax
:0040AE70 7463                    je 0040AED5
:0040AE72 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040AE75 81E1FFFF0000            and ecx, 0000FFFF
:0040AE7B 6BC950                  imul ecx, 00000050
:0040AE7E 81C1787F4900            add ecx, 00497F78
:0040AE84 E86C030600              call 0046B1F5
:0040AE89 8845F0                  mov byte ptr [ebp-10], al
:0040AE8C 8B45F0                  mov eax, dword ptr [ebp-10]
:0040AE8F 25FF000000              and eax, 000000FF
:0040AE94 3DFF000000              cmp eax, 000000FF
:0040AE99 743A                    je 0040AED5
:0040AE9B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040AE9E 81E1FF000000            and ecx, 000000FF
:0040AEA4 6BC924                  imul ecx, 00000024
:0040AEA7 81C1B83B4B00            add ecx, 004B3BB8
:0040AEAD E82E84FFFF              call 004032E0
:0040AEB2 8BF0                    mov esi, eax
:0040AEB4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040AEB7 81E1FFFF0000            and ecx, 0000FFFF
:0040AEBD 6BC950                  imul ecx, 00000050
:0040AEC0 81C1787F4900            add ecx, 00497F78
:0040AEC6 E81F6FFFFF              call 00401DEA
:0040AECB 33C9                    xor ecx, ecx
:0040AECD 3BF0                    cmp esi, eax
:0040AECF 0F94C1                  sete cl
:0040AED2 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AE70(C), :0040AE99(C)
|
:0040AED5 8B55F8                  mov edx, dword ptr [ebp-08]
:0040AED8 52                      push edx
:0040AED9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040AEDC 81E1FFFF0000            and ecx, 0000FFFF
:0040AEE2 6BC950                  imul ecx, 00000050
:0040AEE5 81C1787F4900            add ecx, 00497F78
:0040AEEB E8EB6BFFFF              call 00401ADB
:0040AEF0 E87D660000              call 00411572
:0040AEF5 85C0                    test eax, eax
:0040AEF7 7473                    je 0040AF6C
:0040AEF9 8B45F0                  mov eax, dword ptr [ebp-10]
:0040AEFC 25FF000000              and eax, 000000FF
:0040AF01 3DFF000000              cmp eax, 000000FF
:0040AF06 7464                    je 0040AF6C
:0040AF08 837DF400                cmp dword ptr [ebp-0C], 00000000
:0040AF0C 745E                    je 0040AF6C
:0040AF0E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040AF11 81E1FFFF0000            and ecx, 0000FFFF
:0040AF17 6BC950                  imul ecx, 00000050
:0040AF1A 81C1787F4900            add ecx, 00497F78
:0040AF20 E8C56EFFFF              call 00401DEA
:0040AF25 50                      push eax
:0040AF26 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040AF29 81E1FF000000            and ecx, 000000FF
:0040AF2F 6BC924                  imul ecx, 00000024
:0040AF32 81C1B83B4B00            add ecx, 004B3BB8
:0040AF38 E8D8820200              call 00433215
:0040AF3D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040AF40 81E1FFFF0000            and ecx, 0000FFFF
:0040AF46 6BC950                  imul ecx, 00000050
:0040AF49 81C1787F4900            add ecx, 00497F78
:0040AF4F E8C76EFFFF              call 00401E1B
:0040AF54 50                      push eax
:0040AF55 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040AF58 81E1FF000000            and ecx, 000000FF
:0040AF5E 6BC924                  imul ecx, 00000024
:0040AF61 81C1B83B4B00            add ecx, 004B3BB8
:0040AF67 E8EA820200              call 00433256

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AEF7(C), :0040AF06(C), :0040AF0C(C)
|
:0040AF6C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040AF6F 81E1FFFF0000            and ecx, 0000FFFF
:0040AF75 51                      push ecx
:0040AF76 E8A11B0600              call 0046CB1C
:0040AF7B 83C404                  add esp, 00000004
:0040AF7E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AE00(U), :0040AE20(U)
|
:0040AF83 5E                      pop esi
:0040AF84 8BE5                    mov esp, ebp
:0040AF86 5D                      pop ebp
:0040AF87 C3                      ret



* Referenced by a CALL at Address:
|:00407106   
|
:0040AF88 55                      push ebp
:0040AF89 8BEC                    mov ebp, esp
:0040AF8B 83EC0C                  sub esp, 0000000C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040AF8E 6A02                    push 00000002
:0040AF90 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AF93 E8F5140000              call 0040C48D
:0040AF98 668945FC                mov word ptr [ebp-04], ax
:0040AF9C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AF9F 25FFFF0000              and eax, 0000FFFF
:0040AFA4 3D00800000              cmp eax, 00008000
:0040AFA9 750A                    jne 0040AFB5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AFAB B805000000              mov eax, 00000005
:0040AFB0 E95A010000              jmp 0040B10F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AFA9(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040AFB5 6A03                    push 00000003
:0040AFB7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040AFBA E8CE140000              call 0040C48D
:0040AFBF 668945F8                mov word ptr [ebp-08], ax
:0040AFC3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040AFC6 81E1FFFF0000            and ecx, 0000FFFF
:0040AFCC 81F900800000            cmp ecx, 00008000
:0040AFD2 750A                    jne 0040AFDE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040AFD4 B805000000              mov eax, 00000005
:0040AFD9 E931010000              jmp 0040B10F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040AFD2(C)
|
:0040AFDE E88F650000              call 00411572
:0040AFE3 85C0                    test eax, eax
:0040AFE5 742E                    je 0040B015
:0040AFE7 8B55FC                  mov edx, dword ptr [ebp-04]
:0040AFEA 81E2FFFF0000            and edx, 0000FFFF
:0040AFF0 81FA00040000            cmp edx, 00000400
:0040AFF6 7C1D                    jl 0040B015
:0040AFF8 8B45FC                  mov eax, dword ptr [ebp-04]
:0040AFFB 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0040B000 3D02040000              cmp eax, 00000402
:0040B005 7F0E                    jg 0040B015
:0040B007 B9C84F4B00              mov ecx, 004B4FC8
:0040B00C E8DFFB0400              call 0045ABF0
:0040B011 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AFE5(C), :0040AFF6(C), :0040B005(C)
|
:0040B015 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B018 81E1FFFF0000            and ecx, 0000FFFF
:0040B01E 81F920030000            cmp ecx, 00000320
:0040B024 0F8DE0000000            jnl 0040B10A
:0040B02A 8B55F8                  mov edx, dword ptr [ebp-08]
:0040B02D 81E2FFFF0000            and edx, 0000FFFF
:0040B033 52                      push edx
:0040B034 6A0E                    push 0000000E
:0040B036 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B039 25FFFF0000              and eax, 0000FFFF
:0040B03E 50                      push eax
:0040B03F E85D68FFFF              call 004018A1
:0040B044 83C40C                  add esp, 0000000C
:0040B047 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B04A 81E1FFFF0000            and ecx, 0000FFFF
:0040B050 6BC950                  imul ecx, 00000050
:0040B053 81C1787F4900            add ecx, 00497F78
:0040B059 E8AB6FFFFF              call 00402009
:0040B05E 50                      push eax
:0040B05F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B062 81E1FFFF0000            and ecx, 0000FFFF
:0040B068 6BC950                  imul ecx, 00000050
:0040B06B 81C1787F4900            add ecx, 00497F78
:0040B071 E86869FFFF              call 004019DE
:0040B076 85C0                    test eax, eax
:0040B078 751C                    jne 0040B096
:0040B07A 68FF000000              push 000000FF
:0040B07F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B082 81E1FFFF0000            and ecx, 0000FFFF
:0040B088 6BC950                  imul ecx, 00000050
:0040B08B 81C1787F4900            add ecx, 00497F78
:0040B091 E83A180000              call 0040C8D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B078(C)
|
:0040B096 E8D7640000              call 00411572
:0040B09B 85C0                    test eax, eax
:0040B09D 7459                    je 0040B0F8
:0040B09F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B0A2 81E1FFFF0000            and ecx, 0000FFFF
:0040B0A8 6BC950                  imul ecx, 00000050
:0040B0AB 81C1787F4900            add ecx, 00497F78
:0040B0B1 E83F010600              call 0046B1F5
:0040B0B6 8845F4                  mov byte ptr [ebp-0C], al
:0040B0B9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040B0BC 81E1FF000000            and ecx, 000000FF
:0040B0C2 81F9FF000000            cmp ecx, 000000FF
:0040B0C8 742E                    je 0040B0F8
:0040B0CA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040B0CD 81E1FF000000            and ecx, 000000FF
:0040B0D3 6BC924                  imul ecx, 00000024
:0040B0D6 81C1B83B4B00            add ecx, 004B3BB8
:0040B0DC E888940200              call 00434569
:0040B0E1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040B0E4 81E1FF000000            and ecx, 000000FF
:0040B0EA 6BC924                  imul ecx, 00000024
:0040B0ED 81C1B83B4B00            add ecx, 004B3BB8
:0040B0F3 E8A79A0200              call 00434B9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B09D(C), :0040B0C8(C)
|
:0040B0F8 8B55FC                  mov edx, dword ptr [ebp-04]
:0040B0FB 81E2FFFF0000            and edx, 0000FFFF
:0040B101 52                      push edx
:0040B102 E8151A0600              call 0046CB1C
:0040B107 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B024(C)
|
:0040B10A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040AFB0(U), :0040AFD9(U)
|
:0040B10F 8BE5                    mov esp, ebp
:0040B111 5D                      pop ebp
:0040B112 C3                      ret



* Referenced by a CALL at Address:
|:00407117   
|
:0040B113 55                      push ebp
:0040B114 8BEC                    mov ebp, esp
:0040B116 51                      push ecx
:0040B117 6A22                    push 00000022
:0040B119 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B11C E86C130000              call 0040C48D
:0040B121 668945FC                mov word ptr [ebp-04], ax
:0040B125 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B128 25FFFF0000              and eax, 0000FFFF
:0040B12D 3D00800000              cmp eax, 00008000
:0040B132 7507                    jne 0040B13B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B134 B805000000              mov eax, 00000005
:0040B139 EB13                    jmp 0040B14E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B132(C)
|
:0040B13B 8A4DFC                  mov cl, byte ptr [ebp-04]
:0040B13E 51                      push ecx
:0040B13F B9784E4B00              mov ecx, 004B4E78
:0040B144 E8C7710000              call 00412310
:0040B149 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B139(U)
|
:0040B14E 8BE5                    mov esp, ebp
:0040B150 5D                      pop ebp
:0040B151 C3                      ret



* Referenced by a CALL at Address:
|:00407128   
|
:0040B152 55                      push ebp
:0040B153 8BEC                    mov ebp, esp
:0040B155 51                      push ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040B156 6A02                    push 00000002
:0040B158 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B15B E82D130000              call 0040C48D
:0040B160 668945FC                mov word ptr [ebp-04], ax
:0040B164 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B167 25FFFF0000              and eax, 0000FFFF
:0040B16C 3D00800000              cmp eax, 00008000
:0040B171 7507                    jne 0040B17A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B173 B805000000              mov eax, 00000005
:0040B178 EB26                    jmp 0040B1A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B171(C)
|
:0040B17A E8F3630000              call 00411572
:0040B17F 85C0                    test eax, eax
:0040B181 7418                    je 0040B19B
:0040B183 6A00                    push 00000000
:0040B185 6A00                    push 00000000
:0040B187 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B18A 81E1FFFF0000            and ecx, 0000FFFF
:0040B190 51                      push ecx
:0040B191 B9C84F4B00              mov ecx, 004B4FC8
:0040B196 E8A1460500              call 0045F83C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B181(C)
|
:0040B19B B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B178(U)
|
:0040B1A0 8BE5                    mov esp, ebp
:0040B1A2 5D                      pop ebp
:0040B1A3 C3                      ret



* Referenced by a CALL at Address:
|:00407139   
|
:0040B1A4 55                      push ebp
:0040B1A5 8BEC                    mov ebp, esp
:0040B1A7 83EC44                  sub esp, 00000044
:0040B1AA 6A2C                    push 0000002C
:0040B1AC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B1AF E8D9120000              call 0040C48D
:0040B1B4 668945E0                mov word ptr [ebp-20], ax
:0040B1B8 8B45E0                  mov eax, dword ptr [ebp-20]
:0040B1BB 25FFFF0000              and eax, 0000FFFF
:0040B1C0 3D00800000              cmp eax, 00008000
:0040B1C5 750A                    jne 0040B1D1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B1C7 B805000000              mov eax, 00000005
:0040B1CC E9FB020000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B1C5(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040B1D1 6A02                    push 00000002
:0040B1D3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B1D6 E8B2120000              call 0040C48D
:0040B1DB 668945F0                mov word ptr [ebp-10], ax
:0040B1DF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040B1E2 81E1FFFF0000            and ecx, 0000FFFF
:0040B1E8 81F900800000            cmp ecx, 00008000
:0040B1EE 750A                    jne 0040B1FA

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B1F0 B805000000              mov eax, 00000005
:0040B1F5 E9D2020000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B1EE(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B1FA 6A04                    push 00000004
:0040B1FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B1FF E889120000              call 0040C48D
:0040B204 8945CC                  mov dword ptr [ebp-34], eax
:0040B207 817DCC00000080          cmp dword ptr [ebp-34], 80000000
:0040B20E 750A                    jne 0040B21A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B210 B805000000              mov eax, 00000005
:0040B215 E9B2020000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B20E(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B21A 6A04                    push 00000004
:0040B21C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B21F E869120000              call 0040C48D
:0040B224 8945C8                  mov dword ptr [ebp-38], eax
:0040B227 817DC800000080          cmp dword ptr [ebp-38], 80000000
:0040B22E 750A                    jne 0040B23A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B230 B805000000              mov eax, 00000005
:0040B235 E992020000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B22E(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B23A 6A04                    push 00000004
:0040B23C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B23F E849120000              call 0040C48D
:0040B244 8945E8                  mov dword ptr [ebp-18], eax
:0040B247 817DE800000080          cmp dword ptr [ebp-18], 80000000
:0040B24E 750A                    jne 0040B25A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B250 B805000000              mov eax, 00000005
:0040B255 E972020000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B24E(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B25A 6A04                    push 00000004
:0040B25C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B25F E829120000              call 0040C48D
:0040B264 8945E4                  mov dword ptr [ebp-1C], eax
:0040B267 817DE400000080          cmp dword ptr [ebp-1C], 80000000
:0040B26E 750A                    jne 0040B27A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B270 B805000000              mov eax, 00000005
:0040B275 E952020000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B26E(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040B27A 6A03                    push 00000003
:0040B27C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B27F E809120000              call 0040C48D
:0040B284 668945D8                mov word ptr [ebp-28], ax
:0040B288 8B55D8                  mov edx, dword ptr [ebp-28]
:0040B28B 81E2FFFF0000            and edx, 0000FFFF
:0040B291 81FA00800000            cmp edx, 00008000
:0040B297 750A                    jne 0040B2A3

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B299 B805000000              mov eax, 00000005
:0040B29E E929020000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B297(C)
|
:0040B2A3 6A2F                    push 0000002F
:0040B2A5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B2A8 E8E0110000              call 0040C48D
:0040B2AD 668945F4                mov word ptr [ebp-0C], ax
:0040B2B1 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040B2B4 25FFFF0000              and eax, 0000FFFF
:0040B2B9 3D00800000              cmp eax, 00008000
:0040B2BE 750A                    jne 0040B2CA

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B2C0 B805000000              mov eax, 00000005
:0040B2C5 E902020000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B2BE(C)
|
:0040B2CA 6A18                    push 00000018
:0040B2CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B2CF E8B9110000              call 0040C48D
:0040B2D4 668945D4                mov word ptr [ebp-2C], ax
:0040B2D8 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0040B2DB 81E1FFFF0000            and ecx, 0000FFFF
:0040B2E1 81F900800000            cmp ecx, 00008000
:0040B2E7 750A                    jne 0040B2F3

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B2E9 B805000000              mov eax, 00000005
:0040B2EE E9D9010000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B2E7(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B2F3 6A04                    push 00000004
:0040B2F5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B2F8 E890110000              call 0040C48D
:0040B2FD 8945EC                  mov dword ptr [ebp-14], eax
:0040B300 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:0040B307 750A                    jne 0040B313

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B309 B805000000              mov eax, 00000005
:0040B30E E9B9010000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B307(C)
|
:0040B313 6A30                    push 00000030
:0040B315 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B318 E870110000              call 0040C48D
:0040B31D 668945FC                mov word ptr [ebp-04], ax
:0040B321 8B55FC                  mov edx, dword ptr [ebp-04]
:0040B324 81E2FFFF0000            and edx, 0000FFFF
:0040B32A 81FA00800000            cmp edx, 00008000
:0040B330 750A                    jne 0040B33C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B332 B805000000              mov eax, 00000005
:0040B337 E990010000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B330(C)
|
:0040B33C E831620000              call 00411572
:0040B341 85C0                    test eax, eax
:0040B343 750A                    jne 0040B34F
:0040B345 B801000000              mov eax, 00000001
:0040B34A E97D010000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B343(C)
|
:0040B34F C645F800                mov [ebp-08], 00
:0040B353 C645D000                mov [ebp-30], 00
:0040B357 C645DC00                mov [ebp-24], 00
:0040B35B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040B35E 25FFFF0000              and eax, 0000FFFF
:0040B363 8945C4                  mov dword ptr [ebp-3C], eax
:0040B366 837DC404                cmp dword ptr [ebp-3C], 00000004
:0040B36A 7773                    ja 0040B3DF
:0040B36C 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0040B36F FF248DD0B44000          jmp dword ptr [4*ecx+0040B4D0]
:0040B376 8A55F4                  mov dl, byte ptr [ebp-0C]
:0040B379 8855F8                  mov byte ptr [ebp-08], dl
:0040B37C 8A45D4                  mov al, byte ptr [ebp-2C]
:0040B37F 8845D0                  mov byte ptr [ebp-30], al
:0040B382 EB65                    jmp 0040B3E9
:0040B384 C645F804                mov [ebp-08], 04
:0040B388 8A4DD4                  mov cl, byte ptr [ebp-2C]
:0040B38B 884DD0                  mov byte ptr [ebp-30], cl
:0040B38E EB59                    jmp 0040B3E9
:0040B390 C645F802                mov [ebp-08], 02
:0040B394 8A55EC                  mov dl, byte ptr [ebp-14]
:0040B397 8855D0                  mov byte ptr [ebp-30], dl
:0040B39A EB4D                    jmp 0040B3E9
:0040B39C C645F803                mov [ebp-08], 03
:0040B3A0 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B3A3 25FFFF0000              and eax, 0000FFFF
:0040B3A8 8945C0                  mov dword ptr [ebp-40], eax
:0040B3AB 837DC004                cmp dword ptr [ebp-40], 00000004
:0040B3AF 7728                    ja 0040B3D9
:0040B3B1 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040B3B4 FF248DE4B44000          jmp dword ptr [4*ecx+0040B4E4]
:0040B3BB C645D010                mov [ebp-30], 10
:0040B3BF EB1C                    jmp 0040B3DD
:0040B3C1 C645D004                mov [ebp-30], 04
:0040B3C5 EB16                    jmp 0040B3DD
:0040B3C7 C645D001                mov [ebp-30], 01
:0040B3CB EB10                    jmp 0040B3DD
:0040B3CD C645D002                mov [ebp-30], 02
:0040B3D1 EB0A                    jmp 0040B3DD
:0040B3D3 C645D020                mov [ebp-30], 20
:0040B3D7 EB04                    jmp 0040B3DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B3AF(C)
|
:0040B3D9 C645D000                mov [ebp-30], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B3BF(U), :0040B3C5(U), :0040B3CB(U), :0040B3D1(U), :0040B3D7(U)
|
:0040B3DD EB0A                    jmp 0040B3E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B36A(C)
|
:0040B3DF B801000000              mov eax, 00000001
:0040B3E4 E9E3000000              jmp 0040B4CC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B382(U), :0040B38E(U), :0040B39A(U), :0040B3DD(U)
|
:0040B3E9 8B55E0                  mov edx, dword ptr [ebp-20]
:0040B3EC 81E2FFFF0000            and edx, 0000FFFF
:0040B3F2 85D2                    test edx, edx
:0040B3F4 7569                    jne 0040B45F
:0040B3F6 E877610000              call 00411572
:0040B3FB 85C0                    test eax, eax
:0040B3FD 742E                    je 0040B42D
:0040B3FF 8B45F0                  mov eax, dword ptr [ebp-10]
:0040B402 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:0040B407 3D00040000              cmp eax, 00000400
:0040B40C 7C1F                    jl 0040B42D
:0040B40E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040B411 81E1FFFF0000            and ecx, 0000FFFF
:0040B417 81F902040000            cmp ecx, 00000402
:0040B41D 7F0E                    jg 0040B42D
:0040B41F B9C84F4B00              mov ecx, 004B4FC8
:0040B424 E8C7F70400              call 0045ABF0
:0040B429 668945F0                mov word ptr [ebp-10], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B3FD(C), :0040B40C(C), :0040B41D(C)
|
:0040B42D 6A01                    push 00000001
:0040B42F 8A55D0                  mov dl, byte ptr [ebp-30]
:0040B432 52                      push edx
:0040B433 8A45F8                  mov al, byte ptr [ebp-08]
:0040B436 50                      push eax
:0040B437 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040B43A 81E1FFFF0000            and ecx, 0000FFFF
:0040B440 51                      push ecx
:0040B441 B9C84F4B00              mov ecx, 004B4FC8
:0040B446 E843540500              call 0046088E
:0040B44B 8B55F0                  mov edx, dword ptr [ebp-10]
:0040B44E 81E2FFFF0000            and edx, 0000FFFF
:0040B454 52                      push edx
:0040B455 E8C2160600              call 0046CB1C
:0040B45A 83C404                  add esp, 00000004
:0040B45D EB68                    jmp 0040B4C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B3F4(C)
|
:0040B45F 8B45E0                  mov eax, dword ptr [ebp-20]
:0040B462 25FFFF0000              and eax, 0000FFFF
:0040B467 85C0                    test eax, eax
:0040B469 745C                    je 0040B4C7
:0040B46B 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0040B46E 81E1FFFF0000            and ecx, 0000FFFF
:0040B474 894DBC                  mov dword ptr [ebp-44], ecx
:0040B477 837DBC00                cmp dword ptr [ebp-44], 00000000
:0040B47B 740E                    je 0040B48B
:0040B47D 837DBC01                cmp dword ptr [ebp-44], 00000001
:0040B481 740E                    je 0040B491
:0040B483 837DBC02                cmp dword ptr [ebp-44], 00000002
:0040B487 740E                    je 0040B497
:0040B489 EB12                    jmp 0040B49D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B47B(C)
|
:0040B48B C645DC01                mov [ebp-24], 01
:0040B48F EB10                    jmp 0040B4A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B481(C)
|
:0040B491 C645DC00                mov [ebp-24], 00
:0040B495 EB0A                    jmp 0040B4A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B487(C)
|
:0040B497 C645DC02                mov [ebp-24], 02
:0040B49B EB04                    jmp 0040B4A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B489(U)
|
:0040B49D C645DC02                mov [ebp-24], 02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B48F(U), :0040B495(U), :0040B49B(U)
|
:0040B4A1 8A55D0                  mov dl, byte ptr [ebp-30]
:0040B4A4 52                      push edx
:0040B4A5 8A45F8                  mov al, byte ptr [ebp-08]
:0040B4A8 50                      push eax
:0040B4A9 8A4DDC                  mov cl, byte ptr [ebp-24]
:0040B4AC 51                      push ecx
:0040B4AD 8A55E4                  mov dl, byte ptr [ebp-1C]
:0040B4B0 52                      push edx
:0040B4B1 8A45E8                  mov al, byte ptr [ebp-18]
:0040B4B4 50                      push eax
:0040B4B5 8A4DC8                  mov cl, byte ptr [ebp-38]
:0040B4B8 51                      push ecx
:0040B4B9 8A55CC                  mov dl, byte ptr [ebp-34]
:0040B4BC 52                      push edx
:0040B4BD B9C84F4B00              mov ecx, 004B4FC8
:0040B4C2 E82A560500              call 00460AF1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B45D(U), :0040B469(C)
|
:0040B4C7 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B1CC(U), :0040B1F5(U), :0040B215(U), :0040B235(U), :0040B255(U)
|:0040B275(U), :0040B29E(U), :0040B2C5(U), :0040B2EE(U), :0040B30E(U)
|:0040B337(U), :0040B34A(U), :0040B3E4(U)
|
:0040B4CC 8BE5                    mov esp, ebp
:0040B4CE 5D                      pop ebp
:0040B4CF C3                      ret



:0040B4D0 76B34000                DWORD 0040B376
:0040B4D4 76B34000                DWORD 0040B376
:0040B4D8 84B34000                DWORD 0040B384
:0040B4DC 90B34000                DWORD 0040B390
:0040B4E0 9CB34000                DWORD 0040B39C
:0040B4E4 BBB34000                DWORD 0040B3BB
:0040B4E8 C1B34000                DWORD 0040B3C1
:0040B4EC C7B34000                DWORD 0040B3C7
:0040B4F0 CDB34000                DWORD 0040B3CD
:0040B4F4 D3B34000                DWORD 0040B3D3



* Referenced by a CALL at Address:
|:0040714A   
|
:0040B4F8 55                      push ebp
:0040B4F9 8BEC                    mov ebp, esp
:0040B4FB B801000000              mov eax, 00000001
:0040B500 5D                      pop ebp
:0040B501 C3                      ret



* Referenced by a CALL at Address:
|:0040715B   
|
:0040B502 55                      push ebp
:0040B503 8BEC                    mov ebp, esp
:0040B505 83EC1C                  sub esp, 0000001C
:0040B508 6A2C                    push 0000002C
:0040B50A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B50D E87B0F0000              call 0040C48D
:0040B512 668945F0                mov word ptr [ebp-10], ax
:0040B516 8B45F0                  mov eax, dword ptr [ebp-10]
:0040B519 25FFFF0000              and eax, 0000FFFF
:0040B51E 3D00800000              cmp eax, 00008000
:0040B523 750A                    jne 0040B52F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B525 B805000000              mov eax, 00000005
:0040B52A E979010000              jmp 0040B6A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B523(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040B52F 6A02                    push 00000002
:0040B531 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B534 E8540F0000              call 0040C48D
:0040B539 668945FC                mov word ptr [ebp-04], ax
:0040B53D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B540 81E1FFFF0000            and ecx, 0000FFFF
:0040B546 81F900800000            cmp ecx, 00008000
:0040B54C 750A                    jne 0040B558

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B54E B805000000              mov eax, 00000005
:0040B553 E950010000              jmp 0040B6A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B54C(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B558 6A04                    push 00000004
:0040B55A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B55D E82B0F0000              call 0040C48D
:0040B562 8945EC                  mov dword ptr [ebp-14], eax
:0040B565 817DEC00000080          cmp dword ptr [ebp-14], 80000000
:0040B56C 750A                    jne 0040B578

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B56E B805000000              mov eax, 00000005
:0040B573 E930010000              jmp 0040B6A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B56C(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B578 6A04                    push 00000004
:0040B57A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B57D E80B0F0000              call 0040C48D
:0040B582 8945E4                  mov dword ptr [ebp-1C], eax
:0040B585 817DE400000080          cmp dword ptr [ebp-1C], 80000000
:0040B58C 750A                    jne 0040B598

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B58E B805000000              mov eax, 00000005
:0040B593 E910010000              jmp 0040B6A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B58C(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B598 6A04                    push 00000004
:0040B59A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B59D E8EB0E0000              call 0040C48D
:0040B5A2 8945F8                  mov dword ptr [ebp-08], eax
:0040B5A5 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040B5AC 750A                    jne 0040B5B8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B5AE B805000000              mov eax, 00000005
:0040B5B3 E9F0000000              jmp 0040B6A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B5AC(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B5B8 6A04                    push 00000004
:0040B5BA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B5BD E8CB0E0000              call 0040C48D
:0040B5C2 8945F4                  mov dword ptr [ebp-0C], eax
:0040B5C5 817DF400000080          cmp dword ptr [ebp-0C], 80000000
:0040B5CC 750A                    jne 0040B5D8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B5CE B805000000              mov eax, 00000005
:0040B5D3 E9D0000000              jmp 0040B6A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B5CC(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040B5D8 6A03                    push 00000003
:0040B5DA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B5DD E8AB0E0000              call 0040C48D
:0040B5E2 668945E8                mov word ptr [ebp-18], ax
:0040B5E6 8B55E8                  mov edx, dword ptr [ebp-18]
:0040B5E9 81E2FFFF0000            and edx, 0000FFFF
:0040B5EF 81FA00800000            cmp edx, 00008000
:0040B5F5 750A                    jne 0040B601

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B5F7 B805000000              mov eax, 00000005
:0040B5FC E9A7000000              jmp 0040B6A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B5F5(C)
|
:0040B601 E86C5F0000              call 00411572
:0040B606 85C0                    test eax, eax
:0040B608 750A                    jne 0040B614
:0040B60A B801000000              mov eax, 00000001
:0040B60F E994000000              jmp 0040B6A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B608(C)
|
:0040B614 8B45F0                  mov eax, dword ptr [ebp-10]
:0040B617 25FFFF0000              and eax, 0000FFFF
:0040B61C 85C0                    test eax, eax
:0040B61E 754E                    jne 0040B66E
:0040B620 E84D5F0000              call 00411572
:0040B625 85C0                    test eax, eax
:0040B627 7430                    je 0040B659
:0040B629 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B62C 81E1FFFF0000            and ecx, 0000FFFF
:0040B632 81F900040000            cmp ecx, 00000400
:0040B638 7C1F                    jl 0040B659
:0040B63A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040B63D 81E2FFFF0000            and edx, 0000FFFF
:0040B643 81FA02040000            cmp edx, 00000402
:0040B649 7F0E                    jg 0040B659
:0040B64B B9C84F4B00              mov ecx, 004B4FC8
:0040B650 E89BF50400              call 0045ABF0
:0040B655 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B627(C), :0040B638(C), :0040B649(C)
|
:0040B659 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B65C 25FFFF0000              and eax, 0000FFFF
:0040B661 50                      push eax
:0040B662 B9C84F4B00              mov ecx, 004B4FC8
:0040B667 E8C4500500              call 00460730
:0040B66C EB35                    jmp 0040B6A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B61E(C)
|
:0040B66E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040B671 81E1FFFF0000            and ecx, 0000FFFF
:0040B677 81F9FFFF0000            cmp ecx, 0000FFFF
:0040B67D 7506                    jne 0040B685
:0040B67F 66C745E80200            mov [ebp-18], 0002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B67D(C)
|
:0040B685 8A55E8                  mov dl, byte ptr [ebp-18]
:0040B688 52                      push edx
:0040B689 8A45F4                  mov al, byte ptr [ebp-0C]
:0040B68C 50                      push eax
:0040B68D 8A4DF8                  mov cl, byte ptr [ebp-08]
:0040B690 51                      push ecx
:0040B691 8A55E4                  mov dl, byte ptr [ebp-1C]
:0040B694 52                      push edx
:0040B695 8A45EC                  mov al, byte ptr [ebp-14]
:0040B698 50                      push eax
:0040B699 B9C84F4B00              mov ecx, 004B4FC8
:0040B69E E8D7500500              call 0046077A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B66C(U)
|
:0040B6A3 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B52A(U), :0040B553(U), :0040B573(U), :0040B593(U), :0040B5B3(U)
|:0040B5D3(U), :0040B5FC(U), :0040B60F(U)
|
:0040B6A8 8BE5                    mov esp, ebp
:0040B6AA 5D                      pop ebp
:0040B6AB C3                      ret



* Referenced by a CALL at Address:
|:0040716C   
|
:0040B6AC 55                      push ebp
:0040B6AD 8BEC                    mov ebp, esp
:0040B6AF E8BE5E0000              call 00411572
:0040B6B4 85C0                    test eax, eax
:0040B6B6 740C                    je 0040B6C4

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040B6B8 6A02                    push 00000002
:0040B6BA B9C84F4B00              mov ecx, 004B4FC8
:0040B6BF E806460500              call 0045FCCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B6B6(C)
|
:0040B6C4 B801000000              mov eax, 00000001
:0040B6C9 5D                      pop ebp
:0040B6CA C3                      ret



* Referenced by a CALL at Address:
|:0040717A   
|
:0040B6CB 55                      push ebp
:0040B6CC 8BEC                    mov ebp, esp
:0040B6CE 83EC08                  sub esp, 00000008
:0040B6D1 6A1E                    push 0000001E
:0040B6D3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B6D6 E8B20D0000              call 0040C48D
:0040B6DB 668945FC                mov word ptr [ebp-04], ax
:0040B6DF 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B6E2 25FFFF0000              and eax, 0000FFFF
:0040B6E7 3D00800000              cmp eax, 00008000
:0040B6EC 7507                    jne 0040B6F5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B6EE B805000000              mov eax, 00000005
:0040B6F3 EB3A                    jmp 0040B72F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B6EC(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B6F5 6A04                    push 00000004
:0040B6F7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B6FA E88E0D0000              call 0040C48D
:0040B6FF 8945F8                  mov dword ptr [ebp-08], eax
:0040B702 817DF800000080          cmp dword ptr [ebp-08], 80000000
:0040B709 7507                    jne 0040B712

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B70B B805000000              mov eax, 00000005
:0040B710 EB1D                    jmp 0040B72F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B709(C)
|
:0040B712 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040B715 51                      push ecx
:0040B716 8B55FC                  mov edx, dword ptr [ebp-04]
:0040B719 81E2FFFF0000            and edx, 0000FFFF
:0040B71F 52                      push edx
:0040B720 B9F8544B00              mov ecx, 004B54F8
:0040B725 E889E00500              call 004697B3
:0040B72A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B6F3(U), :0040B710(U)
|
:0040B72F 8BE5                    mov esp, ebp
:0040B731 5D                      pop ebp
:0040B732 C3                      ret



* Referenced by a CALL at Address:
|:00407188   
|
:0040B733 55                      push ebp
:0040B734 8BEC                    mov ebp, esp
:0040B736 51                      push ecx

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0040B737 6A09                    push 00000009
:0040B739 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B73C E84C0D0000              call 0040C48D
:0040B741 668945FC                mov word ptr [ebp-04], ax
:0040B745 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B748 25FFFF0000              and eax, 0000FFFF
:0040B74D 3D00800000              cmp eax, 00008000
:0040B752 7507                    jne 0040B75B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B754 B805000000              mov eax, 00000005
:0040B759 EB48                    jmp 0040B7A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B752(C)
|
:0040B75B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B75E 81E1FFFF0000            and ecx, 0000FFFF
:0040B764 81F9FF000000            cmp ecx, 000000FF
:0040B76A 7419                    je 0040B785
:0040B76C 8B55FC                  mov edx, dword ptr [ebp-04]
:0040B76F 81E2FFFF0000            and edx, 0000FFFF
:0040B775 83C202                  add edx, 00000002
:0040B778 52                      push edx
:0040B779 B900554B00              mov ecx, 004B5500
:0040B77E E81BDD0500              call 0046949E
:0040B783 EB19                    jmp 0040B79E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B76A(C)
|
:0040B785 68FF000000              push 000000FF
:0040B78A B978294B00              mov ecx, 004B2978
:0040B78F E8AC270200              call 0042DF40
:0040B794 B900554B00              mov ecx, 004B5500
:0040B799 E81BDD0500              call 004694B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B783(U)
|
:0040B79E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B759(U)
|
:0040B7A3 8BE5                    mov esp, ebp
:0040B7A5 5D                      pop ebp
:0040B7A6 C3                      ret



* Referenced by a CALL at Address:
|:00407196   
|
:0040B7A7 55                      push ebp
:0040B7A8 8BEC                    mov ebp, esp
:0040B7AA E8C35D0000              call 00411572
:0040B7AF 85C0                    test eax, eax
:0040B7B1 740C                    je 0040B7BF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040B7B3 6A03                    push 00000003
:0040B7B5 B9C84F4B00              mov ecx, 004B4FC8
:0040B7BA E80B450500              call 0045FCCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B7B1(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040B7BF B803000000              mov eax, 00000003
:0040B7C4 5D                      pop ebp
:0040B7C5 C3                      ret



* Referenced by a CALL at Address:
|:004071A4   
|
:0040B7C6 55                      push ebp
:0040B7C7 8BEC                    mov ebp, esp
:0040B7C9 51                      push ecx
:0040B7CA 6A12                    push 00000012
:0040B7CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B7CF E8B90C0000              call 0040C48D
:0040B7D4 668945FC                mov word ptr [ebp-04], ax
:0040B7D8 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B7DB 25FFFF0000              and eax, 0000FFFF
:0040B7E0 3D00800000              cmp eax, 00008000
:0040B7E5 7507                    jne 0040B7EE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B7E7 B805000000              mov eax, 00000005
:0040B7EC EB17                    jmp 0040B805

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B7E5(C)
|
:0040B7EE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B7F1 81E1FFFF0000            and ecx, 0000FFFF
:0040B7F7 51                      push ecx
:0040B7F8 E80C370200              call 0042EF09
:0040B7FD 83C404                  add esp, 00000004
:0040B800 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B7EC(U)
|
:0040B805 8BE5                    mov esp, ebp
:0040B807 5D                      pop ebp
:0040B808 C3                      ret



* Referenced by a CALL at Address:
|:004071B2   
|
:0040B809 55                      push ebp
:0040B80A 8BEC                    mov ebp, esp
:0040B80C 51                      push ecx
:0040B80D 6A31                    push 00000031
:0040B80F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B812 E8760C0000              call 0040C48D
:0040B817 668945FC                mov word ptr [ebp-04], ax
:0040B81B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B81E 25FFFF0000              and eax, 0000FFFF
:0040B823 3D00800000              cmp eax, 00008000
:0040B828 7507                    jne 0040B831

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B82A B805000000              mov eax, 00000005
:0040B82F EB23                    jmp 0040B854

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B828(C)
|
:0040B831 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B834 81E1FFFF0000            and ecx, 0000FFFF
:0040B83A 85C9                    test ecx, ecx
:0040B83C 740C                    je 0040B84A
:0040B83E E8AA5F0000              call 004117ED
:0040B843 B801000000              mov eax, 00000001
:0040B848 EB0A                    jmp 0040B854

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B83C(C)
|
:0040B84A E89E5F0000              call 004117ED
:0040B84F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B82F(U), :0040B848(U)
|
:0040B854 8BE5                    mov esp, ebp
:0040B856 5D                      pop ebp
:0040B857 C3                      ret



* Referenced by a CALL at Address:
|:004071C0   
|
:0040B858 55                      push ebp
:0040B859 8BEC                    mov ebp, esp
:0040B85B 51                      push ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040B85C 6A02                    push 00000002
:0040B85E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B861 E8270C0000              call 0040C48D
:0040B866 668945FC                mov word ptr [ebp-04], ax
:0040B86A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B86D 25FFFF0000              and eax, 0000FFFF
:0040B872 3D00800000              cmp eax, 00008000
:0040B877 7507                    jne 0040B880

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B879 B805000000              mov eax, 00000005
:0040B87E EB26                    jmp 0040B8A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B877(C)
|
:0040B880 E8ED5C0000              call 00411572
:0040B885 85C0                    test eax, eax
:0040B887 7418                    je 0040B8A1
:0040B889 6A00                    push 00000000
:0040B88B 6A00                    push 00000000
:0040B88D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B890 81E1FFFF0000            and ecx, 0000FFFF
:0040B896 51                      push ecx
:0040B897 B9C84F4B00              mov ecx, 004B4FC8
:0040B89C E8C3400500              call 0045F964

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B887(C)
|
:0040B8A1 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B87E(U)
|
:0040B8A6 8BE5                    mov esp, ebp
:0040B8A8 5D                      pop ebp
:0040B8A9 C3                      ret



* Referenced by a CALL at Address:
|:004071CE   
|
:0040B8AA 55                      push ebp
:0040B8AB 8BEC                    mov ebp, esp
:0040B8AD 51                      push ecx
:0040B8AE C745FC00000000          mov [ebp-04], 00000000
:0040B8B5 EB09                    jmp 0040B8C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B8D7(U)
|
:0040B8B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B8BA 83C001                  add eax, 00000001
:0040B8BD 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B8B5(U)
|
:0040B8C0 817DFC00010000          cmp dword ptr [ebp-04], 00000100
:0040B8C7 7310                    jnb 0040B8D9
:0040B8C9 6A00                    push 00000000
:0040B8CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B8CE 51                      push ecx
:0040B8CF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B8D2 E8900C0000              call 0040C567
:0040B8D7 EBDE                    jmp 0040B8B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B8C7(C)
|
:0040B8D9 B801000000              mov eax, 00000001
:0040B8DE 8BE5                    mov esp, ebp
:0040B8E0 5D                      pop ebp
:0040B8E1 C3                      ret



* Referenced by a CALL at Address:
|:004071DC   
|
:0040B8E2 55                      push ebp
:0040B8E3 8BEC                    mov ebp, esp
:0040B8E5 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040B8E6 6A04                    push 00000004
:0040B8E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040B8EB E89D0B0000              call 0040C48D
:0040B8F0 8945FC                  mov dword ptr [ebp-04], eax
:0040B8F3 817DFC00000080          cmp dword ptr [ebp-04], 80000000
:0040B8FA 7507                    jne 0040B903

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040B8FC B805000000              mov eax, 00000005
:0040B901 EB11                    jmp 0040B914

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B8FA(C)
|
:0040B903 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B906 50                      push eax
:0040B907 E8063D0200              call 0042F612
:0040B90C 83C404                  add esp, 00000004
:0040B90F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B901(U)
|
:0040B914 8BE5                    mov esp, ebp
:0040B916 5D                      pop ebp
:0040B917 C3                      ret



* Referenced by a CALL at Addresses:
|:0040C1A7   , :0040C1F4   , :0040C42A   , :0040C477   , :0042F0B3   
|
:0040B918 55                      push ebp
:0040B919 8BEC                    mov ebp, esp
:0040B91B 51                      push ecx
:0040B91C 894DFC                  mov dword ptr [ebp-04], ecx
:0040B91F 6800A04700              push 0047A000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0040B924 6A07                    push 00000007
:0040B926 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B929 E831140000              call 0040CD5F
:0040B92E 8BE5                    mov esp, ebp
:0040B930 5D                      pop ebp
:0040B931 C3                      ret



* Referenced by a CALL at Addresses:
|:0040C1AF   , :0040C1FC   , :0040C432   , :0040C47F   , :0042F0BD   
|:0042F3C2   
|
:0040B932 55                      push ebp
:0040B933 8BEC                    mov ebp, esp
:0040B935 51                      push ecx
:0040B936 894DFC                  mov dword ptr [ebp-04], ecx
:0040B939 6800A04700              push 0047A000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0040B93E 6A07                    push 00000007
:0040B940 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040B943 E816150000              call 0040CE5E
:0040B948 8BE5                    mov esp, ebp
:0040B94A 5D                      pop ebp
:0040B94B C3                      ret


:0040B94C 55                      push ebp
:0040B94D 8BEC                    mov ebp, esp
:0040B94F 51                      push ecx
:0040B950 894DFC                  mov dword ptr [ebp-04], ecx
:0040B953 8BE5                    mov esp, ebp
:0040B955 5D                      pop ebp
:0040B956 C3                      ret



* Referenced by a CALL at Addresses:
|:00408492   , :0040A0F1   , :0040A1D9   , :0040A233   , :0040A2EB   
|
:0040B957 55                      push ebp
:0040B958 8BEC                    mov ebp, esp
:0040B95A 83EC10                  sub esp, 00000010
:0040B95D 894DF4                  mov dword ptr [ebp-0C], ecx
:0040B960 8B4508                  mov eax, dword ptr [ebp+08]
:0040B963 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B9B4(U)
|
:0040B966 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040B969 33D2                    xor edx, edx
:0040B96B 8A11                    mov dl, byte ptr [ecx]
:0040B96D 85D2                    test edx, edx
:0040B96F 7445                    je 0040B9B6
:0040B971 8B450C                  mov eax, dword ptr [ebp+0C]
:0040B974 33C9                    xor ecx, ecx
:0040B976 8A08                    mov cl, byte ptr [eax]
:0040B978 83F920                  cmp ecx, 00000020
:0040B97B 7D1B                    jge 0040B998
:0040B97D 8B550C                  mov edx, dword ptr [ebp+0C]
:0040B980 33C0                    xor eax, eax
:0040B982 8A02                    mov al, byte ptr [edx]
:0040B984 83F80A                  cmp eax, 0000000A
:0040B987 750F                    jne 0040B998
:0040B989 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040B98C 33D2                    xor edx, edx
:0040B98E 8A5101                  mov dl, byte ptr [ecx+01]
:0040B991 83FA26                  cmp edx, 00000026
:0040B994 7502                    jne 0040B998
:0040B996 EB1E                    jmp 0040B9B6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B97B(C), :0040B987(C), :0040B994(C)
|
:0040B998 8B4508                  mov eax, dword ptr [ebp+08]
:0040B99B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040B99E 8A11                    mov dl, byte ptr [ecx]
:0040B9A0 8810                    mov byte ptr [eax], dl
:0040B9A2 8B4508                  mov eax, dword ptr [ebp+08]
:0040B9A5 83C001                  add eax, 00000001
:0040B9A8 894508                  mov dword ptr [ebp+08], eax
:0040B9AB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040B9AE 83C101                  add ecx, 00000001
:0040B9B1 894D0C                  mov dword ptr [ebp+0C], ecx
:0040B9B4 EBB0                    jmp 0040B966

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B96F(C), :0040B996(U)
|
:0040B9B6 8B5508                  mov edx, dword ptr [ebp+08]
:0040B9B9 C60200                  mov byte ptr [edx], 00
:0040B9BC 8B45FC                  mov eax, dword ptr [ebp-04]
:0040B9BF E9B8010000              jmp 0040BB7C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BB6E(U)
|
:0040B9C4 8B450C                  mov eax, dword ptr [ebp+0C]
:0040B9C7 33C9                    xor ecx, ecx
:0040B9C9 8A08                    mov cl, byte ptr [eax]
:0040B9CB 85C9                    test ecx, ecx
:0040B9CD 0F84A0010000            je 0040BB73
:0040B9D3 8B550C                  mov edx, dword ptr [ebp+0C]
:0040B9D6 33C0                    xor eax, eax
:0040B9D8 8A02                    mov al, byte ptr [edx]
:0040B9DA 83F820                  cmp eax, 00000020
:0040B9DD 7D3F                    jge 0040BA1E
:0040B9DF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040B9E2 33D2                    xor edx, edx
:0040B9E4 8A11                    mov dl, byte ptr [ecx]
:0040B9E6 83FA0A                  cmp edx, 0000000A
:0040B9E9 7512                    jne 0040B9FD
:0040B9EB 8B450C                  mov eax, dword ptr [ebp+0C]
:0040B9EE 33C9                    xor ecx, ecx
:0040B9F0 8A4801                  mov cl, byte ptr [eax+01]
:0040B9F3 83F926                  cmp ecx, 00000026
:0040B9F6 7505                    jne 0040B9FD
:0040B9F8 E976010000              jmp 0040BB73

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B9E9(C), :0040B9F6(C)
|
:0040B9FD 8B5508                  mov edx, dword ptr [ebp+08]
:0040BA00 8B450C                  mov eax, dword ptr [ebp+0C]
:0040BA03 8A08                    mov cl, byte ptr [eax]
:0040BA05 880A                    mov byte ptr [edx], cl
:0040BA07 8B5508                  mov edx, dword ptr [ebp+08]
:0040BA0A 83C201                  add edx, 00000001
:0040BA0D 895508                  mov dword ptr [ebp+08], edx
:0040BA10 8B450C                  mov eax, dword ptr [ebp+0C]
:0040BA13 83C001                  add eax, 00000001
:0040BA16 89450C                  mov dword ptr [ebp+0C], eax
:0040BA19 E950010000              jmp 0040BB6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B9DD(C)
|
:0040BA1E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040BA21 33D2                    xor edx, edx
:0040BA23 8A11                    mov dl, byte ptr [ecx]
:0040BA25 83FA73                  cmp edx, 00000073
:0040BA28 7D49                    jge 0040BA73
:0040BA2A 8B450C                  mov eax, dword ptr [ebp+0C]
:0040BA2D 33C9                    xor ecx, ecx
:0040BA2F 8A08                    mov cl, byte ptr [eax]
:0040BA31 81C17F820000            add ecx, 0000827F
:0040BA37 66894DF8                mov word ptr [ebp-08], cx
:0040BA3B 8B550C                  mov edx, dword ptr [ebp+0C]
:0040BA3E 83C201                  add edx, 00000001
:0040BA41 89550C                  mov dword ptr [ebp+0C], edx
:0040BA44 8B45F8                  mov eax, dword ptr [ebp-08]
:0040BA47 25FFFF0000              and eax, 0000FFFF
:0040BA4C C1F808                  sar eax, 08
:0040BA4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BA52 8801                    mov byte ptr [ecx], al
:0040BA54 8B5508                  mov edx, dword ptr [ebp+08]
:0040BA57 83C201                  add edx, 00000001
:0040BA5A 895508                  mov dword ptr [ebp+08], edx
:0040BA5D 8B4508                  mov eax, dword ptr [ebp+08]
:0040BA60 8A4DF8                  mov cl, byte ptr [ebp-08]
:0040BA63 8808                    mov byte ptr [eax], cl
:0040BA65 8B5508                  mov edx, dword ptr [ebp+08]
:0040BA68 83C201                  add edx, 00000001
:0040BA6B 895508                  mov dword ptr [ebp+08], edx
:0040BA6E E9FB000000              jmp 0040BB6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BA28(C)
|
:0040BA73 8B450C                  mov eax, dword ptr [ebp+0C]
:0040BA76 33C9                    xor ecx, ecx
:0040BA78 8A08                    mov cl, byte ptr [eax]
:0040BA7A 81F980000000            cmp ecx, 00000080
:0040BA80 0F8DB0000000            jnl 0040BB36
:0040BA86 8B550C                  mov edx, dword ptr [ebp+0C]
:0040BA89 33C0                    xor eax, eax
:0040BA8B 8A02                    mov al, byte ptr [edx]
:0040BA8D 8945F0                  mov dword ptr [ebp-10], eax
:0040BA90 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040BA93 83E973                  sub ecx, 00000073
:0040BA96 894DF0                  mov dword ptr [ebp-10], ecx
:0040BA99 837DF003                cmp dword ptr [ebp-10], 00000003
:0040BA9D 0F8788000000            ja 0040BB2B
:0040BAA3 8B55F0                  mov edx, dword ptr [ebp-10]
:0040BAA6 FF249582BB4000          jmp dword ptr [4*edx+0040BB82]
:0040BAAD 8B4508                  mov eax, dword ptr [ebp+08]
:0040BAB0 C60081                  mov byte ptr [eax], 81
:0040BAB3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BAB6 83C101                  add ecx, 00000001
:0040BAB9 894D08                  mov dword ptr [ebp+08], ecx
:0040BABC 8B5508                  mov edx, dword ptr [ebp+08]
:0040BABF C60241                  mov byte ptr [edx], 41
:0040BAC2 8B4508                  mov eax, dword ptr [ebp+08]
:0040BAC5 83C001                  add eax, 00000001
:0040BAC8 894508                  mov dword ptr [ebp+08], eax
:0040BACB EB5E                    jmp 0040BB2B
:0040BACD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BAD0 C60181                  mov byte ptr [ecx], 81
:0040BAD3 8B5508                  mov edx, dword ptr [ebp+08]
:0040BAD6 83C201                  add edx, 00000001
:0040BAD9 895508                  mov dword ptr [ebp+08], edx
:0040BADC 8B4508                  mov eax, dword ptr [ebp+08]
:0040BADF C60042                  mov byte ptr [eax], 42
:0040BAE2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BAE5 83C101                  add ecx, 00000001
:0040BAE8 894D08                  mov dword ptr [ebp+08], ecx
:0040BAEB EB3E                    jmp 0040BB2B
:0040BAED 8B5508                  mov edx, dword ptr [ebp+08]
:0040BAF0 C60281                  mov byte ptr [edx], 81
:0040BAF3 8B4508                  mov eax, dword ptr [ebp+08]
:0040BAF6 83C001                  add eax, 00000001
:0040BAF9 894508                  mov dword ptr [ebp+08], eax
:0040BAFC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BAFF C60148                  mov byte ptr [ecx], 48
:0040BB02 8B5508                  mov edx, dword ptr [ebp+08]
:0040BB05 83C201                  add edx, 00000001
:0040BB08 895508                  mov dword ptr [ebp+08], edx
:0040BB0B EB1E                    jmp 0040BB2B
:0040BB0D 8B4508                  mov eax, dword ptr [ebp+08]
:0040BB10 C60081                  mov byte ptr [eax], 81
:0040BB13 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BB16 83C101                  add ecx, 00000001
:0040BB19 894D08                  mov dword ptr [ebp+08], ecx
:0040BB1C 8B5508                  mov edx, dword ptr [ebp+08]
:0040BB1F C60249                  mov byte ptr [edx], 49
:0040BB22 8B4508                  mov eax, dword ptr [ebp+08]
:0040BB25 83C001                  add eax, 00000001
:0040BB28 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BA9D(C), :0040BACB(U), :0040BAEB(U), :0040BB0B(U)
|
:0040BB2B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040BB2E 83C101                  add ecx, 00000001
:0040BB31 894D0C                  mov dword ptr [ebp+0C], ecx
:0040BB34 EB38                    jmp 0040BB6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BA80(C)
|
:0040BB36 8B5508                  mov edx, dword ptr [ebp+08]
:0040BB39 8B450C                  mov eax, dword ptr [ebp+0C]
:0040BB3C 8A08                    mov cl, byte ptr [eax]
:0040BB3E 880A                    mov byte ptr [edx], cl
:0040BB40 8B5508                  mov edx, dword ptr [ebp+08]
:0040BB43 83C201                  add edx, 00000001
:0040BB46 895508                  mov dword ptr [ebp+08], edx
:0040BB49 8B450C                  mov eax, dword ptr [ebp+0C]
:0040BB4C 83C001                  add eax, 00000001
:0040BB4F 89450C                  mov dword ptr [ebp+0C], eax
:0040BB52 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BB55 8B550C                  mov edx, dword ptr [ebp+0C]
:0040BB58 8A02                    mov al, byte ptr [edx]
:0040BB5A 8801                    mov byte ptr [ecx], al
:0040BB5C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040BB5F 83C101                  add ecx, 00000001
:0040BB62 894D08                  mov dword ptr [ebp+08], ecx
:0040BB65 8B550C                  mov edx, dword ptr [ebp+0C]
:0040BB68 83C201                  add edx, 00000001
:0040BB6B 89550C                  mov dword ptr [ebp+0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040BA19(U), :0040BA6E(U), :0040BB34(U)
|
:0040BB6E E951FEFFFF              jmp 0040B9C4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040B9CD(C), :0040B9F8(U)
|
:0040BB73 8B4508                  mov eax, dword ptr [ebp+08]
:0040BB76 C60000                  mov byte ptr [eax], 00
:0040BB79 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040B9BF(U)
|
:0040BB7C 8BE5                    mov esp, ebp
:0040BB7E 5D                      pop ebp
:0040BB7F C20800                  ret 0008



:0040BB82 ADBA4000                DWORD 0040BAAD
:0040BB86 CDBA4000                DWORD 0040BACD
:0040BB8A EDBA4000                DWORD 0040BAED
:0040BB8E 0DBB4000                DWORD 0040BB0D



* Referenced by a CALL at Address:
|:0040E7CB   
|
:0040BB92 55                      push ebp
:0040BB93 8BEC                    mov ebp, esp
:0040BB95 6AFF                    push FFFFFFFF
:0040BB97 6869954700              push 00479569
:0040BB9C 64A100000000            mov eax, dword ptr fs:[00000000]
:0040BBA2 50                      push eax
:0040BBA3 64892500000000          mov dword ptr fs:[00000000], esp
:0040BBAA 83EC24                  sub esp, 00000024
:0040BBAD 894DD0                  mov dword ptr [ebp-30], ecx
:0040BBB0 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BBB3 E8E89BFFFF              call 004057A0
:0040BBB8 C745FC00000000          mov [ebp-04], 00000000

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040BBBF 6A02                    push 00000002
:0040BBC1 8B4508                  mov eax, dword ptr [ebp+08]
:0040BBC4 50                      push eax
:0040BBC5 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BBC8 E8EF1C0000              call 0040D8BC
:0040BBCD C745D800000000          mov [ebp-28], 00000000
:0040BBD4 EB09                    jmp 0040BBDF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BCC1(U)
|
:0040BBD6 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0040BBD9 83C101                  add ecx, 00000001
:0040BBDC 894DD8                  mov dword ptr [ebp-28], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BBD4(U)
|
:0040BBDF 837DD85A                cmp dword ptr [ebp-28], 0000005A
:0040BBE3 0F8DDD000000            jnl 0040BCC6

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BBE9 6A04                    push 00000004
:0040BBEB 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BBEE 6BD234                  imul edx, 00000034
:0040BBF1 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BBF4 8D8C1044200000          lea ecx, dword ptr [eax+edx+00002044]
:0040BBFB 51                      push ecx
:0040BBFC 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BBFF E8C31E0000              call 0040DAC7
:0040BC04 6A01                    push 00000001
:0040BC06 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BC09 6BD234                  imul edx, 00000034
:0040BC0C 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BC0F 8D8C1048200000          lea ecx, dword ptr [eax+edx+00002048]
:0040BC16 51                      push ecx
:0040BC17 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BC1A E8A81E0000              call 0040DAC7
:0040BC1F 6A01                    push 00000001
:0040BC21 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BC24 6BD234                  imul edx, 00000034
:0040BC27 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BC2A 8D8C1049200000          lea ecx, dword ptr [eax+edx+00002049]
:0040BC31 51                      push ecx
:0040BC32 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BC35 E88D1E0000              call 0040DAC7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BC3A 6A04                    push 00000004
:0040BC3C 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BC3F 6BD234                  imul edx, 00000034
:0040BC42 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BC45 8D8C104C200000          lea ecx, dword ptr [eax+edx+0000204C]
:0040BC4C 51                      push ecx
:0040BC4D 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BC50 E8721E0000              call 0040DAC7
:0040BC55 6A01                    push 00000001
:0040BC57 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BC5A 6BD234                  imul edx, 00000034
:0040BC5D 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BC60 8D8C1050200000          lea ecx, dword ptr [eax+edx+00002050]
:0040BC67 51                      push ecx
:0040BC68 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BC6B E8571E0000              call 0040DAC7

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040BC70 6A02                    push 00000002
:0040BC72 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BC75 6BD234                  imul edx, 00000034
:0040BC78 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BC7B 8D8C1052200000          lea ecx, dword ptr [eax+edx+00002052]
:0040BC82 51                      push ecx
:0040BC83 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BC86 E83C1E0000              call 0040DAC7
:0040BC8B 6A01                    push 00000001
:0040BC8D 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BC90 6BD234                  imul edx, 00000034
:0040BC93 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BC96 8D8C1054200000          lea ecx, dword ptr [eax+edx+00002054]
:0040BC9D 51                      push ecx
:0040BC9E 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BCA1 E8211E0000              call 0040DAC7
:0040BCA6 6A01                    push 00000001
:0040BCA8 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BCAB 6BD234                  imul edx, 00000034
:0040BCAE 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BCB1 8D8C1055200000          lea ecx, dword ptr [eax+edx+00002055]
:0040BCB8 51                      push ecx
:0040BCB9 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BCBC E8061E0000              call 0040DAC7
:0040BCC1 E910FFFFFF              jmp 0040BBD6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BBE3(C)
|
:0040BCC6 6881010000              push 00000181
:0040BCCB 8B55D0                  mov edx, dword ptr [ebp-30]
:0040BCCE 81C298320000            add edx, 00003298
:0040BCD4 52                      push edx
:0040BCD5 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BCD8 E8EA1D0000              call 0040DAC7
:0040BCDD 6A01                    push 00000001
:0040BCDF 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BCE2 0596320000              add eax, 00003296
:0040BCE7 50                      push eax
:0040BCE8 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BCEB E8D71D0000              call 0040DAC7
:0040BCF0 6A01                    push 00000001
:0040BCF2 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040BCF5 81C197320000            add ecx, 00003297
:0040BCFB 51                      push ecx
:0040BCFC 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BCFF E8C31D0000              call 0040DAC7

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0040BD04 6A08                    push 00000008
:0040BD06 8B55D0                  mov edx, dword ptr [ebp-30]
:0040BD09 81C28C320000            add edx, 0000328C
:0040BD0F 52                      push edx
:0040BD10 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BD13 E8AF1D0000              call 0040DAC7
:0040BD18 C745D800000000          mov [ebp-28], 00000000
:0040BD1F EB09                    jmp 0040BD2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BD48(U)
|
:0040BD21 8B45D8                  mov eax, dword ptr [ebp-28]
:0040BD24 83C001                  add eax, 00000001
:0040BD27 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BD1F(U)
|
:0040BD2A 817DD800080000          cmp dword ptr [ebp-28], 00000800
:0040BD31 7D17                    jge 0040BD4A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BD33 6A04                    push 00000004
:0040BD35 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0040BD38 8B55D0                  mov edx, dword ptr [ebp-30]
:0040BD3B 8D448A38                lea eax, dword ptr [edx+4*ecx+38]
:0040BD3F 50                      push eax
:0040BD40 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BD43 E87F1D0000              call 0040DAC7
:0040BD48 EBD7                    jmp 0040BD21

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BD31(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BD4A 6A04                    push 00000004
:0040BD4C 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040BD4F 81C138200000            add ecx, 00002038
:0040BD55 51                      push ecx
:0040BD56 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BD59 E8691D0000              call 0040DAC7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BD5E 6A04                    push 00000004
:0040BD60 8B55D0                  mov edx, dword ptr [ebp-30]
:0040BD63 81C23C200000            add edx, 0000203C
:0040BD69 52                      push edx
:0040BD6A 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BD6D E8551D0000              call 0040DAC7

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0040BD72 6A08                    push 00000008
:0040BD74 8D45DC                  lea eax, dword ptr [ebp-24]
:0040BD77 50                      push eax
:0040BD78 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BD7B E8471D0000              call 0040DAC7
:0040BD80 8945EC                  mov dword ptr [ebp-14], eax
:0040BD83 8D4DDC                  lea ecx, dword ptr [ebp-24]
:0040BD86 51                      push ecx
:0040BD87 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040BD8A E85C160000              call 0040D3EB
:0040BD8F 8945EC                  mov dword ptr [ebp-14], eax
:0040BD92 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BD95 E88B1E0000              call 0040DC25
:0040BD9A 8B55EC                  mov edx, dword ptr [ebp-14]
:0040BD9D 8955D4                  mov dword ptr [ebp-2C], edx
:0040BDA0 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040BDA7 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BDAA E8FA1A0000              call 0040D8A9
:0040BDAF 8B45D4                  mov eax, dword ptr [ebp-2C]
:0040BDB2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040BDB5 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040BDBC 8BE5                    mov esp, ebp
:0040BDBE 5D                      pop ebp
:0040BDBF C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040EF12   
|
:0040BDC2 55                      push ebp
:0040BDC3 8BEC                    mov ebp, esp
:0040BDC5 6AFF                    push FFFFFFFF
:0040BDC7 687C954700              push 0047957C
:0040BDCC 64A100000000            mov eax, dword ptr fs:[00000000]
:0040BDD2 50                      push eax
:0040BDD3 64892500000000          mov dword ptr fs:[00000000], esp
:0040BDDA 83EC24                  sub esp, 00000024
:0040BDDD 894DD0                  mov dword ptr [ebp-30], ecx
:0040BDE0 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BDE3 E8B899FFFF              call 004057A0
:0040BDE8 C745FC00000000          mov [ebp-04], 00000000
:0040BDEF 6A01                    push 00000001
:0040BDF1 8B4508                  mov eax, dword ptr [ebp+08]
:0040BDF4 50                      push eax
:0040BDF5 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BDF8 E8BF1A0000              call 0040D8BC
:0040BDFD C745D800000000          mov [ebp-28], 00000000
:0040BE04 EB09                    jmp 0040BE0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BEF1(U)
|
:0040BE06 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0040BE09 83C101                  add ecx, 00000001
:0040BE0C 894DD8                  mov dword ptr [ebp-28], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BE04(U)
|
:0040BE0F 837DD85A                cmp dword ptr [ebp-28], 0000005A
:0040BE13 0F8DDD000000            jnl 0040BEF6

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BE19 6A04                    push 00000004
:0040BE1B 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BE1E 6BD234                  imul edx, 00000034
:0040BE21 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BE24 8D8C1044200000          lea ecx, dword ptr [eax+edx+00002044]
:0040BE2B 51                      push ecx
:0040BE2C 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BE2F E8A91D0000              call 0040DBDD
:0040BE34 6A01                    push 00000001
:0040BE36 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BE39 6BD234                  imul edx, 00000034
:0040BE3C 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BE3F 8D8C1048200000          lea ecx, dword ptr [eax+edx+00002048]
:0040BE46 51                      push ecx
:0040BE47 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BE4A E88E1D0000              call 0040DBDD
:0040BE4F 6A01                    push 00000001
:0040BE51 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BE54 6BD234                  imul edx, 00000034
:0040BE57 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BE5A 8D8C1049200000          lea ecx, dword ptr [eax+edx+00002049]
:0040BE61 51                      push ecx
:0040BE62 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BE65 E8731D0000              call 0040DBDD

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BE6A 6A04                    push 00000004
:0040BE6C 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BE6F 6BD234                  imul edx, 00000034
:0040BE72 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BE75 8D8C104C200000          lea ecx, dword ptr [eax+edx+0000204C]
:0040BE7C 51                      push ecx
:0040BE7D 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BE80 E8581D0000              call 0040DBDD
:0040BE85 6A01                    push 00000001
:0040BE87 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BE8A 6BD234                  imul edx, 00000034
:0040BE8D 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BE90 8D8C1050200000          lea ecx, dword ptr [eax+edx+00002050]
:0040BE97 51                      push ecx
:0040BE98 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BE9B E83D1D0000              call 0040DBDD

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040BEA0 6A02                    push 00000002
:0040BEA2 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BEA5 6BD234                  imul edx, 00000034
:0040BEA8 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BEAB 8D8C1052200000          lea ecx, dword ptr [eax+edx+00002052]
:0040BEB2 51                      push ecx
:0040BEB3 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BEB6 E8221D0000              call 0040DBDD
:0040BEBB 6A01                    push 00000001
:0040BEBD 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BEC0 6BD234                  imul edx, 00000034
:0040BEC3 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BEC6 8D8C1054200000          lea ecx, dword ptr [eax+edx+00002054]
:0040BECD 51                      push ecx
:0040BECE 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BED1 E8071D0000              call 0040DBDD
:0040BED6 6A01                    push 00000001
:0040BED8 8B55D8                  mov edx, dword ptr [ebp-28]
:0040BEDB 6BD234                  imul edx, 00000034
:0040BEDE 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BEE1 8D8C1055200000          lea ecx, dword ptr [eax+edx+00002055]
:0040BEE8 51                      push ecx
:0040BEE9 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BEEC E8EC1C0000              call 0040DBDD
:0040BEF1 E910FFFFFF              jmp 0040BE06

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BE13(C)
|
:0040BEF6 6881010000              push 00000181
:0040BEFB 8B55D0                  mov edx, dword ptr [ebp-30]
:0040BEFE 81C298320000            add edx, 00003298
:0040BF04 52                      push edx
:0040BF05 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BF08 E8D01C0000              call 0040DBDD
:0040BF0D 6A01                    push 00000001
:0040BF0F 8B45D0                  mov eax, dword ptr [ebp-30]
:0040BF12 0596320000              add eax, 00003296
:0040BF17 50                      push eax
:0040BF18 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BF1B E8BD1C0000              call 0040DBDD
:0040BF20 6A01                    push 00000001
:0040BF22 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040BF25 81C197320000            add ecx, 00003297
:0040BF2B 51                      push ecx
:0040BF2C 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BF2F E8A91C0000              call 0040DBDD

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0040BF34 6A08                    push 00000008
:0040BF36 8B55D0                  mov edx, dword ptr [ebp-30]
:0040BF39 81C28C320000            add edx, 0000328C
:0040BF3F 52                      push edx
:0040BF40 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BF43 E8951C0000              call 0040DBDD
:0040BF48 C745D800000000          mov [ebp-28], 00000000
:0040BF4F EB09                    jmp 0040BF5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BF78(U)
|
:0040BF51 8B45D8                  mov eax, dword ptr [ebp-28]
:0040BF54 83C001                  add eax, 00000001
:0040BF57 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BF4F(U)
|
:0040BF5A 817DD800080000          cmp dword ptr [ebp-28], 00000800
:0040BF61 7D17                    jge 0040BF7A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BF63 6A04                    push 00000004
:0040BF65 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0040BF68 8B55D0                  mov edx, dword ptr [ebp-30]
:0040BF6B 8D448A38                lea eax, dword ptr [edx+4*ecx+38]
:0040BF6F 50                      push eax
:0040BF70 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BF73 E8651C0000              call 0040DBDD
:0040BF78 EBD7                    jmp 0040BF51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040BF61(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BF7A 6A04                    push 00000004
:0040BF7C 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040BF7F 81C138200000            add ecx, 00002038
:0040BF85 51                      push ecx
:0040BF86 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BF89 E84F1C0000              call 0040DBDD

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040BF8E 6A04                    push 00000004
:0040BF90 8B55D0                  mov edx, dword ptr [ebp-30]
:0040BF93 81C23C200000            add edx, 0000203C
:0040BF99 52                      push edx
:0040BF9A 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BF9D E83B1C0000              call 0040DBDD
:0040BFA2 8D45DC                  lea eax, dword ptr [ebp-24]
:0040BFA5 50                      push eax
:0040BFA6 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0040BFA9 E8BD130000              call 0040D36B
:0040BFAE 8945EC                  mov dword ptr [ebp-14], eax
:0040BFB1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040BFB4 51                      push ecx
:0040BFB5 8D55DC                  lea edx, dword ptr [ebp-24]
:0040BFB8 52                      push edx
:0040BFB9 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BFBC E81C1C0000              call 0040DBDD
:0040BFC1 8945EC                  mov dword ptr [ebp-14], eax
:0040BFC4 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BFC7 E8591C0000              call 0040DC25
:0040BFCC 8B45EC                  mov eax, dword ptr [ebp-14]
:0040BFCF 8945D4                  mov dword ptr [ebp-2C], eax
:0040BFD2 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040BFD9 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040BFDC E8C8180000              call 0040D8A9
:0040BFE1 8B45D4                  mov eax, dword ptr [ebp-2C]
:0040BFE4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040BFE7 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040BFEE 8BE5                    mov esp, ebp
:0040BFF0 5D                      pop ebp
:0040BFF1 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040C195   , :0040C1E2   , :0040C418   , :0040C465   , :0042F109   
|:0042F180   
|
:0040BFF4 55                      push ebp
:0040BFF5 8BEC                    mov ebp, esp
:0040BFF7 6AFF                    push FFFFFFFF
:0040BFF9 688F954700              push 0047958F
:0040BFFE 64A100000000            mov eax, dword ptr fs:[00000000]
:0040C004 50                      push eax
:0040C005 64892500000000          mov dword ptr fs:[00000000], esp
:0040C00C 83EC1C                  sub esp, 0000001C
:0040C00F 894DD8                  mov dword ptr [ebp-28], ecx
:0040C012 6800000200              push 00020000
:0040C017 E834350600              call 0046F550
:0040C01C 83C404                  add esp, 00000004
:0040C01F 8945E4                  mov dword ptr [ebp-1C], eax
:0040C022 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040C025 E87697FFFF              call 004057A0
:0040C02A C745FC00000000          mov [ebp-04], 00000000
:0040C031 B978294B00              mov ecx, 004B2978
:0040C036 E80572FFFF              call 00403240
:0040C03B 25FF000000              and eax, 000000FF
:0040C040 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0040C041 B914000000              mov ecx, 00000014
:0040C046 F7F9                    idiv ecx
:0040C048 668945F0                mov word ptr [ebp-10], ax
:0040C04C B978294B00              mov ecx, 004B2978
:0040C051 E8EA71FFFF              call 00403240
:0040C056 25FF000000              and eax, 000000FF
:0040C05B 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0040C05C B914000000              mov ecx, 00000014
:0040C061 F7F9                    idiv ecx
:0040C063 8BC2                    mov eax, edx
:0040C065 99                      cdq
:0040C066 2BC2                    sub eax, edx
:0040C068 D1F8                    sar eax, 1
:0040C06A 668945DC                mov word ptr [ebp-24], ax
:0040C06E 8B55F0                  mov edx, dword ptr [ebp-10]
:0040C071 81E2FFFF0000            and edx, 0000FFFF
:0040C077 83C230                  add edx, 00000030
:0040C07A 881532C34700            mov byte ptr [0047C332], dl
:0040C080 8B45DC                  mov eax, dword ptr [ebp-24]
:0040C083 25FFFF0000              and eax, 0000FFFF
:0040C088 83C030                  add eax, 00000030
:0040C08B A233C34700              mov byte ptr [0047C333], al
:0040C090 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040C093 81E1FFFF0000            and ecx, 0000FFFF
:0040C099 83C130                  add ecx, 00000030
:0040C09C 880D42C34700            mov byte ptr [0047C342], cl
:0040C0A2 8B55DC                  mov edx, dword ptr [ebp-24]
:0040C0A5 81E2FFFF0000            and edx, 0000FFFF
:0040C0AB 83C230                  add edx, 00000030
:0040C0AE 881543C34700            mov byte ptr [0047C343], dl
:0040C0B4 B978294B00              mov ecx, 004B2978
:0040C0B9 E88271FFFF              call 00403240
:0040C0BE 25FF000000              and eax, 000000FF
:0040C0C3 99                      cdq
:0040C0C4 33C2                    xor eax, edx
:0040C0C6 2BC2                    sub eax, edx
:0040C0C8 83E001                  and eax, 00000001
:0040C0CB 33C2                    xor eax, edx
:0040C0CD 2BC2                    sub eax, edx
:0040C0CF 85C0                    test eax, eax
:0040C0D1 7509                    jne 0040C0DC

* Possible StringData Ref from Data Obj ->"R_xx.EEX"
                                  |
:0040C0D3 C745E030C34700          mov [ebp-20], 0047C330
:0040C0DA EB07                    jmp 0040C0E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C0D1(C)
|

* Possible StringData Ref from Data Obj ->"S_xx.EEX"
                                  |
:0040C0DC C745E040C34700          mov [ebp-20], 0047C340

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C0DA(U)
|
:0040C0E3 6A00                    push 00000000
:0040C0E5 8B45E0                  mov eax, dword ptr [ebp-20]
:0040C0E8 50                      push eax
:0040C0E9 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040C0EC E8CB170000              call 0040D8BC
:0040C0F1 85C0                    test eax, eax
:0040C0F3 7515                    jne 0040C10A
:0040C0F5 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040C0F8 51                      push ecx

* Possible StringData Ref from Data Obj ->"T %s ŪѤF"
                                  |
:0040C0F9 6854C34700              push 0047C354
:0040C0FE 6A00                    push 00000000
:0040C100 E82E530200              call 00431433
:0040C105 83C40C                  add esp, 0000000C
:0040C108 EB30                    jmp 0040C13A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C0F3(C)
|
:0040C10A 6800000200              push 00020000
:0040C10F 8B55E4                  mov edx, dword ptr [ebp-1C]
:0040C112 52                      push edx
:0040C113 6A00                    push 00000000
:0040C115 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040C118 E8C7190000              call 0040DAE4
:0040C11D 8945EC                  mov dword ptr [ebp-14], eax
:0040C120 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040C123 E8FD1A0000              call 0040DC25
:0040C128 8B45EC                  mov eax, dword ptr [ebp-14]
:0040C12B 50                      push eax
:0040C12C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0040C12F 51                      push ecx
:0040C130 B9806D4800              mov ecx, 00486D80
:0040C135 E807100000              call 0040D141

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C108(U)
|
:0040C13A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040C141 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0040C144 E860170000              call 0040D8A9
:0040C149 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040C14C 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040C153 8BE5                    mov esp, ebp
:0040C155 5D                      pop ebp
:0040C156 C3                      ret



* Referenced by a CALL at Addresses:
|:0040C2B3   , :0040C305   , :0041185F   , :00411E9A   , :00434B5F   
|:00434B80   , :0045C1C6   , :0045D82C   , :0045ED7E   , :0045F1BF   
|:0045F24D   , :00460DEB   , :00460E70   
|
:0040C157 55                      push ebp
:0040C158 8BEC                    mov ebp, esp
:0040C15A 83EC08                  sub esp, 00000008
:0040C15D 894DF8                  mov dword ptr [ebp-08], ecx
:0040C160 C745FC00000000          mov [ebp-04], 00000000
:0040C167 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C16A E8000E0000              call 0040CF6F
:0040C16F 85C0                    test eax, eax
:0040C171 7441                    je 0040C1B4
:0040C173 6A00                    push 00000000
:0040C175 6A01                    push 00000001
:0040C177 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C17A E874150000              call 0040D6F3
:0040C17F 8945FC                  mov dword ptr [ebp-04], eax
:0040C182 837DFC04                cmp dword ptr [ebp-04], 00000004
:0040C186 752C                    jne 0040C1B4
:0040C188 B978294B00              mov ecx, 004B2978
:0040C18D E87E080000              call 0040CA10
:0040C192 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C195 E85AFEFFFF              call 0040BFF4
:0040C19A 8B45F8                  mov eax, dword ptr [ebp-08]
:0040C19D 8B10                    mov edx, dword ptr [eax]
:0040C19F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C1A2 FF12                    call dword ptr [edx]
:0040C1A4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C1A7 E86CF7FFFF              call 0040B918
:0040C1AC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C1AF E87EF7FFFF              call 0040B932

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C171(C), :0040C186(C)
|
:0040C1B4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C1B7 E874080000              call 0040CA30
:0040C1BC 85C0                    test eax, eax
:0040C1BE 7541                    jne 0040C201
:0040C1C0 6A00                    push 00000000
:0040C1C2 6A01                    push 00000001
:0040C1C4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C1C7 E827150000              call 0040D6F3
:0040C1CC 8945FC                  mov dword ptr [ebp-04], eax
:0040C1CF 837DFC04                cmp dword ptr [ebp-04], 00000004
:0040C1D3 752C                    jne 0040C201
:0040C1D5 B978294B00              mov ecx, 004B2978
:0040C1DA E831080000              call 0040CA10
:0040C1DF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C1E2 E80DFEFFFF              call 0040BFF4
:0040C1E7 8B45F8                  mov eax, dword ptr [ebp-08]
:0040C1EA 8B10                    mov edx, dword ptr [eax]
:0040C1EC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C1EF FF12                    call dword ptr [edx]
:0040C1F1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C1F4 E81FF7FFFF              call 0040B918
:0040C1F9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C1FC E831F7FFFF              call 0040B932

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C1BE(C), :0040C1D3(C)
|
:0040C201 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C204 8BE5                    mov esp, ebp
:0040C206 5D                      pop ebp
:0040C207 C20400                  ret 0004


:0040C20A 55                      push ebp
:0040C20B 8BEC                    mov ebp, esp
:0040C20D 51                      push ecx
:0040C20E 894DFC                  mov dword ptr [ebp-04], ecx
:0040C211 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C214 E8560D0000              call 0040CF6F
:0040C219 85C0                    test eax, eax
:0040C21B 7407                    je 0040C224
:0040C21D B801000000              mov eax, 00000001
:0040C222 EB02                    jmp 0040C226

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C21B(C)
|
:0040C224 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C222(U)
|
:0040C226 8BE5                    mov esp, ebp
:0040C228 5D                      pop ebp
:0040C229 C3                      ret



* Referenced by a CALL at Address:
|:0041DDB7   
|
:0040C22A 55                      push ebp
:0040C22B 8BEC                    mov ebp, esp
:0040C22D 83EC0C                  sub esp, 0000000C
:0040C230 894DF4                  mov dword ptr [ebp-0C], ecx
:0040C233 B978294B00              mov ecx, 004B2978
:0040C238 E873060000              call 0040C8B0
:0040C23D 8945F8                  mov dword ptr [ebp-08], eax
:0040C240 8B45F8                  mov eax, dword ptr [ebp-08]
:0040C243 24DF                    and al, DF
:0040C245 8945F8                  mov dword ptr [ebp-08], eax
:0040C248 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C24B 51                      push ecx
:0040C24C B978294B00              mov ecx, 004B2978
:0040C251 E8CA2F0100              call 0041F220
:0040C256 C745FCFFFF0000          mov [ebp-04], 0000FFFF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040C25D 6A04                    push 00000004
:0040C25F 8D55FC                  lea edx, dword ptr [ebp-04]
:0040C262 52                      push edx
:0040C263 6A01                    push 00000001
:0040C265 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040C268 E8D80C0000              call 0040CF45
:0040C26D 33C0                    xor eax, eax
:0040C26F 8BE5                    mov esp, ebp
:0040C271 5D                      pop ebp
:0040C272 C3                      ret



* Referenced by a CALL at Addresses:
|:00411872   , :0041DCE4   
|
:0040C273 55                      push ebp
:0040C274 8BEC                    mov ebp, esp
:0040C276 83EC08                  sub esp, 00000008
:0040C279 894DF8                  mov dword ptr [ebp-08], ecx
:0040C27C B978294B00              mov ecx, 004B2978
:0040C281 E82A060000              call 0040C8B0
:0040C286 8945FC                  mov dword ptr [ebp-04], eax
:0040C289 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C28C 0C20                    or al, 20
:0040C28E 50                      push eax
:0040C28F B978294B00              mov ecx, 004B2978
:0040C294 E8872F0100              call 0041F220

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040C299 6A04                    push 00000004
:0040C29B 8D4D08                  lea ecx, dword ptr [ebp+08]
:0040C29E 51                      push ecx
:0040C29F 6A01                    push 00000001
:0040C2A1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C2A4 E89C0C0000              call 0040CF45
:0040C2A9 68FFFF0000              push 0000FFFF
:0040C2AE B9806D4800              mov ecx, 00486D80
:0040C2B3 E89FFEFFFF              call 0040C157
:0040C2B8 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C2BB 52                      push edx
:0040C2BC B978294B00              mov ecx, 004B2978
:0040C2C1 E85A2F0100              call 0041F220
:0040C2C6 33C0                    xor eax, eax
:0040C2C8 8BE5                    mov esp, ebp
:0040C2CA 5D                      pop ebp
:0040C2CB C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00411893   , :00411F62   , :0041DD0D   
|
:0040C2CE 55                      push ebp
:0040C2CF 8BEC                    mov ebp, esp
:0040C2D1 83EC08                  sub esp, 00000008
:0040C2D4 894DF8                  mov dword ptr [ebp-08], ecx
:0040C2D7 B978294B00              mov ecx, 004B2978
:0040C2DC E8CF050000              call 0040C8B0
:0040C2E1 8945FC                  mov dword ptr [ebp-04], eax
:0040C2E4 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C2E7 0B450C                  or eax, dword ptr [ebp+0C]
:0040C2EA 8945FC                  mov dword ptr [ebp-04], eax
:0040C2ED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C2F0 51                      push ecx
:0040C2F1 B978294B00              mov ecx, 004B2978
:0040C2F6 E8252F0100              call 0041F220
:0040C2FB 68FFFF0000              push 0000FFFF
:0040C300 B9806D4800              mov ecx, 00486D80
:0040C305 E84DFEFFFF              call 0040C157
:0040C30A B978294B00              mov ecx, 004B2978
:0040C30F E89C050000              call 0040C8B0
:0040C314 8945FC                  mov dword ptr [ebp-04], eax
:0040C317 8B550C                  mov edx, dword ptr [ebp+0C]
:0040C31A F7D2                    not edx
:0040C31C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C31F 23C2                    and eax, edx
:0040C321 8945FC                  mov dword ptr [ebp-04], eax
:0040C324 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C327 51                      push ecx
:0040C328 B978294B00              mov ecx, 004B2978
:0040C32D E8EE2E0100              call 0041F220
:0040C332 33C0                    xor eax, eax
:0040C334 8BE5                    mov esp, ebp
:0040C336 5D                      pop ebp
:0040C337 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0041DCCA   
|
:0040C33A 55                      push ebp
:0040C33B 8BEC                    mov ebp, esp
:0040C33D 83EC14                  sub esp, 00000014
:0040C340 894DEC                  mov dword ptr [ebp-14], ecx
:0040C343 C745F400000000          mov [ebp-0C], 00000000
:0040C34A C745FC00000000          mov [ebp-04], 00000000
:0040C351 C745F810044900          mov [ebp-08], 00490410
:0040C358 66C745F00000            mov [ebp-10], 0000
:0040C35E EB15                    jmp 0040C375

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C3D8(U)
|
:0040C360 668B45F0                mov ax, word ptr [ebp-10]
:0040C364 66050100                add ax, 0001
:0040C368 668945F0                mov word ptr [ebp-10], ax
:0040C36C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C36F 83C140                  add ecx, 00000040
:0040C372 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C35E(U)
|
:0040C375 8B55F0                  mov edx, dword ptr [ebp-10]
:0040C378 81E2FFFF0000            and edx, 0000FFFF
:0040C37E 81FA80000000            cmp edx, 00000080
:0040C384 7D54                    jge 0040C3DA
:0040C386 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C389 E8C2060000              call 0040CA50
:0040C38E 25FFFF0000              and eax, 0000FFFF
:0040C393 2500800000              and eax, 00008000
:0040C398 85C0                    test eax, eax
:0040C39A 743C                    je 0040C3D8
:0040C39C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C39F E8CC060000              call 0040CA70
:0040C3A4 25FFFF0000              and eax, 0000FFFF
:0040C3A9 83F802                  cmp eax, 00000002
:0040C3AC 7423                    je 0040C3D1
:0040C3AE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C3B1 E8BA060000              call 0040CA70
:0040C3B6 25FFFF0000              and eax, 0000FFFF
:0040C3BB 83F801                  cmp eax, 00000001
:0040C3BE 7411                    je 0040C3D1
:0040C3C0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C3C3 E8A8060000              call 0040CA70
:0040C3C8 25FFFF0000              and eax, 0000FFFF
:0040C3CD 85C0                    test eax, eax
:0040C3CF 7507                    jne 0040C3D8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C3AC(C), :0040C3BE(C)
|
:0040C3D1 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C39A(C), :0040C3CF(C)
|
:0040C3D8 EB86                    jmp 0040C360

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C384(C)
|
:0040C3DA 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040C3DE 740A                    je 0040C3EA

* Possible Reference to String Resource ID=00006: ""
                                  |
:0040C3E0 B806000000              mov eax, 00000006
:0040C3E5 E99D000000              jmp 0040C487

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C3DE(C)
|
:0040C3EA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C3ED E87D0B0000              call 0040CF6F
:0040C3F2 85C0                    test eax, eax
:0040C3F4 7441                    je 0040C437
:0040C3F6 6A00                    push 00000000
:0040C3F8 6A01                    push 00000001
:0040C3FA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C3FD E8F1120000              call 0040D6F3
:0040C402 8945F4                  mov dword ptr [ebp-0C], eax
:0040C405 837DF404                cmp dword ptr [ebp-0C], 00000004
:0040C409 752C                    jne 0040C437
:0040C40B B978294B00              mov ecx, 004B2978
:0040C410 E8FB050000              call 0040CA10
:0040C415 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C418 E8D7FBFFFF              call 0040BFF4
:0040C41D 8B45EC                  mov eax, dword ptr [ebp-14]
:0040C420 8B10                    mov edx, dword ptr [eax]
:0040C422 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C425 FF12                    call dword ptr [edx]
:0040C427 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C42A E8E9F4FFFF              call 0040B918
:0040C42F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C432 E8FBF4FFFF              call 0040B932

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C3F4(C), :0040C409(C)
|
:0040C437 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C43A E8F1050000              call 0040CA30
:0040C43F 85C0                    test eax, eax
:0040C441 7541                    jne 0040C484
:0040C443 6A00                    push 00000000
:0040C445 6A01                    push 00000001
:0040C447 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C44A E8A4120000              call 0040D6F3
:0040C44F 8945F4                  mov dword ptr [ebp-0C], eax
:0040C452 837DF404                cmp dword ptr [ebp-0C], 00000004
:0040C456 752C                    jne 0040C484
:0040C458 B978294B00              mov ecx, 004B2978
:0040C45D E8AE050000              call 0040CA10
:0040C462 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C465 E88AFBFFFF              call 0040BFF4
:0040C46A 8B45EC                  mov eax, dword ptr [ebp-14]
:0040C46D 8B10                    mov edx, dword ptr [eax]
:0040C46F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C472 FF12                    call dword ptr [edx]
:0040C474 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C477 E89CF4FFFF              call 0040B918
:0040C47C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040C47F E8AEF4FFFF              call 0040B932

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C441(C), :0040C456(C)
|
:0040C484 8B45F4                  mov eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C3E5(U)
|
:0040C487 8BE5                    mov esp, ebp
:0040C489 5D                      pop ebp
:0040C48A C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00407340   , :00407367   , :00407390   , :004073B0   , :00407522   
|:00407549   , :00407569   , :0040762C   , :00407649   , :004076C8   
|:00407720   , :00407780   , :004077C7   , :00407810   , :00407854   
|:004078AC   , :004078D3   , :004078F3   , :004079C2   , :004079E9   
|:00407A83   , :00407AF0   , :00407B17   , :00407DB0   , :00407E31   
|:00407E58   , :00407E78   , :00408135   , :0040815C   , :0040817C   
|:0040819C   , :004081BC   , :00408467   , :00408599   , :004085DC   
|:00408603   , :0040862C   , :004087FE   , :00408825   , :0040884E   
|:00408877   , :00408A27   , :00408A51   , :00408A96   , :00408AB6   
|:00408AD3   , :00408AF7   , :00408B8D   , :00408BB4   , :00408BE3   
|:00408C09   , :00408C38   , :00408C65   , :00408C94   , :00408D77   
|:00408DBE   , :00408E05   , :00408E4C   , :00408E93   , :00408ECF   
|:00408F0B   , :00408F52   , :00408F99   , :004090BE   , :00409177   
|:004091BB   , :004091F4   , :0040922D   , :0040926F   , :004092B1   
|:004092F3   , :00409335   , :00409377   , :004093B9   , :004093F2   
|:0040942B   , :0040946F   , :004094A8   , :004094E1   , :0040951A   
|:00409553   , :0040958C   , :004095C5   , :004095FE   , :00409637   
|:00409670   , :004098BD   , :004098DA   , :004098F7   , :0040992A   
|:00409951   , :00409971   , :00409991   , :004099B7   , :00409A36   
|:00409A5D   , :00409A86   , :00409AA6   , :00409AC6   , :00409AE6   
|:00409B03   , :00409B82   , :00409BA9   , :00409BC9   , :00409BE9   
|:00409C93   , :00409CB7   , :00409CDD   , :00409D31   , :00409D55   
|:00409DA8   , :00409DCC   , :00409E1C   , :00409E43   , :00409E6C   
|:00409E95   , :00409EBC   , :00409EDC   , :00409EFC   , :00409FC3   
|:0040A1B1   , :0040A20B   , :0040A259   , :0040A28F   , :0040A2C5   
|:0040A304   , :0040A32B   , :0040A354   , :0040A37D   , :0040A3A4   
|:0040A4C8   , :0040A4EF   , :0040A518   , :0040A53E   , :0040A562   
|:0040A57F   , :0040A5FB   , :0040A618   , :0040A635   , :0040A691   
|:0040A6AE   , :0040A729   , :0040A746   , :0040A795   , :0040A7EB   
|:0040A834   , :0040A8C2   , :0040A905   , :0040A968   , :0040AA06   
|:0040AA2D   , :0040AA56   , :0040AA7F   , :0040AA9F   , :0040AB6C   
|:0040AB93   , :0040AC3D   , :0040AC64   , :0040AC8D   , :0040ADE3   
|:0040AE0A   , :0040AF93   , :0040AFBA   , :0040B11C   , :0040B15B   
|:0040B1AF   , :0040B1D6   , :0040B1FF   , :0040B21F   , :0040B23F   
|:0040B25F   , :0040B27F   , :0040B2A8   , :0040B2CF   , :0040B2F8   
|:0040B318   , :0040B50D   , :0040B534   , :0040B55D   , :0040B57D   
|:0040B59D   , :0040B5BD   , :0040B5DD   , :0040B6D6   , :0040B6FA   
|:0040B73C   , :0040B7CF   , :0040B812   , :0040B861   , :0040B8EB   
|
:0040C48D 55                      push ebp
:0040C48E 8BEC                    mov ebp, esp
:0040C490 83EC18                  sub esp, 00000018
:0040C493 894DF8                  mov dword ptr [ebp-08], ecx
:0040C496 837D0801                cmp dword ptr [ebp+08], 00000001
:0040C49A 7512                    jne 0040C4AE
:0040C49C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C49F E87E070000              call 0040CC22
:0040C4A4 25FFFF0000              and eax, 0000FFFF
:0040C4A9 E994000000              jmp 0040C542

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C49A(C)
|
:0040C4AE C745FC00000000          mov [ebp-04], 00000000
:0040C4B5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C4B8 E865070000              call 0040CC22
:0040C4BD 25FFFF0000              and eax, 0000FFFF
:0040C4C2 3B4508                  cmp eax, dword ptr [ebp+08]
:0040C4C5 7407                    je 0040C4CE
:0040C4C7 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C4C5(C)
|
:0040C4CE 8B4508                  mov eax, dword ptr [ebp+08]
:0040C4D1 8945F4                  mov dword ptr [ebp-0C], eax
:0040C4D4 837DF404                cmp dword ptr [ebp-0C], 00000004
:0040C4D8 7408                    je 0040C4E2
:0040C4DA 837DF405                cmp dword ptr [ebp-0C], 00000005
:0040C4DE 7421                    je 0040C501
:0040C4E0 EB3E                    jmp 0040C520

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C4D8(C)
|
:0040C4E2 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040C4E6 7409                    je 0040C4F1
:0040C4E8 C745F000000080          mov [ebp-10], 80000000
:0040C4EF EB0B                    jmp 0040C4FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C4E6(C)
|
:0040C4F1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C4F4 E861070000              call 0040CC5A
:0040C4F9 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C4EF(U)
|
:0040C4FC 8B45F0                  mov eax, dword ptr [ebp-10]
:0040C4FF EB41                    jmp 0040C542

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C4DE(C)
|
:0040C501 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040C505 7409                    je 0040C510
:0040C507 C745EC00000080          mov [ebp-14], 80000000
:0040C50E EB0B                    jmp 0040C51B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C505(C)
|
:0040C510 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C513 E872070000              call 0040CC8A
:0040C518 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C50E(U)
|
:0040C51B 8B45EC                  mov eax, dword ptr [ebp-14]
:0040C51E EB22                    jmp 0040C542

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C4E0(U)
|
:0040C520 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040C524 7408                    je 0040C52E
:0040C526 66C745E80080            mov [ebp-18], 8000
:0040C52C EB0C                    jmp 0040C53A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C524(C)
|
:0040C52E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040C531 E8EC060000              call 0040CC22
:0040C536 668945E8                mov word ptr [ebp-18], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C52C(U)
|
:0040C53A 8B45E8                  mov eax, dword ptr [ebp-18]
:0040C53D 25FFFF0000              and eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040C4A9(U), :0040C4FF(U), :0040C51E(U)
|
:0040C542 8BE5                    mov esp, ebp
:0040C544 5D                      pop ebp
:0040C545 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004077F6   , :00407880   
|
:0040C548 55                      push ebp
:0040C549 8BEC                    mov ebp, esp
:0040C54B 51                      push ecx
:0040C54C 894DFC                  mov dword ptr [ebp-04], ecx
:0040C54F 8B4508                  mov eax, dword ptr [ebp+08]
:0040C552 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C555 33D2                    xor edx, edx
:0040C557 837C813800              cmp dword ptr [ecx+4*eax+38], 00000000
:0040C55C 0F95C2                  setne dl
:0040C55F 8BC2                    mov eax, edx
:0040C561 8BE5                    mov esp, ebp
:0040C563 5D                      pop ebp
:0040C564 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040A77C   , :0040B8D2   
|
:0040C567 55                      push ebp
:0040C568 8BEC                    mov ebp, esp
:0040C56A 51                      push ecx
:0040C56B 894DFC                  mov dword ptr [ebp-04], ecx
:0040C56E 8B4508                  mov eax, dword ptr [ebp+08]
:0040C571 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C574 8B550C                  mov edx, dword ptr [ebp+0C]
:0040C577 89548138                mov dword ptr [ecx+4*eax+38], edx
:0040C57B 8BE5                    mov esp, ebp
:0040C57D 5D                      pop ebp
:0040C57E C20800                  ret 0008



* Referenced by a CALL at Address:
|:00408582   
|
:0040C581 55                      push ebp
:0040C582 8BEC                    mov ebp, esp
:0040C584 51                      push ecx
:0040C585 894DFC                  mov dword ptr [ebp-04], ecx
:0040C588 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C58B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C58E 898838200000            mov dword ptr [eax+00002038], ecx
:0040C594 8BE5                    mov esp, ebp
:0040C596 5D                      pop ebp
:0040C597 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004085B4   
|
:0040C59A 55                      push ebp
:0040C59B 8BEC                    mov ebp, esp
:0040C59D 51                      push ecx
:0040C59E 894DFC                  mov dword ptr [ebp-04], ecx
:0040C5A1 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C5A4 8B8038200000            mov eax, dword ptr [eax+00002038]
:0040C5AA 8BE5                    mov esp, ebp
:0040C5AC 5D                      pop ebp
:0040C5AD C3                      ret



* Referenced by a CALL at Address:
|:0040A931   
|
:0040C5AE 55                      push ebp
:0040C5AF 8BEC                    mov ebp, esp
:0040C5B1 51                      push ecx
:0040C5B2 894DFC                  mov dword ptr [ebp-04], ecx
:0040C5B5 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C5B8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C5BB 89883C200000            mov dword ptr [eax+0000203C], ecx
:0040C5C1 8BE5                    mov esp, ebp
:0040C5C3 5D                      pop ebp
:0040C5C4 C20400                  ret 0004


:0040C5C7 55                      push ebp
:0040C5C8 8BEC                    mov ebp, esp
:0040C5CA 51                      push ecx
:0040C5CB 894DFC                  mov dword ptr [ebp-04], ecx
:0040C5CE 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C5D1 8B803C200000            mov eax, dword ptr [eax+0000203C]
:0040C5D7 8BE5                    mov esp, ebp
:0040C5D9 5D                      pop ebp
:0040C5DA C3                      ret


:0040C5DB 55                      push ebp
:0040C5DC 8BEC                    mov ebp, esp
:0040C5DE 51                      push ecx
:0040C5DF 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040C5E2 6A04                    push 00000004
:0040C5E4 8D4508                  lea eax, dword ptr [ebp+08]
:0040C5E7 50                      push eax
:0040C5E8 6A00                    push 00000000
:0040C5EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C5ED E853090000              call 0040CF45
:0040C5F2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C5F5 E875090000              call 0040CF6F
:0040C5FA 8BE5                    mov esp, ebp
:0040C5FC 5D                      pop ebp
:0040C5FD C20400                  ret 0004



* Referenced by a CALL at Address:
|:00406CC8   
|
:0040C600 55                      push ebp
:0040C601 8BEC                    mov ebp, esp
:0040C603 51                      push ecx
:0040C604 894DFC                  mov dword ptr [ebp-04], ecx
:0040C607 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C60A E891010000              call 0040C7A0
:0040C60F 8BE5                    mov esp, ebp
:0040C611 5D                      pop ebp
:0040C612 C3                      ret


:0040C613 CC                      int 03
:0040C614 CC                      int 03
:0040C615 CC                      int 03
:0040C616 CC                      int 03
:0040C617 CC                      int 03
:0040C618 CC                      int 03
:0040C619 CC                      int 03
:0040C61A CC                      int 03
:0040C61B CC                      int 03
:0040C61C CC                      int 03
:0040C61D CC                      int 03
:0040C61E CC                      int 03
:0040C61F CC                      int 03

* Referenced by a CALL at Address:
|:00406CA7   
|
:0040C620 55                      push ebp
:0040C621 8BEC                    mov ebp, esp
:0040C623 6AFF                    push FFFFFFFF
:0040C625 6829954700              push 00479529
:0040C62A 64A100000000            mov eax, dword ptr fs:[00000000]
:0040C630 50                      push eax
:0040C631 64892500000000          mov dword ptr fs:[00000000], esp
:0040C638 51                      push ecx
:0040C639 894DF0                  mov dword ptr [ebp-10], ecx
:0040C63C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040C63F E8BC000000              call 0040C700
:0040C644 C745FC00000000          mov [ebp-04], 00000000
:0040C64B 6890C64000              push 0040C690
:0040C650 6A5A                    push 0000005A
:0040C652 6A34                    push 00000034
:0040C654 8B45F0                  mov eax, dword ptr [ebp-10]
:0040C657 0544200000              add eax, 00002044
:0040C65C 50                      push eax
:0040C65D E84E000000              call 0040C6B0
:0040C662 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040C665 C70120A04700            mov dword ptr [ecx], 0047A020
:0040C66B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040C672 8B45F0                  mov eax, dword ptr [ebp-10]
:0040C675 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040C678 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040C67F 8BE5                    mov esp, ebp
:0040C681 5D                      pop ebp
:0040C682 C3                      ret


:0040C683 CC                      int 03
:0040C684 CC                      int 03
:0040C685 CC                      int 03
:0040C686 CC                      int 03
:0040C687 CC                      int 03
:0040C688 CC                      int 03
:0040C689 CC                      int 03
:0040C68A CC                      int 03
:0040C68B CC                      int 03
:0040C68C CC                      int 03
:0040C68D CC                      int 03
:0040C68E CC                      int 03
:0040C68F CC                      int 03
:0040C690 55                      push ebp
:0040C691 8BEC                    mov ebp, esp
:0040C693 51                      push ecx
:0040C694 894DFC                  mov dword ptr [ebp-04], ecx
:0040C697 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C69A E841000000              call 0040C6E0
:0040C69F 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C6A2 8BE5                    mov esp, ebp
:0040C6A4 5D                      pop ebp
:0040C6A5 C3                      ret


:0040C6A6 CC                      int 03
:0040C6A7 CC                      int 03
:0040C6A8 CC                      int 03
:0040C6A9 CC                      int 03
:0040C6AA CC                      int 03
:0040C6AB CC                      int 03
:0040C6AC CC                      int 03
:0040C6AD CC                      int 03
:0040C6AE CC                      int 03
:0040C6AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C65D   , :0043702B   
|
:0040C6B0 55                      push ebp
:0040C6B1 8BEC                    mov ebp, esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C6D1(U)
|
:0040C6B3 8B4510                  mov eax, dword ptr [ebp+10]
:0040C6B6 83E801                  sub eax, 00000001
:0040C6B9 894510                  mov dword ptr [ebp+10], eax
:0040C6BC 837D1000                cmp dword ptr [ebp+10], 00000000
:0040C6C0 7C11                    jl 0040C6D3
:0040C6C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C6C5 FF5514                  call [ebp+14]
:0040C6C8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040C6CB 034D0C                  add ecx, dword ptr [ebp+0C]
:0040C6CE 894D08                  mov dword ptr [ebp+08], ecx
:0040C6D1 EBE0                    jmp 0040C6B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C6C0(C)
|
:0040C6D3 5D                      pop ebp
:0040C6D4 C21000                  ret 0010


:0040C6D7 CC                      int 03
:0040C6D8 CC                      int 03
:0040C6D9 CC                      int 03
:0040C6DA CC                      int 03
:0040C6DB CC                      int 03
:0040C6DC CC                      int 03
:0040C6DD CC                      int 03
:0040C6DE CC                      int 03
:0040C6DF CC                      int 03

* Referenced by a CALL at Address:
|:0040C69A   
|
:0040C6E0 55                      push ebp
:0040C6E1 8BEC                    mov ebp, esp
:0040C6E3 51                      push ecx
:0040C6E4 894DFC                  mov dword ptr [ebp-04], ecx
:0040C6E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C6EA 83C104                  add ecx, 00000004
:0040C6ED E8FE8FFFFF              call 004056F0
:0040C6F2 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C6F5 8BE5                    mov esp, ebp
:0040C6F7 5D                      pop ebp
:0040C6F8 C3                      ret


:0040C6F9 CC                      int 03
:0040C6FA CC                      int 03
:0040C6FB CC                      int 03
:0040C6FC CC                      int 03
:0040C6FD CC                      int 03
:0040C6FE CC                      int 03
:0040C6FF CC                      int 03

* Referenced by a CALL at Address:
|:0040C63F   
|
:0040C700 55                      push ebp
:0040C701 8BEC                    mov ebp, esp
:0040C703 51                      push ecx
:0040C704 894DFC                  mov dword ptr [ebp-04], ecx
:0040C707 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C70A 83C104                  add ecx, 00000004
:0040C70D E84E000000              call 0040C760
:0040C712 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C715 C7401800000000          mov [eax+18], 00000000
:0040C71C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C71F C7411C00000000          mov [ecx+1C], 00000000
:0040C726 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C729 C7422000000000          mov [edx+20], 00000000
:0040C730 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C733 C7402400000000          mov [eax+24], 00000000
:0040C73A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C73D C7412800000000          mov [ecx+28], 00000000
:0040C744 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C747 C7422C00000000          mov [edx+2C], 00000000
:0040C74E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C751 C70038A04700            mov dword ptr [eax], 0047A038
:0040C757 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C75A 8BE5                    mov esp, ebp
:0040C75C 5D                      pop ebp
:0040C75D C3                      ret


:0040C75E CC                      int 03
:0040C75F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C70D   , :0040D00B   
|
:0040C760 55                      push ebp
:0040C761 8BEC                    mov ebp, esp
:0040C763 51                      push ecx
:0040C764 894DFC                  mov dword ptr [ebp-04], ecx
:0040C767 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C76A C700FFFFFFFF            mov dword ptr [eax], FFFFFFFF
:0040C770 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C773 C74104FFFFFFFF          mov [ecx+04], FFFFFFFF
:0040C77A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040C77D C7420800000000          mov [edx+08], 00000000
:0040C784 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C787 66C7400CFFFF            mov [eax+0C], FFFF
:0040C78D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C790 C74110FFFFFFFF          mov [ecx+10], FFFFFFFF
:0040C797 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C79A 8BE5                    mov esp, ebp
:0040C79C 5D                      pop ebp
:0040C79D C3                      ret


:0040C79E CC                      int 03
:0040C79F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C60A   , :00479523   
|
:0040C7A0 55                      push ebp
:0040C7A1 8BEC                    mov ebp, esp
:0040C7A3 6AFF                    push FFFFFFFF
:0040C7A5 684C954700              push 0047954C
:0040C7AA 64A100000000            mov eax, dword ptr fs:[00000000]
:0040C7B0 50                      push eax
:0040C7B1 64892500000000          mov dword ptr fs:[00000000], esp
:0040C7B8 83EC14                  sub esp, 00000014
:0040C7BB 894DE0                  mov dword ptr [ebp-20], ecx
:0040C7BE 8B45E0                  mov eax, dword ptr [ebp-20]
:0040C7C1 C70038A04700            mov dword ptr [eax], 0047A038
:0040C7C7 C745FC00000000          mov [ebp-04], 00000000
:0040C7CE C745F000000000          mov [ebp-10], 00000000
:0040C7D5 EB09                    jmp 0040C7E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C806(U)
|
:0040C7D7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040C7DA 83C101                  add ecx, 00000001
:0040C7DD 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C7D5(U)
|
:0040C7E0 8B55E0                  mov edx, dword ptr [ebp-20]
:0040C7E3 8B45F0                  mov eax, dword ptr [ebp-10]
:0040C7E6 3B4218                  cmp eax, dword ptr [edx+18]
:0040C7E9 7D1D                    jge 0040C808
:0040C7EB 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040C7EE 8B511C                  mov edx, dword ptr [ecx+1C]
:0040C7F1 8B45F0                  mov eax, dword ptr [ebp-10]
:0040C7F4 8B0C82                  mov ecx, dword ptr [edx+4*eax]
:0040C7F7 894DEC                  mov dword ptr [ebp-14], ecx
:0040C7FA 8B55EC                  mov edx, dword ptr [ebp-14]
:0040C7FD 52                      push edx
:0040C7FE E80D2D0600              call 0046F510
:0040C803 83C404                  add esp, 00000004
:0040C806 EBCF                    jmp 0040C7D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040C7E9(C)
|
:0040C808 8B45E0                  mov eax, dword ptr [ebp-20]
:0040C80B 8B481C                  mov ecx, dword ptr [eax+1C]
:0040C80E 894DE8                  mov dword ptr [ebp-18], ecx
:0040C811 8B55E8                  mov edx, dword ptr [ebp-18]
:0040C814 52                      push edx
:0040C815 E8F62C0600              call 0046F510
:0040C81A 83C404                  add esp, 00000004
:0040C81D 8B45E0                  mov eax, dword ptr [ebp-20]
:0040C820 8B4820                  mov ecx, dword ptr [eax+20]
:0040C823 894DE4                  mov dword ptr [ebp-1C], ecx
:0040C826 8B55E4                  mov edx, dword ptr [ebp-1C]
:0040C829 52                      push edx
:0040C82A E8E12C0600              call 0046F510
:0040C82F 83C404                  add esp, 00000004
:0040C832 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040C839 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040C83C 83C104                  add ecx, 00000004
:0040C83F E8BC210200              call 0042EA00
:0040C844 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040C847 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040C84E 8BE5                    mov esp, ebp
:0040C850 5D                      pop ebp
:0040C851 C3                      ret


:0040C852 CC                      int 03
:0040C853 CC                      int 03
:0040C854 CC                      int 03
:0040C855 CC                      int 03
:0040C856 CC                      int 03
:0040C857 CC                      int 03
:0040C858 CC                      int 03
:0040C859 CC                      int 03
:0040C85A CC                      int 03
:0040C85B CC                      int 03
:0040C85C CC                      int 03
:0040C85D CC                      int 03
:0040C85E CC                      int 03
:0040C85F CC                      int 03
:0040C860 55                      push ebp
:0040C861 8BEC                    mov ebp, esp
:0040C863 51                      push ecx
:0040C864 894DFC                  mov dword ptr [ebp-04], ecx
:0040C867 33C0                    xor eax, eax
:0040C869 8BE5                    mov esp, ebp
:0040C86B 5D                      pop ebp
:0040C86C C3                      ret


:0040C86D CC                      int 03
:0040C86E CC                      int 03
:0040C86F CC                      int 03

* Referenced by a CALL at Address:
|:00409C5F   
|
:0040C870 55                      push ebp
:0040C871 8BEC                    mov ebp, esp
:0040C873 51                      push ecx
:0040C874 894DFC                  mov dword ptr [ebp-04], ecx
:0040C877 6A00                    push 00000000
:0040C879 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C87C E85A040000              call 0040CCDB
:0040C881 8BE5                    mov esp, ebp
:0040C883 5D                      pop ebp
:0040C884 C3                      ret


:0040C885 CC                      int 03
:0040C886 CC                      int 03
:0040C887 CC                      int 03
:0040C888 CC                      int 03
:0040C889 CC                      int 03
:0040C88A CC                      int 03
:0040C88B CC                      int 03
:0040C88C CC                      int 03
:0040C88D CC                      int 03
:0040C88E CC                      int 03
:0040C88F CC                      int 03

* Referenced by a CALL at Addresses:
|:00407A25   , :0040ED43   , :004121BA   , :0041CF9F   
|
:0040C890 55                      push ebp
:0040C891 8BEC                    mov ebp, esp
:0040C893 51                      push ecx
:0040C894 894DFC                  mov dword ptr [ebp-04], ecx
:0040C897 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C89A 8A4006                  mov al, byte ptr [eax+06]
:0040C89D 8BE5                    mov esp, ebp
:0040C89F 5D                      pop ebp
:0040C8A0 C3                      ret


:0040C8A1 CC                      int 03
:0040C8A2 CC                      int 03
:0040C8A3 CC                      int 03
:0040C8A4 CC                      int 03
:0040C8A5 CC                      int 03
:0040C8A6 CC                      int 03
:0040C8A7 CC                      int 03
:0040C8A8 CC                      int 03
:0040C8A9 CC                      int 03
:0040C8AA CC                      int 03
:0040C8AB CC                      int 03
:0040C8AC CC                      int 03
:0040C8AD CC                      int 03
:0040C8AE CC                      int 03
:0040C8AF CC                      int 03

* Referenced by a CALL at Addresses:
|:00407A0F   , :00407AA7   , :00407DEB   , :0040C238   , :0040C281   
|:0040C2DC   , :0040C30F   , :0040F824   , :0040F86E   , :0042EF5E   
|:0043536B   , :00435627   , :00435DE8   , :004371DE   , :004382C5   
|:00438501   , :0043D05B   , :00441B51   , :00443B9D   , :00443FDC   
|:004442F9   , :004445F5   , :0044AAFA   , :0044E79C   , :0044E7C0   
|:0045C9D0   , :0045EE52   , :00469478   , :004695EC   
|
:0040C8B0 55                      push ebp
:0040C8B1 8BEC                    mov ebp, esp
:0040C8B3 51                      push ecx
:0040C8B4 894DFC                  mov dword ptr [ebp-04], ecx
:0040C8B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C8BA 33C9                    xor ecx, ecx
:0040C8BC 668B480A                mov cx, word ptr [eax+0A]
:0040C8C0 8BC1                    mov eax, ecx
:0040C8C2 8BE5                    mov esp, ebp
:0040C8C4 5D                      pop ebp
:0040C8C5 C3                      ret


:0040C8C6 CC                      int 03
:0040C8C7 CC                      int 03
:0040C8C8 CC                      int 03
:0040C8C9 CC                      int 03
:0040C8CA CC                      int 03
:0040C8CB CC                      int 03
:0040C8CC CC                      int 03
:0040C8CD CC                      int 03
:0040C8CE CC                      int 03
:0040C8CF CC                      int 03

* Referenced by a CALL at Addresses:
|:004087D3   , :0040B091   , :00413834   , :00418260   , :0041903E   
|:0042164B   , :00434236   , :004398F6   , :0043994F   , :004399AA   
|:0043AC9D   
|
:0040C8D0 55                      push ebp
:0040C8D1 8BEC                    mov ebp, esp
:0040C8D3 51                      push ecx
:0040C8D4 894DFC                  mov dword ptr [ebp-04], ecx
:0040C8D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C8DA 8A4D08                  mov cl, byte ptr [ebp+08]
:0040C8DD 884834                  mov byte ptr [eax+34], cl
:0040C8E0 8BE5                    mov esp, ebp
:0040C8E2 5D                      pop ebp
:0040C8E3 C20400                  ret 0004


:0040C8E6 CC                      int 03
:0040C8E7 CC                      int 03
:0040C8E8 CC                      int 03
:0040C8E9 CC                      int 03
:0040C8EA CC                      int 03
:0040C8EB CC                      int 03
:0040C8EC CC                      int 03
:0040C8ED CC                      int 03
:0040C8EE CC                      int 03
:0040C8EF CC                      int 03

* Referenced by a CALL at Address:
|:00409E03   
|
:0040C8F0 55                      push ebp
:0040C8F1 8BEC                    mov ebp, esp
:0040C8F3 51                      push ecx
:0040C8F4 894DFC                  mov dword ptr [ebp-04], ecx
:0040C8F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C8FA 8A4D08                  mov cl, byte ptr [ebp+08]
:0040C8FD 884802                  mov byte ptr [eax+02], cl
:0040C900 8BE5                    mov esp, ebp
:0040C902 5D                      pop ebp
:0040C903 C20400                  ret 0004


:0040C906 CC                      int 03
:0040C907 CC                      int 03
:0040C908 CC                      int 03
:0040C909 CC                      int 03
:0040C90A CC                      int 03
:0040C90B CC                      int 03
:0040C90C CC                      int 03
:0040C90D CC                      int 03
:0040C90E CC                      int 03
:0040C90F CC                      int 03

* Referenced by a CALL at Addresses:
|:00407CF2   , :00407D2A   , :00407D60   , :00407D93   , :00407FC6   
|:00408073   , :00408336   , :004083E5   , :004332C5   , :00433359   
|:00433372   , :004333DA   , :004338E5   , :00435507   , :0043554B   
|:0043558B   , :004356B3   , :00437246   , :00437F0C   , :00438327   
|:00438564   , :00439C7C   , :00439D8D   , :0043A03F   , :0043A222   
|:0043A719   , :0043D0C7   , :0043EF46   , :0043F600   , :0043F619   
|:0043F925   , :0043F938   , :0043FF58   , :0043FF6F   , :00440BE3   
|:00441BC0   , :00441E5D   , :00443E02   , :00444087   , :00444762   
|:0044A1B2   , :0044A231   , :0044A4A1   , :0044D569   , :0044DFF8   
|:0044E011   , :0044E095   , :0044E0AE   , :0044F6F2   , :004509DD   
|:004509F7   , :00450C69   , :00450C73   , :0045125D   , :00451267   
|:0045190C   , :00451DFD   , :0045226E   , :0045270F   , :004534A6   
|:0045360A   , :00453625   , :00453643   , :0045386F   , :00453991   
|:00454791   , :004547AB   , :0045483A   , :00454854   , :00455B32   
|:00455B3C   , :00455C12   , :00455C1C   , :00455CAF   , :00455CB9   
|:00455D4C   , :00455D56   , :00455E76   , :00455E80   , :00455FC4   
|:00455FCE   , :00456061   , :0045606B   , :0045671A   , :0045E2BF   
|:004602F6   , :0046040C   , :0046083E   , :00460BD4   , :004610DE   
|:0046C979   , :0046C996   
|
:0040C910 55                      push ebp
:0040C911 8BEC                    mov ebp, esp
:0040C913 51                      push ecx
:0040C914 894DFC                  mov dword ptr [ebp-04], ecx
:0040C917 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C91A 33C9                    xor ecx, ecx
:0040C91C 8A4804                  mov cl, byte ptr [eax+04]
:0040C91F 33C0                    xor eax, eax
:0040C921 83F91E                  cmp ecx, 0000001E
:0040C924 0F9CC0                  setl al
:0040C927 8BE5                    mov esp, ebp
:0040C929 5D                      pop ebp
:0040C92A C3                      ret


:0040C92B CC                      int 03
:0040C92C CC                      int 03
:0040C92D CC                      int 03
:0040C92E CC                      int 03
:0040C92F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040ABC6   , :0041FD3D   , :0041FEDA   , :0044EE22   , :0044F3F5   
|:004613C8   , :00463F88   , :004641F7   , :00465BF6   , :0046B2BE   
|:0046B998   , :0046BFDA   , :0046C084   , :0046CADA   
|
:0040C930 55                      push ebp
:0040C931 8BEC                    mov ebp, esp
:0040C933 51                      push ecx
:0040C934 894DFC                  mov dword ptr [ebp-04], ecx
:0040C937 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C93A 8A402F                  mov al, byte ptr [eax+2F]
:0040C93D 8BE5                    mov esp, ebp
:0040C93F 5D                      pop ebp
:0040C940 C3                      ret


:0040C941 CC                      int 03
:0040C942 CC                      int 03
:0040C943 CC                      int 03
:0040C944 CC                      int 03
:0040C945 CC                      int 03
:0040C946 CC                      int 03
:0040C947 CC                      int 03
:0040C948 CC                      int 03
:0040C949 CC                      int 03
:0040C94A CC                      int 03
:0040C94B CC                      int 03
:0040C94C CC                      int 03
:0040C94D CC                      int 03
:0040C94E CC                      int 03
:0040C94F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040AD30   , :004117C1   , :00411F28   
|
:0040C950 55                      push ebp
:0040C951 8BEC                    mov ebp, esp
:0040C953 51                      push ecx
:0040C954 894DFC                  mov dword ptr [ebp-04], ecx
:0040C957 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C95A 8A4D08                  mov cl, byte ptr [ebp+08]
:0040C95D 88480F                  mov byte ptr [eax+0F], cl
:0040C960 8BE5                    mov esp, ebp
:0040C962 5D                      pop ebp
:0040C963 C20400                  ret 0004


:0040C966 CC                      int 03
:0040C967 CC                      int 03
:0040C968 CC                      int 03
:0040C969 CC                      int 03
:0040C96A CC                      int 03
:0040C96B CC                      int 03
:0040C96C CC                      int 03
:0040C96D CC                      int 03
:0040C96E CC                      int 03
:0040C96F CC                      int 03

* Referenced by a CALL at Address:
|:0040ADB5   
|
:0040C970 55                      push ebp
:0040C971 8BEC                    mov ebp, esp
:0040C973 51                      push ecx
:0040C974 894DFC                  mov dword ptr [ebp-04], ecx
:0040C977 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C97A 8A4D08                  mov cl, byte ptr [ebp+08]
:0040C97D 884812                  mov byte ptr [eax+12], cl
:0040C980 8BE5                    mov esp, ebp
:0040C982 5D                      pop ebp
:0040C983 C20400                  ret 0004


:0040C986 CC                      int 03
:0040C987 CC                      int 03
:0040C988 CC                      int 03
:0040C989 CC                      int 03
:0040C98A CC                      int 03
:0040C98B CC                      int 03
:0040C98C CC                      int 03
:0040C98D CC                      int 03
:0040C98E CC                      int 03
:0040C98F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040AD97   , :0040F9FB   , :0041EEEE   , :0041EF0E   , :0043031E   
|:00435DFB   , :0045C9EC   , :0045EE6E   
|
:0040C990 55                      push ebp
:0040C991 8BEC                    mov ebp, esp
:0040C993 51                      push ecx
:0040C994 894DFC                  mov dword ptr [ebp-04], ecx
:0040C997 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C99A 8A4014                  mov al, byte ptr [eax+14]
:0040C99D 8BE5                    mov esp, ebp
:0040C99F 5D                      pop ebp
:0040C9A0 C3                      ret


:0040C9A1 CC                      int 03
:0040C9A2 CC                      int 03
:0040C9A3 CC                      int 03
:0040C9A4 CC                      int 03
:0040C9A5 CC                      int 03
:0040C9A6 CC                      int 03
:0040C9A7 CC                      int 03
:0040C9A8 CC                      int 03
:0040C9A9 CC                      int 03
:0040C9AA CC                      int 03
:0040C9AB CC                      int 03
:0040C9AC CC                      int 03
:0040C9AD CC                      int 03
:0040C9AE CC                      int 03
:0040C9AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040AD79   , :0040AD8B   , :0040F816   
|
:0040C9B0 55                      push ebp
:0040C9B1 8BEC                    mov ebp, esp
:0040C9B3 51                      push ecx
:0040C9B4 894DFC                  mov dword ptr [ebp-04], ecx
:0040C9B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C9BA 8A4D08                  mov cl, byte ptr [ebp+08]
:0040C9BD 884814                  mov byte ptr [eax+14], cl
:0040C9C0 8BE5                    mov esp, ebp
:0040C9C2 5D                      pop ebp
:0040C9C3 C20400                  ret 0004


:0040C9C6 CC                      int 03
:0040C9C7 CC                      int 03
:0040C9C8 CC                      int 03
:0040C9C9 CC                      int 03
:0040C9CA CC                      int 03
:0040C9CB CC                      int 03
:0040C9CC CC                      int 03
:0040C9CD CC                      int 03
:0040C9CE CC                      int 03
:0040C9CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00408B6F   , :00408FFC   , :0045CDA5   , :0045F8A0   , :0045F9D9   
|
:0040C9D0 55                      push ebp
:0040C9D1 8BEC                    mov ebp, esp
:0040C9D3 51                      push ecx
:0040C9D4 894DFC                  mov dword ptr [ebp-04], ecx
:0040C9D7 8B4508                  mov eax, dword ptr [ebp+08]
:0040C9DA 6BC034                  imul eax, 00000034
:0040C9DD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040C9E0 8D840144200000          lea eax, dword ptr [ecx+eax+00002044]
:0040C9E7 8BE5                    mov esp, ebp
:0040C9E9 5D                      pop ebp
:0040C9EA C20400                  ret 0004


:0040C9ED CC                      int 03
:0040C9EE CC                      int 03
:0040C9EF CC                      int 03

* Referenced by a CALL at Address:
|:00408CEA   
|
:0040C9F0 55                      push ebp
:0040C9F1 8BEC                    mov ebp, esp
:0040C9F3 51                      push ecx
:0040C9F4 894DFC                  mov dword ptr [ebp-04], ecx
:0040C9F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040C9FA 8A4D08                  mov cl, byte ptr [ebp+08]
:0040C9FD 888896320000            mov byte ptr [eax+00003296], cl
:0040CA03 8BE5                    mov esp, ebp
:0040CA05 5D                      pop ebp
:0040CA06 C20400                  ret 0004


:0040CA09 CC                      int 03
:0040CA0A CC                      int 03
:0040CA0B CC                      int 03
:0040CA0C CC                      int 03
:0040CA0D CC                      int 03
:0040CA0E CC                      int 03
:0040CA0F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C18D   , :0040C1DA   , :0040C410   , :0040C45D   
|
:0040CA10 55                      push ebp
:0040CA11 8BEC                    mov ebp, esp
:0040CA13 51                      push ecx
:0040CA14 894DFC                  mov dword ptr [ebp-04], ecx
:0040CA17 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CA1A 8A4813                  mov cl, byte ptr [eax+13]
:0040CA1D 80C101                  add cl, 01
:0040CA20 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CA23 884A13                  mov byte ptr [edx+13], cl
:0040CA26 8BE5                    mov esp, ebp
:0040CA28 5D                      pop ebp
:0040CA29 C3                      ret


:0040CA2A CC                      int 03
:0040CA2B CC                      int 03
:0040CA2C CC                      int 03
:0040CA2D CC                      int 03
:0040CA2E CC                      int 03
:0040CA2F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C1B7   , :0040C43A   , :0040CFCA   , :0040D6FF   
|
:0040CA30 55                      push ebp
:0040CA31 8BEC                    mov ebp, esp
:0040CA33 51                      push ecx
:0040CA34 894DFC                  mov dword ptr [ebp-04], ecx
:0040CA37 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CA3A 8B4028                  mov eax, dword ptr [eax+28]
:0040CA3D 8BE5                    mov esp, ebp
:0040CA3F 5D                      pop ebp
:0040CA40 C3                      ret


:0040CA41 CC                      int 03
:0040CA42 CC                      int 03
:0040CA43 CC                      int 03
:0040CA44 CC                      int 03
:0040CA45 CC                      int 03
:0040CA46 CC                      int 03
:0040CA47 CC                      int 03
:0040CA48 CC                      int 03
:0040CA49 CC                      int 03
:0040CA4A CC                      int 03
:0040CA4B CC                      int 03
:0040CA4C CC                      int 03
:0040CA4D CC                      int 03
:0040CA4E CC                      int 03
:0040CA4F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C389   , :0041ABAC   , :0041BC57   , :0041C614   , :0041CBA5   
|:0041D2B9   , :0041D7B2   , :0041E132   , :0041E312   , :0041EDC6   
|
:0040CA50 55                      push ebp
:0040CA51 8BEC                    mov ebp, esp
:0040CA53 51                      push ecx
:0040CA54 894DFC                  mov dword ptr [ebp-04], ecx
:0040CA57 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CA5A 668B4028                mov ax, word ptr [eax+28]
:0040CA5E 8BE5                    mov esp, ebp
:0040CA60 5D                      pop ebp
:0040CA61 C3                      ret


:0040CA62 CC                      int 03
:0040CA63 CC                      int 03
:0040CA64 CC                      int 03
:0040CA65 CC                      int 03
:0040CA66 CC                      int 03
:0040CA67 CC                      int 03
:0040CA68 CC                      int 03
:0040CA69 CC                      int 03
:0040CA6A CC                      int 03
:0040CA6B CC                      int 03
:0040CA6C CC                      int 03
:0040CA6D CC                      int 03
:0040CA6E CC                      int 03
:0040CA6F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C39F   , :0040C3B1   , :0040C3C3   , :0041C64C   , :0041CE45   
|:0041DB59   , :0041DBCD   , :0041DE39   , :0041E167   
|
:0040CA70 55                      push ebp
:0040CA71 8BEC                    mov ebp, esp
:0040CA73 51                      push ecx
:0040CA74 894DFC                  mov dword ptr [ebp-04], ecx
:0040CA77 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CA7A 668B4030                mov ax, word ptr [eax+30]
:0040CA7E 8BE5                    mov esp, ebp
:0040CA80 5D                      pop ebp
:0040CA81 C3                      ret


:0040CA82 CC                      int 03
:0040CA83 CC                      int 03
:0040CA84 CC                      int 03
:0040CA85 CC                      int 03
:0040CA86 CC                      int 03
:0040CA87 CC                      int 03
:0040CA88 CC                      int 03
:0040CA89 CC                      int 03
:0040CA8A CC                      int 03
:0040CA8B CC                      int 03
:0040CA8C CC                      int 03
:0040CA8D CC                      int 03
:0040CA8E CC                      int 03
:0040CA8F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040CAC4   , :0040D33D   
|
:0040CA90 55                      push ebp
:0040CA91 8BEC                    mov ebp, esp
:0040CA93 83EC08                  sub esp, 00000008
:0040CA96 894DF8                  mov dword ptr [ebp-08], ecx
:0040CA99 8B45F8                  mov eax, dword ptr [ebp-08]
:0040CA9C 8B4820                  mov ecx, dword ptr [eax+20]
:0040CA9F 8B55F8                  mov edx, dword ptr [ebp-08]
:0040CAA2 034A30                  add ecx, dword ptr [edx+30]
:0040CAA5 894DFC                  mov dword ptr [ebp-04], ecx
:0040CAA8 8B45F8                  mov eax, dword ptr [ebp-08]
:0040CAAB 8B4804                  mov ecx, dword ptr [eax+04]
:0040CAAE 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CAB1 8B048A                  mov eax, dword ptr [edx+4*ecx]
:0040CAB4 8BE5                    mov esp, ebp
:0040CAB6 5D                      pop ebp
:0040CAB7 C3                      ret



* Referenced by a CALL at Addresses:
|:0040CAF5   , :0040CFF0   
|
:0040CAB8 55                      push ebp
:0040CAB9 8BEC                    mov ebp, esp
:0040CABB 83EC08                  sub esp, 00000008
:0040CABE 894DF8                  mov dword ptr [ebp-08], ecx
:0040CAC1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040CAC4 E8C7FFFFFF              call 0040CA90
:0040CAC9 8945FC                  mov dword ptr [ebp-04], eax
:0040CACC 8B45F8                  mov eax, dword ptr [ebp-08]
:0040CACF C7400800000000          mov [eax+08], 00000000
:0040CAD6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040CAD9 8B5120                  mov edx, dword ptr [ecx+20]
:0040CADC 0355FC                  add edx, dword ptr [ebp-04]
:0040CADF 8B45F8                  mov eax, dword ptr [ebp-08]
:0040CAE2 89500C                  mov dword ptr [eax+0C], edx
:0040CAE5 8BE5                    mov esp, ebp
:0040CAE7 5D                      pop ebp
:0040CAE8 C3                      ret



* Referenced by a CALL at Address:
|:0040D03B   
|
:0040CAE9 55                      push ebp
:0040CAEA 8BEC                    mov ebp, esp
:0040CAEC 83EC10                  sub esp, 00000010
:0040CAEF 894DF0                  mov dword ptr [ebp-10], ecx
:0040CAF2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040CAF5 E8BEFFFFFF              call 0040CAB8
:0040CAFA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040CAFD E820010000              call 0040CC22
:0040CB02 25FFFF0000              and eax, 0000FFFF
:0040CB07 8945F8                  mov dword ptr [ebp-08], eax
:0040CB0A C745FC00000000          mov [ebp-04], 00000000
:0040CB11 EB09                    jmp 0040CB1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CB52(U)
|
:0040CB13 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CB16 83C001                  add eax, 00000001
:0040CB19 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CB11(U)
|
:0040CB1C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CB1F 3B4D08                  cmp ecx, dword ptr [ebp+08]
:0040CB22 7D30                    jge 0040CB54
:0040CB24 8B55F0                  mov edx, dword ptr [ebp-10]
:0040CB27 837A3400                cmp dword ptr [edx+34], 00000000
:0040CB2B 7408                    je 0040CB35
:0040CB2D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040CB30 E8ED000000              call 0040CC22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CB2B(C)
|
:0040CB35 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040CB38 E8E5000000              call 0040CC22
:0040CB3D 668945F4                mov word ptr [ebp-0C], ax
:0040CB41 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040CB44 25FFFF0000              and eax, 0000FFFF
:0040CB49 50                      push eax
:0040CB4A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040CB4D E829000000              call 0040CB7B
:0040CB52 EBBF                    jmp 0040CB13

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CB22(C)
|
:0040CB54 8BE5                    mov esp, ebp
:0040CB56 5D                      pop ebp
:0040CB57 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040D0C3   
|
:0040CB5A 55                      push ebp
:0040CB5B 8BEC                    mov ebp, esp
:0040CB5D 51                      push ecx
:0040CB5E 56                      push esi
:0040CB5F 57                      push edi
:0040CB60 894DFC                  mov dword ptr [ebp-04], ecx
:0040CB63 8B7508                  mov esi, dword ptr [ebp+08]
:0040CB66 8B7DFC                  mov edi, dword ptr [ebp-04]
:0040CB69 83C704                  add edi, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CB6C B905000000              mov ecx, 00000005
:0040CB71 F3                      repz
:0040CB72 A5                      movsd
:0040CB73 5F                      pop edi
:0040CB74 5E                      pop esi
:0040CB75 8BE5                    mov esp, ebp
:0040CB77 5D                      pop ebp
:0040CB78 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040CB4D   , :0040D747   
|
:0040CB7B 55                      push ebp
:0040CB7C 8BEC                    mov ebp, esp
:0040CB7E 51                      push ecx
:0040CB7F 894DFC                  mov dword ptr [ebp-04], ecx
:0040CB82 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CB85 8B4808                  mov ecx, dword ptr [eax+08]
:0040CB88 034D08                  add ecx, dword ptr [ebp+08]
:0040CB8B 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CB8E 894A08                  mov dword ptr [edx+08], ecx
:0040CB91 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CB94 8B480C                  mov ecx, dword ptr [eax+0C]
:0040CB97 034D08                  add ecx, dword ptr [ebp+08]
:0040CB9A 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CB9D 894A0C                  mov dword ptr [edx+0C], ecx
:0040CBA0 8BE5                    mov esp, ebp
:0040CBA2 5D                      pop ebp
:0040CBA3 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040D0A6   
|
:0040CBA6 55                      push ebp
:0040CBA7 8BEC                    mov ebp, esp
:0040CBA9 51                      push ecx
:0040CBAA 56                      push esi
:0040CBAB 57                      push edi
:0040CBAC 894DFC                  mov dword ptr [ebp-04], ecx
:0040CBAF 8B75FC                  mov esi, dword ptr [ebp-04]
:0040CBB2 83C604                  add esi, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040CBB5 B905000000              mov ecx, 00000005
:0040CBBA 8B7D08                  mov edi, dword ptr [ebp+08]
:0040CBBD F3                      repz
:0040CBBE A5                      movsd
:0040CBBF 5F                      pop edi
:0040CBC0 5E                      pop esi
:0040CBC1 8BE5                    mov esp, ebp
:0040CBC3 5D                      pop ebp
:0040CBC4 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040D662   , :0040D68A   
|
:0040CBC7 55                      push ebp
:0040CBC8 8BEC                    mov ebp, esp
:0040CBCA 83EC08                  sub esp, 00000008
:0040CBCD 894DF8                  mov dword ptr [ebp-08], ecx
:0040CBD0 8B45F8                  mov eax, dword ptr [ebp-08]
:0040CBD3 8B4820                  mov ecx, dword ptr [eax+20]
:0040CBD6 8B55F8                  mov edx, dword ptr [ebp-08]
:0040CBD9 034A30                  add ecx, dword ptr [edx+30]
:0040CBDC 894DFC                  mov dword ptr [ebp-04], ecx
:0040CBDF 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CBE2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040CBE5 8B00                    mov eax, dword ptr [eax]
:0040CBE7 2B4130                  sub eax, dword ptr [ecx+30]
:0040CBEA C1E802                  shr eax, 02
:0040CBED 8BE5                    mov esp, ebp
:0040CBEF 5D                      pop ebp
:0040CBF0 C3                      ret



* Referenced by a CALL at Addresses:
|:0040CC2E   , :0040CC3E   
|
:0040CBF1 55                      push ebp
:0040CBF2 8BEC                    mov ebp, esp
:0040CBF4 51                      push ecx
:0040CBF5 894DFC                  mov dword ptr [ebp-04], ecx
:0040CBF8 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CBFB 8B4808                  mov ecx, dword ptr [eax+08]
:0040CBFE 83C101                  add ecx, 00000001
:0040CC01 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CC04 894A08                  mov dword ptr [edx+08], ecx
:0040CC07 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CC0A 8B480C                  mov ecx, dword ptr [eax+0C]
:0040CC0D 8A01                    mov al, byte ptr [ecx]
:0040CC0F 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CC12 8B4A0C                  mov ecx, dword ptr [edx+0C]
:0040CC15 83C101                  add ecx, 00000001
:0040CC18 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CC1B 894A0C                  mov dword ptr [edx+0C], ecx
:0040CC1E 8BE5                    mov esp, ebp
:0040CC20 5D                      pop ebp
:0040CC21 C3                      ret



* Referenced by a CALL at Addresses:
|:00406CDB   , :0040C49F   , :0040C4B8   , :0040C531   , :0040CAFD   
|:0040CB30   , :0040CB38   , :0040CC66   , :0040CC76   , :0040CFF8   
|:0040D04C   , :0040D058   , :0040D4C3   , :0040D72B   
|
:0040CC22 55                      push ebp
:0040CC23 8BEC                    mov ebp, esp
:0040CC25 83EC08                  sub esp, 00000008
:0040CC28 894DF8                  mov dword ptr [ebp-08], ecx
:0040CC2B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040CC2E E8BEFFFFFF              call 0040CBF1
:0040CC33 660FB6C0                movzx ax, al
:0040CC37 668945FC                mov word ptr [ebp-04], ax
:0040CC3B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040CC3E E8AEFFFFFF              call 0040CBF1
:0040CC43 25FF000000              and eax, 000000FF
:0040CC48 C1E008                  shl eax, 08
:0040CC4B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CC4E 81E1FFFF0000            and ecx, 0000FFFF
:0040CC54 0BC1                    or eax, ecx
:0040CC56 8BE5                    mov esp, ebp
:0040CC58 5D                      pop ebp
:0040CC59 C3                      ret



* Referenced by a CALL at Address:
|:0040C4F4   
|
:0040CC5A 55                      push ebp
:0040CC5B 8BEC                    mov ebp, esp
:0040CC5D 83EC08                  sub esp, 00000008
:0040CC60 894DF8                  mov dword ptr [ebp-08], ecx
:0040CC63 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040CC66 E8B7FFFFFF              call 0040CC22
:0040CC6B 25FFFF0000              and eax, 0000FFFF
:0040CC70 8945FC                  mov dword ptr [ebp-04], eax
:0040CC73 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040CC76 E8A7FFFFFF              call 0040CC22
:0040CC7B 25FFFF0000              and eax, 0000FFFF
:0040CC80 C1E010                  shl eax, 10
:0040CC83 0B45FC                  or eax, dword ptr [ebp-04]
:0040CC86 8BE5                    mov esp, ebp
:0040CC88 5D                      pop ebp
:0040CC89 C3                      ret



* Referenced by a CALL at Address:
|:0040C513   
|
:0040CC8A 55                      push ebp
:0040CC8B 8BEC                    mov ebp, esp
:0040CC8D 83EC08                  sub esp, 00000008
:0040CC90 894DF8                  mov dword ptr [ebp-08], ecx
:0040CC93 8B45F8                  mov eax, dword ptr [ebp-08]
:0040CC96 8B480C                  mov ecx, dword ptr [eax+0C]
:0040CC99 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CCB9(U)
|
:0040CC9C 8B55F8                  mov edx, dword ptr [ebp-08]
:0040CC9F 8B420C                  mov eax, dword ptr [edx+0C]
:0040CCA2 33C9                    xor ecx, ecx
:0040CCA4 8A08                    mov cl, byte ptr [eax]
:0040CCA6 8B55F8                  mov edx, dword ptr [ebp-08]
:0040CCA9 8B420C                  mov eax, dword ptr [edx+0C]
:0040CCAC 83C001                  add eax, 00000001
:0040CCAF 8B55F8                  mov edx, dword ptr [ebp-08]
:0040CCB2 89420C                  mov dword ptr [edx+0C], eax
:0040CCB5 85C9                    test ecx, ecx
:0040CCB7 7402                    je 0040CCBB
:0040CCB9 EBE1                    jmp 0040CC9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CCB7(C)
|
:0040CCBB 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CCBE 8BE5                    mov esp, ebp
:0040CCC0 5D                      pop ebp
:0040CCC1 C3                      ret



* Referenced by a CALL at Addresses:
|:0040CCED   , :0040CD04   
|
:0040CCC2 55                      push ebp
:0040CCC3 8BEC                    mov ebp, esp
:0040CCC5 51                      push ecx
:0040CCC6 894DFC                  mov dword ptr [ebp-04], ecx
:0040CCC9 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CCCC 8B480C                  mov ecx, dword ptr [eax+0C]
:0040CCCF 8B5508                  mov edx, dword ptr [ebp+08]
:0040CCD2 8A0411                  mov al, byte ptr [ecx+edx]
:0040CCD5 8BE5                    mov esp, ebp
:0040CCD7 5D                      pop ebp
:0040CCD8 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040C87C   , :0040CD27   , :0040CD3D   
|
:0040CCDB 55                      push ebp
:0040CCDC 8BEC                    mov ebp, esp
:0040CCDE 51                      push ecx
:0040CCDF 53                      push ebx
:0040CCE0 894DFC                  mov dword ptr [ebp-04], ecx
:0040CCE3 8B4508                  mov eax, dword ptr [ebp+08]
:0040CCE6 83C001                  add eax, 00000001
:0040CCE9 50                      push eax
:0040CCEA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CCED E8D0FFFFFF              call 0040CCC2
:0040CCF2 8AD8                    mov bl, al
:0040CCF4 81E3FF000000            and ebx, 000000FF
:0040CCFA C1E308                  shl ebx, 08
:0040CCFD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CD00 51                      push ecx
:0040CD01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CD04 E8B9FFFFFF              call 0040CCC2
:0040CD09 25FF000000              and eax, 000000FF
:0040CD0E 0BD8                    or ebx, eax
:0040CD10 668BC3                  mov ax, bx
:0040CD13 5B                      pop ebx
:0040CD14 8BE5                    mov esp, ebp
:0040CD16 5D                      pop ebp
:0040CD17 C20400                  ret 0004


:0040CD1A 55                      push ebp
:0040CD1B 8BEC                    mov ebp, esp
:0040CD1D 51                      push ecx
:0040CD1E 56                      push esi
:0040CD1F 894DFC                  mov dword ptr [ebp-04], ecx
:0040CD22 6A01                    push 00000001
:0040CD24 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CD27 E8AFFFFFFF              call 0040CCDB
:0040CD2C 668BF0                  mov si, ax
:0040CD2F 81E6FFFF0000            and esi, 0000FFFF
:0040CD35 C1E610                  shl esi, 10
:0040CD38 6A00                    push 00000000
:0040CD3A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CD3D E899FFFFFF              call 0040CCDB
:0040CD42 25FFFF0000              and eax, 0000FFFF
:0040CD47 0BC6                    or eax, esi
:0040CD49 5E                      pop esi
:0040CD4A 8BE5                    mov esp, ebp
:0040CD4C 5D                      pop ebp
:0040CD4D C3                      ret


:0040CD4E 55                      push ebp
:0040CD4F 8BEC                    mov ebp, esp
:0040CD51 51                      push ecx
:0040CD52 894DFC                  mov dword ptr [ebp-04], ecx
:0040CD55 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CD58 8B400C                  mov eax, dword ptr [eax+0C]
:0040CD5B 8BE5                    mov esp, ebp
:0040CD5D 5D                      pop ebp
:0040CD5E C3                      ret



* Referenced by a CALL at Address:
|:0040B929   
|
:0040CD5F 55                      push ebp
:0040CD60 8BEC                    mov ebp, esp
:0040CD62 83EC18                  sub esp, 00000018
:0040CD65 894DE8                  mov dword ptr [ebp-18], ecx
:0040CD68 8B45E8                  mov eax, dword ptr [ebp-18]
:0040CD6B 83781C00                cmp dword ptr [eax+1C], 00000000
:0040CD6F 744F                    je 0040CDC0
:0040CD71 C745F800000000          mov [ebp-08], 00000000
:0040CD78 EB09                    jmp 0040CD83

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CDA9(U)
|
:0040CD7A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040CD7D 83C101                  add ecx, 00000001
:0040CD80 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CD78(U)
|
:0040CD83 8B55E8                  mov edx, dword ptr [ebp-18]
:0040CD86 8B45F8                  mov eax, dword ptr [ebp-08]
:0040CD89 3B4218                  cmp eax, dword ptr [edx+18]
:0040CD8C 7D1D                    jge 0040CDAB
:0040CD8E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040CD91 8B511C                  mov edx, dword ptr [ecx+1C]
:0040CD94 8B45F8                  mov eax, dword ptr [ebp-08]
:0040CD97 8B0C82                  mov ecx, dword ptr [edx+4*eax]
:0040CD9A 894DF4                  mov dword ptr [ebp-0C], ecx
:0040CD9D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040CDA0 52                      push edx
:0040CDA1 E86A270600              call 0046F510
:0040CDA6 83C404                  add esp, 00000004
:0040CDA9 EBCF                    jmp 0040CD7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CD8C(C)
|
:0040CDAB 8B45E8                  mov eax, dword ptr [ebp-18]
:0040CDAE 8B481C                  mov ecx, dword ptr [eax+1C]
:0040CDB1 894DF0                  mov dword ptr [ebp-10], ecx
:0040CDB4 8B55F0                  mov edx, dword ptr [ebp-10]
:0040CDB7 52                      push edx
:0040CDB8 E853270600              call 0046F510
:0040CDBD 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CD6F(C)
|
:0040CDC0 8B45E8                  mov eax, dword ptr [ebp-18]
:0040CDC3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CDC6 894818                  mov dword ptr [eax+18], ecx
:0040CDC9 8B55E8                  mov edx, dword ptr [ebp-18]
:0040CDCC 8B4218                  mov eax, dword ptr [edx+18]
:0040CDCF C1E002                  shl eax, 02
:0040CDD2 50                      push eax
:0040CDD3 E878270600              call 0046F550
:0040CDD8 83C404                  add esp, 00000004
:0040CDDB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040CDDE 89411C                  mov dword ptr [ecx+1C], eax
:0040CDE1 8B55E8                  mov edx, dword ptr [ebp-18]
:0040CDE4 837A1C00                cmp dword ptr [edx+1C], 00000000
:0040CDE8 7504                    jne 0040CDEE
:0040CDEA 33C0                    xor eax, eax
:0040CDEC EB6A                    jmp 0040CE58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CDE8(C)
|
:0040CDEE C745FC00000000          mov [ebp-04], 00000000
:0040CDF5 EB09                    jmp 0040CE00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CE51(U)
|
:0040CDF7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CDFA 83C001                  add eax, 00000001
:0040CDFD 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CDF5(U)
|
:0040CE00 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040CE03 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CE06 3B5118                  cmp edx, dword ptr [ecx+18]
:0040CE09 7D48                    jge 0040CE53
:0040CE0B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CE0E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040CE11 8B1481                  mov edx, dword ptr [ecx+4*eax]
:0040CE14 52                      push edx
:0040CE15 E836270600              call 0046F550
:0040CE1A 83C404                  add esp, 00000004
:0040CE1D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040CE20 8B511C                  mov edx, dword ptr [ecx+1C]
:0040CE23 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CE26 89048A                  mov dword ptr [edx+4*ecx], eax
:0040CE29 8B55E8                  mov edx, dword ptr [ebp-18]
:0040CE2C 8B421C                  mov eax, dword ptr [edx+1C]
:0040CE2F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CE32 833C8800                cmp dword ptr [eax+4*ecx], 00000000
:0040CE36 7519                    jne 0040CE51
:0040CE38 8B55E8                  mov edx, dword ptr [ebp-18]
:0040CE3B 8B421C                  mov eax, dword ptr [edx+1C]
:0040CE3E 8945EC                  mov dword ptr [ebp-14], eax
:0040CE41 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040CE44 51                      push ecx
:0040CE45 E8C6260600              call 0046F510
:0040CE4A 83C404                  add esp, 00000004
:0040CE4D 33C0                    xor eax, eax
:0040CE4F EB07                    jmp 0040CE58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CE36(C)
|
:0040CE51 EBA4                    jmp 0040CDF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CE09(C)
|
:0040CE53 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CDEC(U), :0040CE4F(U)
|
:0040CE58 8BE5                    mov esp, ebp
:0040CE5A 5D                      pop ebp
:0040CE5B C20800                  ret 0008



* Referenced by a CALL at Address:
|:0040B943   
|
:0040CE5E 55                      push ebp
:0040CE5F 8BEC                    mov ebp, esp
:0040CE61 83EC14                  sub esp, 00000014
:0040CE64 894DEC                  mov dword ptr [ebp-14], ecx
:0040CE67 8B45EC                  mov eax, dword ptr [ebp-14]
:0040CE6A 83781C00                cmp dword ptr [eax+1C], 00000000
:0040CE6E 7507                    jne 0040CE77
:0040CE70 33C0                    xor eax, eax
:0040CE72 E99E000000              jmp 0040CF15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CE6E(C)
|
:0040CE77 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040CE7A 8B5508                  mov edx, dword ptr [ebp+08]
:0040CE7D 3B5118                  cmp edx, dword ptr [ecx+18]
:0040CE80 7407                    je 0040CE89
:0040CE82 33C0                    xor eax, eax
:0040CE84 E98C000000              jmp 0040CF15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CE80(C)
|
:0040CE89 C745FC00000000          mov [ebp-04], 00000000
:0040CE90 EB09                    jmp 0040CE9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CF0E(U)
|
:0040CE92 8B45FC                  mov eax, dword ptr [ebp-04]
:0040CE95 83C001                  add eax, 00000001
:0040CE98 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CE90(U)
|
:0040CE9B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040CE9E 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CEA1 3B5118                  cmp edx, dword ptr [ecx+18]
:0040CEA4 7D6A                    jge 0040CF10
:0040CEA6 8B45EC                  mov eax, dword ptr [ebp-14]
:0040CEA9 8B481C                  mov ecx, dword ptr [eax+1C]
:0040CEAC 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CEAF 833C9100                cmp dword ptr [ecx+4*edx], 00000000
:0040CEB3 7519                    jne 0040CECE
:0040CEB5 8B45EC                  mov eax, dword ptr [ebp-14]
:0040CEB8 8B481C                  mov ecx, dword ptr [eax+1C]
:0040CEBB 894DF0                  mov dword ptr [ebp-10], ecx
:0040CEBE 8B55F0                  mov edx, dword ptr [ebp-10]
:0040CEC1 52                      push edx
:0040CEC2 E849260600              call 0046F510
:0040CEC7 83C404                  add esp, 00000004
:0040CECA 33C0                    xor eax, eax
:0040CECC EB47                    jmp 0040CF15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CEB3(C)
|
:0040CECE 8B45EC                  mov eax, dword ptr [ebp-14]
:0040CED1 8B481C                  mov ecx, dword ptr [eax+1C]
:0040CED4 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CED7 8B0491                  mov eax, dword ptr [ecx+4*edx]
:0040CEDA 8945F8                  mov dword ptr [ebp-08], eax
:0040CEDD C745F400000000          mov [ebp-0C], 00000000
:0040CEE4 EB09                    jmp 0040CEEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CF0C(U)
|
:0040CEE6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040CEE9 83C101                  add ecx, 00000001
:0040CEEC 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CEE4(U)
|
:0040CEEF 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CEF2 8B450C                  mov eax, dword ptr [ebp+0C]
:0040CEF5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040CEF8 3B0C90                  cmp ecx, dword ptr [eax+4*edx]
:0040CEFB 7D11                    jge 0040CF0E
:0040CEFD 8B55F8                  mov edx, dword ptr [ebp-08]
:0040CF00 C602FF                  mov byte ptr [edx], FF
:0040CF03 8B45F8                  mov eax, dword ptr [ebp-08]
:0040CF06 83C001                  add eax, 00000001
:0040CF09 8945F8                  mov dword ptr [ebp-08], eax
:0040CF0C EBD8                    jmp 0040CEE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CEFB(C)
|
:0040CF0E EB82                    jmp 0040CE92

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CEA4(C)
|
:0040CF10 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CE72(U), :0040CE84(U), :0040CECC(U)
|
:0040CF15 8BE5                    mov esp, ebp
:0040CF17 5D                      pop ebp
:0040CF18 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004076F2   , :00407ABE   , :00407B46   , :00407E9E   , :004080F3   
|:00408114   , :004081E2   
|
:0040CF1B 55                      push ebp
:0040CF1C 8BEC                    mov ebp, esp
:0040CF1E 51                      push ecx
:0040CF1F 894DFC                  mov dword ptr [ebp-04], ecx
:0040CF22 8B4510                  mov eax, dword ptr [ebp+10]
:0040CF25 50                      push eax
:0040CF26 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040CF29 8B511C                  mov edx, dword ptr [ecx+1C]
:0040CF2C 8B4508                  mov eax, dword ptr [ebp+08]
:0040CF2F 8B0C82                  mov ecx, dword ptr [edx+4*eax]
:0040CF32 51                      push ecx
:0040CF33 8B550C                  mov edx, dword ptr [ebp+0C]
:0040CF36 52                      push edx
:0040CF37 E824260600              call 0046F560
:0040CF3C 83C40C                  add esp, 0000000C
:0040CF3F 8BE5                    mov esp, ebp
:0040CF41 5D                      pop ebp
:0040CF42 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0040C268   , :0040C2A4   , :0040C5ED   , :00436ED2   , :00436EF2   
|:00461052   , :00461072   
|
:0040CF45 55                      push ebp
:0040CF46 8BEC                    mov ebp, esp
:0040CF48 51                      push ecx
:0040CF49 894DFC                  mov dword ptr [ebp-04], ecx
:0040CF4C 8B4510                  mov eax, dword ptr [ebp+10]
:0040CF4F 50                      push eax
:0040CF50 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040CF53 51                      push ecx
:0040CF54 8B55FC                  mov edx, dword ptr [ebp-04]
:0040CF57 8B421C                  mov eax, dword ptr [edx+1C]
:0040CF5A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040CF5D 8B1488                  mov edx, dword ptr [eax+4*ecx]
:0040CF60 52                      push edx
:0040CF61 E8FA250600              call 0046F560
:0040CF66 83C40C                  add esp, 0000000C
:0040CF69 8BE5                    mov esp, ebp
:0040CF6B 5D                      pop ebp
:0040CF6C C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0040C16A   , :0040C214   , :0040C3ED   , :0040C5F5   
|
:0040CF6F 55                      push ebp
:0040CF70 8BEC                    mov ebp, esp
:0040CF72 6AFF                    push FFFFFFFF
:0040CF74 68A9954700              push 004795A9
:0040CF79 64A100000000            mov eax, dword ptr fs:[00000000]
:0040CF7F 50                      push eax
:0040CF80 64892500000000          mov dword ptr fs:[00000000], esp
:0040CF87 83EC34                  sub esp, 00000034
:0040CF8A 894DC0                  mov dword ptr [ebp-40], ecx
:0040CF8D 8B45C0                  mov eax, dword ptr [ebp-40]
:0040CF90 33C9                    xor ecx, ecx
:0040CF92 668B4810                mov cx, word ptr [eax+10]
:0040CF96 81F9FFFF0000            cmp ecx, 0000FFFF
:0040CF9C 7429                    je 0040CFC7
:0040CF9E 8B55C0                  mov edx, dword ptr [ebp-40]
:0040CFA1 8B02                    mov eax, dword ptr [edx]
:0040CFA3 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040CFA6 FF500C                  call [eax+0C]
:0040CFA9 85C0                    test eax, eax
:0040CFAB 7407                    je 0040CFB4
:0040CFAD 33C0                    xor eax, eax
:0040CFAF E948010000              jmp 0040D0FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CFAB(C)
|
:0040CFB4 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040CFB7 66C74110FFFF            mov [ecx+10], FFFF
:0040CFBD B801000000              mov eax, 00000001
:0040CFC2 E935010000              jmp 0040D0FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CF9C(C)
|
:0040CFC7 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040CFCA E861FAFFFF              call 0040CA30
:0040CFCF 85C0                    test eax, eax
:0040CFD1 7507                    jne 0040CFDA
:0040CFD3 33C0                    xor eax, eax
:0040CFD5 E922010000              jmp 0040D0FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CFD1(C)
|
:0040CFDA 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040CFDD E8CE070000              call 0040D7B0
:0040CFE2 85C0                    test eax, eax
:0040CFE4 7407                    je 0040CFED
:0040CFE6 33C0                    xor eax, eax
:0040CFE8 E90F010000              jmp 0040D0FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040CFE4(C)
|
:0040CFED 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040CFF0 E8C3FAFFFF              call 0040CAB8
:0040CFF5 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040CFF8 E825FCFFFF              call 0040CC22
:0040CFFD 25FFFF0000              and eax, 0000FFFF
:0040D002 8B55C0                  mov edx, dword ptr [ebp-40]
:0040D005 894224                  mov dword ptr [edx+24], eax
:0040D008 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0040D00B E850F7FFFF              call 0040C760
:0040D010 C745FC00000000          mov [ebp-04], 00000000
:0040D017 C745DC00000000          mov [ebp-24], 00000000
:0040D01E EB09                    jmp 0040D029

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D0AB(U)
|
:0040D020 8B45DC                  mov eax, dword ptr [ebp-24]
:0040D023 83C001                  add eax, 00000001
:0040D026 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D01E(U)
|
:0040D029 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040D02C 8B55DC                  mov edx, dword ptr [ebp-24]
:0040D02F 3B5124                  cmp edx, dword ptr [ecx+24]
:0040D032 7D7C                    jge 0040D0B0
:0040D034 8B45DC                  mov eax, dword ptr [ebp-24]
:0040D037 50                      push eax
:0040D038 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040D03B E8A9FAFFFF              call 0040CAE9
:0040D040 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040D043 83793400                cmp dword ptr [ecx+34], 00000000
:0040D047 740C                    je 0040D055
:0040D049 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040D04C E8D1FBFFFF              call 0040CC22
:0040D051 668945D8                mov word ptr [ebp-28], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D047(C)
|
:0040D055 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040D058 E8C5FBFFFF              call 0040CC22
:0040D05D 668945D0                mov word ptr [ebp-30], ax
:0040D061 C745D401000000          mov [ebp-2C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D097(C)
|
:0040D068 8B55C0                  mov edx, dword ptr [ebp-40]
:0040D06B 8B02                    mov eax, dword ptr [edx]
:0040D06D 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040D070 FF5008                  call [eax+08]
:0040D073 8945CC                  mov dword ptr [ebp-34], eax
:0040D076 837DCC01                cmp dword ptr [ebp-34], 00000001
:0040D07A 7406                    je 0040D082
:0040D07C 837DCC00                cmp dword ptr [ebp-34], 00000000
:0040D080 7511                    jne 0040D093

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D07A(C)
|
:0040D082 33C9                    xor ecx, ecx
:0040D084 837DCC01                cmp dword ptr [ebp-34], 00000001
:0040D088 0F94C1                  sete cl
:0040D08B 8B55D4                  mov edx, dword ptr [ebp-2C]
:0040D08E 23D1                    and edx, ecx
:0040D090 8955D4                  mov dword ptr [ebp-2C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D080(C)
|
:0040D093 837DCC03                cmp dword ptr [ebp-34], 00000003
:0040D097 75CF                    jne 0040D068
:0040D099 837DD400                cmp dword ptr [ebp-2C], 00000000
:0040D09D 740C                    je 0040D0AB
:0040D09F 8D45E0                  lea eax, dword ptr [ebp-20]
:0040D0A2 50                      push eax
:0040D0A3 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040D0A6 E8FBFAFFFF              call 0040CBA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D09D(C)
|
:0040D0AB E970FFFFFF              jmp 0040D020

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D032(C)
|
:0040D0B0 837DE000                cmp dword ptr [ebp-20], 00000000
:0040D0B4 7C2D                    jl 0040D0E3
:0040D0B6 837DE400                cmp dword ptr [ebp-1C], 00000000
:0040D0BA 7C27                    jl 0040D0E3
:0040D0BC 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0040D0BF 51                      push ecx
:0040D0C0 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0040D0C3 E892FAFFFF              call 0040CB5A
:0040D0C8 C745C801000000          mov [ebp-38], 00000001
:0040D0CF C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040D0D6 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0040D0D9 E822190200              call 0042EA00
:0040D0DE 8B45C8                  mov eax, dword ptr [ebp-38]
:0040D0E1 EB19                    jmp 0040D0FC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D0B4(C), :0040D0BA(C)
|
:0040D0E3 C745C400000000          mov [ebp-3C], 00000000
:0040D0EA C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040D0F1 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0040D0F4 E807190200              call 0042EA00
:0040D0F9 8B45C4                  mov eax, dword ptr [ebp-3C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040CFAF(U), :0040CFC2(U), :0040CFD5(U), :0040CFE8(U), :0040D0E1(U)
|
:0040D0FC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D0FF 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040D106 8BE5                    mov esp, ebp
:0040D108 5D                      pop ebp
:0040D109 C3                      ret



* Referenced by a CALL at Addresses:
|:0042F0E0   , :0042F125   
|
:0040D10A 55                      push ebp
:0040D10B 8BEC                    mov ebp, esp
:0040D10D 51                      push ecx
:0040D10E 894DFC                  mov dword ptr [ebp-04], ecx
:0040D111 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D114 C7400400000000          mov [eax+04], 00000000
:0040D11B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D11E C7410800000000          mov [ecx+08], 00000000
:0040D125 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D128 66C74210FFFF            mov [edx+10], FFFF
:0040D12E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D131 C74014FFFFFFFF          mov [eax+14], FFFFFFFF
:0040D138 B801000000              mov eax, 00000001
:0040D13D 8BE5                    mov esp, ebp
:0040D13F 5D                      pop ebp
:0040D140 C3                      ret



* Referenced by a CALL at Address:
|:0040C135   
|
:0040D141 55                      push ebp
:0040D142 8BEC                    mov ebp, esp
:0040D144 83EC24                  sub esp, 00000024
:0040D147 894DE0                  mov dword ptr [ebp-20], ecx
:0040D14A 8B45E0                  mov eax, dword ptr [ebp-20]
:0040D14D 83782000                cmp dword ptr [eax+20], 00000000
:0040D151 7415                    je 0040D168
:0040D153 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040D156 8B5120                  mov edx, dword ptr [ecx+20]
:0040D159 8955E4                  mov dword ptr [ebp-1C], edx
:0040D15C 8B45E4                  mov eax, dword ptr [ebp-1C]
:0040D15F 50                      push eax
:0040D160 E8AB230600              call 0046F510
:0040D165 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D151(C)
|
:0040D168 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040D16B C7413400000000          mov [ecx+34], 00000000
:0040D172 8B5508                  mov edx, dword ptr [ebp+08]
:0040D175 8955FC                  mov dword ptr [ebp-04], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D178 6A04                    push 00000004

* Possible StringData Ref from Data Obj ->"EEX"
                                  |
:0040D17A 6870C34700              push 0047C370
:0040D17F 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D182 50                      push eax
:0040D183 E818270600              call 0046F8A0
:0040D188 83C40C                  add esp, 0000000C
:0040D18B 85C0                    test eax, eax
:0040D18D 7407                    je 0040D196
:0040D18F 33C0                    xor eax, eax
:0040D191 E9CF010000              jmp 0040D365

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D18D(C)
|
:0040D196 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D199 33D2                    xor edx, edx
:0040D19B 8A5104                  mov dl, byte ptr [ecx+04]
:0040D19E 83FA01                  cmp edx, 00000001
:0040D1A1 7E07                    jle 0040D1AA
:0040D1A3 33C0                    xor eax, eax
:0040D1A5 E9BB010000              jmp 0040D365

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D1A1(C)
|
:0040D1AA 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D1AD 33C9                    xor ecx, ecx
:0040D1AF 8A4804                  mov cl, byte ptr [eax+04]
:0040D1B2 83F901                  cmp ecx, 00000001
:0040D1B5 7514                    jne 0040D1CB
:0040D1B7 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D1BA 33C0                    xor eax, eax
:0040D1BC 8A4205                  mov al, byte ptr [edx+05]
:0040D1BF 83F802                  cmp eax, 00000002
:0040D1C2 7E07                    jle 0040D1CB
:0040D1C4 33C0                    xor eax, eax
:0040D1C6 E99A010000              jmp 0040D365

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D1B5(C), :0040D1C2(C)
|
:0040D1CB 8B4DE0                  mov ecx, dword ptr [ebp-20]

* Possible Reference to String Resource ID=00006: ""
                                  |
:0040D1CE C7413006000000          mov [ecx+30], 00000006
:0040D1D5 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D1D8 33C0                    xor eax, eax
:0040D1DA 8A4204                  mov al, byte ptr [edx+04]
:0040D1DD 83F801                  cmp eax, 00000001
:0040D1E0 7F11                    jg 0040D1F3
:0040D1E2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D1E5 33D2                    xor edx, edx
:0040D1E7 8A5105                  mov dl, byte ptr [ecx+05]
:0040D1EA 83FA01                  cmp edx, 00000001
:0040D1ED 0F8C07010000            jl 0040D2FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D1E0(C)
|
:0040D1F3 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D1F6 83C006                  add eax, 00000006
:0040D1F9 8945F8                  mov dword ptr [ebp-08], eax
:0040D1FC C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D2E7(U)
|
:0040D203 837DF400                cmp dword ptr [ebp-0C], 00000000
:0040D207 0F85DF000000            jne 0040D2EC
:0040D20D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D210 660FB611                movzx dx, byte ptr [ecx]
:0040D214 668955F0                mov word ptr [ebp-10], dx
:0040D218 8B45F8                  mov eax, dword ptr [ebp-08]
:0040D21B 83C001                  add eax, 00000001
:0040D21E 8945F8                  mov dword ptr [ebp-08], eax
:0040D221 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D224 33D2                    xor edx, edx
:0040D226 8A11                    mov dl, byte ptr [ecx]
:0040D228 C1E208                  shl edx, 08
:0040D22B 668B45F0                mov ax, word ptr [ebp-10]
:0040D22F 660BC2                  or ax, dx
:0040D232 668945F0                mov word ptr [ebp-10], ax
:0040D236 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D239 83C101                  add ecx, 00000001
:0040D23C 894DF8                  mov dword ptr [ebp-08], ecx
:0040D23F 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D242 660FB602                movzx ax, byte ptr [edx]
:0040D246 668945E8                mov word ptr [ebp-18], ax
:0040D24A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D24D 83C101                  add ecx, 00000001
:0040D250 894DF8                  mov dword ptr [ebp-08], ecx
:0040D253 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D256 33C0                    xor eax, eax
:0040D258 8A02                    mov al, byte ptr [edx]
:0040D25A C1E008                  shl eax, 08
:0040D25D 668B4DE8                mov cx, word ptr [ebp-18]
:0040D261 660BC8                  or cx, ax
:0040D264 66894DE8                mov word ptr [ebp-18], cx
:0040D268 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D26B 83C201                  add edx, 00000001
:0040D26E 8955F8                  mov dword ptr [ebp-08], edx
:0040D271 8B45E8                  mov eax, dword ptr [ebp-18]
:0040D274 25FFFF0000              and eax, 0000FFFF
:0040D279 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D27C 03C8                    add ecx, eax
:0040D27E 894DEC                  mov dword ptr [ebp-14], ecx
:0040D281 8B55F0                  mov edx, dword ptr [ebp-10]
:0040D284 81E2FFFF0000            and edx, 0000FFFF
:0040D28A 8955DC                  mov dword ptr [ebp-24], edx
:0040D28D 837DDC00                cmp dword ptr [ebp-24], 00000000
:0040D291 7408                    je 0040D29B
:0040D293 837DDC01                cmp dword ptr [ebp-24], 00000001
:0040D297 740B                    je 0040D2A4
:0040D299 EB46                    jmp 0040D2E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D291(C)
|
:0040D29B C745F401000000          mov [ebp-0C], 00000001
:0040D2A2 EB3D                    jmp 0040D2E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D297(C)
|
:0040D2A4 833D9CA1480000          cmp dword ptr [0048A19C], 00000000
:0040D2AB 742A                    je 0040D2D7
:0040D2AD 6A00                    push 00000000
:0040D2AF 6AFF                    push FFFFFFFF
:0040D2B1 6850400000              push 00004050
:0040D2B6 6A00                    push 00000000
:0040D2B8 6A00                    push 00000000
:0040D2BA A19CA14800              mov eax, dword ptr [0048A19C]
:0040D2BF 50                      push eax
:0040D2C0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D2C3 51                      push ecx

* Reference To: KERNEL32.lstrlenA, Ord:02A1h
                                  |
:0040D2C4 FF15E8D44B00            Call dword ptr [004BD4E8]
:0040D2CA 83C001                  add eax, 00000001
:0040D2CD 50                      push eax
:0040D2CE 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D2D1 52                      push edx

* Reference To: USER32.DdeClientTransaction, Ord:005Ch
                                  |
:0040D2D2 E8FD1C0600              Call 0046EFD4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D2AB(C)
|
:0040D2D7 8B45E0                  mov eax, dword ptr [ebp-20]
:0040D2DA C7403401000000          mov [eax+34], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D299(U), :0040D2A2(U)
|
:0040D2E1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040D2E4 894DF8                  mov dword ptr [ebp-08], ecx
:0040D2E7 E917FFFFFF              jmp 0040D203

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D207(C)
|
:0040D2EC 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D2EF 2B5508                  sub edx, dword ptr [ebp+08]
:0040D2F2 8B45E0                  mov eax, dword ptr [ebp-20]
:0040D2F5 895030                  mov dword ptr [eax+30], edx
:0040D2F8 EB0A                    jmp 0040D304

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D1ED(C)
|
:0040D2FA 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040D2FD C7413010000000          mov [ecx+30], 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D2F8(U)
|
:0040D304 8B550C                  mov edx, dword ptr [ebp+0C]
:0040D307 52                      push edx
:0040D308 E843220600              call 0046F550
:0040D30D 83C404                  add esp, 00000004
:0040D310 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040D313 894120                  mov dword ptr [ecx+20], eax
:0040D316 8B55E0                  mov edx, dword ptr [ebp-20]
:0040D319 837A2000                cmp dword ptr [edx+20], 00000000
:0040D31D 7504                    jne 0040D323
:0040D31F 33C0                    xor eax, eax
:0040D321 EB42                    jmp 0040D365

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D31D(C)
|
:0040D323 8B450C                  mov eax, dword ptr [ebp+0C]
:0040D326 50                      push eax
:0040D327 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D32A 51                      push ecx
:0040D32B 8B55E0                  mov edx, dword ptr [ebp-20]
:0040D32E 8B4220                  mov eax, dword ptr [edx+20]
:0040D331 50                      push eax
:0040D332 E829220600              call 0046F560
:0040D337 83C40C                  add esp, 0000000C
:0040D33A 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040D33D E84EF7FFFF              call 0040CA90
:0040D342 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040D345 8B5120                  mov edx, dword ptr [ecx+20]
:0040D348 03D0                    add edx, eax
:0040D34A 8B45E0                  mov eax, dword ptr [ebp-20]
:0040D34D 035008                  add edx, dword ptr [eax+08]
:0040D350 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0040D353 89510C                  mov dword ptr [ecx+0C], edx
:0040D356 8B55E0                  mov edx, dword ptr [ebp-20]
:0040D359 C7422801000000          mov [edx+28], 00000001
:0040D360 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D191(U), :0040D1A5(U), :0040D1C6(U), :0040D321(U)
|
:0040D365 8BE5                    mov esp, ebp
:0040D367 5D                      pop ebp
:0040D368 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0040BFA9   
|
:0040D36B 55                      push ebp
:0040D36C 8BEC                    mov ebp, esp
:0040D36E 83EC08                  sub esp, 00000008
:0040D371 894DF8                  mov dword ptr [ebp-08], ecx
:0040D374 837D0800                cmp dword ptr [ebp+08], 00000000
:0040D378 7507                    jne 0040D381

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:0040D37A B800040000              mov eax, 00000400
:0040D37F EB64                    jmp 0040D3E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D378(C)
|
:0040D381 8B4508                  mov eax, dword ptr [ebp+08]
:0040D384 8945FC                  mov dword ptr [ebp-04], eax
:0040D387 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D38A 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D38D 668B4204                mov ax, word ptr [edx+04]
:0040D391 668901                  mov word ptr [ecx], ax
:0040D394 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D397 83C102                  add ecx, 00000002
:0040D39A 894D08                  mov dword ptr [ebp+08], ecx
:0040D39D 8B5508                  mov edx, dword ptr [ebp+08]
:0040D3A0 8B45F8                  mov eax, dword ptr [ebp-08]
:0040D3A3 668B4808                mov cx, word ptr [eax+08]
:0040D3A7 66890A                  mov word ptr [edx], cx
:0040D3AA 8B5508                  mov edx, dword ptr [ebp+08]
:0040D3AD 83C202                  add edx, 00000002
:0040D3B0 895508                  mov dword ptr [ebp+08], edx
:0040D3B3 8B4508                  mov eax, dword ptr [ebp+08]
:0040D3B6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D3B9 668B5110                mov dx, word ptr [ecx+10]
:0040D3BD 668910                  mov word ptr [eax], dx
:0040D3C0 8B4508                  mov eax, dword ptr [ebp+08]
:0040D3C3 83C002                  add eax, 00000002
:0040D3C6 894508                  mov dword ptr [ebp+08], eax
:0040D3C9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D3CC 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D3CF 668B4214                mov ax, word ptr [edx+14]
:0040D3D3 668901                  mov word ptr [ecx], ax
:0040D3D6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D3D9 83C102                  add ecx, 00000002
:0040D3DC 894D08                  mov dword ptr [ebp+08], ecx
:0040D3DF 8B4508                  mov eax, dword ptr [ebp+08]
:0040D3E2 2B45FC                  sub eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D37F(U)
|
:0040D3E5 8BE5                    mov esp, ebp
:0040D3E7 5D                      pop ebp
:0040D3E8 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040BD8A   
|
:0040D3EB 55                      push ebp
:0040D3EC 8BEC                    mov ebp, esp
:0040D3EE 83EC08                  sub esp, 00000008
:0040D3F1 894DF8                  mov dword ptr [ebp-08], ecx
:0040D3F4 837D0800                cmp dword ptr [ebp+08], 00000000
:0040D3F8 7507                    jne 0040D401

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:0040D3FA B800040000              mov eax, 00000400
:0040D3FF EB61                    jmp 0040D462

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D3F8(C)
|
:0040D401 8B4508                  mov eax, dword ptr [ebp+08]
:0040D404 8945FC                  mov dword ptr [ebp-04], eax
:0040D407 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D40A 0FBF11                  movsx edx, word ptr [ecx]
:0040D40D 8B45F8                  mov eax, dword ptr [ebp-08]
:0040D410 895004                  mov dword ptr [eax+04], edx
:0040D413 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D416 83C102                  add ecx, 00000002
:0040D419 894D08                  mov dword ptr [ebp+08], ecx
:0040D41C 8B5508                  mov edx, dword ptr [ebp+08]
:0040D41F 0FBF02                  movsx eax, word ptr [edx]
:0040D422 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D425 894108                  mov dword ptr [ecx+08], eax
:0040D428 8B5508                  mov edx, dword ptr [ebp+08]
:0040D42B 83C202                  add edx, 00000002
:0040D42E 895508                  mov dword ptr [ebp+08], edx
:0040D431 8B45F8                  mov eax, dword ptr [ebp-08]
:0040D434 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D437 668B11                  mov dx, word ptr [ecx]
:0040D43A 66895010                mov word ptr [eax+10], dx
:0040D43E 8B4508                  mov eax, dword ptr [ebp+08]
:0040D441 83C002                  add eax, 00000002
:0040D444 894508                  mov dword ptr [ebp+08], eax
:0040D447 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D44A 0FBF11                  movsx edx, word ptr [ecx]
:0040D44D 8B45F8                  mov eax, dword ptr [ebp-08]
:0040D450 895014                  mov dword ptr [eax+14], edx
:0040D453 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D456 83C102                  add ecx, 00000002
:0040D459 894D08                  mov dword ptr [ebp+08], ecx
:0040D45C 8B4508                  mov eax, dword ptr [ebp+08]
:0040D45F 2B45FC                  sub eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D3FF(U)
|
:0040D462 8BE5                    mov esp, ebp
:0040D464 5D                      pop ebp
:0040D465 C20400                  ret 0004


:0040D468 55                      push ebp
:0040D469 8BEC                    mov ebp, esp
:0040D46B 51                      push ecx
:0040D46C 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D46F B805000000              mov eax, 00000005
:0040D474 8BE5                    mov esp, ebp
:0040D476 5D                      pop ebp
:0040D477 C3                      ret



* Referenced by a CALL at Address:
|:0040D767   
|
:0040D478 55                      push ebp
:0040D479 8BEC                    mov ebp, esp
:0040D47B 83EC28                  sub esp, 00000028
:0040D47E 894DE8                  mov dword ptr [ebp-18], ecx
:0040D481 C745F801000000          mov [ebp-08], 00000001
:0040D488 C745F000000000          mov [ebp-10], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040D48F C745FC03000000          mov [ebp-04], 00000003
:0040D496 8B45E8                  mov eax, dword ptr [ebp-18]
:0040D499 8B4814                  mov ecx, dword ptr [eax+14]
:0040D49C 3B4D08                  cmp ecx, dword ptr [ebp+08]
:0040D49F 7E0C                    jle 0040D4AD
:0040D4A1 C745FC01000000          mov [ebp-04], 00000001
:0040D4A8 E9FF010000              jmp 0040D6AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D49F(C)
|
:0040D4AD 8B55E8                  mov edx, dword ptr [ebp-18]
:0040D4B0 C74214FFFFFFFF          mov [edx+14], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D627(C)
|
:0040D4B7 8B45E8                  mov eax, dword ptr [ebp-18]
:0040D4BA 83783400                cmp dword ptr [eax+34], 00000000
:0040D4BE 740C                    je 0040D4CC
:0040D4C0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D4C3 E85AF7FFFF              call 0040CC22
:0040D4C8 668945EC                mov word ptr [ebp-14], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D4BE(C)
|
:0040D4CC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D4CF 8B11                    mov edx, dword ptr [ecx]
:0040D4D1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D4D4 FF5210                  call [edx+10]
:0040D4D7 668945F4                mov word ptr [ebp-0C], ax
:0040D4DB 8B45E8                  mov eax, dword ptr [ebp-18]
:0040D4DE 8B10                    mov edx, dword ptr [eax]
:0040D4E0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D4E3 FF5208                  call [edx+08]
:0040D4E6 8945FC                  mov dword ptr [ebp-04], eax
:0040D4E9 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D4EC 8945E4                  mov dword ptr [ebp-1C], eax
:0040D4EF 837DE408                cmp dword ptr [ebp-1C], 00000008
:0040D4F3 0F8720010000            ja 0040D619
:0040D4F9 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0040D4FC FF248DB7D64000          jmp dword ptr [4*ecx+0040D6B7]
:0040D503 E91B010000              jmp 0040D623
:0040D508 E916010000              jmp 0040D623
:0040D50D 8B55E8                  mov edx, dword ptr [ebp-18]
:0040D510 668B45F4                mov ax, word ptr [ebp-0C]
:0040D514 66894210                mov word ptr [edx+10], ax
:0040D518 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D51B 8B5508                  mov edx, dword ptr [ebp+08]
:0040D51E 895114                  mov dword ptr [ecx+14], edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040D521 B802000000              mov eax, 00000002
:0040D526 E986010000              jmp 0040D6B1
:0040D52B E9F3000000              jmp 0040D623
:0040D530 8B45E8                  mov eax, dword ptr [ebp-18]
:0040D533 8B10                    mov edx, dword ptr [eax]
:0040D535 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D538 FF5208                  call [edx+08]
:0040D53B 8945FC                  mov dword ptr [ebp-04], eax
:0040D53E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D541 8945E0                  mov dword ptr [ebp-20], eax
:0040D544 837DE000                cmp dword ptr [ebp-20], 00000000
:0040D548 740E                    je 0040D558
:0040D54A 837DE001                cmp dword ptr [ebp-20], 00000001
:0040D54E 7411                    je 0040D561
:0040D550 837DE005                cmp dword ptr [ebp-20], 00000005
:0040D554 7414                    je 0040D56A
:0040D556 EB1C                    jmp 0040D574

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D548(C)
|
:0040D558 C745F800000000          mov [ebp-08], 00000000
:0040D55F EB13                    jmp 0040D574

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D54E(C)
|
:0040D561 C745F801000000          mov [ebp-08], 00000001
:0040D568 EB0A                    jmp 0040D574

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D554(C)
|
:0040D56A B801000000              mov eax, 00000001
:0040D56F E93D010000              jmp 0040D6B1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D556(U), :0040D55F(U), :0040D568(U), :0040D6AC(U)
|
:0040D574 837DFC06                cmp dword ptr [ebp-04], 00000006
:0040D578 7506                    jne 0040D580
:0040D57A 837DF800                cmp dword ptr [ebp-08], 00000000
:0040D57E 740F                    je 0040D58F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D578(C)
|
:0040D580 837DFC01                cmp dword ptr [ebp-04], 00000001
:0040D584 7409                    je 0040D58F
:0040D586 C745DC00000000          mov [ebp-24], 00000000
:0040D58D EB07                    jmp 0040D596

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D57E(C), :0040D584(C)
|
:0040D58F C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D58D(U)
|
:0040D596 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D599 83C101                  add ecx, 00000001
:0040D59C 51                      push ecx
:0040D59D 8B55DC                  mov edx, dword ptr [ebp-24]
:0040D5A0 52                      push edx
:0040D5A1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D5A4 E84A010000              call 0040D6F3
:0040D5A9 8945D8                  mov dword ptr [ebp-28], eax
:0040D5AC 837DD805                cmp dword ptr [ebp-28], 00000005
:0040D5B0 773E                    ja 0040D5F0
:0040D5B2 8B45D8                  mov eax, dword ptr [ebp-28]
:0040D5B5 FF2485DBD64000          jmp dword ptr [4*eax+0040D6DB]
:0040D5BC EB3C                    jmp 0040D5FA
:0040D5BE B801000000              mov eax, 00000001
:0040D5C3 E9E9000000              jmp 0040D6B1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040D5C8 B802000000              mov eax, 00000002
:0040D5CD E9DF000000              jmp 0040D6B1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040D5D2 B803000000              mov eax, 00000003
:0040D5D7 E9D5000000              jmp 0040D6B1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D5DC B804000000              mov eax, 00000004
:0040D5E1 E9CB000000              jmp 0040D6B1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D5E6 B805000000              mov eax, 00000005
:0040D5EB E9C1000000              jmp 0040D6B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D5B0(C)
|
:0040D5F0 B801000000              mov eax, 00000001
:0040D5F5 E9B7000000              jmp 0040D6B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D5BC(U)
|
:0040D5FA EB27                    jmp 0040D623
:0040D5FC C745F001000000          mov [ebp-10], 00000001
:0040D603 EB1E                    jmp 0040D623
:0040D605 B801000000              mov eax, 00000001
:0040D60A E9A2000000              jmp 0040D6B1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040D60F B805000000              mov eax, 00000005
:0040D614 E998000000              jmp 0040D6B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D4F3(C)
|
:0040D619 B801000000              mov eax, 00000001
:0040D61E E98E000000              jmp 0040D6B1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D503(U), :0040D508(U), :0040D52B(U), :0040D5FA(U), :0040D603(U)
|
:0040D623 837DFC03                cmp dword ptr [ebp-04], 00000003
:0040D627 0F858AFEFFFF            jne 0040D4B7
:0040D62D 837DF000                cmp dword ptr [ebp-10], 00000000
:0040D631 7513                    jne 0040D646
:0040D633 837D0800                cmp dword ptr [ebp+08], 00000000
:0040D637 754E                    jne 0040D687
:0040D639 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D63C E88F010000              call 0040D7D0
:0040D641 83F801                  cmp eax, 00000001
:0040D644 7541                    jne 0040D687

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D631(C)
|
:0040D646 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D649 8B5104                  mov edx, dword ptr [ecx+04]
:0040D64C 83C201                  add edx, 00000001
:0040D64F 8B45E8                  mov eax, dword ptr [ebp-18]
:0040D652 895004                  mov dword ptr [eax+04], edx
:0040D655 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D658 C7410800000000          mov [ecx+08], 00000000
:0040D65F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D662 E860F5FFFF              call 0040CBC7
:0040D667 8B55E8                  mov edx, dword ptr [ebp-18]
:0040D66A 394204                  cmp dword ptr [edx+04], eax
:0040D66D 7C11                    jl 0040D680
:0040D66F 8B45E8                  mov eax, dword ptr [ebp-18]
:0040D672 C7402800000000          mov [eax+28], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D679 B804000000              mov eax, 00000004
:0040D67E EB31                    jmp 0040D6B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D66D(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040D680 B803000000              mov eax, 00000003
:0040D685 EB2A                    jmp 0040D6B1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D637(C), :0040D644(C)
|
:0040D687 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D68A E838F5FFFF              call 0040CBC7
:0040D68F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0040D692 394104                  cmp dword ptr [ecx+04], eax
:0040D695 7C11                    jl 0040D6A8
:0040D697 8B55E8                  mov edx, dword ptr [ebp-18]
:0040D69A C7422800000000          mov [edx+28], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D6A1 B804000000              mov eax, 00000004
:0040D6A6 EB09                    jmp 0040D6B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D695(C)
|
:0040D6A8 33C0                    xor eax, eax
:0040D6AA EB05                    jmp 0040D6B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D4A8(U)
|
:0040D6AC E9C3FEFFFF              jmp 0040D574

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D526(U), :0040D56F(U), :0040D5C3(U), :0040D5CD(U), :0040D5D7(U)
|:0040D5E1(U), :0040D5EB(U), :0040D5F5(U), :0040D60A(U), :0040D614(U)
|:0040D61E(U), :0040D67E(U), :0040D685(U), :0040D6A6(U), :0040D6AA(U)
|
:0040D6B1 8BE5                    mov esp, ebp
:0040D6B3 5D                      pop ebp
:0040D6B4 C20400                  ret 0004



:0040D6B7 03D54000                DWORD 0040D503
:0040D6BB 08D54000                DWORD 0040D508
:0040D6BF 0DD54000                DWORD 0040D50D
:0040D6C3 2BD54000                DWORD 0040D52B
:0040D6C7 30D54000                DWORD 0040D530
:0040D6CB 05D64000                DWORD 0040D605
:0040D6CF 19D64000                DWORD 0040D619
:0040D6D3 FCD54000                DWORD 0040D5FC
:0040D6D7 0FD64000                DWORD 0040D60F
:0040D6DB BCD54000                DWORD 0040D5BC
:0040D6DF BED54000                DWORD 0040D5BE
:0040D6E3 C8D54000                DWORD 0040D5C8
:0040D6E7 D2D54000                DWORD 0040D5D2
:0040D6EB DCD54000                DWORD 0040D5DC
:0040D6EF E6D54000                DWORD 0040D5E6



* Referenced by a CALL at Addresses:
|:0040C17A   , :0040C1C7   , :0040C3FD   , :0040C44A   , :0040D5A4   
|
:0040D6F3 55                      push ebp
:0040D6F4 8BEC                    mov ebp, esp
:0040D6F6 83EC0C                  sub esp, 0000000C
:0040D6F9 894DF4                  mov dword ptr [ebp-0C], ecx
:0040D6FC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D6FF E82CF3FFFF              call 0040CA30
:0040D704 85C0                    test eax, eax
:0040D706 7507                    jne 0040D70F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040D708 B804000000              mov eax, 00000004
:0040D70D EB79                    jmp 0040D788

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D706(C)
|
:0040D70F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040D712 83781400                cmp dword ptr [eax+14], 00000000
:0040D716 7D48                    jge 0040D760
:0040D718 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0040D71C 750A                    jne 0040D728
:0040D71E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D721 C7412C01000000          mov [ecx+2C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D71C(C)
|
:0040D728 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D72B E8F2F4FFFF              call 0040CC22
:0040D730 668945F8                mov word ptr [ebp-08], ax
:0040D734 837D0800                cmp dword ptr [ebp+08], 00000000
:0040D738 7526                    jne 0040D760
:0040D73A 8B55F8                  mov edx, dword ptr [ebp-08]
:0040D73D 81E2FFFF0000            and edx, 0000FFFF
:0040D743 52                      push edx
:0040D744 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D747 E82FF4FFFF              call 0040CB7B
:0040D74C 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0040D750 750A                    jne 0040D75C
:0040D752 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040D755 C7402C00000000          mov [eax+2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D750(C)
|
:0040D75C 33C0                    xor eax, eax
:0040D75E EB28                    jmp 0040D788

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D716(C), :0040D738(C)
|
:0040D760 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040D763 51                      push ecx
:0040D764 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D767 E80CFDFFFF              call 0040D478
:0040D76C 8945FC                  mov dword ptr [ebp-04], eax
:0040D76F 837DFC02                cmp dword ptr [ebp-04], 00000002
:0040D773 7410                    je 0040D785
:0040D775 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0040D779 750A                    jne 0040D785
:0040D77B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040D77E C7422C00000000          mov [edx+2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D773(C), :0040D779(C)
|
:0040D785 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D70D(U), :0040D75E(U)
|
:0040D788 8BE5                    mov esp, ebp
:0040D78A 5D                      pop ebp
:0040D78B C20800                  ret 0008


:0040D78E 55                      push ebp
:0040D78F 8BEC                    mov ebp, esp
:0040D791 51                      push ecx
:0040D792 894DFC                  mov dword ptr [ebp-04], ecx
:0040D795 B801000000              mov eax, 00000001
:0040D79A 8BE5                    mov esp, ebp
:0040D79C 5D                      pop ebp
:0040D79D C20400                  ret 0004


:0040D7A0 55                      push ebp
:0040D7A1 8BEC                    mov ebp, esp
:0040D7A3 51                      push ecx
:0040D7A4 894DFC                  mov dword ptr [ebp-04], ecx
:0040D7A7 B801000000              mov eax, 00000001
:0040D7AC 8BE5                    mov esp, ebp
:0040D7AE 5D                      pop ebp
:0040D7AF C3                      ret



* Referenced by a CALL at Address:
|:0040CFDD   
|
:0040D7B0 55                      push ebp
:0040D7B1 8BEC                    mov ebp, esp
:0040D7B3 51                      push ecx
:0040D7B4 894DFC                  mov dword ptr [ebp-04], ecx
:0040D7B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D7BA 8B402C                  mov eax, dword ptr [eax+2C]
:0040D7BD 8BE5                    mov esp, ebp
:0040D7BF 5D                      pop ebp
:0040D7C0 C3                      ret


:0040D7C1 CC                      int 03
:0040D7C2 CC                      int 03
:0040D7C3 CC                      int 03
:0040D7C4 CC                      int 03
:0040D7C5 CC                      int 03
:0040D7C6 CC                      int 03
:0040D7C7 CC                      int 03
:0040D7C8 CC                      int 03
:0040D7C9 CC                      int 03
:0040D7CA CC                      int 03
:0040D7CB CC                      int 03
:0040D7CC CC                      int 03
:0040D7CD CC                      int 03
:0040D7CE CC                      int 03
:0040D7CF CC                      int 03

* Referenced by a CALL at Address:
|:0040D63C   
|
:0040D7D0 55                      push ebp
:0040D7D1 8BEC                    mov ebp, esp
:0040D7D3 51                      push ecx
:0040D7D4 894DFC                  mov dword ptr [ebp-04], ecx
:0040D7D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D7DA 8B4024                  mov eax, dword ptr [eax+24]
:0040D7DD 8BE5                    mov esp, ebp
:0040D7DF 5D                      pop ebp
:0040D7E0 C3                      ret


:0040D7E1 CC                      int 03
:0040D7E2 CC                      int 03
:0040D7E3 CC                      int 03
:0040D7E4 CC                      int 03
:0040D7E5 CC                      int 03
:0040D7E6 CC                      int 03
:0040D7E7 CC                      int 03
:0040D7E8 CC                      int 03
:0040D7E9 CC                      int 03
:0040D7EA CC                      int 03
:0040D7EB CC                      int 03
:0040D7EC CC                      int 03
:0040D7ED CC                      int 03
:0040D7EE CC                      int 03
:0040D7EF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040D85A   , :0040D89D   
|
:0040D7F0 55                      push ebp
:0040D7F1 8BEC                    mov ebp, esp
:0040D7F3 837D0800                cmp dword ptr [ebp+08], 00000000
:0040D7F7 7423                    je 0040D81C
:0040D7F9 8B4508                  mov eax, dword ptr [ebp+08]
:0040D7FC 50                      push eax
:0040D7FD 68A0A14800              push 0048A1A0
:0040D802 E849210600              call 0046F950
:0040D807 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->"\"
                                  |
:0040D80A 687CC34700              push 0047C37C
:0040D80F 68A0A14800              push 0048A1A0
:0040D814 E847210600              call 0046F960
:0040D819 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D7F7(C)
|
:0040D81C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040D81F 51                      push ecx
:0040D820 68A0A14800              push 0048A1A0
:0040D825 E836210600              call 0046F960
:0040D82A 83C408                  add esp, 00000008
:0040D82D B8A0A14800              mov eax, 0048A1A0
:0040D832 5D                      pop ebp
:0040D833 C3                      ret



* Referenced by a CALL at Addresses:
|:00405401   , :00405514   , :0040D950   , :0040E8AE   , :0040EF53   
|:0045ADF0   , :004696B5   , :004696E8   , :00469AE2   , :00469C2E   
|:00469C58   , :00469C76   , :00469CC0   , :00469E09   
|
:0040D834 55                      push ebp
:0040D835 8BEC                    mov ebp, esp
:0040D837 81EC04010000            sub esp, 00000104
:0040D83D 8D85FCFEFFFF            lea eax, dword ptr [ebp+FFFFFEFC]
:0040D843 50                      push eax
:0040D844 6804010000              push 00000104

* Reference To: KERNEL32.GetCurrentDirectoryA, Ord:00D1h
                                  |
:0040D849 FF15E4D44B00            Call dword ptr [004BD4E4]
:0040D84F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D852 51                      push ecx
:0040D853 8D95FCFEFFFF            lea edx, dword ptr [ebp+FFFFFEFC]
:0040D859 52                      push edx
:0040D85A E891FFFFFF              call 0040D7F0
:0040D85F 83C408                  add esp, 00000008
:0040D862 8BE5                    mov esp, ebp
:0040D864 5D                      pop ebp
:0040D865 C3                      ret



* Referenced by a CALL at Addresses:
|:0040D9BF   , :00410BF7   
|
:0040D866 55                      push ebp
:0040D867 8BEC                    mov ebp, esp
:0040D869 81EC04010000            sub esp, 00000104

* Possible StringData Ref from Data Obj ->"D:"
                                  |
:0040D86F 6880C34700              push 0047C380
:0040D874 8D85FCFEFFFF            lea eax, dword ptr [ebp+FFFFFEFC]
:0040D87A 50                      push eax
:0040D87B E8D0200600              call 0046F950
:0040D880 83C408                  add esp, 00000008
:0040D883 8D8DFCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEFC]
:0040D889 51                      push ecx
:0040D88A E876040000              call 0040DD05
:0040D88F 83C404                  add esp, 00000004
:0040D892 8B5508                  mov edx, dword ptr [ebp+08]
:0040D895 52                      push edx
:0040D896 8D85FCFEFFFF            lea eax, dword ptr [ebp+FFFFFEFC]
:0040D89C 50                      push eax
:0040D89D E84EFFFFFF              call 0040D7F0
:0040D8A2 83C408                  add esp, 00000008
:0040D8A5 8BE5                    mov esp, ebp
:0040D8A7 5D                      pop ebp
:0040D8A8 C3                      ret



* Referenced by a CALL at Addresses:
|:0040566A   , :0040BDAA   , :0040BFDC   , :0040C144   , :0040E317   
|:0040E45C   , :0040E4AF   , :0040E4F1   , :0040E567   , :0040E61E   
|:0040E927   , :0040EC90   , :0040EFE1   , :0040F0FE   , :0040F1D9   
|:0040F321   , :0042E8EB   , :0042EB0F   , :0042EE8F   , :0046EF58   
|:0046EF90   , :0046EFBD   , :00479563   , :00479576   , :00479589   
|:004795C3   , :004795D9   , :004795EC   , :00479602   , :004797CF   
|:004797E2   , :00479AB3   
|
:0040D8A9 55                      push ebp
:0040D8AA 8BEC                    mov ebp, esp
:0040D8AC 51                      push ecx
:0040D8AD 894DFC                  mov dword ptr [ebp-04], ecx
:0040D8B0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040D8B3 E86D030000              call 0040DC25
:0040D8B8 8BE5                    mov esp, ebp
:0040D8BA 5D                      pop ebp
:0040D8BB C3                      ret



* Referenced by a CALL at Addresses:
|:0040BBC8   , :0040BDF8   , :0040C0EC   , :0040E0AC   , :0040E43C   
|:0040E5A0   , :0040E893   , :0040EEAF   , :0040EF38   , :0040F0E8   
|:0040F14E   , :004111E5   , :00411236   , :0042EA76   , :0042ED95   
|:0042EE05   , :0046EF3E   
|
:0040D8BC 55                      push ebp
:0040D8BD 8BEC                    mov ebp, esp
:0040D8BF 83EC10                  sub esp, 00000010
:0040D8C2 894DF4                  mov dword ptr [ebp-0C], ecx
:0040D8C5 8B450C                  mov eax, dword ptr [ebp+0C]
:0040D8C8 25FFFF0000              and eax, 0000FFFF
:0040D8CD 8945F0                  mov dword ptr [ebp-10], eax
:0040D8D0 837DF006                cmp dword ptr [ebp-10], 00000006
:0040D8D4 7740                    ja 0040D916
:0040D8D6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0040D8D9 FF248DFFD94000          jmp dword ptr [4*ecx+0040D9FF]
:0040D8E0 C745F800000040          mov [ebp-08], 40000000
:0040D8E7 EB34                    jmp 0040D91D
:0040D8E9 C745F800000040          mov [ebp-08], 40000000
:0040D8F0 EB2B                    jmp 0040D91D
:0040D8F2 C745F800000080          mov [ebp-08], 80000000
:0040D8F9 EB22                    jmp 0040D91D
:0040D8FB C745F800000080          mov [ebp-08], 80000000
:0040D902 EB19                    jmp 0040D91D
:0040D904 C745F8000000C0          mov [ebp-08], C0000000
:0040D90B EB10                    jmp 0040D91D
:0040D90D C745F8000000C0          mov [ebp-08], C0000000
:0040D914 EB07                    jmp 0040D91D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D8D4(C)
|
:0040D916 C745F800000080          mov [ebp-08], 80000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D8E7(U), :0040D8F0(U), :0040D8F9(U), :0040D902(U), :0040D90B(U)
|:0040D914(U)
|
:0040D91D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040D920 833A00                  cmp dword ptr [edx], 00000000
:0040D923 0F85CB000000            jne 0040D9F4
:0040D929 C745FC00000000          mov [ebp-04], 00000000
:0040D930 EB09                    jmp 0040D93B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D981(U)
|
:0040D932 8B45FC                  mov eax, dword ptr [ebp-04]
:0040D935 83C001                  add eax, 00000001
:0040D938 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D930(U)
|
:0040D93B 6A00                    push 00000000
:0040D93D 6880000000              push 00000080

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040D942 6A03                    push 00000003
:0040D944 6A00                    push 00000000
:0040D946 6A01                    push 00000001
:0040D948 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040D94B 51                      push ecx
:0040D94C 8B5508                  mov edx, dword ptr [ebp+08]
:0040D94F 52                      push edx
:0040D950 E8DFFEFFFF              call 0040D834
:0040D955 83C404                  add esp, 00000004
:0040D958 50                      push eax

* Reference To: KERNEL32.CreateFileA, Ord:0031h
                                  |
:0040D959 FF15D4D44B00            Call dword ptr [004BD4D4]
:0040D95F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D962 8901                    mov dword ptr [ecx], eax
:0040D964 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040D967 833AFF                  cmp dword ptr [edx], FFFFFFFF
:0040D96A 7513                    jne 0040D97F
:0040D96C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040D96F C70000000000            mov dword ptr [eax], 00000000
:0040D975 837DFC05                cmp dword ptr [ebp-04], 00000005
:0040D979 7E02                    jle 0040D97D
:0040D97B EB06                    jmp 0040D983

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D979(C)
|
:0040D97D EB02                    jmp 0040D981

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D96A(C)
|
:0040D97F EB02                    jmp 0040D983

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D97D(U)
|
:0040D981 EBAF                    jmp 0040D932

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D97B(U), :0040D97F(U)
|
:0040D983 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D986 833900                  cmp dword ptr [ecx], 00000000
:0040D989 7569                    jne 0040D9F4
:0040D98B 817DF800000040          cmp dword ptr [ebp-08], 40000000
:0040D992 7504                    jne 0040D998
:0040D994 33C0                    xor eax, eax
:0040D996 EB61                    jmp 0040D9F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D992(C)
|
:0040D998 C745FC00000000          mov [ebp-04], 00000000
:0040D99F EB09                    jmp 0040D9AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D9F2(U)
|
:0040D9A1 8B55FC                  mov edx, dword ptr [ebp-04]
:0040D9A4 83C201                  add edx, 00000001
:0040D9A7 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D99F(U)
|
:0040D9AA 6A00                    push 00000000
:0040D9AC 6880000000              push 00000080

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040D9B1 6A03                    push 00000003
:0040D9B3 6A00                    push 00000000
:0040D9B5 6A01                    push 00000001
:0040D9B7 8B45F8                  mov eax, dword ptr [ebp-08]
:0040D9BA 50                      push eax
:0040D9BB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040D9BE 51                      push ecx
:0040D9BF E8A2FEFFFF              call 0040D866
:0040D9C4 83C404                  add esp, 00000004
:0040D9C7 50                      push eax

* Reference To: KERNEL32.CreateFileA, Ord:0031h
                                  |
:0040D9C8 FF15D4D44B00            Call dword ptr [004BD4D4]
:0040D9CE 8B55F4                  mov edx, dword ptr [ebp-0C]
:0040D9D1 8902                    mov dword ptr [edx], eax
:0040D9D3 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040D9D6 8338FF                  cmp dword ptr [eax], FFFFFFFF
:0040D9D9 7515                    jne 0040D9F0
:0040D9DB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040D9DE C70100000000            mov dword ptr [ecx], 00000000
:0040D9E4 837DFC05                cmp dword ptr [ebp-04], 00000005
:0040D9E8 7E04                    jle 0040D9EE
:0040D9EA 33C0                    xor eax, eax
:0040D9EC EB0B                    jmp 0040D9F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D9E8(C)
|
:0040D9EE EB02                    jmp 0040D9F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D9D9(C)
|
:0040D9F0 EB02                    jmp 0040D9F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040D9EE(U)
|
:0040D9F2 EBAD                    jmp 0040D9A1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D923(C), :0040D989(C), :0040D9F0(U)
|
:0040D9F4 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040D996(U), :0040D9EC(U)
|
:0040D9F9 8BE5                    mov esp, ebp
:0040D9FB 5D                      pop ebp
:0040D9FC C20800                  ret 0008



:0040D9FF F2D84000                DWORD 0040D8F2
:0040DA03 E0D84000                DWORD 0040D8E0
:0040DA07 04D94000                DWORD 0040D904
:0040DA0B 16D94000                DWORD 0040D916
:0040DA0F FBD84000                DWORD 0040D8FB
:0040DA13 E9D84000                DWORD 0040D8E9
:0040DA17 0DD94000                DWORD 0040D90D



* Referenced by a CALL at Addresses:
|:0040E8BD   , :0040EF5F   
|
:0040DA1B 55                      push ebp
:0040DA1C 8BEC                    mov ebp, esp
:0040DA1E 51                      push ecx
:0040DA1F 894DFC                  mov dword ptr [ebp-04], ecx
:0040DA22 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DA25 833800                  cmp dword ptr [eax], 00000000
:0040DA28 752D                    jne 0040DA57
:0040DA2A 6A00                    push 00000000
:0040DA2C 6880000000              push 00000080

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040DA31 6A04                    push 00000004
:0040DA33 6A00                    push 00000000
:0040DA35 6A01                    push 00000001
:0040DA37 68000000C0              push C0000000
:0040DA3C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DA3F 51                      push ecx

* Reference To: KERNEL32.CreateFileA, Ord:0031h
                                  |
:0040DA40 FF15D4D44B00            Call dword ptr [004BD4D4]
:0040DA46 8B55FC                  mov edx, dword ptr [ebp-04]
:0040DA49 8902                    mov dword ptr [edx], eax
:0040DA4B 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DA4E 8338FF                  cmp dword ptr [eax], FFFFFFFF
:0040DA51 7504                    jne 0040DA57
:0040DA53 33C0                    xor eax, eax
:0040DA55 EB05                    jmp 0040DA5C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DA28(C), :0040DA51(C)
|
:0040DA57 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DA55(U)
|
:0040DA5C 8BE5                    mov esp, ebp
:0040DA5E 5D                      pop ebp
:0040DA5F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040DAD9   , :0040DB04   
|
:0040DA62 55                      push ebp
:0040DA63 8BEC                    mov ebp, esp
:0040DA65 83EC10                  sub esp, 00000010
:0040DA68 894DF0                  mov dword ptr [ebp-10], ecx
:0040DA6B 8B45F0                  mov eax, dword ptr [ebp-10]
:0040DA6E 833800                  cmp dword ptr [eax], 00000000
:0040DA71 7447                    je 0040DABA
:0040DA73 C745F400000000          mov [ebp-0C], 00000000
:0040DA7A EB09                    jmp 0040DA85

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DAB6(U)
|
:0040DA7C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040DA7F 83C101                  add ecx, 00000001
:0040DA82 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DA7A(U)
|
:0040DA85 6A00                    push 00000000
:0040DA87 8D55FC                  lea edx, dword ptr [ebp-04]
:0040DA8A 52                      push edx
:0040DA8B 8B450C                  mov eax, dword ptr [ebp+0C]
:0040DA8E 50                      push eax
:0040DA8F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DA92 51                      push ecx
:0040DA93 8B55F0                  mov edx, dword ptr [ebp-10]
:0040DA96 8B02                    mov eax, dword ptr [edx]
:0040DA98 50                      push eax

* Reference To: KERNEL32.ReadFile, Ord:01D6h
                                  |
:0040DA99 FF15DCD44B00            Call dword ptr [004BD4DC]
:0040DA9F 8945F8                  mov dword ptr [ebp-08], eax
:0040DAA2 837DF800                cmp dword ptr [ebp-08], 00000000
:0040DAA6 750C                    jne 0040DAB4
:0040DAA8 837DF405                cmp dword ptr [ebp-0C], 00000005
:0040DAAC 7E04                    jle 0040DAB2
:0040DAAE 33C0                    xor eax, eax
:0040DAB0 EB0F                    jmp 0040DAC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DAAC(C)
|
:0040DAB2 EB02                    jmp 0040DAB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DAA6(C)
|
:0040DAB4 EB02                    jmp 0040DAB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DAB2(U)
|
:0040DAB6 EBC4                    jmp 0040DA7C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DAB4(U)
|
:0040DAB8 EB04                    jmp 0040DABE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DA71(C)
|
:0040DABA 33C0                    xor eax, eax
:0040DABC EB03                    jmp 0040DAC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DAB8(U)
|
:0040DABE 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DAB0(U), :0040DABC(U)
|
:0040DAC1 8BE5                    mov esp, ebp
:0040DAC3 5D                      pop ebp
:0040DAC4 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040BBFF   , :0040BC1A   , :0040BC35   , :0040BC50   , :0040BC6B   
|:0040BC86   , :0040BCA1   , :0040BCBC   , :0040BCD8   , :0040BCEB   
|:0040BCFF   , :0040BD13   , :0040BD43   , :0040BD59   , :0040BD6D   
|:0040BD7B   , :0040E0BD   , :0040E47A   , :0040E5B6   , :0040F117   
|:0040F168   , :0041106E   , :00411389   , :00411527   , :0046EF6E   
|
:0040DAC7 55                      push ebp
:0040DAC8 8BEC                    mov ebp, esp
:0040DACA 51                      push ecx
:0040DACB 894DFC                  mov dword ptr [ebp-04], ecx
:0040DACE 8B450C                  mov eax, dword ptr [ebp+0C]
:0040DAD1 50                      push eax
:0040DAD2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DAD5 51                      push ecx
:0040DAD6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DAD9 E884FFFFFF              call 0040DA62
:0040DADE 8BE5                    mov esp, ebp
:0040DAE0 5D                      pop ebp
:0040DAE1 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00403599   , :0040C118   , :00411216   , :00411267   , :0042EA93   
|:0042EE22   , :0045DF98   
|
:0040DAE4 55                      push ebp
:0040DAE5 8BEC                    mov ebp, esp
:0040DAE7 51                      push ecx
:0040DAE8 894DFC                  mov dword ptr [ebp-04], ecx
:0040DAEB 6A00                    push 00000000
:0040DAED 8B4508                  mov eax, dword ptr [ebp+08]
:0040DAF0 50                      push eax
:0040DAF1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DAF4 E816000000              call 0040DB0F
:0040DAF9 8B4D10                  mov ecx, dword ptr [ebp+10]
:0040DAFC 51                      push ecx
:0040DAFD 8B550C                  mov edx, dword ptr [ebp+0C]
:0040DB00 52                      push edx
:0040DB01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DB04 E859FFFFFF              call 0040DA62
:0040DB09 8BE5                    mov esp, ebp
:0040DB0B 5D                      pop ebp
:0040DB0C C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0040DAF4   , :0040DB91   , :0040DC0A   
|
:0040DB0F 55                      push ebp
:0040DB10 8BEC                    mov ebp, esp
:0040DB12 83EC0C                  sub esp, 0000000C
:0040DB15 894DF8                  mov dword ptr [ebp-08], ecx
:0040DB18 C745FC00000000          mov [ebp-04], 00000000
:0040DB1F 8B450C                  mov eax, dword ptr [ebp+0C]
:0040DB22 8945F4                  mov dword ptr [ebp-0C], eax
:0040DB25 837DF400                cmp dword ptr [ebp-0C], 00000000
:0040DB29 740E                    je 0040DB39
:0040DB2B 837DF401                cmp dword ptr [ebp-0C], 00000001
:0040DB2F 7411                    je 0040DB42
:0040DB31 837DF402                cmp dword ptr [ebp-0C], 00000002
:0040DB35 7414                    je 0040DB4B
:0040DB37 EB1B                    jmp 0040DB54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DB29(C)
|
:0040DB39 C745FC00000000          mov [ebp-04], 00000000
:0040DB40 EB19                    jmp 0040DB5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DB2F(C)
|
:0040DB42 C745FC01000000          mov [ebp-04], 00000001
:0040DB49 EB10                    jmp 0040DB5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DB35(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040DB4B C745FC02000000          mov [ebp-04], 00000002
:0040DB52 EB07                    jmp 0040DB5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DB37(U)
|
:0040DB54 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DB40(U), :0040DB49(U), :0040DB52(U)
|
:0040DB5B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040DB5E 833900                  cmp dword ptr [ecx], 00000000
:0040DB61 7416                    je 0040DB79
:0040DB63 8B55FC                  mov edx, dword ptr [ebp-04]
:0040DB66 52                      push edx
:0040DB67 6A00                    push 00000000
:0040DB69 8B4508                  mov eax, dword ptr [ebp+08]
:0040DB6C 50                      push eax
:0040DB6D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040DB70 8B11                    mov edx, dword ptr [ecx]
:0040DB72 52                      push edx

* Reference To: KERNEL32.SetFilePointer, Ord:0219h
                                  |
:0040DB73 FF15D8D44B00            Call dword ptr [004BD4D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DB61(C)
|
:0040DB79 8BE5                    mov esp, ebp
:0040DB7B 5D                      pop ebp
:0040DB7C C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00411375   , :00411509   
|
:0040DB7F 55                      push ebp
:0040DB80 8BEC                    mov ebp, esp
:0040DB82 51                      push ecx
:0040DB83 894DFC                  mov dword ptr [ebp-04], ecx
:0040DB86 8B450C                  mov eax, dword ptr [ebp+0C]
:0040DB89 50                      push eax
:0040DB8A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DB8D 51                      push ecx
:0040DB8E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DB91 E879FFFFFF              call 0040DB0F
:0040DB96 8BE5                    mov esp, ebp
:0040DB98 5D                      pop ebp
:0040DB99 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040DBEF   , :0040DC1A   
|
:0040DB9C 55                      push ebp
:0040DB9D 8BEC                    mov ebp, esp
:0040DB9F 83EC0C                  sub esp, 0000000C
:0040DBA2 894DF4                  mov dword ptr [ebp-0C], ecx
:0040DBA5 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040DBA8 833800                  cmp dword ptr [eax], 00000000
:0040DBAB 7427                    je 0040DBD4
:0040DBAD 6A00                    push 00000000
:0040DBAF 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0040DBB2 51                      push ecx
:0040DBB3 8B550C                  mov edx, dword ptr [ebp+0C]
:0040DBB6 52                      push edx
:0040DBB7 8B4508                  mov eax, dword ptr [ebp+08]
:0040DBBA 50                      push eax
:0040DBBB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040DBBE 8B11                    mov edx, dword ptr [ecx]
:0040DBC0 52                      push edx

* Reference To: KERNEL32.WriteFile, Ord:027Bh
                                  |
:0040DBC1 FF15C8D44B00            Call dword ptr [004BD4C8]
:0040DBC7 8945F8                  mov dword ptr [ebp-08], eax
:0040DBCA 837DF800                cmp dword ptr [ebp-08], 00000000
:0040DBCE 7504                    jne 0040DBD4
:0040DBD0 33C0                    xor eax, eax
:0040DBD2 EB03                    jmp 0040DBD7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DBAB(C), :0040DBCE(C)
|
:0040DBD4 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DBD2(U)
|
:0040DBD7 8BE5                    mov esp, ebp
:0040DBD9 5D                      pop ebp
:0040DBDA C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040BE2F   , :0040BE4A   , :0040BE65   , :0040BE80   , :0040BE9B   
|:0040BEB6   , :0040BED1   , :0040BEEC   , :0040BF08   , :0040BF1B   
|:0040BF2F   , :0040BF43   , :0040BF73   , :0040BF89   , :0040BF9D   
|:0040BFBC   , :0040EED4   
|
:0040DBDD 55                      push ebp
:0040DBDE 8BEC                    mov ebp, esp
:0040DBE0 51                      push ecx
:0040DBE1 894DFC                  mov dword ptr [ebp-04], ecx
:0040DBE4 8B450C                  mov eax, dword ptr [ebp+0C]
:0040DBE7 50                      push eax
:0040DBE8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DBEB 51                      push ecx
:0040DBEC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DBEF E8A8FFFFFF              call 0040DB9C
:0040DBF4 8BE5                    mov esp, ebp
:0040DBF6 5D                      pop ebp
:0040DBF7 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040EFA1   , :0045DF45   
|
:0040DBFA 55                      push ebp
:0040DBFB 8BEC                    mov ebp, esp
:0040DBFD 51                      push ecx
:0040DBFE 894DFC                  mov dword ptr [ebp-04], ecx
:0040DC01 6A00                    push 00000000
:0040DC03 8B4508                  mov eax, dword ptr [ebp+08]
:0040DC06 50                      push eax
:0040DC07 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DC0A E800FFFFFF              call 0040DB0F
:0040DC0F 8B4D10                  mov ecx, dword ptr [ebp+10]
:0040DC12 51                      push ecx
:0040DC13 8B550C                  mov edx, dword ptr [ebp+0C]
:0040DC16 52                      push edx
:0040DC17 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DC1A E87DFFFFFF              call 0040DB9C
:0040DC1F 8BE5                    mov esp, ebp
:0040DC21 5D                      pop ebp
:0040DC22 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:004037C0   , :00403846   , :004051C5   , :004052E4   , :0040BD95   
|:0040BFC7   , :0040C123   , :0040D8B3   , :0040DC6B   , :0040E0C5   
|:0040E485   , :0040E5C7   , :0040E8D9   , :0040EEE2   , :0040EFAF   
|:0040F122   , :0040F173   , :0040F3B8   , :0040F3E7   , :00410006   
|:0041AAEA   , :0041D1FC   , :004217E2   , :00421846   , :00424400   
|:00424465   , :00426558   , :004265A9   , :0042A542   , :0042A6E0   
|:0042AB63   , :0042BBF5   , :0042BEB1   , :0042C2DC   , :0042C64C   
|:0042C851   , :0042CF9A   , :0042D093   , :0042D18C   , :0042EA9E   
|:0042EAD1   , :0042EDA4   , :0042EDAE   , :0042EDB8   , :0042EE2F   
|:00432AAB   , :00432ACD   , :00434508   , :0043461F   , :00442D0C   
|:00443147   , :004433CE   , :00445005   , :00445034   , :00445A1E   
|:00445A50   , :00445B88   , :00445BBA   , :004469C1   , :00446BE3   
|:00446E94   , :00446EC6   , :00446FA5   , :00446FD7   , :004470C5   
|:004470F7   , :00447536   , :00447568   , :004478AF   , :00458096   
|:004580C5   , :00458AB0   , :0045A292   , :0045A4E5   , :0045BD56   
|:0045BDB8   , :0045C5AB   , :0045C833   , :0046BF30   , :0046EF7A   
|:0046EF9D   
|
:0040DC25 55                      push ebp
:0040DC26 8BEC                    mov ebp, esp
:0040DC28 51                      push ecx
:0040DC29 894DFC                  mov dword ptr [ebp-04], ecx
:0040DC2C 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DC2F 833800                  cmp dword ptr [eax], 00000000
:0040DC32 7424                    je 0040DC58
:0040DC34 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DC37 8B11                    mov edx, dword ptr [ecx]
:0040DC39 52                      push edx

* Reference To: KERNEL32.CloseHandle, Ord:0018h
                                  |
:0040DC3A FF15D0D44B00            Call dword ptr [004BD4D0]
:0040DC40 85C0                    test eax, eax
:0040DC42 7410                    je 0040DC54
:0040DC44 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DC47 C70000000000            mov dword ptr [eax], 00000000
:0040DC4D B801000000              mov eax, 00000001
:0040DC52 EB09                    jmp 0040DC5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DC42(C)
|
:0040DC54 33C0                    xor eax, eax
:0040DC56 EB05                    jmp 0040DC5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DC32(C)
|
:0040DC58 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DC52(U), :0040DC56(U)
|
:0040DC5D 8BE5                    mov esp, ebp
:0040DC5F 5D                      pop ebp
:0040DC60 C3                      ret


:0040DC61 55                      push ebp
:0040DC62 8BEC                    mov ebp, esp
:0040DC64 51                      push ecx
:0040DC65 894DFC                  mov dword ptr [ebp-04], ecx
:0040DC68 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040DC6B E8B5FFFFFF              call 0040DC25
:0040DC70 8B4508                  mov eax, dword ptr [ebp+08]
:0040DC73 50                      push eax

* Reference To: KERNEL32.DeleteFileA, Ord:004Eh
                                  |
:0040DC74 FF15CCD44B00            Call dword ptr [004BD4CC]
:0040DC7A 8BE5                    mov esp, ebp
:0040DC7C 5D                      pop ebp
:0040DC7D C20400                  ret 0004


:0040DC80 55                      push ebp
:0040DC81 8BEC                    mov ebp, esp
:0040DC83 51                      push ecx
:0040DC84 894DFC                  mov dword ptr [ebp-04], ecx
:0040DC87 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DC8A 8B00                    mov eax, dword ptr [eax]
:0040DC8C 8BE5                    mov esp, ebp
:0040DC8E 5D                      pop ebp
:0040DC8F C3                      ret


:0040DC90 55                      push ebp
:0040DC91 8BEC                    mov ebp, esp
:0040DC93 81EC4C010000            sub esp, 0000014C
:0040DC99 898DB4FEFFFF            mov dword ptr [ebp+FFFFFEB4], ecx
:0040DC9F C745FC00000000          mov [ebp-04], 00000000
:0040DCA6 C785B8FEFFFF00000000    mov dword ptr [ebp+FFFFFEB8], 00000000
:0040DCB0 8D85BCFEFFFF            lea eax, dword ptr [ebp+FFFFFEBC]
:0040DCB6 50                      push eax
:0040DCB7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DCBA 51                      push ecx

* Reference To: KERNEL32.FindFirstFileA, Ord:0082h
                                  |
:0040DCBB FF15C4D44B00            Call dword ptr [004BD4C4]
:0040DCC1 8985B8FEFFFF            mov dword ptr [ebp+FFFFFEB8], eax
:0040DCC7 83BDB8FEFFFFFF          cmp dword ptr [ebp+FFFFFEB8], FFFFFFFF
:0040DCCE 7416                    je 0040DCE6
:0040DCD0 83BDD8FEFFFF00          cmp dword ptr [ebp+FFFFFED8], 00000000
:0040DCD7 7404                    je 0040DCDD
:0040DCD9 33C0                    xor eax, eax
:0040DCDB EB22                    jmp 0040DCFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DCD7(C)
|
:0040DCDD 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:0040DCE3 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DCCE(C)
|
:0040DCE6 83BDB8FEFFFF00          cmp dword ptr [ebp+FFFFFEB8], 00000000
:0040DCED 740D                    je 0040DCFC
:0040DCEF 8B85B8FEFFFF            mov eax, dword ptr [ebp+FFFFFEB8]
:0040DCF5 50                      push eax

* Reference To: KERNEL32.FindClose, Ord:007Eh
                                  |
:0040DCF6 FF15BCD44B00            Call dword ptr [004BD4BC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DCED(C)
|
:0040DCFC 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DCDB(U)
|
:0040DCFF 8BE5                    mov esp, ebp
:0040DD01 5D                      pop ebp
:0040DD02 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040D88A   
|
:0040DD05 55                      push ebp
:0040DD06 8BEC                    mov ebp, esp
:0040DD08 83EC10                  sub esp, 00000010
:0040DD0B C645F863                mov [ebp-08], 63
:0040DD0F A184C34700              mov eax, dword ptr [0047C384]
:0040DD14 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD86(U)
|
:0040DD17 C645FC41                mov [ebp-04], 41
:0040DD1B C745F400000000          mov [ebp-0C], 00000000
:0040DD22 EB12                    jmp 0040DD36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD6B(U)
|
:0040DD24 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040DD27 83C101                  add ecx, 00000001
:0040DD2A 894DF4                  mov dword ptr [ebp-0C], ecx
:0040DD2D 8A55FC                  mov dl, byte ptr [ebp-04]
:0040DD30 80C201                  add dl, 01
:0040DD33 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD22(U)
|
:0040DD36 837DF41A                cmp dword ptr [ebp-0C], 0000001A
:0040DD3A 7F31                    jg 0040DD6D
:0040DD3C 8D45FC                  lea eax, dword ptr [ebp-04]
:0040DD3F 50                      push eax

* Reference To: KERNEL32.GetDriveTypeA, Ord:00DFh
                                  |
:0040DD40 FF15C0D44B00            Call dword ptr [004BD4C0]
:0040DD46 8945F0                  mov dword ptr [ebp-10], eax
:0040DD49 837DF005                cmp dword ptr [ebp-10], 00000005
:0040DD4D 750D                    jne 0040DD5C
:0040DD4F E84F000000              call 0040DDA3
:0040DD54 85C0                    test eax, eax
:0040DD56 7402                    je 0040DD5A
:0040DD58 EB13                    jmp 0040DD6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD56(C)
|
:0040DD5A EB0F                    jmp 0040DD6B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD4D(C)
|
:0040DD5C 837DF003                cmp dword ptr [ebp-10], 00000003
:0040DD60 7509                    jne 0040DD6B
:0040DD62 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040DD65 83C141                  add ecx, 00000041
:0040DD68 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DD5A(U), :0040DD60(C)
|
:0040DD6B EBB7                    jmp 0040DD24

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DD3A(C), :0040DD58(U)
|
:0040DD6D 837DF41A                cmp dword ptr [ebp-0C], 0000001A
:0040DD71 7E1C                    jle 0040DD8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD8D(U)
|
:0040DD73 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"SQNФ
бNQNФ"
                                        ->"Jо"
                                  |
:0040DD75 6888C34700              push 0047C388
:0040DD7A E861BB0500              call 004698E0
:0040DD7F 83C408                  add esp, 00000008
:0040DD82 85C0                    test eax, eax
:0040DD84 7402                    je 0040DD88
:0040DD86 EB8F                    jmp 0040DD17

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD84(C)
|
:0040DD88 E825BC0500              call 004699B2
:0040DD8D EBE4                    jmp 0040DD73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DD71(C)
|
:0040DD8F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040DD92 83C141                  add ecx, 00000041
:0040DD95 8B5508                  mov edx, dword ptr [ebp+08]
:0040DD98 880A                    mov byte ptr [edx], cl
:0040DD9A B801000000              mov eax, 00000001
:0040DD9F 8BE5                    mov esp, ebp
:0040DDA1 5D                      pop ebp
:0040DDA2 C3                      ret



* Referenced by a CALL at Address:
|:0040DD4F   
|
:0040DDA3 55                      push ebp
:0040DDA4 8BEC                    mov ebp, esp
:0040DDA6 81EC1C020000            sub esp, 0000021C
:0040DDAC A1C0C34700              mov eax, dword ptr [0047C3C0]
:0040DDB1 8945F8                  mov dword ptr [ebp-08], eax
:0040DDB4 C685F0FEFFFF41          mov byte ptr [ebp+FFFFFEF0], 41
:0040DDBB EB0F                    jmp 0040DDCC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DE43(U)
|
:0040DDBD 8A8DF0FEFFFF            mov cl, byte ptr [ebp+FFFFFEF0]
:0040DDC3 80C101                  add cl, 01
:0040DDC6 888DF0FEFFFF            mov byte ptr [ebp+FFFFFEF0], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DDBB(U)
|
:0040DDCC 0FBE95F0FEFFFF          movsx edx, byte ptr [ebp+FFFFFEF0]
:0040DDD3 83FA5A                  cmp edx, 0000005A
:0040DDD6 7F70                    jg 0040DE48
:0040DDD8 8A85F0FEFFFF            mov al, byte ptr [ebp+FFFFFEF0]
:0040DDDE 8845F8                  mov byte ptr [ebp-08], al
:0040DDE1 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0040DDE4 51                      push ecx

* Reference To: KERNEL32.GetDriveTypeA, Ord:00DFh
                                  |
:0040DDE5 FF15C0D44B00            Call dword ptr [004BD4C0]
:0040DDEB 83F805                  cmp eax, 00000005
:0040DDEE 7553                    jne 0040DE43
:0040DDF0 6804010000              push 00000104
:0040DDF5 8D95E4FDFFFF            lea edx, dword ptr [ebp+FFFFFDE4]
:0040DDFB 52                      push edx
:0040DDFC 8D85E8FEFFFF            lea eax, dword ptr [ebp+FFFFFEE8]
:0040DE02 50                      push eax
:0040DE03 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040DE09 51                      push ecx
:0040DE0A 8D55FC                  lea edx, dword ptr [ebp-04]
:0040DE0D 52                      push edx
:0040DE0E 6804010000              push 00000104
:0040DE13 8D85F4FEFFFF            lea eax, dword ptr [ebp+FFFFFEF4]
:0040DE19 50                      push eax
:0040DE1A 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0040DE1D 51                      push ecx

* Reference To: KERNEL32.GetVolumeInformationA, Ord:014Fh
                                  |
:0040DE1E FF15B0D44B00            Call dword ptr [004BD4B0]
:0040DE24 8D95F4FEFFFF            lea edx, dword ptr [ebp+FFFFFEF4]
:0040DE2A 52                      push edx

* Possible StringData Ref from Data Obj ->"MOURI"
                                  |
:0040DE2B 6874C34700              push 0047C374
:0040DE30 E80B1C0600              call 0046FA40
:0040DE35 83C408                  add esp, 00000008
:0040DE38 85C0                    test eax, eax
:0040DE3A 90                      nop
:0040DE3B 90                      nop
:0040DE3C B801000000              mov eax, 00000001
:0040DE41 EB07                    jmp 0040DE4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DDEE(C)
|
:0040DE43 E975FFFFFF              jmp 0040DDBD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DDD6(C)
|
:0040DE48 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DE41(U)
|
:0040DE4A 8BE5                    mov esp, ebp
:0040DE4C 5D                      pop ebp
:0040DE4D C3                      ret


:0040DE4E 55                      push ebp
:0040DE4F 8BEC                    mov ebp, esp
:0040DE51 81EC80000000            sub esp, 00000080
:0040DE57 8B4508                  mov eax, dword ptr [ebp+08]
:0040DE5A 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0040DE5B 68C4C34700              push 0047C3C4
:0040DE60 8D4D80                  lea ecx, dword ptr [ebp-80]
:0040DE63 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0040DE64 FF1504D74B00            Call dword ptr [004BD704]
:0040DE6A 83C40C                  add esp, 0000000C
:0040DE6D 6830200000              push 00002030

* Possible StringData Ref from Data Obj ->"m^ǶǨtC QNn"
                                  |
:0040DE72 68C8C34700              push 0047C3C8
:0040DE77 8D5580                  lea edx, dword ptr [ebp-80]
:0040DE7A 52                      push edx
:0040DE7B A1B0554B00              mov eax, dword ptr [004B55B0]
:0040DE80 50                      push eax

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:0040DE81 FF15E0D64B00            Call dword ptr [004BD6E0]
:0040DE87 E826BB0500              call 004699B2
:0040DE8C 8BE5                    mov esp, ebp
:0040DE8E 5D                      pop ebp
:0040DE8F C3                      ret



* Referenced by a CALL at Addresses:
|:0040467C   , :0040469D   , :0040A9B5   , :00412561   , :0041590B   
|:0041A68E   , :0041FD25   , :0041FEC2   , :00423DD4   , :004243CA   
|:00426505   , :00428FC2   , :0042A6E9   , :0042BBFE   , :0042BEBA   
|:00434A43   , :00434A84   , :004534C7   , :0045AB73   , :0045CE45   
|:0045CE82   , :0045EC6A   , :004613B0   , :00463F70   , :004641DF   
|:00465BDA   , :00466188   , :0046ABFD   , :0046B0C5   , :0046B144   
|:0046BEA1   
|
:0040DE90 55                      push ebp
:0040DE91 8BEC                    mov ebp, esp
:0040DE93 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040DE96 6BC950                  imul ecx, 00000050
:0040DE99 81C1787F4900            add ecx, 00497F78
:0040DE9F E8DC1F0000              call 0040FE80
:0040DEA4 25FF000000              and eax, 000000FF
:0040DEA9 F7D8                    neg eax
:0040DEAB 1BC0                    sbb eax, eax
:0040DEAD 40                      inc eax
:0040DEAE 5D                      pop ebp
:0040DEAF C3                      ret


:0040DEB0 55                      push ebp
:0040DEB1 8BEC                    mov ebp, esp
:0040DEB3 33C0                    xor eax, eax
:0040DEB5 5D                      pop ebp
:0040DEB6 C3                      ret



* Referenced by a CALL at Address:
|:0040FB24   
|
:0040DEB7 55                      push ebp
:0040DEB8 8BEC                    mov ebp, esp
:0040DEBA 83EC08                  sub esp, 00000008
:0040DEBD 894DF8                  mov dword ptr [ebp-08], ecx
:0040DEC0 8B45F8                  mov eax, dword ptr [ebp-08]
:0040DEC3 C6400801                mov [eax+08], 01
:0040DEC7 8B4DF8                  mov ecx, dword ptr [ebp-08]

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0040DECA C701C8000000            mov dword ptr [ecx], 000000C8
:0040DED0 8B55F8                  mov edx, dword ptr [ebp-08]
:0040DED3 C6421402                mov [edx+14], 02
:0040DED7 8B45F8                  mov eax, dword ptr [ebp-08]
:0040DEDA C6401003                mov [eax+10], 03
:0040DEDE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040DEE1 66C7410A10F1            mov [ecx+0A], F110
:0040DEE7 8B55F8                  mov edx, dword ptr [ebp-08]
:0040DEEA 66C7420C0100            mov [edx+0C], 0001
:0040DEF0 8B45F8                  mov eax, dword ptr [ebp-08]
:0040DEF3 C6400EFF                mov [eax+0E], FF
:0040DEF7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040DEFA C6411200                mov [ecx+12], 00
:0040DEFE 8B55F8                  mov edx, dword ptr [ebp-08]
:0040DF01 C6421100                mov [edx+11], 00
:0040DF05 8B45F8                  mov eax, dword ptr [ebp-08]
:0040DF08 C6401300                mov [eax+13], 00
:0040DF0C 6A10                    push 00000010
:0040DF0E 68FF000000              push 000000FF
:0040DF13 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040DF16 83C116                  add ecx, 00000016
:0040DF19 51                      push ecx
:0040DF1A E8B11B0600              call 0046FAD0
:0040DF1F 83C40C                  add esp, 0000000C
:0040DF22 6800010000              push 00000100
:0040DF27 68FF000000              push 000000FF
:0040DF2C 8B55F8                  mov edx, dword ptr [ebp-08]
:0040DF2F 83C226                  add edx, 00000026
:0040DF32 52                      push edx
:0040DF33 E8981B0600              call 0046FAD0
:0040DF38 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0040DF3B 6A08                    push 00000008
:0040DF3D 68FF000000              push 000000FF
:0040DF42 8B45F8                  mov eax, dword ptr [ebp-08]
:0040DF45 0526010000              add eax, 00000126
:0040DF4A 50                      push eax
:0040DF4B E8801B0600              call 0046FAD0
:0040DF50 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040DF53 6A04                    push 00000004
:0040DF55 6A00                    push 00000000
:0040DF57 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040DF5A 83C104                  add ecx, 00000004
:0040DF5D 51                      push ecx
:0040DF5E E86D1B0600              call 0046FAD0
:0040DF63 83C40C                  add esp, 0000000C
:0040DF66 C745FC00000000          mov [ebp-04], 00000000
:0040DF6D EB09                    jmp 0040DF78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DF91(U)
|
:0040DF6F 8B55FC                  mov edx, dword ptr [ebp-04]
:0040DF72 83C201                  add edx, 00000001
:0040DF75 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DF6D(U)
|
:0040DF78 837DFC0E                cmp dword ptr [ebp-04], 0000000E
:0040DF7C 7315                    jnb 0040DF93
:0040DF7E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040DF81 8B0C85F8C34700          mov ecx, dword ptr [4*eax+0047C3F8]
:0040DF88 51                      push ecx
:0040DF89 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040DF8C E85D66FFFF              call 004045EE
:0040DF91 EBDC                    jmp 0040DF6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DF7C(C)
|
:0040DF93 8BE5                    mov esp, ebp
:0040DF95 5D                      pop ebp
:0040DF96 C3                      ret



* Referenced by a CALL at Addresses:
|:0040EB6A   , :0040FBA1   
|
:0040DF97 55                      push ebp
:0040DF98 8BEC                    mov ebp, esp
:0040DF9A B978544B00              mov ecx, 004B5478
:0040DF9F E89C1F0000              call 0040FF40
:0040DFA4 85C0                    test eax, eax
:0040DFA6 7404                    je 0040DFAC
:0040DFA8 33C0                    xor eax, eax
:0040DFAA EB6C                    jmp 0040E018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DFA6(C)
|
:0040DFAC C70584AA480000000000    mov dword ptr [0048AA84], 00000000
:0040DFB6 E85F000000              call 0040E01A
:0040DFBB 85C0                    test eax, eax
:0040DFBD 7511                    jne 0040DFD0

* Possible StringData Ref from Data Obj ->"SxsiסCŪC"
                                  |
:0040DFBF 6878C44700              push 0047C478
:0040DFC4 E88DB90500              call 00469956
:0040DFC9 83C404                  add esp, 00000004
:0040DFCC 33C0                    xor eax, eax
:0040DFCE EB48                    jmp 0040E018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DFBD(C), :0040E011(U)
|
:0040DFD0 6A00                    push 00000000
:0040DFD2 6840E94000              push 0040E940
:0040DFD7 A1B0554B00              mov eax, dword ptr [004B55B0]
:0040DFDC 50                      push eax

* Possible Reference to Dialog: DialogID_0091 
                                  |
:0040DFDD 6891000000              push 00000091
:0040DFE2 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0040DFE8 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0040DFE9 FF15DCD64B00            Call dword ptr [004BD6DC]
:0040DFEF 833D84AA480000          cmp dword ptr [0048AA84], 00000000
:0040DFF6 7417                    je 0040E00F
:0040DFF8 8B1580AA4800            mov edx, dword ptr [0048AA80]
:0040DFFE 52                      push edx
:0040DFFF E8E4030000              call 0040E3E8
:0040E004 83C404                  add esp, 00000004
:0040E007 85C0                    test eax, eax
:0040E009 7402                    je 0040E00D
:0040E00B EB06                    jmp 0040E013

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E009(C)
|
:0040E00D EB02                    jmp 0040E011

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040DFF6(C)
|
:0040E00F EB02                    jmp 0040E013

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E00D(U)
|
:0040E011 EBBD                    jmp 0040DFD0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E00B(U), :0040E00F(U)
|
:0040E013 A184AA4800              mov eax, dword ptr [0048AA84]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040DFAA(U), :0040DFCE(U)
|
:0040E018 5D                      pop ebp
:0040E019 C3                      ret



* Referenced by a CALL at Addresses:
|:0040DFB6   , :0040EBB9   
|
:0040E01A 55                      push ebp
:0040E01B 8BEC                    mov ebp, esp
:0040E01D 6AFF                    push FFFFFFFF
:0040E01F 68C9954700              push 004795C9
:0040E024 64A100000000            mov eax, dword ptr fs:[00000000]
:0040E02A 50                      push eax
:0040E02B 64892500000000          mov dword ptr fs:[00000000], esp
:0040E032 81ECE4000000            sub esp, 000000E4
:0040E038 8D4DD0                  lea ecx, dword ptr [ebp-30]
:0040E03B E86077FFFF              call 004057A0
:0040E040 C745FC00000000          mov [ebp-04], 00000000
:0040E047 C78550FFFFFF00000000    mov dword ptr [ebp+FFFFFF50], 00000000
:0040E051 C78564FFFFFF00000000    mov dword ptr [ebp+FFFFFF64], 00000000
:0040E05B EB0F                    jmp 0040E06C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E2FC(U)
|
:0040E05D 8B8564FFFFFF            mov eax, dword ptr [ebp+FFFFFF64]
:0040E063 83C001                  add eax, 00000001
:0040E066 898564FFFFFF            mov dword ptr [ebp+FFFFFF64], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E05B(U)
|
:0040E06C 83BD64FFFFFF0A          cmp dword ptr [ebp+FFFFFF64], 0000000A
:0040E073 0F8388020000            jnb 0040E301
:0040E079 8B8D64FFFFFF            mov ecx, dword ptr [ebp+FFFFFF64]
:0040E07F C6840D58FFFFFF00        mov byte ptr [ebp+ecx-000000A8], 00
:0040E087 C6851CFFFFFF00          mov byte ptr [ebp+FFFFFF1C], 00
:0040E08E 6A00                    push 00000000
:0040E090 8B9564FFFFFF            mov edx, dword ptr [ebp+FFFFFF64]
:0040E096 52                      push edx
:0040E097 8D45D4                  lea eax, dword ptr [ebp-2C]
:0040E09A 50                      push eax
:0040E09B E890020000              call 0040E330
:0040E0A0 83C40C                  add esp, 0000000C
:0040E0A3 6A00                    push 00000000
:0040E0A5 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:0040E0A8 51                      push ecx
:0040E0A9 8D4DD0                  lea ecx, dword ptr [ebp-30]
:0040E0AC E80BF8FFFF              call 0040D8BC
:0040E0B1 6A23                    push 00000023
:0040E0B3 8D951CFFFFFF            lea edx, dword ptr [ebp+FFFFFF1C]
:0040E0B9 52                      push edx
:0040E0BA 8D4DD0                  lea ecx, dword ptr [ebp-30]
:0040E0BD E805FAFFFF              call 0040DAC7
:0040E0C2 8D4DD0                  lea ecx, dword ptr [ebp-30]
:0040E0C5 E85BFBFFFF              call 0040DC25
:0040E0CA 8B851CFFFFFF            mov eax, dword ptr [ebp+FFFFFF1C]
:0040E0D0 25FF000000              and eax, 000000FF
:0040E0D5 85C0                    test eax, eax
:0040E0D7 0F84F2010000            je 0040E2CF
:0040E0DD 8B8D1DFFFFFF            mov ecx, dword ptr [ebp+FFFFFF1D]
:0040E0E3 81E1FF000000            and ecx, 000000FF
:0040E0E9 83F963                  cmp ecx, 00000063
:0040E0EC 7314                    jnb 0040E102
:0040E0EE 8B951DFFFFFF            mov edx, dword ptr [ebp+FFFFFF1D]
:0040E0F4 81E2FF000000            and edx, 000000FF
:0040E0FA 899514FFFFFF            mov dword ptr [ebp+FFFFFF14], edx
:0040E100 EB0A                    jmp 0040E10C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E0EC(C)
|
:0040E102 C78514FFFFFF00000000    mov dword ptr [ebp+FFFFFF14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E100(U)
|
:0040E10C 8B8514FFFFFF            mov eax, dword ptr [ebp+FFFFFF14]
:0040E112 50                      push eax
:0040E113 8D8D21FFFFFF            lea ecx, dword ptr [ebp+FFFFFF21]
:0040E119 51                      push ecx
:0040E11A 8B9564FFFFFF            mov edx, dword ptr [ebp+FFFFFF64]
:0040E120 83C201                  add edx, 00000001
:0040E123 52                      push edx

* Possible StringData Ref from Data Obj ->"NO:%2d %s Lv.%2d "
                                  |
:0040E124 68ACC44700              push 0047C4AC
:0040E129 8B8564FFFFFF            mov eax, dword ptr [ebp+FFFFFF64]
:0040E12F 69C0C8000000            imul eax, 000000C8
:0040E135 05B0A24800              add eax, 0048A2B0
:0040E13A 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0040E13B FF1504D74B00            Call dword ptr [004BD704]
:0040E141 83C414                  add esp, 00000014
:0040E144 8B8D20FFFFFF            mov ecx, dword ptr [ebp+FFFFFF20]
:0040E14A 81E1FF000000            and ecx, 000000FF
:0040E150 898D54FFFFFF            mov dword ptr [ebp+FFFFFF54], ecx
:0040E156 8B951EFFFFFF            mov edx, dword ptr [ebp+FFFFFF1E]
:0040E15C 81E2FF000000            and edx, 000000FF
:0040E162 83FA03                  cmp edx, 00000003
:0040E165 7545                    jne 0040E1AC
:0040E167 83BD54FFFFFF1E          cmp dword ptr [ebp+FFFFFF54], 0000001E
:0040E16E 7337                    jnb 0040E1A7
:0040E170 8B8554FFFFFF            mov eax, dword ptr [ebp+FFFFFF54]
:0040E176 50                      push eax
:0040E177 8D8D68FFFFFF            lea ecx, dword ptr [ebp+FFFFFF68]
:0040E17D 51                      push ecx
:0040E17E E88A54FFFF              call 0040360D
:0040E183 83C408                  add esp, 00000008
:0040E186 8D9568FFFFFF            lea edx, dword ptr [ebp+FFFFFF68]
:0040E18C 52                      push edx
:0040E18D 8B8564FFFFFF            mov eax, dword ptr [ebp+FFFFFF64]
:0040E193 69C0C8000000            imul eax, 000000C8
:0040E199 05B0A24800              add eax, 0048A2B0
:0040E19E 50                      push eax
:0040E19F E8ACA30600              call 00478550
:0040E1A4 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E16E(C)
|
:0040E1A7 E909010000              jmp 0040E2B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E165(C)
|
:0040E1AC 8B8D1FFFFFFF            mov ecx, dword ptr [ebp+FFFFFF1F]
:0040E1B2 81E1FF000000            and ecx, 000000FF
:0040E1B8 83F90C                  cmp ecx, 0000000C
:0040E1BB 0F8DF4000000            jnl 0040E2B5
:0040E1C1 8B951FFFFFFF            mov edx, dword ptr [ebp+FFFFFF1F]
:0040E1C7 81E2FF000000            and edx, 000000FF
:0040E1CD 52                      push edx
:0040E1CE E86068FFFF              call 00404A33
:0040E1D3 83C404                  add esp, 00000004
:0040E1D6 50                      push eax
:0040E1D7 8B8564FFFFFF            mov eax, dword ptr [ebp+FFFFFF64]
:0040E1DD 69C0C8000000            imul eax, 000000C8
:0040E1E3 05B0A24800              add eax, 0048A2B0
:0040E1E8 50                      push eax
:0040E1E9 E862A30600              call 00478550
:0040E1EE 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->" "
                                  |
:0040E1F1 68C0C44700              push 0047C4C0
:0040E1F6 8B8D64FFFFFF            mov ecx, dword ptr [ebp+FFFFFF64]
:0040E1FC 69C9C8000000            imul ecx, 000000C8
:0040E202 81C1B0A24800            add ecx, 0048A2B0
:0040E208 51                      push ecx
:0040E209 E842A30600              call 00478550
:0040E20E 83C408                  add esp, 00000008
:0040E211 8A951EFFFFFF            mov dl, byte ptr [ebp+FFFFFF1E]
:0040E217 889510FFFFFF            mov byte ptr [ebp+FFFFFF10], dl
:0040E21D 80BD10FFFFFF00          cmp byte ptr [ebp+FFFFFF10], 00
:0040E224 7414                    je 0040E23A
:0040E226 80BD10FFFFFF01          cmp byte ptr [ebp+FFFFFF10], 01
:0040E22D 742C                    je 0040E25B
:0040E22F 80BD10FFFFFF02          cmp byte ptr [ebp+FFFFFF10], 02
:0040E236 7445                    je 0040E27D
:0040E238 EB7B                    jmp 0040E2B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E224(C)
|

* Possible StringData Ref from Data Obj ->""
                                  |
:0040E23A 68C4C44700              push 0047C4C4
:0040E23F 8B8564FFFFFF            mov eax, dword ptr [ebp+FFFFFF64]
:0040E245 69C0C8000000            imul eax, 000000C8
:0040E24B 05B0A24800              add eax, 0048A2B0
:0040E250 50                      push eax
:0040E251 E8FAA20600              call 00478550
:0040E256 83C408                  add esp, 00000008
:0040E259 EB5A                    jmp 0040E2B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E22D(C)
|

* Possible StringData Ref from Data Obj ->""
                                  |
:0040E25B 68CCC44700              push 0047C4CC
:0040E260 8B8D64FFFFFF            mov ecx, dword ptr [ebp+FFFFFF64]
:0040E266 69C9C8000000            imul ecx, 000000C8
:0040E26C 81C1B0A24800            add ecx, 0048A2B0
:0040E272 51                      push ecx
:0040E273 E8D8A20600              call 00478550
:0040E278 83C408                  add esp, 00000008
:0040E27B EB38                    jmp 0040E2B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E236(C)
|
:0040E27D 83BD54FFFFFF0C          cmp dword ptr [ebp+FFFFFF54], 0000000C
:0040E284 732F                    jnb 0040E2B5
:0040E286 8B9520FFFFFF            mov edx, dword ptr [ebp+FFFFFF20]
:0040E28C 81E2FF000000            and edx, 000000FF
:0040E292 8B049530D74700          mov eax, dword ptr [4*edx+0047D730]
:0040E299 50                      push eax
:0040E29A 8B8D64FFFFFF            mov ecx, dword ptr [ebp+FFFFFF64]
:0040E2A0 69C9C8000000            imul ecx, 000000C8
:0040E2A6 81C1B0A24800            add ecx, 0048A2B0
:0040E2AC 51                      push ecx
:0040E2AD E89EA20600              call 00478550
:0040E2B2 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E1A7(U), :0040E1BB(C), :0040E238(U), :0040E259(U), :0040E27B(U)
|:0040E284(C)
|
:0040E2B5 8B9564FFFFFF            mov edx, dword ptr [ebp+FFFFFF64]
:0040E2BB C6841558FFFFFF01        mov byte ptr [ebp+edx-000000A8], 01
:0040E2C3 C78550FFFFFF01000000    mov dword ptr [ebp+FFFFFF50], 00000001
:0040E2CD EB2D                    jmp 0040E2FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E0D7(C)
|
:0040E2CF 8B8564FFFFFF            mov eax, dword ptr [ebp+FFFFFF64]
:0040E2D5 83C001                  add eax, 00000001
:0040E2D8 50                      push eax

* Possible StringData Ref from Data Obj ->"NO:%2dťնi"
                                  |
:0040E2D9 8B0D94C44700            mov ecx, dword ptr [0047C494]
:0040E2DF 51                      push ecx
:0040E2E0 8B9564FFFFFF            mov edx, dword ptr [ebp+FFFFFF64]
:0040E2E6 69D2C8000000            imul edx, 000000C8
:0040E2EC 81C2B0A24800            add edx, 0048A2B0
:0040E2F2 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0040E2F3 FF1504D74B00            Call dword ptr [004BD704]
:0040E2F9 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E2CD(U)
|
:0040E2FC E95CFDFFFF              jmp 0040E05D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E073(C)
|
:0040E301 8B8550FFFFFF            mov eax, dword ptr [ebp+FFFFFF50]
:0040E307 898518FFFFFF            mov dword ptr [ebp+FFFFFF18], eax
:0040E30D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040E314 8D4DD0                  lea ecx, dword ptr [ebp-30]
:0040E317 E88DF5FFFF              call 0040D8A9
:0040E31C 8B8518FFFFFF            mov eax, dword ptr [ebp+FFFFFF18]
:0040E322 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040E325 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040E32C 8BE5                    mov esp, ebp
:0040E32E 5D                      pop ebp
:0040E32F C3                      ret



* Referenced by a CALL at Addresses:
|:0040E09B   , :0040E425   , :0040E589   , :0040E7B7   , :0040E87C   
|:0040EE9B   , :0040EEFE   , :0040EF24   , :0040F0D1   , :0040F137   
|
:0040E330 55                      push ebp
:0040E331 8BEC                    mov ebp, esp
:0040E333 81EC04010000            sub esp, 00000104
:0040E339 57                      push edi
:0040E33A A1D4C44700              mov eax, dword ptr [0047C4D4]
:0040E33F 898500FFFFFF            mov dword ptr [ebp+FFFFFF00], eax
:0040E345 8B0DD8C44700            mov ecx, dword ptr [0047C4D8]
:0040E34B 898D04FFFFFF            mov dword ptr [ebp+FFFFFF04], ecx
:0040E351 668B15DCC44700          mov dx, word ptr [0047C4DC]
:0040E358 66899508FFFFFF          mov word ptr [ebp+FFFFFF08], dx
:0040E35F B93D000000              mov ecx, 0000003D
:0040E364 33C0                    xor eax, eax
:0040E366 8DBD0AFFFFFF            lea edi, dword ptr [ebp+FFFFFF0A]
:0040E36C F3                      repz
:0040E36D AB                      stosd
:0040E36E 66AB                    stosw
:0040E370 8B450C                  mov eax, dword ptr [ebp+0C]
:0040E373 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0040E375 B90A000000              mov ecx, 0000000A
:0040E37A F7F1                    div ecx
:0040E37C 83C030                  add eax, 00000030
:0040E37F 888502FFFFFF            mov byte ptr [ebp+FFFFFF02], al
:0040E385 8B450C                  mov eax, dword ptr [ebp+0C]
:0040E388 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0040E38A B90A000000              mov ecx, 0000000A
:0040E38F F7F1                    div ecx
:0040E391 83C230                  add edx, 00000030
:0040E394 889503FFFFFF            mov byte ptr [ebp+FFFFFF03], dl
:0040E39A 8B5510                  mov edx, dword ptr [ebp+10]
:0040E39D 8995FCFEFFFF            mov dword ptr [ebp+FFFFFEFC], edx
:0040E3A3 83BDFCFEFFFF01          cmp dword ptr [ebp+FFFFFEFC], 00000001
:0040E3AA 740B                    je 0040E3B7
:0040E3AC 83BDFCFEFFFF02          cmp dword ptr [ebp+FFFFFEFC], 00000002
:0040E3B3 740B                    je 0040E3C0
:0040E3B5 EB12                    jmp 0040E3C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E3AA(C)
|
:0040E3B7 C68504FFFFFF45          mov byte ptr [ebp+FFFFFF04], 45
:0040E3BE EB10                    jmp 0040E3D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E3B3(C)
|
:0040E3C0 C68504FFFFFF53          mov byte ptr [ebp+FFFFFF04], 53
:0040E3C7 EB07                    jmp 0040E3D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E3B5(U)
|
:0040E3C9 C68504FFFFFF44          mov byte ptr [ebp+FFFFFF04], 44

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E3BE(U), :0040E3C7(U)
|
:0040E3D0 8D8500FFFFFF            lea eax, dword ptr [ebp+FFFFFF00]
:0040E3D6 50                      push eax
:0040E3D7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E3DA 51                      push ecx
:0040E3DB E850A10600              call 00478530
:0040E3E0 83C408                  add esp, 00000008
:0040E3E3 5F                      pop edi
:0040E3E4 8BE5                    mov esp, ebp
:0040E3E6 5D                      pop ebp
:0040E3E7 C3                      ret



* Referenced by a CALL at Address:
|:0040DFFF   
|
:0040E3E8 55                      push ebp
:0040E3E9 8BEC                    mov ebp, esp
:0040E3EB 6AFF                    push FFFFFFFF
:0040E3ED 68DF954700              push 004795DF
:0040E3F2 64A100000000            mov eax, dword ptr fs:[00000000]
:0040E3F8 50                      push eax
:0040E3F9 64892500000000          mov dword ptr fs:[00000000], esp
:0040E400 81EC44020000            sub esp, 00000244
:0040E406 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E40C E88F73FFFF              call 004057A0
:0040E411 C745FC00000000          mov [ebp-04], 00000000
:0040E418 6A00                    push 00000000
:0040E41A 8B4508                  mov eax, dword ptr [ebp+08]
:0040E41D 50                      push eax
:0040E41E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040E424 51                      push ecx
:0040E425 E806FFFFFF              call 0040E330
:0040E42A 83C40C                  add esp, 0000000C
:0040E42D 6A00                    push 00000000
:0040E42F 8D95F0FEFFFF            lea edx, dword ptr [ebp+FFFFFEF0]
:0040E435 52                      push edx
:0040E436 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E43C E87BF4FFFF              call 0040D8BC
:0040E441 85C0                    test eax, eax
:0040E443 7527                    jne 0040E46C
:0040E445 C785C4FDFFFF00000000    mov dword ptr [ebp+FFFFFDC4], 00000000
:0040E44F C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040E456 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E45C E848F4FFFF              call 0040D8A9
:0040E461 8B85C4FDFFFF            mov eax, dword ptr [ebp+FFFFFDC4]
:0040E467 E9C6040000              jmp 0040E932

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E443(C)
|
:0040E46C 6A23                    push 00000023
:0040E46E A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040E473 50                      push eax
:0040E474 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E47A E848F6FFFF              call 0040DAC7
:0040E47F 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E485 E89BF7FFFF              call 0040DC25
:0040E48A 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040E490 33D2                    xor edx, edx
:0040E492 8A11                    mov dl, byte ptr [ecx]
:0040E494 85D2                    test edx, edx
:0040E496 7527                    jne 0040E4BF
:0040E498 C785C0FDFFFF00000000    mov dword ptr [ebp+FFFFFDC0], 00000000
:0040E4A2 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040E4A9 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E4AF E8F5F3FFFF              call 0040D8A9
:0040E4B4 8B85C0FDFFFF            mov eax, dword ptr [ebp+FFFFFDC0]
:0040E4BA E973040000              jmp 0040E932

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E496(C)
|
:0040E4BF A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040E4C4 33C9                    xor ecx, ecx
:0040E4C6 8A08                    mov cl, byte ptr [eax]
:0040E4C8 83F908                  cmp ecx, 00000008
:0040E4CB 7434                    je 0040E501

* Possible StringData Ref from Data Obj ->"oӶi׵LkϥΤF"
                                  |
:0040E4CD 68E0C44700              push 0047C4E0
:0040E4D2 E87FB40500              call 00469956
:0040E4D7 83C404                  add esp, 00000004
:0040E4DA C785BCFDFFFF00000000    mov dword ptr [ebp+FFFFFDBC], 00000000
:0040E4E4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040E4EB 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E4F1 E8B3F3FFFF              call 0040D8A9
:0040E4F6 8B85BCFDFFFF            mov eax, dword ptr [ebp+FFFFFDBC]
:0040E4FC E931040000              jmp 0040E932

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E4CB(C)
|
:0040E501 8B5508                  mov edx, dword ptr [ebp+08]
:0040E504 891580AA4800            mov dword ptr [0048AA80], edx
:0040E50A 8B4508                  mov eax, dword ptr [ebp+08]
:0040E50D 69C0C8000000            imul eax, 000000C8
:0040E513 05B0A24800              add eax, 0048A2B0
:0040E518 50                      push eax

* Possible StringData Ref from Data Obj ->"Ū%s
iHܡH"
                                  |
:0040E519 68F4C44700              push 0047C4F4
:0040E51E 8D8DE0FDFFFF            lea ecx, dword ptr [ebp+FFFFFDE0]
:0040E524 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0040E525 FF1504D74B00            Call dword ptr [004BD704]
:0040E52B 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"Ū"
                                  |
:0040E52E 6804C54700              push 0047C504
:0040E533 8D95E0FDFFFF            lea edx, dword ptr [ebp+FFFFFDE0]
:0040E539 52                      push edx
:0040E53A E8A1B30500              call 004698E0
:0040E53F 83C408                  add esp, 00000008
:0040E542 A384AA4800              mov dword ptr [0048AA84], eax
:0040E547 833D84AA480000          cmp dword ptr [0048AA84], 00000000
:0040E54E 7527                    jne 0040E577
:0040E550 C785B8FDFFFF00000000    mov dword ptr [ebp+FFFFFDB8], 00000000
:0040E55A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040E561 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E567 E83DF3FFFF              call 0040D8A9
:0040E56C 8B85B8FDFFFF            mov eax, dword ptr [ebp+FFFFFDB8]
:0040E572 E9BB030000              jmp 0040E932

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E54E(C)
|
:0040E577 E862C40000              call 0041A9DE
:0040E57C 6A00                    push 00000000
:0040E57E 8B4508                  mov eax, dword ptr [ebp+08]
:0040E581 50                      push eax
:0040E582 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040E588 51                      push ecx
:0040E589 E8A2FDFFFF              call 0040E330
:0040E58E 83C40C                  add esp, 0000000C
:0040E591 6A00                    push 00000000
:0040E593 8D95F0FEFFFF            lea edx, dword ptr [ebp+FFFFFEF0]
:0040E599 52                      push edx
:0040E59A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E5A0 E817F3FFFF              call 0040D8BC
:0040E5A5 68A5640000              push 000064A5
:0040E5AA A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040E5AF 50                      push eax
:0040E5B0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E5B6 E80CF5FFFF              call 0040DAC7
:0040E5BB 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:0040E5C1 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E5C7 E859F6FFFF              call 0040DC25
:0040E5CC 6800500000              push 00005000
:0040E5D1 B9D01C4B00              mov ecx, 004B1CD0
:0040E5D6 E8E5180000              call 0040FEC0
:0040E5DB 50                      push eax
:0040E5DC 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040E5E2 51                      push ecx
:0040E5E3 E8D89F0600              call 004785C0
:0040E5E8 83C40C                  add esp, 0000000C
:0040E5EB 8B15A8A24800            mov edx, dword ptr [0048A2A8]
:0040E5F1 33C0                    xor eax, eax
:0040E5F3 8A02                    mov al, byte ptr [edx]
:0040E5F5 83F808                  cmp eax, 00000008
:0040E5F8 7434                    je 0040E62E

* Possible StringData Ref from Data Obj ->"ƾڤϥ"
                                  |
:0040E5FA 680CC54700              push 0047C50C
:0040E5FF E852B30500              call 00469956
:0040E604 83C404                  add esp, 00000004
:0040E607 C785B4FDFFFF00000000    mov dword ptr [ebp+FFFFFDB4], 00000000
:0040E611 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040E618 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E61E E886F2FFFF              call 0040D8A9
:0040E623 8B85B4FDFFFF            mov eax, dword ptr [ebp+FFFFFDB4]
:0040E629 E904030000              jmp 0040E932

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E5F8(C)
|
:0040E62E 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040E634 83C105                  add ecx, 00000005
:0040E637 51                      push ecx
:0040E638 68B0474900              push 004947B0
:0040E63D E8EE9E0600              call 00478530
:0040E642 83C408                  add esp, 00000008
:0040E645 8B15A8A24800            mov edx, dword ptr [0048A2A8]
:0040E64B 83C223                  add edx, 00000023
:0040E64E 52                      push edx
:0040E64F B978294B00              mov ecx, 004B2978
:0040E654 E84E59FFFF              call 00403FA7
:0040E659 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0040E65F C785DCFDFFFF00000000    mov dword ptr [ebp+FFFFFDDC], 00000000
:0040E669 C7055CD44700FFFF0000    mov dword ptr [0047D45C], 0000FFFF
:0040E673 A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040E678 0553010000              add eax, 00000153
:0040E67D 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0040E683 C785D0FDFFFFD8174B00    mov dword ptr [ebp+FFFFFDD0], 004B17D8
:0040E68D C785D4FDFFFF00000000    mov dword ptr [ebp+FFFFFDD4], 00000000
:0040E697 EB1E                    jmp 0040E6B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E6E1(U)
|
:0040E699 8B8DD4FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD4]
:0040E69F 83C101                  add ecx, 00000001
:0040E6A2 898DD4FDFFFF            mov dword ptr [ebp+FFFFFDD4], ecx
:0040E6A8 8B95D0FDFFFF            mov edx, dword ptr [ebp+FFFFFDD0]
:0040E6AE 83C20A                  add edx, 0000000A
:0040E6B1 8995D0FDFFFF            mov dword ptr [ebp+FFFFFDD0], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E697(U)
|
:0040E6B7 83BDD4FDFFFF02          cmp dword ptr [ebp+FFFFFDD4], 00000002
:0040E6BE 7323                    jnb 0040E6E3
:0040E6C0 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0040E6C6 50                      push eax
:0040E6C7 8B8DD0FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD0]
:0040E6CD E8AB61FFFF              call 0040487D
:0040E6D2 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0040E6D8 83C109                  add ecx, 00000009
:0040E6DB 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx
:0040E6E1 EBB6                    jmp 0040E699

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E6BE(C)
|
:0040E6E3 C785D8FDFFFF10044900    mov dword ptr [ebp+FFFFFDD8], 00490410
:0040E6ED C785D4FDFFFF00000000    mov dword ptr [ebp+FFFFFDD4], 00000000
:0040E6F7 EB2D                    jmp 0040E726

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E744(U)
|
:0040E6F9 8B95D4FDFFFF            mov edx, dword ptr [ebp+FFFFFDD4]
:0040E6FF 83C201                  add edx, 00000001
:0040E702 8995D4FDFFFF            mov dword ptr [ebp+FFFFFDD4], edx
:0040E708 8B85D8FDFFFF            mov eax, dword ptr [ebp+FFFFFDD8]
:0040E70E 83C040                  add eax, 00000040
:0040E711 8985D8FDFFFF            mov dword ptr [ebp+FFFFFDD8], eax
:0040E717 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0040E71D 83C124                  add ecx, 00000024
:0040E720 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E6F7(U)
|
:0040E726 81BDD4FDFFFF80000000    cmp dword ptr [ebp+FFFFFDD4], 00000080
:0040E730 7314                    jnb 0040E746
:0040E732 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:0040E738 52                      push edx
:0040E739 8B8DD8FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD8]
:0040E73F E846020100              call 0041E98A
:0040E744 EBB3                    jmp 0040E6F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E730(C)
|
:0040E746 A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040E74B 0565130000              add eax, 00001365
:0040E750 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0040E756 C785D4FDFFFF00000000    mov dword ptr [ebp+FFFFFDD4], 00000000
:0040E760 EB0F                    jmp 0040E771

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E79E(U)
|
:0040E762 8B8DD4FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD4]
:0040E768 83C101                  add ecx, 00000001
:0040E76B 898DD4FDFFFF            mov dword ptr [ebp+FFFFFDD4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E760(U)
|
:0040E771 81BDD4FDFFFF20030000    cmp dword ptr [ebp+FFFFFDD4], 00000320
:0040E77B 7323                    jnb 0040E7A0
:0040E77D 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:0040E783 52                      push edx
:0040E784 8B8DD4FDFFFF            mov ecx, dword ptr [ebp+FFFFFDD4]
:0040E78A 6BC950                  imul ecx, 00000050
:0040E78D 81C1787F4900            add ecx, 00497F78
:0040E793 E84A46FFFF              call 00402DE2
:0040E798 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0040E79E EBC2                    jmp 0040E762

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E77B(C)
|
:0040E7A0 6A19                    push 00000019
:0040E7A2 E8E3070200              call 0042EF8A
:0040E7A7 83C404                  add esp, 00000004
:0040E7AA 6A01                    push 00000001
:0040E7AC 8B4508                  mov eax, dword ptr [ebp+08]
:0040E7AF 50                      push eax
:0040E7B0 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040E7B6 51                      push ecx
:0040E7B7 E874FBFFFF              call 0040E330
:0040E7BC 83C40C                  add esp, 0000000C
:0040E7BF 8D95F0FEFFFF            lea edx, dword ptr [ebp+FFFFFEF0]
:0040E7C5 52                      push edx
:0040E7C6 B9806D4800              mov ecx, 00486D80
:0040E7CB E8C2D3FFFF              call 0040BB92
:0040E7D0 C60530964A0001          mov byte ptr [004A9630], 01
:0040E7D7 B900554B00              mov ecx, 004B5500
:0040E7DC E8D8AC0500              call 004694B9
:0040E7E1 6A00                    push 00000000
:0040E7E3 B978294B00              mov ecx, 004B2978
:0040E7E8 E833160000              call 0040FE20
:0040E7ED 25FFFF0000              and eax, 0000FFFF
:0040E7F2 8985CCFDFFFF            mov dword ptr [ebp+FFFFFDCC], eax
:0040E7F8 B9F8544B00              mov ecx, 004B54F8
:0040E7FD E8F0AC0500              call 004694F2
:0040E802 81BDCCFDFFFFFFFF0000    cmp dword ptr [ebp+FFFFFDCC], 0000FFFF
:0040E80C 7411                    je 0040E81F
:0040E80E 8B85CCFDFFFF            mov eax, dword ptr [ebp+FFFFFDCC]
:0040E814 50                      push eax
:0040E815 B9F8544B00              mov ecx, 004B54F8
:0040E81A E816AD0500              call 00469535

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E80C(C)
|
:0040E81F B978294B00              mov ecx, 004B2978
:0040E824 E8D7150000              call 0040FE00
:0040E829 25FF000000              and eax, 000000FF
:0040E82E 50                      push eax
:0040E82F B900554B00              mov ecx, 004B5500
:0040E834 E865AC0500              call 0046949E
:0040E839 C705F0C3470001000000    mov dword ptr [0047C3F0], 00000001
:0040E843 8B0D3CC74A00            mov ecx, dword ptr [004AC73C]
:0040E849 83C908                  or ecx, 00000008
:0040E84C 890D3CC74A00            mov dword ptr [004AC73C], ecx
:0040E852 C7058CAA480000000000    mov dword ptr [0048AA8C], 00000000
:0040E85C E8022D0000              call 00411563
:0040E861 25FF000000              and eax, 000000FF
:0040E866 83F803                  cmp eax, 00000003
:0040E869 0F858A000000            jne 0040E8F9

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040E86F 6A02                    push 00000002
:0040E871 8B5508                  mov edx, dword ptr [ebp+08]
:0040E874 52                      push edx
:0040E875 8D85F0FEFFFF            lea eax, dword ptr [ebp+FFFFFEF0]
:0040E87B 50                      push eax
:0040E87C E8AFFAFFFF              call 0040E330
:0040E881 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040E884 6A02                    push 00000002
:0040E886 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040E88C 51                      push ecx
:0040E88D 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E893 E824F0FFFF              call 0040D8BC
:0040E898 8985C8FDFFFF            mov dword ptr [ebp+FFFFFDC8], eax
:0040E89E 83BDC8FDFFFF00          cmp dword ptr [ebp+FFFFFDC8], 00000000
:0040E8A5 751B                    jne 0040E8C2
:0040E8A7 8D95F0FEFFFF            lea edx, dword ptr [ebp+FFFFFEF0]
:0040E8AD 52                      push edx
:0040E8AE E881EFFFFF              call 0040D834
:0040E8B3 83C404                  add esp, 00000004
:0040E8B6 50                      push eax
:0040E8B7 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E8BD E859F1FFFF              call 0040DA1B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E8A5(C)
|
:0040E8C2 8D85ECFEFFFF            lea eax, dword ptr [ebp+FFFFFEEC]
:0040E8C8 50                      push eax
:0040E8C9 B9784E4B00              mov ecx, 004B4E78
:0040E8CE E88AF60400              call 0045DF5D
:0040E8D3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E8D9 E847F3FFFF              call 0040DC25
:0040E8DE C7058CAA480001000000    mov dword ptr [0048AA8C], 00000001
:0040E8E8 E8EA170000              call 004100D7
:0040E8ED C70564D44700FF000000    mov dword ptr [0047D464], 000000FF
:0040E8F7 EB0A                    jmp 0040E903

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E869(C)
|
:0040E8F9 C70564D44700FF000000    mov dword ptr [0047D464], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E8F7(U)
|
:0040E903 68B0474900              push 004947B0
:0040E908 E8E3C00500              call 0046A9F0
:0040E90D 83C404                  add esp, 00000004
:0040E910 C785B0FDFFFF01000000    mov dword ptr [ebp+FFFFFDB0], 00000001
:0040E91A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040E921 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040E927 E87DEFFFFF              call 0040D8A9
:0040E92C 8B85B0FDFFFF            mov eax, dword ptr [ebp+FFFFFDB0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E467(U), :0040E4BA(U), :0040E4FC(U), :0040E572(U), :0040E629(U)
|
:0040E932 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040E935 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040E93C 8BE5                    mov esp, ebp
:0040E93E 5D                      pop ebp
:0040E93F C3                      ret


:0040E940 55                      push ebp
:0040E941 8BEC                    mov ebp, esp
:0040E943 83EC14                  sub esp, 00000014

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0040E946 6802040000              push 00000402
:0040E94B 8B4508                  mov eax, dword ptr [ebp+08]
:0040E94E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040E94F FF1510D64B00            Call dword ptr [004BD610]
:0040E955 8945FC                  mov dword ptr [ebp-04], eax
:0040E958 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040E95B 894DF4                  mov dword ptr [ebp-0C], ecx
:0040E95E 817DF410010000          cmp dword ptr [ebp-0C], 00000110
:0040E965 740E                    je 0040E975
:0040E967 817DF411010000          cmp dword ptr [ebp-0C], 00000111
:0040E96E 7416                    je 0040E986
:0040E970 E943010000              jmp 0040EAB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E965(C)
|
:0040E975 8B5508                  mov edx, dword ptr [ebp+08]
:0040E978 52                      push edx
:0040E979 E849010000              call 0040EAC7
:0040E97E 83C404                  add esp, 00000004
:0040E981 E936010000              jmp 0040EABC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E96E(C)
|
:0040E986 8B4510                  mov eax, dword ptr [ebp+10]
:0040E989 25FFFF0000              and eax, 0000FFFF
:0040E98E 83F802                  cmp eax, 00000002
:0040E991 7527                    jne 0040E9BA
:0040E993 6A01                    push 00000001
:0040E995 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E998 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040E999 FF15D8D54B00            Call dword ptr [004BD5D8]
:0040E99F C70580AA480000000000    mov dword ptr [0048AA80], 00000000
:0040E9A9 C70584AA480000000000    mov dword ptr [0048AA84], 00000000
:0040E9B3 33C0                    xor eax, eax
:0040E9B5 E907010000              jmp 0040EAC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E991(C)
|
:0040E9BA 8B5510                  mov edx, dword ptr [ebp+10]
:0040E9BD 81E2FFFF0000            and edx, 0000FFFF
:0040E9C3 81FAA9040000            cmp edx, 000004A9
:0040E9C9 750D                    jne 0040E9D8
:0040E9CB 682E040000              push 0000042E
:0040E9D0 E8F6B00500              call 00469ACB
:0040E9D5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E9C9(C)
|
:0040E9D8 8B4510                  mov eax, dword ptr [ebp+10]
:0040E9DB 25FFFF0000              and eax, 0000FFFF
:0040E9E0 83F801                  cmp eax, 00000001
:0040E9E3 7549                    jne 0040EA2E
:0040E9E5 6A01                    push 00000001
:0040E9E7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040E9EA 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040E9EB FF15D8D54B00            Call dword ptr [004BD5D8]
:0040E9F1 6A00                    push 00000000
:0040E9F3 6A00                    push 00000000
:0040E9F5 6888010000              push 00000188
:0040E9FA 8B55FC                  mov edx, dword ptr [ebp-04]
:0040E9FD 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0040E9FE FF1504D64B00            Call dword ptr [004BD604]
:0040EA04 668945F8                mov word ptr [ebp-08], ax
:0040EA08 8B45F8                  mov eax, dword ptr [ebp-08]
:0040EA0B 25FFFF0000              and eax, 0000FFFF
:0040EA10 83F80A                  cmp eax, 0000000A
:0040EA13 7D19                    jge 0040EA2E
:0040EA15 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EA18 81E1FFFF0000            and ecx, 0000FFFF
:0040EA1E 890D80AA4800            mov dword ptr [0048AA80], ecx
:0040EA24 C70584AA480001000000    mov dword ptr [0048AA84], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E9E3(C), :0040EA13(C)
|
:0040EA2E 8B5510                  mov edx, dword ptr [ebp+10]
:0040EA31 81E2FFFF0000            and edx, 0000FFFF
:0040EA37 8955F0                  mov dword ptr [ebp-10], edx
:0040EA3A 817DF002040000          cmp dword ptr [ebp-10], 00000402
:0040EA41 7402                    je 0040EA45
:0040EA43 EB6D                    jmp 0040EAB2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EA41(C)
|
:0040EA45 8B4510                  mov eax, dword ptr [ebp+10]
:0040EA48 C1E810                  shr eax, 10
:0040EA4B 25FFFF0000              and eax, 0000FFFF
:0040EA50 25FFFF0000              and eax, 0000FFFF
:0040EA55 8945EC                  mov dword ptr [ebp-14], eax
:0040EA58 837DEC01                cmp dword ptr [ebp-14], 00000001
:0040EA5C 7452                    je 0040EAB0
:0040EA5E 837DEC02                cmp dword ptr [ebp-14], 00000002
:0040EA62 7402                    je 0040EA66
:0040EA64 EB4A                    jmp 0040EAB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EA62(C)
|
:0040EA66 6A00                    push 00000000
:0040EA68 6A00                    push 00000000
:0040EA6A 6888010000              push 00000188
:0040EA6F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EA72 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0040EA73 FF1504D64B00            Call dword ptr [004BD604]
:0040EA79 668945F8                mov word ptr [ebp-08], ax
:0040EA7D 8B55F8                  mov edx, dword ptr [ebp-08]
:0040EA80 81E2FFFF0000            and edx, 0000FFFF
:0040EA86 83FA0A                  cmp edx, 0000000A
:0040EA89 7D25                    jge 0040EAB0
:0040EA8B 6A01                    push 00000001
:0040EA8D 8B4508                  mov eax, dword ptr [ebp+08]
:0040EA90 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040EA91 FF15D8D54B00            Call dword ptr [004BD5D8]
:0040EA97 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040EA9A 81E1FFFF0000            and ecx, 0000FFFF
:0040EAA0 890D80AA4800            mov dword ptr [0048AA80], ecx
:0040EAA6 C70584AA480001000000    mov dword ptr [0048AA84], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EA5C(C), :0040EA64(U), :0040EA89(C)
|
:0040EAB0 EB04                    jmp 0040EAB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EA43(U)
|
:0040EAB2 33C0                    xor eax, eax
:0040EAB4 EB0B                    jmp 0040EAC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EAB0(U)
|
:0040EAB6 EB04                    jmp 0040EABC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040E970(U)
|
:0040EAB8 33C0                    xor eax, eax
:0040EABA EB05                    jmp 0040EAC1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E981(U), :0040EAB6(U)
|
:0040EABC B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040E9B5(U), :0040EAB4(U), :0040EABA(U)
|
:0040EAC1 8BE5                    mov esp, ebp
:0040EAC3 5D                      pop ebp
:0040EAC4 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0040E979   
|
:0040EAC7 55                      push ebp
:0040EAC8 8BEC                    mov ebp, esp
:0040EACA 83EC08                  sub esp, 00000008

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0040EACD 6802040000              push 00000402
:0040EAD2 8B4508                  mov eax, dword ptr [ebp+08]
:0040EAD5 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040EAD6 FF1510D64B00            Call dword ptr [004BD610]
:0040EADC 8945FC                  mov dword ptr [ebp-04], eax
:0040EADF 6A00                    push 00000000
:0040EAE1 6A00                    push 00000000
:0040EAE3 6884010000              push 00000184
:0040EAE8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EAEB 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0040EAEC FF1504D64B00            Call dword ptr [004BD604]
:0040EAF2 C745F800000000          mov [ebp-08], 00000000
:0040EAF9 EB09                    jmp 0040EB04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EB41(U)
|
:0040EAFB 8B55F8                  mov edx, dword ptr [ebp-08]
:0040EAFE 83C201                  add edx, 00000001
:0040EB01 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EAF9(U)
|
:0040EB04 837DF80A                cmp dword ptr [ebp-08], 0000000A
:0040EB08 7339                    jnb 0040EB43
:0040EB0A 8B45F8                  mov eax, dword ptr [ebp-08]
:0040EB0D 69C0C8000000            imul eax, 000000C8
:0040EB13 05B0A24800              add eax, 0048A2B0
:0040EB18 50                      push eax
:0040EB19 6A00                    push 00000000
:0040EB1B 6880010000              push 00000180
:0040EB20 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EB23 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0040EB24 FF1504D64B00            Call dword ptr [004BD604]
:0040EB2A 8B55F8                  mov edx, dword ptr [ebp-08]
:0040EB2D 52                      push edx
:0040EB2E 8B45F8                  mov eax, dword ptr [ebp-08]
:0040EB31 50                      push eax
:0040EB32 689A010000              push 0000019A
:0040EB37 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040EB3A 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0040EB3B FF1504D64B00            Call dword ptr [004BD604]
:0040EB41 EBB8                    jmp 0040EAFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EB08(C)
|
:0040EB43 8BE5                    mov esp, ebp
:0040EB45 5D                      pop ebp
:0040EB46 C3                      ret



* Referenced by a CALL at Address:
|:00469B80   
|
:0040EB47 55                      push ebp
:0040EB48 8BEC                    mov ebp, esp
:0040EB4A 83EC08                  sub esp, 00000008
:0040EB4D C745FC00000000          mov [ebp-04], 00000000
:0040EB54 E80A2A0000              call 00411563
:0040EB59 25FF000000              and eax, 000000FF
:0040EB5E 83F803                  cmp eax, 00000003
:0040EB61 7507                    jne 0040EB6A
:0040EB63 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EB61(C)
|
:0040EB6A E828F4FFFF              call 0040DF97
:0040EB6F 8945F8                  mov dword ptr [ebp-08], eax
:0040EB72 837DF800                cmp dword ptr [ebp-08], 00000000
:0040EB76 7417                    je 0040EB8F
:0040EB78 837DFC00                cmp dword ptr [ebp-04], 00000000
:0040EB7C 7411                    je 0040EB8F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040EB7E 6A05                    push 00000005
:0040EB80 B9784E4B00              mov ecx, 004B4E78
:0040EB85 E876130000              call 0040FF00
:0040EB8A E858EE0500              call 0046D9E7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EB76(C), :0040EB7C(C)
|
:0040EB8F 8B45F8                  mov eax, dword ptr [ebp-08]
:0040EB92 8BE5                    mov esp, ebp
:0040EB94 5D                      pop ebp
:0040EB95 C3                      ret



* Referenced by a CALL at Addresses:
|:00411803   , :00469B76   
|
:0040EB96 55                      push ebp
:0040EB97 8BEC                    mov ebp, esp
:0040EB99 B978544B00              mov ecx, 004B5478
:0040EB9E E89D130000              call 0040FF40
:0040EBA3 85C0                    test eax, eax
:0040EBA5 7404                    je 0040EBAB
:0040EBA7 33C0                    xor eax, eax
:0040EBA9 EB67                    jmp 0040EC12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EBA5(C)
|
:0040EBAB E8AD0D0200              call 0042F95D
:0040EBB0 83F801                  cmp eax, 00000001
:0040EBB3 7404                    je 0040EBB9
:0040EBB5 33C0                    xor eax, eax
:0040EBB7 EB59                    jmp 0040EC12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EBB3(C)
|
:0040EBB9 E85CF4FFFF              call 0040E01A
:0040EBBE C70584AA480000000000    mov dword ptr [0048AA84], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EC0B(U)
|
:0040EBC8 6A00                    push 00000000
:0040EBCA 6840E94000              push 0040E940
:0040EBCF A1B0554B00              mov eax, dword ptr [004B55B0]
:0040EBD4 50                      push eax

* Possible Reference to Dialog: DialogID_00CF 
                                  |
:0040EBD5 68CF000000              push 000000CF
:0040EBDA 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0040EBE0 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0040EBE1 FF15DCD64B00            Call dword ptr [004BD6DC]
:0040EBE7 833D84AA480000          cmp dword ptr [0048AA84], 00000000
:0040EBEE 7417                    je 0040EC07
:0040EBF0 8B1580AA4800            mov edx, dword ptr [0048AA80]
:0040EBF6 52                      push edx
:0040EBF7 E818000000              call 0040EC14
:0040EBFC 83C404                  add esp, 00000004
:0040EBFF 85C0                    test eax, eax
:0040EC01 7402                    je 0040EC05
:0040EC03 EB08                    jmp 0040EC0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EC01(C)
|
:0040EC05 EB04                    jmp 0040EC0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EBEE(C)
|
:0040EC07 33C0                    xor eax, eax
:0040EC09 EB07                    jmp 0040EC12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EC05(U)
|
:0040EC0B EBBB                    jmp 0040EBC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EC03(U)
|
:0040EC0D B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040EBA9(U), :0040EBB7(U), :0040EC09(U)
|
:0040EC12 5D                      pop ebp
:0040EC13 C3                      ret



* Referenced by a CALL at Address:
|:0040EBF7   
|
:0040EC14 55                      push ebp
:0040EC15 8BEC                    mov ebp, esp
:0040EC17 6AFF                    push FFFFFFFF
:0040EC19 68F2954700              push 004795F2
:0040EC1E 64A100000000            mov eax, dword ptr fs:[00000000]
:0040EC24 50                      push eax
:0040EC25 64892500000000          mov dword ptr fs:[00000000], esp
:0040EC2C 81EC2C010000            sub esp, 0000012C
:0040EC32 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040EC35 E8666BFFFF              call 004057A0
:0040EC3A C745FC00000000          mov [ebp-04], 00000000
:0040EC41 8B4508                  mov eax, dword ptr [ebp+08]
:0040EC44 A380AA4800              mov dword ptr [0048AA80], eax
:0040EC49 C70584AA480000000000    mov dword ptr [0048AA84], 00000000
:0040EC53 6A00                    push 00000000
:0040EC55 68FAEF4000              push 0040EFFA
:0040EC5A 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0040EC60 51                      push ecx

* Possible Reference to Dialog: DialogID_00BB 
                                  |
:0040EC61 68BB000000              push 000000BB
:0040EC66 8B15A8554B00            mov edx, dword ptr [004B55A8]
:0040EC6C 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0040EC6D FF15DCD64B00            Call dword ptr [004BD6DC]
:0040EC73 833D84AA480000          cmp dword ptr [0048AA84], 00000000
:0040EC7A 7524                    jne 0040ECA0
:0040EC7C C785CCFEFFFF00000000    mov dword ptr [ebp+FFFFFECC], 00000000
:0040EC86 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040EC8D 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040EC90 E814ECFFFF              call 0040D8A9
:0040EC95 8B85CCFEFFFF            mov eax, dword ptr [ebp+FFFFFECC]
:0040EC9B E94C030000              jmp 0040EFEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EC7A(C)
|
:0040ECA0 6A19                    push 00000019
:0040ECA2 E8E3020200              call 0042EF8A
:0040ECA7 83C404                  add esp, 00000004
:0040ECAA A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040ECAF 8945EC                  mov dword ptr [ebp-14], eax
:0040ECB2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ECB5 C60108                  mov byte ptr [ecx], 08
:0040ECB8 8B55EC                  mov edx, dword ptr [ebp-14]
:0040ECBB 83C201                  add edx, 00000001
:0040ECBE 8955EC                  mov dword ptr [ebp-14], edx
:0040ECC1 B978294B00              mov ecx, 004B2978
:0040ECC6 E8356AFFFF              call 00405700
:0040ECCB 25FF000000              and eax, 000000FF
:0040ECD0 33C9                    xor ecx, ecx
:0040ECD2 83F801                  cmp eax, 00000001
:0040ECD5 0F9EC1                  setle cl
:0040ECD8 49                      dec ecx
:0040ECD9 83E102                  and ecx, 00000002
:0040ECDC 6BC950                  imul ecx, 00000050
:0040ECDF 81C1787F4900            add ecx, 00497F78
:0040ECE5 E8B6110000              call 0040FEA0
:0040ECEA 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040ECF0 884101                  mov byte ptr [ecx+01], al
:0040ECF3 B9D8174B00              mov ecx, 004B17D8
:0040ECF8 E843110000              call 0040FE40
:0040ECFD 8B15A8A24800            mov edx, dword ptr [0048A2A8]
:0040ED03 884202                  mov byte ptr [edx+02], al
:0040ED06 B9D8174B00              mov ecx, 004B17D8
:0040ED0B E8D0320300              call 00441FE0
:0040ED10 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040ED16 884103                  mov byte ptr [ecx+03], al
:0040ED19 8B15A8A24800            mov edx, dword ptr [0048A2A8]
:0040ED1F 33C0                    xor eax, eax
:0040ED21 8A4202                  mov al, byte ptr [edx+02]
:0040ED24 83F803                  cmp eax, 00000003
:0040ED27 7515                    jne 0040ED3E
:0040ED29 B978294B00              mov ecx, 004B2978
:0040ED2E E82D110000              call 0040FE60
:0040ED33 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040ED39 884104                  mov byte ptr [ecx+04], al
:0040ED3C EB13                    jmp 0040ED51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ED27(C)
|
:0040ED3E B9D8174B00              mov ecx, 004B17D8
:0040ED43 E848DBFFFF              call 0040C890
:0040ED48 8B15A8A24800            mov edx, dword ptr [0048A2A8]
:0040ED4E 884204                  mov byte ptr [edx+04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040ED3C(U)
|
:0040ED51 A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040ED56 83C005                  add eax, 00000005
:0040ED59 8945EC                  mov dword ptr [ebp-14], eax
:0040ED5C 68B0474900              push 004947B0
:0040ED61 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040ED64 51                      push ecx
:0040ED65 E8C6970600              call 00478530
:0040ED6A 83C408                  add esp, 00000008
:0040ED6D 8B55EC                  mov edx, dword ptr [ebp-14]
:0040ED70 83C21E                  add edx, 0000001E
:0040ED73 8955EC                  mov dword ptr [ebp-14], edx
:0040ED76 8B45EC                  mov eax, dword ptr [ebp-14]
:0040ED79 50                      push eax
:0040ED7A B978294B00              mov ecx, 004B2978
:0040ED7F E89354FFFF              call 00404217
:0040ED84 8945EC                  mov dword ptr [ebp-14], eax
:0040ED87 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040ED8D 81C153010000            add ecx, 00000153
:0040ED93 894DEC                  mov dword ptr [ebp-14], ecx
:0040ED96 C785D4FEFFFFD8174B00    mov dword ptr [ebp+FFFFFED4], 004B17D8
:0040EDA0 C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:0040EDAA EB1E                    jmp 0040EDCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EDE5(U)
|
:0040EDAC 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:0040EDB2 83C201                  add edx, 00000001
:0040EDB5 8995D8FEFFFF            mov dword ptr [ebp+FFFFFED8], edx
:0040EDBB 8B85D4FEFFFF            mov eax, dword ptr [ebp+FFFFFED4]
:0040EDC1 83C00A                  add eax, 0000000A
:0040EDC4 8985D4FEFFFF            mov dword ptr [ebp+FFFFFED4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EDAA(U)
|
:0040EDCA 83BDD8FEFFFF02          cmp dword ptr [ebp+FFFFFED8], 00000002
:0040EDD1 7314                    jnb 0040EDE7
:0040EDD3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040EDD6 51                      push ecx
:0040EDD7 8B8DD4FEFFFF            mov ecx, dword ptr [ebp+FFFFFED4]
:0040EDDD E8655BFFFF              call 00404947
:0040EDE2 8945EC                  mov dword ptr [ebp-14], eax
:0040EDE5 EBC5                    jmp 0040EDAC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EDD1(C)
|
:0040EDE7 C785E0FEFFFF10044900    mov dword ptr [ebp+FFFFFEE0], 00490410
:0040EDF1 C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:0040EDFB EB1E                    jmp 0040EE1B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EE39(U)
|
:0040EDFD 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:0040EE03 83C201                  add edx, 00000001
:0040EE06 8995D8FEFFFF            mov dword ptr [ebp+FFFFFED8], edx
:0040EE0C 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0040EE12 83C040                  add eax, 00000040
:0040EE15 8985E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EDFB(U)
|
:0040EE1B 81BDD8FEFFFF80000000    cmp dword ptr [ebp+FFFFFED8], 00000080
:0040EE25 7314                    jnb 0040EE3B
:0040EE27 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040EE2A 51                      push ecx
:0040EE2B 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0040EE31 E8F7FC0000              call 0041EB2D
:0040EE36 8945EC                  mov dword ptr [ebp-14], eax
:0040EE39 EBC2                    jmp 0040EDFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EE25(C)
|
:0040EE3B 8B15A8A24800            mov edx, dword ptr [0048A2A8]
:0040EE41 81C265130000            add edx, 00001365
:0040EE47 8955EC                  mov dword ptr [ebp-14], edx
:0040EE4A C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:0040EE54 EB0F                    jmp 0040EE65

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EE8C(U)
|
:0040EE56 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:0040EE5C 83C001                  add eax, 00000001
:0040EE5F 8985D8FEFFFF            mov dword ptr [ebp+FFFFFED8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EE54(U)
|
:0040EE65 81BDD8FEFFFF20030000    cmp dword ptr [ebp+FFFFFED8], 00000320
:0040EE6F 731D                    jnb 0040EE8E
:0040EE71 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0040EE74 51                      push ecx
:0040EE75 8B8DD8FEFFFF            mov ecx, dword ptr [ebp+FFFFFED8]
:0040EE7B 6BC950                  imul ecx, 00000050
:0040EE7E 81C1787F4900            add ecx, 00497F78
:0040EE84 E89C3DFFFF              call 00402C25
:0040EE89 8945EC                  mov dword ptr [ebp-14], eax
:0040EE8C EBC8                    jmp 0040EE56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EE6F(C)
|
:0040EE8E 6A00                    push 00000000
:0040EE90 8B5508                  mov edx, dword ptr [ebp+08]
:0040EE93 52                      push edx
:0040EE94 8D85E8FEFFFF            lea eax, dword ptr [ebp+FFFFFEE8]
:0040EE9A 50                      push eax
:0040EE9B E890F4FFFF              call 0040E330
:0040EEA0 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040EEA3 6A02                    push 00000002
:0040EEA5 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:0040EEAB 51                      push ecx
:0040EEAC 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040EEAF E808EAFFFF              call 0040D8BC
:0040EEB4 8B55EC                  mov edx, dword ptr [ebp-14]
:0040EEB7 2B15A8A24800            sub edx, dword ptr [0048A2A8]
:0040EEBD 8995E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], edx
:0040EEC3 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0040EEC9 50                      push eax
:0040EECA 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040EED0 51                      push ecx
:0040EED1 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040EED4 E804EDFFFF              call 0040DBDD
:0040EED9 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:0040EEDF 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040EEE2 E83EEDFFFF              call 0040DC25
:0040EEE7 6A19                    push 00000019
:0040EEE9 E89C000200              call 0042EF8A
:0040EEEE 83C404                  add esp, 00000004
:0040EEF1 6A01                    push 00000001
:0040EEF3 8B5508                  mov edx, dword ptr [ebp+08]
:0040EEF6 52                      push edx
:0040EEF7 8D85E8FEFFFF            lea eax, dword ptr [ebp+FFFFFEE8]
:0040EEFD 50                      push eax
:0040EEFE E82DF4FFFF              call 0040E330
:0040EF03 83C40C                  add esp, 0000000C
:0040EF06 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:0040EF0C 51                      push ecx
:0040EF0D B9806D4800              mov ecx, 00486D80
:0040EF12 E8ABCEFFFF              call 0040BDC2

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040EF17 6A02                    push 00000002
:0040EF19 8B5508                  mov edx, dword ptr [ebp+08]
:0040EF1C 52                      push edx
:0040EF1D 8D85E8FEFFFF            lea eax, dword ptr [ebp+FFFFFEE8]
:0040EF23 50                      push eax
:0040EF24 E807F4FFFF              call 0040E330
:0040EF29 83C40C                  add esp, 0000000C
:0040EF2C 6A01                    push 00000001
:0040EF2E 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:0040EF34 51                      push ecx
:0040EF35 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040EF38 E87FE9FFFF              call 0040D8BC
:0040EF3D 8985DCFEFFFF            mov dword ptr [ebp+FFFFFEDC], eax
:0040EF43 83BDDCFEFFFF00          cmp dword ptr [ebp+FFFFFEDC], 00000000
:0040EF4A 7518                    jne 0040EF64
:0040EF4C 8D95E8FEFFFF            lea edx, dword ptr [ebp+FFFFFEE8]
:0040EF52 52                      push edx
:0040EF53 E8DCE8FFFF              call 0040D834
:0040EF58 83C404                  add esp, 00000004
:0040EF5B 50                      push eax
:0040EF5C 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040EF5F E8B7EAFFFF              call 0040DA1B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EF4A(C)
|
:0040EF64 E8FA250000              call 00411563
:0040EF69 25FF000000              and eax, 000000FF
:0040EF6E 83F803                  cmp eax, 00000003
:0040EF71 7510                    jne 0040EF83
:0040EF73 8D45F0                  lea eax, dword ptr [ebp-10]
:0040EF76 50                      push eax
:0040EF77 B9784E4B00              mov ecx, 004B4E78
:0040EF7C E898EE0400              call 0045DE19
:0040EF81 EB29                    jmp 0040EFAC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EF71(C)
|
:0040EF83 B9806D4800              mov ecx, 00486D80
:0040EF88 E8930F0000              call 0040FF20
:0040EF8D 8985D0FEFFFF            mov dword ptr [ebp+FFFFFED0], eax
:0040EF93 6A1E                    push 0000001E
:0040EF95 8B8DD0FEFFFF            mov ecx, dword ptr [ebp+FFFFFED0]
:0040EF9B 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040EF9C 6A05                    push 00000005
:0040EF9E 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040EFA1 E854ECFFFF              call 0040DBFA
:0040EFA6 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EF81(U)
|
:0040EFAC 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040EFAF E871ECFFFF              call 0040DC25
:0040EFB4 6A00                    push 00000000
:0040EFB6 E8CFFF0100              call 0042EF8A
:0040EFBB 83C404                  add esp, 00000004

* Possible StringData Ref from Data Obj ->"xs"
                                  |
:0040EFBE 681CC54700              push 0047C51C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040EFC3 6A05                    push 00000005
:0040EFC5 E869240200              call 00431433
:0040EFCA 83C408                  add esp, 00000008
:0040EFCD C785C8FEFFFF01000000    mov dword ptr [ebp+FFFFFEC8], 00000001
:0040EFD7 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040EFDE 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0040EFE1 E8C3E8FFFF              call 0040D8A9
:0040EFE6 8B85C8FEFFFF            mov eax, dword ptr [ebp+FFFFFEC8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040EC9B(U)
|
:0040EFEC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040EFEF 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040EFF6 8BE5                    mov esp, ebp
:0040EFF8 5D                      pop ebp
:0040EFF9 C3                      ret


:0040EFFA 55                      push ebp
:0040EFFB 8BEC                    mov ebp, esp
:0040EFFD 51                      push ecx
:0040EFFE 8B450C                  mov eax, dword ptr [ebp+0C]
:0040F001 8945FC                  mov dword ptr [ebp-04], eax
:0040F004 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:0040F00B 740B                    je 0040F018
:0040F00D 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0040F014 7410                    je 0040F026
:0040F016 EB6B                    jmp 0040F083

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F00B(C)
|
:0040F018 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F01B 51                      push ecx
:0040F01C E871000000              call 0040F092
:0040F021 83C404                  add esp, 00000004
:0040F024 EB61                    jmp 0040F087

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F014(C)
|
:0040F026 8B5510                  mov edx, dword ptr [ebp+10]
:0040F029 81E2FFFF0000            and edx, 0000FFFF
:0040F02F 81FAA9040000            cmp edx, 000004A9
:0040F035 750D                    jne 0040F044
:0040F037 6824040000              push 00000424
:0040F03C E88AAA0500              call 00469ACB
:0040F041 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F035(C)
|
:0040F044 8B4510                  mov eax, dword ptr [ebp+10]
:0040F047 25FFFF0000              and eax, 0000FFFF
:0040F04C 83F801                  cmp eax, 00000001
:0040F04F 7516                    jne 0040F067
:0040F051 6A01                    push 00000001
:0040F053 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F056 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040F057 FF15D8D54B00            Call dword ptr [004BD5D8]
:0040F05D C70584AA480001000000    mov dword ptr [0048AA84], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F04F(C)
|
:0040F067 8B5510                  mov edx, dword ptr [ebp+10]
:0040F06A 81E2FFFF0000            and edx, 0000FFFF
:0040F070 83FA02                  cmp edx, 00000002
:0040F073 750C                    jne 0040F081
:0040F075 6A01                    push 00000001
:0040F077 8B4508                  mov eax, dword ptr [ebp+08]
:0040F07A 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040F07B FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F073(C)
|
:0040F081 EB04                    jmp 0040F087

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F016(U)
|
:0040F083 33C0                    xor eax, eax
:0040F085 EB05                    jmp 0040F08C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F024(U), :0040F081(U)
|
:0040F087 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F085(U)
|
:0040F08C 8BE5                    mov esp, ebp
:0040F08E 5D                      pop ebp
:0040F08F C21000                  ret 0010



* Referenced by a CALL at Address:
|:0040F01C   
|
:0040F092 55                      push ebp
:0040F093 8BEC                    mov ebp, esp
:0040F095 6AFF                    push FFFFFFFF
:0040F097 6808964700              push 00479608
:0040F09C 64A100000000            mov eax, dword ptr fs:[00000000]
:0040F0A2 50                      push eax
:0040F0A3 64892500000000          mov dword ptr fs:[00000000], esp
:0040F0AA 81EC3C020000            sub esp, 0000023C
:0040F0B0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040F0B6 E8E566FFFF              call 004057A0
:0040F0BB C745FC00000000          mov [ebp-04], 00000000
:0040F0C2 6A00                    push 00000000
:0040F0C4 A180AA4800              mov eax, dword ptr [0048AA80]
:0040F0C9 50                      push eax
:0040F0CA 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040F0D0 51                      push ecx
:0040F0D1 E85AF2FFFF              call 0040E330
:0040F0D6 83C40C                  add esp, 0000000C
:0040F0D9 6A00                    push 00000000
:0040F0DB 8D95F0FEFFFF            lea edx, dword ptr [ebp+FFFFFEF0]
:0040F0E1 52                      push edx
:0040F0E2 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040F0E8 E8CFE7FFFF              call 0040D8BC
:0040F0ED 85C0                    test eax, eax
:0040F0EF 7517                    jne 0040F108
:0040F0F1 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040F0F8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040F0FE E8A6E7FFFF              call 0040D8A9
:0040F103 E91E020000              jmp 0040F326

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F0EF(C)
|
:0040F108 6A23                    push 00000023
:0040F10A 8D85BCFEFFFF            lea eax, dword ptr [ebp+FFFFFEBC]
:0040F110 50                      push eax
:0040F111 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040F117 E8ABE9FFFF              call 0040DAC7
:0040F11C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040F122 E8FEEAFFFF              call 0040DC25

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040F127 6A02                    push 00000002
:0040F129 8B0D80AA4800            mov ecx, dword ptr [0048AA80]
:0040F12F 51                      push ecx
:0040F130 8D95F0FEFFFF            lea edx, dword ptr [ebp+FFFFFEF0]
:0040F136 52                      push edx
:0040F137 E8F4F1FFFF              call 0040E330
:0040F13C 83C40C                  add esp, 0000000C
:0040F13F 6A00                    push 00000000
:0040F141 8D85F0FEFFFF            lea eax, dword ptr [ebp+FFFFFEF0]
:0040F147 50                      push eax
:0040F148 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040F14E E869E7FFFF              call 0040D8BC
:0040F153 8985BCFDFFFF            mov dword ptr [ebp+FFFFFDBC], eax
:0040F159 6A23                    push 00000023
:0040F15B 8D8D28FEFFFF            lea ecx, dword ptr [ebp+FFFFFE28]
:0040F161 51                      push ecx
:0040F162 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040F168 E85AE9FFFF              call 0040DAC7
:0040F16D 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040F173 E8ADEAFFFF              call 0040DC25
:0040F178 6890AA4800              push 0048AA90
:0040F17D 6A00                    push 00000000
:0040F17F 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:0040F181 68F8030000              push 000003F8
:0040F186 8B5508                  mov edx, dword ptr [ebp+08]
:0040F189 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0040F18A FF15D4D54B00            Call dword ptr [004BD5D4]
:0040F190 6894AA4800              push 0048AA94
:0040F195 6A00                    push 00000000
:0040F197 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00BB, CONTROL_ID:0433, "0"
                                  |
:0040F199 6833040000              push 00000433
:0040F19E 8B4508                  mov eax, dword ptr [ebp+08]
:0040F1A1 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0040F1A2 FF15D4D54B00            Call dword ptr [004BD5D4]
:0040F1A8 0FBE8DBCFEFFFF          movsx ecx, byte ptr [ebp+FFFFFEBC]
:0040F1AF 83F908                  cmp ecx, 00000008
:0040F1B2 742F                    je 0040F1E3
:0040F1B4 6898AA4800              push 0048AA98
:0040F1B9 6A00                    push 00000000
:0040F1BB 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:0040F1BD 68FA030000              push 000003FA
:0040F1C2 8B5508                  mov edx, dword ptr [ebp+08]
:0040F1C5 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0040F1C6 FF15D4D54B00            Call dword ptr [004BD5D4]
:0040F1CC C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040F1D3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040F1D9 E8CBE6FFFF              call 0040D8A9
:0040F1DE E943010000              jmp 0040F326

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F1B2(C)
|
:0040F1E3 8D85C1FEFFFF            lea eax, dword ptr [ebp+FFFFFEC1]
:0040F1E9 50                      push eax
:0040F1EA 6A00                    push 00000000
:0040F1EC 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@^"
                                  |
:0040F1EE 68F7030000              push 000003F7
:0040F1F3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F1F6 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0040F1F7 FF15D4D54B00            Call dword ptr [004BD5D4]
:0040F1FD 0FBE95BEFEFFFF          movsx edx, byte ptr [ebp+FFFFFEBE]
:0040F204 83FA03                  cmp edx, 00000003
:0040F207 7465                    je 0040F26E

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0040F209 6A0A                    push 0000000A
:0040F20B 8D8558FEFFFF            lea eax, dword ptr [ebp+FFFFFE58]
:0040F211 50                      push eax
:0040F212 0FBE8DBDFEFFFF          movsx ecx, byte ptr [ebp+FFFFFEBD]
:0040F219 51                      push ecx
:0040F21A E8A1B30500              call 0046A5C0
:0040F21F 83C40C                  add esp, 0000000C
:0040F222 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:0040F223 68F9030000              push 000003F9
:0040F228 8B5508                  mov edx, dword ptr [ebp+08]
:0040F22B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040F22C FF1510D64B00            Call dword ptr [004BD610]
:0040F232 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0040F233 FF1514D64B00            Call dword ptr [004BD614]
:0040F239 0FBE85BFFEFFFF          movsx eax, byte ptr [ebp+FFFFFEBF]
:0040F240 83F80C                  cmp eax, 0000000C
:0040F243 7D24                    jge 0040F269
:0040F245 0FBE8DBFFEFFFF          movsx ecx, byte ptr [ebp+FFFFFEBF]
:0040F24C 51                      push ecx
:0040F24D E8E157FFFF              call 00404A33
:0040F252 83C404                  add esp, 00000004
:0040F255 50                      push eax
:0040F256 6A00                    push 00000000
:0040F258 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0434, ""
                                  |
:0040F25A 6834040000              push 00000434
:0040F25F 8B5508                  mov edx, dword ptr [ebp+08]
:0040F262 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0040F263 FF15D4D54B00            Call dword ptr [004BD5D4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F243(C)
|
:0040F269 E9A6000000              jmp 0040F314

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F207(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0040F26E 6A0A                    push 0000000A
:0040F270 8D8558FEFFFF            lea eax, dword ptr [ebp+FFFFFE58]
:0040F276 50                      push eax
:0040F277 0FBE8DBDFEFFFF          movsx ecx, byte ptr [ebp+FFFFFEBD]
:0040F27E 51                      push ecx
:0040F27F E83CB30500              call 0046A5C0
:0040F284 83C40C                  add esp, 0000000C
:0040F287 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:0040F288 68F9030000              push 000003F9
:0040F28D 8B5508                  mov edx, dword ptr [ebp+08]
:0040F290 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040F291 FF1510D64B00            Call dword ptr [004BD610]
:0040F297 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0040F298 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0040F29E 6A0A                    push 0000000A
:0040F2A0 8D8558FEFFFF            lea eax, dword ptr [ebp+FFFFFE58]
:0040F2A6 50                      push eax
:0040F2A7 0FBE8D2AFEFFFF          movsx ecx, byte ptr [ebp+FFFFFE2A]
:0040F2AE 51                      push ecx
:0040F2AF E80CB30500              call 0046A5C0
:0040F2B4 83C40C                  add esp, 0000000C
:0040F2B7 50                      push eax

* Possible Reference to Dialog: DialogID_00BB, CONTROL_ID:0433, "0"
                                  |
:0040F2B8 6833040000              push 00000433
:0040F2BD 8B5508                  mov edx, dword ptr [ebp+08]
:0040F2C0 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040F2C1 FF1510D64B00            Call dword ptr [004BD610]
:0040F2C7 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0040F2C8 FF1514D64B00            Call dword ptr [004BD614]
:0040F2CE 0FBE85C0FEFFFF          movsx eax, byte ptr [ebp+FFFFFEC0]
:0040F2D5 8985B8FDFFFF            mov dword ptr [ebp+FFFFFDB8], eax
:0040F2DB 83BDB8FDFFFF1E          cmp dword ptr [ebp+FFFFFDB8], 0000001E
:0040F2E2 7330                    jnb 0040F314
:0040F2E4 8B8DB8FDFFFF            mov ecx, dword ptr [ebp+FFFFFDB8]
:0040F2EA 51                      push ecx
:0040F2EB 8D95C0FDFFFF            lea edx, dword ptr [ebp+FFFFFDC0]
:0040F2F1 52                      push edx
:0040F2F2 E81643FFFF              call 0040360D
:0040F2F7 83C408                  add esp, 00000008
:0040F2FA 8D85C0FDFFFF            lea eax, dword ptr [ebp+FFFFFDC0]
:0040F300 50                      push eax
:0040F301 6A00                    push 00000000
:0040F303 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:0040F305 68F8030000              push 000003F8
:0040F30A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F30D 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0040F30E FF15D4D54B00            Call dword ptr [004BD5D4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F269(U), :0040F2E2(C)
|
:0040F314 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040F31B 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040F321 E883E5FFFF              call 0040D8A9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F103(U), :0040F1DE(U)
|
:0040F326 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040F329 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040F330 8BE5                    mov esp, ebp
:0040F332 5D                      pop ebp
:0040F333 C3                      ret



* Referenced by a CALL at Addresses:
|:0040F462   , :0040F4CB   , :0040F52E   , :0040F591   , :0040F5F1   
|:0040F651   , :004208FA   , :0045CD6A   
|
:0040F334 55                      push ebp
:0040F335 8BEC                    mov ebp, esp
:0040F337 6AFF                    push FFFFFFFF
:0040F339 681E964700              push 0047961E
:0040F33E 64A100000000            mov eax, dword ptr fs:[00000000]
:0040F344 50                      push eax
:0040F345 64892500000000          mov dword ptr fs:[00000000], esp
:0040F34C 81EC10010000            sub esp, 00000110
:0040F352 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040F358 E8E362FFFF              call 00405640
:0040F35D C745FC00000000          mov [ebp-04], 00000000
:0040F364 8B4508                  mov eax, dword ptr [ebp+08]
:0040F367 50                      push eax
:0040F368 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040F36E E8621E0000              call 004111D5
:0040F373 85C0                    test eax, eax
:0040F375 7524                    jne 0040F39B
:0040F377 C785ECFEFFFF00000000    mov dword ptr [ebp+FFFFFEEC], 00000000
:0040F381 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040F388 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040F38E E8CD62FFFF              call 00405660
:0040F393 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:0040F399 EB73                    jmp 0040F40E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F375(C)
|
:0040F39B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0040F39E 51                      push ecx
:0040F39F 8B550C                  mov edx, dword ptr [ebp+0C]
:0040F3A2 52                      push edx
:0040F3A3 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040F3A9 E8320B0000              call 0040FEE0
:0040F3AE 85C0                    test eax, eax
:0040F3B0 752F                    jne 0040F3E1
:0040F3B2 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040F3B8 E868E8FFFF              call 0040DC25
:0040F3BD C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:0040F3C7 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040F3CE 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040F3D4 E88762FFFF              call 00405660
:0040F3D9 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0040F3DF EB2D                    jmp 0040F40E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F3B0(C)
|
:0040F3E1 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040F3E7 E839E8FFFF              call 0040DC25
:0040F3EC C785E4FEFFFF01000000    mov dword ptr [ebp+FFFFFEE4], 00000001
:0040F3F6 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040F3FD 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0040F403 E85862FFFF              call 00405660
:0040F408 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F399(U), :0040F3DF(U)
|
:0040F40E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040F411 64890D00000000          mov dword ptr fs:[00000000], ecx
:0040F418 8BE5                    mov esp, ebp
:0040F41A 5D                      pop ebp
:0040F41B C3                      ret



* Referenced by a CALL at Addresses:
|:004212C5   , :0045CE20   , :0045CE3B   , :0045CEA4   
|
:0040F41C 55                      push ebp
:0040F41D 8BEC                    mov ebp, esp
:0040F41F 51                      push ecx
:0040F420 8B450C                  mov eax, dword ptr [ebp+0C]
:0040F423 6BC036                  imul eax, 00000036
:0040F426 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F429 03C8                    add ecx, eax
:0040F42B 894DFC                  mov dword ptr [ebp-04], ecx
:0040F42E 8B5510                  mov edx, dword ptr [ebp+10]
:0040F431 52                      push edx
:0040F432 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F435 50                      push eax
:0040F436 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040F439 51                      push ecx
:0040F43A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0040F43D 6BC950                  imul ecx, 00000050
:0040F440 81C1787F4900            add ecx, 00497F78
:0040F446 E8D734FFFF              call 00402922
:0040F44B 8BE5                    mov esp, ebp
:0040F44D 5D                      pop ebp
:0040F44E C3                      ret



* Referenced by a CALL at Address:
|:0040F6A1   
|
:0040F44F 55                      push ebp
:0040F450 8BEC                    mov ebp, esp
:0040F452 83EC08                  sub esp, 00000008
:0040F455 A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040F45A 50                      push eax
:0040F45B 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"DATA.E3"
                                  |
:0040F45D 6800D54700              push 0047D500
:0040F462 E8CDFEFFFF              call 0040F334
:0040F467 83C40C                  add esp, 0000000C
:0040F46A 85C0                    test eax, eax
:0040F46C 7502                    jne 0040F470
:0040F46E EB44                    jmp 0040F4B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F46C(C)
|
:0040F470 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040F476 894DFC                  mov dword ptr [ebp-04], ecx
:0040F479 C745F800000000          mov [ebp-08], 00000000
:0040F480 EB09                    jmp 0040F48B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F4B2(U)
|
:0040F482 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F485 83C201                  add edx, 00000001
:0040F488 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F480(U)
|
:0040F48B 817DF820030000          cmp dword ptr [ebp-08], 00000320
:0040F492 7320                    jnb 0040F4B4
:0040F494 6A00                    push 00000000
:0040F496 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F499 50                      push eax
:0040F49A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F49D 51                      push ecx
:0040F49E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F4A1 6BC950                  imul ecx, 00000050
:0040F4A4 81C1787F4900            add ecx, 00497F78
:0040F4AA E87334FFFF              call 00402922
:0040F4AF 8945FC                  mov dword ptr [ebp-04], eax
:0040F4B2 EBCE                    jmp 0040F482

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F46E(U), :0040F492(C)
|
:0040F4B4 8BE5                    mov esp, ebp
:0040F4B6 5D                      pop ebp
:0040F4B7 C3                      ret



* Referenced by a CALL at Address:
|:0040F6A6   
|
:0040F4B8 55                      push ebp
:0040F4B9 8BEC                    mov ebp, esp
:0040F4BB 83EC08                  sub esp, 00000008
:0040F4BE A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040F4C3 50                      push eax
:0040F4C4 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"DATA.E3"
                                  |
:0040F4C6 6800D54700              push 0047D500
:0040F4CB E864FEFFFF              call 0040F334
:0040F4D0 83C40C                  add esp, 0000000C
:0040F4D3 85C0                    test eax, eax
:0040F4D5 7502                    jne 0040F4D9
:0040F4D7 EB3E                    jmp 0040F517

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F4D5(C)
|
:0040F4D9 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040F4DF 894DFC                  mov dword ptr [ebp-04], ecx
:0040F4E2 C745F800000000          mov [ebp-08], 00000000
:0040F4E9 EB09                    jmp 0040F4F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F515(U)
|
:0040F4EB 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F4EE 83C201                  add edx, 00000001
:0040F4F1 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F4E9(U)
|
:0040F4F4 817DF8A3010000          cmp dword ptr [ebp-08], 000001A3
:0040F4FB 731A                    jnb 0040F517
:0040F4FD 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F500 50                      push eax
:0040F501 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F504 6BC922                  imul ecx, 00000022
:0040F507 81C1D0474900            add ecx, 004947D0
:0040F50D E80E3EFFFF              call 00403320
:0040F512 8945FC                  mov dword ptr [ebp-04], eax
:0040F515 EBD4                    jmp 0040F4EB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F4D7(U), :0040F4FB(C)
|
:0040F517 8BE5                    mov esp, ebp
:0040F519 5D                      pop ebp
:0040F51A C3                      ret



* Referenced by a CALL at Address:
|:0040F6AB   
|
:0040F51B 55                      push ebp
:0040F51C 8BEC                    mov ebp, esp
:0040F51E 83EC08                  sub esp, 00000008
:0040F521 A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040F526 50                      push eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040F527 6A02                    push 00000002

* Possible StringData Ref from Data Obj ->"DATA.E3"
                                  |
:0040F529 6800D54700              push 0047D500
:0040F52E E801FEFFFF              call 0040F334
:0040F533 83C40C                  add esp, 0000000C
:0040F536 85C0                    test eax, eax
:0040F538 7502                    jne 0040F53C
:0040F53A EB3E                    jmp 0040F57A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F538(C)
|
:0040F53C 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040F542 894DFC                  mov dword ptr [ebp-04], ecx
:0040F545 C745F800000000          mov [ebp-08], 00000000
:0040F54C EB09                    jmp 0040F557

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F578(U)
|
:0040F54E 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F551 83C201                  add edx, 00000001
:0040F554 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F54C(U)
|
:0040F557 837DF80C                cmp dword ptr [ebp-08], 0000000C
:0040F55B 731D                    jnb 0040F57A
:0040F55D 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F560 50                      push eax
:0040F561 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F564 69C9EC000000            imul ecx, 000000EC
:0040F56A 81C150D24A00            add ecx, 004AD250
:0040F570 E89355FFFF              call 00404B08
:0040F575 8945FC                  mov dword ptr [ebp-04], eax
:0040F578 EBD4                    jmp 0040F54E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F53A(U), :0040F55B(C)
|
:0040F57A 8BE5                    mov esp, ebp
:0040F57C 5D                      pop ebp
:0040F57D C3                      ret



* Referenced by a CALL at Address:
|:0040F6B0   
|
:0040F57E 55                      push ebp
:0040F57F 8BEC                    mov ebp, esp
:0040F581 83EC08                  sub esp, 00000008
:0040F584 A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040F589 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040F58A 6A03                    push 00000003

* Possible StringData Ref from Data Obj ->"DATA.E3"
                                  |
:0040F58C 6800D54700              push 0047D500
:0040F591 E89EFDFFFF              call 0040F334
:0040F596 83C40C                  add esp, 0000000C
:0040F599 85C0                    test eax, eax
:0040F59B 7502                    jne 0040F59F
:0040F59D EB3B                    jmp 0040F5DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F59B(C)
|
:0040F59F 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040F5A5 894DFC                  mov dword ptr [ebp-04], ecx
:0040F5A8 C745F800000000          mov [ebp-08], 00000000
:0040F5AF EB09                    jmp 0040F5BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F5D8(U)
|
:0040F5B1 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F5B4 83C201                  add edx, 00000001
:0040F5B7 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F5AF(U)
|
:0040F5BA 837DF820                cmp dword ptr [ebp-08], 00000020
:0040F5BE 731A                    jnb 0040F5DA
:0040F5C0 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F5C3 50                      push eax
:0040F5C4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F5C7 6BC91C                  imul ecx, 0000001C
:0040F5CA 81C178794A00            add ecx, 004A7978
:0040F5D0 E8943AFFFF              call 00403069
:0040F5D5 8945FC                  mov dword ptr [ebp-04], eax
:0040F5D8 EBD7                    jmp 0040F5B1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F59D(U), :0040F5BE(C)
|
:0040F5DA 8BE5                    mov esp, ebp
:0040F5DC 5D                      pop ebp
:0040F5DD C3                      ret



* Referenced by a CALL at Address:
|:0040F6B5   
|
:0040F5DE 55                      push ebp
:0040F5DF 8BEC                    mov ebp, esp
:0040F5E1 83EC08                  sub esp, 00000008
:0040F5E4 A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040F5E9 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040F5EA 6A04                    push 00000004

* Possible StringData Ref from Data Obj ->"DATA.E3"
                                  |
:0040F5EC 6800D54700              push 0047D500
:0040F5F1 E83EFDFFFF              call 0040F334
:0040F5F6 83C40C                  add esp, 0000000C
:0040F5F9 85C0                    test eax, eax
:0040F5FB 7502                    jne 0040F5FF
:0040F5FD EB3B                    jmp 0040F63A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F5FB(C)
|
:0040F5FF 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040F605 894DFC                  mov dword ptr [ebp-04], ecx
:0040F608 C745F800000000          mov [ebp-08], 00000000
:0040F60F EB09                    jmp 0040F61A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F638(U)
|
:0040F611 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F614 83C201                  add edx, 00000001
:0040F617 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F60F(U)
|
:0040F61A 837DF810                cmp dword ptr [ebp-08], 00000010
:0040F61E 731A                    jnb 0040F63A
:0040F620 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F623 50                      push eax
:0040F624 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F627 6BC948                  imul ecx, 00000048
:0040F62A 81C108184B00            add ecx, 004B1808
:0040F630 E8C139FFFF              call 00402FF6
:0040F635 8945FC                  mov dword ptr [ebp-04], eax
:0040F638 EBD7                    jmp 0040F611

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F5FD(U), :0040F61E(C)
|
:0040F63A 8BE5                    mov esp, ebp
:0040F63C 5D                      pop ebp
:0040F63D C3                      ret



* Referenced by a CALL at Address:
|:0040F6BA   
|
:0040F63E 55                      push ebp
:0040F63F 8BEC                    mov ebp, esp
:0040F641 83EC08                  sub esp, 00000008
:0040F644 A1A8A24800              mov eax, dword ptr [0048A2A8]
:0040F649 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0040F64A 6A05                    push 00000005

* Possible StringData Ref from Data Obj ->"DATA.E3"
                                  |
:0040F64C 6800D54700              push 0047D500
:0040F651 E8DEFCFFFF              call 0040F334
:0040F656 83C40C                  add esp, 0000000C
:0040F659 85C0                    test eax, eax
:0040F65B 7502                    jne 0040F65F
:0040F65D EB3B                    jmp 0040F69A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F65B(C)
|
:0040F65F 8B0DA8A24800            mov ecx, dword ptr [0048A2A8]
:0040F665 894DFC                  mov dword ptr [ebp-04], ecx
:0040F668 C745F800000000          mov [ebp-08], 00000000
:0040F66F EB09                    jmp 0040F67A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F698(U)
|
:0040F671 8B55F8                  mov edx, dword ptr [ebp-08]
:0040F674 83C201                  add edx, 00000001
:0040F677 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F66F(U)
|
:0040F67A 837DF841                cmp dword ptr [ebp-08], 00000041
:0040F67E 731A                    jnb 0040F69A
:0040F680 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F683 50                      push eax
:0040F684 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F687 6BC931                  imul ecx, 00000031
:0040F68A 81C1001D4B00            add ecx, 004B1D00
:0040F690 E81156FFFF              call 00404CA6
:0040F695 8945FC                  mov dword ptr [ebp-04], eax
:0040F698 EBD7                    jmp 0040F671

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F65D(U), :0040F67E(C)
|
:0040F69A 8BE5                    mov esp, ebp
:0040F69C 5D                      pop ebp
:0040F69D C3                      ret



* Referenced by a CALL at Address:
|:0040FB1A   
|
:0040F69E 55                      push ebp
:0040F69F 8BEC                    mov ebp, esp
:0040F6A1 E8A9FDFFFF              call 0040F44F
:0040F6A6 E80DFEFFFF              call 0040F4B8
:0040F6AB E86BFEFFFF              call 0040F51B
:0040F6B0 E8C9FEFFFF              call 0040F57E
:0040F6B5 E824FFFFFF              call 0040F5DE
:0040F6BA E87FFFFFFF              call 0040F63E
:0040F6BF 5D                      pop ebp
:0040F6C0 C3                      ret



* Referenced by a CALL at Addresses:
|:0040F713   , :0040F7AF   , :0040F7FE   
|
:0040F6C1 55                      push ebp
:0040F6C2 8BEC                    mov ebp, esp
:0040F6C4 6A00                    push 00000000
:0040F6C6 6A00                    push 00000000
:0040F6C8 68F0000000              push 000000F0
:0040F6CD 8B4508                  mov eax, dword ptr [ebp+08]
:0040F6D0 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0040F6D1 FF1504D64B00            Call dword ptr [004BD604]
:0040F6D7 83E801                  sub eax, 00000001
:0040F6DA F7D8                    neg eax
:0040F6DC 1BC0                    sbb eax, eax
:0040F6DE 40                      inc eax
:0040F6DF 5D                      pop ebp
:0040F6E0 C3                      ret



* Referenced by a CALL at Addresses:
|:0040F993   , :0040F9EC   , :0040FA45   , :0046D505   
|
:0040F6E1 55                      push ebp
:0040F6E2 8BEC                    mov ebp, esp
:0040F6E4 6A00                    push 00000000
:0040F6E6 33C0                    xor eax, eax
:0040F6E8 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0040F6EC 0F95C0                  setne al
:0040F6EF 50                      push eax
:0040F6F0 68F1000000              push 000000F1
:0040F6F5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F6F8 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0040F6F9 FF1504D64B00            Call dword ptr [004BD604]
:0040F6FF 5D                      pop ebp
:0040F700 C3                      ret



* Referenced by a CALL at Address:
|:0040F777   
|
:0040F701 55                      push ebp
:0040F702 8BEC                    mov ebp, esp
:0040F704 8B450C                  mov eax, dword ptr [ebp+0C]
:0040F707 50                      push eax
:0040F708 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F70B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040F70C FF1510D64B00            Call dword ptr [004BD610]
:0040F712 50                      push eax
:0040F713 E8A9FFFFFF              call 0040F6C1
:0040F718 83C404                  add esp, 00000004
:0040F71B 85C0                    test eax, eax
:0040F71D 7410                    je 0040F72F
:0040F71F 8B5510                  mov edx, dword ptr [ebp+10]
:0040F722 52                      push edx
:0040F723 B978294B00              mov ecx, 004B2978
:0040F728 E84250FFFF              call 0040476F
:0040F72D EB0E                    jmp 0040F73D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F71D(C)
|
:0040F72F 8B4510                  mov eax, dword ptr [ebp+10]
:0040F732 50                      push eax
:0040F733 B978294B00              mov ecx, 004B2978
:0040F738 E85650FFFF              call 00404793

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F72D(U)
|
:0040F73D 5D                      pop ebp
:0040F73E C3                      ret



* Referenced by a CALL at Address:
|:0040F904   
|
:0040F73F 55                      push ebp
:0040F740 8BEC                    mov ebp, esp
:0040F742 83EC08                  sub esp, 00000008
:0040F745 C745FC00000000          mov [ebp-04], 00000000
:0040F74C EB09                    jmp 0040F757

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F77F(U)
|
:0040F74E 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F751 83C001                  add eax, 00000001
:0040F754 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F74C(U)
|
:0040F757 837DFC05                cmp dword ptr [ebp-04], 00000005
:0040F75B 7324                    jnb 0040F781
:0040F75D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F760 8B14CD34C44700          mov edx, dword ptr [8*ecx+0047C434]
:0040F767 52                      push edx
:0040F768 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F76B 8B0CC530C44700          mov ecx, dword ptr [8*eax+0047C430]
:0040F772 51                      push ecx
:0040F773 8B5508                  mov edx, dword ptr [ebp+08]
:0040F776 52                      push edx
:0040F777 E885FFFFFF              call 0040F701
:0040F77C 83C40C                  add esp, 0000000C
:0040F77F EBCD                    jmp 0040F74E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F75B(C)
|
:0040F781 C745FC00000000          mov [ebp-04], 00000000
:0040F788 EB09                    jmp 0040F793

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F7CE(U)
|
:0040F78A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F78D 83C001                  add eax, 00000001
:0040F790 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F788(U)
|
:0040F793 837DFC04                cmp dword ptr [ebp-04], 00000004
:0040F797 7337                    jnb 0040F7D0
:0040F799 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F79C 8B148D58C44700          mov edx, dword ptr [4*ecx+0047C458]
:0040F7A3 52                      push edx
:0040F7A4 8B4508                  mov eax, dword ptr [ebp+08]
:0040F7A7 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040F7A8 FF1510D64B00            Call dword ptr [004BD610]
:0040F7AE 50                      push eax
:0040F7AF E80DFFFFFF              call 0040F6C1
:0040F7B4 83C404                  add esp, 00000004
:0040F7B7 85C0                    test eax, eax
:0040F7B9 7413                    je 0040F7CE
:0040F7BB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040F7BE 83C101                  add ecx, 00000001
:0040F7C1 51                      push ecx
:0040F7C2 B978294B00              mov ecx, 004B2978
:0040F7C7 E824C90400              call 0045C0F0
:0040F7CC EB02                    jmp 0040F7D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F7B9(C)
|
:0040F7CE EBBA                    jmp 0040F78A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F797(C), :0040F7CC(U)
|
:0040F7D0 C745FC00000000          mov [ebp-04], 00000000
:0040F7D7 EB09                    jmp 0040F7E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F81D(U)
|
:0040F7D9 8B55FC                  mov edx, dword ptr [ebp-04]
:0040F7DC 83C201                  add edx, 00000001
:0040F7DF 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F7D7(U)
|
:0040F7E2 837DFC04                cmp dword ptr [ebp-04], 00000004
:0040F7E6 7337                    jnb 0040F81F
:0040F7E8 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F7EB 8B0C8568C44700          mov ecx, dword ptr [4*eax+0047C468]
:0040F7F2 51                      push ecx
:0040F7F3 8B5508                  mov edx, dword ptr [ebp+08]
:0040F7F6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040F7F7 FF1510D64B00            Call dword ptr [004BD610]
:0040F7FD 50                      push eax
:0040F7FE E8BEFEFFFF              call 0040F6C1
:0040F803 83C404                  add esp, 00000004
:0040F806 85C0                    test eax, eax
:0040F808 7413                    je 0040F81D
:0040F80A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040F80D 83C001                  add eax, 00000001
:0040F810 50                      push eax
:0040F811 B978294B00              mov ecx, 004B2978
:0040F816 E895D1FFFF              call 0040C9B0
:0040F81B EB02                    jmp 0040F81F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F808(C)
|
:0040F81D EBBA                    jmp 0040F7D9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F7E6(C), :0040F81B(U)
|
:0040F81F B978294B00              mov ecx, 004B2978
:0040F824 E887D0FFFF              call 0040C8B0
:0040F829 2500100000              and eax, 00001000
:0040F82E 85C0                    test eax, eax
:0040F830 750C                    jne 0040F83E
:0040F832 B9F8544B00              mov ecx, 004B54F8
:0040F837 E8B69C0500              call 004694F2
:0040F83C EB2B                    jmp 0040F869

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F830(C)
|
:0040F83E 6A00                    push 00000000
:0040F840 B978294B00              mov ecx, 004B2978
:0040F845 E8D6050000              call 0040FE20
:0040F84A 25FFFF0000              and eax, 0000FFFF
:0040F84F 8945F8                  mov dword ptr [ebp-08], eax
:0040F852 817DF8FFFF0000          cmp dword ptr [ebp-08], 0000FFFF
:0040F859 740E                    je 0040F869
:0040F85B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F85E 51                      push ecx
:0040F85F B9F8544B00              mov ecx, 004B54F8
:0040F864 E8CC9C0500              call 00469535

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F83C(U), :0040F859(C)
|
:0040F869 B978294B00              mov ecx, 004B2978
:0040F86E E83DD0FFFF              call 0040C8B0
:0040F873 2500200000              and eax, 00002000
:0040F878 85C0                    test eax, eax
:0040F87A 750A                    jne 0040F886
:0040F87C B900554B00              mov ecx, 004B5500
:0040F881 E8339C0500              call 004694B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F87A(C)
|
:0040F886 B978294B00              mov ecx, 004B2978
:0040F88B E870050000              call 0040FE00
:0040F890 25FF000000              and eax, 000000FF
:0040F895 50                      push eax
:0040F896 B900554B00              mov ecx, 004B5500
:0040F89B E8FE9B0500              call 0046949E
:0040F8A0 8BE5                    mov esp, ebp
:0040F8A2 5D                      pop ebp
:0040F8A3 C3                      ret


:0040F8A4 55                      push ebp
:0040F8A5 8BEC                    mov ebp, esp
:0040F8A7 51                      push ecx
:0040F8A8 8B450C                  mov eax, dword ptr [ebp+0C]
:0040F8AB 8945FC                  mov dword ptr [ebp-04], eax
:0040F8AE 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:0040F8B5 740B                    je 0040F8C2
:0040F8B7 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0040F8BE 7415                    je 0040F8D5
:0040F8C0 EB7B                    jmp 0040F93D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F8B5(C)
|
:0040F8C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F8C5 51                      push ecx
:0040F8C6 E87E000000              call 0040F949
:0040F8CB 83C404                  add esp, 00000004
:0040F8CE B801000000              mov eax, 00000001
:0040F8D3 EB6E                    jmp 0040F943

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F8BE(C)
|
:0040F8D5 8B5510                  mov edx, dword ptr [ebp+10]
:0040F8D8 81E2FFFF0000            and edx, 0000FFFF
:0040F8DE 81FAA9040000            cmp edx, 000004A9
:0040F8E4 750D                    jne 0040F8F3
:0040F8E6 681F040000              push 0000041F
:0040F8EB E8DBA10500              call 00469ACB
:0040F8F0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F8E4(C)
|
:0040F8F3 8B4510                  mov eax, dword ptr [ebp+10]
:0040F8F6 25FFFF0000              and eax, 0000FFFF
:0040F8FB 83F801                  cmp eax, 00000001
:0040F8FE 7522                    jne 0040F922
:0040F900 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F903 51                      push ecx
:0040F904 E836FEFFFF              call 0040F73F
:0040F909 83C404                  add esp, 00000004
:0040F90C 6A01                    push 00000001
:0040F90E 8B5508                  mov edx, dword ptr [ebp+08]
:0040F911 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040F912 FF15D8D54B00            Call dword ptr [004BD5D8]
:0040F918 C705F0C3470000000000    mov dword ptr [0047C3F0], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F8FE(C)
|
:0040F922 8B4510                  mov eax, dword ptr [ebp+10]
:0040F925 25FFFF0000              and eax, 0000FFFF
:0040F92A 83F802                  cmp eax, 00000002
:0040F92D 750C                    jne 0040F93B
:0040F92F 6A01                    push 00000001
:0040F931 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040F934 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040F935 FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F92D(C)
|
:0040F93B EB04                    jmp 0040F941

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F8C0(U)
|
:0040F93D 33C0                    xor eax, eax
:0040F93F EB02                    jmp 0040F943

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F93B(U)
|
:0040F941 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040F8D3(U), :0040F93F(U)
|
:0040F943 8BE5                    mov esp, ebp
:0040F945 5D                      pop ebp
:0040F946 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0040F8C6   
|
:0040F949 55                      push ebp
:0040F94A 8BEC                    mov ebp, esp
:0040F94C 83EC0C                  sub esp, 0000000C
:0040F94F C745F400000000          mov [ebp-0C], 00000000
:0040F956 EB09                    jmp 0040F961

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F99B(U)
|
:0040F958 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040F95B 83C001                  add eax, 00000001
:0040F95E 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F956(U)
|
:0040F961 837DF405                cmp dword ptr [ebp-0C], 00000005
:0040F965 7336                    jnb 0040F99D
:0040F967 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040F96A 8B14CD34C44700          mov edx, dword ptr [8*ecx+0047C434]
:0040F971 52                      push edx
:0040F972 B978294B00              mov ecx, 004B2978
:0040F977 E8D24DFFFF              call 0040474E
:0040F97C 50                      push eax
:0040F97D 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040F980 8B0CC530C44700          mov ecx, dword ptr [8*eax+0047C430]
:0040F987 51                      push ecx
:0040F988 8B5508                  mov edx, dword ptr [ebp+08]
:0040F98B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040F98C FF1510D64B00            Call dword ptr [004BD610]
:0040F992 50                      push eax
:0040F993 E849FDFFFF              call 0040F6E1
:0040F998 83C408                  add esp, 00000008
:0040F99B EBBB                    jmp 0040F958

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F965(C)
|
:0040F99D B978294B00              mov ecx, 004B2978
:0040F9A2 E889C70400              call 0045C130
:0040F9A7 25FF000000              and eax, 000000FF
:0040F9AC 83E801                  sub eax, 00000001
:0040F9AF 8945F8                  mov dword ptr [ebp-08], eax
:0040F9B2 C745F400000000          mov [ebp-0C], 00000000
:0040F9B9 EB09                    jmp 0040F9C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F9F4(U)
|
:0040F9BB 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040F9BE 83C001                  add eax, 00000001
:0040F9C1 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F9B9(U)
|
:0040F9C4 837DF404                cmp dword ptr [ebp-0C], 00000004
:0040F9C8 732C                    jnb 0040F9F6
:0040F9CA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040F9CD 33D2                    xor edx, edx
:0040F9CF 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:0040F9D2 0F94C2                  sete dl
:0040F9D5 52                      push edx
:0040F9D6 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040F9D9 8B0C8558C44700          mov ecx, dword ptr [4*eax+0047C458]
:0040F9E0 51                      push ecx
:0040F9E1 8B5508                  mov edx, dword ptr [ebp+08]
:0040F9E4 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040F9E5 FF1510D64B00            Call dword ptr [004BD610]
:0040F9EB 50                      push eax
:0040F9EC E8F0FCFFFF              call 0040F6E1
:0040F9F1 83C408                  add esp, 00000008
:0040F9F4 EBC5                    jmp 0040F9BB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040F9C8(C)
|
:0040F9F6 B978294B00              mov ecx, 004B2978
:0040F9FB E890CFFFFF              call 0040C990
:0040FA00 25FF000000              and eax, 000000FF
:0040FA05 83E801                  sub eax, 00000001
:0040FA08 8945FC                  mov dword ptr [ebp-04], eax
:0040FA0B C745F400000000          mov [ebp-0C], 00000000
:0040FA12 EB09                    jmp 0040FA1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FA4D(U)
|
:0040FA14 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040FA17 83C001                  add eax, 00000001
:0040FA1A 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FA12(U)
|
:0040FA1D 837DF404                cmp dword ptr [ebp-0C], 00000004
:0040FA21 732C                    jnb 0040FA4F
:0040FA23 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040FA26 33D2                    xor edx, edx
:0040FA28 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:0040FA2B 0F94C2                  sete dl
:0040FA2E 52                      push edx
:0040FA2F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040FA32 8B0C8568C44700          mov ecx, dword ptr [4*eax+0047C468]
:0040FA39 51                      push ecx
:0040FA3A 8B5508                  mov edx, dword ptr [ebp+08]
:0040FA3D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0040FA3E FF1510D64B00            Call dword ptr [004BD610]
:0040FA44 50                      push eax
:0040FA45 E897FCFFFF              call 0040F6E1
:0040FA4A 83C408                  add esp, 00000008
:0040FA4D EBC5                    jmp 0040FA14

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FA21(C)
|
:0040FA4F 8BE5                    mov esp, ebp
:0040FA51 5D                      pop ebp
:0040FA52 C3                      ret



* Referenced by a CALL at Addresses:
|:0040FB7E   , :00469BE9   
|
:0040FA53 55                      push ebp
:0040FA54 8BEC                    mov ebp, esp
:0040FA56 6A00                    push 00000000
:0040FA58 68A4F84000              push 0040F8A4
:0040FA5D A1B0554B00              mov eax, dword ptr [004B55B0]
:0040FA62 50                      push eax

* Possible StringData Ref from Data Obj ->"KANKYOU"
                                  |
:0040FA63 6828C54700              push 0047C528
:0040FA68 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0040FA6E 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0040FA6F FF15DCD64B00            Call dword ptr [004BD6DC]
:0040FA75 5D                      pop ebp
:0040FA76 C3                      ret



* Referenced by a CALL at Address:
|:00469BC4   
|
:0040FA77 55                      push ebp
:0040FA78 8BEC                    mov ebp, esp
:0040FA7A 83EC0C                  sub esp, 0000000C
:0040FA7D B9806D4800              mov ecx, 00486D80
:0040FA82 E899040000              call 0040FF20
:0040FA87 8945FC                  mov dword ptr [ebp-04], eax
:0040FA8A 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FA8D 50                      push eax
:0040FA8E E87D8A0600              call 00478510
:0040FA93 83C404                  add esp, 00000004
:0040FA96 8945F8                  mov dword ptr [ebp-08], eax
:0040FA99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040FA9C 0FBE11                  movsx edx, byte ptr [ecx]
:0040FA9F 85D2                    test edx, edx
:0040FAA1 7411                    je 0040FAB4
:0040FAA3 817DF8FA000000          cmp dword ptr [ebp-08], 000000FA
:0040FAAA 7308                    jnb 0040FAB4
:0040FAAC 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FAAF 8945F4                  mov dword ptr [ebp-0C], eax
:0040FAB2 EB07                    jmp 0040FABB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FAA1(C), :0040FAAA(C)
|

* Possible StringData Ref from Data Obj ->"{bLk"
                                  |
:0040FAB4 C745F430C54700          mov [ebp-0C], 0047C530

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FAB2(U)
|
:0040FABB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0040FABE 51                      push ecx
:0040FABF E8929E0500              call 00469956
:0040FAC4 83C404                  add esp, 00000004
:0040FAC7 8BE5                    mov esp, ebp
:0040FAC9 5D                      pop ebp
:0040FACA C3                      ret



* Referenced by a CALL at Address:
|:0042F0E5   
|
:0040FACB 55                      push ebp
:0040FACC 8BEC                    mov ebp, esp
:0040FACE 83EC0C                  sub esp, 0000000C
:0040FAD1 66C745F80000            mov [ebp-08], 0000
:0040FAD7 66C745FC0000            mov [ebp-04], 0000
:0040FADD 681A040000              push 0000041A
:0040FAE2 E8F2AA0500              call 0046A5D9
:0040FAE7 83C404                  add esp, 00000004
:0040FAEA C705F0C34700FF000000    mov dword ptr [0047C3F0], 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040FAF4 6A04                    push 00000004
:0040FAF6 6A00                    push 00000000
:0040FAF8 6A00                    push 00000000
:0040FAFA B9007D4A00              mov ecx, 004A7D00
:0040FAFF E88C940600              call 00478F90
:0040FB04 A3A8A24800              mov dword ptr [0048A2A8], eax
:0040FB09 6A00                    push 00000000
:0040FB0B 6A1E                    push 0000001E
:0040FB0D 68B0474900              push 004947B0
:0040FB12 E8C98A0600              call 004785E0
:0040FB17 83C40C                  add esp, 0000000C
:0040FB1A E87FFBFFFF              call 0040F69E
:0040FB1F B978294B00              mov ecx, 004B2978
:0040FB24 E88EE3FFFF              call 0040DEB7

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040FB29 6A02                    push 00000002
:0040FB2B B900554B00              mov ecx, 004B5500
:0040FB30 E869990500              call 0046949E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC5F(U)
|
:0040FB35 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UEE}"
                                  |
:0040FB37 68D2FC4000              push 0040FCD2
:0040FB3C A1B0554B00              mov eax, dword ptr [004B55B0]
:0040FB41 50                      push eax

* Possible Reference to Dialog: DialogID_00C1 
                                  |
:0040FB42 68C1000000              push 000000C1
:0040FB47 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0040FB4D 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0040FB4E FF15DCD64B00            Call dword ptr [004BD6DC]
:0040FB54 8B1580AA4800            mov edx, dword ptr [0048AA80]
:0040FB5A 8955F4                  mov dword ptr [ebp-0C], edx
:0040FB5D 837DF404                cmp dword ptr [ebp-0C], 00000004
:0040FB61 0F87EA000000            ja 0040FC51
:0040FB67 8B45F4                  mov eax, dword ptr [ebp-0C]
:0040FB6A FF2485BEFC4000          jmp dword ptr [4*eax+0040FCBE]
:0040FB71 680C080000              push 0000080C
:0040FB76 E85EAA0500              call 0046A5D9
:0040FB7B 83C404                  add esp, 00000004
:0040FB7E E8D0FEFFFF              call 0040FA53
:0040FB83 668B4DF8                mov cx, word ptr [ebp-08]
:0040FB87 6683F101                xor cx, 0001
:0040FB8B 66894DF8                mov word ptr [ebp-08], cx
:0040FB8F E9BD000000              jmp 0040FC51
:0040FB94 682E040000              push 0000042E
:0040FB99 E83BAA0500              call 0046A5D9
:0040FB9E 83C404                  add esp, 00000004
:0040FBA1 E8F1E3FFFF              call 0040DF97
:0040FBA6 668B55F8                mov dx, word ptr [ebp-08]
:0040FBAA 6683F202                xor dx, 0002
:0040FBAE 668955F8                mov word ptr [ebp-08], dx
:0040FBB2 E99A000000              jmp 0040FC51
:0040FBB7 8B45F8                  mov eax, dword ptr [ebp-08]
:0040FBBA 25FFFF0000              and eax, 0000FFFF
:0040FBBF 83F80F                  cmp eax, 0000000F
:0040FBC2 7525                    jne 0040FBE9
:0040FBC4 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->""
                                  |
:0040FBC6 6840C54700              push 0047C540
:0040FBCB E8109D0500              call 004698E0
:0040FBD0 83C408                  add esp, 00000008
:0040FBD3 85C0                    test eax, eax
:0040FBD5 740A                    je 0040FBE1
:0040FBD7 B8FFFF0000              mov eax, 0000FFFF
:0040FBDC E9D9000000              jmp 0040FCBA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FBD5(C)
|
:0040FBE1 66C745FC0100            mov [ebp-04], 0001
:0040FBE7 EB68                    jmp 0040FC51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FBC2(C)
|
:0040FBE9 B8FFFF0000              mov eax, 0000FFFF
:0040FBEE E9C7000000              jmp 0040FCBA
:0040FBF3 68D0070000              push 000007D0
:0040FBF8 E8CE9E0500              call 00469ACB
:0040FBFD 83C404                  add esp, 00000004
:0040FC00 668B4DF8                mov cx, word ptr [ebp-08]
:0040FC04 6683F104                xor cx, 0004
:0040FC08 66894DF8                mov word ptr [ebp-08], cx
:0040FC0C EB43                    jmp 0040FC51
:0040FC0E 8B55FC                  mov edx, dword ptr [ebp-04]
:0040FC11 81E2FFFF0000            and edx, 0000FFFF
:0040FC17 83FA01                  cmp edx, 00000001
:0040FC1A 751C                    jne 0040FC38
:0040FC1C E894DB0500              call 0046D7B5
:0040FC21 85C0                    test eax, eax
:0040FC23 740C                    je 0040FC31
:0040FC25 C705F0C3470000000000    mov dword ptr [0047C3F0], 00000000
:0040FC2F EB20                    jmp 0040FC51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC23(C)
|
:0040FC31 E8B1050000              call 004101E7
:0040FC36 EB19                    jmp 0040FC51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC1A(C)
|
:0040FC38 687E040000              push 0000047E
:0040FC3D E8899E0500              call 00469ACB
:0040FC42 83C404                  add esp, 00000004
:0040FC45 668B45F8                mov ax, word ptr [ebp-08]
:0040FC49 66350800                xor ax, 0008
:0040FC4D 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FB61(C), :0040FB8F(U), :0040FBB2(U), :0040FBE7(U), :0040FC0C(U)
|:0040FC2F(U), :0040FC36(U)
|
:0040FC51 813DF0C34700FF000000    cmp dword ptr [0047C3F0], 000000FF
:0040FC5B 7402                    je 0040FC5F
:0040FC5D EB05                    jmp 0040FC64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC5B(C)
|
:0040FC5F E9D1FEFFFF              jmp 0040FB35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC5D(U)
|
:0040FC64 E83CCF0500              call 0046CBA5
:0040FC69 85C0                    test eax, eax
:0040FC6B 752A                    jne 0040FC97

* Possible StringData Ref from Data Obj ->"Lk@ܮءC
нT{OΪ̵wЪѾle"
                                        ->"qC"
                                  |
:0040FC6D 6848C54700              push 0047C548
:0040FC72 E87B9D0500              call 004699F2
:0040FC77 83C404                  add esp, 00000004
:0040FC7A E837EC0500              call 0046E8B6
:0040FC7F E804F40100              call 0042F088
:0040FC84 6A00                    push 00000000
:0040FC86 6A00                    push 00000000
:0040FC88 6A10                    push 00000010
:0040FC8A 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0040FC90 51                      push ecx

* Reference To: USER32.PostMessageA, Ord:01B1h
                                  |
:0040FC91 FF15D0D54B00            Call dword ptr [004BD5D0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FC6B(C)
|
:0040FC97 E842AD0000              call 0041A9DE
:0040FC9C E836040000              call 004100D7
:0040FCA1 E841050000              call 004101E7
:0040FCA6 E83B040000              call 004100E6
:0040FCAB C70550D44700FFFF0000    mov dword ptr [0047D450], 0000FFFF
:0040FCB5 A1F0C34700              mov eax, dword ptr [0047C3F0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FBDC(U), :0040FBEE(U)
|
:0040FCBA 8BE5                    mov esp, ebp
:0040FCBC 5D                      pop ebp
:0040FCBD C3                      ret



:0040FCBE 71FB4000                DWORD 0040FB71
:0040FCC2 94FB4000                DWORD 0040FB94
:0040FCC6 B7FB4000                DWORD 0040FBB7
:0040FCCA F3FB4000                DWORD 0040FBF3
:0040FCCE 0EFC4000                DWORD 0040FC0E


:0040FCD2 55                      push ebp
:0040FCD3 8BEC                    mov ebp, esp
:0040FCD5 83EC08                  sub esp, 00000008
:0040FCD8 8B450C                  mov eax, dword ptr [ebp+0C]
:0040FCDB 8945FC                  mov dword ptr [ebp-04], eax
:0040FCDE 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:0040FCE5 740E                    je 0040FCF5
:0040FCE7 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0040FCEE 740A                    je 0040FCFA
:0040FCF0 E9C1000000              jmp 0040FDB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FCE5(C)
|
:0040FCF5 E9C0000000              jmp 0040FDBA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FCEE(C)
|
:0040FCFA 8B4D10                  mov ecx, dword ptr [ebp+10]
:0040FCFD 81E1FFFF0000            and ecx, 0000FFFF
:0040FD03 894DF8                  mov dword ptr [ebp-08], ecx
:0040FD06 8B55F8                  mov edx, dword ptr [ebp-08]
:0040FD09 81EA03040000            sub edx, 00000403
:0040FD0F 8955F8                  mov dword ptr [ebp-08], edx
:0040FD12 837DF821                cmp dword ptr [ebp-08], 00000021
:0040FD16 0F879A000000            ja 0040FDB6
:0040FD1C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0040FD1F 33C0                    xor eax, eax
:0040FD21 8A81DDFD4000            mov al, byte ptr [ecx+0040FDDD]
:0040FD27 FF2485C5FD4000          jmp dword ptr [4*eax+0040FDC5]
:0040FD2E 6A01                    push 00000001
:0040FD30 8B5508                  mov edx, dword ptr [ebp+08]
:0040FD33 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040FD34 FF15D8D54B00            Call dword ptr [004BD5D8]
:0040FD3A C70580AA480000000000    mov dword ptr [0048AA80], 00000000
:0040FD44 33C0                    xor eax, eax
:0040FD46 EB77                    jmp 0040FDBF
:0040FD48 6A01                    push 00000001
:0040FD4A 8B4508                  mov eax, dword ptr [ebp+08]
:0040FD4D 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040FD4E FF15D8D54B00            Call dword ptr [004BD5D8]
:0040FD54 C70580AA480001000000    mov dword ptr [0048AA80], 00000001
:0040FD5E 33C0                    xor eax, eax
:0040FD60 EB5D                    jmp 0040FDBF
:0040FD62 6A01                    push 00000001
:0040FD64 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FD67 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040FD68 FF15D8D54B00            Call dword ptr [004BD5D8]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0040FD6E C70580AA480002000000    mov dword ptr [0048AA80], 00000002
:0040FD78 33C0                    xor eax, eax
:0040FD7A EB43                    jmp 0040FDBF
:0040FD7C 6A01                    push 00000001
:0040FD7E 8B5508                  mov edx, dword ptr [ebp+08]
:0040FD81 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040FD82 FF15D8D54B00            Call dword ptr [004BD5D8]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0040FD88 C70580AA480003000000    mov dword ptr [0048AA80], 00000003
:0040FD92 B801000000              mov eax, 00000001
:0040FD97 EB26                    jmp 0040FDBF
:0040FD99 6A01                    push 00000001
:0040FD9B 8B4508                  mov eax, dword ptr [ebp+08]
:0040FD9E 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0040FD9F FF15D8D54B00            Call dword ptr [004BD5D8]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040FDA5 C70580AA480004000000    mov dword ptr [0048AA80], 00000004
:0040FDAF B801000000              mov eax, 00000001
:0040FDB4 EB09                    jmp 0040FDBF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FCF0(U), :0040FD16(C)
|
:0040FDB6 33C0                    xor eax, eax
:0040FDB8 EB05                    jmp 0040FDBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FCF5(U)
|
:0040FDBA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0040FD46(U), :0040FD60(U), :0040FD7A(U), :0040FD97(U), :0040FDB4(U)
|:0040FDB8(U)
|
:0040FDBF 8BE5                    mov esp, ebp
:0040FDC1 5D                      pop ebp
:0040FDC2 C21000                  ret 0010



:0040FDC5 2EFD4000                DWORD 0040FD2E
:0040FDC9 48FD4000                DWORD 0040FD48
:0040FDCD 62FD4000                DWORD 0040FD62
:0040FDD1 7CFD4000                DWORD 0040FD7C
:0040FDD5 99FD4000                DWORD 0040FD99
:0040FDD9 B6FD4000                DWORD 0040FDB6


:0040FDDD 0001                    add byte ptr [ecx], al
:0040FDDF 0505050505              add eax, 05050505
:0040FDE4 0505050505              add eax, 05050505
:0040FDE9 0505050505              add eax, 05050505
:0040FDEE 0505050505              add eax, 05050505
:0040FDF3 0505050505              add eax, 05050505
:0040FDF8 0505050502              add eax, 02050505
:0040FDFD 0304CC                  add eax, dword ptr [esp+8*ecx]

* Referenced by a CALL at Addresses:
|:00404F02   , :00404F45   , :0040E824   , :0040F88B   , :004233F7   
|:00423A26   , :00428A92   , :0042A1C2   , :0042A29C   , :00431BB5   
|:004357C9   , :00438C48   , :00438D8A   , :0043AD25   , :0043B2BC   
|:004425AF   , :00443161   , :0044337D   , :0044624C   , :00446284   
|:004462BA   , :004475D6   , :00451F85   , :0045BB13   , :0045BC50   
|:0045BC60   , :0045BF80   , :0045BFA2   
|
:0040FE00 55                      push ebp
:0040FE01 8BEC                    mov ebp, esp
:0040FE03 51                      push ecx
:0040FE04 894DFC                  mov dword ptr [ebp-04], ecx
:0040FE07 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FE0A 8A400E                  mov al, byte ptr [eax+0E]
:0040FE0D 8BE5                    mov esp, ebp
:0040FE0F 5D                      pop ebp
:0040FE10 C3                      ret


:0040FE11 CC                      int 03
:0040FE12 CC                      int 03
:0040FE13 CC                      int 03
:0040FE14 CC                      int 03
:0040FE15 CC                      int 03
:0040FE16 CC                      int 03
:0040FE17 CC                      int 03
:0040FE18 CC                      int 03
:0040FE19 CC                      int 03
:0040FE1A CC                      int 03
:0040FE1B CC                      int 03
:0040FE1C CC                      int 03
:0040FE1D CC                      int 03
:0040FE1E CC                      int 03
:0040FE1F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040E7E8   , :0040F845   , :004697DB   
|
:0040FE20 55                      push ebp
:0040FE21 8BEC                    mov ebp, esp
:0040FE23 51                      push ecx
:0040FE24 894DFC                  mov dword ptr [ebp-04], ecx
:0040FE27 8B4508                  mov eax, dword ptr [ebp+08]
:0040FE2A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040FE2D 668B444116              mov ax, word ptr [ecx+2*eax+16]
:0040FE32 8BE5                    mov esp, ebp
:0040FE34 5D                      pop ebp
:0040FE35 C20400                  ret 0004


:0040FE38 CC                      int 03
:0040FE39 CC                      int 03
:0040FE3A CC                      int 03
:0040FE3B CC                      int 03
:0040FE3C CC                      int 03
:0040FE3D CC                      int 03
:0040FE3E CC                      int 03
:0040FE3F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040ECF8   , :0041156B   , :004121A7   , :0042F23D   , :0042F261   
|:0042F93E   , :004316A4   , :004358AB   , :0044B266   , :0044B6CD   
|:0045FCD6   
|
:0040FE40 55                      push ebp
:0040FE41 8BEC                    mov ebp, esp
:0040FE43 51                      push ecx
:0040FE44 894DFC                  mov dword ptr [ebp-04], ecx
:0040FE47 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FE4A 8A4005                  mov al, byte ptr [eax+05]
:0040FE4D 8BE5                    mov esp, ebp
:0040FE4F 5D                      pop ebp
:0040FE50 C3                      ret


:0040FE51 CC                      int 03
:0040FE52 CC                      int 03
:0040FE53 CC                      int 03
:0040FE54 CC                      int 03
:0040FE55 CC                      int 03
:0040FE56 CC                      int 03
:0040FE57 CC                      int 03
:0040FE58 CC                      int 03
:0040FE59 CC                      int 03
:0040FE5A CC                      int 03
:0040FE5B CC                      int 03
:0040FE5C CC                      int 03
:0040FE5D CC                      int 03
:0040FE5E CC                      int 03
:0040FE5F CC                      int 03

* Referenced by a CALL at Addresses:
|:00401935   , :004019F3   , :00401A4E   , :0040ED2E   , :00412B9E   
|:00413855   , :0041420C   , :0041478A   , :0041604E   , :00418BC4   
|:00418BD4   , :00421124   , :00423B53   , :00427A00   , :00427A1B   
|:0042ABF7   , :004382A8   , :004384E4   , :004394B2   , :00439A0D   
|:0043A274   , :0043A38D   , :0043A663   , :0043A76B   , :0043A8EC   
|:0043AAD7   , :0044222C   , :00461EF4   , :00463643   , :00464841   
|:00466322   , :0046633B   
|
:0040FE60 55                      push ebp
:0040FE61 8BEC                    mov ebp, esp
:0040FE63 51                      push ecx
:0040FE64 894DFC                  mov dword ptr [ebp-04], ecx
:0040FE67 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FE6A 8A4011                  mov al, byte ptr [eax+11]
:0040FE6D 8BE5                    mov esp, ebp
:0040FE6F 5D                      pop ebp
:0040FE70 C3                      ret


:0040FE71 CC                      int 03
:0040FE72 CC                      int 03
:0040FE73 CC                      int 03
:0040FE74 CC                      int 03
:0040FE75 CC                      int 03
:0040FE76 CC                      int 03
:0040FE77 CC                      int 03
:0040FE78 CC                      int 03
:0040FE79 CC                      int 03
:0040FE7A CC                      int 03
:0040FE7B CC                      int 03
:0040FE7C CC                      int 03
:0040FE7D CC                      int 03
:0040FE7E CC                      int 03
:0040FE7F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040DE9F   , :00433FDB   , :00435535   , :00435575   , :004355B5   
|:004438D6   , :0044EE08   , :0044F3DB   , :0045CBD3   , :0045FE61   
|:00460293   , :004610F5   
|
:0040FE80 55                      push ebp
:0040FE81 8BEC                    mov ebp, esp
:0040FE83 51                      push ecx
:0040FE84 894DFC                  mov dword ptr [ebp-04], ecx
:0040FE87 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FE8A 8A4030                  mov al, byte ptr [eax+30]
:0040FE8D 8BE5                    mov esp, ebp
:0040FE8F 5D                      pop ebp
:0040FE90 C3                      ret


:0040FE91 CC                      int 03
:0040FE92 CC                      int 03
:0040FE93 CC                      int 03
:0040FE94 CC                      int 03
:0040FE95 CC                      int 03
:0040FE96 CC                      int 03
:0040FE97 CC                      int 03
:0040FE98 CC                      int 03
:0040FE99 CC                      int 03
:0040FE9A CC                      int 03
:0040FE9B CC                      int 03
:0040FE9C CC                      int 03
:0040FE9D CC                      int 03
:0040FE9E CC                      int 03
:0040FE9F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040ECE5   , :00419123   , :0041FAAA   , :0041FD57   , :0041FEF4   
|:0042116B   , :004225CF   , :00424A72   , :00424CA4   , :00425203   
|:0042521C   , :00425402   , :0042541B   , :00425913   , :0042592F   
|:00425B5B   , :00425B77   , :00425BEA   , :00425C06   , :00425DE0   
|:00425DFC   , :00427B3B   , :00427B81   , :0042B4E2   , :0042B4FB   
|:0042B58E   , :00434F6E   , :00438823   , :00438D63   , :0043ABCB   
|:0044388F   , :004438AB   , :00450DD0   , :00450E79   , :00451F65   
|:004550C7   , :00458E28   , :0045960F   , :00459662   , :0045B0DC   
|:0045D051   , :0045DE59   , :004606A4   , :00461557   , :0046226F   
|:00462A7A   , :00462A8A   , :00462DC6   , :004632B9   , :004661D4   
|:0046B395   
|
:0040FEA0 55                      push ebp
:0040FEA1 8BEC                    mov ebp, esp
:0040FEA3 51                      push ecx
:0040FEA4 894DFC                  mov dword ptr [ebp-04], ecx
:0040FEA7 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FEAA 8A4032                  mov al, byte ptr [eax+32]
:0040FEAD 8BE5                    mov esp, ebp
:0040FEAF 5D                      pop ebp
:0040FEB0 C3                      ret


:0040FEB1 CC                      int 03
:0040FEB2 CC                      int 03
:0040FEB3 CC                      int 03
:0040FEB4 CC                      int 03
:0040FEB5 CC                      int 03
:0040FEB6 CC                      int 03
:0040FEB7 CC                      int 03
:0040FEB8 CC                      int 03
:0040FEB9 CC                      int 03
:0040FEBA CC                      int 03
:0040FEBB CC                      int 03
:0040FEBC CC                      int 03
:0040FEBD CC                      int 03
:0040FEBE CC                      int 03
:0040FEBF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040E5D6   , :0041D1D9   , :004208ED   , :004212BF   , :0042EA88   
|:0042EAB8   , :0042EE14   , :0042EE4D   , :00430B86   , :00430BE5   
|:00432A8C   , :00434320   , :00434344   , :0043437C   , :004343A0   
|:00434644   , :004431B7   , :004431E9   , :00443224   , :00443258   
|:0044A008   , :0044A079   , :0044B66A   , :0044C8E2   , :0044E28B   
|:0044E353   , :00450C29   , :00458A26   , :0045A2EB   , :0045A53E   
|:0045C5B5   , :0045C6EA   , :0045C811   , :0045C93D   , :0045CD5D   
|:0045CE1A   , :0045CE35   , :0045CE9E   , :00468D99   , :00468E81   
|:0046BDCA   
|
:0040FEC0 55                      push ebp
:0040FEC1 8BEC                    mov ebp, esp
:0040FEC3 51                      push ecx
:0040FEC4 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0040FEC7 6A04                    push 00000004
:0040FEC9 6A00                    push 00000000
:0040FECB 6A00                    push 00000000
:0040FECD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040FED0 E8BB900600              call 00478F90
:0040FED5 8BE5                    mov esp, ebp
:0040FED7 5D                      pop ebp
:0040FED8 C3                      ret


:0040FED9 CC                      int 03
:0040FEDA CC                      int 03
:0040FEDB CC                      int 03
:0040FEDC CC                      int 03
:0040FEDD CC                      int 03
:0040FEDE CC                      int 03
:0040FEDF CC                      int 03

* Referenced by a CALL at Address:
|:0040F3A9   
|
:0040FEE0 55                      push ebp
:0040FEE1 8BEC                    mov ebp, esp
:0040FEE3 51                      push ecx
:0040FEE4 894DFC                  mov dword ptr [ebp-04], ecx
:0040FEE7 8B450C                  mov eax, dword ptr [ebp+0C]
:0040FEEA 50                      push eax
:0040FEEB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0040FEEE 51                      push ecx
:0040FEEF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0040FEF2 E832140000              call 00411329
:0040FEF7 8BE5                    mov esp, ebp
:0040FEF9 5D                      pop ebp
:0040FEFA C20800                  ret 0008


:0040FEFD CC                      int 03
:0040FEFE CC                      int 03
:0040FEFF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040EB85   , :0042F383   , :00434A21   , :00434A5A   , :00434B96   
|:0045E059   , :0045E08C   , :0045E580   , :0045E5A2   , :0045E5FD   
|:0045E68D   , :0045F263   , :0045FCEE   
|
:0040FF00 55                      push ebp
:0040FF01 8BEC                    mov ebp, esp
:0040FF03 51                      push ecx
:0040FF04 894DFC                  mov dword ptr [ebp-04], ecx
:0040FF07 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FF0A 8A4D08                  mov cl, byte ptr [ebp+08]
:0040FF0D 884801                  mov byte ptr [eax+01], cl
:0040FF10 8BE5                    mov esp, ebp
:0040FF12 5D                      pop ebp
:0040FF13 C20400                  ret 0004


:0040FF16 CC                      int 03
:0040FF17 CC                      int 03
:0040FF18 CC                      int 03
:0040FF19 CC                      int 03
:0040FF1A CC                      int 03
:0040FF1B CC                      int 03
:0040FF1C CC                      int 03
:0040FF1D CC                      int 03
:0040FF1E CC                      int 03
:0040FF1F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040EF88   , :0040FA82   , :0045DE83   
|
:0040FF20 55                      push ebp
:0040FF21 8BEC                    mov ebp, esp
:0040FF23 51                      push ecx
:0040FF24 894DFC                  mov dword ptr [ebp-04], ecx
:0040FF27 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FF2A 0598320000              add eax, 00003298
:0040FF2F 8BE5                    mov esp, ebp
:0040FF31 5D                      pop ebp
:0040FF32 C3                      ret


:0040FF33 CC                      int 03
:0040FF34 CC                      int 03
:0040FF35 CC                      int 03
:0040FF36 CC                      int 03
:0040FF37 CC                      int 03
:0040FF38 CC                      int 03
:0040FF39 CC                      int 03
:0040FF3A CC                      int 03
:0040FF3B CC                      int 03
:0040FF3C CC                      int 03
:0040FF3D CC                      int 03
:0040FF3E CC                      int 03
:0040FF3F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040DF9F   , :0040EB9E   
|
:0040FF40 55                      push ebp
:0040FF41 8BEC                    mov ebp, esp
:0040FF43 51                      push ecx
:0040FF44 894DFC                  mov dword ptr [ebp-04], ecx
:0040FF47 8B45FC                  mov eax, dword ptr [ebp-04]
:0040FF4A 33C9                    xor ecx, ecx
:0040FF4C 8A4878                  mov cl, byte ptr [eax+78]
:0040FF4F 33C0                    xor eax, eax
:0040FF51 85C9                    test ecx, ecx
:0040FF53 0F9FC0                  setg al
:0040FF56 8BE5                    mov esp, ebp
:0040FF58 5D                      pop ebp
:0040FF59 C3                      ret


:0040FF5A CC                      int 03
:0040FF5B CC                      int 03
:0040FF5C CC                      int 03
:0040FF5D CC                      int 03
:0040FF5E CC                      int 03
:0040FF5F CC                      int 03

* Referenced by a CALL at Addresses:
|:004119C5   , :0041D23F   , :0042F0A6   , :0042F478   , :0045CCD6   
|:0045F056   
|
:0040FF60 55                      push ebp
:0040FF61 8BEC                    mov ebp, esp
:0040FF63 6AFF                    push FFFFFFFF
:0040FF65 683C964700              push 0047963C
:0040FF6A 64A100000000            mov eax, dword ptr fs:[00000000]
:0040FF70 50                      push eax
:0040FF71 64892500000000          mov dword ptr fs:[00000000], esp
:0040FF78 81EC10010000            sub esp, 00000110
:0040FF7E 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040FF84 E8B756FFFF              call 00405640
:0040FF89 C745FC00000000          mov [ebp-04], 00000000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0040FF90 6A07                    push 00000007
:0040FF92 E85F5D0600              call 00475CF6
:0040FF97 83C404                  add esp, 00000004
:0040FF9A 8B450C                  mov eax, dword ptr [ebp+0C]
:0040FF9D 25FFFF0000              and eax, 0000FFFF
:0040FFA2 85C0                    test eax, eax
:0040FFA4 740C                    je 0040FFB2

* Possible StringData Ref from Data Obj ->"PMPALET.E3"
                                  |
:0040FFA6 C785E4FEFFFF90D44700    mov dword ptr [ebp+FFFFFEE4], 0047D490
:0040FFB0 EB0A                    jmp 0040FFBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FFA4(C)
|

* Possible StringData Ref from Data Obj ->"SPALET.E3"
                                  |
:0040FFB2 C785E4FEFFFF80D44700    mov dword ptr [ebp+FFFFFEE4], 0047D480

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FFB0(U)
|
:0040FFBC 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0040FFC2 51                      push ecx
:0040FFC3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040FFC9 E807120000              call 004111D5
:0040FFCE 85C0                    test eax, eax
:0040FFD0 7514                    jne 0040FFE6
:0040FFD2 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0040FFD9 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040FFDF E87C56FFFF              call 00405660
:0040FFE4 EB7D                    jmp 00410063

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FFD0(C)
|
:0040FFE6 68A0AA4800              push 0048AAA0
:0040FFEB 8B5508                  mov edx, dword ptr [ebp+08]
:0040FFEE 81E2FFFF0000            and edx, 0000FFFF
:0040FFF4 52                      push edx
:0040FFF5 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0040FFFB E829130000              call 00411329
:00410000 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00410006 E81ADCFFFF              call 0040DC25
:0041000B C745F0A0AA4800          mov [ebp-10], 0048AAA0
:00410012 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:0041001C EB0F                    jmp 0041002D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041004F(U)
|
:0041001E 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00410024 83C001                  add eax, 00000001
:00410027 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041001C(U)
|
:0041002D 81BDE8FEFFFF00030000    cmp dword ptr [ebp+FFFFFEE8], 00000300
:00410037 7D18                    jge 00410051
:00410039 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041003C 8A11                    mov dl, byte ptr [ecx]
:0041003E C0EA04                  shr dl, 04
:00410041 8B45F0                  mov eax, dword ptr [ebp-10]
:00410044 8810                    mov byte ptr [eax], dl
:00410046 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00410049 83C101                  add ecx, 00000001
:0041004C 894DF0                  mov dword ptr [ebp-10], ecx
:0041004F EBCD                    jmp 0041001E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410037(C)
|
:00410051 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00410058 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0041005E E8FD55FFFF              call 00405660

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0040FFE4(U)
|
:00410063 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00410066 64890D00000000          mov dword ptr fs:[00000000], ecx
:0041006D 8BE5                    mov esp, ebp
:0041006F 5D                      pop ebp
:00410070 C3                      ret



* Referenced by a CALL at Address:
|:0042EE80   
|
:00410071 55                      push ebp
:00410072 8BEC                    mov ebp, esp
:00410074 6A00                    push 00000000
:00410076 E805000000              call 00410080
:0041007B 83C404                  add esp, 00000004
:0041007E 5D                      pop ebp
:0041007F C3                      ret



* Referenced by a CALL at Addresses:
|:00410076   , :004100DC   
|
:00410080 55                      push ebp
:00410081 8BEC                    mov ebp, esp
:00410083 81EC00030000            sub esp, 00000300
:00410089 6A00                    push 00000000
:0041008B 6800030000              push 00000300
:00410090 8D8500FDFFFF            lea eax, dword ptr [ebp+FFFFFD00]
:00410096 50                      push eax
:00410097 E844850600              call 004785E0
:0041009C 83C40C                  add esp, 0000000C
:0041009F 837D0800                cmp dword ptr [ebp+08], 00000000
:004100A3 7418                    je 004100BD
:004100A5 8D8D00FDFFFF            lea ecx, dword ptr [ebp+FFFFFD00]
:004100AB 51                      push ecx
:004100AC 6800010000              push 00000100
:004100B1 6A00                    push 00000000
:004100B3 E8BA710600              call 00477272
:004100B8 83C40C                  add esp, 0000000C
:004100BB EB16                    jmp 004100D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004100A3(C)
|
:004100BD 8D9500FDFFFF            lea edx, dword ptr [ebp+FFFFFD00]
:004100C3 52                      push edx
:004100C4 6800010000              push 00000100
:004100C9 6A00                    push 00000000
:004100CB E8A2710600              call 00477272
:004100D0 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004100BB(U)
|
:004100D3 8BE5                    mov esp, ebp
:004100D5 5D                      pop ebp
:004100D6 C3                      ret



* Referenced by a CALL at Addresses:
|:0040A5E4   , :0040E8E8   , :0040FC9C   , :004119AA   , :0041F0BF   
|:0042EE27   , :0042EEDC   , :0042EF25   , :0042F1F7   , :00431A32   
|:00431C02   
|
:004100D7 55                      push ebp
:004100D8 8BEC                    mov ebp, esp
:004100DA 6A01                    push 00000001
:004100DC E89FFFFFFF              call 00410080
:004100E1 83C404                  add esp, 00000004
:004100E4 5D                      pop ebp
:004100E5 C3                      ret



* Referenced by a CALL at Addresses:
|:0040FCA6   , :0041D84E   , :0046D7C0   
|
:004100E6 55                      push ebp
:004100E7 8BEC                    mov ebp, esp
:004100E9 6A00                    push 00000000
:004100EB E805000000              call 004100F5
:004100F0 83C404                  add esp, 00000004
:004100F3 5D                      pop ebp
:004100F4 C3                      ret



* Referenced by a CALL at Addresses:
|:004100EB   , :00410129   
|
:004100F5 55                      push ebp
:004100F6 8BEC                    mov ebp, esp
:004100F8 51                      push ecx

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004100F9 6A07                    push 00000007
:004100FB E8F65B0600              call 00475CF6
:00410100 83C404                  add esp, 00000004
:00410103 C745FCA0AA4800          mov [ebp-04], 0048AAA0
:0041010A 8B45FC                  mov eax, dword ptr [ebp-04]
:0041010D 83C01E                  add eax, 0000001E
:00410110 50                      push eax
:00410111 68F6000000              push 000000F6

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00410116 6A0A                    push 0000000A
:00410118 E855710600              call 00477272
:0041011D 83C40C                  add esp, 0000000C
:00410120 8BE5                    mov esp, ebp
:00410122 5D                      pop ebp
:00410123 C3                      ret



* Referenced by a CALL at Addresses:
|:0040A5D5   , :00411A03   , :0041D42A   , :0041D9A3   , :0041EEC2   
|:0042EE71   , :00431B86   , :0045CCE8   , :0045F05E   
|
:00410124 55                      push ebp
:00410125 8BEC                    mov ebp, esp
:00410127 6A01                    push 00000001
:00410129 E8C7FFFFFF              call 004100F5
:0041012E 83C404                  add esp, 00000004
:00410131 5D                      pop ebp
:00410132 C3                      ret



* Referenced by a CALL at Addresses:
|:00406B55   , :00406BBA   , :00406BDB   , :00410274   , :004104BE   
|:004119B4   , :0041BF4F   , :0041EF85   , :0041EFDE   , :0042EE34   
|:0042FE31   , :004301AE   , :00431374   , :00431722   , :00431A37   
|:00432BD8   , :00434E0C   , :0043539E   , :00436032   , :00436249   
|:00436558   , :00442122   , :004423E3   , :00442556   , :004425F9   
|:00442A53   , :00442B5C   , :0044460D   , :0044825A   , :0044862F   
|:0044883E   , :00448986   , :00448C39   , :00448CBA   , :00449511   
|:00449637   , :004496B3   , :00449899   , :00449916   , :0044A1C8   
|:0044A4D5   , :0044A7AC   , :0044A929   , :0044B3CA   , :0044CB75   
|:0044CE77   , :0044D029   , :0044D917   , :0044E310   , :0045929B   
|:0045C2D4   , :0045CB4D   , :0045EE84   , :0045EFF9   , :0045F2C9   
|:004678A4   , :00467EFB   , :004682F3   , :0046855A   , :0046894F   
|:004689FE   , :00468A66   , :00468B6E   , :00468D8F   , :00468F62   
|
:00410133 55                      push ebp
:00410134 8BEC                    mov ebp, esp
:00410136 A0A0AD4800              mov al, byte ptr [0048ADA0]
:0041013B 0401                    add al, 01
:0041013D A2A0AD4800              mov byte ptr [0048ADA0], al
:00410142 6A00                    push 00000000
:00410144 E8EE730600              call 00477537
:00410149 83C404                  add esp, 00000004
:0041014C 5D                      pop ebp
:0041014D C3                      ret



* Referenced by a CALL at Addresses:
|:00406B6A   , :00406BCF   , :00406BEC   , :0041037D   , :0041039D   
|:0041050B   , :004119FE   , :0041BF59   , :0041EF8F   , :0041F052   
|:0042EE6C   , :0043018D   , :004302D6   , :00431416   , :00431894   
|:00431B7C   , :00432C43   , :004350BB   , :0043547D   , :0043614E   
|:004364B7   , :00436809   , :004421C4   , :004424DC   , :0044259C   
|:00442644   , :00442AB7   , :00442BC0   , :00444650   , :00448386   
|:00448802   , :00448972   , :004489F4   , :00448CA1   , :00448CEB   
|:004495F9   , :0044969F   , :004496E4   , :004498FD   , :00449945   
|:0044A409   , :0044A733   , :0044A828   , :0044A9D5   , :0044B8B6   
|:0044CBA8   , :0044CE89   , :0044D040   , :0044D96A   , :0044E3B1   
|:0044E45C   , :004592CB   , :0045C381   , :0045CCC7   , :0045EF2D   
|:0045F047   , :0045F2DF   , :00467910   , :004680D5   , :004683B3   
|:004685BB   , :00468988   , :00468A39   , :00468AFF   , :00468CB8   
|:00468EAE   , :0046903B   
|
:0041014E 55                      push ebp
:0041014F 8BEC                    mov ebp, esp
:00410151 33C0                    xor eax, eax
:00410153 A0A0AD4800              mov al, byte ptr [0048ADA0]
:00410158 85C0                    test eax, eax
:0041015A 7419                    je 00410175
:0041015C 6A01                    push 00000001
:0041015E E8D4730600              call 00477537
:00410163 83C404                  add esp, 00000004
:00410166 8A0DA0AD4800            mov cl, byte ptr [0048ADA0]
:0041016C 80E901                  sub cl, 01
:0041016F 880DA0AD4800            mov byte ptr [0048ADA0], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041015A(C)
|
:00410175 5D                      pop ebp
:00410176 C3                      ret



* Referenced by a CALL at Address:
|:0046849B   
|
:00410177 55                      push ebp
:00410178 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0041017A 6A07                    push 00000007
:0041017C E8755B0600              call 00475CF6
:00410181 83C404                  add esp, 00000004
:00410184 8B4518                  mov eax, dword ptr [ebp+18]
:00410187 50                      push eax
:00410188 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041018B 51                      push ecx
:0041018C 8B5510                  mov edx, dword ptr [ebp+10]
:0041018F 52                      push edx
:00410190 8B450C                  mov eax, dword ptr [ebp+0C]
:00410193 50                      push eax
:00410194 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410197 51                      push ecx
:00410198 E80D6B0600              call 00476CAA
:0041019D 83C414                  add esp, 00000014
:004101A0 5D                      pop ebp
:004101A1 C3                      ret



* Referenced by a CALL at Address:
|:004685B3   
|
:004101A2 55                      push ebp
:004101A3 8BEC                    mov ebp, esp
:004101A5 6A00                    push 00000000
:004101A7 E863540600              call 0047560F
:004101AC 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004101AF 6A07                    push 00000007
:004101B1 E8405B0600              call 00475CF6
:004101B6 83C404                  add esp, 00000004
:004101B9 6A00                    push 00000000
:004101BB 6A00                    push 00000000
:004101BD 8B4518                  mov eax, dword ptr [ebp+18]
:004101C0 50                      push eax
:004101C1 E8575B0600              call 00475D1D
:004101C6 83C40C                  add esp, 0000000C
:004101C9 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:004101CC 51                      push ecx
:004101CD 8B5514                  mov edx, dword ptr [ebp+14]
:004101D0 52                      push edx
:004101D1 8B4510                  mov eax, dword ptr [ebp+10]
:004101D4 50                      push eax
:004101D5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004101D8 51                      push ecx
:004101D9 8B5508                  mov edx, dword ptr [ebp+08]
:004101DC 52                      push edx
:004101DD E812690600              call 00476AF4
:004101E2 83C414                  add esp, 00000014
:004101E5 5D                      pop ebp
:004101E6 C3                      ret



* Referenced by a CALL at Addresses:
|:0040FC31   , :0040FCA1   , :004119B9   , :0042EBEB   , :0042EE43   
|:0042EEE1   , :0042EF2A   , :0042F1FC   , :00431A3C   , :00431C07   
|:0045EE99   , :0046D7BB   , :0046D8D8   
|
:004101E7 55                      push ebp
:004101E8 8BEC                    mov ebp, esp
:004101EA 6A00                    push 00000000
:004101EC E81E540600              call 0047560F
:004101F1 83C404                  add esp, 00000004
:004101F4 E8735C0600              call 00475E6C
:004101F9 5D                      pop ebp
:004101FA C3                      ret



* Referenced by a CALL at Addresses:
|:004300EA   , :00430201   , :00430C63   , :0044A964   , :00467908   
|:00467957   , :0046BDAF   , :0046BF7E   
|
:004101FB 55                      push ebp
:004101FC 8BEC                    mov ebp, esp
:004101FE 6A00                    push 00000000
:00410200 8B451C                  mov eax, dword ptr [ebp+1C]
:00410203 50                      push eax
:00410204 6A00                    push 00000000
:00410206 E8125B0600              call 00475D1D
:0041020B 83C40C                  add esp, 0000000C
:0041020E 8B4D18                  mov ecx, dword ptr [ebp+18]
:00410211 51                      push ecx
:00410212 8B5514                  mov edx, dword ptr [ebp+14]
:00410215 8B450C                  mov eax, dword ptr [ebp+0C]
:00410218 8D4C10FF                lea ecx, dword ptr [eax+edx-01]
:0041021C 51                      push ecx
:0041021D 8B5510                  mov edx, dword ptr [ebp+10]
:00410220 8B4508                  mov eax, dword ptr [ebp+08]
:00410223 8D4C10FF                lea ecx, dword ptr [eax+edx-01]
:00410227 51                      push ecx
:00410228 8B550C                  mov edx, dword ptr [ebp+0C]
:0041022B 52                      push edx
:0041022C 8B4508                  mov eax, dword ptr [ebp+08]
:0041022F 50                      push eax
:00410230 E8E7630600              call 0047661C
:00410235 83C414                  add esp, 00000014
:00410238 5D                      pop ebp
:00410239 C3                      ret



* Referenced by a CALL at Addresses:
|:004102DE   , :0041045B   , :00410488   
|
:0041023A 55                      push ebp
:0041023B 8BEC                    mov ebp, esp
:0041023D 8B450C                  mov eax, dword ptr [ebp+0C]
:00410240 50                      push eax
:00410241 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410244 51                      push ecx
:00410245 B940C74A00              mov ecx, 004AC740
:0041024A E8DA100000              call 00411329
:0041024F 5D                      pop ebp
:00410250 C3                      ret



* Referenced by a CALL at Address:
|:0046D8D1   
|
:00410251 55                      push ebp
:00410252 8BEC                    mov ebp, esp
:00410254 83EC10                  sub esp, 00000010
:00410257 66C745F40000            mov [ebp-0C], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004103B8(U)
|
:0041025D 68027F0000              push 00007F02
:00410262 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00410264 FF15C8D54B00            Call dword ptr [004BD5C8]
:0041026A 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:0041026B FF15CCD54B00            Call dword ptr [004BD5CC]
:00410271 8945F0                  mov dword ptr [ebp-10], eax
:00410274 E8BAFEFFFF              call 00410133
:00410279 66C745F82800            mov [ebp-08], 0028
:0041027F EB0C                    jmp 0041028D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410398(U)
|
:00410281 668B45F8                mov ax, word ptr [ebp-08]
:00410285 66057000                add ax, 0070
:00410289 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041027F(U)
|
:0041028D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00410290 81E1FFFF0000            and ecx, 0000FFFF
:00410296 83C170                  add ecx, 00000070
:00410299 81F9E0010000            cmp ecx, 000001E0
:0041029F 0F8DF8000000            jnl 0041039D
:004102A5 66C745FC0000            mov [ebp-04], 0000
:004102AB EB0C                    jmp 004102B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410393(U)
|
:004102AD 668B55FC                mov dx, word ptr [ebp-04]
:004102B1 6683C270                add dx, 0070
:004102B5 668955FC                mov word ptr [ebp-04], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004102AB(U)
|
:004102B9 8B45FC                  mov eax, dword ptr [ebp-04]
:004102BC 25FFFF0000              and eax, 0000FFFF
:004102C1 83C070                  add eax, 00000070
:004102C4 3D80020000              cmp eax, 00000280
:004102C9 0F8DC9000000            jnl 00410398
:004102CF 68C0E64A00              push 004AE6C0
:004102D4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004102D7 81E1FFFF0000            and ecx, 0000FFFF
:004102DD 51                      push ecx
:004102DE E857FFFFFF              call 0041023A
:004102E3 83C408                  add esp, 00000008
:004102E6 68C0E64A00              push 004AE6C0
:004102EB 8B55F8                  mov edx, dword ptr [ebp-08]
:004102EE 81E2FFFF0000            and edx, 0000FFFF
:004102F4 52                      push edx
:004102F5 8B45FC                  mov eax, dword ptr [ebp-04]
:004102F8 25FFFF0000              and eax, 0000FFFF
:004102FD 50                      push eax
:004102FE E8BE000000              call 004103C1
:00410303 83C40C                  add esp, 0000000C
:00410306 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00410309 81E1FFFF0000            and ecx, 0000FFFF
:0041030F 51                      push ecx
:00410310 8B45FC                  mov eax, dword ptr [ebp-04]
:00410313 25FFFF0000              and eax, 0000FFFF
:00410318 99                      cdq
:00410319 83E207                  and edx, 00000007
:0041031C 03C2                    add eax, edx
:0041031E C1F803                  sar eax, 03
:00410321 50                      push eax
:00410322 B9306D4800              mov ecx, 00486D30
:00410327 E8DF5BFFFF              call 00405F0B
:0041032C 6A01                    push 00000001
:0041032E B9306D4800              mov ecx, 00486D30
:00410333 E8065DFFFF              call 0040603E
:00410338 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041033B 81E2FFFF0000            and edx, 0000FFFF
:00410341 52                      push edx

* Possible StringData Ref from Data Obj ->"C7%d"
                                  |
:00410342 687CC54700              push 0047C57C
:00410347 68306D4800              push 00486D30
:0041034C E88768FFFF              call 00406BD8
:00410351 83C40C                  add esp, 0000000C
:00410354 6A00                    push 00000000
:00410356 B9306D4800              mov ecx, 00486D30
:0041035B E8DE5CFFFF              call 0040603E
:00410360 668B45F4                mov ax, word ptr [ebp-0C]
:00410364 66050100                add ax, 0001
:00410368 668945F4                mov word ptr [ebp-0C], ax
:0041036C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041036F 81E1FFFF0000            and ecx, 0000FFFF
:00410375 81F94C010000            cmp ecx, 0000014C
:0041037B 7516                    jne 00410393
:0041037D E8CCFDFFFF              call 0041014E
:00410382 8B55F0                  mov edx, dword ptr [ebp-10]
:00410385 52                      push edx

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:00410386 FF15CCD54B00            Call dword ptr [004BD5CC]
:0041038C E874F30100              call 0042F705
:00410391 EB2A                    jmp 004103BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041037B(C)
|
:00410393 E915FFFFFF              jmp 004102AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004102C9(C)
|
:00410398 E9E4FEFFFF              jmp 00410281

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041029F(C)
|
:0041039D E8ACFDFFFF              call 0041014E
:004103A2 8B45F0                  mov eax, dword ptr [ebp-10]
:004103A5 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:004103A6 FF15CCD54B00            Call dword ptr [004BD5CC]
:004103AC E854F30100              call 0042F705
:004103B1 83F802                  cmp eax, 00000002
:004103B4 7502                    jne 004103B8
:004103B6 EB05                    jmp 004103BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004103B4(C)
|
:004103B8 E9A0FEFFFF              jmp 0041025D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410391(U), :004103B6(U)
|
:004103BD 8BE5                    mov esp, ebp
:004103BF 5D                      pop ebp
:004103C0 C3                      ret



* Referenced by a CALL at Addresses:
|:004102FE   , :004104AF   
|
:004103C1 55                      push ebp
:004103C2 8BEC                    mov ebp, esp
:004103C4 6A00                    push 00000000
:004103C6 E844520600              call 0047560F
:004103CB 83C404                  add esp, 00000004
:004103CE 8B4510                  mov eax, dword ptr [ebp+10]
:004103D1 50                      push eax

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:004103D2 6A70                    push 00000070

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:004103D4 6A70                    push 00000070
:004103D6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004103D9 51                      push ecx
:004103DA 8B5508                  mov edx, dword ptr [ebp+08]
:004103DD 52                      push edx
:004103DE E811670600              call 00476AF4
:004103E3 83C414                  add esp, 00000014
:004103E6 5D                      pop ebp
:004103E7 C3                      ret



* Referenced by a CALL at Addresses:
|:00430135   , :004581F1   
|
:004103E8 55                      push ebp
:004103E9 8BEC                    mov ebp, esp
:004103EB 83EC08                  sub esp, 00000008
:004103EE C745F8FFFF0000          mov [ebp-08], 0000FFFF
:004103F5 817D104C010000          cmp dword ptr [ebp+10], 0000014C
:004103FC 720F                    jb 0041040D
:004103FE 8B4510                  mov eax, dword ptr [ebp+10]
:00410401 33D2                    xor edx, edx
:00410403 B94C010000              mov ecx, 0000014C
:00410408 F7F1                    div ecx
:0041040A 895510                  mov dword ptr [ebp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004103FC(C)
|
:0041040D C745FCC0E64A00          mov [ebp-04], 004AE6C0
:00410414 8B5510                  mov edx, dword ptr [ebp+10]
:00410417 3B1550D44700            cmp edx, dword ptr [0047D450]
:0041041D 750C                    jne 0041042B
:0041041F C705A4AD480001000000    mov dword ptr [0048ADA4], 00000001
:00410429 EB78                    jmp 004104A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041041D(C)
|
:0041042B 8B4510                  mov eax, dword ptr [ebp+10]
:0041042E 3B0554D44700            cmp eax, dword ptr [0047D454]
:00410434 7513                    jne 00410449
:00410436 C745FC38964A00          mov [ebp-04], 004A9638
:0041043D C705A4AD480000000000    mov dword ptr [0048ADA4], 00000000
:00410447 EB5A                    jmp 004104A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410434(C)
|
:00410449 833DA4AD480000          cmp dword ptr [0048ADA4], 00000000
:00410450 7526                    jne 00410478
:00410452 68C0E64A00              push 004AE6C0
:00410457 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041045A 51                      push ecx
:0041045B E8DAFDFFFF              call 0041023A
:00410460 83C408                  add esp, 00000008
:00410463 8B5510                  mov edx, dword ptr [ebp+10]
:00410466 891550D44700            mov dword ptr [0047D450], edx
:0041046C C705A4AD480001000000    mov dword ptr [0048ADA4], 00000001
:00410476 EB2B                    jmp 004104A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410450(C)
|
:00410478 C745FC38964A00          mov [ebp-04], 004A9638
:0041047F 6838964A00              push 004A9638
:00410484 8B4510                  mov eax, dword ptr [ebp+10]
:00410487 50                      push eax
:00410488 E8ADFDFFFF              call 0041023A
:0041048D 83C408                  add esp, 00000008
:00410490 8B4D10                  mov ecx, dword ptr [ebp+10]
:00410493 890D54D44700            mov dword ptr [0047D454], ecx
:00410499 C705A4AD480000000000    mov dword ptr [0048ADA4], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410429(U), :00410447(U), :00410476(U)
|
:004104A3 8B55FC                  mov edx, dword ptr [ebp-04]
:004104A6 52                      push edx
:004104A7 8B450C                  mov eax, dword ptr [ebp+0C]
:004104AA 50                      push eax
:004104AB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004104AE 51                      push ecx
:004104AF E80DFFFFFF              call 004103C1
:004104B4 83C40C                  add esp, 0000000C
:004104B7 8BE5                    mov esp, ebp
:004104B9 5D                      pop ebp
:004104BA C3                      ret



* Referenced by a CALL at Addresses:
|:00430238   , :00430DB2   , :0046831F   
|
:004104BB 55                      push ebp
:004104BC 8BEC                    mov ebp, esp
:004104BE E870FCFFFF              call 00410133

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004104C3 6A04                    push 00000004
:004104C5 6A00                    push 00000000
:004104C7 68C0090000              push 000009C0
:004104CC B9A01C4B00              mov ecx, 004B1CA0
:004104D1 E8BA8A0600              call 00478F90
:004104D6 50                      push eax
:004104D7 6A10                    push 00000010
:004104D9 6A01                    push 00000001
:004104DB E8D9590600              call 00475EB9
:004104E0 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004104E3 6A02                    push 00000002
:004104E5 8B4514                  mov eax, dword ptr [ebp+14]
:004104E8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004104EB 8D5401FF                lea edx, dword ptr [ecx+eax-01]
:004104EF 52                      push edx
:004104F0 8B4510                  mov eax, dword ptr [ebp+10]
:004104F3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004104F6 8D5401FF                lea edx, dword ptr [ecx+eax-01]
:004104FA 52                      push edx
:004104FB 8B450C                  mov eax, dword ptr [ebp+0C]
:004104FE 50                      push eax
:004104FF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410502 51                      push ecx
:00410503 E814610600              call 0047661C
:00410508 83C414                  add esp, 00000014
:0041050B E83EFCFFFF              call 0041014E
:00410510 5D                      pop ebp
:00410511 C3                      ret



* Referenced by a CALL at Address:
|:004105CD   
|
:00410512 55                      push ebp
:00410513 8BEC                    mov ebp, esp
:00410515 51                      push ecx
:00410516 66C745FC0000            mov [ebp-04], 0000
:0041051C EB15                    jmp 00410533

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410568(U)
|
:0041051E 668B45FC                mov ax, word ptr [ebp-04]
:00410522 66050100                add ax, 0001
:00410526 668945FC                mov word ptr [ebp-04], ax
:0041052A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041052D 83C101                  add ecx, 00000001
:00410530 894D0C                  mov dword ptr [ebp+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041051C(U)
|
:00410533 8B55FC                  mov edx, dword ptr [ebp-04]
:00410536 81E2FFFF0000            and edx, 0000FFFF
:0041053C 8B4510                  mov eax, dword ptr [ebp+10]
:0041053F 25FFFF0000              and eax, 0000FFFF
:00410544 3BD0                    cmp edx, eax
:00410546 7D22                    jge 0041056A
:00410548 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041054B 81E1FFFF0000            and ecx, 0000FFFF
:00410551 8B5508                  mov edx, dword ptr [ebp+08]
:00410554 03D1                    add edx, ecx
:00410556 8B45FC                  mov eax, dword ptr [ebp-04]
:00410559 25FFFF0000              and eax, 0000FFFF
:0041055E 2BD0                    sub edx, eax
:00410560 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00410563 8A52FF                  mov dl, byte ptr [edx-01]
:00410566 8811                    mov byte ptr [ecx], dl
:00410568 EBB4                    jmp 0041051E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410546(C)
|
:0041056A 8BE5                    mov esp, ebp
:0041056C 5D                      pop ebp
:0041056D C3                      ret



* Referenced by a CALL at Addresses:
|:0041AB0A   , :0041AB29   , :0043432E   , :0043438A   , :00442D43   
|:004431FA   , :00443472   , :00445D48   , :00445EA2   , :00445EE5   
|:00445FBD   , :0044610D   , :00446A24   , :00447193   , :00447223   
|:00447686   , :00447912   
|
:0041056E 55                      push ebp
:0041056F 8BEC                    mov ebp, esp
:00410571 51                      push ecx
:00410572 66C745FC0000            mov [ebp-04], 0000
:00410578 EB0C                    jmp 00410586

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004105D5(U)
|
:0041057A 668B45FC                mov ax, word ptr [ebp-04]
:0041057E 66050100                add ax, 0001
:00410582 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410578(U)
|
:00410586 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410589 81E1FFFF0000            and ecx, 0000FFFF
:0041058F 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:00410592 7D43                    jge 004105D7
:00410594 668B5508                mov dx, word ptr [ebp+08]
:00410598 52                      push edx
:00410599 8B4508                  mov eax, dword ptr [ebp+08]
:0041059C 25FFFF0000              and eax, 0000FFFF
:004105A1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004105A4 81E1FFFF0000            and ecx, 0000FFFF
:004105AA 0FAFC1                  imul eax, ecx
:004105AD 8B5514                  mov edx, dword ptr [ebp+14]
:004105B0 03D0                    add edx, eax
:004105B2 52                      push edx
:004105B3 8B4508                  mov eax, dword ptr [ebp+08]
:004105B6 25FFFF0000              and eax, 0000FFFF
:004105BB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004105BE 81E1FFFF0000            and ecx, 0000FFFF
:004105C4 0FAFC1                  imul eax, ecx
:004105C7 8B5510                  mov edx, dword ptr [ebp+10]
:004105CA 03D0                    add edx, eax
:004105CC 52                      push edx
:004105CD E840FFFFFF              call 00410512
:004105D2 83C40C                  add esp, 0000000C
:004105D5 EBA3                    jmp 0041057A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410592(C)
|
:004105D7 8BE5                    mov esp, ebp
:004105D9 5D                      pop ebp
:004105DA C3                      ret



* Referenced by a CALL at Addresses:
|:0040A0D2   , :00458197   
|
:004105DB 55                      push ebp
:004105DC 8BEC                    mov ebp, esp
:004105DE 51                      push ecx
:004105DF C745FC00000000          mov [ebp-04], 00000000
:004105E6 EB09                    jmp 004105F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410621(U)
|
:004105E8 8B45FC                  mov eax, dword ptr [ebp-04]
:004105EB 83C001                  add eax, 00000001
:004105EE 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004105E6(U)
|
:004105F1 817DFC20030000          cmp dword ptr [ebp-04], 00000320
:004105F8 7329                    jnb 00410623
:004105FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004105FD 6BC950                  imul ecx, 00000050
:00410600 81C1787F4900            add ecx, 00497F78
:00410606 E825000000              call 00410630
:0041060B 50                      push eax
:0041060C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041060F 51                      push ecx
:00410610 E86B7F0600              call 00478580
:00410615 83C408                  add esp, 00000008
:00410618 85C0                    test eax, eax
:0041061A 7505                    jne 00410621
:0041061C 8B45FC                  mov eax, dword ptr [ebp-04]
:0041061F EB07                    jmp 00410628

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041061A(C)
|
:00410621 EBC5                    jmp 004105E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004105F8(C)
|
:00410623 B8FFFF0000              mov eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041061F(U)
|
:00410628 8BE5                    mov esp, ebp
:0041062A 5D                      pop ebp
:0041062B C3                      ret


:0041062C CC                      int 03
:0041062D CC                      int 03
:0041062E CC                      int 03
:0041062F CC                      int 03

* Referenced by a CALL at Address:
|:00410606   
|
:00410630 55                      push ebp
:00410631 8BEC                    mov ebp, esp
:00410633 51                      push ecx
:00410634 894DFC                  mov dword ptr [ebp-04], ecx
:00410637 8B45FC                  mov eax, dword ptr [ebp-04]
:0041063A 83C00C                  add eax, 0000000C
:0041063D 8BE5                    mov esp, ebp
:0041063F 5D                      pop ebp
:00410640 C3                      ret


:00410641 CC                      int 03
:00410642 CC                      int 03
:00410643 CC                      int 03
:00410644 CC                      int 03
:00410645 CC                      int 03
:00410646 CC                      int 03
:00410647 CC                      int 03
:00410648 CC                      int 03
:00410649 CC                      int 03
:0041064A CC                      int 03
:0041064B CC                      int 03
:0041064C CC                      int 03
:0041064D CC                      int 03
:0041064E CC                      int 03
:0041064F CC                      int 03
:00410650 55                      push ebp
:00410651 8BEC                    mov ebp, esp
:00410653 E807000000              call 0041065F
:00410658 E811000000              call 0041066E
:0041065D 5D                      pop ebp
:0041065E C3                      ret



* Referenced by a CALL at Address:
|:00410653   
|
:0041065F 55                      push ebp
:00410660 8BEC                    mov ebp, esp
:00410662 B9A8AD4800              mov ecx, 0048ADA8
:00410667 E8B4090000              call 00411020
:0041066C 5D                      pop ebp
:0041066D C3                      ret



* Referenced by a CALL at Address:
|:00410658   
|
:0041066E 55                      push ebp
:0041066F 8BEC                    mov ebp, esp
:00410671 6880064100              push 00410680
:00410676 E835EE0500              call 0046F4B0
:0041067B 83C404                  add esp, 00000004
:0041067E 5D                      pop ebp
:0041067F C3                      ret


:00410680 55                      push ebp
:00410681 8BEC                    mov ebp, esp
:00410683 B9A8AD4800              mov ecx, 0048ADA8
:00410688 E8E2000000              call 0041076F
:0041068D 5D                      pop ebp
:0041068E C3                      ret


:0041068F 55                      push ebp
:00410690 8BEC                    mov ebp, esp
:00410692 E807000000              call 0041069E
:00410697 E811000000              call 004106AD
:0041069C 5D                      pop ebp
:0041069D C3                      ret



* Referenced by a CALL at Address:
|:00410692   
|
:0041069E 55                      push ebp
:0041069F 8BEC                    mov ebp, esp
:004106A1 B9D0AD4800              mov ecx, 0048ADD0
:004106A6 E8D5080000              call 00410F80
:004106AB 5D                      pop ebp
:004106AC C3                      ret



* Referenced by a CALL at Address:
|:00410697   
|
:004106AD 55                      push ebp
:004106AE 8BEC                    mov ebp, esp
:004106B0 68BF064100              push 004106BF
:004106B5 E8F6ED0500              call 0046F4B0
:004106BA 83C404                  add esp, 00000004
:004106BD 5D                      pop ebp
:004106BE C3                      ret


:004106BF 55                      push ebp
:004106C0 8BEC                    mov ebp, esp
:004106C2 B9D0AD4800              mov ecx, 0048ADD0
:004106C7 E823910000              call 004197EF
:004106CC 5D                      pop ebp
:004106CD C3                      ret


:004106CE 55                      push ebp
:004106CF 8BEC                    mov ebp, esp
:004106D1 83EC18                  sub esp, 00000018
:004106D4 837D0800                cmp dword ptr [ebp+08], 00000000
:004106D8 7C76                    jl 00410750
:004106DA 8B4510                  mov eax, dword ptr [ebp+10]
:004106DD 8B08                    mov ecx, dword ptr [eax]
:004106DF 894DFC                  mov dword ptr [ebp-04], ecx
:004106E2 8B5510                  mov edx, dword ptr [ebp+10]
:004106E5 8B4204                  mov eax, dword ptr [edx+04]
:004106E8 8945F8                  mov dword ptr [ebp-08], eax
:004106EB 817DF801020000          cmp dword ptr [ebp-08], 00000201
:004106F2 755C                    jne 00410750
:004106F4 833DC4AD480000          cmp dword ptr [0048ADC4], 00000000
:004106FB 7417                    je 00410714
:004106FD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410700 3B0DCCAD4800            cmp ecx, dword ptr [0048ADCC]
:00410706 750A                    jne 00410712
:00410708 C705C0AD480001000000    mov dword ptr [0048ADC0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410706(C)
|
:00410712 EB3C                    jmp 00410750

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004106FB(C)
|
:00410714 33D2                    xor edx, edx
:00410716 668B15B0554B00          mov dx, word ptr [004B55B0]
:0041071D 8955EC                  mov dword ptr [ebp-14], edx
:00410720 C745F400000000          mov [ebp-0C], 00000000
:00410727 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041072A 8945F0                  mov dword ptr [ebp-10], eax
:0041072D C745E801000000          mov [ebp-18], 00000001
:00410734 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00410737 51                      push ecx
:00410738 8B55E8                  mov edx, dword ptr [ebp-18]
:0041073B 52                      push edx
:0041073C 6806080000              push 00000806
:00410741 33C0                    xor eax, eax
:00410743 66A110AE4800            mov ax, word ptr [0048AE10]
:00410749 50                      push eax

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:0041074A FF1520D74B00            Call dword ptr [004BD720]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004106D8(C), :004106F2(C), :00410712(U)
|
:00410750 8B4D10                  mov ecx, dword ptr [ebp+10]
:00410753 51                      push ecx
:00410754 8B550C                  mov edx, dword ptr [ebp+0C]
:00410757 52                      push edx
:00410758 8B4508                  mov eax, dword ptr [ebp+08]
:0041075B 50                      push eax
:0041075C 8B0DC8AD4800            mov ecx, dword ptr [0048ADC8]
:00410762 51                      push ecx

* Reference To: USER32.CallNextHookEx, Ord:0011h
                                  |
:00410763 FF15C4D54B00            Call dword ptr [004BD5C4]
:00410769 8BE5                    mov esp, ebp
:0041076B 5D                      pop ebp
:0041076C C20C00                  ret 000C



* Referenced by a CALL at Address:
|:00410688   
|
:0041076F 55                      push ebp
:00410770 8BEC                    mov ebp, esp
:00410772 51                      push ecx
:00410773 894DFC                  mov dword ptr [ebp-04], ecx
:00410776 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410779 E804000000              call 00410782
:0041077E 8BE5                    mov esp, ebp
:00410780 5D                      pop ebp
:00410781 C3                      ret



* Referenced by a CALL at Addresses:
|:00410779   , :00410EA2   
|
:00410782 55                      push ebp
:00410783 8BEC                    mov ebp, esp
:00410785 83EC20                  sub esp, 00000020
:00410788 894DE0                  mov dword ptr [ebp-20], ecx
:0041078B C745E400000000          mov [ebp-1C], 00000000
:00410792 C745E800000000          mov [ebp-18], 00000000

* Possible StringData Ref from Data Obj ->"avivideo"
                                  |
:00410799 C745ECECC54700          mov [ebp-14], 0047C5EC
:004107A0 C745F000000000          mov [ebp-10], 00000000
:004107A7 C745F400000000          mov [ebp-0C], 00000000
:004107AE C745F800000000          mov [ebp-08], 00000000
:004107B5 C745FC00000000          mov [ebp-04], 00000000
:004107BC 8D45E4                  lea eax, dword ptr [ebp-1C]
:004107BF 50                      push eax
:004107C0 6800200000              push 00002000
:004107C5 6803080000              push 00000803
:004107CA 6A00                    push 00000000

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:004107CC FF1520D74B00            Call dword ptr [004BD720]
:004107D2 F7D8                    neg eax
:004107D4 1BC0                    sbb eax, eax
:004107D6 40                      inc eax
:004107D7 8BE5                    mov esp, ebp
:004107D9 5D                      pop ebp
:004107DA C3                      ret



* Referenced by a CALL at Addresses:
|:0041086B   , :00410D0F   , :00410EB6   
|
:004107DB 55                      push ebp
:004107DC 8BEC                    mov ebp, esp
:004107DE 83EC08                  sub esp, 00000008
:004107E1 894DF8                  mov dword ptr [ebp-08], ecx
:004107E4 8B45F8                  mov eax, dword ptr [ebp-08]
:004107E7 83781000                cmp dword ptr [eax+10], 00000000
:004107EB 7453                    je 00410840
:004107ED 8B0DC8AD4800            mov ecx, dword ptr [0048ADC8]
:004107F3 51                      push ecx

* Reference To: USER32.UnhookWindowsHookEx, Ord:0248h
                                  |
:004107F4 FF1530D64B00            Call dword ptr [004BD630]
:004107FA 8D55FC                  lea edx, dword ptr [ebp-04]
:004107FD 52                      push edx
:004107FE 6A00                    push 00000000
:00410800 6804080000              push 00000804
:00410805 33C0                    xor eax, eax
:00410807 66A110AE4800            mov ax, word ptr [0048AE10]
:0041080D 50                      push eax

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:0041080E FF1520D74B00            Call dword ptr [004BD720]
:00410814 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00410817 C7411400000000          mov [ecx+14], 00000000
:0041081E 8B55F8                  mov edx, dword ptr [ebp-08]
:00410821 C7421000000000          mov [edx+10], 00000000
:00410828 6A01                    push 00000001
:0041082A 6A00                    push 00000000
:0041082C 8B4508                  mov eax, dword ptr [ebp+08]
:0041082F 50                      push eax

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:00410830 FF1524D64B00            Call dword ptr [004BD624]
:00410836 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410839 51                      push ecx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0041083A FF15FCD54B00            Call dword ptr [004BD5FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004107EB(C)
|
:00410840 B801000000              mov eax, 00000001
:00410845 8BE5                    mov esp, ebp
:00410847 5D                      pop ebp
:00410848 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00410C19   
|
:0041084B 55                      push ebp
:0041084C 8BEC                    mov ebp, esp
:0041084E 83EC50                  sub esp, 00000050
:00410851 894DB0                  mov dword ptr [ebp-50], ecx
:00410854 C745FC00000000          mov [ebp-04], 00000000
:0041085B 8B45B0                  mov eax, dword ptr [ebp-50]
:0041085E 83781000                cmp dword ptr [eax+10], 00000000
:00410862 740C                    je 00410870
:00410864 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410867 51                      push ecx
:00410868 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0041086B E86BFFFFFF              call 004107DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410862(C)
|
:00410870 C745B400000000          mov [ebp-4C], 00000000
:00410877 C745B800000000          mov [ebp-48], 00000000
:0041087E C745BC00000000          mov [ebp-44], 00000000
:00410885 8B550C                  mov edx, dword ptr [ebp+0C]
:00410888 8955C0                  mov dword ptr [ebp-40], edx
:0041088B C745C400000000          mov [ebp-3C], 00000000
:00410892 C745C800000080          mov [ebp-38], 80000000
:00410899 8B4508                  mov eax, dword ptr [ebp+08]
:0041089C 8945CC                  mov dword ptr [ebp-34], eax
:0041089F C745D000000000          mov [ebp-30], 00000000
:004108A6 EB09                    jmp 004108B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004108DA(U)
|
:004108A8 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004108AB 83C101                  add ecx, 00000001
:004108AE 894DD0                  mov dword ptr [ebp-30], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004108A6(U)
|
:004108B1 837DD005                cmp dword ptr [ebp-30], 00000005
:004108B5 7D25                    jge 004108DC
:004108B7 8D55B4                  lea edx, dword ptr [ebp-4C]
:004108BA 52                      push edx
:004108BB 6800020300              push 00030200
:004108C0 6803080000              push 00000803
:004108C5 6A00                    push 00000000

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:004108C7 FF1520D74B00            Call dword ptr [004BD720]
:004108CD 85C0                    test eax, eax
:004108CF 7509                    jne 004108DA
:004108D1 C745FC01000000          mov [ebp-04], 00000001
:004108D8 EB02                    jmp 004108DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004108CF(C)
|
:004108DA EBCC                    jmp 004108A8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004108B5(C), :004108D8(U)
|
:004108DC 837DFC00                cmp dword ptr [ebp-04], 00000000
:004108E0 0F8488000000            je 0041096E
:004108E6 668B45B8                mov ax, word ptr [ebp-48]
:004108EA 66A310AE4800            mov word ptr [0048AE10], ax
:004108F0 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004108F3 C7411001000000          mov [ecx+10], 00000001
:004108FA C745EC00000000          mov [ebp-14], 00000000
:00410901 C745F000000000          mov [ebp-10], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00410908 C745F405000000          mov [ebp-0C], 00000005
:0041090F C745F800000000          mov [ebp-08], 00000000
:00410916 8D55EC                  lea edx, dword ptr [ebp-14]
:00410919 52                      push edx
:0041091A 6800000400              push 00040000
:0041091F 6841080000              push 00000841
:00410924 33C0                    xor eax, eax
:00410926 66A110AE4800            mov ax, word ptr [0048AE10]
:0041092C 50                      push eax

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:0041092D FF1520D74B00            Call dword ptr [004BD720]
:00410933 C745DC01400000          mov [ebp-24], 00004001
:0041093A 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:0041093D 51                      push ecx
:0041093E 6800010000              push 00000100
:00410943 6814080000              push 00000814
:00410948 33D2                    xor edx, edx
:0041094A 668B1510AE4800          mov dx, word ptr [0048AE10]
:00410951 52                      push edx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00410952 FF1520D74B00            Call dword ptr [004BD720]
:00410958 8B45D8                  mov eax, dword ptr [ebp-28]
:0041095B A3CCAD4800              mov dword ptr [0048ADCC], eax
:00410960 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410963 51                      push ecx
:00410964 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00410967 E871000000              call 004109DD
:0041096C EB24                    jmp 00410992

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004108E0(C)
|
:0041096E 6A30                    push 00000030

* Possible StringData Ref from Data Obj ->"m^ǶǨtC QNn  for "
                                        ->"Windows95"
                                  |
:00410970 68F8C54700              push 0047C5F8

* Possible StringData Ref from Data Obj ->"Lk}ʵeɮ"
                                  |
:00410975 6824C64700              push 0047C624
:0041097A 8B5508                  mov edx, dword ptr [ebp+08]
:0041097D 52                      push edx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:0041097E FF15E0D64B00            Call dword ptr [004BD6E0]
:00410984 8B45B0                  mov eax, dword ptr [ebp-50]
:00410987 C7401000000000          mov [eax+10], 00000000
:0041098E 33C0                    xor eax, eax
:00410990 EB45                    jmp 004109D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041096C(U)
|
:00410992 6A00                    push 00000000
:00410994 6A00                    push 00000000
:00410996 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410999 51                      push ecx

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:0041099A FF1524D64B00            Call dword ptr [004BD624]
:004109A0 8B5508                  mov edx, dword ptr [ebp+08]
:004109A3 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:004109A4 FF15FCD54B00            Call dword ptr [004BD5FC]
:004109AA 6A00                    push 00000000
:004109AC A1CCAD4800              mov eax, dword ptr [0048ADCC]
:004109B1 50                      push eax

* Reference To: USER32.GetWindowThreadProcessId, Ord:0143h
                                  |
:004109B2 FF1540D64B00            Call dword ptr [004BD640]
:004109B8 50                      push eax
:004109B9 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:004109BF 51                      push ecx
:004109C0 68CE064100              push 004106CE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004109C5 6A03                    push 00000003

* Reference To: USER32.SetWindowsHookExA, Ord:0225h
                                  |
:004109C7 FF1548D64B00            Call dword ptr [004BD648]
:004109CD A3C8AD4800              mov dword ptr [0048ADC8], eax
:004109D2 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410990(U)
|
:004109D7 8BE5                    mov esp, ebp
:004109D9 5D                      pop ebp
:004109DA C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00410967   , :00410EF7   
|
:004109DD 55                      push ebp
:004109DE 8BEC                    mov ebp, esp
:004109E0 83EC40                  sub esp, 00000040
:004109E3 894DC0                  mov dword ptr [ebp-40], ecx
:004109E6 8B45C0                  mov eax, dword ptr [ebp-40]
:004109E9 83781000                cmp dword ptr [eax+10], 00000000
:004109ED 7505                    jne 004109F4
:004109EF E9EA000000              jmp 00410ADE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004109ED(C)
|
:004109F4 8D4DC4                  lea ecx, dword ptr [ebp-3C]
:004109F7 51                      push ecx
:004109F8 8B5508                  mov edx, dword ptr [ebp+08]
:004109FB 52                      push edx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:004109FC FF15D8D64B00            Call dword ptr [004BD6D8]
:00410A02 8D45D4                  lea eax, dword ptr [ebp-2C]
:00410A05 50                      push eax
:00410A06 6800000200              push 00020000
:00410A0B 6843080000              push 00000843
:00410A10 33C9                    xor ecx, ecx
:00410A12 668B0D10AE4800          mov cx, word ptr [0048AE10]
:00410A19 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00410A1A FF1520D74B00            Call dword ptr [004BD720]
:00410A20 8B55D8                  mov edx, dword ptr [ebp-28]
:00410A23 8955E8                  mov dword ptr [ebp-18], edx
:00410A26 8B45DC                  mov eax, dword ptr [ebp-24]
:00410A29 8945EC                  mov dword ptr [ebp-14], eax
:00410A2C 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00410A2F 894DF0                  mov dword ptr [ebp-10], ecx
:00410A32 8B55E4                  mov edx, dword ptr [ebp-1C]
:00410A35 8955F4                  mov dword ptr [ebp-0C], edx
:00410A38 8B45CC                  mov eax, dword ptr [ebp-34]
:00410A3B 99                      cdq
:00410A3C 2BC2                    sub eax, edx
:00410A3E 8BC8                    mov ecx, eax
:00410A40 D1F9                    sar ecx, 1
:00410A42 8B45F0                  mov eax, dword ptr [ebp-10]
:00410A45 99                      cdq
:00410A46 2BC2                    sub eax, edx
:00410A48 D1F8                    sar eax, 1
:00410A4A 2BC8                    sub ecx, eax
:00410A4C 8B55C0                  mov edx, dword ptr [ebp-40]
:00410A4F 890A                    mov dword ptr [edx], ecx
:00410A51 8B45D0                  mov eax, dword ptr [ebp-30]
:00410A54 99                      cdq
:00410A55 2BC2                    sub eax, edx
:00410A57 8BC8                    mov ecx, eax
:00410A59 D1F9                    sar ecx, 1
:00410A5B 8B45F4                  mov eax, dword ptr [ebp-0C]
:00410A5E 99                      cdq
:00410A5F 2BC2                    sub eax, edx
:00410A61 D1F8                    sar eax, 1
:00410A63 2BC8                    sub ecx, eax
:00410A65 8B55C0                  mov edx, dword ptr [ebp-40]
:00410A68 894A04                  mov dword ptr [edx+04], ecx
:00410A6B 8B45C0                  mov eax, dword ptr [ebp-40]
:00410A6E 8B08                    mov ecx, dword ptr [eax]
:00410A70 034DF0                  add ecx, dword ptr [ebp-10]
:00410A73 8B55C0                  mov edx, dword ptr [ebp-40]
:00410A76 894A08                  mov dword ptr [edx+08], ecx
:00410A79 8B45C0                  mov eax, dword ptr [ebp-40]
:00410A7C 8B4804                  mov ecx, dword ptr [eax+04]
:00410A7F 034DF4                  add ecx, dword ptr [ebp-0C]
:00410A82 8B55C0                  mov edx, dword ptr [ebp-40]
:00410A85 894A0C                  mov dword ptr [edx+0C], ecx
:00410A88 8B45C0                  mov eax, dword ptr [ebp-40]
:00410A8B 8B08                    mov ecx, dword ptr [eax]
:00410A8D 894DF8                  mov dword ptr [ebp-08], ecx
:00410A90 8B55C0                  mov edx, dword ptr [ebp-40]
:00410A93 8B4204                  mov eax, dword ptr [edx+04]
:00410A96 8945FC                  mov dword ptr [ebp-04], eax
:00410A99 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00410A9C 51                      push ecx
:00410A9D 8B5508                  mov edx, dword ptr [ebp+08]
:00410AA0 52                      push edx

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:00410AA1 FF15D0D64B00            Call dword ptr [004BD6D0]
:00410AA7 8B45C0                  mov eax, dword ptr [ebp-40]
:00410AAA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00410AAD 8908                    mov dword ptr [eax], ecx
:00410AAF 8B55C0                  mov edx, dword ptr [ebp-40]
:00410AB2 8B45FC                  mov eax, dword ptr [ebp-04]
:00410AB5 894204                  mov dword ptr [edx+04], eax
:00410AB8 6A00                    push 00000000
:00410ABA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00410ABD 51                      push ecx
:00410ABE 8B55F0                  mov edx, dword ptr [ebp-10]
:00410AC1 52                      push edx
:00410AC2 8B45C0                  mov eax, dword ptr [ebp-40]
:00410AC5 8B4804                  mov ecx, dword ptr [eax+04]
:00410AC8 51                      push ecx
:00410AC9 8B55C0                  mov edx, dword ptr [ebp-40]
:00410ACC 8B02                    mov eax, dword ptr [edx]
:00410ACE 50                      push eax
:00410ACF 6A00                    push 00000000
:00410AD1 8B0DCCAD4800            mov ecx, dword ptr [0048ADCC]
:00410AD7 51                      push ecx

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:00410AD8 FF15F0D54B00            Call dword ptr [004BD5F0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004109EF(U)
|
:00410ADE 8BE5                    mov esp, ebp
:00410AE0 5D                      pop ebp
:00410AE1 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00410C6C   
|
:00410AE4 55                      push ebp
:00410AE5 8BEC                    mov ebp, esp
:00410AE7 83EC18                  sub esp, 00000018
:00410AEA 894DE8                  mov dword ptr [ebp-18], ecx
:00410AED 8B45E8                  mov eax, dword ptr [ebp-18]
:00410AF0 C7401401000000          mov [eax+14], 00000001
:00410AF7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00410AFA 83791400                cmp dword ptr [ecx+14], 00000000
:00410AFE 745B                    je 00410B5B
:00410B00 8B5508                  mov edx, dword ptr [ebp+08]
:00410B03 81E2FFFF0000            and edx, 0000FFFF
:00410B09 8955F0                  mov dword ptr [ebp-10], edx
:00410B0C C745F800000000          mov [ebp-08], 00000000
:00410B13 8B45F8                  mov eax, dword ptr [ebp-08]
:00410B16 8945F4                  mov dword ptr [ebp-0C], eax
:00410B19 C745EC01000000          mov [ebp-14], 00000001
:00410B20 6A00                    push 00000000
:00410B22 6800010000              push 00000100
:00410B27 6807080000              push 00000807
:00410B2C 33C9                    xor ecx, ecx
:00410B2E 668B0D10AE4800          mov cx, word ptr [0048AE10]
:00410B35 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00410B36 FF1520D74B00            Call dword ptr [004BD720]
:00410B3C 8D55F0                  lea edx, dword ptr [ebp-10]
:00410B3F 52                      push edx
:00410B40 8B45EC                  mov eax, dword ptr [ebp-14]
:00410B43 50                      push eax
:00410B44 6806080000              push 00000806
:00410B49 33C9                    xor ecx, ecx
:00410B4B 668B0D10AE4800          mov cx, word ptr [0048AE10]
:00410B52 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00410B53 FF1520D74B00            Call dword ptr [004BD720]
:00410B59 EB1A                    jmp 00410B75

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410AFE(C)
|
:00410B5B 8D55FC                  lea edx, dword ptr [ebp-04]
:00410B5E 52                      push edx
:00410B5F 6A00                    push 00000000
:00410B61 6809080000              push 00000809
:00410B66 33C0                    xor eax, eax
:00410B68 66A110AE4800            mov ax, word ptr [0048AE10]
:00410B6E 50                      push eax

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00410B6F FF1520D74B00            Call dword ptr [004BD720]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410B59(U)
|
:00410B75 B801000000              mov eax, 00000001
:00410B7A 8BE5                    mov esp, ebp
:00410B7C 5D                      pop ebp
:00410B7D C20400                  ret 0004



* Referenced by a CALL at Address:
|:00410EE4   
|
:00410B80 55                      push ebp
:00410B81 8BEC                    mov ebp, esp
:00410B83 83EC08                  sub esp, 00000008
:00410B86 894DFC                  mov dword ptr [ebp-04], ecx
:00410B89 33C0                    xor eax, eax
:00410B8B 66A110AE4800            mov ax, word ptr [0048AE10]
:00410B91 39450C                  cmp dword ptr [ebp+0C], eax
:00410B94 751F                    jne 00410BB5
:00410B96 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410B99 894DF8                  mov dword ptr [ebp-08], ecx
:00410B9C 837DF801                cmp dword ptr [ebp-08], 00000001
:00410BA0 7402                    je 00410BA4
:00410BA2 EB11                    jmp 00410BB5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410BA0(C)
|
:00410BA4 8B55FC                  mov edx, dword ptr [ebp-04]
:00410BA7 C7421400000000          mov [edx+14], 00000000
:00410BAE B801000000              mov eax, 00000001
:00410BB3 EB02                    jmp 00410BB7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410B94(C), :00410BA2(U)
|
:00410BB5 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410BB3(U)
|
:00410BB7 8BE5                    mov esp, ebp
:00410BB9 5D                      pop ebp
:00410BBA C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00410F20   , :00410F49   
|
:00410BBD 55                      push ebp
:00410BBE 8BEC                    mov ebp, esp
:00410BC0 83EC14                  sub esp, 00000014
:00410BC3 894DF0                  mov dword ptr [ebp-10], ecx
:00410BC6 C745F801000000          mov [ebp-08], 00000001
:00410BCD 8B450C                  mov eax, dword ptr [ebp+0C]
:00410BD0 25FFFF0000              and eax, 0000FFFF
:00410BD5 83F808                  cmp eax, 00000008
:00410BD8 7C07                    jl 00410BE1
:00410BDA 33C0                    xor eax, eax
:00410BDC E945010000              jmp 00410D26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410BD8(C)
|
:00410BE1 E861EA0100              call 0042F647
:00410BE6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00410BE9 81E1FFFF0000            and ecx, 0000FFFF
:00410BEF 8B148D88C54700          mov edx, dword ptr [4*ecx+0047C588]
:00410BF6 52                      push edx
:00410BF7 E86ACCFFFF              call 0040D866
:00410BFC 83C404                  add esp, 00000004
:00410BFF 8945FC                  mov dword ptr [ebp-04], eax
:00410C02 6A00                    push 00000000
:00410C04 6A00                    push 00000000
:00410C06 E875460600              call 00475280
:00410C0B 83C408                  add esp, 00000008
:00410C0E EB2C                    jmp 00410C3C
:00410C10 FC                      cld
:00410C11 50                      push eax
:00410C12 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410C15 51                      push ecx
:00410C16 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00410C19 E82DFCFFFF              call 0041084B
:00410C1E 8B55F0                  mov edx, dword ptr [ebp-10]
:00410C21 837A1000                cmp dword ptr [edx+10], 00000000
:00410C25 752B                    jne 00410C52
:00410C27 8B45FC                  mov eax, dword ptr [ebp-04]
:00410C2A 50                      push eax

* Possible StringData Ref from Data Obj ->"Lk[%sʵev"
                                  |
:00410C2B 6838C64700              push 0047C638
:00410C30 E8F78D0500              call 00469A2C
:00410C35 83C408                  add esp, 00000008
:00410C38 85C0                    test eax, eax
:00410C3A 7516                    jne 00410C52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410C0E(U)
|
:00410C3C 6800010000              push 00000100
:00410C41 6A00                    push 00000000
:00410C43 E838460600              call 00475280
:00410C48 83C408                  add esp, 00000008
:00410C4B 33C0                    xor eax, eax
:00410C4D E9D4000000              jmp 00410D26

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410C25(C), :00410C3A(C)
|
:00410C52 C705C0AD480000000000    mov dword ptr [0048ADC0], 00000000
:00410C5C 8B4D14                  mov ecx, dword ptr [ebp+14]
:00410C5F 890DC4AD4800            mov dword ptr [0048ADC4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410CFC(C)
|
:00410C65 8B5508                  mov edx, dword ptr [ebp+08]
:00410C68 52                      push edx
:00410C69 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00410C6C E873FEFFFF              call 00410AE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410CD5(U)
|
:00410C71 8B45F0                  mov eax, dword ptr [ebp-10]
:00410C74 83781400                cmp dword ptr [eax+14], 00000000
:00410C78 745D                    je 00410CD7
:00410C7A E8D7670600              call 00477456
:00410C7F 8B0DCCAD4800            mov ecx, dword ptr [0048ADCC]
:00410C85 51                      push ecx
:00410C86 B9D0AD4800              mov ecx, 0048ADD0
:00410C8B E81E950000              call 0041A1AE
:00410C90 F7D8                    neg eax
:00410C92 1BC0                    sbb eax, eax
:00410C94 F7D8                    neg eax
:00410C96 85C0                    test eax, eax
:00410C98 7512                    jne 00410CAC
:00410C9A 833DC0AD480000          cmp dword ptr [0048ADC0], 00000000
:00410CA1 7509                    jne 00410CAC
:00410CA3 C745EC00000000          mov [ebp-14], 00000000
:00410CAA EB07                    jmp 00410CB3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410C98(C), :00410CA1(C)
|
:00410CAC C745EC01000000          mov [ebp-14], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410CAA(U)
|
:00410CB3 8B55EC                  mov edx, dword ptr [ebp-14]
:00410CB6 8955F4                  mov dword ptr [ebp-0C], edx
:00410CB9 837D1400                cmp dword ptr [ebp+14], 00000000
:00410CBD 7416                    je 00410CD5
:00410CBF 837DF400                cmp dword ptr [ebp-0C], 00000000
:00410CC3 7410                    je 00410CD5
:00410CC5 C745F800000000          mov [ebp-08], 00000000
:00410CCC C7451000000000          mov [ebp+10], 00000000
:00410CD3 EB02                    jmp 00410CD7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410CBD(C), :00410CC3(C)
|
:00410CD5 EB9A                    jmp 00410C71

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410C78(C), :00410CD3(U)
|
:00410CD7 837D1000                cmp dword ptr [ebp+10], 00000000
:00410CDB 741B                    je 00410CF8
:00410CDD 6A00                    push 00000000
:00410CDF 6800010000              push 00000100
:00410CE4 6807080000              push 00000807
:00410CE9 33C0                    xor eax, eax
:00410CEB 66A110AE4800            mov ax, word ptr [0048AE10]
:00410CF1 50                      push eax

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00410CF2 FF1520D74B00            Call dword ptr [004BD720]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410CDB(C)
|
:00410CF8 837D1000                cmp dword ptr [ebp+10], 00000000
:00410CFC 0F8563FFFFFF            jne 00410C65
:00410D02 837D1800                cmp dword ptr [ebp+18], 00000000
:00410D06 751B                    jne 00410D23
:00410D08 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410D0B 51                      push ecx
:00410D0C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00410D0F E8C7FAFFFF              call 004107DB
:00410D14 6800010000              push 00000100
:00410D19 6A00                    push 00000000
:00410D1B E860450600              call 00475280
:00410D20 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410D06(C)
|
:00410D23 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410BDC(U), :00410C4D(U)
|
:00410D26 8BE5                    mov esp, ebp
:00410D28 5D                      pop ebp
:00410D29 C21800                  ret 0018



* Referenced by a CALL at Addresses:
|:00410D5B   , :00410DAF   , :00410E13   , :00410E6F   
|
:00410D2C 55                      push ebp
:00410D2D 8BEC                    mov ebp, esp
:00410D2F 51                      push ecx
:00410D30 894DFC                  mov dword ptr [ebp-04], ecx
:00410D33 33C0                    xor eax, eax
:00410D35 66A110AE4800            mov ax, word ptr [0048AE10]
:00410D3B 3DFFFF0000              cmp eax, 0000FFFF
:00410D40 7504                    jne 00410D46
:00410D42 33C0                    xor eax, eax
:00410D44 EB05                    jmp 00410D4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410D40(C)
|
:00410D46 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410D44(U)
|
:00410D4B 8BE5                    mov esp, ebp
:00410D4D 5D                      pop ebp
:00410D4E C3                      ret


:00410D4F 55                      push ebp
:00410D50 8BEC                    mov ebp, esp
:00410D52 83EC14                  sub esp, 00000014
:00410D55 894DEC                  mov dword ptr [ebp-14], ecx
:00410D58 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00410D5B E8CCFFFFFF              call 00410D2C
:00410D60 85C0                    test eax, eax
:00410D62 7504                    jne 00410D68
:00410D64 33C0                    xor eax, eax
:00410D66 EB37                    jmp 00410D9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410D62(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00410D68 C745F804000000          mov [ebp-08], 00000004
:00410D6F 8D45F0                  lea eax, dword ptr [ebp-10]
:00410D72 50                      push eax
:00410D73 6800010000              push 00000100
:00410D78 6814080000              push 00000814
:00410D7D 33C9                    xor ecx, ecx
:00410D7F 668B0D10AE4800          mov cx, word ptr [0048AE10]
:00410D86 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00410D87 FF1520D74B00            Call dword ptr [004BD720]
:00410D8D 817DF411020000          cmp dword ptr [ebp-0C], 00000211
:00410D94 7507                    jne 00410D9D
:00410D96 B801000000              mov eax, 00000001
:00410D9B EB02                    jmp 00410D9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410D94(C)
|
:00410D9D 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410D66(U), :00410D9B(U)
|
:00410D9F 8BE5                    mov esp, ebp
:00410DA1 5D                      pop ebp
:00410DA2 C3                      ret



* Referenced by a CALL at Address:
|:00410E82   
|
:00410DA3 55                      push ebp
:00410DA4 8BEC                    mov ebp, esp
:00410DA6 83EC14                  sub esp, 00000014
:00410DA9 894DEC                  mov dword ptr [ebp-14], ecx
:00410DAC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00410DAF E878FFFFFF              call 00410D2C
:00410DB4 85C0                    test eax, eax
:00410DB6 7507                    jne 00410DBF
:00410DB8 B801000000              mov eax, 00000001
:00410DBD EB44                    jmp 00410E03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410DB6(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00410DBF C745F804000000          mov [ebp-08], 00000004
:00410DC6 8D45F0                  lea eax, dword ptr [ebp-10]
:00410DC9 50                      push eax
:00410DCA 6800010000              push 00000100
:00410DCF 6814080000              push 00000814
:00410DD4 33C9                    xor ecx, ecx
:00410DD6 668B0D10AE4800          mov cx, word ptr [0048AE10]
:00410DDD 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00410DDE FF1520D74B00            Call dword ptr [004BD720]
:00410DE4 817DF40E020000          cmp dword ptr [ebp-0C], 0000020E
:00410DEB 7504                    jne 00410DF1
:00410DED 33C0                    xor eax, eax
:00410DEF EB12                    jmp 00410E03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410DEB(C)
|
:00410DF1 817DF411020000          cmp dword ptr [ebp-0C], 00000211
:00410DF8 7504                    jne 00410DFE
:00410DFA 33C0                    xor eax, eax
:00410DFC EB05                    jmp 00410E03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410DF8(C)
|
:00410DFE B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410DBD(U), :00410DEF(U), :00410DFC(U)
|
:00410E03 8BE5                    mov esp, ebp
:00410E05 5D                      pop ebp
:00410E06 C3                      ret



* Referenced by a CALL at Address:
|:00410F58   
|
:00410E07 55                      push ebp
:00410E08 8BEC                    mov ebp, esp
:00410E0A 83EC08                  sub esp, 00000008
:00410E0D 894DF8                  mov dword ptr [ebp-08], ecx
:00410E10 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00410E13 E814FFFFFF              call 00410D2C
:00410E18 85C0                    test eax, eax
:00410E1A 7502                    jne 00410E1E
:00410E1C EB1B                    jmp 00410E39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410E1A(C)
|
:00410E1E 8D45FC                  lea eax, dword ptr [ebp-04]
:00410E21 50                      push eax
:00410E22 6A00                    push 00000000
:00410E24 6809080000              push 00000809
:00410E29 33C9                    xor ecx, ecx
:00410E2B 668B0D10AE4800          mov cx, word ptr [0048AE10]
:00410E32 51                      push ecx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00410E33 FF1520D74B00            Call dword ptr [004BD720]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410E1C(U)
|
:00410E39 8BE5                    mov esp, ebp
:00410E3B 5D                      pop ebp
:00410E3C C3                      ret



* Referenced by a CALL at Address:
|:00410F6D   
|
:00410E3D 55                      push ebp
:00410E3E 8BEC                    mov ebp, esp
:00410E40 83EC08                  sub esp, 00000008
:00410E43 894DF8                  mov dword ptr [ebp-08], ecx
:00410E46 8B4508                  mov eax, dword ptr [ebp+08]
:00410E49 25FFFF0000              and eax, 0000FFFF
:00410E4E 8945FC                  mov dword ptr [ebp-04], eax
:00410E51 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00410E54 51                      push ecx
:00410E55 6A01                    push 00000001
:00410E57 6806080000              push 00000806
:00410E5C 33D2                    xor edx, edx
:00410E5E 668B1510AE4800          mov dx, word ptr [0048AE10]
:00410E65 52                      push edx

* Reference To: WINMM.mciSendCommandA, Ord:0032h
                                  |
:00410E66 FF1520D74B00            Call dword ptr [004BD720]
:00410E6C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00410E6F E8B8FEFFFF              call 00410D2C
:00410E74 85C0                    test eax, eax
:00410E76 7407                    je 00410E7F
:00410E78 B801000000              mov eax, 00000001
:00410E7D EB15                    jmp 00410E94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410E76(C)
|
:00410E7F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00410E82 E81CFFFFFF              call 00410DA3
:00410E87 85C0                    test eax, eax
:00410E89 7407                    je 00410E92
:00410E8B B801000000              mov eax, 00000001
:00410E90 EB02                    jmp 00410E94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00410E89(C)
|
:00410E92 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00410E7D(U), :00410E90(U)
|
:00410E94 8BE5                    mov esp, ebp
:00410E96 5D                      pop ebp
:00410E97 C20400                  ret 0004


:00410E9A 55                      push ebp
:00410E9B 8BEC                    mov ebp, esp
:00410E9D B9A8AD4800              mov ecx, 0048ADA8
:00410EA2 E8DBF8FFFF              call 00410782
:00410EA7 5D                      pop ebp
:00410EA8 C3                      ret



* Referenced by a CALL at Address:
|:0042EEEC   
|
:00410EA9 55                      push ebp
:00410EAA 8BEC                    mov ebp, esp
:00410EAC 51                      push ecx
:00410EAD 8B4508                  mov eax, dword ptr [ebp+08]
:00410EB0 50                      push eax
:00410EB1 B9A8AD4800              mov ecx, 0048ADA8
:00410EB6 E820F9FFFF              call 004107DB
:00410EBB 8945FC                  mov dword ptr [ebp-04], eax
:00410EBE 6800010000              push 00000100
:00410EC3 6A00                    push 00000000
:00410EC5 E8B6430600              call 00475280
:00410ECA 83C408                  add esp, 00000008
:00410ECD 8B45FC                  mov eax, dword ptr [ebp-04]
:00410ED0 8BE5                    mov esp, ebp
:00410ED2 5D                      pop ebp
:00410ED3 C3                      ret



* Referenced by a CALL at Address:
|:0046A091   
|
:00410ED4 55                      push ebp
:00410ED5 8BEC                    mov ebp, esp
:00410ED7 8B450C                  mov eax, dword ptr [ebp+0C]
:00410EDA 50                      push eax
:00410EDB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00410EDE 51                      push ecx
:00410EDF B9A8AD4800              mov ecx, 0048ADA8
:00410EE4 E897FCFFFF              call 00410B80
:00410EE9 5D                      pop ebp
:00410EEA C3                      ret



* Referenced by a CALL at Address:
|:00469FA2   
|
:00410EEB 55                      push ebp
:00410EEC 8BEC                    mov ebp, esp
:00410EEE 8B4508                  mov eax, dword ptr [ebp+08]
:00410EF1 50                      push eax
:00410EF2 B9A8AD4800              mov ecx, 0048ADA8
:00410EF7 E8E1FAFFFF              call 004109DD
:00410EFC 5D                      pop ebp
:00410EFD C3                      ret



* Referenced by a CALL at Addresses:
|:0042EF3D   , :0042EF80   , :00431C1D   
|
:00410EFE 55                      push ebp
:00410EFF 8BEC                    mov ebp, esp
:00410F01 6A00                    push 00000000
:00410F03 8B4514                  mov eax, dword ptr [ebp+14]
:00410F06 50                      push eax
:00410F07 8B4D10                  mov ecx, dword ptr [ebp+10]
:00410F0A 51                      push ecx
:00410F0B 8B550C                  mov edx, dword ptr [ebp+0C]
:00410F0E 52                      push edx
:00410F0F 668B4508                mov ax, word ptr [ebp+08]
:00410F13 50                      push eax
:00410F14 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00410F1A 51                      push ecx
:00410F1B B9A8AD4800              mov ecx, 0048ADA8
:00410F20 E898FCFFFF              call 00410BBD
:00410F25 5D                      pop ebp
:00410F26 C3                      ret


:00410F27 55                      push ebp
:00410F28 8BEC                    mov ebp, esp
:00410F2A 6A01                    push 00000001
:00410F2C 8B4514                  mov eax, dword ptr [ebp+14]
:00410F2F 50                      push eax
:00410F30 8B4D10                  mov ecx, dword ptr [ebp+10]
:00410F33 51                      push ecx
:00410F34 8B550C                  mov edx, dword ptr [ebp+0C]
:00410F37 52                      push edx
:00410F38 668B4508                mov ax, word ptr [ebp+08]
:00410F3C 50                      push eax
:00410F3D 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00410F43 51                      push ecx
:00410F44 B9A8AD4800              mov ecx, 0048ADA8
:00410F49 E86FFCFFFF              call 00410BBD
:00410F4E 5D                      pop ebp
:00410F4F C3                      ret



* Referenced by a CALL at Address:
|:0046DDD2   
|
:00410F50 55                      push ebp
:00410F51 8BEC                    mov ebp, esp
:00410F53 B9A8AD4800              mov ecx, 0048ADA8
:00410F58 E8AAFEFFFF              call 00410E07
:00410F5D 5D                      pop ebp
:00410F5E C3                      ret



* Referenced by a CALL at Address:
|:0046DE87   
|
:00410F5F 55                      push ebp
:00410F60 8BEC                    mov ebp, esp
:00410F62 A1B0554B00              mov eax, dword ptr [004B55B0]
:00410F67 50                      push eax
:00410F68 B9A8AD4800              mov ecx, 0048ADA8
:00410F6D E8CBFEFFFF              call 00410E3D
:00410F72 5D                      pop ebp
:00410F73 C3                      ret


:00410F74 CC                      int 03
:00410F75 CC                      int 03
:00410F76 CC                      int 03
:00410F77 CC                      int 03
:00410F78 CC                      int 03
:00410F79 CC                      int 03
:00410F7A CC                      int 03
:00410F7B CC                      int 03
:00410F7C CC                      int 03
:00410F7D CC                      int 03
:00410F7E CC                      int 03
:00410F7F CC                      int 03

* Referenced by a CALL at Addresses:
|:004106A6   , :004197C7   
|
:00410F80 55                      push ebp
:00410F81 8BEC                    mov ebp, esp
:00410F83 51                      push ecx
:00410F84 894DFC                  mov dword ptr [ebp-04], ecx
:00410F87 8B45FC                  mov eax, dword ptr [ebp-04]
:00410F8A C7400800000000          mov [eax+08], 00000000
:00410F91 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410F94 C7410C00000000          mov [ecx+0C], 00000000
:00410F9B 8B55FC                  mov edx, dword ptr [ebp-04]
:00410F9E C7421840010000          mov [edx+18], 00000140
:00410FA5 8B45FC                  mov eax, dword ptr [ebp-04]
:00410FA8 C7401CF0000000          mov [eax+1C], 000000F0
:00410FAF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410FB2 C7411040010000          mov [ecx+10], 00000140
:00410FB9 8B55FC                  mov edx, dword ptr [ebp-04]
:00410FBC C74214F0000000          mov [edx+14], 000000F0
:00410FC3 8B45FC                  mov eax, dword ptr [ebp-04]
:00410FC6 C7402000000000          mov [eax+20], 00000000
:00410FCD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410FD0 C7412400000000          mov [ecx+24], 00000000
:00410FD7 8B55FC                  mov edx, dword ptr [ebp-04]
:00410FDA C7422800000000          mov [edx+28], 00000000
:00410FE1 8B45FC                  mov eax, dword ptr [ebp-04]
:00410FE4 C7402C00000000          mov [eax+2C], 00000000
:00410FEB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00410FEE C7413000000000          mov [ecx+30], 00000000
:00410FF5 8B55FC                  mov edx, dword ptr [ebp-04]
:00410FF8 C7423400000000          mov [edx+34], 00000000
:00410FFF 8B45FC                  mov eax, dword ptr [ebp-04]
:00411002 C7403800000000          mov [eax+38], 00000000
:00411009 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041100C C7413C00000000          mov [ecx+3C], 00000000
:00411013 8B45FC                  mov eax, dword ptr [ebp-04]
:00411016 8BE5                    mov esp, ebp
:00411018 5D                      pop ebp
:00411019 C3                      ret


:0041101A CC                      int 03
:0041101B CC                      int 03
:0041101C CC                      int 03
:0041101D CC                      int 03
:0041101E CC                      int 03
:0041101F CC                      int 03

* Referenced by a CALL at Address:
|:00410667   
|
:00411020 55                      push ebp
:00411021 8BEC                    mov ebp, esp
:00411023 51                      push ecx
:00411024 894DFC                  mov dword ptr [ebp-04], ecx
:00411027 8B45FC                  mov eax, dword ptr [ebp-04]
:0041102A C7401000000000          mov [eax+10], 00000000
:00411031 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411034 C7411400000000          mov [ecx+14], 00000000
:0041103B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041103E 8BE5                    mov esp, ebp
:00411040 5D                      pop ebp
:00411041 C3                      ret


:00411042 CC                      int 03
:00411043 CC                      int 03
:00411044 CC                      int 03
:00411045 CC                      int 03
:00411046 CC                      int 03
:00411047 CC                      int 03
:00411048 CC                      int 03
:00411049 CC                      int 03
:0041104A CC                      int 03
:0041104B CC                      int 03
:0041104C CC                      int 03
:0041104D CC                      int 03
:0041104E CC                      int 03
:0041104F CC                      int 03

* Referenced by a CALL at Address:
|:004110F3   
|
:00411050 55                      push ebp
:00411051 8BEC                    mov ebp, esp
:00411053 51                      push ecx
:00411054 894DFC                  mov dword ptr [ebp-04], ecx
:00411057 833D24AE480000          cmp dword ptr [0048AE24], 00000000
:0041105E 7532                    jne 00411092

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:00411060 6800040000              push 00000400
:00411065 A120AE4800              mov eax, dword ptr [0048AE20]
:0041106A 50                      push eax
:0041106B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041106E E854CAFFFF              call 0040DAC7
:00411073 A324AE4800              mov dword ptr [0048AE24], eax
:00411078 833D24AE480000          cmp dword ptr [0048AE24], 00000000
:0041107F 7F05                    jg 00411086
:00411081 83C8FF                  or eax, FFFFFFFF
:00411084 EB3A                    jmp 004110C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041107F(C)
|
:00411086 8B0D20AE4800            mov ecx, dword ptr [0048AE20]
:0041108C 890D1CAE4800            mov dword ptr [0048AE1C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041105E(C)
|
:00411092 8B1524AE4800            mov edx, dword ptr [0048AE24]
:00411098 83EA01                  sub edx, 00000001
:0041109B 891524AE4800            mov dword ptr [0048AE24], edx
:004110A1 A11CAE4800              mov eax, dword ptr [0048AE1C]
:004110A6 33C9                    xor ecx, ecx
:004110A8 8A08                    mov cl, byte ptr [eax]
:004110AA 8BC1                    mov eax, ecx
:004110AC 25FF000000              and eax, 000000FF
:004110B1 8B151CAE4800            mov edx, dword ptr [0048AE1C]
:004110B7 83C201                  add edx, 00000001
:004110BA 89151CAE4800            mov dword ptr [0048AE1C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411084(U)
|
:004110C0 8BE5                    mov esp, ebp
:004110C2 5D                      pop ebp
:004110C3 C3                      ret



* Referenced by a CALL at Addresses:
|:00411175   , :004111B2   
|
:004110C4 55                      push ebp
:004110C5 8BEC                    mov ebp, esp
:004110C7 83EC0C                  sub esp, 0000000C
:004110CA 894DF4                  mov dword ptr [ebp-0C], ecx
:004110CD C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041114F(U)
|
:004110D4 8B4508                  mov eax, dword ptr [ebp+08]
:004110D7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004110DA 83E901                  sub ecx, 00000001
:004110DD 894D08                  mov dword ptr [ebp+08], ecx
:004110E0 85C0                    test eax, eax
:004110E2 746D                    je 00411151
:004110E4 33D2                    xor edx, edx
:004110E6 8A1518AE4800            mov dl, byte ptr [0048AE18]
:004110EC 85D2                    test edx, edx
:004110EE 7525                    jne 00411115
:004110F0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004110F3 E858FFFFFF              call 00411050
:004110F8 8945F8                  mov dword ptr [ebp-08], eax
:004110FB 837DF8FF                cmp dword ptr [ebp-08], FFFFFFFF
:004110FF 7505                    jne 00411106
:00411101 83C8FF                  or eax, FFFFFFFF
:00411104 EB4E                    jmp 00411154

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004110FF(C)
|
:00411106 8A45F8                  mov al, byte ptr [ebp-08]
:00411109 A214AE4800              mov byte ptr [0048AE14], al
:0041110E C60518AE480008          mov byte ptr [0048AE18], 08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004110EE(C)
|
:00411115 8A0D18AE4800            mov cl, byte ptr [0048AE18]
:0041111B 80E901                  sub cl, 01
:0041111E 880D18AE4800            mov byte ptr [0048AE18], cl
:00411124 33D2                    xor edx, edx
:00411126 8A1514AE4800            mov dl, byte ptr [0048AE14]
:0041112C 81E280000000            and edx, 00000080
:00411132 F7DA                    neg edx
:00411134 1BD2                    sbb edx, edx
:00411136 F7DA                    neg edx
:00411138 8B45FC                  mov eax, dword ptr [ebp-04]
:0041113B 8D0C42                  lea ecx, dword ptr [edx+2*eax]
:0041113E 894DFC                  mov dword ptr [ebp-04], ecx
:00411141 8A1514AE4800            mov dl, byte ptr [0048AE14]
:00411147 D0E2                    shl dl, 1
:00411149 881514AE4800            mov byte ptr [0048AE14], dl
:0041114F EB83                    jmp 004110D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004110E2(C)
|
:00411151 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411104(U)
|
:00411154 8BE5                    mov esp, ebp
:00411156 5D                      pop ebp
:00411157 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00411283   , :004112A2   
|
:0041115A 55                      push ebp
:0041115B 8BEC                    mov ebp, esp
:0041115D 83EC10                  sub esp, 00000010
:00411160 894DF0                  mov dword ptr [ebp-10], ecx
:00411163 C745FC00000000          mov [ebp-04], 00000000
:0041116A 66C745F40000            mov [ebp-0C], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004111A8(C)
|
:00411170 6A01                    push 00000001
:00411172 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00411175 E84AFFFFFF              call 004110C4
:0041117A 8945F8                  mov dword ptr [ebp-08], eax
:0041117D 837DF8FF                cmp dword ptr [ebp-08], FFFFFFFF
:00411181 7505                    jne 00411188
:00411183 83C8FF                  or eax, FFFFFFFF
:00411186 EB49                    jmp 004111D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411181(C)
|
:00411188 8B45FC                  mov eax, dword ptr [ebp-04]
:0041118B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041118E 8D1441                  lea edx, dword ptr [ecx+2*eax]
:00411191 8955FC                  mov dword ptr [ebp-04], edx
:00411194 668B45F4                mov ax, word ptr [ebp-0C]
:00411198 66050100                add ax, 0001
:0041119C 668945F4                mov word ptr [ebp-0C], ax
:004111A0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004111A3 83E101                  and ecx, 00000001
:004111A6 85C9                    test ecx, ecx
:004111A8 75C6                    jne 00411170
:004111AA 0FBF55F4                movsx edx, word ptr [ebp-0C]
:004111AE 52                      push edx
:004111AF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004111B2 E80DFFFFFF              call 004110C4
:004111B7 8945F8                  mov dword ptr [ebp-08], eax
:004111BA 837DF8FF                cmp dword ptr [ebp-08], FFFFFFFF
:004111BE 7505                    jne 004111C5
:004111C0 83C8FF                  or eax, FFFFFFFF
:004111C3 EB0C                    jmp 004111D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004111BE(C)
|
:004111C5 8B45FC                  mov eax, dword ptr [ebp-04]
:004111C8 0345F8                  add eax, dword ptr [ebp-08]
:004111CB 8945FC                  mov dword ptr [ebp-04], eax
:004111CE 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411186(U), :004111C3(U)
|
:004111D1 8BE5                    mov esp, ebp
:004111D3 5D                      pop ebp
:004111D4 C3                      ret



* Referenced by a CALL at Addresses:
|:0040379B   , :0040381F   , :00405199   , :004052B8   , :0040F36E   
|:0040FFC9   , :0041AAA2   , :0041D1CF   , :004217A3   , :00421807   
|:004243E1   , :00424446   , :0042651C   , :0042656D   , :0042A503   
|:0042A6A1   , :0042AB24   , :0042BB5F   , :0042BB95   , :0042BBA7   
|:0042BE72   , :0042C29D   , :0042C60D   , :0042C812   , :0042CF55   
|:0042D04E   , :0042D147   , :0042EAAE   , :0042ED75   , :0042ED84   
|:00432A69   , :004344B9   , :004345EE   , :00442CDB   , :00443110   
|:00443398   , :00444F9F   , :004459BA   , :00445B23   , :00446932   
|:00446B59   , :00446E2F   , :00446F40   , :00447061   , :004474CE   
|:00447829   , :0045803C   , :00458A10   , :0045A269   , :0045A4BC   
|:0045BD2F   , :0045BD91   , :0045C579   , :0045C807   , :0046BED9   
|
:004111D5 55                      push ebp
:004111D6 8BEC                    mov ebp, esp
:004111D8 51                      push ecx
:004111D9 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004111DC 6A04                    push 00000004
:004111DE 8B4508                  mov eax, dword ptr [ebp+08]
:004111E1 50                      push eax
:004111E2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004111E5 E8D2C6FFFF              call 0040D8BC
:004111EA 85C0                    test eax, eax
:004111EC 7517                    jne 00411205
:004111EE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004111F1 51                      push ecx

* Possible StringData Ref from Data Obj ->"File%sOpenErr"
                                  |
:004111F2 684CC64700              push 0047C64C
:004111F7 6A00                    push 00000000
:004111F9 E835020200              call 00431433
:004111FE 83C40C                  add esp, 0000000C
:00411201 33C0                    xor eax, eax
:00411203 EB1B                    jmp 00411220

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004111EC(C)
|
:00411205 6800010000              push 00000100
:0041120A 8B55FC                  mov edx, dword ptr [ebp-04]
:0041120D 83C204                  add edx, 00000004
:00411210 52                      push edx
:00411211 6A10                    push 00000010
:00411213 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411216 E8C9C8FFFF              call 0040DAE4
:0041121B B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411203(U)
|
:00411220 8BE5                    mov esp, ebp
:00411222 5D                      pop ebp
:00411223 C20400                  ret 0004


:00411226 55                      push ebp
:00411227 8BEC                    mov ebp, esp
:00411229 51                      push ecx
:0041122A 894DFC                  mov dword ptr [ebp-04], ecx
:0041122D 6A00                    push 00000000
:0041122F 8B4508                  mov eax, dword ptr [ebp+08]
:00411232 50                      push eax
:00411233 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411236 E881C6FFFF              call 0040D8BC
:0041123B 85C0                    test eax, eax
:0041123D 7517                    jne 00411256
:0041123F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00411242 51                      push ecx

* Possible StringData Ref from Data Obj ->"File%sOpenErr"
                                  |
:00411243 685CC64700              push 0047C65C
:00411248 6A00                    push 00000000
:0041124A E8E4010200              call 00431433
:0041124F 83C40C                  add esp, 0000000C
:00411252 33C0                    xor eax, eax
:00411254 EB1B                    jmp 00411271

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041123D(C)
|
:00411256 6800010000              push 00000100
:0041125B 8B55FC                  mov edx, dword ptr [ebp-04]
:0041125E 83C204                  add edx, 00000004
:00411261 52                      push edx
:00411262 6A10                    push 00000010
:00411264 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411267 E878C8FFFF              call 0040DAE4
:0041126C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411254(U)
|
:00411271 8BE5                    mov esp, ebp
:00411273 5D                      pop ebp
:00411274 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0041153C   
|
:00411277 55                      push ebp
:00411278 8BEC                    mov ebp, esp
:0041127A 83EC18                  sub esp, 00000018
:0041127D 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041131D(C)
|
:00411280 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00411283 E8D2FEFFFF              call 0041115A
:00411288 8945F8                  mov dword ptr [ebp-08], eax
:0041128B 817DF800010000          cmp dword ptr [ebp-08], 00000100
:00411292 7C65                    jl 004112F9
:00411294 8B45F8                  mov eax, dword ptr [ebp-08]
:00411297 2D00010000              sub eax, 00000100
:0041129C 8945F0                  mov dword ptr [ebp-10], eax
:0041129F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004112A2 E8B3FEFFFF              call 0041115A
:004112A7 83C003                  add eax, 00000003
:004112AA 8945F4                  mov dword ptr [ebp-0C], eax
:004112AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004112B0 2B4DF0                  sub ecx, dword ptr [ebp-10]
:004112B3 894DFC                  mov dword ptr [ebp-04], ecx
:004112B6 C745EC00000000          mov [ebp-14], 00000000
:004112BD EB09                    jmp 004112C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004112EC(U)
|
:004112BF 8B55EC                  mov edx, dword ptr [ebp-14]
:004112C2 83C201                  add edx, 00000001
:004112C5 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004112BD(U)
|
:004112C8 8B45EC                  mov eax, dword ptr [ebp-14]
:004112CB 3B45F4                  cmp eax, dword ptr [ebp-0C]
:004112CE 7D1E                    jge 004112EE
:004112D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004112D3 8B55FC                  mov edx, dword ptr [ebp-04]
:004112D6 8A02                    mov al, byte ptr [edx]
:004112D8 8801                    mov byte ptr [ecx], al
:004112DA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004112DD 83C101                  add ecx, 00000001
:004112E0 894D08                  mov dword ptr [ebp+08], ecx
:004112E3 8B55FC                  mov edx, dword ptr [ebp-04]
:004112E6 83C201                  add edx, 00000001
:004112E9 8955FC                  mov dword ptr [ebp-04], edx
:004112EC EBD1                    jmp 004112BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004112CE(C)
|
:004112EE 8B450C                  mov eax, dword ptr [ebp+0C]
:004112F1 2B45F4                  sub eax, dword ptr [ebp-0C]
:004112F4 89450C                  mov dword ptr [ebp+0C], eax
:004112F7 EB20                    jmp 00411319

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411292(C)
|
:004112F9 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004112FC 034DF8                  add ecx, dword ptr [ebp-08]
:004112FF 8B5508                  mov edx, dword ptr [ebp+08]
:00411302 8A4104                  mov al, byte ptr [ecx+04]
:00411305 8802                    mov byte ptr [edx], al
:00411307 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041130A 83C101                  add ecx, 00000001
:0041130D 894D08                  mov dword ptr [ebp+08], ecx
:00411310 8B550C                  mov edx, dword ptr [ebp+0C]
:00411313 83EA01                  sub edx, 00000001
:00411316 89550C                  mov dword ptr [ebp+0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004112F7(U)
|
:00411319 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0041131D 0F855DFFFFFF            jne 00411280
:00411323 8BE5                    mov esp, ebp
:00411325 5D                      pop ebp
:00411326 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004037B5   , :0040383B   , :004051BA   , :004052D9   , :0040FEF2   
|:0040FFFB   , :0041024A   , :004118BC   , :0041AABE   , :0041AADF   
|:0041D1F1   , :004217C6   , :0042182A   , :0042439D   , :004243F5   
|:0042445A   , :0042653C   , :0042658D   , :0042A526   , :0042A6C4   
|:0042AB47   , :0042BBD9   , :0042BE95   , :0042C2C0   , :0042C630   
|:0042C835   , :0042CF7E   , :0042D077   , :0042D170   , :0042EAC6   
|:00432A9C   , :004344FD   , :00434614   , :00442D01   , :0044313C   
|:004433C3   , :00444FF6   , :00445A0F   , :00445B79   , :0044698B   
|:00446BB0   , :00446E85   , :00446F96   , :004470B6   , :00447527   
|:00447879   , :00458087   , :00458A42   , :0045A287   , :0045A4DA   
|:0045BD4B   , :0045BDAD   , :0045C5A0   , :0045C828   , :0046BD61   
|:0046BEFF   
|
:00411329 55                      push ebp
:0041132A 8BEC                    mov ebp, esp
:0041132C 81EC10040000            sub esp, 00000410
:00411332 898DF0FBFFFF            mov dword ptr [ebp+FFFFFBF0], ecx
:00411338 8D85FCFBFFFF            lea eax, dword ptr [ebp+FFFFFBFC]
:0041133E A320AE4800              mov dword ptr [0048AE20], eax
:00411343 C70524AE480000000000    mov dword ptr [0048AE24], 00000000
:0041134D C60518AE480000          mov byte ptr [0048AE18], 00
:00411354 8A0D18AE4800            mov cl, byte ptr [0048AE18]
:0041135A 880D14AE4800            mov byte ptr [0048AE14], cl
:00411360 6A00                    push 00000000
:00411362 8B5508                  mov edx, dword ptr [ebp+08]
:00411365 6BD20C                  imul edx, 0000000C
:00411368 81C210010000            add edx, 00000110
:0041136E 52                      push edx
:0041136F 8B8DF0FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF0]
:00411375 E805C8FFFF              call 0040DB7F
:0041137A 6A0C                    push 0000000C
:0041137C 8D85FCFBFFFF            lea eax, dword ptr [ebp+FFFFFBFC]
:00411382 50                      push eax
:00411383 8B8DF0FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF0]
:00411389 E839C7FFFF              call 0040DAC7
:0041138E 8B8D04FCFFFF            mov ecx, dword ptr [ebp+FFFFFC04]
:00411394 81E1FF000000            and ecx, 000000FF
:0041139A 81E1FF000000            and ecx, 000000FF
:004113A0 898DF4FBFFFF            mov dword ptr [ebp+FFFFFBF4], ecx
:004113A6 8B95F4FBFFFF            mov edx, dword ptr [ebp+FFFFFBF4]
:004113AC C1E208                  shl edx, 08
:004113AF 8B8505FCFFFF            mov eax, dword ptr [ebp+FFFFFC05]
:004113B5 25FF000000              and eax, 000000FF
:004113BA 25FF000000              and eax, 000000FF
:004113BF 03D0                    add edx, eax
:004113C1 8995F4FBFFFF            mov dword ptr [ebp+FFFFFBF4], edx
:004113C7 8B8DF4FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF4]
:004113CD C1E108                  shl ecx, 08
:004113D0 8B9506FCFFFF            mov edx, dword ptr [ebp+FFFFFC06]
:004113D6 81E2FF000000            and edx, 000000FF
:004113DC 81E2FF000000            and edx, 000000FF
:004113E2 03CA                    add ecx, edx
:004113E4 898DF4FBFFFF            mov dword ptr [ebp+FFFFFBF4], ecx
:004113EA 8B85F4FBFFFF            mov eax, dword ptr [ebp+FFFFFBF4]
:004113F0 C1E008                  shl eax, 08
:004113F3 8B8D07FCFFFF            mov ecx, dword ptr [ebp+FFFFFC07]
:004113F9 81E1FF000000            and ecx, 000000FF
:004113FF 81E1FF000000            and ecx, 000000FF
:00411405 03C1                    add eax, ecx
:00411407 8985F4FBFFFF            mov dword ptr [ebp+FFFFFBF4], eax
:0041140D 8B9500FCFFFF            mov edx, dword ptr [ebp+FFFFFC00]
:00411413 81E2FF000000            and edx, 000000FF
:00411419 81E2FF000000            and edx, 000000FF
:0041141F 8955FC                  mov dword ptr [ebp-04], edx
:00411422 8B45FC                  mov eax, dword ptr [ebp-04]
:00411425 C1E008                  shl eax, 08
:00411428 8B8D01FCFFFF            mov ecx, dword ptr [ebp+FFFFFC01]
:0041142E 81E1FF000000            and ecx, 000000FF
:00411434 81E1FF000000            and ecx, 000000FF
:0041143A 03C1                    add eax, ecx
:0041143C 8945FC                  mov dword ptr [ebp-04], eax
:0041143F 8B55FC                  mov edx, dword ptr [ebp-04]
:00411442 C1E208                  shl edx, 08
:00411445 8B8502FCFFFF            mov eax, dword ptr [ebp+FFFFFC02]
:0041144B 25FF000000              and eax, 000000FF
:00411450 25FF000000              and eax, 000000FF
:00411455 03D0                    add edx, eax
:00411457 8955FC                  mov dword ptr [ebp-04], edx
:0041145A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041145D C1E108                  shl ecx, 08
:00411460 8B9503FCFFFF            mov edx, dword ptr [ebp+FFFFFC03]
:00411466 81E2FF000000            and edx, 000000FF
:0041146C 81E2FF000000            and edx, 000000FF
:00411472 03CA                    add ecx, edx
:00411474 894DFC                  mov dword ptr [ebp-04], ecx
:00411477 8B85FCFBFFFF            mov eax, dword ptr [ebp+FFFFFBFC]
:0041147D 25FF000000              and eax, 000000FF
:00411482 25FF000000              and eax, 000000FF
:00411487 8985F8FBFFFF            mov dword ptr [ebp+FFFFFBF8], eax
:0041148D 8B8DF8FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF8]
:00411493 C1E108                  shl ecx, 08
:00411496 8B95FDFBFFFF            mov edx, dword ptr [ebp+FFFFFBFD]
:0041149C 81E2FF000000            and edx, 000000FF
:004114A2 81E2FF000000            and edx, 000000FF
:004114A8 03CA                    add ecx, edx
:004114AA 898DF8FBFFFF            mov dword ptr [ebp+FFFFFBF8], ecx
:004114B0 8B85F8FBFFFF            mov eax, dword ptr [ebp+FFFFFBF8]
:004114B6 C1E008                  shl eax, 08
:004114B9 8B8DFEFBFFFF            mov ecx, dword ptr [ebp+FFFFFBFE]
:004114BF 81E1FF000000            and ecx, 000000FF
:004114C5 81E1FF000000            and ecx, 000000FF
:004114CB 03C1                    add eax, ecx
:004114CD 8985F8FBFFFF            mov dword ptr [ebp+FFFFFBF8], eax
:004114D3 8B95F8FBFFFF            mov edx, dword ptr [ebp+FFFFFBF8]
:004114D9 C1E208                  shl edx, 08
:004114DC 8B85FFFBFFFF            mov eax, dword ptr [ebp+FFFFFBFF]
:004114E2 25FF000000              and eax, 000000FF
:004114E7 25FF000000              and eax, 000000FF
:004114EC 03D0                    add edx, eax
:004114EE 8995F8FBFFFF            mov dword ptr [ebp+FFFFFBF8], edx
:004114F4 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004114F8 7447                    je 00411541
:004114FA 6A00                    push 00000000
:004114FC 8B8DF4FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF4]
:00411502 51                      push ecx
:00411503 8B8DF0FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF0]
:00411509 E871C6FFFF              call 0040DB7F
:0041150E 8B55FC                  mov edx, dword ptr [ebp-04]
:00411511 3B95F8FBFFFF            cmp edx, dword ptr [ebp+FFFFFBF8]
:00411517 7515                    jne 0041152E
:00411519 8B45FC                  mov eax, dword ptr [ebp-04]
:0041151C 50                      push eax
:0041151D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00411520 51                      push ecx
:00411521 8B8DF0FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF0]
:00411527 E89BC5FFFF              call 0040DAC7
:0041152C EB13                    jmp 00411541

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411517(C)
|
:0041152E 8B55FC                  mov edx, dword ptr [ebp-04]
:00411531 52                      push edx
:00411532 8B450C                  mov eax, dword ptr [ebp+0C]
:00411535 50                      push eax
:00411536 8B8DF0FBFFFF            mov ecx, dword ptr [ebp+FFFFFBF0]
:0041153C E836FDFFFF              call 00411277

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004114F8(C), :0041152C(U)
|
:00411541 8B45FC                  mov eax, dword ptr [ebp-04]
:00411544 8BE5                    mov esp, ebp
:00411546 5D                      pop ebp
:00411547 C20800                  ret 0008


:0041154A CC                      int 03
:0041154B CC                      int 03
:0041154C CC                      int 03
:0041154D CC                      int 03
:0041154E CC                      int 03
:0041154F CC                      int 03

* Referenced by a CALL at Address:
|:0041217A   
|
:00411550 55                      push ebp
:00411551 8BEC                    mov ebp, esp
:00411553 8A4508                  mov al, byte ptr [ebp+08]
:00411556 50                      push eax
:00411557 B9D8174B00              mov ecx, 004B17D8
:0041155C E8CF0D0000              call 00412330
:00411561 5D                      pop ebp
:00411562 C3                      ret



* Referenced by a CALL at Addresses:
|:00407A42   , :00407DF9   , :0040A5BF   , :0040E85C   , :0040EB54   
|:0040EF64   , :00411575   , :00412043   , :004120CB   , :0041F0E2   
|:0045E043   , :0045E06D   , :0045F6CD   , :0046A6C9   , :0046A74C   
|:0046A89B   , :0046ACC3   , :0046AF36   , :0046B1FF   , :0046BE34   
|:0046CD73   
|
:00411563 55                      push ebp
:00411564 8BEC                    mov ebp, esp
:00411566 B9D8174B00              mov ecx, 004B17D8
:0041156B E8D0E8FFFF              call 0040FE40
:00411570 5D                      pop ebp
:00411571 C3                      ret



* Referenced by a CALL at Addresses:
|:004073D4   , :00407412   , :00407B4B   , :00407EB0   , :004081F4   
|:00408892   , :004088C9   , :004088F7   , :004099D8   , :00409B47   
|:00409C0A   , :0040A04C   , :0040A0F6   , :0040A654   , :0040A98E   
|:0040AABA   , :0040ABEB   , :0040AE25   , :0040AE69   , :0040AEF0   
|:0040AFDE   , :0040B096   , :0040B17A   , :0040B33C   , :0040B3F6   
|:0040B601   , :0040B620   , :0040B6AF   , :0040B7AA   , :0040B880   
|:00430690   , :00458ACF   , :004590B7   , :00459167   , :00459273   
|:004592D0   , :00459859   
|
:00411572 55                      push ebp
:00411573 8BEC                    mov ebp, esp
:00411575 E8E9FFFFFF              call 00411563
:0041157A 25FF000000              and eax, 000000FF
:0041157F 33C9                    xor ecx, ecx
:00411581 83F803                  cmp eax, 00000003
:00411584 0F94C1                  sete cl
:00411587 8BC1                    mov eax, ecx
:00411589 5D                      pop ebp
:0041158A C3                      ret



* Referenced by a CALL at Address:
|:0040A275   
|
:0041158B 55                      push ebp
:0041158C 8BEC                    mov ebp, esp
:0041158E 8B4508                  mov eax, dword ptr [ebp+08]
:00411591 50                      push eax
:00411592 68B0474900              push 004947B0
:00411597 E8946F0600              call 00478530
:0041159C 83C408                  add esp, 00000008
:0041159F 8B4D08                  mov ecx, dword ptr [ebp+08]
:004115A2 51                      push ecx
:004115A3 E848940500              call 0046A9F0
:004115A8 83C404                  add esp, 00000004
:004115AB 33C0                    xor eax, eax
:004115AD 5D                      pop ebp
:004115AE C3                      ret



* Referenced by a CALL at Addresses:
|:00409F6F   , :0040A472   
|
:004115AF 55                      push ebp
:004115B0 8BEC                    mov ebp, esp
:004115B2 51                      push ecx
:004115B3 C745FCD8174B00          mov [ebp-04], 004B17D8
:004115BA 6A01                    push 00000001
:004115BC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004115BF E86C0D0000              call 00412330
:004115C4 68FF000000              push 000000FF
:004115C9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004115CC E87F0D0000              call 00412350
:004115D1 8A450C                  mov al, byte ptr [ebp+0C]
:004115D4 50                      push eax
:004115D5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004115D8 E8330D0000              call 00412310
:004115DD 8B0D3CC74A00            mov ecx, dword ptr [004AC73C]
:004115E3 83C902                  or ecx, 00000002
:004115E6 890D3CC74A00            mov dword ptr [004AC73C], ecx
:004115EC 33C0                    xor eax, eax
:004115EE 8BE5                    mov esp, ebp
:004115F0 5D                      pop ebp
:004115F1 C3                      ret



* Referenced by a CALL at Addresses:
|:00409F47   , :0040A44A   
|
:004115F2 55                      push ebp
:004115F3 8BEC                    mov ebp, esp
:004115F5 51                      push ecx
:004115F6 C745FCD8174B00          mov [ebp-04], 004B17D8

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004115FD 6A02                    push 00000002
:004115FF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411602 E8290D0000              call 00412330
:00411607 8A4508                  mov al, byte ptr [ebp+08]
:0041160A 50                      push eax
:0041160B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041160E E83D0D0000              call 00412350
:00411613 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00411616 51                      push ecx
:00411617 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041161A E8F10C0000              call 00412310
:0041161F 8B153CC74A00            mov edx, dword ptr [004AC73C]
:00411625 83CA02                  or edx, 00000002
:00411628 89153CC74A00            mov dword ptr [004AC73C], edx
:0041162E 33C0                    xor eax, eax
:00411630 8BE5                    mov esp, ebp
:00411632 5D                      pop ebp
:00411633 C3                      ret



* Referenced by a CALL at Address:
|:0040A3F2   
|
:00411634 55                      push ebp
:00411635 8BEC                    mov ebp, esp
:00411637 51                      push ecx
:00411638 C745FCD8174B00          mov [ebp-04], 004B17D8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041163F 6A03                    push 00000003
:00411641 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411644 E8E70C0000              call 00412330
:00411649 68FF000000              push 000000FF
:0041164E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411651 E8FA0C0000              call 00412350
:00411656 8A450C                  mov al, byte ptr [ebp+0C]
:00411659 50                      push eax
:0041165A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041165D E8AE0C0000              call 00412310
:00411662 8B0D3CC74A00            mov ecx, dword ptr [004AC73C]
:00411668 83C902                  or ecx, 00000002
:0041166B 890D3CC74A00            mov dword ptr [004AC73C], ecx
:00411671 33C0                    xor eax, eax
:00411673 8BE5                    mov esp, ebp
:00411675 5D                      pop ebp
:00411676 C3                      ret



* Referenced by a CALL at Addresses:
|:00409F5B   , :0040A45E   
|
:00411677 55                      push ebp
:00411678 8BEC                    mov ebp, esp
:0041167A 51                      push ecx
:0041167B C745FCD8174B00          mov [ebp-04], 004B17D8
:00411682 6A00                    push 00000000
:00411684 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411687 E8A40C0000              call 00412330
:0041168C 68FF000000              push 000000FF
:00411691 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411694 E8B70C0000              call 00412350
:00411699 8A450C                  mov al, byte ptr [ebp+0C]
:0041169C 50                      push eax
:0041169D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004116A0 E86B0C0000              call 00412310
:004116A5 8B0D3CC74A00            mov ecx, dword ptr [004AC73C]
:004116AB 83C902                  or ecx, 00000002
:004116AE 890D3CC74A00            mov dword ptr [004AC73C], ecx
:004116B4 33C0                    xor eax, eax
:004116B6 8BE5                    mov esp, ebp
:004116B8 5D                      pop ebp
:004116B9 C3                      ret



* Referenced by a CALL at Address:
|:0040A5AB   
|
:004116BA 55                      push ebp
:004116BB 8BEC                    mov ebp, esp
:004116BD 51                      push ecx
:004116BE C745FCE2174B00          mov [ebp-04], 004B17E2
:004116C5 8A4508                  mov al, byte ptr [ebp+08]
:004116C8 50                      push eax
:004116C9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004116CC E85F0C0000              call 00412330
:004116D1 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004116D4 51                      push ecx
:004116D5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004116D8 E8730C0000              call 00412350
:004116DD 8A5514                  mov dl, byte ptr [ebp+14]
:004116E0 52                      push edx
:004116E1 8A4510                  mov al, byte ptr [ebp+10]
:004116E4 50                      push eax
:004116E5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004116E8 E8830C0000              call 00412370
:004116ED 33C0                    xor eax, eax
:004116EF 8BE5                    mov esp, ebp
:004116F1 5D                      pop ebp
:004116F2 C3                      ret



* Referenced by a CALL at Addresses:
|:004117A7   , :00411AB6   , :00411D86   , :00411E63   
|
:004116F3 55                      push ebp
:004116F4 8BEC                    mov ebp, esp
:004116F6 83EC10                  sub esp, 00000010
:004116F9 8B4508                  mov eax, dword ptr [ebp+08]
:004116FC C1E803                  shr eax, 03
:004116FF 8945F8                  mov dword ptr [ebp-08], eax
:00411702 8B4508                  mov eax, dword ptr [ebp+08]
:00411705 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00411707 B908000000              mov ecx, 00000008
:0041170C F7F1                    div ecx
:0041170E 8955FC                  mov dword ptr [ebp-04], edx
:00411711 C745F480000000          mov [ebp-0C], 00000080
:00411718 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041171B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041171E D3EA                    shr edx, cl
:00411720 8955F4                  mov dword ptr [ebp-0C], edx
:00411723 8B45F8                  mov eax, dword ptr [ebp-08]
:00411726 50                      push eax
:00411727 B978294B00              mov ecx, 004B2978
:0041172C E87F0C0000              call 004123B0
:00411731 25FF000000              and eax, 000000FF
:00411736 8945F0                  mov dword ptr [ebp-10], eax
:00411739 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0041173D 741B                    je 0041175A
:0041173F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00411742 F7D1                    not ecx
:00411744 8B55F0                  mov edx, dword ptr [ebp-10]
:00411747 23D1                    and edx, ecx
:00411749 52                      push edx
:0041174A 8B45F8                  mov eax, dword ptr [ebp-08]
:0041174D 50                      push eax
:0041174E B978294B00              mov ecx, 004B2978
:00411753 E8380C0000              call 00412390
:00411758 EB08                    jmp 00411762

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041173D(C)
|
:0041175A 8B45F0                  mov eax, dword ptr [ebp-10]
:0041175D 2345F4                  and eax, dword ptr [ebp-0C]
:00411760 EB02                    jmp 00411764

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411758(U)
|
:00411762 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411760(U)
|
:00411764 8BE5                    mov esp, ebp
:00411766 5D                      pop ebp
:00411767 C3                      ret



* Referenced by a CALL at Addresses:
|:0040A864   , :0040A8A6   
|
:00411768 55                      push ebp
:00411769 8BEC                    mov ebp, esp
:0041176B 51                      push ecx
:0041176C 837D08FF                cmp dword ptr [ebp+08], FFFFFFFF
:00411770 752F                    jne 004117A1
:00411772 C745FC00000000          mov [ebp-04], 00000000
:00411779 EB09                    jmp 00411784

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041179D(U)
|
:0041177B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041177E 83C001                  add eax, 00000001
:00411781 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411779(U)
|
:00411784 837DFC08                cmp dword ptr [ebp-04], 00000008
:00411788 7315                    jnb 0041179F
:0041178A 68FF000000              push 000000FF
:0041178F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411792 51                      push ecx
:00411793 B978294B00              mov ecx, 004B2978
:00411798 E8F30B0000              call 00412390
:0041179D EBDC                    jmp 0041177B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411788(C)
|
:0041179F EB0E                    jmp 004117AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411770(C)
|
:004117A1 6A01                    push 00000001
:004117A3 8B5508                  mov edx, dword ptr [ebp+08]
:004117A6 52                      push edx
:004117A7 E847FFFFFF              call 004116F3
:004117AC 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041179F(U)
|
:004117AF 33C0                    xor eax, eax
:004117B1 8BE5                    mov esp, ebp
:004117B3 5D                      pop ebp
:004117B4 C3                      ret



* Referenced by a CALL at Addresses:
|:00409F8C   , :0040A490   
|
:004117B5 55                      push ebp
:004117B6 8BEC                    mov ebp, esp
:004117B8 8A4508                  mov al, byte ptr [ebp+08]
:004117BB 50                      push eax
:004117BC B978294B00              mov ecx, 004B2978
:004117C1 E88AB1FFFF              call 0040C950
:004117C6 8A4D08                  mov cl, byte ptr [ebp+08]
:004117C9 51                      push ecx
:004117CA B9D8174B00              mov ecx, 004B17D8
:004117CF E83C0B0000              call 00412310
:004117D4 33C0                    xor eax, eax
:004117D6 5D                      pop ebp
:004117D7 C3                      ret



* Referenced by a CALL at Addresses:
|:0040A23F   , :0040A2AB   
|
:004117D8 55                      push ebp
:004117D9 8BEC                    mov ebp, esp
:004117DB 8B4508                  mov eax, dword ptr [ebp+08]
:004117DE 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004117DF 6A03                    push 00000003
:004117E1 E84DFC0100              call 00431433
:004117E6 83C408                  add esp, 00000008
:004117E9 33C0                    xor eax, eax
:004117EB 5D                      pop ebp
:004117EC C3                      ret



* Referenced by a CALL at Addresses:
|:0040B83E   , :0040B84A   
|
:004117ED 55                      push ebp
:004117EE 8BEC                    mov ebp, esp

* Possible StringData Ref from Data Obj ->"xsbo̶ܡH"
                                  |
:004117F0 686CC64700              push 0047C66C

* Possible Reference to String Resource ID=00006: ""
                                  |
:004117F5 6A06                    push 00000006
:004117F7 E837FC0100              call 00431433
:004117FC 83C408                  add esp, 00000008
:004117FF 85C0                    test eax, eax
:00411801 7421                    je 00411824

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411822(U)
|
:00411803 E88ED3FFFF              call 0040EB96
:00411808 83F801                  cmp eax, 00000001
:0041180B 7413                    je 00411820

* Possible StringData Ref from Data Obj ->"xsiHܡH"
                                  |
:0041180D 687CC64700              push 0047C67C

* Possible Reference to String Resource ID=00006: ""
                                  |
:00411812 6A06                    push 00000006
:00411814 E81AFC0100              call 00431433
:00411819 83C408                  add esp, 00000008
:0041181C 85C0                    test eax, eax
:0041181E 7402                    je 00411822

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041180B(C)
|
:00411820 EB02                    jmp 00411824

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041181E(C)
|
:00411822 EBDF                    jmp 00411803

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411801(C), :00411820(U)
|
:00411824 33C0                    xor eax, eax
:00411826 5D                      pop ebp
:00411827 C3                      ret



* Referenced by a CALL at Addresses:
|:00412202   , :004122E8   , :0042F131   
|
:00411828 55                      push ebp
:00411829 8BEC                    mov ebp, esp
:0041182B 83EC08                  sub esp, 00000008
:0041182E C745FCFFFF0000          mov [ebp-04], 0000FFFF
:00411835 833D3CC74A0002          cmp dword ptr [004AC73C], 00000002
:0041183C 745D                    je 0041189B
:0041183E 8B4508                  mov eax, dword ptr [ebp+08]
:00411841 8945F8                  mov dword ptr [ebp-08], eax
:00411844 837DF800                cmp dword ptr [ebp-08], 00000000
:00411848 740E                    je 00411858
:0041184A 837DF801                cmp dword ptr [ebp-08], 00000001
:0041184E 7419                    je 00411869
:00411850 837DF802                cmp dword ptr [ebp-08], 00000002
:00411854 7426                    je 0041187C
:00411856 EB43                    jmp 0041189B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411848(C)
|
:00411858 6A00                    push 00000000
:0041185A B9806D4800              mov ecx, 00486D80
:0041185F E8F3A8FFFF              call 0040C157
:00411864 8945FC                  mov dword ptr [ebp-04], eax
:00411867 EB32                    jmp 0041189B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041184E(C)
|
:00411869 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041186C 51                      push ecx
:0041186D B9806D4800              mov ecx, 00486D80
:00411872 E8FCA9FFFF              call 0040C273
:00411877 8945FC                  mov dword ptr [ebp-04], eax
:0041187A EB1F                    jmp 0041189B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411854(C)
|
:0041187C 6A40                    push 00000040
:0041187E B9D8174B00              mov ecx, 004B17D8
:00411883 E858070300              call 00441FE0
:00411888 25FF000000              and eax, 000000FF
:0041188D 50                      push eax
:0041188E B9806D4800              mov ecx, 00486D80
:00411893 E836AAFFFF              call 0040C2CE
:00411898 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041183C(C), :00411856(U), :00411867(U), :0041187A(U)
|
:0041189B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041189E 8BE5                    mov esp, ebp
:004118A0 5D                      pop ebp
:004118A1 C3                      ret



* Referenced by a CALL at Addresses:
|:00411914   , :0041194F   , :00411988   
|
:004118A2 55                      push ebp
:004118A3 8BEC                    mov ebp, esp
:004118A5 6A19                    push 00000019
:004118A7 E8DED60100              call 0042EF8A
:004118AC 83C404                  add esp, 00000004
:004118AF 8B450C                  mov eax, dword ptr [ebp+0C]
:004118B2 50                      push eax
:004118B3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004118B6 51                      push ecx
:004118B7 B948D14A00              mov ecx, 004AD148
:004118BC E868FAFFFF              call 00411329
:004118C1 5D                      pop ebp
:004118C2 C3                      ret



* Referenced by a CALL at Addresses:
|:00411BC8   , :00411BD9   , :00411BF3   , :0041D228   
|
:004118C3 55                      push ebp
:004118C4 8BEC                    mov ebp, esp
:004118C6 83EC08                  sub esp, 00000008
:004118C9 8B4508                  mov eax, dword ptr [ebp+08]
:004118CC 8945F8                  mov dword ptr [ebp-08], eax
:004118CF 837DF816                cmp dword ptr [ebp-08], 00000016
:004118D3 0F8789000000            ja 00411962
:004118D9 8B55F8                  mov edx, dword ptr [ebp-08]
:004118DC 33C9                    xor ecx, ecx
:004118DE 8A8A221A4100            mov cl, byte ptr [edx+00411A22]
:004118E4 FF248D161A4100          jmp dword ptr [4*ecx+00411A16]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004118EB 6A04                    push 00000004
:004118ED 6A00                    push 00000000
:004118EF 6800D00700              push 0007D000
:004118F4 B9187D4A00              mov ecx, 004A7D18
:004118F9 E892760600              call 00478F90
:004118FE 8945FC                  mov dword ptr [ebp-04], eax
:00411901 8B4508                  mov eax, dword ptr [ebp+08]
:00411904 3B0560D44700            cmp eax, dword ptr [0047D460]
:0041190A 7418                    je 00411924
:0041190C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041190F 51                      push ecx
:00411910 8B5508                  mov edx, dword ptr [ebp+08]
:00411913 52                      push edx
:00411914 E889FFFFFF              call 004118A2
:00411919 83C408                  add esp, 00000008
:0041191C 8B4508                  mov eax, dword ptr [ebp+08]
:0041191F A360D44700              mov dword ptr [0047D460], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041190A(C)
|
:00411924 EB7A                    jmp 004119A0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00411926 6A04                    push 00000004
:00411928 6A00                    push 00000000
:0041192A 6800E80300              push 0003E800
:0041192F B9187D4A00              mov ecx, 004A7D18
:00411934 E857760600              call 00478F90
:00411939 8945FC                  mov dword ptr [ebp-04], eax
:0041193C 8B0D5CD44700            mov ecx, dword ptr [0047D45C]
:00411942 3B4D08                  cmp ecx, dword ptr [ebp+08]
:00411945 7419                    je 00411960
:00411947 8B55FC                  mov edx, dword ptr [ebp-04]
:0041194A 52                      push edx
:0041194B 8B4508                  mov eax, dword ptr [ebp+08]
:0041194E 50                      push eax
:0041194F E84EFFFFFF              call 004118A2
:00411954 83C408                  add esp, 00000008
:00411957 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041195A 890D5CD44700            mov dword ptr [0047D45C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411945(C)
|
:00411960 EB3E                    jmp 004119A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004118D3(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00411962 6A04                    push 00000004
:00411964 6A00                    push 00000000
:00411966 6A00                    push 00000000
:00411968 B9187D4A00              mov ecx, 004A7D18
:0041196D E81E760600              call 00478F90
:00411972 8945FC                  mov dword ptr [ebp-04], eax
:00411975 8B1558D44700            mov edx, dword ptr [0047D458]
:0041197B 3B5508                  cmp edx, dword ptr [ebp+08]
:0041197E 7419                    je 00411999
:00411980 8B45FC                  mov eax, dword ptr [ebp-04]
:00411983 50                      push eax
:00411984 8B4D08                  mov ecx, dword ptr [ebp+08]
:00411987 51                      push ecx
:00411988 E815FFFFFF              call 004118A2
:0041198D 83C408                  add esp, 00000008
:00411990 8B5508                  mov edx, dword ptr [ebp+08]
:00411993 891558D44700            mov dword ptr [0047D458], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041197E(C)
|
:00411999 E849C00500              call 0046D9E7
:0041199E EB72                    jmp 00411A12

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411924(U), :00411960(U)
|
:004119A0 6A00                    push 00000000
:004119A2 E8683C0600              call 0047560F
:004119A7 83C404                  add esp, 00000004
:004119AA E828E7FFFF              call 004100D7
:004119AF E833C00500              call 0046D9E7
:004119B4 E87AE7FFFF              call 00410133
:004119B9 E829E8FFFF              call 004101E7
:004119BE 6A01                    push 00000001
:004119C0 668B4508                mov ax, word ptr [ebp+08]
:004119C4 50                      push eax
:004119C5 E896E5FFFF              call 0040FF60
:004119CA 83C408                  add esp, 00000008

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004119CD 6A07                    push 00000007
:004119CF E822430600              call 00475CF6
:004119D4 83C404                  add esp, 00000004
:004119D7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004119DA 51                      push ecx
:004119DB 6890010000              push 00000190
:004119E0 6880020000              push 00000280
:004119E5 6A28                    push 00000028
:004119E7 6A00                    push 00000000
:004119E9 E806510600              call 00476AF4
:004119EE 83C414                  add esp, 00000014
:004119F1 68B0474900              push 004947B0
:004119F6 E8F58F0500              call 0046A9F0
:004119FB 83C404                  add esp, 00000004
:004119FE E84BE7FFFF              call 0041014E
:00411A03 E81CE7FFFF              call 00410124
:00411A08 6A00                    push 00000000
:00411A0A E87BD50100              call 0042EF8A
:00411A0F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041199E(U)
|
:00411A12 8BE5                    mov esp, ebp
:00411A14 5D                      pop ebp
:00411A15 C3                      ret



:00411A16 EB184100                DWORD 004118EB
:00411A1A 26194100                DWORD 00411926
:00411A1E 62194100                DWORD 00411962


:00411A22 000000                  BYTE  3 DUP(0)


:00411A25 0101                    add dword ptr [ecx], eax
:00411A27 0101                    add dword ptr [ecx], eax
:00411A29 0101                    add dword ptr [ecx], eax
:00411A2B 0101                    add dword ptr [ecx], eax
:00411A2D 0101                    add dword ptr [ecx], eax
:00411A2F 0101                    add dword ptr [ecx], eax
:00411A31 0101                    add dword ptr [ecx], eax
:00411A33 0101                    add dword ptr [ecx], eax
:00411A35 0101                    add dword ptr [ecx], eax
:00411A37 0101                    add dword ptr [ecx], eax

* Referenced by a CALL at Address:
|:00408B25   
|
:00411A39 55                      push ebp
:00411A3A 8BEC                    mov ebp, esp
:00411A3C 5D                      pop ebp
:00411A3D C3                      ret



* Referenced by a CALL at Address:
|:00411E2D   
|
:00411A3E 55                      push ebp
:00411A3F 8BEC                    mov ebp, esp
:00411A41 83EC14                  sub esp, 00000014
:00411A44 B978294B00              mov ecx, 004B2978
:00411A49 E8B23CFFFF              call 00405700
:00411A4E 25FF000000              and eax, 000000FF
:00411A53 8945FC                  mov dword ptr [ebp-04], eax
:00411A56 6A00                    push 00000000
:00411A58 B9306D4800              mov ecx, 00486D30
:00411A5D E88E45FFFF              call 00405FF0
:00411A62 C745F850D24A00          mov [ebp-08], 004AD250
:00411A69 C745EC00000000          mov [ebp-14], 00000000
:00411A70 EB15                    jmp 00411A87

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411AAE(U), :00411AC2(U), :00411B4A(U)
|
:00411A72 8B45EC                  mov eax, dword ptr [ebp-14]
:00411A75 83C001                  add eax, 00000001
:00411A78 8945EC                  mov dword ptr [ebp-14], eax
:00411A7B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411A7E 81C1EC000000            add ecx, 000000EC
:00411A84 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411A70(U)
|
:00411A87 837DEC0C                cmp dword ptr [ebp-14], 0000000C
:00411A8B 0F83BE000000            jnb 00411B4F
:00411A91 8B55FC                  mov edx, dword ptr [ebp-04]
:00411A94 52                      push edx
:00411A95 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411A98 E833090000              call 004123D0
:00411A9D 25FF000000              and eax, 000000FF
:00411AA2 8945F4                  mov dword ptr [ebp-0C], eax
:00411AA5 817DF4FF000000          cmp dword ptr [ebp-0C], 000000FF
:00411AAC 7502                    jne 00411AB0
:00411AAE EBC2                    jmp 00411A72

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411AAC(C)
|
:00411AB0 6A00                    push 00000000
:00411AB2 8B45EC                  mov eax, dword ptr [ebp-14]
:00411AB5 50                      push eax
:00411AB6 E838FCFFFF              call 004116F3
:00411ABB 83C408                  add esp, 00000008
:00411ABE 85C0                    test eax, eax
:00411AC0 7502                    jne 00411AC4
:00411AC2 EBAE                    jmp 00411A72

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411AC0(C)
|
:00411AC4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00411AC7 C1E104                  shl ecx, 04
:00411ACA 894DF4                  mov dword ptr [ebp-0C], ecx
:00411ACD 837DF408                cmp dword ptr [ebp-0C], 00000008
:00411AD1 7307                    jnb 00411ADA

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00411AD3 C745F408000000          mov [ebp-0C], 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411AD1(C)
|
:00411ADA 8B55FC                  mov edx, dword ptr [ebp-04]
:00411ADD 52                      push edx
:00411ADE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411AE1 E80A090000              call 004123F0
:00411AE6 25FF000000              and eax, 000000FF
:00411AEB C1E004                  shl eax, 04
:00411AEE 83C028                  add eax, 00000028
:00411AF1 8945F0                  mov dword ptr [ebp-10], eax
:00411AF4 B978294B00              mov ecx, 004B2978
:00411AF9 E8423CFFFF              call 00405740
:00411AFE 25FF000000              and eax, 000000FF
:00411B03 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00411B06 2BC8                    sub ecx, eax
:00411B08 F7D9                    neg ecx
:00411B0A 1BC9                    sbb ecx, ecx
:00411B0C 83E104                  and ecx, 00000004
:00411B0F 83C10C                  add ecx, 0000000C
:00411B12 51                      push ecx
:00411B13 B9306D4800              mov ecx, 00486D30
:00411B18 E89B44FFFF              call 00405FB8
:00411B1D 8B55F0                  mov edx, dword ptr [ebp-10]
:00411B20 83EA20                  sub edx, 00000020
:00411B23 52                      push edx
:00411B24 8B45F4                  mov eax, dword ptr [ebp-0C]
:00411B27 83E808                  sub eax, 00000008
:00411B2A C1E803                  shr eax, 03
:00411B2D 50                      push eax
:00411B2E B9306D4800              mov ecx, 00486D30
:00411B33 E8D343FFFF              call 00405F0B

* Possible StringData Ref from Data Obj ->""
                                  |
:00411B38 688CC64700              push 0047C68C
:00411B3D 68306D4800              push 00486D30
:00411B42 E80B50FFFF              call 00406B52
:00411B47 83C408                  add esp, 00000008
:00411B4A E923FFFFFF              jmp 00411A72

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411A8B(C)
|
:00411B4F 8BE5                    mov esp, ebp
:00411B51 5D                      pop ebp
:00411B52 C3                      ret



* Referenced by a CALL at Address:
|:0042F30A   
|
:00411B53 55                      push ebp
:00411B54 8BEC                    mov ebp, esp
:00411B56 6A01                    push 00000001
:00411B58 E82C000000              call 00411B89
:00411B5D 83C404                  add esp, 00000004
:00411B60 A13CC74A00              mov eax, dword ptr [004AC73C]
:00411B65 83E06E                  and eax, 0000006E
:00411B68 85C0                    test eax, eax
:00411B6A 7407                    je 00411B73
:00411B6C A13CC74A00              mov eax, dword ptr [004AC73C]
:00411B71 EB14                    jmp 00411B87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411B6A(C)
|
:00411B73 E889020000              call 00411E01
:00411B78 6A00                    push 00000000
:00411B7A E8BC8A0500              call 0046A63B
:00411B7F 83C404                  add esp, 00000004
:00411B82 A13CC74A00              mov eax, dword ptr [004AC73C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411B71(U)
|
:00411B87 5D                      pop ebp
:00411B88 C3                      ret



* Referenced by a CALL at Addresses:
|:00411B58   , :00412220   
|
:00411B89 55                      push ebp
:00411B8A 8BEC                    mov ebp, esp
:00411B8C 83EC08                  sub esp, 00000008
:00411B8F 837D0800                cmp dword ptr [ebp+08], 00000000
:00411B93 754E                    jne 00411BE3
:00411B95 B9D8174B00              mov ecx, 004B17D8
:00411B9A E841040300              call 00441FE0
:00411B9F 25FF000000              and eax, 000000FF
:00411BA4 8945FC                  mov dword ptr [ebp-04], eax
:00411BA7 8B45FC                  mov eax, dword ptr [ebp-04]
:00411BAA 8945F8                  mov dword ptr [ebp-08], eax
:00411BAD 837DF800                cmp dword ptr [ebp-08], 00000000
:00411BB1 7402                    je 00411BB5
:00411BB3 EB1D                    jmp 00411BD2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411BB1(C)
|
:00411BB5 B978294B00              mov ecx, 004B2978
:00411BBA E8413BFFFF              call 00405700
:00411BBF 25FF000000              and eax, 000000FF
:00411BC4 83C003                  add eax, 00000003
:00411BC7 50                      push eax
:00411BC8 E8F6FCFFFF              call 004118C3
:00411BCD 83C404                  add esp, 00000004
:00411BD0 EB0F                    jmp 00411BE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411BB3(U)
|
:00411BD2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411BD5 83C105                  add ecx, 00000005
:00411BD8 51                      push ecx
:00411BD9 E8E5FCFFFF              call 004118C3
:00411BDE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411BD0(U)
|
:00411BE1 EB18                    jmp 00411BFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411B93(C)
|
:00411BE3 B978294B00              mov ecx, 004B2978
:00411BE8 E8133BFFFF              call 00405700
:00411BED 25FF000000              and eax, 000000FF
:00411BF2 50                      push eax
:00411BF3 E8CBFCFFFF              call 004118C3
:00411BF8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411BE1(U)
|
:00411BFB C70538C74A0000000000    mov dword ptr [004AC738], 00000000
:00411C05 C705FC1C4B0000000000    mov dword ptr [004B1CFC], 00000000
:00411C0F C60530964A0000          mov byte ptr [004A9630], 00
:00411C16 C7053CC74A0000000000    mov dword ptr [004AC73C], 00000000
:00411C20 C605F87C4A00FF          mov byte ptr [004A7CF8], FF
:00411C27 E83C8E0500              call 0046AA68
:00411C2C 8B5508                  mov edx, dword ptr [ebp+08]
:00411C2F 52                      push edx
:00411C30 E807000000              call 00411C3C
:00411C35 83C404                  add esp, 00000004
:00411C38 8BE5                    mov esp, ebp
:00411C3A 5D                      pop ebp
:00411C3B C3                      ret



* Referenced by a CALL at Address:
|:00411C30   
|
:00411C3C 55                      push ebp
:00411C3D 8BEC                    mov ebp, esp
:00411C3F 83EC20                  sub esp, 00000020

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00411C42 6A04                    push 00000004
:00411C44 B9306D4800              mov ecx, 00486D30
:00411C49 E80644FFFF              call 00406054
:00411C4E 68FF000000              push 000000FF
:00411C53 B928B44800              mov ecx, 0048B428
:00411C58 E83A870000              call 0041A397
:00411C5D 837D0800                cmp dword ptr [ebp+08], 00000000
:00411C61 0F85B0000000            jne 00411D17
:00411C67 B9D8174B00              mov ecx, 004B17D8
:00411C6C E86F030300              call 00441FE0
:00411C71 25FF000000              and eax, 000000FF
:00411C76 8945EC                  mov dword ptr [ebp-14], eax
:00411C79 837DEC0C                cmp dword ptr [ebp-14], 0000000C
:00411C7D 0F838F000000            jnb 00411D12
:00411C83 C745F800000000          mov [ebp-08], 00000000
:00411C8A EB09                    jmp 00411C95

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411CC4(U), :00411D0D(U)
|
:00411C8C 8B45F8                  mov eax, dword ptr [ebp-08]
:00411C8F 83C001                  add eax, 00000001
:00411C92 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411C8A(U)
|
:00411C95 837DF80C                cmp dword ptr [ebp-08], 0000000C
:00411C99 7377                    jnb 00411D12
:00411C9B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00411C9E 51                      push ecx
:00411C9F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00411CA2 69C9EC000000            imul ecx, 000000EC
:00411CA8 81C150D24A00            add ecx, 004AD250
:00411CAE E85D070000              call 00412410
:00411CB3 25FF000000              and eax, 000000FF
:00411CB8 8945FC                  mov dword ptr [ebp-04], eax
:00411CBB 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00411CC2 7502                    jne 00411CC6
:00411CC4 EBC6                    jmp 00411C8C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411CC2(C)
|
:00411CC6 8B45FC                  mov eax, dword ptr [ebp-04]
:00411CC9 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00411CCB B914000000              mov ecx, 00000014
:00411CD0 F7F1                    div ecx
:00411CD2 C1E205                  shl edx, 05
:00411CD5 8955F4                  mov dword ptr [ebp-0C], edx
:00411CD8 8B45FC                  mov eax, dword ptr [ebp-04]
:00411CDB 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00411CDD B914000000              mov ecx, 00000014
:00411CE2 F7F1                    div ecx
:00411CE4 6BC028                  imul eax, 00000028
:00411CE7 83C028                  add eax, 00000028
:00411CEA 8945F0                  mov dword ptr [ebp-10], eax
:00411CED 8A55F8                  mov dl, byte ptr [ebp-08]
:00411CF0 52                      push edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00411CF1 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00411CF3 6A08                    push 00000008
:00411CF5 8B45F0                  mov eax, dword ptr [ebp-10]
:00411CF8 C1E804                  shr eax, 04
:00411CFB 50                      push eax
:00411CFC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00411CFF C1E903                  shr ecx, 03
:00411D02 51                      push ecx
:00411D03 B928B44800              mov ecx, 0048B428
:00411D08 E8BC860000              call 0041A3C9
:00411D0D E97AFFFFFF              jmp 00411C8C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411C7D(C), :00411C99(C)
|
:00411D12 E9E6000000              jmp 00411DFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411C61(C)
|
:00411D17 837D0801                cmp dword ptr [ebp+08], 00000001
:00411D1B 0F85DC000000            jne 00411DFD
:00411D21 B978294B00              mov ecx, 004B2978
:00411D26 E8D539FFFF              call 00405700
:00411D2B 25FF000000              and eax, 000000FF
:00411D30 8945E8                  mov dword ptr [ebp-18], eax
:00411D33 C745E450D24A00          mov [ebp-1C], 004AD250
:00411D3A C745F800000000          mov [ebp-08], 00000000
:00411D41 EB14                    jmp 00411D57

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411D7E(U), :00411D92(U), :00411DF8(U)
|
:00411D43 8B55F8                  mov edx, dword ptr [ebp-08]
:00411D46 83C201                  add edx, 00000001
:00411D49 8955F8                  mov dword ptr [ebp-08], edx
:00411D4C 8B45E4                  mov eax, dword ptr [ebp-1C]
:00411D4F 05EC000000              add eax, 000000EC
:00411D54 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411D41(U)
|
:00411D57 837DF80C                cmp dword ptr [ebp-08], 0000000C
:00411D5B 0F839C000000            jnb 00411DFD
:00411D61 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00411D64 51                      push ecx
:00411D65 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00411D68 E863060000              call 004123D0
:00411D6D 25FF000000              and eax, 000000FF
:00411D72 8945E0                  mov dword ptr [ebp-20], eax
:00411D75 817DE0FF000000          cmp dword ptr [ebp-20], 000000FF
:00411D7C 7502                    jne 00411D80
:00411D7E EBC3                    jmp 00411D43

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411D7C(C)
|
:00411D80 6A00                    push 00000000
:00411D82 8B55F8                  mov edx, dword ptr [ebp-08]
:00411D85 52                      push edx
:00411D86 E868F9FFFF              call 004116F3
:00411D8B 83C408                  add esp, 00000008
:00411D8E 85C0                    test eax, eax
:00411D90 7502                    jne 00411D94
:00411D92 EBAF                    jmp 00411D43

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411D90(C)
|
:00411D94 8B45E8                  mov eax, dword ptr [ebp-18]
:00411D97 50                      push eax
:00411D98 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00411D9B E830060000              call 004123D0
:00411DA0 25FF000000              and eax, 000000FF
:00411DA5 C1E004                  shl eax, 04
:00411DA8 8945F4                  mov dword ptr [ebp-0C], eax
:00411DAB 837DF420                cmp dword ptr [ebp-0C], 00000020
:00411DAF 7307                    jnb 00411DB8
:00411DB1 C745F420000000          mov [ebp-0C], 00000020

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411DAF(C)
|
:00411DB8 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00411DBB 51                      push ecx
:00411DBC 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00411DBF E82C060000              call 004123F0
:00411DC4 25FF000000              and eax, 000000FF
:00411DC9 C1E004                  shl eax, 04
:00411DCC 83C028                  add eax, 00000028
:00411DCF 8945F0                  mov dword ptr [ebp-10], eax
:00411DD2 8A55F8                  mov dl, byte ptr [ebp-08]
:00411DD5 52                      push edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00411DD6 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00411DD8 6A04                    push 00000004
:00411DDA 8B45F0                  mov eax, dword ptr [ebp-10]
:00411DDD 83E810                  sub eax, 00000010
:00411DE0 C1E804                  shr eax, 04
:00411DE3 50                      push eax
:00411DE4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00411DE7 83E918                  sub ecx, 00000018
:00411DEA C1E903                  shr ecx, 03
:00411DED 51                      push ecx
:00411DEE B928B44800              mov ecx, 0048B428
:00411DF3 E8D1850000              call 0041A3C9
:00411DF8 E946FFFFFF              jmp 00411D43

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411D12(U), :00411D1B(C), :00411D5B(C)
|
:00411DFD 8BE5                    mov esp, ebp
:00411DFF 5D                      pop ebp
:00411E00 C3                      ret



* Referenced by a CALL at Address:
|:00411B73   
|
:00411E01 55                      push ebp
:00411E02 8BEC                    mov ebp, esp
:00411E04 51                      push ecx
:00411E05 C745FC01000000          mov [ebp-04], 00000001
:00411E0C C60528AE4800FF          mov byte ptr [0048AE28], FF
:00411E13 C7052CAE480000000000    mov dword ptr [0048AE2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411EB3(U)
|
:00411E1D E83BDB0100              call 0042F95D
:00411E22 83F801                  cmp eax, 00000001
:00411E25 7559                    jne 00411E80
:00411E27 837DFC00                cmp dword ptr [ebp-04], 00000000
:00411E2B 7416                    je 00411E43
:00411E2D E80CFCFFFF              call 00411A3E
:00411E32 6A01                    push 00000001
:00411E34 E802880500              call 0046A63B
:00411E39 83C404                  add esp, 00000004
:00411E3C C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411E2B(C)
|
:00411E43 E823010000              call 00411F6B
:00411E48 85C0                    test eax, eax
:00411E4A 7434                    je 00411E80
:00411E4C 33C0                    xor eax, eax
:00411E4E A0F87C4A00              mov al, byte ptr [004A7CF8]
:00411E53 83F80C                  cmp eax, 0000000C
:00411E56 7D28                    jge 00411E80
:00411E58 6A00                    push 00000000
:00411E5A 33C9                    xor ecx, ecx
:00411E5C 8A0DF87C4A00            mov cl, byte ptr [004A7CF8]
:00411E62 51                      push ecx
:00411E63 E88BF8FFFF              call 004116F3
:00411E68 83C408                  add esp, 00000008
:00411E6B 85C0                    test eax, eax
:00411E6D 7411                    je 00411E80
:00411E6F 33D2                    xor edx, edx
:00411E71 8A15F87C4A00            mov dl, byte ptr [004A7CF8]
:00411E77 52                      push edx
:00411E78 E83F000000              call 00411EBC
:00411E7D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411E25(C), :00411E4A(C), :00411E56(C), :00411E6D(C)
|
:00411E80 A13CC74A00              mov eax, dword ptr [004AC73C]
:00411E85 83E06E                  and eax, 0000006E
:00411E88 85C0                    test eax, eax
:00411E8A 7407                    je 00411E93
:00411E8C A13CC74A00              mov eax, dword ptr [004AC73C]
:00411E91 EB25                    jmp 00411EB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411E8A(C)
|
:00411E93 6A00                    push 00000000
:00411E95 B9806D4800              mov ecx, 00486D80
:00411E9A E8B8A2FFFF              call 0040C157
:00411E9F 8B0D3CC74A00            mov ecx, dword ptr [004AC73C]
:00411EA5 83E16E                  and ecx, 0000006E
:00411EA8 85C9                    test ecx, ecx
:00411EAA 7407                    je 00411EB3
:00411EAC A13CC74A00              mov eax, dword ptr [004AC73C]
:00411EB1 EB05                    jmp 00411EB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411EAA(C)
|
:00411EB3 E965FFFFFF              jmp 00411E1D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411E91(U), :00411EB1(U)
|
:00411EB8 8BE5                    mov esp, ebp
:00411EBA 5D                      pop ebp
:00411EBB C3                      ret



* Referenced by a CALL at Address:
|:00411E78   
|
:00411EBC 55                      push ebp
:00411EBD 8BEC                    mov ebp, esp
:00411EBF 51                      push ecx
:00411EC0 6A00                    push 00000000
:00411EC2 E8C3D00100              call 0042EF8A
:00411EC7 83C404                  add esp, 00000004
:00411ECA C745FCD8174B00          mov [ebp-04], 004B17D8
:00411ED1 A13CC74A00              mov eax, dword ptr [004AC73C]
:00411ED6 83E06E                  and eax, 0000006E
:00411ED9 85C0                    test eax, eax
:00411EDB 7405                    je 00411EE2
:00411EDD E985000000              jmp 00411F67

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411EDB(C)
|
:00411EE2 E876DA0100              call 0042F95D
:00411EE7 85C0                    test eax, eax
:00411EE9 747C                    je 00411F67
:00411EEB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00411EEE 51                      push ecx
:00411EEF E83F2BFFFF              call 00404A33
:00411EF4 83C404                  add esp, 00000004
:00411EF7 50                      push eax

* Possible StringData Ref from Data Obj ->"iJ%sܡH"
                                  |
:00411EF8 6890C64700              push 0047C690

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00411EFD 6A02                    push 00000002
:00411EFF E82FF50100              call 00431433
:00411F04 83C40C                  add esp, 0000000C
:00411F07 85C0                    test eax, eax
:00411F09 745C                    je 00411F67
:00411F0B 6A00                    push 00000000
:00411F0D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411F10 E81B040000              call 00412330
:00411F15 6A01                    push 00000001
:00411F17 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411F1A E801500200              call 00436F20
:00411F1F 8A5508                  mov dl, byte ptr [ebp+08]
:00411F22 52                      push edx
:00411F23 B978294B00              mov ecx, 004B2978
:00411F28 E823AAFFFF              call 0040C950
:00411F2D 8A4508                  mov al, byte ptr [ebp+08]
:00411F30 50                      push eax
:00411F31 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00411F34 E8D7030000              call 00412310
:00411F39 8B0D3CC74A00            mov ecx, dword ptr [004AC73C]
:00411F3F 83C902                  or ecx, 00000002
:00411F42 890D3CC74A00            mov dword ptr [004AC73C], ecx
:00411F48 6880000000              push 00000080
:00411F4D B9D8174B00              mov ecx, 004B17D8
:00411F52 E889000300              call 00441FE0
:00411F57 25FF000000              and eax, 000000FF
:00411F5C 50                      push eax
:00411F5D B9806D4800              mov ecx, 00486D80
:00411F62 E867A3FFFF              call 0040C2CE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00411EDD(U), :00411EE9(C), :00411F09(C)
|
:00411F67 8BE5                    mov esp, ebp
:00411F69 5D                      pop ebp
:00411F6A C3                      ret



* Referenced by a CALL at Addresses:
|:00411E43   , :00412286   
|
:00411F6B 55                      push ebp
:00411F6C 8BEC                    mov ebp, esp
:00411F6E 83EC68                  sub esp, 00000068
:00411F71 B928B44800              mov ecx, 0048B428
:00411F76 E887780000              call 00419802
:00411F7B B928B44800              mov ecx, 0048B428
:00411F80 E8CE840000              call 0041A453
:00411F85 A2F87C4A00              mov byte ptr [004A7CF8], al
:00411F8A 33C0                    xor eax, eax
:00411F8C A0F87C4A00              mov al, byte ptr [004A7CF8]
:00411F91 33C9                    xor ecx, ecx
:00411F93 8A0D28AE4800            mov cl, byte ptr [0048AE28]
:00411F99 3BC1                    cmp eax, ecx
:00411F9B 7435                    je 00411FD2
:00411F9D 33D2                    xor edx, edx
:00411F9F 8A15F87C4A00            mov dl, byte ptr [004A7CF8]
:00411FA5 33C0                    xor eax, eax
:00411FA7 81FAFF000000            cmp edx, 000000FF
:00411FAD 0F95C0                  setne al
:00411FB0 A32CAE4800              mov dword ptr [0048AE2C], eax
:00411FB5 33C9                    xor ecx, ecx
:00411FB7 8A0DF87C4A00            mov cl, byte ptr [004A7CF8]
:00411FBD 51                      push ecx
:00411FBE E8EF000000              call 004120B2
:00411FC3 83C404                  add esp, 00000004
:00411FC6 8A15F87C4A00            mov dl, byte ptr [004A7CF8]
:00411FCC 881528AE4800            mov byte ptr [0048AE28], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411F9B(C)
|
:00411FD2 33C0                    xor eax, eax
:00411FD4 A0F87C4A00              mov al, byte ptr [004A7CF8]
:00411FD9 3DFF000000              cmp eax, 000000FF
:00411FDE 750A                    jne 00411FEA
:00411FE0 C7052CAE480000000000    mov dword ptr [0048AE2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00411FDE(C)
|
:00411FEA 33C9                    xor ecx, ecx
:00411FEC 833D2CAE480000          cmp dword ptr [0048AE2C], 00000000
:00411FF3 0F95C1                  setne cl
:00411FF6 51                      push ecx
:00411FF7 E88ECF0100              call 0042EF8A
:00411FFC 83C404                  add esp, 00000004
:00411FFF B928B44800              mov ecx, 0048B428
:00412004 E844780000              call 0041984D
:00412009 A3FC1C4B00              mov dword ptr [004B1CFC], eax
:0041200E 8B15FC1C4B00            mov edx, dword ptr [004B1CFC]
:00412014 3B1538C74A00            cmp edx, dword ptr [004AC738]
:0041201A 0F848C000000            je 004120AC
:00412020 A1FC1C4B00              mov eax, dword ptr [004B1CFC]
:00412025 A338C74A00              mov dword ptr [004AC738], eax
:0041202A 833DFC1C4B0002          cmp dword ptr [004B1CFC], 00000002
:00412031 7559                    jne 0041208C
:00412033 33C9                    xor ecx, ecx
:00412035 8A0DF87C4A00            mov cl, byte ptr [004A7CF8]
:0041203B 81F9FF000000            cmp ecx, 000000FF
:00412041 7449                    je 0041208C
:00412043 E81BF5FFFF              call 00411563
:00412048 25FF000000              and eax, 000000FF
:0041204D 83F801                  cmp eax, 00000001
:00412050 7517                    jne 00412069
:00412052 33D2                    xor edx, edx
:00412054 8A15F87C4A00            mov dl, byte ptr [004A7CF8]
:0041205A 52                      push edx
:0041205B 8D4598                  lea eax, dword ptr [ebp-68]
:0041205E 50                      push eax
:0041205F E8CB15FFFF              call 0040362F
:00412064 83C408                  add esp, 00000008
:00412067 EB15                    jmp 0041207E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412050(C)
|
:00412069 33C9                    xor ecx, ecx
:0041206B 8A0DF87C4A00            mov cl, byte ptr [004A7CF8]
:00412071 51                      push ecx
:00412072 8D5598                  lea edx, dword ptr [ebp-68]
:00412075 52                      push edx
:00412076 E8D615FFFF              call 00403651
:0041207B 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412067(U)
|
:0041207E 8D4598                  lea eax, dword ptr [ebp-68]
:00412081 50                      push eax
:00412082 6A00                    push 00000000
:00412084 E8AAF30100              call 00431433
:00412089 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412031(C), :00412041(C)
|
:0041208C 833DFC1C4B0001          cmp dword ptr [004B1CFC], 00000001
:00412093 7517                    jne 004120AC
:00412095 33C9                    xor ecx, ecx
:00412097 8A0DF87C4A00            mov cl, byte ptr [004A7CF8]
:0041209D 81F9FF000000            cmp ecx, 000000FF
:004120A3 7407                    je 004120AC
:004120A5 B801000000              mov eax, 00000001
:004120AA EB02                    jmp 004120AE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041201A(C), :00412093(C), :004120A3(C)
|
:004120AC 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004120AA(U)
|
:004120AE 8BE5                    mov esp, ebp
:004120B0 5D                      pop ebp
:004120B1 C3                      ret



* Referenced by a CALL at Address:
|:00411FBE   
|
:004120B2 55                      push ebp
:004120B3 8BEC                    mov ebp, esp
:004120B5 83EC0C                  sub esp, 0000000C
:004120B8 6A10                    push 00000010
:004120BA B9306D4800              mov ecx, 00486D30
:004120BF E8F43EFFFF              call 00405FB8
:004120C4 C745FC30AE4800          mov [ebp-04], 0048AE30
:004120CB E893F4FFFF              call 00411563
:004120D0 25FF000000              and eax, 000000FF
:004120D5 83F801                  cmp eax, 00000001
:004120D8 7526                    jne 00412100
:004120DA 837D080C                cmp dword ptr [ebp+08], 0000000C
:004120DE 7311                    jnb 004120F1
:004120E0 8B4508                  mov eax, dword ptr [ebp+08]
:004120E3 50                      push eax
:004120E4 E84A29FFFF              call 00404A33
:004120E9 83C404                  add esp, 00000004
:004120EC 8945F8                  mov dword ptr [ebp-08], eax
:004120EF EB07                    jmp 004120F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004120DE(C)
|
:004120F1 C745F834AE4800          mov [ebp-08], 0048AE34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004120EF(U)
|
:004120F8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004120FB 894DFC                  mov dword ptr [ebp-04], ecx
:004120FE EB22                    jmp 00412122

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004120D8(C)
|
:00412100 837D080C                cmp dword ptr [ebp+08], 0000000C
:00412104 730F                    jnb 00412115
:00412106 8B5508                  mov edx, dword ptr [ebp+08]
:00412109 8B049530D74700          mov eax, dword ptr [4*edx+0047D730]
:00412110 8945F4                  mov dword ptr [ebp-0C], eax
:00412113 EB07                    jmp 0041211C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412104(C)
|
:00412115 C745F438AE4800          mov [ebp-0C], 0048AE38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412113(U)
|
:0041211C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041211F 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004120FE(U)
|
:00412122 8B55FC                  mov edx, dword ptr [ebp-04]
:00412125 52                      push edx
:00412126 E8E7880500              call 0046AA12
:0041212B 83C404                  add esp, 00000004
:0041212E 8BE5                    mov esp, ebp
:00412130 5D                      pop ebp
:00412131 C3                      ret



* Referenced by a CALL at Address:
|:004122C5   
|
:00412132 55                      push ebp
:00412133 8BEC                    mov ebp, esp
:00412135 83EC10                  sub esp, 00000010
:00412138 C745F8D8174B00          mov [ebp-08], 004B17D8
:0041213F C745F400000000          mov [ebp-0C], 00000000
:00412146 8B4508                  mov eax, dword ptr [ebp+08]
:00412149 8945F0                  mov dword ptr [ebp-10], eax
:0041214C 837DF001                cmp dword ptr [ebp-10], 00000001
:00412150 740B                    je 0041215D
:00412152 837DF002                cmp dword ptr [ebp-10], 00000002
:00412156 744C                    je 004121A4
:00412158 E9BA000000              jmp 00412217

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412150(C)
|
:0041215D 8B0D3CC74A00            mov ecx, dword ptr [004AC73C]
:00412163 83C902                  or ecx, 00000002
:00412166 890D3CC74A00            mov dword ptr [004AC73C], ecx
:0041216C 6A01                    push 00000001
:0041216E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412171 E8AA4D0200              call 00436F20
:00412176 8A5508                  mov dl, byte ptr [ebp+08]
:00412179 52                      push edx
:0041217A E8D1F3FFFF              call 00411550
:0041217F 83C404                  add esp, 00000004
:00412182 B978294B00              mov ecx, 004B2978
:00412187 E8B435FFFF              call 00405740
:0041218C 50                      push eax
:0041218D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412190 E87B010000              call 00412310
:00412195 68FF000000              push 000000FF
:0041219A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041219D E8AE010000              call 00412350
:004121A2 EB73                    jmp 00412217

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412156(C)
|
:004121A4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004121A7 E894DCFFFF              call 0040FE40
:004121AC 50                      push eax
:004121AD B9E2174B00              mov ecx, 004B17E2
:004121B2 E879010000              call 00412330
:004121B7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004121BA E8D1A6FFFF              call 0040C890
:004121BF 50                      push eax
:004121C0 B9E2174B00              mov ecx, 004B17E2
:004121C5 E886010000              call 00412350
:004121CA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004121CD E81E35FFFF              call 004056F0
:004121D2 50                      push eax
:004121D3 B9E2174B00              mov ecx, 004B17E2
:004121D8 E853020000              call 00412430
:004121DD B978294B00              mov ecx, 004B2978
:004121E2 E85935FFFF              call 00405740
:004121E7 50                      push eax
:004121E8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004121EB E820010000              call 00412310
:004121F0 8A450C                  mov al, byte ptr [ebp+0C]
:004121F3 50                      push eax
:004121F4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004121F7 E854010000              call 00412350
:004121FC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004121FF 51                      push ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00412200 6A02                    push 00000002
:00412202 E821F6FFFF              call 00411828
:00412207 83C408                  add esp, 00000008
:0041220A 8945FC                  mov dword ptr [ebp-04], eax
:0041220D 6A01                    push 00000001
:0041220F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412212 E8094D0200              call 00436F20

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412158(U), :004121A2(U)
|
:00412217 8BE5                    mov esp, ebp
:00412219 5D                      pop ebp
:0041221A C3                      ret



* Referenced by a CALL at Address:
|:0042F2F0   
|
:0041221B 55                      push ebp
:0041221C 8BEC                    mov ebp, esp
:0041221E 6A00                    push 00000000
:00412220 E864F9FFFF              call 00411B89
:00412225 83C404                  add esp, 00000004
:00412228 A13CC74A00              mov eax, dword ptr [004AC73C]
:0041222D 83E06E                  and eax, 0000006E
:00412230 85C0                    test eax, eax
:00412232 7407                    je 0041223B
:00412234 A13CC74A00              mov eax, dword ptr [004AC73C]
:00412239 EB14                    jmp 0041224F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412232(C)
|
:0041223B 6A00                    push 00000000
:0041223D E8F9830500              call 0046A63B
:00412242 83C404                  add esp, 00000004
:00412245 E807000000              call 00412251
:0041224A A13CC74A00              mov eax, dword ptr [004AC73C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412239(U)
|
:0041224F 5D                      pop ebp
:00412250 C3                      ret



* Referenced by a CALL at Address:
|:00412245   
|
:00412251 55                      push ebp
:00412252 8BEC                    mov ebp, esp
:00412254 83EC08                  sub esp, 00000008
:00412257 C745FC01000000          mov [ebp-04], 00000001
:0041225E C60528AE4800FF          mov byte ptr [0048AE28], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412304(U)
|
:00412265 E8F3D60100              call 0042F95D
:0041226A 83F801                  cmp eax, 00000001
:0041226D 755E                    jne 004122CD
:0041226F 837DFC00                cmp dword ptr [ebp-04], 00000000
:00412273 7411                    je 00412286
:00412275 6A01                    push 00000001
:00412277 E8BF830500              call 0046A63B
:0041227C 83C404                  add esp, 00000004
:0041227F C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412273(C)
|
:00412286 E8E0FCFFFF              call 00411F6B
:0041228B 85C0                    test eax, eax
:0041228D 743E                    je 004122CD
:0041228F 33C0                    xor eax, eax
:00412291 A0F87C4A00              mov al, byte ptr [004A7CF8]
:00412296 83F80C                  cmp eax, 0000000C
:00412299 7D32                    jge 004122CD
:0041229B 33C9                    xor ecx, ecx
:0041229D 8A0DF87C4A00            mov cl, byte ptr [004A7CF8]
:004122A3 83F90B                  cmp ecx, 0000000B
:004122A6 7509                    jne 004122B1
:004122A8 C745F801000000          mov [ebp-08], 00000001
:004122AF EB07                    jmp 004122B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004122A6(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004122B1 C745F802000000          mov [ebp-08], 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004122AF(U)
|
:004122B8 33D2                    xor edx, edx
:004122BA 8A15F87C4A00            mov dl, byte ptr [004A7CF8]
:004122C0 52                      push edx
:004122C1 8B45F8                  mov eax, dword ptr [ebp-08]
:004122C4 50                      push eax
:004122C5 E868FEFFFF              call 00412132
:004122CA 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041226D(C), :0041228D(C), :00412299(C)
|
:004122CD 8B0D3CC74A00            mov ecx, dword ptr [004AC73C]
:004122D3 83E16E                  and ecx, 0000006E
:004122D6 85C9                    test ecx, ecx
:004122D8 7407                    je 004122E1
:004122DA A13CC74A00              mov eax, dword ptr [004AC73C]
:004122DF EB28                    jmp 00412309

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004122D8(C)
|
:004122E1 68FF000000              push 000000FF
:004122E6 6A00                    push 00000000
:004122E8 E83BF5FFFF              call 00411828
:004122ED 83C408                  add esp, 00000008
:004122F0 8B153CC74A00            mov edx, dword ptr [004AC73C]
:004122F6 83E26E                  and edx, 0000006E
:004122F9 85D2                    test edx, edx
:004122FB 7407                    je 00412304
:004122FD A13CC74A00              mov eax, dword ptr [004AC73C]
:00412302 EB05                    jmp 00412309

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004122FB(C)
|
:00412304 E95CFFFFFF              jmp 00412265

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004122DF(U), :00412302(U)
|
:00412309 8BE5                    mov esp, ebp
:0041230B 5D                      pop ebp
:0041230C C3                      ret


:0041230D CC                      int 03
:0041230E CC                      int 03
:0041230F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040B144   , :004115D8   , :0041161A   , :0041165D   , :004116A0   
|:004117CF   , :00411F34   , :00412190   , :004121EB   , :00440973   
|:00440990   , :004409AD   
|
:00412310 55                      push ebp
:00412311 8BEC                    mov ebp, esp
:00412313 51                      push ecx
:00412314 894DFC                  mov dword ptr [ebp-04], ecx
:00412317 8B45FC                  mov eax, dword ptr [ebp-04]
:0041231A 8A4D08                  mov cl, byte ptr [ebp+08]
:0041231D 884804                  mov byte ptr [eax+04], cl
:00412320 8BE5                    mov esp, ebp
:00412322 5D                      pop ebp
:00412323 C20400                  ret 0004


:00412326 CC                      int 03
:00412327 CC                      int 03
:00412328 CC                      int 03
:00412329 CC                      int 03
:0041232A CC                      int 03
:0041232B CC                      int 03
:0041232C CC                      int 03
:0041232D CC                      int 03
:0041232E CC                      int 03
:0041232F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041155C   , :004115BF   , :00411602   , :00411644   , :00411687   
|:004116CC   , :00411F10   , :004121B2   , :0041DDA3   , :0042F43C   
|
:00412330 55                      push ebp
:00412331 8BEC                    mov ebp, esp
:00412333 51                      push ecx
:00412334 894DFC                  mov dword ptr [ebp-04], ecx
:00412337 8B45FC                  mov eax, dword ptr [ebp-04]
:0041233A 8A4D08                  mov cl, byte ptr [ebp+08]
:0041233D 884805                  mov byte ptr [eax+05], cl
:00412340 8BE5                    mov esp, ebp
:00412342 5D                      pop ebp
:00412343 C20400                  ret 0004


:00412346 CC                      int 03
:00412347 CC                      int 03
:00412348 CC                      int 03
:00412349 CC                      int 03
:0041234A CC                      int 03
:0041234B CC                      int 03
:0041234C CC                      int 03
:0041234D CC                      int 03
:0041234E CC                      int 03
:0041234F CC                      int 03

* Referenced by a CALL at Addresses:
|:004115CC   , :0041160E   , :00411651   , :00411694   , :004116D8   
|:0041219D   , :004121C5   , :004121F7   
|
:00412350 55                      push ebp
:00412351 8BEC                    mov ebp, esp
:00412353 51                      push ecx
:00412354 894DFC                  mov dword ptr [ebp-04], ecx
:00412357 8B45FC                  mov eax, dword ptr [ebp-04]
:0041235A 8A4D08                  mov cl, byte ptr [ebp+08]
:0041235D 884806                  mov byte ptr [eax+06], cl
:00412360 8BE5                    mov esp, ebp
:00412362 5D                      pop ebp
:00412363 C20400                  ret 0004


:00412366 CC                      int 03
:00412367 CC                      int 03
:00412368 CC                      int 03
:00412369 CC                      int 03
:0041236A CC                      int 03
:0041236B CC                      int 03
:0041236C CC                      int 03
:0041236D CC                      int 03
:0041236E CC                      int 03
:0041236F CC                      int 03

* Referenced by a CALL at Addresses:
|:004116E8   , :00412447   
|
:00412370 55                      push ebp
:00412371 8BEC                    mov ebp, esp
:00412373 51                      push ecx
:00412374 894DFC                  mov dword ptr [ebp-04], ecx
:00412377 8B45FC                  mov eax, dword ptr [ebp-04]
:0041237A 8A4D08                  mov cl, byte ptr [ebp+08]
:0041237D 8808                    mov byte ptr [eax], cl
:0041237F 8B55FC                  mov edx, dword ptr [ebp-04]
:00412382 8A450C                  mov al, byte ptr [ebp+0C]
:00412385 884201                  mov byte ptr [edx+01], al
:00412388 8BE5                    mov esp, ebp
:0041238A 5D                      pop ebp
:0041238B C20800                  ret 0008


:0041238E CC                      int 03
:0041238F CC                      int 03

* Referenced by a CALL at Addresses:
|:00411753   , :00411798   
|
:00412390 55                      push ebp
:00412391 8BEC                    mov ebp, esp
:00412393 51                      push ecx
:00412394 894DFC                  mov dword ptr [ebp-04], ecx
:00412397 8B45FC                  mov eax, dword ptr [ebp-04]
:0041239A 034508                  add eax, dword ptr [ebp+08]
:0041239D 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004123A0 888826010000            mov byte ptr [eax+00000126], cl
:004123A6 8BE5                    mov esp, ebp
:004123A8 5D                      pop ebp
:004123A9 C20800                  ret 0008


:004123AC CC                      int 03
:004123AD CC                      int 03
:004123AE CC                      int 03
:004123AF CC                      int 03

* Referenced by a CALL at Address:
|:0041172C   
|
:004123B0 55                      push ebp
:004123B1 8BEC                    mov ebp, esp
:004123B3 51                      push ecx
:004123B4 894DFC                  mov dword ptr [ebp-04], ecx
:004123B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004123BA 034508                  add eax, dword ptr [ebp+08]
:004123BD 8A8026010000            mov al, byte ptr [eax+00000126]
:004123C3 8BE5                    mov esp, ebp
:004123C5 5D                      pop ebp
:004123C6 C20400                  ret 0004


:004123C9 CC                      int 03
:004123CA CC                      int 03
:004123CB CC                      int 03
:004123CC CC                      int 03
:004123CD CC                      int 03
:004123CE CC                      int 03
:004123CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00411A98   , :00411D68   , :00411D9B   
|
:004123D0 55                      push ebp
:004123D1 8BEC                    mov ebp, esp
:004123D3 51                      push ecx
:004123D4 894DFC                  mov dword ptr [ebp-04], ecx
:004123D7 8B4508                  mov eax, dword ptr [ebp+08]
:004123DA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004123DD 8A444109                mov al, byte ptr [ecx+2*eax+09]
:004123E1 8BE5                    mov esp, ebp
:004123E3 5D                      pop ebp
:004123E4 C20400                  ret 0004


:004123E7 CC                      int 03
:004123E8 CC                      int 03
:004123E9 CC                      int 03
:004123EA CC                      int 03
:004123EB CC                      int 03
:004123EC CC                      int 03
:004123ED CC                      int 03
:004123EE CC                      int 03
:004123EF CC                      int 03

* Referenced by a CALL at Addresses:
|:00411AE1   , :00411DBF   
|
:004123F0 55                      push ebp
:004123F1 8BEC                    mov ebp, esp
:004123F3 51                      push ecx
:004123F4 894DFC                  mov dword ptr [ebp-04], ecx
:004123F7 8B4508                  mov eax, dword ptr [ebp+08]
:004123FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004123FD 8A44410A                mov al, byte ptr [ecx+2*eax+0A]
:00412401 8BE5                    mov esp, ebp
:00412403 5D                      pop ebp
:00412404 C20400                  ret 0004


:00412407 CC                      int 03
:00412408 CC                      int 03
:00412409 CC                      int 03
:0041240A CC                      int 03
:0041240B CC                      int 03
:0041240C CC                      int 03
:0041240D CC                      int 03
:0041240E CC                      int 03
:0041240F CC                      int 03

* Referenced by a CALL at Addresses:
|:004026B8   , :00411CAE   , :0042390E   , :0042B9E1   , :004387D5   
|:00438805   , :00438D11   , :00438D45   , :00451F27   , :00451F55   
|:0046B35D   , :0046B385   
|
:00412410 55                      push ebp
:00412411 8BEC                    mov ebp, esp
:00412413 51                      push ecx
:00412414 894DFC                  mov dword ptr [ebp-04], ecx
:00412417 8B45FC                  mov eax, dword ptr [ebp-04]
:0041241A 034508                  add eax, dword ptr [ebp+08]
:0041241D 8A4011                  mov al, byte ptr [eax+11]
:00412420 8BE5                    mov esp, ebp
:00412422 5D                      pop ebp
:00412423 C20400                  ret 0004


:00412426 CC                      int 03
:00412427 CC                      int 03
:00412428 CC                      int 03
:00412429 CC                      int 03
:0041242A CC                      int 03
:0041242B CC                      int 03
:0041242C CC                      int 03
:0041242D CC                      int 03
:0041242E CC                      int 03
:0041242F CC                      int 03

* Referenced by a CALL at Address:
|:004121D8   
|
:00412430 55                      push ebp
:00412431 8BEC                    mov ebp, esp
:00412433 51                      push ecx
:00412434 894DFC                  mov dword ptr [ebp-04], ecx
:00412437 8B4508                  mov eax, dword ptr [ebp+08]
:0041243A 8A4801                  mov cl, byte ptr [eax+01]
:0041243D 51                      push ecx
:0041243E 8B5508                  mov edx, dword ptr [ebp+08]
:00412441 8A02                    mov al, byte ptr [edx]
:00412443 50                      push eax
:00412444 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00412447 E824FFFFFF              call 00412370
:0041244C 8BE5                    mov esp, ebp
:0041244E 5D                      pop ebp
:0041244F C20400                  ret 0004


:00412452 CC                      int 03
:00412453 CC                      int 03
:00412454 CC                      int 03
:00412455 CC                      int 03
:00412456 CC                      int 03
:00412457 CC                      int 03
:00412458 CC                      int 03
:00412459 CC                      int 03
:0041245A CC                      int 03
:0041245B CC                      int 03
:0041245C CC                      int 03
:0041245D CC                      int 03
:0041245E CC                      int 03
:0041245F CC                      int 03
:00412460 55                      push ebp
:00412461 8BEC                    mov ebp, esp
:00412463 E807000000              call 0041246F
:00412468 E811000000              call 0041247E
:0041246D 5D                      pop ebp
:0041246E C3                      ret



* Referenced by a CALL at Address:
|:00412463   
|
:0041246F 55                      push ebp
:00412470 8BEC                    mov ebp, esp
:00412472 B96CB34800              mov ecx, 0048B36C
:00412477 E8B4710000              call 00419630
:0041247C 5D                      pop ebp
:0041247D C3                      ret



* Referenced by a CALL at Address:
|:00412468   
|
:0041247E 55                      push ebp
:0041247F 8BEC                    mov ebp, esp
:00412481 6890244100              push 00412490
:00412486 E825D00500              call 0046F4B0
:0041248B 83C404                  add esp, 00000004
:0041248E 5D                      pop ebp
:0041248F C3                      ret


:00412490 55                      push ebp
:00412491 8BEC                    mov ebp, esp
:00412493 B96CB34800              mov ecx, 0048B36C
:00412498 E863C50100              call 0042EA00
:0041249D 5D                      pop ebp
:0041249E C3                      ret


:0041249F 55                      push ebp
:004124A0 8BEC                    mov ebp, esp
:004124A2 83EC10                  sub esp, 00000010
:004124A5 8B450C                  mov eax, dword ptr [ebp+0C]
:004124A8 8945F4                  mov dword ptr [ebp-0C], eax
:004124AB 817DF410010000          cmp dword ptr [ebp-0C], 00000110
:004124B2 740E                    je 004124C2
:004124B4 817DF411010000          cmp dword ptr [ebp-0C], 00000111
:004124BB 7420                    je 004124DD
:004124BD E904010000              jmp 004125C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004124B2(C)
|

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043C, ""
                                  |
:004124C2 683C040000              push 0000043C
:004124C7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004124CA 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004124CB FF1510D64B00            Call dword ptr [004BD610]
:004124D1 50                      push eax

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:004124D2 FF1500D64B00            Call dword ptr [004BD600]
:004124D8 E9E9000000              jmp 004125C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004124BB(C)
|
:004124DD 8B5510                  mov edx, dword ptr [ebp+10]
:004124E0 81E2FFFF0000            and edx, 0000FFFF
:004124E6 8955F0                  mov dword ptr [ebp-10], edx
:004124E9 817DF03B040000          cmp dword ptr [ebp-10], 0000043B
:004124F0 7F18                    jg 0041250A
:004124F2 817DF03B040000          cmp dword ptr [ebp-10], 0000043B
:004124F9 7440                    je 0041253B
:004124FB 837DF002                cmp dword ptr [ebp-10], 00000002
:004124FF 0F84A1000000            je 004125A6
:00412505 E9BC000000              jmp 004125C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004124F0(C)
|
:0041250A 817DF03C040000          cmp dword ptr [ebp-10], 0000043C
:00412511 7412                    je 00412525
:00412513 817DF03D040000          cmp dword ptr [ebp-10], 0000043D
:0041251A 0F8499000000            je 004125B9
:00412520 E9A1000000              jmp 004125C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412511(C)
|
:00412525 6A01                    push 00000001
:00412527 8B4508                  mov eax, dword ptr [ebp+08]
:0041252A 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041252B FF15D8D54B00            Call dword ptr [004BD5D8]
:00412531 B801000000              mov eax, 00000001
:00412536 E98D000000              jmp 004125C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004124F9(C)
|
:0041253B C745FC00000000          mov [ebp-04], 00000000
:00412542 C745F800000000          mov [ebp-08], 00000000
:00412549 EB09                    jmp 00412554

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412576(U)
|
:0041254B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041254E 83C101                  add ecx, 00000001
:00412551 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412549(U)
|
:00412554 817DF8C8000000          cmp dword ptr [ebp-08], 000000C8
:0041255B 731B                    jnb 00412578
:0041255D 8B55F8                  mov edx, dword ptr [ebp-08]
:00412560 52                      push edx
:00412561 E82AB9FFFF              call 0040DE90
:00412566 83C404                  add esp, 00000004
:00412569 85C0                    test eax, eax
:0041256B 7409                    je 00412576
:0041256D 8B45FC                  mov eax, dword ptr [ebp-04]
:00412570 83C001                  add eax, 00000001
:00412573 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041256B(C)
|
:00412576 EBD3                    jmp 0041254B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041255B(C)
|
:00412578 837DFC01                cmp dword ptr [ebp-04], 00000001
:0041257C 7E0E                    jle 0041258C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041257E 6A02                    push 00000002
:00412580 8B4D08                  mov ecx, dword ptr [ebp+08]
:00412583 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00412584 FF15D8D54B00            Call dword ptr [004BD5D8]
:0041258A EB13                    jmp 0041259F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041257C(C)
|
:0041258C 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"S洫ZH"
                                  |
:0041258E 689CC64700              push 0047C69C
:00412593 8B5508                  mov edx, dword ptr [ebp+08]
:00412596 52                      push edx
:00412597 E8035C0000              call 0041819F
:0041259C 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041258A(U)
|
:0041259F B801000000              mov eax, 00000001
:004125A4 EB22                    jmp 004125C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004124FF(C)
|
:004125A6 6A00                    push 00000000
:004125A8 8B4508                  mov eax, dword ptr [ebp+08]
:004125AB 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004125AC FF15D8D54B00            Call dword ptr [004BD5D8]
:004125B2 B801000000              mov eax, 00000001
:004125B7 EB0F                    jmp 004125C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041251A(C)
|
:004125B9 683E080000              push 0000083E
:004125BE E808750500              call 00469ACB
:004125C3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004124BD(U), :004124D8(U), :00412505(U), :00412520(U)
|
:004125C6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412536(U), :004125A4(U), :004125B7(U)
|
:004125C8 8BE5                    mov esp, ebp
:004125CA 5D                      pop ebp
:004125CB C21000                  ret 0010



* Referenced by a CALL at Address:
|:00461222   
|
:004125CE 55                      push ebp
:004125CF 8BEC                    mov ebp, esp
:004125D1 51                      push ecx
:004125D2 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041264F(U)
|
:004125D9 B801000000              mov eax, 00000001
:004125DE 85C0                    test eax, eax
:004125E0 746F                    je 00412651
:004125E2 6A00                    push 00000000
:004125E4 689F244100              push 0041249F
:004125E9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004125EC 51                      push ecx

* Possible Reference to Dialog: DialogID_00EA 
                                  |
:004125ED 68EA000000              push 000000EA
:004125F2 8B5508                  mov edx, dword ptr [ebp+08]
:004125F5 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:004125F6 FF15DCD64B00            Call dword ptr [004BD6DC]
:004125FC 8945FC                  mov dword ptr [ebp-04], eax
:004125FF 837DFC01                cmp dword ptr [ebp-04], 00000001
:00412603 7521                    jne 00412626
:00412605 6A00                    push 00000000
:00412607 6855264100              push 00412655
:0041260C A1B0554B00              mov eax, dword ptr [004B55B0]
:00412611 50                      push eax

* Possible Reference to Dialog: DialogID_00EB 
                                  |
:00412612 68EB000000              push 000000EB
:00412617 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0041261D 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0041261E FF15DCD64B00            Call dword ptr [004BD6DC]
:00412624 EB29                    jmp 0041264F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412603(C)
|
:00412626 837DFC02                cmp dword ptr [ebp-04], 00000002
:0041262A 7521                    jne 0041264D
:0041262C 6A00                    push 00000000
:0041262E 68073D4100              push 00413D07
:00412633 8B15B0554B00            mov edx, dword ptr [004B55B0]
:00412639 52                      push edx

* Possible Reference to Dialog: DialogID_00DA 
                                  |
:0041263A 68DA000000              push 000000DA
:0041263F A1A8554B00              mov eax, dword ptr [004B55A8]
:00412644 50                      push eax

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00412645 FF15DCD64B00            Call dword ptr [004BD6DC]
:0041264B EB02                    jmp 0041264F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041262A(C)
|
:0041264D EB02                    jmp 00412651

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412624(U), :0041264B(U)
|
:0041264F EB88                    jmp 004125D9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004125E0(C), :0041264D(U)
|
:00412651 8BE5                    mov esp, ebp
:00412653 5D                      pop ebp
:00412654 C3                      ret


:00412655 55                      push ebp
:00412656 8BEC                    mov ebp, esp
:00412658 83EC1C                  sub esp, 0000001C
:0041265B 56                      push esi
:0041265C 57                      push edi
:0041265D 8B450C                  mov eax, dword ptr [ebp+0C]
:00412660 8945E8                  mov dword ptr [ebp-18], eax
:00412663 837DE810                cmp dword ptr [ebp-18], 00000010
:00412667 7719                    ja 00412682
:00412669 837DE810                cmp dword ptr [ebp-18], 00000010
:0041266D 0F84C5000000            je 00412738
:00412673 837DE802                cmp dword ptr [ebp-18], 00000002
:00412677 0F8494000000            je 00412711
:0041267D E927030000              jmp 004129A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412667(C)
|
:00412682 817DE810010000          cmp dword ptr [ebp-18], 00000110
:00412689 7718                    ja 004126A3
:0041268B 817DE810010000          cmp dword ptr [ebp-18], 00000110
:00412692 743B                    je 004126CF
:00412694 837DE84E                cmp dword ptr [ebp-18], 0000004E
:00412698 0F8460010000            je 004127FE
:0041269E E906030000              jmp 004129A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412689(C)
|
:004126A3 817DE811010000          cmp dword ptr [ebp-18], 00000111
:004126AA 0F8499000000            je 00412749
:004126B0 817DE800020000          cmp dword ptr [ebp-18], 00000200
:004126B7 0F8407010000            je 004127C4
:004126BD 817DE802020000          cmp dword ptr [ebp-18], 00000202
:004126C4 0F84D0000000            je 0041279A
:004126CA E9DA020000              jmp 004129A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412692(C)
|

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:004126CF 6800040000              push 00000400
:004126D4 6A00                    push 00000000
:004126D6 6810AF4800              push 0048AF10
:004126DB E8F0D30500              call 0046FAD0
:004126E0 83C40C                  add esp, 0000000C
:004126E3 6A40                    push 00000040
:004126E5 6A00                    push 00000000
:004126E7 6860AE4800              push 0048AE60
:004126EC E8DFD30500              call 0046FAD0
:004126F1 83C40C                  add esp, 0000000C
:004126F4 8A0D14B44800            mov cl, byte ptr [0048B414]
:004126FA 51                      push ecx
:004126FB 8B5508                  mov edx, dword ptr [ebp+08]
:004126FE 52                      push edx
:004126FF E81C130000              call 00413A20
:00412704 83C408                  add esp, 00000008
:00412707 B801000000              mov eax, 00000001
:0041270C E99A020000              jmp 004129AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412677(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00412711 6A08                    push 00000008
:00412713 6A00                    push 00000000
:00412715 6810AF4800              push 0048AF10
:0041271A E8B1D30500              call 0046FAD0
:0041271F 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00412722 6A08                    push 00000008
:00412724 6A00                    push 00000000
:00412726 6860AE4800              push 0048AE60
:0041272B E8A0D30500              call 0046FAD0
:00412730 83C40C                  add esp, 0000000C
:00412733 E971020000              jmp 004129A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041266D(C)
|
:00412738 6A01                    push 00000001
:0041273A 8B4508                  mov eax, dword ptr [ebp+08]
:0041273D 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0041273E FF15D8D54B00            Call dword ptr [004BD5D8]
:00412744 E960020000              jmp 004129A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004126AA(C)
|
:00412749 833D10B4480000          cmp dword ptr [0048B410], 00000000
:00412750 7418                    je 0041276A

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:00412752 FF1500D44B00            Call dword ptr [004BD400]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:00412758 FF15D4D64B00            Call dword ptr [004BD6D4]
:0041275E C70510B4480000000000    mov dword ptr [0048B410], 00000000
:00412768 EB2B                    jmp 00412795

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412750(C)
|
:0041276A 6814B44800              push 0048B414
:0041276F 8B4D14                  mov ecx, dword ptr [ebp+14]
:00412772 51                      push ecx
:00412773 668B5510                mov dx, word ptr [ebp+10]
:00412777 52                      push edx
:00412778 8B4510                  mov eax, dword ptr [ebp+10]
:0041277B C1E810                  shr eax, 10
:0041277E 25FFFF0000              and eax, 0000FFFF
:00412783 50                      push eax
:00412784 8B4D08                  mov ecx, dword ptr [ebp+08]
:00412787 51                      push ecx
:00412788 E82C0A0000              call 004131B9
:0041278D 83C414                  add esp, 00000014
:00412790 E916020000              jmp 004129AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412768(U)
|
:00412795 E90F020000              jmp 004129A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004126C4(C)
|
:0041279A 8B5514                  mov edx, dword ptr [ebp+14]
:0041279D 52                      push edx
:0041279E 68E0AE4800              push 0048AEE0
:004127A3 A110B44800              mov eax, dword ptr [0048B410]
:004127A8 50                      push eax
:004127A9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004127AC 51                      push ecx
:004127AD E8D60B0000              call 00413388
:004127B2 83C410                  add esp, 00000010
:004127B5 C70510B4480000000000    mov dword ptr [0048B410], 00000000
:004127BF E9E5010000              jmp 004129A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004126B7(C)
|
:004127C4 833D10B4480000          cmp dword ptr [0048B410], 00000000
:004127CB 742C                    je 004127F9
:004127CD 8B5514                  mov edx, dword ptr [ebp+14]
:004127D0 C1EA10                  shr edx, 10
:004127D3 81E2FFFF0000            and edx, 0000FFFF
:004127D9 81E2FFFF0000            and edx, 0000FFFF
:004127DF 52                      push edx
:004127E0 8B4514                  mov eax, dword ptr [ebp+14]
:004127E3 25FFFF0000              and eax, 0000FFFF
:004127E8 50                      push eax

* Reference To: COMCTL32.ImageList_DragMove, Ord:001Ah
                                  |
:004127E9 FF15FCD34B00            Call dword ptr [004BD3FC]
:004127EF B801000000              mov eax, 00000001
:004127F4 E9B2010000              jmp 004129AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004127CB(C)
|
:004127F9 E9AB010000              jmp 004129A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412698(C)
|
:004127FE 8B4D14                  mov ecx, dword ptr [ebp+14]
:00412801 894DFC                  mov dword ptr [ebp-04], ecx
:00412804 8B55FC                  mov edx, dword ptr [ebp-04]
:00412807 8B4208                  mov eax, dword ptr [edx+08]
:0041280A 8945E4                  mov dword ptr [ebp-1C], eax
:0041280D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00412810 83C16D                  add ecx, 0000006D
:00412813 894DE4                  mov dword ptr [ebp-1C], ecx
:00412816 837DE46B                cmp dword ptr [ebp-1C], 0000006B
:0041281A 0F873E010000            ja 0041295E
:00412820 8B45E4                  mov eax, dword ptr [ebp-1C]
:00412823 33D2                    xor edx, edx
:00412825 8A90C7294100            mov dl, byte ptr [eax+004129C7]
:0041282B FF2495B3294100          jmp dword ptr [4*edx+004129B3]
:00412832 817D103E040000          cmp dword ptr [ebp+10], 0000043E
:00412839 7409                    je 00412844
:0041283B 817D103B040000          cmp dword ptr [ebp+10], 0000043B
:00412842 752F                    jne 00412873

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412839(C)
|
:00412844 8B7514                  mov esi, dword ptr [ebp+14]
:00412847 B90B000000              mov ecx, 0000000B
:0041284C BFE0AE4800              mov edi, 0048AEE0
:00412851 F3                      repz
:00412852 A5                      movsd
:00412853 68E0AE4800              push 0048AEE0
:00412858 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041285B 51                      push ecx
:0041285C E8D2280000              call 00415133
:00412861 83C408                  add esp, 00000008
:00412864 A310B44800              mov dword ptr [0048B410], eax
:00412869 A110B44800              mov eax, dword ptr [0048B410]
:0041286E E938010000              jmp 004129AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412842(C)
|
:00412873 E931010000              jmp 004129A9
:00412878 8B55FC                  mov edx, dword ptr [ebp-04]
:0041287B 817A043B040000          cmp dword ptr [edx+04], 0000043B
:00412882 740C                    je 00412890
:00412884 8B45FC                  mov eax, dword ptr [ebp-04]
:00412887 8178043E040000          cmp dword ptr [eax+04], 0000043E
:0041288E 7514                    jne 004128A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412882(C)
|
:00412890 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00412893 51                      push ecx
:00412894 8B5510                  mov edx, dword ptr [ebp+10]
:00412897 52                      push edx
:00412898 8B4508                  mov eax, dword ptr [ebp+08]
:0041289B 50                      push eax
:0041289C E85B080000              call 004130FC
:004128A1 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041288E(C)
|
:004128A4 E900010000              jmp 004129A9
:004128A9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004128AC 8179043B040000          cmp dword ptr [ecx+04], 0000043B
:004128B3 740C                    je 004128C1
:004128B5 8B55FC                  mov edx, dword ptr [ebp-04]
:004128B8 817A043E040000          cmp dword ptr [edx+04], 0000043E
:004128BF 7510                    jne 004128D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004128B3(C)
|
:004128C1 8B45FC                  mov eax, dword ptr [ebp-04]
:004128C4 50                      push eax
:004128C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004128C8 51                      push ecx
:004128C9 E8E2010000              call 00412AB0
:004128CE 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004128BF(C)
|
:004128D1 E9D3000000              jmp 004129A9
:004128D6 8B5514                  mov edx, dword ptr [ebp+14]
:004128D9 8955F8                  mov dword ptr [ebp-08], edx
:004128DC 8B45F8                  mov eax, dword ptr [ebp-08]
:004128DF 8B4814                  mov ecx, dword ptr [eax+14]
:004128E2 83E102                  and ecx, 00000002
:004128E5 85C9                    test ecx, ecx
:004128E7 7473                    je 0041295C
:004128E9 683D040000              push 0000043D
:004128EE 8B5508                  mov edx, dword ptr [ebp+08]
:004128F1 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004128F2 FF1510D64B00            Call dword ptr [004BD610]
:004128F8 50                      push eax
:004128F9 E8570A0000              call 00413355
:004128FE 83C404                  add esp, 00000004
:00412901 8945F4                  mov dword ptr [ebp-0C], eax
:00412904 8B45F8                  mov eax, dword ptr [ebp-08]
:00412907 8178043E040000          cmp dword ptr [eax+04], 0000043E
:0041290E 740C                    je 0041291C
:00412910 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412913 8179043B040000          cmp dword ptr [ecx+04], 0000043B
:0041291A 752E                    jne 0041294A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041290E(C)
|
:0041291C 8B55F8                  mov edx, dword ptr [ebp-08]
:0041291F 8B420C                  mov eax, dword ptr [edx+0C]
:00412922 50                      push eax
:00412923 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00412926 8B11                    mov edx, dword ptr [ecx]
:00412928 52                      push edx
:00412929 E82E690000              call 0041925C
:0041292E 83C408                  add esp, 00000008
:00412931 8945F0                  mov dword ptr [ebp-10], eax
:00412934 8B45F0                  mov eax, dword ptr [ebp-10]
:00412937 50                      push eax
:00412938 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041293B 51                      push ecx
:0041293C 8B5508                  mov edx, dword ptr [ebp+08]
:0041293F 52                      push edx
:00412940 E839020000              call 00412B7E
:00412945 83C40C                  add esp, 0000000C
:00412948 EB12                    jmp 0041295C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041291A(C)
|
:0041294A 6A01                    push 00000001
:0041294C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041294F 50                      push eax
:00412950 8B4D08                  mov ecx, dword ptr [ebp+08]
:00412953 51                      push ecx
:00412954 E8E44A0000              call 0041743D
:00412959 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004128E7(C), :00412948(U)
|
:0041295C EB4B                    jmp 004129A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041281A(C)
|
:0041295E 817D103B040000          cmp dword ptr [ebp+10], 0000043B
:00412965 7409                    je 00412970
:00412967 817D103E040000          cmp dword ptr [ebp+10], 0000043E
:0041296E 7539                    jne 004129A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412965(C)
|
:00412970 6A00                    push 00000000
:00412972 6A00                    push 00000000
:00412974 68F0000000              push 000000F0
:00412979 6858040000              push 00000458
:0041297E 8B5508                  mov edx, dword ptr [ebp+08]
:00412981 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00412982 FF15D4D54B00            Call dword ptr [004BD5D4]
:00412988 8945EC                  mov dword ptr [ebp-14], eax
:0041298B 8B45EC                  mov eax, dword ptr [ebp-14]
:0041298E 50                      push eax
:0041298F 8B4D14                  mov ecx, dword ptr [ebp+14]
:00412992 51                      push ecx
:00412993 8B5510                  mov edx, dword ptr [ebp+10]
:00412996 52                      push edx
:00412997 8B450C                  mov eax, dword ptr [ebp+0C]
:0041299A 50                      push eax
:0041299B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041299E 51                      push ecx
:0041299F E8845B0000              call 00418528
:004129A4 83C414                  add esp, 00000014
:004129A7 EB02                    jmp 004129AB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041267D(U), :0041269E(U), :004126CA(U), :00412733(U), :00412744(U)
|:00412795(U), :004127BF(U), :004127F9(U), :00412873(U), :004128A4(U)
|:004128D1(U), :0041295C(U), :0041296E(C)
|
:004129A9 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041270C(U), :00412790(U), :004127F4(U), :0041286E(U), :004129A7(U)
|
:004129AB 5F                      pop edi
:004129AC 5E                      pop esi
:004129AD 8BE5                    mov esp, ebp
:004129AF 5D                      pop ebp
:004129B0 C21000                  ret 0010



:004129B3 32284100                DWORD 00412832
:004129B7 D6284100                DWORD 004128D6
:004129BB 78284100                DWORD 00412878
:004129BF A9284100                DWORD 004128A9
:004129C3 5E294100                DWORD 0041295E


:004129C7 000404                  add byte ptr [esp+eax], al
:004129CA 0404                    add al, 04
:004129CC 0404                    add al, 04
:004129CE 0401                    add al, 01
:004129D0 0404                    add al, 04
:004129D2 0404                    add al, 04
:004129D4 0404                    add al, 04
:004129D6 0404                    add al, 04
:004129D8 0404                    add al, 04
:004129DA 0404                    add al, 04
:004129DC 0404                    add al, 04
:004129DE 0404                    add al, 04
:004129E0 0404                    add al, 04
:004129E2 0404                    add al, 04
:004129E4 0404                    add al, 04
:004129E6 0404                    add al, 04
:004129E8 0404                    add al, 04
:004129EA 0404                    add al, 04
:004129EC 0404                    add al, 04
:004129EE 0404                    add al, 04
:004129F0 0404                    add al, 04
:004129F2 0404                    add al, 04
:004129F4 0404                    add al, 04
:004129F6 0404                    add al, 04
:004129F8 0404                    add al, 04
:004129FA 0404                    add al, 04
:004129FC 0404                    add al, 04
:004129FE 0404                    add al, 04
:00412A00 0404                    add al, 04
:00412A02 0404                    add al, 04
:00412A04 0404                    add al, 04
:00412A06 0404                    add al, 04
:00412A08 0404                    add al, 04
:00412A0A 0404                    add al, 04
:00412A0C 0404                    add al, 04
:00412A0E 0404                    add al, 04
:00412A10 0404                    add al, 04
:00412A12 0404                    add al, 04
:00412A14 0404                    add al, 04
:00412A16 0404                    add al, 04
:00412A18 0404                    add al, 04
:00412A1A 0404                    add al, 04
:00412A1C 0404                    add al, 04
:00412A1E 0404                    add al, 04
:00412A20 0404                    add al, 04
:00412A22 0404                    add al, 04
:00412A24 0404                    add al, 04
:00412A26 0404                    add al, 04
:00412A28 0404                    add al, 04
:00412A2A 0404                    add al, 04
:00412A2C 0404                    add al, 04
:00412A2E 0402                    add al, 02
:00412A30 0404                    add al, 04
:00412A32 03                      BYTE 03h


* Referenced by a CALL at Addresses:
|:00412AD0   , :00412AEA   , :00412B5A   , :00412B72   , :0041311C   
|:00413136   , :0041410F   , :00414129   , :004141C8   , :004141E0   
|:00414D08   , :00414D22   , :00415F29   , :00415F41   , :00415F5B   
|:00415F73   , :00415F8D   , :00415FA5   , :00415FF2   , :0041600A   
|:00416022   , :0046262C   
|
:00412A33 55                      push ebp
:00412A34 8BEC                    mov ebp, esp
:00412A36 83EC30                  sub esp, 00000030
:00412A39 6A00                    push 00000000
:00412A3B 6A00                    push 00000000
:00412A3D 6804100000              push 00001004
:00412A42 8B4508                  mov eax, dword ptr [ebp+08]
:00412A45 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00412A46 FF1504D64B00            Call dword ptr [004BD604]
:00412A4C 8945F8                  mov dword ptr [ebp-08], eax
:00412A4F C745FC00000000          mov [ebp-04], 00000000
:00412A56 EB09                    jmp 00412A61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412AAA(U)
|
:00412A58 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00412A5B 83C101                  add ecx, 00000001
:00412A5E 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412A56(U)
|
:00412A61 8B55FC                  mov edx, dword ptr [ebp-04]
:00412A64 3B55F8                  cmp edx, dword ptr [ebp-08]
:00412A67 7D43                    jge 00412AAC

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00412A69 6A02                    push 00000002
:00412A6B 8B45FC                  mov eax, dword ptr [ebp-04]
:00412A6E 50                      push eax
:00412A6F 682C100000              push 0000102C
:00412A74 8B4D08                  mov ecx, dword ptr [ebp+08]
:00412A77 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00412A78 FF1504D64B00            Call dword ptr [004BD604]
:00412A7E 83F802                  cmp eax, 00000002
:00412A81 7527                    jne 00412AAA

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00412A83 C745E002000000          mov [ebp-20], 00000002
:00412A8A C745DC00000000          mov [ebp-24], 00000000
:00412A91 8D55D0                  lea edx, dword ptr [ebp-30]
:00412A94 52                      push edx
:00412A95 8B45FC                  mov eax, dword ptr [ebp-04]
:00412A98 50                      push eax
:00412A99 682B100000              push 0000102B
:00412A9E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00412AA1 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00412AA2 FF1504D64B00            Call dword ptr [004BD604]
:00412AA8 EB02                    jmp 00412AAC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412A81(C)
|
:00412AAA EBAC                    jmp 00412A58

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412A67(C), :00412AA8(U)
|
:00412AAC 8BE5                    mov esp, ebp
:00412AAE 5D                      pop ebp
:00412AAF C3                      ret



* Referenced by a CALL at Address:
|:004128C9   
|
:00412AB0 55                      push ebp
:00412AB1 8BEC                    mov ebp, esp
:00412AB3 51                      push ecx
:00412AB4 8B450C                  mov eax, dword ptr [ebp+0C]
:00412AB7 8178043B040000          cmp dword ptr [eax+04], 0000043B
:00412ABE 751A                    jne 00412ADA
:00412AC0 683E040000              push 0000043E
:00412AC5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00412AC8 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412AC9 FF1510D64B00            Call dword ptr [004BD610]
:00412ACF 50                      push eax
:00412AD0 E85EFFFFFF              call 00412A33
:00412AD5 83C404                  add esp, 00000004
:00412AD8 EB18                    jmp 00412AF2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412ABE(C)
|

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:00412ADA 683B040000              push 0000043B
:00412ADF 8B5508                  mov edx, dword ptr [ebp+08]
:00412AE2 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412AE3 FF1510D64B00            Call dword ptr [004BD610]
:00412AE9 50                      push eax
:00412AEA E844FFFFFF              call 00412A33
:00412AEF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412AD8(U)
|
:00412AF2 8B450C                  mov eax, dword ptr [ebp+0C]
:00412AF5 8B08                    mov ecx, dword ptr [eax]
:00412AF7 51                      push ecx
:00412AF8 E8C6650000              call 004190C3
:00412AFD 83C404                  add esp, 00000004
:00412B00 8945FC                  mov dword ptr [ebp-04], eax
:00412B03 837DFC00                cmp dword ptr [ebp-04], 00000000
:00412B07 7D0C                    jge 00412B15
:00412B09 8B5508                  mov edx, dword ptr [ebp+08]
:00412B0C 52                      push edx
:00412B0D E807000000              call 00412B19
:00412B12 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412B07(C)
|
:00412B15 8BE5                    mov esp, ebp
:00412B17 5D                      pop ebp
:00412B18 C3                      ret



* Referenced by a CALL at Addresses:
|:00412B0D   , :00413159   , :00413286   , :004132DE   , :00413333   
|
:00412B19 55                      push ebp
:00412B1A 8BEC                    mov ebp, esp
:00412B1C 51                      push ecx
:00412B1D 683D040000              push 0000043D
:00412B22 8B4508                  mov eax, dword ptr [ebp+08]
:00412B25 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412B26 FF1510D64B00            Call dword ptr [004BD610]
:00412B2C 50                      push eax
:00412B2D E823080000              call 00413355
:00412B32 83C404                  add esp, 00000004
:00412B35 8945FC                  mov dword ptr [ebp-04], eax
:00412B38 6A01                    push 00000001
:00412B3A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00412B3D 51                      push ecx
:00412B3E 8B5508                  mov edx, dword ptr [ebp+08]
:00412B41 52                      push edx
:00412B42 E8F6480000              call 0041743D
:00412B47 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:00412B4A 683B040000              push 0000043B
:00412B4F 8B4508                  mov eax, dword ptr [ebp+08]
:00412B52 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412B53 FF1510D64B00            Call dword ptr [004BD610]
:00412B59 50                      push eax
:00412B5A E8D4FEFFFF              call 00412A33
:00412B5F 83C404                  add esp, 00000004
:00412B62 683E040000              push 0000043E
:00412B67 8B4D08                  mov ecx, dword ptr [ebp+08]
:00412B6A 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412B6B FF1510D64B00            Call dword ptr [004BD610]
:00412B71 50                      push eax
:00412B72 E8BCFEFFFF              call 00412A33
:00412B77 83C404                  add esp, 00000004
:00412B7A 8BE5                    mov esp, ebp
:00412B7C 5D                      pop ebp
:00412B7D C3                      ret



* Referenced by a CALL at Address:
|:00412940   
|
:00412B7E 55                      push ebp
:00412B7F 8BEC                    mov ebp, esp
:00412B81 83EC1C                  sub esp, 0000001C
:00412B84 53                      push ebx
:00412B85 56                      push esi
:00412B86 8B4508                  mov eax, dword ptr [ebp+08]
:00412B89 50                      push eax
:00412B8A E888520000              call 00417E17
:00412B8F 83C404                  add esp, 00000004
:00412B92 8B4D10                  mov ecx, dword ptr [ebp+10]
:00412B95 6BC922                  imul ecx, 00000022
:00412B98 81C1D0474900            add ecx, 004947D0
:00412B9E E8BDD2FFFF              call 0040FE60
:00412BA3 25FF000000              and eax, 000000FF
:00412BA8 8945F4                  mov dword ptr [ebp-0C], eax
:00412BAB 837DF411                cmp dword ptr [ebp-0C], 00000011
:00412BAF 0F874F020000            ja 00412E04
:00412BB5 8B4D10                  mov ecx, dword ptr [ebp+10]
:00412BB8 51                      push ecx
:00412BB9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412BBC 6BC950                  imul ecx, 00000050
:00412BBF 81C1787F4900            add ecx, 00497F78
:00412BC5 E86FEEFEFF              call 00401A39
:00412BCA 85C0                    test eax, eax
:00412BCC 0F84FB010000            je 00412DCD

* Possible StringData Ref from Data Obj ->"iH˳"
                                  |
:00412BD2 68B0C64700              push 0047C6B0
:00412BD7 68A6040000              push 000004A6
:00412BDC 8B5508                  mov edx, dword ptr [ebp+08]
:00412BDF 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412BE0 FF1510D64B00            Call dword ptr [004BD610]
:00412BE6 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00412BE7 FF1514D64B00            Call dword ptr [004BD614]
:00412BED 68F4010000              push 000001F4
:00412BF2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412BF5 6BC950                  imul ecx, 00000050
:00412BF8 81C1787F4900            add ecx, 00497F78
:00412BFE E84D6A0000              call 00419650
:00412C03 8AD8                    mov bl, al
:00412C05 81E3FF000000            and ebx, 000000FF
:00412C0B 8B4D10                  mov ecx, dword ptr [ebp+10]
:00412C0E 6BC922                  imul ecx, 00000022
:00412C11 81C1D0474900            add ecx, 004947D0
:00412C17 E84406FFFF              call 00403260
:00412C1C 25FF000000              and eax, 000000FF
:00412C21 03D8                    add ebx, eax
:00412C23 53                      push ebx
:00412C24 6A00                    push 00000000
:00412C26 E87E0C0100              call 004238A9
:00412C2B 83C40C                  add esp, 0000000C
:00412C2E 8945EC                  mov dword ptr [ebp-14], eax
:00412C31 68F4010000              push 000001F4
:00412C36 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412C39 6BC950                  imul ecx, 00000050
:00412C3C 81C1787F4900            add ecx, 00497F78
:00412C42 E8A96A0000              call 004196F0
:00412C47 8AD8                    mov bl, al
:00412C49 81E3FF000000            and ebx, 000000FF
:00412C4F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00412C52 6BC922                  imul ecx, 00000022
:00412C55 81C1D0474900            add ecx, 004947D0
:00412C5B E82006FFFF              call 00403280
:00412C60 25FF000000              and eax, 000000FF
:00412C65 99                      cdq
:00412C66 2BC2                    sub eax, edx
:00412C68 D1F8                    sar eax, 1
:00412C6A 03D8                    add ebx, eax
:00412C6C 53                      push ebx
:00412C6D 6A00                    push 00000000
:00412C6F E8350C0100              call 004238A9
:00412C74 83C40C                  add esp, 0000000C
:00412C77 8945E8                  mov dword ptr [ebp-18], eax
:00412C7A 68FF000000              push 000000FF
:00412C7F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412C82 6BC950                  imul ecx, 00000050
:00412C85 81C1787F4900            add ecx, 00497F78
:00412C8B E8806A0000              call 00419710
:00412C90 8AD8                    mov bl, al
:00412C92 81E3FF000000            and ebx, 000000FF
:00412C98 8B4D10                  mov ecx, dword ptr [ebp+10]
:00412C9B 6BC922                  imul ecx, 00000022
:00412C9E 81C1D0474900            add ecx, 004947D0
:00412CA4 E8273F0200              call 00436BD0
:00412CA9 25FF000000              and eax, 000000FF
:00412CAE 2BD8                    sub ebx, eax
:00412CB0 53                      push ebx
:00412CB1 6A00                    push 00000000
:00412CB3 E8F10B0100              call 004238A9
:00412CB8 83C40C                  add esp, 0000000C
:00412CBB 8945E4                  mov dword ptr [ebp-1C], eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00412CBE 6A0A                    push 0000000A
:00412CC0 8D45F8                  lea eax, dword ptr [ebp-08]
:00412CC3 50                      push eax
:00412CC4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00412CC7 51                      push ecx
:00412CC8 E8F3780500              call 0046A5C0
:00412CCD 83C40C                  add esp, 0000000C
:00412CD0 50                      push eax
:00412CD1 6891040000              push 00000491
:00412CD6 8B5508                  mov edx, dword ptr [ebp+08]
:00412CD9 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412CDA FF1510D64B00            Call dword ptr [004BD610]
:00412CE0 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00412CE1 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00412CE7 6A0A                    push 0000000A
:00412CE9 8D45F8                  lea eax, dword ptr [ebp-08]
:00412CEC 50                      push eax
:00412CED 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00412CF0 51                      push ecx
:00412CF1 E8CA780500              call 0046A5C0
:00412CF6 83C40C                  add esp, 0000000C
:00412CF9 50                      push eax
:00412CFA 688C040000              push 0000048C
:00412CFF 8B5508                  mov edx, dword ptr [ebp+08]
:00412D02 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412D03 FF1510D64B00            Call dword ptr [004BD610]
:00412D09 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00412D0A FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00412D10 6A0A                    push 0000000A
:00412D12 8D45F8                  lea eax, dword ptr [ebp-08]
:00412D15 50                      push eax
:00412D16 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00412D19 51                      push ecx
:00412D1A E8A1780500              call 0046A5C0
:00412D1F 83C40C                  add esp, 0000000C
:00412D22 50                      push eax

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:00412D23 6800040000              push 00000400
:00412D28 8B5508                  mov edx, dword ptr [ebp+08]
:00412D2B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412D2C FF1510D64B00            Call dword ptr [004BD610]
:00412D32 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00412D33 FF1514D64B00            Call dword ptr [004BD614]
:00412D39 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412D3C 6BC950                  imul ecx, 00000050
:00412D3F 81C1787F4900            add ecx, 00497F78
:00412D45 E8D4EFFEFF              call 00401D1E
:00412D4A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00412D4D 2BC8                    sub ecx, eax
:00412D4F 51                      push ecx
:00412D50 6890040000              push 00000490
:00412D55 8B5508                  mov edx, dword ptr [ebp+08]
:00412D58 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412D59 FF1510D64B00            Call dword ptr [004BD610]
:00412D5F 50                      push eax
:00412D60 E867640000              call 004191CC
:00412D65 83C408                  add esp, 00000008
:00412D68 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412D6B 6BC950                  imul ecx, 00000050
:00412D6E 81C1787F4900            add ecx, 00497F78
:00412D74 E8D5F0FEFF              call 00401E4E
:00412D79 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00412D7C 2BC8                    sub ecx, eax
:00412D7E 51                      push ecx
:00412D7F 68FC030000              push 000003FC
:00412D84 8B5508                  mov edx, dword ptr [ebp+08]
:00412D87 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412D88 FF1510D64B00            Call dword ptr [004BD610]
:00412D8E 50                      push eax
:00412D8F E838640000              call 004191CC
:00412D94 83C408                  add esp, 00000008
:00412D97 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412D9A 6BC950                  imul ecx, 00000050
:00412D9D 81C1787F4900            add ecx, 00497F78
:00412DA3 E812F1FEFF              call 00401EBA
:00412DA8 25FF000000              and eax, 000000FF
:00412DAD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00412DB0 2BC8                    sub ecx, eax
:00412DB2 51                      push ecx

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:03FE, "1000"
                                  |
:00412DB3 68FE030000              push 000003FE
:00412DB8 8B5508                  mov edx, dword ptr [ebp+08]
:00412DBB 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412DBC FF1510D64B00            Call dword ptr [004BD610]
:00412DC2 50                      push eax
:00412DC3 E804640000              call 004191CC
:00412DC8 83C408                  add esp, 00000008
:00412DCB EB32                    jmp 00412DFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412BCC(C)
|
:00412DCD 6A00                    push 00000000
:00412DCF 8B450C                  mov eax, dword ptr [ebp+0C]
:00412DD2 50                      push eax
:00412DD3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00412DD6 51                      push ecx
:00412DD7 E861460000              call 0041743D
:00412DDC 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"تZLk˳"
                                  |
:00412DDF 68BCC64700              push 0047C6BC
:00412DE4 68A6040000              push 000004A6
:00412DE9 8B5508                  mov edx, dword ptr [ebp+08]
:00412DEC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00412DED FF1510D64B00            Call dword ptr [004BD610]
:00412DF3 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00412DF4 FF1514D64B00            Call dword ptr [004BD614]
:00412DFA E9F7020000              jmp 004130F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412DCB(U)
|
:00412DFF E9F2020000              jmp 004130F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412BAF(C)
|
:00412E04 837DF412                cmp dword ptr [ebp-0C], 00000012
:00412E08 757F                    jne 00412E89
:00412E0A 68F4010000              push 000001F4
:00412E0F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412E12 6BC950                  imul ecx, 00000050
:00412E15 81C1787F4900            add ecx, 00497F78
:00412E1B E850680000              call 00419670
:00412E20 8AD8                    mov bl, al
:00412E22 81E3FF000000            and ebx, 000000FF
:00412E28 8B4D10                  mov ecx, dword ptr [ebp+10]
:00412E2B 6BC922                  imul ecx, 00000022
:00412E2E 81C1D0474900            add ecx, 004947D0
:00412E34 E82704FFFF              call 00403260
:00412E39 25FF000000              and eax, 000000FF
:00412E3E 03D8                    add ebx, eax
:00412E40 53                      push ebx
:00412E41 6A00                    push 00000000
:00412E43 E8610A0100              call 004238A9
:00412E48 83C40C                  add esp, 0000000C
:00412E4B 8945F0                  mov dword ptr [ebp-10], eax
:00412E4E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412E51 6BC950                  imul ecx, 00000050
:00412E54 81C1787F4900            add ecx, 00497F78
:00412E5A E8F2EEFEFF              call 00401D51
:00412E5F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00412E62 2BC8                    sub ecx, eax
:00412E64 51                      push ecx
:00412E65 8B55F0                  mov edx, dword ptr [ebp-10]
:00412E68 52                      push edx
:00412E69 68A6040000              push 000004A6
:00412E6E 688F040000              push 0000048F
:00412E73 6892040000              push 00000492
:00412E78 8B4508                  mov eax, dword ptr [ebp+08]
:00412E7B 50                      push eax
:00412E7C E8C7620000              call 00419148
:00412E81 83C418                  add esp, 00000018
:00412E84 E96D020000              jmp 004130F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412E08(C)
|
:00412E89 837DF413                cmp dword ptr [ebp-0C], 00000013
:00412E8D 757F                    jne 00412F0E
:00412E8F 68F4010000              push 000001F4
:00412E94 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412E97 6BC950                  imul ecx, 00000050
:00412E9A 81C1787F4900            add ecx, 00497F78
:00412EA0 E8EB670000              call 00419690
:00412EA5 8AD8                    mov bl, al
:00412EA7 81E3FF000000            and ebx, 000000FF
:00412EAD 8B4D10                  mov ecx, dword ptr [ebp+10]
:00412EB0 6BC922                  imul ecx, 00000022
:00412EB3 81C1D0474900            add ecx, 004947D0
:00412EB9 E8A203FFFF              call 00403260
:00412EBE 25FF000000              and eax, 000000FF
:00412EC3 03D8                    add ebx, eax
:00412EC5 53                      push ebx
:00412EC6 6A00                    push 00000000
:00412EC8 E8DC090100              call 004238A9
:00412ECD 83C40C                  add esp, 0000000C
:00412ED0 8945F0                  mov dword ptr [ebp-10], eax
:00412ED3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412ED6 6BC950                  imul ecx, 00000050
:00412ED9 81C1787F4900            add ecx, 00497F78
:00412EDF E8A0EEFEFF              call 00401D84
:00412EE4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00412EE7 2BC8                    sub ecx, eax
:00412EE9 51                      push ecx
:00412EEA 8B55F0                  mov edx, dword ptr [ebp-10]
:00412EED 52                      push edx
:00412EEE 68A6040000              push 000004A6
:00412EF3 688E040000              push 0000048E
:00412EF8 6893040000              push 00000493
:00412EFD 8B4508                  mov eax, dword ptr [ebp+08]
:00412F00 50                      push eax
:00412F01 E842620000              call 00419148
:00412F06 83C418                  add esp, 00000018
:00412F09 E9E8010000              jmp 004130F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412E8D(C)
|
:00412F0E 837DF414                cmp dword ptr [ebp-0C], 00000014
:00412F12 757F                    jne 00412F93
:00412F14 68F4010000              push 000001F4
:00412F19 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412F1C 6BC950                  imul ecx, 00000050
:00412F1F 81C1787F4900            add ecx, 00497F78
:00412F25 E886670000              call 004196B0
:00412F2A 8AD8                    mov bl, al
:00412F2C 81E3FF000000            and ebx, 000000FF
:00412F32 8B4D10                  mov ecx, dword ptr [ebp+10]
:00412F35 6BC922                  imul ecx, 00000022
:00412F38 81C1D0474900            add ecx, 004947D0
:00412F3E E81D03FFFF              call 00403260
:00412F43 25FF000000              and eax, 000000FF
:00412F48 03D8                    add ebx, eax
:00412F4A 53                      push ebx
:00412F4B 6A00                    push 00000000
:00412F4D E857090100              call 004238A9
:00412F52 83C40C                  add esp, 0000000C
:00412F55 8945F0                  mov dword ptr [ebp-10], eax
:00412F58 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412F5B 6BC950                  imul ecx, 00000050
:00412F5E 81C1787F4900            add ecx, 00497F78
:00412F64 E84EEEFEFF              call 00401DB7
:00412F69 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00412F6C 2BC8                    sub ecx, eax
:00412F6E 51                      push ecx
:00412F6F 8B55F0                  mov edx, dword ptr [ebp-10]
:00412F72 52                      push edx
:00412F73 68A6040000              push 000004A6
:00412F78 688D040000              push 0000048D
:00412F7D 6894040000              push 00000494
:00412F82 8B4508                  mov eax, dword ptr [ebp+08]
:00412F85 50                      push eax
:00412F86 E8BD610000              call 00419148
:00412F8B 83C418                  add esp, 00000018
:00412F8E E963010000              jmp 004130F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412F12(C)
|
:00412F93 837DF415                cmp dword ptr [ebp-0C], 00000015
:00412F97 7579                    jne 00413012
:00412F99 68E8030000              push 000003E8
:00412F9E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412FA1 6BC950                  imul ecx, 00000050
:00412FA4 81C1787F4900            add ecx, 00497F78
:00412FAA E8217C0400              call 0045ABD0
:00412FAF 8BF0                    mov esi, eax
:00412FB1 8B4D10                  mov ecx, dword ptr [ebp+10]
:00412FB4 6BC922                  imul ecx, 00000022
:00412FB7 81C1D0474900            add ecx, 004947D0
:00412FBD E89E02FFFF              call 00403260
:00412FC2 25FF000000              and eax, 000000FF
:00412FC7 03F0                    add esi, eax
:00412FC9 56                      push esi
:00412FCA 6A00                    push 00000000
:00412FCC E8D8080100              call 004238A9
:00412FD1 83C40C                  add esp, 0000000C
:00412FD4 8945F0                  mov dword ptr [ebp-10], eax
:00412FD7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00412FDA 6BC950                  imul ecx, 00000050
:00412FDD 81C1787F4900            add ecx, 00497F78
:00412FE3 E802EEFEFF              call 00401DEA
:00412FE8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00412FEB 2BC8                    sub ecx, eax
:00412FED 51                      push ecx
:00412FEE 8B55F0                  mov edx, dword ptr [ebp-10]
:00412FF1 52                      push edx
:00412FF2 68A6040000              push 000004A6
:00412FF7 6888040000              push 00000488
:00412FFC 688A040000              push 0000048A
:00413001 8B4508                  mov eax, dword ptr [ebp+08]
:00413004 50                      push eax
:00413005 E83E610000              call 00419148
:0041300A 83C418                  add esp, 00000018
:0041300D E9E4000000              jmp 004130F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00412F97(C)
|
:00413012 837DF416                cmp dword ptr [ebp-0C], 00000016
:00413016 757C                    jne 00413094
:00413018 68F4010000              push 000001F4
:0041301D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00413020 6BC950                  imul ecx, 00000050
:00413023 81C1787F4900            add ecx, 00497F78
:00413029 E8A2660000              call 004196D0
:0041302E 8AD8                    mov bl, al
:00413030 81E3FF000000            and ebx, 000000FF
:00413036 8B4D10                  mov ecx, dword ptr [ebp+10]
:00413039 6BC922                  imul ecx, 00000022
:0041303C 81C1D0474900            add ecx, 004947D0
:00413042 E81902FFFF              call 00403260
:00413047 25FF000000              and eax, 000000FF
:0041304C 03D8                    add ebx, eax
:0041304E 53                      push ebx
:0041304F 6A00                    push 00000000
:00413051 E853080100              call 004238A9
:00413056 83C40C                  add esp, 0000000C
:00413059 8945F0                  mov dword ptr [ebp-10], eax
:0041305C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041305F 6BC950                  imul ecx, 00000050
:00413062 81C1787F4900            add ecx, 00497F78
:00413068 E8AEEDFEFF              call 00401E1B
:0041306D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00413070 2BC8                    sub ecx, eax
:00413072 51                      push ecx
:00413073 8B55F0                  mov edx, dword ptr [ebp-10]
:00413076 52                      push edx
:00413077 68A6040000              push 000004A6
:0041307C 6889040000              push 00000489
:00413081 688B040000              push 0000048B
:00413086 8B4508                  mov eax, dword ptr [ebp+08]
:00413089 50                      push eax
:0041308A E8B9600000              call 00419148
:0041308F 83C418                  add esp, 00000018
:00413092 EB62                    jmp 004130F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413016(C)
|
:00413094 837DF425                cmp dword ptr [ebp-0C], 00000025
:00413098 722F                    jb 004130C9
:0041309A 6A00                    push 00000000
:0041309C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041309F 51                      push ecx
:004130A0 8B5508                  mov edx, dword ptr [ebp+08]
:004130A3 52                      push edx
:004130A4 E894430000              call 0041743D
:004130A9 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"S"
                                  |
:004130AC 68D0C64700              push 0047C6D0
:004130B1 68A6040000              push 000004A6
:004130B6 8B4508                  mov eax, dword ptr [ebp+08]
:004130B9 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004130BA FF1510D64B00            Call dword ptr [004BD610]
:004130C0 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004130C1 FF1514D64B00            Call dword ptr [004BD614]
:004130C7 EB2D                    jmp 004130F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413098(C)
|
:004130C9 6A00                    push 00000000
:004130CB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004130CE 51                      push ecx
:004130CF 8B5508                  mov edx, dword ptr [ebp+08]
:004130D2 52                      push edx
:004130D3 E865430000              call 0041743D
:004130D8 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:004130DB 68DCC64700              push 0047C6DC
:004130E0 68A6040000              push 000004A6
:004130E5 8B4508                  mov eax, dword ptr [ebp+08]
:004130E8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004130E9 FF1510D64B00            Call dword ptr [004BD610]
:004130EF 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004130F0 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00412DFA(U), :00412DFF(U), :00412E84(U), :00412F09(U), :00412F8E(U)
|:0041300D(U), :00413092(U), :004130C7(U)
|
:004130F6 5E                      pop esi
:004130F7 5B                      pop ebx
:004130F8 8BE5                    mov esp, ebp
:004130FA 5D                      pop ebp
:004130FB C3                      ret



* Referenced by a CALL at Address:
|:0041289C   
|
:004130FC 55                      push ebp
:004130FD 8BEC                    mov ebp, esp
:004130FF 51                      push ecx
:00413100 8B4510                  mov eax, dword ptr [ebp+10]
:00413103 8178043B040000          cmp dword ptr [eax+04], 0000043B
:0041310A 751A                    jne 00413126
:0041310C 683E040000              push 0000043E
:00413111 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413114 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413115 FF1510D64B00            Call dword ptr [004BD610]
:0041311B 50                      push eax
:0041311C E812F9FFFF              call 00412A33
:00413121 83C404                  add esp, 00000004
:00413124 EB18                    jmp 0041313E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041310A(C)
|

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:00413126 683B040000              push 0000043B
:0041312B 8B5508                  mov edx, dword ptr [ebp+08]
:0041312E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041312F FF1510D64B00            Call dword ptr [004BD610]
:00413135 50                      push eax
:00413136 E8F8F8FFFF              call 00412A33
:0041313B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413124(U)
|
:0041313E 8B4510                  mov eax, dword ptr [ebp+10]
:00413141 8B08                    mov ecx, dword ptr [eax]
:00413143 51                      push ecx
:00413144 E87A5F0000              call 004190C3
:00413149 83C404                  add esp, 00000004
:0041314C 8945FC                  mov dword ptr [ebp-04], eax
:0041314F 837DFC00                cmp dword ptr [ebp-04], 00000000
:00413153 7D0E                    jge 00413163
:00413155 8B5508                  mov edx, dword ptr [ebp+08]
:00413158 52                      push edx
:00413159 E8BBF9FFFF              call 00412B19
:0041315E 83C404                  add esp, 00000004
:00413161 EB52                    jmp 004131B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413153(C)
|

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:00413163 683B040000              push 0000043B
:00413168 8B4508                  mov eax, dword ptr [ebp+08]
:0041316B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041316C FF1510D64B00            Call dword ptr [004BD610]
:00413172 8B4D10                  mov ecx, dword ptr [ebp+10]
:00413175 3901                    cmp dword ptr [ecx], eax
:00413177 7514                    jne 0041318D
:00413179 8B55FC                  mov edx, dword ptr [ebp-04]
:0041317C 52                      push edx
:0041317D 8B4510                  mov eax, dword ptr [ebp+10]
:00413180 8B08                    mov ecx, dword ptr [eax]
:00413182 51                      push ecx
:00413183 E832630000              call 004194BA
:00413188 83C408                  add esp, 00000008
:0041318B EB28                    jmp 004131B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413177(C)
|
:0041318D 683E040000              push 0000043E
:00413192 8B5508                  mov edx, dword ptr [ebp+08]
:00413195 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413196 FF1510D64B00            Call dword ptr [004BD610]
:0041319C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041319F 3901                    cmp dword ptr [ecx], eax
:004131A1 7512                    jne 004131B5
:004131A3 8B55FC                  mov edx, dword ptr [ebp-04]
:004131A6 52                      push edx
:004131A7 8B4510                  mov eax, dword ptr [ebp+10]
:004131AA 8B08                    mov ecx, dword ptr [eax]
:004131AC 51                      push ecx
:004131AD E808630000              call 004194BA
:004131B2 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413161(U), :0041318B(U), :004131A1(C)
|
:004131B5 8BE5                    mov esp, ebp
:004131B7 5D                      pop ebp
:004131B8 C3                      ret



* Referenced by a CALL at Address:
|:00412788   
|
:004131B9 55                      push ebp
:004131BA 8BEC                    mov ebp, esp
:004131BC 83EC08                  sub esp, 00000008
:004131BF 8B4510                  mov eax, dword ptr [ebp+10]
:004131C2 25FFFF0000              and eax, 0000FFFF
:004131C7 8945F8                  mov dword ptr [ebp-08], eax
:004131CA 817DF83D040000          cmp dword ptr [ebp-08], 0000043D
:004131D1 7F14                    jg 004131E7
:004131D3 817DF83D040000          cmp dword ptr [ebp-08], 0000043D
:004131DA 744D                    je 00413229
:004131DC 837DF802                cmp dword ptr [ebp-08], 00000002
:004131E0 7431                    je 00413213
:004131E2 E968010000              jmp 0041334F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004131D1(C)
|
:004131E7 817DF83F040000          cmp dword ptr [ebp-08], 0000043F
:004131EE 0F844E010000            je 00413342
:004131F4 817DF858040000          cmp dword ptr [ebp-08], 00000458
:004131FB 0F8497000000            je 00413298
:00413201 817DF859040000          cmp dword ptr [ebp-08], 00000459
:00413208 0F84DF000000            je 004132ED
:0041320E E93C010000              jmp 0041334F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004131E0(C)
|
:00413213 6A01                    push 00000001
:00413215 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413218 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00413219 FF15D8D54B00            Call dword ptr [004BD5D8]
:0041321F B801000000              mov eax, 00000001
:00413224 E928010000              jmp 00413351

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004131DA(C)
|
:00413229 8B550C                  mov edx, dword ptr [ebp+0C]
:0041322C 81E2FFFF0000            and edx, 0000FFFF
:00413232 83FA09                  cmp edx, 00000009
:00413235 7557                    jne 0041328E
:00413237 8B4514                  mov eax, dword ptr [ebp+14]
:0041323A 50                      push eax
:0041323B E815010000              call 00413355
:00413240 83C404                  add esp, 00000004
:00413243 8945FC                  mov dword ptr [ebp-04], eax
:00413246 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00413249 51                      push ecx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:0041324A 683B040000              push 0000043B
:0041324F 8B5508                  mov edx, dword ptr [ebp+08]
:00413252 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413253 FF1510D64B00            Call dword ptr [004BD610]
:00413259 50                      push eax
:0041325A E858250000              call 004157B7
:0041325F 83C408                  add esp, 00000008
:00413262 6866040000              push 00000466
:00413267 8B4508                  mov eax, dword ptr [ebp+08]
:0041326A 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041326B FF1510D64B00            Call dword ptr [004BD610]
:00413271 50                      push eax
:00413272 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00413275 51                      push ecx
:00413276 8B5508                  mov edx, dword ptr [ebp+08]
:00413279 52                      push edx
:0041327A E88E5E0000              call 0041910D
:0041327F 83C40C                  add esp, 0000000C
:00413282 8B4508                  mov eax, dword ptr [ebp+08]
:00413285 50                      push eax
:00413286 E88EF8FFFF              call 00412B19
:0041328B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413235(C)
|
:0041328E B801000000              mov eax, 00000001
:00413293 E9B9000000              jmp 00413351

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004131FB(C)
|
:00413298 8B4D18                  mov ecx, dword ptr [ebp+18]
:0041329B C60100                  mov byte ptr [ecx], 00
:0041329E 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:004132A0 683B040000              push 0000043B
:004132A5 8B5508                  mov edx, dword ptr [ebp+08]
:004132A8 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004132A9 FF1510D64B00            Call dword ptr [004BD610]
:004132AF 50                      push eax
:004132B0 8B4508                  mov eax, dword ptr [ebp+08]
:004132B3 50                      push eax
:004132B4 E8CD5D0000              call 00419086
:004132B9 83C40C                  add esp, 0000000C
:004132BC 6A00                    push 00000000
:004132BE 683E040000              push 0000043E
:004132C3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004132C6 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004132C7 FF1510D64B00            Call dword ptr [004BD610]
:004132CD 50                      push eax
:004132CE 8B5508                  mov edx, dword ptr [ebp+08]
:004132D1 52                      push edx
:004132D2 E8AF5D0000              call 00419086
:004132D7 83C40C                  add esp, 0000000C
:004132DA 8B4508                  mov eax, dword ptr [ebp+08]
:004132DD 50                      push eax
:004132DE E836F8FFFF              call 00412B19
:004132E3 83C404                  add esp, 00000004
:004132E6 B801000000              mov eax, 00000001
:004132EB EB64                    jmp 00413351

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413208(C)
|
:004132ED 8B4D18                  mov ecx, dword ptr [ebp+18]
:004132F0 C60101                  mov byte ptr [ecx], 01
:004132F3 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:004132F5 683B040000              push 0000043B
:004132FA 8B5508                  mov edx, dword ptr [ebp+08]
:004132FD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004132FE FF1510D64B00            Call dword ptr [004BD610]
:00413304 50                      push eax
:00413305 8B4508                  mov eax, dword ptr [ebp+08]
:00413308 50                      push eax
:00413309 E8785D0000              call 00419086
:0041330E 83C40C                  add esp, 0000000C
:00413311 6A01                    push 00000001
:00413313 683E040000              push 0000043E
:00413318 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041331B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041331C FF1510D64B00            Call dword ptr [004BD610]
:00413322 50                      push eax
:00413323 8B5508                  mov edx, dword ptr [ebp+08]
:00413326 52                      push edx
:00413327 E85A5D0000              call 00419086
:0041332C 83C40C                  add esp, 0000000C
:0041332F 8B4508                  mov eax, dword ptr [ebp+08]
:00413332 50                      push eax
:00413333 E8E1F7FFFF              call 00412B19
:00413338 83C404                  add esp, 00000004
:0041333B B801000000              mov eax, 00000001
:00413340 EB0F                    jmp 00413351

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004131EE(C)
|
:00413342 6848080000              push 00000848
:00413347 E87F670500              call 00469ACB
:0041334C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004131E2(U), :0041320E(U)
|
:0041334F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413224(U), :00413293(U), :004132EB(U), :00413340(U)
|
:00413351 8BE5                    mov esp, ebp
:00413353 5D                      pop ebp
:00413354 C3                      ret



* Referenced by a CALL at Addresses:
|:004128F9   , :00412B2D   , :0041323B   , :00413471   , :004136BB   
|:004138BE   , :00413FB2   , :00413FCD   , :0041416E   , :00414189   
|:00414DE0   , :00414DEF   , :00414ECC   , :00414EF3   , :004154BF   
|:004154CE   , :00415D6E   , :00415FC5   , :004168F0   , :00416AC0   
|:00416C40   , :00416F4D   , :00418CEC   , :00418D1A   , :00418D48   
|:00418D73   , :00418DB0   , :00462604   , :0046268B   , :004626FC   
|:00463086   , :004630B8   
|
:00413355 55                      push ebp
:00413356 8BEC                    mov ebp, esp
:00413358 51                      push ecx
:00413359 6A00                    push 00000000
:0041335B 6A00                    push 00000000
:0041335D 6847010000              push 00000147
:00413362 8B4508                  mov eax, dword ptr [ebp+08]
:00413365 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00413366 FF1504D64B00            Call dword ptr [004BD604]
:0041336C 8945FC                  mov dword ptr [ebp-04], eax
:0041336F 6A00                    push 00000000
:00413371 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00413374 51                      push ecx
:00413375 6850010000              push 00000150
:0041337A 8B5508                  mov edx, dword ptr [ebp+08]
:0041337D 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041337E FF1504D64B00            Call dword ptr [004BD604]
:00413384 8BE5                    mov esp, ebp
:00413386 5D                      pop ebp
:00413387 C3                      ret



* Referenced by a CALL at Address:
|:004127AD   
|
:00413388 55                      push ebp
:00413389 8BEC                    mov ebp, esp
:0041338B 83EC64                  sub esp, 00000064
:0041338E 8B4510                  mov eax, dword ptr [ebp+10]
:00413391 8B08                    mov ecx, dword ptr [eax]
:00413393 894DEC                  mov dword ptr [ebp-14], ecx
:00413396 683D040000              push 0000043D
:0041339B 8B5508                  mov edx, dword ptr [ebp+08]
:0041339E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041339F FF1510D64B00            Call dword ptr [004BD610]
:004133A5 8945E4                  mov dword ptr [ebp-1C], eax
:004133A8 8B4510                  mov eax, dword ptr [ebp+10]
:004133AB 8B480C                  mov ecx, dword ptr [eax+0C]
:004133AE 894DE8                  mov dword ptr [ebp-18], ecx
:004133B1 6A00                    push 00000000
:004133B3 6A00                    push 00000000
:004133B5 68F0000000              push 000000F0
:004133BA 6858040000              push 00000458
:004133BF 8B5508                  mov edx, dword ptr [ebp+08]
:004133C2 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:004133C3 FF15D4D54B00            Call dword ptr [004BD5D4]
:004133C9 8945F0                  mov dword ptr [ebp-10], eax
:004133CC 8B4514                  mov eax, dword ptr [ebp+14]
:004133CF 25FFFF0000              and eax, 0000FFFF
:004133D4 8945F8                  mov dword ptr [ebp-08], eax
:004133D7 8B4D14                  mov ecx, dword ptr [ebp+14]
:004133DA C1E910                  shr ecx, 10
:004133DD 81E1FFFF0000            and ecx, 0000FFFF
:004133E3 81E1FFFF0000            and ecx, 0000FFFF
:004133E9 894DF4                  mov dword ptr [ebp-0C], ecx
:004133EC 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004133F0 7507                    jne 004133F9
:004133F2 33C0                    xor eax, eax
:004133F4 E952020000              jmp 0041364B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004133F0(C)
|
:004133F9 8B55F4                  mov edx, dword ptr [ebp-0C]
:004133FC 52                      push edx
:004133FD 8B45F8                  mov eax, dword ptr [ebp-08]
:00413400 50                      push eax
:00413401 682C050000              push 0000052C
:00413406 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413409 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041340A FF1510D64B00            Call dword ptr [004BD610]
:00413410 50                      push eax
:00413411 8B5508                  mov edx, dword ptr [ebp+08]
:00413414 52                      push edx
:00413415 E8AF610000              call 004195C9
:0041341A 83C410                  add esp, 00000010
:0041341D 85C0                    test eax, eax
:0041341F 746D                    je 0041348E
:00413421 8B45E8                  mov eax, dword ptr [ebp-18]
:00413424 50                      push eax
:00413425 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00413428 51                      push ecx
:00413429 E82E5E0000              call 0041925C
:0041342E 83C408                  add esp, 00000008
:00413431 8BC8                    mov ecx, eax
:00413433 6BC922                  imul ecx, 00000022
:00413436 81C1D0474900            add ecx, 004947D0
:0041343C E8AF22FFFF              call 004056F0
:00413441 50                      push eax

* Possible StringData Ref from Data Obj ->"˱%sܡH"
                                  |
:00413442 68E8C64700              push 0047C6E8
:00413447 8D55A4                  lea edx, dword ptr [ebp-5C]
:0041344A 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0041344B FF1504D74B00            Call dword ptr [004BD704]
:00413451 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"T{_"
                                  |
:00413454 68F4C64700              push 0047C6F4
:00413459 8D45A4                  lea eax, dword ptr [ebp-5C]
:0041345C 50                      push eax
:0041345D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413460 51                      push ecx
:00413461 E8C54C0000              call 0041812B
:00413466 83C40C                  add esp, 0000000C
:00413469 85C0                    test eax, eax
:0041346B 7421                    je 0041348E
:0041346D 8B55E4                  mov edx, dword ptr [ebp-1C]
:00413470 52                      push edx
:00413471 E8DFFEFFFF              call 00413355
:00413476 83C404                  add esp, 00000004
:00413479 50                      push eax
:0041347A 8B45E8                  mov eax, dword ptr [ebp-18]
:0041347D 50                      push eax
:0041347E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00413481 51                      push ecx
:00413482 8B5508                  mov edx, dword ptr [ebp+08]
:00413485 52                      push edx
:00413486 E856600000              call 004194E1
:0041348B 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041341F(C), :0041346B(C)
|

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:0041348E 683B040000              push 0000043B
:00413493 683E040000              push 0000043E
:00413498 8B4514                  mov eax, dword ptr [ebp+14]
:0041349B 50                      push eax
:0041349C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041349F 51                      push ecx
:004134A0 8B5508                  mov edx, dword ptr [ebp+08]
:004134A3 52                      push edx
:004134A4 E88B1B0000              call 00415034
:004134A9 83C414                  add esp, 00000014
:004134AC 83F801                  cmp eax, 00000001
:004134AF 0F855D010000            jne 00413612
:004134B5 8B4510                  mov eax, dword ptr [ebp+10]
:004134B8 8178043E040000          cmp dword ptr [eax+04], 0000043E
:004134BF 0F85A9000000            jne 0041356E

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:004134C5 683B040000              push 0000043B
:004134CA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004134CD 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004134CE FF1510D64B00            Call dword ptr [004BD610]
:004134D4 8945FC                  mov dword ptr [ebp-04], eax
:004134D7 8B55F0                  mov edx, dword ptr [ebp-10]
:004134DA 52                      push edx
:004134DB 8B4510                  mov eax, dword ptr [ebp+10]
:004134DE 50                      push eax
:004134DF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004134E2 51                      push ecx
:004134E3 8B55E4                  mov edx, dword ptr [ebp-1C]
:004134E6 52                      push edx
:004134E7 E8A7010000              call 00413693
:004134EC 83C410                  add esp, 00000010
:004134EF 85C0                    test eax, eax
:004134F1 7476                    je 00413569
:004134F3 8B45E8                  mov eax, dword ptr [ebp-18]
:004134F6 50                      push eax
:004134F7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004134FA 51                      push ecx
:004134FB E8715F0000              call 00419471
:00413500 83C408                  add esp, 00000008
:00413503 6A00                    push 00000000
:00413505 8B55E8                  mov edx, dword ptr [ebp-18]
:00413508 52                      push edx
:00413509 6808100000              push 00001008
:0041350E 8B45EC                  mov eax, dword ptr [ebp-14]
:00413511 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00413512 FF1504D64B00            Call dword ptr [004BD604]
:00413518 6A00                    push 00000000
:0041351A 6A00                    push 00000000
:0041351C 6804100000              push 00001004
:00413521 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00413524 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00413525 FF1504D64B00            Call dword ptr [004BD604]
:0041352B 83E801                  sub eax, 00000001
:0041352E 3B45E8                  cmp eax, dword ptr [ebp-18]
:00413531 7D1B                    jge 0041354E
:00413533 6A00                    push 00000000
:00413535 6A00                    push 00000000
:00413537 6804100000              push 00001004
:0041353C 8B55EC                  mov edx, dword ptr [ebp-14]
:0041353F 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00413540 FF1504D64B00            Call dword ptr [004BD604]
:00413546 83E801                  sub eax, 00000001
:00413549 8945A0                  mov dword ptr [ebp-60], eax
:0041354C EB06                    jmp 00413554

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413531(C)
|
:0041354E 8B45E8                  mov eax, dword ptr [ebp-18]
:00413551 8945A0                  mov dword ptr [ebp-60], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041354C(U)
|
:00413554 6A00                    push 00000000
:00413556 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00413559 51                      push ecx
:0041355A 6813100000              push 00001013
:0041355F 8B55EC                  mov edx, dword ptr [ebp-14]
:00413562 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00413563 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004134F1(C)
|
:00413569 E9A4000000              jmp 00413612

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004134BF(C)
|
:0041356E 683E040000              push 0000043E
:00413573 8B4508                  mov eax, dword ptr [ebp+08]
:00413576 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413577 FF1510D64B00            Call dword ptr [004BD610]
:0041357D 8945FC                  mov dword ptr [ebp-04], eax
:00413580 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00413583 51                      push ecx
:00413584 8B5510                  mov edx, dword ptr [ebp+10]
:00413587 52                      push edx
:00413588 8B45FC                  mov eax, dword ptr [ebp-04]
:0041358B 50                      push eax
:0041358C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041358F 51                      push ecx
:00413590 E819030000              call 004138AE
:00413595 83C410                  add esp, 00000010
:00413598 85C0                    test eax, eax
:0041359A 7476                    je 00413612
:0041359C 8B55E8                  mov edx, dword ptr [ebp-18]
:0041359F 52                      push edx
:004135A0 8B45EC                  mov eax, dword ptr [ebp-14]
:004135A3 50                      push eax
:004135A4 E8C85E0000              call 00419471
:004135A9 83C408                  add esp, 00000008
:004135AC 6A00                    push 00000000
:004135AE 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004135B1 51                      push ecx
:004135B2 6808100000              push 00001008
:004135B7 8B55EC                  mov edx, dword ptr [ebp-14]
:004135BA 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004135BB FF1504D64B00            Call dword ptr [004BD604]
:004135C1 6A00                    push 00000000
:004135C3 6A00                    push 00000000
:004135C5 6804100000              push 00001004
:004135CA 8B45EC                  mov eax, dword ptr [ebp-14]
:004135CD 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004135CE FF1504D64B00            Call dword ptr [004BD604]
:004135D4 83E801                  sub eax, 00000001
:004135D7 3B45E8                  cmp eax, dword ptr [ebp-18]
:004135DA 7D1B                    jge 004135F7
:004135DC 6A00                    push 00000000
:004135DE 6A00                    push 00000000
:004135E0 6804100000              push 00001004
:004135E5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004135E8 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004135E9 FF1504D64B00            Call dword ptr [004BD604]
:004135EF 83E801                  sub eax, 00000001
:004135F2 89459C                  mov dword ptr [ebp-64], eax
:004135F5 EB06                    jmp 004135FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004135DA(C)
|
:004135F7 8B55E8                  mov edx, dword ptr [ebp-18]
:004135FA 89559C                  mov dword ptr [ebp-64], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004135F5(U)
|
:004135FD 6A00                    push 00000000
:004135FF 8B459C                  mov eax, dword ptr [ebp-64]
:00413602 50                      push eax
:00413603 6813100000              push 00001013
:00413608 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041360B 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041360C FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004134AF(C), :00413569(U), :0041359A(C)
|

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:00413612 FF1500D44B00            Call dword ptr [004BD400]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:00413618 FF15D4D64B00            Call dword ptr [004BD6D4]
:0041361E 683E040000              push 0000043E
:00413623 8B5508                  mov edx, dword ptr [ebp+08]
:00413626 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413627 FF1510D64B00            Call dword ptr [004BD610]
:0041362D 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@^"
                                  |
:0041362E 68F7030000              push 000003F7
:00413633 8B4508                  mov eax, dword ptr [ebp+08]
:00413636 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413637 FF1510D64B00            Call dword ptr [004BD610]
:0041363D 50                      push eax
:0041363E E80C000000              call 0041364F
:00413643 83C408                  add esp, 00000008
:00413646 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004133F4(U)
|
:0041364B 8BE5                    mov esp, ebp
:0041364D 5D                      pop ebp
:0041364E C3                      ret



* Referenced by a CALL at Addresses:
|:0041363E   , :00413BED   , :004168AA   , :004172FF   
|
:0041364F 55                      push ebp
:00413650 8BEC                    mov ebp, esp
:00413652 83EC54                  sub esp, 00000054
:00413655 6A00                    push 00000000
:00413657 6A00                    push 00000000
:00413659 6804100000              push 00001004
:0041365E 8B450C                  mov eax, dword ptr [ebp+0C]
:00413661 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00413662 FF1504D64B00            Call dword ptr [004BD604]
:00413668 8945AC                  mov dword ptr [ebp-54], eax
:0041366B 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0041366E 51                      push ecx

* Possible StringData Ref from Data Obj ->"ܮwCe%u / 128ӡf"
                                  |
:0041366F 6804C74700              push 0047C704
:00413674 8D55B0                  lea edx, dword ptr [ebp-50]
:00413677 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00413678 FF1504D74B00            Call dword ptr [004BD704]
:0041367E 83C40C                  add esp, 0000000C
:00413681 8D45B0                  lea eax, dword ptr [ebp-50]
:00413684 50                      push eax
:00413685 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413688 51                      push ecx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00413689 FF1514D64B00            Call dword ptr [004BD614]
:0041368F 8BE5                    mov esp, ebp
:00413691 5D                      pop ebp
:00413692 C3                      ret



* Referenced by a CALL at Address:
|:004134E7   
|
:00413693 55                      push ebp
:00413694 8BEC                    mov ebp, esp
:00413696 83EC18                  sub esp, 00000018
:00413699 8B450C                  mov eax, dword ptr [ebp+0C]
:0041369C 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:0041369D FF15C4D64B00            Call dword ptr [004BD6C4]
:004136A3 8945FC                  mov dword ptr [ebp-04], eax
:004136A6 8B4D10                  mov ecx, dword ptr [ebp+10]
:004136A9 8B11                    mov edx, dword ptr [ecx]
:004136AB 8955F0                  mov dword ptr [ebp-10], edx
:004136AE 8B4510                  mov eax, dword ptr [ebp+10]
:004136B1 8B480C                  mov ecx, dword ptr [eax+0C]
:004136B4 894DEC                  mov dword ptr [ebp-14], ecx
:004136B7 8B5508                  mov edx, dword ptr [ebp+08]
:004136BA 52                      push edx
:004136BB E895FCFFFF              call 00413355
:004136C0 83C404                  add esp, 00000004
:004136C3 8945F4                  mov dword ptr [ebp-0C], eax
:004136C6 8B45EC                  mov eax, dword ptr [ebp-14]
:004136C9 50                      push eax
:004136CA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004136CD 51                      push ecx
:004136CE E8895B0000              call 0041925C
:004136D3 83C408                  add esp, 00000008
:004136D6 8945F8                  mov dword ptr [ebp-08], eax
:004136D9 8B55F8                  mov edx, dword ptr [ebp-08]
:004136DC 52                      push edx
:004136DD 8B45F4                  mov eax, dword ptr [ebp-0C]
:004136E0 50                      push eax
:004136E1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004136E4 51                      push ecx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:004136E5 FF15C4D64B00            Call dword ptr [004BD6C4]
:004136EB 50                      push eax
:004136EC E855010000              call 00413846
:004136F1 83C40C                  add esp, 0000000C
:004136F4 85C0                    test eax, eax
:004136F6 0F8493000000            je 0041378F
:004136FC 8B55F4                  mov edx, dword ptr [ebp-0C]
:004136FF 52                      push edx
:00413700 E8C8190000              call 004150CD
:00413705 83C404                  add esp, 00000004
:00413708 8845E8                  mov byte ptr [ebp-18], al
:0041370B 8A45F8                  mov al, byte ptr [ebp-08]
:0041370E 50                      push eax
:0041370F 8A4DE8                  mov cl, byte ptr [ebp-18]
:00413712 51                      push ecx
:00413713 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00413716 6BC950                  imul ecx, 00000050
:00413719 81C1787F4900            add ecx, 00497F78
:0041371F E8DCFAFEFF              call 00403200
:00413724 68FFFF0000              push 0000FFFF
:00413729 8B55EC                  mov edx, dword ptr [ebp-14]
:0041372C 52                      push edx
:0041372D 8B45F0                  mov eax, dword ptr [ebp-10]
:00413730 50                      push eax
:00413731 E8645B0000              call 0041929A
:00413736 83C408                  add esp, 00000008
:00413739 25FF000000              and eax, 000000FF
:0041373E 50                      push eax
:0041373F B978294B00              mov ecx, 004B2978
:00413744 E8371FFFFF              call 00405680
:00413749 8A4DE8                  mov cl, byte ptr [ebp-18]
:0041374C 51                      push ecx
:0041374D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00413750 52                      push edx
:00413751 8B45FC                  mov eax, dword ptr [ebp-04]
:00413754 50                      push eax
:00413755 E83B000000              call 00413795
:0041375A 83C40C                  add esp, 0000000C
:0041375D 6A01                    push 00000001
:0041375F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00413762 51                      push ecx
:00413763 8B55FC                  mov edx, dword ptr [ebp-04]
:00413766 52                      push edx
:00413767 E8D13C0000              call 0041743D
:0041376C 83C40C                  add esp, 0000000C
:0041376F 8B45E8                  mov eax, dword ptr [ebp-18]
:00413772 25FF000000              and eax, 000000FF
:00413777 50                      push eax
:00413778 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041377B 51                      push ecx
:0041377C 8B550C                  mov edx, dword ptr [ebp+0C]
:0041377F 52                      push edx
:00413780 E8D8350000              call 00416D5D
:00413785 83C40C                  add esp, 0000000C
:00413788 B801000000              mov eax, 00000001
:0041378D EB02                    jmp 00413791

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004136F6(C)
|
:0041378F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041378D(U)
|
:00413791 8BE5                    mov esp, ebp
:00413793 5D                      pop ebp
:00413794 C3                      ret



* Referenced by a CALL at Addresses:
|:00413755   , :00414EB2   , :00416967   , :00416CF5   
|
:00413795 55                      push ebp
:00413796 8BEC                    mov ebp, esp
:00413798 83EC44                  sub esp, 00000044
:0041379B 8A4510                  mov al, byte ptr [ebp+10]
:0041379E 50                      push eax
:0041379F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004137A2 6BC950                  imul ecx, 00000050
:004137A5 81C1787F4900            add ecx, 00497F78
:004137AB E830FAFEFF              call 004031E0
:004137B0 25FF000000              and eax, 000000FF
:004137B5 8945FC                  mov dword ptr [ebp-04], eax
:004137B8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004137BB 51                      push ecx
:004137BC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004137BF 6BC950                  imul ecx, 00000050
:004137C2 81C1787F4900            add ecx, 00497F78
:004137C8 E811E2FEFF              call 004019DE
:004137CD 85C0                    test eax, eax
:004137CF 7504                    jne 004137D5
:004137D1 33C0                    xor eax, eax
:004137D3 EB6D                    jmp 00413842

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004137CF(C)
|
:004137D5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004137D8 6BC922                  imul ecx, 00000022
:004137DB 81C1D0474900            add ecx, 004947D0
:004137E1 E80A1FFFFF              call 004056F0
:004137E6 50                      push eax
:004137E7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004137EA 6BC950                  imul ecx, 00000050
:004137ED 81C1787F4900            add ecx, 00497F78
:004137F3 E80CF9FEFF              call 00403104
:004137F8 50                      push eax

* Possible StringData Ref from Data Obj ->"%s˳%sܡH"
                                  |
:004137F9 6820C74700              push 0047C720
:004137FE 8D55BC                  lea edx, dword ptr [ebp-44]
:00413801 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00413802 FF1504D74B00            Call dword ptr [004BD704]
:00413808 83C410                  add esp, 00000010

* Possible StringData Ref from Data Obj ->"T{˳_"
                                  |
:0041380B 6830C74700              push 0047C730
:00413810 8D45BC                  lea eax, dword ptr [ebp-44]
:00413813 50                      push eax
:00413814 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413817 51                      push ecx
:00413818 E80E490000              call 0041812B
:0041381D 83C40C                  add esp, 0000000C
:00413820 85C0                    test eax, eax
:00413822 741C                    je 00413840
:00413824 8A5510                  mov dl, byte ptr [ebp+10]
:00413827 52                      push edx
:00413828 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041382B 6BC950                  imul ecx, 00000050
:0041382E 81C1787F4900            add ecx, 00497F78
:00413834 E89790FFFF              call 0040C8D0
:00413839 B801000000              mov eax, 00000001
:0041383E EB02                    jmp 00413842

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413822(C)
|
:00413840 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004137D3(U), :0041383E(U)
|
:00413842 8BE5                    mov esp, ebp
:00413844 5D                      pop ebp
:00413845 C3                      ret



* Referenced by a CALL at Addresses:
|:004136EC   , :00414E38   , :00416907   , :00416C9D   
|
:00413846 55                      push ebp
:00413847 8BEC                    mov ebp, esp
:00413849 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041384C 6BC922                  imul ecx, 00000022
:0041384F 81C1D0474900            add ecx, 004947D0
:00413855 E806C6FFFF              call 0040FE60
:0041385A 25FF000000              and eax, 000000FF
:0041385F 83F825                  cmp eax, 00000025
:00413862 7C17                    jl 0041387B
:00413864 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"Ƥ"
                                  |
:00413866 6840C74700              push 0047C740
:0041386B 8B4508                  mov eax, dword ptr [ebp+08]
:0041386E 50                      push eax
:0041386F E82B490000              call 0041819F
:00413874 83C40C                  add esp, 0000000C
:00413877 33C0                    xor eax, eax
:00413879 EB31                    jmp 004138AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413862(C)
|
:0041387B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041387E 6BC950                  imul ecx, 00000050
:00413881 81C1787F4900            add ecx, 00497F78
:00413887 E8F6E9FEFF              call 00402282
:0041388C 85C0                    test eax, eax
:0041388E 7407                    je 00413897
:00413890 B801000000              mov eax, 00000001
:00413895 EB15                    jmp 004138AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041388E(C)
|
:00413897 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"AhDF"
                                  |
:00413899 6850C74700              push 0047C750
:0041389E 8B4D08                  mov ecx, dword ptr [ebp+08]
:004138A1 51                      push ecx
:004138A2 E8F8480000              call 0041819F
:004138A7 83C40C                  add esp, 0000000C
:004138AA 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413879(U), :00413895(U)
|
:004138AC 5D                      pop ebp
:004138AD C3                      ret



* Referenced by a CALL at Address:
|:00413590   
|
:004138AE 55                      push ebp
:004138AF 8BEC                    mov ebp, esp
:004138B1 83EC14                  sub esp, 00000014
:004138B4 8B4510                  mov eax, dword ptr [ebp+10]
:004138B7 8945F0                  mov dword ptr [ebp-10], eax
:004138BA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004138BD 51                      push ecx
:004138BE E892FAFFFF              call 00413355
:004138C3 83C404                  add esp, 00000004
:004138C6 8945F8                  mov dword ptr [ebp-08], eax
:004138C9 8B5510                  mov edx, dword ptr [ebp+10]
:004138CC 8B420C                  mov eax, dword ptr [edx+0C]
:004138CF 50                      push eax
:004138D0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004138D3 8B11                    mov edx, dword ptr [ecx]
:004138D5 52                      push edx
:004138D6 E8BF590000              call 0041929A
:004138DB 83C408                  add esp, 00000008
:004138DE 8845F4                  mov byte ptr [ebp-0C], al
:004138E1 8A45F4                  mov al, byte ptr [ebp-0C]
:004138E4 50                      push eax
:004138E5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004138E8 6BC950                  imul ecx, 00000050
:004138EB 81C1787F4900            add ecx, 00497F78
:004138F1 E8EAF8FEFF              call 004031E0
:004138F6 25FF000000              and eax, 000000FF
:004138FB 8945FC                  mov dword ptr [ebp-04], eax
:004138FE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00413901 51                      push ecx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00413902 FF15C4D64B00            Call dword ptr [004BD6C4]
:00413908 50                      push eax
:00413909 E89D000000              call 004139AB
:0041390E 83C404                  add esp, 00000004
:00413911 85C0                    test eax, eax
:00413913 0F848C000000            je 004139A5
:00413919 8A55F4                  mov dl, byte ptr [ebp-0C]
:0041391C 52                      push edx
:0041391D 8B45F8                  mov eax, dword ptr [ebp-08]
:00413920 50                      push eax
:00413921 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00413924 51                      push ecx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00413925 FF15C4D64B00            Call dword ptr [004BD6C4]
:0041392B 50                      push eax
:0041392C E8F0480000              call 00418221
:00413931 83C40C                  add esp, 0000000C
:00413934 85C0                    test eax, eax
:00413936 746D                    je 004139A5
:00413938 E89D000000              call 004139DA
:0041393D 25FF000000              and eax, 000000FF
:00413942 8945EC                  mov dword ptr [ebp-14], eax
:00413945 8B55FC                  mov edx, dword ptr [ebp-04]
:00413948 52                      push edx
:00413949 8B45EC                  mov eax, dword ptr [ebp-14]
:0041394C 50                      push eax
:0041394D B978294B00              mov ecx, 004B2978
:00413952 E8291DFFFF              call 00405680
:00413957 68FF000000              push 000000FF
:0041395C 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0041395F 51                      push ecx
:00413960 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413963 6BC950                  imul ecx, 00000050
:00413966 81C1787F4900            add ecx, 00497F78
:0041396C E88FF8FEFF              call 00403200
:00413971 6A01                    push 00000001
:00413973 8B55F8                  mov edx, dword ptr [ebp-08]
:00413976 52                      push edx
:00413977 8B450C                  mov eax, dword ptr [ebp+0C]
:0041397A 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:0041397B FF15C4D64B00            Call dword ptr [004BD6C4]
:00413981 50                      push eax
:00413982 E8B63A0000              call 0041743D
:00413987 83C40C                  add esp, 0000000C
:0041398A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041398D 51                      push ecx
:0041398E 8B55FC                  mov edx, dword ptr [ebp-04]
:00413991 52                      push edx
:00413992 8B450C                  mov eax, dword ptr [ebp+0C]
:00413995 50                      push eax
:00413996 E8C2330000              call 00416D5D
:0041399B 83C40C                  add esp, 0000000C
:0041399E B801000000              mov eax, 00000001
:004139A3 EB02                    jmp 004139A7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413913(C), :00413936(C)
|
:004139A5 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004139A3(U)
|
:004139A7 8BE5                    mov esp, ebp
:004139A9 5D                      pop ebp
:004139AA C3                      ret



* Referenced by a CALL at Addresses:
|:00413909   , :0041698D   , :00416B12   
|
:004139AB 55                      push ebp
:004139AC 8BEC                    mov ebp, esp
:004139AE B978294B00              mov ecx, 004B2978
:004139B3 E8120CFFFF              call 004045CA
:004139B8 85C0                    test eax, eax
:004139BA 7407                    je 004139C3
:004139BC B801000000              mov eax, 00000001
:004139C1 EB15                    jmp 004139D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004139BA(C)
|
:004139C3 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"AhF"
                                  |
:004139C5 6868C74700              push 0047C768
:004139CA 8B4508                  mov eax, dword ptr [ebp+08]
:004139CD 50                      push eax
:004139CE E8CC470000              call 0041819F
:004139D3 83C40C                  add esp, 0000000C
:004139D6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004139C1(U)
|
:004139D8 5D                      pop ebp
:004139D9 C3                      ret



* Referenced by a CALL at Addresses:
|:00413938   , :004169B1   , :00416B3A   
|
:004139DA 55                      push ebp
:004139DB 8BEC                    mov ebp, esp
:004139DD 51                      push ecx
:004139DE C745FC00000000          mov [ebp-04], 00000000
:004139E5 EB09                    jmp 004139F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413A18(U)
|
:004139E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004139EA 83C001                  add eax, 00000001
:004139ED 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004139E5(U)
|
:004139F0 817DFC80000000          cmp dword ptr [ebp-04], 00000080
:004139F7 7D21                    jge 00413A1A
:004139F9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004139FC 51                      push ecx
:004139FD B978294B00              mov ecx, 004B2978
:00413A02 E8295D0000              call 00419730
:00413A07 25FFFF0000              and eax, 0000FFFF
:00413A0C 3DFFFF0000              cmp eax, 0000FFFF
:00413A11 7505                    jne 00413A18
:00413A13 8A45FC                  mov al, byte ptr [ebp-04]
:00413A16 EB04                    jmp 00413A1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413A11(C)
|
:00413A18 EBCD                    jmp 004139E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004139F7(C)
|
:00413A1A 32C0                    xor al, al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413A16(U)
|
:00413A1C 8BE5                    mov esp, ebp
:00413A1E 5D                      pop ebp
:00413A1F C3                      ret



* Referenced by a CALL at Address:
|:004126FF   
|
:00413A20 55                      push ebp
:00413A21 8BEC                    mov ebp, esp
:00413A23 83EC14                  sub esp, 00000014
:00413A26 8B450C                  mov eax, dword ptr [ebp+0C]
:00413A29 25FF000000              and eax, 000000FF
:00413A2E 85C0                    test eax, eax
:00413A30 755D                    jne 00413A8F
:00413A32 6A00                    push 00000000
:00413A34 6A01                    push 00000001
:00413A36 68F1000000              push 000000F1
:00413A3B 6858040000              push 00000458
:00413A40 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413A43 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413A44 FF1510D64B00            Call dword ptr [004BD610]
:00413A4A 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00413A4B FF1504D64B00            Call dword ptr [004BD604]
:00413A51 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:00413A53 683B040000              push 0000043B
:00413A58 8B5508                  mov edx, dword ptr [ebp+08]
:00413A5B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413A5C FF1510D64B00            Call dword ptr [004BD610]
:00413A62 50                      push eax
:00413A63 8B4508                  mov eax, dword ptr [ebp+08]
:00413A66 50                      push eax
:00413A67 E81A560000              call 00419086
:00413A6C 83C40C                  add esp, 0000000C
:00413A6F 6A00                    push 00000000
:00413A71 683E040000              push 0000043E
:00413A76 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413A79 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413A7A FF1510D64B00            Call dword ptr [004BD610]
:00413A80 50                      push eax
:00413A81 8B5508                  mov edx, dword ptr [ebp+08]
:00413A84 52                      push edx
:00413A85 E8FC550000              call 00419086
:00413A8A 83C40C                  add esp, 0000000C
:00413A8D EB5B                    jmp 00413AEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413A30(C)
|
:00413A8F 6A00                    push 00000000
:00413A91 6A01                    push 00000001
:00413A93 68F1000000              push 000000F1
:00413A98 6859040000              push 00000459
:00413A9D 8B4508                  mov eax, dword ptr [ebp+08]
:00413AA0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413AA1 FF1510D64B00            Call dword ptr [004BD610]
:00413AA7 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00413AA8 FF1504D64B00            Call dword ptr [004BD604]
:00413AAE 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:00413AB0 683B040000              push 0000043B
:00413AB5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413AB8 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413AB9 FF1510D64B00            Call dword ptr [004BD610]
:00413ABF 50                      push eax
:00413AC0 8B5508                  mov edx, dword ptr [ebp+08]
:00413AC3 52                      push edx
:00413AC4 E8BD550000              call 00419086
:00413AC9 83C40C                  add esp, 0000000C
:00413ACC 6A01                    push 00000001
:00413ACE 683E040000              push 0000043E
:00413AD3 8B4508                  mov eax, dword ptr [ebp+08]
:00413AD6 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413AD7 FF1510D64B00            Call dword ptr [004BD610]
:00413ADD 50                      push eax
:00413ADE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413AE1 51                      push ecx
:00413AE2 E89F550000              call 00419086
:00413AE7 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413A8D(U)
|
:00413AEA 683D040000              push 0000043D
:00413AEF 8B5508                  mov edx, dword ptr [ebp+08]
:00413AF2 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413AF3 FF1510D64B00            Call dword ptr [004BD610]
:00413AF9 8945EC                  mov dword ptr [ebp-14], eax
:00413AFC 833DB44D4B0000          cmp dword ptr [004B4DB4], 00000000
:00413B03 740C                    je 00413B11
:00413B05 813DB44D4B0028CF4900    cmp dword ptr [004B4DB4], 0049CF28
:00413B0F 7518                    jne 00413B29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413B03(C)
|
:00413B11 6A00                    push 00000000
:00413B13 6820030000              push 00000320
:00413B18 8B45EC                  mov eax, dword ptr [ebp-14]
:00413B1B 50                      push eax
:00413B1C E8A41D0000              call 004158C5
:00413B21 83C40C                  add esp, 0000000C
:00413B24 8945F4                  mov dword ptr [ebp-0C], eax
:00413B27 EB0F                    jmp 00413B38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413B0F(C)
|
:00413B29 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00413B2C 51                      push ecx
:00413B2D E8DE1E0000              call 00415A10
:00413B32 83C404                  add esp, 00000004
:00413B35 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413B27(U)
|
:00413B38 6866040000              push 00000466
:00413B3D 8B5508                  mov edx, dword ptr [ebp+08]
:00413B40 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413B41 FF1510D64B00            Call dword ptr [004BD610]
:00413B47 50                      push eax
:00413B48 8B45F4                  mov eax, dword ptr [ebp-0C]
:00413B4B 50                      push eax
:00413B4C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413B4F 51                      push ecx
:00413B50 E8B8550000              call 0041910D
:00413B55 83C40C                  add esp, 0000000C
:00413B58 6A01                    push 00000001
:00413B5A 8B55F4                  mov edx, dword ptr [ebp-0C]
:00413B5D 52                      push edx
:00413B5E 8B4508                  mov eax, dword ptr [ebp+08]
:00413B61 50                      push eax
:00413B62 E8D6380000              call 0041743D
:00413B67 83C40C                  add esp, 0000000C
:00413B6A 6A00                    push 00000000
:00413B6C 6A26                    push 00000026
:00413B6E 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00413B71 51                      push ecx
:00413B72 8D55F8                  lea edx, dword ptr [ebp-08]
:00413B75 52                      push edx
:00413B76 8B4508                  mov eax, dword ptr [ebp+08]
:00413B79 50                      push eax
:00413B7A E8E5470000              call 00418364
:00413B7F 83C414                  add esp, 00000014
:00413B82 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00413B85 51                      push ecx
:00413B86 8B55F8                  mov edx, dword ptr [ebp-08]
:00413B89 52                      push edx
:00413B8A E835480000              call 004183C4
:00413B8F 83C408                  add esp, 00000008
:00413B92 8B45FC                  mov eax, dword ptr [ebp-04]
:00413B95 50                      push eax
:00413B96 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413B99 51                      push ecx
:00413B9A 8B55F4                  mov edx, dword ptr [ebp-0C]
:00413B9D 52                      push edx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043B, ""
                                  |
:00413B9E 683B040000              push 0000043B
:00413BA3 8B4508                  mov eax, dword ptr [ebp+08]
:00413BA6 50                      push eax
:00413BA7 E8401B0000              call 004156EC
:00413BAC 83C414                  add esp, 00000014
:00413BAF 683E040000              push 0000043E
:00413BB4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413BB7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413BB8 FF1510D64B00            Call dword ptr [004BD610]
:00413BBE 8945F0                  mov dword ptr [ebp-10], eax
:00413BC1 8B55FC                  mov edx, dword ptr [ebp-04]
:00413BC4 52                      push edx
:00413BC5 8B45F8                  mov eax, dword ptr [ebp-08]
:00413BC8 50                      push eax
:00413BC9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00413BCC 51                      push ecx
:00413BCD 8B5508                  mov edx, dword ptr [ebp+08]
:00413BD0 52                      push edx
:00413BD1 E823000000              call 00413BF9
:00413BD6 83C410                  add esp, 00000010
:00413BD9 8B45F0                  mov eax, dword ptr [ebp-10]
:00413BDC 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@^"
                                  |
:00413BDD 68F7030000              push 000003F7
:00413BE2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413BE5 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413BE6 FF1510D64B00            Call dword ptr [004BD610]
:00413BEC 50                      push eax
:00413BED E85DFAFFFF              call 0041364F
:00413BF2 83C408                  add esp, 00000008
:00413BF5 8BE5                    mov esp, ebp
:00413BF7 5D                      pop ebp
:00413BF8 C3                      ret



* Referenced by a CALL at Addresses:
|:00413BD1   , :004172B3   
|
:00413BF9 55                      push ebp
:00413BFA 8BEC                    mov ebp, esp
:00413BFC 8B450C                  mov eax, dword ptr [ebp+0C]
:00413BFF 50                      push eax
:00413C00 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413C03 51                      push ecx
:00413C04 E88A480000              call 00418493
:00413C09 83C408                  add esp, 00000008
:00413C0C 8B5510                  mov edx, dword ptr [ebp+10]
:00413C0F 52                      push edx
:00413C10 6A01                    push 00000001
:00413C12 6803100000              push 00001003
:00413C17 8B450C                  mov eax, dword ptr [ebp+0C]
:00413C1A 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00413C1B FF1504D64B00            Call dword ptr [004BD604]
:00413C21 8B4D14                  mov ecx, dword ptr [ebp+14]
:00413C24 51                      push ecx
:00413C25 6A00                    push 00000000
:00413C27 6803100000              push 00001003
:00413C2C 8B550C                  mov edx, dword ptr [ebp+0C]
:00413C2F 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00413C30 FF1504D64B00            Call dword ptr [004BD604]
:00413C36 8B450C                  mov eax, dword ptr [ebp+0C]
:00413C39 50                      push eax
:00413C3A E805000000              call 00413C44
:00413C3F 83C404                  add esp, 00000004
:00413C42 5D                      pop ebp
:00413C43 C3                      ret



* Referenced by a CALL at Addresses:
|:00413C3A   , :00418F24   
|
:00413C44 55                      push ebp
:00413C45 8BEC                    mov ebp, esp
:00413C47 83EC30                  sub esp, 00000030
:00413C4A C745D40F000000          mov [ebp-2C], 0000000F
:00413C51 C745E000000000          mov [ebp-20], 00000000
:00413C58 C745E400000000          mov [ebp-1C], 00000000
:00413C5F C745DC00000000          mov [ebp-24], 00000000
:00413C66 C745E8FFFFFFFF          mov [ebp-18], FFFFFFFF
:00413C6D C745EC20000000          mov [ebp-14], 00000020
:00413C74 C745D000000000          mov [ebp-30], 00000000
:00413C7B EB09                    jmp 00413C86

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413CC9(U), :00413CFE(U)
|
:00413C7D 8B45D0                  mov eax, dword ptr [ebp-30]
:00413C80 83C001                  add eax, 00000001
:00413C83 8945D0                  mov dword ptr [ebp-30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413C7B(U)
|
:00413C86 817DD080000000          cmp dword ptr [ebp-30], 00000080
:00413C8D 7D74                    jge 00413D03
:00413C8F 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00413C92 51                      push ecx
:00413C93 B978294B00              mov ecx, 004B2978
:00413C98 E8935A0000              call 00419730
:00413C9D 25FFFF0000              and eax, 0000FFFF
:00413CA2 8945FC                  mov dword ptr [ebp-04], eax
:00413CA5 8B55D0                  mov edx, dword ptr [ebp-30]
:00413CA8 8955D8                  mov dword ptr [ebp-28], edx
:00413CAB 817DFCFFFF0000          cmp dword ptr [ebp-04], 0000FFFF
:00413CB2 7517                    jne 00413CCB
:00413CB4 6A00                    push 00000000
:00413CB6 8B45D0                  mov eax, dword ptr [ebp-30]
:00413CB9 50                      push eax
:00413CBA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413CBD 51                      push ecx
:00413CBE E816560000              call 004192D9
:00413CC3 83C40C                  add esp, 0000000C
:00413CC6 8945F4                  mov dword ptr [ebp-0C], eax
:00413CC9 EBB2                    jmp 00413C7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413CB2(C)
|
:00413CCB C745F0FFFFFFFF          mov [ebp-10], FFFFFFFF
:00413CD2 8B55FC                  mov edx, dword ptr [ebp-04]
:00413CD5 52                      push edx
:00413CD6 8B45D0                  mov eax, dword ptr [ebp-30]
:00413CD9 50                      push eax
:00413CDA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413CDD 51                      push ecx
:00413CDE E8F6550000              call 004192D9
:00413CE3 83C40C                  add esp, 0000000C
:00413CE6 8945F4                  mov dword ptr [ebp-0C], eax
:00413CE9 8D55D4                  lea edx, dword ptr [ebp-2C]
:00413CEC 52                      push edx
:00413CED 6A00                    push 00000000
:00413CEF 6807100000              push 00001007
:00413CF4 8B4508                  mov eax, dword ptr [ebp+08]
:00413CF7 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00413CF8 FF1504D64B00            Call dword ptr [004BD604]
:00413CFE E97AFFFFFF              jmp 00413C7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413C8D(C)
|
:00413D03 8BE5                    mov esp, ebp
:00413D05 5D                      pop ebp
:00413D06 C3                      ret


:00413D07 55                      push ebp
:00413D08 8BEC                    mov ebp, esp
:00413D0A 83EC20                  sub esp, 00000020
:00413D0D 56                      push esi
:00413D0E 57                      push edi
:00413D0F 8B450C                  mov eax, dword ptr [ebp+0C]
:00413D12 8945E4                  mov dword ptr [ebp-1C], eax
:00413D15 837DE410                cmp dword ptr [ebp-1C], 00000010
:00413D19 7719                    ja 00413D34
:00413D1B 837DE410                cmp dword ptr [ebp-1C], 00000010
:00413D1F 0F84C2000000            je 00413DE7
:00413D25 837DE402                cmp dword ptr [ebp-1C], 00000002
:00413D29 0F8491000000            je 00413DC0
:00413D2F E931030000              jmp 00414065

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D19(C)
|
:00413D34 817DE410010000          cmp dword ptr [ebp-1C], 00000110
:00413D3B 7718                    ja 00413D55
:00413D3D 817DE410010000          cmp dword ptr [ebp-1C], 00000110
:00413D44 743B                    je 00413D81
:00413D46 837DE44E                cmp dword ptr [ebp-1C], 0000004E
:00413D4A 0F8467010000            je 00413EB7
:00413D50 E910030000              jmp 00414065

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D3B(C)
|
:00413D55 817DE411010000          cmp dword ptr [ebp-1C], 00000111
:00413D5C 0F8408010000            je 00413E6A
:00413D62 817DE400020000          cmp dword ptr [ebp-1C], 00000200
:00413D69 0F8489000000            je 00413DF8
:00413D6F 817DE402020000          cmp dword ptr [ebp-1C], 00000202
:00413D76 0F84B7000000            je 00413E33
:00413D7C E9E4020000              jmp 00414065

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D44(C)
|
:00413D81 6A40                    push 00000040
:00413D83 6A00                    push 00000000
:00413D85 6860AE4800              push 0048AE60
:00413D8A E841BD0500              call 0046FAD0
:00413D8F 83C40C                  add esp, 0000000C
:00413D92 6A40                    push 00000040
:00413D94 6A00                    push 00000000
:00413D96 68A0AE4800              push 0048AEA0
:00413D9B E830BD0500              call 0046FAD0
:00413DA0 83C40C                  add esp, 0000000C
:00413DA3 8A0D1CB44800            mov cl, byte ptr [0048B41C]
:00413DA9 51                      push ecx
:00413DAA 8B5508                  mov edx, dword ptr [ebp+08]
:00413DAD 52                      push edx
:00413DAE E841170000              call 004154F4
:00413DB3 83C408                  add esp, 00000008
:00413DB6 B801000000              mov eax, 00000001
:00413DBB E9A7020000              jmp 00414067

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D29(C)
|
:00413DC0 6A40                    push 00000040
:00413DC2 6A00                    push 00000000
:00413DC4 6860AE4800              push 0048AE60
:00413DC9 E802BD0500              call 0046FAD0
:00413DCE 83C40C                  add esp, 0000000C
:00413DD1 6A40                    push 00000040
:00413DD3 6A00                    push 00000000
:00413DD5 68A0AE4800              push 0048AEA0
:00413DDA E8F1BC0500              call 0046FAD0
:00413DDF 83C40C                  add esp, 0000000C
:00413DE2 E97E020000              jmp 00414065

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D1F(C)
|
:00413DE7 6A01                    push 00000001
:00413DE9 8B4508                  mov eax, dword ptr [ebp+08]
:00413DEC 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00413DED FF15D8D54B00            Call dword ptr [004BD5D8]
:00413DF3 E96D020000              jmp 00414065

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D69(C)
|
:00413DF8 833D18B4480000          cmp dword ptr [0048B418], 00000000
:00413DFF 742D                    je 00413E2E
:00413E01 8B4D14                  mov ecx, dword ptr [ebp+14]
:00413E04 C1E910                  shr ecx, 10
:00413E07 81E1FFFF0000            and ecx, 0000FFFF
:00413E0D 81E1FFFF0000            and ecx, 0000FFFF
:00413E13 51                      push ecx
:00413E14 8B5514                  mov edx, dword ptr [ebp+14]
:00413E17 81E2FFFF0000            and edx, 0000FFFF
:00413E1D 52                      push edx

* Reference To: COMCTL32.ImageList_DragMove, Ord:001Ah
                                  |
:00413E1E FF15FCD34B00            Call dword ptr [004BD3FC]
:00413E24 B801000000              mov eax, 00000001
:00413E29 E939020000              jmp 00414067

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413DFF(C)
|
:00413E2E E932020000              jmp 00414065

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D76(C)
|
:00413E33 8B4514                  mov eax, dword ptr [ebp+14]
:00413E36 50                      push eax
:00413E37 83EC2C                  sub esp, 0000002C
:00413E3A B90B000000              mov ecx, 0000000B
:00413E3F BE10B34800              mov esi, 0048B310
:00413E44 8BFC                    mov edi, esp
:00413E46 F3                      repz
:00413E47 A5                      movsd
:00413E48 8B0D18B44800            mov ecx, dword ptr [0048B418]
:00413E4E 51                      push ecx
:00413E4F 8B5508                  mov edx, dword ptr [ebp+08]
:00413E52 52                      push edx
:00413E53 E80D0F0000              call 00414D65
:00413E58 83C438                  add esp, 00000038
:00413E5B C70518B4480000000000    mov dword ptr [0048B418], 00000000
:00413E65 E9FB010000              jmp 00414065

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413D5C(C)
|
:00413E6A 833D18B4480000          cmp dword ptr [0048B418], 00000000
:00413E71 7418                    je 00413E8B

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:00413E73 FF1500D44B00            Call dword ptr [004BD400]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:00413E79 FF15D4D64B00            Call dword ptr [004BD6D4]
:00413E7F C70518B4480000000000    mov dword ptr [0048B418], 00000000
:00413E89 EB2C                    jmp 00413EB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413E71(C)
|
:00413E8B 681CB44800              push 0048B41C
:00413E90 8B4514                  mov eax, dword ptr [ebp+14]
:00413E93 50                      push eax
:00413E94 668B4D10                mov cx, word ptr [ebp+10]
:00413E98 51                      push ecx
:00413E99 8B5510                  mov edx, dword ptr [ebp+10]
:00413E9C C1EA10                  shr edx, 10
:00413E9F 81E2FFFF0000            and edx, 0000FFFF
:00413EA5 52                      push edx
:00413EA6 8B4508                  mov eax, dword ptr [ebp+08]
:00413EA9 50                      push eax
:00413EAA E8B0130000              call 0041525F
:00413EAF 83C414                  add esp, 00000014
:00413EB2 E9B0010000              jmp 00414067

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413D4A(C), :00413E89(U)
|
:00413EB7 8B4D14                  mov ecx, dword ptr [ebp+14]
:00413EBA 894DFC                  mov dword ptr [ebp-04], ecx
:00413EBD 8B55FC                  mov edx, dword ptr [ebp-04]
:00413EC0 8B4208                  mov eax, dword ptr [edx+08]
:00413EC3 8945E0                  mov dword ptr [ebp-20], eax
:00413EC6 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00413EC9 83C16D                  add ecx, 0000006D
:00413ECC 894DE0                  mov dword ptr [ebp-20], ecx
:00413ECF 837DE06B                cmp dword ptr [ebp-20], 0000006B
:00413ED3 0F8741010000            ja 0041401A
:00413ED9 8B45E0                  mov eax, dword ptr [ebp-20]
:00413EDC 33D2                    xor edx, edx
:00413EDE 8A9083404100            mov dl, byte ptr [eax+00414083]
:00413EE4 FF24956F404100          jmp dword ptr [4*edx+0041406F]
:00413EEB 817D1035040000          cmp dword ptr [ebp+10], 00000435
:00413EF2 7409                    je 00413EFD
:00413EF4 817D1036040000          cmp dword ptr [ebp+10], 00000436
:00413EFB 752F                    jne 00413F2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413EF2(C)
|
:00413EFD 8B7514                  mov esi, dword ptr [ebp+14]
:00413F00 B90B000000              mov ecx, 0000000B
:00413F05 BF10B34800              mov edi, 0048B310
:00413F0A F3                      repz
:00413F0B A5                      movsd
:00413F0C 6810B34800              push 0048B310
:00413F11 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413F14 51                      push ecx
:00413F15 E819120000              call 00415133
:00413F1A 83C408                  add esp, 00000008
:00413F1D A318B44800              mov dword ptr [0048B418], eax
:00413F22 A118B44800              mov eax, dword ptr [0048B418]
:00413F27 E93B010000              jmp 00414067

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413EFB(C)
|
:00413F2C E934010000              jmp 00414065
:00413F31 8B55FC                  mov edx, dword ptr [ebp-04]
:00413F34 817A0435040000          cmp dword ptr [edx+04], 00000435
:00413F3B 740C                    je 00413F49
:00413F3D 8B45FC                  mov eax, dword ptr [ebp-04]
:00413F40 81780436040000          cmp dword ptr [eax+04], 00000436
:00413F47 7514                    jne 00413F5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413F3B(C)
|
:00413F49 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00413F4C 51                      push ecx
:00413F4D 8B5510                  mov edx, dword ptr [ebp+10]
:00413F50 52                      push edx
:00413F51 8B4508                  mov eax, dword ptr [ebp+08]
:00413F54 50                      push eax
:00413F55 E88E0D0000              call 00414CE8
:00413F5A 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413F47(C)
|
:00413F5D E903010000              jmp 00414065
:00413F62 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00413F65 81790435040000          cmp dword ptr [ecx+04], 00000435
:00413F6C 740C                    je 00413F7A
:00413F6E 8B55FC                  mov edx, dword ptr [ebp-04]
:00413F71 817A0436040000          cmp dword ptr [edx+04], 00000436
:00413F78 7510                    jne 00413F8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413F6C(C)
|
:00413F7A 8B45FC                  mov eax, dword ptr [ebp-04]
:00413F7D 50                      push eax
:00413F7E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413F81 51                      push ecx
:00413F82 E868010000              call 004140EF
:00413F87 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413F78(C)
|
:00413F8A E9D6000000              jmp 00414065
:00413F8F 8B5514                  mov edx, dword ptr [ebp+14]
:00413F92 8955F8                  mov dword ptr [ebp-08], edx
:00413F95 8B45F8                  mov eax, dword ptr [ebp-08]
:00413F98 8B4814                  mov ecx, dword ptr [eax+14]
:00413F9B 83E102                  and ecx, 00000002
:00413F9E 85C9                    test ecx, ecx
:00413FA0 7476                    je 00414018

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:00413FA2 68EA030000              push 000003EA
:00413FA7 8B5508                  mov edx, dword ptr [ebp+08]
:00413FAA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413FAB FF1510D64B00            Call dword ptr [004BD610]
:00413FB1 50                      push eax
:00413FB2 E89EF3FFFF              call 00413355
:00413FB7 83C404                  add esp, 00000004
:00413FBA 8945F0                  mov dword ptr [ebp-10], eax
:00413FBD 68FC030000              push 000003FC
:00413FC2 8B4508                  mov eax, dword ptr [ebp+08]
:00413FC5 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00413FC6 FF1510D64B00            Call dword ptr [004BD610]
:00413FCC 50                      push eax
:00413FCD E883F3FFFF              call 00413355
:00413FD2 83C404                  add esp, 00000004
:00413FD5 8945EC                  mov dword ptr [ebp-14], eax
:00413FD8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00413FDB 8B510C                  mov edx, dword ptr [ecx+0C]
:00413FDE 52                      push edx
:00413FDF 8B45F8                  mov eax, dword ptr [ebp-08]
:00413FE2 8B08                    mov ecx, dword ptr [eax]
:00413FE4 51                      push ecx
:00413FE5 E872520000              call 0041925C
:00413FEA 83C408                  add esp, 00000008
:00413FED 8945F4                  mov dword ptr [ebp-0C], eax
:00413FF0 8B55F4                  mov edx, dword ptr [ebp-0C]
:00413FF3 52                      push edx
:00413FF4 8B45F0                  mov eax, dword ptr [ebp-10]
:00413FF7 50                      push eax
:00413FF8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00413FFB 51                      push ecx
:00413FFC E8EB010000              call 004141EC
:00414001 83C40C                  add esp, 0000000C
:00414004 8B55F4                  mov edx, dword ptr [ebp-0C]
:00414007 52                      push edx
:00414008 8B45EC                  mov eax, dword ptr [ebp-14]
:0041400B 50                      push eax
:0041400C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041400F 51                      push ecx
:00414010 E855070000              call 0041476A
:00414015 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413FA0(C)
|
:00414018 EB4B                    jmp 00414065

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00413ED3(C)
|
:0041401A 817D1035040000          cmp dword ptr [ebp+10], 00000435
:00414021 7409                    je 0041402C
:00414023 817D1036040000          cmp dword ptr [ebp+10], 00000436
:0041402A 7539                    jne 00414065

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414021(C)
|
:0041402C 6A00                    push 00000000
:0041402E 6A00                    push 00000000
:00414030 68F0000000              push 000000F0

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0475, ""
                                  |
:00414035 6875040000              push 00000475
:0041403A 8B5508                  mov edx, dword ptr [ebp+08]
:0041403D 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0041403E FF15D4D54B00            Call dword ptr [004BD5D4]
:00414044 8945E8                  mov dword ptr [ebp-18], eax
:00414047 8B45E8                  mov eax, dword ptr [ebp-18]
:0041404A 50                      push eax
:0041404B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041404E 51                      push ecx
:0041404F 8B5510                  mov edx, dword ptr [ebp+10]
:00414052 52                      push edx
:00414053 8B450C                  mov eax, dword ptr [ebp+0C]
:00414056 50                      push eax
:00414057 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041405A 51                      push ecx
:0041405B E8C8440000              call 00418528
:00414060 83C414                  add esp, 00000014
:00414063 EB02                    jmp 00414067

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413D2F(U), :00413D50(U), :00413D7C(U), :00413DE2(U), :00413DF3(U)
|:00413E2E(U), :00413E65(U), :00413F2C(U), :00413F5D(U), :00413F8A(U)
|:00414018(U), :0041402A(C)
|
:00414065 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00413DBB(U), :00413E29(U), :00413EB2(U), :00413F27(U), :00414063(U)
|
:00414067 5F                      pop edi
:00414068 5E                      pop esi
:00414069 8BE5                    mov esp, ebp
:0041406B 5D                      pop ebp
:0041406C C21000                  ret 0010



:0041406F EB3E4100                DWORD 00413EEB
:00414073 8F3F4100                DWORD 00413F8F
:00414077 313F4100                DWORD 00413F31
:0041407B 623F4100                DWORD 00413F62
:0041407F 1A404100                DWORD 0041401A


:00414083 000404                  add byte ptr [esp+eax], al
:00414086 0404                    add al, 04
:00414088 0404                    add al, 04
:0041408A 0401                    add al, 01
:0041408C 0404                    add al, 04
:0041408E 0404                    add al, 04
:00414090 0404                    add al, 04
:00414092 0404                    add al, 04
:00414094 0404                    add al, 04
:00414096 0404                    add al, 04
:00414098 0404                    add al, 04
:0041409A 0404                    add al, 04
:0041409C 0404                    add al, 04
:0041409E 0404                    add al, 04
:004140A0 0404                    add al, 04
:004140A2 0404                    add al, 04
:004140A4 0404                    add al, 04
:004140A6 0404                    add al, 04
:004140A8 0404                    add al, 04
:004140AA 0404                    add al, 04
:004140AC 0404                    add al, 04
:004140AE 0404                    add al, 04
:004140B0 0404                    add al, 04
:004140B2 0404                    add al, 04
:004140B4 0404                    add al, 04
:004140B6 0404                    add al, 04
:004140B8 0404                    add al, 04
:004140BA 0404                    add al, 04
:004140BC 0404                    add al, 04
:004140BE 0404                    add al, 04
:004140C0 0404                    add al, 04
:004140C2 0404                    add al, 04
:004140C4 0404                    add al, 04
:004140C6 0404                    add al, 04
:004140C8 0404                    add al, 04
:004140CA 0404                    add al, 04
:004140CC 0404                    add al, 04
:004140CE 0404                    add al, 04
:004140D0 0404                    add al, 04
:004140D2 0404                    add al, 04
:004140D4 0404                    add al, 04
:004140D6 0404                    add al, 04
:004140D8 0404                    add al, 04
:004140DA 0404                    add al, 04
:004140DC 0404                    add al, 04
:004140DE 0404                    add al, 04
:004140E0 0404                    add al, 04
:004140E2 0404                    add al, 04
:004140E4 0404                    add al, 04
:004140E6 0404                    add al, 04
:004140E8 0404                    add al, 04
:004140EA 0402                    add al, 02
:004140EC 0404                    add al, 04
:004140EE 03                      BYTE 03h


* Referenced by a CALL at Address:
|:00413F82   
|
:004140EF 55                      push ebp
:004140F0 8BEC                    mov ebp, esp
:004140F2 51                      push ecx
:004140F3 8B450C                  mov eax, dword ptr [ebp+0C]
:004140F6 81780435040000          cmp dword ptr [eax+04], 00000435
:004140FD 751A                    jne 00414119
:004140FF 6836040000              push 00000436
:00414104 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414107 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414108 FF1510D64B00            Call dword ptr [004BD610]
:0041410E 50                      push eax
:0041410F E81FE9FFFF              call 00412A33
:00414114 83C404                  add esp, 00000004
:00414117 EB18                    jmp 00414131

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004140FD(C)
|
:00414119 6835040000              push 00000435
:0041411E 8B5508                  mov edx, dword ptr [ebp+08]
:00414121 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414122 FF1510D64B00            Call dword ptr [004BD610]
:00414128 50                      push eax
:00414129 E805E9FFFF              call 00412A33
:0041412E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414117(U)
|
:00414131 8B450C                  mov eax, dword ptr [ebp+0C]
:00414134 8B08                    mov ecx, dword ptr [eax]
:00414136 51                      push ecx
:00414137 E8874F0000              call 004190C3
:0041413C 83C404                  add esp, 00000004
:0041413F 8945FC                  mov dword ptr [ebp-04], eax
:00414142 837DFC00                cmp dword ptr [ebp-04], 00000000
:00414146 7D0C                    jge 00414154
:00414148 8B5508                  mov edx, dword ptr [ebp+08]
:0041414B 52                      push edx
:0041414C E807000000              call 00414158
:00414151 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414146(C)
|
:00414154 8BE5                    mov esp, ebp
:00414156 5D                      pop ebp
:00414157 C3                      ret



* Referenced by a CALL at Addresses:
|:0041414C   , :00414D45   , :00415325   , :0041537D   , :00415408   
|:00415493   
|
:00414158 55                      push ebp
:00414159 8BEC                    mov ebp, esp
:0041415B 83EC08                  sub esp, 00000008

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041415E 68EA030000              push 000003EA
:00414163 8B4508                  mov eax, dword ptr [ebp+08]
:00414166 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414167 FF1510D64B00            Call dword ptr [004BD610]
:0041416D 50                      push eax
:0041416E E8E2F1FFFF              call 00413355
:00414173 83C404                  add esp, 00000004
:00414176 8945FC                  mov dword ptr [ebp-04], eax
:00414179 68FC030000              push 000003FC
:0041417E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414181 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414182 FF1510D64B00            Call dword ptr [004BD610]
:00414188 50                      push eax
:00414189 E8C7F1FFFF              call 00413355
:0041418E 83C404                  add esp, 00000004
:00414191 8945F8                  mov dword ptr [ebp-08], eax
:00414194 6A01                    push 00000001
:00414196 8B55FC                  mov edx, dword ptr [ebp-04]
:00414199 52                      push edx
:0041419A 8B4508                  mov eax, dword ptr [ebp+08]
:0041419D 50                      push eax
:0041419E E80F350000              call 004176B2
:004141A3 83C40C                  add esp, 0000000C
:004141A6 6A01                    push 00000001
:004141A8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004141AB 51                      push ecx
:004141AC 8B5508                  mov edx, dword ptr [ebp+08]
:004141AF 52                      push edx
:004141B0 E875370000              call 0041792A
:004141B5 83C40C                  add esp, 0000000C
:004141B8 6835040000              push 00000435
:004141BD 8B4508                  mov eax, dword ptr [ebp+08]
:004141C0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004141C1 FF1510D64B00            Call dword ptr [004BD610]
:004141C7 50                      push eax
:004141C8 E866E8FFFF              call 00412A33
:004141CD 83C404                  add esp, 00000004
:004141D0 6836040000              push 00000436
:004141D5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004141D8 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004141D9 FF1510D64B00            Call dword ptr [004BD610]
:004141DF 50                      push eax
:004141E0 E84EE8FFFF              call 00412A33
:004141E5 83C404                  add esp, 00000004
:004141E8 8BE5                    mov esp, ebp
:004141EA 5D                      pop ebp
:004141EB C3                      ret



* Referenced by a CALL at Address:
|:00413FFC   
|
:004141EC 55                      push ebp
:004141ED 8BEC                    mov ebp, esp
:004141EF 83EC1C                  sub esp, 0000001C
:004141F2 53                      push ebx
:004141F3 56                      push esi
:004141F4 8B4508                  mov eax, dword ptr [ebp+08]
:004141F7 50                      push eax
:004141F8 E8DF3C0000              call 00417EDC
:004141FD 83C404                  add esp, 00000004
:00414200 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414203 6BC922                  imul ecx, 00000022
:00414206 81C1D0474900            add ecx, 004947D0
:0041420C E84FBCFFFF              call 0040FE60
:00414211 25FF000000              and eax, 000000FF
:00414216 8945F4                  mov dword ptr [ebp-0C], eax
:00414219 837DF411                cmp dword ptr [ebp-0C], 00000011
:0041421D 0F8F4F020000            jg 00414472
:00414223 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414226 51                      push ecx
:00414227 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041422A 6BC950                  imul ecx, 00000050
:0041422D 81C1787F4900            add ecx, 00497F78
:00414233 E801D8FEFF              call 00401A39
:00414238 85C0                    test eax, eax
:0041423A 0F84FB010000            je 0041443B

* Possible StringData Ref from Data Obj ->"iH˳"
                                  |
:00414240 687CC74700              push 0047C77C
:00414245 68AE040000              push 000004AE
:0041424A 8B5508                  mov edx, dword ptr [ebp+08]
:0041424D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041424E FF1510D64B00            Call dword ptr [004BD610]
:00414254 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00414255 FF1514D64B00            Call dword ptr [004BD614]
:0041425B 68F4010000              push 000001F4
:00414260 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414263 6BC950                  imul ecx, 00000050
:00414266 81C1787F4900            add ecx, 00497F78
:0041426C E8DF530000              call 00419650
:00414271 8AD8                    mov bl, al
:00414273 81E3FF000000            and ebx, 000000FF
:00414279 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041427C 6BC922                  imul ecx, 00000022
:0041427F 81C1D0474900            add ecx, 004947D0
:00414285 E8D6EFFEFF              call 00403260
:0041428A 25FF000000              and eax, 000000FF
:0041428F 03D8                    add ebx, eax
:00414291 53                      push ebx
:00414292 6A00                    push 00000000
:00414294 E810F60000              call 004238A9
:00414299 83C40C                  add esp, 0000000C
:0041429C 8945EC                  mov dword ptr [ebp-14], eax
:0041429F 68F4010000              push 000001F4
:004142A4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004142A7 6BC950                  imul ecx, 00000050
:004142AA 81C1787F4900            add ecx, 00497F78
:004142B0 E83B540000              call 004196F0
:004142B5 8AD8                    mov bl, al
:004142B7 81E3FF000000            and ebx, 000000FF
:004142BD 8B4D10                  mov ecx, dword ptr [ebp+10]
:004142C0 6BC922                  imul ecx, 00000022
:004142C3 81C1D0474900            add ecx, 004947D0
:004142C9 E8B2EFFEFF              call 00403280
:004142CE 25FF000000              and eax, 000000FF
:004142D3 99                      cdq
:004142D4 2BC2                    sub eax, edx
:004142D6 D1F8                    sar eax, 1
:004142D8 03D8                    add ebx, eax
:004142DA 53                      push ebx
:004142DB 6A00                    push 00000000
:004142DD E8C7F50000              call 004238A9
:004142E2 83C40C                  add esp, 0000000C
:004142E5 8945E8                  mov dword ptr [ebp-18], eax
:004142E8 68FF000000              push 000000FF
:004142ED 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004142F0 6BC950                  imul ecx, 00000050
:004142F3 81C1787F4900            add ecx, 00497F78
:004142F9 E812540000              call 00419710
:004142FE 8AD8                    mov bl, al
:00414300 81E3FF000000            and ebx, 000000FF
:00414306 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414309 6BC922                  imul ecx, 00000022
:0041430C 81C1D0474900            add ecx, 004947D0
:00414312 E8B9280200              call 00436BD0
:00414317 25FF000000              and eax, 000000FF
:0041431C 2BD8                    sub ebx, eax
:0041431E 53                      push ebx
:0041431F 6A00                    push 00000000
:00414321 E883F50000              call 004238A9
:00414326 83C40C                  add esp, 0000000C
:00414329 8945E4                  mov dword ptr [ebp-1C], eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0041432C 6A0A                    push 0000000A
:0041432E 8D45F8                  lea eax, dword ptr [ebp-08]
:00414331 50                      push eax
:00414332 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00414335 51                      push ecx
:00414336 E885620500              call 0046A5C0
:0041433B 83C40C                  add esp, 0000000C
:0041433E 50                      push eax
:0041433F 68A8040000              push 000004A8
:00414344 8B5508                  mov edx, dword ptr [ebp+08]
:00414347 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414348 FF1510D64B00            Call dword ptr [004BD610]
:0041434E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041434F FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00414355 6A0A                    push 0000000A
:00414357 8D45F8                  lea eax, dword ptr [ebp-08]
:0041435A 50                      push eax
:0041435B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041435E 51                      push ecx
:0041435F E85C620500              call 0046A5C0
:00414364 83C40C                  add esp, 0000000C
:00414367 50                      push eax
:00414368 68A6040000              push 000004A6
:0041436D 8B5508                  mov edx, dword ptr [ebp+08]
:00414370 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414371 FF1510D64B00            Call dword ptr [004BD610]
:00414377 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00414378 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0041437E 6A0A                    push 0000000A
:00414380 8D45F8                  lea eax, dword ptr [ebp-08]
:00414383 50                      push eax
:00414384 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00414387 51                      push ecx
:00414388 E833620500              call 0046A5C0
:0041438D 83C40C                  add esp, 0000000C
:00414390 50                      push eax
:00414391 68A7040000              push 000004A7
:00414396 8B5508                  mov edx, dword ptr [ebp+08]
:00414399 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041439A FF1510D64B00            Call dword ptr [004BD610]
:004143A0 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004143A1 FF1514D64B00            Call dword ptr [004BD614]
:004143A7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004143AA 6BC950                  imul ecx, 00000050
:004143AD 81C1787F4900            add ecx, 00497F78
:004143B3 E866D9FEFF              call 00401D1E
:004143B8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004143BB 2BC8                    sub ecx, eax
:004143BD 51                      push ecx

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:004143BE 6802040000              push 00000402
:004143C3 8B5508                  mov edx, dword ptr [ebp+08]
:004143C6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004143C7 FF1510D64B00            Call dword ptr [004BD610]
:004143CD 50                      push eax
:004143CE E8F94D0000              call 004191CC
:004143D3 83C408                  add esp, 00000008
:004143D6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004143D9 6BC950                  imul ecx, 00000050
:004143DC 81C1787F4900            add ecx, 00497F78
:004143E2 E867DAFEFF              call 00401E4E
:004143E7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004143EA 2BC8                    sub ecx, eax
:004143EC 51                      push ecx
:004143ED 6808040000              push 00000408
:004143F2 8B5508                  mov edx, dword ptr [ebp+08]
:004143F5 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004143F6 FF1510D64B00            Call dword ptr [004BD610]
:004143FC 50                      push eax
:004143FD E8CA4D0000              call 004191CC
:00414402 83C408                  add esp, 00000008
:00414405 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414408 6BC950                  imul ecx, 00000050
:0041440B 81C1787F4900            add ecx, 00497F78
:00414411 E8A4DAFEFF              call 00401EBA
:00414416 25FF000000              and eax, 000000FF
:0041441B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041441E 2BC8                    sub ecx, eax
:00414420 51                      push ecx
:00414421 6809040000              push 00000409
:00414426 8B5508                  mov edx, dword ptr [ebp+08]
:00414429 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041442A FF1510D64B00            Call dword ptr [004BD610]
:00414430 50                      push eax
:00414431 E8964D0000              call 004191CC
:00414436 83C408                  add esp, 00000008
:00414439 EB32                    jmp 0041446D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041423A(C)
|
:0041443B 6A00                    push 00000000
:0041443D 8B450C                  mov eax, dword ptr [ebp+0C]
:00414440 50                      push eax
:00414441 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414444 51                      push ecx
:00414445 E868320000              call 004176B2
:0041444A 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"Z˳"
                                  |
:0041444D 6888C74700              push 0047C788
:00414452 68AE040000              push 000004AE
:00414457 8B5508                  mov edx, dword ptr [ebp+08]
:0041445A 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041445B FF1510D64B00            Call dword ptr [004BD610]
:00414461 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00414462 FF1514D64B00            Call dword ptr [004BD614]
:00414468 E9F7020000              jmp 00414764

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414439(U)
|
:0041446D E9F2020000              jmp 00414764

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041421D(C)
|
:00414472 837DF412                cmp dword ptr [ebp-0C], 00000012
:00414476 757F                    jne 004144F7
:00414478 68F4010000              push 000001F4
:0041447D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414480 6BC950                  imul ecx, 00000050
:00414483 81C1787F4900            add ecx, 00497F78
:00414489 E8E2510000              call 00419670
:0041448E 8AD8                    mov bl, al
:00414490 81E3FF000000            and ebx, 000000FF
:00414496 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414499 6BC922                  imul ecx, 00000022
:0041449C 81C1D0474900            add ecx, 004947D0
:004144A2 E8B9EDFEFF              call 00403260
:004144A7 25FF000000              and eax, 000000FF
:004144AC 03D8                    add ebx, eax
:004144AE 53                      push ebx
:004144AF 6A00                    push 00000000
:004144B1 E8F3F30000              call 004238A9
:004144B6 83C40C                  add esp, 0000000C
:004144B9 8945F0                  mov dword ptr [ebp-10], eax
:004144BC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004144BF 6BC950                  imul ecx, 00000050
:004144C2 81C1787F4900            add ecx, 00497F78
:004144C8 E884D8FEFF              call 00401D51
:004144CD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004144D0 2BC8                    sub ecx, eax
:004144D2 51                      push ecx
:004144D3 8B55F0                  mov edx, dword ptr [ebp-10]
:004144D6 52                      push edx
:004144D7 68AE040000              push 000004AE

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0403, "
"
                                  |
:004144DC 6803040000              push 00000403

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F3, "255"
                                  |
:004144E1 68F3030000              push 000003F3
:004144E6 8B4508                  mov eax, dword ptr [ebp+08]
:004144E9 50                      push eax
:004144EA E8594C0000              call 00419148
:004144EF 83C418                  add esp, 00000018
:004144F2 E96D020000              jmp 00414764

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414476(C)
|
:004144F7 837DF413                cmp dword ptr [ebp-0C], 00000013
:004144FB 757F                    jne 0041457C
:004144FD 68F4010000              push 000001F4
:00414502 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414505 6BC950                  imul ecx, 00000050
:00414508 81C1787F4900            add ecx, 00497F78
:0041450E E87D510000              call 00419690
:00414513 8AD8                    mov bl, al
:00414515 81E3FF000000            and ebx, 000000FF
:0041451B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041451E 6BC922                  imul ecx, 00000022
:00414521 81C1D0474900            add ecx, 004947D0
:00414527 E834EDFEFF              call 00403260
:0041452C 25FF000000              and eax, 000000FF
:00414531 03D8                    add ebx, eax
:00414533 53                      push ebx
:00414534 6A00                    push 00000000
:00414536 E86EF30000              call 004238A9
:0041453B 83C40C                  add esp, 0000000C
:0041453E 8945F0                  mov dword ptr [ebp-10], eax
:00414541 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414544 6BC950                  imul ecx, 00000050
:00414547 81C1787F4900            add ecx, 00497F78
:0041454D E832D8FEFF              call 00401D84
:00414552 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00414555 2BC8                    sub ecx, eax
:00414557 51                      push ecx
:00414558 8B55F0                  mov edx, dword ptr [ebp-10]
:0041455B 52                      push edx
:0041455C 68AE040000              push 000004AE

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0404, ""
                                  |
:00414561 6804040000              push 00000404

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03FD, "1000"
                                  |
:00414566 68FD030000              push 000003FD
:0041456B 8B4508                  mov eax, dword ptr [ebp+08]
:0041456E 50                      push eax
:0041456F E8D44B0000              call 00419148
:00414574 83C418                  add esp, 00000018
:00414577 E9E8010000              jmp 00414764

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004144FB(C)
|
:0041457C 837DF414                cmp dword ptr [ebp-0C], 00000014
:00414580 757F                    jne 00414601
:00414582 68F4010000              push 000001F4
:00414587 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041458A 6BC950                  imul ecx, 00000050
:0041458D 81C1787F4900            add ecx, 00497F78
:00414593 E818510000              call 004196B0
:00414598 8AD8                    mov bl, al
:0041459A 81E3FF000000            and ebx, 000000FF
:004145A0 8B4D10                  mov ecx, dword ptr [ebp+10]
:004145A3 6BC922                  imul ecx, 00000022
:004145A6 81C1D0474900            add ecx, 004947D0
:004145AC E8AFECFEFF              call 00403260
:004145B1 25FF000000              and eax, 000000FF
:004145B6 03D8                    add ebx, eax
:004145B8 53                      push ebx
:004145B9 6A00                    push 00000000
:004145BB E8E9F20000              call 004238A9
:004145C0 83C40C                  add esp, 0000000C
:004145C3 8945F0                  mov dword ptr [ebp-10], eax
:004145C6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004145C9 6BC950                  imul ecx, 00000050
:004145CC 81C1787F4900            add ecx, 00497F78
:004145D2 E8E0D7FEFF              call 00401DB7
:004145D7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004145DA 2BC8                    sub ecx, eax
:004145DC 51                      push ecx
:004145DD 8B55F0                  mov edx, dword ptr [ebp-10]
:004145E0 52                      push edx
:004145E1 68AE040000              push 000004AE
:004145E6 6805040000              push 00000405

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F2, "255"
                                  |
:004145EB 68F2030000              push 000003F2
:004145F0 8B4508                  mov eax, dword ptr [ebp+08]
:004145F3 50                      push eax
:004145F4 E84F4B0000              call 00419148
:004145F9 83C418                  add esp, 00000018
:004145FC E963010000              jmp 00414764

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414580(C)
|
:00414601 837DF415                cmp dword ptr [ebp-0C], 00000015
:00414605 7579                    jne 00414680
:00414607 68E8030000              push 000003E8
:0041460C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041460F 6BC950                  imul ecx, 00000050
:00414612 81C1787F4900            add ecx, 00497F78
:00414618 E8B3650400              call 0045ABD0
:0041461D 8BF0                    mov esi, eax
:0041461F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414622 6BC922                  imul ecx, 00000022
:00414625 81C1D0474900            add ecx, 004947D0
:0041462B E830ECFEFF              call 00403260
:00414630 25FF000000              and eax, 000000FF
:00414635 03F0                    add esi, eax
:00414637 56                      push esi
:00414638 6A00                    push 00000000
:0041463A E86AF20000              call 004238A9
:0041463F 83C40C                  add esp, 0000000C
:00414642 8945F0                  mov dword ptr [ebp-10], eax
:00414645 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414648 6BC950                  imul ecx, 00000050
:0041464B 81C1787F4900            add ecx, 00497F78
:00414651 E894D7FEFF              call 00401DEA
:00414656 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00414659 2BC8                    sub ecx, eax
:0041465B 51                      push ecx
:0041465C 8B55F0                  mov edx, dword ptr [ebp-10]
:0041465F 52                      push edx
:00414660 68AE040000              push 000004AE
:00414665 6806040000              push 00000406
:0041466A 68A4040000              push 000004A4
:0041466F 8B4508                  mov eax, dword ptr [ebp+08]
:00414672 50                      push eax
:00414673 E8D04A0000              call 00419148
:00414678 83C418                  add esp, 00000018
:0041467B E9E4000000              jmp 00414764

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414605(C)
|
:00414680 837DF416                cmp dword ptr [ebp-0C], 00000016
:00414684 757C                    jne 00414702
:00414686 68F4010000              push 000001F4
:0041468B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041468E 6BC950                  imul ecx, 00000050
:00414691 81C1787F4900            add ecx, 00497F78
:00414697 E834500000              call 004196D0
:0041469C 8AD8                    mov bl, al
:0041469E 81E3FF000000            and ebx, 000000FF
:004146A4 8B4D10                  mov ecx, dword ptr [ebp+10]
:004146A7 6BC922                  imul ecx, 00000022
:004146AA 81C1D0474900            add ecx, 004947D0
:004146B0 E8ABEBFEFF              call 00403260
:004146B5 25FF000000              and eax, 000000FF
:004146BA 03D8                    add ebx, eax
:004146BC 53                      push ebx
:004146BD 6A00                    push 00000000
:004146BF E8E5F10000              call 004238A9
:004146C4 83C40C                  add esp, 0000000C
:004146C7 8945F0                  mov dword ptr [ebp-10], eax
:004146CA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004146CD 6BC950                  imul ecx, 00000050
:004146D0 81C1787F4900            add ecx, 00497F78
:004146D6 E840D7FEFF              call 00401E1B
:004146DB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004146DE 2BC8                    sub ecx, eax
:004146E0 51                      push ecx
:004146E1 8B55F0                  mov edx, dword ptr [ebp-10]
:004146E4 52                      push edx
:004146E5 68AE040000              push 000004AE
:004146EA 6807040000              push 00000407
:004146EF 68A5040000              push 000004A5
:004146F4 8B4508                  mov eax, dword ptr [ebp+08]
:004146F7 50                      push eax
:004146F8 E84B4A0000              call 00419148
:004146FD 83C418                  add esp, 00000018
:00414700 EB62                    jmp 00414764

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414684(C)
|
:00414702 837DF425                cmp dword ptr [ebp-0C], 00000025
:00414706 7C2F                    jl 00414737
:00414708 6A00                    push 00000000
:0041470A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041470D 51                      push ecx
:0041470E 8B5508                  mov edx, dword ptr [ebp+08]
:00414711 52                      push edx
:00414712 E89B2F0000              call 004176B2
:00414717 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"S"
                                  |
:0041471A 689CC74700              push 0047C79C
:0041471F 68AE040000              push 000004AE
:00414724 8B4508                  mov eax, dword ptr [ebp+08]
:00414727 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414728 FF1510D64B00            Call dword ptr [004BD610]
:0041472E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041472F FF1514D64B00            Call dword ptr [004BD614]
:00414735 EB2D                    jmp 00414764

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414706(C)
|
:00414737 6A00                    push 00000000
:00414739 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041473C 51                      push ecx
:0041473D 8B5508                  mov edx, dword ptr [ebp+08]
:00414740 52                      push edx
:00414741 E86C2F0000              call 004176B2
:00414746 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:00414749 68A8C74700              push 0047C7A8
:0041474E 68AE040000              push 000004AE
:00414753 8B4508                  mov eax, dword ptr [ebp+08]
:00414756 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414757 FF1510D64B00            Call dword ptr [004BD610]
:0041475D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041475E FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414468(U), :0041446D(U), :004144F2(U), :00414577(U), :004145FC(U)
|:0041467B(U), :00414700(U), :00414735(U)
|
:00414764 5E                      pop esi
:00414765 5B                      pop ebx
:00414766 8BE5                    mov esp, ebp
:00414768 5D                      pop ebp
:00414769 C3                      ret



* Referenced by a CALL at Address:
|:00414010   
|
:0041476A 55                      push ebp
:0041476B 8BEC                    mov ebp, esp
:0041476D 83EC1C                  sub esp, 0000001C
:00414770 53                      push ebx
:00414771 56                      push esi
:00414772 8B4508                  mov eax, dword ptr [ebp+08]
:00414775 50                      push eax
:00414776 E826380000              call 00417FA1
:0041477B 83C404                  add esp, 00000004
:0041477E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414781 6BC922                  imul ecx, 00000022
:00414784 81C1D0474900            add ecx, 004947D0
:0041478A E8D1B6FFFF              call 0040FE60
:0041478F 25FF000000              and eax, 000000FF
:00414794 8945F4                  mov dword ptr [ebp-0C], eax
:00414797 837DF411                cmp dword ptr [ebp-0C], 00000011
:0041479B 0F8F4F020000            jg 004149F0
:004147A1 8B4D10                  mov ecx, dword ptr [ebp+10]
:004147A4 51                      push ecx
:004147A5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004147A8 6BC950                  imul ecx, 00000050
:004147AB 81C1787F4900            add ecx, 00497F78
:004147B1 E883D2FEFF              call 00401A39
:004147B6 85C0                    test eax, eax
:004147B8 0F84FB010000            je 004149B9

* Possible StringData Ref from Data Obj ->"iH˳"
                                  |
:004147BE 68B4C74700              push 0047C7B4
:004147C3 68AD040000              push 000004AD
:004147C8 8B5508                  mov edx, dword ptr [ebp+08]
:004147CB 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004147CC FF1510D64B00            Call dword ptr [004BD610]
:004147D2 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004147D3 FF1514D64B00            Call dword ptr [004BD614]
:004147D9 68F4010000              push 000001F4
:004147DE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004147E1 6BC950                  imul ecx, 00000050
:004147E4 81C1787F4900            add ecx, 00497F78
:004147EA E8614E0000              call 00419650
:004147EF 8AD8                    mov bl, al
:004147F1 81E3FF000000            and ebx, 000000FF
:004147F7 8B4D10                  mov ecx, dword ptr [ebp+10]
:004147FA 6BC922                  imul ecx, 00000022
:004147FD 81C1D0474900            add ecx, 004947D0
:00414803 E858EAFEFF              call 00403260
:00414808 25FF000000              and eax, 000000FF
:0041480D 03D8                    add ebx, eax
:0041480F 53                      push ebx
:00414810 6A00                    push 00000000
:00414812 E892F00000              call 004238A9
:00414817 83C40C                  add esp, 0000000C
:0041481A 8945EC                  mov dword ptr [ebp-14], eax
:0041481D 68F4010000              push 000001F4
:00414822 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414825 6BC950                  imul ecx, 00000050
:00414828 81C1787F4900            add ecx, 00497F78
:0041482E E8BD4E0000              call 004196F0
:00414833 8AD8                    mov bl, al
:00414835 81E3FF000000            and ebx, 000000FF
:0041483B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041483E 6BC922                  imul ecx, 00000022
:00414841 81C1D0474900            add ecx, 004947D0
:00414847 E834EAFEFF              call 00403280
:0041484C 25FF000000              and eax, 000000FF
:00414851 99                      cdq
:00414852 2BC2                    sub eax, edx
:00414854 D1F8                    sar eax, 1
:00414856 03D8                    add ebx, eax
:00414858 53                      push ebx
:00414859 6A00                    push 00000000
:0041485B E849F00000              call 004238A9
:00414860 83C40C                  add esp, 0000000C
:00414863 8945E8                  mov dword ptr [ebp-18], eax
:00414866 68FF000000              push 000000FF
:0041486B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041486E 6BC950                  imul ecx, 00000050
:00414871 81C1787F4900            add ecx, 00497F78
:00414877 E8944E0000              call 00419710
:0041487C 8AD8                    mov bl, al
:0041487E 81E3FF000000            and ebx, 000000FF
:00414884 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414887 6BC922                  imul ecx, 00000022
:0041488A 81C1D0474900            add ecx, 004947D0
:00414890 E83B230200              call 00436BD0
:00414895 25FF000000              and eax, 000000FF
:0041489A 2BD8                    sub ebx, eax
:0041489C 53                      push ebx
:0041489D 6A00                    push 00000000
:0041489F E805F00000              call 004238A9
:004148A4 83C40C                  add esp, 0000000C
:004148A7 8945E4                  mov dword ptr [ebp-1C], eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004148AA 6A0A                    push 0000000A
:004148AC 8D45F8                  lea eax, dword ptr [ebp-08]
:004148AF 50                      push eax
:004148B0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004148B3 51                      push ecx
:004148B4 E8075D0500              call 0046A5C0
:004148B9 83C40C                  add esp, 0000000C
:004148BC 50                      push eax
:004148BD 68A3040000              push 000004A3
:004148C2 8B5508                  mov edx, dword ptr [ebp+08]
:004148C5 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004148C6 FF1510D64B00            Call dword ptr [004BD610]
:004148CC 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004148CD FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004148D3 6A0A                    push 0000000A
:004148D5 8D45F8                  lea eax, dword ptr [ebp-08]
:004148D8 50                      push eax
:004148D9 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004148DC 51                      push ecx
:004148DD E8DE5C0500              call 0046A5C0
:004148E2 83C40C                  add esp, 0000000C
:004148E5 50                      push eax
:004148E6 68A1040000              push 000004A1
:004148EB 8B5508                  mov edx, dword ptr [ebp+08]
:004148EE 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004148EF FF1510D64B00            Call dword ptr [004BD610]
:004148F5 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004148F6 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004148FC 6A0A                    push 0000000A
:004148FE 8D45F8                  lea eax, dword ptr [ebp-08]
:00414901 50                      push eax
:00414902 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00414905 51                      push ecx
:00414906 E8B55C0500              call 0046A5C0
:0041490B 83C40C                  add esp, 0000000C
:0041490E 50                      push eax
:0041490F 68A2040000              push 000004A2
:00414914 8B5508                  mov edx, dword ptr [ebp+08]
:00414917 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414918 FF1510D64B00            Call dword ptr [004BD610]
:0041491E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041491F FF1514D64B00            Call dword ptr [004BD614]
:00414925 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414928 6BC950                  imul ecx, 00000050
:0041492B 81C1787F4900            add ecx, 00497F78
:00414931 E8E8D3FEFF              call 00401D1E
:00414936 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00414939 2BC8                    sub ecx, eax
:0041493B 51                      push ecx

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F0, "255"
                                  |
:0041493C 68F0030000              push 000003F0
:00414941 8B5508                  mov edx, dword ptr [ebp+08]
:00414944 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414945 FF1510D64B00            Call dword ptr [004BD610]
:0041494B 50                      push eax
:0041494C E87B480000              call 004191CC
:00414951 83C408                  add esp, 00000008
:00414954 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414957 6BC950                  imul ecx, 00000050
:0041495A 81C1787F4900            add ecx, 00497F78
:00414960 E8E9D4FEFF              call 00401E4E
:00414965 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00414968 2BC8                    sub ecx, eax
:0041496A 51                      push ecx

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:03FE, "1000"
                                  |
:0041496B 68FE030000              push 000003FE
:00414970 8B5508                  mov edx, dword ptr [ebp+08]
:00414973 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414974 FF1510D64B00            Call dword ptr [004BD610]
:0041497A 50                      push eax
:0041497B E84C480000              call 004191CC
:00414980 83C408                  add esp, 00000008
:00414983 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414986 6BC950                  imul ecx, 00000050
:00414989 81C1787F4900            add ecx, 00497F78
:0041498F E826D5FEFF              call 00401EBA
:00414994 25FF000000              and eax, 000000FF
:00414999 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041499C 2BC8                    sub ecx, eax
:0041499E 51                      push ecx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0041499F 6801040000              push 00000401
:004149A4 8B5508                  mov edx, dword ptr [ebp+08]
:004149A7 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004149A8 FF1510D64B00            Call dword ptr [004BD610]
:004149AE 50                      push eax
:004149AF E818480000              call 004191CC
:004149B4 83C408                  add esp, 00000008
:004149B7 EB32                    jmp 004149EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004147B8(C)
|
:004149B9 6A00                    push 00000000
:004149BB 8B450C                  mov eax, dword ptr [ebp+0C]
:004149BE 50                      push eax
:004149BF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004149C2 51                      push ecx
:004149C3 E8622F0000              call 0041792A
:004149C8 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"Z˳"
                                  |
:004149CB 68C0C74700              push 0047C7C0
:004149D0 68AD040000              push 000004AD
:004149D5 8B5508                  mov edx, dword ptr [ebp+08]
:004149D8 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004149D9 FF1510D64B00            Call dword ptr [004BD610]
:004149DF 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004149E0 FF1514D64B00            Call dword ptr [004BD614]
:004149E6 E9F7020000              jmp 00414CE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004149B7(U)
|
:004149EB E9F2020000              jmp 00414CE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041479B(C)
|
:004149F0 837DF412                cmp dword ptr [ebp-0C], 00000012
:004149F4 757F                    jne 00414A75
:004149F6 68F4010000              push 000001F4
:004149FB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004149FE 6BC950                  imul ecx, 00000050
:00414A01 81C1787F4900            add ecx, 00497F78
:00414A07 E8644C0000              call 00419670
:00414A0C 8AD8                    mov bl, al
:00414A0E 81E3FF000000            and ebx, 000000FF
:00414A14 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414A17 6BC922                  imul ecx, 00000022
:00414A1A 81C1D0474900            add ecx, 004947D0
:00414A20 E83BE8FEFF              call 00403260
:00414A25 25FF000000              and eax, 000000FF
:00414A2A 03D8                    add ebx, eax
:00414A2C 53                      push ebx
:00414A2D 6A00                    push 00000000
:00414A2F E875EE0000              call 004238A9
:00414A34 83C40C                  add esp, 0000000C
:00414A37 8945F0                  mov dword ptr [ebp-10], eax
:00414A3A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414A3D 6BC950                  imul ecx, 00000050
:00414A40 81C1787F4900            add ecx, 00497F78
:00414A46 E806D3FEFF              call 00401D51
:00414A4B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00414A4E 2BC8                    sub ecx, eax
:00414A50 51                      push ecx
:00414A51 8B55F0                  mov edx, dword ptr [ebp-10]
:00414A54 52                      push edx
:00414A55 68AD040000              push 000004AD

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F4, "255"
                                  |
:00414A5A 68F4030000              push 000003F4

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F1, "255"
                                  |
:00414A5F 68F1030000              push 000003F1
:00414A64 8B4508                  mov eax, dword ptr [ebp+08]
:00414A67 50                      push eax
:00414A68 E8DB460000              call 00419148
:00414A6D 83C418                  add esp, 00000018
:00414A70 E96D020000              jmp 00414CE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004149F4(C)
|
:00414A75 837DF413                cmp dword ptr [ebp-0C], 00000013
:00414A79 757F                    jne 00414AFA
:00414A7B 68F4010000              push 000001F4
:00414A80 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414A83 6BC950                  imul ecx, 00000050
:00414A86 81C1787F4900            add ecx, 00497F78
:00414A8C E8FF4B0000              call 00419690
:00414A91 8AD8                    mov bl, al
:00414A93 81E3FF000000            and ebx, 000000FF
:00414A99 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414A9C 6BC922                  imul ecx, 00000022
:00414A9F 81C1D0474900            add ecx, 004947D0
:00414AA5 E8B6E7FEFF              call 00403260
:00414AAA 25FF000000              and eax, 000000FF
:00414AAF 03D8                    add ebx, eax
:00414AB1 53                      push ebx
:00414AB2 6A00                    push 00000000
:00414AB4 E8F0ED0000              call 004238A9
:00414AB9 83C40C                  add esp, 0000000C
:00414ABC 8945F0                  mov dword ptr [ebp-10], eax
:00414ABF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414AC2 6BC950                  imul ecx, 00000050
:00414AC5 81C1787F4900            add ecx, 00497F78
:00414ACB E8B4D2FEFF              call 00401D84
:00414AD0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00414AD3 2BC8                    sub ecx, eax
:00414AD5 51                      push ecx
:00414AD6 8B55F0                  mov edx, dword ptr [ebp-10]
:00414AD9 52                      push edx
:00414ADA 68AD040000              push 000004AD
:00414ADF 68F6030000              push 000003F6

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F5, "255"
                                  |
:00414AE4 68F5030000              push 000003F5
:00414AE9 8B4508                  mov eax, dword ptr [ebp+08]
:00414AEC 50                      push eax
:00414AED E856460000              call 00419148
:00414AF2 83C418                  add esp, 00000018
:00414AF5 E9E8010000              jmp 00414CE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414A79(C)
|
:00414AFA 837DF414                cmp dword ptr [ebp-0C], 00000014
:00414AFE 757F                    jne 00414B7F
:00414B00 68F4010000              push 000001F4
:00414B05 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414B08 6BC950                  imul ecx, 00000050
:00414B0B 81C1787F4900            add ecx, 00497F78
:00414B11 E89A4B0000              call 004196B0
:00414B16 8AD8                    mov bl, al
:00414B18 81E3FF000000            and ebx, 000000FF
:00414B1E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414B21 6BC922                  imul ecx, 00000022
:00414B24 81C1D0474900            add ecx, 004947D0
:00414B2A E831E7FEFF              call 00403260
:00414B2F 25FF000000              and eax, 000000FF
:00414B34 03D8                    add ebx, eax
:00414B36 53                      push ebx
:00414B37 6A00                    push 00000000
:00414B39 E86BED0000              call 004238A9
:00414B3E 83C40C                  add esp, 0000000C
:00414B41 8945F0                  mov dword ptr [ebp-10], eax
:00414B44 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414B47 6BC950                  imul ecx, 00000050
:00414B4A 81C1787F4900            add ecx, 00497F78
:00414B50 E862D2FEFF              call 00401DB7
:00414B55 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00414B58 2BC8                    sub ecx, eax
:00414B5A 51                      push ecx
:00414B5B 8B55F0                  mov edx, dword ptr [ebp-10]
:00414B5E 52                      push edx
:00414B5F 68AD040000              push 000004AD

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:00414B64 68F9030000              push 000003F9

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03EF, "255"
                                  |
:00414B69 68EF030000              push 000003EF
:00414B6E 8B4508                  mov eax, dword ptr [ebp+08]
:00414B71 50                      push eax
:00414B72 E8D1450000              call 00419148
:00414B77 83C418                  add esp, 00000018
:00414B7A E963010000              jmp 00414CE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414AFE(C)
|
:00414B7F 837DF415                cmp dword ptr [ebp-0C], 00000015
:00414B83 7579                    jne 00414BFE
:00414B85 68E8030000              push 000003E8
:00414B8A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414B8D 6BC950                  imul ecx, 00000050
:00414B90 81C1787F4900            add ecx, 00497F78
:00414B96 E835600400              call 0045ABD0
:00414B9B 8BF0                    mov esi, eax
:00414B9D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414BA0 6BC922                  imul ecx, 00000022
:00414BA3 81C1D0474900            add ecx, 004947D0
:00414BA9 E8B2E6FEFF              call 00403260
:00414BAE 25FF000000              and eax, 000000FF
:00414BB3 03F0                    add esi, eax
:00414BB5 56                      push esi
:00414BB6 6A00                    push 00000000
:00414BB8 E8ECEC0000              call 004238A9
:00414BBD 83C40C                  add esp, 0000000C
:00414BC0 8945F0                  mov dword ptr [ebp-10], eax
:00414BC3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414BC6 6BC950                  imul ecx, 00000050
:00414BC9 81C1787F4900            add ecx, 00497F78
:00414BCF E816D2FEFF              call 00401DEA
:00414BD4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00414BD7 2BC8                    sub ecx, eax
:00414BD9 51                      push ecx
:00414BDA 8B55F0                  mov edx, dword ptr [ebp-10]
:00414BDD 52                      push edx
:00414BDE 68AD040000              push 000004AD

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:00414BE3 68FA030000              push 000003FA
:00414BE8 689F040000              push 0000049F
:00414BED 8B4508                  mov eax, dword ptr [ebp+08]
:00414BF0 50                      push eax
:00414BF1 E852450000              call 00419148
:00414BF6 83C418                  add esp, 00000018
:00414BF9 E9E4000000              jmp 00414CE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414B83(C)
|
:00414BFE 837DF416                cmp dword ptr [ebp-0C], 00000016
:00414C02 757C                    jne 00414C80
:00414C04 68F4010000              push 000001F4
:00414C09 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414C0C 6BC950                  imul ecx, 00000050
:00414C0F 81C1787F4900            add ecx, 00497F78
:00414C15 E8B64A0000              call 004196D0
:00414C1A 8AD8                    mov bl, al
:00414C1C 81E3FF000000            and ebx, 000000FF
:00414C22 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414C25 6BC922                  imul ecx, 00000022
:00414C28 81C1D0474900            add ecx, 004947D0
:00414C2E E82DE6FEFF              call 00403260
:00414C33 25FF000000              and eax, 000000FF
:00414C38 03D8                    add ebx, eax
:00414C3A 53                      push ebx
:00414C3B 6A00                    push 00000000
:00414C3D E867EC0000              call 004238A9
:00414C42 83C40C                  add esp, 0000000C
:00414C45 8945F0                  mov dword ptr [ebp-10], eax
:00414C48 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414C4B 6BC950                  imul ecx, 00000050
:00414C4E 81C1787F4900            add ecx, 00497F78
:00414C54 E8C2D1FEFF              call 00401E1B
:00414C59 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00414C5C 2BC8                    sub ecx, eax
:00414C5E 51                      push ecx
:00414C5F 8B55F0                  mov edx, dword ptr [ebp-10]
:00414C62 52                      push edx
:00414C63 68AD040000              push 000004AD
:00414C68 68FB030000              push 000003FB
:00414C6D 68A0040000              push 000004A0
:00414C72 8B4508                  mov eax, dword ptr [ebp+08]
:00414C75 50                      push eax
:00414C76 E8CD440000              call 00419148
:00414C7B 83C418                  add esp, 00000018
:00414C7E EB62                    jmp 00414CE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414C02(C)
|
:00414C80 837DF425                cmp dword ptr [ebp-0C], 00000025
:00414C84 7C2F                    jl 00414CB5
:00414C86 6A00                    push 00000000
:00414C88 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414C8B 51                      push ecx
:00414C8C 8B5508                  mov edx, dword ptr [ebp+08]
:00414C8F 52                      push edx
:00414C90 E8952C0000              call 0041792A
:00414C95 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"S"
                                  |
:00414C98 68D4C74700              push 0047C7D4
:00414C9D 68AD040000              push 000004AD
:00414CA2 8B4508                  mov eax, dword ptr [ebp+08]
:00414CA5 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414CA6 FF1510D64B00            Call dword ptr [004BD610]
:00414CAC 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00414CAD FF1514D64B00            Call dword ptr [004BD614]
:00414CB3 EB2D                    jmp 00414CE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414C84(C)
|
:00414CB5 6A00                    push 00000000
:00414CB7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414CBA 51                      push ecx
:00414CBB 8B5508                  mov edx, dword ptr [ebp+08]
:00414CBE 52                      push edx
:00414CBF E8662C0000              call 0041792A
:00414CC4 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:00414CC7 68E0C74700              push 0047C7E0
:00414CCC 68AD040000              push 000004AD
:00414CD1 8B4508                  mov eax, dword ptr [ebp+08]
:00414CD4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414CD5 FF1510D64B00            Call dword ptr [004BD610]
:00414CDB 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00414CDC FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004149E6(U), :004149EB(U), :00414A70(U), :00414AF5(U), :00414B7A(U)
|:00414BF9(U), :00414C7E(U), :00414CB3(U)
|
:00414CE2 5E                      pop esi
:00414CE3 5B                      pop ebx
:00414CE4 8BE5                    mov esp, ebp
:00414CE6 5D                      pop ebp
:00414CE7 C3                      ret



* Referenced by a CALL at Address:
|:00413F55   
|
:00414CE8 55                      push ebp
:00414CE9 8BEC                    mov ebp, esp
:00414CEB 51                      push ecx
:00414CEC 8B4510                  mov eax, dword ptr [ebp+10]
:00414CEF 81780435040000          cmp dword ptr [eax+04], 00000435
:00414CF6 751A                    jne 00414D12
:00414CF8 6836040000              push 00000436
:00414CFD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414D00 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414D01 FF1510D64B00            Call dword ptr [004BD610]
:00414D07 50                      push eax
:00414D08 E826DDFFFF              call 00412A33
:00414D0D 83C404                  add esp, 00000004
:00414D10 EB18                    jmp 00414D2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414CF6(C)
|
:00414D12 6835040000              push 00000435
:00414D17 8B5508                  mov edx, dword ptr [ebp+08]
:00414D1A 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414D1B FF1510D64B00            Call dword ptr [004BD610]
:00414D21 50                      push eax
:00414D22 E80CDDFFFF              call 00412A33
:00414D27 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D10(U)
|
:00414D2A 8B4510                  mov eax, dword ptr [ebp+10]
:00414D2D 8B08                    mov ecx, dword ptr [eax]
:00414D2F 51                      push ecx
:00414D30 E88E430000              call 004190C3
:00414D35 83C404                  add esp, 00000004
:00414D38 8945FC                  mov dword ptr [ebp-04], eax
:00414D3B 837DFC00                cmp dword ptr [ebp-04], 00000000
:00414D3F 7D0E                    jge 00414D4F
:00414D41 8B5508                  mov edx, dword ptr [ebp+08]
:00414D44 52                      push edx
:00414D45 E80EF4FFFF              call 00414158
:00414D4A 83C404                  add esp, 00000004
:00414D4D EB12                    jmp 00414D61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D3F(C)
|
:00414D4F 8B45FC                  mov eax, dword ptr [ebp-04]
:00414D52 50                      push eax
:00414D53 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414D56 8B11                    mov edx, dword ptr [ecx]
:00414D58 52                      push edx
:00414D59 E85C470000              call 004194BA
:00414D5E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D4D(U)
|
:00414D61 8BE5                    mov esp, ebp
:00414D63 5D                      pop ebp
:00414D64 C3                      ret



* Referenced by a CALL at Address:
|:00413E53   
|
:00414D65 55                      push ebp
:00414D66 8BEC                    mov ebp, esp
:00414D68 83EC2C                  sub esp, 0000002C
:00414D6B 6A00                    push 00000000
:00414D6D 6A00                    push 00000000
:00414D6F 68F0000000              push 000000F0

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0475, ""
                                  |
:00414D74 6875040000              push 00000475
:00414D79 8B4508                  mov eax, dword ptr [ebp+08]
:00414D7C 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00414D7D FF15D4D54B00            Call dword ptr [004BD5D4]
:00414D83 8945FC                  mov dword ptr [ebp-04], eax
:00414D86 8D4D10                  lea ecx, dword ptr [ebp+10]
:00414D89 894DF8                  mov dword ptr [ebp-08], ecx
:00414D8C 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00414D90 7507                    jne 00414D99
:00414D92 33C0                    xor eax, eax
:00414D94 E90F020000              jmp 00414FA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D90(C)
|
:00414D99 6836040000              push 00000436
:00414D9E 6835040000              push 00000435
:00414DA3 8B553C                  mov edx, dword ptr [ebp+3C]
:00414DA6 52                      push edx
:00414DA7 8B4510                  mov eax, dword ptr [ebp+10]
:00414DAA 50                      push eax
:00414DAB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414DAE 51                      push ecx
:00414DAF E880020000              call 00415034
:00414DB4 83C414                  add esp, 00000014
:00414DB7 83F801                  cmp eax, 00000001
:00414DBA 0F85D7010000            jne 00414F97
:00414DC0 8B5514                  mov edx, dword ptr [ebp+14]
:00414DC3 52                      push edx
:00414DC4 8D45E0                  lea eax, dword ptr [ebp-20]
:00414DC7 50                      push eax
:00414DC8 8D4DDC                  lea ecx, dword ptr [ebp-24]
:00414DCB 51                      push ecx
:00414DCC 8D55F4                  lea edx, dword ptr [ebp-0C]
:00414DCF 52                      push edx
:00414DD0 8B4508                  mov eax, dword ptr [ebp+08]
:00414DD3 50                      push eax
:00414DD4 E8D3010000              call 00414FAC
:00414DD9 83C414                  add esp, 00000014
:00414DDC 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00414DDF 51                      push ecx
:00414DE0 E870E5FFFF              call 00413355
:00414DE5 83C404                  add esp, 00000004
:00414DE8 8945E4                  mov dword ptr [ebp-1C], eax
:00414DEB 8B55F4                  mov edx, dword ptr [ebp-0C]
:00414DEE 52                      push edx
:00414DEF E861E5FFFF              call 00413355
:00414DF4 83C404                  add esp, 00000004
:00414DF7 8945EC                  mov dword ptr [ebp-14], eax
:00414DFA 8B451C                  mov eax, dword ptr [ebp+1C]
:00414DFD 50                      push eax
:00414DFE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00414E01 8B11                    mov edx, dword ptr [ecx]
:00414E03 52                      push edx
:00414E04 E891440000              call 0041929A
:00414E09 83C408                  add esp, 00000008
:00414E0C 8845E8                  mov byte ptr [ebp-18], al
:00414E0F 8A45E8                  mov al, byte ptr [ebp-18]
:00414E12 50                      push eax
:00414E13 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00414E16 6BC950                  imul ecx, 00000050
:00414E19 81C1787F4900            add ecx, 00497F78
:00414E1F E8BCE3FEFF              call 004031E0
:00414E24 25FF000000              and eax, 000000FF
:00414E29 8945F0                  mov dword ptr [ebp-10], eax
:00414E2C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00414E2F 51                      push ecx
:00414E30 8B55E4                  mov edx, dword ptr [ebp-1C]
:00414E33 52                      push edx
:00414E34 8B4508                  mov eax, dword ptr [ebp+08]
:00414E37 50                      push eax
:00414E38 E809EAFFFF              call 00413846
:00414E3D 83C40C                  add esp, 0000000C
:00414E40 85C0                    test eax, eax
:00414E42 0F844F010000            je 00414F97
:00414E48 8A4DE8                  mov cl, byte ptr [ebp-18]
:00414E4B 51                      push ecx
:00414E4C 8B55EC                  mov edx, dword ptr [ebp-14]
:00414E4F 52                      push edx
:00414E50 8B4508                  mov eax, dword ptr [ebp+08]
:00414E53 50                      push eax
:00414E54 E8C8330000              call 00418221
:00414E59 83C40C                  add esp, 0000000C
:00414E5C 85C0                    test eax, eax
:00414E5E 0F8433010000            je 00414F97
:00414E64 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00414E67 51                      push ecx
:00414E68 E860020000              call 004150CD
:00414E6D 83C404                  add esp, 00000004
:00414E70 8845D8                  mov byte ptr [ebp-28], al
:00414E73 8A55F0                  mov dl, byte ptr [ebp-10]
:00414E76 52                      push edx
:00414E77 8A45D8                  mov al, byte ptr [ebp-28]
:00414E7A 50                      push eax
:00414E7B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00414E7E 6BC950                  imul ecx, 00000050
:00414E81 81C1787F4900            add ecx, 00497F78
:00414E87 E874E3FEFF              call 00403200
:00414E8C 68FF000000              push 000000FF
:00414E91 8A4DE8                  mov cl, byte ptr [ebp-18]
:00414E94 51                      push ecx
:00414E95 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00414E98 6BC950                  imul ecx, 00000050
:00414E9B 81C1787F4900            add ecx, 00497F78
:00414EA1 E85AE3FEFF              call 00403200
:00414EA6 8A55D8                  mov dl, byte ptr [ebp-28]
:00414EA9 52                      push edx
:00414EAA 8B45E4                  mov eax, dword ptr [ebp-1C]
:00414EAD 50                      push eax
:00414EAE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414EB1 51                      push ecx
:00414EB2 E8DEE8FFFF              call 00413795
:00414EB7 83C40C                  add esp, 0000000C
:00414EBA 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:00414EBC 68EA030000              push 000003EA
:00414EC1 8B5508                  mov edx, dword ptr [ebp+08]
:00414EC4 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414EC5 FF1510D64B00            Call dword ptr [004BD610]
:00414ECB 50                      push eax
:00414ECC E884E4FFFF              call 00413355
:00414ED1 83C404                  add esp, 00000004
:00414ED4 50                      push eax
:00414ED5 8B4508                  mov eax, dword ptr [ebp+08]
:00414ED8 50                      push eax
:00414ED9 E8D4270000              call 004176B2
:00414EDE 83C40C                  add esp, 0000000C
:00414EE1 6A01                    push 00000001
:00414EE3 68FC030000              push 000003FC
:00414EE8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00414EEB 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414EEC FF1510D64B00            Call dword ptr [004BD610]
:00414EF2 50                      push eax
:00414EF3 E85DE4FFFF              call 00413355
:00414EF8 83C404                  add esp, 00000004
:00414EFB 50                      push eax
:00414EFC 8B5508                  mov edx, dword ptr [ebp+08]
:00414EFF 52                      push edx
:00414F00 E8252A0000              call 0041792A
:00414F05 83C40C                  add esp, 0000000C
:00414F08 8B45D8                  mov eax, dword ptr [ebp-28]
:00414F0B 25FF000000              and eax, 000000FF
:00414F10 50                      push eax
:00414F11 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00414F14 51                      push ecx
:00414F15 8B55E0                  mov edx, dword ptr [ebp-20]
:00414F18 52                      push edx
:00414F19 E83F1E0000              call 00416D5D
:00414F1E 83C40C                  add esp, 0000000C
:00414F21 8B451C                  mov eax, dword ptr [ebp+1C]
:00414F24 50                      push eax
:00414F25 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414F28 51                      push ecx
:00414F29 E843450000              call 00419471
:00414F2E 83C408                  add esp, 00000008
:00414F31 6A00                    push 00000000
:00414F33 8B551C                  mov edx, dword ptr [ebp+1C]
:00414F36 52                      push edx
:00414F37 6808100000              push 00001008
:00414F3C 8B4510                  mov eax, dword ptr [ebp+10]
:00414F3F 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00414F40 FF1504D64B00            Call dword ptr [004BD604]
:00414F46 6A00                    push 00000000
:00414F48 6A00                    push 00000000
:00414F4A 6804100000              push 00001004
:00414F4F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414F52 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00414F53 FF1504D64B00            Call dword ptr [004BD604]
:00414F59 83E801                  sub eax, 00000001
:00414F5C 3B451C                  cmp eax, dword ptr [ebp+1C]
:00414F5F 7D1B                    jge 00414F7C
:00414F61 6A00                    push 00000000
:00414F63 6A00                    push 00000000
:00414F65 6804100000              push 00001004
:00414F6A 8B5510                  mov edx, dword ptr [ebp+10]
:00414F6D 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00414F6E FF1504D64B00            Call dword ptr [004BD604]
:00414F74 83E801                  sub eax, 00000001
:00414F77 8945D4                  mov dword ptr [ebp-2C], eax
:00414F7A EB06                    jmp 00414F82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414F5F(C)
|
:00414F7C 8B451C                  mov eax, dword ptr [ebp+1C]
:00414F7F 8945D4                  mov dword ptr [ebp-2C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414F7A(U)
|
:00414F82 6A00                    push 00000000
:00414F84 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00414F87 51                      push ecx
:00414F88 6813100000              push 00001013
:00414F8D 8B5510                  mov edx, dword ptr [ebp+10]
:00414F90 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00414F91 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00414DBA(C), :00414E42(C), :00414E5E(C)
|

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:00414F97 FF1500D44B00            Call dword ptr [004BD400]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:00414F9D FF15D4D64B00            Call dword ptr [004BD6D4]
:00414FA3 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414D94(U)
|
:00414FA8 8BE5                    mov esp, ebp
:00414FAA 5D                      pop ebp
:00414FAB C3                      ret



* Referenced by a CALL at Address:
|:00414DD4   
|
:00414FAC 55                      push ebp
:00414FAD 8BEC                    mov ebp, esp
:00414FAF 817D1835040000          cmp dword ptr [ebp+18], 00000435
:00414FB6 753E                    jne 00414FF6

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:00414FB8 68EA030000              push 000003EA
:00414FBD 8B4508                  mov eax, dword ptr [ebp+08]
:00414FC0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414FC1 FF1510D64B00            Call dword ptr [004BD610]
:00414FC7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00414FCA 8901                    mov dword ptr [ecx], eax
:00414FCC 68FC030000              push 000003FC
:00414FD1 8B5508                  mov edx, dword ptr [ebp+08]
:00414FD4 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414FD5 FF1510D64B00            Call dword ptr [004BD610]
:00414FDB 8B4D10                  mov ecx, dword ptr [ebp+10]
:00414FDE 8901                    mov dword ptr [ecx], eax
:00414FE0 6836040000              push 00000436
:00414FE5 8B5508                  mov edx, dword ptr [ebp+08]
:00414FE8 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414FE9 FF1510D64B00            Call dword ptr [004BD610]
:00414FEF 8B4D14                  mov ecx, dword ptr [ebp+14]
:00414FF2 8901                    mov dword ptr [ecx], eax
:00414FF4 EB3C                    jmp 00415032

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414FB6(C)
|
:00414FF6 68FC030000              push 000003FC
:00414FFB 8B5508                  mov edx, dword ptr [ebp+08]
:00414FFE 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00414FFF FF1510D64B00            Call dword ptr [004BD610]
:00415005 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415008 8901                    mov dword ptr [ecx], eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0041500A 68EA030000              push 000003EA
:0041500F 8B5508                  mov edx, dword ptr [ebp+08]
:00415012 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415013 FF1510D64B00            Call dword ptr [004BD610]
:00415019 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041501C 8901                    mov dword ptr [ecx], eax
:0041501E 6835040000              push 00000435
:00415023 8B5508                  mov edx, dword ptr [ebp+08]
:00415026 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415027 FF1510D64B00            Call dword ptr [004BD610]
:0041502D 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415030 8901                    mov dword ptr [ecx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00414FF4(U)
|
:00415032 5D                      pop ebp
:00415033 C3                      ret



* Referenced by a CALL at Addresses:
|:004134A4   , :00414DAF   
|
:00415034 55                      push ebp
:00415035 8BEC                    mov ebp, esp
:00415037 83EC10                  sub esp, 00000010
:0041503A 8B4510                  mov eax, dword ptr [ebp+10]
:0041503D 25FFFF0000              and eax, 0000FFFF
:00415042 8945F4                  mov dword ptr [ebp-0C], eax
:00415045 8B4D10                  mov ecx, dword ptr [ebp+10]
:00415048 C1E910                  shr ecx, 10
:0041504B 81E1FFFF0000            and ecx, 0000FFFF
:00415051 81E1FFFF0000            and ecx, 0000FFFF
:00415057 894DF8                  mov dword ptr [ebp-08], ecx
:0041505A 8B55F8                  mov edx, dword ptr [ebp-08]
:0041505D 52                      push edx
:0041505E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00415061 50                      push eax
:00415062 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415065 51                      push ecx

* Reference To: USER32.ChildWindowFromPoint, Ord:0033h
                                  |
:00415066 FF15CCD64B00            Call dword ptr [004BD6CC]
:0041506C 8945FC                  mov dword ptr [ebp-04], eax
:0041506F 837DFC00                cmp dword ptr [ebp-04], 00000000
:00415073 7408                    je 0041507D
:00415075 8B550C                  mov edx, dword ptr [ebp+0C]
:00415078 3B55FC                  cmp edx, dword ptr [ebp-04]
:0041507B 7504                    jne 00415081

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415073(C)
|
:0041507D 33C0                    xor eax, eax
:0041507F EB48                    jmp 004150C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041507B(C)
|
:00415081 8B4514                  mov eax, dword ptr [ebp+14]
:00415084 50                      push eax
:00415085 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415088 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415089 FF1510D64B00            Call dword ptr [004BD610]
:0041508F 39450C                  cmp dword ptr [ebp+0C], eax
:00415092 7513                    jne 004150A7
:00415094 8B5518                  mov edx, dword ptr [ebp+18]
:00415097 52                      push edx
:00415098 8B4508                  mov eax, dword ptr [ebp+08]
:0041509B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041509C FF1510D64B00            Call dword ptr [004BD610]
:004150A2 8945F0                  mov dword ptr [ebp-10], eax
:004150A5 EB11                    jmp 004150B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415092(C)
|
:004150A7 8B4D14                  mov ecx, dword ptr [ebp+14]
:004150AA 51                      push ecx
:004150AB 8B5508                  mov edx, dword ptr [ebp+08]
:004150AE 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004150AF FF1510D64B00            Call dword ptr [004BD610]
:004150B5 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004150A5(U)
|
:004150B8 8B45FC                  mov eax, dword ptr [ebp-04]
:004150BB 3B45F0                  cmp eax, dword ptr [ebp-10]
:004150BE 7507                    jne 004150C7
:004150C0 B801000000              mov eax, 00000001
:004150C5 EB02                    jmp 004150C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004150BE(C)
|
:004150C7 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041507F(U), :004150C5(U)
|
:004150C9 8BE5                    mov esp, ebp
:004150CB 5D                      pop ebp
:004150CC C3                      ret



* Referenced by a CALL at Addresses:
|:00413700   , :00414E68   , :00416932   , :00416CAD   
|
:004150CD 55                      push ebp
:004150CE 8BEC                    mov ebp, esp
:004150D0 51                      push ecx
:004150D1 C745FC00000000          mov [ebp-04], 00000000
:004150D8 EB09                    jmp 004150E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041510F(U)
|
:004150DA 8B45FC                  mov eax, dword ptr [ebp-04]
:004150DD 83C001                  add eax, 00000001
:004150E0 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004150D8(U)
|
:004150E3 837DFC08                cmp dword ptr [ebp-04], 00000008
:004150E7 7D28                    jge 00415111
:004150E9 8A4DFC                  mov cl, byte ptr [ebp-04]
:004150EC 51                      push ecx
:004150ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:004150F0 6BC950                  imul ecx, 00000050
:004150F3 81C1787F4900            add ecx, 00497F78
:004150F9 E8E2E0FEFF              call 004031E0
:004150FE 25FF000000              and eax, 000000FF
:00415103 3DFF000000              cmp eax, 000000FF
:00415108 7505                    jne 0041510F
:0041510A 8A45FC                  mov al, byte ptr [ebp-04]
:0041510D EB20                    jmp 0041512F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415108(C)
|
:0041510F EBC9                    jmp 004150DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004150E7(C)
|
:00415111 6830200000              push 00002030

* Possible StringData Ref from Data Obj ->" in InitLVItem()"
                                  |
:00415116 68ECC74700              push 0047C7EC

* Possible StringData Ref from Data Obj ->"ListView_InsertItem"
                                  |
:0041511B 6800C84700              push 0047C800
:00415120 8B15B0554B00            mov edx, dword ptr [004B55B0]
:00415126 52                      push edx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00415127 FF15E0D64B00            Call dword ptr [004BD6E0]
:0041512D 32C0                    xor al, al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041510D(U)
|
:0041512F 8BE5                    mov esp, ebp
:00415131 5D                      pop ebp
:00415132 C3                      ret



* Referenced by a CALL at Addresses:
|:0041285C   , :00413F15   , :00415CB9   
|
:00415133 55                      push ebp
:00415134 8BEC                    mov ebp, esp
:00415136 81ECA4000000            sub esp, 000000A4
:0041513C 8B450C                  mov eax, dword ptr [ebp+0C]
:0041513F 8B08                    mov ecx, dword ptr [eax]
:00415141 894DB8                  mov dword ptr [ebp-48], ecx
:00415144 8B55B8                  mov edx, dword ptr [ebp-48]
:00415147 52                      push edx

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:00415148 FF1500D64B00            Call dword ptr [004BD600]
:0041514E C78570FFFFFF00000000    mov dword ptr [ebp+FFFFFF70], 00000000

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00415158 C7856CFFFFFF02000000    mov dword ptr [ebp+FFFFFF6C], 00000002
:00415162 8D8560FFFFFF            lea eax, dword ptr [ebp+FFFFFF60]
:00415168 50                      push eax
:00415169 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041516C 8B510C                  mov edx, dword ptr [ecx+0C]
:0041516F 52                      push edx
:00415170 682B100000              push 0000102B
:00415175 8B45B8                  mov eax, dword ptr [ebp-48]
:00415178 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00415179 FF1504D64B00            Call dword ptr [004BD604]
:0041517F 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00415182 51                      push ecx
:00415183 8B550C                  mov edx, dword ptr [ebp+0C]
:00415186 8B420C                  mov eax, dword ptr [edx+0C]
:00415189 50                      push eax
:0041518A 6821100000              push 00001021
:0041518F 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00415192 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00415193 FF1504D64B00            Call dword ptr [004BD604]
:00415199 894588                  mov dword ptr [ebp-78], eax
:0041519C 8D55BC                  lea edx, dword ptr [ebp-44]
:0041519F 85D2                    test edx, edx
:004151A1 7412                    je 004151B5
:004151A3 C745BC01000000          mov [ebp-44], 00000001
:004151AA 8D45BC                  lea eax, dword ptr [ebp-44]
:004151AD 89855CFFFFFF            mov dword ptr [ebp+FFFFFF5C], eax
:004151B3 EB0A                    jmp 004151BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004151A1(C)
|
:004151B5 C7855CFFFFFF00000000    mov dword ptr [ebp+FFFFFF5C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004151B3(U)
|
:004151BF 8B8D5CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF5C]
:004151C5 51                      push ecx
:004151C6 8B550C                  mov edx, dword ptr [ebp+0C]
:004151C9 8B420C                  mov eax, dword ptr [edx+0C]
:004151CC 50                      push eax
:004151CD 680E100000              push 0000100E
:004151D2 8B4DB8                  mov ecx, dword ptr [ebp-48]
:004151D5 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004151D6 FF1504D64B00            Call dword ptr [004BD604]
:004151DC 8B5508                  mov edx, dword ptr [ebp+08]
:004151DF 52                      push edx

* Reference To: USER32.SetCapture, Ord:01E3h
                                  |
:004151E0 FF15B8D64B00            Call dword ptr [004BD6B8]
:004151E6 6AF6                    push FFFFFFF6
:004151E8 8B45C4                  mov eax, dword ptr [ebp-3C]
:004151EB 2B45BC                  sub eax, dword ptr [ebp-44]
:004151EE 99                      cdq
:004151EF 2BC2                    sub eax, edx
:004151F1 D1F8                    sar eax, 1
:004151F3 50                      push eax
:004151F4 6A00                    push 00000000
:004151F6 8B4588                  mov eax, dword ptr [ebp-78]
:004151F9 50                      push eax

* Reference To: COMCTL32.ImageList_BeginDrag, Ord:0014h
                                  |
:004151FA FF15F4D34B00            Call dword ptr [004BD3F4]
:00415200 8D4DCC                  lea ecx, dword ptr [ebp-34]
:00415203 51                      push ecx
:00415204 8B5508                  mov edx, dword ptr [ebp+08]
:00415207 52                      push edx

* Reference To: USER32.GetWindowPlacement, Ord:013Ch
                                  |
:00415208 FF15C8D64B00            Call dword ptr [004BD6C8]
:0041520E 8D458C                  lea eax, dword ptr [ebp-74]
:00415211 50                      push eax
:00415212 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00415215 51                      push ecx

* Reference To: USER32.GetWindowPlacement, Ord:013Ch
                                  |
:00415216 FF15C8D64B00            Call dword ptr [004BD6C8]
:0041521C 8B55A0                  mov edx, dword ptr [ebp-60]
:0041521F 2B55E0                  sub edx, dword ptr [ebp-20]
:00415222 8955F8                  mov dword ptr [ebp-08], edx
:00415225 8B45A4                  mov eax, dword ptr [ebp-5C]
:00415228 2B45E4                  sub eax, dword ptr [ebp-1C]
:0041522B 8945FC                  mov dword ptr [ebp-04], eax
:0041522E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415231 8B55FC                  mov edx, dword ptr [ebp-04]
:00415234 035124                  add edx, dword ptr [ecx+24]
:00415237 52                      push edx
:00415238 8B450C                  mov eax, dword ptr [ebp+0C]
:0041523B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041523E 034820                  add ecx, dword ptr [eax+20]
:00415241 51                      push ecx
:00415242 8B5508                  mov edx, dword ptr [ebp+08]
:00415245 52                      push edx

* Reference To: COMCTL32.ImageList_DragEnter, Ord:0018h
                                  |
:00415246 FF1508D44B00            Call dword ptr [004BD408]
:0041524C 8B4588                  mov eax, dword ptr [ebp-78]
:0041524F 50                      push eax

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:00415250 FF1504D44B00            Call dword ptr [004BD404]
:00415256 B801000000              mov eax, 00000001
:0041525B 8BE5                    mov esp, ebp
:0041525D 5D                      pop ebp
:0041525E C3                      ret



* Referenced by a CALL at Address:
|:00413EAA   
|
:0041525F 55                      push ebp
:00415260 8BEC                    mov ebp, esp
:00415262 83EC10                  sub esp, 00000010
:00415265 8B4510                  mov eax, dword ptr [ebp+10]
:00415268 25FFFF0000              and eax, 0000FFFF
:0041526D 8945F0                  mov dword ptr [ebp-10], eax
:00415270 817DF0EA030000          cmp dword ptr [ebp-10], 000003EA
:00415277 7F2C                    jg 004152A5
:00415279 817DF0EA030000          cmp dword ptr [ebp-10], 000003EA
:00415280 0F8409010000            je 0041538F
:00415286 837DF000                cmp dword ptr [ebp-10], 00000000
:0041528A 0F8E1F020000            jle 004154AF
:00415290 837DF002                cmp dword ptr [ebp-10], 00000002
:00415294 7E33                    jle 004152C9
:00415296 837DF003                cmp dword ptr [ebp-10], 00000003
:0041529A 0F8402020000            je 004154A2
:004152A0 E90A020000              jmp 004154AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415277(C)
|
:004152A5 817DF0FC030000          cmp dword ptr [ebp-10], 000003FC
:004152AC 0F8468010000            je 0041541A
:004152B2 817DF075040000          cmp dword ptr [ebp-10], 00000475
:004152B9 7424                    je 004152DF
:004152BB 817DF076040000          cmp dword ptr [ebp-10], 00000476
:004152C2 7473                    je 00415337
:004152C4 E9E6010000              jmp 004154AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415294(C)
|
:004152C9 6A01                    push 00000001
:004152CB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004152CE 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004152CF FF15D8D54B00            Call dword ptr [004BD5D8]
:004152D5 B801000000              mov eax, 00000001
:004152DA E9D2010000              jmp 004154B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004152B9(C)
|
:004152DF 8B5518                  mov edx, dword ptr [ebp+18]
:004152E2 C60200                  mov byte ptr [edx], 00
:004152E5 6A00                    push 00000000
:004152E7 6835040000              push 00000435
:004152EC 8B4508                  mov eax, dword ptr [ebp+08]
:004152EF 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004152F0 FF1510D64B00            Call dword ptr [004BD610]
:004152F6 50                      push eax
:004152F7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004152FA 51                      push ecx
:004152FB E8863D0000              call 00419086
:00415300 83C40C                  add esp, 0000000C
:00415303 6A00                    push 00000000
:00415305 6836040000              push 00000436
:0041530A 8B5508                  mov edx, dword ptr [ebp+08]
:0041530D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041530E FF1510D64B00            Call dword ptr [004BD610]
:00415314 50                      push eax
:00415315 8B4508                  mov eax, dword ptr [ebp+08]
:00415318 50                      push eax
:00415319 E8683D0000              call 00419086
:0041531E 83C40C                  add esp, 0000000C
:00415321 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415324 51                      push ecx
:00415325 E82EEEFFFF              call 00414158
:0041532A 83C404                  add esp, 00000004
:0041532D B801000000              mov eax, 00000001
:00415332 E97A010000              jmp 004154B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004152C2(C)
|
:00415337 8B5518                  mov edx, dword ptr [ebp+18]
:0041533A C60201                  mov byte ptr [edx], 01
:0041533D 6A01                    push 00000001
:0041533F 6835040000              push 00000435
:00415344 8B4508                  mov eax, dword ptr [ebp+08]
:00415347 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415348 FF1510D64B00            Call dword ptr [004BD610]
:0041534E 50                      push eax
:0041534F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415352 51                      push ecx
:00415353 E82E3D0000              call 00419086
:00415358 83C40C                  add esp, 0000000C
:0041535B 6A01                    push 00000001
:0041535D 6836040000              push 00000436
:00415362 8B5508                  mov edx, dword ptr [ebp+08]
:00415365 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415366 FF1510D64B00            Call dword ptr [004BD610]
:0041536C 50                      push eax
:0041536D 8B4508                  mov eax, dword ptr [ebp+08]
:00415370 50                      push eax
:00415371 E8103D0000              call 00419086
:00415376 83C40C                  add esp, 0000000C
:00415379 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041537C 51                      push ecx
:0041537D E8D6EDFFFF              call 00414158
:00415382 83C404                  add esp, 00000004
:00415385 B801000000              mov eax, 00000001
:0041538A E922010000              jmp 004154B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415280(C)
|
:0041538F 8B550C                  mov edx, dword ptr [ebp+0C]
:00415392 81E2FFFF0000            and edx, 0000FFFF
:00415398 83FA09                  cmp edx, 00000009
:0041539B 7573                    jne 00415410
:0041539D 68FC030000              push 000003FC
:004153A2 8B4508                  mov eax, dword ptr [ebp+08]
:004153A5 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004153A6 FF1510D64B00            Call dword ptr [004BD610]
:004153AC 8945F4                  mov dword ptr [ebp-0C], eax
:004153AF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004153B2 51                      push ecx
:004153B3 8B5514                  mov edx, dword ptr [ebp+14]
:004153B6 52                      push edx
:004153B7 E8F9000000              call 004154B5
:004153BC 83C408                  add esp, 00000008
:004153BF 8945FC                  mov dword ptr [ebp-04], eax
:004153C2 6835040000              push 00000435
:004153C7 8B4508                  mov eax, dword ptr [ebp+08]
:004153CA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004153CB FF1510D64B00            Call dword ptr [004BD610]
:004153D1 8945F8                  mov dword ptr [ebp-08], eax
:004153D4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004153D7 51                      push ecx
:004153D8 8B55F8                  mov edx, dword ptr [ebp-08]
:004153DB 52                      push edx
:004153DC E8D6030000              call 004157B7
:004153E1 83C408                  add esp, 00000008
:004153E4 685F040000              push 0000045F
:004153E9 8B4508                  mov eax, dword ptr [ebp+08]
:004153EC 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004153ED FF1510D64B00            Call dword ptr [004BD610]
:004153F3 50                      push eax
:004153F4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004153F7 51                      push ecx
:004153F8 8B5508                  mov edx, dword ptr [ebp+08]
:004153FB 52                      push edx
:004153FC E80C3D0000              call 0041910D
:00415401 83C40C                  add esp, 0000000C
:00415404 8B4508                  mov eax, dword ptr [ebp+08]
:00415407 50                      push eax
:00415408 E84BEDFFFF              call 00414158
:0041540D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041539B(C)
|
:00415410 B801000000              mov eax, 00000001
:00415415 E997000000              jmp 004154B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004152AC(C)
|
:0041541A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041541D 81E1FFFF0000            and ecx, 0000FFFF
:00415423 83F909                  cmp ecx, 00000009
:00415426 7573                    jne 0041549B

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:00415428 68EA030000              push 000003EA
:0041542D 8B5508                  mov edx, dword ptr [ebp+08]
:00415430 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415431 FF1510D64B00            Call dword ptr [004BD610]
:00415437 8945F4                  mov dword ptr [ebp-0C], eax
:0041543A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041543D 50                      push eax
:0041543E 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415441 51                      push ecx
:00415442 E86E000000              call 004154B5
:00415447 83C408                  add esp, 00000008
:0041544A 8945FC                  mov dword ptr [ebp-04], eax
:0041544D 6836040000              push 00000436
:00415452 8B5508                  mov edx, dword ptr [ebp+08]
:00415455 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415456 FF1510D64B00            Call dword ptr [004BD610]
:0041545C 8945F8                  mov dword ptr [ebp-08], eax
:0041545F 8B45FC                  mov eax, dword ptr [ebp-04]
:00415462 50                      push eax
:00415463 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00415466 51                      push ecx
:00415467 E84B030000              call 004157B7
:0041546C 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:03FF, "1000"
                                  |
:0041546F 68FF030000              push 000003FF
:00415474 8B5508                  mov edx, dword ptr [ebp+08]
:00415477 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415478 FF1510D64B00            Call dword ptr [004BD610]
:0041547E 50                      push eax
:0041547F 8B45FC                  mov eax, dword ptr [ebp-04]
:00415482 50                      push eax
:00415483 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415486 51                      push ecx
:00415487 E8813C0000              call 0041910D
:0041548C 83C40C                  add esp, 0000000C
:0041548F 8B5508                  mov edx, dword ptr [ebp+08]
:00415492 52                      push edx
:00415493 E8C0ECFFFF              call 00414158
:00415498 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415426(C)
|
:0041549B B801000000              mov eax, 00000001
:004154A0 EB0F                    jmp 004154B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041529A(C)
|
:004154A2 6852080000              push 00000852
:004154A7 E81F460500              call 00469ACB
:004154AC 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041528A(C), :004152A0(U), :004152C4(U)
|
:004154AF 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004152DA(U), :00415332(U), :0041538A(U), :00415415(U), :004154A0(U)
|
:004154B1 8BE5                    mov esp, ebp
:004154B3 5D                      pop ebp
:004154B4 C3                      ret



* Referenced by a CALL at Addresses:
|:004153B7   , :00415442   
|
:004154B5 55                      push ebp
:004154B6 8BEC                    mov ebp, esp
:004154B8 83EC08                  sub esp, 00000008
:004154BB 8B4508                  mov eax, dword ptr [ebp+08]
:004154BE 50                      push eax
:004154BF E891DEFFFF              call 00413355
:004154C4 83C404                  add esp, 00000004
:004154C7 8945FC                  mov dword ptr [ebp-04], eax
:004154CA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004154CD 51                      push ecx
:004154CE E882DEFFFF              call 00413355
:004154D3 83C404                  add esp, 00000004
:004154D6 8945F8                  mov dword ptr [ebp-08], eax
:004154D9 8B55F8                  mov edx, dword ptr [ebp-08]
:004154DC 52                      push edx
:004154DD 8B45FC                  mov eax, dword ptr [ebp-04]
:004154E0 50                      push eax
:004154E1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004154E4 51                      push ecx
:004154E5 E8DB030000              call 004158C5
:004154EA 83C40C                  add esp, 0000000C
:004154ED 8B45FC                  mov eax, dword ptr [ebp-04]
:004154F0 8BE5                    mov esp, ebp
:004154F2 5D                      pop ebp
:004154F3 C3                      ret



* Referenced by a CALL at Address:
|:00413DAE   
|
:004154F4 55                      push ebp
:004154F5 8BEC                    mov ebp, esp
:004154F7 83EC18                  sub esp, 00000018
:004154FA 8B450C                  mov eax, dword ptr [ebp+0C]
:004154FD 25FF000000              and eax, 000000FF
:00415502 85C0                    test eax, eax
:00415504 755D                    jne 00415563
:00415506 6A00                    push 00000000
:00415508 6A01                    push 00000001
:0041550A 68F1000000              push 000000F1

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0475, ""
                                  |
:0041550F 6875040000              push 00000475
:00415514 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415517 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415518 FF1510D64B00            Call dword ptr [004BD610]
:0041551E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041551F FF1504D64B00            Call dword ptr [004BD604]
:00415525 6A00                    push 00000000
:00415527 6835040000              push 00000435
:0041552C 8B5508                  mov edx, dword ptr [ebp+08]
:0041552F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415530 FF1510D64B00            Call dword ptr [004BD610]
:00415536 50                      push eax
:00415537 8B4508                  mov eax, dword ptr [ebp+08]
:0041553A 50                      push eax
:0041553B E8463B0000              call 00419086
:00415540 83C40C                  add esp, 0000000C
:00415543 6A00                    push 00000000
:00415545 6836040000              push 00000436
:0041554A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041554D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041554E FF1510D64B00            Call dword ptr [004BD610]
:00415554 50                      push eax
:00415555 8B5508                  mov edx, dword ptr [ebp+08]
:00415558 52                      push edx
:00415559 E8283B0000              call 00419086
:0041555E 83C40C                  add esp, 0000000C
:00415561 EB5B                    jmp 004155BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415504(C)
|
:00415563 6A00                    push 00000000
:00415565 6A01                    push 00000001
:00415567 68F1000000              push 000000F1
:0041556C 6876040000              push 00000476
:00415571 8B4508                  mov eax, dword ptr [ebp+08]
:00415574 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415575 FF1510D64B00            Call dword ptr [004BD610]
:0041557B 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041557C FF1504D64B00            Call dword ptr [004BD604]
:00415582 6A01                    push 00000001
:00415584 6835040000              push 00000435
:00415589 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041558C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041558D FF1510D64B00            Call dword ptr [004BD610]
:00415593 50                      push eax
:00415594 8B5508                  mov edx, dword ptr [ebp+08]
:00415597 52                      push edx
:00415598 E8E93A0000              call 00419086
:0041559D 83C40C                  add esp, 0000000C
:004155A0 6A01                    push 00000001
:004155A2 6836040000              push 00000436
:004155A7 8B4508                  mov eax, dword ptr [ebp+08]
:004155AA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004155AB FF1510D64B00            Call dword ptr [004BD610]
:004155B1 50                      push eax
:004155B2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004155B5 51                      push ecx
:004155B6 E8CB3A0000              call 00419086
:004155BB 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415561(U)
|

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:004155BE 68EA030000              push 000003EA
:004155C3 8B5508                  mov edx, dword ptr [ebp+08]
:004155C6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004155C7 FF1510D64B00            Call dword ptr [004BD610]
:004155CD 8945EC                  mov dword ptr [ebp-14], eax
:004155D0 68FC030000              push 000003FC
:004155D5 8B4508                  mov eax, dword ptr [ebp+08]
:004155D8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004155D9 FF1510D64B00            Call dword ptr [004BD610]
:004155DF 8945E8                  mov dword ptr [ebp-18], eax
:004155E2 6A00                    push 00000000
:004155E4 6820030000              push 00000320
:004155E9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004155EC 51                      push ecx
:004155ED E8D3020000              call 004158C5
:004155F2 83C40C                  add esp, 0000000C
:004155F5 8945F0                  mov dword ptr [ebp-10], eax
:004155F8 6A00                    push 00000000
:004155FA 8B55F0                  mov edx, dword ptr [ebp-10]
:004155FD 52                      push edx
:004155FE 8B45E8                  mov eax, dword ptr [ebp-18]
:00415601 50                      push eax
:00415602 E8BE020000              call 004158C5
:00415607 83C40C                  add esp, 0000000C
:0041560A 8945F8                  mov dword ptr [ebp-08], eax
:0041560D 6A00                    push 00000000
:0041560F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00415612 51                      push ecx
:00415613 8B55EC                  mov edx, dword ptr [ebp-14]
:00415616 52                      push edx
:00415617 E8A9020000              call 004158C5
:0041561C 83C40C                  add esp, 0000000C
:0041561F 8945F0                  mov dword ptr [ebp-10], eax
:00415622 6A00                    push 00000000
:00415624 6A26                    push 00000026
:00415626 8D45FC                  lea eax, dword ptr [ebp-04]
:00415629 50                      push eax
:0041562A 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0041562D 51                      push ecx
:0041562E 8B5508                  mov edx, dword ptr [ebp+08]
:00415631 52                      push edx
:00415632 E82D2D0000              call 00418364
:00415637 83C414                  add esp, 00000014
:0041563A 8B45FC                  mov eax, dword ptr [ebp-04]
:0041563D 50                      push eax
:0041563E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00415641 51                      push ecx
:00415642 E87D2D0000              call 004183C4
:00415647 83C408                  add esp, 00000008
:0041564A 8B55FC                  mov edx, dword ptr [ebp-04]
:0041564D 52                      push edx
:0041564E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00415651 50                      push eax
:00415652 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00415655 51                      push ecx
:00415656 6835040000              push 00000435
:0041565B 8B5508                  mov edx, dword ptr [ebp+08]
:0041565E 52                      push edx
:0041565F E888000000              call 004156EC
:00415664 83C414                  add esp, 00000014
:00415667 8B45FC                  mov eax, dword ptr [ebp-04]
:0041566A 50                      push eax
:0041566B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041566E 51                      push ecx
:0041566F 8B55F8                  mov edx, dword ptr [ebp-08]
:00415672 52                      push edx
:00415673 6836040000              push 00000436
:00415678 8B4508                  mov eax, dword ptr [ebp+08]
:0041567B 50                      push eax
:0041567C E86B000000              call 004156EC
:00415681 83C414                  add esp, 00000014
:00415684 685F040000              push 0000045F
:00415689 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041568C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041568D FF1510D64B00            Call dword ptr [004BD610]
:00415693 50                      push eax
:00415694 8B55F0                  mov edx, dword ptr [ebp-10]
:00415697 52                      push edx
:00415698 8B4508                  mov eax, dword ptr [ebp+08]
:0041569B 50                      push eax
:0041569C E86C3A0000              call 0041910D
:004156A1 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:03FF, "1000"
                                  |
:004156A4 68FF030000              push 000003FF
:004156A9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004156AC 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004156AD FF1510D64B00            Call dword ptr [004BD610]
:004156B3 50                      push eax
:004156B4 8B55F8                  mov edx, dword ptr [ebp-08]
:004156B7 52                      push edx
:004156B8 8B4508                  mov eax, dword ptr [ebp+08]
:004156BB 50                      push eax
:004156BC E84C3A0000              call 0041910D
:004156C1 83C40C                  add esp, 0000000C
:004156C4 6A01                    push 00000001
:004156C6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004156C9 51                      push ecx
:004156CA 8B5508                  mov edx, dword ptr [ebp+08]
:004156CD 52                      push edx
:004156CE E8DF1F0000              call 004176B2
:004156D3 83C40C                  add esp, 0000000C
:004156D6 6A01                    push 00000001
:004156D8 8B45F8                  mov eax, dword ptr [ebp-08]
:004156DB 50                      push eax
:004156DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004156DF 51                      push ecx
:004156E0 E845220000              call 0041792A
:004156E5 83C40C                  add esp, 0000000C
:004156E8 8BE5                    mov esp, ebp
:004156EA 5D                      pop ebp
:004156EB C3                      ret



* Referenced by a CALL at Addresses:
|:00413BA7   , :0041565F   , :0041567C   , :0041728F   
|
:004156EC 55                      push ebp
:004156ED 8BEC                    mov ebp, esp
:004156EF 51                      push ecx
:004156F0 8B450C                  mov eax, dword ptr [ebp+0C]
:004156F3 50                      push eax
:004156F4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004156F7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004156F8 FF1510D64B00            Call dword ptr [004BD610]
:004156FE 8945FC                  mov dword ptr [ebp-04], eax
:00415701 8B55FC                  mov edx, dword ptr [ebp-04]
:00415704 52                      push edx
:00415705 8B4508                  mov eax, dword ptr [ebp+08]
:00415708 50                      push eax
:00415709 E8852D0000              call 00418493
:0041570E 83C408                  add esp, 00000008
:00415711 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415714 51                      push ecx
:00415715 6A01                    push 00000001
:00415717 6803100000              push 00001003
:0041571C 8B55FC                  mov edx, dword ptr [ebp-04]
:0041571F 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00415720 FF1504D64B00            Call dword ptr [004BD604]
:00415726 8B4518                  mov eax, dword ptr [ebp+18]
:00415729 50                      push eax
:0041572A 6A00                    push 00000000
:0041572C 6803100000              push 00001003
:00415731 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415734 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00415735 FF1504D64B00            Call dword ptr [004BD604]
:0041573B 8B5510                  mov edx, dword ptr [ebp+10]
:0041573E 52                      push edx
:0041573F 8B45FC                  mov eax, dword ptr [ebp-04]
:00415742 50                      push eax
:00415743 E8A7000000              call 004157EF
:00415748 83C408                  add esp, 00000008
:0041574B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041574E 51                      push ecx
:0041574F 8B55FC                  mov edx, dword ptr [ebp-04]
:00415752 52                      push edx
:00415753 E807000000              call 0041575F
:00415758 83C408                  add esp, 00000008
:0041575B 8BE5                    mov esp, ebp
:0041575D 5D                      pop ebp
:0041575E C3                      ret



* Referenced by a CALL at Addresses:
|:00415753   , :004157E5   , :00464F21   , :004652FA   
|
:0041575F 55                      push ebp
:00415760 8BEC                    mov ebp, esp
:00415762 51                      push ecx

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00415763 C745FC07000000          mov [ebp-04], 00000007
:0041576A EB09                    jmp 00415775

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004157B1(U)
|
:0041576C 8B45FC                  mov eax, dword ptr [ebp-04]
:0041576F 83E801                  sub eax, 00000001
:00415772 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041576A(U)
|
:00415775 837DFC00                cmp dword ptr [ebp-04], 00000000
:00415779 7C38                    jl 004157B3
:0041577B 8A4DFC                  mov cl, byte ptr [ebp-04]
:0041577E 51                      push ecx
:0041577F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415782 6BC950                  imul ecx, 00000050
:00415785 81C1787F4900            add ecx, 00497F78
:0041578B E850DAFEFF              call 004031E0
:00415790 25FF000000              and eax, 000000FF
:00415795 3DFF000000              cmp eax, 000000FF
:0041579A 7515                    jne 004157B1
:0041579C 6A00                    push 00000000
:0041579E 8B55FC                  mov edx, dword ptr [ebp-04]
:004157A1 52                      push edx
:004157A2 6808100000              push 00001008
:004157A7 8B4508                  mov eax, dword ptr [ebp+08]
:004157AA 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004157AB FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041579A(C)
|
:004157B1 EBB9                    jmp 0041576C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415779(C)
|
:004157B3 8BE5                    mov esp, ebp
:004157B5 5D                      pop ebp
:004157B6 C3                      ret



* Referenced by a CALL at Addresses:
|:0041325A   , :004153DC   , :00415467   , :00416F72   , :00419079   
|
:004157B7 55                      push ebp
:004157B8 8BEC                    mov ebp, esp
:004157BA 6A00                    push 00000000
:004157BC 6A00                    push 00000000
:004157BE 6809100000              push 00001009
:004157C3 8B4508                  mov eax, dword ptr [ebp+08]
:004157C6 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004157C7 FF1504D64B00            Call dword ptr [004BD604]
:004157CD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004157D0 51                      push ecx
:004157D1 8B5508                  mov edx, dword ptr [ebp+08]
:004157D4 52                      push edx
:004157D5 E815000000              call 004157EF
:004157DA 83C408                  add esp, 00000008
:004157DD 8B450C                  mov eax, dword ptr [ebp+0C]
:004157E0 50                      push eax
:004157E1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004157E4 51                      push ecx
:004157E5 E875FFFFFF              call 0041575F
:004157EA 83C408                  add esp, 00000008
:004157ED 5D                      pop ebp
:004157EE C3                      ret



* Referenced by a CALL at Addresses:
|:00415743   , :004157D5   
|
:004157EF 55                      push ebp
:004157F0 8BEC                    mov ebp, esp
:004157F2 83EC30                  sub esp, 00000030
:004157F5 C745D40F000000          mov [ebp-2C], 0000000F
:004157FC C745E000000000          mov [ebp-20], 00000000
:00415803 C745E400000000          mov [ebp-1C], 00000000
:0041580A C745DC00000000          mov [ebp-24], 00000000
:00415811 C745E8FFFFFFFF          mov [ebp-18], FFFFFFFF
:00415818 C745EC20000000          mov [ebp-14], 00000020
:0041581F C745D000000000          mov [ebp-30], 00000000
:00415826 EB09                    jmp 00415831

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004158BC(U)
|
:00415828 8B45D0                  mov eax, dword ptr [ebp-30]
:0041582B 83C001                  add eax, 00000001
:0041582E 8945D0                  mov dword ptr [ebp-30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415826(U)
|
:00415831 837DD008                cmp dword ptr [ebp-30], 00000008
:00415835 0F8D86000000            jnl 004158C1
:0041583B 8A4DD0                  mov cl, byte ptr [ebp-30]
:0041583E 51                      push ecx
:0041583F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415842 6BC950                  imul ecx, 00000050
:00415845 81C1787F4900            add ecx, 00497F78
:0041584B E890D9FEFF              call 004031E0
:00415850 25FF000000              and eax, 000000FF
:00415855 8945FC                  mov dword ptr [ebp-04], eax
:00415858 8B55D0                  mov edx, dword ptr [ebp-30]
:0041585B 8955D8                  mov dword ptr [ebp-28], edx
:0041585E 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00415865 7522                    jne 00415889
:00415867 6A00                    push 00000000
:00415869 8B45D0                  mov eax, dword ptr [ebp-30]
:0041586C 50                      push eax
:0041586D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415870 51                      push ecx
:00415871 E8633A0000              call 004192D9
:00415876 83C40C                  add esp, 0000000C
:00415879 C745F000000000          mov [ebp-10], 00000000
:00415880 C745F400000000          mov [ebp-0C], 00000000
:00415887 EB1E                    jmp 004158A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415865(C)
|
:00415889 C745F0FFFFFFFF          mov [ebp-10], FFFFFFFF
:00415890 8B55FC                  mov edx, dword ptr [ebp-04]
:00415893 52                      push edx
:00415894 8B45D0                  mov eax, dword ptr [ebp-30]
:00415897 50                      push eax
:00415898 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041589B 51                      push ecx
:0041589C E8383A0000              call 004192D9
:004158A1 83C40C                  add esp, 0000000C
:004158A4 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415887(U)
|
:004158A7 8D55D4                  lea edx, dword ptr [ebp-2C]
:004158AA 52                      push edx
:004158AB 6A00                    push 00000000
:004158AD 6807100000              push 00001007
:004158B2 8B4508                  mov eax, dword ptr [ebp+08]
:004158B5 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004158B6 FF1504D64B00            Call dword ptr [004BD604]
:004158BC E967FFFFFF              jmp 00415828

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415835(C)
|
:004158C1 8BE5                    mov esp, ebp
:004158C3 5D                      pop ebp
:004158C4 C3                      ret



* Referenced by a CALL at Addresses:
|:00413B1C   , :004154E5   , :004155ED   , :00415602   , :00415617   
|:00417209   , :00464008   
|
:004158C5 55                      push ebp
:004158C6 8BEC                    mov ebp, esp
:004158C8 83EC4C                  sub esp, 0000004C
:004158CB 6A00                    push 00000000
:004158CD 6A00                    push 00000000
:004158CF 684B010000              push 0000014B
:004158D4 8B4508                  mov eax, dword ptr [ebp+08]
:004158D7 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004158D8 FF1504D64B00            Call dword ptr [004BD604]
:004158DE C745BC00000000          mov [ebp-44], 00000000
:004158E5 C745B8FFFF0000          mov [ebp-48], 0000FFFF
:004158EC C745B400000000          mov [ebp-4C], 00000000
:004158F3 EB09                    jmp 004158FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415973(U)
|
:004158F5 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:004158F8 83C101                  add ecx, 00000001
:004158FB 894DB4                  mov dword ptr [ebp-4C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004158F3(U)
|
:004158FE 817DB4C8000000          cmp dword ptr [ebp-4C], 000000C8
:00415905 736E                    jnb 00415975
:00415907 8B55B4                  mov edx, dword ptr [ebp-4C]
:0041590A 52                      push edx
:0041590B E88085FFFF              call 0040DE90
:00415910 83C404                  add esp, 00000004
:00415913 85C0                    test eax, eax
:00415915 745C                    je 00415973
:00415917 8B45B4                  mov eax, dword ptr [ebp-4C]
:0041591A 3B450C                  cmp eax, dword ptr [ebp+0C]
:0041591D 7454                    je 00415973
:0041591F 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00415922 51                      push ecx
:00415923 8B55B4                  mov edx, dword ptr [ebp-4C]
:00415926 52                      push edx
:00415927 E887000000              call 004159B3
:0041592C 83C408                  add esp, 00000008
:0041592F 8D45C0                  lea eax, dword ptr [ebp-40]
:00415932 50                      push eax
:00415933 6A00                    push 00000000
:00415935 6843010000              push 00000143
:0041593A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041593D 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041593E FF1504D64B00            Call dword ptr [004BD604]
:00415944 8B55B4                  mov edx, dword ptr [ebp-4C]
:00415947 52                      push edx
:00415948 8B45BC                  mov eax, dword ptr [ebp-44]
:0041594B 50                      push eax
:0041594C 6851010000              push 00000151
:00415951 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415954 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00415955 FF1504D64B00            Call dword ptr [004BD604]
:0041595B 817DB8FFFF0000          cmp dword ptr [ebp-48], 0000FFFF
:00415962 7506                    jne 0041596A
:00415964 8B55B4                  mov edx, dword ptr [ebp-4C]
:00415967 8955B8                  mov dword ptr [ebp-48], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415962(C)
|
:0041596A 8B45BC                  mov eax, dword ptr [ebp-44]
:0041596D 83C001                  add eax, 00000001
:00415970 8945BC                  mov dword ptr [ebp-44], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415915(C), :0041591D(C)
|
:00415973 EB80                    jmp 004158F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415905(C)
|
:00415975 837D1000                cmp dword ptr [ebp+10], 00000000
:00415979 7406                    je 00415981
:0041597B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041597E 894DB8                  mov dword ptr [ebp-48], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415979(C)
|
:00415981 837DBC00                cmp dword ptr [ebp-44], 00000000
:00415985 7425                    je 004159AC
:00415987 8D55C0                  lea edx, dword ptr [ebp-40]
:0041598A 52                      push edx
:0041598B 8B45B8                  mov eax, dword ptr [ebp-48]
:0041598E 50                      push eax
:0041598F E81F000000              call 004159B3
:00415994 83C408                  add esp, 00000008
:00415997 8D4DC0                  lea ecx, dword ptr [ebp-40]
:0041599A 51                      push ecx
:0041599B 6AFF                    push FFFFFFFF
:0041599D 684D010000              push 0000014D
:004159A2 8B5508                  mov edx, dword ptr [ebp+08]
:004159A5 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004159A6 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415985(C)
|
:004159AC 8B45B8                  mov eax, dword ptr [ebp-48]
:004159AF 8BE5                    mov esp, ebp
:004159B1 5D                      pop ebp
:004159B2 C3                      ret



* Referenced by a CALL at Addresses:
|:00415927   , :0041598F   
|
:004159B3 55                      push ebp
:004159B4 8BEC                    mov ebp, esp
:004159B6 83EC40                  sub esp, 00000040
:004159B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004159BC 6BC950                  imul ecx, 00000050
:004159BF 81C1787F4900            add ecx, 00497F78
:004159C5 E8D6D7FEFF              call 004031A0
:004159CA 25FF000000              and eax, 000000FF
:004159CF 8B0485B0D64700          mov eax, dword ptr [4*eax+0047D6B0]
:004159D6 50                      push eax
:004159D7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004159DA 51                      push ecx
:004159DB E82CB8FEFF              call 0040120C
:004159E0 83C404                  add esp, 00000004
:004159E3 50                      push eax

* Possible StringData Ref from Data Obj ->"%s ]%s^"
                                  |
:004159E4 6818C84700              push 0047C818
:004159E9 8D55C0                  lea edx, dword ptr [ebp-40]
:004159EC 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004159ED FF1504D74B00            Call dword ptr [004BD704]
:004159F3 83C410                  add esp, 00000010
:004159F6 8D45C0                  lea eax, dword ptr [ebp-40]
:004159F9 50                      push eax

* Possible StringData Ref from Data Obj ->"%20s"
                                  |
:004159FA 6824C84700              push 0047C824
:004159FF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00415A02 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00415A03 FF1504D74B00            Call dword ptr [004BD704]
:00415A09 83C40C                  add esp, 0000000C
:00415A0C 8BE5                    mov esp, ebp
:00415A0E 5D                      pop ebp
:00415A0F C3                      ret



* Referenced by a CALL at Address:
|:00413B2D   
|
:00415A10 55                      push ebp
:00415A11 8BEC                    mov ebp, esp
:00415A13 51                      push ecx
:00415A14 8B0DB44D4B00            mov ecx, dword ptr [004B4DB4]
:00415A1A E861D7FEFF              call 00403180
:00415A1F 8945FC                  mov dword ptr [ebp-04], eax
:00415A22 8B0DB44D4B00            mov ecx, dword ptr [004B4DB4]
:00415A28 E8D7D6FEFF              call 00403104
:00415A2D 50                      push eax
:00415A2E 6A00                    push 00000000
:00415A30 6843010000              push 00000143
:00415A35 8B4508                  mov eax, dword ptr [ebp+08]
:00415A38 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00415A39 FF1504D64B00            Call dword ptr [004BD604]
:00415A3F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415A42 51                      push ecx
:00415A43 6A00                    push 00000000
:00415A45 6851010000              push 00000151
:00415A4A 8B5508                  mov edx, dword ptr [ebp+08]
:00415A4D 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00415A4E FF1504D64B00            Call dword ptr [004BD604]
:00415A54 8B0DB44D4B00            mov ecx, dword ptr [004B4DB4]
:00415A5A E8A5D6FEFF              call 00403104
:00415A5F 50                      push eax
:00415A60 6AFF                    push FFFFFFFF
:00415A62 684D010000              push 0000014D
:00415A67 8B4508                  mov eax, dword ptr [ebp+08]
:00415A6A 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00415A6B FF1504D64B00            Call dword ptr [004BD604]
:00415A71 8B45FC                  mov eax, dword ptr [ebp-04]
:00415A74 8BE5                    mov esp, ebp
:00415A76 5D                      pop ebp
:00415A77 C3                      ret


:00415A78 55                      push ebp
:00415A79 8BEC                    mov ebp, esp
:00415A7B 83EC1C                  sub esp, 0000001C
:00415A7E 56                      push esi
:00415A7F 57                      push edi
:00415A80 8B450C                  mov eax, dword ptr [ebp+0C]
:00415A83 8945E8                  mov dword ptr [ebp-18], eax
:00415A86 837DE84E                cmp dword ptr [ebp-18], 0000004E
:00415A8A 7719                    ja 00415AA5
:00415A8C 837DE84E                cmp dword ptr [ebp-18], 0000004E
:00415A90 0F84BC010000            je 00415C52
:00415A96 837DE802                cmp dword ptr [ebp-18], 00000002
:00415A9A 0F84AB000000            je 00415B4B
:00415AA0 E98E030000              jmp 00415E33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415A8A(C)
|
:00415AA5 817DE810010000          cmp dword ptr [ebp-18], 00000110
:00415AAC 771B                    ja 00415AC9
:00415AAE 817DE810010000          cmp dword ptr [ebp-18], 00000110
:00415AB5 743E                    je 00415AF5
:00415AB7 817DE8A0000000          cmp dword ptr [ebp-18], 000000A0
:00415ABE 0F8478010000            je 00415C3C
:00415AC4 E96A030000              jmp 00415E33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415AAC(C)
|
:00415AC9 817DE811010000          cmp dword ptr [ebp-18], 00000111
:00415AD0 0F84B3000000            je 00415B89
:00415AD6 817DE800020000          cmp dword ptr [ebp-18], 00000200
:00415ADD 0F841E010000            je 00415C01
:00415AE3 817DE802020000          cmp dword ptr [ebp-18], 00000202
:00415AEA 0F84E6000000            je 00415BD6
:00415AF0 E93E030000              jmp 00415E33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415AB5(C)
|
:00415AF5 6880000000              push 00000080
:00415AFA 6A00                    push 00000000
:00415AFC 6890B34800              push 0048B390
:00415B01 E8CA9F0500              call 0046FAD0
:00415B06 83C40C                  add esp, 0000000C
:00415B09 6A40                    push 00000040
:00415B0B 6A00                    push 00000000
:00415B0D 6860AE4800              push 0048AE60
:00415B12 E8B99F0500              call 0046FAD0
:00415B17 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:00415B1A 6800040000              push 00000400
:00415B1F 6A00                    push 00000000
:00415B21 6810AF4800              push 0048AF10
:00415B26 E8A59F0500              call 0046FAD0
:00415B2B 83C40C                  add esp, 0000000C
:00415B2E 8A0D24B44800            mov cl, byte ptr [0048B424]
:00415B34 51                      push ecx
:00415B35 8B5508                  mov edx, dword ptr [ebp+08]
:00415B38 52                      push edx
:00415B39 E8A8150000              call 004170E6
:00415B3E 83C408                  add esp, 00000008
:00415B41 B801000000              mov eax, 00000001
:00415B46 E9EA020000              jmp 00415E35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415A9A(C)
|
:00415B4B 6880000000              push 00000080
:00415B50 6A00                    push 00000000
:00415B52 6890B34800              push 0048B390
:00415B57 E8749F0500              call 0046FAD0
:00415B5C 83C40C                  add esp, 0000000C
:00415B5F 6A40                    push 00000040
:00415B61 6A00                    push 00000000
:00415B63 6860AE4800              push 0048AE60
:00415B68 E8639F0500              call 0046FAD0
:00415B6D 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:00415B70 6800040000              push 00000400
:00415B75 6A00                    push 00000000
:00415B77 6810AF4800              push 0048AF10
:00415B7C E84F9F0500              call 0046FAD0
:00415B81 83C40C                  add esp, 0000000C
:00415B84 E9AA020000              jmp 00415E33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415AD0(C)
|
:00415B89 833D20B4480000          cmp dword ptr [0048B420], 00000000
:00415B90 7418                    je 00415BAA

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:00415B92 FF1500D44B00            Call dword ptr [004BD400]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:00415B98 FF15D4D64B00            Call dword ptr [004BD6D4]
:00415B9E C70520B4480000000000    mov dword ptr [0048B420], 00000000
:00415BA8 EB27                    jmp 00415BD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415B90(C)
|
:00415BAA 6824B44800              push 0048B424
:00415BAF 8B4514                  mov eax, dword ptr [ebp+14]
:00415BB2 50                      push eax
:00415BB3 668B4D10                mov cx, word ptr [ebp+10]
:00415BB7 51                      push ecx
:00415BB8 8B5510                  mov edx, dword ptr [ebp+10]
:00415BBB C1EA10                  shr edx, 10
:00415BBE 81E2FFFF0000            and edx, 0000FFFF
:00415BC4 52                      push edx
:00415BC5 8B4508                  mov eax, dword ptr [ebp+08]
:00415BC8 50                      push eax
:00415BC9 E800130000              call 00416ECE
:00415BCE 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415BA8(U)
|
:00415BD1 E95D020000              jmp 00415E33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415AEA(C)
|
:00415BD6 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415BD9 51                      push ecx
:00415BDA 6840B34800              push 0048B340
:00415BDF 8B1520B44800            mov edx, dword ptr [0048B420]
:00415BE5 52                      push edx
:00415BE6 8B4508                  mov eax, dword ptr [ebp+08]
:00415BE9 50                      push eax
:00415BEA E8790A0000              call 00416668
:00415BEF 83C410                  add esp, 00000010
:00415BF2 C70520B4480000000000    mov dword ptr [0048B420], 00000000
:00415BFC E932020000              jmp 00415E33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415ADD(C)
|
:00415C01 833D20B4480000          cmp dword ptr [0048B420], 00000000
:00415C08 742D                    je 00415C37
:00415C0A 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415C0D C1E910                  shr ecx, 10
:00415C10 81E1FFFF0000            and ecx, 0000FFFF
:00415C16 81E1FFFF0000            and ecx, 0000FFFF
:00415C1C 51                      push ecx
:00415C1D 8B5514                  mov edx, dword ptr [ebp+14]
:00415C20 81E2FFFF0000            and edx, 0000FFFF
:00415C26 52                      push edx

* Reference To: COMCTL32.ImageList_DragMove, Ord:001Ah
                                  |
:00415C27 FF15FCD34B00            Call dword ptr [004BD3FC]
:00415C2D B801000000              mov eax, 00000001
:00415C32 E9FE010000              jmp 00415E35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415C08(C)
|
:00415C37 E9F7010000              jmp 00415E33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415ABE(C)
|
:00415C3C A168B44800              mov eax, dword ptr [0048B468]
:00415C41 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:00415C42 FF15CCD54B00            Call dword ptr [004BD5CC]
:00415C48 B801000000              mov eax, 00000001
:00415C4D E9E3010000              jmp 00415E35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415A90(C)
|
:00415C52 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415C55 894DFC                  mov dword ptr [ebp-04], ecx
:00415C58 8B55FC                  mov edx, dword ptr [ebp-04]
:00415C5B 8B4208                  mov eax, dword ptr [edx+08]
:00415C5E 8945E4                  mov dword ptr [ebp-1C], eax
:00415C61 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00415C64 83C16D                  add ecx, 0000006D
:00415C67 894DE4                  mov dword ptr [ebp-1C], ecx
:00415C6A 837DE46B                cmp dword ptr [ebp-1C], 0000006B
:00415C6E 0F876B010000            ja 00415DDF
:00415C74 8B45E4                  mov eax, dword ptr [ebp-1C]
:00415C77 33D2                    xor edx, edx
:00415C79 8A90515E4100            mov dl, byte ptr [eax+00415E51]
:00415C7F FF24953D5E4100          jmp dword ptr [4*edx+00415E3D]
:00415C86 817D1048040000          cmp dword ptr [ebp+10], 00000448
:00415C8D 7412                    je 00415CA1
:00415C8F 817D101A040000          cmp dword ptr [ebp+10], 0000041A
:00415C96 7409                    je 00415CA1
:00415C98 817D1049040000          cmp dword ptr [ebp+10], 00000449
:00415C9F 752F                    jne 00415CD0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415C8D(C), :00415C96(C)
|
:00415CA1 8B7514                  mov esi, dword ptr [ebp+14]
:00415CA4 B90B000000              mov ecx, 0000000B
:00415CA9 BF40B34800              mov edi, 0048B340
:00415CAE F3                      repz
:00415CAF A5                      movsd
:00415CB0 6840B34800              push 0048B340
:00415CB5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415CB8 51                      push ecx
:00415CB9 E875F4FFFF              call 00415133
:00415CBE 83C408                  add esp, 00000008
:00415CC1 A320B44800              mov dword ptr [0048B420], eax
:00415CC6 A120B44800              mov eax, dword ptr [0048B420]
:00415CCB E965010000              jmp 00415E35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415C9F(C)
|
:00415CD0 E95E010000              jmp 00415E33
:00415CD5 8B55FC                  mov edx, dword ptr [ebp-04]
:00415CD8 817A0448040000          cmp dword ptr [edx+04], 00000448
:00415CDF 7418                    je 00415CF9
:00415CE1 8B45FC                  mov eax, dword ptr [ebp-04]
:00415CE4 8178041A040000          cmp dword ptr [eax+04], 0000041A
:00415CEB 740C                    je 00415CF9
:00415CED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415CF0 81790449040000          cmp dword ptr [ecx+04], 00000449
:00415CF7 7514                    jne 00415D0D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415CDF(C), :00415CEB(C)
|
:00415CF9 8B55FC                  mov edx, dword ptr [ebp-04]
:00415CFC 52                      push edx
:00415CFD 8B4510                  mov eax, dword ptr [ebp+10]
:00415D00 50                      push eax
:00415D01 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415D04 51                      push ecx
:00415D05 E8A2080000              call 004165AC
:00415D0A 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415CF7(C)
|
:00415D0D E921010000              jmp 00415E33
:00415D12 8B55FC                  mov edx, dword ptr [ebp-04]
:00415D15 817A0448040000          cmp dword ptr [edx+04], 00000448
:00415D1C 7418                    je 00415D36
:00415D1E 8B45FC                  mov eax, dword ptr [ebp-04]
:00415D21 8178041A040000          cmp dword ptr [eax+04], 0000041A
:00415D28 740C                    je 00415D36
:00415D2A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415D2D 81790449040000          cmp dword ptr [ecx+04], 00000449
:00415D34 7510                    jne 00415D46

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415D1C(C), :00415D28(C)
|
:00415D36 8B55FC                  mov edx, dword ptr [ebp-04]
:00415D39 52                      push edx
:00415D3A 8B4508                  mov eax, dword ptr [ebp+08]
:00415D3D 50                      push eax
:00415D3E E87A010000              call 00415EBD
:00415D43 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415D34(C)
|
:00415D46 E9E8000000              jmp 00415E33
:00415D4B 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415D4E 894DF8                  mov dword ptr [ebp-08], ecx
:00415D51 8B55F8                  mov edx, dword ptr [ebp-08]
:00415D54 8B4214                  mov eax, dword ptr [edx+14]
:00415D57 83E002                  and eax, 00000002
:00415D5A 85C0                    test eax, eax
:00415D5C 747F                    je 00415DDD
:00415D5E 684A040000              push 0000044A
:00415D63 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415D66 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415D67 FF1510D64B00            Call dword ptr [004BD610]
:00415D6D 50                      push eax
:00415D6E E8E2D5FFFF              call 00413355
:00415D73 83C404                  add esp, 00000004
:00415D76 8945F4                  mov dword ptr [ebp-0C], eax
:00415D79 8B55F8                  mov edx, dword ptr [ebp-08]
:00415D7C 817A0448040000          cmp dword ptr [edx+04], 00000448
:00415D83 7418                    je 00415D9D
:00415D85 8B45F8                  mov eax, dword ptr [ebp-08]
:00415D88 8178041A040000          cmp dword ptr [eax+04], 0000041A
:00415D8F 740C                    je 00415D9D
:00415D91 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00415D94 81790449040000          cmp dword ptr [ecx+04], 00000449
:00415D9B 752E                    jne 00415DCB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415D83(C), :00415D8F(C)
|
:00415D9D 8B55F8                  mov edx, dword ptr [ebp-08]
:00415DA0 8B420C                  mov eax, dword ptr [edx+0C]
:00415DA3 50                      push eax
:00415DA4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00415DA7 8B11                    mov edx, dword ptr [ecx]
:00415DA9 52                      push edx
:00415DAA E8AD340000              call 0041925C
:00415DAF 83C408                  add esp, 00000008
:00415DB2 8945F0                  mov dword ptr [ebp-10], eax
:00415DB5 8B45F0                  mov eax, dword ptr [ebp-10]
:00415DB8 50                      push eax
:00415DB9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00415DBC 51                      push ecx
:00415DBD 8B5508                  mov edx, dword ptr [ebp+08]
:00415DC0 52                      push edx
:00415DC1 E868020000              call 0041602E
:00415DC6 83C40C                  add esp, 0000000C
:00415DC9 EB12                    jmp 00415DDD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415D9B(C)
|
:00415DCB 6A01                    push 00000001
:00415DCD 8B45F4                  mov eax, dword ptr [ebp-0C]
:00415DD0 50                      push eax
:00415DD1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415DD4 51                      push ecx
:00415DD5 E8C51D0000              call 00417B9F
:00415DDA 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415D5C(C), :00415DC9(U)
|
:00415DDD EB54                    jmp 00415E33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415C6E(C)
|
:00415DDF 817D1048040000          cmp dword ptr [ebp+10], 00000448
:00415DE6 7412                    je 00415DFA
:00415DE8 817D101A040000          cmp dword ptr [ebp+10], 0000041A
:00415DEF 7409                    je 00415DFA
:00415DF1 817D1049040000          cmp dword ptr [ebp+10], 00000449
:00415DF8 7539                    jne 00415E33

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415DE6(C), :00415DEF(C)
|
:00415DFA 6A00                    push 00000000
:00415DFC 6A00                    push 00000000
:00415DFE 68F0000000              push 000000F0

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043C, ""
                                  |
:00415E03 683C040000              push 0000043C
:00415E08 8B5508                  mov edx, dword ptr [ebp+08]
:00415E0B 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00415E0C FF15D4D54B00            Call dword ptr [004BD5D4]
:00415E12 8945EC                  mov dword ptr [ebp-14], eax
:00415E15 8B45EC                  mov eax, dword ptr [ebp-14]
:00415E18 50                      push eax
:00415E19 8B4D14                  mov ecx, dword ptr [ebp+14]
:00415E1C 51                      push ecx
:00415E1D 8B5510                  mov edx, dword ptr [ebp+10]
:00415E20 52                      push edx
:00415E21 8B450C                  mov eax, dword ptr [ebp+0C]
:00415E24 50                      push eax
:00415E25 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415E28 51                      push ecx
:00415E29 E8FA260000              call 00418528
:00415E2E 83C414                  add esp, 00000014
:00415E31 EB02                    jmp 00415E35

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415AA0(U), :00415AC4(U), :00415AF0(U), :00415B84(U), :00415BD1(U)
|:00415BFC(U), :00415C37(U), :00415CD0(U), :00415D0D(U), :00415D46(U)
|:00415DDD(U), :00415DF8(C)
|
:00415E33 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415B46(U), :00415C32(U), :00415C4D(U), :00415CCB(U), :00415E31(U)
|
:00415E35 5F                      pop edi
:00415E36 5E                      pop esi
:00415E37 8BE5                    mov esp, ebp
:00415E39 5D                      pop ebp
:00415E3A C21000                  ret 0010



:00415E3D 865C4100                DWORD 00415C86
:00415E41 4B5D4100                DWORD 00415D4B
:00415E45 D55C4100                DWORD 00415CD5
:00415E49 125D4100                DWORD 00415D12
:00415E4D DF5D4100                DWORD 00415DDF


:00415E51 000404                  add byte ptr [esp+eax], al
:00415E54 0404                    add al, 04
:00415E56 0404                    add al, 04
:00415E58 0401                    add al, 01
:00415E5A 0404                    add al, 04
:00415E5C 0404                    add al, 04
:00415E5E 0404                    add al, 04
:00415E60 0404                    add al, 04
:00415E62 0404                    add al, 04
:00415E64 0404                    add al, 04
:00415E66 0404                    add al, 04
:00415E68 0404                    add al, 04
:00415E6A 0404                    add al, 04
:00415E6C 0404                    add al, 04
:00415E6E 0404                    add al, 04
:00415E70 0404                    add al, 04
:00415E72 0404                    add al, 04
:00415E74 0404                    add al, 04
:00415E76 0404                    add al, 04
:00415E78 0404                    add al, 04
:00415E7A 0404                    add al, 04
:00415E7C 0404                    add al, 04
:00415E7E 0404                    add al, 04
:00415E80 0404                    add al, 04
:00415E82 0404                    add al, 04
:00415E84 0404                    add al, 04
:00415E86 0404                    add al, 04
:00415E88 0404                    add al, 04
:00415E8A 0404                    add al, 04
:00415E8C 0404                    add al, 04
:00415E8E 0404                    add al, 04
:00415E90 0404                    add al, 04
:00415E92 0404                    add al, 04
:00415E94 0404                    add al, 04
:00415E96 0404                    add al, 04
:00415E98 0404                    add al, 04
:00415E9A 0404                    add al, 04
:00415E9C 0404                    add al, 04
:00415E9E 0404                    add al, 04
:00415EA0 0404                    add al, 04
:00415EA2 0404                    add al, 04
:00415EA4 0404                    add al, 04
:00415EA6 0404                    add al, 04
:00415EA8 0404                    add al, 04
:00415EAA 0404                    add al, 04
:00415EAC 0404                    add al, 04
:00415EAE 0404                    add al, 04
:00415EB0 0404                    add al, 04
:00415EB2 0404                    add al, 04
:00415EB4 0404                    add al, 04
:00415EB6 0404                    add al, 04
:00415EB8 0402                    add al, 02
:00415EBA 0404                    add al, 04
:00415EBC 03                      BYTE 03h


* Referenced by a CALL at Address:
|:00415D3E   
|
:00415EBD 55                      push ebp
:00415EBE 8BEC                    mov ebp, esp
:00415EC0 51                      push ecx
:00415EC1 8B450C                  mov eax, dword ptr [ebp+0C]
:00415EC4 8B4804                  mov ecx, dword ptr [eax+04]
:00415EC7 51                      push ecx
:00415EC8 8B5508                  mov edx, dword ptr [ebp+08]
:00415ECB 52                      push edx
:00415ECC E82A000000              call 00415EFB
:00415ED1 83C408                  add esp, 00000008
:00415ED4 8B450C                  mov eax, dword ptr [ebp+0C]
:00415ED7 8B08                    mov ecx, dword ptr [eax]
:00415ED9 51                      push ecx
:00415EDA E8E4310000              call 004190C3
:00415EDF 83C404                  add esp, 00000004
:00415EE2 8945FC                  mov dword ptr [ebp-04], eax
:00415EE5 837DFC00                cmp dword ptr [ebp-04], 00000000
:00415EE9 7D0C                    jge 00415EF7
:00415EEB 8B5508                  mov edx, dword ptr [ebp+08]
:00415EEE 52                      push edx
:00415EEF E8BD000000              call 00415FB1
:00415EF4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415EE9(C)
|
:00415EF7 8BE5                    mov esp, ebp
:00415EF9 5D                      pop ebp
:00415EFA C3                      ret



* Referenced by a CALL at Addresses:
|:00415ECC   , :004165BB   
|
:00415EFB 55                      push ebp
:00415EFC 8BEC                    mov ebp, esp
:00415EFE 51                      push ecx
:00415EFF 8B450C                  mov eax, dword ptr [ebp+0C]
:00415F02 8945FC                  mov dword ptr [ebp-04], eax
:00415F05 817DFC1A040000          cmp dword ptr [ebp-04], 0000041A
:00415F0C 743D                    je 00415F4B
:00415F0E 817DFC48040000          cmp dword ptr [ebp-04], 00000448
:00415F15 7402                    je 00415F19
:00415F17 EB64                    jmp 00415F7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415F15(C)
|
:00415F19 681A040000              push 0000041A
:00415F1E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415F21 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415F22 FF1510D64B00            Call dword ptr [004BD610]
:00415F28 50                      push eax
:00415F29 E805CBFFFF              call 00412A33
:00415F2E 83C404                  add esp, 00000004
:00415F31 6849040000              push 00000449
:00415F36 8B5508                  mov edx, dword ptr [ebp+08]
:00415F39 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415F3A FF1510D64B00            Call dword ptr [004BD610]
:00415F40 50                      push eax
:00415F41 E8EDCAFFFF              call 00412A33
:00415F46 83C404                  add esp, 00000004
:00415F49 EB62                    jmp 00415FAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415F0C(C)
|
:00415F4B 6848040000              push 00000448
:00415F50 8B4508                  mov eax, dword ptr [ebp+08]
:00415F53 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415F54 FF1510D64B00            Call dword ptr [004BD610]
:00415F5A 50                      push eax
:00415F5B E8D3CAFFFF              call 00412A33
:00415F60 83C404                  add esp, 00000004
:00415F63 6849040000              push 00000449
:00415F68 8B4D08                  mov ecx, dword ptr [ebp+08]
:00415F6B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415F6C FF1510D64B00            Call dword ptr [004BD610]
:00415F72 50                      push eax
:00415F73 E8BBCAFFFF              call 00412A33
:00415F78 83C404                  add esp, 00000004
:00415F7B EB30                    jmp 00415FAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00415F17(U)
|
:00415F7D 6848040000              push 00000448
:00415F82 8B5508                  mov edx, dword ptr [ebp+08]
:00415F85 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415F86 FF1510D64B00            Call dword ptr [004BD610]
:00415F8C 50                      push eax
:00415F8D E8A1CAFFFF              call 00412A33
:00415F92 83C404                  add esp, 00000004
:00415F95 681A040000              push 0000041A
:00415F9A 8B4508                  mov eax, dword ptr [ebp+08]
:00415F9D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415F9E FF1510D64B00            Call dword ptr [004BD610]
:00415FA4 50                      push eax
:00415FA5 E889CAFFFF              call 00412A33
:00415FAA 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00415F49(U), :00415F7B(U)
|
:00415FAD 8BE5                    mov esp, ebp
:00415FAF 5D                      pop ebp
:00415FB0 C3                      ret



* Referenced by a CALL at Addresses:
|:00415EEF   , :004165DE   , :00416F9E   , :00417014   , :0041708A   
|
:00415FB1 55                      push ebp
:00415FB2 8BEC                    mov ebp, esp
:00415FB4 51                      push ecx
:00415FB5 684A040000              push 0000044A
:00415FBA 8B4508                  mov eax, dword ptr [ebp+08]
:00415FBD 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415FBE FF1510D64B00            Call dword ptr [004BD610]
:00415FC4 50                      push eax
:00415FC5 E88BD3FFFF              call 00413355
:00415FCA 83C404                  add esp, 00000004
:00415FCD 8945FC                  mov dword ptr [ebp-04], eax
:00415FD0 6A01                    push 00000001
:00415FD2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00415FD5 51                      push ecx
:00415FD6 8B5508                  mov edx, dword ptr [ebp+08]
:00415FD9 52                      push edx
:00415FDA E8C01B0000              call 00417B9F
:00415FDF 83C40C                  add esp, 0000000C
:00415FE2 6848040000              push 00000448
:00415FE7 8B4508                  mov eax, dword ptr [ebp+08]
:00415FEA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00415FEB FF1510D64B00            Call dword ptr [004BD610]
:00415FF1 50                      push eax
:00415FF2 E83CCAFFFF              call 00412A33
:00415FF7 83C404                  add esp, 00000004
:00415FFA 681A040000              push 0000041A
:00415FFF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416002 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416003 FF1510D64B00            Call dword ptr [004BD610]
:00416009 50                      push eax
:0041600A E824CAFFFF              call 00412A33
:0041600F 83C404                  add esp, 00000004
:00416012 6849040000              push 00000449
:00416017 8B5508                  mov edx, dword ptr [ebp+08]
:0041601A 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041601B FF1510D64B00            Call dword ptr [004BD610]
:00416021 50                      push eax
:00416022 E80CCAFFFF              call 00412A33
:00416027 83C404                  add esp, 00000004
:0041602A 8BE5                    mov esp, ebp
:0041602C 5D                      pop ebp
:0041602D C3                      ret



* Referenced by a CALL at Address:
|:00415DC1   
|
:0041602E 55                      push ebp
:0041602F 8BEC                    mov ebp, esp
:00416031 83EC1C                  sub esp, 0000001C
:00416034 53                      push ebx
:00416035 56                      push esi
:00416036 8B4508                  mov eax, dword ptr [ebp+08]
:00416039 50                      push eax
:0041603A E827200000              call 00418066
:0041603F 83C404                  add esp, 00000004
:00416042 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416045 6BC922                  imul ecx, 00000022
:00416048 81C1D0474900            add ecx, 004947D0
:0041604E E80D9EFFFF              call 0040FE60
:00416053 25FF000000              and eax, 000000FF
:00416058 8945F4                  mov dword ptr [ebp-0C], eax
:0041605B 837DF411                cmp dword ptr [ebp-0C], 00000011
:0041605F 0F8F4F020000            jg 004162B4
:00416065 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416068 51                      push ecx
:00416069 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041606C 6BC950                  imul ecx, 00000050
:0041606F 81C1787F4900            add ecx, 00497F78
:00416075 E8BFB9FEFF              call 00401A39
:0041607A 85C0                    test eax, eax
:0041607C 0F84FB010000            je 0041627D

* Possible StringData Ref from Data Obj ->"iH˳"
                                  |
:00416082 682CC84700              push 0047C82C
:00416087 68A9040000              push 000004A9
:0041608C 8B5508                  mov edx, dword ptr [ebp+08]
:0041608F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416090 FF1510D64B00            Call dword ptr [004BD610]
:00416096 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00416097 FF1514D64B00            Call dword ptr [004BD614]
:0041609D 68F4010000              push 000001F4
:004160A2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004160A5 6BC950                  imul ecx, 00000050
:004160A8 81C1787F4900            add ecx, 00497F78
:004160AE E89D350000              call 00419650
:004160B3 8AD8                    mov bl, al
:004160B5 81E3FF000000            and ebx, 000000FF
:004160BB 8B4D10                  mov ecx, dword ptr [ebp+10]
:004160BE 6BC922                  imul ecx, 00000022
:004160C1 81C1D0474900            add ecx, 004947D0
:004160C7 E894D1FEFF              call 00403260
:004160CC 25FF000000              and eax, 000000FF
:004160D1 03D8                    add ebx, eax
:004160D3 53                      push ebx
:004160D4 6A00                    push 00000000
:004160D6 E8CED70000              call 004238A9
:004160DB 83C40C                  add esp, 0000000C
:004160DE 8945EC                  mov dword ptr [ebp-14], eax
:004160E1 68F4010000              push 000001F4
:004160E6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004160E9 6BC950                  imul ecx, 00000050
:004160EC 81C1787F4900            add ecx, 00497F78
:004160F2 E8F9350000              call 004196F0
:004160F7 8AD8                    mov bl, al
:004160F9 81E3FF000000            and ebx, 000000FF
:004160FF 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416102 6BC922                  imul ecx, 00000022
:00416105 81C1D0474900            add ecx, 004947D0
:0041610B E870D1FEFF              call 00403280
:00416110 25FF000000              and eax, 000000FF
:00416115 99                      cdq
:00416116 2BC2                    sub eax, edx
:00416118 D1F8                    sar eax, 1
:0041611A 03D8                    add ebx, eax
:0041611C 53                      push ebx
:0041611D 6A00                    push 00000000
:0041611F E885D70000              call 004238A9
:00416124 83C40C                  add esp, 0000000C
:00416127 8945E8                  mov dword ptr [ebp-18], eax
:0041612A 68FF000000              push 000000FF
:0041612F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00416132 6BC950                  imul ecx, 00000050
:00416135 81C1787F4900            add ecx, 00497F78
:0041613B E8D0350000              call 00419710
:00416140 8AD8                    mov bl, al
:00416142 81E3FF000000            and ebx, 000000FF
:00416148 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041614B 6BC922                  imul ecx, 00000022
:0041614E 81C1D0474900            add ecx, 004947D0
:00416154 E8770A0200              call 00436BD0
:00416159 25FF000000              and eax, 000000FF
:0041615E 2BD8                    sub ebx, eax
:00416160 53                      push ebx
:00416161 6A00                    push 00000000
:00416163 E841D70000              call 004238A9
:00416168 83C40C                  add esp, 0000000C
:0041616B 8945E4                  mov dword ptr [ebp-1C], eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0041616E 6A0A                    push 0000000A
:00416170 8D45F8                  lea eax, dword ptr [ebp-08]
:00416173 50                      push eax
:00416174 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00416177 51                      push ecx
:00416178 E843440500              call 0046A5C0
:0041617D 83C40C                  add esp, 0000000C
:00416180 50                      push eax
:00416181 689B040000              push 0000049B
:00416186 8B5508                  mov edx, dword ptr [ebp+08]
:00416189 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041618A FF1510D64B00            Call dword ptr [004BD610]
:00416190 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00416191 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00416197 6A0A                    push 0000000A
:00416199 8D45F8                  lea eax, dword ptr [ebp-08]
:0041619C 50                      push eax
:0041619D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004161A0 51                      push ecx
:004161A1 E81A440500              call 0046A5C0
:004161A6 83C40C                  add esp, 0000000C
:004161A9 50                      push eax
:004161AA 6897040000              push 00000497
:004161AF 8B5508                  mov edx, dword ptr [ebp+08]
:004161B2 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004161B3 FF1510D64B00            Call dword ptr [004BD610]
:004161B9 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004161BA FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004161C0 6A0A                    push 0000000A
:004161C2 8D45F8                  lea eax, dword ptr [ebp-08]
:004161C5 50                      push eax
:004161C6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004161C9 51                      push ecx
:004161CA E8F1430500              call 0046A5C0
:004161CF 83C40C                  add esp, 0000000C
:004161D2 50                      push eax
:004161D3 6887040000              push 00000487
:004161D8 8B5508                  mov edx, dword ptr [ebp+08]
:004161DB 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004161DC FF1510D64B00            Call dword ptr [004BD610]
:004161E2 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004161E3 FF1514D64B00            Call dword ptr [004BD614]
:004161E9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004161EC 6BC950                  imul ecx, 00000050
:004161EF 81C1787F4900            add ecx, 00497F78
:004161F5 E824BBFEFF              call 00401D1E
:004161FA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004161FD 2BC8                    sub ecx, eax
:004161FF 51                      push ecx
:00416200 689A040000              push 0000049A
:00416205 8B5508                  mov edx, dword ptr [ebp+08]
:00416208 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416209 FF1510D64B00            Call dword ptr [004BD610]
:0041620F 50                      push eax
:00416210 E8B72F0000              call 004191CC
:00416215 83C408                  add esp, 00000008
:00416218 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041621B 6BC950                  imul ecx, 00000050
:0041621E 81C1787F4900            add ecx, 00497F78
:00416224 E825BCFEFF              call 00401E4E
:00416229 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041622C 2BC8                    sub ecx, eax
:0041622E 51                      push ecx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:0041622F 68FA030000              push 000003FA
:00416234 8B5508                  mov edx, dword ptr [ebp+08]
:00416237 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416238 FF1510D64B00            Call dword ptr [004BD610]
:0041623E 50                      push eax
:0041623F E8882F0000              call 004191CC
:00416244 83C408                  add esp, 00000008
:00416247 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041624A 6BC950                  imul ecx, 00000050
:0041624D 81C1787F4900            add ecx, 00497F78
:00416253 E862BCFEFF              call 00401EBA
:00416258 25FF000000              and eax, 000000FF
:0041625D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00416260 2BC8                    sub ecx, eax
:00416262 51                      push ecx
:00416263 68FB030000              push 000003FB
:00416268 8B5508                  mov edx, dword ptr [ebp+08]
:0041626B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041626C FF1510D64B00            Call dword ptr [004BD610]
:00416272 50                      push eax
:00416273 E8542F0000              call 004191CC
:00416278 83C408                  add esp, 00000008
:0041627B EB32                    jmp 004162AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041607C(C)
|
:0041627D 6A00                    push 00000000
:0041627F 8B450C                  mov eax, dword ptr [ebp+0C]
:00416282 50                      push eax
:00416283 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416286 51                      push ecx
:00416287 E813190000              call 00417B9F
:0041628C 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"Z˳"
                                  |
:0041628F 6838C84700              push 0047C838
:00416294 68A9040000              push 000004A9
:00416299 8B5508                  mov edx, dword ptr [ebp+08]
:0041629C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041629D FF1510D64B00            Call dword ptr [004BD610]
:004162A3 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004162A4 FF1514D64B00            Call dword ptr [004BD614]
:004162AA E9F7020000              jmp 004165A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041627B(U)
|
:004162AF E9F2020000              jmp 004165A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041605F(C)
|
:004162B4 837DF412                cmp dword ptr [ebp-0C], 00000012
:004162B8 757F                    jne 00416339
:004162BA 68F4010000              push 000001F4
:004162BF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004162C2 6BC950                  imul ecx, 00000050
:004162C5 81C1787F4900            add ecx, 00497F78
:004162CB E8A0330000              call 00419670
:004162D0 8AD8                    mov bl, al
:004162D2 81E3FF000000            and ebx, 000000FF
:004162D8 8B4D10                  mov ecx, dword ptr [ebp+10]
:004162DB 6BC922                  imul ecx, 00000022
:004162DE 81C1D0474900            add ecx, 004947D0
:004162E4 E877CFFEFF              call 00403260
:004162E9 25FF000000              and eax, 000000FF
:004162EE 03D8                    add ebx, eax
:004162F0 53                      push ebx
:004162F1 6A00                    push 00000000
:004162F3 E8B1D50000              call 004238A9
:004162F8 83C40C                  add esp, 0000000C
:004162FB 8945F0                  mov dword ptr [ebp-10], eax
:004162FE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00416301 6BC950                  imul ecx, 00000050
:00416304 81C1787F4900            add ecx, 00497F78
:0041630A E842BAFEFF              call 00401D51
:0041630F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00416312 2BC8                    sub ecx, eax
:00416314 51                      push ecx
:00416315 8B55F0                  mov edx, dword ptr [ebp-10]
:00416318 52                      push edx
:00416319 68A9040000              push 000004A9
:0041631E 6899040000              push 00000499
:00416323 689C040000              push 0000049C
:00416328 8B4508                  mov eax, dword ptr [ebp+08]
:0041632B 50                      push eax
:0041632C E8172E0000              call 00419148
:00416331 83C418                  add esp, 00000018
:00416334 E96D020000              jmp 004165A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004162B8(C)
|
:00416339 837DF413                cmp dword ptr [ebp-0C], 00000013
:0041633D 757F                    jne 004163BE
:0041633F 68F4010000              push 000001F4
:00416344 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00416347 6BC950                  imul ecx, 00000050
:0041634A 81C1787F4900            add ecx, 00497F78
:00416350 E83B330000              call 00419690
:00416355 8AD8                    mov bl, al
:00416357 81E3FF000000            and ebx, 000000FF
:0041635D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416360 6BC922                  imul ecx, 00000022
:00416363 81C1D0474900            add ecx, 004947D0
:00416369 E8F2CEFEFF              call 00403260
:0041636E 25FF000000              and eax, 000000FF
:00416373 03D8                    add ebx, eax
:00416375 53                      push ebx
:00416376 6A00                    push 00000000
:00416378 E82CD50000              call 004238A9
:0041637D 83C40C                  add esp, 0000000C
:00416380 8945F0                  mov dword ptr [ebp-10], eax
:00416383 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00416386 6BC950                  imul ecx, 00000050
:00416389 81C1787F4900            add ecx, 00497F78
:0041638F E8F0B9FEFF              call 00401D84
:00416394 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00416397 2BC8                    sub ecx, eax
:00416399 51                      push ecx
:0041639A 8B55F0                  mov edx, dword ptr [ebp-10]
:0041639D 52                      push edx
:0041639E 68A9040000              push 000004A9
:004163A3 6898040000              push 00000498
:004163A8 689D040000              push 0000049D
:004163AD 8B4508                  mov eax, dword ptr [ebp+08]
:004163B0 50                      push eax
:004163B1 E8922D0000              call 00419148
:004163B6 83C418                  add esp, 00000018
:004163B9 E9E8010000              jmp 004165A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041633D(C)
|
:004163BE 837DF414                cmp dword ptr [ebp-0C], 00000014
:004163C2 757F                    jne 00416443
:004163C4 68F4010000              push 000001F4
:004163C9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004163CC 6BC950                  imul ecx, 00000050
:004163CF 81C1787F4900            add ecx, 00497F78
:004163D5 E8D6320000              call 004196B0
:004163DA 8AD8                    mov bl, al
:004163DC 81E3FF000000            and ebx, 000000FF
:004163E2 8B4D10                  mov ecx, dword ptr [ebp+10]
:004163E5 6BC922                  imul ecx, 00000022
:004163E8 81C1D0474900            add ecx, 004947D0
:004163EE E86DCEFEFF              call 00403260
:004163F3 25FF000000              and eax, 000000FF
:004163F8 03D8                    add ebx, eax
:004163FA 53                      push ebx
:004163FB 6A00                    push 00000000
:004163FD E8A7D40000              call 004238A9
:00416402 83C40C                  add esp, 0000000C
:00416405 8945F0                  mov dword ptr [ebp-10], eax
:00416408 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041640B 6BC950                  imul ecx, 00000050
:0041640E 81C1787F4900            add ecx, 00497F78
:00416414 E89EB9FEFF              call 00401DB7
:00416419 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041641C 2BC8                    sub ecx, eax
:0041641E 51                      push ecx
:0041641F 8B55F0                  mov edx, dword ptr [ebp-10]
:00416422 52                      push edx
:00416423 68A9040000              push 000004A9

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@^"
                                  |
:00416428 68F7030000              push 000003F7
:0041642D 689E040000              push 0000049E
:00416432 8B4508                  mov eax, dword ptr [ebp+08]
:00416435 50                      push eax
:00416436 E80D2D0000              call 00419148
:0041643B 83C418                  add esp, 00000018
:0041643E E963010000              jmp 004165A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004163C2(C)
|
:00416443 837DF415                cmp dword ptr [ebp-0C], 00000015
:00416447 7579                    jne 004164C2
:00416449 68E8030000              push 000003E8
:0041644E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00416451 6BC950                  imul ecx, 00000050
:00416454 81C1787F4900            add ecx, 00497F78
:0041645A E871470400              call 0045ABD0
:0041645F 8BF0                    mov esi, eax
:00416461 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416464 6BC922                  imul ecx, 00000022
:00416467 81C1D0474900            add ecx, 004947D0
:0041646D E8EECDFEFF              call 00403260
:00416472 25FF000000              and eax, 000000FF
:00416477 03F0                    add esi, eax
:00416479 56                      push esi
:0041647A 6A00                    push 00000000
:0041647C E828D40000              call 004238A9
:00416481 83C40C                  add esp, 0000000C
:00416484 8945F0                  mov dword ptr [ebp-10], eax
:00416487 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041648A 6BC950                  imul ecx, 00000050
:0041648D 81C1787F4900            add ecx, 00497F78
:00416493 E852B9FEFF              call 00401DEA
:00416498 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041649B 2BC8                    sub ecx, eax
:0041649D 51                      push ecx
:0041649E 8B55F0                  mov edx, dword ptr [ebp-10]
:004164A1 52                      push edx
:004164A2 68A9040000              push 000004A9

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:004164A7 68F8030000              push 000003F8
:004164AC 6895040000              push 00000495
:004164B1 8B4508                  mov eax, dword ptr [ebp+08]
:004164B4 50                      push eax
:004164B5 E88E2C0000              call 00419148
:004164BA 83C418                  add esp, 00000018
:004164BD E9E4000000              jmp 004165A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416447(C)
|
:004164C2 837DF416                cmp dword ptr [ebp-0C], 00000016
:004164C6 757C                    jne 00416544
:004164C8 68F4010000              push 000001F4
:004164CD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004164D0 6BC950                  imul ecx, 00000050
:004164D3 81C1787F4900            add ecx, 00497F78
:004164D9 E8F2310000              call 004196D0
:004164DE 8AD8                    mov bl, al
:004164E0 81E3FF000000            and ebx, 000000FF
:004164E6 8B4D10                  mov ecx, dword ptr [ebp+10]
:004164E9 6BC922                  imul ecx, 00000022
:004164EC 81C1D0474900            add ecx, 004947D0
:004164F2 E869CDFEFF              call 00403260
:004164F7 25FF000000              and eax, 000000FF
:004164FC 03D8                    add ebx, eax
:004164FE 53                      push ebx
:004164FF 6A00                    push 00000000
:00416501 E8A3D30000              call 004238A9
:00416506 83C40C                  add esp, 0000000C
:00416509 8945F0                  mov dword ptr [ebp-10], eax
:0041650C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041650F 6BC950                  imul ecx, 00000050
:00416512 81C1787F4900            add ecx, 00497F78
:00416518 E8FEB8FEFF              call 00401E1B
:0041651D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00416520 2BC8                    sub ecx, eax
:00416522 51                      push ecx
:00416523 8B55F0                  mov edx, dword ptr [ebp-10]
:00416526 52                      push edx
:00416527 68A9040000              push 000004A9

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:0041652C 68F9030000              push 000003F9
:00416531 6896040000              push 00000496
:00416536 8B4508                  mov eax, dword ptr [ebp+08]
:00416539 50                      push eax
:0041653A E8092C0000              call 00419148
:0041653F 83C418                  add esp, 00000018
:00416542 EB62                    jmp 004165A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004164C6(C)
|
:00416544 837DF425                cmp dword ptr [ebp-0C], 00000025
:00416548 7C2F                    jl 00416579
:0041654A 6A00                    push 00000000
:0041654C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041654F 51                      push ecx
:00416550 8B5508                  mov edx, dword ptr [ebp+08]
:00416553 52                      push edx
:00416554 E846160000              call 00417B9F
:00416559 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"S"
                                  |
:0041655C 684CC84700              push 0047C84C
:00416561 68A9040000              push 000004A9
:00416566 8B4508                  mov eax, dword ptr [ebp+08]
:00416569 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041656A FF1510D64B00            Call dword ptr [004BD610]
:00416570 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00416571 FF1514D64B00            Call dword ptr [004BD614]
:00416577 EB2D                    jmp 004165A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416548(C)
|
:00416579 6A00                    push 00000000
:0041657B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041657E 51                      push ecx
:0041657F 8B5508                  mov edx, dword ptr [ebp+08]
:00416582 52                      push edx
:00416583 E817160000              call 00417B9F
:00416588 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:0041658B 6858C84700              push 0047C858
:00416590 68A9040000              push 000004A9
:00416595 8B4508                  mov eax, dword ptr [ebp+08]
:00416598 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416599 FF1510D64B00            Call dword ptr [004BD610]
:0041659F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004165A0 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004162AA(U), :004162AF(U), :00416334(U), :004163B9(U), :0041643E(U)
|:004164BD(U), :00416542(U), :00416577(U)
|
:004165A6 5E                      pop esi
:004165A7 5B                      pop ebx
:004165A8 8BE5                    mov esp, ebp
:004165AA 5D                      pop ebp
:004165AB C3                      ret



* Referenced by a CALL at Address:
|:00415D05   
|
:004165AC 55                      push ebp
:004165AD 8BEC                    mov ebp, esp
:004165AF 51                      push ecx
:004165B0 8B4510                  mov eax, dword ptr [ebp+10]
:004165B3 8B4804                  mov ecx, dword ptr [eax+04]
:004165B6 51                      push ecx
:004165B7 8B5508                  mov edx, dword ptr [ebp+08]
:004165BA 52                      push edx
:004165BB E83BF9FFFF              call 00415EFB
:004165C0 83C408                  add esp, 00000008
:004165C3 8B4510                  mov eax, dword ptr [ebp+10]
:004165C6 8B08                    mov ecx, dword ptr [eax]
:004165C8 51                      push ecx
:004165C9 E8F52A0000              call 004190C3
:004165CE 83C404                  add esp, 00000004
:004165D1 8945FC                  mov dword ptr [ebp-04], eax
:004165D4 837DFC00                cmp dword ptr [ebp-04], 00000000
:004165D8 7D0E                    jge 004165E8
:004165DA 8B5508                  mov edx, dword ptr [ebp+08]
:004165DD 52                      push edx
:004165DE E8CEF9FFFF              call 00415FB1
:004165E3 83C404                  add esp, 00000004
:004165E6 EB7C                    jmp 00416664

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004165D8(C)
|
:004165E8 6848040000              push 00000448
:004165ED 8B4508                  mov eax, dword ptr [ebp+08]
:004165F0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004165F1 FF1510D64B00            Call dword ptr [004BD610]
:004165F7 8B4D10                  mov ecx, dword ptr [ebp+10]
:004165FA 3901                    cmp dword ptr [ecx], eax
:004165FC 7514                    jne 00416612
:004165FE 8B55FC                  mov edx, dword ptr [ebp-04]
:00416601 52                      push edx
:00416602 8B4510                  mov eax, dword ptr [ebp+10]
:00416605 8B08                    mov ecx, dword ptr [eax]
:00416607 51                      push ecx
:00416608 E8AD2E0000              call 004194BA
:0041660D 83C408                  add esp, 00000008
:00416610 EB52                    jmp 00416664

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004165FC(C)
|
:00416612 681A040000              push 0000041A
:00416617 8B5508                  mov edx, dword ptr [ebp+08]
:0041661A 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041661B FF1510D64B00            Call dword ptr [004BD610]
:00416621 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416624 3901                    cmp dword ptr [ecx], eax
:00416626 7514                    jne 0041663C
:00416628 8B55FC                  mov edx, dword ptr [ebp-04]
:0041662B 52                      push edx
:0041662C 8B4510                  mov eax, dword ptr [ebp+10]
:0041662F 8B08                    mov ecx, dword ptr [eax]
:00416631 51                      push ecx
:00416632 E8832E0000              call 004194BA
:00416637 83C408                  add esp, 00000008
:0041663A EB28                    jmp 00416664

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416626(C)
|
:0041663C 6849040000              push 00000449
:00416641 8B5508                  mov edx, dword ptr [ebp+08]
:00416644 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416645 FF1510D64B00            Call dword ptr [004BD610]
:0041664B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041664E 3901                    cmp dword ptr [ecx], eax
:00416650 7512                    jne 00416664
:00416652 8B55FC                  mov edx, dword ptr [ebp-04]
:00416655 52                      push edx
:00416656 8B4510                  mov eax, dword ptr [ebp+10]
:00416659 8B08                    mov ecx, dword ptr [eax]
:0041665B 51                      push ecx
:0041665C E8592E0000              call 004194BA
:00416661 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004165E6(U), :00416610(U), :0041663A(U), :00416650(C)
|
:00416664 8BE5                    mov esp, ebp
:00416666 5D                      pop ebp
:00416667 C3                      ret



* Referenced by a CALL at Address:
|:00415BEA   
|
:00416668 55                      push ebp
:00416669 8BEC                    mov ebp, esp
:0041666B 83EC20                  sub esp, 00000020
:0041666E 684A040000              push 0000044A
:00416673 8B4508                  mov eax, dword ptr [ebp+08]
:00416676 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416677 FF1510D64B00            Call dword ptr [004BD610]
:0041667D 8945E8                  mov dword ptr [ebp-18], eax
:00416680 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416683 8B11                    mov edx, dword ptr [ecx]
:00416685 8955F0                  mov dword ptr [ebp-10], edx
:00416688 6A00                    push 00000000
:0041668A 6A00                    push 00000000
:0041668C 68F0000000              push 000000F0

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043C, ""
                                  |
:00416691 683C040000              push 0000043C
:00416696 8B4508                  mov eax, dword ptr [ebp+08]
:00416699 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0041669A FF15D4D54B00            Call dword ptr [004BD5D4]
:004166A0 8945F4                  mov dword ptr [ebp-0C], eax
:004166A3 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004166A7 7507                    jne 004166B0
:004166A9 33C0                    xor eax, eax
:004166AB E907020000              jmp 004168B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004166A7(C)
|
:004166B0 8B4D10                  mov ecx, dword ptr [ebp+10]
:004166B3 8B5104                  mov edx, dword ptr [ecx+04]
:004166B6 8955EC                  mov dword ptr [ebp-14], edx
:004166B9 8B4510                  mov eax, dword ptr [ebp+10]
:004166BC 8B480C                  mov ecx, dword ptr [eax+0C]
:004166BF 894DF8                  mov dword ptr [ebp-08], ecx
:004166C2 8B5514                  mov edx, dword ptr [ebp+14]
:004166C5 52                      push edx
:004166C6 8D45FC                  lea eax, dword ptr [ebp-04]
:004166C9 50                      push eax
:004166CA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004166CD 51                      push ecx
:004166CE 8B5508                  mov edx, dword ptr [ebp+08]
:004166D1 52                      push edx
:004166D2 E855070000              call 00416E2C
:004166D7 83C410                  add esp, 00000010
:004166DA 85C0                    test eax, eax
:004166DC 0F849C010000            je 0041687E
:004166E2 817DEC48040000          cmp dword ptr [ebp-14], 00000448
:004166E9 7525                    jne 00416710
:004166EB 8B45F8                  mov eax, dword ptr [ebp-08]
:004166EE 50                      push eax
:004166EF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004166F2 51                      push ecx
:004166F3 8B55E8                  mov edx, dword ptr [ebp-18]
:004166F6 52                      push edx
:004166F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004166FA 50                      push eax
:004166FB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004166FE 51                      push ecx
:004166FF 8B5508                  mov edx, dword ptr [ebp+08]
:00416702 52                      push edx
:00416703 E8B3010000              call 004168BB
:00416708 83C418                  add esp, 00000018
:0041670B E96E010000              jmp 0041687E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004166E9(C)
|
:00416710 817DEC1A040000          cmp dword ptr [ebp-14], 0000041A
:00416717 0F85B3000000            jne 004167D0
:0041671D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00416720 50                      push eax
:00416721 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00416724 51                      push ecx
:00416725 8B55EC                  mov edx, dword ptr [ebp-14]
:00416728 52                      push edx
:00416729 8B45E8                  mov eax, dword ptr [ebp-18]
:0041672C 50                      push eax
:0041672D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416730 51                      push ecx
:00416731 8B55F0                  mov edx, dword ptr [ebp-10]
:00416734 52                      push edx
:00416735 8B4508                  mov eax, dword ptr [ebp+08]
:00416738 50                      push eax
:00416739 E878030000              call 00416AB6
:0041673E 83C41C                  add esp, 0000001C
:00416741 85C0                    test eax, eax
:00416743 0F8482000000            je 004167CB
:00416749 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041674C 8B510C                  mov edx, dword ptr [ecx+0C]
:0041674F 52                      push edx
:00416750 8B45F0                  mov eax, dword ptr [ebp-10]
:00416753 50                      push eax
:00416754 E8182D0000              call 00419471
:00416759 83C408                  add esp, 00000008
:0041675C 6A00                    push 00000000
:0041675E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416761 8B510C                  mov edx, dword ptr [ecx+0C]
:00416764 52                      push edx
:00416765 6808100000              push 00001008
:0041676A 8B45F0                  mov eax, dword ptr [ebp-10]
:0041676D 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041676E FF1504D64B00            Call dword ptr [004BD604]
:00416774 6A00                    push 00000000
:00416776 6A00                    push 00000000
:00416778 6804100000              push 00001004
:0041677D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00416780 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00416781 FF1504D64B00            Call dword ptr [004BD604]
:00416787 83E801                  sub eax, 00000001
:0041678A 8B5510                  mov edx, dword ptr [ebp+10]
:0041678D 3B420C                  cmp eax, dword ptr [edx+0C]
:00416790 7D1B                    jge 004167AD
:00416792 6A00                    push 00000000
:00416794 6A00                    push 00000000
:00416796 6804100000              push 00001004
:0041679B 8B45F0                  mov eax, dword ptr [ebp-10]
:0041679E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041679F FF1504D64B00            Call dword ptr [004BD604]
:004167A5 83E801                  sub eax, 00000001
:004167A8 8945E4                  mov dword ptr [ebp-1C], eax
:004167AB EB09                    jmp 004167B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416790(C)
|
:004167AD 8B4D10                  mov ecx, dword ptr [ebp+10]
:004167B0 8B510C                  mov edx, dword ptr [ecx+0C]
:004167B3 8955E4                  mov dword ptr [ebp-1C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004167AB(U)
|
:004167B6 6A00                    push 00000000
:004167B8 8B45E4                  mov eax, dword ptr [ebp-1C]
:004167BB 50                      push eax
:004167BC 6813100000              push 00001013
:004167C1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004167C4 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004167C5 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416743(C)
|
:004167CB E9AE000000              jmp 0041687E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416717(C)
|
:004167D0 8B55F4                  mov edx, dword ptr [ebp-0C]
:004167D3 52                      push edx
:004167D4 8B45F8                  mov eax, dword ptr [ebp-08]
:004167D7 50                      push eax
:004167D8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004167DB 51                      push ecx
:004167DC 8B55E8                  mov edx, dword ptr [ebp-18]
:004167DF 52                      push edx
:004167E0 8B45FC                  mov eax, dword ptr [ebp-04]
:004167E3 50                      push eax
:004167E4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004167E7 51                      push ecx
:004167E8 8B5508                  mov edx, dword ptr [ebp+08]
:004167EB 52                      push edx
:004167EC E845040000              call 00416C36
:004167F1 83C41C                  add esp, 0000001C
:004167F4 85C0                    test eax, eax
:004167F6 0F8482000000            je 0041687E
:004167FC 8B4510                  mov eax, dword ptr [ebp+10]
:004167FF 8B480C                  mov ecx, dword ptr [eax+0C]
:00416802 51                      push ecx
:00416803 8B55F0                  mov edx, dword ptr [ebp-10]
:00416806 52                      push edx
:00416807 E8652C0000              call 00419471
:0041680C 83C408                  add esp, 00000008
:0041680F 6A00                    push 00000000
:00416811 8B4510                  mov eax, dword ptr [ebp+10]
:00416814 8B480C                  mov ecx, dword ptr [eax+0C]
:00416817 51                      push ecx
:00416818 6808100000              push 00001008
:0041681D 8B55F0                  mov edx, dword ptr [ebp-10]
:00416820 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00416821 FF1504D64B00            Call dword ptr [004BD604]
:00416827 6A00                    push 00000000
:00416829 6A00                    push 00000000
:0041682B 6804100000              push 00001004
:00416830 8B45F0                  mov eax, dword ptr [ebp-10]
:00416833 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00416834 FF1504D64B00            Call dword ptr [004BD604]
:0041683A 83E801                  sub eax, 00000001
:0041683D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416840 3B410C                  cmp eax, dword ptr [ecx+0C]
:00416843 7D1B                    jge 00416860
:00416845 6A00                    push 00000000
:00416847 6A00                    push 00000000
:00416849 6804100000              push 00001004
:0041684E 8B55F0                  mov edx, dword ptr [ebp-10]
:00416851 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00416852 FF1504D64B00            Call dword ptr [004BD604]
:00416858 83E801                  sub eax, 00000001
:0041685B 8945E0                  mov dword ptr [ebp-20], eax
:0041685E EB09                    jmp 00416869

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416843(C)
|
:00416860 8B4510                  mov eax, dword ptr [ebp+10]
:00416863 8B480C                  mov ecx, dword ptr [eax+0C]
:00416866 894DE0                  mov dword ptr [ebp-20], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041685E(U)
|
:00416869 6A00                    push 00000000
:0041686B 8B55E0                  mov edx, dword ptr [ebp-20]
:0041686E 52                      push edx
:0041686F 6813100000              push 00001013
:00416874 8B45F0                  mov eax, dword ptr [ebp-10]
:00416877 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00416878 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004166DC(C), :0041670B(U), :004167CB(U), :004167F6(C)
|

* Reference To: COMCTL32.ImageList_EndDrag, Ord:001Eh
                                  |
:0041687E FF1500D44B00            Call dword ptr [004BD400]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:00416884 FF15D4D64B00            Call dword ptr [004BD6D4]
:0041688A 6849040000              push 00000449
:0041688F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416892 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416893 FF1510D64B00            Call dword ptr [004BD610]
:00416899 50                      push eax
:0041689A 686C040000              push 0000046C
:0041689F 8B5508                  mov edx, dword ptr [ebp+08]
:004168A2 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004168A3 FF1510D64B00            Call dword ptr [004BD610]
:004168A9 50                      push eax
:004168AA E8A0CDFFFF              call 0041364F
:004168AF 83C408                  add esp, 00000008
:004168B2 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004166AB(U)
|
:004168B7 8BE5                    mov esp, ebp
:004168B9 5D                      pop ebp
:004168BA C3                      ret



* Referenced by a CALL at Address:
|:00416703   
|
:004168BB 55                      push ebp
:004168BC 8BEC                    mov ebp, esp
:004168BE 83EC0C                  sub esp, 0000000C
:004168C1 8B451C                  mov eax, dword ptr [ebp+1C]
:004168C4 50                      push eax
:004168C5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004168C8 51                      push ecx
:004168C9 E88E290000              call 0041925C
:004168CE 83C408                  add esp, 00000008
:004168D1 8945FC                  mov dword ptr [ebp-04], eax
:004168D4 681A040000              push 0000041A
:004168D9 8B5508                  mov edx, dword ptr [ebp+08]
:004168DC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004168DD FF1510D64B00            Call dword ptr [004BD610]
:004168E3 394510                  cmp dword ptr [ebp+10], eax
:004168E6 0F859D000000            jne 00416989
:004168EC 8B4514                  mov eax, dword ptr [ebp+14]
:004168EF 50                      push eax
:004168F0 E860CAFFFF              call 00413355
:004168F5 83C404                  add esp, 00000004
:004168F8 8945F4                  mov dword ptr [ebp-0C], eax
:004168FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004168FE 51                      push ecx
:004168FF 8B55F4                  mov edx, dword ptr [ebp-0C]
:00416902 52                      push edx
:00416903 8B4508                  mov eax, dword ptr [ebp+08]
:00416906 50                      push eax
:00416907 E83ACFFFFF              call 00413846
:0041690C 83C40C                  add esp, 0000000C
:0041690F 85C0                    test eax, eax
:00416911 7470                    je 00416983
:00416913 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416916 51                      push ecx
:00416917 8B5508                  mov edx, dword ptr [ebp+08]
:0041691A 52                      push edx
:0041691B E8CE000000              call 004169EE
:00416920 83C408                  add esp, 00000008
:00416923 85C0                    test eax, eax
:00416925 7507                    jne 0041692E
:00416927 33C0                    xor eax, eax
:00416929 E9BC000000              jmp 004169EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416925(C)
|
:0041692E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00416931 50                      push eax
:00416932 E896E7FFFF              call 004150CD
:00416937 83C404                  add esp, 00000004
:0041693A 25FF000000              and eax, 000000FF
:0041693F 8945F8                  mov dword ptr [ebp-08], eax
:00416942 8A4DFC                  mov cl, byte ptr [ebp-04]
:00416945 51                      push ecx
:00416946 8A55F8                  mov dl, byte ptr [ebp-08]
:00416949 52                      push edx
:0041694A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041694D 6BC950                  imul ecx, 00000050
:00416950 81C1787F4900            add ecx, 00497F78
:00416956 E8A5C8FEFF              call 00403200
:0041695B 8A45F8                  mov al, byte ptr [ebp-08]
:0041695E 50                      push eax
:0041695F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00416962 51                      push ecx
:00416963 8B5508                  mov edx, dword ptr [ebp+08]
:00416966 52                      push edx
:00416967 E829CEFFFF              call 00413795
:0041696C 83C40C                  add esp, 0000000C
:0041696F 6A01                    push 00000001
:00416971 8B45F4                  mov eax, dword ptr [ebp-0C]
:00416974 50                      push eax
:00416975 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416978 51                      push ecx
:00416979 E821120000              call 00417B9F
:0041697E 83C40C                  add esp, 0000000C
:00416981 EB04                    jmp 00416987

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416911(C)
|
:00416983 33C0                    xor eax, eax
:00416985 EB63                    jmp 004169EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416981(U)
|
:00416987 EB4D                    jmp 004169D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004168E6(C)
|
:00416989 8B5508                  mov edx, dword ptr [ebp+08]
:0041698C 52                      push edx
:0041698D E819D0FFFF              call 004139AB
:00416992 83C404                  add esp, 00000004
:00416995 85C0                    test eax, eax
:00416997 7439                    je 004169D2
:00416999 8B45FC                  mov eax, dword ptr [ebp-04]
:0041699C 50                      push eax
:0041699D 8B4D08                  mov ecx, dword ptr [ebp+08]
:004169A0 51                      push ecx
:004169A1 E848000000              call 004169EE
:004169A6 83C408                  add esp, 00000008
:004169A9 85C0                    test eax, eax
:004169AB 7504                    jne 004169B1
:004169AD 33C0                    xor eax, eax
:004169AF EB39                    jmp 004169EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004169AB(C)
|
:004169B1 E824D0FFFF              call 004139DA
:004169B6 25FF000000              and eax, 000000FF
:004169BB 8945F8                  mov dword ptr [ebp-08], eax
:004169BE 8B55FC                  mov edx, dword ptr [ebp-04]
:004169C1 52                      push edx
:004169C2 8B45F8                  mov eax, dword ptr [ebp-08]
:004169C5 50                      push eax
:004169C6 B978294B00              mov ecx, 004B2978
:004169CB E8B0ECFEFF              call 00405680
:004169D0 EB04                    jmp 004169D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416997(C)
|
:004169D2 33C0                    xor eax, eax
:004169D4 EB14                    jmp 004169EA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416987(U), :004169D0(U)
|
:004169D6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004169D9 51                      push ecx
:004169DA 8B55FC                  mov edx, dword ptr [ebp-04]
:004169DD 52                      push edx
:004169DE 8B4510                  mov eax, dword ptr [ebp+10]
:004169E1 50                      push eax
:004169E2 E876030000              call 00416D5D
:004169E7 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416929(U), :00416985(U), :004169AF(U), :004169D4(U)
|
:004169EA 8BE5                    mov esp, ebp
:004169EC 5D                      pop ebp
:004169ED C3                      ret



* Referenced by a CALL at Addresses:
|:0041691B   , :004169A1   
|
:004169EE 55                      push ebp
:004169EF 8BEC                    mov ebp, esp
:004169F1 83EC58                  sub esp, 00000058
:004169F4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004169F7 6BC922                  imul ecx, 00000022
:004169FA 81C1D0474900            add ecx, 004947D0
:00416A00 E8FBECFEFF              call 00405700
:00416A05 25FF000000              and eax, 000000FF
:00416A0A 6BC00A                  imul eax, 0000000A
:00416A0D 8945EC                  mov dword ptr [ebp-14], eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00416A10 6A0A                    push 0000000A
:00416A12 8D45F0                  lea eax, dword ptr [ebp-10]
:00416A15 50                      push eax
:00416A16 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00416A19 51                      push ecx
:00416A1A E8A13B0500              call 0046A5C0
:00416A1F 83C40C                  add esp, 0000000C
:00416A22 50                      push eax
:00416A23 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00416A26 6BC922                  imul ecx, 00000022
:00416A29 81C1D0474900            add ecx, 004947D0
:00416A2F E8BCECFEFF              call 004056F0
:00416A34 50                      push eax

* Possible StringData Ref from Data Obj ->"%s%szRܡH"
                                  |
:00416A35 6864C84700              push 0047C864
:00416A3A 8D55AC                  lea edx, dword ptr [ebp-54]
:00416A3D 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00416A3E FF1504D74B00            Call dword ptr [004BD704]
:00416A44 83C410                  add esp, 00000010

* Possible StringData Ref from Data Obj ->"T{ʤJ"
                                  |
:00416A47 687CC84700              push 0047C87C
:00416A4C 8D45AC                  lea eax, dword ptr [ebp-54]
:00416A4F 50                      push eax
:00416A50 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416A53 51                      push ecx
:00416A54 E8D2160000              call 0041812B
:00416A59 83C40C                  add esp, 0000000C
:00416A5C 85C0                    test eax, eax
:00416A5E 7504                    jne 00416A64
:00416A60 33C0                    xor eax, eax
:00416A62 EB4E                    jmp 00416AB2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416A5E(C)
|
:00416A64 B978294B00              mov ecx, 004B2978
:00416A69 E872FF0100              call 004369E0
:00416A6E 2B45EC                  sub eax, dword ptr [ebp-14]
:00416A71 8945A8                  mov dword ptr [ebp-58], eax
:00416A74 837DA800                cmp dword ptr [ebp-58], 00000000
:00416A78 7C1C                    jl 00416A96
:00416A7A 8B55A8                  mov edx, dword ptr [ebp-58]
:00416A7D 52                      push edx
:00416A7E B978294B00              mov ecx, 004B2978
:00416A83 E838ECFEFF              call 004056C0
:00416A88 8B4508                  mov eax, dword ptr [ebp+08]
:00416A8B 50                      push eax
:00416A8C E81B060000              call 004170AC
:00416A91 83C404                  add esp, 00000004
:00416A94 EB17                    jmp 00416AAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416A78(C)
|
:00416A96 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->""
                                  |
:00416A98 6888C84700              push 0047C888
:00416A9D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416AA0 51                      push ecx
:00416AA1 E8F9160000              call 0041819F
:00416AA6 83C40C                  add esp, 0000000C
:00416AA9 33C0                    xor eax, eax
:00416AAB EB05                    jmp 00416AB2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416A94(U)
|
:00416AAD B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416A62(U), :00416AAB(U)
|
:00416AB2 8BE5                    mov esp, ebp
:00416AB4 5D                      pop ebp
:00416AB5 C3                      ret



* Referenced by a CALL at Address:
|:00416739   
|
:00416AB6 55                      push ebp
:00416AB7 8BEC                    mov ebp, esp
:00416AB9 83EC10                  sub esp, 00000010
:00416ABC 8B4514                  mov eax, dword ptr [ebp+14]
:00416ABF 50                      push eax
:00416AC0 E890C8FFFF              call 00413355
:00416AC5 83C404                  add esp, 00000004
:00416AC8 8945F4                  mov dword ptr [ebp-0C], eax
:00416ACB 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:00416ACE 51                      push ecx
:00416ACF 8B550C                  mov edx, dword ptr [ebp+0C]
:00416AD2 52                      push edx
:00416AD3 E8C2270000              call 0041929A
:00416AD8 83C408                  add esp, 00000008
:00416ADB 8845F8                  mov byte ptr [ebp-08], al
:00416ADE 8A45F8                  mov al, byte ptr [ebp-08]
:00416AE1 50                      push eax
:00416AE2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00416AE5 6BC950                  imul ecx, 00000050
:00416AE8 81C1787F4900            add ecx, 00497F78
:00416AEE E8EDC6FEFF              call 004031E0
:00416AF3 8845FC                  mov byte ptr [ebp-04], al
:00416AF6 6849040000              push 00000449
:00416AFB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416AFE 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416AFF FF1510D64B00            Call dword ptr [004BD610]
:00416B05 394510                  cmp dword ptr [ebp+10], eax
:00416B08 0F85A1000000            jne 00416BAF
:00416B0E 8B5508                  mov edx, dword ptr [ebp+08]
:00416B11 52                      push edx
:00416B12 E894CEFFFF              call 004139AB
:00416B17 83C404                  add esp, 00000004
:00416B1A 85C0                    test eax, eax
:00416B1C 0F8486000000            je 00416BA8
:00416B22 8A45F8                  mov al, byte ptr [ebp-08]
:00416B25 50                      push eax
:00416B26 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00416B29 51                      push ecx
:00416B2A 8B5508                  mov edx, dword ptr [ebp+08]
:00416B2D 52                      push edx
:00416B2E E8EE160000              call 00418221
:00416B33 83C40C                  add esp, 0000000C
:00416B36 85C0                    test eax, eax
:00416B38 746E                    je 00416BA8
:00416B3A E89BCEFFFF              call 004139DA
:00416B3F 25FF000000              and eax, 000000FF
:00416B44 8945F0                  mov dword ptr [ebp-10], eax
:00416B47 8B45FC                  mov eax, dword ptr [ebp-04]
:00416B4A 25FF000000              and eax, 000000FF
:00416B4F 50                      push eax
:00416B50 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00416B53 51                      push ecx
:00416B54 B978294B00              mov ecx, 004B2978
:00416B59 E822EBFEFF              call 00405680
:00416B5E 68FF000000              push 000000FF
:00416B63 8A55F8                  mov dl, byte ptr [ebp-08]
:00416B66 52                      push edx
:00416B67 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00416B6A 6BC950                  imul ecx, 00000050
:00416B6D 81C1787F4900            add ecx, 00497F78
:00416B73 E888C6FEFF              call 00403200
:00416B78 6A01                    push 00000001
:00416B7A 8B45F4                  mov eax, dword ptr [ebp-0C]
:00416B7D 50                      push eax
:00416B7E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416B81 51                      push ecx
:00416B82 E818100000              call 00417B9F
:00416B87 83C40C                  add esp, 0000000C
:00416B8A 8B55F0                  mov edx, dword ptr [ebp-10]
:00416B8D 52                      push edx
:00416B8E 8B45FC                  mov eax, dword ptr [ebp-04]
:00416B91 25FF000000              and eax, 000000FF
:00416B96 50                      push eax
:00416B97 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416B9A 51                      push ecx
:00416B9B E8BD010000              call 00416D5D
:00416BA0 83C40C                  add esp, 0000000C
:00416BA3 E98A000000              jmp 00416C32

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416B1C(C), :00416B38(C)
|
:00416BA8 33C0                    xor eax, eax
:00416BAA E983000000              jmp 00416C32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416B08(C)
|
:00416BAF 8A55F8                  mov dl, byte ptr [ebp-08]
:00416BB2 52                      push edx
:00416BB3 8B45F4                  mov eax, dword ptr [ebp-0C]
:00416BB6 50                      push eax
:00416BB7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416BBA 51                      push ecx
:00416BBB E861160000              call 00418221
:00416BC0 83C40C                  add esp, 0000000C
:00416BC3 85C0                    test eax, eax
:00416BC5 7469                    je 00416C30
:00416BC7 6A01                    push 00000001
:00416BC9 8B55F4                  mov edx, dword ptr [ebp-0C]
:00416BCC 52                      push edx
:00416BCD 8B4508                  mov eax, dword ptr [ebp+08]
:00416BD0 50                      push eax
:00416BD1 E8C90F0000              call 00417B9F
:00416BD6 83C40C                  add esp, 0000000C
:00416BD9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00416BDC 81E1FF000000            and ecx, 000000FF
:00416BE2 51                      push ecx
:00416BE3 8B5508                  mov edx, dword ptr [ebp+08]
:00416BE6 52                      push edx
:00416BE7 E88B160000              call 00418277
:00416BEC 83C408                  add esp, 00000008
:00416BEF 85C0                    test eax, eax
:00416BF1 7433                    je 00416C26
:00416BF3 68FF000000              push 000000FF
:00416BF8 8A45F8                  mov al, byte ptr [ebp-08]
:00416BFB 50                      push eax
:00416BFC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00416BFF 6BC950                  imul ecx, 00000050
:00416C02 81C1787F4900            add ecx, 00497F78
:00416C08 E8F3C5FEFF              call 00403200
:00416C0D 6A01                    push 00000001
:00416C0F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00416C12 51                      push ecx
:00416C13 8B5508                  mov edx, dword ptr [ebp+08]
:00416C16 52                      push edx
:00416C17 E8830F0000              call 00417B9F
:00416C1C 83C40C                  add esp, 0000000C
:00416C1F B801000000              mov eax, 00000001
:00416C24 EB0C                    jmp 00416C32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416BF1(C)
|
:00416C26 8B4508                  mov eax, dword ptr [ebp+08]
:00416C29 50                      push eax

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:00416C2A FF1500D64B00            Call dword ptr [004BD600]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416BC5(C)
|
:00416C30 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416BA3(U), :00416BAA(U), :00416C24(U)
|
:00416C32 8BE5                    mov esp, ebp
:00416C34 5D                      pop ebp
:00416C35 C3                      ret



* Referenced by a CALL at Address:
|:004167EC   
|
:00416C36 55                      push ebp
:00416C37 8BEC                    mov ebp, esp
:00416C39 83EC10                  sub esp, 00000010
:00416C3C 8B4514                  mov eax, dword ptr [ebp+14]
:00416C3F 50                      push eax
:00416C40 E810C7FFFF              call 00413355
:00416C45 83C404                  add esp, 00000004
:00416C48 8945F8                  mov dword ptr [ebp-08], eax
:00416C4B 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:00416C4E 51                      push ecx
:00416C4F 8B550C                  mov edx, dword ptr [ebp+0C]
:00416C52 52                      push edx
:00416C53 E842260000              call 0041929A
:00416C58 83C408                  add esp, 00000008
:00416C5B 25FF000000              and eax, 000000FF
:00416C60 8945F4                  mov dword ptr [ebp-0C], eax
:00416C63 8B45F4                  mov eax, dword ptr [ebp-0C]
:00416C66 50                      push eax
:00416C67 B978294B00              mov ecx, 004B2978
:00416C6C E8BF2A0000              call 00419730
:00416C71 25FFFF0000              and eax, 0000FFFF
:00416C76 8945FC                  mov dword ptr [ebp-04], eax
:00416C79 681A040000              push 0000041A
:00416C7E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416C81 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416C82 FF1510D64B00            Call dword ptr [004BD610]
:00416C88 394510                  cmp dword ptr [ebp+10], eax
:00416C8B 0F8598000000            jne 00416D29
:00416C91 8B55FC                  mov edx, dword ptr [ebp-04]
:00416C94 52                      push edx
:00416C95 8B45F8                  mov eax, dword ptr [ebp-08]
:00416C98 50                      push eax
:00416C99 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416C9C 51                      push ecx
:00416C9D E8A4CBFFFF              call 00413846
:00416CA2 83C40C                  add esp, 0000000C
:00416CA5 85C0                    test eax, eax
:00416CA7 747C                    je 00416D25
:00416CA9 8B55F8                  mov edx, dword ptr [ebp-08]
:00416CAC 52                      push edx
:00416CAD E81BE4FFFF              call 004150CD
:00416CB2 83C404                  add esp, 00000004
:00416CB5 25FF000000              and eax, 000000FF
:00416CBA 8945F0                  mov dword ptr [ebp-10], eax
:00416CBD 8A45FC                  mov al, byte ptr [ebp-04]
:00416CC0 50                      push eax
:00416CC1 8A4DF0                  mov cl, byte ptr [ebp-10]
:00416CC4 51                      push ecx
:00416CC5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00416CC8 6BC950                  imul ecx, 00000050
:00416CCB 81C1787F4900            add ecx, 00497F78
:00416CD1 E82AC5FEFF              call 00403200
:00416CD6 68FFFF0000              push 0000FFFF
:00416CDB 8B55F4                  mov edx, dword ptr [ebp-0C]
:00416CDE 52                      push edx
:00416CDF B978294B00              mov ecx, 004B2978
:00416CE4 E897E9FEFF              call 00405680
:00416CE9 8A45F0                  mov al, byte ptr [ebp-10]
:00416CEC 50                      push eax
:00416CED 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00416CF0 51                      push ecx
:00416CF1 8B5508                  mov edx, dword ptr [ebp+08]
:00416CF4 52                      push edx
:00416CF5 E89BCAFFFF              call 00413795
:00416CFA 83C40C                  add esp, 0000000C
:00416CFD 6A01                    push 00000001
:00416CFF 8B45F8                  mov eax, dword ptr [ebp-08]
:00416D02 50                      push eax
:00416D03 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416D06 51                      push ecx
:00416D07 E8930E0000              call 00417B9F
:00416D0C 83C40C                  add esp, 0000000C
:00416D0F 8B55F0                  mov edx, dword ptr [ebp-10]
:00416D12 52                      push edx
:00416D13 8B45FC                  mov eax, dword ptr [ebp-04]
:00416D16 50                      push eax
:00416D17 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416D1A 51                      push ecx
:00416D1B E83D000000              call 00416D5D
:00416D20 83C40C                  add esp, 0000000C
:00416D23 EB34                    jmp 00416D59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416CA7(C)
|
:00416D25 33C0                    xor eax, eax
:00416D27 EB30                    jmp 00416D59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416C8B(C)
|
:00416D29 8B55FC                  mov edx, dword ptr [ebp-04]
:00416D2C 52                      push edx
:00416D2D 8B4508                  mov eax, dword ptr [ebp+08]
:00416D30 50                      push eax
:00416D31 E841150000              call 00418277
:00416D36 83C408                  add esp, 00000008
:00416D39 85C0                    test eax, eax
:00416D3B 741A                    je 00416D57
:00416D3D 68FFFF0000              push 0000FFFF
:00416D42 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00416D45 51                      push ecx
:00416D46 B978294B00              mov ecx, 004B2978
:00416D4B E830E9FEFF              call 00405680
:00416D50 B801000000              mov eax, 00000001
:00416D55 EB02                    jmp 00416D59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416D3B(C)
|
:00416D57 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416D23(U), :00416D27(U), :00416D55(U)
|
:00416D59 8BE5                    mov esp, ebp
:00416D5B 5D                      pop ebp
:00416D5C C3                      ret



* Referenced by a CALL at Addresses:
|:00413780   , :00413996   , :00414F19   , :004169E2   , :00416B9B   
|:00416D1B   
|
:00416D5D 55                      push ebp
:00416D5E 8BEC                    mov ebp, esp
:00416D60 83EC28                  sub esp, 00000028
:00416D63 8B450C                  mov eax, dword ptr [ebp+0C]
:00416D66 50                      push eax
:00416D67 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416D6A 51                      push ecx
:00416D6B 8B5508                  mov edx, dword ptr [ebp+08]
:00416D6E 52                      push edx
:00416D6F 8D45D8                  lea eax, dword ptr [ebp-28]
:00416D72 50                      push eax
:00416D73 E847000000              call 00416DBF
:00416D78 83C410                  add esp, 00000010
:00416D7B 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00416D7E 51                      push ecx
:00416D7F 6A00                    push 00000000
:00416D81 6807100000              push 00001007
:00416D86 8B5508                  mov edx, dword ptr [ebp+08]
:00416D89 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00416D8A FF1504D64B00            Call dword ptr [004BD604]
:00416D90 8B4508                  mov eax, dword ptr [ebp+08]
:00416D93 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00416D94 FF15C4D64B00            Call dword ptr [004BD6C4]
:00416D9A 50                      push eax

* Reference To: COMCTL32.ImageList_DragLeave, Ord:0019h
                                  |
:00416D9B FF15F8D34B00            Call dword ptr [004BD3F8]
:00416DA1 6A01                    push 00000001
:00416DA3 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416DA6 51                      push ecx
:00416DA7 6813100000              push 00001013
:00416DAC 8B5508                  mov edx, dword ptr [ebp+08]
:00416DAF 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00416DB0 FF1504D64B00            Call dword ptr [004BD604]
:00416DB6 B801000000              mov eax, 00000001
:00416DBB 8BE5                    mov esp, ebp
:00416DBD 5D                      pop ebp
:00416DBE C3                      ret



* Referenced by a CALL at Address:
|:00416D73   
|
:00416DBF 55                      push ebp
:00416DC0 8BEC                    mov ebp, esp
:00416DC2 8B4508                  mov eax, dword ptr [ebp+08]
:00416DC5 C7000F000000            mov dword ptr [eax], 0000000F
:00416DCB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416DCE C7410C00000000          mov [ecx+0C], 00000000
:00416DD5 8B5508                  mov edx, dword ptr [ebp+08]
:00416DD8 C7421000000000          mov [edx+10], 00000000
:00416DDF 8B4508                  mov eax, dword ptr [ebp+08]
:00416DE2 C7400800000000          mov [eax+08], 00000000
:00416DE9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416DEC C74114FFFFFFFF          mov [ecx+14], FFFFFFFF
:00416DF3 8B5508                  mov edx, dword ptr [ebp+08]
:00416DF6 C7421820000000          mov [edx+18], 00000020
:00416DFD 8B4508                  mov eax, dword ptr [ebp+08]
:00416E00 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416E03 894804                  mov dword ptr [eax+04], ecx
:00416E06 8B5508                  mov edx, dword ptr [ebp+08]
:00416E09 C7421CFFFFFFFF          mov [edx+1C], FFFFFFFF
:00416E10 8B4514                  mov eax, dword ptr [ebp+14]
:00416E13 50                      push eax
:00416E14 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416E17 51                      push ecx
:00416E18 8B550C                  mov edx, dword ptr [ebp+0C]
:00416E1B 52                      push edx
:00416E1C E8B8240000              call 004192D9
:00416E21 83C40C                  add esp, 0000000C
:00416E24 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416E27 894120                  mov dword ptr [ecx+20], eax
:00416E2A 5D                      pop ebp
:00416E2B C3                      ret



* Referenced by a CALL at Address:
|:004166D2   
|
:00416E2C 55                      push ebp
:00416E2D 8BEC                    mov ebp, esp
:00416E2F 83EC08                  sub esp, 00000008
:00416E32 8B4514                  mov eax, dword ptr [ebp+14]
:00416E35 25FFFF0000              and eax, 0000FFFF
:00416E3A 8945F8                  mov dword ptr [ebp-08], eax
:00416E3D 8B4D14                  mov ecx, dword ptr [ebp+14]
:00416E40 C1E910                  shr ecx, 10
:00416E43 81E1FFFF0000            and ecx, 0000FFFF
:00416E49 81E1FFFF0000            and ecx, 0000FFFF
:00416E4F 894DFC                  mov dword ptr [ebp-04], ecx
:00416E52 8B55FC                  mov edx, dword ptr [ebp-04]
:00416E55 52                      push edx
:00416E56 8B45F8                  mov eax, dword ptr [ebp-08]
:00416E59 50                      push eax
:00416E5A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416E5D 51                      push ecx

* Reference To: USER32.ChildWindowFromPoint, Ord:0033h
                                  |
:00416E5E FF15CCD64B00            Call dword ptr [004BD6CC]
:00416E64 8B5510                  mov edx, dword ptr [ebp+10]
:00416E67 8902                    mov dword ptr [edx], eax
:00416E69 8B4510                  mov eax, dword ptr [ebp+10]
:00416E6C 833800                  cmp dword ptr [eax], 00000000
:00416E6F 740A                    je 00416E7B
:00416E71 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416E74 8B550C                  mov edx, dword ptr [ebp+0C]
:00416E77 3B11                    cmp edx, dword ptr [ecx]
:00416E79 7504                    jne 00416E7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416E6F(C)
|
:00416E7B 33C0                    xor eax, eax
:00416E7D EB4B                    jmp 00416ECA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416E79(C)
|
:00416E7F 681A040000              push 0000041A
:00416E84 8B4508                  mov eax, dword ptr [ebp+08]
:00416E87 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416E88 FF1510D64B00            Call dword ptr [004BD610]
:00416E8E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416E91 3901                    cmp dword ptr [ecx], eax
:00416E93 742C                    je 00416EC1
:00416E95 6849040000              push 00000449
:00416E9A 8B5508                  mov edx, dword ptr [ebp+08]
:00416E9D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416E9E FF1510D64B00            Call dword ptr [004BD610]
:00416EA4 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416EA7 3901                    cmp dword ptr [ecx], eax
:00416EA9 7416                    je 00416EC1
:00416EAB 6848040000              push 00000448
:00416EB0 8B5508                  mov edx, dword ptr [ebp+08]
:00416EB3 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416EB4 FF1510D64B00            Call dword ptr [004BD610]
:00416EBA 8B4D10                  mov ecx, dword ptr [ebp+10]
:00416EBD 3901                    cmp dword ptr [ecx], eax
:00416EBF 7507                    jne 00416EC8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416E93(C), :00416EA9(C)
|
:00416EC1 B801000000              mov eax, 00000001
:00416EC6 EB02                    jmp 00416ECA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416EBF(C)
|
:00416EC8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416E7D(U), :00416EC6(U)
|
:00416ECA 8BE5                    mov esp, ebp
:00416ECC 5D                      pop ebp
:00416ECD C3                      ret



* Referenced by a CALL at Address:
|:00415BC9   
|
:00416ECE 55                      push ebp
:00416ECF 8BEC                    mov ebp, esp
:00416ED1 83EC0C                  sub esp, 0000000C
:00416ED4 8B4510                  mov eax, dword ptr [ebp+10]
:00416ED7 25FFFF0000              and eax, 0000FFFF
:00416EDC 8945F4                  mov dword ptr [ebp-0C], eax
:00416EDF 817DF43C040000          cmp dword ptr [ebp-0C], 0000043C
:00416EE6 7F22                    jg 00416F0A
:00416EE8 817DF43C040000          cmp dword ptr [ebp-0C], 0000043C
:00416EEF 0F84BB000000            je 00416FB0
:00416EF5 837DF402                cmp dword ptr [ebp-0C], 00000002
:00416EF9 742A                    je 00416F25
:00416EFB 837DF403                cmp dword ptr [ebp-0C], 00000003
:00416EFF 0F8494010000            je 00417099
:00416F05 E99C010000              jmp 004170A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416EE6(C)
|
:00416F0A 817DF43D040000          cmp dword ptr [ebp-0C], 0000043D
:00416F11 0F840F010000            je 00417026
:00416F17 817DF44A040000          cmp dword ptr [ebp-0C], 0000044A
:00416F1E 741B                    je 00416F3B
:00416F20 E981010000              jmp 004170A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416EF9(C)
|
:00416F25 6A01                    push 00000001
:00416F27 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416F2A 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00416F2B FF15D8D54B00            Call dword ptr [004BD5D8]
:00416F31 B801000000              mov eax, 00000001
:00416F36 E96D010000              jmp 004170A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416F1E(C)
|
:00416F3B 8B550C                  mov edx, dword ptr [ebp+0C]
:00416F3E 81E2FFFF0000            and edx, 0000FFFF
:00416F44 83FA09                  cmp edx, 00000009
:00416F47 755D                    jne 00416FA6
:00416F49 8B4514                  mov eax, dword ptr [ebp+14]
:00416F4C 50                      push eax
:00416F4D E803C4FFFF              call 00413355
:00416F52 83C404                  add esp, 00000004
:00416F55 8945F8                  mov dword ptr [ebp-08], eax
:00416F58 681A040000              push 0000041A
:00416F5D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416F60 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416F61 FF1510D64B00            Call dword ptr [004BD610]
:00416F67 8945FC                  mov dword ptr [ebp-04], eax
:00416F6A 8B55F8                  mov edx, dword ptr [ebp-08]
:00416F6D 52                      push edx
:00416F6E 8B45FC                  mov eax, dword ptr [ebp-04]
:00416F71 50                      push eax
:00416F72 E840E8FFFF              call 004157B7
:00416F77 83C408                  add esp, 00000008
:00416F7A 6871040000              push 00000471
:00416F7F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416F82 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416F83 FF1510D64B00            Call dword ptr [004BD610]
:00416F89 50                      push eax
:00416F8A 8B55F8                  mov edx, dword ptr [ebp-08]
:00416F8D 52                      push edx
:00416F8E 8B4508                  mov eax, dword ptr [ebp+08]
:00416F91 50                      push eax
:00416F92 E876210000              call 0041910D
:00416F97 83C40C                  add esp, 0000000C
:00416F9A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416F9D 51                      push ecx
:00416F9E E80EF0FFFF              call 00415FB1
:00416FA3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416F47(C)
|
:00416FA6 B801000000              mov eax, 00000001
:00416FAB E9F8000000              jmp 004170A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416EEF(C)
|
:00416FB0 8B5518                  mov edx, dword ptr [ebp+18]
:00416FB3 C60200                  mov byte ptr [edx], 00
:00416FB6 6A00                    push 00000000
:00416FB8 6848040000              push 00000448
:00416FBD 8B4508                  mov eax, dword ptr [ebp+08]
:00416FC0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416FC1 FF1510D64B00            Call dword ptr [004BD610]
:00416FC7 50                      push eax
:00416FC8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416FCB 51                      push ecx
:00416FCC E8B5200000              call 00419086
:00416FD1 83C40C                  add esp, 0000000C
:00416FD4 6A00                    push 00000000
:00416FD6 681A040000              push 0000041A
:00416FDB 8B5508                  mov edx, dword ptr [ebp+08]
:00416FDE 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416FDF FF1510D64B00            Call dword ptr [004BD610]
:00416FE5 50                      push eax
:00416FE6 8B4508                  mov eax, dword ptr [ebp+08]
:00416FE9 50                      push eax
:00416FEA E897200000              call 00419086
:00416FEF 83C40C                  add esp, 0000000C
:00416FF2 6A00                    push 00000000
:00416FF4 6849040000              push 00000449
:00416FF9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00416FFC 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00416FFD FF1510D64B00            Call dword ptr [004BD610]
:00417003 50                      push eax
:00417004 8B5508                  mov edx, dword ptr [ebp+08]
:00417007 52                      push edx
:00417008 E879200000              call 00419086
:0041700D 83C40C                  add esp, 0000000C
:00417010 8B4508                  mov eax, dword ptr [ebp+08]
:00417013 50                      push eax
:00417014 E898EFFFFF              call 00415FB1
:00417019 83C404                  add esp, 00000004
:0041701C B801000000              mov eax, 00000001
:00417021 E982000000              jmp 004170A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416F11(C)
|
:00417026 8B4D18                  mov ecx, dword ptr [ebp+18]
:00417029 C60101                  mov byte ptr [ecx], 01
:0041702C 6A01                    push 00000001
:0041702E 6848040000              push 00000448
:00417033 8B5508                  mov edx, dword ptr [ebp+08]
:00417036 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417037 FF1510D64B00            Call dword ptr [004BD610]
:0041703D 50                      push eax
:0041703E 8B4508                  mov eax, dword ptr [ebp+08]
:00417041 50                      push eax
:00417042 E83F200000              call 00419086
:00417047 83C40C                  add esp, 0000000C
:0041704A 6A01                    push 00000001
:0041704C 681A040000              push 0000041A
:00417051 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417054 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417055 FF1510D64B00            Call dword ptr [004BD610]
:0041705B 50                      push eax
:0041705C 8B5508                  mov edx, dword ptr [ebp+08]
:0041705F 52                      push edx
:00417060 E821200000              call 00419086
:00417065 83C40C                  add esp, 0000000C
:00417068 6A01                    push 00000001
:0041706A 6849040000              push 00000449
:0041706F 8B4508                  mov eax, dword ptr [ebp+08]
:00417072 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417073 FF1510D64B00            Call dword ptr [004BD610]
:00417079 50                      push eax
:0041707A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041707D 51                      push ecx
:0041707E E803200000              call 00419086
:00417083 83C40C                  add esp, 0000000C
:00417086 8B5508                  mov edx, dword ptr [ebp+08]
:00417089 52                      push edx
:0041708A E822EFFFFF              call 00415FB1
:0041708F 83C404                  add esp, 00000004
:00417092 B801000000              mov eax, 00000001
:00417097 EB0F                    jmp 004170A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00416EFF(C)
|
:00417099 682A080000              push 0000082A
:0041709E E8282A0500              call 00469ACB
:004170A3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416F05(U), :00416F20(U)
|
:004170A6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00416F36(U), :00416FAB(U), :00417021(U), :00417097(U)
|
:004170A8 8BE5                    mov esp, ebp
:004170AA 5D                      pop ebp
:004170AB C3                      ret



* Referenced by a CALL at Addresses:
|:00416A8C   , :0041724A   , :00418320   
|
:004170AC 55                      push ebp
:004170AD 8BEC                    mov ebp, esp
:004170AF 83EC10                  sub esp, 00000010

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004170B2 6A0A                    push 0000000A
:004170B4 8D45F0                  lea eax, dword ptr [ebp-10]
:004170B7 50                      push eax
:004170B8 B978294B00              mov ecx, 004B2978
:004170BD E81EF90100              call 004369E0
:004170C2 50                      push eax
:004170C3 E8F8340500              call 0046A5C0
:004170C8 83C40C                  add esp, 0000000C
:004170CB 50                      push eax

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0475, ""
                                  |
:004170CC 6875040000              push 00000475
:004170D1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004170D4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004170D5 FF1510D64B00            Call dword ptr [004BD610]
:004170DB 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004170DC FF1514D64B00            Call dword ptr [004BD614]
:004170E2 8BE5                    mov esp, ebp
:004170E4 5D                      pop ebp
:004170E5 C3                      ret



* Referenced by a CALL at Address:
|:00415B39   
|
:004170E6 55                      push ebp
:004170E7 8BEC                    mov ebp, esp
:004170E9 83EC10                  sub esp, 00000010
:004170EC 8B450C                  mov eax, dword ptr [ebp+0C]
:004170EF 25FF000000              and eax, 000000FF
:004170F4 85C0                    test eax, eax
:004170F6 757B                    jne 00417173
:004170F8 6A00                    push 00000000
:004170FA 6A01                    push 00000001
:004170FC 68F1000000              push 000000F1

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043C, ""
                                  |
:00417101 683C040000              push 0000043C
:00417106 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417109 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041710A FF1510D64B00            Call dword ptr [004BD610]
:00417110 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00417111 FF1504D64B00            Call dword ptr [004BD604]
:00417117 6A00                    push 00000000
:00417119 6848040000              push 00000448
:0041711E 8B5508                  mov edx, dword ptr [ebp+08]
:00417121 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417122 FF1510D64B00            Call dword ptr [004BD610]
:00417128 50                      push eax
:00417129 8B4508                  mov eax, dword ptr [ebp+08]
:0041712C 50                      push eax
:0041712D E8541F0000              call 00419086
:00417132 83C40C                  add esp, 0000000C
:00417135 6A00                    push 00000000
:00417137 681A040000              push 0000041A
:0041713C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041713F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417140 FF1510D64B00            Call dword ptr [004BD610]
:00417146 50                      push eax
:00417147 8B5508                  mov edx, dword ptr [ebp+08]
:0041714A 52                      push edx
:0041714B E8361F0000              call 00419086
:00417150 83C40C                  add esp, 0000000C
:00417153 6A00                    push 00000000
:00417155 6849040000              push 00000449
:0041715A 8B4508                  mov eax, dword ptr [ebp+08]
:0041715D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041715E FF1510D64B00            Call dword ptr [004BD610]
:00417164 50                      push eax
:00417165 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417168 51                      push ecx
:00417169 E8181F0000              call 00419086
:0041716E 83C40C                  add esp, 0000000C
:00417171 EB79                    jmp 004171EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004170F6(C)
|
:00417173 6A00                    push 00000000
:00417175 6A01                    push 00000001
:00417177 68F1000000              push 000000F1
:0041717C 683D040000              push 0000043D
:00417181 8B5508                  mov edx, dword ptr [ebp+08]
:00417184 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417185 FF1510D64B00            Call dword ptr [004BD610]
:0041718B 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041718C FF1504D64B00            Call dword ptr [004BD604]
:00417192 6A01                    push 00000001
:00417194 6848040000              push 00000448
:00417199 8B4508                  mov eax, dword ptr [ebp+08]
:0041719C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041719D FF1510D64B00            Call dword ptr [004BD610]
:004171A3 50                      push eax
:004171A4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004171A7 51                      push ecx
:004171A8 E8D91E0000              call 00419086
:004171AD 83C40C                  add esp, 0000000C
:004171B0 6A01                    push 00000001
:004171B2 681A040000              push 0000041A
:004171B7 8B5508                  mov edx, dword ptr [ebp+08]
:004171BA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004171BB FF1510D64B00            Call dword ptr [004BD610]
:004171C1 50                      push eax
:004171C2 8B4508                  mov eax, dword ptr [ebp+08]
:004171C5 50                      push eax
:004171C6 E8BB1E0000              call 00419086
:004171CB 83C40C                  add esp, 0000000C
:004171CE 6A01                    push 00000001
:004171D0 6849040000              push 00000449
:004171D5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004171D8 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004171D9 FF1510D64B00            Call dword ptr [004BD610]
:004171DF 50                      push eax
:004171E0 8B5508                  mov edx, dword ptr [ebp+08]
:004171E3 52                      push edx
:004171E4 E89D1E0000              call 00419086
:004171E9 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417171(U)
|
:004171EC 684A040000              push 0000044A
:004171F1 8B4508                  mov eax, dword ptr [ebp+08]
:004171F4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004171F5 FF1510D64B00            Call dword ptr [004BD610]
:004171FB 8945F0                  mov dword ptr [ebp-10], eax
:004171FE 6A00                    push 00000000
:00417200 6820030000              push 00000320
:00417205 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00417208 51                      push ecx
:00417209 E8B7E6FFFF              call 004158C5
:0041720E 83C40C                  add esp, 0000000C
:00417211 8945FC                  mov dword ptr [ebp-04], eax
:00417214 6871040000              push 00000471
:00417219 8B5508                  mov edx, dword ptr [ebp+08]
:0041721C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041721D FF1510D64B00            Call dword ptr [004BD610]
:00417223 50                      push eax
:00417224 8B45FC                  mov eax, dword ptr [ebp-04]
:00417227 50                      push eax
:00417228 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041722B 51                      push ecx
:0041722C E8DC1E0000              call 0041910D
:00417231 83C40C                  add esp, 0000000C
:00417234 6A01                    push 00000001
:00417236 8B55FC                  mov edx, dword ptr [ebp-04]
:00417239 52                      push edx
:0041723A 8B4508                  mov eax, dword ptr [ebp+08]
:0041723D 50                      push eax
:0041723E E85C090000              call 00417B9F
:00417243 83C40C                  add esp, 0000000C
:00417246 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417249 51                      push ecx
:0041724A E85DFEFFFF              call 004170AC
:0041724F 83C404                  add esp, 00000004
:00417252 6A00                    push 00000000
:00417254 6A26                    push 00000026
:00417256 8D55F8                  lea edx, dword ptr [ebp-08]
:00417259 52                      push edx
:0041725A 8D45F4                  lea eax, dword ptr [ebp-0C]
:0041725D 50                      push eax
:0041725E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417261 51                      push ecx
:00417262 E8FD100000              call 00418364
:00417267 83C414                  add esp, 00000014
:0041726A 8B55F8                  mov edx, dword ptr [ebp-08]
:0041726D 52                      push edx
:0041726E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00417271 50                      push eax
:00417272 E84D110000              call 004183C4
:00417277 83C408                  add esp, 00000008
:0041727A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041727D 51                      push ecx
:0041727E 8B55F4                  mov edx, dword ptr [ebp-0C]
:00417281 52                      push edx
:00417282 8B45FC                  mov eax, dword ptr [ebp-04]
:00417285 50                      push eax
:00417286 681A040000              push 0000041A
:0041728B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041728E 51                      push ecx
:0041728F E858E4FFFF              call 004156EC
:00417294 83C414                  add esp, 00000014
:00417297 8B55F8                  mov edx, dword ptr [ebp-08]
:0041729A 52                      push edx
:0041729B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041729E 50                      push eax
:0041729F 6849040000              push 00000449
:004172A4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004172A7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004172A8 FF1510D64B00            Call dword ptr [004BD610]
:004172AE 50                      push eax
:004172AF 8B5508                  mov edx, dword ptr [ebp+08]
:004172B2 52                      push edx
:004172B3 E841C9FFFF              call 00413BF9
:004172B8 83C410                  add esp, 00000010
:004172BB 8B45F8                  mov eax, dword ptr [ebp-08]
:004172BE 50                      push eax
:004172BF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004172C2 51                      push ecx
:004172C3 6848040000              push 00000448
:004172C8 8B5508                  mov edx, dword ptr [ebp+08]
:004172CB 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004172CC FF1510D64B00            Call dword ptr [004BD610]
:004172D2 50                      push eax
:004172D3 8B4508                  mov eax, dword ptr [ebp+08]
:004172D6 50                      push eax
:004172D7 E82F000000              call 0041730B
:004172DC 83C410                  add esp, 00000010
:004172DF 6849040000              push 00000449
:004172E4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004172E7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004172E8 FF1510D64B00            Call dword ptr [004BD610]
:004172EE 50                      push eax
:004172EF 686C040000              push 0000046C
:004172F4 8B5508                  mov edx, dword ptr [ebp+08]
:004172F7 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004172F8 FF1510D64B00            Call dword ptr [004BD610]
:004172FE 50                      push eax
:004172FF E84BC3FFFF              call 0041364F
:00417304 83C408                  add esp, 00000008
:00417307 8BE5                    mov esp, ebp
:00417309 5D                      pop ebp
:0041730A C3                      ret



* Referenced by a CALL at Address:
|:004172D7   
|
:0041730B 55                      push ebp
:0041730C 8BEC                    mov ebp, esp
:0041730E 51                      push ecx
:0041730F 8B450C                  mov eax, dword ptr [ebp+0C]
:00417312 50                      push eax
:00417313 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417316 51                      push ecx
:00417317 E877110000              call 00418493
:0041731C 83C408                  add esp, 00000008
:0041731F B978294B00              mov ecx, 004B2978
:00417324 E817E4FEFF              call 00405740
:00417329 8845FC                  mov byte ptr [ebp-04], al
:0041732C 8B5510                  mov edx, dword ptr [ebp+10]
:0041732F 52                      push edx
:00417330 6A01                    push 00000001
:00417332 6803100000              push 00001003
:00417337 8B450C                  mov eax, dword ptr [ebp+0C]
:0041733A 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041733B FF1504D64B00            Call dword ptr [004BD604]
:00417341 8B4D14                  mov ecx, dword ptr [ebp+14]
:00417344 51                      push ecx
:00417345 6A00                    push 00000000
:00417347 6803100000              push 00001003
:0041734C 8B550C                  mov edx, dword ptr [ebp+0C]
:0041734F 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00417350 FF1504D64B00            Call dword ptr [004BD604]
:00417356 8A45FC                  mov al, byte ptr [ebp-04]
:00417359 50                      push eax
:0041735A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041735D 51                      push ecx
:0041735E E807000000              call 0041736A
:00417363 83C408                  add esp, 00000008
:00417366 8BE5                    mov esp, ebp
:00417368 5D                      pop ebp
:00417369 C3                      ret



* Referenced by a CALL at Address:
|:0041735E   
|
:0041736A 55                      push ebp
:0041736B 8BEC                    mov ebp, esp
:0041736D 83EC30                  sub esp, 00000030
:00417370 C745D40F000000          mov [ebp-2C], 0000000F
:00417377 C745E000000000          mov [ebp-20], 00000000
:0041737E C745E400000000          mov [ebp-1C], 00000000
:00417385 C745DC00000000          mov [ebp-24], 00000000
:0041738C C745E8FFFFFFFF          mov [ebp-18], FFFFFFFF
:00417393 C745EC20000000          mov [ebp-14], 00000020
:0041739A C745D000000000          mov [ebp-30], 00000000
:004173A1 EB09                    jmp 004173AC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004173FF(U), :00417434(U)
|
:004173A3 8B45D0                  mov eax, dword ptr [ebp-30]
:004173A6 83C001                  add eax, 00000001
:004173A9 8945D0                  mov dword ptr [ebp-30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004173A1(U)
|
:004173AC 837DD010                cmp dword ptr [ebp-30], 00000010
:004173B0 0F8D83000000            jnl 00417439
:004173B6 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004173B9 51                      push ecx
:004173BA 8B15E04F4B00            mov edx, dword ptr [004B4FE0]
:004173C0 52                      push edx
:004173C1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004173C4 81E1FF000000            and ecx, 000000FF
:004173CA 69C9EC000000            imul ecx, 000000EC
:004173D0 81C150D24A00            add ecx, 004AD250
:004173D6 E875230000              call 00419750
:004173DB 8945FC                  mov dword ptr [ebp-04], eax
:004173DE 8B45D0                  mov eax, dword ptr [ebp-30]
:004173E1 8945D8                  mov dword ptr [ebp-28], eax
:004173E4 817DFCFFFF0000          cmp dword ptr [ebp-04], 0000FFFF
:004173EB 7514                    jne 00417401
:004173ED 6A00                    push 00000000
:004173EF 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004173F2 51                      push ecx
:004173F3 8B5508                  mov edx, dword ptr [ebp+08]
:004173F6 52                      push edx
:004173F7 E8DD1E0000              call 004192D9
:004173FC 83C40C                  add esp, 0000000C
:004173FF EBA2                    jmp 004173A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004173EB(C)
|
:00417401 C745F0FFFFFFFF          mov [ebp-10], FFFFFFFF
:00417408 8B45FC                  mov eax, dword ptr [ebp-04]
:0041740B 50                      push eax
:0041740C 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0041740F 51                      push ecx
:00417410 8B5508                  mov edx, dword ptr [ebp+08]
:00417413 52                      push edx
:00417414 E8C01E0000              call 004192D9
:00417419 83C40C                  add esp, 0000000C
:0041741C 8945F4                  mov dword ptr [ebp-0C], eax
:0041741F 8D45D4                  lea eax, dword ptr [ebp-2C]
:00417422 50                      push eax
:00417423 6A00                    push 00000000
:00417425 6807100000              push 00001007
:0041742A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041742D 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041742E FF1504D64B00            Call dword ptr [004BD604]
:00417434 E96AFFFFFF              jmp 004173A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004173B0(C)
|
:00417439 8BE5                    mov esp, ebp
:0041743B 5D                      pop ebp
:0041743C C3                      ret



* Referenced by a CALL at Addresses:
|:00412954   , :00412B42   , :00412DD7   , :004130A4   , :004130D3   
|:00413767   , :00413982   , :00413B62   
|
:0041743D 55                      push ebp
:0041743E 8BEC                    mov ebp, esp
:00417440 83EC0C                  sub esp, 0000000C
:00417443 837D1000                cmp dword ptr [ebp+10], 00000000
:00417447 741B                    je 00417464

* Possible StringData Ref from Data Obj ->"пܹD"
                                  |
:00417449 6890C84700              push 0047C890
:0041744E 68A6040000              push 000004A6
:00417453 8B4508                  mov eax, dword ptr [ebp+08]
:00417456 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417457 FF1510D64B00            Call dword ptr [004BD610]
:0041745D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041745E FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417447(C)
|
:00417464 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417467 6BC950                  imul ecx, 00000050
:0041746A 81C1787F4900            add ecx, 00497F78
:00417470 E84BBDFEFF              call 004031C0
:00417475 25FF000000              and eax, 000000FF
:0041747A 8945FC                  mov dword ptr [ebp-04], eax
:0041747D 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00417484 7444                    je 004174CA
:00417486 8A4DFC                  mov cl, byte ptr [ebp-04]
:00417489 51                      push ecx
:0041748A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041748D 6BC950                  imul ecx, 00000050
:00417490 81C1787F4900            add ecx, 00497F78
:00417496 E845BDFEFF              call 004031E0
:0041749B 8AC8                    mov cl, al
:0041749D 81E1FF000000            and ecx, 000000FF
:004174A3 6BC922                  imul ecx, 00000022
:004174A6 81C1D0474900            add ecx, 004947D0
:004174AC E83FE2FEFF              call 004056F0
:004174B1 50                      push eax
:004174B2 68A4040000              push 000004A4
:004174B7 8B5508                  mov edx, dword ptr [ebp+08]
:004174BA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004174BB FF1510D64B00            Call dword ptr [004BD610]
:004174C1 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004174C2 FF1514D64B00            Call dword ptr [004BD614]
:004174C8 EB1B                    jmp 004174E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417484(C)
|

* Possible StringData Ref from Data Obj ->"S˳ƪZ"
                                  |
:004174CA 689CC84700              push 0047C89C
:004174CF 68A4040000              push 000004A4
:004174D4 8B4508                  mov eax, dword ptr [ebp+08]
:004174D7 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004174D8 FF1510D64B00            Call dword ptr [004BD610]
:004174DE 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004174DF FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004174C8(U)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004174E5 6A0A                    push 0000000A
:004174E7 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:004174EA 51                      push ecx
:004174EB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004174EE 6BC950                  imul ecx, 00000050
:004174F1 81C1787F4900            add ecx, 00497F78
:004174F7 E822A8FEFF              call 00401D1E
:004174FC 50                      push eax
:004174FD E8BE300500              call 0046A5C0
:00417502 83C40C                  add esp, 0000000C
:00417505 50                      push eax
:00417506 6891040000              push 00000491
:0041750B 8B5508                  mov edx, dword ptr [ebp+08]
:0041750E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041750F FF1510D64B00            Call dword ptr [004BD610]
:00417515 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417516 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0041751C 6A0A                    push 0000000A
:0041751E 8D45F4                  lea eax, dword ptr [ebp-0C]
:00417521 50                      push eax
:00417522 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417525 6BC950                  imul ecx, 00000050
:00417528 81C1787F4900            add ecx, 00497F78
:0041752E E81EA8FEFF              call 00401D51
:00417533 50                      push eax
:00417534 E887300500              call 0046A5C0
:00417539 83C40C                  add esp, 0000000C
:0041753C 50                      push eax
:0041753D 6892040000              push 00000492
:00417542 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417545 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417546 FF1510D64B00            Call dword ptr [004BD610]
:0041754C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041754D FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417553 6A0A                    push 0000000A
:00417555 8D55F4                  lea edx, dword ptr [ebp-0C]
:00417558 52                      push edx
:00417559 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041755C 6BC950                  imul ecx, 00000050
:0041755F 81C1787F4900            add ecx, 00497F78
:00417565 E81AA8FEFF              call 00401D84
:0041756A 50                      push eax
:0041756B E850300500              call 0046A5C0
:00417570 83C40C                  add esp, 0000000C
:00417573 50                      push eax
:00417574 6893040000              push 00000493
:00417579 8B4508                  mov eax, dword ptr [ebp+08]
:0041757C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041757D FF1510D64B00            Call dword ptr [004BD610]
:00417583 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417584 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0041758A 6A0A                    push 0000000A
:0041758C 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0041758F 51                      push ecx
:00417590 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417593 6BC950                  imul ecx, 00000050
:00417596 81C1787F4900            add ecx, 00497F78
:0041759C E816A8FEFF              call 00401DB7
:004175A1 50                      push eax
:004175A2 E819300500              call 0046A5C0
:004175A7 83C40C                  add esp, 0000000C
:004175AA 50                      push eax
:004175AB 6894040000              push 00000494
:004175B0 8B5508                  mov edx, dword ptr [ebp+08]
:004175B3 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004175B4 FF1510D64B00            Call dword ptr [004BD610]
:004175BA 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004175BB FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004175C1 6A0A                    push 0000000A
:004175C3 8D45F4                  lea eax, dword ptr [ebp-0C]
:004175C6 50                      push eax
:004175C7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004175CA 6BC950                  imul ecx, 00000050
:004175CD 81C1787F4900            add ecx, 00497F78
:004175D3 E812A8FEFF              call 00401DEA
:004175D8 50                      push eax
:004175D9 E8E22F0500              call 0046A5C0
:004175DE 83C40C                  add esp, 0000000C
:004175E1 50                      push eax
:004175E2 688A040000              push 0000048A
:004175E7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004175EA 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004175EB FF1510D64B00            Call dword ptr [004BD610]
:004175F1 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004175F2 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004175F8 6A0A                    push 0000000A
:004175FA 8D55F4                  lea edx, dword ptr [ebp-0C]
:004175FD 52                      push edx
:004175FE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417601 6BC950                  imul ecx, 00000050
:00417604 81C1787F4900            add ecx, 00497F78
:0041760A E80CA8FEFF              call 00401E1B
:0041760F 50                      push eax
:00417610 E8AB2F0500              call 0046A5C0
:00417615 83C40C                  add esp, 0000000C
:00417618 50                      push eax
:00417619 688B040000              push 0000048B
:0041761E 8B4508                  mov eax, dword ptr [ebp+08]
:00417621 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417622 FF1510D64B00            Call dword ptr [004BD610]
:00417628 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417629 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0041762F 6A0A                    push 0000000A
:00417631 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00417634 51                      push ecx
:00417635 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417638 6BC950                  imul ecx, 00000050
:0041763B 81C1787F4900            add ecx, 00497F78
:00417641 E808A8FEFF              call 00401E4E
:00417646 50                      push eax
:00417647 E8742F0500              call 0046A5C0
:0041764C 83C40C                  add esp, 0000000C
:0041764F 50                      push eax
:00417650 688C040000              push 0000048C
:00417655 8B5508                  mov edx, dword ptr [ebp+08]
:00417658 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417659 FF1510D64B00            Call dword ptr [004BD610]
:0041765F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417660 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417666 6A0A                    push 0000000A
:00417668 8D45F4                  lea eax, dword ptr [ebp-0C]
:0041766B 50                      push eax
:0041766C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041766F 6BC950                  imul ecx, 00000050
:00417672 81C1787F4900            add ecx, 00497F78
:00417678 E83DA8FEFF              call 00401EBA
:0041767D 25FF000000              and eax, 000000FF
:00417682 50                      push eax
:00417683 E8382F0500              call 0046A5C0
:00417688 83C40C                  add esp, 0000000C
:0041768B 50                      push eax

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:0041768C 6800040000              push 00000400
:00417691 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417694 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417695 FF1510D64B00            Call dword ptr [004BD610]
:0041769B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041769C FF1514D64B00            Call dword ptr [004BD614]
:004176A2 8B5508                  mov edx, dword ptr [ebp+08]
:004176A5 52                      push edx
:004176A6 E86C070000              call 00417E17
:004176AB 83C404                  add esp, 00000004
:004176AE 8BE5                    mov esp, ebp
:004176B0 5D                      pop ebp
:004176B1 C3                      ret



* Referenced by a CALL at Addresses:
|:0041419E   , :00414445   , :00414712   , :00414741   , :00414ED9   
|:004156CE   
|
:004176B2 55                      push ebp
:004176B3 8BEC                    mov ebp, esp
:004176B5 83EC0C                  sub esp, 0000000C
:004176B8 837D1000                cmp dword ptr [ebp+10], 00000000
:004176BC 741B                    je 004176D9

* Possible StringData Ref from Data Obj ->"пܹD"
                                  |
:004176BE 68ACC84700              push 0047C8AC
:004176C3 68AE040000              push 000004AE
:004176C8 8B4508                  mov eax, dword ptr [ebp+08]
:004176CB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004176CC FF1510D64B00            Call dword ptr [004BD610]
:004176D2 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004176D3 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004176BC(C)
|
:004176D9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004176DC 6BC950                  imul ecx, 00000050
:004176DF 81C1787F4900            add ecx, 00497F78
:004176E5 E8D6BAFEFF              call 004031C0
:004176EA 8845FC                  mov byte ptr [ebp-04], al
:004176ED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004176F0 81E1FF000000            and ecx, 000000FF
:004176F6 81F9FF000000            cmp ecx, 000000FF
:004176FC 7444                    je 00417742
:004176FE 8A55FC                  mov dl, byte ptr [ebp-04]
:00417701 52                      push edx
:00417702 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417705 6BC950                  imul ecx, 00000050
:00417708 81C1787F4900            add ecx, 00497F78
:0041770E E8CDBAFEFF              call 004031E0
:00417713 8AC8                    mov cl, al
:00417715 81E1FF000000            and ecx, 000000FF
:0041771B 6BC922                  imul ecx, 00000022
:0041771E 81C1D0474900            add ecx, 004947D0
:00417724 E8C7DFFEFF              call 004056F0
:00417729 50                      push eax
:0041772A 68A9040000              push 000004A9
:0041772F 8B4508                  mov eax, dword ptr [ebp+08]
:00417732 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417733 FF1510D64B00            Call dword ptr [004BD610]
:00417739 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041773A FF1514D64B00            Call dword ptr [004BD614]
:00417740 EB1B                    jmp 0041775D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004176FC(C)
|

* Possible StringData Ref from Data Obj ->"S˳"
                                  |
:00417742 68B8C84700              push 0047C8B8
:00417747 68A9040000              push 000004A9
:0041774C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041774F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417750 FF1510D64B00            Call dword ptr [004BD610]
:00417756 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417757 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417740(U)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0041775D 6A0A                    push 0000000A
:0041775F 8D55F4                  lea edx, dword ptr [ebp-0C]
:00417762 52                      push edx
:00417763 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417766 6BC950                  imul ecx, 00000050
:00417769 81C1787F4900            add ecx, 00497F78
:0041776F E8AAA5FEFF              call 00401D1E
:00417774 50                      push eax
:00417775 E8462E0500              call 0046A5C0
:0041777A 83C40C                  add esp, 0000000C
:0041777D 50                      push eax
:0041777E 68A8040000              push 000004A8
:00417783 8B4508                  mov eax, dword ptr [ebp+08]
:00417786 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417787 FF1510D64B00            Call dword ptr [004BD610]
:0041778D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041778E FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417794 6A0A                    push 0000000A
:00417796 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00417799 51                      push ecx
:0041779A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041779D 6BC950                  imul ecx, 00000050
:004177A0 81C1787F4900            add ecx, 00497F78
:004177A6 E8A6A5FEFF              call 00401D51
:004177AB 50                      push eax
:004177AC E80F2E0500              call 0046A5C0
:004177B1 83C40C                  add esp, 0000000C
:004177B4 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F3, "255"
                                  |
:004177B5 68F3030000              push 000003F3
:004177BA 8B5508                  mov edx, dword ptr [ebp+08]
:004177BD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004177BE FF1510D64B00            Call dword ptr [004BD610]
:004177C4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004177C5 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004177CB 6A0A                    push 0000000A
:004177CD 8D45F4                  lea eax, dword ptr [ebp-0C]
:004177D0 50                      push eax
:004177D1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004177D4 6BC950                  imul ecx, 00000050
:004177D7 81C1787F4900            add ecx, 00497F78
:004177DD E8A2A5FEFF              call 00401D84
:004177E2 50                      push eax
:004177E3 E8D82D0500              call 0046A5C0
:004177E8 83C40C                  add esp, 0000000C
:004177EB 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03FD, "1000"
                                  |
:004177EC 68FD030000              push 000003FD
:004177F1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004177F4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004177F5 FF1510D64B00            Call dword ptr [004BD610]
:004177FB 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004177FC FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417802 6A0A                    push 0000000A
:00417804 8D55F4                  lea edx, dword ptr [ebp-0C]
:00417807 52                      push edx
:00417808 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041780B 6BC950                  imul ecx, 00000050
:0041780E 81C1787F4900            add ecx, 00497F78
:00417814 E89EA5FEFF              call 00401DB7
:00417819 50                      push eax
:0041781A E8A12D0500              call 0046A5C0
:0041781F 83C40C                  add esp, 0000000C
:00417822 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F2, "255"
                                  |
:00417823 68F2030000              push 000003F2
:00417828 8B4508                  mov eax, dword ptr [ebp+08]
:0041782B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041782C FF1510D64B00            Call dword ptr [004BD610]
:00417832 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417833 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417839 6A0A                    push 0000000A
:0041783B 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0041783E 51                      push ecx
:0041783F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417842 6BC950                  imul ecx, 00000050
:00417845 81C1787F4900            add ecx, 00497F78
:0041784B E89AA5FEFF              call 00401DEA
:00417850 50                      push eax
:00417851 E86A2D0500              call 0046A5C0
:00417856 83C40C                  add esp, 0000000C
:00417859 50                      push eax
:0041785A 68A4040000              push 000004A4
:0041785F 8B5508                  mov edx, dword ptr [ebp+08]
:00417862 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417863 FF1510D64B00            Call dword ptr [004BD610]
:00417869 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041786A FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417870 6A0A                    push 0000000A
:00417872 8D45F4                  lea eax, dword ptr [ebp-0C]
:00417875 50                      push eax
:00417876 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417879 6BC950                  imul ecx, 00000050
:0041787C 81C1787F4900            add ecx, 00497F78
:00417882 E894A5FEFF              call 00401E1B
:00417887 50                      push eax
:00417888 E8332D0500              call 0046A5C0
:0041788D 83C40C                  add esp, 0000000C
:00417890 50                      push eax
:00417891 68A5040000              push 000004A5
:00417896 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417899 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041789A FF1510D64B00            Call dword ptr [004BD610]
:004178A0 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004178A1 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004178A7 6A0A                    push 0000000A
:004178A9 8D55F4                  lea edx, dword ptr [ebp-0C]
:004178AC 52                      push edx
:004178AD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004178B0 6BC950                  imul ecx, 00000050
:004178B3 81C1787F4900            add ecx, 00497F78
:004178B9 E890A5FEFF              call 00401E4E
:004178BE 50                      push eax
:004178BF E8FC2C0500              call 0046A5C0
:004178C4 83C40C                  add esp, 0000000C
:004178C7 50                      push eax
:004178C8 68A6040000              push 000004A6
:004178CD 8B4508                  mov eax, dword ptr [ebp+08]
:004178D0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004178D1 FF1510D64B00            Call dword ptr [004BD610]
:004178D7 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004178D8 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004178DE 6A0A                    push 0000000A
:004178E0 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:004178E3 51                      push ecx
:004178E4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004178E7 6BC950                  imul ecx, 00000050
:004178EA 81C1787F4900            add ecx, 00497F78
:004178F0 E8C5A5FEFF              call 00401EBA
:004178F5 25FF000000              and eax, 000000FF
:004178FA 50                      push eax
:004178FB E8C02C0500              call 0046A5C0
:00417900 83C40C                  add esp, 0000000C
:00417903 50                      push eax
:00417904 68A7040000              push 000004A7
:00417909 8B5508                  mov edx, dword ptr [ebp+08]
:0041790C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041790D FF1510D64B00            Call dword ptr [004BD610]
:00417913 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417914 FF1514D64B00            Call dword ptr [004BD614]
:0041791A 8B4508                  mov eax, dword ptr [ebp+08]
:0041791D 50                      push eax
:0041791E E8B9050000              call 00417EDC
:00417923 83C404                  add esp, 00000004
:00417926 8BE5                    mov esp, ebp
:00417928 5D                      pop ebp
:00417929 C3                      ret



* Referenced by a CALL at Addresses:
|:004141B0   , :004149C3   , :00414C90   , :00414CBF   , :00414F00   
|:004156E0   
|
:0041792A 55                      push ebp
:0041792B 8BEC                    mov ebp, esp
:0041792D 83EC0C                  sub esp, 0000000C
:00417930 837D1000                cmp dword ptr [ebp+10], 00000000
:00417934 741B                    je 00417951

* Possible StringData Ref from Data Obj ->"пܹD"
                                  |
:00417936 68C4C84700              push 0047C8C4
:0041793B 68AD040000              push 000004AD
:00417940 8B4508                  mov eax, dword ptr [ebp+08]
:00417943 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417944 FF1510D64B00            Call dword ptr [004BD610]
:0041794A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041794B FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417934(C)
|
:00417951 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417954 6BC950                  imul ecx, 00000050
:00417957 81C1787F4900            add ecx, 00497F78
:0041795D E85EB8FEFF              call 004031C0
:00417962 25FF000000              and eax, 000000FF
:00417967 8945FC                  mov dword ptr [ebp-04], eax
:0041796A 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00417971 7444                    je 004179B7
:00417973 8A4DFC                  mov cl, byte ptr [ebp-04]
:00417976 51                      push ecx
:00417977 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041797A 6BC950                  imul ecx, 00000050
:0041797D 81C1787F4900            add ecx, 00497F78
:00417983 E858B8FEFF              call 004031E0
:00417988 8AC8                    mov cl, al
:0041798A 81E1FF000000            and ecx, 000000FF
:00417990 6BC922                  imul ecx, 00000022
:00417993 81C1D0474900            add ecx, 004947D0
:00417999 E852DDFEFF              call 004056F0
:0041799E 50                      push eax
:0041799F 68AB040000              push 000004AB
:004179A4 8B5508                  mov edx, dword ptr [ebp+08]
:004179A7 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004179A8 FF1510D64B00            Call dword ptr [004BD610]
:004179AE 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004179AF FF1514D64B00            Call dword ptr [004BD614]
:004179B5 EB1B                    jmp 004179D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417971(C)
|

* Possible StringData Ref from Data Obj ->"S˳"
                                  |
:004179B7 68D0C84700              push 0047C8D0
:004179BC 68AB040000              push 000004AB
:004179C1 8B4508                  mov eax, dword ptr [ebp+08]
:004179C4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004179C5 FF1510D64B00            Call dword ptr [004BD610]
:004179CB 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004179CC FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004179B5(U)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004179D2 6A0A                    push 0000000A
:004179D4 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:004179D7 51                      push ecx
:004179D8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004179DB 6BC950                  imul ecx, 00000050
:004179DE 81C1787F4900            add ecx, 00497F78
:004179E4 E835A3FEFF              call 00401D1E
:004179E9 50                      push eax
:004179EA E8D12B0500              call 0046A5C0
:004179EF 83C40C                  add esp, 0000000C
:004179F2 50                      push eax
:004179F3 68A3040000              push 000004A3
:004179F8 8B5508                  mov edx, dword ptr [ebp+08]
:004179FB 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004179FC FF1510D64B00            Call dword ptr [004BD610]
:00417A02 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417A03 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417A09 6A0A                    push 0000000A
:00417A0B 8D45F4                  lea eax, dword ptr [ebp-0C]
:00417A0E 50                      push eax
:00417A0F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417A12 6BC950                  imul ecx, 00000050
:00417A15 81C1787F4900            add ecx, 00497F78
:00417A1B E831A3FEFF              call 00401D51
:00417A20 50                      push eax
:00417A21 E89A2B0500              call 0046A5C0
:00417A26 83C40C                  add esp, 0000000C
:00417A29 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F1, "255"
                                  |
:00417A2A 68F1030000              push 000003F1
:00417A2F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417A32 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417A33 FF1510D64B00            Call dword ptr [004BD610]
:00417A39 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417A3A FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417A40 6A0A                    push 0000000A
:00417A42 8D55F4                  lea edx, dword ptr [ebp-0C]
:00417A45 52                      push edx
:00417A46 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417A49 6BC950                  imul ecx, 00000050
:00417A4C 81C1787F4900            add ecx, 00497F78
:00417A52 E82DA3FEFF              call 00401D84
:00417A57 50                      push eax
:00417A58 E8632B0500              call 0046A5C0
:00417A5D 83C40C                  add esp, 0000000C
:00417A60 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F5, "255"
                                  |
:00417A61 68F5030000              push 000003F5
:00417A66 8B4508                  mov eax, dword ptr [ebp+08]
:00417A69 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417A6A FF1510D64B00            Call dword ptr [004BD610]
:00417A70 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417A71 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417A77 6A0A                    push 0000000A
:00417A79 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00417A7C 51                      push ecx
:00417A7D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417A80 6BC950                  imul ecx, 00000050
:00417A83 81C1787F4900            add ecx, 00497F78
:00417A89 E829A3FEFF              call 00401DB7
:00417A8E 50                      push eax
:00417A8F E82C2B0500              call 0046A5C0
:00417A94 83C40C                  add esp, 0000000C
:00417A97 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03EF, "255"
                                  |
:00417A98 68EF030000              push 000003EF
:00417A9D 8B5508                  mov edx, dword ptr [ebp+08]
:00417AA0 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417AA1 FF1510D64B00            Call dword ptr [004BD610]
:00417AA7 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417AA8 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417AAE 6A0A                    push 0000000A
:00417AB0 8D45F4                  lea eax, dword ptr [ebp-0C]
:00417AB3 50                      push eax
:00417AB4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417AB7 6BC950                  imul ecx, 00000050
:00417ABA 81C1787F4900            add ecx, 00497F78
:00417AC0 E825A3FEFF              call 00401DEA
:00417AC5 50                      push eax
:00417AC6 E8F52A0500              call 0046A5C0
:00417ACB 83C40C                  add esp, 0000000C
:00417ACE 50                      push eax
:00417ACF 689F040000              push 0000049F
:00417AD4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417AD7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417AD8 FF1510D64B00            Call dword ptr [004BD610]
:00417ADE 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417ADF FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417AE5 6A0A                    push 0000000A
:00417AE7 8D55F4                  lea edx, dword ptr [ebp-0C]
:00417AEA 52                      push edx
:00417AEB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417AEE 6BC950                  imul ecx, 00000050
:00417AF1 81C1787F4900            add ecx, 00497F78
:00417AF7 E81FA3FEFF              call 00401E1B
:00417AFC 50                      push eax
:00417AFD E8BE2A0500              call 0046A5C0
:00417B02 83C40C                  add esp, 0000000C
:00417B05 50                      push eax
:00417B06 68A0040000              push 000004A0
:00417B0B 8B4508                  mov eax, dword ptr [ebp+08]
:00417B0E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417B0F FF1510D64B00            Call dword ptr [004BD610]
:00417B15 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417B16 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417B1C 6A0A                    push 0000000A
:00417B1E 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00417B21 51                      push ecx
:00417B22 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417B25 6BC950                  imul ecx, 00000050
:00417B28 81C1787F4900            add ecx, 00497F78
:00417B2E E81BA3FEFF              call 00401E4E
:00417B33 50                      push eax
:00417B34 E8872A0500              call 0046A5C0
:00417B39 83C40C                  add esp, 0000000C
:00417B3C 50                      push eax
:00417B3D 68A1040000              push 000004A1
:00417B42 8B5508                  mov edx, dword ptr [ebp+08]
:00417B45 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417B46 FF1510D64B00            Call dword ptr [004BD610]
:00417B4C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417B4D FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417B53 6A0A                    push 0000000A
:00417B55 8D45F4                  lea eax, dword ptr [ebp-0C]
:00417B58 50                      push eax
:00417B59 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417B5C 6BC950                  imul ecx, 00000050
:00417B5F 81C1787F4900            add ecx, 00497F78
:00417B65 E850A3FEFF              call 00401EBA
:00417B6A 25FF000000              and eax, 000000FF
:00417B6F 50                      push eax
:00417B70 E84B2A0500              call 0046A5C0
:00417B75 83C40C                  add esp, 0000000C
:00417B78 50                      push eax
:00417B79 68A2040000              push 000004A2
:00417B7E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417B81 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417B82 FF1510D64B00            Call dword ptr [004BD610]
:00417B88 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417B89 FF1514D64B00            Call dword ptr [004BD614]
:00417B8F 8B5508                  mov edx, dword ptr [ebp+08]
:00417B92 52                      push edx
:00417B93 E809040000              call 00417FA1
:00417B98 83C404                  add esp, 00000004
:00417B9B 8BE5                    mov esp, ebp
:00417B9D 5D                      pop ebp
:00417B9E C3                      ret



* Referenced by a CALL at Addresses:
|:00415DD5   , :00415FDA   , :00416287   , :00416554   , :00416583   
|:00416979   , :00416B82   , :00416BD1   , :00416C17   , :00416D07   
|:0041723E   
|
:00417B9F 55                      push ebp
:00417BA0 8BEC                    mov ebp, esp
:00417BA2 83EC0C                  sub esp, 0000000C
:00417BA5 837D1000                cmp dword ptr [ebp+10], 00000000
:00417BA9 741B                    je 00417BC6

* Possible StringData Ref from Data Obj ->"пܹD"
                                  |
:00417BAB 68DCC84700              push 0047C8DC
:00417BB0 68A9040000              push 000004A9
:00417BB5 8B4508                  mov eax, dword ptr [ebp+08]
:00417BB8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417BB9 FF1510D64B00            Call dword ptr [004BD610]
:00417BBF 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417BC0 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417BA9(C)
|
:00417BC6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417BC9 6BC950                  imul ecx, 00000050
:00417BCC 81C1787F4900            add ecx, 00497F78
:00417BD2 E8E9B5FEFF              call 004031C0
:00417BD7 8845FC                  mov byte ptr [ebp-04], al
:00417BDA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00417BDD 81E1FF000000            and ecx, 000000FF
:00417BE3 81F9FF000000            cmp ecx, 000000FF
:00417BE9 7444                    je 00417C2F
:00417BEB 8A55FC                  mov dl, byte ptr [ebp-04]
:00417BEE 52                      push edx
:00417BEF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417BF2 6BC950                  imul ecx, 00000050
:00417BF5 81C1787F4900            add ecx, 00497F78
:00417BFB E8E0B5FEFF              call 004031E0
:00417C00 8AC8                    mov cl, al
:00417C02 81E1FF000000            and ecx, 000000FF
:00417C08 6BC922                  imul ecx, 00000022
:00417C0B 81C1D0474900            add ecx, 004947D0
:00417C11 E8DADAFEFF              call 004056F0
:00417C16 50                      push eax
:00417C17 68A7040000              push 000004A7
:00417C1C 8B4508                  mov eax, dword ptr [ebp+08]
:00417C1F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417C20 FF1510D64B00            Call dword ptr [004BD610]
:00417C26 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417C27 FF1514D64B00            Call dword ptr [004BD614]
:00417C2D EB1B                    jmp 00417C4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417BE9(C)
|

* Possible StringData Ref from Data Obj ->"S˳"
                                  |
:00417C2F 68E8C84700              push 0047C8E8
:00417C34 68A7040000              push 000004A7
:00417C39 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417C3C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417C3D FF1510D64B00            Call dword ptr [004BD610]
:00417C43 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417C44 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00417C2D(U)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417C4A 6A0A                    push 0000000A
:00417C4C 8D55F4                  lea edx, dword ptr [ebp-0C]
:00417C4F 52                      push edx
:00417C50 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417C53 6BC950                  imul ecx, 00000050
:00417C56 81C1787F4900            add ecx, 00497F78
:00417C5C E8BDA0FEFF              call 00401D1E
:00417C61 50                      push eax
:00417C62 E859290500              call 0046A5C0
:00417C67 83C40C                  add esp, 0000000C
:00417C6A 50                      push eax
:00417C6B 689B040000              push 0000049B
:00417C70 8B4508                  mov eax, dword ptr [ebp+08]
:00417C73 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417C74 FF1510D64B00            Call dword ptr [004BD610]
:00417C7A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417C7B FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417C81 6A0A                    push 0000000A
:00417C83 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00417C86 51                      push ecx
:00417C87 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417C8A 6BC950                  imul ecx, 00000050
:00417C8D 81C1787F4900            add ecx, 00497F78
:00417C93 E8B9A0FEFF              call 00401D51
:00417C98 50                      push eax
:00417C99 E822290500              call 0046A5C0
:00417C9E 83C40C                  add esp, 0000000C
:00417CA1 50                      push eax
:00417CA2 689C040000              push 0000049C
:00417CA7 8B5508                  mov edx, dword ptr [ebp+08]
:00417CAA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417CAB FF1510D64B00            Call dword ptr [004BD610]
:00417CB1 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417CB2 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417CB8 6A0A                    push 0000000A
:00417CBA 8D45F4                  lea eax, dword ptr [ebp-0C]
:00417CBD 50                      push eax
:00417CBE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417CC1 6BC950                  imul ecx, 00000050
:00417CC4 81C1787F4900            add ecx, 00497F78
:00417CCA E8B5A0FEFF              call 00401D84
:00417CCF 50                      push eax
:00417CD0 E8EB280500              call 0046A5C0
:00417CD5 83C40C                  add esp, 0000000C
:00417CD8 50                      push eax
:00417CD9 689D040000              push 0000049D
:00417CDE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417CE1 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417CE2 FF1510D64B00            Call dword ptr [004BD610]
:00417CE8 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417CE9 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417CEF 6A0A                    push 0000000A
:00417CF1 8D55F4                  lea edx, dword ptr [ebp-0C]
:00417CF4 52                      push edx
:00417CF5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417CF8 6BC950                  imul ecx, 00000050
:00417CFB 81C1787F4900            add ecx, 00497F78
:00417D01 E8B1A0FEFF              call 00401DB7
:00417D06 50                      push eax
:00417D07 E8B4280500              call 0046A5C0
:00417D0C 83C40C                  add esp, 0000000C
:00417D0F 50                      push eax
:00417D10 689E040000              push 0000049E
:00417D15 8B4508                  mov eax, dword ptr [ebp+08]
:00417D18 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417D19 FF1510D64B00            Call dword ptr [004BD610]
:00417D1F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417D20 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417D26 6A0A                    push 0000000A
:00417D28 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00417D2B 51                      push ecx
:00417D2C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417D2F 6BC950                  imul ecx, 00000050
:00417D32 81C1787F4900            add ecx, 00497F78
:00417D38 E8ADA0FEFF              call 00401DEA
:00417D3D 50                      push eax
:00417D3E E87D280500              call 0046A5C0
:00417D43 83C40C                  add esp, 0000000C
:00417D46 50                      push eax
:00417D47 6895040000              push 00000495
:00417D4C 8B5508                  mov edx, dword ptr [ebp+08]
:00417D4F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417D50 FF1510D64B00            Call dword ptr [004BD610]
:00417D56 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417D57 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417D5D 6A0A                    push 0000000A
:00417D5F 8D45F4                  lea eax, dword ptr [ebp-0C]
:00417D62 50                      push eax
:00417D63 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417D66 6BC950                  imul ecx, 00000050
:00417D69 81C1787F4900            add ecx, 00497F78
:00417D6F E8A7A0FEFF              call 00401E1B
:00417D74 50                      push eax
:00417D75 E846280500              call 0046A5C0
:00417D7A 83C40C                  add esp, 0000000C
:00417D7D 50                      push eax
:00417D7E 6896040000              push 00000496
:00417D83 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417D86 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417D87 FF1510D64B00            Call dword ptr [004BD610]
:00417D8D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417D8E FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417D94 6A0A                    push 0000000A
:00417D96 8D55F4                  lea edx, dword ptr [ebp-0C]
:00417D99 52                      push edx
:00417D9A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417D9D 6BC950                  imul ecx, 00000050
:00417DA0 81C1787F4900            add ecx, 00497F78
:00417DA6 E8A3A0FEFF              call 00401E4E
:00417DAB 50                      push eax
:00417DAC E80F280500              call 0046A5C0
:00417DB1 83C40C                  add esp, 0000000C
:00417DB4 50                      push eax
:00417DB5 6897040000              push 00000497
:00417DBA 8B4508                  mov eax, dword ptr [ebp+08]
:00417DBD 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417DBE FF1510D64B00            Call dword ptr [004BD610]
:00417DC4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417DC5 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00417DCB 6A0A                    push 0000000A
:00417DCD 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00417DD0 51                      push ecx
:00417DD1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00417DD4 6BC950                  imul ecx, 00000050
:00417DD7 81C1787F4900            add ecx, 00497F78
:00417DDD E8D8A0FEFF              call 00401EBA
:00417DE2 25FF000000              and eax, 000000FF
:00417DE7 50                      push eax
:00417DE8 E8D3270500              call 0046A5C0
:00417DED 83C40C                  add esp, 0000000C
:00417DF0 50                      push eax
:00417DF1 6887040000              push 00000487
:00417DF6 8B5508                  mov edx, dword ptr [ebp+08]
:00417DF9 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417DFA FF1510D64B00            Call dword ptr [004BD610]
:00417E00 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00417E01 FF1514D64B00            Call dword ptr [004BD614]
:00417E07 8B4508                  mov eax, dword ptr [ebp+08]
:00417E0A 50                      push eax
:00417E0B E856020000              call 00418066
:00417E10 83C404                  add esp, 00000004
:00417E13 8BE5                    mov esp, ebp
:00417E15 5D                      pop ebp
:00417E16 C3                      ret



* Referenced by a CALL at Addresses:
|:00412B8A   , :004176A6   
|
:00417E17 55                      push ebp
:00417E18 8BEC                    mov ebp, esp
:00417E1A 6A00                    push 00000000
:00417E1C 6890040000              push 00000490
:00417E21 8B4508                  mov eax, dword ptr [ebp+08]
:00417E24 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417E25 FF1510D64B00            Call dword ptr [004BD610]
:00417E2B 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417E2C FF1500D74B00            Call dword ptr [004BD700]
:00417E32 6A00                    push 00000000
:00417E34 688F040000              push 0000048F
:00417E39 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417E3C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417E3D FF1510D64B00            Call dword ptr [004BD610]
:00417E43 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417E44 FF1500D74B00            Call dword ptr [004BD700]
:00417E4A 6A00                    push 00000000
:00417E4C 688E040000              push 0000048E
:00417E51 8B5508                  mov edx, dword ptr [ebp+08]
:00417E54 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417E55 FF1510D64B00            Call dword ptr [004BD610]
:00417E5B 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417E5C FF1500D74B00            Call dword ptr [004BD700]
:00417E62 6A00                    push 00000000
:00417E64 688D040000              push 0000048D
:00417E69 8B4508                  mov eax, dword ptr [ebp+08]
:00417E6C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417E6D FF1510D64B00            Call dword ptr [004BD610]
:00417E73 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417E74 FF1500D74B00            Call dword ptr [004BD700]
:00417E7A 6A00                    push 00000000
:00417E7C 6888040000              push 00000488
:00417E81 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417E84 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417E85 FF1510D64B00            Call dword ptr [004BD610]
:00417E8B 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417E8C FF1500D74B00            Call dword ptr [004BD700]
:00417E92 6A00                    push 00000000
:00417E94 6889040000              push 00000489
:00417E99 8B5508                  mov edx, dword ptr [ebp+08]
:00417E9C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417E9D FF1510D64B00            Call dword ptr [004BD610]
:00417EA3 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417EA4 FF1500D74B00            Call dword ptr [004BD700]
:00417EAA 6A00                    push 00000000
:00417EAC 68FC030000              push 000003FC
:00417EB1 8B4508                  mov eax, dword ptr [ebp+08]
:00417EB4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417EB5 FF1510D64B00            Call dword ptr [004BD610]
:00417EBB 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417EBC FF1500D74B00            Call dword ptr [004BD700]
:00417EC2 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:03FE, "1000"
                                  |
:00417EC4 68FE030000              push 000003FE
:00417EC9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417ECC 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417ECD FF1510D64B00            Call dword ptr [004BD610]
:00417ED3 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417ED4 FF1500D74B00            Call dword ptr [004BD700]
:00417EDA 5D                      pop ebp
:00417EDB C3                      ret



* Referenced by a CALL at Addresses:
|:004141F8   , :0041791E   
|
:00417EDC 55                      push ebp
:00417EDD 8BEC                    mov ebp, esp
:00417EDF 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:00417EE1 6802040000              push 00000402
:00417EE6 8B4508                  mov eax, dword ptr [ebp+08]
:00417EE9 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417EEA FF1510D64B00            Call dword ptr [004BD610]
:00417EF0 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417EF1 FF1500D74B00            Call dword ptr [004BD700]
:00417EF7 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0403, "
"
                                  |
:00417EF9 6803040000              push 00000403
:00417EFE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417F01 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417F02 FF1510D64B00            Call dword ptr [004BD610]
:00417F08 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417F09 FF1500D74B00            Call dword ptr [004BD700]
:00417F0F 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0404, ""
                                  |
:00417F11 6804040000              push 00000404
:00417F16 8B5508                  mov edx, dword ptr [ebp+08]
:00417F19 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417F1A FF1510D64B00            Call dword ptr [004BD610]
:00417F20 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417F21 FF1500D74B00            Call dword ptr [004BD700]
:00417F27 6A00                    push 00000000
:00417F29 6805040000              push 00000405
:00417F2E 8B4508                  mov eax, dword ptr [ebp+08]
:00417F31 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417F32 FF1510D64B00            Call dword ptr [004BD610]
:00417F38 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417F39 FF1500D74B00            Call dword ptr [004BD700]
:00417F3F 6A00                    push 00000000
:00417F41 6806040000              push 00000406
:00417F46 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417F49 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417F4A FF1510D64B00            Call dword ptr [004BD610]
:00417F50 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417F51 FF1500D74B00            Call dword ptr [004BD700]
:00417F57 6A00                    push 00000000
:00417F59 6807040000              push 00000407
:00417F5E 8B5508                  mov edx, dword ptr [ebp+08]
:00417F61 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417F62 FF1510D64B00            Call dword ptr [004BD610]
:00417F68 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417F69 FF1500D74B00            Call dword ptr [004BD700]
:00417F6F 6A00                    push 00000000
:00417F71 6808040000              push 00000408
:00417F76 8B4508                  mov eax, dword ptr [ebp+08]
:00417F79 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417F7A FF1510D64B00            Call dword ptr [004BD610]
:00417F80 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417F81 FF1500D74B00            Call dword ptr [004BD700]
:00417F87 6A00                    push 00000000
:00417F89 6809040000              push 00000409
:00417F8E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417F91 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417F92 FF1510D64B00            Call dword ptr [004BD610]
:00417F98 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417F99 FF1500D74B00            Call dword ptr [004BD700]
:00417F9F 5D                      pop ebp
:00417FA0 C3                      ret



* Referenced by a CALL at Addresses:
|:00414776   , :00417B93   
|
:00417FA1 55                      push ebp
:00417FA2 8BEC                    mov ebp, esp
:00417FA4 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F0, "255"
                                  |
:00417FA6 68F0030000              push 000003F0
:00417FAB 8B4508                  mov eax, dword ptr [ebp+08]
:00417FAE 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417FAF FF1510D64B00            Call dword ptr [004BD610]
:00417FB5 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417FB6 FF1500D74B00            Call dword ptr [004BD700]
:00417FBC 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F4, "255"
                                  |
:00417FBE 68F4030000              push 000003F4
:00417FC3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00417FC6 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417FC7 FF1510D64B00            Call dword ptr [004BD610]
:00417FCD 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417FCE FF1500D74B00            Call dword ptr [004BD700]
:00417FD4 6A00                    push 00000000
:00417FD6 68F6030000              push 000003F6
:00417FDB 8B5508                  mov edx, dword ptr [ebp+08]
:00417FDE 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417FDF FF1510D64B00            Call dword ptr [004BD610]
:00417FE5 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417FE6 FF1500D74B00            Call dword ptr [004BD700]
:00417FEC 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:00417FEE 68F9030000              push 000003F9
:00417FF3 8B4508                  mov eax, dword ptr [ebp+08]
:00417FF6 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00417FF7 FF1510D64B00            Call dword ptr [004BD610]
:00417FFD 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00417FFE FF1500D74B00            Call dword ptr [004BD700]
:00418004 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:00418006 68FA030000              push 000003FA
:0041800B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041800E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041800F FF1510D64B00            Call dword ptr [004BD610]
:00418015 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00418016 FF1500D74B00            Call dword ptr [004BD700]
:0041801C 6A00                    push 00000000
:0041801E 68FB030000              push 000003FB
:00418023 8B5508                  mov edx, dword ptr [ebp+08]
:00418026 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418027 FF1510D64B00            Call dword ptr [004BD610]
:0041802D 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041802E FF1500D74B00            Call dword ptr [004BD700]
:00418034 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:03FE, "1000"
                                  |
:00418036 68FE030000              push 000003FE
:0041803B 8B4508                  mov eax, dword ptr [ebp+08]
:0041803E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041803F FF1510D64B00            Call dword ptr [004BD610]
:00418045 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00418046 FF1500D74B00            Call dword ptr [004BD700]
:0041804C 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0041804E 6801040000              push 00000401
:00418053 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418056 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418057 FF1510D64B00            Call dword ptr [004BD610]
:0041805D 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041805E FF1500D74B00            Call dword ptr [004BD700]
:00418064 5D                      pop ebp
:00418065 C3                      ret



* Referenced by a CALL at Addresses:
|:0041603A   , :00417E0B   
|
:00418066 55                      push ebp
:00418067 8BEC                    mov ebp, esp
:00418069 6A00                    push 00000000
:0041806B 689A040000              push 0000049A
:00418070 8B4508                  mov eax, dword ptr [ebp+08]
:00418073 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418074 FF1510D64B00            Call dword ptr [004BD610]
:0041807A 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041807B FF1500D74B00            Call dword ptr [004BD700]
:00418081 6A00                    push 00000000
:00418083 6899040000              push 00000499
:00418088 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041808B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041808C FF1510D64B00            Call dword ptr [004BD610]
:00418092 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00418093 FF1500D74B00            Call dword ptr [004BD700]
:00418099 6A00                    push 00000000
:0041809B 6898040000              push 00000498
:004180A0 8B5508                  mov edx, dword ptr [ebp+08]
:004180A3 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004180A4 FF1510D64B00            Call dword ptr [004BD610]
:004180AA 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004180AB FF1500D74B00            Call dword ptr [004BD700]
:004180B1 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@^"
                                  |
:004180B3 68F7030000              push 000003F7
:004180B8 8B4508                  mov eax, dword ptr [ebp+08]
:004180BB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004180BC FF1510D64B00            Call dword ptr [004BD610]
:004180C2 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004180C3 FF1500D74B00            Call dword ptr [004BD700]
:004180C9 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:004180CB 68F8030000              push 000003F8
:004180D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004180D3 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004180D4 FF1510D64B00            Call dword ptr [004BD610]
:004180DA 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004180DB FF1500D74B00            Call dword ptr [004BD700]
:004180E1 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:004180E3 68F9030000              push 000003F9
:004180E8 8B5508                  mov edx, dword ptr [ebp+08]
:004180EB 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004180EC FF1510D64B00            Call dword ptr [004BD610]
:004180F2 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004180F3 FF1500D74B00            Call dword ptr [004BD700]
:004180F9 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:004180FB 68FA030000              push 000003FA
:00418100 8B4508                  mov eax, dword ptr [ebp+08]
:00418103 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418104 FF1510D64B00            Call dword ptr [004BD610]
:0041810A 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041810B FF1500D74B00            Call dword ptr [004BD700]
:00418111 6A00                    push 00000000
:00418113 68FB030000              push 000003FB
:00418118 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041811B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041811C FF1510D64B00            Call dword ptr [004BD610]
:00418122 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00418123 FF1500D74B00            Call dword ptr [004BD700]
:00418129 5D                      pop ebp
:0041812A C3                      ret



* Referenced by a CALL at Addresses:
|:00413461   , :00413818   , :00416A54   , :00418243   , :004182EE   
|:00427BC4   , :0042D99F   , :0042DA1E   , :0042DA58   
|
:0041812B 55                      push ebp
:0041812C 8BEC                    mov ebp, esp
:0041812E 83EC28                  sub esp, 00000028
:00418131 837D1000                cmp dword ptr [ebp+10], 00000000
:00418135 7507                    jne 0041813E

* Possible StringData Ref from Data Obj ->"^ǶǨtC QN"
                                  |
:00418137 C74510F4C84700          mov [ebp+10], 0047C8F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418135(C)
|
:0041813E C745D828000000          mov [ebp-28], 00000028
:00418145 8B4508                  mov eax, dword ptr [ebp+08]
:00418148 8945DC                  mov dword ptr [ebp-24], eax
:0041814B 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00418151 894DE0                  mov dword ptr [ebp-20], ecx
:00418154 8B550C                  mov edx, dword ptr [ebp+0C]
:00418157 8955E4                  mov dword ptr [ebp-1C], edx
:0041815A 8B4510                  mov eax, dword ptr [ebp+10]
:0041815D 8945E8                  mov dword ptr [ebp-18], eax
:00418160 C745EC84200000          mov [ebp-14], 00002084
:00418167 C745F089000000          mov [ebp-10], 00000089
:0041816E C745F400000000          mov [ebp-0C], 00000000
:00418175 C745F800000000          mov [ebp-08], 00000000
:0041817C C745FC11040000          mov [ebp-04], 00000411
:00418183 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00418186 51                      push ecx

* Reference To: USER32.MessageBoxIndirectA, Ord:0198h
                                  |
:00418187 FF15C0D64B00            Call dword ptr [004BD6C0]
:0041818D 83F806                  cmp eax, 00000006
:00418190 7507                    jne 00418199
:00418192 B801000000              mov eax, 00000001
:00418197 EB02                    jmp 0041819B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418190(C)
|
:00418199 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418197(U)
|
:0041819B 8BE5                    mov esp, ebp
:0041819D 5D                      pop ebp
:0041819E C3                      ret



* Referenced by a CALL at Addresses:
|:00412597   , :0041386F   , :004138A2   , :004139CE   , :00416AA1   
|:00418217   , :004183BA   , :0042B984   , :0042BA3B   
|
:0041819F 55                      push ebp
:004181A0 8BEC                    mov ebp, esp
:004181A2 83EC28                  sub esp, 00000028
:004181A5 837D1000                cmp dword ptr [ebp+10], 00000000
:004181A9 7507                    jne 004181B2

* Possible StringData Ref from Data Obj ->"^ǶǨtC QN"
                                  |
:004181AB C745100CC94700          mov [ebp+10], 0047C90C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004181A9(C)
|
:004181B2 C745D828000000          mov [ebp-28], 00000028
:004181B9 8B4508                  mov eax, dword ptr [ebp+08]
:004181BC 8945DC                  mov dword ptr [ebp-24], eax
:004181BF 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:004181C5 894DE0                  mov dword ptr [ebp-20], ecx
:004181C8 8B550C                  mov edx, dword ptr [ebp+0C]
:004181CB 8955E4                  mov dword ptr [ebp-1C], edx
:004181CE 8B4510                  mov eax, dword ptr [ebp+10]
:004181D1 8945E8                  mov dword ptr [ebp-18], eax
:004181D4 C745EC80200000          mov [ebp-14], 00002080
:004181DB C745F089000000          mov [ebp-10], 00000089
:004181E2 C745F400000000          mov [ebp-0C], 00000000
:004181E9 C745F800000000          mov [ebp-08], 00000000
:004181F0 C745FC11040000          mov [ebp-04], 00000411
:004181F7 8D4DD8                  lea ecx, dword ptr [ebp-28]
:004181FA 51                      push ecx

* Reference To: USER32.MessageBoxIndirectA, Ord:0198h
                                  |
:004181FB FF15C0D64B00            Call dword ptr [004BD6C0]
:00418201 8BE5                    mov esp, ebp
:00418203 5D                      pop ebp
:00418204 C3                      ret


:00418205 55                      push ebp
:00418206 8BEC                    mov ebp, esp
:00418208 8B450C                  mov eax, dword ptr [ebp+0C]
:0041820B 50                      push eax
:0041820C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041820F 51                      push ecx
:00418210 8B15B0554B00            mov edx, dword ptr [004B55B0]
:00418216 52                      push edx
:00418217 E883FFFFFF              call 0041819F
:0041821C 83C40C                  add esp, 0000000C
:0041821F 5D                      pop ebp
:00418220 C3                      ret



* Referenced by a CALL at Addresses:
|:0041392C   , :00414E54   , :00416B2E   , :00416BBB   
|
:00418221 55                      push ebp
:00418222 8BEC                    mov ebp, esp
:00418224 8A4510                  mov al, byte ptr [ebp+10]
:00418227 50                      push eax
:00418228 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041822B 51                      push ecx
:0041822C E800010000              call 00418331
:00418231 83C408                  add esp, 00000008
:00418234 85C0                    test eax, eax
:00418236 7438                    je 00418270
:00418238 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"{bѰ˳ơAiHܡH"
                                  |
:0041823A 6824C94700              push 0047C924
:0041823F 8B5508                  mov edx, dword ptr [ebp+08]
:00418242 52                      push edx
:00418243 E8E3FEFFFF              call 0041812B
:00418248 83C40C                  add esp, 0000000C
:0041824B 85C0                    test eax, eax
:0041824D 741D                    je 0041826C
:0041824F 68FF000000              push 000000FF
:00418254 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418257 6BC950                  imul ecx, 00000050
:0041825A 81C1787F4900            add ecx, 00497F78
:00418260 E86B46FFFF              call 0040C8D0
:00418265 B801000000              mov eax, 00000001
:0041826A EB09                    jmp 00418275

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041824D(C)
|
:0041826C 33C0                    xor eax, eax
:0041826E EB05                    jmp 00418275

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418236(C)
|
:00418270 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041826A(U), :0041826E(U)
|
:00418275 5D                      pop ebp
:00418276 C3                      ret



* Referenced by a CALL at Addresses:
|:00416BE7   , :00416D31   
|
:00418277 55                      push ebp
:00418278 8BEC                    mov ebp, esp
:0041827A 83EC5C                  sub esp, 0000005C
:0041827D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418280 6BC922                  imul ecx, 00000022
:00418283 81C1D0474900            add ecx, 004947D0
:00418289 E872D4FEFF              call 00405700
:0041828E 25FF000000              and eax, 000000FF
:00418293 6BC00A                  imul eax, 0000000A
:00418296 8945A4                  mov dword ptr [ebp-5C], eax
:00418299 DB45A4                  fild dword ptr [ebp-5C]
:0041829C DC0D50A04700            fmul qword ptr [0047A050]
:004182A2 E8F9780500              call 0046FBA0
:004182A7 8945EC                  mov dword ptr [ebp-14], eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004182AA 6A0A                    push 0000000A
:004182AC 8D45F0                  lea eax, dword ptr [ebp-10]
:004182AF 50                      push eax
:004182B0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004182B3 51                      push ecx
:004182B4 E807230500              call 0046A5C0
:004182B9 83C40C                  add esp, 0000000C
:004182BC 50                      push eax
:004182BD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004182C0 6BC922                  imul ecx, 00000022
:004182C3 81C1D0474900            add ecx, 004947D0
:004182C9 E822D4FEFF              call 004056F0
:004182CE 50                      push eax

* Possible StringData Ref from Data Obj ->"%s%siHܡH"
                                  |
:004182CF 6840C94700              push 0047C940
:004182D4 8D55AC                  lea edx, dword ptr [ebp-54]
:004182D7 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004182D8 FF1504D74B00            Call dword ptr [004BD704]
:004182DE 83C410                  add esp, 00000010

* Possible StringData Ref from Data Obj ->"RT{"
                                  |
:004182E1 6854C94700              push 0047C954
:004182E6 8D45AC                  lea eax, dword ptr [ebp-54]
:004182E9 50                      push eax
:004182EA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004182ED 51                      push ecx
:004182EE E838FEFFFF              call 0041812B
:004182F3 83C40C                  add esp, 0000000C
:004182F6 85C0                    test eax, eax
:004182F8 7504                    jne 004182FE
:004182FA 33C0                    xor eax, eax
:004182FC EB2F                    jmp 0041832D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004182F8(C)
|
:004182FE B978294B00              mov ecx, 004B2978
:00418303 E8D8E60100              call 004369E0
:00418308 0345EC                  add eax, dword ptr [ebp-14]
:0041830B 8945A8                  mov dword ptr [ebp-58], eax
:0041830E 8B55A8                  mov edx, dword ptr [ebp-58]
:00418311 52                      push edx
:00418312 B978294B00              mov ecx, 004B2978
:00418317 E8A4D3FEFF              call 004056C0
:0041831C 8B4508                  mov eax, dword ptr [ebp+08]
:0041831F 50                      push eax
:00418320 E887EDFFFF              call 004170AC
:00418325 83C404                  add esp, 00000004
:00418328 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004182FC(U)
|
:0041832D 8BE5                    mov esp, ebp
:0041832F 5D                      pop ebp
:00418330 C3                      ret



* Referenced by a CALL at Address:
|:0041822C   
|
:00418331 55                      push ebp
:00418332 8BEC                    mov ebp, esp
:00418334 56                      push esi
:00418335 8B750C                  mov esi, dword ptr [ebp+0C]
:00418338 81E6FF000000            and esi, 000000FF
:0041833E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418341 6BC950                  imul ecx, 00000050
:00418344 81C1787F4900            add ecx, 00497F78
:0041834A E871AEFEFF              call 004031C0
:0041834F 25FF000000              and eax, 000000FF
:00418354 3BF0                    cmp esi, eax
:00418356 7507                    jne 0041835F
:00418358 B801000000              mov eax, 00000001
:0041835D EB02                    jmp 00418361

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418356(C)
|
:0041835F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041835D(U)
|
:00418361 5E                      pop esi
:00418362 5D                      pop ebp
:00418363 C3                      ret



* Referenced by a CALL at Addresses:
|:00413B7A   , :00415632   , :00417262   , :0045B00F   , :00462C0D   
|:00463C83   , :00463D9A   , :00464310   , :00464EC1   , :00465219   
|
:00418364 55                      push ebp
:00418365 8BEC                    mov ebp, esp
:00418367 8B4518                  mov eax, dword ptr [ebp+18]
:0041836A 50                      push eax
:0041836B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041836E 51                      push ecx
:0041836F 68FF000000              push 000000FF
:00418374 6A10                    push 00000010
:00418376 6A10                    push 00000010

* Reference To: COMCTL32.ImageList_Create, Ord:0016h
                                  |
:00418378 FF1510D44B00            Call dword ptr [004BD410]
:0041837E 8B550C                  mov edx, dword ptr [ebp+0C]
:00418381 8902                    mov dword ptr [edx], eax
:00418383 8B4518                  mov eax, dword ptr [ebp+18]
:00418386 50                      push eax
:00418387 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041838A 51                      push ecx
:0041838B 68FF000000              push 000000FF
:00418390 6A20                    push 00000020
:00418392 6A20                    push 00000020

* Reference To: COMCTL32.ImageList_Create, Ord:0016h
                                  |
:00418394 FF1510D44B00            Call dword ptr [004BD410]
:0041839A 8B5510                  mov edx, dword ptr [ebp+10]
:0041839D 8902                    mov dword ptr [edx], eax
:0041839F 8B450C                  mov eax, dword ptr [ebp+0C]
:004183A2 833800                  cmp dword ptr [eax], 00000000
:004183A5 7408                    je 004183AF
:004183A7 8B4D10                  mov ecx, dword ptr [ebp+10]
:004183AA 833900                  cmp dword ptr [ecx], 00000000
:004183AD 7513                    jne 004183C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004183A5(C)
|
:004183AF 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"OΪ̵wЪѾlŶC"
                                  |
:004183B1 6860C94700              push 0047C960
:004183B6 8B5508                  mov edx, dword ptr [ebp+08]
:004183B9 52                      push edx
:004183BA E8E0FDFFFF              call 0041819F
:004183BF 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004183AD(C)
|
:004183C2 5D                      pop ebp
:004183C3 C3                      ret



* Referenced by a CALL at Addresses:
|:00413B8A   , :00415642   , :00417272   
|
:004183C4 55                      push ebp
:004183C5 8BEC                    mov ebp, esp
:004183C7 83EC08                  sub esp, 00000008
:004183CA C745F800000000          mov [ebp-08], 00000000
:004183D1 EB09                    jmp 004183DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418422(U)
|
:004183D3 8B45F8                  mov eax, dword ptr [ebp-08]
:004183D6 83C001                  add eax, 00000001
:004183D9 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004183D1(U)
|
:004183DC 837DF826                cmp dword ptr [ebp-08], 00000026
:004183E0 7D42                    jge 00418424
:004183E2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004183E5 81C1FA000000            add ecx, 000000FA
:004183EB 81E1FFFF0000            and ecx, 0000FFFF
:004183F1 51                      push ecx
:004183F2 8B15A8554B00            mov edx, dword ptr [004B55A8]
:004183F8 52                      push edx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:004183F9 FF15E4D64B00            Call dword ptr [004BD6E4]
:004183FF 8945FC                  mov dword ptr [ebp-04], eax
:00418402 8B45FC                  mov eax, dword ptr [ebp-04]
:00418405 50                      push eax
:00418406 6AFF                    push FFFFFFFF
:00418408 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041840B 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:0041840C FF1514D44B00            Call dword ptr [004BD414]
:00418412 8B55FC                  mov edx, dword ptr [ebp-04]
:00418415 52                      push edx
:00418416 6AFF                    push FFFFFFFF
:00418418 8B450C                  mov eax, dword ptr [ebp+0C]
:0041841B 50                      push eax

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:0041841C FF1514D44B00            Call dword ptr [004BD414]
:00418422 EBAF                    jmp 004183D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004183E0(C)
|
:00418424 8BE5                    mov esp, ebp
:00418426 5D                      pop ebp
:00418427 C3                      ret



* Referenced by a CALL at Address:
|:004184E0   
|
:00418428 55                      push ebp
:00418429 8BEC                    mov ebp, esp
:0041842B 83EC08                  sub esp, 00000008
:0041842E 8B4508                  mov eax, dword ptr [ebp+08]
:00418431 8945F8                  mov dword ptr [ebp-08], eax
:00418434 837DF804                cmp dword ptr [ebp-08], 00000004
:00418438 7737                    ja 00418471
:0041843A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041843D FF248D7F844100          jmp dword ptr [4*ecx+0041847F]
:00418444 C745FC92000000          mov [ebp-04], 00000092
:0041844B EB2B                    jmp 00418478
:0041844D C745FC2C000000          mov [ebp-04], 0000002C
:00418454 EB22                    jmp 00418478
:00418456 C745FC38000000          mov [ebp-04], 00000038
:0041845D EB19                    jmp 00418478
:0041845F C745FC38000000          mov [ebp-04], 00000038
:00418466 EB10                    jmp 00418478
:00418468 C745FC38000000          mov [ebp-04], 00000038
:0041846F EB07                    jmp 00418478

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418438(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00418471 C745FC0A000000          mov [ebp-04], 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041844B(U), :00418454(U), :0041845D(U), :00418466(U), :0041846F(U)
|
:00418478 8B45FC                  mov eax, dword ptr [ebp-04]
:0041847B 8BE5                    mov esp, ebp
:0041847D 5D                      pop ebp
:0041847E C3                      ret



:0041847F 44844100                DWORD 00418444
:00418483 4D844100                DWORD 0041844D
:00418487 56844100                DWORD 00418456
:0041848B 5F844100                DWORD 0041845F
:0041848F 68844100                DWORD 00418468



* Referenced by a CALL at Addresses:
|:00413C04   , :00415709   , :00417317   , :00464032   , :00464081   
|:004652B0   
|
:00418493 55                      push ebp
:00418494 8BEC                    mov ebp, esp
:00418496 83EC44                  sub esp, 00000044
:00418499 6A20                    push 00000020
:0041849B 6A00                    push 00000000
:0041849D 8D45E0                  lea eax, dword ptr [ebp-20]
:004184A0 50                      push eax
:004184A1 E82A760500              call 0046FAD0
:004184A6 83C40C                  add esp, 0000000C
:004184A9 C745E00F000000          mov [ebp-20], 0000000F
:004184B0 C745E400000000          mov [ebp-1C], 00000000
:004184B7 8D4DC0                  lea ecx, dword ptr [ebp-40]
:004184BA 894DEC                  mov dword ptr [ebp-14], ecx
:004184BD C745F020000000          mov [ebp-10], 00000020
:004184C4 C745BC00000000          mov [ebp-44], 00000000
:004184CB EB09                    jmp 004184D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418522(U)
|
:004184CD 8B55BC                  mov edx, dword ptr [ebp-44]
:004184D0 83C201                  add edx, 00000001
:004184D3 8955BC                  mov dword ptr [ebp-44], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004184CB(U)
|
:004184D6 837DBC05                cmp dword ptr [ebp-44], 00000005
:004184DA 7D48                    jge 00418524
:004184DC 8B45BC                  mov eax, dword ptr [ebp-44]
:004184DF 50                      push eax
:004184E0 E843FFFFFF              call 00418428
:004184E5 83C404                  add esp, 00000004
:004184E8 8945E8                  mov dword ptr [ebp-18], eax
:004184EB 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004184EE 894DF4                  mov dword ptr [ebp-0C], ecx
:004184F1 6A20                    push 00000020
:004184F3 8D55C0                  lea edx, dword ptr [ebp-40]
:004184F6 52                      push edx
:004184F7 8B45BC                  mov eax, dword ptr [ebp-44]
:004184FA 83C002                  add eax, 00000002
:004184FD 50                      push eax
:004184FE 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00418504 51                      push ecx

* Reference To: USER32.LoadStringA, Ord:0183h
                                  |
:00418505 FF15BCD64B00            Call dword ptr [004BD6BC]
:0041850B 8D55E0                  lea edx, dword ptr [ebp-20]
:0041850E 52                      push edx
:0041850F 8B45BC                  mov eax, dword ptr [ebp-44]
:00418512 50                      push eax
:00418513 681B100000              push 0000101B
:00418518 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041851B 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041851C FF1504D64B00            Call dword ptr [004BD604]
:00418522 EBA9                    jmp 004184CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004184DA(C)
|
:00418524 8BE5                    mov esp, ebp
:00418526 5D                      pop ebp
:00418527 C3                      ret



* Referenced by a CALL at Addresses:
|:0041299F   , :0041405B   , :00415E29   , :00462793   , :004646AE   
|
:00418528 55                      push ebp
:00418529 8BEC                    mov ebp, esp
:0041852B 83EC0C                  sub esp, 0000000C
:0041852E 8B4514                  mov eax, dword ptr [ebp+14]
:00418531 8945F8                  mov dword ptr [ebp-08], eax
:00418534 8B4D14                  mov ecx, dword ptr [ebp+14]
:00418537 894DFC                  mov dword ptr [ebp-04], ecx
:0041853A 8B55F8                  mov edx, dword ptr [ebp-08]
:0041853D 8B4208                  mov eax, dword ptr [edx+08]
:00418540 8945F4                  mov dword ptr [ebp-0C], eax
:00418543 817DF46AFFFFFF          cmp dword ptr [ebp-0C], FFFFFF6A
:0041854A 740E                    je 0041855A
:0041854C 837DF494                cmp dword ptr [ebp-0C], FFFFFF94
:00418550 7436                    je 00418588
:00418552 837DF497                cmp dword ptr [ebp-0C], FFFFFF97
:00418556 7414                    je 0041856C
:00418558 EB6E                    jmp 004185C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041854A(C)
|
:0041855A 8B4D18                  mov ecx, dword ptr [ebp+18]
:0041855D 51                      push ecx
:0041855E 8B55F8                  mov edx, dword ptr [ebp-08]
:00418561 52                      push edx
:00418562 E867000000              call 004185CE
:00418567 83C408                  add esp, 00000008
:0041856A EB5E                    jmp 004185CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418556(C)
|
:0041856C 6A00                    push 00000000
:0041856E 6AFF                    push FFFFFFFF
:00418570 6817100000              push 00001017
:00418575 8B45FC                  mov eax, dword ptr [ebp-04]
:00418578 8B08                    mov ecx, dword ptr [eax]
:0041857A 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041857B FF1504D64B00            Call dword ptr [004BD604]
:00418581 B801000000              mov eax, 00000001
:00418586 EB42                    jmp 004185CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418550(C)
|
:00418588 684D8B4100              push 00418B4D
:0041858D 8B55FC                  mov edx, dword ptr [ebp-04]
:00418590 8B4210                  mov eax, dword ptr [edx+10]
:00418593 50                      push eax
:00418594 6830100000              push 00001030
:00418599 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041859C 8B11                    mov edx, dword ptr [ecx]
:0041859E 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041859F FF1504D64B00            Call dword ptr [004BD604]
:004185A5 B96CB34800              mov ecx, 0048B36C
:004185AA E8C1110000              call 00419770
:004185AF 8B45FC                  mov eax, dword ptr [ebp-04]
:004185B2 8B08                    mov ecx, dword ptr [eax]
:004185B4 51                      push ecx
:004185B5 8B5508                  mov edx, dword ptr [ebp+08]
:004185B8 52                      push edx
:004185B9 E8C5060000              call 00418C83
:004185BE 83C408                  add esp, 00000008
:004185C1 B801000000              mov eax, 00000001
:004185C6 EB02                    jmp 004185CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418558(U)
|
:004185C8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041856A(U), :00418586(U), :004185C6(U)
|
:004185CA 8BE5                    mov esp, ebp
:004185CC 5D                      pop ebp
:004185CD C3                      ret



* Referenced by a CALL at Address:
|:00418562   
|
:004185CE 55                      push ebp
:004185CF 8BEC                    mov ebp, esp
:004185D1 83EC0C                  sub esp, 0000000C
:004185D4 8B4508                  mov eax, dword ptr [ebp+08]
:004185D7 8B482C                  mov ecx, dword ptr [eax+2C]
:004185DA 894DF8                  mov dword ptr [ebp-08], ecx
:004185DD 837DF800                cmp dword ptr [ebp-08], 00000000
:004185E1 750A                    jne 004185ED
:004185E3 B801000000              mov eax, 00000001
:004185E8 E940010000              jmp 0041872D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004185E1(C)
|
:004185ED 8B55F8                  mov edx, dword ptr [ebp-08]
:004185F0 8B02                    mov eax, dword ptr [edx]
:004185F2 6BC022                  imul eax, 00000022
:004185F5 05D0474900              add eax, 004947D0
:004185FA 8945FC                  mov dword ptr [ebp-04], eax
:004185FD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418600 8B5114                  mov edx, dword ptr [ecx+14]
:00418603 8955F4                  mov dword ptr [ebp-0C], edx
:00418606 837DF404                cmp dword ptr [ebp-0C], 00000004
:0041860A 0F8718010000            ja 00418728
:00418610 8B45F4                  mov eax, dword ptr [ebp-0C]
:00418613 FF248531874100          jmp dword ptr [4*eax+00418731]
:0041861A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041861D 51                      push ecx
:0041861E 6870B34800              push 0048B370
:00418623 8B5508                  mov edx, dword ptr [ebp+08]
:00418626 52                      push edx
:00418627 E819010000              call 00418745
:0041862C 83C40C                  add esp, 0000000C
:0041862F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418632 894120                  mov dword ptr [ecx+20], eax
:00418635 8B5508                  mov edx, dword ptr [ebp+08]
:00418638 817A04AB040000          cmp dword ptr [edx+04], 000004AB
:0041863F 7418                    je 00418659
:00418641 8B4508                  mov eax, dword ptr [ebp+08]
:00418644 8178047B040000          cmp dword ptr [eax+04], 0000047B
:0041864B 740C                    je 00418659
:0041864D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418650 8179047C040000          cmp dword ptr [ecx+04], 0000047C
:00418657 7510                    jne 00418669

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041863F(C), :0041864B(C)
|
:00418659 8B55F8                  mov edx, dword ptr [ebp-08]
:0041865C 33C0                    xor eax, eax
:0041865E 8A4204                  mov al, byte ptr [edx+04]
:00418661 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418664 894128                  mov dword ptr [ecx+28], eax
:00418667 EB13                    jmp 0041867C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418657(C)
|
:00418669 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041866C E8CFABFEFF              call 00403240
:00418671 25FF000000              and eax, 000000FF
:00418676 8B5508                  mov edx, dword ptr [ebp+08]
:00418679 894228                  mov dword ptr [edx+28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418667(U)
|
:0041867C E9A7000000              jmp 00418728
:00418681 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00418684 E8ADAEFEFF              call 00403536
:00418689 25FF000000              and eax, 000000FF
:0041868E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418691 8B148510D64700          mov edx, dword ptr [4*eax+0047D610]
:00418698 895120                  mov dword ptr [ecx+20], edx
:0041869B E988000000              jmp 00418728
:004186A0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004186A3 E858D0FEFF              call 00405700
:004186A8 25FF000000              and eax, 000000FF
:004186AD 6BC00A                  imul eax, 0000000A
:004186B0 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:004186B1 6880C94700              push 0047C980
:004186B6 6870B34800              push 0048B370

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004186BB FF1504D74B00            Call dword ptr [004BD704]
:004186C1 83C40C                  add esp, 0000000C
:004186C4 8B4508                  mov eax, dword ptr [ebp+08]
:004186C7 C7402070B34800          mov [eax+20], 0048B370
:004186CE EB58                    jmp 00418728
:004186D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004186D3 E888ABFEFF              call 00403260
:004186D8 25FF000000              and eax, 000000FF
:004186DD 50                      push eax

* Possible StringData Ref from Data Obj ->"+%u"
                                  |
:004186DE 6888C94700              push 0047C988
:004186E3 6870B34800              push 0048B370

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004186E8 FF1504D74B00            Call dword ptr [004BD704]
:004186EE 83C40C                  add esp, 0000000C
:004186F1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004186F4 C7412070B34800          mov [ecx+20], 0048B370
:004186FB EB2B                    jmp 00418728
:004186FD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00418700 E8CBE40100              call 00436BD0
:00418705 25FF000000              and eax, 000000FF
:0041870A 50                      push eax

* Possible StringData Ref from Data Obj ->"+%u"
                                  |
:0041870B 688CC94700              push 0047C98C
:00418710 6870B34800              push 0048B370

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00418715 FF1504D74B00            Call dword ptr [004BD704]
:0041871B 83C40C                  add esp, 0000000C
:0041871E 8B5508                  mov edx, dword ptr [ebp+08]
:00418721 C7422070B34800          mov [edx+20], 0048B370

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041860A(C), :0041867C(U), :0041869B(U), :004186CE(U), :004186FB(U)
|
:00418728 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004185E8(U)
|
:0041872D 8BE5                    mov esp, ebp
:0041872F 5D                      pop ebp
:00418730 C3                      ret



:00418731 1A864100                DWORD 0041861A
:00418735 81864100                DWORD 00418681
:00418739 A0864100                DWORD 004186A0
:0041873D D0864100                DWORD 004186D0
:00418741 FD864100                DWORD 004186FD



* Referenced by a CALL at Address:
|:00418627   
|
:00418745 55                      push ebp
:00418746 8BEC                    mov ebp, esp
:00418748 83EC10                  sub esp, 00000010
:0041874B 8B4508                  mov eax, dword ptr [ebp+08]
:0041874E 8B482C                  mov ecx, dword ptr [eax+2C]
:00418751 894DF4                  mov dword ptr [ebp-0C], ecx
:00418754 8B55F4                  mov edx, dword ptr [ebp-0C]
:00418757 8B02                    mov eax, dword ptr [edx]
:00418759 8945FC                  mov dword ptr [ebp-04], eax
:0041875C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041875F 6BC922                  imul ecx, 00000022
:00418762 81C1D0474900            add ecx, 004947D0
:00418768 894DF8                  mov dword ptr [ebp-08], ecx
:0041876B 8B5508                  mov edx, dword ptr [ebp+08]
:0041876E 817A0448040000          cmp dword ptr [edx+04], 00000448
:00418775 752B                    jne 004187A2
:00418777 837D1000                cmp dword ptr [ebp+10], 00000000
:0041877B 7425                    je 004187A2
:0041877D 8B4508                  mov eax, dword ptr [ebp+08]
:00418780 8B08                    mov ecx, dword ptr [eax]
:00418782 51                      push ecx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00418783 FF15C4D64B00            Call dword ptr [004BD6C4]
:00418789 8945F0                  mov dword ptr [ebp-10], eax
:0041878C 8B55FC                  mov edx, dword ptr [ebp-04]
:0041878F 52                      push edx
:00418790 8B45F8                  mov eax, dword ptr [ebp-08]
:00418793 50                      push eax
:00418794 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00418797 51                      push ecx
:00418798 E8D7010000              call 00418974
:0041879D 83C40C                  add esp, 0000000C
:004187A0 EB68                    jmp 0041880A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00418775(C), :0041877B(C)
|
:004187A2 837D1000                cmp dword ptr [ebp+10], 00000000
:004187A6 7444                    je 004187EC
:004187A8 8B55FC                  mov edx, dword ptr [ebp-04]
:004187AB 52                      push edx
:004187AC E85D000000              call 0041880E
:004187B1 83C404                  add esp, 00000004
:004187B4 85C0                    test eax, eax
:004187B6 7417                    je 004187CF
:004187B8 8B450C                  mov eax, dword ptr [ebp+0C]
:004187BB 50                      push eax
:004187BC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004187BF E82CCFFEFF              call 004056F0
:004187C4 50                      push eax
:004187C5 E8EC020000              call 00418AB6
:004187CA 83C408                  add esp, 00000008
:004187CD EB1B                    jmp 004187EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004187B6(C)
|
:004187CF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004187D2 E819CFFEFF              call 004056F0
:004187D7 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004187D8 6890C94700              push 0047C990
:004187DD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004187E0 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004187E1 FF1504D74B00            Call dword ptr [004BD704]
:004187E7 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004187CD(U)
|
:004187EA EB1B                    jmp 00418807

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004187A6(C)
|
:004187EC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004187EF E8FCCEFEFF              call 004056F0
:004187F4 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004187F5 6894C94700              push 0047C994
:004187FA 8B550C                  mov edx, dword ptr [ebp+0C]
:004187FD 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004187FE FF1504D74B00            Call dword ptr [004BD704]
:00418804 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004187EA(U)
|
:00418807 8B450C                  mov eax, dword ptr [ebp+0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004187A0(U)
|
:0041880A 8BE5                    mov esp, ebp
:0041880C 5D                      pop ebp
:0041880D C3                      ret



* Referenced by a CALL at Addresses:
|:004187AC   , :004189BA   
|
:0041880E 55                      push ebp
:0041880F 8BEC                    mov ebp, esp
:00418811 51                      push ecx
:00418812 8B4508                  mov eax, dword ptr [ebp+08]
:00418815 8945FC                  mov dword ptr [ebp-04], eax
:00418818 837DFC78                cmp dword ptr [ebp-04], 00000078
:0041881C 770E                    ja 0041882C
:0041881E 837DFC76                cmp dword ptr [ebp-04], 00000076
:00418822 732F                    jnb 00418853
:00418824 837DFC66                cmp dword ptr [ebp-04], 00000066
:00418828 7429                    je 00418853
:0041882A EB2E                    jmp 0041885A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041881C(C)
|
:0041882C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041882F 81E988000000            sub ecx, 00000088
:00418835 894DFC                  mov dword ptr [ebp-04], ecx
:00418838 817DFCE3000000          cmp dword ptr [ebp-04], 000000E3
:0041883F 7719                    ja 0041885A
:00418841 8B45FC                  mov eax, dword ptr [ebp-04]
:00418844 33D2                    xor edx, edx
:00418846 8A9090884100            mov dl, byte ptr [eax+00418890]
:0041884C FF249560884100          jmp dword ptr [4*edx+00418860]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00418822(C), :00418828(C)
|
:00418853 B801000000              mov eax, 00000001
:00418858 EB02                    jmp 0041885C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041882A(U), :0041883F(C)
|
:0041885A 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418858(U)
|
:0041885C 8BE5                    mov esp, ebp
:0041885E 5D                      pop ebp
:0041885F C3                      ret



:00418860 53884100                DWORD 00418853
:00418864 53884100                DWORD 00418853
:00418868 53884100                DWORD 00418853
:0041886C 53884100                DWORD 00418853
:00418870 53884100                DWORD 00418853
:00418874 53884100                DWORD 00418853
:00418878 53884100                DWORD 00418853
:0041887C 53884100                DWORD 00418853
:00418880 53884100                DWORD 00418853
:00418884 53884100                DWORD 00418853
:00418888 53884100                DWORD 00418853
:0041888C 5A884100                DWORD 0041885A


:00418890 0000                    add byte ptr [eax], al
:00418892 0B0B                    or ecx, dword ptr [ebx]
:00418894 0B0B                    or ecx, dword ptr [ebx]
:00418896 0B0B                    or ecx, dword ptr [ebx]
:00418898 0B0B                    or ecx, dword ptr [ebx]
:0041889A 0B0B                    or ecx, dword ptr [ebx]
:0041889C 0101                    add dword ptr [ecx], eax
:0041889E 0B0B                    or ecx, dword ptr [ebx]
:004188A0 0B0B                    or ecx, dword ptr [ebx]
:004188A2 0B02                    or eax, dword ptr [edx]
:004188A4 0B0B                    or ecx, dword ptr [ebx]
:004188A6 0B0B                    or ecx, dword ptr [ebx]
:004188A8 0B0B                    or ecx, dword ptr [ebx]
:004188AA 0B03                    or eax, dword ptr [ebx]
:004188AC 0303                    add eax, dword ptr [ebx]
:004188AE 0303                    add eax, dword ptr [ebx]
:004188B0 030B                    add ecx, dword ptr [ebx]
:004188B2 0B0B                    or ecx, dword ptr [ebx]
:004188B4 0B0B                    or ecx, dword ptr [ebx]
:004188B6 0B0B                    or ecx, dword ptr [ebx]
:004188B8 0B0B                    or ecx, dword ptr [ebx]
:004188BA 0B0B                    or ecx, dword ptr [ebx]
:004188BC 040B                    add al, 0B
:004188BE 0B0B                    or ecx, dword ptr [ebx]
:004188C0 0B0B                    or ecx, dword ptr [ebx]
:004188C2 0B0B                    or ecx, dword ptr [ebx]
:004188C4 0B0B                    or ecx, dword ptr [ebx]
:004188C6 0B0B                    or ecx, dword ptr [ebx]
:004188C8 0B0B                    or ecx, dword ptr [ebx]
:004188CA 0B0B                    or ecx, dword ptr [ebx]
:004188CC 0B0B                    or ecx, dword ptr [ebx]
:004188CE 0B0B                    or ecx, dword ptr [ebx]
:004188D0 0B0B                    or ecx, dword ptr [ebx]
:004188D2 0B0B                    or ecx, dword ptr [ebx]
:004188D4 0B0B                    or ecx, dword ptr [ebx]
:004188D6 0B0B                    or ecx, dword ptr [ebx]
:004188D8 0B0B                    or ecx, dword ptr [ebx]
:004188DA 0B0B                    or ecx, dword ptr [ebx]
:004188DC 0B0B                    or ecx, dword ptr [ebx]
:004188DE 0B0B                    or ecx, dword ptr [ebx]
:004188E0 050B0B0B0B              add eax, 0B0B0B0B
:004188E5 0B0B                    or ecx, dword ptr [ebx]
:004188E7 0B0B                    or ecx, dword ptr [ebx]
:004188E9 06                      push es
:004188EA 06                      push es
:004188EB 0B0B                    or ecx, dword ptr [ebx]
:004188ED 0B0B                    or ecx, dword ptr [ebx]
:004188EF 0B0B                    or ecx, dword ptr [ebx]
:004188F1 0B0B                    or ecx, dword ptr [ebx]
:004188F3 0B0B                    or ecx, dword ptr [ebx]
:004188F5 0B0B                    or ecx, dword ptr [ebx]
:004188F7 0B0B                    or ecx, dword ptr [ebx]
:004188F9 0B0B                    or ecx, dword ptr [ebx]
:004188FB 0B0B                    or ecx, dword ptr [ebx]
:004188FD 0B0B                    or ecx, dword ptr [ebx]
:004188FF 0B0B                    or ecx, dword ptr [ebx]
:00418901 0B0B                    or ecx, dword ptr [ebx]
:00418903 0B0B                    or ecx, dword ptr [ebx]
:00418905 0B0B                    or ecx, dword ptr [ebx]
:00418907 0B0B                    or ecx, dword ptr [ebx]
:00418909 0B0B                    or ecx, dword ptr [ebx]
:0041890B 0B0B                    or ecx, dword ptr [ebx]
:0041890D 0B0B                    or ecx, dword ptr [ebx]
:0041890F 0B0B                    or ecx, dword ptr [ebx]
:00418911 0B0B                    or ecx, dword ptr [ebx]
:00418913 0B0B                    or ecx, dword ptr [ebx]
:00418915 0B0B                    or ecx, dword ptr [ebx]
:00418917 0B0B                    or ecx, dword ptr [ebx]
:00418919 0B0B                    or ecx, dword ptr [ebx]
:0041891B 07                      pop es
:0041891C 07                      pop es
:0041891D 0B0B                    or ecx, dword ptr [ebx]
:0041891F 0B0B                    or ecx, dword ptr [ebx]
:00418921 0B0B                    or ecx, dword ptr [ebx]
:00418923 0B0B                    or ecx, dword ptr [ebx]
:00418925 0B0B                    or ecx, dword ptr [ebx]
:00418927 0B0B                    or ecx, dword ptr [ebx]
:00418929 0B0B                    or ecx, dword ptr [ebx]
:0041892B 0B0B                    or ecx, dword ptr [ebx]
:0041892D 0B0B                    or ecx, dword ptr [ebx]
:0041892F 0808                    or byte ptr [eax], cl
:00418931 0808                    or byte ptr [eax], cl
:00418933 0808                    or byte ptr [eax], cl
:00418935 0808                    or byte ptr [eax], cl
:00418937 0808                    or byte ptr [eax], cl
:00418939 0B0B                    or ecx, dword ptr [ebx]
:0041893B 0B0B                    or ecx, dword ptr [ebx]
:0041893D 0B0B                    or ecx, dword ptr [ebx]
:0041893F 0B0B                    or ecx, dword ptr [ebx]
:00418941 0B0B                    or ecx, dword ptr [ebx]
:00418943 0B0B                    or ecx, dword ptr [ebx]
:00418945 0909                    or dword ptr [ecx], ecx
:00418947 0909                    or dword ptr [ecx], ecx
:00418949 0B0B                    or ecx, dword ptr [ebx]
:0041894B 0B0B                    or ecx, dword ptr [ebx]
:0041894D 0B0B                    or ecx, dword ptr [ebx]
:0041894F 0B0B                    or ecx, dword ptr [ebx]
:00418951 0B0B                    or ecx, dword ptr [ebx]
:00418953 0B0B                    or ecx, dword ptr [ebx]
:00418955 0B0B                    or ecx, dword ptr [ebx]
:00418957 0B0B                    or ecx, dword ptr [ebx]
:00418959 0B0B                    or ecx, dword ptr [ebx]
:0041895B 0B0B                    or ecx, dword ptr [ebx]
:0041895D 0B0B                    or ecx, dword ptr [ebx]
:0041895F 0B0B                    or ecx, dword ptr [ebx]
:00418961 0B0B                    or ecx, dword ptr [ebx]
:00418963 0B0B                    or ecx, dword ptr [ebx]
:00418965 0B0B                    or ecx, dword ptr [ebx]
:00418967 0B0B                    or ecx, dword ptr [ebx]
:00418969 0B0B                    or ecx, dword ptr [ebx]
:0041896B 0B0B                    or ecx, dword ptr [ebx]
:0041896D 0B0B                    or ecx, dword ptr [ebx]
:0041896F 0B0B                    or ecx, dword ptr [ebx]
:00418971 0B0B                    or ecx, dword ptr [ebx]
:00418973 0A                      BYTE 0ah


* Referenced by a CALL at Address:
|:00418798   
|
:00418974 55                      push ebp
:00418975 8BEC                    mov ebp, esp
:00418977 83EC20                  sub esp, 00000020
:0041897A 6A20                    push 00000020
:0041897C 6A00                    push 00000000
:0041897E 8D45E0                  lea eax, dword ptr [ebp-20]
:00418981 50                      push eax
:00418982 E849710500              call 0046FAD0
:00418987 83C40C                  add esp, 0000000C
:0041898A 6A20                    push 00000020
:0041898C 6A00                    push 00000000
:0041898E 6840AE4800              push 0048AE40
:00418993 E838710500              call 0046FAD0
:00418998 83C40C                  add esp, 0000000C
:0041899B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041899E E84DCDFEFF              call 004056F0
:004189A3 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004189A4 6898C94700              push 0047C998
:004189A9 8D4DE0                  lea ecx, dword ptr [ebp-20]
:004189AC 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004189AD FF1504D74B00            Call dword ptr [004BD704]
:004189B3 83C40C                  add esp, 0000000C
:004189B6 8B5510                  mov edx, dword ptr [ebp+10]
:004189B9 52                      push edx
:004189BA E84FFEFFFF              call 0041880E
:004189BF 83C404                  add esp, 00000004
:004189C2 85C0                    test eax, eax
:004189C4 7417                    je 004189DD
:004189C6 8B450C                  mov eax, dword ptr [ebp+0C]
:004189C9 50                      push eax
:004189CA 6840AE4800              push 0048AE40
:004189CF 8D4DE0                  lea ecx, dword ptr [ebp-20]
:004189D2 51                      push ecx
:004189D3 E836000000              call 00418A0E
:004189D8 83C40C                  add esp, 0000000C
:004189DB EB28                    jmp 00418A05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004189C4(C)
|
:004189DD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004189E0 E81BCDFEFF              call 00405700
:004189E5 25FF000000              and eax, 000000FF
:004189EA 6BC00A                  imul eax, 0000000A
:004189ED 50                      push eax
:004189EE 8D55E0                  lea edx, dword ptr [ebp-20]
:004189F1 52                      push edx

* Possible StringData Ref from Data Obj ->"%s
%u"
                                  |
:004189F2 689CC94700              push 0047C99C
:004189F7 6840AE4800              push 0048AE40

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004189FC FF1504D74B00            Call dword ptr [004BD704]
:00418A02 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004189DB(U)
|
:00418A05 B840AE4800              mov eax, 0048AE40
:00418A0A 8BE5                    mov esp, ebp
:00418A0C 5D                      pop ebp
:00418A0D C3                      ret



* Referenced by a CALL at Address:
|:004189D3   
|
:00418A0E 55                      push ebp
:00418A0F 8BEC                    mov ebp, esp
:00418A11 83EC1C                  sub esp, 0000001C

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00418A14 6A0A                    push 0000000A
:00418A16 6A00                    push 00000000
:00418A18 8D45F0                  lea eax, dword ptr [ebp-10]
:00418A1B 50                      push eax
:00418A1C E8AF700500              call 0046FAD0
:00418A21 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00418A24 6A0A                    push 0000000A
:00418A26 6A00                    push 00000000
:00418A28 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00418A2B 51                      push ecx
:00418A2C E89F700500              call 0046FAD0
:00418A31 83C40C                  add esp, 0000000C
:00418A34 C745FC00000000          mov [ebp-04], 00000000
:00418A3B EB09                    jmp 00418A46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418A5B(U)
|
:00418A3D 8B55FC                  mov edx, dword ptr [ebp-04]
:00418A40 83C201                  add edx, 00000001
:00418A43 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418A3B(U)
|
:00418A46 837DFC08                cmp dword ptr [ebp-04], 00000008
:00418A4A 7D11                    jge 00418A5D
:00418A4C 8B4508                  mov eax, dword ptr [ebp+08]
:00418A4F 0345FC                  add eax, dword ptr [ebp-04]
:00418A52 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00418A55 8A10                    mov dl, byte ptr [eax]
:00418A57 88540DF0                mov byte ptr [ebp+ecx-10], dl
:00418A5B EBE0                    jmp 00418A3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418A4A(C)
|
:00418A5D C745FC00000000          mov [ebp-04], 00000000
:00418A64 EB09                    jmp 00418A6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418A85(U)
|
:00418A66 8B45FC                  mov eax, dword ptr [ebp-04]
:00418A69 83C001                  add eax, 00000001
:00418A6C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418A64(U)
|
:00418A6F 837DFC08                cmp dword ptr [ebp-04], 00000008
:00418A73 7D12                    jge 00418A87
:00418A75 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418A78 034DFC                  add ecx, dword ptr [ebp-04]
:00418A7B 8B55FC                  mov edx, dword ptr [ebp-04]
:00418A7E 8A4108                  mov al, byte ptr [ecx+08]
:00418A81 884415E4                mov byte ptr [ebp+edx-1C], al
:00418A85 EBDF                    jmp 00418A66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418A73(C)
|
:00418A87 8B4D10                  mov ecx, dword ptr [ebp+10]
:00418A8A E871CCFEFF              call 00405700
:00418A8F 25FF000000              and eax, 000000FF
:00418A94 6BC00A                  imul eax, 0000000A
:00418A97 50                      push eax
:00418A98 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00418A9B 51                      push ecx
:00418A9C 8D55F0                  lea edx, dword ptr [ebp-10]
:00418A9F 52                      push edx

* Possible StringData Ref from Data Obj ->"%s
%s
%u"
                                  |
:00418AA0 68A4C94700              push 0047C9A4
:00418AA5 8B450C                  mov eax, dword ptr [ebp+0C]
:00418AA8 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00418AA9 FF1504D74B00            Call dword ptr [004BD704]
:00418AAF 83C414                  add esp, 00000014
:00418AB2 8BE5                    mov esp, ebp
:00418AB4 5D                      pop ebp
:00418AB5 C3                      ret



* Referenced by a CALL at Address:
|:004187C5   
|
:00418AB6 55                      push ebp
:00418AB7 8BEC                    mov ebp, esp
:00418AB9 83EC1C                  sub esp, 0000001C

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00418ABC 6A0A                    push 0000000A
:00418ABE 6A00                    push 00000000
:00418AC0 8D45F0                  lea eax, dword ptr [ebp-10]
:00418AC3 50                      push eax
:00418AC4 E807700500              call 0046FAD0
:00418AC9 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00418ACC 6A0A                    push 0000000A
:00418ACE 6A00                    push 00000000
:00418AD0 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00418AD3 51                      push ecx
:00418AD4 E8F76F0500              call 0046FAD0
:00418AD9 83C40C                  add esp, 0000000C
:00418ADC C745FC00000000          mov [ebp-04], 00000000
:00418AE3 EB09                    jmp 00418AEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418B03(U)
|
:00418AE5 8B55FC                  mov edx, dword ptr [ebp-04]
:00418AE8 83C201                  add edx, 00000001
:00418AEB 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418AE3(U)
|
:00418AEE 837DFC08                cmp dword ptr [ebp-04], 00000008
:00418AF2 7D11                    jge 00418B05
:00418AF4 8B4508                  mov eax, dword ptr [ebp+08]
:00418AF7 0345FC                  add eax, dword ptr [ebp-04]
:00418AFA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00418AFD 8A10                    mov dl, byte ptr [eax]
:00418AFF 88540DF0                mov byte ptr [ebp+ecx-10], dl
:00418B03 EBE0                    jmp 00418AE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418AF2(C)
|
:00418B05 C745FC00000000          mov [ebp-04], 00000000
:00418B0C EB09                    jmp 00418B17

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418B2D(U)
|
:00418B0E 8B45FC                  mov eax, dword ptr [ebp-04]
:00418B11 83C001                  add eax, 00000001
:00418B14 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418B0C(U)
|
:00418B17 837DFC08                cmp dword ptr [ebp-04], 00000008
:00418B1B 7D12                    jge 00418B2F
:00418B1D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418B20 034DFC                  add ecx, dword ptr [ebp-04]
:00418B23 8B55FC                  mov edx, dword ptr [ebp-04]
:00418B26 8A4108                  mov al, byte ptr [ecx+08]
:00418B29 884415E4                mov byte ptr [ebp+edx-1C], al
:00418B2D EBDF                    jmp 00418B0E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418B1B(C)
|
:00418B2F 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00418B32 51                      push ecx
:00418B33 8D55F0                  lea edx, dword ptr [ebp-10]
:00418B36 52                      push edx

* Possible StringData Ref from Data Obj ->"%s
%s"
                                  |
:00418B37 68B0C94700              push 0047C9B0
:00418B3C 8B450C                  mov eax, dword ptr [ebp+0C]
:00418B3F 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00418B40 FF1504D74B00            Call dword ptr [004BD704]
:00418B46 83C410                  add esp, 00000010
:00418B49 8BE5                    mov esp, ebp
:00418B4B 5D                      pop ebp
:00418B4C C3                      ret


:00418B4D 55                      push ebp
:00418B4E 8BEC                    mov ebp, esp
:00418B50 83EC18                  sub esp, 00000018
:00418B53 53                      push ebx
:00418B54 8B4508                  mov eax, dword ptr [ebp+08]
:00418B57 8945EC                  mov dword ptr [ebp-14], eax
:00418B5A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418B5D 894DF0                  mov dword ptr [ebp-10], ecx
:00418B60 8B55EC                  mov edx, dword ptr [ebp-14]
:00418B63 8B02                    mov eax, dword ptr [edx]
:00418B65 6BC022                  imul eax, 00000022
:00418B68 05D0474900              add eax, 004947D0
:00418B6D 8945F4                  mov dword ptr [ebp-0C], eax
:00418B70 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00418B73 8B11                    mov edx, dword ptr [ecx]
:00418B75 6BD222                  imul edx, 00000022
:00418B78 81C2D0474900            add edx, 004947D0
:00418B7E 8955FC                  mov dword ptr [ebp-04], edx
:00418B81 837DF400                cmp dword ptr [ebp-0C], 00000000
:00418B85 0F84CD000000            je 00418C58
:00418B8B 837DFC00                cmp dword ptr [ebp-04], 00000000
:00418B8F 0F84C3000000            je 00418C58
:00418B95 8B4510                  mov eax, dword ptr [ebp+10]
:00418B98 8945E8                  mov dword ptr [ebp-18], eax
:00418B9B 837DE804                cmp dword ptr [ebp-18], 00000004
:00418B9F 0F87AC000000            ja 00418C51
:00418BA5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00418BA8 FF248D6F8C4100          jmp dword ptr [4*ecx+00418C6F]
:00418BAF 8B55EC                  mov edx, dword ptr [ebp-14]
:00418BB2 8B45F0                  mov eax, dword ptr [ebp-10]
:00418BB5 8B0A                    mov ecx, dword ptr [edx]
:00418BB7 2B08                    sub ecx, dword ptr [eax]
:00418BB9 894DF8                  mov dword ptr [ebp-08], ecx
:00418BBC E997000000              jmp 00418C58
:00418BC1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00418BC4 E89772FFFF              call 0040FE60
:00418BC9 8AD8                    mov bl, al
:00418BCB 81E3FF000000            and ebx, 000000FF
:00418BD1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00418BD4 E88772FFFF              call 0040FE60
:00418BD9 25FF000000              and eax, 000000FF
:00418BDE 2BD8                    sub ebx, eax
:00418BE0 895DF8                  mov dword ptr [ebp-08], ebx
:00418BE3 EB73                    jmp 00418C58
:00418BE5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00418BE8 E813CBFEFF              call 00405700
:00418BED 8AD8                    mov bl, al
:00418BEF 81E3FF000000            and ebx, 000000FF
:00418BF5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00418BF8 E803CBFEFF              call 00405700
:00418BFD 25FF000000              and eax, 000000FF
:00418C02 2BD8                    sub ebx, eax
:00418C04 895DF8                  mov dword ptr [ebp-08], ebx
:00418C07 EB4F                    jmp 00418C58
:00418C09 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00418C0C E84FA6FEFF              call 00403260
:00418C11 8AD8                    mov bl, al
:00418C13 81E3FF000000            and ebx, 000000FF
:00418C19 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00418C1C E83FA6FEFF              call 00403260
:00418C21 25FF000000              and eax, 000000FF
:00418C26 2BD8                    sub ebx, eax
:00418C28 895DF8                  mov dword ptr [ebp-08], ebx
:00418C2B EB2B                    jmp 00418C58
:00418C2D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00418C30 E89BDF0100              call 00436BD0
:00418C35 8AD8                    mov bl, al
:00418C37 81E3FF000000            and ebx, 000000FF
:00418C3D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00418C40 E88BDF0100              call 00436BD0
:00418C45 25FF000000              and eax, 000000FF
:00418C4A 2BD8                    sub ebx, eax
:00418C4C 895DF8                  mov dword ptr [ebp-08], ebx
:00418C4F EB07                    jmp 00418C58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418B9F(C)
|
:00418C51 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00418B85(C), :00418B8F(C), :00418BBC(U), :00418BE3(U), :00418C07(U)
|:00418C2B(U), :00418C4F(U)
|
:00418C58 B96CB34800              mov ecx, 0048B36C
:00418C5D E82E0B0000              call 00419790
:00418C62 8B55F8                  mov edx, dword ptr [ebp-08]
:00418C65 0FAFC2                  imul eax, edx
:00418C68 5B                      pop ebx
:00418C69 8BE5                    mov esp, ebp
:00418C6B 5D                      pop ebp
:00418C6C C20C00                  ret 000C



:00418C6F AF8B4100                DWORD 00418BAF
:00418C73 C18B4100                DWORD 00418BC1
:00418C77 E58B4100                DWORD 00418BE5
:00418C7B 098C4100                DWORD 00418C09
:00418C7F 2D8C4100                DWORD 00418C2D



* Referenced by a CALL at Address:
|:004185B9   
|
:00418C83 55                      push ebp
:00418C84 8BEC                    mov ebp, esp
:00418C86 83EC08                  sub esp, 00000008
:00418C89 8B450C                  mov eax, dword ptr [ebp+0C]
:00418C8C 50                      push eax

* Reference To: USER32.GetDlgCtrlID, Ord:00F2h
                                  |
:00418C8D FF15ACD64B00            Call dword ptr [004BD6AC]
:00418C93 8945FC                  mov dword ptr [ebp-04], eax
:00418C96 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00418C99 894DF8                  mov dword ptr [ebp-08], ecx
:00418C9C 8B55F8                  mov edx, dword ptr [ebp-08]
:00418C9F 81EA1A040000            sub edx, 0000041A
:00418CA5 8955F8                  mov dword ptr [ebp-08], edx
:00418CA8 817DF891000000          cmp dword ptr [ebp-08], 00000091
:00418CAF 0F8714010000            ja 00418DC9
:00418CB5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00418CB8 33C0                    xor eax, eax
:00418CBA 8A81ED8D4100            mov al, byte ptr [ecx+00418DED]
:00418CC0 FF2485CD8D4100          jmp dword ptr [4*eax+00418DCD]
:00418CC7 8B550C                  mov edx, dword ptr [ebp+0C]
:00418CCA 52                      push edx
:00418CCB 8B4508                  mov eax, dword ptr [ebp+08]
:00418CCE 50                      push eax
:00418CCF E8AB010000              call 00418E7F
:00418CD4 83C408                  add esp, 00000008
:00418CD7 E9ED000000              jmp 00418DC9
:00418CDC 683D040000              push 0000043D
:00418CE1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418CE4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418CE5 FF1510D64B00            Call dword ptr [004BD610]
:00418CEB 50                      push eax
:00418CEC E864A6FFFF              call 00413355
:00418CF1 83C404                  add esp, 00000004
:00418CF4 50                      push eax
:00418CF5 8B550C                  mov edx, dword ptr [ebp+0C]
:00418CF8 52                      push edx
:00418CF9 8B4508                  mov eax, dword ptr [ebp+08]
:00418CFC 50                      push eax
:00418CFD E82E020000              call 00418F30
:00418D02 83C40C                  add esp, 0000000C
:00418D05 E9BF000000              jmp 00418DC9

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:00418D0A 68EA030000              push 000003EA
:00418D0F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418D12 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418D13 FF1510D64B00            Call dword ptr [004BD610]
:00418D19 50                      push eax
:00418D1A E836A6FFFF              call 00413355
:00418D1F 83C404                  add esp, 00000004
:00418D22 50                      push eax
:00418D23 8B550C                  mov edx, dword ptr [ebp+0C]
:00418D26 52                      push edx
:00418D27 8B4508                  mov eax, dword ptr [ebp+08]
:00418D2A 50                      push eax
:00418D2B E800020000              call 00418F30
:00418D30 83C40C                  add esp, 0000000C
:00418D33 E991000000              jmp 00418DC9
:00418D38 68FC030000              push 000003FC
:00418D3D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418D40 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418D41 FF1510D64B00            Call dword ptr [004BD610]
:00418D47 50                      push eax
:00418D48 E808A6FFFF              call 00413355
:00418D4D 83C404                  add esp, 00000004
:00418D50 50                      push eax
:00418D51 8B550C                  mov edx, dword ptr [ebp+0C]
:00418D54 52                      push edx
:00418D55 8B4508                  mov eax, dword ptr [ebp+08]
:00418D58 50                      push eax
:00418D59 E8D2010000              call 00418F30
:00418D5E 83C40C                  add esp, 0000000C
:00418D61 EB66                    jmp 00418DC9
:00418D63 684A040000              push 0000044A
:00418D68 8B4D08                  mov ecx, dword ptr [ebp+08]
:00418D6B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418D6C FF1510D64B00            Call dword ptr [004BD610]
:00418D72 50                      push eax
:00418D73 E8DDA5FFFF              call 00413355
:00418D78 83C404                  add esp, 00000004
:00418D7B 50                      push eax
:00418D7C 8B550C                  mov edx, dword ptr [ebp+0C]
:00418D7F 52                      push edx
:00418D80 8B4508                  mov eax, dword ptr [ebp+08]
:00418D83 50                      push eax
:00418D84 E8A7010000              call 00418F30
:00418D89 83C40C                  add esp, 0000000C
:00418D8C EB3B                    jmp 00418DC9
:00418D8E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418D91 51                      push ecx
:00418D92 8B5508                  mov edx, dword ptr [ebp+08]
:00418D95 52                      push edx
:00418D96 E8E4000000              call 00418E7F
:00418D9B 83C408                  add esp, 00000008
:00418D9E EB29                    jmp 00418DC9
:00418DA0 68AE040000              push 000004AE
:00418DA5 8B4508                  mov eax, dword ptr [ebp+08]
:00418DA8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00418DA9 FF1510D64B00            Call dword ptr [004BD610]
:00418DAF 50                      push eax
:00418DB0 E8A0A5FFFF              call 00413355
:00418DB5 83C404                  add esp, 00000004
:00418DB8 50                      push eax
:00418DB9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418DBC 51                      push ecx
:00418DBD 8B5508                  mov edx, dword ptr [ebp+08]
:00418DC0 52                      push edx
:00418DC1 E86A010000              call 00418F30
:00418DC6 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00418CAF(C), :00418CD7(U), :00418D05(U), :00418D33(U), :00418D61(U)
|:00418D8C(U), :00418D9E(U)
|
:00418DC9 8BE5                    mov esp, ebp
:00418DCB 5D                      pop ebp
:00418DCC C3                      ret



:00418DCD 638D4100                DWORD 00418D63
:00418DD1 0A8D4100                DWORD 00418D0A
:00418DD5 388D4100                DWORD 00418D38
:00418DD9 DC8C4100                DWORD 00418CDC
:00418DDD C78C4100                DWORD 00418CC7
:00418DE1 8E8D4100                DWORD 00418D8E
:00418DE5 A08D4100                DWORD 00418DA0
:00418DE9 C98D4100                DWORD 00418DC9


:00418DED 0007                    add byte ptr [edi], al
:00418DEF 07                      pop es
:00418DF0 07                      pop es
:00418DF1 07                      pop es
:00418DF2 07                      pop es
:00418DF3 07                      pop es
:00418DF4 07                      pop es
:00418DF5 07                      pop es
:00418DF6 07                      pop es
:00418DF7 07                      pop es
:00418DF8 07                      pop es
:00418DF9 07                      pop es
:00418DFA 07                      pop es
:00418DFB 07                      pop es
:00418DFC 07                      pop es
:00418DFD 07                      pop es
:00418DFE 07                      pop es
:00418DFF 07                      pop es
:00418E00 07                      pop es
:00418E01 07                      pop es
:00418E02 07                      pop es
:00418E03 07                      pop es
:00418E04 07                      pop es
:00418E05 07                      pop es
:00418E06 07                      pop es
:00418E07 07                      pop es
:00418E08 0102                    add dword ptr [edx], eax
:00418E0A 07                      pop es
:00418E0B 07                      pop es
:00418E0C 07                      pop es
:00418E0D 07                      pop es
:00418E0E 0307                    add eax, dword ptr [edi]
:00418E10 07                      pop es
:00418E11 0407                    add al, 07
:00418E13 07                      pop es
:00418E14 07                      pop es
:00418E15 07                      pop es
:00418E16 07                      pop es
:00418E17 07                      pop es
:00418E18 07                      pop es
:00418E19 07                      pop es
:00418E1A 07                      pop es
:00418E1B 07                      pop es
:00418E1C 0507070707              add eax, 07070707
:00418E21 07                      pop es
:00418E22 07                      pop es
:00418E23 07                      pop es
:00418E24 07                      pop es
:00418E25 07                      pop es
:00418E26 07                      pop es
:00418E27 07                      pop es
:00418E28 07                      pop es
:00418E29 07                      pop es
:00418E2A 07                      pop es
:00418E2B 07                      pop es
:00418E2C 07                      pop es
:00418E2D 07                      pop es
:00418E2E 07                      pop es
:00418E2F 07                      pop es
:00418E30 07                      pop es
:00418E31 07                      pop es
:00418E32 07                      pop es
:00418E33 07                      pop es
:00418E34 07                      pop es
:00418E35 07                      pop es
:00418E36 07                      pop es
:00418E37 07                      pop es
:00418E38 07                      pop es
:00418E39 07                      pop es
:00418E3A 07                      pop es
:00418E3B 07                      pop es
:00418E3C 07                      pop es
:00418E3D 07                      pop es
:00418E3E 07                      pop es
:00418E3F 07                      pop es
:00418E40 07                      pop es
:00418E41 07                      pop es
:00418E42 07                      pop es
:00418E43 07                      pop es
:00418E44 07                      pop es
:00418E45 07                      pop es
:00418E46 07                      pop es
:00418E47 07                      pop es
:00418E48 07                      pop es
:00418E49 07                      pop es
:00418E4A 07                      pop es
:00418E4B 07                      pop es
:00418E4C 07                      pop es
:00418E4D 07                      pop es
:00418E4E 07                      pop es
:00418E4F 07                      pop es
:00418E50 07                      pop es
:00418E51 07                      pop es
:00418E52 07                      pop es
:00418E53 07                      pop es
:00418E54 07                      pop es
:00418E55 07                      pop es
:00418E56 07                      pop es
:00418E57 07                      pop es
:00418E58 07                      pop es
:00418E59 07                      pop es
:00418E5A 07                      pop es
:00418E5B 07                      pop es
:00418E5C 07                      pop es
:00418E5D 07                      pop es
:00418E5E 07                      pop es
:00418E5F 07                      pop es
:00418E60 07                      pop es
:00418E61 07                      pop es
:00418E62 07                      pop es
:00418E63 07                      pop es
:00418E64 07                      pop es
:00418E65 07                      pop es
:00418E66 07                      pop es
:00418E67 07                      pop es
:00418E68 07                      pop es
:00418E69 07                      pop es
:00418E6A 07                      pop es
:00418E6B 07                      pop es
:00418E6C 07                      pop es
:00418E6D 07                      pop es
:00418E6E 07                      pop es
:00418E6F 07                      pop es
:00418E70 07                      pop es
:00418E71 07                      pop es
:00418E72 07                      pop es
:00418E73 07                      pop es
:00418E74 07                      pop es
:00418E75 07                      pop es
:00418E76 07                      pop es
:00418E77 07                      pop es
:00418E78 07                      pop es
:00418E79 07                      pop es
:00418E7A 07                      pop es
:00418E7B 07                      pop es
:00418E7C 07                      pop es
:00418E7D 07                      pop es
:00418E7E 06                      push es

* Referenced by a CALL at Addresses:
|:00418CCF   , :00418D96   
|
:00418E7F 55                      push ebp
:00418E80 8BEC                    mov ebp, esp
:00418E82 83EC0C                  sub esp, 0000000C
:00418E85 6A00                    push 00000000
:00418E87 6A00                    push 00000000
:00418E89 6804100000              push 00001004
:00418E8E 8B450C                  mov eax, dword ptr [ebp+0C]
:00418E91 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418E92 FF1504D64B00            Call dword ptr [004BD604]
:00418E98 8945FC                  mov dword ptr [ebp-04], eax
:00418E9B C745F800000000          mov [ebp-08], 00000000
:00418EA2 EB09                    jmp 00418EAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418EDC(U)
|
:00418EA4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00418EA7 83C101                  add ecx, 00000001
:00418EAA 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418EA2(U)
|
:00418EAD 8B55F8                  mov edx, dword ptr [ebp-08]
:00418EB0 3B55FC                  cmp edx, dword ptr [ebp-04]
:00418EB3 7D29                    jge 00418EDE
:00418EB5 8B45F8                  mov eax, dword ptr [ebp-08]
:00418EB8 50                      push eax
:00418EB9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418EBC 51                      push ecx
:00418EBD E864030000              call 00419226
:00418EC2 83C408                  add esp, 00000008
:00418EC5 8945F4                  mov dword ptr [ebp-0C], eax
:00418EC8 8B55F4                  mov edx, dword ptr [ebp-0C]
:00418ECB 8B02                    mov eax, dword ptr [edx]
:00418ECD 50                      push eax
:00418ECE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00418ED1 51                      push ecx
:00418ED2 B978294B00              mov ecx, 004B2978
:00418ED7 E8A4C7FEFF              call 00405680
:00418EDC EBC6                    jmp 00418EA4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418EB3(C)
|
:00418EDE 8B55FC                  mov edx, dword ptr [ebp-04]
:00418EE1 8955F8                  mov dword ptr [ebp-08], edx
:00418EE4 EB09                    jmp 00418EEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418F0B(U)
|
:00418EE6 8B45F8                  mov eax, dword ptr [ebp-08]
:00418EE9 83C001                  add eax, 00000001
:00418EEC 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418EE4(U)
|
:00418EEF 817DF880000000          cmp dword ptr [ebp-08], 00000080
:00418EF6 7D15                    jge 00418F0D
:00418EF8 68FFFF0000              push 0000FFFF
:00418EFD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00418F00 51                      push ecx
:00418F01 B978294B00              mov ecx, 004B2978
:00418F06 E875C7FEFF              call 00405680
:00418F0B EBD9                    jmp 00418EE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418EF6(C)
|
:00418F0D 6A00                    push 00000000
:00418F0F 6A00                    push 00000000
:00418F11 6809100000              push 00001009
:00418F16 8B550C                  mov edx, dword ptr [ebp+0C]
:00418F19 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418F1A FF1504D64B00            Call dword ptr [004BD604]
:00418F20 8B450C                  mov eax, dword ptr [ebp+0C]
:00418F23 50                      push eax
:00418F24 E81BADFFFF              call 00413C44
:00418F29 83C404                  add esp, 00000004
:00418F2C 8BE5                    mov esp, ebp
:00418F2E 5D                      pop ebp
:00418F2F C3                      ret



* Referenced by a CALL at Addresses:
|:00418CFD   , :00418D2B   , :00418D59   , :00418D84   , :00418DC1   
|
:00418F30 55                      push ebp
:00418F31 8BEC                    mov ebp, esp
:00418F33 83EC10                  sub esp, 00000010
:00418F36 56                      push esi
:00418F37 8B4D10                  mov ecx, dword ptr [ebp+10]
:00418F3A 6BC950                  imul ecx, 00000050
:00418F3D 81C1787F4900            add ecx, 00497F78
:00418F43 E8C190FEFF              call 00402009
:00418F48 8845FC                  mov byte ptr [ebp-04], al
:00418F4B 6A00                    push 00000000
:00418F4D 6A00                    push 00000000
:00418F4F 6804100000              push 00001004
:00418F54 8B450C                  mov eax, dword ptr [ebp+0C]
:00418F57 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00418F58 FF1504D64B00            Call dword ptr [004BD604]
:00418F5E 8945F8                  mov dword ptr [ebp-08], eax
:00418F61 C745F400000000          mov [ebp-0C], 00000000
:00418F68 EB09                    jmp 00418F73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418FA9(U)
|
:00418F6A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00418F6D 83C101                  add ecx, 00000001
:00418F70 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418F68(U)
|
:00418F73 8B55F4                  mov edx, dword ptr [ebp-0C]
:00418F76 3B55F8                  cmp edx, dword ptr [ebp-08]
:00418F79 7D30                    jge 00418FAB
:00418F7B 8B45F4                  mov eax, dword ptr [ebp-0C]
:00418F7E 50                      push eax
:00418F7F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00418F82 51                      push ecx
:00418F83 E89E020000              call 00419226
:00418F88 83C408                  add esp, 00000008
:00418F8B 8945F0                  mov dword ptr [ebp-10], eax
:00418F8E 8B55F0                  mov edx, dword ptr [ebp-10]
:00418F91 8A02                    mov al, byte ptr [edx]
:00418F93 50                      push eax
:00418F94 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00418F97 51                      push ecx
:00418F98 8B4D10                  mov ecx, dword ptr [ebp+10]
:00418F9B 6BC950                  imul ecx, 00000050
:00418F9E 81C1787F4900            add ecx, 00497F78
:00418FA4 E857A2FEFF              call 00403200
:00418FA9 EBBF                    jmp 00418F6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418F79(C)
|
:00418FAB 8B55F8                  mov edx, dword ptr [ebp-08]
:00418FAE 8955F4                  mov dword ptr [ebp-0C], edx
:00418FB1 EB09                    jmp 00418FBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418FDC(U)
|
:00418FB3 8B45F4                  mov eax, dword ptr [ebp-0C]
:00418FB6 83C001                  add eax, 00000001
:00418FB9 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418FB1(U)
|
:00418FBC 837DF408                cmp dword ptr [ebp-0C], 00000008
:00418FC0 7D1C                    jge 00418FDE
:00418FC2 68FF000000              push 000000FF
:00418FC7 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00418FCA 51                      push ecx
:00418FCB 8B4D10                  mov ecx, dword ptr [ebp+10]
:00418FCE 6BC950                  imul ecx, 00000050
:00418FD1 81C1787F4900            add ecx, 00497F78
:00418FD7 E824A2FEFF              call 00403200
:00418FDC EBD5                    jmp 00418FB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418FC0(C)
|
:00418FDE 8B55FC                  mov edx, dword ptr [ebp-04]
:00418FE1 81E2FF000000            and edx, 000000FF
:00418FE7 81FAFF000000            cmp edx, 000000FF
:00418FED 7458                    je 00419047
:00418FEF C745F400000000          mov [ebp-0C], 00000000
:00418FF6 EB09                    jmp 00419001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419045(U)
|
:00418FF8 8B45F4                  mov eax, dword ptr [ebp-0C]
:00418FFB 83C001                  add eax, 00000001
:00418FFE 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00418FF6(U)
|
:00419001 837DF408                cmp dword ptr [ebp-0C], 00000008
:00419005 7D40                    jge 00419047
:00419007 8B75FC                  mov esi, dword ptr [ebp-04]
:0041900A 81E6FF000000            and esi, 000000FF
:00419010 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00419013 51                      push ecx
:00419014 8B4D10                  mov ecx, dword ptr [ebp+10]
:00419017 6BC950                  imul ecx, 00000050
:0041901A 81C1787F4900            add ecx, 00497F78
:00419020 E8BBA1FEFF              call 004031E0
:00419025 25FF000000              and eax, 000000FF
:0041902A 3BF0                    cmp esi, eax
:0041902C 7517                    jne 00419045
:0041902E 8A55F4                  mov dl, byte ptr [ebp-0C]
:00419031 52                      push edx
:00419032 8B4D10                  mov ecx, dword ptr [ebp+10]
:00419035 6BC950                  imul ecx, 00000050
:00419038 81C1787F4900            add ecx, 00497F78
:0041903E E88D38FFFF              call 0040C8D0
:00419043 EB02                    jmp 00419047

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041902C(C)
|
:00419045 EBB1                    jmp 00418FF8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00418FED(C), :00419005(C), :00419043(U)
|
:00419047 68AB040000              push 000004AB
:0041904C 8B4508                  mov eax, dword ptr [ebp+08]
:0041904F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419050 FF1510D64B00            Call dword ptr [004BD610]
:00419056 39450C                  cmp dword ptr [ebp+0C], eax
:00419059 7516                    jne 00419071
:0041905B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041905E 51                      push ecx
:0041905F 8B550C                  mov edx, dword ptr [ebp+0C]
:00419062 52                      push edx
:00419063 8B4508                  mov eax, dword ptr [ebp+08]
:00419066 50                      push eax
:00419067 E8F8BD0400              call 00464E64
:0041906C 83C40C                  add esp, 0000000C
:0041906F EB10                    jmp 00419081

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419059(C)
|
:00419071 8B4D10                  mov ecx, dword ptr [ebp+10]
:00419074 51                      push ecx
:00419075 8B550C                  mov edx, dword ptr [ebp+0C]
:00419078 52                      push edx
:00419079 E839C7FFFF              call 004157B7
:0041907E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041906F(U)
|
:00419081 5E                      pop esi
:00419082 8BE5                    mov esp, ebp
:00419084 5D                      pop ebp
:00419085 C3                      ret



* Referenced by a CALL at Addresses:
|:004132B4   , :004132D2   , :00413309   , :00413327   , :00413A67   
|:00413A85   , :00413AC4   , :00413AE2   , :004152FB   , :00415319   
|:00415353   , :00415371   , :0041553B   , :00415559   , :00415598   
|:004155B6   , :00416FCC   , :00416FEA   , :00417008   , :00417042   
|:00417060   , :0041707E   , :0041712D   , :0041714B   , :00417169   
|:004171A8   , :004171C6   , :004171E4   , :0045AFB8   , :0045AFF7   
|:0045B6E3   , :0045B70E   , :00462FE0   , :00462FFE   , :0046302C   
|:0046304A   , :00463BAF   , :00463BCD   , :00463C0C   , :00463C2A   
|:0046514D   , :0046518C   , :004656F6   , :0046573F   
|
:00419086 55                      push ebp
:00419087 8BEC                    mov ebp, esp
:00419089 51                      push ecx
:0041908A 6AF0                    push FFFFFFF0
:0041908C 8B450C                  mov eax, dword ptr [ebp+0C]
:0041908F 50                      push eax

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:00419090 FF15B0D64B00            Call dword ptr [004BD6B0]
:00419096 8945FC                  mov dword ptr [ebp-04], eax
:00419099 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041909C 83E103                  and ecx, 00000003
:0041909F 3B4D10                  cmp ecx, dword ptr [ebp+10]
:004190A2 7416                    je 004190BA
:004190A4 8B55FC                  mov edx, dword ptr [ebp-04]
:004190A7 83E2FC                  and edx, FFFFFFFC
:004190AA 0B5510                  or edx, dword ptr [ebp+10]
:004190AD 52                      push edx
:004190AE 6AF0                    push FFFFFFF0
:004190B0 8B450C                  mov eax, dword ptr [ebp+0C]
:004190B3 50                      push eax

* Reference To: USER32.SetWindowLongA, Ord:021Bh
                                  |
:004190B4 FF15B4D64B00            Call dword ptr [004BD6B4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004190A2(C)
|
:004190BA B801000000              mov eax, 00000001
:004190BF 8BE5                    mov esp, ebp
:004190C1 5D                      pop ebp
:004190C2 C3                      ret



* Referenced by a CALL at Addresses:
|:00412AF8   , :00413144   , :00414137   , :00414D30   , :00415EDA   
|:004165C9   , :004625E3   , :00462E09   , :0046474A   , :00464792   
|:004647ED   , :004664DB   
|
:004190C3 55                      push ebp
:004190C4 8BEC                    mov ebp, esp
:004190C6 83EC1C                  sub esp, 0000001C
:004190C9 8D45E4                  lea eax, dword ptr [ebp-1C]
:004190CC 50                      push eax

* Reference To: USER32.GetCursorPos, Ord:00EDh
                                  |
:004190CD FF15A8D64B00            Call dword ptr [004BD6A8]
:004190D3 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:004190D6 51                      push ecx
:004190D7 8B5508                  mov edx, dword ptr [ebp+08]
:004190DA 52                      push edx

* Reference To: USER32.ScreenToClient, Ord:01D3h
                                  |
:004190DB FF15A0D64B00            Call dword ptr [004BD6A0]
:004190E1 8B45E4                  mov eax, dword ptr [ebp-1C]
:004190E4 8945EC                  mov dword ptr [ebp-14], eax
:004190E7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004190EA 894DF0                  mov dword ptr [ebp-10], ecx
:004190ED C745F40E000000          mov [ebp-0C], 0000000E
:004190F4 8D55EC                  lea edx, dword ptr [ebp-14]
:004190F7 52                      push edx
:004190F8 6A00                    push 00000000
:004190FA 6812100000              push 00001012
:004190FF 8B4508                  mov eax, dword ptr [ebp+08]
:00419102 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419103 FF1504D64B00            Call dword ptr [004BD604]
:00419109 8BE5                    mov esp, ebp
:0041910B 5D                      pop ebp
:0041910C C3                      ret



* Referenced by a CALL at Addresses:
|:0041327A   , :00413B50   , :004153FC   , :00415487   , :0041569C   
|:004156BC   , :00416F92   , :0041722C   , :00465272   
|
:0041910D 55                      push ebp
:0041910E 8BEC                    mov ebp, esp
:00419110 51                      push ecx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00419111 6A0A                    push 0000000A
:00419113 8D45FC                  lea eax, dword ptr [ebp-04]
:00419116 50                      push eax
:00419117 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041911A 6BC950                  imul ecx, 00000050
:0041911D 81C1787F4900            add ecx, 00497F78
:00419123 E8786DFFFF              call 0040FEA0
:00419128 25FF000000              and eax, 000000FF
:0041912D 50                      push eax
:0041912E E88D140500              call 0046A5C0
:00419133 83C40C                  add esp, 0000000C
:00419136 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00419139 51                      push ecx
:0041913A 8B5510                  mov edx, dword ptr [ebp+10]
:0041913D 52                      push edx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041913E FF1514D64B00            Call dword ptr [004BD614]
:00419144 8BE5                    mov esp, ebp
:00419146 5D                      pop ebp
:00419147 C3                      ret



* Referenced by a CALL at Addresses:
|:00412E7C   , :00412F01   , :00412F86   , :00413005   , :0041308A   
|:004144EA   , :0041456F   , :004145F4   , :00414673   , :004146F8   
|:00414A68   , :00414AED   , :00414B72   , :00414BF1   , :00414C76   
|:0041632C   , :004163B1   , :00416436   , :004164B5   , :0041653A   
|:00464B1F   , :00464BA4   , :00464C29   , :00464CA8   , :00464D2D   
|
:00419148 55                      push ebp
:00419149 8BEC                    mov ebp, esp
:0041914B 83EC08                  sub esp, 00000008

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:0041914E 68B8C94700              push 0047C9B8
:00419153 8B4514                  mov eax, dword ptr [ebp+14]
:00419156 50                      push eax
:00419157 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041915A 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0041915B FF1510D64B00            Call dword ptr [004BD610]
:00419161 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00419162 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00419168 6A0A                    push 0000000A
:0041916A 8D55F8                  lea edx, dword ptr [ebp-08]
:0041916D 52                      push edx
:0041916E 8B4518                  mov eax, dword ptr [ebp+18]
:00419171 50                      push eax
:00419172 E849140500              call 0046A5C0
:00419177 83C40C                  add esp, 0000000C
:0041917A 50                      push eax
:0041917B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041917E 51                      push ecx
:0041917F 8B5508                  mov edx, dword ptr [ebp+08]
:00419182 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00419183 FF1510D64B00            Call dword ptr [004BD610]
:00419189 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041918A FF1514D64B00            Call dword ptr [004BD614]
:00419190 837D1C00                cmp dword ptr [ebp+1C], 00000000
:00419194 7432                    je 004191C8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00419196 6A05                    push 00000005
:00419198 8B4510                  mov eax, dword ptr [ebp+10]
:0041919B 50                      push eax
:0041919C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041919F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004191A0 FF1510D64B00            Call dword ptr [004BD610]
:004191A6 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004191A7 FF1500D74B00            Call dword ptr [004BD700]
:004191AD 8B551C                  mov edx, dword ptr [ebp+1C]
:004191B0 52                      push edx
:004191B1 8B4510                  mov eax, dword ptr [ebp+10]
:004191B4 50                      push eax
:004191B5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004191B8 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004191B9 FF1510D64B00            Call dword ptr [004BD610]
:004191BF 50                      push eax
:004191C0 E807000000              call 004191CC
:004191C5 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419194(C)
|
:004191C8 8BE5                    mov esp, ebp
:004191CA 5D                      pop ebp
:004191CB C3                      ret



* Referenced by a CALL at Addresses:
|:00412D60   , :00412D8F   , :00412DC3   , :004143CE   , :004143FD   
|:00414431   , :0041494C   , :0041497B   , :004149AF   , :00416210   
|:0041623F   , :00416273   , :004191C0   , :004637EA   , :00463819   
|:0046384D   , :00463B5C   , :00464A03   , :00464A32   , :00464A66   
|
:004191CC 55                      push ebp
:004191CD 8BEC                    mov ebp, esp
:004191CF 83EC08                  sub esp, 00000008
:004191D2 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004191D6 7E18                    jle 004191F0
:004191D8 C645F82B                mov [ebp-08], 2B

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004191DC 6A0A                    push 0000000A
:004191DE 8D45F9                  lea eax, dword ptr [ebp-07]
:004191E1 50                      push eax
:004191E2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004191E5 51                      push ecx
:004191E6 E8D5130500              call 0046A5C0
:004191EB 83C40C                  add esp, 0000000C
:004191EE EB12                    jmp 00419202

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004191D6(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004191F0 6A0A                    push 0000000A
:004191F2 8D55F8                  lea edx, dword ptr [ebp-08]
:004191F5 52                      push edx
:004191F6 8B450C                  mov eax, dword ptr [ebp+0C]
:004191F9 50                      push eax
:004191FA E8C1130500              call 0046A5C0
:004191FF 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004191EE(U)
|
:00419202 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00419206 741A                    je 00419222

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00419208 6A05                    push 00000005
:0041920A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041920D 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0041920E FF1500D74B00            Call dword ptr [004BD700]
:00419214 8D55F8                  lea edx, dword ptr [ebp-08]
:00419217 52                      push edx
:00419218 8B4508                  mov eax, dword ptr [ebp+08]
:0041921B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0041921C FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419206(C)
|
:00419222 8BE5                    mov esp, ebp
:00419224 5D                      pop ebp
:00419225 C3                      ret



* Referenced by a CALL at Addresses:
|:00418EBD   , :00418F83   
|
:00419226 55                      push ebp
:00419227 8BEC                    mov ebp, esp
:00419229 83EC28                  sub esp, 00000028
:0041922C 8B450C                  mov eax, dword ptr [ebp+0C]
:0041922F 8945DC                  mov dword ptr [ebp-24], eax
:00419232 C745E000000000          mov [ebp-20], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00419239 C745D804000000          mov [ebp-28], 00000004
:00419240 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00419243 51                      push ecx
:00419244 6A00                    push 00000000
:00419246 6805100000              push 00001005
:0041924B 8B5508                  mov edx, dword ptr [ebp+08]
:0041924E 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041924F FF1504D64B00            Call dword ptr [004BD604]
:00419255 8B45F8                  mov eax, dword ptr [ebp-08]
:00419258 8BE5                    mov esp, ebp
:0041925A 5D                      pop ebp
:0041925B C3                      ret



* Referenced by a CALL at Addresses:
|:00412929   , :00413429   , :004136CE   , :00413FE5   , :00415DAA   
|:004168C9   , :004194C6   , :004626AA   , :00462731   , :0046464E   
|:00464771   , :004647C6   
|
:0041925C 55                      push ebp
:0041925D 8BEC                    mov ebp, esp
:0041925F 83EC2C                  sub esp, 0000002C
:00419262 8B450C                  mov eax, dword ptr [ebp+0C]
:00419265 8945D8                  mov dword ptr [ebp-28], eax
:00419268 C745DC00000000          mov [ebp-24], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041926F C745D404000000          mov [ebp-2C], 00000004
:00419276 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:00419279 51                      push ecx
:0041927A 6A00                    push 00000000
:0041927C 6805100000              push 00001005
:00419281 8B5508                  mov edx, dword ptr [ebp+08]
:00419284 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419285 FF1504D64B00            Call dword ptr [004BD604]
:0041928B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041928E 8945FC                  mov dword ptr [ebp-04], eax
:00419291 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419294 8B01                    mov eax, dword ptr [ecx]
:00419296 8BE5                    mov esp, ebp
:00419298 5D                      pop ebp
:00419299 C3                      ret



* Referenced by a CALL at Addresses:
|:00413731   , :004138D6   , :00414E04   , :00416AD3   , :00416C53   
|:00419508   , :0041952A   , :00462E72   
|
:0041929A 55                      push ebp
:0041929B 8BEC                    mov ebp, esp
:0041929D 83EC2C                  sub esp, 0000002C
:004192A0 8B450C                  mov eax, dword ptr [ebp+0C]
:004192A3 8945D8                  mov dword ptr [ebp-28], eax
:004192A6 C745DC00000000          mov [ebp-24], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004192AD C745D404000000          mov [ebp-2C], 00000004
:004192B4 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:004192B7 51                      push ecx
:004192B8 6A00                    push 00000000
:004192BA 6805100000              push 00001005
:004192BF 8B5508                  mov edx, dword ptr [ebp+08]
:004192C2 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004192C3 FF1504D64B00            Call dword ptr [004BD604]
:004192C9 8B45F4                  mov eax, dword ptr [ebp-0C]
:004192CC 8945FC                  mov dword ptr [ebp-04], eax
:004192CF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004192D2 8A4104                  mov al, byte ptr [ecx+04]
:004192D5 8BE5                    mov esp, ebp
:004192D7 5D                      pop ebp
:004192D8 C3                      ret



* Referenced by a CALL at Addresses:
|:00413CBE   , :00413CDE   , :00415871   , :0041589C   , :00416E1C   
|:004173F7   , :00417414   , :00464134   , :0046414A   , :004643DF   
|:004643F8   , :004650A9   , :004650D3   
|
:004192D9 55                      push ebp
:004192DA 8BEC                    mov ebp, esp
:004192DC 51                      push ecx
:004192DD 8B4508                  mov eax, dword ptr [ebp+08]
:004192E0 50                      push eax

* Reference To: USER32.GetDlgCtrlID, Ord:00F2h
                                  |
:004192E1 FF15ACD64B00            Call dword ptr [004BD6AC]
:004192E7 8945FC                  mov dword ptr [ebp-04], eax
:004192EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004192ED 81E91A040000            sub ecx, 0000041A
:004192F3 894DFC                  mov dword ptr [ebp-04], ecx
:004192F6 817DFC91000000          cmp dword ptr [ebp-04], 00000091
:004192FD 0F87AA000000            ja 004193AD
:00419303 8B45FC                  mov eax, dword ptr [ebp-04]
:00419306 33D2                    xor edx, edx
:00419308 8A90DF934100            mov dl, byte ptr [eax+004193DF]
:0041930E FF2495B3934100          jmp dword ptr [4*edx+004193B3]
:00419315 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419318 8B5510                  mov edx, dword ptr [ebp+10]
:0041931B 8914CD60AE4800          mov dword ptr [8*ecx+0048AE60], edx
:00419322 8B450C                  mov eax, dword ptr [ebp+0C]
:00419325 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00419328 880CC564AE4800          mov byte ptr [8*eax+0048AE64], cl
:0041932F 8B550C                  mov edx, dword ptr [ebp+0C]
:00419332 8D04D560AE4800          lea eax, dword ptr [8*edx+0048AE60]
:00419339 EB74                    jmp 004193AF
:0041933B 8B450C                  mov eax, dword ptr [ebp+0C]
:0041933E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00419341 890CC5A0AE4800          mov dword ptr [8*eax+0048AEA0], ecx
:00419348 8B550C                  mov edx, dword ptr [ebp+0C]
:0041934B 8A450C                  mov al, byte ptr [ebp+0C]
:0041934E 8804D5A4AE4800          mov byte ptr [8*edx+0048AEA4], al
:00419355 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419358 8D04CDA0AE4800          lea eax, dword ptr [8*ecx+0048AEA0]
:0041935F EB4E                    jmp 004193AF
:00419361 8B550C                  mov edx, dword ptr [ebp+0C]
:00419364 8B4510                  mov eax, dword ptr [ebp+10]
:00419367 8904D510AF4800          mov dword ptr [8*edx+0048AF10], eax
:0041936E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419371 8A550C                  mov dl, byte ptr [ebp+0C]
:00419374 8814CD14AF4800          mov byte ptr [8*ecx+0048AF14], dl
:0041937B 8B450C                  mov eax, dword ptr [ebp+0C]
:0041937E 8D04C510AF4800          lea eax, dword ptr [8*eax+0048AF10]
:00419385 EB28                    jmp 004193AF
:00419387 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041938A 8B5510                  mov edx, dword ptr [ebp+10]
:0041938D 8914CD90B34800          mov dword ptr [8*ecx+0048B390], edx
:00419394 8B450C                  mov eax, dword ptr [ebp+0C]
:00419397 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0041939A 880CC594B34800          mov byte ptr [8*eax+0048B394], cl
:004193A1 8B550C                  mov edx, dword ptr [ebp+0C]
:004193A4 8D04D590B34800          lea eax, dword ptr [8*edx+0048B390]
:004193AB EB02                    jmp 004193AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004192FD(C)
|
:004193AD 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00419339(U), :0041935F(U), :00419385(U), :004193AB(U)
|
:004193AF 8BE5                    mov esp, ebp
:004193B1 5D                      pop ebp
:004193B2 C3                      ret



:004193B3 15934100                DWORD 00419315
:004193B7 15934100                DWORD 00419315
:004193BB 3B934100                DWORD 0041933B
:004193BF 15934100                DWORD 00419315
:004193C3 61934100                DWORD 00419361
:004193C7 87934100                DWORD 00419387
:004193CB 61934100                DWORD 00419361
:004193CF 15934100                DWORD 00419315
:004193D3 3B934100                DWORD 0041933B
:004193D7 15934100                DWORD 00419315
:004193DB AD934100                DWORD 004193AD


:004193DF 000A                    add byte ptr [edx], cl
:004193E1 0A0A                    or cl, byte ptr [edx]
:004193E3 0A0A                    or cl, byte ptr [edx]
:004193E5 0A0A                    or cl, byte ptr [edx]
:004193E7 0A0A                    or cl, byte ptr [edx]
:004193E9 0A0A                    or cl, byte ptr [edx]
:004193EB 0A0A                    or cl, byte ptr [edx]
:004193ED 0A0A                    or cl, byte ptr [edx]
:004193EF 0A0A                    or cl, byte ptr [edx]
:004193F1 0A0A                    or cl, byte ptr [edx]
:004193F3 0A0A                    or cl, byte ptr [edx]
:004193F5 0A0A                    or cl, byte ptr [edx]
:004193F7 0A0A                    or cl, byte ptr [edx]
:004193F9 0A01                    or al, byte ptr [ecx]
:004193FB 020A                    add cl, byte ptr [edx]
:004193FD 0A0A                    or cl, byte ptr [edx]
:004193FF 0A03                    or al, byte ptr [ebx]
:00419401 0A0A                    or cl, byte ptr [edx]
:00419403 040A                    add al, 0A
:00419405 0A0A                    or cl, byte ptr [edx]
:00419407 0A0A                    or cl, byte ptr [edx]
:00419409 0A0A                    or cl, byte ptr [edx]
:0041940B 0A0A                    or cl, byte ptr [edx]
:0041940D 05060A0A0A              add eax, 0A0A0A06
:00419412 0A0A                    or cl, byte ptr [edx]
:00419414 0A0A                    or cl, byte ptr [edx]
:00419416 0A0A                    or cl, byte ptr [edx]
:00419418 0A0A                    or cl, byte ptr [edx]
:0041941A 0A0A                    or cl, byte ptr [edx]
:0041941C 0A0A                    or cl, byte ptr [edx]
:0041941E 0A0A                    or cl, byte ptr [edx]
:00419420 0A0A                    or cl, byte ptr [edx]
:00419422 0A0A                    or cl, byte ptr [edx]
:00419424 0A0A                    or cl, byte ptr [edx]
:00419426 0A0A                    or cl, byte ptr [edx]
:00419428 0A0A                    or cl, byte ptr [edx]
:0041942A 0A0A                    or cl, byte ptr [edx]
:0041942C 0A0A                    or cl, byte ptr [edx]
:0041942E 0A0A                    or cl, byte ptr [edx]
:00419430 0A0A                    or cl, byte ptr [edx]
:00419432 0A0A                    or cl, byte ptr [edx]
:00419434 0A0A                    or cl, byte ptr [edx]
:00419436 0A0A                    or cl, byte ptr [edx]
:00419438 0A0A                    or cl, byte ptr [edx]
:0041943A 0A0A                    or cl, byte ptr [edx]
:0041943C 0A0A                    or cl, byte ptr [edx]
:0041943E 0A0A                    or cl, byte ptr [edx]
:00419440 07                      pop es
:00419441 080A                    or byte ptr [edx], cl
:00419443 0A0A                    or cl, byte ptr [edx]
:00419445 0A0A                    or cl, byte ptr [edx]
:00419447 0A0A                    or cl, byte ptr [edx]
:00419449 0A0A                    or cl, byte ptr [edx]
:0041944B 0A0A                    or cl, byte ptr [edx]
:0041944D 0A0A                    or cl, byte ptr [edx]
:0041944F 0A0A                    or cl, byte ptr [edx]
:00419451 0A0A                    or cl, byte ptr [edx]
:00419453 0A0A                    or cl, byte ptr [edx]
:00419455 0A0A                    or cl, byte ptr [edx]
:00419457 0A0A                    or cl, byte ptr [edx]
:00419459 0A0A                    or cl, byte ptr [edx]
:0041945B 0A0A                    or cl, byte ptr [edx]
:0041945D 0A0A                    or cl, byte ptr [edx]
:0041945F 0A0A                    or cl, byte ptr [edx]
:00419461 0A0A                    or cl, byte ptr [edx]
:00419463 0A0A                    or cl, byte ptr [edx]
:00419465 0A0A                    or cl, byte ptr [edx]
:00419467 0A0A                    or cl, byte ptr [edx]
:00419469 0A0A                    or cl, byte ptr [edx]
:0041946B 0A0A                    or cl, byte ptr [edx]
:0041946D 0A0A                    or cl, byte ptr [edx]
:0041946F 0A09                    or cl, byte ptr [ecx]

* Referenced by a CALL at Addresses:
|:004134FB   , :004135A4   , :00414F29   , :00416754   , :00416807   
|:00419557   
|
:00419471 55                      push ebp
:00419472 8BEC                    mov ebp, esp
:00419474 83EC2C                  sub esp, 0000002C
:00419477 8B450C                  mov eax, dword ptr [ebp+0C]
:0041947A 8945D8                  mov dword ptr [ebp-28], eax
:0041947D C745DC00000000          mov [ebp-24], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00419484 C745D404000000          mov [ebp-2C], 00000004
:0041948B 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:0041948E 51                      push ecx
:0041948F 6A00                    push 00000000
:00419491 6805100000              push 00001005
:00419496 8B5508                  mov edx, dword ptr [ebp+08]
:00419499 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041949A FF1504D64B00            Call dword ptr [004BD604]
:004194A0 8B45F4                  mov eax, dword ptr [ebp-0C]
:004194A3 8945FC                  mov dword ptr [ebp-04], eax
:004194A6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004194A9 C70100000000            mov dword ptr [ecx], 00000000
:004194AF 8B55FC                  mov edx, dword ptr [ebp-04]
:004194B2 C6420400                mov [edx+04], 00
:004194B6 8BE5                    mov esp, ebp
:004194B8 5D                      pop ebp
:004194B9 C3                      ret



* Referenced by a CALL at Addresses:
|:00413183   , :004131AD   , :00414D59   , :00416608   , :00416632   
|:0041665C   , :00462E22   
|
:004194BA 55                      push ebp
:004194BB 8BEC                    mov ebp, esp
:004194BD 51                      push ecx
:004194BE 8B450C                  mov eax, dword ptr [ebp+0C]
:004194C1 50                      push eax
:004194C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004194C5 51                      push ecx
:004194C6 E891FDFFFF              call 0041925C
:004194CB 83C408                  add esp, 00000008
:004194CE 8945FC                  mov dword ptr [ebp-04], eax
:004194D1 8B55FC                  mov edx, dword ptr [ebp-04]
:004194D4 52                      push edx
:004194D5 E81BAAFEFF              call 00403EF5
:004194DA 83C404                  add esp, 00000004
:004194DD 8BE5                    mov esp, ebp
:004194DF 5D                      pop ebp
:004194E0 C3                      ret



* Referenced by a CALL at Address:
|:00413486   
|
:004194E1 55                      push ebp
:004194E2 8BEC                    mov ebp, esp
:004194E4 83EC08                  sub esp, 00000008
:004194E7 683E040000              push 0000043E
:004194EC 8B4508                  mov eax, dword ptr [ebp+08]
:004194EF 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004194F0 FF1510D64B00            Call dword ptr [004BD610]
:004194F6 39450C                  cmp dword ptr [ebp+0C], eax
:004194F9 7527                    jne 00419522
:004194FB 68FFFF0000              push 0000FFFF
:00419500 8B4D10                  mov ecx, dword ptr [ebp+10]
:00419503 51                      push ecx
:00419504 8B550C                  mov edx, dword ptr [ebp+0C]
:00419507 52                      push edx
:00419508 E88DFDFFFF              call 0041929A
:0041950D 83C408                  add esp, 00000008
:00419510 25FF000000              and eax, 000000FF
:00419515 50                      push eax
:00419516 B978294B00              mov ecx, 004B2978
:0041951B E860C1FEFF              call 00405680
:00419520 EB2D                    jmp 0041954F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004194F9(C)
|
:00419522 8B4510                  mov eax, dword ptr [ebp+10]
:00419525 50                      push eax
:00419526 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419529 51                      push ecx
:0041952A E86BFDFFFF              call 0041929A
:0041952F 83C408                  add esp, 00000008
:00419532 8845FC                  mov byte ptr [ebp-04], al
:00419535 68FF000000              push 000000FF
:0041953A 8A55FC                  mov dl, byte ptr [ebp-04]
:0041953D 52                      push edx
:0041953E 8B4D14                  mov ecx, dword ptr [ebp+14]
:00419541 6BC950                  imul ecx, 00000050
:00419544 81C1787F4900            add ecx, 00497F78
:0041954A E8B19CFEFF              call 00403200

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419520(U)
|
:0041954F 8B4510                  mov eax, dword ptr [ebp+10]
:00419552 50                      push eax
:00419553 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419556 51                      push ecx
:00419557 E815FFFFFF              call 00419471
:0041955C 83C408                  add esp, 00000008
:0041955F 6A00                    push 00000000
:00419561 8B5510                  mov edx, dword ptr [ebp+10]
:00419564 52                      push edx
:00419565 6808100000              push 00001008
:0041956A 8B450C                  mov eax, dword ptr [ebp+0C]
:0041956D 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041956E FF1504D64B00            Call dword ptr [004BD604]
:00419574 6A00                    push 00000000
:00419576 6A00                    push 00000000
:00419578 6804100000              push 00001004
:0041957D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419580 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00419581 FF1504D64B00            Call dword ptr [004BD604]
:00419587 83E801                  sub eax, 00000001
:0041958A 3B4510                  cmp eax, dword ptr [ebp+10]
:0041958D 7D1B                    jge 004195AA
:0041958F 6A00                    push 00000000
:00419591 6A00                    push 00000000
:00419593 6804100000              push 00001004
:00419598 8B550C                  mov edx, dword ptr [ebp+0C]
:0041959B 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0041959C FF1504D64B00            Call dword ptr [004BD604]
:004195A2 83E801                  sub eax, 00000001
:004195A5 8945F8                  mov dword ptr [ebp-08], eax
:004195A8 EB06                    jmp 004195B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041958D(C)
|
:004195AA 8B4510                  mov eax, dword ptr [ebp+10]
:004195AD 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004195A8(U)
|
:004195B0 6A00                    push 00000000
:004195B2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004195B5 51                      push ecx
:004195B6 6813100000              push 00001013
:004195BB 8B550C                  mov edx, dword ptr [ebp+0C]
:004195BE 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004195BF FF1504D64B00            Call dword ptr [004BD604]
:004195C5 8BE5                    mov esp, ebp
:004195C7 5D                      pop ebp
:004195C8 C3                      ret



* Referenced by a CALL at Address:
|:00413415   
|
:004195C9 55                      push ebp
:004195CA 8BEC                    mov ebp, esp
:004195CC 83EC18                  sub esp, 00000018
:004195CF 8B4510                  mov eax, dword ptr [ebp+10]
:004195D2 8945E8                  mov dword ptr [ebp-18], eax
:004195D5 8B4D14                  mov ecx, dword ptr [ebp+14]
:004195D8 894DEC                  mov dword ptr [ebp-14], ecx
:004195DB 8D55F0                  lea edx, dword ptr [ebp-10]
:004195DE 52                      push edx
:004195DF 8B450C                  mov eax, dword ptr [ebp+0C]
:004195E2 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:004195E3 FF15A4D64B00            Call dword ptr [004BD6A4]
:004195E9 8D4DE8                  lea ecx, dword ptr [ebp-18]
:004195EC 51                      push ecx
:004195ED 8B5508                  mov edx, dword ptr [ebp+08]
:004195F0 52                      push edx

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:004195F1 FF15D0D64B00            Call dword ptr [004BD6D0]
:004195F7 8B45E8                  mov eax, dword ptr [ebp-18]
:004195FA 3B45F0                  cmp eax, dword ptr [ebp-10]
:004195FD 7C18                    jl 00419617
:004195FF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00419602 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:00419605 7C10                    jl 00419617
:00419607 8B55E8                  mov edx, dword ptr [ebp-18]
:0041960A 3B55F8                  cmp edx, dword ptr [ebp-08]
:0041960D 7F08                    jg 00419617
:0041960F 8B45EC                  mov eax, dword ptr [ebp-14]
:00419612 3B45FC                  cmp eax, dword ptr [ebp-04]
:00419615 7E04                    jle 0041961B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004195FD(C), :00419605(C), :0041960D(C)
|
:00419617 33C0                    xor eax, eax
:00419619 EB05                    jmp 00419620

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419615(C)
|
:0041961B B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419619(U)
|
:00419620 8BE5                    mov esp, ebp
:00419622 5D                      pop ebp
:00419623 C3                      ret


:00419624 CC                      int 03
:00419625 CC                      int 03
:00419626 CC                      int 03
:00419627 CC                      int 03
:00419628 CC                      int 03
:00419629 CC                      int 03
:0041962A CC                      int 03
:0041962B CC                      int 03
:0041962C CC                      int 03
:0041962D CC                      int 03
:0041962E CC                      int 03
:0041962F CC                      int 03

* Referenced by a CALL at Address:
|:00412477   
|
:00419630 55                      push ebp
:00419631 8BEC                    mov ebp, esp
:00419633 51                      push ecx
:00419634 894DFC                  mov dword ptr [ebp-04], ecx
:00419637 8B45FC                  mov eax, dword ptr [ebp-04]
:0041963A C60001                  mov byte ptr [eax], 01
:0041963D 8B45FC                  mov eax, dword ptr [ebp-04]
:00419640 8BE5                    mov esp, ebp
:00419642 5D                      pop ebp
:00419643 C3                      ret


:00419644 CC                      int 03
:00419645 CC                      int 03
:00419646 CC                      int 03
:00419647 CC                      int 03
:00419648 CC                      int 03
:00419649 CC                      int 03
:0041964A CC                      int 03
:0041964B CC                      int 03
:0041964C CC                      int 03
:0041964D CC                      int 03
:0041964E CC                      int 03
:0041964F CC                      int 03

* Referenced by a CALL at Addresses:
|:00412BFE   , :0041426C   , :004147EA   , :004160AE   , :00424919   
|:00463688   , :004648A1   
|
:00419650 55                      push ebp
:00419651 8BEC                    mov ebp, esp
:00419653 51                      push ecx
:00419654 894DFC                  mov dword ptr [ebp-04], ecx
:00419657 8B45FC                  mov eax, dword ptr [ebp-04]
:0041965A 8A4028                  mov al, byte ptr [eax+28]
:0041965D 8BE5                    mov esp, ebp
:0041965F 5D                      pop ebp
:00419660 C3                      ret


:00419661 CC                      int 03
:00419662 CC                      int 03
:00419663 CC                      int 03
:00419664 CC                      int 03
:00419665 CC                      int 03
:00419666 CC                      int 03
:00419667 CC                      int 03
:00419668 CC                      int 03
:00419669 CC                      int 03
:0041966A CC                      int 03
:0041966B CC                      int 03
:0041966C CC                      int 03
:0041966D CC                      int 03
:0041966E CC                      int 03
:0041966F CC                      int 03

* Referenced by a CALL at Addresses:
|:00412E1B   , :00414489   , :00414A07   , :004162CB   , :00463888   
|:00464ABE   
|
:00419670 55                      push ebp
:00419671 8BEC                    mov ebp, esp
:00419673 51                      push ecx
:00419674 894DFC                  mov dword ptr [ebp-04], ecx
:00419677 8B45FC                  mov eax, dword ptr [ebp-04]
:0041967A 8A4029                  mov al, byte ptr [eax+29]
:0041967D 8BE5                    mov esp, ebp
:0041967F 5D                      pop ebp
:00419680 C3                      ret


:00419681 CC                      int 03
:00419682 CC                      int 03
:00419683 CC                      int 03
:00419684 CC                      int 03
:00419685 CC                      int 03
:00419686 CC                      int 03
:00419687 CC                      int 03
:00419688 CC                      int 03
:00419689 CC                      int 03
:0041968A CC                      int 03
:0041968B CC                      int 03
:0041968C CC                      int 03
:0041968D CC                      int 03
:0041968E CC                      int 03
:0041968F CC                      int 03

* Referenced by a CALL at Addresses:
|:00412EA0   , :0041450E   , :00414A8C   , :00416350   , :00424930   
|:0042AE01   , :0042AE15   , :00463908   , :00464B43   
|
:00419690 55                      push ebp
:00419691 8BEC                    mov ebp, esp
:00419693 51                      push ecx
:00419694 894DFC                  mov dword ptr [ebp-04], ecx
:00419697 8B45FC                  mov eax, dword ptr [ebp-04]
:0041969A 8A402A                  mov al, byte ptr [eax+2A]
:0041969D 8BE5                    mov esp, ebp
:0041969F 5D                      pop ebp
:004196A0 C3                      ret


:004196A1 CC                      int 03
:004196A2 CC                      int 03
:004196A3 CC                      int 03
:004196A4 CC                      int 03
:004196A5 CC                      int 03
:004196A6 CC                      int 03
:004196A7 CC                      int 03
:004196A8 CC                      int 03
:004196A9 CC                      int 03
:004196AA CC                      int 03
:004196AB CC                      int 03
:004196AC CC                      int 03
:004196AD CC                      int 03
:004196AE CC                      int 03
:004196AF CC                      int 03

* Referenced by a CALL at Addresses:
|:00412F25   , :00414593   , :00414B11   , :004163D5   , :0041FB60   
|:0041FC7B   , :0041FCA1   , :00463988   , :00464BC8   
|
:004196B0 55                      push ebp
:004196B1 8BEC                    mov ebp, esp
:004196B3 51                      push ecx
:004196B4 894DFC                  mov dword ptr [ebp-04], ecx
:004196B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004196BA 8A402B                  mov al, byte ptr [eax+2B]
:004196BD 8BE5                    mov esp, ebp
:004196BF 5D                      pop ebp
:004196C0 C3                      ret


:004196C1 CC                      int 03
:004196C2 CC                      int 03
:004196C3 CC                      int 03
:004196C4 CC                      int 03
:004196C5 CC                      int 03
:004196C6 CC                      int 03
:004196C7 CC                      int 03
:004196C8 CC                      int 03
:004196C9 CC                      int 03
:004196CA CC                      int 03
:004196CB CC                      int 03
:004196CC CC                      int 03
:004196CD CC                      int 03
:004196CE CC                      int 03
:004196CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00413029   , :00414697   , :00414C15   , :004164D9   , :00463A82   
|:00464CCC   
|
:004196D0 55                      push ebp
:004196D1 8BEC                    mov ebp, esp
:004196D3 51                      push ecx
:004196D4 894DFC                  mov dword ptr [ebp-04], ecx
:004196D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004196DA 8A402C                  mov al, byte ptr [eax+2C]
:004196DD 8BE5                    mov esp, ebp
:004196DF 5D                      pop ebp
:004196E0 C3                      ret


:004196E1 CC                      int 03
:004196E2 CC                      int 03
:004196E3 CC                      int 03
:004196E4 CC                      int 03
:004196E5 CC                      int 03
:004196E6 CC                      int 03
:004196E7 CC                      int 03
:004196E8 CC                      int 03
:004196E9 CC                      int 03
:004196EA CC                      int 03
:004196EB CC                      int 03
:004196EC CC                      int 03
:004196ED CC                      int 03
:004196EE CC                      int 03
:004196EF CC                      int 03

* Referenced by a CALL at Addresses:
|:00412C42   , :004142B0   , :0041482E   , :004160F2   , :004636CC   
|:004648E5   
|
:004196F0 55                      push ebp
:004196F1 8BEC                    mov ebp, esp
:004196F3 51                      push ecx
:004196F4 894DFC                  mov dword ptr [ebp-04], ecx
:004196F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004196FA 8A402D                  mov al, byte ptr [eax+2D]
:004196FD 8BE5                    mov esp, ebp
:004196FF 5D                      pop ebp
:00419700 C3                      ret


:00419701 CC                      int 03
:00419702 CC                      int 03
:00419703 CC                      int 03
:00419704 CC                      int 03
:00419705 CC                      int 03
:00419706 CC                      int 03
:00419707 CC                      int 03
:00419708 CC                      int 03
:00419709 CC                      int 03
:0041970A CC                      int 03
:0041970B CC                      int 03
:0041970C CC                      int 03
:0041970D CC                      int 03
:0041970E CC                      int 03
:0041970F CC                      int 03

* Referenced by a CALL at Addresses:
|:00412C8B   , :004142F9   , :00414877   , :0041613B   , :004331E8   
|:00463715   , :0046492E   
|
:00419710 55                      push ebp
:00419711 8BEC                    mov ebp, esp
:00419713 51                      push ecx
:00419714 894DFC                  mov dword ptr [ebp-04], ecx
:00419717 8B45FC                  mov eax, dword ptr [ebp-04]
:0041971A 8A402E                  mov al, byte ptr [eax+2E]
:0041971D 8BE5                    mov esp, ebp
:0041971F 5D                      pop ebp
:00419720 C3                      ret


:00419721 CC                      int 03
:00419722 CC                      int 03
:00419723 CC                      int 03
:00419724 CC                      int 03
:00419725 CC                      int 03
:00419726 CC                      int 03
:00419727 CC                      int 03
:00419728 CC                      int 03
:00419729 CC                      int 03
:0041972A CC                      int 03
:0041972B CC                      int 03
:0041972C CC                      int 03
:0041972D CC                      int 03
:0041972E CC                      int 03
:0041972F CC                      int 03

* Referenced by a CALL at Addresses:
|:00413A02   , :00413C98   , :00416C6C   
|
:00419730 55                      push ebp
:00419731 8BEC                    mov ebp, esp
:00419733 51                      push ecx
:00419734 894DFC                  mov dword ptr [ebp-04], ecx
:00419737 8B4508                  mov eax, dword ptr [ebp+08]
:0041973A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041973D 668B444126              mov ax, word ptr [ecx+2*eax+26]
:00419742 8BE5                    mov esp, ebp
:00419744 5D                      pop ebp
:00419745 C20400                  ret 0004


:00419748 CC                      int 03
:00419749 CC                      int 03
:0041974A CC                      int 03
:0041974B CC                      int 03
:0041974C CC                      int 03
:0041974D CC                      int 03
:0041974E CC                      int 03
:0041974F CC                      int 03

* Referenced by a CALL at Addresses:
|:004173D6   , :0046215A   , :0046217D   , :004621A0   , :0046220B   
|:0046222E   
|
:00419750 55                      push ebp
:00419751 8BEC                    mov ebp, esp
:00419753 51                      push ecx
:00419754 894DFC                  mov dword ptr [ebp-04], ecx
:00419757 8B4508                  mov eax, dword ptr [ebp+08]
:0041975A C1E006                  shl eax, 06
:0041975D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419760 8D540120                lea edx, dword ptr [ecx+eax+20]
:00419764 8B450C                  mov eax, dword ptr [ebp+0C]
:00419767 8B0482                  mov eax, dword ptr [edx+4*eax]
:0041976A 8BE5                    mov esp, ebp
:0041976C 5D                      pop ebp
:0041976D C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004185AA   , :004629EA   , :0046588F   , :0046CF47   
|
:00419770 55                      push ebp
:00419771 8BEC                    mov ebp, esp
:00419773 51                      push ecx
:00419774 894DFC                  mov dword ptr [ebp-04], ecx
:00419777 8B45FC                  mov eax, dword ptr [ebp-04]
:0041977A 8A00                    mov al, byte ptr [eax]
:0041977C 80C9FF                  or cl, FF
:0041977F F6E9                    imul cl
:00419781 8B55FC                  mov edx, dword ptr [ebp-04]
:00419784 8802                    mov byte ptr [edx], al
:00419786 8BE5                    mov esp, ebp
:00419788 5D                      pop ebp
:00419789 C3                      ret


:0041978A CC                      int 03
:0041978B CC                      int 03
:0041978C CC                      int 03
:0041978D CC                      int 03
:0041978E CC                      int 03
:0041978F CC                      int 03

* Referenced by a CALL at Addresses:
|:00418C5D   , :00462AA9   , :00466493   , :0046D0D9   
|
:00419790 55                      push ebp
:00419791 8BEC                    mov ebp, esp
:00419793 51                      push ecx
:00419794 894DFC                  mov dword ptr [ebp-04], ecx
:00419797 8B45FC                  mov eax, dword ptr [ebp-04]
:0041979A 0FBE00                  movsx eax, byte ptr [eax]
:0041979D 8BE5                    mov esp, ebp
:0041979F 5D                      pop ebp
:004197A0 C3                      ret


:004197A1 CC                      int 03
:004197A2 CC                      int 03
:004197A3 CC                      int 03
:004197A4 CC                      int 03
:004197A5 CC                      int 03
:004197A6 CC                      int 03
:004197A7 CC                      int 03
:004197A8 CC                      int 03
:004197A9 CC                      int 03
:004197AA CC                      int 03
:004197AB CC                      int 03
:004197AC CC                      int 03
:004197AD CC                      int 03
:004197AE CC                      int 03
:004197AF CC                      int 03
:004197B0 55                      push ebp
:004197B1 8BEC                    mov ebp, esp
:004197B3 E807000000              call 004197BF
:004197B8 E811000000              call 004197CE
:004197BD 5D                      pop ebp
:004197BE C3                      ret



* Referenced by a CALL at Address:
|:004197B3   
|
:004197BF 55                      push ebp
:004197C0 8BEC                    mov ebp, esp
:004197C2 B928B44800              mov ecx, 0048B428
:004197C7 E8B477FFFF              call 00410F80
:004197CC 5D                      pop ebp
:004197CD C3                      ret



* Referenced by a CALL at Address:
|:004197B8   
|
:004197CE 55                      push ebp
:004197CF 8BEC                    mov ebp, esp
:004197D1 68E0974100              push 004197E0
:004197D6 E8D55C0500              call 0046F4B0
:004197DB 83C404                  add esp, 00000004
:004197DE 5D                      pop ebp
:004197DF C3                      ret


:004197E0 55                      push ebp
:004197E1 8BEC                    mov ebp, esp
:004197E3 B928B44800              mov ecx, 0048B428
:004197E8 E802000000              call 004197EF
:004197ED 5D                      pop ebp
:004197EE C3                      ret



* Referenced by a CALL at Addresses:
|:004106C7   , :004197E8   
|
:004197EF 55                      push ebp
:004197F0 8BEC                    mov ebp, esp
:004197F2 51                      push ecx
:004197F3 894DFC                  mov dword ptr [ebp-04], ecx
:004197F6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004197F9 E8A2000000              call 004198A0
:004197FE 8BE5                    mov esp, ebp
:00419800 5D                      pop ebp
:00419801 C3                      ret



* Referenced by a CALL at Addresses:
|:00411F76   , :0041EF49   , :00430A50   , :00430CD7   , :0044CBE4   
|:0046768C   , :00468603   , :00468777   , :00468CCF   , :00468EBD   
|
:00419802 55                      push ebp
:00419803 8BEC                    mov ebp, esp
:00419805 51                      push ecx
:00419806 894DFC                  mov dword ptr [ebp-04], ecx
:00419809 E848DC0500              call 00477456
:0041980E A1B0554B00              mov eax, dword ptr [004B55B0]
:00419813 50                      push eax
:00419814 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419817 E8AA070000              call 00419FC6
:0041981C 8BE5                    mov esp, ebp
:0041981E 5D                      pop ebp
:0041981F C3                      ret


:00419820 55                      push ebp
:00419821 8BEC                    mov ebp, esp
:00419823 83EC0C                  sub esp, 0000000C
:00419826 894DF4                  mov dword ptr [ebp-0C], ecx
:00419829 8B4508                  mov eax, dword ptr [ebp+08]
:0041982C 8945F8                  mov dword ptr [ebp-08], eax
:0041982F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00419832 894DFC                  mov dword ptr [ebp-04], ecx
:00419835 8D55F8                  lea edx, dword ptr [ebp-08]
:00419838 52                      push edx
:00419839 A1B0554B00              mov eax, dword ptr [004B55B0]
:0041983E 50                      push eax
:0041983F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00419842 E8E3070000              call 0041A02A
:00419847 8BE5                    mov esp, ebp
:00419849 5D                      pop ebp
:0041984A C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00412004   , :0042F600   , :0042F669   , :004309E7   , :00430C83   
|:00430F15   , :0044CF1B   , :0044CFC0   , :0044CFCF   , :0044D05D   
|:0044D5F0   , :004565DF   , :00456653   , :0045D5FC   , :0045E38B   
|:0045E5AC   , :00467842   , :00468673   , :00468764   , :00468CFE   
|
:0041984D 55                      push ebp
:0041984E 8BEC                    mov ebp, esp
:00419850 51                      push ecx
:00419851 894DFC                  mov dword ptr [ebp-04], ecx
:00419854 A1B0554B00              mov eax, dword ptr [004B55B0]
:00419859 50                      push eax
:0041985A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041985D E84C090000              call 0041A1AE
:00419862 8BE5                    mov esp, ebp
:00419864 5D                      pop ebp
:00419865 C3                      ret



* Referenced by a CALL at Addresses:
|:0041E29D   , :0042EFA3   , :0042F783   , :0042F86C   , :00430A5A   
|:00430CE1   , :0044CBEE   , :00467696   , :0046860D   , :00468781   
|:00468CD9   , :00468EC7   
|
:00419866 55                      push ebp
:00419867 8BEC                    mov ebp, esp
:00419869 51                      push ecx
:0041986A 894DFC                  mov dword ptr [ebp-04], ecx
:0041986D 8B45FC                  mov eax, dword ptr [ebp-04]
:00419870 8B4018                  mov eax, dword ptr [eax+18]
:00419873 8BE5                    mov esp, ebp
:00419875 5D                      pop ebp
:00419876 C3                      ret



* Referenced by a CALL at Addresses:
|:0041E2AB   , :0042EFB0   , :0042F790   , :0042F879   , :00430A6A   
|:00430CF1   , :0044CBFE   , :004676A3   , :0046861A   , :0046878E   
|:00468CE6   , :00468ED4   
|
:00419877 55                      push ebp
:00419878 8BEC                    mov ebp, esp
:0041987A 51                      push ecx
:0041987B 894DFC                  mov dword ptr [ebp-04], ecx
:0041987E 8B45FC                  mov eax, dword ptr [ebp-04]
:00419881 8B401C                  mov eax, dword ptr [eax+1C]
:00419884 8BE5                    mov esp, ebp
:00419886 5D                      pop ebp
:00419887 C3                      ret



* Referenced by a CALL at Address:
|:0042F49C   
|
:00419888 55                      push ebp
:00419889 8BEC                    mov ebp, esp
:0041988B 51                      push ecx
:0041988C 894DFC                  mov dword ptr [ebp-04], ecx
:0041988F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419892 E832050000              call 00419DC9
:00419897 B801000000              mov eax, 00000001
:0041989C 8BE5                    mov esp, ebp
:0041989E 5D                      pop ebp
:0041989F C3                      ret



* Referenced by a CALL at Addresses:
|:004197F9   , :0046A535   
|
:004198A0 55                      push ebp
:004198A1 8BEC                    mov ebp, esp
:004198A3 51                      push ecx
:004198A4 894DFC                  mov dword ptr [ebp-04], ecx
:004198A7 6A7B                    push 0000007B
:004198A9 A1A8554B00              mov eax, dword ptr [004B55A8]
:004198AE 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004198AF FF15C8D54B00            Call dword ptr [004BD5C8]
:004198B5 A368B44800              mov dword ptr [0048B468], eax
:004198BA 833D68B4480000          cmp dword ptr [0048B468], 00000000
:004198C1 7507                    jne 004198CA
:004198C3 33C0                    xor eax, eax
:004198C5 E9C3040000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004198C1(C)
|
:004198CA 6A7F                    push 0000007F
:004198CC 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:004198D2 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004198D3 FF15C8D54B00            Call dword ptr [004BD5C8]
:004198D9 A36CB44800              mov dword ptr [0048B46C], eax
:004198DE 833D6CB4480000          cmp dword ptr [0048B46C], 00000000
:004198E5 7507                    jne 004198EE
:004198E7 33C0                    xor eax, eax
:004198E9 E99F040000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004198E5(C)
|
:004198EE 6A79                    push 00000079
:004198F0 8B15A8554B00            mov edx, dword ptr [004B55A8]
:004198F6 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004198F7 FF15C8D54B00            Call dword ptr [004BD5C8]
:004198FD A370B44800              mov dword ptr [0048B470], eax
:00419902 833D70B4480000          cmp dword ptr [0048B470], 00000000
:00419909 7507                    jne 00419912
:0041990B 33C0                    xor eax, eax
:0041990D E97B040000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419909(C)
|
:00419912 6A78                    push 00000078
:00419914 A1A8554B00              mov eax, dword ptr [004B55A8]
:00419919 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0041991A FF15C8D54B00            Call dword ptr [004BD5C8]
:00419920 A374B44800              mov dword ptr [0048B474], eax
:00419925 833D74B4480000          cmp dword ptr [0048B474], 00000000
:0041992C 7507                    jne 00419935
:0041992E 33C0                    xor eax, eax
:00419930 E958040000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041992C(C)
|
:00419935 6A7A                    push 0000007A
:00419937 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0041993D 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0041993E FF15C8D54B00            Call dword ptr [004BD5C8]
:00419944 A378B44800              mov dword ptr [0048B478], eax
:00419949 833D78B4480000          cmp dword ptr [0048B478], 00000000
:00419950 7507                    jne 00419959
:00419952 33C0                    xor eax, eax
:00419954 E934040000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419950(C)
|
:00419959 6A75                    push 00000075
:0041995B 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00419961 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419962 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419968 A37CB44800              mov dword ptr [0048B47C], eax
:0041996D 833D7CB4480000          cmp dword ptr [0048B47C], 00000000
:00419974 7507                    jne 0041997D
:00419976 33C0                    xor eax, eax
:00419978 E910040000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419974(C)
|
:0041997D 6A76                    push 00000076
:0041997F A1A8554B00              mov eax, dword ptr [004B55A8]
:00419984 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419985 FF15C8D54B00            Call dword ptr [004BD5C8]
:0041998B A380B44800              mov dword ptr [0048B480], eax
:00419990 833D80B4480000          cmp dword ptr [0048B480], 00000000
:00419997 7507                    jne 004199A0
:00419999 33C0                    xor eax, eax
:0041999B E9ED030000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419997(C)
|
:004199A0 6A74                    push 00000074
:004199A2 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:004199A8 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004199A9 FF15C8D54B00            Call dword ptr [004BD5C8]
:004199AF A384B44800              mov dword ptr [0048B484], eax
:004199B4 833D84B4480000          cmp dword ptr [0048B484], 00000000
:004199BB 7507                    jne 004199C4
:004199BD 33C0                    xor eax, eax
:004199BF E9C9030000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004199BB(C)
|
:004199C4 6A73                    push 00000073
:004199C6 8B15A8554B00            mov edx, dword ptr [004B55A8]
:004199CC 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004199CD FF15C8D54B00            Call dword ptr [004BD5C8]
:004199D3 A388B44800              mov dword ptr [0048B488], eax
:004199D8 833D88B4480000          cmp dword ptr [0048B488], 00000000
:004199DF 7507                    jne 004199E8
:004199E1 33C0                    xor eax, eax
:004199E3 E9A5030000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004199DF(C)
|
:004199E8 6A77                    push 00000077
:004199EA A1A8554B00              mov eax, dword ptr [004B55A8]
:004199EF 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004199F0 FF15C8D54B00            Call dword ptr [004BD5C8]
:004199F6 A38CB44800              mov dword ptr [0048B48C], eax
:004199FB 833D8CB4480000          cmp dword ptr [0048B48C], 00000000
:00419A02 7507                    jne 00419A0B
:00419A04 33C0                    xor eax, eax
:00419A06 E982030000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419A02(C)
|
:00419A0B 6A7D                    push 0000007D
:00419A0D 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00419A13 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419A14 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419A1A A390B44800              mov dword ptr [0048B490], eax
:00419A1F 833D90B4480000          cmp dword ptr [0048B490], 00000000
:00419A26 7507                    jne 00419A2F
:00419A28 33C0                    xor eax, eax
:00419A2A E95E030000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419A26(C)
|
:00419A2F 6A7E                    push 0000007E
:00419A31 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00419A37 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419A38 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419A3E A394B44800              mov dword ptr [0048B494], eax
:00419A43 833D94B4480000          cmp dword ptr [0048B494], 00000000
:00419A4A 7507                    jne 00419A53
:00419A4C 33C0                    xor eax, eax
:00419A4E E93A030000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419A4A(C)
|
:00419A53 688D000000              push 0000008D
:00419A58 A1A8554B00              mov eax, dword ptr [004B55A8]
:00419A5D 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419A5E FF15C8D54B00            Call dword ptr [004BD5C8]
:00419A64 A398B44800              mov dword ptr [0048B498], eax
:00419A69 833D98B4480000          cmp dword ptr [0048B498], 00000000
:00419A70 7507                    jne 00419A79
:00419A72 33C0                    xor eax, eax
:00419A74 E914030000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419A70(C)
|
:00419A79 688E000000              push 0000008E
:00419A7E 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00419A84 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419A85 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419A8B A39CB44800              mov dword ptr [0048B49C], eax
:00419A90 833D9CB4480000          cmp dword ptr [0048B49C], 00000000
:00419A97 7507                    jne 00419AA0
:00419A99 33C0                    xor eax, eax
:00419A9B E9ED020000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419A97(C)
|
:00419AA0 688F000000              push 0000008F
:00419AA5 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00419AAB 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419AAC FF15C8D54B00            Call dword ptr [004BD5C8]
:00419AB2 A3A0B44800              mov dword ptr [0048B4A0], eax
:00419AB7 833DA0B4480000          cmp dword ptr [0048B4A0], 00000000
:00419ABE 7507                    jne 00419AC7
:00419AC0 33C0                    xor eax, eax
:00419AC2 E9C6020000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419ABE(C)
|
:00419AC7 6890000000              push 00000090
:00419ACC A1A8554B00              mov eax, dword ptr [004B55A8]
:00419AD1 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419AD2 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419AD8 A3A4B44800              mov dword ptr [0048B4A4], eax
:00419ADD 833DA4B4480000          cmp dword ptr [0048B4A4], 00000000
:00419AE4 7507                    jne 00419AED
:00419AE6 33C0                    xor eax, eax
:00419AE8 E9A0020000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419AE4(C)
|
:00419AED 6898000000              push 00000098
:00419AF2 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00419AF8 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419AF9 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419AFF A3A8B44800              mov dword ptr [0048B4A8], eax
:00419B04 833DA8B4480000          cmp dword ptr [0048B4A8], 00000000
:00419B0B 7507                    jne 00419B14
:00419B0D 33C0                    xor eax, eax
:00419B0F E979020000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419B0B(C)
|
:00419B14 6895000000              push 00000095
:00419B19 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00419B1F 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419B20 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419B26 A3ACB44800              mov dword ptr [0048B4AC], eax
:00419B2B 833DACB4480000          cmp dword ptr [0048B4AC], 00000000
:00419B32 7507                    jne 00419B3B
:00419B34 33C0                    xor eax, eax
:00419B36 E952020000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419B32(C)
|
:00419B3B 6896000000              push 00000096
:00419B40 A1A8554B00              mov eax, dword ptr [004B55A8]
:00419B45 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419B46 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419B4C A3B0B44800              mov dword ptr [0048B4B0], eax
:00419B51 833DB0B4480000          cmp dword ptr [0048B4B0], 00000000
:00419B58 7507                    jne 00419B61
:00419B5A 33C0                    xor eax, eax
:00419B5C E92C020000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419B58(C)
|
:00419B61 6897000000              push 00000097
:00419B66 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00419B6C 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419B6D FF15C8D54B00            Call dword ptr [004BD5C8]
:00419B73 A3B4B44800              mov dword ptr [0048B4B4], eax
:00419B78 833DB4B4480000          cmp dword ptr [0048B4B4], 00000000
:00419B7F 7507                    jne 00419B88
:00419B81 33C0                    xor eax, eax
:00419B83 E905020000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419B7F(C)
|
:00419B88 68F1000000              push 000000F1
:00419B8D 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00419B93 52                      push edx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419B94 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419B9A A3B8B44800              mov dword ptr [0048B4B8], eax
:00419B9F 833DB8B4480000          cmp dword ptr [0048B4B8], 00000000
:00419BA6 7507                    jne 00419BAF
:00419BA8 33C0                    xor eax, eax
:00419BAA E9DE010000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419BA6(C)
|
:00419BAF 68F0000000              push 000000F0
:00419BB4 A1A8554B00              mov eax, dword ptr [004B55A8]
:00419BB9 50                      push eax

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419BBA FF15C8D54B00            Call dword ptr [004BD5C8]
:00419BC0 A3BCB44800              mov dword ptr [0048B4BC], eax
:00419BC5 833DBCB4480000          cmp dword ptr [0048B4BC], 00000000
:00419BCC 7507                    jne 00419BD5
:00419BCE 33C0                    xor eax, eax
:00419BD0 E9B8010000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419BCC(C)
|
:00419BD5 68EF000000              push 000000EF
:00419BDA 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00419BE0 51                      push ecx

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419BE1 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419BE7 A3C0B44800              mov dword ptr [0048B4C0], eax
:00419BEC 833DC0B4480000          cmp dword ptr [0048B4C0], 00000000
:00419BF3 7507                    jne 00419BFC
:00419BF5 33C0                    xor eax, eax
:00419BF7 E991010000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419BF3(C)
|
:00419BFC 68007F0000              push 00007F00
:00419C01 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419C03 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419C09 A3C4B44800              mov dword ptr [0048B4C4], eax
:00419C0E 833DC4B4480000          cmp dword ptr [0048B4C4], 00000000
:00419C15 7507                    jne 00419C1E
:00419C17 33C0                    xor eax, eax
:00419C19 E96F010000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419C15(C)
|
:00419C1E 68017F0000              push 00007F01
:00419C23 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419C25 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419C2B A3C8B44800              mov dword ptr [0048B4C8], eax
:00419C30 833DC8B4480000          cmp dword ptr [0048B4C8], 00000000
:00419C37 7507                    jne 00419C40
:00419C39 33C0                    xor eax, eax
:00419C3B E94D010000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419C37(C)
|
:00419C40 68027F0000              push 00007F02
:00419C45 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419C47 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419C4D A3CCB44800              mov dword ptr [0048B4CC], eax
:00419C52 833DCCB4480000          cmp dword ptr [0048B4CC], 00000000
:00419C59 7507                    jne 00419C62
:00419C5B 33C0                    xor eax, eax
:00419C5D E92B010000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419C59(C)
|
:00419C62 68037F0000              push 00007F03
:00419C67 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419C69 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419C6F A3D0B44800              mov dword ptr [0048B4D0], eax
:00419C74 833DD0B4480000          cmp dword ptr [0048B4D0], 00000000
:00419C7B 7507                    jne 00419C84
:00419C7D 33C0                    xor eax, eax
:00419C7F E909010000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419C7B(C)
|
:00419C84 68047F0000              push 00007F04
:00419C89 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419C8B FF15C8D54B00            Call dword ptr [004BD5C8]
:00419C91 A3D4B44800              mov dword ptr [0048B4D4], eax
:00419C96 833DD4B4480000          cmp dword ptr [0048B4D4], 00000000
:00419C9D 7507                    jne 00419CA6
:00419C9F 33C0                    xor eax, eax
:00419CA1 E9E7000000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419C9D(C)
|
:00419CA6 68827F0000              push 00007F82
:00419CAB 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419CAD FF15C8D54B00            Call dword ptr [004BD5C8]
:00419CB3 A3D8B44800              mov dword ptr [0048B4D8], eax
:00419CB8 833DD8B4480000          cmp dword ptr [0048B4D8], 00000000
:00419CBF 7507                    jne 00419CC8
:00419CC1 33C0                    xor eax, eax
:00419CC3 E9C5000000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419CBF(C)
|
:00419CC8 68837F0000              push 00007F83
:00419CCD 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419CCF FF15C8D54B00            Call dword ptr [004BD5C8]
:00419CD5 A3DCB44800              mov dword ptr [0048B4DC], eax
:00419CDA 833DDCB4480000          cmp dword ptr [0048B4DC], 00000000
:00419CE1 7507                    jne 00419CEA
:00419CE3 33C0                    xor eax, eax
:00419CE5 E9A3000000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419CE1(C)
|
:00419CEA 68847F0000              push 00007F84
:00419CEF 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419CF1 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419CF7 A3E0B44800              mov dword ptr [0048B4E0], eax
:00419CFC 833DE0B4480000          cmp dword ptr [0048B4E0], 00000000
:00419D03 7507                    jne 00419D0C
:00419D05 33C0                    xor eax, eax
:00419D07 E981000000              jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D03(C)
|
:00419D0C 68857F0000              push 00007F85
:00419D11 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419D13 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419D19 A3E4B44800              mov dword ptr [0048B4E4], eax
:00419D1E 833DE4B4480000          cmp dword ptr [0048B4E4], 00000000
:00419D25 7504                    jne 00419D2B
:00419D27 33C0                    xor eax, eax
:00419D29 EB62                    jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D25(C)
|
:00419D2B 68867F0000              push 00007F86
:00419D30 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419D32 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419D38 A3E8B44800              mov dword ptr [0048B4E8], eax
:00419D3D 833DE8B4480000          cmp dword ptr [0048B4E8], 00000000
:00419D44 7504                    jne 00419D4A
:00419D46 33C0                    xor eax, eax
:00419D48 EB43                    jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D44(C)
|
:00419D4A 68887F0000              push 00007F88
:00419D4F 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419D51 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419D57 A3ECB44800              mov dword ptr [0048B4EC], eax
:00419D5C 833DECB4480000          cmp dword ptr [0048B4EC], 00000000
:00419D63 7504                    jne 00419D69
:00419D65 33C0                    xor eax, eax
:00419D67 EB24                    jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D63(C)
|
:00419D69 688A7F0000              push 00007F8A
:00419D6E 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00419D70 FF15C8D54B00            Call dword ptr [004BD5C8]
:00419D76 A3F0B44800              mov dword ptr [0048B4F0], eax
:00419D7B 833DF0B4480000          cmp dword ptr [0048B4F0], 00000000
:00419D82 7504                    jne 00419D88
:00419D84 33C0                    xor eax, eax
:00419D86 EB05                    jmp 00419D8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419D82(C)
|
:00419D88 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004198C5(U), :004198E9(U), :0041990D(U), :00419930(U), :00419954(U)
|:00419978(U), :0041999B(U), :004199BF(U), :004199E3(U), :00419A06(U)
|:00419A2A(U), :00419A4E(U), :00419A74(U), :00419A9B(U), :00419AC2(U)
|:00419AE8(U), :00419B0F(U), :00419B36(U), :00419B5C(U), :00419B83(U)
|:00419BAA(U), :00419BD0(U), :00419BF7(U), :00419C19(U), :00419C3B(U)
|:00419C5D(U), :00419C7F(U), :00419CA1(U), :00419CC3(U), :00419CE5(U)
|:00419D07(U), :00419D29(U), :00419D48(U), :00419D67(U), :00419D86(U)
|
:00419D8D 8BE5                    mov esp, ebp
:00419D8F 5D                      pop ebp
:00419D90 C3                      ret



* Referenced by a CALL at Address:
|:0046A5B1   
|
:00419D91 55                      push ebp
:00419D92 8BEC                    mov ebp, esp
:00419D94 83EC08                  sub esp, 00000008
:00419D97 894DF8                  mov dword ptr [ebp-08], ecx
:00419D9A C745FC00000000          mov [ebp-04], 00000000
:00419DA1 EB09                    jmp 00419DAC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419DC3(U)
|
:00419DA3 8B45FC                  mov eax, dword ptr [ebp-04]
:00419DA6 83C001                  add eax, 00000001
:00419DA9 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419DA1(U)
|
:00419DAC 837DFC23                cmp dword ptr [ebp-04], 00000023
:00419DB0 7D13                    jge 00419DC5
:00419DB2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419DB5 8B148D68B44800          mov edx, dword ptr [4*ecx+0048B468]
:00419DBC 52                      push edx

* Reference To: USER32.DestroyCursor, Ord:0087h
                                  |
:00419DBD FF1594D64B00            Call dword ptr [004BD694]
:00419DC3 EBDE                    jmp 00419DA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419DB0(C)
|
:00419DC5 8BE5                    mov esp, ebp
:00419DC7 5D                      pop ebp
:00419DC8 C3                      ret



* Referenced by a CALL at Address:
|:00419892   
|
:00419DC9 55                      push ebp
:00419DCA 8BEC                    mov ebp, esp
:00419DCC 51                      push ecx
:00419DCD 894DFC                  mov dword ptr [ebp-04], ecx
:00419DD0 8B45FC                  mov eax, dword ptr [ebp-04]
:00419DD3 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00419DD9 8908                    mov dword ptr [eax], ecx
:00419DDB 8B55FC                  mov edx, dword ptr [ebp-04]
:00419DDE C7420800000000          mov [edx+08], 00000000
:00419DE5 8B45FC                  mov eax, dword ptr [ebp-04]
:00419DE8 C7400C00000000          mov [eax+0C], 00000000
:00419DEF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419DF2 C7411840010000          mov [ecx+18], 00000140
:00419DF9 8B55FC                  mov edx, dword ptr [ebp-04]
:00419DFC C7421CF0000000          mov [edx+1C], 000000F0
:00419E03 8B45FC                  mov eax, dword ptr [ebp-04]
:00419E06 C7401040010000          mov [eax+10], 00000140
:00419E0D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419E10 C74114F0000000          mov [ecx+14], 000000F0
:00419E17 8B55FC                  mov edx, dword ptr [ebp-04]
:00419E1A 83C210                  add edx, 00000010
:00419E1D 52                      push edx
:00419E1E A1B0554B00              mov eax, dword ptr [004B55B0]
:00419E23 50                      push eax

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:00419E24 FF15D0D64B00            Call dword ptr [004BD6D0]
:00419E2A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419E2D 8B5114                  mov edx, dword ptr [ecx+14]
:00419E30 52                      push edx
:00419E31 8B45FC                  mov eax, dword ptr [ebp-04]
:00419E34 8B4810                  mov ecx, dword ptr [eax+10]
:00419E37 51                      push ecx

* Reference To: USER32.SetCursorPos, Ord:01EEh
                                  |
:00419E38 FF159CD64B00            Call dword ptr [004BD69C]
:00419E3E 8B1568B44800            mov edx, dword ptr [0048B468]
:00419E44 52                      push edx

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:00419E45 FF15CCD54B00            Call dword ptr [004BD5CC]
:00419E4B 8BE5                    mov esp, ebp
:00419E4D 5D                      pop ebp
:00419E4E C3                      ret



* Referenced by a CALL at Addresses:
|:004302D1   , :004302F7   , :00430988   , :00430C70   , :00430ED1   
|:0043189E   , :004686BB   , :0046880A   , :004688DE   , :00468D7C   
|:00468F39   
|
:00419E4F 55                      push ebp
:00419E50 8BEC                    mov ebp, esp
:00419E52 51                      push ecx
:00419E53 894DFC                  mov dword ptr [ebp-04], ecx
:00419E56 8B45FC                  mov eax, dword ptr [ebp-04]
:00419E59 83780800                cmp dword ptr [eax+08], 00000000
:00419E5D 7512                    jne 00419E71
:00419E5F 6A01                    push 00000001

* Reference To: USER32.ShowCursor, Ord:0229h
                                  |
:00419E61 FF1598D64B00            Call dword ptr [004BD698]
:00419E67 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419E6A C7410801000000          mov [ecx+08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419E5D(C)
|
:00419E71 8BE5                    mov esp, ebp
:00419E73 5D                      pop ebp
:00419E74 C3                      ret


:00419E75 55                      push ebp
:00419E76 8BEC                    mov ebp, esp
:00419E78 51                      push ecx
:00419E79 894DFC                  mov dword ptr [ebp-04], ecx
:00419E7C 8B45FC                  mov eax, dword ptr [ebp-04]
:00419E7F 83780800                cmp dword ptr [eax+08], 00000000
:00419E83 7412                    je 00419E97
:00419E85 6A00                    push 00000000

* Reference To: USER32.ShowCursor, Ord:0229h
                                  |
:00419E87 FF1598D64B00            Call dword ptr [004BD698]
:00419E8D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419E90 C7410800000000          mov [ecx+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419E83(C)
|
:00419E97 8BE5                    mov esp, ebp
:00419E99 5D                      pop ebp
:00419E9A C3                      ret



* Referenced by a CALL at Address:
|:00469FC0   
|
:00419E9B 55                      push ebp
:00419E9C 8BEC                    mov ebp, esp
:00419E9E 51                      push ecx
:00419E9F 894DFC                  mov dword ptr [ebp-04], ecx
:00419EA2 8B45FC                  mov eax, dword ptr [ebp-04]
:00419EA5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00419EA8 894804                  mov dword ptr [eax+04], ecx
:00419EAB 8B55FC                  mov edx, dword ptr [ebp-04]
:00419EAE 83C210                  add edx, 00000010
:00419EB1 52                      push edx

* Reference To: USER32.GetCursorPos, Ord:00EDh
                                  |
:00419EB2 FF15A8D64B00            Call dword ptr [004BD6A8]
:00419EB8 8B4510                  mov eax, dword ptr [ebp+10]
:00419EBB 25FFFF0000              and eax, 0000FFFF
:00419EC0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419EC3 894118                  mov dword ptr [ecx+18], eax
:00419EC6 8B5510                  mov edx, dword ptr [ebp+10]
:00419EC9 C1EA10                  shr edx, 10
:00419ECC 81E2FFFF0000            and edx, 0000FFFF
:00419ED2 81E2FFFF0000            and edx, 0000FFFF
:00419ED8 8B45FC                  mov eax, dword ptr [ebp-04]
:00419EDB 89501C                  mov dword ptr [eax+1C], edx
:00419EDE 817D0C01020000          cmp dword ptr [ebp+0C], 00000201
:00419EE5 751B                    jne 00419F02
:00419EE7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419EEA 8B55FC                  mov edx, dword ptr [ebp-04]
:00419EED 8B4228                  mov eax, dword ptr [edx+28]
:00419EF0 89412C                  mov dword ptr [ecx+2C], eax
:00419EF3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419EF6 C7412801000000          mov [ecx+28], 00000001
:00419EFD E9BE000000              jmp 00419FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419EE5(C)
|
:00419F02 817D0C04020000          cmp dword ptr [ebp+0C], 00000204
:00419F09 751B                    jne 00419F26
:00419F0B 8B55FC                  mov edx, dword ptr [ebp-04]
:00419F0E 8B45FC                  mov eax, dword ptr [ebp-04]
:00419F11 8B4834                  mov ecx, dword ptr [eax+34]
:00419F14 894A34                  mov dword ptr [edx+34], ecx
:00419F17 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00419F1A C7423002000000          mov [edx+30], 00000002
:00419F21 E99A000000              jmp 00419FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419F09(C)
|
:00419F26 817D0C03020000          cmp dword ptr [ebp+0C], 00000203
:00419F2D 7518                    jne 00419F47
:00419F2F 8B45FC                  mov eax, dword ptr [ebp-04]
:00419F32 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419F35 8B5128                  mov edx, dword ptr [ecx+28]
:00419F38 89502C                  mov dword ptr [eax+2C], edx
:00419F3B 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00419F3E C7402805000000          mov [eax+28], 00000005
:00419F45 EB79                    jmp 00419FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419F2D(C)
|
:00419F47 817D0C06020000          cmp dword ptr [ebp+0C], 00000206
:00419F4E 7518                    jne 00419F68
:00419F50 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419F53 8B55FC                  mov edx, dword ptr [ebp-04]
:00419F56 8B4230                  mov eax, dword ptr [edx+30]
:00419F59 894134                  mov dword ptr [ecx+34], eax
:00419F5C 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Possible Reference to String Resource ID=00006: ""
                                  |
:00419F5F C7413006000000          mov [ecx+30], 00000006
:00419F66 EB58                    jmp 00419FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419F4E(C)
|
:00419F68 817D0C02020000          cmp dword ptr [ebp+0C], 00000202
:00419F6F 7518                    jne 00419F89
:00419F71 8B55FC                  mov edx, dword ptr [ebp-04]
:00419F74 8B45FC                  mov eax, dword ptr [ebp-04]
:00419F77 8B4828                  mov ecx, dword ptr [eax+28]
:00419F7A 894A2C                  mov dword ptr [edx+2C], ecx
:00419F7D 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00419F80 C7422803000000          mov [edx+28], 00000003
:00419F87 EB37                    jmp 00419FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419F6F(C)
|
:00419F89 817D0C05020000          cmp dword ptr [ebp+0C], 00000205
:00419F90 7518                    jne 00419FAA
:00419F92 8B45FC                  mov eax, dword ptr [ebp-04]
:00419F95 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419F98 8B5130                  mov edx, dword ptr [ecx+30]
:00419F9B 895034                  mov dword ptr [eax+34], edx
:00419F9E 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00419FA1 C7403004000000          mov [eax+30], 00000004
:00419FA8 EB16                    jmp 00419FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419F90(C)
|
:00419FAA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419FAD 8B55FC                  mov edx, dword ptr [ebp-04]
:00419FB0 8B4230                  mov eax, dword ptr [edx+30]
:00419FB3 894134                  mov dword ptr [ecx+34], eax
:00419FB6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00419FB9 C7413000000000          mov [ecx+30], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00419EFD(U), :00419F21(U), :00419F45(U), :00419F66(U), :00419F87(U)
|:00419FA8(U)
|
:00419FC0 8BE5                    mov esp, ebp
:00419FC2 5D                      pop ebp
:00419FC3 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:00419817   , :0041A1ED   , :0041A2F2   , :0041A35D   , :0041A383   
|:0041A465   , :0041A481   , :0046E95A   
|
:00419FC6 55                      push ebp
:00419FC7 8BEC                    mov ebp, esp
:00419FC9 83EC08                  sub esp, 00000008
:00419FCC 894DF8                  mov dword ptr [ebp-08], ecx

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:00419FCF FF1588D64B00            Call dword ptr [004BD688]
:00419FD5 8945FC                  mov dword ptr [ebp-04], eax
:00419FD8 8B4508                  mov eax, dword ptr [ebp+08]
:00419FDB 3B45FC                  cmp eax, dword ptr [ebp-04]
:00419FDE 753E                    jne 0041A01E
:00419FE0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00419FE3 83C110                  add ecx, 00000010
:00419FE6 51                      push ecx

* Reference To: USER32.GetCursorPos, Ord:00EDh
                                  |
:00419FE7 FF15A8D64B00            Call dword ptr [004BD6A8]
:00419FED 8B55F8                  mov edx, dword ptr [ebp-08]
:00419FF0 8B45F8                  mov eax, dword ptr [ebp-08]
:00419FF3 8B4810                  mov ecx, dword ptr [eax+10]
:00419FF6 894A18                  mov dword ptr [edx+18], ecx
:00419FF9 8B55F8                  mov edx, dword ptr [ebp-08]
:00419FFC 8B45F8                  mov eax, dword ptr [ebp-08]
:00419FFF 8B4814                  mov ecx, dword ptr [eax+14]
:0041A002 894A1C                  mov dword ptr [edx+1C], ecx
:0041A005 8B55F8                  mov edx, dword ptr [ebp-08]
:0041A008 83C218                  add edx, 00000018
:0041A00B 52                      push edx
:0041A00C 8B4508                  mov eax, dword ptr [ebp+08]
:0041A00F 50                      push eax

* Reference To: USER32.ScreenToClient, Ord:01D3h
                                  |
:0041A010 FF15A0D64B00            Call dword ptr [004BD6A0]
:0041A016 8B45F8                  mov eax, dword ptr [ebp-08]
:0041A019 83C018                  add eax, 00000018
:0041A01C EB06                    jmp 0041A024

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00419FDE(C)
|
:0041A01E 8B45F8                  mov eax, dword ptr [ebp-08]
:0041A021 83C020                  add eax, 00000020

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A01C(U)
|
:0041A024 8BE5                    mov esp, ebp
:0041A026 5D                      pop ebp
:0041A027 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00419842   
|
:0041A02A 55                      push ebp
:0041A02B 8BEC                    mov ebp, esp
:0041A02D 51                      push ecx
:0041A02E 894DFC                  mov dword ptr [ebp-04], ecx
:0041A031 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A034 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A037 8B11                    mov edx, dword ptr [ecx]
:0041A039 895018                  mov dword ptr [eax+18], edx
:0041A03C 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A03F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A042 8B5104                  mov edx, dword ptr [ecx+04]
:0041A045 89501C                  mov dword ptr [eax+1C], edx
:0041A048 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A04B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A04E 8B5118                  mov edx, dword ptr [ecx+18]
:0041A051 895010                  mov dword ptr [eax+10], edx
:0041A054 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A057 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A05A 8B511C                  mov edx, dword ptr [ecx+1C]
:0041A05D 895014                  mov dword ptr [eax+14], edx
:0041A060 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A063 83C010                  add eax, 00000010
:0041A066 50                      push eax
:0041A067 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A06A 51                      push ecx

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:0041A06B FF15D0D64B00            Call dword ptr [004BD6D0]
:0041A071 8B55FC                  mov edx, dword ptr [ebp-04]
:0041A074 8B4214                  mov eax, dword ptr [edx+14]
:0041A077 50                      push eax
:0041A078 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A07B 8B5110                  mov edx, dword ptr [ecx+10]
:0041A07E 52                      push edx

* Reference To: USER32.SetCursorPos, Ord:01EEh
                                  |
:0041A07F FF159CD64B00            Call dword ptr [004BD69C]
:0041A085 8BE5                    mov esp, ebp
:0041A087 5D                      pop ebp
:0041A088 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0042EFEE   , :0042F048   , :0042F075   , :0042F7E3   , :0042F7F8   
|:0042F8CC   
|
:0041A08B 55                      push ebp
:0041A08C 8BEC                    mov ebp, esp
:0041A08E 51                      push ecx
:0041A08F 894DFC                  mov dword ptr [ebp-04], ecx
:0041A092 837D0C23                cmp dword ptr [ebp+0C], 00000023
:0041A096 7D0B                    jge 0041A0A3
:0041A098 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A09B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A09E 89480C                  mov dword ptr [eax+0C], ecx
:0041A0A1 EB0A                    jmp 0041A0AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A096(C)
|
:0041A0A3 8B55FC                  mov edx, dword ptr [ebp-04]
:0041A0A6 C7420C17000000          mov [edx+0C], 00000017

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A0A1(U)
|
:0041A0AD 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A0B0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A0B3 8908                    mov dword ptr [eax], ecx
:0041A0B5 8BE5                    mov esp, ebp
:0041A0B7 5D                      pop ebp
:0041A0B8 C20800                  ret 0008


:0041A0BB 55                      push ebp
:0041A0BC 8BEC                    mov ebp, esp
:0041A0BE 51                      push ecx
:0041A0BF 894DFC                  mov dword ptr [ebp-04], ecx
:0041A0C2 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A0C5 8B400C                  mov eax, dword ptr [eax+0C]
:0041A0C8 8BE5                    mov esp, ebp
:0041A0CA 5D                      pop ebp
:0041A0CB C3                      ret



* Referenced by a CALL at Addresses:
|:0042EFF8   , :0042F052   , :0042F07F   , :0042F802   , :0042F8D6   
|
:0041A0CC 55                      push ebp
:0041A0CD 8BEC                    mov ebp, esp
:0041A0CF 83EC08                  sub esp, 00000008
:0041A0D2 894DF8                  mov dword ptr [ebp-08], ecx

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:0041A0D5 FF1588D64B00            Call dword ptr [004BD688]
:0041A0DB 8945FC                  mov dword ptr [ebp-04], eax
:0041A0DE 8B45F8                  mov eax, dword ptr [ebp-08]
:0041A0E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A0E4 3B08                    cmp ecx, dword ptr [eax]
:0041A0E6 7514                    jne 0041A0FC
:0041A0E8 8B55F8                  mov edx, dword ptr [ebp-08]
:0041A0EB 8B420C                  mov eax, dword ptr [edx+0C]
:0041A0EE 8B0C8568B44800          mov ecx, dword ptr [4*eax+0048B468]
:0041A0F5 51                      push ecx

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:0041A0F6 FF15CCD54B00            Call dword ptr [004BD5CC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A0E6(C)
|
:0041A0FC 8BE5                    mov esp, ebp
:0041A0FE 5D                      pop ebp
:0041A0FF C3                      ret



* Referenced by a CALL at Addresses:
|:0041A233   , :0041A341   
|
:0041A100 55                      push ebp
:0041A101 8BEC                    mov ebp, esp
:0041A103 51                      push ecx
:0041A104 894DFC                  mov dword ptr [ebp-04], ecx
:0041A107 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A10A 83782801                cmp dword ptr [eax+28], 00000001
:0041A10E 7507                    jne 0041A117
:0041A110 B801000000              mov eax, 00000001
:0041A115 EB02                    jmp 0041A119

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A10E(C)
|
:0041A117 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A115(U)
|
:0041A119 8BE5                    mov esp, ebp
:0041A11B 5D                      pop ebp
:0041A11C C3                      ret



* Referenced by a CALL at Address:
|:0041A27F   
|
:0041A11D 55                      push ebp
:0041A11E 8BEC                    mov ebp, esp
:0041A120 51                      push ecx
:0041A121 894DFC                  mov dword ptr [ebp-04], ecx
:0041A124 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A127 83782803                cmp dword ptr [eax+28], 00000003
:0041A12B 7507                    jne 0041A134
:0041A12D B801000000              mov eax, 00000001
:0041A132 EB02                    jmp 0041A136

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A12B(C)
|
:0041A134 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A132(U)
|
:0041A136 8BE5                    mov esp, ebp
:0041A138 5D                      pop ebp
:0041A139 C3                      ret



* Referenced by a CALL at Addresses:
|:0041A246   , :0041A34B   
|
:0041A13A 55                      push ebp
:0041A13B 8BEC                    mov ebp, esp
:0041A13D 51                      push ecx
:0041A13E 894DFC                  mov dword ptr [ebp-04], ecx
:0041A141 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A144 83783002                cmp dword ptr [eax+30], 00000002
:0041A148 7507                    jne 0041A151
:0041A14A B801000000              mov eax, 00000001
:0041A14F EB02                    jmp 0041A153

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A148(C)
|
:0041A151 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A14F(U)
|
:0041A153 8BE5                    mov esp, ebp
:0041A155 5D                      pop ebp
:0041A156 C3                      ret



* Referenced by a CALL at Address:
|:0041A292   
|
:0041A157 55                      push ebp
:0041A158 8BEC                    mov ebp, esp
:0041A15A 51                      push ecx
:0041A15B 894DFC                  mov dword ptr [ebp-04], ecx
:0041A15E 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A161 83783004                cmp dword ptr [eax+30], 00000004
:0041A165 7507                    jne 0041A16E
:0041A167 B801000000              mov eax, 00000001
:0041A16C EB02                    jmp 0041A170

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A165(C)
|
:0041A16E 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A16C(U)
|
:0041A170 8BE5                    mov esp, ebp
:0041A172 5D                      pop ebp
:0041A173 C3                      ret



* Referenced by a CALL at Addresses:
|:0041A259   , :0041A367   
|
:0041A174 55                      push ebp
:0041A175 8BEC                    mov ebp, esp
:0041A177 51                      push ecx
:0041A178 894DFC                  mov dword ptr [ebp-04], ecx
:0041A17B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A17E 83782805                cmp dword ptr [eax+28], 00000005
:0041A182 7507                    jne 0041A18B
:0041A184 B801000000              mov eax, 00000001
:0041A189 EB02                    jmp 0041A18D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A182(C)
|
:0041A18B 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A189(U)
|
:0041A18D 8BE5                    mov esp, ebp
:0041A18F 5D                      pop ebp
:0041A190 C3                      ret



* Referenced by a CALL at Addresses:
|:0041A26C   , :0041A371   
|
:0041A191 55                      push ebp
:0041A192 8BEC                    mov ebp, esp
:0041A194 51                      push ecx
:0041A195 894DFC                  mov dword ptr [ebp-04], ecx
:0041A198 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A19B 83783006                cmp dword ptr [eax+30], 00000006
:0041A19F 7507                    jne 0041A1A8
:0041A1A1 B801000000              mov eax, 00000001
:0041A1A6 EB02                    jmp 0041A1AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A19F(C)
|
:0041A1A8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A1A6(U)
|
:0041A1AA 8BE5                    mov esp, ebp
:0041A1AC 5D                      pop ebp
:0041A1AD C3                      ret



* Referenced by a CALL at Addresses:
|:00410C8B   , :0041985D   
|
:0041A1AE 55                      push ebp
:0041A1AF 8BEC                    mov ebp, esp
:0041A1B1 83EC18                  sub esp, 00000018
:0041A1B4 894DE8                  mov dword ptr [ebp-18], ecx
:0041A1B7 E89AD20500              call 00477456

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:0041A1BC FF1588D64B00            Call dword ptr [004BD688]
:0041A1C2 8945FC                  mov dword ptr [ebp-04], eax
:0041A1C5 8B4508                  mov eax, dword ptr [ebp+08]
:0041A1C8 3B45FC                  cmp eax, dword ptr [ebp-04]
:0041A1CB 7407                    je 0041A1D4
:0041A1CD 33C0                    xor eax, eax
:0041A1CF E9D0000000              jmp 0041A2A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A1CB(C)
|
:0041A1D4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A1D7 8B5104                  mov edx, dword ptr [ecx+04]
:0041A1DA 3B55FC                  cmp edx, dword ptr [ebp-04]
:0041A1DD 7407                    je 0041A1E6
:0041A1DF 33C0                    xor eax, eax
:0041A1E1 E9BE000000              jmp 0041A2A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A1DD(C)
|
:0041A1E6 8B4508                  mov eax, dword ptr [ebp+08]
:0041A1E9 50                      push eax
:0041A1EA 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A1ED E8D4FDFFFF              call 00419FC6
:0041A1F2 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0041A1F5 51                      push ecx
:0041A1F6 8B5508                  mov edx, dword ptr [ebp+08]
:0041A1F9 52                      push edx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0041A1FA FF15D8D64B00            Call dword ptr [004BD6D8]
:0041A200 8B45E8                  mov eax, dword ptr [ebp-18]
:0041A203 8B4818                  mov ecx, dword ptr [eax+18]
:0041A206 3B4DEC                  cmp ecx, dword ptr [ebp-14]
:0041A209 7C21                    jl 0041A22C
:0041A20B 8B55E8                  mov edx, dword ptr [ebp-18]
:0041A20E 8B421C                  mov eax, dword ptr [edx+1C]
:0041A211 3B45F0                  cmp eax, dword ptr [ebp-10]
:0041A214 7C16                    jl 0041A22C
:0041A216 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A219 8B5118                  mov edx, dword ptr [ecx+18]
:0041A21C 3B55F4                  cmp edx, dword ptr [ebp-0C]
:0041A21F 7F0B                    jg 0041A22C
:0041A221 8B45E8                  mov eax, dword ptr [ebp-18]
:0041A224 8B481C                  mov ecx, dword ptr [eax+1C]
:0041A227 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:0041A22A 7E04                    jle 0041A230

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A209(C), :0041A214(C), :0041A21F(C)
|
:0041A22C 33C0                    xor eax, eax
:0041A22E EB74                    jmp 0041A2A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A22A(C)
|
:0041A230 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A233 E8C8FEFFFF              call 0041A100
:0041A238 85C0                    test eax, eax
:0041A23A 7407                    je 0041A243
:0041A23C B801000000              mov eax, 00000001
:0041A241 EB61                    jmp 0041A2A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A23A(C)
|
:0041A243 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A246 E8EFFEFFFF              call 0041A13A
:0041A24B 85C0                    test eax, eax
:0041A24D 7407                    je 0041A256

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041A24F B802000000              mov eax, 00000002
:0041A254 EB4E                    jmp 0041A2A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A24D(C)
|
:0041A256 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A259 E816FFFFFF              call 0041A174
:0041A25E 85C0                    test eax, eax
:0041A260 7407                    je 0041A269

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0041A262 B805000000              mov eax, 00000005
:0041A267 EB3B                    jmp 0041A2A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A260(C)
|
:0041A269 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A26C E820FFFFFF              call 0041A191
:0041A271 85C0                    test eax, eax
:0041A273 7407                    je 0041A27C

* Possible Reference to String Resource ID=00006: ""
                                  |
:0041A275 B806000000              mov eax, 00000006
:0041A27A EB28                    jmp 0041A2A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A273(C)
|
:0041A27C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A27F E899FEFFFF              call 0041A11D
:0041A284 85C0                    test eax, eax
:0041A286 7407                    je 0041A28F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041A288 B803000000              mov eax, 00000003
:0041A28D EB15                    jmp 0041A2A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A286(C)
|
:0041A28F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A292 E8C0FEFFFF              call 0041A157
:0041A297 85C0                    test eax, eax
:0041A299 7407                    je 0041A2A2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041A29B B804000000              mov eax, 00000004
:0041A2A0 EB02                    jmp 0041A2A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A299(C)
|
:0041A2A2 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A1CF(U), :0041A1E1(U), :0041A22E(U), :0041A241(U), :0041A254(U)
|:0041A267(U), :0041A27A(U), :0041A28D(U), :0041A2A0(U)
|
:0041A2A4 8BE5                    mov esp, ebp
:0041A2A6 5D                      pop ebp
:0041A2A7 C20400                  ret 0004


:0041A2AA 55                      push ebp
:0041A2AB 8BEC                    mov ebp, esp
:0041A2AD 83EC18                  sub esp, 00000018
:0041A2B0 56                      push esi
:0041A2B1 894DE8                  mov dword ptr [ebp-18], ecx
:0041A2B4 E89DD10500              call 00477456

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:0041A2B9 FF1588D64B00            Call dword ptr [004BD688]
:0041A2BF 8945FC                  mov dword ptr [ebp-04], eax
:0041A2C2 8B4508                  mov eax, dword ptr [ebp+08]
:0041A2C5 3B45FC                  cmp eax, dword ptr [ebp-04]
:0041A2C8 740B                    je 0041A2D5
:0041A2CA 8B45E8                  mov eax, dword ptr [ebp-18]
:0041A2CD 83C020                  add eax, 00000020
:0041A2D0 E9BB000000              jmp 0041A390

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A2C8(C)
|
:0041A2D5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A2D8 8B5104                  mov edx, dword ptr [ecx+04]
:0041A2DB 3B55FC                  cmp edx, dword ptr [ebp-04]
:0041A2DE 740B                    je 0041A2EB
:0041A2E0 8B45E8                  mov eax, dword ptr [ebp-18]
:0041A2E3 83C020                  add eax, 00000020
:0041A2E6 E9A5000000              jmp 0041A390

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A2DE(C)
|
:0041A2EB 8B4508                  mov eax, dword ptr [ebp+08]
:0041A2EE 50                      push eax
:0041A2EF 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A2F2 E8CFFCFFFF              call 00419FC6
:0041A2F7 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0041A2FA 51                      push ecx
:0041A2FB 8B5508                  mov edx, dword ptr [ebp+08]
:0041A2FE 52                      push edx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0041A2FF FF15D8D64B00            Call dword ptr [004BD6D8]
:0041A305 8B45E8                  mov eax, dword ptr [ebp-18]
:0041A308 8B4818                  mov ecx, dword ptr [eax+18]
:0041A30B 3B4DEC                  cmp ecx, dword ptr [ebp-14]
:0041A30E 7C21                    jl 0041A331
:0041A310 8B55E8                  mov edx, dword ptr [ebp-18]
:0041A313 8B421C                  mov eax, dword ptr [edx+1C]
:0041A316 3B45F0                  cmp eax, dword ptr [ebp-10]
:0041A319 7C16                    jl 0041A331
:0041A31B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A31E 8B5118                  mov edx, dword ptr [ecx+18]
:0041A321 3B55F4                  cmp edx, dword ptr [ebp-0C]
:0041A324 7F0B                    jg 0041A331
:0041A326 8B45E8                  mov eax, dword ptr [ebp-18]
:0041A329 8B481C                  mov ecx, dword ptr [eax+1C]
:0041A32C 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:0041A32F 7E08                    jle 0041A339

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A30E(C), :0041A319(C), :0041A324(C)
|
:0041A331 8B45E8                  mov eax, dword ptr [ebp-18]
:0041A334 83C020                  add eax, 00000020
:0041A337 EB57                    jmp 0041A390

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A32F(C)
|
:0041A339 E818D10500              call 00477456
:0041A33E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A341 E8BAFDFFFF              call 0041A100
:0041A346 8BF0                    mov esi, eax
:0041A348 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A34B E8EAFDFFFF              call 0041A13A
:0041A350 0BF0                    or esi, eax
:0041A352 85F6                    test esi, esi
:0041A354 740E                    je 0041A364
:0041A356 8B5508                  mov edx, dword ptr [ebp+08]
:0041A359 52                      push edx
:0041A35A 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A35D E864FCFFFF              call 00419FC6
:0041A362 EB2C                    jmp 0041A390

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A354(C)
|
:0041A364 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A367 E808FEFFFF              call 0041A174
:0041A36C 8BF0                    mov esi, eax
:0041A36E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A371 E81BFEFFFF              call 0041A191
:0041A376 0BF0                    or esi, eax
:0041A378 85F6                    test esi, esi
:0041A37A 740E                    je 0041A38A
:0041A37C 8B4508                  mov eax, dword ptr [ebp+08]
:0041A37F 50                      push eax
:0041A380 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041A383 E83EFCFFFF              call 00419FC6
:0041A388 EB06                    jmp 0041A390

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A37A(C)
|
:0041A38A 8B45E8                  mov eax, dword ptr [ebp-18]
:0041A38D 83C020                  add eax, 00000020

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A2D0(U), :0041A2E6(U), :0041A337(U), :0041A362(U), :0041A388(U)
|
:0041A390 5E                      pop esi
:0041A391 8BE5                    mov esp, ebp
:0041A393 5D                      pop ebp
:0041A394 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00411C58   , :0041A508   
|
:0041A397 55                      push ebp
:0041A398 8BEC                    mov ebp, esp
:0041A39A 51                      push ecx
:0041A39B 894DFC                  mov dword ptr [ebp-04], ecx
:0041A39E 8A4508                  mov al, byte ptr [ebp+08]
:0041A3A1 50                      push eax
:0041A3A2 6860090000              push 00000960

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041A3A7 6A04                    push 00000004
:0041A3A9 6A00                    push 00000000
:0041A3AB 68400D0300              push 00030D40
:0041A3B0 B9F0174B00              mov ecx, 004B17F0
:0041A3B5 E8D6EB0500              call 00478F90
:0041A3BA 50                      push eax
:0041A3BB E820E20500              call 004785E0
:0041A3C0 83C40C                  add esp, 0000000C
:0041A3C3 8BE5                    mov esp, ebp
:0041A3C5 5D                      pop ebp
:0041A3C6 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00411D08   , :00411DF3   
|
:0041A3C9 55                      push ebp
:0041A3CA 8BEC                    mov ebp, esp
:0041A3CC 83EC10                  sub esp, 00000010
:0041A3CF 894DF0                  mov dword ptr [ebp-10], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041A3D2 6A04                    push 00000004
:0041A3D4 6A00                    push 00000000
:0041A3D6 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A3D9 6BC050                  imul eax, 00000050
:0041A3DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A3DF 8D9408400D0300          lea edx, dword ptr [eax+ecx+00030D40]
:0041A3E6 52                      push edx
:0041A3E7 B9F0174B00              mov ecx, 004B17F0
:0041A3EC E89FEB0500              call 00478F90
:0041A3F1 8945FC                  mov dword ptr [ebp-04], eax
:0041A3F4 C745F400000000          mov [ebp-0C], 00000000
:0041A3FB EB09                    jmp 0041A406

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A44B(U)
|
:0041A3FD 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041A400 83C001                  add eax, 00000001
:0041A403 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A3FB(U)
|
:0041A406 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041A409 3B4D14                  cmp ecx, dword ptr [ebp+14]
:0041A40C 733F                    jnb 0041A44D
:0041A40E C745F800000000          mov [ebp-08], 00000000
:0041A415 EB09                    jmp 0041A420

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A439(U)
|
:0041A417 8B55F8                  mov edx, dword ptr [ebp-08]
:0041A41A 83C201                  add edx, 00000001
:0041A41D 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A415(U)
|
:0041A420 8B45F8                  mov eax, dword ptr [ebp-08]
:0041A423 3B4510                  cmp eax, dword ptr [ebp+10]
:0041A426 7313                    jnb 0041A43B
:0041A428 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A42B 8A5518                  mov dl, byte ptr [ebp+18]
:0041A42E 8811                    mov byte ptr [ecx], dl
:0041A430 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A433 83C001                  add eax, 00000001
:0041A436 8945FC                  mov dword ptr [ebp-04], eax
:0041A439 EBDC                    jmp 0041A417

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A426(C)
|
:0041A43B B950000000              mov ecx, 00000050
:0041A440 2B4D10                  sub ecx, dword ptr [ebp+10]
:0041A443 8B55FC                  mov edx, dword ptr [ebp-04]
:0041A446 03D1                    add edx, ecx
:0041A448 8955FC                  mov dword ptr [ebp-04], edx
:0041A44B EBB0                    jmp 0041A3FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A40C(C)
|
:0041A44D 8BE5                    mov esp, ebp
:0041A44F 5D                      pop ebp
:0041A450 C21400                  ret 0014



* Referenced by a CALL at Address:
|:00411F80   
|
:0041A453 55                      push ebp
:0041A454 8BEC                    mov ebp, esp
:0041A456 83EC10                  sub esp, 00000010
:0041A459 894DF0                  mov dword ptr [ebp-10], ecx
:0041A45C A1B0554B00              mov eax, dword ptr [004B55B0]
:0041A461 50                      push eax
:0041A462 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041A465 E85CFBFFFF              call 00419FC6
:0041A46A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041A46D 8B10                    mov edx, dword ptr [eax]
:0041A46F 2B5138                  sub edx, dword ptr [ecx+38]
:0041A472 C1EA03                  shr edx, 03
:0041A475 8955F8                  mov dword ptr [ebp-08], edx
:0041A478 A1B0554B00              mov eax, dword ptr [004B55B0]
:0041A47D 50                      push eax
:0041A47E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041A481 E840FBFFFF              call 00419FC6
:0041A486 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041A489 8B5004                  mov edx, dword ptr [eax+04]
:0041A48C 2B513C                  sub edx, dword ptr [ecx+3C]
:0041A48F C1EA04                  shr edx, 04
:0041A492 8955F4                  mov dword ptr [ebp-0C], edx
:0041A495 837DF402                cmp dword ptr [ebp-0C], 00000002
:0041A499 720C                    jb 0041A4A7
:0041A49B 837DF850                cmp dword ptr [ebp-08], 00000050
:0041A49F 7306                    jnb 0041A4A7
:0041A4A1 837DF41B                cmp dword ptr [ebp-0C], 0000001B
:0041A4A5 7604                    jbe 0041A4AB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A499(C), :0041A49F(C)
|
:0041A4A7 0CFF                    or al, FF
:0041A4A9 EB27                    jmp 0041A4D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A4A5(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041A4AB 6A04                    push 00000004
:0041A4AD 6A00                    push 00000000
:0041A4AF 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041A4B2 6BC050                  imul eax, 00000050
:0041A4B5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041A4B8 8D9408400D0300          lea edx, dword ptr [eax+ecx+00030D40]
:0041A4BF 52                      push edx
:0041A4C0 B9F0174B00              mov ecx, 004B17F0
:0041A4C5 E8C6EA0500              call 00478F90
:0041A4CA 8945FC                  mov dword ptr [ebp-04], eax
:0041A4CD 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A4D0 8A00                    mov al, byte ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A4A9(U)
|
:0041A4D2 8BE5                    mov esp, ebp
:0041A4D4 5D                      pop ebp
:0041A4D5 C3                      ret


:0041A4D6 55                      push ebp
:0041A4D7 8BEC                    mov ebp, esp
:0041A4D9 51                      push ecx
:0041A4DA 894DFC                  mov dword ptr [ebp-04], ecx
:0041A4DD 6860090000              push 00000960
:0041A4E2 6860DD4A00              push 004ADD60

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041A4E7 6A04                    push 00000004
:0041A4E9 6A00                    push 00000000
:0041A4EB 68400D0300              push 00030D40
:0041A4F0 B9F0174B00              mov ecx, 004B17F0
:0041A4F5 E896EA0500              call 00478F90
:0041A4FA 50                      push eax
:0041A4FB E8C0E00500              call 004785C0
:0041A500 83C40C                  add esp, 0000000C
:0041A503 6A00                    push 00000000
:0041A505 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A508 E88AFEFFFF              call 0041A397
:0041A50D 8BE5                    mov esp, ebp
:0041A50F 5D                      pop ebp
:0041A510 C3                      ret


:0041A511 55                      push ebp
:0041A512 8BEC                    mov ebp, esp
:0041A514 51                      push ecx
:0041A515 894DFC                  mov dword ptr [ebp-04], ecx
:0041A518 6860090000              push 00000960

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041A51D 6A04                    push 00000004
:0041A51F 6A00                    push 00000000
:0041A521 68400D0300              push 00030D40
:0041A526 B9F0174B00              mov ecx, 004B17F0
:0041A52B E860EA0500              call 00478F90
:0041A530 50                      push eax
:0041A531 6860DD4A00              push 004ADD60
:0041A536 E885E00500              call 004785C0
:0041A53B 83C40C                  add esp, 0000000C
:0041A53E 8BE5                    mov esp, ebp
:0041A540 5D                      pop ebp
:0041A541 C3                      ret


:0041A542 55                      push ebp
:0041A543 8BEC                    mov ebp, esp
:0041A545 51                      push ecx
:0041A546 894DFC                  mov dword ptr [ebp-04], ecx
:0041A549 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A54C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A54F 894838                  mov dword ptr [eax+38], ecx
:0041A552 8B55FC                  mov edx, dword ptr [ebp-04]
:0041A555 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A558 89423C                  mov dword ptr [edx+3C], eax
:0041A55B 8BE5                    mov esp, ebp
:0041A55D 5D                      pop ebp
:0041A55E C20800                  ret 0008


:0041A561 CC                      int 03
:0041A562 CC                      int 03
:0041A563 CC                      int 03
:0041A564 CC                      int 03
:0041A565 CC                      int 03
:0041A566 CC                      int 03
:0041A567 CC                      int 03
:0041A568 CC                      int 03
:0041A569 CC                      int 03
:0041A56A CC                      int 03
:0041A56B CC                      int 03
:0041A56C CC                      int 03
:0041A56D CC                      int 03
:0041A56E CC                      int 03
:0041A56F CC                      int 03
:0041A570 55                      push ebp
:0041A571 8BEC                    mov ebp, esp
:0041A573 E807000000              call 0041A57F
:0041A578 E81F000000              call 0041A59C
:0041A57D 5D                      pop ebp
:0041A57E C3                      ret



* Referenced by a CALL at Address:
|:0041A573   
|
:0041A57F 55                      push ebp
:0041A580 8BEC                    mov ebp, esp
:0041A582 6800EA4200              push 0042EA00
:0041A587 6850F14100              push 0041F150

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0041A58C 6A08                    push 00000008
:0041A58E 6A0E                    push 0000000E
:0041A590 68A0034900              push 004903A0
:0041A595 E836560500              call 0046FBD0
:0041A59A 5D                      pop ebp
:0041A59B C3                      ret



* Referenced by a CALL at Address:
|:0041A578   
|
:0041A59C 55                      push ebp
:0041A59D 8BEC                    mov ebp, esp
:0041A59F 68AEA54100              push 0041A5AE
:0041A5A4 E8074F0500              call 0046F4B0
:0041A5A9 83C404                  add esp, 00000004
:0041A5AC 5D                      pop ebp
:0041A5AD C3                      ret


:0041A5AE 55                      push ebp
:0041A5AF 8BEC                    mov ebp, esp
:0041A5B1 6800EA4200              push 0042EA00

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0041A5B6 6A08                    push 00000008
:0041A5B8 6A0E                    push 0000000E
:0041A5BA 68A0034900              push 004903A0
:0041A5BF E8AC560500              call 0046FC70
:0041A5C4 5D                      pop ebp
:0041A5C5 C3                      ret


:0041A5C6 55                      push ebp
:0041A5C7 8BEC                    mov ebp, esp
:0041A5C9 E807000000              call 0041A5D5
:0041A5CE E811000000              call 0041A5E4
:0041A5D3 5D                      pop ebp
:0041A5D4 C3                      ret



* Referenced by a CALL at Address:
|:0041A5C9   
|
:0041A5D5 55                      push ebp
:0041A5D6 8BEC                    mov ebp, esp
:0041A5D8 B9B0454900              mov ecx, 004945B0
:0041A5DD E85E4C0000              call 0041F240
:0041A5E2 5D                      pop ebp
:0041A5E3 C3                      ret



* Referenced by a CALL at Address:
|:0041A5CE   
|
:0041A5E4 55                      push ebp
:0041A5E5 8BEC                    mov ebp, esp
:0041A5E7 68F6A54100              push 0041A5F6
:0041A5EC E8BF4E0500              call 0046F4B0
:0041A5F1 83C404                  add esp, 00000004
:0041A5F4 5D                      pop ebp
:0041A5F5 C3                      ret


:0041A5F6 55                      push ebp
:0041A5F7 8BEC                    mov ebp, esp
:0041A5F9 B9B0454900              mov ecx, 004945B0
:0041A5FE E80D060400              call 0045AC10
:0041A603 5D                      pop ebp
:0041A604 C3                      ret


:0041A605 55                      push ebp
:0041A606 8BEC                    mov ebp, esp
:0041A608 E807000000              call 0041A614
:0041A60D E822000000              call 0041A634
:0041A612 5D                      pop ebp
:0041A613 C3                      ret



* Referenced by a CALL at Address:
|:0041A608   
|
:0041A614 55                      push ebp
:0041A615 8BEC                    mov ebp, esp
:0041A617 6800EA4200              push 0042EA00
:0041A61C 68B0F24100              push 0041F2B0
:0041A621 6881000000              push 00000081
:0041A626 6A40                    push 00000040
:0041A628 6810044900              push 00490410
:0041A62D E89E550500              call 0046FBD0
:0041A632 5D                      pop ebp
:0041A633 C3                      ret



* Referenced by a CALL at Address:
|:0041A60D   
|
:0041A634 55                      push ebp
:0041A635 8BEC                    mov ebp, esp
:0041A637 6846A64100              push 0041A646
:0041A63C E86F4E0500              call 0046F4B0
:0041A641 83C404                  add esp, 00000004
:0041A644 5D                      pop ebp
:0041A645 C3                      ret


:0041A646 55                      push ebp
:0041A647 8BEC                    mov ebp, esp
:0041A649 6800EA4200              push 0042EA00
:0041A64E 6881000000              push 00000081
:0041A653 6A40                    push 00000040
:0041A655 6810044900              push 00490410
:0041A65A E811560500              call 0046FC70
:0041A65F 5D                      pop ebp
:0041A660 C3                      ret



* Referenced by a CALL at Addresses:
|:0041E76E   , :0041F338   
|
:0041A661 55                      push ebp
:0041A662 8BEC                    mov ebp, esp
:0041A664 8B4508                  mov eax, dword ptr [ebp+08]
:0041A667 25FFFF0000              and eax, 0000FFFF
:0041A66C 6BC009                  imul eax, 00000009
:0041A66F 0550CA4700              add eax, 0047CA50
:0041A674 5D                      pop ebp
:0041A675 C3                      ret



* Referenced by a CALL at Addresses:
|:0041D5B3   , :0041D91A   , :0041E440   
|
:0041A676 55                      push ebp
:0041A677 8BEC                    mov ebp, esp
:0041A679 837D0800                cmp dword ptr [ebp+08], 00000000
:0041A67D 7507                    jne 0041A686
:0041A67F B801000000              mov eax, 00000001
:0041A684 EB1D                    jmp 0041A6A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A67D(C)
|
:0041A686 837D0802                cmp dword ptr [ebp+08], 00000002
:0041A68A 7515                    jne 0041A6A1
:0041A68C 6A00                    push 00000000
:0041A68E E8FD37FFFF              call 0040DE90
:0041A693 83C404                  add esp, 00000004
:0041A696 85C0                    test eax, eax
:0041A698 7507                    jne 0041A6A1
:0041A69A B801000000              mov eax, 00000001
:0041A69F EB02                    jmp 0041A6A3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A68A(C), :0041A698(C)
|
:0041A6A1 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A684(U), :0041A69F(U)
|
:0041A6A3 5D                      pop ebp
:0041A6A4 C3                      ret



* Referenced by a CALL at Addresses:
|:0041D5C3   , :0041D6E7   
|
:0041A6A5 55                      push ebp
:0041A6A6 8BEC                    mov ebp, esp
:0041A6A8 8B4508                  mov eax, dword ptr [ebp+08]
:0041A6AB 2D10044900              sub eax, 00490410
:0041A6B0 C1F806                  sar eax, 06
:0041A6B3 5D                      pop ebp
:0041A6B4 C3                      ret



* Referenced by a CALL at Addresses:
|:0041D467   , :0041DF8D   , :0041E324   , :0041EDFF   
|
:0041A6B5 55                      push ebp
:0041A6B6 8BEC                    mov ebp, esp
:0041A6B8 8B4508                  mov eax, dword ptr [ebp+08]
:0041A6BB 25FFFF0000              and eax, 0000FFFF
:0041A6C0 2500F00000              and eax, 0000F000
:0041A6C5 5D                      pop ebp
:0041A6C6 C3                      ret



* Referenced by a CALL at Addresses:
|:0041D5A5   , :0041D90C   , :0041DF7C   , :0041E432   
|
:0041A6C7 55                      push ebp
:0041A6C8 8BEC                    mov ebp, esp
:0041A6CA 8B4508                  mov eax, dword ptr [ebp+08]
:0041A6CD 25FFFF0000              and eax, 0000FFFF
:0041A6D2 80E40F                  and ah, 0F
:0041A6D5 5D                      pop ebp
:0041A6D6 C3                      ret



* Referenced by a CALL at Address:
|:0041D868   
|
:0041A6D7 55                      push ebp
:0041A6D8 8BEC                    mov ebp, esp
:0041A6DA 83EC0C                  sub esp, 0000000C
:0041A6DD 8B4508                  mov eax, dword ptr [ebp+08]
:0041A6E0 25FFFF0000              and eax, 0000FFFF
:0041A6E5 2500F00000              and eax, 0000F000
:0041A6EA 668945F8                mov word ptr [ebp-08], ax
:0041A6EE 668B4D08                mov cx, word ptr [ebp+08]
:0041A6F2 6681E1FF0F              and cx, 0FFF
:0041A6F7 66894D08                mov word ptr [ebp+08], cx
:0041A6FB C745FCB0454900          mov [ebp-04], 004945B0
:0041A702 8B55F8                  mov edx, dword ptr [ebp-08]
:0041A705 81E2FFFF0000            and edx, 0000FFFF
:0041A70B 8955F4                  mov dword ptr [ebp-0C], edx
:0041A70E 817DF400100000          cmp dword ptr [ebp-0C], 00001000
:0041A715 740B                    je 0041A722
:0041A717 817DF400200000          cmp dword ptr [ebp-0C], 00002000
:0041A71E 7402                    je 0041A722
:0041A720 EB14                    jmp 0041A736

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A715(C), :0041A71E(C)
|
:0041A722 8B4508                  mov eax, dword ptr [ebp+08]
:0041A725 25FFFF0000              and eax, 0000FFFF
:0041A72A 50                      push eax
:0041A72B E83BA3FEFF              call 00404A6B
:0041A730 83C404                  add esp, 00000004
:0041A733 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A720(U)
|
:0041A736 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A739 8BE5                    mov esp, ebp
:0041A73B 5D                      pop ebp
:0041A73C C3                      ret



* Referenced by a CALL at Addresses:
|:0041E40E   , :0041E420   
|
:0041A73D 55                      push ebp
:0041A73E 8BEC                    mov ebp, esp
:0041A740 83EC08                  sub esp, 00000008
:0041A743 8B4508                  mov eax, dword ptr [ebp+08]
:0041A746 25FFFF0000              and eax, 0000FFFF
:0041A74B 2500F00000              and eax, 0000F000
:0041A750 668945FC                mov word ptr [ebp-04], ax
:0041A754 668B4D08                mov cx, word ptr [ebp+08]
:0041A758 6681E1FF0F              and cx, 0FFF
:0041A75D 66894D08                mov word ptr [ebp+08], cx
:0041A761 8B55FC                  mov edx, dword ptr [ebp-04]
:0041A764 81E2FFFF0000            and edx, 0000FFFF
:0041A76A 8955F8                  mov dword ptr [ebp-08], edx
:0041A76D 817DF800100000          cmp dword ptr [ebp-08], 00001000
:0041A774 740B                    je 0041A781
:0041A776 817DF800200000          cmp dword ptr [ebp-08], 00002000
:0041A77D 7402                    je 0041A781
:0041A77F EB1A                    jmp 0041A79B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A774(C), :0041A77D(C)
|
:0041A781 8B4508                  mov eax, dword ptr [ebp+08]
:0041A784 25FFFF0000              and eax, 0000FFFF
:0041A789 50                      push eax
:0041A78A E8DCA2FEFF              call 00404A6B
:0041A78F 83C404                  add esp, 00000004
:0041A792 8BC8                    mov ecx, eax
:0041A794 E86B89FEFF              call 00403104
:0041A799 EB0A                    jmp 0041A7A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A77F(U)
|
:0041A79B B9B0454900              mov ecx, 004945B0
:0041A7A0 E8EB4A0000              call 0041F290

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A799(U)
|
:0041A7A5 8BE5                    mov esp, ebp
:0041A7A7 5D                      pop ebp
:0041A7A8 C3                      ret


:0041A7A9 55                      push ebp
:0041A7AA 8BEC                    mov ebp, esp
:0041A7AC 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A7AF 33D2                    xor edx, edx
:0041A7B1 F77508                  div [ebp+08]
:0041A7B4 85D2                    test edx, edx
:0041A7B6 7413                    je 0041A7CB
:0041A7B8 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A7BB 33D2                    xor edx, edx
:0041A7BD F77508                  div [ebp+08]
:0041A7C0 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A7C3 2BC2                    sub eax, edx
:0041A7C5 034508                  add eax, dword ptr [ebp+08]
:0041A7C8 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A7B6(C)
|
:0041A7CB 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A7CE 5D                      pop ebp
:0041A7CF C3                      ret


:0041A7D0 55                      push ebp
:0041A7D1 8BEC                    mov ebp, esp
:0041A7D3 56                      push esi
:0041A7D4 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A7D7 25FFFF0000              and eax, 0000FFFF
:0041A7DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A7DF 81E1FFFF0000            and ecx, 0000FFFF
:0041A7E5 99                      cdq
:0041A7E6 F7F9                    idiv ecx
:0041A7E8 85D2                    test edx, edx
:0041A7EA 742E                    je 0041A81A
:0041A7EC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A7EF 81E1FFFF0000            and ecx, 0000FFFF
:0041A7F5 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A7F8 25FFFF0000              and eax, 0000FFFF
:0041A7FD 8B7508                  mov esi, dword ptr [ebp+08]
:0041A800 81E6FFFF0000            and esi, 0000FFFF
:0041A806 99                      cdq
:0041A807 F7FE                    idiv esi
:0041A809 2BCA                    sub ecx, edx
:0041A80B 8B5508                  mov edx, dword ptr [ebp+08]
:0041A80E 81E2FFFF0000            and edx, 0000FFFF
:0041A814 03CA                    add ecx, edx
:0041A816 66894D0C                mov word ptr [ebp+0C], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A7EA(C)
|
:0041A81A 668B450C                mov ax, word ptr [ebp+0C]
:0041A81E 5E                      pop esi
:0041A81F 5D                      pop ebp
:0041A820 C3                      ret


:0041A821 55                      push ebp
:0041A822 8BEC                    mov ebp, esp
:0041A824 56                      push esi
:0041A825 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A828 25FFFF0000              and eax, 0000FFFF
:0041A82D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A830 81E1FFFF0000            and ecx, 0000FFFF
:0041A836 99                      cdq
:0041A837 F7F9                    idiv ecx
:0041A839 85D2                    test edx, edx
:0041A83B 7423                    je 0041A860
:0041A83D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041A840 81E1FFFF0000            and ecx, 0000FFFF
:0041A846 8B450C                  mov eax, dword ptr [ebp+0C]
:0041A849 25FFFF0000              and eax, 0000FFFF
:0041A84E 8B7508                  mov esi, dword ptr [ebp+08]
:0041A851 81E6FFFF0000            and esi, 0000FFFF
:0041A857 99                      cdq
:0041A858 F7FE                    idiv esi
:0041A85A 2BCA                    sub ecx, edx
:0041A85C 66894D0C                mov word ptr [ebp+0C], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A83B(C)
|
:0041A860 668B450C                mov ax, word ptr [ebp+0C]
:0041A864 5E                      pop esi
:0041A865 5D                      pop ebp
:0041A866 C3                      ret



* Referenced by a CALL at Addresses:
|:0041A9ED   , :0041A9FE   , :0041B156   , :0041CE90   
|
:0041A867 55                      push ebp
:0041A868 8BEC                    mov ebp, esp
:0041A86A 51                      push ecx
:0041A86B C745FC00000000          mov [ebp-04], 00000000
:0041A872 EB09                    jmp 0041A87D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A896(U)
|
:0041A874 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A877 83C001                  add eax, 00000001
:0041A87A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A872(U)
|
:0041A87D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A880 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:0041A883 7313                    jnb 0041A898
:0041A885 8B5508                  mov edx, dword ptr [ebp+08]
:0041A888 8A4510                  mov al, byte ptr [ebp+10]
:0041A88B 8802                    mov byte ptr [edx], al
:0041A88D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A890 83C101                  add ecx, 00000001
:0041A893 894D08                  mov dword ptr [ebp+08], ecx
:0041A896 EBDC                    jmp 0041A874

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A883(C)
|
:0041A898 8BE5                    mov esp, ebp
:0041A89A 5D                      pop ebp
:0041A89B C3                      ret



* Referenced by a CALL at Addresses:
|:0041C7E5   , :0041CED4   
|
:0041A89C 55                      push ebp
:0041A89D 8BEC                    mov ebp, esp
:0041A89F 51                      push ecx
:0041A8A0 C745FC00000000          mov [ebp-04], 00000000
:0041A8A7 EB09                    jmp 0041A8B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A8CD(U)
|
:0041A8A9 8B45FC                  mov eax, dword ptr [ebp-04]
:0041A8AC 83C001                  add eax, 00000001
:0041A8AF 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A8A7(U)
|
:0041A8B2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A8B5 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:0041A8B8 7315                    jnb 0041A8CF
:0041A8BA 8B5508                  mov edx, dword ptr [ebp+08]
:0041A8BD 668B4510                mov ax, word ptr [ebp+10]
:0041A8C1 668902                  mov word ptr [edx], ax
:0041A8C4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A8C7 83C102                  add ecx, 00000002
:0041A8CA 894D08                  mov dword ptr [ebp+08], ecx
:0041A8CD EBDA                    jmp 0041A8A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A8B8(C)
|
:0041A8CF 8BE5                    mov esp, ebp
:0041A8D1 5D                      pop ebp
:0041A8D2 C3                      ret



* Referenced by a CALL at Addresses:
|:0041A912   , :0041AB69   , :0041ABD9   , :0041B258   , :0041CC8F   
|:0041D344   , :0041D3B0   , :0041D47B   , :0041D4DB   , :0041D8CE   
|:0041DB4B   , :0041DBBF   , :0041DDD6   , :0041DEF1   , :0041E0F2   
|:0041E1CB   , :0041E46E   , :0041ED17   , :0041ED7F   , :0041EE95   
|
:0041A8D3 55                      push ebp
:0041A8D4 8BEC                    mov ebp, esp
:0041A8D6 8B4508                  mov eax, dword ptr [ebp+08]
:0041A8D9 25FFFF0000              and eax, 0000FFFF
:0041A8DE C1E006                  shl eax, 06
:0041A8E1 0510044900              add eax, 00490410
:0041A8E6 5D                      pop ebp
:0041A8E7 C3                      ret



* Referenced by a CALL at Addresses:
|:0041C609   , :0041C645   , :0041C672   , :0041CC9A   , :0041CE3A   
|:0041DE2E   
|
:0041A8E8 55                      push ebp
:0041A8E9 8BEC                    mov ebp, esp
:0041A8EB 51                      push ecx
:0041A8EC 66A190034900            mov ax, word ptr [00490390]
:0041A8F2 668945FC                mov word ptr [ebp-04], ax
:0041A8F6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A8F9 81E1FFFF0000            and ecx, 0000FFFF
:0041A8FF 81F9FFFF0000            cmp ecx, 0000FFFF
:0041A905 7506                    jne 0041A90D
:0041A907 66C745FC8000            mov [ebp-04], 0080

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A905(C)
|
:0041A90D 668B55FC                mov dx, word ptr [ebp-04]
:0041A911 52                      push edx
:0041A912 E8BCFFFFFF              call 0041A8D3
:0041A917 83C404                  add esp, 00000004
:0041A91A 8BE5                    mov esp, ebp
:0041A91C 5D                      pop ebp
:0041A91D C3                      ret



* Referenced by a CALL at Addresses:
|:0041CDF9   , :0041CE21   , :0041DD4B   
|
:0041A91E 55                      push ebp
:0041A91F 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:0041A921 6800040000              push 00000400
:0041A926 6A00                    push 00000000
:0041A928 A1B0554B00              mov eax, dword ptr [004B55B0]
:0041A92D 50                      push eax

* Reference To: USER32.GetMenu, Ord:0109h
                                  |
:0041A92E FF158CD64B00            Call dword ptr [004BD68C]
:0041A934 50                      push eax

* Reference To: USER32.GetMenuState, Ord:0112h
                                  |
:0041A935 FF1590D64B00            Call dword ptr [004BD690]
:0041A93B 83E001                  and eax, 00000001
:0041A93E 85C0                    test eax, eax
:0041A940 740A                    je 0041A94C
:0041A942 837D0800                cmp dword ptr [ebp+08], 00000000
:0041A946 7502                    jne 0041A94A
:0041A948 EB16                    jmp 0041A960

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A946(C)
|
:0041A94A EB08                    jmp 0041A954

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A940(C)
|
:0041A94C 837D0801                cmp dword ptr [ebp+08], 00000001
:0041A950 7502                    jne 0041A954
:0041A952 EB0C                    jmp 0041A960

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A94A(U), :0041A950(C)
|
:0041A954 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041A957 51                      push ecx
:0041A958 E8DEFC0400              call 0046A63B
:0041A95D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041A948(U), :0041A952(U)
|
:0041A960 5D                      pop ebp
:0041A961 C3                      ret



* Referenced by a CALL at Addresses:
|:0041AE7C   , :0041AE9C   , :0041AEBC   , :0041AEDC   , :0041AEEE   
|:0041AF0C   , :0041B0CD   , :0041B17D   , :0041B1B1   , :0041B1E5   
|:0041BFFB   , :0041C022   , :0041C041   , :0041C060   , :0041C128   
|:0041C80A   
|
:0041A962 55                      push ebp
:0041A963 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041A965 6A04                    push 00000004
:0041A967 6A00                    push 00000000
:0041A969 8B4508                  mov eax, dword ptr [ebp+08]
:0041A96C 25FFFF0000              and eax, 0000FFFF
:0041A971 50                      push eax
:0041A972 B9881C4B00              mov ecx, 004B1C88
:0041A977 E814E60500              call 00478F90
:0041A97C 668B00                  mov ax, word ptr [eax]
:0041A97F 5D                      pop ebp
:0041A980 C3                      ret



* Referenced by a CALL at Addresses:
|:00409FA0   , :0041AA06   
|
:0041A981 55                      push ebp
:0041A982 8BEC                    mov ebp, esp
:0041A984 83EC08                  sub esp, 00000008
:0041A987 C745FC10044900          mov [ebp-04], 00490410
:0041A98E 66C745F80000            mov [ebp-08], 0000
:0041A994 EB15                    jmp 0041A9AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A9D8(U)
|
:0041A996 668B45F8                mov ax, word ptr [ebp-08]
:0041A99A 66050100                add ax, 0001
:0041A99E 668945F8                mov word ptr [ebp-08], ax
:0041A9A2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A9A5 83C140                  add ecx, 00000040
:0041A9A8 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A994(U)
|
:0041A9AB 8B55F8                  mov edx, dword ptr [ebp-08]
:0041A9AE 81E2FFFF0000            and edx, 0000FFFF
:0041A9B4 81FA80000000            cmp edx, 00000080
:0041A9BA 7D1E                    jge 0041A9DA
:0041A9BC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A9BF E82C4A0000              call 0041F3F0
:0041A9C4 6A00                    push 00000000
:0041A9C6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A9C9 E8024E0000              call 0041F7D0
:0041A9CE 6A00                    push 00000000
:0041A9D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041A9D3 E8A84C0000              call 0041F680
:0041A9D8 EBBC                    jmp 0041A996

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041A9BA(C)
|
:0041A9DA 8BE5                    mov esp, ebp
:0041A9DC 5D                      pop ebp
:0041A9DD C3                      ret



* Referenced by a CALL at Addresses:
|:0040E577   , :0040FC97   , :0046CC6C   
|
:0041A9DE 55                      push ebp
:0041A9DF 8BEC                    mov ebp, esp
:0041A9E1 68FF000000              push 000000FF
:0041A9E6 6A18                    push 00000018
:0041A9E8 6858244900              push 00492458
:0041A9ED E875FEFFFF              call 0041A867
:0041A9F2 83C40C                  add esp, 0000000C
:0041A9F5 6A00                    push 00000000
:0041A9F7 6A18                    push 00000018
:0041A9F9 6808B54800              push 0048B508
:0041A9FE E864FEFFFF              call 0041A867
:0041AA03 83C40C                  add esp, 0000000C
:0041AA06 E876FFFFFF              call 0041A981
:0041AA0B 66C70590034900FFFF      mov word ptr [00490390], FFFF
:0041AA14 5D                      pop ebp
:0041AA15 C3                      ret



* Referenced by a CALL at Address:
|:0041AC47   
|
:0041AA16 55                      push ebp
:0041AA17 8BEC                    mov ebp, esp
:0041AA19 6AFF                    push FFFFFFFF
:0041AA1B 685C964700              push 0047965C
:0041AA20 64A100000000            mov eax, dword ptr fs:[00000000]
:0041AA26 50                      push eax
:0041AA27 64892500000000          mov dword ptr fs:[00000000], esp
:0041AA2E 81EC10010000            sub esp, 00000110
:0041AA34 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0041AA3A E801ACFEFF              call 00405640
:0041AA3F C745FC00000000          mov [ebp-04], 00000000
:0041AA46 8B4508                  mov eax, dword ptr [ebp+08]
:0041AA49 25FFFF0000              and eax, 0000FFFF
:0041AA4E D1E0                    shl eax, 1
:0041AA50 668985E8FEFFFF          mov word ptr [ebp+FFFFFEE8], ax
:0041AA57 C70564D44700FFFF0000    mov dword ptr [0047D464], 0000FFFF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041AA61 6A04                    push 00000004
:0041AA63 6A00                    push 00000000
:0041AA65 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041AA68 81E1FFFF0000            and ecx, 0000FFFF
:0041AA6E 6BC930                  imul ecx, 00000030
:0041AA71 C1E106                  shl ecx, 06
:0041AA74 6BC938                  imul ecx, 00000038
:0041AA77 51                      push ecx
:0041AA78 B9C0174B00              mov ecx, 004B17C0
:0041AA7D E80EE50500              call 00478F90
:0041AA82 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:0041AA88 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0041AA8E 81C200500100            add edx, 00015000
:0041AA94 8955F0                  mov dword ptr [ebp-10], edx

* Possible StringData Ref from Data Obj ->"PMAPOBJ.E3"
                                  |
:0041AA97 6810D54700              push 0047D510
:0041AA9C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0041AAA2 E82E67FFFF              call 004111D5
:0041AAA7 8B45F0                  mov eax, dword ptr [ebp-10]
:0041AAAA 50                      push eax
:0041AAAB 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:0041AAB1 81E1FFFF0000            and ecx, 0000FFFF
:0041AAB7 51                      push ecx
:0041AAB8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0041AABE E86668FFFF              call 00411329
:0041AAC3 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0041AAC9 52                      push edx
:0041AACA 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0041AAD0 25FFFF0000              and eax, 0000FFFF
:0041AAD5 83C001                  add eax, 00000001
:0041AAD8 50                      push eax
:0041AAD9 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0041AADF E84568FFFF              call 00411329
:0041AAE4 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0041AAEA E83631FFFF              call 0040DC25
:0041AAEF 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0041AAF5 81C100F80100            add ecx, 0001F800
:0041AAFB 51                      push ecx
:0041AAFC 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0041AB02 52                      push edx
:0041AB03 6880030000              push 00000380
:0041AB08 6A30                    push 00000030
:0041AB0A E85F5AFFFF              call 0041056E
:0041AB0F 83C410                  add esp, 00000010
:0041AB12 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0041AB18 0500A80000              add eax, 0000A800
:0041AB1D 50                      push eax
:0041AB1E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041AB21 51                      push ecx
:0041AB22 6880030000              push 00000380
:0041AB27 6A30                    push 00000030
:0041AB29 E8405AFFFF              call 0041056E
:0041AB2E 83C410                  add esp, 00000010
:0041AB31 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0041AB38 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0041AB3E E81DABFEFF              call 00405660
:0041AB43 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041AB46 64890D00000000          mov dword ptr fs:[00000000], ecx
:0041AB4D 8BE5                    mov esp, ebp
:0041AB4F 5D                      pop ebp
:0041AB50 C3                      ret



* Referenced by a CALL at Addresses:
|:0041B248   , :0041D8BE   
|
:0041AB51 55                      push ebp
:0041AB52 8BEC                    mov ebp, esp
:0041AB54 83EC10                  sub esp, 00000010
:0041AB57 8B450C                  mov eax, dword ptr [ebp+0C]
:0041AB5A 25FFFF0000              and eax, 0000FFFF
:0041AB5F 83F84C                  cmp eax, 0000004C
:0041AB62 7E12                    jle 0041AB76
:0041AB64 6880000000              push 00000080
:0041AB69 E865FDFFFF              call 0041A8D3
:0041AB6E 83C404                  add esp, 00000004
:0041AB71 E91D010000              jmp 0041AC93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AB62(C)
|
:0041AB76 C745F810044900          mov [ebp-08], 00490410
:0041AB7D 66C745F00000            mov [ebp-10], 0000
:0041AB83 EB15                    jmp 0041AB9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ABC1(U)
|
:0041AB85 668B4DF0                mov cx, word ptr [ebp-10]
:0041AB89 6683C101                add cx, 0001
:0041AB8D 66894DF0                mov word ptr [ebp-10], cx
:0041AB91 8B55F8                  mov edx, dword ptr [ebp-08]
:0041AB94 83C240                  add edx, 00000040
:0041AB97 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AB83(U)
|
:0041AB9A 8B45F0                  mov eax, dword ptr [ebp-10]
:0041AB9D 25FFFF0000              and eax, 0000FFFF
:0041ABA2 3D80000000              cmp eax, 00000080
:0041ABA7 7D1A                    jge 0041ABC3
:0041ABA9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041ABAC E89F1EFFFF              call 0040CA50
:0041ABB1 25FFFF0000              and eax, 0000FFFF
:0041ABB6 2500800000              and eax, 00008000
:0041ABBB 85C0                    test eax, eax
:0041ABBD 7502                    jne 0041ABC1
:0041ABBF EB02                    jmp 0041ABC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ABBD(C)
|
:0041ABC1 EBC2                    jmp 0041AB85

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041ABA7(C), :0041ABBF(U)
|
:0041ABC3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041ABC6 81E1FFFF0000            and ecx, 0000FFFF
:0041ABCC 81F980000000            cmp ecx, 00000080
:0041ABD2 7512                    jne 0041ABE6
:0041ABD4 6880000000              push 00000080
:0041ABD9 E8F5FCFFFF              call 0041A8D3
:0041ABDE 83C404                  add esp, 00000004
:0041ABE1 E9AD000000              jmp 0041AC93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ABD2(C)
|
:0041ABE6 668B5508                mov dx, word ptr [ebp+08]
:0041ABEA 52                      push edx
:0041ABEB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041ABEE E89D480000              call 0041F490
:0041ABF3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041ABF6 E8F5470000              call 0041F3F0
:0041ABFB 6800800000              push 00008000
:0041AC00 6800800000              push 00008000
:0041AC05 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041AC08 E8234A0000              call 0041F630
:0041AC0D 668B450C                mov ax, word ptr [ebp+0C]
:0041AC11 50                      push eax
:0041AC12 E880000000              call 0041AC97
:0041AC17 83C404                  add esp, 00000004
:0041AC1A 668945F4                mov word ptr [ebp-0C], ax
:0041AC1E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041AC21 81E1FFFF0000            and ecx, 0000FFFF
:0041AC27 83F918                  cmp ecx, 00000018
:0041AC2A 7523                    jne 0041AC4F
:0041AC2C 668B550C                mov dx, word ptr [ebp+0C]
:0041AC30 52                      push edx
:0041AC31 E854010000              call 0041AD8A
:0041AC36 83C404                  add esp, 00000004
:0041AC39 668945F4                mov word ptr [ebp-0C], ax
:0041AC3D 668B45F4                mov ax, word ptr [ebp-0C]
:0041AC41 50                      push eax
:0041AC42 668B4D0C                mov cx, word ptr [ebp+0C]
:0041AC46 51                      push ecx
:0041AC47 E8CAFDFFFF              call 0041AA16
:0041AC4C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AC2A(C)
|
:0041AC4F 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041AC52 81E2FFFF0000            and edx, 0000FFFF
:0041AC58 52                      push edx
:0041AC59 E88D000000              call 0041ACEB
:0041AC5E 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041AC61 6A04                    push 00000004
:0041AC63 6A00                    push 00000000
:0041AC65 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041AC68 25FFFF0000              and eax, 0000FFFF
:0041AC6D 6BC030                  imul eax, 00000030
:0041AC70 C1E006                  shl eax, 06
:0041AC73 6BC038                  imul eax, 00000038
:0041AC76 50                      push eax
:0041AC77 B9C0174B00              mov ecx, 004B17C0
:0041AC7C E80FE30500              call 00478F90
:0041AC81 8945FC                  mov dword ptr [ebp-04], eax
:0041AC84 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041AC87 51                      push ecx
:0041AC88 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041AC8B E8F0490000              call 0041F680
:0041AC90 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041AB71(U), :0041ABE1(U)
|
:0041AC93 8BE5                    mov esp, ebp
:0041AC95 5D                      pop ebp
:0041AC96 C3                      ret



* Referenced by a CALL at Addresses:
|:0041AC12   , :0041ADCF   
|
:0041AC97 55                      push ebp
:0041AC98 8BEC                    mov ebp, esp
:0041AC9A 51                      push ecx
:0041AC9B 66C745FC0000            mov [ebp-04], 0000
:0041ACA1 EB0C                    jmp 0041ACAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ACE1(U)
|
:0041ACA3 668B45FC                mov ax, word ptr [ebp-04]
:0041ACA7 66050100                add ax, 0001
:0041ACAB 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ACA1(U)
|
:0041ACAF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041ACB2 81E1FFFF0000            and ecx, 0000FFFF
:0041ACB8 83F918                  cmp ecx, 00000018
:0041ACBB 7D26                    jge 0041ACE3
:0041ACBD 8B55FC                  mov edx, dword ptr [ebp-04]
:0041ACC0 81E2FFFF0000            and edx, 0000FFFF
:0041ACC6 33C0                    xor eax, eax
:0041ACC8 8A8258244900            mov al, byte ptr [edx+00492458]
:0041ACCE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041ACD1 81E1FFFF0000            and ecx, 0000FFFF
:0041ACD7 3BC1                    cmp eax, ecx
:0041ACD9 7506                    jne 0041ACE1
:0041ACDB 668B45FC                mov ax, word ptr [ebp-04]
:0041ACDF EB06                    jmp 0041ACE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ACD9(C)
|
:0041ACE1 EBC0                    jmp 0041ACA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ACBB(C)
|
:0041ACE3 668B45FC                mov ax, word ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ACDF(U)
|
:0041ACE7 8BE5                    mov esp, ebp
:0041ACE9 5D                      pop ebp
:0041ACEA C3                      ret



* Referenced by a CALL at Address:
|:0041AC59   
|
:0041ACEB 55                      push ebp
:0041ACEC 8BEC                    mov ebp, esp
:0041ACEE 51                      push ecx
:0041ACEF 66C745FC0000            mov [ebp-04], 0000
:0041ACF5 EB0C                    jmp 0041AD03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AD81(U)
|
:0041ACF7 668B45FC                mov ax, word ptr [ebp-04]
:0041ACFB 66050100                add ax, 0001
:0041ACFF 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ACF5(U)
|
:0041AD03 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041AD06 81E1FFFF0000            and ecx, 0000FFFF
:0041AD0C 83F918                  cmp ecx, 00000018
:0041AD0F 7D75                    jge 0041AD86
:0041AD11 8B55FC                  mov edx, dword ptr [ebp-04]
:0041AD14 81E2FFFF0000            and edx, 0000FFFF
:0041AD1A 3B5508                  cmp edx, dword ptr [ebp+08]
:0041AD1D 7511                    jne 0041AD30
:0041AD1F 8B45FC                  mov eax, dword ptr [ebp-04]
:0041AD22 25FFFF0000              and eax, 0000FFFF
:0041AD27 C68008B5480000          mov byte ptr [eax+0048B508], 00
:0041AD2E EB51                    jmp 0041AD81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AD1D(C)
|
:0041AD30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041AD33 81E1FFFF0000            and ecx, 0000FFFF
:0041AD39 33D2                    xor edx, edx
:0041AD3B 8A9158244900            mov dl, byte ptr [ecx+00492458]
:0041AD41 81FAFF000000            cmp edx, 000000FF
:0041AD47 7438                    je 0041AD81
:0041AD49 8B45FC                  mov eax, dword ptr [ebp-04]
:0041AD4C 25FFFF0000              and eax, 0000FFFF
:0041AD51 33C9                    xor ecx, ecx
:0041AD53 8A8808B54800            mov cl, byte ptr [eax+0048B508]
:0041AD59 81F9FF000000            cmp ecx, 000000FF
:0041AD5F 7420                    je 0041AD81
:0041AD61 8B55FC                  mov edx, dword ptr [ebp-04]
:0041AD64 81E2FFFF0000            and edx, 0000FFFF
:0041AD6A 8A8208B54800            mov al, byte ptr [edx+0048B508]
:0041AD70 0401                    add al, 01
:0041AD72 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041AD75 81E1FFFF0000            and ecx, 0000FFFF
:0041AD7B 888108B54800            mov byte ptr [ecx+0048B508], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041AD2E(U), :0041AD47(C), :0041AD5F(C)
|
:0041AD81 E971FFFFFF              jmp 0041ACF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AD0F(C)
|
:0041AD86 8BE5                    mov esp, ebp
:0041AD88 5D                      pop ebp
:0041AD89 C3                      ret



* Referenced by a CALL at Address:
|:0041AC31   
|
:0041AD8A 55                      push ebp
:0041AD8B 8BEC                    mov ebp, esp
:0041AD8D 51                      push ecx
:0041AD8E E834000000              call 0041ADC7
:0041AD93 668945FC                mov word ptr [ebp-04], ax
:0041AD97 8B45FC                  mov eax, dword ptr [ebp-04]
:0041AD9A 25FFFF0000              and eax, 0000FFFF
:0041AD9F 83F818                  cmp eax, 00000018
:0041ADA2 7509                    jne 0041ADAD
:0041ADA4 E830000000              call 0041ADD9
:0041ADA9 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ADA2(C)
|
:0041ADAD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041ADB0 81E1FFFF0000            and ecx, 0000FFFF
:0041ADB6 8A5508                  mov dl, byte ptr [ebp+08]
:0041ADB9 889158244900            mov byte ptr [ecx+00492458], dl
:0041ADBF 668B45FC                mov ax, word ptr [ebp-04]
:0041ADC3 8BE5                    mov esp, ebp
:0041ADC5 5D                      pop ebp
:0041ADC6 C3                      ret



* Referenced by a CALL at Address:
|:0041AD8E   
|
:0041ADC7 55                      push ebp
:0041ADC8 8BEC                    mov ebp, esp
:0041ADCA 68FF000000              push 000000FF
:0041ADCF E8C3FEFFFF              call 0041AC97
:0041ADD4 83C404                  add esp, 00000004
:0041ADD7 5D                      pop ebp
:0041ADD8 C3                      ret



* Referenced by a CALL at Address:
|:0041ADA4   
|
:0041ADD9 55                      push ebp
:0041ADDA 8BEC                    mov ebp, esp
:0041ADDC 83EC0C                  sub esp, 0000000C
:0041ADDF 66C745F40000            mov [ebp-0C], 0000
:0041ADE5 668B45F4                mov ax, word ptr [ebp-0C]
:0041ADE9 668945FC                mov word ptr [ebp-04], ax
:0041ADED 66C745F80000            mov [ebp-08], 0000
:0041ADF3 EB0C                    jmp 0041AE01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AE62(U)
|
:0041ADF5 668B4DF8                mov cx, word ptr [ebp-08]
:0041ADF9 6683C101                add cx, 0001
:0041ADFD 66894DF8                mov word ptr [ebp-08], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ADF3(U)
|
:0041AE01 8B55F8                  mov edx, dword ptr [ebp-08]
:0041AE04 81E2FFFF0000            and edx, 0000FFFF
:0041AE0A 83FA18                  cmp edx, 00000018
:0041AE0D 7D55                    jge 0041AE64
:0041AE0F 8B45F8                  mov eax, dword ptr [ebp-08]
:0041AE12 25FFFF0000              and eax, 0000FFFF
:0041AE17 33C9                    xor ecx, ecx
:0041AE19 8A8858244900            mov cl, byte ptr [eax+00492458]
:0041AE1F 81F9FF000000            cmp ecx, 000000FF
:0041AE25 743B                    je 0041AE62
:0041AE27 8B55F8                  mov edx, dword ptr [ebp-08]
:0041AE2A 81E2FFFF0000            and edx, 0000FFFF
:0041AE30 33C0                    xor eax, eax
:0041AE32 8A8208B54800            mov al, byte ptr [edx+0048B508]
:0041AE38 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041AE3B 81E1FFFF0000            and ecx, 0000FFFF
:0041AE41 3BC1                    cmp eax, ecx
:0041AE43 7E1D                    jle 0041AE62
:0041AE45 8B55F8                  mov edx, dword ptr [ebp-08]
:0041AE48 81E2FFFF0000            and edx, 0000FFFF
:0041AE4E 660FB68208B54800        movzx ax, byte ptr [edx+0048B508]
:0041AE56 668945FC                mov word ptr [ebp-04], ax
:0041AE5A 668B4DF8                mov cx, word ptr [ebp-08]
:0041AE5E 66894DF4                mov word ptr [ebp-0C], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041AE25(C), :0041AE43(C)
|
:0041AE62 EB91                    jmp 0041ADF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AE0D(C)
|
:0041AE64 668B45F4                mov ax, word ptr [ebp-0C]
:0041AE68 8BE5                    mov esp, ebp
:0041AE6A 5D                      pop ebp
:0041AE6B C3                      ret



* Referenced by a CALL at Addresses:
|:0041B025   , :0041B209   
|
:0041AE6C 55                      push ebp
:0041AE6D 8BEC                    mov ebp, esp
:0041AE6F 51                      push ecx
:0041AE70 56                      push esi
:0041AE71 8B7510                  mov esi, dword ptr [ebp+10]
:0041AE74 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00006: ""
                                  |
:0041AE7A 6A06                    push 00000006
:0041AE7C E8E1FAFFFF              call 0041A962
:0041AE81 83C404                  add esp, 00000004
:0041AE84 25FFFF0000              and eax, 0000FFFF
:0041AE89 3BF0                    cmp esi, eax
:0041AE8B 0F8DC6000000            jnl 0041AF57
:0041AE91 8B750C                  mov esi, dword ptr [ebp+0C]
:0041AE94 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041AE9A 6A04                    push 00000004
:0041AE9C E8C1FAFFFF              call 0041A962
:0041AEA1 83C404                  add esp, 00000004
:0041AEA4 25FFFF0000              and eax, 0000FFFF
:0041AEA9 3BF0                    cmp esi, eax
:0041AEAB 0F8DA6000000            jnl 0041AF57
:0041AEB1 8B7508                  mov esi, dword ptr [ebp+08]
:0041AEB4 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041AEBA 6A02                    push 00000002
:0041AEBC E8A1FAFFFF              call 0041A962
:0041AEC1 83C404                  add esp, 00000004
:0041AEC4 25FFFF0000              and eax, 0000FFFF
:0041AEC9 3BF0                    cmp esi, eax
:0041AECB 0F8D86000000            jnl 0041AF57
:0041AED1 8B7510                  mov esi, dword ptr [ebp+10]
:0041AED4 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041AEDA 6A02                    push 00000002
:0041AEDC E881FAFFFF              call 0041A962
:0041AEE1 83C404                  add esp, 00000004
:0041AEE4 25FFFF0000              and eax, 0000FFFF
:0041AEE9 0FAFF0                  imul esi, eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041AEEC 6A04                    push 00000004
:0041AEEE E86FFAFFFF              call 0041A962
:0041AEF3 83C404                  add esp, 00000004
:0041AEF6 25FFFF0000              and eax, 0000FFFF
:0041AEFB 0FAFF0                  imul esi, eax
:0041AEFE 8975FC                  mov dword ptr [ebp-04], esi
:0041AF01 8B750C                  mov esi, dword ptr [ebp+0C]
:0041AF04 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041AF0A 6A02                    push 00000002
:0041AF0C E851FAFFFF              call 0041A962
:0041AF11 83C404                  add esp, 00000004
:0041AF14 25FFFF0000              and eax, 0000FFFF
:0041AF19 0FAFF0                  imul esi, eax
:0041AF1C 8B45FC                  mov eax, dword ptr [ebp-04]
:0041AF1F 03C6                    add eax, esi
:0041AF21 8945FC                  mov dword ptr [ebp-04], eax
:0041AF24 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041AF27 81E1FFFF0000            and ecx, 0000FFFF
:0041AF2D 8B55FC                  mov edx, dword ptr [ebp-04]
:0041AF30 03D1                    add edx, ecx
:0041AF32 8955FC                  mov dword ptr [ebp-04], edx
:0041AF35 8B45FC                  mov eax, dword ptr [ebp-04]
:0041AF38 D1E0                    shl eax, 1
:0041AF3A 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041AF3D 6A04                    push 00000004
:0041AF3F 6A00                    push 00000000
:0041AF41 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041AF44 83C110                  add ecx, 00000010
:0041AF47 51                      push ecx
:0041AF48 B9881C4B00              mov ecx, 004B1C88
:0041AF4D E83EE00500              call 00478F90
:0041AF52 668B00                  mov ax, word ptr [eax]
:0041AF55 EB04                    jmp 0041AF5B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041AE8B(C), :0041AEAB(C), :0041AECB(C)
|
:0041AF57 66B800F0                mov ax, F000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AF55(U)
|
:0041AF5B 5E                      pop esi
:0041AF5C 8BE5                    mov esp, ebp
:0041AF5E 5D                      pop ebp
:0041AF5F C3                      ret



* Referenced by a CALL at Addresses:
|:0041C0EB   , :0041CB15   
|
:0041AF60 55                      push ebp
:0041AF61 8BEC                    mov ebp, esp
:0041AF63 83EC10                  sub esp, 00000010
:0041AF66 668B4510                mov ax, word ptr [ebp+10]
:0041AF6A 668945FC                mov word ptr [ebp-04], ax
:0041AF6E EB0C                    jmp 0041AF7C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B052(U)
|
:0041AF70 668B4DFC                mov cx, word ptr [ebp-04]
:0041AF74 6683C101                add cx, 0001
:0041AF78 66894DFC                mov word ptr [ebp-04], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AF6E(U)
|
:0041AF7C 8B55FC                  mov edx, dword ptr [ebp-04]
:0041AF7F 81E2FFFF0000            and edx, 0000FFFF
:0041AF85 8B4510                  mov eax, dword ptr [ebp+10]
:0041AF88 25FFFF0000              and eax, 0000FFFF
:0041AF8D 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0041AF90 81E1FFFF0000            and ecx, 0000FFFF
:0041AF96 03C1                    add eax, ecx
:0041AF98 3BD0                    cmp edx, eax
:0041AF9A 0F8DB7000000            jnl 0041B057
:0041AFA0 8B550C                  mov edx, dword ptr [ebp+0C]
:0041AFA3 81E2FFFF0000            and edx, 0000FFFF
:0041AFA9 8B4518                  mov eax, dword ptr [ebp+18]
:0041AFAC 25FFFF0000              and eax, 0000FFFF
:0041AFB1 2BD0                    sub edx, eax
:0041AFB3 83C201                  add edx, 00000001
:0041AFB6 668955F0                mov word ptr [ebp-10], dx
:0041AFBA EB0C                    jmp 0041AFC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B04D(U)
|
:0041AFBC 668B4DF0                mov cx, word ptr [ebp-10]
:0041AFC0 6683C101                add cx, 0001
:0041AFC4 66894DF0                mov word ptr [ebp-10], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AFBA(U)
|
:0041AFC8 8B55F0                  mov edx, dword ptr [ebp-10]
:0041AFCB 81E2FFFF0000            and edx, 0000FFFF
:0041AFD1 8B450C                  mov eax, dword ptr [ebp+0C]
:0041AFD4 25FFFF0000              and eax, 0000FFFF
:0041AFD9 83C001                  add eax, 00000001
:0041AFDC 3BD0                    cmp edx, eax
:0041AFDE 7D72                    jge 0041B052
:0041AFE0 668B4D08                mov cx, word ptr [ebp+08]
:0041AFE4 66894DF8                mov word ptr [ebp-08], cx
:0041AFE8 EB0C                    jmp 0041AFF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B04B(U)
|
:0041AFEA 668B55F8                mov dx, word ptr [ebp-08]
:0041AFEE 6683C201                add dx, 0001
:0041AFF2 668955F8                mov word ptr [ebp-08], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AFE8(U)
|
:0041AFF6 8B45F8                  mov eax, dword ptr [ebp-08]
:0041AFF9 25FFFF0000              and eax, 0000FFFF
:0041AFFE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041B001 81E1FFFF0000            and ecx, 0000FFFF
:0041B007 8B5514                  mov edx, dword ptr [ebp+14]
:0041B00A 81E2FFFF0000            and edx, 0000FFFF
:0041B010 03CA                    add ecx, edx
:0041B012 3BC1                    cmp eax, ecx
:0041B014 7D37                    jge 0041B04D
:0041B016 668B45FC                mov ax, word ptr [ebp-04]
:0041B01A 50                      push eax
:0041B01B 668B4DF0                mov cx, word ptr [ebp-10]
:0041B01F 51                      push ecx
:0041B020 668B55F8                mov dx, word ptr [ebp-08]
:0041B024 52                      push edx
:0041B025 E842FEFFFF              call 0041AE6C
:0041B02A 83C40C                  add esp, 0000000C
:0041B02D 668945F4                mov word ptr [ebp-0C], ax
:0041B031 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041B034 25FFFF0000              and eax, 0000FFFF
:0041B039 2500FF0000              and eax, 0000FF00
:0041B03E 3D00F00000              cmp eax, 0000F000
:0041B043 7506                    jne 0041B04B
:0041B045 660DFFFF                or ax, FFFF
:0041B049 EB0F                    jmp 0041B05A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B043(C)
|
:0041B04B EB9D                    jmp 0041AFEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B014(C)
|
:0041B04D E96AFFFFFF              jmp 0041AFBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AFDE(C)
|
:0041B052 E919FFFFFF              jmp 0041AF70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041AF9A(C)
|
:0041B057 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B049(U)
|
:0041B05A 8BE5                    mov esp, ebp
:0041B05C 5D                      pop ebp
:0041B05D C3                      ret



* Referenced by a CALL at Addresses:
|:0041B3B5   , :0041B8B0   
|
:0041B05E 55                      push ebp
:0041B05F 8BEC                    mov ebp, esp
:0041B061 83EC10                  sub esp, 00000010
:0041B064 56                      push esi
:0041B065 8B4508                  mov eax, dword ptr [ebp+08]
:0041B068 33C9                    xor ecx, ecx
:0041B06A 668B08                  mov cx, word ptr [eax]
:0041B06D C1E103                  shl ecx, 03
:0041B070 66894DF0                mov word ptr [ebp-10], cx
:0041B074 8B550C                  mov edx, dword ptr [ebp+0C]
:0041B077 33C0                    xor eax, eax
:0041B079 668B02                  mov ax, word ptr [edx]
:0041B07C 6BC0F8                  imul eax, FFFFFFF8
:0041B07F 668945FC                mov word ptr [ebp-04], ax
:0041B083 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041B086 81E1FFFF0000            and ecx, 0000FFFF
:0041B08C 8B55FC                  mov edx, dword ptr [ebp-04]
:0041B08F 81E2FFFF0000            and edx, 0000FFFF
:0041B095 03CA                    add ecx, edx
:0041B097 66894DF8                mov word ptr [ebp-08], cx
:0041B09B 8B4508                  mov eax, dword ptr [ebp+08]
:0041B09E 33C9                    xor ecx, ecx
:0041B0A0 668B08                  mov cx, word ptr [eax]
:0041B0A3 8B550C                  mov edx, dword ptr [ebp+0C]
:0041B0A6 33C0                    xor eax, eax
:0041B0A8 668B02                  mov ax, word ptr [edx]
:0041B0AB 03C8                    add ecx, eax
:0041B0AD C1E102                  shl ecx, 02
:0041B0B0 8B5510                  mov edx, dword ptr [ebp+10]
:0041B0B3 81E2FFFF0000            and edx, 0000FFFF
:0041B0B9 C1E203                  shl edx, 03
:0041B0BC 2BCA                    sub ecx, edx
:0041B0BE 66894DF4                mov word ptr [ebp-0C], cx
:0041B0C2 8B75F8                  mov esi, dword ptr [ebp-08]
:0041B0C5 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0041B0CB 6A08                    push 00000008
:0041B0CD E890F8FFFF              call 0041A962
:0041B0D2 83C404                  add esp, 00000004
:0041B0D5 25FFFF0000              and eax, 0000FFFF
:0041B0DA C1E003                  shl eax, 03
:0041B0DD 99                      cdq
:0041B0DE 2BC2                    sub eax, edx
:0041B0E0 D1F8                    sar eax, 1
:0041B0E2 8D4406F8                lea eax, dword ptr [esi+eax-08]
:0041B0E6 668945F8                mov word ptr [ebp-08], ax
:0041B0EA 33C9                    xor ecx, ecx
:0041B0EC 668B0D64034900          mov cx, word ptr [00490364]
:0041B0F3 C1E103                  shl ecx, 03
:0041B0F6 668B55F8                mov dx, word ptr [ebp-08]
:0041B0FA 662BD1                  sub dx, cx
:0041B0FD 668955F8                mov word ptr [ebp-08], dx
:0041B101 33C0                    xor eax, eax
:0041B103 66A166034900            mov ax, word ptr [00490366]
:0041B109 8D0CC5F8FFFFFF          lea ecx, dword ptr [8*eax+FFFFFFF8]
:0041B110 668B55F4                mov dx, word ptr [ebp-0C]
:0041B114 662BD1                  sub dx, cx
:0041B117 668955F4                mov word ptr [ebp-0C], dx
:0041B11B 8B4508                  mov eax, dword ptr [ebp+08]
:0041B11E 668B4DF8                mov cx, word ptr [ebp-08]
:0041B122 668908                  mov word ptr [eax], cx
:0041B125 8B550C                  mov edx, dword ptr [ebp+0C]
:0041B128 668B45F4                mov ax, word ptr [ebp-0C]
:0041B12C 668902                  mov word ptr [edx], ax
:0041B12F 5E                      pop esi
:0041B130 8BE5                    mov esp, ebp
:0041B132 5D                      pop ebp
:0041B133 C3                      ret



* Referenced by a CALL at Addresses:
|:0041EEA7   , :0041EECB   
|
:0041B134 55                      push ebp
:0041B135 8BEC                    mov ebp, esp
:0041B137 83EC30                  sub esp, 00000030
:0041B13A 56                      push esi
:0041B13B 66C745D8FFFF            mov [ebp-28], FFFF
:0041B141 66C745D4FFFF            mov [ebp-2C], FFFF
:0041B147 66C745DCFFFF            mov [ebp-24], FFFF
:0041B14D 6A00                    push 00000000

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:0041B14F 6A70                    push 00000070
:0041B151 68A0034900              push 004903A0
:0041B156 E80CF7FFFF              call 0041A867
:0041B15B 83C40C                  add esp, 0000000C
:0041B15E 66C745E40000            mov [ebp-1C], 0000
:0041B164 EB0C                    jmp 0041B172

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B42B(U)
|
:0041B166 668B45E4                mov ax, word ptr [ebp-1C]
:0041B16A 66050100                add ax, 0001
:0041B16E 668945E4                mov word ptr [ebp-1C], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B164(U)
|
:0041B172 8B75E4                  mov esi, dword ptr [ebp-1C]
:0041B175 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00006: ""
                                  |
:0041B17B 6A06                    push 00000006
:0041B17D E8E0F7FFFF              call 0041A962
:0041B182 83C404                  add esp, 00000004
:0041B185 25FFFF0000              and eax, 0000FFFF
:0041B18A 3BF0                    cmp esi, eax
:0041B18C 0F8D9E020000            jnl 0041B430
:0041B192 66C745E00000            mov [ebp-20], 0000
:0041B198 EB0C                    jmp 0041B1A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B426(U)
|
:0041B19A 668B4DE0                mov cx, word ptr [ebp-20]
:0041B19E 6683C101                add cx, 0001
:0041B1A2 66894DE0                mov word ptr [ebp-20], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B198(U)
|
:0041B1A6 8B75E0                  mov esi, dword ptr [ebp-20]
:0041B1A9 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041B1AF 6A04                    push 00000004
:0041B1B1 E8ACF7FFFF              call 0041A962
:0041B1B6 83C404                  add esp, 00000004
:0041B1B9 25FFFF0000              and eax, 0000FFFF
:0041B1BE 3BF0                    cmp esi, eax
:0041B1C0 0F8D65020000            jnl 0041B42B
:0041B1C6 66C745E80000            mov [ebp-18], 0000
:0041B1CC EB0C                    jmp 0041B1DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B421(U)
|
:0041B1CE 668B55E8                mov dx, word ptr [ebp-18]
:0041B1D2 6683C201                add dx, 0001
:0041B1D6 668955E8                mov word ptr [ebp-18], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1CC(U)
|
:0041B1DA 8B75E8                  mov esi, dword ptr [ebp-18]
:0041B1DD 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041B1E3 6A02                    push 00000002
:0041B1E5 E878F7FFFF              call 0041A962
:0041B1EA 83C404                  add esp, 00000004
:0041B1ED 25FFFF0000              and eax, 0000FFFF
:0041B1F2 3BF0                    cmp esi, eax
:0041B1F4 0F8D2C020000            jnl 0041B426
:0041B1FA 668B45E4                mov ax, word ptr [ebp-1C]
:0041B1FE 50                      push eax
:0041B1FF 668B4DE0                mov cx, word ptr [ebp-20]
:0041B203 51                      push ecx
:0041B204 668B55E8                mov dx, word ptr [ebp-18]
:0041B208 52                      push edx
:0041B209 E85EFCFFFF              call 0041AE6C
:0041B20E 83C40C                  add esp, 0000000C
:0041B211 668945F4                mov word ptr [ebp-0C], ax
:0041B215 8B4508                  mov eax, dword ptr [ebp+08]
:0041B218 25FFFF0000              and eax, 0000FFFF
:0041B21D 83F801                  cmp eax, 00000001
:0041B220 7572                    jne 0041B294
:0041B222 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041B225 81E1FFFF0000            and ecx, 0000FFFF
:0041B22B 80E500                  and ch, 00
:0041B22E 81F9FF000000            cmp ecx, 000000FF
:0041B234 745E                    je 0041B294
:0041B236 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041B239 81E2FFFF0000            and edx, 0000FFFF
:0041B23F 80E600                  and dh, 00
:0041B242 52                      push edx
:0041B243 6800300000              push 00003000
:0041B248 E804F9FFFF              call 0041AB51
:0041B24D 83C408                  add esp, 00000008
:0041B250 8945FC                  mov dword ptr [ebp-04], eax
:0041B253 6880000000              push 00000080
:0041B258 E876F6FFFF              call 0041A8D3
:0041B25D 83C404                  add esp, 00000004
:0041B260 3B45FC                  cmp eax, dword ptr [ebp-04]
:0041B263 7505                    jne 0041B26A
:0041B265 E91D020000              jmp 0041B487

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B263(C)
|
:0041B26A 8B45FC                  mov eax, dword ptr [ebp-04]
:0041B26D 50                      push eax
:0041B26E 6A00                    push 00000000
:0041B270 6A00                    push 00000000
:0041B272 6A00                    push 00000000
:0041B274 6A00                    push 00000000
:0041B276 6A00                    push 00000000
:0041B278 668B4DE4                mov cx, word ptr [ebp-1C]
:0041B27C 51                      push ecx
:0041B27D 668B55E0                mov dx, word ptr [ebp-20]
:0041B281 52                      push edx
:0041B282 668B45E8                mov ax, word ptr [ebp-18]
:0041B286 50                      push eax
:0041B287 6800300000              push 00003000
:0041B28C E8A7220000              call 0041D538
:0041B291 83C428                  add esp, 00000028

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041B220(C), :0041B234(C)
|
:0041B294 668B4DF4                mov cx, word ptr [ebp-0C]
:0041B298 6681E100FF              and cx, FF00
:0041B29D 66894DF4                mov word ptr [ebp-0C], cx
:0041B2A1 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041B2A4 81E2FFFF0000            and edx, 0000FFFF
:0041B2AA 8955D0                  mov dword ptr [ebp-30], edx
:0041B2AD 817DD000F20000          cmp dword ptr [ebp-30], 0000F200
:0041B2B4 7F17                    jg 0041B2CD
:0041B2B6 817DD000F20000          cmp dword ptr [ebp-30], 0000F200
:0041B2BD 7472                    je 0041B331
:0041B2BF 817DD000F10000          cmp dword ptr [ebp-30], 0000F100
:0041B2C6 7469                    je 0041B331
:0041B2C8 E954010000              jmp 0041B421

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B2B4(C)
|
:0041B2CD 817DD000F40000          cmp dword ptr [ebp-30], 0000F400
:0041B2D4 7F17                    jg 0041B2ED
:0041B2D6 817DD000F40000          cmp dword ptr [ebp-30], 0000F400
:0041B2DD 7452                    je 0041B331
:0041B2DF 817DD000F30000          cmp dword ptr [ebp-30], 0000F300
:0041B2E6 7449                    je 0041B331
:0041B2E8 E934010000              jmp 0041B421

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B2D4(C)
|
:0041B2ED 817DD000F60000          cmp dword ptr [ebp-30], 0000F600
:0041B2F4 7F17                    jg 0041B30D
:0041B2F6 817DD000F60000          cmp dword ptr [ebp-30], 0000F600
:0041B2FD 7432                    je 0041B331
:0041B2FF 817DD000F50000          cmp dword ptr [ebp-30], 0000F500
:0041B306 7429                    je 0041B331
:0041B308 E914010000              jmp 0041B421

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B2F4(C)
|
:0041B30D 817DD000F70000          cmp dword ptr [ebp-30], 0000F700
:0041B314 741B                    je 0041B331
:0041B316 817DD000F80000          cmp dword ptr [ebp-30], 0000F800
:0041B31D 7412                    je 0041B331
:0041B31F 817DD000F90000          cmp dword ptr [ebp-30], 0000F900
:0041B326 0F84DD000000            je 0041B409
:0041B32C E9F0000000              jmp 0041B421

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041B2BD(C), :0041B2C6(C), :0041B2DD(C), :0041B2E6(C), :0041B2FD(C)
|:0041B306(C), :0041B314(C), :0041B31D(C)
|
:0041B331 668B45F4                mov ax, word ptr [ebp-0C]
:0041B335 662D00F1                sub ax, F100
:0041B339 668945F4                mov word ptr [ebp-0C], ax
:0041B33D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041B340 81E1FFFF0000            and ecx, 0000FFFF
:0041B346 C1F908                  sar ecx, 08
:0041B349 6BC90E                  imul ecx, 0000000E
:0041B34C 81C1A0034900            add ecx, 004903A0
:0041B352 894DF0                  mov dword ptr [ebp-10], ecx
:0041B355 6800800000              push 00008000
:0041B35A 6800800000              push 00008000
:0041B35F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041B362 E8093E0000              call 0041F170
:0041B367 668B55E8                mov dx, word ptr [ebp-18]
:0041B36B 52                      push edx
:0041B36C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041B36F E84C3E0000              call 0041F1C0
:0041B374 668B45E0                mov ax, word ptr [ebp-20]
:0041B378 50                      push eax
:0041B379 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041B37C E80F420000              call 0041F590
:0041B381 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041B384 81E1FFFF0000            and ecx, 0000FFFF
:0041B38A 83C104                  add ecx, 00000004
:0041B38D 66894DF8                mov word ptr [ebp-08], cx
:0041B391 8B55E0                  mov edx, dword ptr [ebp-20]
:0041B394 81E2FFFF0000            and edx, 0000FFFF
:0041B39A 83C204                  add edx, 00000004
:0041B39D 668955EC                mov word ptr [ebp-14], dx
:0041B3A1 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041B3A4 25FFFF0000              and eax, 0000FFFF
:0041B3A9 83C009                  add eax, 00000009
:0041B3AC 50                      push eax
:0041B3AD 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0041B3B0 51                      push ecx
:0041B3B1 8D55F8                  lea edx, dword ptr [ebp-08]
:0041B3B4 52                      push edx
:0041B3B5 E8A4FCFFFF              call 0041B05E
:0041B3BA 83C40C                  add esp, 0000000C
:0041B3BD 668B45F8                mov ax, word ptr [ebp-08]
:0041B3C1 668945F8                mov word ptr [ebp-08], ax
:0041B3C5 668B4DEC                mov cx, word ptr [ebp-14]
:0041B3C9 6683C128                add cx, 0028
:0041B3CD 66894DEC                mov word ptr [ebp-14], cx
:0041B3D1 8B55F8                  mov edx, dword ptr [ebp-08]
:0041B3D4 81E2FFFF0000            and edx, 0000FFFF
:0041B3DA 83EA18                  sub edx, 00000018
:0041B3DD 52                      push edx
:0041B3DE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041B3E1 E8CA410000              call 0041F5B0
:0041B3E6 668B45EC                mov ax, word ptr [ebp-14]
:0041B3EA 50                      push eax
:0041B3EB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041B3EE E8FD410000              call 0041F5F0
:0041B3F3 6A50                    push 00000050
:0041B3F5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041B3F8 E8233E0000              call 0041F220
:0041B3FD 6A48                    push 00000048
:0041B3FF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041B402 E809410000              call 0041F510
:0041B407 EB18                    jmp 0041B421

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B326(C)
|
:0041B409 668B4DE8                mov cx, word ptr [ebp-18]
:0041B40D 66894DD8                mov word ptr [ebp-28], cx
:0041B411 668B55E0                mov dx, word ptr [ebp-20]
:0041B415 668955D4                mov word ptr [ebp-2C], dx
:0041B419 668B45E4                mov ax, word ptr [ebp-1C]
:0041B41D 668945DC                mov word ptr [ebp-24], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041B2C8(U), :0041B2E8(U), :0041B308(U), :0041B32C(U), :0041B407(U)
|
:0041B421 E9A8FDFFFF              jmp 0041B1CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1F4(C)
|
:0041B426 E96FFDFFFF              jmp 0041B19A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B1C0(C)
|
:0041B42B E936FDFFFF              jmp 0041B166

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B18C(C)
|
:0041B430 C745F0A0034900          mov [ebp-10], 004903A0
:0041B437 66C745F40000            mov [ebp-0C], 0000
:0041B43D EB15                    jmp 0041B454

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B479(U)
|
:0041B43F 668B4DF4                mov cx, word ptr [ebp-0C]
:0041B443 6683C101                add cx, 0001
:0041B447 66894DF4                mov word ptr [ebp-0C], cx
:0041B44B 8B55F0                  mov edx, dword ptr [ebp-10]
:0041B44E 83C20E                  add edx, 0000000E
:0041B451 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B43D(U)
|
:0041B454 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041B457 25FFFF0000              and eax, 0000FFFF
:0041B45C 83F804                  cmp eax, 00000004
:0041B45F 7D1A                    jge 0041B47B
:0041B461 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041B464 E847440000              call 0041F8B0
:0041B469 25FFFF0000              and eax, 0000FFFF
:0041B46E 2500800000              and eax, 00008000
:0041B473 85C0                    test eax, eax
:0041B475 7402                    je 0041B479
:0041B477 EB02                    jmp 0041B47B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B475(C)
|
:0041B479 EBC4                    jmp 0041B43F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041B45F(C), :0041B477(U)
|
:0041B47B 668B4DF4                mov cx, word ptr [ebp-0C]
:0041B47F 6683E103                and cx, 0003
:0041B483 66894DF4                mov word ptr [ebp-0C], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B265(U)
|
:0041B487 5E                      pop esi
:0041B488 8BE5                    mov esp, ebp
:0041B48A 5D                      pop ebp
:0041B48B C3                      ret



* Referenced by a CALL at Address:
|:0041D230   
|
:0041B48C 55                      push ebp
:0041B48D 8BEC                    mov ebp, esp
:0041B48F 83EC14                  sub esp, 00000014
:0041B492 A154034900              mov eax, dword ptr [00490354]
:0041B497 8945F8                  mov dword ptr [ebp-08], eax
:0041B49A 66C745FC0000            mov [ebp-04], 0000
:0041B4A0 66C745EC0000            mov [ebp-14], 0000
:0041B4A6 EB0C                    jmp 0041B4B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B51C(U)
|
:0041B4A8 668B4DEC                mov cx, word ptr [ebp-14]
:0041B4AC 6683C101                add cx, 0001
:0041B4B0 66894DEC                mov word ptr [ebp-14], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B4A6(U)
|
:0041B4B4 8B55EC                  mov edx, dword ptr [ebp-14]
:0041B4B7 81E2FFFF0000            and edx, 0000FFFF
:0041B4BD 83FA32                  cmp edx, 00000032
:0041B4C0 7D5C                    jge 0041B51E
:0041B4C2 8B45F8                  mov eax, dword ptr [ebp-08]
:0041B4C5 8945F4                  mov dword ptr [ebp-0C], eax
:0041B4C8 66C745F00000            mov [ebp-10], 0000
:0041B4CE EB18                    jmp 0041B4E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B508(U)
|
:0041B4D0 668B4DF0                mov cx, word ptr [ebp-10]
:0041B4D4 6683C101                add cx, 0001
:0041B4D8 66894DF0                mov word ptr [ebp-10], cx
:0041B4DC 668B55FC                mov dx, word ptr [ebp-04]
:0041B4E0 6683C201                add dx, 0001
:0041B4E4 668955FC                mov word ptr [ebp-04], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B4CE(U)
|
:0041B4E8 8B45F0                  mov eax, dword ptr [ebp-10]
:0041B4EB 25FFFF0000              and eax, 0000FFFF
:0041B4F0 83F850                  cmp eax, 00000050
:0041B4F3 7D15                    jge 0041B50A
:0041B4F5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041B4F8 668B55FC                mov dx, word ptr [ebp-04]
:0041B4FC 668911                  mov word ptr [ecx], dx
:0041B4FF 8B45F8                  mov eax, dword ptr [ebp-08]
:0041B502 83C002                  add eax, 00000002
:0041B505 8945F8                  mov dword ptr [ebp-08], eax
:0041B508 EBC6                    jmp 0041B4D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B4F3(C)
|
:0041B50A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041B50D 894DF8                  mov dword ptr [ebp-08], ecx
:0041B510 8B55F8                  mov edx, dword ptr [ebp-08]
:0041B513 81C290010000            add edx, 00000190
:0041B519 8955F8                  mov dword ptr [ebp-08], edx
:0041B51C EB8A                    jmp 0041B4A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B4C0(C)
|
:0041B51E 8BE5                    mov esp, ebp
:0041B520 5D                      pop ebp
:0041B521 C3                      ret



* Referenced by a CALL at Address:
|:0041B81D   
|
:0041B522 55                      push ebp
:0041B523 8BEC                    mov ebp, esp
:0041B525 83EC0C                  sub esp, 0000000C
:0041B528 66C745FC0000            mov [ebp-04], 0000
:0041B52E EB0C                    jmp 0041B53C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B5C7(U)
|
:0041B530 668B45FC                mov ax, word ptr [ebp-04]
:0041B534 66050100                add ax, 0001
:0041B538 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B52E(U)
|
:0041B53C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041B53F 81E1FFFF0000            and ecx, 0000FFFF
:0041B545 8B5514                  mov edx, dword ptr [ebp+14]
:0041B548 81E2FFFF0000            and edx, 0000FFFF
:0041B54E 3BCA                    cmp ecx, edx
:0041B550 7D7A                    jge 0041B5CC
:0041B552 C745F870264900          mov [ebp-08], 00492670
:0041B559 8B450C                  mov eax, dword ptr [ebp+0C]
:0041B55C 25FFFF0000              and eax, 0000FFFF
:0041B561 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041B564 81E1FFFF0000            and ecx, 0000FFFF
:0041B56A 03C1                    add eax, ecx
:0041B56C 6BC050                  imul eax, 00000050
:0041B56F 8B5508                  mov edx, dword ptr [ebp+08]
:0041B572 81E2FFFF0000            and edx, 0000FFFF
:0041B578 03C2                    add eax, edx
:0041B57A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041B57D 8D1441                  lea edx, dword ptr [ecx+2*eax]
:0041B580 8955F8                  mov dword ptr [ebp-08], edx
:0041B583 66C745F40000            mov [ebp-0C], 0000
:0041B589 EB15                    jmp 0041B5A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B5C5(U)
|
:0041B58B 668B45F4                mov ax, word ptr [ebp-0C]
:0041B58F 66050100                add ax, 0001
:0041B593 668945F4                mov word ptr [ebp-0C], ax
:0041B597 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041B59A 83C102                  add ecx, 00000002
:0041B59D 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B589(U)
|
:0041B5A0 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041B5A3 81E2FFFF0000            and edx, 0000FFFF
:0041B5A9 8B4510                  mov eax, dword ptr [ebp+10]
:0041B5AC 25FFFF0000              and eax, 0000FFFF
:0041B5B1 3BD0                    cmp edx, eax
:0041B5B3 7D12                    jge 0041B5C7
:0041B5B5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041B5B8 668B11                  mov dx, word ptr [ecx]
:0041B5BB 660B5518                or dx, word ptr [ebp+18]
:0041B5BF 8B45F8                  mov eax, dword ptr [ebp-08]
:0041B5C2 668910                  mov word ptr [eax], dx
:0041B5C5 EBC4                    jmp 0041B58B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B5B3(C)
|
:0041B5C7 E964FFFFFF              jmp 0041B530

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B550(C)
|
:0041B5CC 8BE5                    mov esp, ebp
:0041B5CE 5D                      pop ebp
:0041B5CF C3                      ret



* Referenced by a CALL at Addresses:
|:0041B7CD   , :0041B7FA   
|
:0041B5D0 55                      push ebp
:0041B5D1 8BEC                    mov ebp, esp
:0041B5D3 51                      push ecx
:0041B5D4 8B4508                  mov eax, dword ptr [ebp+08]
:0041B5D7 25FFFF0000              and eax, 0000FFFF
:0041B5DC 99                      cdq
:0041B5DD 83E207                  and edx, 00000007
:0041B5E0 03C2                    add eax, edx
:0041B5E2 C1F803                  sar eax, 03
:0041B5E5 668945FC                mov word ptr [ebp-04], ax
:0041B5E9 8B4508                  mov eax, dword ptr [ebp+08]
:0041B5EC 25FFFF0000              and eax, 0000FFFF
:0041B5F1 99                      cdq
:0041B5F2 33C2                    xor eax, edx
:0041B5F4 2BC2                    sub eax, edx
:0041B5F6 83E007                  and eax, 00000007
:0041B5F9 33C2                    xor eax, edx
:0041B5FB 2BC2                    sub eax, edx
:0041B5FD 85C0                    test eax, eax
:0041B5FF 740C                    je 0041B60D
:0041B601 668B45FC                mov ax, word ptr [ebp-04]
:0041B605 66050100                add ax, 0001
:0041B609 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B5FF(C)
|
:0041B60D 668B45FC                mov ax, word ptr [ebp-04]
:0041B611 8BE5                    mov esp, ebp
:0041B613 5D                      pop ebp
:0041B614 C3                      ret


:0041B615 55                      push ebp
:0041B616 8BEC                    mov ebp, esp
:0041B618 51                      push ecx
:0041B619 8B4508                  mov eax, dword ptr [ebp+08]
:0041B61C 25FFFF0000              and eax, 0000FFFF
:0041B621 99                      cdq
:0041B622 83E207                  and edx, 00000007
:0041B625 03C2                    add eax, edx
:0041B627 C1F803                  sar eax, 03
:0041B62A 668945FC                mov word ptr [ebp-04], ax
:0041B62E 668B45FC                mov ax, word ptr [ebp-04]
:0041B632 8BE5                    mov esp, ebp
:0041B634 5D                      pop ebp
:0041B635 C3                      ret



* Referenced by a CALL at Address:
|:0041E603   
|
:0041B636 55                      push ebp
:0041B637 8BEC                    mov ebp, esp
:0041B639 83EC20                  sub esp, 00000020
:0041B63C 8B4508                  mov eax, dword ptr [ebp+08]
:0041B63F 25FFFF0000              and eax, 0000FFFF
:0041B644 25FFFF0000              and eax, 0000FFFF
:0041B649 668945EC                mov word ptr [ebp-14], ax
:0041B64D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041B650 81E1FFFF0000            and ecx, 0000FFFF
:0041B656 83E928                  sub ecx, 00000028
:0041B659 81E1FFFF0000            and ecx, 0000FFFF
:0041B65F 66894DE4                mov word ptr [ebp-1C], cx
:0041B663 668B55EC                mov dx, word ptr [ebp-14]
:0041B667 668955F8                mov word ptr [ebp-08], dx
:0041B66B 668B45E4                mov ax, word ptr [ebp-1C]
:0041B66F 668945F0                mov word ptr [ebp-10], ax
:0041B673 0FBF4DEC                movsx ecx, word ptr [ebp-14]
:0041B677 85C9                    test ecx, ecx
:0041B679 7D37                    jge 0041B6B2
:0041B67B 668B55EC                mov dx, word ptr [ebp-14]
:0041B67F 66035510                add dx, word ptr [ebp+10]
:0041B683 668955EC                mov word ptr [ebp-14], dx
:0041B687 0FBF45EC                movsx eax, word ptr [ebp-14]
:0041B68B 85C0                    test eax, eax
:0041B68D 7F08                    jg 0041B697
:0041B68F 6633C0                  xor ax, ax
:0041B692 E992010000              jmp 0041B829

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B68D(C)
|
:0041B697 66C745F80000            mov [ebp-08], 0000
:0041B69D 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041B6A0 81E1FFFF0000            and ecx, 0000FFFF
:0041B6A6 0FBF55EC                movsx edx, word ptr [ebp-14]
:0041B6AA 2BCA                    sub ecx, edx
:0041B6AC 66894DFC                mov word ptr [ebp-04], cx
:0041B6B0 EB42                    jmp 0041B6F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B679(C)
|
:0041B6B2 0FBF45EC                movsx eax, word ptr [ebp-14]
:0041B6B6 3D80020000              cmp eax, 00000280
:0041B6BB 7C08                    jl 0041B6C5
:0041B6BD 6633C0                  xor ax, ax
:0041B6C0 E964010000              jmp 0041B829

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B6BB(C)
|
:0041B6C5 668B4DEC                mov cx, word ptr [ebp-14]
:0041B6C9 66034D10                add cx, word ptr [ebp+10]
:0041B6CD 66894DEC                mov word ptr [ebp-14], cx
:0041B6D1 668B55EC                mov dx, word ptr [ebp-14]
:0041B6D5 6681EA8002              sub dx, 0280
:0041B6DA 668955EC                mov word ptr [ebp-14], dx
:0041B6DE 0FBF45EC                movsx eax, word ptr [ebp-14]
:0041B6E2 85C0                    test eax, eax
:0041B6E4 7D06                    jge 0041B6EC
:0041B6E6 66C745EC0000            mov [ebp-14], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B6E4(C)
|
:0041B6EC 668B4DEC                mov cx, word ptr [ebp-14]
:0041B6F0 66894DFC                mov word ptr [ebp-04], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B6B0(U)
|
:0041B6F4 0FBF55E4                movsx edx, word ptr [ebp-1C]
:0041B6F8 85D2                    test edx, edx
:0041B6FA 7D37                    jge 0041B733
:0041B6FC 668B45E4                mov ax, word ptr [ebp-1C]
:0041B700 66034514                add ax, word ptr [ebp+14]
:0041B704 668945E4                mov word ptr [ebp-1C], ax
:0041B708 0FBF4DE4                movsx ecx, word ptr [ebp-1C]
:0041B70C 85C9                    test ecx, ecx
:0041B70E 7F08                    jg 0041B718
:0041B710 6633C0                  xor ax, ax
:0041B713 E911010000              jmp 0041B829

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B70E(C)
|
:0041B718 66C745F00000            mov [ebp-10], 0000
:0041B71E 8B5514                  mov edx, dword ptr [ebp+14]
:0041B721 81E2FFFF0000            and edx, 0000FFFF
:0041B727 0FBF45E4                movsx eax, word ptr [ebp-1C]
:0041B72B 2BD0                    sub edx, eax
:0041B72D 668955F4                mov word ptr [ebp-0C], dx
:0041B731 EB42                    jmp 0041B775

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B6FA(C)
|
:0041B733 0FBF4DE4                movsx ecx, word ptr [ebp-1C]
:0041B737 81F990010000            cmp ecx, 00000190
:0041B73D 7C08                    jl 0041B747
:0041B73F 6633C0                  xor ax, ax
:0041B742 E9E2000000              jmp 0041B829

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B73D(C)
|
:0041B747 668B55E4                mov dx, word ptr [ebp-1C]
:0041B74B 66035514                add dx, word ptr [ebp+14]
:0041B74F 668955E4                mov word ptr [ebp-1C], dx
:0041B753 668B45E4                mov ax, word ptr [ebp-1C]
:0041B757 662D9001                sub ax, 0190
:0041B75B 668945E4                mov word ptr [ebp-1C], ax
:0041B75F 0FBF4DE4                movsx ecx, word ptr [ebp-1C]
:0041B763 85C9                    test ecx, ecx
:0041B765 7D06                    jge 0041B76D
:0041B767 66C745E40000            mov [ebp-1C], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B765(C)
|
:0041B76D 668B55E4                mov dx, word ptr [ebp-1C]
:0041B771 668955F4                mov word ptr [ebp-0C], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B731(U)
|
:0041B775 668B4510                mov ax, word ptr [ebp+10]
:0041B779 662B45FC                sub ax, word ptr [ebp-04]
:0041B77D 66894510                mov word ptr [ebp+10], ax
:0041B781 668B4D14                mov cx, word ptr [ebp+14]
:0041B785 662B4DF4                sub cx, word ptr [ebp-0C]
:0041B789 66894D14                mov word ptr [ebp+14], cx
:0041B78D 8B45F8                  mov eax, dword ptr [ebp-08]
:0041B790 25FFFF0000              and eax, 0000FFFF
:0041B795 99                      cdq
:0041B796 83E207                  and edx, 00000007
:0041B799 03C2                    add eax, edx
:0041B79B C1F803                  sar eax, 03
:0041B79E 668945E8                mov word ptr [ebp-18], ax
:0041B7A2 8B45F0                  mov eax, dword ptr [ebp-10]
:0041B7A5 25FFFF0000              and eax, 0000FFFF
:0041B7AA 99                      cdq
:0041B7AB 83E207                  and edx, 00000007
:0041B7AE 03C2                    add eax, edx
:0041B7B0 C1F803                  sar eax, 03
:0041B7B3 668945E0                mov word ptr [ebp-20], ax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041B7B7 6A02                    push 00000002
:0041B7B9 8B55F0                  mov edx, dword ptr [ebp-10]
:0041B7BC 81E2FFFF0000            and edx, 0000FFFF
:0041B7C2 8B4514                  mov eax, dword ptr [ebp+14]
:0041B7C5 25FFFF0000              and eax, 0000FFFF
:0041B7CA 03D0                    add edx, eax
:0041B7CC 52                      push edx
:0041B7CD E8FEFDFFFF              call 0041B5D0
:0041B7D2 83C404                  add esp, 00000004
:0041B7D5 25FFFF0000              and eax, 0000FFFF
:0041B7DA 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0041B7DD 81E1FFFF0000            and ecx, 0000FFFF
:0041B7E3 2BC1                    sub eax, ecx
:0041B7E5 50                      push eax
:0041B7E6 8B55F8                  mov edx, dword ptr [ebp-08]
:0041B7E9 81E2FFFF0000            and edx, 0000FFFF
:0041B7EF 8B4510                  mov eax, dword ptr [ebp+10]
:0041B7F2 25FFFF0000              and eax, 0000FFFF
:0041B7F7 03D0                    add edx, eax
:0041B7F9 52                      push edx
:0041B7FA E8D1FDFFFF              call 0041B5D0
:0041B7FF 83C404                  add esp, 00000004
:0041B802 25FFFF0000              and eax, 0000FFFF
:0041B807 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041B80A 81E1FFFF0000            and ecx, 0000FFFF
:0041B810 2BC1                    sub eax, ecx
:0041B812 50                      push eax
:0041B813 668B55E0                mov dx, word ptr [ebp-20]
:0041B817 52                      push edx
:0041B818 668B45E8                mov ax, word ptr [ebp-18]
:0041B81C 50                      push eax
:0041B81D E800FDFFFF              call 0041B522
:0041B822 83C414                  add esp, 00000014
:0041B825 66B80100                mov ax, 0001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041B692(U), :0041B6C0(U), :0041B713(U), :0041B742(U)
|
:0041B829 8BE5                    mov esp, ebp
:0041B82B 5D                      pop ebp
:0041B82C C3                      ret



* Referenced by a CALL at Address:
|:0041BEDA   
|
:0041B82D 55                      push ebp
:0041B82E 8BEC                    mov ebp, esp
:0041B830 83EC10                  sub esp, 00000010
:0041B833 6A00                    push 00000000
:0041B835 E8D59D0500              call 0047560F
:0041B83A 83C404                  add esp, 00000004
:0041B83D 6A00                    push 00000000
:0041B83F 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041B841 6A04                    push 00000004
:0041B843 E8D5A40500              call 00475D1D
:0041B848 83C40C                  add esp, 0000000C
:0041B84B 66C745F00000            mov [ebp-10], 0000
:0041B851 EB0C                    jmp 0041B85F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B8DE(U)
|
:0041B853 668B45F0                mov ax, word ptr [ebp-10]
:0041B857 66050100                add ax, 0001
:0041B85B 668945F0                mov word ptr [ebp-10], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B851(U)
|
:0041B85F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041B862 81E1FFFF0000            and ecx, 0000FFFF
:0041B868 33D2                    xor edx, edx
:0041B86A 668B1524B54800          mov dx, word ptr [0048B524]
:0041B871 3BCA                    cmp ecx, edx
:0041B873 7D6E                    jge 0041B8E3
:0041B875 8B45F0                  mov eax, dword ptr [ebp-10]
:0041B878 25FFFF0000              and eax, 0000FFFF
:0041B87D 8B0C8570244900          mov ecx, dword ptr [4*eax+00492470]
:0041B884 894DF4                  mov dword ptr [ebp-0C], ecx
:0041B887 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041B88A E871390000              call 0041F200
:0041B88F 668945FC                mov word ptr [ebp-04], ax
:0041B893 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041B896 E8353D0000              call 0041F5D0
:0041B89B 668945F8                mov word ptr [ebp-08], ax
:0041B89F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041B8A2 E8693D0000              call 0041F610
:0041B8A7 50                      push eax
:0041B8A8 8D55F8                  lea edx, dword ptr [ebp-08]
:0041B8AB 52                      push edx
:0041B8AC 8D45FC                  lea eax, dword ptr [ebp-04]
:0041B8AF 50                      push eax
:0041B8B0 E8A9F7FFFF              call 0041B05E
:0041B8B5 83C40C                  add esp, 0000000C
:0041B8B8 668B4DFC                mov cx, word ptr [ebp-04]
:0041B8BC 66894DFC                mov word ptr [ebp-04], cx
:0041B8C0 668B55F8                mov dx, word ptr [ebp-08]
:0041B8C4 6683C228                add dx, 0028
:0041B8C8 668955F8                mov word ptr [ebp-08], dx
:0041B8CC 668B45F8                mov ax, word ptr [ebp-08]
:0041B8D0 50                      push eax
:0041B8D1 668B4DFC                mov cx, word ptr [ebp-04]
:0041B8D5 51                      push ecx
:0041B8D6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041B8D9 E8962C0000              call 0041E574
:0041B8DE E970FFFFFF              jmp 0041B853

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B873(C)
|
:0041B8E3 6A00                    push 00000000
:0041B8E5 6A00                    push 00000000
:0041B8E7 6A00                    push 00000000
:0041B8E9 E82FA40500              call 00475D1D
:0041B8EE 83C40C                  add esp, 0000000C
:0041B8F1 8BE5                    mov esp, ebp
:0041B8F3 5D                      pop ebp
:0041B8F4 C3                      ret



* Referenced by a CALL at Address:
|:0041F0B0   
|
:0041B8F5 55                      push ebp
:0041B8F6 8BEC                    mov ebp, esp
:0041B8F8 83EC18                  sub esp, 00000018
:0041B8FB 66C745EC0000            mov [ebp-14], 0000
:0041B901 66C745E80200            mov [ebp-18], 0002
:0041B907 66C745FC0000            mov [ebp-04], 0000
:0041B90D 66C745F00000            mov [ebp-10], 0000
:0041B913 66C745F40000            mov [ebp-0C], 0000
:0041B919 EB0C                    jmp 0041B927

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B9C7(U)
|
:0041B91B 668B45F4                mov ax, word ptr [ebp-0C]
:0041B91F 66050100                add ax, 0001
:0041B923 668945F4                mov word ptr [ebp-0C], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B919(U)
|
:0041B927 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041B92A 81E1FFFF0000            and ecx, 0000FFFF
:0041B930 83F964                  cmp ecx, 00000064
:0041B933 0F8D93000000            jnl 0041B9CC
:0041B939 668B55EC                mov dx, word ptr [ebp-14]
:0041B93D 668955FC                mov word ptr [ebp-04], dx
:0041B941 66C745F80000            mov [ebp-08], 0000
:0041B947 EB0C                    jmp 0041B955

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B99D(U)
|
:0041B949 668B45F8                mov ax, word ptr [ebp-08]
:0041B94D 66050100                add ax, 0001
:0041B951 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B947(U)
|
:0041B955 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041B958 81E1FFFF0000            and ecx, 0000FFFF
:0041B95E 83F964                  cmp ecx, 00000064
:0041B961 7D3C                    jge 0041B99F
:0041B963 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041B966 81E2FFFF0000            and edx, 0000FFFF
:0041B96C 6BD264                  imul edx, 00000064
:0041B96F 8B45F8                  mov eax, dword ptr [ebp-08]
:0041B972 25FFFF0000              and eax, 0000FFFF
:0041B977 03D0                    add edx, eax
:0041B979 668B4DFC                mov cx, word ptr [ebp-04]
:0041B97D 66890C5530B54800        mov word ptr [2*edx+0048B530], cx
:0041B985 668B55F0                mov dx, word ptr [ebp-10]
:0041B989 6683C201                add dx, 0001
:0041B98D 668955F0                mov word ptr [ebp-10], dx
:0041B991 668B45FC                mov ax, word ptr [ebp-04]
:0041B995 660345F0                add ax, word ptr [ebp-10]
:0041B999 668945FC                mov word ptr [ebp-04], ax
:0041B99D EBAA                    jmp 0041B949

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B961(C)
|
:0041B99F 668B4DEC                mov cx, word ptr [ebp-14]
:0041B9A3 66034DE8                add cx, word ptr [ebp-18]
:0041B9A7 66894DEC                mov word ptr [ebp-14], cx
:0041B9AB 8B55E8                  mov edx, dword ptr [ebp-18]
:0041B9AE 81E2FFFF0000            and edx, 0000FFFF
:0041B9B4 83EA01                  sub edx, 00000001
:0041B9B7 668955F0                mov word ptr [ebp-10], dx
:0041B9BB 668B45E8                mov ax, word ptr [ebp-18]
:0041B9BF 66050100                add ax, 0001
:0041B9C3 668945E8                mov word ptr [ebp-18], ax
:0041B9C7 E94FFFFFFF              jmp 0041B91B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B933(C)
|
:0041B9CC 8BE5                    mov esp, ebp
:0041B9CE 5D                      pop ebp
:0041B9CF C3                      ret



* Referenced by a CALL at Address:
|:0041BD96   
|
:0041B9D0 55                      push ebp
:0041B9D1 8BEC                    mov ebp, esp
:0041B9D3 83EC24                  sub esp, 00000024
:0041B9D6 56                      push esi
:0041B9D7 66C745EC0000            mov [ebp-14], 0000
:0041B9DD EB0C                    jmp 0041B9EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BA73(U)
|
:0041B9DF 668B45EC                mov ax, word ptr [ebp-14]
:0041B9E3 66050100                add ax, 0001
:0041B9E7 668945EC                mov word ptr [ebp-14], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B9DD(U)
|
:0041B9EB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041B9EE 81E1FFFF0000            and ecx, 0000FFFF
:0041B9F4 33D2                    xor edx, edx
:0041B9F6 668B1524B54800          mov dx, word ptr [0048B524]
:0041B9FD 3BCA                    cmp ecx, edx
:0041B9FF 7D77                    jge 0041BA78
:0041BA01 8B45EC                  mov eax, dword ptr [ebp-14]
:0041BA04 25FFFF0000              and eax, 0000FFFF
:0041BA09 8B0C8570244900          mov ecx, dword ptr [4*eax+00492470]
:0041BA10 894DF4                  mov dword ptr [ebp-0C], ecx
:0041BA13 66C745E04000            mov [ebp-20], 0040
:0041BA19 8B45E0                  mov eax, dword ptr [ebp-20]
:0041BA1C 25FFFF0000              and eax, 0000FFFF
:0041BA21 99                      cdq
:0041BA22 83E203                  and edx, 00000003
:0041BA25 03C2                    add eax, edx
:0041BA27 C1F802                  sar eax, 02
:0041BA2A 668945F0                mov word ptr [ebp-10], ax
:0041BA2E 8B45E0                  mov eax, dword ptr [ebp-20]
:0041BA31 25FFFF0000              and eax, 0000FFFF
:0041BA36 99                      cdq
:0041BA37 33C2                    xor eax, edx
:0041BA39 2BC2                    sub eax, edx
:0041BA3B 83E003                  and eax, 00000003
:0041BA3E 33C2                    xor eax, edx
:0041BA40 2BC2                    sub eax, edx
:0041BA42 85C0                    test eax, eax
:0041BA44 740C                    je 0041BA52
:0041BA46 668B55F0                mov dx, word ptr [ebp-10]
:0041BA4A 6683C201                add dx, 0001
:0041BA4E 668955F0                mov word ptr [ebp-10], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BA44(C)
|
:0041BA52 8B75F0                  mov esi, dword ptr [ebp-10]
:0041BA55 81E6FFFF0000            and esi, 0000FFFF
:0041BA5B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041BA5E E8AD3B0000              call 0041F610
:0041BA63 25FFFF0000              and eax, 0000FFFF
:0041BA68 03F0                    add esi, eax
:0041BA6A 56                      push esi
:0041BA6B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041BA6E E8DD3A0000              call 0041F550
:0041BA73 E967FFFFFF              jmp 0041B9DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041B9FF(C)
|
:0041BA78 66C745EC0000            mov [ebp-14], 0000
:0041BA7E EB0C                    jmp 0041BA8C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BC06(U)
|
:0041BA80 668B45EC                mov ax, word ptr [ebp-14]
:0041BA84 66050100                add ax, 0001
:0041BA88 668945EC                mov word ptr [ebp-14], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BA7E(U)
|
:0041BA8C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041BA8F 81E1FFFF0000            and ecx, 0000FFFF
:0041BA95 33D2                    xor edx, edx
:0041BA97 668B1524B54800          mov dx, word ptr [0048B524]
:0041BA9E 3BCA                    cmp ecx, edx
:0041BAA0 0F8D65010000            jnl 0041BC0B
:0041BAA6 8B45EC                  mov eax, dword ptr [ebp-14]
:0041BAA9 25FFFF0000              and eax, 0000FFFF
:0041BAAE 8B0C8570244900          mov ecx, dword ptr [4*eax+00492470]
:0041BAB5 894DF4                  mov dword ptr [ebp-0C], ecx
:0041BAB8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041BABB E8103B0000              call 0041F5D0
:0041BAC0 668BF0                  mov si, ax
:0041BAC3 81E6FFFF0000            and esi, 0000FFFF
:0041BAC9 6BF664                  imul esi, 00000064
:0041BACC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041BACF E82C370000              call 0041F200
:0041BAD4 25FFFF0000              and eax, 0000FFFF
:0041BAD9 03F0                    add esi, eax
:0041BADB 668B147530B54800        mov dx, word ptr [2*esi+0048B530]
:0041BAE3 668955FC                mov word ptr [ebp-04], dx
:0041BAE7 8B45EC                  mov eax, dword ptr [ebp-14]
:0041BAEA 25FFFF0000              and eax, 0000FFFF
:0041BAEF 83C001                  add eax, 00000001
:0041BAF2 668945E8                mov word ptr [ebp-18], ax
:0041BAF6 EB0C                    jmp 0041BB04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BC01(U)
|
:0041BAF8 668B4DE8                mov cx, word ptr [ebp-18]
:0041BAFC 6683C101                add cx, 0001
:0041BB00 66894DE8                mov word ptr [ebp-18], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BAF6(U)
|
:0041BB04 8B55E8                  mov edx, dword ptr [ebp-18]
:0041BB07 81E2FFFF0000            and edx, 0000FFFF
:0041BB0D 33C0                    xor eax, eax
:0041BB0F 66A124B54800            mov ax, word ptr [0048B524]
:0041BB15 3BD0                    cmp edx, eax
:0041BB17 0F8DE9000000            jnl 0041BC06
:0041BB1D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041BB20 81E1FFFF0000            and ecx, 0000FFFF
:0041BB26 8B148D70244900          mov edx, dword ptr [4*ecx+00492470]
:0041BB2D 8955DC                  mov dword ptr [ebp-24], edx
:0041BB30 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041BB33 E8983A0000              call 0041F5D0
:0041BB38 668BF0                  mov si, ax
:0041BB3B 81E6FFFF0000            and esi, 0000FFFF
:0041BB41 6BF664                  imul esi, 00000064
:0041BB44 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041BB47 E8B4360000              call 0041F200
:0041BB4C 25FFFF0000              and eax, 0000FFFF
:0041BB51 03F0                    add esi, eax
:0041BB53 668B047530B54800        mov ax, word ptr [2*esi+0048B530]
:0041BB5B 668945E4                mov word ptr [ebp-1C], ax
:0041BB5F 66C745F80000            mov [ebp-08], 0000
:0041BB65 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041BB68 81E1FFFF0000            and ecx, 0000FFFF
:0041BB6E 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041BB71 81E2FFFF0000            and edx, 0000FFFF
:0041BB77 3BCA                    cmp ecx, edx
:0041BB79 7E08                    jle 0041BB83
:0041BB7B 66C745F80100            mov [ebp-08], 0001
:0041BB81 EB3D                    jmp 0041BBC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BB79(C)
|
:0041BB83 8B45FC                  mov eax, dword ptr [ebp-04]
:0041BB86 25FFFF0000              and eax, 0000FFFF
:0041BB8B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041BB8E 81E1FFFF0000            and ecx, 0000FFFF
:0041BB94 3BC1                    cmp eax, ecx
:0041BB96 7528                    jne 0041BBC0
:0041BB98 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041BB9B E8D0390000              call 0041F570
:0041BBA0 668BF0                  mov si, ax
:0041BBA3 81E6FFFF0000            and esi, 0000FFFF
:0041BBA9 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041BBAC E8BF390000              call 0041F570
:0041BBB1 25FFFF0000              and eax, 0000FFFF
:0041BBB6 3BF0                    cmp esi, eax
:0041BBB8 7E06                    jle 0041BBC0
:0041BBBA 66C745F80100            mov [ebp-08], 0001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041BB81(U), :0041BB96(C), :0041BBB8(C)
|
:0041BBC0 8B55F8                  mov edx, dword ptr [ebp-08]
:0041BBC3 81E2FFFF0000            and edx, 0000FFFF
:0041BBC9 83FA01                  cmp edx, 00000001
:0041BBCC 7533                    jne 0041BC01
:0041BBCE 668B45E4                mov ax, word ptr [ebp-1C]
:0041BBD2 668945FC                mov word ptr [ebp-04], ax
:0041BBD6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041BBD9 81E1FFFF0000            and ecx, 0000FFFF
:0041BBDF 8B55DC                  mov edx, dword ptr [ebp-24]
:0041BBE2 89148D70244900          mov dword ptr [4*ecx+00492470], edx
:0041BBE9 8B45E8                  mov eax, dword ptr [ebp-18]
:0041BBEC 25FFFF0000              and eax, 0000FFFF
:0041BBF1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041BBF4 890C8570244900          mov dword ptr [4*eax+00492470], ecx
:0041BBFB 8B55DC                  mov edx, dword ptr [ebp-24]
:0041BBFE 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BBCC(C)
|
:0041BC01 E9F2FEFFFF              jmp 0041BAF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BB17(C)
|
:0041BC06 E975FEFFFF              jmp 0041BA80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BAA0(C)
|
:0041BC0B 5E                      pop esi
:0041BC0C 8BE5                    mov esp, ebp
:0041BC0E 5D                      pop ebp
:0041BC0F C3                      ret



* Referenced by a CALL at Address:
|:0041BD91   
|
:0041BC10 55                      push ebp
:0041BC11 8BEC                    mov ebp, esp
:0041BC13 83EC0C                  sub esp, 0000000C
:0041BC16 66C70524B548000000      mov word ptr [0048B524], 0000
:0041BC1F C745FC10044900          mov [ebp-04], 00490410
:0041BC26 66C745F80000            mov [ebp-08], 0000
:0041BC2C EB15                    jmp 0041BC43

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BC97(U)
|
:0041BC2E 668B45F8                mov ax, word ptr [ebp-08]
:0041BC32 66050100                add ax, 0001
:0041BC36 668945F8                mov word ptr [ebp-08], ax
:0041BC3A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041BC3D 83C140                  add ecx, 00000040
:0041BC40 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BC2C(U)
|
:0041BC43 8B55F8                  mov edx, dword ptr [ebp-08]
:0041BC46 81E2FFFF0000            and edx, 0000FFFF
:0041BC4C 81FA80000000            cmp edx, 00000080
:0041BC52 7D45                    jge 0041BC99
:0041BC54 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041BC57 E8F40DFFFF              call 0040CA50
:0041BC5C 668945F4                mov word ptr [ebp-0C], ax
:0041BC60 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041BC63 25FFFF0000              and eax, 0000FFFF
:0041BC68 2501800000              and eax, 00008001
:0041BC6D 3D01800000              cmp eax, 00008001
:0041BC72 7523                    jne 0041BC97
:0041BC74 33C9                    xor ecx, ecx
:0041BC76 668B0D24B54800          mov cx, word ptr [0048B524]
:0041BC7D 8B55FC                  mov edx, dword ptr [ebp-04]
:0041BC80 89148D70244900          mov dword ptr [4*ecx+00492470], edx
:0041BC87 66A124B54800            mov ax, word ptr [0048B524]
:0041BC8D 66050100                add ax, 0001
:0041BC91 66A324B54800            mov word ptr [0048B524], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BC72(C)
|
:0041BC97 EB95                    jmp 0041BC2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BC52(C)
|
:0041BC99 8BE5                    mov esp, ebp
:0041BC9B 5D                      pop ebp
:0041BC9C C3                      ret



* Referenced by a CALL at Addresses:
|:0041BCD3   , :0041E697   
|
:0041BC9D 55                      push ebp
:0041BC9E 8BEC                    mov ebp, esp
:0041BCA0 51                      push ecx
:0041BCA1 8B4508                  mov eax, dword ptr [ebp+08]
:0041BCA4 8A08                    mov cl, byte ptr [eax]
:0041BCA6 884DFC                  mov byte ptr [ebp-04], cl
:0041BCA9 8B55FC                  mov edx, dword ptr [ebp-04]
:0041BCAC 81E2FF000000            and edx, 000000FF
:0041BCB2 660FB682E0CA4700        movzx ax, byte ptr [edx+0047CAE0]
:0041BCBA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041BCBD 668901                  mov word ptr [ecx], ax
:0041BCC0 8A45FC                  mov al, byte ptr [ebp-04]
:0041BCC3 8BE5                    mov esp, ebp
:0041BCC5 5D                      pop ebp
:0041BCC6 C3                      ret



* Referenced by a CALL at Address:
|:0041E737   
|
:0041BCC7 55                      push ebp
:0041BCC8 8BEC                    mov ebp, esp
:0041BCCA 51                      push ecx
:0041BCCB 8D45FC                  lea eax, dword ptr [ebp-04]
:0041BCCE 50                      push eax
:0041BCCF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041BCD2 51                      push ecx
:0041BCD3 E8C5FFFFFF              call 0041BC9D
:0041BCD8 83C408                  add esp, 00000008
:0041BCDB 8B55FC                  mov edx, dword ptr [ebp-04]
:0041BCDE 81E2FFFF0000            and edx, 0000FFFF
:0041BCE4 8B4508                  mov eax, dword ptr [ebp+08]
:0041BCE7 03C2                    add eax, edx
:0041BCE9 8BE5                    mov esp, ebp
:0041BCEB 5D                      pop ebp
:0041BCEC C3                      ret


:0041BCED 55                      push ebp
:0041BCEE 8BEC                    mov ebp, esp
:0041BCF0 51                      push ecx
:0041BCF1 8B450C                  mov eax, dword ptr [ebp+0C]
:0041BCF4 25FFFF0000              and eax, 0000FFFF
:0041BCF9 85C0                    test eax, eax
:0041BCFB 7512                    jne 0041BD0F
:0041BCFD 8B4508                  mov eax, dword ptr [ebp+08]
:0041BD00 33D2                    xor edx, edx
:0041BD02 B910270000              mov ecx, 00002710
:0041BD07 F7F1                    div ecx
:0041BD09 668945FC                mov word ptr [ebp-04], ax
:0041BD0D EB10                    jmp 0041BD1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BCFB(C)
|
:0041BD0F 8B4508                  mov eax, dword ptr [ebp+08]
:0041BD12 33D2                    xor edx, edx
:0041BD14 B910270000              mov ecx, 00002710
:0041BD19 F7F1                    div ecx
:0041BD1B 668955FC                mov word ptr [ebp-04], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BD0D(U)
|
:0041BD1F 668B45FC                mov ax, word ptr [ebp-04]
:0041BD23 8BE5                    mov esp, ebp
:0041BD25 5D                      pop ebp
:0041BD26 C3                      ret



* Referenced by a CALL at Addresses:
|:0041BEFF   , :0041EF80   
|
:0041BD27 55                      push ebp
:0041BD28 8BEC                    mov ebp, esp
:0041BD2A 83EC0C                  sub esp, 0000000C
:0041BD2D C745FC70264900          mov [ebp-04], 00492670
:0041BD34 66C745F4A00F            mov [ebp-0C], 0FA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BD85(C)
|
:0041BD3A 8B45FC                  mov eax, dword ptr [ebp-04]
:0041BD3D 668B08                  mov cx, word ptr [eax]
:0041BD40 66894DF8                mov word ptr [ebp-08], cx
:0041BD44 668B55F8                mov dx, word ptr [ebp-08]
:0041BD48 6683E202                and dx, 0002
:0041BD4C 668955F8                mov word ptr [ebp-08], dx
:0041BD50 668B45F8                mov ax, word ptr [ebp-08]
:0041BD54 66D1E8                  shr ax, 1
:0041BD57 668945F8                mov word ptr [ebp-08], ax
:0041BD5B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041BD5E 668B55F8                mov dx, word ptr [ebp-08]
:0041BD62 668911                  mov word ptr [ecx], dx
:0041BD65 8B45FC                  mov eax, dword ptr [ebp-04]
:0041BD68 83C002                  add eax, 00000002
:0041BD6B 8945FC                  mov dword ptr [ebp-04], eax
:0041BD6E 668B4DF4                mov cx, word ptr [ebp-0C]
:0041BD72 6683E901                sub cx, 0001
:0041BD76 66894DF4                mov word ptr [ebp-0C], cx
:0041BD7A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041BD7D 81E2FFFF0000            and edx, 0000FFFF
:0041BD83 85D2                    test edx, edx
:0041BD85 75B3                    jne 0041BD3A
:0041BD87 8BE5                    mov esp, ebp
:0041BD89 5D                      pop ebp
:0041BD8A C3                      ret



* Referenced by a CALL at Addresses:
|:0041BF43   , :0041EF8A   
|
:0041BD8B 55                      push ebp
:0041BD8C 8BEC                    mov ebp, esp
:0041BD8E 83EC20                  sub esp, 00000020
:0041BD91 E87AFEFFFF              call 0041BC10
:0041BD96 E835FCFFFF              call 0041B9D0
:0041BD9B 68B8010000              push 000001B8
:0041BDA0 6880020000              push 00000280
:0041BDA5 6A28                    push 00000028
:0041BDA7 6A00                    push 00000000
:0041BDA9 E8FF9F0500              call 00475DAD
:0041BDAE 83C410                  add esp, 00000010
:0041BDB1 A154034900              mov eax, dword ptr [00490354]
:0041BDB6 8945F8                  mov dword ptr [ebp-08], eax
:0041BDB9 668B0D9C034900          mov cx, word ptr [0049039C]
:0041BDC0 66894DF0                mov word ptr [ebp-10], cx
:0041BDC4 66C745EC2800            mov [ebp-14], 0028
:0041BDCA C745FC70264900          mov [ebp-04], 00492670
:0041BDD1 6A00                    push 00000000
:0041BDD3 E837980500              call 0047560F
:0041BDD8 83C404                  add esp, 00000004
:0041BDDB 6A00                    push 00000000
:0041BDDD 6A00                    push 00000000
:0041BDDF 6A00                    push 00000000
:0041BDE1 E8379F0500              call 00475D1D
:0041BDE6 83C40C                  add esp, 0000000C
:0041BDE9 66C745E80000            mov [ebp-18], 0000
:0041BDEF EB0C                    jmp 0041BDFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BED5(U)
|
:0041BDF1 668B55E8                mov dx, word ptr [ebp-18]
:0041BDF5 6683C201                add dx, 0001
:0041BDF9 668955E8                mov word ptr [ebp-18], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BDEF(U)
|
:0041BDFD 8B45E8                  mov eax, dword ptr [ebp-18]
:0041BE00 25FFFF0000              and eax, 0000FFFF
:0041BE05 83F832                  cmp eax, 00000032
:0041BE08 0F8DCC000000            jnl 0041BEDA
:0041BE0E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041BE11 894DF4                  mov dword ptr [ebp-0C], ecx
:0041BE14 66C745E40000            mov [ebp-1C], 0000
:0041BE1A EB21                    jmp 0041BE3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BEA7(U)
|
:0041BE1C 668B55F0                mov dx, word ptr [ebp-10]
:0041BE20 6683C208                add dx, 0008
:0041BE24 668955F0                mov word ptr [ebp-10], dx
:0041BE28 668B45E4                mov ax, word ptr [ebp-1C]
:0041BE2C 66050100                add ax, 0001
:0041BE30 668945E4                mov word ptr [ebp-1C], ax
:0041BE34 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041BE37 83C102                  add ecx, 00000002
:0041BE3A 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BE1A(U)
|
:0041BE3D 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041BE40 81E2FFFF0000            and edx, 0000FFFF
:0041BE46 83FA50                  cmp edx, 00000050
:0041BE49 7D61                    jge 0041BEAC
:0041BE4B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041BE4E 668B08                  mov cx, word ptr [eax]
:0041BE51 66894DE0                mov word ptr [ebp-20], cx
:0041BE55 8B55FC                  mov edx, dword ptr [ebp-04]
:0041BE58 83C202                  add edx, 00000002
:0041BE5B 8955FC                  mov dword ptr [ebp-04], edx
:0041BE5E 8B45E0                  mov eax, dword ptr [ebp-20]
:0041BE61 25FFFF0000              and eax, 0000FFFF
:0041BE66 83E003                  and eax, 00000003
:0041BE69 85C0                    test eax, eax
:0041BE6B 743A                    je 0041BEA7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041BE6D 6A04                    push 00000004
:0041BE6F 6A00                    push 00000000
:0041BE71 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041BE74 33D2                    xor edx, edx
:0041BE76 668B11                  mov dx, word ptr [ecx]
:0041BE79 C1E206                  shl edx, 06
:0041BE7C 52                      push edx
:0041BE7D B9187D4A00              mov ecx, 004A7D18
:0041BE82 E809D10500              call 00478F90
:0041BE87 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0041BE88 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0041BE8A 6A08                    push 00000008
:0041BE8C 8B45EC                  mov eax, dword ptr [ebp-14]
:0041BE8F 25FFFF0000              and eax, 0000FFFF
:0041BE94 50                      push eax
:0041BE95 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041BE98 81E1FFFF0000            and ecx, 0000FFFF
:0041BE9E 51                      push ecx
:0041BE9F E850AC0500              call 00476AF4
:0041BEA4 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BE6B(C)
|
:0041BEA7 E970FFFFFF              jmp 0041BE1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BE49(C)
|
:0041BEAC 668B159C034900          mov dx, word ptr [0049039C]
:0041BEB3 668955F0                mov word ptr [ebp-10], dx
:0041BEB7 668B45EC                mov ax, word ptr [ebp-14]
:0041BEBB 66050800                add ax, 0008
:0041BEBF 668945EC                mov word ptr [ebp-14], ax
:0041BEC3 33C9                    xor ecx, ecx
:0041BEC5 668B0D60034900          mov cx, word ptr [00490360]
:0041BECC 8B55F8                  mov edx, dword ptr [ebp-08]
:0041BECF 8D044A                  lea eax, dword ptr [edx+2*ecx]
:0041BED2 8945F8                  mov dword ptr [ebp-08], eax
:0041BED5 E917FFFFFF              jmp 0041BDF1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BE08(C)
|
:0041BEDA E84EF9FFFF              call 0041B82D
:0041BEDF 68B8010000              push 000001B8
:0041BEE4 6880020000              push 00000280
:0041BEE9 6A28                    push 00000028
:0041BEEB 6A00                    push 00000000
:0041BEED E8BB9E0500              call 00475DAD
:0041BEF2 83C410                  add esp, 00000010
:0041BEF5 8BE5                    mov esp, ebp
:0041BEF7 5D                      pop ebp
:0041BEF8 C3                      ret



* Referenced by a CALL at Address:
|:0041BF54   
|
:0041BEF9 55                      push ebp
:0041BEFA 8BEC                    mov ebp, esp
:0041BEFC 83EC08                  sub esp, 00000008
:0041BEFF E823FEFFFF              call 0041BD27
:0041BF04 C745FC70264900          mov [ebp-04], 00492670
:0041BF0B 66C745F80000            mov [ebp-08], 0000
:0041BF11 EB15                    jmp 0041BF28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BF41(U)
|
:0041BF13 668B45F8                mov ax, word ptr [ebp-08]
:0041BF17 66050100                add ax, 0001
:0041BF1B 668945F8                mov word ptr [ebp-08], ax
:0041BF1F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041BF22 83C102                  add ecx, 00000002
:0041BF25 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BF11(U)
|
:0041BF28 8B55F8                  mov edx, dword ptr [ebp-08]
:0041BF2B 81E2FFFF0000            and edx, 0000FFFF
:0041BF31 81FAA00F0000            cmp edx, 00000FA0
:0041BF37 7D0A                    jge 0041BF43
:0041BF39 8B45FC                  mov eax, dword ptr [ebp-04]
:0041BF3C 66C7000900              mov word ptr [eax], 0009
:0041BF41 EBD0                    jmp 0041BF13

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041BF37(C)
|
:0041BF43 E843FEFFFF              call 0041BD8B
:0041BF48 8BE5                    mov esp, ebp
:0041BF4A 5D                      pop ebp
:0041BF4B C3                      ret



* Referenced by a CALL at Addresses:
|:0041CE6C   , :0041D419   , :0041D425   , :0041DD8D   , :0041DF5D   
|:0041E05D   , :0041E0AB   , :0041F0C9   
|
:0041BF4C 55                      push ebp
:0041BF4D 8BEC                    mov ebp, esp
:0041BF4F E8DF41FFFF              call 00410133
:0041BF54 E8A0FFFFFF              call 0041BEF9
:0041BF59 E8F041FFFF              call 0041014E
:0041BF5E 5D                      pop ebp
:0041BF5F C3                      ret



* Referenced by a CALL at Addresses:
|:0041C0BD   , :0041C5D0   , :0041C944   
|
:0041BF60 55                      push ebp
:0041BF61 8BEC                    mov ebp, esp
:0041BF63 83EC10                  sub esp, 00000010
:0041BF66 56                      push esi
:0041BF67 668B4510                mov ax, word ptr [ebp+10]
:0041BF6B 662D0100                sub ax, 0001
:0041BF6F 66894510                mov word ptr [ebp+10], ax
:0041BF73 668B4D14                mov cx, word ptr [ebp+14]
:0041BF77 6683E901                sub cx, 0001
:0041BF7B 66894D14                mov word ptr [ebp+14], cx
:0041BF7F 8B550C                  mov edx, dword ptr [ebp+0C]
:0041BF82 0FBF02                  movsx eax, word ptr [edx]
:0041BF85 8B4D18                  mov ecx, dword ptr [ebp+18]
:0041BF88 81E1FFFF0000            and ecx, 0000FFFF
:0041BF8E 0FBF144DC8C94700        movsx edx, word ptr [2*ecx+0047C9C8]
:0041BF96 03C2                    add eax, edx
:0041BF98 8B4D14                  mov ecx, dword ptr [ebp+14]
:0041BF9B 81E1FFFF0000            and ecx, 0000FFFF
:0041BFA1 2BC1                    sub eax, ecx
:0041BFA3 668945FC                mov word ptr [ebp-04], ax
:0041BFA7 8B5508                  mov edx, dword ptr [ebp+08]
:0041BFAA 0FBF02                  movsx eax, word ptr [edx]
:0041BFAD 8B4D18                  mov ecx, dword ptr [ebp+18]
:0041BFB0 81E1FFFF0000            and ecx, 0000FFFF
:0041BFB6 0FBF144DD8C94700        movsx edx, word ptr [2*ecx+0047C9D8]
:0041BFBE 03C2                    add eax, edx
:0041BFC0 668945F0                mov word ptr [ebp-10], ax
:0041BFC4 0FBF45F0                movsx eax, word ptr [ebp-10]
:0041BFC8 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041BFCB 81E1FFFF0000            and ecx, 0000FFFF
:0041BFD1 03C1                    add eax, ecx
:0041BFD3 668945F8                mov word ptr [ebp-08], ax
:0041BFD7 0FBF55FC                movsx edx, word ptr [ebp-04]
:0041BFDB 8B4514                  mov eax, dword ptr [ebp+14]
:0041BFDE 25FFFF0000              and eax, 0000FFFF
:0041BFE3 2BD0                    sub edx, eax
:0041BFE5 668955F4                mov word ptr [ebp-0C], dx
:0041BFE9 0FBF4DF0                movsx ecx, word ptr [ebp-10]
:0041BFED 85C9                    test ecx, ecx
:0041BFEF 0F8CA7000000            jl 0041C09C
:0041BFF5 0FBF75F0                movsx esi, word ptr [ebp-10]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041BFF9 6A02                    push 00000002
:0041BFFB E862E9FFFF              call 0041A962
:0041C000 83C404                  add esp, 00000004
:0041C003 25FFFF0000              and eax, 0000FFFF
:0041C008 3BF0                    cmp esi, eax
:0041C00A 0F8D8C000000            jnl 0041C09C
:0041C010 0FBF55F8                movsx edx, word ptr [ebp-08]
:0041C014 85D2                    test edx, edx
:0041C016 0F8C80000000            jl 0041C09C
:0041C01C 0FBF75F8                movsx esi, word ptr [ebp-08]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041C020 6A02                    push 00000002
:0041C022 E83BE9FFFF              call 0041A962
:0041C027 83C404                  add esp, 00000004
:0041C02A 25FFFF0000              and eax, 0000FFFF
:0041C02F 3BF0                    cmp esi, eax
:0041C031 7D69                    jge 0041C09C
:0041C033 0FBF45FC                movsx eax, word ptr [ebp-04]
:0041C037 85C0                    test eax, eax
:0041C039 7C61                    jl 0041C09C
:0041C03B 0FBF75FC                movsx esi, word ptr [ebp-04]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041C03F 6A04                    push 00000004
:0041C041 E81CE9FFFF              call 0041A962
:0041C046 83C404                  add esp, 00000004
:0041C049 25FFFF0000              and eax, 0000FFFF
:0041C04E 3BF0                    cmp esi, eax
:0041C050 7D4A                    jge 0041C09C
:0041C052 0FBF4DF4                movsx ecx, word ptr [ebp-0C]
:0041C056 85C9                    test ecx, ecx
:0041C058 7C42                    jl 0041C09C
:0041C05A 0FBF75F4                movsx esi, word ptr [ebp-0C]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041C05E 6A04                    push 00000004
:0041C060 E8FDE8FFFF              call 0041A962
:0041C065 83C404                  add esp, 00000004
:0041C068 25FFFF0000              and eax, 0000FFFF
:0041C06D 3BF0                    cmp esi, eax
:0041C06F 7D2B                    jge 0041C09C
:0041C071 8B5508                  mov edx, dword ptr [ebp+08]
:0041C074 668B45F0                mov ax, word ptr [ebp-10]
:0041C078 668902                  mov word ptr [edx], ax
:0041C07B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041C07E 81E1FFFF0000            and ecx, 0000FFFF
:0041C084 8B5514                  mov edx, dword ptr [ebp+14]
:0041C087 81E2FFFF0000            and edx, 0000FFFF
:0041C08D 03CA                    add ecx, edx
:0041C08F 8B450C                  mov eax, dword ptr [ebp+0C]
:0041C092 668908                  mov word ptr [eax], cx
:0041C095 B801000000              mov eax, 00000001
:0041C09A EB02                    jmp 0041C09E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041BFEF(C), :0041C00A(C), :0041C016(C), :0041C031(C), :0041C039(C)
|:0041C050(C), :0041C058(C), :0041C06F(C)
|
:0041C09C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C09A(U)
|
:0041C09E 5E                      pop esi
:0041C09F 8BE5                    mov esp, ebp
:0041C0A1 5D                      pop ebp
:0041C0A2 C3                      ret



* Referenced by a CALL at Addresses:
|:0041C1E3   , :0041D750   , :0041D8F3   , :0041E946   
|
:0041C0A3 55                      push ebp
:0041C0A4 8BEC                    mov ebp, esp
:0041C0A6 668B4518                mov ax, word ptr [ebp+18]
:0041C0AA 50                      push eax
:0041C0AB 668B4D14                mov cx, word ptr [ebp+14]
:0041C0AF 51                      push ecx
:0041C0B0 668B5510                mov dx, word ptr [ebp+10]
:0041C0B4 52                      push edx
:0041C0B5 8B450C                  mov eax, dword ptr [ebp+0C]
:0041C0B8 50                      push eax
:0041C0B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C0BC 51                      push ecx
:0041C0BD E89EFEFFFF              call 0041BF60
:0041C0C2 83C414                  add esp, 00000014
:0041C0C5 85C0                    test eax, eax
:0041C0C7 7506                    jne 0041C0CF
:0041C0C9 660DFFFF                or ax, FFFF
:0041C0CD EB36                    jmp 0041C105

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C0C7(C)
|
:0041C0CF 6A01                    push 00000001
:0041C0D1 668B5514                mov dx, word ptr [ebp+14]
:0041C0D5 52                      push edx
:0041C0D6 668B4510                mov ax, word ptr [ebp+10]
:0041C0DA 50                      push eax
:0041C0DB 6A00                    push 00000000
:0041C0DD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C0E0 668B11                  mov dx, word ptr [ecx]
:0041C0E3 52                      push edx
:0041C0E4 8B4508                  mov eax, dword ptr [ebp+08]
:0041C0E7 668B08                  mov cx, word ptr [eax]
:0041C0EA 51                      push ecx
:0041C0EB E870EEFFFF              call 0041AF60
:0041C0F0 83C418                  add esp, 00000018
:0041C0F3 25FFFF0000              and eax, 0000FFFF
:0041C0F8 85C0                    test eax, eax
:0041C0FA 7406                    je 0041C102
:0041C0FC 660DFFFF                or ax, FFFF
:0041C100 EB03                    jmp 0041C105

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C0FA(C)
|
:0041C102 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C0CD(U), :0041C100(U)
|
:0041C105 5D                      pop ebp
:0041C106 C3                      ret



* Referenced by a CALL at Address:
|:0041C512   
|
:0041C107 55                      push ebp
:0041C108 8BEC                    mov ebp, esp
:0041C10A 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041C10D 6A04                    push 00000004
:0041C10F 6A00                    push 00000000
:0041C111 6A00                    push 00000000
:0041C113 B9007D4A00              mov ecx, 004A7D00
:0041C118 E873CE0500              call 00478F90
:0041C11D 8945EC                  mov dword ptr [ebp-14], eax
:0041C120 8B45EC                  mov eax, dword ptr [ebp-14]
:0041C123 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041C126 6A02                    push 00000002
:0041C128 E835E8FFFF              call 0041A962
:0041C12D 83C404                  add esp, 00000004
:0041C130 668945D8                mov word ptr [ebp-28], ax
:0041C134 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C137 81E1FFFF0000            and ecx, 0000FFFF
:0041C13D 8B55D8                  mov edx, dword ptr [ebp-28]
:0041C140 81E2FFFF0000            and edx, 0000FFFF
:0041C146 0FAFCA                  imul ecx, edx
:0041C149 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041C14C 8D0C48                  lea ecx, dword ptr [eax+2*ecx]
:0041C14F 8B5508                  mov edx, dword ptr [ebp+08]
:0041C152 81E2FFFF0000            and edx, 0000FFFF
:0041C158 668B0451                mov ax, word ptr [ecx+2*edx]
:0041C15C 668945DC                mov word ptr [ebp-24], ax
:0041C160 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041C163 81E1FFFF0000            and ecx, 0000FFFF
:0041C169 85C9                    test ecx, ecx
:0041C16B 7509                    jne 0041C176
:0041C16D 660DFFFF                or ax, FFFF
:0041C171 E9DB000000              jmp 0041C251

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C16B(C)
|
:0041C176 66C745F8FFFF            mov [ebp-08], FFFF
:0041C17C 66C745E40000            mov [ebp-1C], 0000
:0041C182 EB0C                    jmp 0041C190

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C248(U)
|
:0041C184 668B55E4                mov dx, word ptr [ebp-1C]
:0041C188 6683C201                add dx, 0001
:0041C18C 668955E4                mov word ptr [ebp-1C], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C182(U)
|
:0041C190 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041C193 25FFFF0000              and eax, 0000FFFF
:0041C198 83F804                  cmp eax, 00000004
:0041C19B 0F8DAC000000            jnl 0041C24D
:0041C1A1 33C9                    xor ecx, ecx
:0041C1A3 668B0D00B54800          mov cx, word ptr [0048B500]
:0041C1AA 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041C1AD 81E2FFFF0000            and edx, 0000FFFF
:0041C1B3 03CA                    add ecx, edx
:0041C1B5 83E103                  and ecx, 00000003
:0041C1B8 66894DE0                mov word ptr [ebp-20], cx
:0041C1BC 668B4508                mov ax, word ptr [ebp+08]
:0041C1C0 668945F0                mov word ptr [ebp-10], ax
:0041C1C4 668B4D0C                mov cx, word ptr [ebp+0C]
:0041C1C8 66894DE8                mov word ptr [ebp-18], cx
:0041C1CC 668B55E0                mov dx, word ptr [ebp-20]
:0041C1D0 52                      push edx
:0041C1D1 668B4514                mov ax, word ptr [ebp+14]
:0041C1D5 50                      push eax
:0041C1D6 668B4D10                mov cx, word ptr [ebp+10]
:0041C1DA 51                      push ecx
:0041C1DB 8D55E8                  lea edx, dword ptr [ebp-18]
:0041C1DE 52                      push edx
:0041C1DF 8D45F0                  lea eax, dword ptr [ebp-10]
:0041C1E2 50                      push eax
:0041C1E3 E8BBFEFFFF              call 0041C0A3
:0041C1E8 83C414                  add esp, 00000014
:0041C1EB 25FFFF0000              and eax, 0000FFFF
:0041C1F0 3DFFFF0000              cmp eax, 0000FFFF
:0041C1F5 7451                    je 0041C248
:0041C1F7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041C1FA 81E1FFFF0000            and ecx, 0000FFFF
:0041C200 8B55D8                  mov edx, dword ptr [ebp-28]
:0041C203 81E2FFFF0000            and edx, 0000FFFF
:0041C209 0FAFCA                  imul ecx, edx
:0041C20C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041C20F 8D0C48                  lea ecx, dword ptr [eax+2*ecx]
:0041C212 8B55F0                  mov edx, dword ptr [ebp-10]
:0041C215 81E2FFFF0000            and edx, 0000FFFF
:0041C21B 8D0451                  lea eax, dword ptr [ecx+2*edx]
:0041C21E 8945FC                  mov dword ptr [ebp-04], eax
:0041C221 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041C224 81E1FFFF0000            and ecx, 0000FFFF
:0041C22A 8B55FC                  mov edx, dword ptr [ebp-04]
:0041C22D 33C0                    xor eax, eax
:0041C22F 668B02                  mov ax, word ptr [edx]
:0041C232 3BC8                    cmp ecx, eax
:0041C234 7E12                    jle 0041C248
:0041C236 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041C239 668B11                  mov dx, word ptr [ecx]
:0041C23C 668955DC                mov word ptr [ebp-24], dx
:0041C240 668B45E0                mov ax, word ptr [ebp-20]
:0041C244 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C1F5(C), :0041C234(C)
|
:0041C248 E937FFFFFF              jmp 0041C184

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C19B(C)
|
:0041C24D 668B45F8                mov ax, word ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C171(U)
|
:0041C251 8BE5                    mov esp, ebp
:0041C253 5D                      pop ebp
:0041C254 C3                      ret


:0041C255 55                      push ebp
:0041C256 8BEC                    mov ebp, esp
:0041C258 66B80100                mov ax, 0001
:0041C25C 5D                      pop ebp
:0041C25D C3                      ret



* Referenced by a CALL at Address:
|:0041C453   
|
:0041C25E 55                      push ebp
:0041C25F 8BEC                    mov ebp, esp
:0041C261 83EC08                  sub esp, 00000008
:0041C264 C745FC01000000          mov [ebp-04], 00000001
:0041C26B C745F800000000          mov [ebp-08], 00000000
:0041C272 EB11                    jmp 0041C285

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C29A(U)
|
:0041C274 8B45F8                  mov eax, dword ptr [ebp-08]
:0041C277 83C001                  add eax, 00000001
:0041C27A 8945F8                  mov dword ptr [ebp-08], eax
:0041C27D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041C280 D1E1                    shl ecx, 1
:0041C282 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C272(U)
|
:0041C285 837DF820                cmp dword ptr [ebp-08], 00000020
:0041C289 7311                    jnb 0041C29C
:0041C28B 8B1520B54800            mov edx, dword ptr [0048B520]
:0041C291 2355FC                  and edx, dword ptr [ebp-04]
:0041C294 85D2                    test edx, edx
:0041C296 7502                    jne 0041C29A
:0041C298 EB02                    jmp 0041C29C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C296(C)
|
:0041C29A EBD8                    jmp 0041C274

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C289(C), :0041C298(U)
|
:0041C29C 837DF820                cmp dword ptr [ebp-08], 00000020
:0041C2A0 7506                    jne 0041C2A8
:0041C2A2 660DFFFF                or ax, FFFF
:0041C2A6 EB1C                    jmp 0041C2C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C2A0(C)
|
:0041C2A8 B801000000              mov eax, 00000001
:0041C2AD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C2B0 D3E0                    shl eax, cl
:0041C2B2 8B0D20B54800            mov ecx, dword ptr [0048B520]
:0041C2B8 0BC8                    or ecx, eax
:0041C2BA 890D20B54800            mov dword ptr [0048B520], ecx
:0041C2C0 668B45F8                mov ax, word ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C2A6(U)
|
:0041C2C4 8BE5                    mov esp, ebp
:0041C2C6 5D                      pop ebp
:0041C2C7 C3                      ret



* Referenced by a CALL at Address:
|:0041DD6B   
|
:0041C2C8 55                      push ebp
:0041C2C9 8BEC                    mov ebp, esp
:0041C2CB 8B4508                  mov eax, dword ptr [ebp+08]
:0041C2CE 25FFFF0000              and eax, 0000FFFF
:0041C2D3 83F820                  cmp eax, 00000020
:0041C2D6 7D1E                    jge 0041C2F6
:0041C2D8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C2DB 81E1FFFF0000            and ecx, 0000FFFF
:0041C2E1 BA01000000              mov edx, 00000001
:0041C2E6 D3E2                    shl edx, cl
:0041C2E8 F7D2                    not edx
:0041C2EA A120B54800              mov eax, dword ptr [0048B520]
:0041C2EF 23C2                    and eax, edx
:0041C2F1 A320B54800              mov dword ptr [0048B520], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C2D6(C)
|
:0041C2F6 5D                      pop ebp
:0041C2F7 C3                      ret



* Referenced by a CALL at Addresses:
|:0041C4EA   , :0041DF20   
|
:0041C2F8 55                      push ebp
:0041C2F9 8BEC                    mov ebp, esp
:0041C2FB 83EC08                  sub esp, 00000008
:0041C2FE 0FBF4510                movsx eax, word ptr [ebp+10]
:0041C302 0FBF4D08                movsx ecx, word ptr [ebp+08]
:0041C306 3BC1                    cmp eax, ecx
:0041C308 0F8E91000000            jle 0041C39F
:0041C30E 0FBF5514                movsx edx, word ptr [ebp+14]
:0041C312 0FBF450C                movsx eax, word ptr [ebp+0C]
:0041C316 3BD0                    cmp edx, eax
:0041C318 7E41                    jle 0041C35B
:0041C31A 0FBF4D10                movsx ecx, word ptr [ebp+10]
:0041C31E 0FBF5508                movsx edx, word ptr [ebp+08]
:0041C322 2BCA                    sub ecx, edx
:0041C324 66894DFC                mov word ptr [ebp-04], cx
:0041C328 0FBF4514                movsx eax, word ptr [ebp+14]
:0041C32C 0FBF4D0C                movsx ecx, word ptr [ebp+0C]
:0041C330 2BC1                    sub eax, ecx
:0041C332 668945F8                mov word ptr [ebp-08], ax
:0041C336 8B55FC                  mov edx, dword ptr [ebp-04]
:0041C339 81E2FFFF0000            and edx, 0000FFFF
:0041C33F 8B45F8                  mov eax, dword ptr [ebp-08]
:0041C342 25FFFF0000              and eax, 0000FFFF
:0041C347 3BD0                    cmp edx, eax
:0041C349 7C08                    jl 0041C353
:0041C34B 66C745FC0100            mov [ebp-04], 0001
:0041C351 EB06                    jmp 0041C359

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C349(C)
|
:0041C353 66C745FC0200            mov [ebp-04], 0002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C351(U)
|
:0041C359 EB3F                    jmp 0041C39A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C318(C)
|
:0041C35B 0FBF4D10                movsx ecx, word ptr [ebp+10]
:0041C35F 0FBF5508                movsx edx, word ptr [ebp+08]
:0041C363 2BCA                    sub ecx, edx
:0041C365 66894DFC                mov word ptr [ebp-04], cx
:0041C369 0FBF450C                movsx eax, word ptr [ebp+0C]
:0041C36D 0FBF4D14                movsx ecx, word ptr [ebp+14]
:0041C371 2BC1                    sub eax, ecx
:0041C373 668945F8                mov word ptr [ebp-08], ax
:0041C377 8B55FC                  mov edx, dword ptr [ebp-04]
:0041C37A 81E2FFFF0000            and edx, 0000FFFF
:0041C380 8B45F8                  mov eax, dword ptr [ebp-08]
:0041C383 25FFFF0000              and eax, 0000FFFF
:0041C388 3BD0                    cmp edx, eax
:0041C38A 7C08                    jl 0041C394
:0041C38C 66C745FC0100            mov [ebp-04], 0001
:0041C392 EB06                    jmp 0041C39A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C38A(C)
|
:0041C394 66C745FC0000            mov [ebp-04], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C359(U), :0041C392(U)
|
:0041C39A E98E000000              jmp 0041C42D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C308(C)
|
:0041C39F 0FBF4D14                movsx ecx, word ptr [ebp+14]
:0041C3A3 0FBF550C                movsx edx, word ptr [ebp+0C]
:0041C3A7 3BCA                    cmp ecx, edx
:0041C3A9 7E42                    jle 0041C3ED
:0041C3AB 0FBF4508                movsx eax, word ptr [ebp+08]
:0041C3AF 0FBF4D10                movsx ecx, word ptr [ebp+10]
:0041C3B3 2BC1                    sub eax, ecx
:0041C3B5 668945FC                mov word ptr [ebp-04], ax
:0041C3B9 0FBF5514                movsx edx, word ptr [ebp+14]
:0041C3BD 0FBF450C                movsx eax, word ptr [ebp+0C]
:0041C3C1 2BD0                    sub edx, eax
:0041C3C3 668955F8                mov word ptr [ebp-08], dx
:0041C3C7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041C3CA 81E1FFFF0000            and ecx, 0000FFFF
:0041C3D0 8B55F8                  mov edx, dword ptr [ebp-08]
:0041C3D3 81E2FFFF0000            and edx, 0000FFFF
:0041C3D9 3BCA                    cmp ecx, edx
:0041C3DB 7C08                    jl 0041C3E5
:0041C3DD 66C745FC0300            mov [ebp-04], 0003
:0041C3E3 EB06                    jmp 0041C3EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C3DB(C)
|
:0041C3E5 66C745FC0200            mov [ebp-04], 0002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C3E3(U)
|
:0041C3EB EB40                    jmp 0041C42D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C3A9(C)
|
:0041C3ED 0FBF4508                movsx eax, word ptr [ebp+08]
:0041C3F1 0FBF4D10                movsx ecx, word ptr [ebp+10]
:0041C3F5 2BC1                    sub eax, ecx
:0041C3F7 668945FC                mov word ptr [ebp-04], ax
:0041C3FB 0FBF550C                movsx edx, word ptr [ebp+0C]
:0041C3FF 0FBF4514                movsx eax, word ptr [ebp+14]
:0041C403 2BD0                    sub edx, eax
:0041C405 668955F8                mov word ptr [ebp-08], dx
:0041C409 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041C40C 81E1FFFF0000            and ecx, 0000FFFF
:0041C412 8B55F8                  mov edx, dword ptr [ebp-08]
:0041C415 81E2FFFF0000            and edx, 0000FFFF
:0041C41B 3BCA                    cmp ecx, edx
:0041C41D 7C08                    jl 0041C427
:0041C41F 66C745FC0300            mov [ebp-04], 0003
:0041C425 EB06                    jmp 0041C42D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C41D(C)
|
:0041C427 66C745FC0000            mov [ebp-04], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C39A(U), :0041C3EB(U), :0041C425(U)
|
:0041C42D 668B45FC                mov ax, word ptr [ebp-04]
:0041C431 8BE5                    mov esp, ebp
:0041C433 5D                      pop ebp
:0041C434 C3                      ret



* Referenced by a CALL at Addresses:
|:0041C770   , :0041CCF4   , :0041DC30   
|
:0041C435 55                      push ebp
:0041C436 8BEC                    mov ebp, esp
:0041C438 83EC24                  sub esp, 00000024
:0041C43B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C43E E8BD2D0000              call 0041F200
:0041C443 668945F0                mov word ptr [ebp-10], ax
:0041C447 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C44A E881310000              call 0041F5D0
:0041C44F 668945EC                mov word ptr [ebp-14], ax
:0041C453 E806FEFFFF              call 0041C25E
:0041C458 668945E0                mov word ptr [ebp-20], ax
:0041C45C 8B45E0                  mov eax, dword ptr [ebp-20]
:0041C45F 25FFFF0000              and eax, 0000FFFF
:0041C464 3DFFFF0000              cmp eax, 0000FFFF
:0041C469 7509                    jne 0041C474
:0041C46B 660DFFFF                or ax, FFFF
:0041C46F E978010000              jmp 0041C5EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C469(C)
|
:0041C474 668B4DE0                mov cx, word ptr [ebp-20]
:0041C478 51                      push ecx
:0041C479 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C47C E8AF320000              call 0041F730
:0041C481 8B55E0                  mov edx, dword ptr [ebp-20]
:0041C484 81E2FFFF0000            and edx, 0000FFFF
:0041C48A C1E20A                  shl edx, 0A
:0041C48D 668955F4                mov word ptr [ebp-0C], dx
:0041C491 668B45F4                mov ax, word ptr [ebp-0C]
:0041C495 50                      push eax
:0041C496 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C499 E8F2320000              call 0041F790

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041C49E 6A04                    push 00000004
:0041C4A0 6A00                    push 00000000
:0041C4A2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041C4A5 81E1FFFF0000            and ecx, 0000FFFF
:0041C4AB 51                      push ecx
:0041C4AC B9F0174B00              mov ecx, 004B17F0
:0041C4B1 E8DACA0500              call 00478F90
:0041C4B6 8945FC                  mov dword ptr [ebp-04], eax
:0041C4B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C4BC E82F300000              call 0041F4F0
:0041C4C1 668945E8                mov word ptr [ebp-18], ax
:0041C4C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C4C8 E863330000              call 0041F830
:0041C4CD 668945E4                mov word ptr [ebp-1C], ax
:0041C4D1 668B1598034900          mov dx, word ptr [00490398]
:0041C4D8 52                      push edx
:0041C4D9 66A194034900            mov ax, word ptr [00490394]
:0041C4DF 50                      push eax
:0041C4E0 668B4DEC                mov cx, word ptr [ebp-14]
:0041C4E4 51                      push ecx
:0041C4E5 668B55F0                mov dx, word ptr [ebp-10]
:0041C4E9 52                      push edx
:0041C4EA E809FEFFFF              call 0041C2F8
:0041C4EF 83C410                  add esp, 00000010
:0041C4F2 66A300B54800            mov word ptr [0048B500], ax
:0041C4F8 66C745F80000            mov [ebp-08], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C5E4(U)
|
:0041C4FE 668B45E4                mov ax, word ptr [ebp-1C]
:0041C502 50                      push eax
:0041C503 668B4DE8                mov cx, word ptr [ebp-18]
:0041C507 51                      push ecx
:0041C508 668B55EC                mov dx, word ptr [ebp-14]
:0041C50C 52                      push edx
:0041C50D 668B45F0                mov ax, word ptr [ebp-10]
:0041C511 50                      push eax
:0041C512 E8F0FBFFFF              call 0041C107
:0041C517 83C410                  add esp, 00000010
:0041C51A 668945DC                mov word ptr [ebp-24], ax
:0041C51E 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041C521 81E1FFFF0000            and ecx, 0000FFFF
:0041C527 81F9FFFF0000            cmp ecx, 0000FFFF
:0041C52D 756E                    jne 0041C59D
:0041C52F 8B550C                  mov edx, dword ptr [ebp+0C]
:0041C532 81E2FFFF0000            and edx, 0000FFFF
:0041C538 81FAFFFF0000            cmp edx, 0000FFFF
:0041C53E 741A                    je 0041C55A
:0041C540 8B450C                  mov eax, dword ptr [ebp+0C]
:0041C543 25FF000000              and eax, 000000FF
:0041C548 0C10                    or al, 10
:0041C54A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041C54D 8801                    mov byte ptr [ecx], al
:0041C54F 8B55FC                  mov edx, dword ptr [ebp-04]
:0041C552 83C201                  add edx, 00000001
:0041C555 8955FC                  mov dword ptr [ebp-04], edx
:0041C558 EB3B                    jmp 0041C595

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C53E(C)
|
:0041C55A 8B4510                  mov eax, dword ptr [ebp+10]
:0041C55D 25FFFF0000              and eax, 0000FFFF
:0041C562 85C0                    test eax, eax
:0041C564 742F                    je 0041C595
:0041C566 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C569 81E1FFFF0000            and ecx, 0000FFFF
:0041C56F 8B5510                  mov edx, dword ptr [ebp+10]
:0041C572 81E2FFFF0000            and edx, 0000FFFF
:0041C578 3BCA                    cmp ecx, edx
:0041C57A 7D08                    jge 0041C584
:0041C57C 668B45F8                mov ax, word ptr [ebp-08]
:0041C580 66894510                mov word ptr [ebp+10], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C57A(C)
|
:0041C584 8B4D10                  mov ecx, dword ptr [ebp+10]
:0041C587 81E1FFFF0000            and ecx, 0000FFFF
:0041C58D 8B55FC                  mov edx, dword ptr [ebp-04]
:0041C590 2BD1                    sub edx, ecx
:0041C592 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C558(U), :0041C564(C)
|
:0041C595 8B45FC                  mov eax, dword ptr [ebp-04]
:0041C598 C600EF                  mov byte ptr [eax], EF
:0041C59B EB4C                    jmp 0041C5E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C52D(C)
|
:0041C59D 668B4DDC                mov cx, word ptr [ebp-24]
:0041C5A1 66890D00B54800          mov word ptr [0048B500], cx
:0041C5A8 8B55FC                  mov edx, dword ptr [ebp-04]
:0041C5AB 8A45DC                  mov al, byte ptr [ebp-24]
:0041C5AE 8802                    mov byte ptr [edx], al
:0041C5B0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041C5B3 83C101                  add ecx, 00000001
:0041C5B6 894DFC                  mov dword ptr [ebp-04], ecx
:0041C5B9 668B55DC                mov dx, word ptr [ebp-24]
:0041C5BD 52                      push edx
:0041C5BE 668B45E4                mov ax, word ptr [ebp-1C]
:0041C5C2 50                      push eax
:0041C5C3 668B4DE8                mov cx, word ptr [ebp-18]
:0041C5C7 51                      push ecx
:0041C5C8 8D55EC                  lea edx, dword ptr [ebp-14]
:0041C5CB 52                      push edx
:0041C5CC 8D45F0                  lea eax, dword ptr [ebp-10]
:0041C5CF 50                      push eax
:0041C5D0 E88BF9FFFF              call 0041BF60
:0041C5D5 83C414                  add esp, 00000014
:0041C5D8 668B4DF8                mov cx, word ptr [ebp-08]
:0041C5DC 6683C101                add cx, 0001
:0041C5E0 66894DF8                mov word ptr [ebp-08], cx
:0041C5E4 E915FFFFFF              jmp 0041C4FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C59B(U)
|
:0041C5E9 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C46F(U)
|
:0041C5EC 8BE5                    mov esp, ebp
:0041C5EE 5D                      pop ebp
:0041C5EF C3                      ret



* Referenced by a CALL at Addresses:
|:0041C637   , :0041DDE1   
|
:0041C5F0 55                      push ebp
:0041C5F1 8BEC                    mov ebp, esp
:0041C5F3 51                      push ecx
:0041C5F4 33C0                    xor eax, eax
:0041C5F6 66A190034900            mov ax, word ptr [00490390]
:0041C5FC 3DFFFF0000              cmp eax, 0000FFFF
:0041C601 7506                    jne 0041C609
:0041C603 660DFFFF                or ax, FFFF
:0041C607 EB27                    jmp 0041C630

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C601(C)
|
:0041C609 E8DAE2FFFF              call 0041A8E8
:0041C60E 8945FC                  mov dword ptr [ebp-04], eax
:0041C611 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041C614 E83704FFFF              call 0040CA50
:0041C619 25FFFF0000              and eax, 0000FFFF
:0041C61E 2500800000              and eax, 00008000
:0041C623 85C0                    test eax, eax
:0041C625 7506                    jne 0041C62D
:0041C627 660DFFFF                or ax, FFFF
:0041C62B EB03                    jmp 0041C630

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C625(C)
|
:0041C62D 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C607(U), :0041C62B(U)
|
:0041C630 8BE5                    mov esp, ebp
:0041C632 5D                      pop ebp
:0041C633 C3                      ret



* Referenced by a CALL at Addresses:
|:0041CD87   , :0041DD1F   , :0041E25A   
|
:0041C634 55                      push ebp
:0041C635 8BEC                    mov ebp, esp
:0041C637 E8B4FFFFFF              call 0041C5F0
:0041C63C 25FFFF0000              and eax, 0000FFFF
:0041C641 85C0                    test eax, eax
:0041C643 7521                    jne 0041C666
:0041C645 E89EE2FFFF              call 0041A8E8
:0041C64A 8BC8                    mov ecx, eax
:0041C64C E81F04FFFF              call 0040CA70
:0041C651 25FFFF0000              and eax, 0000FFFF
:0041C656 83F804                  cmp eax, 00000004
:0041C659 7406                    je 0041C661
:0041C65B 660DFFFF                or ax, FFFF
:0041C65F EB09                    jmp 0041C66A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C659(C)
|
:0041C661 6633C0                  xor ax, ax
:0041C664 EB04                    jmp 0041C66A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C643(C)
|
:0041C666 660DFFFF                or ax, FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C65F(U), :0041C664(U)
|
:0041C66A 5D                      pop ebp
:0041C66B C3                      ret



* Referenced by a CALL at Address:
|:0041CDE6   
|
:0041C66C 55                      push ebp
:0041C66D 8BEC                    mov ebp, esp
:0041C66F 83EC1C                  sub esp, 0000001C
:0041C672 E871E2FFFF              call 0041A8E8
:0041C677 8945E4                  mov dword ptr [ebp-1C], eax
:0041C67A 8B4508                  mov eax, dword ptr [ebp+08]
:0041C67D 25FFFF0000              and eax, 0000FFFF
:0041C682 6BC00E                  imul eax, 0000000E
:0041C685 05A0034900              add eax, 004903A0
:0041C68A 8945FC                  mov dword ptr [ebp-04], eax
:0041C68D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C690 81E1FFFF0000            and ecx, 0000FFFF
:0041C696 83F904                  cmp ecx, 00000004
:0041C699 7C18                    jl 0041C6B3
:0041C69B 668B5508                mov dx, word ptr [ebp+08]
:0041C69F 6683EA02                sub dx, 0002
:0041C6A3 66895508                mov word ptr [ebp+08], dx
:0041C6A7 668B4508                mov ax, word ptr [ebp+08]
:0041C6AB 66250300                and ax, 0003
:0041C6AF 66894508                mov word ptr [ebp+08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C699(C)
|
:0041C6B3 668B4D08                mov cx, word ptr [ebp+08]
:0041C6B7 66D1E1                  shl cx, 1
:0041C6BA 66894D08                mov word ptr [ebp+08], cx
:0041C6BE 8B5508                  mov edx, dword ptr [ebp+08]
:0041C6C1 81E2FFFF0000            and edx, 0000FFFF
:0041C6C7 668B0455E0CB4700        mov ax, word ptr [2*edx+0047CBE0]
:0041C6CF 668945F8                mov word ptr [ebp-08], ax
:0041C6D3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041C6D6 81E1FFFF0000            and ecx, 0000FFFF
:0041C6DC 668B144DE2CB4700        mov dx, word ptr [2*ecx+0047CBE2]
:0041C6E4 668955F4                mov word ptr [ebp-0C], dx
:0041C6E8 66C745EC0800            mov [ebp-14], 0008
:0041C6EE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041C6F1 E8EA2A0000              call 0041F1E0
:0041C6F6 0FBFC0                  movsx eax, ax
:0041C6F9 0FBF4DF8                movsx ecx, word ptr [ebp-08]
:0041C6FD 0FBF55EC                movsx edx, word ptr [ebp-14]
:0041C701 0FAFCA                  imul ecx, edx
:0041C704 03C1                    add eax, ecx
:0041C706 668945F0                mov word ptr [ebp-10], ax
:0041C70A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041C70D E8EE2A0000              call 0041F200
:0041C712 0FBFC0                  movsx eax, ax
:0041C715 0FBF4DF4                movsx ecx, word ptr [ebp-0C]
:0041C719 0FBF55EC                movsx edx, word ptr [ebp-14]
:0041C71D 0FAFCA                  imul ecx, edx
:0041C720 03C1                    add eax, ecx
:0041C722 668945E8                mov word ptr [ebp-18], ax
:0041C726 6A01                    push 00000001
:0041C728 6A01                    push 00000001
:0041C72A 668B45E8                mov ax, word ptr [ebp-18]
:0041C72E 50                      push eax
:0041C72F 668B4DF0                mov cx, word ptr [ebp-10]
:0041C733 51                      push ecx
:0041C734 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041C737 E8F4300000              call 0041F830
:0041C73C 50                      push eax
:0041C73D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041C740 E8AB2D0000              call 0041F4F0
:0041C745 50                      push eax
:0041C746 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041C749 E8822E0000              call 0041F5D0
:0041C74E 50                      push eax
:0041C74F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041C752 E8A92A0000              call 0041F200
:0041C757 50                      push eax
:0041C758 E85A000000              call 0041C7B7
:0041C75D 83C420                  add esp, 00000020
:0041C760 83F801                  cmp eax, 00000001
:0041C763 7527                    jne 0041C78C
:0041C765 6A00                    push 00000000
:0041C767 68FFFF0000              push 0000FFFF
:0041C76C 8B55E4                  mov edx, dword ptr [ebp-1C]
:0041C76F 52                      push edx
:0041C770 E8C0FCFFFF              call 0041C435
:0041C775 83C40C                  add esp, 0000000C
:0041C778 25FFFF0000              and eax, 0000FFFF
:0041C77D 3DFFFF0000              cmp eax, 0000FFFF
:0041C782 7506                    jne 0041C78A
:0041C784 660DFFFF                or ax, FFFF
:0041C788 EB29                    jmp 0041C7B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C782(C)
|
:0041C78A EB06                    jmp 0041C792

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C763(C)
|
:0041C78C 660DFFFF                or ax, FFFF
:0041C790 EB21                    jmp 0041C7B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C78A(U)
|
:0041C792 6A01                    push 00000001
:0041C794 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041C797 E874300000              call 0041F810
:0041C79C 6A00                    push 00000000
:0041C79E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041C7A1 E80A300000              call 0041F7B0
:0041C7A6 6A00                    push 00000000
:0041C7A8 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041C7AB E8B01F0000              call 0041E760
:0041C7B0 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C788(U), :0041C790(U)
|
:0041C7B3 8BE5                    mov esp, ebp
:0041C7B5 5D                      pop ebp
:0041C7B6 C3                      ret



* Referenced by a CALL at Addresses:
|:0041C758   , :0041CCDC   , :0041DC18   
|
:0041C7B7 55                      push ebp
:0041C7B8 8BEC                    mov ebp, esp
:0041C7BA 83EC44                  sub esp, 00000044
:0041C7BD 56                      push esi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041C7BE 6A04                    push 00000004
:0041C7C0 6A00                    push 00000000
:0041C7C2 6A00                    push 00000000
:0041C7C4 B9007D4A00              mov ecx, 004A7D00
:0041C7C9 E8C2C70500              call 00478F90
:0041C7CE 8945E0                  mov dword ptr [ebp-20], eax
:0041C7D1 8B45E0                  mov eax, dword ptr [ebp-20]
:0041C7D4 8945E8                  mov dword ptr [ebp-18], eax
:0041C7D7 68FEFE0000              push 0000FEFE
:0041C7DC 68204E0000              push 00004E20
:0041C7E1 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0041C7E4 51                      push ecx
:0041C7E5 E8B2E0FFFF              call 0041A89C
:0041C7EA 83C40C                  add esp, 0000000C
:0041C7ED 8B55E0                  mov edx, dword ptr [ebp-20]
:0041C7F0 81C2409C0000            add edx, 00009C40
:0041C7F6 8955F8                  mov dword ptr [ebp-08], edx
:0041C7F9 8B45F8                  mov eax, dword ptr [ebp-08]
:0041C7FC 8945F0                  mov dword ptr [ebp-10], eax
:0041C7FF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041C802 83C102                  add ecx, 00000002
:0041C805 894DC8                  mov dword ptr [ebp-38], ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041C808 6A02                    push 00000002
:0041C80A E853E1FFFF              call 0041A962
:0041C80F 83C404                  add esp, 00000004
:0041C812 668945C4                mov word ptr [ebp-3C], ax
:0041C816 8B551C                  mov edx, dword ptr [ebp+1C]
:0041C819 81E2FFFF0000            and edx, 0000FFFF
:0041C81F 8B45C4                  mov eax, dword ptr [ebp-3C]
:0041C822 25FFFF0000              and eax, 0000FFFF
:0041C827 0FAFD0                  imul edx, eax
:0041C82A 8B4D18                  mov ecx, dword ptr [ebp+18]
:0041C82D 81E1FFFF0000            and ecx, 0000FFFF
:0041C833 03D1                    add edx, ecx
:0041C835 8B45F0                  mov eax, dword ptr [ebp-10]
:0041C838 668910                  mov word ptr [eax], dx
:0041C83B 668B4D18                mov cx, word ptr [ebp+18]
:0041C83F 66890D94034900          mov word ptr [00490394], cx
:0041C846 668B551C                mov dx, word ptr [ebp+1C]
:0041C84A 66891598034900          mov word ptr [00490398], dx
:0041C851 8B45F0                  mov eax, dword ptr [ebp-10]
:0041C854 33C9                    xor ecx, ecx
:0041C856 668B08                  mov cx, word ptr [eax]
:0041C859 8B55E8                  mov edx, dword ptr [ebp-18]
:0041C85C 66C7044A0000            mov word ptr [edx+2*ecx], 0000
:0041C862 8B4520                  mov eax, dword ptr [ebp+20]
:0041C865 25FFFF0000              and eax, 0000FFFF
:0041C86A 83E001                  and eax, 00000001
:0041C86D 85C0                    test eax, eax
:0041C86F 7435                    je 0041C8A6
:0041C871 8B4D18                  mov ecx, dword ptr [ebp+18]
:0041C874 81E1FFFF0000            and ecx, 0000FFFF
:0041C87A 8B5508                  mov edx, dword ptr [ebp+08]
:0041C87D 81E2FFFF0000            and edx, 0000FFFF
:0041C883 3BCA                    cmp ecx, edx
:0041C885 751F                    jne 0041C8A6
:0041C887 8B451C                  mov eax, dword ptr [ebp+1C]
:0041C88A 25FFFF0000              and eax, 0000FFFF
:0041C88F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C892 81E1FFFF0000            and ecx, 0000FFFF
:0041C898 3BC1                    cmp eax, ecx
:0041C89A 750A                    jne 0041C8A6
:0041C89C B801000000              mov eax, 00000001
:0041C8A1 E94C020000              jmp 0041CAF2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C86F(C), :0041C885(C), :0041C89A(C), :0041CAEB(U)
|
:0041C8A6 8B55F0                  mov edx, dword ptr [ebp-10]
:0041C8A9 3B55C8                  cmp edx, dword ptr [ebp-38]
:0041C8AC 0F843E020000            je 0041CAF0
:0041C8B2 8B45F0                  mov eax, dword ptr [ebp-10]
:0041C8B5 33C9                    xor ecx, ecx
:0041C8B7 668B08                  mov cx, word ptr [eax]
:0041C8BA 8BC1                    mov eax, ecx
:0041C8BC 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0041C8BF 81E1FFFF0000            and ecx, 0000FFFF
:0041C8C5 99                      cdq
:0041C8C6 F7F9                    idiv ecx
:0041C8C8 668955D8                mov word ptr [ebp-28], dx
:0041C8CC 8B55F0                  mov edx, dword ptr [ebp-10]
:0041C8CF 33C0                    xor eax, eax
:0041C8D1 668B02                  mov ax, word ptr [edx]
:0041C8D4 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0041C8D7 81E1FFFF0000            and ecx, 0000FFFF
:0041C8DD 99                      cdq
:0041C8DE F7F9                    idiv ecx
:0041C8E0 668945D0                mov word ptr [ebp-30], ax
:0041C8E4 8B55F0                  mov edx, dword ptr [ebp-10]
:0041C8E7 33C0                    xor eax, eax
:0041C8E9 668B02                  mov ax, word ptr [edx]
:0041C8EC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041C8EF 668B1441                mov dx, word ptr [ecx+2*eax]
:0041C8F3 668955F4                mov word ptr [ebp-0C], dx
:0041C8F7 66C745BC0000            mov [ebp-44], 0000
:0041C8FD EB0C                    jmp 0041C90B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CA24(U), :0041CAC9(U)
|
:0041C8FF 668B45BC                mov ax, word ptr [ebp-44]
:0041C903 66050100                add ax, 0001
:0041C907 668945BC                mov word ptr [ebp-44], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C8FD(U)
|
:0041C90B 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0041C90E 81E1FFFF0000            and ecx, 0000FFFF
:0041C914 83F904                  cmp ecx, 00000004
:0041C917 0F8DB1010000            jnl 0041CACE
:0041C91D 668B55D8                mov dx, word ptr [ebp-28]
:0041C921 668955E4                mov word ptr [ebp-1C], dx
:0041C925 668B45D0                mov ax, word ptr [ebp-30]
:0041C929 668945DC                mov word ptr [ebp-24], ax
:0041C92D 668B4DBC                mov cx, word ptr [ebp-44]
:0041C931 51                      push ecx
:0041C932 668B5514                mov dx, word ptr [ebp+14]
:0041C936 52                      push edx
:0041C937 668B4510                mov ax, word ptr [ebp+10]
:0041C93B 50                      push eax
:0041C93C 8D4DDC                  lea ecx, dword ptr [ebp-24]
:0041C93F 51                      push ecx
:0041C940 8D55E4                  lea edx, dword ptr [ebp-1C]
:0041C943 52                      push edx
:0041C944 E817F6FFFF              call 0041BF60
:0041C949 83C414                  add esp, 00000014
:0041C94C 83F801                  cmp eax, 00000001
:0041C94F 0F8574010000            jne 0041CAC9
:0041C955 8B4520                  mov eax, dword ptr [ebp+20]
:0041C958 25FFFF0000              and eax, 0000FFFF
:0041C95D 83E001                  and eax, 00000001
:0041C960 85C0                    test eax, eax
:0041C962 7435                    je 0041C999
:0041C964 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041C967 81E1FFFF0000            and ecx, 0000FFFF
:0041C96D 8B5508                  mov edx, dword ptr [ebp+08]
:0041C970 81E2FFFF0000            and edx, 0000FFFF
:0041C976 3BCA                    cmp ecx, edx
:0041C978 751F                    jne 0041C999
:0041C97A 8B45DC                  mov eax, dword ptr [ebp-24]
:0041C97D 25FFFF0000              and eax, 0000FFFF
:0041C982 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0041C985 81E1FFFF0000            and ecx, 0000FFFF
:0041C98B 3BC1                    cmp eax, ecx
:0041C98D 750A                    jne 0041C999
:0041C98F B801000000              mov eax, 00000001
:0041C994 E959010000              jmp 0041CAF2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C962(C), :0041C978(C), :0041C98D(C)
|
:0041C999 8B55DC                  mov edx, dword ptr [ebp-24]
:0041C99C 81E2FFFF0000            and edx, 0000FFFF
:0041C9A2 8B45C4                  mov eax, dword ptr [ebp-3C]
:0041C9A5 25FFFF0000              and eax, 0000FFFF
:0041C9AA 0FAFD0                  imul edx, eax
:0041C9AD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041C9B0 81E1FFFF0000            and ecx, 0000FFFF
:0041C9B6 03D1                    add edx, ecx
:0041C9B8 668955D4                mov word ptr [ebp-2C], dx
:0041C9BC 8B55D4                  mov edx, dword ptr [ebp-2C]
:0041C9BF 81E2FFFF0000            and edx, 0000FFFF
:0041C9C5 8B45E8                  mov eax, dword ptr [ebp-18]
:0041C9C8 8D0C50                  lea ecx, dword ptr [eax+2*edx]
:0041C9CB 894DFC                  mov dword ptr [ebp-04], ecx
:0041C9CE 8B55FC                  mov edx, dword ptr [ebp-04]
:0041C9D1 33C0                    xor eax, eax
:0041C9D3 668B02                  mov ax, word ptr [edx]
:0041C9D6 3DFEFE0000              cmp eax, 0000FEFE
:0041C9DB 0F85E8000000            jne 0041CAC9
:0041C9E1 8B4D24                  mov ecx, dword ptr [ebp+24]
:0041C9E4 51                      push ecx
:0041C9E5 668B5514                mov dx, word ptr [ebp+14]
:0041C9E9 52                      push edx
:0041C9EA 668B4510                mov ax, word ptr [ebp+10]
:0041C9EE 50                      push eax
:0041C9EF 668B4DDC                mov cx, word ptr [ebp-24]
:0041C9F3 51                      push ecx
:0041C9F4 668B55E4                mov dx, word ptr [ebp-1C]
:0041C9F8 52                      push edx
:0041C9F9 E8F9000000              call 0041CAF7
:0041C9FE 83C414                  add esp, 00000014
:0041CA01 668945C0                mov word ptr [ebp-40], ax
:0041CA05 8B45C0                  mov eax, dword ptr [ebp-40]
:0041CA08 25FFFF0000              and eax, 0000FFFF
:0041CA0D 3DFFFF0000              cmp eax, 0000FFFF
:0041CA12 7515                    jne 0041CA29
:0041CA14 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041CA17 668B11                  mov dx, word ptr [ecx]
:0041CA1A 6683C201                add dx, 0001
:0041CA1E 8B45FC                  mov eax, dword ptr [ebp-04]
:0041CA21 668910                  mov word ptr [eax], dx
:0041CA24 E9D6FEFFFF              jmp 0041C8FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CA12(C)
|
:0041CA29 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0041CA2C 81E1FFFF0000            and ecx, 0000FFFF
:0041CA32 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041CA35 81E2FFFF0000            and edx, 0000FFFF
:0041CA3B 03CA                    add ecx, edx
:0041CA3D 8B45FC                  mov eax, dword ptr [ebp-04]
:0041CA40 668908                  mov word ptr [eax], cx
:0041CA43 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0041CA46 894DEC                  mov dword ptr [ebp-14], ecx
:0041CA49 8B55C8                  mov edx, dword ptr [ebp-38]
:0041CA4C 83EA02                  sub edx, 00000002
:0041CA4F 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CAAA(U)
|
:0041CA52 8B45CC                  mov eax, dword ptr [ebp-34]
:0041CA55 3B45F8                  cmp eax, dword ptr [ebp-08]
:0041CA58 730C                    jnb 0041CA66
:0041CA5A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CA5D 81C11E4E0000            add ecx, 00004E1E
:0041CA63 894DCC                  mov dword ptr [ebp-34], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CA58(C)
|
:0041CA66 8B55EC                  mov edx, dword ptr [ebp-14]
:0041CA69 8B45CC                  mov eax, dword ptr [ebp-34]
:0041CA6C 668B08                  mov cx, word ptr [eax]
:0041CA6F 66890A                  mov word ptr [edx], cx
:0041CA72 8B55FC                  mov edx, dword ptr [ebp-04]
:0041CA75 33C0                    xor eax, eax
:0041CA77 668B02                  mov ax, word ptr [edx]
:0041CA7A 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0041CA7D 33D2                    xor edx, edx
:0041CA7F 668B11                  mov dx, word ptr [ecx]
:0041CA82 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041CA85 33F6                    xor esi, esi
:0041CA87 668B3451                mov si, word ptr [ecx+2*edx]
:0041CA8B 3BC6                    cmp eax, esi
:0041CA8D 7C0C                    jl 0041CA9B
:0041CA8F 8B55EC                  mov edx, dword ptr [ebp-14]
:0041CA92 668B45D4                mov ax, word ptr [ebp-2C]
:0041CA96 668902                  mov word ptr [edx], ax
:0041CA99 EB11                    jmp 0041CAAC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CA8D(C)
|
:0041CA9B 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0041CA9E 894DEC                  mov dword ptr [ebp-14], ecx
:0041CAA1 8B55CC                  mov edx, dword ptr [ebp-34]
:0041CAA4 83EA02                  sub edx, 00000002
:0041CAA7 8955CC                  mov dword ptr [ebp-34], edx
:0041CAAA EBA6                    jmp 0041CA52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CA99(U)
|
:0041CAAC 8B45C8                  mov eax, dword ptr [ebp-38]
:0041CAAF 83C002                  add eax, 00000002
:0041CAB2 8945C8                  mov dword ptr [ebp-38], eax
:0041CAB5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CAB8 81C1204E0000            add ecx, 00004E20
:0041CABE 394DC8                  cmp dword ptr [ebp-38], ecx
:0041CAC1 7206                    jb 0041CAC9
:0041CAC3 8B55F8                  mov edx, dword ptr [ebp-08]
:0041CAC6 8955C8                  mov dword ptr [ebp-38], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C94F(C), :0041C9DB(C), :0041CAC1(C)
|
:0041CAC9 E931FEFFFF              jmp 0041C8FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C917(C)
|
:0041CACE 8B45F0                  mov eax, dword ptr [ebp-10]
:0041CAD1 83C002                  add eax, 00000002
:0041CAD4 8945F0                  mov dword ptr [ebp-10], eax
:0041CAD7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CADA 81C1204E0000            add ecx, 00004E20
:0041CAE0 394DF0                  cmp dword ptr [ebp-10], ecx
:0041CAE3 7206                    jb 0041CAEB
:0041CAE5 8B55F8                  mov edx, dword ptr [ebp-08]
:0041CAE8 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CAE3(C)
|
:0041CAEB E9B6FDFFFF              jmp 0041C8A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041C8AC(C)
|
:0041CAF0 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041C8A1(U), :0041C994(U)
|
:0041CAF2 5E                      pop esi
:0041CAF3 8BE5                    mov esp, ebp
:0041CAF5 5D                      pop ebp
:0041CAF6 C3                      ret



* Referenced by a CALL at Address:
|:0041C9F9   
|
:0041CAF7 55                      push ebp
:0041CAF8 8BEC                    mov ebp, esp
:0041CAFA 83EC10                  sub esp, 00000010
:0041CAFD 6A01                    push 00000001
:0041CAFF 668B4514                mov ax, word ptr [ebp+14]
:0041CB03 50                      push eax
:0041CB04 668B4D10                mov cx, word ptr [ebp+10]
:0041CB08 51                      push ecx
:0041CB09 6A00                    push 00000000
:0041CB0B 668B550C                mov dx, word ptr [ebp+0C]
:0041CB0F 52                      push edx
:0041CB10 668B4508                mov ax, word ptr [ebp+08]
:0041CB14 50                      push eax
:0041CB15 E846E4FFFF              call 0041AF60
:0041CB1A 83C418                  add esp, 00000018
:0041CB1D 25FFFF0000              and eax, 0000FFFF
:0041CB22 85C0                    test eax, eax
:0041CB24 7409                    je 0041CB2F
:0041CB26 660DFFFF                or ax, FFFF
:0041CB2A E951010000              jmp 0041CC80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CB24(C)
|
:0041CB2F 837D1800                cmp dword ptr [ebp+18], 00000000
:0041CB33 7509                    jne 0041CB3E
:0041CB35 66B80100                mov ax, 0001
:0041CB39 E942010000              jmp 0041CC80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CB33(C)
|
:0041CB3E C745FC10044900          mov [ebp-04], 00490410
:0041CB45 66C745F00000            mov [ebp-10], 0000
:0041CB4B EB15                    jmp 0041CB62

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CBA0(U), :0041CC0B(U), :0041CC77(U)
|
:0041CB4D 668B4DF0                mov cx, word ptr [ebp-10]
:0041CB51 6683C101                add cx, 0001
:0041CB55 66894DF0                mov word ptr [ebp-10], cx
:0041CB59 8B55FC                  mov edx, dword ptr [ebp-04]
:0041CB5C 83C240                  add edx, 00000040
:0041CB5F 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CB4B(U)
|
:0041CB62 8B45F0                  mov eax, dword ptr [ebp-10]
:0041CB65 25FFFF0000              and eax, 0000FFFF
:0041CB6A 3D80000000              cmp eax, 00000080
:0041CB6F 0F8D07010000            jnl 0041CC7C
:0041CB75 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041CB78 81E1FFFF0000            and ecx, 0000FFFF
:0041CB7E 33D2                    xor edx, edx
:0041CB80 668B1590034900          mov dx, word ptr [00490390]
:0041CB87 3BCA                    cmp ecx, edx
:0041CB89 7415                    je 0041CBA0
:0041CB8B 8B45F0                  mov eax, dword ptr [ebp-10]
:0041CB8E 25FFFF0000              and eax, 0000FFFF
:0041CB93 33C9                    xor ecx, ecx
:0041CB95 668B0D2CB54800          mov cx, word ptr [0048B52C]
:0041CB9C 3BC1                    cmp eax, ecx
:0041CB9E 7502                    jne 0041CBA2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CB89(C)
|
:0041CBA0 EBAB                    jmp 0041CB4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CB9E(C)
|
:0041CBA2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041CBA5 E8A6FEFEFF              call 0040CA50
:0041CBAA 25FFFF0000              and eax, 0000FFFF
:0041CBAF 2500800000              and eax, 00008000
:0041CBB4 85C0                    test eax, eax
:0041CBB6 0F84BB000000            je 0041CC77
:0041CBBC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041CBBF E83C260000              call 0041F200
:0041CBC4 668945F8                mov word ptr [ebp-08], ax
:0041CBC8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041CBCB E8002A0000              call 0041F5D0
:0041CBD0 668945F4                mov word ptr [ebp-0C], ax
:0041CBD4 8B55F8                  mov edx, dword ptr [ebp-08]
:0041CBD7 81E2FFFF0000            and edx, 0000FFFF
:0041CBDD 83FA5A                  cmp edx, 0000005A
:0041CBE0 7F29                    jg 0041CC0B
:0041CBE2 8B45F8                  mov eax, dword ptr [ebp-08]
:0041CBE5 25FFFF0000              and eax, 0000FFFF
:0041CBEA 83F808                  cmp eax, 00000008
:0041CBED 7C1C                    jl 0041CC0B
:0041CBEF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041CBF2 81E1FFFF0000            and ecx, 0000FFFF
:0041CBF8 83F95A                  cmp ecx, 0000005A
:0041CBFB 7F0E                    jg 0041CC0B
:0041CBFD 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041CC00 81E2FFFF0000            and edx, 0000FFFF
:0041CC06 83FA08                  cmp edx, 00000008
:0041CC09 7D05                    jge 0041CC10

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CBE0(C), :0041CBED(C), :0041CBFB(C)
|
:0041CC0B E93DFFFFFF              jmp 0041CB4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CC09(C)
|
:0041CC10 8B45F8                  mov eax, dword ptr [ebp-08]
:0041CC13 25FFFF0000              and eax, 0000FFFF
:0041CC18 83E801                  sub eax, 00000001
:0041CC1B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041CC1E 81E1FFFF0000            and ecx, 0000FFFF
:0041CC24 3BC1                    cmp eax, ecx
:0041CC26 7F4F                    jg 0041CC77
:0041CC28 8B5508                  mov edx, dword ptr [ebp+08]
:0041CC2B 81E2FFFF0000            and edx, 0000FFFF
:0041CC31 8B45F8                  mov eax, dword ptr [ebp-08]
:0041CC34 25FFFF0000              and eax, 0000FFFF
:0041CC39 83C002                  add eax, 00000002
:0041CC3C 3BD0                    cmp edx, eax
:0041CC3E 7D37                    jge 0041CC77
:0041CC40 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041CC43 81E1FFFF0000            and ecx, 0000FFFF
:0041CC49 83E901                  sub ecx, 00000001
:0041CC4C 8B550C                  mov edx, dword ptr [ebp+0C]
:0041CC4F 81E2FFFF0000            and edx, 0000FFFF
:0041CC55 3BCA                    cmp ecx, edx
:0041CC57 7F1E                    jg 0041CC77
:0041CC59 8B450C                  mov eax, dword ptr [ebp+0C]
:0041CC5C 25FFFF0000              and eax, 0000FFFF
:0041CC61 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041CC64 81E1FFFF0000            and ecx, 0000FFFF
:0041CC6A 83C102                  add ecx, 00000002
:0041CC6D 3BC1                    cmp eax, ecx
:0041CC6F 7D06                    jge 0041CC77
:0041CC71 660DFFFF                or ax, FFFF
:0041CC75 EB09                    jmp 0041CC80

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CBB6(C), :0041CC26(C), :0041CC3E(C), :0041CC57(C), :0041CC6F(C)
|
:0041CC77 E9D1FEFFFF              jmp 0041CB4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CB6F(C)
|
:0041CC7C 66B80100                mov ax, 0001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CB2A(U), :0041CB39(U), :0041CC75(U)
|
:0041CC80 8BE5                    mov esp, ebp
:0041CC82 5D                      pop ebp
:0041CC83 C3                      ret



* Referenced by a CALL at Address:
|:0041CE0E   
|
:0041CC84 55                      push ebp
:0041CC85 8BEC                    mov ebp, esp
:0041CC87 83EC08                  sub esp, 00000008
:0041CC8A 668B4508                mov ax, word ptr [ebp+08]
:0041CC8E 50                      push eax
:0041CC8F E83FDCFFFF              call 0041A8D3
:0041CC94 83C404                  add esp, 00000004
:0041CC97 8945FC                  mov dword ptr [ebp-04], eax
:0041CC9A E849DCFFFF              call 0041A8E8
:0041CC9F 8945F8                  mov dword ptr [ebp-08], eax
:0041CCA2 6A01                    push 00000001
:0041CCA4 6A01                    push 00000001
:0041CCA6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041CCA9 E822290000              call 0041F5D0
:0041CCAE 50                      push eax
:0041CCAF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041CCB2 E849250000              call 0041F200
:0041CCB7 50                      push eax
:0041CCB8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CCBB E8702B0000              call 0041F830
:0041CCC0 50                      push eax
:0041CCC1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CCC4 E827280000              call 0041F4F0
:0041CCC9 50                      push eax
:0041CCCA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CCCD E8FE280000              call 0041F5D0
:0041CCD2 50                      push eax
:0041CCD3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CCD6 E825250000              call 0041F200
:0041CCDB 50                      push eax
:0041CCDC E8D6FAFFFF              call 0041C7B7
:0041CCE1 83C420                  add esp, 00000020
:0041CCE4 83F801                  cmp eax, 00000001
:0041CCE7 7527                    jne 0041CD10

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041CCE9 6A04                    push 00000004
:0041CCEB 68FFFF0000              push 0000FFFF
:0041CCF0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CCF3 51                      push ecx
:0041CCF4 E83CF7FFFF              call 0041C435
:0041CCF9 83C40C                  add esp, 0000000C
:0041CCFC 25FFFF0000              and eax, 0000FFFF
:0041CD01 3DFFFF0000              cmp eax, 0000FFFF
:0041CD06 7506                    jne 0041CD0E
:0041CD08 660DFFFF                or ax, FFFF
:0041CD0C EB56                    jmp 0041CD64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CD06(C)
|
:0041CD0E EB06                    jmp 0041CD16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CCE7(C)
|
:0041CD10 660DFFFF                or ax, FFFF
:0041CD14 EB4E                    jmp 0041CD64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CD0E(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041CD16 6A04                    push 00000004
:0041CD18 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041CD1B E8F02A0000              call 0041F810
:0041CD20 6800200000              push 00002000
:0041CD25 6800200000              push 00002000
:0041CD2A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041CD2D E8FE280000              call 0041F630
:0041CD32 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041CD35 E876270000              call 0041F4B0
:0041CD3A 50                      push eax
:0041CD3B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CD3E E8CD260000              call 0041F410
:0041CD43 6A00                    push 00000000
:0041CD45 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CD48 E8C32A0000              call 0041F810
:0041CD4D 6A00                    push 00000000
:0041CD4F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CD52 E8592A0000              call 0041F7B0
:0041CD57 6A00                    push 00000000
:0041CD59 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CD5C E8FF190000              call 0041E760
:0041CD61 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CD0C(U), :0041CD14(U)
|
:0041CD64 8BE5                    mov esp, ebp
:0041CD66 5D                      pop ebp
:0041CD67 C3                      ret



* Referenced by a CALL at Address:
|:0041DE1A   
|
:0041CD68 55                      push ebp
:0041CD69 8BEC                    mov ebp, esp
:0041CD6B 83EC10                  sub esp, 00000010
:0041CD6E 66C745FC0000            mov [ebp-04], 0000
:0041CD74 66C745F40000            mov [ebp-0C], 0000
:0041CD7A 833DFC1C4B0001          cmp dword ptr [004B1CFC], 00000001
:0041CD81 0F85AA000000            jne 0041CE31
:0041CD87 E8A8F8FFFF              call 0041C634
:0041CD8C 25FFFF0000              and eax, 0000FFFF
:0041CD91 85C0                    test eax, eax
:0041CD93 0F8596000000            jne 0041CE2F
:0041CD99 33C0                    xor eax, eax
:0041CD9B 66A12CB54800            mov ax, word ptr [0048B52C]
:0041CDA1 80E47F                  and ah, 7F
:0041CDA4 668945F4                mov word ptr [ebp-0C], ax
:0041CDA8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041CDAB 81E1FFFF0000            and ecx, 0000FFFF
:0041CDB1 83F901                  cmp ecx, 00000001
:0041CDB4 7509                    jne 0041CDBF
:0041CDB6 66B80100                mov ax, 0001
:0041CDBA E9BB000000              jmp 0041CE7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CDB4(C)
|
:0041CDBF 33D2                    xor edx, edx
:0041CDC1 668B152CB54800          mov dx, word ptr [0048B52C]
:0041CDC8 81FAFFFF0000            cmp edx, 0000FFFF
:0041CDCE 745F                    je 0041CE2F
:0041CDD0 33C0                    xor eax, eax
:0041CDD2 66A12CB54800            mov ax, word ptr [0048B52C]
:0041CDD8 2500800000              and eax, 00008000
:0041CDDD 85C0                    test eax, eax
:0041CDDF 7428                    je 0041CE09
:0041CDE1 668B4DF4                mov cx, word ptr [ebp-0C]
:0041CDE5 51                      push ecx
:0041CDE6 E881F8FFFF              call 0041C66C
:0041CDEB 83C404                  add esp, 00000004
:0041CDEE 25FFFF0000              and eax, 0000FFFF
:0041CDF3 85C0                    test eax, eax
:0041CDF5 7510                    jne 0041CE07
:0041CDF7 6A00                    push 00000000
:0041CDF9 E820DBFFFF              call 0041A91E
:0041CDFE 83C404                  add esp, 00000004
:0041CE01 66B80200                mov ax, 0002
:0041CE05 EB73                    jmp 0041CE7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CDF5(C)
|
:0041CE07 EB26                    jmp 0041CE2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CDDF(C)
|
:0041CE09 668B55F4                mov dx, word ptr [ebp-0C]
:0041CE0D 52                      push edx
:0041CE0E E871FEFFFF              call 0041CC84
:0041CE13 83C404                  add esp, 00000004
:0041CE16 25FFFF0000              and eax, 0000FFFF
:0041CE1B 85C0                    test eax, eax
:0041CE1D 7510                    jne 0041CE2F
:0041CE1F 6A00                    push 00000000
:0041CE21 E8F8DAFFFF              call 0041A91E
:0041CE26 83C404                  add esp, 00000004
:0041CE29 66B80200                mov ax, 0002
:0041CE2D EB4B                    jmp 0041CE7A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CD93(C), :0041CDCE(C), :0041CE07(U), :0041CE1D(C)
|
:0041CE2F EB46                    jmp 0041CE77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CD81(C)
|
:0041CE31 833DFC1C4B0002          cmp dword ptr [004B1CFC], 00000002
:0041CE38 753D                    jne 0041CE77
:0041CE3A E8A9DAFFFF              call 0041A8E8
:0041CE3F 8945F8                  mov dword ptr [ebp-08], eax
:0041CE42 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041CE45 E826FCFEFF              call 0040CA70
:0041CE4A 25FFFF0000              and eax, 0000FFFF
:0041CE4F 8945F0                  mov dword ptr [ebp-10], eax
:0041CE52 837DF000                cmp dword ptr [ebp-10], 00000000
:0041CE56 7C1F                    jl 0041CE77
:0041CE58 837DF001                cmp dword ptr [ebp-10], 00000001
:0041CE5C 7E02                    jle 0041CE60
:0041CE5E EB17                    jmp 0041CE77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CE5C(C)
|
:0041CE60 8B45F8                  mov eax, dword ptr [ebp-08]
:0041CE63 50                      push eax
:0041CE64 E8EC0E0000              call 0041DD55
:0041CE69 83C404                  add esp, 00000004
:0041CE6C E8DBF0FFFF              call 0041BF4C
:0041CE71 66B80100                mov ax, 0001
:0041CE75 EB03                    jmp 0041CE7A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CE2F(U), :0041CE38(C), :0041CE56(C), :0041CE5E(U)
|
:0041CE77 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CDBA(U), :0041CE05(U), :0041CE2D(U), :0041CE75(U)
|
:0041CE7A 8BE5                    mov esp, ebp
:0041CE7C 5D                      pop ebp
:0041CE7D C3                      ret



* Referenced by a CALL at Address:
|:0041F0AB   
|
:0041CE7E 55                      push ebp
:0041CE7F 8BEC                    mov ebp, esp
:0041CE81 83EC0C                  sub esp, 0000000C
:0041CE84 6A00                    push 00000000
:0041CE86 68401F0000              push 00001F40
:0041CE8B 6870264900              push 00492670
:0041CE90 E8D2D9FFFF              call 0041A867
:0041CE95 83C40C                  add esp, 0000000C
:0041CE98 66C705FCB448000000      mov word ptr [0048B4FC], 0000
:0041CEA1 66C705F8B448000000      mov word ptr [0048B4F8], 0000
:0041CEAA 66C7059C0349000000      mov word ptr [0049039C], 0000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041CEB3 6A04                    push 00000004
:0041CEB5 6A00                    push 00000000
:0041CEB7 68509C0000              push 00009C50
:0041CEBC B9881C4B00              mov ecx, 004B1C88
:0041CEC1 E8CAC00500              call 00478F90
:0041CEC6 8945FC                  mov dword ptr [ebp-04], eax
:0041CEC9 6A00                    push 00000000
:0041CECB 68204E0000              push 00004E20
:0041CED0 8B45FC                  mov eax, dword ptr [ebp-04]
:0041CED3 50                      push eax
:0041CED4 E8C3D9FFFF              call 0041A89C
:0041CED9 83C40C                  add esp, 0000000C
:0041CEDC 66C745F83C00            mov [ebp-08], 003C
:0041CEE2 66C745F41900            mov [ebp-0C], 0019
:0041CEE8 66C70560034900C800      mov word ptr [00490360], 00C8
:0041CEF1 66C705620349007800      mov word ptr [00490362], 0078
:0041CEFA 66C705680349003200      mov word ptr [00490368], 0032
:0041CF03 668B4DF4                mov cx, word ptr [ebp-0C]
:0041CF07 66890D66034900          mov word ptr [00490366], cx
:0041CF0E 668B55F8                mov dx, word ptr [ebp-08]
:0041CF12 66891564034900          mov word ptr [00490364], dx
:0041CF19 8B45FC                  mov eax, dword ptr [ebp-04]
:0041CF1C A350034900              mov dword ptr [00490350], eax
:0041CF21 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041CF24 81E1FFFF0000            and ecx, 0000FFFF
:0041CF2A 69C9C8000000            imul ecx, 000000C8
:0041CF30 8B55F8                  mov edx, dword ptr [ebp-08]
:0041CF33 81E2FFFF0000            and edx, 0000FFFF
:0041CF39 03CA                    add ecx, edx
:0041CF3B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041CF3E 8D0C48                  lea ecx, dword ptr [eax+2*ecx]
:0041CF41 890D54034900            mov dword ptr [00490354], ecx
:0041CF47 66C7056A0349000100      mov word ptr [0049036A], 0001
:0041CF50 8B1554034900            mov edx, dword ptr [00490354]
:0041CF56 89155C034900            mov dword ptr [0049035C], edx
:0041CF5C A15C034900              mov eax, dword ptr [0049035C]
:0041CF61 A358034900              mov dword ptr [00490358], eax
:0041CF66 8BE5                    mov esp, ebp
:0041CF68 5D                      pop ebp
:0041CF69 C3                      ret



* Referenced by a CALL at Address:
|:0041F0B5   
|
:0041CF6A 55                      push ebp
:0041CF6B 8BEC                    mov ebp, esp
:0041CF6D 6AFF                    push FFFFFFFF
:0041CF6F 6872964700              push 00479672
:0041CF74 64A100000000            mov eax, dword ptr fs:[00000000]
:0041CF7A 50                      push eax
:0041CF7B 64892500000000          mov dword ptr fs:[00000000], esp
:0041CF82 81EC1C010000            sub esp, 0000011C
:0041CF88 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0041CF8E E8AD86FEFF              call 00405640
:0041CF93 C745FC00000000          mov [ebp-04], 00000000
:0041CF9A B9D8174B00              mov ecx, 004B17D8
:0041CF9F E8ECF8FEFF              call 0040C890
:0041CFA4 660FB6C0                movzx ax, al
:0041CFA8 668985E4FEFFFF          mov word ptr [ebp+FFFFFEE4], ax
:0041CFAF 668B8DE4FEFFFF          mov cx, word ptr [ebp+FFFFFEE4]
:0041CFB6 66898DECFEFFFF          mov word ptr [ebp+FFFFFEEC], cx
:0041CFBD 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0041CFC3 81E2FFFF0000            and edx, 0000FFFF
:0041CFC9 8995DCFEFFFF            mov dword ptr [ebp+FFFFFEDC], edx
:0041CFCF 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:0041CFD5 83E801                  sub eax, 00000001
:0041CFD8 8985DCFEFFFF            mov dword ptr [ebp+FFFFFEDC], eax
:0041CFDE 83BDDCFEFFFF04          cmp dword ptr [ebp+FFFFFEDC], 00000004
:0041CFE5 773D                    ja 0041D024
:0041CFE7 8B8DDCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEDC]
:0041CFED FF248D67D24100          jmp dword ptr [4*ecx+0041D267]
:0041CFF4 C70568D4470020080000    mov dword ptr [0047D468], 00000820
:0041CFFE EB2E                    jmp 0041D02E
:0041D000 C70568D4470066080000    mov dword ptr [0047D468], 00000866
:0041D00A EB22                    jmp 0041D02E
:0041D00C C70568D447005C080000    mov dword ptr [0047D468], 0000085C
:0041D016 EB16                    jmp 0041D02E
:0041D018 C70568D447003E080000    mov dword ptr [0047D468], 0000083E
:0041D022 EB0A                    jmp 0041D02E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041CFE5(C)
|
:0041D024 C70568D447000C080000    mov dword ptr [0047D468], 0000080C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041CFFE(U), :0041D00A(U), :0041D016(U), :0041D022(U)
|
:0041D02E B9D8174B00              mov ecx, 004B17D8
:0041D033 E8A84F0200              call 00441FE0
:0041D038 6633D2                  xor dx, dx
:0041D03B 8AD0                    mov dl, al
:0041D03D 668995E0FEFFFF          mov word ptr [ebp+FFFFFEE0], dx
:0041D044 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0041D04A 25FFFF0000              and eax, 0000FFFF
:0041D04F 83F80B                  cmp eax, 0000000B
:0041D052 0F8D0C010000            jnl 0041D164
:0041D058 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0041D05E 81E1FFFF0000            and ecx, 0000FFFF
:0041D064 83F90C                  cmp ecx, 0000000C
:0041D067 7D3E                    jge 0041D0A7
:0041D069 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0041D06F 81E2FFFF0000            and edx, 0000FFFF
:0041D075 52                      push edx
:0041D076 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0041D07C 81E1FFFF0000            and ecx, 0000FFFF
:0041D082 69C9EC000000            imul ecx, 000000EC
:0041D088 81C150D24A00            add ecx, 004AD250
:0041D08E E87D200000              call 0041F110
:0041D093 25FF000000              and eax, 000000FF
:0041D098 83C017                  add eax, 00000017
:0041D09B 668985E4FEFFFF          mov word ptr [ebp+FFFFFEE4], ax
:0041D0A2 E9A0000000              jmp 0041D147

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D067(C)
|
:0041D0A7 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0041D0AD 25FFFF0000              and eax, 0000FFFF
:0041D0B2 8985D8FEFFFF            mov dword ptr [ebp+FFFFFED8], eax
:0041D0B8 83BDD8FEFFFF00          cmp dword ptr [ebp+FFFFFED8], 00000000
:0041D0BF 740B                    je 0041D0CC
:0041D0C1 83BDD8FEFFFF09          cmp dword ptr [ebp+FFFFFED8], 00000009
:0041D0C8 741F                    je 0041D0E9
:0041D0CA EB39                    jmp 0041D105

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D0BF(C)
|
:0041D0CC 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0041D0D2 81E1FFFF0000            and ecx, 0000FFFF
:0041D0D8 660FB691E4C94700        movzx dx, byte ptr [ecx+0047C9E4]
:0041D0E0 668995E4FEFFFF          mov word ptr [ebp+FFFFFEE4], dx
:0041D0E7 EB5E                    jmp 0041D147

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D0C8(C)
|
:0041D0E9 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0041D0EF 25FFFF0000              and eax, 0000FFFF
:0041D0F4 660FB688ECC94700        movzx cx, byte ptr [eax+0047C9EC]
:0041D0FC 66898DE4FEFFFF          mov word ptr [ebp+FFFFFEE4], cx
:0041D103 EB42                    jmp 0041D147

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D0CA(U)
|
:0041D105 66C785E0FEFFFF0000      mov word ptr [ebp+FFFFFEE0], 0000
:0041D10E 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0041D114 81E2FFFF0000            and edx, 0000FFFF
:0041D11A 52                      push edx
:0041D11B 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0041D121 81E1FFFF0000            and ecx, 0000FFFF
:0041D127 69C9EC000000            imul ecx, 000000EC
:0041D12D 81C150D24A00            add ecx, 004AD250
:0041D133 E8D81F0000              call 0041F110
:0041D138 25FF000000              and eax, 000000FF
:0041D13D 83C017                  add eax, 00000017
:0041D140 668985E4FEFFFF          mov word ptr [ebp+FFFFFEE4], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D0A2(U), :0041D0E7(U), :0041D103(U)
|
:0041D147 833DC045490000          cmp dword ptr [004945C0], 00000000
:0041D14E 7412                    je 0041D162
:0041D150 668B85E4FEFFFF          mov ax, word ptr [ebp+FFFFFEE4]
:0041D157 66054000                add ax, 0040
:0041D15B 668985E4FEFFFF          mov word ptr [ebp+FFFFFEE4], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D14E(C)
|
:0041D162 EB2D                    jmp 0041D191

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D052(C)
|
:0041D164 668B8DE4FEFFFF          mov cx, word ptr [ebp+FFFFFEE4]
:0041D16B 6683E90B                sub cx, 000B
:0041D16F 66898DE4FEFFFF          mov word ptr [ebp+FFFFFEE4], cx
:0041D176 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0041D17C 81E2FFFF0000            and edx, 0000FFFF
:0041D182 660FB68200CA4700        movzx ax, byte ptr [edx+0047CA00]
:0041D18A 668985E4FEFFFF          mov word ptr [ebp+FFFFFEE4], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D162(U)
|
:0041D191 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0041D197 81E1FFFF0000            and ecx, 0000FFFF
:0041D19D 81F9FF000000            cmp ecx, 000000FF
:0041D1A3 7509                    jne 0041D1AE
:0041D1A5 66C785E4FEFFFF1700      mov word ptr [ebp+FFFFFEE4], 0017

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D1A3(C)
|
:0041D1AE 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0041D1B4 81E2FFFF0000            and edx, 0000FFFF
:0041D1BA 83EA17                  sub edx, 00000017
:0041D1BD 668995E8FEFFFF          mov word ptr [ebp+FFFFFEE8], dx

* Possible StringData Ref from Data Obj ->"PMAP.E3"
                                  |
:0041D1C4 6820D54700              push 0047D520
:0041D1C9 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0041D1CF E80140FFFF              call 004111D5
:0041D1D4 B9881C4B00              mov ecx, 004B1C88
:0041D1D9 E8E22CFFFF              call 0040FEC0
:0041D1DE 50                      push eax
:0041D1DF 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0041D1E5 25FFFF0000              and eax, 0000FFFF
:0041D1EA 50                      push eax
:0041D1EB 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0041D1F1 E83341FFFF              call 00411329
:0041D1F6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0041D1FC E8240AFFFF              call 0040DC25

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041D201 6A04                    push 00000004
:0041D203 6A00                    push 00000000
:0041D205 6A00                    push 00000000
:0041D207 B9881C4B00              mov ecx, 004B1C88
:0041D20C E87FBD0500              call 00478F90
:0041D211 668B8DE4FEFFFF          mov cx, word ptr [ebp+FFFFFEE4]
:0041D218 668908                  mov word ptr [eax], cx
:0041D21B 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:0041D221 81E2FFFF0000            and edx, 0000FFFF
:0041D227 52                      push edx
:0041D228 E89646FFFF              call 004118C3
:0041D22D 83C404                  add esp, 00000004
:0041D230 E857E2FFFF              call 0041B48C
:0041D235 6A01                    push 00000001
:0041D237 668B85E4FEFFFF          mov ax, word ptr [ebp+FFFFFEE4]
:0041D23E 50                      push eax
:0041D23F E81C2DFFFF              call 0040FF60
:0041D244 83C408                  add esp, 00000008
:0041D247 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0041D24E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0041D254 E80784FEFF              call 00405660
:0041D259 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041D25C 64890D00000000          mov dword ptr fs:[00000000], ecx
:0041D263 8BE5                    mov esp, ebp
:0041D265 5D                      pop ebp
:0041D266 C3                      ret



:0041D267 18D04100                DWORD 0041D018
:0041D26B 00D04100                DWORD 0041D000
:0041D26F F4CF4100                DWORD 0041CFF4
:0041D273 24D04100                DWORD 0041D024
:0041D277 0CD04100                DWORD 0041D00C



* Referenced by a CALL at Addresses:
|:0041D318   , :0041D390   , :0041D445   , :0041D4B9   , :0041D831   
|:0041DB22   , :0041DB93   , :0041DECF   , :0041E3E9   
|
:0041D27B 55                      push ebp
:0041D27C 8BEC                    mov ebp, esp
:0041D27E 83EC08                  sub esp, 00000008
:0041D281 C745FC10044900          mov [ebp-04], 00490410
:0041D288 66C745F80000            mov [ebp-08], 0000
:0041D28E EB15                    jmp 0041D2A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D2E8(U)
|
:0041D290 668B45F8                mov ax, word ptr [ebp-08]
:0041D294 66050100                add ax, 0001
:0041D298 668945F8                mov word ptr [ebp-08], ax
:0041D29C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D29F 83C140                  add ecx, 00000040
:0041D2A2 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D28E(U)
|
:0041D2A5 8B55F8                  mov edx, dword ptr [ebp-08]
:0041D2A8 81E2FFFF0000            and edx, 0000FFFF
:0041D2AE 81FA80000000            cmp edx, 00000080
:0041D2B4 7D34                    jge 0041D2EA
:0041D2B6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D2B9 E892F7FEFF              call 0040CA50
:0041D2BE 25FFFF0000              and eax, 0000FFFF
:0041D2C3 2500800000              and eax, 00008000
:0041D2C8 85C0                    test eax, eax
:0041D2CA 741C                    je 0041D2E8
:0041D2CC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D2CF E8DC210000              call 0041F4B0
:0041D2D4 25FFFF0000              and eax, 0000FFFF
:0041D2D9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D2DC 81E1FFFF0000            and ecx, 0000FFFF
:0041D2E2 3BC1                    cmp eax, ecx
:0041D2E4 7502                    jne 0041D2E8
:0041D2E6 EB02                    jmp 0041D2EA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D2CA(C), :0041D2E4(C)
|
:0041D2E8 EBA6                    jmp 0041D290

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D2B4(C), :0041D2E6(U)
|
:0041D2EA 8B55F8                  mov edx, dword ptr [ebp-08]
:0041D2ED 81E2FFFF0000            and edx, 0000FFFF
:0041D2F3 81FA80000000            cmp edx, 00000080
:0041D2F9 7506                    jne 0041D301
:0041D2FB 66C745F8FFFF            mov [ebp-08], FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D2F9(C)
|
:0041D301 668B45F8                mov ax, word ptr [ebp-08]
:0041D305 8BE5                    mov esp, ebp
:0041D307 5D                      pop ebp
:0041D308 C3                      ret



* Referenced by a CALL at Addresses:
|:0042FD38   , :0042FD4B   , :0042FD60   
|
:0041D309 55                      push ebp
:0041D30A 8BEC                    mov ebp, esp
:0041D30C 83EC0C                  sub esp, 0000000C
:0041D30F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D312 E8191E0000              call 0041F130
:0041D317 50                      push eax
:0041D318 E85EFFFFFF              call 0041D27B
:0041D31D 83C404                  add esp, 00000004
:0041D320 668945FC                mov word ptr [ebp-04], ax
:0041D324 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D327 25FFFF0000              and eax, 0000FFFF
:0041D32C 3DFFFF0000              cmp eax, 0000FFFF
:0041D331 7504                    jne 0041D337
:0041D333 33C0                    xor eax, eax
:0041D335 EB3F                    jmp 0041D376

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D331(C)
|
:0041D337 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0041D33A 51                      push ecx
:0041D33B 8D55F8                  lea edx, dword ptr [ebp-08]
:0041D33E 52                      push edx
:0041D33F 668B45FC                mov ax, word ptr [ebp-04]
:0041D343 50                      push eax
:0041D344 E88AD5FFFF              call 0041A8D3
:0041D349 83C404                  add esp, 00000004
:0041D34C 8BC8                    mov ecx, eax
:0041D34E E87D230000              call 0041F6D0
:0041D353 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041D356 81E1FFFF0000            and ecx, 0000FFFF
:0041D35C 890D88034900            mov dword ptr [00490388], ecx
:0041D362 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041D365 81E2FFFF0000            and edx, 0000FFFF
:0041D36B 89158C034900            mov dword ptr [0049038C], edx
:0041D371 B888034900              mov eax, 00490388

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D335(U)
|
:0041D376 8BE5                    mov esp, ebp
:0041D378 5D                      pop ebp
:0041D379 C3                      ret



* Referenced by a CALL at Address:
|:0042FE9C   
|
:0041D37A 55                      push ebp
:0041D37B 8BEC                    mov ebp, esp
:0041D37D 83EC0C                  sub esp, 0000000C
:0041D380 C745F801000000          mov [ebp-08], 00000001
:0041D387 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D38A E8A11D0000              call 0041F130
:0041D38F 50                      push eax
:0041D390 E8E6FEFFFF              call 0041D27B
:0041D395 83C404                  add esp, 00000004
:0041D398 668945FC                mov word ptr [ebp-04], ax
:0041D39C 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D39F 25FFFF0000              and eax, 0000FFFF
:0041D3A4 3DFFFF0000              cmp eax, 0000FFFF
:0041D3A9 744D                    je 0041D3F8
:0041D3AB 668B4DFC                mov cx, word ptr [ebp-04]
:0041D3AF 51                      push ecx
:0041D3B0 E81ED5FFFF              call 0041A8D3
:0041D3B5 83C404                  add esp, 00000004
:0041D3B8 8BC8                    mov ecx, eax
:0041D3BA E831240000              call 0041F7F0
:0041D3BF 25FFFF0000              and eax, 0000FFFF
:0041D3C4 8945F8                  mov dword ptr [ebp-08], eax
:0041D3C7 8B55F8                  mov edx, dword ptr [ebp-08]
:0041D3CA 8955F4                  mov dword ptr [ebp-0C], edx
:0041D3CD 837DF403                cmp dword ptr [ebp-0C], 00000003
:0041D3D1 771C                    ja 0041D3EF
:0041D3D3 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041D3D6 FF248506D44100          jmp dword ptr [4*eax+0041D406]
:0041D3DD C745F801000000          mov [ebp-08], 00000001
:0041D3E4 EB10                    jmp 0041D3F6

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041D3E6 C745F803000000          mov [ebp-08], 00000003
:0041D3ED EB07                    jmp 0041D3F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D3D1(C)
|
:0041D3EF C745F8FF000000          mov [ebp-08], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D3E4(U), :0041D3ED(U)
|
:0041D3F6 EB07                    jmp 0041D3FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D3A9(C)
|
:0041D3F8 C745F8FF000000          mov [ebp-08], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D3F6(U)
|
:0041D3FF 8B45F8                  mov eax, dword ptr [ebp-08]
:0041D402 8BE5                    mov esp, ebp
:0041D404 5D                      pop ebp
:0041D405 C3                      ret



:0041D406 DDD34100                DWORD 0041D3DD
:0041D40A DDD34100                DWORD 0041D3DD
:0041D40E E6D34100                DWORD 0041D3E6
:0041D412 E6D34100                DWORD 0041D3E6



* Referenced by a CALL at Address:
|:0041D528   
|
:0041D416 55                      push ebp
:0041D417 8BEC                    mov ebp, esp
:0041D419 E82EEBFFFF              call 0041BF4C
:0041D41E 33C0                    xor eax, eax
:0041D420 5D                      pop ebp
:0041D421 C3                      ret



* Referenced by a CALL at Address:
|:0040A5CE   
|
:0041D422 55                      push ebp
:0041D423 8BEC                    mov ebp, esp
:0041D425 E822EBFFFF              call 0041BF4C
:0041D42A E8F52CFFFF              call 00410124
:0041D42F 33C0                    xor eax, eax
:0041D431 5D                      pop ebp
:0041D432 C3                      ret


:0041D433 55                      push ebp
:0041D434 8BEC                    mov ebp, esp
:0041D436 33C0                    xor eax, eax
:0041D438 5D                      pop ebp
:0041D439 C3                      ret



* Referenced by a CALL at Address:
|:00409B3D   
|
:0041D43A 55                      push ebp
:0041D43B 8BEC                    mov ebp, esp
:0041D43D 83EC08                  sub esp, 00000008
:0041D440 668B4508                mov ax, word ptr [ebp+08]
:0041D444 50                      push eax
:0041D445 E831FEFFFF              call 0041D27B
:0041D44A 83C404                  add esp, 00000004
:0041D44D 668945FC                mov word ptr [ebp-04], ax
:0041D451 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D454 81E1FFFF0000            and ecx, 0000FFFF
:0041D45A 81F980000000            cmp ecx, 00000080
:0041D460 7C14                    jl 0041D476
:0041D462 668B5508                mov dx, word ptr [ebp+08]
:0041D466 52                      push edx
:0041D467 E849D2FFFF              call 0041A6B5
:0041D46C 83C404                  add esp, 00000004
:0041D46F B8FFFF0000              mov eax, 0000FFFF
:0041D474 EB34                    jmp 0041D4AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D460(C)
|
:0041D476 668B45FC                mov ax, word ptr [ebp-04]
:0041D47A 50                      push eax
:0041D47B E853D4FFFF              call 0041A8D3
:0041D480 83C404                  add esp, 00000004
:0041D483 8945F8                  mov dword ptr [ebp-08], eax
:0041D486 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041D489 E8621F0000              call 0041F3F0
:0041D48E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D491 81E1FFFF0000            and ecx, 0000FFFF
:0041D497 81F900100000            cmp ecx, 00001000
:0041D49D 7509                    jne 0041D4A8
:0041D49F 66C70590034900FFFF      mov word ptr [00490390], FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D49D(C)
|
:0041D4A8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D474(U)
|
:0041D4AA 8BE5                    mov esp, ebp
:0041D4AC 5D                      pop ebp
:0041D4AD C3                      ret



* Referenced by a CALL at Addresses:
|:00409D15   , :00409D8C   
|
:0041D4AE 55                      push ebp
:0041D4AF 8BEC                    mov ebp, esp
:0041D4B1 83EC08                  sub esp, 00000008
:0041D4B4 668B4508                mov ax, word ptr [ebp+08]
:0041D4B8 50                      push eax
:0041D4B9 E8BDFDFFFF              call 0041D27B
:0041D4BE 83C404                  add esp, 00000004
:0041D4C1 668945F8                mov word ptr [ebp-08], ax
:0041D4C5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041D4C8 81E1FFFF0000            and ecx, 0000FFFF
:0041D4CE 81F980000000            cmp ecx, 00000080
:0041D4D4 7D5B                    jge 0041D531
:0041D4D6 668B55F8                mov dx, word ptr [ebp-08]
:0041D4DA 52                      push edx
:0041D4DB E8F3D3FFFF              call 0041A8D3
:0041D4E0 83C404                  add esp, 00000004
:0041D4E3 8945FC                  mov dword ptr [ebp-04], eax
:0041D4E6 668B450C                mov ax, word ptr [ebp+0C]
:0041D4EA 50                      push eax
:0041D4EB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D4EE E8BD220000              call 0041F7B0
:0041D4F3 6A00                    push 00000000
:0041D4F5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D4F8 E8D31F0000              call 0041F4D0
:0041D4FD 668B4D0C                mov cx, word ptr [ebp+0C]
:0041D501 51                      push ecx
:0041D502 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D505 E856120000              call 0041E760
:0041D50A 8B5510                  mov edx, dword ptr [ebp+10]
:0041D50D 81E2FFFF0000            and edx, 0000FFFF
:0041D513 81FAFFFF0000            cmp edx, 0000FFFF
:0041D519 740D                    je 0041D528
:0041D51B 668B4510                mov ax, word ptr [ebp+10]
:0041D51F 50                      push eax
:0041D520 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D523 E8A8220000              call 0041F7D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D519(C)
|
:0041D528 E8E9FEFFFF              call 0041D416
:0041D52D 33C0                    xor eax, eax
:0041D52F EB03                    jmp 0041D534

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D4D4(C)
|
:0041D531 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D52F(U)
|
:0041D534 8BE5                    mov esp, ebp
:0041D536 5D                      pop ebp
:0041D537 C3                      ret



* Referenced by a CALL at Addresses:
|:0041B28C   , :0041D991   
|
:0041D538 55                      push ebp
:0041D539 8BEC                    mov ebp, esp
:0041D53B 83EC14                  sub esp, 00000014
:0041D53E 66C745FC0000            mov [ebp-04], 0000
:0041D544 8B4508                  mov eax, dword ptr [ebp+08]
:0041D547 25FFFF0000              and eax, 0000FFFF
:0041D54C 2500F00000              and eax, 0000F000
:0041D551 668945F8                mov word ptr [ebp-08], ax
:0041D555 66C745F40400            mov [ebp-0C], 0004
:0041D55B 66C745F00100            mov [ebp-10], 0001
:0041D561 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041D564 81E1FFFF0000            and ecx, 0000FFFF
:0041D56A 894DEC                  mov dword ptr [ebp-14], ecx
:0041D56D 817DEC00100000          cmp dword ptr [ebp-14], 00001000
:0041D574 742A                    je 0041D5A0
:0041D576 817DEC00200000          cmp dword ptr [ebp-14], 00002000
:0041D57D 7402                    je 0041D581
:0041D57F EB68                    jmp 0041D5E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D57D(C)
|
:0041D581 66C745F40500            mov [ebp-0C], 0005
:0041D587 6896000000              push 00000096
:0041D58C E81FAE0500              call 004783B0
:0041D591 83C404                  add esp, 00000004
:0041D594 25FFFF0000              and eax, 0000FFFF
:0041D599 83C032                  add eax, 00000032
:0041D59C 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D574(C)
|
:0041D5A0 668B5508                mov dx, word ptr [ebp+08]
:0041D5A4 52                      push edx
:0041D5A5 E81DD1FFFF              call 0041A6C7
:0041D5AA 83C404                  add esp, 00000004
:0041D5AD 25FFFF0000              and eax, 0000FFFF
:0041D5B2 50                      push eax
:0041D5B3 E8BED0FFFF              call 0041A676
:0041D5B8 83C404                  add esp, 00000004
:0041D5BB 85C0                    test eax, eax
:0041D5BD 741F                    je 0041D5DE
:0041D5BF 8B452C                  mov eax, dword ptr [ebp+2C]
:0041D5C2 50                      push eax
:0041D5C3 E8DDD0FFFF              call 0041A6A5
:0041D5C8 83C404                  add esp, 00000004
:0041D5CB 66A390034900            mov word ptr [00490390], ax
:0041D5D1 66C745F40300            mov [ebp-0C], 0003
:0041D5D7 E81C010000              call 0041D6F8
:0041D5DC EB0B                    jmp 0041D5E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D5BD(C)
|
:0041D5DE 668B4DF0                mov cx, word ptr [ebp-10]
:0041D5E2 80CD40                  or ch, 40
:0041D5E5 66894DF0                mov word ptr [ebp-10], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D57F(U), :0041D5DC(U)
|
:0041D5E9 6A00                    push 00000000
:0041D5EB 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D5EE E85D1E0000              call 0041F450
:0041D5F3 668B5524                mov dx, word ptr [ebp+24]
:0041D5F7 52                      push edx
:0041D5F8 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D5FB E8D0210000              call 0041F7D0
:0041D600 6A00                    push 00000000
:0041D602 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D605 E8261E0000              call 0041F430
:0041D60A 6A00                    push 00000000
:0041D60C 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D60F E8BC1E0000              call 0041F4D0
:0041D614 668B45FC                mov ax, word ptr [ebp-04]
:0041D618 50                      push eax
:0041D619 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D61C E84F1E0000              call 0041F470
:0041D621 6A00                    push 00000000
:0041D623 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D626 E8951B0000              call 0041F1C0
:0041D62B 668B4D0C                mov cx, word ptr [ebp+0C]
:0041D62F 51                      push ecx
:0041D630 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D633 E8581F0000              call 0041F590
:0041D638 668B5510                mov dx, word ptr [ebp+10]
:0041D63C 52                      push edx
:0041D63D 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D640 E86B1F0000              call 0041F5B0
:0041D645 668B4514                mov ax, word ptr [ebp+14]
:0041D649 50                      push eax
:0041D64A 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D64D E89E1F0000              call 0041F5F0
:0041D652 668B4D18                mov cx, word ptr [ebp+18]
:0041D656 51                      push ecx
:0041D657 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D65A E8C11B0000              call 0041F220
:0041D65F 668B551C                mov dx, word ptr [ebp+1C]
:0041D663 52                      push edx
:0041D664 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D667 E8A41E0000              call 0041F510
:0041D66C 668B4520                mov ax, word ptr [ebp+20]
:0041D670 50                      push eax
:0041D671 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D674 E8B71E0000              call 0041F530
:0041D679 68FFFF0000              push 0000FFFF
:0041D67E 68FFFF0000              push 0000FFFF
:0041D683 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D686 E815200000              call 0041F6A0
:0041D68B 68FFFF0000              push 0000FFFF
:0041D690 68FFFF0000              push 0000FFFF
:0041D695 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D698 E863200000              call 0041F700
:0041D69D 668B4DF4                mov cx, word ptr [ebp-0C]
:0041D6A1 51                      push ecx
:0041D6A2 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D6A5 E866210000              call 0041F810
:0041D6AA 68FFFF0000              push 0000FFFF
:0041D6AF 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D6B2 E879200000              call 0041F730
:0041D6B7 668B55F0                mov dx, word ptr [ebp-10]
:0041D6BB 52                      push edx
:0041D6BC 668B45F0                mov ax, word ptr [ebp-10]
:0041D6C0 50                      push eax
:0041D6C1 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D6C4 E8671F0000              call 0041F630
:0041D6C9 668B4D28                mov cx, word ptr [ebp+28]
:0041D6CD 51                      push ecx
:0041D6CE 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D6D1 E8DA200000              call 0041F7B0
:0041D6D6 668B5528                mov dx, word ptr [ebp+28]
:0041D6DA 52                      push edx
:0041D6DB 8B4D2C                  mov ecx, dword ptr [ebp+2C]
:0041D6DE E87D100000              call 0041E760
:0041D6E3 8B452C                  mov eax, dword ptr [ebp+2C]
:0041D6E6 50                      push eax
:0041D6E7 E8B9CFFFFF              call 0041A6A5
:0041D6EC 83C404                  add esp, 00000004
:0041D6EF 25FFFF0000              and eax, 0000FFFF
:0041D6F4 8BE5                    mov esp, ebp
:0041D6F6 5D                      pop ebp
:0041D6F7 C3                      ret



* Referenced by a CALL at Address:
|:0041D5D7   
|
:0041D6F8 55                      push ebp
:0041D6F9 8BEC                    mov ebp, esp
:0041D6FB E85D220100              call 0042F95D
:0041D700 66A328B54800            mov word ptr [0048B528], ax
:0041D706 6A00                    push 00000000
:0041D708 E81B220100              call 0042F928
:0041D70D 83C404                  add esp, 00000004
:0041D710 66C705502449000100      mov word ptr [00492450], 0001
:0041D719 5D                      pop ebp
:0041D71A C3                      ret



* Referenced by a CALL at Addresses:
|:0041D944   , :0041D958   
|
:0041D71B 55                      push ebp
:0041D71C 8BEC                    mov ebp, esp
:0041D71E 83EC08                  sub esp, 00000008
:0041D721 56                      push esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D816(U)
|
:0041D722 6A64                    push 00000064
:0041D724 E887AC0500              call 004783B0
:0041D729 83C404                  add esp, 00000004
:0041D72C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D72F 668901                  mov word ptr [ecx], ax
:0041D732 6A64                    push 00000064
:0041D734 E877AC0500              call 004783B0
:0041D739 83C404                  add esp, 00000004
:0041D73C 8B550C                  mov edx, dword ptr [ebp+0C]
:0041D73F 668902                  mov word ptr [edx], ax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041D742 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041D744 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041D746 6A03                    push 00000003
:0041D748 8B450C                  mov eax, dword ptr [ebp+0C]
:0041D74B 50                      push eax
:0041D74C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D74F 51                      push ecx
:0041D750 E84EE9FFFF              call 0041C0A3
:0041D755 83C414                  add esp, 00000014
:0041D758 25FFFF0000              and eax, 0000FFFF
:0041D75D 3DFFFF0000              cmp eax, 0000FFFF
:0041D762 0F84AE000000            je 0041D816
:0041D768 8B5510                  mov edx, dword ptr [ebp+10]
:0041D76B 81E2FFFF0000            and edx, 0000FFFF
:0041D771 83FA01                  cmp edx, 00000001
:0041D774 0F859A000000            jne 0041D814
:0041D77A C745FC10044900          mov [ebp-04], 00490410
:0041D781 66C745F80000            mov [ebp-08], 0000
:0041D787 EB15                    jmp 0041D79E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D7FD(U)
|
:0041D789 668B45F8                mov ax, word ptr [ebp-08]
:0041D78D 66050100                add ax, 0001
:0041D791 668945F8                mov word ptr [ebp-08], ax
:0041D795 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D798 83C140                  add ecx, 00000040
:0041D79B 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D787(U)
|
:0041D79E 8B55F8                  mov edx, dword ptr [ebp-08]
:0041D7A1 81E2FFFF0000            and edx, 0000FFFF
:0041D7A7 81FA80000000            cmp edx, 00000080
:0041D7AD 7D50                    jge 0041D7FF
:0041D7AF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D7B2 E899F2FEFF              call 0040CA50
:0041D7B7 25FFFF0000              and eax, 0000FFFF
:0041D7BC 2500800000              and eax, 00008000
:0041D7C1 85C0                    test eax, eax
:0041D7C3 7438                    je 0041D7FD
:0041D7C5 8B4508                  mov eax, dword ptr [ebp+08]
:0041D7C8 33C9                    xor ecx, ecx
:0041D7CA 668B08                  mov cx, word ptr [eax]
:0041D7CD 8BF1                    mov esi, ecx
:0041D7CF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D7D2 E8291A0000              call 0041F200
:0041D7D7 25FFFF0000              and eax, 0000FFFF
:0041D7DC 3BF0                    cmp esi, eax
:0041D7DE 751D                    jne 0041D7FD
:0041D7E0 8B550C                  mov edx, dword ptr [ebp+0C]
:0041D7E3 33C0                    xor eax, eax
:0041D7E5 668B02                  mov ax, word ptr [edx]
:0041D7E8 8BF0                    mov esi, eax
:0041D7EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D7ED E8DE1D0000              call 0041F5D0
:0041D7F2 25FFFF0000              and eax, 0000FFFF
:0041D7F7 3BF0                    cmp esi, eax
:0041D7F9 7502                    jne 0041D7FD
:0041D7FB EB02                    jmp 0041D7FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D7C3(C), :0041D7DE(C), :0041D7F9(C)
|
:0041D7FD EB8A                    jmp 0041D789

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D7AD(C), :0041D7FB(U)
|
:0041D7FF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041D802 81E1FFFF0000            and ecx, 0000FFFF
:0041D808 81F980000000            cmp ecx, 00000080
:0041D80E 7502                    jne 0041D812
:0041D810 EB09                    jmp 0041D81B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D80E(C)
|
:0041D812 EB02                    jmp 0041D816

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D774(C)
|
:0041D814 EB05                    jmp 0041D81B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D762(C), :0041D812(U)
|
:0041D816 E907FFFFFF              jmp 0041D722

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D810(U), :0041D814(U)
|
:0041D81B 5E                      pop esi
:0041D81C 8BE5                    mov esp, ebp
:0041D81E 5D                      pop ebp
:0041D81F C3                      ret



* Referenced by a CALL at Addresses:
|:0041DA6A   , :0041DACE   , :0041DB08   , :0041EE84   
|
:0041D820 55                      push ebp
:0041D821 8BEC                    mov ebp, esp
:0041D823 83EC14                  sub esp, 00000014
:0041D826 66C745F80000            mov [ebp-08], 0000
:0041D82C 668B4508                mov ax, word ptr [ebp+08]
:0041D830 50                      push eax
:0041D831 E845FAFFFF              call 0041D27B
:0041D836 83C404                  add esp, 00000004
:0041D839 668945F0                mov word ptr [ebp-10], ax
:0041D83D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041D840 81E1FFFF0000            and ecx, 0000FFFF
:0041D846 81F980000000            cmp ecx, 00000080
:0041D84C 7D0F                    jge 0041D85D
:0041D84E E89328FFFF              call 004100E6
:0041D853 B880000000              mov eax, 00000080
:0041D858 E93C010000              jmp 0041D999

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D84C(C)
|
:0041D85D 66C745140000            mov [ebp+14], 0000
:0041D863 668B5508                mov dx, word ptr [ebp+08]
:0041D867 52                      push edx
:0041D868 E86ACEFFFF              call 0041A6D7
:0041D86D 83C404                  add esp, 00000004
:0041D870 8945EC                  mov dword ptr [ebp-14], eax
:0041D873 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041D876 E8351B0000              call 0041F3B0
:0041D87B 668945F4                mov word ptr [ebp-0C], ax
:0041D87F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041D882 25FFFF0000              and eax, 0000FFFF
:0041D887 3D00100000              cmp eax, 00001000
:0041D88C 7419                    je 0041D8A7
:0041D88E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041D891 81E1FFFF0000            and ecx, 0000FFFF
:0041D897 81F900200000            cmp ecx, 00002000
:0041D89D 7408                    je 0041D8A7
:0041D89F 83C8FF                  or eax, FFFFFFFF
:0041D8A2 E9F2000000              jmp 0041D999

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D88C(C), :0041D89D(C)
|
:0041D8A7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041D8AA E8211B0000              call 0041F3D0
:0041D8AF 6633D2                  xor dx, dx
:0041D8B2 8AD0                    mov dl, al
:0041D8B4 52                      push edx
:0041D8B5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041D8B8 E873180000              call 0041F130
:0041D8BD 50                      push eax
:0041D8BE E88ED2FFFF              call 0041AB51
:0041D8C3 83C408                  add esp, 00000008
:0041D8C6 8945FC                  mov dword ptr [ebp-04], eax
:0041D8C9 6880000000              push 00000080
:0041D8CE E800D0FFFF              call 0041A8D3
:0041D8D3 83C404                  add esp, 00000004
:0041D8D6 3945FC                  cmp dword ptr [ebp-04], eax
:0041D8D9 750A                    jne 0041D8E5
:0041D8DB B880000000              mov eax, 00000080
:0041D8E0 E9B4000000              jmp 0041D999

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D8D9(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041D8E5 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041D8E7 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041D8E9 6A03                    push 00000003
:0041D8EB 8D4510                  lea eax, dword ptr [ebp+10]
:0041D8EE 50                      push eax
:0041D8EF 8D4D0C                  lea ecx, dword ptr [ebp+0C]
:0041D8F2 51                      push ecx
:0041D8F3 E8ABE7FFFF              call 0041C0A3
:0041D8F8 83C414                  add esp, 00000014
:0041D8FB 25FFFF0000              and eax, 0000FFFF
:0041D900 3DFFFF0000              cmp eax, 0000FFFF
:0041D905 7559                    jne 0041D960
:0041D907 668B5508                mov dx, word ptr [ebp+08]
:0041D90B 52                      push edx
:0041D90C E8B6CDFFFF              call 0041A6C7
:0041D911 83C404                  add esp, 00000004
:0041D914 25FFFF0000              and eax, 0000FFFF
:0041D919 50                      push eax
:0041D91A E857CDFFFF              call 0041A676
:0041D91F 83C404                  add esp, 00000004
:0041D922 85C0                    test eax, eax
:0041D924 7428                    je 0041D94E
:0041D926 8D4510                  lea eax, dword ptr [ebp+10]
:0041D929 50                      push eax
:0041D92A 8D4D0C                  lea ecx, dword ptr [ebp+0C]
:0041D92D 51                      push ecx
:0041D92E E86A000000              call 0041D99D
:0041D933 83C408                  add esp, 00000008
:0041D936 85C0                    test eax, eax
:0041D938 7512                    jne 0041D94C
:0041D93A 6A01                    push 00000001
:0041D93C 8D5510                  lea edx, dword ptr [ebp+10]
:0041D93F 52                      push edx
:0041D940 8D450C                  lea eax, dword ptr [ebp+0C]
:0041D943 50                      push eax
:0041D944 E8D2FDFFFF              call 0041D71B
:0041D949 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D938(C)
|
:0041D94C EB12                    jmp 0041D960

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D924(C)
|
:0041D94E 6A01                    push 00000001
:0041D950 8D4D10                  lea ecx, dword ptr [ebp+10]
:0041D953 51                      push ecx
:0041D954 8D550C                  lea edx, dword ptr [ebp+0C]
:0041D957 52                      push edx
:0041D958 E8BEFDFFFF              call 0041D71B
:0041D95D 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D905(C), :0041D94C(U)
|
:0041D960 8B45FC                  mov eax, dword ptr [ebp-04]
:0041D963 50                      push eax
:0041D964 668B4D28                mov cx, word ptr [ebp+28]
:0041D968 51                      push ecx
:0041D969 668B5524                mov dx, word ptr [ebp+24]
:0041D96D 52                      push edx
:0041D96E 668B4520                mov ax, word ptr [ebp+20]
:0041D972 50                      push eax
:0041D973 668B4D1C                mov cx, word ptr [ebp+1C]
:0041D977 51                      push ecx
:0041D978 668B5518                mov dx, word ptr [ebp+18]
:0041D97C 52                      push edx
:0041D97D 668B4514                mov ax, word ptr [ebp+14]
:0041D981 50                      push eax
:0041D982 668B4D10                mov cx, word ptr [ebp+10]
:0041D986 51                      push ecx
:0041D987 668B550C                mov dx, word ptr [ebp+0C]
:0041D98B 52                      push edx
:0041D98C 668B4508                mov ax, word ptr [ebp+08]
:0041D990 50                      push eax
:0041D991 E8A2FBFFFF              call 0041D538
:0041D996 83C428                  add esp, 00000028

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041D858(U), :0041D8A2(U), :0041D8E0(U)
|
:0041D999 8BE5                    mov esp, ebp
:0041D99B 5D                      pop ebp
:0041D99C C3                      ret



* Referenced by a CALL at Address:
|:0041D92E   
|
:0041D99D 55                      push ebp
:0041D99E 8BEC                    mov ebp, esp
:0041D9A0 83EC0C                  sub esp, 0000000C
:0041D9A3 E87C27FFFF              call 00410124
:0041D9A8 C745FCD8034900          mov [ebp-04], 004903D8
:0041D9AF 66C745F40400            mov [ebp-0C], 0004
:0041D9B5 EB15                    jmp 0041D9CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DA13(U)
|
:0041D9B7 668B45F4                mov ax, word ptr [ebp-0C]
:0041D9BB 66050100                add ax, 0001
:0041D9BF 668945F4                mov word ptr [ebp-0C], ax
:0041D9C3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D9C6 83C10E                  add ecx, 0000000E
:0041D9C9 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D9B5(U)
|
:0041D9CC 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041D9CF 81E2FFFF0000            and edx, 0000FFFF
:0041D9D5 83FA08                  cmp edx, 00000008
:0041D9D8 7D3B                    jge 0041DA15
:0041D9DA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D9DD E8CE1E0000              call 0041F8B0
:0041D9E2 25FFFF0000              and eax, 0000FFFF
:0041D9E7 2500800000              and eax, 00008000
:0041D9EC 85C0                    test eax, eax
:0041D9EE 7423                    je 0041DA13
:0041D9F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041D9F3 E8E8170000              call 0041F1E0
:0041D9F8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041D9FB 668901                  mov word ptr [ecx], ax
:0041D9FE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041DA01 E8FA170000              call 0041F200
:0041DA06 8B550C                  mov edx, dword ptr [ebp+0C]
:0041DA09 668902                  mov word ptr [edx], ax
:0041DA0C B801000000              mov eax, 00000001
:0041DA11 EB04                    jmp 0041DA17

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D9EE(C)
|
:0041DA13 EBA2                    jmp 0041D9B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041D9D8(C)
|
:0041DA15 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DA11(U)
|
:0041DA17 8BE5                    mov esp, ebp
:0041DA19 5D                      pop ebp
:0041DA1A C3                      ret



* Referenced by a CALL at Address:
|:004099FC   
|
:0041DA1B 55                      push ebp
:0041DA1C 8BEC                    mov ebp, esp
:0041DA1E 668B4518                mov ax, word ptr [ebp+18]
:0041DA22 66250300                and ax, 0003
:0041DA26 66894518                mov word ptr [ebp+18], ax
:0041DA2A 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0041DA2D 81E1FFFF0000            and ecx, 0000FFFF
:0041DA33 83F90D                  cmp ecx, 0000000D
:0041DA36 7544                    jne 0041DA7C
:0041DA38 66C7451C0100            mov [ebp+1C], 0001
:0041DA3E 668B551C                mov dx, word ptr [ebp+1C]
:0041DA42 52                      push edx
:0041DA43 668B4518                mov ax, word ptr [ebp+18]
:0041DA47 50                      push eax
:0041DA48 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041DA4A 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041DA4C 6A03                    push 00000003
:0041DA4E 668B4D14                mov cx, word ptr [ebp+14]
:0041DA52 51                      push ecx
:0041DA53 668B5510                mov dx, word ptr [ebp+10]
:0041DA57 52                      push edx
:0041DA58 668B450C                mov ax, word ptr [ebp+0C]
:0041DA5C 50                      push eax
:0041DA5D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DA60 81E1FFFF0000            and ecx, 0000FFFF
:0041DA66 80CD20                  or ch, 20
:0041DA69 51                      push ecx
:0041DA6A E8B1FDFFFF              call 0041D820
:0041DA6F 83C424                  add esp, 00000024
:0041DA72 B8FFFF0000              mov eax, 0000FFFF
:0041DA77 E999000000              jmp 0041DB15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DA36(C)
|
:0041DA7C 8B551C                  mov edx, dword ptr [ebp+1C]
:0041DA7F 81E2FFFF0000            and edx, 0000FFFF
:0041DA85 83FA0E                  cmp edx, 0000000E
:0041DA88 7E06                    jle 0041DA90
:0041DA8A 66C7451C0000            mov [ebp+1C], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DA88(C)
|
:0041DA90 8B451C                  mov eax, dword ptr [ebp+1C]
:0041DA93 25FFFF0000              and eax, 0000FFFF
:0041DA98 83F80C                  cmp eax, 0000000C
:0041DA9B 7540                    jne 0041DADD
:0041DA9D 66C7451C0000            mov [ebp+1C], 0000
:0041DAA3 668B4D1C                mov cx, word ptr [ebp+1C]
:0041DAA7 51                      push ecx
:0041DAA8 668B5518                mov dx, word ptr [ebp+18]
:0041DAAC 52                      push edx
:0041DAAD 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041DAAF 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041DAB1 6A03                    push 00000003
:0041DAB3 668B4514                mov ax, word ptr [ebp+14]
:0041DAB7 50                      push eax
:0041DAB8 668B4D10                mov cx, word ptr [ebp+10]
:0041DABC 51                      push ecx
:0041DABD 668B550C                mov dx, word ptr [ebp+0C]
:0041DAC1 52                      push edx
:0041DAC2 8B4508                  mov eax, dword ptr [ebp+08]
:0041DAC5 25FFFF0000              and eax, 0000FFFF
:0041DACA 80CC20                  or ah, 20
:0041DACD 50                      push eax
:0041DACE E84DFDFFFF              call 0041D820
:0041DAD3 83C424                  add esp, 00000024
:0041DAD6 B8FFFF0000              mov eax, 0000FFFF
:0041DADB EB38                    jmp 0041DB15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DA9B(C)
|
:0041DADD 668B4D1C                mov cx, word ptr [ebp+1C]
:0041DAE1 51                      push ecx
:0041DAE2 668B5518                mov dx, word ptr [ebp+18]
:0041DAE6 52                      push edx
:0041DAE7 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041DAE9 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0041DAEB 6A03                    push 00000003
:0041DAED 668B4514                mov ax, word ptr [ebp+14]
:0041DAF1 50                      push eax
:0041DAF2 668B4D10                mov cx, word ptr [ebp+10]
:0041DAF6 51                      push ecx
:0041DAF7 668B550C                mov dx, word ptr [ebp+0C]
:0041DAFB 52                      push edx
:0041DAFC 8B4508                  mov eax, dword ptr [ebp+08]
:0041DAFF 25FFFF0000              and eax, 0000FFFF
:0041DB04 80CC10                  or ah, 10
:0041DB07 50                      push eax
:0041DB08 E813FDFFFF              call 0041D820
:0041DB0D 83C424                  add esp, 00000024
:0041DB10 B8FFFF0000              mov eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DA77(U), :0041DADB(U)
|
:0041DB15 5D                      pop ebp
:0041DB16 C3                      ret


:0041DB17 55                      push ebp
:0041DB18 8BEC                    mov ebp, esp
:0041DB1A 83EC08                  sub esp, 00000008
:0041DB1D 668B4508                mov ax, word ptr [ebp+08]
:0041DB21 50                      push eax
:0041DB22 E854F7FFFF              call 0041D27B
:0041DB27 83C404                  add esp, 00000004
:0041DB2A 668945FC                mov word ptr [ebp-04], ax
:0041DB2E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041DB31 81E1FFFF0000            and ecx, 0000FFFF
:0041DB37 81F980000000            cmp ecx, 00000080
:0041DB3D 7C07                    jl 0041DB46
:0041DB3F B8FFFF0000              mov eax, 0000FFFF
:0041DB44 EB2B                    jmp 0041DB71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DB3D(C)
|
:0041DB46 668B55FC                mov dx, word ptr [ebp-04]
:0041DB4A 52                      push edx
:0041DB4B E883CDFFFF              call 0041A8D3
:0041DB50 83C404                  add esp, 00000004
:0041DB53 8945F8                  mov dword ptr [ebp-08], eax
:0041DB56 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DB59 E812EFFEFF              call 0040CA70
:0041DB5E 25FFFF0000              and eax, 0000FFFF
:0041DB63 83F804                  cmp eax, 00000004
:0041DB66 7407                    je 0041DB6F
:0041DB68 B801000000              mov eax, 00000001
:0041DB6D EB02                    jmp 0041DB71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DB66(C)
|
:0041DB6F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DB44(U), :0041DB6D(U)
|
:0041DB71 8BE5                    mov esp, ebp
:0041DB73 5D                      pop ebp
:0041DB74 C3                      ret



* Referenced by a CALL at Address:
|:00409C52   
|
:0041DB75 55                      push ebp
:0041DB76 8BEC                    mov ebp, esp
:0041DB78 83EC08                  sub esp, 00000008
:0041DB7B 8B4514                  mov eax, dword ptr [ebp+14]
:0041DB7E 25FFFF0000              and eax, 0000FFFF
:0041DB83 83F803                  cmp eax, 00000003
:0041DB86 7E06                    jle 0041DB8E
:0041DB88 66C745140000            mov [ebp+14], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DB86(C)
|
:0041DB8E 668B4D08                mov cx, word ptr [ebp+08]
:0041DB92 51                      push ecx
:0041DB93 E8E3F6FFFF              call 0041D27B
:0041DB98 83C404                  add esp, 00000004
:0041DB9B 668945FC                mov word ptr [ebp-04], ax
:0041DB9F 8B55FC                  mov edx, dword ptr [ebp-04]
:0041DBA2 81E2FFFF0000            and edx, 0000FFFF
:0041DBA8 81FA80000000            cmp edx, 00000080
:0041DBAE 7C0A                    jl 0041DBBA
:0041DBB0 B8FFFF0000              mov eax, 0000FFFF
:0041DBB5 E9C4000000              jmp 0041DC7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DBAE(C)
|
:0041DBBA 668B45FC                mov ax, word ptr [ebp-04]
:0041DBBE 50                      push eax
:0041DBBF E80FCDFFFF              call 0041A8D3
:0041DBC4 83C404                  add esp, 00000004
:0041DBC7 8945F8                  mov dword ptr [ebp-08], eax
:0041DBCA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DBCD E89EEEFEFF              call 0040CA70
:0041DBD2 25FFFF0000              and eax, 0000FFFF
:0041DBD7 83F804                  cmp eax, 00000004
:0041DBDA 740A                    je 0041DBE6
:0041DBDC B8FFFF0000              mov eax, 0000FFFF
:0041DBE1 E998000000              jmp 0041DC7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DBDA(C)
|
:0041DBE6 6A00                    push 00000000
:0041DBE8 6A01                    push 00000001
:0041DBEA 668B4D10                mov cx, word ptr [ebp+10]
:0041DBEE 51                      push ecx
:0041DBEF 668B550C                mov dx, word ptr [ebp+0C]
:0041DBF3 52                      push edx
:0041DBF4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DBF7 E8341C0000              call 0041F830
:0041DBFC 50                      push eax
:0041DBFD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DC00 E8EB180000              call 0041F4F0
:0041DC05 50                      push eax
:0041DC06 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DC09 E8C2190000              call 0041F5D0
:0041DC0E 50                      push eax
:0041DC0F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DC12 E8E9150000              call 0041F200
:0041DC17 50                      push eax
:0041DC18 E89AEBFFFF              call 0041C7B7
:0041DC1D 83C420                  add esp, 00000020
:0041DC20 83F801                  cmp eax, 00000001
:0041DC23 7528                    jne 0041DC4D
:0041DC25 6A00                    push 00000000
:0041DC27 668B4514                mov ax, word ptr [ebp+14]
:0041DC2B 50                      push eax
:0041DC2C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DC2F 51                      push ecx
:0041DC30 E800E8FFFF              call 0041C435
:0041DC35 83C40C                  add esp, 0000000C
:0041DC38 25FFFF0000              and eax, 0000FFFF
:0041DC3D 3DFFFF0000              cmp eax, 0000FFFF
:0041DC42 7507                    jne 0041DC4B
:0041DC44 B8FFFF0000              mov eax, 0000FFFF
:0041DC49 EB33                    jmp 0041DC7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DC42(C)
|
:0041DC4B EB07                    jmp 0041DC54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DC23(C)
|
:0041DC4D B8FFFF0000              mov eax, 0000FFFF
:0041DC52 EB2A                    jmp 0041DC7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DC4B(U)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041DC54 6A02                    push 00000002
:0041DC56 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DC59 E8B21B0000              call 0041F810
:0041DC5E 6A00                    push 00000000
:0041DC60 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DC63 E8481B0000              call 0041F7B0
:0041DC68 6A00                    push 00000000
:0041DC6A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DC6D E8EE0A0000              call 0041E760
:0041DC72 6A00                    push 00000000
:0041DC74 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DC77 E8F4170000              call 0041F470
:0041DC7C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DBB5(U), :0041DBE1(U), :0041DC49(U), :0041DC52(U)
|
:0041DC7E 8BE5                    mov esp, ebp
:0041DC80 5D                      pop ebp
:0041DC81 C3                      ret



* Referenced by a CALL at Addresses:
|:0041E029   , :0041EF9B   
|
:0041DC82 55                      push ebp
:0041DC83 8BEC                    mov ebp, esp
:0041DC85 83EC08                  sub esp, 00000008
:0041DC88 66C745FCFFFF            mov [ebp-04], FFFF
:0041DC8E 33C0                    xor eax, eax
:0041DC90 66A150244900            mov ax, word ptr [00492450]
:0041DC96 85C0                    test eax, eax
:0041DC98 757C                    jne 0041DD16
:0041DC9A 833D3CC74A0002          cmp dword ptr [004AC73C], 00000002
:0041DCA1 7473                    je 0041DD16
:0041DCA3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DCA6 81E1FFFF0000            and ecx, 0000FFFF
:0041DCAC 894DF8                  mov dword ptr [ebp-08], ecx
:0041DCAF 837DF800                cmp dword ptr [ebp-08], 00000000
:0041DCB3 740E                    je 0041DCC3
:0041DCB5 837DF801                cmp dword ptr [ebp-08], 00000001
:0041DCB9 741A                    je 0041DCD5
:0041DCBB 837DF802                cmp dword ptr [ebp-08], 00000002
:0041DCBF 742E                    je 0041DCEF
:0041DCC1 EB53                    jmp 0041DD16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DCB3(C)
|
:0041DCC3 6A00                    push 00000000
:0041DCC5 B9806D4800              mov ecx, 00486D80
:0041DCCA E86BE6FEFF              call 0040C33A
:0041DCCF 668945FC                mov word ptr [ebp-04], ax
:0041DCD3 EB41                    jmp 0041DD16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DCB9(C)
|
:0041DCD5 8B550C                  mov edx, dword ptr [ebp+0C]
:0041DCD8 81E2FFFF0000            and edx, 0000FFFF
:0041DCDE 52                      push edx
:0041DCDF B9806D4800              mov ecx, 00486D80
:0041DCE4 E88AE5FEFF              call 0040C273
:0041DCE9 668945FC                mov word ptr [ebp-04], ax
:0041DCED EB27                    jmp 0041DD16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DCBF(C)
|
:0041DCEF 8B450C                  mov eax, dword ptr [ebp+0C]
:0041DCF2 25FFFF0000              and eax, 0000FFFF
:0041DCF7 50                      push eax
:0041DCF8 B9D8174B00              mov ecx, 004B17D8
:0041DCFD E8DE420200              call 00441FE0
:0041DD02 25FF000000              and eax, 000000FF
:0041DD07 50                      push eax
:0041DD08 B9806D4800              mov ecx, 00486D80
:0041DD0D E8BCE5FEFF              call 0040C2CE
:0041DD12 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DC98(C), :0041DCA1(C), :0041DCC1(U), :0041DCD3(U), :0041DCED(U)
|
:0041DD16 33C0                    xor eax, eax
:0041DD18 8BE5                    mov esp, ebp
:0041DD1A 5D                      pop ebp
:0041DD1B C3                      ret



* Referenced by a CALL at Address:
|:0041DD45   
|
:0041DD1C 55                      push ebp
:0041DD1D 8BEC                    mov ebp, esp
:0041DD1F E810E9FFFF              call 0041C634
:0041DD24 25FFFF0000              and eax, 0000FFFF
:0041DD29 85C0                    test eax, eax
:0041DD2B 7511                    jne 0041DD3E
:0041DD2D E82B1C0100              call 0042F95D
:0041DD32 83F801                  cmp eax, 00000001
:0041DD35 7507                    jne 0041DD3E
:0041DD37 B801000000              mov eax, 00000001
:0041DD3C EB02                    jmp 0041DD40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DD2B(C), :0041DD35(C)
|
:0041DD3E 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DD3C(U)
|
:0041DD40 5D                      pop ebp
:0041DD41 C3                      ret



* Referenced by a CALL at Addresses:
|:0041DDBC   , :0041DE29   , :0041E062   , :0041E227   , :0041EEE4   
|
:0041DD42 55                      push ebp
:0041DD43 8BEC                    mov ebp, esp
:0041DD45 E8D2FFFFFF              call 0041DD1C
:0041DD4A 50                      push eax
:0041DD4B E8CECBFFFF              call 0041A91E
:0041DD50 83C404                  add esp, 00000004
:0041DD53 5D                      pop ebp
:0041DD54 C3                      ret



* Referenced by a CALL at Addresses:
|:0041CE64   , :0041DE72   , :0041DEB6   , :0041E0A3   , :0041E0B6   
|:0041E19A   , :0041E1B2   
|
:0041DD55 55                      push ebp
:0041DD56 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041DD58 6A04                    push 00000004
:0041DD5A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DD5D E8AE1A0000              call 0041F810
:0041DD62 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DD65 E8061A0000              call 0041F770
:0041DD6A 50                      push eax
:0041DD6B E858E5FFFF              call 0041C2C8
:0041DD70 83C404                  add esp, 00000004
:0041DD73 68FFFF0000              push 0000FFFF
:0041DD78 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041DD7B E8B0190000              call 0041F730
:0041DD80 5D                      pop ebp
:0041DD81 C3                      ret



* Referenced by a CALL at Address:
|:0041E081   
|
:0041DD82 55                      push ebp
:0041DD83 8BEC                    mov ebp, esp
:0041DD85 51                      push ecx
:0041DD86 C745FCD8174B00          mov [ebp-04], 004B17D8
:0041DD8D E8BAE1FFFF              call 0041BF4C
:0041DD92 A13CC74A00              mov eax, dword ptr [004AC73C]
:0041DD97 0C02                    or al, 02
:0041DD99 A33CC74A00              mov dword ptr [004AC73C], eax
:0041DD9E 6A00                    push 00000000
:0041DDA0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041DDA3 E88845FFFF              call 00412330
:0041DDA8 6A01                    push 00000001
:0041DDAA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041DDAD E86E910100              call 00436F20
:0041DDB2 B9806D4800              mov ecx, 00486D80
:0041DDB7 E86EE4FEFF              call 0040C22A
:0041DDBC E881FFFFFF              call 0041DD42
:0041DDC1 8BE5                    mov esp, ebp
:0041DDC3 5D                      pop ebp
:0041DDC4 C3                      ret



* Referenced by a CALL at Address:
|:0041EF67   
|
:0041DDC5 55                      push ebp
:0041DDC6 8BEC                    mov ebp, esp
:0041DDC8 83EC28                  sub esp, 00000028
:0041DDCB 66C745F40000            mov [ebp-0C], 0000
:0041DDD1 6880000000              push 00000080
:0041DDD6 E8F8CAFFFF              call 0041A8D3
:0041DDDB 83C404                  add esp, 00000004
:0041DDDE 8945FC                  mov dword ptr [ebp-04], eax
:0041DDE1 E80AE8FFFF              call 0041C5F0
:0041DDE6 25FFFF0000              and eax, 0000FFFF
:0041DDEB 3DFFFF0000              cmp eax, 0000FFFF
:0041DDF0 7505                    jne 0041DDF7
:0041DDF2 E9C7020000              jmp 0041E0BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DDF0(C)
|
:0041DDF7 E8611B0100              call 0042F95D
:0041DDFC 83F801                  cmp eax, 00000001
:0041DDFF 752D                    jne 0041DE2E
:0041DE01 A1FC1C4B00              mov eax, dword ptr [004B1CFC]
:0041DE06 3B0538C74A00            cmp eax, dword ptr [004AC738]
:0041DE0C 7420                    je 0041DE2E
:0041DE0E 8B0DFC1C4B00            mov ecx, dword ptr [004B1CFC]
:0041DE14 890D38C74A00            mov dword ptr [004AC738], ecx
:0041DE1A E849EFFFFF              call 0041CD68
:0041DE1F 25FFFF0000              and eax, 0000FFFF
:0041DE24 83F801                  cmp eax, 00000001
:0041DE27 7505                    jne 0041DE2E
:0041DE29 E814FFFFFF              call 0041DD42

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DDFF(C), :0041DE0C(C), :0041DE27(C)
|
:0041DE2E E8B5CAFFFF              call 0041A8E8
:0041DE33 8945F8                  mov dword ptr [ebp-08], eax
:0041DE36 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DE39 E832ECFEFF              call 0040CA70
:0041DE3E 25FFFF0000              and eax, 0000FFFF
:0041DE43 8945E0                  mov dword ptr [ebp-20], eax
:0041DE46 837DE003                cmp dword ptr [ebp-20], 00000003
:0041DE4A 0F8762020000            ja 0041E0B2
:0041DE50 8B55E0                  mov edx, dword ptr [ebp-20]
:0041DE53 FF2495C2E04100          jmp dword ptr [4*edx+0041E0C2]
:0041DE5A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DE5D E8AF070000              call 0041E611
:0041DE62 25FFFF0000              and eax, 0000FFFF
:0041DE67 3DFFFF0000              cmp eax, 0000FFFF
:0041DE6C 7527                    jne 0041DE95
:0041DE6E 8B45F8                  mov eax, dword ptr [ebp-08]
:0041DE71 50                      push eax
:0041DE72 E8DEFEFFFF              call 0041DD55
:0041DE77 83C404                  add esp, 00000004
:0041DE7A 33C9                    xor ecx, ecx
:0041DE7C 668B0D28B54800          mov cx, word ptr [0048B528]
:0041DE83 51                      push ecx
:0041DE84 E89F1A0100              call 0042F928
:0041DE89 83C404                  add esp, 00000004
:0041DE8C 66C705502449000000      mov word ptr [00492450], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DE6C(C)
|
:0041DE95 E924020000              jmp 0041E0BE
:0041DE9A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DE9D E86F070000              call 0041E611
:0041DEA2 25FFFF0000              and eax, 0000FFFF
:0041DEA7 3DFFFF0000              cmp eax, 0000FFFF
:0041DEAC 0F85B5010000            jne 0041E067
:0041DEB2 8B55F8                  mov edx, dword ptr [ebp-08]
:0041DEB5 52                      push edx
:0041DEB6 E89AFEFFFF              call 0041DD55
:0041DEBB 83C404                  add esp, 00000004
:0041DEBE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DEC1 E88A180000              call 0041F750
:0041DEC6 668945E8                mov word ptr [ebp-18], ax
:0041DECA 668B45E8                mov ax, word ptr [ebp-18]
:0041DECE 50                      push eax
:0041DECF E8A7F3FFFF              call 0041D27B
:0041DED4 83C404                  add esp, 00000004
:0041DED7 668945F0                mov word ptr [ebp-10], ax
:0041DEDB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041DEDE 81E1FFFF0000            and ecx, 0000FFFF
:0041DEE4 81F980000000            cmp ecx, 00000080
:0041DEEA 7D71                    jge 0041DF5D
:0041DEEC 668B55F0                mov dx, word ptr [ebp-10]
:0041DEF0 52                      push edx
:0041DEF1 E8DDC9FFFF              call 0041A8D3
:0041DEF6 83C404                  add esp, 00000004
:0041DEF9 8945FC                  mov dword ptr [ebp-04], eax
:0041DEFC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041DEFF E8CC160000              call 0041F5D0
:0041DF04 50                      push eax
:0041DF05 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041DF08 E8F3120000              call 0041F200
:0041DF0D 50                      push eax
:0041DF0E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DF11 E8BA160000              call 0041F5D0
:0041DF16 50                      push eax
:0041DF17 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DF1A E8E1120000              call 0041F200
:0041DF1F 50                      push eax
:0041DF20 E8D3E3FFFF              call 0041C2F8
:0041DF25 83C410                  add esp, 00000010
:0041DF28 668945E4                mov word ptr [ebp-1C], ax
:0041DF2C 668B45E4                mov ax, word ptr [ebp-1C]
:0041DF30 50                      push eax
:0041DF31 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041DF34 E897180000              call 0041F7D0
:0041DF39 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041DF3C E8AF180000              call 0041F7F0
:0041DF41 668945F4                mov word ptr [ebp-0C], ax
:0041DF45 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041DF48 81E1FFFF0000            and ecx, 0000FFFF
:0041DF4E 83C102                  add ecx, 00000002
:0041DF51 83E103                  and ecx, 00000003
:0041DF54 51                      push ecx
:0041DF55 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041DF58 E873180000              call 0041F7D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DEEA(C)
|
:0041DF5D E8EADFFFFF              call 0041BF4C
:0041DF62 8B55F0                  mov edx, dword ptr [ebp-10]
:0041DF65 81E2FFFF0000            and edx, 0000FFFF
:0041DF6B 81FA80000000            cmp edx, 00000080
:0041DF71 0F8DE6000000            jnl 0041E05D
:0041DF77 668B45E8                mov ax, word ptr [ebp-18]
:0041DF7B 50                      push eax
:0041DF7C E846C7FFFF              call 0041A6C7
:0041DF81 83C404                  add esp, 00000004
:0041DF84 668945EC                mov word ptr [ebp-14], ax
:0041DF88 668B4DE8                mov cx, word ptr [ebp-18]
:0041DF8C 51                      push ecx
:0041DF8D E823C7FFFF              call 0041A6B5
:0041DF92 83C404                  add esp, 00000004
:0041DF95 25FFFF0000              and eax, 0000FFFF
:0041DF9A 8945DC                  mov dword ptr [ebp-24], eax
:0041DF9D 817DDC00100000          cmp dword ptr [ebp-24], 00001000
:0041DFA4 740E                    je 0041DFB4
:0041DFA6 817DDC00200000          cmp dword ptr [ebp-24], 00002000
:0041DFAD 7405                    je 0041DFB4
:0041DFAF E99C000000              jmp 0041E050

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DFA4(C), :0041DFAD(C)
|
:0041DFB4 8B55E8                  mov edx, dword ptr [ebp-18]
:0041DFB7 81E2FFFF0000            and edx, 0000FFFF
:0041DFBD 8955D8                  mov dword ptr [ebp-28], edx
:0041DFC0 8B45D8                  mov eax, dword ptr [ebp-28]
:0041DFC3 2DEE110000              sub eax, 000011EE
:0041DFC8 8945D8                  mov dword ptr [ebp-28], eax
:0041DFCB 837DD805                cmp dword ptr [ebp-28], 00000005
:0041DFCF 7751                    ja 0041E022
:0041DFD1 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0041DFD4 FF248DD2E04100          jmp dword ptr [4*ecx+0041E0D2]
:0041DFDB 8B55E8                  mov edx, dword ptr [ebp-18]
:0041DFDE 81E2FFFF0000            and edx, 0000FFFF
:0041DFE4 52                      push edx
:0041DFE5 E805320400              call 004611EF
:0041DFEA 83C404                  add esp, 00000004
:0041DFED EB61                    jmp 0041E050
:0041DFEF 8B45E8                  mov eax, dword ptr [ebp-18]
:0041DFF2 25FFFF0000              and eax, 0000FFFF
:0041DFF7 50                      push eax
:0041DFF8 E8411A0000              call 0041FA3E
:0041DFFD 83C404                  add esp, 00000004
:0041E000 EB4E                    jmp 0041E050
:0041E002 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041E005 81E1FFFF0000            and ecx, 0000FFFF
:0041E00B 51                      push ecx
:0041E00C E8A2320400              call 004612B3
:0041E011 83C404                  add esp, 00000004
:0041E014 EB3A                    jmp 0041E050
:0041E016 6A00                    push 00000000
:0041E018 E858330400              call 00461375
:0041E01D 83C404                  add esp, 00000004
:0041E020 EB2E                    jmp 0041E050

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DFCF(C)
|
:0041E022 668B55EC                mov dx, word ptr [ebp-14]
:0041E026 52                      push edx
:0041E027 6A01                    push 00000001
:0041E029 E854FCFFFF              call 0041DC82
:0041E02E 83C408                  add esp, 00000008
:0041E031 3DFFFF0000              cmp eax, 0000FFFF
:0041E036 7518                    jne 0041E050
:0041E038 6A00                    push 00000000
:0041E03A 8B45EC                  mov eax, dword ptr [ebp-14]
:0041E03D 25FFFF0000              and eax, 0000FFFF
:0041E042 50                      push eax

* Possible StringData Ref from Data Obj ->"KKC"
                                  |
:0041E043 68F8CB4700              push 0047CBF8
:0041E048 E8611B0100              call 0042FBAE
:0041E04D 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DFAF(U), :0041DFED(U), :0041E000(U), :0041E014(U), :0041E020(U)
|:0041E036(C)
|
:0041E050 668B4DF4                mov cx, word ptr [ebp-0C]
:0041E054 51                      push ecx
:0041E055 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E058 E873170000              call 0041F7D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DF71(C)
|
:0041E05D E8EADEFFFF              call 0041BF4C
:0041E062 E8DBFCFFFF              call 0041DD42

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DEAC(C)
|
:0041E067 EB55                    jmp 0041E0BE
:0041E069 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E06C E8A0050000              call 0041E611
:0041E071 25FFFF0000              and eax, 0000FFFF
:0041E076 3DFFFF0000              cmp eax, 0000FFFF
:0041E07B 750C                    jne 0041E089
:0041E07D 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E080 52                      push edx
:0041E081 E8FCFCFFFF              call 0041DD82
:0041E086 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E07B(C)
|
:0041E089 EB33                    jmp 0041E0BE
:0041E08B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E08E E87E050000              call 0041E611
:0041E093 25FFFF0000              and eax, 0000FFFF
:0041E098 3DFFFF0000              cmp eax, 0000FFFF
:0041E09D 7511                    jne 0041E0B0
:0041E09F 8B45F8                  mov eax, dword ptr [ebp-08]
:0041E0A2 50                      push eax
:0041E0A3 E8ADFCFFFF              call 0041DD55
:0041E0A8 83C404                  add esp, 00000004
:0041E0AB E89CDEFFFF              call 0041BF4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E09D(C)
|
:0041E0B0 EB0C                    jmp 0041E0BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041DE4A(C)
|
:0041E0B2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E0B5 51                      push ecx
:0041E0B6 E89AFCFFFF              call 0041DD55
:0041E0BB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041DDF2(U), :0041DE95(U), :0041E067(U), :0041E089(U), :0041E0B0(U)
|
:0041E0BE 8BE5                    mov esp, ebp
:0041E0C0 5D                      pop ebp
:0041E0C1 C3                      ret



:0041E0C2 9ADE4100                DWORD 0041DE9A
:0041E0C6 69E04100                DWORD 0041E069
:0041E0CA 8BE04100                DWORD 0041E08B
:0041E0CE 5ADE4100                DWORD 0041DE5A
:0041E0D2 DBDF4100                DWORD 0041DFDB
:0041E0D6 16E04100                DWORD 0041E016
:0041E0DA 02E04100                DWORD 0041E002
:0041E0DE 02E04100                DWORD 0041E002
:0041E0E2 02E04100                DWORD 0041E002
:0041E0E6 EFDF4100                DWORD 0041DFEF



* Referenced by a CALL at Address:
|:0041EF7B   
|
:0041E0EA 55                      push ebp
:0041E0EB 8BEC                    mov ebp, esp
:0041E0ED 83EC10                  sub esp, 00000010
:0041E0F0 6A00                    push 00000000
:0041E0F2 E8DCC7FFFF              call 0041A8D3
:0041E0F7 83C404                  add esp, 00000004
:0041E0FA 8945FC                  mov dword ptr [ebp-04], eax
:0041E0FD 66C745F80000            mov [ebp-08], 0000
:0041E103 EB15                    jmp 0041E11A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E162(U), :0041E1BA(U)
|
:0041E105 668B45F8                mov ax, word ptr [ebp-08]
:0041E109 66050100                add ax, 0001
:0041E10D 668945F8                mov word ptr [ebp-08], ax
:0041E111 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E114 83C140                  add ecx, 00000040
:0041E117 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E103(U)
|
:0041E11A 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E11D 81E2FFFF0000            and edx, 0000FFFF
:0041E123 81FA80000000            cmp edx, 00000080
:0041E129 0F8D90000000            jnl 0041E1BF
:0041E12F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E132 E819E9FEFF              call 0040CA50
:0041E137 668945F4                mov word ptr [ebp-0C], ax
:0041E13B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041E13E 25FFFF0000              and eax, 0000FFFF
:0041E143 2500800000              and eax, 00008000
:0041E148 85C0                    test eax, eax
:0041E14A 7416                    je 0041E162
:0041E14C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E14F 81E1FFFF0000            and ecx, 0000FFFF
:0041E155 33D2                    xor edx, edx
:0041E157 668B1590034900          mov dx, word ptr [00490390]
:0041E15E 3BCA                    cmp ecx, edx
:0041E160 7502                    jne 0041E164

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E14A(C)
|
:0041E162 EBA1                    jmp 0041E105

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E160(C)
|
:0041E164 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E167 E804E9FEFF              call 0040CA70
:0041E16C 25FFFF0000              and eax, 0000FFFF
:0041E171 8945F0                  mov dword ptr [ebp-10], eax
:0041E174 837DF002                cmp dword ptr [ebp-10], 00000002
:0041E178 7408                    je 0041E182
:0041E17A 837DF005                cmp dword ptr [ebp-10], 00000005
:0041E17E 7424                    je 0041E1A4
:0041E180 EB2C                    jmp 0041E1AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E178(C)
|
:0041E182 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E185 E887040000              call 0041E611
:0041E18A 25FFFF0000              and eax, 0000FFFF
:0041E18F 3DFFFF0000              cmp eax, 0000FFFF
:0041E194 750C                    jne 0041E1A2
:0041E196 8B45FC                  mov eax, dword ptr [ebp-04]
:0041E199 50                      push eax
:0041E19A E8B6FBFFFF              call 0041DD55
:0041E19F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E194(C)
|
:0041E1A2 EB16                    jmp 0041E1BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E17E(C)
|
:0041E1A4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E1A7 E8EB050000              call 0041E797
:0041E1AC EB0C                    jmp 0041E1BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E180(U)
|
:0041E1AE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E1B1 51                      push ecx
:0041E1B2 E89EFBFFFF              call 0041DD55
:0041E1B7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E1A2(U), :0041E1AC(U)
|
:0041E1BA E946FFFFFF              jmp 0041E105

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E129(C)
|
:0041E1BF 8BE5                    mov esp, ebp
:0041E1C1 5D                      pop ebp
:0041E1C2 C3                      ret



* Referenced by a CALL at Addresses:
|:0041E222   , :0041E2B4   
|
:0041E1C3 55                      push ebp
:0041E1C4 8BEC                    mov ebp, esp
:0041E1C6 83EC08                  sub esp, 00000008
:0041E1C9 6A00                    push 00000000
:0041E1CB E803C7FFFF              call 0041A8D3
:0041E1D0 83C404                  add esp, 00000004
:0041E1D3 8945FC                  mov dword ptr [ebp-04], eax
:0041E1D6 66C745F80000            mov [ebp-08], 0000
:0041E1DC EB15                    jmp 0041E1F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E213(U)
|
:0041E1DE 668B45F8                mov ax, word ptr [ebp-08]
:0041E1E2 66050100                add ax, 0001
:0041E1E6 668945F8                mov word ptr [ebp-08], ax
:0041E1EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E1ED 83C140                  add ecx, 00000040
:0041E1F0 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E1DC(U)
|
:0041E1F3 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E1F6 81E2FFFF0000            and edx, 0000FFFF
:0041E1FC 81FA80000000            cmp edx, 00000080
:0041E202 7D11                    jge 0041E215
:0041E204 6800200000              push 00002000
:0041E209 6A00                    push 00000000
:0041E20B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E20E E81D140000              call 0041F630
:0041E213 EBC9                    jmp 0041E1DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E202(C)
|
:0041E215 8BE5                    mov esp, ebp
:0041E217 5D                      pop ebp
:0041E218 C3                      ret



* Referenced by a CALL at Address:
|:0042F951   
|
:0041E219 55                      push ebp
:0041E21A 8BEC                    mov ebp, esp
:0041E21C 837D0800                cmp dword ptr [ebp+08], 00000000
:0041E220 7505                    jne 0041E227
:0041E222 E89CFFFFFF              call 0041E1C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E220(C)
|
:0041E227 E816FBFFFF              call 0041DD42
:0041E22C 5D                      pop ebp
:0041E22D C3                      ret



* Referenced by a CALL at Address:
|:0041EF58   
|
:0041E22E 55                      push ebp
:0041E22F 8BEC                    mov ebp, esp
:0041E231 83EC2C                  sub esp, 0000002C
:0041E234 56                      push esi
:0041E235 57                      push edi
:0041E236 E8EE920500              call 00477529
:0041E23B 50                      push eax
:0041E23C E85FA10500              call 004783A0
:0041E241 83C404                  add esp, 00000004
:0041E244 A1ECC94700              mov eax, dword ptr [0047C9EC]
:0041E249 A3B8454900              mov dword ptr [004945B8], eax
:0041E24E 8B0DECC94700            mov ecx, dword ptr [0047C9EC]
:0041E254 890DBC454900            mov dword ptr [004945BC], ecx
:0041E25A E8D5E3FFFF              call 0041C634
:0041E25F 25FFFF0000              and eax, 0000FFFF
:0041E264 3DFFFF0000              cmp eax, 0000FFFF
:0041E269 7409                    je 0041E274
:0041E26B E8ED160100              call 0042F95D
:0041E270 85C0                    test eax, eax
:0041E272 751B                    jne 0041E28F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E269(C)
|
:0041E274 8B15ECC94700            mov edx, dword ptr [0047C9EC]
:0041E27A 8915BC454900            mov dword ptr [004945BC], edx
:0041E280 B950544B00              mov ecx, 004B5450
:0041E285 E8D0950400              call 0046785A
:0041E28A E9DF020000              jmp 0041E56E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E272(C)
|
:0041E28F 66C7052CB54800FFFF      mov word ptr [0048B52C], FFFF
:0041E298 B928B44800              mov ecx, 0048B428
:0041E29D E8C4B5FFFF              call 00419866
:0041E2A2 668945DC                mov word ptr [ebp-24], ax
:0041E2A6 B928B44800              mov ecx, 0048B428
:0041E2AB E8C7B5FFFF              call 00419877
:0041E2B0 668945D4                mov word ptr [ebp-2C], ax
:0041E2B4 E80AFFFFFF              call 0041E1C3
:0041E2B9 33C0                    xor eax, eax
:0041E2BB 66A124B54800            mov ax, word ptr [0048B524]
:0041E2C1 85C0                    test eax, eax
:0041E2C3 0F8EBE010000            jle 0041E487
:0041E2C9 668B0D24B54800          mov cx, word ptr [0048B524]
:0041E2D0 66894DF0                mov word ptr [ebp-10], cx
:0041E2D4 EB15                    jmp 0041E2EB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E338(U), :0041E36A(U), :0041E482(U)
|
:0041E2D6 668B55F0                mov dx, word ptr [ebp-10]
:0041E2DA 6683EA01                sub dx, 0001
:0041E2DE 668955F0                mov word ptr [ebp-10], dx
:0041E2E2 8B45F8                  mov eax, dword ptr [ebp-08]
:0041E2E5 83E840                  sub eax, 00000040
:0041E2E8 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E2D4(U)
|
:0041E2EB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041E2EE 81E1FFFF0000            and ecx, 0000FFFF
:0041E2F4 85C9                    test ecx, ecx
:0041E2F6 0F848B010000            je 0041E487
:0041E2FC 8B55F0                  mov edx, dword ptr [ebp-10]
:0041E2FF 81E2FFFF0000            and edx, 0000FFFF
:0041E305 8B04956C244900          mov eax, dword ptr [4*edx+0049246C]
:0041E30C 8945F8                  mov dword ptr [ebp-08], eax
:0041E30F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E312 E839E7FEFF              call 0040CA50
:0041E317 668945E8                mov word ptr [ebp-18], ax
:0041E31B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E31E E88D110000              call 0041F4B0
:0041E323 50                      push eax
:0041E324 E88CC3FFFF              call 0041A6B5
:0041E329 83C404                  add esp, 00000004
:0041E32C 25FFFF0000              and eax, 0000FFFF
:0041E331 3D00300000              cmp eax, 00003000
:0041E336 7502                    jne 0041E33A
:0041E338 EB9C                    jmp 0041E2D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E336(C)
|
:0041E33A 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0041E33D 51                      push ecx
:0041E33E 8D55D8                  lea edx, dword ptr [ebp-28]
:0041E341 52                      push edx
:0041E342 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E345 E886130000              call 0041F6D0
:0041E34A 8B45D8                  mov eax, dword ptr [ebp-28]
:0041E34D 25FFFF0000              and eax, 0000FFFF
:0041E352 3DFFFF0000              cmp eax, 0000FFFF
:0041E357 7516                    jne 0041E36F
:0041E359 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041E35C 81E1FFFF0000            and ecx, 0000FFFF
:0041E362 81F9FFFF0000            cmp ecx, 0000FFFF
:0041E368 7505                    jne 0041E36F
:0041E36A E967FFFFFF              jmp 0041E2D6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E357(C), :0041E368(C)
|
:0041E36F 66C745EC3000            mov [ebp-14], 0030
:0041E375 66C745E44000            mov [ebp-1C], 0040
:0041E37B 0FBF55DC                movsx edx, word ptr [ebp-24]
:0041E37F 0FBF45D8                movsx eax, word ptr [ebp-28]
:0041E383 3BD0                    cmp edx, eax
:0041E385 0F8CF7000000            jl 0041E482
:0041E38B 0FBF4DDC                movsx ecx, word ptr [ebp-24]
:0041E38F 8B55D8                  mov edx, dword ptr [ebp-28]
:0041E392 81E2FFFF0000            and edx, 0000FFFF
:0041E398 8B45EC                  mov eax, dword ptr [ebp-14]
:0041E39B 25FFFF0000              and eax, 0000FFFF
:0041E3A0 03D0                    add edx, eax
:0041E3A2 0FBFD2                  movsx edx, dx
:0041E3A5 3BCA                    cmp ecx, edx
:0041E3A7 0F8FD5000000            jg 0041E482
:0041E3AD 0FBF45D4                movsx eax, word ptr [ebp-2C]
:0041E3B1 0FBF4DF4                movsx ecx, word ptr [ebp-0C]
:0041E3B5 3BC1                    cmp eax, ecx
:0041E3B7 0F8CC5000000            jl 0041E482
:0041E3BD 0FBF55D4                movsx edx, word ptr [ebp-2C]
:0041E3C1 0FBF45F4                movsx eax, word ptr [ebp-0C]
:0041E3C5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0041E3C8 81E1FFFF0000            and ecx, 0000FFFF
:0041E3CE 03C1                    add eax, ecx
:0041E3D0 3BD0                    cmp edx, eax
:0041E3D2 0F8FAA000000            jg 0041E482
:0041E3D8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E3DB E8D0100000              call 0041F4B0
:0041E3E0 668945E0                mov word ptr [ebp-20], ax
:0041E3E4 668B55E0                mov dx, word ptr [ebp-20]
:0041E3E8 52                      push edx
:0041E3E9 E88DEEFFFF              call 0041D27B
:0041E3EE 83C404                  add esp, 00000004
:0041E3F1 668945E4                mov word ptr [ebp-1C], ax
:0041E3F5 8B45E4                  mov eax, dword ptr [ebp-1C]
:0041E3F8 25FFFF0000              and eax, 0000FFFF
:0041E3FD 3DFFFF0000              cmp eax, 0000FFFF
:0041E402 7505                    jne 0041E409
:0041E404 E965010000              jmp 0041E56E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E402(C)
|
:0041E409 668B4DE0                mov cx, word ptr [ebp-20]
:0041E40D 51                      push ecx
:0041E40E E82AC3FFFF              call 0041A73D
:0041E413 83C404                  add esp, 00000004
:0041E416 A3B8454900              mov dword ptr [004945B8], eax
:0041E41B 668B55E0                mov dx, word ptr [ebp-20]
:0041E41F 52                      push edx
:0041E420 E818C3FFFF              call 0041A73D
:0041E425 83C404                  add esp, 00000004
:0041E428 A3BC454900              mov dword ptr [004945BC], eax
:0041E42D 668B45E0                mov ax, word ptr [ebp-20]
:0041E431 50                      push eax
:0041E432 E890C2FFFF              call 0041A6C7
:0041E437 83C404                  add esp, 00000004
:0041E43A 25FFFF0000              and eax, 0000FFFF
:0041E43F 50                      push eax
:0041E440 E831C2FFFF              call 0041A676
:0041E445 83C404                  add esp, 00000004
:0041E448 85C0                    test eax, eax
:0041E44A 7405                    je 0041E451
:0041E44C E91D010000              jmp 0041E56E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E44A(C)
|
:0041E451 668B4DE4                mov cx, word ptr [ebp-1C]
:0041E455 66890D2CB54800          mov word ptr [0048B52C], cx
:0041E45C 6800200000              push 00002000
:0041E461 6800200000              push 00002000
:0041E466 668B152CB54800          mov dx, word ptr [0048B52C]
:0041E46D 52                      push edx
:0041E46E E860C4FFFF              call 0041A8D3
:0041E473 83C404                  add esp, 00000004
:0041E476 8BC8                    mov ecx, eax
:0041E478 E8B3110000              call 0041F630
:0041E47D E9EC000000              jmp 0041E56E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E385(C), :0041E3A7(C), :0041E3B7(C), :0041E3D2(C)
|
:0041E482 E94FFEFFFF              jmp 0041E2D6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E2C3(C), :0041E2F6(C)
|
:0041E487 C745FCA0034900          mov [ebp-04], 004903A0
:0041E48E 66C745F00000            mov [ebp-10], 0000
:0041E494 EB15                    jmp 0041E4AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E533(U)
|
:0041E496 668B45F0                mov ax, word ptr [ebp-10]
:0041E49A 66050100                add ax, 0001
:0041E49E 668945F0                mov word ptr [ebp-10], ax
:0041E4A2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E4A5 83C10E                  add ecx, 0000000E
:0041E4A8 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E494(U)
|
:0041E4AB 8B55F0                  mov edx, dword ptr [ebp-10]
:0041E4AE 81E2FFFF0000            and edx, 0000FFFF
:0041E4B4 83FA04                  cmp edx, 00000004
:0041E4B7 7D7F                    jge 0041E538
:0041E4B9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E4BC E8EF130000              call 0041F8B0
:0041E4C1 25FFFF0000              and eax, 0000FFFF
:0041E4C6 2500800000              and eax, 00008000
:0041E4CB 85C0                    test eax, eax
:0041E4CD 7464                    je 0041E533
:0041E4CF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E4D2 E8F9100000              call 0041F5D0
:0041E4D7 668945D8                mov word ptr [ebp-28], ax
:0041E4DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E4DE E82D110000              call 0041F610
:0041E4E3 668945F4                mov word ptr [ebp-0C], ax
:0041E4E7 0FBF45DC                movsx eax, word ptr [ebp-24]
:0041E4EB 0FBF4DD8                movsx ecx, word ptr [ebp-28]
:0041E4EF 3BC1                    cmp eax, ecx
:0041E4F1 7C40                    jl 0041E533
:0041E4F3 0FBF75DC                movsx esi, word ptr [ebp-24]
:0041E4F7 0FBF7DD8                movsx edi, word ptr [ebp-28]
:0041E4FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E4FE E8ED0F0000              call 0041F4F0
:0041E503 0FBFD0                  movsx edx, ax
:0041E506 03FA                    add edi, edx
:0041E508 3BF7                    cmp esi, edi
:0041E50A 7D27                    jge 0041E533
:0041E50C 0FBF45D4                movsx eax, word ptr [ebp-2C]
:0041E510 0FBF4DF4                movsx ecx, word ptr [ebp-0C]
:0041E514 3BC1                    cmp eax, ecx
:0041E516 7C1B                    jl 0041E533
:0041E518 0FBF75D4                movsx esi, word ptr [ebp-2C]
:0041E51C 0FBF7DF4                movsx edi, word ptr [ebp-0C]
:0041E520 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E523 E808130000              call 0041F830
:0041E528 0FBFD0                  movsx edx, ax
:0041E52B 03FA                    add edi, edx
:0041E52D 3BF7                    cmp esi, edi
:0041E52F 7D02                    jge 0041E533
:0041E531 EB05                    jmp 0041E538

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E4CD(C), :0041E4F1(C), :0041E50A(C), :0041E516(C), :0041E52F(C)
|
:0041E533 E95EFFFFFF              jmp 0041E496

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E4B7(C), :0041E531(U)
|
:0041E538 8B45F0                  mov eax, dword ptr [ebp-10]
:0041E53B 25FFFF0000              and eax, 0000FFFF
:0041E540 83F804                  cmp eax, 00000004
:0041E543 7429                    je 0041E56E
:0041E545 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0041E548 81E1FFFF0000            and ecx, 0000FFFF
:0041E54E 80CD80                  or ch, 80
:0041E551 66890D2CB54800          mov word ptr [0048B52C], cx

* Possible StringData Ref from Data Obj ->"Xf"
                                  |
:0041E558 8B15E8C94700            mov edx, dword ptr [0047C9E8]
:0041E55E 8915B8454900            mov dword ptr [004945B8], edx

* Possible StringData Ref from Data Obj ->"Xf"
                                  |
:0041E564 A1E8C94700              mov eax, dword ptr [0047C9E8]
:0041E569 A3BC454900              mov dword ptr [004945BC], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E28A(U), :0041E404(U), :0041E44C(U), :0041E47D(U), :0041E543(C)
|
:0041E56E 5F                      pop edi
:0041E56F 5E                      pop esi
:0041E570 8BE5                    mov esp, ebp
:0041E572 5D                      pop ebp
:0041E573 C3                      ret



* Referenced by a CALL at Address:
|:0041B8D9   
|
:0041E574 55                      push ebp
:0041E575 8BEC                    mov ebp, esp
:0041E577 83EC08                  sub esp, 00000008
:0041E57A 894DF8                  mov dword ptr [ebp-08], ecx
:0041E57D 668B450C                mov ax, word ptr [ebp+0C]
:0041E581 662D4000                sub ax, 0040
:0041E585 6689450C                mov word ptr [ebp+0C], ax
:0041E589 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E58C E8EF120000              call 0041F880
:0041E591 668B4D0C                mov cx, word ptr [ebp+0C]
:0041E595 51                      push ecx
:0041E596 668B5508                mov dx, word ptr [ebp+08]
:0041E59A 52                      push edx
:0041E59B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E59E E8FD100000              call 0041F6A0
:0041E5A3 8B4508                  mov eax, dword ptr [ebp+08]
:0041E5A6 25FFFF0000              and eax, 0000FFFF
:0041E5AB 8945FC                  mov dword ptr [ebp-04], eax
:0041E5AE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041E5B1 81E1FFFF0000            and ecx, 0000FFFF
:0041E5B7 81E100800000            and ecx, 00008000
:0041E5BD 85C9                    test ecx, ecx
:0041E5BF 7412                    je 0041E5D3
:0041E5C1 8B5508                  mov edx, dword ptr [ebp+08]
:0041E5C4 81E2FFFF0000            and edx, 0000FFFF
:0041E5CA 81EAFFFF0000            sub edx, 0000FFFF
:0041E5D0 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E5BF(C)
|
:0041E5D3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E5D6 E875120000              call 0041F850
:0041E5DB 50                      push eax
:0041E5DC 6A40                    push 00000040
:0041E5DE 6A30                    push 00000030
:0041E5E0 8B450C                  mov eax, dword ptr [ebp+0C]
:0041E5E3 25FFFF0000              and eax, 0000FFFF
:0041E5E8 50                      push eax
:0041E5E9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E5EC 51                      push ecx
:0041E5ED E802850500              call 00476AF4
:0041E5F2 83C414                  add esp, 00000014
:0041E5F5 6A40                    push 00000040
:0041E5F7 6A30                    push 00000030
:0041E5F9 668B550C                mov dx, word ptr [ebp+0C]
:0041E5FD 52                      push edx
:0041E5FE 668B4508                mov ax, word ptr [ebp+08]
:0041E602 50                      push eax
:0041E603 E82ED0FFFF              call 0041B636
:0041E608 83C410                  add esp, 00000010
:0041E60B 8BE5                    mov esp, ebp
:0041E60D 5D                      pop ebp
:0041E60E C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0041DE5D   , :0041DE9D   , :0041E06C   , :0041E08E   , :0041E185   
|
:0041E611 55                      push ebp
:0041E612 8BEC                    mov ebp, esp
:0041E614 83EC28                  sub esp, 00000028
:0041E617 894DDC                  mov dword ptr [ebp-24], ecx
:0041E61A 8B45DC                  mov eax, dword ptr [ebp-24]
:0041E61D 33C9                    xor ecx, ecx
:0041E61F 668B08                  mov cx, word ptr [eax]
:0041E622 8B55DC                  mov edx, dword ptr [ebp-24]
:0041E625 33C0                    xor eax, eax
:0041E627 668B4202                mov ax, word ptr [edx+02]
:0041E62B 3BC8                    cmp ecx, eax
:0041E62D 7E17                    jle 0041E646
:0041E62F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041E632 668B5102                mov dx, word ptr [ecx+02]
:0041E636 6683C201                add dx, 0001
:0041E63A 8B45DC                  mov eax, dword ptr [ebp-24]
:0041E63D 66895002                mov word ptr [eax+02], dx
:0041E641 E913010000              jmp 0041E759

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E62D(C)
|
:0041E646 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041E649 66C741020000            mov [ecx+02], 0000
:0041E64F 66C745F40000            mov [ebp-0C], 0000
:0041E655 8B55DC                  mov edx, dword ptr [ebp-24]
:0041E658 33C0                    xor eax, eax
:0041E65A 668B423C                mov ax, word ptr [edx+3C]
:0041E65E 3DFFFF0000              cmp eax, 0000FFFF
:0041E663 7509                    jne 0041E66E
:0041E665 660DFFFF                or ax, FFFF
:0041E669 E9EE000000              jmp 0041E75C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E663(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041E66E 6A04                    push 00000004
:0041E670 6A00                    push 00000000
:0041E672 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041E675 33D2                    xor edx, edx
:0041E677 668B513E                mov dx, word ptr [ecx+3E]
:0041E67B 52                      push edx
:0041E67C B9F0174B00              mov ecx, 004B17F0
:0041E681 E80AA90500              call 00478F90
:0041E686 8945FC                  mov dword ptr [ebp-04], eax
:0041E689 8B45FC                  mov eax, dword ptr [ebp-04]
:0041E68C 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E754(U)
|
:0041E68F 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0041E692 51                      push ecx
:0041E693 8B55FC                  mov edx, dword ptr [ebp-04]
:0041E696 52                      push edx
:0041E697 E801D6FFFF              call 0041BC9D
:0041E69C 83C408                  add esp, 00000008
:0041E69F 8845E8                  mov byte ptr [ebp-18], al
:0041E6A2 8B45E8                  mov eax, dword ptr [ebp-18]
:0041E6A5 25FF000000              and eax, 000000FF
:0041E6AA 3DEF000000              cmp eax, 000000EF
:0041E6AF 7509                    jne 0041E6BA
:0041E6B1 660DFFFF                or ax, FFFF
:0041E6B5 E9A2000000              jmp 0041E75C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E6AF(C)
|
:0041E6BA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041E6BD 81E1FFFF0000            and ecx, 0000FFFF
:0041E6C3 83F901                  cmp ecx, 00000001
:0041E6C6 7505                    jne 0041E6CD
:0041E6C8 E98C000000              jmp 0041E759

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E6C6(C)
|
:0041E6CD 8B55FC                  mov edx, dword ptr [ebp-04]
:0041E6D0 8955F0                  mov dword ptr [ebp-10], edx
:0041E6D3 8B45F0                  mov eax, dword ptr [ebp-10]
:0041E6D6 83C001                  add eax, 00000001
:0041E6D9 8945F0                  mov dword ptr [ebp-10], eax
:0041E6DC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041E6DF 81E1FF000000            and ecx, 000000FF
:0041E6E5 81E1F0000000            and ecx, 000000F0
:0041E6EB 884DE0                  mov byte ptr [ebp-20], cl
:0041E6EE 8B55E8                  mov edx, dword ptr [ebp-18]
:0041E6F1 81E2FF000000            and edx, 000000FF
:0041E6F7 80E20F                  and dl, 0F
:0041E6FA 8855E4                  mov byte ptr [ebp-1C], dl
:0041E6FD 66C745F40100            mov [ebp-0C], 0001
:0041E703 8A45E0                  mov al, byte ptr [ebp-20]
:0041E706 8845D8                  mov byte ptr [ebp-28], al
:0041E709 807DD800                cmp byte ptr [ebp-28], 00
:0041E70D 7408                    je 0041E717
:0041E70F 807DD810                cmp byte ptr [ebp-28], 10
:0041E713 7412                    je 0041E727
:0041E715 EB1C                    jmp 0041E733

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E70D(C)
|
:0041E717 660FB64DE4              movzx cx, byte ptr [ebp-1C]
:0041E71C 51                      push ecx
:0041E71D 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041E720 E897010000              call 0041E8BC
:0041E725 EB0C                    jmp 0041E733

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E713(C)
|
:0041E727 660FB655E4              movzx dx, byte ptr [ebp-1C]
:0041E72C 8B45DC                  mov eax, dword ptr [ebp-24]
:0041E72F 6689502E                mov word ptr [eax+2E], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E715(U), :0041E725(U)
|
:0041E733 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E736 51                      push ecx
:0041E737 E88BD5FFFF              call 0041BCC7
:0041E73C 83C404                  add esp, 00000004
:0041E73F 8945FC                  mov dword ptr [ebp-04], eax
:0041E742 8B55DC                  mov edx, dword ptr [ebp-24]
:0041E745 668B423E                mov ax, word ptr [edx+3E]
:0041E749 660345F8                add ax, word ptr [ebp-08]
:0041E74D 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041E750 6689413E                mov word ptr [ecx+3E], ax
:0041E754 E936FFFFFF              jmp 0041E68F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E641(U), :0041E6C8(U)
|
:0041E759 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E669(U), :0041E6B5(U)
|
:0041E75C 8BE5                    mov esp, ebp
:0041E75E 5D                      pop ebp
:0041E75F C3                      ret



* Referenced by a CALL at Addresses:
|:0041C7AB   , :0041CD5C   , :0041D505   , :0041D6DE   , :0041DC6D   
|
:0041E760 55                      push ebp
:0041E761 8BEC                    mov ebp, esp
:0041E763 83EC08                  sub esp, 00000008
:0041E766 894DF8                  mov dword ptr [ebp-08], ecx
:0041E769 668B4508                mov ax, word ptr [ebp+08]
:0041E76D 50                      push eax
:0041E76E E8EEBEFFFF              call 0041A661
:0041E773 83C404                  add esp, 00000004
:0041E776 8945FC                  mov dword ptr [ebp-04], eax
:0041E779 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E77C 8B55FC                  mov edx, dword ptr [ebp-04]
:0041E77F 895134                  mov dword ptr [ecx+34], edx
:0041E782 8B45FC                  mov eax, dword ptr [ebp-04]
:0041E785 660FB64801              movzx cx, byte ptr [eax+01]
:0041E78A 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E78D 66894A2A                mov word ptr [edx+2A], cx
:0041E791 8BE5                    mov esp, ebp
:0041E793 5D                      pop ebp
:0041E794 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0041E1A7   
|
:0041E797 55                      push ebp
:0041E798 8BEC                    mov ebp, esp
:0041E79A 83EC10                  sub esp, 00000010
:0041E79D 894DF8                  mov dword ptr [ebp-08], ecx
:0041E7A0 8B45F8                  mov eax, dword ptr [ebp-08]
:0041E7A3 33C9                    xor ecx, ecx
:0041E7A5 668B08                  mov cx, word ptr [eax]
:0041E7A8 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E7AB 33C0                    xor eax, eax
:0041E7AD 668B4202                mov ax, word ptr [edx+02]
:0041E7B1 3BC8                    cmp ecx, eax
:0041E7B3 7E1A                    jle 0041E7CF
:0041E7B5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E7B8 668B5102                mov dx, word ptr [ecx+02]
:0041E7BC 6683C201                add dx, 0001
:0041E7C0 8B45F8                  mov eax, dword ptr [ebp-08]
:0041E7C3 66895002                mov word ptr [eax+02], dx
:0041E7C7 6633C0                  xor ax, ax
:0041E7CA E9E9000000              jmp 0041E8B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E7B3(C)
|
:0041E7CF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E7D2 66C741020000            mov [ecx+02], 0000
:0041E7D8 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E7DB 668B4216                mov ax, word ptr [edx+16]
:0041E7DF 66050100                add ax, 0001
:0041E7E3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E7E6 66894116                mov word ptr [ecx+16], ax
:0041E7EA 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E7ED 33C0                    xor eax, eax
:0041E7EF 668B4218                mov ax, word ptr [edx+18]
:0041E7F3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E7F6 33D2                    xor edx, edx
:0041E7F8 668B5116                mov dx, word ptr [ecx+16]
:0041E7FC 3BC2                    cmp eax, edx
:0041E7FE 7E08                    jle 0041E808
:0041E800 6633C0                  xor ax, ax
:0041E803 E9B0000000              jmp 0041E8B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E7FE(C)
|
:0041E808 8B45F8                  mov eax, dword ptr [ebp-08]
:0041E80B 66C740160000            mov [eax+16], 0000
:0041E811 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E814 66C741180200            mov [ecx+18], 0002
:0041E81A 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E81D 33C0                    xor eax, eax
:0041E81F 668B422C                mov ax, word ptr [edx+2C]
:0041E823 85C0                    test eax, eax
:0041E825 755C                    jne 0041E883
:0041E827 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E82A 33D2                    xor edx, edx
:0041E82C 668B512E                mov dx, word ptr [ecx+2E]
:0041E830 8955F4                  mov dword ptr [ebp-0C], edx
:0041E833 837DF400                cmp dword ptr [ebp-0C], 00000000
:0041E837 740E                    je 0041E847
:0041E839 837DF401                cmp dword ptr [ebp-0C], 00000001
:0041E83D 7413                    je 0041E852
:0041E83F 837DF402                cmp dword ptr [ebp-0C], 00000002
:0041E843 7418                    je 0041E85D
:0041E845 EB21                    jmp 0041E868

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E837(C)
|
:0041E847 8B45F8                  mov eax, dword ptr [ebp-08]
:0041E84A 66C7401C0200            mov [eax+1C], 0002
:0041E850 EB1F                    jmp 0041E871

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E83D(C)
|
:0041E852 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E855 66C7411C0300            mov [ecx+1C], 0003
:0041E85B EB14                    jmp 0041E871

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E843(C)
|
:0041E85D 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E860 66C7421C0000            mov [edx+1C], 0000
:0041E866 EB09                    jmp 0041E871

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E845(U)
|
:0041E868 8B45F8                  mov eax, dword ptr [ebp-08]
:0041E86B 66C7401C0100            mov [eax+1C], 0001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E850(U), :0041E85B(U), :0041E866(U)
|
:0041E871 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E874 668B511C                mov dx, word ptr [ecx+1C]
:0041E878 52                      push edx
:0041E879 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E87C E83B000000              call 0041E8BC
:0041E881 EB32                    jmp 0041E8B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E825(C)
|
:0041E883 6A0D                    push 0000000D
:0041E885 E8269B0500              call 004783B0
:0041E88A 83C404                  add esp, 00000004
:0041E88D 8845FC                  mov byte ptr [ebp-04], al
:0041E890 8B45FC                  mov eax, dword ptr [ebp-04]
:0041E893 25FF000000              and eax, 000000FF
:0041E898 83F808                  cmp eax, 00000008
:0041E89B 7D06                    jge 0041E8A3
:0041E89D C645F303                mov [ebp-0D], 03
:0041E8A1 EB06                    jmp 0041E8A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E89B(C)
|
:0041E8A3 8A4DFC                  mov cl, byte ptr [ebp-04]
:0041E8A6 884DF3                  mov byte ptr [ebp-0D], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E8A1(U)
|
:0041E8A9 660FB655F3              movzx dx, byte ptr [ebp-0D]
:0041E8AE 8B45F8                  mov eax, dword ptr [ebp-08]
:0041E8B1 6689502A                mov word ptr [eax+2A], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E881(U)
|
:0041E8B5 6633C0                  xor ax, ax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041E7CA(U), :0041E803(U)
|
:0041E8B8 8BE5                    mov esp, ebp
:0041E8BA 5D                      pop ebp
:0041E8BB C3                      ret



* Referenced by a CALL at Addresses:
|:0041E720   , :0041E87C   
|
:0041E8BC 55                      push ebp
:0041E8BD 8BEC                    mov ebp, esp
:0041E8BF 83EC0C                  sub esp, 0000000C
:0041E8C2 894DF4                  mov dword ptr [ebp-0C], ecx
:0041E8C5 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041E8C8 668B481A                mov cx, word ptr [eax+1A]
:0041E8CC 6683C101                add cx, 0001
:0041E8D0 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041E8D3 66894A1A                mov word ptr [edx+1A], cx
:0041E8D7 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041E8DA 8B4834                  mov ecx, dword ptr [eax+34]
:0041E8DD 33D2                    xor edx, edx
:0041E8DF 8A11                    mov dl, byte ptr [ecx]
:0041E8E1 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041E8E4 33C9                    xor ecx, ecx
:0041E8E6 668B481A                mov cx, word ptr [eax+1A]
:0041E8EA 3BD1                    cmp edx, ecx
:0041E8EC 7F09                    jg 0041E8F7
:0041E8EE 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041E8F1 66C7421A0000            mov [edx+1A], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E8EC(C)
|
:0041E8F7 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041E8FA 8B4834                  mov ecx, dword ptr [eax+34]
:0041E8FD 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041E900 33C0                    xor eax, eax
:0041E902 668B421A                mov ax, word ptr [edx+1A]
:0041E906 660FB64C0101            movzx cx, byte ptr [ecx+eax+01]
:0041E90C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041E90F 66894A2A                mov word ptr [edx+2A], cx
:0041E913 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041E916 668B4804                mov cx, word ptr [eax+04]
:0041E91A 66894DFC                mov word ptr [ebp-04], cx
:0041E91E 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041E921 668B4206                mov ax, word ptr [edx+06]
:0041E925 668945F8                mov word ptr [ebp-08], ax
:0041E929 668B4D08                mov cx, word ptr [ebp+08]
:0041E92D 51                      push ecx
:0041E92E 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041E931 668B420C                mov ax, word ptr [edx+0C]
:0041E935 50                      push eax
:0041E936 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041E939 668B510A                mov dx, word ptr [ecx+0A]
:0041E93D 52                      push edx
:0041E93E 8D45F8                  lea eax, dword ptr [ebp-08]
:0041E941 50                      push eax
:0041E942 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0041E945 51                      push ecx
:0041E946 E858D7FFFF              call 0041C0A3
:0041E94B 83C414                  add esp, 00000014
:0041E94E 25FFFF0000              and eax, 0000FFFF
:0041E953 3DFFFF0000              cmp eax, 0000FFFF
:0041E958 7428                    je 0041E982
:0041E95A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041E95D 668B45FC                mov ax, word ptr [ebp-04]
:0041E961 66894204                mov word ptr [edx+04], ax
:0041E965 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041E968 668B55F8                mov dx, word ptr [ebp-08]
:0041E96C 66895106                mov word ptr [ecx+06], dx
:0041E970 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041E973 668B4D08                mov cx, word ptr [ebp+08]
:0041E977 6689482E                mov word ptr [eax+2E], cx
:0041E97B B801000000              mov eax, 00000001
:0041E980 EB02                    jmp 0041E984

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E958(C)
|
:0041E982 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041E980(U)
|
:0041E984 8BE5                    mov esp, ebp
:0041E986 5D                      pop ebp
:0041E987 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040E73F   , :0041ED60   
|
:0041E98A 55                      push ebp
:0041E98B 8BEC                    mov ebp, esp
:0041E98D 83EC08                  sub esp, 00000008
:0041E990 894DF8                  mov dword ptr [ebp-08], ecx
:0041E993 8B4508                  mov eax, dword ptr [ebp+08]
:0041E996 8945FC                  mov dword ptr [ebp-04], eax
:0041E999 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E99C 8B55FC                  mov edx, dword ptr [ebp-04]
:0041E99F 668B02                  mov ax, word ptr [edx]
:0041E9A2 668901                  mov word ptr [ecx], ax
:0041E9A5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E9A8 83C102                  add ecx, 00000002
:0041E9AB 894DFC                  mov dword ptr [ebp-04], ecx
:0041E9AE 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E9B1 8B45FC                  mov eax, dword ptr [ebp-04]
:0041E9B4 668B08                  mov cx, word ptr [eax]
:0041E9B7 66894A02                mov word ptr [edx+02], cx
:0041E9BB 8B55FC                  mov edx, dword ptr [ebp-04]
:0041E9BE 83C202                  add edx, 00000002
:0041E9C1 8955FC                  mov dword ptr [ebp-04], edx
:0041E9C4 8B45F8                  mov eax, dword ptr [ebp-08]
:0041E9C7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E9CA 668B11                  mov dx, word ptr [ecx]
:0041E9CD 66895004                mov word ptr [eax+04], dx
:0041E9D1 8B45FC                  mov eax, dword ptr [ebp-04]
:0041E9D4 83C002                  add eax, 00000002
:0041E9D7 8945FC                  mov dword ptr [ebp-04], eax
:0041E9DA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041E9DD 8B55FC                  mov edx, dword ptr [ebp-04]
:0041E9E0 668B02                  mov ax, word ptr [edx]
:0041E9E3 66894106                mov word ptr [ecx+06], ax
:0041E9E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041E9EA 83C102                  add ecx, 00000002
:0041E9ED 894DFC                  mov dword ptr [ebp-04], ecx
:0041E9F0 8B55F8                  mov edx, dword ptr [ebp-08]
:0041E9F3 8B45FC                  mov eax, dword ptr [ebp-04]
:0041E9F6 668B08                  mov cx, word ptr [eax]
:0041E9F9 66894A08                mov word ptr [edx+08], cx
:0041E9FD 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EA00 83C202                  add edx, 00000002
:0041EA03 8955FC                  mov dword ptr [ebp-04], edx
:0041EA06 8B45F8                  mov eax, dword ptr [ebp-08]
:0041EA09 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EA0C 668B11                  mov dx, word ptr [ecx]
:0041EA0F 6689500A                mov word ptr [eax+0A], dx
:0041EA13 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EA16 83C002                  add eax, 00000002
:0041EA19 8945FC                  mov dword ptr [ebp-04], eax
:0041EA1C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EA1F 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EA22 668B02                  mov ax, word ptr [edx]
:0041EA25 6689410C                mov word ptr [ecx+0C], ax
:0041EA29 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EA2C 83C102                  add ecx, 00000002
:0041EA2F 894DFC                  mov dword ptr [ebp-04], ecx
:0041EA32 8B55F8                  mov edx, dword ptr [ebp-08]
:0041EA35 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EA38 668B08                  mov cx, word ptr [eax]
:0041EA3B 66894A0E                mov word ptr [edx+0E], cx
:0041EA3F 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EA42 83C202                  add edx, 00000002
:0041EA45 8955FC                  mov dword ptr [ebp-04], edx
:0041EA48 8B45F8                  mov eax, dword ptr [ebp-08]
:0041EA4B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EA4E 668B11                  mov dx, word ptr [ecx]
:0041EA51 66895016                mov word ptr [eax+16], dx
:0041EA55 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EA58 83C002                  add eax, 00000002
:0041EA5B 8945FC                  mov dword ptr [ebp-04], eax
:0041EA5E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EA61 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EA64 668B02                  mov ax, word ptr [edx]
:0041EA67 66894118                mov word ptr [ecx+18], ax
:0041EA6B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EA6E 83C102                  add ecx, 00000002
:0041EA71 894DFC                  mov dword ptr [ebp-04], ecx
:0041EA74 8B55F8                  mov edx, dword ptr [ebp-08]
:0041EA77 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EA7A 668B08                  mov cx, word ptr [eax]
:0041EA7D 66894A1A                mov word ptr [edx+1A], cx
:0041EA81 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EA84 83C202                  add edx, 00000002
:0041EA87 8955FC                  mov dword ptr [ebp-04], edx
:0041EA8A 8B45F8                  mov eax, dword ptr [ebp-08]
:0041EA8D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EA90 668B11                  mov dx, word ptr [ecx]
:0041EA93 6689501C                mov word ptr [eax+1C], dx
:0041EA97 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EA9A 83C002                  add eax, 00000002
:0041EA9D 8945FC                  mov dword ptr [ebp-04], eax
:0041EAA0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EAA3 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EAA6 668B02                  mov ax, word ptr [edx]
:0041EAA9 66894128                mov word ptr [ecx+28], ax
:0041EAAD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EAB0 83C102                  add ecx, 00000002
:0041EAB3 894DFC                  mov dword ptr [ebp-04], ecx
:0041EAB6 8B55F8                  mov edx, dword ptr [ebp-08]
:0041EAB9 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EABC 668B08                  mov cx, word ptr [eax]
:0041EABF 66894A2C                mov word ptr [edx+2C], cx
:0041EAC3 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EAC6 83C202                  add edx, 00000002
:0041EAC9 8955FC                  mov dword ptr [ebp-04], edx
:0041EACC 8B45F8                  mov eax, dword ptr [ebp-08]
:0041EACF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EAD2 668B11                  mov dx, word ptr [ecx]
:0041EAD5 6689502E                mov word ptr [eax+2E], dx
:0041EAD9 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EADC 83C002                  add eax, 00000002
:0041EADF 8945FC                  mov dword ptr [ebp-04], eax
:0041EAE2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EAE5 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EAE8 668B02                  mov ax, word ptr [edx]
:0041EAEB 66894130                mov word ptr [ecx+30], ax
:0041EAEF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EAF2 83C102                  add ecx, 00000002
:0041EAF5 894DFC                  mov dword ptr [ebp-04], ecx
:0041EAF8 8B55F8                  mov edx, dword ptr [ebp-08]
:0041EAFB 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EAFE 668B08                  mov cx, word ptr [eax]
:0041EB01 66894A38                mov word ptr [edx+38], cx
:0041EB05 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EB08 83C202                  add edx, 00000002
:0041EB0B 8955FC                  mov dword ptr [ebp-04], edx
:0041EB0E 8B45F8                  mov eax, dword ptr [ebp-08]
:0041EB11 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EB14 668B11                  mov dx, word ptr [ecx]
:0041EB17 6689503A                mov word ptr [eax+3A], dx
:0041EB1B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EB1E 83C002                  add eax, 00000002
:0041EB21 8945FC                  mov dword ptr [ebp-04], eax
:0041EB24 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EB27 8BE5                    mov esp, ebp
:0041EB29 5D                      pop ebp
:0041EB2A C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040EE31   
|
:0041EB2D 55                      push ebp
:0041EB2E 8BEC                    mov ebp, esp
:0041EB30 83EC08                  sub esp, 00000008
:0041EB33 894DF8                  mov dword ptr [ebp-08], ecx
:0041EB36 8B4508                  mov eax, dword ptr [ebp+08]
:0041EB39 8945FC                  mov dword ptr [ebp-04], eax
:0041EB3C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EB3F 8B55F8                  mov edx, dword ptr [ebp-08]
:0041EB42 668B02                  mov ax, word ptr [edx]
:0041EB45 668901                  mov word ptr [ecx], ax
:0041EB48 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EB4B 83C102                  add ecx, 00000002
:0041EB4E 894DFC                  mov dword ptr [ebp-04], ecx
:0041EB51 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EB54 8B45F8                  mov eax, dword ptr [ebp-08]
:0041EB57 668B4802                mov cx, word ptr [eax+02]
:0041EB5B 66890A                  mov word ptr [edx], cx
:0041EB5E 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EB61 83C202                  add edx, 00000002
:0041EB64 8955FC                  mov dword ptr [ebp-04], edx
:0041EB67 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EB6A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EB6D 668B5104                mov dx, word ptr [ecx+04]
:0041EB71 668910                  mov word ptr [eax], dx
:0041EB74 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EB77 83C002                  add eax, 00000002
:0041EB7A 8945FC                  mov dword ptr [ebp-04], eax
:0041EB7D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EB80 8B55F8                  mov edx, dword ptr [ebp-08]
:0041EB83 668B4206                mov ax, word ptr [edx+06]
:0041EB87 668901                  mov word ptr [ecx], ax
:0041EB8A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EB8D 83C102                  add ecx, 00000002
:0041EB90 894DFC                  mov dword ptr [ebp-04], ecx
:0041EB93 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EB96 8B45F8                  mov eax, dword ptr [ebp-08]
:0041EB99 668B4808                mov cx, word ptr [eax+08]
:0041EB9D 66890A                  mov word ptr [edx], cx
:0041EBA0 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EBA3 83C202                  add edx, 00000002
:0041EBA6 8955FC                  mov dword ptr [ebp-04], edx
:0041EBA9 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EBAC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EBAF 668B510A                mov dx, word ptr [ecx+0A]
:0041EBB3 668910                  mov word ptr [eax], dx
:0041EBB6 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EBB9 83C002                  add eax, 00000002
:0041EBBC 8945FC                  mov dword ptr [ebp-04], eax
:0041EBBF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EBC2 8B55F8                  mov edx, dword ptr [ebp-08]
:0041EBC5 668B420C                mov ax, word ptr [edx+0C]
:0041EBC9 668901                  mov word ptr [ecx], ax
:0041EBCC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EBCF 83C102                  add ecx, 00000002
:0041EBD2 894DFC                  mov dword ptr [ebp-04], ecx
:0041EBD5 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EBD8 8B45F8                  mov eax, dword ptr [ebp-08]
:0041EBDB 668B480E                mov cx, word ptr [eax+0E]
:0041EBDF 66890A                  mov word ptr [edx], cx
:0041EBE2 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EBE5 83C202                  add edx, 00000002
:0041EBE8 8955FC                  mov dword ptr [ebp-04], edx
:0041EBEB 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EBEE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EBF1 668B5116                mov dx, word ptr [ecx+16]
:0041EBF5 668910                  mov word ptr [eax], dx
:0041EBF8 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EBFB 83C002                  add eax, 00000002
:0041EBFE 8945FC                  mov dword ptr [ebp-04], eax
:0041EC01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EC04 8B55F8                  mov edx, dword ptr [ebp-08]
:0041EC07 668B4218                mov ax, word ptr [edx+18]
:0041EC0B 668901                  mov word ptr [ecx], ax
:0041EC0E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EC11 83C102                  add ecx, 00000002
:0041EC14 894DFC                  mov dword ptr [ebp-04], ecx
:0041EC17 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EC1A 8B45F8                  mov eax, dword ptr [ebp-08]
:0041EC1D 668B481A                mov cx, word ptr [eax+1A]
:0041EC21 66890A                  mov word ptr [edx], cx
:0041EC24 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EC27 83C202                  add edx, 00000002
:0041EC2A 8955FC                  mov dword ptr [ebp-04], edx
:0041EC2D 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EC30 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EC33 668B511C                mov dx, word ptr [ecx+1C]
:0041EC37 668910                  mov word ptr [eax], dx
:0041EC3A 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EC3D 83C002                  add eax, 00000002
:0041EC40 8945FC                  mov dword ptr [ebp-04], eax
:0041EC43 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EC46 8B55F8                  mov edx, dword ptr [ebp-08]
:0041EC49 668B4228                mov ax, word ptr [edx+28]
:0041EC4D 668901                  mov word ptr [ecx], ax
:0041EC50 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EC53 83C102                  add ecx, 00000002
:0041EC56 894DFC                  mov dword ptr [ebp-04], ecx
:0041EC59 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EC5C 8B45F8                  mov eax, dword ptr [ebp-08]
:0041EC5F 668B482C                mov cx, word ptr [eax+2C]
:0041EC63 66890A                  mov word ptr [edx], cx
:0041EC66 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EC69 83C202                  add edx, 00000002
:0041EC6C 8955FC                  mov dword ptr [ebp-04], edx
:0041EC6F 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EC72 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041EC75 668B512E                mov dx, word ptr [ecx+2E]
:0041EC79 668910                  mov word ptr [eax], dx
:0041EC7C 8B45FC                  mov eax, dword ptr [ebp-04]
:0041EC7F 83C002                  add eax, 00000002
:0041EC82 8945FC                  mov dword ptr [ebp-04], eax
:0041EC85 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EC88 8B55F8                  mov edx, dword ptr [ebp-08]
:0041EC8B 668B4230                mov ax, word ptr [edx+30]
:0041EC8F 668901                  mov word ptr [ecx], ax
:0041EC92 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EC95 83C102                  add ecx, 00000002
:0041EC98 894DFC                  mov dword ptr [ebp-04], ecx
:0041EC9B 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EC9E 8B45F8                  mov eax, dword ptr [ebp-08]
:0041ECA1 668B4838                mov cx, word ptr [eax+38]
:0041ECA5 66890A                  mov word ptr [edx], cx
:0041ECA8 8B55FC                  mov edx, dword ptr [ebp-04]
:0041ECAB 83C202                  add edx, 00000002
:0041ECAE 8955FC                  mov dword ptr [ebp-04], edx
:0041ECB1 8B45FC                  mov eax, dword ptr [ebp-04]
:0041ECB4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041ECB7 668B513A                mov dx, word ptr [ecx+3A]
:0041ECBB 668910                  mov word ptr [eax], dx
:0041ECBE 8B45FC                  mov eax, dword ptr [ebp-04]
:0041ECC1 83C002                  add eax, 00000002
:0041ECC4 8945FC                  mov dword ptr [ebp-04], eax
:0041ECC7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041ECCA 8BE5                    mov esp, ebp
:0041ECCC 5D                      pop ebp
:0041ECCD C20400                  ret 0004



* Referenced by a CALL at Address:
|:0041F0C4   
|
:0041ECD0 55                      push ebp
:0041ECD1 8BEC                    mov ebp, esp
:0041ECD3 83EC28                  sub esp, 00000028
:0041ECD6 C745F8D8174B00          mov [ebp-08], 004B17D8
:0041ECDD 66C70528B548000100      mov word ptr [0048B528], 0001
:0041ECE6 66C705502449000000      mov word ptr [00492450], 0000
:0041ECEF 33C0                    xor eax, eax
:0041ECF1 A030964A00              mov al, byte ptr [004A9630]
:0041ECF6 83F801                  cmp eax, 00000001
:0041ECF9 0F85CA010000            jne 0041EEC9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041ECFF 6A04                    push 00000004
:0041ED01 6A00                    push 00000000
:0041ED03 6865010000              push 00000165
:0041ED08 B9D01C4B00              mov ecx, 004B1CD0
:0041ED0D E87EA20500              call 00478F90
:0041ED12 8945FC                  mov dword ptr [ebp-04], eax
:0041ED15 6A00                    push 00000000
:0041ED17 E8B7BBFFFF              call 0041A8D3
:0041ED1C 83C404                  add esp, 00000004
:0041ED1F 8945F4                  mov dword ptr [ebp-0C], eax
:0041ED22 66C745E80000            mov [ebp-18], 0000
:0041ED28 EB1E                    jmp 0041ED48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ED65(U)
|
:0041ED2A 668B4DE8                mov cx, word ptr [ebp-18]
:0041ED2E 6683C101                add cx, 0001
:0041ED32 66894DE8                mov word ptr [ebp-18], cx
:0041ED36 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041ED39 83C240                  add edx, 00000040
:0041ED3C 8955F4                  mov dword ptr [ebp-0C], edx
:0041ED3F 8B45FC                  mov eax, dword ptr [ebp-04]
:0041ED42 83C024                  add eax, 00000024
:0041ED45 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ED28(U)
|
:0041ED48 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0041ED4B 81E1FFFF0000            and ecx, 0000FFFF
:0041ED51 81F980000000            cmp ecx, 00000080
:0041ED57 7D0E                    jge 0041ED67
:0041ED59 8B55FC                  mov edx, dword ptr [ebp-04]
:0041ED5C 52                      push edx
:0041ED5D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041ED60 E825FCFFFF              call 0041E98A
:0041ED65 EBC3                    jmp 0041ED2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ED57(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041ED67 6A04                    push 00000004
:0041ED69 6A00                    push 00000000
:0041ED6B 6865010000              push 00000165
:0041ED70 B9D01C4B00              mov ecx, 004B1CD0
:0041ED75 E816A20500              call 00478F90
:0041ED7A 8945FC                  mov dword ptr [ebp-04], eax
:0041ED7D 6A00                    push 00000000
:0041ED7F E84FBBFFFF              call 0041A8D3
:0041ED84 83C404                  add esp, 00000004
:0041ED87 8945F4                  mov dword ptr [ebp-0C], eax
:0041ED8A 66C745E80000            mov [ebp-18], 0000
:0041ED90 EB1E                    jmp 0041EDB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EEA0(U)
|
:0041ED92 668B45E8                mov ax, word ptr [ebp-18]
:0041ED96 66050100                add ax, 0001
:0041ED9A 668945E8                mov word ptr [ebp-18], ax
:0041ED9E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EDA1 83C140                  add ecx, 00000040
:0041EDA4 894DF4                  mov dword ptr [ebp-0C], ecx
:0041EDA7 8B55FC                  mov edx, dword ptr [ebp-04]
:0041EDAA 83C224                  add edx, 00000024
:0041EDAD 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ED90(U)
|
:0041EDB0 8B45E8                  mov eax, dword ptr [ebp-18]
:0041EDB3 25FFFF0000              and eax, 0000FFFF
:0041EDB8 3D80000000              cmp eax, 00000080
:0041EDBD 0F8DE2000000            jnl 0041EEA5
:0041EDC3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EDC6 E885DCFEFF              call 0040CA50
:0041EDCB 668945DC                mov word ptr [ebp-24], ax
:0041EDCF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EDD2 E819060000              call 0041F3F0
:0041EDD7 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0041EDDA 81E1FFFF0000            and ecx, 0000FFFF
:0041EDE0 81E100800000            and ecx, 00008000
:0041EDE6 85C9                    test ecx, ecx
:0041EDE8 0F84B2000000            je 0041EEA0
:0041EDEE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EDF1 E8BA060000              call 0041F4B0
:0041EDF6 668945D8                mov word ptr [ebp-28], ax
:0041EDFA 668B55D8                mov dx, word ptr [ebp-28]
:0041EDFE 52                      push edx
:0041EDFF E8B1B8FFFF              call 0041A6B5
:0041EE04 83C404                  add esp, 00000004
:0041EE07 668945EC                mov word ptr [ebp-14], ax
:0041EE0B 8B45EC                  mov eax, dword ptr [ebp-14]
:0041EE0E 25FFFF0000              and eax, 0000FFFF
:0041EE13 3D00100000              cmp eax, 00001000
:0041EE18 7411                    je 0041EE2B
:0041EE1A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0041EE1D 81E1FFFF0000            and ecx, 0000FFFF
:0041EE23 81F900200000            cmp ecx, 00002000
:0041EE29 7575                    jne 0041EEA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EE18(C)
|
:0041EE2B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EE2E E87D0A0000              call 0041F8B0
:0041EE33 668945F0                mov word ptr [ebp-10], ax
:0041EE37 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EE3A E8B10A0000              call 0041F8F0
:0041EE3F 50                      push eax
:0041EE40 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EE43 E8A8090000              call 0041F7F0
:0041EE48 50                      push eax
:0041EE49 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EE4C E87F0A0000              call 0041F8D0
:0041EE51 50                      push eax
:0041EE52 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EE55 E8D6090000              call 0041F830
:0041EE5A 50                      push eax
:0041EE5B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EE5E E88D060000              call 0041F4F0
:0041EE63 50                      push eax
:0041EE64 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EE67 E8A4070000              call 0041F610
:0041EE6C 50                      push eax
:0041EE6D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EE70 E85B070000              call 0041F5D0
:0041EE75 50                      push eax
:0041EE76 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0041EE79 E882030000              call 0041F200
:0041EE7E 50                      push eax
:0041EE7F 668B55D8                mov dx, word ptr [ebp-28]
:0041EE83 52                      push edx
:0041EE84 E897E9FFFF              call 0041D820
:0041EE89 83C424                  add esp, 00000024
:0041EE8C 668945E0                mov word ptr [ebp-20], ax
:0041EE90 668B45E0                mov ax, word ptr [ebp-20]
:0041EE94 50                      push eax
:0041EE95 E839BAFFFF              call 0041A8D3
:0041EE9A 83C404                  add esp, 00000004
:0041EE9D 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041EDE8(C), :0041EE29(C)
|
:0041EEA0 E9EDFEFFFF              jmp 0041ED92

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EDBD(C)
|
:0041EEA5 6A01                    push 00000001
:0041EEA7 E888C2FFFF              call 0041B134
:0041EEAC 83C404                  add esp, 00000004
:0041EEAF C60530964A0000          mov byte ptr [004A9630], 00
:0041EEB6 6A01                    push 00000001
:0041EEB8 B9D8174B00              mov ecx, 004B17D8
:0041EEBD E85E800100              call 00436F20
:0041EEC2 E85D12FFFF              call 00410124
:0041EEC7 EB0A                    jmp 0041EED3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041ECF9(C)
|
:0041EEC9 6A00                    push 00000000
:0041EECB E864C2FFFF              call 0041B134
:0041EED0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EEC7(U)
|
:0041EED3 8BE5                    mov esp, ebp
:0041EED5 5D                      pop ebp
:0041EED6 C3                      ret



* Referenced by a CALL at Address:
|:0041F0F7   
|
:0041EED7 55                      push ebp
:0041EED8 8BEC                    mov ebp, esp
:0041EEDA 83EC0C                  sub esp, 0000000C
:0041EEDD C745F8D8174B00          mov [ebp-08], 004B17D8
:0041EEE4 E859EEFFFF              call 0041DD42

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EFCB(U)
|
:0041EEE9 B978294B00              mov ecx, 004B2978
:0041EEEE E89DDAFEFF              call 0040C990
:0041EEF3 25FF000000              and eax, 000000FF
:0041EEF8 83E801                  sub eax, 00000001
:0041EEFB 83F808                  cmp eax, 00000008
:0041EEFE 7E09                    jle 0041EF09

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0041EF00 C745F408000000          mov [ebp-0C], 00000008
:0041EF07 EB15                    jmp 0041EF1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EEFE(C)
|
:0041EF09 B978294B00              mov ecx, 004B2978
:0041EF0E E87DDAFEFF              call 0040C990
:0041EF13 25FF000000              and eax, 000000FF
:0041EF18 83E801                  sub eax, 00000001
:0041EF1B 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EF07(U)
|
:0041EF1E 668B45F4                mov ax, word ptr [ebp-0C]
:0041EF22 668945FC                mov word ptr [ebp-04], ax
:0041EF26 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041EF29 81E1FFFF0000            and ecx, 0000FFFF
:0041EF2F 51                      push ecx
:0041EF30 B9A83B4B00              mov ecx, 004B3BA8
:0041EF35 E8D6090000              call 0041F910
:0041EF3A C7053CC74A0000000000    mov dword ptr [004AC73C], 00000000
:0041EF44 B928B44800              mov ecx, 0048B428
:0041EF49 E8B4A8FFFF              call 00419802
:0041EF4E E808070100              call 0042F65B
:0041EF53 A3FC1C4B00              mov dword ptr [004B1CFC], eax
:0041EF58 E8D1F2FFFF              call 0041E22E
:0041EF5D 6A01                    push 00000001
:0041EF5F E876000000              call 0041EFDA
:0041EF64 83C404                  add esp, 00000004
:0041EF67 E859EEFFFF              call 0041DDC5
:0041EF6C 8B153CC74A00            mov edx, dword ptr [004AC73C]
:0041EF72 83E26E                  and edx, 0000006E
:0041EF75 85D2                    test edx, edx
:0041EF77 7402                    je 0041EF7B
:0041EF79 EB55                    jmp 0041EFD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EF77(C)
|
:0041EF7B E86AF1FFFF              call 0041E0EA
:0041EF80 E8A2CDFFFF              call 0041BD27
:0041EF85 E8A911FFFF              call 00410133
:0041EF8A E8FCCDFFFF              call 0041BD8B
:0041EF8F E8BA11FFFF              call 0041014E
:0041EF94 68FF000000              push 000000FF
:0041EF99 6A00                    push 00000000
:0041EF9B E8E2ECFFFF              call 0041DC82
:0041EFA0 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EFBB(U)
|
:0041EFA3 B9A83B4B00              mov ecx, 004B3BA8
:0041EFA8 E883090000              call 0041F930
:0041EFAD 85C0                    test eax, eax
:0041EFAF 750C                    jne 0041EFBD
:0041EFB1 6A00                    push 00000000
:0041EFB3 E822000000              call 0041EFDA
:0041EFB8 83C404                  add esp, 00000004
:0041EFBB EBE6                    jmp 0041EFA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EFAF(C)
|
:0041EFBD A13CC74A00              mov eax, dword ptr [004AC73C]
:0041EFC2 83E06E                  and eax, 0000006E
:0041EFC5 85C0                    test eax, eax
:0041EFC7 7402                    je 0041EFCB
:0041EFC9 EB05                    jmp 0041EFD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EFC7(C)
|
:0041EFCB E919FFFFFF              jmp 0041EEE9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041EF79(U), :0041EFC9(U)
|
:0041EFD0 66A13CC74A00            mov ax, word ptr [004AC73C]
:0041EFD6 8BE5                    mov esp, ebp
:0041EFD8 5D                      pop ebp
:0041EFD9 C3                      ret



* Referenced by a CALL at Addresses:
|:0041EF5F   , :0041EFB3   
|
:0041EFDA 55                      push ebp
:0041EFDB 8BEC                    mov ebp, esp
:0041EFDD 51                      push ecx
:0041EFDE E85011FFFF              call 00410133
:0041EFE3 837D0800                cmp dword ptr [ebp+08], 00000000
:0041EFE7 740E                    je 0041EFF7
:0041EFE9 A1B8454900              mov eax, dword ptr [004945B8]
:0041EFEE 50                      push eax
:0041EFEF E81EBA0400              call 0046AA12
:0041EFF4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EFE7(C)
|
:0041EFF7 833DBC45490000          cmp dword ptr [004945BC], 00000000
:0041EFFE 7413                    je 0041F013
:0041F000 8B0DBC454900            mov ecx, dword ptr [004945BC]
:0041F006 51                      push ecx
:0041F007 B950544B00              mov ecx, 004B5450
:0041F00C E86D860400              call 0046767E
:0041F011 EB0A                    jmp 0041F01D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041EFFE(C)
|
:0041F013 B950544B00              mov ecx, 004B5450
:0041F018 E83D880400              call 0046785A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F011(U)
|
:0041F01D C745FC00000000          mov [ebp-04], 00000000
:0041F024 33D2                    xor edx, edx
:0041F026 668B152CB54800          mov dx, word ptr [0048B52C]
:0041F02D 81FAFFFF0000            cmp edx, 0000FFFF
:0041F033 7411                    je 0041F046
:0041F035 E823090100              call 0042F95D
:0041F03A 83F801                  cmp eax, 00000001
:0041F03D 7507                    jne 0041F046
:0041F03F C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041F033(C), :0041F03D(C)
|
:0041F046 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F049 50                      push eax
:0041F04A E83BFF0000              call 0042EF8A
:0041F04F 83C404                  add esp, 00000004
:0041F052 E8F710FFFF              call 0041014E
:0041F057 8BE5                    mov esp, ebp
:0041F059 5D                      pop ebp
:0041F05A C3                      ret



* Referenced by a CALL at Address:
|:0041F0BA   
|
:0041F05B 55                      push ebp
:0041F05C 8BEC                    mov ebp, esp
:0041F05E C70538C74A0000000000    mov dword ptr [004AC738], 00000000
:0041F068 C705FC1C4B0000000000    mov dword ptr [004B1CFC], 00000000
:0041F072 66C70524B548000000      mov word ptr [0048B524], 0000
:0041F07B 5D                      pop ebp
:0041F07C C3                      ret



* Referenced by a CALL at Address:
|:0041F0F2   
|
:0041F07D 55                      push ebp
:0041F07E 8BEC                    mov ebp, esp
:0041F080 51                      push ecx
:0041F081 68027F0000              push 00007F02
:0041F086 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:0041F088 FF15C8D54B00            Call dword ptr [004BD5C8]
:0041F08E 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:0041F08F FF15CCD54B00            Call dword ptr [004BD5CC]
:0041F095 8945FC                  mov dword ptr [ebp-04], eax
:0041F098 C70520B5480000000000    mov dword ptr [0048B520], 00000000
:0041F0A2 66C70590034900FFFF      mov word ptr [00490390], FFFF
:0041F0AB E8CEDDFFFF              call 0041CE7E
:0041F0B0 E840C8FFFF              call 0041B8F5
:0041F0B5 E8B0DEFFFF              call 0041CF6A
:0041F0BA E89CFFFFFF              call 0041F05B
:0041F0BF E81310FFFF              call 004100D7
:0041F0C4 E807FCFFFF              call 0041ECD0
:0041F0C9 E87ECEFFFF              call 0041BF4C
:0041F0CE 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F0D1 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:0041F0D2 FF15CCD54B00            Call dword ptr [004BD5CC]
:0041F0D8 8BE5                    mov esp, ebp
:0041F0DA 5D                      pop ebp
:0041F0DB C3                      ret



* Referenced by a CALL at Address:
|:0042F2D1   
|
:0041F0DC 55                      push ebp
:0041F0DD 8BEC                    mov ebp, esp
:0041F0DF 83EC08                  sub esp, 00000008
:0041F0E2 E87C24FFFF              call 00411563
:0041F0E7 8845F8                  mov byte ptr [ebp-08], al
:0041F0EA 807DF802                cmp byte ptr [ebp-08], 02
:0041F0EE 7402                    je 0041F0F2
:0041F0F0 EB14                    jmp 0041F106

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F0EE(C)
|
:0041F0F2 E886FFFFFF              call 0041F07D
:0041F0F7 E8DBFDFFFF              call 0041EED7
:0041F0FC 668945FC                mov word ptr [ebp-04], ax
:0041F100 668B45FC                mov ax, word ptr [ebp-04]
:0041F104 EB06                    jmp 0041F10C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F0F0(U)
|
:0041F106 66A13CC74A00            mov ax, word ptr [004AC73C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041F104(U)
|
:0041F10C 8BE5                    mov esp, ebp
:0041F10E 5D                      pop ebp
:0041F10F C3                      ret



* Referenced by a CALL at Addresses:
|:0041D08E   , :0041D133   
|
:0041F110 55                      push ebp
:0041F111 8BEC                    mov ebp, esp
:0041F113 51                      push ecx
:0041F114 894DFC                  mov dword ptr [ebp-04], ecx
:0041F117 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F11A 034508                  add eax, dword ptr [ebp+08]
:0041F11D 8A80E0000000            mov al, byte ptr [eax+000000E0]
:0041F123 8BE5                    mov esp, ebp
:0041F125 5D                      pop ebp
:0041F126 C20400                  ret 0004


:0041F129 CC                      int 03
:0041F12A CC                      int 03
:0041F12B CC                      int 03
:0041F12C CC                      int 03
:0041F12D CC                      int 03
:0041F12E CC                      int 03
:0041F12F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041D312   , :0041D38A   , :0041D8B8   , :0046CFA8   , :0046CFB2   
|
:0041F130 55                      push ebp
:0041F131 8BEC                    mov ebp, esp
:0041F133 51                      push ecx
:0041F134 894DFC                  mov dword ptr [ebp-04], ecx
:0041F137 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F13A 33C9                    xor ecx, ecx
:0041F13C 668B08                  mov cx, word ptr [eax]
:0041F13F 8BC1                    mov eax, ecx
:0041F141 8BE5                    mov esp, ebp
:0041F143 5D                      pop ebp
:0041F144 C3                      ret


:0041F145 CC                      int 03
:0041F146 CC                      int 03
:0041F147 CC                      int 03
:0041F148 CC                      int 03
:0041F149 CC                      int 03
:0041F14A CC                      int 03
:0041F14B CC                      int 03
:0041F14C CC                      int 03
:0041F14D CC                      int 03
:0041F14E CC                      int 03
:0041F14F CC                      int 03
:0041F150 55                      push ebp
:0041F151 8BEC                    mov ebp, esp
:0041F153 51                      push ecx
:0041F154 894DFC                  mov dword ptr [ebp-04], ecx
:0041F157 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F15A 66C7000000              mov word ptr [eax], 0000
:0041F15F 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F162 8BE5                    mov esp, ebp
:0041F164 5D                      pop ebp
:0041F165 C3                      ret


:0041F166 CC                      int 03
:0041F167 CC                      int 03
:0041F168 CC                      int 03
:0041F169 CC                      int 03
:0041F16A CC                      int 03
:0041F16B CC                      int 03
:0041F16C CC                      int 03
:0041F16D CC                      int 03
:0041F16E CC                      int 03
:0041F16F CC                      int 03

* Referenced by a CALL at Address:
|:0041B362   
|
:0041F170 55                      push ebp
:0041F171 8BEC                    mov ebp, esp
:0041F173 51                      push ecx
:0041F174 894DFC                  mov dword ptr [ebp-04], ecx
:0041F177 8B450C                  mov eax, dword ptr [ebp+0C]
:0041F17A 25FFFF0000              and eax, 0000FFFF
:0041F17F F7D0                    not eax
:0041F181 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F184 668B11                  mov dx, word ptr [ecx]
:0041F187 6623D0                  and dx, ax
:0041F18A 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F18D 668910                  mov word ptr [eax], dx
:0041F190 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F193 81E1FFFF0000            and ecx, 0000FFFF
:0041F199 8B550C                  mov edx, dword ptr [ebp+0C]
:0041F19C 81E2FFFF0000            and edx, 0000FFFF
:0041F1A2 23CA                    and ecx, edx
:0041F1A4 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F1A7 668B10                  mov dx, word ptr [eax]
:0041F1AA 660BD1                  or dx, cx
:0041F1AD 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F1B0 668910                  mov word ptr [eax], dx
:0041F1B3 8BE5                    mov esp, ebp
:0041F1B5 5D                      pop ebp
:0041F1B6 C20800                  ret 0008


:0041F1B9 CC                      int 03
:0041F1BA CC                      int 03
:0041F1BB CC                      int 03
:0041F1BC CC                      int 03
:0041F1BD CC                      int 03
:0041F1BE CC                      int 03
:0041F1BF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041B36F   , :0041D626   
|
:0041F1C0 55                      push ebp
:0041F1C1 8BEC                    mov ebp, esp
:0041F1C3 51                      push ecx
:0041F1C4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F1C7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F1CA 668B4D08                mov cx, word ptr [ebp+08]
:0041F1CE 66894802                mov word ptr [eax+02], cx
:0041F1D2 8BE5                    mov esp, ebp
:0041F1D4 5D                      pop ebp
:0041F1D5 C20400                  ret 0004


:0041F1D8 CC                      int 03
:0041F1D9 CC                      int 03
:0041F1DA CC                      int 03
:0041F1DB CC                      int 03
:0041F1DC CC                      int 03
:0041F1DD CC                      int 03
:0041F1DE CC                      int 03
:0041F1DF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041C6F1   , :0041D9F3   
|
:0041F1E0 55                      push ebp
:0041F1E1 8BEC                    mov ebp, esp
:0041F1E3 51                      push ecx
:0041F1E4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F1E7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F1EA 668B4002                mov ax, word ptr [eax+02]
:0041F1EE 8BE5                    mov esp, ebp
:0041F1F0 5D                      pop ebp
:0041F1F1 C3                      ret


:0041F1F2 CC                      int 03
:0041F1F3 CC                      int 03
:0041F1F4 CC                      int 03
:0041F1F5 CC                      int 03
:0041F1F6 CC                      int 03
:0041F1F7 CC                      int 03
:0041F1F8 CC                      int 03
:0041F1F9 CC                      int 03
:0041F1FA CC                      int 03
:0041F1FB CC                      int 03
:0041F1FC CC                      int 03
:0041F1FD CC                      int 03
:0041F1FE CC                      int 03
:0041F1FF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041B88A   , :0041BACF   , :0041BB47   , :0041C43E   , :0041C70D   
|:0041C752   , :0041CBBF   , :0041CCB2   , :0041CCD6   , :0041D7D2   
|:0041DA01   , :0041DC12   , :0041DF08   , :0041DF1A   , :0041EE79   
|
:0041F200 55                      push ebp
:0041F201 8BEC                    mov ebp, esp
:0041F203 51                      push ecx
:0041F204 894DFC                  mov dword ptr [ebp-04], ecx
:0041F207 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F20A 668B4004                mov ax, word ptr [eax+04]
:0041F20E 8BE5                    mov esp, ebp
:0041F210 5D                      pop ebp
:0041F211 C3                      ret


:0041F212 CC                      int 03
:0041F213 CC                      int 03
:0041F214 CC                      int 03
:0041F215 CC                      int 03
:0041F216 CC                      int 03
:0041F217 CC                      int 03
:0041F218 CC                      int 03
:0041F219 CC                      int 03
:0041F21A CC                      int 03
:0041F21B CC                      int 03
:0041F21C CC                      int 03
:0041F21D CC                      int 03
:0041F21E CC                      int 03
:0041F21F CC                      int 03

* Referenced by a CALL at Addresses:
|:00404788   , :004047B0   , :0040C251   , :0040C294   , :0040C2C1   
|:0040C2F6   , :0040C32D   , :0041B3F8   , :0041D65A   , :0044AB20   
|:0044AB46   
|
:0041F220 55                      push ebp
:0041F221 8BEC                    mov ebp, esp
:0041F223 51                      push ecx
:0041F224 894DFC                  mov dword ptr [ebp-04], ecx
:0041F227 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F22A 668B4D08                mov cx, word ptr [ebp+08]
:0041F22E 6689480A                mov word ptr [eax+0A], cx
:0041F232 8BE5                    mov esp, ebp
:0041F234 5D                      pop ebp
:0041F235 C20400                  ret 0004


:0041F238 CC                      int 03
:0041F239 CC                      int 03
:0041F23A CC                      int 03
:0041F23B CC                      int 03
:0041F23C CC                      int 03
:0041F23D CC                      int 03
:0041F23E CC                      int 03
:0041F23F CC                      int 03

* Referenced by a CALL at Address:
|:0041A5DD   
|
:0041F240 55                      push ebp
:0041F241 8BEC                    mov ebp, esp
:0041F243 51                      push ecx
:0041F244 894DFC                  mov dword ptr [ebp-04], ecx
:0041F247 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F24A E821000000              call 0041F270
:0041F24F 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F252 C6400400                mov [eax+04], 00
:0041F256 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F259 66C7010030              mov word ptr [ecx], 3000
:0041F25E 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F261 8BE5                    mov esp, ebp
:0041F263 5D                      pop ebp
:0041F264 C3                      ret


:0041F265 CC                      int 03
:0041F266 CC                      int 03
:0041F267 CC                      int 03
:0041F268 CC                      int 03
:0041F269 CC                      int 03
:0041F26A CC                      int 03
:0041F26B CC                      int 03
:0041F26C CC                      int 03
:0041F26D CC                      int 03
:0041F26E CC                      int 03
:0041F26F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041F24A   , :0042DDCA   
|
:0041F270 55                      push ebp
:0041F271 8BEC                    mov ebp, esp
:0041F273 51                      push ecx
:0041F274 894DFC                  mov dword ptr [ebp-04], ecx
:0041F277 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F27A 66C700FFFF              mov word ptr [eax], FFFF
:0041F27F 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F282 8BE5                    mov esp, ebp
:0041F284 5D                      pop ebp
:0041F285 C3                      ret


:0041F286 CC                      int 03
:0041F287 CC                      int 03
:0041F288 CC                      int 03
:0041F289 CC                      int 03
:0041F28A CC                      int 03
:0041F28B CC                      int 03
:0041F28C CC                      int 03
:0041F28D CC                      int 03
:0041F28E CC                      int 03
:0041F28F CC                      int 03

* Referenced by a CALL at Address:
|:0041A7A0   
|
:0041F290 55                      push ebp
:0041F291 8BEC                    mov ebp, esp
:0041F293 51                      push ecx
:0041F294 894DFC                  mov dword ptr [ebp-04], ecx
:0041F297 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F29A 83C004                  add eax, 00000004
:0041F29D 8BE5                    mov esp, ebp
:0041F29F 5D                      pop ebp
:0041F2A0 C3                      ret


:0041F2A1 CC                      int 03
:0041F2A2 CC                      int 03
:0041F2A3 CC                      int 03
:0041F2A4 CC                      int 03
:0041F2A5 CC                      int 03
:0041F2A6 CC                      int 03
:0041F2A7 CC                      int 03
:0041F2A8 CC                      int 03
:0041F2A9 CC                      int 03
:0041F2AA CC                      int 03
:0041F2AB CC                      int 03
:0041F2AC CC                      int 03
:0041F2AD CC                      int 03
:0041F2AE CC                      int 03
:0041F2AF CC                      int 03
:0041F2B0 55                      push ebp
:0041F2B1 8BEC                    mov ebp, esp
:0041F2B3 51                      push ecx
:0041F2B4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F2B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F2BA C7401000000000          mov [eax+10], 00000000
:0041F2C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F2C4 66C741140000            mov [ecx+14], 0000
:0041F2CA 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F2CD 66C742040000            mov [edx+04], 0000
:0041F2D3 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F2D6 66C740060000            mov [eax+06], 0000
:0041F2DC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F2DF 66C741080000            mov [ecx+08], 0000
:0041F2E5 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F2E8 66C7421E0000            mov [edx+1E], 0000
:0041F2EE 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F2F1 66C740200000            mov [eax+20], 0000
:0041F2F7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F2FA 66C741220000            mov [ecx+22], 0000
:0041F300 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F303 66C742240000            mov [edx+24], 0000
:0041F309 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F30C 66C740260000            mov [eax+26], 0000
:0041F312 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F315 66C7411A0000            mov [ecx+1A], 0000
:0041F31B 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F31E 66C742280000            mov [edx+28], 0000
:0041F324 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F327 66C7402A0000            mov [eax+2A], 0000
:0041F32D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F330 66C7412C0000            mov [ecx+2C], 0000
:0041F336 6A00                    push 00000000
:0041F338 E824B3FFFF              call 0041A661
:0041F33D 83C404                  add esp, 00000004
:0041F340 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F343 894234                  mov dword ptr [edx+34], eax
:0041F346 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F349 66C7402E0000            mov [eax+2E], 0000
:0041F34F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F352 66C741300400            mov [ecx+30], 0004
:0041F358 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F35B 66C7423C0000            mov [edx+3C], 0000
:0041F361 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F364 66C7403E0000            mov [eax+3E], 0000
:0041F36A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F36D 66C741380000            mov [ecx+38], 0000
:0041F373 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F376 66C7420A0300            mov [edx+0A], 0003
:0041F37C 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F37F 66C7400C0300            mov [eax+0C], 0003
:0041F385 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F388 66C7410E0100            mov [ecx+0E], 0001
:0041F38E 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F391 66C7020000              mov word ptr [edx], 0000
:0041F396 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F399 66C740020000            mov [eax+02], 0000
:0041F39F 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F3A2 8BE5                    mov esp, ebp
:0041F3A4 5D                      pop ebp
:0041F3A5 C3                      ret


:0041F3A6 CC                      int 03
:0041F3A7 CC                      int 03
:0041F3A8 CC                      int 03
:0041F3A9 CC                      int 03
:0041F3AA CC                      int 03
:0041F3AB CC                      int 03
:0041F3AC CC                      int 03
:0041F3AD CC                      int 03
:0041F3AE CC                      int 03
:0041F3AF CC                      int 03

* Referenced by a CALL at Address:
|:0041D876   
|
:0041F3B0 55                      push ebp
:0041F3B1 8BEC                    mov ebp, esp
:0041F3B3 51                      push ecx
:0041F3B4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F3B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F3BA 33C9                    xor ecx, ecx
:0041F3BC 668B08                  mov cx, word ptr [eax]
:0041F3BF 8BC1                    mov eax, ecx
:0041F3C1 2500F00000              and eax, 0000F000
:0041F3C6 8BE5                    mov esp, ebp
:0041F3C8 5D                      pop ebp
:0041F3C9 C3                      ret


:0041F3CA CC                      int 03
:0041F3CB CC                      int 03
:0041F3CC CC                      int 03
:0041F3CD CC                      int 03
:0041F3CE CC                      int 03
:0041F3CF CC                      int 03

* Referenced by a CALL at Address:
|:0041D8AA   
|
:0041F3D0 55                      push ebp
:0041F3D1 8BEC                    mov ebp, esp
:0041F3D3 51                      push ecx
:0041F3D4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F3D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F3DA 8A4002                  mov al, byte ptr [eax+02]
:0041F3DD 8BE5                    mov esp, ebp
:0041F3DF 5D                      pop ebp
:0041F3E0 C3                      ret


:0041F3E1 CC                      int 03
:0041F3E2 CC                      int 03
:0041F3E3 CC                      int 03
:0041F3E4 CC                      int 03
:0041F3E5 CC                      int 03
:0041F3E6 CC                      int 03
:0041F3E7 CC                      int 03
:0041F3E8 CC                      int 03
:0041F3E9 CC                      int 03
:0041F3EA CC                      int 03
:0041F3EB CC                      int 03
:0041F3EC CC                      int 03
:0041F3ED CC                      int 03
:0041F3EE CC                      int 03
:0041F3EF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041A9BF   , :0041ABF6   , :0041D489   , :0041EDD2   
|
:0041F3F0 55                      push ebp
:0041F3F1 8BEC                    mov ebp, esp
:0041F3F3 51                      push ecx
:0041F3F4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F3F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F3FA 66C740280000            mov [eax+28], 0000
:0041F400 8BE5                    mov esp, ebp
:0041F402 5D                      pop ebp
:0041F403 C3                      ret


:0041F404 CC                      int 03
:0041F405 CC                      int 03
:0041F406 CC                      int 03
:0041F407 CC                      int 03
:0041F408 CC                      int 03
:0041F409 CC                      int 03
:0041F40A CC                      int 03
:0041F40B CC                      int 03
:0041F40C CC                      int 03
:0041F40D CC                      int 03
:0041F40E CC                      int 03
:0041F40F CC                      int 03

* Referenced by a CALL at Address:
|:0041CD3E   
|
:0041F410 55                      push ebp
:0041F411 8BEC                    mov ebp, esp
:0041F413 51                      push ecx
:0041F414 894DFC                  mov dword ptr [ebp-04], ecx
:0041F417 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F41A 668B4D08                mov cx, word ptr [ebp+08]
:0041F41E 6689481C                mov word ptr [eax+1C], cx
:0041F422 8BE5                    mov esp, ebp
:0041F424 5D                      pop ebp
:0041F425 C20400                  ret 0004


:0041F428 CC                      int 03
:0041F429 CC                      int 03
:0041F42A CC                      int 03
:0041F42B CC                      int 03
:0041F42C CC                      int 03
:0041F42D CC                      int 03
:0041F42E CC                      int 03
:0041F42F CC                      int 03

* Referenced by a CALL at Address:
|:0041D605   
|
:0041F430 55                      push ebp
:0041F431 8BEC                    mov ebp, esp
:0041F433 51                      push ecx
:0041F434 894DFC                  mov dword ptr [ebp-04], ecx
:0041F437 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F43A 668B4D08                mov cx, word ptr [ebp+08]
:0041F43E 66894816                mov word ptr [eax+16], cx
:0041F442 8BE5                    mov esp, ebp
:0041F444 5D                      pop ebp
:0041F445 C20400                  ret 0004


:0041F448 CC                      int 03
:0041F449 CC                      int 03
:0041F44A CC                      int 03
:0041F44B CC                      int 03
:0041F44C CC                      int 03
:0041F44D CC                      int 03
:0041F44E CC                      int 03
:0041F44F CC                      int 03

* Referenced by a CALL at Address:
|:0041D5EE   
|
:0041F450 55                      push ebp
:0041F451 8BEC                    mov ebp, esp
:0041F453 51                      push ecx
:0041F454 894DFC                  mov dword ptr [ebp-04], ecx
:0041F457 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F45A 668B4D08                mov cx, word ptr [ebp+08]
:0041F45E 66894818                mov word ptr [eax+18], cx
:0041F462 8BE5                    mov esp, ebp
:0041F464 5D                      pop ebp
:0041F465 C20400                  ret 0004


:0041F468 CC                      int 03
:0041F469 CC                      int 03
:0041F46A CC                      int 03
:0041F46B CC                      int 03
:0041F46C CC                      int 03
:0041F46D CC                      int 03
:0041F46E CC                      int 03
:0041F46F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041D61C   , :0041DC77   
|
:0041F470 55                      push ebp
:0041F471 8BEC                    mov ebp, esp
:0041F473 51                      push ecx
:0041F474 894DFC                  mov dword ptr [ebp-04], ecx
:0041F477 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F47A 668B4D08                mov cx, word ptr [ebp+08]
:0041F47E 668908                  mov word ptr [eax], cx
:0041F481 8BE5                    mov esp, ebp
:0041F483 5D                      pop ebp
:0041F484 C20400                  ret 0004


:0041F487 CC                      int 03
:0041F488 CC                      int 03
:0041F489 CC                      int 03
:0041F48A CC                      int 03
:0041F48B CC                      int 03
:0041F48C CC                      int 03
:0041F48D CC                      int 03
:0041F48E CC                      int 03
:0041F48F CC                      int 03

* Referenced by a CALL at Address:
|:0041ABEE   
|
:0041F490 55                      push ebp
:0041F491 8BEC                    mov ebp, esp
:0041F493 51                      push ecx
:0041F494 894DFC                  mov dword ptr [ebp-04], ecx
:0041F497 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F49A 668B4D08                mov cx, word ptr [ebp+08]
:0041F49E 6689483A                mov word ptr [eax+3A], cx
:0041F4A2 8BE5                    mov esp, ebp
:0041F4A4 5D                      pop ebp
:0041F4A5 C20400                  ret 0004


:0041F4A8 CC                      int 03
:0041F4A9 CC                      int 03
:0041F4AA CC                      int 03
:0041F4AB CC                      int 03
:0041F4AC CC                      int 03
:0041F4AD CC                      int 03
:0041F4AE CC                      int 03
:0041F4AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041CD35   , :0041D2CF   , :0041E31E   , :0041E3DB   , :0041EDF1   
|
:0041F4B0 55                      push ebp
:0041F4B1 8BEC                    mov ebp, esp
:0041F4B3 51                      push ecx
:0041F4B4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F4B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F4BA 668B403A                mov ax, word ptr [eax+3A]
:0041F4BE 8BE5                    mov esp, ebp
:0041F4C0 5D                      pop ebp
:0041F4C1 C3                      ret


:0041F4C2 CC                      int 03
:0041F4C3 CC                      int 03
:0041F4C4 CC                      int 03
:0041F4C5 CC                      int 03
:0041F4C6 CC                      int 03
:0041F4C7 CC                      int 03
:0041F4C8 CC                      int 03
:0041F4C9 CC                      int 03
:0041F4CA CC                      int 03
:0041F4CB CC                      int 03
:0041F4CC CC                      int 03
:0041F4CD CC                      int 03
:0041F4CE CC                      int 03
:0041F4CF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041D4F8   , :0041D60F   
|
:0041F4D0 55                      push ebp
:0041F4D1 8BEC                    mov ebp, esp
:0041F4D3 51                      push ecx
:0041F4D4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F4D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F4DA 668B4D08                mov cx, word ptr [ebp+08]
:0041F4DE 6689481A                mov word ptr [eax+1A], cx
:0041F4E2 8BE5                    mov esp, ebp
:0041F4E4 5D                      pop ebp
:0041F4E5 C20400                  ret 0004


:0041F4E8 CC                      int 03
:0041F4E9 CC                      int 03
:0041F4EA CC                      int 03
:0041F4EB CC                      int 03
:0041F4EC CC                      int 03
:0041F4ED CC                      int 03
:0041F4EE CC                      int 03
:0041F4EF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041C4BC   , :0041C740   , :0041CCC4   , :0041DC00   , :0041E4FE   
|:0041EE5E   
|
:0041F4F0 55                      push ebp
:0041F4F1 8BEC                    mov ebp, esp
:0041F4F3 51                      push ecx
:0041F4F4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F4F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F4FA 668B400A                mov ax, word ptr [eax+0A]
:0041F4FE 8BE5                    mov esp, ebp
:0041F500 5D                      pop ebp
:0041F501 C3                      ret


:0041F502 CC                      int 03
:0041F503 CC                      int 03
:0041F504 CC                      int 03
:0041F505 CC                      int 03
:0041F506 CC                      int 03
:0041F507 CC                      int 03
:0041F508 CC                      int 03
:0041F509 CC                      int 03
:0041F50A CC                      int 03
:0041F50B CC                      int 03
:0041F50C CC                      int 03
:0041F50D CC                      int 03
:0041F50E CC                      int 03
:0041F50F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041B402   , :0041D667   
|
:0041F510 55                      push ebp
:0041F511 8BEC                    mov ebp, esp
:0041F513 51                      push ecx
:0041F514 894DFC                  mov dword ptr [ebp-04], ecx
:0041F517 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F51A 668B4D08                mov cx, word ptr [ebp+08]
:0041F51E 6689480C                mov word ptr [eax+0C], cx
:0041F522 8BE5                    mov esp, ebp
:0041F524 5D                      pop ebp
:0041F525 C20400                  ret 0004


:0041F528 CC                      int 03
:0041F529 CC                      int 03
:0041F52A CC                      int 03
:0041F52B CC                      int 03
:0041F52C CC                      int 03
:0041F52D CC                      int 03
:0041F52E CC                      int 03
:0041F52F CC                      int 03

* Referenced by a CALL at Address:
|:0041D674   
|
:0041F530 55                      push ebp
:0041F531 8BEC                    mov ebp, esp
:0041F533 51                      push ecx
:0041F534 894DFC                  mov dword ptr [ebp-04], ecx
:0041F537 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F53A 668B4D08                mov cx, word ptr [ebp+08]
:0041F53E 6689480E                mov word ptr [eax+0E], cx
:0041F542 8BE5                    mov esp, ebp
:0041F544 5D                      pop ebp
:0041F545 C20400                  ret 0004


:0041F548 CC                      int 03
:0041F549 CC                      int 03
:0041F54A CC                      int 03
:0041F54B CC                      int 03
:0041F54C CC                      int 03
:0041F54D CC                      int 03
:0041F54E CC                      int 03
:0041F54F CC                      int 03

* Referenced by a CALL at Address:
|:0041BA6E   
|
:0041F550 55                      push ebp
:0041F551 8BEC                    mov ebp, esp
:0041F553 51                      push ecx
:0041F554 894DFC                  mov dword ptr [ebp-04], ecx
:0041F557 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F55A 668B4D08                mov cx, word ptr [ebp+08]
:0041F55E 66894826                mov word ptr [eax+26], cx
:0041F562 8BE5                    mov esp, ebp
:0041F564 5D                      pop ebp
:0041F565 C20400                  ret 0004


:0041F568 CC                      int 03
:0041F569 CC                      int 03
:0041F56A CC                      int 03
:0041F56B CC                      int 03
:0041F56C CC                      int 03
:0041F56D CC                      int 03
:0041F56E CC                      int 03
:0041F56F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041BB9B   , :0041BBAC   
|
:0041F570 55                      push ebp
:0041F571 8BEC                    mov ebp, esp
:0041F573 51                      push ecx
:0041F574 894DFC                  mov dword ptr [ebp-04], ecx
:0041F577 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F57A 668B4026                mov ax, word ptr [eax+26]
:0041F57E 8BE5                    mov esp, ebp
:0041F580 5D                      pop ebp
:0041F581 C3                      ret


:0041F582 CC                      int 03
:0041F583 CC                      int 03
:0041F584 CC                      int 03
:0041F585 CC                      int 03
:0041F586 CC                      int 03
:0041F587 CC                      int 03
:0041F588 CC                      int 03
:0041F589 CC                      int 03
:0041F58A CC                      int 03
:0041F58B CC                      int 03
:0041F58C CC                      int 03
:0041F58D CC                      int 03
:0041F58E CC                      int 03
:0041F58F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041B37C   , :0041D633   
|
:0041F590 55                      push ebp
:0041F591 8BEC                    mov ebp, esp
:0041F593 51                      push ecx
:0041F594 894DFC                  mov dword ptr [ebp-04], ecx
:0041F597 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F59A 668B4D08                mov cx, word ptr [ebp+08]
:0041F59E 66894804                mov word ptr [eax+04], cx
:0041F5A2 8BE5                    mov esp, ebp
:0041F5A4 5D                      pop ebp
:0041F5A5 C20400                  ret 0004


:0041F5A8 CC                      int 03
:0041F5A9 CC                      int 03
:0041F5AA CC                      int 03
:0041F5AB CC                      int 03
:0041F5AC CC                      int 03
:0041F5AD CC                      int 03
:0041F5AE CC                      int 03
:0041F5AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041B3E1   , :0041D640   
|
:0041F5B0 55                      push ebp
:0041F5B1 8BEC                    mov ebp, esp
:0041F5B3 51                      push ecx
:0041F5B4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F5B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F5BA 668B4D08                mov cx, word ptr [ebp+08]
:0041F5BE 66894806                mov word ptr [eax+06], cx
:0041F5C2 8BE5                    mov esp, ebp
:0041F5C4 5D                      pop ebp
:0041F5C5 C20400                  ret 0004


:0041F5C8 CC                      int 03
:0041F5C9 CC                      int 03
:0041F5CA CC                      int 03
:0041F5CB CC                      int 03
:0041F5CC CC                      int 03
:0041F5CD CC                      int 03
:0041F5CE CC                      int 03
:0041F5CF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041B896   , :0041BABB   , :0041BB33   , :0041C44A   , :0041C749   
|:0041CBCB   , :0041CCA9   , :0041CCCD   , :0041D7ED   , :0041DC09   
|:0041DEFF   , :0041DF11   , :0041E4D2   , :0041EE70   
|
:0041F5D0 55                      push ebp
:0041F5D1 8BEC                    mov ebp, esp
:0041F5D3 51                      push ecx
:0041F5D4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F5D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F5DA 668B4006                mov ax, word ptr [eax+06]
:0041F5DE 8BE5                    mov esp, ebp
:0041F5E0 5D                      pop ebp
:0041F5E1 C3                      ret


:0041F5E2 CC                      int 03
:0041F5E3 CC                      int 03
:0041F5E4 CC                      int 03
:0041F5E5 CC                      int 03
:0041F5E6 CC                      int 03
:0041F5E7 CC                      int 03
:0041F5E8 CC                      int 03
:0041F5E9 CC                      int 03
:0041F5EA CC                      int 03
:0041F5EB CC                      int 03
:0041F5EC CC                      int 03
:0041F5ED CC                      int 03
:0041F5EE CC                      int 03
:0041F5EF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041B3EE   , :0041D64D   
|
:0041F5F0 55                      push ebp
:0041F5F1 8BEC                    mov ebp, esp
:0041F5F3 51                      push ecx
:0041F5F4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F5F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F5FA 668B4D08                mov cx, word ptr [ebp+08]
:0041F5FE 66894808                mov word ptr [eax+08], cx
:0041F602 8BE5                    mov esp, ebp
:0041F604 5D                      pop ebp
:0041F605 C20400                  ret 0004


:0041F608 CC                      int 03
:0041F609 CC                      int 03
:0041F60A CC                      int 03
:0041F60B CC                      int 03
:0041F60C CC                      int 03
:0041F60D CC                      int 03
:0041F60E CC                      int 03
:0041F60F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041B8A2   , :0041BA5E   , :0041E4DE   , :0041EE67   
|
:0041F610 55                      push ebp
:0041F611 8BEC                    mov ebp, esp
:0041F613 51                      push ecx
:0041F614 894DFC                  mov dword ptr [ebp-04], ecx
:0041F617 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F61A 668B4008                mov ax, word ptr [eax+08]
:0041F61E 8BE5                    mov esp, ebp
:0041F620 5D                      pop ebp
:0041F621 C3                      ret


:0041F622 CC                      int 03
:0041F623 CC                      int 03
:0041F624 CC                      int 03
:0041F625 CC                      int 03
:0041F626 CC                      int 03
:0041F627 CC                      int 03
:0041F628 CC                      int 03
:0041F629 CC                      int 03
:0041F62A CC                      int 03
:0041F62B CC                      int 03
:0041F62C CC                      int 03
:0041F62D CC                      int 03
:0041F62E CC                      int 03
:0041F62F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041AC08   , :0041CD2D   , :0041D6C4   , :0041E20E   , :0041E478   
|
:0041F630 55                      push ebp
:0041F631 8BEC                    mov ebp, esp
:0041F633 51                      push ecx
:0041F634 894DFC                  mov dword ptr [ebp-04], ecx
:0041F637 8B450C                  mov eax, dword ptr [ebp+0C]
:0041F63A 25FFFF0000              and eax, 0000FFFF
:0041F63F F7D0                    not eax
:0041F641 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F644 668B5128                mov dx, word ptr [ecx+28]
:0041F648 6623D0                  and dx, ax
:0041F64B 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F64E 66895028                mov word ptr [eax+28], dx
:0041F652 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F655 81E1FFFF0000            and ecx, 0000FFFF
:0041F65B 8B550C                  mov edx, dword ptr [ebp+0C]
:0041F65E 81E2FFFF0000            and edx, 0000FFFF
:0041F664 23CA                    and ecx, edx
:0041F666 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F669 668B5028                mov dx, word ptr [eax+28]
:0041F66D 660BD1                  or dx, cx
:0041F670 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F673 66895028                mov word ptr [eax+28], dx
:0041F677 8BE5                    mov esp, ebp
:0041F679 5D                      pop ebp
:0041F67A C20800                  ret 0008


:0041F67D CC                      int 03
:0041F67E CC                      int 03
:0041F67F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041A9D3   , :0041AC8B   , :004219AB   , :00438782   , :0044F287   
|
:0041F680 55                      push ebp
:0041F681 8BEC                    mov ebp, esp
:0041F683 51                      push ecx
:0041F684 894DFC                  mov dword ptr [ebp-04], ecx
:0041F687 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F68A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041F68D 894810                  mov dword ptr [eax+10], ecx
:0041F690 8BE5                    mov esp, ebp
:0041F692 5D                      pop ebp
:0041F693 C20400                  ret 0004


:0041F696 CC                      int 03
:0041F697 CC                      int 03
:0041F698 CC                      int 03
:0041F699 CC                      int 03
:0041F69A CC                      int 03
:0041F69B CC                      int 03
:0041F69C CC                      int 03
:0041F69D CC                      int 03
:0041F69E CC                      int 03
:0041F69F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041D686   , :0041E59E   
|
:0041F6A0 55                      push ebp
:0041F6A1 8BEC                    mov ebp, esp
:0041F6A3 51                      push ecx
:0041F6A4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F6A7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F6AA 668B4D08                mov cx, word ptr [ebp+08]
:0041F6AE 6689481E                mov word ptr [eax+1E], cx
:0041F6B2 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F6B5 668B450C                mov ax, word ptr [ebp+0C]
:0041F6B9 66894220                mov word ptr [edx+20], ax
:0041F6BD 8BE5                    mov esp, ebp
:0041F6BF 5D                      pop ebp
:0041F6C0 C20800                  ret 0008


:0041F6C3 CC                      int 03
:0041F6C4 CC                      int 03
:0041F6C5 CC                      int 03
:0041F6C6 CC                      int 03
:0041F6C7 CC                      int 03
:0041F6C8 CC                      int 03
:0041F6C9 CC                      int 03
:0041F6CA CC                      int 03
:0041F6CB CC                      int 03
:0041F6CC CC                      int 03
:0041F6CD CC                      int 03
:0041F6CE CC                      int 03
:0041F6CF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041D34E   , :0041E345   
|
:0041F6D0 55                      push ebp
:0041F6D1 8BEC                    mov ebp, esp
:0041F6D3 51                      push ecx
:0041F6D4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F6D7 8B4508                  mov eax, dword ptr [ebp+08]
:0041F6DA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F6DD 668B511E                mov dx, word ptr [ecx+1E]
:0041F6E1 668910                  mov word ptr [eax], dx
:0041F6E4 8B450C                  mov eax, dword ptr [ebp+0C]
:0041F6E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F6EA 668B5120                mov dx, word ptr [ecx+20]
:0041F6EE 668910                  mov word ptr [eax], dx
:0041F6F1 8BE5                    mov esp, ebp
:0041F6F3 5D                      pop ebp
:0041F6F4 C20800                  ret 0008


:0041F6F7 CC                      int 03
:0041F6F8 CC                      int 03
:0041F6F9 CC                      int 03
:0041F6FA CC                      int 03
:0041F6FB CC                      int 03
:0041F6FC CC                      int 03
:0041F6FD CC                      int 03
:0041F6FE CC                      int 03
:0041F6FF CC                      int 03

* Referenced by a CALL at Address:
|:0041D698   
|
:0041F700 55                      push ebp
:0041F701 8BEC                    mov ebp, esp
:0041F703 51                      push ecx
:0041F704 894DFC                  mov dword ptr [ebp-04], ecx
:0041F707 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F70A 668B4D08                mov cx, word ptr [ebp+08]
:0041F70E 66894822                mov word ptr [eax+22], cx
:0041F712 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F715 668B450C                mov ax, word ptr [ebp+0C]
:0041F719 66894224                mov word ptr [edx+24], ax
:0041F71D 8BE5                    mov esp, ebp
:0041F71F 5D                      pop ebp
:0041F720 C20800                  ret 0008


:0041F723 CC                      int 03
:0041F724 CC                      int 03
:0041F725 CC                      int 03
:0041F726 CC                      int 03
:0041F727 CC                      int 03
:0041F728 CC                      int 03
:0041F729 CC                      int 03
:0041F72A CC                      int 03
:0041F72B CC                      int 03
:0041F72C CC                      int 03
:0041F72D CC                      int 03
:0041F72E CC                      int 03
:0041F72F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041C47C   , :0041D6B2   , :0041DD7B   
|
:0041F730 55                      push ebp
:0041F731 8BEC                    mov ebp, esp
:0041F733 51                      push ecx
:0041F734 894DFC                  mov dword ptr [ebp-04], ecx
:0041F737 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F73A 668B4D08                mov cx, word ptr [ebp+08]
:0041F73E 6689483C                mov word ptr [eax+3C], cx
:0041F742 8BE5                    mov esp, ebp
:0041F744 5D                      pop ebp
:0041F745 C20400                  ret 0004


:0041F748 CC                      int 03
:0041F749 CC                      int 03
:0041F74A CC                      int 03
:0041F74B CC                      int 03
:0041F74C CC                      int 03
:0041F74D CC                      int 03
:0041F74E CC                      int 03
:0041F74F CC                      int 03

* Referenced by a CALL at Address:
|:0041DEC1   
|
:0041F750 55                      push ebp
:0041F751 8BEC                    mov ebp, esp
:0041F753 51                      push ecx
:0041F754 894DFC                  mov dword ptr [ebp-04], ecx
:0041F757 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F75A 668B401C                mov ax, word ptr [eax+1C]
:0041F75E 8BE5                    mov esp, ebp
:0041F760 5D                      pop ebp
:0041F761 C3                      ret


:0041F762 CC                      int 03
:0041F763 CC                      int 03
:0041F764 CC                      int 03
:0041F765 CC                      int 03
:0041F766 CC                      int 03
:0041F767 CC                      int 03
:0041F768 CC                      int 03
:0041F769 CC                      int 03
:0041F76A CC                      int 03
:0041F76B CC                      int 03
:0041F76C CC                      int 03
:0041F76D CC                      int 03
:0041F76E CC                      int 03
:0041F76F CC                      int 03

* Referenced by a CALL at Address:
|:0041DD65   
|
:0041F770 55                      push ebp
:0041F771 8BEC                    mov ebp, esp
:0041F773 51                      push ecx
:0041F774 894DFC                  mov dword ptr [ebp-04], ecx
:0041F777 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F77A 668B403C                mov ax, word ptr [eax+3C]
:0041F77E 8BE5                    mov esp, ebp
:0041F780 5D                      pop ebp
:0041F781 C3                      ret


:0041F782 CC                      int 03
:0041F783 CC                      int 03
:0041F784 CC                      int 03
:0041F785 CC                      int 03
:0041F786 CC                      int 03
:0041F787 CC                      int 03
:0041F788 CC                      int 03
:0041F789 CC                      int 03
:0041F78A CC                      int 03
:0041F78B CC                      int 03
:0041F78C CC                      int 03
:0041F78D CC                      int 03
:0041F78E CC                      int 03
:0041F78F CC                      int 03

* Referenced by a CALL at Address:
|:0041C499   
|
:0041F790 55                      push ebp
:0041F791 8BEC                    mov ebp, esp
:0041F793 51                      push ecx
:0041F794 894DFC                  mov dword ptr [ebp-04], ecx
:0041F797 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F79A 668B4D08                mov cx, word ptr [ebp+08]
:0041F79E 6689483E                mov word ptr [eax+3E], cx
:0041F7A2 8BE5                    mov esp, ebp
:0041F7A4 5D                      pop ebp
:0041F7A5 C20400                  ret 0004


:0041F7A8 CC                      int 03
:0041F7A9 CC                      int 03
:0041F7AA CC                      int 03
:0041F7AB CC                      int 03
:0041F7AC CC                      int 03
:0041F7AD CC                      int 03
:0041F7AE CC                      int 03
:0041F7AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041C7A1   , :0041CD52   , :0041D4EE   , :0041D6D1   , :0041DC63   
|
:0041F7B0 55                      push ebp
:0041F7B1 8BEC                    mov ebp, esp
:0041F7B3 51                      push ecx
:0041F7B4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F7B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F7BA 668B4D08                mov cx, word ptr [ebp+08]
:0041F7BE 6689482C                mov word ptr [eax+2C], cx
:0041F7C2 8BE5                    mov esp, ebp
:0041F7C4 5D                      pop ebp
:0041F7C5 C20400                  ret 0004


:0041F7C8 CC                      int 03
:0041F7C9 CC                      int 03
:0041F7CA CC                      int 03
:0041F7CB CC                      int 03
:0041F7CC CC                      int 03
:0041F7CD CC                      int 03
:0041F7CE CC                      int 03
:0041F7CF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041A9C9   , :0041D523   , :0041D5FB   , :0041DF34   , :0041DF58   
|:0041E058   
|
:0041F7D0 55                      push ebp
:0041F7D1 8BEC                    mov ebp, esp
:0041F7D3 51                      push ecx
:0041F7D4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F7D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F7DA 668B4D08                mov cx, word ptr [ebp+08]
:0041F7DE 6689482E                mov word ptr [eax+2E], cx
:0041F7E2 8BE5                    mov esp, ebp
:0041F7E4 5D                      pop ebp
:0041F7E5 C20400                  ret 0004


:0041F7E8 CC                      int 03
:0041F7E9 CC                      int 03
:0041F7EA CC                      int 03
:0041F7EB CC                      int 03
:0041F7EC CC                      int 03
:0041F7ED CC                      int 03
:0041F7EE CC                      int 03
:0041F7EF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041D3BA   , :0041DF3C   , :0041EE43   
|
:0041F7F0 55                      push ebp
:0041F7F1 8BEC                    mov ebp, esp
:0041F7F3 51                      push ecx
:0041F7F4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F7F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F7FA 668B402E                mov ax, word ptr [eax+2E]
:0041F7FE 8BE5                    mov esp, ebp
:0041F800 5D                      pop ebp
:0041F801 C3                      ret


:0041F802 CC                      int 03
:0041F803 CC                      int 03
:0041F804 CC                      int 03
:0041F805 CC                      int 03
:0041F806 CC                      int 03
:0041F807 CC                      int 03
:0041F808 CC                      int 03
:0041F809 CC                      int 03
:0041F80A CC                      int 03
:0041F80B CC                      int 03
:0041F80C CC                      int 03
:0041F80D CC                      int 03
:0041F80E CC                      int 03
:0041F80F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041C797   , :0041CD1B   , :0041CD48   , :0041D6A5   , :0041DC59   
|:0041DD5D   
|
:0041F810 55                      push ebp
:0041F811 8BEC                    mov ebp, esp
:0041F813 51                      push ecx
:0041F814 894DFC                  mov dword ptr [ebp-04], ecx
:0041F817 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F81A 668B4D08                mov cx, word ptr [ebp+08]
:0041F81E 66894830                mov word ptr [eax+30], cx
:0041F822 8BE5                    mov esp, ebp
:0041F824 5D                      pop ebp
:0041F825 C20400                  ret 0004


:0041F828 CC                      int 03
:0041F829 CC                      int 03
:0041F82A CC                      int 03
:0041F82B CC                      int 03
:0041F82C CC                      int 03
:0041F82D CC                      int 03
:0041F82E CC                      int 03
:0041F82F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041C4C8   , :0041C737   , :0041CCBB   , :0041DBF7   , :0041E523   
|:0041EE55   
|
:0041F830 55                      push ebp
:0041F831 8BEC                    mov ebp, esp
:0041F833 51                      push ecx
:0041F834 894DFC                  mov dword ptr [ebp-04], ecx
:0041F837 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F83A 668B400C                mov ax, word ptr [eax+0C]
:0041F83E 8BE5                    mov esp, ebp
:0041F840 5D                      pop ebp
:0041F841 C3                      ret


:0041F842 CC                      int 03
:0041F843 CC                      int 03
:0041F844 CC                      int 03
:0041F845 CC                      int 03
:0041F846 CC                      int 03
:0041F847 CC                      int 03
:0041F848 CC                      int 03
:0041F849 CC                      int 03
:0041F84A CC                      int 03
:0041F84B CC                      int 03
:0041F84C CC                      int 03
:0041F84D CC                      int 03
:0041F84E CC                      int 03
:0041F84F CC                      int 03

* Referenced by a CALL at Address:
|:0041E5D6   
|
:0041F850 55                      push ebp
:0041F851 8BEC                    mov ebp, esp
:0041F853 51                      push ecx
:0041F854 894DFC                  mov dword ptr [ebp-04], ecx
:0041F857 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F85A 33C9                    xor ecx, ecx
:0041F85C 668B482E                mov cx, word ptr [eax+2E]
:0041F860 6BC90E                  imul ecx, 0000000E
:0041F863 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F866 33C0                    xor eax, eax
:0041F868 668B422A                mov ax, word ptr [edx+2A]
:0041F86C 03C8                    add ecx, eax
:0041F86E 6BC930                  imul ecx, 00000030
:0041F871 C1E106                  shl ecx, 06
:0041F874 8B55FC                  mov edx, dword ptr [ebp-04]
:0041F877 8B4210                  mov eax, dword ptr [edx+10]
:0041F87A 03C1                    add eax, ecx
:0041F87C 8BE5                    mov esp, ebp
:0041F87E 5D                      pop ebp
:0041F87F C3                      ret



* Referenced by a CALL at Address:
|:0041E58C   
|
:0041F880 55                      push ebp
:0041F881 8BEC                    mov ebp, esp
:0041F883 51                      push ecx
:0041F884 894DFC                  mov dword ptr [ebp-04], ecx
:0041F887 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F88A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F88D 668B511E                mov dx, word ptr [ecx+1E]
:0041F891 66895022                mov word ptr [eax+22], dx
:0041F895 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F898 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F89B 668B5120                mov dx, word ptr [ecx+20]
:0041F89F 66895024                mov word ptr [eax+24], dx
:0041F8A3 8BE5                    mov esp, ebp
:0041F8A5 5D                      pop ebp
:0041F8A6 C3                      ret


:0041F8A7 CC                      int 03
:0041F8A8 CC                      int 03
:0041F8A9 CC                      int 03
:0041F8AA CC                      int 03
:0041F8AB CC                      int 03
:0041F8AC CC                      int 03
:0041F8AD CC                      int 03
:0041F8AE CC                      int 03
:0041F8AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041B464   , :0041D9DD   , :0041E4BC   , :0041EE2E   
|
:0041F8B0 55                      push ebp
:0041F8B1 8BEC                    mov ebp, esp
:0041F8B3 51                      push ecx
:0041F8B4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F8B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F8BA 668B00                  mov ax, word ptr [eax]
:0041F8BD 8BE5                    mov esp, ebp
:0041F8BF 5D                      pop ebp
:0041F8C0 C3                      ret


:0041F8C1 CC                      int 03
:0041F8C2 CC                      int 03
:0041F8C3 CC                      int 03
:0041F8C4 CC                      int 03
:0041F8C5 CC                      int 03
:0041F8C6 CC                      int 03
:0041F8C7 CC                      int 03
:0041F8C8 CC                      int 03
:0041F8C9 CC                      int 03
:0041F8CA CC                      int 03
:0041F8CB CC                      int 03
:0041F8CC CC                      int 03
:0041F8CD CC                      int 03
:0041F8CE CC                      int 03
:0041F8CF CC                      int 03

* Referenced by a CALL at Address:
|:0041EE4C   
|
:0041F8D0 55                      push ebp
:0041F8D1 8BEC                    mov ebp, esp
:0041F8D3 51                      push ecx
:0041F8D4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F8D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F8DA 668B400E                mov ax, word ptr [eax+0E]
:0041F8DE 8BE5                    mov esp, ebp
:0041F8E0 5D                      pop ebp
:0041F8E1 C3                      ret


:0041F8E2 CC                      int 03
:0041F8E3 CC                      int 03
:0041F8E4 CC                      int 03
:0041F8E5 CC                      int 03
:0041F8E6 CC                      int 03
:0041F8E7 CC                      int 03
:0041F8E8 CC                      int 03
:0041F8E9 CC                      int 03
:0041F8EA CC                      int 03
:0041F8EB CC                      int 03
:0041F8EC CC                      int 03
:0041F8ED CC                      int 03
:0041F8EE CC                      int 03
:0041F8EF CC                      int 03

* Referenced by a CALL at Address:
|:0041EE3A   
|
:0041F8F0 55                      push ebp
:0041F8F1 8BEC                    mov ebp, esp
:0041F8F3 51                      push ecx
:0041F8F4 894DFC                  mov dword ptr [ebp-04], ecx
:0041F8F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0041F8FA 668B402C                mov ax, word ptr [eax+2C]
:0041F8FE 8BE5                    mov esp, ebp
:0041F900 5D                      pop ebp
:0041F901 C3                      ret


:0041F902 CC                      int 03
:0041F903 CC                      int 03
:0041F904 CC                      int 03
:0041F905 CC                      int 03
:0041F906 CC                      int 03
:0041F907 CC                      int 03
:0041F908 CC                      int 03
:0041F909 CC                      int 03
:0041F90A CC                      int 03
:0041F90B CC                      int 03
:0041F90C CC                      int 03
:0041F90D CC                      int 03
:0041F90E CC                      int 03
:0041F90F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041EF35   , :0042F5C9   , :00432BD3   , :00433927   , :00433961   
|:0043602D   , :00436244   , :00436553   , :00437286   , :004372BC   
|:00437F89   , :00437FD1   , :00438368   , :0043839F   , :004385A3   
|:004385DA   , :0043D107   , :0043D140   , :0043EFC4   , :0043F00B   
|:00441BFF   , :00441C39   , :004423DE   , :00442A4E   , :00442B57   
|:00443BFE   , :00443C62   , :00448255   , :0044862A   , :00448839   
|:00448C34   , :00448E2D   , :00448F83   , :004490DA   , :00449231   
|:0044950C   , :00449632   , :00449894   , :00449FEC   , :0044A051   
|:0044D75B   
|
:0041F910 55                      push ebp
:0041F911 8BEC                    mov ebp, esp
:0041F913 51                      push ecx
:0041F914 894DFC                  mov dword ptr [ebp-04], ecx
:0041F917 8B4508                  mov eax, dword ptr [ebp+08]
:0041F91A 50                      push eax
:0041F91B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F91E E82CFC0000              call 0042F54F
:0041F923 8BE5                    mov esp, ebp
:0041F925 5D                      pop ebp
:0041F926 C20400                  ret 0004


:0041F929 CC                      int 03
:0041F92A CC                      int 03
:0041F92B CC                      int 03
:0041F92C CC                      int 03
:0041F92D CC                      int 03
:0041F92E CC                      int 03
:0041F92F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041EFA8   , :0042F5D8   , :0042F5F2   , :0042F8E2   , :0044CF3E   
|:0044D016   , :0044E4D7   , :004565F3   , :00456667   , :0045E1EE   
|
:0041F930 55                      push ebp
:0041F931 8BEC                    mov ebp, esp
:0041F933 51                      push ecx
:0041F934 894DFC                  mov dword ptr [ebp-04], ecx
:0041F937 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041F93A E82AFC0000              call 0042F569
:0041F93F F7D8                    neg eax
:0041F941 1BC0                    sbb eax, eax
:0041F943 40                      inc eax
:0041F944 8BE5                    mov esp, ebp
:0041F946 5D                      pop ebp
:0041F947 C3                      ret


:0041F948 CC                      int 03
:0041F949 CC                      int 03
:0041F94A CC                      int 03
:0041F94B CC                      int 03
:0041F94C CC                      int 03
:0041F94D CC                      int 03
:0041F94E CC                      int 03
:0041F94F CC                      int 03
:0041F950 55                      push ebp
:0041F951 8BEC                    mov ebp, esp
:0041F953 E802000000              call 0041F95A
:0041F958 5D                      pop ebp
:0041F959 C3                      ret



* Referenced by a CALL at Address:
|:0041F953   
|
:0041F95A 55                      push ebp
:0041F95B 8BEC                    mov ebp, esp
:0041F95D B9A8464900              mov ecx, 004946A8
:0041F962 E8A9E40000              call 0042DE10
:0041F967 5D                      pop ebp
:0041F968 C3                      ret


:0041F969 55                      push ebp
:0041F96A 8BEC                    mov ebp, esp
:0041F96C E802000000              call 0041F973
:0041F971 5D                      pop ebp
:0041F972 C3                      ret



* Referenced by a CALL at Address:
|:0041F96C   
|
:0041F973 55                      push ebp
:0041F974 8BEC                    mov ebp, esp
:0041F976 B958474900              mov ecx, 00494758
:0041F97B E890E40000              call 0042DE10
:0041F980 5D                      pop ebp
:0041F981 C3                      ret


:0041F982 55                      push ebp
:0041F983 8BEC                    mov ebp, esp
:0041F985 E802000000              call 0041F98C
:0041F98A 5D                      pop ebp
:0041F98B C3                      ret



* Referenced by a CALL at Address:
|:0041F985   
|
:0041F98C 55                      push ebp
:0041F98D 8BEC                    mov ebp, esp
:0041F98F B910474900              mov ecx, 00494710
:0041F994 E877E40000              call 0042DE10
:0041F999 5D                      pop ebp
:0041F99A C3                      ret


:0041F99B 55                      push ebp
:0041F99C 8BEC                    mov ebp, esp
:0041F99E E802000000              call 0041F9A5
:0041F9A3 5D                      pop ebp
:0041F9A4 C3                      ret



* Referenced by a CALL at Address:
|:0041F99E   
|
:0041F9A5 55                      push ebp
:0041F9A6 8BEC                    mov ebp, esp
:0041F9A8 B940474900              mov ecx, 00494740
:0041F9AD E85EE40000              call 0042DE10
:0041F9B2 5D                      pop ebp
:0041F9B3 C3                      ret


:0041F9B4 55                      push ebp
:0041F9B5 8BEC                    mov ebp, esp
:0041F9B7 E807000000              call 0041F9C3
:0041F9BC E811000000              call 0041F9D2
:0041F9C1 5D                      pop ebp
:0041F9C2 C3                      ret



* Referenced by a CALL at Address:
|:0041F9B7   
|
:0041F9C3 55                      push ebp
:0041F9C4 8BEC                    mov ebp, esp
:0041F9C6 B9C0464900              mov ecx, 004946C0
:0041F9CB E8F0E30000              call 0042DDC0
:0041F9D0 5D                      pop ebp
:0041F9D1 C3                      ret



* Referenced by a CALL at Address:
|:0041F9BC   
|
:0041F9D2 55                      push ebp
:0041F9D3 8BEC                    mov ebp, esp
:0041F9D5 68E4F94100              push 0041F9E4
:0041F9DA E8D1FA0400              call 0046F4B0
:0041F9DF 83C404                  add esp, 00000004
:0041F9E2 5D                      pop ebp
:0041F9E3 C3                      ret


:0041F9E4 55                      push ebp
:0041F9E5 8BEC                    mov ebp, esp
:0041F9E7 B9C0464900              mov ecx, 004946C0
:0041F9EC E81FB20300              call 0045AC10
:0041F9F1 5D                      pop ebp
:0041F9F2 C3                      ret


:0041F9F3 55                      push ebp
:0041F9F4 8BEC                    mov ebp, esp
:0041F9F6 E802000000              call 0041F9FD
:0041F9FB 5D                      pop ebp
:0041F9FC C3                      ret



* Referenced by a CALL at Address:
|:0041F9F6   
|
:0041F9FD 55                      push ebp
:0041F9FE 8BEC                    mov ebp, esp
:0041FA00 B928474900              mov ecx, 00494728
:0041FA05 E826E40000              call 0042DE30
:0041FA0A 5D                      pop ebp
:0041FA0B C3                      ret


:0041FA0C 55                      push ebp
:0041FA0D 8BEC                    mov ebp, esp
:0041FA0F E802000000              call 0041FA16
:0041FA14 5D                      pop ebp
:0041FA15 C3                      ret



* Referenced by a CALL at Address:
|:0041FA0F   
|
:0041FA16 55                      push ebp
:0041FA17 8BEC                    mov ebp, esp
:0041FA19 B938464900              mov ecx, 00494638
:0041FA1E E86DE30000              call 0042DD90
:0041FA23 5D                      pop ebp
:0041FA24 C3                      ret


:0041FA25 55                      push ebp
:0041FA26 8BEC                    mov ebp, esp
:0041FA28 E802000000              call 0041FA2F
:0041FA2D 5D                      pop ebp
:0041FA2E C3                      ret



* Referenced by a CALL at Address:
|:0041FA28   
|
:0041FA2F 55                      push ebp
:0041FA30 8BEC                    mov ebp, esp
:0041FA32 B9D0454900              mov ecx, 004945D0
:0041FA37 E854E30000              call 0042DD90
:0041FA3C 5D                      pop ebp
:0041FA3D C3                      ret



* Referenced by a CALL at Address:
|:0041DFF8   
|
:0041FA3E 55                      push ebp
:0041FA3F 8BEC                    mov ebp, esp
:0041FA41 83EC58                  sub esp, 00000058
:0041FA44 56                      push esi
:0041FA45 8B4508                  mov eax, dword ptr [ebp+08]
:0041FA48 50                      push eax
:0041FA49 E8E117FEFF              call 0040122F
:0041FA4E 83C404                  add esp, 00000004
:0041FA51 8945FC                  mov dword ptr [ebp-04], eax
:0041FA54 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FA57 890D54474900            mov dword ptr [00494754], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FCE7(U)
|
:0041FA5D 8B55FC                  mov edx, dword ptr [ebp-04]
:0041FA60 52                      push edx
:0041FA61 E88B020000              call 0041FCF1
:0041FA66 83C404                  add esp, 00000004
:0041FA69 8845B4                  mov byte ptr [ebp-4C], al
:0041FA6C 8B45B4                  mov eax, dword ptr [ebp-4C]
:0041FA6F 25FF000000              and eax, 000000FF
:0041FA74 3DFF000000              cmp eax, 000000FF
:0041FA79 7505                    jne 0041FA80
:0041FA7B E96C020000              jmp 0041FCEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FA79(C)
|
:0041FA80 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:0041FA83 81E1FF000000            and ecx, 000000FF
:0041FA89 8B148DF04C4B00          mov edx, dword ptr [4*ecx+004B4CF0]
:0041FA90 8955AC                  mov dword ptr [ebp-54], edx
:0041FA93 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0041FA96 E8E536FEFF              call 00403180
:0041FA9B 8945B0                  mov dword ptr [ebp-50], eax
:0041FA9E 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0041FAA1 6BC950                  imul ecx, 00000050
:0041FAA4 81C1787F4900            add ecx, 00497F78
:0041FAAA E8F103FFFF              call 0040FEA0
:0041FAAF 25FF000000              and eax, 000000FF
:0041FAB4 6BC005                  imul eax, 00000005
:0041FAB7 8945B8                  mov dword ptr [ebp-48], eax
:0041FABA 6A00                    push 00000000
:0041FABC 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FABF 50                      push eax

* Possible StringData Ref from Data Obj ->"CP1HԳݭnC"
                                  |
:0041FAC0 6804CC4700              push 0047CC04
:0041FAC5 E8E4000100              call 0042FBAE
:0041FACA 83C40C                  add esp, 0000000C
:0041FACD B978294B00              mov ecx, 004B2978
:0041FAD2 E8096F0100              call 004369E0
:0041FAD7 3B45B8                  cmp eax, dword ptr [ebp-48]
:0041FADA 7318                    jnb 0041FAF4
:0041FADC 6A00                    push 00000000
:0041FADE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FAE1 51                      push ecx

* Possible StringData Ref from Data Obj ->"C"
                                  |
:0041FAE2 681CCC4700              push 0047CC1C
:0041FAE7 E8C2000100              call 0042FBAE
:0041FAEC 83C40C                  add esp, 0000000C
:0041FAEF E9F8010000              jmp 0041FCEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FADA(C)
|
:0041FAF4 8B55B8                  mov edx, dword ptr [ebp-48]
:0041FAF7 52                      push edx

* Possible StringData Ref from Data Obj ->"I%dܡH"
                                  |
:0041FAF8 6828CC4700              push 0047CC28
:0041FAFD 8D45BC                  lea eax, dword ptr [ebp-44]
:0041FB00 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0041FB01 FF1504D74B00            Call dword ptr [004BD704]
:0041FB07 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"T{"
                                  |
:0041FB0A 6838CC4700              push 0047CC38
:0041FB0F 8D4DBC                  lea ecx, dword ptr [ebp-44]
:0041FB12 51                      push ecx
:0041FB13 E8C89D0400              call 004698E0
:0041FB18 83C408                  add esp, 00000008
:0041FB1B 85C0                    test eax, eax
:0041FB1D 0F84C4010000            je 0041FCE7
:0041FB23 B978294B00              mov ecx, 004B2978
:0041FB28 E8B36E0100              call 004369E0
:0041FB2D 2B45B8                  sub eax, dword ptr [ebp-48]
:0041FB30 50                      push eax
:0041FB31 B978294B00              mov ecx, 004B2978
:0041FB36 E8855BFEFF              call 004056C0
:0041FB3B 8B55B8                  mov edx, dword ptr [ebp-48]
:0041FB3E 52                      push edx
:0041FB3F 8B45B4                  mov eax, dword ptr [ebp-4C]
:0041FB42 25FF000000              and eax, 000000FF
:0041FB47 50                      push eax
:0041FB48 E8D7020000              call 0041FE24
:0041FB4D 83C408                  add esp, 00000008
:0041FB50 85C0                    test eax, eax
:0041FB52 7451                    je 0041FBA5
:0041FB54 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0041FB57 6BC950                  imul ecx, 00000050
:0041FB5A 81C1787F4900            add ecx, 00497F78
:0041FB60 E84B9BFFFF              call 004196B0
:0041FB65 25FF000000              and eax, 000000FF
:0041FB6A 83C001                  add eax, 00000001
:0041FB6D 50                      push eax
:0041FB6E 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0041FB71 6BC950                  imul ecx, 00000050
:0041FB74 81C1787F4900            add ecx, 00497F78
:0041FB7A E871E20000              call 0042DDF0
:0041FB7F 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0041FB82 6BC950                  imul ecx, 00000050
:0041FB85 81C1787F4900            add ecx, 00497F78
:0041FB8B E87435FEFF              call 00403104
:0041FB90 50                      push eax

* Possible StringData Ref from Data Obj ->"%sBWɤF1IC"
                                  |
:0041FB91 6844CC4700              push 0047CC44
:0041FB96 6A00                    push 00000000
:0041FB98 E896180100              call 00431433
:0041FB9D 83C40C                  add esp, 0000000C
:0041FBA0 E942010000              jmp 0041FCE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FB52(C)
|
:0041FBA5 833D8047490000          cmp dword ptr [00494780], 00000000
:0041FBAC 753B                    jne 0041FBE9

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0041FBAE 6A02                    push 00000002
:0041FBB0 E8FB870500              call 004783B0
:0041FBB5 83C404                  add esp, 00000004
:0041FBB8 85C0                    test eax, eax
:0041FBBA 7415                    je 0041FBD1
:0041FBBC 6A00                    push 00000000
:0041FBBE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FBC1 51                      push ecx

* Possible StringData Ref from Data Obj ->"jVү}KK"
                                  |
:0041FBC2 6858CC4700              push 0047CC58
:0041FBC7 E8E2FF0000              call 0042FBAE
:0041FBCC 83C40C                  add esp, 0000000C
:0041FBCF EB13                    jmp 0041FBE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FBBA(C)
|
:0041FBD1 6A00                    push 00000000
:0041FBD3 8B55FC                  mov edx, dword ptr [ebp-04]
:0041FBD6 52                      push edx

* Possible StringData Ref from Data Obj ->"TQpAWC"
                                  |
:0041FBD7 686CCC4700              push 0047CC6C
:0041FBDC E8CDFF0000              call 0042FBAE
:0041FBE1 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FBCF(U)
|
:0041FBE4 E9FE000000              jmp 0041FCE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FBAC(C)
|
:0041FBE9 833D8047490001          cmp dword ptr [00494780], 00000001
:0041FBF0 753B                    jne 0041FC2D
:0041FBF2 6A00                    push 00000000
:0041FBF4 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FBF7 50                      push eax

* Possible StringData Ref from Data Obj ->"AҥHhٽC"
                                  |
:0041FBF8 6880CC4700              push 0047CC80
:0041FBFD E8ACFF0000              call 0042FBAE
:0041FC02 83C40C                  add esp, 0000000C
:0041FC05 B978294B00              mov ecx, 004B2978
:0041FC0A E8D16D0100              call 004369E0
:0041FC0F 8BF0                    mov esi, eax
:0041FC11 B928474900              mov ecx, 00494728
:0041FC16 E865E20000              call 0042DE80
:0041FC1B 03F0                    add esi, eax
:0041FC1D 56                      push esi
:0041FC1E B978294B00              mov ecx, 004B2978
:0041FC23 E8985AFEFF              call 004056C0
:0041FC28 E9BA000000              jmp 0041FCE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FBF0(C)
|
:0041FC2D 833D8047490002          cmp dword ptr [00494780], 00000002
:0041FC34 7526                    jne 0041FC5C
:0041FC36 6A00                    push 00000000
:0041FC38 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FC3B 51                      push ecx

* Possible StringData Ref from Data Obj ->"o̤wgSHԳӧAFCAЧAWOFA"
                                        ->"̡C"
                                  |
:0041FC3C 689CCC4700              push 0047CC9C
:0041FC41 E868FF0000              call 0042FBAE
:0041FC46 83C40C                  add esp, 0000000C
:0041FC49 E840020000              call 0041FE8E
:0041FC4E 85C0                    test eax, eax
:0041FC50 7505                    jne 0041FC57
:0041FC52 E995000000              jmp 0041FCEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FC50(C)
|
:0041FC57 E98B000000              jmp 0041FCE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FC34(C)
|
:0041FC5C 6A00                    push 00000000
:0041FC5E 8B55FC                  mov edx, dword ptr [ebp-04]
:0041FC61 52                      push edx

* Possible StringData Ref from Data Obj ->"pGOԡAiNSRFC"
                                  |
:0041FC62 68D4CC4700              push 0047CCD4
:0041FC67 E842FF0000              call 0042FBAE
:0041FC6C 83C40C                  add esp, 0000000C
:0041FC6F 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0041FC72 6BC950                  imul ecx, 00000050
:0041FC75 81C1787F4900            add ecx, 00497F78
:0041FC7B E8309AFFFF              call 004196B0
:0041FC80 25FF000000              and eax, 000000FF
:0041FC85 83E801                  sub eax, 00000001
:0041FC88 85C0                    test eax, eax
:0041FC8A 7D09                    jge 0041FC95
:0041FC8C C745A800000000          mov [ebp-58], 00000000
:0041FC93 EB1C                    jmp 0041FCB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FC8A(C)
|
:0041FC95 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0041FC98 6BC950                  imul ecx, 00000050
:0041FC9B 81C1787F4900            add ecx, 00497F78
:0041FCA1 E80A9AFFFF              call 004196B0
:0041FCA6 25FF000000              and eax, 000000FF
:0041FCAB 83E801                  sub eax, 00000001
:0041FCAE 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FC93(U)
|
:0041FCB1 8A45A8                  mov al, byte ptr [ebp-58]
:0041FCB4 50                      push eax
:0041FCB5 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0041FCB8 6BC950                  imul ecx, 00000050
:0041FCBB 81C1787F4900            add ecx, 00497F78
:0041FCC1 E82AE10000              call 0042DDF0
:0041FCC6 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0041FCC9 6BC950                  imul ecx, 00000050
:0041FCCC 81C1787F4900            add ecx, 00497F78
:0041FCD2 E82D34FEFF              call 00403104
:0041FCD7 50                      push eax

* Possible StringData Ref from Data Obj ->"%sB𭰧CF1IC"
                                  |
:0041FCD8 68F0CC4700              push 0047CCF0
:0041FCDD 6A00                    push 00000000
:0041FCDF E84F170100              call 00431433
:0041FCE4 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041FB1D(C), :0041FBA0(U), :0041FBE4(U), :0041FC28(U), :0041FC57(U)
|
:0041FCE7 E971FDFFFF              jmp 0041FA5D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041FA7B(U), :0041FAEF(U), :0041FC52(U)
|
:0041FCEC 5E                      pop esi
:0041FCED 8BE5                    mov esp, ebp
:0041FCEF 5D                      pop ebp
:0041FCF0 C3                      ret



* Referenced by a CALL at Address:
|:0041FA61   
|
:0041FCF1 55                      push ebp
:0041FCF2 8BEC                    mov ebp, esp
:0041FCF4 83EC10                  sub esp, 00000010
:0041FCF7 C745FC00000000          mov [ebp-04], 00000000
:0041FCFE E8453E0000              call 00423B48
:0041FD03 8945F0                  mov dword ptr [ebp-10], eax
:0041FD06 C745F800000000          mov [ebp-08], 00000000
:0041FD0D EB09                    jmp 0041FD18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FD85(U)
|
:0041FD0F 8B45F8                  mov eax, dword ptr [ebp-08]
:0041FD12 83C001                  add eax, 00000001
:0041FD15 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FD0D(U)
|
:0041FD18 817DF8C8000000          cmp dword ptr [ebp-08], 000000C8
:0041FD1F 7366                    jnb 0041FD87
:0041FD21 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041FD24 51                      push ecx
:0041FD25 E866E1FEFF              call 0040DE90
:0041FD2A 83C404                  add esp, 00000004
:0041FD2D 85C0                    test eax, eax
:0041FD2F 7454                    je 0041FD85
:0041FD31 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041FD34 6BC950                  imul ecx, 00000050
:0041FD37 81C1787F4900            add ecx, 00497F78
:0041FD3D E8EECBFEFF              call 0040C930
:0041FD42 25FF000000              and eax, 000000FF
:0041FD47 85C0                    test eax, eax
:0041FD49 753A                    jne 0041FD85
:0041FD4B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041FD4E 6BC950                  imul ecx, 00000050
:0041FD51 81C1787F4900            add ecx, 00497F78
:0041FD57 E84401FFFF              call 0040FEA0
:0041FD5C 25FF000000              and eax, 000000FF
:0041FD61 3945F0                  cmp dword ptr [ebp-10], eax
:0041FD64 721F                    jb 0041FD85
:0041FD66 8B55F8                  mov edx, dword ptr [ebp-08]
:0041FD69 6BD250                  imul edx, 00000050
:0041FD6C 81C2787F4900            add edx, 00497F78
:0041FD72 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FD75 891485F04C4B00          mov dword ptr [4*eax+004B4CF0], edx
:0041FD7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FD7F 83C101                  add ecx, 00000001
:0041FD82 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041FD2F(C), :0041FD49(C), :0041FD64(C)
|
:0041FD85 EB88                    jmp 0041FD0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FD1F(C)
|
:0041FD87 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041FD8B 7517                    jne 0041FDA4
:0041FD8D 6A00                    push 00000000
:0041FD8F 8B5508                  mov edx, dword ptr [ebp+08]
:0041FD92 52                      push edx

* Possible StringData Ref from Data Obj ->"নAmZ⪺HAwgSFC"
                                  |
:0041FD93 6804CD4700              push 0047CD04
:0041FD98 E811FE0000              call 0042FBAE
:0041FD9D 83C40C                  add esp, 0000000C
:0041FDA0 0CFF                    or al, FF
:0041FDA2 EB7C                    jmp 0041FE20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FD8B(C)
|
:0041FDA4 6A00                    push 00000000
:0041FDA6 8B4508                  mov eax, dword ptr [ebp+08]
:0041FDA9 50                      push eax

* Possible StringData Ref from Data Obj ->"֭nmZH"
                                  |
:0041FDAA 6828CD4700              push 0047CD28
:0041FDAF E8FAFD0000              call 0042FBAE
:0041FDB4 83C40C                  add esp, 0000000C
:0041FDB7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FDBA C7048DF04C4B0000000000  mov dword ptr [4*ecx+004B4CF0], 00000000
:0041FDC5 68F04C4B00              push 004B4CF0
:0041FDCA E8969C0300              call 00459A65
:0041FDCF 83C404                  add esp, 00000004
:0041FDD2 8845F4                  mov byte ptr [ebp-0C], al
:0041FDD5 8B55F4                  mov edx, dword ptr [ebp-0C]
:0041FDD8 81E2FF000000            and edx, 000000FF
:0041FDDE 81FAFF000000            cmp edx, 000000FF
:0041FDE4 7420                    je 0041FE06
:0041FDE6 8B45F4                  mov eax, dword ptr [ebp-0C]
:0041FDE9 25FF000000              and eax, 000000FF
:0041FDEE 8B0C85F04C4B00          mov ecx, dword ptr [4*eax+004B4CF0]
:0041FDF5 E8C633FEFF              call 004031C0
:0041FDFA 25FF000000              and eax, 000000FF
:0041FDFF 3DFF000000              cmp eax, 000000FF
:0041FE04 7405                    je 0041FE0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FDE4(C)
|
:0041FE06 8A45F4                  mov al, byte ptr [ebp-0C]
:0041FE09 EB15                    jmp 0041FE20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FE04(C)
|
:0041FE0B 6A00                    push 00000000
:0041FE0D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041FE10 51                      push ecx

* Possible StringData Ref from Data Obj ->"A]S˳ƪZAmߡC"
                                  |
:0041FE11 6834CD4700              push 0047CD34
:0041FE16 E893FD0000              call 0042FBAE
:0041FE1B 83C40C                  add esp, 0000000C
:0041FE1E 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041FDA2(U), :0041FE09(U)
|
:0041FE20 8BE5                    mov esp, ebp
:0041FE22 5D                      pop ebp
:0041FE23 C3                      ret



* Referenced by a CALL at Address:
|:0041FB48   
|
:0041FE24 55                      push ebp
:0041FE25 8BEC                    mov ebp, esp
:0041FE27 83EC08                  sub esp, 00000008
:0041FE2A B9F8544B00              mov ecx, 004B54F8
:0041FE2F E8AC6B0100              call 004369E0
:0041FE34 8945FC                  mov dword ptr [ebp-04], eax
:0041FE37 B9F8544B00              mov ecx, 004B54F8
:0041FE3C E8B1960400              call 004694F2
:0041FE41 8B450C                  mov eax, dword ptr [ebp+0C]
:0041FE44 50                      push eax
:0041FE45 B928474900              mov ecx, 00494728
:0041FE4A E811E00000              call 0042DE60
:0041FE4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0041FE52 51                      push ecx
:0041FE53 688F084200              push 0042088F
:0041FE58 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0041FE5E 52                      push edx
:0041FE5F 68F3000000              push 000000F3
:0041FE64 A1A8554B00              mov eax, dword ptr [004B55A8]
:0041FE69 50                      push eax

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0041FE6A FF15DCD64B00            Call dword ptr [004BD6DC]
:0041FE70 8945F8                  mov dword ptr [ebp-08], eax
:0041FE73 837DFC47                cmp dword ptr [ebp-04], 00000047
:0041FE77 7C0E                    jl 0041FE87
:0041FE79 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FE7C 51                      push ecx
:0041FE7D B9F8544B00              mov ecx, 004B54F8
:0041FE82 E8AE960400              call 00469535

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FE77(C)
|
:0041FE87 8B45F8                  mov eax, dword ptr [ebp-08]
:0041FE8A 8BE5                    mov esp, ebp
:0041FE8C 5D                      pop ebp
:0041FE8D C3                      ret



* Referenced by a CALL at Address:
|:0041FC49   
|
:0041FE8E 55                      push ebp
:0041FE8F 8BEC                    mov ebp, esp
:0041FE91 83EC0C                  sub esp, 0000000C
:0041FE94 E8AF3C0000              call 00423B48
:0041FE99 8945F4                  mov dword ptr [ebp-0C], eax
:0041FE9C C745FC00000000          mov [ebp-04], 00000000
:0041FEA3 C745F800000000          mov [ebp-08], 00000000
:0041FEAA EB09                    jmp 0041FEB5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FF22(U)
|
:0041FEAC 8B45F8                  mov eax, dword ptr [ebp-08]
:0041FEAF 83C001                  add eax, 00000001
:0041FEB2 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FEAA(U)
|
:0041FEB5 817DF8C8000000          cmp dword ptr [ebp-08], 000000C8
:0041FEBC 7366                    jnb 0041FF24
:0041FEBE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041FEC1 51                      push ecx
:0041FEC2 E8C9DFFEFF              call 0040DE90
:0041FEC7 83C404                  add esp, 00000004
:0041FECA 85C0                    test eax, eax
:0041FECC 7454                    je 0041FF22
:0041FECE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041FED1 6BC950                  imul ecx, 00000050
:0041FED4 81C1787F4900            add ecx, 00497F78
:0041FEDA E851CAFEFF              call 0040C930
:0041FEDF 25FF000000              and eax, 000000FF
:0041FEE4 85C0                    test eax, eax
:0041FEE6 753A                    jne 0041FF22
:0041FEE8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0041FEEB 6BC950                  imul ecx, 00000050
:0041FEEE 81C1787F4900            add ecx, 00497F78
:0041FEF4 E8A7FFFEFF              call 0040FEA0
:0041FEF9 25FF000000              and eax, 000000FF
:0041FEFE 3945F4                  cmp dword ptr [ebp-0C], eax
:0041FF01 721F                    jb 0041FF22
:0041FF03 8B55F8                  mov edx, dword ptr [ebp-08]
:0041FF06 6BD250                  imul edx, 00000050
:0041FF09 81C2787F4900            add edx, 00497F78
:0041FF0F 8B45FC                  mov eax, dword ptr [ebp-04]
:0041FF12 891485F04C4B00          mov dword ptr [4*eax+004B4CF0], edx
:0041FF19 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0041FF1C 83C101                  add ecx, 00000001
:0041FF1F 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0041FECC(C), :0041FEE6(C), :0041FF01(C)
|
:0041FF22 EB88                    jmp 0041FEAC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FEBC(C)
|
:0041FF24 837DFC00                cmp dword ptr [ebp-04], 00000000
:0041FF28 7504                    jne 0041FF2E
:0041FF2A 33C0                    xor eax, eax
:0041FF2C EB05                    jmp 0041FF33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FF28(C)
|
:0041FF2E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FF2C(U)
|
:0041FF33 8BE5                    mov esp, ebp
:0041FF35 5D                      pop ebp
:0041FF36 C3                      ret


:0041FF37 55                      push ebp
:0041FF38 8BEC                    mov ebp, esp
:0041FF3A 6A00                    push 00000000
:0041FF3C E8F6750500              call 00477537
:0041FF41 83C404                  add esp, 00000004
:0041FF44 833D8847490001          cmp dword ptr [00494788], 00000001
:0041FF4B 7E0A                    jle 0041FF57
:0041FF4D C7058847490000000000    mov dword ptr [00494788], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FF4B(C)
|
:0041FF57 E82B000000              call 0041FF87
:0041FF5C A188474900              mov eax, dword ptr [00494788]
:0041FF61 50                      push eax
:0041FF62 E86E000000              call 0041FFD5
:0041FF67 83C404                  add esp, 00000004
:0041FF6A 8B0D88474900            mov ecx, dword ptr [00494788]
:0041FF70 83C101                  add ecx, 00000001
:0041FF73 890D88474900            mov dword ptr [00494788], ecx
:0041FF79 6A01                    push 00000001
:0041FF7B E8B7750500              call 00477537
:0041FF80 83C404                  add esp, 00000004
:0041FF83 5D                      pop ebp
:0041FF84 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0041FF57   , :00420F22   , :00422400   , :004248AF   , :004248E2   
|:00425FCB   , :004287F6   , :00429024   , :0042930E   , :00429567   
|:0042CB69   
|
:0041FF87 55                      push ebp
:0041FF88 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0041FF8A 6A09                    push 00000009
:0041FF8C E87E560500              call 0047560F
:0041FF91 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0041FF94 6A07                    push 00000007
:0041FF96 E85B5D0500              call 00475CF6
:0041FF9B 83C404                  add esp, 00000004
:0041FF9E 6A00                    push 00000000
:0041FFA0 6A00                    push 00000000
:0041FFA2 6A00                    push 00000000
:0041FFA4 E8745D0500              call 00475D1D
:0041FFA9 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041FFAC 6A04                    push 00000004
:0041FFAE 6A00                    push 00000000
:0041FFB0 6A00                    push 00000000
:0041FFB2 B910474900              mov ecx, 00494710
:0041FFB7 E8D48F0500              call 00478F90
:0041FFBC 50                      push eax
:0041FFBD 6890000000              push 00000090
:0041FFC2 6820010000              push 00000120
:0041FFC7 6A00                    push 00000000
:0041FFC9 6A00                    push 00000000
:0041FFCB E8246B0500              call 00476AF4
:0041FFD0 83C414                  add esp, 00000014
:0041FFD3 5D                      pop ebp
:0041FFD4 C3                      ret



* Referenced by a CALL at Address:
|:0041FF62   
|
:0041FFD5 55                      push ebp
:0041FFD6 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0041FFD8 6A09                    push 00000009
:0041FFDA E830560500              call 0047560F
:0041FFDF 83C404                  add esp, 00000004
:0041FFE2 6A00                    push 00000000
:0041FFE4 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0041FFE6 6A04                    push 00000004
:0041FFE8 E8305D0500              call 00475D1D
:0041FFED 83C40C                  add esp, 0000000C
:0041FFF0 B938464900              mov ecx, 00494638
:0041FFF5 E8A6DE0000              call 0042DEA0
:0041FFFA 85C0                    test eax, eax
:0041FFFC 740C                    je 0042000A
:0041FFFE B938464900              mov ecx, 00494638
:00420003 E873CD0000              call 0042CD7B
:00420008 EB17                    jmp 00420021

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0041FFFC(C)
|
:0042000A 8B4508                  mov eax, dword ptr [ebp+08]
:0042000D 83C002                  add eax, 00000002
:00420010 69C000090000            imul eax, 00000900
:00420016 50                      push eax
:00420017 B938464900              mov ecx, 00494638
:0042001C E8BDCD0000              call 0042CDDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420008(U)
|
:00420021 B9D0454900              mov ecx, 004945D0
:00420026 E875DE0000              call 0042DEA0
:0042002B 85C0                    test eax, eax
:0042002D 740C                    je 0042003B
:0042002F B9D0454900              mov ecx, 004945D0
:00420034 E842CD0000              call 0042CD7B
:00420039 EB17                    jmp 00420052

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042002D(C)
|
:0042003B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042003E 83C102                  add ecx, 00000002
:00420041 69C900090000            imul ecx, 00000900
:00420047 51                      push ecx
:00420048 B9D0454900              mov ecx, 004945D0
:0042004D E88CCD0000              call 0042CDDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420039(U)
|
:00420052 5D                      pop ebp
:00420053 C3                      ret


:00420054 55                      push ebp
:00420055 8BEC                    mov ebp, esp
:00420057 B8001B0000              mov eax, 00001B00
:0042005C E8BFF40400              call 0046F520

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00420061 6A09                    push 00000009
:00420063 E8A7550500              call 0047560F
:00420068 83C404                  add esp, 00000004
:0042006B 6A00                    push 00000000
:0042006D E8C5740500              call 00477537
:00420072 83C404                  add esp, 00000004
:00420075 6A00                    push 00000000
:00420077 6A00                    push 00000000
:00420079 6A00                    push 00000000
:0042007B E89D5C0500              call 00475D1D
:00420080 83C40C                  add esp, 0000000C
:00420083 8D8500E5FFFF            lea eax, dword ptr [ebp+FFFFE500]
:00420089 50                      push eax
:0042008A 6A18                    push 00000018
:0042008C 6820010000              push 00000120
:00420091 6A00                    push 00000000
:00420093 6A00                    push 00000000
:00420095 E8CBAB0200              call 0044AC65
:0042009A 83C414                  add esp, 00000014
:0042009D 8D8D00E5FFFF            lea ecx, dword ptr [ebp+FFFFE500]
:004200A3 51                      push ecx
:004200A4 6A18                    push 00000018
:004200A6 6820010000              push 00000120
:004200AB 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004200AD 6A04                    push 00000004
:004200AF E8406A0500              call 00476AF4
:004200B4 83C414                  add esp, 00000014
:004200B7 8D9500E5FFFF            lea edx, dword ptr [ebp+FFFFE500]
:004200BD 52                      push edx
:004200BE 6A18                    push 00000018
:004200C0 6820010000              push 00000120
:004200C5 6A00                    push 00000000
:004200C7 68E4FEFFFF              push FFFFFEE4
:004200CC E8236A0500              call 00476AF4
:004200D1 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004200D4 6A04                    push 00000004
:004200D6 6A00                    push 00000000
:004200D8 6A00                    push 00000000
:004200DA B910474900              mov ecx, 00494710
:004200DF E8AC8E0500              call 00478F90
:004200E4 50                      push eax
:004200E5 6A18                    push 00000018
:004200E7 6820010000              push 00000120
:004200EC 6A00                    push 00000000
:004200EE 6A00                    push 00000000
:004200F0 E870AB0200              call 0044AC65
:004200F5 83C414                  add esp, 00000014
:004200F8 6A01                    push 00000001
:004200FA E838740500              call 00477537
:004200FF 83C404                  add esp, 00000004
:00420102 8BE5                    mov esp, ebp
:00420104 5D                      pop ebp
:00420105 C21000                  ret 0010



* Referenced by a CALL at Address:
|:00426342   
|
:00420108 55                      push ebp
:00420109 8BEC                    mov ebp, esp
:0042010B 83EC08                  sub esp, 00000008
:0042010E 894DF8                  mov dword ptr [ebp-08], ecx
:00420111 8B4508                  mov eax, dword ptr [ebp+08]
:00420114 50                      push eax
:00420115 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420118 E85DA70000              call 0042A87A
:0042011D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420120 51                      push ecx
:00420121 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420124 E807A90000              call 0042AA30
:00420129 85C0                    test eax, eax
:0042012B 740C                    je 00420139
:0042012D 8B5508                  mov edx, dword ptr [ebp+08]
:00420130 52                      push edx
:00420131 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420134 E8FCAA0000              call 0042AC35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042012B(C)
|
:00420139 8B4508                  mov eax, dword ptr [ebp+08]
:0042013C 50                      push eax
:0042013D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420140 E838AB0000              call 0042AC7D
:00420145 8845FC                  mov byte ptr [ebp-04], al
:00420148 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042014B 81E1FF000000            and ecx, 000000FF
:00420151 83F904                  cmp ecx, 00000004
:00420154 7513                    jne 00420169
:00420156 8B5508                  mov edx, dword ptr [ebp+08]
:00420159 52                      push edx
:0042015A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042015D E8A6B10000              call 0042B308
:00420162 B801000000              mov eax, 00000001
:00420167 EB02                    jmp 0042016B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420154(C)
|
:00420169 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420167(U)
|
:0042016B 8BE5                    mov esp, ebp
:0042016D 5D                      pop ebp
:0042016E C20400                  ret 0004



* Referenced by a CALL at Address:
|:00426407   
|
:00420171 55                      push ebp
:00420172 8BEC                    mov ebp, esp
:00420174 83EC0C                  sub esp, 0000000C
:00420177 894DF4                  mov dword ptr [ebp-0C], ecx
:0042017A 8B4508                  mov eax, dword ptr [ebp+08]
:0042017D 50                      push eax
:0042017E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00420181 E8DAA20000              call 0042A460
:00420186 85C0                    test eax, eax
:00420188 740C                    je 00420196
:0042018A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042018D 51                      push ecx
:0042018E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00420191 E81AA40000              call 0042A5B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420188(C)
|
:00420196 8B5508                  mov edx, dword ptr [ebp+08]
:00420199 52                      push edx
:0042019A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042019D E852A40000              call 0042A5F4
:004201A2 8B4508                  mov eax, dword ptr [ebp+08]
:004201A5 50                      push eax
:004201A6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004201A9 E80EA60000              call 0042A7BC
:004201AE C645FC00                mov [ebp-04], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420283(C)
|
:004201B2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004201B5 51                      push ecx
:004201B6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004201B9 E842A60000              call 0042A800
:004201BE 25FF000000              and eax, 000000FF
:004201C3 83F807                  cmp eax, 00000007
:004201C6 752A                    jne 004201F2
:004201C8 8B5508                  mov edx, dword ptr [ebp+08]
:004201CB 52                      push edx
:004201CC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004201CF E8A6A60000              call 0042A87A
:004201D4 8B4508                  mov eax, dword ptr [ebp+08]
:004201D7 50                      push eax
:004201D8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004201DB E850A80000              call 0042AA30
:004201E0 85C0                    test eax, eax
:004201E2 740C                    je 004201F0
:004201E4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004201E7 51                      push ecx
:004201E8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004201EB E845AA0000              call 0042AC35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004201E2(C)
|
:004201F0 EB28                    jmp 0042021A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004201C6(C)
|
:004201F2 8B5508                  mov edx, dword ptr [ebp+08]
:004201F5 52                      push edx
:004201F6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004201F9 E825A60000              call 0042A823
:004201FE 8B4508                  mov eax, dword ptr [ebp+08]
:00420201 50                      push eax
:00420202 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00420205 E883B80000              call 0042BA8D
:0042020A 85C0                    test eax, eax
:0042020C 740C                    je 0042021A
:0042020E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420211 51                      push ecx
:00420212 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00420215 E813BB0000              call 0042BD2D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004201F0(U), :0042020C(C)
|
:0042021A 8B5508                  mov edx, dword ptr [ebp+08]
:0042021D 52                      push edx
:0042021E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00420221 E857AA0000              call 0042AC7D
:00420226 8845FC                  mov byte ptr [ebp-04], al
:00420229 8B45FC                  mov eax, dword ptr [ebp-04]
:0042022C 25FF000000              and eax, 000000FF
:00420231 83F80B                  cmp eax, 0000000B
:00420234 750F                    jne 00420245
:00420236 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420239 51                      push ecx
:0042023A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042023D E8C6B00000              call 0042B308
:00420242 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420234(C)
|
:00420245 8B55FC                  mov edx, dword ptr [ebp-04]
:00420248 81E2FF000000            and edx, 000000FF
:0042024E 83FA16                  cmp edx, 00000016
:00420251 740F                    je 00420262
:00420253 8B45FC                  mov eax, dword ptr [ebp-04]
:00420256 25FF000000              and eax, 000000FF
:0042025B 3DFF000000              cmp eax, 000000FF
:00420260 7516                    jne 00420278

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420251(C)
|
:00420262 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00420265 0FBE511F                movsx edx, byte ptr [ecx+1F]
:00420269 83FA07                  cmp edx, 00000007
:0042026C 7502                    jne 00420270
:0042026E EB19                    jmp 00420289

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042026C(C)
|
:00420270 8A45FC                  mov al, byte ptr [ebp-04]
:00420273 E9BD000000              jmp 00420335

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420260(C)
|
:00420278 8B45FC                  mov eax, dword ptr [ebp-04]
:0042027B 25FF000000              and eax, 000000FF
:00420280 83F807                  cmp eax, 00000007
:00420283 0F8429FFFFFF            je 004201B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042026E(U)
|
:00420289 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042028C 51                      push ecx
:0042028D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00420290 E8FABA0000              call 0042BD8F
:00420295 85C0                    test eax, eax
:00420297 740C                    je 004202A5
:00420299 8B5508                  mov edx, dword ptr [ebp+08]
:0042029C 52                      push edx
:0042029D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004202A0 E875BE0000              call 0042C11A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420297(C)
|
:004202A5 C645F800                mov [ebp-08], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004202E0(C)
|
:004202A9 8B4508                  mov eax, dword ptr [ebp+08]
:004202AC 50                      push eax
:004202AD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004202B0 E8A9BE0000              call 0042C15E
:004202B5 8845F8                  mov byte ptr [ebp-08], al
:004202B8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004202BB 81E1FF000000            and ecx, 000000FF
:004202C1 83F911                  cmp ecx, 00000011
:004202C4 750F                    jne 004202D5
:004202C6 8B5508                  mov edx, dword ptr [ebp+08]
:004202C9 52                      push edx
:004202CA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004202CD E8FDC10000              call 0042C4CF
:004202D2 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004202C4(C)
|
:004202D5 8B45F8                  mov eax, dword ptr [ebp-08]
:004202D8 25FF000000              and eax, 000000FF
:004202DD 83F810                  cmp eax, 00000010
:004202E0 74C7                    je 004202A9
:004202E2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004202E5 51                      push ecx
:004202E6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004202E9 E852C20000              call 0042C540
:004202EE 85C0                    test eax, eax
:004202F0 740C                    je 004202FE
:004202F2 8B5508                  mov edx, dword ptr [ebp+08]
:004202F5 52                      push edx
:004202F6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004202F9 E82DC40000              call 0042C72B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004202F0(C)
|
:004202FE 8B4508                  mov eax, dword ptr [ebp+08]
:00420301 50                      push eax
:00420302 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00420305 E865C40000              call 0042C76F
:0042030A 85C0                    test eax, eax
:0042030C 740C                    je 0042031A
:0042030E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420311 51                      push ecx
:00420312 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00420315 E830C60000              call 0042C94A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042030C(C)
|
:0042031A 6A01                    push 00000001
:0042031C E89AF20000              call 0042F5BB
:00420321 83C404                  add esp, 00000004
:00420324 E8A7F20000              call 0042F5D0
:00420329 B9F8544B00              mov ecx, 004B54F8
:0042032E E8BF910400              call 004694F2
:00420333 B016                    mov al, 16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420273(U)
|
:00420335 8BE5                    mov esp, ebp
:00420337 5D                      pop ebp
:00420338 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042D448   , :0042D47E   , :0042D5E2   , :0042D618   , :0042D669   
|:0042D69F   , :0042D6DD   , :0042D71B   , :0042D759   , :0042D797   
|:0042D7D5   
|
:0042033B 55                      push ebp
:0042033C 8BEC                    mov ebp, esp
:0042033E 83EC08                  sub esp, 00000008
:00420341 894DF8                  mov dword ptr [ebp-08], ecx
:00420344 8B45F8                  mov eax, dword ptr [ebp-08]
:00420347 50                      push eax
:00420348 E842350000              call 0042388F
:0042034D 83C404                  add esp, 00000004
:00420350 8945FC                  mov dword ptr [ebp-04], eax
:00420353 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420356 8A511F                  mov dl, byte ptr [ecx+1F]
:00420359 52                      push edx
:0042035A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042035D E85EDB0000              call 0042DEC0
:00420362 8B4508                  mov eax, dword ptr [ebp+08]
:00420365 50                      push eax
:00420366 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420369 E821BA0000              call 0042BD8F
:0042036E 85C0                    test eax, eax
:00420370 740C                    je 0042037E
:00420372 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420375 51                      push ecx
:00420376 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420379 E89CBD0000              call 0042C11A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420370(C)
|
:0042037E 8B5508                  mov edx, dword ptr [ebp+08]
:00420381 52                      push edx
:00420382 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420385 E8D4BD0000              call 0042C15E
:0042038A 25FF000000              and eax, 000000FF
:0042038F 83F811                  cmp eax, 00000011
:00420392 750C                    jne 004203A0
:00420394 8B4508                  mov eax, dword ptr [ebp+08]
:00420397 50                      push eax
:00420398 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042039B E82FC10000              call 0042C4CF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420392(C)
|
:004203A0 8BE5                    mov esp, ebp
:004203A2 5D                      pop ebp
:004203A3 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004261E3   
|
:004203A6 55                      push ebp
:004203A7 8BEC                    mov ebp, esp
:004203A9 83EC08                  sub esp, 00000008
:004203AC 894DF8                  mov dword ptr [ebp-08], ecx
:004203AF 6A4C                    push 0000004C
:004203B1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004203B4 E807DB0000              call 0042DEC0
:004203B9 8B4508                  mov eax, dword ptr [ebp+08]
:004203BC 50                      push eax
:004203BD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004203C0 E8CAB90000              call 0042BD8F
:004203C5 85C0                    test eax, eax
:004203C7 740C                    je 004203D5
:004203C9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004203CC 51                      push ecx
:004203CD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004203D0 E845BD0000              call 0042C11A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004203C7(C)
|
:004203D5 8B5508                  mov edx, dword ptr [ebp+08]
:004203D8 52                      push edx
:004203D9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004203DC E87DBD0000              call 0042C15E
:004203E1 25FF000000              and eax, 000000FF
:004203E6 83F811                  cmp eax, 00000011
:004203E9 750C                    jne 004203F7
:004203EB 8B4508                  mov eax, dword ptr [ebp+08]
:004203EE 50                      push eax
:004203EF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004203F2 E8D8C00000              call 0042C4CF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004203E9(C)
|
:004203F7 6A3F                    push 0000003F
:004203F9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004203FC 8B4914                  mov ecx, dword ptr [ecx+14]
:004203FF 6BC950                  imul ecx, 00000050
:00420402 81C1787F4900            add ecx, 00497F78
:00420408 E8DD19FEFF              call 00401DEA
:0042040D C1E804                  shr eax, 04
:00420410 83C001                  add eax, 00000001
:00420413 50                      push eax
:00420414 6A01                    push 00000001
:00420416 E88E340000              call 004238A9
:0042041B 83C40C                  add esp, 0000000C
:0042041E 8945FC                  mov dword ptr [ebp-04], eax
:00420421 8B55F8                  mov edx, dword ptr [ebp-08]
:00420424 8B02                    mov eax, dword ptr [edx]
:00420426 3B45FC                  cmp eax, dword ptr [ebp-04]
:00420429 770B                    ja 00420436
:0042042B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042042E 8B11                    mov edx, dword ptr [ecx]
:00420430 83EA01                  sub edx, 00000001
:00420433 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420429(C)
|
:00420436 8B45FC                  mov eax, dword ptr [ebp-04]
:00420439 50                      push eax
:0042043A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042043D 51                      push ecx
:0042043E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420441 E8169F0000              call 0042A35C
:00420446 6A00                    push 00000000
:00420448 8B5508                  mov edx, dword ptr [ebp+08]
:0042044B 52                      push edx
:0042044C E809000000              call 0042045A
:00420451 83C408                  add esp, 00000008
:00420454 8BE5                    mov esp, ebp
:00420456 5D                      pop ebp
:00420457 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042044C   , :00420A1D   , :00426485   , :00428788   , :0042B48F   
|:0042B5F4   , :0042CA02   
|
:0042045A 55                      push ebp
:0042045B 8BEC                    mov ebp, esp
:0042045D 81ECC8000000            sub esp, 000000C8
:00420463 B938464900              mov ecx, 00494638
:00420468 E8932EFEFF              call 00403300
:0042046D 8945C4                  mov dword ptr [ebp-3C], eax
:00420470 B9D0454900              mov ecx, 004945D0
:00420475 E8862EFEFF              call 00403300
:0042047A 8945FC                  mov dword ptr [ebp-04], eax
:0042047D 68D7040000              push 000004D7
:00420482 8B4508                  mov eax, dword ptr [ebp+08]
:00420485 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420486 FF1510D64B00            Call dword ptr [004BD610]
:0042048C 89459C                  mov dword ptr [ebp-64], eax
:0042048F 68CE040000              push 000004CE
:00420494 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420497 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420498 FF1510D64B00            Call dword ptr [004BD610]
:0042049E 8945C8                  mov dword ptr [ebp-38], eax
:004204A1 68D8040000              push 000004D8
:004204A6 8B5508                  mov edx, dword ptr [ebp+08]
:004204A9 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004204AA FF1510D64B00            Call dword ptr [004BD610]
:004204B0 894598                  mov dword ptr [ebp-68], eax
:004204B3 68CF040000              push 000004CF
:004204B8 8B4508                  mov eax, dword ptr [ebp+08]
:004204BB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004204BC FF1510D64B00            Call dword ptr [004BD610]
:004204C2 8945B0                  mov dword ptr [ebp-50], eax
:004204C5 8D4DA0                  lea ecx, dword ptr [ebp-60]
:004204C8 51                      push ecx
:004204C9 8B559C                  mov edx, dword ptr [ebp-64]
:004204CC 52                      push edx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:004204CD FF15D8D64B00            Call dword ptr [004BD6D8]
:004204D3 8B45A0                  mov eax, dword ptr [ebp-60]
:004204D6 8945CC                  mov dword ptr [ebp-34], eax
:004204D9 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:004204DC 894DD0                  mov dword ptr [ebp-30], ecx
:004204DF 8B55A8                  mov edx, dword ptr [ebp-58]
:004204E2 8955D4                  mov dword ptr [ebp-2C], edx
:004204E5 8B45AC                  mov eax, dword ptr [ebp-54]
:004204E8 8945D8                  mov dword ptr [ebp-28], eax
:004204EB 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004204EE 894DEC                  mov dword ptr [ebp-14], ecx
:004204F1 8B55D0                  mov edx, dword ptr [ebp-30]
:004204F4 8955F0                  mov dword ptr [ebp-10], edx
:004204F7 8B45D4                  mov eax, dword ptr [ebp-2C]
:004204FA 8945F4                  mov dword ptr [ebp-0C], eax
:004204FD 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00420500 894DF8                  mov dword ptr [ebp-08], ecx
:00420503 8B55A0                  mov edx, dword ptr [ebp-60]
:00420506 8955B4                  mov dword ptr [ebp-4C], edx
:00420509 8B45A4                  mov eax, dword ptr [ebp-5C]
:0042050C 8945B8                  mov dword ptr [ebp-48], eax
:0042050F 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00420512 894DBC                  mov dword ptr [ebp-44], ecx
:00420515 8B55AC                  mov edx, dword ptr [ebp-54]
:00420518 8955C0                  mov dword ptr [ebp-40], edx
:0042051B 8B45B4                  mov eax, dword ptr [ebp-4C]
:0042051E 8945DC                  mov dword ptr [ebp-24], eax
:00420521 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00420524 894DE0                  mov dword ptr [ebp-20], ecx
:00420527 8B55BC                  mov edx, dword ptr [ebp-44]
:0042052A 8955E4                  mov dword ptr [ebp-1C], edx
:0042052D 8B45C0                  mov eax, dword ptr [ebp-40]
:00420530 8945E8                  mov dword ptr [ebp-18], eax
:00420533 DB45D4                  fild dword ptr [ebp-2C]
:00420536 D95D94                  fstp dword ptr [ebp-6C]
:00420539 B938464900              mov ecx, 00494638
:0042053E E89D640100              call 004369E0
:00420543 89458C                  mov dword ptr [ebp-74], eax
:00420546 C7459000000000          mov [ebp-70], 00000000
:0042054D DF6D8C                  fild qword ptr [ebp-74]
:00420550 D95D88                  fstp dword ptr [ebp-78]
:00420553 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00420556 6BC950                  imul ecx, 00000050
:00420559 81C1787F4900            add ecx, 00497F78
:0042055F E88618FEFF              call 00401DEA
:00420564 894580                  mov dword ptr [ebp-80], eax
:00420567 C7458400000000          mov [ebp-7C], 00000000
:0042056E DF6D80                  fild qword ptr [ebp-80]
:00420571 D87D88                  fdivr dword ptr [ebp-78]
:00420574 D84D94                  fmul dword ptr [ebp-6C]
:00420577 E824F60400              call 0046FBA0
:0042057C 8945D4                  mov dword ptr [ebp-2C], eax
:0042057F DB45F4                  fild dword ptr [ebp-0C]
:00420582 D99D7CFFFFFF            fstp dword ptr [ebp+FFFFFF7C]
:00420588 B9D0454900              mov ecx, 004945D0
:0042058D E84E640100              call 004369E0
:00420592 898574FFFFFF            mov dword ptr [ebp+FFFFFF74], eax
:00420598 C78578FFFFFF00000000    mov dword ptr [ebp+FFFFFF78], 00000000
:004205A2 DFAD74FFFFFF            fild qword ptr [ebp+FFFFFF74]
:004205A8 D99D70FFFFFF            fstp dword ptr [ebp+FFFFFF70]
:004205AE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004205B1 6BC950                  imul ecx, 00000050
:004205B4 81C1787F4900            add ecx, 00497F78
:004205BA E82B18FEFF              call 00401DEA
:004205BF 898568FFFFFF            mov dword ptr [ebp+FFFFFF68], eax
:004205C5 C7856CFFFFFF00000000    mov dword ptr [ebp+FFFFFF6C], 00000000
:004205CF DFAD68FFFFFF            fild qword ptr [ebp+FFFFFF68]
:004205D5 D8BD70FFFFFF            fdivr dword ptr [ebp+FFFFFF70]
:004205DB D88D7CFFFFFF            fmul dword ptr [ebp+FFFFFF7C]
:004205E1 E8BAF50400              call 0046FBA0
:004205E6 8945F4                  mov dword ptr [ebp-0C], eax
:004205E9 8B4DA8                  mov ecx, dword ptr [ebp-58]
:004205EC 51                      push ecx
:004205ED 8B55D4                  mov edx, dword ptr [ebp-2C]
:004205F0 52                      push edx
:004205F1 6A00                    push 00000000
:004205F3 E8B1320000              call 004238A9
:004205F8 83C40C                  add esp, 0000000C
:004205FB 8945D4                  mov dword ptr [ebp-2C], eax
:004205FE 8B45A8                  mov eax, dword ptr [ebp-58]
:00420601 50                      push eax
:00420602 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00420605 51                      push ecx
:00420606 6A00                    push 00000000
:00420608 E89C320000              call 004238A9
:0042060D 83C40C                  add esp, 0000000C
:00420610 8945F4                  mov dword ptr [ebp-0C], eax
:00420613 8B550C                  mov edx, dword ptr [ebp+0C]
:00420616 52                      push edx
:00420617 8D45A0                  lea eax, dword ptr [ebp-60]
:0042061A 50                      push eax
:0042061B 8D4DCC                  lea ecx, dword ptr [ebp-34]
:0042061E 51                      push ecx
:0042061F 8B559C                  mov edx, dword ptr [ebp-64]
:00420622 52                      push edx
:00420623 E8B7010000              call 004207DF
:00420628 83C410                  add esp, 00000010
:0042062B 8B450C                  mov eax, dword ptr [ebp+0C]
:0042062E 50                      push eax
:0042062F 8D4DA0                  lea ecx, dword ptr [ebp-60]
:00420632 51                      push ecx
:00420633 8D55EC                  lea edx, dword ptr [ebp-14]
:00420636 52                      push edx
:00420637 8B45C8                  mov eax, dword ptr [ebp-38]
:0042063A 50                      push eax
:0042063B E89F010000              call 004207DF
:00420640 83C410                  add esp, 00000010
:00420643 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00420646 6BC950                  imul ecx, 00000050
:00420649 81C1787F4900            add ecx, 00497F78
:0042064F E8C717FEFF              call 00401E1B
:00420654 85C0                    test eax, eax
:00420656 0F8499000000            je 004206F5
:0042065C DB45BC                  fild dword ptr [ebp-44]
:0042065F D99D64FFFFFF            fstp dword ptr [ebp+FFFFFF64]
:00420665 B938464900              mov ecx, 00494638
:0042066A E811D80000              call 0042DE80
:0042066F 89855CFFFFFF            mov dword ptr [ebp+FFFFFF5C], eax
:00420675 C78560FFFFFF00000000    mov dword ptr [ebp+FFFFFF60], 00000000
:0042067F DFAD5CFFFFFF            fild qword ptr [ebp+FFFFFF5C]
:00420685 D99D58FFFFFF            fstp dword ptr [ebp+FFFFFF58]
:0042068B 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0042068E 6BC950                  imul ecx, 00000050
:00420691 81C1787F4900            add ecx, 00497F78
:00420697 E87F17FEFF              call 00401E1B
:0042069C 898550FFFFFF            mov dword ptr [ebp+FFFFFF50], eax
:004206A2 C78554FFFFFF00000000    mov dword ptr [ebp+FFFFFF54], 00000000
:004206AC DFAD50FFFFFF            fild qword ptr [ebp+FFFFFF50]
:004206B2 D8BD58FFFFFF            fdivr dword ptr [ebp+FFFFFF58]
:004206B8 D88D64FFFFFF            fmul dword ptr [ebp+FFFFFF64]
:004206BE E8DDF40400              call 0046FBA0
:004206C3 8945BC                  mov dword ptr [ebp-44], eax
:004206C6 8B4DA8                  mov ecx, dword ptr [ebp-58]
:004206C9 51                      push ecx
:004206CA 8B55BC                  mov edx, dword ptr [ebp-44]
:004206CD 52                      push edx
:004206CE 6A00                    push 00000000
:004206D0 E8D4310000              call 004238A9
:004206D5 83C40C                  add esp, 0000000C
:004206D8 8945BC                  mov dword ptr [ebp-44], eax
:004206DB 8B450C                  mov eax, dword ptr [ebp+0C]
:004206DE 50                      push eax
:004206DF 8D4DA0                  lea ecx, dword ptr [ebp-60]
:004206E2 51                      push ecx
:004206E3 8D55B4                  lea edx, dword ptr [ebp-4C]
:004206E6 52                      push edx
:004206E7 8B4598                  mov eax, dword ptr [ebp-68]
:004206EA 50                      push eax
:004206EB E8EF000000              call 004207DF
:004206F0 83C410                  add esp, 00000010
:004206F3 EB1A                    jmp 0042070F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420656(C)
|
:004206F5 6A01                    push 00000001
:004206F7 6A00                    push 00000000
:004206F9 68D8040000              push 000004D8
:004206FE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420701 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420702 FF1510D64B00            Call dword ptr [004BD610]
:00420708 50                      push eax

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:00420709 FF1524D64B00            Call dword ptr [004BD624]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004206F3(U)
|
:0042070F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420712 6BC950                  imul ecx, 00000050
:00420715 81C1787F4900            add ecx, 00497F78
:0042071B E8FB16FEFF              call 00401E1B
:00420720 85C0                    test eax, eax
:00420722 0F8499000000            je 004207C1
:00420728 DB45E4                  fild dword ptr [ebp-1C]
:0042072B D99D4CFFFFFF            fstp dword ptr [ebp+FFFFFF4C]
:00420731 B9D0454900              mov ecx, 004945D0
:00420736 E845D70000              call 0042DE80
:0042073B 898544FFFFFF            mov dword ptr [ebp+FFFFFF44], eax
:00420741 C78548FFFFFF00000000    mov dword ptr [ebp+FFFFFF48], 00000000
:0042074B DFAD44FFFFFF            fild qword ptr [ebp+FFFFFF44]
:00420751 D99D40FFFFFF            fstp dword ptr [ebp+FFFFFF40]
:00420757 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042075A 6BC950                  imul ecx, 00000050
:0042075D 81C1787F4900            add ecx, 00497F78
:00420763 E8B316FEFF              call 00401E1B
:00420768 898538FFFFFF            mov dword ptr [ebp+FFFFFF38], eax
:0042076E C7853CFFFFFF00000000    mov dword ptr [ebp+FFFFFF3C], 00000000
:00420778 DFAD38FFFFFF            fild qword ptr [ebp+FFFFFF38]
:0042077E D8BD40FFFFFF            fdivr dword ptr [ebp+FFFFFF40]
:00420784 D88D4CFFFFFF            fmul dword ptr [ebp+FFFFFF4C]
:0042078A E811F40400              call 0046FBA0
:0042078F 8945E4                  mov dword ptr [ebp-1C], eax
:00420792 8B55A8                  mov edx, dword ptr [ebp-58]
:00420795 52                      push edx
:00420796 8B45E4                  mov eax, dword ptr [ebp-1C]
:00420799 50                      push eax
:0042079A 6A00                    push 00000000
:0042079C E808310000              call 004238A9
:004207A1 83C40C                  add esp, 0000000C
:004207A4 8945E4                  mov dword ptr [ebp-1C], eax
:004207A7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004207AA 51                      push ecx
:004207AB 8D55A0                  lea edx, dword ptr [ebp-60]
:004207AE 52                      push edx
:004207AF 8D45DC                  lea eax, dword ptr [ebp-24]
:004207B2 50                      push eax
:004207B3 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004207B6 51                      push ecx
:004207B7 E823000000              call 004207DF
:004207BC 83C410                  add esp, 00000010
:004207BF EB1A                    jmp 004207DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420722(C)
|
:004207C1 6A01                    push 00000001
:004207C3 6A00                    push 00000000
:004207C5 68CF040000              push 000004CF
:004207CA 8B5508                  mov edx, dword ptr [ebp+08]
:004207CD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004207CE FF1510D64B00            Call dword ptr [004BD610]
:004207D4 50                      push eax

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:004207D5 FF1524D64B00            Call dword ptr [004BD624]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004207BF(U)
|
:004207DB 8BE5                    mov esp, ebp
:004207DD 5D                      pop ebp
:004207DE C3                      ret



* Referenced by a CALL at Addresses:
|:00420623   , :0042063B   , :004206EB   , :004207B7   
|
:004207DF 55                      push ebp
:004207E0 8BEC                    mov ebp, esp
:004207E2 83EC44                  sub esp, 00000044
:004207E5 837D1400                cmp dword ptr [ebp+14], 00000000
:004207E9 7453                    je 0042083E
:004207EB 8D45BC                  lea eax, dword ptr [ebp-44]
:004207EE 50                      push eax
:004207EF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004207F2 51                      push ecx

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:004207F3 FF1508D64B00            Call dword ptr [004BD608]
:004207F9 8945FC                  mov dword ptr [ebp-04], eax
:004207FC B928474900              mov ecx, 00494728
:00420801 E8DA2AFEFF              call 004032E0
:00420806 50                      push eax
:00420807 8B5510                  mov edx, dword ptr [ebp+10]
:0042080A 52                      push edx
:0042080B 8B45FC                  mov eax, dword ptr [ebp-04]
:0042080E 50                      push eax

* Reference To: USER32.FillRect, Ord:00CCh
                                  |
:0042080F FF157CD64B00            Call dword ptr [004BD67C]
:00420815 B928474900              mov ecx, 00494728
:0042081A E8E12AFEFF              call 00403300
:0042081F 50                      push eax
:00420820 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00420823 51                      push ecx
:00420824 8B55FC                  mov edx, dword ptr [ebp-04]
:00420827 52                      push edx

* Reference To: USER32.FillRect, Ord:00CCh
                                  |
:00420828 FF157CD64B00            Call dword ptr [004BD67C]
:0042082E 8D45BC                  lea eax, dword ptr [ebp-44]
:00420831 50                      push eax
:00420832 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420835 51                      push ecx

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:00420836 FF150CD64B00            Call dword ptr [004BD60C]
:0042083C EB4D                    jmp 0042088B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004207E9(C)
|
:0042083E 8B5508                  mov edx, dword ptr [ebp+08]
:00420841 52                      push edx

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00420842 FF1518D64B00            Call dword ptr [004BD618]
:00420848 8945FC                  mov dword ptr [ebp-04], eax
:0042084B B928474900              mov ecx, 00494728
:00420850 E88B2AFEFF              call 004032E0
:00420855 50                      push eax
:00420856 8B4510                  mov eax, dword ptr [ebp+10]
:00420859 50                      push eax
:0042085A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042085D 51                      push ecx

* Reference To: USER32.FillRect, Ord:00CCh
                                  |
:0042085E FF157CD64B00            Call dword ptr [004BD67C]
:00420864 B928474900              mov ecx, 00494728
:00420869 E8922AFEFF              call 00403300
:0042086E 50                      push eax
:0042086F 8B550C                  mov edx, dword ptr [ebp+0C]
:00420872 52                      push edx
:00420873 8B45FC                  mov eax, dword ptr [ebp-04]
:00420876 50                      push eax

* Reference To: USER32.FillRect, Ord:00CCh
                                  |
:00420877 FF157CD64B00            Call dword ptr [004BD67C]
:0042087D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420880 51                      push ecx
:00420881 8B5508                  mov edx, dword ptr [ebp+08]
:00420884 52                      push edx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00420885 FF151CD64B00            Call dword ptr [004BD61C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042083C(U)
|
:0042088B 8BE5                    mov esp, ebp
:0042088D 5D                      pop ebp
:0042088E C3                      ret


:0042088F 55                      push ebp
:00420890 8BEC                    mov ebp, esp
:00420892 83EC08                  sub esp, 00000008
:00420895 8B450C                  mov eax, dword ptr [ebp+0C]
:00420898 8945F8                  mov dword ptr [ebp-08], eax
:0042089B 837DF80F                cmp dword ptr [ebp-08], 0000000F
:0042089F 7719                    ja 004208BA
:004208A1 837DF80F                cmp dword ptr [ebp-08], 0000000F
:004208A5 0F846C010000            je 00420A17
:004208AB 837DF802                cmp dword ptr [ebp-08], 00000002
:004208AF 0F84EB000000            je 004209A0
:004208B5 E97D010000              jmp 00420A37

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042089F(C)
|
:004208BA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004208BD 83E918                  sub ecx, 00000018
:004208C0 894DF8                  mov dword ptr [ebp-08], ecx
:004208C3 817DF8F9000000          cmp dword ptr [ebp-08], 000000F9
:004208CA 0F8767010000            ja 00420A37
:004208D0 8B45F8                  mov eax, dword ptr [ebp-08]
:004208D3 33D2                    xor edx, edx
:004208D5 8A90530A4200            mov dl, byte ptr [eax+00420A53]
:004208DB FF24953F0A4200          jmp dword ptr [4*edx+00420A3F]
:004208E2 8B4D14                  mov ecx, dword ptr [ebp+14]
:004208E5 894DFC                  mov dword ptr [ebp-04], ecx
:004208E8 B9007D4A00              mov ecx, 004A7D00
:004208ED E8CEF5FEFF              call 0040FEC0
:004208F2 50                      push eax
:004208F3 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"DATA.E3"
                                  |
:004208F5 6800D54700              push 0047D500
:004208FA E835EAFEFF              call 0040F334
:004208FF 83C40C                  add esp, 0000000C
:00420902 E8BF030000              call 00420CC6
:00420907 8A1500CC4700            mov dl, byte ptr [0047CC00]
:0042090D 52                      push edx
:0042090E 8B45FC                  mov eax, dword ptr [ebp-04]
:00420911 50                      push eax
:00420912 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420915 51                      push ecx
:00420916 E830040000              call 00420D4B
:0042091B 83C40C                  add esp, 0000000C
:0042091E 8B5508                  mov edx, dword ptr [ebp+08]
:00420921 52                      push edx
:00420922 E859100000              call 00421980
:00420927 83C404                  add esp, 00000004
:0042092A 8B4508                  mov eax, dword ptr [ebp+08]
:0042092D 50                      push eax
:0042092E E88F100000              call 004219C2
:00420933 83C404                  add esp, 00000004
:00420936 6A01                    push 00000001
:00420938 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042093B 51                      push ecx
:0042093C E80C020000              call 00420B4D
:00420941 83C408                  add esp, 00000008
:00420944 6A01                    push 00000001
:00420946 8B5508                  mov edx, dword ptr [ebp+08]
:00420949 52                      push edx
:0042094A E82D020000              call 00420B7C
:0042094F 83C408                  add esp, 00000008
:00420952 8B4508                  mov eax, dword ptr [ebp+08]
:00420955 50                      push eax
:00420956 E8A71B0000              call 00422502
:0042095B 83C404                  add esp, 00000004
:0042095E B801000000              mov eax, 00000001
:00420963 E9D1000000              jmp 00420A39
:00420968 837D1001                cmp dword ptr [ebp+10], 00000001
:0042096C 752D                    jne 0042099B
:0042096E 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00420970 6A03                    push 00000003
:00420972 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420975 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420976 FF1510D64B00            Call dword ptr [004BD610]
:0042097C 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042097D FF1584D64B00            Call dword ptr [004BD684]
:00420983 6A01                    push 00000001
:00420985 687B040000              push 0000047B
:0042098A 8B5508                  mov edx, dword ptr [ebp+08]
:0042098D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042098E FF1510D64B00            Call dword ptr [004BD610]
:00420994 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00420995 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042096C(C)
|
:0042099B E997000000              jmp 00420A37

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004208AF(C)
|
:004209A0 6A00                    push 00000000
:004209A2 8B4508                  mov eax, dword ptr [ebp+08]
:004209A5 50                      push eax
:004209A6 E8A2010000              call 00420B4D
:004209AB 83C408                  add esp, 00000008
:004209AE 6A00                    push 00000000
:004209B0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004209B3 51                      push ecx
:004209B4 E8C3010000              call 00420B7C
:004209B9 83C408                  add esp, 00000008
:004209BC E811020000              call 00420BD2
:004209C1 E875020000              call 00420C3B
:004209C6 8B5508                  mov edx, dword ptr [ebp+08]
:004209C9 52                      push edx
:004209CA E8DC010000              call 00420BAB
:004209CF 83C404                  add esp, 00000004
:004209D2 E8B2020000              call 00420C89
:004209D7 EB5E                    jmp 00420A37
:004209D9 833D7C47490000          cmp dword ptr [0049477C], 00000000
:004209E0 750C                    jne 004209EE
:004209E2 6A00                    push 00000000
:004209E4 B9F8544B00              mov ecx, 004B54F8
:004209E9 E82C8B0400              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004209E0(C)
|

* Possible StringData Ref from Data Obj ->""
                                  |
:004209EE 6800CC4700              push 0047CC00
:004209F3 8B4514                  mov eax, dword ptr [ebp+14]
:004209F6 50                      push eax
:004209F7 668B4D10                mov cx, word ptr [ebp+10]
:004209FB 51                      push ecx
:004209FC 8B5510                  mov edx, dword ptr [ebp+10]
:004209FF C1EA10                  shr edx, 10
:00420A02 81E2FFFF0000            and edx, 0000FFFF
:00420A08 52                      push edx
:00420A09 8B4508                  mov eax, dword ptr [ebp+08]
:00420A0C 50                      push eax
:00420A0D E810110000              call 00421B22
:00420A12 83C414                  add esp, 00000014
:00420A15 EB22                    jmp 00420A39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004208A5(C)
|
:00420A17 6A01                    push 00000001
:00420A19 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420A1C 51                      push ecx
:00420A1D E838FAFFFF              call 0042045A
:00420A22 83C408                  add esp, 00000008
:00420A25 EB10                    jmp 00420A37
:00420A27 833D7C47490000          cmp dword ptr [0049477C], 00000000
:00420A2E 7407                    je 00420A37
:00420A30 B801000000              mov eax, 00000001
:00420A35 EB02                    jmp 00420A39

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004208B5(U), :004208CA(C), :0042099B(U), :004209D7(U), :00420A25(U)
|:00420A2E(C)
|
:00420A37 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00420963(U), :00420A15(U), :00420A35(U)
|
:00420A39 8BE5                    mov esp, ebp
:00420A3B 5D                      pop ebp
:00420A3C C21000                  ret 0010



:00420A3F 68094200                DWORD 00420968
:00420A43 270A4200                DWORD 00420A27
:00420A47 E2084200                DWORD 004208E2
:00420A4B D9094200                DWORD 004209D9
:00420A4F 370A4200                DWORD 00420A37


:00420A53 000404                  add byte ptr [esp+eax], al
:00420A56 0404                    add al, 04
:00420A58 0404                    add al, 04
:00420A5A 0404                    add al, 04
:00420A5C 0404                    add al, 04
:00420A5E 0404                    add al, 04
:00420A60 0404                    add al, 04
:00420A62 0404                    add al, 04
:00420A64 0404                    add al, 04
:00420A66 0404                    add al, 04
:00420A68 0404                    add al, 04
:00420A6A 0404                    add al, 04
:00420A6C 0404                    add al, 04
:00420A6E 0404                    add al, 04
:00420A70 0404                    add al, 04
:00420A72 0404                    add al, 04
:00420A74 0404                    add al, 04
:00420A76 0404                    add al, 04
:00420A78 0404                    add al, 04
:00420A7A 0404                    add al, 04
:00420A7C 0404                    add al, 04
:00420A7E 0404                    add al, 04
:00420A80 0404                    add al, 04
:00420A82 0404                    add al, 04
:00420A84 0404                    add al, 04
:00420A86 0404                    add al, 04
:00420A88 0404                    add al, 04
:00420A8A 0404                    add al, 04
:00420A8C 0404                    add al, 04
:00420A8E 0404                    add al, 04
:00420A90 0404                    add al, 04
:00420A92 0404                    add al, 04
:00420A94 0404                    add al, 04
:00420A96 0404                    add al, 04
:00420A98 0404                    add al, 04
:00420A9A 0404                    add al, 04
:00420A9C 0404                    add al, 04
:00420A9E 0404                    add al, 04
:00420AA0 0404                    add al, 04
:00420AA2 0404                    add al, 04
:00420AA4 0404                    add al, 04
:00420AA6 0404                    add al, 04
:00420AA8 0404                    add al, 04
:00420AAA 0404                    add al, 04
:00420AAC 0404                    add al, 04
:00420AAE 0404                    add al, 04
:00420AB0 0404                    add al, 04
:00420AB2 0404                    add al, 04
:00420AB4 0404                    add al, 04
:00420AB6 0404                    add al, 04
:00420AB8 0404                    add al, 04
:00420ABA 0404                    add al, 04
:00420ABC 0404                    add al, 04
:00420ABE 0404                    add al, 04
:00420AC0 0404                    add al, 04
:00420AC2 0404                    add al, 04
:00420AC4 0404                    add al, 04
:00420AC6 0404                    add al, 04
:00420AC8 0404                    add al, 04
:00420ACA 0404                    add al, 04
:00420ACC 0404                    add al, 04
:00420ACE 0404                    add al, 04
:00420AD0 0404                    add al, 04
:00420AD2 0404                    add al, 04
:00420AD4 0404                    add al, 04
:00420AD6 0404                    add al, 04
:00420AD8 0404                    add al, 04
:00420ADA 0404                    add al, 04
:00420ADC 010404                  add dword ptr [esp+eax], eax
:00420ADF 0404                    add al, 04
:00420AE1 0404                    add al, 04
:00420AE3 0404                    add al, 04
:00420AE5 0404                    add al, 04
:00420AE7 0404                    add al, 04
:00420AE9 0404                    add al, 04
:00420AEB 0404                    add al, 04
:00420AED 0404                    add al, 04
:00420AEF 0404                    add al, 04
:00420AF1 0404                    add al, 04
:00420AF3 0404                    add al, 04
:00420AF5 0404                    add al, 04
:00420AF7 0404                    add al, 04
:00420AF9 0404                    add al, 04
:00420AFB 0404                    add al, 04
:00420AFD 0404                    add al, 04
:00420AFF 0404                    add al, 04
:00420B01 0404                    add al, 04
:00420B03 0404                    add al, 04
:00420B05 0404                    add al, 04
:00420B07 0404                    add al, 04
:00420B09 0404                    add al, 04
:00420B0B 0404                    add al, 04
:00420B0D 0404                    add al, 04
:00420B0F 0404                    add al, 04
:00420B11 0404                    add al, 04
:00420B13 0404                    add al, 04
:00420B15 0404                    add al, 04
:00420B17 0404                    add al, 04
:00420B19 0404                    add al, 04
:00420B1B 0404                    add al, 04
:00420B1D 0404                    add al, 04
:00420B1F 0404                    add al, 04
:00420B21 0404                    add al, 04
:00420B23 0404                    add al, 04
:00420B25 0404                    add al, 04
:00420B27 0404                    add al, 04
:00420B29 0404                    add al, 04
:00420B2B 0404                    add al, 04
:00420B2D 0404                    add al, 04
:00420B2F 0404                    add al, 04
:00420B31 0404                    add al, 04
:00420B33 0404                    add al, 04
:00420B35 0404                    add al, 04
:00420B37 0404                    add al, 04
:00420B39 0404                    add al, 04
:00420B3B 0404                    add al, 04
:00420B3D 0404                    add al, 04
:00420B3F 0404                    add al, 04
:00420B41 0404                    add al, 04
:00420B43 0404                    add al, 04
:00420B45 0404                    add al, 04
:00420B47 0404                    add al, 04
:00420B49 0404                    add al, 04
:00420B4B 0203                    add al, byte ptr [ebx]

* Referenced by a CALL at Addresses:
|:0042093C   , :004209A6   , :00421BE3   , :00421C7E   , :00421CD9   
|:00421CF7   , :00421FBD   , :00421FD0   , :004262D4   
|
:00420B4D 55                      push ebp
:00420B4E 8BEC                    mov ebp, esp
:00420B50 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00420B54 7418                    je 00420B6E
:00420B56 6837FF4100              push 0041FF37
:00420B5B 682C010000              push 0000012C
:00420B60 6A6E                    push 0000006E
:00420B62 8B4508                  mov eax, dword ptr [ebp+08]
:00420B65 50                      push eax

* Reference To: USER32.SetTimer, Ord:0216h
                                  |
:00420B66 FF1570D64B00            Call dword ptr [004BD670]
:00420B6C EB0C                    jmp 00420B7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420B54(C)
|
:00420B6E 6A6E                    push 0000006E
:00420B70 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420B73 51                      push ecx

* Reference To: USER32.KillTimer, Ord:016Dh
                                  |
:00420B74 FF1580D64B00            Call dword ptr [004BD680]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420B6C(U)
|
:00420B7A 5D                      pop ebp
:00420B7B C3                      ret



* Referenced by a CALL at Addresses:
|:0042094A   , :004209B4   , :00423844   , :0042386D   , :00424EB2   
|:00424FDE   , :004260C1   , :004261AE   , :0042879B   , :004287C5   
|:00428E33   , :00428EC8   , :00429383   , :0042BD81   
|
:00420B7C 55                      push ebp
:00420B7D 8BEC                    mov ebp, esp
:00420B7F 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00420B83 7418                    je 00420B9D
:00420B85 6854004200              push 00420054

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00420B8A 68C8000000              push 000000C8
:00420B8F 6A6F                    push 0000006F
:00420B91 8B4508                  mov eax, dword ptr [ebp+08]
:00420B94 50                      push eax

* Reference To: USER32.SetTimer, Ord:0216h
                                  |
:00420B95 FF1570D64B00            Call dword ptr [004BD670]
:00420B9B EB0C                    jmp 00420BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420B83(C)
|
:00420B9D 6A6F                    push 0000006F
:00420B9F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420BA2 51                      push ecx

* Reference To: USER32.KillTimer, Ord:016Dh
                                  |
:00420BA3 FF1580D64B00            Call dword ptr [004BD680]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420B9B(U)
|
:00420BA9 5D                      pop ebp
:00420BAA C3                      ret



* Referenced by a CALL at Address:
|:004209CA   
|
:00420BAB 55                      push ebp
:00420BAC 8BEC                    mov ebp, esp
:00420BAE B928474900              mov ecx, 00494728
:00420BB3 E82827FEFF              call 004032E0
:00420BB8 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00420BB9 FF1544D44B00            Call dword ptr [004BD444]
:00420BBF B928474900              mov ecx, 00494728
:00420BC4 E83727FEFF              call 00403300
:00420BC9 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00420BCA FF1544D44B00            Call dword ptr [004BD444]
:00420BD0 5D                      pop ebp
:00420BD1 C3                      ret



* Referenced by a CALL at Address:
|:004209BC   
|
:00420BD2 55                      push ebp
:00420BD3 8BEC                    mov ebp, esp
:00420BD5 B938464900              mov ecx, 00494638
:00420BDA E801D40000              call 0042DFE0
:00420BDF B9D0454900              mov ecx, 004945D0
:00420BE4 E8F7D30000              call 0042DFE0
:00420BE9 B938464900              mov ecx, 00494638
:00420BEE E80DD40000              call 0042E000
:00420BF3 B9D0454900              mov ecx, 004945D0
:00420BF8 E803D40000              call 0042E000
:00420BFD B938464900              mov ecx, 00494638
:00420C02 E819D40000              call 0042E020
:00420C07 B9D0454900              mov ecx, 004945D0
:00420C0C E80FD40000              call 0042E020
:00420C11 B9A8464900              mov ecx, 004946A8
:00420C16 E8C5820500              call 00478EE0
:00420C1B B910474900              mov ecx, 00494710
:00420C20 E8BB820500              call 00478EE0
:00420C25 B940474900              mov ecx, 00494740
:00420C2A E8B1820500              call 00478EE0
:00420C2F B958474900              mov ecx, 00494758
:00420C34 E8A7820500              call 00478EE0
:00420C39 5D                      pop ebp
:00420C3A C3                      ret



* Referenced by a CALL at Address:
|:004209C1   
|
:00420C3B 55                      push ebp
:00420C3C 8BEC                    mov ebp, esp
:00420C3E 6A00                    push 00000000
:00420C40 A130544B00              mov eax, dword ptr [004B5430]
:00420C45 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00420C46 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00420C4C 6A09                    push 00000009
:00420C4E E8BC490500              call 0047560F
:00420C53 83C404                  add esp, 00000004
:00420C56 E811520500              call 00475E6C
:00420C5B 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00420C5D 6A0A                    push 0000000A
:00420C5F 6A00                    push 00000000
:00420C61 E8B7500500              call 00475D1D
:00420C66 83C40C                  add esp, 0000000C
:00420C69 6A00                    push 00000000
:00420C6B E89F490500              call 0047560F
:00420C70 83C404                  add esp, 00000004
:00420C73 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00420C79 51                      push ecx
:00420C7A 8B1530544B00            mov edx, dword ptr [004B5430]
:00420C80 52                      push edx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:00420C81 FF15E8D54B00            Call dword ptr [004BD5E8]
:00420C87 5D                      pop ebp
:00420C88 C3                      ret



* Referenced by a CALL at Address:
|:004209D2   
|
:00420C89 55                      push ebp
:00420C8A 8BEC                    mov ebp, esp
:00420C8C 6A01                    push 00000001
:00420C8E 6A00                    push 00000000
:00420C90 6898464900              push 00494698
:00420C95 E836EE0400              call 0046FAD0
:00420C9A 83C40C                  add esp, 0000000C
:00420C9D 6A01                    push 00000001
:00420C9F 6A00                    push 00000000
:00420CA1 6870474900              push 00494770
:00420CA6 E825EE0400              call 0046FAD0
:00420CAB 83C40C                  add esp, 0000000C
:00420CAE C7056C474900FFFFFFFF    mov dword ptr [0049476C], FFFFFFFF
:00420CB8 6A01                    push 00000001
:00420CBA B928474900              mov ecx, 00494728
:00420CBF E82C590400              call 004665F0
:00420CC4 5D                      pop ebp
:00420CC5 C3                      ret



* Referenced by a CALL at Address:
|:00420902   
|
:00420CC6 55                      push ebp
:00420CC7 8BEC                    mov ebp, esp
:00420CC9 B938464900              mov ecx, 00494638
:00420CCE E8ADD20000              call 0042DF80
:00420CD3 B9D0454900              mov ecx, 004945D0
:00420CD8 E8A3D20000              call 0042DF80
:00420CDD B938464900              mov ecx, 00494638
:00420CE2 E8B9D20000              call 0042DFA0
:00420CE7 B9D0454900              mov ecx, 004945D0
:00420CEC E8AFD20000              call 0042DFA0
:00420CF1 B938464900              mov ecx, 00494638
:00420CF6 E8C5D20000              call 0042DFC0
:00420CFB B9D0454900              mov ecx, 004945D0
:00420D00 E8BBD20000              call 0042DFC0
:00420D05 6A01                    push 00000001
:00420D07 6800A20000              push 0000A200
:00420D0C B910474900              mov ecx, 00494710
:00420D11 E87A810500              call 00478E90
:00420D16 6A01                    push 00000001
:00420D18 6800A20000              push 0000A200
:00420D1D B940474900              mov ecx, 00494740
:00420D22 E869810500              call 00478E90
:00420D27 6A01                    push 00000001
:00420D29 68001B0000              push 00001B00
:00420D2E B958474900              mov ecx, 00494758
:00420D33 E858810500              call 00478E90
:00420D38 6A01                    push 00000001
:00420D3A 6800600000              push 00006000
:00420D3F B9A8464900              mov ecx, 004946A8
:00420D44 E847810500              call 00478E90
:00420D49 5D                      pop ebp
:00420D4A C3                      ret



* Referenced by a CALL at Address:
|:00420916   
|
:00420D4B 55                      push ebp
:00420D4C 8BEC                    mov ebp, esp
:00420D4E 6A00                    push 00000000
:00420D50 B9D0454900              mov ecx, 004945D0
:00420D55 E826D30000              call 0042E080
:00420D5A 8B450C                  mov eax, dword ptr [ebp+0C]
:00420D5D 50                      push eax
:00420D5E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420D61 51                      push ecx
:00420D62 E81A020000              call 00420F81
:00420D67 83C408                  add esp, 00000008
:00420D6A 8B5508                  mov edx, dword ptr [ebp+08]
:00420D6D 52                      push edx
:00420D6E E8E0020000              call 00421053
:00420D73 83C404                  add esp, 00000004
:00420D76 85C0                    test eax, eax
:00420D78 7505                    jne 00420D7F
:00420D7A E907010000              jmp 00420E86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420D78(C)
|
:00420D7F 8B4510                  mov eax, dword ptr [ebp+10]
:00420D82 25FF000000              and eax, 000000FF
:00420D87 83E002                  and eax, 00000002
:00420D8A 85C0                    test eax, eax
:00420D8C 7421                    je 00420DAF
:00420D8E 6A00                    push 00000000
:00420D90 6A01                    push 00000001
:00420D92 68F1000000              push 000000F1
:00420D97 68C5040000              push 000004C5
:00420D9C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420D9F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420DA0 FF1510D64B00            Call dword ptr [004BD610]
:00420DA6 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00420DA7 FF1504D64B00            Call dword ptr [004BD604]
:00420DAD EB1F                    jmp 00420DCE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420D8C(C)
|
:00420DAF 6A00                    push 00000000
:00420DB1 6A01                    push 00000001
:00420DB3 68F1000000              push 000000F1
:00420DB8 68C7040000              push 000004C7
:00420DBD 8B5508                  mov edx, dword ptr [ebp+08]
:00420DC0 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420DC1 FF1510D64B00            Call dword ptr [004BD610]
:00420DC7 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00420DC8 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420DAD(U)
|
:00420DCE 8B4510                  mov eax, dword ptr [ebp+10]
:00420DD1 25FF000000              and eax, 000000FF
:00420DD6 83E001                  and eax, 00000001
:00420DD9 85C0                    test eax, eax
:00420DDB 7421                    je 00420DFE
:00420DDD 6A00                    push 00000000
:00420DDF 6A01                    push 00000001
:00420DE1 68F1000000              push 000000F1
:00420DE6 68E5040000              push 000004E5
:00420DEB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420DEE 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420DEF FF1510D64B00            Call dword ptr [004BD610]
:00420DF5 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00420DF6 FF1504D64B00            Call dword ptr [004BD604]
:00420DFC EB1F                    jmp 00420E1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420DDB(C)
|
:00420DFE 6A00                    push 00000000
:00420E00 6A01                    push 00000001
:00420E02 68F1000000              push 000000F1

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:04F8, "Static"
                                  |
:00420E07 68F8040000              push 000004F8
:00420E0C 8B5508                  mov edx, dword ptr [ebp+08]
:00420E0F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420E10 FF1510D64B00            Call dword ptr [004BD610]
:00420E16 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00420E17 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420DFC(U)
|
:00420E1D 687A040000              push 0000047A
:00420E22 8B4508                  mov eax, dword ptr [ebp+08]
:00420E25 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420E26 FF1510D64B00            Call dword ptr [004BD610]
:00420E2C 50                      push eax

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:00420E2D FF1500D64B00            Call dword ptr [004BD600]
:00420E33 6800006400              push 00640000
:00420E38 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:00420E3A 6801040000              push 00000401
:00420E3F 68D9040000              push 000004D9
:00420E44 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420E47 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00420E48 FF15D4D54B00            Call dword ptr [004BD5D4]
:00420E4E 6800006400              push 00640000
:00420E53 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:00420E55 6801040000              push 00000401
:00420E5A 68D0040000              push 000004D0
:00420E5F 8B5508                  mov edx, dword ptr [ebp+08]
:00420E62 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00420E63 FF15D4D54B00            Call dword ptr [004BD5D4]
:00420E69 8B4508                  mov eax, dword ptr [ebp+08]
:00420E6C 50                      push eax
:00420E6D E893000000              call 00420F05
:00420E72 83C404                  add esp, 00000004
:00420E75 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420E78 51                      push ecx
:00420E79 E80A000000              call 00420E88
:00420E7E 83C404                  add esp, 00000004
:00420E81 E8B8140000              call 0042233E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00420D7A(U)
|
:00420E86 5D                      pop ebp
:00420E87 C3                      ret



* Referenced by a CALL at Address:
|:00420E79   
|
:00420E88 55                      push ebp
:00420E89 8BEC                    mov ebp, esp
:00420E8B 83EC08                  sub esp, 00000008
:00420E8E 8B4508                  mov eax, dword ptr [ebp+08]
:00420E91 50                      push eax
:00420E92 B938464900              mov ecx, 00494638
:00420E97 E8703B0000              call 00424A0C
:00420E9C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420E9F 51                      push ecx
:00420EA0 B9D0454900              mov ecx, 004945D0
:00420EA5 E8623B0000              call 00424A0C
:00420EAA 6A01                    push 00000001
:00420EAC B928474900              mov ecx, 00494728
:00420EB1 E83A570400              call 004665F0

* Possible StringData Ref from Data Obj ->"1/10"
                                  |
:00420EB6 6854CD4700              push 0047CD54

* Possible Reference to Dialog: DialogID_00BB, CONTROL_ID:0433, "0"
                                  |
:00420EBB 6833040000              push 00000433
:00420EC0 8B5508                  mov edx, dword ptr [ebp+08]
:00420EC3 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420EC4 FF1510D64B00            Call dword ptr [004BD610]
:00420ECA 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00420ECB FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00420ED1 6A0A                    push 0000000A
:00420ED3 8D45F8                  lea eax, dword ptr [ebp-08]
:00420ED6 50                      push eax
:00420ED7 B978294B00              mov ecx, 004B2978
:00420EDC E8FF5A0100              call 004369E0
:00420EE1 50                      push eax
:00420EE2 E8D9960400              call 0046A5C0
:00420EE7 83C40C                  add esp, 0000000C
:00420EEA 50                      push eax

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:0432, "65535"
                                  |
:00420EEB 6832040000              push 00000432
:00420EF0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420EF3 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420EF4 FF1510D64B00            Call dword ptr [004BD610]
:00420EFA 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00420EFB FF1514D64B00            Call dword ptr [004BD614]
:00420F01 8BE5                    mov esp, ebp
:00420F03 5D                      pop ebp
:00420F04 C3                      ret



* Referenced by a CALL at Address:
|:00420E6D   
|
:00420F05 55                      push ebp
:00420F06 8BEC                    mov ebp, esp
:00420F08 6A00                    push 00000000
:00420F0A A130544B00              mov eax, dword ptr [004B5430]
:00420F0F 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00420F10 FF1500D74B00            Call dword ptr [004BD700]
:00420F16 8B4D08                  mov ecx, dword ptr [ebp+08]
:00420F19 51                      push ecx
:00420F1A E83E080000              call 0042175D
:00420F1F 83C404                  add esp, 00000004
:00420F22 E860F0FFFF              call 0041FF87
:00420F27 8B5508                  mov edx, dword ptr [ebp+08]
:00420F2A 52                      push edx
:00420F2B E82F0A0000              call 0042195F
:00420F30 83C404                  add esp, 00000004
:00420F33 68C3040000              push 000004C3
:00420F38 8B4508                  mov eax, dword ptr [ebp+08]
:00420F3B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00420F3C FF1510D64B00            Call dword ptr [004BD610]
:00420F42 50                      push eax
:00420F43 8B0D30544B00            mov ecx, dword ptr [004B5430]
:00420F49 51                      push ecx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:00420F4A FF15E8D54B00            Call dword ptr [004BD5E8]
:00420F50 6A00                    push 00000000
:00420F52 8B1584B04700            mov edx, dword ptr [0047B084]
:00420F58 52                      push edx
:00420F59 A180B04700              mov eax, dword ptr [0047B080]
:00420F5E 50                      push eax
:00420F5F 6A00                    push 00000000
:00420F61 6A00                    push 00000000
:00420F63 8B0D30544B00            mov ecx, dword ptr [004B5430]
:00420F69 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00420F6A FF15ECD54B00            Call dword ptr [004BD5EC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00420F70 6A05                    push 00000005
:00420F72 8B1530544B00            mov edx, dword ptr [004B5430]
:00420F78 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00420F79 FF1500D74B00            Call dword ptr [004BD700]
:00420F7F 5D                      pop ebp
:00420F80 C3                      ret



* Referenced by a CALL at Address:
|:00420D62   
|
:00420F81 55                      push ebp
:00420F82 8BEC                    mov ebp, esp
:00420F84 83EC08                  sub esp, 00000008
:00420F87 8B450C                  mov eax, dword ptr [ebp+0C]
:00420F8A 8B0C85F04C4B00          mov ecx, dword ptr [4*eax+004B4CF0]
:00420F91 894DFC                  mov dword ptr [ebp-04], ecx
:00420F94 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00420F97 E8E421FEFF              call 00403180
:00420F9C 8945F8                  mov dword ptr [ebp-08], eax
:00420F9F 8B55F8                  mov edx, dword ptr [ebp-08]
:00420FA2 52                      push edx
:00420FA3 B938464900              mov ecx, 00494638
:00420FA8 E8B3CF0000              call 0042DF60
:00420FAD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420FB0 6BC950                  imul ecx, 00000050
:00420FB3 81C1787F4900            add ecx, 00497F78
:00420FB9 E82C0EFEFF              call 00401DEA
:00420FBE 50                      push eax
:00420FBF B938464900              mov ecx, 00494638
:00420FC4 E818380000              call 004247E1
:00420FC9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420FCC 6BC950                  imul ecx, 00000050
:00420FCF 81C1787F4900            add ecx, 00497F78
:00420FD5 E8410EFEFF              call 00401E1B
:00420FDA 50                      push eax
:00420FDB B938464900              mov ecx, 00494638
:00420FE0 E84D380000              call 00424832
:00420FE5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00420FE8 6BC950                  imul ecx, 00000050
:00420FEB 81C1787F4900            add ecx, 00497F78
:00420FF1 E8EACE0000              call 0042DEE0
:00420FF6 25FF000000              and eax, 000000FF
:00420FFB 50                      push eax
:00420FFC B938464900              mov ecx, 00494638
:00421001 E88AD20000              call 0042E290
:00421006 B938464900              mov ecx, 00494638
:0042100B E8F1380000              call 00424901
:00421010 6A30                    push 00000030
:00421012 68F0000000              push 000000F0
:00421017 B938464900              mov ecx, 00494638
:0042101C E87FD00000              call 0042E0A0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00421021 6A03                    push 00000003
:00421023 B938464900              mov ecx, 00494638
:00421028 E893D00000              call 0042E0C0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042102D 6A03                    push 00000003
:0042102F B938464900              mov ecx, 00494638
:00421034 E8B7D00000              call 0042E0F0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00421039 6A03                    push 00000003
:0042103B B938464900              mov ecx, 00494638
:00421040 E8DBD00000              call 0042E120
:00421045 B938464900              mov ecx, 00494638
:0042104A E821D10000              call 0042E170
:0042104F 8BE5                    mov esp, ebp
:00421051 5D                      pop ebp
:00421052 C3                      ret



* Referenced by a CALL at Addresses:
|:00420D6E   , :00428708   
|
:00421053 55                      push ebp
:00421054 8BEC                    mov ebp, esp
:00421056 51                      push ecx
:00421057 8B4508                  mov eax, dword ptr [ebp+08]
:0042105A 50                      push eax
:0042105B E8B7000000              call 00421117
:00421060 83C404                  add esp, 00000004
:00421063 8945FC                  mov dword ptr [ebp-04], eax
:00421066 817DFCFFFF0000          cmp dword ptr [ebp-04], 0000FFFF
:0042106D 7507                    jne 00421076
:0042106F 33C0                    xor eax, eax
:00421071 E99D000000              jmp 00421113

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042106D(C)
|
:00421076 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421079 51                      push ecx
:0042107A B9D0454900              mov ecx, 004945D0
:0042107F E8DCCE0000              call 0042DF60
:00421084 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421087 6BC950                  imul ecx, 00000050
:0042108A 81C1787F4900            add ecx, 00497F78
:00421090 E8550DFEFF              call 00401DEA
:00421095 50                      push eax
:00421096 B9D0454900              mov ecx, 004945D0
:0042109B E841370000              call 004247E1
:004210A0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004210A3 6BC950                  imul ecx, 00000050
:004210A6 81C1787F4900            add ecx, 00497F78
:004210AC E86A0DFEFF              call 00401E1B
:004210B1 50                      push eax
:004210B2 B9D0454900              mov ecx, 004945D0
:004210B7 E876370000              call 00424832
:004210BC 6A00                    push 00000000
:004210BE B9D0454900              mov ecx, 004945D0
:004210C3 E8C8D10000              call 0042E290
:004210C8 B9D0454900              mov ecx, 004945D0
:004210CD E82F380000              call 00424901
:004210D2 6A30                    push 00000030
:004210D4 6A00                    push 00000000
:004210D6 B9D0454900              mov ecx, 004945D0
:004210DB E8C0CF0000              call 0042E0A0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004210E0 6A03                    push 00000003
:004210E2 B9D0454900              mov ecx, 004945D0
:004210E7 E8D4CF0000              call 0042E0C0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004210EC 6A03                    push 00000003
:004210EE B9D0454900              mov ecx, 004945D0
:004210F3 E8F8CF0000              call 0042E0F0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004210F8 6A03                    push 00000003
:004210FA B9D0454900              mov ecx, 004945D0
:004210FF E81CD00000              call 0042E120
:00421104 B9D0454900              mov ecx, 004945D0
:00421109 E862D00000              call 0042E170
:0042110E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421071(U)
|
:00421113 8BE5                    mov esp, ebp
:00421115 5D                      pop ebp
:00421116 C3                      ret



* Referenced by a CALL at Address:
|:0042105B   
|
:00421117 55                      push ebp
:00421118 8BEC                    mov ebp, esp
:0042111A 83EC1C                  sub esp, 0000001C
:0042111D 56                      push esi
:0042111E 57                      push edi
:0042111F B978294B00              mov ecx, 004B2978
:00421124 E837EDFEFF              call 0040FE60
:00421129 8845EC                  mov byte ptr [ebp-14], al
:0042112C E8172A0000              call 00423B48
:00421131 8945F4                  mov dword ptr [ebp-0C], eax
:00421134 8B45F4                  mov eax, dword ptr [ebp-0C]
:00421137 50                      push eax
:00421138 B9D0454900              mov ecx, 004945D0
:0042113D E8FECE0000              call 0042E040
:00421142 50                      push eax
:00421143 8A4DEC                  mov cl, byte ptr [ebp-14]
:00421146 51                      push ecx
:00421147 E85E050000              call 004216AA
:0042114C 83C40C                  add esp, 0000000C
:0042114F 8945F0                  mov dword ptr [ebp-10], eax
:00421152 B938464900              mov ecx, 00494638
:00421157 E8A421FEFF              call 00403300
:0042115C 8945F8                  mov dword ptr [ebp-08], eax
:0042115F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00421162 6BC950                  imul ecx, 00000050
:00421165 81C1787F4900            add ecx, 00497F78
:0042116B E830EDFEFF              call 0040FEA0
:00421170 25FF000000              and eax, 000000FF
:00421175 3B45F4                  cmp eax, dword ptr [ebp-0C]
:00421178 7E20                    jle 0042119A

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042117A C7058047490002000000    mov dword ptr [00494780], 00000002
:00421184 6A00                    push 00000000
:00421186 8B5508                  mov edx, dword ptr [ebp+08]
:00421189 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0042118A FF15D8D54B00            Call dword ptr [004BD5D8]
:00421190 B8FFFF0000              mov eax, 0000FFFF
:00421195 E976010000              jmp 00421310

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421178(C)
|
:0042119A 8B45EC                  mov eax, dword ptr [ebp-14]
:0042119D 25FF000000              and eax, 000000FF
:004211A2 83F80A                  cmp eax, 0000000A
:004211A5 7D60                    jge 00421207
:004211A7 6A0B                    push 0000000B
:004211A9 E802720500              call 004783B0
:004211AE 83C404                  add esp, 00000004
:004211B1 83F804                  cmp eax, 00000004
:004211B4 7327                    jnb 004211DD
:004211B6 6853020000              push 00000253
:004211BB 6A60                    push 00000060
:004211BD E8EE710500              call 004783B0
:004211C2 83C404                  add esp, 00000004
:004211C5 05F4010000              add eax, 000001F4
:004211CA 50                      push eax
:004211CB 68F4010000              push 000001F4
:004211D0 E8D4260000              call 004238A9
:004211D5 83C40C                  add esp, 0000000C
:004211D8 8945FC                  mov dword ptr [ebp-04], eax
:004211DB EB28                    jmp 00421205

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004211B4(C)
|
:004211DD 68FF020000              push 000002FF
:004211E2 6880000000              push 00000080
:004211E7 E8C4710500              call 004783B0
:004211EC 83C404                  add esp, 00000004
:004211EF 0580020000              add eax, 00000280
:004211F4 50                      push eax
:004211F5 6880020000              push 00000280
:004211FA E8AA260000              call 004238A9
:004211FF 83C40C                  add esp, 0000000C
:00421202 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004211DB(U)
|
:00421205 EB28                    jmp 0042122F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004211A5(C)
|
:00421207 68FF020000              push 000002FF
:0042120C 680C010000              push 0000010C
:00421211 E89A710500              call 004783B0
:00421216 83C404                  add esp, 00000004
:00421219 05F4010000              add eax, 000001F4
:0042121E 50                      push eax
:0042121F 68F4010000              push 000001F4
:00421224 E880260000              call 004238A9
:00421229 83C40C                  add esp, 0000000C
:0042122C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421205(U)
|
:0042122F B9D0454900              mov ecx, 004945D0
:00421234 E807CE0000              call 0042E040
:00421239 83F805                  cmp eax, 00000005
:0042123C 7276                    jb 004212B4
:0042123E 8B45EC                  mov eax, dword ptr [ebp-14]
:00421241 25FF000000              and eax, 000000FF
:00421246 99                      cdq
:00421247 83E207                  and edx, 00000007
:0042124A 03C2                    add eax, edx
:0042124C C1F803                  sar eax, 03
:0042124F 50                      push eax
:00421250 B978294B00              mov ecx, 004B2978
:00421255 E8A6CC0000              call 0042DF00
:0042125A 8845E4                  mov byte ptr [ebp-1C], al
:0042125D 8A4DE4                  mov cl, byte ptr [ebp-1C]
:00421260 51                      push ecx
:00421261 8A55EC                  mov dl, byte ptr [ebp-14]
:00421264 52                      push edx
:00421265 E819100000              call 00422283
:0042126A 83C408                  add esp, 00000008
:0042126D 8845E8                  mov byte ptr [ebp-18], al
:00421270 8B45EC                  mov eax, dword ptr [ebp-14]
:00421273 25FF000000              and eax, 000000FF
:00421278 83F809                  cmp eax, 00000009
:0042127B 7516                    jne 00421293
:0042127D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00421280 81E1FF000000            and ecx, 000000FF
:00421286 85C9                    test ecx, ecx
:00421288 7509                    jne 00421293
:0042128A C745FC31000000          mov [ebp-04], 00000031
:00421291 EB21                    jmp 004212B4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042127B(C), :00421288(C)
|
:00421293 8B55EC                  mov edx, dword ptr [ebp-14]
:00421296 81E2FF000000            and edx, 000000FF
:0042129C 83FA11                  cmp edx, 00000011
:0042129F 7513                    jne 004212B4
:004212A1 8B45E8                  mov eax, dword ptr [ebp-18]
:004212A4 25FF000000              and eax, 000000FF
:004212A9 85C0                    test eax, eax
:004212AB 7507                    jne 004212B4
:004212AD C745FC30000000          mov [ebp-04], 00000030

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042123C(C), :00421291(U), :0042129F(C), :004212AB(C)
|
:004212B4 6A00                    push 00000000
:004212B6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004212B9 51                      push ecx
:004212BA B9007D4A00              mov ecx, 004A7D00
:004212BF E8FCEBFEFF              call 0040FEC0
:004212C4 50                      push eax
:004212C5 E852E1FEFF              call 0040F41C
:004212CA 83C40C                  add esp, 0000000C
:004212CD 8B75FC                  mov esi, dword ptr [ebp-04]
:004212D0 6BF650                  imul esi, 00000050
:004212D3 81C6787F4900            add esi, 00497F78

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:004212D9 B914000000              mov ecx, 00000014
:004212DE BFC0464900              mov edi, 004946C0
:004212E3 F3                      repz
:004212E4 A5                      movsd
:004212E5 8B55F0                  mov edx, dword ptr [ebp-10]
:004212E8 83EA01                  sub edx, 00000001
:004212EB 52                      push edx
:004212EC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004212EF 6BC950                  imul ecx, 00000050
:004212F2 81C1787F4900            add ecx, 00497F78
:004212F8 E8DE07FEFF              call 00401ADB
:004212FD 8A45EC                  mov al, byte ptr [ebp-14]
:00421300 50                      push eax
:00421301 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421304 51                      push ecx
:00421305 E80C000000              call 00421316
:0042130A 83C408                  add esp, 00000008
:0042130D 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421195(U)
|
:00421310 5F                      pop edi
:00421311 5E                      pop esi
:00421312 8BE5                    mov esp, ebp
:00421314 5D                      pop ebp
:00421315 C3                      ret



* Referenced by a CALL at Address:
|:00421305   
|
:00421316 55                      push ebp
:00421317 8BEC                    mov ebp, esp
:00421319 83EC74                  sub esp, 00000074
:0042131C C6459832                mov [ebp-68], 32
:00421320 C6459934                mov [ebp-67], 34
:00421324 C6459A35                mov [ebp-66], 35
:00421328 C6459B39                mov [ebp-65], 39
:0042132C C6459C3B                mov [ebp-64], 3B
:00421330 C6459D3D                mov [ebp-63], 3D
:00421334 C645E054                mov [ebp-20], 54
:00421338 C645E156                mov [ebp-1F], 56
:0042133C C645E257                mov [ebp-1E], 57
:00421340 C645E359                mov [ebp-1D], 59
:00421344 C645E45C                mov [ebp-1C], 5C
:00421348 C645E55E                mov [ebp-1B], 5E
:0042134C C6459034                mov [ebp-70], 34
:00421350 C6459137                mov [ebp-6F], 37
:00421354 C6459238                mov [ebp-6E], 38
:00421358 C645933B                mov [ebp-6D], 3B
:0042135C C645943D                mov [ebp-6C], 3D
:00421360 C6459542                mov [ebp-6B], 42
:00421364 C645A855                mov [ebp-58], 55
:00421368 C645A957                mov [ebp-57], 57
:0042136C C645AA59                mov [ebp-56], 59
:00421370 C645AB5C                mov [ebp-55], 5C
:00421374 C645AC5B                mov [ebp-54], 5B
:00421378 C645AD61                mov [ebp-53], 61
:0042137C C645C8FF                mov [ebp-38], FF
:00421380 C645C9FF                mov [ebp-37], FF
:00421384 C645CA6E                mov [ebp-36], 6E
:00421388 C645CB70                mov [ebp-35], 70
:0042138C C645CC71                mov [ebp-34], 71
:00421390 C645CD73                mov [ebp-33], 73
:00421394 C645F8FF                mov [ebp-08], FF
:00421398 C645F9FF                mov [ebp-07], FF
:0042139C C645FA83                mov [ebp-06], 83
:004213A0 C645FB82                mov [ebp-05], 82
:004213A4 C645FC85                mov [ebp-04], 85
:004213A8 C645FD84                mov [ebp-03], 84
:004213AC C645D002                mov [ebp-30], 02
:004213B0 C645D106                mov [ebp-2F], 06
:004213B4 C645D207                mov [ebp-2E], 07
:004213B8 C645D30A                mov [ebp-2D], 0A
:004213BC C645D422                mov [ebp-2C], 22
:004213C0 C645D524                mov [ebp-2B], 24
:004213C4 C645C08E                mov [ebp-40], 8E
:004213C8 C645C18D                mov [ebp-3F], 8D
:004213CC C645C28F                mov [ebp-3E], 8F
:004213D0 C645C392                mov [ebp-3D], 92
:004213D4 C645C493                mov [ebp-3C], 93
:004213D8 C645C597                mov [ebp-3B], 97
:004213DC C645F08E                mov [ebp-10], 8E
:004213E0 C645F18D                mov [ebp-0F], 8D
:004213E4 C645F28F                mov [ebp-0E], 8F
:004213E8 C645F392                mov [ebp-0D], 92
:004213EC C645F493                mov [ebp-0C], 93
:004213F0 C645F598                mov [ebp-0B], 98
:004213F4 C645D800                mov [ebp-28], 00
:004213F8 C645D902                mov [ebp-27], 02
:004213FC C645DA0D                mov [ebp-26], 0D
:00421400 C645DB06                mov [ebp-25], 06
:00421404 C645DC10                mov [ebp-24], 10
:00421408 C645DD0A                mov [ebp-23], 0A
:0042140C C645A001                mov [ebp-60], 01
:00421410 C645A103                mov [ebp-5F], 03
:00421414 C645A206                mov [ebp-5E], 06
:00421418 C645A307                mov [ebp-5D], 07
:0042141C C645A40A                mov [ebp-5C], 0A
:00421420 C645A50B                mov [ebp-5B], 0B
:00421424 C645B001                mov [ebp-50], 01
:00421428 C645B103                mov [ebp-4F], 03
:0042142C C645B206                mov [ebp-4E], 06
:00421430 C645B307                mov [ebp-4D], 07
:00421434 C645B40A                mov [ebp-4C], 0A
:00421438 C645B50B                mov [ebp-4B], 0B
:0042143C C645B834                mov [ebp-48], 34
:00421440 C645B937                mov [ebp-47], 37
:00421444 C645BA38                mov [ebp-46], 38
:00421448 C645BB3B                mov [ebp-45], 3B
:0042144C C645BC3D                mov [ebp-44], 3D
:00421450 C645BD42                mov [ebp-43], 42
:00421454 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421457 6BC950                  imul ecx, 00000050
:0042145A 81C1787F4900            add ecx, 00497F78
:00421460 E83B1DFEFF              call 004031A0
:00421465 8845E8                  mov byte ptr [ebp-18], al
:00421468 8B45E8                  mov eax, dword ptr [ebp-18]
:0042146B 25FF000000              and eax, 000000FF
:00421470 89458C                  mov dword ptr [ebp-74], eax
:00421473 8B4D8C                  mov ecx, dword ptr [ebp-74]
:00421476 83E902                  sub ecx, 00000002
:00421479 894D8C                  mov dword ptr [ebp-74], ecx
:0042147C 837D8C19                cmp dword ptr [ebp-74], 00000019
:00421480 0F878B010000            ja 00421611
:00421486 8B458C                  mov eax, dword ptr [ebp-74]
:00421489 33D2                    xor edx, edx
:0042148B 8A9090164200            mov dl, byte ptr [eax+00421690]
:00421491 FF249554164200          jmp dword ptr [4*edx+00421654]
:00421498 8B450C                  mov eax, dword ptr [ebp+0C]
:0042149B 25FF000000              and eax, 000000FF
:004214A0 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004214A1 B905000000              mov ecx, 00000005
:004214A6 F7F9                    idiv ecx
:004214A8 8A540598                mov dl, byte ptr [ebp+eax-68]
:004214AC 8855EC                  mov byte ptr [ebp-14], dl
:004214AF E961010000              jmp 00421615
:004214B4 8B450C                  mov eax, dword ptr [ebp+0C]
:004214B7 25FF000000              and eax, 000000FF
:004214BC 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004214BD B905000000              mov ecx, 00000005
:004214C2 F7F9                    idiv ecx
:004214C4 8A5405E0                mov dl, byte ptr [ebp+eax-20]
:004214C8 8855EC                  mov byte ptr [ebp-14], dl
:004214CB E945010000              jmp 00421615
:004214D0 8B450C                  mov eax, dword ptr [ebp+0C]
:004214D3 25FF000000              and eax, 000000FF
:004214D8 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004214D9 B905000000              mov ecx, 00000005
:004214DE F7F9                    idiv ecx
:004214E0 8A540590                mov dl, byte ptr [ebp+eax-70]
:004214E4 8855EC                  mov byte ptr [ebp-14], dl
:004214E7 E929010000              jmp 00421615
:004214EC 8B450C                  mov eax, dword ptr [ebp+0C]
:004214EF 25FF000000              and eax, 000000FF
:004214F4 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004214F5 B905000000              mov ecx, 00000005
:004214FA F7F9                    idiv ecx
:004214FC 8A5405E0                mov dl, byte ptr [ebp+eax-20]
:00421500 8855EC                  mov byte ptr [ebp-14], dl
:00421503 E90D010000              jmp 00421615
:00421508 8B450C                  mov eax, dword ptr [ebp+0C]
:0042150B 25FF000000              and eax, 000000FF
:00421510 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00421511 B905000000              mov ecx, 00000005
:00421516 F7F9                    idiv ecx
:00421518 8A5405A8                mov dl, byte ptr [ebp+eax-58]
:0042151C 8855EC                  mov byte ptr [ebp-14], dl
:0042151F E9F1000000              jmp 00421615
:00421524 8B450C                  mov eax, dword ptr [ebp+0C]
:00421527 25FF000000              and eax, 000000FF
:0042152C 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042152D B905000000              mov ecx, 00000005
:00421532 F7F9                    idiv ecx
:00421534 8A5405C8                mov dl, byte ptr [ebp+eax-38]
:00421538 8855EC                  mov byte ptr [ebp-14], dl
:0042153B E9D5000000              jmp 00421615
:00421540 8B450C                  mov eax, dword ptr [ebp+0C]
:00421543 25FF000000              and eax, 000000FF
:00421548 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00421549 B905000000              mov ecx, 00000005
:0042154E F7F9                    idiv ecx
:00421550 8A5405F8                mov dl, byte ptr [ebp+eax-08]
:00421554 8855EC                  mov byte ptr [ebp-14], dl
:00421557 E9B9000000              jmp 00421615
:0042155C 8B450C                  mov eax, dword ptr [ebp+0C]
:0042155F 25FF000000              and eax, 000000FF
:00421564 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00421565 B905000000              mov ecx, 00000005
:0042156A F7F9                    idiv ecx
:0042156C 8A5405D0                mov dl, byte ptr [ebp+eax-30]
:00421570 8855EC                  mov byte ptr [ebp-14], dl
:00421573 E99D000000              jmp 00421615
:00421578 8B450C                  mov eax, dword ptr [ebp+0C]
:0042157B 25FF000000              and eax, 000000FF
:00421580 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00421581 B905000000              mov ecx, 00000005
:00421586 F7F9                    idiv ecx
:00421588 8A5405C0                mov dl, byte ptr [ebp+eax-40]
:0042158C 8855EC                  mov byte ptr [ebp-14], dl
:0042158F E981000000              jmp 00421615
:00421594 8B450C                  mov eax, dword ptr [ebp+0C]
:00421597 25FF000000              and eax, 000000FF
:0042159C 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042159D B905000000              mov ecx, 00000005
:004215A2 F7F9                    idiv ecx
:004215A4 8A5405F0                mov dl, byte ptr [ebp+eax-10]
:004215A8 8855EC                  mov byte ptr [ebp-14], dl
:004215AB EB68                    jmp 00421615
:004215AD 8B450C                  mov eax, dword ptr [ebp+0C]
:004215B0 25FF000000              and eax, 000000FF
:004215B5 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004215B6 B905000000              mov ecx, 00000005
:004215BB F7F9                    idiv ecx
:004215BD 8A5405D8                mov dl, byte ptr [ebp+eax-28]
:004215C1 8855EC                  mov byte ptr [ebp-14], dl
:004215C4 EB4F                    jmp 00421615
:004215C6 8B450C                  mov eax, dword ptr [ebp+0C]
:004215C9 25FF000000              and eax, 000000FF
:004215CE 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004215CF B905000000              mov ecx, 00000005
:004215D4 F7F9                    idiv ecx
:004215D6 8A5405A0                mov dl, byte ptr [ebp+eax-60]
:004215DA 8855EC                  mov byte ptr [ebp-14], dl
:004215DD EB36                    jmp 00421615
:004215DF 8B450C                  mov eax, dword ptr [ebp+0C]
:004215E2 25FF000000              and eax, 000000FF
:004215E7 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004215E8 B905000000              mov ecx, 00000005
:004215ED F7F9                    idiv ecx
:004215EF 8A5405B0                mov dl, byte ptr [ebp+eax-50]
:004215F3 8855EC                  mov byte ptr [ebp-14], dl
:004215F6 EB1D                    jmp 00421615
:004215F8 8B450C                  mov eax, dword ptr [ebp+0C]
:004215FB 25FF000000              and eax, 000000FF
:00421600 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00421601 B905000000              mov ecx, 00000005
:00421606 F7F9                    idiv ecx
:00421608 8A5405B8                mov dl, byte ptr [ebp+eax-48]
:0042160C 8855EC                  mov byte ptr [ebp-14], dl
:0042160F EB04                    jmp 00421615

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421480(C)
|
:00421611 C645ECFF                mov [ebp-14], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004214AF(U), :004214CB(U), :004214E7(U), :00421503(U), :0042151F(U)
|:0042153B(U), :00421557(U), :00421573(U), :0042158F(U), :004215AB(U)
|:004215C4(U), :004215DD(U), :004215F6(U), :0042160F(U)
|
:00421615 8B45EC                  mov eax, dword ptr [ebp-14]
:00421618 25FF000000              and eax, 000000FF
:0042161D 3DFF000000              cmp eax, 000000FF
:00421622 7502                    jne 00421626
:00421624 EB2A                    jmp 00421650

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421622(C)
|
:00421626 8A4DEC                  mov cl, byte ptr [ebp-14]
:00421629 51                      push ecx
:0042162A 6A00                    push 00000000
:0042162C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042162F 6BC950                  imul ecx, 00000050
:00421632 81C1787F4900            add ecx, 00497F78
:00421638 E8C31BFEFF              call 00403200
:0042163D 6A00                    push 00000000
:0042163F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421642 6BC950                  imul ecx, 00000050
:00421645 81C1787F4900            add ecx, 00497F78
:0042164B E880B2FEFF              call 0040C8D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421624(U)
|
:00421650 8BE5                    mov esp, ebp
:00421652 5D                      pop ebp
:00421653 C3                      ret



:00421654 98144200                DWORD 00421498
:00421658 B4144200                DWORD 004214B4
:0042165C D0144200                DWORD 004214D0
:00421660 EC144200                DWORD 004214EC
:00421664 08154200                DWORD 00421508
:00421668 24154200                DWORD 00421524
:0042166C 40154200                DWORD 00421540
:00421670 5C154200                DWORD 0042155C
:00421674 78154200                DWORD 00421578
:00421678 94154200                DWORD 00421594
:0042167C AD154200                DWORD 004215AD
:00421680 C6154200                DWORD 004215C6
:00421684 DF154200                DWORD 004215DF
:00421688 F8154200                DWORD 004215F8
:0042168C 11164200                DWORD 00421611


:00421690 0000                    add byte ptr [eax], al
:00421692 0101                    add dword ptr [ecx], eax
:00421694 0202                    add al, byte ptr [edx]
:00421696 03040505060607          add eax, dword ptr [eax+07060605]
:0042169D 07                      pop es
:0042169E 0808                    or byte ptr [eax], cl
:004216A0 0909                    or dword ptr [ecx], ecx
:004216A2 0A0A                    or cl, byte ptr [edx]
:004216A4 0B0B                    or ecx, dword ptr [ebx]
:004216A6 0C0C                    or al, 0C
:004216A8 0D                      BYTE 0dh
:004216A9 0D                      BYTE 0dh


* Referenced by a CALL at Address:
|:00421147   
|
:004216AA 55                      push ebp
:004216AB 8BEC                    mov ebp, esp
:004216AD 83EC0C                  sub esp, 0000000C
:004216B0 8B4508                  mov eax, dword ptr [ebp+08]
:004216B3 25FF000000              and eax, 000000FF
:004216B8 83F80A                  cmp eax, 0000000A
:004216BB 7D30                    jge 004216ED

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004216BD B905000000              mov ecx, 00000005
:004216C2 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:004216C5 8B5510                  mov edx, dword ptr [ebp+10]
:004216C8 2BD1                    sub edx, ecx
:004216CA 83FA01                  cmp edx, 00000001
:004216CD 7D09                    jge 004216D8
:004216CF C745FC01000000          mov [ebp-04], 00000001
:004216D6 EB10                    jmp 004216E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004216CD(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004216D8 B805000000              mov eax, 00000005
:004216DD 2B450C                  sub eax, dword ptr [ebp+0C]
:004216E0 8B4D10                  mov ecx, dword ptr [ebp+10]
:004216E3 2BC8                    sub ecx, eax
:004216E5 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004216D6(U)
|
:004216E8 8B45FC                  mov eax, dword ptr [ebp-04]
:004216EB EB6C                    jmp 00421759

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004216BB(C)
|
:004216ED 8B5508                  mov edx, dword ptr [ebp+08]
:004216F0 81E2FF000000            and edx, 000000FF
:004216F6 83FA14                  cmp edx, 00000014
:004216F9 7D30                    jge 0042172B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004216FB B804000000              mov eax, 00000004
:00421700 2B450C                  sub eax, dword ptr [ebp+0C]
:00421703 8B4D10                  mov ecx, dword ptr [ebp+10]
:00421706 2BC8                    sub ecx, eax
:00421708 83F901                  cmp ecx, 00000001
:0042170B 7D09                    jge 00421716
:0042170D C745F801000000          mov [ebp-08], 00000001
:00421714 EB10                    jmp 00421726

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042170B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00421716 BA04000000              mov edx, 00000004
:0042171B 2B550C                  sub edx, dword ptr [ebp+0C]
:0042171E 8B4510                  mov eax, dword ptr [ebp+10]
:00421721 2BC2                    sub eax, edx
:00421723 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421714(U)
|
:00421726 8B45F8                  mov eax, dword ptr [ebp-08]
:00421729 EB2E                    jmp 00421759

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004216F9(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042172B B903000000              mov ecx, 00000003
:00421730 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:00421733 8B5510                  mov edx, dword ptr [ebp+10]
:00421736 2BD1                    sub edx, ecx
:00421738 83FA01                  cmp edx, 00000001
:0042173B 7D09                    jge 00421746
:0042173D C745F401000000          mov [ebp-0C], 00000001
:00421744 EB10                    jmp 00421756

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042173B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00421746 B803000000              mov eax, 00000003
:0042174B 2B450C                  sub eax, dword ptr [ebp+0C]
:0042174E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00421751 2BC8                    sub ecx, eax
:00421753 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421744(U)
|
:00421756 8B45F4                  mov eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004216EB(U), :00421729(U)
|
:00421759 8BE5                    mov esp, ebp
:0042175B 5D                      pop ebp
:0042175C C3                      ret



* Referenced by a CALL at Address:
|:00420F1A   
|
:0042175D 55                      push ebp
:0042175E 8BEC                    mov ebp, esp
:00421760 6AFF                    push FFFFFFFF
:00421762 688C964700              push 0047968C
:00421767 64A100000000            mov eax, dword ptr fs:[00000000]
:0042176D 50                      push eax
:0042176E 64892500000000          mov dword ptr fs:[00000000], esp
:00421775 81EC0C010000            sub esp, 0000010C
:0042177B 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00421781 E8BA3EFEFF              call 00405640
:00421786 C745FC00000000          mov [ebp-04], 00000000
:0042178D E8FB000000              call 0042188D
:00421792 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax

* Possible StringData Ref from Data Obj ->"ENSHUJO.E3"
                                  |
:00421798 68E0D44700              push 0047D4E0
:0042179D 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004217A3 E82DFAFEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004217A8 6A04                    push 00000004
:004217AA 6A00                    push 00000000
:004217AC 6A00                    push 00000000
:004217AE B910474900              mov ecx, 00494710
:004217B3 E8D8770500              call 00478F90
:004217B8 50                      push eax
:004217B9 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:004217BF 50                      push eax
:004217C0 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004217C6 E85EFBFEFF              call 00411329
:004217CB 85C0                    test eax, eax
:004217CD 750D                    jne 004217DC

* Possible StringData Ref from Data Obj ->"in SetPracBackToDlg()"
                                  |
:004217CF 685CCD4700              push 0047CD5C
:004217D4 E8C3230000              call 00423B9C
:004217D9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004217CD(C)
|
:004217DC 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004217E2 E83EC4FEFF              call 0040DC25
:004217E7 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:004217ED 51                      push ecx
:004217EE E823010000              call 00421916
:004217F3 83C404                  add esp, 00000004
:004217F6 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax

* Possible StringData Ref from Data Obj ->"ENSHUJO.E3"
                                  |
:004217FC 68E0D44700              push 0047D4E0
:00421801 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00421807 E8C9F9FEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042180C 6A04                    push 00000004
:0042180E 6A00                    push 00000000
:00421810 6A00                    push 00000000
:00421812 B940474900              mov ecx, 00494740
:00421817 E874770500              call 00478F90
:0042181C 50                      push eax
:0042181D 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:00421823 52                      push edx
:00421824 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042182A E8FAFAFEFF              call 00411329
:0042182F 85C0                    test eax, eax
:00421831 750D                    jne 00421840

* Possible StringData Ref from Data Obj ->"in SetPracBackToDlg()"
                                  |
:00421833 6874CD4700              push 0047CD74
:00421838 E85F230000              call 00423B9C
:0042183D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421831(C)
|
:00421840 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00421846 E8DAC3FEFF              call 0040DC25
:0042184B 8A85E8FEFFFF            mov al, byte ptr [ebp+FFFFFEE8]
:00421851 50                      push eax
:00421852 B928474900              mov ecx, 00494728
:00421857 E8C4C60000              call 0042DF20
:0042185C 8A8DECFEFFFF            mov cl, byte ptr [ebp+FFFFFEEC]
:00421862 51                      push ecx
:00421863 B928474900              mov ecx, 00494728
:00421868 E8D3C60000              call 0042DF40
:0042186D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00421874 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042187A E8E13DFEFF              call 00405660
:0042187F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00421882 64890D00000000          mov dword ptr fs:[00000000], ecx
:00421889 8BE5                    mov esp, ebp
:0042188B 5D                      pop ebp
:0042188C C3                      ret



* Referenced by a CALL at Address:
|:0042178D   
|
:0042188D 55                      push ebp
:0042188E 8BEC                    mov ebp, esp
:00421890 83EC08                  sub esp, 00000008
:00421893 B938464900              mov ecx, 00494638
:00421898 E8631AFEFF              call 00403300
:0042189D 8BC8                    mov ecx, eax
:0042189F 6BC950                  imul ecx, 00000050
:004218A2 81C1787F4900            add ecx, 00497F78
:004218A8 E8F318FEFF              call 004031A0
:004218AD 25FF000000              and eax, 000000FF
:004218B2 8945F8                  mov dword ptr [ebp-08], eax
:004218B5 B9D0454900              mov ecx, 004945D0
:004218BA E8411AFEFF              call 00403300
:004218BF 8BC8                    mov ecx, eax
:004218C1 6BC950                  imul ecx, 00000050
:004218C4 81C1787F4900            add ecx, 00497F78
:004218CA E8D118FEFF              call 004031A0
:004218CF 25FF000000              and eax, 000000FF
:004218D4 8945FC                  mov dword ptr [ebp-04], eax
:004218D7 837DF818                cmp dword ptr [ebp-08], 00000018
:004218DB 7420                    je 004218FD
:004218DD 837DF819                cmp dword ptr [ebp-08], 00000019
:004218E1 741A                    je 004218FD
:004218E3 837DFC18                cmp dword ptr [ebp-04], 00000018
:004218E7 740D                    je 004218F6
:004218E9 837DFC19                cmp dword ptr [ebp-04], 00000019
:004218ED 7407                    je 004218F6
:004218EF B801000000              mov eax, 00000001
:004218F4 EB1C                    jmp 00421912

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004218E7(C), :004218ED(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004218F6 B803000000              mov eax, 00000003
:004218FB EB15                    jmp 00421912

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004218DB(C), :004218E1(C)
|
:004218FD 837DFC18                cmp dword ptr [ebp-04], 00000018
:00421901 740D                    je 00421910
:00421903 837DFC19                cmp dword ptr [ebp-04], 00000019
:00421907 7407                    je 00421910

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00421909 B802000000              mov eax, 00000002
:0042190E EB02                    jmp 00421912

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00421901(C), :00421907(C)
|
:00421910 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004218F4(U), :004218FB(U), :0042190E(U)
|
:00421912 8BE5                    mov esp, ebp
:00421914 5D                      pop ebp
:00421915 C3                      ret



* Referenced by a CALL at Address:
|:004217EE   
|
:00421916 55                      push ebp
:00421917 8BEC                    mov ebp, esp
:00421919 51                      push ecx
:0042191A 8B4508                  mov eax, dword ptr [ebp+08]
:0042191D 8945FC                  mov dword ptr [ebp-04], eax
:00421920 837DFC03                cmp dword ptr [ebp-04], 00000003
:00421924 7723                    ja 00421949
:00421926 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421929 FF248D4F194200          jmp dword ptr [4*ecx+0042194F]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00421930 B802000000              mov eax, 00000002
:00421935 EB14                    jmp 0042194B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00421937 B803000000              mov eax, 00000003
:0042193C EB0D                    jmp 0042194B
:0042193E 33C0                    xor eax, eax
:00421940 EB09                    jmp 0042194B
:00421942 B801000000              mov eax, 00000001
:00421947 EB02                    jmp 0042194B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421924(C)
|
:00421949 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00421935(U), :0042193C(U), :00421940(U), :00421947(U)
|
:0042194B 8BE5                    mov esp, ebp
:0042194D 5D                      pop ebp
:0042194E C3                      ret



:0042194F 30194200                DWORD 00421930
:00421953 37194200                DWORD 00421937
:00421957 3E194200                DWORD 0042193E
:0042195B 42194200                DWORD 00421942



* Referenced by a CALL at Address:
|:00420F2B   
|
:0042195F 55                      push ebp
:00421960 8BEC                    mov ebp, esp
:00421962 8B4508                  mov eax, dword ptr [ebp+08]
:00421965 50                      push eax
:00421966 B938464900              mov ecx, 00494638
:0042196B E81B300000              call 0042498B
:00421970 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421973 51                      push ecx
:00421974 B9D0454900              mov ecx, 004945D0
:00421979 E80D300000              call 0042498B
:0042197E 5D                      pop ebp
:0042197F C3                      ret



* Referenced by a CALL at Address:
|:00420922   
|
:00421980 55                      push ebp
:00421981 8BEC                    mov ebp, esp
:00421983 83EC08                  sub esp, 00000008
:00421986 68F50A0A02              push 020A0AF5

* Reference To: GDI32.CreateSolidBrush, Ord:0040h
                                  |
:0042198B FF1548D44B00            Call dword ptr [004BD448]
:00421991 8945F8                  mov dword ptr [ebp-08], eax
:00421994 6822BF3902              push 0239BF22

* Reference To: GDI32.CreateSolidBrush, Ord:0040h
                                  |
:00421999 FF1548D44B00            Call dword ptr [004BD448]
:0042199F 8945FC                  mov dword ptr [ebp-04], eax
:004219A2 8B45F8                  mov eax, dword ptr [ebp-08]
:004219A5 50                      push eax
:004219A6 B928474900              mov ecx, 00494728
:004219AB E8D0DCFFFF              call 0041F680
:004219B0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004219B3 51                      push ecx
:004219B4 B928474900              mov ecx, 00494728
:004219B9 E8A2C50000              call 0042DF60
:004219BE 8BE5                    mov esp, ebp
:004219C0 5D                      pop ebp
:004219C1 C3                      ret



* Referenced by a CALL at Address:
|:0042092E   
|
:004219C2 55                      push ebp
:004219C3 8BEC                    mov ebp, esp
:004219C5 83EC64                  sub esp, 00000064
:004219C8 8D45A8                  lea eax, dword ptr [ebp-58]
:004219CB 50                      push eax
:004219CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004219CF 51                      push ecx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:004219D0 FF15A4D64B00            Call dword ptr [004BD6A4]
:004219D6 8D55C8                  lea edx, dword ptr [ebp-38]
:004219D9 52                      push edx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:053F, ""
                                  |
:004219DA 683F050000              push 0000053F
:004219DF 8B4508                  mov eax, dword ptr [ebp+08]
:004219E2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004219E3 FF1510D64B00            Call dword ptr [004BD610]
:004219E9 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:004219EA FF15A4D64B00            Call dword ptr [004BD6A4]
:004219F0 8D4DB8                  lea ecx, dword ptr [ebp-48]
:004219F3 51                      push ecx
:004219F4 68C9040000              push 000004C9
:004219F9 8B5508                  mov edx, dword ptr [ebp+08]
:004219FC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004219FD FF1510D64B00            Call dword ptr [004BD610]
:00421A03 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00421A04 FF15A4D64B00            Call dword ptr [004BD6A4]
:00421A0A 8D45D8                  lea eax, dword ptr [ebp-28]
:00421A0D 50                      push eax
:00421A0E 68C8040000              push 000004C8
:00421A13 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421A16 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421A17 FF1510D64B00            Call dword ptr [004BD610]
:00421A1D 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00421A1E FF15A4D64B00            Call dword ptr [004BD6A4]
:00421A24 8D55E8                  lea edx, dword ptr [ebp-18]
:00421A27 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00421A28 6A03                    push 00000003
:00421A2A 8B4508                  mov eax, dword ptr [ebp+08]
:00421A2D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421A2E FF1510D64B00            Call dword ptr [004BD610]
:00421A34 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00421A35 FF15A4D64B00            Call dword ptr [004BD6A4]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00421A3B 6A04                    push 00000004

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00421A3D FF1578D64B00            Call dword ptr [004BD678]
:00421A43 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00421A46 03C8                    add ecx, eax
:00421A48 894DAC                  mov dword ptr [ebp-54], ecx
:00421A4B 8B55D4                  mov edx, dword ptr [ebp-2C]
:00421A4E 2B55CC                  sub edx, dword ptr [ebp-34]
:00421A51 8955A4                  mov dword ptr [ebp-5C], edx
:00421A54 8B45C0                  mov eax, dword ptr [ebp-40]
:00421A57 2B45D8                  sub eax, dword ptr [ebp-28]
:00421A5A 2D20010000              sub eax, 00000120
:00421A5F 99                      cdq
:00421A60 2BC2                    sub eax, edx
:00421A62 D1F8                    sar eax, 1
:00421A64 85C0                    test eax, eax
:00421A66 7D09                    jge 00421A71
:00421A68 C745A000000000          mov [ebp-60], 00000000
:00421A6F EB13                    jmp 00421A84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421A66(C)
|
:00421A71 8B45C0                  mov eax, dword ptr [ebp-40]
:00421A74 2B45D8                  sub eax, dword ptr [ebp-28]
:00421A77 2D20010000              sub eax, 00000120
:00421A7C 99                      cdq
:00421A7D 2BC2                    sub eax, edx
:00421A7F D1F8                    sar eax, 1
:00421A81 8945A0                  mov dword ptr [ebp-60], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421A6F(U)
|
:00421A84 8B45A0                  mov eax, dword ptr [ebp-60]
:00421A87 8945FC                  mov dword ptr [ebp-04], eax
:00421A8A 8B45F4                  mov eax, dword ptr [ebp-0C]
:00421A8D 2B45AC                  sub eax, dword ptr [ebp-54]
:00421A90 2D93000000              sub eax, 00000093
:00421A95 2B45A4                  sub eax, dword ptr [ebp-5C]
:00421A98 99                      cdq
:00421A99 2BC2                    sub eax, edx
:00421A9B D1F8                    sar eax, 1
:00421A9D 85C0                    test eax, eax
:00421A9F 7D09                    jge 00421AAA
:00421AA1 C7459C00000000          mov [ebp-64], 00000000
:00421AA8 EB16                    jmp 00421AC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421A9F(C)
|
:00421AAA 8B45F4                  mov eax, dword ptr [ebp-0C]
:00421AAD 2B45AC                  sub eax, dword ptr [ebp-54]
:00421AB0 2D93000000              sub eax, 00000093
:00421AB5 2B45A4                  sub eax, dword ptr [ebp-5C]
:00421AB8 99                      cdq
:00421AB9 2BC2                    sub eax, edx
:00421ABB D1F8                    sar eax, 1
:00421ABD 89459C                  mov dword ptr [ebp-64], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421AA8(U)
|
:00421AC0 8B4D9C                  mov ecx, dword ptr [ebp-64]
:00421AC3 894DF8                  mov dword ptr [ebp-08], ecx
:00421AC6 6A00                    push 00000000
:00421AC8 6890000000              push 00000090
:00421ACD 6820010000              push 00000120
:00421AD2 8B55F8                  mov edx, dword ptr [ebp-08]
:00421AD5 52                      push edx
:00421AD6 8B45FC                  mov eax, dword ptr [ebp-04]
:00421AD9 50                      push eax
:00421ADA 68C3040000              push 000004C3
:00421ADF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421AE2 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421AE3 FF1510D64B00            Call dword ptr [004BD610]
:00421AE9 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00421AEA FF15ECD54B00            Call dword ptr [004BD5EC]
:00421AF0 6A00                    push 00000000
:00421AF2 8B55A4                  mov edx, dword ptr [ebp-5C]
:00421AF5 52                      push edx
:00421AF6 6820010000              push 00000120
:00421AFB 8B45F8                  mov eax, dword ptr [ebp-08]
:00421AFE 0593000000              add eax, 00000093
:00421B03 50                      push eax
:00421B04 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421B07 51                      push ecx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:053F, ""
                                  |
:00421B08 683F050000              push 0000053F
:00421B0D 8B5508                  mov edx, dword ptr [ebp+08]
:00421B10 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421B11 FF1510D64B00            Call dword ptr [004BD610]
:00421B17 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00421B18 FF15ECD54B00            Call dword ptr [004BD5EC]
:00421B1E 8BE5                    mov esp, ebp
:00421B20 5D                      pop ebp
:00421B21 C3                      ret



* Referenced by a CALL at Address:
|:00420A0D   
|
:00421B22 55                      push ebp
:00421B23 8BEC                    mov ebp, esp
:00421B25 51                      push ecx
:00421B26 56                      push esi
:00421B27 57                      push edi
:00421B28 8B4510                  mov eax, dword ptr [ebp+10]
:00421B2B 25FFFF0000              and eax, 0000FFFF
:00421B30 8945FC                  mov dword ptr [ebp-04], eax
:00421B33 817DFC7A040000          cmp dword ptr [ebp-04], 0000047A
:00421B3A 7F18                    jg 00421B54
:00421B3C 817DFC7A040000          cmp dword ptr [ebp-04], 0000047A
:00421B43 7437                    je 00421B7C
:00421B45 837DFC03                cmp dword ptr [ebp-04], 00000003
:00421B49 0F84B9020000            je 00421E08
:00421B4F E9C1020000              jmp 00421E15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421B3A(C)
|
:00421B54 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00421B57 81E97B040000            sub ecx, 0000047B
:00421B5D 894DFC                  mov dword ptr [ebp-04], ecx
:00421B60 837DFC7D                cmp dword ptr [ebp-04], 0000007D
:00421B64 0F87AB020000            ja 00421E15
:00421B6A 8B45FC                  mov eax, dword ptr [ebp-04]
:00421B6D 33D2                    xor edx, edx
:00421B6F 8A90411E4200            mov dl, byte ptr [eax+00421E41]
:00421B75 FF24951D1E4200          jmp dword ptr [4*edx+00421E1D]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421B43(C)
|
:00421B7C 833D7C47490000          cmp dword ptr [0049477C], 00000000
:00421B83 7537                    jne 00421BBC
:00421B85 C7058047490000000000    mov dword ptr [00494780], 00000000
:00421B8F B9D0454900              mov ecx, 004945D0
:00421B94 E86717FEFF              call 00403300
:00421B99 8BF8                    mov edi, eax
:00421B9B 6BFF50                  imul edi, 00000050
:00421B9E 81C7787F4900            add edi, 00497F78

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00421BA4 B914000000              mov ecx, 00000014
:00421BA9 BEC0464900              mov esi, 004946C0
:00421BAE F3                      repz
:00421BAF A5                      movsd
:00421BB0 6A00                    push 00000000
:00421BB2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421BB5 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00421BB6 FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421B83(C)
|
:00421BBC B801000000              mov eax, 00000001
:00421BC1 E951020000              jmp 00421E17
:00421BC6 833D7C47490000          cmp dword ptr [0049477C], 00000000
:00421BCD 0F8586000000            jne 00421C59
:00421BD3 C7057C47490001000000    mov dword ptr [0049477C], 00000001
:00421BDD 6A00                    push 00000000
:00421BDF 8B5508                  mov edx, dword ptr [ebp+08]
:00421BE2 52                      push edx
:00421BE3 E865EFFFFF              call 00420B4D
:00421BE8 83C408                  add esp, 00000008
:00421BEB 6A00                    push 00000000
:00421BED 687B040000              push 0000047B
:00421BF2 8B4508                  mov eax, dword ptr [ebp+08]
:00421BF5 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421BF6 FF1510D64B00            Call dword ptr [004BD610]
:00421BFC 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00421BFD FF1584D64B00            Call dword ptr [004BD684]
:00421C03 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421C06 51                      push ecx
:00421C07 E8C6140000              call 004230D2
:00421C0C 83C404                  add esp, 00000004
:00421C0F B938464900              mov ecx, 00494638
:00421C14 E89B730000              call 00428FB4
:00421C19 85C0                    test eax, eax
:00421C1B 740E                    je 00421C2B
:00421C1D 8B5508                  mov edx, dword ptr [ebp+08]
:00421C20 52                      push edx
:00421C21 E832050000              call 00422158
:00421C26 83C404                  add esp, 00000004
:00421C29 EB0E                    jmp 00421C39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421C1B(C)
|
:00421C2B 8B4508                  mov eax, dword ptr [ebp+08]
:00421C2E 50                      push eax
:00421C2F B938464900              mov ecx, 00494638
:00421C34 E890450000              call 004261C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421C29(U)
|
:00421C39 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421C3C 51                      push ecx
:00421C3D E8DD140000              call 0042311F
:00421C42 83C404                  add esp, 00000004
:00421C45 C7057C47490000000000    mov dword ptr [0049477C], 00000000
:00421C4F B801000000              mov eax, 00000001
:00421C54 E9BE010000              jmp 00421E17

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421BCD(C)
|
:00421C59 833D7C47490000          cmp dword ptr [0049477C], 00000000
:00421C60 7548                    jne 00421CAA
:00421C62 C7057C47490001000000    mov dword ptr [0049477C], 00000001
:00421C6C 8B5508                  mov edx, dword ptr [ebp+08]
:00421C6F 52                      push edx
:00421C70 E85D140000              call 004230D2
:00421C75 83C404                  add esp, 00000004
:00421C78 6A00                    push 00000000
:00421C7A 8B4508                  mov eax, dword ptr [ebp+08]
:00421C7D 50                      push eax
:00421C7E E8CAEEFFFF              call 00420B4D
:00421C83 83C408                  add esp, 00000008
:00421C86 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421C89 51                      push ecx
:00421C8A B938464900              mov ecx, 00494638
:00421C8F E894460000              call 00426328
:00421C94 8B5508                  mov edx, dword ptr [ebp+08]
:00421C97 52                      push edx
:00421C98 E882140000              call 0042311F
:00421C9D 83C404                  add esp, 00000004
:00421CA0 C7057C47490000000000    mov dword ptr [0049477C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421C60(C)
|
:00421CAA B801000000              mov eax, 00000001
:00421CAF E963010000              jmp 00421E17
:00421CB4 833D7C47490000          cmp dword ptr [0049477C], 00000000
:00421CBB 7558                    jne 00421D15
:00421CBD C7057C47490001000000    mov dword ptr [0049477C], 00000001
:00421CC7 8B4508                  mov eax, dword ptr [ebp+08]
:00421CCA 50                      push eax
:00421CCB E802140000              call 004230D2
:00421CD0 83C404                  add esp, 00000004
:00421CD3 6A00                    push 00000000
:00421CD5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421CD8 51                      push ecx
:00421CD9 E86FEEFFFF              call 00420B4D
:00421CDE 83C408                  add esp, 00000008
:00421CE1 8B5508                  mov edx, dword ptr [ebp+08]
:00421CE4 52                      push edx
:00421CE5 E82E050000              call 00422218
:00421CEA 83C404                  add esp, 00000004
:00421CED 85C0                    test eax, eax
:00421CEF 750E                    jne 00421CFF
:00421CF1 6A01                    push 00000001
:00421CF3 8B4508                  mov eax, dword ptr [ebp+08]
:00421CF6 50                      push eax
:00421CF7 E851EEFFFF              call 00420B4D
:00421CFC 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421CEF(C)
|
:00421CFF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421D02 51                      push ecx
:00421D03 E817140000              call 0042311F
:00421D08 83C404                  add esp, 00000004
:00421D0B C7057C47490000000000    mov dword ptr [0049477C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421CBB(C)
|
:00421D15 E9FB000000              jmp 00421E15
:00421D1A 8B5518                  mov edx, dword ptr [ebp+18]
:00421D1D 33C0                    xor eax, eax
:00421D1F 8A02                    mov al, byte ptr [edx]
:00421D21 0C01                    or al, 01
:00421D23 8B4D18                  mov ecx, dword ptr [ebp+18]
:00421D26 8801                    mov byte ptr [ecx], al
:00421D28 E9E8000000              jmp 00421E15
:00421D2D 8B5518                  mov edx, dword ptr [ebp+18]
:00421D30 33C0                    xor eax, eax
:00421D32 8A02                    mov al, byte ptr [edx]
:00421D34 24FE                    and al, FE
:00421D36 8B4D18                  mov ecx, dword ptr [ebp+18]
:00421D39 8801                    mov byte ptr [ecx], al
:00421D3B E9D5000000              jmp 00421E15
:00421D40 8B5518                  mov edx, dword ptr [ebp+18]
:00421D43 33C0                    xor eax, eax
:00421D45 8A02                    mov al, byte ptr [edx]
:00421D47 0C02                    or al, 02
:00421D49 8B4D18                  mov ecx, dword ptr [ebp+18]
:00421D4C 8801                    mov byte ptr [ecx], al
:00421D4E B938464900              mov ecx, 00494638
:00421D53 E85C720000              call 00428FB4
:00421D58 85C0                    test eax, eax
:00421D5A 7405                    je 00421D61
:00421D5C E9B4000000              jmp 00421E15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421D5A(C)
|
:00421D61 833D7C47490000          cmp dword ptr [0049477C], 00000000
:00421D68 7524                    jne 00421D8E
:00421D6A 6A00                    push 00000000
:00421D6C 687B040000              push 0000047B
:00421D71 8B5508                  mov edx, dword ptr [ebp+08]
:00421D74 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421D75 FF1510D64B00            Call dword ptr [004BD610]
:00421D7B 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00421D7C FF1584D64B00            Call dword ptr [004BD684]
:00421D82 8B4508                  mov eax, dword ptr [ebp+08]
:00421D85 50                      push eax
:00421D86 E894130000              call 0042311F
:00421D8B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421D68(C)
|
:00421D8E E982000000              jmp 00421E15
:00421D93 8B4D18                  mov ecx, dword ptr [ebp+18]
:00421D96 33D2                    xor edx, edx
:00421D98 8A11                    mov dl, byte ptr [ecx]
:00421D9A 83E2FD                  and edx, FFFFFFFD
:00421D9D 8B4518                  mov eax, dword ptr [ebp+18]
:00421DA0 8810                    mov byte ptr [eax], dl
:00421DA2 B938464900              mov ecx, 00494638
:00421DA7 E808720000              call 00428FB4
:00421DAC 85C0                    test eax, eax
:00421DAE 7402                    je 00421DB2
:00421DB0 EB63                    jmp 00421E15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421DAE(C)
|
:00421DB2 833D7C47490000          cmp dword ptr [0049477C], 00000000
:00421DB9 7524                    jne 00421DDF
:00421DBB 6A01                    push 00000001
:00421DBD 687B040000              push 0000047B
:00421DC2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421DC5 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421DC6 FF1510D64B00            Call dword ptr [004BD610]
:00421DCC 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00421DCD FF1584D64B00            Call dword ptr [004BD684]
:00421DD3 8B5508                  mov edx, dword ptr [ebp+08]
:00421DD6 52                      push edx
:00421DD7 E8F6120000              call 004230D2
:00421DDC 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421DB9(C)
|
:00421DDF EB34                    jmp 00421E15
:00421DE1 833D7C47490000          cmp dword ptr [0049477C], 00000000
:00421DE8 751C                    jne 00421E06
:00421DEA 687E040000              push 0000047E
:00421DEF 8B4508                  mov eax, dword ptr [ebp+08]
:00421DF2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421DF3 FF1510D64B00            Call dword ptr [004BD610]
:00421DF9 50                      push eax
:00421DFA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421DFD 51                      push ecx
:00421DFE E8BC000000              call 00421EBF
:00421E03 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421DE8(C)
|
:00421E06 EB0D                    jmp 00421E15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421B49(C)
|
:00421E08 6860080000              push 00000860
:00421E0D E8B97C0400              call 00469ACB
:00421E12 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00421B4F(U), :00421B64(C), :00421D15(U), :00421D28(U), :00421D3B(U)
|:00421D5C(U), :00421D8E(U), :00421DB0(U), :00421DDF(U), :00421E06(U)
|
:00421E15 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00421BC1(U), :00421C54(U), :00421CAF(U)
|
:00421E17 5F                      pop edi
:00421E18 5E                      pop esi
:00421E19 8BE5                    mov esp, ebp
:00421E1B 5D                      pop ebp
:00421E1C C3                      ret



:00421E1D C61B4200                DWORD 00421BC6
:00421E21 591C4200                DWORD 00421C59
:00421E25 B41C4200                DWORD 00421CB4
:00421E29 E11D4200                DWORD 00421DE1
:00421E2D 401D4200                DWORD 00421D40
:00421E31 931D4200                DWORD 00421D93
:00421E35 1A1D4200                DWORD 00421D1A
:00421E39 2D1D4200                DWORD 00421D2D
:00421E3D 151E4200                DWORD 00421E15


:00421E41 0001                    add byte ptr [ecx], al
:00421E43 0203                    add al, byte ptr [ebx]
:00421E45 0808                    or byte ptr [eax], cl
:00421E47 0808                    or byte ptr [eax], cl
:00421E49 0808                    or byte ptr [eax], cl
:00421E4B 0808                    or byte ptr [eax], cl
:00421E4D 0808                    or byte ptr [eax], cl
:00421E4F 0808                    or byte ptr [eax], cl
:00421E51 0808                    or byte ptr [eax], cl
:00421E53 0808                    or byte ptr [eax], cl
:00421E55 0808                    or byte ptr [eax], cl
:00421E57 0808                    or byte ptr [eax], cl
:00421E59 0808                    or byte ptr [eax], cl
:00421E5B 0808                    or byte ptr [eax], cl
:00421E5D 0808                    or byte ptr [eax], cl
:00421E5F 0808                    or byte ptr [eax], cl
:00421E61 0808                    or byte ptr [eax], cl
:00421E63 0808                    or byte ptr [eax], cl
:00421E65 0808                    or byte ptr [eax], cl
:00421E67 0808                    or byte ptr [eax], cl
:00421E69 0808                    or byte ptr [eax], cl
:00421E6B 0808                    or byte ptr [eax], cl
:00421E6D 0808                    or byte ptr [eax], cl
:00421E6F 0808                    or byte ptr [eax], cl
:00421E71 0808                    or byte ptr [eax], cl
:00421E73 0808                    or byte ptr [eax], cl
:00421E75 0808                    or byte ptr [eax], cl
:00421E77 0808                    or byte ptr [eax], cl
:00421E79 0808                    or byte ptr [eax], cl
:00421E7B 0808                    or byte ptr [eax], cl
:00421E7D 0808                    or byte ptr [eax], cl
:00421E7F 0808                    or byte ptr [eax], cl
:00421E81 0808                    or byte ptr [eax], cl
:00421E83 0808                    or byte ptr [eax], cl
:00421E85 0808                    or byte ptr [eax], cl
:00421E87 0808                    or byte ptr [eax], cl
:00421E89 0808                    or byte ptr [eax], cl
:00421E8B 0408                    add al, 08
:00421E8D 0508080808              add eax, 08080808
:00421E92 0808                    or byte ptr [eax], cl
:00421E94 0808                    or byte ptr [eax], cl
:00421E96 0808                    or byte ptr [eax], cl
:00421E98 0808                    or byte ptr [eax], cl
:00421E9A 0808                    or byte ptr [eax], cl
:00421E9C 0808                    or byte ptr [eax], cl
:00421E9E 0808                    or byte ptr [eax], cl
:00421EA0 0808                    or byte ptr [eax], cl
:00421EA2 0808                    or byte ptr [eax], cl
:00421EA4 0808                    or byte ptr [eax], cl
:00421EA6 0808                    or byte ptr [eax], cl
:00421EA8 0808                    or byte ptr [eax], cl
:00421EAA 0806                    or byte ptr [esi], al
:00421EAC 0808                    or byte ptr [eax], cl
:00421EAE 0808                    or byte ptr [eax], cl
:00421EB0 0808                    or byte ptr [eax], cl
:00421EB2 0808                    or byte ptr [eax], cl
:00421EB4 0808                    or byte ptr [eax], cl
:00421EB6 0808                    or byte ptr [eax], cl
:00421EB8 0808                    or byte ptr [eax], cl
:00421EBA 0808                    or byte ptr [eax], cl
:00421EBC 0808                    or byte ptr [eax], cl
:00421EBE 07                      pop es

* Referenced by a CALL at Address:
|:00421DFE   
|
:00421EBF 55                      push ebp
:00421EC0 8BEC                    mov ebp, esp
:00421EC2 833D8447490000          cmp dword ptr [00494784], 00000000
:00421EC9 0F84FB000000            je 00421FCA

* Possible StringData Ref from Data Obj ->"_"
                                  |
:00421ECF 688CCD4700              push 0047CD8C
:00421ED4 8B450C                  mov eax, dword ptr [ebp+0C]
:00421ED7 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00421ED8 FF1514D64B00            Call dword ptr [004BD614]
:00421EDE 8B0D84474900            mov ecx, dword ptr [00494784]
:00421EE4 83E101                  and ecx, 00000001
:00421EE7 85C9                    test ecx, ecx
:00421EE9 7418                    je 00421F03
:00421EEB 6A01                    push 00000001
:00421EED 68C5040000              push 000004C5
:00421EF2 8B5508                  mov edx, dword ptr [ebp+08]
:00421EF5 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421EF6 FF1510D64B00            Call dword ptr [004BD610]
:00421EFC 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00421EFD FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421EE9(C)
|
:00421F03 A184474900              mov eax, dword ptr [00494784]
:00421F08 83E002                  and eax, 00000002
:00421F0B 85C0                    test eax, eax
:00421F0D 7418                    je 00421F27
:00421F0F 6A01                    push 00000001
:00421F11 68C7040000              push 000004C7
:00421F16 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421F19 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421F1A FF1510D64B00            Call dword ptr [004BD610]
:00421F20 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00421F21 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421F0D(C)
|
:00421F27 8B1584474900            mov edx, dword ptr [00494784]
:00421F2D 83E204                  and edx, 00000004
:00421F30 85D2                    test edx, edx
:00421F32 7418                    je 00421F4C
:00421F34 6A01                    push 00000001
:00421F36 687B040000              push 0000047B
:00421F3B 8B4508                  mov eax, dword ptr [ebp+08]
:00421F3E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421F3F FF1510D64B00            Call dword ptr [004BD610]
:00421F45 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00421F46 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421F32(C)
|
:00421F4C 8B0D84474900            mov ecx, dword ptr [00494784]
:00421F52 83E108                  and ecx, 00000008
:00421F55 85C9                    test ecx, ecx
:00421F57 7418                    je 00421F71
:00421F59 6A01                    push 00000001
:00421F5B 687C040000              push 0000047C
:00421F60 8B5508                  mov edx, dword ptr [ebp+08]
:00421F63 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421F64 FF1510D64B00            Call dword ptr [004BD610]
:00421F6A 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00421F6B FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421F57(C)
|
:00421F71 A184474900              mov eax, dword ptr [00494784]
:00421F76 83E010                  and eax, 00000010
:00421F79 85C0                    test eax, eax
:00421F7B 7418                    je 00421F95
:00421F7D 6A01                    push 00000001
:00421F7F 687D040000              push 0000047D
:00421F84 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421F87 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421F88 FF1510D64B00            Call dword ptr [004BD610]
:00421F8E 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00421F8F FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421F7B(C)
|
:00421F95 6A00                    push 00000000
:00421F97 687A040000              push 0000047A
:00421F9C 8B5508                  mov edx, dword ptr [ebp+08]
:00421F9F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421FA0 FF1510D64B00            Call dword ptr [004BD610]
:00421FA6 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00421FA7 FF1584D64B00            Call dword ptr [004BD684]
:00421FAD C7058447490000000000    mov dword ptr [00494784], 00000000
:00421FB7 6A01                    push 00000001
:00421FB9 8B4508                  mov eax, dword ptr [ebp+08]
:00421FBC 50                      push eax
:00421FBD E88BEBFFFF              call 00420B4D
:00421FC2 83C408                  add esp, 00000008
:00421FC5 E98C010000              jmp 00422156

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421EC9(C)
|
:00421FCA 6A00                    push 00000000
:00421FCC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00421FCF 51                      push ecx
:00421FD0 E878EBFFFF              call 00420B4D
:00421FD5 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->"_"
                                  |
:00421FD8 6894CD4700              push 0047CD94
:00421FDD 8B550C                  mov edx, dword ptr [ebp+0C]
:00421FE0 52                      push edx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00421FE1 FF1514D64B00            Call dword ptr [004BD614]
:00421FE7 68C5040000              push 000004C5
:00421FEC 8B4508                  mov eax, dword ptr [ebp+08]
:00421FEF 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00421FF0 FF1510D64B00            Call dword ptr [004BD610]
:00421FF6 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:00421FF7 FF1574D64B00            Call dword ptr [004BD674]
:00421FFD 85C0                    test eax, eax
:00421FFF 7427                    je 00422028
:00422001 8B0D84474900            mov ecx, dword ptr [00494784]
:00422007 83C901                  or ecx, 00000001
:0042200A 890D84474900            mov dword ptr [00494784], ecx
:00422010 6A00                    push 00000000
:00422012 68C5040000              push 000004C5
:00422017 8B5508                  mov edx, dword ptr [ebp+08]
:0042201A 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042201B FF1510D64B00            Call dword ptr [004BD610]
:00422021 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00422022 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421FFF(C)
|
:00422028 68C7040000              push 000004C7
:0042202D 8B4508                  mov eax, dword ptr [ebp+08]
:00422030 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00422031 FF1510D64B00            Call dword ptr [004BD610]
:00422037 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:00422038 FF1574D64B00            Call dword ptr [004BD674]
:0042203E 85C0                    test eax, eax
:00422040 7427                    je 00422069
:00422042 8B0D84474900            mov ecx, dword ptr [00494784]
:00422048 83C902                  or ecx, 00000002
:0042204B 890D84474900            mov dword ptr [00494784], ecx
:00422051 6A00                    push 00000000
:00422053 68C7040000              push 000004C7
:00422058 8B5508                  mov edx, dword ptr [ebp+08]
:0042205B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042205C FF1510D64B00            Call dword ptr [004BD610]
:00422062 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00422063 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422040(C)
|
:00422069 687B040000              push 0000047B
:0042206E 8B4508                  mov eax, dword ptr [ebp+08]
:00422071 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00422072 FF1510D64B00            Call dword ptr [004BD610]
:00422078 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:00422079 FF1574D64B00            Call dword ptr [004BD674]
:0042207F 85C0                    test eax, eax
:00422081 7427                    je 004220AA
:00422083 8B0D84474900            mov ecx, dword ptr [00494784]
:00422089 83C904                  or ecx, 00000004
:0042208C 890D84474900            mov dword ptr [00494784], ecx
:00422092 6A00                    push 00000000
:00422094 687B040000              push 0000047B
:00422099 8B5508                  mov edx, dword ptr [ebp+08]
:0042209C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042209D FF1510D64B00            Call dword ptr [004BD610]
:004220A3 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004220A4 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422081(C)
|
:004220AA 687C040000              push 0000047C
:004220AF 8B4508                  mov eax, dword ptr [ebp+08]
:004220B2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004220B3 FF1510D64B00            Call dword ptr [004BD610]
:004220B9 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:004220BA FF1574D64B00            Call dword ptr [004BD674]
:004220C0 85C0                    test eax, eax
:004220C2 7427                    je 004220EB
:004220C4 8B0D84474900            mov ecx, dword ptr [00494784]
:004220CA 83C908                  or ecx, 00000008
:004220CD 890D84474900            mov dword ptr [00494784], ecx
:004220D3 6A00                    push 00000000
:004220D5 687C040000              push 0000047C
:004220DA 8B5508                  mov edx, dword ptr [ebp+08]
:004220DD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004220DE FF1510D64B00            Call dword ptr [004BD610]
:004220E4 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004220E5 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004220C2(C)
|
:004220EB 687D040000              push 0000047D
:004220F0 8B4508                  mov eax, dword ptr [ebp+08]
:004220F3 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004220F4 FF1510D64B00            Call dword ptr [004BD610]
:004220FA 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:004220FB FF1574D64B00            Call dword ptr [004BD674]
:00422101 85C0                    test eax, eax
:00422103 7427                    je 0042212C
:00422105 8B0D84474900            mov ecx, dword ptr [00494784]
:0042210B 83C910                  or ecx, 00000010
:0042210E 890D84474900            mov dword ptr [00494784], ecx
:00422114 6A00                    push 00000000
:00422116 687D040000              push 0000047D
:0042211B 8B5508                  mov edx, dword ptr [ebp+08]
:0042211E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042211F FF1510D64B00            Call dword ptr [004BD610]
:00422125 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00422126 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422103(C)
|
:0042212C 6AFF                    push FFFFFFFF

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042212E 6A06                    push 00000006
:00422130 8B4508                  mov eax, dword ptr [ebp+08]
:00422133 50                      push eax
:00422134 B9D0454900              mov ecx, 004945D0
:00422139 E8322D0000              call 00424E70
:0042213E 6A01                    push 00000001
:00422140 687A040000              push 0000047A
:00422145 8B4D08                  mov ecx, dword ptr [ebp+08]
:00422148 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00422149 FF1510D64B00            Call dword ptr [004BD610]
:0042214F 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00422150 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00421FC5(U)
|
:00422156 5D                      pop ebp
:00422157 C3                      ret



* Referenced by a CALL at Address:
|:00421C21   
|
:00422158 55                      push ebp
:00422159 8BEC                    mov ebp, esp
:0042215B B938464900              mov ecx, 00494638
:00422160 E84F6E0000              call 00428FB4
:00422165 85C0                    test eax, eax
:00422167 741A                    je 00422183
:00422169 8B4508                  mov eax, dword ptr [ebp+08]
:0042216C 50                      push eax
:0042216D E80C020000              call 0042237E
:00422172 83C404                  add esp, 00000004
:00422175 8B4D08                  mov ecx, dword ptr [ebp+08]
:00422178 51                      push ecx
:00422179 E815000000              call 00422193
:0042217E 83C404                  add esp, 00000004
:00422181 EB0E                    jmp 00422191

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422167(C)
|
:00422183 8B5508                  mov edx, dword ptr [ebp+08]
:00422186 52                      push edx
:00422187 B938464900              mov ecx, 00494638
:0042218C E838400000              call 004261C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422181(U)
|
:00422191 5D                      pop ebp
:00422192 C3                      ret



* Referenced by a CALL at Addresses:
|:00422179   , :004287DD   
|
:00422193 55                      push ebp
:00422194 8BEC                    mov ebp, esp
:00422196 83EC08                  sub esp, 00000008
:00422199 B938464900              mov ecx, 00494638
:0042219E E85D11FEFF              call 00403300
:004221A3 8945F8                  mov dword ptr [ebp-08], eax
:004221A6 B9D0454900              mov ecx, 004945D0
:004221AB E85011FEFF              call 00403300
:004221B0 8945FC                  mov dword ptr [ebp-04], eax
:004221B3 6AFF                    push FFFFFFFF
:004221B5 6A00                    push 00000000
:004221B7 8B4508                  mov eax, dword ptr [ebp+08]
:004221BA 50                      push eax
:004221BB B9D0454900              mov ecx, 004945D0
:004221C0 E8AB2C0000              call 00424E70
:004221C5 6AFF                    push FFFFFFFF
:004221C7 6A01                    push 00000001
:004221C9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004221CC 51                      push ecx
:004221CD B938464900              mov ecx, 00494638
:004221D2 E8992C0000              call 00424E70
:004221D7 8B5508                  mov edx, dword ptr [ebp+08]
:004221DA 52                      push edx
:004221DB E807000000              call 004221E7
:004221E0 83C404                  add esp, 00000004
:004221E3 8BE5                    mov esp, ebp
:004221E5 5D                      pop ebp
:004221E6 C3                      ret



* Referenced by a CALL at Address:
|:004221DB   
|
:004221E7 55                      push ebp
:004221E8 8BEC                    mov ebp, esp
:004221EA B938464900              mov ecx, 00494638
:004221EF E86CBE0000              call 0042E060
:004221F4 85C0                    test eax, eax
:004221F6 7410                    je 00422208
:004221F8 8B4508                  mov eax, dword ptr [ebp+08]
:004221FB 50                      push eax
:004221FC B938464900              mov ecx, 00494638
:00422201 E8C33F0000              call 004261C9
:00422206 EB0E                    jmp 00422216

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004221F6(C)
|
:00422208 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042220B 51                      push ecx
:0042220C B9D0454900              mov ecx, 004945D0
:00422211 E8B33F0000              call 004261C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422206(U)
|
:00422216 5D                      pop ebp
:00422217 C3                      ret



* Referenced by a CALL at Address:
|:00421CE5   
|
:00422218 55                      push ebp
:00422219 8BEC                    mov ebp, esp
:0042221B 51                      push ecx
:0042221C B938464900              mov ecx, 00494638
:00422221 E82ABF0000              call 0042E150
:00422226 85C0                    test eax, eax
:00422228 7417                    je 00422241
:0042222A 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"Ѥ_QIqʭprA۵Lk"
                                  |
:0042222C 68A0CD4700              push 0047CDA0
:00422231 8B4508                  mov eax, dword ptr [ebp+08]
:00422234 50                      push eax
:00422235 E832180000              call 00423A6C
:0042223A 83C40C                  add esp, 0000000C
:0042223D 33C0                    xor eax, eax
:0042223F EB3E                    jmp 0042227F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422228(C)
|
:00422241 8B4D08                  mov ecx, dword ptr [ebp+08]
:00422244 51                      push ecx
:00422245 E89B0F0000              call 004231E5
:0042224A 83C404                  add esp, 00000004
:0042224D 8945FC                  mov dword ptr [ebp-04], eax
:00422250 8A55FC                  mov dl, byte ptr [ebp-04]
:00422253 52                      push edx
:00422254 B938464900              mov ecx, 00494638
:00422259 E862BC0000              call 0042DEC0
:0042225E 837DFC00                cmp dword ptr [ebp-04], 00000000
:00422262 7D04                    jge 00422268
:00422264 33C0                    xor eax, eax
:00422266 EB17                    jmp 0042227F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422262(C)
|
:00422268 8B45FC                  mov eax, dword ptr [ebp-04]
:0042226B 50                      push eax
:0042226C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042226F 51                      push ecx
:00422270 B938464900              mov ecx, 00494638
:00422275 E83F410000              call 004263B9
:0042227A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042223F(U), :00422266(U)
|
:0042227F 8BE5                    mov esp, ebp
:00422281 5D                      pop ebp
:00422282 C3                      ret



* Referenced by a CALL at Addresses:
|:00421265   , :00427A42   
|
:00422283 55                      push ebp
:00422284 8BEC                    mov ebp, esp
:00422286 51                      push ecx
:00422287 8B4508                  mov eax, dword ptr [ebp+08]
:0042228A 25FF000000              and eax, 000000FF
:0042228F 99                      cdq
:00422290 33C2                    xor eax, edx
:00422292 2BC2                    sub eax, edx
:00422294 83E007                  and eax, 00000007
:00422297 33C2                    xor eax, edx
:00422299 2BC2                    sub eax, edx
:0042229B 8945FC                  mov dword ptr [ebp-04], eax
:0042229E 837DFC07                cmp dword ptr [ebp-04], 00000007
:004222A2 7774                    ja 00422318
:004222A4 8B45FC                  mov eax, dword ptr [ebp-04]
:004222A7 FF24851E234200          jmp dword ptr [4*eax+0042231E]
:004222AE 8B450C                  mov eax, dword ptr [ebp+0C]
:004222B1 25FF000000              and eax, 000000FF
:004222B6 83E001                  and eax, 00000001
:004222B9 EB5F                    jmp 0042231A
:004222BB 8B450C                  mov eax, dword ptr [ebp+0C]
:004222BE 25FF000000              and eax, 000000FF
:004222C3 83E002                  and eax, 00000002
:004222C6 EB52                    jmp 0042231A
:004222C8 8B450C                  mov eax, dword ptr [ebp+0C]
:004222CB 25FF000000              and eax, 000000FF
:004222D0 83E004                  and eax, 00000004
:004222D3 EB45                    jmp 0042231A
:004222D5 8B450C                  mov eax, dword ptr [ebp+0C]
:004222D8 25FF000000              and eax, 000000FF
:004222DD 83E008                  and eax, 00000008
:004222E0 EB38                    jmp 0042231A
:004222E2 8B450C                  mov eax, dword ptr [ebp+0C]
:004222E5 25FF000000              and eax, 000000FF
:004222EA 83E010                  and eax, 00000010
:004222ED EB2B                    jmp 0042231A
:004222EF 8B450C                  mov eax, dword ptr [ebp+0C]
:004222F2 25FF000000              and eax, 000000FF
:004222F7 83E020                  and eax, 00000020
:004222FA EB1E                    jmp 0042231A
:004222FC 8B450C                  mov eax, dword ptr [ebp+0C]
:004222FF 25FF000000              and eax, 000000FF
:00422304 83E040                  and eax, 00000040
:00422307 EB11                    jmp 0042231A
:00422309 8B450C                  mov eax, dword ptr [ebp+0C]
:0042230C 25FF000000              and eax, 000000FF
:00422311 2580000000              and eax, 00000080
:00422316 EB02                    jmp 0042231A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004222A2(C)
|
:00422318 32C0                    xor al, al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004222B9(U), :004222C6(U), :004222D3(U), :004222E0(U), :004222ED(U)
|:004222FA(U), :00422307(U), :00422316(U)
|
:0042231A 8BE5                    mov esp, ebp
:0042231C 5D                      pop ebp
:0042231D C3                      ret



:0042231E AE224200                DWORD 004222AE
:00422322 BB224200                DWORD 004222BB
:00422326 C8224200                DWORD 004222C8
:0042232A D5224200                DWORD 004222D5
:0042232E E2224200                DWORD 004222E2
:00422332 EF224200                DWORD 004222EF
:00422336 FC224200                DWORD 004222FC
:0042233A 09234200                DWORD 00422309



* Referenced by a CALL at Addresses:
|:00420E81   , :00428790   
|
:0042233E 55                      push ebp
:0042233F 8BEC                    mov ebp, esp
:00422341 E858010000              call 0042249E
:00422346 85C0                    test eax, eax
:00422348 741A                    je 00422364
:0042234A 6A01                    push 00000001
:0042234C B938464900              mov ecx, 00494638
:00422351 E83ABE0000              call 0042E190
:00422356 6A00                    push 00000000
:00422358 B9D0454900              mov ecx, 004945D0
:0042235D E82EBE0000              call 0042E190
:00422362 EB18                    jmp 0042237C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422348(C)
|
:00422364 6A01                    push 00000001
:00422366 B9D0454900              mov ecx, 004945D0
:0042236B E820BE0000              call 0042E190
:00422370 6A00                    push 00000000
:00422372 B938464900              mov ecx, 00494638
:00422377 E814BE0000              call 0042E190

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422362(U)
|
:0042237C 5D                      pop ebp
:0042237D C3                      ret



* Referenced by a CALL at Address:
|:0042216D   
|
:0042237E 55                      push ebp
:0042237F 8BEC                    mov ebp, esp
:00422381 51                      push ecx
:00422382 C745FC00000000          mov [ebp-04], 00000000
:00422389 EB09                    jmp 00422394

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422495(U)
|
:0042238B 8B45FC                  mov eax, dword ptr [ebp-04]
:0042238E 83C001                  add eax, 00000001
:00422391 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422389(U)
|
:00422394 837DFC0C                cmp dword ptr [ebp-04], 0000000C
:00422398 0F8FFC000000            jg 0042249A
:0042239E 8B45FC                  mov eax, dword ptr [ebp-04]
:004223A1 99                      cdq
:004223A2 33C2                    xor eax, edx
:004223A4 2BC2                    sub eax, edx
:004223A6 83E003                  and eax, 00000003
:004223A9 33C2                    xor eax, edx
:004223AB 2BC2                    sub eax, edx
:004223AD 83F801                  cmp eax, 00000001
:004223B0 750F                    jne 004223C1
:004223B2 68D0454900              push 004945D0
:004223B7 E802170000              call 00423ABE
:004223BC 83C404                  add esp, 00000004
:004223BF EB21                    jmp 004223E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004223B0(C)
|
:004223C1 8B45FC                  mov eax, dword ptr [ebp-04]
:004223C4 99                      cdq
:004223C5 33C2                    xor eax, edx
:004223C7 2BC2                    sub eax, edx
:004223C9 83E003                  and eax, 00000003
:004223CC 33C2                    xor eax, edx
:004223CE 2BC2                    sub eax, edx
:004223D0 83F803                  cmp eax, 00000003
:004223D3 750D                    jne 004223E2
:004223D5 6838464900              push 00494638
:004223DA E8DF160000              call 00423ABE
:004223DF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004223BF(U), :004223D3(C)
|
:004223E2 6A01                    push 00000001
:004223E4 E8D2D10000              call 0042F5BB
:004223E9 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:004223EC 6A09                    push 00000009
:004223EE E81C320500              call 0047560F
:004223F3 83C404                  add esp, 00000004
:004223F6 6A00                    push 00000000
:004223F8 E83A510500              call 00477537
:004223FD 83C404                  add esp, 00000004
:00422400 E882DBFFFF              call 0041FF87
:00422405 6A30                    push 00000030
:00422407 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042240A C1E103                  shl ecx, 03
:0042240D BAF0000000              mov edx, 000000F0
:00422412 2BD1                    sub edx, ecx
:00422414 52                      push edx
:00422415 B938464900              mov ecx, 00494638
:0042241A E881BC0000              call 0042E0A0
:0042241F 6A30                    push 00000030
:00422421 8B45FC                  mov eax, dword ptr [ebp-04]
:00422424 C1E003                  shl eax, 03
:00422427 50                      push eax
:00422428 B9D0454900              mov ecx, 004945D0
:0042242D E86EBC0000              call 0042E0A0
:00422432 6A00                    push 00000000
:00422434 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00422436 6A04                    push 00000004
:00422438 E8E0380500              call 00475D1D
:0042243D 83C40C                  add esp, 0000000C
:00422440 8B45FC                  mov eax, dword ptr [ebp-04]
:00422443 99                      cdq
:00422444 33C2                    xor eax, edx
:00422446 2BC2                    sub eax, edx
:00422448 83E001                  and eax, 00000001
:0042244B 33C2                    xor eax, edx
:0042244D 2BC2                    sub eax, edx
:0042244F 83C002                  add eax, 00000002
:00422452 69C000090000            imul eax, 00000900
:00422458 50                      push eax
:00422459 B938464900              mov ecx, 00494638
:0042245E E87BA90000              call 0042CDDE
:00422463 8B45FC                  mov eax, dword ptr [ebp-04]
:00422466 99                      cdq
:00422467 33C2                    xor eax, edx
:00422469 2BC2                    sub eax, edx
:0042246B 83E001                  and eax, 00000001
:0042246E 33C2                    xor eax, edx
:00422470 2BC2                    sub eax, edx
:00422472 83C002                  add eax, 00000002
:00422475 69C000090000            imul eax, 00000900
:0042247B 50                      push eax
:0042247C B9D0454900              mov ecx, 004945D0
:00422481 E858A90000              call 0042CDDE
:00422486 6A01                    push 00000001
:00422488 E8AA500500              call 00477537
:0042248D 83C404                  add esp, 00000004
:00422490 E83BD10000              call 0042F5D0
:00422495 E9F1FEFFFF              jmp 0042238B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00422398(C)
|
:0042249A 8BE5                    mov esp, ebp
:0042249C 5D                      pop ebp
:0042249D C3                      ret



* Referenced by a CALL at Address:
|:00422341   
|
:0042249E 55                      push ebp
:0042249F 8BEC                    mov ebp, esp
:004224A1 83EC08                  sub esp, 00000008
:004224A4 53                      push ebx
:004224A5 B938464900              mov ecx, 00494638
:004224AA E8510EFEFF              call 00403300
:004224AF 8945F8                  mov dword ptr [ebp-08], eax
:004224B2 B9D0454900              mov ecx, 004945D0
:004224B7 E8440EFEFF              call 00403300
:004224BC 8945FC                  mov dword ptr [ebp-04], eax
:004224BF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004224C2 6BC950                  imul ecx, 00000050
:004224C5 81C1787F4900            add ecx, 00497F78
:004224CB E8EAF9FDFF              call 00401EBA
:004224D0 8AD8                    mov bl, al
:004224D2 81E3FF000000            and ebx, 000000FF
:004224D8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004224DB 6BC950                  imul ecx, 00000050
:004224DE 81C1787F4900            add ecx, 00497F78
:004224E4 E8D1F9FDFF              call 00401EBA
:004224E9 25FF000000              and eax, 000000FF
:004224EE 2BD8                    sub ebx, eax
:004224F0 85DB                    test ebx, ebx
:004224F2 7E07                    jle 004224FB
:004224F4 B801000000              mov eax, 00000001
:004224F9 EB02                    jmp 004224FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004224F2(C)
|
:004224FB 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004224F9(U)
|
:004224FD 5B                      pop ebx
:004224FE 8BE5                    mov esp, ebp
:00422500 5D                      pop ebp
:00422501 C3                      ret



* Referenced by a CALL at Address:
|:00420956   
|
:00422502 55                      push ebp
:00422503 8BEC                    mov ebp, esp
:00422505 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00422507 6A03                    push 00000003
:00422509 8B4508                  mov eax, dword ptr [ebp+08]
:0042250C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042250D FF1510D64B00            Call dword ptr [004BD610]
:00422513 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00422514 FF1584D64B00            Call dword ptr [004BD684]
:0042251A 6A00                    push 00000000
:0042251C 687B040000              push 0000047B
:00422521 8B4D08                  mov ecx, dword ptr [ebp+08]
:00422524 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00422525 FF1510D64B00            Call dword ptr [004BD610]
:0042252B 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042252C FF1584D64B00            Call dword ptr [004BD684]
:00422532 6A00                    push 00000000
:00422534 687C040000              push 0000047C
:00422539 8B5508                  mov edx, dword ptr [ebp+08]
:0042253C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042253D FF1510D64B00            Call dword ptr [004BD610]
:00422543 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00422544 FF1584D64B00            Call dword ptr [004BD684]
:0042254A 6A00                    push 00000000
:0042254C 687D040000              push 0000047D
:00422551 8B4508                  mov eax, dword ptr [ebp+08]
:00422554 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00422555 FF1510D64B00            Call dword ptr [004BD610]
:0042255B 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042255C FF1584D64B00            Call dword ptr [004BD684]
:00422562 6A00                    push 00000000
:00422564 687E040000              push 0000047E
:00422569 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042256C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042256D FF1510D64B00            Call dword ptr [004BD610]
:00422573 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00422574 FF1584D64B00            Call dword ptr [004BD684]
:0042257A 6A00                    push 00000000
:0042257C 687A040000              push 0000047A
:00422581 8B5508                  mov edx, dword ptr [ebp+08]
:00422584 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00422585 FF1510D64B00            Call dword ptr [004BD610]
:0042258B 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042258C FF1584D64B00            Call dword ptr [004BD684]
:00422592 5D                      pop ebp
:00422593 C3                      ret



* Referenced by a CALL at Addresses:
|:004232C2   , :004278A5   
|
:00422594 55                      push ebp
:00422595 8BEC                    mov ebp, esp
:00422597 83EC14                  sub esp, 00000014
:0042259A 894DF0                  mov dword ptr [ebp-10], ecx
:0042259D C745F800000000          mov [ebp-08], 00000000
:004225A4 8B45F0                  mov eax, dword ptr [ebp-10]
:004225A7 8B4814                  mov ecx, dword ptr [eax+14]
:004225AA 6BC950                  imul ecx, 00000050
:004225AD 81C1787F4900            add ecx, 00497F78
:004225B3 E8E80BFEFF              call 004031A0
:004225B8 25FF000000              and eax, 000000FF
:004225BD 8945FC                  mov dword ptr [ebp-04], eax
:004225C0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004225C3 8B4914                  mov ecx, dword ptr [ecx+14]
:004225C6 6BC950                  imul ecx, 00000050
:004225C9 81C1787F4900            add ecx, 00497F78
:004225CF E8CCD8FEFF              call 0040FEA0
:004225D4 25FF000000              and eax, 000000FF
:004225D9 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004225DC 6A0A                    push 0000000A
:004225DE 6A00                    push 00000000
:004225E0 6898464900              push 00494698
:004225E5 E8E6D40400              call 0046FAD0
:004225EA 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004225ED 6A0A                    push 0000000A
:004225EF 6A00                    push 00000000
:004225F1 6870474900              push 00494770
:004225F6 E8D5D40400              call 0046FAD0
:004225FB 83C40C                  add esp, 0000000C
:004225FE 8B55FC                  mov edx, dword ptr [ebp-04]
:00422601 8955EC                  mov dword ptr [ebp-14], edx
:00422604 837DEC1F                cmp dword ptr [ebp-14], 0000001F
:00422608 0F87590A0000            ja 00423067
:0042260E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00422611 33C0                    xor eax, eax
:00422613 8A81B2304200            mov al, byte ptr [ecx+004230B2]
:00422619 FF24856E304200          jmp dword ptr [4*eax+0042306E]
:00422620 8B55F8                  mov edx, dword ptr [ebp-08]
:00422623 52                      push edx
:00422624 8B45FC                  mov eax, dword ptr [ebp-04]
:00422627 50                      push eax
:00422628 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042262B 51                      push ecx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042262C 6A06                    push 00000006
:0042262E 8B55F0                  mov edx, dword ptr [ebp-10]
:00422631 8B4204                  mov eax, dword ptr [edx+04]
:00422634 50                      push eax
:00422635 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422638 51                      push ecx
:00422639 E8BA120000              call 004238F8
:0042263E 83C418                  add esp, 00000018
:00422641 8945F8                  mov dword ptr [ebp-08], eax
:00422644 8B55F8                  mov edx, dword ptr [ebp-08]
:00422647 52                      push edx
:00422648 8B45FC                  mov eax, dword ptr [ebp-04]
:0042264B 50                      push eax
:0042264C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042264F 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:00422650 6A1A                    push 0000001A
:00422652 8B55F0                  mov edx, dword ptr [ebp-10]
:00422655 8B4204                  mov eax, dword ptr [edx+04]
:00422658 50                      push eax
:00422659 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042265C 51                      push ecx
:0042265D E896120000              call 004238F8
:00422662 83C418                  add esp, 00000018
:00422665 8945F8                  mov dword ptr [ebp-08], eax
:00422668 8B55F8                  mov edx, dword ptr [ebp-08]
:0042266B 52                      push edx
:0042266C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042266F 50                      push eax
:00422670 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422673 51                      push ecx
:00422674 6A28                    push 00000028
:00422676 8B55F0                  mov edx, dword ptr [ebp-10]
:00422679 8B4204                  mov eax, dword ptr [edx+04]
:0042267C 50                      push eax
:0042267D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422680 51                      push ecx
:00422681 E872120000              call 004238F8
:00422686 83C418                  add esp, 00000018
:00422689 8945F8                  mov dword ptr [ebp-08], eax
:0042268C 8B55F8                  mov edx, dword ptr [ebp-08]
:0042268F 52                      push edx
:00422690 8B45FC                  mov eax, dword ptr [ebp-04]
:00422693 50                      push eax
:00422694 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422697 51                      push ecx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:0036, ""
                                  |
:00422698 6A36                    push 00000036
:0042269A 8B55F0                  mov edx, dword ptr [ebp-10]
:0042269D 8B4204                  mov eax, dword ptr [edx+04]
:004226A0 50                      push eax
:004226A1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004226A4 51                      push ecx
:004226A5 E84E120000              call 004238F8
:004226AA 83C418                  add esp, 00000018
:004226AD 8945F8                  mov dword ptr [ebp-08], eax
:004226B0 8B55F8                  mov edx, dword ptr [ebp-08]
:004226B3 52                      push edx
:004226B4 8B45FC                  mov eax, dword ptr [ebp-04]
:004226B7 50                      push eax
:004226B8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004226BB 51                      push ecx
:004226BC 6A00                    push 00000000
:004226BE 8B55F0                  mov edx, dword ptr [ebp-10]
:004226C1 8B4204                  mov eax, dword ptr [edx+04]
:004226C4 50                      push eax
:004226C5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004226C8 51                      push ecx
:004226C9 E82A120000              call 004238F8
:004226CE 83C418                  add esp, 00000018
:004226D1 8945F8                  mov dword ptr [ebp-08], eax
:004226D4 E98E090000              jmp 00423067
:004226D9 8B55F8                  mov edx, dword ptr [ebp-08]
:004226DC 52                      push edx
:004226DD 8B45FC                  mov eax, dword ptr [ebp-04]
:004226E0 50                      push eax
:004226E1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004226E4 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004226E5 6A04                    push 00000004
:004226E7 8B55F0                  mov edx, dword ptr [ebp-10]
:004226EA 8B4204                  mov eax, dword ptr [edx+04]
:004226ED 50                      push eax
:004226EE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004226F1 51                      push ecx
:004226F2 E801120000              call 004238F8
:004226F7 83C418                  add esp, 00000018
:004226FA 8945F8                  mov dword ptr [ebp-08], eax
:004226FD 8B55F8                  mov edx, dword ptr [ebp-08]
:00422700 52                      push edx
:00422701 8B45FC                  mov eax, dword ptr [ebp-04]
:00422704 50                      push eax
:00422705 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422708 51                      push ecx
:00422709 6A0D                    push 0000000D
:0042270B 8B55F0                  mov edx, dword ptr [ebp-10]
:0042270E 8B4204                  mov eax, dword ptr [edx+04]
:00422711 50                      push eax
:00422712 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422715 51                      push ecx
:00422716 E8DD110000              call 004238F8
:0042271B 83C418                  add esp, 00000018
:0042271E 8945F8                  mov dword ptr [ebp-08], eax
:00422721 8B55F8                  mov edx, dword ptr [ebp-08]
:00422724 52                      push edx
:00422725 8B45FC                  mov eax, dword ptr [ebp-04]
:00422728 50                      push eax
:00422729 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042272C 51                      push ecx
:0042272D 6A1D                    push 0000001D
:0042272F 8B55F0                  mov edx, dword ptr [ebp-10]
:00422732 8B4204                  mov eax, dword ptr [edx+04]
:00422735 50                      push eax
:00422736 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422739 51                      push ecx
:0042273A E8B9110000              call 004238F8
:0042273F 83C418                  add esp, 00000018
:00422742 8945F8                  mov dword ptr [ebp-08], eax
:00422745 E91D090000              jmp 00423067
:0042274A 8B55F8                  mov edx, dword ptr [ebp-08]
:0042274D 52                      push edx
:0042274E 8B45FC                  mov eax, dword ptr [ebp-04]
:00422751 50                      push eax
:00422752 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422755 51                      push ecx
:00422756 6A1C                    push 0000001C
:00422758 8B55F0                  mov edx, dword ptr [ebp-10]
:0042275B 8B4204                  mov eax, dword ptr [edx+04]
:0042275E 50                      push eax
:0042275F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422762 51                      push ecx
:00422763 E890110000              call 004238F8
:00422768 83C418                  add esp, 00000018
:0042276B 8945F8                  mov dword ptr [ebp-08], eax
:0042276E 8B55F8                  mov edx, dword ptr [ebp-08]
:00422771 52                      push edx
:00422772 8B45FC                  mov eax, dword ptr [ebp-04]
:00422775 50                      push eax
:00422776 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422779 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042277A 6A08                    push 00000008
:0042277C 8B55F0                  mov edx, dword ptr [ebp-10]
:0042277F 8B4204                  mov eax, dword ptr [edx+04]
:00422782 50                      push eax
:00422783 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422786 51                      push ecx
:00422787 E86C110000              call 004238F8
:0042278C 83C418                  add esp, 00000018
:0042278F 8945F8                  mov dword ptr [ebp-08], eax
:00422792 8B55F8                  mov edx, dword ptr [ebp-08]
:00422795 52                      push edx
:00422796 8B45FC                  mov eax, dword ptr [ebp-04]
:00422799 50                      push eax
:0042279A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042279D 51                      push ecx

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0042279E 6A09                    push 00000009
:004227A0 8B55F0                  mov edx, dword ptr [ebp-10]
:004227A3 8B4204                  mov eax, dword ptr [edx+04]
:004227A6 50                      push eax
:004227A7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004227AA 51                      push ecx
:004227AB E848110000              call 004238F8
:004227B0 83C418                  add esp, 00000018
:004227B3 8945F8                  mov dword ptr [ebp-08], eax
:004227B6 E9AC080000              jmp 00423067
:004227BB 8B55F8                  mov edx, dword ptr [ebp-08]
:004227BE 52                      push edx
:004227BF 8B45FC                  mov eax, dword ptr [ebp-04]
:004227C2 50                      push eax
:004227C3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004227C6 51                      push ecx
:004227C7 6A3F                    push 0000003F
:004227C9 8B55F0                  mov edx, dword ptr [ebp-10]
:004227CC 8B4204                  mov eax, dword ptr [edx+04]
:004227CF 50                      push eax
:004227D0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004227D3 51                      push ecx
:004227D4 E81F110000              call 004238F8
:004227D9 83C418                  add esp, 00000018
:004227DC 8945F8                  mov dword ptr [ebp-08], eax
:004227DF 8B55F8                  mov edx, dword ptr [ebp-08]
:004227E2 52                      push edx
:004227E3 8B45FC                  mov eax, dword ptr [ebp-04]
:004227E6 50                      push eax
:004227E7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004227EA 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:004227EB 6A1A                    push 0000001A
:004227ED 8B55F0                  mov edx, dword ptr [ebp-10]
:004227F0 8B4204                  mov eax, dword ptr [edx+04]
:004227F3 50                      push eax
:004227F4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004227F7 51                      push ecx
:004227F8 E8FB100000              call 004238F8
:004227FD 83C418                  add esp, 00000018
:00422800 8945F8                  mov dword ptr [ebp-08], eax
:00422803 8B55F8                  mov edx, dword ptr [ebp-08]
:00422806 52                      push edx
:00422807 8B45FC                  mov eax, dword ptr [ebp-04]
:0042280A 50                      push eax
:0042280B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042280E 51                      push ecx
:0042280F 6A1B                    push 0000001B
:00422811 8B55F0                  mov edx, dword ptr [ebp-10]
:00422814 8B4204                  mov eax, dword ptr [edx+04]
:00422817 50                      push eax
:00422818 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042281B 51                      push ecx
:0042281C E8D7100000              call 004238F8
:00422821 83C418                  add esp, 00000018
:00422824 8945F8                  mov dword ptr [ebp-08], eax
:00422827 E93B080000              jmp 00423067
:0042282C 8B55F8                  mov edx, dword ptr [ebp-08]
:0042282F 52                      push edx
:00422830 8B45FC                  mov eax, dword ptr [ebp-04]
:00422833 50                      push eax
:00422834 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422837 51                      push ecx
:00422838 6A3F                    push 0000003F
:0042283A 8B55F0                  mov edx, dword ptr [ebp-10]
:0042283D 8B4204                  mov eax, dword ptr [edx+04]
:00422840 50                      push eax
:00422841 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422844 51                      push ecx
:00422845 E8AE100000              call 004238F8
:0042284A 83C418                  add esp, 00000018
:0042284D 8945F8                  mov dword ptr [ebp-08], eax
:00422850 8B55F8                  mov edx, dword ptr [ebp-08]
:00422853 52                      push edx
:00422854 8B45FC                  mov eax, dword ptr [ebp-04]
:00422857 50                      push eax
:00422858 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042285B 51                      push ecx
:0042285C 6A1C                    push 0000001C
:0042285E 8B55F0                  mov edx, dword ptr [ebp-10]
:00422861 8B4204                  mov eax, dword ptr [edx+04]
:00422864 50                      push eax
:00422865 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422868 51                      push ecx
:00422869 E88A100000              call 004238F8
:0042286E 83C418                  add esp, 00000018
:00422871 8945F8                  mov dword ptr [ebp-08], eax
:00422874 8B55F8                  mov edx, dword ptr [ebp-08]
:00422877 52                      push edx
:00422878 8B45FC                  mov eax, dword ptr [ebp-04]
:0042287B 50                      push eax
:0042287C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042287F 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00422880 6A08                    push 00000008
:00422882 8B55F0                  mov edx, dword ptr [ebp-10]
:00422885 8B4204                  mov eax, dword ptr [edx+04]
:00422888 50                      push eax
:00422889 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042288C 51                      push ecx
:0042288D E866100000              call 004238F8
:00422892 83C418                  add esp, 00000018
:00422895 8945F8                  mov dword ptr [ebp-08], eax
:00422898 8B55F8                  mov edx, dword ptr [ebp-08]
:0042289B 52                      push edx
:0042289C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042289F 50                      push eax
:004228A0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004228A3 51                      push ecx

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:004228A4 6A09                    push 00000009
:004228A6 8B55F0                  mov edx, dword ptr [ebp-10]
:004228A9 8B4204                  mov eax, dword ptr [edx+04]
:004228AC 50                      push eax
:004228AD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004228B0 51                      push ecx
:004228B1 E842100000              call 004238F8
:004228B6 83C418                  add esp, 00000018
:004228B9 8945F8                  mov dword ptr [ebp-08], eax
:004228BC E9A6070000              jmp 00423067
:004228C1 8B55F8                  mov edx, dword ptr [ebp-08]
:004228C4 52                      push edx
:004228C5 8B45FC                  mov eax, dword ptr [ebp-04]
:004228C8 50                      push eax
:004228C9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004228CC 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004228CD 6A03                    push 00000003
:004228CF 8B55F0                  mov edx, dword ptr [ebp-10]
:004228D2 8B4204                  mov eax, dword ptr [edx+04]
:004228D5 50                      push eax
:004228D6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004228D9 51                      push ecx
:004228DA E819100000              call 004238F8
:004228DF 83C418                  add esp, 00000018
:004228E2 8945F8                  mov dword ptr [ebp-08], eax
:004228E5 8B55F8                  mov edx, dword ptr [ebp-08]
:004228E8 52                      push edx
:004228E9 8B45FC                  mov eax, dword ptr [ebp-04]
:004228EC 50                      push eax
:004228ED 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004228F0 51                      push ecx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004228F1 6A0A                    push 0000000A
:004228F3 8B55F0                  mov edx, dword ptr [ebp-10]
:004228F6 8B4204                  mov eax, dword ptr [edx+04]
:004228F9 50                      push eax
:004228FA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004228FD 51                      push ecx
:004228FE E8F50F0000              call 004238F8
:00422903 83C418                  add esp, 00000018
:00422906 8945F8                  mov dword ptr [ebp-08], eax
:00422909 8B55F8                  mov edx, dword ptr [ebp-08]
:0042290C 52                      push edx
:0042290D 8B45FC                  mov eax, dword ptr [ebp-04]
:00422910 50                      push eax
:00422911 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422914 51                      push ecx
:00422915 6A0C                    push 0000000C
:00422917 8B55F0                  mov edx, dword ptr [ebp-10]
:0042291A 8B4204                  mov eax, dword ptr [edx+04]
:0042291D 50                      push eax
:0042291E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422921 51                      push ecx
:00422922 E8D10F0000              call 004238F8
:00422927 83C418                  add esp, 00000018
:0042292A 8945F8                  mov dword ptr [ebp-08], eax
:0042292D 8B55F8                  mov edx, dword ptr [ebp-08]
:00422930 52                      push edx
:00422931 8B45FC                  mov eax, dword ptr [ebp-04]
:00422934 50                      push eax
:00422935 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422938 51                      push ecx
:00422939 6A1F                    push 0000001F
:0042293B 8B55F0                  mov edx, dword ptr [ebp-10]
:0042293E 8B4204                  mov eax, dword ptr [edx+04]
:00422941 50                      push eax
:00422942 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422945 51                      push ecx
:00422946 E8AD0F0000              call 004238F8
:0042294B 83C418                  add esp, 00000018
:0042294E 8945F8                  mov dword ptr [ebp-08], eax
:00422951 E911070000              jmp 00423067
:00422956 8B55F8                  mov edx, dword ptr [ebp-08]
:00422959 52                      push edx
:0042295A 8B45FC                  mov eax, dword ptr [ebp-04]
:0042295D 50                      push eax
:0042295E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422961 51                      push ecx
:00422962 6A11                    push 00000011
:00422964 8B55F0                  mov edx, dword ptr [ebp-10]
:00422967 8B4204                  mov eax, dword ptr [edx+04]
:0042296A 50                      push eax
:0042296B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042296E 51                      push ecx
:0042296F E8840F0000              call 004238F8
:00422974 83C418                  add esp, 00000018
:00422977 8945F8                  mov dword ptr [ebp-08], eax
:0042297A E9E8060000              jmp 00423067
:0042297F 8B55F8                  mov edx, dword ptr [ebp-08]
:00422982 52                      push edx
:00422983 8B45FC                  mov eax, dword ptr [ebp-04]
:00422986 50                      push eax
:00422987 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042298A 51                      push ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042298B 6A02                    push 00000002
:0042298D 8B55F0                  mov edx, dword ptr [ebp-10]
:00422990 8B4204                  mov eax, dword ptr [edx+04]
:00422993 50                      push eax
:00422994 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422997 51                      push ecx
:00422998 E85B0F0000              call 004238F8
:0042299D 83C418                  add esp, 00000018
:004229A0 8945F8                  mov dword ptr [ebp-08], eax
:004229A3 8B55F8                  mov edx, dword ptr [ebp-08]
:004229A6 52                      push edx
:004229A7 8B45FC                  mov eax, dword ptr [ebp-04]
:004229AA 50                      push eax
:004229AB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004229AE 51                      push ecx
:004229AF 6A0B                    push 0000000B
:004229B1 8B55F0                  mov edx, dword ptr [ebp-10]
:004229B4 8B4204                  mov eax, dword ptr [edx+04]
:004229B7 50                      push eax
:004229B8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004229BB 51                      push ecx
:004229BC E8370F0000              call 004238F8
:004229C1 83C418                  add esp, 00000018
:004229C4 8945F8                  mov dword ptr [ebp-08], eax
:004229C7 8B55F8                  mov edx, dword ptr [ebp-08]
:004229CA 52                      push edx
:004229CB 8B45FC                  mov eax, dword ptr [ebp-04]
:004229CE 50                      push eax
:004229CF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004229D2 51                      push ecx
:004229D3 6A01                    push 00000001
:004229D5 8B55F0                  mov edx, dword ptr [ebp-10]
:004229D8 8B4204                  mov eax, dword ptr [edx+04]
:004229DB 50                      push eax
:004229DC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004229DF 51                      push ecx
:004229E0 E8130F0000              call 004238F8
:004229E5 83C418                  add esp, 00000018
:004229E8 8945F8                  mov dword ptr [ebp-08], eax
:004229EB 8B55F8                  mov edx, dword ptr [ebp-08]
:004229EE 52                      push edx
:004229EF 8B45FC                  mov eax, dword ptr [ebp-04]
:004229F2 50                      push eax
:004229F3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004229F6 51                      push ecx
:004229F7 6A0F                    push 0000000F
:004229F9 8B55F0                  mov edx, dword ptr [ebp-10]
:004229FC 8B4204                  mov eax, dword ptr [edx+04]
:004229FF 50                      push eax
:00422A00 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422A03 51                      push ecx
:00422A04 E8EF0E0000              call 004238F8
:00422A09 83C418                  add esp, 00000018
:00422A0C 8945F8                  mov dword ptr [ebp-08], eax
:00422A0F E953060000              jmp 00423067
:00422A14 8B55F8                  mov edx, dword ptr [ebp-08]
:00422A17 52                      push edx
:00422A18 8B45FC                  mov eax, dword ptr [ebp-04]
:00422A1B 50                      push eax
:00422A1C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422A1F 51                      push ecx
:00422A20 6A10                    push 00000010
:00422A22 8B55F0                  mov edx, dword ptr [ebp-10]
:00422A25 8B4204                  mov eax, dword ptr [edx+04]
:00422A28 50                      push eax
:00422A29 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422A2C 51                      push ecx
:00422A2D E8C60E0000              call 004238F8
:00422A32 83C418                  add esp, 00000018
:00422A35 8945F8                  mov dword ptr [ebp-08], eax
:00422A38 8B55F8                  mov edx, dword ptr [ebp-08]
:00422A3B 52                      push edx
:00422A3C 8B45FC                  mov eax, dword ptr [ebp-04]
:00422A3F 50                      push eax
:00422A40 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422A43 51                      push ecx

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00422A44 6A07                    push 00000007
:00422A46 8B55F0                  mov edx, dword ptr [ebp-10]
:00422A49 8B4204                  mov eax, dword ptr [edx+04]
:00422A4C 50                      push eax
:00422A4D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422A50 51                      push ecx
:00422A51 E8A20E0000              call 004238F8
:00422A56 83C418                  add esp, 00000018
:00422A59 8945F8                  mov dword ptr [ebp-08], eax
:00422A5C 8B55F8                  mov edx, dword ptr [ebp-08]
:00422A5F 52                      push edx
:00422A60 8B45FC                  mov eax, dword ptr [ebp-04]
:00422A63 50                      push eax
:00422A64 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422A67 51                      push ecx
:00422A68 6A3E                    push 0000003E
:00422A6A 8B55F0                  mov edx, dword ptr [ebp-10]
:00422A6D 8B4204                  mov eax, dword ptr [edx+04]
:00422A70 50                      push eax
:00422A71 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422A74 51                      push ecx
:00422A75 E87E0E0000              call 004238F8
:00422A7A 83C418                  add esp, 00000018
:00422A7D 8945F8                  mov dword ptr [ebp-08], eax
:00422A80 8B55F8                  mov edx, dword ptr [ebp-08]
:00422A83 52                      push edx
:00422A84 8B45FC                  mov eax, dword ptr [ebp-04]
:00422A87 50                      push eax
:00422A88 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422A8B 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00422A8C 6A05                    push 00000005
:00422A8E 8B55F0                  mov edx, dword ptr [ebp-10]
:00422A91 8B4204                  mov eax, dword ptr [edx+04]
:00422A94 50                      push eax
:00422A95 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422A98 51                      push ecx
:00422A99 E85A0E0000              call 004238F8
:00422A9E 83C418                  add esp, 00000018
:00422AA1 8945F8                  mov dword ptr [ebp-08], eax
:00422AA4 E9BE050000              jmp 00423067
:00422AA9 8B55F8                  mov edx, dword ptr [ebp-08]
:00422AAC 52                      push edx
:00422AAD 8B45FC                  mov eax, dword ptr [ebp-04]
:00422AB0 50                      push eax
:00422AB1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422AB4 51                      push ecx
:00422AB5 6A22                    push 00000022
:00422AB7 8B55F0                  mov edx, dword ptr [ebp-10]
:00422ABA 8B4204                  mov eax, dword ptr [edx+04]
:00422ABD 50                      push eax
:00422ABE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422AC1 51                      push ecx
:00422AC2 E8310E0000              call 004238F8
:00422AC7 83C418                  add esp, 00000018
:00422ACA 8945F8                  mov dword ptr [ebp-08], eax
:00422ACD 8B55F8                  mov edx, dword ptr [ebp-08]
:00422AD0 52                      push edx
:00422AD1 8B45FC                  mov eax, dword ptr [ebp-04]
:00422AD4 50                      push eax
:00422AD5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422AD8 51                      push ecx
:00422AD9 6A23                    push 00000023
:00422ADB 8B55F0                  mov edx, dword ptr [ebp-10]
:00422ADE 8B4204                  mov eax, dword ptr [edx+04]
:00422AE1 50                      push eax
:00422AE2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422AE5 51                      push ecx
:00422AE6 E80D0E0000              call 004238F8
:00422AEB 83C418                  add esp, 00000018
:00422AEE 8945F8                  mov dword ptr [ebp-08], eax
:00422AF1 8B55F8                  mov edx, dword ptr [ebp-08]
:00422AF4 52                      push edx
:00422AF5 8B45FC                  mov eax, dword ptr [ebp-04]
:00422AF8 50                      push eax
:00422AF9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422AFC 51                      push ecx
:00422AFD 6A3E                    push 0000003E
:00422AFF 8B55F0                  mov edx, dword ptr [ebp-10]
:00422B02 8B4204                  mov eax, dword ptr [edx+04]
:00422B05 50                      push eax
:00422B06 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422B09 51                      push ecx
:00422B0A E8E90D0000              call 004238F8
:00422B0F 83C418                  add esp, 00000018
:00422B12 8945F8                  mov dword ptr [ebp-08], eax
:00422B15 8B55F8                  mov edx, dword ptr [ebp-08]
:00422B18 52                      push edx
:00422B19 8B45FC                  mov eax, dword ptr [ebp-04]
:00422B1C 50                      push eax
:00422B1D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422B20 51                      push ecx
:00422B21 6A21                    push 00000021
:00422B23 8B55F0                  mov edx, dword ptr [ebp-10]
:00422B26 8B4204                  mov eax, dword ptr [edx+04]
:00422B29 50                      push eax
:00422B2A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422B2D 51                      push ecx
:00422B2E E8C50D0000              call 004238F8
:00422B33 83C418                  add esp, 00000018
:00422B36 8945F8                  mov dword ptr [ebp-08], eax
:00422B39 E929050000              jmp 00423067
:00422B3E 8B55F8                  mov edx, dword ptr [ebp-08]
:00422B41 52                      push edx
:00422B42 8B45FC                  mov eax, dword ptr [ebp-04]
:00422B45 50                      push eax
:00422B46 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422B49 51                      push ecx
:00422B4A 6A12                    push 00000012
:00422B4C 8B55F0                  mov edx, dword ptr [ebp-10]
:00422B4F 8B4204                  mov eax, dword ptr [edx+04]
:00422B52 50                      push eax
:00422B53 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422B56 51                      push ecx
:00422B57 E89C0D0000              call 004238F8
:00422B5C 83C418                  add esp, 00000018
:00422B5F 8945F8                  mov dword ptr [ebp-08], eax
:00422B62 8B55F8                  mov edx, dword ptr [ebp-08]
:00422B65 52                      push edx
:00422B66 8B45FC                  mov eax, dword ptr [ebp-04]
:00422B69 50                      push eax
:00422B6A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422B6D 51                      push ecx
:00422B6E 6A13                    push 00000013
:00422B70 8B55F0                  mov edx, dword ptr [ebp-10]
:00422B73 8B4204                  mov eax, dword ptr [edx+04]
:00422B76 50                      push eax
:00422B77 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422B7A 51                      push ecx
:00422B7B E8780D0000              call 004238F8
:00422B80 83C418                  add esp, 00000018
:00422B83 8945F8                  mov dword ptr [ebp-08], eax
:00422B86 8B55F8                  mov edx, dword ptr [ebp-08]
:00422B89 52                      push edx
:00422B8A 8B45FC                  mov eax, dword ptr [ebp-04]
:00422B8D 50                      push eax
:00422B8E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422B91 51                      push ecx
:00422B92 6A2F                    push 0000002F
:00422B94 8B55F0                  mov edx, dword ptr [ebp-10]
:00422B97 8B4204                  mov eax, dword ptr [edx+04]
:00422B9A 50                      push eax
:00422B9B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422B9E 51                      push ecx
:00422B9F E8540D0000              call 004238F8
:00422BA4 83C418                  add esp, 00000018
:00422BA7 8945F8                  mov dword ptr [ebp-08], eax
:00422BAA 8B55F8                  mov edx, dword ptr [ebp-08]
:00422BAD 52                      push edx
:00422BAE 8B45FC                  mov eax, dword ptr [ebp-04]
:00422BB1 50                      push eax
:00422BB2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422BB5 51                      push ecx
:00422BB6 6A37                    push 00000037
:00422BB8 8B55F0                  mov edx, dword ptr [ebp-10]
:00422BBB 8B4204                  mov eax, dword ptr [edx+04]
:00422BBE 50                      push eax
:00422BBF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422BC2 51                      push ecx
:00422BC3 E8300D0000              call 004238F8
:00422BC8 83C418                  add esp, 00000018
:00422BCB 8945F8                  mov dword ptr [ebp-08], eax
:00422BCE 8B55F8                  mov edx, dword ptr [ebp-08]
:00422BD1 52                      push edx
:00422BD2 8B45FC                  mov eax, dword ptr [ebp-04]
:00422BD5 50                      push eax
:00422BD6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422BD9 51                      push ecx
:00422BDA 6A19                    push 00000019
:00422BDC 8B55F0                  mov edx, dword ptr [ebp-10]
:00422BDF 8B4204                  mov eax, dword ptr [edx+04]
:00422BE2 50                      push eax
:00422BE3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422BE6 51                      push ecx
:00422BE7 E80C0D0000              call 004238F8
:00422BEC 83C418                  add esp, 00000018
:00422BEF 8945F8                  mov dword ptr [ebp-08], eax
:00422BF2 8B55F8                  mov edx, dword ptr [ebp-08]
:00422BF5 52                      push edx
:00422BF6 8B45FC                  mov eax, dword ptr [ebp-04]
:00422BF9 50                      push eax
:00422BFA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422BFD 51                      push ecx
:00422BFE 6A2E                    push 0000002E
:00422C00 8B55F0                  mov edx, dword ptr [ebp-10]
:00422C03 8B4204                  mov eax, dword ptr [edx+04]
:00422C06 50                      push eax
:00422C07 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422C0A 51                      push ecx
:00422C0B E8E80C0000              call 004238F8
:00422C10 83C418                  add esp, 00000018
:00422C13 8945F8                  mov dword ptr [ebp-08], eax
:00422C16 E94C040000              jmp 00423067
:00422C1B 8B55F8                  mov edx, dword ptr [ebp-08]
:00422C1E 52                      push edx
:00422C1F 8B45FC                  mov eax, dword ptr [ebp-04]
:00422C22 50                      push eax
:00422C23 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422C26 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00422C27 6A14                    push 00000014
:00422C29 8B55F0                  mov edx, dword ptr [ebp-10]
:00422C2C 8B4204                  mov eax, dword ptr [edx+04]
:00422C2F 50                      push eax
:00422C30 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422C33 51                      push ecx
:00422C34 E8BF0C0000              call 004238F8
:00422C39 83C418                  add esp, 00000018
:00422C3C 8945F8                  mov dword ptr [ebp-08], eax
:00422C3F 8B55F8                  mov edx, dword ptr [ebp-08]
:00422C42 52                      push edx
:00422C43 8B45FC                  mov eax, dword ptr [ebp-04]
:00422C46 50                      push eax
:00422C47 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422C4A 51                      push ecx
:00422C4B 6A2C                    push 0000002C
:00422C4D 8B55F0                  mov edx, dword ptr [ebp-10]
:00422C50 8B4204                  mov eax, dword ptr [edx+04]
:00422C53 50                      push eax
:00422C54 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422C57 51                      push ecx
:00422C58 E89B0C0000              call 004238F8
:00422C5D 83C418                  add esp, 00000018
:00422C60 8945F8                  mov dword ptr [ebp-08], eax
:00422C63 8B55F8                  mov edx, dword ptr [ebp-08]
:00422C66 52                      push edx
:00422C67 8B45FC                  mov eax, dword ptr [ebp-04]
:00422C6A 50                      push eax
:00422C6B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422C6E 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003C, ""
                                  |
:00422C6F 6A3C                    push 0000003C
:00422C71 8B55F0                  mov edx, dword ptr [ebp-10]
:00422C74 8B4204                  mov eax, dword ptr [edx+04]
:00422C77 50                      push eax
:00422C78 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422C7B 51                      push ecx
:00422C7C E8770C0000              call 004238F8
:00422C81 83C418                  add esp, 00000018
:00422C84 8945F8                  mov dword ptr [ebp-08], eax
:00422C87 8B55F8                  mov edx, dword ptr [ebp-08]
:00422C8A 52                      push edx
:00422C8B 8B45FC                  mov eax, dword ptr [ebp-04]
:00422C8E 50                      push eax
:00422C8F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422C92 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:00422C93 6A15                    push 00000015
:00422C95 8B55F0                  mov edx, dword ptr [ebp-10]
:00422C98 8B4204                  mov eax, dword ptr [edx+04]
:00422C9B 50                      push eax
:00422C9C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422C9F 51                      push ecx
:00422CA0 E8530C0000              call 004238F8
:00422CA5 83C418                  add esp, 00000018
:00422CA8 8945F8                  mov dword ptr [ebp-08], eax
:00422CAB 8B55F8                  mov edx, dword ptr [ebp-08]
:00422CAE 52                      push edx
:00422CAF 8B45FC                  mov eax, dword ptr [ebp-04]
:00422CB2 50                      push eax
:00422CB3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422CB6 51                      push ecx
:00422CB7 6A17                    push 00000017
:00422CB9 8B55F0                  mov edx, dword ptr [ebp-10]
:00422CBC 8B4204                  mov eax, dword ptr [edx+04]
:00422CBF 50                      push eax
:00422CC0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422CC3 51                      push ecx
:00422CC4 E82F0C0000              call 004238F8
:00422CC9 83C418                  add esp, 00000018
:00422CCC 8945F8                  mov dword ptr [ebp-08], eax
:00422CCF E993030000              jmp 00423067
:00422CD4 8B55F8                  mov edx, dword ptr [ebp-08]
:00422CD7 52                      push edx
:00422CD8 8B45FC                  mov eax, dword ptr [ebp-04]
:00422CDB 50                      push eax
:00422CDC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422CDF 51                      push ecx
:00422CE0 6A16                    push 00000016
:00422CE2 8B55F0                  mov edx, dword ptr [ebp-10]
:00422CE5 8B4204                  mov eax, dword ptr [edx+04]
:00422CE8 50                      push eax
:00422CE9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422CEC 51                      push ecx
:00422CED E8060C0000              call 004238F8
:00422CF2 83C418                  add esp, 00000018
:00422CF5 8945F8                  mov dword ptr [ebp-08], eax
:00422CF8 8B55F8                  mov edx, dword ptr [ebp-08]
:00422CFB 52                      push edx
:00422CFC 8B45FC                  mov eax, dword ptr [ebp-04]
:00422CFF 50                      push eax
:00422D00 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422D03 51                      push ecx
:00422D04 6A1E                    push 0000001E
:00422D06 8B55F0                  mov edx, dword ptr [ebp-10]
:00422D09 8B4204                  mov eax, dword ptr [edx+04]
:00422D0C 50                      push eax
:00422D0D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422D10 51                      push ecx
:00422D11 E8E20B0000              call 004238F8
:00422D16 83C418                  add esp, 00000018
:00422D19 8945F8                  mov dword ptr [ebp-08], eax
:00422D1C 8B55F8                  mov edx, dword ptr [ebp-08]
:00422D1F 52                      push edx
:00422D20 8B45FC                  mov eax, dword ptr [ebp-04]
:00422D23 50                      push eax
:00422D24 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422D27 51                      push ecx
:00422D28 6A2D                    push 0000002D
:00422D2A 8B55F0                  mov edx, dword ptr [ebp-10]
:00422D2D 8B4204                  mov eax, dword ptr [edx+04]
:00422D30 50                      push eax
:00422D31 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422D34 51                      push ecx
:00422D35 E8BE0B0000              call 004238F8
:00422D3A 83C418                  add esp, 00000018
:00422D3D 8945F8                  mov dword ptr [ebp-08], eax
:00422D40 8B55F8                  mov edx, dword ptr [ebp-08]
:00422D43 52                      push edx
:00422D44 8B45FC                  mov eax, dword ptr [ebp-04]
:00422D47 50                      push eax
:00422D48 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422D4B 51                      push ecx
:00422D4C 6A40                    push 00000040
:00422D4E 8B55F0                  mov edx, dword ptr [ebp-10]
:00422D51 8B4204                  mov eax, dword ptr [edx+04]
:00422D54 50                      push eax
:00422D55 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422D58 51                      push ecx
:00422D59 E89A0B0000              call 004238F8
:00422D5E 83C418                  add esp, 00000018
:00422D61 8945F8                  mov dword ptr [ebp-08], eax
:00422D64 8B55F8                  mov edx, dword ptr [ebp-08]
:00422D67 52                      push edx
:00422D68 8B45FC                  mov eax, dword ptr [ebp-04]
:00422D6B 50                      push eax
:00422D6C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422D6F 51                      push ecx
:00422D70 6A18                    push 00000018
:00422D72 8B55F0                  mov edx, dword ptr [ebp-10]
:00422D75 8B4204                  mov eax, dword ptr [edx+04]
:00422D78 50                      push eax
:00422D79 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422D7C 51                      push ecx
:00422D7D E8760B0000              call 004238F8
:00422D82 83C418                  add esp, 00000018
:00422D85 8945F8                  mov dword ptr [ebp-08], eax
:00422D88 E9DA020000              jmp 00423067
:00422D8D 8B55F8                  mov edx, dword ptr [ebp-08]
:00422D90 52                      push edx
:00422D91 8B45FC                  mov eax, dword ptr [ebp-04]
:00422D94 50                      push eax
:00422D95 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422D98 51                      push ecx
:00422D99 6A24                    push 00000024
:00422D9B 8B55F0                  mov edx, dword ptr [ebp-10]
:00422D9E 8B4204                  mov eax, dword ptr [edx+04]
:00422DA1 50                      push eax
:00422DA2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422DA5 51                      push ecx
:00422DA6 E84D0B0000              call 004238F8
:00422DAB 83C418                  add esp, 00000018
:00422DAE 8945F8                  mov dword ptr [ebp-08], eax
:00422DB1 8B55F8                  mov edx, dword ptr [ebp-08]
:00422DB4 52                      push edx
:00422DB5 8B45FC                  mov eax, dword ptr [ebp-04]
:00422DB8 50                      push eax
:00422DB9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422DBC 51                      push ecx
:00422DBD 6A25                    push 00000025
:00422DBF 8B55F0                  mov edx, dword ptr [ebp-10]
:00422DC2 8B4204                  mov eax, dword ptr [edx+04]
:00422DC5 50                      push eax
:00422DC6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422DC9 51                      push ecx
:00422DCA E8290B0000              call 004238F8
:00422DCF 83C418                  add esp, 00000018
:00422DD2 8945F8                  mov dword ptr [ebp-08], eax
:00422DD5 8B55F8                  mov edx, dword ptr [ebp-08]
:00422DD8 52                      push edx
:00422DD9 8B45FC                  mov eax, dword ptr [ebp-04]
:00422DDC 50                      push eax
:00422DDD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422DE0 51                      push ecx
:00422DE1 6A26                    push 00000026
:00422DE3 8B55F0                  mov edx, dword ptr [ebp-10]
:00422DE6 8B4204                  mov eax, dword ptr [edx+04]
:00422DE9 50                      push eax
:00422DEA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422DED 51                      push ecx
:00422DEE E8050B0000              call 004238F8
:00422DF3 83C418                  add esp, 00000018
:00422DF6 8945F8                  mov dword ptr [ebp-08], eax
:00422DF9 8B55F8                  mov edx, dword ptr [ebp-08]
:00422DFC 52                      push edx
:00422DFD 8B45FC                  mov eax, dword ptr [ebp-04]
:00422E00 50                      push eax
:00422E01 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422E04 51                      push ecx
:00422E05 6A27                    push 00000027
:00422E07 8B55F0                  mov edx, dword ptr [ebp-10]
:00422E0A 8B4204                  mov eax, dword ptr [edx+04]
:00422E0D 50                      push eax
:00422E0E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422E11 51                      push ecx
:00422E12 E8E10A0000              call 004238F8
:00422E17 83C418                  add esp, 00000018
:00422E1A 8945F8                  mov dword ptr [ebp-08], eax
:00422E1D 8B55F8                  mov edx, dword ptr [ebp-08]
:00422E20 52                      push edx
:00422E21 8B45FC                  mov eax, dword ptr [ebp-04]
:00422E24 50                      push eax
:00422E25 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422E28 51                      push ecx
:00422E29 6A33                    push 00000033
:00422E2B 8B55F0                  mov edx, dword ptr [ebp-10]
:00422E2E 8B4204                  mov eax, dword ptr [edx+04]
:00422E31 50                      push eax
:00422E32 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422E35 51                      push ecx
:00422E36 E8BD0A0000              call 004238F8
:00422E3B 83C418                  add esp, 00000018
:00422E3E 8945F8                  mov dword ptr [ebp-08], eax
:00422E41 8B55F8                  mov edx, dword ptr [ebp-08]
:00422E44 52                      push edx
:00422E45 8B45FC                  mov eax, dword ptr [ebp-04]
:00422E48 50                      push eax
:00422E49 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422E4C 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003B, ""
                                  |
:00422E4D 6A3B                    push 0000003B
:00422E4F 8B55F0                  mov edx, dword ptr [ebp-10]
:00422E52 8B4204                  mov eax, dword ptr [edx+04]
:00422E55 50                      push eax
:00422E56 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422E59 51                      push ecx
:00422E5A E8990A0000              call 004238F8
:00422E5F 83C418                  add esp, 00000018
:00422E62 8945F8                  mov dword ptr [ebp-08], eax
:00422E65 8B55F8                  mov edx, dword ptr [ebp-08]
:00422E68 52                      push edx
:00422E69 8B45FC                  mov eax, dword ptr [ebp-04]
:00422E6C 50                      push eax
:00422E6D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422E70 51                      push ecx
:00422E71 6A3D                    push 0000003D
:00422E73 8B55F0                  mov edx, dword ptr [ebp-10]
:00422E76 8B4204                  mov eax, dword ptr [edx+04]
:00422E79 50                      push eax
:00422E7A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422E7D 51                      push ecx
:00422E7E E8750A0000              call 004238F8
:00422E83 83C418                  add esp, 00000018
:00422E86 8945F8                  mov dword ptr [ebp-08], eax
:00422E89 8B55F8                  mov edx, dword ptr [ebp-08]
:00422E8C 52                      push edx
:00422E8D 8B45FC                  mov eax, dword ptr [ebp-04]
:00422E90 50                      push eax
:00422E91 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422E94 51                      push ecx
:00422E95 6A0E                    push 0000000E
:00422E97 8B55F0                  mov edx, dword ptr [ebp-10]
:00422E9A 8B4204                  mov eax, dword ptr [edx+04]
:00422E9D 50                      push eax
:00422E9E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422EA1 51                      push ecx
:00422EA2 E8510A0000              call 004238F8
:00422EA7 83C418                  add esp, 00000018
:00422EAA 8945F8                  mov dword ptr [ebp-08], eax
:00422EAD 8B55F8                  mov edx, dword ptr [ebp-08]
:00422EB0 52                      push edx
:00422EB1 8B45FC                  mov eax, dword ptr [ebp-04]
:00422EB4 50                      push eax
:00422EB5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422EB8 51                      push ecx
:00422EB9 6A39                    push 00000039
:00422EBB 8B55F0                  mov edx, dword ptr [ebp-10]
:00422EBE 8B4204                  mov eax, dword ptr [edx+04]
:00422EC1 50                      push eax
:00422EC2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422EC5 51                      push ecx
:00422EC6 E82D0A0000              call 004238F8
:00422ECB 83C418                  add esp, 00000018
:00422ECE 8945F8                  mov dword ptr [ebp-08], eax
:00422ED1 E991010000              jmp 00423067
:00422ED6 8B55F8                  mov edx, dword ptr [ebp-08]
:00422ED9 52                      push edx
:00422EDA 8B45FC                  mov eax, dword ptr [ebp-04]
:00422EDD 50                      push eax
:00422EDE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422EE1 51                      push ecx
:00422EE2 6A29                    push 00000029
:00422EE4 8B55F0                  mov edx, dword ptr [ebp-10]
:00422EE7 8B4204                  mov eax, dword ptr [edx+04]
:00422EEA 50                      push eax
:00422EEB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422EEE 51                      push ecx
:00422EEF E8040A0000              call 004238F8
:00422EF4 83C418                  add esp, 00000018
:00422EF7 8945F8                  mov dword ptr [ebp-08], eax
:00422EFA 8B55F8                  mov edx, dword ptr [ebp-08]
:00422EFD 52                      push edx
:00422EFE 8B45FC                  mov eax, dword ptr [ebp-04]
:00422F01 50                      push eax
:00422F02 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422F05 51                      push ecx
:00422F06 6A2B                    push 0000002B
:00422F08 8B55F0                  mov edx, dword ptr [ebp-10]
:00422F0B 8B4204                  mov eax, dword ptr [edx+04]
:00422F0E 50                      push eax
:00422F0F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422F12 51                      push ecx
:00422F13 E8E0090000              call 004238F8
:00422F18 83C418                  add esp, 00000018
:00422F1B 8945F8                  mov dword ptr [ebp-08], eax
:00422F1E 8B55F8                  mov edx, dword ptr [ebp-08]
:00422F21 52                      push edx
:00422F22 8B45FC                  mov eax, dword ptr [ebp-04]
:00422F25 50                      push eax
:00422F26 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422F29 51                      push ecx
:00422F2A 6A34                    push 00000034
:00422F2C 8B55F0                  mov edx, dword ptr [ebp-10]
:00422F2F 8B4204                  mov eax, dword ptr [edx+04]
:00422F32 50                      push eax
:00422F33 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422F36 51                      push ecx
:00422F37 E8BC090000              call 004238F8
:00422F3C 83C418                  add esp, 00000018
:00422F3F 8945F8                  mov dword ptr [ebp-08], eax
:00422F42 8B55F8                  mov edx, dword ptr [ebp-08]
:00422F45 52                      push edx
:00422F46 8B45FC                  mov eax, dword ptr [ebp-04]
:00422F49 50                      push eax
:00422F4A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422F4D 51                      push ecx
:00422F4E 6A38                    push 00000038
:00422F50 8B55F0                  mov edx, dword ptr [ebp-10]
:00422F53 8B4204                  mov eax, dword ptr [edx+04]
:00422F56 50                      push eax
:00422F57 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422F5A 51                      push ecx
:00422F5B E898090000              call 004238F8
:00422F60 83C418                  add esp, 00000018
:00422F63 8945F8                  mov dword ptr [ebp-08], eax
:00422F66 8B55F8                  mov edx, dword ptr [ebp-08]
:00422F69 52                      push edx
:00422F6A 8B45FC                  mov eax, dword ptr [ebp-04]
:00422F6D 50                      push eax
:00422F6E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422F71 51                      push ecx
:00422F72 6A2A                    push 0000002A
:00422F74 8B55F0                  mov edx, dword ptr [ebp-10]
:00422F77 8B4204                  mov eax, dword ptr [edx+04]
:00422F7A 50                      push eax
:00422F7B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422F7E 51                      push ecx
:00422F7F E874090000              call 004238F8
:00422F84 83C418                  add esp, 00000018
:00422F87 8945F8                  mov dword ptr [ebp-08], eax
:00422F8A E9D8000000              jmp 00423067
:00422F8F 8B55F8                  mov edx, dword ptr [ebp-08]
:00422F92 52                      push edx
:00422F93 8B45FC                  mov eax, dword ptr [ebp-04]
:00422F96 50                      push eax
:00422F97 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422F9A 51                      push ecx
:00422F9B 6A20                    push 00000020
:00422F9D 8B55F0                  mov edx, dword ptr [ebp-10]
:00422FA0 8B4204                  mov eax, dword ptr [edx+04]
:00422FA3 50                      push eax
:00422FA4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422FA7 51                      push ecx
:00422FA8 E84B090000              call 004238F8
:00422FAD 83C418                  add esp, 00000018
:00422FB0 8945F8                  mov dword ptr [ebp-08], eax
:00422FB3 8B55F8                  mov edx, dword ptr [ebp-08]
:00422FB6 52                      push edx
:00422FB7 8B45FC                  mov eax, dword ptr [ebp-04]
:00422FBA 50                      push eax
:00422FBB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422FBE 51                      push ecx
:00422FBF 6A32                    push 00000032
:00422FC1 8B55F0                  mov edx, dword ptr [ebp-10]
:00422FC4 8B4204                  mov eax, dword ptr [edx+04]
:00422FC7 50                      push eax
:00422FC8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422FCB 51                      push ecx
:00422FCC E827090000              call 004238F8
:00422FD1 83C418                  add esp, 00000018
:00422FD4 8945F8                  mov dword ptr [ebp-08], eax
:00422FD7 8B55F8                  mov edx, dword ptr [ebp-08]
:00422FDA 52                      push edx
:00422FDB 8B45FC                  mov eax, dword ptr [ebp-04]
:00422FDE 50                      push eax
:00422FDF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00422FE2 51                      push ecx
:00422FE3 6A35                    push 00000035
:00422FE5 8B55F0                  mov edx, dword ptr [ebp-10]
:00422FE8 8B4204                  mov eax, dword ptr [edx+04]
:00422FEB 50                      push eax
:00422FEC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00422FEF 51                      push ecx
:00422FF0 E803090000              call 004238F8
:00422FF5 83C418                  add esp, 00000018
:00422FF8 8945F8                  mov dword ptr [ebp-08], eax
:00422FFB 8B55F8                  mov edx, dword ptr [ebp-08]
:00422FFE 52                      push edx
:00422FFF 8B45FC                  mov eax, dword ptr [ebp-04]
:00423002 50                      push eax
:00423003 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00423006 51                      push ecx
:00423007 6A30                    push 00000030
:00423009 8B55F0                  mov edx, dword ptr [ebp-10]
:0042300C 8B4204                  mov eax, dword ptr [edx+04]
:0042300F 50                      push eax
:00423010 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00423013 51                      push ecx
:00423014 E8DF080000              call 004238F8
:00423019 83C418                  add esp, 00000018
:0042301C 8945F8                  mov dword ptr [ebp-08], eax
:0042301F 8B55F8                  mov edx, dword ptr [ebp-08]
:00423022 52                      push edx
:00423023 8B45FC                  mov eax, dword ptr [ebp-04]
:00423026 50                      push eax
:00423027 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042302A 51                      push ecx
:0042302B 6A31                    push 00000031
:0042302D 8B55F0                  mov edx, dword ptr [ebp-10]
:00423030 8B4204                  mov eax, dword ptr [edx+04]
:00423033 50                      push eax
:00423034 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00423037 51                      push ecx
:00423038 E8BB080000              call 004238F8
:0042303D 83C418                  add esp, 00000018
:00423040 8945F8                  mov dword ptr [ebp-08], eax
:00423043 8B55F8                  mov edx, dword ptr [ebp-08]
:00423046 52                      push edx
:00423047 8B45FC                  mov eax, dword ptr [ebp-04]
:0042304A 50                      push eax
:0042304B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042304E 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003A, ""
                                  |
:0042304F 6A3A                    push 0000003A
:00423051 8B55F0                  mov edx, dword ptr [ebp-10]
:00423054 8B4204                  mov eax, dword ptr [edx+04]
:00423057 50                      push eax
:00423058 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042305B 51                      push ecx
:0042305C E897080000              call 004238F8
:00423061 83C418                  add esp, 00000018
:00423064 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00422608(C), :004226D4(U), :00422745(U), :004227B6(U), :00422827(U)
|:004228BC(U), :00422951(U), :0042297A(U), :00422A0F(U), :00422AA4(U)
|:00422B39(U), :00422C16(U), :00422CCF(U), :00422D88(U), :00422ED1(U)
|:00422F8A(U)
|
:00423067 8B45F8                  mov eax, dword ptr [ebp-08]
:0042306A 8BE5                    mov esp, ebp
:0042306C 5D                      pop ebp
:0042306D C3                      ret



:0042306E 20264200                DWORD 00422620
:00423072 D9264200                DWORD 004226D9
:00423076 4A274200                DWORD 0042274A
:0042307A BB274200                DWORD 004227BB
:0042307E 2C284200                DWORD 0042282C
:00423082 C1284200                DWORD 004228C1
:00423086 56294200                DWORD 00422956
:0042308A 7F294200                DWORD 0042297F
:0042308E 142A4200                DWORD 00422A14
:00423092 A92A4200                DWORD 00422AA9
:00423096 3E2B4200                DWORD 00422B3E
:0042309A 1B2C4200                DWORD 00422C1B
:0042309E D42C4200                DWORD 00422CD4
:004230A2 8D2D4200                DWORD 00422D8D
:004230A6 D62E4200                DWORD 00422ED6
:004230AA 8F2F4200                DWORD 00422F8F
:004230AE 67304200                DWORD 00423067


:004230B2 0000                    add byte ptr [eax], al
:004230B4 0101                    add dword ptr [ecx], eax
:004230B6 0202                    add al, byte ptr [edx]
:004230B8 0303                    add eax, dword ptr [ebx]
:004230BA 0404                    add al, 04
:004230BC 0505060607              add eax, 07060605
:004230C1 07                      pop es
:004230C2 0808                    or byte ptr [eax], cl
:004230C4 0909                    or dword ptr [ecx], ecx
:004230C6 0A0A                    or cl, byte ptr [edx]
:004230C8 0B0B                    or ecx, dword ptr [ebx]
:004230CA 0C0C                    or al, 0C
:004230CC 0D0D0E0E0F              or eax, 0F0E0E0D
:004230D1 0F                      BYTE 0fh

* Referenced by a CALL at Addresses:
|:00421C07   , :00421C70   , :00421CCB   , :00421DD7   
|
:004230D2 55                      push ebp
:004230D3 8BEC                    mov ebp, esp
:004230D5 6A00                    push 00000000
:004230D7 687C040000              push 0000047C
:004230DC 8B4508                  mov eax, dword ptr [ebp+08]
:004230DF 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004230E0 FF1510D64B00            Call dword ptr [004BD610]
:004230E6 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004230E7 FF1584D64B00            Call dword ptr [004BD684]
:004230ED 6A00                    push 00000000
:004230EF 687D040000              push 0000047D
:004230F4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004230F7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004230F8 FF1510D64B00            Call dword ptr [004BD610]
:004230FE 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004230FF FF1584D64B00            Call dword ptr [004BD684]
:00423105 6A00                    push 00000000
:00423107 687E040000              push 0000047E
:0042310C 8B5508                  mov edx, dword ptr [ebp+08]
:0042310F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423110 FF1510D64B00            Call dword ptr [004BD610]
:00423116 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00423117 FF1584D64B00            Call dword ptr [004BD684]
:0042311D 5D                      pop ebp
:0042311E C3                      ret



* Referenced by a CALL at Addresses:
|:00421C3D   , :00421C98   , :00421D03   , :00421D86   
|
:0042311F 55                      push ebp
:00423120 8BEC                    mov ebp, esp
:00423122 6A01                    push 00000001
:00423124 687C040000              push 0000047C
:00423129 8B4508                  mov eax, dword ptr [ebp+08]
:0042312C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042312D FF1510D64B00            Call dword ptr [004BD610]
:00423133 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00423134 FF1584D64B00            Call dword ptr [004BD684]
:0042313A 6A01                    push 00000001
:0042313C 687D040000              push 0000047D
:00423141 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423144 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423145 FF1510D64B00            Call dword ptr [004BD610]
:0042314B 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042314C FF1584D64B00            Call dword ptr [004BD684]
:00423152 6A01                    push 00000001
:00423154 687E040000              push 0000047E
:00423159 8B5508                  mov edx, dword ptr [ebp+08]
:0042315C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042315D FF1510D64B00            Call dword ptr [004BD610]
:00423163 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00423164 FF1584D64B00            Call dword ptr [004BD684]
:0042316A 5D                      pop ebp
:0042316B C3                      ret



* Referenced by a CALL at Addresses:
|:0042CC6D   , :0042CCAA   , :0042CCF6   , :0042CD33   
|
:0042316C 55                      push ebp
:0042316D 8BEC                    mov ebp, esp
:0042316F 51                      push ecx
:00423170 0FBE4508                movsx eax, byte ptr [ebp+08]
:00423174 8945FC                  mov dword ptr [ebp-04], eax
:00423177 837DFC06                cmp dword ptr [ebp-04], 00000006
:0042317B 7742                    ja 004231BF
:0042317D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423180 FF248DC9314200          jmp dword ptr [4*ecx+004231C9]
:00423187 D90558A04700            fld dword ptr [0047A058]
:0042318D EB36                    jmp 004231C5
:0042318F D9055CA04700            fld dword ptr [0047A05C]
:00423195 EB2E                    jmp 004231C5
:00423197 D90560A04700            fld dword ptr [0047A060]
:0042319D EB26                    jmp 004231C5
:0042319F D90564A04700            fld dword ptr [0047A064]
:004231A5 EB1E                    jmp 004231C5
:004231A7 D90568A04700            fld dword ptr [0047A068]
:004231AD EB16                    jmp 004231C5
:004231AF D9056CA04700            fld dword ptr [0047A06C]
:004231B5 EB0E                    jmp 004231C5
:004231B7 D90570A04700            fld dword ptr [0047A070]
:004231BD EB06                    jmp 004231C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042317B(C)
|
:004231BF D90564A04700            fld dword ptr [0047A064]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042318D(U), :00423195(U), :0042319D(U), :004231A5(U), :004231AD(U)
|:004231B5(U), :004231BD(U)
|
:004231C5 8BE5                    mov esp, ebp
:004231C7 5D                      pop ebp
:004231C8 C3                      ret



:004231C9 87314200                DWORD 00423187
:004231CD 8F314200                DWORD 0042318F
:004231D1 97314200                DWORD 00423197
:004231D5 9F314200                DWORD 0042319F
:004231D9 A7314200                DWORD 004231A7
:004231DD AF314200                DWORD 004231AF
:004231E1 B7314200                DWORD 004231B7



* Referenced by a CALL at Address:
|:00422245   
|
:004231E5 55                      push ebp
:004231E6 8BEC                    mov ebp, esp
:004231E8 83EC4C                  sub esp, 0000004C
:004231EB 8D45E8                  lea eax, dword ptr [ebp-18]
:004231EE 50                      push eax
:004231EF 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:004231F2 51                      push ecx
:004231F3 8D55BC                  lea edx, dword ptr [ebp-44]
:004231F6 52                      push edx
:004231F7 E8BB000000              call 004232B7
:004231FC 83C40C                  add esp, 0000000C
:004231FF B938464900              mov ecx, 00494638
:00423204 E8F700FEFF              call 00403300
:00423209 6BC050                  imul eax, 00000050
:0042320C 05787F4900              add eax, 00497F78
:00423211 50                      push eax
:00423212 8D45E8                  lea eax, dword ptr [ebp-18]
:00423215 50                      push eax
:00423216 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00423219 51                      push ecx
:0042321A 8D55BC                  lea edx, dword ptr [ebp-44]
:0042321D 52                      push edx
:0042321E 8B4508                  mov eax, dword ptr [ebp+08]
:00423221 50                      push eax
:00423222 E805060000              call 0042382C
:00423227 83C414                  add esp, 00000014
:0042322A 8845E4                  mov byte ptr [ebp-1C], al
:0042322D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00423230 81E1FF000000            and ecx, 000000FF
:00423236 81F9FF000000            cmp ecx, 000000FF
:0042323C 7505                    jne 00423243
:0042323E 83C8FF                  or eax, FFFFFFFF
:00423241 EB70                    jmp 004232B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042323C(C)
|
:00423243 B9004E4B00              mov ecx, 004B4E00
:00423248 E833AC0000              call 0042DE80
:0042324D 8945B8                  mov dword ptr [ebp-48], eax
:00423250 B9004E4B00              mov ecx, 004B4E00
:00423255 E876790300              call 0045ABD0
:0042325A 8945B4                  mov dword ptr [ebp-4C], eax
:0042325D 8B55E4                  mov edx, dword ptr [ebp-1C]
:00423260 81E2FF000000            and edx, 000000FF
:00423266 8B45B4                  mov eax, dword ptr [ebp-4C]
:00423269 33C9                    xor ecx, ecx
:0042326B 8A0C10                  mov cl, byte ptr [eax+edx]
:0042326E 83F901                  cmp ecx, 00000001
:00423271 7515                    jne 00423288
:00423273 8B55E4                  mov edx, dword ptr [ebp-1C]
:00423276 81E2FF000000            and edx, 000000FF
:0042327C 8B45B8                  mov eax, dword ptr [ebp-48]
:0042327F 33C9                    xor ecx, ecx
:00423281 8A0C10                  mov cl, byte ptr [eax+edx]
:00423284 8BC1                    mov eax, ecx
:00423286 EB2B                    jmp 004232B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423271(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00423288 6A07                    push 00000007
:0042328A B9F8544B00              mov ecx, 004B54F8
:0042328F E886620400              call 0046951A
:00423294 8B55E4                  mov edx, dword ptr [ebp-1C]
:00423297 81E2FF000000            and edx, 000000FF
:0042329D 8B45B8                  mov eax, dword ptr [ebp-48]
:004232A0 8A0C10                  mov cl, byte ptr [eax+edx]
:004232A3 51                      push ecx
:004232A4 8B5508                  mov edx, dword ptr [ebp+08]
:004232A7 52                      push edx
:004232A8 E890000000              call 0042333D
:004232AD 83C408                  add esp, 00000008
:004232B0 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423241(U), :00423286(U)
|
:004232B3 8BE5                    mov esp, ebp
:004232B5 5D                      pop ebp
:004232B6 C3                      ret



* Referenced by a CALL at Address:
|:004231F7   
|
:004232B7 55                      push ebp
:004232B8 8BEC                    mov ebp, esp
:004232BA 83EC08                  sub esp, 00000008
:004232BD B938464900              mov ecx, 00494638
:004232C2 E8CDF2FFFF              call 00422594
:004232C7 8945FC                  mov dword ptr [ebp-04], eax
:004232CA C745F800000000          mov [ebp-08], 00000000
:004232D1 EB09                    jmp 004232DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042332A(U)
|
:004232D3 8B45F8                  mov eax, dword ptr [ebp-08]
:004232D6 83C001                  add eax, 00000001
:004232D9 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004232D1(U)
|
:004232DC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004232DF 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:004232E2 7D48                    jge 0042332C
:004232E4 8B550C                  mov edx, dword ptr [ebp+0C]
:004232E7 0355F8                  add edx, dword ptr [ebp-08]
:004232EA 8B45F8                  mov eax, dword ptr [ebp-08]
:004232ED 8A8898464900            mov cl, byte ptr [eax+00494698]
:004232F3 880A                    mov byte ptr [edx], cl
:004232F5 8B5510                  mov edx, dword ptr [ebp+10]
:004232F8 0355F8                  add edx, dword ptr [ebp-08]
:004232FB 8B45F8                  mov eax, dword ptr [ebp-08]
:004232FE 8A8870474900            mov cl, byte ptr [eax+00494770]
:00423304 880A                    mov byte ptr [edx], cl
:00423306 8B55F8                  mov edx, dword ptr [ebp-08]
:00423309 33C0                    xor eax, eax
:0042330B 8A8298464900            mov al, byte ptr [edx+00494698]
:00423311 8BC8                    mov ecx, eax
:00423313 6BC931                  imul ecx, 00000031
:00423316 81C1001D4B00            add ecx, 004B1D00
:0042331C E8CF23FEFF              call 004056F0
:00423321 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423324 8B5508                  mov edx, dword ptr [ebp+08]
:00423327 89048A                  mov dword ptr [edx+4*ecx], eax
:0042332A EBA7                    jmp 004232D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004232E2(C)
|
:0042332C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042332F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423332 C7048100000000          mov dword ptr [ecx+4*eax], 00000000
:00423339 8BE5                    mov esp, ebp
:0042333B 5D                      pop ebp
:0042333C C3                      ret



* Referenced by a CALL at Address:
|:004232A8   
|
:0042333D 55                      push ebp
:0042333E 8BEC                    mov ebp, esp
:00423340 83EC44                  sub esp, 00000044
:00423343 56                      push esi
:00423344 8A450C                  mov al, byte ptr [ebp+0C]
:00423347 50                      push eax
:00423348 E89C010000              call 004234E9
:0042334D 83C404                  add esp, 00000004
:00423350 85C0                    test eax, eax
:00423352 7418                    je 0042336C
:00423354 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ӵۤbmZϥΡC"
                                  |
:00423356 68C0CD4700              push 0047CDC0
:0042335B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042335E 51                      push ecx
:0042335F E808070000              call 00423A6C
:00423364 83C40C                  add esp, 0000000C
:00423367 E978010000              jmp 004234E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423352(C)
|
:0042336C 0FBE550C                movsx edx, byte ptr [ebp+0C]
:00423370 52                      push edx
:00423371 B938464900              mov ecx, 00494638
:00423376 E86AA40000              call 0042D7E5
:0042337B 85C0                    test eax, eax
:0042337D 755F                    jne 004233DE
:0042337F 6A40                    push 00000040
:00423381 6A00                    push 00000000
:00423383 8D45C0                  lea eax, dword ptr [ebp-40]
:00423386 50                      push eax
:00423387 E844C70400              call 0046FAD0
:0042338C 83C40C                  add esp, 0000000C
:0042338F 0FBE4D0C                movsx ecx, byte ptr [ebp+0C]
:00423393 6BC931                  imul ecx, 00000031
:00423396 81C1001D4B00            add ecx, 004B1D00
:0042339C E89F23FEFF              call 00405740
:004233A1 8845BC                  mov byte ptr [ebp-44], al
:004233A4 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004233A7 81E1FF000000            and ecx, 000000FF
:004233AD 8B148D10D64700          mov edx, dword ptr [4*ecx+0047D610]
:004233B4 52                      push edx

* Possible StringData Ref from Data Obj ->"]S˳ƪZ<%s>ALkϥ"
                                  |
:004233B5 68DCCD4700              push 0047CDDC
:004233BA 8D45C0                  lea eax, dword ptr [ebp-40]
:004233BD 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004233BE FF1504D74B00            Call dword ptr [004BD704]
:004233C4 83C40C                  add esp, 0000000C
:004233C7 6A00                    push 00000000
:004233C9 8D4DC0                  lea ecx, dword ptr [ebp-40]
:004233CC 51                      push ecx
:004233CD 8B5508                  mov edx, dword ptr [ebp+08]
:004233D0 52                      push edx
:004233D1 E896060000              call 00423A6C
:004233D6 83C40C                  add esp, 0000000C
:004233D9 E906010000              jmp 004234E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042337D(C)
|
:004233DE B938464900              mov ecx, 00494638
:004233E3 E898AA0000              call 0042DE80
:004233E8 8BF0                    mov esi, eax
:004233EA 0FBE4D0C                movsx ecx, byte ptr [ebp+0C]
:004233EE 6BC931                  imul ecx, 00000031
:004233F1 81C1001D4B00            add ecx, 004B1D00
:004233F7 E804CAFEFF              call 0040FE00
:004233FC 25FF000000              and eax, 000000FF
:00423401 3BF0                    cmp esi, eax
:00423403 7318                    jnb 0042341D
:00423405 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ޯȤ"
                                  |
:00423407 68FCCD4700              push 0047CDFC
:0042340C 8B4508                  mov eax, dword ptr [ebp+08]
:0042340F 50                      push eax
:00423410 E857060000              call 00423A6C
:00423415 83C40C                  add esp, 0000000C
:00423418 E9C7000000              jmp 004234E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423403(C)
|
:0042341D 0FBE4D0C                movsx ecx, byte ptr [ebp+0C]
:00423421 83F904                  cmp ecx, 00000004
:00423424 753F                    jne 00423465
:00423426 B938464900              mov ecx, 00494638
:0042342B E8B0350100              call 004369E0
:00423430 8BF0                    mov esi, eax
:00423432 B938464900              mov ecx, 00494638
:00423437 E8C4FEFDFF              call 00403300
:0042343C 8BC8                    mov ecx, eax
:0042343E 6BC950                  imul ecx, 00000050
:00423441 81C1787F4900            add ecx, 00497F78
:00423447 E89EE9FDFF              call 00401DEA
:0042344C 3BF0                    cmp esi, eax
:0042344E 7715                    ja 00423465
:00423450 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"@[O"
                                  |
:00423452 6808CE4700              push 0047CE08
:00423457 8B5508                  mov edx, dword ptr [ebp+08]
:0042345A 52                      push edx
:0042345B E80C060000              call 00423A6C
:00423460 83C40C                  add esp, 0000000C
:00423463 EB7F                    jmp 004234E4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423424(C), :0042344E(C)
|
:00423465 8A450C                  mov al, byte ptr [ebp+0C]
:00423468 50                      push eax
:00423469 6838464900              push 00494638
:0042346E E80E010000              call 00423581
:00423473 83C408                  add esp, 00000008
:00423476 85C0                    test eax, eax
:00423478 7415                    je 0042348F
:0042347A 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"Sno䳡_"
                                  |
:0042347C 6814CE4700              push 0047CE14
:00423481 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423484 51                      push ecx
:00423485 E8E2050000              call 00423A6C
:0042348A 83C40C                  add esp, 0000000C
:0042348D EB55                    jmp 004234E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423478(C)
|
:0042348F 8A550C                  mov dl, byte ptr [ebp+0C]
:00423492 52                      push edx
:00423493 68D0454900              push 004945D0
:00423498 E805020000              call 004236A2
:0042349D 83C408                  add esp, 00000008
:004234A0 85C0                    test eax, eax
:004234A2 7415                    je 004234B9
:004234A4 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"o䳡SĪG"
                                  |
:004234A6 682CCE4700              push 0047CE2C
:004234AB 8B4508                  mov eax, dword ptr [ebp+08]
:004234AE 50                      push eax
:004234AF E8B8050000              call 00423A6C
:004234B4 83C40C                  add esp, 0000000C
:004234B7 EB2B                    jmp 004234E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004234A2(C)
|
:004234B9 0FBE4D0C                movsx ecx, byte ptr [ebp+0C]
:004234BD 83F927                  cmp ecx, 00000027
:004234C0 7522                    jne 004234E4
:004234C2 B938464900              mov ecx, 00494638
:004234C7 E8B4A90000              call 0042DE80
:004234CC 83F828                  cmp eax, 00000028
:004234CF 7613                    jbe 004234E4
:004234D1 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ޯȦb40HUXLkϥ"
                                  |
:004234D3 6840CE4700              push 0047CE40
:004234D8 8B5508                  mov edx, dword ptr [ebp+08]
:004234DB 52                      push edx
:004234DC E88B050000              call 00423A6C
:004234E1 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423367(U), :004233D9(U), :00423418(U), :00423463(U), :0042348D(U)
|:004234B7(U), :004234C0(C), :004234CF(C)
|
:004234E4 5E                      pop esi
:004234E5 8BE5                    mov esp, ebp
:004234E7 5D                      pop ebp
:004234E8 C3                      ret



* Referenced by a CALL at Addresses:
|:00423348   , :00423990   
|
:004234E9 55                      push ebp
:004234EA 8BEC                    mov ebp, esp
:004234EC 51                      push ecx
:004234ED 0FBE4508                movsx eax, byte ptr [ebp+08]
:004234F1 8945FC                  mov dword ptr [ebp-04], eax
:004234F4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004234F7 83E902                  sub ecx, 00000002
:004234FA 894DFC                  mov dword ptr [ebp-04], ecx
:004234FD 837DFC3E                cmp dword ptr [ebp-04], 0000003E
:00423501 7719                    ja 0042351C
:00423503 8B45FC                  mov eax, dword ptr [ebp-04]
:00423506 33D2                    xor edx, edx
:00423508 8A9042354200            mov dl, byte ptr [eax+00423542]
:0042350E FF249522354200          jmp dword ptr [4*edx+00423522]
:00423515 B801000000              mov eax, 00000001
:0042351A EB02                    jmp 0042351E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423501(C)
|
:0042351C 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042351A(U)
|
:0042351E 8BE5                    mov esp, ebp
:00423520 5D                      pop ebp
:00423521 C3                      ret



:00423522 15354200                DWORD 00423515
:00423526 15354200                DWORD 00423515
:0042352A 15354200                DWORD 00423515
:0042352E 15354200                DWORD 00423515
:00423532 15354200                DWORD 00423515
:00423536 15354200                DWORD 00423515
:0042353A 15354200                DWORD 00423515
:0042353E 1C354200                DWORD 0042351C


:00423542 0000                    add byte ptr [eax], al
:00423544 07                      pop es
:00423545 0107                    add dword ptr [edi], eax
:00423547 07                      pop es
:00423548 07                      pop es
:00423549 07                      pop es
:0042354A 07                      pop es
:0042354B 07                      pop es
:0042354C 07                      pop es
:0042354D 07                      pop es
:0042354E 07                      pop es
:0042354F 07                      pop es
:00423550 07                      pop es
:00423551 0207                    add al, byte ptr [edi]
:00423553 07                      pop es
:00423554 07                      pop es
:00423555 07                      pop es
:00423556 07                      pop es
:00423557 07                      pop es
:00423558 07                      pop es
:00423559 07                      pop es
:0042355A 07                      pop es
:0042355B 07                      pop es
:0042355C 07                      pop es
:0042355D 0303                    add eax, dword ptr [ebx]
:0042355F 0307                    add eax, dword ptr [edi]
:00423561 07                      pop es
:00423562 07                      pop es
:00423563 07                      pop es
:00423564 07                      pop es
:00423565 07                      pop es
:00423566 0407                    add al, 07
:00423568 07                      pop es
:00423569 07                      pop es
:0042356A 07                      pop es
:0042356B 07                      pop es
:0042356C 07                      pop es
:0042356D 07                      pop es
:0042356E 07                      pop es
:0042356F 07                      pop es
:00423570 0505050707              add eax, 07070505
:00423575 06                      push es
:00423576 06                      push es
:00423577 06                      push es
:00423578 06                      push es
:00423579 06                      push es
:0042357A 06                      push es
:0042357B 06                      push es
:0042357C 06                      push es
:0042357D 06                      push es
:0042357E 06                      push es
:0042357F 06                      push es
:00423580 06                      push es

* Referenced by a CALL at Addresses:
|:0042346E   , :004239B3   
|
:00423581 55                      push ebp
:00423582 8BEC                    mov ebp, esp
:00423584 51                      push ecx
:00423585 56                      push esi
:00423586 0FBE450C                movsx eax, byte ptr [ebp+0C]
:0042358A 8945FC                  mov dword ptr [ebp-04], eax
:0042358D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423590 83E928                  sub ecx, 00000028
:00423593 894DFC                  mov dword ptr [ebp-04], ecx
:00423596 837DFC10                cmp dword ptr [ebp-04], 00000010
:0042359A 0F87CA000000            ja 0042366A
:004235A0 8B45FC                  mov eax, dword ptr [ebp-04]
:004235A3 33D2                    xor edx, edx
:004235A5 8A9091364200            mov dl, byte ptr [eax+00423691]
:004235AB FF249575364200          jmp dword ptr [4*edx+00423675]
:004235B2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004235B5 E826340100              call 004369E0
:004235BA 8BF0                    mov esi, eax
:004235BC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004235BF E83CFDFDFF              call 00403300
:004235C4 8BC8                    mov ecx, eax
:004235C6 6BC950                  imul ecx, 00000050
:004235C9 81C1787F4900            add ecx, 00497F78
:004235CF E816E8FDFF              call 00401DEA
:004235D4 3BF0                    cmp esi, eax
:004235D6 720A                    jb 004235E2
:004235D8 B801000000              mov eax, 00000001
:004235DD E98E000000              jmp 00423670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004235D6(C)
|
:004235E2 E987000000              jmp 0042366E
:004235E7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004235EA E861AB0000              call 0042E150
:004235EF 85C0                    test eax, eax
:004235F1 7507                    jne 004235FA
:004235F3 B801000000              mov eax, 00000001
:004235F8 EB76                    jmp 00423670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004235F1(C)
|
:004235FA EB72                    jmp 0042366E
:004235FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004235FF E8ACAB0000              call 0042E1B0
:00423604 85C0                    test eax, eax
:00423606 7507                    jne 0042360F
:00423608 B801000000              mov eax, 00000001
:0042360D EB61                    jmp 00423670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423606(C)
|
:0042360F EB5D                    jmp 0042366E
:00423611 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423614 E8D7AB0000              call 0042E1F0
:00423619 85C0                    test eax, eax
:0042361B 7507                    jne 00423624
:0042361D B801000000              mov eax, 00000001
:00423622 EB4C                    jmp 00423670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042361B(C)
|
:00423624 EB48                    jmp 0042366E
:00423626 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423629 E8A2AB0000              call 0042E1D0
:0042362E 85C0                    test eax, eax
:00423630 7507                    jne 00423639
:00423632 B801000000              mov eax, 00000001
:00423637 EB37                    jmp 00423670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423630(C)
|
:00423639 EB33                    jmp 0042366E
:0042363B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042363E E83DA80000              call 0042DE80
:00423643 8BF0                    mov esi, eax
:00423645 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423648 E8B3FCFDFF              call 00403300
:0042364D 8BC8                    mov ecx, eax
:0042364F 6BC950                  imul ecx, 00000050
:00423652 81C1787F4900            add ecx, 00497F78
:00423658 E8BEE7FDFF              call 00401E1B
:0042365D 3BF0                    cmp esi, eax
:0042365F 7207                    jb 00423668
:00423661 B801000000              mov eax, 00000001
:00423666 EB08                    jmp 00423670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042365F(C)
|
:00423668 EB04                    jmp 0042366E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042359A(C)
|
:0042366A 33C0                    xor eax, eax
:0042366C EB02                    jmp 00423670

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004235E2(U), :004235FA(U), :0042360F(U), :00423624(U), :00423639(U)
|:00423668(U)
|
:0042366E 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004235DD(U), :004235F8(U), :0042360D(U), :00423622(U), :00423637(U)
|:00423666(U), :0042366C(U)
|
:00423670 5E                      pop esi
:00423671 8BE5                    mov esp, ebp
:00423673 5D                      pop ebp
:00423674 C3                      ret



:00423675 B2354200                DWORD 004235B2
:00423679 E7354200                DWORD 004235E7
:0042367D FC354200                DWORD 004235FC
:00423681 11364200                DWORD 00423611
:00423685 26364200                DWORD 00423626
:00423689 3B364200                DWORD 0042363B
:0042368D 6A364200                DWORD 0042366A


:00423691 0000000000000000        BYTE  8 DUP(0)


:00423699 06                      push es
:0042369A 0102                    add dword ptr [edx], eax
:0042369C 030406                  add eax, dword ptr [esi+eax]
:0042369F 06                      push es
:004236A0 06                      push es
:004236A1 05                      BYTE 05h


* Referenced by a CALL at Addresses:
|:00423498   , :004239DF   
|
:004236A2 55                      push ebp
:004236A3 8BEC                    mov ebp, esp
:004236A5 51                      push ecx
:004236A6 0FBE450C                movsx eax, byte ptr [ebp+0C]
:004236AA 8945FC                  mov dword ptr [ebp-04], eax
:004236AD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004236B0 83E920                  sub ecx, 00000020
:004236B3 894DFC                  mov dword ptr [ebp-04], ecx
:004236B6 837DFC03                cmp dword ptr [ebp-04], 00000003
:004236BA 0F8752010000            ja 00423812
:004236C0 8B55FC                  mov edx, dword ptr [ebp-04]
:004236C3 FF24951C384200          jmp dword ptr [4*edx+0042381C]
:004236CA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004236CD E85EAB0000              call 0042E230
:004236D2 0FBEC0                  movsx eax, al
:004236D5 83F806                  cmp eax, 00000006
:004236D8 7D44                    jge 0042371E
:004236DA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004236DD E81EFCFDFF              call 00403300
:004236E2 8BC8                    mov ecx, eax
:004236E4 6BC950                  imul ecx, 00000050
:004236E7 81C1787F4900            add ecx, 00497F78
:004236ED E8AEFAFDFF              call 004031A0
:004236F2 25FF000000              and eax, 000000FF
:004236F7 83F812                  cmp eax, 00000012
:004236FA 7422                    je 0042371E
:004236FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004236FF E8FCFBFDFF              call 00403300
:00423704 8BC8                    mov ecx, eax
:00423706 6BC950                  imul ecx, 00000050
:00423709 81C1787F4900            add ecx, 00497F78
:0042370F E88CFAFDFF              call 004031A0
:00423714 25FF000000              and eax, 000000FF
:00423719 83F813                  cmp eax, 00000013
:0042371C 750A                    jne 00423728

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004236D8(C), :004236FA(C)
|
:0042371E B801000000              mov eax, 00000001
:00423723 E9F0000000              jmp 00423818

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042371C(C)
|
:00423728 E9E9000000              jmp 00423816
:0042372D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423730 E8DBAA0000              call 0042E210
:00423735 0FBEC8                  movsx ecx, al
:00423738 83F906                  cmp ecx, 00000006
:0042373B 7D44                    jge 00423781
:0042373D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423740 E8BBFBFDFF              call 00403300
:00423745 8BC8                    mov ecx, eax
:00423747 6BC950                  imul ecx, 00000050
:0042374A 81C1787F4900            add ecx, 00497F78
:00423750 E84BFAFDFF              call 004031A0
:00423755 25FF000000              and eax, 000000FF
:0042375A 83F812                  cmp eax, 00000012
:0042375D 7422                    je 00423781
:0042375F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423762 E899FBFDFF              call 00403300
:00423767 8BC8                    mov ecx, eax
:00423769 6BC950                  imul ecx, 00000050
:0042376C 81C1787F4900            add ecx, 00497F78
:00423772 E829FAFDFF              call 004031A0
:00423777 25FF000000              and eax, 000000FF
:0042377C 83F813                  cmp eax, 00000013
:0042377F 750A                    jne 0042378B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042373B(C), :0042375D(C)
|
:00423781 B801000000              mov eax, 00000001
:00423786 E98D000000              jmp 00423818

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042377F(C)
|
:0042378B E986000000              jmp 00423816
:00423790 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423793 E808A70000              call 0042DEA0
:00423798 85C0                    test eax, eax
:0042379A 7544                    jne 004237E0
:0042379C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042379F E85CFBFDFF              call 00403300
:004237A4 8BC8                    mov ecx, eax
:004237A6 6BC950                  imul ecx, 00000050
:004237A9 81C1787F4900            add ecx, 00497F78
:004237AF E8ECF9FDFF              call 004031A0
:004237B4 25FF000000              and eax, 000000FF
:004237B9 83F812                  cmp eax, 00000012
:004237BC 7422                    je 004237E0
:004237BE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004237C1 E83AFBFDFF              call 00403300
:004237C6 8BC8                    mov ecx, eax
:004237C8 6BC950                  imul ecx, 00000050
:004237CB 81C1787F4900            add ecx, 00497F78
:004237D1 E8CAF9FDFF              call 004031A0
:004237D6 25FF000000              and eax, 000000FF
:004237DB 83F813                  cmp eax, 00000013
:004237DE 7507                    jne 004237E7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042379A(C), :004237BC(C)
|
:004237E0 B801000000              mov eax, 00000001
:004237E5 EB31                    jmp 00423818

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004237DE(C)
|
:004237E7 EB2D                    jmp 00423816
:004237E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004237EC E81FAA0000              call 0042E210
:004237F1 0FBED0                  movsx edx, al
:004237F4 83FA06                  cmp edx, 00000006
:004237F7 7C17                    jl 00423810
:004237F9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004237FC E84FAA0000              call 0042E250
:00423801 0FBEC0                  movsx eax, al
:00423804 83F806                  cmp eax, 00000006
:00423807 7C07                    jl 00423810
:00423809 B801000000              mov eax, 00000001
:0042380E EB08                    jmp 00423818

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004237F7(C), :00423807(C)
|
:00423810 EB04                    jmp 00423816

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004236BA(C)
|
:00423812 33C0                    xor eax, eax
:00423814 EB02                    jmp 00423818

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423728(U), :0042378B(U), :004237E7(U), :00423810(U)
|
:00423816 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423723(U), :00423786(U), :004237E5(U), :0042380E(U), :00423814(U)
|
:00423818 8BE5                    mov esp, ebp
:0042381A 5D                      pop ebp
:0042381B C3                      ret



:0042381C E9374200                DWORD 004237E9
:00423820 CA364200                DWORD 004236CA
:00423824 2D374200                DWORD 0042372D
:00423828 90374200                DWORD 00423790



* Referenced by a CALL at Address:
|:00423222   
|
:0042382C 55                      push ebp
:0042382D 8BEC                    mov ebp, esp
:0042382F 51                      push ecx
:00423830 8B4508                  mov eax, dword ptr [ebp+08]
:00423833 50                      push eax
:00423834 B928474900              mov ecx, 00494728
:00423839 E85DA20000              call 0042DA9B
:0042383E 6A00                    push 00000000
:00423840 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423843 51                      push ecx
:00423844 E833D3FFFF              call 00420B7C
:00423849 83C408                  add esp, 00000008
:0042384C 8B5518                  mov edx, dword ptr [ebp+18]
:0042384F 52                      push edx
:00423850 8B4514                  mov eax, dword ptr [ebp+14]
:00423853 50                      push eax
:00423854 8B4D10                  mov ecx, dword ptr [ebp+10]
:00423857 51                      push ecx
:00423858 8B550C                  mov edx, dword ptr [ebp+0C]
:0042385B 52                      push edx
:0042385C E8AE740300              call 0045AD0F
:00423861 83C410                  add esp, 00000010
:00423864 8845FC                  mov byte ptr [ebp-04], al
:00423867 6A01                    push 00000001
:00423869 8B4508                  mov eax, dword ptr [ebp+08]
:0042386C 50                      push eax
:0042386D E80AD3FFFF              call 00420B7C
:00423872 83C408                  add esp, 00000008
:00423875 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423878 51                      push ecx
:00423879 B928474900              mov ecx, 00494728
:0042387E E8EAA30000              call 0042DC6D
:00423883 8B45FC                  mov eax, dword ptr [ebp-04]
:00423886 25FF000000              and eax, 000000FF
:0042388B 8BE5                    mov esp, ebp
:0042388D 5D                      pop ebp
:0042388E C3                      ret



* Referenced by a CALL at Addresses:
|:00420348   , :004239D6   , :00429045   , :004292F9   , :004294D9   
|:00429543   , :00429779   , :004298EB   , :0042AC90   , :0042B315   
|:0042B3C6   , :0042C16B   , :0042C9A1   , :0042CA43   , :0042CAA1   
|
:0042388F 55                      push ebp
:00423890 8BEC                    mov ebp, esp
:00423892 817D0838464900          cmp dword ptr [ebp+08], 00494638
:00423899 7507                    jne 004238A2
:0042389B B8D0454900              mov eax, 004945D0
:004238A0 EB05                    jmp 004238A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423899(C)
|
:004238A2 B838464900              mov eax, 00494638

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004238A0(U)
|
:004238A7 5D                      pop ebp
:004238A8 C3                      ret



* Referenced by a CALL at Addresses:
|:00412C26   , :00412C6F   , :00412CB3   , :00412E43   , :00412EC8   
|:00412F4D   , :00412FCC   , :00413051   , :00414294   , :004142DD   
|:00414321   , :004144B1   , :00414536   , :004145BB   , :0041463A   
|:004146BF   , :00414812   , :0041485B   , :0041489F   , :00414A2F   
|:00414AB4   , :00414B39   , :00414BB8   , :00414C3D   , :004160D6   
|:0041611F   , :00416163   , :004162F3   , :00416378   , :004163FD   
|:0041647C   , :00416501   , :00420416   , :004205F3   , :00420608   
|:004206D0   , :0042079C   , :004211D0   , :004211FA   , :00421224   
|:0042A399   , :0042A403   , :0042B127   , :0042B14A   , :0042B190   
|:0042B1B3   , :004636B0   , :004636F9   , :0046373D   , :004638B0   
|:00463930   , :004639B0   , :00463A2A   , :00463AAA   , :004648C9   
|:00464912   , :00464956   , :00464AE6   , :00464B6B   , :00464BF0   
|:00464C6F   , :00464CF4   
|
:004238A9 55                      push ebp
:004238AA 8BEC                    mov ebp, esp
:004238AC 83EC0C                  sub esp, 0000000C
:004238AF 8B4508                  mov eax, dword ptr [ebp+08]
:004238B2 3B450C                  cmp eax, dword ptr [ebp+0C]
:004238B5 7E08                    jle 004238BF
:004238B7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004238BA 894DFC                  mov dword ptr [ebp-04], ecx
:004238BD EB06                    jmp 004238C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004238B5(C)
|
:004238BF 8B550C                  mov edx, dword ptr [ebp+0C]
:004238C2 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004238BD(U)
|
:004238C5 8B45FC                  mov eax, dword ptr [ebp-04]
:004238C8 3B4510                  cmp eax, dword ptr [ebp+10]
:004238CB 7D1E                    jge 004238EB
:004238CD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004238D0 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:004238D3 7E08                    jle 004238DD
:004238D5 8B5508                  mov edx, dword ptr [ebp+08]
:004238D8 8955F8                  mov dword ptr [ebp-08], edx
:004238DB EB06                    jmp 004238E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004238D3(C)
|
:004238DD 8B450C                  mov eax, dword ptr [ebp+0C]
:004238E0 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004238DB(U)
|
:004238E3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004238E6 894DF4                  mov dword ptr [ebp-0C], ecx
:004238E9 EB06                    jmp 004238F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004238CB(C)
|
:004238EB 8B5510                  mov edx, dword ptr [ebp+10]
:004238EE 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004238E9(U)
|
:004238F1 8B45F4                  mov eax, dword ptr [ebp-0C]
:004238F4 8BE5                    mov esp, ebp
:004238F6 5D                      pop ebp
:004238F7 C3                      ret



* Referenced by a CALL at Addresses:
|:00422639   , :0042265D   , :00422681   , :004226A5   , :004226C9   
|:004226F2   , :00422716   , :0042273A   , :00422763   , :00422787   
|:004227AB   , :004227D4   , :004227F8   , :0042281C   , :00422845   
|:00422869   , :0042288D   , :004228B1   , :004228DA   , :004228FE   
|:00422922   , :00422946   , :0042296F   , :00422998   , :004229BC   
|:004229E0   , :00422A04   , :00422A2D   , :00422A51   , :00422A75   
|:00422A99   , :00422AC2   , :00422AE6   , :00422B0A   , :00422B2E   
|:00422B57   , :00422B7B   , :00422B9F   , :00422BC3   , :00422BE7   
|:00422C0B   , :00422C34   , :00422C58   , :00422C7C   , :00422CA0   
|:00422CC4   , :00422CED   , :00422D11   , :00422D35   , :00422D59   
|:00422D7D   , :00422DA6   , :00422DCA   , :00422DEE   , :00422E12   
|:00422E36   , :00422E5A   , :00422E7E   , :00422EA2   , :00422EC6   
|:00422EEF   , :00422F13   , :00422F37   , :00422F5B   , :00422F7F   
|:00422FA8   , :00422FCC   , :00422FF0   , :00423014   , :00423038   
|:0042305C   
|
:004238F8 55                      push ebp
:004238F9 8BEC                    mov ebp, esp
:004238FB 51                      push ecx
:004238FC 56                      push esi
:004238FD 8B4518                  mov eax, dword ptr [ebp+18]
:00423900 50                      push eax
:00423901 0FBE4D10                movsx ecx, byte ptr [ebp+10]
:00423905 6BC931                  imul ecx, 00000031
:00423908 81C1001D4B00            add ecx, 004B1D00
:0042390E E8FDEAFEFF              call 00412410
:00423913 8845FC                  mov byte ptr [ebp-04], al
:00423916 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423919 81E1FF000000            and ecx, 000000FF
:0042391F 394D14                  cmp dword ptr [ebp+14], ecx
:00423922 0F823C010000            jb 00423A64
:00423928 8B55FC                  mov edx, dword ptr [ebp-04]
:0042392B 81E2FF000000            and edx, 000000FF
:00423931 85D2                    test edx, edx
:00423933 0F842B010000            je 00423A64
:00423939 8B451C                  mov eax, dword ptr [ebp+1C]
:0042393C 8A4D10                  mov cl, byte ptr [ebp+10]
:0042393F 888898464900            mov byte ptr [eax+00494698], cl
:00423945 0FBE5510                movsx edx, byte ptr [ebp+10]
:00423949 83FA04                  cmp edx, 00000004
:0042394C 753E                    jne 0042398C
:0042394E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423951 E88A300100              call 004369E0
:00423956 8BF0                    mov esi, eax
:00423958 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042395B E8A0F9FDFF              call 00403300
:00423960 8BC8                    mov ecx, eax
:00423962 6BC950                  imul ecx, 00000050
:00423965 81C1787F4900            add ecx, 00497F78
:0042396B E87AE4FDFF              call 00401DEA
:00423970 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00423972 B90A000000              mov ecx, 0000000A
:00423977 F7F1                    div ecx
:00423979 3BF0                    cmp esi, eax
:0042397B 770F                    ja 0042398C
:0042397D 8B551C                  mov edx, dword ptr [ebp+1C]
:00423980 C6827047490000          mov byte ptr [edx+00494770], 00
:00423987 E9D0000000              jmp 00423A5C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042394C(C), :0042397B(C)
|
:0042398C 8A4510                  mov al, byte ptr [ebp+10]
:0042398F 50                      push eax
:00423990 E854FBFFFF              call 004234E9
:00423995 83C404                  add esp, 00000004
:00423998 85C0                    test eax, eax
:0042399A 740F                    je 004239AB
:0042399C 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0042399F C6817047490000          mov byte ptr [ecx+00494770], 00
:004239A6 E9B1000000              jmp 00423A5C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042399A(C)
|
:004239AB 8A5510                  mov dl, byte ptr [ebp+10]
:004239AE 52                      push edx
:004239AF 8B4508                  mov eax, dword ptr [ebp+08]
:004239B2 50                      push eax
:004239B3 E8C9FBFFFF              call 00423581
:004239B8 83C408                  add esp, 00000008
:004239BB 85C0                    test eax, eax
:004239BD 740F                    je 004239CE
:004239BF 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:004239C2 C6817047490000          mov byte ptr [ecx+00494770], 00
:004239C9 E98E000000              jmp 00423A5C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004239BD(C)
|
:004239CE 8A5510                  mov dl, byte ptr [ebp+10]
:004239D1 52                      push edx
:004239D2 8B4508                  mov eax, dword ptr [ebp+08]
:004239D5 50                      push eax
:004239D6 E8B4FEFFFF              call 0042388F
:004239DB 83C404                  add esp, 00000004
:004239DE 50                      push eax
:004239DF E8BEFCFFFF              call 004236A2
:004239E4 83C408                  add esp, 00000008
:004239E7 85C0                    test eax, eax
:004239E9 740C                    je 004239F7
:004239EB 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:004239EE C6817047490000          mov byte ptr [ecx+00494770], 00
:004239F5 EB65                    jmp 00423A5C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004239E9(C)
|
:004239F7 0FBE5510                movsx edx, byte ptr [ebp+10]
:004239FB 83FA27                  cmp edx, 00000027
:004239FE 7519                    jne 00423A19
:00423A00 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423A03 E878A40000              call 0042DE80
:00423A08 83F828                  cmp eax, 00000028
:00423A0B 760C                    jbe 00423A19
:00423A0D 8B451C                  mov eax, dword ptr [ebp+1C]
:00423A10 C6807047490000          mov byte ptr [eax+00494770], 00
:00423A17 EB43                    jmp 00423A5C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004239FE(C), :00423A0B(C)
|
:00423A19 0FBE4D10                movsx ecx, byte ptr [ebp+10]
:00423A1D 6BC931                  imul ecx, 00000031
:00423A20 81C1001D4B00            add ecx, 004B1D00
:00423A26 E8D5C3FEFF              call 0040FE00
:00423A2B 25FF000000              and eax, 000000FF
:00423A30 39450C                  cmp dword ptr [ebp+0C], eax
:00423A33 721D                    jb 00423A52
:00423A35 0FBE4D10                movsx ecx, byte ptr [ebp+10]
:00423A39 51                      push ecx
:00423A3A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423A3D E8A39D0000              call 0042D7E5
:00423A42 85C0                    test eax, eax
:00423A44 740C                    je 00423A52
:00423A46 8B551C                  mov edx, dword ptr [ebp+1C]
:00423A49 C6827047490001          mov byte ptr [edx+00494770], 01
:00423A50 EB0A                    jmp 00423A5C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423A33(C), :00423A44(C)
|
:00423A52 8B451C                  mov eax, dword ptr [ebp+1C]
:00423A55 C6807047490000          mov byte ptr [eax+00494770], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423987(U), :004239A6(U), :004239C9(U), :004239F5(U), :00423A17(U)
|:00423A50(U)
|
:00423A5C 8B451C                  mov eax, dword ptr [ebp+1C]
:00423A5F 83C001                  add eax, 00000001
:00423A62 EB03                    jmp 00423A67

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423922(C), :00423933(C)
|
:00423A64 8B451C                  mov eax, dword ptr [ebp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423A62(U)
|
:00423A67 5E                      pop esi
:00423A68 8BE5                    mov esp, ebp
:00423A6A 5D                      pop ebp
:00423A6B C3                      ret



* Referenced by a CALL at Addresses:
|:00422235   , :0042335F   , :004233D1   , :00423410   , :0042345B   
|:00423485   , :004234AF   , :004234DC   , :00424EED   , :0042625B   
|:0042639F   , :0042646B   , :0042850A   , :00428682   , :00428760   
|:0042984A   , :004298BE   , :0042B2CC   , :0042B64C   , :0042D916   
|:0042D964   , :0042D9CB   , :0042DA84   
|
:00423A6C 55                      push ebp
:00423A6D 8BEC                    mov ebp, esp
:00423A6F 837D1000                cmp dword ptr [ebp+10], 00000000
:00423A73 742D                    je 00423AA2
:00423A75 8B4510                  mov eax, dword ptr [ebp+10]
:00423A78 50                      push eax
:00423A79 E83DBB0000              call 0042F5BB
:00423A7E 83C404                  add esp, 00000004
:00423A81 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00423A84 51                      push ecx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:053F, ""
                                  |
:00423A85 683F050000              push 0000053F
:00423A8A 8B5508                  mov edx, dword ptr [ebp+08]
:00423A8D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423A8E FF1510D64B00            Call dword ptr [004BD610]
:00423A94 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00423A95 FF1514D64B00            Call dword ptr [004BD614]
:00423A9B E830BB0000              call 0042F5D0
:00423AA0 EB1A                    jmp 00423ABC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423A73(C)
|
:00423AA2 8B450C                  mov eax, dword ptr [ebp+0C]
:00423AA5 50                      push eax

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:053F, ""
                                  |
:00423AA6 683F050000              push 0000053F
:00423AAB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423AAE 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423AAF FF1510D64B00            Call dword ptr [004BD610]
:00423AB5 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00423AB6 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423AA0(U)
|
:00423ABC 5D                      pop ebp
:00423ABD C3                      ret



* Referenced by a CALL at Addresses:
|:004223B7   , :004223DA   , :00428C7C   
|
:00423ABE 55                      push ebp
:00423ABF 8BEC                    mov ebp, esp
:00423AC1 51                      push ecx
:00423AC2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423AC5 E836F8FDFF              call 00403300
:00423ACA 8BC8                    mov ecx, eax
:00423ACC 6BC950                  imul ecx, 00000050
:00423ACF 81C1787F4900            add ecx, 00497F78
:00423AD5 E8C6F6FDFF              call 004031A0
:00423ADA 25FF000000              and eax, 000000FF
:00423ADF 8945FC                  mov dword ptr [ebp-04], eax
:00423AE2 837DFC1F                cmp dword ptr [ebp-04], 0000001F
:00423AE6 772C                    ja 00423B14
:00423AE8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00423AEB 33C0                    xor eax, eax
:00423AED 8A81283B4200            mov al, byte ptr [ecx+00423B28]
:00423AF3 FF2485183B4200          jmp dword ptr [4*eax+00423B18]
:00423AFA 6A0E                    push 0000000E
:00423AFC B9F8544B00              mov ecx, 004B54F8
:00423B01 E8145A0400              call 0046951A
:00423B06 EB0C                    jmp 00423B14
:00423B08 6A0D                    push 0000000D
:00423B0A B9F8544B00              mov ecx, 004B54F8
:00423B0F E8065A0400              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423AE6(C), :00423B06(U)
|
:00423B14 8BE5                    mov esp, ebp
:00423B16 5D                      pop ebp
:00423B17 C3                      ret



:00423B18 083B4200                DWORD 00423B08
:00423B1C FA3A4200                DWORD 00423AFA
:00423B20 083B4200                DWORD 00423B08
:00423B24 143B4200                DWORD 00423B14


:00423B28 000000000000            BYTE  6 DUP(0)


:00423B2E 0101                    add dword ptr [ecx], eax
:00423B30 0101                    add dword ptr [ecx], eax
:00423B32 0202                    add al, byte ptr [edx]
:00423B34 0202                    add al, byte ptr [edx]
:00423B36 0202                    add al, byte ptr [edx]
:00423B38 0202                    add al, byte ptr [edx]
:00423B3A 0202                    add al, byte ptr [edx]
:00423B3C 0202                    add al, byte ptr [edx]
:00423B3E 0202                    add al, byte ptr [edx]
:00423B40 0202                    add al, byte ptr [edx]
:00423B42 0202                    add al, byte ptr [edx]
:00423B44 0202                    add al, byte ptr [edx]
:00423B46 0202                    add al, byte ptr [edx]

* Referenced by a CALL at Addresses:
|:0041FCFE   , :0041FE94   , :0042112C   , :00427B48   
|
:00423B48 55                      push ebp
:00423B49 8BEC                    mov ebp, esp
:00423B4B 83EC08                  sub esp, 00000008
:00423B4E B978294B00              mov ecx, 004B2978
:00423B53 E808C3FEFF              call 0040FE60
:00423B58 8845F8                  mov byte ptr [ebp-08], al
:00423B5B 8B45F8                  mov eax, dword ptr [ebp-08]
:00423B5E 25FF000000              and eax, 000000FF
:00423B63 83C003                  add eax, 00000003
:00423B66 8945FC                  mov dword ptr [ebp-04], eax
:00423B69 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00423B6C 81E1FF000000            and ecx, 000000FF
:00423B72 83F90A                  cmp ecx, 0000000A
:00423B75 7D05                    jge 00423B7C
:00423B77 8B45FC                  mov eax, dword ptr [ebp-04]
:00423B7A EB1C                    jmp 00423B98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423B75(C)
|
:00423B7C 8B55F8                  mov edx, dword ptr [ebp-08]
:00423B7F 81E2FF000000            and edx, 000000FF
:00423B85 83FA14                  cmp edx, 00000014
:00423B88 7D08                    jge 00423B92
:00423B8A 8B45FC                  mov eax, dword ptr [ebp-04]
:00423B8D 83C001                  add eax, 00000001
:00423B90 EB06                    jmp 00423B98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423B88(C)
|
:00423B92 8B45FC                  mov eax, dword ptr [ebp-04]
:00423B95 83C002                  add eax, 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423B7A(U), :00423B90(U)
|
:00423B98 8BE5                    mov esp, ebp
:00423B9A 5D                      pop ebp
:00423B9B C3                      ret



* Referenced by a CALL at Addresses:
|:004217D4   , :00421838   , :004243AB   , :004263E7   , :0042654A   
|:0042659B   , :0042A534   , :0042A6D2   , :0042AB55   , :0042BBE7   
|:0042BEA3   , :0042C2CE   , :0042C63E   , :0042C843   , :0042CF8C   
|:0042D085   , :0042D17E   
|
:00423B9C 55                      push ebp
:00423B9D 8BEC                    mov ebp, esp
:00423B9F 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"OΪ̵wЪѾleq"
                                  |
:00423BA1 6860CE4700              push 0047CE60
:00423BA6 E8355D0400              call 004698E0
:00423BAB 83C408                  add esp, 00000008
:00423BAE 5D                      pop ebp
:00423BAF C3                      ret


:00423BB0 55                      push ebp
:00423BB1 8BEC                    mov ebp, esp
:00423BB3 83EC10                  sub esp, 00000010
:00423BB6 8D45F0                  lea eax, dword ptr [ebp-10]
:00423BB9 50                      push eax
:00423BBA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423BBD 51                      push ecx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00423BBE FF15A4D64B00            Call dword ptr [004BD6A4]
:00423BC4 8B45FC                  mov eax, dword ptr [ebp-04]
:00423BC7 2B45F4                  sub eax, dword ptr [ebp-0C]
:00423BCA 99                      cdq
:00423BCB 2BC2                    sub eax, edx
:00423BCD D1F8                    sar eax, 1
:00423BCF 8B55F4                  mov edx, dword ptr [ebp-0C]
:00423BD2 03D0                    add edx, eax
:00423BD4 52                      push edx
:00423BD5 8B45F8                  mov eax, dword ptr [ebp-08]
:00423BD8 2B45F0                  sub eax, dword ptr [ebp-10]
:00423BDB 99                      cdq
:00423BDC 2BC2                    sub eax, edx
:00423BDE D1F8                    sar eax, 1
:00423BE0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00423BE3 03C8                    add ecx, eax
:00423BE5 51                      push ecx

* Reference To: USER32.SetCursorPos, Ord:01EEh
                                  |
:00423BE6 FF159CD64B00            Call dword ptr [004BD69C]
:00423BEC 8BE5                    mov esp, ebp
:00423BEE 5D                      pop ebp
:00423BEF C3                      ret


:00423BF0 55                      push ebp
:00423BF1 8BEC                    mov ebp, esp
:00423BF3 83EC44                  sub esp, 00000044
:00423BF6 8B450C                  mov eax, dword ptr [ebp+0C]
:00423BF9 8945BC                  mov dword ptr [ebp-44], eax
:00423BFC 837DBC10                cmp dword ptr [ebp-44], 00000010
:00423C00 7719                    ja 00423C1B
:00423C02 837DBC10                cmp dword ptr [ebp-44], 00000010
:00423C06 0F846B030000            je 00423F77
:00423C0C 837DBC02                cmp dword ptr [ebp-44], 00000002
:00423C10 0F8432030000            je 00423F48
:00423C16 E996030000              jmp 00423FB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423C00(C)
|
:00423C1B 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00423C1E 81E910010000            sub ecx, 00000110
:00423C24 894DBC                  mov dword ptr [ebp-44], ecx
:00423C27 817DBCF4000000          cmp dword ptr [ebp-44], 000000F4
:00423C2E 0F877D030000            ja 00423FB1
:00423C34 8B45BC                  mov eax, dword ptr [ebp-44]
:00423C37 33D2                    xor edx, edx
:00423C39 8A90D53F4200            mov dl, byte ptr [eax+00423FD5]
:00423C3F FF2495B93F4200          jmp dword ptr [4*edx+00423FB9]
:00423C46 8B4D14                  mov ecx, dword ptr [ebp+14]
:00423C49 890D30464900            mov dword ptr [00494630], ecx
:00423C4F 8B5508                  mov edx, dword ptr [ebp+08]
:00423C52 52                      push edx
:00423C53 E8B1080000              call 00424509
:00423C58 83C404                  add esp, 00000004
:00423C5B A3A4464900              mov dword ptr [004946A4], eax
:00423C60 8B0D30464900            mov ecx, dword ptr [00494630]
:00423C66 E815A20000              call 0042DE80
:00423C6B 8BC8                    mov ecx, eax
:00423C6D 6BC950                  imul ecx, 00000050
:00423C70 81C1787F4900            add ecx, 00497F78
:00423C76 E889F4FDFF              call 00403104
:00423C7B 50                      push eax
:00423C7C 8B4508                  mov eax, dword ptr [ebp+08]
:00423C7F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00423C80 FF1514D64B00            Call dword ptr [004BD614]
:00423C86 6A00                    push 00000000

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:00423C88 6A70                    push 00000070
:00423C8A 6820010000              push 00000120
:00423C8F 6A00                    push 00000000
:00423C91 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0537, ""
                                  |
:00423C93 6837050000              push 00000537
:00423C98 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423C9B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423C9C FF1510D64B00            Call dword ptr [004BD610]
:00423CA2 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00423CA3 FF15ECD54B00            Call dword ptr [004BD5EC]
:00423CA9 8B1530464900            mov edx, dword ptr [00494630]
:00423CAF 52                      push edx
:00423CB0 8B4508                  mov eax, dword ptr [ebp+08]
:00423CB3 50                      push eax
:00423CB4 E8BD050000              call 00424276
:00423CB9 83C408                  add esp, 00000008
:00423CBC 8B0D30464900            mov ecx, dword ptr [00494630]
:00423CC2 E8096F0300              call 0045ABD0
:00423CC7 85C0                    test eax, eax
:00423CC9 0F84A1000000            je 00423D70

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00423CCF 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0532, "/"
                                  |
:00423CD1 6832050000              push 00000532
:00423CD6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423CD9 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423CDA FF1510D64B00            Call dword ptr [004BD610]
:00423CE0 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00423CE1 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00423CE7 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0533, "
"
                                  |
:00423CE9 6833050000              push 00000533
:00423CEE 8B5508                  mov edx, dword ptr [ebp+08]
:00423CF1 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423CF2 FF1510D64B00            Call dword ptr [004BD610]
:00423CF8 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00423CF9 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00423CFF 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0534, "TEXT"
                                  |
:00423D01 6834050000              push 00000534
:00423D06 8B4508                  mov eax, dword ptr [ebp+08]
:00423D09 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423D0A FF1510D64B00            Call dword ptr [004BD610]
:00423D10 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00423D11 FF1500D74B00            Call dword ptr [004BD700]
:00423D17 6A40                    push 00000040
:00423D19 6A00                    push 00000000
:00423D1B 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00423D1E 51                      push ecx
:00423D1F E8ACBD0400              call 0046FAD0
:00423D24 83C40C                  add esp, 0000000C
:00423D27 B9D0454900              mov ecx, 004945D0
:00423D2C E8CFF5FDFF              call 00403300
:00423D31 8BC8                    mov ecx, eax
:00423D33 6BC950                  imul ecx, 00000050
:00423D36 81C1787F4900            add ecx, 00497F78
:00423D3C E8C3F3FDFF              call 00403104
:00423D41 50                      push eax

* Possible StringData Ref from Data Obj ->"ۦ%sܡH"
                                  |
:00423D42 6880CE4700              push 0047CE80
:00423D47 8D55C0                  lea edx, dword ptr [ebp-40]
:00423D4A 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00423D4B FF1504D74B00            Call dword ptr [004BD704]
:00423D51 83C40C                  add esp, 0000000C
:00423D54 8D45C0                  lea eax, dword ptr [ebp-40]
:00423D57 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0534, "TEXT"
                                  |
:00423D58 6834050000              push 00000534
:00423D5D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423D60 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423D61 FF1510D64B00            Call dword ptr [004BD610]
:00423D67 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00423D68 FF1514D64B00            Call dword ptr [004BD614]
:00423D6E EB58                    jmp 00423DC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423CC9(C)
|
:00423D70 6A00                    push 00000000
:00423D72 6A01                    push 00000001

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:00423D74 6A70                    push 00000070
:00423D76 8B5508                  mov edx, dword ptr [ebp+08]
:00423D79 52                      push edx

* Reference To: USER32.SetTimer, Ord:0216h
                                  |
:00423D7A FF1570D64B00            Call dword ptr [004BD670]
:00423D80 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0532, "/"
                                  |
:00423D82 6832050000              push 00000532
:00423D87 8B4508                  mov eax, dword ptr [ebp+08]
:00423D8A 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423D8B FF1510D64B00            Call dword ptr [004BD610]
:00423D91 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00423D92 FF1500D74B00            Call dword ptr [004BD700]
:00423D98 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0533, "
"
                                  |
:00423D9A 6833050000              push 00000533
:00423D9F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423DA2 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423DA3 FF1510D64B00            Call dword ptr [004BD610]
:00423DA9 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00423DAA FF1500D74B00            Call dword ptr [004BD700]
:00423DB0 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0534, "TEXT"
                                  |
:00423DB2 6834050000              push 00000534
:00423DB7 8B5508                  mov edx, dword ptr [ebp+08]
:00423DBA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423DBB FF1510D64B00            Call dword ptr [004BD610]
:00423DC1 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00423DC2 FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423D6E(U)
|
:00423DC8 8B0D30464900            mov ecx, dword ptr [00494630]
:00423DCE E8ADA00000              call 0042DE80
:00423DD3 50                      push eax
:00423DD4 E8B7A0FEFF              call 0040DE90
:00423DD9 83C404                  add esp, 00000004
:00423DDC 50                      push eax
:00423DDD 8B4508                  mov eax, dword ptr [ebp+08]
:00423DE0 50                      push eax
:00423DE1 8B0D30464900            mov ecx, dword ptr [00494630]
:00423DE7 E8BD070000              call 004245A9
:00423DEC 8B0D30464900            mov ecx, dword ptr [00494630]
:00423DF2 E8D96D0300              call 0045ABD0
:00423DF7 50                      push eax
:00423DF8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423DFB 51                      push ecx
:00423DFC E8C9020000              call 004240CA
:00423E01 83C408                  add esp, 00000008
:00423E04 E9A8010000              jmp 00423FB1
:00423E09 8B0D30464900            mov ecx, dword ptr [00494630]
:00423E0F E8BC6D0300              call 0045ABD0
:00423E14 85C0                    test eax, eax
:00423E16 7528                    jne 00423E40

* Reference To: USER32.GetCapture, Ord:00D8h
                                  |
:00423E18 FF156CD64B00            Call dword ptr [004BD66C]
:00423E1E 3B4508                  cmp eax, dword ptr [ebp+08]
:00423E21 7405                    je 00423E28
:00423E23 E989010000              jmp 00423FB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E21(C)
|
:00423E28 6A01                    push 00000001
:00423E2A B9F8544B00              mov ecx, 004B54F8
:00423E2F E8E6560400              call 0046951A
:00423E34 6A00                    push 00000000
:00423E36 8B5508                  mov edx, dword ptr [ebp+08]
:00423E39 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00423E3A FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E16(C)
|
:00423E40 E96C010000              jmp 00423FB1

* Reference To: USER32.GetCapture, Ord:00D8h
                                  |
:00423E45 FF156CD64B00            Call dword ptr [004BD66C]
:00423E4B 3B4508                  cmp eax, dword ptr [ebp+08]
:00423E4E 7405                    je 00423E55
:00423E50 E95C010000              jmp 00423FB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E4E(C)
|
:00423E55 8B0D30464900            mov ecx, dword ptr [00494630]
:00423E5B E8706D0300              call 0045ABD0
:00423E60 85C0                    test eax, eax
:00423E62 7518                    jne 00423E7C
:00423E64 6A00                    push 00000000
:00423E66 B9F8544B00              mov ecx, 004B54F8
:00423E6B E8AA560400              call 0046951A
:00423E70 6A00                    push 00000000
:00423E72 8B4508                  mov eax, dword ptr [ebp+08]
:00423E75 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00423E76 FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E62(C)
|
:00423E7C E930010000              jmp 00423FB1
:00423E81 8B4D10                  mov ecx, dword ptr [ebp+10]
:00423E84 81E1FFFF0000            and ecx, 0000FFFF
:00423E8A 81F932050000            cmp ecx, 00000532
:00423E90 750E                    jne 00423EA0
:00423E92 6A01                    push 00000001
:00423E94 8B5508                  mov edx, dword ptr [ebp+08]
:00423E97 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00423E98 FF15D8D54B00            Call dword ptr [004BD5D8]
:00423E9E EB1B                    jmp 00423EBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423E90(C)
|
:00423EA0 8B4510                  mov eax, dword ptr [ebp+10]
:00423EA3 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0533, "
"
                                  |
:00423EA8 3D33050000              cmp eax, 00000533
:00423EAD 750C                    jne 00423EBB
:00423EAF 6A00                    push 00000000
:00423EB1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423EB4 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00423EB5 FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423E9E(U), :00423EAD(C)
|
:00423EBB E9F1000000              jmp 00423FB1

* Reference To: USER32.GetCapture, Ord:00D8h
                                  |
:00423EC0 FF156CD64B00            Call dword ptr [004BD66C]
:00423EC6 3B4508                  cmp eax, dword ptr [ebp+08]
:00423EC9 741F                    je 00423EEA
:00423ECB 8B5508                  mov edx, dword ptr [ebp+08]
:00423ECE 52                      push edx

* Reference To: USER32.SetCapture, Ord:01E3h
                                  |
:00423ECF FF15B8D64B00            Call dword ptr [004BD6B8]
:00423ED5 6A00                    push 00000000
:00423ED7 682C010000              push 0000012C

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:00423EDC 6A70                    push 00000070
:00423EDE 8B4508                  mov eax, dword ptr [ebp+08]
:00423EE1 50                      push eax

* Reference To: USER32.SetTimer, Ord:0216h
                                  |
:00423EE2 FF1570D64B00            Call dword ptr [004BD670]
:00423EE8 EB5C                    jmp 00423F46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423EC9(C)
|
:00423EEA 8B0D8C474900            mov ecx, dword ptr [0049478C]
:00423EF0 83C101                  add ecx, 00000001
:00423EF3 890D8C474900            mov dword ptr [0049478C], ecx

* Reference To: USER32.GetCursor, Ord:00EBh
                                  |
:00423EF9 FF1564D64B00            Call dword ptr [004BD664]
:00423EFF 3B0590B44800            cmp eax, dword ptr [0048B490]
:00423F05 740F                    je 00423F16
:00423F07 8B1590B44800            mov edx, dword ptr [0048B490]
:00423F0D 52                      push edx

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:00423F0E FF15CCD54B00            Call dword ptr [004BD5CC]
:00423F14 EB0C                    jmp 00423F22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423F05(C)
|
:00423F16 A194B44800              mov eax, dword ptr [0048B494]
:00423F1B 50                      push eax

* Reference To: USER32.SetCursor, Ord:01ECh
                                  |
:00423F1C FF15CCD54B00            Call dword ptr [004BD5CC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423F14(U)
|
:00423F22 833D8C47490007          cmp dword ptr [0049478C], 00000007
:00423F29 7E1B                    jle 00423F46
:00423F2B 8B0D30464900            mov ecx, dword ptr [00494630]
:00423F31 E89A6C0300              call 0045ABD0
:00423F36 85C0                    test eax, eax
:00423F38 750C                    jne 00423F46
:00423F3A 6A00                    push 00000000
:00423F3C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423F3F 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00423F40 FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423EE8(U), :00423F29(C), :00423F38(C)
|
:00423F46 EB69                    jmp 00423FB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423C10(C)
|

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:00423F48 6A70                    push 00000070
:00423F4A 8B5508                  mov edx, dword ptr [ebp+08]
:00423F4D 52                      push edx

* Reference To: USER32.KillTimer, Ord:016Dh
                                  |
:00423F4E FF1580D64B00            Call dword ptr [004BD680]

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:00423F54 FF15D4D64B00            Call dword ptr [004BD6D4]
:00423F5A C7058C47490000000000    mov dword ptr [0049478C], 00000000
:00423F64 A1A4464900              mov eax, dword ptr [004946A4]
:00423F69 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00423F6A FF1544D44B00            Call dword ptr [004BD444]
:00423F70 E846050000              call 004244BB
:00423F75 EB3A                    jmp 00423FB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423C06(C)
|
:00423F77 6A00                    push 00000000
:00423F79 8B4D08                  mov ecx, dword ptr [ebp+08]
:00423F7C 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00423F7D FF15D8D54B00            Call dword ptr [004BD5D8]
:00423F83 EB2C                    jmp 00423FB1

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0534, "TEXT"
                                  |
:00423F85 6834050000              push 00000534
:00423F8A 8B5508                  mov edx, dword ptr [ebp+08]
:00423F8D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00423F8E FF1510D64B00            Call dword ptr [004BD610]
:00423F94 394514                  cmp dword ptr [ebp+14], eax
:00423F97 7502                    jne 00423F9B
:00423F99 EB16                    jmp 00423FB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423F97(C)
|
:00423F9B 68F0F0F002              push 02F0F0F0
:00423FA0 8B4510                  mov eax, dword ptr [ebp+10]
:00423FA3 50                      push eax

* Reference To: GDI32.SetBkColor, Ord:0150h
                                  |
:00423FA4 FF1558D44B00            Call dword ptr [004BD458]
:00423FAA A1A4464900              mov eax, dword ptr [004946A4]
:00423FAF EB02                    jmp 00423FB3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00423C16(U), :00423C2E(C), :00423E04(U), :00423E23(U), :00423E40(U)
|:00423E50(U), :00423E7C(U), :00423EBB(U), :00423F46(U), :00423F75(U)
|:00423F83(U), :00423F99(U)
|
:00423FB1 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00423FAF(U)
|
:00423FB3 8BE5                    mov esp, ebp
:00423FB5 5D                      pop ebp
:00423FB6 C21000                  ret 0010



:00423FB9 463C4200                DWORD 00423C46
:00423FBD 813E4200                DWORD 00423E81
:00423FC1 C03E4200                DWORD 00423EC0
:00423FC5 853F4200                DWORD 00423F85
:00423FC9 093E4200                DWORD 00423E09
:00423FCD 453E4200                DWORD 00423E45
:00423FD1 B13F4200                DWORD 00423FB1


:00423FD5 0001                    add byte ptr [ecx], al
:00423FD7 06                      push es
:00423FD8 0206                    add al, byte ptr [esi]
:00423FDA 06                      push es
:00423FDB 06                      push es
:00423FDC 06                      push es
:00423FDD 06                      push es
:00423FDE 06                      push es
:00423FDF 06                      push es
:00423FE0 06                      push es
:00423FE1 06                      push es
:00423FE2 06                      push es
:00423FE3 06                      push es
:00423FE4 06                      push es
:00423FE5 06                      push es
:00423FE6 06                      push es
:00423FE7 06                      push es
:00423FE8 06                      push es
:00423FE9 06                      push es
:00423FEA 06                      push es
:00423FEB 06                      push es
:00423FEC 06                      push es
:00423FED 06                      push es
:00423FEE 06                      push es
:00423FEF 06                      push es
:00423FF0 06                      push es
:00423FF1 06                      push es
:00423FF2 06                      push es
:00423FF3 06                      push es
:00423FF4 06                      push es
:00423FF5 06                      push es
:00423FF6 06                      push es
:00423FF7 06                      push es
:00423FF8 06                      push es
:00423FF9 06                      push es
:00423FFA 06                      push es
:00423FFB 06                      push es
:00423FFC 06                      push es
:00423FFD 0306                    add eax, dword ptr [esi]
:00423FFF 06                      push es
:00424000 06                      push es
:00424001 06                      push es
:00424002 06                      push es
:00424003 06                      push es
:00424004 06                      push es
:00424005 06                      push es
:00424006 06                      push es
:00424007 06                      push es
:00424008 06                      push es
:00424009 06                      push es
:0042400A 06                      push es
:0042400B 06                      push es
:0042400C 06                      push es
:0042400D 06                      push es
:0042400E 06                      push es
:0042400F 06                      push es
:00424010 06                      push es
:00424011 06                      push es
:00424012 06                      push es
:00424013 06                      push es
:00424014 06                      push es
:00424015 06                      push es
:00424016 06                      push es
:00424017 06                      push es
:00424018 06                      push es
:00424019 06                      push es
:0042401A 06                      push es
:0042401B 06                      push es
:0042401C 06                      push es
:0042401D 06                      push es
:0042401E 06                      push es
:0042401F 06                      push es
:00424020 06                      push es
:00424021 06                      push es
:00424022 06                      push es
:00424023 06                      push es
:00424024 06                      push es
:00424025 06                      push es
:00424026 06                      push es
:00424027 06                      push es
:00424028 06                      push es
:00424029 06                      push es
:0042402A 06                      push es
:0042402B 06                      push es
:0042402C 06                      push es
:0042402D 06                      push es
:0042402E 06                      push es
:0042402F 06                      push es
:00424030 06                      push es
:00424031 06                      push es
:00424032 06                      push es
:00424033 06                      push es
:00424034 06                      push es
:00424035 06                      push es
:00424036 06                      push es
:00424037 06                      push es
:00424038 06                      push es
:00424039 06                      push es
:0042403A 06                      push es
:0042403B 06                      push es
:0042403C 06                      push es
:0042403D 06                      push es
:0042403E 06                      push es
:0042403F 06                      push es
:00424040 06                      push es
:00424041 06                      push es
:00424042 06                      push es
:00424043 06                      push es
:00424044 06                      push es
:00424045 06                      push es
:00424046 06                      push es
:00424047 06                      push es
:00424048 06                      push es
:00424049 06                      push es
:0042404A 06                      push es
:0042404B 06                      push es
:0042404C 06                      push es
:0042404D 06                      push es
:0042404E 06                      push es
:0042404F 06                      push es
:00424050 06                      push es
:00424051 06                      push es
:00424052 06                      push es
:00424053 06                      push es
:00424054 06                      push es
:00424055 06                      push es
:00424056 06                      push es
:00424057 06                      push es
:00424058 06                      push es
:00424059 06                      push es
:0042405A 06                      push es
:0042405B 06                      push es
:0042405C 06                      push es
:0042405D 06                      push es
:0042405E 06                      push es
:0042405F 06                      push es
:00424060 06                      push es
:00424061 06                      push es
:00424062 06                      push es
:00424063 06                      push es
:00424064 06                      push es
:00424065 06                      push es
:00424066 06                      push es
:00424067 06                      push es
:00424068 06                      push es
:00424069 06                      push es
:0042406A 06                      push es
:0042406B 06                      push es
:0042406C 06                      push es
:0042406D 06                      push es
:0042406E 06                      push es
:0042406F 06                      push es
:00424070 06                      push es
:00424071 06                      push es
:00424072 06                      push es
:00424073 06                      push es
:00424074 06                      push es
:00424075 06                      push es
:00424076 06                      push es
:00424077 06                      push es
:00424078 06                      push es
:00424079 06                      push es
:0042407A 06                      push es
:0042407B 06                      push es
:0042407C 06                      push es
:0042407D 06                      push es
:0042407E 06                      push es
:0042407F 06                      push es
:00424080 06                      push es
:00424081 06                      push es
:00424082 06                      push es
:00424083 06                      push es
:00424084 06                      push es
:00424085 06                      push es
:00424086 06                      push es
:00424087 06                      push es
:00424088 06                      push es
:00424089 06                      push es
:0042408A 06                      push es
:0042408B 06                      push es
:0042408C 06                      push es
:0042408D 06                      push es
:0042408E 06                      push es
:0042408F 06                      push es
:00424090 06                      push es
:00424091 06                      push es
:00424092 06                      push es
:00424093 06                      push es
:00424094 06                      push es
:00424095 06                      push es
:00424096 06                      push es
:00424097 06                      push es
:00424098 06                      push es
:00424099 06                      push es
:0042409A 06                      push es
:0042409B 06                      push es
:0042409C 06                      push es
:0042409D 06                      push es
:0042409E 06                      push es
:0042409F 06                      push es
:004240A0 06                      push es
:004240A1 06                      push es
:004240A2 06                      push es
:004240A3 06                      push es
:004240A4 06                      push es
:004240A5 06                      push es
:004240A6 06                      push es
:004240A7 06                      push es
:004240A8 06                      push es
:004240A9 06                      push es
:004240AA 06                      push es
:004240AB 06                      push es
:004240AC 06                      push es
:004240AD 06                      push es
:004240AE 06                      push es
:004240AF 06                      push es
:004240B0 06                      push es
:004240B1 06                      push es
:004240B2 06                      push es
:004240B3 06                      push es
:004240B4 06                      push es
:004240B5 06                      push es
:004240B6 06                      push es
:004240B7 06                      push es
:004240B8 06                      push es
:004240B9 06                      push es
:004240BA 06                      push es
:004240BB 06                      push es
:004240BC 06                      push es
:004240BD 06                      push es
:004240BE 06                      push es
:004240BF 06                      push es
:004240C0 06                      push es
:004240C1 06                      push es
:004240C2 06                      push es
:004240C3 06                      push es
:004240C4 06                      push es
:004240C5 06                      push es
:004240C6 0406                    add al, 06
:004240C8 06                      push es
:004240C9 05                      BYTE 05h


* Referenced by a CALL at Address:
|:00423DFC   
|
:004240CA 55                      push ebp
:004240CB 8BEC                    mov ebp, esp
:004240CD 83EC54                  sub esp, 00000054
:004240D0 8B4508                  mov eax, dword ptr [ebp+08]
:004240D3 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:004240D4 FF15C4D64B00            Call dword ptr [004BD6C4]
:004240DA 8945FC                  mov dword ptr [ebp-04], eax
:004240DD 8D4DEC                  lea ecx, dword ptr [ebp-14]
:004240E0 51                      push ecx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:053F, ""
                                  |
:004240E1 683F050000              push 0000053F
:004240E6 8B55FC                  mov edx, dword ptr [ebp-04]
:004240E9 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004240EA FF1510D64B00            Call dword ptr [004BD610]
:004240F0 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:004240F1 FF15A4D64B00            Call dword ptr [004BD6A4]
:004240F7 8B45EC                  mov eax, dword ptr [ebp-14]
:004240FA 8945E4                  mov dword ptr [ebp-1C], eax
:004240FD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424100 83C105                  add ecx, 00000005
:00424103 894DE8                  mov dword ptr [ebp-18], ecx
:00424106 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042410A 0F843D010000            je 0042424D
:00424110 8D55D0                  lea edx, dword ptr [ebp-30]
:00424113 52                      push edx
:00424114 8B4508                  mov eax, dword ptr [ebp+08]
:00424117 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00424118 FF15A4D64B00            Call dword ptr [004BD6A4]
:0042411E 8D4DAC                  lea ecx, dword ptr [ebp-54]
:00424121 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0532, "/"
                                  |
:00424122 6832050000              push 00000532
:00424127 8B5508                  mov edx, dword ptr [ebp+08]
:0042412A 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042412B FF1510D64B00            Call dword ptr [004BD610]
:00424131 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00424132 FF15A4D64B00            Call dword ptr [004BD6A4]
:00424138 8D45BC                  lea eax, dword ptr [ebp-44]
:0042413B 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0534, "TEXT"
                                  |
:0042413C 6834050000              push 00000534
:00424141 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424144 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424145 FF1510D64B00            Call dword ptr [004BD610]
:0042414B 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0042414C FF15A4D64B00            Call dword ptr [004BD6A4]
:00424152 8B55B4                  mov edx, dword ptr [ebp-4C]
:00424155 2B55AC                  sub edx, dword ptr [ebp-54]
:00424158 8955E0                  mov dword ptr [ebp-20], edx
:0042415B 8B45B8                  mov eax, dword ptr [ebp-48]
:0042415E 2B45B0                  sub eax, dword ptr [ebp-50]
:00424161 8945CC                  mov dword ptr [ebp-34], eax
:00424164 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00424166 6A04                    push 00000004

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00424168 FF1578D64B00            Call dword ptr [004BD678]
:0042416E 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00424171 8D540870                lea edx, dword ptr [eax+ecx+70]
:00424175 0355C8                  add edx, dword ptr [ebp-38]
:00424178 2B55C0                  sub edx, dword ptr [ebp-40]
:0042417B 83C20F                  add edx, 0000000F
:0042417E 52                      push edx
:0042417F 6820010000              push 00000120
:00424184 8B45E8                  mov eax, dword ptr [ebp-18]
:00424187 50                      push eax
:00424188 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042418B 51                      push ecx
:0042418C 8B5508                  mov edx, dword ptr [ebp+08]
:0042418F 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00424190 FF15ECD54B00            Call dword ptr [004BD5EC]
:00424196 6A00                    push 00000000
:00424198 8B45C8                  mov eax, dword ptr [ebp-38]
:0042419B 2B45C0                  sub eax, dword ptr [ebp-40]
:0042419E 50                      push eax
:0042419F 6820010000              push 00000120
:004241A4 6A75                    push 00000075
:004241A6 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0534, "TEXT"
                                  |
:004241A8 6834050000              push 00000534
:004241AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004241B0 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004241B1 FF1510D64B00            Call dword ptr [004BD610]
:004241B7 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004241B8 FF15ECD54B00            Call dword ptr [004BD5EC]
:004241BE 6A00                    push 00000000
:004241C0 8B55CC                  mov edx, dword ptr [ebp-34]
:004241C3 52                      push edx
:004241C4 8B45E0                  mov eax, dword ptr [ebp-20]
:004241C7 50                      push eax
:004241C8 8B4DC8                  mov ecx, dword ptr [ebp-38]
:004241CB 83C170                  add ecx, 00000070
:004241CE 2B4DC0                  sub ecx, dword ptr [ebp-40]
:004241D1 83C10A                  add ecx, 0000000A
:004241D4 51                      push ecx
:004241D5 8B55E0                  mov edx, dword ptr [ebp-20]
:004241D8 D1E2                    shl edx, 1
:004241DA B820010000              mov eax, 00000120
:004241DF 2BC2                    sub eax, edx
:004241E1 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004241E2 B903000000              mov ecx, 00000003
:004241E7 F7F9                    idiv ecx
:004241E9 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0532, "/"
                                  |
:004241EA 6832050000              push 00000532
:004241EF 8B5508                  mov edx, dword ptr [ebp+08]
:004241F2 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004241F3 FF1510D64B00            Call dword ptr [004BD610]
:004241F9 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004241FA FF15ECD54B00            Call dword ptr [004BD5EC]
:00424200 6A00                    push 00000000
:00424202 8B45CC                  mov eax, dword ptr [ebp-34]
:00424205 50                      push eax
:00424206 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00424209 51                      push ecx
:0042420A 8B55C8                  mov edx, dword ptr [ebp-38]
:0042420D 83C270                  add edx, 00000070
:00424210 2B55C0                  sub edx, dword ptr [ebp-40]
:00424213 83C20A                  add edx, 0000000A
:00424216 52                      push edx
:00424217 8B45E0                  mov eax, dword ptr [ebp-20]
:0042421A D1E0                    shl eax, 1
:0042421C B920010000              mov ecx, 00000120
:00424221 2BC8                    sub ecx, eax
:00424223 D1E1                    shl ecx, 1
:00424225 8BC1                    mov eax, ecx
:00424227 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00424228 B903000000              mov ecx, 00000003
:0042422D F7F9                    idiv ecx
:0042422F 8B55E0                  mov edx, dword ptr [ebp-20]
:00424232 03D0                    add edx, eax
:00424234 52                      push edx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0533, "
"
                                  |
:00424235 6833050000              push 00000533
:0042423A 8B4508                  mov eax, dword ptr [ebp+08]
:0042423D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042423E FF1510D64B00            Call dword ptr [004BD610]
:00424244 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00424245 FF15ECD54B00            Call dword ptr [004BD5EC]
:0042424B EB25                    jmp 00424272

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042410A(C)
|
:0042424D 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042424F 6A04                    push 00000004

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00424251 FF1578D64B00            Call dword ptr [004BD678]
:00424257 83C070                  add eax, 00000070
:0042425A 50                      push eax
:0042425B 6820010000              push 00000120
:00424260 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00424263 51                      push ecx
:00424264 8B55E4                  mov edx, dword ptr [ebp-1C]
:00424267 52                      push edx
:00424268 8B4508                  mov eax, dword ptr [ebp+08]
:0042426B 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0042426C FF15ECD54B00            Call dword ptr [004BD5EC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042424B(U)
|
:00424272 8BE5                    mov esp, ebp
:00424274 5D                      pop ebp
:00424275 C3                      ret



* Referenced by a CALL at Address:
|:00423CB4   
|
:00424276 55                      push ebp
:00424277 8BEC                    mov ebp, esp
:00424279 6A00                    push 00000000
:0042427B A140544B00              mov eax, dword ptr [004B5440]
:00424280 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00424281 FF1500D74B00            Call dword ptr [004BD700]
:00424287 6A0D                    push 0000000D
:00424289 E881130500              call 0047560F
:0042428E 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00424291 6A07                    push 00000007
:00424293 E85E1A0500              call 00475CF6
:00424298 83C404                  add esp, 00000004
:0042429B E85E000000              call 004242FE
:004242A0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004242A3 51                      push ecx
:004242A4 8B5508                  mov edx, dword ptr [ebp+08]
:004242A7 52                      push edx
:004242A8 E88B000000              call 00424338
:004242AD 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0537, ""
                                  |
:004242B0 6837050000              push 00000537
:004242B5 8B4508                  mov eax, dword ptr [ebp+08]
:004242B8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004242B9 FF1510D64B00            Call dword ptr [004BD610]
:004242BF 50                      push eax
:004242C0 8B0D40544B00            mov ecx, dword ptr [004B5440]
:004242C6 51                      push ecx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:004242C7 FF15E8D54B00            Call dword ptr [004BD5E8]
:004242CD 6A00                    push 00000000
:004242CF 8B15C4B04700            mov edx, dword ptr [0047B0C4]
:004242D5 52                      push edx
:004242D6 A1C0B04700              mov eax, dword ptr [0047B0C0]
:004242DB 50                      push eax
:004242DC 6A00                    push 00000000
:004242DE 6A00                    push 00000000
:004242E0 8B0D40544B00            mov ecx, dword ptr [004B5440]
:004242E6 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004242E7 FF15ECD54B00            Call dword ptr [004BD5EC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004242ED 6A05                    push 00000005
:004242EF 8B1540544B00            mov edx, dword ptr [004B5440]
:004242F5 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004242F6 FF1500D74B00            Call dword ptr [004BD700]
:004242FC 5D                      pop ebp
:004242FD C3                      ret



* Referenced by a CALL at Address:
|:0042429B   
|
:004242FE 55                      push ebp
:004242FF 8BEC                    mov ebp, esp
:00424301 6A00                    push 00000000
:00424303 6A00                    push 00000000
:00424305 6A00                    push 00000000
:00424307 E8111A0500              call 00475D1D
:0042430C 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042430F 6A04                    push 00000004
:00424311 6A00                    push 00000000
:00424313 6A00                    push 00000000
:00424315 B910474900              mov ecx, 00494710
:0042431A E8714C0500              call 00478F90
:0042431F 50                      push eax
:00424320 6890000000              push 00000090
:00424325 6820010000              push 00000120
:0042432A 6A00                    push 00000000
:0042432C 6A00                    push 00000000
:0042432E E8C1270500              call 00476AF4
:00424333 83C414                  add esp, 00000014
:00424336 5D                      pop ebp
:00424337 C3                      ret



* Referenced by a CALL at Address:
|:004242A8   
|
:00424338 55                      push ebp
:00424339 8BEC                    mov ebp, esp
:0042433B 6AFF                    push FFFFFFFF
:0042433D 68A2964700              push 004796A2
:00424342 64A100000000            mov eax, dword ptr fs:[00000000]
:00424348 50                      push eax
:00424349 64892500000000          mov dword ptr fs:[00000000], esp
:00424350 B8E8780000              mov eax, 000078E8
:00424355 E8C6B10400              call 0046F520
:0042435A 8D8D0CB8FFFF            lea ecx, dword ptr [ebp+FFFFB80C]
:00424360 E8DB12FEFF              call 00405640
:00424365 C745FC00000000          mov [ebp-04], 00000000
:0042436C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042436F E80C9B0000              call 0042DE80
:00424374 8BC8                    mov ecx, eax
:00424376 6BC950                  imul ecx, 00000050
:00424379 81C1787F4900            add ecx, 00497F78
:0042437F E8FC9A0000              call 0042DE80
:00424384 898510B9FFFF            mov dword ptr [ebp+FFFFB910], eax
:0042438A 8D850C87FFFF            lea eax, dword ptr [ebp+FFFF870C]
:00424390 50                      push eax
:00424391 8B8D10B9FFFF            mov ecx, dword ptr [ebp+FFFFB910]
:00424397 51                      push ecx
:00424398 B940C74A00              mov ecx, 004AC740
:0042439D E887CFFEFF              call 00411329
:004243A2 85C0                    test eax, eax
:004243A4 750D                    jne 004243B3

* Possible StringData Ref from Data Obj ->"in SerihuBoxProc()"
                                  |
:004243A6 688CCE4700              push 0047CE8C
:004243AB E8ECF7FFFF              call 00423B9C
:004243B0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004243A4(C)
|
:004243B3 6A00                    push 00000000
:004243B5 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004243B7 6A04                    push 00000004
:004243B9 E85F190500              call 00475D1D
:004243BE 83C40C                  add esp, 0000000C
:004243C1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004243C4 E8B79A0000              call 0042DE80
:004243C9 50                      push eax
:004243CA E8C19AFEFF              call 0040DE90
:004243CF 83C404                  add esp, 00000004
:004243D2 85C0                    test eax, eax
:004243D4 7465                    je 0042443B

* Possible StringData Ref from Data Obj ->"ENSHUJO.E3"
                                  |
:004243D6 68E0D44700              push 0047D4E0
:004243DB 8D8D0CB8FFFF            lea ecx, dword ptr [ebp+FFFFB80C]
:004243E1 E8EFCDFEFF              call 004111D5
:004243E6 8D9514B9FFFF            lea edx, dword ptr [ebp+FFFFB914]
:004243EC 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004243ED 6A05                    push 00000005
:004243EF 8D8D0CB8FFFF            lea ecx, dword ptr [ebp+FFFFB80C]
:004243F5 E82FCFFEFF              call 00411329
:004243FA 8D8D0CB8FFFF            lea ecx, dword ptr [ebp+FFFFB80C]
:00424400 E82098FEFF              call 0040DC25
:00424405 8D8514B9FFFF            lea eax, dword ptr [ebp+FFFFB914]
:0042440B 50                      push eax

* Possible Ref to Menu: APPMENU, Item: ":)(J)"
                                  |
:0042440C 6A6C                    push 0000006C
:0042440E 68A8000000              push 000000A8
:00424413 6A00                    push 00000000
:00424415 6A00                    push 00000000
:00424417 E8D8260500              call 00476AF4
:0042441C 83C414                  add esp, 00000014
:0042441F 8D8D0C87FFFF            lea ecx, dword ptr [ebp+FFFF870C]
:00424425 51                      push ecx

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:00424426 6A70                    push 00000070

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:00424428 6A70                    push 00000070
:0042442A 6A00                    push 00000000
:0042442C 68B0000000              push 000000B0
:00424431 E8BE260500              call 00476AF4
:00424436 83C414                  add esp, 00000014
:00424439 EB60                    jmp 0042449B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004243D4(C)
|

* Possible StringData Ref from Data Obj ->"ENSHUJO.E3"
                                  |
:0042443B 68E0D44700              push 0047D4E0
:00424440 8D8D0CB8FFFF            lea ecx, dword ptr [ebp+FFFFB80C]
:00424446 E88ACDFEFF              call 004111D5
:0042444B 8D9514B9FFFF            lea edx, dword ptr [ebp+FFFFB914]
:00424451 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00424452 6A04                    push 00000004
:00424454 8D8D0CB8FFFF            lea ecx, dword ptr [ebp+FFFFB80C]
:0042445A E8CACEFEFF              call 00411329
:0042445F 8D8D0CB8FFFF            lea ecx, dword ptr [ebp+FFFFB80C]
:00424465 E8BB97FEFF              call 0040DC25
:0042446A 8D8514B9FFFF            lea eax, dword ptr [ebp+FFFFB914]
:00424470 50                      push eax

* Possible Ref to Menu: APPMENU, Item: ":)(J)"
                                  |
:00424471 6A6C                    push 0000006C
:00424473 68A8000000              push 000000A8
:00424478 6A00                    push 00000000

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:0042447A 6A70                    push 00000070
:0042447C E873260500              call 00476AF4
:00424481 83C414                  add esp, 00000014
:00424484 8D8D0C87FFFF            lea ecx, dword ptr [ebp+FFFF870C]
:0042448A 51                      push ecx

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:0042448B 6A70                    push 00000070

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:0042448D 6A70                    push 00000070
:0042448F 6A00                    push 00000000
:00424491 6A00                    push 00000000
:00424493 E85C260500              call 00476AF4
:00424498 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424439(U)
|
:0042449B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004244A2 8D8D0CB8FFFF            lea ecx, dword ptr [ebp+FFFFB80C]
:004244A8 E8B311FEFF              call 00405660
:004244AD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004244B0 64890D00000000          mov dword ptr fs:[00000000], ecx
:004244B7 8BE5                    mov esp, ebp
:004244B9 5D                      pop ebp
:004244BA C3                      ret



* Referenced by a CALL at Address:
|:00423F70   
|
:004244BB 55                      push ebp
:004244BC 8BEC                    mov ebp, esp
:004244BE 6A00                    push 00000000
:004244C0 A140544B00              mov eax, dword ptr [004B5440]
:004244C5 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004244C6 FF1500D74B00            Call dword ptr [004BD700]
:004244CC 6A0D                    push 0000000D
:004244CE E83C110500              call 0047560F
:004244D3 83C404                  add esp, 00000004
:004244D6 E891190500              call 00475E6C
:004244DB 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004244DD 6A0A                    push 0000000A
:004244DF 6A00                    push 00000000
:004244E1 E837180500              call 00475D1D
:004244E6 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:004244E9 6A09                    push 00000009
:004244EB E81F110500              call 0047560F
:004244F0 83C404                  add esp, 00000004
:004244F3 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:004244F9 51                      push ecx
:004244FA 8B1540544B00            mov edx, dword ptr [004B5440]
:00424500 52                      push edx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:00424501 FF15E8D54B00            Call dword ptr [004BD5E8]
:00424507 5D                      pop ebp
:00424508 C3                      ret



* Referenced by a CALL at Address:
|:00423C53   
|
:00424509 55                      push ebp
:0042450A 8BEC                    mov ebp, esp
:0042450C 83EC08                  sub esp, 00000008
:0042450F 8B4508                  mov eax, dword ptr [ebp+08]
:00424512 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00424513 FF1518D64B00            Call dword ptr [004BD618]
:00424519 8945F8                  mov dword ptr [ebp-08], eax
:0042451C 6A0C                    push 0000000C
:0042451E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424521 51                      push ecx

* Reference To: GDI32.GetDeviceCaps, Ord:00C7h
                                  |
:00424522 FF1550D44B00            Call dword ptr [004BD450]
:00424528 8945FC                  mov dword ptr [ebp-04], eax
:0042452B 8B55F8                  mov edx, dword ptr [ebp-08]
:0042452E 52                      push edx
:0042452F 8B4508                  mov eax, dword ptr [ebp+08]
:00424532 50                      push eax

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00424533 FF151CD64B00            Call dword ptr [004BD61C]
:00424539 837DFC08                cmp dword ptr [ebp-04], 00000008
:0042453D 7510                    jne 0042454F
:0042453F 6A10                    push 00000010
:00424541 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424544 51                      push ecx
:00424545 E814000000              call 0042455E
:0042454A 83C408                  add esp, 00000008
:0042454D EB0B                    jmp 0042455A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042453D(C)
|
:0042454F 68F0F0F000              push 00F0F0F0

* Reference To: GDI32.CreateSolidBrush, Ord:0040h
                                  |
:00424554 FF1548D44B00            Call dword ptr [004BD448]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042454D(U)
|
:0042455A 8BE5                    mov esp, ebp
:0042455C 5D                      pop ebp
:0042455D C3                      ret



* Referenced by a CALL at Address:
|:00424545   
|
:0042455E 55                      push ebp
:0042455F 8BEC                    mov ebp, esp
:00424561 83EC48                  sub esp, 00000048
:00424564 6A40                    push 00000040
:00424566 8B450C                  mov eax, dword ptr [ebp+0C]
:00424569 50                      push eax
:0042456A 8D4DC0                  lea ecx, dword ptr [ebp-40]
:0042456D 51                      push ecx
:0042456E E85DB50400              call 0046FAD0
:00424573 83C40C                  add esp, 0000000C
:00424576 8D55C0                  lea edx, dword ptr [ebp-40]
:00424579 52                      push edx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042457A 6A08                    push 00000008
:0042457C 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042457E 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00424580 6A08                    push 00000008

* Reference To: GDI32.CreateBitmap, Ord:0019h
                                  |
:00424582 FF1560D44B00            Call dword ptr [004BD460]
:00424588 8945B8                  mov dword ptr [ebp-48], eax
:0042458B 8B45B8                  mov eax, dword ptr [ebp-48]
:0042458E 50                      push eax

* Reference To: GDI32.CreatePatternBrush, Ord:0036h
                                  |
:0042458F FF1554D44B00            Call dword ptr [004BD454]
:00424595 8945BC                  mov dword ptr [ebp-44], eax
:00424598 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0042459B 51                      push ecx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:0042459C FF1544D44B00            Call dword ptr [004BD444]
:004245A2 8B45BC                  mov eax, dword ptr [ebp-44]
:004245A5 8BE5                    mov esp, ebp
:004245A7 5D                      pop ebp
:004245A8 C3                      ret



* Referenced by a CALL at Address:
|:00423DE7   
|
:004245A9 55                      push ebp
:004245AA 8BEC                    mov ebp, esp
:004245AC 83EC7C                  sub esp, 0000007C
:004245AF 894D84                  mov dword ptr [ebp-7C], ecx
:004245B2 6A20                    push 00000020
:004245B4 6A00                    push 00000000
:004245B6 8D45C8                  lea eax, dword ptr [ebp-38]
:004245B9 50                      push eax
:004245BA E811B50400              call 0046FAD0
:004245BF 83C40C                  add esp, 0000000C
:004245C2 6A20                    push 00000020
:004245C4 6A00                    push 00000000
:004245C6 8D4DA8                  lea ecx, dword ptr [ebp-58]
:004245C9 51                      push ecx
:004245CA E801B50400              call 0046FAD0
:004245CF 83C40C                  add esp, 0000000C
:004245D2 6A20                    push 00000020
:004245D4 6A00                    push 00000000
:004245D6 8D5588                  lea edx, dword ptr [ebp-78]
:004245D9 52                      push edx
:004245DA E8F1B40400              call 0046FAD0
:004245DF 83C40C                  add esp, 0000000C
:004245E2 8B4584                  mov eax, dword ptr [ebp-7C]
:004245E5 8B08                    mov ecx, dword ptr [eax]
:004245E7 894DF8                  mov dword ptr [ebp-08], ecx
:004245EA C745F000000000          mov [ebp-10], 00000000
:004245F1 EB09                    jmp 004245FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424630(U)
|
:004245F3 8B55F0                  mov edx, dword ptr [ebp-10]
:004245F6 83C201                  add edx, 00000001
:004245F9 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004245F1(U)
|
:004245FC 837DF020                cmp dword ptr [ebp-10], 00000020
:00424600 7D30                    jge 00424632
:00424602 8B45F8                  mov eax, dword ptr [ebp-08]
:00424605 0FBE08                  movsx ecx, byte ptr [eax]
:00424608 83F95C                  cmp ecx, 0000005C
:0042460B 750E                    jne 0042461B
:0042460D 8B55F8                  mov edx, dword ptr [ebp-08]
:00424610 0FBE4201                movsx eax, byte ptr [edx+01]
:00424614 83F872                  cmp eax, 00000072
:00424617 7502                    jne 0042461B
:00424619 EB17                    jmp 00424632

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042460B(C), :00424617(C)
|
:0042461B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042461E 8B55F8                  mov edx, dword ptr [ebp-08]
:00424621 8A02                    mov al, byte ptr [edx]
:00424623 88440DC8                mov byte ptr [ebp+ecx-38], al
:00424627 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042462A 83C101                  add ecx, 00000001
:0042462D 894DF8                  mov dword ptr [ebp-08], ecx
:00424630 EBC1                    jmp 004245F3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424600(C), :00424619(U)
|
:00424632 8B55F8                  mov edx, dword ptr [ebp-08]
:00424635 83C201                  add edx, 00000001
:00424638 8955F8                  mov dword ptr [ebp-08], edx
:0042463B 8B45F8                  mov eax, dword ptr [ebp-08]
:0042463E 83C001                  add eax, 00000001
:00424641 8945F8                  mov dword ptr [ebp-08], eax
:00424644 C745F000000000          mov [ebp-10], 00000000
:0042464B EB09                    jmp 00424656

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042468A(U)
|
:0042464D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00424650 83C101                  add ecx, 00000001
:00424653 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042464B(U)
|
:00424656 837DF020                cmp dword ptr [ebp-10], 00000020
:0042465A 7D30                    jge 0042468C
:0042465C 8B55F8                  mov edx, dword ptr [ebp-08]
:0042465F 0FBE02                  movsx eax, byte ptr [edx]
:00424662 83F85C                  cmp eax, 0000005C
:00424665 750E                    jne 00424675
:00424667 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042466A 0FBE5101                movsx edx, byte ptr [ecx+01]
:0042466E 83FA72                  cmp edx, 00000072
:00424671 7502                    jne 00424675
:00424673 EB17                    jmp 0042468C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424665(C), :00424671(C)
|
:00424675 8B45F0                  mov eax, dword ptr [ebp-10]
:00424678 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042467B 8A11                    mov dl, byte ptr [ecx]
:0042467D 885405A8                mov byte ptr [ebp+eax-58], dl
:00424681 8B45F8                  mov eax, dword ptr [ebp-08]
:00424684 83C001                  add eax, 00000001
:00424687 8945F8                  mov dword ptr [ebp-08], eax
:0042468A EBC1                    jmp 0042464D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042465A(C), :00424673(U)
|
:0042468C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042468F 83C101                  add ecx, 00000001
:00424692 894DF8                  mov dword ptr [ebp-08], ecx
:00424695 8B55F8                  mov edx, dword ptr [ebp-08]
:00424698 83C201                  add edx, 00000001
:0042469B 8955F8                  mov dword ptr [ebp-08], edx
:0042469E C745F000000000          mov [ebp-10], 00000000
:004246A5 EB09                    jmp 004246B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004246D7(U)
|
:004246A7 8B45F0                  mov eax, dword ptr [ebp-10]
:004246AA 83C001                  add eax, 00000001
:004246AD 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004246A5(U)
|
:004246B0 837DF020                cmp dword ptr [ebp-10], 00000020
:004246B4 7D23                    jge 004246D9
:004246B6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004246B9 0FBE11                  movsx edx, byte ptr [ecx]
:004246BC 85D2                    test edx, edx
:004246BE 7502                    jne 004246C2
:004246C0 EB17                    jmp 004246D9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004246BE(C)
|
:004246C2 8B45F0                  mov eax, dword ptr [ebp-10]
:004246C5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004246C8 8A11                    mov dl, byte ptr [ecx]
:004246CA 88540588                mov byte ptr [ebp+eax-78], dl
:004246CE 8B45F8                  mov eax, dword ptr [ebp-08]
:004246D1 83C001                  add eax, 00000001
:004246D4 8945F8                  mov dword ptr [ebp-08], eax
:004246D7 EBCE                    jmp 004246A7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004246B4(C), :004246C0(U)
|
:004246D9 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004246DD 7409                    je 004246E8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:004246DF C745FC14000000          mov [ebp-04], 00000014
:004246E6 EB07                    jmp 004246EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004246DD(C)
|
:004246E8 C745FC95000000          mov [ebp-04], 00000095

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004246E6(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004246EF C745F405000000          mov [ebp-0C], 00000005
:004246F6 C745EC7C000000          mov [ebp-14], 0000007C
:004246FD C745E816000000          mov [ebp-18], 00000016
:00424704 6A01                    push 00000001
:00424706 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00424709 51                      push ecx
:0042470A 8B55EC                  mov edx, dword ptr [ebp-14]
:0042470D 52                      push edx
:0042470E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00424711 83C00F                  add eax, 0000000F
:00424714 50                      push eax
:00424715 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424718 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:04F8, "Static"
                                  |
:00424719 68F8040000              push 000004F8
:0042471E 8B5508                  mov edx, dword ptr [ebp+08]
:00424721 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424722 FF1510D64B00            Call dword ptr [004BD610]
:00424728 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00424729 FF15ECD54B00            Call dword ptr [004BD5EC]
:0042472F 6A01                    push 00000001
:00424731 8B45E8                  mov eax, dword ptr [ebp-18]
:00424734 50                      push eax
:00424735 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00424738 51                      push ecx
:00424739 8B55E8                  mov edx, dword ptr [ebp-18]
:0042473C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042473F 8D4C1014                lea ecx, dword ptr [eax+edx+14]
:00424743 51                      push ecx
:00424744 8B55FC                  mov edx, dword ptr [ebp-04]
:00424747 52                      push edx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:04F9, "Static"
                                  |
:00424748 68F9040000              push 000004F9
:0042474D 8B4508                  mov eax, dword ptr [ebp+08]
:00424750 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424751 FF1510D64B00            Call dword ptr [004BD610]
:00424757 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00424758 FF15ECD54B00            Call dword ptr [004BD5EC]
:0042475E 6A01                    push 00000001
:00424760 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00424763 51                      push ecx
:00424764 8B55EC                  mov edx, dword ptr [ebp-14]
:00424767 52                      push edx
:00424768 8B45E8                  mov eax, dword ptr [ebp-18]
:0042476B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042476E 8D544119                lea edx, dword ptr [ecx+2*eax+19]
:00424772 52                      push edx
:00424773 8B45FC                  mov eax, dword ptr [ebp-04]
:00424776 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:04FA, "Static"
                                  |
:00424777 68FA040000              push 000004FA
:0042477C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042477F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424780 FF1510D64B00            Call dword ptr [004BD610]
:00424786 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00424787 FF15ECD54B00            Call dword ptr [004BD5EC]
:0042478D 8D55C8                  lea edx, dword ptr [ebp-38]
:00424790 52                      push edx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:04F8, "Static"
                                  |
:00424791 68F8040000              push 000004F8
:00424796 8B4508                  mov eax, dword ptr [ebp+08]
:00424799 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042479A FF1510D64B00            Call dword ptr [004BD610]
:004247A0 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004247A1 FF1514D64B00            Call dword ptr [004BD614]
:004247A7 8D4DA8                  lea ecx, dword ptr [ebp-58]
:004247AA 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:04F9, "Static"
                                  |
:004247AB 68F9040000              push 000004F9
:004247B0 8B5508                  mov edx, dword ptr [ebp+08]
:004247B3 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004247B4 FF1510D64B00            Call dword ptr [004BD610]
:004247BA 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004247BB FF1514D64B00            Call dword ptr [004BD614]
:004247C1 8D4588                  lea eax, dword ptr [ebp-78]
:004247C4 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:04FA, "Static"
                                  |
:004247C5 68FA040000              push 000004FA
:004247CA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004247CD 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004247CE FF1510D64B00            Call dword ptr [004BD610]
:004247D4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004247D5 FF1514D64B00            Call dword ptr [004BD614]
:004247DB 8BE5                    mov esp, ebp
:004247DD 5D                      pop ebp
:004247DE C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00420FC4   , :0042109B   , :00428F0A   , :00429A93   , :00429F50   
|:00429F5C   , :0042A3AD   , :0042A417   , :0042B5BF   
|
:004247E1 55                      push ebp
:004247E2 8BEC                    mov ebp, esp
:004247E4 83EC08                  sub esp, 00000008
:004247E7 894DF8                  mov dword ptr [ebp-08], ecx
:004247EA 8B45F8                  mov eax, dword ptr [ebp-08]
:004247ED 8B4814                  mov ecx, dword ptr [eax+14]
:004247F0 6BC950                  imul ecx, 00000050
:004247F3 81C1787F4900            add ecx, 00497F78
:004247F9 E8ECD5FDFF              call 00401DEA
:004247FE 8945FC                  mov dword ptr [ebp-04], eax
:00424801 837D0800                cmp dword ptr [ebp+08], 00000000
:00424805 7D0B                    jge 00424812
:00424807 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042480A C70100000000            mov dword ptr [ecx], 00000000
:00424810 EB1A                    jmp 0042482C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424805(C)
|
:00424812 8B5508                  mov edx, dword ptr [ebp+08]
:00424815 3B55FC                  cmp edx, dword ptr [ebp-04]
:00424818 7E0A                    jle 00424824
:0042481A 8B45F8                  mov eax, dword ptr [ebp-08]
:0042481D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424820 8908                    mov dword ptr [eax], ecx
:00424822 EB08                    jmp 0042482C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424818(C)
|
:00424824 8B55F8                  mov edx, dword ptr [ebp-08]
:00424827 8B4508                  mov eax, dword ptr [ebp+08]
:0042482A 8902                    mov dword ptr [edx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424810(U), :00424822(U)
|
:0042482C 8BE5                    mov esp, ebp
:0042482E 5D                      pop ebp
:0042482F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00420FE0   , :004210B7   , :00429ABF   , :00429ACB   , :00429C85   
|:00429DB2   , :00429DC6   , :00429F30   , :0042A1D4   , :0042A2AE   
|:0042B5DB   
|
:00424832 55                      push ebp
:00424833 8BEC                    mov ebp, esp
:00424835 83EC08                  sub esp, 00000008
:00424838 894DF8                  mov dword ptr [ebp-08], ecx
:0042483B 8B45F8                  mov eax, dword ptr [ebp-08]
:0042483E 8B4814                  mov ecx, dword ptr [eax+14]
:00424841 6BC950                  imul ecx, 00000050
:00424844 81C1787F4900            add ecx, 00497F78
:0042484A E8CCD5FDFF              call 00401E1B
:0042484F 8945FC                  mov dword ptr [ebp-04], eax
:00424852 837D0800                cmp dword ptr [ebp+08], 00000000
:00424856 7D0C                    jge 00424864
:00424858 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042485B C7410400000000          mov [ecx+04], 00000000
:00424862 EB1C                    jmp 00424880

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424856(C)
|
:00424864 8B5508                  mov edx, dword ptr [ebp+08]
:00424867 3B55FC                  cmp edx, dword ptr [ebp-04]
:0042486A 7E0B                    jle 00424877
:0042486C 8B45F8                  mov eax, dword ptr [ebp-08]
:0042486F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00424872 894804                  mov dword ptr [eax+04], ecx
:00424875 EB09                    jmp 00424880

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042486A(C)
|
:00424877 8B55F8                  mov edx, dword ptr [ebp-08]
:0042487A 8B4508                  mov eax, dword ptr [ebp+08]
:0042487D 894204                  mov dword ptr [edx+04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424862(U), :00424875(U)
|
:00424880 8BE5                    mov esp, ebp
:00424882 5D                      pop ebp
:00424883 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00427B0B   , :00428C13   , :00428C9D   , :0042929D   , :004294B8   
|:00429701   , :0042CD9D   
|
:00424886 55                      push ebp
:00424887 8BEC                    mov ebp, esp
:00424889 51                      push ecx
:0042488A 894DFC                  mov dword ptr [ebp-04], ecx
:0042488D 817DFC38464900          cmp dword ptr [ebp-04], 00494638
:00424894 7536                    jne 004248CC
:00424896 6890000000              push 00000090
:0042489B 6820010000              push 00000120
:004248A0 6A00                    push 00000000
:004248A2 6890000000              push 00000090
:004248A7 E801150500              call 00475DAD
:004248AC 83C410                  add esp, 00000010
:004248AF E8D3B6FFFF              call 0041FF87
:004248B4 6890000000              push 00000090
:004248B9 6820010000              push 00000120
:004248BE 6A00                    push 00000000
:004248C0 6A00                    push 00000000
:004248C2 E8E6140500              call 00475DAD
:004248C7 83C410                  add esp, 00000010
:004248CA EB31                    jmp 004248FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424894(C)
|
:004248CC 6890000000              push 00000090
:004248D1 6890000000              push 00000090
:004248D6 6A00                    push 00000000
:004248D8 6A00                    push 00000000
:004248DA E8CE140500              call 00475DAD
:004248DF 83C410                  add esp, 00000010
:004248E2 E8A0B6FFFF              call 0041FF87
:004248E7 6890000000              push 00000090
:004248EC 6820010000              push 00000120
:004248F1 6A00                    push 00000000
:004248F3 6A00                    push 00000000
:004248F5 E8B3140500              call 00475DAD
:004248FA 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004248CA(U)
|
:004248FD 8BE5                    mov esp, ebp
:004248FF 5D                      pop ebp
:00424900 C3                      ret



* Referenced by a CALL at Addresses:
|:0042100B   , :004210CD   
|
:00424901 55                      push ebp
:00424902 8BEC                    mov ebp, esp
:00424904 83EC0C                  sub esp, 0000000C
:00424907 894DF4                  mov dword ptr [ebp-0C], ecx
:0042490A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042490D 8B4814                  mov ecx, dword ptr [eax+14]
:00424910 6BC950                  imul ecx, 00000050
:00424913 81C1787F4900            add ecx, 00497F78
:00424919 E8324DFFFF              call 00419650
:0042491E 8845F8                  mov byte ptr [ebp-08], al
:00424921 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00424924 8B4914                  mov ecx, dword ptr [ecx+14]
:00424927 6BC950                  imul ecx, 00000050
:0042492A 81C1787F4900            add ecx, 00497F78
:00424930 E85B4DFFFF              call 00419690
:00424935 8845FC                  mov byte ptr [ebp-04], al
:00424938 8B55F8                  mov edx, dword ptr [ebp-08]
:0042493B 81E2FF000000            and edx, 000000FF
:00424941 6BD20A                  imul edx, 0000000A
:00424944 8B45FC                  mov eax, dword ptr [ebp-04]
:00424947 25FF000000              and eax, 000000FF
:0042494C 6BC00C                  imul eax, 0000000C
:0042494F 3BD0                    cmp edx, eax
:00424951 7E09                    jle 0042495C
:00424953 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00424956 C6411D00                mov [ecx+1D], 00
:0042495A EB2B                    jmp 00424987

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424951(C)
|
:0042495C 8B55FC                  mov edx, dword ptr [ebp-04]
:0042495F 81E2FF000000            and edx, 000000FF
:00424965 C1E203                  shl edx, 03
:00424968 8B45F8                  mov eax, dword ptr [ebp-08]
:0042496B 25FF000000              and eax, 000000FF
:00424970 6BC00A                  imul eax, 0000000A
:00424973 3BD0                    cmp edx, eax
:00424975 7C09                    jl 00424980
:00424977 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042497A C6411D01                mov [ecx+1D], 01
:0042497E EB07                    jmp 00424987

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424975(C)
|
:00424980 8B55F4                  mov edx, dword ptr [ebp-0C]
:00424983 C6421D02                mov [edx+1D], 02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042495A(U), :0042497E(U)
|
:00424987 8BE5                    mov esp, ebp
:00424989 5D                      pop ebp
:0042498A C3                      ret



* Referenced by a CALL at Addresses:
|:0042196B   , :00421979   , :004287BA   , :00428804   
|
:0042498B 55                      push ebp
:0042498C 8BEC                    mov ebp, esp
:0042498E 83EC08                  sub esp, 00000008
:00424991 894DF8                  mov dword ptr [ebp-08], ecx
:00424994 8B45F8                  mov eax, dword ptr [ebp-08]
:00424997 8B4814                  mov ecx, dword ptr [eax+14]
:0042499A 6BC950                  imul ecx, 00000050
:0042499D 81C1787F4900            add ecx, 00497F78
:004249A3 E802C8FDFF              call 004011AA
:004249A8 8845FC                  mov byte ptr [ebp-04], al
:004249AB 817DF8D0454900          cmp dword ptr [ebp-08], 004945D0
:004249B2 7509                    jne 004249BD
:004249B4 8A4DFC                  mov cl, byte ptr [ebp-04]
:004249B7 80C14A                  add cl, 4A
:004249BA 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004249B2(C)
|
:004249BD 8A55FC                  mov dl, byte ptr [ebp-04]
:004249C0 52                      push edx
:004249C1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004249C4 E84B850000              call 0042CF14
:004249C9 8A45FC                  mov al, byte ptr [ebp-04]
:004249CC 50                      push eax
:004249CD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004249D0 E838860000              call 0042D00D
:004249D5 8A4DFC                  mov cl, byte ptr [ebp-04]
:004249D8 51                      push ecx
:004249D9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004249DC E825870000              call 0042D106

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:004249E1 6A09                    push 00000009
:004249E3 E8270C0500              call 0047560F
:004249E8 83C404                  add esp, 00000004
:004249EB 6A00                    push 00000000
:004249ED 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004249EF 6A04                    push 00000004
:004249F1 E827130500              call 00475D1D
:004249F6 83C40C                  add esp, 0000000C
:004249F9 6800120000              push 00001200
:004249FE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00424A01 E8D8830000              call 0042CDDE
:00424A06 8BE5                    mov esp, ebp
:00424A08 5D                      pop ebp
:00424A09 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00420E97   , :00420EA5   , :00428771   , :0042B5E9   
|
:00424A0C 55                      push ebp
:00424A0D 8BEC                    mov ebp, esp
:00424A0F 83EC34                  sub esp, 00000034
:00424A12 894DCC                  mov dword ptr [ebp-34], ecx
:00424A15 8B45CC                  mov eax, dword ptr [ebp-34]
:00424A18 8B4814                  mov ecx, dword ptr [eax+14]
:00424A1B 6BC950                  imul ecx, 00000050
:00424A1E 81C1787F4900            add ecx, 00497F78
:00424A24 894DDC                  mov dword ptr [ebp-24], ecx
:00424A27 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424A2A E8BBD3FDFF              call 00401DEA
:00424A2F 8945D8                  mov dword ptr [ebp-28], eax
:00424A32 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424A35 E8E1D3FDFF              call 00401E1B
:00424A3A 8945D4                  mov dword ptr [ebp-2C], eax
:00424A3D 817DCC38464900          cmp dword ptr [ebp-34], 00494638
:00424A44 0F8532020000            jne 00424C7C
:00424A4A 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424A4D E8B2E6FDFF              call 00403104
:00424A52 50                      push eax
:00424A53 68C9040000              push 000004C9
:00424A58 8B5508                  mov edx, dword ptr [ebp+08]
:00424A5B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424A5C FF1510D64B00            Call dword ptr [004BD610]
:00424A62 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424A63 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424A69 6A0A                    push 0000000A
:00424A6B 8D45E0                  lea eax, dword ptr [ebp-20]
:00424A6E 50                      push eax
:00424A6F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424A72 E829B4FEFF              call 0040FEA0
:00424A77 25FF000000              and eax, 000000FF
:00424A7C 50                      push eax
:00424A7D E83E5B0400              call 0046A5C0
:00424A82 83C40C                  add esp, 0000000C
:00424A85 50                      push eax
:00424A86 68CD040000              push 000004CD
:00424A8B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424A8E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424A8F FF1510D64B00            Call dword ptr [004BD610]
:00424A95 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424A96 FF1514D64B00            Call dword ptr [004BD614]
:00424A9C 8B55D8                  mov edx, dword ptr [ebp-28]
:00424A9F 52                      push edx
:00424AA0 8B45D8                  mov eax, dword ptr [ebp-28]
:00424AA3 50                      push eax

* Possible StringData Ref from Data Obj ->"%u/%u"
                                  |
:00424AA4 68A0CE4700              push 0047CEA0
:00424AA9 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00424AAC 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00424AAD FF1504D74B00            Call dword ptr [004BD704]
:00424AB3 83C410                  add esp, 00000010
:00424AB6 8D55E0                  lea edx, dword ptr [ebp-20]
:00424AB9 52                      push edx
:00424ABA 68DD040000              push 000004DD
:00424ABF 8B4508                  mov eax, dword ptr [ebp+08]
:00424AC2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424AC3 FF1510D64B00            Call dword ptr [004BD610]
:00424AC9 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424ACA FF1514D64B00            Call dword ptr [004BD614]
:00424AD0 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00424AD3 51                      push ecx
:00424AD4 8B55D4                  mov edx, dword ptr [ebp-2C]
:00424AD7 52                      push edx

* Possible StringData Ref from Data Obj ->"%u/%u"
                                  |
:00424AD8 68A8CE4700              push 0047CEA8
:00424ADD 8D45E0                  lea eax, dword ptr [ebp-20]
:00424AE0 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00424AE1 FF1504D74B00            Call dword ptr [004BD704]
:00424AE7 83C410                  add esp, 00000010
:00424AEA 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00424AED 51                      push ecx
:00424AEE 68DE040000              push 000004DE
:00424AF3 8B5508                  mov edx, dword ptr [ebp+08]
:00424AF6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424AF7 FF1510D64B00            Call dword ptr [004BD610]
:00424AFD 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424AFE FF1514D64B00            Call dword ptr [004BD614]
:00424B04 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424B07 E8D4930000              call 0042DEE0
:00424B0C 25FF000000              and eax, 000000FF
:00424B11 8945D0                  mov dword ptr [ebp-30], eax
:00424B14 6A00                    push 00000000
:00424B16 8B45D0                  mov eax, dword ptr [ebp-30]
:00424B19 50                      push eax

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:00424B1A 6802040000              push 00000402
:00424B1F 68D9040000              push 000004D9
:00424B24 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424B27 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00424B28 FF15D4D54B00            Call dword ptr [004BD5D4]
:00424B2E 8B55D0                  mov edx, dword ptr [ebp-30]
:00424B31 52                      push edx

* Possible StringData Ref from Data Obj ->"%u/100"
                                  |
:00424B32 68B0CE4700              push 0047CEB0
:00424B37 8D45E0                  lea eax, dword ptr [ebp-20]
:00424B3A 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00424B3B FF1504D74B00            Call dword ptr [004BD704]
:00424B41 83C40C                  add esp, 0000000C
:00424B44 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00424B47 51                      push ecx
:00424B48 68DF040000              push 000004DF
:00424B4D 8B5508                  mov edx, dword ptr [ebp+08]
:00424B50 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424B51 FF1510D64B00            Call dword ptr [004BD610]
:00424B57 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424B58 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424B5E 6A0A                    push 0000000A
:00424B60 8D45E0                  lea eax, dword ptr [ebp-20]
:00424B63 50                      push eax
:00424B64 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424B67 E8B2D1FDFF              call 00401D1E
:00424B6C 50                      push eax
:00424B6D E84E5A0400              call 0046A5C0
:00424B72 83C40C                  add esp, 0000000C
:00424B75 50                      push eax
:00424B76 68EF040000              push 000004EF
:00424B7B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424B7E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424B7F FF1510D64B00            Call dword ptr [004BD610]
:00424B85 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424B86 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424B8C 6A0A                    push 0000000A
:00424B8E 8D55E0                  lea edx, dword ptr [ebp-20]
:00424B91 52                      push edx
:00424B92 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424B95 E8B4D2FDFF              call 00401E4E
:00424B9A 50                      push eax
:00424B9B E8205A0400              call 0046A5C0
:00424BA0 83C40C                  add esp, 0000000C
:00424BA3 50                      push eax
:00424BA4 68F0040000              push 000004F0
:00424BA9 8B4508                  mov eax, dword ptr [ebp+08]
:00424BAC 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424BAD FF1510D64B00            Call dword ptr [004BD610]
:00424BB3 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424BB4 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424BBA 6A0A                    push 0000000A
:00424BBC 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00424BBF 51                      push ecx
:00424BC0 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424BC3 E8BCD1FDFF              call 00401D84
:00424BC8 50                      push eax
:00424BC9 E8F2590400              call 0046A5C0
:00424BCE 83C40C                  add esp, 0000000C
:00424BD1 50                      push eax
:00424BD2 68F1040000              push 000004F1
:00424BD7 8B5508                  mov edx, dword ptr [ebp+08]
:00424BDA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424BDB FF1510D64B00            Call dword ptr [004BD610]
:00424BE1 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424BE2 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424BE8 6A0A                    push 0000000A
:00424BEA 8D45E0                  lea eax, dword ptr [ebp-20]
:00424BED 50                      push eax
:00424BEE 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424BF1 E85BD1FDFF              call 00401D51
:00424BF6 50                      push eax
:00424BF7 E8C4590400              call 0046A5C0
:00424BFC 83C40C                  add esp, 0000000C
:00424BFF 50                      push eax
:00424C00 68F4040000              push 000004F4
:00424C05 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424C08 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424C09 FF1510D64B00            Call dword ptr [004BD610]
:00424C0F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424C10 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424C16 6A0A                    push 0000000A
:00424C18 8D55E0                  lea edx, dword ptr [ebp-20]
:00424C1B 52                      push edx
:00424C1C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424C1F E896D2FDFF              call 00401EBA
:00424C24 25FF000000              and eax, 000000FF
:00424C29 50                      push eax
:00424C2A E891590400              call 0046A5C0
:00424C2F 83C40C                  add esp, 0000000C
:00424C32 50                      push eax
:00424C33 68F5040000              push 000004F5
:00424C38 8B4508                  mov eax, dword ptr [ebp+08]
:00424C3B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424C3C FF1510D64B00            Call dword ptr [004BD610]
:00424C42 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424C43 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424C49 6A0A                    push 0000000A
:00424C4B 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00424C4E 51                      push ecx
:00424C4F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424C52 E860D1FDFF              call 00401DB7
:00424C57 50                      push eax
:00424C58 E863590400              call 0046A5C0
:00424C5D 83C40C                  add esp, 0000000C
:00424C60 50                      push eax
:00424C61 68FC040000              push 000004FC
:00424C66 8B5508                  mov edx, dword ptr [ebp+08]
:00424C69 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424C6A FF1510D64B00            Call dword ptr [004BD610]
:00424C70 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424C71 FF1514D64B00            Call dword ptr [004BD614]
:00424C77 E9EE010000              jmp 00424E6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424A44(C)
|
:00424C7C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424C7F E880E4FDFF              call 00403104
:00424C84 50                      push eax
:00424C85 68C8040000              push 000004C8
:00424C8A 8B4508                  mov eax, dword ptr [ebp+08]
:00424C8D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424C8E FF1510D64B00            Call dword ptr [004BD610]
:00424C94 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424C95 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424C9B 6A0A                    push 0000000A
:00424C9D 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00424CA0 51                      push ecx
:00424CA1 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424CA4 E8F7B1FEFF              call 0040FEA0
:00424CA9 25FF000000              and eax, 000000FF
:00424CAE 50                      push eax
:00424CAF E80C590400              call 0046A5C0
:00424CB4 83C40C                  add esp, 0000000C
:00424CB7 50                      push eax
:00424CB8 68CB040000              push 000004CB
:00424CBD 8B5508                  mov edx, dword ptr [ebp+08]
:00424CC0 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424CC1 FF1510D64B00            Call dword ptr [004BD610]
:00424CC7 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424CC8 FF1514D64B00            Call dword ptr [004BD614]
:00424CCE 8B45D8                  mov eax, dword ptr [ebp-28]
:00424CD1 50                      push eax
:00424CD2 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00424CD5 51                      push ecx

* Possible StringData Ref from Data Obj ->"%u/%u"
                                  |
:00424CD6 68B8CE4700              push 0047CEB8
:00424CDB 8D55E0                  lea edx, dword ptr [ebp-20]
:00424CDE 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00424CDF FF1504D74B00            Call dword ptr [004BD704]
:00424CE5 83C410                  add esp, 00000010
:00424CE8 8D45E0                  lea eax, dword ptr [ebp-20]
:00424CEB 50                      push eax
:00424CEC 68D4040000              push 000004D4
:00424CF1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424CF4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424CF5 FF1510D64B00            Call dword ptr [004BD610]
:00424CFB 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424CFC FF1514D64B00            Call dword ptr [004BD614]
:00424D02 8B55D4                  mov edx, dword ptr [ebp-2C]
:00424D05 52                      push edx
:00424D06 8B45D4                  mov eax, dword ptr [ebp-2C]
:00424D09 50                      push eax

* Possible StringData Ref from Data Obj ->"%u/%u"
                                  |
:00424D0A 68C0CE4700              push 0047CEC0
:00424D0F 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00424D12 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00424D13 FF1504D74B00            Call dword ptr [004BD704]
:00424D19 83C410                  add esp, 00000010
:00424D1C 8D55E0                  lea edx, dword ptr [ebp-20]
:00424D1F 52                      push edx
:00424D20 68D5040000              push 000004D5
:00424D25 8B4508                  mov eax, dword ptr [ebp+08]
:00424D28 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424D29 FF1510D64B00            Call dword ptr [004BD610]
:00424D2F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424D30 FF1514D64B00            Call dword ptr [004BD614]

* Possible StringData Ref from Data Obj ->"0/100"
                                  |
:00424D36 68C8CE4700              push 0047CEC8
:00424D3B 68D6040000              push 000004D6
:00424D40 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424D43 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424D44 FF1510D64B00            Call dword ptr [004BD610]
:00424D4A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424D4B FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424D51 6A0A                    push 0000000A
:00424D53 8D55E0                  lea edx, dword ptr [ebp-20]
:00424D56 52                      push edx
:00424D57 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424D5A E8BFCFFDFF              call 00401D1E
:00424D5F 50                      push eax
:00424D60 E85B580400              call 0046A5C0
:00424D65 83C40C                  add esp, 0000000C
:00424D68 50                      push eax
:00424D69 68E3040000              push 000004E3
:00424D6E 8B4508                  mov eax, dword ptr [ebp+08]
:00424D71 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424D72 FF1510D64B00            Call dword ptr [004BD610]
:00424D78 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424D79 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424D7F 6A0A                    push 0000000A
:00424D81 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00424D84 51                      push ecx
:00424D85 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424D88 E8C1D0FDFF              call 00401E4E
:00424D8D 50                      push eax
:00424D8E E82D580400              call 0046A5C0
:00424D93 83C40C                  add esp, 0000000C
:00424D96 50                      push eax
:00424D97 68E6040000              push 000004E6
:00424D9C 8B5508                  mov edx, dword ptr [ebp+08]
:00424D9F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424DA0 FF1510D64B00            Call dword ptr [004BD610]
:00424DA6 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424DA7 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424DAD 6A0A                    push 0000000A
:00424DAF 8D45E0                  lea eax, dword ptr [ebp-20]
:00424DB2 50                      push eax
:00424DB3 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424DB6 E8C9CFFDFF              call 00401D84
:00424DBB 50                      push eax
:00424DBC E8FF570400              call 0046A5C0
:00424DC1 83C40C                  add esp, 0000000C
:00424DC4 50                      push eax
:00424DC5 68E7040000              push 000004E7
:00424DCA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424DCD 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424DCE FF1510D64B00            Call dword ptr [004BD610]
:00424DD4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424DD5 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424DDB 6A0A                    push 0000000A
:00424DDD 8D55E0                  lea edx, dword ptr [ebp-20]
:00424DE0 52                      push edx
:00424DE1 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424DE4 E868CFFDFF              call 00401D51
:00424DE9 50                      push eax
:00424DEA E8D1570400              call 0046A5C0
:00424DEF 83C40C                  add esp, 0000000C
:00424DF2 50                      push eax
:00424DF3 68EA040000              push 000004EA
:00424DF8 8B4508                  mov eax, dword ptr [ebp+08]
:00424DFB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424DFC FF1510D64B00            Call dword ptr [004BD610]
:00424E02 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424E03 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424E09 6A0A                    push 0000000A
:00424E0B 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00424E0E 51                      push ecx
:00424E0F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424E12 E8A3D0FDFF              call 00401EBA
:00424E17 25FF000000              and eax, 000000FF
:00424E1C 50                      push eax
:00424E1D E89E570400              call 0046A5C0
:00424E22 83C40C                  add esp, 0000000C
:00424E25 50                      push eax
:00424E26 68EB040000              push 000004EB
:00424E2B 8B5508                  mov edx, dword ptr [ebp+08]
:00424E2E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424E2F FF1510D64B00            Call dword ptr [004BD610]
:00424E35 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424E36 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424E3C 6A0A                    push 0000000A
:00424E3E 8D45E0                  lea eax, dword ptr [ebp-20]
:00424E41 50                      push eax
:00424E42 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00424E45 E86DCFFDFF              call 00401DB7
:00424E4A 50                      push eax
:00424E4B E870570400              call 0046A5C0
:00424E50 83C40C                  add esp, 0000000C
:00424E53 50                      push eax
:00424E54 68F7040000              push 000004F7
:00424E59 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424E5C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424E5D FF1510D64B00            Call dword ptr [004BD610]
:00424E63 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00424E64 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424C77(U)
|
:00424E6A 8BE5                    mov esp, ebp
:00424E6C 5D                      pop ebp
:00424E6D C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00422139   , :004221C0   , :004221D2   , :00427923   , :00427D76   
|:00428F5A   , :00428F6C   , :0042A7DD   , :0042A7F5   
|
:00424E70 55                      push ebp
:00424E71 8BEC                    mov ebp, esp
:00424E73 81EC80000000            sub esp, 00000080
:00424E79 894D80                  mov dword ptr [ebp-80], ecx
:00424E7C 837D0C08                cmp dword ptr [ebp+0C], 00000008
:00424E80 742A                    je 00424EAC
:00424E82 6A00                    push 00000000
:00424E84 6A00                    push 00000000
:00424E86 68F0000000              push 000000F0

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:04F8, "Static"
                                  |
:00424E8B 68F8040000              push 000004F8
:00424E90 8B4508                  mov eax, dword ptr [ebp+08]
:00424E93 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424E94 FF1510D64B00            Call dword ptr [004BD610]
:00424E9A 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00424E9B FF1504D64B00            Call dword ptr [004BD604]
:00424EA1 85C0                    test eax, eax
:00424EA3 7407                    je 00424EAC
:00424EA5 33C0                    xor eax, eax
:00424EA7 E947010000              jmp 00424FF3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424E80(C), :00424EA3(C)
|
:00424EAC 6A00                    push 00000000
:00424EAE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424EB1 51                      push ecx
:00424EB2 E8C5BCFFFF              call 00420B7C
:00424EB7 83C408                  add esp, 00000008

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:00424EBA 6A65                    push 00000065
:00424EBC 6A00                    push 00000000
:00424EBE 8D5590                  lea edx, dword ptr [ebp-70]
:00424EC1 52                      push edx
:00424EC2 E809AC0400              call 0046FAD0
:00424EC7 83C40C                  add esp, 0000000C
:00424ECA 8B4510                  mov eax, dword ptr [ebp+10]
:00424ECD 50                      push eax
:00424ECE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00424ED1 51                      push ecx
:00424ED2 8D5590                  lea edx, dword ptr [ebp-70]
:00424ED5 52                      push edx
:00424ED6 E81E010000              call 00424FF9
:00424EDB 83C40C                  add esp, 0000000C
:00424EDE 85C0                    test eax, eax
:00424EE0 751A                    jne 00424EFC
:00424EE2 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"OΪ̵wЪѾleq"
                                  |
:00424EE4 68D0CE4700              push 0047CED0
:00424EE9 8B4508                  mov eax, dword ptr [ebp+08]
:00424EEC 50                      push eax
:00424EED E87AEBFFFF              call 00423A6C
:00424EF2 83C40C                  add esp, 0000000C
:00424EF5 33C0                    xor eax, eax
:00424EF7 E9F7000000              jmp 00424FF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424EE0(C)
|
:00424EFC 817D8038464900          cmp dword ptr [ebp-80], 00494638
:00424F03 750E                    jne 00424F13

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00424F05 6A0A                    push 0000000A
:00424F07 B9F8544B00              mov ecx, 004B54F8
:00424F0C E809460400              call 0046951A
:00424F11 EB0C                    jmp 00424F1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424F03(C)
|
:00424F13 6A0B                    push 0000000B
:00424F15 B9F8544B00              mov ecx, 004B54F8
:00424F1A E8FB450400              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424F11(U)
|
:00424F1F 817D8038464900          cmp dword ptr [ebp-80], 00494638
:00424F26 751D                    jne 00424F45
:00424F28 6A01                    push 00000001
:00424F2A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424F2D 51                      push ecx
:00424F2E E88B100000              call 00425FBE
:00424F33 83C408                  add esp, 00000008
:00424F36 B938464900              mov ecx, 00494638
:00424F3B E8C0E3FDFF              call 00403300
:00424F40 8945F8                  mov dword ptr [ebp-08], eax
:00424F43 EB0D                    jmp 00424F52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424F26(C)
|
:00424F45 B9D0454900              mov ecx, 004945D0
:00424F4A E8B1E3FDFF              call 00403300
:00424F4F 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424F43(U)
|
:00424F52 6A00                    push 00000000
:00424F54 8D4D84                  lea ecx, dword ptr [ebp-7C]
:00424F57 E834930000              call 0042E290
:00424F5C 8B55F8                  mov edx, dword ptr [ebp-08]
:00424F5F 52                      push edx
:00424F60 8D4D84                  lea ecx, dword ptr [ebp-7C]
:00424F63 E8F88E0000              call 0042DE60
:00424F68 8D4590                  lea eax, dword ptr [ebp-70]
:00424F6B 50                      push eax
:00424F6C 8D4D84                  lea ecx, dword ptr [ebp-7C]
:00424F6F E8FC920000              call 0042E270
:00424F74 8D4D84                  lea ecx, dword ptr [ebp-7C]
:00424F77 51                      push ecx
:00424F78 68F03B4200              push 00423BF0
:00424F7D 8B5508                  mov edx, dword ptr [ebp+08]
:00424F80 52                      push edx
:00424F81 681E010000              push 0000011E
:00424F86 A1A8554B00              mov eax, dword ptr [004B55A8]
:00424F8B 50                      push eax

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00424F8C FF15DCD64B00            Call dword ptr [004BD6DC]
:00424F92 8945FC                  mov dword ptr [ebp-04], eax
:00424F95 6A01                    push 00000001
:00424F97 E81FA60000              call 0042F5BB
:00424F9C 83C404                  add esp, 00000004
:00424F9F E82CA60000              call 0042F5D0
:00424FA4 6A00                    push 00000000
:00424FA6 6A00                    push 00000000
:00424FA8 68F0000000              push 000000F0
:00424FAD 68C5040000              push 000004C5
:00424FB2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424FB5 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00424FB6 FF15D4D54B00            Call dword ptr [004BD5D4]
:00424FBC 85C0                    test eax, eax
:00424FBE 7418                    je 00424FD8
:00424FC0 6A00                    push 00000000
:00424FC2 687B040000              push 0000047B
:00424FC7 8B5508                  mov edx, dword ptr [ebp+08]
:00424FCA 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00424FCB FF1510D64B00            Call dword ptr [004BD610]
:00424FD1 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00424FD2 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00424FBE(C)
|
:00424FD8 6A01                    push 00000001
:00424FDA 8B4508                  mov eax, dword ptr [ebp+08]
:00424FDD 50                      push eax
:00424FDE E899BBFFFF              call 00420B7C
:00424FE3 83C408                  add esp, 00000008
:00424FE6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00424FE9 51                      push ecx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00424FEA FF15FCD54B00            Call dword ptr [004BD5FC]
:00424FF0 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00424EA7(U), :00424EF7(U)
|
:00424FF3 8BE5                    mov esp, ebp
:00424FF5 5D                      pop ebp
:00424FF6 C20C00                  ret 000C



* Referenced by a CALL at Address:
|:00424ED6   
|
:00424FF9 55                      push ebp
:00424FFA 8BEC                    mov ebp, esp
:00424FFC 51                      push ecx
:00424FFD 8B450C                  mov eax, dword ptr [ebp+0C]
:00425000 8945FC                  mov dword ptr [ebp-04], eax
:00425003 837DFC08                cmp dword ptr [ebp-04], 00000008
:00425007 0F8794000000            ja 004250A1
:0042500D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425010 FF248DA7504200          jmp dword ptr [4*ecx+004250A7]
:00425017 8B5508                  mov edx, dword ptr [ebp+08]
:0042501A 52                      push edx
:0042501B E8AB000000              call 004250CB
:00425020 83C404                  add esp, 00000004
:00425023 EB7E                    jmp 004250A3
:00425025 8B4508                  mov eax, dword ptr [ebp+08]
:00425028 50                      push eax
:00425029 E8B0020000              call 004252DE
:0042502E 83C404                  add esp, 00000004
:00425031 EB70                    jmp 004250A3
:00425033 8B4D10                  mov ecx, dword ptr [ebp+10]
:00425036 51                      push ecx
:00425037 8B5508                  mov edx, dword ptr [ebp+08]
:0042503A 52                      push edx
:0042503B E820040000              call 00425460
:00425040 83C408                  add esp, 00000008
:00425043 EB5E                    jmp 004250A3
:00425045 8B4510                  mov eax, dword ptr [ebp+10]
:00425048 50                      push eax
:00425049 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042504C 51                      push ecx
:0042504D E8A3060000              call 004256F5
:00425052 83C408                  add esp, 00000008
:00425055 EB4C                    jmp 004250A3
:00425057 8B5508                  mov edx, dword ptr [ebp+08]
:0042505A 52                      push edx
:0042505B E85E080000              call 004258BE
:00425060 83C404                  add esp, 00000004
:00425063 EB3E                    jmp 004250A3
:00425065 8B4508                  mov eax, dword ptr [ebp+08]
:00425068 50                      push eax
:00425069 E8C00A0000              call 00425B2E
:0042506E 83C404                  add esp, 00000004
:00425071 EB30                    jmp 004250A3
:00425073 8B4D08                  mov ecx, dword ptr [ebp+08]
:00425076 51                      push ecx
:00425077 E8410B0000              call 00425BBD
:0042507C 83C404                  add esp, 00000004
:0042507F EB22                    jmp 004250A3
:00425081 8B5508                  mov edx, dword ptr [ebp+08]
:00425084 52                      push edx
:00425085 E8290D0000              call 00425DB3
:0042508A 83C404                  add esp, 00000004
:0042508D EB14                    jmp 004250A3
:0042508F 8B4510                  mov eax, dword ptr [ebp+10]
:00425092 50                      push eax
:00425093 8B4D08                  mov ecx, dword ptr [ebp+08]
:00425096 51                      push ecx
:00425097 E8AC0D0000              call 00425E48
:0042509C 83C408                  add esp, 00000008
:0042509F EB02                    jmp 004250A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425007(C)
|
:004250A1 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425023(U), :00425031(U), :00425043(U), :00425055(U), :00425063(U)
|:00425071(U), :0042507F(U), :0042508D(U), :0042509F(U)
|
:004250A3 8BE5                    mov esp, ebp
:004250A5 5D                      pop ebp
:004250A6 C3                      ret



:004250A7 17504200                DWORD 00425017
:004250AB 25504200                DWORD 00425025
:004250AF 73504200                DWORD 00425073
:004250B3 65504200                DWORD 00425065
:004250B7 45504200                DWORD 00425045
:004250BB 33504200                DWORD 00425033
:004250BF 57504200                DWORD 00425057
:004250C3 81504200                DWORD 00425081
:004250C7 8F504200                DWORD 0042508F



* Referenced by a CALL at Address:
|:0042501B   
|
:004250CB 55                      push ebp
:004250CC 8BEC                    mov ebp, esp
:004250CE 51                      push ecx
:004250CF 6A00                    push 00000000
:004250D1 E820000000              call 004250F6
:004250D6 83C404                  add esp, 00000004
:004250D9 668945FC                mov word ptr [ebp-04], ax
:004250DD 8B45FC                  mov eax, dword ptr [ebp-04]
:004250E0 25FFFF0000              and eax, 0000FFFF
:004250E5 50                      push eax
:004250E6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004250E9 51                      push ecx
:004250EA E884E5FDFF              call 00403673
:004250EF 83C408                  add esp, 00000008
:004250F2 8BE5                    mov esp, ebp
:004250F4 5D                      pop ebp
:004250F5 C3                      ret



* Referenced by a CALL at Address:
|:004250D1   
|
:004250F6 55                      push ebp
:004250F7 8BEC                    mov ebp, esp
:004250F9 83EC14                  sub esp, 00000014
:004250FC 53                      push ebx
:004250FD 56                      push esi
:004250FE B938464900              mov ecx, 00494638
:00425103 E8F8E1FDFF              call 00403300
:00425108 8945EC                  mov dword ptr [ebp-14], eax
:0042510B B9D0454900              mov ecx, 004945D0
:00425110 E8EBE1FDFF              call 00403300
:00425115 8945F0                  mov dword ptr [ebp-10], eax
:00425118 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042511B 6BC950                  imul ecx, 00000050
:0042511E 81C1787F4900            add ecx, 00497F78
:00425124 E877E0FDFF              call 004031A0
:00425129 8845F8                  mov byte ptr [ebp-08], al
:0042512C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042512F 6BC950                  imul ecx, 00000050
:00425132 81C1787F4900            add ecx, 00497F78
:00425138 E863E0FDFF              call 004031A0
:0042513D 8845FC                  mov byte ptr [ebp-04], al
:00425140 8B45EC                  mov eax, dword ptr [ebp-14]
:00425143 50                      push eax
:00425144 E840010000              call 00425289
:00425149 83C404                  add esp, 00000004
:0042514C 85C0                    test eax, eax
:0042514E 740D                    je 0042515D
:00425150 668B4D08                mov cx, word ptr [ebp+08]
:00425154 66894DF4                mov word ptr [ebp-0C], cx
:00425158 E9E6000000              jmp 00425243

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042514E(C)
|
:0042515D 8B55EC                  mov edx, dword ptr [ebp-14]
:00425160 52                      push edx
:00425161 E83D010000              call 004252A3
:00425166 83C404                  add esp, 00000004
:00425169 85C0                    test eax, eax
:0042516B 740F                    je 0042517C
:0042516D 8B4508                  mov eax, dword ptr [ebp+08]
:00425170 83C003                  add eax, 00000003
:00425173 668945F4                mov word ptr [ebp-0C], ax
:00425177 E9C7000000              jmp 00425243

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042516B(C)
|
:0042517C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042517F 81E1FF000000            and ecx, 000000FF
:00425185 83F90E                  cmp ecx, 0000000E
:00425188 740E                    je 00425198
:0042518A 8B55F8                  mov edx, dword ptr [ebp-08]
:0042518D 81E2FF000000            and edx, 000000FF
:00425193 83FA0F                  cmp edx, 0000000F
:00425196 750F                    jne 004251A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425188(C)
|
:00425198 8B4508                  mov eax, dword ptr [ebp+08]
:0042519B 83C006                  add eax, 00000006
:0042519E 668945F4                mov word ptr [ebp-0C], ax
:004251A2 E99C000000              jmp 00425243

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425196(C)
|
:004251A7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004251AA 81E1FF000000            and ecx, 000000FF
:004251B0 83F910                  cmp ecx, 00000010
:004251B3 740E                    je 004251C3
:004251B5 8B55F8                  mov edx, dword ptr [ebp-08]
:004251B8 81E2FF000000            and edx, 000000FF
:004251BE 83FA11                  cmp edx, 00000011
:004251C1 750C                    jne 004251CF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004251B3(C)
|
:004251C3 8B4508                  mov eax, dword ptr [ebp+08]
:004251C6 83C009                  add eax, 00000009
:004251C9 668945F4                mov word ptr [ebp-0C], ax
:004251CD EB74                    jmp 00425243

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004251C1(C)
|
:004251CF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004251D2 81E1FF000000            and ecx, 000000FF
:004251D8 83F912                  cmp ecx, 00000012
:004251DB 740E                    je 004251EB
:004251DD 8B55F8                  mov edx, dword ptr [ebp-08]
:004251E0 81E2FF000000            and edx, 000000FF
:004251E6 83FA13                  cmp edx, 00000013
:004251E9 750C                    jne 004251F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004251DB(C)
|
:004251EB 8B4508                  mov eax, dword ptr [ebp+08]
:004251EE 83C00C                  add eax, 0000000C
:004251F1 668945F4                mov word ptr [ebp-0C], ax
:004251F5 EB4C                    jmp 00425243

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004251E9(C)
|
:004251F7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004251FA 6BC950                  imul ecx, 00000050
:004251FD 81C1787F4900            add ecx, 00497F78
:00425203 E898ACFEFF              call 0040FEA0
:00425208 8AD8                    mov bl, al
:0042520A 81E3FF000000            and ebx, 000000FF
:00425210 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00425213 6BC950                  imul ecx, 00000050
:00425216 81C1787F4900            add ecx, 00497F78
:0042521C E87FACFEFF              call 0040FEA0
:00425221 25FF000000              and eax, 000000FF
:00425226 83C003                  add eax, 00000003
:00425229 3BD8                    cmp ebx, eax
:0042522B 7E0C                    jle 00425239
:0042522D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00425230 83C10F                  add ecx, 0000000F
:00425233 66894DF4                mov word ptr [ebp-0C], cx
:00425237 EB0A                    jmp 00425243

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042522B(C)
|
:00425239 8B5508                  mov edx, dword ptr [ebp+08]
:0042523C 83C212                  add edx, 00000012
:0042523F 668955F4                mov word ptr [ebp-0C], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425158(U), :00425177(U), :004251A2(U), :004251CD(U), :004251F5(U)
|:00425237(U)
|
:00425243 8B45FC                  mov eax, dword ptr [ebp-04]
:00425246 25FF000000              and eax, 000000FF
:0042524B 83F812                  cmp eax, 00000012
:0042524E 740E                    je 0042525E
:00425250 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425253 81E1FF000000            and ecx, 000000FF
:00425259 83F913                  cmp ecx, 00000013
:0042525C 750D                    jne 0042526B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042524E(C)
|
:0042525E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00425261 25FFFF0000              and eax, 0000FFFF
:00425266 83C002                  add eax, 00000002
:00425269 EB18                    jmp 00425283

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042525C(C)
|
:0042526B 8B75F4                  mov esi, dword ptr [ebp-0C]
:0042526E 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00425274 6A02                    push 00000002
:00425276 E835310500              call 004783B0
:0042527B 83C404                  add esp, 00000004
:0042527E 03F0                    add esi, eax
:00425280 668BC6                  mov ax, si

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425269(U)
|
:00425283 5E                      pop esi
:00425284 5B                      pop ebx
:00425285 8BE5                    mov esp, ebp
:00425287 5D                      pop ebp
:00425288 C3                      ret



* Referenced by a CALL at Addresses:
|:00425144   , :00425343   , :0042561E   , :00425A2F   , :00425C86   
|
:00425289 55                      push ebp
:0042528A 8BEC                    mov ebp, esp
:0042528C 837D0800                cmp dword ptr [ebp+08], 00000000
:00425290 7406                    je 00425298
:00425292 837D0802                cmp dword ptr [ebp+08], 00000002
:00425296 7507                    jne 0042529F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425290(C)
|
:00425298 B801000000              mov eax, 00000001
:0042529D EB02                    jmp 004252A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425296(C)
|
:0042529F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042529D(U)
|
:004252A1 5D                      pop ebp
:004252A2 C3                      ret



* Referenced by a CALL at Addresses:
|:00425161   , :00425360   , :0042563B   , :00425A4C   , :00425CA1   
|
:004252A3 55                      push ebp
:004252A4 8BEC                    mov ebp, esp
:004252A6 837D0801                cmp dword ptr [ebp+08], 00000001
:004252AA 7427                    je 004252D3
:004252AC 837D0803                cmp dword ptr [ebp+08], 00000003
:004252B0 7421                    je 004252D3
:004252B2 837D0805                cmp dword ptr [ebp+08], 00000005
:004252B6 741B                    je 004252D3
:004252B8 817D08B7000000          cmp dword ptr [ebp+08], 000000B7
:004252BF 7412                    je 004252D3
:004252C1 817D08B8000000          cmp dword ptr [ebp+08], 000000B8
:004252C8 7409                    je 004252D3
:004252CA 817D08B9000000          cmp dword ptr [ebp+08], 000000B9
:004252D1 7507                    jne 004252DA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004252AA(C), :004252B0(C), :004252B6(C), :004252BF(C), :004252C8(C)
|
:004252D3 B801000000              mov eax, 00000001
:004252D8 EB02                    jmp 004252DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004252D1(C)
|
:004252DA 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004252D8(U)
|
:004252DC 5D                      pop ebp
:004252DD C3                      ret



* Referenced by a CALL at Address:
|:00425029   
|
:004252DE 55                      push ebp
:004252DF 8BEC                    mov ebp, esp
:004252E1 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:004252E2 6A15                    push 00000015
:004252E4 E820000000              call 00425309
:004252E9 83C404                  add esp, 00000004
:004252EC 668945FC                mov word ptr [ebp-04], ax
:004252F0 8B45FC                  mov eax, dword ptr [ebp-04]
:004252F3 25FFFF0000              and eax, 0000FFFF
:004252F8 50                      push eax
:004252F9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004252FC 51                      push ecx
:004252FD E871E3FDFF              call 00403673
:00425302 83C408                  add esp, 00000008
:00425305 8BE5                    mov esp, ebp
:00425307 5D                      pop ebp
:00425308 C3                      ret



* Referenced by a CALL at Address:
|:004252E4   
|
:00425309 55                      push ebp
:0042530A 8BEC                    mov ebp, esp
:0042530C 83EC10                  sub esp, 00000010
:0042530F 53                      push ebx
:00425310 56                      push esi
:00425311 B938464900              mov ecx, 00494638
:00425316 E8E5DFFDFF              call 00403300
:0042531B 8945F0                  mov dword ptr [ebp-10], eax
:0042531E B9D0454900              mov ecx, 004945D0
:00425323 E8D8DFFDFF              call 00403300
:00425328 8945F4                  mov dword ptr [ebp-0C], eax
:0042532B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042532E 6BC950                  imul ecx, 00000050
:00425331 81C1787F4900            add ecx, 00497F78
:00425337 E864DEFDFF              call 004031A0
:0042533C 8845FC                  mov byte ptr [ebp-04], al
:0042533F 8B45F0                  mov eax, dword ptr [ebp-10]
:00425342 50                      push eax
:00425343 E841FFFFFF              call 00425289
:00425348 83C404                  add esp, 00000004
:0042534B 85C0                    test eax, eax
:0042534D 740D                    je 0042535C
:0042534F 668B4D08                mov cx, word ptr [ebp+08]
:00425353 66894DF8                mov word ptr [ebp-08], cx
:00425357 E9E6000000              jmp 00425442

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042534D(C)
|
:0042535C 8B55F0                  mov edx, dword ptr [ebp-10]
:0042535F 52                      push edx
:00425360 E83EFFFFFF              call 004252A3
:00425365 83C404                  add esp, 00000004
:00425368 85C0                    test eax, eax
:0042536A 740F                    je 0042537B
:0042536C 8B4508                  mov eax, dword ptr [ebp+08]
:0042536F 83C002                  add eax, 00000002
:00425372 668945F8                mov word ptr [ebp-08], ax
:00425376 E9C7000000              jmp 00425442

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042536A(C)
|
:0042537B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042537E 81E1FF000000            and ecx, 000000FF
:00425384 83F90E                  cmp ecx, 0000000E
:00425387 740E                    je 00425397
:00425389 8B55FC                  mov edx, dword ptr [ebp-04]
:0042538C 81E2FF000000            and edx, 000000FF
:00425392 83FA0F                  cmp edx, 0000000F
:00425395 750F                    jne 004253A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425387(C)
|
:00425397 8B4508                  mov eax, dword ptr [ebp+08]
:0042539A 83C004                  add eax, 00000004
:0042539D 668945F8                mov word ptr [ebp-08], ax
:004253A1 E99C000000              jmp 00425442

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425395(C)
|
:004253A6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004253A9 81E1FF000000            and ecx, 000000FF
:004253AF 83F910                  cmp ecx, 00000010
:004253B2 740E                    je 004253C2
:004253B4 8B55FC                  mov edx, dword ptr [ebp-04]
:004253B7 81E2FF000000            and edx, 000000FF
:004253BD 83FA11                  cmp edx, 00000011
:004253C0 750C                    jne 004253CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004253B2(C)
|
:004253C2 8B4508                  mov eax, dword ptr [ebp+08]
:004253C5 83C006                  add eax, 00000006
:004253C8 668945F8                mov word ptr [ebp-08], ax
:004253CC EB74                    jmp 00425442

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004253C0(C)
|
:004253CE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004253D1 81E1FF000000            and ecx, 000000FF
:004253D7 83F912                  cmp ecx, 00000012
:004253DA 740E                    je 004253EA
:004253DC 8B55FC                  mov edx, dword ptr [ebp-04]
:004253DF 81E2FF000000            and edx, 000000FF
:004253E5 83FA13                  cmp edx, 00000013
:004253E8 750C                    jne 004253F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004253DA(C)
|
:004253EA 8B4508                  mov eax, dword ptr [ebp+08]
:004253ED 83C008                  add eax, 00000008
:004253F0 668945F8                mov word ptr [ebp-08], ax
:004253F4 EB4C                    jmp 00425442

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004253E8(C)
|
:004253F6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004253F9 6BC950                  imul ecx, 00000050
:004253FC 81C1787F4900            add ecx, 00497F78
:00425402 E899AAFEFF              call 0040FEA0
:00425407 8AD8                    mov bl, al
:00425409 81E3FF000000            and ebx, 000000FF
:0042540F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00425412 6BC950                  imul ecx, 00000050
:00425415 81C1787F4900            add ecx, 00497F78
:0042541B E880AAFEFF              call 0040FEA0
:00425420 25FF000000              and eax, 000000FF
:00425425 83C003                  add eax, 00000003
:00425428 3BD8                    cmp ebx, eax
:0042542A 7E0C                    jle 00425438
:0042542C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042542F 83C10A                  add ecx, 0000000A
:00425432 66894DF8                mov word ptr [ebp-08], cx
:00425436 EB0A                    jmp 00425442

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042542A(C)
|
:00425438 8B5508                  mov edx, dword ptr [ebp+08]
:0042543B 83C20C                  add edx, 0000000C
:0042543E 668955F8                mov word ptr [ebp-08], dx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425357(U), :00425376(U), :004253A1(U), :004253CC(U), :004253F4(U)
|:00425436(U)
|
:00425442 8B75F8                  mov esi, dword ptr [ebp-08]
:00425445 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042544B 6A02                    push 00000002
:0042544D E85E2F0500              call 004783B0
:00425452 83C404                  add esp, 00000004
:00425455 03F0                    add esi, eax
:00425457 668BC6                  mov ax, si
:0042545A 5E                      pop esi
:0042545B 5B                      pop ebx
:0042545C 8BE5                    mov esp, ebp
:0042545E 5D                      pop ebp
:0042545F C3                      ret



* Referenced by a CALL at Address:
|:0042503B   
|
:00425460 55                      push ebp
:00425461 8BEC                    mov ebp, esp
:00425463 81ECE0000000            sub esp, 000000E0
:00425469 B938464900              mov ecx, 00494638
:0042546E E88DDEFDFF              call 00403300
:00425473 8BC8                    mov ecx, eax
:00425475 6BC950                  imul ecx, 00000050
:00425478 81C1787F4900            add ecx, 00497F78
:0042547E E81DDDFDFF              call 004031A0
:00425483 8845FC                  mov byte ptr [ebp-04], al
:00425486 66C745F80000            mov [ebp-08], 0000
:0042548C 837D0C28                cmp dword ptr [ebp+0C], 00000028
:00425490 7C2B                    jl 004254BD
:00425492 8B45FC                  mov eax, dword ptr [ebp-04]
:00425495 25FF000000              and eax, 000000FF
:0042549A 83F812                  cmp eax, 00000012
:0042549D 740E                    je 004254AD
:0042549F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004254A2 81E1FF000000            and ecx, 000000FF
:004254A8 83F913                  cmp ecx, 00000013
:004254AB 7508                    jne 004254B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042549D(C)
|
:004254AD 66C745F82C00            mov [ebp-08], 002C
:004254B3 EB06                    jmp 004254BB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004254AB(C)
|
:004254B5 66C745F82E00            mov [ebp-08], 002E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004254B3(U)
|
:004254BB EB0E                    jmp 004254CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425490(C)
|
:004254BD 6A23                    push 00000023
:004254BF E821010000              call 004255E5
:004254C4 83C404                  add esp, 00000004
:004254C7 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004254BB(U)
|
:004254CB 8B55F8                  mov edx, dword ptr [ebp-08]
:004254CE 81E2FFFF0000            and edx, 0000FFFF
:004254D4 52                      push edx
:004254D5 8B4508                  mov eax, dword ptr [ebp+08]
:004254D8 50                      push eax
:004254D9 E895E1FDFF              call 00403673
:004254DE 83C408                  add esp, 00000008
:004254E1 85C0                    test eax, eax
:004254E3 0F84F6000000            je 004255DF

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:004254E9 6A65                    push 00000065
:004254EB 6A00                    push 00000000
:004254ED 8D4D88                  lea ecx, dword ptr [ebp-78]
:004254F0 51                      push ecx
:004254F1 E8DAA50400              call 0046FAD0
:004254F6 83C40C                  add esp, 0000000C

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:004254F9 6A65                    push 00000065
:004254FB 6A00                    push 00000000
:004254FD 8D9520FFFFFF            lea edx, dword ptr [ebp+FFFFFF20]
:00425503 52                      push edx
:00425504 E8C7A50400              call 0046FAD0
:00425509 83C40C                  add esp, 0000000C
:0042550C 8B4508                  mov eax, dword ptr [ebp+08]
:0042550F 8945F4                  mov dword ptr [ebp-0C], eax
:00425512 C745F000000000          mov [ebp-10], 00000000
:00425519 EB09                    jmp 00425524

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042554C(U)
|
:0042551B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042551E 83C101                  add ecx, 00000001
:00425521 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425519(U)
|
:00425524 8B55F4                  mov edx, dword ptr [ebp-0C]
:00425527 0FBE02                  movsx eax, byte ptr [edx]
:0042552A 83F825                  cmp eax, 00000025
:0042552D 741F                    je 0042554E
:0042552F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00425532 8B55F4                  mov edx, dword ptr [ebp-0C]
:00425535 8A02                    mov al, byte ptr [edx]
:00425537 88440D88                mov byte ptr [ebp+ecx-78], al
:0042553B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042553E 83C101                  add ecx, 00000001
:00425541 894DF4                  mov dword ptr [ebp-0C], ecx
:00425544 837DF064                cmp dword ptr [ebp-10], 00000064
:00425548 7E02                    jle 0042554C
:0042554A EB02                    jmp 0042554E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425548(C)
|
:0042554C EBCD                    jmp 0042551B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042552D(C), :0042554A(U)
|
:0042554E 8B55F4                  mov edx, dword ptr [ebp-0C]
:00425551 83C201                  add edx, 00000001
:00425554 8955F4                  mov dword ptr [ebp-0C], edx
:00425557 C745F000000000          mov [ebp-10], 00000000
:0042555E EB09                    jmp 00425569

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425593(U)
|
:00425560 8B45F0                  mov eax, dword ptr [ebp-10]
:00425563 83C001                  add eax, 00000001
:00425566 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042555E(U)
|
:00425569 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042556C 0FBE11                  movsx edx, byte ptr [ecx]
:0042556F 85D2                    test edx, edx
:00425571 7422                    je 00425595
:00425573 8B45F0                  mov eax, dword ptr [ebp-10]
:00425576 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00425579 8A11                    mov dl, byte ptr [ecx]
:0042557B 88940520FFFFFF          mov byte ptr [ebp+eax-000000E0], dl
:00425582 8B45F4                  mov eax, dword ptr [ebp-0C]
:00425585 83C001                  add eax, 00000001
:00425588 8945F4                  mov dword ptr [ebp-0C], eax
:0042558B 837DF064                cmp dword ptr [ebp-10], 00000064
:0042558F 7E02                    jle 00425593
:00425591 EB02                    jmp 00425595

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042558F(C)
|
:00425593 EBCB                    jmp 00425560

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425571(C), :00425591(U)
|
:00425595 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00425598 6BC931                  imul ecx, 00000031
:0042559B 81C1001D4B00            add ecx, 004B1D00
:004255A1 E84A01FEFF              call 004056F0
:004255A6 50                      push eax
:004255A7 8D4D88                  lea ecx, dword ptr [ebp-78]
:004255AA 51                      push ecx
:004255AB E8A02F0500              call 00478550
:004255B0 83C408                  add esp, 00000008
:004255B3 8D9520FFFFFF            lea edx, dword ptr [ebp+FFFFFF20]
:004255B9 52                      push edx
:004255BA 8D4588                  lea eax, dword ptr [ebp-78]
:004255BD 50                      push eax
:004255BE E88D2F0500              call 00478550
:004255C3 83C408                  add esp, 00000008

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:004255C6 6A65                    push 00000065
:004255C8 8D4D88                  lea ecx, dword ptr [ebp-78]
:004255CB 51                      push ecx
:004255CC 8B5508                  mov edx, dword ptr [ebp+08]
:004255CF 52                      push edx
:004255D0 E88B9F0400              call 0046F560
:004255D5 83C40C                  add esp, 0000000C
:004255D8 B801000000              mov eax, 00000001
:004255DD EB02                    jmp 004255E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004254E3(C)
|
:004255DF 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004255DD(U)
|
:004255E1 8BE5                    mov esp, ebp
:004255E3 5D                      pop ebp
:004255E4 C3                      ret



* Referenced by a CALL at Addresses:
|:004254BF   , :00425B87   , :00425B97   
|
:004255E5 55                      push ebp
:004255E6 8BEC                    mov ebp, esp
:004255E8 83EC10                  sub esp, 00000010
:004255EB 56                      push esi
:004255EC B938464900              mov ecx, 00494638
:004255F1 E80ADDFDFF              call 00403300
:004255F6 8945F0                  mov dword ptr [ebp-10], eax
:004255F9 B9D0454900              mov ecx, 004945D0
:004255FE E8FDDCFDFF              call 00403300
:00425603 8945F4                  mov dword ptr [ebp-0C], eax
:00425606 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00425609 6BC950                  imul ecx, 00000050
:0042560C 81C1787F4900            add ecx, 00497F78
:00425612 E889DBFDFF              call 004031A0
:00425617 8845FC                  mov byte ptr [ebp-04], al
:0042561A 8B45F0                  mov eax, dword ptr [ebp-10]
:0042561D 50                      push eax
:0042561E E866FCFFFF              call 00425289
:00425623 83C404                  add esp, 00000004
:00425626 85C0                    test eax, eax
:00425628 740D                    je 00425637
:0042562A 668B4D08                mov cx, word ptr [ebp+08]
:0042562E 66894DF8                mov word ptr [ebp-08], cx
:00425632 E9A1000000              jmp 004256D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425628(C)
|
:00425637 8B55F0                  mov edx, dword ptr [ebp-10]
:0042563A 52                      push edx
:0042563B E863FCFFFF              call 004252A3
:00425640 83C404                  add esp, 00000004
:00425643 85C0                    test eax, eax
:00425645 740F                    je 00425656
:00425647 8B4508                  mov eax, dword ptr [ebp+08]
:0042564A 83C002                  add eax, 00000002
:0042564D 668945F8                mov word ptr [ebp-08], ax
:00425651 E982000000              jmp 004256D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425645(C)
|
:00425656 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425659 81E1FF000000            and ecx, 000000FF
:0042565F 83F90E                  cmp ecx, 0000000E
:00425662 740E                    je 00425672
:00425664 8B55FC                  mov edx, dword ptr [ebp-04]
:00425667 81E2FF000000            and edx, 000000FF
:0042566D 83FA0F                  cmp edx, 0000000F
:00425670 750C                    jne 0042567E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425662(C)
|
:00425672 8B4508                  mov eax, dword ptr [ebp+08]
:00425675 83C004                  add eax, 00000004
:00425678 668945F8                mov word ptr [ebp-08], ax
:0042567C EB5A                    jmp 004256D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425670(C)
|
:0042567E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425681 81E1FF000000            and ecx, 000000FF
:00425687 83F910                  cmp ecx, 00000010
:0042568A 740E                    je 0042569A
:0042568C 8B55FC                  mov edx, dword ptr [ebp-04]
:0042568F 81E2FF000000            and edx, 000000FF
:00425695 83FA11                  cmp edx, 00000011
:00425698 750C                    jne 004256A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042568A(C)
|
:0042569A 8B4508                  mov eax, dword ptr [ebp+08]
:0042569D 83C006                  add eax, 00000006
:004256A0 668945F8                mov word ptr [ebp-08], ax
:004256A4 EB32                    jmp 004256D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425698(C)
|
:004256A6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004256A9 81E1FF000000            and ecx, 000000FF
:004256AF 83F912                  cmp ecx, 00000012
:004256B2 740E                    je 004256C2
:004256B4 8B55FC                  mov edx, dword ptr [ebp-04]
:004256B7 81E2FF000000            and edx, 000000FF
:004256BD 83FA13                  cmp edx, 00000013
:004256C0 750C                    jne 004256CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004256B2(C)
|
:004256C2 8B4508                  mov eax, dword ptr [ebp+08]
:004256C5 83C008                  add eax, 00000008
:004256C8 668945F8                mov word ptr [ebp-08], ax
:004256CC EB0A                    jmp 004256D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004256C0(C)
|
:004256CE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004256D1 83C10A                  add ecx, 0000000A
:004256D4 66894DF8                mov word ptr [ebp-08], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425632(U), :00425651(U), :0042567C(U), :004256A4(U), :004256CC(U)
|
:004256D8 8B75F8                  mov esi, dword ptr [ebp-08]
:004256DB 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004256E1 6A02                    push 00000002
:004256E3 E8C82C0500              call 004783B0
:004256E8 83C404                  add esp, 00000004
:004256EB 03F0                    add esi, eax
:004256ED 668BC6                  mov ax, si
:004256F0 5E                      pop esi
:004256F1 8BE5                    mov esp, ebp
:004256F3 5D                      pop ebp
:004256F4 C3                      ret



* Referenced by a CALL at Address:
|:0042504D   
|
:004256F5 55                      push ebp
:004256F6 8BEC                    mov ebp, esp
:004256F8 81ECE4000000            sub esp, 000000E4
:004256FE B9D0454900              mov ecx, 004945D0
:00425703 E8F8DBFDFF              call 00403300
:00425708 8945F4                  mov dword ptr [ebp-0C], eax
:0042570B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042570E 6BC950                  imul ecx, 00000050
:00425711 81C1787F4900            add ecx, 00497F78
:00425717 E884DAFDFF              call 004031A0
:0042571C 8845FC                  mov byte ptr [ebp-04], al
:0042571F 8B45FC                  mov eax, dword ptr [ebp-04]
:00425722 25FF000000              and eax, 000000FF
:00425727 83F80E                  cmp eax, 0000000E
:0042572A 740E                    je 0042573A
:0042572C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042572F 81E1FF000000            and ecx, 000000FF
:00425735 83F90F                  cmp ecx, 0000000F
:00425738 7508                    jne 00425742

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042572A(C)
|
:0042573A 66C745F82700            mov [ebp-08], 0027
:00425740 EB4D                    jmp 0042578F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425738(C)
|
:00425742 8B55FC                  mov edx, dword ptr [ebp-04]
:00425745 81E2FF000000            and edx, 000000FF
:0042574B 83FA10                  cmp edx, 00000010
:0042574E 740D                    je 0042575D
:00425750 8B45FC                  mov eax, dword ptr [ebp-04]
:00425753 25FF000000              and eax, 000000FF
:00425758 83F811                  cmp eax, 00000011
:0042575B 7508                    jne 00425765

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042574E(C)
|
:0042575D 66C745F82900            mov [ebp-08], 0029
:00425763 EB2A                    jmp 0042578F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042575B(C)
|
:00425765 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425768 81E1FF000000            and ecx, 000000FF
:0042576E 83F912                  cmp ecx, 00000012
:00425771 740E                    je 00425781
:00425773 8B55FC                  mov edx, dword ptr [ebp-04]
:00425776 81E2FF000000            and edx, 000000FF
:0042577C 83FA13                  cmp edx, 00000013
:0042577F 7508                    jne 00425789

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425771(C)
|
:00425781 66C745F82B00            mov [ebp-08], 002B
:00425787 EB06                    jmp 0042578F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042577F(C)
|
:00425789 66C745F82D00            mov [ebp-08], 002D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425740(U), :00425763(U), :00425787(U)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042578F 6A02                    push 00000002
:00425791 E81A2C0500              call 004783B0
:00425796 83C404                  add esp, 00000004
:00425799 668B4DF8                mov cx, word ptr [ebp-08]
:0042579D 6603C8                  add cx, ax
:004257A0 66894DF8                mov word ptr [ebp-08], cx
:004257A4 8B55F8                  mov edx, dword ptr [ebp-08]
:004257A7 81E2FFFF0000            and edx, 0000FFFF
:004257AD 52                      push edx
:004257AE 8B4508                  mov eax, dword ptr [ebp+08]
:004257B1 50                      push eax
:004257B2 E8BCDEFDFF              call 00403673
:004257B7 83C408                  add esp, 00000008
:004257BA 85C0                    test eax, eax
:004257BC 0F84F6000000            je 004258B8

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:004257C2 6A65                    push 00000065
:004257C4 6A00                    push 00000000
:004257C6 8D4D84                  lea ecx, dword ptr [ebp-7C]
:004257C9 51                      push ecx
:004257CA E801A30400              call 0046FAD0
:004257CF 83C40C                  add esp, 0000000C

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:004257D2 6A65                    push 00000065
:004257D4 6A00                    push 00000000
:004257D6 8D951CFFFFFF            lea edx, dword ptr [ebp+FFFFFF1C]
:004257DC 52                      push edx
:004257DD E8EEA20400              call 0046FAD0
:004257E2 83C40C                  add esp, 0000000C
:004257E5 8B4508                  mov eax, dword ptr [ebp+08]
:004257E8 8945F0                  mov dword ptr [ebp-10], eax
:004257EB C745EC00000000          mov [ebp-14], 00000000
:004257F2 EB09                    jmp 004257FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425825(U)
|
:004257F4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004257F7 83C101                  add ecx, 00000001
:004257FA 894DEC                  mov dword ptr [ebp-14], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004257F2(U)
|
:004257FD 8B55F0                  mov edx, dword ptr [ebp-10]
:00425800 0FBE02                  movsx eax, byte ptr [edx]
:00425803 83F825                  cmp eax, 00000025
:00425806 741F                    je 00425827
:00425808 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042580B 8B55F0                  mov edx, dword ptr [ebp-10]
:0042580E 8A02                    mov al, byte ptr [edx]
:00425810 88440D84                mov byte ptr [ebp+ecx-7C], al
:00425814 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00425817 83C101                  add ecx, 00000001
:0042581A 894DF0                  mov dword ptr [ebp-10], ecx
:0042581D 837DEC64                cmp dword ptr [ebp-14], 00000064
:00425821 7E02                    jle 00425825
:00425823 EB02                    jmp 00425827

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425821(C)
|
:00425825 EBCD                    jmp 004257F4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425806(C), :00425823(U)
|
:00425827 8B55F0                  mov edx, dword ptr [ebp-10]
:0042582A 83C201                  add edx, 00000001
:0042582D 8955F0                  mov dword ptr [ebp-10], edx
:00425830 C745EC00000000          mov [ebp-14], 00000000
:00425837 EB09                    jmp 00425842

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042586C(U)
|
:00425839 8B45EC                  mov eax, dword ptr [ebp-14]
:0042583C 83C001                  add eax, 00000001
:0042583F 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425837(U)
|
:00425842 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00425845 0FBE11                  movsx edx, byte ptr [ecx]
:00425848 85D2                    test edx, edx
:0042584A 7422                    je 0042586E
:0042584C 8B45EC                  mov eax, dword ptr [ebp-14]
:0042584F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00425852 8A11                    mov dl, byte ptr [ecx]
:00425854 8894051CFFFFFF          mov byte ptr [ebp+eax-000000E4], dl
:0042585B 8B45F0                  mov eax, dword ptr [ebp-10]
:0042585E 83C001                  add eax, 00000001
:00425861 8945F0                  mov dword ptr [ebp-10], eax
:00425864 837DEC64                cmp dword ptr [ebp-14], 00000064
:00425868 7E02                    jle 0042586C
:0042586A EB02                    jmp 0042586E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425868(C)
|
:0042586C EBCB                    jmp 00425839

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042584A(C), :0042586A(U)
|
:0042586E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00425871 6BC931                  imul ecx, 00000031
:00425874 81C1001D4B00            add ecx, 004B1D00
:0042587A E871FEFDFF              call 004056F0
:0042587F 50                      push eax
:00425880 8D4D84                  lea ecx, dword ptr [ebp-7C]
:00425883 51                      push ecx
:00425884 E8C72C0500              call 00478550
:00425889 83C408                  add esp, 00000008
:0042588C 8D951CFFFFFF            lea edx, dword ptr [ebp+FFFFFF1C]
:00425892 52                      push edx
:00425893 8D4584                  lea eax, dword ptr [ebp-7C]
:00425896 50                      push eax
:00425897 E8B42C0500              call 00478550
:0042589C 83C408                  add esp, 00000008

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:0042589F 6A65                    push 00000065
:004258A1 8D4D84                  lea ecx, dword ptr [ebp-7C]
:004258A4 51                      push ecx
:004258A5 8B5508                  mov edx, dword ptr [ebp+08]
:004258A8 52                      push edx
:004258A9 E8B29C0400              call 0046F560
:004258AE 83C40C                  add esp, 0000000C
:004258B1 B801000000              mov eax, 00000001
:004258B6 EB02                    jmp 004258BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004257BC(C)
|
:004258B8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004258B6(U)
|
:004258BA 8BE5                    mov esp, ebp
:004258BC 5D                      pop ebp
:004258BD C3                      ret



* Referenced by a CALL at Address:
|:0042505B   
|
:004258BE 55                      push ebp
:004258BF 8BEC                    mov ebp, esp
:004258C1 83EC18                  sub esp, 00000018
:004258C4 53                      push ebx
:004258C5 B938464900              mov ecx, 00494638
:004258CA E831DAFDFF              call 00403300
:004258CF 8945EC                  mov dword ptr [ebp-14], eax
:004258D2 B9D0454900              mov ecx, 004945D0
:004258D7 E824DAFDFF              call 00403300
:004258DC 8945F0                  mov dword ptr [ebp-10], eax
:004258DF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004258E2 6BC950                  imul ecx, 00000050
:004258E5 81C1787F4900            add ecx, 00497F78
:004258EB E8B0D8FDFF              call 004031A0
:004258F0 8845F8                  mov byte ptr [ebp-08], al
:004258F3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004258F6 6BC950                  imul ecx, 00000050
:004258F9 81C1787F4900            add ecx, 00497F78
:004258FF E89CD8FDFF              call 004031A0
:00425904 8845FC                  mov byte ptr [ebp-04], al
:00425907 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042590A 6BC950                  imul ecx, 00000050
:0042590D 81C1787F4900            add ecx, 00497F78
:00425913 E888A5FEFF              call 0040FEA0
:00425918 8AD8                    mov bl, al
:0042591A 81E3FF000000            and ebx, 000000FF
:00425920 83C303                  add ebx, 00000003
:00425923 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00425926 6BC950                  imul ecx, 00000050
:00425929 81C1787F4900            add ecx, 00497F78
:0042592F E86CA5FEFF              call 0040FEA0
:00425934 25FF000000              and eax, 000000FF
:00425939 3BD8                    cmp ebx, eax
:0042593B 7C65                    jl 004259A2
:0042593D 8B45F8                  mov eax, dword ptr [ebp-08]
:00425940 25FF000000              and eax, 000000FF
:00425945 85C0                    test eax, eax
:00425947 740E                    je 00425957
:00425949 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042594C 81E1FF000000            and ecx, 000000FF
:00425952 83F901                  cmp ecx, 00000001
:00425955 753B                    jne 00425992

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425947(C)
|
:00425957 8B55FC                  mov edx, dword ptr [ebp-04]
:0042595A 81E2FF000000            and edx, 000000FF
:00425960 8955E8                  mov dword ptr [ebp-18], edx
:00425963 8B45E8                  mov eax, dword ptr [ebp-18]
:00425966 83E80E                  sub eax, 0000000E
:00425969 8945E8                  mov dword ptr [ebp-18], eax
:0042596C 837DE80B                cmp dword ptr [ebp-18], 0000000B
:00425970 7718                    ja 0042598A
:00425972 8B55E8                  mov edx, dword ptr [ebp-18]
:00425975 33C9                    xor ecx, ecx
:00425977 8A8AD6594200            mov cl, byte ptr [edx+004259D6]
:0042597D FF248DCA594200          jmp dword ptr [4*ecx+004259CA]
:00425984 66C745F42F00            mov [ebp-0C], 002F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425970(C)
|
:0042598A 66C745F43000            mov [ebp-0C], 0030
:00425990 EB0E                    jmp 004259A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425955(C)
|
:00425992 6A2F                    push 0000002F
:00425994 E849000000              call 004259E2
:00425999 83C404                  add esp, 00000004
:0042599C 668945F4                mov word ptr [ebp-0C], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425990(U)
|
:004259A0 EB0E                    jmp 004259B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042593B(C)
|
:004259A2 6A41                    push 00000041
:004259A4 E839000000              call 004259E2
:004259A9 83C404                  add esp, 00000004
:004259AC 668945F4                mov word ptr [ebp-0C], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004259A0(U)
|
:004259B0 8B45F4                  mov eax, dword ptr [ebp-0C]
:004259B3 25FFFF0000              and eax, 0000FFFF
:004259B8 50                      push eax
:004259B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004259BC 51                      push ecx
:004259BD E8B1DCFDFF              call 00403673
:004259C2 83C408                  add esp, 00000008
:004259C5 5B                      pop ebx
:004259C6 8BE5                    mov esp, ebp
:004259C8 5D                      pop ebp
:004259C9 C3                      ret



:004259CA 84594200                DWORD 00425984
:004259CE 84594200                DWORD 00425984
:004259D2 8A594200                DWORD 0042598A


:004259D6 000000000000            BYTE  6 DUP(0)


:004259DC 0202                    add al, byte ptr [edx]
:004259DE 0101                    add dword ptr [ecx], eax
:004259E0 0101                    add dword ptr [ecx], eax

* Referenced by a CALL at Addresses:
|:00425994   , :004259A4   , :00425C16   , :00425E0F   , :00425E22   
|
:004259E2 55                      push ebp
:004259E3 8BEC                    mov ebp, esp
:004259E5 83EC14                  sub esp, 00000014
:004259E8 56                      push esi
:004259E9 B938464900              mov ecx, 00494638
:004259EE E80DD9FDFF              call 00403300
:004259F3 8945EC                  mov dword ptr [ebp-14], eax
:004259F6 B9D0454900              mov ecx, 004945D0
:004259FB E800D9FDFF              call 00403300
:00425A00 8945F0                  mov dword ptr [ebp-10], eax
:00425A03 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00425A06 6BC950                  imul ecx, 00000050
:00425A09 81C1787F4900            add ecx, 00497F78
:00425A0F E88CD7FDFF              call 004031A0
:00425A14 8845F8                  mov byte ptr [ebp-08], al
:00425A17 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00425A1A 6BC950                  imul ecx, 00000050
:00425A1D 81C1787F4900            add ecx, 00497F78
:00425A23 E878D7FDFF              call 004031A0
:00425A28 8845FC                  mov byte ptr [ebp-04], al
:00425A2B 8B45EC                  mov eax, dword ptr [ebp-14]
:00425A2E 50                      push eax
:00425A2F E855F8FFFF              call 00425289
:00425A34 83C404                  add esp, 00000004
:00425A37 85C0                    test eax, eax
:00425A39 740D                    je 00425A48
:00425A3B 668B4D08                mov cx, word ptr [ebp+08]
:00425A3F 66894DF4                mov word ptr [ebp-0C], cx
:00425A43 E9A1000000              jmp 00425AE9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425A39(C)
|
:00425A48 8B55EC                  mov edx, dword ptr [ebp-14]
:00425A4B 52                      push edx
:00425A4C E852F8FFFF              call 004252A3
:00425A51 83C404                  add esp, 00000004
:00425A54 85C0                    test eax, eax
:00425A56 740F                    je 00425A67
:00425A58 8B4508                  mov eax, dword ptr [ebp+08]
:00425A5B 83C003                  add eax, 00000003
:00425A5E 668945F4                mov word ptr [ebp-0C], ax
:00425A62 E982000000              jmp 00425AE9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425A56(C)
|
:00425A67 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00425A6A 81E1FF000000            and ecx, 000000FF
:00425A70 83F90E                  cmp ecx, 0000000E
:00425A73 740E                    je 00425A83
:00425A75 8B55F8                  mov edx, dword ptr [ebp-08]
:00425A78 81E2FF000000            and edx, 000000FF
:00425A7E 83FA0F                  cmp edx, 0000000F
:00425A81 750C                    jne 00425A8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425A73(C)
|
:00425A83 8B4508                  mov eax, dword ptr [ebp+08]
:00425A86 83C006                  add eax, 00000006
:00425A89 668945F4                mov word ptr [ebp-0C], ax
:00425A8D EB5A                    jmp 00425AE9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425A81(C)
|
:00425A8F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00425A92 81E1FF000000            and ecx, 000000FF
:00425A98 83F910                  cmp ecx, 00000010
:00425A9B 740E                    je 00425AAB
:00425A9D 8B55F8                  mov edx, dword ptr [ebp-08]
:00425AA0 81E2FF000000            and edx, 000000FF
:00425AA6 83FA11                  cmp edx, 00000011
:00425AA9 750C                    jne 00425AB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425A9B(C)
|
:00425AAB 8B4508                  mov eax, dword ptr [ebp+08]
:00425AAE 83C009                  add eax, 00000009
:00425AB1 668945F4                mov word ptr [ebp-0C], ax
:00425AB5 EB32                    jmp 00425AE9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425AA9(C)
|
:00425AB7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00425ABA 81E1FF000000            and ecx, 000000FF
:00425AC0 83F912                  cmp ecx, 00000012
:00425AC3 740E                    je 00425AD3
:00425AC5 8B55F8                  mov edx, dword ptr [ebp-08]
:00425AC8 81E2FF000000            and edx, 000000FF
:00425ACE 83FA13                  cmp edx, 00000013
:00425AD1 750C                    jne 00425ADF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425AC3(C)
|
:00425AD3 8B4508                  mov eax, dword ptr [ebp+08]
:00425AD6 83C00C                  add eax, 0000000C
:00425AD9 668945F4                mov word ptr [ebp-0C], ax
:00425ADD EB0A                    jmp 00425AE9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425AD1(C)
|
:00425ADF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00425AE2 83C10F                  add ecx, 0000000F
:00425AE5 66894DF4                mov word ptr [ebp-0C], cx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425A43(U), :00425A62(U), :00425A8D(U), :00425AB5(U), :00425ADD(U)
|
:00425AE9 8B55FC                  mov edx, dword ptr [ebp-04]
:00425AEC 81E2FF000000            and edx, 000000FF
:00425AF2 83FA12                  cmp edx, 00000012
:00425AF5 740D                    je 00425B04
:00425AF7 8B45FC                  mov eax, dword ptr [ebp-04]
:00425AFA 25FF000000              and eax, 000000FF
:00425AFF 83F813                  cmp eax, 00000013
:00425B02 750D                    jne 00425B11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425AF5(C)
|
:00425B04 8B45F4                  mov eax, dword ptr [ebp-0C]
:00425B07 25FFFF0000              and eax, 0000FFFF
:00425B0C 83C002                  add eax, 00000002
:00425B0F EB18                    jmp 00425B29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425B02(C)
|
:00425B11 8B75F4                  mov esi, dword ptr [ebp-0C]
:00425B14 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00425B1A 6A02                    push 00000002
:00425B1C E88F280500              call 004783B0
:00425B21 83C404                  add esp, 00000004
:00425B24 03F0                    add esi, eax
:00425B26 668BC6                  mov ax, si

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425B0F(U)
|
:00425B29 5E                      pop esi
:00425B2A 8BE5                    mov esp, ebp
:00425B2C 5D                      pop ebp
:00425B2D C3                      ret



* Referenced by a CALL at Address:
|:00425069   
|
:00425B2E 55                      push ebp
:00425B2F 8BEC                    mov ebp, esp
:00425B31 83EC0C                  sub esp, 0000000C
:00425B34 53                      push ebx
:00425B35 B938464900              mov ecx, 00494638
:00425B3A E8C1D7FDFF              call 00403300
:00425B3F 8945F4                  mov dword ptr [ebp-0C], eax
:00425B42 B9D0454900              mov ecx, 004945D0
:00425B47 E8B4D7FDFF              call 00403300
:00425B4C 8945F8                  mov dword ptr [ebp-08], eax
:00425B4F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00425B52 6BC950                  imul ecx, 00000050
:00425B55 81C1787F4900            add ecx, 00497F78
:00425B5B E840A3FEFF              call 0040FEA0
:00425B60 8AD8                    mov bl, al
:00425B62 81E3FF000000            and ebx, 000000FF
:00425B68 83C303                  add ebx, 00000003
:00425B6B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00425B6E 6BC950                  imul ecx, 00000050
:00425B71 81C1787F4900            add ecx, 00497F78
:00425B77 E824A3FEFF              call 0040FEA0
:00425B7C 25FF000000              and eax, 000000FF
:00425B81 3BD8                    cmp ebx, eax
:00425B83 7C10                    jl 00425B95
:00425B85 6A53                    push 00000053
:00425B87 E859FAFFFF              call 004255E5
:00425B8C 83C404                  add esp, 00000004
:00425B8F 668945FC                mov word ptr [ebp-04], ax
:00425B93 EB0E                    jmp 00425BA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425B83(C)
|
:00425B95 6A5F                    push 0000005F
:00425B97 E849FAFFFF              call 004255E5
:00425B9C 83C404                  add esp, 00000004
:00425B9F 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425B93(U)
|
:00425BA3 8B45FC                  mov eax, dword ptr [ebp-04]
:00425BA6 25FFFF0000              and eax, 0000FFFF
:00425BAB 50                      push eax
:00425BAC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00425BAF 51                      push ecx
:00425BB0 E8BEDAFDFF              call 00403673
:00425BB5 83C408                  add esp, 00000008
:00425BB8 5B                      pop ebx
:00425BB9 8BE5                    mov esp, ebp
:00425BBB 5D                      pop ebp
:00425BBC C3                      ret



* Referenced by a CALL at Address:
|:00425077   
|
:00425BBD 55                      push ebp
:00425BBE 8BEC                    mov ebp, esp
:00425BC0 83EC0C                  sub esp, 0000000C
:00425BC3 53                      push ebx
:00425BC4 B938464900              mov ecx, 00494638
:00425BC9 E832D7FDFF              call 00403300
:00425BCE 8945F4                  mov dword ptr [ebp-0C], eax
:00425BD1 B9D0454900              mov ecx, 004945D0
:00425BD6 E825D7FDFF              call 00403300
:00425BDB 8945F8                  mov dword ptr [ebp-08], eax
:00425BDE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00425BE1 6BC950                  imul ecx, 00000050
:00425BE4 81C1787F4900            add ecx, 00497F78
:00425BEA E8B1A2FEFF              call 0040FEA0
:00425BEF 8AD8                    mov bl, al
:00425BF1 81E3FF000000            and ebx, 000000FF
:00425BF7 83C303                  add ebx, 00000003
:00425BFA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00425BFD 6BC950                  imul ecx, 00000050
:00425C00 81C1787F4900            add ecx, 00497F78
:00425C06 E895A2FEFF              call 0040FEA0
:00425C0B 25FF000000              and eax, 000000FF
:00425C10 3BD8                    cmp ebx, eax
:00425C12 7C10                    jl 00425C24

* Possible Ref to Menu: APPMENU, Item: "(K)"
                                  |
:00425C14 6A6B                    push 0000006B
:00425C16 E8C7FDFFFF              call 004259E2
:00425C1B 83C404                  add esp, 00000004
:00425C1E 668945FC                mov word ptr [ebp-04], ax
:00425C22 EB14                    jmp 00425C38

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425C12(C)
|
:00425C24 8B45F8                  mov eax, dword ptr [ebp-08]
:00425C27 50                      push eax
:00425C28 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00425C2B 51                      push ecx
:00425C2C E822000000              call 00425C53
:00425C31 83C408                  add esp, 00000008
:00425C34 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425C22(U)
|
:00425C38 8B55FC                  mov edx, dword ptr [ebp-04]
:00425C3B 81E2FFFF0000            and edx, 0000FFFF
:00425C41 52                      push edx
:00425C42 8B4508                  mov eax, dword ptr [ebp+08]
:00425C45 50                      push eax
:00425C46 E828DAFDFF              call 00403673
:00425C4B 83C408                  add esp, 00000008
:00425C4E 5B                      pop ebx
:00425C4F 8BE5                    mov esp, ebp
:00425C51 5D                      pop ebp
:00425C52 C3                      ret



* Referenced by a CALL at Address:
|:00425C2C   
|
:00425C53 55                      push ebp
:00425C54 8BEC                    mov ebp, esp
:00425C56 83EC0C                  sub esp, 0000000C
:00425C59 56                      push esi
:00425C5A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00425C5D 6BC950                  imul ecx, 00000050
:00425C60 81C1787F4900            add ecx, 00497F78
:00425C66 E835D5FDFF              call 004031A0
:00425C6B 8845F8                  mov byte ptr [ebp-08], al
:00425C6E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00425C71 6BC950                  imul ecx, 00000050
:00425C74 81C1787F4900            add ecx, 00497F78
:00425C7A E821D5FDFF              call 004031A0
:00425C7F 8845FC                  mov byte ptr [ebp-04], al
:00425C82 8B4508                  mov eax, dword ptr [ebp+08]
:00425C85 50                      push eax
:00425C86 E8FEF5FFFF              call 00425289
:00425C8B 83C404                  add esp, 00000004
:00425C8E 85C0                    test eax, eax
:00425C90 740B                    je 00425C9D
:00425C92 66C745F47D00            mov [ebp-0C], 007D
:00425C98 E988000000              jmp 00425D25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425C90(C)
|
:00425C9D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00425CA0 51                      push ecx
:00425CA1 E8FDF5FFFF              call 004252A3
:00425CA6 83C404                  add esp, 00000004
:00425CA9 85C0                    test eax, eax
:00425CAB 7408                    je 00425CB5
:00425CAD 66C745F48000            mov [ebp-0C], 0080
:00425CB3 EB70                    jmp 00425D25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425CAB(C)
|
:00425CB5 8B55F8                  mov edx, dword ptr [ebp-08]
:00425CB8 81E2FF000000            and edx, 000000FF
:00425CBE 83FA0E                  cmp edx, 0000000E
:00425CC1 740D                    je 00425CD0
:00425CC3 8B45F8                  mov eax, dword ptr [ebp-08]
:00425CC6 25FF000000              and eax, 000000FF
:00425CCB 83F80F                  cmp eax, 0000000F
:00425CCE 7508                    jne 00425CD8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425CC1(C)
|
:00425CD0 66C745F48300            mov [ebp-0C], 0083
:00425CD6 EB4D                    jmp 00425D25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425CCE(C)
|
:00425CD8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00425CDB 81E1FF000000            and ecx, 000000FF
:00425CE1 83F910                  cmp ecx, 00000010
:00425CE4 740E                    je 00425CF4
:00425CE6 8B55F8                  mov edx, dword ptr [ebp-08]
:00425CE9 81E2FF000000            and edx, 000000FF
:00425CEF 83FA11                  cmp edx, 00000011
:00425CF2 7508                    jne 00425CFC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425CE4(C)
|
:00425CF4 66C745F48600            mov [ebp-0C], 0086
:00425CFA EB29                    jmp 00425D25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425CF2(C)
|
:00425CFC 8B45F8                  mov eax, dword ptr [ebp-08]
:00425CFF 25FF000000              and eax, 000000FF
:00425D04 83F812                  cmp eax, 00000012
:00425D07 740E                    je 00425D17
:00425D09 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00425D0C 81E1FF000000            and ecx, 000000FF
:00425D12 83F913                  cmp ecx, 00000013
:00425D15 7508                    jne 00425D1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425D07(C)
|
:00425D17 66C745F48A00            mov [ebp-0C], 008A
:00425D1D EB06                    jmp 00425D25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425D15(C)
|
:00425D1F 66C745F48D00            mov [ebp-0C], 008D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425C98(U), :00425CB3(U), :00425CD6(U), :00425CFA(U), :00425D1D(U)
|
:00425D25 8B55FC                  mov edx, dword ptr [ebp-04]
:00425D28 81E2FF000000            and edx, 000000FF
:00425D2E 83FA12                  cmp edx, 00000012
:00425D31 740D                    je 00425D40
:00425D33 8B45FC                  mov eax, dword ptr [ebp-04]
:00425D36 25FF000000              and eax, 000000FF
:00425D3B 83F813                  cmp eax, 00000013
:00425D3E 7512                    jne 00425D52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425D31(C)
|
:00425D40 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00425D43 81E1FFFF0000            and ecx, 0000FFFF
:00425D49 83C102                  add ecx, 00000002
:00425D4C 66894DF4                mov word ptr [ebp-0C], cx
:00425D50 EB58                    jmp 00425DAA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425D3E(C)
|
:00425D52 8B55F8                  mov edx, dword ptr [ebp-08]
:00425D55 81E2FF000000            and edx, 000000FF
:00425D5B 83FA10                  cmp edx, 00000010
:00425D5E 740D                    je 00425D6D
:00425D60 8B45F8                  mov eax, dword ptr [ebp-08]
:00425D63 25FF000000              and eax, 000000FF
:00425D68 83F811                  cmp eax, 00000011
:00425D6B 7524                    jne 00425D91

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425D5E(C)
|
:00425D6D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425D70 81E1FF000000            and ecx, 000000FF
:00425D76 83F910                  cmp ecx, 00000010
:00425D79 740E                    je 00425D89
:00425D7B 8B55FC                  mov edx, dword ptr [ebp-04]
:00425D7E 81E2FF000000            and edx, 000000FF
:00425D84 83FA11                  cmp edx, 00000011
:00425D87 7508                    jne 00425D91

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425D79(C)
|
:00425D89 66C745F48900            mov [ebp-0C], 0089
:00425D8F EB19                    jmp 00425DAA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425D6B(C), :00425D87(C)
|
:00425D91 8B75F4                  mov esi, dword ptr [ebp-0C]
:00425D94 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00425D9A 6A02                    push 00000002
:00425D9C E80F260500              call 004783B0
:00425DA1 83C404                  add esp, 00000004
:00425DA4 03F0                    add esi, eax
:00425DA6 668975F4                mov word ptr [ebp-0C], si

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425D50(U), :00425D8F(U)
|
:00425DAA 668B45F4                mov ax, word ptr [ebp-0C]
:00425DAE 5E                      pop esi
:00425DAF 8BE5                    mov esp, ebp
:00425DB1 5D                      pop ebp
:00425DB2 C3                      ret



* Referenced by a CALL at Address:
|:00425085   
|
:00425DB3 55                      push ebp
:00425DB4 8BEC                    mov ebp, esp
:00425DB6 83EC0C                  sub esp, 0000000C
:00425DB9 53                      push ebx
:00425DBA B938464900              mov ecx, 00494638
:00425DBF E83CD5FDFF              call 00403300
:00425DC4 8945F4                  mov dword ptr [ebp-0C], eax
:00425DC7 B9D0454900              mov ecx, 004945D0
:00425DCC E82FD5FDFF              call 00403300
:00425DD1 8945F8                  mov dword ptr [ebp-08], eax
:00425DD4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00425DD7 6BC950                  imul ecx, 00000050
:00425DDA 81C1787F4900            add ecx, 00497F78
:00425DE0 E8BBA0FEFF              call 0040FEA0
:00425DE5 8AD8                    mov bl, al
:00425DE7 81E3FF000000            and ebx, 000000FF
:00425DED 83C303                  add ebx, 00000003
:00425DF0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00425DF3 6BC950                  imul ecx, 00000050
:00425DF6 81C1787F4900            add ecx, 00497F78
:00425DFC E89FA0FEFF              call 0040FEA0
:00425E01 25FF000000              and eax, 000000FF
:00425E06 3BD8                    cmp ebx, eax
:00425E08 7C13                    jl 00425E1D
:00425E0A 6890000000              push 00000090
:00425E0F E8CEFBFFFF              call 004259E2
:00425E14 83C404                  add esp, 00000004
:00425E17 668945FC                mov word ptr [ebp-04], ax
:00425E1B EB11                    jmp 00425E2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425E08(C)
|

* Possible Ref to Menu: DBGMENU, Item: ""
                                  |
:00425E1D 68A2000000              push 000000A2
:00425E22 E8BBFBFFFF              call 004259E2
:00425E27 83C404                  add esp, 00000004
:00425E2A 668945FC                mov word ptr [ebp-04], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425E1B(U)
|
:00425E2E 8B45FC                  mov eax, dword ptr [ebp-04]
:00425E31 25FFFF0000              and eax, 0000FFFF
:00425E36 50                      push eax
:00425E37 8B4D08                  mov ecx, dword ptr [ebp+08]
:00425E3A 51                      push ecx
:00425E3B E833D8FDFF              call 00403673
:00425E40 83C408                  add esp, 00000008
:00425E43 5B                      pop ebx
:00425E44 8BE5                    mov esp, ebp
:00425E46 5D                      pop ebp
:00425E47 C3                      ret



* Referenced by a CALL at Address:
|:00425097   
|
:00425E48 55                      push ebp
:00425E49 8BEC                    mov ebp, esp
:00425E4B 81ECE0000000            sub esp, 000000E0
:00425E51 B9D0454900              mov ecx, 004945D0
:00425E56 E8A5D4FDFF              call 00403300
:00425E5B 8BC8                    mov ecx, eax
:00425E5D 6BC950                  imul ecx, 00000050
:00425E60 81C1787F4900            add ecx, 00497F78
:00425E66 E835D3FDFF              call 004031A0
:00425E6B 8845FC                  mov byte ptr [ebp-04], al
:00425E6E 8B45FC                  mov eax, dword ptr [ebp-04]
:00425E71 25FF000000              and eax, 000000FF
:00425E76 83F812                  cmp eax, 00000012
:00425E79 740E                    je 00425E89
:00425E7B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00425E7E 81E1FF000000            and ecx, 000000FF
:00425E84 83F913                  cmp ecx, 00000013
:00425E87 7508                    jne 00425E91

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425E79(C)
|
:00425E89 66C745F8B600            mov [ebp-08], 00B6
:00425E8F EB13                    jmp 00425EA4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425E87(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00425E91 6A02                    push 00000002
:00425E93 E818250500              call 004783B0
:00425E98 83C404                  add esp, 00000004
:00425E9B 05B4000000              add eax, 000000B4
:00425EA0 668945F8                mov word ptr [ebp-08], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425E8F(U)
|
:00425EA4 8B55F8                  mov edx, dword ptr [ebp-08]
:00425EA7 81E2FFFF0000            and edx, 0000FFFF
:00425EAD 52                      push edx
:00425EAE 8B4508                  mov eax, dword ptr [ebp+08]
:00425EB1 50                      push eax
:00425EB2 E8BCD7FDFF              call 00403673
:00425EB7 83C408                  add esp, 00000008
:00425EBA 85C0                    test eax, eax
:00425EBC 0F84F6000000            je 00425FB8

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:00425EC2 6A65                    push 00000065
:00425EC4 6A00                    push 00000000
:00425EC6 8D4D88                  lea ecx, dword ptr [ebp-78]
:00425EC9 51                      push ecx
:00425ECA E8019C0400              call 0046FAD0
:00425ECF 83C40C                  add esp, 0000000C

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:00425ED2 6A65                    push 00000065
:00425ED4 6A00                    push 00000000
:00425ED6 8D9520FFFFFF            lea edx, dword ptr [ebp+FFFFFF20]
:00425EDC 52                      push edx
:00425EDD E8EE9B0400              call 0046FAD0
:00425EE2 83C40C                  add esp, 0000000C
:00425EE5 8B4508                  mov eax, dword ptr [ebp+08]
:00425EE8 8945F4                  mov dword ptr [ebp-0C], eax
:00425EEB C745F000000000          mov [ebp-10], 00000000
:00425EF2 EB09                    jmp 00425EFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425F25(U)
|
:00425EF4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00425EF7 83C101                  add ecx, 00000001
:00425EFA 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425EF2(U)
|
:00425EFD 8B55F4                  mov edx, dword ptr [ebp-0C]
:00425F00 0FBE02                  movsx eax, byte ptr [edx]
:00425F03 83F825                  cmp eax, 00000025
:00425F06 741F                    je 00425F27
:00425F08 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00425F0B 8B55F4                  mov edx, dword ptr [ebp-0C]
:00425F0E 8A02                    mov al, byte ptr [edx]
:00425F10 88440D88                mov byte ptr [ebp+ecx-78], al
:00425F14 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00425F17 83C101                  add ecx, 00000001
:00425F1A 894DF4                  mov dword ptr [ebp-0C], ecx
:00425F1D 837DF064                cmp dword ptr [ebp-10], 00000064
:00425F21 7E02                    jle 00425F25
:00425F23 EB02                    jmp 00425F27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425F21(C)
|
:00425F25 EBCD                    jmp 00425EF4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425F06(C), :00425F23(U)
|
:00425F27 8B55F4                  mov edx, dword ptr [ebp-0C]
:00425F2A 83C201                  add edx, 00000001
:00425F2D 8955F4                  mov dword ptr [ebp-0C], edx
:00425F30 C745F000000000          mov [ebp-10], 00000000
:00425F37 EB09                    jmp 00425F42

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425F6C(U)
|
:00425F39 8B45F0                  mov eax, dword ptr [ebp-10]
:00425F3C 83C001                  add eax, 00000001
:00425F3F 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425F37(U)
|
:00425F42 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00425F45 0FBE11                  movsx edx, byte ptr [ecx]
:00425F48 85D2                    test edx, edx
:00425F4A 7422                    je 00425F6E
:00425F4C 8B45F0                  mov eax, dword ptr [ebp-10]
:00425F4F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00425F52 8A11                    mov dl, byte ptr [ecx]
:00425F54 88940520FFFFFF          mov byte ptr [ebp+eax-000000E0], dl
:00425F5B 8B45F4                  mov eax, dword ptr [ebp-0C]
:00425F5E 83C001                  add eax, 00000001
:00425F61 8945F4                  mov dword ptr [ebp-0C], eax
:00425F64 837DF064                cmp dword ptr [ebp-10], 00000064
:00425F68 7E02                    jle 00425F6C
:00425F6A EB02                    jmp 00425F6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425F68(C)
|
:00425F6C EBCB                    jmp 00425F39

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00425F4A(C), :00425F6A(U)
|
:00425F6E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00425F71 6BC922                  imul ecx, 00000022
:00425F74 81C1D0474900            add ecx, 004947D0
:00425F7A E871F7FDFF              call 004056F0
:00425F7F 50                      push eax
:00425F80 8D4D88                  lea ecx, dword ptr [ebp-78]
:00425F83 51                      push ecx
:00425F84 E8C7250500              call 00478550
:00425F89 83C408                  add esp, 00000008
:00425F8C 8D9520FFFFFF            lea edx, dword ptr [ebp+FFFFFF20]
:00425F92 52                      push edx
:00425F93 8D4588                  lea eax, dword ptr [ebp-78]
:00425F96 50                      push eax
:00425F97 E8B4250500              call 00478550
:00425F9C 83C408                  add esp, 00000008

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:00425F9F 6A65                    push 00000065
:00425FA1 8D4D88                  lea ecx, dword ptr [ebp-78]
:00425FA4 51                      push ecx
:00425FA5 8B5508                  mov edx, dword ptr [ebp+08]
:00425FA8 52                      push edx
:00425FA9 E8B2950400              call 0046F560
:00425FAE 83C40C                  add esp, 0000000C
:00425FB1 B801000000              mov eax, 00000001
:00425FB6 EB02                    jmp 00425FBA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425EBC(C)
|
:00425FB8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425FB6(U)
|
:00425FBA 8BE5                    mov esp, ebp
:00425FBC 5D                      pop ebp
:00425FBD C3                      ret



* Referenced by a CALL at Addresses:
|:00424F2E   , :004260FB   
|
:00425FBE 55                      push ebp
:00425FBF 8BEC                    mov ebp, esp
:00425FC1 6A00                    push 00000000
:00425FC3 E86F150500              call 00477537
:00425FC8 83C404                  add esp, 00000004
:00425FCB E8B79FFFFF              call 0041FF87
:00425FD0 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00425FD4 7407                    je 00425FDD
:00425FD6 E868000000              call 00426043
:00425FDB EB05                    jmp 00425FE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425FD4(C)
|
:00425FDD E80C000000              call 00425FEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00425FDB(U)
|
:00425FE2 6A01                    push 00000001
:00425FE4 E84E150500              call 00477537
:00425FE9 83C404                  add esp, 00000004
:00425FEC 5D                      pop ebp
:00425FED C3                      ret



* Referenced by a CALL at Address:
|:00425FDD   
|
:00425FEE 55                      push ebp
:00425FEF 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00425FF1 6A09                    push 00000009
:00425FF3 E817F60400              call 0047560F
:00425FF8 83C404                  add esp, 00000004
:00425FFB 6A00                    push 00000000
:00425FFD 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00425FFF 6A04                    push 00000004
:00426001 E817FD0400              call 00475D1D
:00426006 83C40C                  add esp, 0000000C
:00426009 B9D0454900              mov ecx, 004945D0
:0042600E E88D7E0000              call 0042DEA0
:00426013 85C0                    test eax, eax
:00426015 740C                    je 00426023
:00426017 B9D0454900              mov ecx, 004945D0
:0042601C E85A6D0000              call 0042CD7B
:00426021 EB0F                    jmp 00426032

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426015(C)
|
:00426023 68001B0000              push 00001B00
:00426028 B9D0454900              mov ecx, 004945D0
:0042602D E8156E0000              call 0042CE47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426021(U)
|
:00426032 6800500000              push 00005000
:00426037 B938464900              mov ecx, 00494638
:0042603C E8766E0000              call 0042CEB7
:00426041 5D                      pop ebp
:00426042 C3                      ret



* Referenced by a CALL at Addresses:
|:00425FD6   , :0042CB78   
|
:00426043 55                      push ebp
:00426044 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00426046 6A09                    push 00000009
:00426048 E8C2F50400              call 0047560F
:0042604D 83C404                  add esp, 00000004
:00426050 6A00                    push 00000000
:00426052 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00426054 6A04                    push 00000004
:00426056 E8C2FC0400              call 00475D1D
:0042605B 83C40C                  add esp, 0000000C
:0042605E B938464900              mov ecx, 00494638
:00426063 E8387E0000              call 0042DEA0
:00426068 85C0                    test eax, eax
:0042606A 740C                    je 00426078
:0042606C B938464900              mov ecx, 00494638
:00426071 E8056D0000              call 0042CD7B
:00426076 EB0F                    jmp 00426087

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042606A(C)
|
:00426078 6800120000              push 00001200
:0042607D B938464900              mov ecx, 00494638
:00426082 E8576D0000              call 0042CDDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426076(U)
|
:00426087 B9D0454900              mov ecx, 004945D0
:0042608C E80F7E0000              call 0042DEA0
:00426091 85C0                    test eax, eax
:00426093 740C                    je 004260A1
:00426095 B9D0454900              mov ecx, 004945D0
:0042609A E8DC6C0000              call 0042CD7B
:0042609F EB0F                    jmp 004260B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426093(C)
|
:004260A1 6800120000              push 00001200
:004260A6 B9D0454900              mov ecx, 004945D0
:004260AB E82E6D0000              call 0042CDDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042609F(U)
|
:004260B0 5D                      pop ebp
:004260B1 C3                      ret



* Referenced by a CALL at Addresses:
|:004283F4   , :00428445   , :0042845A   , :0042846F   , :00428492   
|:004284AC   , :004284C1   , :00428522   , :00428537   , :0042854C   
|:0042857F   , :00428594   , :004285C6   , :004285DB   , :004285FE   
|:00428618   , :0042862D   , :0042869A   , :004286CD   , :004286E2   
|
:004260B2 55                      push ebp
:004260B3 8BEC                    mov ebp, esp
:004260B5 83EC18                  sub esp, 00000018
:004260B8 894DE8                  mov dword ptr [ebp-18], ecx
:004260BB 6A00                    push 00000000
:004260BD 8B4508                  mov eax, dword ptr [ebp+08]
:004260C0 50                      push eax
:004260C1 E8B6AAFFFF              call 00420B7C
:004260C6 83C408                  add esp, 00000008
:004260C9 817DE838464900          cmp dword ptr [ebp-18], 00494638
:004260D0 750E                    jne 004260E0

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004260D2 6A0A                    push 0000000A
:004260D4 B9F8544B00              mov ecx, 004B54F8
:004260D9 E83C340400              call 0046951A
:004260DE EB0C                    jmp 004260EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004260D0(C)
|
:004260E0 6A0B                    push 0000000B
:004260E2 B9F8544B00              mov ecx, 004B54F8
:004260E7 E82E340400              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004260DE(U)
|
:004260EC 817DE838464900          cmp dword ptr [ebp-18], 00494638
:004260F3 751D                    jne 00426112
:004260F5 6A01                    push 00000001
:004260F7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004260FA 51                      push ecx
:004260FB E8BEFEFFFF              call 00425FBE
:00426100 83C408                  add esp, 00000008
:00426103 B938464900              mov ecx, 00494638
:00426108 E8F3D1FDFF              call 00403300
:0042610D 8945F8                  mov dword ptr [ebp-08], eax
:00426110 EB0D                    jmp 0042611F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004260F3(C)
|
:00426112 B9D0454900              mov ecx, 004945D0
:00426117 E8E4D1FDFF              call 00403300
:0042611C 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426110(U)
|
:0042611F 8B5510                  mov edx, dword ptr [ebp+10]
:00426122 52                      push edx
:00426123 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00426126 E865810000              call 0042E290
:0042612B 8B45F8                  mov eax, dword ptr [ebp-08]
:0042612E 50                      push eax
:0042612F 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00426132 E8297D0000              call 0042DE60
:00426137 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042613A 51                      push ecx
:0042613B 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0042613E E82D810000              call 0042E270
:00426143 8D55EC                  lea edx, dword ptr [ebp-14]
:00426146 52                      push edx
:00426147 68F03B4200              push 00423BF0
:0042614C 8B4508                  mov eax, dword ptr [ebp+08]
:0042614F 50                      push eax
:00426150 681E010000              push 0000011E
:00426155 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0042615B 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0042615C FF15DCD64B00            Call dword ptr [004BD6DC]
:00426162 8945FC                  mov dword ptr [ebp-04], eax
:00426165 6A01                    push 00000001
:00426167 E84F940000              call 0042F5BB
:0042616C 83C404                  add esp, 00000004
:0042616F E85C940000              call 0042F5D0
:00426174 6A00                    push 00000000
:00426176 6A00                    push 00000000
:00426178 68F0000000              push 000000F0
:0042617D 68C5040000              push 000004C5
:00426182 8B5508                  mov edx, dword ptr [ebp+08]
:00426185 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00426186 FF15D4D54B00            Call dword ptr [004BD5D4]
:0042618C 85C0                    test eax, eax
:0042618E 7418                    je 004261A8
:00426190 6A00                    push 00000000
:00426192 687B040000              push 0000047B
:00426197 8B4508                  mov eax, dword ptr [ebp+08]
:0042619A 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042619B FF1510D64B00            Call dword ptr [004BD610]
:004261A1 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004261A2 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042618E(C)
|
:004261A8 6A01                    push 00000001
:004261AA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004261AD 51                      push ecx
:004261AE E8C9A9FFFF              call 00420B7C
:004261B3 83C408                  add esp, 00000008
:004261B6 8B5508                  mov edx, dword ptr [ebp+08]
:004261B9 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:004261BA FF15FCD54B00            Call dword ptr [004BD5FC]
:004261C0 8B45FC                  mov eax, dword ptr [ebp-04]
:004261C3 8BE5                    mov esp, ebp
:004261C5 5D                      pop ebp
:004261C6 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:00421C34   , :0042218C   , :00422201   , :00422211   , :0042CAFF   
|:0042CB43   , :0042CB51   
|
:004261C9 55                      push ebp
:004261CA 8BEC                    mov ebp, esp
:004261CC 51                      push ecx
:004261CD 894DFC                  mov dword ptr [ebp-04], ecx
:004261D0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004261D3 E8F87F0000              call 0042E1D0
:004261D8 85C0                    test eax, eax
:004261DA 740C                    je 004261E8
:004261DC 8B4508                  mov eax, dword ptr [ebp+08]
:004261DF 50                      push eax
:004261E0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004261E3 E8BEA1FFFF              call 004203A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004261DA(C)
|
:004261E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004261EB 51                      push ecx
:004261EC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004261EF E806000000              call 004261FA
:004261F4 8BE5                    mov esp, ebp
:004261F6 5D                      pop ebp
:004261F7 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004261EF   
|
:004261FA 55                      push ebp
:004261FB 8BEC                    mov ebp, esp
:004261FD 83EC48                  sub esp, 00000048
:00426200 894DB8                  mov dword ptr [ebp-48], ecx
:00426203 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00426206 E88E160000              call 00427899
:0042620B 8945BC                  mov dword ptr [ebp-44], eax
:0042620E 8A45BC                  mov al, byte ptr [ebp-44]
:00426211 50                      push eax
:00426212 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00426215 E8A67C0000              call 0042DEC0
:0042621A 6A40                    push 00000040
:0042621C 6A00                    push 00000000
:0042621E 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00426221 51                      push ecx
:00426222 E8A9980400              call 0046FAD0
:00426227 83C40C                  add esp, 0000000C
:0042622A 8B55B8                  mov edx, dword ptr [ebp-48]
:0042622D 8B4A14                  mov ecx, dword ptr [edx+14]
:00426230 6BC950                  imul ecx, 00000050
:00426233 81C1787F4900            add ecx, 00497F78
:00426239 E8C6CEFDFF              call 00403104
:0042623E 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0042623F 68F0CE4700              push 0047CEF0
:00426244 8D45C0                  lea eax, dword ptr [ebp-40]
:00426247 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00426248 FF1504D74B00            Call dword ptr [004BD704]
:0042624E 83C40C                  add esp, 0000000C
:00426251 6A00                    push 00000000
:00426253 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00426256 51                      push ecx
:00426257 8B5508                  mov edx, dword ptr [ebp+08]
:0042625A 52                      push edx
:0042625B E80CD8FFFF              call 00423A6C
:00426260 83C40C                  add esp, 0000000C
:00426263 817DB838464900          cmp dword ptr [ebp-48], 00494638
:0042626A 7572                    jne 004262DE
:0042626C 6A00                    push 00000000
:0042626E 6A00                    push 00000000
:00426270 68F0000000              push 000000F0
:00426275 68C7040000              push 000004C7
:0042627A 8B4508                  mov eax, dword ptr [ebp+08]
:0042627D 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0042627E FF15D4D54B00            Call dword ptr [004BD5D4]
:00426284 85C0                    test eax, eax
:00426286 7446                    je 004262CE
:00426288 B938464900              mov ecx, 00494638
:0042628D E857150000              call 004277E9
:00426292 85C0                    test eax, eax
:00426294 7428                    je 004262BE
:00426296 837DBCFF                cmp dword ptr [ebp-44], FFFFFFFF
:0042629A 7422                    je 004262BE
:0042629C B938464900              mov ecx, 00494638
:004262A1 E8AA7E0000              call 0042E150
:004262A6 85C0                    test eax, eax
:004262A8 7514                    jne 004262BE
:004262AA 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004262AD 51                      push ecx
:004262AE 8B5508                  mov edx, dword ptr [ebp+08]
:004262B1 52                      push edx
:004262B2 B938464900              mov ecx, 00494638
:004262B7 E8FD000000              call 004263B9
:004262BC EB0E                    jmp 004262CC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426294(C), :0042629A(C), :004262A8(C)
|
:004262BE 8B4508                  mov eax, dword ptr [ebp+08]
:004262C1 50                      push eax
:004262C2 B938464900              mov ecx, 00494638
:004262C7 E85C000000              call 00426328

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004262BC(U)
|
:004262CC EB0E                    jmp 004262DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426286(C)
|
:004262CE 6A01                    push 00000001
:004262D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004262D3 51                      push ecx
:004262D4 E874A8FFFF              call 00420B4D
:004262D9 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004262CC(U)
|
:004262DC EB44                    jmp 00426322

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042626A(C)
|
:004262DE B9D0454900              mov ecx, 004945D0
:004262E3 E801150000              call 004277E9
:004262E8 85C0                    test eax, eax
:004262EA 7428                    je 00426314
:004262EC 837DBCFF                cmp dword ptr [ebp-44], FFFFFFFF
:004262F0 7422                    je 00426314
:004262F2 B9D0454900              mov ecx, 004945D0
:004262F7 E8547E0000              call 0042E150
:004262FC 85C0                    test eax, eax
:004262FE 7514                    jne 00426314
:00426300 8B55BC                  mov edx, dword ptr [ebp-44]
:00426303 52                      push edx
:00426304 8B4508                  mov eax, dword ptr [ebp+08]
:00426307 50                      push eax
:00426308 B9D0454900              mov ecx, 004945D0
:0042630D E8A7000000              call 004263B9
:00426312 EB0E                    jmp 00426322

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004262EA(C), :004262F0(C), :004262FE(C)
|
:00426314 8B4D08                  mov ecx, dword ptr [ebp+08]
:00426317 51                      push ecx
:00426318 B9D0454900              mov ecx, 004945D0
:0042631D E806000000              call 00426328

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004262DC(U), :00426312(U)
|
:00426322 8BE5                    mov esp, ebp
:00426324 5D                      pop ebp
:00426325 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00421C8F   , :004262C7   , :0042631D   
|
:00426328 55                      push ebp
:00426329 8BEC                    mov ebp, esp
:0042632B 83EC48                  sub esp, 00000048
:0042632E 894DB8                  mov dword ptr [ebp-48], ecx
:00426331 6AFF                    push FFFFFFFF
:00426333 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00426336 E8857B0000              call 0042DEC0
:0042633B 8B4508                  mov eax, dword ptr [ebp+08]
:0042633E 50                      push eax
:0042633F 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00426342 E8C19DFFFF              call 00420108
:00426347 8945FC                  mov dword ptr [ebp-04], eax
:0042634A 837DFC00                cmp dword ptr [ebp-04], 00000000
:0042634E 740E                    je 0042635E
:00426350 8B4D08                  mov ecx, dword ptr [ebp+08]
:00426353 51                      push ecx
:00426354 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00426357 E832660000              call 0042C98E
:0042635C EB55                    jmp 004263B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042634E(C)
|
:0042635E 6A40                    push 00000040
:00426360 6A00                    push 00000000
:00426362 8D55BC                  lea edx, dword ptr [ebp-44]
:00426365 52                      push edx
:00426366 E865970400              call 0046FAD0
:0042636B 83C40C                  add esp, 0000000C
:0042636E 8B45B8                  mov eax, dword ptr [ebp-48]
:00426371 8B4814                  mov ecx, dword ptr [eax+14]
:00426374 6BC950                  imul ecx, 00000050
:00426377 81C1787F4900            add ecx, 00497F78
:0042637D E882CDFDFF              call 00403104
:00426382 50                      push eax

* Possible StringData Ref from Data Obj ->"%sASC"
                                  |
:00426383 68FCCE4700              push 0047CEFC
:00426388 8D4DBC                  lea ecx, dword ptr [ebp-44]
:0042638B 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042638C FF1504D74B00            Call dword ptr [004BD704]
:00426392 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00426395 6A08                    push 00000008
:00426397 8D55BC                  lea edx, dword ptr [ebp-44]
:0042639A 52                      push edx
:0042639B 8B4508                  mov eax, dword ptr [ebp+08]
:0042639E 50                      push eax
:0042639F E8C8D6FFFF              call 00423A6C
:004263A4 83C40C                  add esp, 0000000C
:004263A7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004263AA 51                      push ecx
:004263AB 8B4DB8                  mov ecx, dword ptr [ebp-48]
:004263AE E883660000              call 0042CA36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042635C(U)
|
:004263B3 8BE5                    mov esp, ebp
:004263B5 5D                      pop ebp
:004263B6 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00422275   , :004262B7   , :0042630D   
|
:004263B9 55                      push ebp
:004263BA 8BEC                    mov ebp, esp
:004263BC 83EC4C                  sub esp, 0000004C
:004263BF 894DB4                  mov dword ptr [ebp-4C], ecx
:004263C2 8B45B4                  mov eax, dword ptr [ebp-4C]
:004263C5 8B4814                  mov ecx, dword ptr [eax+14]
:004263C8 51                      push ecx
:004263C9 8B550C                  mov edx, dword ptr [ebp+0C]
:004263CC 52                      push edx
:004263CD 8B4508                  mov eax, dword ptr [ebp+08]
:004263D0 50                      push eax
:004263D1 E8C9000000              call 0042649F
:004263D6 83C40C                  add esp, 0000000C
:004263D9 8945F8                  mov dword ptr [ebp-08], eax
:004263DC 837DF800                cmp dword ptr [ebp-08], 00000000
:004263E0 7D12                    jge 004263F4

* Possible StringData Ref from Data Obj ->"in Tokugi()"
                                  |
:004263E2 6810CF4700              push 0047CF10
:004263E7 E8B0D7FFFF              call 00423B9C
:004263EC 83C404                  add esp, 00000004
:004263EF E9A5000000              jmp 00426499

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004263E0(C)
|
:004263F4 8A4DF8                  mov cl, byte ptr [ebp-08]
:004263F7 51                      push ecx
:004263F8 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:004263FB E8B07E0000              call 0042E2B0
:00426400 8B5508                  mov edx, dword ptr [ebp+08]
:00426403 52                      push edx
:00426404 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00426407 E8659DFFFF              call 00420171
:0042640C 8845FC                  mov byte ptr [ebp-04], al
:0042640F 8B45FC                  mov eax, dword ptr [ebp-04]
:00426412 25FF000000              and eax, 000000FF
:00426417 83F816                  cmp eax, 00000016
:0042641A 750E                    jne 0042642A
:0042641C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042641F 51                      push ecx
:00426420 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00426423 E866650000              call 0042C98E
:00426428 EB6F                    jmp 00426499

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042641A(C)
|
:0042642A 6A40                    push 00000040
:0042642C 6A00                    push 00000000
:0042642E 8D55B8                  lea edx, dword ptr [ebp-48]
:00426431 52                      push edx
:00426432 E899960400              call 0046FAD0
:00426437 83C40C                  add esp, 0000000C
:0042643A 8B45B4                  mov eax, dword ptr [ebp-4C]
:0042643D 8B4814                  mov ecx, dword ptr [eax+14]
:00426440 6BC950                  imul ecx, 00000050
:00426443 81C1787F4900            add ecx, 00497F78
:00426449 E8B6CCFDFF              call 00403104
:0042644E 50                      push eax

* Possible StringData Ref from Data Obj ->"%sASC"
                                  |
:0042644F 681CCF4700              push 0047CF1C
:00426454 8D4DB8                  lea ecx, dword ptr [ebp-48]
:00426457 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00426458 FF1504D74B00            Call dword ptr [004BD704]
:0042645E 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00426461 6A08                    push 00000008
:00426463 8D55B8                  lea edx, dword ptr [ebp-48]
:00426466 52                      push edx
:00426467 8B4508                  mov eax, dword ptr [ebp+08]
:0042646A 50                      push eax
:0042646B E8FCD5FFFF              call 00423A6C
:00426470 83C40C                  add esp, 0000000C
:00426473 8B4D08                  mov ecx, dword ptr [ebp+08]
:00426476 51                      push ecx
:00426477 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:0042647A E8103D0000              call 0042A18F
:0042647F 6A00                    push 00000000
:00426481 8B5508                  mov edx, dword ptr [ebp+08]
:00426484 52                      push edx
:00426485 E8D09FFFFF              call 0042045A
:0042648A 83C408                  add esp, 00000008
:0042648D 8B4508                  mov eax, dword ptr [ebp+08]
:00426490 50                      push eax
:00426491 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00426494 E89D650000              call 0042CA36

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004263EF(U), :00426428(U)
|
:00426499 8BE5                    mov esp, ebp
:0042649B 5D                      pop ebp
:0042649C C20800                  ret 0008



* Referenced by a CALL at Address:
|:004263D1   
|
:0042649F 55                      push ebp
:004264A0 8BEC                    mov ebp, esp
:004264A2 6AFF                    push FFFFFFFF
:004264A4 68B8964700              push 004796B8
:004264A9 64A100000000            mov eax, dword ptr fs:[00000000]
:004264AF 50                      push eax
:004264B0 64892500000000          mov dword ptr fs:[00000000], esp
:004264B7 81EC0C010000            sub esp, 0000010C
:004264BD 8B4510                  mov eax, dword ptr [ebp+10]
:004264C0 50                      push eax
:004264C1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004264C4 51                      push ecx
:004264C5 E84B010000              call 00426615
:004264CA 83C408                  add esp, 00000008
:004264CD 8945F0                  mov dword ptr [ebp-10], eax
:004264D0 837DF000                cmp dword ptr [ebp-10], 00000000
:004264D4 7D08                    jge 004264DE
:004264D6 83C8FF                  or eax, FFFFFFFF
:004264D9 E929010000              jmp 00426607

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004264D4(C)
|
:004264DE 817DF085000000          cmp dword ptr [ebp-10], 00000085
:004264E5 7C08                    jl 004264EF
:004264E7 8B45F0                  mov eax, dword ptr [ebp-10]
:004264EA E918010000              jmp 00426607

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004264E5(C)
|
:004264EF 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004264F5 E846F1FDFF              call 00405640
:004264FA C745FC00000000          mov [ebp-04], 00000000
:00426501 8B5510                  mov edx, dword ptr [ebp+10]
:00426504 52                      push edx
:00426505 E88679FEFF              call 0040DE90
:0042650A 83C404                  add esp, 00000004
:0042650D 85C0                    test eax, eax
:0042650F 7451                    je 00426562

* Possible StringData Ref from Data Obj ->"CHR_MWAZ.E3"
                                  |
:00426511 6858D54700              push 0047D558
:00426516 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0042651C E8B4ACFEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00426521 6A04                    push 00000004
:00426523 6A00                    push 00000000
:00426525 6A00                    push 00000000
:00426527 B9A8464900              mov ecx, 004946A8
:0042652C E85F2A0500              call 00478F90
:00426531 50                      push eax
:00426532 8B45F0                  mov eax, dword ptr [ebp-10]
:00426535 50                      push eax
:00426536 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0042653C E8E8ADFEFF              call 00411329
:00426541 85C0                    test eax, eax
:00426543 750D                    jne 00426552

* Possible StringData Ref from Data Obj ->"in ReadTokugiAm()"
                                  |
:00426545 6830CF4700              push 0047CF30
:0042654A E84DD6FFFF              call 00423B9C
:0042654F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426543(C)
|
:00426552 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00426558 E8C876FEFF              call 0040DC25
:0042655D E984000000              jmp 004265E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042650F(C)
|

* Possible StringData Ref from Data Obj ->"CHR_RWAZ.E3"
                                  |
:00426562 6878D54700              push 0047D578
:00426567 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0042656D E863ACFEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00426572 6A04                    push 00000004
:00426574 6A00                    push 00000000
:00426576 6A00                    push 00000000
:00426578 B9A8464900              mov ecx, 004946A8
:0042657D E80E2A0500              call 00478F90
:00426582 50                      push eax
:00426583 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00426586 51                      push ecx
:00426587 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0042658D E897ADFEFF              call 00411329
:00426592 85C0                    test eax, eax
:00426594 750D                    jne 004265A3

* Possible StringData Ref from Data Obj ->"in ReadTokugiAm()"
                                  |
:00426596 6844CF4700              push 0047CF44
:0042659B E8FCD5FFFF              call 00423B9C
:004265A0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426594(C)
|
:004265A3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004265A9 E87776FEFF              call 0040DC25

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004265AE 6A04                    push 00000004
:004265B0 6A00                    push 00000000
:004265B2 6800200000              push 00002000
:004265B7 B9A8464900              mov ecx, 004946A8
:004265BC E8CF290500              call 00478F90
:004265C1 50                      push eax
:004265C2 E880110000              call 00427747
:004265C7 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004265CA 6A04                    push 00000004
:004265CC 6A00                    push 00000000
:004265CE 6800300000              push 00003000
:004265D3 B9A8464900              mov ecx, 004946A8
:004265D8 E8B3290500              call 00478F90
:004265DD 50                      push eax
:004265DE E864110000              call 00427747
:004265E3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042655D(U)
|
:004265E6 8B55F0                  mov edx, dword ptr [ebp-10]
:004265E9 8995E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], edx
:004265EF C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004265F6 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004265FC E85FF0FDFF              call 00405660
:00426601 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004264D9(U), :004264EA(U)
|
:00426607 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042660A 64890D00000000          mov dword ptr fs:[00000000], ecx
:00426611 8BE5                    mov esp, ebp
:00426613 5D                      pop ebp
:00426614 C3                      ret



* Referenced by a CALL at Address:
|:004264C5   
|
:00426615 55                      push ebp
:00426616 8BEC                    mov ebp, esp
:00426618 81EC80000000            sub esp, 00000080
:0042661E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00426621 6BC950                  imul ecx, 00000050
:00426624 81C1787F4900            add ecx, 00497F78
:0042662A E871CBFDFF              call 004031A0
:0042662F 25FF000000              and eax, 000000FF
:00426634 8945FC                  mov dword ptr [ebp-04], eax
:00426637 837D0C05                cmp dword ptr [ebp+0C], 00000005
:0042663B 771F                    ja 0042665C
:0042663D 837D0C04                cmp dword ptr [ebp+0C], 00000004
:00426641 7419                    je 0042665C
:00426643 8B45FC                  mov eax, dword ptr [ebp-04]
:00426646 50                      push eax
:00426647 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042664A 51                      push ecx
:0042664B 8B5508                  mov edx, dword ptr [ebp+08]
:0042664E 52                      push edx
:0042664F E8E10D0000              call 00427435
:00426654 83C40C                  add esp, 0000000C
:00426657 E9C1080000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042663B(C), :00426641(C)
|
:0042665C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042665F 8945F8                  mov dword ptr [ebp-08], eax
:00426662 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00426665 83E902                  sub ecx, 00000002
:00426668 894DF8                  mov dword ptr [ebp-08], ecx
:0042666B 837DF81D                cmp dword ptr [ebp-08], 0000001D
:0042666F 0F87A5080000            ja 00426F1A
:00426675 8B55F8                  mov edx, dword ptr [ebp-08]
:00426678 FF2495216F4200          jmp dword ptr [4*edx+00426F21]
:0042667F 8B4508                  mov eax, dword ptr [ebp+08]
:00426682 8945F4                  mov dword ptr [ebp-0C], eax
:00426685 837DF404                cmp dword ptr [ebp-0C], 00000004
:00426689 740E                    je 00426699
:0042668B 837DF40D                cmp dword ptr [ebp-0C], 0000000D
:0042668F 740F                    je 004266A0
:00426691 837DF41D                cmp dword ptr [ebp-0C], 0000001D
:00426695 7413                    je 004266AA
:00426697 EB1B                    jmp 004266B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426689(C)
|
:00426699 33C0                    xor eax, eax
:0042669B E97D080000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042668F(C)
|
:004266A0 B885000000              mov eax, 00000085
:004266A5 E973080000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426695(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004266AA B802000000              mov eax, 00000002
:004266AF E969080000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426697(U)
|
:004266B4 83C8FF                  or eax, FFFFFFFF
:004266B7 E961080000              jmp 00426F1D
:004266BC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004266BF 894DF0                  mov dword ptr [ebp-10], ecx
:004266C2 837DF004                cmp dword ptr [ebp-10], 00000004
:004266C6 740E                    je 004266D6
:004266C8 837DF00D                cmp dword ptr [ebp-10], 0000000D
:004266CC 7412                    je 004266E0
:004266CE 837DF01D                cmp dword ptr [ebp-10], 0000001D
:004266D2 7416                    je 004266EA
:004266D4 EB1E                    jmp 004266F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004266C6(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004266D6 B803000000              mov eax, 00000003
:004266DB E93D080000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004266CC(C)
|
:004266E0 B885000000              mov eax, 00000085
:004266E5 E933080000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004266D2(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004266EA B805000000              mov eax, 00000005
:004266EF E929080000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004266D4(U)
|
:004266F4 83C8FF                  or eax, FFFFFFFF
:004266F7 E921080000              jmp 00426F1D
:004266FC 8B5508                  mov edx, dword ptr [ebp+08]
:004266FF 8955EC                  mov dword ptr [ebp-14], edx
:00426702 837DEC08                cmp dword ptr [ebp-14], 00000008
:00426706 7418                    je 00426720
:00426708 837DEC09                cmp dword ptr [ebp-14], 00000009
:0042670C 741C                    je 0042672A
:0042670E 837DEC1C                cmp dword ptr [ebp-14], 0000001C
:00426712 7402                    je 00426716
:00426714 EB1E                    jmp 00426734

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426712(C)
|
:00426716 B886000000              mov eax, 00000086
:0042671B E9FD070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426706(C)
|

* Possible Reference to String Resource ID=00006: ""
                                  |
:00426720 B806000000              mov eax, 00000006
:00426725 E9F3070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042670C(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042672A B807000000              mov eax, 00000007
:0042672F E9E9070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426714(U)
|
:00426734 83C8FF                  or eax, FFFFFFFF
:00426737 E9E1070000              jmp 00426F1D
:0042673C 8B4508                  mov eax, dword ptr [ebp+08]
:0042673F 8945E8                  mov dword ptr [ebp-18], eax
:00426742 837DE808                cmp dword ptr [ebp-18], 00000008
:00426746 7418                    je 00426760
:00426748 837DE809                cmp dword ptr [ebp-18], 00000009
:0042674C 741C                    je 0042676A
:0042674E 837DE81C                cmp dword ptr [ebp-18], 0000001C
:00426752 7402                    je 00426756
:00426754 EB1E                    jmp 00426774

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426752(C)
|
:00426756 B886000000              mov eax, 00000086
:0042675B E9BD070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426746(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00426760 B808000000              mov eax, 00000008
:00426765 E9B3070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042674C(C)
|

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0042676A B809000000              mov eax, 00000009
:0042676F E9A9070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426754(U)
|
:00426774 83C8FF                  or eax, FFFFFFFF
:00426777 E9A1070000              jmp 00426F1D
:0042677C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042677F 894DE4                  mov dword ptr [ebp-1C], ecx
:00426782 837DE41A                cmp dword ptr [ebp-1C], 0000001A
:00426786 7418                    je 004267A0
:00426788 837DE41B                cmp dword ptr [ebp-1C], 0000001B
:0042678C 741C                    je 004267AA
:0042678E 837DE43F                cmp dword ptr [ebp-1C], 0000003F
:00426792 7402                    je 00426796
:00426794 EB1E                    jmp 004267B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426792(C)
|
:00426796 B888000000              mov eax, 00000088
:0042679B E97D070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426786(C)
|
:004267A0 B80B000000              mov eax, 0000000B
:004267A5 E973070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042678C(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004267AA B80A000000              mov eax, 0000000A
:004267AF E969070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426794(U)
|
:004267B4 83C8FF                  or eax, FFFFFFFF
:004267B7 E961070000              jmp 00426F1D
:004267BC 8B5508                  mov edx, dword ptr [ebp+08]
:004267BF 8955E0                  mov dword ptr [ebp-20], edx
:004267C2 837DE01A                cmp dword ptr [ebp-20], 0000001A
:004267C6 7418                    je 004267E0
:004267C8 837DE01B                cmp dword ptr [ebp-20], 0000001B
:004267CC 741C                    je 004267EA
:004267CE 837DE03F                cmp dword ptr [ebp-20], 0000003F
:004267D2 7402                    je 004267D6
:004267D4 EB1E                    jmp 004267F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004267D2(C)
|
:004267D6 B888000000              mov eax, 00000088
:004267DB E93D070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004267C6(C)
|
:004267E0 B80D000000              mov eax, 0000000D
:004267E5 E933070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004267CC(C)
|
:004267EA B80C000000              mov eax, 0000000C
:004267EF E929070000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004267D4(U)
|
:004267F4 83C8FF                  or eax, FFFFFFFF
:004267F7 E921070000              jmp 00426F1D
:004267FC 8B4508                  mov eax, dword ptr [ebp+08]
:004267FF 8945DC                  mov dword ptr [ebp-24], eax
:00426802 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00426805 83E908                  sub ecx, 00000008
:00426808 894DDC                  mov dword ptr [ebp-24], ecx
:0042680B 837DDC37                cmp dword ptr [ebp-24], 00000037
:0042680F 773A                    ja 0042684B
:00426811 8B45DC                  mov eax, dword ptr [ebp-24]
:00426814 33D2                    xor edx, edx
:00426816 8A90AD6F4200            mov dl, byte ptr [eax+00426FAD]
:0042681C FF2495996F4200          jmp dword ptr [4*edx+00426F99]
:00426823 B888000000              mov eax, 00000088
:00426828 E9F0060000              jmp 00426F1D
:0042682D B886000000              mov eax, 00000086
:00426832 E9E6060000              jmp 00426F1D
:00426837 B80E000000              mov eax, 0000000E
:0042683C E9DC060000              jmp 00426F1D
:00426841 B80F000000              mov eax, 0000000F
:00426846 E9D2060000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042680F(C)
|
:0042684B 83C8FF                  or eax, FFFFFFFF
:0042684E E9CA060000              jmp 00426F1D
:00426853 8B4D08                  mov ecx, dword ptr [ebp+08]
:00426856 894DD8                  mov dword ptr [ebp-28], ecx
:00426859 8B55D8                  mov edx, dword ptr [ebp-28]
:0042685C 83EA08                  sub edx, 00000008
:0042685F 8955D8                  mov dword ptr [ebp-28], edx
:00426862 837DD837                cmp dword ptr [ebp-28], 00000037
:00426866 773A                    ja 004268A2
:00426868 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0042686B 33C0                    xor eax, eax
:0042686D 8A81F96F4200            mov al, byte ptr [ecx+00426FF9]
:00426873 FF2485E56F4200          jmp dword ptr [4*eax+00426FE5]
:0042687A B888000000              mov eax, 00000088
:0042687F E999060000              jmp 00426F1D
:00426884 B886000000              mov eax, 00000086
:00426889 E98F060000              jmp 00426F1D
:0042688E B810000000              mov eax, 00000010
:00426893 E985060000              jmp 00426F1D
:00426898 B811000000              mov eax, 00000011
:0042689D E97B060000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426866(C)
|
:004268A2 83C8FF                  or eax, FFFFFFFF
:004268A5 E973060000              jmp 00426F1D
:004268AA 8B5508                  mov edx, dword ptr [ebp+08]
:004268AD 8955D4                  mov dword ptr [ebp-2C], edx
:004268B0 8B45D4                  mov eax, dword ptr [ebp-2C]
:004268B3 83E803                  sub eax, 00000003
:004268B6 8945D4                  mov dword ptr [ebp-2C], eax
:004268B9 837DD41C                cmp dword ptr [ebp-2C], 0000001C
:004268BD 773A                    ja 004268F9
:004268BF 8B55D4                  mov edx, dword ptr [ebp-2C]
:004268C2 33C9                    xor ecx, ecx
:004268C4 8A8A45704200            mov cl, byte ptr [edx+00427045]
:004268CA FF248D31704200          jmp dword ptr [4*ecx+00427031]
:004268D1 B885000000              mov eax, 00000085
:004268D6 E942060000              jmp 00426F1D
:004268DB B886000000              mov eax, 00000086
:004268E0 E938060000              jmp 00426F1D
:004268E5 B812000000              mov eax, 00000012
:004268EA E92E060000              jmp 00426F1D
:004268EF B813000000              mov eax, 00000013
:004268F4 E924060000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004268BD(C)
|
:004268F9 83C8FF                  or eax, FFFFFFFF
:004268FC E91C060000              jmp 00426F1D
:00426901 8B4508                  mov eax, dword ptr [ebp+08]
:00426904 8945D0                  mov dword ptr [ebp-30], eax
:00426907 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0042690A 83E903                  sub ecx, 00000003
:0042690D 894DD0                  mov dword ptr [ebp-30], ecx
:00426910 837DD01C                cmp dword ptr [ebp-30], 0000001C
:00426914 773A                    ja 00426950
:00426916 8B45D0                  mov eax, dword ptr [ebp-30]
:00426919 33D2                    xor edx, edx
:0042691B 8A9076704200            mov dl, byte ptr [eax+00427076]
:00426921 FF249562704200          jmp dword ptr [4*edx+00427062]
:00426928 B885000000              mov eax, 00000085
:0042692D E9EB050000              jmp 00426F1D
:00426932 B886000000              mov eax, 00000086
:00426937 E9E1050000              jmp 00426F1D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0042693C B814000000              mov eax, 00000014
:00426941 E9D7050000              jmp 00426F1D

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:00426946 B815000000              mov eax, 00000015
:0042694B E9CD050000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426914(C)
|
:00426950 83C8FF                  or eax, FFFFFFFF
:00426953 E9C5050000              jmp 00426F1D
:00426958 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042695B 894DCC                  mov dword ptr [ebp-34], ecx
:0042695E 837DCC11                cmp dword ptr [ebp-34], 00000011
:00426962 7402                    je 00426966
:00426964 EB0A                    jmp 00426970

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426962(C)
|
:00426966 B816000000              mov eax, 00000016
:0042696B E9AD050000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426964(U)
|
:00426970 83C8FF                  or eax, FFFFFFFF
:00426973 E9A5050000              jmp 00426F1D
:00426978 8B5508                  mov edx, dword ptr [ebp+08]
:0042697B 8955C8                  mov dword ptr [ebp-38], edx
:0042697E 837DC811                cmp dword ptr [ebp-38], 00000011
:00426982 7402                    je 00426986
:00426984 EB0A                    jmp 00426990

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426982(C)
|
:00426986 B817000000              mov eax, 00000017
:0042698B E98D050000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426984(U)
|
:00426990 83C8FF                  or eax, FFFFFFFF
:00426993 E985050000              jmp 00426F1D
:00426998 8B4508                  mov eax, dword ptr [ebp+08]
:0042699B 8945C4                  mov dword ptr [ebp-3C], eax
:0042699E 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004269A1 83E901                  sub ecx, 00000001
:004269A4 894DC4                  mov dword ptr [ebp-3C], ecx
:004269A7 837DC40E                cmp dword ptr [ebp-3C], 0000000E
:004269AB 773A                    ja 004269E7
:004269AD 8B45C4                  mov eax, dword ptr [ebp-3C]
:004269B0 33D2                    xor edx, edx
:004269B2 8A90A7704200            mov dl, byte ptr [eax+004270A7]
:004269B8 FF249593704200          jmp dword ptr [4*edx+00427093]
:004269BF B885000000              mov eax, 00000085
:004269C4 E954050000              jmp 00426F1D
:004269C9 B887000000              mov eax, 00000087
:004269CE E94A050000              jmp 00426F1D
:004269D3 B818000000              mov eax, 00000018
:004269D8 E940050000              jmp 00426F1D
:004269DD B819000000              mov eax, 00000019
:004269E2 E936050000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004269AB(C)
|
:004269E7 83C8FF                  or eax, FFFFFFFF
:004269EA E92E050000              jmp 00426F1D
:004269EF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004269F2 894DC0                  mov dword ptr [ebp-40], ecx
:004269F5 8B55C0                  mov edx, dword ptr [ebp-40]
:004269F8 83EA01                  sub edx, 00000001
:004269FB 8955C0                  mov dword ptr [ebp-40], edx
:004269FE 837DC00E                cmp dword ptr [ebp-40], 0000000E
:00426A02 773A                    ja 00426A3E
:00426A04 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00426A07 33C0                    xor eax, eax
:00426A09 8A81CA704200            mov al, byte ptr [ecx+004270CA]
:00426A0F FF2485B6704200          jmp dword ptr [4*eax+004270B6]
:00426A16 B885000000              mov eax, 00000085
:00426A1B E9FD040000              jmp 00426F1D
:00426A20 B887000000              mov eax, 00000087
:00426A25 E9F3040000              jmp 00426F1D

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:00426A2A B81A000000              mov eax, 0000001A
:00426A2F E9E9040000              jmp 00426F1D
:00426A34 B81B000000              mov eax, 0000001B
:00426A39 E9DF040000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426A02(C)
|
:00426A3E 83C8FF                  or eax, FFFFFFFF
:00426A41 E9D7040000              jmp 00426F1D
:00426A46 8B5508                  mov edx, dword ptr [ebp+08]
:00426A49 8955BC                  mov dword ptr [ebp-44], edx
:00426A4C 8B45BC                  mov eax, dword ptr [ebp-44]
:00426A4F 83E805                  sub eax, 00000005
:00426A52 8945BC                  mov dword ptr [ebp-44], eax
:00426A55 837DBC39                cmp dword ptr [ebp-44], 00000039
:00426A59 773A                    ja 00426A95
:00426A5B 8B55BC                  mov edx, dword ptr [ebp-44]
:00426A5E 33C9                    xor ecx, ecx
:00426A60 8A8AED704200            mov cl, byte ptr [edx+004270ED]
:00426A66 FF248DD9704200          jmp dword ptr [4*ecx+004270D9]
:00426A6D B81C000000              mov eax, 0000001C
:00426A72 E9A6040000              jmp 00426F1D
:00426A77 B885000000              mov eax, 00000085
:00426A7C E99C040000              jmp 00426F1D
:00426A81 B888000000              mov eax, 00000088
:00426A86 E992040000              jmp 00426F1D
:00426A8B B81D000000              mov eax, 0000001D
:00426A90 E988040000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426A59(C)
|
:00426A95 83C8FF                  or eax, FFFFFFFF
:00426A98 E980040000              jmp 00426F1D
:00426A9D 8B4508                  mov eax, dword ptr [ebp+08]
:00426AA0 8945B8                  mov dword ptr [ebp-48], eax
:00426AA3 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00426AA6 83E905                  sub ecx, 00000005
:00426AA9 894DB8                  mov dword ptr [ebp-48], ecx
:00426AAC 837DB839                cmp dword ptr [ebp-48], 00000039
:00426AB0 773A                    ja 00426AEC
:00426AB2 8B45B8                  mov eax, dword ptr [ebp-48]
:00426AB5 33D2                    xor edx, edx
:00426AB7 8A903B714200            mov dl, byte ptr [eax+0042713B]
:00426ABD FF249527714200          jmp dword ptr [4*edx+00427127]
:00426AC4 B81E000000              mov eax, 0000001E
:00426AC9 E94F040000              jmp 00426F1D
:00426ACE B885000000              mov eax, 00000085
:00426AD3 E945040000              jmp 00426F1D
:00426AD8 B888000000              mov eax, 00000088
:00426ADD E93B040000              jmp 00426F1D
:00426AE2 B81F000000              mov eax, 0000001F
:00426AE7 E931040000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426AB0(C)
|
:00426AEC 83C8FF                  or eax, FFFFFFFF
:00426AEF E929040000              jmp 00426F1D
:00426AF4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00426AF7 894DB4                  mov dword ptr [ebp-4C], ecx
:00426AFA 8B55B4                  mov edx, dword ptr [ebp-4C]
:00426AFD 83EA21                  sub edx, 00000021
:00426B00 8955B4                  mov dword ptr [ebp-4C], edx
:00426B03 837DB41D                cmp dword ptr [ebp-4C], 0000001D
:00426B07 773A                    ja 00426B43
:00426B09 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00426B0C 33C0                    xor eax, eax
:00426B0E 8A8189714200            mov al, byte ptr [ecx+00427189]
:00426B14 FF248575714200          jmp dword ptr [4*eax+00427175]
:00426B1B B820000000              mov eax, 00000020
:00426B20 E9F8030000              jmp 00426F1D
:00426B25 B821000000              mov eax, 00000021
:00426B2A E9EE030000              jmp 00426F1D
:00426B2F B888000000              mov eax, 00000088
:00426B34 E9E4030000              jmp 00426F1D
:00426B39 B822000000              mov eax, 00000022
:00426B3E E9DA030000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426B07(C)
|
:00426B43 83C8FF                  or eax, FFFFFFFF
:00426B46 E9D2030000              jmp 00426F1D
:00426B4B 8B5508                  mov edx, dword ptr [ebp+08]
:00426B4E 8955B0                  mov dword ptr [ebp-50], edx
:00426B51 8B45B0                  mov eax, dword ptr [ebp-50]
:00426B54 83E821                  sub eax, 00000021
:00426B57 8945B0                  mov dword ptr [ebp-50], eax
:00426B5A 837DB01D                cmp dword ptr [ebp-50], 0000001D
:00426B5E 773A                    ja 00426B9A
:00426B60 8B55B0                  mov edx, dword ptr [ebp-50]
:00426B63 33C9                    xor ecx, ecx
:00426B65 8A8ABB714200            mov cl, byte ptr [edx+004271BB]
:00426B6B FF248DA7714200          jmp dword ptr [4*ecx+004271A7]
:00426B72 B823000000              mov eax, 00000023
:00426B77 E9A1030000              jmp 00426F1D
:00426B7C B824000000              mov eax, 00000024
:00426B81 E997030000              jmp 00426F1D
:00426B86 B888000000              mov eax, 00000088
:00426B8B E98D030000              jmp 00426F1D
:00426B90 B825000000              mov eax, 00000025
:00426B95 E983030000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426B5E(C)
|
:00426B9A 83C8FF                  or eax, FFFFFFFF
:00426B9D E97B030000              jmp 00426F1D
:00426BA2 8B4508                  mov eax, dword ptr [ebp+08]
:00426BA5 8945AC                  mov dword ptr [ebp-54], eax
:00426BA8 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00426BAB 83E912                  sub ecx, 00000012
:00426BAE 894DAC                  mov dword ptr [ebp-54], ecx
:00426BB1 837DAC25                cmp dword ptr [ebp-54], 00000025
:00426BB5 7730                    ja 00426BE7
:00426BB7 8B45AC                  mov eax, dword ptr [ebp-54]
:00426BBA 33D2                    xor edx, edx
:00426BBC 8A90ED714200            mov dl, byte ptr [eax+004271ED]
:00426BC2 FF2495D9714200          jmp dword ptr [4*edx+004271D9]
:00426BC9 B826000000              mov eax, 00000026
:00426BCE E94A030000              jmp 00426F1D
:00426BD3 B827000000              mov eax, 00000027
:00426BD8 E940030000              jmp 00426F1D
:00426BDD B828000000              mov eax, 00000028
:00426BE2 E936030000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426BB5(C)
|
:00426BE7 83C8FF                  or eax, FFFFFFFF
:00426BEA E92E030000              jmp 00426F1D
:00426BEF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00426BF2 894DA8                  mov dword ptr [ebp-58], ecx
:00426BF5 8B55A8                  mov edx, dword ptr [ebp-58]
:00426BF8 83EA12                  sub edx, 00000012
:00426BFB 8955A8                  mov dword ptr [ebp-58], edx
:00426BFE 837DA825                cmp dword ptr [ebp-58], 00000025
:00426C02 7730                    ja 00426C34
:00426C04 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00426C07 33C0                    xor eax, eax
:00426C09 8A8127724200            mov al, byte ptr [ecx+00427227]
:00426C0F FF248513724200          jmp dword ptr [4*eax+00427213]
:00426C16 B829000000              mov eax, 00000029
:00426C1B E9FD020000              jmp 00426F1D
:00426C20 B82A000000              mov eax, 0000002A
:00426C25 E9F3020000              jmp 00426F1D
:00426C2A B82B000000              mov eax, 0000002B
:00426C2F E9E9020000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426C02(C)
|
:00426C34 83C8FF                  or eax, FFFFFFFF
:00426C37 E9E1020000              jmp 00426F1D
:00426C3C 8B5508                  mov edx, dword ptr [ebp+08]
:00426C3F 8955A4                  mov dword ptr [ebp-5C], edx
:00426C42 8B45A4                  mov eax, dword ptr [ebp-5C]
:00426C45 83E814                  sub eax, 00000014
:00426C48 8945A4                  mov dword ptr [ebp-5C], eax
:00426C4B 837DA428                cmp dword ptr [ebp-5C], 00000028
:00426C4F 7730                    ja 00426C81
:00426C51 8B55A4                  mov edx, dword ptr [ebp-5C]
:00426C54 33C9                    xor ecx, ecx
:00426C56 8A8A61724200            mov cl, byte ptr [edx+00427261]
:00426C5C FF248D4D724200          jmp dword ptr [4*ecx+0042724D]
:00426C63 B82C000000              mov eax, 0000002C
:00426C68 E9B0020000              jmp 00426F1D
:00426C6D B82D000000              mov eax, 0000002D
:00426C72 E9A6020000              jmp 00426F1D
:00426C77 B82E000000              mov eax, 0000002E
:00426C7C E99C020000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426C4F(C)
|
:00426C81 83C8FF                  or eax, FFFFFFFF
:00426C84 E994020000              jmp 00426F1D
:00426C89 8B4508                  mov eax, dword ptr [ebp+08]
:00426C8C 8945A0                  mov dword ptr [ebp-60], eax
:00426C8F 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00426C92 83E914                  sub ecx, 00000014
:00426C95 894DA0                  mov dword ptr [ebp-60], ecx
:00426C98 837DA028                cmp dword ptr [ebp-60], 00000028
:00426C9C 7730                    ja 00426CCE
:00426C9E 8B45A0                  mov eax, dword ptr [ebp-60]
:00426CA1 33D2                    xor edx, edx
:00426CA3 8A909E724200            mov dl, byte ptr [eax+0042729E]
:00426CA9 FF24958A724200          jmp dword ptr [4*edx+0042728A]
:00426CB0 B82F000000              mov eax, 0000002F
:00426CB5 E963020000              jmp 00426F1D
:00426CBA B830000000              mov eax, 00000030
:00426CBF E959020000              jmp 00426F1D
:00426CC4 B831000000              mov eax, 00000031
:00426CC9 E94F020000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426C9C(C)
|
:00426CCE 83C8FF                  or eax, FFFFFFFF
:00426CD1 E947020000              jmp 00426F1D
:00426CD6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00426CD9 894D9C                  mov dword ptr [ebp-64], ecx
:00426CDC 8B559C                  mov edx, dword ptr [ebp-64]
:00426CDF 83EA16                  sub edx, 00000016
:00426CE2 89559C                  mov dword ptr [ebp-64], edx
:00426CE5 837D9C2A                cmp dword ptr [ebp-64], 0000002A
:00426CE9 7744                    ja 00426D2F
:00426CEB 8B4D9C                  mov ecx, dword ptr [ebp-64]
:00426CEE 33C0                    xor eax, eax
:00426CF0 8A81DF724200            mov al, byte ptr [ecx+004272DF]
:00426CF6 FF2485C7724200          jmp dword ptr [4*eax+004272C7]
:00426CFD B832000000              mov eax, 00000032
:00426D02 E916020000              jmp 00426F1D
:00426D07 B833000000              mov eax, 00000033
:00426D0C E90C020000              jmp 00426F1D
:00426D11 B888000000              mov eax, 00000088
:00426D16 E902020000              jmp 00426F1D
:00426D1B B888000000              mov eax, 00000088
:00426D20 E9F8010000              jmp 00426F1D
:00426D25 B834000000              mov eax, 00000034
:00426D2A E9EE010000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426CE9(C)
|
:00426D2F 83C8FF                  or eax, FFFFFFFF
:00426D32 E9E6010000              jmp 00426F1D
:00426D37 8B5508                  mov edx, dword ptr [ebp+08]
:00426D3A 895598                  mov dword ptr [ebp-68], edx
:00426D3D 8B4598                  mov eax, dword ptr [ebp-68]
:00426D40 83E816                  sub eax, 00000016
:00426D43 894598                  mov dword ptr [ebp-68], eax
:00426D46 837D982A                cmp dword ptr [ebp-68], 0000002A
:00426D4A 7744                    ja 00426D90
:00426D4C 8B5598                  mov edx, dword ptr [ebp-68]
:00426D4F 33C9                    xor ecx, ecx
:00426D51 8A8A22734200            mov cl, byte ptr [edx+00427322]
:00426D57 FF248D0A734200          jmp dword ptr [4*ecx+0042730A]
:00426D5E B835000000              mov eax, 00000035
:00426D63 E9B5010000              jmp 00426F1D

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:0036, ""
                                  |
:00426D68 B836000000              mov eax, 00000036
:00426D6D E9AB010000              jmp 00426F1D
:00426D72 B888000000              mov eax, 00000088
:00426D77 E9A1010000              jmp 00426F1D
:00426D7C B888000000              mov eax, 00000088
:00426D81 E997010000              jmp 00426F1D
:00426D86 B837000000              mov eax, 00000037
:00426D8B E98D010000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426D4A(C)
|
:00426D90 83C8FF                  or eax, FFFFFFFF
:00426D93 E985010000              jmp 00426F1D
:00426D98 8B4508                  mov eax, dword ptr [ebp+08]
:00426D9B 894594                  mov dword ptr [ebp-6C], eax
:00426D9E 8B4D94                  mov ecx, dword ptr [ebp-6C]
:00426DA1 83E90E                  sub ecx, 0000000E
:00426DA4 894D94                  mov dword ptr [ebp-6C], ecx
:00426DA7 837D942F                cmp dword ptr [ebp-6C], 0000002F
:00426DAB 7730                    ja 00426DDD
:00426DAD 8B4594                  mov eax, dword ptr [ebp-6C]
:00426DB0 33D2                    xor edx, edx
:00426DB2 8A906D734200            mov dl, byte ptr [eax+0042736D]
:00426DB8 FF24954D734200          jmp dword ptr [4*edx+0042734D]
:00426DBF B838000000              mov eax, 00000038
:00426DC4 E954010000              jmp 00426F1D
:00426DC9 B839000000              mov eax, 00000039
:00426DCE E94A010000              jmp 00426F1D

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003A, ""
                                  |
:00426DD3 B83A000000              mov eax, 0000003A
:00426DD8 E940010000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426DAB(C)
|
:00426DDD 83C8FF                  or eax, FFFFFFFF
:00426DE0 E938010000              jmp 00426F1D
:00426DE5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00426DE8 894D90                  mov dword ptr [ebp-70], ecx
:00426DEB 8B5590                  mov edx, dword ptr [ebp-70]
:00426DEE 83EA0E                  sub edx, 0000000E
:00426DF1 895590                  mov dword ptr [ebp-70], edx
:00426DF4 837D902F                cmp dword ptr [ebp-70], 0000002F
:00426DF8 7730                    ja 00426E2A
:00426DFA 8B4D90                  mov ecx, dword ptr [ebp-70]
:00426DFD 33C0                    xor eax, eax
:00426DFF 8A81BD734200            mov al, byte ptr [ecx+004273BD]
:00426E05 FF24859D734200          jmp dword ptr [4*eax+0042739D]

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003B, ""
                                  |
:00426E0C B83B000000              mov eax, 0000003B
:00426E11 E907010000              jmp 00426F1D

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003C, ""
                                  |
:00426E16 B83C000000              mov eax, 0000003C
:00426E1B E9FD000000              jmp 00426F1D
:00426E20 B83D000000              mov eax, 0000003D
:00426E25 E9F3000000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426DF8(C)
|
:00426E2A 83C8FF                  or eax, FFFFFFFF
:00426E2D E9EB000000              jmp 00426F1D
:00426E32 8B5508                  mov edx, dword ptr [ebp+08]
:00426E35 89558C                  mov dword ptr [ebp-74], edx
:00426E38 8B458C                  mov eax, dword ptr [ebp-74]
:00426E3B 83E829                  sub eax, 00000029
:00426E3E 89458C                  mov dword ptr [ebp-74], eax
:00426E41 837D8C0F                cmp dword ptr [ebp-74], 0000000F
:00426E45 7730                    ja 00426E77
:00426E47 8B558C                  mov edx, dword ptr [ebp-74]
:00426E4A 33C9                    xor ecx, ecx
:00426E4C 8A8A01744200            mov cl, byte ptr [edx+00427401]
:00426E52 FF248DED734200          jmp dword ptr [4*ecx+004273ED]
:00426E59 B83E000000              mov eax, 0000003E
:00426E5E E9BA000000              jmp 00426F1D
:00426E63 B83F000000              mov eax, 0000003F
:00426E68 E9B0000000              jmp 00426F1D
:00426E6D B840000000              mov eax, 00000040
:00426E72 E9A6000000              jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426E45(C)
|
:00426E77 83C8FF                  or eax, FFFFFFFF
:00426E7A E99E000000              jmp 00426F1D
:00426E7F 8B4508                  mov eax, dword ptr [ebp+08]
:00426E82 894588                  mov dword ptr [ebp-78], eax
:00426E85 8B4D88                  mov ecx, dword ptr [ebp-78]
:00426E88 83E929                  sub ecx, 00000029
:00426E8B 894D88                  mov dword ptr [ebp-78], ecx
:00426E8E 837D880F                cmp dword ptr [ebp-78], 0000000F
:00426E92 7727                    ja 00426EBB
:00426E94 8B4588                  mov eax, dword ptr [ebp-78]
:00426E97 33D2                    xor edx, edx
:00426E99 8A9025744200            mov dl, byte ptr [eax+00427425]
:00426E9F FF249511744200          jmp dword ptr [4*edx+00427411]
:00426EA6 B841000000              mov eax, 00000041
:00426EAB EB70                    jmp 00426F1D
:00426EAD B842000000              mov eax, 00000042
:00426EB2 EB69                    jmp 00426F1D
:00426EB4 B843000000              mov eax, 00000043
:00426EB9 EB62                    jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426E92(C)
|
:00426EBB 83C8FF                  or eax, FFFFFFFF
:00426EBE EB5D                    jmp 00426F1D
:00426EC0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00426EC3 894D84                  mov dword ptr [ebp-7C], ecx
:00426EC6 837D8420                cmp dword ptr [ebp-7C], 00000020
:00426ECA 740E                    je 00426EDA
:00426ECC 837D8431                cmp dword ptr [ebp-7C], 00000031
:00426ED0 7416                    je 00426EE8
:00426ED2 837D8435                cmp dword ptr [ebp-7C], 00000035
:00426ED6 7409                    je 00426EE1
:00426ED8 EB0E                    jmp 00426EE8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426ECA(C)
|
:00426EDA B845000000              mov eax, 00000045
:00426EDF EB3C                    jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426ED6(C)
|
:00426EE1 B844000000              mov eax, 00000044
:00426EE6 EB35                    jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426ED0(C), :00426ED8(U)
|
:00426EE8 83C8FF                  or eax, FFFFFFFF
:00426EEB EB30                    jmp 00426F1D
:00426EED 8B5508                  mov edx, dword ptr [ebp+08]
:00426EF0 895580                  mov dword ptr [ebp-80], edx
:00426EF3 837D8020                cmp dword ptr [ebp-80], 00000020
:00426EF7 740E                    je 00426F07
:00426EF9 837D8031                cmp dword ptr [ebp-80], 00000031
:00426EFD 7416                    je 00426F15
:00426EFF 837D8035                cmp dword ptr [ebp-80], 00000035
:00426F03 7409                    je 00426F0E
:00426F05 EB0E                    jmp 00426F15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426EF7(C)
|
:00426F07 B847000000              mov eax, 00000047
:00426F0C EB0F                    jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426F03(C)
|
:00426F0E B848000000              mov eax, 00000048
:00426F13 EB08                    jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426EFD(C), :00426F05(U)
|
:00426F15 83C8FF                  or eax, FFFFFFFF
:00426F18 EB03                    jmp 00426F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042666F(C)
|
:00426F1A 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00426657(U), :0042669B(U), :004266A5(U), :004266AF(U), :004266B7(U)
|:004266DB(U), :004266E5(U), :004266EF(U), :004266F7(U), :0042671B(U)
|:00426725(U), :0042672F(U), :00426737(U), :0042675B(U), :00426765(U)
|:0042676F(U), :00426777(U), :0042679B(U), :004267A5(U), :004267AF(U)
|:004267B7(U), :004267DB(U), :004267E5(U), :004267EF(U), :004267F7(U)
|:00426828(U), :00426832(U), :0042683C(U), :00426846(U), :0042684E(U)
|:0042687F(U), :00426889(U), :00426893(U), :0042689D(U), :004268A5(U)
|:004268D6(U), :004268E0(U), :004268EA(U), :004268F4(U), :004268FC(U)
|:0042692D(U), :00426937(U), :00426941(U), :0042694B(U), :00426953(U)
|:0042696B(U), :00426973(U), :0042698B(U), :00426993(U), :004269C4(U)
|:004269CE(U), :004269D8(U), :004269E2(U), :004269EA(U), :00426A1B(U)
|:00426A25(U), :00426A2F(U), :00426A39(U), :00426A41(U), :00426A72(U)
|:00426A7C(U), :00426A86(U), :00426A90(U), :00426A98(U), :00426AC9(U)
|:00426AD3(U), :00426ADD(U), :00426AE7(U), :00426AEF(U), :00426B20(U)
|:00426B2A(U), :00426B34(U), :00426B3E(U), :00426B46(U), :00426B77(U)
|:00426B81(U), :00426B8B(U), :00426B95(U), :00426B9D(U), :00426BCE(U)
|:00426BD8(U), :00426BE2(U), :00426BEA(U), :00426C1B(U), :00426C25(U)
|:00426C2F(U), :00426C37(U), :00426C68(U), :00426C72(U), :00426C7C(U)
|:00426C84(U), :00426CB5(U), :00426CBF(U), :00426CC9(U), :00426CD1(U)
|:00426D02(U), :00426D0C(U), :00426D16(U), :00426D20(U), :00426D2A(U)
|:00426D32(U), :00426D63(U), :00426D6D(U), :00426D77(U), :00426D81(U)
|:00426D8B(U), :00426D93(U), :00426DC4(U), :00426DCE(U), :00426DD8(U)
|:00426DE0(U), :00426E11(U), :00426E1B(U), :00426E25(U), :00426E2D(U)
|:00426E5E(U), :00426E68(U), :00426E72(U), :00426E7A(U), :00426EAB(U)
|:00426EB2(U), :00426EB9(U), :00426EBE(U), :00426EDF(U), :00426EE6(U)
|:00426EEB(U), :00426F0C(U), :00426F13(U), :00426F18(U)
|
:00426F1D 8BE5                    mov esp, ebp
:00426F1F 5D                      pop ebp
:00426F20 C3                      ret



:00426F21 7F664200                DWORD 0042667F
:00426F25 BC664200                DWORD 004266BC
:00426F29 FC664200                DWORD 004266FC
:00426F2D 3C674200                DWORD 0042673C
:00426F31 7C674200                DWORD 0042677C
:00426F35 BC674200                DWORD 004267BC
:00426F39 FC674200                DWORD 004267FC
:00426F3D 53684200                DWORD 00426853
:00426F41 AA684200                DWORD 004268AA
:00426F45 01694200                DWORD 00426901
:00426F49 58694200                DWORD 00426958
:00426F4D 78694200                DWORD 00426978
:00426F51 98694200                DWORD 00426998
:00426F55 EF694200                DWORD 004269EF
:00426F59 466A4200                DWORD 00426A46
:00426F5D 9D6A4200                DWORD 00426A9D
:00426F61 F46A4200                DWORD 00426AF4
:00426F65 4B6B4200                DWORD 00426B4B
:00426F69 A26B4200                DWORD 00426BA2
:00426F6D EF6B4200                DWORD 00426BEF
:00426F71 3C6C4200                DWORD 00426C3C
:00426F75 896C4200                DWORD 00426C89
:00426F79 D66C4200                DWORD 00426CD6
:00426F7D 376D4200                DWORD 00426D37
:00426F81 986D4200                DWORD 00426D98
:00426F85 E56D4200                DWORD 00426DE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00426F21(C)
|
:00426F89 326E4200                DWORD 00426E32
:00426F8D 7F6E4200                DWORD 00426E7F
:00426F91 C06E4200                DWORD 00426EC0
:00426F95 ED6E4200                DWORD 00426EED
:00426F99 37684200                DWORD 00426837
:00426F9D 41684200                DWORD 00426841
:00426FA1 2D684200                DWORD 0042682D
:00426FA5 23684200                DWORD 00426823
:00426FA9 4B684200                DWORD 0042684B


:00426FAD 0001                    add byte ptr [ecx], al
:00426FAF 0404                    add al, 04
:00426FB1 0404                    add al, 04
:00426FB3 0404                    add al, 04
:00426FB5 0404                    add al, 04
:00426FB7 0404                    add al, 04
:00426FB9 0404                    add al, 04
:00426FBB 0404                    add al, 04
:00426FBD 0404                    add al, 04
:00426FBF 0404                    add al, 04
:00426FC1 020404                  add al, byte ptr [esp+eax]
:00426FC4 0404                    add al, 04
:00426FC6 0404                    add al, 04
:00426FC8 0404                    add al, 04
:00426FCA 0404                    add al, 04
:00426FCC 0404                    add al, 04
:00426FCE 0404                    add al, 04
:00426FD0 0404                    add al, 04
:00426FD2 0404                    add al, 04
:00426FD4 0404                    add al, 04
:00426FD6 0404                    add al, 04
:00426FD8 0404                    add al, 04
:00426FDA 0404                    add al, 04
:00426FDC 0404                    add al, 04
:00426FDE 0404                    add al, 04
:00426FE0 0404                    add al, 04
:00426FE2 0404                    add al, 04
:00426FE4 038E68420098            add ecx, dword ptr [esi+98004268]
:00426FEA 6842008468              push 68840042
:00426FEF 42                      inc edx
:00426FF0 007A68                  add byte ptr [edx+68], bh
:00426FF3 42                      inc edx
:00426FF4 00A268420000            add byte ptr [edx+00004268], ah
:00426FFA 010404                  add dword ptr [esp+eax], eax
:00426FFD 0404                    add al, 04
:00426FFF 0404                    add al, 04
:00427001 0404                    add al, 04
:00427003 0404                    add al, 04
:00427005 0404                    add al, 04
:00427007 0404                    add al, 04
:00427009 0404                    add al, 04
:0042700B 0404                    add al, 04
:0042700D 020404                  add al, byte ptr [esp+eax]
:00427010 0404                    add al, 04
:00427012 0404                    add al, 04
:00427014 0404                    add al, 04
:00427016 0404                    add al, 04
:00427018 0404                    add al, 04
:0042701A 0404                    add al, 04
:0042701C 0404                    add al, 04
:0042701E 0404                    add al, 04
:00427020 0404                    add al, 04
:00427022 0404                    add al, 04
:00427024 0404                    add al, 04
:00427026 0404                    add al, 04
:00427028 0404                    add al, 04
:0042702A 0404                    add al, 04
:0042702C 0404                    add al, 04
:0042702E 0404                    add al, 04
:00427030 03D1                    add edx, ecx
:00427032 684200DB68              push 68DB0042
:00427037 42                      inc edx
:00427038 00E5                    add ch, ah
:0042703A 684200EF68              push 68EF0042
:0042703F 42                      inc edx
:00427040 00F9                    add cl, bh
:00427042 6842000004              push 04000042
:00427047 0404                    add al, 04
:00427049 0404                    add al, 04
:0042704B 0401                    add al, 01
:0042704D 0402                    add al, 02
:0042704F 0404                    add al, 04
:00427051 0404                    add al, 04
:00427053 0404                    add al, 04
:00427055 0404                    add al, 04
:00427057 0404                    add al, 04
:00427059 0404                    add al, 04
:0042705B 0404                    add al, 04
:0042705D 0404                    add al, 04
:0042705F 0404                    add al, 04
:00427061 0328                    add ebp, dword ptr [eax]
:00427063 69420032694200          imul eax, dword ptr [edx+00], 00426932

:0042706A 3C694200                DWORD 0042693C
:0042706E 46694200                DWORD 00426946
:00427072 50694200                DWORD 00426950


:00427076 000404                  add byte ptr [esp+eax], al
:00427079 0404                    add al, 04
:0042707B 0404                    add al, 04
:0042707D 010402                  add dword ptr [edx+eax], eax
:00427080 0404                    add al, 04
:00427082 0404                    add al, 04
:00427084 0404                    add al, 04
:00427086 0404                    add al, 04
:00427088 0404                    add al, 04
:0042708A 0404                    add al, 04
:0042708C 0404                    add al, 04
:0042708E 0404                    add al, 04
:00427090 0404                    add al, 04
:00427092 03D3                    add edx, ebx
:00427094 694200BF694200          imul eax, dword ptr [edx+00], 004269BF

:0042709B C9694200                DWORD 004269C9
:0042709F DD694200                DWORD 004269DD
:004270A3 E7694200                DWORD 004269E7


:004270A7 0001                    add byte ptr [ecx], al
:004270A9 0404                    add al, 04
:004270AB 0404                    add al, 04
:004270AD 0404                    add al, 04
:004270AF 0404                    add al, 04
:004270B1 020404                  add al, byte ptr [esp+eax]
:004270B4 0403                    add al, 03

:004270B6 2A6A4200                DWORD 00426A2A
:004270BA 166A4200                DWORD 00426A16
:004270BE 206A4200                DWORD 00426A20
:004270C2 346A4200                DWORD 00426A34
:004270C6 3E6A4200                DWORD 00426A3E


:004270CA 0001                    add byte ptr [ecx], al
:004270CC 0404                    add al, 04
:004270CE 0404                    add al, 04
:004270D0 0404                    add al, 04
:004270D2 0404                    add al, 04
:004270D4 020404                  add al, byte ptr [esp+eax]
:004270D7 0403                    add al, 03

:004270D9 8B6A4200                DWORD 00426A8B
:004270DD 776A4200                DWORD 00426A77
:004270E1 6D6A4200                DWORD 00426A6D
:004270E5 816A4200                DWORD 00426A81
:004270E9 956A4200                DWORD 00426A95


:004270ED 000401                  add byte ptr [ecx+eax], al
:004270F0 0404                    add al, 04
:004270F2 0404                    add al, 04
:004270F4 0404                    add al, 04
:004270F6 0404                    add al, 04
:004270F8 020404                  add al, byte ptr [esp+eax]
:004270FB 0404                    add al, 04
:004270FD 0404                    add al, 04
:004270FF 0404                    add al, 04
:00427101 0404                    add al, 04
:00427103 0404                    add al, 04
:00427105 0404                    add al, 04
:00427107 0404                    add al, 04
:00427109 0404                    add al, 04
:0042710B 0404                    add al, 04
:0042710D 0404                    add al, 04
:0042710F 0404                    add al, 04
:00427111 0404                    add al, 04
:00427113 0404                    add al, 04
:00427115 0404                    add al, 04
:00427117 0404                    add al, 04
:00427119 0404                    add al, 04
:0042711B 0404                    add al, 04
:0042711D 0404                    add al, 04
:0042711F 0404                    add al, 04
:00427121 0404                    add al, 04
:00427123 0404                    add al, 04
:00427125 0403                    add al, 03

:00427127 E26A4200                DWORD 00426AE2
:0042712B CE6A4200                DWORD 00426ACE
:0042712F C46A4200                DWORD 00426AC4
:00427133 D86A4200                DWORD 00426AD8
:00427137 EC6A4200                DWORD 00426AEC


:0042713B 000401                  add byte ptr [ecx+eax], al
:0042713E 0404                    add al, 04
:00427140 0404                    add al, 04
:00427142 0404                    add al, 04
:00427144 0404                    add al, 04
:00427146 020404                  add al, byte ptr [esp+eax]
:00427149 0404                    add al, 04
:0042714B 0404                    add al, 04
:0042714D 0404                    add al, 04
:0042714F 0404                    add al, 04
:00427151 0404                    add al, 04
:00427153 0404                    add al, 04
:00427155 0404                    add al, 04
:00427157 0404                    add al, 04
:00427159 0404                    add al, 04
:0042715B 0404                    add al, 04
:0042715D 0404                    add al, 04
:0042715F 0404                    add al, 04
:00427161 0404                    add al, 04
:00427163 0404                    add al, 04
:00427165 0404                    add al, 04
:00427167 0404                    add al, 04
:00427169 0404                    add al, 04
:0042716B 0404                    add al, 04
:0042716D 0404                    add al, 04
:0042716F 0404                    add al, 04
:00427171 0404                    add al, 04
:00427173 0403                    add al, 03

:00427175 396B4200                DWORD 00426B39
:00427179 1B6B4200                DWORD 00426B1B
:0042717D 256B4200                DWORD 00426B25
:00427181 2F6B4200                DWORD 00426B2F
:00427185 436B4200                DWORD 00426B43


:00427189 0001                    add byte ptr [ecx], al
:0042718B 020404                  add al, byte ptr [esp+eax]
:0042718E 0404                    add al, 04
:00427190 0404                    add al, 04
:00427192 0404                    add al, 04
:00427194 0404                    add al, 04
:00427196 0404                    add al, 04
:00427198 0404                    add al, 04
:0042719A 0404                    add al, 04
:0042719C 0404                    add al, 04
:0042719E 0404                    add al, 04
:004271A0 0404                    add al, 04
:004271A2 0404                    add al, 04
:004271A4 0404                    add al, 04
:004271A6 03906B420072            add edx, dword ptr [eax+7200426B]
:004271AC 6B42007C                imul eax, dword ptr [edx+00], 0000007C
:004271B0 6B420086                imul eax, dword ptr [edx+00], FFFFFF86
:004271B4 6B42009A                imul eax, dword ptr [edx+00], FFFFFF9A
:004271B8 6B420000                imul eax, dword ptr [edx+00], 00000000
:004271BC 0102                    add dword ptr [edx], eax
:004271BE 0404                    add al, 04
:004271C0 0404                    add al, 04
:004271C2 0404                    add al, 04
:004271C4 0404                    add al, 04
:004271C6 0404                    add al, 04
:004271C8 0404                    add al, 04
:004271CA 0404                    add al, 04
:004271CC 0404                    add al, 04
:004271CE 0404                    add al, 04
:004271D0 0404                    add al, 04
:004271D2 0404                    add al, 04
:004271D4 0404                    add al, 04
:004271D6 0404                    add al, 04
:004271D8 03C9                    add ecx, ecx
:004271DA 6B4200DD                imul eax, dword ptr [edx+00], FFFFFFDD
:004271DE 6B4200D3                imul eax, dword ptr [edx+00], FFFFFFD3
:004271E2 6B4200DD                imul eax, dword ptr [edx+00], FFFFFFDD
:004271E6 6B4200E7                imul eax, dword ptr [edx+00], FFFFFFE7
:004271EA 6B420000                imul eax, dword ptr [edx+00], 00000000
:004271EE 000404                  add byte ptr [esp+eax], al
:004271F1 0404                    add al, 04
:004271F3 0401                    add al, 01
:004271F5 0404                    add al, 04
:004271F7 0404                    add al, 04
:004271F9 0404                    add al, 04
:004271FB 0404                    add al, 04
:004271FD 0404                    add al, 04
:004271FF 0404                    add al, 04
:00427201 0404                    add al, 04
:00427203 0404                    add al, 04
:00427205 0404                    add al, 04
:00427207 0404                    add al, 04
:00427209 0202                    add al, byte ptr [edx]
:0042720B 0404                    add al, 04
:0042720D 0404                    add al, 04
:0042720F 0404                    add al, 04
:00427211 0403                    add al, 03

:00427213 166C4200                DWORD 00426C16
:00427217 2A6C4200                DWORD 00426C2A
:0042721B 206C4200                DWORD 00426C20
:0042721F 2A6C4200                DWORD 00426C2A
:00427223 346C4200                DWORD 00426C34


:00427227 0000                    add byte ptr [eax], al
:00427229 0404                    add al, 04
:0042722B 0404                    add al, 04
:0042722D 0401                    add al, 01
:0042722F 0404                    add al, 04
:00427231 0404                    add al, 04
:00427233 0404                    add al, 04
:00427235 0404                    add al, 04
:00427237 0404                    add al, 04
:00427239 0404                    add al, 04
:0042723B 0404                    add al, 04
:0042723D 0404                    add al, 04
:0042723F 0404                    add al, 04
:00427241 0404                    add al, 04
:00427243 0202                    add al, byte ptr [edx]
:00427245 0404                    add al, 04
:00427247 0404                    add al, 04
:00427249 0404                    add al, 04
:0042724B 0403                    add al, 03

:0042724D 636C4200                DWORD 00426C63
:00427251 776C4200                DWORD 00426C77
:00427255 6D6C4200                DWORD 00426C6D
:00427259 6D6C4200                DWORD 00426C6D
:0042725D 816C4200                DWORD 00426C81


:00427261 0000                    add byte ptr [eax], al
:00427263 0401                    add al, 01
:00427265 0404                    add al, 04
:00427267 0404                    add al, 04
:00427269 0404                    add al, 04
:0042726B 0404                    add al, 04
:0042726D 0404                    add al, 04
:0042726F 0404                    add al, 04
:00427271 0404                    add al, 04
:00427273 0404                    add al, 04
:00427275 0404                    add al, 04
:00427277 0404                    add al, 04
:00427279 020404                  add al, byte ptr [esp+eax]
:0042727C 0404                    add al, 04
:0042727E 0404                    add al, 04
:00427280 0404                    add al, 04
:00427282 0404                    add al, 04
:00427284 0404                    add al, 04
:00427286 0404                    add al, 04
:00427288 0403                    add al, 03

:0042728A B06C4200                DWORD 00426CB0
:0042728E C46C4200                DWORD 00426CC4
:00427292 BA6C4200                DWORD 00426CBA
:00427296 BA6C4200                DWORD 00426CBA
:0042729A CE6C4200                DWORD 00426CCE


:0042729E 0000                    add byte ptr [eax], al
:004272A0 0401                    add al, 01
:004272A2 0404                    add al, 04
:004272A4 0404                    add al, 04
:004272A6 0404                    add al, 04
:004272A8 0404                    add al, 04
:004272AA 0404                    add al, 04
:004272AC 0404                    add al, 04
:004272AE 0404                    add al, 04
:004272B0 0404                    add al, 04
:004272B2 0404                    add al, 04
:004272B4 0404                    add al, 04
:004272B6 020404                  add al, byte ptr [esp+eax]
:004272B9 0404                    add al, 04
:004272BB 0404                    add al, 04
:004272BD 0404                    add al, 04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427251(C)
|
:004272BF 0404                    add al, 04
:004272C1 0404                    add al, 04
:004272C3 0404                    add al, 04
:004272C5 0403                    add al, 03

:004272C7 FD6C4200                DWORD 00426CFD
:004272CB 256D4200                DWORD 00426D25
:004272CF 076D4200                DWORD 00426D07
:004272D3 116D4200                DWORD 00426D11
:004272D7 1B6D4200                DWORD 00426D1B
:004272DB 2F6D4200                DWORD 00426D2F


:004272DF 000501050505            add byte ptr [05050501], al
:004272E5 0505020505              add eax, 05050205
:004272EA 0505050505              add eax, 05050505
:004272EF 0505050505              add eax, 05050505
:004272F4 0505030505              add eax, 05050305
:004272F9 0505050505              add eax, 05050505
:004272FE 0505050505              add eax, 05050505
:00427303 0505050505              add eax, 05050505
:00427308 05045E6D42              add eax, 426D5E04
:0042730D 00866D420068            add byte ptr [esi+6800426D], al
:00427313 6D                      insd
:00427314 42                      inc edx
:00427315 00726D                  add byte ptr [edx+6D], dh
:00427318 42                      inc edx
:00427319 007C6D42                add byte ptr [ebp+2*ebp+42], bh
:0042731D 00906D420000            add byte ptr [eax+0000426D], dl
:00427323 0501050505              add eax, 05050501
:00427328 0505020505              add eax, 05050205
:0042732D 0505050505              add eax, 05050505
:00427332 0505050505              add eax, 05050505
:00427337 0505030505              add eax, 05050305
:0042733C 0505050505              add eax, 05050505
:00427341 0505050505              add eax, 05050505
:00427346 0505050505              add eax, 05050505
:0042734B 0504C96D42              add eax, 426DC904
:00427350 00BF6D4200BF            add byte ptr [edi+BF00426D], bh
:00427356 6D                      insd
:00427357 42                      inc edx
:00427358 00C9                    add cl, cl
:0042735A 6D                      insd
:0042735B 42                      inc edx
:0042735C 00C9                    add cl, cl
:0042735E 6D                      insd
:0042735F 42                      inc edx
:00427360 00C9                    add cl, cl
:00427362 6D                      insd
:00427363 42                      inc edx
:00427364 00D3                    add bl, dl
:00427366 6D                      insd
:00427367 42                      inc edx
:00427368 00DD                    add ch, bl
:0042736A 6D                      insd
:0042736B 42                      inc edx
:0042736C 0000                    add byte ptr [eax], al
:0042736E 07                      pop es
:0042736F 07                      pop es
:00427370 07                      pop es
:00427371 07                      pop es
:00427372 07                      pop es
:00427373 07                      pop es
:00427374 07                      pop es
:00427375 07                      pop es
:00427376 07                      pop es
:00427377 07                      pop es
:00427378 07                      pop es
:00427379 07                      pop es
:0042737A 07                      pop es
:0042737B 07                      pop es
:0042737C 07                      pop es
:0042737D 07                      pop es
:0042737E 07                      pop es
:0042737F 07                      pop es
:00427380 07                      pop es
:00427381 07                      pop es
:00427382 07                      pop es
:00427383 0101                    add dword ptr [ecx], eax
:00427385 07                      pop es
:00427386 0207                    add al, byte ptr [edi]
:00427388 07                      pop es
:00427389 07                      pop es
:0042738A 07                      pop es
:0042738B 07                      pop es
:0042738C 07                      pop es
:0042738D 07                      pop es
:0042738E 07                      pop es
:0042738F 07                      pop es
:00427390 07                      pop es
:00427391 07                      pop es
:00427392 0307                    add eax, dword ptr [edi]
:00427394 07                      pop es
:00427395 07                      pop es
:00427396 07                      pop es
:00427397 07                      pop es
:00427398 0407                    add al, 07
:0042739A 050706166E              add eax, 6E160607
:0042739F 42                      inc edx
:004273A0 000C6E                  add byte ptr [esi+2*ebp], cl
:004273A3 42                      inc edx
:004273A4 000C6E                  add byte ptr [esi+2*ebp], cl
:004273A7 42                      inc edx
:004273A8 0016                    add byte ptr [esi], dl
:004273AA 6E                      outsb
:004273AB 42                      inc edx
:004273AC 0016                    add byte ptr [esi], dl
:004273AE 6E                      outsb
:004273AF 42                      inc edx
:004273B0 0016                    add byte ptr [esi], dl
:004273B2 6E                      outsb
:004273B3 42                      inc edx
:004273B4 0020                    add byte ptr [eax], ah
:004273B6 6E                      outsb
:004273B7 42                      inc edx
:004273B8 002A                    add byte ptr [edx], ch
:004273BA 6E                      outsb
:004273BB 42                      inc edx
:004273BC 0000                    add byte ptr [eax], al
:004273BE 07                      pop es
:004273BF 07                      pop es
:004273C0 07                      pop es
:004273C1 07                      pop es
:004273C2 07                      pop es
:004273C3 07                      pop es
:004273C4 07                      pop es
:004273C5 07                      pop es
:004273C6 07                      pop es
:004273C7 07                      pop es
:004273C8 07                      pop es
:004273C9 07                      pop es
:004273CA 07                      pop es
:004273CB 07                      pop es
:004273CC 07                      pop es
:004273CD 07                      pop es
:004273CE 07                      pop es
:004273CF 07                      pop es
:004273D0 07                      pop es
:004273D1 07                      pop es
:004273D2 07                      pop es
:004273D3 0101                    add dword ptr [ecx], eax
:004273D5 07                      pop es
:004273D6 0207                    add al, byte ptr [edi]
:004273D8 07                      pop es
:004273D9 07                      pop es
:004273DA 07                      pop es
:004273DB 07                      pop es
:004273DC 07                      pop es
:004273DD 07                      pop es
:004273DE 07                      pop es
:004273DF 07                      pop es
:004273E0 07                      pop es
:004273E1 07                      pop es
:004273E2 0307                    add eax, dword ptr [edi]
:004273E4 07                      pop es
:004273E5 07                      pop es
:004273E6 07                      pop es
:004273E7 07                      pop es
:004273E8 0407                    add al, 07
:004273EA 050706596E              add eax, 6E590607
:004273EF 42                      inc edx
:004273F0 00636E                  add byte ptr [ebx+6E], ah
:004273F3 42                      inc edx
:004273F4 006D6E                  add byte ptr [ebp+6E], ch
:004273F7 42                      inc edx
:004273F8 006D6E                  add byte ptr [ebp+6E], ch
:004273FB 42                      inc edx
:004273FC 00776E                  add byte ptr [edi+6E], dh
:004273FF 42                      inc edx
:00427400 0000                    add byte ptr [eax], al
:00427402 0101                    add dword ptr [ecx], eax
:00427404 0404                    add al, 04
:00427406 0404                    add al, 04
:00427408 0404                    add al, 04
:0042740A 0404                    add al, 04
:0042740C 020404                  add al, byte ptr [esp+eax]
:0042740F 0403                    add al, 03

:00427411 A66E4200                DWORD 00426EA6
:00427415 AD6E4200                DWORD 00426EAD
:00427419 B46E4200                DWORD 00426EB4
:0042741D B46E4200                DWORD 00426EB4
:00427421 BB6E4200                DWORD 00426EBB


:00427425 0001                    add byte ptr [ecx], al
:00427427 010404                  add dword ptr [esp+eax], eax
:0042742A 0404                    add al, 04
:0042742C 0404                    add al, 04
:0042742E 0404                    add al, 04
:00427430 020404                  add al, byte ptr [esp+eax]
:00427433 0403                    add al, 03

* Referenced by a CALL at Address:
|:0042664F   
|
:00427435 55                      push ebp
:00427436 8BEC                    mov ebp, esp
:00427438 51                      push ecx
:00427439 8B450C                  mov eax, dword ptr [ebp+0C]
:0042743C 8945FC                  mov dword ptr [ebp-04], eax
:0042743F 837DFC05                cmp dword ptr [ebp-04], 00000005
:00427443 7764                    ja 004274A9
:00427445 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00427448 FF248DB0744200          jmp dword ptr [4*ecx+004274B0]
:0042744F 8B5510                  mov edx, dword ptr [ebp+10]
:00427452 52                      push edx
:00427453 8B4508                  mov eax, dword ptr [ebp+08]
:00427456 50                      push eax
:00427457 E86C000000              call 004274C8
:0042745C 83C408                  add esp, 00000008
:0042745F EB4B                    jmp 004274AC
:00427461 8B4D10                  mov ecx, dword ptr [ebp+10]
:00427464 51                      push ecx
:00427465 8B5508                  mov edx, dword ptr [ebp+08]
:00427468 52                      push edx
:00427469 E8FF000000              call 0042756D
:0042746E 83C408                  add esp, 00000008
:00427471 EB39                    jmp 004274AC
:00427473 8B4510                  mov eax, dword ptr [ebp+10]
:00427476 50                      push eax
:00427477 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042747A 51                      push ecx
:0042747B E822020000              call 004276A2
:00427480 83C408                  add esp, 00000008
:00427483 EB27                    jmp 004274AC
:00427485 8B5510                  mov edx, dword ptr [ebp+10]
:00427488 52                      push edx
:00427489 8B4508                  mov eax, dword ptr [ebp+08]
:0042748C 50                      push eax
:0042748D E82B010000              call 004275BD
:00427492 83C408                  add esp, 00000008
:00427495 EB15                    jmp 004274AC
:00427497 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042749A 51                      push ecx
:0042749B 8B5508                  mov edx, dword ptr [ebp+08]
:0042749E 52                      push edx
:0042749F E85C010000              call 00427600
:004274A4 83C408                  add esp, 00000008
:004274A7 EB03                    jmp 004274AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427443(C)
|
:004274A9 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042745F(U), :00427471(U), :00427483(U), :00427495(U), :004274A7(U)
|
:004274AC 8BE5                    mov esp, ebp
:004274AE 5D                      pop ebp
:004274AF C3                      ret



:004274B0 4F744200                DWORD 0042744F
:004274B4 61744200                DWORD 00427461
:004274B8 73744200                DWORD 00427473
:004274BC 85744200                DWORD 00427485
:004274C0 A9744200                DWORD 004274A9
:004274C4 97744200                DWORD 00427497



* Referenced by a CALL at Address:
|:00427457   
|
:004274C8 55                      push ebp
:004274C9 8BEC                    mov ebp, esp
:004274CB 51                      push ecx
:004274CC 8B4508                  mov eax, dword ptr [ebp+08]
:004274CF 8945FC                  mov dword ptr [ebp-04], eax
:004274D2 837DFC36                cmp dword ptr [ebp-04], 00000036
:004274D6 773F                    ja 00427517
:004274D8 8B55FC                  mov edx, dword ptr [ebp-04]
:004274DB 33C9                    xor ecx, ecx
:004274DD 8A8A36754200            mov cl, byte ptr [edx+00427536]
:004274E3 FF248D1E754200          jmp dword ptr [4*ecx+0042751E]
:004274EA 8B450C                  mov eax, dword ptr [ebp+0C]
:004274ED F7D8                    neg eax
:004274EF 1BC0                    sbb eax, eax
:004274F1 83E003                  and eax, 00000003
:004274F4 83C059                  add eax, 00000059
:004274F7 EB21                    jmp 0042751A
:004274F9 8B450C                  mov eax, dword ptr [ebp+0C]
:004274FC F7D8                    neg eax
:004274FE 1BC0                    sbb eax, eax
:00427500 83E003                  and eax, 00000003
:00427503 83C05A                  add eax, 0000005A
:00427506 EB12                    jmp 0042751A
:00427508 8B450C                  mov eax, dword ptr [ebp+0C]
:0042750B F7D8                    neg eax
:0042750D 1BC0                    sbb eax, eax
:0042750F 83E003                  and eax, 00000003
:00427512 83C05B                  add eax, 0000005B
:00427515 EB03                    jmp 0042751A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004274D6(C)
|
:00427517 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004274F7(U), :00427506(U), :00427515(U)
|
:0042751A 8BE5                    mov esp, ebp
:0042751C 5D                      pop ebp
:0042751D C3                      ret



:0042751E EA744200                DWORD 004274EA
:00427522 EA744200                DWORD 004274EA
:00427526 F9744200                DWORD 004274F9
:0042752A 08754200                DWORD 00427508
:0042752E 08754200                DWORD 00427508
:00427532 17754200                DWORD 00427517


:00427536 000505050505            add byte ptr [05050505], al
:0042753C 010505050505            add dword ptr [05050505], eax
:00427542 0505050505              add eax, 05050505
:00427547 0505050505              add eax, 05050505
:0042754C 0505050502              add eax, 02050505
:00427551 0505050505              add eax, 05050505
:00427556 0505050505              add eax, 05050505
:0042755B 0505050305              add eax, 05030505
:00427560 0505050505              add eax, 05050505
:00427565 0505050505              add eax, 05050505
:0042756A 05                      BYTE 05h
:0042756B 05                      BYTE 05h
:0042756C 04                      BYTE 04h


* Referenced by a CALL at Address:
|:00427469   
|
:0042756D 55                      push ebp
:0042756E 8BEC                    mov ebp, esp
:00427570 51                      push ecx
:00427571 8B4508                  mov eax, dword ptr [ebp+08]
:00427574 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427533(C)
|
:00427577 837DFC04                cmp dword ptr [ebp-04], 00000004
:0042757B 740E                    je 0042758B
:0042757D 837DFC0D                cmp dword ptr [ebp-04], 0000000D
:00427581 741A                    je 0042759D
:00427583 837DFC1D                cmp dword ptr [ebp-04], 0000001D
:00427587 741B                    je 004275A4
:00427589 EB2B                    jmp 004275B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042757B(C)
|
:0042758B 8B450C                  mov eax, dword ptr [ebp+0C]
:0042758E 83E802                  sub eax, 00000002
:00427591 F7D8                    neg eax
:00427593 1BC0                    sbb eax, eax
:00427595 83E003                  and eax, 00000003
:00427598 83C065                  add eax, 00000065
:0042759B EB1C                    jmp 004275B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427581(C)
|
:0042759D B885000000              mov eax, 00000085
:004275A2 EB15                    jmp 004275B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427587(C)
|
:004275A4 8B450C                  mov eax, dword ptr [ebp+0C]
:004275A7 83E802                  sub eax, 00000002
:004275AA F7D8                    neg eax
:004275AC 1BC0                    sbb eax, eax
:004275AE 83E003                  and eax, 00000003
:004275B1 83C067                  add eax, 00000067
:004275B4 EB03                    jmp 004275B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427589(U)
|
:004275B6 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042759B(U), :004275A2(U), :004275B4(U)
|
:004275B9 8BE5                    mov esp, ebp
:004275BB 5D                      pop ebp
:004275BC C3                      ret



* Referenced by a CALL at Address:
|:0042748D   
|
:004275BD 55                      push ebp
:004275BE 8BEC                    mov ebp, esp
:004275C0 51                      push ecx
:004275C1 8B4508                  mov eax, dword ptr [ebp+08]
:004275C4 8945FC                  mov dword ptr [ebp-04], eax
:004275C7 837DFC1A                cmp dword ptr [ebp-04], 0000001A
:004275CB 7408                    je 004275D5
:004275CD 837DFC1B                cmp dword ptr [ebp-04], 0000001B
:004275D1 7414                    je 004275E7
:004275D3 EB24                    jmp 004275F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004275CB(C)
|
:004275D5 8B450C                  mov eax, dword ptr [ebp+0C]
:004275D8 83E806                  sub eax, 00000006
:004275DB F7D8                    neg eax
:004275DD 1BC0                    sbb eax, eax
:004275DF 83E002                  and eax, 00000002
:004275E2 83C06C                  add eax, 0000006C
:004275E5 EB15                    jmp 004275FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004275D1(C)
|
:004275E7 8B450C                  mov eax, dword ptr [ebp+0C]
:004275EA 83E806                  sub eax, 00000006
:004275ED F7D8                    neg eax
:004275EF 1BC0                    sbb eax, eax
:004275F1 83E002                  and eax, 00000002
:004275F4 83C06B                  add eax, 0000006B
:004275F7 EB03                    jmp 004275FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004275D3(U)
|
:004275F9 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004275E5(U), :004275F7(U)
|
:004275FC 8BE5                    mov esp, ebp
:004275FE 5D                      pop ebp
:004275FF C3                      ret



* Referenced by a CALL at Address:
|:0042749F   
|
:00427600 55                      push ebp
:00427601 8BEC                    mov ebp, esp
:00427603 51                      push ecx
:00427604 8B4508                  mov eax, dword ptr [ebp+08]
:00427607 8945FC                  mov dword ptr [ebp-04], eax
:0042760A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042760D 83E912                  sub ecx, 00000012
:00427610 894DFC                  mov dword ptr [ebp-04], ecx
:00427613 837DFC25                cmp dword ptr [ebp-04], 00000025
:00427617 7748                    ja 00427661
:00427619 8B45FC                  mov eax, dword ptr [ebp-04]
:0042761C 33D2                    xor edx, edx
:0042761E 8A907C764200            mov dl, byte ptr [eax+0042767C]
:00427624 FF249568764200          jmp dword ptr [4*edx+00427668]
:0042762B 8B450C                  mov eax, dword ptr [ebp+0C]
:0042762E 83E814                  sub eax, 00000014
:00427631 F7D8                    neg eax
:00427633 1BC0                    sbb eax, eax
:00427635 83E003                  and eax, 00000003
:00427638 83C06F                  add eax, 0000006F
:0042763B EB27                    jmp 00427664
:0042763D 8B450C                  mov eax, dword ptr [ebp+0C]
:00427640 83E814                  sub eax, 00000014
:00427643 F7D8                    neg eax
:00427645 1BC0                    sbb eax, eax
:00427647 83E003                  and eax, 00000003
:0042764A 83C070                  add eax, 00000070
:0042764D EB15                    jmp 00427664
:0042764F 8B450C                  mov eax, dword ptr [ebp+0C]
:00427652 83E814                  sub eax, 00000014
:00427655 F7D8                    neg eax
:00427657 1BC0                    sbb eax, eax
:00427659 83E003                  and eax, 00000003
:0042765C 83C071                  add eax, 00000071
:0042765F EB03                    jmp 00427664

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427617(C)
|
:00427661 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042763B(U), :0042764D(U), :0042765F(U)
|
:00427664 8BE5                    mov esp, ebp
:00427666 5D                      pop ebp
:00427667 C3                      ret



:00427668 2B764200                DWORD 0042762B
:0042766C 4F764200                DWORD 0042764F
:00427670 3D764200                DWORD 0042763D
:00427674 4F764200                DWORD 0042764F
:00427678 61764200                DWORD 00427661


:0042767C 0000                    add byte ptr [eax], al
:0042767E 0404                    add al, 04
:00427680 0404                    add al, 04
:00427682 0401                    add al, 01
:00427684 0404                    add al, 04
:00427686 0404                    add al, 04
:00427688 0404                    add al, 04
:0042768A 0404                    add al, 04
:0042768C 0404                    add al, 04
:0042768E 0404                    add al, 04
:00427690 0404                    add al, 04
:00427692 0404                    add al, 04
:00427694 0404                    add al, 04
:00427696 0404                    add al, 04
:00427698 0202                    add al, byte ptr [edx]
:0042769A 0404                    add al, 04
:0042769C 0404                    add al, 04
:0042769E 0404                    add al, 04
:004276A0 0403                    add al, 03

* Referenced by a CALL at Address:
|:0042747B   
|
:004276A2 55                      push ebp
:004276A3 8BEC                    mov ebp, esp
:004276A5 51                      push ecx
:004276A6 8B4508                  mov eax, dword ptr [ebp+08]
:004276A9 8945FC                  mov dword ptr [ebp-04], eax
:004276AC 837DFC36                cmp dword ptr [ebp-04], 00000036
:004276B0 773F                    ja 004276F1
:004276B2 8B55FC                  mov edx, dword ptr [ebp-04]
:004276B5 33C9                    xor ecx, ecx
:004276B7 8A8A10774200            mov cl, byte ptr [edx+00427710]
:004276BD FF248DF8764200          jmp dword ptr [4*ecx+004276F8]
:004276C4 8B450C                  mov eax, dword ptr [ebp+0C]
:004276C7 F7D8                    neg eax
:004276C9 1BC0                    sbb eax, eax
:004276CB 83E003                  and eax, 00000003
:004276CE 83C05F                  add eax, 0000005F
:004276D1 EB21                    jmp 004276F4
:004276D3 8B450C                  mov eax, dword ptr [ebp+0C]
:004276D6 F7D8                    neg eax
:004276D8 1BC0                    sbb eax, eax
:004276DA 83E003                  and eax, 00000003
:004276DD 83C060                  add eax, 00000060
:004276E0 EB12                    jmp 004276F4
:004276E2 8B450C                  mov eax, dword ptr [ebp+0C]
:004276E5 F7D8                    neg eax
:004276E7 1BC0                    sbb eax, eax
:004276E9 83E003                  and eax, 00000003
:004276EC 83C061                  add eax, 00000061
:004276EF EB03                    jmp 004276F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004276B0(C)
|
:004276F1 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004276D1(U), :004276E0(U), :004276EF(U)
|
:004276F4 8BE5                    mov esp, ebp
:004276F6 5D                      pop ebp
:004276F7 C3                      ret



:004276F8 C4764200                DWORD 004276C4
:004276FC C4764200                DWORD 004276C4
:00427700 D3764200                DWORD 004276D3
:00427704 E2764200                DWORD 004276E2
:00427708 E2764200                DWORD 004276E2
:0042770C F1764200                DWORD 004276F1


:00427710 000505050505            add byte ptr [05050505], al
:00427716 010505050505            add dword ptr [05050505], eax
:0042771C 0505050505              add eax, 05050505
:00427721 0505050505              add eax, 05050505
:00427726 0505050502              add eax, 02050505
:0042772B 0505050505              add eax, 05050505
:00427730 0505050505              add eax, 05050505
:00427735 0505050305              add eax, 05030505
:0042773A 0505050505              add eax, 05050505
:0042773F 0505050505              add eax, 05050505
:00427744 05                      BYTE 05h
:00427745 05                      BYTE 05h
:00427746 04                      BYTE 04h


* Referenced by a CALL at Addresses:
|:004265C2   , :004265DE   , :0042D1B5   , :0042D1D5   , :0042D1F5   
|
:00427747 55                      push ebp
:00427748 8BEC                    mov ebp, esp
:0042774A B80C100000              mov eax, 0000100C
:0042774F E8CC7D0400              call 0046F520
:00427754 8B4508                  mov eax, dword ptr [ebp+08]
:00427757 8945FC                  mov dword ptr [ebp-04], eax
:0042775A C785F8EFFFFF00000000    mov dword ptr [ebp+FFFFEFF8], 00000000
:00427764 EB0F                    jmp 00427775

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004277CB(U)
|
:00427766 8B8DF8EFFFFF            mov ecx, dword ptr [ebp+FFFFEFF8]
:0042776C 83C101                  add ecx, 00000001
:0042776F 898DF8EFFFFF            mov dword ptr [ebp+FFFFEFF8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427764(U)
|
:00427775 83BDF8EFFFFF40          cmp dword ptr [ebp+FFFFEFF8], 00000040
:0042777C 734F                    jnb 004277CD
:0042777E C785F4EFFFFF3F000000    mov dword ptr [ebp+FFFFEFF4], 0000003F
:00427788 EB0F                    jmp 00427799

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004277C9(U)
|
:0042778A 8B95F4EFFFFF            mov edx, dword ptr [ebp+FFFFEFF4]
:00427790 83EA01                  sub edx, 00000001
:00427793 8995F4EFFFFF            mov dword ptr [ebp+FFFFEFF4], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427788(U)
|
:00427799 83BDF4EFFFFF00          cmp dword ptr [ebp+FFFFEFF4], 00000000
:004277A0 7C29                    jl 004277CB
:004277A2 8B85F8EFFFFF            mov eax, dword ptr [ebp+FFFFEFF8]
:004277A8 C1E006                  shl eax, 06
:004277AB 8D8C05FCEFFFFF          lea ecx, dword ptr [ebp+eax-00001004]
:004277B2 8B95F4EFFFFF            mov edx, dword ptr [ebp+FFFFEFF4]
:004277B8 8B45FC                  mov eax, dword ptr [ebp-04]
:004277BB 8A00                    mov al, byte ptr [eax]
:004277BD 880411                  mov byte ptr [ecx+edx], al
:004277C0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004277C3 83C101                  add ecx, 00000001
:004277C6 894DFC                  mov dword ptr [ebp-04], ecx
:004277C9 EBBF                    jmp 0042778A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004277A0(C)
|
:004277CB EB99                    jmp 00427766

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042777C(C)
|
:004277CD 6800100000              push 00001000
:004277D2 8D95FCEFFFFF            lea edx, dword ptr [ebp+FFFFEFFC]
:004277D8 52                      push edx
:004277D9 8B4508                  mov eax, dword ptr [ebp+08]
:004277DC 50                      push eax
:004277DD E87E7D0400              call 0046F560
:004277E2 83C40C                  add esp, 0000000C
:004277E5 8BE5                    mov esp, ebp
:004277E7 5D                      pop ebp
:004277E8 C3                      ret



* Referenced by a CALL at Addresses:
|:0042628D   , :004262E3   
|
:004277E9 55                      push ebp
:004277EA 8BEC                    mov ebp, esp
:004277EC 83EC08                  sub esp, 00000008
:004277EF 894DF8                  mov dword ptr [ebp-08], ecx
:004277F2 8B45F8                  mov eax, dword ptr [ebp-08]
:004277F5 0FBE481F                movsx ecx, byte ptr [eax+1F]
:004277F9 85C9                    test ecx, ecx
:004277FB 7C26                    jl 00427823
:004277FD 8B55F8                  mov edx, dword ptr [ebp-08]
:00427800 0FBE421F                movsx eax, byte ptr [edx+1F]
:00427804 83F840                  cmp eax, 00000040
:00427807 7F1A                    jg 00427823
:00427809 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042780C 0FBE511F                movsx edx, byte ptr [ecx+1F]
:00427810 52                      push edx
:00427811 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00427814 E8CC5F0000              call 0042D7E5
:00427819 85C0                    test eax, eax
:0042781B 7504                    jne 00427821
:0042781D 33C0                    xor eax, eax
:0042781F EB74                    jmp 00427895

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042781B(C)
|
:00427821 EB04                    jmp 00427827

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004277FB(C), :00427807(C)
|
:00427823 33C0                    xor eax, eax
:00427825 EB6E                    jmp 00427895

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427821(U)
|
:00427827 6A64                    push 00000064
:00427829 E8820B0500              call 004783B0
:0042782E 83C404                  add esp, 00000004
:00427831 8845FC                  mov byte ptr [ebp-04], al
:00427834 8B45F8                  mov eax, dword ptr [ebp-08]
:00427837 33C9                    xor ecx, ecx
:00427839 8A481D                  mov cl, byte ptr [eax+1D]
:0042783C 85C9                    test ecx, ecx
:0042783E 7519                    jne 00427859
:00427840 8B55FC                  mov edx, dword ptr [ebp-04]
:00427843 81E2FF000000            and edx, 000000FF
:00427849 83FA19                  cmp edx, 00000019
:0042784C 7D07                    jge 00427855
:0042784E B801000000              mov eax, 00000001
:00427853 EB40                    jmp 00427895

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042784C(C)
|
:00427855 33C0                    xor eax, eax
:00427857 EB3C                    jmp 00427895

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042783E(C)
|
:00427859 8B45F8                  mov eax, dword ptr [ebp-08]
:0042785C 33C9                    xor ecx, ecx
:0042785E 8A481D                  mov cl, byte ptr [eax+1D]
:00427861 83F901                  cmp ecx, 00000001
:00427864 7519                    jne 0042787F
:00427866 8B55FC                  mov edx, dword ptr [ebp-04]
:00427869 81E2FF000000            and edx, 000000FF
:0042786F 83FA4B                  cmp edx, 0000004B
:00427872 7D07                    jge 0042787B
:00427874 B801000000              mov eax, 00000001
:00427879 EB1A                    jmp 00427895

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427872(C)
|
:0042787B 33C0                    xor eax, eax
:0042787D EB16                    jmp 00427895

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427864(C)
|
:0042787F 8B45FC                  mov eax, dword ptr [ebp-04]
:00427882 25FF000000              and eax, 000000FF
:00427887 83F832                  cmp eax, 00000032
:0042788A 7D07                    jge 00427893
:0042788C B801000000              mov eax, 00000001
:00427891 EB02                    jmp 00427895

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042788A(C)
|
:00427893 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042781F(U), :00427825(U), :00427853(U), :00427857(U), :00427879(U)
|:0042787D(U), :00427891(U)
|
:00427895 8BE5                    mov esp, ebp
:00427897 5D                      pop ebp
:00427898 C3                      ret



* Referenced by a CALL at Address:
|:00426206   
|
:00427899 55                      push ebp
:0042789A 8BEC                    mov ebp, esp
:0042789C 83EC0C                  sub esp, 0000000C
:0042789F 894DF4                  mov dword ptr [ebp-0C], ecx
:004278A2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004278A5 E8EAACFFFF              call 00422594
:004278AA 8945FC                  mov dword ptr [ebp-04], eax
:004278AD 837DFC00                cmp dword ptr [ebp-04], 00000000
:004278B1 743B                    je 004278EE
:004278B3 8B45FC                  mov eax, dword ptr [ebp-04]
:004278B6 50                      push eax
:004278B7 E8F40A0500              call 004783B0
:004278BC 83C404                  add esp, 00000004
:004278BF 8945F8                  mov dword ptr [ebp-08], eax
:004278C2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004278C5 33D2                    xor edx, edx
:004278C7 8A9198464900            mov dl, byte ptr [ecx+00494698]
:004278CD 89156C474900            mov dword ptr [0049476C], edx
:004278D3 8B45F8                  mov eax, dword ptr [ebp-08]
:004278D6 33C9                    xor ecx, ecx
:004278D8 8A8870474900            mov cl, byte ptr [eax+00494770]
:004278DE 85C9                    test ecx, ecx
:004278E0 7407                    je 004278E9
:004278E2 A16C474900              mov eax, dword ptr [0049476C]
:004278E7 EB08                    jmp 004278F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004278E0(C)
|
:004278E9 83C8FF                  or eax, FFFFFFFF
:004278EC EB03                    jmp 004278F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004278B1(C)
|
:004278EE 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004278E7(U), :004278EC(U)
|
:004278F1 8BE5                    mov esp, ebp
:004278F3 5D                      pop ebp
:004278F4 C3                      ret



* Referenced by a CALL at Address:
|:0042CA1D   
|
:004278F5 55                      push ebp
:004278F6 8BEC                    mov ebp, esp
:004278F8 83EC0C                  sub esp, 0000000C
:004278FB 56                      push esi
:004278FC 57                      push edi
:004278FD 894DF4                  mov dword ptr [ebp-0C], ecx
:00427900 817DF438464900          cmp dword ptr [ebp-0C], 00494638
:00427907 754F                    jne 00427958
:00427909 B9D0454900              mov ecx, 004945D0
:0042790E E8EDB9FDFF              call 00403300
:00427913 8945FC                  mov dword ptr [ebp-04], eax
:00427916 6AFF                    push FFFFFFFF

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00427918 6A07                    push 00000007
:0042791A 8B4508                  mov eax, dword ptr [ebp+08]
:0042791D 50                      push eax
:0042791E B9D0454900              mov ecx, 004945D0
:00427923 E848D5FFFF              call 00424E70
:00427928 8B7DFC                  mov edi, dword ptr [ebp-04]
:0042792B 6BFF50                  imul edi, 00000050
:0042792E 81C7787F4900            add edi, 00497F78

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00427934 B914000000              mov ecx, 00000014
:00427939 BEC0464900              mov esi, 004946C0
:0042793E F3                      repz
:0042793F A5                      movsd
:00427940 C70580474900FFFFFFFF    mov dword ptr [00494780], FFFFFFFF
:0042794A 6A00                    push 00000000
:0042794C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042794F 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00427950 FF15D8D54B00            Call dword ptr [004BD5D8]
:00427956 EB76                    jmp 004279CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427907(C)
|
:00427958 B938464900              mov ecx, 00494638
:0042795D E89EB9FDFF              call 00403300
:00427962 8945F8                  mov dword ptr [ebp-08], eax
:00427965 8B5508                  mov edx, dword ptr [ebp+08]
:00427968 52                      push edx
:00427969 E8D9150000              call 00428F47
:0042796E 83C404                  add esp, 00000004
:00427971 8B4508                  mov eax, dword ptr [ebp+08]
:00427974 50                      push eax
:00427975 E864150000              call 00428EDE
:0042797A 83C404                  add esp, 00000004
:0042797D B938464900              mov ecx, 00494638
:00427982 E8E9670000              call 0042E170
:00427987 6A01                    push 00000001
:00427989 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042798C 51                      push ecx
:0042798D E80A140000              call 00428D9C
:00427992 83C408                  add esp, 00000008
:00427995 8B55F4                  mov edx, dword ptr [ebp-0C]
:00427998 837A1431                cmp dword ptr [edx+14], 00000031
:0042799C 7424                    je 004279C2
:0042799E 8B45F4                  mov eax, dword ptr [ebp-0C]
:004279A1 83781430                cmp dword ptr [eax+14], 00000030
:004279A5 741B                    je 004279C2
:004279A7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004279AA 8B7914                  mov edi, dword ptr [ecx+14]
:004279AD 6BFF50                  imul edi, 00000050
:004279B0 81C7787F4900            add edi, 00497F78

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:004279B6 B914000000              mov ecx, 00000014
:004279BB BEC0464900              mov esi, 004946C0
:004279C0 F3                      repz
:004279C1 A5                      movsd

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042799C(C), :004279A5(C)
|
:004279C2 8B5508                  mov edx, dword ptr [ebp+08]
:004279C5 52                      push edx
:004279C6 E80B000000              call 004279D6
:004279CB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427956(U)
|
:004279CE 5F                      pop edi
:004279CF 5E                      pop esi
:004279D0 8BE5                    mov esp, ebp
:004279D2 5D                      pop ebp
:004279D3 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004279C6   
|
:004279D6 55                      push ebp
:004279D7 8BEC                    mov ebp, esp
:004279D9 83EC58                  sub esp, 00000058
:004279DC 53                      push ebx
:004279DD B9D0454900              mov ecx, 004945D0
:004279E2 E859660000              call 0042E040
:004279E7 8845B8                  mov byte ptr [ebp-48], al
:004279EA 8B45B8                  mov eax, dword ptr [ebp-48]
:004279ED 25FF000000              and eax, 000000FF
:004279F2 83F805                  cmp eax, 00000005
:004279F5 0F8C0B010000            jl 00427B06
:004279FB B978294B00              mov ecx, 004B2978
:00427A00 E85B84FEFF              call 0040FE60
:00427A05 25FF000000              and eax, 000000FF
:00427A0A 99                      cdq
:00427A0B 83E207                  and edx, 00000007
:00427A0E 03C2                    add eax, edx
:00427A10 C1F803                  sar eax, 03
:00427A13 8845AC                  mov byte ptr [ebp-54], al
:00427A16 B978294B00              mov ecx, 004B2978
:00427A1B E84084FEFF              call 0040FE60
:00427A20 8845A8                  mov byte ptr [ebp-58], al
:00427A23 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00427A26 81E1FF000000            and ecx, 000000FF
:00427A2C 51                      push ecx
:00427A2D B978294B00              mov ecx, 004B2978
:00427A32 E8C9640000              call 0042DF00
:00427A37 8845B0                  mov byte ptr [ebp-50], al
:00427A3A 8A55B0                  mov dl, byte ptr [ebp-50]
:00427A3D 52                      push edx
:00427A3E 8A45A8                  mov al, byte ptr [ebp-58]
:00427A41 50                      push eax
:00427A42 E83CA8FFFF              call 00422283
:00427A47 83C408                  add esp, 00000008
:00427A4A 8845B4                  mov byte ptr [ebp-4C], al
:00427A4D 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00427A50 81E1FF000000            and ecx, 000000FF
:00427A56 83F909                  cmp ecx, 00000009
:00427A59 751F                    jne 00427A7A
:00427A5B 8B55B4                  mov edx, dword ptr [ebp-4C]
:00427A5E 81E2FF000000            and edx, 000000FF
:00427A64 85D2                    test edx, edx
:00427A66 7512                    jne 00427A7A
:00427A68 8A45A8                  mov al, byte ptr [ebp-58]
:00427A6B 50                      push eax
:00427A6C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00427A6F 51                      push ecx
:00427A70 E869090000              call 004283DE
:00427A75 83C408                  add esp, 00000008
:00427A78 EB44                    jmp 00427ABE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427A59(C), :00427A66(C)
|
:00427A7A 8B55A8                  mov edx, dword ptr [ebp-58]
:00427A7D 81E2FF000000            and edx, 000000FF
:00427A83 83FA11                  cmp edx, 00000011
:00427A86 751E                    jne 00427AA6
:00427A88 8B45B4                  mov eax, dword ptr [ebp-4C]
:00427A8B 25FF000000              and eax, 000000FF
:00427A90 85C0                    test eax, eax
:00427A92 7512                    jne 00427AA6
:00427A94 8A4DA8                  mov cl, byte ptr [ebp-58]
:00427A97 51                      push ecx
:00427A98 8B5508                  mov edx, dword ptr [ebp+08]
:00427A9B 52                      push edx
:00427A9C E80F0B0000              call 004285B0
:00427AA1 83C408                  add esp, 00000008
:00427AA4 EB18                    jmp 00427ABE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427A86(C), :00427A92(C)
|
:00427AA6 8A45B4                  mov al, byte ptr [ebp-4C]
:00427AA9 50                      push eax
:00427AAA 8A4DB0                  mov cl, byte ptr [ebp-50]
:00427AAD 51                      push ecx
:00427AAE 8A55A8                  mov dl, byte ptr [ebp-58]
:00427AB1 52                      push edx
:00427AB2 8B4508                  mov eax, dword ptr [ebp+08]
:00427AB5 50                      push eax
:00427AB6 E895020000              call 00427D50
:00427ABB 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427A78(U), :00427AA4(U)
|
:00427ABE 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00427AC1 81E1FF000000            and ecx, 000000FF
:00427AC7 85C9                    test ecx, ecx
:00427AC9 752A                    jne 00427AF5
:00427ACB 8A55B0                  mov dl, byte ptr [ebp-50]
:00427ACE 52                      push edx
:00427ACF 8A45A8                  mov al, byte ptr [ebp-58]
:00427AD2 50                      push eax
:00427AD3 E8C7010000              call 00427C9F
:00427AD8 83C408                  add esp, 00000008
:00427ADB 25FF000000              and eax, 000000FF
:00427AE0 50                      push eax
:00427AE1 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00427AE4 81E1FF000000            and ecx, 000000FF
:00427AEA 51                      push ecx
:00427AEB B978294B00              mov ecx, 004B2978
:00427AF0 E8DB670000              call 0042E2D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427AC9(C)
|
:00427AF5 6A01                    push 00000001
:00427AF7 8B5508                  mov edx, dword ptr [ebp+08]
:00427AFA 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00427AFB FF15D8D54B00            Call dword ptr [004BD5D8]
:00427B01 E994010000              jmp 00427C9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004279F5(C)
|
:00427B06 B9D0454900              mov ecx, 004945D0
:00427B0B E876CDFFFF              call 00424886
:00427B10 8B45B8                  mov eax, dword ptr [ebp-48]
:00427B13 25FF000000              and eax, 000000FF
:00427B18 83C001                  add eax, 00000001
:00427B1B 50                      push eax
:00427B1C B9D0454900              mov ecx, 004945D0
:00427B21 E85A650000              call 0042E080
:00427B26 B938464900              mov ecx, 00494638
:00427B2B E8D0B7FDFF              call 00403300
:00427B30 8BC8                    mov ecx, eax
:00427B32 6BC950                  imul ecx, 00000050
:00427B35 81C1787F4900            add ecx, 00497F78
:00427B3B E86083FEFF              call 0040FEA0
:00427B40 8AD8                    mov bl, al
:00427B42 81E3FF000000            and ebx, 000000FF
:00427B48 E8FBBFFFFF              call 00423B48
:00427B4D 3BD8                    cmp ebx, eax
:00427B4F 761B                    jbe 00427B6C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00427B51 C7058047490002000000    mov dword ptr [00494780], 00000002
:00427B5B 6A00                    push 00000000
:00427B5D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00427B60 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00427B61 FF15D8D54B00            Call dword ptr [004BD5D8]
:00427B67 E92E010000              jmp 00427C9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427B4F(C)
|
:00427B6C B938464900              mov ecx, 00494638
:00427B71 E88AB7FDFF              call 00403300
:00427B76 8BC8                    mov ecx, eax
:00427B78 6BC950                  imul ecx, 00000050
:00427B7B 81C1787F4900            add ecx, 00497F78
:00427B81 E81A83FEFF              call 0040FEA0
:00427B86 25FF000000              and eax, 000000FF
:00427B8B 6BC005                  imul eax, 00000005
:00427B8E 8945BC                  mov dword ptr [ebp-44], eax
:00427B91 6A40                    push 00000040
:00427B93 6A00                    push 00000000
:00427B95 8D55C0                  lea edx, dword ptr [ebp-40]
:00427B98 52                      push edx
:00427B99 E8327F0400              call 0046FAD0
:00427B9E 83C40C                  add esp, 0000000C
:00427BA1 8B45BC                  mov eax, dword ptr [ebp-44]
:00427BA4 50                      push eax

* Possible StringData Ref from Data Obj ->"I%dܡH"
                                  |
:00427BA5 6858CF4700              push 0047CF58
:00427BAA 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00427BAD 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00427BAE FF1504D74B00            Call dword ptr [004BD704]
:00427BB4 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"T{"
                                  |
:00427BB7 6868CF4700              push 0047CF68
:00427BBC 8D55C0                  lea edx, dword ptr [ebp-40]
:00427BBF 52                      push edx
:00427BC0 8B4508                  mov eax, dword ptr [ebp+08]
:00427BC3 50                      push eax
:00427BC4 E86205FFFF              call 0041812B
:00427BC9 83C40C                  add esp, 0000000C
:00427BCC 85C0                    test eax, eax
:00427BCE 751B                    jne 00427BEB
:00427BD0 C7058047490000000000    mov dword ptr [00494780], 00000000
:00427BDA 6A00                    push 00000000
:00427BDC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00427BDF 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00427BE0 FF15D8D54B00            Call dword ptr [004BD5D8]
:00427BE6 E9AF000000              jmp 00427C9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427BCE(C)
|
:00427BEB B978294B00              mov ecx, 004B2978
:00427BF0 E8EBED0000              call 004369E0
:00427BF5 2B45BC                  sub eax, dword ptr [ebp-44]
:00427BF8 85C0                    test eax, eax
:00427BFA 761E                    jbe 00427C1A
:00427BFC 8B55BC                  mov edx, dword ptr [ebp-44]
:00427BFF 52                      push edx
:00427C00 B928474900              mov ecx, 00494728
:00427C05 E856620000              call 0042DE60
:00427C0A 6A00                    push 00000000
:00427C0C 8B4508                  mov eax, dword ptr [ebp+08]
:00427C0F 50                      push eax
:00427C10 E887110000              call 00428D9C
:00427C15 83C408                  add esp, 00000008
:00427C18 EB29                    jmp 00427C43

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427BFA(C)
|

* Possible StringData Ref from Data Obj ->"\r"
                                  |
:00427C1A 6874CF4700              push 0047CF74
:00427C1F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00427C22 51                      push ecx
:00427C23 E8FF110000              call 00428E27
:00427C28 83C408                  add esp, 00000008
:00427C2B C7058047490000000000    mov dword ptr [00494780], 00000000
:00427C35 6A00                    push 00000000
:00427C37 8B5508                  mov edx, dword ptr [ebp+08]
:00427C3A 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00427C3B FF15D8D54B00            Call dword ptr [004BD5D8]
:00427C41 EB57                    jmp 00427C9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427C18(U)
|
:00427C43 6A01                    push 00000001
:00427C45 B928474900              mov ecx, 00494728
:00427C4A E8A1E90300              call 004665F0

* Possible StringData Ref from Data Obj ->"1/10"
                                  |
:00427C4F 6880CF4700              push 0047CF80

* Possible Reference to Dialog: DialogID_00BB, CONTROL_ID:0433, "0"
                                  |
:00427C54 6833040000              push 00000433
:00427C59 8B4508                  mov eax, dword ptr [ebp+08]
:00427C5C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00427C5D FF1510D64B00            Call dword ptr [004BD610]
:00427C63 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00427C64 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00427C6A 6A03                    push 00000003
:00427C6C B938464900              mov ecx, 00494638
:00427C71 E84A640000              call 0042E0C0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00427C76 6A03                    push 00000003
:00427C78 B938464900              mov ecx, 00494638
:00427C7D E86E640000              call 0042E0F0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00427C82 6A03                    push 00000003
:00427C84 B938464900              mov ecx, 00494638
:00427C89 E892640000              call 0042E120
:00427C8E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00427C91 51                      push ecx
:00427C92 E8670A0000              call 004286FE
:00427C97 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427B01(U), :00427B67(U), :00427BE6(U), :00427C41(U)
|
:00427C9A 5B                      pop ebx
:00427C9B 8BE5                    mov esp, ebp
:00427C9D 5D                      pop ebp
:00427C9E C3                      ret



* Referenced by a CALL at Address:
|:00427AD3   
|
:00427C9F 55                      push ebp
:00427CA0 8BEC                    mov ebp, esp
:00427CA2 51                      push ecx
:00427CA3 8B4508                  mov eax, dword ptr [ebp+08]
:00427CA6 25FF000000              and eax, 000000FF
:00427CAB 99                      cdq
:00427CAC 33C2                    xor eax, edx
:00427CAE 2BC2                    sub eax, edx
:00427CB0 83E007                  and eax, 00000007
:00427CB3 33C2                    xor eax, edx
:00427CB5 2BC2                    sub eax, edx
:00427CB7 8945FC                  mov dword ptr [ebp-04], eax
:00427CBA 837DFC07                cmp dword ptr [ebp-04], 00000007
:00427CBE 776A                    ja 00427D2A
:00427CC0 8B45FC                  mov eax, dword ptr [ebp-04]
:00427CC3 FF2485307D4200          jmp dword ptr [4*eax+00427D30]
:00427CCA 8B450C                  mov eax, dword ptr [ebp+0C]
:00427CCD 25FF000000              and eax, 000000FF
:00427CD2 0C01                    or al, 01
:00427CD4 EB56                    jmp 00427D2C
:00427CD6 8B450C                  mov eax, dword ptr [ebp+0C]
:00427CD9 25FF000000              and eax, 000000FF
:00427CDE 0C02                    or al, 02
:00427CE0 EB4A                    jmp 00427D2C
:00427CE2 8B450C                  mov eax, dword ptr [ebp+0C]
:00427CE5 25FF000000              and eax, 000000FF
:00427CEA 0C04                    or al, 04
:00427CEC EB3E                    jmp 00427D2C
:00427CEE 8B450C                  mov eax, dword ptr [ebp+0C]
:00427CF1 25FF000000              and eax, 000000FF
:00427CF6 0C08                    or al, 08
:00427CF8 EB32                    jmp 00427D2C
:00427CFA 8B450C                  mov eax, dword ptr [ebp+0C]
:00427CFD 25FF000000              and eax, 000000FF
:00427D02 0C10                    or al, 10
:00427D04 EB26                    jmp 00427D2C
:00427D06 8B450C                  mov eax, dword ptr [ebp+0C]
:00427D09 25FF000000              and eax, 000000FF
:00427D0E 0C20                    or al, 20
:00427D10 EB1A                    jmp 00427D2C
:00427D12 8B450C                  mov eax, dword ptr [ebp+0C]
:00427D15 25FF000000              and eax, 000000FF
:00427D1A 0C40                    or al, 40
:00427D1C EB0E                    jmp 00427D2C
:00427D1E 8B450C                  mov eax, dword ptr [ebp+0C]
:00427D21 25FF000000              and eax, 000000FF
:00427D26 0C80                    or al, 80
:00427D28 EB02                    jmp 00427D2C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427CBE(C)
|
:00427D2A 32C0                    xor al, al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427CD4(U), :00427CE0(U), :00427CEC(U), :00427CF8(U), :00427D04(U)
|:00427D10(U), :00427D1C(U), :00427D28(U)
|
:00427D2C 8BE5                    mov esp, ebp
:00427D2E 5D                      pop ebp
:00427D2F C3                      ret



:00427D30 CA7C4200                DWORD 00427CCA
:00427D34 D67C4200                DWORD 00427CD6
:00427D38 E27C4200                DWORD 00427CE2
:00427D3C EE7C4200                DWORD 00427CEE
:00427D40 FA7C4200                DWORD 00427CFA
:00427D44 067D4200                DWORD 00427D06
:00427D48 127D4200                DWORD 00427D12
:00427D4C 1E7D4200                DWORD 00427D1E



* Referenced by a CALL at Address:
|:00427AB6   
|
:00427D50 55                      push ebp
:00427D51 8BEC                    mov ebp, esp
:00427D53 51                      push ecx
:00427D54 8A4514                  mov al, byte ptr [ebp+14]
:00427D57 50                      push eax
:00427D58 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00427D5B 51                      push ecx
:00427D5C E830000000              call 00427D91
:00427D61 83C408                  add esp, 00000008
:00427D64 8945FC                  mov dword ptr [ebp-04], eax
:00427D67 8B55FC                  mov edx, dword ptr [ebp-04]
:00427D6A 52                      push edx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00427D6B 6A08                    push 00000008
:00427D6D 8B4508                  mov eax, dword ptr [ebp+08]
:00427D70 50                      push eax
:00427D71 B9D0454900              mov ecx, 004945D0
:00427D76 E8F5D0FFFF              call 00424E70
:00427D7B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00427D7E 51                      push ecx
:00427D7F 8B5508                  mov edx, dword ptr [ebp+08]
:00427D82 52                      push edx
:00427D83 B938464900              mov ecx, 00494638
:00427D88 E80C5B0000              call 0042D899

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427D49(C)
|
:00427D8D 8BE5                    mov esp, ebp
:00427D8F 5D                      pop ebp
:00427D90 C3                      ret



* Referenced by a CALL at Address:
|:00427D5C   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427D4D(C)
|
:00427D91 55                      push ebp
:00427D92 8BEC                    mov ebp, esp
:00427D94 8B450C                  mov eax, dword ptr [ebp+0C]
:00427D97 25FF000000              and eax, 000000FF
:00427D9C 85C0                    test eax, eax
:00427D9E 7511                    jne 00427DB1
:00427DA0 8A4D08                  mov cl, byte ptr [ebp+08]
:00427DA3 51                      push ecx
:00427DA4 E8E8000000              call 00427E91
:00427DA9 83C404                  add esp, 00000004
:00427DAC E9DE000000              jmp 00427E8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427D9E(C)
|
:00427DB1 8B5508                  mov edx, dword ptr [ebp+08]
:00427DB4 81E2FF000000            and edx, 000000FF
:00427DBA 85D2                    test edx, edx
:00427DBC 7C1E                    jl 00427DDC
:00427DBE 8B4508                  mov eax, dword ptr [ebp+08]
:00427DC1 25FF000000              and eax, 000000FF
:00427DC6 83F804                  cmp eax, 00000004
:00427DC9 7F11                    jg 00427DDC
:00427DCB 8A4D08                  mov cl, byte ptr [ebp+08]
:00427DCE 51                      push ecx
:00427DCF E8BB010000              call 00427F8F
:00427DD4 83C404                  add esp, 00000004
:00427DD7 E9B3000000              jmp 00427E8F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427DBC(C), :00427DC9(C)
|
:00427DDC 8B5508                  mov edx, dword ptr [ebp+08]
:00427DDF 81E2FF000000            and edx, 000000FF
:00427DE5 83FA05                  cmp edx, 00000005
:00427DE8 7C1E                    jl 00427E08
:00427DEA 8B4508                  mov eax, dword ptr [ebp+08]
:00427DED 25FF000000              and eax, 000000FF
:00427DF2 83F809                  cmp eax, 00000009
:00427DF5 7F11                    jg 00427E08
:00427DF7 8A4D08                  mov cl, byte ptr [ebp+08]
:00427DFA 51                      push ecx
:00427DFB E848020000              call 00428048
:00427E00 83C404                  add esp, 00000004
:00427E03 E987000000              jmp 00427E8F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427DE8(C), :00427DF5(C)
|
:00427E08 8B5508                  mov edx, dword ptr [ebp+08]
:00427E0B 81E2FF000000            and edx, 000000FF
:00427E11 83FA0A                  cmp edx, 0000000A
:00427E14 7C1B                    jl 00427E31
:00427E16 8B4508                  mov eax, dword ptr [ebp+08]
:00427E19 25FF000000              and eax, 000000FF
:00427E1E 83F80E                  cmp eax, 0000000E
:00427E21 7F0E                    jg 00427E31
:00427E23 8A4D08                  mov cl, byte ptr [ebp+08]
:00427E26 51                      push ecx
:00427E27 E8D5020000              call 00428101
:00427E2C 83C404                  add esp, 00000004
:00427E2F EB5E                    jmp 00427E8F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427E14(C), :00427E21(C)
|
:00427E31 8B5508                  mov edx, dword ptr [ebp+08]
:00427E34 81E2FF000000            and edx, 000000FF
:00427E3A 83FA0F                  cmp edx, 0000000F
:00427E3D 7C1B                    jl 00427E5A
:00427E3F 8B4508                  mov eax, dword ptr [ebp+08]
:00427E42 25FF000000              and eax, 000000FF
:00427E47 83F813                  cmp eax, 00000013
:00427E4A 7F0E                    jg 00427E5A
:00427E4C 8A4D08                  mov cl, byte ptr [ebp+08]
:00427E4F 51                      push ecx
:00427E50 E873030000              call 004281C8
:00427E55 83C404                  add esp, 00000004
:00427E58 EB35                    jmp 00427E8F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427E3D(C), :00427E4A(C)
|
:00427E5A 8B5508                  mov edx, dword ptr [ebp+08]
:00427E5D 81E2FF000000            and edx, 000000FF
:00427E63 83FA14                  cmp edx, 00000014
:00427E66 7C1B                    jl 00427E83
:00427E68 8B4508                  mov eax, dword ptr [ebp+08]
:00427E6B 25FF000000              and eax, 000000FF
:00427E70 83F818                  cmp eax, 00000018
:00427E73 7F0E                    jg 00427E83
:00427E75 8A4D08                  mov cl, byte ptr [ebp+08]
:00427E78 51                      push ecx
:00427E79 E811040000              call 0042828F
:00427E7E 83C404                  add esp, 00000004
:00427E81 EB0C                    jmp 00427E8F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427E66(C), :00427E73(C)
|
:00427E83 8A5508                  mov dl, byte ptr [ebp+08]
:00427E86 52                      push edx
:00427E87 E8BC040000              call 00428348
:00427E8C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00427DAC(U), :00427DD7(U), :00427E03(U), :00427E2F(U), :00427E58(U)
|:00427E81(U)
|
:00427E8F 5D                      pop ebp
:00427E90 C3                      ret



* Referenced by a CALL at Address:
|:00427DA4   
|
:00427E91 55                      push ebp
:00427E92 8BEC                    mov ebp, esp
:00427E94 83EC78                  sub esp, 00000078

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:00427E97 C7458C9C000000          mov [ebp-74], 0000009C
:00427E9E C74590B5000000          mov [ebp-70], 000000B5
:00427EA5 C74594A9000000          mov [ebp-6C], 000000A9
:00427EAC C74598AF000000          mov [ebp-68], 000000AF

* Possible Reference to Dialog: DialogID_00BB 
                                  |
:00427EB3 C7459CBB000000          mov [ebp-64], 000000BB

* Possible Reference to Dialog: DialogID_00D0 
                                  |
:00427EBA C745A0D0000000          mov [ebp-60], 000000D0
:00427EC1 C745A4D6000000          mov [ebp-5C], 000000D6

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:00427EC8 C745A8A0000000          mov [ebp-58], 000000A0
:00427ECF C745ACAB000000          mov [ebp-54], 000000AB
:00427ED6 C745B0B6000000          mov [ebp-50], 000000B6

* Possible Reference to Dialog: DialogID_00B3 
                                  |
:00427EDD C745B4B3000000          mov [ebp-4C], 000000B3
:00427EE4 C745B8BD000000          mov [ebp-48], 000000BD

* Possible Reference to Dialog: DialogID_00D2 
                                  |
:00427EEB C745BCD2000000          mov [ebp-44], 000000D2
:00427EF2 C745C0AD000000          mov [ebp-40], 000000AD
:00427EF9 C745C4B7000000          mov [ebp-3C], 000000B7

* Possible Ref to Menu: DBGMENU, Item: "Sw"
                                  |
:00427F00 C745C8A3000000          mov [ebp-38], 000000A3
:00427F07 C745CCBE000000          mov [ebp-34], 000000BE
:00427F0E C745D0D7000000          mov [ebp-30], 000000D7
:00427F15 C745D4B8000000          mov [ebp-2C], 000000B8
:00427F1C C745D8AE000000          mov [ebp-28], 000000AE
:00427F23 C745DC3C010000          mov [ebp-24], 0000013C
:00427F2A C745E038010000          mov [ebp-20], 00000138
:00427F31 C745E4BF000000          mov [ebp-1C], 000000BF

* Possible Reference to Dialog: DialogID_00BA 
                                  |
:00427F38 C745E8BA000000          mov [ebp-18], 000000BA
:00427F3F C745ECD8000000          mov [ebp-14], 000000D8
:00427F46 C745F08E010000          mov [ebp-10], 0000018E

* Possible Reference to Dialog: DialogID_00D4 
                                  |
:00427F4D C745F4D4000000          mov [ebp-0C], 000000D4
:00427F54 C745F8C0000000          mov [ebp-08], 000000C0
:00427F5B C745FCA8000000          mov [ebp-04], 000000A8
:00427F62 8B4508                  mov eax, dword ptr [ebp+08]
:00427F65 25FF000000              and eax, 000000FF
:00427F6A 83F81C                  cmp eax, 0000001C
:00427F6D 7E0E                    jle 00427F7D
:00427F6F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00427F72 81E1FF000000            and ecx, 000000FF
:00427F78 894D88                  mov dword ptr [ebp-78], ecx
:00427F7B EB07                    jmp 00427F84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427F6D(C)
|
:00427F7D C745881C000000          mov [ebp-78], 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00427F7B(U)
|
:00427F84 8B5588                  mov edx, dword ptr [ebp-78]
:00427F87 8B44958C                mov eax, dword ptr [ebp+4*edx-74]
:00427F8B 8BE5                    mov esp, ebp
:00427F8D 5D                      pop ebp
:00427F8E C3                      ret



* Referenced by a CALL at Address:
|:00427DCF   
|
:00427F8F 55                      push ebp
:00427F90 8BEC                    mov ebp, esp
:00427F92 83EC5C                  sub esp, 0000005C
:00427F95 C745A400010000          mov [ebp-5C], 00000100
:00427F9C C745A801010000          mov [ebp-58], 00000101
:00427FA3 C745AC02010000          mov [ebp-54], 00000102
:00427FAA C745B003010000          mov [ebp-50], 00000103
:00427FB1 C745B404010000          mov [ebp-4C], 00000104
:00427FB8 C745B805010000          mov [ebp-48], 00000105
:00427FBF C745BC06010000          mov [ebp-44], 00000106
:00427FC6 C745C007010000          mov [ebp-40], 00000107
:00427FCD C745C408010000          mov [ebp-3C], 00000108
:00427FD4 C745C809010000          mov [ebp-38], 00000109
:00427FDB C745CC0A010000          mov [ebp-34], 0000010A
:00427FE2 C745D00B010000          mov [ebp-30], 0000010B
:00427FE9 C745D40C010000          mov [ebp-2C], 0000010C
:00427FF0 C745D80D010000          mov [ebp-28], 0000010D
:00427FF7 C745DC37010000          mov [ebp-24], 00000137
:00427FFE C745E04A010000          mov [ebp-20], 0000014A
:00428005 C745E44B010000          mov [ebp-1C], 0000014B
:0042800C C745E84C010000          mov [ebp-18], 0000014C
:00428013 C745EC4D010000          mov [ebp-14], 0000014D
:0042801A C745F04E010000          mov [ebp-10], 0000014E
:00428021 C745F44F010000          mov [ebp-0C], 0000014F
:00428028 C745F850010000          mov [ebp-08], 00000150
:0042802F C745FC51010000          mov [ebp-04], 00000151
:00428036 6A17                    push 00000017
:00428038 E873030500              call 004783B0
:0042803D 83C404                  add esp, 00000004
:00428040 8B4485A4                mov eax, dword ptr [ebp+4*eax-5C]
:00428044 8BE5                    mov esp, ebp
:00428046 5D                      pop ebp
:00428047 C3                      ret



* Referenced by a CALL at Address:
|:00427DFB   
|
:00428048 55                      push ebp
:00428049 8BEC                    mov ebp, esp
:0042804B 83EC5C                  sub esp, 0000005C
:0042804E C745A400010000          mov [ebp-5C], 00000100
:00428055 C745A801010000          mov [ebp-58], 00000101
:0042805C C745AC02010000          mov [ebp-54], 00000102
:00428063 C745B003010000          mov [ebp-50], 00000103
:0042806A C745B404010000          mov [ebp-4C], 00000104
:00428071 C745B805010000          mov [ebp-48], 00000105
:00428078 C745BC06010000          mov [ebp-44], 00000106
:0042807F C745C007010000          mov [ebp-40], 00000107
:00428086 C745C408010000          mov [ebp-3C], 00000108
:0042808D C745C809010000          mov [ebp-38], 00000109
:00428094 C745CC0A010000          mov [ebp-34], 0000010A
:0042809B C745D00B010000          mov [ebp-30], 0000010B
:004280A2 C745D40C010000          mov [ebp-2C], 0000010C
:004280A9 C745D80D010000          mov [ebp-28], 0000010D
:004280B0 C745DC3B010000          mov [ebp-24], 0000013B
:004280B7 C745E04A010000          mov [ebp-20], 0000014A
:004280BE C745E44B010000          mov [ebp-1C], 0000014B
:004280C5 C745E84C010000          mov [ebp-18], 0000014C
:004280CC C745EC4D010000          mov [ebp-14], 0000014D
:004280D3 C745F04E010000          mov [ebp-10], 0000014E
:004280DA C745F44F010000          mov [ebp-0C], 0000014F
:004280E1 C745F850010000          mov [ebp-08], 00000150
:004280E8 C745FC51010000          mov [ebp-04], 00000151
:004280EF 6A17                    push 00000017
:004280F1 E8BA020500              call 004783B0
:004280F6 83C404                  add esp, 00000004
:004280F9 8B4485A4                mov eax, dword ptr [ebp+4*eax-5C]
:004280FD 8BE5                    mov esp, ebp
:004280FF 5D                      pop ebp
:00428100 C3                      ret



* Referenced by a CALL at Address:
|:00427E27   
|
:00428101 55                      push ebp
:00428102 8BEC                    mov ebp, esp
:00428104 83EC64                  sub esp, 00000064
:00428107 C7459C00010000          mov [ebp-64], 00000100
:0042810E C745A001010000          mov [ebp-60], 00000101
:00428115 C745A402010000          mov [ebp-5C], 00000102
:0042811C C745A803010000          mov [ebp-58], 00000103
:00428123 C745AC04010000          mov [ebp-54], 00000104
:0042812A C745B005010000          mov [ebp-50], 00000105
:00428131 C745B406010000          mov [ebp-4C], 00000106
:00428138 C745B807010000          mov [ebp-48], 00000107
:0042813F C745BC08010000          mov [ebp-44], 00000108
:00428146 C745C009010000          mov [ebp-40], 00000109
:0042814D C745C40A010000          mov [ebp-3C], 0000010A
:00428154 C745C80B010000          mov [ebp-38], 0000010B
:0042815B C745CC0C010000          mov [ebp-34], 0000010C
:00428162 C745D00D010000          mov [ebp-30], 0000010D
:00428169 C745D42D010000          mov [ebp-2C], 0000012D
:00428170 C745D86F010000          mov [ebp-28], 0000016F
:00428177 C745DC70010000          mov [ebp-24], 00000170
:0042817E C745E071010000          mov [ebp-20], 00000171
:00428185 C745E472010000          mov [ebp-1C], 00000172
:0042818C C745E873010000          mov [ebp-18], 00000173
:00428193 C745EC74010000          mov [ebp-14], 00000174
:0042819A C745F075010000          mov [ebp-10], 00000175
:004281A1 C745F476010000          mov [ebp-0C], 00000176
:004281A8 C745F877010000          mov [ebp-08], 00000177
:004281AF C745FC78010000          mov [ebp-04], 00000178
:004281B6 6A19                    push 00000019
:004281B8 E8F3010500              call 004783B0
:004281BD 83C404                  add esp, 00000004
:004281C0 8B44859C                mov eax, dword ptr [ebp+4*eax-64]
:004281C4 8BE5                    mov esp, ebp
:004281C6 5D                      pop ebp
:004281C7 C3                      ret



* Referenced by a CALL at Address:
|:00427E50   
|
:004281C8 55                      push ebp
:004281C9 8BEC                    mov ebp, esp
:004281CB 83EC64                  sub esp, 00000064
:004281CE C7459C8B000000          mov [ebp-64], 0000008B
:004281D5 C745A000010000          mov [ebp-60], 00000100
:004281DC C745A401010000          mov [ebp-5C], 00000101
:004281E3 C745A802010000          mov [ebp-58], 00000102
:004281EA C745AC03010000          mov [ebp-54], 00000103
:004281F1 C745B004010000          mov [ebp-50], 00000104
:004281F8 C745B405010000          mov [ebp-4C], 00000105
:004281FF C745B806010000          mov [ebp-48], 00000106
:00428206 C745BC07010000          mov [ebp-44], 00000107
:0042820D C745C008010000          mov [ebp-40], 00000108
:00428214 C745C409010000          mov [ebp-3C], 00000109
:0042821B C745C80A010000          mov [ebp-38], 0000010A
:00428222 C745CC0B010000          mov [ebp-34], 0000010B
:00428229 C745D00C010000          mov [ebp-30], 0000010C
:00428230 C745D40D010000          mov [ebp-2C], 0000010D
:00428237 C745D879010000          mov [ebp-28], 00000179
:0042823E C745DC7A010000          mov [ebp-24], 0000017A
:00428245 C745E07B010000          mov [ebp-20], 0000017B
:0042824C C745E47C010000          mov [ebp-1C], 0000017C
:00428253 C745E87D010000          mov [ebp-18], 0000017D
:0042825A C745EC7E010000          mov [ebp-14], 0000017E
:00428261 C745F07F010000          mov [ebp-10], 0000017F
:00428268 C745F480010000          mov [ebp-0C], 00000180
:0042826F C745F881010000          mov [ebp-08], 00000181
:00428276 C745FC82010000          mov [ebp-04], 00000182
:0042827D 6A19                    push 00000019
:0042827F E82C010500              call 004783B0
:00428284 83C404                  add esp, 00000004
:00428287 8B44859C                mov eax, dword ptr [ebp+4*eax-64]
:0042828B 8BE5                    mov esp, ebp
:0042828D 5D                      pop ebp
:0042828E C3                      ret



* Referenced by a CALL at Address:
|:00427E79   
|
:0042828F 55                      push ebp
:00428290 8BEC                    mov ebp, esp
:00428292 83EC5C                  sub esp, 0000005C
:00428295 C745A400010000          mov [ebp-5C], 00000100
:0042829C C745A801010000          mov [ebp-58], 00000101
:004282A3 C745AC02010000          mov [ebp-54], 00000102
:004282AA C745B003010000          mov [ebp-50], 00000103
:004282B1 C745B404010000          mov [ebp-4C], 00000104
:004282B8 C745B805010000          mov [ebp-48], 00000105
:004282BF C745BC06010000          mov [ebp-44], 00000106
:004282C6 C745C007010000          mov [ebp-40], 00000107
:004282CD C745C408010000          mov [ebp-3C], 00000108
:004282D4 C745C809010000          mov [ebp-38], 00000109
:004282DB C745CC0A010000          mov [ebp-34], 0000010A
:004282E2 C745D00B010000          mov [ebp-30], 0000010B
:004282E9 C745D40C010000          mov [ebp-2C], 0000010C
:004282F0 C745D80D010000          mov [ebp-28], 0000010D
:004282F7 C745DC46010000          mov [ebp-24], 00000146
:004282FE C745E083010000          mov [ebp-20], 00000183
:00428305 C745E484010000          mov [ebp-1C], 00000184
:0042830C C745E885010000          mov [ebp-18], 00000185
:00428313 C745EC86010000          mov [ebp-14], 00000186
:0042831A C745F087010000          mov [ebp-10], 00000187
:00428321 C745F488010000          mov [ebp-0C], 00000188
:00428328 C745F889010000          mov [ebp-08], 00000189
:0042832F C745FC8A010000          mov [ebp-04], 0000018A
:00428336 6A17                    push 00000017
:00428338 E873000500              call 004783B0
:0042833D 83C404                  add esp, 00000004
:00428340 8B4485A4                mov eax, dword ptr [ebp+4*eax-5C]
:00428344 8BE5                    mov esp, ebp
:00428346 5D                      pop ebp
:00428347 C3                      ret



* Referenced by a CALL at Address:
|:00427E87   
|
:00428348 55                      push ebp
:00428349 8BEC                    mov ebp, esp
:0042834B 83EC48                  sub esp, 00000048
:0042834E C745B800010000          mov [ebp-48], 00000100
:00428355 C745BC01010000          mov [ebp-44], 00000101
:0042835C C745C002010000          mov [ebp-40], 00000102
:00428363 C745C403010000          mov [ebp-3C], 00000103
:0042836A C745C804010000          mov [ebp-38], 00000104
:00428371 C745CC05010000          mov [ebp-34], 00000105
:00428378 C745D006010000          mov [ebp-30], 00000106
:0042837F C745D407010000          mov [ebp-2C], 00000107
:00428386 C745D808010000          mov [ebp-28], 00000108
:0042838D C745DC09010000          mov [ebp-24], 00000109
:00428394 C745E00A010000          mov [ebp-20], 0000010A
:0042839B C745E40B010000          mov [ebp-1C], 0000010B
:004283A2 C745E80C010000          mov [ebp-18], 0000010C
:004283A9 C745EC0D010000          mov [ebp-14], 0000010D
:004283B0 C745F039010000          mov [ebp-10], 00000139
:004283B7 C745F497010000          mov [ebp-0C], 00000197
:004283BE C745F898010000          mov [ebp-08], 00000198
:004283C5 C745FC99010000          mov [ebp-04], 00000199
:004283CC 6A12                    push 00000012
:004283CE E8DDFF0400              call 004783B0
:004283D3 83C404                  add esp, 00000004
:004283D6 8B4485B8                mov eax, dword ptr [ebp+4*eax-48]
:004283DA 8BE5                    mov esp, ebp
:004283DC 5D                      pop ebp
:004283DD C3                      ret



* Referenced by a CALL at Address:
|:00427A70   
|
:004283DE 55                      push ebp
:004283DF 8BEC                    mov ebp, esp
:004283E1 83EC44                  sub esp, 00000044
:004283E4 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"pG@NA\rндLmj\rWC"
                                  |
:004283E6 6888CF4700              push 0047CF88
:004283EB 8B4508                  mov eax, dword ptr [ebp+08]
:004283EE 50                      push eax
:004283EF B9D0454900              mov ecx, 004945D0
:004283F4 E8B9DCFFFF              call 004260B2
:004283F9 6A40                    push 00000040
:004283FB 6A00                    push 00000000
:004283FD 8D4DBC                  lea ecx, dword ptr [ebp-44]
:00428400 51                      push ecx
:00428401 E8CA760400              call 0046FAD0
:00428406 83C40C                  add esp, 0000000C
:00428409 B938464900              mov ecx, 00494638
:0042840E E8EDAEFDFF              call 00403300
:00428413 8BC8                    mov ecx, eax
:00428415 6BC950                  imul ecx, 00000050
:00428418 81C1787F4900            add ecx, 00497F78
:0042841E E8E1ACFDFF              call 00403104
:00428423 50                      push eax

* Possible StringData Ref from Data Obj ->"ڬO\r%sC\r "
                                  |
:00428424 68A8CF4700              push 0047CFA8
:00428429 8D55BC                  lea edx, dword ptr [ebp-44]
:0042842C 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042842D FF1504D74B00            Call dword ptr [004BD704]
:00428433 83C40C                  add esp, 0000000C
:00428436 6A00                    push 00000000
:00428438 8D45BC                  lea eax, dword ptr [ebp-44]
:0042843B 50                      push eax
:0042843C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042843F 51                      push ecx
:00428440 B938464900              mov ecx, 00494638
:00428445 E868DCFFFF              call 004260B2
:0042844A 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ڡA\rQKK\r "
                                  |
:0042844C 68B8CF4700              push 0047CFB8
:00428451 8B5508                  mov edx, dword ptr [ebp+08]
:00428454 52                      push edx
:00428455 B9D0454900              mov ecx, 004945D0
:0042845A E853DCFFFF              call 004260B2
:0042845F 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"NդFC\r \r "
                                  |
:00428461 68D0CF4700              push 0047CFD0
:00428466 8B4508                  mov eax, dword ptr [ebp+08]
:00428469 50                      push eax
:0042846A B9D0454900              mov ecx, 004945D0
:0042846F E83EDCFFFF              call 004260B2
:00428474 B938464900              mov ecx, 00494638
:00428479 E882AEFDFF              call 00403300
:0042847E 85C0                    test eax, eax
:00428480 751A                    jne 0042849C
:00428482 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"Lצp\rۥhaH\r "
                                  |
:00428484 68E4CF4700              push 0047CFE4
:00428489 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042848C 51                      push ecx
:0042848D B9D0454900              mov ecx, 004945D0
:00428492 E81BDCFFFF              call 004260B2
:00428497 8945FC                  mov dword ptr [ebp-04], eax
:0042849A EB2D                    jmp 004284C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428480(C)
|
:0042849C 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"Lצp\rۥhaH\r"
                                  |
:0042849E 6800D04700              push 0047D000
:004284A3 8B5508                  mov edx, dword ptr [ebp+08]
:004284A6 52                      push edx
:004284A7 B9D0454900              mov ecx, 004945D0
:004284AC E801DCFFFF              call 004260B2
:004284B1 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"NDA\rˡH\r "
                                  |
:004284B3 681CD04700              push 0047D01C
:004284B8 8B4508                  mov eax, dword ptr [ebp+08]
:004284BB 50                      push eax
:004284BC B938464900              mov ecx, 00494638
:004284C1 E8ECDBFFFF              call 004260B2
:004284C6 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042849A(U)
|
:004284C9 837DFC01                cmp dword ptr [ebp-04], 00000001
:004284CD 0F859C000000            jne 0042856F
:004284D3 B9D0454900              mov ecx, 004945D0
:004284D8 E823AEFDFF              call 00403300
:004284DD 8BC8                    mov ecx, eax
:004284DF 6BC950                  imul ecx, 00000050
:004284E2 81C1787F4900            add ecx, 00497F78
:004284E8 E817ACFDFF              call 00403104
:004284ED 50                      push eax

* Possible StringData Ref from Data Obj ->"%s[JbUC"
                                  |
:004284EE 6834D04700              push 0047D034
:004284F3 8D4DBC                  lea ecx, dword ptr [ebp-44]
:004284F6 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004284F7 FF1504D74B00            Call dword ptr [004BD704]
:004284FD 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00428500 6A08                    push 00000008
:00428502 8D55BC                  lea edx, dword ptr [ebp-44]
:00428505 52                      push edx
:00428506 8B4508                  mov eax, dword ptr [ebp+08]
:00428509 50                      push eax
:0042850A E85DB5FFFF              call 00423A6C
:0042850F 83C40C                  add esp, 0000000C
:00428512 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"t@I\rNѤFC\r"
                                  |
:00428514 6844D04700              push 0047D044
:00428519 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042851C 51                      push ecx
:0042851D B9D0454900              mov ecx, 004945D0
:00428522 E88BDBFFFF              call 004260B2
:00428527 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"oOڮa@N\r@NǤUӪ\rFC"
                                  |
:00428529 6858D04700              push 0047D058
:0042852E 8B5508                  mov edx, dword ptr [ebp+08]
:00428531 52                      push edx
:00428532 B9D0454900              mov ecx, 004945D0
:00428537 E876DBFFFF              call 004260B2
:0042853C 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"бzh\raC\r "
                                  |
:0042853E 687CD04700              push 0047D07C
:00428543 8B4508                  mov eax, dword ptr [ebp+08]
:00428546 50                      push eax
:00428547 B9D0454900              mov ecx, 004945D0
:0042854C E861DBFFFF              call 004260B2
:00428551 6A00                    push 00000000
:00428553 B9D0454900              mov ecx, 004945D0
:00428558 E8A3ADFDFF              call 00403300
:0042855D 8BC8                    mov ecx, eax
:0042855F 6BC950                  imul ecx, 00000050
:00428562 81C1787F4900            add ecx, 00497F78
:00428568 E833D1FDFF              call 004056A0
:0042856D EB2A                    jmp 00428599

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004284CD(C)
|
:0042856F 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ܿ\rLSkC\r "
                                  |
:00428571 6890D04700              push 0047D090
:00428576 8B4D08                  mov ecx, dword ptr [ebp+08]
:00428579 51                      push ecx
:0042857A B9D0454900              mov ecx, 004945D0
:0042857F E82EDBFFFF              call 004260B2
:00428584 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"A\rЧoӮh\rΧaC"
                                  |
:00428586 68A8D04700              push 0047D0A8
:0042858B 8B5508                  mov edx, dword ptr [ebp+08]
:0042858E 52                      push edx
:0042858F B9D0454900              mov ecx, 004945D0
:00428594 E819DBFFFF              call 004260B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042856D(U)
|
:00428599 68B6000000              push 000000B6
:0042859E 8B4508                  mov eax, dword ptr [ebp+08]
:004285A1 50                      push eax
:004285A2 B938464900              mov ecx, 00494638
:004285A7 E8ED520000              call 0042D899
:004285AC 8BE5                    mov esp, ebp
:004285AE 5D                      pop ebp
:004285AF C3                      ret



* Referenced by a CALL at Address:
|:00427A9C   
|
:004285B0 55                      push ebp
:004285B1 8BEC                    mov ebp, esp
:004285B3 83EC44                  sub esp, 00000044
:004285B6 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"ѧڪ\rAڪAFC\r "
                                  |
:004285B8 68C8D04700              push 0047D0C8
:004285BD 8B4508                  mov eax, dword ptr [ebp+08]
:004285C0 50                      push eax
:004285C1 B9D0454900              mov ecx, 004945D0
:004285C6 E8E7DAFFFF              call 004260B2
:004285CB 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"@NA\rn\rӥѡC"
                                  |
:004285CD 68E8D04700              push 0047D0E8
:004285D2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004285D5 51                      push ecx
:004285D6 B9D0454900              mov ecx, 004945D0
:004285DB E8D2DAFFFF              call 004260B2
:004285E0 B938464900              mov ecx, 00494638
:004285E5 E816ADFDFF              call 00403300
:004285EA 85C0                    test eax, eax
:004285EC 751A                    jne 00428608
:004285EE 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"iHܡA\rUA@uO\raC"
                                  |
:004285F0 680CD14700              push 0047D10C
:004285F5 8B5508                  mov edx, dword ptr [ebp+08]
:004285F8 52                      push edx
:004285F9 B9D0454900              mov ecx, 004945D0
:004285FE E8AFDAFFFF              call 004260B2
:00428603 8945FC                  mov dword ptr [ebp-04], eax
:00428606 EB2D                    jmp 00428635

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004285EC(C)
|
:00428608 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"iHܡA\rUA@uO\raC"
                                  |
:0042860A 682CD14700              push 0047D12C
:0042860F 8B4508                  mov eax, dword ptr [ebp+08]
:00428612 50                      push eax
:00428613 B9D0454900              mov ecx, 004945D0
:00428618 E895DAFFFF              call 004260B2
:0042861D 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"NDA\rˡH\r "
                                  |
:0042861F 684CD14700              push 0047D14C
:00428624 8B4D08                  mov ecx, dword ptr [ebp+08]
:00428627 51                      push ecx
:00428628 B938464900              mov ecx, 00494638
:0042862D E880DAFFFF              call 004260B2
:00428632 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428606(U)
|
:00428635 6A40                    push 00000040
:00428637 6A00                    push 00000000
:00428639 8D55BC                  lea edx, dword ptr [ebp-44]
:0042863C 52                      push edx
:0042863D E88E740400              call 0046FAD0
:00428642 83C40C                  add esp, 0000000C
:00428645 837DFC01                cmp dword ptr [ebp-04], 00000001
:00428649 7572                    jne 004286BD
:0042864B B9D0454900              mov ecx, 004945D0
:00428650 E8ABACFDFF              call 00403300
:00428655 8BC8                    mov ecx, eax
:00428657 6BC950                  imul ecx, 00000050
:0042865A 81C1787F4900            add ecx, 00497F78
:00428660 E89FAAFDFF              call 00403104
:00428665 50                      push eax

* Possible StringData Ref from Data Obj ->"%sݤUC"
                                  |
:00428666 6864D14700              push 0047D164
:0042866B 8D45BC                  lea eax, dword ptr [ebp-44]
:0042866E 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042866F FF1504D74B00            Call dword ptr [004BD704]
:00428675 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00428678 6A08                    push 00000008
:0042867A 8D4DBC                  lea ecx, dword ptr [ebp-44]
:0042867D 51                      push ecx
:0042867E 8B5508                  mov edx, dword ptr [ebp+08]
:00428681 52                      push edx
:00428682 E8E5B3FFFF              call 00423A6C
:00428687 83C40C                  add esp, 0000000C
:0042868A 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"OA\rЧoӮh\rΧaC"
                                  |
:0042868C 6874D14700              push 0047D174
:00428691 8B4508                  mov eax, dword ptr [ebp+08]
:00428694 50                      push eax
:00428695 B9D0454900              mov ecx, 004945D0
:0042869A E813DAFFFF              call 004260B2
:0042869F 6A00                    push 00000000
:004286A1 B9D0454900              mov ecx, 004945D0
:004286A6 E855ACFDFF              call 00403300
:004286AB 8BC8                    mov ecx, eax
:004286AD 6BC950                  imul ecx, 00000050
:004286B0 81C1787F4900            add ecx, 00497F78
:004286B6 E8E5CFFDFF              call 004056A0
:004286BB EB2A                    jmp 004286E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428649(C)
|
:004286BD 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"naA\roӤ]aC\r "
                                  |
:004286BF 6894D14700              push 0047D194
:004286C4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004286C7 51                      push ecx
:004286C8 B9D0454900              mov ecx, 004945D0
:004286CD E8E0D9FFFF              call 004260B2
:004286D2 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"KKOA\roӤ]AaC\r "
                                  |
:004286D4 68B0D14700              push 0047D1B0
:004286D9 8B5508                  mov edx, dword ptr [ebp+08]
:004286DC 52                      push edx
:004286DD B9D0454900              mov ecx, 004945D0
:004286E2 E8CBD9FFFF              call 004260B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004286BB(U)
|
:004286E7 68D7000000              push 000000D7
:004286EC 8B4508                  mov eax, dword ptr [ebp+08]
:004286EF 50                      push eax
:004286F0 B938464900              mov ecx, 00494638
:004286F5 E89F510000              call 0042D899
:004286FA 8BE5                    mov esp, ebp
:004286FC 5D                      pop ebp
:004286FD C3                      ret



* Referenced by a CALL at Address:
|:00427C92   
|
:004286FE 55                      push ebp
:004286FF 8BEC                    mov ebp, esp
:00428701 83EC40                  sub esp, 00000040
:00428704 8B4508                  mov eax, dword ptr [ebp+08]
:00428707 50                      push eax
:00428708 E84689FFFF              call 00421053
:0042870D 83C404                  add esp, 00000004
:00428710 85C0                    test eax, eax
:00428712 7505                    jne 00428719
:00428714 E9CC000000              jmp 004287E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428712(C)
|
:00428719 6A40                    push 00000040
:0042871B 6A00                    push 00000000
:0042871D 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00428720 51                      push ecx
:00428721 E8AA730400              call 0046FAD0
:00428726 83C40C                  add esp, 0000000C
:00428729 B9D0454900              mov ecx, 004945D0
:0042872E E8CDABFDFF              call 00403300
:00428733 8BC8                    mov ecx, eax
:00428735 6BC950                  imul ecx, 00000050
:00428738 81C1787F4900            add ecx, 00497F78
:0042873E E8C1A9FDFF              call 00403104
:00428743 50                      push eax

* Possible StringData Ref from Data Obj ->"%sn"
                                  |
:00428744 68D0D14700              push 0047D1D0
:00428749 8D55C0                  lea edx, dword ptr [ebp-40]
:0042874C 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042874D FF1504D74B00            Call dword ptr [004BD704]
:00428753 83C40C                  add esp, 0000000C
:00428756 6A00                    push 00000000
:00428758 8D45C0                  lea eax, dword ptr [ebp-40]
:0042875B 50                      push eax
:0042875C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042875F 51                      push ecx
:00428760 E807B3FFFF              call 00423A6C
:00428765 83C40C                  add esp, 0000000C
:00428768 8B5508                  mov edx, dword ptr [ebp+08]
:0042876B 52                      push edx
:0042876C B9D0454900              mov ecx, 004945D0
:00428771 E896C2FFFF              call 00424A0C
:00428776 8B4508                  mov eax, dword ptr [ebp+08]
:00428779 50                      push eax
:0042877A E86A000000              call 004287E9
:0042877F 83C404                  add esp, 00000004
:00428782 6A00                    push 00000000
:00428784 8B4D08                  mov ecx, dword ptr [ebp+08]
:00428787 51                      push ecx
:00428788 E8CD7CFFFF              call 0042045A
:0042878D 83C408                  add esp, 00000008
:00428790 E8A99BFFFF              call 0042233E
:00428795 6A00                    push 00000000
:00428797 8B5508                  mov edx, dword ptr [ebp+08]
:0042879A 52                      push edx
:0042879B E8DC83FFFF              call 00420B7C
:004287A0 83C408                  add esp, 00000008
:004287A3 E86D000000              call 00428815
:004287A8 85C0                    test eax, eax
:004287AA 7405                    je 004287B1
:004287AC E81A010000              call 004288CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004287AA(C)
|
:004287B1 8B4508                  mov eax, dword ptr [ebp+08]
:004287B4 50                      push eax
:004287B5 B9D0454900              mov ecx, 004945D0
:004287BA E8CCC1FFFF              call 0042498B
:004287BF 6A01                    push 00000001
:004287C1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004287C4 51                      push ecx
:004287C5 E8B283FFFF              call 00420B7C
:004287CA 83C408                  add esp, 00000008
:004287CD 8B5508                  mov edx, dword ptr [ebp+08]
:004287D0 52                      push edx
:004287D1 E863040000              call 00428C39
:004287D6 83C404                  add esp, 00000004
:004287D9 8B4508                  mov eax, dword ptr [ebp+08]
:004287DC 50                      push eax
:004287DD E8B199FFFF              call 00422193
:004287E2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428714(U)
|
:004287E5 8BE5                    mov esp, ebp
:004287E7 5D                      pop ebp
:004287E8 C3                      ret



* Referenced by a CALL at Address:
|:0042877A   
|
:004287E9 55                      push ebp
:004287EA 8BEC                    mov ebp, esp
:004287EC 6A00                    push 00000000
:004287EE E844ED0400              call 00477537
:004287F3 83C404                  add esp, 00000004
:004287F6 E88C77FFFF              call 0041FF87
:004287FB 8B4508                  mov eax, dword ptr [ebp+08]
:004287FE 50                      push eax
:004287FF B938464900              mov ecx, 00494638
:00428804 E882C1FFFF              call 0042498B
:00428809 6A01                    push 00000001
:0042880B E827ED0400              call 00477537
:00428810 83C404                  add esp, 00000004
:00428813 5D                      pop ebp
:00428814 C3                      ret



* Referenced by a CALL at Address:
|:004287A3   
|
:00428815 55                      push ebp
:00428816 8BEC                    mov ebp, esp
:00428818 83EC08                  sub esp, 00000008
:0042881B B9D0454900              mov ecx, 004945D0
:00428820 E8DBAAFDFF              call 00403300
:00428825 8BC8                    mov ecx, eax
:00428827 6BC950                  imul ecx, 00000050
:0042882A 81C1787F4900            add ecx, 00497F78
:00428830 E86BA9FDFF              call 004031A0
:00428835 25FF000000              and eax, 000000FF
:0042883A 8945FC                  mov dword ptr [ebp-04], eax
:0042883D B928474900              mov ecx, 00494728
:00428842 E839CFFDFF              call 00405780
:00428847 0FBEC0                  movsx eax, al
:0042884A 8945F8                  mov dword ptr [ebp-08], eax
:0042884D 837DF803                cmp dword ptr [ebp-08], 00000003
:00428851 775E                    ja 004288B1
:00428853 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00428856 FF248DBB884200          jmp dword ptr [4*ecx+004288BB]
:0042885D 837DFC18                cmp dword ptr [ebp-04], 00000018
:00428861 740D                    je 00428870
:00428863 837DFC19                cmp dword ptr [ebp-04], 00000019
:00428867 7407                    je 00428870
:00428869 B801000000              mov eax, 00000001
:0042886E EB47                    jmp 004288B7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00428861(C), :00428867(C)
|
:00428870 EB43                    jmp 004288B5
:00428872 837DFC18                cmp dword ptr [ebp-04], 00000018
:00428876 7406                    je 0042887E
:00428878 837DFC19                cmp dword ptr [ebp-04], 00000019
:0042887C 7507                    jne 00428885

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428876(C)
|
:0042887E B801000000              mov eax, 00000001
:00428883 EB32                    jmp 004288B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042887C(C)
|
:00428885 EB2E                    jmp 004288B5
:00428887 837DFC18                cmp dword ptr [ebp-04], 00000018
:0042888B 7406                    je 00428893
:0042888D 837DFC19                cmp dword ptr [ebp-04], 00000019
:00428891 7507                    jne 0042889A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042888B(C)
|
:00428893 B801000000              mov eax, 00000001
:00428898 EB1D                    jmp 004288B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428891(C)
|
:0042889A EB19                    jmp 004288B5
:0042889C 837DFC18                cmp dword ptr [ebp-04], 00000018
:004288A0 740D                    je 004288AF
:004288A2 837DFC19                cmp dword ptr [ebp-04], 00000019
:004288A6 7407                    je 004288AF
:004288A8 B801000000              mov eax, 00000001
:004288AD EB08                    jmp 004288B7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004288A0(C), :004288A6(C)
|
:004288AF EB04                    jmp 004288B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428851(C)
|
:004288B1 33C0                    xor eax, eax
:004288B3 EB02                    jmp 004288B7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00428870(U), :00428885(U), :0042889A(U), :004288AF(U)
|
:004288B5 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042886E(U), :00428883(U), :00428898(U), :004288AD(U), :004288B3(U)
|
:004288B7 8BE5                    mov esp, ebp
:004288B9 5D                      pop ebp
:004288BA C3                      ret



:004288BB 5D884200                DWORD 0042885D
:004288BF 72884200                DWORD 00428872
:004288C3 87884200                DWORD 00428887
:004288C7 9C884200                DWORD 0042889C



* Referenced by a CALL at Address:
|:004287AC   
|
:004288CB 55                      push ebp
:004288CC 8BEC                    mov ebp, esp
:004288CE B928474900              mov ecx, 00494728
:004288D3 E8A8CEFDFF              call 00405780
:004288D8 0FBEC0                  movsx eax, al
:004288DB 83F801                  cmp eax, 00000001
:004288DE 7411                    je 004288F1
:004288E0 B928474900              mov ecx, 00494728
:004288E5 E896CEFDFF              call 00405780
:004288EA 0FBEC8                  movsx ecx, al
:004288ED 85C9                    test ecx, ecx
:004288EF 7507                    jne 004288F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004288DE(C)
|
:004288F1 E809000000              call 004288FF
:004288F6 EB05                    jmp 004288FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004288EF(C)
|
:004288F8 E8BA010000              call 00428AB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004288F6(U)
|
:004288FD 5D                      pop ebp
:004288FE C3                      ret



* Referenced by a CALL at Address:
|:004288F1   
|
:004288FF 55                      push ebp
:00428900 8BEC                    mov ebp, esp
:00428902 51                      push ecx
:00428903 C745FC00000000          mov [ebp-04], 00000000
:0042890A EB09                    jmp 00428915

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004289E9(U)
|
:0042890C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042890F 83C001                  add eax, 00000001
:00428912 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042890A(U)
|
:00428915 837DFC06                cmp dword ptr [ebp-04], 00000006
:00428919 0F8FCF000000            jg 004289EE
:0042891F 6A01                    push 00000001
:00428921 E8956C0000              call 0042F5BB
:00428926 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00428929 6A09                    push 00000009
:0042892B E8DFCC0400              call 0047560F
:00428930 83C404                  add esp, 00000004
:00428933 6A00                    push 00000000
:00428935 E8FDEB0400              call 00477537
:0042893A 83C404                  add esp, 00000004
:0042893D 6A00                    push 00000000
:0042893F 6A00                    push 00000000
:00428941 6A00                    push 00000000
:00428943 E8D5D30400              call 00475D1D
:00428948 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042894B 6A04                    push 00000004
:0042894D 6A00                    push 00000000
:0042894F 6A00                    push 00000000
:00428951 B910474900              mov ecx, 00494710
:00428956 E835060500              call 00478F90
:0042895B 50                      push eax
:0042895C 6890000000              push 00000090
:00428961 6820010000              push 00000120
:00428966 6A00                    push 00000000
:00428968 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042896B 6BC930                  imul ecx, 00000030
:0042896E 51                      push ecx
:0042896F E880E10400              call 00476AF4
:00428974 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428977 6A04                    push 00000004
:00428979 6A00                    push 00000000
:0042897B 6A00                    push 00000000
:0042897D B940474900              mov ecx, 00494740
:00428982 E809060500              call 00478F90
:00428987 50                      push eax
:00428988 6890000000              push 00000090
:0042898D 6820010000              push 00000120
:00428992 6A00                    push 00000000
:00428994 8B55FC                  mov edx, dword ptr [ebp-04]
:00428997 6BD230                  imul edx, 00000030
:0042899A 81EA20010000            sub edx, 00000120
:004289A0 52                      push edx
:004289A1 E84EE10400              call 00476AF4
:004289A6 83C414                  add esp, 00000014
:004289A9 6A00                    push 00000000
:004289AB 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004289AD 6A04                    push 00000004
:004289AF E869D30400              call 00475D1D
:004289B4 83C40C                  add esp, 0000000C
:004289B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004289BA 99                      cdq
:004289BB 33C2                    xor eax, edx
:004289BD 2BC2                    sub eax, edx
:004289BF 83E001                  and eax, 00000001
:004289C2 33C2                    xor eax, edx
:004289C4 2BC2                    sub eax, edx
:004289C6 83C002                  add eax, 00000002
:004289C9 69C000090000            imul eax, 00000900
:004289CF 50                      push eax
:004289D0 B938464900              mov ecx, 00494638
:004289D5 E804440000              call 0042CDDE
:004289DA 6A01                    push 00000001
:004289DC E856EB0400              call 00477537
:004289E1 83C404                  add esp, 00000004
:004289E4 E8E76B0000              call 0042F5D0
:004289E9 E91EFFFFFF              jmp 0042890C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428919(C)
|
:004289EE E804000000              call 004289F7
:004289F3 8BE5                    mov esp, ebp
:004289F5 5D                      pop ebp
:004289F6 C3                      ret



* Referenced by a CALL at Addresses:
|:004289EE   , :00428BD9   
|
:004289F7 55                      push ebp
:004289F8 8BEC                    mov ebp, esp
:004289FA B804A20000              mov eax, 0000A204
:004289FF E81C6B0400              call 0046F520
:00428A04 6800A20000              push 0000A200

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428A09 6A04                    push 00000004
:00428A0B 6A00                    push 00000000
:00428A0D 6A00                    push 00000000
:00428A0F B910474900              mov ecx, 00494710
:00428A14 E877050500              call 00478F90
:00428A19 50                      push eax
:00428A1A 8D85005EFFFF            lea eax, dword ptr [ebp+FFFF5E00]
:00428A20 50                      push eax
:00428A21 E83A6B0400              call 0046F560
:00428A26 83C40C                  add esp, 0000000C
:00428A29 6800A20000              push 0000A200

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428A2E 6A04                    push 00000004
:00428A30 6A00                    push 00000000
:00428A32 6A00                    push 00000000
:00428A34 B940474900              mov ecx, 00494740
:00428A39 E852050500              call 00478F90
:00428A3E 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428A3F 6A04                    push 00000004
:00428A41 6A00                    push 00000000
:00428A43 6A00                    push 00000000
:00428A45 B910474900              mov ecx, 00494710
:00428A4A E841050500              call 00478F90
:00428A4F 50                      push eax
:00428A50 E80B6B0400              call 0046F560
:00428A55 83C40C                  add esp, 0000000C
:00428A58 6800A20000              push 0000A200
:00428A5D 8D8D005EFFFF            lea ecx, dword ptr [ebp+FFFF5E00]
:00428A63 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428A64 6A04                    push 00000004
:00428A66 6A00                    push 00000000
:00428A68 6A00                    push 00000000
:00428A6A B940474900              mov ecx, 00494740
:00428A6F E81C050500              call 00478F90
:00428A74 50                      push eax
:00428A75 E8E66A0400              call 0046F560
:00428A7A 83C40C                  add esp, 0000000C
:00428A7D B928474900              mov ecx, 00494728
:00428A82 E8F9CCFDFF              call 00405780
:00428A87 8885FC5DFFFF            mov byte ptr [ebp+FFFF5DFC], al
:00428A8D B928474900              mov ecx, 00494728
:00428A92 E86973FEFF              call 0040FE00
:00428A97 50                      push eax
:00428A98 B928474900              mov ecx, 00494728
:00428A9D E87E540000              call 0042DF20
:00428AA2 8A95FC5DFFFF            mov dl, byte ptr [ebp+FFFF5DFC]
:00428AA8 52                      push edx
:00428AA9 B928474900              mov ecx, 00494728
:00428AAE E88D540000              call 0042DF40
:00428AB3 8BE5                    mov esp, ebp
:00428AB5 5D                      pop ebp
:00428AB6 C3                      ret



* Referenced by a CALL at Address:
|:004288F8   
|
:00428AB7 55                      push ebp
:00428AB8 8BEC                    mov ebp, esp
:00428ABA 51                      push ecx
:00428ABB 6800120000              push 00001200
:00428AC0 B938464900              mov ecx, 00494638
:00428AC5 E826580000              call 0042E2F0
:00428ACA 50                      push eax
:00428ACB E82E020000              call 00428CFE
:00428AD0 83C404                  add esp, 00000004
:00428AD3 68001B0000              push 00001B00
:00428AD8 B938464900              mov ecx, 00494638
:00428ADD E80E580000              call 0042E2F0
:00428AE2 50                      push eax
:00428AE3 E816020000              call 00428CFE
:00428AE8 83C404                  add esp, 00000004
:00428AEB C745FC00000000          mov [ebp-04], 00000000
:00428AF2 EB09                    jmp 00428AFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428BD4(U)
|
:00428AF4 8B45FC                  mov eax, dword ptr [ebp-04]
:00428AF7 83C001                  add eax, 00000001
:00428AFA 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428AF2(U)
|
:00428AFD 837DFC06                cmp dword ptr [ebp-04], 00000006
:00428B01 0F8FD2000000            jg 00428BD9
:00428B07 6A01                    push 00000001
:00428B09 E8AD6A0000              call 0042F5BB
:00428B0E 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00428B11 6A09                    push 00000009
:00428B13 E8F7CA0400              call 0047560F
:00428B18 83C404                  add esp, 00000004
:00428B1B 6A00                    push 00000000
:00428B1D E815EA0400              call 00477537
:00428B22 83C404                  add esp, 00000004
:00428B25 6A00                    push 00000000
:00428B27 6A00                    push 00000000
:00428B29 6A00                    push 00000000
:00428B2B E8EDD10400              call 00475D1D
:00428B30 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428B33 6A04                    push 00000004
:00428B35 6A00                    push 00000000
:00428B37 6A00                    push 00000000
:00428B39 B910474900              mov ecx, 00494710
:00428B3E E84D040500              call 00478F90
:00428B43 50                      push eax
:00428B44 6890000000              push 00000090
:00428B49 6820010000              push 00000120
:00428B4E 6A00                    push 00000000
:00428B50 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00428B53 F7D9                    neg ecx
:00428B55 6BC930                  imul ecx, 00000030
:00428B58 51                      push ecx
:00428B59 E896DF0400              call 00476AF4
:00428B5E 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428B61 6A04                    push 00000004
:00428B63 6A00                    push 00000000
:00428B65 6A00                    push 00000000
:00428B67 B940474900              mov ecx, 00494740
:00428B6C E81F040500              call 00478F90
:00428B71 50                      push eax
:00428B72 6890000000              push 00000090
:00428B77 6820010000              push 00000120
:00428B7C 6A00                    push 00000000
:00428B7E 8B55FC                  mov edx, dword ptr [ebp-04]
:00428B81 6BD230                  imul edx, 00000030
:00428B84 B820010000              mov eax, 00000120
:00428B89 2BC2                    sub eax, edx
:00428B8B 50                      push eax
:00428B8C E863DF0400              call 00476AF4
:00428B91 83C414                  add esp, 00000014
:00428B94 6A00                    push 00000000
:00428B96 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428B98 6A04                    push 00000004
:00428B9A E87ED10400              call 00475D1D
:00428B9F 83C40C                  add esp, 0000000C
:00428BA2 8B45FC                  mov eax, dword ptr [ebp-04]
:00428BA5 99                      cdq
:00428BA6 33C2                    xor eax, edx
:00428BA8 2BC2                    sub eax, edx
:00428BAA 83E001                  and eax, 00000001
:00428BAD 33C2                    xor eax, edx
:00428BAF 2BC2                    sub eax, edx
:00428BB1 83C002                  add eax, 00000002
:00428BB4 69C000090000            imul eax, 00000900
:00428BBA 50                      push eax
:00428BBB B938464900              mov ecx, 00494638
:00428BC0 E819420000              call 0042CDDE
:00428BC5 6A01                    push 00000001
:00428BC7 E86BE90400              call 00477537
:00428BCC 83C404                  add esp, 00000004
:00428BCF E8FC690000              call 0042F5D0
:00428BD4 E91BFFFFFF              jmp 00428AF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428B01(C)
|
:00428BD9 E819FEFFFF              call 004289F7
:00428BDE 6800120000              push 00001200
:00428BE3 B938464900              mov ecx, 00494638
:00428BE8 E803570000              call 0042E2F0
:00428BED 50                      push eax
:00428BEE E80B010000              call 00428CFE
:00428BF3 83C404                  add esp, 00000004
:00428BF6 68001B0000              push 00001B00
:00428BFB B938464900              mov ecx, 00494638
:00428C00 E8EB560000              call 0042E2F0
:00428C05 50                      push eax
:00428C06 E8F3000000              call 00428CFE
:00428C0B 83C404                  add esp, 00000004
:00428C0E B938464900              mov ecx, 00494638
:00428C13 E86EBCFFFF              call 00424886
:00428C18 6A00                    push 00000000
:00428C1A 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428C1C 6A04                    push 00000004
:00428C1E E8FAD00400              call 00475D1D
:00428C23 83C40C                  add esp, 0000000C
:00428C26 6800120000              push 00001200
:00428C2B B938464900              mov ecx, 00494638
:00428C30 E8A9410000              call 0042CDDE
:00428C35 8BE5                    mov esp, ebp
:00428C37 5D                      pop ebp
:00428C38 C3                      ret



* Referenced by a CALL at Address:
|:004287D1   
|
:00428C39 55                      push ebp
:00428C3A 8BEC                    mov ebp, esp
:00428C3C 51                      push ecx
:00428C3D C745FC00000000          mov [ebp-04], 00000000
:00428C44 EB09                    jmp 00428C4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428CF5(U)
|
:00428C46 8B45FC                  mov eax, dword ptr [ebp-04]
:00428C49 83C001                  add eax, 00000001
:00428C4C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428C44(U)
|
:00428C4F 837DFC0C                cmp dword ptr [ebp-04], 0000000C
:00428C53 0F8FA1000000            jg 00428CFA
:00428C59 6A01                    push 00000001
:00428C5B E85B690000              call 0042F5BB
:00428C60 83C404                  add esp, 00000004
:00428C63 8B45FC                  mov eax, dword ptr [ebp-04]
:00428C66 99                      cdq
:00428C67 33C2                    xor eax, edx
:00428C69 2BC2                    sub eax, edx
:00428C6B 83E003                  and eax, 00000003
:00428C6E 33C2                    xor eax, edx
:00428C70 2BC2                    sub eax, edx
:00428C72 83F802                  cmp eax, 00000002
:00428C75 750D                    jne 00428C84
:00428C77 68D0454900              push 004945D0
:00428C7C E83DAEFFFF              call 00423ABE
:00428C81 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428C75(C)
|

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00428C84 6A09                    push 00000009
:00428C86 E884C90400              call 0047560F
:00428C8B 83C404                  add esp, 00000004
:00428C8E 6A00                    push 00000000
:00428C90 E8A2E80400              call 00477537
:00428C95 83C404                  add esp, 00000004
:00428C98 B9D0454900              mov ecx, 004945D0
:00428C9D E8E4BBFFFF              call 00424886
:00428CA2 6A30                    push 00000030
:00428CA4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00428CA7 C1E103                  shl ecx, 03
:00428CAA 51                      push ecx
:00428CAB B9D0454900              mov ecx, 004945D0
:00428CB0 E8EB530000              call 0042E0A0
:00428CB5 6A00                    push 00000000
:00428CB7 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00428CB9 6A04                    push 00000004
:00428CBB E85DD00400              call 00475D1D
:00428CC0 83C40C                  add esp, 0000000C
:00428CC3 8B45FC                  mov eax, dword ptr [ebp-04]
:00428CC6 99                      cdq
:00428CC7 33C2                    xor eax, edx
:00428CC9 2BC2                    sub eax, edx
:00428CCB 83E001                  and eax, 00000001
:00428CCE 33C2                    xor eax, edx
:00428CD0 2BC2                    sub eax, edx
:00428CD2 83C002                  add eax, 00000002
:00428CD5 69C000090000            imul eax, 00000900
:00428CDB 50                      push eax
:00428CDC B9D0454900              mov ecx, 004945D0
:00428CE1 E8F8400000              call 0042CDDE
:00428CE6 6A01                    push 00000001
:00428CE8 E84AE80400              call 00477537
:00428CED 83C404                  add esp, 00000004
:00428CF0 E8DB680000              call 0042F5D0
:00428CF5 E94CFFFFFF              jmp 00428C46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428C53(C)
|
:00428CFA 8BE5                    mov esp, ebp
:00428CFC 5D                      pop ebp
:00428CFD C3                      ret



* Referenced by a CALL at Addresses:
|:00428ACB   , :00428AE3   , :00428BEE   , :00428C06   , :0042A706   
|:0042A722   , :0042A73E   , :0042AB85   , :0042BC1B   , :0042BED7   
|:0042BEF3   , :0042BF0F   , :0042CFC3   , :0042CFE3   , :0042D0BC   
|:0042D0DC   
|
:00428CFE 55                      push ebp
:00428CFF 8BEC                    mov ebp, esp
:00428D01 81EC0C090000            sub esp, 0000090C
:00428D07 8B4508                  mov eax, dword ptr [ebp+08]
:00428D0A 8945FC                  mov dword ptr [ebp-04], eax
:00428D0D C785F8F6FFFF00000000    mov dword ptr [ebp+FFFFF6F8], 00000000
:00428D17 EB0F                    jmp 00428D28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428D7E(U)
|
:00428D19 8B8DF8F6FFFF            mov ecx, dword ptr [ebp+FFFFF6F8]
:00428D1F 83C101                  add ecx, 00000001
:00428D22 898DF8F6FFFF            mov dword ptr [ebp+FFFFF6F8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428D17(U)
|
:00428D28 83BDF8F6FFFF30          cmp dword ptr [ebp+FFFFF6F8], 00000030
:00428D2F 734F                    jnb 00428D80
:00428D31 C785F4F6FFFF2F000000    mov dword ptr [ebp+FFFFF6F4], 0000002F
:00428D3B EB0F                    jmp 00428D4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428D7C(U)
|
:00428D3D 8B95F4F6FFFF            mov edx, dword ptr [ebp+FFFFF6F4]
:00428D43 83EA01                  sub edx, 00000001
:00428D46 8995F4F6FFFF            mov dword ptr [ebp+FFFFF6F4], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428D3B(U)
|
:00428D4C 83BDF4F6FFFF00          cmp dword ptr [ebp+FFFFF6F4], 00000000
:00428D53 7C29                    jl 00428D7E
:00428D55 8B85F8F6FFFF            mov eax, dword ptr [ebp+FFFFF6F8]
:00428D5B 6BC030                  imul eax, 00000030
:00428D5E 8D8C05FCF6FFFF          lea ecx, dword ptr [ebp+eax-00000904]
:00428D65 8B95F4F6FFFF            mov edx, dword ptr [ebp+FFFFF6F4]
:00428D6B 8B45FC                  mov eax, dword ptr [ebp-04]
:00428D6E 8A00                    mov al, byte ptr [eax]
:00428D70 880411                  mov byte ptr [ecx+edx], al
:00428D73 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00428D76 83C101                  add ecx, 00000001
:00428D79 894DFC                  mov dword ptr [ebp-04], ecx
:00428D7C EBBF                    jmp 00428D3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428D53(C)
|
:00428D7E EB99                    jmp 00428D19

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428D2F(C)
|
:00428D80 6800090000              push 00000900
:00428D85 8D95FCF6FFFF            lea edx, dword ptr [ebp+FFFFF6FC]
:00428D8B 52                      push edx
:00428D8C 8B4508                  mov eax, dword ptr [ebp+08]
:00428D8F 50                      push eax
:00428D90 E8CB670400              call 0046F560
:00428D95 83C40C                  add esp, 0000000C
:00428D98 8BE5                    mov esp, ebp
:00428D9A 5D                      pop ebp
:00428D9B C3                      ret



* Referenced by a CALL at Addresses:
|:0042798D   , :00427C10   
|
:00428D9C 55                      push ebp
:00428D9D 8BEC                    mov ebp, esp
:00428D9F 83EC08                  sub esp, 00000008
:00428DA2 56                      push esi
:00428DA3 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00428DA7 7426                    je 00428DCF
:00428DA9 B978294B00              mov ecx, 004B2978
:00428DAE E82DDC0000              call 004369E0
:00428DB3 8BF0                    mov esi, eax
:00428DB5 B928474900              mov ecx, 00494728
:00428DBA E8C1500000              call 0042DE80
:00428DBF 8D0446                  lea eax, dword ptr [esi+2*eax]
:00428DC2 50                      push eax
:00428DC3 B978294B00              mov ecx, 004B2978
:00428DC8 E8F3C8FDFF              call 004056C0
:00428DCD EB23                    jmp 00428DF2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428DA7(C)
|
:00428DCF B978294B00              mov ecx, 004B2978
:00428DD4 E807DC0000              call 004369E0
:00428DD9 8BF0                    mov esi, eax
:00428DDB B928474900              mov ecx, 00494728
:00428DE0 E89B500000              call 0042DE80
:00428DE5 2BF0                    sub esi, eax
:00428DE7 56                      push esi
:00428DE8 B978294B00              mov ecx, 004B2978
:00428DED E8CEC8FDFF              call 004056C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428DCD(U)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00428DF2 6A0A                    push 0000000A
:00428DF4 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00428DF7 51                      push ecx
:00428DF8 B978294B00              mov ecx, 004B2978
:00428DFD E8DEDB0000              call 004369E0
:00428E02 50                      push eax
:00428E03 E8B8170400              call 0046A5C0
:00428E08 83C40C                  add esp, 0000000C
:00428E0B 50                      push eax

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:0432, "65535"
                                  |
:00428E0C 6832040000              push 00000432
:00428E11 8B5508                  mov edx, dword ptr [ebp+08]
:00428E14 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00428E15 FF1510D64B00            Call dword ptr [004BD610]
:00428E1B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00428E1C FF1514D64B00            Call dword ptr [004BD614]
:00428E22 5E                      pop esi
:00428E23 8BE5                    mov esp, ebp
:00428E25 5D                      pop ebp
:00428E26 C3                      ret



* Referenced by a CALL at Addresses:
|:00427C23   , :00428FA8   
|
:00428E27 55                      push ebp
:00428E28 8BEC                    mov ebp, esp
:00428E2A 83EC0C                  sub esp, 0000000C
:00428E2D 6A00                    push 00000000
:00428E2F 8B4508                  mov eax, dword ptr [ebp+08]
:00428E32 50                      push eax
:00428E33 E8447DFFFF              call 00420B7C
:00428E38 83C408                  add esp, 00000008
:00428E3B 6A00                    push 00000000
:00428E3D 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00428E40 E84B540000              call 0042E290
:00428E45 8B0D54474900            mov ecx, dword ptr [00494754]
:00428E4B 51                      push ecx
:00428E4C 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00428E4F E80C500000              call 0042DE60
:00428E54 8B550C                  mov edx, dword ptr [ebp+0C]
:00428E57 52                      push edx
:00428E58 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00428E5B E810540000              call 0042E270
:00428E60 8D45F4                  lea eax, dword ptr [ebp-0C]
:00428E63 50                      push eax
:00428E64 68F03B4200              push 00423BF0
:00428E69 8B4D08                  mov ecx, dword ptr [ebp+08]
:00428E6C 51                      push ecx
:00428E6D 681E010000              push 0000011E
:00428E72 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00428E78 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00428E79 FF15DCD64B00            Call dword ptr [004BD6DC]
:00428E7F 6A01                    push 00000001
:00428E81 E835670000              call 0042F5BB
:00428E86 83C404                  add esp, 00000004
:00428E89 E842670000              call 0042F5D0
:00428E8E 6A00                    push 00000000
:00428E90 6A00                    push 00000000
:00428E92 68F0000000              push 000000F0
:00428E97 68C5040000              push 000004C5
:00428E9C 8B4508                  mov eax, dword ptr [ebp+08]
:00428E9F 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00428EA0 FF15D4D54B00            Call dword ptr [004BD5D4]
:00428EA6 85C0                    test eax, eax
:00428EA8 7418                    je 00428EC2
:00428EAA 6A00                    push 00000000
:00428EAC 687B040000              push 0000047B
:00428EB1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00428EB4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00428EB5 FF1510D64B00            Call dword ptr [004BD610]
:00428EBB 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00428EBC FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428EA8(C)
|
:00428EC2 6A01                    push 00000001
:00428EC4 8B5508                  mov edx, dword ptr [ebp+08]
:00428EC7 52                      push edx
:00428EC8 E8AF7CFFFF              call 00420B7C
:00428ECD 83C408                  add esp, 00000008
:00428ED0 8B4508                  mov eax, dword ptr [ebp+08]
:00428ED3 50                      push eax

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00428ED4 FF15FCD54B00            Call dword ptr [004BD5FC]
:00428EDA 8BE5                    mov esp, ebp
:00428EDC 5D                      pop ebp
:00428EDD C3                      ret



* Referenced by a CALL at Address:
|:00427975   
|
:00428EDE 55                      push ebp
:00428EDF 8BEC                    mov ebp, esp
:00428EE1 83EC14                  sub esp, 00000014
:00428EE4 B938464900              mov ecx, 00494638
:00428EE9 E812A4FDFF              call 00403300
:00428EEE 8BC8                    mov ecx, eax
:00428EF0 6BC950                  imul ecx, 00000050
:00428EF3 81C1787F4900            add ecx, 00497F78
:00428EF9 E8EC8EFDFF              call 00401DEA
:00428EFE 8945EC                  mov dword ptr [ebp-14], eax
:00428F01 8B45EC                  mov eax, dword ptr [ebp-14]
:00428F04 50                      push eax
:00428F05 B938464900              mov ecx, 00494638
:00428F0A E8D2B8FFFF              call 004247E1
:00428F0F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00428F12 51                      push ecx
:00428F13 8B55EC                  mov edx, dword ptr [ebp-14]
:00428F16 52                      push edx

* Possible StringData Ref from Data Obj ->"%d/%d"
                                  |
:00428F17 68D8D14700              push 0047D1D8
:00428F1C 8D45F0                  lea eax, dword ptr [ebp-10]
:00428F1F 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00428F20 FF1504D74B00            Call dword ptr [004BD704]
:00428F26 83C410                  add esp, 00000010
:00428F29 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00428F2C 51                      push ecx
:00428F2D 68DD040000              push 000004DD
:00428F32 8B5508                  mov edx, dword ptr [ebp+08]
:00428F35 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00428F36 FF1510D64B00            Call dword ptr [004BD610]
:00428F3C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00428F3D FF1514D64B00            Call dword ptr [004BD614]
:00428F43 8BE5                    mov esp, ebp
:00428F45 5D                      pop ebp
:00428F46 C3                      ret



* Referenced by a CALL at Address:
|:00427969   
|
:00428F47 55                      push ebp
:00428F48 8BEC                    mov ebp, esp
:00428F4A 83EC40                  sub esp, 00000040
:00428F4D 6AFF                    push FFFFFFFF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00428F4F 6A03                    push 00000003
:00428F51 8B4508                  mov eax, dword ptr [ebp+08]
:00428F54 50                      push eax
:00428F55 B938464900              mov ecx, 00494638
:00428F5A E811BFFFFF              call 00424E70
:00428F5F 6AFF                    push FFFFFFFF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00428F61 6A02                    push 00000002
:00428F63 8B4D08                  mov ecx, dword ptr [ebp+08]
:00428F66 51                      push ecx
:00428F67 B9D0454900              mov ecx, 004945D0
:00428F6C E8FFBEFFFF              call 00424E70
:00428F71 6A40                    push 00000040
:00428F73 6A00                    push 00000000
:00428F75 8D55C0                  lea edx, dword ptr [ebp-40]
:00428F78 52                      push edx
:00428F79 E8526B0400              call 0046FAD0
:00428F7E 83C40C                  add esp, 0000000C
:00428F81 B928474900              mov ecx, 00494728
:00428F86 E8F54E0000              call 0042DE80
:00428F8B D1E0                    shl eax, 1
:00428F8D 50                      push eax

* Possible StringData Ref from Data Obj ->"}GI\roOA\r%dC"
                                  |
:00428F8E 68E0D14700              push 0047D1E0
:00428F93 8D45C0                  lea eax, dword ptr [ebp-40]
:00428F96 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00428F97 FF1504D74B00            Call dword ptr [004BD704]
:00428F9D 83C40C                  add esp, 0000000C
:00428FA0 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00428FA3 51                      push ecx
:00428FA4 8B5508                  mov edx, dword ptr [ebp+08]
:00428FA7 52                      push edx
:00428FA8 E87AFEFFFF              call 00428E27
:00428FAD 83C408                  add esp, 00000008
:00428FB0 8BE5                    mov esp, ebp
:00428FB2 5D                      pop ebp
:00428FB3 C3                      ret



* Referenced by a CALL at Addresses:
|:00421C14   , :00421D53   , :00421DA7   , :00422160   
|
:00428FB4 55                      push ebp
:00428FB5 8BEC                    mov ebp, esp
:00428FB7 51                      push ecx
:00428FB8 894DFC                  mov dword ptr [ebp-04], ecx
:00428FBB 8B45FC                  mov eax, dword ptr [ebp-04]
:00428FBE 8B4814                  mov ecx, dword ptr [eax+14]
:00428FC1 51                      push ecx
:00428FC2 E8C94EFEFF              call 0040DE90
:00428FC7 83C404                  add esp, 00000004
:00428FCA 85C0                    test eax, eax
:00428FCC 7417                    je 00428FE5
:00428FCE 8B55FC                  mov edx, dword ptr [ebp-04]
:00428FD1 817A0CF0000000          cmp dword ptr [edx+0C], 000000F0
:00428FD8 7507                    jne 00428FE1
:00428FDA B801000000              mov eax, 00000001
:00428FDF EB16                    jmp 00428FF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428FD8(C)
|
:00428FE1 33C0                    xor eax, eax
:00428FE3 EB12                    jmp 00428FF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428FCC(C)
|
:00428FE5 8B45FC                  mov eax, dword ptr [ebp-04]
:00428FE8 83780C00                cmp dword ptr [eax+0C], 00000000
:00428FEC 7507                    jne 00428FF5
:00428FEE B801000000              mov eax, 00000001
:00428FF3 EB02                    jmp 00428FF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00428FEC(C)
|
:00428FF5 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00428FDF(U), :00428FE3(U), :00428FF3(U)
|
:00428FF7 8BE5                    mov esp, ebp
:00428FF9 5D                      pop ebp
:00428FFA C3                      ret



* Referenced by a CALL at Addresses:
|:0042A868   , :0042A8BA   
|
:00428FFB 55                      push ebp
:00428FFC 8BEC                    mov ebp, esp
:00428FFE 83EC14                  sub esp, 00000014
:00429001 894DF4                  mov dword ptr [ebp-0C], ecx
:00429004 837D0802                cmp dword ptr [ebp+08], 00000002
:00429008 7D09                    jge 00429013

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042900A C745F802000000          mov [ebp-08], 00000002
:00429011 EB07                    jmp 0042901A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429008(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00429013 C745F803000000          mov [ebp-08], 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429011(U)
|
:0042901A 6A00                    push 00000000
:0042901C E816E50400              call 00477537
:00429021 83C404                  add esp, 00000004
:00429024 E85E6FFFFF              call 0041FF87

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00429029 6A09                    push 00000009
:0042902B E8DFC50400              call 0047560F
:00429030 83C404                  add esp, 00000004
:00429033 6A00                    push 00000000
:00429035 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00429037 6A04                    push 00000004
:00429039 E8DFCC0400              call 00475D1D
:0042903E 83C40C                  add esp, 0000000C
:00429041 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429044 50                      push eax
:00429045 E845A8FFFF              call 0042388F
:0042904A 83C404                  add esp, 00000004
:0042904D 8945FC                  mov dword ptr [ebp-04], eax
:00429050 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429053 E8484E0000              call 0042DEA0
:00429058 85C0                    test eax, eax
:0042905A 740A                    je 00429066
:0042905C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042905F E8173D0000              call 0042CD7B
:00429064 EB0D                    jmp 00429073

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042905A(C)
|
:00429066 6800120000              push 00001200
:0042906B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042906E E86B3D0000              call 0042CDDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429064(U)
|
:00429073 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429076 0FBE511F                movsx edx, byte ptr [ecx+1F]
:0042907A 85D2                    test edx, edx
:0042907C 7C10                    jl 0042908E
:0042907E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429081 33C9                    xor ecx, ecx
:00429083 8A481E                  mov cl, byte ptr [eax+1E]
:00429086 81F985000000            cmp ecx, 00000085
:0042908C 7C6A                    jl 004290F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042907C(C)
|
:0042908E 8B5508                  mov edx, dword ptr [ebp+08]
:00429091 83C203                  add edx, 00000003
:00429094 83FA05                  cmp edx, 00000005
:00429097 7D0B                    jge 004290A4
:00429099 8B4508                  mov eax, dword ptr [ebp+08]
:0042909C 83C003                  add eax, 00000003
:0042909F 8945F0                  mov dword ptr [ebp-10], eax
:004290A2 EB07                    jmp 004290AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429097(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004290A4 C745F005000000          mov [ebp-10], 00000005

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004290A2(U)
|
:004290AB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004290AE C1E10C                  shl ecx, 0C
:004290B1 51                      push ecx
:004290B2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004290B5 E8FD3D0000              call 0042CEB7
:004290BA 837D0803                cmp dword ptr [ebp+08], 00000003
:004290BE 7533                    jne 004290F3
:004290C0 6800100000              push 00001000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004290C5 6A04                    push 00000004
:004290C7 6A00                    push 00000000
:004290C9 6800500000              push 00005000
:004290CE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004290D1 83C14C                  add ecx, 0000004C
:004290D4 E8B7FE0400              call 00478F90
:004290D9 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004290DA 6A04                    push 00000004
:004290DC 6A00                    push 00000000
:004290DE 6A00                    push 00000000
:004290E0 B9A8464900              mov ecx, 004946A8
:004290E5 E8A6FE0400              call 00478F90
:004290EA 50                      push eax
:004290EB E870640400              call 0046F560
:004290F0 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004290BE(C)
|
:004290F3 E997000000              jmp 0042918F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042908C(C)
|
:004290F8 8B55F8                  mov edx, dword ptr [ebp-08]
:004290FB C1E20C                  shl edx, 0C
:004290FE 52                      push edx
:004290FF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429102 E8E83D0000              call 0042CEEF
:00429107 50                      push eax
:00429108 E802010000              call 0042920F
:0042910D 83C408                  add esp, 00000008
:00429110 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429113 8A481F                  mov cl, byte ptr [eax+1F]
:00429116 51                      push ecx
:00429117 E883000000              call 0042919F
:0042911C 83C404                  add esp, 00000004
:0042911F 85C0                    test eax, eax
:00429121 7E34                    jle 00429157
:00429123 837D0802                cmp dword ptr [ebp+08], 00000002
:00429127 7D08                    jge 00429131
:00429129 8B5508                  mov edx, dword ptr [ebp+08]
:0042912C 8955EC                  mov dword ptr [ebp-14], edx
:0042912F EB07                    jmp 00429138

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429127(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00429131 C745EC02000000          mov [ebp-14], 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042912F(U)
|
:00429138 8B45EC                  mov eax, dword ptr [ebp-14]
:0042913B 69C000090000            imul eax, 00000900
:00429141 50                      push eax
:00429142 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429145 51                      push ecx
:00429146 E818010000              call 00429263
:0042914B 83C404                  add esp, 00000004
:0042914E 50                      push eax
:0042914F E8E5000000              call 00429239
:00429154 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429121(C)
|
:00429157 837D0803                cmp dword ptr [ebp+08], 00000003
:0042915B 7532                    jne 0042918F
:0042915D 6800100000              push 00001000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00429162 6A04                    push 00000004
:00429164 6A00                    push 00000000
:00429166 6800300000              push 00003000
:0042916B B9A8464900              mov ecx, 004946A8
:00429170 E81BFE0400              call 00478F90
:00429175 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00429176 6A04                    push 00000004
:00429178 6A00                    push 00000000
:0042917A 6A00                    push 00000000
:0042917C B9A8464900              mov ecx, 004946A8
:00429181 E80AFE0400              call 00478F90
:00429186 50                      push eax
:00429187 E8D4630400              call 0046F560
:0042918C 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004290F3(U), :0042915B(C)
|
:0042918F 6A01                    push 00000001
:00429191 E8A1E30400              call 00477537
:00429196 83C404                  add esp, 00000004
:00429199 8BE5                    mov esp, ebp
:0042919B 5D                      pop ebp
:0042919C C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00429117   , :0042A658   
|
:0042919F 55                      push ebp
:004291A0 8BEC                    mov ebp, esp
:004291A2 51                      push ecx
:004291A3 0FBE4508                movsx eax, byte ptr [ebp+08]
:004291A7 8945FC                  mov dword ptr [ebp-04], eax
:004291AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004291AD 83E920                  sub ecx, 00000020
:004291B0 894DFC                  mov dword ptr [ebp-04], ecx
:004291B3 837DFC1A                cmp dword ptr [ebp-04], 0000001A
:004291B7 7720                    ja 004291D9
:004291B9 8B45FC                  mov eax, dword ptr [ebp-04]
:004291BC 33D2                    xor edx, edx
:004291BE 8A90F4914200            mov dl, byte ptr [eax+004291F4]
:004291C4 FF2495E0914200          jmp dword ptr [4*edx+004291E0]
:004291CB B80C000000              mov eax, 0000000C
:004291D0 EB0A                    jmp 004291DC
:004291D2 B811000000              mov eax, 00000011
:004291D7 EB03                    jmp 004291DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004291B7(C)
|
:004291D9 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004291D0(U), :004291D7(U)
|
:004291DC 8BE5                    mov esp, ebp
:004291DE 5D                      pop ebp
:004291DF C3                      ret



:004291E0 CB914200                DWORD 004291CB
:004291E4 D2914200                DWORD 004291D2
:004291E8 CB914200                DWORD 004291CB
:004291EC CB914200                DWORD 004291CB
:004291F0 D9914200                DWORD 004291D9


:004291F4 000404                  add byte ptr [esp+eax], al
:004291F7 0404                    add al, 04
:004291F9 0404                    add al, 04
:004291FB 0404                    add al, 04
:004291FD 0404                    add al, 04
:004291FF 0401                    add al, 01
:00429201 0404                    add al, 04
:00429203 0402                    add al, 02
:00429205 0202                    add al, byte ptr [edx]
:00429207 0404                    add al, 04
:00429209 0404                    add al, 04
:0042920B 0404                    add al, 04
:0042920D 0403                    add al, 03

* Referenced by a CALL at Addresses:
|:00429108   , :00429359   , :004294EF   , :004295DB   , :00429729   
|
:0042920F 55                      push ebp
:00429210 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00429212 6A04                    push 00000004
:00429214 6A00                    push 00000000
:00429216 8B450C                  mov eax, dword ptr [ebp+0C]
:00429219 50                      push eax
:0042921A B9A8464900              mov ecx, 004946A8
:0042921F E86CFD0400              call 00478F90
:00429224 50                      push eax
:00429225 6A40                    push 00000040
:00429227 6A40                    push 00000040
:00429229 6A28                    push 00000028
:0042922B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042922E 51                      push ecx
:0042922F E8C0D80400              call 00476AF4
:00429234 83C414                  add esp, 00000014
:00429237 5D                      pop ebp
:00429238 C3                      ret



* Referenced by a CALL at Addresses:
|:0042914F   , :004292D4   , :0042960A   , :0042963F   , :0042966C   
|:00429684   , :0042974E   
|
:00429239 55                      push ebp
:0042923A 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042923C 6A04                    push 00000004
:0042923E 6A00                    push 00000000
:00429240 8B450C                  mov eax, dword ptr [ebp+0C]
:00429243 50                      push eax
:00429244 B958474900              mov ecx, 00494758
:00429249 E842FD0400              call 00478F90
:0042924E 50                      push eax
:0042924F 6A30                    push 00000030
:00429251 6A30                    push 00000030
:00429253 6A30                    push 00000030
:00429255 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429258 51                      push ecx
:00429259 E896D80400              call 00476AF4
:0042925E 83C414                  add esp, 00000014
:00429261 5D                      pop ebp
:00429262 C3                      ret



* Referenced by a CALL at Address:
|:00429146   
|
:00429263 55                      push ebp
:00429264 8BEC                    mov ebp, esp
:00429266 817D0838464900          cmp dword ptr [ebp+08], 00494638
:0042926D 750D                    jne 0042927C
:0042926F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429272 E879190300              call 0045ABF0
:00429277 83C004                  add eax, 00000004
:0042927A EB0B                    jmp 00429287

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042926D(C)
|
:0042927C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042927F E86C190300              call 0045ABF0
:00429284 83C004                  add eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042927A(U)
|
:00429287 5D                      pop ebp
:00429288 C3                      ret



* Referenced by a CALL at Addresses:
|:0042A5E2   , :0042A7AA   
|
:00429289 55                      push ebp
:0042928A 8BEC                    mov ebp, esp
:0042928C 51                      push ecx
:0042928D 894DFC                  mov dword ptr [ebp-04], ecx
:00429290 6A00                    push 00000000
:00429292 E8A0E20400              call 00477537
:00429297 83C404                  add esp, 00000004
:0042929A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042929D E8E4B5FFFF              call 00424886
:004292A2 6A00                    push 00000000
:004292A4 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004292A6 6A04                    push 00000004
:004292A8 E870CA0400              call 00475D1D
:004292AD 83C40C                  add esp, 0000000C
:004292B0 6800120000              push 00001200
:004292B5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004292B8 E8213B0000              call 0042CDDE
:004292BD 837D0802                cmp dword ptr [ebp+08], 00000002
:004292C1 7F19                    jg 004292DC
:004292C3 8B4508                  mov eax, dword ptr [ebp+08]
:004292C6 69C000090000            imul eax, 00000900
:004292CC 50                      push eax
:004292CD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004292D0 8B510C                  mov edx, dword ptr [ecx+0C]
:004292D3 52                      push edx
:004292D4 E860FFFFFF              call 00429239
:004292D9 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004292C1(C)
|
:004292DC 6A01                    push 00000001
:004292DE E854E20400              call 00477537
:004292E3 83C404                  add esp, 00000004
:004292E6 8BE5                    mov esp, ebp
:004292E8 5D                      pop ebp
:004292E9 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042AC6B   , :0042BD63   
|
:004292EC 55                      push ebp
:004292ED 8BEC                    mov ebp, esp
:004292EF 83EC08                  sub esp, 00000008
:004292F2 894DF8                  mov dword ptr [ebp-08], ecx
:004292F5 8B45F8                  mov eax, dword ptr [ebp-08]
:004292F8 50                      push eax
:004292F9 E891A5FFFF              call 0042388F
:004292FE 83C404                  add esp, 00000004
:00429301 8945FC                  mov dword ptr [ebp-04], eax
:00429304 6A00                    push 00000000
:00429306 E82CE20400              call 00477537
:0042930B 83C404                  add esp, 00000004
:0042930E E8746CFFFF              call 0041FF87

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00429313 6A09                    push 00000009
:00429315 E8F5C20400              call 0047560F
:0042931A 83C404                  add esp, 00000004
:0042931D 6A00                    push 00000000
:0042931F 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00429321 6A04                    push 00000004
:00429323 E8F5C90400              call 00475D1D
:00429328 83C40C                  add esp, 0000000C
:0042932B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042932E E86D4B0000              call 0042DEA0
:00429333 85C0                    test eax, eax
:00429335 740A                    je 00429341
:00429337 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042933A E83C3A0000              call 0042CD7B
:0042933F EB0D                    jmp 0042934E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429335(C)
|
:00429341 68001B0000              push 00001B00
:00429346 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429349 E8903A0000              call 0042CDDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042933F(U)
|
:0042934E 6A00                    push 00000000
:00429350 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429353 E8973B0000              call 0042CEEF
:00429358 50                      push eax
:00429359 E8B1FEFFFF              call 0042920F
:0042935E 83C408                  add esp, 00000008
:00429361 837D0C02                cmp dword ptr [ebp+0C], 00000002
:00429365 0F8FAC000000            jg 00429417
:0042936B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042936E 0FBE511F                movsx edx, byte ptr [ecx+1F]
:00429372 83FA0E                  cmp edx, 0000000E
:00429375 752C                    jne 004293A3
:00429377 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042937B 750E                    jne 0042938B
:0042937D 6A00                    push 00000000
:0042937F 8B4508                  mov eax, dword ptr [ebp+08]
:00429382 50                      push eax
:00429383 E8F477FFFF              call 00420B7C
:00429388 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042937B(C)
|
:0042938B 6A00                    push 00000000
:0042938D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429390 E85A3B0000              call 0042CEEF
:00429395 83C008                  add eax, 00000008
:00429398 50                      push eax
:00429399 E889000000              call 00429427
:0042939E 83C408                  add esp, 00000008
:004293A1 EB74                    jmp 00429417

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429375(C)
|
:004293A3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004293A6 8B4914                  mov ecx, dword ptr [ecx+14]
:004293A9 6BC950                  imul ecx, 00000050
:004293AC 81C1787F4900            add ecx, 00497F78
:004293B2 E8E99DFDFF              call 004031A0
:004293B7 25FF000000              and eax, 000000FF
:004293BC 83F80C                  cmp eax, 0000000C
:004293BF 741E                    je 004293DF
:004293C1 8B55F8                  mov edx, dword ptr [ebp-08]
:004293C4 8B4A14                  mov ecx, dword ptr [edx+14]
:004293C7 6BC950                  imul ecx, 00000050
:004293CA 81C1787F4900            add ecx, 00497F78
:004293D0 E8CB9DFDFF              call 004031A0
:004293D5 25FF000000              and eax, 000000FF
:004293DA 83F80D                  cmp eax, 0000000D
:004293DD 751D                    jne 004293FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004293BF(C)
|
:004293DF 6A2D                    push 0000002D
:004293E1 8B450C                  mov eax, dword ptr [ebp+0C]
:004293E4 50                      push eax
:004293E5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004293E8 51                      push ecx
:004293E9 E863000000              call 00429451
:004293EE 83C408                  add esp, 00000008
:004293F1 50                      push eax
:004293F2 E830000000              call 00429427
:004293F7 83C408                  add esp, 00000008
:004293FA EB1B                    jmp 00429417

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004293DD(C)
|
:004293FC 6A2B                    push 0000002B
:004293FE 8B550C                  mov edx, dword ptr [ebp+0C]
:00429401 52                      push edx
:00429402 8B45F8                  mov eax, dword ptr [ebp-08]
:00429405 50                      push eax
:00429406 E846000000              call 00429451
:0042940B 83C408                  add esp, 00000008
:0042940E 50                      push eax
:0042940F E813000000              call 00429427
:00429414 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429365(C), :004293A1(U), :004293FA(U)
|
:00429417 6A01                    push 00000001
:00429419 E819E10400              call 00477537
:0042941E 83C404                  add esp, 00000004
:00429421 8BE5                    mov esp, ebp
:00429423 5D                      pop ebp
:00429424 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00429399   , :004293F2   , :0042940F   
|
:00429427 55                      push ebp
:00429428 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042942A 6A04                    push 00000004
:0042942C 6A00                    push 00000000
:0042942E 6A00                    push 00000000
:00429430 B958474900              mov ecx, 00494758
:00429435 E856FB0400              call 00478F90
:0042943A 50                      push eax
:0042943B 6A30                    push 00000030
:0042943D 6A30                    push 00000030
:0042943F 8B450C                  mov eax, dword ptr [ebp+0C]
:00429442 50                      push eax
:00429443 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429446 51                      push ecx
:00429447 E8A8D60400              call 00476AF4
:0042944C 83C414                  add esp, 00000014
:0042944F 5D                      pop ebp
:00429450 C3                      ret



* Referenced by a CALL at Addresses:
|:004293E9   , :00429406   
|
:00429451 55                      push ebp
:00429452 8BEC                    mov ebp, esp
:00429454 817D0838464900          cmp dword ptr [ebp+08], 00494638
:0042945B 7526                    jne 00429483
:0042945D 8B450C                  mov eax, dword ptr [ebp+0C]
:00429460 6BC030                  imul eax, 00000030
:00429463 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00429464 B903000000              mov ecx, 00000003
:00429469 F7F9                    idiv ecx
:0042946B BA90000000              mov edx, 00000090
:00429470 2BD0                    sub edx, eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00429472 B802000000              mov eax, 00000002
:00429477 2B450C                  sub eax, dword ptr [ebp+0C]
:0042947A 6BC00A                  imul eax, 0000000A
:0042947D 2BD0                    sub edx, eax
:0042947F 8BC2                    mov eax, edx
:00429481 EB1D                    jmp 004294A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042945B(C)
|
:00429483 8B450C                  mov eax, dword ptr [ebp+0C]
:00429486 6BC030                  imul eax, 00000030
:00429489 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042948A B903000000              mov ecx, 00000003
:0042948F F7F9                    idiv ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00429491 BA02000000              mov edx, 00000002
:00429496 2B550C                  sub edx, dword ptr [ebp+0C]
:00429499 6BD20A                  imul edx, 0000000A
:0042949C 8D441060                lea eax, dword ptr [eax+edx+60]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429481(U)
|
:004294A0 5D                      pop ebp
:004294A1 C3                      ret



* Referenced by a CALL at Address:
|:0042B349   
|
:004294A2 55                      push ebp
:004294A3 8BEC                    mov ebp, esp
:004294A5 83EC0C                  sub esp, 0000000C
:004294A8 894DF8                  mov dword ptr [ebp-08], ecx
:004294AB 6A00                    push 00000000
:004294AD E885E00400              call 00477537
:004294B2 83C404                  add esp, 00000004
:004294B5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004294B8 E8C9B3FFFF              call 00424886

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:004294BD 6A09                    push 00000009
:004294BF E84BC10400              call 0047560F
:004294C4 83C404                  add esp, 00000004
:004294C7 6A00                    push 00000000
:004294C9 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004294CB 6A04                    push 00000004
:004294CD E84BC80400              call 00475D1D
:004294D2 83C40C                  add esp, 0000000C
:004294D5 8B45F8                  mov eax, dword ptr [ebp-08]
:004294D8 50                      push eax
:004294D9 E8B1A3FFFF              call 0042388F
:004294DE 83C404                  add esp, 00000004
:004294E1 8945FC                  mov dword ptr [ebp-04], eax
:004294E4 6A00                    push 00000000
:004294E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004294E9 E8013A0000              call 0042CEEF
:004294EE 50                      push eax
:004294EF E81BFDFFFF              call 0042920F
:004294F4 83C408                  add esp, 00000008
:004294F7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004294FA 83C102                  add ecx, 00000002
:004294FD 83F903                  cmp ecx, 00000003
:00429500 7D0B                    jge 0042950D
:00429502 8B5508                  mov edx, dword ptr [ebp+08]
:00429505 83C202                  add edx, 00000002
:00429508 8955F4                  mov dword ptr [ebp-0C], edx
:0042950B EB07                    jmp 00429514

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429500(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042950D C745F403000000          mov [ebp-0C], 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042950B(U)
|
:00429514 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429517 69C000090000            imul eax, 00000900
:0042951D 50                      push eax
:0042951E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429521 E821390000              call 0042CE47
:00429526 6A01                    push 00000001
:00429528 E80AE00400              call 00477537
:0042952D 83C404                  add esp, 00000004
:00429530 8BE5                    mov esp, ebp
:00429532 5D                      pop ebp
:00429533 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042C14C   , :0042C501   
|
:00429536 55                      push ebp
:00429537 8BEC                    mov ebp, esp
:00429539 83EC0C                  sub esp, 0000000C
:0042953C 894DF4                  mov dword ptr [ebp-0C], ecx
:0042953F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429542 50                      push eax
:00429543 E847A3FFFF              call 0042388F
:00429548 83C404                  add esp, 00000004
:0042954B 8945FC                  mov dword ptr [ebp-04], eax
:0042954E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429551 51                      push ecx
:00429552 E845010000              call 0042969C
:00429557 83C404                  add esp, 00000004
:0042955A 8945F8                  mov dword ptr [ebp-08], eax
:0042955D 6A00                    push 00000000
:0042955F E8D3DF0400              call 00477537
:00429564 83C404                  add esp, 00000004
:00429567 E81B6AFFFF              call 0041FF87

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0042956C 6A09                    push 00000009
:0042956E E89CC00400              call 0047560F
:00429573 83C404                  add esp, 00000004
:00429576 6A00                    push 00000000
:00429578 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042957A 6A04                    push 00000004
:0042957C E89CC70400              call 00475D1D
:00429581 83C40C                  add esp, 0000000C
:00429584 8B55F4                  mov edx, dword ptr [ebp-0C]
:00429587 0FBE421F                movsx eax, byte ptr [edx+1F]
:0042958B 83F828                  cmp eax, 00000028
:0042958E 7D0F                    jge 0042959F
:00429590 68001B0000              push 00001B00
:00429595 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429598 E8AA380000              call 0042CE47
:0042959D EB16                    jmp 004295B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042958E(C)
|
:0042959F 6800120000              push 00001200
:004295A4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004295A7 E844160300              call 0045ABF0
:004295AC 50                      push eax
:004295AD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004295B0 E85F380000              call 0042CE14

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042959D(U)
|
:004295B5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004295B8 0FBE511F                movsx edx, byte ptr [ecx+1F]
:004295BC 83FA4C                  cmp edx, 0000004C
:004295BF 750F                    jne 004295D0
:004295C1 6800120000              push 00001200
:004295C6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004295C9 E810380000              call 0042CDDE
:004295CE EB13                    jmp 004295E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004295BF(C)
|
:004295D0 6A00                    push 00000000
:004295D2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004295D5 E815390000              call 0042CEEF
:004295DA 50                      push eax
:004295DB E82FFCFFFF              call 0042920F
:004295E0 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004295CE(U)
|
:004295E3 837D0802                cmp dword ptr [ebp+08], 00000002
:004295E7 0F8F9F000000            jg 0042968C
:004295ED 8B45F4                  mov eax, dword ptr [ebp-0C]
:004295F0 0FBE481F                movsx ecx, byte ptr [eax+1F]
:004295F4 83F94C                  cmp ecx, 0000004C
:004295F7 751B                    jne 00429614
:004295F9 8B5508                  mov edx, dword ptr [ebp+08]
:004295FC 69D200090000            imul edx, 00000900
:00429602 52                      push edx
:00429603 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429606 8B480C                  mov ecx, dword ptr [eax+0C]
:00429609 51                      push ecx
:0042960A E82AFCFFFF              call 00429239
:0042960F 83C408                  add esp, 00000008
:00429612 EB78                    jmp 0042968C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004295F7(C)
|
:00429614 8B55F4                  mov edx, dword ptr [ebp-0C]
:00429617 0FBE421F                movsx eax, byte ptr [edx+1F]
:0042961B 83F841                  cmp eax, 00000041
:0042961E 7C29                    jl 00429649
:00429620 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429623 0FBE511F                movsx edx, byte ptr [ecx+1F]
:00429627 83FA4B                  cmp edx, 0000004B
:0042962A 7F1D                    jg 00429649
:0042962C 8B4508                  mov eax, dword ptr [ebp+08]
:0042962F 69C000090000            imul eax, 00000900
:00429635 50                      push eax
:00429636 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429639 E8B2150300              call 0045ABF0
:0042963E 50                      push eax
:0042963F E8F5FBFFFF              call 00429239
:00429644 83C408                  add esp, 00000008
:00429647 EB43                    jmp 0042968C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042961E(C), :0042962A(C)
|
:00429649 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042964C 0FBE511F                movsx edx, byte ptr [ecx+1F]
:00429650 83FA28                  cmp edx, 00000028
:00429653 7C21                    jl 00429676
:00429655 8B4508                  mov eax, dword ptr [ebp+08]
:00429658 69C000090000            imul eax, 00000900
:0042965E 50                      push eax
:0042965F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429662 51                      push ecx
:00429663 E85E000000              call 004296C6
:00429668 83C404                  add esp, 00000004
:0042966B 50                      push eax
:0042966C E8C8FBFFFF              call 00429239
:00429671 83C408                  add esp, 00000008
:00429674 EB16                    jmp 0042968C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429653(C)
|
:00429676 8B5508                  mov edx, dword ptr [ebp+08]
:00429679 69D200090000            imul edx, 00000900
:0042967F 52                      push edx
:00429680 8B45F8                  mov eax, dword ptr [ebp-08]
:00429683 50                      push eax
:00429684 E8B0FBFFFF              call 00429239
:00429689 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004295E7(C), :00429612(U), :00429647(U), :00429674(U)
|
:0042968C 6A01                    push 00000001
:0042968E E8A4DE0400              call 00477537
:00429693 83C404                  add esp, 00000004
:00429696 8BE5                    mov esp, ebp
:00429698 5D                      pop ebp
:00429699 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00429552   
|
:0042969C 55                      push ebp
:0042969D 8BEC                    mov ebp, esp
:0042969F 817D0838464900          cmp dword ptr [ebp+08], 00494638
:004296A6 750F                    jne 004296B7
:004296A8 B9D0454900              mov ecx, 004945D0
:004296AD E83E150300              call 0045ABF0
:004296B2 83E808                  sub eax, 00000008
:004296B5 EB0D                    jmp 004296C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004296A6(C)
|
:004296B7 B938464900              mov ecx, 00494638
:004296BC E82F150300              call 0045ABF0
:004296C1 83C008                  add eax, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004296B5(U)
|
:004296C4 5D                      pop ebp
:004296C5 C3                      ret



* Referenced by a CALL at Addresses:
|:00429663   , :00429745   
|
:004296C6 55                      push ebp
:004296C7 8BEC                    mov ebp, esp
:004296C9 817D0838464900          cmp dword ptr [ebp+08], 00494638
:004296D0 750F                    jne 004296E1
:004296D2 B938464900              mov ecx, 00494638
:004296D7 E814150300              call 0045ABF0
:004296DC 83C008                  add eax, 00000008
:004296DF EB0A                    jmp 004296EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004296D0(C)
|
:004296E1 B9D0454900              mov ecx, 004945D0
:004296E6 E805150300              call 0045ABF0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004296DF(U)
|
:004296EB 5D                      pop ebp
:004296EC C3                      ret



* Referenced by a CALL at Addresses:
|:0042C75D   , :0042C97C   
|
:004296ED 55                      push ebp
:004296EE 8BEC                    mov ebp, esp
:004296F0 51                      push ecx
:004296F1 894DFC                  mov dword ptr [ebp-04], ecx
:004296F4 6A00                    push 00000000
:004296F6 E83CDE0400              call 00477537
:004296FB 83C404                  add esp, 00000004
:004296FE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429701 E880B1FFFF              call 00424886

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00429706 6A09                    push 00000009
:00429708 E802BF0400              call 0047560F
:0042970D 83C404                  add esp, 00000004
:00429710 6A00                    push 00000000
:00429712 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00429714 6A04                    push 00000004
:00429716 E802C60400              call 00475D1D
:0042971B 83C40C                  add esp, 0000000C
:0042971E 6A00                    push 00000000
:00429720 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429723 E8C7370000              call 0042CEEF
:00429728 50                      push eax
:00429729 E8E1FAFFFF              call 0042920F
:0042972E 83C408                  add esp, 00000008
:00429731 837D0802                cmp dword ptr [ebp+08], 00000002
:00429735 7F1F                    jg 00429756
:00429737 8B4508                  mov eax, dword ptr [ebp+08]
:0042973A 69C000090000            imul eax, 00000900
:00429740 50                      push eax
:00429741 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429744 51                      push ecx
:00429745 E87CFFFFFF              call 004296C6
:0042974A 83C404                  add esp, 00000004
:0042974D 50                      push eax
:0042974E E8E6FAFFFF              call 00429239
:00429753 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429735(C)
|
:00429756 6A01                    push 00000001
:00429758 E8DADD0400              call 00477537
:0042975D 83C404                  add esp, 00000004
:00429760 8BE5                    mov esp, ebp
:00429762 5D                      pop ebp
:00429763 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042C9BE   
|
:00429766 55                      push ebp
:00429767 8BEC                    mov ebp, esp
:00429769 83EC14                  sub esp, 00000014
:0042976C 894DEC                  mov dword ptr [ebp-14], ecx
:0042976F 8B45EC                  mov eax, dword ptr [ebp-14]
:00429772 8945F8                  mov dword ptr [ebp-08], eax
:00429775 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00429778 51                      push ecx
:00429779 E811A1FFFF              call 0042388F
:0042977E 83C404                  add esp, 00000004
:00429781 8945F4                  mov dword ptr [ebp-0C], eax
:00429784 8B55F8                  mov edx, dword ptr [ebp-08]
:00429787 52                      push edx
:00429788 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042978B 50                      push eax
:0042978C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042978F 51                      push ecx
:00429790 E822000000              call 004297B7
:00429795 83C40C                  add esp, 0000000C
:00429798 8945F0                  mov dword ptr [ebp-10], eax
:0042979B 8B55F0                  mov edx, dword ptr [ebp-10]
:0042979E 52                      push edx
:0042979F 8B4508                  mov eax, dword ptr [ebp+08]
:004297A2 50                      push eax
:004297A3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004297A6 E8B10B0000              call 0042A35C
:004297AB 8945FC                  mov dword ptr [ebp-04], eax
:004297AE 8B45FC                  mov eax, dword ptr [ebp-04]
:004297B1 8BE5                    mov esp, ebp
:004297B3 5D                      pop ebp
:004297B4 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00429790   
|
:004297B7 55                      push ebp
:004297B8 8BEC                    mov ebp, esp
:004297BA 83EC4C                  sub esp, 0000004C
:004297BD 56                      push esi
:004297BE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004297C1 E83A9BFDFF              call 00403300
:004297C6 8945B8                  mov dword ptr [ebp-48], eax
:004297C9 8B4D10                  mov ecx, dword ptr [ebp+10]
:004297CC E82F9BFDFF              call 00403300
:004297D1 8945BC                  mov dword ptr [ebp-44], eax
:004297D4 8B4D10                  mov ecx, dword ptr [ebp+10]
:004297D7 E842340000              call 0042CC1E
:004297DC 8945B4                  mov dword ptr [ebp-4C], eax
:004297DF 6A40                    push 00000040
:004297E1 6A00                    push 00000000
:004297E3 8D45C0                  lea eax, dword ptr [ebp-40]
:004297E6 50                      push eax
:004297E7 E8E4620400              call 0046FAD0
:004297EC 83C40C                  add esp, 0000000C
:004297EF 68FF000000              push 000000FF
:004297F4 E8B7EB0400              call 004783B0
:004297F9 83C404                  add esp, 00000004
:004297FC 8BF0                    mov esi, eax
:004297FE 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00429801 6BC950                  imul ecx, 00000050
:00429804 81C1787F4900            add ecx, 00497F78
:0042980A E8A885FDFF              call 00401DB7
:0042980F 3BF0                    cmp esi, eax
:00429811 734B                    jnb 0042985E
:00429813 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00429816 034DB4                  add ecx, dword ptr [ebp-4C]
:00429819 894DB4                  mov dword ptr [ebp-4C], ecx
:0042981C 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0042981F 6BC950                  imul ecx, 00000050
:00429822 81C1787F4900            add ecx, 00497F78
:00429828 E8D798FDFF              call 00403104
:0042982D 50                      push eax

* Possible StringData Ref from Data Obj ->"%s⤩H"
                                  |
:0042982E 6800D24700              push 0047D200
:00429833 8D55C0                  lea edx, dword ptr [ebp-40]
:00429836 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00429837 FF1504D74B00            Call dword ptr [004BD704]
:0042983D 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00429840 6A08                    push 00000008
:00429842 8D45C0                  lea eax, dword ptr [ebp-40]
:00429845 50                      push eax
:00429846 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429849 51                      push ecx
:0042984A E81DA2FFFF              call 00423A6C
:0042984F 83C40C                  add esp, 0000000C
:00429852 6A4D                    push 0000004D
:00429854 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429857 E864460000              call 0042DEC0
:0042985C EB72                    jmp 004298D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429811(C)
|
:0042985E 68FF000000              push 000000FF
:00429863 E848EB0400              call 004783B0
:00429868 83C404                  add esp, 00000004
:0042986B 8BF0                    mov esi, eax
:0042986D 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00429870 6BC950                  imul ecx, 00000050
:00429873 81C1787F4900            add ecx, 00497F78
:00429879 E83C86FDFF              call 00401EBA
:0042987E 25FF000000              and eax, 000000FF
:00429883 3BF0                    cmp esi, eax
:00429885 7349                    jnb 004298D0
:00429887 8B55B4                  mov edx, dword ptr [ebp-4C]
:0042988A 0355B4                  add edx, dword ptr [ebp-4C]
:0042988D 8955B4                  mov dword ptr [ebp-4C], edx
:00429890 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00429893 6BC950                  imul ecx, 00000050
:00429896 81C1787F4900            add ecx, 00497F78
:0042989C E86398FDFF              call 00403104
:004298A1 50                      push eax

* Possible StringData Ref from Data Obj ->"%soXO@"
                                  |
:004298A2 6814D24700              push 0047D214
:004298A7 8D45C0                  lea eax, dword ptr [ebp-40]
:004298AA 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004298AB FF1504D74B00            Call dword ptr [004BD704]
:004298B1 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004298B4 6A08                    push 00000008
:004298B6 8D4DC0                  lea ecx, dword ptr [ebp-40]
:004298B9 51                      push ecx
:004298BA 8B5508                  mov edx, dword ptr [ebp+08]
:004298BD 52                      push edx
:004298BE E8A9A1FFFF              call 00423A6C
:004298C3 83C40C                  add esp, 0000000C
:004298C6 6A4E                    push 0000004E
:004298C8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004298CB E8F0450000              call 0042DEC0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042985C(U), :00429885(C)
|
:004298D0 8B45B4                  mov eax, dword ptr [ebp-4C]
:004298D3 5E                      pop esi
:004298D4 8BE5                    mov esp, ebp
:004298D6 5D                      pop ebp
:004298D7 C3                      ret



* Referenced by a CALL at Address:
|:0042C9CF   
|
:004298D8 55                      push ebp
:004298D9 8BEC                    mov ebp, esp
:004298DB 83EC14                  sub esp, 00000014
:004298DE 894DEC                  mov dword ptr [ebp-14], ecx
:004298E1 8B45EC                  mov eax, dword ptr [ebp-14]
:004298E4 8945F8                  mov dword ptr [ebp-08], eax
:004298E7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004298EA 51                      push ecx
:004298EB E89F9FFFFF              call 0042388F
:004298F0 83C404                  add esp, 00000004
:004298F3 8945F4                  mov dword ptr [ebp-0C], eax
:004298F6 8B55F8                  mov edx, dword ptr [ebp-08]
:004298F9 52                      push edx
:004298FA 8B45F4                  mov eax, dword ptr [ebp-0C]
:004298FD 50                      push eax
:004298FE E847000000              call 0042994A
:00429903 83C408                  add esp, 00000008
:00429906 8945F0                  mov dword ptr [ebp-10], eax
:00429909 837DF000                cmp dword ptr [ebp-10], 00000000
:0042990D 7E15                    jle 00429924
:0042990F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00429912 51                      push ecx
:00429913 8B5508                  mov edx, dword ptr [ebp+08]
:00429916 52                      push edx
:00429917 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042991A E83D0A0000              call 0042A35C
:0042991F 8945FC                  mov dword ptr [ebp-04], eax
:00429922 EB1D                    jmp 00429941

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042990D(C)
|
:00429924 837DF000                cmp dword ptr [ebp-10], 00000000
:00429928 7F17                    jg 00429941
:0042992A 8B45F0                  mov eax, dword ptr [ebp-10]
:0042992D 50                      push eax
:0042992E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429931 51                      push ecx
:00429932 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429935 E8220A0000              call 0042A35C
:0042993A C745FCFFFF0000          mov [ebp-04], 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429922(U), :00429928(C)
|
:00429941 8B45FC                  mov eax, dword ptr [ebp-04]
:00429944 8BE5                    mov esp, ebp
:00429946 5D                      pop ebp
:00429947 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004298FE   
|
:0042994A 55                      push ebp
:0042994B 8BEC                    mov ebp, esp
:0042994D 83EC5C                  sub esp, 0000005C
:00429950 56                      push esi
:00429951 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429954 E8A799FDFF              call 00403300
:00429959 8945F8                  mov dword ptr [ebp-08], eax
:0042995C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042995F E89C99FDFF              call 00403300
:00429964 8945F0                  mov dword ptr [ebp-10], eax
:00429967 C745FC00000000          mov [ebp-04], 00000000
:0042996E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429971 E8A8320000              call 0042CC1E
:00429976 8945F4                  mov dword ptr [ebp-0C], eax
:00429979 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042997C 6BC950                  imul ecx, 00000050
:0042997F 81C1787F4900            add ecx, 00497F78
:00429985 E82D84FDFF              call 00401DB7
:0042998A 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0042998C 68C8000000              push 000000C8
:00429991 E81AEA0400              call 004783B0
:00429996 83C404                  add esp, 00000004
:00429999 3BF0                    cmp esi, eax
:0042999B 7614                    jbe 004299B1

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042999D 6A06                    push 00000006
:0042999F E80CEA0400              call 004783B0
:004299A4 83C404                  add esp, 00000004
:004299A7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004299AA 8D540105                lea edx, dword ptr [ecx+eax+05]
:004299AE 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042999B(C)
|
:004299B1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004299B4 E877490000              call 0042E330
:004299B9 0FBEC0                  movsx eax, al
:004299BC 8945EC                  mov dword ptr [ebp-14], eax
:004299BF 837DEC39                cmp dword ptr [ebp-14], 00000039
:004299C3 0F879C050000            ja 00429F65
:004299C9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004299CC FF248D6C9F4200          jmp dword ptr [4*ecx+00429F6C]
:004299D3 8B45F4                  mov eax, dword ptr [ebp-0C]
:004299D6 C1E002                  shl eax, 02
:004299D9 E989050000              jmp 00429F67
:004299DE 8B45F4                  mov eax, dword ptr [ebp-0C]
:004299E1 6BC003                  imul eax, 00000003
:004299E4 E97E050000              jmp 00429F67
:004299E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004299EC E8EFCF0000              call 004369E0
:004299F1 8945E4                  mov dword ptr [ebp-1C], eax
:004299F4 C745E800000000          mov [ebp-18], 00000000
:004299FB DF6DE4                  fild qword ptr [ebp-1C]
:004299FE DD5DDC                  fstp qword ptr [ebp-24]
:00429A01 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429A04 6BC950                  imul ecx, 00000050
:00429A07 81C1787F4900            add ecx, 00497F78
:00429A0D E8D883FDFF              call 00401DEA
:00429A12 8945D4                  mov dword ptr [ebp-2C], eax
:00429A15 C745D800000000          mov [ebp-28], 00000000
:00429A1C DF6DD4                  fild qword ptr [ebp-2C]
:00429A1F DC0D78A04700            fmul qword ptr [0047A078]
:00429A25 DC6DDC                  fsubr qword ptr [ebp-24]
:00429A28 DC1D80A04700            fcomp qword ptr [0047A080]
:00429A2E DFE0                    fstsw ax
:00429A30 F6C401                  test ah, 01
:00429A33 7410                    je 00429A45
:00429A35 C745CC00000000          mov [ebp-34], 00000000
:00429A3C C745D000000000          mov [ebp-30], 00000000
:00429A43 EB42                    jmp 00429A87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429A33(C)
|
:00429A45 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429A48 E893CF0000              call 004369E0
:00429A4D 8945C4                  mov dword ptr [ebp-3C], eax
:00429A50 C745C800000000          mov [ebp-38], 00000000
:00429A57 DF6DC4                  fild qword ptr [ebp-3C]
:00429A5A DD5DBC                  fstp qword ptr [ebp-44]
:00429A5D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429A60 6BC950                  imul ecx, 00000050
:00429A63 81C1787F4900            add ecx, 00497F78
:00429A69 E87C83FDFF              call 00401DEA
:00429A6E 8945B4                  mov dword ptr [ebp-4C], eax
:00429A71 C745B800000000          mov [ebp-48], 00000000
:00429A78 DF6DB4                  fild qword ptr [ebp-4C]
:00429A7B DC0D78A04700            fmul qword ptr [0047A078]
:00429A81 DC6DBC                  fsubr qword ptr [ebp-44]
:00429A84 DD5DCC                  fstp qword ptr [ebp-34]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429A43(U)
|
:00429A87 DD45CC                  fld qword ptr [ebp-34]
:00429A8A E811610400              call 0046FBA0
:00429A8F 50                      push eax
:00429A90 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429A93 E849ADFFFF              call 004247E1
:00429A98 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429A9B C1E002                  shl eax, 02
:00429A9E E9C4040000              jmp 00429F67
:00429AA3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429AA6 E8D5430000              call 0042DE80
:00429AAB 83F80A                  cmp eax, 0000000A
:00429AAE 7616                    jbe 00429AC6
:00429AB0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429AB3 E8C8430000              call 0042DE80
:00429AB8 83E80A                  sub eax, 0000000A
:00429ABB 50                      push eax
:00429ABC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429ABF E86EADFFFF              call 00424832
:00429AC4 EB0A                    jmp 00429AD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429AAE(C)
|
:00429AC6 6A01                    push 00000001
:00429AC8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429ACB E862ADFFFF              call 00424832

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429AC4(U)
|
:00429AD0 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429AD3 E98F040000              jmp 00429F67
:00429AD8 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429ADB E987040000              jmp 00429F67
:00429AE0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429AE3 E8B8480000              call 0042E3A0
:00429AE8 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429AEB E977040000              jmp 00429F67
:00429AF0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429AF3 E878480000              call 0042E370
:00429AF8 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429AFB E967040000              jmp 00429F67
:00429B00 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429B03 E95F040000              jmp 00429F67
:00429B08 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429B0B E957040000              jmp 00429F67
:00429B10 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429B13 D1E0                    shl eax, 1
:00429B15 E94D040000              jmp 00429F67
:00429B1A 8B55F0                  mov edx, dword ptr [ebp-10]
:00429B1D 52                      push edx
:00429B1E 8B45F8                  mov eax, dword ptr [ebp-08]
:00429B21 50                      push eax
:00429B22 E82D050000              call 0042A054
:00429B27 83C408                  add esp, 00000008
:00429B2A E938040000              jmp 00429F67
:00429B2F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429B32 E930040000              jmp 00429F67
:00429B37 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429B3A E928040000              jmp 00429F67
:00429B3F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00429B42 51                      push ecx
:00429B43 8B55F8                  mov edx, dword ptr [ebp-08]
:00429B46 52                      push edx
:00429B47 E808050000              call 0042A054
:00429B4C 83C408                  add esp, 00000008
:00429B4F E913040000              jmp 00429F67
:00429B54 8B45F0                  mov eax, dword ptr [ebp-10]
:00429B57 50                      push eax
:00429B58 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429B5B 51                      push ecx
:00429B5C E8F3040000              call 0042A054
:00429B61 83C408                  add esp, 00000008
:00429B64 E9FE030000              jmp 00429F67
:00429B69 8B55F0                  mov edx, dword ptr [ebp-10]
:00429B6C 52                      push edx
:00429B6D 8B45F8                  mov eax, dword ptr [ebp-08]
:00429B70 50                      push eax
:00429B71 E88C050000              call 0042A102
:00429B76 83C408                  add esp, 00000008
:00429B79 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429B7C 03C1                    add eax, ecx
:00429B7E E9E4030000              jmp 00429F67
:00429B83 8B55F0                  mov edx, dword ptr [ebp-10]
:00429B86 52                      push edx
:00429B87 8B45F8                  mov eax, dword ptr [ebp-08]
:00429B8A 50                      push eax
:00429B8B E872050000              call 0042A102
:00429B90 83C408                  add esp, 00000008
:00429B93 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429B96 03C1                    add eax, ecx
:00429B98 E9CA030000              jmp 00429F67
:00429B9D 8B55F0                  mov edx, dword ptr [ebp-10]
:00429BA0 52                      push edx
:00429BA1 8B45F8                  mov eax, dword ptr [ebp-08]
:00429BA4 50                      push eax
:00429BA5 E858050000              call 0042A102
:00429BAA 83C408                  add esp, 00000008
:00429BAD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429BB0 8D0448                  lea eax, dword ptr [eax+2*ecx]
:00429BB3 E9AF030000              jmp 00429F67
:00429BB8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429BBB E8B0470000              call 0042E370
:00429BC0 8B55F0                  mov edx, dword ptr [ebp-10]
:00429BC3 52                      push edx
:00429BC4 8B45F8                  mov eax, dword ptr [ebp-08]
:00429BC7 50                      push eax
:00429BC8 E835050000              call 0042A102
:00429BCD 83C408                  add esp, 00000008
:00429BD0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429BD3 03C1                    add eax, ecx
:00429BD5 E98D030000              jmp 00429F67
:00429BDA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429BDD 6BC950                  imul ecx, 00000050
:00429BE0 81C1787F4900            add ecx, 00497F78
:00429BE6 E89981FDFF              call 00401D84
:00429BEB C1E803                  shr eax, 03
:00429BEE 83C014                  add eax, 00000014
:00429BF1 83F833                  cmp eax, 00000033
:00429BF4 7609                    jbe 00429BFF
:00429BF6 C745B033000000          mov [ebp-50], 00000033
:00429BFD EB1A                    jmp 00429C19

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429BF4(C)
|
:00429BFF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429C02 6BC950                  imul ecx, 00000050
:00429C05 81C1787F4900            add ecx, 00497F78
:00429C0B E87481FDFF              call 00401D84
:00429C10 C1E803                  shr eax, 03
:00429C13 83C014                  add eax, 00000014
:00429C16 8945B0                  mov dword ptr [ebp-50], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429BFD(U)
|
:00429C19 8B55B0                  mov edx, dword ptr [ebp-50]
:00429C1C 8955FC                  mov dword ptr [ebp-04], edx
:00429C1F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429C22 6BC950                  imul ecx, 00000050
:00429C25 81C1787F4900            add ecx, 00497F78
:00429C2B E88781FDFF              call 00401DB7
:00429C30 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00429C32 68C8000000              push 000000C8
:00429C37 E874E70400              call 004783B0
:00429C3C 83C404                  add esp, 00000004
:00429C3F 3BF0                    cmp esi, eax
:00429C41 7614                    jbe 00429C57

* Possible Reference to String Resource ID=00006: ""
                                  |
:00429C43 6A06                    push 00000006
:00429C45 E866E70400              call 004783B0
:00429C4A 83C404                  add esp, 00000004
:00429C4D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00429C50 8D540105                lea edx, dword ptr [ecx+eax+05]
:00429C54 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429C41(C)
|
:00429C57 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429C5A E821420000              call 0042DE80
:00429C5F 2B45FC                  sub eax, dword ptr [ebp-04]
:00429C62 83F801                  cmp eax, 00000001
:00429C65 7610                    jbe 00429C77
:00429C67 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429C6A E811420000              call 0042DE80
:00429C6F 2B45FC                  sub eax, dword ptr [ebp-04]
:00429C72 8945AC                  mov dword ptr [ebp-54], eax
:00429C75 EB07                    jmp 00429C7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429C65(C)
|
:00429C77 C745AC01000000          mov [ebp-54], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429C75(U)
|
:00429C7E 8B45AC                  mov eax, dword ptr [ebp-54]
:00429C81 50                      push eax
:00429C82 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429C85 E8A8ABFFFF              call 00424832
:00429C8A 33C0                    xor eax, eax
:00429C8C E9D6020000              jmp 00429F67
:00429C91 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429C94 E9CE020000              jmp 00429F67
:00429C99 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429C9C E9C6020000              jmp 00429F67
:00429CA1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429CA4 E867460000              call 0042E310
:00429CA9 25FF000000              and eax, 000000FF
:00429CAE 3D85000000              cmp eax, 00000085
:00429CB3 7508                    jne 00429CBD
:00429CB5 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429CB8 E9AA020000              jmp 00429F67

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00429CB3(C)
|
:00429CBD 33C0                    xor eax, eax
:00429CBF E9A3020000              jmp 00429F67
:00429CC4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429CC7 E844450000              call 0042E210
:00429CCC 0FBEC8                  movsx ecx, al
:00429CCF 83C101                  add ecx, 00000001
:00429CD2 51                      push ecx
:00429CD3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429CD6 E8E5430000              call 0042E0C0
:00429CDB 33C0                    xor eax, eax
:00429CDD E985020000              jmp 00429F67
:00429CE2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429CE5 E826450000              call 0042E210
:00429CEA 0FBED0                  movsx edx, al
:00429CED 83C201                  add edx, 00000001
:00429CF0 52                      push edx
:00429CF1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429CF4 E8C7430000              call 0042E0C0
:00429CF9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429CFC E84F450000              call 0042E250
:00429D01 0FBEC0                  movsx eax, al
:00429D04 83C001                  add eax, 00000001
:00429D07 50                      push eax
:00429D08 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429D0B E810440000              call 0042E120
:00429D10 33C0                    xor eax, eax
:00429D12 E950020000              jmp 00429F67
:00429D17 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429D1A E811450000              call 0042E230
:00429D1F 0FBEC8                  movsx ecx, al
:00429D22 83C101                  add ecx, 00000001
:00429D25 51                      push ecx
:00429D26 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429D29 E8C2430000              call 0042E0F0
:00429D2E 33C0                    xor eax, eax
:00429D30 E932020000              jmp 00429F67
:00429D35 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429D38 E8D3440000              call 0042E210
:00429D3D 0FBED0                  movsx edx, al
:00429D40 83C201                  add edx, 00000001
:00429D43 52                      push edx
:00429D44 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429D47 E874430000              call 0042E0C0
:00429D4C 33C0                    xor eax, eax
:00429D4E E914020000              jmp 00429F67
:00429D53 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429D56 E815460000              call 0042E370
:00429D5B 33C0                    xor eax, eax
:00429D5D E905020000              jmp 00429F67
:00429D62 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429D65 E856460000              call 0042E3C0
:00429D6A 33C0                    xor eax, eax
:00429D6C E9F6010000              jmp 00429F67
:00429D71 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429D74 E8D7450000              call 0042E350
:00429D79 33C0                    xor eax, eax
:00429D7B E9E7010000              jmp 00429F67
:00429D80 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429D83 E8F8400000              call 0042DE80
:00429D88 8945A4                  mov dword ptr [ebp-5C], eax
:00429D8B C745A800000000          mov [ebp-58], 00000000
:00429D92 DF6DA4                  fild qword ptr [ebp-5C]
:00429D95 DC0D88A04700            fmul qword ptr [0047A088]
:00429D9B E8005E0400              call 0046FBA0
:00429DA0 8945FC                  mov dword ptr [ebp-04], eax
:00429DA3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429DA6 E8D5400000              call 0042DE80
:00429DAB 2B45FC                  sub eax, dword ptr [ebp-04]
:00429DAE 50                      push eax
:00429DAF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429DB2 E87BAAFFFF              call 00424832
:00429DB7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429DBA E8C1400000              call 0042DE80
:00429DBF 0345FC                  add eax, dword ptr [ebp-04]
:00429DC2 50                      push eax
:00429DC3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429DC6 E867AAFFFF              call 00424832
:00429DCB 33C0                    xor eax, eax
:00429DCD E995010000              jmp 00429F67
:00429DD2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429DD5 6BC950                  imul ecx, 00000050
:00429DD8 81C1787F4900            add ecx, 00497F78
:00429DDE E80780FDFF              call 00401DEA
:00429DE3 6BC0FF                  imul eax, FFFFFFFF
:00429DE6 E97C010000              jmp 00429F67
:00429DEB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429DEE 6BC950                  imul ecx, 00000050
:00429DF1 81C1787F4900            add ecx, 00497F78
:00429DF7 E8887FFDFF              call 00401D84
:00429DFC C1E803                  shr eax, 03
:00429DFF 83C028                  add eax, 00000028
:00429E02 8945F4                  mov dword ptr [ebp-0C], eax
:00429E05 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429E08 E8E3430000              call 0042E1F0
:00429E0D 85C0                    test eax, eax
:00429E0F 7538                    jne 00429E49
:00429E11 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429E14 6BC950                  imul ecx, 00000050
:00429E17 81C1787F4900            add ecx, 00497F78
:00429E1D E8957FFDFF              call 00401DB7
:00429E22 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00429E24 68C8000000              push 000000C8
:00429E29 E882E50400              call 004783B0
:00429E2E 83C404                  add esp, 00000004
:00429E31 3BF0                    cmp esi, eax
:00429E33 7614                    jbe 00429E49

* Possible Reference to String Resource ID=00006: ""
                                  |
:00429E35 6A06                    push 00000006
:00429E37 E874E50400              call 004783B0
:00429E3C 83C404                  add esp, 00000004
:00429E3F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429E42 8D540105                lea edx, dword ptr [ecx+eax+05]
:00429E46 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429E0F(C), :00429E33(C)
|
:00429E49 8B45F4                  mov eax, dword ptr [ebp-0C]
:00429E4C 6BC0FF                  imul eax, FFFFFFFF
:00429E4F E913010000              jmp 00429F67
:00429E54 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429E57 E8C4450000              call 0042E420
:00429E5C 33C0                    xor eax, eax
:00429E5E E904010000              jmp 00429F67
:00429E63 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429E66 E895450000              call 0042E400
:00429E6B 33C0                    xor eax, eax
:00429E6D E9F5000000              jmp 00429F67
:00429E72 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429E75 E866450000              call 0042E3E0
:00429E7A 33C0                    xor eax, eax
:00429E7C E9E6000000              jmp 00429F67
:00429E81 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429E84 E8D7450000              call 0042E460
:00429E89 33C0                    xor eax, eax
:00429E8B E9D7000000              jmp 00429F67
:00429E90 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429E93 E8A8450000              call 0042E440
:00429E98 33C0                    xor eax, eax
:00429E9A E9C8000000              jmp 00429F67
:00429E9F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429EA2 E869430000              call 0042E210
:00429EA7 0FBEC0                  movsx eax, al
:00429EAA 83E801                  sub eax, 00000001
:00429EAD 50                      push eax
:00429EAE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429EB1 E80A420000              call 0042E0C0
:00429EB6 33C0                    xor eax, eax
:00429EB8 E9AA000000              jmp 00429F67
:00429EBD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429EC0 6BC950                  imul ecx, 00000050
:00429EC3 81C1787F4900            add ecx, 00497F78
:00429EC9 E8B67EFDFF              call 00401D84
:00429ECE 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00429ED0 B90A000000              mov ecx, 0000000A
:00429ED5 F7F1                    div ecx
:00429ED7 83C014                  add eax, 00000014
:00429EDA 8945FC                  mov dword ptr [ebp-04], eax
:00429EDD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429EE0 E80B430000              call 0042E1F0
:00429EE5 85C0                    test eax, eax
:00429EE7 7538                    jne 00429F21
:00429EE9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00429EEC 6BC950                  imul ecx, 00000050
:00429EEF 81C1787F4900            add ecx, 00497F78
:00429EF5 E8BD7EFDFF              call 00401DB7
:00429EFA 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00429EFC 68C8000000              push 000000C8
:00429F01 E8AAE40400              call 004783B0
:00429F06 83C404                  add esp, 00000004
:00429F09 3BF0                    cmp esi, eax
:00429F0B 7614                    jbe 00429F21

* Possible Reference to String Resource ID=00006: ""
                                  |
:00429F0D 6A06                    push 00000006
:00429F0F E89CE40400              call 004783B0
:00429F14 83C404                  add esp, 00000004
:00429F17 8B55FC                  mov edx, dword ptr [ebp-04]
:00429F1A 8D440205                lea eax, dword ptr [edx+eax+05]
:00429F1E 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00429EE7(C), :00429F0B(C)
|
:00429F21 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429F24 E8573F0000              call 0042DE80
:00429F29 0345FC                  add eax, dword ptr [ebp-04]
:00429F2C 50                      push eax
:00429F2D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429F30 E8FDA8FFFF              call 00424832
:00429F35 33C0                    xor eax, eax
:00429F37 EB2E                    jmp 00429F67
:00429F39 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429F3C E89FCA0000              call 004369E0
:00429F41 8945F4                  mov dword ptr [ebp-0C], eax
:00429F44 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429F47 E894CA0000              call 004369E0
:00429F4C 50                      push eax
:00429F4D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00429F50 E88CA8FFFF              call 004247E1
:00429F55 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00429F58 51                      push ecx
:00429F59 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00429F5C E880A8FFFF              call 004247E1
:00429F61 33C0                    xor eax, eax
:00429F63 EB02                    jmp 00429F67

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004299C3(C)
|
:00429F65 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004299D9(U), :004299E4(U), :00429A9E(U), :00429AD3(U), :00429ADB(U)
|:00429AEB(U), :00429AFB(U), :00429B03(U), :00429B0B(U), :00429B15(U)
|:00429B2A(U), :00429B32(U), :00429B3A(U), :00429B4F(U), :00429B64(U)
|:00429B7E(U), :00429B98(U), :00429BB3(U), :00429BD5(U), :00429C8C(U)
|:00429C94(U), :00429C9C(U), :00429CB8(U), :00429CBF(U), :00429CDD(U)
|:00429D12(U), :00429D30(U), :00429D4E(U), :00429D5D(U), :00429D6C(U)
|:00429D7B(U), :00429DCD(U), :00429DE6(U), :00429E4F(U), :00429E5E(U)
|:00429E6D(U), :00429E7C(U), :00429E8B(U), :00429E9A(U), :00429EB8(U)
|:00429F37(U), :00429F63(U)
|
:00429F67 5E                      pop esi
:00429F68 8BE5                    mov esp, ebp
:00429F6A 5D                      pop ebp
:00429F6B C3                      ret



:00429F6C D3994200                DWORD 004299D3
:00429F70 DE994200                DWORD 004299DE
:00429F74 659F4200                DWORD 00429F65
:00429F78 659F4200                DWORD 00429F65
:00429F7C E9994200                DWORD 004299E9
:00429F80 659F4200                DWORD 00429F65
:00429F84 A39A4200                DWORD 00429AA3
:00429F88 D89A4200                DWORD 00429AD8
:00429F8C E09A4200                DWORD 00429AE0
:00429F90 F09A4200                DWORD 00429AF0
:00429F94 A19C4200                DWORD 00429CA1
:00429F98 009B4200                DWORD 00429B00
:00429F9C 089B4200                DWORD 00429B08
:00429FA0 109B4200                DWORD 00429B10
:00429FA4 1A9B4200                DWORD 00429B1A
:00429FA8 2F9B4200                DWORD 00429B2F
:00429FAC 379B4200                DWORD 00429B37
:00429FB0 659F4200                DWORD 00429F65
:00429FB4 3F9B4200                DWORD 00429B3F
:00429FB8 549B4200                DWORD 00429B54
:00429FBC 699B4200                DWORD 00429B69
:00429FC0 839B4200                DWORD 00429B83
:00429FC4 9D9B4200                DWORD 00429B9D
:00429FC8 B89B4200                DWORD 00429BB8
:00429FCC B89B4200                DWORD 00429BB8
:00429FD0 DA9B4200                DWORD 00429BDA
:00429FD4 919C4200                DWORD 00429C91
:00429FD8 999C4200                DWORD 00429C99
:00429FDC A19C4200                DWORD 00429CA1
:00429FE0 659F4200                DWORD 00429F65
:00429FE4 659F4200                DWORD 00429F65
:00429FE8 C49C4200                DWORD 00429CC4
:00429FEC E29C4200                DWORD 00429CE2
:00429FF0 179D4200                DWORD 00429D17
:00429FF4 359D4200                DWORD 00429D35
:00429FF8 539D4200                DWORD 00429D53
:00429FFC 629D4200                DWORD 00429D62
:0042A000 719D4200                DWORD 00429D71
:0042A004 659F4200                DWORD 00429F65
:0042A008 809D4200                DWORD 00429D80
:0042A00C D29D4200                DWORD 00429DD2
:0042A010 EB9D4200                DWORD 00429DEB
:0042A014 D29D4200                DWORD 00429DD2
:0042A018 EB9D4200                DWORD 00429DEB
:0042A01C EB9D4200                DWORD 00429DEB
:0042A020 EB9D4200                DWORD 00429DEB
:0042A024 D29D4200                DWORD 00429DD2
:0042A028 EB9D4200                DWORD 00429DEB
:0042A02C 549E4200                DWORD 00429E54
:0042A030 639E4200                DWORD 00429E63
:0042A034 729E4200                DWORD 00429E72
:0042A038 819E4200                DWORD 00429E81
:0042A03C 909E4200                DWORD 00429E90
:0042A040 9F9E4200                DWORD 00429E9F
:0042A044 659F4200                DWORD 00429F65
:0042A048 659F4200                DWORD 00429F65
:0042A04C BD9E4200                DWORD 00429EBD
:0042A050 399F4200                DWORD 00429F39



* Referenced by a CALL at Addresses:
|:00429B22   , :00429B47   , :00429B5C   
|
:0042A054 55                      push ebp
:0042A055 8BEC                    mov ebp, esp
:0042A057 83EC08                  sub esp, 00000008
:0042A05A 56                      push esi
:0042A05B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A05E 6BC950                  imul ecx, 00000050
:0042A061 81C1787F4900            add ecx, 00497F78
:0042A067 E8187DFDFF              call 00401D84
:0042A06C 8BF0                    mov esi, eax
:0042A06E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042A071 6BC950                  imul ecx, 00000050
:0042A074 81C1787F4900            add ecx, 00497F78
:0042A07A E8057DFDFF              call 00401D84
:0042A07F D1E8                    shr eax, 1
:0042A081 2BF0                    sub esi, eax
:0042A083 83FE64                  cmp esi, 00000064
:0042A086 762D                    jbe 0042A0B5
:0042A088 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A08B 6BC950                  imul ecx, 00000050
:0042A08E 81C1787F4900            add ecx, 00497F78
:0042A094 E8EB7CFDFF              call 00401D84
:0042A099 8BF0                    mov esi, eax
:0042A09B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042A09E 6BC950                  imul ecx, 00000050
:0042A0A1 81C1787F4900            add ecx, 00497F78
:0042A0A7 E8D87CFDFF              call 00401D84
:0042A0AC D1E8                    shr eax, 1
:0042A0AE 2BF0                    sub esi, eax
:0042A0B0 8975F8                  mov dword ptr [ebp-08], esi
:0042A0B3 EB07                    jmp 0042A0BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A086(C)
|
:0042A0B5 C745F864000000          mov [ebp-08], 00000064

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A0B3(U)
|
:0042A0BC 8B45F8                  mov eax, dword ptr [ebp-08]
:0042A0BF 8945FC                  mov dword ptr [ebp-04], eax
:0042A0C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A0C5 6BC950                  imul ecx, 00000050
:0042A0C8 81C1787F4900            add ecx, 00497F78
:0042A0CE E8E47CFDFF              call 00401DB7
:0042A0D3 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0042A0D5 68C8000000              push 000000C8
:0042A0DA E8D1E20400              call 004783B0
:0042A0DF 83C404                  add esp, 00000004
:0042A0E2 3BF0                    cmp esi, eax
:0042A0E4 7614                    jbe 0042A0FA

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042A0E6 6A06                    push 00000006
:0042A0E8 E8C3E20400              call 004783B0
:0042A0ED 83C404                  add esp, 00000004
:0042A0F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A0F3 8D540105                lea edx, dword ptr [ecx+eax+05]
:0042A0F7 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A0E4(C)
|
:0042A0FA 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A0FD 5E                      pop esi
:0042A0FE 8BE5                    mov esp, ebp
:0042A100 5D                      pop ebp
:0042A101 C3                      ret



* Referenced by a CALL at Addresses:
|:00429B71   , :00429B8B   , :00429BA5   , :00429BC8   
|
:0042A102 55                      push ebp
:0042A103 8BEC                    mov ebp, esp
:0042A105 51                      push ecx
:0042A106 56                      push esi
:0042A107 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A10A 6BC950                  imul ecx, 00000050
:0042A10D 81C1787F4900            add ecx, 00497F78
:0042A113 E86C7CFDFF              call 00401D84
:0042A118 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042A11A B905000000              mov ecx, 00000005
:0042A11F F7F1                    div ecx
:0042A121 8BF0                    mov esi, eax
:0042A123 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042A126 6BC950                  imul ecx, 00000050
:0042A129 81C1787F4900            add ecx, 00497F78
:0042A12F E8507CFDFF              call 00401D84
:0042A134 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042A136 B905000000              mov ecx, 00000005
:0042A13B F7F1                    div ecx
:0042A13D 2BF0                    sub esi, eax
:0042A13F 85F6                    test esi, esi
:0042A141 763D                    jbe 0042A180
:0042A143 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A146 6BC950                  imul ecx, 00000050
:0042A149 81C1787F4900            add ecx, 00497F78
:0042A14F E8307CFDFF              call 00401D84
:0042A154 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042A156 B905000000              mov ecx, 00000005
:0042A15B F7F1                    div ecx
:0042A15D 8BF0                    mov esi, eax
:0042A15F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042A162 6BC950                  imul ecx, 00000050
:0042A165 81C1787F4900            add ecx, 00497F78
:0042A16B E8147CFDFF              call 00401D84
:0042A170 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042A172 B905000000              mov ecx, 00000005
:0042A177 F7F1                    div ecx
:0042A179 2BF0                    sub esi, eax
:0042A17B 8975FC                  mov dword ptr [ebp-04], esi
:0042A17E EB07                    jmp 0042A187

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A141(C)
|
:0042A180 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A17E(U)
|
:0042A187 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A18A 5E                      pop esi
:0042A18B 8BE5                    mov esp, ebp
:0042A18D 5D                      pop ebp
:0042A18E C3                      ret



* Referenced by a CALL at Addresses:
|:0042647A   , :0042C9DE   
|
:0042A18F 55                      push ebp
:0042A190 8BEC                    mov ebp, esp
:0042A192 83EC1C                  sub esp, 0000001C
:0042A195 56                      push esi
:0042A196 894DE4                  mov dword ptr [ebp-1C], ecx
:0042A199 817DE438464900          cmp dword ptr [ebp-1C], 00494638
:0042A1A0 0F85DA000000            jne 0042A280
:0042A1A6 B938464900              mov ecx, 00494638
:0042A1AB E8D03C0000              call 0042DE80
:0042A1B0 8BF0                    mov esi, eax
:0042A1B2 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042A1B5 0FBE481F                movsx ecx, byte ptr [eax+1F]
:0042A1B9 6BC931                  imul ecx, 00000031
:0042A1BC 81C1001D4B00            add ecx, 004B1D00
:0042A1C2 E8395CFEFF              call 0040FE00
:0042A1C7 25FF000000              and eax, 000000FF
:0042A1CC 2BF0                    sub esi, eax
:0042A1CE 56                      push esi
:0042A1CF B938464900              mov ecx, 00494638
:0042A1D4 E859A6FFFF              call 00424832
:0042A1D9 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0042A1DC 8B4914                  mov ecx, dword ptr [ecx+14]
:0042A1DF 6BC950                  imul ecx, 00000050
:0042A1E2 81C1787F4900            add ecx, 00497F78
:0042A1E8 E82E7CFDFF              call 00401E1B
:0042A1ED 50                      push eax
:0042A1EE B938464900              mov ecx, 00494638
:0042A1F3 E8883C0000              call 0042DE80
:0042A1F8 50                      push eax

* Possible StringData Ref from Data Obj ->"%d/%d"
                                  |
:0042A1F9 6824D24700              push 0047D224
:0042A1FE 8D55F0                  lea edx, dword ptr [ebp-10]
:0042A201 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042A202 FF1504D74B00            Call dword ptr [004BD704]
:0042A208 83C410                  add esp, 00000010
:0042A20B 8D45F0                  lea eax, dword ptr [ebp-10]
:0042A20E 50                      push eax
:0042A20F 68DE040000              push 000004DE
:0042A214 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A217 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042A218 FF1510D64B00            Call dword ptr [004BD610]
:0042A21E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0042A21F FF1514D64B00            Call dword ptr [004BD614]
:0042A225 B9D0454900              mov ecx, 004945D0
:0042A22A E8D190FDFF              call 00403300
:0042A22F 8945EC                  mov dword ptr [ebp-14], eax
:0042A232 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042A235 6BC950                  imul ecx, 00000050
:0042A238 81C1787F4900            add ecx, 00497F78
:0042A23E E8D87BFDFF              call 00401E1B
:0042A243 50                      push eax
:0042A244 B9D0454900              mov ecx, 004945D0
:0042A249 E8323C0000              call 0042DE80
:0042A24E 50                      push eax

* Possible StringData Ref from Data Obj ->"%d/%d"
                                  |
:0042A24F 682CD24700              push 0047D22C
:0042A254 8D55F0                  lea edx, dword ptr [ebp-10]
:0042A257 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042A258 FF1504D74B00            Call dword ptr [004BD704]
:0042A25E 83C410                  add esp, 00000010
:0042A261 8D45F0                  lea eax, dword ptr [ebp-10]
:0042A264 50                      push eax
:0042A265 68D5040000              push 000004D5
:0042A26A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A26D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042A26E FF1510D64B00            Call dword ptr [004BD610]
:0042A274 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0042A275 FF1514D64B00            Call dword ptr [004BD614]
:0042A27B E9D5000000              jmp 0042A355

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A1A0(C)
|
:0042A280 B9D0454900              mov ecx, 004945D0
:0042A285 E8F63B0000              call 0042DE80
:0042A28A 8BF0                    mov esi, eax
:0042A28C 8B55E4                  mov edx, dword ptr [ebp-1C]
:0042A28F 0FBE4A1F                movsx ecx, byte ptr [edx+1F]
:0042A293 6BC931                  imul ecx, 00000031
:0042A296 81C1001D4B00            add ecx, 004B1D00
:0042A29C E85F5BFEFF              call 0040FE00
:0042A2A1 25FF000000              and eax, 000000FF
:0042A2A6 2BF0                    sub esi, eax
:0042A2A8 56                      push esi
:0042A2A9 B9D0454900              mov ecx, 004945D0
:0042A2AE E87FA5FFFF              call 00424832
:0042A2B3 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042A2B6 8B4814                  mov ecx, dword ptr [eax+14]
:0042A2B9 6BC950                  imul ecx, 00000050
:0042A2BC 81C1787F4900            add ecx, 00497F78
:0042A2C2 E8547BFDFF              call 00401E1B
:0042A2C7 50                      push eax
:0042A2C8 B9D0454900              mov ecx, 004945D0
:0042A2CD E8AE3B0000              call 0042DE80
:0042A2D2 50                      push eax

* Possible StringData Ref from Data Obj ->"%d/%d"
                                  |
:0042A2D3 6834D24700              push 0047D234
:0042A2D8 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042A2DB 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042A2DC FF1504D74B00            Call dword ptr [004BD704]
:0042A2E2 83C410                  add esp, 00000010
:0042A2E5 8D55F0                  lea edx, dword ptr [ebp-10]
:0042A2E8 52                      push edx
:0042A2E9 68D5040000              push 000004D5
:0042A2EE 8B4508                  mov eax, dword ptr [ebp+08]
:0042A2F1 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042A2F2 FF1510D64B00            Call dword ptr [004BD610]
:0042A2F8 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0042A2F9 FF1514D64B00            Call dword ptr [004BD614]
:0042A2FF B938464900              mov ecx, 00494638
:0042A304 E8F78FFDFF              call 00403300
:0042A309 8945E8                  mov dword ptr [ebp-18], eax
:0042A30C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042A30F 6BC950                  imul ecx, 00000050
:0042A312 81C1787F4900            add ecx, 00497F78
:0042A318 E8FE7AFDFF              call 00401E1B
:0042A31D 50                      push eax
:0042A31E B938464900              mov ecx, 00494638
:0042A323 E8583B0000              call 0042DE80
:0042A328 50                      push eax

* Possible StringData Ref from Data Obj ->"%d/%d"
                                  |
:0042A329 683CD24700              push 0047D23C
:0042A32E 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042A331 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042A332 FF1504D74B00            Call dword ptr [004BD704]
:0042A338 83C410                  add esp, 00000010
:0042A33B 8D55F0                  lea edx, dword ptr [ebp-10]
:0042A33E 52                      push edx
:0042A33F 68DE040000              push 000004DE
:0042A344 8B4508                  mov eax, dword ptr [ebp+08]
:0042A347 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042A348 FF1510D64B00            Call dword ptr [004BD610]
:0042A34E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0042A34F FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A27B(U)
|
:0042A355 5E                      pop esi
:0042A356 8BE5                    mov esp, ebp
:0042A358 5D                      pop ebp
:0042A359 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00420441   , :004297A6   , :0042991A   , :00429935   , :0042B400   
|
:0042A35C 55                      push ebp
:0042A35D 8BEC                    mov ebp, esp
:0042A35F 83EC2C                  sub esp, 0000002C
:0042A362 894DD4                  mov dword ptr [ebp-2C], ecx
:0042A365 8B45D4                  mov eax, dword ptr [ebp-2C]
:0042A368 8B4814                  mov ecx, dword ptr [eax+14]
:0042A36B 6BC950                  imul ecx, 00000050
:0042A36E 81C1787F4900            add ecx, 00497F78
:0042A374 E8717AFDFF              call 00401DEA
:0042A379 8945DC                  mov dword ptr [ebp-24], eax
:0042A37C 817DD438464900          cmp dword ptr [ebp-2C], 00494638
:0042A383 756A                    jne 0042A3EF
:0042A385 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042A388 51                      push ecx
:0042A389 B938464900              mov ecx, 00494638
:0042A38E E84DC60000              call 004369E0
:0042A393 2B450C                  sub eax, dword ptr [ebp+0C]
:0042A396 50                      push eax
:0042A397 6A00                    push 00000000
:0042A399 E80B95FFFF              call 004238A9
:0042A39E 83C40C                  add esp, 0000000C
:0042A3A1 8945D8                  mov dword ptr [ebp-28], eax
:0042A3A4 8B55D8                  mov edx, dword ptr [ebp-28]
:0042A3A7 52                      push edx
:0042A3A8 B938464900              mov ecx, 00494638
:0042A3AD E82FA4FFFF              call 004247E1
:0042A3B2 8B45DC                  mov eax, dword ptr [ebp-24]
:0042A3B5 50                      push eax
:0042A3B6 B938464900              mov ecx, 00494638
:0042A3BB E820C60000              call 004369E0
:0042A3C0 50                      push eax

* Possible StringData Ref from Data Obj ->"%u/%u"
                                  |
:0042A3C1 6844D24700              push 0047D244
:0042A3C6 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0042A3C9 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042A3CA FF1504D74B00            Call dword ptr [004BD704]
:0042A3D0 83C410                  add esp, 00000010
:0042A3D3 8D55E0                  lea edx, dword ptr [ebp-20]
:0042A3D6 52                      push edx
:0042A3D7 68DD040000              push 000004DD
:0042A3DC 8B4508                  mov eax, dword ptr [ebp+08]
:0042A3DF 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042A3E0 FF1510D64B00            Call dword ptr [004BD610]
:0042A3E6 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0042A3E7 FF1514D64B00            Call dword ptr [004BD614]
:0042A3ED EB68                    jmp 0042A457

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A383(C)
|
:0042A3EF 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042A3F2 51                      push ecx
:0042A3F3 B9D0454900              mov ecx, 004945D0
:0042A3F8 E8E3C50000              call 004369E0
:0042A3FD 2B450C                  sub eax, dword ptr [ebp+0C]
:0042A400 50                      push eax
:0042A401 6A00                    push 00000000
:0042A403 E8A194FFFF              call 004238A9
:0042A408 83C40C                  add esp, 0000000C
:0042A40B 8945D8                  mov dword ptr [ebp-28], eax
:0042A40E 8B55D8                  mov edx, dword ptr [ebp-28]
:0042A411 52                      push edx
:0042A412 B9D0454900              mov ecx, 004945D0
:0042A417 E8C5A3FFFF              call 004247E1
:0042A41C 8B45DC                  mov eax, dword ptr [ebp-24]
:0042A41F 50                      push eax
:0042A420 B9D0454900              mov ecx, 004945D0
:0042A425 E8B6C50000              call 004369E0
:0042A42A 50                      push eax

* Possible StringData Ref from Data Obj ->"%u/%u"
                                  |
:0042A42B 684CD24700              push 0047D24C
:0042A430 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0042A433 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042A434 FF1504D74B00            Call dword ptr [004BD704]
:0042A43A 83C410                  add esp, 00000010
:0042A43D 8D55E0                  lea edx, dword ptr [ebp-20]
:0042A440 52                      push edx
:0042A441 68D4040000              push 000004D4
:0042A446 8B4508                  mov eax, dword ptr [ebp+08]
:0042A449 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042A44A FF1510D64B00            Call dword ptr [004BD610]
:0042A450 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0042A451 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A3ED(U)
|
:0042A457 8B45D8                  mov eax, dword ptr [ebp-28]
:0042A45A 8BE5                    mov esp, ebp
:0042A45C 5D                      pop ebp
:0042A45D C20800                  ret 0008



* Referenced by a CALL at Address:
|:00420181   
|
:0042A460 55                      push ebp
:0042A461 8BEC                    mov ebp, esp
:0042A463 51                      push ecx
:0042A464 894DFC                  mov dword ptr [ebp-04], ecx
:0042A467 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A46A 8A481F                  mov cl, byte ptr [eax+1F]
:0042A46D 51                      push ecx
:0042A46E E816000000              call 0042A489
:0042A473 83C404                  add esp, 00000004
:0042A476 85C0                    test eax, eax
:0042A478 7D04                    jge 0042A47E
:0042A47A 33C0                    xor eax, eax
:0042A47C EB05                    jmp 0042A483

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A478(C)
|
:0042A47E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A47C(U)
|
:0042A483 8BE5                    mov esp, ebp
:0042A485 5D                      pop ebp
:0042A486 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042A46E   
|
:0042A489 55                      push ebp
:0042A48A 8BEC                    mov ebp, esp
:0042A48C 6AFF                    push FFFFFFFF
:0042A48E 68CE964700              push 004796CE
:0042A493 64A100000000            mov eax, dword ptr fs:[00000000]
:0042A499 50                      push eax
:0042A49A 64892500000000          mov dword ptr fs:[00000000], esp
:0042A4A1 81EC10010000            sub esp, 00000110
:0042A4A7 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A4AD E88EB1FDFF              call 00405640
:0042A4B2 C745FC00000000          mov [ebp-04], 00000000
:0042A4B9 8A4508                  mov al, byte ptr [ebp+08]
:0042A4BC 50                      push eax
:0042A4BD E8B7000000              call 0042A579
:0042A4C2 83C404                  add esp, 00000004
:0042A4C5 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax
:0042A4CB 83BDECFEFFFF00          cmp dword ptr [ebp+FFFFFEEC], 00000000
:0042A4D2 7D24                    jge 0042A4F8
:0042A4D4 C785E8FEFFFFFFFFFFFF    mov dword ptr [ebp+FFFFFEE8], FFFFFFFF
:0042A4DE C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042A4E5 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A4EB E870B1FDFF              call 00405660
:0042A4F0 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0042A4F6 EB73                    jmp 0042A56B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A4D2(C)
|

* Possible StringData Ref from Data Obj ->"SPANEL.E3"
                                  |
:0042A4F8 6828D54700              push 0047D528
:0042A4FD 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A503 E8CD6CFEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042A508 6A04                    push 00000004
:0042A50A 6A00                    push 00000000
:0042A50C 6A00                    push 00000000
:0042A50E B958474900              mov ecx, 00494758
:0042A513 E878EA0400              call 00478F90
:0042A518 50                      push eax
:0042A519 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042A51F 51                      push ecx
:0042A520 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A526 E8FE6DFEFF              call 00411329
:0042A52B 85C0                    test eax, eax
:0042A52D 750D                    jne 0042A53C

* Possible StringData Ref from Data Obj ->"in ReadBeforePanelAm()"
                                  |
:0042A52F 6854D24700              push 0047D254
:0042A534 E86396FFFF              call 00423B9C
:0042A539 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A52D(C)
|
:0042A53C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A542 E8DE36FEFF              call 0040DC25
:0042A547 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:0042A54D 8995E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], edx
:0042A553 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042A55A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A560 E8FBB0FDFF              call 00405660
:0042A565 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A4F6(U)
|
:0042A56B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A56E 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042A575 8BE5                    mov esp, ebp
:0042A577 5D                      pop ebp
:0042A578 C3                      ret



* Referenced by a CALL at Address:
|:0042A4BD   
|
:0042A579 55                      push ebp
:0042A57A 8BEC                    mov ebp, esp
:0042A57C 51                      push ecx
:0042A57D 8A4508                  mov al, byte ptr [ebp+08]
:0042A580 8845FC                  mov byte ptr [ebp-04], al
:0042A583 807DFC00                cmp byte ptr [ebp-04], 00
:0042A587 740E                    je 0042A597
:0042A589 807DFC01                cmp byte ptr [ebp-04], 01
:0042A58D 740C                    je 0042A59B
:0042A58F 807DFC04                cmp byte ptr [ebp-04], 04
:0042A593 740D                    je 0042A5A2
:0042A595 EB12                    jmp 0042A5A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A587(C)
|
:0042A597 33C0                    xor eax, eax
:0042A599 EB11                    jmp 0042A5AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A58D(C)
|
:0042A59B B801000000              mov eax, 00000001
:0042A5A0 EB0A                    jmp 0042A5AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A593(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042A5A2 B802000000              mov eax, 00000002
:0042A5A7 EB03                    jmp 0042A5AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A595(U)
|
:0042A5A9 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A599(U), :0042A5A0(U), :0042A5A7(U)
|
:0042A5AC 8BE5                    mov esp, ebp
:0042A5AE 5D                      pop ebp
:0042A5AF C3                      ret



* Referenced by a CALL at Address:
|:00420191   
|
:0042A5B0 55                      push ebp
:0042A5B1 8BEC                    mov ebp, esp
:0042A5B3 83EC08                  sub esp, 00000008
:0042A5B6 894DF8                  mov dword ptr [ebp-08], ecx
:0042A5B9 C745FC00000000          mov [ebp-04], 00000000
:0042A5C0 EB09                    jmp 0042A5CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A5EC(U)
|
:0042A5C2 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A5C5 83C001                  add eax, 00000001
:0042A5C8 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A5C0(U)
|
:0042A5CB 837DFC04                cmp dword ptr [ebp-04], 00000004
:0042A5CF 7D1D                    jge 0042A5EE

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042A5D1 6A02                    push 00000002
:0042A5D3 E8E34F0000              call 0042F5BB
:0042A5D8 83C404                  add esp, 00000004
:0042A5DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A5DE 51                      push ecx
:0042A5DF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042A5E2 E8A2ECFFFF              call 00429289
:0042A5E7 E8E44F0000              call 0042F5D0
:0042A5EC EBD4                    jmp 0042A5C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A5CF(C)
|
:0042A5EE 8BE5                    mov esp, ebp
:0042A5F0 5D                      pop ebp
:0042A5F1 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042019D   
|
:0042A5F4 55                      push ebp
:0042A5F5 8BEC                    mov ebp, esp
:0042A5F7 51                      push ecx
:0042A5F8 894DFC                  mov dword ptr [ebp-04], ecx
:0042A5FB 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A5FE 8A481F                  mov cl, byte ptr [eax+1F]
:0042A601 51                      push ecx
:0042A602 8B55FC                  mov edx, dword ptr [ebp-04]
:0042A605 8B4214                  mov eax, dword ptr [edx+14]
:0042A608 50                      push eax
:0042A609 E816000000              call 0042A624
:0042A60E 83C408                  add esp, 00000008
:0042A611 85C0                    test eax, eax
:0042A613 7D04                    jge 0042A619
:0042A615 33C0                    xor eax, eax
:0042A617 EB05                    jmp 0042A61E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A613(C)
|
:0042A619 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A617(U)
|
:0042A61E 8BE5                    mov esp, ebp
:0042A620 5D                      pop ebp
:0042A621 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042A609   
|
:0042A624 55                      push ebp
:0042A625 8BEC                    mov ebp, esp
:0042A627 6AFF                    push FFFFFFFF
:0042A629 68E4964700              push 004796E4
:0042A62E 64A100000000            mov eax, dword ptr fs:[00000000]
:0042A634 50                      push eax
:0042A635 64892500000000          mov dword ptr fs:[00000000], esp
:0042A63C 81EC10010000            sub esp, 00000110
:0042A642 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A648 E8F3AFFDFF              call 00405640
:0042A64D C745FC00000000          mov [ebp-04], 00000000
:0042A654 8A450C                  mov al, byte ptr [ebp+0C]
:0042A657 50                      push eax
:0042A658 E842EBFFFF              call 0042919F
:0042A65D 83C404                  add esp, 00000004
:0042A660 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax
:0042A666 83BDECFEFFFF00          cmp dword ptr [ebp+FFFFFEEC], 00000000
:0042A66D 7D27                    jge 0042A696
:0042A66F C785E8FEFFFFFFFFFFFF    mov dword ptr [ebp+FFFFFEE8], FFFFFFFF
:0042A679 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042A680 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A686 E8D5AFFDFF              call 00405660
:0042A68B 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0042A691 E9D4000000              jmp 0042A76A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A66D(C)
|

* Possible StringData Ref from Data Obj ->"SEFF.E3"
                                  |
:0042A696 6840D54700              push 0047D540
:0042A69B 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A6A1 E82F6BFEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042A6A6 6A04                    push 00000004
:0042A6A8 6A00                    push 00000000
:0042A6AA 6A00                    push 00000000
:0042A6AC B958474900              mov ecx, 00494758
:0042A6B1 E8DAE80400              call 00478F90
:0042A6B6 50                      push eax
:0042A6B7 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042A6BD 51                      push ecx
:0042A6BE 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A6C4 E8606CFEFF              call 00411329
:0042A6C9 85C0                    test eax, eax
:0042A6CB 750D                    jne 0042A6DA

* Possible StringData Ref from Data Obj ->"ReadBeforeEffectAm()"
                                  |
:0042A6CD 686CD24700              push 0047D26C
:0042A6D2 E8C594FFFF              call 00423B9C
:0042A6D7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A6CB(C)
|
:0042A6DA 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A6E0 E84035FEFF              call 0040DC25
:0042A6E5 8B5508                  mov edx, dword ptr [ebp+08]
:0042A6E8 52                      push edx
:0042A6E9 E8A237FEFF              call 0040DE90
:0042A6EE 83C404                  add esp, 00000004
:0042A6F1 85C0                    test eax, eax
:0042A6F3 7551                    jne 0042A746

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042A6F5 6A04                    push 00000004
:0042A6F7 6A00                    push 00000000
:0042A6F9 6A00                    push 00000000
:0042A6FB B958474900              mov ecx, 00494758
:0042A700 E88BE80400              call 00478F90
:0042A705 50                      push eax
:0042A706 E8F3E5FFFF              call 00428CFE
:0042A70B 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042A70E 6A04                    push 00000004
:0042A710 6A00                    push 00000000
:0042A712 6800090000              push 00000900
:0042A717 B958474900              mov ecx, 00494758
:0042A71C E86FE80400              call 00478F90
:0042A721 50                      push eax
:0042A722 E8D7E5FFFF              call 00428CFE
:0042A727 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042A72A 6A04                    push 00000004
:0042A72C 6A00                    push 00000000
:0042A72E 6800120000              push 00001200
:0042A733 B958474900              mov ecx, 00494758
:0042A738 E853E80400              call 00478F90
:0042A73D 50                      push eax
:0042A73E E8BBE5FFFF              call 00428CFE
:0042A743 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A6F3(C)
|
:0042A746 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:0042A74C 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:0042A752 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042A759 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042A75F E8FCAEFDFF              call 00405660
:0042A764 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A691(U)
|
:0042A76A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042A76D 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042A774 8BE5                    mov esp, ebp
:0042A776 5D                      pop ebp
:0042A777 C3                      ret


:0042A778 55                      push ebp
:0042A779 8BEC                    mov ebp, esp
:0042A77B 83EC08                  sub esp, 00000008
:0042A77E 894DF8                  mov dword ptr [ebp-08], ecx
:0042A781 C745FC00000000          mov [ebp-04], 00000000
:0042A788 EB09                    jmp 0042A793

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A7B4(U)
|
:0042A78A 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A78D 83C001                  add eax, 00000001
:0042A790 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A788(U)
|
:0042A793 837DFC04                cmp dword ptr [ebp-04], 00000004
:0042A797 7D1D                    jge 0042A7B6

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042A799 6A02                    push 00000002
:0042A79B E81B4E0000              call 0042F5BB
:0042A7A0 83C404                  add esp, 00000004
:0042A7A3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A7A6 51                      push ecx
:0042A7A7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042A7AA E8DAEAFFFF              call 00429289
:0042A7AF E81C4E0000              call 0042F5D0
:0042A7B4 EBD4                    jmp 0042A78A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A797(C)
|
:0042A7B6 8BE5                    mov esp, ebp
:0042A7B8 5D                      pop ebp
:0042A7B9 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004201A9   
|
:0042A7BC 55                      push ebp
:0042A7BD 8BEC                    mov ebp, esp
:0042A7BF 51                      push ecx
:0042A7C0 894DFC                  mov dword ptr [ebp-04], ecx
:0042A7C3 817DFC38464900          cmp dword ptr [ebp-04], 00494638
:0042A7CA 7518                    jne 0042A7E4
:0042A7CC 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A7CF 0FBE481F                movsx ecx, byte ptr [eax+1F]
:0042A7D3 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042A7D4 6A05                    push 00000005
:0042A7D6 8B5508                  mov edx, dword ptr [ebp+08]
:0042A7D9 52                      push edx
:0042A7DA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A7DD E88EA6FFFF              call 00424E70
:0042A7E2 EB16                    jmp 0042A7FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A7CA(C)
|
:0042A7E4 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A7E7 0FBE481F                movsx ecx, byte ptr [eax+1F]
:0042A7EB 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042A7EC 6A04                    push 00000004
:0042A7EE 8B5508                  mov edx, dword ptr [ebp+08]
:0042A7F1 52                      push edx
:0042A7F2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A7F5 E876A6FFFF              call 00424E70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A7E2(U)
|
:0042A7FA 8BE5                    mov esp, ebp
:0042A7FC 5D                      pop ebp
:0042A7FD C20400                  ret 0004



* Referenced by a CALL at Address:
|:004201B9   
|
:0042A800 55                      push ebp
:0042A801 8BEC                    mov ebp, esp
:0042A803 51                      push ecx
:0042A804 894DFC                  mov dword ptr [ebp-04], ecx
:0042A807 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A80A 33C9                    xor ecx, ecx
:0042A80C 8A481E                  mov cl, byte ptr [eax+1E]
:0042A80F 81F985000000            cmp ecx, 00000085
:0042A815 7D04                    jge 0042A81B
:0042A817 B006                    mov al, 06
:0042A819 EB02                    jmp 0042A81D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A815(C)
|
:0042A81B B007                    mov al, 07

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A819(U)
|
:0042A81D 8BE5                    mov esp, ebp
:0042A81F 5D                      pop ebp
:0042A820 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004201F9   
|
:0042A823 55                      push ebp
:0042A824 8BEC                    mov ebp, esp
:0042A826 83EC08                  sub esp, 00000008
:0042A829 894DF8                  mov dword ptr [ebp-08], ecx
:0042A82C 6A00                    push 00000000
:0042A82E 8B45F8                  mov eax, dword ptr [ebp-08]
:0042A831 8A481F                  mov cl, byte ptr [eax+1F]
:0042A834 51                      push ecx
:0042A835 B948494B00              mov ecx, 004B4948
:0042A83A E898D80100              call 004480D7
:0042A83F C745FC00000000          mov [ebp-04], 00000000
:0042A846 EB09                    jmp 0042A851

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A872(U)
|
:0042A848 8B55FC                  mov edx, dword ptr [ebp-04]
:0042A84B 83C201                  add edx, 00000001
:0042A84E 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A846(U)
|
:0042A851 837DFC04                cmp dword ptr [ebp-04], 00000004
:0042A855 7D1D                    jge 0042A874

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042A857 6A02                    push 00000002
:0042A859 E85D4D0000              call 0042F5BB
:0042A85E 83C404                  add esp, 00000004
:0042A861 8B45FC                  mov eax, dword ptr [ebp-04]
:0042A864 50                      push eax
:0042A865 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042A868 E88EE7FFFF              call 00428FFB
:0042A86D E85E4D0000              call 0042F5D0
:0042A872 EBD4                    jmp 0042A848

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A855(C)
|
:0042A874 8BE5                    mov esp, ebp
:0042A876 5D                      pop ebp
:0042A877 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00420118   , :004201CF   
|
:0042A87A 55                      push ebp
:0042A87B 8BEC                    mov ebp, esp
:0042A87D 83EC08                  sub esp, 00000008
:0042A880 894DF8                  mov dword ptr [ebp-08], ecx
:0042A883 6A01                    push 00000001
:0042A885 8B45F8                  mov eax, dword ptr [ebp-08]
:0042A888 50                      push eax
:0042A889 E83E000000              call 0042A8CC
:0042A88E 83C408                  add esp, 00000008
:0042A891 C745FC00000000          mov [ebp-04], 00000000
:0042A898 EB09                    jmp 0042A8A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A8C4(U)
|
:0042A89A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A89D 83C101                  add ecx, 00000001
:0042A8A0 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A898(U)
|
:0042A8A3 837DFC03                cmp dword ptr [ebp-04], 00000003
:0042A8A7 7F1D                    jg 0042A8C6

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042A8A9 6A02                    push 00000002
:0042A8AB E80B4D0000              call 0042F5BB
:0042A8B0 83C404                  add esp, 00000004
:0042A8B3 8B55FC                  mov edx, dword ptr [ebp-04]
:0042A8B6 52                      push edx
:0042A8B7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042A8BA E83CE7FFFF              call 00428FFB
:0042A8BF E80C4D0000              call 0042F5D0
:0042A8C4 EBD4                    jmp 0042A89A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A8A7(C)
|
:0042A8C6 8BE5                    mov esp, ebp
:0042A8C8 5D                      pop ebp
:0042A8C9 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042A889   , :0042AD61   
|
:0042A8CC 55                      push ebp
:0042A8CD 8BEC                    mov ebp, esp
:0042A8CF 51                      push ecx
:0042A8D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042A8D3 E8288AFDFF              call 00403300
:0042A8D8 8BC8                    mov ecx, eax
:0042A8DA 6BC950                  imul ecx, 00000050
:0042A8DD 81C1787F4900            add ecx, 00497F78
:0042A8E3 E8B888FDFF              call 004031A0
:0042A8E8 25FF000000              and eax, 000000FF
:0042A8ED 8945FC                  mov dword ptr [ebp-04], eax
:0042A8F0 837DFC1F                cmp dword ptr [ebp-04], 0000001F
:0042A8F4 0F87E2000000            ja 0042A9DC
:0042A8FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042A8FD 33C0                    xor eax, eax
:0042A8FF 8A8110AA4200            mov al, byte ptr [ecx+0042AA10]
:0042A905 FF2485E0A94200          jmp dword ptr [4*eax+0042A9E0]
:0042A90C 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042A910 740E                    je 0042A920
:0042A912 6A19                    push 00000019
:0042A914 B9F8544B00              mov ecx, 004B54F8
:0042A919 E8FCEB0300              call 0046951A
:0042A91E EB0C                    jmp 0042A92C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A910(C)
|
:0042A920 6A25                    push 00000025
:0042A922 B9F8544B00              mov ecx, 004B54F8
:0042A927 E8EEEB0300              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A91E(U)
|
:0042A92C E9AB000000              jmp 0042A9DC
:0042A931 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042A935 740E                    je 0042A945
:0042A937 6A19                    push 00000019
:0042A939 B9F8544B00              mov ecx, 004B54F8
:0042A93E E8D7EB0300              call 0046951A
:0042A943 EB0C                    jmp 0042A951

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A935(C)
|
:0042A945 6A23                    push 00000023
:0042A947 B9F8544B00              mov ecx, 004B54F8
:0042A94C E8C9EB0300              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A943(U)
|
:0042A951 E986000000              jmp 0042A9DC
:0042A956 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042A95A 740E                    je 0042A96A

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:0042A95C 6A1A                    push 0000001A
:0042A95E B9F8544B00              mov ecx, 004B54F8
:0042A963 E8B2EB0300              call 0046951A
:0042A968 EB0C                    jmp 0042A976

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A95A(C)
|
:0042A96A 6A21                    push 00000021
:0042A96C B9F8544B00              mov ecx, 004B54F8
:0042A971 E8A4EB0300              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A968(U)
|
:0042A976 EB64                    jmp 0042A9DC
:0042A978 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042A97C 740E                    je 0042A98C
:0042A97E 6A1B                    push 0000001B
:0042A980 B9F8544B00              mov ecx, 004B54F8
:0042A985 E890EB0300              call 0046951A
:0042A98A EB0C                    jmp 0042A998

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A97C(C)
|
:0042A98C 6A26                    push 00000026
:0042A98E B9F8544B00              mov ecx, 004B54F8
:0042A993 E882EB0300              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A98A(U)
|
:0042A998 EB42                    jmp 0042A9DC
:0042A99A 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042A99E 740E                    je 0042A9AE
:0042A9A0 6A1C                    push 0000001C
:0042A9A2 B9F8544B00              mov ecx, 004B54F8
:0042A9A7 E86EEB0300              call 0046951A
:0042A9AC EB0C                    jmp 0042A9BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A99E(C)
|
:0042A9AE 6A26                    push 00000026
:0042A9B0 B9F8544B00              mov ecx, 004B54F8
:0042A9B5 E860EB0300              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A9AC(U)
|
:0042A9BA EB20                    jmp 0042A9DC
:0042A9BC 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042A9C0 740E                    je 0042A9D0
:0042A9C2 6A1D                    push 0000001D
:0042A9C4 B9F8544B00              mov ecx, 004B54F8
:0042A9C9 E84CEB0300              call 0046951A
:0042A9CE EB0C                    jmp 0042A9DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042A9C0(C)
|
:0042A9D0 6A26                    push 00000026
:0042A9D2 B9F8544B00              mov ecx, 004B54F8
:0042A9D7 E83EEB0300              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042A8F4(C), :0042A92C(U), :0042A951(U), :0042A976(U), :0042A998(U)
|:0042A9BA(U), :0042A9CE(U)
|
:0042A9DC 8BE5                    mov esp, ebp
:0042A9DE 5D                      pop ebp
:0042A9DF C3                      ret



:0042A9E0 0CA94200                DWORD 0042A90C
:0042A9E4 56A94200                DWORD 0042A956
:0042A9E8 0CA94200                DWORD 0042A90C
:0042A9EC 56A94200                DWORD 0042A956
:0042A9F0 78A94200                DWORD 0042A978
:0042A9F4 9AA94200                DWORD 0042A99A
:0042A9F8 31A94200                DWORD 0042A931
:0042A9FC BCA94200                DWORD 0042A9BC
:0042AA00 31A94200                DWORD 0042A931
:0042AA04 0CA94200                DWORD 0042A90C
:0042AA08 31A94200                DWORD 0042A931
:0042AA0C DCA94200                DWORD 0042A9DC


:0042AA10 00000000                BYTE  4 DUP(0)


:0042AA14 0101                    add dword ptr [ecx], eax
:0042AA16 0202                    add al, byte ptr [edx]
:0042AA18 0303                    add eax, dword ptr [ebx]
:0042AA1A 0404                    add al, 04
:0042AA1C 0505060607              add eax, 07060605
:0042AA21 07                      pop es
:0042AA22 07                      pop es
:0042AA23 07                      pop es
:0042AA24 0808                    or byte ptr [eax], cl
:0042AA26 0808                    or byte ptr [eax], cl
:0042AA28 0808                    or byte ptr [eax], cl
:0042AA2A 0909                    or dword ptr [ecx], ecx
:0042AA2C 0A0A                    or cl, byte ptr [edx]
:0042AA2E 0A0A                    or cl, byte ptr [edx]

* Referenced by a CALL at Addresses:
|:00420124   , :004201DB   
|
:0042AA30 55                      push ebp
:0042AA31 8BEC                    mov ebp, esp
:0042AA33 6AFF                    push FFFFFFFF
:0042AA35 68FA964700              push 004796FA
:0042AA3A 64A100000000            mov eax, dword ptr fs:[00000000]
:0042AA40 50                      push eax
:0042AA41 64892500000000          mov dword ptr fs:[00000000], esp
:0042AA48 81EC14010000            sub esp, 00000114
:0042AA4E 898DE4FEFFFF            mov dword ptr [ebp+FFFFFEE4], ecx
:0042AA54 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0042AA5A 8B4814                  mov ecx, dword ptr [eax+14]
:0042AA5D 6BC950                  imul ecx, 00000050
:0042AA60 81C1787F4900            add ecx, 00497F78
:0042AA66 E83587FDFF              call 004031A0
:0042AA6B 25FF000000              and eax, 000000FF
:0042AA70 8985E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], eax
:0042AA76 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0042AA7C 83E904                  sub ecx, 00000004
:0042AA7F 898DE0FEFFFF            mov dword ptr [ebp+FFFFFEE0], ecx
:0042AA85 83BDE0FEFFFF0F          cmp dword ptr [ebp+FFFFFEE0], 0000000F
:0042AA8C 7772                    ja 0042AB00
:0042AA8E 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0042AA94 33D2                    xor edx, edx
:0042AA96 8A90D7AB4200            mov dl, byte ptr [eax+0042ABD7]
:0042AA9C FF2495BFAB4200          jmp dword ptr [4*edx+0042ABBF]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042AAA3 C785ECFEFFFF02000000    mov dword ptr [ebp+FFFFFEEC], 00000002
:0042AAAD EB58                    jmp 0042AB07

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0042AAAF C785ECFEFFFF09000000    mov dword ptr [ebp+FFFFFEEC], 00000009
:0042AAB9 EB4C                    jmp 0042AB07

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042AABB C785ECFEFFFF0A000000    mov dword ptr [ebp+FFFFFEEC], 0000000A
:0042AAC5 EB40                    jmp 0042AB07
:0042AAC7 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0042AACD 8B4914                  mov ecx, dword ptr [ecx+14]
:0042AAD0 6BC950                  imul ecx, 00000050
:0042AAD3 81C1787F4900            add ecx, 00497F78
:0042AAD9 E82B75FDFF              call 00402009
:0042AADE 50                      push eax
:0042AADF E803010000              call 0042ABE7
:0042AAE4 83C404                  add esp, 00000004
:0042AAE7 85C0                    test eax, eax
:0042AAE9 740C                    je 0042AAF7
:0042AAEB C785ECFEFFFF0B000000    mov dword ptr [ebp+FFFFFEEC], 0000000B
:0042AAF5 EB07                    jmp 0042AAFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AAE9(C)
|
:0042AAF7 33C0                    xor eax, eax
:0042AAF9 E9B1000000              jmp 0042ABAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AAF5(U)
|
:0042AAFE EB07                    jmp 0042AB07

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AA8C(C)
|
:0042AB00 33C0                    xor eax, eax
:0042AB02 E9A8000000              jmp 0042ABAF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AAAD(U), :0042AAB9(U), :0042AAC5(U), :0042AAFE(U)
|
:0042AB07 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042AB0D E82EABFDFF              call 00405640
:0042AB12 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"SARM.E3"
                                  |
:0042AB19 6838D54700              push 0047D538
:0042AB1E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042AB24 E8AC66FEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042AB29 6A04                    push 00000004
:0042AB2B 6A00                    push 00000000
:0042AB2D 6A00                    push 00000000
:0042AB2F B958474900              mov ecx, 00494758
:0042AB34 E857E40400              call 00478F90
:0042AB39 50                      push eax
:0042AB3A 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:0042AB40 52                      push edx
:0042AB41 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042AB47 E8DD67FEFF              call 00411329
:0042AB4C 85C0                    test eax, eax
:0042AB4E 750D                    jne 0042AB5D

* Possible StringData Ref from Data Obj ->"in CheckMoveTool"
                                  |
:0042AB50 6884D24700              push 0047D284
:0042AB55 E84290FFFF              call 00423B9C
:0042AB5A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AB4E(C)
|
:0042AB5D 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042AB63 E8BD30FEFF              call 0040DC25
:0042AB68 81BDE4FEFFFFD0454900    cmp dword ptr [ebp+FFFFFEE4], 004945D0
:0042AB72 7519                    jne 0042AB8D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042AB74 6A04                    push 00000004
:0042AB76 6A00                    push 00000000
:0042AB78 6A00                    push 00000000
:0042AB7A B958474900              mov ecx, 00494758
:0042AB7F E80CE40400              call 00478F90
:0042AB84 50                      push eax
:0042AB85 E874E1FFFF              call 00428CFE
:0042AB8A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AB72(C)
|
:0042AB8D C785E8FEFFFF01000000    mov dword ptr [ebp+FFFFFEE8], 00000001
:0042AB97 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042AB9E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042ABA4 E8B7AAFDFF              call 00405660
:0042ABA9 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AAF9(U), :0042AB02(U)
|
:0042ABAF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042ABB2 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042ABB9 8BE5                    mov esp, ebp
:0042ABBB 5D                      pop ebp
:0042ABBC C20400                  ret 0004



:0042ABBF A3AA4200                DWORD 0042AAA3
:0042ABC3 A3AA4200                DWORD 0042AAA3
:0042ABC7 AFAA4200                DWORD 0042AAAF
:0042ABCB BBAA4200                DWORD 0042AABB
:0042ABCF C7AA4200                DWORD 0042AAC7
:0042ABD3 00AB4200                DWORD 0042AB00


:0042ABD7 0000                    add byte ptr [eax], al
:0042ABD9 0505010102              add eax, 02010105
:0042ABDE 0203                    add al, byte ptr [ebx]
:0042ABE0 030505040404            add eax, dword ptr [04040405]
:0042ABE6 04                      BYTE 04h


* Referenced by a CALL at Address:
|:0042AADF   
|
:0042ABE7 55                      push ebp
:0042ABE8 8BEC                    mov ebp, esp
:0042ABEA 51                      push ecx
:0042ABEB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042ABEE 6BC922                  imul ecx, 00000022
:0042ABF1 81C1D0474900            add ecx, 004947D0
:0042ABF7 E86452FEFF              call 0040FE60
:0042ABFC 8845FC                  mov byte ptr [ebp-04], al
:0042ABFF 8B45FC                  mov eax, dword ptr [ebp-04]
:0042AC02 25FF000000              and eax, 000000FF
:0042AC07 83F80F                  cmp eax, 0000000F
:0042AC0A 741C                    je 0042AC28
:0042AC0C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042AC0F 81E1FF000000            and ecx, 000000FF
:0042AC15 83F910                  cmp ecx, 00000010
:0042AC18 740E                    je 0042AC28
:0042AC1A 8B55FC                  mov edx, dword ptr [ebp-04]
:0042AC1D 81E2FF000000            and edx, 000000FF
:0042AC23 83FA11                  cmp edx, 00000011
:0042AC26 7507                    jne 0042AC2F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AC0A(C), :0042AC18(C)
|
:0042AC28 B801000000              mov eax, 00000001
:0042AC2D EB02                    jmp 0042AC31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AC26(C)
|
:0042AC2F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AC2D(U)
|
:0042AC31 8BE5                    mov esp, ebp
:0042AC33 5D                      pop ebp
:0042AC34 C3                      ret



* Referenced by a CALL at Addresses:
|:00420134   , :004201EB   
|
:0042AC35 55                      push ebp
:0042AC36 8BEC                    mov ebp, esp
:0042AC38 83EC08                  sub esp, 00000008
:0042AC3B 894DF8                  mov dword ptr [ebp-08], ecx
:0042AC3E C745FC00000000          mov [ebp-04], 00000000
:0042AC45 EB09                    jmp 0042AC50

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AC75(U)
|
:0042AC47 8B45FC                  mov eax, dword ptr [ebp-04]
:0042AC4A 83C001                  add eax, 00000001
:0042AC4D 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AC45(U)
|
:0042AC50 837DFC04                cmp dword ptr [ebp-04], 00000004
:0042AC54 7D21                    jge 0042AC77
:0042AC56 6A01                    push 00000001
:0042AC58 E85E490000              call 0042F5BB
:0042AC5D 83C404                  add esp, 00000004
:0042AC60 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042AC63 51                      push ecx
:0042AC64 8B5508                  mov edx, dword ptr [ebp+08]
:0042AC67 52                      push edx
:0042AC68 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042AC6B E87CE6FFFF              call 004292EC
:0042AC70 E85B490000              call 0042F5D0
:0042AC75 EBD0                    jmp 0042AC47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AC54(C)
|
:0042AC77 8BE5                    mov esp, ebp
:0042AC79 5D                      pop ebp
:0042AC7A C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00420140   , :00420221   
|
:0042AC7D 55                      push ebp
:0042AC7E 8BEC                    mov ebp, esp
:0042AC80 83EC10                  sub esp, 00000010
:0042AC83 894DF0                  mov dword ptr [ebp-10], ecx
:0042AC86 8B45F0                  mov eax, dword ptr [ebp-10]
:0042AC89 8945F4                  mov dword ptr [ebp-0C], eax
:0042AC8C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042AC8F 51                      push ecx
:0042AC90 E8FA8BFFFF              call 0042388F
:0042AC95 83C404                  add esp, 00000004
:0042AC98 8945F8                  mov dword ptr [ebp-08], eax
:0042AC9B 8B55F0                  mov edx, dword ptr [ebp-10]
:0042AC9E 8A421F                  mov al, byte ptr [edx+1F]
:0042ACA1 50                      push eax
:0042ACA2 E8E8000000              call 0042AD8F
:0042ACA7 83C404                  add esp, 00000004
:0042ACAA 85C0                    test eax, eax
:0042ACAC 7415                    je 0042ACC3
:0042ACAE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042ACB1 51                      push ecx
:0042ACB2 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042ACB5 52                      push edx
:0042ACB6 E81D010000              call 0042ADD8
:0042ACBB 83C408                  add esp, 00000008
:0042ACBE 8945FC                  mov dword ptr [ebp-04], eax
:0042ACC1 EB3B                    jmp 0042ACFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ACAC(C)
|
:0042ACC3 8B45F0                  mov eax, dword ptr [ebp-10]
:0042ACC6 0FBE481F                movsx ecx, byte ptr [eax+1F]
:0042ACCA 83F928                  cmp ecx, 00000028
:0042ACCD 7C1C                    jl 0042ACEB
:0042ACCF 6A01                    push 00000001
:0042ACD1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042ACD4 E857360000              call 0042E330
:0042ACD9 50                      push eax
:0042ACDA B948494B00              mov ecx, 004B4948
:0042ACDF E8F3D30100              call 004480D7
:0042ACE4 B00E                    mov al, 0E
:0042ACE6 E99E000000              jmp 0042AD89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ACCD(C)
|
:0042ACEB 8B55F8                  mov edx, dword ptr [ebp-08]
:0042ACEE 52                      push edx
:0042ACEF 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042ACF2 50                      push eax
:0042ACF3 E8DD030000              call 0042B0D5
:0042ACF8 83C408                  add esp, 00000008
:0042ACFB 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ACC1(U)
|
:0042ACFE 837DFC00                cmp dword ptr [ebp-04], 00000000
:0042AD02 7542                    jne 0042AD46
:0042AD04 6A1F                    push 0000001F
:0042AD06 B9F8544B00              mov ecx, 004B54F8
:0042AD0B E80AE80300              call 0046951A
:0042AD10 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042AD13 33D2                    xor edx, edx
:0042AD15 8A511E                  mov dl, byte ptr [ecx+1E]
:0042AD18 81FA86000000            cmp edx, 00000086
:0042AD1E 7410                    je 0042AD30
:0042AD20 8B45F0                  mov eax, dword ptr [ebp-10]
:0042AD23 33C9                    xor ecx, ecx
:0042AD25 8A481E                  mov cl, byte ptr [eax+1E]
:0042AD28 81F987000000            cmp ecx, 00000087
:0042AD2E 7512                    jne 0042AD42

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AD1E(C)
|
:0042AD30 8B55F0                  mov edx, dword ptr [ebp-10]
:0042AD33 52                      push edx
:0042AD34 8B4508                  mov eax, dword ptr [ebp+08]
:0042AD37 50                      push eax
:0042AD38 E8EC040000              call 0042B229
:0042AD3D 83C408                  add esp, 00000008
:0042AD40 EB47                    jmp 0042AD89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AD2E(C)
|
:0042AD42 0CFF                    or al, FF
:0042AD44 EB43                    jmp 0042AD89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AD02(C)
|
:0042AD46 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042AD49 0FBE511F                movsx edx, byte ptr [ecx+1F]
:0042AD4D 85D2                    test edx, edx
:0042AD4F 7D21                    jge 0042AD72

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042AD51 6A02                    push 00000002
:0042AD53 E863480000              call 0042F5BB
:0042AD58 83C404                  add esp, 00000004
:0042AD5B 6A00                    push 00000000
:0042AD5D 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042AD60 50                      push eax
:0042AD61 E866FBFFFF              call 0042A8CC
:0042AD66 83C408                  add esp, 00000008
:0042AD69 E862480000              call 0042F5D0
:0042AD6E B004                    mov al, 04
:0042AD70 EB17                    jmp 0042AD89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AD4F(C)
|
:0042AD72 6A01                    push 00000001
:0042AD74 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042AD77 E8B4350000              call 0042E330
:0042AD7C 50                      push eax
:0042AD7D B948494B00              mov ecx, 004B4948
:0042AD82 E850D30100              call 004480D7
:0042AD87 B00B                    mov al, 0B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042ACE6(U), :0042AD40(U), :0042AD44(U), :0042AD70(U)
|
:0042AD89 8BE5                    mov esp, ebp
:0042AD8B 5D                      pop ebp
:0042AD8C C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042ACA2   
|
:0042AD8F 55                      push ebp
:0042AD90 8BEC                    mov ebp, esp
:0042AD92 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042AD96 83F812                  cmp eax, 00000012
:0042AD99 7C10                    jl 0042ADAB
:0042AD9B 0FBE4D08                movsx ecx, byte ptr [ebp+08]
:0042AD9F 83F919                  cmp ecx, 00000019
:0042ADA2 7F07                    jg 0042ADAB
:0042ADA4 B801000000              mov eax, 00000001
:0042ADA9 EB2B                    jmp 0042ADD6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AD99(C), :0042ADA2(C)
|
:0042ADAB 0FBE5508                movsx edx, byte ptr [ebp+08]
:0042ADAF 83FA1D                  cmp edx, 0000001D
:0042ADB2 7C10                    jl 0042ADC4
:0042ADB4 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042ADB8 83F827                  cmp eax, 00000027
:0042ADBB 7F07                    jg 0042ADC4
:0042ADBD B801000000              mov eax, 00000001
:0042ADC2 EB12                    jmp 0042ADD6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042ADB2(C), :0042ADBB(C)
|
:0042ADC4 0FBE4D08                movsx ecx, byte ptr [ebp+08]
:0042ADC8 83F939                  cmp ecx, 00000039
:0042ADCB 7507                    jne 0042ADD4
:0042ADCD B801000000              mov eax, 00000001
:0042ADD2 EB02                    jmp 0042ADD6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ADCB(C)
|
:0042ADD4 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042ADA9(U), :0042ADC2(U), :0042ADD2(U)
|
:0042ADD6 5D                      pop ebp
:0042ADD7 C3                      ret



* Referenced by a CALL at Address:
|:0042ACB6   
|
:0042ADD8 55                      push ebp
:0042ADD9 8BEC                    mov ebp, esp
:0042ADDB 83EC10                  sub esp, 00000010
:0042ADDE 56                      push esi
:0042ADDF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042ADE2 E81985FDFF              call 00403300
:0042ADE7 8945F0                  mov dword ptr [ebp-10], eax
:0042ADEA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042ADED E80E85FDFF              call 00403300
:0042ADF2 8945F4                  mov dword ptr [ebp-0C], eax
:0042ADF5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042ADF8 6BC950                  imul ecx, 00000050
:0042ADFB 81C1787F4900            add ecx, 00497F78
:0042AE01 E88AE8FEFF              call 00419690
:0042AE06 8845F8                  mov byte ptr [ebp-08], al
:0042AE09 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042AE0C 6BC950                  imul ecx, 00000050
:0042AE0F 81C1787F4900            add ecx, 00497F78
:0042AE15 E876E8FEFF              call 00419690
:0042AE1A 8845FC                  mov byte ptr [ebp-04], al
:0042AE1D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042AE20 E82B340000              call 0042E250
:0042AE25 50                      push eax
:0042AE26 8A45F8                  mov al, byte ptr [ebp-08]
:0042AE29 50                      push eax
:0042AE2A E85A000000              call 0042AE89
:0042AE2F 83C408                  add esp, 00000008
:0042AE32 8845F8                  mov byte ptr [ebp-08], al
:0042AE35 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042AE38 E813340000              call 0042E250
:0042AE3D 50                      push eax
:0042AE3E 8A4DFC                  mov cl, byte ptr [ebp-04]
:0042AE41 51                      push ecx
:0042AE42 E842000000              call 0042AE89
:0042AE47 83C408                  add esp, 00000008
:0042AE4A 8845FC                  mov byte ptr [ebp-04], al
:0042AE4D 8B55F8                  mov edx, dword ptr [ebp-08]
:0042AE50 81E2FF000000            and edx, 000000FF
:0042AE56 52                      push edx
:0042AE57 E854D50400              call 004783B0
:0042AE5C 83C404                  add esp, 00000004
:0042AE5F 8BC8                    mov ecx, eax
:0042AE61 81E1FF000000            and ecx, 000000FF
:0042AE67 8B45FC                  mov eax, dword ptr [ebp-04]
:0042AE6A 25FF000000              and eax, 000000FF
:0042AE6F 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042AE70 BE03000000              mov esi, 00000003
:0042AE75 F7FE                    idiv esi
:0042AE77 3BC8                    cmp ecx, eax
:0042AE79 7E07                    jle 0042AE82
:0042AE7B B801000000              mov eax, 00000001
:0042AE80 EB02                    jmp 0042AE84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AE79(C)
|
:0042AE82 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AE80(U)
|
:0042AE84 5E                      pop esi
:0042AE85 8BE5                    mov esp, ebp
:0042AE87 5D                      pop ebp
:0042AE88 C3                      ret



* Referenced by a CALL at Addresses:
|:0042AE2A   , :0042AE42   
|
:0042AE89 55                      push ebp
:0042AE8A 8BEC                    mov ebp, esp
:0042AE8C 83EC64                  sub esp, 00000064
:0042AE8F 0FBE450C                movsx eax, byte ptr [ebp+0C]
:0042AE93 8945FC                  mov dword ptr [ebp-04], eax
:0042AE96 837DFC06                cmp dword ptr [ebp-04], 00000006
:0042AE9A 0F8712020000            ja 0042B0B2
:0042AEA0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042AEA3 FF248DB9B04200          jmp dword ptr [4*ecx+0042B0B9]
:0042AEAA 8B5508                  mov edx, dword ptr [ebp+08]
:0042AEAD 81E2FF000000            and edx, 000000FF
:0042AEB3 8955F8                  mov dword ptr [ebp-08], edx
:0042AEB6 DB45F8                  fild dword ptr [ebp-08]
:0042AEB9 DC0D90A04700            fmul qword ptr [0047A090]
:0042AEBF DC1D98A04700            fcomp qword ptr [0047A098]
:0042AEC5 DFE0                    fstsw ax
:0042AEC7 F6C401                  test ah, 01
:0042AECA 7419                    je 0042AEE5
:0042AECC 8B4508                  mov eax, dword ptr [ebp+08]
:0042AECF 25FF000000              and eax, 000000FF
:0042AED4 8945F4                  mov dword ptr [ebp-0C], eax
:0042AED7 DB45F4                  fild dword ptr [ebp-0C]
:0042AEDA DC0D90A04700            fmul qword ptr [0047A090]
:0042AEE0 DD5DEC                  fstp qword ptr [ebp-14]
:0042AEE3 EB0E                    jmp 0042AEF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AECA(C)
|
:0042AEE5 C745EC00000000          mov [ebp-14], 00000000
:0042AEEC C745F000E06F40          mov [ebp-10], 406FE000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AEE3(U)
|
:0042AEF3 DD45EC                  fld qword ptr [ebp-14]
:0042AEF6 E8A54C0400              call 0046FBA0
:0042AEFB E9B5010000              jmp 0042B0B5
:0042AF00 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042AF03 81E1FF000000            and ecx, 000000FF
:0042AF09 894DE8                  mov dword ptr [ebp-18], ecx
:0042AF0C DB45E8                  fild dword ptr [ebp-18]
:0042AF0F DC0DA0A04700            fmul qword ptr [0047A0A0]
:0042AF15 DC1D98A04700            fcomp qword ptr [0047A098]
:0042AF1B DFE0                    fstsw ax
:0042AF1D F6C401                  test ah, 01
:0042AF20 741A                    je 0042AF3C
:0042AF22 8B5508                  mov edx, dword ptr [ebp+08]
:0042AF25 81E2FF000000            and edx, 000000FF
:0042AF2B 8955E4                  mov dword ptr [ebp-1C], edx
:0042AF2E DB45E4                  fild dword ptr [ebp-1C]
:0042AF31 DC0DA0A04700            fmul qword ptr [0047A0A0]
:0042AF37 DD5DDC                  fstp qword ptr [ebp-24]
:0042AF3A EB0E                    jmp 0042AF4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AF20(C)
|
:0042AF3C C745DC00000000          mov [ebp-24], 00000000
:0042AF43 C745E000E06F40          mov [ebp-20], 406FE000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AF3A(U)
|
:0042AF4A DD45DC                  fld qword ptr [ebp-24]
:0042AF4D E84E4C0400              call 0046FBA0
:0042AF52 E95E010000              jmp 0042B0B5
:0042AF57 8B4508                  mov eax, dword ptr [ebp+08]
:0042AF5A 25FF000000              and eax, 000000FF
:0042AF5F 8945D8                  mov dword ptr [ebp-28], eax
:0042AF62 DB45D8                  fild dword ptr [ebp-28]
:0042AF65 DC0DA8A04700            fmul qword ptr [0047A0A8]
:0042AF6B DC1D98A04700            fcomp qword ptr [0047A098]
:0042AF71 DFE0                    fstsw ax
:0042AF73 F6C401                  test ah, 01
:0042AF76 741A                    je 0042AF92
:0042AF78 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042AF7B 81E1FF000000            and ecx, 000000FF
:0042AF81 894DD4                  mov dword ptr [ebp-2C], ecx
:0042AF84 DB45D4                  fild dword ptr [ebp-2C]
:0042AF87 DC0DA8A04700            fmul qword ptr [0047A0A8]
:0042AF8D DD5DCC                  fstp qword ptr [ebp-34]
:0042AF90 EB0E                    jmp 0042AFA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AF76(C)
|
:0042AF92 C745CC00000000          mov [ebp-34], 00000000
:0042AF99 C745D000E06F40          mov [ebp-30], 406FE000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AF90(U)
|
:0042AFA0 DD45CC                  fld qword ptr [ebp-34]
:0042AFA3 E8F84B0400              call 0046FBA0
:0042AFA8 E908010000              jmp 0042B0B5
:0042AFAD 8A4508                  mov al, byte ptr [ebp+08]
:0042AFB0 E900010000              jmp 0042B0B5
:0042AFB5 8B5508                  mov edx, dword ptr [ebp+08]
:0042AFB8 81E2FF000000            and edx, 000000FF
:0042AFBE 8955C8                  mov dword ptr [ebp-38], edx
:0042AFC1 DB45C8                  fild dword ptr [ebp-38]
:0042AFC4 DC0D88A04700            fmul qword ptr [0047A088]
:0042AFCA DC1D98A04700            fcomp qword ptr [0047A098]
:0042AFD0 DFE0                    fstsw ax
:0042AFD2 F6C401                  test ah, 01
:0042AFD5 7419                    je 0042AFF0
:0042AFD7 8B4508                  mov eax, dword ptr [ebp+08]
:0042AFDA 25FF000000              and eax, 000000FF
:0042AFDF 8945C4                  mov dword ptr [ebp-3C], eax
:0042AFE2 DB45C4                  fild dword ptr [ebp-3C]
:0042AFE5 DC0D88A04700            fmul qword ptr [0047A088]
:0042AFEB DD5DBC                  fstp qword ptr [ebp-44]
:0042AFEE EB0E                    jmp 0042AFFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AFD5(C)
|
:0042AFF0 C745BC00000000          mov [ebp-44], 00000000
:0042AFF7 C745C000E06F40          mov [ebp-40], 406FE000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AFEE(U)
|
:0042AFFE DD45BC                  fld qword ptr [ebp-44]
:0042B001 E89A4B0400              call 0046FBA0
:0042B006 E9AA000000              jmp 0042B0B5
:0042B00B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042B00E 81E1FF000000            and ecx, 000000FF
:0042B014 894DB8                  mov dword ptr [ebp-48], ecx
:0042B017 DB45B8                  fild dword ptr [ebp-48]
:0042B01A DC0DB0A04700            fmul qword ptr [0047A0B0]
:0042B020 DC1D98A04700            fcomp qword ptr [0047A098]
:0042B026 DFE0                    fstsw ax
:0042B028 F6C401                  test ah, 01
:0042B02B 741A                    je 0042B047
:0042B02D 8B5508                  mov edx, dword ptr [ebp+08]
:0042B030 81E2FF000000            and edx, 000000FF
:0042B036 8955B4                  mov dword ptr [ebp-4C], edx
:0042B039 DB45B4                  fild dword ptr [ebp-4C]
:0042B03C DC0DB0A04700            fmul qword ptr [0047A0B0]
:0042B042 DD5DAC                  fstp qword ptr [ebp-54]
:0042B045 EB0E                    jmp 0042B055

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B02B(C)
|
:0042B047 C745AC00000000          mov [ebp-54], 00000000
:0042B04E C745B000E06F40          mov [ebp-50], 406FE000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B045(U)
|
:0042B055 DD45AC                  fld qword ptr [ebp-54]
:0042B058 E8434B0400              call 0046FBA0
:0042B05D EB56                    jmp 0042B0B5
:0042B05F 8B4508                  mov eax, dword ptr [ebp+08]
:0042B062 25FF000000              and eax, 000000FF
:0042B067 8945A8                  mov dword ptr [ebp-58], eax
:0042B06A DB45A8                  fild dword ptr [ebp-58]
:0042B06D DC0DB8A04700            fmul qword ptr [0047A0B8]
:0042B073 DC1D98A04700            fcomp qword ptr [0047A098]
:0042B079 DFE0                    fstsw ax
:0042B07B F6C401                  test ah, 01
:0042B07E 741A                    je 0042B09A
:0042B080 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042B083 81E1FF000000            and ecx, 000000FF
:0042B089 894DA4                  mov dword ptr [ebp-5C], ecx
:0042B08C DB45A4                  fild dword ptr [ebp-5C]
:0042B08F DC0DB8A04700            fmul qword ptr [0047A0B8]
:0042B095 DD5D9C                  fstp qword ptr [ebp-64]
:0042B098 EB0E                    jmp 0042B0A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B07E(C)
|
:0042B09A C7459C00000000          mov [ebp-64], 00000000
:0042B0A1 C745A000E06F40          mov [ebp-60], 406FE000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B098(U)
|
:0042B0A8 DD459C                  fld qword ptr [ebp-64]
:0042B0AB E8F04A0400              call 0046FBA0
:0042B0B0 EB03                    jmp 0042B0B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042AE9A(C)
|
:0042B0B2 8A4508                  mov al, byte ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042AEFB(U), :0042AF52(U), :0042AFA8(U), :0042AFB0(U), :0042B006(U)
|:0042B05D(U), :0042B0B0(U)
|
:0042B0B5 8BE5                    mov esp, ebp
:0042B0B7 5D                      pop ebp
:0042B0B8 C3                      ret



:0042B0B9 AAAE4200                DWORD 0042AEAA
:0042B0BD 00AF4200                DWORD 0042AF00
:0042B0C1 57AF4200                DWORD 0042AF57
:0042B0C5 ADAF4200                DWORD 0042AFAD
:0042B0C9 B5AF4200                DWORD 0042AFB5
:0042B0CD 0BB04200                DWORD 0042B00B
:0042B0D1 5FB04200                DWORD 0042B05F



* Referenced by a CALL at Address:
|:0042ACF3   
|
:0042B0D5 55                      push ebp
:0042B0D6 8BEC                    mov ebp, esp
:0042B0D8 83EC14                  sub esp, 00000014
:0042B0DB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042B0DE E81D82FDFF              call 00403300
:0042B0E3 8945F4                  mov dword ptr [ebp-0C], eax
:0042B0E6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B0E9 E81282FDFF              call 00403300
:0042B0EE 8945F8                  mov dword ptr [ebp-08], eax
:0042B0F1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042B0F4 6BC950                  imul ecx, 00000050
:0042B0F7 81C1787F4900            add ecx, 00497F78
:0042B0FD E84C6DFDFF              call 00401E4E
:0042B102 8945FC                  mov dword ptr [ebp-04], eax
:0042B105 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042B108 E8E3300000              call 0042E1F0
:0042B10D 85C0                    test eax, eax
:0042B10F 7523                    jne 0042B134
:0042B111 68FF000000              push 000000FF
:0042B116 DB45FC                  fild dword ptr [ebp-04]
:0042B119 DC0DC0A04700            fmul qword ptr [0047A0C0]
:0042B11F E87C4A0400              call 0046FBA0
:0042B124 50                      push eax
:0042B125 6A00                    push 00000000
:0042B127 E87D87FFFF              call 004238A9
:0042B12C 83C40C                  add esp, 0000000C
:0042B12F 8945FC                  mov dword ptr [ebp-04], eax
:0042B132 EB21                    jmp 0042B155

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B10F(C)
|
:0042B134 68FF000000              push 000000FF
:0042B139 DB45FC                  fild dword ptr [ebp-04]
:0042B13C DC0D88A04700            fmul qword ptr [0047A088]
:0042B142 E8594A0400              call 0046FBA0
:0042B147 50                      push eax
:0042B148 6A00                    push 00000000
:0042B14A E85A87FFFF              call 004238A9
:0042B14F 83C40C                  add esp, 0000000C
:0042B152 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B132(U)
|
:0042B155 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B158 6BC950                  imul ecx, 00000050
:0042B15B 81C1787F4900            add ecx, 00497F78
:0042B161 E8546DFDFF              call 00401EBA
:0042B166 25FF000000              and eax, 000000FF
:0042B16B 8945EC                  mov dword ptr [ebp-14], eax
:0042B16E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B171 E87A300000              call 0042E1F0
:0042B176 85C0                    test eax, eax
:0042B178 7523                    jne 0042B19D
:0042B17A 68FF000000              push 000000FF
:0042B17F DB45EC                  fild dword ptr [ebp-14]
:0042B182 DC0DC0A04700            fmul qword ptr [0047A0C0]
:0042B188 E8134A0400              call 0046FBA0
:0042B18D 50                      push eax
:0042B18E 6A00                    push 00000000
:0042B190 E81487FFFF              call 004238A9
:0042B195 83C40C                  add esp, 0000000C
:0042B198 8945EC                  mov dword ptr [ebp-14], eax
:0042B19B EB21                    jmp 0042B1BE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B178(C)
|
:0042B19D 68FF000000              push 000000FF
:0042B1A2 DB45EC                  fild dword ptr [ebp-14]
:0042B1A5 DC0D88A04700            fmul qword ptr [0047A088]
:0042B1AB E8F0490400              call 0046FBA0
:0042B1B0 50                      push eax
:0042B1B1 6A00                    push 00000000
:0042B1B3 E8F186FFFF              call 004238A9
:0042B1B8 83C40C                  add esp, 0000000C
:0042B1BB 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B19B(U)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B1BE C745F00A000000          mov [ebp-10], 0000000A
:0042B1C5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B1C8 6BC950                  imul ecx, 00000050
:0042B1CB 81C1787F4900            add ecx, 00497F78
:0042B1D1 E8CA7FFDFF              call 004031A0
:0042B1D6 25FF000000              and eax, 000000FF
:0042B1DB 85C0                    test eax, eax
:0042B1DD 741B                    je 0042B1FA
:0042B1DF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B1E2 6BC950                  imul ecx, 00000050
:0042B1E5 81C1787F4900            add ecx, 00497F78
:0042B1EB E8B07FFDFF              call 004031A0
:0042B1F0 25FF000000              and eax, 000000FF
:0042B1F5 83F801                  cmp eax, 00000001
:0042B1F8 7509                    jne 0042B203

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B1DD(C)
|
:0042B1FA 8B45F0                  mov eax, dword ptr [ebp-10]
:0042B1FD 83E805                  sub eax, 00000005
:0042B200 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B1F8(C)
|
:0042B203 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042B206 51                      push ecx
:0042B207 E8A4D10400              call 004783B0
:0042B20C 83C404                  add esp, 00000004
:0042B20F 8BC8                    mov ecx, eax
:0042B211 8B45EC                  mov eax, dword ptr [ebp-14]
:0042B214 99                      cdq
:0042B215 F77DF0                  idiv [ebp-10]
:0042B218 3BC8                    cmp ecx, eax
:0042B21A 7D04                    jge 0042B220
:0042B21C 33C0                    xor eax, eax
:0042B21E EB05                    jmp 0042B225

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B21A(C)
|
:0042B220 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B21E(U)
|
:0042B225 8BE5                    mov esp, ebp
:0042B227 5D                      pop ebp
:0042B228 C3                      ret



* Referenced by a CALL at Address:
|:0042AD38   
|
:0042B229 55                      push ebp
:0042B22A 8BEC                    mov ebp, esp
:0042B22C 83EC40                  sub esp, 00000040
:0042B22F 6A40                    push 00000040
:0042B231 6A00                    push 00000000
:0042B233 8D45C0                  lea eax, dword ptr [ebp-40]
:0042B236 50                      push eax
:0042B237 E894480400              call 0046FAD0
:0042B23C 83C40C                  add esp, 0000000C
:0042B23F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B242 E8B980FDFF              call 00403300
:0042B247 8BC8                    mov ecx, eax
:0042B249 6BC950                  imul ecx, 00000050
:0042B24C 81C1787F4900            add ecx, 00497F78
:0042B252 E8AD7EFDFF              call 00403104
:0042B257 50                      push eax

* Possible StringData Ref from Data Obj ->"%sŤF"
                                  |
:0042B258 6898D24700              push 0047D298
:0042B25D 8D4DC0                  lea ecx, dword ptr [ebp-40]
:0042B260 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042B261 FF1504D74B00            Call dword ptr [004BD704]
:0042B267 83C40C                  add esp, 0000000C
:0042B26A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B26D E89E300000              call 0042E310
:0042B272 25FF000000              and eax, 000000FF
:0042B277 3D86000000              cmp eax, 00000086
:0042B27C 750F                    jne 0042B28D
:0042B27E 6885000000              push 00000085
:0042B283 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B286 E825300000              call 0042E2B0
:0042B28B EB35                    jmp 0042B2C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B27C(C)
|
:0042B28D 6A01                    push 00000001
:0042B28F E849000000              call 0042B2DD
:0042B294 83C404                  add esp, 00000004
:0042B297 83F805                  cmp eax, 00000005
:0042B29A 7F0F                    jg 0042B2AB

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042B29C 6A03                    push 00000003
:0042B29E E80DD10400              call 004783B0
:0042B2A3 83C404                  add esp, 00000004
:0042B2A6 83F801                  cmp eax, 00000001
:0042B2A9 7217                    jb 0042B2C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B29A(C)
|
:0042B2AB 6885000000              push 00000085
:0042B2B0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B2B3 E8F82F0000              call 0042E2B0
:0042B2B8 6A00                    push 00000000
:0042B2BA E81E000000              call 0042B2DD
:0042B2BF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B28B(U), :0042B2A9(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042B2C2 6A08                    push 00000008
:0042B2C4 8D55C0                  lea edx, dword ptr [ebp-40]
:0042B2C7 52                      push edx
:0042B2C8 8B4508                  mov eax, dword ptr [ebp+08]
:0042B2CB 50                      push eax
:0042B2CC E89B87FFFF              call 00423A6C
:0042B2D1 83C40C                  add esp, 0000000C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042B2D4 B807000000              mov eax, 00000007
:0042B2D9 8BE5                    mov esp, ebp
:0042B2DB 5D                      pop ebp
:0042B2DC C3                      ret



* Referenced by a CALL at Addresses:
|:0042B28F   , :0042B2BA   , :0042B460   
|
:0042B2DD 55                      push ebp
:0042B2DE 8BEC                    mov ebp, esp
:0042B2E0 837D0800                cmp dword ptr [ebp+08], 00000000
:0042B2E4 7414                    je 0042B2FA
:0042B2E6 A190474900              mov eax, dword ptr [00494790]
:0042B2EB 83C001                  add eax, 00000001
:0042B2EE A390474900              mov dword ptr [00494790], eax
:0042B2F3 A190474900              mov eax, dword ptr [00494790]
:0042B2F8 EB0C                    jmp 0042B306

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B2E4(C)
|
:0042B2FA C7059047490000000000    mov dword ptr [00494790], 00000000
:0042B304 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B2F8(U)
|
:0042B306 5D                      pop ebp
:0042B307 C3                      ret



* Referenced by a CALL at Addresses:
|:0042015D   , :0042023D   
|
:0042B308 55                      push ebp
:0042B309 8BEC                    mov ebp, esp
:0042B30B 83EC0C                  sub esp, 0000000C
:0042B30E 894DF4                  mov dword ptr [ebp-0C], ecx
:0042B311 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042B314 50                      push eax
:0042B315 E87585FFFF              call 0042388F
:0042B31A 83C404                  add esp, 00000004
:0042B31D 8945FC                  mov dword ptr [ebp-04], eax
:0042B320 C745F800000000          mov [ebp-08], 00000000
:0042B327 EB09                    jmp 0042B332

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B353(U)
|
:0042B329 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B32C 83C101                  add ecx, 00000001
:0042B32F 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B327(U)
|
:0042B332 837DF803                cmp dword ptr [ebp-08], 00000003
:0042B336 7D1D                    jge 0042B355

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042B338 6A02                    push 00000002
:0042B33A E87C420000              call 0042F5BB
:0042B33F 83C404                  add esp, 00000004
:0042B342 8B55F8                  mov edx, dword ptr [ebp-08]
:0042B345 52                      push edx
:0042B346 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042B349 E854E1FFFF              call 004294A2
:0042B34E E87D420000              call 0042F5D0
:0042B353 EBD4                    jmp 0042B329

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B336(C)
|
:0042B355 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042B358 0FBE481F                movsx ecx, byte ptr [eax+1F]
:0042B35C 85C9                    test ecx, ecx
:0042B35E 7D04                    jge 0042B364
:0042B360 B005                    mov al, 05
:0042B362 EB52                    jmp 0042B3B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B35E(C)
|
:0042B364 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042B367 33C0                    xor eax, eax
:0042B369 8A421E                  mov al, byte ptr [edx+1E]
:0042B36C 3D85000000              cmp eax, 00000085
:0042B371 7C0C                    jl 0042B37F
:0042B373 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042B376 0FBE511F                movsx edx, byte ptr [ecx+1F]
:0042B37A 83FA0D                  cmp edx, 0000000D
:0042B37D 7504                    jne 0042B383

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B371(C)
|
:0042B37F B00E                    mov al, 0E
:0042B381 EB33                    jmp 0042B3B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B37D(C)
|
:0042B383 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042B386 33C9                    xor ecx, ecx
:0042B388 8A481E                  mov cl, byte ptr [eax+1E]
:0042B38B 81F986000000            cmp ecx, 00000086
:0042B391 740F                    je 0042B3A2
:0042B393 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042B396 33C0                    xor eax, eax
:0042B398 8A421E                  mov al, byte ptr [edx+1E]
:0042B39B 3D87000000              cmp eax, 00000087
:0042B3A0 7512                    jne 0042B3B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B391(C)
|
:0042B3A2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042B3A5 51                      push ecx
:0042B3A6 8B5508                  mov edx, dword ptr [ebp+08]
:0042B3A9 52                      push edx
:0042B3AA E80D000000              call 0042B3BC
:0042B3AF 83C408                  add esp, 00000008
:0042B3B2 EB02                    jmp 0042B3B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B3A0(C)
|
:0042B3B4 B016                    mov al, 16

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B362(U), :0042B381(U), :0042B3B2(U)
|
:0042B3B6 8BE5                    mov esp, ebp
:0042B3B8 5D                      pop ebp
:0042B3B9 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042B3AA   
|
:0042B3BC 55                      push ebp
:0042B3BD 8BEC                    mov ebp, esp
:0042B3BF 83EC0C                  sub esp, 0000000C
:0042B3C2 8B450C                  mov eax, dword ptr [ebp+0C]
:0042B3C5 50                      push eax
:0042B3C6 E8C484FFFF              call 0042388F
:0042B3CB 83C404                  add esp, 00000004
:0042B3CE 8945F8                  mov dword ptr [ebp-08], eax
:0042B3D1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B3D4 E845180000              call 0042CC1E
:0042B3D9 8945F4                  mov dword ptr [ebp-0C], eax
:0042B3DC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B3DF E81C7FFDFF              call 00403300
:0042B3E4 50                      push eax
:0042B3E5 E867060000              call 0042BA51
:0042B3EA 83C404                  add esp, 00000004
:0042B3ED 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042B3F0 03C8                    add ecx, eax
:0042B3F2 894DF4                  mov dword ptr [ebp-0C], ecx
:0042B3F5 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042B3F8 52                      push edx
:0042B3F9 8B4508                  mov eax, dword ptr [ebp+08]
:0042B3FC 50                      push eax
:0042B3FD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B400 E857EFFFFF              call 0042A35C
:0042B405 8945FC                  mov dword ptr [ebp-04], eax
:0042B408 817D0C38464900          cmp dword ptr [ebp+0C], 00494638
:0042B40F 7516                    jne 0042B427
:0042B411 837DFC00                cmp dword ptr [ebp-04], 00000000
:0042B415 7410                    je 0042B427
:0042B417 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042B41A 51                      push ecx
:0042B41B 8B5508                  mov edx, dword ptr [ebp+08]
:0042B41E 52                      push edx
:0042B41F E88F000000              call 0042B4B3
:0042B424 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B40F(C), :0042B415(C)
|
:0042B427 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B42A E8E12E0000              call 0042E310
:0042B42F 25FF000000              and eax, 000000FF
:0042B434 3D86000000              cmp eax, 00000086
:0042B439 750F                    jne 0042B44A
:0042B43B 6885000000              push 00000085
:0042B440 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B443 E8682E0000              call 0042E2B0
:0042B448 EB3F                    jmp 0042B489

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B439(C)
|
:0042B44A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B44D E8BE2E0000              call 0042E310
:0042B452 25FF000000              and eax, 000000FF
:0042B457 3D87000000              cmp eax, 00000087
:0042B45C 752B                    jne 0042B489
:0042B45E 6A01                    push 00000001
:0042B460 E878FEFFFF              call 0042B2DD
:0042B465 83C404                  add esp, 00000004
:0042B468 83F805                  cmp eax, 00000005
:0042B46B 7F0F                    jg 0042B47C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042B46D 6A03                    push 00000003
:0042B46F E83CCF0400              call 004783B0
:0042B474 83C404                  add esp, 00000004
:0042B477 83F801                  cmp eax, 00000001
:0042B47A 720D                    jb 0042B489

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B46B(C)
|
:0042B47C 6885000000              push 00000085
:0042B481 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B484 E8272E0000              call 0042E2B0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B448(U), :0042B45C(C), :0042B47A(C)
|
:0042B489 6A00                    push 00000000
:0042B48B 8B4508                  mov eax, dword ptr [ebp+08]
:0042B48E 50                      push eax
:0042B48F E8C64FFFFF              call 0042045A
:0042B494 83C408                  add esp, 00000008
:0042B497 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042B49A E841B50000              call 004369E0
:0042B49F 85C0                    test eax, eax
:0042B4A1 7607                    jbe 0042B4AA

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042B4A3 B807000000              mov eax, 00000007
:0042B4A8 EB05                    jmp 0042B4AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B4A1(C)
|
:0042B4AA B816000000              mov eax, 00000016

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B4A8(U)
|
:0042B4AF 8BE5                    mov esp, ebp
:0042B4B1 5D                      pop ebp
:0042B4B2 C3                      ret



* Referenced by a CALL at Addresses:
|:0042B41F   , :0042C9F4   
|
:0042B4B3 55                      push ebp
:0042B4B4 8BEC                    mov ebp, esp
:0042B4B6 81EC8C000000            sub esp, 0000008C
:0042B4BC B938464900              mov ecx, 00494638
:0042B4C1 E83A7EFDFF              call 00403300
:0042B4C6 8945DC                  mov dword ptr [ebp-24], eax
:0042B4C9 B9D0454900              mov ecx, 004945D0
:0042B4CE E82D7EFDFF              call 00403300
:0042B4D3 8945FC                  mov dword ptr [ebp-04], eax
:0042B4D6 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042B4D9 6BC950                  imul ecx, 00000050
:0042B4DC 81C1787F4900            add ecx, 00497F78
:0042B4E2 E8B949FEFF              call 0040FEA0
:0042B4E7 25FF000000              and eax, 000000FF
:0042B4EC 8945E0                  mov dword ptr [ebp-20], eax
:0042B4EF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042B4F2 6BC950                  imul ecx, 00000050
:0042B4F5 81C1787F4900            add ecx, 00497F78
:0042B4FB E8A049FEFF              call 0040FEA0
:0042B500 25FF000000              and eax, 000000FF
:0042B505 8945E4                  mov dword ptr [ebp-1C], eax
:0042B508 8B45E4                  mov eax, dword ptr [ebp-1C]
:0042B50B 50                      push eax
:0042B50C 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0042B50F 51                      push ecx
:0042B510 8B550C                  mov edx, dword ptr [ebp+0C]
:0042B513 52                      push edx
:0042B514 E8BE010000              call 0042B6D7
:0042B519 83C40C                  add esp, 0000000C
:0042B51C 8945D4                  mov dword ptr [ebp-2C], eax
:0042B51F C745D800000000          mov [ebp-28], 00000000
:0042B526 EB09                    jmp 0042B531

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B553(U)
|
:0042B528 8B45D8                  mov eax, dword ptr [ebp-28]
:0042B52B 83C001                  add eax, 00000001
:0042B52E 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B526(U)
|
:0042B531 837DD808                cmp dword ptr [ebp-28], 00000008
:0042B535 7D1E                    jge 0042B555
:0042B537 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0042B53A 51                      push ecx
:0042B53B 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042B53E 6BC950                  imul ecx, 00000050
:0042B541 81C1787F4900            add ecx, 00497F78
:0042B547 E8EE5CFDFF              call 0040123A
:0042B54C 8B55D8                  mov edx, dword ptr [ebp-28]
:0042B54F 894495B4                mov dword ptr [ebp+4*edx-4C], eax
:0042B553 EBD3                    jmp 0042B528

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B535(C)
|
:0042B555 6A00                    push 00000000
:0042B557 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042B55A 6BC950                  imul ecx, 00000050
:0042B55D 81C1787F4900            add ecx, 00497F78
:0042B563 E878290000              call 0042DEE0
:0042B568 25FF000000              and eax, 000000FF
:0042B56D 0345D4                  add eax, dword ptr [ebp-2C]
:0042B570 50                      push eax
:0042B571 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042B574 6BC950                  imul ecx, 00000050
:0042B577 81C1787F4900            add ecx, 00497F78
:0042B57D E8286FFDFF              call 004024AA
:0042B582 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042B585 6BC950                  imul ecx, 00000050
:0042B588 81C1787F4900            add ecx, 00497F78
:0042B58E E80D49FEFF              call 0040FEA0
:0042B593 25FF000000              and eax, 000000FF
:0042B598 2B45E0                  sub eax, dword ptr [ebp-20]
:0042B59B 8945E8                  mov dword ptr [ebp-18], eax
:0042B59E 837DE800                cmp dword ptr [ebp-18], 00000000
:0042B5A2 0F8EC8000000            jle 0042B670
:0042B5A8 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042B5AB 6BC950                  imul ecx, 00000050
:0042B5AE 81C1787F4900            add ecx, 00497F78
:0042B5B4 E83168FDFF              call 00401DEA
:0042B5B9 50                      push eax
:0042B5BA B938464900              mov ecx, 00494638
:0042B5BF E81D92FFFF              call 004247E1
:0042B5C4 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042B5C7 6BC950                  imul ecx, 00000050
:0042B5CA 81C1787F4900            add ecx, 00497F78
:0042B5D0 E84668FDFF              call 00401E1B
:0042B5D5 50                      push eax
:0042B5D6 B938464900              mov ecx, 00494638
:0042B5DB E85292FFFF              call 00424832
:0042B5E0 8B4508                  mov eax, dword ptr [ebp+08]
:0042B5E3 50                      push eax
:0042B5E4 B938464900              mov ecx, 00494638
:0042B5E9 E81E94FFFF              call 00424A0C
:0042B5EE 6A00                    push 00000000
:0042B5F0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042B5F3 51                      push ecx
:0042B5F4 E8614EFFFF              call 0042045A
:0042B5F9 83C408                  add esp, 00000008
:0042B5FC 6A40                    push 00000040
:0042B5FE 6A00                    push 00000000
:0042B600 8D9574FFFFFF            lea edx, dword ptr [ebp+FFFFFF74]
:0042B606 52                      push edx
:0042B607 E8C4440400              call 0046FAD0
:0042B60C 83C40C                  add esp, 0000000C
:0042B60F B938464900              mov ecx, 00494638
:0042B614 E8E77CFDFF              call 00403300
:0042B619 8BC8                    mov ecx, eax
:0042B61B 6BC950                  imul ecx, 00000050
:0042B61E 81C1787F4900            add ecx, 00497F78
:0042B624 E8DB7AFDFF              call 00403104
:0042B629 50                      push eax

* Possible StringData Ref from Data Obj ->"%sŤWɤFC"
                                  |
:0042B62A 68A8D24700              push 0047D2A8
:0042B62F 8D8574FFFFFF            lea eax, dword ptr [ebp+FFFFFF74]
:0042B635 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042B636 FF1504D74B00            Call dword ptr [004BD704]
:0042B63C 83C40C                  add esp, 0000000C
:0042B63F 6A00                    push 00000000
:0042B641 8D8D74FFFFFF            lea ecx, dword ptr [ebp+FFFFFF74]
:0042B647 51                      push ecx
:0042B648 8B5508                  mov edx, dword ptr [ebp+08]
:0042B64B 52                      push edx
:0042B64C E81B84FFFF              call 00423A6C
:0042B651 83C40C                  add esp, 0000000C
:0042B654 8D45B4                  lea eax, dword ptr [ebp-4C]
:0042B657 50                      push eax
:0042B658 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042B65B 51                      push ecx
:0042B65C 8B55E0                  mov edx, dword ptr [ebp-20]
:0042B65F 52                      push edx
:0042B660 8B45DC                  mov eax, dword ptr [ebp-24]
:0042B663 50                      push eax
:0042B664 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042B667 51                      push ecx
:0042B668 E889010000              call 0042B7F6
:0042B66D 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B5A2(C)
|
:0042B670 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0042B673 6BC950                  imul ecx, 00000050
:0042B676 81C1787F4900            add ecx, 00497F78
:0042B67C E85F280000              call 0042DEE0
:0042B681 25FF000000              and eax, 000000FF
:0042B686 8945D4                  mov dword ptr [ebp-2C], eax
:0042B689 6A00                    push 00000000
:0042B68B 8B55D4                  mov edx, dword ptr [ebp-2C]
:0042B68E 52                      push edx

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0042B68F 6802040000              push 00000402
:0042B694 68D9040000              push 000004D9
:0042B699 8B4508                  mov eax, dword ptr [ebp+08]
:0042B69C 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0042B69D FF15D4D54B00            Call dword ptr [004BD5D4]
:0042B6A3 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0042B6A6 51                      push ecx

* Possible StringData Ref from Data Obj ->"%d/100"
                                  |
:0042B6A7 68B8D24700              push 0047D2B8
:0042B6AC 8D55EC                  lea edx, dword ptr [ebp-14]
:0042B6AF 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042B6B0 FF1504D74B00            Call dword ptr [004BD704]
:0042B6B6 83C40C                  add esp, 0000000C
:0042B6B9 8D45EC                  lea eax, dword ptr [ebp-14]
:0042B6BC 50                      push eax
:0042B6BD 68DF040000              push 000004DF
:0042B6C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042B6C5 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042B6C6 FF1510D64B00            Call dword ptr [004BD610]
:0042B6CC 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0042B6CD FF1514D64B00            Call dword ptr [004BD614]
:0042B6D3 8BE5                    mov esp, ebp
:0042B6D5 5D                      pop ebp
:0042B6D6 C3                      ret



* Referenced by a CALL at Address:
|:0042B514   
|
:0042B6D7 55                      push ebp
:0042B6D8 8BEC                    mov ebp, esp
:0042B6DA 83EC08                  sub esp, 00000008
:0042B6DD 817D08FFFF0000          cmp dword ptr [ebp+08], 0000FFFF
:0042B6E4 750A                    jne 0042B6F0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0042B6E6 B814000000              mov eax, 00000014
:0042B6EB E902010000              jmp 0042B7F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B6E4(C)
|
:0042B6F0 837D0800                cmp dword ptr [ebp+08], 00000000
:0042B6F4 747B                    je 0042B771
:0042B6F6 8B4510                  mov eax, dword ptr [ebp+10]
:0042B6F9 83E805                  sub eax, 00000005
:0042B6FC 39450C                  cmp dword ptr [ebp+0C], eax
:0042B6FF 7F09                    jg 0042B70A

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042B701 C745FC08000000          mov [ebp-04], 00000008
:0042B708 EB1E                    jmp 0042B728

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B6FF(C)
|
:0042B70A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B70D 3B4D10                  cmp ecx, dword ptr [ebp+10]
:0042B710 7E09                    jle 0042B71B

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042B712 C745FC02000000          mov [ebp-04], 00000002
:0042B719 EB0D                    jmp 0042B728

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B710(C)
|
:0042B71B 8B5510                  mov edx, dword ptr [ebp+10]
:0042B71E 2B550C                  sub edx, dword ptr [ebp+0C]
:0042B721 8D441203                lea eax, dword ptr [edx+edx+03]
:0042B725 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B708(U), :0042B719(U)
|
:0042B728 B938464900              mov ecx, 00494638
:0042B72D E8DE2B0000              call 0042E310
:0042B732 25FF000000              and eax, 000000FF
:0042B737 3D86000000              cmp eax, 00000086
:0042B73C 750D                    jne 0042B74B
:0042B73E 8B45FC                  mov eax, dword ptr [ebp-04]
:0042B741 99                      cdq
:0042B742 2BC2                    sub eax, edx
:0042B744 D1F8                    sar eax, 1
:0042B746 8945FC                  mov dword ptr [ebp-04], eax
:0042B749 EB24                    jmp 0042B76F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B73C(C)
|
:0042B74B B938464900              mov ecx, 00494638
:0042B750 E8BB2B0000              call 0042E310
:0042B755 25FF000000              and eax, 000000FF
:0042B75A 3D87000000              cmp eax, 00000087
:0042B75F 750E                    jne 0042B76F
:0042B761 8B45FC                  mov eax, dword ptr [ebp-04]
:0042B764 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042B765 B903000000              mov ecx, 00000003
:0042B76A F7F9                    idiv ecx
:0042B76C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B749(U), :0042B75F(C)
|
:0042B76F EB63                    jmp 0042B7D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B6F4(C)
|
:0042B771 B928474900              mov ecx, 00494728
:0042B776 E8052D0000              call 0042E480
:0042B77B 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B780 BA0A000000              mov edx, 0000000A
:0042B785 2BD0                    sub edx, eax
:0042B787 D1E2                    shl edx, 1
:0042B789 85D2                    test edx, edx
:0042B78B 7D09                    jge 0042B796
:0042B78D C745F800000000          mov [ebp-08], 00000000
:0042B794 EB1B                    jmp 0042B7B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B78B(C)
|
:0042B796 B928474900              mov ecx, 00494728
:0042B79B E8E02C0000              call 0042E480
:0042B7A0 25FF000000              and eax, 000000FF

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042B7A5 B90A000000              mov ecx, 0000000A
:0042B7AA 2BC8                    sub ecx, eax
:0042B7AC D1E1                    shl ecx, 1
:0042B7AE 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B794(U)
|
:0042B7B1 8B55F8                  mov edx, dword ptr [ebp-08]
:0042B7B4 83C210                  add edx, 00000010
:0042B7B7 8955FC                  mov dword ptr [ebp-04], edx
:0042B7BA B938464900              mov ecx, 00494638
:0042B7BF E86C2B0000              call 0042E330
:0042B7C4 0FBEC0                  movsx eax, al
:0042B7C7 85C0                    test eax, eax
:0042B7C9 7C09                    jl 0042B7D4
:0042B7CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042B7CE 83C110                  add ecx, 00000010
:0042B7D1 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B76F(U), :0042B7C9(C)
|
:0042B7D4 B938464900              mov ecx, 00494638
:0042B7D9 E8522B0000              call 0042E330
:0042B7DE 0FBED0                  movsx edx, al
:0042B7E1 83FA07                  cmp edx, 00000007
:0042B7E4 7509                    jne 0042B7EF
:0042B7E6 8B45FC                  mov eax, dword ptr [ebp-04]
:0042B7E9 0345FC                  add eax, dword ptr [ebp-04]
:0042B7EC 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B7E4(C)
|
:0042B7EF 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B6EB(U)
|
:0042B7F2 8BE5                    mov esp, ebp
:0042B7F4 5D                      pop ebp
:0042B7F5 C3                      ret



* Referenced by a CALL at Address:
|:0042B668   
|
:0042B7F6 55                      push ebp
:0042B7F7 8BEC                    mov ebp, esp
:0042B7F9 81EC54020000            sub esp, 00000254
:0042B7FF 6A40                    push 00000040
:0042B801 6A00                    push 00000000
:0042B803 8D85B8FDFFFF            lea eax, dword ptr [ebp+FFFFFDB8]
:0042B809 50                      push eax
:0042B80A E8C1420400              call 0046FAD0
:0042B80F 83C40C                  add esp, 0000000C
:0042B812 6808020000              push 00000208
:0042B817 6A00                    push 00000000
:0042B819 8D8DF8FDFFFF            lea ecx, dword ptr [ebp+FFFFFDF8]
:0042B81F 51                      push ecx
:0042B820 E8AB420400              call 0046FAD0
:0042B825 83C40C                  add esp, 0000000C
:0042B828 817D0CC8000000          cmp dword ptr [ebp+0C], 000000C8
:0042B82F 7605                    jbe 0042B836
:0042B831 E917020000              jmp 0042BA4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B82F(C)
|
:0042B836 8B5510                  mov edx, dword ptr [ebp+10]
:0042B839 8995B4FDFFFF            mov dword ptr [ebp+FFFFFDB4], edx
:0042B83F EB0F                    jmp 0042B850

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BA48(U)
|
:0042B841 8B85B4FDFFFF            mov eax, dword ptr [ebp+FFFFFDB4]
:0042B847 83C001                  add eax, 00000001
:0042B84A 8985B4FDFFFF            mov dword ptr [ebp+FFFFFDB4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B83F(U)
|
:0042B850 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042B853 034D14                  add ecx, dword ptr [ebp+14]
:0042B856 398DB4FDFFFF            cmp dword ptr [ebp+FFFFFDB4], ecx
:0042B85C 0F8DEB010000            jnl 0042BA4D
:0042B862 83BDB4FDFFFF63          cmp dword ptr [ebp+FFFFFDB4], 00000063
:0042B869 7205                    jb 0042B870
:0042B86B E9DD010000              jmp 0042BA4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B869(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042B870 6A05                    push 00000005
:0042B872 B9F8544B00              mov ecx, 004B54F8
:0042B877 E89EDC0300              call 0046951A
:0042B87C C685F8FDFFFF00          mov byte ptr [ebp+FFFFFDF8], 00
:0042B883 6A40                    push 00000040
:0042B885 6A00                    push 00000000
:0042B887 8D95B8FDFFFF            lea edx, dword ptr [ebp+FFFFFDB8]
:0042B88D 52                      push edx
:0042B88E E83D420400              call 0046FAD0
:0042B893 83C40C                  add esp, 0000000C
:0042B896 8B85B4FDFFFF            mov eax, dword ptr [ebp+FFFFFDB4]
:0042B89C 83C001                  add eax, 00000001
:0042B89F 50                      push eax
:0042B8A0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B8A3 6BC950                  imul ecx, 00000050
:0042B8A6 81C1787F4900            add ecx, 00497F78
:0042B8AC E85378FDFF              call 00403104
:0042B8B1 50                      push eax

* Possible StringData Ref from Data Obj ->"%sŦ%uFI
"
                                  |
:0042B8B2 68C0D24700              push 0047D2C0
:0042B8B7 8D8DB8FDFFFF            lea ecx, dword ptr [ebp+FFFFFDB8]
:0042B8BD 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042B8BE FF1504D74B00            Call dword ptr [004BD704]
:0042B8C4 83C410                  add esp, 00000010
:0042B8C7 8D95B8FDFFFF            lea edx, dword ptr [ebp+FFFFFDB8]
:0042B8CD 52                      push edx
:0042B8CE 8D85F8FDFFFF            lea eax, dword ptr [ebp+FFFFFDF8]
:0042B8D4 50                      push eax
:0042B8D5 E856CC0400              call 00478530
:0042B8DA 83C408                  add esp, 00000008
:0042B8DD C785ACFDFFFF00000000    mov dword ptr [ebp+FFFFFDAC], 00000000
:0042B8E7 EB0F                    jmp 0042B8F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B972(U)
|
:0042B8E9 8B8DACFDFFFF            mov ecx, dword ptr [ebp+FFFFFDAC]
:0042B8EF 83C101                  add ecx, 00000001
:0042B8F2 898DACFDFFFF            mov dword ptr [ebp+FFFFFDAC], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B8E7(U)
|
:0042B8F8 83BDACFDFFFF08          cmp dword ptr [ebp+FFFFFDAC], 00000008
:0042B8FF 7D76                    jge 0042B977
:0042B901 6A40                    push 00000040
:0042B903 6A00                    push 00000000
:0042B905 8D95B8FDFFFF            lea edx, dword ptr [ebp+FFFFFDB8]
:0042B90B 52                      push edx
:0042B90C E8BF410400              call 0046FAD0
:0042B911 83C40C                  add esp, 0000000C
:0042B914 8B85ACFDFFFF            mov eax, dword ptr [ebp+FFFFFDAC]
:0042B91A 50                      push eax
:0042B91B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B91E 6BC950                  imul ecx, 00000050
:0042B921 81C1787F4900            add ecx, 00497F78
:0042B927 E80E59FDFF              call 0040123A
:0042B92C 8B8DACFDFFFF            mov ecx, dword ptr [ebp+FFFFFDAC]
:0042B932 8B5518                  mov edx, dword ptr [ebp+18]
:0042B935 2B048A                  sub eax, dword ptr [edx+4*ecx]
:0042B938 50                      push eax
:0042B939 8B85ACFDFFFF            mov eax, dword ptr [ebp+FFFFFDAC]
:0042B93F 8B0C8588D64700          mov ecx, dword ptr [4*eax+0047D688]
:0042B946 51                      push ecx

* Possible StringData Ref from Data Obj ->"%6sW[F%2uC
"
                                  |
:0042B947 68D4D24700              push 0047D2D4
:0042B94C 8D95B8FDFFFF            lea edx, dword ptr [ebp+FFFFFDB8]
:0042B952 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042B953 FF1504D74B00            Call dword ptr [004BD704]
:0042B959 83C410                  add esp, 00000010
:0042B95C 8D85B8FDFFFF            lea eax, dword ptr [ebp+FFFFFDB8]
:0042B962 50                      push eax
:0042B963 8D8DF8FDFFFF            lea ecx, dword ptr [ebp+FFFFFDF8]
:0042B969 51                      push ecx
:0042B96A E8E1CB0400              call 00478550
:0042B96F 83C408                  add esp, 00000008
:0042B972 E972FFFFFF              jmp 0042B8E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B8FF(C)
|
:0042B977 6A00                    push 00000000
:0042B979 8D95F8FDFFFF            lea edx, dword ptr [ebp+FFFFFDF8]
:0042B97F 52                      push edx
:0042B980 8B4508                  mov eax, dword ptr [ebp+08]
:0042B983 50                      push eax
:0042B984 E816C8FEFF              call 0041819F
:0042B989 83C40C                  add esp, 0000000C
:0042B98C C685F8FDFFFF00          mov byte ptr [ebp+FFFFFDF8], 00
:0042B993 C785B0FDFFFF00000000    mov dword ptr [ebp+FFFFFDB0], 00000000
:0042B99D EB0F                    jmp 0042B9AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BA43(U)
|
:0042B99F 8B8DB0FDFFFF            mov ecx, dword ptr [ebp+FFFFFDB0]
:0042B9A5 83C101                  add ecx, 00000001
:0042B9A8 898DB0FDFFFF            mov dword ptr [ebp+FFFFFDB0], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B99D(U)
|
:0042B9AE 83BDB0FDFFFF41          cmp dword ptr [ebp+FFFFFDB0], 00000041
:0042B9B5 0F8D8D000000            jnl 0042BA48
:0042B9BB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042B9BE 6BC950                  imul ecx, 00000050
:0042B9C1 81C1787F4900            add ecx, 00497F78
:0042B9C7 E8D477FDFF              call 004031A0
:0042B9CC 25FF000000              and eax, 000000FF
:0042B9D1 50                      push eax
:0042B9D2 8B8DB0FDFFFF            mov ecx, dword ptr [ebp+FFFFFDB0]
:0042B9D8 6BC931                  imul ecx, 00000031
:0042B9DB 81C1001D4B00            add ecx, 004B1D00
:0042B9E1 E82A6AFEFF              call 00412410
:0042B9E6 25FF000000              and eax, 000000FF
:0042B9EB 8B95B4FDFFFF            mov edx, dword ptr [ebp+FFFFFDB4]
:0042B9F1 83C201                  add edx, 00000001
:0042B9F4 3BC2                    cmp eax, edx
:0042B9F6 754B                    jne 0042BA43

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042B9F8 6A05                    push 00000005
:0042B9FA B9F8544B00              mov ecx, 004B54F8
:0042B9FF E816DB0300              call 0046951A
:0042BA04 8B8DB0FDFFFF            mov ecx, dword ptr [ebp+FFFFFDB0]
:0042BA0A 6BC931                  imul ecx, 00000031
:0042BA0D 81C1001D4B00            add ecx, 004B1D00
:0042BA13 E8D89CFDFF              call 004056F0
:0042BA18 50                      push eax

* Possible StringData Ref from Data Obj ->"Ƿ|Fۡu%svI"
                                  |
:0042BA19 68E4D24700              push 0047D2E4
:0042BA1E 8D85F8FDFFFF            lea eax, dword ptr [ebp+FFFFFDF8]
:0042BA24 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042BA25 FF1504D74B00            Call dword ptr [004BD704]
:0042BA2B 83C40C                  add esp, 0000000C
:0042BA2E 6A00                    push 00000000
:0042BA30 8D8DF8FDFFFF            lea ecx, dword ptr [ebp+FFFFFDF8]
:0042BA36 51                      push ecx
:0042BA37 8B5508                  mov edx, dword ptr [ebp+08]
:0042BA3A 52                      push edx
:0042BA3B E85FC7FEFF              call 0041819F
:0042BA40 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B9F6(C)
|
:0042BA43 E957FFFFFF              jmp 0042B99F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042B9B5(C)
|
:0042BA48 E9F4FDFFFF              jmp 0042B841

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042B831(U), :0042B85C(C), :0042B86B(U)
|
:0042BA4D 8BE5                    mov esp, ebp
:0042BA4F 5D                      pop ebp
:0042BA50 C3                      ret



* Referenced by a CALL at Address:
|:0042B3E5   
|
:0042BA51 55                      push ebp
:0042BA52 8BEC                    mov ebp, esp
:0042BA54 56                      push esi
:0042BA55 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042BA58 6BC950                  imul ecx, 00000050
:0042BA5B 81C1787F4900            add ecx, 00497F78
:0042BA61 E85163FDFF              call 00401DB7
:0042BA66 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0042BA68 68C8000000              push 000000C8
:0042BA6D E83EC90400              call 004783B0
:0042BA72 83C404                  add esp, 00000004
:0042BA75 3BF0                    cmp esi, eax
:0042BA77 760F                    jbe 0042BA88

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042BA79 6A06                    push 00000006
:0042BA7B E830C90400              call 004783B0
:0042BA80 83C404                  add esp, 00000004
:0042BA83 83C005                  add eax, 00000005
:0042BA86 EB02                    jmp 0042BA8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BA77(C)
|
:0042BA88 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BA86(U)
|
:0042BA8A 5E                      pop esi
:0042BA8B 5D                      pop ebp
:0042BA8C C3                      ret



* Referenced by a CALL at Address:
|:00420205   
|
:0042BA8D 55                      push ebp
:0042BA8E 8BEC                    mov ebp, esp
:0042BA90 51                      push ecx
:0042BA91 894DFC                  mov dword ptr [ebp-04], ecx
:0042BA94 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BA97 8A481F                  mov cl, byte ptr [eax+1F]
:0042BA9A 51                      push ecx
:0042BA9B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BA9E 8B4214                  mov eax, dword ptr [edx+14]
:0042BAA1 50                      push eax
:0042BAA2 E829000000              call 0042BAD0
:0042BAA7 83C408                  add esp, 00000008
:0042BAAA 85C0                    test eax, eax
:0042BAAC 7D04                    jge 0042BAB2
:0042BAAE 33C0                    xor eax, eax
:0042BAB0 EB18                    jmp 0042BACA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BAAC(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042BAB2 6A02                    push 00000002
:0042BAB4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BAB7 8A511F                  mov dl, byte ptr [ecx+1F]
:0042BABA 52                      push edx
:0042BABB B948494B00              mov ecx, 004B4948
:0042BAC0 E812C60100              call 004480D7
:0042BAC5 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BAB0(U)
|
:0042BACA 8BE5                    mov esp, ebp
:0042BACC 5D                      pop ebp
:0042BACD C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042BAA2   
|
:0042BAD0 55                      push ebp
:0042BAD1 8BEC                    mov ebp, esp
:0042BAD3 6AFF                    push FFFFFFFF
:0042BAD5 6810974700              push 00479710
:0042BADA 64A100000000            mov eax, dword ptr fs:[00000000]
:0042BAE0 50                      push eax
:0042BAE1 64892500000000          mov dword ptr fs:[00000000], esp
:0042BAE8 81EC10010000            sub esp, 00000110
:0042BAEE 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BAF4 E8479BFDFF              call 00405640
:0042BAF9 C745FC00000000          mov [ebp-04], 00000000
:0042BB00 8A450C                  mov al, byte ptr [ebp+0C]
:0042BB03 50                      push eax
:0042BB04 E84C010000              call 0042BC55
:0042BB09 83C404                  add esp, 00000004
:0042BB0C 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax
:0042BB12 83BDECFEFFFF00          cmp dword ptr [ebp+FFFFFEEC], 00000000
:0042BB19 7D27                    jge 0042BB42
:0042BB1B C785E8FEFFFFFFFFFFFF    mov dword ptr [ebp+FFFFFEE8], FFFFFFFF
:0042BB25 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042BB2C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BB32 E8299BFDFF              call 00405660
:0042BB37 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0042BB3D E905010000              jmp 0042BC47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BB19(C)
|
:0042BB42 0FBE4D0C                movsx ecx, byte ptr [ebp+0C]
:0042BB46 83F93B                  cmp ecx, 0000003B
:0042BB49 7409                    je 0042BB54
:0042BB4B 0FBE550C                movsx edx, byte ptr [ebp+0C]
:0042BB4F 83FA0E                  cmp edx, 0000000E
:0042BB52 7512                    jne 0042BB66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BB49(C)
|

* Possible StringData Ref from Data Obj ->"SEFF.E3"
                                  |
:0042BB54 6840D54700              push 0047D540
:0042BB59 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BB5F E87156FEFF              call 004111D5
:0042BB64 EB55                    jmp 0042BBBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BB52(C)
|
:0042BB66 0FBE450C                movsx eax, byte ptr [ebp+0C]
:0042BB6A 83F803                  cmp eax, 00000003
:0042BB6D 741B                    je 0042BB8A
:0042BB6F 0FBE4D0C                movsx ecx, byte ptr [ebp+0C]
:0042BB73 83F907                  cmp ecx, 00000007
:0042BB76 7412                    je 0042BB8A
:0042BB78 0FBE550C                movsx edx, byte ptr [ebp+0C]
:0042BB7C 83FA0A                  cmp edx, 0000000A
:0042BB7F 7409                    je 0042BB8A
:0042BB81 0FBE450C                movsx eax, byte ptr [ebp+0C]
:0042BB85 83F80C                  cmp eax, 0000000C
:0042BB88 7512                    jne 0042BB9C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BB6D(C), :0042BB76(C), :0042BB7F(C)
|

* Possible StringData Ref from Data Obj ->"SARM.E3"
                                  |
:0042BB8A 6838D54700              push 0047D538
:0042BB8F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BB95 E83B56FEFF              call 004111D5
:0042BB9A EB1F                    jmp 0042BBBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BB88(C)
|

* Possible StringData Ref from Data Obj ->"SARM.E3"
                                  |
:0042BB9C 6838D54700              push 0047D538
:0042BBA1 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BBA7 E82956FEFF              call 004111D5
:0042BBAC 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042BBB2 83C102                  add ecx, 00000002
:0042BBB5 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BB64(U), :0042BB9A(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042BBBB 6A04                    push 00000004
:0042BBBD 6A00                    push 00000000
:0042BBBF 6A00                    push 00000000
:0042BBC1 B958474900              mov ecx, 00494758
:0042BBC6 E8C5D30400              call 00478F90
:0042BBCB 50                      push eax
:0042BBCC 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:0042BBD2 52                      push edx
:0042BBD3 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BBD9 E84B57FEFF              call 00411329
:0042BBDE 85C0                    test eax, eax
:0042BBE0 750D                    jne 0042BBEF

* Possible StringData Ref from Data Obj ->"in ReadBeforeCharaAm()"
                                  |
:0042BBE2 68F8D24700              push 0047D2F8
:0042BBE7 E8B07FFFFF              call 00423B9C
:0042BBEC 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BBE0(C)
|
:0042BBEF 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BBF5 E82B20FEFF              call 0040DC25
:0042BBFA 8B4508                  mov eax, dword ptr [ebp+08]
:0042BBFD 50                      push eax
:0042BBFE E88D22FEFF              call 0040DE90
:0042BC03 83C404                  add esp, 00000004
:0042BC06 85C0                    test eax, eax
:0042BC08 7519                    jne 0042BC23

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042BC0A 6A04                    push 00000004
:0042BC0C 6A00                    push 00000000
:0042BC0E 6A00                    push 00000000
:0042BC10 B958474900              mov ecx, 00494758
:0042BC15 E876D30400              call 00478F90
:0042BC1A 50                      push eax
:0042BC1B E8DED0FFFF              call 00428CFE
:0042BC20 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BC08(C)
|
:0042BC23 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042BC29 898DE4FEFFFF            mov dword ptr [ebp+FFFFFEE4], ecx
:0042BC2F C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042BC36 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BC3C E81F9AFDFF              call 00405660
:0042BC41 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BB3D(U)
|
:0042BC47 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042BC4A 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042BC51 8BE5                    mov esp, ebp
:0042BC53 5D                      pop ebp
:0042BC54 C3                      ret



* Referenced by a CALL at Address:
|:0042BB04   
|
:0042BC55 55                      push ebp
:0042BC56 8BEC                    mov ebp, esp
:0042BC58 51                      push ecx
:0042BC59 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042BC5D 8945FC                  mov dword ptr [ebp-04], eax
:0042BC60 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BC63 83E903                  sub ecx, 00000003
:0042BC66 894DFC                  mov dword ptr [ebp-04], ecx
:0042BC69 837DFC38                cmp dword ptr [ebp-04], 00000038
:0042BC6D 774E                    ja 0042BCBD
:0042BC6F 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BC72 33D2                    xor edx, edx
:0042BC74 8A90F4BC4200            mov dl, byte ptr [eax+0042BCF4]
:0042BC7A FF2495C4BC4200          jmp dword ptr [4*edx+0042BCC4]
:0042BC81 B80E000000              mov eax, 0000000E
:0042BC86 EB38                    jmp 0042BCC0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042BC88 B804000000              mov eax, 00000004
:0042BC8D EB31                    jmp 0042BCC0

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0042BC8F B809000000              mov eax, 00000009
:0042BC94 EB2A                    jmp 0042BCC0
:0042BC96 B80B000000              mov eax, 0000000B
:0042BC9B EB23                    jmp 0042BCC0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042BC9D B803000000              mov eax, 00000003
:0042BCA2 EB1C                    jmp 0042BCC0

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042BCA4 B806000000              mov eax, 00000006
:0042BCA9 EB15                    jmp 0042BCC0
:0042BCAB 33C0                    xor eax, eax
:0042BCAD EB11                    jmp 0042BCC0
:0042BCAF B80C000000              mov eax, 0000000C
:0042BCB4 EB0A                    jmp 0042BCC0
:0042BCB6 B80F000000              mov eax, 0000000F
:0042BCBB EB03                    jmp 0042BCC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BC6D(C)
|
:0042BCBD 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BC86(U), :0042BC8D(U), :0042BC94(U), :0042BC9B(U), :0042BCA2(U)
|:0042BCA9(U), :0042BCAD(U), :0042BCB4(U), :0042BCBB(U)
|
:0042BCC0 8BE5                    mov esp, ebp
:0042BCC2 5D                      pop ebp
:0042BCC3 C3                      ret



:0042BCC4 8FBC4200                DWORD 0042BC8F
:0042BCC8 96BC4200                DWORD 0042BC96
:0042BCCC 9DBC4200                DWORD 0042BC9D
:0042BCD0 A4BC4200                DWORD 0042BCA4
:0042BCD4 8FBC4200                DWORD 0042BC8F
:0042BCD8 8FBC4200                DWORD 0042BC8F
:0042BCDC 88BC4200                DWORD 0042BC88
:0042BCE0 AFBC4200                DWORD 0042BCAF
:0042BCE4 B6BC4200                DWORD 0042BCB6
:0042BCE8 ABBC4200                DWORD 0042BCAB
:0042BCEC 81BC4200                DWORD 0042BC81
:0042BCF0 BDBC4200                DWORD 0042BCBD


:0042BCF4 000B                    add byte ptr [ebx], cl
:0042BCF6 0B0B                    or ecx, dword ptr [ebx]
:0042BCF8 0102                    add dword ptr [edx], eax
:0042BCFA 03040B                  add eax, dword ptr [ebx+ecx]
:0042BCFD 050B060B0B              add eax, 0B0B060B
:0042BD02 0B0B                    or ecx, dword ptr [ebx]
:0042BD04 0B0B                    or ecx, dword ptr [ebx]
:0042BD06 0B0B                    or ecx, dword ptr [ebx]
:0042BD08 07                      pop es
:0042BD09 080B                    or byte ptr [ebx], cl
:0042BD0B 0B0B                    or ecx, dword ptr [ebx]
:0042BD0D 090B                    or dword ptr [ebx], ecx
:0042BD0F 0B0B                    or ecx, dword ptr [ebx]
:0042BD11 0B0B                    or ecx, dword ptr [ebx]
:0042BD13 0B0B                    or ecx, dword ptr [ebx]
:0042BD15 0B0B                    or ecx, dword ptr [ebx]
:0042BD17 0B0B                    or ecx, dword ptr [ebx]
:0042BD19 0B0B                    or ecx, dword ptr [ebx]
:0042BD1B 0B0B                    or ecx, dword ptr [ebx]
:0042BD1D 0B0B                    or ecx, dword ptr [ebx]
:0042BD1F 0B0B                    or ecx, dword ptr [ebx]
:0042BD21 0B0B                    or ecx, dword ptr [ebx]
:0042BD23 0B0B                    or ecx, dword ptr [ebx]
:0042BD25 0B0B                    or ecx, dword ptr [ebx]
:0042BD27 0B0B                    or ecx, dword ptr [ebx]
:0042BD29 0B0B                    or ecx, dword ptr [ebx]
:0042BD2B 0B0A                    or ecx, dword ptr [edx]

* Referenced by a CALL at Address:
|:00420215   
|
:0042BD2D 55                      push ebp
:0042BD2E 8BEC                    mov ebp, esp
:0042BD30 83EC08                  sub esp, 00000008
:0042BD33 894DF8                  mov dword ptr [ebp-08], ecx
:0042BD36 C745FC00000000          mov [ebp-04], 00000000
:0042BD3D EB09                    jmp 0042BD48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BD6D(U)
|
:0042BD3F 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BD42 83C001                  add eax, 00000001
:0042BD45 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BD3D(U)
|
:0042BD48 837DFC04                cmp dword ptr [ebp-04], 00000004
:0042BD4C 7D21                    jge 0042BD6F

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042BD4E 6A02                    push 00000002
:0042BD50 E866380000              call 0042F5BB
:0042BD55 83C404                  add esp, 00000004
:0042BD58 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BD5B 51                      push ecx
:0042BD5C 8B5508                  mov edx, dword ptr [ebp+08]
:0042BD5F 52                      push edx
:0042BD60 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042BD63 E884D5FFFF              call 004292EC
:0042BD68 E863380000              call 0042F5D0
:0042BD6D EBD0                    jmp 0042BD3F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BD4C(C)
|
:0042BD6F 8B45F8                  mov eax, dword ptr [ebp-08]
:0042BD72 0FBE481F                movsx ecx, byte ptr [eax+1F]
:0042BD76 83F90E                  cmp ecx, 0000000E
:0042BD79 750E                    jne 0042BD89
:0042BD7B 6A01                    push 00000001
:0042BD7D 8B5508                  mov edx, dword ptr [ebp+08]
:0042BD80 52                      push edx
:0042BD81 E8F64DFFFF              call 00420B7C
:0042BD86 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BD79(C)
|
:0042BD89 8BE5                    mov esp, ebp
:0042BD8B 5D                      pop ebp
:0042BD8C C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00420290   , :00420369   , :004203C0   
|
:0042BD8F 55                      push ebp
:0042BD90 8BEC                    mov ebp, esp
:0042BD92 51                      push ecx
:0042BD93 894DFC                  mov dword ptr [ebp-04], ecx
:0042BD96 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BD99 8B4814                  mov ecx, dword ptr [eax+14]
:0042BD9C 51                      push ecx
:0042BD9D 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BDA0 8A421F                  mov al, byte ptr [edx+1F]
:0042BDA3 50                      push eax
:0042BDA4 E84C000000              call 0042BDF5
:0042BDA9 83C408                  add esp, 00000008
:0042BDAC 85C0                    test eax, eax
:0042BDAE 7D04                    jge 0042BDB4
:0042BDB0 33C0                    xor eax, eax
:0042BDB2 EB3B                    jmp 0042BDEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BDAE(C)
|
:0042BDB4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042BDB7 0FBE511F                movsx edx, byte ptr [ecx+1F]
:0042BDBB 83FA41                  cmp edx, 00000041
:0042BDBE 7C2A                    jl 0042BDEA
:0042BDC0 8B45FC                  mov eax, dword ptr [ebp-04]
:0042BDC3 0FBE481F                movsx ecx, byte ptr [eax+1F]
:0042BDC7 83F94C                  cmp ecx, 0000004C
:0042BDCA 7F1E                    jg 0042BDEA

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042BDCC 6A02                    push 00000002
:0042BDCE E8E8370000              call 0042F5BB
:0042BDD3 83C404                  add esp, 00000004
:0042BDD6 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BDD9 8A421F                  mov al, byte ptr [edx+1F]
:0042BDDC 50                      push eax
:0042BDDD E8BA020000              call 0042C09C
:0042BDE2 83C404                  add esp, 00000004
:0042BDE5 E8E6370000              call 0042F5D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BDBE(C), :0042BDCA(C)
|
:0042BDEA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BDB2(U)
|
:0042BDEF 8BE5                    mov esp, ebp
:0042BDF1 5D                      pop ebp
:0042BDF2 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042BDA4   
|
:0042BDF5 55                      push ebp
:0042BDF6 8BEC                    mov ebp, esp
:0042BDF8 6AFF                    push FFFFFFFF
:0042BDFA 6826974700              push 00479726
:0042BDFF 64A100000000            mov eax, dword ptr fs:[00000000]
:0042BE05 50                      push eax
:0042BE06 64892500000000          mov dword ptr fs:[00000000], esp
:0042BE0D 81EC10010000            sub esp, 00000110
:0042BE13 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BE19 E82298FDFF              call 00405640
:0042BE1E C745FC00000000          mov [ebp-04], 00000000
:0042BE25 8A4508                  mov al, byte ptr [ebp+08]
:0042BE28 50                      push eax
:0042BE29 E81B010000              call 0042BF49
:0042BE2E 83C404                  add esp, 00000004
:0042BE31 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax
:0042BE37 83BDECFEFFFF00          cmp dword ptr [ebp+FFFFFEEC], 00000000
:0042BE3E 7D27                    jge 0042BE67
:0042BE40 C785E8FEFFFFFFFFFFFF    mov dword ptr [ebp+FFFFFEE8], FFFFFFFF
:0042BE4A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042BE51 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BE57 E80498FDFF              call 00405660
:0042BE5C 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0042BE62 E9D4000000              jmp 0042BF3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BE3E(C)
|

* Possible StringData Ref from Data Obj ->"SEFF.E3"
                                  |
:0042BE67 6840D54700              push 0047D540
:0042BE6C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BE72 E85E53FEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042BE77 6A04                    push 00000004
:0042BE79 6A00                    push 00000000
:0042BE7B 6A00                    push 00000000
:0042BE7D B958474900              mov ecx, 00494758
:0042BE82 E809D10400              call 00478F90
:0042BE87 50                      push eax
:0042BE88 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042BE8E 51                      push ecx
:0042BE8F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BE95 E88F54FEFF              call 00411329
:0042BE9A 85C0                    test eax, eax
:0042BE9C 750D                    jne 0042BEAB

* Possible StringData Ref from Data Obj ->"in ReadTargetEffectAm()"
                                  |
:0042BE9E 6810D34700              push 0047D310
:0042BEA3 E8F47CFFFF              call 00423B9C
:0042BEA8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BE9C(C)
|
:0042BEAB 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BEB1 E86F1DFEFF              call 0040DC25
:0042BEB6 8B550C                  mov edx, dword ptr [ebp+0C]
:0042BEB9 52                      push edx
:0042BEBA E8D11FFEFF              call 0040DE90
:0042BEBF 83C404                  add esp, 00000004
:0042BEC2 85C0                    test eax, eax
:0042BEC4 7551                    jne 0042BF17

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042BEC6 6A04                    push 00000004
:0042BEC8 6A00                    push 00000000
:0042BECA 6A00                    push 00000000
:0042BECC B958474900              mov ecx, 00494758
:0042BED1 E8BAD00400              call 00478F90
:0042BED6 50                      push eax
:0042BED7 E822CEFFFF              call 00428CFE
:0042BEDC 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042BEDF 6A04                    push 00000004
:0042BEE1 6A00                    push 00000000
:0042BEE3 6800090000              push 00000900
:0042BEE8 B958474900              mov ecx, 00494758
:0042BEED E89ED00400              call 00478F90
:0042BEF2 50                      push eax
:0042BEF3 E806CEFFFF              call 00428CFE
:0042BEF8 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042BEFB 6A04                    push 00000004
:0042BEFD 6A00                    push 00000000
:0042BEFF 6800120000              push 00001200
:0042BF04 B958474900              mov ecx, 00494758
:0042BF09 E882D00400              call 00478F90
:0042BF0E 50                      push eax
:0042BF0F E8EACDFFFF              call 00428CFE
:0042BF14 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BEC4(C)
|
:0042BF17 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:0042BF1D 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:0042BF23 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042BF2A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042BF30 E82B97FDFF              call 00405660
:0042BF35 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BE62(U)
|
:0042BF3B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042BF3E 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042BF45 8BE5                    mov esp, ebp
:0042BF47 5D                      pop ebp
:0042BF48 C3                      ret



* Referenced by a CALL at Address:
|:0042BE29   
|
:0042BF49 55                      push ebp
:0042BF4A 8BEC                    mov ebp, esp
:0042BF4C 51                      push ecx
:0042BF4D 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042BF51 8945FC                  mov dword ptr [ebp-04], eax
:0042BF54 837DFC4C                cmp dword ptr [ebp-04], 0000004C
:0042BF58 776A                    ja 0042BFC4
:0042BF5A 8B55FC                  mov edx, dword ptr [ebp-04]
:0042BF5D 33C9                    xor ecx, ecx
:0042BF5F 8A8A4FC04200            mov cl, byte ptr [edx+0042C04F]
:0042BF65 FF248DCBBF4200          jmp dword ptr [4*ecx+0042BFCB]
:0042BF6C B810000000              mov eax, 00000010
:0042BF71 EB54                    jmp 0042BFC7
:0042BF73 B80B000000              mov eax, 0000000B
:0042BF78 EB4D                    jmp 0042BFC7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042BF7A B805000000              mov eax, 00000005
:0042BF7F EB46                    jmp 0042BFC7

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042BF81 B807000000              mov eax, 00000007
:0042BF86 EB3F                    jmp 0042BFC7

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042BF88 B806000000              mov eax, 00000006
:0042BF8D EB38                    jmp 0042BFC7

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042BF8F B808000000              mov eax, 00000008
:0042BF94 EB31                    jmp 0042BFC7

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0042BF96 B809000000              mov eax, 00000009
:0042BF9B EB2A                    jmp 0042BFC7

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042BF9D B80A000000              mov eax, 0000000A
:0042BFA2 EB23                    jmp 0042BFC7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042BFA4 B803000000              mov eax, 00000003
:0042BFA9 EB1C                    jmp 0042BFC7
:0042BFAB B80D000000              mov eax, 0000000D
:0042BFB0 EB15                    jmp 0042BFC7
:0042BFB2 B801000000              mov eax, 00000001
:0042BFB7 EB0E                    jmp 0042BFC7
:0042BFB9 33C0                    xor eax, eax
:0042BFBB EB0A                    jmp 0042BFC7

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042BFBD B802000000              mov eax, 00000002
:0042BFC2 EB03                    jmp 0042BFC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042BF58(C)
|
:0042BFC4 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042BF71(U), :0042BF78(U), :0042BF7F(U), :0042BF86(U), :0042BF8D(U)
|:0042BF94(U), :0042BF9B(U), :0042BFA2(U), :0042BFA9(U), :0042BFB0(U)
|:0042BFB7(U), :0042BFBB(U), :0042BFC2(U)
|
:0042BFC7 8BE5                    mov esp, ebp
:0042BFC9 5D                      pop ebp
:0042BFCA C3                      ret



:0042BFCB 6CBF4200                DWORD 0042BF6C
:0042BFCF 6CBF4200                DWORD 0042BF6C
:0042BFD3 6CBF4200                DWORD 0042BF6C
:0042BFD7 6CBF4200                DWORD 0042BF6C
:0042BFDB 6CBF4200                DWORD 0042BF6C
:0042BFDF 73BF4200                DWORD 0042BF73
:0042BFE3 6CBF4200                DWORD 0042BF6C
:0042BFE7 7ABF4200                DWORD 0042BF7A
:0042BFEB 81BF4200                DWORD 0042BF81
:0042BFEF 7ABF4200                DWORD 0042BF7A
:0042BFF3 88BF4200                DWORD 0042BF88
:0042BFF7 8FBF4200                DWORD 0042BF8F
:0042BFFB 96BF4200                DWORD 0042BF96
:0042BFFF 9DBF4200                DWORD 0042BF9D
:0042C003 A4BF4200                DWORD 0042BFA4
:0042C007 6CBF4200                DWORD 0042BF6C
:0042C00B A4BF4200                DWORD 0042BFA4
:0042C00F ABBF4200                DWORD 0042BFAB
:0042C013 A4BF4200                DWORD 0042BFA4
:0042C017 A4BF4200                DWORD 0042BFA4
:0042C01B B9BF4200                DWORD 0042BFB9
:0042C01F B9BF4200                DWORD 0042BFB9
:0042C023 BDBF4200                DWORD 0042BFBD
:0042C027 B2BF4200                DWORD 0042BFB2
:0042C02B BDBF4200                DWORD 0042BFBD
:0042C02F A4BF4200                DWORD 0042BFA4
:0042C033 BDBF4200                DWORD 0042BFBD
:0042C037 A4BF4200                DWORD 0042BFA4
:0042C03B BDBF4200                DWORD 0042BFBD
:0042C03F A4BF4200                DWORD 0042BFA4
:0042C043 BDBF4200                DWORD 0042BFBD
:0042C047 B2BF4200                DWORD 0042BFB2
:0042C04B C4BF4200                DWORD 0042BFC4


:0042C04F 000000                  BYTE  3 DUP(0)


:0042C052 2001                    and byte ptr [ecx], al
:0042C054 2002                    and byte ptr [edx], al
:0042C056 2003                    and byte ptr [ebx], al
:0042C058 0320                    add esp, dword ptr [eax]
:0042C05A 2020                    and byte ptr [eax], ah
:0042C05C 0405                    add al, 05
:0042C05E 06                      push es
:0042C05F 07                      pop es
:0042C060 0809                    or byte ptr [ecx], cl
:0042C062 0A0B                    or cl, byte ptr [ebx]
:0042C064 0C0D                    or al, 0D
:0042C066 0E                      push cs
:0042C067 0E                      push cs
:0042C068 0E                      push cs
:0042C069 0F                      BYTE 0fh
:0042C06A 0F2010                  mov eax, cr2
:0042C06D 1010                    adc byte ptr [eax], dl
:0042C06F 1011                    adc byte ptr [ecx], dl
:0042C071 1111                    adc dword ptr [ecx], edx
:0042C073 1212                    adc dl, byte ptr [edx]
:0042C075 2013                    and byte ptr [ebx], dl
:0042C077 1414                    adc al, 14
:0042C079 1414                    adc al, 14
:0042C07B 2020                    and byte ptr [eax], ah
:0042C07D 1515161616              adc eax, 16161615
:0042C082 16                      push ss
:0042C083 16                      push ss
:0042C084 16                      push ss
:0042C085 16                      push ss
:0042C086 16                      push ss
:0042C087 16                      push ss
:0042C088 17                      pop ss
:0042C089 2020                    and byte ptr [eax], ah
:0042C08B 2020                    and byte ptr [eax], ah
:0042C08D 2020                    and byte ptr [eax], ah
:0042C08F 2018                    and byte ptr [eax], bl
:0042C091 191A                    sbb dword ptr [edx], ebx
:0042C093 1B1C1D1E1E1E1E          sbb ebx, dword ptr [ebx+1E1E1E1E]
:0042C09A 1E                      push ds
:0042C09B 1F                      pop ds

* Referenced by a CALL at Address:
|:0042BDDD   
|
:0042C09C 55                      push ebp
:0042C09D 8BEC                    mov ebp, esp
:0042C09F 51                      push ecx
:0042C0A0 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042C0A4 8945FC                  mov dword ptr [ebp-04], eax
:0042C0A7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C0AA 83E941                  sub ecx, 00000041
:0042C0AD 894DFC                  mov dword ptr [ebp-04], ecx
:0042C0B0 837DFC0B                cmp dword ptr [ebp-04], 0000000B
:0042C0B4 7730                    ja 0042C0E6
:0042C0B6 8B55FC                  mov edx, dword ptr [ebp-04]
:0042C0B9 FF2495EAC04200          jmp dword ptr [4*edx+0042C0EA]
:0042C0C0 6A11                    push 00000011
:0042C0C2 B9F8544B00              mov ecx, 004B54F8
:0042C0C7 E84ED40300              call 0046951A
:0042C0CC EB18                    jmp 0042C0E6
:0042C0CE 6A12                    push 00000012
:0042C0D0 B9F8544B00              mov ecx, 004B54F8
:0042C0D5 E840D40300              call 0046951A
:0042C0DA 6A18                    push 00000018
:0042C0DC B9F8544B00              mov ecx, 004B54F8
:0042C0E1 E834D40300              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C0B4(C), :0042C0CC(U)
|
:0042C0E6 8BE5                    mov esp, ebp
:0042C0E8 5D                      pop ebp
:0042C0E9 C3                      ret



:0042C0EA C0C04200                DWORD 0042C0C0
:0042C0EE CEC04200                DWORD 0042C0CE
:0042C0F2 C0C04200                DWORD 0042C0C0
:0042C0F6 CEC04200                DWORD 0042C0CE
:0042C0FA C0C04200                DWORD 0042C0C0
:0042C0FE CEC04200                DWORD 0042C0CE
:0042C102 C0C04200                DWORD 0042C0C0
:0042C106 C0C04200                DWORD 0042C0C0
:0042C10A C0C04200                DWORD 0042C0C0
:0042C10E C0C04200                DWORD 0042C0C0
:0042C112 C0C04200                DWORD 0042C0C0
:0042C116 DAC04200                DWORD 0042C0DA



* Referenced by a CALL at Addresses:
|:004202A0   , :00420379   , :004203D0   
|
:0042C11A 55                      push ebp
:0042C11B 8BEC                    mov ebp, esp
:0042C11D 83EC08                  sub esp, 00000008
:0042C120 894DF8                  mov dword ptr [ebp-08], ecx
:0042C123 C745FC00000000          mov [ebp-04], 00000000
:0042C12A EB09                    jmp 0042C135

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C156(U)
|
:0042C12C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C12F 83C001                  add eax, 00000001
:0042C132 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C12A(U)
|
:0042C135 837DFC04                cmp dword ptr [ebp-04], 00000004
:0042C139 7D1D                    jge 0042C158

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042C13B 6A02                    push 00000002
:0042C13D E879340000              call 0042F5BB
:0042C142 83C404                  add esp, 00000004
:0042C145 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C148 51                      push ecx
:0042C149 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C14C E8E5D3FFFF              call 00429536
:0042C151 E87A340000              call 0042F5D0
:0042C156 EBD4                    jmp 0042C12C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C139(C)
|
:0042C158 8BE5                    mov esp, ebp
:0042C15A 5D                      pop ebp
:0042C15B C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004202B0   , :00420385   , :004203DC   
|
:0042C15E 55                      push ebp
:0042C15F 8BEC                    mov ebp, esp
:0042C161 83EC08                  sub esp, 00000008
:0042C164 894DF8                  mov dword ptr [ebp-08], ecx
:0042C167 8B45F8                  mov eax, dword ptr [ebp-08]
:0042C16A 50                      push eax
:0042C16B E81F77FFFF              call 0042388F
:0042C170 83C404                  add esp, 00000004
:0042C173 8945FC                  mov dword ptr [ebp-04], eax
:0042C176 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C179 0FBE511F                movsx edx, byte ptr [ecx+1F]
:0042C17D 83FA20                  cmp edx, 00000020
:0042C180 755D                    jne 0042C1DF
:0042C182 B928474900              mov ecx, 00494728
:0042C187 E844EA0200              call 0045ABD0
:0042C18C 83F8FF                  cmp eax, FFFFFFFF
:0042C18F 7522                    jne 0042C1B3
:0042C191 6A10                    push 00000010
:0042C193 B928474900              mov ecx, 00494728
:0042C198 E8F3200000              call 0042E290
:0042C19D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C1A0 E86B200000              call 0042E210
:0042C1A5 0FBEC0                  movsx eax, al
:0042C1A8 83F806                  cmp eax, 00000006
:0042C1AB 7C04                    jl 0042C1B1
:0042C1AD B010                    mov al, 10
:0042C1AF EB47                    jmp 0042C1F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C1AB(C)
|
:0042C1B1 EB2C                    jmp 0042C1DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C18F(C)
|
:0042C1B3 6A12                    push 00000012
:0042C1B5 B928474900              mov ecx, 00494728
:0042C1BA E8D1200000              call 0042E290
:0042C1BF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C1C2 E889200000              call 0042E250
:0042C1C7 0FBEC8                  movsx ecx, al
:0042C1CA 83F906                  cmp ecx, 00000006
:0042C1CD 7C10                    jl 0042C1DF
:0042C1CF 6AFF                    push FFFFFFFF
:0042C1D1 B928474900              mov ecx, 00494728
:0042C1D6 E8B5200000              call 0042E290
:0042C1DB B012                    mov al, 12
:0042C1DD EB19                    jmp 0042C1F8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C180(C), :0042C1B1(U), :0042C1CD(C)
|
:0042C1DF 8B55F8                  mov edx, dword ptr [ebp-08]
:0042C1E2 8A421F                  mov al, byte ptr [edx+1F]
:0042C1E5 50                      push eax
:0042C1E6 E813000000              call 0042C1FE
:0042C1EB 83C404                  add esp, 00000004
:0042C1EE 85C0                    test eax, eax
:0042C1F0 7D04                    jge 0042C1F6
:0042C1F2 B012                    mov al, 12
:0042C1F4 EB02                    jmp 0042C1F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C1F0(C)
|
:0042C1F6 B011                    mov al, 11

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C1AF(U), :0042C1DD(U), :0042C1F4(U)
|
:0042C1F8 8BE5                    mov esp, ebp
:0042C1FA 5D                      pop ebp
:0042C1FB C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042C1E6   
|
:0042C1FE 55                      push ebp
:0042C1FF 8BEC                    mov ebp, esp
:0042C201 6AFF                    push FFFFFFFF
:0042C203 683C974700              push 0047973C
:0042C208 64A100000000            mov eax, dword ptr fs:[00000000]
:0042C20E 50                      push eax
:0042C20F 64892500000000          mov dword ptr fs:[00000000], esp
:0042C216 81EC10010000            sub esp, 00000110
:0042C21C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C222 E81994FDFF              call 00405640
:0042C227 C745FC00000000          mov [ebp-04], 00000000
:0042C22E C785ECFEFFFFFFFFFFFF    mov dword ptr [ebp+FFFFFEEC], FFFFFFFF
:0042C238 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042C23C 83F820                  cmp eax, 00000020
:0042C23F 7512                    jne 0042C253
:0042C241 B928474900              mov ecx, 00494728
:0042C246 E885E90200              call 0045ABD0
:0042C24B 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax
:0042C251 EB12                    jmp 0042C265

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C23F(C)
|
:0042C253 8A4D08                  mov cl, byte ptr [ebp+08]
:0042C256 51                      push ecx
:0042C257 E8B7000000              call 0042C313
:0042C25C 83C404                  add esp, 00000004
:0042C25F 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C251(U)
|
:0042C265 83BDECFEFFFF00          cmp dword ptr [ebp+FFFFFEEC], 00000000
:0042C26C 7D24                    jge 0042C292
:0042C26E C785E8FEFFFFFFFFFFFF    mov dword ptr [ebp+FFFFFEE8], FFFFFFFF
:0042C278 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042C27F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C285 E8D693FDFF              call 00405660
:0042C28A 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0042C290 EB73                    jmp 0042C305

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C26C(C)
|

* Possible StringData Ref from Data Obj ->"SPANEL.E3"
                                  |
:0042C292 6828D54700              push 0047D528
:0042C297 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C29D E8334FFEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042C2A2 6A04                    push 00000004
:0042C2A4 6A00                    push 00000000
:0042C2A6 6A00                    push 00000000
:0042C2A8 B958474900              mov ecx, 00494758
:0042C2AD E8DECC0400              call 00478F90
:0042C2B2 50                      push eax
:0042C2B3 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:0042C2B9 52                      push edx
:0042C2BA 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C2C0 E86450FEFF              call 00411329
:0042C2C5 85C0                    test eax, eax
:0042C2C7 750D                    jne 0042C2D6

* Possible StringData Ref from Data Obj ->"in ReadTargetPanelAm()"
                                  |
:0042C2C9 6828D34700              push 0047D328
:0042C2CE E8C978FFFF              call 00423B9C
:0042C2D3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C2C7(C)
|
:0042C2D6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C2DC E84419FEFF              call 0040DC25
:0042C2E1 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:0042C2E7 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:0042C2ED C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042C2F4 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C2FA E86193FDFF              call 00405660
:0042C2FF 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C290(U)
|
:0042C305 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C308 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042C30F 8BE5                    mov esp, ebp
:0042C311 5D                      pop ebp
:0042C312 C3                      ret



* Referenced by a CALL at Address:
|:0042C257   
|
:0042C313 55                      push ebp
:0042C314 8BEC                    mov ebp, esp
:0042C316 51                      push ecx
:0042C317 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042C31B 8945FC                  mov dword ptr [ebp-04], eax
:0042C31E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C321 83E906                  sub ecx, 00000006
:0042C324 894DFC                  mov dword ptr [ebp-04], ecx
:0042C327 837DFC46                cmp dword ptr [ebp-04], 00000046
:0042C32B 0F87B8000000            ja 0042C3E9
:0042C331 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C334 33D2                    xor edx, edx
:0042C336 8A9088C44200            mov dl, byte ptr [eax+0042C488]
:0042C33C FF2495F0C34200          jmp dword ptr [4*edx+0042C3F0]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042C343 B805000000              mov eax, 00000005
:0042C348 E99F000000              jmp 0042C3EC
:0042C34D B80F000000              mov eax, 0000000F
:0042C352 E995000000              jmp 0042C3EC
:0042C357 B80B000000              mov eax, 0000000B
:0042C35C E98B000000              jmp 0042C3EC
:0042C361 B80B000000              mov eax, 0000000B
:0042C366 E981000000              jmp 0042C3EC
:0042C36B B80D000000              mov eax, 0000000D
:0042C370 EB7A                    jmp 0042C3EC
:0042C372 B810000000              mov eax, 00000010
:0042C377 EB73                    jmp 0042C3EC
:0042C379 B80E000000              mov eax, 0000000E
:0042C37E EB6C                    jmp 0042C3EC
:0042C380 B80C000000              mov eax, 0000000C
:0042C385 EB65                    jmp 0042C3EC
:0042C387 B811000000              mov eax, 00000011
:0042C38C EB5E                    jmp 0042C3EC
:0042C38E B81B000000              mov eax, 0000001B
:0042C393 EB57                    jmp 0042C3EC

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042C395 B806000000              mov eax, 00000006
:0042C39A EB50                    jmp 0042C3EC
:0042C39C B813000000              mov eax, 00000013
:0042C3A1 EB49                    jmp 0042C3EC

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0042C3A3 B814000000              mov eax, 00000014
:0042C3A8 EB42                    jmp 0042C3EC

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:0042C3AA B815000000              mov eax, 00000015
:0042C3AF EB3B                    jmp 0042C3EC
:0042C3B1 B816000000              mov eax, 00000016
:0042C3B6 EB34                    jmp 0042C3EC
:0042C3B8 B817000000              mov eax, 00000017
:0042C3BD EB2D                    jmp 0042C3EC
:0042C3BF B818000000              mov eax, 00000018
:0042C3C4 EB26                    jmp 0042C3EC
:0042C3C6 B819000000              mov eax, 00000019
:0042C3CB EB1F                    jmp 0042C3EC

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:0042C3CD B81A000000              mov eax, 0000001A
:0042C3D2 EB18                    jmp 0042C3EC

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042C3D4 B804000000              mov eax, 00000004
:0042C3D9 EB11                    jmp 0042C3EC

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042C3DB B807000000              mov eax, 00000007
:0042C3E0 EB0A                    jmp 0042C3EC
:0042C3E2 B812000000              mov eax, 00000012
:0042C3E7 EB03                    jmp 0042C3EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C32B(C)
|
:0042C3E9 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C348(U), :0042C352(U), :0042C35C(U), :0042C366(U), :0042C370(U)
|:0042C377(U), :0042C37E(U), :0042C385(U), :0042C38C(U), :0042C393(U)
|:0042C39A(U), :0042C3A1(U), :0042C3A8(U), :0042C3AF(U), :0042C3B6(U)
|:0042C3BD(U), :0042C3C4(U), :0042C3CB(U), :0042C3D2(U), :0042C3D9(U)
|:0042C3E0(U), :0042C3E7(U)
|
:0042C3EC 8BE5                    mov esp, ebp
:0042C3EE 5D                      pop ebp
:0042C3EF C3                      ret



:0042C3F0 43C34200                DWORD 0042C343
:0042C3F4 4DC34200                DWORD 0042C34D
:0042C3F8 57C34200                DWORD 0042C357
:0042C3FC 61C34200                DWORD 0042C361
:0042C400 43C34200                DWORD 0042C343
:0042C404 6BC34200                DWORD 0042C36B
:0042C408 72C34200                DWORD 0042C372
:0042C40C 87C34200                DWORD 0042C387
:0042C410 72C34200                DWORD 0042C372
:0042C414 57C34200                DWORD 0042C357
:0042C418 79C34200                DWORD 0042C379
:0042C41C 80C34200                DWORD 0042C380
:0042C420 43C34200                DWORD 0042C343
:0042C424 95C34200                DWORD 0042C395
:0042C428 95C34200                DWORD 0042C395
:0042C42C 9CC34200                DWORD 0042C39C
:0042C430 A3C34200                DWORD 0042C3A3
:0042C434 AAC34200                DWORD 0042C3AA
:0042C438 B1C34200                DWORD 0042C3B1
:0042C43C B8C34200                DWORD 0042C3B8
:0042C440 BFC34200                DWORD 0042C3BF
:0042C444 C6C34200                DWORD 0042C3C6
:0042C448 CDC34200                DWORD 0042C3CD
:0042C44C D4C34200                DWORD 0042C3D4
:0042C450 8EC34200                DWORD 0042C38E
:0042C454 BFC34200                DWORD 0042C3BF
:0042C458 72C34200                DWORD 0042C372
:0042C45C C6C34200                DWORD 0042C3C6
:0042C460 87C34200                DWORD 0042C387
:0042C464 CDC34200                DWORD 0042C3CD
:0042C468 E2C34200                DWORD 0042C3E2
:0042C46C AAC34200                DWORD 0042C3AA
:0042C470 A3C34200                DWORD 0042C3A3
:0042C474 9CC34200                DWORD 0042C39C
:0042C478 B8C34200                DWORD 0042C3B8
:0042C47C B1C34200                DWORD 0042C3B1
:0042C480 DBC34200                DWORD 0042C3DB
:0042C484 E9C34200                DWORD 0042C3E9


:0042C488 002501022525            add byte ptr [25250201], ah
:0042C48E 2525252525              and eax, 25252525
:0042C493 2525252525              and eax, 25252525
:0042C498 2503030425              and eax, 25040303
:0042C49D 2525050506              and eax, 06050525
:0042C4A2 06                      push es
:0042C4A3 07                      pop es
:0042C4A4 0809                    or byte ptr [ecx], cl
:0042C4A6 0A0B                    or cl, byte ptr [ebx]
:0042C4A8 250C0D0D0D              and eax, 0D0D0D0C
:0042C4AD 0D25250E0E              or eax, 0E0E2525
:0042C4B2 0F                      BYTE 0fh
:0042C4B3 1011                    adc byte ptr [ecx], dl
:0042C4B5 1213                    adc dl, byte ptr [ebx]
:0042C4B7 1415                    adc al, 15
:0042C4B9 16                      push ss
:0042C4BA 17                      pop ss
:0042C4BB 182525252525            sbb byte ptr [25252525], ah
:0042C4C1 2525191A1B              and eax, 1B1A1925
:0042C4C6 1C1D                    sbb al, 1D
:0042C4C8 1E                      push ds
:0042C4C9 1F                      pop ds
:0042C4CA 2021                    and byte ptr [ecx], ah
:0042C4CC 2223                    and ah, byte ptr [ebx]
:0042C4CE 24                      BYTE 24h


* Referenced by a CALL at Addresses:
|:004202CD   , :0042039B   , :004203F2   
|
:0042C4CF 55                      push ebp
:0042C4D0 8BEC                    mov ebp, esp
:0042C4D2 83EC08                  sub esp, 00000008
:0042C4D5 894DF8                  mov dword ptr [ebp-08], ecx
:0042C4D8 C745FC00000000          mov [ebp-04], 00000000
:0042C4DF EB09                    jmp 0042C4EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C50B(U)
|
:0042C4E1 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C4E4 83C001                  add eax, 00000001
:0042C4E7 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C4DF(U)
|
:0042C4EA 837DFC04                cmp dword ptr [ebp-04], 00000004
:0042C4EE 7D1D                    jge 0042C50D

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042C4F0 6A02                    push 00000002
:0042C4F2 E8C4300000              call 0042F5BB
:0042C4F7 83C404                  add esp, 00000004
:0042C4FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C4FD 51                      push ecx
:0042C4FE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C501 E830D0FFFF              call 00429536
:0042C506 E8C5300000              call 0042F5D0
:0042C50B EBD4                    jmp 0042C4E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C4EE(C)
|
:0042C50D 8B55F8                  mov edx, dword ptr [ebp-08]
:0042C510 0FBE421F                movsx eax, byte ptr [edx+1F]
:0042C514 83F820                  cmp eax, 00000020
:0042C517 7513                    jne 0042C52C
:0042C519 B928474900              mov ecx, 00494728
:0042C51E E8ADE60200              call 0045ABD0
:0042C523 83F810                  cmp eax, 00000010
:0042C526 7504                    jne 0042C52C
:0042C528 B010                    mov al, 10
:0042C52A EB0E                    jmp 0042C53A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C517(C), :0042C526(C)
|
:0042C52C 6AFF                    push FFFFFFFF
:0042C52E B928474900              mov ecx, 00494728
:0042C533 E8581D0000              call 0042E290
:0042C538 B012                    mov al, 12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C52A(U)
|
:0042C53A 8BE5                    mov esp, ebp
:0042C53C 5D                      pop ebp
:0042C53D C20400                  ret 0004



* Referenced by a CALL at Address:
|:004202E9   
|
:0042C540 55                      push ebp
:0042C541 8BEC                    mov ebp, esp
:0042C543 51                      push ecx
:0042C544 894DFC                  mov dword ptr [ebp-04], ecx
:0042C547 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C54A 8A481F                  mov cl, byte ptr [eax+1F]
:0042C54D 51                      push ecx
:0042C54E E840000000              call 0042C593
:0042C553 83C404                  add esp, 00000004
:0042C556 85C0                    test eax, eax
:0042C558 7D04                    jge 0042C55E
:0042C55A 33C0                    xor eax, eax
:0042C55C EB2F                    jmp 0042C58D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C558(C)
|
:0042C55E 8B55FC                  mov edx, dword ptr [ebp-04]
:0042C561 0FBE421F                movsx eax, byte ptr [edx+1F]
:0042C565 85C0                    test eax, eax
:0042C567 7C1F                    jl 0042C588
:0042C569 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C56C 0FBE511F                movsx edx, byte ptr [ecx+1F]
:0042C570 83FA40                  cmp edx, 00000040
:0042C573 7F13                    jg 0042C588

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042C575 6A02                    push 00000002
:0042C577 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C57A 8A481F                  mov cl, byte ptr [eax+1F]
:0042C57D 51                      push ecx
:0042C57E B948494B00              mov ecx, 004B4948
:0042C583 E84FBB0100              call 004480D7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C567(C), :0042C573(C)
|
:0042C588 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C55C(U)
|
:0042C58D 8BE5                    mov esp, ebp
:0042C58F 5D                      pop ebp
:0042C590 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042C54E   
|
:0042C593 55                      push ebp
:0042C594 8BEC                    mov ebp, esp
:0042C596 6AFF                    push FFFFFFFF
:0042C598 6852974700              push 00479752
:0042C59D 64A100000000            mov eax, dword ptr fs:[00000000]
:0042C5A3 50                      push eax
:0042C5A4 64892500000000          mov dword ptr fs:[00000000], esp
:0042C5AB 81EC10010000            sub esp, 00000110
:0042C5B1 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C5B7 E88490FDFF              call 00405640
:0042C5BC C745FC00000000          mov [ebp-04], 00000000
:0042C5C3 8A4508                  mov al, byte ptr [ebp+08]
:0042C5C6 50                      push eax
:0042C5C7 E8B7000000              call 0042C683
:0042C5CC 83C404                  add esp, 00000004
:0042C5CF 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax
:0042C5D5 83BDECFEFFFF00          cmp dword ptr [ebp+FFFFFEEC], 00000000
:0042C5DC 7D24                    jge 0042C602
:0042C5DE C785E8FEFFFFFFFFFFFF    mov dword ptr [ebp+FFFFFEE8], FFFFFFFF
:0042C5E8 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042C5EF 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C5F5 E86690FDFF              call 00405660
:0042C5FA 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0042C600 EB73                    jmp 0042C675

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C5DC(C)
|

* Possible StringData Ref from Data Obj ->"SEFF.E3"
                                  |
:0042C602 6840D54700              push 0047D540
:0042C607 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C60D E8C34BFEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042C612 6A04                    push 00000004
:0042C614 6A00                    push 00000000
:0042C616 6A00                    push 00000000
:0042C618 B958474900              mov ecx, 00494758
:0042C61D E86EC90400              call 00478F90
:0042C622 50                      push eax
:0042C623 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042C629 51                      push ecx
:0042C62A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C630 E8F44CFEFF              call 00411329
:0042C635 85C0                    test eax, eax
:0042C637 750D                    jne 0042C646

* Possible StringData Ref from Data Obj ->"in ReadAfterEffectAm()"
                                  |
:0042C639 6840D34700              push 0047D340
:0042C63E E85975FFFF              call 00423B9C
:0042C643 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C637(C)
|
:0042C646 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C64C E8D415FEFF              call 0040DC25
:0042C651 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:0042C657 8995E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], edx
:0042C65D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042C664 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C66A E8F18FFDFF              call 00405660
:0042C66F 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C600(U)
|
:0042C675 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C678 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042C67F 8BE5                    mov esp, ebp
:0042C681 5D                      pop ebp
:0042C682 C3                      ret



* Referenced by a CALL at Address:
|:0042C5C7   
|
:0042C683 55                      push ebp
:0042C684 8BEC                    mov ebp, esp
:0042C686 51                      push ecx
:0042C687 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042C68B 8945FC                  mov dword ptr [ebp-04], eax
:0042C68E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C691 83E904                  sub ecx, 00000004
:0042C694 894DFC                  mov dword ptr [ebp-04], ecx
:0042C697 837DFC38                cmp dword ptr [ebp-04], 00000038
:0042C69B 7732                    ja 0042C6CF
:0042C69D 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C6A0 33D2                    xor edx, edx
:0042C6A2 8A90F2C64200            mov dl, byte ptr [eax+0042C6F2]
:0042C6A8 FF2495D6C64200          jmp dword ptr [4*edx+0042C6D6]
:0042C6AF B801000000              mov eax, 00000001
:0042C6B4 EB1C                    jmp 0042C6D2

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042C6B6 B802000000              mov eax, 00000002
:0042C6BB EB15                    jmp 0042C6D2
:0042C6BD 33C0                    xor eax, eax
:0042C6BF EB11                    jmp 0042C6D2
:0042C6C1 B801000000              mov eax, 00000001
:0042C6C6 EB0A                    jmp 0042C6D2
:0042C6C8 B812000000              mov eax, 00000012
:0042C6CD EB03                    jmp 0042C6D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C69B(C)
|
:0042C6CF 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C6B4(U), :0042C6BB(U), :0042C6BF(U), :0042C6C6(U), :0042C6CD(U)
|
:0042C6D2 8BE5                    mov esp, ebp
:0042C6D4 5D                      pop ebp
:0042C6D5 C3                      ret



:0042C6D6 AFC64200                DWORD 0042C6AF
:0042C6DA AFC64200                DWORD 0042C6AF
:0042C6DE B6C64200                DWORD 0042C6B6
:0042C6E2 BDC64200                DWORD 0042C6BD
:0042C6E6 C1C64200                DWORD 0042C6C1
:0042C6EA C8C64200                DWORD 0042C6C8
:0042C6EE CFC64200                DWORD 0042C6CF


:0042C6F2 0006                    add byte ptr [esi], al
:0042C6F4 06                      push es
:0042C6F5 06                      push es
:0042C6F6 06                      push es
:0042C6F7 06                      push es
:0042C6F8 06                      push es
:0042C6F9 06                      push es
:0042C6FA 06                      push es
:0042C6FB 06                      push es
:0042C6FC 06                      push es
:0042C6FD 06                      push es
:0042C6FE 06                      push es
:0042C6FF 0106                    add dword ptr [esi], eax
:0042C701 06                      push es
:0042C702 06                      push es
:0042C703 06                      push es
:0042C704 06                      push es
:0042C705 06                      push es
:0042C706 06                      push es
:0042C707 06                      push es
:0042C708 06                      push es
:0042C709 06                      push es
:0042C70A 06                      push es
:0042C70B 06                      push es
:0042C70C 06                      push es
:0042C70D 06                      push es
:0042C70E 06                      push es
:0042C70F 06                      push es
:0042C710 06                      push es
:0042C711 06                      push es
:0042C712 06                      push es
:0042C713 06                      push es
:0042C714 06                      push es
:0042C715 0206                    add al, byte ptr [esi]
:0042C717 06                      push es
:0042C718 06                      push es
:0042C719 06                      push es
:0042C71A 0303                    add eax, dword ptr [ebx]
:0042C71C 06                      push es
:0042C71D 06                      push es
:0042C71E 06                      push es
:0042C71F 06                      push es
:0042C720 06                      push es
:0042C721 06                      push es
:0042C722 06                      push es
:0042C723 06                      push es
:0042C724 06                      push es
:0042C725 06                      push es
:0042C726 06                      push es
:0042C727 0406                    add al, 06
:0042C729 06                      push es
:0042C72A 05                      BYTE 05h


* Referenced by a CALL at Address:
|:004202F9   
|
:0042C72B 55                      push ebp
:0042C72C 8BEC                    mov ebp, esp
:0042C72E 83EC08                  sub esp, 00000008
:0042C731 894DF8                  mov dword ptr [ebp-08], ecx
:0042C734 C745FC00000000          mov [ebp-04], 00000000
:0042C73B EB09                    jmp 0042C746

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C767(U)
|
:0042C73D 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C740 83C001                  add eax, 00000001
:0042C743 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C73B(U)
|
:0042C746 837DFC04                cmp dword ptr [ebp-04], 00000004
:0042C74A 7D1D                    jge 0042C769

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042C74C 6A02                    push 00000002
:0042C74E E8682E0000              call 0042F5BB
:0042C753 83C404                  add esp, 00000004
:0042C756 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C759 51                      push ecx
:0042C75A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C75D E88BCFFFFF              call 004296ED
:0042C762 E8692E0000              call 0042F5D0
:0042C767 EBD4                    jmp 0042C73D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C74A(C)
|
:0042C769 8BE5                    mov esp, ebp
:0042C76B 5D                      pop ebp
:0042C76C C20400                  ret 0004



* Referenced by a CALL at Address:
|:00420305   
|
:0042C76F 55                      push ebp
:0042C770 8BEC                    mov ebp, esp
:0042C772 51                      push ecx
:0042C773 894DFC                  mov dword ptr [ebp-04], ecx
:0042C776 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C779 8A481F                  mov cl, byte ptr [eax+1F]
:0042C77C 51                      push ecx
:0042C77D E816000000              call 0042C798
:0042C782 83C404                  add esp, 00000004
:0042C785 85C0                    test eax, eax
:0042C787 7D04                    jge 0042C78D
:0042C789 33C0                    xor eax, eax
:0042C78B EB05                    jmp 0042C792

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C787(C)
|
:0042C78D B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C78B(U)
|
:0042C792 8BE5                    mov esp, ebp
:0042C794 5D                      pop ebp
:0042C795 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042C77D   
|
:0042C798 55                      push ebp
:0042C799 8BEC                    mov ebp, esp
:0042C79B 6AFF                    push FFFFFFFF
:0042C79D 6868974700              push 00479768
:0042C7A2 64A100000000            mov eax, dword ptr fs:[00000000]
:0042C7A8 50                      push eax
:0042C7A9 64892500000000          mov dword ptr fs:[00000000], esp
:0042C7B0 81EC10010000            sub esp, 00000110
:0042C7B6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C7BC E87F8EFDFF              call 00405640
:0042C7C1 C745FC00000000          mov [ebp-04], 00000000
:0042C7C8 8A4508                  mov al, byte ptr [ebp+08]
:0042C7CB 50                      push eax
:0042C7CC E8B7000000              call 0042C888
:0042C7D1 83C404                  add esp, 00000004
:0042C7D4 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax
:0042C7DA 83BDECFEFFFF00          cmp dword ptr [ebp+FFFFFEEC], 00000000
:0042C7E1 7D24                    jge 0042C807
:0042C7E3 C785E8FEFFFFFFFFFFFF    mov dword ptr [ebp+FFFFFEE8], FFFFFFFF
:0042C7ED C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042C7F4 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C7FA E8618EFDFF              call 00405660
:0042C7FF 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0042C805 EB73                    jmp 0042C87A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C7E1(C)
|

* Possible StringData Ref from Data Obj ->"SPANEL.E3"
                                  |
:0042C807 6828D54700              push 0047D528
:0042C80C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C812 E8BE49FEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042C817 6A04                    push 00000004
:0042C819 6A00                    push 00000000
:0042C81B 6A00                    push 00000000
:0042C81D B958474900              mov ecx, 00494758
:0042C822 E869C70400              call 00478F90
:0042C827 50                      push eax
:0042C828 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042C82E 51                      push ecx
:0042C82F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C835 E8EF4AFEFF              call 00411329
:0042C83A 85C0                    test eax, eax
:0042C83C 750D                    jne 0042C84B

* Possible StringData Ref from Data Obj ->"in ReadAfterPanelAm()"
                                  |
:0042C83E 6858D34700              push 0047D358
:0042C843 E85473FFFF              call 00423B9C
:0042C848 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C83C(C)
|
:0042C84B 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C851 E8CF13FEFF              call 0040DC25
:0042C856 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:0042C85C 8995E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], edx
:0042C862 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042C869 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042C86F E8EC8DFDFF              call 00405660
:0042C874 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C805(U)
|
:0042C87A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C87D 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042C884 8BE5                    mov esp, ebp
:0042C886 5D                      pop ebp
:0042C887 C3                      ret



* Referenced by a CALL at Address:
|:0042C7CC   
|
:0042C888 55                      push ebp
:0042C889 8BEC                    mov ebp, esp
:0042C88B 51                      push ecx
:0042C88C 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042C890 8945FC                  mov dword ptr [ebp-04], eax
:0042C893 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C896 83E904                  sub ecx, 00000004
:0042C899 894DFC                  mov dword ptr [ebp-04], ecx
:0042C89C 837DFC39                cmp dword ptr [ebp-04], 00000039
:0042C8A0 7743                    ja 0042C8E5
:0042C8A2 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C8A5 33D2                    xor edx, edx
:0042C8A7 8A9010C94200            mov dl, byte ptr [eax+0042C910]
:0042C8AD FF2495ECC84200          jmp dword ptr [4*edx+0042C8EC]

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042C8B4 B807000000              mov eax, 00000007
:0042C8B9 EB2D                    jmp 0042C8E8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042C8BB B803000000              mov eax, 00000003
:0042C8C0 EB26                    jmp 0042C8E8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042C8C2 B804000000              mov eax, 00000004
:0042C8C7 EB1F                    jmp 0042C8E8

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042C8C9 B806000000              mov eax, 00000006
:0042C8CE EB18                    jmp 0042C8E8
:0042C8D0 B81B000000              mov eax, 0000001B
:0042C8D5 EB11                    jmp 0042C8E8

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042C8D7 B808000000              mov eax, 00000008
:0042C8DC EB0A                    jmp 0042C8E8

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042C8DE B808000000              mov eax, 00000008
:0042C8E3 EB03                    jmp 0042C8E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C8A0(C)
|
:0042C8E5 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042C8B9(U), :0042C8C0(U), :0042C8C7(U), :0042C8CE(U), :0042C8D5(U)
|:0042C8DC(U), :0042C8E3(U)
|
:0042C8E8 8BE5                    mov esp, ebp
:0042C8EA 5D                      pop ebp
:0042C8EB C3                      ret



:0042C8EC B4C84200                DWORD 0042C8B4
:0042C8F0 BBC84200                DWORD 0042C8BB
:0042C8F4 B4C84200                DWORD 0042C8B4
:0042C8F8 C2C84200                DWORD 0042C8C2
:0042C8FC C9C84200                DWORD 0042C8C9
:0042C900 D0C84200                DWORD 0042C8D0
:0042C904 D7C84200                DWORD 0042C8D7
:0042C908 DEC84200                DWORD 0042C8DE
:0042C90C E5C84200                DWORD 0042C8E5


:0042C910 0008                    add byte ptr [eax], cl
:0042C912 0801                    or byte ptr [ecx], al
:0042C914 0808                    or byte ptr [eax], cl
:0042C916 0808                    or byte ptr [eax], cl
:0042C918 0808                    or byte ptr [eax], cl
:0042C91A 0808                    or byte ptr [eax], cl
:0042C91C 0802                    or byte ptr [edx], al
:0042C91E 0808                    or byte ptr [eax], cl
:0042C920 0808                    or byte ptr [eax], cl
:0042C922 0808                    or byte ptr [eax], cl
:0042C924 0808                    or byte ptr [eax], cl
:0042C926 0808                    or byte ptr [eax], cl
:0042C928 0808                    or byte ptr [eax], cl
:0042C92A 0808                    or byte ptr [eax], cl
:0042C92C 0808                    or byte ptr [eax], cl
:0042C92E 0808                    or byte ptr [eax], cl
:0042C930 0808                    or byte ptr [eax], cl
:0042C932 0803                    or byte ptr [ebx], al
:0042C934 0808                    or byte ptr [eax], cl
:0042C936 0808                    or byte ptr [eax], cl
:0042C938 0404                    add al, 04
:0042C93A 0808                    or byte ptr [eax], cl
:0042C93C 0808                    or byte ptr [eax], cl
:0042C93E 0808                    or byte ptr [eax], cl
:0042C940 0808                    or byte ptr [eax], cl
:0042C942 0808                    or byte ptr [eax], cl
:0042C944 080508080607            or byte ptr [07060808], al

* Referenced by a CALL at Address:
|:00420315   
|
:0042C94A 55                      push ebp
:0042C94B 8BEC                    mov ebp, esp
:0042C94D 83EC08                  sub esp, 00000008
:0042C950 894DF8                  mov dword ptr [ebp-08], ecx
:0042C953 C745FC00000000          mov [ebp-04], 00000000
:0042C95A EB09                    jmp 0042C965

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C986(U)
|
:0042C95C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042C95F 83C001                  add eax, 00000001
:0042C962 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C95A(U)
|
:0042C965 837DFC04                cmp dword ptr [ebp-04], 00000004
:0042C969 7D1D                    jge 0042C988

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042C96B 6A02                    push 00000002
:0042C96D E8492C0000              call 0042F5BB
:0042C972 83C404                  add esp, 00000004
:0042C975 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C978 51                      push ecx
:0042C979 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C97C E86CCDFFFF              call 004296ED
:0042C981 E84A2C0000              call 0042F5D0
:0042C986 EBD4                    jmp 0042C95C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C969(C)
|
:0042C988 8BE5                    mov esp, ebp
:0042C98A 5D                      pop ebp
:0042C98B C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00426357   , :00426423   
|
:0042C98E 55                      push ebp
:0042C98F 8BEC                    mov ebp, esp
:0042C991 83EC10                  sub esp, 00000010
:0042C994 894DF0                  mov dword ptr [ebp-10], ecx
:0042C997 8B45F0                  mov eax, dword ptr [ebp-10]
:0042C99A 8945F4                  mov dword ptr [ebp-0C], eax
:0042C99D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042C9A0 51                      push ecx
:0042C9A1 E8E96EFFFF              call 0042388F
:0042C9A6 83C404                  add esp, 00000004
:0042C9A9 8945F8                  mov dword ptr [ebp-08], eax
:0042C9AC 8B55F0                  mov edx, dword ptr [ebp-10]
:0042C9AF 0FBE421F                movsx eax, byte ptr [edx+1F]
:0042C9B3 85C0                    test eax, eax
:0042C9B5 7D11                    jge 0042C9C8
:0042C9B7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042C9BA 51                      push ecx
:0042C9BB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C9BE E8A3CDFFFF              call 00429766
:0042C9C3 8945FC                  mov dword ptr [ebp-04], eax
:0042C9C6 EB1B                    jmp 0042C9E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C9B5(C)
|
:0042C9C8 8B5508                  mov edx, dword ptr [ebp+08]
:0042C9CB 52                      push edx
:0042C9CC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042C9CF E804CFFFFF              call 004298D8
:0042C9D4 8945FC                  mov dword ptr [ebp-04], eax
:0042C9D7 8B4508                  mov eax, dword ptr [ebp+08]
:0042C9DA 50                      push eax
:0042C9DB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042C9DE E8ACD7FFFF              call 0042A18F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C9C6(U)
|
:0042C9E3 817DF438464900          cmp dword ptr [ebp-0C], 00494638
:0042C9EA 7510                    jne 0042C9FC
:0042C9EC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042C9EF 51                      push ecx
:0042C9F0 8B5508                  mov edx, dword ptr [ebp+08]
:0042C9F3 52                      push edx
:0042C9F4 E8BAEAFFFF              call 0042B4B3
:0042C9F9 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042C9EA(C)
|
:0042C9FC 6A00                    push 00000000
:0042C9FE 8B4508                  mov eax, dword ptr [ebp+08]
:0042CA01 50                      push eax
:0042CA02 E8533AFFFF              call 0042045A
:0042CA07 83C408                  add esp, 00000008
:0042CA0A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042CA0D E8CE9F0000              call 004369E0
:0042CA12 85C0                    test eax, eax
:0042CA14 770E                    ja 0042CA24
:0042CA16 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042CA19 51                      push ecx
:0042CA1A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042CA1D E8D3AEFFFF              call 004278F5
:0042CA22 EB0C                    jmp 0042CA30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CA14(C)
|
:0042CA24 8B5508                  mov edx, dword ptr [ebp+08]
:0042CA27 52                      push edx
:0042CA28 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042CA2B E806000000              call 0042CA36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CA22(U)
|
:0042CA30 8BE5                    mov esp, ebp
:0042CA32 5D                      pop ebp
:0042CA33 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004263AE   , :00426494   , :0042CA2B   
|
:0042CA36 55                      push ebp
:0042CA37 8BEC                    mov ebp, esp
:0042CA39 83EC08                  sub esp, 00000008
:0042CA3C 894DF8                  mov dword ptr [ebp-08], ecx
:0042CA3F 8B45F8                  mov eax, dword ptr [ebp-08]
:0042CA42 50                      push eax
:0042CA43 E8476EFFFF              call 0042388F
:0042CA48 83C404                  add esp, 00000004
:0042CA4B 8945FC                  mov dword ptr [ebp-04], eax
:0042CA4E E81E000000              call 0042CA71
:0042CA53 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042CA56 51                      push ecx
:0042CA57 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CA5A E8C0070000              call 0042D21F
:0042CA5F 8B5508                  mov edx, dword ptr [ebp+08]
:0042CA62 52                      push edx
:0042CA63 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042CA66 E823000000              call 0042CA8E
:0042CA6B 8BE5                    mov esp, ebp
:0042CA6D 5D                      pop ebp
:0042CA6E C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042CA4E   
|
:0042CA71 55                      push ebp
:0042CA72 8BEC                    mov ebp, esp
:0042CA74 6AFF                    push FFFFFFFF
:0042CA76 B938464900              mov ecx, 00494638
:0042CA7B E840140000              call 0042DEC0
:0042CA80 6AFF                    push FFFFFFFF
:0042CA82 B9D0454900              mov ecx, 004945D0
:0042CA87 E834140000              call 0042DEC0
:0042CA8C 5D                      pop ebp
:0042CA8D C3                      ret



* Referenced by a CALL at Address:
|:0042CA66   
|
:0042CA8E 55                      push ebp
:0042CA8F 8BEC                    mov ebp, esp
:0042CA91 83EC0C                  sub esp, 0000000C
:0042CA94 894DF4                  mov dword ptr [ebp-0C], ecx
:0042CA97 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042CA9A 8945F8                  mov dword ptr [ebp-08], eax
:0042CA9D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042CAA0 51                      push ecx
:0042CAA1 E8E96DFFFF              call 0042388F
:0042CAA6 83C404                  add esp, 00000004
:0042CAA9 8945FC                  mov dword ptr [ebp-04], eax
:0042CAAC 8B5508                  mov edx, dword ptr [ebp+08]
:0042CAAF 52                      push edx
:0042CAB0 E8A7000000              call 0042CB5C
:0042CAB5 83C404                  add esp, 00000004
:0042CAB8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042CABB E8A0150000              call 0042E060
:0042CAC0 85C0                    test eax, eax
:0042CAC2 7544                    jne 0042CB08
:0042CAC4 8B4508                  mov eax, dword ptr [ebp+08]
:0042CAC7 50                      push eax
:0042CAC8 E8D4000000              call 0042CBA1
:0042CACD 83C404                  add esp, 00000004
:0042CAD0 85C0                    test eax, eax
:0042CAD2 7518                    jne 0042CAEC
:0042CAD4 C7058047490001000000    mov dword ptr [00494780], 00000001
:0042CADE 6A00                    push 00000000
:0042CAE0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042CAE3 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0042CAE4 FF15D8D54B00            Call dword ptr [004BD5D8]
:0042CAEA EB6A                    jmp 0042CB56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CAD2(C)
|
:0042CAEC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CAEF E8AC130000              call 0042DEA0
:0042CAF4 85C0                    test eax, eax
:0042CAF6 740E                    je 0042CB06
:0042CAF8 8B5508                  mov edx, dword ptr [ebp+08]
:0042CAFB 52                      push edx
:0042CAFC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042CAFF E8C596FFFF              call 004261C9
:0042CB04 EB50                    jmp 0042CB56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CAF6(C)
|
:0042CB06 EB42                    jmp 0042CB4A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CAC2(C)
|
:0042CB08 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CB0B E890130000              call 0042DEA0
:0042CB10 85C0                    test eax, eax
:0042CB12 7436                    je 0042CB4A
:0042CB14 8B4508                  mov eax, dword ptr [ebp+08]
:0042CB17 50                      push eax
:0042CB18 E884000000              call 0042CBA1
:0042CB1D 83C404                  add esp, 00000004
:0042CB20 85C0                    test eax, eax
:0042CB22 7518                    jne 0042CB3C
:0042CB24 C7058047490001000000    mov dword ptr [00494780], 00000001
:0042CB2E 6A00                    push 00000000
:0042CB30 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042CB33 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0042CB34 FF15D8D54B00            Call dword ptr [004BD5D8]
:0042CB3A EB1A                    jmp 0042CB56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CB22(C)
|
:0042CB3C 8B5508                  mov edx, dword ptr [ebp+08]
:0042CB3F 52                      push edx
:0042CB40 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042CB43 E88196FFFF              call 004261C9
:0042CB48 EB0C                    jmp 0042CB56

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042CB06(U), :0042CB12(C)
|
:0042CB4A 8B4508                  mov eax, dword ptr [ebp+08]
:0042CB4D 50                      push eax
:0042CB4E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CB51 E87396FFFF              call 004261C9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042CAEA(U), :0042CB04(U), :0042CB3A(U), :0042CB48(U)
|
:0042CB56 8BE5                    mov esp, ebp
:0042CB58 5D                      pop ebp
:0042CB59 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042CAB0   
|
:0042CB5C 55                      push ebp
:0042CB5D 8BEC                    mov ebp, esp
:0042CB5F 6A00                    push 00000000
:0042CB61 E8D1A90400              call 00477537
:0042CB66 83C404                  add esp, 00000004
:0042CB69 E81934FFFF              call 0041FF87

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0042CB6E 6A09                    push 00000009
:0042CB70 E89A8A0400              call 0047560F
:0042CB75 83C404                  add esp, 00000004
:0042CB78 E8C694FFFF              call 00426043
:0042CB7D 6A01                    push 00000001
:0042CB7F E8B3A90400              call 00477537
:0042CB84 83C404                  add esp, 00000004
:0042CB87 6AFF                    push FFFFFFFF
:0042CB89 B938464900              mov ecx, 00494638
:0042CB8E E82D130000              call 0042DEC0
:0042CB93 6AFF                    push FFFFFFFF
:0042CB95 B9D0454900              mov ecx, 004945D0
:0042CB9A E821130000              call 0042DEC0
:0042CB9F 5D                      pop ebp
:0042CBA0 C3                      ret



* Referenced by a CALL at Addresses:
|:0042CAC8   , :0042CB18   
|
:0042CBA1 55                      push ebp
:0042CBA2 8BEC                    mov ebp, esp
:0042CBA4 83EC0C                  sub esp, 0000000C
:0042CBA7 B928474900              mov ecx, 00494728
:0042CBAC E8CF180000              call 0042E480
:0042CBB1 8845FC                  mov byte ptr [ebp-04], al
:0042CBB4 8B45FC                  mov eax, dword ptr [ebp-04]
:0042CBB7 25FF000000              and eax, 000000FF
:0042CBBC 83F80A                  cmp eax, 0000000A
:0042CBBF 7D57                    jge 0042CC18
:0042CBC1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CBC4 81E1FF000000            and ecx, 000000FF
:0042CBCA 83C101                  add ecx, 00000001
:0042CBCD 51                      push ecx
:0042CBCE B928474900              mov ecx, 00494728
:0042CBD3 E8189A0300              call 004665F0
:0042CBD8 8B55FC                  mov edx, dword ptr [ebp-04]
:0042CBDB 81E2FF000000            and edx, 000000FF
:0042CBE1 83C201                  add edx, 00000001
:0042CBE4 52                      push edx

* Possible StringData Ref from Data Obj ->"%d/10"
                                  |
:0042CBE5 6870D34700              push 0047D370
:0042CBEA 8D45F4                  lea eax, dword ptr [ebp-0C]
:0042CBED 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042CBEE FF1504D74B00            Call dword ptr [004BD704]
:0042CBF4 83C40C                  add esp, 0000000C
:0042CBF7 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0042CBFA 51                      push ecx

* Possible Reference to Dialog: DialogID_00BB, CONTROL_ID:0433, "0"
                                  |
:0042CBFB 6833040000              push 00000433
:0042CC00 8B5508                  mov edx, dword ptr [ebp+08]
:0042CC03 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042CC04 FF1510D64B00            Call dword ptr [004BD610]
:0042CC0A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0042CC0B FF1514D64B00            Call dword ptr [004BD614]
:0042CC11 B801000000              mov eax, 00000001
:0042CC16 EB02                    jmp 0042CC1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CBBF(C)
|
:0042CC18 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CC16(U)
|
:0042CC1A 8BE5                    mov esp, ebp
:0042CC1C 5D                      pop ebp
:0042CC1D C3                      ret



* Referenced by a CALL at Addresses:
|:004297D7   , :00429971   , :0042B3D4   
|
:0042CC1E 55                      push ebp
:0042CC1F 8BEC                    mov ebp, esp
:0042CC21 83EC4C                  sub esp, 0000004C
:0042CC24 894DE8                  mov dword ptr [ebp-18], ecx
:0042CC27 817DE838464900          cmp dword ptr [ebp-18], 00494638
:0042CC2E 0F8589000000            jne 0042CCBD
:0042CC34 B9D0454900              mov ecx, 004945D0
:0042CC39 E8C266FDFF              call 00403300
:0042CC3E 8945F0                  mov dword ptr [ebp-10], eax
:0042CC41 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042CC44 6BC950                  imul ecx, 00000050
:0042CC47 81C1787F4900            add ecx, 00497F78
:0042CC4D E8CC50FDFF              call 00401D1E
:0042CC52 8945E0                  mov dword ptr [ebp-20], eax
:0042CC55 C745E400000000          mov [ebp-1C], 00000000
:0042CC5C DF6DE0                  fild qword ptr [ebp-20]
:0042CC5F D95DDC                  fstp dword ptr [ebp-24]
:0042CC62 B9D0454900              mov ecx, 004945D0
:0042CC67 E8A4150000              call 0042E210
:0042CC6C 50                      push eax
:0042CC6D E8FA64FFFF              call 0042316C
:0042CC72 83C404                  add esp, 00000004
:0042CC75 D84DDC                  fmul dword ptr [ebp-24]
:0042CC78 D95DFC                  fstp dword ptr [ebp-04]
:0042CC7B 8B45E8                  mov eax, dword ptr [ebp-18]
:0042CC7E 8B4814                  mov ecx, dword ptr [eax+14]
:0042CC81 6BC950                  imul ecx, 00000050
:0042CC84 81C1787F4900            add ecx, 00497F78
:0042CC8A E8C250FDFF              call 00401D51
:0042CC8F 8945D4                  mov dword ptr [ebp-2C], eax
:0042CC92 C745D800000000          mov [ebp-28], 00000000
:0042CC99 DF6DD4                  fild qword ptr [ebp-2C]
:0042CC9C D95DD0                  fstp dword ptr [ebp-30]
:0042CC9F B938464900              mov ecx, 00494638
:0042CCA4 E887150000              call 0042E230
:0042CCA9 50                      push eax
:0042CCAA E8BD64FFFF              call 0042316C
:0042CCAF 83C404                  add esp, 00000004
:0042CCB2 D84DD0                  fmul dword ptr [ebp-30]
:0042CCB5 D95DF4                  fstp dword ptr [ebp-0C]
:0042CCB8 E984000000              jmp 0042CD41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CC2E(C)
|
:0042CCBD B938464900              mov ecx, 00494638
:0042CCC2 E83966FDFF              call 00403300
:0042CCC7 8945EC                  mov dword ptr [ebp-14], eax
:0042CCCA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042CCCD 6BC950                  imul ecx, 00000050
:0042CCD0 81C1787F4900            add ecx, 00497F78
:0042CCD6 E84350FDFF              call 00401D1E
:0042CCDB 8945C8                  mov dword ptr [ebp-38], eax
:0042CCDE C745CC00000000          mov [ebp-34], 00000000
:0042CCE5 DF6DC8                  fild qword ptr [ebp-38]
:0042CCE8 D95DC4                  fstp dword ptr [ebp-3C]
:0042CCEB B938464900              mov ecx, 00494638
:0042CCF0 E81B150000              call 0042E210
:0042CCF5 50                      push eax
:0042CCF6 E87164FFFF              call 0042316C
:0042CCFB 83C404                  add esp, 00000004
:0042CCFE D84DC4                  fmul dword ptr [ebp-3C]
:0042CD01 D95DFC                  fstp dword ptr [ebp-04]
:0042CD04 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0042CD07 8B4914                  mov ecx, dword ptr [ecx+14]
:0042CD0A 6BC950                  imul ecx, 00000050
:0042CD0D 81C1787F4900            add ecx, 00497F78
:0042CD13 E83950FDFF              call 00401D51
:0042CD18 8945BC                  mov dword ptr [ebp-44], eax
:0042CD1B C745C000000000          mov [ebp-40], 00000000
:0042CD22 DF6DBC                  fild qword ptr [ebp-44]
:0042CD25 D95DB8                  fstp dword ptr [ebp-48]
:0042CD28 B9D0454900              mov ecx, 004945D0
:0042CD2D E8FE140000              call 0042E230
:0042CD32 50                      push eax
:0042CD33 E83464FFFF              call 0042316C
:0042CD38 83C404                  add esp, 00000004
:0042CD3B D84DB8                  fmul dword ptr [ebp-48]
:0042CD3E D95DF4                  fstp dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CCB8(U)
|
:0042CD41 D945FC                  fld dword ptr [ebp-04]
:0042CD44 D865F4                  fsub dword ptr [ebp-0C]
:0042CD47 E8542E0400              call 0046FBA0
:0042CD4C 8945F8                  mov dword ptr [ebp-08], eax
:0042CD4F 837DF800                cmp dword ptr [ebp-08], 00000000
:0042CD53 7D07                    jge 0042CD5C
:0042CD55 B801000000              mov eax, 00000001
:0042CD5A EB1B                    jmp 0042CD77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CD53(C)
|
:0042CD5C 817DF8EE020000          cmp dword ptr [ebp-08], 000002EE
:0042CD63 7E09                    jle 0042CD6E
:0042CD65 C745B4EE020000          mov [ebp-4C], 000002EE
:0042CD6C EB06                    jmp 0042CD74

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CD63(C)
|
:0042CD6E 8B55F8                  mov edx, dword ptr [ebp-08]
:0042CD71 8955B4                  mov dword ptr [ebp-4C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CD6C(U)
|
:0042CD74 8B45B4                  mov eax, dword ptr [ebp-4C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CD5A(U)
|
:0042CD77 8BE5                    mov esp, ebp
:0042CD79 5D                      pop ebp
:0042CD7A C3                      ret



* Referenced by a CALL at Addresses:
|:00420003   , :00420034   , :0042601C   , :00426071   , :0042609A   
|:0042905F   , :0042933A   , :0042E389   
|
:0042CD7B 55                      push ebp
:0042CD7C 8BEC                    mov ebp, esp
:0042CD7E 51                      push ecx
:0042CD7F 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0042CD82 6A09                    push 00000009
:0042CD84 E886880400              call 0047560F
:0042CD89 83C404                  add esp, 00000004
:0042CD8C 6A00                    push 00000000
:0042CD8E 6A00                    push 00000000
:0042CD90 6A00                    push 00000000
:0042CD92 E8868F0400              call 00475D1D
:0042CD97 83C40C                  add esp, 0000000C
:0042CD9A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CD9D E8E47AFFFF              call 00424886
:0042CDA2 6A00                    push 00000000
:0042CDA4 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CDA6 6A04                    push 00000004
:0042CDA8 E8708F0400              call 00475D1D
:0042CDAD 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CDB0 6A04                    push 00000004
:0042CDB2 6A00                    push 00000000
:0042CDB4 6800510000              push 00005100
:0042CDB9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CDBC 83C124                  add ecx, 00000024
:0042CDBF E8CCC10400              call 00478F90
:0042CDC4 50                      push eax
:0042CDC5 6A30                    push 00000030
:0042CDC7 6A30                    push 00000030
:0042CDC9 6A30                    push 00000030
:0042CDCB 8B45FC                  mov eax, dword ptr [ebp-04]
:0042CDCE 8B480C                  mov ecx, dword ptr [eax+0C]
:0042CDD1 51                      push ecx
:0042CDD2 E81D9D0400              call 00476AF4
:0042CDD7 83C414                  add esp, 00000014
:0042CDDA 8BE5                    mov esp, ebp
:0042CDDC 5D                      pop ebp
:0042CDDD C3                      ret



* Referenced by a CALL at Addresses:
|:0042001C   , :0042004D   , :0042245E   , :00422481   , :00424A01   
|:00426082   , :004260AB   , :004289D5   , :00428BC0   , :00428C30   
|:00428CE1   , :0042906E   , :004292B8   , :00429349   , :004295C9   
|
:0042CDDE 55                      push ebp
:0042CDDF 8BEC                    mov ebp, esp
:0042CDE1 51                      push ecx
:0042CDE2 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CDE5 6A04                    push 00000004
:0042CDE7 6A00                    push 00000000
:0042CDE9 8B4508                  mov eax, dword ptr [ebp+08]
:0042CDEC 50                      push eax
:0042CDED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CDF0 83C124                  add ecx, 00000024
:0042CDF3 E898C10400              call 00478F90
:0042CDF8 50                      push eax
:0042CDF9 6A30                    push 00000030
:0042CDFB 6A30                    push 00000030
:0042CDFD 6A30                    push 00000030
:0042CDFF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CE02 8B510C                  mov edx, dword ptr [ecx+0C]
:0042CE05 52                      push edx
:0042CE06 E8E99C0400              call 00476AF4
:0042CE0B 83C414                  add esp, 00000014
:0042CE0E 8BE5                    mov esp, ebp
:0042CE10 5D                      pop ebp
:0042CE11 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004295B0   
|
:0042CE14 55                      push ebp
:0042CE15 8BEC                    mov ebp, esp
:0042CE17 51                      push ecx
:0042CE18 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CE1B 6A04                    push 00000004
:0042CE1D 6A00                    push 00000000
:0042CE1F 8B450C                  mov eax, dword ptr [ebp+0C]
:0042CE22 50                      push eax
:0042CE23 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CE26 83C124                  add ecx, 00000024
:0042CE29 E862C10400              call 00478F90
:0042CE2E 50                      push eax
:0042CE2F 6A30                    push 00000030
:0042CE31 6A30                    push 00000030
:0042CE33 6A30                    push 00000030
:0042CE35 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042CE38 51                      push ecx
:0042CE39 E8B69C0400              call 00476AF4
:0042CE3E 83C414                  add esp, 00000014
:0042CE41 8BE5                    mov esp, ebp
:0042CE43 5D                      pop ebp
:0042CE44 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0042602D   , :00429521   , :00429598   
|
:0042CE47 55                      push ebp
:0042CE48 8BEC                    mov ebp, esp
:0042CE4A 51                      push ecx
:0042CE4B 894DFC                  mov dword ptr [ebp-04], ecx
:0042CE4E 817DFC38464900          cmp dword ptr [ebp-04], 00494638
:0042CE55 752E                    jne 0042CE85

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CE57 6A04                    push 00000004
:0042CE59 6A00                    push 00000000
:0042CE5B 8B4508                  mov eax, dword ptr [ebp+08]
:0042CE5E 50                      push eax
:0042CE5F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CE62 83C138                  add ecx, 00000038
:0042CE65 E826C10400              call 00478F90
:0042CE6A 50                      push eax
:0042CE6B 6A30                    push 00000030
:0042CE6D 6A30                    push 00000030
:0042CE6F 6A30                    push 00000030
:0042CE71 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CE74 8B510C                  mov edx, dword ptr [ecx+0C]
:0042CE77 83C208                  add edx, 00000008
:0042CE7A 52                      push edx
:0042CE7B E8749C0400              call 00476AF4
:0042CE80 83C414                  add esp, 00000014
:0042CE83 EB2C                    jmp 0042CEB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CE55(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CE85 6A04                    push 00000004
:0042CE87 6A00                    push 00000000
:0042CE89 8B4508                  mov eax, dword ptr [ebp+08]
:0042CE8C 50                      push eax
:0042CE8D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CE90 83C138                  add ecx, 00000038
:0042CE93 E8F8C00400              call 00478F90
:0042CE98 50                      push eax
:0042CE99 6A30                    push 00000030
:0042CE9B 6A30                    push 00000030
:0042CE9D 6A30                    push 00000030
:0042CE9F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CEA2 8B510C                  mov edx, dword ptr [ecx+0C]
:0042CEA5 83EA08                  sub edx, 00000008
:0042CEA8 52                      push edx
:0042CEA9 E8469C0400              call 00476AF4
:0042CEAE 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CE83(U)
|
:0042CEB1 8BE5                    mov esp, ebp
:0042CEB3 5D                      pop ebp
:0042CEB4 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042603C   , :004290B5   
|
:0042CEB7 55                      push ebp
:0042CEB8 8BEC                    mov ebp, esp
:0042CEBA 51                      push ecx
:0042CEBB 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CEBE 6A04                    push 00000004
:0042CEC0 6A00                    push 00000000
:0042CEC2 8B4508                  mov eax, dword ptr [ebp+08]
:0042CEC5 50                      push eax
:0042CEC6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CEC9 83C14C                  add ecx, 0000004C
:0042CECC E8BFC00400              call 00478F90
:0042CED1 50                      push eax
:0042CED2 6A40                    push 00000040
:0042CED4 6A40                    push 00000040
:0042CED6 6A28                    push 00000028
:0042CED8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CEDB E80F000000              call 0042CEEF
:0042CEE0 50                      push eax
:0042CEE1 E80E9C0400              call 00476AF4
:0042CEE6 83C414                  add esp, 00000014
:0042CEE9 8BE5                    mov esp, ebp
:0042CEEB 5D                      pop ebp
:0042CEEC C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00429102   , :00429353   , :00429390   , :004294E9   , :004295D5   
|:00429723   , :0042CEDB   
|
:0042CEEF 55                      push ebp
:0042CEF0 8BEC                    mov ebp, esp
:0042CEF2 51                      push ecx
:0042CEF3 894DFC                  mov dword ptr [ebp-04], ecx
:0042CEF6 817DFC38464900          cmp dword ptr [ebp-04], 00494638
:0042CEFD 7508                    jne 0042CF07
:0042CEFF 8B45FC                  mov eax, dword ptr [ebp-04]
:0042CF02 8B400C                  mov eax, dword ptr [eax+0C]
:0042CF05 EB09                    jmp 0042CF10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CEFD(C)
|
:0042CF07 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042CF0A 8B410C                  mov eax, dword ptr [ecx+0C]
:0042CF0D 83E808                  sub eax, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CF05(U)
|
:0042CF10 8BE5                    mov esp, ebp
:0042CF12 5D                      pop ebp
:0042CF13 C3                      ret



* Referenced by a CALL at Address:
|:004249C4   
|
:0042CF14 55                      push ebp
:0042CF15 8BEC                    mov ebp, esp
:0042CF17 6AFF                    push FFFFFFFF
:0042CF19 687E974700              push 0047977E
:0042CF1E 64A100000000            mov eax, dword ptr fs:[00000000]
:0042CF24 50                      push eax
:0042CF25 64892500000000          mov dword ptr fs:[00000000], esp
:0042CF2C 81EC08010000            sub esp, 00000108
:0042CF32 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:0042CF38 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042CF3E E8FD86FDFF              call 00405640
:0042CF43 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"CHR_BS.E3"
                                  |
:0042CF4A 68B8D54700              push 0047D5B8
:0042CF4F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042CF55 E87B42FEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CF5A 6A04                    push 00000004
:0042CF5C 6A00                    push 00000000
:0042CF5E 6A00                    push 00000000
:0042CF60 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042CF66 83C124                  add ecx, 00000024
:0042CF69 E822C00400              call 00478F90
:0042CF6E 50                      push eax
:0042CF6F 8B4508                  mov eax, dword ptr [ebp+08]
:0042CF72 25FF000000              and eax, 000000FF
:0042CF77 50                      push eax
:0042CF78 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042CF7E E8A643FEFF              call 00411329
:0042CF83 85C0                    test eax, eax
:0042CF85 750D                    jne 0042CF94

* Possible StringData Ref from Data Obj ->"in ReadChaMem()"
                                  |
:0042CF87 6878D34700              push 0047D378
:0042CF8C E80B6CFFFF              call 00423B9C
:0042CF91 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CF85(C)
|
:0042CF94 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042CF9A E8860CFEFF              call 0040DC25
:0042CF9F 81BDECFEFFFFD0454900    cmp dword ptr [ebp+FFFFFEEC], 004945D0
:0042CFA9 7540                    jne 0042CFEB

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CFAB 6A04                    push 00000004
:0042CFAD 6A00                    push 00000000
:0042CFAF 6800120000              push 00001200
:0042CFB4 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042CFBA 83C124                  add ecx, 00000024
:0042CFBD E8CEBF0400              call 00478F90
:0042CFC2 50                      push eax
:0042CFC3 E836BDFFFF              call 00428CFE
:0042CFC8 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042CFCB 6A04                    push 00000004
:0042CFCD 6A00                    push 00000000
:0042CFCF 68001B0000              push 00001B00
:0042CFD4 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042CFDA 83C124                  add ecx, 00000024
:0042CFDD E8AEBF0400              call 00478F90
:0042CFE2 50                      push eax
:0042CFE3 E816BDFFFF              call 00428CFE
:0042CFE8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042CFA9(C)
|
:0042CFEB C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042CFF2 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042CFF8 E86386FDFF              call 00405660
:0042CFFD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042D000 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042D007 8BE5                    mov esp, ebp
:0042D009 5D                      pop ebp
:0042D00A C20400                  ret 0004



* Referenced by a CALL at Address:
|:004249D0   
|
:0042D00D 55                      push ebp
:0042D00E 8BEC                    mov ebp, esp
:0042D010 6AFF                    push FFFFFFFF
:0042D012 6894974700              push 00479794
:0042D017 64A100000000            mov eax, dword ptr fs:[00000000]
:0042D01D 50                      push eax
:0042D01E 64892500000000          mov dword ptr fs:[00000000], esp
:0042D025 81EC08010000            sub esp, 00000108
:0042D02B 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:0042D031 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042D037 E80486FDFF              call 00405640
:0042D03C C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"CHR_DEF.E3"
                                  |
:0042D043 68A8D54700              push 0047D5A8
:0042D048 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042D04E E88241FEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042D053 6A04                    push 00000004
:0042D055 6A00                    push 00000000
:0042D057 6A00                    push 00000000
:0042D059 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042D05F 83C138                  add ecx, 00000038
:0042D062 E829BF0400              call 00478F90
:0042D067 50                      push eax
:0042D068 8B4508                  mov eax, dword ptr [ebp+08]
:0042D06B 25FF000000              and eax, 000000FF
:0042D070 50                      push eax
:0042D071 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042D077 E8AD42FEFF              call 00411329
:0042D07C 85C0                    test eax, eax
:0042D07E 750D                    jne 0042D08D

* Possible StringData Ref from Data Obj ->"in ReadDefMem()"
                                  |
:0042D080 6888D34700              push 0047D388
:0042D085 E8126BFFFF              call 00423B9C
:0042D08A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D07E(C)
|
:0042D08D 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042D093 E88D0BFEFF              call 0040DC25
:0042D098 81BDECFEFFFFD0454900    cmp dword ptr [ebp+FFFFFEEC], 004945D0
:0042D0A2 7540                    jne 0042D0E4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042D0A4 6A04                    push 00000004
:0042D0A6 6A00                    push 00000000
:0042D0A8 6800120000              push 00001200
:0042D0AD 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042D0B3 83C138                  add ecx, 00000038
:0042D0B6 E8D5BE0400              call 00478F90
:0042D0BB 50                      push eax
:0042D0BC E83DBCFFFF              call 00428CFE
:0042D0C1 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042D0C4 6A04                    push 00000004
:0042D0C6 6A00                    push 00000000
:0042D0C8 68001B0000              push 00001B00
:0042D0CD 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042D0D3 83C138                  add ecx, 00000038
:0042D0D6 E8B5BE0400              call 00478F90
:0042D0DB 50                      push eax
:0042D0DC E81DBCFFFF              call 00428CFE
:0042D0E1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D0A2(C)
|
:0042D0E4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042D0EB 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042D0F1 E86A85FDFF              call 00405660
:0042D0F6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042D0F9 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042D100 8BE5                    mov esp, ebp
:0042D102 5D                      pop ebp
:0042D103 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004249DC   
|
:0042D106 55                      push ebp
:0042D107 8BEC                    mov ebp, esp
:0042D109 6AFF                    push FFFFFFFF
:0042D10B 68AA974700              push 004797AA
:0042D110 64A100000000            mov eax, dword ptr fs:[00000000]
:0042D116 50                      push eax
:0042D117 64892500000000          mov dword ptr fs:[00000000], esp
:0042D11E 81EC08010000            sub esp, 00000108
:0042D124 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:0042D12A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042D130 E80B85FDFF              call 00405640
:0042D135 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"CHR_ATK.E3"
                                  |
:0042D13C 6898D54700              push 0047D598
:0042D141 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042D147 E88940FEFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042D14C 6A04                    push 00000004
:0042D14E 6A00                    push 00000000
:0042D150 6A00                    push 00000000
:0042D152 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042D158 83C14C                  add ecx, 0000004C
:0042D15B E830BE0400              call 00478F90
:0042D160 50                      push eax
:0042D161 8B4508                  mov eax, dword ptr [ebp+08]
:0042D164 25FF000000              and eax, 000000FF
:0042D169 50                      push eax
:0042D16A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042D170 E8B441FEFF              call 00411329
:0042D175 85C0                    test eax, eax
:0042D177 750D                    jne 0042D186

* Possible StringData Ref from Data Obj ->"in ReadAtkMem()"
                                  |
:0042D179 6898D34700              push 0047D398
:0042D17E E8196AFFFF              call 00423B9C
:0042D183 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D177(C)
|
:0042D186 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042D18C E8940AFEFF              call 0040DC25
:0042D191 81BDECFEFFFFD0454900    cmp dword ptr [ebp+FFFFFEEC], 004945D0
:0042D19B 7560                    jne 0042D1FD

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042D19D 6A04                    push 00000004
:0042D19F 6A00                    push 00000000
:0042D1A1 6800300000              push 00003000
:0042D1A6 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042D1AC 83C14C                  add ecx, 0000004C
:0042D1AF E8DCBD0400              call 00478F90
:0042D1B4 50                      push eax
:0042D1B5 E88DA5FFFF              call 00427747
:0042D1BA 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042D1BD 6A04                    push 00000004
:0042D1BF 6A00                    push 00000000
:0042D1C1 6800400000              push 00004000
:0042D1C6 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042D1CC 83C14C                  add ecx, 0000004C
:0042D1CF E8BCBD0400              call 00478F90
:0042D1D4 50                      push eax
:0042D1D5 E86DA5FFFF              call 00427747
:0042D1DA 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042D1DD 6A04                    push 00000004
:0042D1DF 6A00                    push 00000000
:0042D1E1 6800500000              push 00005000
:0042D1E6 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0042D1EC 83C14C                  add ecx, 0000004C
:0042D1EF E89CBD0400              call 00478F90
:0042D1F4 50                      push eax
:0042D1F5 E84DA5FFFF              call 00427747
:0042D1FA 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D19B(C)
|
:0042D1FD C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042D204 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0042D20A E85184FDFF              call 00405660
:0042D20F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042D212 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042D219 8BE5                    mov esp, ebp
:0042D21B 5D                      pop ebp
:0042D21C C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042CA5A   
|
:0042D21F 55                      push ebp
:0042D220 8BEC                    mov ebp, esp
:0042D222 51                      push ecx
:0042D223 894DFC                  mov dword ptr [ebp-04], ecx
:0042D226 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D229 0FBE4820                movsx ecx, byte ptr [eax+20]
:0042D22D 83F904                  cmp ecx, 00000004
:0042D230 7C23                    jl 0042D255
:0042D232 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D235 52                      push edx
:0042D236 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D239 8A4820                  mov cl, byte ptr [eax+20]
:0042D23C 51                      push ecx
:0042D23D 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D240 8B4214                  mov eax, dword ptr [edx+14]
:0042D243 50                      push eax
:0042D244 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D247 51                      push ecx
:0042D248 E8BA010000              call 0042D407
:0042D24D 83C410                  add esp, 00000010
:0042D250 E9AC010000              jmp 0042D401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D230(C)
|
:0042D255 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D258 0FBE4221                movsx eax, byte ptr [edx+21]
:0042D25C 83F804                  cmp eax, 00000004
:0042D25F 7C23                    jl 0042D284
:0042D261 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D264 51                      push ecx
:0042D265 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D268 8A4221                  mov al, byte ptr [edx+21]
:0042D26B 50                      push eax
:0042D26C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D26F 8B5114                  mov edx, dword ptr [ecx+14]
:0042D272 52                      push edx
:0042D273 8B4508                  mov eax, dword ptr [ebp+08]
:0042D276 50                      push eax
:0042D277 E825030000              call 0042D5A1
:0042D27C 83C410                  add esp, 00000010
:0042D27F E97D010000              jmp 0042D401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D25F(C)
|
:0042D284 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D287 0FBE5122                movsx edx, byte ptr [ecx+22]
:0042D28B 83FA04                  cmp edx, 00000004
:0042D28E 7C23                    jl 0042D2B3
:0042D290 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D293 50                      push eax
:0042D294 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D297 8A5122                  mov dl, byte ptr [ecx+22]
:0042D29A 52                      push edx
:0042D29B 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D29E 8B4814                  mov ecx, dword ptr [eax+14]
:0042D2A1 51                      push ecx
:0042D2A2 8B5508                  mov edx, dword ptr [ebp+08]
:0042D2A5 52                      push edx
:0042D2A6 E87D030000              call 0042D628
:0042D2AB 83C410                  add esp, 00000010
:0042D2AE E94E010000              jmp 0042D401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D28E(C)
|
:0042D2B3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D2B6 E8F50E0000              call 0042E1B0
:0042D2BB 85C0                    test eax, eax
:0042D2BD 741C                    je 0042D2DB
:0042D2BF 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D2C2 50                      push eax
:0042D2C3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D2C6 8B5114                  mov edx, dword ptr [ecx+14]
:0042D2C9 52                      push edx
:0042D2CA 8B4508                  mov eax, dword ptr [ebp+08]
:0042D2CD 50                      push eax
:0042D2CE E8DC030000              call 0042D6AF
:0042D2D3 83C40C                  add esp, 0000000C
:0042D2D6 E926010000              jmp 0042D401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D2BD(C)
|
:0042D2DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D2DE E86D0E0000              call 0042E150
:0042D2E3 85C0                    test eax, eax
:0042D2E5 741C                    je 0042D303
:0042D2E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D2EA 51                      push ecx
:0042D2EB 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D2EE 8B4214                  mov eax, dword ptr [edx+14]
:0042D2F1 50                      push eax
:0042D2F2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D2F5 51                      push ecx
:0042D2F6 E8F2030000              call 0042D6ED
:0042D2FB 83C40C                  add esp, 0000000C
:0042D2FE E9FE000000              jmp 0042D401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D2E5(C)
|
:0042D303 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D306 E8950B0000              call 0042DEA0
:0042D30B 85C0                    test eax, eax
:0042D30D 741C                    je 0042D32B
:0042D30F 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D312 52                      push edx
:0042D313 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D316 8B4814                  mov ecx, dword ptr [eax+14]
:0042D319 51                      push ecx
:0042D31A 8B5508                  mov edx, dword ptr [ebp+08]
:0042D31D 52                      push edx
:0042D31E E808040000              call 0042D72B
:0042D323 83C40C                  add esp, 0000000C
:0042D326 E9D6000000              jmp 0042D401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D30D(C)
|
:0042D32B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D32E E89D0E0000              call 0042E1D0
:0042D333 85C0                    test eax, eax
:0042D335 741C                    je 0042D353
:0042D337 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D33A 50                      push eax
:0042D33B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D33E 8B5114                  mov edx, dword ptr [ecx+14]
:0042D341 52                      push edx
:0042D342 8B4508                  mov eax, dword ptr [ebp+08]
:0042D345 50                      push eax
:0042D346 E81E040000              call 0042D769
:0042D34B 83C40C                  add esp, 0000000C
:0042D34E E9AE000000              jmp 0042D401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D335(C)
|
:0042D353 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D356 E8950E0000              call 0042E1F0
:0042D35B 85C0                    test eax, eax
:0042D35D 741C                    je 0042D37B
:0042D35F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D362 51                      push ecx
:0042D363 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D366 8B4214                  mov eax, dword ptr [edx+14]
:0042D369 50                      push eax
:0042D36A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D36D 51                      push ecx
:0042D36E E834040000              call 0042D7A7
:0042D373 83C40C                  add esp, 0000000C
:0042D376 E986000000              jmp 0042D401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D35D(C)
|
:0042D37B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D37E 0FBE4220                movsx eax, byte ptr [edx+20]
:0042D382 83F802                  cmp eax, 00000002
:0042D385 7F20                    jg 0042D3A7
:0042D387 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D38A 51                      push ecx
:0042D38B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D38E 8A4220                  mov al, byte ptr [edx+20]
:0042D391 50                      push eax
:0042D392 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D395 8B5114                  mov edx, dword ptr [ecx+14]
:0042D398 52                      push edx
:0042D399 8B4508                  mov eax, dword ptr [ebp+08]
:0042D39C 50                      push eax
:0042D39D E865000000              call 0042D407
:0042D3A2 83C410                  add esp, 00000010
:0042D3A5 EB5A                    jmp 0042D401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D385(C)
|
:0042D3A7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D3AA 0FBE5121                movsx edx, byte ptr [ecx+21]
:0042D3AE 83FA02                  cmp edx, 00000002
:0042D3B1 7F20                    jg 0042D3D3
:0042D3B3 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D3B6 50                      push eax
:0042D3B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042D3BA 8A5121                  mov dl, byte ptr [ecx+21]
:0042D3BD 52                      push edx
:0042D3BE 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D3C1 8B4814                  mov ecx, dword ptr [eax+14]
:0042D3C4 51                      push ecx
:0042D3C5 8B5508                  mov edx, dword ptr [ebp+08]
:0042D3C8 52                      push edx
:0042D3C9 E8D3010000              call 0042D5A1
:0042D3CE 83C410                  add esp, 00000010
:0042D3D1 EB2E                    jmp 0042D401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D3B1(C)
|
:0042D3D3 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D3D6 0FBE4822                movsx ecx, byte ptr [eax+22]
:0042D3DA 83F902                  cmp ecx, 00000002
:0042D3DD 7F20                    jg 0042D3FF
:0042D3DF 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D3E2 52                      push edx
:0042D3E3 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D3E6 8A4822                  mov cl, byte ptr [eax+22]
:0042D3E9 51                      push ecx
:0042D3EA 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D3ED 8B4214                  mov eax, dword ptr [edx+14]
:0042D3F0 50                      push eax
:0042D3F1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D3F4 51                      push ecx
:0042D3F5 E82E020000              call 0042D628
:0042D3FA 83C410                  add esp, 00000010
:0042D3FD EB02                    jmp 0042D401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D3DD(C)
|
:0042D3FF 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D250(U), :0042D27F(U), :0042D2AE(U), :0042D2D6(U), :0042D2FE(U)
|:0042D326(U), :0042D34E(U), :0042D376(U), :0042D3A5(U), :0042D3D1(U)
|:0042D3FD(U)
|
:0042D401 8BE5                    mov esp, ebp
:0042D403 5D                      pop ebp
:0042D404 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042D248   , :0042D39D   
|
:0042D407 55                      push ebp
:0042D408 8BEC                    mov ebp, esp
:0042D40A 8A4510                  mov al, byte ptr [ebp+10]
:0042D40D 50                      push eax
:0042D40E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042D411 51                      push ecx
:0042D412 E877000000              call 0042D48E
:0042D417 83C408                  add esp, 00000008
:0042D41A 85C0                    test eax, eax
:0042D41C 746C                    je 0042D48A
:0042D41E 0FBE5510                movsx edx, byte ptr [ebp+10]
:0042D422 83FA04                  cmp edx, 00000004
:0042D425 7C2D                    jl 0042D454
:0042D427 0FBE4510                movsx eax, byte ptr [ebp+10]
:0042D42B 83E801                  sub eax, 00000001
:0042D42E 50                      push eax
:0042D42F 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D432 E8890C0000              call 0042E0C0
:0042D437 6A41                    push 00000041
:0042D439 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D43C E87F0A0000              call 0042DEC0
:0042D441 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D444 51                      push ecx
:0042D445 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D448 E8EE2EFFFF              call 0042033B
:0042D44D B801000000              mov eax, 00000001
:0042D452 EB38                    jmp 0042D48C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D425(C)
|
:0042D454 0FBE5510                movsx edx, byte ptr [ebp+10]
:0042D458 83FA02                  cmp edx, 00000002
:0042D45B 7F2D                    jg 0042D48A
:0042D45D 0FBE4510                movsx eax, byte ptr [ebp+10]
:0042D461 83C001                  add eax, 00000001
:0042D464 50                      push eax
:0042D465 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D468 E8530C0000              call 0042E0C0
:0042D46D 6A42                    push 00000042
:0042D46F 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D472 E8490A0000              call 0042DEC0
:0042D477 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D47A 51                      push ecx
:0042D47B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D47E E8B82EFFFF              call 0042033B
:0042D483 B801000000              mov eax, 00000001
:0042D488 EB02                    jmp 0042D48C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D41C(C), :0042D45B(C)
|
:0042D48A 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D452(U), :0042D488(U)
|
:0042D48C 5D                      pop ebp
:0042D48D C3                      ret



* Referenced by a CALL at Addresses:
|:0042D412   , :0042D5AC   , :0042D633   , :0042D6B8   , :0042D6F6   
|:0042D734   , :0042D772   , :0042D7B0   
|
:0042D48E 55                      push ebp
:0042D48F 8BEC                    mov ebp, esp
:0042D491 83EC0C                  sub esp, 0000000C
:0042D494 56                      push esi
:0042D495 0FBE450C                movsx eax, byte ptr [ebp+0C]
:0042D499 8945F4                  mov dword ptr [ebp-0C], eax
:0042D49C 837DF406                cmp dword ptr [ebp-0C], 00000006
:0042D4A0 7740                    ja 0042D4E2
:0042D4A2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042D4A5 FF248D85D54200          jmp dword ptr [4*ecx+0042D585]
:0042D4AC C745F800000000          mov [ebp-08], 00000000
:0042D4B3 EB34                    jmp 0042D4E9

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042D4B5 C745F80A000000          mov [ebp-08], 0000000A
:0042D4BC EB2B                    jmp 0042D4E9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0042D4BE C745F814000000          mov [ebp-08], 00000014
:0042D4C5 EB22                    jmp 0042D4E9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0042D4C7 C745F814000000          mov [ebp-08], 00000014
:0042D4CE EB19                    jmp 0042D4E9
:0042D4D0 C745F81E000000          mov [ebp-08], 0000001E
:0042D4D7 EB10                    jmp 0042D4E9
:0042D4D9 C745F828000000          mov [ebp-08], 00000028
:0042D4E0 EB07                    jmp 0042D4E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D4A0(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042D4E2 C745F80A000000          mov [ebp-08], 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D4B3(U), :0042D4BC(U), :0042D4C5(U), :0042D4CE(U), :0042D4D7(U)
|:0042D4E0(U)
|
:0042D4E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D4EC 6BC950                  imul ecx, 00000050
:0042D4EF 81C1787F4900            add ecx, 00497F78
:0042D4F5 E88A48FDFF              call 00401D84
:0042D4FA C1E802                  shr eax, 02
:0042D4FD 8B75F8                  mov esi, dword ptr [ebp-08]
:0042D500 03F0                    add esi, eax
:0042D502 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D505 6BC950                  imul ecx, 00000050
:0042D508 81C1787F4900            add ecx, 00497F78
:0042D50E E8A448FDFF              call 00401DB7
:0042D513 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042D515 B90A000000              mov ecx, 0000000A
:0042D51A F7F1                    div ecx
:0042D51C 03F0                    add esi, eax
:0042D51E 8975FC                  mov dword ptr [ebp-04], esi
:0042D521 0FBE550C                movsx edx, byte ptr [ebp+0C]
:0042D525 83FA04                  cmp edx, 00000004
:0042D528 7C16                    jl 0042D540
:0042D52A 6A78                    push 00000078
:0042D52C E87FAE0400              call 004783B0
:0042D531 83C404                  add esp, 00000004
:0042D534 3945FC                  cmp dword ptr [ebp-04], eax
:0042D537 7E07                    jle 0042D540
:0042D539 B801000000              mov eax, 00000001
:0042D53E EB40                    jmp 0042D580

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D528(C), :0042D537(C)
|
:0042D540 0FBE450C                movsx eax, byte ptr [ebp+0C]
:0042D544 83F802                  cmp eax, 00000002
:0042D547 7F16                    jg 0042D55F
:0042D549 6A50                    push 00000050
:0042D54B E860AE0400              call 004783B0
:0042D550 83C404                  add esp, 00000004
:0042D553 3945FC                  cmp dword ptr [ebp-04], eax
:0042D556 7D07                    jge 0042D55F
:0042D558 B801000000              mov eax, 00000001
:0042D55D EB21                    jmp 0042D580

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D547(C), :0042D556(C)
|
:0042D55F 0FBE4D0C                movsx ecx, byte ptr [ebp+0C]
:0042D563 83F903                  cmp ecx, 00000003
:0042D566 7516                    jne 0042D57E
:0042D568 6A64                    push 00000064
:0042D56A E841AE0400              call 004783B0
:0042D56F 83C404                  add esp, 00000004
:0042D572 3945FC                  cmp dword ptr [ebp-04], eax
:0042D575 7E07                    jle 0042D57E
:0042D577 B801000000              mov eax, 00000001
:0042D57C EB02                    jmp 0042D580

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D566(C), :0042D575(C)
|
:0042D57E 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D53E(U), :0042D55D(U), :0042D57C(U)
|
:0042D580 5E                      pop esi
:0042D581 8BE5                    mov esp, ebp
:0042D583 5D                      pop ebp
:0042D584 C3                      ret



:0042D585 ACD44200                DWORD 0042D4AC
:0042D589 B5D44200                DWORD 0042D4B5
:0042D58D BED44200                DWORD 0042D4BE
:0042D591 E2D44200                DWORD 0042D4E2
:0042D595 C7D44200                DWORD 0042D4C7
:0042D599 D0D44200                DWORD 0042D4D0
:0042D59D D9D44200                DWORD 0042D4D9



* Referenced by a CALL at Addresses:
|:0042D277   , :0042D3C9   
|
:0042D5A1 55                      push ebp
:0042D5A2 8BEC                    mov ebp, esp
:0042D5A4 8A4510                  mov al, byte ptr [ebp+10]
:0042D5A7 50                      push eax
:0042D5A8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042D5AB 51                      push ecx
:0042D5AC E8DDFEFFFF              call 0042D48E
:0042D5B1 83C408                  add esp, 00000008
:0042D5B4 85C0                    test eax, eax
:0042D5B6 746C                    je 0042D624
:0042D5B8 0FBE5510                movsx edx, byte ptr [ebp+10]
:0042D5BC 83FA04                  cmp edx, 00000004
:0042D5BF 7C2D                    jl 0042D5EE
:0042D5C1 0FBE4510                movsx eax, byte ptr [ebp+10]
:0042D5C5 83E801                  sub eax, 00000001
:0042D5C8 50                      push eax
:0042D5C9 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D5CC E81F0B0000              call 0042E0F0
:0042D5D1 6A43                    push 00000043
:0042D5D3 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D5D6 E8E5080000              call 0042DEC0
:0042D5DB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D5DE 51                      push ecx
:0042D5DF 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D5E2 E8542DFFFF              call 0042033B
:0042D5E7 B801000000              mov eax, 00000001
:0042D5EC EB38                    jmp 0042D626

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D5BF(C)
|
:0042D5EE 0FBE5510                movsx edx, byte ptr [ebp+10]
:0042D5F2 83FA02                  cmp edx, 00000002
:0042D5F5 7F2D                    jg 0042D624
:0042D5F7 0FBE4510                movsx eax, byte ptr [ebp+10]
:0042D5FB 83C001                  add eax, 00000001
:0042D5FE 50                      push eax
:0042D5FF 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D602 E8E90A0000              call 0042E0F0
:0042D607 6A44                    push 00000044
:0042D609 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D60C E8AF080000              call 0042DEC0
:0042D611 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D614 51                      push ecx
:0042D615 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D618 E81E2DFFFF              call 0042033B
:0042D61D B801000000              mov eax, 00000001
:0042D622 EB02                    jmp 0042D626

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D5B6(C), :0042D5F5(C)
|
:0042D624 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D5EC(U), :0042D622(U)
|
:0042D626 5D                      pop ebp
:0042D627 C3                      ret



* Referenced by a CALL at Addresses:
|:0042D2A6   , :0042D3F5   
|
:0042D628 55                      push ebp
:0042D629 8BEC                    mov ebp, esp
:0042D62B 8A4510                  mov al, byte ptr [ebp+10]
:0042D62E 50                      push eax
:0042D62F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042D632 51                      push ecx
:0042D633 E856FEFFFF              call 0042D48E
:0042D638 83C408                  add esp, 00000008
:0042D63B 85C0                    test eax, eax
:0042D63D 746C                    je 0042D6AB
:0042D63F 0FBE5510                movsx edx, byte ptr [ebp+10]
:0042D643 83FA04                  cmp edx, 00000004
:0042D646 7C2D                    jl 0042D675
:0042D648 0FBE4510                movsx eax, byte ptr [ebp+10]
:0042D64C 83E801                  sub eax, 00000001
:0042D64F 50                      push eax
:0042D650 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D653 E8C80A0000              call 0042E120
:0042D658 6A45                    push 00000045
:0042D65A 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D65D E85E080000              call 0042DEC0
:0042D662 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D665 51                      push ecx
:0042D666 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D669 E8CD2CFFFF              call 0042033B
:0042D66E B801000000              mov eax, 00000001
:0042D673 EB38                    jmp 0042D6AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D646(C)
|
:0042D675 0FBE5510                movsx edx, byte ptr [ebp+10]
:0042D679 83FA02                  cmp edx, 00000002
:0042D67C 7F2D                    jg 0042D6AB
:0042D67E 0FBE4510                movsx eax, byte ptr [ebp+10]
:0042D682 83C001                  add eax, 00000001
:0042D685 50                      push eax
:0042D686 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D689 E8920A0000              call 0042E120
:0042D68E 6A46                    push 00000046
:0042D690 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D693 E828080000              call 0042DEC0
:0042D698 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D69B 51                      push ecx
:0042D69C 8B4D14                  mov ecx, dword ptr [ebp+14]
:0042D69F E8972CFFFF              call 0042033B
:0042D6A4 B801000000              mov eax, 00000001
:0042D6A9 EB02                    jmp 0042D6AD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D63D(C), :0042D67C(C)
|
:0042D6AB 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D673(U), :0042D6A9(U)
|
:0042D6AD 5D                      pop ebp
:0042D6AE C3                      ret



* Referenced by a CALL at Address:
|:0042D2CE   
|
:0042D6AF 55                      push ebp
:0042D6B0 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042D6B2 6A03                    push 00000003
:0042D6B4 8B450C                  mov eax, dword ptr [ebp+0C]
:0042D6B7 50                      push eax
:0042D6B8 E8D1FDFFFF              call 0042D48E
:0042D6BD 83C408                  add esp, 00000008
:0042D6C0 85C0                    test eax, eax
:0042D6C2 7425                    je 0042D6E9
:0042D6C4 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D6C7 E8140D0000              call 0042E3E0
:0042D6CC 6A47                    push 00000047
:0042D6CE 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D6D1 E8EA070000              call 0042DEC0
:0042D6D6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D6D9 51                      push ecx
:0042D6DA 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D6DD E8592CFFFF              call 0042033B
:0042D6E2 B801000000              mov eax, 00000001
:0042D6E7 EB02                    jmp 0042D6EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D6C2(C)
|
:0042D6E9 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D6E7(U)
|
:0042D6EB 5D                      pop ebp
:0042D6EC C3                      ret



* Referenced by a CALL at Address:
|:0042D2F6   
|
:0042D6ED 55                      push ebp
:0042D6EE 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042D6F0 6A03                    push 00000003
:0042D6F2 8B450C                  mov eax, dword ptr [ebp+0C]
:0042D6F5 50                      push eax
:0042D6F6 E893FDFFFF              call 0042D48E
:0042D6FB 83C408                  add esp, 00000008
:0042D6FE 85C0                    test eax, eax
:0042D700 7425                    je 0042D727
:0042D702 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D705 E8F60C0000              call 0042E400
:0042D70A 6A48                    push 00000048
:0042D70C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D70F E8AC070000              call 0042DEC0
:0042D714 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D717 51                      push ecx
:0042D718 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D71B E81B2CFFFF              call 0042033B
:0042D720 B801000000              mov eax, 00000001
:0042D725 EB02                    jmp 0042D729

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D700(C)
|
:0042D727 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D725(U)
|
:0042D729 5D                      pop ebp
:0042D72A C3                      ret



* Referenced by a CALL at Address:
|:0042D31E   
|
:0042D72B 55                      push ebp
:0042D72C 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042D72E 6A03                    push 00000003
:0042D730 8B450C                  mov eax, dword ptr [ebp+0C]
:0042D733 50                      push eax
:0042D734 E855FDFFFF              call 0042D48E
:0042D739 83C408                  add esp, 00000008
:0042D73C 85C0                    test eax, eax
:0042D73E 7425                    je 0042D765
:0042D740 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D743 E8D80C0000              call 0042E420
:0042D748 6A49                    push 00000049
:0042D74A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D74D E86E070000              call 0042DEC0
:0042D752 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D755 51                      push ecx
:0042D756 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D759 E8DD2BFFFF              call 0042033B
:0042D75E B801000000              mov eax, 00000001
:0042D763 EB02                    jmp 0042D767

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D73E(C)
|
:0042D765 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D763(U)
|
:0042D767 5D                      pop ebp
:0042D768 C3                      ret



* Referenced by a CALL at Address:
|:0042D346   
|
:0042D769 55                      push ebp
:0042D76A 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042D76C 6A03                    push 00000003
:0042D76E 8B450C                  mov eax, dword ptr [ebp+0C]
:0042D771 50                      push eax
:0042D772 E817FDFFFF              call 0042D48E
:0042D777 83C408                  add esp, 00000008
:0042D77A 85C0                    test eax, eax
:0042D77C 7425                    je 0042D7A3
:0042D77E 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D781 E8BA0C0000              call 0042E440
:0042D786 6A4A                    push 0000004A
:0042D788 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D78B E830070000              call 0042DEC0
:0042D790 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D793 51                      push ecx
:0042D794 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D797 E89F2BFFFF              call 0042033B
:0042D79C B801000000              mov eax, 00000001
:0042D7A1 EB02                    jmp 0042D7A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D77C(C)
|
:0042D7A3 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D7A1(U)
|
:0042D7A5 5D                      pop ebp
:0042D7A6 C3                      ret



* Referenced by a CALL at Address:
|:0042D36E   
|
:0042D7A7 55                      push ebp
:0042D7A8 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042D7AA 6A03                    push 00000003
:0042D7AC 8B450C                  mov eax, dword ptr [ebp+0C]
:0042D7AF 50                      push eax
:0042D7B0 E8D9FCFFFF              call 0042D48E
:0042D7B5 83C408                  add esp, 00000008
:0042D7B8 85C0                    test eax, eax
:0042D7BA 7425                    je 0042D7E1
:0042D7BC 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D7BF E89C0C0000              call 0042E460
:0042D7C4 6A4B                    push 0000004B
:0042D7C6 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D7C9 E8F2060000              call 0042DEC0
:0042D7CE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D7D1 51                      push ecx
:0042D7D2 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042D7D5 E8612BFFFF              call 0042033B
:0042D7DA B801000000              mov eax, 00000001
:0042D7DF EB02                    jmp 0042D7E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D7BA(C)
|
:0042D7E1 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D7DF(U)
|
:0042D7E3 5D                      pop ebp
:0042D7E4 C3                      ret



* Referenced by a CALL at Addresses:
|:00423376   , :00423A3D   , :00427814   
|
:0042D7E5 55                      push ebp
:0042D7E6 8BEC                    mov ebp, esp
:0042D7E8 83EC0C                  sub esp, 0000000C
:0042D7EB 53                      push ebx
:0042D7EC 894DF4                  mov dword ptr [ebp-0C], ecx
:0042D7EF 817DF4D0454900          cmp dword ptr [ebp-0C], 004945D0
:0042D7F6 750A                    jne 0042D802
:0042D7F8 B801000000              mov eax, 00000001
:0042D7FD E990000000              jmp 0042D892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D7F6(C)
|
:0042D802 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042D805 8B4814                  mov ecx, dword ptr [eax+14]
:0042D808 6BC950                  imul ecx, 00000050
:0042D80B 81C1787F4900            add ecx, 00497F78
:0042D811 E8AA59FDFF              call 004031C0
:0042D816 8845FC                  mov byte ptr [ebp-04], al
:0042D819 8A4DFC                  mov cl, byte ptr [ebp-04]
:0042D81C 51                      push ecx
:0042D81D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0042D820 8B4A14                  mov ecx, dword ptr [edx+14]
:0042D823 6BC950                  imul ecx, 00000050
:0042D826 81C1787F4900            add ecx, 00497F78
:0042D82C E8AF59FDFF              call 004031E0
:0042D831 25FF000000              and eax, 000000FF
:0042D836 8945F8                  mov dword ptr [ebp-08], eax
:0042D839 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D83C 6BC931                  imul ecx, 00000031
:0042D83F 81C1001D4B00            add ecx, 004B1D00
:0042D845 E8F67EFDFF              call 00405740
:0042D84A 25FF000000              and eax, 000000FF
:0042D84F 3DFF000000              cmp eax, 000000FF
:0042D854 7433                    je 0042D889
:0042D856 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D859 6BC931                  imul ecx, 00000031
:0042D85C 81C1001D4B00            add ecx, 004B1D00
:0042D862 E8D97EFDFF              call 00405740
:0042D867 8AD8                    mov bl, al
:0042D869 81E3FF000000            and ebx, 000000FF
:0042D86F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042D872 6BC922                  imul ecx, 00000022
:0042D875 81C1D0474900            add ecx, 004947D0
:0042D87B E8B65CFDFF              call 00403536
:0042D880 25FF000000              and eax, 000000FF
:0042D885 3BD8                    cmp ebx, eax
:0042D887 7507                    jne 0042D890

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D854(C)
|
:0042D889 B801000000              mov eax, 00000001
:0042D88E EB02                    jmp 0042D892

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D887(C)
|
:0042D890 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D7FD(U), :0042D88E(U)
|
:0042D892 5B                      pop ebx
:0042D893 8BE5                    mov esp, ebp
:0042D895 5D                      pop ebp
:0042D896 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00427D88   , :004285A7   , :004286F5   
|
:0042D899 55                      push ebp
:0042D89A 8BEC                    mov ebp, esp
:0042D89C 83EC78                  sub esp, 00000078
:0042D89F 894D8C                  mov dword ptr [ebp-74], ecx
:0042D8A2 6A64                    push 00000064
:0042D8A4 6A00                    push 00000000
:0042D8A6 8D4598                  lea eax, dword ptr [ebp-68]
:0042D8A9 50                      push eax
:0042D8AA E821220400              call 0046FAD0
:0042D8AF 83C40C                  add esp, 0000000C
:0042D8B2 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0042D8B5 8B5114                  mov edx, dword ptr [ecx+14]
:0042D8B8 6BD250                  imul edx, 00000050
:0042D8BB 81C2787F4900            add edx, 00497F78
:0042D8C1 895590                  mov dword ptr [ebp-70], edx
:0042D8C4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042D8C7 6BC922                  imul ecx, 00000022
:0042D8CA 81C1D0474900            add ecx, 004947D0
:0042D8D0 E81B7EFDFF              call 004056F0
:0042D8D5 8945FC                  mov dword ptr [ebp-04], eax
:0042D8D8 C7459400000000          mov [ebp-6C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DA90(U)
|
:0042D8DF 817D0CFF000000          cmp dword ptr [ebp+0C], 000000FF
:0042D8E6 7250                    jb 0042D938
:0042D8E8 B978294B00              mov ecx, 004B2978
:0042D8ED E8D86CFDFF              call 004045CA
:0042D8F2 85C0                    test eax, eax
:0042D8F4 743D                    je 0042D933
:0042D8F6 8B45FC                  mov eax, dword ptr [ebp-04]
:0042D8F9 50                      push eax

* Possible StringData Ref from Data Obj ->"y%szBFܮw"
                                  |
:0042D8FA 68A8D34700              push 0047D3A8
:0042D8FF 8D4D98                  lea ecx, dword ptr [ebp-68]
:0042D902 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042D903 FF1504D74B00            Call dword ptr [004BD704]
:0042D909 83C40C                  add esp, 0000000C
:0042D90C 6A00                    push 00000000
:0042D90E 8D5598                  lea edx, dword ptr [ebp-68]
:0042D911 52                      push edx
:0042D912 8B4508                  mov eax, dword ptr [ebp+08]
:0042D915 50                      push eax
:0042D916 E85161FFFF              call 00423A6C
:0042D91B 83C40C                  add esp, 0000000C
:0042D91E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042D921 51                      push ecx
:0042D922 B978294B00              mov ecx, 004B2978
:0042D927 E8C26CFDFF              call 004045EE
:0042D92C B001                    mov al, 01
:0042D92E E962010000              jmp 0042DA95

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D8F4(C)
|
:0042D933 E9B0000000              jmp 0042D9E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D8E6(C)
|
:0042D938 8B4D90                  mov ecx, dword ptr [ebp-70]
:0042D93B E84249FDFF              call 00402282
:0042D940 85C0                    test eax, eax
:0042D942 743B                    je 0042D97F
:0042D944 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D947 52                      push edx

* Possible StringData Ref from Data Obj ->"oFy%szI"
                                  |
:0042D948 68BCD34700              push 0047D3BC
:0042D94D 8D4598                  lea eax, dword ptr [ebp-68]
:0042D950 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042D951 FF1504D74B00            Call dword ptr [004BD704]
:0042D957 83C40C                  add esp, 0000000C
:0042D95A 6A00                    push 00000000
:0042D95C 8D4D98                  lea ecx, dword ptr [ebp-68]
:0042D95F 51                      push ecx
:0042D960 8B5508                  mov edx, dword ptr [ebp+08]
:0042D963 52                      push edx
:0042D964 E80361FFFF              call 00423A6C
:0042D969 83C40C                  add esp, 0000000C
:0042D96C 8B450C                  mov eax, dword ptr [ebp+0C]
:0042D96F 50                      push eax
:0042D970 8B4D90                  mov ecx, dword ptr [ebp-70]
:0042D973 E82C49FDFF              call 004022A4
:0042D978 B001                    mov al, 01
:0042D97A E916010000              jmp 0042DA95

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D942(C)
|
:0042D97F B978294B00              mov ecx, 004B2978
:0042D984 E8416CFDFF              call 004045CA
:0042D989 85C0                    test eax, eax
:0042D98B 745B                    je 0042D9E8
:0042D98D C7459401000000          mov [ebp-6C], 00000001
:0042D994 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"AFAܮwܡH"
                                  |
:0042D996 68CCD34700              push 0047D3CC
:0042D99B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042D99E 51                      push ecx
:0042D99F E887A7FEFF              call 0041812B
:0042D9A4 83C40C                  add esp, 0000000C
:0042D9A7 85C0                    test eax, eax
:0042D9A9 743D                    je 0042D9E8
:0042D9AB 8B55FC                  mov edx, dword ptr [ebp-04]
:0042D9AE 52                      push edx

* Possible StringData Ref from Data Obj ->"y%szBܮwFC"
                                  |
:0042D9AF 68E8D34700              push 0047D3E8
:0042D9B4 8D4598                  lea eax, dword ptr [ebp-68]
:0042D9B7 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042D9B8 FF1504D74B00            Call dword ptr [004BD704]
:0042D9BE 83C40C                  add esp, 0000000C
:0042D9C1 6A00                    push 00000000
:0042D9C3 8D4D98                  lea ecx, dword ptr [ebp-68]
:0042D9C6 51                      push ecx
:0042D9C7 8B5508                  mov edx, dword ptr [ebp+08]
:0042D9CA 52                      push edx
:0042D9CB E89C60FFFF              call 00423A6C
:0042D9D0 83C40C                  add esp, 0000000C
:0042D9D3 8B450C                  mov eax, dword ptr [ebp+0C]
:0042D9D6 50                      push eax
:0042D9D7 B978294B00              mov ecx, 004B2978
:0042D9DC E80D6CFDFF              call 004045EE
:0042D9E1 B001                    mov al, 01
:0042D9E3 E9AD000000              jmp 0042DA95

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D933(U), :0042D98B(C), :0042D9A9(C)
|
:0042D9E8 837D9400                cmp dword ptr [ebp-6C], 00000000
:0042D9EC 7409                    je 0042D9F7

* Possible StringData Ref from Data Obj ->"DBeܮwܡH"
                                  |
:0042D9EE C7458800D44700          mov [ebp-78], 0047D400
:0042D9F5 EB07                    jmp 0042D9FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D9EC(C)
|

* Possible StringData Ref from Data Obj ->"BeܮwDܡH"
                                  |
:0042D9F7 C7458814D44700          mov [ebp-78], 0047D414

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042D9F5(U)
|
:0042D9FE 8B4D88                  mov ecx, dword ptr [ebp-78]
:0042DA01 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0042DA02 6828D44700              push 0047D428
:0042DA07 8D5598                  lea edx, dword ptr [ebp-68]
:0042DA0A 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042DA0B FF1504D74B00            Call dword ptr [004BD704]
:0042DA11 83C40C                  add esp, 0000000C
:0042DA14 6A00                    push 00000000
:0042DA16 8D4598                  lea eax, dword ptr [ebp-68]
:0042DA19 50                      push eax
:0042DA1A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DA1D 51                      push ecx
:0042DA1E E808A7FEFF              call 0041812B
:0042DA23 83C40C                  add esp, 0000000C
:0042DA26 85C0                    test eax, eax
:0042DA28 740E                    je 0042DA38
:0042DA2A 8B5590                  mov edx, dword ptr [ebp-70]
:0042DA2D 52                      push edx
:0042DA2E E89CD00200              call 0045AACF
:0042DA33 83C404                  add esp, 00000004
:0042DA36 EB58                    jmp 0042DA90

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DA28(C)
|
:0042DA38 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DA3B 50                      push eax

* Possible StringData Ref from Data Obj ->"y%szܡH"
                                  |
:0042DA3C 682CD44700              push 0047D42C
:0042DA41 8D4D98                  lea ecx, dword ptr [ebp-68]
:0042DA44 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042DA45 FF1504D74B00            Call dword ptr [004BD704]
:0042DA4B 83C40C                  add esp, 0000000C
:0042DA4E 6A00                    push 00000000
:0042DA50 8D5598                  lea edx, dword ptr [ebp-68]
:0042DA53 52                      push edx
:0042DA54 8B4508                  mov eax, dword ptr [ebp+08]
:0042DA57 50                      push eax
:0042DA58 E8CEA6FEFF              call 0041812B
:0042DA5D 83C40C                  add esp, 0000000C
:0042DA60 85C0                    test eax, eax
:0042DA62 742C                    je 0042DA90
:0042DA64 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DA67 51                      push ecx

* Possible StringData Ref from Data Obj ->"Fy%szC"
                                  |
:0042DA68 683CD44700              push 0047D43C
:0042DA6D 8D5598                  lea edx, dword ptr [ebp-68]
:0042DA70 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042DA71 FF1504D74B00            Call dword ptr [004BD704]
:0042DA77 83C40C                  add esp, 0000000C
:0042DA7A 6A00                    push 00000000
:0042DA7C 8D4598                  lea eax, dword ptr [ebp-68]
:0042DA7F 50                      push eax
:0042DA80 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DA83 51                      push ecx
:0042DA84 E8E35FFFFF              call 00423A6C
:0042DA89 83C40C                  add esp, 0000000C
:0042DA8C 32C0                    xor al, al
:0042DA8E EB05                    jmp 0042DA95

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042DA36(U), :0042DA62(C)
|
:0042DA90 E94AFEFFFF              jmp 0042D8DF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042D92E(U), :0042D97A(U), :0042D9E3(U), :0042DA8E(U)
|
:0042DA95 8BE5                    mov esp, ebp
:0042DA97 5D                      pop ebp
:0042DA98 C20800                  ret 0008



* Referenced by a CALL at Address:
|:00423839   
|
:0042DA9B 55                      push ebp
:0042DA9C 8BEC                    mov ebp, esp
:0042DA9E 51                      push ecx
:0042DA9F 894DFC                  mov dword ptr [ebp-04], ecx
:0042DAA2 68C5040000              push 000004C5
:0042DAA7 8B4508                  mov eax, dword ptr [ebp+08]
:0042DAAA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DAAB FF1510D64B00            Call dword ptr [004BD610]
:0042DAB1 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:0042DAB2 FF1574D64B00            Call dword ptr [004BD674]
:0042DAB8 85C0                    test eax, eax
:0042DABA 7427                    je 0042DAE3
:0042DABC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DABF 8A510C                  mov dl, byte ptr [ecx+0C]
:0042DAC2 80CA01                  or dl, 01
:0042DAC5 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DAC8 88500C                  mov byte ptr [eax+0C], dl
:0042DACB 6A00                    push 00000000
:0042DACD 68C5040000              push 000004C5
:0042DAD2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DAD5 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DAD6 FF1510D64B00            Call dword ptr [004BD610]
:0042DADC 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DADD FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DABA(C)
|
:0042DAE3 68C7040000              push 000004C7
:0042DAE8 8B5508                  mov edx, dword ptr [ebp+08]
:0042DAEB 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DAEC FF1510D64B00            Call dword ptr [004BD610]
:0042DAF2 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:0042DAF3 FF1574D64B00            Call dword ptr [004BD674]
:0042DAF9 85C0                    test eax, eax
:0042DAFB 7427                    je 0042DB24
:0042DAFD 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DB00 8A480C                  mov cl, byte ptr [eax+0C]
:0042DB03 80C902                  or cl, 02
:0042DB06 8B55FC                  mov edx, dword ptr [ebp-04]
:0042DB09 884A0C                  mov byte ptr [edx+0C], cl
:0042DB0C 6A00                    push 00000000
:0042DB0E 68C7040000              push 000004C7
:0042DB13 8B4508                  mov eax, dword ptr [ebp+08]
:0042DB16 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DB17 FF1510D64B00            Call dword ptr [004BD610]
:0042DB1D 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DB1E FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DAFB(C)
|
:0042DB24 687B040000              push 0000047B
:0042DB29 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DB2C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DB2D FF1510D64B00            Call dword ptr [004BD610]
:0042DB33 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:0042DB34 FF1574D64B00            Call dword ptr [004BD674]
:0042DB3A 85C0                    test eax, eax
:0042DB3C 7426                    je 0042DB64
:0042DB3E 8B55FC                  mov edx, dword ptr [ebp-04]
:0042DB41 8A420C                  mov al, byte ptr [edx+0C]
:0042DB44 0C04                    or al, 04
:0042DB46 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DB49 88410C                  mov byte ptr [ecx+0C], al
:0042DB4C 6A00                    push 00000000
:0042DB4E 687B040000              push 0000047B
:0042DB53 8B5508                  mov edx, dword ptr [ebp+08]
:0042DB56 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DB57 FF1510D64B00            Call dword ptr [004BD610]
:0042DB5D 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DB5E FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DB3C(C)
|
:0042DB64 687C040000              push 0000047C
:0042DB69 8B4508                  mov eax, dword ptr [ebp+08]
:0042DB6C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DB6D FF1510D64B00            Call dword ptr [004BD610]
:0042DB73 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:0042DB74 FF1574D64B00            Call dword ptr [004BD674]
:0042DB7A 85C0                    test eax, eax
:0042DB7C 7427                    je 0042DBA5
:0042DB7E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DB81 8A510C                  mov dl, byte ptr [ecx+0C]
:0042DB84 80CA08                  or dl, 08
:0042DB87 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DB8A 88500C                  mov byte ptr [eax+0C], dl
:0042DB8D 6A00                    push 00000000
:0042DB8F 687C040000              push 0000047C
:0042DB94 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DB97 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DB98 FF1510D64B00            Call dword ptr [004BD610]
:0042DB9E 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DB9F FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DB7C(C)
|
:0042DBA5 687D040000              push 0000047D
:0042DBAA 8B5508                  mov edx, dword ptr [ebp+08]
:0042DBAD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DBAE FF1510D64B00            Call dword ptr [004BD610]
:0042DBB4 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:0042DBB5 FF1574D64B00            Call dword ptr [004BD674]
:0042DBBB 85C0                    test eax, eax
:0042DBBD 7427                    je 0042DBE6
:0042DBBF 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DBC2 8A480C                  mov cl, byte ptr [eax+0C]
:0042DBC5 80C910                  or cl, 10
:0042DBC8 8B55FC                  mov edx, dword ptr [ebp-04]
:0042DBCB 884A0C                  mov byte ptr [edx+0C], cl
:0042DBCE 6A00                    push 00000000
:0042DBD0 687D040000              push 0000047D
:0042DBD5 8B4508                  mov eax, dword ptr [ebp+08]
:0042DBD8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DBD9 FF1510D64B00            Call dword ptr [004BD610]
:0042DBDF 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DBE0 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DBBD(C)
|
:0042DBE6 687E040000              push 0000047E
:0042DBEB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DBEE 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DBEF FF1510D64B00            Call dword ptr [004BD610]
:0042DBF5 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:0042DBF6 FF1574D64B00            Call dword ptr [004BD674]
:0042DBFC 85C0                    test eax, eax
:0042DBFE 7426                    je 0042DC26
:0042DC00 8B55FC                  mov edx, dword ptr [ebp-04]
:0042DC03 8A420C                  mov al, byte ptr [edx+0C]
:0042DC06 0C20                    or al, 20
:0042DC08 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DC0B 88410C                  mov byte ptr [ecx+0C], al
:0042DC0E 6A00                    push 00000000
:0042DC10 687E040000              push 0000047E
:0042DC15 8B5508                  mov edx, dword ptr [ebp+08]
:0042DC18 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DC19 FF1510D64B00            Call dword ptr [004BD610]
:0042DC1F 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DC20 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DBFE(C)
|
:0042DC26 687A040000              push 0000047A
:0042DC2B 8B4508                  mov eax, dword ptr [ebp+08]
:0042DC2E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DC2F FF1510D64B00            Call dword ptr [004BD610]
:0042DC35 50                      push eax

* Reference To: USER32.IsWindowEnabled, Ord:0168h
                                  |
:0042DC36 FF1574D64B00            Call dword ptr [004BD674]
:0042DC3C 85C0                    test eax, eax
:0042DC3E 7427                    je 0042DC67
:0042DC40 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DC43 8A510C                  mov dl, byte ptr [ecx+0C]
:0042DC46 80CA40                  or dl, 40
:0042DC49 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DC4C 88500C                  mov byte ptr [eax+0C], dl
:0042DC4F 6A00                    push 00000000
:0042DC51 687A040000              push 0000047A
:0042DC56 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DC59 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DC5A FF1510D64B00            Call dword ptr [004BD610]
:0042DC60 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DC61 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DC3E(C)
|
:0042DC67 8BE5                    mov esp, ebp
:0042DC69 5D                      pop ebp
:0042DC6A C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042387E   
|
:0042DC6D 55                      push ebp
:0042DC6E 8BEC                    mov ebp, esp
:0042DC70 51                      push ecx
:0042DC71 894DFC                  mov dword ptr [ebp-04], ecx
:0042DC74 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DC77 0FBE480C                movsx ecx, byte ptr [eax+0C]
:0042DC7B 83E101                  and ecx, 00000001
:0042DC7E 85C9                    test ecx, ecx
:0042DC80 7418                    je 0042DC9A
:0042DC82 6A01                    push 00000001
:0042DC84 68C5040000              push 000004C5
:0042DC89 8B5508                  mov edx, dword ptr [ebp+08]
:0042DC8C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DC8D FF1510D64B00            Call dword ptr [004BD610]
:0042DC93 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DC94 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DC80(C)
|
:0042DC9A 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DC9D 0FBE480C                movsx ecx, byte ptr [eax+0C]
:0042DCA1 83E102                  and ecx, 00000002
:0042DCA4 85C9                    test ecx, ecx
:0042DCA6 7418                    je 0042DCC0
:0042DCA8 6A01                    push 00000001
:0042DCAA 68C7040000              push 000004C7
:0042DCAF 8B5508                  mov edx, dword ptr [ebp+08]
:0042DCB2 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DCB3 FF1510D64B00            Call dword ptr [004BD610]
:0042DCB9 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DCBA FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DCA6(C)
|
:0042DCC0 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DCC3 0FBE480C                movsx ecx, byte ptr [eax+0C]
:0042DCC7 83E104                  and ecx, 00000004
:0042DCCA 85C9                    test ecx, ecx
:0042DCCC 7418                    je 0042DCE6
:0042DCCE 6A01                    push 00000001
:0042DCD0 687B040000              push 0000047B
:0042DCD5 8B5508                  mov edx, dword ptr [ebp+08]
:0042DCD8 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DCD9 FF1510D64B00            Call dword ptr [004BD610]
:0042DCDF 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DCE0 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DCCC(C)
|
:0042DCE6 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DCE9 0FBE480C                movsx ecx, byte ptr [eax+0C]
:0042DCED 83E108                  and ecx, 00000008
:0042DCF0 85C9                    test ecx, ecx
:0042DCF2 7418                    je 0042DD0C
:0042DCF4 6A01                    push 00000001
:0042DCF6 687C040000              push 0000047C
:0042DCFB 8B5508                  mov edx, dword ptr [ebp+08]
:0042DCFE 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DCFF FF1510D64B00            Call dword ptr [004BD610]
:0042DD05 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DD06 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DCF2(C)
|
:0042DD0C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DD0F 0FBE480C                movsx ecx, byte ptr [eax+0C]
:0042DD13 83E110                  and ecx, 00000010
:0042DD16 85C9                    test ecx, ecx
:0042DD18 7418                    je 0042DD32
:0042DD1A 6A01                    push 00000001
:0042DD1C 687D040000              push 0000047D
:0042DD21 8B5508                  mov edx, dword ptr [ebp+08]
:0042DD24 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DD25 FF1510D64B00            Call dword ptr [004BD610]
:0042DD2B 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DD2C FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DD18(C)
|
:0042DD32 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DD35 0FBE480C                movsx ecx, byte ptr [eax+0C]
:0042DD39 83E120                  and ecx, 00000020
:0042DD3C 85C9                    test ecx, ecx
:0042DD3E 7418                    je 0042DD58
:0042DD40 6A01                    push 00000001
:0042DD42 687E040000              push 0000047E
:0042DD47 8B5508                  mov edx, dword ptr [ebp+08]
:0042DD4A 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DD4B FF1510D64B00            Call dword ptr [004BD610]
:0042DD51 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DD52 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DD3E(C)
|
:0042DD58 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DD5B 0FBE480C                movsx ecx, byte ptr [eax+0C]
:0042DD5F 83E140                  and ecx, 00000040
:0042DD62 85C9                    test ecx, ecx
:0042DD64 7418                    je 0042DD7E
:0042DD66 6A01                    push 00000001
:0042DD68 687A040000              push 0000047A
:0042DD6D 8B5508                  mov edx, dword ptr [ebp+08]
:0042DD70 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042DD71 FF1510D64B00            Call dword ptr [004BD610]
:0042DD77 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0042DD78 FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042DD64(C)
|
:0042DD7E 8BE5                    mov esp, ebp
:0042DD80 5D                      pop ebp
:0042DD81 C20400                  ret 0004


:0042DD84 CC                      int 03
:0042DD85 CC                      int 03
:0042DD86 CC                      int 03
:0042DD87 CC                      int 03
:0042DD88 CC                      int 03
:0042DD89 CC                      int 03
:0042DD8A CC                      int 03
:0042DD8B CC                      int 03
:0042DD8C CC                      int 03
:0042DD8D CC                      int 03
:0042DD8E CC                      int 03
:0042DD8F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041FA1E   , :0041FA37   
|
:0042DD90 55                      push ebp
:0042DD91 8BEC                    mov ebp, esp
:0042DD93 51                      push ecx
:0042DD94 894DFC                  mov dword ptr [ebp-04], ecx
:0042DD97 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DD9A 83C124                  add ecx, 00000024
:0042DD9D E86E000000              call 0042DE10
:0042DDA2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DDA5 83C138                  add ecx, 00000038
:0042DDA8 E863000000              call 0042DE10
:0042DDAD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DDB0 83C14C                  add ecx, 0000004C
:0042DDB3 E858000000              call 0042DE10
:0042DDB8 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DDBB 8BE5                    mov esp, ebp
:0042DDBD 5D                      pop ebp
:0042DDBE C3                      ret


:0042DDBF CC                      int 03

* Referenced by a CALL at Address:
|:0041F9CB   
|
:0042DDC0 55                      push ebp
:0042DDC1 8BEC                    mov ebp, esp
:0042DDC3 51                      push ecx
:0042DDC4 894DFC                  mov dword ptr [ebp-04], ecx
:0042DDC7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DDCA E8A114FFFF              call 0041F270
:0042DDCF 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DDD2 C6400C00                mov [eax+0C], 00
:0042DDD6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DDD9 C6411900                mov [ecx+19], 00
:0042DDDD 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DDE0 8BE5                    mov esp, ebp
:0042DDE2 5D                      pop ebp
:0042DDE3 C3                      ret


:0042DDE4 CC                      int 03
:0042DDE5 CC                      int 03
:0042DDE6 CC                      int 03
:0042DDE7 CC                      int 03
:0042DDE8 CC                      int 03
:0042DDE9 CC                      int 03
:0042DDEA CC                      int 03
:0042DDEB CC                      int 03
:0042DDEC CC                      int 03
:0042DDED CC                      int 03
:0042DDEE CC                      int 03
:0042DDEF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041FB7A   , :0041FCC1   
|
:0042DDF0 55                      push ebp
:0042DDF1 8BEC                    mov ebp, esp
:0042DDF3 51                      push ecx
:0042DDF4 894DFC                  mov dword ptr [ebp-04], ecx
:0042DDF7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DDFA 8A4D08                  mov cl, byte ptr [ebp+08]
:0042DDFD 88482B                  mov byte ptr [eax+2B], cl
:0042DE00 8BE5                    mov esp, ebp
:0042DE02 5D                      pop ebp
:0042DE03 C20400                  ret 0004


:0042DE06 CC                      int 03
:0042DE07 CC                      int 03
:0042DE08 CC                      int 03
:0042DE09 CC                      int 03
:0042DE0A CC                      int 03
:0042DE0B CC                      int 03
:0042DE0C CC                      int 03
:0042DE0D CC                      int 03
:0042DE0E CC                      int 03
:0042DE0F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041F962   , :0041F97B   , :0041F994   , :0041F9AD   , :0042DD9D   
|:0042DDA8   , :0042DDB3   , :0042E74D   , :0042E766   , :0042E77F   
|:0042E798   , :0042E7B1   , :0042E7CA   , :0042E7E3   , :0042E7FC   
|:0042E815   , :0042E82E   , :00432A1D   , :0045885A   , :00458865   
|
:0042DE10 55                      push ebp
:0042DE11 8BEC                    mov ebp, esp
:0042DE13 51                      push ecx
:0042DE14 894DFC                  mov dword ptr [ebp-04], ecx
:0042DE17 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DE1A E8D178FDFF              call 004056F0
:0042DE1F 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DE22 C6401000                mov [eax+10], 00
:0042DE26 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DE29 8BE5                    mov esp, ebp
:0042DE2B 5D                      pop ebp
:0042DE2C C3                      ret


:0042DE2D CC                      int 03
:0042DE2E CC                      int 03
:0042DE2F CC                      int 03

* Referenced by a CALL at Address:
|:0041FA05   
|
:0042DE30 55                      push ebp
:0042DE31 8BEC                    mov ebp, esp
:0042DE33 51                      push ecx
:0042DE34 894DFC                  mov dword ptr [ebp-04], ecx
:0042DE37 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DE3A C7400400000000          mov [eax+04], 00000000
:0042DE41 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DE44 C74108FFFFFFFF          mov [ecx+08], FFFFFFFF
:0042DE4B 8B55FC                  mov edx, dword ptr [ebp-04]
:0042DE4E C60201                  mov byte ptr [edx], 01
:0042DE51 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DE54 8BE5                    mov esp, ebp
:0042DE56 5D                      pop ebp
:0042DE57 C3                      ret


:0042DE58 CC                      int 03
:0042DE59 CC                      int 03
:0042DE5A CC                      int 03
:0042DE5B CC                      int 03
:0042DE5C CC                      int 03
:0042DE5D CC                      int 03
:0042DE5E CC                      int 03
:0042DE5F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041FE4A   , :00424F63   , :00426132   , :00427C05   , :00428E4F   
|:0043221C   , :004329D4   , :00433781   , :004339F1   , :004441E7   
|:0044472D   , :0044E281   , :0044E48C   , :00456991   , :004569B8   
|:004569D8   , :004569FF   , :00456A30   , :00456A57   , :00456A74   
|:00456A9B   , :0045AD2E   , :00462CB2   
|
:0042DE60 55                      push ebp
:0042DE61 8BEC                    mov ebp, esp
:0042DE63 51                      push ecx
:0042DE64 894DFC                  mov dword ptr [ebp-04], ecx
:0042DE67 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DE6A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DE6D 894804                  mov dword ptr [eax+04], ecx
:0042DE70 8BE5                    mov esp, ebp
:0042DE72 5D                      pop ebp
:0042DE73 C20400                  ret 0004


:0042DE76 CC                      int 03
:0042DE77 CC                      int 03
:0042DE78 CC                      int 03
:0042DE79 CC                      int 03
:0042DE7A CC                      int 03
:0042DE7B CC                      int 03
:0042DE7C CC                      int 03
:0042DE7D CC                      int 03
:0042DE7E CC                      int 03
:0042DE7F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041FC16   , :0042066A   , :00420736   , :00423248   , :004233E3   
|:004234C7   , :0042363E   , :00423A03   , :00423C66   , :00423DCE   
|:0042436F   , :0042437F   , :004243C4   , :00428DBA   , :00428DE0   
|:00428F86   , :00429AA6   , :00429AB3   , :00429C5A   , :00429C6A   
|:00429D83   , :00429DA6   , :00429DBA   , :00429F24   , :0042A1AB   
|:0042A1F3   , :0042A249   , :0042A285   , :0042A2CD   , :0042A323   
|:00430106   , :004581C6   , :0045B185   , :0045B362   , :0045B5DE   
|:004614BB   , :00462EA9   , :00463C58   , :004641B4   , :004642C9   
|:004670E5   , :00467115   , :0046DF64   , :0046E488   , :0046E68F   
|
:0042DE80 55                      push ebp
:0042DE81 8BEC                    mov ebp, esp
:0042DE83 51                      push ecx
:0042DE84 894DFC                  mov dword ptr [ebp-04], ecx
:0042DE87 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DE8A 8B4004                  mov eax, dword ptr [eax+04]
:0042DE8D 8BE5                    mov esp, ebp
:0042DE8F 5D                      pop ebp
:0042DE90 C3                      ret


:0042DE91 CC                      int 03
:0042DE92 CC                      int 03
:0042DE93 CC                      int 03
:0042DE94 CC                      int 03
:0042DE95 CC                      int 03
:0042DE96 CC                      int 03
:0042DE97 CC                      int 03
:0042DE98 CC                      int 03
:0042DE99 CC                      int 03
:0042DE9A CC                      int 03
:0042DE9B CC                      int 03
:0042DE9C CC                      int 03
:0042DE9D CC                      int 03
:0042DE9E CC                      int 03
:0042DE9F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041FFF5   , :00420026   , :00423793   , :0042600E   , :00426063   
|:0042608C   , :00429053   , :0042932E   , :0042CAEF   , :0042CB0B   
|:0042D306   
|
:0042DEA0 55                      push ebp
:0042DEA1 8BEC                    mov ebp, esp
:0042DEA3 51                      push ecx
:0042DEA4 894DFC                  mov dword ptr [ebp-04], ecx
:0042DEA7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DEAA 0FBE4023                movsx eax, byte ptr [eax+23]
:0042DEAE 83E004                  and eax, 00000004
:0042DEB1 8BE5                    mov esp, ebp
:0042DEB3 5D                      pop ebp
:0042DEB4 C3                      ret


:0042DEB5 CC                      int 03
:0042DEB6 CC                      int 03
:0042DEB7 CC                      int 03
:0042DEB8 CC                      int 03
:0042DEB9 CC                      int 03
:0042DEBA CC                      int 03
:0042DEBB CC                      int 03
:0042DEBC CC                      int 03
:0042DEBD CC                      int 03
:0042DEBE CC                      int 03
:0042DEBF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042035D   , :004203B4   , :00422259   , :00426215   , :00426336   
|:00429857   , :004298CB   , :0042CA7B   , :0042CA87   , :0042CB8E   
|:0042CB9A   , :0042D43C   , :0042D472   , :0042D5D6   , :0042D60C   
|:0042D65D   , :0042D693   , :0042D6D1   , :0042D70F   , :0042D74D   
|:0042D78B   , :0042D7C9   
|
:0042DEC0 55                      push ebp
:0042DEC1 8BEC                    mov ebp, esp
:0042DEC3 51                      push ecx
:0042DEC4 894DFC                  mov dword ptr [ebp-04], ecx
:0042DEC7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DECA 8A4D08                  mov cl, byte ptr [ebp+08]
:0042DECD 88481F                  mov byte ptr [eax+1F], cl
:0042DED0 8BE5                    mov esp, ebp
:0042DED2 5D                      pop ebp
:0042DED3 C20400                  ret 0004


:0042DED6 CC                      int 03
:0042DED7 CC                      int 03
:0042DED8 CC                      int 03
:0042DED9 CC                      int 03
:0042DEDA CC                      int 03
:0042DEDB CC                      int 03
:0042DEDC CC                      int 03
:0042DEDD CC                      int 03
:0042DEDE CC                      int 03
:0042DEDF CC                      int 03

* Referenced by a CALL at Addresses:
|:00420FF1   , :00424B07   , :0042B563   , :0042B67C   , :0043D220   
|:0043D8D2   , :0043DBA6   , :0043DF01   , :0043E269   , :0043E569   
|:0043E861   , :0043EB58   , :0043F17D   , :0043F420   , :0043F68A   
|:0043F80C   , :0043FA21   , :0043FBB5   , :0043FFD8   , :0044039E   
|:004405F7   , :00440840   , :004409F2   , :00440CA8   , :00440E64   
|:00441087   , :00443D65   , :0045F164   , :0046228E   , :004622CA   
|:0046235E   
|
:0042DEE0 55                      push ebp
:0042DEE1 8BEC                    mov ebp, esp
:0042DEE3 51                      push ecx
:0042DEE4 894DFC                  mov dword ptr [ebp-04], ecx
:0042DEE7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DEEA 8A4033                  mov al, byte ptr [eax+33]
:0042DEED 8BE5                    mov esp, ebp
:0042DEEF 5D                      pop ebp
:0042DEF0 C3                      ret


:0042DEF1 CC                      int 03
:0042DEF2 CC                      int 03
:0042DEF3 CC                      int 03
:0042DEF4 CC                      int 03
:0042DEF5 CC                      int 03
:0042DEF6 CC                      int 03
:0042DEF7 CC                      int 03
:0042DEF8 CC                      int 03
:0042DEF9 CC                      int 03
:0042DEFA CC                      int 03
:0042DEFB CC                      int 03
:0042DEFC CC                      int 03
:0042DEFD CC                      int 03
:0042DEFE CC                      int 03
:0042DEFF CC                      int 03

* Referenced by a CALL at Addresses:
|:00421255   , :00427A32   
|
:0042DF00 55                      push ebp
:0042DF01 8BEC                    mov ebp, esp
:0042DF03 51                      push ecx
:0042DF04 894DFC                  mov dword ptr [ebp-04], ecx
:0042DF07 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DF0A 034508                  add eax, dword ptr [ebp+08]
:0042DF0D 8A4004                  mov al, byte ptr [eax+04]
:0042DF10 8BE5                    mov esp, ebp
:0042DF12 5D                      pop ebp
:0042DF13 C20400                  ret 0004


:0042DF16 CC                      int 03
:0042DF17 CC                      int 03
:0042DF18 CC                      int 03
:0042DF19 CC                      int 03
:0042DF1A CC                      int 03
:0042DF1B CC                      int 03
:0042DF1C CC                      int 03
:0042DF1D CC                      int 03
:0042DF1E CC                      int 03
:0042DF1F CC                      int 03

* Referenced by a CALL at Addresses:
|:00421857   , :00428A9D   
|
:0042DF20 55                      push ebp
:0042DF21 8BEC                    mov ebp, esp
:0042DF23 51                      push ecx
:0042DF24 894DFC                  mov dword ptr [ebp-04], ecx
:0042DF27 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DF2A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042DF2D 88480D                  mov byte ptr [eax+0D], cl
:0042DF30 8BE5                    mov esp, ebp
:0042DF32 5D                      pop ebp
:0042DF33 C20400                  ret 0004


:0042DF36 CC                      int 03
:0042DF37 CC                      int 03
:0042DF38 CC                      int 03
:0042DF39 CC                      int 03
:0042DF3A CC                      int 03
:0042DF3B CC                      int 03
:0042DF3C CC                      int 03
:0042DF3D CC                      int 03
:0042DF3E CC                      int 03
:0042DF3F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040B78F   , :00421868   , :00428AAE   , :004463A1   , :004463BA   
|:0044642A   , :00446443   , :0044646E   , :00446487   , :004464DE   
|:004464F7   , :00446522   , :0044653B   , :004465A5   , :004465BE   
|:00446631   , :0044664A   , :00446675   , :0044668E   , :004466E7   
|:00446700   , :0044672B   , :00446744   , :0044677E   , :00446797   
|:004467B9   , :004467D2   , :0045CF18   , :0045D19E   , :0045F924   
|:0045FA95   , :0046946E   
|
:0042DF40 55                      push ebp
:0042DF41 8BEC                    mov ebp, esp
:0042DF43 51                      push ecx
:0042DF44 894DFC                  mov dword ptr [ebp-04], ecx
:0042DF47 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DF4A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042DF4D 88480E                  mov byte ptr [eax+0E], cl
:0042DF50 8BE5                    mov esp, ebp
:0042DF52 5D                      pop ebp
:0042DF53 C20400                  ret 0004


:0042DF56 CC                      int 03
:0042DF57 CC                      int 03
:0042DF58 CC                      int 03
:0042DF59 CC                      int 03
:0042DF5A CC                      int 03
:0042DF5B CC                      int 03
:0042DF5C CC                      int 03
:0042DF5D CC                      int 03
:0042DF5E CC                      int 03
:0042DF5F CC                      int 03

* Referenced by a CALL at Addresses:
|:00420FA8   , :0042107F   , :004219B9   , :00438838   , :0044F2BD   
|:0045AE0B   
|
:0042DF60 55                      push ebp
:0042DF61 8BEC                    mov ebp, esp
:0042DF63 51                      push ecx
:0042DF64 894DFC                  mov dword ptr [ebp-04], ecx
:0042DF67 8B45FC                  mov eax, dword ptr [ebp-04]
:0042DF6A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042DF6D 894814                  mov dword ptr [eax+14], ecx
:0042DF70 8BE5                    mov esp, ebp
:0042DF72 5D                      pop ebp
:0042DF73 C20400                  ret 0004


:0042DF76 CC                      int 03
:0042DF77 CC                      int 03
:0042DF78 CC                      int 03
:0042DF79 CC                      int 03
:0042DF7A CC                      int 03
:0042DF7B CC                      int 03
:0042DF7C CC                      int 03
:0042DF7D CC                      int 03
:0042DF7E CC                      int 03
:0042DF7F CC                      int 03

* Referenced by a CALL at Addresses:
|:00420CCE   , :00420CD8   
|
:0042DF80 55                      push ebp
:0042DF81 8BEC                    mov ebp, esp
:0042DF83 51                      push ecx
:0042DF84 894DFC                  mov dword ptr [ebp-04], ecx
:0042DF87 6A01                    push 00000001
:0042DF89 68005A0000              push 00005A00
:0042DF8E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DF91 83C124                  add ecx, 00000024
:0042DF94 E8F7AE0400              call 00478E90
:0042DF99 8BE5                    mov esp, ebp
:0042DF9B 5D                      pop ebp
:0042DF9C C3                      ret


:0042DF9D CC                      int 03
:0042DF9E CC                      int 03
:0042DF9F CC                      int 03

* Referenced by a CALL at Addresses:
|:00420CE2   , :00420CEC   
|
:0042DFA0 55                      push ebp
:0042DFA1 8BEC                    mov ebp, esp
:0042DFA3 51                      push ecx
:0042DFA4 894DFC                  mov dword ptr [ebp-04], ecx
:0042DFA7 6A01                    push 00000001
:0042DFA9 68005A0000              push 00005A00
:0042DFAE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DFB1 83C138                  add ecx, 00000038
:0042DFB4 E8D7AE0400              call 00478E90
:0042DFB9 8BE5                    mov esp, ebp
:0042DFBB 5D                      pop ebp
:0042DFBC C3                      ret


:0042DFBD CC                      int 03
:0042DFBE CC                      int 03
:0042DFBF CC                      int 03

* Referenced by a CALL at Addresses:
|:00420CF6   , :00420D00   
|
:0042DFC0 55                      push ebp
:0042DFC1 8BEC                    mov ebp, esp
:0042DFC3 51                      push ecx
:0042DFC4 894DFC                  mov dword ptr [ebp-04], ecx
:0042DFC7 6A01                    push 00000001
:0042DFC9 6800900000              push 00009000
:0042DFCE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DFD1 83C14C                  add ecx, 0000004C
:0042DFD4 E8B7AE0400              call 00478E90
:0042DFD9 8BE5                    mov esp, ebp
:0042DFDB 5D                      pop ebp
:0042DFDC C3                      ret


:0042DFDD CC                      int 03
:0042DFDE CC                      int 03
:0042DFDF CC                      int 03

* Referenced by a CALL at Addresses:
|:00420BDA   , :00420BE4   
|
:0042DFE0 55                      push ebp
:0042DFE1 8BEC                    mov ebp, esp
:0042DFE3 51                      push ecx
:0042DFE4 894DFC                  mov dword ptr [ebp-04], ecx
:0042DFE7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042DFEA 83C124                  add ecx, 00000024
:0042DFED E8EEAE0400              call 00478EE0
:0042DFF2 8BE5                    mov esp, ebp
:0042DFF4 5D                      pop ebp
:0042DFF5 C3                      ret


:0042DFF6 CC                      int 03
:0042DFF7 CC                      int 03
:0042DFF8 CC                      int 03
:0042DFF9 CC                      int 03
:0042DFFA CC                      int 03
:0042DFFB CC                      int 03
:0042DFFC CC                      int 03
:0042DFFD CC                      int 03
:0042DFFE CC                      int 03
:0042DFFF CC                      int 03

* Referenced by a CALL at Addresses:
|:00420BEE   , :00420BF8   
|
:0042E000 55                      push ebp
:0042E001 8BEC                    mov ebp, esp
:0042E003 51                      push ecx
:0042E004 894DFC                  mov dword ptr [ebp-04], ecx
:0042E007 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E00A 83C138                  add ecx, 00000038
:0042E00D E8CEAE0400              call 00478EE0
:0042E012 8BE5                    mov esp, ebp
:0042E014 5D                      pop ebp
:0042E015 C3                      ret


:0042E016 CC                      int 03
:0042E017 CC                      int 03
:0042E018 CC                      int 03
:0042E019 CC                      int 03
:0042E01A CC                      int 03
:0042E01B CC                      int 03
:0042E01C CC                      int 03
:0042E01D CC                      int 03
:0042E01E CC                      int 03
:0042E01F CC                      int 03

* Referenced by a CALL at Addresses:
|:00420C02   , :00420C0C   
|
:0042E020 55                      push ebp
:0042E021 8BEC                    mov ebp, esp
:0042E023 51                      push ecx
:0042E024 894DFC                  mov dword ptr [ebp-04], ecx
:0042E027 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E02A 83C14C                  add ecx, 0000004C
:0042E02D E8AEAE0400              call 00478EE0
:0042E032 8BE5                    mov esp, ebp
:0042E034 5D                      pop ebp
:0042E035 C3                      ret


:0042E036 CC                      int 03
:0042E037 CC                      int 03
:0042E038 CC                      int 03
:0042E039 CC                      int 03
:0042E03A CC                      int 03
:0042E03B CC                      int 03
:0042E03C CC                      int 03
:0042E03D CC                      int 03
:0042E03E CC                      int 03
:0042E03F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042113D   , :00421234   , :004279E2   
|
:0042E040 55                      push ebp
:0042E041 8BEC                    mov ebp, esp
:0042E043 51                      push ecx
:0042E044 894DFC                  mov dword ptr [ebp-04], ecx
:0042E047 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E04A 33C9                    xor ecx, ecx
:0042E04C 8A481C                  mov cl, byte ptr [eax+1C]
:0042E04F 8BC1                    mov eax, ecx
:0042E051 8BE5                    mov esp, ebp
:0042E053 5D                      pop ebp
:0042E054 C3                      ret


:0042E055 CC                      int 03
:0042E056 CC                      int 03
:0042E057 CC                      int 03
:0042E058 CC                      int 03
:0042E059 CC                      int 03
:0042E05A CC                      int 03
:0042E05B CC                      int 03
:0042E05C CC                      int 03
:0042E05D CC                      int 03
:0042E05E CC                      int 03
:0042E05F CC                      int 03

* Referenced by a CALL at Addresses:
|:004221EF   , :0042CABB   
|
:0042E060 55                      push ebp
:0042E061 8BEC                    mov ebp, esp
:0042E063 51                      push ecx
:0042E064 894DFC                  mov dword ptr [ebp-04], ecx
:0042E067 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E06A 8B4018                  mov eax, dword ptr [eax+18]
:0042E06D 8BE5                    mov esp, ebp
:0042E06F 5D                      pop ebp
:0042E070 C3                      ret


:0042E071 CC                      int 03
:0042E072 CC                      int 03
:0042E073 CC                      int 03
:0042E074 CC                      int 03
:0042E075 CC                      int 03
:0042E076 CC                      int 03
:0042E077 CC                      int 03
:0042E078 CC                      int 03
:0042E079 CC                      int 03
:0042E07A CC                      int 03
:0042E07B CC                      int 03
:0042E07C CC                      int 03
:0042E07D CC                      int 03
:0042E07E CC                      int 03
:0042E07F CC                      int 03

* Referenced by a CALL at Addresses:
|:00420D55   , :00427B21   
|
:0042E080 55                      push ebp
:0042E081 8BEC                    mov ebp, esp
:0042E083 51                      push ecx
:0042E084 894DFC                  mov dword ptr [ebp-04], ecx
:0042E087 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E08A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042E08D 88481C                  mov byte ptr [eax+1C], cl
:0042E090 8BE5                    mov esp, ebp
:0042E092 5D                      pop ebp
:0042E093 C20400                  ret 0004


:0042E096 CC                      int 03
:0042E097 CC                      int 03
:0042E098 CC                      int 03
:0042E099 CC                      int 03
:0042E09A CC                      int 03
:0042E09B CC                      int 03
:0042E09C CC                      int 03
:0042E09D CC                      int 03
:0042E09E CC                      int 03
:0042E09F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042101C   , :004210DB   , :0042241A   , :0042242D   , :00428CB0   
|
:0042E0A0 55                      push ebp
:0042E0A1 8BEC                    mov ebp, esp
:0042E0A3 51                      push ecx
:0042E0A4 894DFC                  mov dword ptr [ebp-04], ecx
:0042E0A7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E0AA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042E0AD 89480C                  mov dword ptr [eax+0C], ecx
:0042E0B0 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E0B3 8B450C                  mov eax, dword ptr [ebp+0C]
:0042E0B6 894210                  mov dword ptr [edx+10], eax
:0042E0B9 8BE5                    mov esp, ebp
:0042E0BB 5D                      pop ebp
:0042E0BC C20800                  ret 0008


:0042E0BF CC                      int 03

* Referenced by a CALL at Addresses:
|:00421028   , :004210E7   , :00427C71   , :00429CD6   , :00429CF4   
|:00429D47   , :00429EB1   , :0042D432   , :0042D468   
|
:0042E0C0 55                      push ebp
:0042E0C1 8BEC                    mov ebp, esp
:0042E0C3 51                      push ecx
:0042E0C4 894DFC                  mov dword ptr [ebp-04], ecx
:0042E0C7 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042E0CB 85C0                    test eax, eax
:0042E0CD 7C12                    jl 0042E0E1
:0042E0CF 0FBE4D08                movsx ecx, byte ptr [ebp+08]
:0042E0D3 83F906                  cmp ecx, 00000006
:0042E0D6 7F09                    jg 0042E0E1
:0042E0D8 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E0DB 8A4508                  mov al, byte ptr [ebp+08]
:0042E0DE 884220                  mov byte ptr [edx+20], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E0CD(C), :0042E0D6(C)
|
:0042E0E1 8BE5                    mov esp, ebp
:0042E0E3 5D                      pop ebp
:0042E0E4 C20400                  ret 0004


:0042E0E7 CC                      int 03
:0042E0E8 CC                      int 03
:0042E0E9 CC                      int 03
:0042E0EA CC                      int 03
:0042E0EB CC                      int 03
:0042E0EC CC                      int 03
:0042E0ED CC                      int 03
:0042E0EE CC                      int 03
:0042E0EF CC                      int 03

* Referenced by a CALL at Addresses:
|:00421034   , :004210F3   , :00427C7D   , :00429D29   , :0042D5CC   
|:0042D602   
|
:0042E0F0 55                      push ebp
:0042E0F1 8BEC                    mov ebp, esp
:0042E0F3 51                      push ecx
:0042E0F4 894DFC                  mov dword ptr [ebp-04], ecx
:0042E0F7 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042E0FB 85C0                    test eax, eax
:0042E0FD 7C12                    jl 0042E111
:0042E0FF 0FBE4D08                movsx ecx, byte ptr [ebp+08]
:0042E103 83F906                  cmp ecx, 00000006
:0042E106 7F09                    jg 0042E111
:0042E108 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E10B 8A4508                  mov al, byte ptr [ebp+08]
:0042E10E 884221                  mov byte ptr [edx+21], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E0FD(C), :0042E106(C)
|
:0042E111 8BE5                    mov esp, ebp
:0042E113 5D                      pop ebp
:0042E114 C20400                  ret 0004


:0042E117 CC                      int 03
:0042E118 CC                      int 03
:0042E119 CC                      int 03
:0042E11A CC                      int 03
:0042E11B CC                      int 03
:0042E11C CC                      int 03
:0042E11D CC                      int 03
:0042E11E CC                      int 03
:0042E11F CC                      int 03

* Referenced by a CALL at Addresses:
|:00421040   , :004210FF   , :00427C89   , :00429D0B   , :0042D653   
|:0042D689   
|
:0042E120 55                      push ebp
:0042E121 8BEC                    mov ebp, esp
:0042E123 51                      push ecx
:0042E124 894DFC                  mov dword ptr [ebp-04], ecx
:0042E127 0FBE4508                movsx eax, byte ptr [ebp+08]
:0042E12B 85C0                    test eax, eax
:0042E12D 7C12                    jl 0042E141
:0042E12F 0FBE4D08                movsx ecx, byte ptr [ebp+08]
:0042E133 83F906                  cmp ecx, 00000006
:0042E136 7F09                    jg 0042E141
:0042E138 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E13B 8A4508                  mov al, byte ptr [ebp+08]
:0042E13E 884222                  mov byte ptr [edx+22], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042E12D(C), :0042E136(C)
|
:0042E141 8BE5                    mov esp, ebp
:0042E143 5D                      pop ebp
:0042E144 C20400                  ret 0004


:0042E147 CC                      int 03
:0042E148 CC                      int 03
:0042E149 CC                      int 03
:0042E14A CC                      int 03
:0042E14B CC                      int 03
:0042E14C CC                      int 03
:0042E14D CC                      int 03
:0042E14E CC                      int 03
:0042E14F CC                      int 03

* Referenced by a CALL at Addresses:
|:00422221   , :004235EA   , :004262A1   , :004262F7   , :0042D2DE   
|
:0042E150 55                      push ebp
:0042E151 8BEC                    mov ebp, esp
:0042E153 51                      push ecx
:0042E154 894DFC                  mov dword ptr [ebp-04], ecx
:0042E157 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E15A 0FBE4023                movsx eax, byte ptr [eax+23]
:0042E15E 83E002                  and eax, 00000002
:0042E161 8BE5                    mov esp, ebp
:0042E163 5D                      pop ebp
:0042E164 C3                      ret


:0042E165 CC                      int 03
:0042E166 CC                      int 03
:0042E167 CC                      int 03
:0042E168 CC                      int 03
:0042E169 CC                      int 03
:0042E16A CC                      int 03
:0042E16B CC                      int 03
:0042E16C CC                      int 03
:0042E16D CC                      int 03
:0042E16E CC                      int 03
:0042E16F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042104A   , :00421109   , :00427982   
|
:0042E170 55                      push ebp
:0042E171 8BEC                    mov ebp, esp
:0042E173 51                      push ecx
:0042E174 894DFC                  mov dword ptr [ebp-04], ecx
:0042E177 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E17A C6402300                mov [eax+23], 00
:0042E17E 8BE5                    mov esp, ebp
:0042E180 5D                      pop ebp
:0042E181 C3                      ret


:0042E182 CC                      int 03
:0042E183 CC                      int 03
:0042E184 CC                      int 03
:0042E185 CC                      int 03
:0042E186 CC                      int 03
:0042E187 CC                      int 03
:0042E188 CC                      int 03
:0042E189 CC                      int 03
:0042E18A CC                      int 03
:0042E18B CC                      int 03
:0042E18C CC                      int 03
:0042E18D CC                      int 03
:0042E18E CC                      int 03
:0042E18F CC                      int 03

* Referenced by a CALL at Addresses:
|:00422351   , :0042235D   , :0042236B   , :00422377   , :0043886A   
|:0044F2F3   
|
:0042E190 55                      push ebp
:0042E191 8BEC                    mov ebp, esp
:0042E193 51                      push ecx
:0042E194 894DFC                  mov dword ptr [ebp-04], ecx
:0042E197 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E19A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042E19D 894818                  mov dword ptr [eax+18], ecx
:0042E1A0 8BE5                    mov esp, ebp
:0042E1A2 5D                      pop ebp
:0042E1A3 C20400                  ret 0004


:0042E1A6 CC                      int 03
:0042E1A7 CC                      int 03
:0042E1A8 CC                      int 03
:0042E1A9 CC                      int 03
:0042E1AA CC                      int 03
:0042E1AB CC                      int 03
:0042E1AC CC                      int 03
:0042E1AD CC                      int 03
:0042E1AE CC                      int 03
:0042E1AF CC                      int 03

* Referenced by a CALL at Addresses:
|:004235FF   , :0042D2B6   
|
:0042E1B0 55                      push ebp
:0042E1B1 8BEC                    mov ebp, esp
:0042E1B3 51                      push ecx
:0042E1B4 894DFC                  mov dword ptr [ebp-04], ecx
:0042E1B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E1BA 0FBE4023                movsx eax, byte ptr [eax+23]
:0042E1BE 83E001                  and eax, 00000001
:0042E1C1 8BE5                    mov esp, ebp
:0042E1C3 5D                      pop ebp
:0042E1C4 C3                      ret


:0042E1C5 CC                      int 03
:0042E1C6 CC                      int 03
:0042E1C7 CC                      int 03
:0042E1C8 CC                      int 03
:0042E1C9 CC                      int 03
:0042E1CA CC                      int 03
:0042E1CB CC                      int 03
:0042E1CC CC                      int 03
:0042E1CD CC                      int 03
:0042E1CE CC                      int 03
:0042E1CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00423629   , :004261D3   , :0042D32E   
|
:0042E1D0 55                      push ebp
:0042E1D1 8BEC                    mov ebp, esp
:0042E1D3 51                      push ecx
:0042E1D4 894DFC                  mov dword ptr [ebp-04], ecx
:0042E1D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E1DA 0FBE4023                movsx eax, byte ptr [eax+23]
:0042E1DE 83E008                  and eax, 00000008
:0042E1E1 8BE5                    mov esp, ebp
:0042E1E3 5D                      pop ebp
:0042E1E4 C3                      ret


:0042E1E5 CC                      int 03
:0042E1E6 CC                      int 03
:0042E1E7 CC                      int 03
:0042E1E8 CC                      int 03
:0042E1E9 CC                      int 03
:0042E1EA CC                      int 03
:0042E1EB CC                      int 03
:0042E1EC CC                      int 03
:0042E1ED CC                      int 03
:0042E1EE CC                      int 03
:0042E1EF CC                      int 03

* Referenced by a CALL at Addresses:
|:00423614   , :00429E08   , :00429EE0   , :0042B108   , :0042B171   
|:0042D356   
|
:0042E1F0 55                      push ebp
:0042E1F1 8BEC                    mov ebp, esp
:0042E1F3 51                      push ecx
:0042E1F4 894DFC                  mov dword ptr [ebp-04], ecx
:0042E1F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E1FA 0FBE4023                movsx eax, byte ptr [eax+23]
:0042E1FE 83E010                  and eax, 00000010
:0042E201 8BE5                    mov esp, ebp
:0042E203 5D                      pop ebp
:0042E204 C3                      ret


:0042E205 CC                      int 03
:0042E206 CC                      int 03
:0042E207 CC                      int 03
:0042E208 CC                      int 03
:0042E209 CC                      int 03
:0042E20A CC                      int 03
:0042E20B CC                      int 03
:0042E20C CC                      int 03
:0042E20D CC                      int 03
:0042E20E CC                      int 03
:0042E20F CC                      int 03

* Referenced by a CALL at Addresses:
|:00423730   , :004237EC   , :00429CC7   , :00429CE5   , :00429D38   
|:00429EA2   , :0042C1A0   , :0042CC67   , :0042CCF0   
|
:0042E210 55                      push ebp
:0042E211 8BEC                    mov ebp, esp
:0042E213 51                      push ecx
:0042E214 894DFC                  mov dword ptr [ebp-04], ecx
:0042E217 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E21A 8A4020                  mov al, byte ptr [eax+20]
:0042E21D 8BE5                    mov esp, ebp
:0042E21F 5D                      pop ebp
:0042E220 C3                      ret


:0042E221 CC                      int 03
:0042E222 CC                      int 03
:0042E223 CC                      int 03
:0042E224 CC                      int 03
:0042E225 CC                      int 03
:0042E226 CC                      int 03
:0042E227 CC                      int 03
:0042E228 CC                      int 03
:0042E229 CC                      int 03
:0042E22A CC                      int 03
:0042E22B CC                      int 03
:0042E22C CC                      int 03
:0042E22D CC                      int 03
:0042E22E CC                      int 03
:0042E22F CC                      int 03

* Referenced by a CALL at Addresses:
|:004236CD   , :00429D1A   , :0042CCA4   , :0042CD2D   
|
:0042E230 55                      push ebp
:0042E231 8BEC                    mov ebp, esp
:0042E233 51                      push ecx
:0042E234 894DFC                  mov dword ptr [ebp-04], ecx
:0042E237 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E23A 8A4021                  mov al, byte ptr [eax+21]
:0042E23D 8BE5                    mov esp, ebp
:0042E23F 5D                      pop ebp
:0042E240 C3                      ret


:0042E241 CC                      int 03
:0042E242 CC                      int 03
:0042E243 CC                      int 03
:0042E244 CC                      int 03
:0042E245 CC                      int 03
:0042E246 CC                      int 03
:0042E247 CC                      int 03
:0042E248 CC                      int 03
:0042E249 CC                      int 03
:0042E24A CC                      int 03
:0042E24B CC                      int 03
:0042E24C CC                      int 03
:0042E24D CC                      int 03
:0042E24E CC                      int 03
:0042E24F CC                      int 03

* Referenced by a CALL at Addresses:
|:004237FC   , :00429CFC   , :0042AE20   , :0042AE38   , :0042C1C2   
|
:0042E250 55                      push ebp
:0042E251 8BEC                    mov ebp, esp
:0042E253 51                      push ecx
:0042E254 894DFC                  mov dword ptr [ebp-04], ecx
:0042E257 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E25A 8A4022                  mov al, byte ptr [eax+22]
:0042E25D 8BE5                    mov esp, ebp
:0042E25F 5D                      pop ebp
:0042E260 C3                      ret


:0042E261 CC                      int 03
:0042E262 CC                      int 03
:0042E263 CC                      int 03
:0042E264 CC                      int 03
:0042E265 CC                      int 03
:0042E266 CC                      int 03
:0042E267 CC                      int 03
:0042E268 CC                      int 03
:0042E269 CC                      int 03
:0042E26A CC                      int 03
:0042E26B CC                      int 03
:0042E26C CC                      int 03
:0042E26D CC                      int 03
:0042E26E CC                      int 03
:0042E26F CC                      int 03

* Referenced by a CALL at Addresses:
|:00424F6F   , :0042613E   , :00428E5B   , :0045854B   , :00458650   
|:00458686   , :00458729   , :0045875F   , :00458825   , :0045AD20   
|
:0042E270 55                      push ebp
:0042E271 8BEC                    mov ebp, esp
:0042E273 51                      push ecx
:0042E274 894DFC                  mov dword ptr [ebp-04], ecx
:0042E277 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E27A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042E27D 8908                    mov dword ptr [eax], ecx
:0042E27F 8BE5                    mov esp, ebp
:0042E281 5D                      pop ebp
:0042E282 C20400                  ret 0004


:0042E285 CC                      int 03
:0042E286 CC                      int 03
:0042E287 CC                      int 03
:0042E288 CC                      int 03
:0042E289 CC                      int 03
:0042E28A CC                      int 03
:0042E28B CC                      int 03
:0042E28C CC                      int 03
:0042E28D CC                      int 03
:0042E28E CC                      int 03
:0042E28F CC                      int 03

* Referenced by a CALL at Addresses:
|:00405422   , :0040552F   , :00421001   , :004210C3   , :00424F57   
|:00426126   , :00428E40   , :0042C198   , :0042C1BA   , :0042C1D6   
|:0042C533   , :00433F91   , :0045AD3C   
|
:0042E290 55                      push ebp
:0042E291 8BEC                    mov ebp, esp
:0042E293 51                      push ecx
:0042E294 894DFC                  mov dword ptr [ebp-04], ecx
:0042E297 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E29A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042E29D 894808                  mov dword ptr [eax+08], ecx
:0042E2A0 8BE5                    mov esp, ebp
:0042E2A2 5D                      pop ebp
:0042E2A3 C20400                  ret 0004


:0042E2A6 CC                      int 03
:0042E2A7 CC                      int 03
:0042E2A8 CC                      int 03
:0042E2A9 CC                      int 03
:0042E2AA CC                      int 03
:0042E2AB CC                      int 03
:0042E2AC CC                      int 03
:0042E2AD CC                      int 03
:0042E2AE CC                      int 03
:0042E2AF CC                      int 03

* Referenced by a CALL at Addresses:
|:004263FB   , :0042B286   , :0042B2B3   , :0042B443   , :0042B484   
|
:0042E2B0 55                      push ebp
:0042E2B1 8BEC                    mov ebp, esp
:0042E2B3 51                      push ecx
:0042E2B4 894DFC                  mov dword ptr [ebp-04], ecx
:0042E2B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E2BA 8A4D08                  mov cl, byte ptr [ebp+08]
:0042E2BD 88481E                  mov byte ptr [eax+1E], cl
:0042E2C0 8BE5                    mov esp, ebp
:0042E2C2 5D                      pop ebp
:0042E2C3 C20400                  ret 0004


:0042E2C6 CC                      int 03
:0042E2C7 CC                      int 03
:0042E2C8 CC                      int 03
:0042E2C9 CC                      int 03
:0042E2CA CC                      int 03
:0042E2CB CC                      int 03
:0042E2CC CC                      int 03
:0042E2CD CC                      int 03
:0042E2CE CC                      int 03
:0042E2CF CC                      int 03

* Referenced by a CALL at Address:
|:00427AF0   
|
:0042E2D0 55                      push ebp
:0042E2D1 8BEC                    mov ebp, esp
:0042E2D3 51                      push ecx
:0042E2D4 894DFC                  mov dword ptr [ebp-04], ecx
:0042E2D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E2DA 034508                  add eax, dword ptr [ebp+08]
:0042E2DD 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0042E2E0 884804                  mov byte ptr [eax+04], cl
:0042E2E3 8BE5                    mov esp, ebp
:0042E2E5 5D                      pop ebp
:0042E2E6 C20800                  ret 0008


:0042E2E9 CC                      int 03
:0042E2EA CC                      int 03
:0042E2EB CC                      int 03
:0042E2EC CC                      int 03
:0042E2ED CC                      int 03
:0042E2EE CC                      int 03
:0042E2EF CC                      int 03

* Referenced by a CALL at Addresses:
|:00428AC5   , :00428ADD   , :00428BE8   , :00428C00   
|
:0042E2F0 55                      push ebp
:0042E2F1 8BEC                    mov ebp, esp
:0042E2F3 51                      push ecx
:0042E2F4 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E2F7 6A04                    push 00000004
:0042E2F9 6A00                    push 00000000
:0042E2FB 8B4508                  mov eax, dword ptr [ebp+08]
:0042E2FE 50                      push eax
:0042E2FF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E302 83C124                  add ecx, 00000024
:0042E305 E886AC0400              call 00478F90
:0042E30A 8BE5                    mov esp, ebp
:0042E30C 5D                      pop ebp
:0042E30D C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00429CA4   , :0042B26D   , :0042B42A   , :0042B44D   , :0042B72D   
|:0042B750   
|
:0042E310 55                      push ebp
:0042E311 8BEC                    mov ebp, esp
:0042E313 51                      push ecx
:0042E314 894DFC                  mov dword ptr [ebp-04], ecx
:0042E317 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E31A 8A401E                  mov al, byte ptr [eax+1E]
:0042E31D 8BE5                    mov esp, ebp
:0042E31F 5D                      pop ebp
:0042E320 C3                      ret


:0042E321 CC                      int 03
:0042E322 CC                      int 03
:0042E323 CC                      int 03
:0042E324 CC                      int 03
:0042E325 CC                      int 03
:0042E326 CC                      int 03
:0042E327 CC                      int 03
:0042E328 CC                      int 03
:0042E329 CC                      int 03
:0042E32A CC                      int 03
:0042E32B CC                      int 03
:0042E32C CC                      int 03
:0042E32D CC                      int 03
:0042E32E CC                      int 03
:0042E32F CC                      int 03

* Referenced by a CALL at Addresses:
|:004299B4   , :0042ACD4   , :0042AD77   , :0042B7BF   , :0042B7D9   
|
:0042E330 55                      push ebp
:0042E331 8BEC                    mov ebp, esp
:0042E333 51                      push ecx
:0042E334 894DFC                  mov dword ptr [ebp-04], ecx
:0042E337 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E33A 8A401F                  mov al, byte ptr [eax+1F]
:0042E33D 8BE5                    mov esp, ebp
:0042E33F 5D                      pop ebp
:0042E340 C3                      ret


:0042E341 CC                      int 03
:0042E342 CC                      int 03
:0042E343 CC                      int 03
:0042E344 CC                      int 03
:0042E345 CC                      int 03
:0042E346 CC                      int 03
:0042E347 CC                      int 03
:0042E348 CC                      int 03
:0042E349 CC                      int 03
:0042E34A CC                      int 03
:0042E34B CC                      int 03
:0042E34C CC                      int 03
:0042E34D CC                      int 03
:0042E34E CC                      int 03
:0042E34F CC                      int 03

* Referenced by a CALL at Address:
|:00429D74   
|
:0042E350 55                      push ebp
:0042E351 8BEC                    mov ebp, esp
:0042E353 51                      push ecx
:0042E354 894DFC                  mov dword ptr [ebp-04], ecx
:0042E357 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E35A 8A4823                  mov cl, byte ptr [eax+23]
:0042E35D 80C902                  or cl, 02
:0042E360 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E363 884A23                  mov byte ptr [edx+23], cl
:0042E366 8BE5                    mov esp, ebp
:0042E368 5D                      pop ebp
:0042E369 C3                      ret


:0042E36A CC                      int 03
:0042E36B CC                      int 03
:0042E36C CC                      int 03
:0042E36D CC                      int 03
:0042E36E CC                      int 03
:0042E36F CC                      int 03

* Referenced by a CALL at Addresses:
|:00429AF3   , :00429BBB   , :00429D56   
|
:0042E370 55                      push ebp
:0042E371 8BEC                    mov ebp, esp
:0042E373 51                      push ecx
:0042E374 894DFC                  mov dword ptr [ebp-04], ecx
:0042E377 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E37A 8A4823                  mov cl, byte ptr [eax+23]
:0042E37D 80C904                  or cl, 04
:0042E380 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E383 884A23                  mov byte ptr [edx+23], cl
:0042E386 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E389 E8EDE9FFFF              call 0042CD7B
:0042E38E 8BE5                    mov esp, ebp
:0042E390 5D                      pop ebp
:0042E391 C3                      ret


:0042E392 CC                      int 03
:0042E393 CC                      int 03
:0042E394 CC                      int 03
:0042E395 CC                      int 03
:0042E396 CC                      int 03
:0042E397 CC                      int 03
:0042E398 CC                      int 03
:0042E399 CC                      int 03
:0042E39A CC                      int 03
:0042E39B CC                      int 03
:0042E39C CC                      int 03
:0042E39D CC                      int 03
:0042E39E CC                      int 03
:0042E39F CC                      int 03

* Referenced by a CALL at Address:
|:00429AE3   
|
:0042E3A0 55                      push ebp
:0042E3A1 8BEC                    mov ebp, esp
:0042E3A3 51                      push ecx
:0042E3A4 894DFC                  mov dword ptr [ebp-04], ecx
:0042E3A7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E3AA 8A4823                  mov cl, byte ptr [eax+23]
:0042E3AD 80C908                  or cl, 08
:0042E3B0 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E3B3 884A23                  mov byte ptr [edx+23], cl
:0042E3B6 8BE5                    mov esp, ebp
:0042E3B8 5D                      pop ebp
:0042E3B9 C3                      ret


:0042E3BA CC                      int 03
:0042E3BB CC                      int 03
:0042E3BC CC                      int 03
:0042E3BD CC                      int 03
:0042E3BE CC                      int 03
:0042E3BF CC                      int 03

* Referenced by a CALL at Address:
|:00429D65   
|
:0042E3C0 55                      push ebp
:0042E3C1 8BEC                    mov ebp, esp
:0042E3C3 51                      push ecx
:0042E3C4 894DFC                  mov dword ptr [ebp-04], ecx
:0042E3C7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E3CA 8A4823                  mov cl, byte ptr [eax+23]
:0042E3CD 80C910                  or cl, 10
:0042E3D0 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E3D3 884A23                  mov byte ptr [edx+23], cl
:0042E3D6 8BE5                    mov esp, ebp
:0042E3D8 5D                      pop ebp
:0042E3D9 C3                      ret


:0042E3DA CC                      int 03
:0042E3DB CC                      int 03
:0042E3DC CC                      int 03
:0042E3DD CC                      int 03
:0042E3DE CC                      int 03
:0042E3DF CC                      int 03

* Referenced by a CALL at Addresses:
|:00429E75   , :0042D6C7   
|
:0042E3E0 55                      push ebp
:0042E3E1 8BEC                    mov ebp, esp
:0042E3E3 51                      push ecx
:0042E3E4 894DFC                  mov dword ptr [ebp-04], ecx
:0042E3E7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E3EA 8A4823                  mov cl, byte ptr [eax+23]
:0042E3ED 80E1FE                  and cl, FE
:0042E3F0 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E3F3 884A23                  mov byte ptr [edx+23], cl
:0042E3F6 8BE5                    mov esp, ebp
:0042E3F8 5D                      pop ebp
:0042E3F9 C3                      ret


:0042E3FA CC                      int 03
:0042E3FB CC                      int 03
:0042E3FC CC                      int 03
:0042E3FD CC                      int 03
:0042E3FE CC                      int 03
:0042E3FF CC                      int 03

* Referenced by a CALL at Addresses:
|:00429E66   , :0042D705   
|
:0042E400 55                      push ebp
:0042E401 8BEC                    mov ebp, esp
:0042E403 51                      push ecx
:0042E404 894DFC                  mov dword ptr [ebp-04], ecx
:0042E407 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E40A 8A4823                  mov cl, byte ptr [eax+23]
:0042E40D 80E1FD                  and cl, FD
:0042E410 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E413 884A23                  mov byte ptr [edx+23], cl
:0042E416 8BE5                    mov esp, ebp
:0042E418 5D                      pop ebp
:0042E419 C3                      ret


:0042E41A CC                      int 03
:0042E41B CC                      int 03
:0042E41C CC                      int 03
:0042E41D CC                      int 03
:0042E41E CC                      int 03
:0042E41F CC                      int 03

* Referenced by a CALL at Addresses:
|:00429E57   , :0042D743   
|
:0042E420 55                      push ebp
:0042E421 8BEC                    mov ebp, esp
:0042E423 51                      push ecx
:0042E424 894DFC                  mov dword ptr [ebp-04], ecx
:0042E427 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E42A 8A4823                  mov cl, byte ptr [eax+23]
:0042E42D 80E1FB                  and cl, FB
:0042E430 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E433 884A23                  mov byte ptr [edx+23], cl
:0042E436 8BE5                    mov esp, ebp
:0042E438 5D                      pop ebp
:0042E439 C3                      ret


:0042E43A CC                      int 03
:0042E43B CC                      int 03
:0042E43C CC                      int 03
:0042E43D CC                      int 03
:0042E43E CC                      int 03
:0042E43F CC                      int 03

* Referenced by a CALL at Addresses:
|:00429E93   , :0042D781   
|
:0042E440 55                      push ebp
:0042E441 8BEC                    mov ebp, esp
:0042E443 51                      push ecx
:0042E444 894DFC                  mov dword ptr [ebp-04], ecx
:0042E447 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E44A 8A4823                  mov cl, byte ptr [eax+23]
:0042E44D 80E1F7                  and cl, F7
:0042E450 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E453 884A23                  mov byte ptr [edx+23], cl
:0042E456 8BE5                    mov esp, ebp
:0042E458 5D                      pop ebp
:0042E459 C3                      ret


:0042E45A CC                      int 03
:0042E45B CC                      int 03
:0042E45C CC                      int 03
:0042E45D CC                      int 03
:0042E45E CC                      int 03
:0042E45F CC                      int 03

* Referenced by a CALL at Addresses:
|:00429E84   , :0042D7BF   
|
:0042E460 55                      push ebp
:0042E461 8BEC                    mov ebp, esp
:0042E463 51                      push ecx
:0042E464 894DFC                  mov dword ptr [ebp-04], ecx
:0042E467 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E46A 8A4823                  mov cl, byte ptr [eax+23]
:0042E46D 80E1EF                  and cl, EF
:0042E470 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E473 884A23                  mov byte ptr [edx+23], cl
:0042E476 8BE5                    mov esp, ebp
:0042E478 5D                      pop ebp
:0042E479 C3                      ret


:0042E47A CC                      int 03
:0042E47B CC                      int 03
:0042E47C CC                      int 03
:0042E47D CC                      int 03
:0042E47E CC                      int 03
:0042E47F CC                      int 03

* Referenced by a CALL at Addresses:
|:00402159   , :0042B776   , :0042B79B   , :0042CBAC   , :0043405C   
|
:0042E480 55                      push ebp
:0042E481 8BEC                    mov ebp, esp
:0042E483 51                      push ecx
:0042E484 894DFC                  mov dword ptr [ebp-04], ecx
:0042E487 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E48A 8A00                    mov al, byte ptr [eax]
:0042E48C 8BE5                    mov esp, ebp
:0042E48E 5D                      pop ebp
:0042E48F C3                      ret


:0042E490 55                      push ebp
:0042E491 8BEC                    mov ebp, esp
:0042E493 E807000000              call 0042E49F
:0042E498 E822000000              call 0042E4BF
:0042E49D 5D                      pop ebp
:0042E49E C3                      ret



* Referenced by a CALL at Address:
|:0042E493   
|
:0042E49F 55                      push ebp
:0042E4A0 8BEC                    mov ebp, esp
:0042E4A2 6810AC4500              push 0045AC10
:0042E4A7 68C0DD4200              push 0042DDC0
:0042E4AC 6820030000              push 00000320
:0042E4B1 6A50                    push 00000050
:0042E4B3 68787F4900              push 00497F78
:0042E4B8 E813170400              call 0046FBD0
:0042E4BD 5D                      pop ebp
:0042E4BE C3                      ret



* Referenced by a CALL at Address:
|:0042E498   
|
:0042E4BF 55                      push ebp
:0042E4C0 8BEC                    mov ebp, esp
:0042E4C2 68D1E44200              push 0042E4D1
:0042E4C7 E8E40F0400              call 0046F4B0
:0042E4CC 83C404                  add esp, 00000004
:0042E4CF 5D                      pop ebp
:0042E4D0 C3                      ret


:0042E4D1 55                      push ebp
:0042E4D2 8BEC                    mov ebp, esp
:0042E4D4 6810AC4500              push 0045AC10
:0042E4D9 6820030000              push 00000320
:0042E4DE 6A50                    push 00000050
:0042E4E0 68787F4900              push 00497F78
:0042E4E5 E886170400              call 0046FC70
:0042E4EA 5D                      pop ebp
:0042E4EB C3                      ret


:0042E4EC 55                      push ebp
:0042E4ED 8BEC                    mov ebp, esp
:0042E4EF E807000000              call 0042E4FB
:0042E4F4 E81F000000              call 0042E518
:0042E4F9 5D                      pop ebp
:0042E4FA C3                      ret



* Referenced by a CALL at Address:
|:0042E4EF   
|
:0042E4FB 55                      push ebp
:0042E4FC 8BEC                    mov ebp, esp
:0042E4FE 6800EA4200              push 0042EA00
:0042E503 68F0564000              push 004056F0
:0042E508 6A20                    push 00000020
:0042E50A 6A1C                    push 0000001C
:0042E50C 6878794A00              push 004A7978
:0042E511 E8BA160400              call 0046FBD0
:0042E516 5D                      pop ebp
:0042E517 C3                      ret



* Referenced by a CALL at Address:
|:0042E4F4   
|
:0042E518 55                      push ebp
:0042E519 8BEC                    mov ebp, esp
:0042E51B 682AE54200              push 0042E52A
:0042E520 E88B0F0400              call 0046F4B0
:0042E525 83C404                  add esp, 00000004
:0042E528 5D                      pop ebp
:0042E529 C3                      ret


:0042E52A 55                      push ebp
:0042E52B 8BEC                    mov ebp, esp
:0042E52D 6800EA4200              push 0042EA00
:0042E532 6A20                    push 00000020
:0042E534 6A1C                    push 0000001C
:0042E536 6878794A00              push 004A7978
:0042E53B E830170400              call 0046FC70
:0042E540 5D                      pop ebp
:0042E541 C3                      ret


:0042E542 55                      push ebp
:0042E543 8BEC                    mov ebp, esp
:0042E545 E807000000              call 0042E551
:0042E54A E81F000000              call 0042E56E
:0042E54F 5D                      pop ebp
:0042E550 C3                      ret



* Referenced by a CALL at Address:
|:0042E545   
|
:0042E551 55                      push ebp
:0042E552 8BEC                    mov ebp, esp
:0042E554 6800EA4200              push 0042EA00
:0042E559 68F0564000              push 004056F0
:0042E55E 6A10                    push 00000010
:0042E560 6A48                    push 00000048
:0042E562 6808184B00              push 004B1808
:0042E567 E864160400              call 0046FBD0
:0042E56C 5D                      pop ebp
:0042E56D C3                      ret



* Referenced by a CALL at Address:
|:0042E54A   
|
:0042E56E 55                      push ebp
:0042E56F 8BEC                    mov ebp, esp
:0042E571 6880E54200              push 0042E580
:0042E576 E8350F0400              call 0046F4B0
:0042E57B 83C404                  add esp, 00000004
:0042E57E 5D                      pop ebp
:0042E57F C3                      ret


:0042E580 55                      push ebp
:0042E581 8BEC                    mov ebp, esp
:0042E583 6800EA4200              push 0042EA00
:0042E588 6A10                    push 00000010
:0042E58A 6A48                    push 00000048
:0042E58C 6808184B00              push 004B1808
:0042E591 E8DA160400              call 0046FC70
:0042E596 5D                      pop ebp
:0042E597 C3                      ret


:0042E598 55                      push ebp
:0042E599 8BEC                    mov ebp, esp
:0042E59B E807000000              call 0042E5A7
:0042E5A0 E81F000000              call 0042E5C4
:0042E5A5 5D                      pop ebp
:0042E5A6 C3                      ret



* Referenced by a CALL at Address:
|:0042E59B   
|
:0042E5A7 55                      push ebp
:0042E5A8 8BEC                    mov ebp, esp
:0042E5AA 6800EA4200              push 0042EA00
:0042E5AF 6800E94200              push 0042E900

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042E5B4 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042E5B6 6A0A                    push 0000000A
:0042E5B8 68D8174B00              push 004B17D8
:0042E5BD E80E160400              call 0046FBD0
:0042E5C2 5D                      pop ebp
:0042E5C3 C3                      ret



* Referenced by a CALL at Address:
|:0042E5A0   
|
:0042E5C4 55                      push ebp
:0042E5C5 8BEC                    mov ebp, esp
:0042E5C7 68D6E54200              push 0042E5D6
:0042E5CC E8DF0E0400              call 0046F4B0
:0042E5D1 83C404                  add esp, 00000004
:0042E5D4 5D                      pop ebp
:0042E5D5 C3                      ret


:0042E5D6 55                      push ebp
:0042E5D7 8BEC                    mov ebp, esp
:0042E5D9 6800EA4200              push 0042EA00

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042E5DE 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042E5E0 6A0A                    push 0000000A
:0042E5E2 68D8174B00              push 004B17D8
:0042E5E7 E884160400              call 0046FC70
:0042E5EC 5D                      pop ebp
:0042E5ED C3                      ret


:0042E5EE 55                      push ebp
:0042E5EF 8BEC                    mov ebp, esp
:0042E5F1 E807000000              call 0042E5FD
:0042E5F6 E811000000              call 0042E60C
:0042E5FB 5D                      pop ebp
:0042E5FC C3                      ret



* Referenced by a CALL at Address:
|:0042E5F1   
|
:0042E5FD 55                      push ebp
:0042E5FE 8BEC                    mov ebp, esp
:0042E600 B978294B00              mov ecx, 004B2978
:0042E605 E836030000              call 0042E940
:0042E60A 5D                      pop ebp
:0042E60B C3                      ret



* Referenced by a CALL at Address:
|:0042E5F6   
|
:0042E60C 55                      push ebp
:0042E60D 8BEC                    mov ebp, esp
:0042E60F 681EE64200              push 0042E61E
:0042E614 E8970E0400              call 0046F4B0
:0042E619 83C404                  add esp, 00000004
:0042E61C 5D                      pop ebp
:0042E61D C3                      ret


:0042E61E 55                      push ebp
:0042E61F 8BEC                    mov ebp, esp
:0042E621 B978294B00              mov ecx, 004B2978
:0042E626 E8D5030000              call 0042EA00
:0042E62B 5D                      pop ebp
:0042E62C C3                      ret


:0042E62D 55                      push ebp
:0042E62E 8BEC                    mov ebp, esp
:0042E630 E807000000              call 0042E63C
:0042E635 E822000000              call 0042E65C
:0042E63A 5D                      pop ebp
:0042E63B C3                      ret



* Referenced by a CALL at Address:
|:0042E630   
|
:0042E63C 55                      push ebp
:0042E63D 8BEC                    mov ebp, esp
:0042E63F 6800EA4200              push 0042EA00
:0042E644 6810EA4200              push 0042EA10
:0042E649 68A3010000              push 000001A3
:0042E64E 6A22                    push 00000022
:0042E650 68D0474900              push 004947D0
:0042E655 E876150400              call 0046FBD0
:0042E65A 5D                      pop ebp
:0042E65B C3                      ret



* Referenced by a CALL at Address:
|:0042E635   
|
:0042E65C 55                      push ebp
:0042E65D 8BEC                    mov ebp, esp
:0042E65F 686EE64200              push 0042E66E
:0042E664 E8470E0400              call 0046F4B0
:0042E669 83C404                  add esp, 00000004
:0042E66C 5D                      pop ebp
:0042E66D C3                      ret


:0042E66E 55                      push ebp
:0042E66F 8BEC                    mov ebp, esp
:0042E671 6800EA4200              push 0042EA00
:0042E676 68A3010000              push 000001A3
:0042E67B 6A22                    push 00000022
:0042E67D 68D0474900              push 004947D0
:0042E682 E8E9150400              call 0046FC70
:0042E687 5D                      pop ebp
:0042E688 C3                      ret


:0042E689 55                      push ebp
:0042E68A 8BEC                    mov ebp, esp
:0042E68C E807000000              call 0042E698
:0042E691 E822000000              call 0042E6B8
:0042E696 5D                      pop ebp
:0042E697 C3                      ret



* Referenced by a CALL at Address:
|:0042E68C   
|
:0042E698 55                      push ebp
:0042E699 8BEC                    mov ebp, esp
:0042E69B 6800EA4200              push 0042EA00
:0042E6A0 6810EA4200              push 0042EA10
:0042E6A5 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EC 
                                  |
:0042E6A7 68EC000000              push 000000EC
:0042E6AC 6850D24A00              push 004AD250
:0042E6B1 E81A150400              call 0046FBD0
:0042E6B6 5D                      pop ebp
:0042E6B7 C3                      ret



* Referenced by a CALL at Address:
|:0042E691   
|
:0042E6B8 55                      push ebp
:0042E6B9 8BEC                    mov ebp, esp
:0042E6BB 68CAE64200              push 0042E6CA
:0042E6C0 E8EB0D0400              call 0046F4B0
:0042E6C5 83C404                  add esp, 00000004
:0042E6C8 5D                      pop ebp
:0042E6C9 C3                      ret


:0042E6CA 55                      push ebp
:0042E6CB 8BEC                    mov ebp, esp
:0042E6CD 6800EA4200              push 0042EA00
:0042E6D2 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00EC 
                                  |
:0042E6D4 68EC000000              push 000000EC
:0042E6D9 6850D24A00              push 004AD250
:0042E6DE E88D150400              call 0046FC70
:0042E6E3 5D                      pop ebp
:0042E6E4 C3                      ret


:0042E6E5 55                      push ebp
:0042E6E6 8BEC                    mov ebp, esp
:0042E6E8 E807000000              call 0042E6F4
:0042E6ED E81F000000              call 0042E711
:0042E6F2 5D                      pop ebp
:0042E6F3 C3                      ret



* Referenced by a CALL at Address:
|:0042E6E8   
|
:0042E6F4 55                      push ebp
:0042E6F5 8BEC                    mov ebp, esp
:0042E6F7 6800EA4200              push 0042EA00
:0042E6FC 6810EA4200              push 0042EA10
:0042E701 6A41                    push 00000041
:0042E703 6A31                    push 00000031
:0042E705 68001D4B00              push 004B1D00
:0042E70A E8C1140400              call 0046FBD0
:0042E70F 5D                      pop ebp
:0042E710 C3                      ret



* Referenced by a CALL at Address:
|:0042E6ED   
|
:0042E711 55                      push ebp
:0042E712 8BEC                    mov ebp, esp
:0042E714 6823E74200              push 0042E723
:0042E719 E8920D0400              call 0046F4B0
:0042E71E 83C404                  add esp, 00000004
:0042E721 5D                      pop ebp
:0042E722 C3                      ret


:0042E723 55                      push ebp
:0042E724 8BEC                    mov ebp, esp
:0042E726 6800EA4200              push 0042EA00
:0042E72B 6A41                    push 00000041
:0042E72D 6A31                    push 00000031
:0042E72F 68001D4B00              push 004B1D00
:0042E734 E837150400              call 0046FC70
:0042E739 5D                      pop ebp
:0042E73A C3                      ret


:0042E73B 55                      push ebp
:0042E73C 8BEC                    mov ebp, esp
:0042E73E E802000000              call 0042E745
:0042E743 5D                      pop ebp
:0042E744 C3                      ret



* Referenced by a CALL at Address:
|:0042E73E   
|
:0042E745 55                      push ebp
:0042E746 8BEC                    mov ebp, esp
:0042E748 B9C0174B00              mov ecx, 004B17C0
:0042E74D E8BEF6FFFF              call 0042DE10
:0042E752 5D                      pop ebp
:0042E753 C3                      ret


:0042E754 55                      push ebp
:0042E755 8BEC                    mov ebp, esp
:0042E757 E802000000              call 0042E75E
:0042E75C 5D                      pop ebp
:0042E75D C3                      ret



* Referenced by a CALL at Address:
|:0042E757   
|
:0042E75E 55                      push ebp
:0042E75F 8BEC                    mov ebp, esp
:0042E761 B9187D4A00              mov ecx, 004A7D18
:0042E766 E8A5F6FFFF              call 0042DE10
:0042E76B 5D                      pop ebp
:0042E76C C3                      ret


:0042E76D 55                      push ebp
:0042E76E 8BEC                    mov ebp, esp
:0042E770 E802000000              call 0042E777
:0042E775 5D                      pop ebp
:0042E776 C3                      ret



* Referenced by a CALL at Address:
|:0042E770   
|
:0042E777 55                      push ebp
:0042E778 8BEC                    mov ebp, esp
:0042E77A B9881C4B00              mov ecx, 004B1C88
:0042E77F E88CF6FFFF              call 0042DE10
:0042E784 5D                      pop ebp
:0042E785 C3                      ret


:0042E786 55                      push ebp
:0042E787 8BEC                    mov ebp, esp
:0042E789 E802000000              call 0042E790
:0042E78E 5D                      pop ebp
:0042E78F C3                      ret



* Referenced by a CALL at Address:
|:0042E789   
|
:0042E790 55                      push ebp
:0042E791 8BEC                    mov ebp, esp
:0042E793 B9007D4A00              mov ecx, 004A7D00
:0042E798 E873F6FFFF              call 0042DE10
:0042E79D 5D                      pop ebp
:0042E79E C3                      ret


:0042E79F 55                      push ebp
:0042E7A0 8BEC                    mov ebp, esp
:0042E7A2 E802000000              call 0042E7A9
:0042E7A7 5D                      pop ebp
:0042E7A8 C3                      ret



* Referenced by a CALL at Address:
|:0042E7A2   
|
:0042E7A9 55                      push ebp
:0042E7AA 8BEC                    mov ebp, esp
:0042E7AC B9E81C4B00              mov ecx, 004B1CE8
:0042E7B1 E85AF6FFFF              call 0042DE10
:0042E7B6 5D                      pop ebp
:0042E7B7 C3                      ret


:0042E7B8 55                      push ebp
:0042E7B9 8BEC                    mov ebp, esp
:0042E7BB E802000000              call 0042E7C2
:0042E7C0 5D                      pop ebp
:0042E7C1 C3                      ret



* Referenced by a CALL at Address:
|:0042E7BB   
|
:0042E7C2 55                      push ebp
:0042E7C3 8BEC                    mov ebp, esp
:0042E7C5 B9F0174B00              mov ecx, 004B17F0
:0042E7CA E841F6FFFF              call 0042DE10
:0042E7CF 5D                      pop ebp
:0042E7D0 C3                      ret


:0042E7D1 55                      push ebp
:0042E7D2 8BEC                    mov ebp, esp
:0042E7D4 E802000000              call 0042E7DB
:0042E7D9 5D                      pop ebp
:0042E7DA C3                      ret



* Referenced by a CALL at Address:
|:0042E7D4   
|
:0042E7DB 55                      push ebp
:0042E7DC 8BEC                    mov ebp, esp
:0042E7DE B9D01C4B00              mov ecx, 004B1CD0
:0042E7E3 E828F6FFFF              call 0042DE10
:0042E7E8 5D                      pop ebp
:0042E7E9 C3                      ret


:0042E7EA 55                      push ebp
:0042E7EB 8BEC                    mov ebp, esp
:0042E7ED E802000000              call 0042E7F4
:0042E7F2 5D                      pop ebp
:0042E7F3 C3                      ret



* Referenced by a CALL at Address:
|:0042E7ED   
|
:0042E7F4 55                      push ebp
:0042E7F5 8BEC                    mov ebp, esp
:0042E7F7 B9A01C4B00              mov ecx, 004B1CA0
:0042E7FC E80FF6FFFF              call 0042DE10
:0042E801 5D                      pop ebp
:0042E802 C3                      ret


:0042E803 55                      push ebp
:0042E804 8BEC                    mov ebp, esp
:0042E806 E802000000              call 0042E80D
:0042E80B 5D                      pop ebp
:0042E80C C3                      ret



* Referenced by a CALL at Address:
|:0042E806   
|
:0042E80D 55                      push ebp
:0042E80E 8BEC                    mov ebp, esp
:0042E810 B9B81C4B00              mov ecx, 004B1CB8
:0042E815 E8F6F5FFFF              call 0042DE10
:0042E81A 5D                      pop ebp
:0042E81B C3                      ret


:0042E81C 55                      push ebp
:0042E81D 8BEC                    mov ebp, esp
:0042E81F E802000000              call 0042E826
:0042E824 5D                      pop ebp
:0042E825 C3                      ret



* Referenced by a CALL at Address:
|:0042E81F   
|
:0042E826 55                      push ebp
:0042E827 8BEC                    mov ebp, esp
:0042E829 B998474900              mov ecx, 00494798
:0042E82E E8DDF5FFFF              call 0042DE10
:0042E833 5D                      pop ebp
:0042E834 C3                      ret


:0042E835 55                      push ebp
:0042E836 8BEC                    mov ebp, esp
:0042E838 E807000000              call 0042E844
:0042E83D E811000000              call 0042E853
:0042E842 5D                      pop ebp
:0042E843 C3                      ret



* Referenced by a CALL at Address:
|:0042E838   
|
:0042E844 55                      push ebp
:0042E845 8BEC                    mov ebp, esp
:0042E847 B940C74A00              mov ecx, 004AC740
:0042E84C E8EF6DFDFF              call 00405640
:0042E851 5D                      pop ebp
:0042E852 C3                      ret



* Referenced by a CALL at Address:
|:0042E83D   
|
:0042E853 55                      push ebp
:0042E854 8BEC                    mov ebp, esp
:0042E856 6865E84200              push 0042E865
:0042E85B E8500C0400              call 0046F4B0
:0042E860 83C404                  add esp, 00000004
:0042E863 5D                      pop ebp
:0042E864 C3                      ret


:0042E865 55                      push ebp
:0042E866 8BEC                    mov ebp, esp
:0042E868 B940C74A00              mov ecx, 004AC740
:0042E86D E8EE6DFDFF              call 00405660
:0042E872 5D                      pop ebp
:0042E873 C3                      ret


:0042E874 55                      push ebp
:0042E875 8BEC                    mov ebp, esp
:0042E877 E807000000              call 0042E883
:0042E87C E811000000              call 0042E892
:0042E881 5D                      pop ebp
:0042E882 C3                      ret



* Referenced by a CALL at Address:
|:0042E877   
|
:0042E883 55                      push ebp
:0042E884 8BEC                    mov ebp, esp
:0042E886 B948D14A00              mov ecx, 004AD148
:0042E88B E8B06DFDFF              call 00405640
:0042E890 5D                      pop ebp
:0042E891 C3                      ret



* Referenced by a CALL at Address:
|:0042E87C   
|
:0042E892 55                      push ebp
:0042E893 8BEC                    mov ebp, esp
:0042E895 68A4E84200              push 0042E8A4
:0042E89A E8110C0400              call 0046F4B0
:0042E89F 83C404                  add esp, 00000004
:0042E8A2 5D                      pop ebp
:0042E8A3 C3                      ret


:0042E8A4 55                      push ebp
:0042E8A5 8BEC                    mov ebp, esp
:0042E8A7 B948D14A00              mov ecx, 004AD148
:0042E8AC E8AF6DFDFF              call 00405660
:0042E8B1 5D                      pop ebp
:0042E8B2 C3                      ret


:0042E8B3 55                      push ebp
:0042E8B4 8BEC                    mov ebp, esp
:0042E8B6 E807000000              call 0042E8C2
:0042E8BB E811000000              call 0042E8D1
:0042E8C0 5D                      pop ebp
:0042E8C1 C3                      ret



* Referenced by a CALL at Address:
|:0042E8B6   
|
:0042E8C2 55                      push ebp
:0042E8C3 8BEC                    mov ebp, esp
:0042E8C5 B9D4174B00              mov ecx, 004B17D4
:0042E8CA E8D16EFDFF              call 004057A0
:0042E8CF 5D                      pop ebp
:0042E8D0 C3                      ret



* Referenced by a CALL at Address:
|:0042E8BB   
|
:0042E8D1 55                      push ebp
:0042E8D2 8BEC                    mov ebp, esp
:0042E8D4 68E3E84200              push 0042E8E3
:0042E8D9 E8D20B0400              call 0046F4B0
:0042E8DE 83C404                  add esp, 00000004
:0042E8E1 5D                      pop ebp
:0042E8E2 C3                      ret


:0042E8E3 55                      push ebp
:0042E8E4 8BEC                    mov ebp, esp
:0042E8E6 B9D4174B00              mov ecx, 004B17D4
:0042E8EB E8B9EFFDFF              call 0040D8A9
:0042E8F0 5D                      pop ebp
:0042E8F1 C3                      ret


:0042E8F2 CC                      int 03
:0042E8F3 CC                      int 03
:0042E8F4 CC                      int 03
:0042E8F5 CC                      int 03
:0042E8F6 CC                      int 03
:0042E8F7 CC                      int 03
:0042E8F8 CC                      int 03
:0042E8F9 CC                      int 03
:0042E8FA CC                      int 03
:0042E8FB CC                      int 03
:0042E8FC CC                      int 03
:0042E8FD CC                      int 03
:0042E8FE CC                      int 03
:0042E8FF CC                      int 03
:0042E900 55                      push ebp
:0042E901 8BEC                    mov ebp, esp
:0042E903 51                      push ecx
:0042E904 894DFC                  mov dword ptr [ebp-04], ecx
:0042E907 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E90A E8E16DFDFF              call 004056F0
:0042E90F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E912 83C102                  add ecx, 00000002
:0042E915 E8D66DFDFF              call 004056F0
:0042E91A 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E91D C64005FF                mov [eax+05], FF
:0042E921 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E924 C6410700                mov [ecx+07], 00
:0042E928 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E92B C6420900                mov [edx+09], 00
:0042E92F 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E932 8BE5                    mov esp, ebp
:0042E934 5D                      pop ebp
:0042E935 C3                      ret


:0042E936 CC                      int 03
:0042E937 CC                      int 03
:0042E938 CC                      int 03
:0042E939 CC                      int 03
:0042E93A CC                      int 03
:0042E93B CC                      int 03
:0042E93C CC                      int 03
:0042E93D CC                      int 03
:0042E93E CC                      int 03
:0042E93F CC                      int 03

* Referenced by a CALL at Address:
|:0042E605   
|
:0042E940 55                      push ebp
:0042E941 8BEC                    mov ebp, esp
:0042E943 51                      push ecx
:0042E944 894DFC                  mov dword ptr [ebp-04], ecx
:0042E947 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E94A C6400801                mov [eax+08], 01
:0042E94E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E951 C701E8030000            mov dword ptr [ecx], 000003E8
:0042E957 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E95A C6421402                mov [edx+14], 02
:0042E95E 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E961 C6401004                mov [eax+10], 04
:0042E965 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E968 66C7410A10F1            mov [ecx+0A], F110
:0042E96E 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E971 66C7420C0100            mov [edx+0C], 0001
:0042E977 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E97A C6400EFF                mov [eax+0E], FF
:0042E97E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E981 C6411200                mov [ecx+12], 00
:0042E985 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E988 C6421100                mov [edx+11], 00
:0042E98C 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E98F C6401300                mov [eax+13], 00
:0042E993 6A10                    push 00000010
:0042E995 68FF000000              push 000000FF
:0042E99A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E99D 83C116                  add ecx, 00000016
:0042E9A0 51                      push ecx
:0042E9A1 E82A110400              call 0046FAD0
:0042E9A6 83C40C                  add esp, 0000000C
:0042E9A9 6800010000              push 00000100
:0042E9AE 68FF000000              push 000000FF
:0042E9B3 8B55FC                  mov edx, dword ptr [ebp-04]
:0042E9B6 83C226                  add edx, 00000026
:0042E9B9 52                      push edx
:0042E9BA E811110400              call 0046FAD0
:0042E9BF 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0042E9C2 6A08                    push 00000008
:0042E9C4 68FF000000              push 000000FF
:0042E9C9 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E9CC 0526010000              add eax, 00000126
:0042E9D1 50                      push eax
:0042E9D2 E8F9100400              call 0046FAD0
:0042E9D7 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042E9DA 6A04                    push 00000004
:0042E9DC 6A00                    push 00000000
:0042E9DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042E9E1 83C104                  add ecx, 00000004
:0042E9E4 51                      push ecx
:0042E9E5 E8E6100400              call 0046FAD0
:0042E9EA 83C40C                  add esp, 0000000C
:0042E9ED 8B45FC                  mov eax, dword ptr [ebp-04]
:0042E9F0 8BE5                    mov esp, ebp
:0042E9F2 5D                      pop ebp
:0042E9F3 C3                      ret


:0042E9F4 CC                      int 03
:0042E9F5 CC                      int 03
:0042E9F6 CC                      int 03
:0042E9F7 CC                      int 03
:0042E9F8 CC                      int 03
:0042E9F9 CC                      int 03
:0042E9FA CC                      int 03
:0042E9FB CC                      int 03
:0042E9FC CC                      int 03
:0042E9FD CC                      int 03
:0042E9FE CC                      int 03
:0042E9FF CC                      int 03

* Referenced by a CALL at Addresses:
|:004054CA   , :0040C83F   , :0040D0D9   , :0040D0F4   , :00412498   
|:0042E626   , :00430FB5   , :00442058   , :004449B8   , :00449E04   
|:0045AC1A   , :0045AD08   , :0045C188   , :00461678   , :00466648   
|:00466687   , :00479546   , :004795A3   , :0047980F   , :00479A73   
|
:0042EA00 55                      push ebp
:0042EA01 8BEC                    mov ebp, esp
:0042EA03 51                      push ecx
:0042EA04 894DFC                  mov dword ptr [ebp-04], ecx
:0042EA07 8BE5                    mov esp, ebp
:0042EA09 5D                      pop ebp
:0042EA0A C3                      ret


:0042EA0B CC                      int 03
:0042EA0C CC                      int 03
:0042EA0D CC                      int 03
:0042EA0E CC                      int 03
:0042EA0F CC                      int 03
:0042EA10 55                      push ebp
:0042EA11 8BEC                    mov ebp, esp
:0042EA13 51                      push ecx
:0042EA14 894DFC                  mov dword ptr [ebp-04], ecx
:0042EA17 8B45FC                  mov eax, dword ptr [ebp-04]
:0042EA1A C60000                  mov byte ptr [eax], 00
:0042EA1D 8B45FC                  mov eax, dword ptr [ebp-04]
:0042EA20 8BE5                    mov esp, ebp
:0042EA22 5D                      pop ebp
:0042EA23 C3                      ret


:0042EA24 CC                      int 03
:0042EA25 CC                      int 03
:0042EA26 CC                      int 03
:0042EA27 CC                      int 03
:0042EA28 CC                      int 03
:0042EA29 CC                      int 03
:0042EA2A CC                      int 03
:0042EA2B CC                      int 03
:0042EA2C CC                      int 03
:0042EA2D CC                      int 03
:0042EA2E CC                      int 03
:0042EA2F CC                      int 03

* Referenced by a CALL at Address:
|:0042F492   
|
:0042EA30 55                      push ebp
:0042EA31 8BEC                    mov ebp, esp
:0042EA33 6AFF                    push FFFFFFFF
:0042EA35 68D5974700              push 004797D5
:0042EA3A 64A100000000            mov eax, dword ptr fs:[00000000]
:0042EA40 50                      push eax
:0042EA41 64892500000000          mov dword ptr fs:[00000000], esp
:0042EA48 81EC0C010000            sub esp, 0000010C
:0042EA4E 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:0042EA54 E8E76BFDFF              call 00405640
:0042EA59 C745FC00000000          mov [ebp-04], 00000000
:0042EA60 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042EA63 E8386DFDFF              call 004057A0
:0042EA68 C645FC01                mov [ebp-04], 01
:0042EA6C 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"MARK.E3"
                                  |
:0042EA6E 68A0D44700              push 0047D4A0
:0042EA73 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042EA76 E841EEFDFF              call 0040D8BC
:0042EA7B 8945EC                  mov dword ptr [ebp-14], eax
:0042EA7E 6800400000              push 00004000
:0042EA83 B9A01C4B00              mov ecx, 004B1CA0
:0042EA88 E83314FEFF              call 0040FEC0
:0042EA8D 50                      push eax
:0042EA8E 6A00                    push 00000000
:0042EA90 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042EA93 E84CF0FDFF              call 0040DAE4
:0042EA98 8945EC                  mov dword ptr [ebp-14], eax
:0042EA9B 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042EA9E E882F1FDFF              call 0040DC25

* Possible StringData Ref from Data Obj ->"SEFF.E3"
                                  |
:0042EAA3 6840D54700              push 0047D540
:0042EAA8 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:0042EAAE E82227FEFF              call 004111D5
:0042EAB3 B9007D4A00              mov ecx, 004A7D00
:0042EAB8 E80314FEFF              call 0040FEC0
:0042EABD 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0042EABE 6A05                    push 00000005
:0042EAC0 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:0042EAC6 E85E28FEFF              call 00411329
:0042EACB 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:0042EAD1 E84FF1FDFF              call 0040DC25
:0042EAD6 68001B0000              push 00001B00

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EADB 6A04                    push 00000004
:0042EADD 6A00                    push 00000000
:0042EADF 6800400000              push 00004000
:0042EAE4 B9A01C4B00              mov ecx, 004B1CA0
:0042EAE9 E8A2A40400              call 00478F90
:0042EAEE 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042EAEF 6A04                    push 00000004
:0042EAF1 6A00                    push 00000000
:0042EAF3 6A00                    push 00000000
:0042EAF5 B9007D4A00              mov ecx, 004A7D00
:0042EAFA E891A40400              call 00478F90
:0042EAFF 50                      push eax
:0042EB00 E8BB9A0400              call 004785C0
:0042EB05 83C40C                  add esp, 0000000C
:0042EB08 C645FC00                mov [ebp-04], 00
:0042EB0C 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042EB0F E895EDFDFF              call 0040D8A9
:0042EB14 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042EB1B 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:0042EB21 E83A6BFDFF              call 00405660
:0042EB26 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042EB29 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042EB30 8BE5                    mov esp, ebp
:0042EB32 5D                      pop ebp
:0042EB33 C3                      ret



* Referenced by a CALL at Address:
|:0042EB8C   
|
:0042EB34 55                      push ebp
:0042EB35 8BEC                    mov ebp, esp
:0042EB37 B9C0174B00              mov ecx, 004B17C0
:0042EB3C E89FA30400              call 00478EE0
:0042EB41 B9187D4A00              mov ecx, 004A7D18
:0042EB46 E895A30400              call 00478EE0
:0042EB4B B9881C4B00              mov ecx, 004B1C88
:0042EB50 E88BA30400              call 00478EE0
:0042EB55 5D                      pop ebp
:0042EB56 C3                      ret



* Referenced by a CALL at Addresses:
|:0042EBF0   , :0042EEF4   
|
:0042EB57 55                      push ebp
:0042EB58 8BEC                    mov ebp, esp
:0042EB5A B9B81C4B00              mov ecx, 004B1CB8
:0042EB5F E87CA30400              call 00478EE0
:0042EB64 B998474900              mov ecx, 00494798
:0042EB69 E872A30400              call 00478EE0
:0042EB6E B9F0174B00              mov ecx, 004B17F0
:0042EB73 E868A30400              call 00478EE0
:0042EB78 B9D01C4B00              mov ecx, 004B1CD0
:0042EB7D E85EA30400              call 00478EE0
:0042EB82 B9A01C4B00              mov ecx, 004B1CA0
:0042EB87 E854A30400              call 00478EE0
:0042EB8C E8A3FFFFFF              call 0042EB34
:0042EB91 B9007D4A00              mov ecx, 004A7D00
:0042EB96 E845A30400              call 00478EE0
:0042EB9B B9E81C4B00              mov ecx, 004B1CE8
:0042EBA0 E83BA30400              call 00478EE0
:0042EBA5 5D                      pop ebp
:0042EBA6 C3                      ret



* Referenced by a CALL at Addresses:
|:0042EC22   , :0042EC44   , :0042EC66   , :0042EC8D   , :0042ECAF   
|:0042ECD1   , :0042ECF3   , :0042ED15   , :0042ED37   , :0042ED59   
|:004588BA   , :004588DD   
|
:0042EBA7 55                      push ebp
:0042EBA8 8BEC                    mov ebp, esp
:0042EBAA 6A00                    push 00000000
:0042EBAC 6A00                    push 00000000
:0042EBAE B9306D4800              mov ecx, 00486D30
:0042EBB3 E85373FDFF              call 00405F0B
:0042EBB8 6A10                    push 00000010
:0042EBBA B9306D4800              mov ecx, 00486D30
:0042EBBF E8F473FDFF              call 00405FB8
:0042EBC4 6A00                    push 00000000
:0042EBC6 B9306D4800              mov ecx, 00486D30
:0042EBCB E82074FDFF              call 00405FF0
:0042EBD0 8B4508                  mov eax, dword ptr [ebp+08]
:0042EBD3 50                      push eax

* Possible StringData Ref from Data Obj ->"O餣(%s)
ӹCݭn16M RAM
ЭsҰWin"
                                        ->"dows95"
                                  |
:0042EBD4 6888DA4700              push 0047DA88
:0042EBD9 68306D4800              push 00486D30
:0042EBDE E8F57FFDFF              call 00406BD8
:0042EBE3 83C40C                  add esp, 0000000C
:0042EBE6 E81A0B0000              call 0042F705
:0042EBEB E8F715FEFF              call 004101E7
:0042EBF0 E862FFFFFF              call 0042EB57
:0042EBF5 6A01                    push 00000001
:0042EBF7 6A00                    push 00000000
:0042EBF9 B95CBC4B00              mov ecx, 004BBC5C
:0042EBFE E80DA50400              call 00479110
:0042EC03 5D                      pop ebp
:0042EC04 C3                      ret



* Referenced by a CALL at Address:
|:0042ED61   
|
:0042EC05 55                      push ebp
:0042EC06 8BEC                    mov ebp, esp
:0042EC08 6A01                    push 00000001
:0042EC0A 6800804300              push 00438000
:0042EC0F B9C0174B00              mov ecx, 004B17C0
:0042EC14 E877A20400              call 00478E90
:0042EC19 85C0                    test eax, eax
:0042EC1B 750D                    jne 0042EC2A

* Possible StringData Ref from Data Obj ->"N"
                                  |
:0042EC1D 68C0DA4700              push 0047DAC0
:0042EC22 E880FFFFFF              call 0042EBA7
:0042EC27 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EC1B(C)
|
:0042EC2A 6A01                    push 00000001
:0042EC2C 6800A41F00              push 001FA400
:0042EC31 B9187D4A00              mov ecx, 004A7D18
:0042EC36 E855A20400              call 00478E90
:0042EC3B 85C0                    test eax, eax
:0042EC3D 750D                    jne 0042EC4C

* Possible StringData Ref from Data Obj ->"B"
                                  |
:0042EC3F 68C4DA4700              push 0047DAC4
:0042EC44 E85EFFFFFF              call 0042EBA7
:0042EC49 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EC3D(C)
|
:0042EC4C 6A01                    push 00000001
:0042EC4E 6800900100              push 00019000
:0042EC53 B9881C4B00              mov ecx, 004B1C88
:0042EC58 E833A20400              call 00478E90
:0042EC5D 85C0                    test eax, eax
:0042EC5F 750D                    jne 0042EC6E

* Possible StringData Ref from Data Obj ->"D"
                                  |
:0042EC61 68C8DA4700              push 0047DAC8
:0042EC66 E83CFFFFFF              call 0042EBA7
:0042EC6B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EC5F(C)
|
:0042EC6E 5D                      pop ebp
:0042EC6F C3                      ret



* Referenced by a CALL at Address:
|:0042F46F   
|
:0042EC70 55                      push ebp
:0042EC71 8BEC                    mov ebp, esp
:0042EC73 6A01                    push 00000001
:0042EC75 6800220100              push 00012200
:0042EC7A B9B81C4B00              mov ecx, 004B1CB8
:0042EC7F E80CA20400              call 00478E90
:0042EC84 85C0                    test eax, eax
:0042EC86 750D                    jne 0042EC95

* Possible StringData Ref from Data Obj ->"SmollMap"
                                  |
:0042EC88 68CCDA4700              push 0047DACC
:0042EC8D E815FFFFFF              call 0042EBA7
:0042EC92 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EC86(C)
|
:0042EC95 6A01                    push 00000001
:0042EC97 6800310000              push 00003100
:0042EC9C B998474900              mov ecx, 00494798
:0042ECA1 E8EAA10400              call 00478E90
:0042ECA6 85C0                    test eax, eax
:0042ECA8 750D                    jne 0042ECB7

* Possible StringData Ref from Data Obj ->"SoldierFace"
                                  |
:0042ECAA 68D8DA4700              push 0047DAD8
:0042ECAF E8F3FEFFFF              call 0042EBA7
:0042ECB4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ECA8(C)
|
:0042ECB7 6A01                    push 00000001
:0042ECB9 68004C0400              push 00044C00
:0042ECBE B9007D4A00              mov ecx, 004A7D00
:0042ECC3 E8C8A10400              call 00478E90
:0042ECC8 85C0                    test eax, eax
:0042ECCA 750D                    jne 0042ECD9

* Possible StringData Ref from Data Obj ->"E"
                                  |
:0042ECCC 68E4DA4700              push 0047DAE4
:0042ECD1 E8D1FEFFFF              call 0042EBA7
:0042ECD6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ECCA(C)
|
:0042ECD9 6A01                    push 00000001
:0042ECDB 6880070000              push 00000780
:0042ECE0 B9E81C4B00              mov ecx, 004B1CE8
:0042ECE5 E8A6A10400              call 00478E90
:0042ECEA 85C0                    test eax, eax
:0042ECEC 750D                    jne 0042ECFB

* Possible StringData Ref from Data Obj ->"F"
                                  |
:0042ECEE 68E8DA4700              push 0047DAE8
:0042ECF3 E8AFFEFFFF              call 0042EBA7
:0042ECF8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ECEC(C)
|
:0042ECFB 6A01                    push 00000001
:0042ECFD 68004C0400              push 00044C00
:0042ED02 B9F0174B00              mov ecx, 004B17F0
:0042ED07 E884A10400              call 00478E90
:0042ED0C 85C0                    test eax, eax
:0042ED0E 750D                    jne 0042ED1D

* Possible StringData Ref from Data Obj ->"C"
                                  |
:0042ED10 68ECDA4700              push 0047DAEC
:0042ED15 E88DFEFFFF              call 0042EBA7
:0042ED1A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ED0E(C)
|
:0042ED1D 6A01                    push 00000001
:0042ED1F 6800C80000              push 0000C800
:0042ED24 B9A01C4B00              mov ecx, 004B1CA0
:0042ED29 E862A10400              call 00478E90
:0042ED2E 85C0                    test eax, eax
:0042ED30 750D                    jne 0042ED3F

* Possible StringData Ref from Data Obj ->"G"
                                  |
:0042ED32 68F0DA4700              push 0047DAF0
:0042ED37 E86BFEFFFF              call 0042EBA7
:0042ED3C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ED30(C)
|
:0042ED3F 6A01                    push 00000001
:0042ED41 6800500000              push 00005000
:0042ED46 B9D01C4B00              mov ecx, 004B1CD0
:0042ED4B E840A10400              call 00478E90
:0042ED50 85C0                    test eax, eax
:0042ED52 750D                    jne 0042ED61

* Possible StringData Ref from Data Obj ->"H"
                                  |
:0042ED54 68F4DA4700              push 0047DAF4
:0042ED59 E849FEFFFF              call 0042EBA7
:0042ED5E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042ED52(C)
|
:0042ED61 E89FFEFFFF              call 0042EC05
:0042ED66 5D                      pop ebp
:0042ED67 C3                      ret



* Referenced by a CALL at Address:
|:0042F4B5   
|
:0042ED68 55                      push ebp
:0042ED69 8BEC                    mov ebp, esp

* Possible StringData Ref from Data Obj ->"MMAP.E3"
                                  |
:0042ED6B 6870D44700              push 0047D470
:0042ED70 B948D14A00              mov ecx, 004AD148
:0042ED75 E85B24FEFF              call 004111D5

* Possible StringData Ref from Data Obj ->"KAO.E3"
                                  |
:0042ED7A 68A8D44700              push 0047D4A8
:0042ED7F B940C74A00              mov ecx, 004AC740
:0042ED84 E84C24FEFF              call 004111D5
:0042ED89 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"IMSG.E3"
                                  |
:0042ED8B 6808D54700              push 0047D508
:0042ED90 B9D4174B00              mov ecx, 004B17D4
:0042ED95 E822EBFDFF              call 0040D8BC
:0042ED9A 5D                      pop ebp
:0042ED9B C3                      ret


:0042ED9C 55                      push ebp
:0042ED9D 8BEC                    mov ebp, esp
:0042ED9F B948D14A00              mov ecx, 004AD148
:0042EDA4 E87CEEFDFF              call 0040DC25
:0042EDA9 B940C74A00              mov ecx, 004AC740
:0042EDAE E872EEFDFF              call 0040DC25
:0042EDB3 B9D4174B00              mov ecx, 004B17D4
:0042EDB8 E868EEFDFF              call 0040DC25
:0042EDBD 5D                      pop ebp
:0042EDBE C3                      ret



* Referenced by a CALL at Address:
|:0042EED7   
|
:0042EDBF 55                      push ebp
:0042EDC0 8BEC                    mov ebp, esp
:0042EDC2 6AFF                    push FFFFFFFF
:0042EDC4 68E8974700              push 004797E8
:0042EDC9 64A100000000            mov eax, dword ptr fs:[00000000]
:0042EDCF 50                      push eax
:0042EDD0 64892500000000          mov dword ptr fs:[00000000], esp
:0042EDD7 51                      push ecx
:0042EDD8 E80AEC0300              call 0046D9E7
:0042EDDD B900554B00              mov ecx, 004B5500
:0042EDE2 E8D2A60300              call 004694B9
:0042EDE7 E804090000              call 0042F6F0
:0042EDEC 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042EDEF E8AC69FDFF              call 004057A0
:0042EDF4 C745FC00000000          mov [ebp-04], 00000000
:0042EDFB 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"MARK.E3"
                                  |
:0042EDFD 68A0D44700              push 0047D4A0
:0042EE02 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042EE05 E8B2EAFDFF              call 0040D8BC
:0042EE0A 6800E80300              push 0003E800
:0042EE0F B9007D4A00              mov ecx, 004A7D00
:0042EE14 E8A710FEFF              call 0040FEC0
:0042EE19 50                      push eax
:0042EE1A 6800400000              push 00004000
:0042EE1F 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042EE22 E8BDECFDFF              call 0040DAE4
:0042EE27 E8AB12FEFF              call 004100D7
:0042EE2C 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042EE2F E8F1EDFDFF              call 0040DC25
:0042EE34 E8FA12FEFF              call 00410133
:0042EE39 6A00                    push 00000000
:0042EE3B E8CF670400              call 0047560F
:0042EE40 83C404                  add esp, 00000004
:0042EE43 E89F13FEFF              call 004101E7
:0042EE48 B9007D4A00              mov ecx, 004A7D00
:0042EE4D E86E10FEFF              call 0040FEC0
:0042EE52 50                      push eax
:0042EE53 68C0000000              push 000000C0
:0042EE58 6800010000              push 00000100
:0042EE5D 6A7C                    push 0000007C
:0042EE5F 68C0000000              push 000000C0
:0042EE64 E88B7C0400              call 00476AF4
:0042EE69 83C414                  add esp, 00000014
:0042EE6C E8DD12FEFF              call 0041014E
:0042EE71 E8AE12FEFF              call 00410124

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042EE76 6A03                    push 00000003
:0042EE78 E8B3070000              call 0042F630
:0042EE7D 83C404                  add esp, 00000004
:0042EE80 E8EC11FEFF              call 00410071
:0042EE85 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0042EE8C 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0042EE8F E815EAFDFF              call 0040D8A9
:0042EE94 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042EE97 64890D00000000          mov dword ptr fs:[00000000], ecx
:0042EE9E 8BE5                    mov esp, ebp
:0042EEA0 5D                      pop ebp
:0042EEA1 C3                      ret



* Referenced by a CALL at Addresses:
|:0042EF4F   , :0042F08B   , :0042F41B   , :0046EB67   , :0046EBA5   
|
:0042EEA2 55                      push ebp
:0042EEA3 8BEC                    mov ebp, esp
:0042EEA5 E83DEB0300              call 0046D9E7
:0042EEAA 6A00                    push 00000000
:0042EEAC E88AB70300              call 0046A63B
:0042EEB1 83C404                  add esp, 00000004
:0042EEB4 E899850300              call 00467452
:0042EEB9 B900554B00              mov ecx, 004B5500
:0042EEBE E8F6A50300              call 004694B9
:0042EEC3 B900554B00              mov ecx, 004B5500
:0042EEC8 E812A40300              call 004692DF
:0042EECD B9F8544B00              mov ecx, 004B54F8
:0042EED2 E81BA60300              call 004694F2
:0042EED7 E8E3FEFFFF              call 0042EDBF
:0042EEDC E8F611FEFF              call 004100D7
:0042EEE1 E80113FEFF              call 004101E7
:0042EEE6 A1B0554B00              mov eax, dword ptr [004B55B0]
:0042EEEB 50                      push eax
:0042EEEC E8B81FFEFF              call 00410EA9
:0042EEF1 83C404                  add esp, 00000004
:0042EEF4 E85EFCFFFF              call 0042EB57
:0042EEF9 6A01                    push 00000001
:0042EEFB 6A00                    push 00000000
:0042EEFD B95CBC4B00              mov ecx, 004BBC5C
:0042EF02 E809A20400              call 00479110
:0042EF07 5D                      pop ebp
:0042EF08 C3                      ret



* Referenced by a CALL at Addresses:
|:0040B7F8   , :0042F1AE   
|
:0042EF09 55                      push ebp
:0042EF0A 8BEC                    mov ebp, esp
:0042EF0C B9F8544B00              mov ecx, 004B54F8
:0042EF11 E8DCA50300              call 004694F2
:0042EF16 B900554B00              mov ecx, 004B5500
:0042EF1B E899A50300              call 004694B9
:0042EF20 E8CB070000              call 0042F6F0
:0042EF25 E8AD11FEFF              call 004100D7
:0042EF2A E8B812FEFF              call 004101E7
:0042EF2F 837D0800                cmp dword ptr [ebp+08], 00000000
:0042EF33 741A                    je 0042EF4F
:0042EF35 6A00                    push 00000000
:0042EF37 6A00                    push 00000000
:0042EF39 6A00                    push 00000000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0042EF3B 6A07                    push 00000007
:0042EF3D E8BC1FFEFF              call 00410EFE
:0042EF42 83C410                  add esp, 00000010
:0042EF45 6A01                    push 00000001
:0042EF47 E8E4060000              call 0042F630
:0042EF4C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EF33(C)
|
:0042EF4F E84EFFFFFF              call 0042EEA2
:0042EF54 5D                      pop ebp
:0042EF55 C3                      ret



* Referenced by a CALL at Address:
|:0042F4C9   
|
:0042EF56 55                      push ebp
:0042EF57 8BEC                    mov ebp, esp
:0042EF59 B978294B00              mov ecx, 004B2978
:0042EF5E E84DD9FDFF              call 0040C8B0
:0042EF63 2500020000              and eax, 00000200
:0042EF68 85C0                    test eax, eax
:0042EF6A 7402                    je 0042EF6E
:0042EF6C EB1A                    jmp 0042EF88

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EF6A(C)
|
:0042EF6E 6A00                    push 00000000
:0042EF70 E8C6B60300              call 0046A63B
:0042EF75 83C404                  add esp, 00000004
:0042EF78 6A00                    push 00000000
:0042EF7A 6A01                    push 00000001
:0042EF7C 6A00                    push 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042EF7E 6A06                    push 00000006
:0042EF80 E8791FFEFF              call 00410EFE
:0042EF85 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EF6C(U)
|
:0042EF88 5D                      pop ebp
:0042EF89 C3                      ret



* Referenced by a CALL at Addresses:
|:0040E7A2   , :0040ECA2   , :0040EEE9   , :0040EFB6   , :004118A7   
|:00411A0A   , :00411EC2   , :00411FF7   , :0041F04A   , :0042F256   
|:0042F4AD   , :0042F83E   , :0042F8FE   , :0042F91C   , :004306A7   
|:004309DA   , :00431683   , :00431A2A   , :0044D2D4   , :0044D304   
|:0044D593   , :0044E1B9   , :0044E4AD   , :0044E4F3   , :0044E52D   
|:0045D783   , :0045DE24   , :0045DF4F   , :0045DF6F   , :0045E032   
|:0045E190   , :0045EE39   , :0045F06A   
|
:0042EF8A 55                      push ebp
:0042EF8B 8BEC                    mov ebp, esp
:0042EF8D 83EC1C                  sub esp, 0000001C
:0042EF90 E8C1840400              call 00477456

* Reference To: USER32.GetActiveWindow, Ord:00D5h
                                  |
:0042EF95 FF1588D64B00            Call dword ptr [004BD688]
:0042EF9B 8945FC                  mov dword ptr [ebp-04], eax
:0042EF9E B928B44800              mov ecx, 0048B428
:0042EFA3 E8BEA8FEFF              call 00419866
:0042EFA8 8945F8                  mov dword ptr [ebp-08], eax
:0042EFAB B928B44800              mov ecx, 0048B428
:0042EFB0 E8C2A8FEFF              call 00419877
:0042EFB5 8945F4                  mov dword ptr [ebp-0C], eax
:0042EFB8 8D45E4                  lea eax, dword ptr [ebp-1C]
:0042EFBB 50                      push eax
:0042EFBC 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0042EFC2 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0042EFC3 FF15D8D64B00            Call dword ptr [004BD6D8]
:0042EFC9 8B55FC                  mov edx, dword ptr [ebp-04]
:0042EFCC 3B15B0554B00            cmp edx, dword ptr [004B55B0]
:0042EFD2 0F85AC000000            jne 0042F084
:0042EFD8 E865F90300              call 0046E942
:0042EFDD 85C0                    test eax, eax
:0042EFDF 7421                    je 0042F002
:0042EFE1 6A17                    push 00000017
:0042EFE3 A1B0554B00              mov eax, dword ptr [004B55B0]
:0042EFE8 50                      push eax
:0042EFE9 B928B44800              mov ecx, 0048B428
:0042EFEE E898B0FEFF              call 0041A08B
:0042EFF3 B928B44800              mov ecx, 0048B428
:0042EFF8 E8CFB0FEFF              call 0041A0CC
:0042EFFD E982000000              jmp 0042F084

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042EFDF(C)
|
:0042F002 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F005 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:0042F008 7E7A                    jle 0042F084
:0042F00A 8B55F8                  mov edx, dword ptr [ebp-08]
:0042F00D 3B55EC                  cmp edx, dword ptr [ebp-14]
:0042F010 7D72                    jge 0042F084
:0042F012 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042F015 3B45E8                  cmp eax, dword ptr [ebp-18]
:0042F018 7E6A                    jle 0042F084
:0042F01A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042F01D 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:0042F020 7D62                    jge 0042F084
:0042F022 837DF428                cmp dword ptr [ebp-0C], 00000028
:0042F026 7E31                    jle 0042F059
:0042F028 8B55F8                  mov edx, dword ptr [ebp-08]
:0042F02B 3B55EC                  cmp edx, dword ptr [ebp-14]
:0042F02E 7D29                    jge 0042F059
:0042F030 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042F033 3B45F0                  cmp eax, dword ptr [ebp-10]
:0042F036 7D21                    jge 0042F059
:0042F038 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042F03B 51                      push ecx
:0042F03C 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0042F042 52                      push edx
:0042F043 B928B44800              mov ecx, 0048B428
:0042F048 E83EB0FEFF              call 0041A08B
:0042F04D B928B44800              mov ecx, 0048B428
:0042F052 E875B0FEFF              call 0041A0CC
:0042F057 EB2B                    jmp 0042F084

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F026(C), :0042F02E(C), :0042F036(C)
|
:0042F059 837DF428                cmp dword ptr [ebp-0C], 00000028
:0042F05D 7F25                    jg 0042F084
:0042F05F 8B45F8                  mov eax, dword ptr [ebp-08]
:0042F062 3B45EC                  cmp eax, dword ptr [ebp-14]
:0042F065 7D1D                    jge 0042F084
:0042F067 6A01                    push 00000001
:0042F069 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0042F06F 51                      push ecx
:0042F070 B928B44800              mov ecx, 0048B428
:0042F075 E811B0FEFF              call 0041A08B
:0042F07A B928B44800              mov ecx, 0048B428
:0042F07F E848B0FEFF              call 0041A0CC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042EFD2(C), :0042EFFD(U), :0042F008(C), :0042F010(C), :0042F018(C)
|:0042F020(C), :0042F057(U), :0042F05D(C), :0042F065(C)
|
:0042F084 8BE5                    mov esp, ebp
:0042F086 5D                      pop ebp
:0042F087 C3                      ret



* Referenced by a CALL at Addresses:
|:0040FC7F   , :004699D9   
|
:0042F088 55                      push ebp
:0042F089 8BEC                    mov ebp, esp
:0042F08B E812FEFFFF              call 0042EEA2
:0042F090 5D                      pop ebp
:0042F091 C3                      ret



* Referenced by a CALL at Address:
|:0042F0D1   
|
:0042F092 55                      push ebp
:0042F093 8BEC                    mov ebp, esp
:0042F095 686B080000              push 0000086B
:0042F09A E83AB50300              call 0046A5D9
:0042F09F 83C404                  add esp, 00000004
:0042F0A2 6A01                    push 00000001
:0042F0A4 6A00                    push 00000000
:0042F0A6 E8B50EFEFF              call 0040FF60
:0042F0AB 83C408                  add esp, 00000008
:0042F0AE B9806D4800              mov ecx, 00486D80
:0042F0B3 E860C8FDFF              call 0040B918
:0042F0B8 B9806D4800              mov ecx, 00486D80
:0042F0BD E870C8FDFF              call 0040B932
:0042F0C2 5D                      pop ebp
:0042F0C3 C3                      ret



* Referenced by a CALL at Address:
|:0042F416   
|
:0042F0C4 55                      push ebp
:0042F0C5 8BEC                    mov ebp, esp
:0042F0C7 83EC08                  sub esp, 00000008
:0042F0CA C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F21A(U)
|
:0042F0D1 E8BCFFFFFF              call 0042F092
:0042F0D6 E877830300              call 00467452
:0042F0DB B9806D4800              mov ecx, 00486D80
:0042F0E0 E825E0FDFF              call 0040D10A
:0042F0E5 E8E109FEFF              call 0040FACB
:0042F0EA 8945FC                  mov dword ptr [ebp-04], eax
:0042F0ED C7053CC74A0000000000    mov dword ptr [004AC73C], 00000000
:0042F0F7 817DFCFFFF0000          cmp dword ptr [ebp-04], 0000FFFF
:0042F0FE 0F841B010000            je 0042F21F
:0042F104 B9806D4800              mov ecx, 00486D80
:0042F109 E8E6CEFDFF              call 0040BFF4
:0042F10E A1B0554B00              mov eax, dword ptr [004B55B0]
:0042F113 50                      push eax

* Reference To: USER32.SetActiveWindow, Ord:01E2h
                                  |
:0042F114 FF1568D64B00            Call dword ptr [004BD668]
:0042F11A 837DFC00                cmp dword ptr [ebp-04], 00000000
:0042F11E 752A                    jne 0042F14A
:0042F120 B9806D4800              mov ecx, 00486D80
:0042F125 E8E0DFFDFF              call 0040D10A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F148(U)
|
:0042F12A 68FF000000              push 000000FF
:0042F12F 6A00                    push 00000000
:0042F131 E8F226FEFF              call 00411828
:0042F136 83C408                  add esp, 00000008
:0042F139 8B0D3CC74A00            mov ecx, dword ptr [004AC73C]
:0042F13F 83E102                  and ecx, 00000002
:0042F142 85C9                    test ecx, ecx
:0042F144 7402                    je 0042F148
:0042F146 EB02                    jmp 0042F14A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F144(C)
|
:0042F148 EBE0                    jmp 0042F12A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F11E(C), :0042F146(U), :0042F18F(U)
|
:0042F14A E8D4000000              call 0042F223
:0042F14F 8945F8                  mov dword ptr [ebp-08], eax
:0042F152 C745FCFF000000          mov [ebp-04], 000000FF
:0042F159 8B55F8                  mov edx, dword ptr [ebp-08]
:0042F15C 83E244                  and edx, 00000044
:0042F15F 85D2                    test edx, edx
:0042F161 7402                    je 0042F165
:0042F163 EB2C                    jmp 0042F191

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F161(C)
|
:0042F165 8B45F8                  mov eax, dword ptr [ebp-08]
:0042F168 83E020                  and eax, 00000020
:0042F16B 85C0                    test eax, eax
:0042F16D 7402                    je 0042F171
:0042F16F EB20                    jmp 0042F191

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F16D(C)
|
:0042F171 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F174 83E108                  and ecx, 00000008
:0042F177 85C9                    test ecx, ecx
:0042F179 7414                    je 0042F18F
:0042F17B B9806D4800              mov ecx, 00486D80
:0042F180 E86FCEFDFF              call 0040BFF4
:0042F185 B978544B00              mov ecx, 004B5478
:0042F18A E8E18F0300              call 00468170

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F179(C)
|
:0042F18F EBB9                    jmp 0042F14A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F163(U), :0042F16F(U)
|
:0042F191 6AFF                    push FFFFFFFF
:0042F193 E841B40300              call 0046A5D9
:0042F198 83C404                  add esp, 00000004
:0042F19B 8B55F8                  mov edx, dword ptr [ebp-08]
:0042F19E 83E204                  and edx, 00000004
:0042F1A1 85D2                    test edx, edx
:0042F1A3 7413                    je 0042F1B8
:0042F1A5 C745FC00000000          mov [ebp-04], 00000000
:0042F1AC 6A01                    push 00000001
:0042F1AE E856FDFFFF              call 0042EF09
:0042F1B3 83C404                  add esp, 00000004
:0042F1B6 EB67                    jmp 0042F21F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F1A3(C)
|
:0042F1B8 8B45F8                  mov eax, dword ptr [ebp-08]
:0042F1BB 83E060                  and eax, 00000060
:0042F1BE 85C0                    test eax, eax
:0042F1C0 745D                    je 0042F21F

* Possible StringData Ref from Data Obj ->"A@ܡH"
                                  |
:0042F1C2 68F8DA4700              push 0047DAF8

* Possible Reference to String Resource ID=00006: ""
                                  |
:0042F1C7 6A06                    push 00000006
:0042F1C9 E865220000              call 00431433
:0042F1CE 83C408                  add esp, 00000008
:0042F1D1 85C0                    test eax, eax
:0042F1D3 744A                    je 0042F21F
:0042F1D5 6A00                    push 00000000
:0042F1D7 B978294B00              mov ecx, 004B2978
:0042F1DC E81F030000              call 0042F500
:0042F1E1 6A00                    push 00000000
:0042F1E3 B978294B00              mov ecx, 004B2978
:0042F1E8 E8F3020000              call 0042F4E0
:0042F1ED B900554B00              mov ecx, 004B5500
:0042F1F2 E8C2A20300              call 004694B9
:0042F1F7 E8DB0EFEFF              call 004100D7
:0042F1FC E8E60FFEFF              call 004101E7
:0042F201 E8E1E70300              call 0046D9E7
:0042F206 6A01                    push 00000001
:0042F208 E81B070000              call 0042F928
:0042F20D 83C404                  add esp, 00000004
:0042F210 6A00                    push 00000000
:0042F212 E824B40300              call 0046A63B
:0042F217 83C404                  add esp, 00000004
:0042F21A E9B2FEFFFF              jmp 0042F0D1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F0FE(C), :0042F1B6(U), :0042F1C0(C), :0042F1D3(C)
|
:0042F21F 8BE5                    mov esp, ebp
:0042F221 5D                      pop ebp
:0042F222 C3                      ret



* Referenced by a CALL at Address:
|:0042F14A   
|
:0042F223 55                      push ebp
:0042F224 8BEC                    mov ebp, esp
:0042F226 83EC7C                  sub esp, 0000007C
:0042F229 C74590D8174B00          mov [ebp-70], 004B17D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F3DA(U)
|
:0042F230 B978544B00              mov ecx, 004B5478
:0042F235 E8E6020000              call 0042F520
:0042F23A 8B4D90                  mov ecx, dword ptr [ebp-70]
:0042F23D E8FE0BFEFF              call 0040FE40
:0042F242 25FF000000              and eax, 000000FF
:0042F247 83E00F                  and eax, 0000000F
:0042F24A 884594                  mov byte ptr [ebp-6C], al
:0042F24D C7458C00000000          mov [ebp-74], 00000000
:0042F254 6A00                    push 00000000
:0042F256 E82FFDFFFF              call 0042EF8A
:0042F25B 83C404                  add esp, 00000004
:0042F25E 8B4D90                  mov ecx, dword ptr [ebp-70]
:0042F261 E8DA0BFEFF              call 0040FE40
:0042F266 884594                  mov byte ptr [ebp-6C], al
:0042F269 6A00                    push 00000000
:0042F26B E8CBB30300              call 0046A63B
:0042F270 83C404                  add esp, 00000004

* Possible StringData Ref from Data Obj ->"                 "
                                  |
:0042F273 6808DB4700              push 0047DB08
:0042F278 8D4598                  lea eax, dword ptr [ebp-68]
:0042F27B 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0042F27C FF1504D74B00            Call dword ptr [004BD704]
:0042F282 83C408                  add esp, 00000008
:0042F285 8D4D98                  lea ecx, dword ptr [ebp-68]
:0042F288 51                      push ecx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:0042F289 68FA030000              push 000003FA
:0042F28E 8B156C624B00            mov edx, dword ptr [004B626C]
:0042F294 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0042F295 FF1510D64B00            Call dword ptr [004BD610]
:0042F29B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0042F29C FF1514D64B00            Call dword ptr [004BD614]
:0042F2A2 8B4594                  mov eax, dword ptr [ebp-6C]
:0042F2A5 25FF000000              and eax, 000000FF
:0042F2AA 83E00F                  and eax, 0000000F
:0042F2AD 894588                  mov dword ptr [ebp-78], eax
:0042F2B0 837D8803                cmp dword ptr [ebp-78], 00000003
:0042F2B4 0F8714010000            ja 0042F3CE
:0042F2BA 8B4D88                  mov ecx, dword ptr [ebp-78]
:0042F2BD FF248DE6F34200          jmp dword ptr [4*ecx+0042F3E6]
:0042F2C4 680C080000              push 0000080C
:0042F2C9 E80BB30300              call 0046A5D9
:0042F2CE 83C404                  add esp, 00000004
:0042F2D1 E806FEFEFF              call 0041F0DC
:0042F2D6 25FFFF0000              and eax, 0000FFFF
:0042F2DB 89458C                  mov dword ptr [ebp-74], eax
:0042F2DE E9EB000000              jmp 0042F3CE
:0042F2E3 6816080000              push 00000816
:0042F2E8 E8ECB20300              call 0046A5D9
:0042F2ED 83C404                  add esp, 00000004
:0042F2F0 E8262FFEFF              call 0041221B
:0042F2F5 89458C                  mov dword ptr [ebp-74], eax
:0042F2F8 E9D1000000              jmp 0042F3CE
:0042F2FD 686B080000              push 0000086B
:0042F302 E8D2B20300              call 0046A5D9
:0042F307 83C404                  add esp, 00000004
:0042F30A E84428FEFF              call 00411B53
:0042F30F 89458C                  mov dword ptr [ebp-74], eax
:0042F312 E9B7000000              jmp 0042F3CE
:0042F317 C7053CC74A0000000000    mov dword ptr [004AC73C], 00000000
:0042F321 6884080000              push 00000884
:0042F326 E8AEB20300              call 0046A5D9
:0042F32B 83C404                  add esp, 00000004
:0042F32E C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F3C9(U)
|
:0042F335 6A01                    push 00000001
:0042F337 E864900400              call 004783A0
:0042F33C 83C404                  add esp, 00000004
:0042F33F B9784E4B00              mov ecx, 004B4E78
:0042F344 E88DFA0200              call 0045EDD6
:0042F349 25FF000000              and eax, 000000FF
:0042F34E 894584                  mov dword ptr [ebp-7C], eax
:0042F351 8B5584                  mov edx, dword ptr [ebp-7C]
:0042F354 83EA01                  sub edx, 00000001
:0042F357 895584                  mov dword ptr [ebp-7C], edx
:0042F35A 837D8404                cmp dword ptr [ebp-7C], 00000004
:0042F35E 7744                    ja 0042F3A4
:0042F360 8B4584                  mov eax, dword ptr [ebp-7C]
:0042F363 FF2485F6F34200          jmp dword ptr [4*eax+0042F3F6]
:0042F36A 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0042F36D 83C920                  or ecx, 00000020
:0042F370 894D8C                  mov dword ptr [ebp-74], ecx
:0042F373 EB39                    jmp 0042F3AE
:0042F375 C745FC01000000          mov [ebp-04], 00000001
:0042F37C 6A00                    push 00000000
:0042F37E B9784E4B00              mov ecx, 004B4E78
:0042F383 E8780BFEFF              call 0040FF00
:0042F388 EB24                    jmp 0042F3AE
:0042F38A 8B558C                  mov edx, dword ptr [ebp-74]
:0042F38D 83CA40                  or edx, 00000040
:0042F390 89558C                  mov dword ptr [ebp-74], edx
:0042F393 EB19                    jmp 0042F3AE
:0042F395 E84DE60300              call 0046D9E7
:0042F39A 8B458C                  mov eax, dword ptr [ebp-74]
:0042F39D 0C08                    or al, 08
:0042F39F 89458C                  mov dword ptr [ebp-74], eax
:0042F3A2 EB0A                    jmp 0042F3AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F35E(C)
|
:0042F3A4 6A00                    push 00000000
:0042F3A6 E890B20300              call 0046A63B
:0042F3AB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F373(U), :0042F388(U), :0042F393(U), :0042F3A2(U)
|
:0042F3AE 837DFC01                cmp dword ptr [ebp-04], 00000001
:0042F3B2 7509                    jne 0042F3BD
:0042F3B4 C745FC00000000          mov [ebp-04], 00000000
:0042F3BB EB0C                    jmp 0042F3C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F3B2(C)
|
:0042F3BD B9806D4800              mov ecx, 00486D80
:0042F3C2 E86BC5FDFF              call 0040B932
:0042F3C7 EB05                    jmp 0042F3CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F3BB(U)
|
:0042F3C9 E967FFFFFF              jmp 0042F335

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F2B4(C), :0042F2DE(U), :0042F2F8(U), :0042F312(U), :0042F3C7(U)
|
:0042F3CE 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0042F3D1 83E16C                  and ecx, 0000006C
:0042F3D4 85C9                    test ecx, ecx
:0042F3D6 7402                    je 0042F3DA
:0042F3D8 EB05                    jmp 0042F3DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F3D6(C)
|
:0042F3DA E951FEFFFF              jmp 0042F230

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F3D8(U)
|
:0042F3DF 8B458C                  mov eax, dword ptr [ebp-74]
:0042F3E2 8BE5                    mov esp, ebp
:0042F3E4 5D                      pop ebp
:0042F3E5 C3                      ret



:0042F3E6 E3F24200                DWORD 0042F2E3
:0042F3EA FDF24200                DWORD 0042F2FD
:0042F3EE C4F24200                DWORD 0042F2C4
:0042F3F2 17F34200                DWORD 0042F317
:0042F3F6 75F34200                DWORD 0042F375
:0042F3FA A4F34200                DWORD 0042F3A4
:0042F3FE 6AF34200                DWORD 0042F36A
:0042F402 8AF34200                DWORD 0042F38A
:0042F406 95F34200                DWORD 0042F395



* Referenced by a CALL at Address:
|:0046A5A7   
|
:0042F40A 55                      push ebp
:0042F40B 8BEC                    mov ebp, esp
:0042F40D E810000000              call 0042F422
:0042F412 85C0                    test eax, eax
:0042F414 7405                    je 0042F41B
:0042F416 E8A9FCFFFF              call 0042F0C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F414(C)
|
:0042F41B E882FAFFFF              call 0042EEA2
:0042F420 5D                      pop ebp
:0042F421 C3                      ret



* Referenced by a CALL at Address:
|:0042F40D   
|
:0042F422 55                      push ebp
:0042F423 8BEC                    mov ebp, esp
:0042F425 51                      push ecx
:0042F426 6A00                    push 00000000
:0042F428 E80EB20300              call 0046A63B
:0042F42D 83C404                  add esp, 00000004
:0042F430 C745FCD8174B00          mov [ebp-04], 004B17D8
:0042F437 6A00                    push 00000000
:0042F439 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F43C E8EF2EFEFF              call 00412330
:0042F441 6A01                    push 00000001
:0042F443 A1981E4800              mov eax, dword ptr [00481E98]
:0042F448 83E828                  sub eax, 00000028
:0042F44B 50                      push eax
:0042F44C 8B0D941E4800            mov ecx, dword ptr [00481E94]
:0042F452 51                      push ecx
:0042F453 E8BC810400              call 00477614
:0042F458 83C40C                  add esp, 0000000C
:0042F45B E887E50300              call 0046D9E7
:0042F460 B95CBC4B00              mov ecx, 004BBC5C
:0042F465 E8869B0400              call 00478FF0
:0042F46A E8FD040000              call 0042F96C
:0042F46F E8FCF7FFFF              call 0042EC70
:0042F474 6A01                    push 00000001
:0042F476 6A00                    push 00000000
:0042F478 E8E30AFEFF              call 0040FF60
:0042F47D 83C408                  add esp, 00000008
:0042F480 B900554B00              mov ecx, 004B5500
:0042F485 E8F79D0300              call 00469281
:0042F48A 85C0                    test eax, eax
:0042F48C 7504                    jne 0042F492
:0042F48E 33C0                    xor eax, eax
:0042F490 EB41                    jmp 0042F4D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F48C(C)
|
:0042F492 E899F5FFFF              call 0042EA30
:0042F497 B928B44800              mov ecx, 0048B428
:0042F49C E8E7A3FEFF              call 00419888
:0042F4A1 6A01                    push 00000001
:0042F4A3 E880040000              call 0042F928
:0042F4A8 83C404                  add esp, 00000004
:0042F4AB 6A00                    push 00000000
:0042F4AD E8D8FAFFFF              call 0042EF8A
:0042F4B2 83C404                  add esp, 00000004
:0042F4B5 E8AEF8FFFF              call 0042ED68
:0042F4BA 6A00                    push 00000000
:0042F4BC E8DF8E0400              call 004783A0
:0042F4C1 83C404                  add esp, 00000004
:0042F4C4 E81DB10300              call 0046A5E6
:0042F4C9 E888FAFFFF              call 0042EF56
:0042F4CE B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F490(U)
|
:0042F4D3 8BE5                    mov esp, ebp
:0042F4D5 5D                      pop ebp
:0042F4D6 C3                      ret


:0042F4D7 CC                      int 03
:0042F4D8 CC                      int 03
:0042F4D9 CC                      int 03
:0042F4DA CC                      int 03
:0042F4DB CC                      int 03
:0042F4DC CC                      int 03
:0042F4DD CC                      int 03
:0042F4DE CC                      int 03
:0042F4DF CC                      int 03

* Referenced by a CALL at Addresses:
|:0042F1E8   , :0045CA29   
|
:0042F4E0 55                      push ebp
:0042F4E1 8BEC                    mov ebp, esp
:0042F4E3 51                      push ecx
:0042F4E4 894DFC                  mov dword ptr [ebp-04], ecx
:0042F4E7 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F4EA 8A4D08                  mov cl, byte ptr [ebp+08]
:0042F4ED 884811                  mov byte ptr [eax+11], cl
:0042F4F0 8BE5                    mov esp, ebp
:0042F4F2 5D                      pop ebp
:0042F4F3 C20400                  ret 0004


:0042F4F6 CC                      int 03
:0042F4F7 CC                      int 03
:0042F4F8 CC                      int 03
:0042F4F9 CC                      int 03
:0042F4FA CC                      int 03
:0042F4FB CC                      int 03
:0042F4FC CC                      int 03
:0042F4FD CC                      int 03
:0042F4FE CC                      int 03
:0042F4FF CC                      int 03

* Referenced by a CALL at Address:
|:0042F1DC   
|
:0042F500 55                      push ebp
:0042F501 8BEC                    mov ebp, esp
:0042F503 51                      push ecx
:0042F504 894DFC                  mov dword ptr [ebp-04], ecx
:0042F507 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F50A 8A4D08                  mov cl, byte ptr [ebp+08]
:0042F50D 884813                  mov byte ptr [eax+13], cl
:0042F510 8BE5                    mov esp, ebp
:0042F512 5D                      pop ebp
:0042F513 C20400                  ret 0004


:0042F516 CC                      int 03
:0042F517 CC                      int 03
:0042F518 CC                      int 03
:0042F519 CC                      int 03
:0042F51A CC                      int 03
:0042F51B CC                      int 03
:0042F51C CC                      int 03
:0042F51D CC                      int 03
:0042F51E CC                      int 03
:0042F51F CC                      int 03

* Referenced by a CALL at Address:
|:0042F235   
|
:0042F520 55                      push ebp
:0042F521 8BEC                    mov ebp, esp
:0042F523 51                      push ecx
:0042F524 894DFC                  mov dword ptr [ebp-04], ecx
:0042F527 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F52A C6407800                mov [eax+78], 00
:0042F52E 8BE5                    mov esp, ebp
:0042F530 5D                      pop ebp
:0042F531 C3                      ret


:0042F532 CC                      int 03
:0042F533 CC                      int 03
:0042F534 CC                      int 03
:0042F535 CC                      int 03
:0042F536 CC                      int 03
:0042F537 CC                      int 03
:0042F538 CC                      int 03
:0042F539 CC                      int 03
:0042F53A CC                      int 03
:0042F53B CC                      int 03
:0042F53C CC                      int 03
:0042F53D CC                      int 03
:0042F53E CC                      int 03
:0042F53F CC                      int 03
:0042F540 55                      push ebp
:0042F541 8BEC                    mov ebp, esp
:0042F543 E802000000              call 0042F54A
:0042F548 5D                      pop ebp
:0042F549 C3                      ret



* Referenced by a CALL at Address:
|:0042F543   
|
:0042F54A 55                      push ebp
:0042F54B 8BEC                    mov ebp, esp
:0042F54D 5D                      pop ebp
:0042F54E C3                      ret



* Referenced by a CALL at Address:
|:0041F91E   
|
:0042F54F 55                      push ebp
:0042F550 8BEC                    mov ebp, esp
:0042F552 51                      push ecx
:0042F553 894DFC                  mov dword ptr [ebp-04], ecx
:0042F556 E8CE7F0400              call 00477529
:0042F55B 034508                  add eax, dword ptr [ebp+08]
:0042F55E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F561 8901                    mov dword ptr [ecx], eax
:0042F563 8BE5                    mov esp, ebp
:0042F565 5D                      pop ebp
:0042F566 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0041F93A   
|
:0042F569 55                      push ebp
:0042F56A 8BEC                    mov ebp, esp
:0042F56C 83EC08                  sub esp, 00000008
:0042F56F 894DFC                  mov dword ptr [ebp-04], ecx
:0042F572 E8B27F0400              call 00477529
:0042F577 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F57A 3B01                    cmp eax, dword ptr [ecx]
:0042F57C 7D0A                    jge 0042F588
:0042F57E E8A67F0400              call 00477529
:0042F583 8945F8                  mov dword ptr [ebp-08], eax
:0042F586 EB08                    jmp 0042F590

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F57C(C)
|
:0042F588 8B55FC                  mov edx, dword ptr [ebp-04]
:0042F58B 8B02                    mov eax, dword ptr [edx]
:0042F58D 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F586(U)
|
:0042F590 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F593 8B01                    mov eax, dword ptr [ecx]
:0042F595 2B45F8                  sub eax, dword ptr [ebp-08]
:0042F598 8BE5                    mov esp, ebp
:0042F59A 5D                      pop ebp
:0042F59B C3                      ret


:0042F59C 55                      push ebp
:0042F59D 8BEC                    mov ebp, esp
:0042F59F E8857F0400              call 00477529
:0042F5A4 A3AC3B4B00              mov dword ptr [004B3BAC], eax
:0042F5A9 5D                      pop ebp
:0042F5AA C3                      ret


:0042F5AB 55                      push ebp
:0042F5AC 8BEC                    mov ebp, esp
:0042F5AE E8767F0400              call 00477529
:0042F5B3 2B05AC3B4B00            sub eax, dword ptr [004B3BAC]
:0042F5B9 5D                      pop ebp
:0042F5BA C3                      ret



* Referenced by a CALL at Addresses:
|:0042031C   , :004223E4   , :00423A79   , :00424F97   , :00426167   
|:00428921   , :00428B09   , :00428C5B   , :00428E81   , :0042A5D3   
|:0042A79B   , :0042A859   , :0042A8AB   , :0042AC58   , :0042AD53   
|:0042B33A   , :0042BD50   , :0042BDCE   , :0042C13D   , :0042C4F2   
|:0042C74E   , :0042C96D   , :0042F621   , :0042F763   , :0042F84D   
|:0042F908   , :004425F1   , :00444605   , :0044CF0E   , :0044CF49   
|:0044CFB3   , :0044D021   , :0044E4C1   , :0044E517   , :004565D2   
|:00456629   , :00456646   , :0045669D   , :0045E1A4   , :0045E1FF   
|:00460220   , :00468EDE   
|
:0042F5BB 55                      push ebp
:0042F5BC 8BEC                    mov ebp, esp
:0042F5BE 8B4508                  mov eax, dword ptr [ebp+08]
:0042F5C1 D1E0                    shl eax, 1
:0042F5C3 50                      push eax
:0042F5C4 B9A83B4B00              mov ecx, 004B3BA8
:0042F5C9 E84203FFFF              call 0041F910
:0042F5CE 5D                      pop ebp
:0042F5CF C3                      ret



* Referenced by a CALL at Addresses:
|:00420324   , :00422490   , :00423A9B   , :00424F9F   , :0042616F   
|:004289E4   , :00428BCF   , :00428CF0   , :00428E89   , :0042A5E7   
|:0042A7AF   , :0042A86D   , :0042A8BF   , :0042AC70   , :0042AD69   
|:0042B34E   , :0042BD68   , :0042BDE5   , :0042C151   , :0042C506   
|:0042C762   , :0042C981   , :0042F629   , :0042F807   , :00432C48   
|:00433940   , :00433983   , :00436168   , :004364D1   , :00436823   
|:0043729C   , :004372DB   , :00437FB0   , :00438088   , :0043837E   
|:004383BE   , :004385B9   , :004385F9   , :0043D11F   , :0043D15E   
|:0043EFEB   , :0043F041   , :00441C18   , :00441C5B   , :004424E1   
|:00442649   , :00442ABC   , :00442BC5   , :00443C42   , :00443CB8   
|:00444655   , :0044838B   , :00448807   , :00448977   , :00448CA6   
|:00448E52   , :00448FA8   , :004490FF   , :0044927C   , :004495FE   
|:004496A4   , :00449902   , :0044A03B   , :0044A096   , :0044D77A   
|:00468EE6   
|
:0042F5D0 55                      push ebp
:0042F5D1 8BEC                    mov ebp, esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F5E6(U)
|
:0042F5D3 B9A83B4B00              mov ecx, 004B3BA8
:0042F5D8 E85303FFFF              call 0041F930
:0042F5DD 85C0                    test eax, eax
:0042F5DF 7507                    jne 0042F5E8
:0042F5E1 E8707E0400              call 00477456
:0042F5E6 EBEB                    jmp 0042F5D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F5DF(C)
|
:0042F5E8 5D                      pop ebp
:0042F5E9 C3                      ret


:0042F5EA 55                      push ebp
:0042F5EB 8BEC                    mov ebp, esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F60E(U)
|
:0042F5ED B9A83B4B00              mov ecx, 004B3BA8
:0042F5F2 E83903FFFF              call 0041F930
:0042F5F7 85C0                    test eax, eax
:0042F5F9 7515                    jne 0042F610
:0042F5FB B928B44800              mov ecx, 0048B428
:0042F600 E848A2FEFF              call 0041984D
:0042F605 85C0                    test eax, eax
:0042F607 7507                    jne 0042F610
:0042F609 E8487E0400              call 00477456
:0042F60E EBDD                    jmp 0042F5ED

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F5F9(C), :0042F607(C)
|
:0042F610 5D                      pop ebp
:0042F611 C3                      ret



* Referenced by a CALL at Addresses:
|:0040B907   , :0042F6E0   , :0046978F   
|
:0042F612 55                      push ebp
:0042F613 8BEC                    mov ebp, esp
:0042F615 837D0800                cmp dword ptr [ebp+08], 00000000
:0042F619 7502                    jne 0042F61D
:0042F61B EB11                    jmp 0042F62E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F619(C)
|
:0042F61D 8B4508                  mov eax, dword ptr [ebp+08]
:0042F620 50                      push eax
:0042F621 E895FFFFFF              call 0042F5BB
:0042F626 83C404                  add esp, 00000004
:0042F629 E8A2FFFFFF              call 0042F5D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F61B(U)
|
:0042F62E 5D                      pop ebp
:0042F62F C3                      ret



* Referenced by a CALL at Addresses:
|:00406173   , :0042EE78   , :0042EF47   , :0043141D   , :004318E0   
|:004318EA   , :00441D63   
|
:0042F630 55                      push ebp
:0042F631 8BEC                    mov ebp, esp
:0042F633 8B4508                  mov eax, dword ptr [ebp+08]
:0042F636 6BC00A                  imul eax, 0000000A
:0042F639 6BC003                  imul eax, 00000003
:0042F63C 50                      push eax
:0042F63D E8F4000000              call 0042F736
:0042F642 83C404                  add esp, 00000004
:0042F645 5D                      pop ebp
:0042F646 C3                      ret



* Referenced by a CALL at Addresses:
|:00410BE1   , :0042F73C   , :0042FE2C   , :0043044A   , :00431472   
|:00431532   , :0043199C   , :00431BE5   , :0045CCF9   , :0045F063   
|:0045FDFE   
|
:0042F647 55                      push ebp
:0042F648 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042F64A 6A02                    push 00000002
:0042F64C E8367E0400              call 00477487
:0042F651 83C404                  add esp, 00000004
:0042F654 E8FD7D0400              call 00477456
:0042F659 5D                      pop ebp
:0042F65A C3                      ret



* Referenced by a CALL at Addresses:
|:0041EF4E   , :0042F6CB   , :0042F6F3   , :0042F715   , :0042F76B   
|:0042F855   , :0044E4C9   
|
:0042F65B 55                      push ebp
:0042F65C 8BEC                    mov ebp, esp
:0042F65E 51                      push ecx
:0042F65F E8F27D0400              call 00477456
:0042F664 B928B44800              mov ecx, 0048B428
:0042F669 E8DFA1FEFF              call 0041984D
:0042F66E 8945FC                  mov dword ptr [ebp-04], eax
:0042F671 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F674 83E801                  sub eax, 00000001
:0042F677 8945FC                  mov dword ptr [ebp-04], eax
:0042F67A 837DFC05                cmp dword ptr [ebp-04], 00000005
:0042F67E 7718                    ja 0042F698
:0042F680 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F683 FF248D9EF64200          jmp dword ptr [4*ecx+0042F69E]
:0042F68A B801000000              mov eax, 00000001
:0042F68F EB09                    jmp 0042F69A

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0042F691 B802000000              mov eax, 00000002
:0042F696 EB02                    jmp 0042F69A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F67E(C)
|
:0042F698 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F68F(U), :0042F696(U)
|
:0042F69A 8BE5                    mov esp, ebp
:0042F69C 5D                      pop ebp
:0042F69D C3                      ret



:0042F69E 8AF64200                DWORD 0042F68A
:0042F6A2 91F64200                DWORD 0042F691
:0042F6A6 98F64200                DWORD 0042F698
:0042F6AA 98F64200                DWORD 0042F698
:0042F6AE 8AF64200                DWORD 0042F68A
:0042F6B2 91F64200                DWORD 0042F691


:0042F6B6 55                      push ebp
:0042F6B7 8BEC                    mov ebp, esp
:0042F6B9 51                      push ecx
:0042F6BA EB09                    jmp 0042F6C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F6E8(U)
|
:0042F6BC 8B4508                  mov eax, dword ptr [ebp+08]
:0042F6BF 83E801                  sub eax, 00000001
:0042F6C2 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F6BA(U)
|
:0042F6C5 837D0800                cmp dword ptr [ebp+08], 00000000
:0042F6C9 741F                    je 0042F6EA
:0042F6CB E88BFFFFFF              call 0042F65B
:0042F6D0 8945FC                  mov dword ptr [ebp-04], eax
:0042F6D3 837DFC00                cmp dword ptr [ebp-04], 00000000
:0042F6D7 7405                    je 0042F6DE
:0042F6D9 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F6DC EB0E                    jmp 0042F6EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F6D7(C)
|
:0042F6DE 6A01                    push 00000001
:0042F6E0 E82DFFFFFF              call 0042F612
:0042F6E5 83C404                  add esp, 00000004
:0042F6E8 EBD2                    jmp 0042F6BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F6C9(C)
|
:0042F6EA 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F6DC(U)
|
:0042F6EC 8BE5                    mov esp, ebp
:0042F6EE 5D                      pop ebp
:0042F6EF C3                      ret



* Referenced by a CALL at Addresses:
|:0042EDE7   , :0042EF20   , :0042F710   , :0042F72A   , :0042F846   
|:0042F915   , :00430997   , :00430EDD   , :00430F3F   , :0043146D   
|:00431902   , :00431997   , :00431B81   , :00431BC2   , :00439B18   
|:00439E8A   , :0044CFAC   , :0044D06E   , :0044E461   , :0044E46E   
|:00456AE7   , :00456B03   , :004686C0   , :0046871A   , :00468885   
|:004688E3   , :00468EB3   
|
:0042F6F0 55                      push ebp
:0042F6F1 8BEC                    mov ebp, esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F701(U)
|
:0042F6F3 E863FFFFFF              call 0042F65B
:0042F6F8 85C0                    test eax, eax
:0042F6FA 7407                    je 0042F703
:0042F6FC E8557D0400              call 00477456
:0042F701 EBF0                    jmp 0042F6F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F6FA(C)
|
:0042F703 5D                      pop ebp
:0042F704 C3                      ret



* Referenced by a CALL at Addresses:
|:0041038C   , :004103AC   , :0042EBE6   
|
:0042F705 55                      push ebp
:0042F706 8BEC                    mov ebp, esp
:0042F708 51                      push ecx
:0042F709 C745FCFFFF0000          mov [ebp-04], 0000FFFF
:0042F710 E8DBFFFFFF              call 0042F6F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F728(U)
|
:0042F715 E841FFFFFF              call 0042F65B
:0042F71A 8945FC                  mov dword ptr [ebp-04], eax
:0042F71D 837DFC00                cmp dword ptr [ebp-04], 00000000
:0042F721 7507                    jne 0042F72A
:0042F723 E82E7D0400              call 00477456
:0042F728 EBEB                    jmp 0042F715

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F721(C)
|
:0042F72A E8C1FFFFFF              call 0042F6F0
:0042F72F 8B45FC                  mov eax, dword ptr [ebp-04]
:0042F732 8BE5                    mov esp, ebp
:0042F734 5D                      pop ebp
:0042F735 C3                      ret



* Referenced by a CALL at Addresses:
|:0042F63D   , :0043032C   , :00432C4F   , :00433947   , :0043398A   
|:004354D0   , :00435672   , :0043569A   , :004372A3   , :004372E2   
|:00437FB7   , :0043808F   , :00438385   , :004383C5   , :004385C0   
|:00438600   , :0043D126   , :0043D165   , :0043EFF2   , :0043F048   
|:00441C1F   , :00441C62   , :00442506   , :00442650   , :00443C49   
|:00443CBF   , :00448392   , :004483A1   , :0044880E   , :0044897E   
|:004489FB   , :00448CAD   , :00448E74   , :00448FCB   , :00449122   
|:00449274   , :00449605   , :004496AB   , :00449909   , :0045661F   
|:00456693   , :00458209   , :004582C7   
|
:0042F736 55                      push ebp
:0042F737 8BEC                    mov ebp, esp
:0042F739 83EC1C                  sub esp, 0000001C
:0042F73C E806FFFFFF              call 0042F647
:0042F741 E826020000              call 0042F96C
:0042F746 8B4508                  mov eax, dword ptr [ebp+08]
:0042F749 8945F4                  mov dword ptr [ebp-0C], eax
:0042F74C EB09                    jmp 0042F757

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F80C(U)
|
:0042F74E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042F751 83E901                  sub ecx, 00000001
:0042F754 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F74C(U)
|
:0042F757 837DF400                cmp dword ptr [ebp-0C], 00000000
:0042F75B 0F84B0000000            je 0042F811
:0042F761 6A01                    push 00000001
:0042F763 E853FEFFFF              call 0042F5BB
:0042F768 83C404                  add esp, 00000004
:0042F76B E8EBFEFFFF              call 0042F65B
:0042F770 85C0                    test eax, eax
:0042F772 7405                    je 0042F779
:0042F774 E998000000              jmp 0042F811

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F772(C)
|
:0042F779 E8D87C0400              call 00477456
:0042F77E B928B44800              mov ecx, 0048B428
:0042F783 E8DEA0FEFF              call 00419866
:0042F788 8945FC                  mov dword ptr [ebp-04], eax
:0042F78B B928B44800              mov ecx, 0048B428
:0042F790 E8E2A0FEFF              call 00419877
:0042F795 8945F8                  mov dword ptr [ebp-08], eax
:0042F798 8D55E4                  lea edx, dword ptr [ebp-1C]
:0042F79B 52                      push edx
:0042F79C A1B0554B00              mov eax, dword ptr [004B55B0]
:0042F7A1 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0042F7A2 FF15D8D64B00            Call dword ptr [004BD6D8]
:0042F7A8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F7AB 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:0042F7AE 7E57                    jle 0042F807
:0042F7B0 8B55FC                  mov edx, dword ptr [ebp-04]
:0042F7B3 3B55EC                  cmp edx, dword ptr [ebp-14]
:0042F7B6 7D4F                    jge 0042F807
:0042F7B8 8B45F8                  mov eax, dword ptr [ebp-08]
:0042F7BB 3B45E8                  cmp eax, dword ptr [ebp-18]
:0042F7BE 7E47                    jle 0042F807
:0042F7C0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F7C3 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:0042F7C6 7D3F                    jge 0042F807
:0042F7C8 837DF828                cmp dword ptr [ebp-08], 00000028
:0042F7CC 7F1C                    jg 0042F7EA
:0042F7CE 8B55FC                  mov edx, dword ptr [ebp-04]
:0042F7D1 3B55EC                  cmp edx, dword ptr [ebp-14]
:0042F7D4 7D14                    jge 0042F7EA
:0042F7D6 6A01                    push 00000001
:0042F7D8 A1B0554B00              mov eax, dword ptr [004B55B0]
:0042F7DD 50                      push eax
:0042F7DE B928B44800              mov ecx, 0048B428
:0042F7E3 E8A3A8FEFF              call 0041A08B
:0042F7E8 EB13                    jmp 0042F7FD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F7CC(C), :0042F7D4(C)
|
:0042F7EA 6A00                    push 00000000
:0042F7EC 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0042F7F2 51                      push ecx
:0042F7F3 B928B44800              mov ecx, 0048B428
:0042F7F8 E88EA8FEFF              call 0041A08B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F7E8(U)
|
:0042F7FD B928B44800              mov ecx, 0048B428
:0042F802 E8C5A8FEFF              call 0041A0CC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F7AE(C), :0042F7B6(C), :0042F7BE(C), :0042F7C6(C)
|
:0042F807 E8C4FDFFFF              call 0042F5D0
:0042F80C E93DFFFFFF              jmp 0042F74E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F75B(C), :0042F774(U)
|
:0042F811 8BE5                    mov esp, ebp
:0042F813 5D                      pop ebp
:0042F814 C3                      ret



* Referenced by a CALL at Addresses:
|:004302E1   , :004318D7   
|
:0042F815 55                      push ebp
:0042F816 8BEC                    mov ebp, esp
:0042F818 83EC1C                  sub esp, 0000001C
:0042F81B C645FC0A                mov [ebp-04], 0A
:0042F81F 6A00                    push 00000000
:0042F821 6A00                    push 00000000
:0042F823 6802020000              push 00000202
:0042F828 A1B0554B00              mov eax, dword ptr [004B55B0]
:0042F82D 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0042F82E FF1504D64B00            Call dword ptr [004BD604]
:0042F834 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042F837 81E1FF000000            and ecx, 000000FF
:0042F83D 51                      push ecx
:0042F83E E847F7FFFF              call 0042EF8A
:0042F843 83C404                  add esp, 00000004
:0042F846 E8A5FEFFFF              call 0042F6F0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042F84B 6A03                    push 00000003
:0042F84D E869FDFFFF              call 0042F5BB
:0042F852 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F910(U)
|
:0042F855 E801FEFFFF              call 0042F65B
:0042F85A 85C0                    test eax, eax
:0042F85C 0F85B3000000            jne 0042F915
:0042F862 E8EF7B0400              call 00477456
:0042F867 B928B44800              mov ecx, 0048B428
:0042F86C E8F59FFEFF              call 00419866
:0042F871 8945F8                  mov dword ptr [ebp-08], eax
:0042F874 B928B44800              mov ecx, 0048B428
:0042F879 E8F99FFEFF              call 00419877
:0042F87E 8945F4                  mov dword ptr [ebp-0C], eax
:0042F881 8D55E4                  lea edx, dword ptr [ebp-1C]
:0042F884 52                      push edx
:0042F885 A1B0554B00              mov eax, dword ptr [004B55B0]
:0042F88A 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0042F88B FF15D8D64B00            Call dword ptr [004BD6D8]
:0042F891 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0042F894 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:0042F897 7E77                    jle 0042F910
:0042F899 8B55F8                  mov edx, dword ptr [ebp-08]
:0042F89C 3B55EC                  cmp edx, dword ptr [ebp-14]
:0042F89F 7D6F                    jge 0042F910
:0042F8A1 8B45F4                  mov eax, dword ptr [ebp-0C]
:0042F8A4 3B45E8                  cmp eax, dword ptr [ebp-18]
:0042F8A7 7E67                    jle 0042F910
:0042F8A9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0042F8AC 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:0042F8AF 7D5F                    jge 0042F910
:0042F8B1 837DF428                cmp dword ptr [ebp-0C], 00000028
:0042F8B5 7F26                    jg 0042F8DD
:0042F8B7 8B55F8                  mov edx, dword ptr [ebp-08]
:0042F8BA 3B55EC                  cmp edx, dword ptr [ebp-14]
:0042F8BD 7D1E                    jge 0042F8DD
:0042F8BF 6A01                    push 00000001
:0042F8C1 A1B0554B00              mov eax, dword ptr [004B55B0]
:0042F8C6 50                      push eax
:0042F8C7 B928B44800              mov ecx, 0048B428
:0042F8CC E8BAA7FEFF              call 0041A08B
:0042F8D1 B928B44800              mov ecx, 0048B428
:0042F8D6 E8F1A7FEFF              call 0041A0CC
:0042F8DB EB33                    jmp 0042F910

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F8B5(C), :0042F8BD(C)
|
:0042F8DD B9A83B4B00              mov ecx, 004B3BA8
:0042F8E2 E84900FFFF              call 0041F930
:0042F8E7 85C0                    test eax, eax
:0042F8E9 7425                    je 0042F910
:0042F8EB 8A4DFC                  mov cl, byte ptr [ebp-04]
:0042F8EE 80F101                  xor cl, 01
:0042F8F1 884DFC                  mov byte ptr [ebp-04], cl
:0042F8F4 8B55FC                  mov edx, dword ptr [ebp-04]
:0042F8F7 81E2FF000000            and edx, 000000FF
:0042F8FD 52                      push edx
:0042F8FE E887F6FFFF              call 0042EF8A
:0042F903 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0042F906 6A03                    push 00000003
:0042F908 E8AEFCFFFF              call 0042F5BB
:0042F90D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F897(C), :0042F89F(C), :0042F8A7(C), :0042F8AF(C), :0042F8DB(U)
|:0042F8E9(C)
|
:0042F910 E940FFFFFF              jmp 0042F855

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F85C(C)
|
:0042F915 E8D6FDFFFF              call 0042F6F0
:0042F91A 6A00                    push 00000000
:0042F91C E869F6FFFF              call 0042EF8A
:0042F921 83C404                  add esp, 00000004
:0042F924 8BE5                    mov esp, ebp
:0042F926 5D                      pop ebp
:0042F927 C3                      ret



* Referenced by a CALL at Addresses:
|:00409C70   , :0040A8EB   , :0040A94E   , :0041D708   , :0041DE84   
|:0042F208   , :0042F4A3   
|
:0042F928 55                      push ebp
:0042F929 8BEC                    mov ebp, esp
:0042F92B 8B4508                  mov eax, dword ptr [ebp+08]
:0042F92E 50                      push eax
:0042F92F B978294B00              mov ecx, 004B2978
:0042F934 E8894BFDFF              call 004044C2
:0042F939 B9D8174B00              mov ecx, 004B17D8
:0042F93E E8FD04FEFF              call 0040FE40
:0042F943 25FF000000              and eax, 000000FF
:0042F948 83F802                  cmp eax, 00000002
:0042F94B 750C                    jne 0042F959
:0042F94D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042F950 51                      push ecx
:0042F951 E8C3E8FEFF              call 0041E219
:0042F956 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042F94B(C)
|
:0042F959 33C0                    xor eax, eax
:0042F95B 5D                      pop ebp
:0042F95C C3                      ret



* Referenced by a CALL at Addresses:
|:0040EBAB   , :00411E1D   , :00411EE2   , :00412265   , :0041D6FB   
|:0041DD2D   , :0041DDF7   , :0041E26B   , :0041F035   
|
:0042F95D 55                      push ebp
:0042F95E 8BEC                    mov ebp, esp
:0042F960 B978294B00              mov ecx, 004B2978
:0042F965 E8424BFDFF              call 004044AC
:0042F96A 5D                      pop ebp
:0042F96B C3                      ret



* Referenced by a CALL at Addresses:
|:0042F46A   , :0042F741   
|
:0042F96C 55                      push ebp
:0042F96D 8BEC                    mov ebp, esp
:0042F96F 6A01                    push 00000001
:0042F971 E8117B0400              call 00477487
:0042F976 83C404                  add esp, 00000004
:0042F979 E8D87A0400              call 00477456
:0042F97E 5D                      pop ebp
:0042F97F C3                      ret



* Referenced by a CALL at Address:
|:004302AB   
|
:0042F980 55                      push ebp
:0042F981 8BEC                    mov ebp, esp
:0042F983 83EC70                  sub esp, 00000070
:0042F986 C745A800000000          mov [ebp-58], 00000000
:0042F98D C645A400                mov [ebp-5C], 00
:0042F991 8B4510                  mov eax, dword ptr [ebp+10]
:0042F994 894598                  mov dword ptr [ebp-68], eax
:0042F997 8D4DAC                  lea ecx, dword ptr [ebp-54]
:0042F99A 894DA0                  mov dword ptr [ebp-60], ecx
:0042F99D C7459401000000          mov [ebp-6C], 00000001
:0042F9A4 C7459C00000000          mov [ebp-64], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FB15(U)
|
:0042F9AB 8B5598                  mov edx, dword ptr [ebp-68]
:0042F9AE 33C0                    xor eax, eax
:0042F9B0 8A02                    mov al, byte ptr [edx]
:0042F9B2 83F80A                  cmp eax, 0000000A
:0042F9B5 0F845F010000            je 0042FB1A
:0042F9BB 8B4D98                  mov ecx, dword ptr [ebp-68]
:0042F9BE 33D2                    xor edx, edx
:0042F9C0 8A11                    mov dl, byte ptr [ecx]
:0042F9C2 85D2                    test edx, edx
:0042F9C4 0F8450010000            je 0042FB1A
:0042F9CA 8B4598                  mov eax, dword ptr [ebp-68]
:0042F9CD 33C9                    xor ecx, ecx
:0042F9CF 8A08                    mov cl, byte ptr [eax]
:0042F9D1 81F9A1000000            cmp ecx, 000000A1
:0042F9D7 0F8CE5000000            jl 0042FAC2
:0042F9DD 8B5598                  mov edx, dword ptr [ebp-68]
:0042F9E0 33C0                    xor eax, eax
:0042F9E2 8A02                    mov al, byte ptr [edx]
:0042F9E4 3DFE000000              cmp eax, 000000FE
:0042F9E9 0F8FD3000000            jg 0042FAC2
:0042F9EF 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0042F9F2 83C102                  add ecx, 00000002
:0042F9F5 8B5514                  mov edx, dword ptr [ebp+14]
:0042F9F8 81E2FF000000            and edx, 000000FF
:0042F9FE 8B45A4                  mov eax, dword ptr [ebp-5C]
:0042FA01 25FF000000              and eax, 000000FF
:0042FA06 03D0                    add edx, eax
:0042FA08 3BCA                    cmp ecx, edx
:0042FA0A 7673                    jbe 0042FA7F
:0042FA0C 8B4D98                  mov ecx, dword ptr [ebp-68]
:0042FA0F 33D2                    xor edx, edx
:0042FA11 8A11                    mov dl, byte ptr [ecx]
:0042FA13 81FAA1000000            cmp edx, 000000A1
:0042FA19 755D                    jne 0042FA78
:0042FA1B 8B4598                  mov eax, dword ptr [ebp-68]
:0042FA1E 33C9                    xor ecx, ecx
:0042FA20 8A4801                  mov cl, byte ptr [eax+01]
:0042FA23 83F941                  cmp ecx, 00000041
:0042FA26 7C50                    jl 0042FA78
:0042FA28 8B5598                  mov edx, dword ptr [ebp-68]
:0042FA2B 33C0                    xor eax, eax
:0042FA2D 8A4201                  mov al, byte ptr [edx+01]
:0042FA30 83F849                  cmp eax, 00000049
:0042FA33 7F43                    jg 0042FA78
:0042FA35 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0042FA38 8B5598                  mov edx, dword ptr [ebp-68]
:0042FA3B 8A02                    mov al, byte ptr [edx]
:0042FA3D 8801                    mov byte ptr [ecx], al
:0042FA3F 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0042FA42 83C101                  add ecx, 00000001
:0042FA45 894DA0                  mov dword ptr [ebp-60], ecx
:0042FA48 8B5598                  mov edx, dword ptr [ebp-68]
:0042FA4B 83C201                  add edx, 00000001
:0042FA4E 895598                  mov dword ptr [ebp-68], edx
:0042FA51 8B45A0                  mov eax, dword ptr [ebp-60]
:0042FA54 8B4D98                  mov ecx, dword ptr [ebp-68]
:0042FA57 8A11                    mov dl, byte ptr [ecx]
:0042FA59 8810                    mov byte ptr [eax], dl
:0042FA5B 8B45A0                  mov eax, dword ptr [ebp-60]
:0042FA5E 83C001                  add eax, 00000001
:0042FA61 8945A0                  mov dword ptr [ebp-60], eax
:0042FA64 8B4D98                  mov ecx, dword ptr [ebp-68]
:0042FA67 83C101                  add ecx, 00000001
:0042FA6A 894D98                  mov dword ptr [ebp-68], ecx
:0042FA6D 8B55A8                  mov edx, dword ptr [ebp-58]
:0042FA70 83C202                  add edx, 00000002
:0042FA73 8955A8                  mov dword ptr [ebp-58], edx
:0042FA76 EB05                    jmp 0042FA7D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042FA19(C), :0042FA26(C), :0042FA33(C)
|
:0042FA78 E99D000000              jmp 0042FB1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FA76(U)
|
:0042FA7D EB41                    jmp 0042FAC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FA0A(C)
|
:0042FA7F 8B45A0                  mov eax, dword ptr [ebp-60]
:0042FA82 8B4D98                  mov ecx, dword ptr [ebp-68]
:0042FA85 8A11                    mov dl, byte ptr [ecx]
:0042FA87 8810                    mov byte ptr [eax], dl
:0042FA89 8B45A0                  mov eax, dword ptr [ebp-60]
:0042FA8C 83C001                  add eax, 00000001
:0042FA8F 8945A0                  mov dword ptr [ebp-60], eax
:0042FA92 8B4D98                  mov ecx, dword ptr [ebp-68]
:0042FA95 83C101                  add ecx, 00000001
:0042FA98 894D98                  mov dword ptr [ebp-68], ecx
:0042FA9B 8B55A0                  mov edx, dword ptr [ebp-60]
:0042FA9E 8B4598                  mov eax, dword ptr [ebp-68]
:0042FAA1 8A08                    mov cl, byte ptr [eax]
:0042FAA3 880A                    mov byte ptr [edx], cl
:0042FAA5 8B55A0                  mov edx, dword ptr [ebp-60]
:0042FAA8 83C201                  add edx, 00000001
:0042FAAB 8955A0                  mov dword ptr [ebp-60], edx
:0042FAAE 8B4598                  mov eax, dword ptr [ebp-68]
:0042FAB1 83C001                  add eax, 00000001
:0042FAB4 894598                  mov dword ptr [ebp-68], eax
:0042FAB7 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0042FABA 83C102                  add ecx, 00000002
:0042FABD 894DA8                  mov dword ptr [ebp-58], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FA7D(U)
|
:0042FAC0 EB53                    jmp 0042FB15

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F9D7(C), :0042F9E9(C)
|
:0042FAC2 8B5514                  mov edx, dword ptr [ebp+14]
:0042FAC5 81E2FF000000            and edx, 000000FF
:0042FACB 8B45A4                  mov eax, dword ptr [ebp-5C]
:0042FACE 25FF000000              and eax, 000000FF
:0042FAD3 03D0                    add edx, eax
:0042FAD5 3955A8                  cmp dword ptr [ebp-58], edx
:0042FAD8 7202                    jb 0042FADC
:0042FADA EB3E                    jmp 0042FB1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FAD8(C)
|
:0042FADC 8B4D98                  mov ecx, dword ptr [ebp-68]
:0042FADF 33D2                    xor edx, edx
:0042FAE1 8A11                    mov dl, byte ptr [ecx]
:0042FAE3 83FA1B                  cmp edx, 0000001B
:0042FAE6 7508                    jne 0042FAF0
:0042FAE8 8A45A4                  mov al, byte ptr [ebp-5C]
:0042FAEB 0403                    add al, 03
:0042FAED 8845A4                  mov byte ptr [ebp-5C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FAE6(C)
|
:0042FAF0 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0042FAF3 8B5598                  mov edx, dword ptr [ebp-68]
:0042FAF6 8A02                    mov al, byte ptr [edx]
:0042FAF8 8801                    mov byte ptr [ecx], al
:0042FAFA 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0042FAFD 83C101                  add ecx, 00000001
:0042FB00 894DA0                  mov dword ptr [ebp-60], ecx
:0042FB03 8B5598                  mov edx, dword ptr [ebp-68]
:0042FB06 83C201                  add edx, 00000001
:0042FB09 895598                  mov dword ptr [ebp-68], edx
:0042FB0C 8B45A8                  mov eax, dword ptr [ebp-58]
:0042FB0F 83C001                  add eax, 00000001
:0042FB12 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FAC0(U)
|
:0042FB15 E991FEFFFF              jmp 0042F9AB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042F9B5(C), :0042F9C4(C), :0042FA78(U), :0042FADA(U)
|
:0042FB1A 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0042FB1D C60100                  mov byte ptr [ecx], 00
:0042FB20 8B5598                  mov edx, dword ptr [ebp-68]
:0042FB23 33C0                    xor eax, eax
:0042FB25 8A02                    mov al, byte ptr [edx]
:0042FB27 83F80A                  cmp eax, 0000000A
:0042FB2A 7509                    jne 0042FB35
:0042FB2C 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0042FB2F 83C101                  add ecx, 00000001
:0042FB32 894DA8                  mov dword ptr [ebp-58], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FB2A(C)
|
:0042FB35 8B5598                  mov edx, dword ptr [ebp-68]
:0042FB38 33C0                    xor eax, eax
:0042FB3A 8A02                    mov al, byte ptr [edx]
:0042FB3C 83F80D                  cmp eax, 0000000D
:0042FB3F 7509                    jne 0042FB4A
:0042FB41 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0042FB44 83C102                  add ecx, 00000002
:0042FB47 894DA8                  mov dword ptr [ebp-58], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FB3F(C)
|
:0042FB4A 837D1800                cmp dword ptr [ebp+18], 00000000
:0042FB4E 742F                    je 0042FB7F
:0042FB50 8D55AC                  lea edx, dword ptr [ebp-54]
:0042FB53 52                      push edx
:0042FB54 E8B7890400              call 00478510
:0042FB59 83C404                  add esp, 00000004
:0042FB5C 884590                  mov byte ptr [ebp-70], al
:0042FB5F 8B4514                  mov eax, dword ptr [ebp+14]
:0042FB62 25FF000000              and eax, 000000FF
:0042FB67 8B4D90                  mov ecx, dword ptr [ebp-70]
:0042FB6A 81E1FF000000            and ecx, 000000FF
:0042FB70 2BC1                    sub eax, ecx
:0042FB72 99                      cdq
:0042FB73 2BC2                    sub eax, edx
:0042FB75 D1F8                    sar eax, 1
:0042FB77 8B5508                  mov edx, dword ptr [ebp+08]
:0042FB7A 03D0                    add edx, eax
:0042FB7C 895508                  mov dword ptr [ebp+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FB4E(C)
|
:0042FB7F 8B450C                  mov eax, dword ptr [ebp+0C]
:0042FB82 50                      push eax
:0042FB83 8B4D08                  mov ecx, dword ptr [ebp+08]
:0042FB86 51                      push ecx
:0042FB87 B9306D4800              mov ecx, 00486D30
:0042FB8C E87A63FDFF              call 00405F0B
:0042FB91 8D55AC                  lea edx, dword ptr [ebp-54]
:0042FB94 52                      push edx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0042FB95 6820DB4700              push 0047DB20
:0042FB9A 68306D4800              push 00486D30
:0042FB9F E83470FDFF              call 00406BD8
:0042FBA4 83C40C                  add esp, 0000000C
:0042FBA7 8B45A8                  mov eax, dword ptr [ebp-58]
:0042FBAA 8BE5                    mov esp, ebp
:0042FBAC 5D                      pop ebp
:0042FBAD C3                      ret



* Referenced by a CALL at Addresses:
|:0040A128   , :0040A1EC   , :0041E048   , :0041FAC5   , :0041FAE7   
|:0041FBC7   , :0041FBDC   , :0041FBFD   , :0041FC41   , :0041FC67   
|:0041FD98   , :0041FDAF   , :0041FE16   , :004303D6   , :00434B40   
|:0045FE0D   , :0046120D   , :004612E4   , :004613F0   , :00461415   
|:00461429   , :00461452   , :0046153E   , :00461589   , :004615A1   
|:004615BD   , :00461614   , :004617FF   , :00461A41   , :00461D06   
|:00461D6D   , :00461D97   
|
:0042FBAE 55                      push ebp
:0042FBAF 8BEC                    mov ebp, esp
:0042FBB1 81EC68090000            sub esp, 00000968
:0042FBB7 56                      push esi
:0042FBB8 C785B4F6FFFF00000000    mov dword ptr [ebp+FFFFF6B4], 00000000
:0042FBC2 C685C4F6FFFFFF          mov byte ptr [ebp+FFFFF6C4], FF
:0042FBC9 C785B8F6FFFF00000000    mov dword ptr [ebp+FFFFF6B8], 00000000
:0042FBD3 817D0C20030000          cmp dword ptr [ebp+0C], 00000320
:0042FBDA 7314                    jnb 0042FBF0
:0042FBDC 8B450C                  mov eax, dword ptr [ebp+0C]
:0042FBDF 50                      push eax
:0042FBE0 E8864EFDFF              call 00404A6B
:0042FBE5 83C404                  add esp, 00000004
:0042FBE8 8985ACF6FFFF            mov dword ptr [ebp+FFFFF6AC], eax
:0042FBEE EB0A                    jmp 0042FBFA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FBDA(C)
|
:0042FBF0 C785ACF6FFFF00000000    mov dword ptr [ebp+FFFFF6AC], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FBEE(U)
|
:0042FBFA 8B8DACF6FFFF            mov ecx, dword ptr [ebp+FFFFF6AC]
:0042FC00 898DD0F6FFFF            mov dword ptr [ebp+FFFFF6D0], ecx
:0042FC06 8B15B03B4B00            mov edx, dword ptr [004B3BB0]
:0042FC0C 3B95D0F6FFFF            cmp edx, dword ptr [ebp+FFFFF6D0]
:0042FC12 741D                    je 0042FC31
:0042FC14 33C0                    xor eax, eax
:0042FC16 833D1CDB470000          cmp dword ptr [0047DB1C], 00000000
:0042FC1D 0F94C0                  sete al
:0042FC20 A31CDB4700              mov dword ptr [0047DB1C], eax
:0042FC25 8B8DD0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6D0]
:0042FC2B 890DB03B4B00            mov dword ptr [004B3BB0], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FC12(C)
|
:0042FC31 817D0C20030000          cmp dword ptr [ebp+0C], 00000320
:0042FC38 1BD2                    sbb edx, edx
:0042FC3A F7DA                    neg edx
:0042FC3C 8955E0                  mov dword ptr [ebp-20], edx
:0042FC3F B958494B00              mov ecx, 004B4958
:0042FC44 E8FAEC0100              call 0044E943
:0042FC49 2B05941E4800            sub eax, dword ptr [00481E94]
:0042FC4F 99                      cdq
:0042FC50 2BC2                    sub eax, edx
:0042FC52 D1F8                    sar eax, 1
:0042FC54 99                      cdq
:0042FC55 83E207                  and edx, 00000007
:0042FC58 03C2                    add eax, edx
:0042FC5A C1F803                  sar eax, 03
:0042FC5D C1E003                  shl eax, 03
:0042FC60 8985C0F6FFFF            mov dword ptr [ebp+FFFFF6C0], eax
:0042FC66 B958494B00              mov ecx, 004B4958
:0042FC6B E8FAEC0100              call 0044E96A
:0042FC70 2B05981E4800            sub eax, dword ptr [00481E98]
:0042FC76 83E828                  sub eax, 00000028
:0042FC79 99                      cdq
:0042FC7A 2BC2                    sub eax, edx
:0042FC7C D1F8                    sar eax, 1
:0042FC7E 99                      cdq
:0042FC7F 83E207                  and edx, 00000007
:0042FC82 03C2                    add eax, edx
:0042FC84 C1F803                  sar eax, 03
:0042FC87 C1E003                  shl eax, 03
:0042FC8A 8985BCF6FFFF            mov dword ptr [ebp+FFFFF6BC], eax
:0042FC90 837DE000                cmp dword ptr [ebp-20], 00000000
:0042FC94 0F842C010000            je 0042FDC6
:0042FC9A B958494B00              mov ecx, 004B4958
:0042FC9F E8DEEB0100              call 0044E882
:0042FCA4 85C0                    test eax, eax
:0042FCA6 0F8485000000            je 0042FD31
:0042FCAC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0042FCAF 6BC950                  imul ecx, 00000050
:0042FCB2 81C1787F4900            add ecx, 00497F78
:0042FCB8 E838B50300              call 0046B1F5
:0042FCBD 8845EC                  mov byte ptr [ebp-14], al
:0042FCC0 8B45EC                  mov eax, dword ptr [ebp-14]
:0042FCC3 25FF000000              and eax, 000000FF
:0042FCC8 3DFF000000              cmp eax, 000000FF
:0042FCCD 7459                    je 0042FD28
:0042FCCF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042FCD2 81E1FF000000            and ecx, 000000FF
:0042FCD8 6BC924                  imul ecx, 00000024
:0042FCDB 81C1B83B4B00            add ecx, 004B3BB8
:0042FCE1 E85A1F0000              call 00431C40
:0042FCE6 33C9                    xor ecx, ecx
:0042FCE8 8A4801                  mov cl, byte ptr [eax+01]
:0042FCEB 81F9FF000000            cmp ecx, 000000FF
:0042FCF1 7433                    je 0042FD26
:0042FCF3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0042FCF6 81E1FF000000            and ecx, 000000FF
:0042FCFC 6BC924                  imul ecx, 00000024
:0042FCFF 81C1B83B4B00            add ecx, 004B3BB8
:0042FD05 E8361F0000              call 00431C40
:0042FD0A 33D2                    xor edx, edx
:0042FD0C 8A5001                  mov dl, byte ptr [eax+01]
:0042FD0F 8BF2                    mov esi, edx
:0042FD11 6BF603                  imul esi, 00000003
:0042FD14 C1E604                  shl esi, 04
:0042FD17 B958494B00              mov ecx, 004B4958
:0042FD1C E8ADEB0100              call 0044E8CE
:0042FD21 2BF0                    sub esi, eax
:0042FD23 8975F0                  mov dword ptr [ebp-10], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FCF1(C)
|
:0042FD26 EB07                    jmp 0042FD2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FCCD(C)
|
:0042FD28 C745F000000000          mov [ebp-10], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FD26(U)
|
:0042FD2F EB4C                    jmp 0042FD7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FCA6(C)
|
:0042FD31 8B85D0F6FFFF            mov eax, dword ptr [ebp+FFFFF6D0]
:0042FD37 50                      push eax
:0042FD38 E8CCD5FEFF              call 0041D309
:0042FD3D 83C404                  add esp, 00000004
:0042FD40 85C0                    test eax, eax
:0042FD42 742B                    je 0042FD6F
:0042FD44 8B8DD0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6D0]
:0042FD4A 51                      push ecx
:0042FD4B E8B9D5FEFF              call 0041D309
:0042FD50 83C404                  add esp, 00000004
:0042FD53 8B5004                  mov edx, dword ptr [eax+04]
:0042FD56 8955F0                  mov dword ptr [ebp-10], edx
:0042FD59 8B85D0F6FFFF            mov eax, dword ptr [ebp+FFFFF6D0]
:0042FD5F 50                      push eax
:0042FD60 E8A4D5FEFF              call 0041D309
:0042FD65 83C404                  add esp, 00000004
:0042FD68 8B08                    mov ecx, dword ptr [eax]
:0042FD6A 894DFC                  mov dword ptr [ebp-04], ecx
:0042FD6D EB0E                    jmp 0042FD7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FD42(C)
|
:0042FD6F C745F000000000          mov [ebp-10], 00000000
:0042FD76 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0042FD2F(U), :0042FD6D(U)
|
:0042FD7D B958494B00              mov ecx, 004B4958
:0042FD82 E8E3EB0100              call 0044E96A
:0042FD87 83E828                  sub eax, 00000028
:0042FD8A 99                      cdq
:0042FD8B 2BC2                    sub eax, edx
:0042FD8D D1F8                    sar eax, 1
:0042FD8F 3945F0                  cmp dword ptr [ebp-10], eax
:0042FD92 7E1A                    jle 0042FDAE
:0042FD94 A1981E4800              mov eax, dword ptr [00481E98]
:0042FD99 83E828                  sub eax, 00000028
:0042FD9C 99                      cdq
:0042FD9D 2BC2                    sub eax, edx
:0042FD9F D1F8                    sar eax, 1
:0042FDA1 0590010000              add eax, 00000190
:0042FDA6 8985D8F6FFFF            mov dword ptr [ebp+FFFFF6D8], eax
:0042FDAC EB16                    jmp 0042FDC4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FD92(C)
|
:0042FDAE A1981E4800              mov eax, dword ptr [00481E98]
:0042FDB3 83E828                  sub eax, 00000028
:0042FDB6 99                      cdq
:0042FDB7 2BC2                    sub eax, edx
:0042FDB9 D1F8                    sar eax, 1
:0042FDBB 83E860                  sub eax, 00000060
:0042FDBE 8985D8F6FFFF            mov dword ptr [ebp+FFFFF6D8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FDAC(U)
|
:0042FDC4 EB0F                    jmp 0042FDD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FC94(C)
|
:0042FDC6 8B15981E4800            mov edx, dword ptr [00481E98]
:0042FDCC 83EA28                  sub edx, 00000028
:0042FDCF 8995D8F6FFFF            mov dword ptr [ebp+FFFFF6D8], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FDC4(U)
|
:0042FDD5 B958494B00              mov ecx, 004B4958
:0042FDDA E88BEB0100              call 0044E96A
:0042FDDF 2B85D8F6FFFF            sub eax, dword ptr [ebp+FFFFF6D8]
:0042FDE5 99                      cdq
:0042FDE6 2BC2                    sub eax, edx
:0042FDE8 D1F8                    sar eax, 1
:0042FDEA 99                      cdq
:0042FDEB 83E207                  and edx, 00000007
:0042FDEE 03C2                    add eax, edx
:0042FDF0 C1F803                  sar eax, 03
:0042FDF3 C1E003                  shl eax, 03
:0042FDF6 8985BCF6FFFF            mov dword ptr [ebp+FFFFF6BC], eax
:0042FDFC 8B4510                  mov eax, dword ptr [ebp+10]
:0042FDFF 25C0000000              and eax, 000000C0
:0042FE04 C1E806                  shr eax, 06
:0042FE07 8945F8                  mov dword ptr [ebp-08], eax
:0042FE0A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0042FE0D 83E110                  and ecx, 00000010
:0042FE10 F7D9                    neg ecx
:0042FE12 1BC9                    sbb ecx, ecx
:0042FE14 F7D9                    neg ecx
:0042FE16 898DCCF6FFFF            mov dword ptr [ebp+FFFFF6CC], ecx
:0042FE1C 8B55E0                  mov edx, dword ptr [ebp-20]
:0042FE1F F7DA                    neg edx
:0042FE21 1BD2                    sbb edx, edx
:0042FE23 83C204                  add edx, 00000004
:0042FE26 8995D4F6FFFF            mov dword ptr [ebp+FFFFF6D4], edx
:0042FE2C E816F8FFFF              call 0042F647
:0042FE31 E8FD02FEFF              call 00410133

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042FE36 6A04                    push 00000004
:0042FE38 B9306D4800              mov ecx, 00486D30
:0042FE3D E81262FDFF              call 00406054
:0042FE42 6A00                    push 00000000
:0042FE44 B9306D4800              mov ecx, 00486D30
:0042FE49 E8A261FDFF              call 00405FF0
:0042FE4E 837DE000                cmp dword ptr [ebp-20], 00000000
:0042FE52 7531                    jne 0042FE85
:0042FE54 6A0B                    push 0000000B

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:0042FE56 6A70                    push 00000070
:0042FE58 6840010000              push 00000140
:0042FE5D 8B85BCF6FFFF            mov eax, dword ptr [ebp+FFFFF6BC]
:0042FE63 05A2000000              add eax, 000000A2
:0042FE68 50                      push eax
:0042FE69 8B8DC0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6C0]
:0042FE6F 81C1A0000000            add ecx, 000000A0
:0042FE75 51                      push ecx
:0042FE76 B978544B00              mov ecx, 004B5478
:0042FE7B E829860300              call 004684A9
:0042FE80 E908030000              jmp 0043018D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FE52(C)
|
:0042FE85 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0042FE89 750A                    jne 0042FE95
:0042FE8B C7051CDB470001000000    mov dword ptr [0047DB1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FE89(C)
|
:0042FE95 8B95D0F6FFFF            mov edx, dword ptr [ebp+FFFFF6D0]
:0042FE9B 52                      push edx
:0042FE9C E8D9D4FEFF              call 0041D37A
:0042FEA1 83C404                  add esp, 00000004
:0042FEA4 8985C8F6FFFF            mov dword ptr [ebp+FFFFF6C8], eax
:0042FEAA 81BDC8F6FFFFFF000000    cmp dword ptr [ebp+FFFFF6C8], 000000FF
:0042FEB4 0F84AB000000            je 0042FF65
:0042FEBA 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042FEBC 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042FEBE 6A04                    push 00000004
:0042FEC0 E8585E0400              call 00475D1D
:0042FEC5 83C40C                  add esp, 0000000C
:0042FEC8 83BDC8F6FFFF03          cmp dword ptr [ebp+FFFFF6C8], 00000003
:0042FECF 750E                    jne 0042FEDF
:0042FED1 8B45FC                  mov eax, dword ptr [ebp-04]
:0042FED4 83E810                  sub eax, 00000010
:0042FED7 8985A8F6FFFF            mov dword ptr [ebp+FFFFF6A8], eax
:0042FEDD EB0C                    jmp 0042FEEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FECF(C)
|
:0042FEDF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0042FEE2 83C128                  add ecx, 00000028
:0042FEE5 898DA8F6FFFF            mov dword ptr [ebp+FFFFF6A8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FEDD(U)
|
:0042FEEB 8B95A8F6FFFF            mov edx, dword ptr [ebp+FFFFF6A8]
:0042FEF1 8995B8F6FFFF            mov dword ptr [ebp+FFFFF6B8], edx
:0042FEF7 8D85E0F6FFFF            lea eax, dword ptr [ebp+FFFFF6E0]
:0042FEFD 50                      push eax
:0042FEFE 6A18                    push 00000018
:0042FF00 6A18                    push 00000018
:0042FF02 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0042FF05 83E910                  sub ecx, 00000010
:0042FF08 51                      push ecx
:0042FF09 8B95B8F6FFFF            mov edx, dword ptr [ebp+FFFFF6B8]
:0042FF0F 52                      push edx
:0042FF10 E8956D0400              call 00476CAA
:0042FF15 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042FF18 6A04                    push 00000004
:0042FF1A 6A00                    push 00000000
:0042FF1C 6880290000              push 00002980
:0042FF21 B9A01C4B00              mov ecx, 004B1CA0
:0042FF26 E865900400              call 00478F90
:0042FF2B 8B8DC8F6FFFF            mov ecx, dword ptr [ebp+FFFFF6C8]
:0042FF31 83E901                  sub ecx, 00000001
:0042FF34 F7D9                    neg ecx
:0042FF36 1BC9                    sbb ecx, ecx
:0042FF38 81E140020000            and ecx, 00000240
:0042FF3E 03C1                    add eax, ecx
:0042FF40 50                      push eax
:0042FF41 6A18                    push 00000018
:0042FF43 6A18                    push 00000018
:0042FF45 8B55F0                  mov edx, dword ptr [ebp-10]
:0042FF48 83EA10                  sub edx, 00000010
:0042FF4B 52                      push edx
:0042FF4C 8B85B8F6FFFF            mov eax, dword ptr [ebp+FFFFF6B8]
:0042FF52 50                      push eax
:0042FF53 E89C6B0400              call 00476AF4
:0042FF58 83C414                  add esp, 00000014
:0042FF5B C785B4F6FFFF01000000    mov dword ptr [ebp+FFFFF6B4], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FEB4(C)
|

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:0042FF65 6A70                    push 00000070
:0042FF67 6840020000              push 00000240
:0042FF6C 8B8DBCF6FFFF            mov ecx, dword ptr [ebp+FFFFF6BC]
:0042FF72 81C190000000            add ecx, 00000090
:0042FF78 51                      push ecx
:0042FF79 8B95C0F6FFFF            mov edx, dword ptr [ebp+FFFFF6C0]
:0042FF7F 83C220                  add edx, 00000020
:0042FF82 52                      push edx
:0042FF83 B978544B00              mov ecx, 004B5478
:0042FF88 E831840300              call 004683BE
:0042FF8D 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0042FF8F 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042FF91 6A04                    push 00000004
:0042FF93 E8855D0400              call 00475D1D
:0042FF98 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042FF9B 6A04                    push 00000004
:0042FF9D 6A00                    push 00000000
:0042FF9F 68000F0000              push 00000F00
:0042FFA4 B9A01C4B00              mov ecx, 004B1CA0
:0042FFA9 E8E28F0400              call 00478F90
:0042FFAE 8985B0F6FFFF            mov dword ptr [ebp+FFFFF6B0], eax
:0042FFB4 8B85B0F6FFFF            mov eax, dword ptr [ebp+FFFFF6B0]
:0042FFBA 50                      push eax
:0042FFBB 6A50                    push 00000050
:0042FFBD 6A10                    push 00000010
:0042FFBF 8B8DBCF6FFFF            mov ecx, dword ptr [ebp+FFFFF6BC]
:0042FFC5 81C1B0000000            add ecx, 000000B0
:0042FFCB 51                      push ecx
:0042FFCC 8B95C0F6FFFF            mov edx, dword ptr [ebp+FFFFF6C0]
:0042FFD2 81C2A0000000            add edx, 000000A0
:0042FFD8 52                      push edx
:0042FFD9 E8166B0400              call 00476AF4
:0042FFDE 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0042FFE1 6A04                    push 00000004
:0042FFE3 6A00                    push 00000000
:0042FFE5 6800140000              push 00001400
:0042FFEA B9A01C4B00              mov ecx, 004B1CA0
:0042FFEF E89C8F0400              call 00478F90
:0042FFF4 8985B0F6FFFF            mov dword ptr [ebp+FFFFF6B0], eax
:0042FFFA 8B85B0F6FFFF            mov eax, dword ptr [ebp+FFFFF6B0]
:00430000 50                      push eax
:00430001 6A50                    push 00000050
:00430003 6A10                    push 00000010
:00430005 8B8DBCF6FFFF            mov ecx, dword ptr [ebp+FFFFF6BC]
:0043000B 81C1B0000000            add ecx, 000000B0
:00430011 51                      push ecx
:00430012 8B95C0F6FFFF            mov edx, dword ptr [ebp+FFFFF6C0]
:00430018 81C2D0010000            add edx, 000001D0
:0043001E 52                      push edx
:0043001F E8D06A0400              call 00476AF4
:00430024 83C414                  add esp, 00000014
:00430027 833D1CDB470000          cmp dword ptr [0047DB1C], 00000000
:0043002E 741B                    je 0043004B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00430030 6A04                    push 00000004
:00430032 6A00                    push 00000000
:00430034 68000D0000              push 00000D00
:00430039 B9A01C4B00              mov ecx, 004B1CA0
:0043003E E84D8F0400              call 00478F90
:00430043 8985A4F6FFFF            mov dword ptr [ebp+FFFFF6A4], eax
:00430049 EB19                    jmp 00430064

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043002E(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043004B 6A04                    push 00000004
:0043004D 6A00                    push 00000000
:0043004F 68000E0000              push 00000E00
:00430054 B9A01C4B00              mov ecx, 004B1CA0
:00430059 E8328F0400              call 00478F90
:0043005E 8985A4F6FFFF            mov dword ptr [ebp+FFFFF6A4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430049(U)
|
:00430064 8B85A4F6FFFF            mov eax, dword ptr [ebp+FFFFF6A4]
:0043006A 8985B0F6FFFF            mov dword ptr [ebp+FFFFF6B0], eax
:00430070 833D1CDB470000          cmp dword ptr [0047DB1C], 00000000
:00430077 7414                    je 0043008D
:00430079 8B8DC0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6C0]
:0043007F 81C190000000            add ecx, 00000090
:00430085 898DA0F6FFFF            mov dword ptr [ebp+FFFFF6A0], ecx
:0043008B EB12                    jmp 0043009F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430077(C)
|
:0043008D 8B95C0F6FFFF            mov edx, dword ptr [ebp+FFFFF6C0]
:00430093 81C2E0010000            add edx, 000001E0
:00430099 8995A0F6FFFF            mov dword ptr [ebp+FFFFF6A0], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043008B(U)
|
:0043009F 8B85B0F6FFFF            mov eax, dword ptr [ebp+FFFFF6B0]
:004300A5 50                      push eax
:004300A6 6A10                    push 00000010
:004300A8 6A10                    push 00000010
:004300AA 8B8DBCF6FFFF            mov ecx, dword ptr [ebp+FFFFF6BC]
:004300B0 81C1D0000000            add ecx, 000000D0
:004300B6 51                      push ecx
:004300B7 8B95A0F6FFFF            mov edx, dword ptr [ebp+FFFFF6A0]
:004300BD 52                      push edx
:004300BE E8316A0400              call 00476AF4
:004300C3 83C414                  add esp, 00000014
:004300C6 6A10                    push 00000010
:004300C8 6A00                    push 00000000
:004300CA 6A50                    push 00000050
:004300CC 6820010000              push 00000120
:004300D1 8B85BCF6FFFF            mov eax, dword ptr [ebp+FFFFF6BC]
:004300D7 05B0000000              add eax, 000000B0
:004300DC 50                      push eax
:004300DD 8B8DC0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6C0]
:004300E3 81C1B0000000            add ecx, 000000B0
:004300E9 51                      push ecx
:004300EA E80C01FEFF              call 004101FB
:004300EF 83C418                  add esp, 00000018
:004300F2 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004300F4 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004300F6 6A04                    push 00000004
:004300F8 E8205C0400              call 00475D1D
:004300FD 83C40C                  add esp, 0000000C
:00430100 8B8DD0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6D0]
:00430106 E875DDFFFF              call 0042DE80
:0043010B 50                      push eax
:0043010C 8B95BCF6FFFF            mov edx, dword ptr [ebp+FFFFF6BC]
:00430112 81C290000000            add edx, 00000090
:00430118 52                      push edx
:00430119 A11CDB4700              mov eax, dword ptr [0047DB1C]
:0043011E F7D8                    neg eax
:00430120 1BC0                    sbb eax, eax
:00430122 2530FEFFFF              and eax, FFFFFE30
:00430127 05F0010000              add eax, 000001F0
:0043012C 8B8DC0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6C0]
:00430132 03C8                    add ecx, eax
:00430134 51                      push ecx
:00430135 E8AE02FEFF              call 004103E8
:0043013A 83C40C                  add esp, 0000000C
:0043013D 6A0B                    push 0000000B
:0043013F B9306D4800              mov ecx, 00486D30
:00430144 E86F5EFDFF              call 00405FB8
:00430149 8B95BCF6FFFF            mov edx, dword ptr [ebp+FFFFF6BC]
:0043014F 81C2B2000000            add edx, 000000B2
:00430155 52                      push edx
:00430156 8B85C0F6FFFF            mov eax, dword ptr [ebp+FFFFF6C0]
:0043015C 05B0000000              add eax, 000000B0
:00430161 C1E803                  shr eax, 03
:00430164 50                      push eax
:00430165 B9306D4800              mov ecx, 00486D30
:0043016A E89C5DFDFF              call 00405F0B
:0043016F 8B8DD0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6D0]
:00430175 E88A2FFDFF              call 00403104
:0043017A 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043017B 6824DB4700              push 0047DB24
:00430180 68306D4800              push 00486D30
:00430185 E84E6AFDFF              call 00406BD8
:0043018A 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0042FE80(U)
|
:0043018D E8BCFFFDFF              call 0041014E
:00430192 8B4D08                  mov ecx, dword ptr [ebp+08]
:00430195 894DF4                  mov dword ptr [ebp-0C], ecx
:00430198 C745E801000000          mov [ebp-18], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004302ED(U)
|
:0043019F 8B55F4                  mov edx, dword ptr [ebp-0C]
:004301A2 33C0                    xor eax, eax
:004301A4 8A02                    mov al, byte ptr [edx]
:004301A6 85C0                    test eax, eax
:004301A8 0F8444010000            je 004302F2
:004301AE E880FFFDFF              call 00410133
:004301B3 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004301B6 F7D9                    neg ecx
:004301B8 1BC9                    sbb ecx, ecx
:004301BA 83E113                  and ecx, 00000013
:004301BD 81C1B2000000            add ecx, 000000B2
:004301C3 898DDCF6FFFF            mov dword ptr [ebp+FFFFF6DC], ecx
:004301C9 837DE800                cmp dword ptr [ebp-18], 00000000
:004301CD 7571                    jne 00430240
:004301CF 837DE000                cmp dword ptr [ebp-20], 00000000
:004301D3 7436                    je 0043020B
:004301D5 6A10                    push 00000010
:004301D7 6A00                    push 00000000
:004301D9 8B95D4F6FFFF            mov edx, dword ptr [ebp+FFFFF6D4]
:004301DF 6BD213                  imul edx, 00000013
:004301E2 52                      push edx
:004301E3 6820010000              push 00000120
:004301E8 8B85BCF6FFFF            mov eax, dword ptr [ebp+FFFFF6BC]
:004301EE 05C5000000              add eax, 000000C5
:004301F3 50                      push eax
:004301F4 8B8DC0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6C0]
:004301FA 81C1B0000000            add ecx, 000000B0
:00430200 51                      push ecx
:00430201 E8F5FFFDFF              call 004101FB
:00430206 83C418                  add esp, 00000018
:00430209 EB35                    jmp 00430240

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004301D3(C)
|
:0043020B 68FFFF0000              push 0000FFFF
:00430210 8B95D4F6FFFF            mov edx, dword ptr [ebp+FFFFF6D4]
:00430216 6BD213                  imul edx, 00000013
:00430219 52                      push edx
:0043021A 6828010000              push 00000128
:0043021F 8B85BCF6FFFF            mov eax, dword ptr [ebp+FFFFF6BC]
:00430225 05B2000000              add eax, 000000B2
:0043022A 50                      push eax
:0043022B 8B8DC0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6C0]
:00430231 81C1B0000000            add ecx, 000000B0
:00430237 51                      push ecx
:00430238 E87E02FEFF              call 004104BB
:0043023D 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004301CD(C), :00430209(U)
|
:00430240 8B55E0                  mov edx, dword ptr [ebp-20]
:00430243 F7DA                    neg edx
:00430245 1BD2                    sbb edx, edx
:00430247 83E2FA                  and edx, FFFFFFFA
:0043024A 83C210                  add edx, 00000010
:0043024D 52                      push edx
:0043024E B9306D4800              mov ecx, 00486D30
:00430253 E8605DFDFF              call 00405FB8
:00430258 C645E400                mov [ebp-1C], 00
:0043025C EB08                    jmp 00430266

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004302CA(U)
|
:0043025E 8A45E4                  mov al, byte ptr [ebp-1C]
:00430261 0401                    add al, 01
:00430263 8845E4                  mov byte ptr [ebp-1C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043025C(U)
|
:00430266 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00430269 33D2                    xor edx, edx
:0043026B 8A11                    mov dl, byte ptr [ecx]
:0043026D 85D2                    test edx, edx
:0043026F 745B                    je 004302CC
:00430271 8B45E4                  mov eax, dword ptr [ebp-1C]
:00430274 25FF000000              and eax, 000000FF
:00430279 3B85D4F6FFFF            cmp eax, dword ptr [ebp+FFFFF6D4]
:0043027F 7D4B                    jge 004302CC
:00430281 8B8DCCF6FFFF            mov ecx, dword ptr [ebp+FFFFF6CC]
:00430287 51                      push ecx
:00430288 6A24                    push 00000024
:0043028A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043028D 52                      push edx
:0043028E 8B85BCF6FFFF            mov eax, dword ptr [ebp+FFFFF6BC]
:00430294 0385DCF6FFFF            add eax, dword ptr [ebp+FFFFF6DC]
:0043029A 50                      push eax
:0043029B 8B8DC0F6FFFF            mov ecx, dword ptr [ebp+FFFFF6C0]
:004302A1 81C1B0000000            add ecx, 000000B0
:004302A7 C1E903                  shr ecx, 03
:004302AA 51                      push ecx
:004302AB E8D0F6FFFF              call 0042F980
:004302B0 83C414                  add esp, 00000014
:004302B3 8B55F4                  mov edx, dword ptr [ebp-0C]
:004302B6 03D0                    add edx, eax
:004302B8 8955F4                  mov dword ptr [ebp-0C], edx
:004302BB 8B85DCF6FFFF            mov eax, dword ptr [ebp+FFFFF6DC]
:004302C1 83C013                  add eax, 00000013
:004302C4 8985DCF6FFFF            mov dword ptr [ebp+FFFFF6DC], eax
:004302CA EB92                    jmp 0043025E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043026F(C), :0043027F(C)
|
:004302CC B928B44800              mov ecx, 0048B428
:004302D1 E8799BFEFF              call 00419E4F
:004302D6 E873FEFDFF              call 0041014E
:004302DB 837DF800                cmp dword ptr [ebp-08], 00000000
:004302DF 7505                    jne 004302E6
:004302E1 E82FF5FFFF              call 0042F815

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004302DF(C)
|
:004302E6 C745E800000000          mov [ebp-18], 00000000
:004302ED E9ADFEFFFF              jmp 0043019F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004301A8(C)
|
:004302F2 B928B44800              mov ecx, 0048B428
:004302F7 E8539BFEFF              call 00419E4F
:004302FC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004302FF 898D9CF6FFFF            mov dword ptr [ebp+FFFFF69C], ecx
:00430305 83BD9CF6FFFF01          cmp dword ptr [ebp+FFFFF69C], 00000001
:0043030C 740B                    je 00430319
:0043030E 83BD9CF6FFFF02          cmp dword ptr [ebp+FFFFF69C], 00000002
:00430315 741F                    je 00430336
:00430317 EB32                    jmp 0043034B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043030C(C)
|
:00430319 B978294B00              mov ecx, 004B2978
:0043031E E86DC6FDFF              call 0040C990
:00430323 25FF000000              and eax, 000000FF
:00430328 6BC00F                  imul eax, 0000000F
:0043032B 50                      push eax
:0043032C E805F4FFFF              call 0042F736
:00430331 83C404                  add esp, 00000004
:00430334 EB15                    jmp 0043034B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430315(C)
|

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:00430336 6828DB4700              push 0047DB28

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043033B 6A06                    push 00000006
:0043033D E8F1100000              call 00431433
:00430342 83C408                  add esp, 00000008
:00430345 8885C4F6FFFF            mov byte ptr [ebp+FFFFF6C4], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430317(U), :00430334(U)
|
:0043034B B978544B00              mov ecx, 004B5478
:00430350 E8BC810300              call 00468511
:00430355 83BDB4F6FFFF00          cmp dword ptr [ebp+FFFFF6B4], 00000000
:0043035C 7421                    je 0043037F
:0043035E 8D95E0F6FFFF            lea edx, dword ptr [ebp+FFFFF6E0]
:00430364 52                      push edx
:00430365 6A18                    push 00000018
:00430367 6A18                    push 00000018
:00430369 8B45F0                  mov eax, dword ptr [ebp-10]
:0043036C 83E810                  sub eax, 00000010
:0043036F 50                      push eax
:00430370 8B8DB8F6FFFF            mov ecx, dword ptr [ebp+FFFFF6B8]
:00430376 51                      push ecx
:00430377 E878670400              call 00476AF4
:0043037C 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043035C(C)
|
:0043037F 8B95C4F6FFFF            mov edx, dword ptr [ebp+FFFFF6C4]
:00430385 81E2FF000000            and edx, 000000FF
:0043038B 81FAFF000000            cmp edx, 000000FF
:00430391 741C                    je 004303AF
:00430393 8B85C4F6FFFF            mov eax, dword ptr [ebp+FFFFF6C4]
:00430399 25FF000000              and eax, 000000FF
:0043039E 83F801                  cmp eax, 00000001
:004303A1 740C                    je 004303AF
:004303A3 C78598F6FFFF00000000    mov dword ptr [ebp+FFFFF698], 00000000
:004303AD EB0A                    jmp 004303B9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430391(C), :004303A1(C)
|
:004303AF C78598F6FFFF01000000    mov dword ptr [ebp+FFFFF698], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004303AD(U)
|
:004303B9 8B8598F6FFFF            mov eax, dword ptr [ebp+FFFFF698]
:004303BF 5E                      pop esi
:004303C0 8BE5                    mov esp, ebp
:004303C2 5D                      pop ebp
:004303C3 C3                      ret


:004303C4 55                      push ebp
:004303C5 8BEC                    mov ebp, esp
:004303C7 6A00                    push 00000000
:004303C9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004303CC E8AF2DFDFF              call 00403180
:004303D1 50                      push eax
:004303D2 8B4508                  mov eax, dword ptr [ebp+08]
:004303D5 50                      push eax
:004303D6 E8D3F7FFFF              call 0042FBAE
:004303DB 83C40C                  add esp, 0000000C
:004303DE 5D                      pop ebp
:004303DF C3                      ret



* Referenced by a CALL at Addresses:
|:00408568   , :0044E6BB   , :0046D774   , :0046D7DE   , :0046D850   
|:0046D8A1   
|
:004303E0 55                      push ebp
:004303E1 8BEC                    mov ebp, esp
:004303E3 6AFF                    push FFFFFFFF
:004303E5 6815984700              push 00479815
:004303EA 64A100000000            mov eax, dword ptr fs:[00000000]
:004303F0 50                      push eax
:004303F1 64892500000000          mov dword ptr fs:[00000000], esp
:004303F8 81ECBC010000            sub esp, 000001BC
:004303FE C645DC00                mov [ebp-24], 00
:00430402 8B4518                  mov eax, dword ptr [ebp+18]
:00430405 25FF000000              and eax, 000000FF
:0043040A 2580000000              and eax, 00000080
:0043040F 888584FEFFFF            mov byte ptr [ebp+FFFFFE84], al
:00430415 8B4D18                  mov ecx, dword ptr [ebp+18]
:00430418 81E1FF000000            and ecx, 000000FF
:0043041E 83E140                  and ecx, 00000040
:00430421 888D70FEFFFF            mov byte ptr [ebp+FFFFFE70], cl
:00430427 C68560FEFFFF00          mov byte ptr [ebp+FFFFFE60], 00
:0043042E C645F014                mov [ebp-10], 14
:00430432 C745E800000000          mov [ebp-18], 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00430439 C78568FEFFFF08000000    mov dword ptr [ebp+FFFFFE68], 00000008
:00430443 C745EC00000000          mov [ebp-14], 00000000
:0043044A E8F8F1FFFF              call 0042F647
:0043044F 837D2400                cmp dword ptr [ebp+24], 00000000
:00430453 741A                    je 0043046F
:00430455 8B5518                  mov edx, dword ptr [ebp+18]
:00430458 81E2FF000000            and edx, 000000FF
:0043045E 83E220                  and edx, 00000020
:00430461 85D2                    test edx, edx
:00430463 740A                    je 0043046F
:00430465 8B4524                  mov eax, dword ptr [ebp+24]
:00430468 33C9                    xor ecx, ecx
:0043046A 8A08                    mov cl, byte ptr [eax]
:0043046C 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430453(C), :00430463(C)
|
:0043046F C68588FEFFFF00          mov byte ptr [ebp+FFFFFE88], 00
:00430476 EB0F                    jmp 00430487

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430522(U)
|
:00430478 8A9588FEFFFF            mov dl, byte ptr [ebp+FFFFFE88]
:0043047E 80C201                  add dl, 01
:00430481 889588FEFFFF            mov byte ptr [ebp+FFFFFE88], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430476(U)
|
:00430487 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:0043048D 25FF000000              and eax, 000000FF
:00430492 8B4D10                  mov ecx, dword ptr [ebp+10]
:00430495 833C8100                cmp dword ptr [ecx+4*eax], 00000000
:00430499 0F8488000000            je 00430527
:0043049F C6857CFEFFFF00          mov byte ptr [ebp+FFFFFE7C], 00
:004304A6 EB0F                    jmp 004304B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004304DD(U)
|
:004304A8 8A957CFEFFFF            mov dl, byte ptr [ebp+FFFFFE7C]
:004304AE 80C201                  add dl, 01
:004304B1 88957CFEFFFF            mov byte ptr [ebp+FFFFFE7C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004304A6(U)
|
:004304B7 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:004304BD 25FF000000              and eax, 000000FF
:004304C2 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:004304C8 81E1FF000000            and ecx, 000000FF
:004304CE 8B5510                  mov edx, dword ptr [ebp+10]
:004304D1 8B0482                  mov eax, dword ptr [edx+4*eax]
:004304D4 33D2                    xor edx, edx
:004304D6 8A1408                  mov dl, byte ptr [eax+ecx]
:004304D9 85D2                    test edx, edx
:004304DB 7402                    je 004304DF
:004304DD EBC9                    jmp 004304A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004304DB(C)
|
:004304DF 8B4520                  mov eax, dword ptr [ebp+20]
:004304E2 25FF000000              and eax, 000000FF
:004304E7 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:004304ED 81E1FF000000            and ecx, 000000FF
:004304F3 3BC1                    cmp eax, ecx
:004304F5 7E11                    jle 00430508
:004304F7 8B5520                  mov edx, dword ptr [ebp+20]
:004304FA 81E2FF000000            and edx, 000000FF
:00430500 899540FEFFFF            mov dword ptr [ebp+FFFFFE40], edx
:00430506 EB11                    jmp 00430519

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004304F5(C)
|
:00430508 8B857CFEFFFF            mov eax, dword ptr [ebp+FFFFFE7C]
:0043050E 25FF000000              and eax, 000000FF
:00430513 898540FEFFFF            mov dword ptr [ebp+FFFFFE40], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430506(U)
|
:00430519 8A8D40FEFFFF            mov cl, byte ptr [ebp+FFFFFE40]
:0043051F 884D20                  mov byte ptr [ebp+20], cl
:00430522 E951FFFFFF              jmp 00430478

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430499(C)
|
:00430527 8A9588FEFFFF            mov dl, byte ptr [ebp+FFFFFE88]
:0043052D 889560FEFFFF            mov byte ptr [ebp+FFFFFE60], dl
:00430533 8B4520                  mov eax, dword ptr [ebp+20]
:00430536 25FF000000              and eax, 000000FF
:0043053B 83F808                  cmp eax, 00000008
:0043053E 7E11                    jle 00430551
:00430540 8B4D20                  mov ecx, dword ptr [ebp+20]
:00430543 81E1FF000000            and ecx, 000000FF
:00430549 898D3CFEFFFF            mov dword ptr [ebp+FFFFFE3C], ecx
:0043054F EB0A                    jmp 0043055B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043053E(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00430551 C7853CFEFFFF08000000    mov dword ptr [ebp+FFFFFE3C], 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043054F(U)
|
:0043055B 8A953CFEFFFF            mov dl, byte ptr [ebp+FFFFFE3C]
:00430561 885520                  mov byte ptr [ebp+20], dl
:00430564 8B8584FEFFFF            mov eax, dword ptr [ebp+FFFFFE84]
:0043056A 25FF000000              and eax, 000000FF
:0043056F F7D8                    neg eax
:00430571 1BC0                    sbb eax, eax
:00430573 83E002                  and eax, 00000002
:00430576 8A4D20                  mov cl, byte ptr [ebp+20]
:00430579 02C8                    add cl, al
:0043057B 884D20                  mov byte ptr [ebp+20], cl
:0043057E 8B9584FEFFFF            mov edx, dword ptr [ebp+FFFFFE84]
:00430584 81E2FF000000            and edx, 000000FF
:0043058A 85D2                    test edx, edx
:0043058C 7429                    je 004305B7
:0043058E 8B8560FEFFFF            mov eax, dword ptr [ebp+FFFFFE60]
:00430594 25FF000000              and eax, 000000FF
:00430599 8B4D14                  mov ecx, dword ptr [ebp+14]
:0043059C 81E1FF000000            and ecx, 000000FF
:004305A2 3BC1                    cmp eax, ecx
:004305A4 7E06                    jle 004305AC
:004305A6 C645DC01                mov [ebp-24], 01
:004305AA EB09                    jmp 004305B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004305A4(C)
|
:004305AC 8A9560FEFFFF            mov dl, byte ptr [ebp+FFFFFE60]
:004305B2 885514                  mov byte ptr [ebp+14], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004305AA(U)
|
:004305B5 EB21                    jmp 004305D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043058C(C)
|
:004305B7 8B8560FEFFFF            mov eax, dword ptr [ebp+FFFFFE60]
:004305BD 25FF000000              and eax, 000000FF
:004305C2 8B4D14                  mov ecx, dword ptr [ebp+14]
:004305C5 81E1FF000000            and ecx, 000000FF
:004305CB 3BC1                    cmp eax, ecx
:004305CD 7F09                    jg 004305D8
:004305CF 8A9560FEFFFF            mov dl, byte ptr [ebp+FFFFFE60]
:004305D5 885514                  mov byte ptr [ebp+14], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004305B5(U), :004305CD(C)
|
:004305D8 8A4514                  mov al, byte ptr [ebp+14]
:004305DB 50                      push eax
:004305DC 8A4D20                  mov cl, byte ptr [ebp+20]
:004305DF 51                      push ecx
:004305E0 8B551C                  mov edx, dword ptr [ebp+1C]
:004305E3 52                      push edx
:004305E4 8B4510                  mov eax, dword ptr [ebp+10]
:004305E7 50                      push eax
:004305E8 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:004305EE E8ED160000              call 00431CE0
:004305F3 C745FC00000000          mov [ebp-04], 00000000
:004305FA 8B4D14                  mov ecx, dword ptr [ebp+14]
:004305FD 81E1FF000000            and ecx, 000000FF
:00430603 8B55F0                  mov edx, dword ptr [ebp-10]
:00430606 81E2FF000000            and edx, 000000FF
:0043060C 0FAFCA                  imul ecx, edx
:0043060F 8B8568FEFFFF            mov eax, dword ptr [ebp+FFFFFE68]
:00430615 8D4C410F                lea ecx, dword ptr [ecx+2*eax+0F]
:00430619 C1E904                  shr ecx, 04
:0043061C C1E104                  shl ecx, 04
:0043061F 898D80FEFFFF            mov dword ptr [ebp+FFFFFE80], ecx
:00430625 837D0810                cmp dword ptr [ebp+08], 00000010
:00430629 7307                    jnb 00430632
:0043062B C7450810000000          mov [ebp+08], 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430629(C)
|
:00430632 8B5520                  mov edx, dword ptr [ebp+20]
:00430635 81E2FF000000            and edx, 000000FF
:0043063B 8B4508                  mov eax, dword ptr [ebp+08]
:0043063E 8D4CD030                lea ecx, dword ptr [eax+8*edx+30]
:00430642 81F978020000            cmp ecx, 00000278
:00430648 721A                    jb 00430664
:0043064A 8B5520                  mov edx, dword ptr [ebp+20]
:0043064D 81E2FF000000            and edx, 000000FF
:00430653 8D04D530000000          lea eax, dword ptr [8*edx+00000030]
:0043065A B978020000              mov ecx, 00000278
:0043065F 2BC8                    sub ecx, eax
:00430661 894D08                  mov dword ptr [ebp+08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430648(C)
|
:00430664 837D0C30                cmp dword ptr [ebp+0C], 00000030
:00430668 7307                    jnb 00430671
:0043066A C7450C30000000          mov [ebp+0C], 00000030

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430668(C)
|
:00430671 8B550C                  mov edx, dword ptr [ebp+0C]
:00430674 039580FEFFFF            add edx, dword ptr [ebp+FFFFFE80]
:0043067A 81FAA8010000            cmp edx, 000001A8
:00430680 720E                    jb 00430690
:00430682 B8A8010000              mov eax, 000001A8
:00430687 2B8580FEFFFF            sub eax, dword ptr [ebp+FFFFFE80]
:0043068D 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430680(C)
|
:00430690 E8DD0EFEFF              call 00411572
:00430695 F7D8                    neg eax
:00430697 1BC0                    sbb eax, eax
:00430699 83E003                  and eax, 00000003
:0043069C 83C002                  add eax, 00000002
:0043069F 888588FEFFFF            mov byte ptr [ebp+FFFFFE88], al
:004306A5 6A00                    push 00000000
:004306A7 E8DEE8FFFF              call 0042EF8A
:004306AC 83C404                  add esp, 00000004
:004306AF 8B4D20                  mov ecx, dword ptr [ebp+20]
:004306B2 81E1FF000000            and ecx, 000000FF
:004306B8 8B55DC                  mov edx, dword ptr [ebp-24]
:004306BB 81E2FF000000            and edx, 000000FF
:004306C1 83EA01                  sub edx, 00000001
:004306C4 F7DA                    neg edx
:004306C6 1BD2                    sbb edx, edx
:004306C8 83E2F0                  and edx, FFFFFFF0
:004306CB 83C210                  add edx, 00000010
:004306CE 8D44CA10                lea eax, dword ptr [edx+8*ecx+10]
:004306D2 8945E0                  mov dword ptr [ebp-20], eax
:004306D5 8B8D70FEFFFF            mov ecx, dword ptr [ebp+FFFFFE70]
:004306DB 81E1FF000000            and ecx, 000000FF
:004306E1 85C9                    test ecx, ecx
:004306E3 7431                    je 00430716
:004306E5 6A00                    push 00000000
:004306E7 8B9588FEFFFF            mov edx, dword ptr [ebp+FFFFFE88]
:004306ED 81E2FF000000            and edx, 000000FF
:004306F3 52                      push edx
:004306F4 8B8580FEFFFF            mov eax, dword ptr [ebp+FFFFFE80]
:004306FA 50                      push eax
:004306FB 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004306FE 83C110                  add ecx, 00000010
:00430701 51                      push ecx
:00430702 8B550C                  mov edx, dword ptr [ebp+0C]
:00430705 52                      push edx
:00430706 8B4508                  mov eax, dword ptr [ebp+08]
:00430709 50                      push eax
:0043070A B978544B00              mov ecx, 004B5478
:0043070F E8C17B0300              call 004682D5
:00430714 EB2D                    jmp 00430743

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004306E3(C)
|
:00430716 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:0043071C 81E1FF000000            and ecx, 000000FF
:00430722 51                      push ecx
:00430723 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:00430729 52                      push edx
:0043072A 8B45E0                  mov eax, dword ptr [ebp-20]
:0043072D 83C010                  add eax, 00000010
:00430730 50                      push eax
:00430731 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430734 51                      push ecx
:00430735 8B5508                  mov edx, dword ptr [ebp+08]
:00430738 52                      push edx
:00430739 B978544B00              mov ecx, 004B5478
:0043073E E8667D0300              call 004684A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430714(U)
|
:00430743 8B8580FEFFFF            mov eax, dword ptr [ebp+FFFFFE80]
:00430749 83E810                  sub eax, 00000010
:0043074C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043074F 81E1FF000000            and ecx, 000000FF
:00430755 8B5514                  mov edx, dword ptr [ebp+14]
:00430758 81E2FF000000            and edx, 000000FF
:0043075E 0FAFCA                  imul ecx, edx
:00430761 2BC1                    sub eax, ecx
:00430763 D1E8                    shr eax, 1
:00430765 8B8D68FEFFFF            mov ecx, dword ptr [ebp+FFFFFE68]
:0043076B 03C8                    add ecx, eax
:0043076D 898D68FEFFFF            mov dword ptr [ebp+FFFFFE68], ecx
:00430773 8B5520                  mov edx, dword ptr [ebp+20]
:00430776 81E2FF000000            and edx, 000000FF
:0043077C 8B4508                  mov eax, dword ptr [ebp+08]
:0043077F 8D4CD010                lea ecx, dword ptr [eax+8*edx+10]
:00430783 894DE4                  mov dword ptr [ebp-1C], ecx
:00430786 8B9560FEFFFF            mov edx, dword ptr [ebp+FFFFFE60]
:0043078C 81E2FF000000            and edx, 000000FF
:00430792 52                      push edx
:00430793 8B4514                  mov eax, dword ptr [ebp+14]
:00430796 25FF000000              and eax, 000000FF
:0043079B 50                      push eax
:0043079C 8B4D14                  mov ecx, dword ptr [ebp+14]
:0043079F 81E1FF000000            and ecx, 000000FF
:004307A5 8B55F0                  mov edx, dword ptr [ebp-10]
:004307A8 81E2FF000000            and edx, 000000FF
:004307AE 0FAFCA                  imul ecx, edx
:004307B1 51                      push ecx
:004307B2 8B450C                  mov eax, dword ptr [ebp+0C]
:004307B5 038568FEFFFF            add eax, dword ptr [ebp+FFFFFE68]
:004307BB 50                      push eax
:004307BC 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004307BF C1E903                  shr ecx, 03
:004307C2 51                      push ecx
:004307C3 8D4DC0                  lea ecx, dword ptr [ebp-40]
:004307C6 E895140000              call 00431C60
:004307CB C645FC01                mov [ebp-04], 01
:004307CF 8B55DC                  mov edx, dword ptr [ebp-24]
:004307D2 81E2FF000000            and edx, 000000FF
:004307D8 83FA01                  cmp edx, 00000001
:004307DB 7529                    jne 00430806
:004307DD 837D2400                cmp dword ptr [ebp+24], 00000000
:004307E1 741B                    je 004307FE
:004307E3 8B4518                  mov eax, dword ptr [ebp+18]
:004307E6 25FF000000              and eax, 000000FF
:004307EB 83E020                  and eax, 00000020
:004307EE 85C0                    test eax, eax
:004307F0 740C                    je 004307FE
:004307F2 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004307F5 51                      push ecx
:004307F6 8D4DC0                  lea ecx, dword ptr [ebp-40]
:004307F9 E835810300              call 00468933

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004307E1(C), :004307F0(C)
|
:004307FE 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00430801 E8BE7D0300              call 004685C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004307DB(C)
|
:00430806 8B9584FEFFFF            mov edx, dword ptr [ebp+FFFFFE84]
:0043080C 81E2FF000000            and edx, 000000FF
:00430812 85D2                    test edx, edx
:00430814 0F8446010000            je 00430960

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043081A 6A04                    push 00000004
:0043081C B9306D4800              mov ecx, 00486D30
:00430821 E82E58FDFF              call 00406054
:00430826 6A10                    push 00000010
:00430828 B9306D4800              mov ecx, 00486D30
:0043082D E88657FDFF              call 00405FB8
:00430832 6A00                    push 00000000
:00430834 B9306D4800              mov ecx, 00486D30
:00430839 E8B257FDFF              call 00405FF0
:0043083E C68588FEFFFF00          mov byte ptr [ebp+FFFFFE88], 00
:00430845 EB0E                    jmp 00430855

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043094D(U)
|
:00430847 8A8588FEFFFF            mov al, byte ptr [ebp+FFFFFE88]
:0043084D 0401                    add al, 01
:0043084F 888588FEFFFF            mov byte ptr [ebp+FFFFFE88], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430845(U)
|
:00430855 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:0043085B 81E1FF000000            and ecx, 000000FF
:00430861 8B5514                  mov edx, dword ptr [ebp+14]
:00430864 81E2FF000000            and edx, 000000FF
:0043086A 3BCA                    cmp ecx, edx
:0043086C 0F8DE0000000            jnl 00430952
:00430872 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:00430878 25FF000000              and eax, 000000FF
:0043087D 0345E8                  add eax, dword ptr [ebp-18]
:00430880 8B4D10                  mov ecx, dword ptr [ebp+10]
:00430883 8B1481                  mov edx, dword ptr [ecx+4*eax]
:00430886 52                      push edx
:00430887 E8847C0400              call 00478510
:0043088C 83C404                  add esp, 00000004
:0043088F 898574FEFFFF            mov dword ptr [ebp+FFFFFE74], eax
:00430895 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430898 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:0043089E 8B45F0                  mov eax, dword ptr [ebp-10]
:004308A1 25FF000000              and eax, 000000FF
:004308A6 83E810                  sub eax, 00000010
:004308A9 99                      cdq
:004308AA 2BC2                    sub eax, edx
:004308AC D1F8                    sar eax, 1
:004308AE 03C8                    add ecx, eax
:004308B0 8B9588FEFFFF            mov edx, dword ptr [ebp+FFFFFE88]
:004308B6 81E2FF000000            and edx, 000000FF
:004308BC 8B45F0                  mov eax, dword ptr [ebp-10]
:004308BF 25FF000000              and eax, 000000FF
:004308C4 0FAFD0                  imul edx, eax
:004308C7 03CA                    add ecx, edx
:004308C9 51                      push ecx
:004308CA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004308CD C1E903                  shr ecx, 03
:004308D0 8B5520                  mov edx, dword ptr [ebp+20]
:004308D3 81E2FF000000            and edx, 000000FF
:004308D9 2B9574FEFFFF            sub edx, dword ptr [ebp+FFFFFE74]
:004308DF D1EA                    shr edx, 1
:004308E1 8D441101                lea eax, dword ptr [ecx+edx+01]
:004308E5 50                      push eax
:004308E6 B9306D4800              mov ecx, 00486D30
:004308EB E81B56FDFF              call 00405F0B
:004308F0 837D1C00                cmp dword ptr [ebp+1C], 00000000
:004308F4 742F                    je 00430925
:004308F6 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:004308FC 81E1FF000000            and ecx, 000000FF
:00430902 034DE8                  add ecx, dword ptr [ebp-18]
:00430905 8B551C                  mov edx, dword ptr [ebp+1C]
:00430908 33C0                    xor eax, eax
:0043090A 8A040A                  mov al, byte ptr [edx+ecx]
:0043090D 83E801                  sub eax, 00000001
:00430910 F7D8                    neg eax
:00430912 1BC0                    sbb eax, eax
:00430914 83E004                  and eax, 00000004
:00430917 83C00C                  add eax, 0000000C
:0043091A 50                      push eax
:0043091B B9306D4800              mov ecx, 00486D30
:00430920 E89356FDFF              call 00405FB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004308F4(C)
|
:00430925 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:0043092B 81E1FF000000            and ecx, 000000FF
:00430931 034DE8                  add ecx, dword ptr [ebp-18]
:00430934 8B5510                  mov edx, dword ptr [ebp+10]
:00430937 8B048A                  mov eax, dword ptr [edx+4*ecx]
:0043093A 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043093B 6830DB4700              push 0047DB30
:00430940 68306D4800              push 00486D30
:00430945 E88E62FDFF              call 00406BD8
:0043094A 83C40C                  add esp, 0000000C
:0043094D E9F5FEFFFF              jmp 00430847

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043086C(C)
|
:00430952 6A10                    push 00000010
:00430954 B9306D4800              mov ecx, 00486D30
:00430959 E85A56FDFF              call 00405FB8
:0043095E EB23                    jmp 00430983

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430814(C)
|
:00430960 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00430962 6A14                    push 00000014
:00430964 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430967 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:0043096D 51                      push ecx
:0043096E 8B5508                  mov edx, dword ptr [ebp+08]
:00430971 C1EA03                  shr edx, 03
:00430974 83C201                  add edx, 00000001
:00430977 52                      push edx
:00430978 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:0043097E E8C9850300              call 00468F4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043095E(U)
|
:00430983 B928B44800              mov ecx, 0048B428
:00430988 E8C294FEFF              call 00419E4F
:0043098D C78564FEFFFFFEFF0000    mov dword ptr [ebp+FFFFFE64], 0000FFFE
:00430997 E854EDFFFF              call 0042F6F0
:0043099C C7856CFEFFFF01000000    mov dword ptr [ebp+FFFFFE6C], 00000001
:004309A6 C745D8FEFF0000          mov [ebp-28], 0000FFFE
:004309AD C78578FEFFFF00000000    mov dword ptr [ebp+FFFFFE78], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430F3A(U)
|
:004309B7 83BD6CFEFFFF00          cmp dword ptr [ebp+FFFFFE6C], 00000000
:004309BE 0F847B050000            je 00430F3F
:004309C4 E88D6A0400              call 00477456
:004309C9 8B8584FEFFFF            mov eax, dword ptr [ebp+FFFFFE84]
:004309CF 25FF000000              and eax, 000000FF
:004309D4 85C0                    test eax, eax
:004309D6 7573                    jne 00430A4B
:004309D8 6A00                    push 00000000
:004309DA E8ABE5FFFF              call 0042EF8A
:004309DF 83C404                  add esp, 00000004
:004309E2 B928B44800              mov ecx, 0048B428
:004309E7 E8618EFEFF              call 0041984D
:004309EC 83F801                  cmp eax, 00000001
:004309EF 7555                    jne 00430A46
:004309F1 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:004309F7 E84A860300              call 00469046
:004309FC 25FF000000              and eax, 000000FF
:00430A01 898564FEFFFF            mov dword ptr [ebp+FFFFFE64], eax
:00430A07 81BD64FEFFFFFF000000    cmp dword ptr [ebp+FFFFFE64], 000000FF
:00430A11 7405                    je 00430A18
:00430A13 E927050000              jmp 00430F3F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430A11(C)
|
:00430A18 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:00430A1E E87B860300              call 0046909E
:00430A23 85C0                    test eax, eax
:00430A25 751F                    jne 00430A46
:00430A27 8B4D18                  mov ecx, dword ptr [ebp+18]
:00430A2A 81E1FF000000            and ecx, 000000FF
:00430A30 83E101                  and ecx, 00000001
:00430A33 85C9                    test ecx, ecx
:00430A35 750F                    jne 00430A46
:00430A37 C78564FEFFFFFEFF0000    mov dword ptr [ebp+FFFFFE64], 0000FFFE
:00430A41 E9F9040000              jmp 00430F3F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004309EF(C), :00430A25(C), :00430A35(C)
|
:00430A46 E9C5040000              jmp 00430F10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004309D6(C)
|
:00430A4B B928B44800              mov ecx, 0048B428
:00430A50 E8AD8DFEFF              call 00419802
:00430A55 B928B44800              mov ecx, 0048B428
:00430A5A E8078EFEFF              call 00419866
:00430A5F 89855CFEFFFF            mov dword ptr [ebp+FFFFFE5C], eax
:00430A65 B928B44800              mov ecx, 0048B428
:00430A6A E8088EFEFF              call 00419877
:00430A6F 898558FEFFFF            mov dword ptr [ebp+FFFFFE58], eax
:00430A75 C78554FEFFFF00000000    mov dword ptr [ebp+FFFFFE54], 00000000
:00430A7F 8B955CFEFFFF            mov edx, dword ptr [ebp+FFFFFE5C]
:00430A85 3B5508                  cmp edx, dword ptr [ebp+08]
:00430A88 7267                    jb 00430AF1
:00430A8A 8B855CFEFFFF            mov eax, dword ptr [ebp+FFFFFE5C]
:00430A90 3B45E4                  cmp eax, dword ptr [ebp-1C]
:00430A93 735C                    jnb 00430AF1
:00430A95 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430A98 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:00430A9E 398D58FEFFFF            cmp dword ptr [ebp+FFFFFE58], ecx
:00430AA4 724B                    jb 00430AF1
:00430AA6 8B5514                  mov edx, dword ptr [ebp+14]
:00430AA9 81E2FF000000            and edx, 000000FF
:00430AAF 8B45F0                  mov eax, dword ptr [ebp-10]
:00430AB2 25FF000000              and eax, 000000FF
:00430AB7 0FAFD0                  imul edx, eax
:00430ABA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430ABD 03CA                    add ecx, edx
:00430ABF 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:00430AC5 398D58FEFFFF            cmp dword ptr [ebp+FFFFFE58], ecx
:00430ACB 7324                    jnb 00430AF1
:00430ACD 8B8558FEFFFF            mov eax, dword ptr [ebp+FFFFFE58]
:00430AD3 2B450C                  sub eax, dword ptr [ebp+0C]
:00430AD6 2B8568FEFFFF            sub eax, dword ptr [ebp+FFFFFE68]
:00430ADC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00430ADF 81E1FF000000            and ecx, 000000FF
:00430AE5 33D2                    xor edx, edx
:00430AE7 F7F1                    div ecx
:00430AE9 898564FEFFFF            mov dword ptr [ebp+FFFFFE64], eax
:00430AEF EB65                    jmp 00430B56

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430A88(C), :00430A93(C), :00430AA4(C), :00430ACB(C)
|
:00430AF1 C78564FEFFFFFEFF0000    mov dword ptr [ebp+FFFFFE64], 0000FFFE
:00430AFB 8B955CFEFFFF            mov edx, dword ptr [ebp+FFFFFE5C]
:00430B01 3B55E4                  cmp edx, dword ptr [ebp-1C]
:00430B04 7250                    jb 00430B56
:00430B06 8B45E4                  mov eax, dword ptr [ebp-1C]
:00430B09 83C010                  add eax, 00000010
:00430B0C 39855CFEFFFF            cmp dword ptr [ebp+FFFFFE5C], eax
:00430B12 7342                    jnb 00430B56
:00430B14 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430B17 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:00430B1D 398D58FEFFFF            cmp dword ptr [ebp+FFFFFE58], ecx
:00430B23 7231                    jb 00430B56
:00430B25 8B5514                  mov edx, dword ptr [ebp+14]
:00430B28 81E2FF000000            and edx, 000000FF
:00430B2E 8B45F0                  mov eax, dword ptr [ebp-10]
:00430B31 25FF000000              and eax, 000000FF
:00430B36 0FAFD0                  imul edx, eax
:00430B39 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430B3C 03CA                    add ecx, edx
:00430B3E 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:00430B44 398D58FEFFFF            cmp dword ptr [ebp+FFFFFE58], ecx
:00430B4A 730A                    jnb 00430B56
:00430B4C C78554FEFFFF01000000    mov dword ptr [ebp+FFFFFE54], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430AEF(U), :00430B04(C), :00430B12(C), :00430B23(C), :00430B4A(C)
|
:00430B56 8B55D8                  mov edx, dword ptr [ebp-28]
:00430B59 3B9564FEFFFF            cmp edx, dword ptr [ebp+FFFFFE64]
:00430B5F 0F8419010000            je 00430C7E
:00430B65 817DD8FEFF0000          cmp dword ptr [ebp-28], 0000FFFE
:00430B6C 7462                    je 00430BD0
:00430B6E 83BD78FEFFFF01          cmp dword ptr [ebp+FFFFFE78], 00000001
:00430B75 744F                    je 00430BC6
:00430B77 6A00                    push 00000000
:00430B79 E8914A0400              call 0047560F
:00430B7E 83C404                  add esp, 00000004
:00430B81 B9D01C4B00              mov ecx, 004B1CD0
:00430B86 E835F3FDFF              call 0040FEC0
:00430B8B 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00430B8C 6A14                    push 00000014
:00430B8E 8B4520                  mov eax, dword ptr [ebp+20]
:00430B91 25FF000000              and eax, 000000FF
:00430B96 C1E003                  shl eax, 03
:00430B99 50                      push eax
:00430B9A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430B9D 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:00430BA3 8B55F0                  mov edx, dword ptr [ebp-10]
:00430BA6 81E2FF000000            and edx, 000000FF
:00430BAC 8B45D8                  mov eax, dword ptr [ebp-28]
:00430BAF 0FAFC2                  imul eax, edx
:00430BB2 03C8                    add ecx, eax
:00430BB4 51                      push ecx
:00430BB5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00430BB8 83C108                  add ecx, 00000008
:00430BBB 51                      push ecx
:00430BBC E8335F0400              call 00476AF4
:00430BC1 83C414                  add esp, 00000014
:00430BC4 EB0A                    jmp 00430BD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430B75(C)
|
:00430BC6 C78578FEFFFF00000000    mov dword ptr [ebp+FFFFFE78], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430B6C(C), :00430BC4(U)
|
:00430BD0 81BD64FEFFFFFEFF0000    cmp dword ptr [ebp+FFFFFE64], 0000FFFE
:00430BDA 0F848B000000            je 00430C6B
:00430BE0 B9D01C4B00              mov ecx, 004B1CD0
:00430BE5 E8D6F2FDFF              call 0040FEC0
:00430BEA 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00430BEB 6A14                    push 00000014
:00430BED 8B5520                  mov edx, dword ptr [ebp+20]
:00430BF0 81E2FF000000            and edx, 000000FF
:00430BF6 C1E203                  shl edx, 03
:00430BF9 52                      push edx
:00430BFA 8B450C                  mov eax, dword ptr [ebp+0C]
:00430BFD 038568FEFFFF            add eax, dword ptr [ebp+FFFFFE68]
:00430C03 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00430C06 81E1FF000000            and ecx, 000000FF
:00430C0C 8B9564FEFFFF            mov edx, dword ptr [ebp+FFFFFE64]
:00430C12 0FAFD1                  imul edx, ecx
:00430C15 03C2                    add eax, edx
:00430C17 50                      push eax
:00430C18 8B4508                  mov eax, dword ptr [ebp+08]
:00430C1B 83C008                  add eax, 00000008
:00430C1E 50                      push eax
:00430C1F E886600400              call 00476CAA
:00430C24 83C414                  add esp, 00000014

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00430C27 6A07                    push 00000007
:00430C29 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00430C2B 6A14                    push 00000014
:00430C2D 8B4D20                  mov ecx, dword ptr [ebp+20]
:00430C30 81E1FF000000            and ecx, 000000FF
:00430C36 8D14CDF8FFFFFF          lea edx, dword ptr [8*ecx+FFFFFFF8]
:00430C3D 52                      push edx
:00430C3E 8B450C                  mov eax, dword ptr [ebp+0C]
:00430C41 038568FEFFFF            add eax, dword ptr [ebp+FFFFFE68]
:00430C47 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00430C4A 81E1FF000000            and ecx, 000000FF
:00430C50 8B9564FEFFFF            mov edx, dword ptr [ebp+FFFFFE64]
:00430C56 0FAFD1                  imul edx, ecx
:00430C59 03C2                    add eax, edx
:00430C5B 50                      push eax
:00430C5C 8B4508                  mov eax, dword ptr [ebp+08]
:00430C5F 83C00C                  add eax, 0000000C
:00430C62 50                      push eax
:00430C63 E893F5FDFF              call 004101FB
:00430C68 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430BDA(C)
|
:00430C6B B928B44800              mov ecx, 0048B428
:00430C70 E8DA91FEFF              call 00419E4F
:00430C75 8B8D64FEFFFF            mov ecx, dword ptr [ebp+FFFFFE64]
:00430C7B 894DD8                  mov dword ptr [ebp-28], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430B5F(C)
|
:00430C7E B928B44800              mov ecx, 0048B428
:00430C83 E8C58BFEFF              call 0041984D
:00430C88 83F801                  cmp eax, 00000001
:00430C8B 0F857F020000            jne 00430F10
:00430C91 C78578FEFFFF00000000    mov dword ptr [ebp+FFFFFE78], 00000000
:00430C9B 8B55DC                  mov edx, dword ptr [ebp-24]
:00430C9E 81E2FF000000            and edx, 000000FF
:00430CA4 83FA01                  cmp edx, 00000001
:00430CA7 7529                    jne 00430CD2
:00430CA9 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00430CAC E844790300              call 004685F5
:00430CB1 898548FEFFFF            mov dword ptr [ebp+FFFFFE48], eax
:00430CB7 8B8548FEFFFF            mov eax, dword ptr [ebp+FFFFFE48]
:00430CBD 3B45E8                  cmp eax, dword ptr [ebp-18]
:00430CC0 7410                    je 00430CD2
:00430CC2 8B8D48FEFFFF            mov ecx, dword ptr [ebp+FFFFFE48]
:00430CC8 894DE8                  mov dword ptr [ebp-18], ecx
:00430CCB C745EC01000000          mov [ebp-14], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430CA7(C), :00430CC0(C)
|
:00430CD2 B928B44800              mov ecx, 0048B428
:00430CD7 E8268BFEFF              call 00419802
:00430CDC B928B44800              mov ecx, 0048B428
:00430CE1 E8808BFEFF              call 00419866
:00430CE6 898550FEFFFF            mov dword ptr [ebp+FFFFFE50], eax
:00430CEC B928B44800              mov ecx, 0048B428
:00430CF1 E8818BFEFF              call 00419877
:00430CF6 89854CFEFFFF            mov dword ptr [ebp+FFFFFE4C], eax
:00430CFC 8B9550FEFFFF            mov edx, dword ptr [ebp+FFFFFE50]
:00430D02 3B5508                  cmp edx, dword ptr [ebp+08]
:00430D05 7245                    jb 00430D4C
:00430D07 8B8550FEFFFF            mov eax, dword ptr [ebp+FFFFFE50]
:00430D0D 3B45E4                  cmp eax, dword ptr [ebp-1C]
:00430D10 733A                    jnb 00430D4C
:00430D12 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430D15 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:00430D1B 398D4CFEFFFF            cmp dword ptr [ebp+FFFFFE4C], ecx
:00430D21 7229                    jb 00430D4C
:00430D23 8B5514                  mov edx, dword ptr [ebp+14]
:00430D26 81E2FF000000            and edx, 000000FF
:00430D2C 8B45F0                  mov eax, dword ptr [ebp-10]
:00430D2F 25FF000000              and eax, 000000FF
:00430D34 0FAFD0                  imul edx, eax
:00430D37 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00430D3A 03CA                    add ecx, edx
:00430D3C 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:00430D42 398D4CFEFFFF            cmp dword ptr [ebp+FFFFFE4C], ecx
:00430D48 7302                    jnb 00430D4C
:00430D4A EB0A                    jmp 00430D56

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430D05(C), :00430D10(C), :00430D21(C), :00430D48(C)
|
:00430D4C C78564FEFFFFFF000000    mov dword ptr [ebp+FFFFFE64], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430D4A(U)
|
:00430D56 837DEC00                cmp dword ptr [ebp-14], 00000000
:00430D5A 0F8482010000            je 00430EE2
:00430D60 C78578FEFFFF01000000    mov dword ptr [ebp+FFFFFE78], 00000001
:00430D6A C745D8FF000000          mov [ebp-28], 000000FF
:00430D71 8B55D8                  mov edx, dword ptr [ebp-28]
:00430D74 899564FEFFFF            mov dword ptr [ebp+FFFFFE64], edx
:00430D7A 68FFFF0000              push 0000FFFF
:00430D7F 8B4514                  mov eax, dword ptr [ebp+14]
:00430D82 25FF000000              and eax, 000000FF
:00430D87 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00430D8A 81E1FF000000            and ecx, 000000FF
:00430D90 0FAFC1                  imul eax, ecx
:00430D93 50                      push eax
:00430D94 8B5520                  mov edx, dword ptr [ebp+20]
:00430D97 81E2FF000000            and edx, 000000FF
:00430D9D C1E203                  shl edx, 03
:00430DA0 52                      push edx
:00430DA1 8B450C                  mov eax, dword ptr [ebp+0C]
:00430DA4 038568FEFFFF            add eax, dword ptr [ebp+FFFFFE68]
:00430DAA 50                      push eax
:00430DAB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00430DAE 83C108                  add ecx, 00000008
:00430DB1 51                      push ecx
:00430DB2 E804F7FDFF              call 004104BB
:00430DB7 83C414                  add esp, 00000014
:00430DBA C68588FEFFFF00          mov byte ptr [ebp+FFFFFE88], 00
:00430DC1 EB0F                    jmp 00430DD2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430EC7(U)
|
:00430DC3 8A9588FEFFFF            mov dl, byte ptr [ebp+FFFFFE88]
:00430DC9 80C201                  add dl, 01
:00430DCC 889588FEFFFF            mov byte ptr [ebp+FFFFFE88], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430DC1(U)
|
:00430DD2 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:00430DD8 25FF000000              and eax, 000000FF
:00430DDD 8B4D14                  mov ecx, dword ptr [ebp+14]
:00430DE0 81E1FF000000            and ecx, 000000FF
:00430DE6 3BC1                    cmp eax, ecx
:00430DE8 0F8DDE000000            jnl 00430ECC
:00430DEE 8B9588FEFFFF            mov edx, dword ptr [ebp+FFFFFE88]
:00430DF4 81E2FF000000            and edx, 000000FF
:00430DFA 0355E8                  add edx, dword ptr [ebp-18]
:00430DFD 8B4510                  mov eax, dword ptr [ebp+10]
:00430E00 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:00430E03 51                      push ecx
:00430E04 E807770400              call 00478510
:00430E09 83C404                  add esp, 00000004
:00430E0C 898574FEFFFF            mov dword ptr [ebp+FFFFFE74], eax
:00430E12 8B8D88FEFFFF            mov ecx, dword ptr [ebp+FFFFFE88]
:00430E18 81E1FF000000            and ecx, 000000FF
:00430E1E 8B55F0                  mov edx, dword ptr [ebp-10]
:00430E21 81E2FF000000            and edx, 000000FF
:00430E27 0FAFCA                  imul ecx, edx
:00430E2A 034D0C                  add ecx, dword ptr [ebp+0C]
:00430E2D 038D68FEFFFF            add ecx, dword ptr [ebp+FFFFFE68]
:00430E33 8B45F0                  mov eax, dword ptr [ebp-10]
:00430E36 25FF000000              and eax, 000000FF
:00430E3B 83E810                  sub eax, 00000010
:00430E3E 99                      cdq
:00430E3F 2BC2                    sub eax, edx
:00430E41 D1F8                    sar eax, 1
:00430E43 03C8                    add ecx, eax
:00430E45 51                      push ecx
:00430E46 8B4508                  mov eax, dword ptr [ebp+08]
:00430E49 C1E803                  shr eax, 03
:00430E4C 8B4D20                  mov ecx, dword ptr [ebp+20]
:00430E4F 81E1FF000000            and ecx, 000000FF
:00430E55 2B8D74FEFFFF            sub ecx, dword ptr [ebp+FFFFFE74]
:00430E5B D1E9                    shr ecx, 1
:00430E5D 8D540801                lea edx, dword ptr [eax+ecx+01]
:00430E61 52                      push edx
:00430E62 B9306D4800              mov ecx, 00486D30
:00430E67 E89F50FDFF              call 00405F0B
:00430E6C 837D1C00                cmp dword ptr [ebp+1C], 00000000
:00430E70 742E                    je 00430EA0
:00430E72 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:00430E78 25FF000000              and eax, 000000FF
:00430E7D 0345E8                  add eax, dword ptr [ebp-18]
:00430E80 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:00430E83 33D2                    xor edx, edx
:00430E85 8A1401                  mov dl, byte ptr [ecx+eax]
:00430E88 83EA01                  sub edx, 00000001
:00430E8B F7DA                    neg edx
:00430E8D 1BD2                    sbb edx, edx
:00430E8F 83E204                  and edx, 00000004
:00430E92 83C20C                  add edx, 0000000C
:00430E95 52                      push edx
:00430E96 B9306D4800              mov ecx, 00486D30
:00430E9B E81851FDFF              call 00405FB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430E70(C)
|
:00430EA0 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:00430EA6 25FF000000              and eax, 000000FF
:00430EAB 0345E8                  add eax, dword ptr [ebp-18]
:00430EAE 8B4D10                  mov ecx, dword ptr [ebp+10]
:00430EB1 8B1481                  mov edx, dword ptr [ecx+4*eax]
:00430EB4 52                      push edx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00430EB5 6834DB4700              push 0047DB34
:00430EBA 68306D4800              push 00486D30
:00430EBF E8145DFDFF              call 00406BD8
:00430EC4 83C40C                  add esp, 0000000C
:00430EC7 E9F7FEFFFF              jmp 00430DC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430DE8(C)
|
:00430ECC B928B44800              mov ecx, 0048B428
:00430ED1 E8798FFEFF              call 00419E4F
:00430ED6 C745EC00000000          mov [ebp-14], 00000000
:00430EDD E80EE8FFFF              call 0042F6F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430D5A(C)
|
:00430EE2 81BD64FEFFFFFEFF0000    cmp dword ptr [ebp+FFFFFE64], 0000FFFE
:00430EEC 7417                    je 00430F05
:00430EEE 81BD64FEFFFFFF000000    cmp dword ptr [ebp+FFFFFE64], 000000FF
:00430EF8 740B                    je 00430F05
:00430EFA 83BD78FEFFFF01          cmp dword ptr [ebp+FFFFFE78], 00000001
:00430F01 7402                    je 00430F05
:00430F03 EB3A                    jmp 00430F3F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430EEC(C), :00430EF8(C), :00430F01(C)
|
:00430F05 83BD54FEFFFF00          cmp dword ptr [ebp+FFFFFE54], 00000000
:00430F0C 7502                    jne 00430F10
:00430F0E EB2F                    jmp 00430F3F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430A46(U), :00430C8B(C), :00430F0C(C)
|
:00430F10 B928B44800              mov ecx, 0048B428
:00430F15 E83389FEFF              call 0041984D
:00430F1A 83F802                  cmp eax, 00000002
:00430F1D 751B                    jne 00430F3A
:00430F1F 8B4518                  mov eax, dword ptr [ebp+18]
:00430F22 25FF000000              and eax, 000000FF
:00430F27 83E001                  and eax, 00000001
:00430F2A 85C0                    test eax, eax
:00430F2C 750C                    jne 00430F3A
:00430F2E C78564FEFFFFFEFF0000    mov dword ptr [ebp+FFFFFE64], 0000FFFE
:00430F38 EB05                    jmp 00430F3F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430F1D(C), :00430F2C(C)
|
:00430F3A E978FAFFFF              jmp 004309B7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004309BE(C), :00430A13(U), :00430A41(U), :00430F03(U), :00430F0E(U)
|:00430F38(U)
|
:00430F3F E8ACE7FFFF              call 0042F6F0
:00430F44 8B8D70FEFFFF            mov ecx, dword ptr [ebp+FFFFFE70]
:00430F4A 81E1FF000000            and ecx, 000000FF
:00430F50 85C9                    test ecx, ecx
:00430F52 7402                    je 00430F56
:00430F54 EB0A                    jmp 00430F60

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430F52(C)
|
:00430F56 B978544B00              mov ecx, 004B5478
:00430F5B E8B1750300              call 00468511

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430F54(U)
|
:00430F60 837D2400                cmp dword ptr [ebp+24], 00000000
:00430F64 7418                    je 00430F7E
:00430F66 8B5518                  mov edx, dword ptr [ebp+18]
:00430F69 81E2FF000000            and edx, 000000FF
:00430F6F 83E220                  and edx, 00000020
:00430F72 85D2                    test edx, edx
:00430F74 7408                    je 00430F7E
:00430F76 8B4524                  mov eax, dword ptr [ebp+24]
:00430F79 8A4DE8                  mov cl, byte ptr [ebp-18]
:00430F7C 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00430F64(C), :00430F74(C)
|
:00430F7E 81BD64FEFFFFFEFF0000    cmp dword ptr [ebp+FFFFFE64], 0000FFFE
:00430F88 7509                    jne 00430F93
:00430F8A C6853BFEFFFFFF          mov byte ptr [ebp+FFFFFE3B], FF
:00430F91 EB0F                    jmp 00430FA2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430F88(C)
|
:00430F93 8B55E8                  mov edx, dword ptr [ebp-18]
:00430F96 039564FEFFFF            add edx, dword ptr [ebp+FFFFFE64]
:00430F9C 88953BFEFFFF            mov byte ptr [ebp+FFFFFE3B], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430F91(U)
|
:00430FA2 8A853BFEFFFF            mov al, byte ptr [ebp+FFFFFE3B]
:00430FA8 888544FEFFFF            mov byte ptr [ebp+FFFFFE44], al
:00430FAE C645FC00                mov [ebp-04], 00
:00430FB2 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00430FB5 E846DAFFFF              call 0042EA00
:00430FBA C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00430FC1 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:00430FC7 E8A40E0000              call 00431E70
:00430FCC 8A8544FEFFFF            mov al, byte ptr [ebp+FFFFFE44]
:00430FD2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00430FD5 64890D00000000          mov dword ptr fs:[00000000], ecx
:00430FDC 8BE5                    mov esp, ebp
:00430FDE 5D                      pop ebp
:00430FDF C3                      ret



* Referenced by a CALL at Addresses:
|:00431076   , :00431238   , :0043203B   , :00432075   , :00438C5A   
|
:00430FE0 55                      push ebp
:00430FE1 8BEC                    mov ebp, esp
:00430FE3 83EC0C                  sub esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430FFA(U)
|
:00430FE6 8B4508                  mov eax, dword ptr [ebp+08]
:00430FE9 33C9                    xor ecx, ecx
:00430FEB 8A08                    mov cl, byte ptr [eax]
:00430FED 85C9                    test ecx, ecx
:00430FEF 740B                    je 00430FFC
:00430FF1 8B5508                  mov edx, dword ptr [ebp+08]
:00430FF4 83C201                  add edx, 00000001
:00430FF7 895508                  mov dword ptr [ebp+08], edx
:00430FFA EBEA                    jmp 00430FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00430FEF(C)
|
:00430FFC 8D45F4                  lea eax, dword ptr [ebp-0C]
:00430FFF 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431032(C)
|
:00431002 8B450C                  mov eax, dword ptr [ebp+0C]
:00431005 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00431007 B90A000000              mov ecx, 0000000A
:0043100C F7F1                    div ecx
:0043100E 83C230                  add edx, 00000030
:00431011 8B45FC                  mov eax, dword ptr [ebp-04]
:00431014 8810                    mov byte ptr [eax], dl
:00431016 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431019 83C101                  add ecx, 00000001
:0043101C 894DFC                  mov dword ptr [ebp-04], ecx
:0043101F 8B450C                  mov eax, dword ptr [ebp+0C]
:00431022 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00431024 B90A000000              mov ecx, 0000000A
:00431029 F7F1                    div ecx
:0043102B 89450C                  mov dword ptr [ebp+0C], eax
:0043102E 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00431032 75CE                    jne 00431002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431058(C)
|
:00431034 8B55FC                  mov edx, dword ptr [ebp-04]
:00431037 83EA01                  sub edx, 00000001
:0043103A 8955FC                  mov dword ptr [ebp-04], edx
:0043103D 8B4508                  mov eax, dword ptr [ebp+08]
:00431040 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431043 8A11                    mov dl, byte ptr [ecx]
:00431045 8810                    mov byte ptr [eax], dl
:00431047 8B4508                  mov eax, dword ptr [ebp+08]
:0043104A 83C001                  add eax, 00000001
:0043104D 894508                  mov dword ptr [ebp+08], eax
:00431050 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431053 8D55F4                  lea edx, dword ptr [ebp-0C]
:00431056 3BCA                    cmp ecx, edx
:00431058 75DA                    jne 00431034
:0043105A 8B4508                  mov eax, dword ptr [ebp+08]
:0043105D C60000                  mov byte ptr [eax], 00
:00431060 8BE5                    mov esp, ebp
:00431062 5D                      pop ebp
:00431063 C3                      ret



* Referenced by a CALL at Addresses:
|:00431264   , :00449E7D   
|
:00431064 55                      push ebp
:00431065 8BEC                    mov ebp, esp
:00431067 83EC14                  sub esp, 00000014
:0043106A C645F000                mov [ebp-10], 00
:0043106E 8B450C                  mov eax, dword ptr [ebp+0C]
:00431071 50                      push eax
:00431072 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00431075 51                      push ecx
:00431076 E865FFFFFF              call 00430FE0
:0043107B 83C408                  add esp, 00000008
:0043107E 8B5508                  mov edx, dword ptr [ebp+08]
:00431081 8955FC                  mov dword ptr [ebp-04], edx
:00431084 C645EC00                mov [ebp-14], 00
:00431088 EB08                    jmp 00431092

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004310BF(U)
|
:0043108A 8A45EC                  mov al, byte ptr [ebp-14]
:0043108D 0401                    add al, 01
:0043108F 8845EC                  mov byte ptr [ebp-14], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431088(U)
|
:00431092 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00431095 81E1FF000000            and ecx, 000000FF
:0043109B 33D2                    xor edx, edx
:0043109D 8A540DF0                mov dl, byte ptr [ebp+ecx-10]
:004310A1 85D2                    test edx, edx
:004310A3 741C                    je 004310C1
:004310A5 8B45EC                  mov eax, dword ptr [ebp-14]
:004310A8 25FF000000              and eax, 000000FF
:004310AD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004310B0 8A5405F0                mov dl, byte ptr [ebp+eax-10]
:004310B4 8811                    mov byte ptr [ecx], dl
:004310B6 8B45FC                  mov eax, dword ptr [ebp-04]
:004310B9 83C001                  add eax, 00000001
:004310BC 8945FC                  mov dword ptr [ebp-04], eax
:004310BF EBC9                    jmp 0043108A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004310A3(C)
|
:004310C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004310C4 C60100                  mov byte ptr [ecx], 00
:004310C7 8BE5                    mov esp, ebp
:004310C9 5D                      pop ebp
:004310CA C3                      ret



* Referenced by a CALL at Addresses:
|:00431364   , :0043145B   , :0043198F   
|
:004310CB 55                      push ebp
:004310CC 8BEC                    mov ebp, esp
:004310CE 83EC4C                  sub esp, 0000004C
:004310D1 C745F4A83A4B00          mov [ebp-0C], 004B3AA8
:004310D8 8B4508                  mov eax, dword ptr [ebp+08]
:004310DB 8B08                    mov ecx, dword ptr [eax]
:004310DD 894DC0                  mov dword ptr [ebp-40], ecx
:004310E0 8B5508                  mov edx, dword ptr [ebp+08]
:004310E3 83C204                  add edx, 00000004
:004310E6 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043134E(U)
|
:004310E9 8B45C0                  mov eax, dword ptr [ebp-40]
:004310EC 33C9                    xor ecx, ecx
:004310EE 8A08                    mov cl, byte ptr [eax]
:004310F0 85C9                    test ecx, ecx
:004310F2 0F845B020000            je 00431353
:004310F8 8B55C0                  mov edx, dword ptr [ebp-40]
:004310FB 33C0                    xor eax, eax
:004310FD 8A02                    mov al, byte ptr [edx]
:004310FF 3D80000000              cmp eax, 00000080
:00431104 0F8D0C020000            jnl 00431316
:0043110A 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0043110D 33D2                    xor edx, edx
:0043110F 8A11                    mov dl, byte ptr [ecx]
:00431111 83FA25                  cmp edx, 00000025
:00431114 0F85DE010000            jne 004312F8
:0043111A 8B45C0                  mov eax, dword ptr [ebp-40]
:0043111D 83C001                  add eax, 00000001
:00431120 8945C0                  mov dword ptr [ebp-40], eax
:00431123 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00431126 33D2                    xor edx, edx
:00431128 8A11                    mov dl, byte ptr [ecx]
:0043112A 83FA30                  cmp edx, 00000030
:0043112D 7E24                    jle 00431153
:0043112F 8B45C0                  mov eax, dword ptr [ebp-40]
:00431132 33C9                    xor ecx, ecx
:00431134 8A08                    mov cl, byte ptr [eax]
:00431136 83F939                  cmp ecx, 00000039
:00431139 7D18                    jge 00431153
:0043113B 8B55C0                  mov edx, dword ptr [ebp-40]
:0043113E 33C0                    xor eax, eax
:00431140 8A02                    mov al, byte ptr [edx]
:00431142 83E830                  sub eax, 00000030
:00431145 8945FC                  mov dword ptr [ebp-04], eax
:00431148 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0043114B 83C101                  add ecx, 00000001
:0043114E 894DC0                  mov dword ptr [ebp-40], ecx
:00431151 EB07                    jmp 0043115A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043112D(C), :00431139(C)
|
:00431153 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431151(U)
|
:0043115A 8B55C0                  mov edx, dword ptr [ebp-40]
:0043115D 33C0                    xor eax, eax
:0043115F 8A02                    mov al, byte ptr [edx]
:00431161 8945B8                  mov dword ptr [ebp-48], eax
:00431164 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00431167 83C101                  add ecx, 00000001
:0043116A 894DC0                  mov dword ptr [ebp-40], ecx
:0043116D 8B55B8                  mov edx, dword ptr [ebp-48]
:00431170 8955B4                  mov dword ptr [ebp-4C], edx
:00431173 837DB473                cmp dword ptr [ebp-4C], 00000073
:00431177 7419                    je 00431192
:00431179 837DB475                cmp dword ptr [ebp-4C], 00000075
:0043117D 0F849A000000            je 0043121D
:00431183 837DB477                cmp dword ptr [ebp-4C], 00000077
:00431187 0F8490000000            je 0043121D
:0043118D E964010000              jmp 004312F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431177(C)
|
:00431192 8B45F4                  mov eax, dword ptr [ebp-0C]
:00431195 C60000                  mov byte ptr [eax], 00
:00431198 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043119B 8B11                    mov edx, dword ptr [ecx]
:0043119D 52                      push edx
:0043119E 8B45F4                  mov eax, dword ptr [ebp-0C]
:004311A1 50                      push eax
:004311A2 E8A9730400              call 00478550
:004311A7 83C408                  add esp, 00000008
:004311AA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004311AD 8B11                    mov edx, dword ptr [ecx]
:004311AF 52                      push edx
:004311B0 E85B730400              call 00478510
:004311B5 83C404                  add esp, 00000004
:004311B8 8845EC                  mov byte ptr [ebp-14], al
:004311BB 8B45EC                  mov eax, dword ptr [ebp-14]
:004311BE 25FF000000              and eax, 000000FF
:004311C3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004311C6 03C8                    add ecx, eax
:004311C8 894DF4                  mov dword ptr [ebp-0C], ecx
:004311CB 8B55EC                  mov edx, dword ptr [ebp-14]
:004311CE 81E2FF000000            and edx, 000000FF
:004311D4 3955FC                  cmp dword ptr [ebp-04], edx
:004311D7 7636                    jbe 0043120F
:004311D9 C745F000000000          mov [ebp-10], 00000000
:004311E0 EB09                    jmp 004311EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043120D(U)
|
:004311E2 8B45F0                  mov eax, dword ptr [ebp-10]
:004311E5 83C001                  add eax, 00000001
:004311E8 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004311E0(U)
|
:004311EB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004311EE 81E1FF000000            and ecx, 000000FF
:004311F4 8B55FC                  mov edx, dword ptr [ebp-04]
:004311F7 2BD1                    sub edx, ecx
:004311F9 3955F0                  cmp dword ptr [ebp-10], edx
:004311FC 7311                    jnb 0043120F
:004311FE 8B45F4                  mov eax, dword ptr [ebp-0C]
:00431201 C60020                  mov byte ptr [eax], 20
:00431204 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00431207 83C101                  add ecx, 00000001
:0043120A 894DF4                  mov dword ptr [ebp-0C], ecx
:0043120D EBD3                    jmp 004311E2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004311D7(C), :004311FC(C)
|
:0043120F 8B55F8                  mov edx, dword ptr [ebp-08]
:00431212 83C204                  add edx, 00000004
:00431215 8955F8                  mov dword ptr [ebp-08], edx
:00431218 E9D9000000              jmp 004312F6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043117D(C), :00431187(C)
|
:0043121D C645C400                mov [ebp-3C], 00
:00431221 8B45C0                  mov eax, dword ptr [ebp-40]
:00431224 33C9                    xor ecx, ecx
:00431226 8A48FF                  mov cl, byte ptr [eax-01]
:00431229 83F975                  cmp ecx, 00000075
:0043122C 7514                    jne 00431242
:0043122E 8B55F8                  mov edx, dword ptr [ebp-08]
:00431231 8B02                    mov eax, dword ptr [edx]
:00431233 50                      push eax
:00431234 8D4DC4                  lea ecx, dword ptr [ebp-3C]
:00431237 51                      push ecx
:00431238 E8A3FDFFFF              call 00430FE0
:0043123D 83C408                  add esp, 00000008
:00431240 EB2A                    jmp 0043126C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043122C(C)
|
:00431242 8B55FC                  mov edx, dword ptr [ebp-04]
:00431245 D1E2                    shl edx, 1
:00431247 8955FC                  mov dword ptr [ebp-04], edx
:0043124A 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0043124C 6A14                    push 00000014
:0043124E 8D45C4                  lea eax, dword ptr [ebp-3C]
:00431251 50                      push eax
:00431252 E889730400              call 004785E0
:00431257 83C40C                  add esp, 0000000C
:0043125A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043125D 8B11                    mov edx, dword ptr [ecx]
:0043125F 52                      push edx
:00431260 8D45C4                  lea eax, dword ptr [ebp-3C]
:00431263 50                      push eax
:00431264 E8FBFDFFFF              call 00431064
:00431269 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431240(U)
|
:0043126C 8D4DC4                  lea ecx, dword ptr [ebp-3C]
:0043126F 51                      push ecx
:00431270 E89B720400              call 00478510
:00431275 83C404                  add esp, 00000004
:00431278 8845EC                  mov byte ptr [ebp-14], al
:0043127B 8B55EC                  mov edx, dword ptr [ebp-14]
:0043127E 81E2FF000000            and edx, 000000FF
:00431284 3955FC                  cmp dword ptr [ebp-04], edx
:00431287 763A                    jbe 004312C3
:00431289 C645BC00                mov [ebp-44], 00
:0043128D EB08                    jmp 00431297

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004312C1(U)
|
:0043128F 8A45BC                  mov al, byte ptr [ebp-44]
:00431292 0401                    add al, 01
:00431294 8845BC                  mov byte ptr [ebp-44], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043128D(U)
|
:00431297 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0043129A 81E1FF000000            and ecx, 000000FF
:004312A0 8B55EC                  mov edx, dword ptr [ebp-14]
:004312A3 81E2FF000000            and edx, 000000FF
:004312A9 8B45FC                  mov eax, dword ptr [ebp-04]
:004312AC 2BC2                    sub eax, edx
:004312AE 3BC8                    cmp ecx, eax
:004312B0 7311                    jnb 004312C3
:004312B2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004312B5 C60120                  mov byte ptr [ecx], 20
:004312B8 8B55F4                  mov edx, dword ptr [ebp-0C]
:004312BB 83C201                  add edx, 00000001
:004312BE 8955F4                  mov dword ptr [ebp-0C], edx
:004312C1 EBCC                    jmp 0043128F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431287(C), :004312B0(C)
|
:004312C3 8B45F4                  mov eax, dword ptr [ebp-0C]
:004312C6 C60000                  mov byte ptr [eax], 00
:004312C9 8D4DC4                  lea ecx, dword ptr [ebp-3C]
:004312CC 51                      push ecx
:004312CD 8B55F4                  mov edx, dword ptr [ebp-0C]
:004312D0 52                      push edx
:004312D1 E85A720400              call 00478530
:004312D6 83C408                  add esp, 00000008
:004312D9 8D45C4                  lea eax, dword ptr [ebp-3C]
:004312DC 50                      push eax
:004312DD E82E720400              call 00478510
:004312E2 83C404                  add esp, 00000004
:004312E5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004312E8 03C8                    add ecx, eax
:004312EA 894DF4                  mov dword ptr [ebp-0C], ecx
:004312ED 8B55F8                  mov edx, dword ptr [ebp-08]
:004312F0 83C204                  add edx, 00000004
:004312F3 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043118D(U), :00431218(U)
|
:004312F6 EB1C                    jmp 00431314

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431114(C)
|
:004312F8 8B45F4                  mov eax, dword ptr [ebp-0C]
:004312FB 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004312FE 8A11                    mov dl, byte ptr [ecx]
:00431300 8810                    mov byte ptr [eax], dl
:00431302 8B45F4                  mov eax, dword ptr [ebp-0C]
:00431305 83C001                  add eax, 00000001
:00431308 8945F4                  mov dword ptr [ebp-0C], eax
:0043130B 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0043130E 83C101                  add ecx, 00000001
:00431311 894DC0                  mov dword ptr [ebp-40], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004312F6(U)
|
:00431314 EB38                    jmp 0043134E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431104(C)
|
:00431316 8B55F4                  mov edx, dword ptr [ebp-0C]
:00431319 8B45C0                  mov eax, dword ptr [ebp-40]
:0043131C 8A08                    mov cl, byte ptr [eax]
:0043131E 880A                    mov byte ptr [edx], cl
:00431320 8B55F4                  mov edx, dword ptr [ebp-0C]
:00431323 83C201                  add edx, 00000001
:00431326 8955F4                  mov dword ptr [ebp-0C], edx
:00431329 8B45C0                  mov eax, dword ptr [ebp-40]
:0043132C 83C001                  add eax, 00000001
:0043132F 8945C0                  mov dword ptr [ebp-40], eax
:00431332 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00431335 8B55C0                  mov edx, dword ptr [ebp-40]
:00431338 8A02                    mov al, byte ptr [edx]
:0043133A 8801                    mov byte ptr [ecx], al
:0043133C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043133F 83C101                  add ecx, 00000001
:00431342 894DF4                  mov dword ptr [ebp-0C], ecx
:00431345 8B55C0                  mov edx, dword ptr [ebp-40]
:00431348 83C201                  add edx, 00000001
:0043134B 8955C0                  mov dword ptr [ebp-40], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431314(U)
|
:0043134E E996FDFFFF              jmp 004310E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004310F2(C)
|
:00431353 8B45F4                  mov eax, dword ptr [ebp-0C]
:00431356 C60000                  mov byte ptr [eax], 00
:00431359 8BE5                    mov esp, ebp
:0043135B 5D                      pop ebp
:0043135C C3                      ret



* Referenced by a CALL at Address:
|:00435429   
|
:0043135D 55                      push ebp
:0043135E 8BEC                    mov ebp, esp
:00431360 8D4508                  lea eax, dword ptr [ebp+08]
:00431363 50                      push eax
:00431364 E862FDFFFF              call 004310CB
:00431369 83C404                  add esp, 00000004
:0043136C 5D                      pop ebp
:0043136D C3                      ret



* Referenced by a CALL at Address:
|:004314AE   
|
:0043136E 55                      push ebp
:0043136F 8BEC                    mov ebp, esp
:00431371 83EC10                  sub esp, 00000010
:00431374 E8BAEDFDFF              call 00410133
:00431379 8B4508                  mov eax, dword ptr [ebp+08]
:0043137C 50                      push eax
:0043137D E88E710400              call 00478510
:00431382 83C404                  add esp, 00000004
:00431385 8945F4                  mov dword ptr [ebp-0C], eax
:00431388 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043138B D1E9                    shr ecx, 1
:0043138D BA28000000              mov edx, 00000028
:00431392 2BD1                    sub edx, ecx
:00431394 8955F8                  mov dword ptr [ebp-08], edx
:00431397 C745F0C0000000          mov [ebp-10], 000000C0
:0043139E 8B45F4                  mov eax, dword ptr [ebp-0C]
:004313A1 8D0CC520000000          lea ecx, dword ptr [8*eax+00000020]
:004313A8 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004313AB 6A03                    push 00000003
:004313AD 6A30                    push 00000030
:004313AF 8B55FC                  mov edx, dword ptr [ebp-04]
:004313B2 52                      push edx
:004313B3 8B45F0                  mov eax, dword ptr [ebp-10]
:004313B6 83E810                  sub eax, 00000010
:004313B9 50                      push eax
:004313BA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004313BD 8D14CDF0FFFFFF          lea edx, dword ptr [8*ecx+FFFFFFF0]
:004313C4 52                      push edx
:004313C5 B978544B00              mov ecx, 004B5478
:004313CA E8DA700300              call 004684A9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004313CF 6A04                    push 00000004
:004313D1 B9306D4800              mov ecx, 00486D30
:004313D6 E8794CFDFF              call 00406054
:004313DB 6A10                    push 00000010
:004313DD B9306D4800              mov ecx, 00486D30
:004313E2 E8D14BFDFF              call 00405FB8
:004313E7 6A00                    push 00000000
:004313E9 B9306D4800              mov ecx, 00486D30
:004313EE E8FD4BFDFF              call 00405FF0
:004313F3 8B45F0                  mov eax, dword ptr [ebp-10]
:004313F6 50                      push eax
:004313F7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004313FA 51                      push ecx
:004313FB B9306D4800              mov ecx, 00486D30
:00431400 E8064BFDFF              call 00405F0B
:00431405 8B5508                  mov edx, dword ptr [ebp+08]
:00431408 52                      push edx
:00431409 68306D4800              push 00486D30
:0043140E E83F57FDFF              call 00406B52
:00431413 83C408                  add esp, 00000008
:00431416 E833EDFDFF              call 0041014E
:0043141B 6A01                    push 00000001
:0043141D E80EE2FFFF              call 0042F630
:00431422 83C404                  add esp, 00000004
:00431425 B978544B00              mov ecx, 004B5478
:0043142A E8E2700300              call 00468511
:0043142F 8BE5                    mov esp, ebp
:00431431 5D                      pop ebp
:00431432 C3                      ret



* Referenced by a CALL at Addresses:
|:0040233B   , :00402377   , :004023DD   , :00402493   , :00402666   
|:00402710   , :004027E6   , :00402BE4   , :00402FDE   , :004047D6   
|:00407746   , :0040C100   , :0040EFC5   , :004111F9   , :0041124A   
|:004117E1   , :004117F7   , :00411814   , :00411EFF   , :00412084   
|:0041FB98   , :0041FCDF   , :0042F1C9   , :0043033D   , :00431BA3   
|:0043212A   , :00432170   , :00432406   , :0043242C   , :004324E6   
|:0043250C   , :00432554   , :004325E5   , :00432641   , :004326BB   
|:00432717   , :00432791   , :004327ED   , :00432867   , :004328C3   
|:0043293D   , :00432999   , :0043304A   , :0043309C   , :00433108   
|:00434AC2   , :00434B02   , :00435A90   , :00437515   , :004375D4   
|:0043763D   , :0043772A   , :00437793   , :00437800   , :00437843   
|:00437882   , :004378C5   , :00437920   , :00437956   , :004379B6   
|:00437A13   , :00437A6E   , :00437AB1   , :00437B23   , :00437B83   
|:00437BDA   , :00437CB7   , :00438A44   , :00438A8D   , :00438ACF   
|:00438EFD   , :004390B8   , :004392CC   , :00439495   , :00439514   
|:00439577   , :004395BC   , :004395F1   , :0043962F   , :00439650   
|:00439691   , :00439840   , :004398D8   , :00439931   , :0043998B   
|:004399C9   , :00439B10   , :00439E82   , :0043A2F8   , :0043A332   
|:0043A36C   , :0043A7F1   , :0043A824   , :0043A857   , :0043A887   
|:0043A8B7   , :0043AB9A   , :0043ABEF   , :0043AC23   , :0043AD4A   
|:0043ADBA   , :0043B528   , :0043B7B8   , :0043B812   , :0043BAD6   
|:0043BCEF   , :0043BF44   , :0043C0FF   , :0043C2F5   , :0043C333   
|:0043C49D   , :0043C4DB   , :0043C65A   , :0043C698   , :0043C8B1   
|:0043C908   , :0043CB18   , :0043CB6F   , :0043CD04   , :0043CD21   
|:0043CE39   , :0043CE77   , :0043CEFD   , :0043D376   , :0043D5B9   
|:0043D773   , :0043D7E5   , :0043D8A3   , :0043DA17   , :0043DAB9   
|:0043DB77   , :0043DCFB   , :0043DED2   , :0043DFD4   , :0043E11B   
|:0043E159   , :0043E22C   , :0043E415   , :0043E453   , :0043E47F   
|:0043E53A   , :0043E70B   , :0043E749   , :0043E824   , :0043E8C4   
|:0043EA2D   , :0043EB29   , :0043EBBB   , :0043EC33   , :0043ECC0   
|:0043ECFB   , :0043ED36   , :0043EE68   , :0043F14E   , :0043F796   
|:0043F8F5   , :0043FA4A   , :0043FB42   , :0043FB6E   , :0043FEB0   
|:0043FEDC   , :0044030A   , :0044034C   , :004404E5   , :004405C8   
|:004406F0   , :0044074A   , :00440776   , :004408FC   , :0044097F   
|:0044099C   , :004409B9   , :00440B01   , :00440C79   , :00440D68   
|:00440F20   , :00441168   , :00441D8B   , :00441E81   , :00441E9E   
|:00441EE6   , :00443B66   , :00443B8B   , :00444393   , :004443CC   
|:0044DEEB   , :0044DF0F   , :0044DF20   , :0044E02D   , :0044E069   
|:0044E0CA   , :0044E106   , :0044E13D   , :0044E14E   , :0044EB61   
|:0044ECB4   , :0044F051   , :0045690F   , :00456932   , :0045694F   
|:00456DD4   , :00458143   , :0045D082   , :0045D10C   , :0045D546   
|:0045D61C   , :0045E17C   , :0045E652   , :0045E78D   , :0045EC39   
|:0045ED5D   , :0045F0DA   
|
:00431433 55                      push ebp
:00431434 8BEC                    mov ebp, esp
:00431436 81EC64010000            sub esp, 00000164
:0043143C C785C4FEFFFF00000000    mov dword ptr [ebp+FFFFFEC4], 00000000
:00431446 C785F8FEFFFF00000000    mov dword ptr [ebp+FFFFFEF8], 00000000
:00431450 C685C8FEFFFFFF          mov byte ptr [ebp+FFFFFEC8], FF
:00431457 8D450C                  lea eax, dword ptr [ebp+0C]
:0043145A 50                      push eax
:0043145B E86BFCFFFF              call 004310CB
:00431460 83C404                  add esp, 00000004
:00431463 C785CCFEFFFF01000000    mov dword ptr [ebp+FFFFFECC], 00000001
:0043146D E87EE2FFFF              call 0042F6F0
:00431472 E8D0E1FFFF              call 0042F647
:00431477 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043147A 898DA4FEFFFF            mov dword ptr [ebp+FFFFFEA4], ecx
:00431480 8B95A4FEFFFF            mov edx, dword ptr [ebp+FFFFFEA4]
:00431486 83EA01                  sub edx, 00000001
:00431489 8995A4FEFFFF            mov dword ptr [ebp+FFFFFEA4], edx
:0043148F 83BDA4FEFFFF05          cmp dword ptr [ebp+FFFFFEA4], 00000005
:00431496 0F8796000000            ja 00431532
:0043149C 8B85A4FEFFFF            mov eax, dword ptr [ebp+FFFFFEA4]
:004314A2 FF24854A194300          jmp dword ptr [4*eax+0043194A]
:004314A9 68A83A4B00              push 004B3AA8
:004314AE E8BBFEFFFF              call 0043136E
:004314B3 83C404                  add esp, 00000004
:004314B6 6A00                    push 00000000
:004314B8 6A00                    push 00000000
:004314BA 6802020000              push 00000202
:004314BF 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:004314C5 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004314C6 FF1504D64B00            Call dword ptr [004BD604]
:004314CC 33C0                    xor eax, eax
:004314CE E973040000              jmp 00431946
:004314D3 68A83A4B00              push 004B3AA8
:004314D8 E879840300              call 00469956
:004314DD 83C404                  add esp, 00000004
:004314E0 6A00                    push 00000000
:004314E2 6A00                    push 00000000
:004314E4 6802020000              push 00000202
:004314E9 8B15B0554B00            mov edx, dword ptr [004B55B0]
:004314EF 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004314F0 FF1504D64B00            Call dword ptr [004BD604]
:004314F6 33C0                    xor eax, eax
:004314F8 E949040000              jmp 00431946
:004314FD 6A00                    push 00000000
:004314FF 68A83A4B00              push 004B3AA8
:00431504 E8D7830300              call 004698E0
:00431509 83C408                  add esp, 00000008
:0043150C 8985CCFEFFFF            mov dword ptr [ebp+FFFFFECC], eax
:00431512 6A00                    push 00000000
:00431514 6A00                    push 00000000
:00431516 6802020000              push 00000202
:0043151B A1B0554B00              mov eax, dword ptr [004B55B0]
:00431520 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00431521 FF1504D64B00            Call dword ptr [004BD604]
:00431527 8B85CCFEFFFF            mov eax, dword ptr [ebp+FFFFFECC]
:0043152D E914040000              jmp 00431946

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431496(C)
|
:00431532 E810E1FFFF              call 0042F647
:00431537 C785D0FEFFFF00000000    mov dword ptr [ebp+FFFFFED0], 00000000
:00431541 C785C0FEFFFF00000000    mov dword ptr [ebp+FFFFFEC0], 00000000
:0043154B C645FC00                mov [ebp-04], 00
:0043154F EB0F                    jmp 00431560

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004315DF(U)
|
:00431551 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00431557 83C101                  add ecx, 00000001
:0043155A 898DC0FEFFFF            mov dword ptr [ebp+FFFFFEC0], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043154F(U)
|
:00431560 8B95C0FEFFFF            mov edx, dword ptr [ebp+FFFFFEC0]
:00431566 33C0                    xor eax, eax
:00431568 8A82A83A4B00            mov al, byte ptr [edx+004B3AA8]
:0043156E 85C0                    test eax, eax
:00431570 7472                    je 004315E4
:00431572 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00431578 33D2                    xor edx, edx
:0043157A 8A91A83A4B00            mov dl, byte ptr [ecx+004B3AA8]
:00431580 83FA0A                  cmp edx, 0000000A
:00431583 755A                    jne 004315DF
:00431585 8B45FC                  mov eax, dword ptr [ebp-04]
:00431588 25FF000000              and eax, 000000FF
:0043158D 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00431593 2B8C85D0FEFFFF          sub ecx, dword ptr [ebp+4*eax-00000130]
:0043159A 3B8DC4FEFFFF            cmp ecx, dword ptr [ebp+FFFFFEC4]
:004315A0 761C                    jbe 004315BE
:004315A2 8B55FC                  mov edx, dword ptr [ebp-04]
:004315A5 81E2FF000000            and edx, 000000FF
:004315AB 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:004315B1 2B8495D0FEFFFF          sub eax, dword ptr [ebp+4*edx-00000130]
:004315B8 8985C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004315A0(C)
|
:004315BE 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:004315C4 83C101                  add ecx, 00000001
:004315C7 8B55FC                  mov edx, dword ptr [ebp-04]
:004315CA 81E2FF000000            and edx, 000000FF
:004315D0 898C95D4FEFFFF          mov dword ptr [ebp+4*edx-0000012C], ecx
:004315D7 8A45FC                  mov al, byte ptr [ebp-04]
:004315DA 0401                    add al, 01
:004315DC 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431583(C)
|
:004315DF E96DFFFFFF              jmp 00431551

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431570(C)
|
:004315E4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004315E7 81E1FF000000            and ecx, 000000FF
:004315ED 8B95C0FEFFFF            mov edx, dword ptr [ebp+FFFFFEC0]
:004315F3 89948DD4FEFFFF          mov dword ptr [ebp+4*ecx-0000012C], edx
:004315FA 8B45FC                  mov eax, dword ptr [ebp-04]
:004315FD 25FF000000              and eax, 000000FF
:00431602 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00431608 2B8C85D0FEFFFF          sub ecx, dword ptr [ebp+4*eax-00000130]
:0043160F 3B8DC4FEFFFF            cmp ecx, dword ptr [ebp+FFFFFEC4]
:00431615 761C                    jbe 00431633
:00431617 8B55FC                  mov edx, dword ptr [ebp-04]
:0043161A 81E2FF000000            and edx, 000000FF
:00431620 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:00431626 2B8495D0FEFFFF          sub eax, dword ptr [ebp+4*edx-00000130]
:0043162D 8985C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431615(C)
|
:00431633 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:00431639 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043163B B902000000              mov ecx, 00000002
:00431640 F7F1                    div ecx
:00431642 85D2                    test edx, edx
:00431644 740F                    je 00431655
:00431646 8B95C4FEFFFF            mov edx, dword ptr [ebp+FFFFFEC4]
:0043164C 83C201                  add edx, 00000001
:0043164F 8995C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431644(C)
|
:00431655 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:0043165B 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043165D B904000000              mov ecx, 00000004
:00431662 F7F1                    div ecx
:00431664 85D2                    test edx, edx
:00431666 7419                    je 00431681
:00431668 C785F8FEFFFF01000000    mov dword ptr [ebp+FFFFFEF8], 00000001
:00431672 8B95C4FEFFFF            mov edx, dword ptr [ebp+FFFFFEC4]
:00431678 83C202                  add edx, 00000002
:0043167B 8995C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431666(C)
|
:00431681 6A00                    push 00000000
:00431683 E802D9FFFF              call 0042EF8A
:00431688 83C404                  add esp, 00000004
:0043168B C785B4FEFFFF40010000    mov dword ptr [ebp+FFFFFEB4], 00000140

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00431695 C785A8FEFFFFC8000000    mov dword ptr [ebp+FFFFFEA8], 000000C8
:0043169F B9D8174B00              mov ecx, 004B17D8
:004316A4 E897E7FDFF              call 0040FE40
:004316A9 25FF000000              and eax, 000000FF
:004316AE 83F803                  cmp eax, 00000003
:004316B1 752A                    jne 004316DD
:004316B3 B958494B00              mov ecx, 004B4958
:004316B8 E886D20100              call 0044E943
:004316BD 99                      cdq
:004316BE 2BC2                    sub eax, edx
:004316C0 D1F8                    sar eax, 1
:004316C2 8985B4FEFFFF            mov dword ptr [ebp+FFFFFEB4], eax
:004316C8 B958494B00              mov ecx, 004B4958
:004316CD E898D20100              call 0044E96A
:004316D2 99                      cdq
:004316D3 2BC2                    sub eax, edx
:004316D5 D1F8                    sar eax, 1
:004316D7 8985A8FEFFFF            mov dword ptr [ebp+FFFFFEA8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004316B1(C)
|
:004316DD 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:004316E3 8D0CC520000000          lea ecx, dword ptr [8*eax+00000020]
:004316EA 898DB8FEFFFF            mov dword ptr [ebp+FFFFFEB8], ecx
:004316F0 8B55FC                  mov edx, dword ptr [ebp-04]
:004316F3 81E2FF000000            and edx, 000000FF
:004316F9 83C201                  add edx, 00000001
:004316FC C1E204                  shl edx, 04
:004316FF 83C220                  add edx, 00000020
:00431702 8995ACFEFFFF            mov dword ptr [ebp+FFFFFEAC], edx
:00431708 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:0043170E C1E002                  shl eax, 02
:00431711 8B8DB4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEB4]
:00431717 2BC8                    sub ecx, eax
:00431719 83E910                  sub ecx, 00000010
:0043171C 898DB0FEFFFF            mov dword ptr [ebp+FFFFFEB0], ecx
:00431722 E80CEAFDFF              call 00410133
:00431727 837D0808                cmp dword ptr [ebp+08], 00000008
:0043172B 7428                    je 00431755

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043172D 6A06                    push 00000006
:0043172F 8B95ACFEFFFF            mov edx, dword ptr [ebp+FFFFFEAC]
:00431735 52                      push edx
:00431736 8B85B8FEFFFF            mov eax, dword ptr [ebp+FFFFFEB8]
:0043173C 50                      push eax
:0043173D 8B8DA8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA8]
:00431743 51                      push ecx
:00431744 8B95B0FEFFFF            mov edx, dword ptr [ebp+FFFFFEB0]
:0043174A 52                      push edx
:0043174B B978544B00              mov ecx, 004B5478
:00431750 E8546D0300              call 004684A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043172B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00431755 6A04                    push 00000004
:00431757 B9306D4800              mov ecx, 00486D30
:0043175C E8F348FDFF              call 00406054
:00431761 6A10                    push 00000010
:00431763 B9306D4800              mov ecx, 00486D30
:00431768 E84B48FDFF              call 00405FB8
:0043176D 6A00                    push 00000000
:0043176F B9306D4800              mov ecx, 00486D30
:00431774 E87748FDFF              call 00405FF0
:00431779 C785C0FEFFFF00000000    mov dword ptr [ebp+FFFFFEC0], 00000000
:00431783 EB0F                    jmp 00431794

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043188F(U)
|
:00431785 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:0043178B 83C001                  add eax, 00000001
:0043178E 8985C0FEFFFF            mov dword ptr [ebp+FFFFFEC0], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431783(U)
|
:00431794 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431797 81E1FF000000            and ecx, 000000FF
:0043179D 398DC0FEFFFF            cmp dword ptr [ebp+FFFFFEC0], ecx
:004317A3 0F87EB000000            ja 00431894
:004317A9 C785BCFEFFFF00000000    mov dword ptr [ebp+FFFFFEBC], 00000000
:004317B3 EB0F                    jmp 004317C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043182D(U)
|
:004317B5 8B95BCFEFFFF            mov edx, dword ptr [ebp+FFFFFEBC]
:004317BB 83C201                  add edx, 00000001
:004317BE 8995BCFEFFFF            mov dword ptr [ebp+FFFFFEBC], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004317B3(U)
|
:004317C4 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:004317CA 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:004317D0 8B9485D4FEFFFF          mov edx, dword ptr [ebp+4*eax-0000012C]
:004317D7 2B948DD0FEFFFF          sub edx, dword ptr [ebp+4*ecx-00000130]
:004317DE 3995BCFEFFFF            cmp dword ptr [ebp+FFFFFEBC], edx
:004317E4 7349                    jnb 0043182F
:004317E6 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:004317EC 8B8C85D0FEFFFF          mov ecx, dword ptr [ebp+4*eax-00000130]
:004317F3 8B95BCFEFFFF            mov edx, dword ptr [ebp+FFFFFEBC]
:004317F9 33C0                    xor eax, eax
:004317FB 8A8411A83A4B00          mov al, byte ptr [ecx+edx+004B3AA8]
:00431802 85C0                    test eax, eax
:00431804 7429                    je 0043182F
:00431806 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:0043180C 8B948DD0FEFFFF          mov edx, dword ptr [ebp+4*ecx-00000130]
:00431813 8B85BCFEFFFF            mov eax, dword ptr [ebp+FFFFFEBC]
:00431819 8B8DBCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEBC]
:0043181F 8A940AA83A4B00          mov dl, byte ptr [edx+ecx+004B3AA8]
:00431826 889405FCFEFFFF          mov byte ptr [ebp+eax-00000104], dl
:0043182D EB86                    jmp 004317B5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004317E4(C), :00431804(C)
|
:0043182F 8B85BCFEFFFF            mov eax, dword ptr [ebp+FFFFFEBC]
:00431835 C68405FCFEFFFF00        mov byte ptr [ebp+eax-00000104], 00
:0043183D 8B8DC0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC0]
:00431843 83C101                  add ecx, 00000001
:00431846 C1E104                  shl ecx, 04
:00431849 8B95A8FEFFFF            mov edx, dword ptr [ebp+FFFFFEA8]
:0043184F 03D1                    add edx, ecx
:00431851 52                      push edx
:00431852 8B85B4FEFFFF            mov eax, dword ptr [ebp+FFFFFEB4]
:00431858 C1E803                  shr eax, 03
:0043185B 8B8DC4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC4]
:00431861 D1E9                    shr ecx, 1
:00431863 2BC1                    sub eax, ecx
:00431865 0385F8FEFFFF            add eax, dword ptr [ebp+FFFFFEF8]
:0043186B 50                      push eax
:0043186C B9306D4800              mov ecx, 00486D30
:00431871 E89546FDFF              call 00405F0B
:00431876 8D95FCFEFFFF            lea edx, dword ptr [ebp+FFFFFEFC]
:0043187C 52                      push edx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043187D 6838DB4700              push 0047DB38
:00431882 68306D4800              push 00486D30
:00431887 E84C53FDFF              call 00406BD8
:0043188C 83C40C                  add esp, 0000000C
:0043188F E9F1FEFFFF              jmp 00431785

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004317A3(C)
|
:00431894 E8B5E8FDFF              call 0041014E
:00431899 B928B44800              mov ecx, 0048B428
:0043189E E8AC85FEFF              call 00419E4F
:004318A3 6A00                    push 00000000
:004318A5 6A00                    push 00000000
:004318A7 6802020000              push 00000202
:004318AC A1B0554B00              mov eax, dword ptr [004B55B0]
:004318B1 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004318B2 FF1504D64B00            Call dword ptr [004BD604]
:004318B8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004318BB 898DA0FEFFFF            mov dword ptr [ebp+FFFFFEA0], ecx
:004318C1 83BDA0FEFFFF07          cmp dword ptr [ebp+FFFFFEA0], 00000007
:004318C8 7728                    ja 004318F2
:004318CA 8B95A0FEFFFF            mov edx, dword ptr [ebp+FFFFFEA0]
:004318D0 FF249562194300          jmp dword ptr [4*edx+00431962]
:004318D7 E839DFFFFF              call 0042F815
:004318DC EB14                    jmp 004318F2

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004318DE 6A02                    push 00000002
:004318E0 E84BDDFFFF              call 0042F630
:004318E5 83C404                  add esp, 00000004
:004318E8 6A01                    push 00000001
:004318EA E841DDFFFF              call 0042F630
:004318EF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004318C8(C), :004318DC(U)
|
:004318F2 837D0808                cmp dword ptr [ebp+08], 00000008
:004318F6 740A                    je 00431902
:004318F8 B978544B00              mov ecx, 004B5478
:004318FD E80F6C0300              call 00468511

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004318F6(C)
|
:00431902 E8E9DDFFFF              call 0042F6F0
:00431907 8B85C8FEFFFF            mov eax, dword ptr [ebp+FFFFFEC8]
:0043190D 25FF000000              and eax, 000000FF
:00431912 3DFF000000              cmp eax, 000000FF
:00431917 741D                    je 00431936
:00431919 8B8DC8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC8]
:0043191F 81E1FF000000            and ecx, 000000FF
:00431925 83F901                  cmp ecx, 00000001
:00431928 740C                    je 00431936
:0043192A C7859CFEFFFF00000000    mov dword ptr [ebp+FFFFFE9C], 00000000
:00431934 EB0A                    jmp 00431940

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431917(C), :00431928(C)
|
:00431936 C7859CFEFFFF01000000    mov dword ptr [ebp+FFFFFE9C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431934(U)
|
:00431940 8B859CFEFFFF            mov eax, dword ptr [ebp+FFFFFE9C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004314CE(U), :004314F8(U), :0043152D(U)
|
:00431946 8BE5                    mov esp, ebp
:00431948 5D                      pop ebp
:00431949 C3                      ret



:0043194A FD144300                DWORD 004314FD
:0043194E FD144300                DWORD 004314FD
:00431952 A9144300                DWORD 004314A9
:00431956 32154300                DWORD 00431532
:0043195A D3144300                DWORD 004314D3
:0043195E FD144300                DWORD 004314FD
:00431962 E8184300                DWORD 004318E8
:00431966 E8184300                DWORD 004318E8
:0043196A F2184300                DWORD 004318F2
:0043196E E8184300                DWORD 004318E8
:00431972 D7184300                DWORD 004318D7
:00431976 F2184300                DWORD 004318F2
:0043197A F2184300                DWORD 004318F2
:0043197E DE184300                DWORD 004318DE



* Referenced by a CALL at Address:
|:0040A01A   
|
:00431982 55                      push ebp
:00431983 8BEC                    mov ebp, esp
:00431985 81EC84010000            sub esp, 00000184
:0043198B 8D4508                  lea eax, dword ptr [ebp+08]
:0043198E 50                      push eax
:0043198F E837F7FFFF              call 004310CB
:00431994 83C404                  add esp, 00000004
:00431997 E854DDFFFF              call 0042F6F0
:0043199C E8A6DCFFFF              call 0042F647
:004319A1 C78584FEFFFF00000000    mov dword ptr [ebp+FFFFFE84], 00000000
:004319AB C78580FEFFFF00000000    mov dword ptr [ebp+FFFFFE80], 00000000
:004319B5 C645FC00                mov [ebp-04], 00
:004319B9 EB0F                    jmp 004319CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431A11(U)
|
:004319BB 8B8D80FEFFFF            mov ecx, dword ptr [ebp+FFFFFE80]
:004319C1 83C101                  add ecx, 00000001
:004319C4 898D80FEFFFF            mov dword ptr [ebp+FFFFFE80], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004319B9(U)
|
:004319CA 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:004319D0 33C0                    xor eax, eax
:004319D2 8A82A83A4B00            mov al, byte ptr [edx+004B3AA8]
:004319D8 85C0                    test eax, eax
:004319DA 7437                    je 00431A13
:004319DC 8B8D80FEFFFF            mov ecx, dword ptr [ebp+FFFFFE80]
:004319E2 33D2                    xor edx, edx
:004319E4 8A91A83A4B00            mov dl, byte ptr [ecx+004B3AA8]
:004319EA 83FA0A                  cmp edx, 0000000A
:004319ED 7522                    jne 00431A11
:004319EF 8B8580FEFFFF            mov eax, dword ptr [ebp+FFFFFE80]
:004319F5 83C001                  add eax, 00000001
:004319F8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004319FB 81E1FF000000            and ecx, 000000FF
:00431A01 89848D88FEFFFF          mov dword ptr [ebp+4*ecx-00000178], eax
:00431A08 8A55FC                  mov dl, byte ptr [ebp-04]
:00431A0B 80C201                  add dl, 01
:00431A0E 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004319ED(C)
|
:00431A11 EBA8                    jmp 004319BB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004319DA(C)
|
:00431A13 8B45FC                  mov eax, dword ptr [ebp-04]
:00431A16 25FF000000              and eax, 000000FF
:00431A1B 8B8D80FEFFFF            mov ecx, dword ptr [ebp+FFFFFE80]
:00431A21 898C8588FEFFFF          mov dword ptr [ebp+4*eax-00000178], ecx
:00431A28 6A00                    push 00000000
:00431A2A E85BD5FFFF              call 0042EF8A
:00431A2F 83C404                  add esp, 00000004
:00431A32 E8A0E6FDFF              call 004100D7
:00431A37 E8F7E6FDFF              call 00410133
:00431A3C E8A6E7FDFF              call 004101E7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00431A41 6A04                    push 00000004
:00431A43 B9306D4800              mov ecx, 00486D30
:00431A48 E80746FDFF              call 00406054
:00431A4D 6A10                    push 00000010
:00431A4F B9306D4800              mov ecx, 00486D30
:00431A54 E85F45FDFF              call 00405FB8
:00431A59 6A00                    push 00000000
:00431A5B B9306D4800              mov ecx, 00486D30
:00431A60 E88B45FDFF              call 00405FF0
:00431A65 C78580FEFFFF00000000    mov dword ptr [ebp+FFFFFE80], 00000000
:00431A6F EB0F                    jmp 00431A80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431B77(U)
|
:00431A71 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:00431A77 83C201                  add edx, 00000001
:00431A7A 899580FEFFFF            mov dword ptr [ebp+FFFFFE80], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431A6F(U)
|
:00431A80 8B45FC                  mov eax, dword ptr [ebp-04]
:00431A83 25FF000000              and eax, 000000FF
:00431A88 398580FEFFFF            cmp dword ptr [ebp+FFFFFE80], eax
:00431A8E 0F87E8000000            ja 00431B7C
:00431A94 C7857CFEFFFF00000000    mov dword ptr [ebp+FFFFFE7C], 00000000
:00431A9E EB0F                    jmp 00431AAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431B18(U)
|
:00431AA0 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:00431AA6 83C101                  add ecx, 00000001
:00431AA9 898D7CFEFFFF            mov dword ptr [ebp+FFFFFE7C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431A9E(U)
|
:00431AAF 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:00431AB5 8B8580FEFFFF            mov eax, dword ptr [ebp+FFFFFE80]
:00431ABB 8B8C9588FEFFFF          mov ecx, dword ptr [ebp+4*edx-00000178]
:00431AC2 2B8C8584FEFFFF          sub ecx, dword ptr [ebp+4*eax-0000017C]
:00431AC9 398D7CFEFFFF            cmp dword ptr [ebp+FFFFFE7C], ecx
:00431ACF 7349                    jnb 00431B1A
:00431AD1 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:00431AD7 8B849584FEFFFF          mov eax, dword ptr [ebp+4*edx-0000017C]
:00431ADE 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:00431AE4 33D2                    xor edx, edx
:00431AE6 8A9408A83A4B00          mov dl, byte ptr [eax+ecx+004B3AA8]
:00431AED 85D2                    test edx, edx
:00431AEF 7429                    je 00431B1A
:00431AF1 8B8580FEFFFF            mov eax, dword ptr [ebp+FFFFFE80]
:00431AF7 8B8C8584FEFFFF          mov ecx, dword ptr [ebp+4*eax-0000017C]
:00431AFE 8B957CFEFFFF            mov edx, dword ptr [ebp+FFFFFE7C]
:00431B04 8B857CFEFFFF            mov eax, dword ptr [ebp+FFFFFE7C]
:00431B0A 8A8C01A83A4B00          mov cl, byte ptr [ecx+eax+004B3AA8]
:00431B11 888C15FCFEFFFF          mov byte ptr [ebp+edx-00000104], cl
:00431B18 EB86                    jmp 00431AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00431ACF(C), :00431AEF(C)
|
:00431B1A 8B957CFEFFFF            mov edx, dword ptr [ebp+FFFFFE7C]
:00431B20 C68415FCFEFFFF00        mov byte ptr [ebp+edx-00000104], 00
:00431B28 8B45FC                  mov eax, dword ptr [ebp-04]
:00431B2B 25FF000000              and eax, 000000FF
:00431B30 C1E003                  shl eax, 03
:00431B33 B9DC000000              mov ecx, 000000DC
:00431B38 2BC8                    sub ecx, eax
:00431B3A 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:00431B40 83C201                  add edx, 00000001
:00431B43 C1E204                  shl edx, 04
:00431B46 03CA                    add ecx, edx
:00431B48 51                      push ecx
:00431B49 8B857CFEFFFF            mov eax, dword ptr [ebp+FFFFFE7C]
:00431B4F D1E8                    shr eax, 1
:00431B51 B928000000              mov ecx, 00000028
:00431B56 2BC8                    sub ecx, eax
:00431B58 51                      push ecx
:00431B59 B9306D4800              mov ecx, 00486D30
:00431B5E E8A843FDFF              call 00405F0B
:00431B63 8D95FCFEFFFF            lea edx, dword ptr [ebp+FFFFFEFC]
:00431B69 52                      push edx
:00431B6A 68306D4800              push 00486D30
:00431B6F E8DE4FFDFF              call 00406B52
:00431B74 83C408                  add esp, 00000008
:00431B77 E9F5FEFFFF              jmp 00431A71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431A8E(C)
|
:00431B7C E8CDE5FDFF              call 0041014E
:00431B81 E86ADBFFFF              call 0042F6F0
:00431B86 E899E5FDFF              call 00410124
:00431B8B 8BE5                    mov esp, ebp
:00431B8D 5D                      pop ebp
:00431B8E C3                      ret



* Referenced by a CALL at Addresses:
|:00408A7A   , :0046D8C7   
|
:00431B8F 55                      push ebp
:00431B90 8BEC                    mov ebp, esp
:00431B92 51                      push ecx
:00431B93 833D1C1E480000          cmp dword ptr [00481E1C], 00000000
:00431B9A 7514                    jne 00431BB0

* Possible StringData Ref from Data Obj ->"iHY`ذʵe"
                                  |
:00431B9C 683CDB4700              push 0047DB3C
:00431BA1 6A01                    push 00000001
:00431BA3 E88BF8FFFF              call 00431433
:00431BA8 83C408                  add esp, 00000008
:00431BAB E983000000              jmp 00431C33

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431B9A(C)
|
:00431BB0 B978294B00              mov ecx, 004B2978
:00431BB5 E846E2FDFF              call 0040FE00
:00431BBA 25FF000000              and eax, 000000FF
:00431BBF 8945FC                  mov dword ptr [ebp-04], eax
:00431BC2 E829DBFFFF              call 0042F6F0
:00431BC7 6A00                    push 00000000
:00431BC9 E86D8A0300              call 0046A63B
:00431BCE 83C404                  add esp, 00000004
:00431BD1 B900554B00              mov ecx, 004B5500
:00431BD6 E8DE780300              call 004694B9
:00431BDB B9F8544B00              mov ecx, 004B54F8
:00431BE0 E80D790300              call 004694F2
:00431BE5 E85DDAFFFF              call 0042F647

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00431BEA 6A04                    push 00000004
:00431BEC B9306D4800              mov ecx, 00486D30
:00431BF1 E85E44FDFF              call 00406054
:00431BF6 6A10                    push 00000010
:00431BF8 B9306D4800              mov ecx, 00486D30
:00431BFD E8B643FDFF              call 00405FB8
:00431C02 E8D0E4FDFF              call 004100D7
:00431C07 E8DBE5FDFF              call 004101E7
:00431C0C 837D0808                cmp dword ptr [ebp+08], 00000008
:00431C10 7313                    jnb 00431C25
:00431C12 6A00                    push 00000000
:00431C14 6A01                    push 00000001
:00431C16 6A00                    push 00000000
:00431C18 668B4508                mov ax, word ptr [ebp+08]
:00431C1C 50                      push eax
:00431C1D E8DCF2FDFF              call 00410EFE
:00431C22 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431C10(C)
|
:00431C25 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431C28 51                      push ecx
:00431C29 B900554B00              mov ecx, 004B5500
:00431C2E E86B780300              call 0046949E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431BAB(U)
|
:00431C33 8BE5                    mov esp, ebp
:00431C35 5D                      pop ebp
:00431C36 C3                      ret


:00431C37 CC                      int 03
:00431C38 CC                      int 03
:00431C39 CC                      int 03
:00431C3A CC                      int 03
:00431C3B CC                      int 03
:00431C3C CC                      int 03
:00431C3D CC                      int 03
:00431C3E CC                      int 03
:00431C3F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042FCE1   , :0042FD05   , :00432209   , :00432AFF   , :00433117   
|:004332A4   , :004333B9   , :00437062   , :004373DC   , :00437CD9   
|:00439055   , :004392EF   , :004392FB   , :00439CCF   , :00439F81   
|:0043A165   , :0043A3C6   , :0043A625   , :0043AA69   , :0043B4FD   
|:0043B7E7   , :0043BAAB   , :0043BCC4   , :0043BF13   , :0043C0D4   
|:0043C8DD   , :0043CB9E   , :0043CC97   , :0043CEA8   , :0043CFEC   
|:0043D34B   , :0043D5E3   , :0043D7BA   , :0043D7FF   , :0043D9EC   
|:0043DA36   , :0043DA8E   , :0043DAD3   , :0043DCD0   , :0043DD15   
|:0043DDFF   , :0043E185   , :0043E4A9   , :0043E775   , :0043EA57   
|:0043EE92   , :0043F3B8   , :0043F553   , :0043F7AA   , :0043F9A5   
|:0043FCFB   , :004400DC   , :0044050F   , :004407A0   , :00440910   
|:00440B2B   , :00440BA2   , :00440D7C   , :00440DFE   , :00440F34   
|:004410DE   , :004411B0   , :0044127B   , :0044129F   , :00441667   
|:004422B7   , :004427F0   , :00442808   , :00442DD4   , :00442E9F   
|:00442FA0   , :00443057   , :0044331C   , :004442C3   , :0044432A   
|:0044441B   , :00444795   , :0044510A   , :00445466   , :004454E0   
|:004454FC   , :00445519   , :00445535   , :004462E1   , :004462FD   
|:0044631A   , :00446336   , :00447462   , :00448199   , :00448510   
|:00448A6D   , :00448AF9   , :00449437   , :0044972D   , :00449E24   
|:0044A0CC   , :0044DD5F   , :0044DE1E   , :0044F174   , :0044F198   
|:0044F4A7   , :00450CAF   , :0045148A   , :00451CD2   , :0045256D   
|:0045271D   , :00452746   , :004528C0   , :00452D23   , :00453B9D   
|:00456486   , :00456CAB   , :0045C2E7   , :0045C311   , :0045C33A   
|:0045C360   , :0045CC8D   , :0045D36D   , :0045E150   , :0045EA14   
|:0045EFA3   , :0045F015   , :0045FDCA   , :00460D2C   , :00460E23   
|
:00431C40 55                      push ebp
:00431C41 8BEC                    mov ebp, esp
:00431C43 51                      push ecx
:00431C44 894DFC                  mov dword ptr [ebp-04], ecx
:00431C47 8B45FC                  mov eax, dword ptr [ebp-04]
:00431C4A 83C005                  add eax, 00000005
:00431C4D 8BE5                    mov esp, ebp
:00431C4F 5D                      pop ebp
:00431C50 C3                      ret


:00431C51 CC                      int 03
:00431C52 CC                      int 03
:00431C53 CC                      int 03
:00431C54 CC                      int 03
:00431C55 CC                      int 03
:00431C56 CC                      int 03
:00431C57 CC                      int 03
:00431C58 CC                      int 03
:00431C59 CC                      int 03
:00431C5A CC                      int 03
:00431C5B CC                      int 03
:00431C5C CC                      int 03
:00431C5D CC                      int 03
:00431C5E CC                      int 03
:00431C5F CC                      int 03

* Referenced by a CALL at Addresses:
|:004307C6   , :00449DE3   
|
:00431C60 55                      push ebp
:00431C61 8BEC                    mov ebp, esp
:00431C63 51                      push ecx
:00431C64 894DFC                  mov dword ptr [ebp-04], ecx
:00431C67 8B4518                  mov eax, dword ptr [ebp+18]
:00431C6A 50                      push eax
:00431C6B 8B4D14                  mov ecx, dword ptr [ebp+14]
:00431C6E 51                      push ecx
:00431C6F 8B5510                  mov edx, dword ptr [ebp+10]
:00431C72 52                      push edx
:00431C73 8B450C                  mov eax, dword ptr [ebp+0C]
:00431C76 50                      push eax
:00431C77 8B4D08                  mov ecx, dword ptr [ebp+08]
:00431C7A 51                      push ecx
:00431C7B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431C7E E80D000000              call 00431C90
:00431C83 8B45FC                  mov eax, dword ptr [ebp-04]
:00431C86 8BE5                    mov esp, ebp
:00431C88 5D                      pop ebp
:00431C89 C21400                  ret 0014


:00431C8C CC                      int 03
:00431C8D CC                      int 03
:00431C8E CC                      int 03
:00431C8F CC                      int 03

* Referenced by a CALL at Address:
|:00431C7E   
|
:00431C90 55                      push ebp
:00431C91 8BEC                    mov ebp, esp
:00431C93 51                      push ecx
:00431C94 894DFC                  mov dword ptr [ebp-04], ecx
:00431C97 8B4508                  mov eax, dword ptr [ebp+08]
:00431C9A C1E003                  shl eax, 03
:00431C9D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431CA0 8901                    mov dword ptr [ecx], eax
:00431CA2 8B55FC                  mov edx, dword ptr [ebp-04]
:00431CA5 8B450C                  mov eax, dword ptr [ebp+0C]
:00431CA8 894204                  mov dword ptr [edx+04], eax
:00431CAB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431CAE 8B5510                  mov edx, dword ptr [ebp+10]
:00431CB1 895108                  mov dword ptr [ecx+08], edx
:00431CB4 8B45FC                  mov eax, dword ptr [ebp-04]
:00431CB7 8B4D14                  mov ecx, dword ptr [ebp+14]
:00431CBA 89480C                  mov dword ptr [eax+0C], ecx
:00431CBD 8B55FC                  mov edx, dword ptr [ebp-04]
:00431CC0 8B4518                  mov eax, dword ptr [ebp+18]
:00431CC3 894210                  mov dword ptr [edx+10], eax
:00431CC6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431CC9 C7411400000000          mov [ecx+14], 00000000
:00431CD0 8BE5                    mov esp, ebp
:00431CD2 5D                      pop ebp
:00431CD3 C21400                  ret 0014


:00431CD6 CC                      int 03
:00431CD7 CC                      int 03
:00431CD8 CC                      int 03
:00431CD9 CC                      int 03
:00431CDA CC                      int 03
:00431CDB CC                      int 03
:00431CDC CC                      int 03
:00431CDD CC                      int 03
:00431CDE CC                      int 03
:00431CDF CC                      int 03

* Referenced by a CALL at Address:
|:004305EE   
|
:00431CE0 55                      push ebp
:00431CE1 8BEC                    mov ebp, esp
:00431CE3 83EC18                  sub esp, 00000018
:00431CE6 56                      push esi
:00431CE7 894DF4                  mov dword ptr [ebp-0C], ecx
:00431CEA 6800EA4200              push 0042EA00
:00431CEF 68901E4300              push 00431E90
:00431CF4 6A0C                    push 0000000C
:00431CF6 6A18                    push 00000018
:00431CF8 8B45F4                  mov eax, dword ptr [ebp-0C]
:00431CFB 83C008                  add eax, 00000008
:00431CFE 50                      push eax
:00431CFF E8CCDE0300              call 0046FBD0
:00431D04 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00431D07 8B5508                  mov edx, dword ptr [ebp+08]
:00431D0A 895104                  mov dword ptr [ecx+04], edx
:00431D0D C645FC00                mov [ebp-04], 00
:00431D11 EB08                    jmp 00431D1B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431D98(U)
|
:00431D13 8A45FC                  mov al, byte ptr [ebp-04]
:00431D16 0401                    add al, 01
:00431D18 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431D11(U)
|
:00431D1B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431D1E 81E1FF000000            and ecx, 000000FF
:00431D24 8B55F4                  mov edx, dword ptr [ebp-0C]
:00431D27 8B4204                  mov eax, dword ptr [edx+04]
:00431D2A 833C8800                cmp dword ptr [eax+4*ecx], 00000000
:00431D2E 746D                    je 00431D9D
:00431D30 C645F800                mov [ebp-08], 00
:00431D34 EB09                    jmp 00431D3F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431D62(U)
|
:00431D36 8A4DF8                  mov cl, byte ptr [ebp-08]
:00431D39 80C101                  add cl, 01
:00431D3C 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431D34(U)
|
:00431D3F 8B55FC                  mov edx, dword ptr [ebp-04]
:00431D42 81E2FF000000            and edx, 000000FF
:00431D48 8B45F4                  mov eax, dword ptr [ebp-0C]
:00431D4B 8B4804                  mov ecx, dword ptr [eax+04]
:00431D4E 8B45F8                  mov eax, dword ptr [ebp-08]
:00431D51 25FF000000              and eax, 000000FF
:00431D56 8B0C91                  mov ecx, dword ptr [ecx+4*edx]
:00431D59 33D2                    xor edx, edx
:00431D5B 8A1401                  mov dl, byte ptr [ecx+eax]
:00431D5E 85D2                    test edx, edx
:00431D60 7402                    je 00431D64
:00431D62 EBD2                    jmp 00431D36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431D60(C)
|
:00431D64 8B4510                  mov eax, dword ptr [ebp+10]
:00431D67 25FF000000              and eax, 000000FF
:00431D6C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00431D6F 81E1FF000000            and ecx, 000000FF
:00431D75 3BC1                    cmp eax, ecx
:00431D77 7E0E                    jle 00431D87
:00431D79 8B5510                  mov edx, dword ptr [ebp+10]
:00431D7C 81E2FF000000            and edx, 000000FF
:00431D82 8955F0                  mov dword ptr [ebp-10], edx
:00431D85 EB0B                    jmp 00431D92

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431D77(C)
|
:00431D87 8B45F8                  mov eax, dword ptr [ebp-08]
:00431D8A 25FF000000              and eax, 000000FF
:00431D8F 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431D85(U)
|
:00431D92 8A4DF0                  mov cl, byte ptr [ebp-10]
:00431D95 884D10                  mov byte ptr [ebp+10], cl
:00431D98 E976FFFFFF              jmp 00431D13

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431D2E(C)
|
:00431D9D 8B55FC                  mov edx, dword ptr [ebp-04]
:00431DA0 81E2FF000000            and edx, 000000FF
:00431DA6 8B4514                  mov eax, dword ptr [ebp+14]
:00431DA9 25FF000000              and eax, 000000FF
:00431DAE 3BD0                    cmp edx, eax
:00431DB0 7D0E                    jge 00431DC0
:00431DB2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431DB5 81E1FF000000            and ecx, 000000FF
:00431DBB 894DEC                  mov dword ptr [ebp-14], ecx
:00431DBE EB0C                    jmp 00431DCC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431DB0(C)
|
:00431DC0 8B5514                  mov edx, dword ptr [ebp+14]
:00431DC3 81E2FF000000            and edx, 000000FF
:00431DC9 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431DBE(U)
|
:00431DCC 8B45F4                  mov eax, dword ptr [ebp-0C]
:00431DCF 8A4DEC                  mov cl, byte ptr [ebp-14]
:00431DD2 8808                    mov byte ptr [eax], cl
:00431DD4 8B5510                  mov edx, dword ptr [ebp+10]
:00431DD7 81E2FF000000            and edx, 000000FF
:00431DDD 83FA08                  cmp edx, 00000008
:00431DE0 7E0D                    jle 00431DEF
:00431DE2 8B4510                  mov eax, dword ptr [ebp+10]
:00431DE5 25FF000000              and eax, 000000FF
:00431DEA 8945E8                  mov dword ptr [ebp-18], eax
:00431DED EB07                    jmp 00431DF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431DE0(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00431DEF C745E808000000          mov [ebp-18], 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431DED(U)
|
:00431DF6 8A4DE8                  mov cl, byte ptr [ebp-18]
:00431DF9 884D10                  mov byte ptr [ebp+10], cl
:00431DFC 8B55F4                  mov edx, dword ptr [ebp-0C]
:00431DFF 8A4510                  mov al, byte ptr [ebp+10]
:00431E02 884201                  mov byte ptr [edx+01], al
:00431E05 C645FC00                mov [ebp-04], 00
:00431E09 EB09                    jmp 00431E14

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431E5F(U)
|
:00431E0B 8A4DFC                  mov cl, byte ptr [ebp-04]
:00431E0E 80C101                  add cl, 01
:00431E11 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431E09(U)
|
:00431E14 8B55FC                  mov edx, dword ptr [ebp-04]
:00431E17 81E2FF000000            and edx, 000000FF
:00431E1D 83FA0C                  cmp edx, 0000000C
:00431E20 7D3F                    jge 00431E61
:00431E22 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00431E26 7423                    je 00431E4B
:00431E28 8B45FC                  mov eax, dword ptr [ebp-04]
:00431E2B 25FF000000              and eax, 000000FF
:00431E30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431E33 81E1FF000000            and ecx, 000000FF
:00431E39 8B55F4                  mov edx, dword ptr [ebp-0C]
:00431E3C 8B750C                  mov esi, dword ptr [ebp+0C]
:00431E3F 8A0406                  mov al, byte ptr [esi+eax]
:00431E42 88840A28010000          mov byte ptr [edx+ecx+00000128], al
:00431E49 EB14                    jmp 00431E5F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431E26(C)
|
:00431E4B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431E4E 81E1FF000000            and ecx, 000000FF
:00431E54 8B55F4                  mov edx, dword ptr [ebp-0C]
:00431E57 C6840A2801000000        mov byte ptr [edx+ecx+00000128], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431E49(U)
|
:00431E5F EBAA                    jmp 00431E0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431E20(C)
|
:00431E61 8B45F4                  mov eax, dword ptr [ebp-0C]
:00431E64 5E                      pop esi
:00431E65 8BE5                    mov esp, ebp
:00431E67 5D                      pop ebp
:00431E68 C21000                  ret 0010


:00431E6B CC                      int 03
:00431E6C CC                      int 03
:00431E6D CC                      int 03
:00431E6E CC                      int 03
:00431E6F CC                      int 03

* Referenced by a CALL at Addresses:
|:00430FC7   , :00479806   
|
:00431E70 55                      push ebp
:00431E71 8BEC                    mov ebp, esp
:00431E73 51                      push ecx
:00431E74 894DFC                  mov dword ptr [ebp-04], ecx
:00431E77 6800EA4200              push 0042EA00
:00431E7C 6A0C                    push 0000000C
:00431E7E 6A18                    push 00000018
:00431E80 8B45FC                  mov eax, dword ptr [ebp-04]
:00431E83 83C008                  add eax, 00000008
:00431E86 50                      push eax
:00431E87 E8E4DD0300              call 0046FC70
:00431E8C 8BE5                    mov esp, ebp
:00431E8E 5D                      pop ebp
:00431E8F C3                      ret


:00431E90 55                      push ebp
:00431E91 8BEC                    mov ebp, esp
:00431E93 51                      push ecx
:00431E94 894DFC                  mov dword ptr [ebp-04], ecx
:00431E97 6A00                    push 00000000
:00431E99 6A00                    push 00000000
:00431E9B 6A00                    push 00000000
:00431E9D 6A00                    push 00000000
:00431E9F 6A00                    push 00000000
:00431EA1 6A00                    push 00000000
:00431EA3 6A00                    push 00000000
:00431EA5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431EA8 E813000000              call 00431EC0
:00431EAD 8BE5                    mov esp, ebp
:00431EAF 5D                      pop ebp
:00431EB0 C3                      ret


:00431EB1 CC                      int 03
:00431EB2 CC                      int 03
:00431EB3 CC                      int 03
:00431EB4 CC                      int 03
:00431EB5 CC                      int 03
:00431EB6 CC                      int 03
:00431EB7 CC                      int 03
:00431EB8 CC                      int 03
:00431EB9 CC                      int 03
:00431EBA CC                      int 03
:00431EBB CC                      int 03
:00431EBC CC                      int 03
:00431EBD CC                      int 03
:00431EBE CC                      int 03
:00431EBF CC                      int 03

* Referenced by a CALL at Address:
|:00431EA8   
|
:00431EC0 55                      push ebp
:00431EC1 8BEC                    mov ebp, esp
:00431EC3 51                      push ecx
:00431EC4 894DFC                  mov dword ptr [ebp-04], ecx
:00431EC7 8A4520                  mov al, byte ptr [ebp+20]
:00431ECA 50                      push eax
:00431ECB 8A4D1C                  mov cl, byte ptr [ebp+1C]
:00431ECE 51                      push ecx
:00431ECF 8B5518                  mov edx, dword ptr [ebp+18]
:00431ED2 52                      push edx
:00431ED3 8B4514                  mov eax, dword ptr [ebp+14]
:00431ED6 50                      push eax
:00431ED7 8B4D10                  mov ecx, dword ptr [ebp+10]
:00431EDA 51                      push ecx
:00431EDB 8B550C                  mov edx, dword ptr [ebp+0C]
:00431EDE 52                      push edx
:00431EDF 8B4508                  mov eax, dword ptr [ebp+08]
:00431EE2 50                      push eax
:00431EE3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431EE6 E815000000              call 00431F00
:00431EEB 8B45FC                  mov eax, dword ptr [ebp-04]
:00431EEE 8BE5                    mov esp, ebp
:00431EF0 5D                      pop ebp
:00431EF1 C21C00                  ret 001C


:00431EF4 CC                      int 03
:00431EF5 CC                      int 03
:00431EF6 CC                      int 03
:00431EF7 CC                      int 03
:00431EF8 CC                      int 03
:00431EF9 CC                      int 03
:00431EFA CC                      int 03
:00431EFB CC                      int 03
:00431EFC CC                      int 03
:00431EFD CC                      int 03
:00431EFE CC                      int 03
:00431EFF CC                      int 03

* Referenced by a CALL at Addresses:
|:00431EE6   , :00469019   
|
:00431F00 55                      push ebp
:00431F01 8BEC                    mov ebp, esp
:00431F03 51                      push ecx
:00431F04 894DFC                  mov dword ptr [ebp-04], ecx
:00431F07 8B4508                  mov eax, dword ptr [ebp+08]
:00431F0A C1E003                  shl eax, 03
:00431F0D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431F10 8901                    mov dword ptr [ecx], eax
:00431F12 8B55FC                  mov edx, dword ptr [ebp-04]
:00431F15 8B450C                  mov eax, dword ptr [ebp+0C]
:00431F18 894204                  mov dword ptr [edx+04], eax
:00431F1B 8B4D10                  mov ecx, dword ptr [ebp+10]
:00431F1E C1E103                  shl ecx, 03
:00431F21 8B55FC                  mov edx, dword ptr [ebp-04]
:00431F24 894A08                  mov dword ptr [edx+08], ecx
:00431F27 8B45FC                  mov eax, dword ptr [ebp-04]
:00431F2A 8B4D14                  mov ecx, dword ptr [ebp+14]
:00431F2D 89480C                  mov dword ptr [eax+0C], ecx
:00431F30 8B55FC                  mov edx, dword ptr [ebp-04]
:00431F33 8B4518                  mov eax, dword ptr [ebp+18]
:00431F36 894210                  mov dword ptr [edx+10], eax
:00431F39 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431F3C 8A551C                  mov dl, byte ptr [ebp+1C]
:00431F3F 885114                  mov byte ptr [ecx+14], dl
:00431F42 8B45FC                  mov eax, dword ptr [ebp-04]
:00431F45 8A4D20                  mov cl, byte ptr [ebp+20]
:00431F48 884815                  mov byte ptr [eax+15], cl
:00431F4B 8BE5                    mov esp, ebp
:00431F4D 5D                      pop ebp
:00431F4E C21C00                  ret 001C


:00431F51 CC                      int 03
:00431F52 CC                      int 03
:00431F53 CC                      int 03
:00431F54 CC                      int 03
:00431F55 CC                      int 03
:00431F56 CC                      int 03
:00431F57 CC                      int 03
:00431F58 CC                      int 03
:00431F59 CC                      int 03
:00431F5A CC                      int 03
:00431F5B CC                      int 03
:00431F5C CC                      int 03
:00431F5D CC                      int 03
:00431F5E CC                      int 03
:00431F5F CC                      int 03
:00431F60 55                      push ebp
:00431F61 8BEC                    mov ebp, esp
:00431F63 E807000000              call 00431F6F
:00431F68 E81F000000              call 00431F8C
:00431F6D 5D                      pop ebp
:00431F6E C3                      ret



* Referenced by a CALL at Address:
|:00431F63   
|
:00431F6F 55                      push ebp
:00431F70 8BEC                    mov ebp, esp
:00431F72 6800EA4200              push 0042EA00
:00431F77 68B0694300              push 004369B0
:00431F7C 6A5A                    push 0000005A
:00431F7E 6A24                    push 00000024
:00431F80 68B83B4B00              push 004B3BB8
:00431F85 E846DC0300              call 0046FBD0
:00431F8A 5D                      pop ebp
:00431F8B C3                      ret



* Referenced by a CALL at Address:
|:00431F68   
|
:00431F8C 55                      push ebp
:00431F8D 8BEC                    mov ebp, esp
:00431F8F 689E1F4300              push 00431F9E
:00431F94 E817D50300              call 0046F4B0
:00431F99 83C404                  add esp, 00000004
:00431F9C 5D                      pop ebp
:00431F9D C3                      ret


:00431F9E 55                      push ebp
:00431F9F 8BEC                    mov ebp, esp
:00431FA1 6800EA4200              push 0042EA00
:00431FA6 6A5A                    push 0000005A
:00431FA8 6A24                    push 00000024
:00431FAA 68B83B4B00              push 004B3BB8
:00431FAF E8BCDC0300              call 0046FC70
:00431FB4 5D                      pop ebp
:00431FB5 C3                      ret


:00431FB6 55                      push ebp
:00431FB7 8BEC                    mov ebp, esp
:00431FB9 E802000000              call 00431FC0
:00431FBE 5D                      pop ebp
:00431FBF C3                      ret



* Referenced by a CALL at Address:
|:00431FB9   
|
:00431FC0 55                      push ebp
:00431FC1 8BEC                    mov ebp, esp
:00431FC3 B960484B00              mov ecx, 004B4860
:00431FC8 E82337FDFF              call 004056F0
:00431FCD 5D                      pop ebp
:00431FCE C3                      ret



* Referenced by a CALL at Addresses:
|:004334E4   , :004413D0   , :004608A9   
|
:00431FCF 55                      push ebp
:00431FD0 8BEC                    mov ebp, esp
:00431FD2 51                      push ecx
:00431FD3 C745FC00000000          mov [ebp-04], 00000000
:00431FDA EB09                    jmp 00431FE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432006(U)
|
:00431FDC 8B45FC                  mov eax, dword ptr [ebp-04]
:00431FDF 83C001                  add eax, 00000001
:00431FE2 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431FDA(U)
|
:00431FE5 837DFC5A                cmp dword ptr [ebp-04], 0000005A
:00431FE9 731D                    jnb 00432008
:00431FEB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00431FEE 6BC924                  imul ecx, 00000024
:00431FF1 81C1B83B4B00            add ecx, 004B3BB8
:00431FF7 E8E4490000              call 004369E0
:00431FFC 3B4508                  cmp eax, dword ptr [ebp+08]
:00431FFF 7505                    jne 00432006
:00432001 8A45FC                  mov al, byte ptr [ebp-04]
:00432004 EB04                    jmp 0043200A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431FFF(C)
|
:00432006 EBD4                    jmp 00431FDC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00431FE9(C)
|
:00432008 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432004(U)
|
:0043200A 8BE5                    mov esp, ebp
:0043200C 5D                      pop ebp
:0043200D C3                      ret


:0043200E 55                      push ebp
:0043200F 8BEC                    mov ebp, esp
:00432011 83EC14                  sub esp, 00000014
:00432014 8B4508                  mov eax, dword ptr [ebp+08]
:00432017 C60000                  mov byte ptr [eax], 00

* Possible StringData Ref from Data Obj ->"("
                                  |
:0043201A 6858DB4700              push 0047DB58
:0043201F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432022 51                      push ecx
:00432023 E808650400              call 00478530
:00432028 83C408                  add esp, 00000008
:0043202B C645EC00                mov [ebp-14], 00
:0043202F 8B550C                  mov edx, dword ptr [ebp+0C]
:00432032 33C0                    xor eax, eax
:00432034 8A02                    mov al, byte ptr [edx]
:00432036 50                      push eax
:00432037 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0043203A 51                      push ecx
:0043203B E8A0EFFFFF              call 00430FE0
:00432040 83C408                  add esp, 00000008
:00432043 8D55EC                  lea edx, dword ptr [ebp-14]
:00432046 52                      push edx
:00432047 8B4508                  mov eax, dword ptr [ebp+08]
:0043204A 50                      push eax
:0043204B E800650400              call 00478550
:00432050 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->","
                                  |
:00432053 685CDB4700              push 0047DB5C
:00432058 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043205B 51                      push ecx
:0043205C E8EF640400              call 00478550
:00432061 83C408                  add esp, 00000008
:00432064 C645EC00                mov [ebp-14], 00
:00432068 8B550C                  mov edx, dword ptr [ebp+0C]
:0043206B 33C0                    xor eax, eax
:0043206D 8A4201                  mov al, byte ptr [edx+01]
:00432070 50                      push eax
:00432071 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00432074 51                      push ecx
:00432075 E866EFFFFF              call 00430FE0
:0043207A 83C408                  add esp, 00000008
:0043207D 8D55EC                  lea edx, dword ptr [ebp-14]
:00432080 52                      push edx
:00432081 8B4508                  mov eax, dword ptr [ebp+08]
:00432084 50                      push eax
:00432085 E8C6640400              call 00478550
:0043208A 83C408                  add esp, 00000008

* Possible StringData Ref from Data Obj ->")"
                                  |
:0043208D 6860DB4700              push 0047DB60
:00432092 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432095 51                      push ecx
:00432096 E8B5640400              call 00478550
:0043209B 83C408                  add esp, 00000008
:0043209E 8BE5                    mov esp, ebp
:004320A0 5D                      pop ebp
:004320A1 C3                      ret



* Referenced by a CALL at Addresses:
|:004345DB   , :004430E3   , :00443305   , :0044520E   , :00447445   
|
:004320A2 55                      push ebp
:004320A3 8BEC                    mov ebp, esp
:004320A5 83EC08                  sub esp, 00000008
:004320A8 894DF8                  mov dword ptr [ebp-08], ecx
:004320AB 8B45F8                  mov eax, dword ptr [ebp-08]
:004320AE 8B08                    mov ecx, dword ptr [eax]
:004320B0 6BC950                  imul ecx, 00000050
:004320B3 81C1787F4900            add ecx, 00497F78
:004320B9 E8ECF0FCFF              call 004011AA
:004320BE 8845FC                  mov byte ptr [ebp-04], al
:004320C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004320C4 81E1FF000000            and ecx, 000000FF
:004320CA 81F994000000            cmp ecx, 00000094
:004320D0 7D13                    jge 004320E5
:004320D2 8B55F8                  mov edx, dword ptr [ebp-08]
:004320D5 33C0                    xor eax, eax
:004320D7 8A421C                  mov al, byte ptr [edx+1C]
:004320DA 6BC025                  imul eax, 00000025
:004320DD 8A4DFC                  mov cl, byte ptr [ebp-04]
:004320E0 02C8                    add cl, al
:004320E2 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004320D0(C)
|
:004320E5 8A45FC                  mov al, byte ptr [ebp-04]
:004320E8 8BE5                    mov esp, ebp
:004320EA 5D                      pop ebp
:004320EB C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0044EF24   , :0045CEC8   , :0045D01B   , :00460427   , :00460433   
|:00460456   , :00460462   
|
:004320EE 55                      push ebp
:004320EF 8BEC                    mov ebp, esp
:004320F1 51                      push ecx
:004320F2 894DFC                  mov dword ptr [ebp-04], ecx
:004320F5 8B4508                  mov eax, dword ptr [ebp+08]
:004320F8 25FF000000              and eax, 000000FF
:004320FD 85C0                    test eax, eax
:004320FF 7C19                    jl 0043211A
:00432101 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432104 81E1FF000000            and ecx, 000000FF
:0043210A 83F903                  cmp ecx, 00000003
:0043210D 7F0B                    jg 0043211A
:0043210F 8B55FC                  mov edx, dword ptr [ebp-04]
:00432112 8A4508                  mov al, byte ptr [ebp+08]
:00432115 88421C                  mov byte ptr [edx+1C], al
:00432118 EB18                    jmp 00432132

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004320FF(C), :0043210D(C)
|
:0043211A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043211D E8CE480000              call 004369F0
:00432122 50                      push eax

* Possible StringData Ref from Data Obj ->"BUTAI::SetButaiColor() :C]wѤF(%"
                                        ->"s)"
                                  |
:00432123 6864DB4700              push 0047DB64
:00432128 6A00                    push 00000000
:0043212A E804F3FFFF              call 00431433
:0043212F 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432118(U)
|
:00432132 8BE5                    mov esp, ebp
:00432134 5D                      pop ebp
:00432135 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0043570C   , :004430A7   , :0044335A   , :004452F7   , :00445AAE   
|:004474AC   , :0045C252   , :0045C27D   , :0045C2A7   , :0046BE7D   
|
:00432138 55                      push ebp
:00432139 8BEC                    mov ebp, esp
:0043213B 51                      push ecx
:0043213C 894DFC                  mov dword ptr [ebp-04], ecx
:0043213F 8B45FC                  mov eax, dword ptr [ebp-04]
:00432142 33C9                    xor ecx, ecx
:00432144 8A481C                  mov cl, byte ptr [eax+1C]
:00432147 85C9                    test ecx, ecx
:00432149 7C15                    jl 00432160
:0043214B 8B55FC                  mov edx, dword ptr [ebp-04]
:0043214E 33C0                    xor eax, eax
:00432150 8A421C                  mov al, byte ptr [edx+1C]
:00432153 83F803                  cmp eax, 00000003
:00432156 7F08                    jg 00432160
:00432158 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043215B 8A411C                  mov al, byte ptr [ecx+1C]
:0043215E EB1A                    jmp 0043217A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432149(C), :00432156(C)
|
:00432160 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432163 E888480000              call 004369F0
:00432168 50                      push eax

* Possible StringData Ref from Data Obj ->"BUTAI::GetButaiColor() : CS]w[%s"
                                        ->"]ȥBΦ^Q"
                                  |
:00432169 6898DB4700              push 0047DB98
:0043216E 6A00                    push 00000000
:00432170 E8BEF2FFFF              call 00431433
:00432175 83C40C                  add esp, 0000000C
:00432178 32C0                    xor al, al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043215E(U)
|
:0043217A 8BE5                    mov esp, ebp
:0043217C 5D                      pop ebp
:0043217D C3                      ret


:0043217E 55                      push ebp
:0043217F 8BEC                    mov ebp, esp
:00432181 51                      push ecx
:00432182 894DFC                  mov dword ptr [ebp-04], ecx
:00432185 8B45FC                  mov eax, dword ptr [ebp-04]
:00432188 33C9                    xor ecx, ecx
:0043218A 8A481C                  mov cl, byte ptr [eax+1C]
:0043218D 8BC1                    mov eax, ecx
:0043218F 8BE5                    mov esp, ebp
:00432191 5D                      pop ebp
:00432192 C3                      ret


:00432193 55                      push ebp
:00432194 8BEC                    mov ebp, esp
:00432196 51                      push ecx
:00432197 894DFC                  mov dword ptr [ebp-04], ecx
:0043219A 8BE5                    mov esp, ebp
:0043219C 5D                      pop ebp
:0043219D C3                      ret



* Referenced by a CALL at Address:
|:0046090D   
|
:0043219E 55                      push ebp
:0043219F 8BEC                    mov ebp, esp
:004321A1 83EC2C                  sub esp, 0000002C
:004321A4 C645E8FF                mov [ebp-18], FF
:004321A8 C645F400                mov [ebp-0C], 00
:004321AC C745EC00000000          mov [ebp-14], 00000000
:004321B3 8B4508                  mov eax, dword ptr [ebp+08]
:004321B6 25FF000000              and eax, 000000FF
:004321BB 3DFF000000              cmp eax, 000000FF
:004321C0 741C                    je 004321DE
:004321C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004321C5 81E1FF000000            and ecx, 000000FF
:004321CB 6BC924                  imul ecx, 00000024
:004321CE 81C1B83B4B00            add ecx, 004B3BB8
:004321D4 E817480000              call 004369F0
:004321D9 8945E4                  mov dword ptr [ebp-1C], eax
:004321DC EB13                    jmp 004321F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004321C0(C)
|
:004321DE 8B4D14                  mov ecx, dword ptr [ebp+14]
:004321E1 81E1FF000000            and ecx, 000000FF
:004321E7 8B148DF8DB4700          mov edx, dword ptr [4*ecx+0047DBF8]
:004321EE 8955E4                  mov dword ptr [ebp-1C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004321DC(U)
|
:004321F1 8B45E4                  mov eax, dword ptr [ebp-1C]
:004321F4 8945F8                  mov dword ptr [ebp-08], eax
:004321F7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004321FA 81E1FF000000            and ecx, 000000FF
:00432200 6BC924                  imul ecx, 00000024
:00432203 81C1B83B4B00            add ecx, 004B3BB8
:00432209 E832FAFFFF              call 00431C40
:0043220E 668B08                  mov cx, word ptr [eax]
:00432211 66894DFC                mov word ptr [ebp-04], cx
:00432215 6A00                    push 00000000
:00432217 B9C0534B00              mov ecx, 004B53C0
:0043221C E83FBCFFFF              call 0042DE60
:00432221 6A00                    push 00000000
:00432223 6A00                    push 00000000
:00432225 E8D3BA0300              call 0046DCFD
:0043222A 83C408                  add esp, 00000008
:0043222D 8A55FD                  mov dl, byte ptr [ebp-03]
:00432230 52                      push edx
:00432231 8A45FC                  mov al, byte ptr [ebp-04]
:00432234 50                      push eax
:00432235 B958494B00              mov ecx, 004B4958
:0043223A E8AEB80100              call 0044DAED
:0043223F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00432242 81E1FF000000            and ecx, 000000FF
:00432248 894DE0                  mov dword ptr [ebp-20], ecx
:0043224B 837DE004                cmp dword ptr [ebp-20], 00000004
:0043224F 0F87E6000000            ja 0043233B
:00432255 8B55E0                  mov edx, dword ptr [ebp-20]
:00432258 FF2495DD294300          jmp dword ptr [4*edx+004329DD]
:0043225F 8B4508                  mov eax, dword ptr [ebp+08]
:00432262 25FF000000              and eax, 000000FF
:00432267 3DFF000000              cmp eax, 000000FF
:0043226C 7421                    je 0043228F
:0043226E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432271 81E1FF000000            and ecx, 000000FF
:00432277 6BC924                  imul ecx, 00000024
:0043227A 81C1B83B4B00            add ecx, 004B3BB8
:00432280 E88B470000              call 00436A10
:00432285 25FF000000              and eax, 000000FF
:0043228A 8945DC                  mov dword ptr [ebp-24], eax
:0043228D EB07                    jmp 00432296

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043226C(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043228F C745DC03000000          mov [ebp-24], 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043228D(U)
|
:00432296 8A4DDC                  mov cl, byte ptr [ebp-24]
:00432299 884DF0                  mov byte ptr [ebp-10], cl
:0043229C E99A000000              jmp 0043233B
:004322A1 8B5508                  mov edx, dword ptr [ebp+08]
:004322A4 81E2FF000000            and edx, 000000FF
:004322AA 81FAFF000000            cmp edx, 000000FF
:004322B0 7421                    je 004322D3
:004322B2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004322B5 81E1FF000000            and ecx, 000000FF
:004322BB 6BC924                  imul ecx, 00000024
:004322BE 81C1B83B4B00            add ecx, 004B3BB8
:004322C4 E867470000              call 00436A30
:004322C9 25FF000000              and eax, 000000FF
:004322CE 8945D8                  mov dword ptr [ebp-28], eax
:004322D1 EB07                    jmp 004322DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004322B0(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004322D3 C745D803000000          mov [ebp-28], 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004322D1(U)
|
:004322DA 8A45D8                  mov al, byte ptr [ebp-28]
:004322DD 8845F0                  mov byte ptr [ebp-10], al
:004322E0 EB59                    jmp 0043233B
:004322E2 8B4D10                  mov ecx, dword ptr [ebp+10]
:004322E5 81E1FF000000            and ecx, 000000FF
:004322EB 81E180000000            and ecx, 00000080
:004322F1 F7D9                    neg ecx
:004322F3 1BC9                    sbb ecx, ecx
:004322F5 F7D9                    neg ecx
:004322F7 884DF4                  mov byte ptr [ebp-0C], cl
:004322FA EB3F                    jmp 0043233B
:004322FC 8B5508                  mov edx, dword ptr [ebp+08]
:004322FF 81E2FF000000            and edx, 000000FF
:00432305 81FAFF000000            cmp edx, 000000FF
:0043230B 7421                    je 0043232E
:0043230D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432310 81E1FF000000            and ecx, 000000FF
:00432316 6BC924                  imul ecx, 00000024
:00432319 81C1B83B4B00            add ecx, 004B3BB8
:0043231F E82C470000              call 00436A50
:00432324 25FF000000              and eax, 000000FF
:00432329 8945D4                  mov dword ptr [ebp-2C], eax
:0043232C EB07                    jmp 00432335

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043230B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043232E C745D403000000          mov [ebp-2C], 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043232C(U)
|
:00432335 8A45D4                  mov al, byte ptr [ebp-2C]
:00432338 8845F0                  mov byte ptr [ebp-10], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043224F(C), :0043229C(U), :004322E0(U), :004322FA(U)
|
:0043233B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043233E 81E1FF000000            and ecx, 000000FF
:00432344 83F902                  cmp ecx, 00000002
:00432347 7C12                    jl 0043235B
:00432349 8B550C                  mov edx, dword ptr [ebp+0C]
:0043234C 81E2FF000000            and edx, 000000FF
:00432352 83FA04                  cmp edx, 00000004
:00432355 0F85BE010000            jne 00432519

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432347(C)
|
:0043235B 8B45F0                  mov eax, dword ptr [ebp-10]
:0043235E 25FF000000              and eax, 000000FF
:00432363 8B4D10                  mov ecx, dword ptr [ebp+10]
:00432366 81E1FF000000            and ecx, 000000FF
:0043236C 3BC1                    cmp eax, ecx
:0043236E 0F8EC5000000            jle 00432439
:00432374 8B550C                  mov edx, dword ptr [ebp+0C]
:00432377 81E2FF000000            and edx, 000000FF
:0043237D 85D2                    test edx, edx
:0043237F 7506                    jne 00432387
:00432381 C645E81D                mov [ebp-18], 1D
:00432385 EB17                    jmp 0043239E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043237F(C)
|
:00432387 8B450C                  mov eax, dword ptr [ebp+0C]
:0043238A 25FF000000              and eax, 000000FF
:0043238F 83F801                  cmp eax, 00000001
:00432392 7506                    jne 0043239A
:00432394 C645E81E                mov [ebp-18], 1E
:00432398 EB04                    jmp 0043239E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432392(C)
|
:0043239A C645E81F                mov [ebp-18], 1F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432385(U), :00432398(U)
|
:0043239E 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004323A0 6A03                    push 00000003
:004323A2 8A4DE8                  mov cl, byte ptr [ebp-18]
:004323A5 51                      push ecx
:004323A6 8A5508                  mov dl, byte ptr [ebp+08]
:004323A9 52                      push edx
:004323AA 68FF000000              push 000000FF
:004323AF B958494B00              mov ecx, 004B4958
:004323B4 E8D7C30100              call 0044E790
:004323B9 8B45F0                  mov eax, dword ptr [ebp-10]
:004323BC 25FF000000              and eax, 000000FF
:004323C1 83F803                  cmp eax, 00000003
:004323C4 7E4A                    jle 00432410
:004323C6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004323C9 81E1FF000000            and ecx, 000000FF
:004323CF 33D2                    xor edx, edx
:004323D1 83F904                  cmp ecx, 00000004
:004323D4 0F94C2                  sete dl
:004323D7 8855F0                  mov byte ptr [ebp-10], dl
:004323DA 8B45F0                  mov eax, dword ptr [ebp-10]
:004323DD 25FF000000              and eax, 000000FF
:004323E2 8B0C85F0DB4700          mov ecx, dword ptr [4*eax+0047DBF0]
:004323E9 51                      push ecx
:004323EA 8B550C                  mov edx, dword ptr [ebp+0C]
:004323ED 81E2FF000000            and edx, 000000FF
:004323F3 8B0495D8DB4700          mov eax, dword ptr [4*edx+0047DBD8]
:004323FA 50                      push eax
:004323FB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004323FE 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s%sUĪG%s"
                                  |
:004323FF 6854DC4700              push 0047DC54
:00432404 6A00                    push 00000000
:00432406 E828F0FFFF              call 00431433
:0043240B 83C414                  add esp, 00000014
:0043240E EB24                    jmp 00432434

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004323C4(C)
|
:00432410 8B550C                  mov edx, dword ptr [ebp+0C]
:00432413 81E2FF000000            and edx, 000000FF
:00432419 8B0495D8DB4700          mov eax, dword ptr [4*edx+0047DBD8]
:00432420 50                      push eax
:00432421 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432424 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s%sWɤF"
                                  |
:00432425 6868DC4700              push 0047DC68
:0043242A 6A00                    push 00000000
:0043242C E802F0FFFF              call 00431433
:00432431 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043240E(U)
|
:00432434 E9DB000000              jmp 00432514

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043236E(C)
|
:00432439 8B55F0                  mov edx, dword ptr [ebp-10]
:0043243C 81E2FF000000            and edx, 000000FF
:00432442 8B4510                  mov eax, dword ptr [ebp+10]
:00432445 25FF000000              and eax, 000000FF
:0043244A 3BD0                    cmp edx, eax
:0043244C 0F8DC2000000            jnl 00432514
:00432452 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00432455 81E1FF000000            and ecx, 000000FF
:0043245B 85C9                    test ecx, ecx
:0043245D 7506                    jne 00432465
:0043245F C645E825                mov [ebp-18], 25
:00432463 EB18                    jmp 0043247D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043245D(C)
|
:00432465 8B550C                  mov edx, dword ptr [ebp+0C]
:00432468 81E2FF000000            and edx, 000000FF
:0043246E 83FA01                  cmp edx, 00000001
:00432471 7506                    jne 00432479
:00432473 C645E826                mov [ebp-18], 26
:00432477 EB04                    jmp 0043247D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432471(C)
|
:00432479 C645E827                mov [ebp-18], 27

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432463(U), :00432477(U)
|
:0043247D 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043247F 6A03                    push 00000003
:00432481 8A45E8                  mov al, byte ptr [ebp-18]
:00432484 50                      push eax
:00432485 8A4D08                  mov cl, byte ptr [ebp+08]
:00432488 51                      push ecx
:00432489 68FF000000              push 000000FF
:0043248E B958494B00              mov ecx, 004B4958
:00432493 E8F8C20100              call 0044E790
:00432498 8B55F0                  mov edx, dword ptr [ebp-10]
:0043249B 81E2FF000000            and edx, 000000FF
:004324A1 83FA03                  cmp edx, 00000003
:004324A4 7D4A                    jge 004324F0
:004324A6 8B45F0                  mov eax, dword ptr [ebp-10]
:004324A9 25FF000000              and eax, 000000FF
:004324AE 33C9                    xor ecx, ecx
:004324B0 83F802                  cmp eax, 00000002
:004324B3 0F94C1                  sete cl
:004324B6 884DF0                  mov byte ptr [ebp-10], cl
:004324B9 8B55F0                  mov edx, dword ptr [ebp-10]
:004324BC 81E2FF000000            and edx, 000000FF
:004324C2 8B0495F0DB4700          mov eax, dword ptr [4*edx+0047DBF0]
:004324C9 50                      push eax
:004324CA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004324CD 81E1FF000000            and ecx, 000000FF
:004324D3 8B148DD8DB4700          mov edx, dword ptr [4*ecx+0047DBD8]
:004324DA 52                      push edx
:004324DB 8B45F8                  mov eax, dword ptr [ebp-08]
:004324DE 50                      push eax

* Possible StringData Ref from Data Obj ->"%s%sWɮĪG%s"
                                  |
:004324DF 6878DC4700              push 0047DC78
:004324E4 6A00                    push 00000000
:004324E6 E848EFFFFF              call 00431433
:004324EB 83C414                  add esp, 00000014
:004324EE EB24                    jmp 00432514

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004324A4(C)
|
:004324F0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004324F3 81E1FF000000            and ecx, 000000FF
:004324F9 8B148DD8DB4700          mov edx, dword ptr [4*ecx+0047DBD8]
:00432500 52                      push edx
:00432501 8B45F8                  mov eax, dword ptr [ebp-08]
:00432504 50                      push eax

* Possible StringData Ref from Data Obj ->"%s%sUF"
                                  |
:00432505 688CDC4700              push 0047DC8C
:0043250A 6A00                    push 00000000
:0043250C E822EFFFFF              call 00431433
:00432511 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432434(U), :0043244C(C), :004324EE(U)
|
:00432514 E988040000              jmp 004329A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432355(C)
|
:00432519 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043251C 81E1FF000000            and ecx, 000000FF
:00432522 83F902                  cmp ecx, 00000002
:00432525 753A                    jne 00432561
:00432527 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00432529 6A03                    push 00000003
:0043252B 6A28                    push 00000028
:0043252D 8A5508                  mov dl, byte ptr [ebp+08]
:00432530 52                      push edx
:00432531 68FF000000              push 000000FF
:00432536 B958494B00              mov ecx, 004B4958
:0043253B E850C20100              call 0044E790
:00432540 8B4510                  mov eax, dword ptr [ebp+10]
:00432543 25FF000000              and eax, 000000FF
:00432548 50                      push eax
:00432549 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043254C 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sD%wl"
                                  |
:0043254D 689CDC4700              push 0047DC9C
:00432552 6A00                    push 00000000
:00432554 E8DAEEFFFF              call 00431433
:00432559 83C410                  add esp, 00000010
:0043255C E940040000              jmp 004329A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432525(C)
|
:00432561 8B550C                  mov edx, dword ptr [ebp+0C]
:00432564 81E2FF000000            and edx, 000000FF
:0043256A 83FA03                  cmp edx, 00000003
:0043256D 0F852E040000            jne 004329A1
:00432573 8B4510                  mov eax, dword ptr [ebp+10]
:00432576 25FF000000              and eax, 000000FF
:0043257B 83E001                  and eax, 00000001
:0043257E 85C0                    test eax, eax
:00432580 0F84C3000000            je 00432649
:00432586 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00432589 81E1FF000000            and ecx, 000000FF
:0043258F 85C9                    test ecx, ecx
:00432591 745C                    je 004325EF
:00432593 8B5508                  mov edx, dword ptr [ebp+08]
:00432596 81E2FF000000            and edx, 000000FF
:0043259C 81FAFF000000            cmp edx, 000000FF
:004325A2 741D                    je 004325C1
:004325A4 6A01                    push 00000001
:004325A6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004325A9 81E1FF000000            and ecx, 000000FF
:004325AF 6BC924                  imul ecx, 00000024
:004325B2 81C1B83B4B00            add ecx, 004B3BB8
:004325B8 E8B3440000              call 00436A70
:004325BD 85C0                    test eax, eax
:004325BF 742E                    je 004325EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004325A2(C)
|
:004325C1 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004325C3 6A03                    push 00000003
:004325C5 6A20                    push 00000020
:004325C7 8A4508                  mov al, byte ptr [ebp+08]
:004325CA 50                      push eax
:004325CB 68FF000000              push 000000FF
:004325D0 B958494B00              mov ecx, 004B4958
:004325D5 E8B6C10100              call 0044E790
:004325DA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004325DD 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sqTp_F"
                                  |
:004325DE 68ACDC4700              push 0047DCAC
:004325E3 6A00                    push 00000000
:004325E5 E849EEFFFF              call 00431433
:004325EA 83C40C                  add esp, 0000000C
:004325ED EB5A                    jmp 00432649

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432591(C), :004325BF(C)
|
:004325EF 8B55F4                  mov edx, dword ptr [ebp-0C]
:004325F2 81E2FF000000            and edx, 000000FF
:004325F8 85D2                    test edx, edx
:004325FA 754D                    jne 00432649
:004325FC 8B4508                  mov eax, dword ptr [ebp+08]
:004325FF 25FF000000              and eax, 000000FF
:00432604 3DFF000000              cmp eax, 000000FF
:00432609 741D                    je 00432628
:0043260B 6A01                    push 00000001
:0043260D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432610 81E1FF000000            and ecx, 000000FF
:00432616 6BC924                  imul ecx, 00000024
:00432619 81C1B83B4B00            add ecx, 004B3BB8
:0043261F E84C440000              call 00436A70
:00432624 85C0                    test eax, eax
:00432626 7521                    jne 00432649

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432609(C)
|
:00432628 6A0D                    push 0000000D
:0043262A 8A4D08                  mov cl, byte ptr [ebp+08]
:0043262D 51                      push ecx
:0043262E E8BE030000              call 004329F1
:00432633 83C408                  add esp, 00000008
:00432636 8B55F8                  mov edx, dword ptr [ebp-08]
:00432639 52                      push edx

* Possible StringData Ref from Data Obj ->"%sJTpF"
                                  |
:0043263A 68C0DC4700              push 0047DCC0
:0043263F 6A00                    push 00000000
:00432641 E8EDEDFFFF              call 00431433
:00432646 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432580(C), :004325ED(U), :004325FA(C), :00432626(C)
|
:00432649 8B4510                  mov eax, dword ptr [ebp+10]
:0043264C 25FF000000              and eax, 000000FF
:00432651 83E002                  and eax, 00000002
:00432654 85C0                    test eax, eax
:00432656 0F84C3000000            je 0043271F
:0043265C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043265F 81E1FF000000            and ecx, 000000FF
:00432665 85C9                    test ecx, ecx
:00432667 745C                    je 004326C5
:00432669 8B5508                  mov edx, dword ptr [ebp+08]
:0043266C 81E2FF000000            and edx, 000000FF
:00432672 81FAFF000000            cmp edx, 000000FF
:00432678 741D                    je 00432697

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043267A 6A02                    push 00000002
:0043267C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043267F 81E1FF000000            and ecx, 000000FF
:00432685 6BC924                  imul ecx, 00000024
:00432688 81C1B83B4B00            add ecx, 004B3BB8
:0043268E E8DD430000              call 00436A70
:00432693 85C0                    test eax, eax
:00432695 742E                    je 004326C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432678(C)
|
:00432697 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00432699 6A03                    push 00000003
:0043269B 6A24                    push 00000024
:0043269D 8A4508                  mov al, byte ptr [ebp+08]
:004326A0 50                      push eax
:004326A1 68FF000000              push 000000FF
:004326A6 B958494B00              mov ecx, 004B4958
:004326AB E8E0C00100              call 0044E790
:004326B0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004326B3 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sqcBp_F"
                                  |
:004326B4 68D4DC4700              push 0047DCD4
:004326B9 6A00                    push 00000000
:004326BB E873EDFFFF              call 00431433
:004326C0 83C40C                  add esp, 0000000C
:004326C3 EB5A                    jmp 0043271F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432667(C), :00432695(C)
|
:004326C5 8B55F4                  mov edx, dword ptr [ebp-0C]
:004326C8 81E2FF000000            and edx, 000000FF
:004326CE 85D2                    test edx, edx
:004326D0 754D                    jne 0043271F
:004326D2 8B4508                  mov eax, dword ptr [ebp+08]
:004326D5 25FF000000              and eax, 000000FF
:004326DA 3DFF000000              cmp eax, 000000FF
:004326DF 741D                    je 004326FE

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004326E1 6A02                    push 00000002
:004326E3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004326E6 81E1FF000000            and ecx, 000000FF
:004326EC 6BC924                  imul ecx, 00000024
:004326EF 81C1B83B4B00            add ecx, 004B3BB8
:004326F5 E876430000              call 00436A70
:004326FA 85C0                    test eax, eax
:004326FC 7521                    jne 0043271F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004326DF(C)
|
:004326FE 6A0E                    push 0000000E
:00432700 8A4D08                  mov cl, byte ptr [ebp+08]
:00432703 51                      push ecx
:00432704 E8E8020000              call 004329F1
:00432709 83C408                  add esp, 00000008
:0043270C 8B55F8                  mov edx, dword ptr [ebp-08]
:0043270F 52                      push edx

* Possible StringData Ref from Data Obj ->"%sJcBp"
                                  |
:00432710 68E8DC4700              push 0047DCE8
:00432715 6A00                    push 00000000
:00432717 E817EDFFFF              call 00431433
:0043271C 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432656(C), :004326C3(U), :004326D0(C), :004326FC(C)
|
:0043271F 8B4510                  mov eax, dword ptr [ebp+10]
:00432722 25FF000000              and eax, 000000FF
:00432727 83E004                  and eax, 00000004
:0043272A 85C0                    test eax, eax
:0043272C 0F84C3000000            je 004327F5
:00432732 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00432735 81E1FF000000            and ecx, 000000FF
:0043273B 85C9                    test ecx, ecx
:0043273D 745C                    je 0043279B
:0043273F 8B5508                  mov edx, dword ptr [ebp+08]
:00432742 81E2FF000000            and edx, 000000FF
:00432748 81FAFF000000            cmp edx, 000000FF
:0043274E 741D                    je 0043276D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00432750 6A04                    push 00000004
:00432752 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432755 81E1FF000000            and ecx, 000000FF
:0043275B 6BC924                  imul ecx, 00000024
:0043275E 81C1B83B4B00            add ecx, 004B3BB8
:00432764 E807430000              call 00436A70
:00432769 85C0                    test eax, eax
:0043276B 742E                    je 0043279B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043274E(C)
|
:0043276D 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043276F 6A03                    push 00000003
:00432771 6A21                    push 00000021
:00432773 8A4508                  mov al, byte ptr [ebp+08]
:00432776 50                      push eax
:00432777 68FF000000              push 000000FF
:0043277C B958494B00              mov ecx, 004B4958
:00432781 E80AC00100              call 0044E790
:00432786 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432789 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sqʭpp_F"
                                  |
:0043278A 68F8DC4700              push 0047DCF8
:0043278F 6A00                    push 00000000
:00432791 E89DECFFFF              call 00431433
:00432796 83C40C                  add esp, 0000000C
:00432799 EB5A                    jmp 004327F5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043273D(C), :0043276B(C)
|
:0043279B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043279E 81E2FF000000            and edx, 000000FF
:004327A4 85D2                    test edx, edx
:004327A6 754D                    jne 004327F5
:004327A8 8B4508                  mov eax, dword ptr [ebp+08]
:004327AB 25FF000000              and eax, 000000FF
:004327B0 3DFF000000              cmp eax, 000000FF
:004327B5 741D                    je 004327D4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004327B7 6A04                    push 00000004
:004327B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004327BC 81E1FF000000            and ecx, 000000FF
:004327C2 6BC924                  imul ecx, 00000024
:004327C5 81C1B83B4B00            add ecx, 004B3BB8
:004327CB E8A0420000              call 00436A70
:004327D0 85C0                    test eax, eax
:004327D2 7521                    jne 004327F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004327B5(C)
|
:004327D4 6A0C                    push 0000000C
:004327D6 8A4D08                  mov cl, byte ptr [ebp+08]
:004327D9 51                      push ecx
:004327DA E812020000              call 004329F1
:004327DF 83C408                  add esp, 00000008
:004327E2 8B55F8                  mov edx, dword ptr [ebp-08]
:004327E5 52                      push edx

* Possible StringData Ref from Data Obj ->"%sѩQIΫʭpA䵴۳QTʤF"
                                  |
:004327E6 680CDD4700              push 0047DD0C
:004327EB 6A00                    push 00000000
:004327ED E841ECFFFF              call 00431433
:004327F2 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043272C(C), :00432799(U), :004327A6(C), :004327D2(C)
|
:004327F5 8B4510                  mov eax, dword ptr [ebp+10]
:004327F8 25FF000000              and eax, 000000FF
:004327FD 83E010                  and eax, 00000010
:00432800 85C0                    test eax, eax
:00432802 0F84C3000000            je 004328CB
:00432808 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043280B 81E1FF000000            and ecx, 000000FF
:00432811 85C9                    test ecx, ecx
:00432813 745C                    je 00432871
:00432815 8B5508                  mov edx, dword ptr [ebp+08]
:00432818 81E2FF000000            and edx, 000000FF
:0043281E 81FAFF000000            cmp edx, 000000FF
:00432824 741D                    je 00432843
:00432826 6A10                    push 00000010
:00432828 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043282B 81E1FF000000            and ecx, 000000FF
:00432831 6BC924                  imul ecx, 00000024
:00432834 81C1B83B4B00            add ecx, 004B3BB8
:0043283A E831420000              call 00436A70
:0043283F 85C0                    test eax, eax
:00432841 742E                    je 00432871

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432824(C)
|
:00432843 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00432845 6A03                    push 00000003
:00432847 6A22                    push 00000022
:00432849 8A4508                  mov al, byte ptr [ebp+08]
:0043284C 50                      push eax
:0043284D 68FF000000              push 000000FF
:00432852 B958494B00              mov ecx, 004B4958
:00432857 E834BF0100              call 0044E790
:0043285C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043285F 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sqVêp_F"
                                  |
:00432860 6830DD4700              push 0047DD30
:00432865 6A00                    push 00000000
:00432867 E8C7EBFFFF              call 00431433
:0043286C 83C40C                  add esp, 0000000C
:0043286F EB5A                    jmp 004328CB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432813(C), :00432841(C)
|
:00432871 8B55F4                  mov edx, dword ptr [ebp-0C]
:00432874 81E2FF000000            and edx, 000000FF
:0043287A 85D2                    test edx, edx
:0043287C 754D                    jne 004328CB
:0043287E 8B4508                  mov eax, dword ptr [ebp+08]
:00432881 25FF000000              and eax, 000000FF
:00432886 3DFF000000              cmp eax, 000000FF
:0043288B 741D                    je 004328AA
:0043288D 6A10                    push 00000010
:0043288F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432892 81E1FF000000            and ecx, 000000FF
:00432898 6BC924                  imul ecx, 00000024
:0043289B 81C1B83B4B00            add ecx, 004B3BB8
:004328A1 E8CA410000              call 00436A70
:004328A6 85C0                    test eax, eax
:004328A8 7521                    jne 004328CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043288B(C)
|
:004328AA 6A0B                    push 0000000B
:004328AC 8A4D08                  mov cl, byte ptr [ebp+08]
:004328AF 51                      push ecx
:004328B0 E83C010000              call 004329F1
:004328B5 83C408                  add esp, 00000008
:004328B8 8B55F8                  mov edx, dword ptr [ebp-08]
:004328BB 52                      push edx

* Possible StringData Ref from Data Obj ->"%sVäF"
                                  |
:004328BC 6844DD4700              push 0047DD44
:004328C1 6A00                    push 00000000
:004328C3 E86BEBFFFF              call 00431433
:004328C8 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432802(C), :0043286F(U), :0043287C(C), :004328A8(C)
|
:004328CB 8B4510                  mov eax, dword ptr [ebp+10]
:004328CE 25FF000000              and eax, 000000FF
:004328D3 83E020                  and eax, 00000020
:004328D6 85C0                    test eax, eax
:004328D8 0F84C3000000            je 004329A1
:004328DE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004328E1 81E1FF000000            and ecx, 000000FF
:004328E7 85C9                    test ecx, ecx
:004328E9 745C                    je 00432947
:004328EB 8B5508                  mov edx, dword ptr [ebp+08]
:004328EE 81E2FF000000            and edx, 000000FF
:004328F4 81FAFF000000            cmp edx, 000000FF
:004328FA 741D                    je 00432919
:004328FC 6A20                    push 00000020
:004328FE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432901 81E1FF000000            and ecx, 000000FF
:00432907 6BC924                  imul ecx, 00000024
:0043290A 81C1B83B4B00            add ecx, 004B3BB8
:00432910 E85B410000              call 00436A70
:00432915 85C0                    test eax, eax
:00432917 742E                    je 00432947

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004328FA(C)
|
:00432919 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043291B 6A03                    push 00000003
:0043291D 6A23                    push 00000023
:0043291F 8A4508                  mov al, byte ptr [ebp+08]
:00432922 50                      push eax
:00432923 68FF000000              push 000000FF
:00432928 B958494B00              mov ecx, 004B4958
:0043292D E85EBE0100              call 0044E790
:00432932 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432935 51                      push ecx

* Possible StringData Ref from Data Obj ->"%sq˪p_F"
                                  |
:00432936 6850DD4700              push 0047DD50
:0043293B 6A00                    push 00000000
:0043293D E8F1EAFFFF              call 00431433
:00432942 83C40C                  add esp, 0000000C
:00432945 EB5A                    jmp 004329A1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004328E9(C), :00432917(C)
|
:00432947 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043294A 81E2FF000000            and edx, 000000FF
:00432950 85D2                    test edx, edx
:00432952 754D                    jne 004329A1
:00432954 8B4508                  mov eax, dword ptr [ebp+08]
:00432957 25FF000000              and eax, 000000FF
:0043295C 3DFF000000              cmp eax, 000000FF
:00432961 741D                    je 00432980
:00432963 6A20                    push 00000020
:00432965 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432968 81E1FF000000            and ecx, 000000FF
:0043296E 6BC924                  imul ecx, 00000024
:00432971 81C1B83B4B00            add ecx, 004B3BB8
:00432977 E8F4400000              call 00436A70
:0043297C 85C0                    test eax, eax
:0043297E 7521                    jne 004329A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432961(C)
|
:00432980 6A0F                    push 0000000F
:00432982 8A4D08                  mov cl, byte ptr [ebp+08]
:00432985 51                      push ecx
:00432986 E866000000              call 004329F1
:0043298B 83C408                  add esp, 00000008
:0043298E 8B55F8                  mov edx, dword ptr [ebp-08]
:00432991 52                      push edx

* Possible StringData Ref from Data Obj ->"%sJ˪p"
                                  |
:00432992 6864DD4700              push 0047DD64
:00432997 6A00                    push 00000000
:00432999 E895EAFFFF              call 00431433
:0043299E 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432514(U), :0043255C(U), :0043256D(C), :004328D8(C), :00432945(U)
|:00432952(C), :0043297E(C)
|
:004329A1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004329A4 81E1FF000000            and ecx, 000000FF
:004329AA 6BC924                  imul ecx, 00000024
:004329AD 81C1B83B4B00            add ecx, 004B3BB8
:004329B3 E828400000              call 004369E0
:004329B8 50                      push eax
:004329B9 E85EA10300              call 0046CB1C
:004329BE 83C404                  add esp, 00000004
:004329C1 6A00                    push 00000000
:004329C3 6A01                    push 00000001
:004329C5 E833B30300              call 0046DCFD
:004329CA 83C408                  add esp, 00000008
:004329CD 6A01                    push 00000001
:004329CF B9C0534B00              mov ecx, 004B53C0
:004329D4 E887B4FFFF              call 0042DE60
:004329D9 8BE5                    mov esp, ebp
:004329DB 5D                      pop ebp
:004329DC C3                      ret



:004329DD 5F224300                DWORD 0043225F
:004329E1 A1224300                DWORD 004322A1
:004329E5 3B234300                DWORD 0043233B
:004329E9 E2224300                DWORD 004322E2
:004329ED FC224300                DWORD 004322FC



* Referenced by a CALL at Addresses:
|:0043262E   , :00432704   , :004327DA   , :004328B0   , :00432986   
|
:004329F1 55                      push ebp
:004329F2 8BEC                    mov ebp, esp
:004329F4 6AFF                    push FFFFFFFF
:004329F6 682C984700              push 0047982C
:004329FB 64A100000000            mov eax, dword ptr fs:[00000000]
:00432A01 50                      push eax
:00432A02 64892500000000          mov dword ptr fs:[00000000], esp
:00432A09 81EC30010000            sub esp, 00000130
:00432A0F 8D8DC8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEC8]
:00432A15 E8D62CFDFF              call 004056F0
:00432A1A 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00432A1D E8EEB3FFFF              call 0042DE10
:00432A22 8D8DDCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEDC]
:00432A28 E8132CFDFF              call 00405640
:00432A2D C745FC00000000          mov [ebp-04], 00000000
:00432A34 6A01                    push 00000001
:00432A36 68001B0000              push 00001B00
:00432A3B 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00432A3E E84D640400              call 00478E90
:00432A43 85C0                    test eax, eax
:00432A45 7517                    jne 00432A5E
:00432A47 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00432A4E 8D8DDCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEDC]
:00432A54 E8072CFDFF              call 00405660
:00432A59 E948020000              jmp 00432CA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432A45(C)
|

* Possible StringData Ref from Data Obj ->"SPANEL.E3"
                                  |
:00432A5E 6828D54700              push 0047D528
:00432A63 8D8DDCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEDC]
:00432A69 E867E7FDFF              call 004111D5
:00432A6E 85C0                    test eax, eax
:00432A70 7517                    jne 00432A89
:00432A72 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00432A79 8D8DDCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEDC]
:00432A7F E8DC2BFDFF              call 00405660
:00432A84 E91D020000              jmp 00432CA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432A70(C)
|
:00432A89 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00432A8C E82FD4FDFF              call 0040FEC0
:00432A91 50                      push eax
:00432A92 8B450C                  mov eax, dword ptr [ebp+0C]
:00432A95 50                      push eax
:00432A96 8D8DDCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEDC]
:00432A9C E888E8FDFF              call 00411329
:00432AA1 85C0                    test eax, eax
:00432AA3 7522                    jne 00432AC7
:00432AA5 8D8DDCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEDC]
:00432AAB E875B1FDFF              call 0040DC25
:00432AB0 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00432AB7 8D8DDCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEDC]
:00432ABD E89E2BFDFF              call 00405660
:00432AC2 E9DF010000              jmp 00432CA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432AA3(C)
|
:00432AC7 8D8DDCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEDC]
:00432ACD E853B1FDFF              call 0040DC25
:00432AD2 85C0                    test eax, eax
:00432AD4 7517                    jne 00432AED
:00432AD6 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00432ADD 8D8DDCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEDC]
:00432AE3 E8782BFDFF              call 00405660
:00432AE8 E9B9010000              jmp 00432CA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432AD4(C)
|
:00432AED 8B4D08                  mov ecx, dword ptr [ebp+08]
:00432AF0 81E1FF000000            and ecx, 000000FF
:00432AF6 6BC924                  imul ecx, 00000024
:00432AF9 81C1B83B4B00            add ecx, 004B3BB8
:00432AFF E83CF1FFFF              call 00431C40
:00432B04 50                      push eax
:00432B05 8D8DC8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEC8]
:00432B0B E8903F0000              call 00436AA0
:00432B10 8B8DC8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC8]
:00432B16 81E1FF000000            and ecx, 000000FF
:00432B1C 6BC903                  imul ecx, 00000003
:00432B1F 898DD4FEFFFF            mov dword ptr [ebp+FFFFFED4], ecx
:00432B25 8B95C9FEFFFF            mov edx, dword ptr [ebp+FFFFFEC9]
:00432B2B 81E2FF000000            and edx, 000000FF
:00432B31 6BD203                  imul edx, 00000003
:00432B34 8995CCFEFFFF            mov dword ptr [ebp+FFFFFECC], edx
:00432B3A B958494B00              mov ecx, 004B4958
:00432B3F E8CE810100              call 0044AD12
:00432B44 8B8DD4FEFFFF            mov ecx, dword ptr [ebp+FFFFFED4]
:00432B4A 2BC8                    sub ecx, eax
:00432B4C C1E104                  shl ecx, 04
:00432B4F 898DD0FEFFFF            mov dword ptr [ebp+FFFFFED0], ecx
:00432B55 B958494B00              mov ecx, 004B4958
:00432B5A E8C4810100              call 0044AD23
:00432B5F 8B95CCFEFFFF            mov edx, dword ptr [ebp+FFFFFECC]
:00432B65 2BD0                    sub edx, eax
:00432B67 83C202                  add edx, 00000002
:00432B6A C1E204                  shl edx, 04
:00432B6D 83C208                  add edx, 00000008
:00432B70 8995D8FEFFFF            mov dword ptr [ebp+FFFFFED8], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00432B76 6A04                    push 00000004
:00432B78 6A00                    push 00000000
:00432B7A 68003D0100              push 00013D00
:00432B7F B9F0174B00              mov ecx, 004B17F0
:00432B84 E807640400              call 00478F90
:00432B89 50                      push eax
:00432B8A 6A30                    push 00000030
:00432B8C 6A30                    push 00000030
:00432B8E 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:00432B94 50                      push eax
:00432B95 8B8DD0FEFFFF            mov ecx, dword ptr [ebp+FFFFFED0]
:00432B9B 51                      push ecx
:00432B9C E8C4800100              call 0044AC65
:00432BA1 83C414                  add esp, 00000014
:00432BA4 C785C4FEFFFF00000000    mov dword ptr [ebp+FFFFFEC4], 00000000
:00432BAE EB0F                    jmp 00432BBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432C57(U)
|
:00432BB0 8B95C4FEFFFF            mov edx, dword ptr [ebp+FFFFFEC4]
:00432BB6 83C201                  add edx, 00000001
:00432BB9 8995C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432BAE(U)
|
:00432BBF 83BDC4FEFFFF03          cmp dword ptr [ebp+FFFFFEC4], 00000003
:00432BC6 0F8390000000            jnb 00432C5C
:00432BCC 6A01                    push 00000001
:00432BCE B9A83B4B00              mov ecx, 004B3BA8
:00432BD3 E838CDFEFF              call 0041F910
:00432BD8 E856D5FDFF              call 00410133
:00432BDD 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00432BDF 6A04                    push 00000004
:00432BE1 6A00                    push 00000000
:00432BE3 68003D0100              push 00013D00
:00432BE8 B9F0174B00              mov ecx, 004B17F0
:00432BED E89E630400              call 00478F90
:00432BF2 50                      push eax
:00432BF3 6A30                    push 00000030
:00432BF5 6A30                    push 00000030
:00432BF7 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:00432BFD 50                      push eax
:00432BFE 8B8DD0FEFFFF            mov ecx, dword ptr [ebp+FFFFFED0]
:00432C04 51                      push ecx
:00432C05 E89A7F0100              call 0044ABA4
:00432C0A 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00432C0D 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00432C0F 6A04                    push 00000004
:00432C11 6A00                    push 00000000
:00432C13 8B95C4FEFFFF            mov edx, dword ptr [ebp+FFFFFEC4]
:00432C19 69D200090000            imul edx, 00000900
:00432C1F 52                      push edx
:00432C20 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00432C23 E868630400              call 00478F90
:00432C28 50                      push eax
:00432C29 6A30                    push 00000030
:00432C2B 6A30                    push 00000030
:00432C2D 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:00432C33 50                      push eax
:00432C34 8B8DD0FEFFFF            mov ecx, dword ptr [ebp+FFFFFED0]
:00432C3A 51                      push ecx
:00432C3B E8647F0100              call 0044ABA4
:00432C40 83C418                  add esp, 00000018
:00432C43 E806D5FDFF              call 0041014E
:00432C48 E883C9FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00432C4D 6A03                    push 00000003
:00432C4F E8E2CAFFFF              call 0042F736
:00432C54 83C404                  add esp, 00000004
:00432C57 E954FFFFFF              jmp 00432BB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432BC6(C)
|
:00432C5C 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00432C5E 6A04                    push 00000004
:00432C60 6A00                    push 00000000
:00432C62 68003D0100              push 00013D00
:00432C67 B9F0174B00              mov ecx, 004B17F0
:00432C6C E81F630400              call 00478F90
:00432C71 50                      push eax
:00432C72 6A30                    push 00000030
:00432C74 6A30                    push 00000030
:00432C76 8B95D8FEFFFF            mov edx, dword ptr [ebp+FFFFFED8]
:00432C7C 52                      push edx
:00432C7D 8B85D0FEFFFF            mov eax, dword ptr [ebp+FFFFFED0]
:00432C83 50                      push eax
:00432C84 E81B7F0100              call 0044ABA4
:00432C89 83C418                  add esp, 00000018
:00432C8C 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00432C8F E84C620400              call 00478EE0
:00432C94 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00432C9B 8D8DDCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEDC]
:00432CA1 E8BA29FDFF              call 00405660

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432A59(U), :00432A84(U), :00432AC2(U), :00432AE8(U)
|
:00432CA6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00432CA9 64890D00000000          mov dword ptr fs:[00000000], ecx
:00432CB0 8BE5                    mov esp, ebp
:00432CB2 5D                      pop ebp
:00432CB3 C3                      ret



* Referenced by a CALL at Addresses:
|:00432D96   , :0043475F   , :0045FC19   
|
:00432CB4 55                      push ebp
:00432CB5 8BEC                    mov ebp, esp
:00432CB7 83EC08                  sub esp, 00000008
:00432CBA 33C0                    xor eax, eax
:00432CBC A060484B00              mov al, byte ptr [004B4860]
:00432CC1 3DFF000000              cmp eax, 000000FF
:00432CC6 755B                    jne 00432D23
:00432CC8 8D4D08                  lea ecx, dword ptr [ebp+08]
:00432CCB 51                      push ecx
:00432CCC E80BCB0100              call 0044F7DC
:00432CD1 83C404                  add esp, 00000004
:00432CD4 25FF000000              and eax, 000000FF
:00432CD9 3DFF000000              cmp eax, 000000FF
:00432CDE 7543                    jne 00432D23
:00432CE0 8D5508                  lea edx, dword ptr [ebp+08]
:00432CE3 52                      push edx
:00432CE4 E86FCB0100              call 0044F858
:00432CE9 83C404                  add esp, 00000004
:00432CEC 25FF000000              and eax, 000000FF
:00432CF1 50                      push eax
:00432CF2 33C0                    xor eax, eax
:00432CF4 A064484B00              mov al, byte ptr [004B4864]
:00432CF9 8BC8                    mov ecx, eax
:00432CFB 6BC948                  imul ecx, 00000048
:00432CFE 81C108184B00            add ecx, 004B1808
:00432D04 E8C73D0000              call 00436AD0
:00432D09 25FF000000              and eax, 000000FF
:00432D0E 3DFF000000              cmp eax, 000000FF
:00432D13 740E                    je 00432D23
:00432D15 8D4D08                  lea ecx, dword ptr [ebp+08]
:00432D18 51                      push ecx
:00432D19 B960484B00              mov ecx, 004B4860
:00432D1E E87D3D0000              call 00436AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432CC6(C), :00432CDE(C), :00432D13(C)
|
:00432D23 8B550C                  mov edx, dword ptr [ebp+0C]
:00432D26 81E2FF000000            and edx, 000000FF
:00432D2C 85D2                    test edx, edx
:00432D2E 740E                    je 00432D3E
:00432D30 33C0                    xor eax, eax
:00432D32 A060484B00              mov al, byte ptr [004B4860]
:00432D37 3DFF000000              cmp eax, 000000FF
:00432D3C 7402                    je 00432D40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432D2E(C)
|
:00432D3E EB72                    jmp 00432DB2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432D3C(C)
|
:00432D40 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00432D43 80E901                  sub cl, 01
:00432D46 884D0C                  mov byte ptr [ebp+0C], cl
:00432D49 C645FC00                mov [ebp-04], 00
:00432D4D EB09                    jmp 00432D58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432DB0(U)
|
:00432D4F 8A55FC                  mov dl, byte ptr [ebp-04]
:00432D52 80C201                  add dl, 01
:00432D55 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432D4D(U)
|
:00432D58 8B45FC                  mov eax, dword ptr [ebp-04]
:00432D5B 25FF000000              and eax, 000000FF
:00432D60 83F804                  cmp eax, 00000004
:00432D63 7D4D                    jge 00432DB2
:00432D65 8A4DFC                  mov cl, byte ptr [ebp-04]
:00432D68 51                      push ecx
:00432D69 8D5508                  lea edx, dword ptr [ebp+08]
:00432D6C 52                      push edx
:00432D6D E87FCB0100              call 0044F8F1
:00432D72 83C408                  add esp, 00000008
:00432D75 668B00                  mov ax, word ptr [eax]
:00432D78 668945F8                mov word ptr [ebp-08], ax
:00432D7C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432D7F 81E1FF000000            and ecx, 000000FF
:00432D85 81F9FF000000            cmp ecx, 000000FF
:00432D8B 7423                    je 00432DB0
:00432D8D 8A550C                  mov dl, byte ptr [ebp+0C]
:00432D90 52                      push edx
:00432D91 668B45F8                mov ax, word ptr [ebp-08]
:00432D95 50                      push eax
:00432D96 E819FFFFFF              call 00432CB4
:00432D9B 83C408                  add esp, 00000008
:00432D9E 33C9                    xor ecx, ecx
:00432DA0 8A0D60484B00            mov cl, byte ptr [004B4860]
:00432DA6 81F9FF000000            cmp ecx, 000000FF
:00432DAC 7402                    je 00432DB0
:00432DAE EB02                    jmp 00432DB2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432D8B(C), :00432DAC(C)
|
:00432DB0 EB9D                    jmp 00432D4F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432D3E(U), :00432D63(C), :00432DAE(U)
|
:00432DB2 8BE5                    mov esp, ebp
:00432DB4 5D                      pop ebp
:00432DB5 C3                      ret



* Referenced by a CALL at Addresses:
|:00433554   , :00438119   , :00440DC2   , :0046AD00   
|
:00432DB6 55                      push ebp
:00432DB7 8BEC                    mov ebp, esp
:00432DB9 51                      push ecx
:00432DBA 894DFC                  mov dword ptr [ebp-04], ecx
:00432DBD 8B45FC                  mov eax, dword ptr [ebp-04]
:00432DC0 8A4818                  mov cl, byte ptr [eax+18]
:00432DC3 51                      push ecx
:00432DC4 8B55FC                  mov edx, dword ptr [ebp-04]
:00432DC7 8B0A                    mov ecx, dword ptr [edx]
:00432DC9 6BC950                  imul ecx, 00000050
:00432DCC 81C1787F4900            add ecx, 00497F78
:00432DD2 E847EFFCFF              call 00401D1E
:00432DD7 50                      push eax
:00432DD8 E807000000              call 00432DE4
:00432DDD 83C408                  add esp, 00000008
:00432DE0 8BE5                    mov esp, ebp
:00432DE2 5D                      pop ebp
:00432DE3 C3                      ret



* Referenced by a CALL at Addresses:
|:00432DD8   , :00432EBF   , :00432EED   
|
:00432DE4 55                      push ebp
:00432DE5 8BEC                    mov ebp, esp
:00432DE7 51                      push ecx
:00432DE8 8B450C                  mov eax, dword ptr [ebp+0C]
:00432DEB 25FF000000              and eax, 000000FF
:00432DF0 24BF                    and al, BF
:00432DF2 8945FC                  mov dword ptr [ebp-04], eax
:00432DF5 837DFC06                cmp dword ptr [ebp-04], 00000006
:00432DF9 777F                    ja 00432E7A
:00432DFB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00432DFE FF248D812E4300          jmp dword ptr [4*ecx+00432E81]
:00432E05 8B4508                  mov eax, dword ptr [ebp+08]
:00432E08 6BC00F                  imul eax, 0000000F
:00432E0B 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00432E0D B90A000000              mov ecx, 0000000A
:00432E12 F7F1                    div ecx
:00432E14 894508                  mov dword ptr [ebp+08], eax
:00432E17 EB61                    jmp 00432E7A
:00432E19 8B4508                  mov eax, dword ptr [ebp+08]
:00432E1C 6BC00D                  imul eax, 0000000D
:00432E1F 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00432E21 B90A000000              mov ecx, 0000000A
:00432E26 F7F1                    div ecx
:00432E28 894508                  mov dword ptr [ebp+08], eax
:00432E2B EB4D                    jmp 00432E7A
:00432E2D 8B4508                  mov eax, dword ptr [ebp+08]
:00432E30 6BC00B                  imul eax, 0000000B
:00432E33 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00432E35 B90A000000              mov ecx, 0000000A
:00432E3A F7F1                    div ecx
:00432E3C 894508                  mov dword ptr [ebp+08], eax
:00432E3F EB39                    jmp 00432E7A
:00432E41 8B4508                  mov eax, dword ptr [ebp+08]
:00432E44 C1E002                  shl eax, 02
:00432E47 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00432E49 B905000000              mov ecx, 00000005
:00432E4E F7F1                    div ecx
:00432E50 894508                  mov dword ptr [ebp+08], eax
:00432E53 EB25                    jmp 00432E7A
:00432E55 8B4508                  mov eax, dword ptr [ebp+08]
:00432E58 6BC003                  imul eax, 00000003
:00432E5B 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00432E5D B905000000              mov ecx, 00000005
:00432E62 F7F1                    div ecx
:00432E64 894508                  mov dword ptr [ebp+08], eax
:00432E67 EB11                    jmp 00432E7A
:00432E69 8B4508                  mov eax, dword ptr [ebp+08]
:00432E6C D1E0                    shl eax, 1
:00432E6E 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00432E70 B905000000              mov ecx, 00000005
:00432E75 F7F1                    div ecx
:00432E77 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432DF9(C), :00432E17(U), :00432E2B(U), :00432E3F(U), :00432E53(U)
|:00432E67(U)
|
:00432E7A 8B4508                  mov eax, dword ptr [ebp+08]
:00432E7D 8BE5                    mov esp, ebp
:00432E7F 5D                      pop ebp
:00432E80 C3                      ret



:00432E81 052E4300                DWORD 00432E05
:00432E85 192E4300                DWORD 00432E19
:00432E89 2D2E4300                DWORD 00432E2D
:00432E8D 7A2E4300                DWORD 00432E7A
:00432E91 412E4300                DWORD 00432E41
:00432E95 552E4300                DWORD 00432E55
:00432E99 692E4300                DWORD 00432E69



* Referenced by a CALL at Addresses:
|:004335DA   , :00438136   , :00438154   , :0046AD1A   
|
:00432E9D 55                      push ebp
:00432E9E 8BEC                    mov ebp, esp
:00432EA0 51                      push ecx
:00432EA1 894DFC                  mov dword ptr [ebp-04], ecx
:00432EA4 8B45FC                  mov eax, dword ptr [ebp-04]
:00432EA7 8A4819                  mov cl, byte ptr [eax+19]
:00432EAA 51                      push ecx
:00432EAB 8B55FC                  mov edx, dword ptr [ebp-04]
:00432EAE 8B0A                    mov ecx, dword ptr [edx]
:00432EB0 6BC950                  imul ecx, 00000050
:00432EB3 81C1787F4900            add ecx, 00497F78
:00432EB9 E893EEFCFF              call 00401D51
:00432EBE 50                      push eax
:00432EBF E820FFFFFF              call 00432DE4
:00432EC4 83C408                  add esp, 00000008
:00432EC7 8BE5                    mov esp, ebp
:00432EC9 5D                      pop ebp
:00432ECA C3                      ret



* Referenced by a CALL at Addresses:
|:004370BD   , :0043736D   , :00437386   , :0043CF1F   , :004416CC   
|:004416D8   , :004416ED   , :004416F7   , :00441708   , :00441712   
|:00441798   , :004417AB   , :004417FB   , :00441805   , :00441811   
|:0044181B   , :00441838   , :0044184B   , :00441A51   , :00441AC8   
|:00455346   , :004553BD   , :0046AD34   
|
:00432ECB 55                      push ebp
:00432ECC 8BEC                    mov ebp, esp
:00432ECE 51                      push ecx
:00432ECF 894DFC                  mov dword ptr [ebp-04], ecx
:00432ED2 8B45FC                  mov eax, dword ptr [ebp-04]
:00432ED5 8A481A                  mov cl, byte ptr [eax+1A]
:00432ED8 51                      push ecx
:00432ED9 8B55FC                  mov edx, dword ptr [ebp-04]
:00432EDC 8B0A                    mov ecx, dword ptr [edx]
:00432EDE 6BC950                  imul ecx, 00000050
:00432EE1 81C1787F4900            add ecx, 00497F78
:00432EE7 E898EEFCFF              call 00401D84
:00432EEC 50                      push eax
:00432EED E8F2FEFFFF              call 00432DE4
:00432EF2 83C408                  add esp, 00000008
:00432EF5 8BE5                    mov esp, ebp
:00432EF7 5D                      pop ebp
:00432EF8 C3                      ret



* Referenced by a CALL at Addresses:
|:004336D6   , :004436BF   
|
:00432EF9 55                      push ebp
:00432EFA 8BEC                    mov ebp, esp
:00432EFC 83EC0C                  sub esp, 0000000C
:00432EFF 56                      push esi
:00432F00 894DF8                  mov dword ptr [ebp-08], ecx
:00432F03 8B45F8                  mov eax, dword ptr [ebp-08]
:00432F06 8B08                    mov ecx, dword ptr [eax]
:00432F08 6BC950                  imul ecx, 00000050
:00432F0B 81C1787F4900            add ecx, 00497F78
:00432F11 E8A4EFFCFF              call 00401EBA
:00432F16 8845FC                  mov byte ptr [ebp-04], al

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00432F19 6A02                    push 00000002
:00432F1B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432F1E E84D3B0000              call 00436A70
:00432F23 85C0                    test eax, eax
:00432F25 7567                    jne 00432F8E
:00432F27 68FF000000              push 000000FF
:00432F2C E87F540400              call 004783B0
:00432F31 83C404                  add esp, 00000004
:00432F34 8BF0                    mov esi, eax
:00432F36 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432F39 8B09                    mov ecx, dword ptr [ecx]
:00432F3B 6BC950                  imul ecx, 00000050
:00432F3E 81C1787F4900            add ecx, 00497F78
:00432F44 E86EEEFCFF              call 00401DB7
:00432F49 3BF0                    cmp esi, eax
:00432F4B 733F                    jnb 00432F8C
:00432F4D 8B45FC                  mov eax, dword ptr [ebp-04]
:00432F50 25FF000000              and eax, 000000FF
:00432F55 6BC00C                  imul eax, 0000000C
:00432F58 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00432F59 B90A000000              mov ecx, 0000000A
:00432F5E F7F9                    idiv ecx
:00432F60 3DFF000000              cmp eax, 000000FF
:00432F65 7318                    jnb 00432F7F
:00432F67 8B45FC                  mov eax, dword ptr [ebp-04]
:00432F6A 25FF000000              and eax, 000000FF
:00432F6F 6BC00C                  imul eax, 0000000C
:00432F72 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00432F73 B90A000000              mov ecx, 0000000A
:00432F78 F7F9                    idiv ecx
:00432F7A 8945F4                  mov dword ptr [ebp-0C], eax
:00432F7D EB07                    jmp 00432F86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432F65(C)
|
:00432F7F C745F4FF000000          mov [ebp-0C], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432F7D(U)
|
:00432F86 8A55F4                  mov dl, byte ptr [ebp-0C]
:00432F89 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432F4B(C)
|
:00432F8C EB3C                    jmp 00432FCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432F25(C)
|
:00432F8E 68FF000000              push 000000FF
:00432F93 E818540400              call 004783B0
:00432F98 83C404                  add esp, 00000004
:00432F9B 8BF0                    mov esi, eax
:00432F9D 8B45F8                  mov eax, dword ptr [ebp-08]
:00432FA0 8B08                    mov ecx, dword ptr [eax]
:00432FA2 6BC950                  imul ecx, 00000050
:00432FA5 81C1787F4900            add ecx, 00497F78
:00432FAB E807EEFCFF              call 00401DB7
:00432FB0 3BF0                    cmp esi, eax
:00432FB2 7616                    jbe 00432FCA
:00432FB4 8B45FC                  mov eax, dword ptr [ebp-04]
:00432FB7 25FF000000              and eax, 000000FF
:00432FBC C1E003                  shl eax, 03
:00432FBF 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00432FC0 B90A000000              mov ecx, 0000000A
:00432FC5 F7F9                    idiv ecx
:00432FC7 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00432F8C(U), :00432FB2(C)
|
:00432FCA 8A45FC                  mov al, byte ptr [ebp-04]
:00432FCD 5E                      pop esi
:00432FCE 8BE5                    mov esp, ebp
:00432FD0 5D                      pop ebp
:00432FD1 C3                      ret



* Referenced by a CALL at Addresses:
|:004410D5   , :0044EFC1   , :0045260C   , :004567A7   , :004567D4   
|
:00432FD2 55                      push ebp
:00432FD3 8BEC                    mov ebp, esp
:00432FD5 83EC08                  sub esp, 00000008
:00432FD8 894DF8                  mov dword ptr [ebp-08], ecx
:00432FDB 8B45F8                  mov eax, dword ptr [ebp-08]
:00432FDE 8B08                    mov ecx, dword ptr [eax]
:00432FE0 6BC950                  imul ecx, 00000050
:00432FE3 81C1787F4900            add ecx, 00497F78
:00432FE9 E851F1FCFF              call 0040213F
:00432FEE 8845FC                  mov byte ptr [ebp-04], al
:00432FF1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00432FF4 33D2                    xor edx, edx
:00432FF6 8A511B                  mov dl, byte ptr [ecx+1B]
:00432FF9 83E201                  and edx, 00000001
:00432FFC 85D2                    test edx, edx
:00432FFE 7404                    je 00433004
:00433000 C645FC00                mov [ebp-04], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00432FFE(C)
|
:00433004 8A45FC                  mov al, byte ptr [ebp-04]
:00433007 8BE5                    mov esp, ebp
:00433009 5D                      pop ebp
:0043300A C3                      ret



* Referenced by a CALL at Address:
|:00434747   
|
:0043300B 55                      push ebp
:0043300C 8BEC                    mov ebp, esp
:0043300E 83EC08                  sub esp, 00000008
:00433011 894DF8                  mov dword ptr [ebp-08], ecx
:00433014 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433017 E8D43A0000              call 00436AF0
:0043301C 8845FC                  mov byte ptr [ebp-04], al
:0043301F 8B45FC                  mov eax, dword ptr [ebp-04]
:00433022 25FF000000              and eax, 000000FF
:00433027 83F810                  cmp eax, 00000010
:0043302A 7C2A                    jl 00433056
:0043302C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043302F E8BC3A0000              call 00436AF0
:00433034 25FF000000              and eax, 000000FF
:00433039 50                      push eax
:0043303A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043303D E8AE390000              call 004369F0
:00433042 50                      push eax

* Possible StringData Ref from Data Obj ->"GetMoveType::oʮOYC
"
                                        ->"%s=%d"
                                  |
:00433043 6874DD4700              push 0047DD74

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00433048 6A02                    push 00000002
:0043304A E8E4E3FFFF              call 00431433
:0043304F 83C410                  add esp, 00000010
:00433052 0CFF                    or al, FF
:00433054 EB03                    jmp 00433059

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043302A(C)
|
:00433056 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433054(U)
|
:00433059 8BE5                    mov esp, ebp
:0043305B 5D                      pop ebp
:0043305C C3                      ret



* Referenced by a CALL at Addresses:
|:0043511A   , :00451AA3   , :00451FDB   , :0045220C   
|
:0043305D 55                      push ebp
:0043305E 8BEC                    mov ebp, esp
:00433060 83EC08                  sub esp, 00000008
:00433063 894DF8                  mov dword ptr [ebp-08], ecx
:00433066 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433069 E8823A0000              call 00436AF0
:0043306E 8845FC                  mov byte ptr [ebp-04], al
:00433071 8B45FC                  mov eax, dword ptr [ebp-04]
:00433074 25FF000000              and eax, 000000FF
:00433079 83F810                  cmp eax, 00000010
:0043307C 7C2A                    jl 004330A8
:0043307E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433081 E86A3A0000              call 00436AF0
:00433086 25FF000000              and eax, 000000FF
:0043308B 50                      push eax
:0043308C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043308F E85C390000              call 004369F0
:00433094 50                      push eax

* Possible StringData Ref from Data Obj ->"GetMoveUsePts::oʮOY"
                                        ->"C
%s=%d"
                                  |
:00433095 68ACDD4700              push 0047DDAC

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043309A 6A02                    push 00000002
:0043309C E892E3FFFF              call 00431433
:004330A1 83C410                  add esp, 00000010
:004330A4 0CFF                    or al, FF
:004330A6 EB21                    jmp 004330C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043307C(C)
|
:004330A8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004330AB 81E1FF000000            and ecx, 000000FF
:004330B1 51                      push ecx
:004330B2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004330B5 81E1FF000000            and ecx, 000000FF
:004330BB 6BC948                  imul ecx, 00000048
:004330BE 81C108184B00            add ecx, 004B1808
:004330C4 E8073A0000              call 00436AD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004330A6(U)
|
:004330C9 8BE5                    mov esp, ebp
:004330CB 5D                      pop ebp
:004330CC C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00433530   , :0043353B   , :00434C6C   , :00441417   , :00451C8C   
|:00455631   , :00455643   
|
:004330CF 55                      push ebp
:004330D0 8BEC                    mov ebp, esp
:004330D2 83EC08                  sub esp, 00000008
:004330D5 894DF8                  mov dword ptr [ebp-08], ecx
:004330D8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004330DB E8103A0000              call 00436AF0
:004330E0 25FF000000              and eax, 000000FF
:004330E5 83F810                  cmp eax, 00000010
:004330E8 7C2A                    jl 00433114
:004330EA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004330ED E8FE390000              call 00436AF0
:004330F2 25FF000000              and eax, 000000FF
:004330F7 50                      push eax
:004330F8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004330FB E8F0380000              call 004369F0
:00433100 50                      push eax

* Possible StringData Ref from Data Obj ->"oaήĪGY%s=%d"
                                  |
:00433101 68E8DD4700              push 0047DDE8

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00433106 6A02                    push 00000002
:00433108 E826E3FFFF              call 00431433
:0043310D 83C410                  add esp, 00000010
:00433110 32C0                    xor al, al
:00433112 EB4E                    jmp 00433162

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004330E8(C)
|
:00433114 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433117 E824EBFFFF              call 00431C40
:0043311C 50                      push eax
:0043311D E836C70100              call 0044F858
:00433122 83C404                  add esp, 00000004
:00433125 25FF000000              and eax, 000000FF
:0043312A 50                      push eax
:0043312B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043312E E8BD390000              call 00436AF0
:00433133 8AC8                    mov cl, al
:00433135 81E1FF000000            and ecx, 000000FF
:0043313B 6BC948                  imul ecx, 00000048
:0043313E 81C108184B00            add ecx, 004B1808
:00433144 E8F7390000              call 00436B40
:00433149 8845FC                  mov byte ptr [ebp-04], al
:0043314C 8B45FC                  mov eax, dword ptr [ebp-04]
:0043314F 25FF000000              and eax, 000000FF
:00433154 3DFF000000              cmp eax, 000000FF
:00433159 7504                    jne 0043315F
:0043315B C645FC00                mov [ebp-04], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433159(C)
|
:0043315F 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433112(U)
|
:00433162 8BE5                    mov esp, ebp
:00433164 5D                      pop ebp
:00433165 C3                      ret



* Referenced by a CALL at Addresses:
|:0043875A   , :0044477F   , :00450BFD   , :004510F7   , :004514A8   
|:0045245F   , :00456524   
|
:00433166 55                      push ebp
:00433167 8BEC                    mov ebp, esp
:00433169 83EC0C                  sub esp, 0000000C
:0043316C 894DF4                  mov dword ptr [ebp-0C], ecx
:0043316F C645F800                mov [ebp-08], 00
:00433173 8B45F4                  mov eax, dword ptr [ebp-0C]
:00433176 8B08                    mov ecx, dword ptr [eax]
:00433178 6BC950                  imul ecx, 00000050
:0043317B 81C1787F4900            add ecx, 00497F78
:00433181 E83A00FDFF              call 004031C0
:00433186 8845FC                  mov byte ptr [ebp-04], al
:00433189 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043318C 81E1FF000000            and ecx, 000000FF
:00433192 81F9FF000000            cmp ecx, 000000FF
:00433198 7430                    je 004331CA
:0043319A 8A55FC                  mov dl, byte ptr [ebp-04]
:0043319D 52                      push edx
:0043319E 8B45F4                  mov eax, dword ptr [ebp-0C]
:004331A1 8B08                    mov ecx, dword ptr [eax]
:004331A3 6BC950                  imul ecx, 00000050
:004331A6 81C1787F4900            add ecx, 00497F78
:004331AC E82F00FDFF              call 004031E0
:004331B1 8AC8                    mov cl, al
:004331B3 81E1FF000000            and ecx, 000000FF
:004331B9 6BC922                  imul ecx, 00000022
:004331BC 81C1D0474900            add ecx, 004947D0
:004331C2 E8493A0000              call 00436C10
:004331C7 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433198(C)
|
:004331CA 8A45F8                  mov al, byte ptr [ebp-08]
:004331CD 8BE5                    mov esp, ebp
:004331CF 5D                      pop ebp
:004331D0 C3                      ret


:004331D1 55                      push ebp
:004331D2 8BEC                    mov ebp, esp
:004331D4 83EC08                  sub esp, 00000008
:004331D7 894DF8                  mov dword ptr [ebp-08], ecx
:004331DA 8B45F8                  mov eax, dword ptr [ebp-08]
:004331DD 8B08                    mov ecx, dword ptr [eax]
:004331DF 6BC950                  imul ecx, 00000050
:004331E2 81C1787F4900            add ecx, 00497F78
:004331E8 E82365FEFF              call 00419710
:004331ED 8845FC                  mov byte ptr [ebp-04], al

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004331F0 6A02                    push 00000002
:004331F2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004331F5 E876380000              call 00436A70
:004331FA 85C0                    test eax, eax
:004331FC 7410                    je 0043320E
:004331FE 8B45FC                  mov eax, dword ptr [ebp-04]
:00433201 25FF000000              and eax, 000000FF
:00433206 99                      cdq
:00433207 2BC2                    sub eax, edx
:00433209 D1F8                    sar eax, 1
:0043320B 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004331FC(C)
|
:0043320E 8A45FC                  mov al, byte ptr [ebp-04]
:00433211 8BE5                    mov esp, ebp
:00433213 5D                      pop ebp
:00433214 C3                      ret



* Referenced by a CALL at Addresses:
|:00401799   , :0040AF38   , :004380E2   , :004380F7   , :0043840C   
|:0043978D   , :0043B94C   , :0043B961   , :0043C72C   , :00441035   
|:00443D26   , :0044ED78   , :0044EF09   , :0045CF74   , :0045EA6E   
|:0045FA65   , :0046067E   , :00460A3A   , :0046100B   
|
:00433215 55                      push ebp
:00433216 8BEC                    mov ebp, esp
:00433218 83EC08                  sub esp, 00000008
:0043321B 894DF8                  mov dword ptr [ebp-08], ecx
:0043321E 8B45F8                  mov eax, dword ptr [ebp-08]
:00433221 8B08                    mov ecx, dword ptr [eax]
:00433223 6BC950                  imul ecx, 00000050
:00433226 81C1787F4900            add ecx, 00497F78
:0043322C E8B9EBFCFF              call 00401DEA
:00433231 8945FC                  mov dword ptr [ebp-04], eax
:00433234 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433237 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:0043323A 760B                    jbe 00433247
:0043323C 8B55F8                  mov edx, dword ptr [ebp-08]
:0043323F 8B45FC                  mov eax, dword ptr [ebp-04]
:00433242 894210                  mov dword ptr [edx+10], eax
:00433245 EB09                    jmp 00433250

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043323A(C)
|
:00433247 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043324A 8B5508                  mov edx, dword ptr [ebp+08]
:0043324D 895110                  mov dword ptr [ecx+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433245(U)
|
:00433250 8BE5                    mov esp, ebp
:00433252 5D                      pop ebp
:00433253 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040181E   , :0040AF67   , :00437318   , :00438647   , :004397C4   
|:0043D1B6   , :0043F0AC   , :0043F0DE   , :00443D4F   , :0044ED6E   
|:0044EF1A   , :0045CF9D   , :0045FA7F   , :00461028   
|
:00433256 55                      push ebp
:00433257 8BEC                    mov ebp, esp
:00433259 83EC08                  sub esp, 00000008
:0043325C 894DF8                  mov dword ptr [ebp-08], ecx
:0043325F 8B45F8                  mov eax, dword ptr [ebp-08]
:00433262 8B08                    mov ecx, dword ptr [eax]
:00433264 6BC950                  imul ecx, 00000050
:00433267 81C1787F4900            add ecx, 00497F78
:0043326D E8A9EBFCFF              call 00401E1B
:00433272 8945FC                  mov dword ptr [ebp-04], eax
:00433275 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433278 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:0043327B 760B                    jbe 00433288
:0043327D 8B55F8                  mov edx, dword ptr [ebp-08]
:00433280 8B45FC                  mov eax, dword ptr [ebp-04]
:00433283 894214                  mov dword ptr [edx+14], eax
:00433286 EB09                    jmp 00433291

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043327B(C)
|
:00433288 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043328B 8B5508                  mov edx, dword ptr [ebp+08]
:0043328E 895114                  mov dword ptr [ecx+14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433286(U)
|
:00433291 8BE5                    mov esp, ebp
:00433293 5D                      pop ebp
:00433294 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004335FE   , :00433645   , :00433654   , :004439AC   
|
:00433297 55                      push ebp
:00433298 8BEC                    mov ebp, esp
:0043329A 83EC18                  sub esp, 00000018
:0043329D 56                      push esi
:0043329E 894DE8                  mov dword ptr [ebp-18], ecx
:004332A1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004332A4 E897E9FFFF              call 00431C40
:004332A9 668B00                  mov ax, word ptr [eax]
:004332AC 668945EC                mov word ptr [ebp-14], ax
:004332B0 68FF000000              push 000000FF
:004332B5 68FF000000              push 000000FF
:004332BA 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004332BD E89E380000              call 00436B60
:004332C2 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004332C5 E84696FDFF              call 0040C910
:004332CA 8945F8                  mov dword ptr [ebp-08], eax
:004332CD C745F400000000          mov [ebp-0C], 00000000
:004332D4 EB09                    jmp 004332DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043339F(U)
|
:004332D6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004332D9 83C101                  add ecx, 00000001
:004332DC 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004332D4(U)
|
:004332DF 837DF408                cmp dword ptr [ebp-0C], 00000008
:004332E3 0F83BB000000            jnb 004333A4
:004332E9 8A55F4                  mov dl, byte ptr [ebp-0C]
:004332EC 52                      push edx
:004332ED 8D45EC                  lea eax, dword ptr [ebp-14]
:004332F0 50                      push eax
:004332F1 E8FBC50100              call 0044F8F1
:004332F6 83C408                  add esp, 00000008
:004332F9 50                      push eax
:004332FA 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004332FD E89E370000              call 00436AA0
:00433302 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433305 81E1FF000000            and ecx, 000000FF
:0043330B 81F9FF000000            cmp ecx, 000000FF
:00433311 0F8488000000            je 0043339F
:00433317 8D55FC                  lea edx, dword ptr [ebp-04]
:0043331A 52                      push edx
:0043331B E8BCC40100              call 0044F7DC
:00433320 83C404                  add esp, 00000004
:00433323 8845F0                  mov byte ptr [ebp-10], al
:00433326 8B45F0                  mov eax, dword ptr [ebp-10]
:00433329 25FF000000              and eax, 000000FF
:0043332E 3DFF000000              cmp eax, 000000FF
:00433333 746A                    je 0043339F
:00433335 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433338 81E1FF000000            and ecx, 000000FF
:0043333E 6BC924                  imul ecx, 00000024
:00433341 81C1B83B4B00            add ecx, 004B3BB8
:00433347 E8A4370000              call 00436AF0
:0043334C 25FF000000              and eax, 000000FF
:00433351 83F80A                  cmp eax, 0000000A
:00433354 7549                    jne 0043339F
:00433356 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00433359 E8B295FDFF              call 0040C910
:0043335E 8BF0                    mov esi, eax
:00433360 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433363 81E1FF000000            and ecx, 000000FF
:00433369 6BC924                  imul ecx, 00000024
:0043336C 81C1B83B4B00            add ecx, 004B3BB8
:00433372 E89995FDFF              call 0040C910
:00433377 3BF0                    cmp esi, eax
:00433379 7524                    jne 0043339F
:0043337B 837D0800                cmp dword ptr [ebp+08], 00000000
:0043337F 7417                    je 00433398
:00433381 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433384 81E1FF000000            and ecx, 000000FF
:0043338A 6BC924                  imul ecx, 00000024
:0043338D 81C1B83B4B00            add ecx, 004B3BB8
:00433393 E848220000              call 004355E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043337F(C)
|
:00433398 B801000000              mov eax, 00000001
:0043339D EB07                    jmp 004333A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433311(C), :00433333(C), :00433354(C), :00433379(C)
|
:0043339F E932FFFFFF              jmp 004332D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004332E3(C)
|
:004333A4 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043339D(U)
|
:004333A6 5E                      pop esi
:004333A7 8BE5                    mov esp, ebp
:004333A9 5D                      pop ebp
:004333AA C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0043357E   , :0043358D   
|
:004333AD 55                      push ebp
:004333AE 8BEC                    mov ebp, esp
:004333B0 83EC18                  sub esp, 00000018
:004333B3 894DE8                  mov dword ptr [ebp-18], ecx
:004333B6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004333B9 E882E8FFFF              call 00431C40
:004333BE 668B00                  mov ax, word ptr [eax]
:004333C1 668945EC                mov word ptr [ebp-14], ax
:004333C5 68FF000000              push 000000FF
:004333CA 68FF000000              push 000000FF
:004333CF 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004333D2 E889370000              call 00436B60
:004333D7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004333DA E83195FDFF              call 0040C910
:004333DF 8945F8                  mov dword ptr [ebp-08], eax
:004333E2 C745F400000000          mov [ebp-0C], 00000000
:004333E9 EB09                    jmp 004333F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433484(U)
|
:004333EB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004333EE 83C101                  add ecx, 00000001
:004333F1 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004333E9(U)
|
:004333F4 837DF404                cmp dword ptr [ebp-0C], 00000004
:004333F8 0F838B000000            jnb 00433489
:004333FE 8A55F4                  mov dl, byte ptr [ebp-0C]
:00433401 52                      push edx
:00433402 8D45EC                  lea eax, dword ptr [ebp-14]
:00433405 50                      push eax
:00433406 E8E6C40100              call 0044F8F1
:0043340B 83C408                  add esp, 00000008
:0043340E 50                      push eax
:0043340F 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00433412 E889360000              call 00436AA0
:00433417 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043341A 81E1FF000000            and ecx, 000000FF
:00433420 81F9FF000000            cmp ecx, 000000FF
:00433426 745C                    je 00433484
:00433428 8D55FC                  lea edx, dword ptr [ebp-04]
:0043342B 52                      push edx
:0043342C E8ABC30100              call 0044F7DC
:00433431 83C404                  add esp, 00000004
:00433434 8845F0                  mov byte ptr [ebp-10], al
:00433437 8B45F0                  mov eax, dword ptr [ebp-10]
:0043343A 25FF000000              and eax, 000000FF
:0043343F 3DFF000000              cmp eax, 000000FF
:00433444 743E                    je 00433484
:00433446 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433449 81E1FF000000            and ecx, 000000FF
:0043344F 8B55F8                  mov edx, dword ptr [ebp-08]
:00433452 F7DA                    neg edx
:00433454 1BD2                    sbb edx, edx
:00433456 83E2E2                  and edx, FFFFFFE2
:00433459 83C21E                  add edx, 0000001E
:0043345C 3BCA                    cmp ecx, edx
:0043345E 7524                    jne 00433484
:00433460 837D0800                cmp dword ptr [ebp+08], 00000000
:00433464 7417                    je 0043347D
:00433466 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433469 81E1FF000000            and ecx, 000000FF
:0043346F 6BC924                  imul ecx, 00000024
:00433472 81C1B83B4B00            add ecx, 004B3BB8
:00433478 E863210000              call 004355E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433464(C)
|
:0043347D B801000000              mov eax, 00000001
:00433482 EB07                    jmp 0043348B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433426(C), :00433444(C), :0043345E(C)
|
:00433484 E962FFFFFF              jmp 004333EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004333F8(C)
|
:00433489 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433482(U)
|
:0043348B 8BE5                    mov esp, ebp
:0043348D 5D                      pop ebp
:0043348E C20400                  ret 0004


:00433491 55                      push ebp
:00433492 8BEC                    mov ebp, esp
:00433494 51                      push ecx
:00433495 894DFC                  mov dword ptr [ebp-04], ecx
:00433498 8B45FC                  mov eax, dword ptr [ebp-04]
:0043349B 8B08                    mov ecx, dword ptr [eax]
:0043349D 6BC950                  imul ecx, 00000050
:004334A0 81C1787F4900            add ecx, 00497F78
:004334A6 E8EEEBFCFF              call 00402099
:004334AB 8BE5                    mov esp, ebp
:004334AD 5D                      pop ebp
:004334AE C3                      ret



* Referenced by a CALL at Address:
|:004564CB   
|
:004334AF 55                      push ebp
:004334B0 8BEC                    mov ebp, esp
:004334B2 51                      push ecx
:004334B3 894DFC                  mov dword ptr [ebp-04], ecx
:004334B6 8B45FC                  mov eax, dword ptr [ebp-04]
:004334B9 8B08                    mov ecx, dword ptr [eax]
:004334BB 6BC950                  imul ecx, 00000050
:004334BE 81C1787F4900            add ecx, 00497F78
:004334C4 E823ECFCFF              call 004020EC
:004334C9 8BE5                    mov esp, ebp
:004334CB 5D                      pop ebp
:004334CC C3                      ret



* Referenced by a CALL at Addresses:
|:00441532   , :0044366E   , :0045128D   , :00451675   
|
:004334CD 55                      push ebp
:004334CE 8BEC                    mov ebp, esp
:004334D0 83EC34                  sub esp, 00000034
:004334D3 56                      push esi
:004334D4 894DD4                  mov dword ptr [ebp-2C], ecx
:004334D7 8B4508                  mov eax, dword ptr [ebp+08]
:004334DA 50                      push eax
:004334DB E8A815FDFF              call 00404A88
:004334E0 83C404                  add esp, 00000004
:004334E3 50                      push eax
:004334E4 E8E6EAFFFF              call 00431FCF
:004334E9 83C404                  add esp, 00000004
:004334EC 8845D8                  mov byte ptr [ebp-28], al
:004334EF 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004334F2 81E1FF000000            and ecx, 000000FF
:004334F8 81F9FF000000            cmp ecx, 000000FF
:004334FE 7507                    jne 00433507
:00433500 33C0                    xor eax, eax
:00433502 E917020000              jmp 0043371E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004334FE(C)
|
:00433507 8B55D8                  mov edx, dword ptr [ebp-28]
:0043350A 81E2FF000000            and edx, 000000FF
:00433510 6BD224                  imul edx, 00000024
:00433513 81C2B83B4B00            add edx, 004B3BB8
:00433519 8955FC                  mov dword ptr [ebp-04], edx
:0043351C 8B45D4                  mov eax, dword ptr [ebp-2C]
:0043351F 8B08                    mov ecx, dword ptr [eax]
:00433521 6BC950                  imul ecx, 00000050
:00433524 81C1787F4900            add ecx, 00497F78
:0043352A 894DF0                  mov dword ptr [ebp-10], ecx
:0043352D 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00433530 E89AFBFFFF              call 004330CF
:00433535 8845E8                  mov byte ptr [ebp-18], al
:00433538 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043353B E88FFBFFFF              call 004330CF
:00433540 8845E0                  mov byte ptr [ebp-20], al
:00433543 C745F800000000          mov [ebp-08], 00000000
:0043354A C745F400000000          mov [ebp-0C], 00000000
:00433551 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00433554 E85DF8FFFF              call 00432DB6
:00433559 8B55E8                  mov edx, dword ptr [ebp-18]
:0043355C 81E2FF000000            and edx, 000000FF
:00433562 0FAFC2                  imul eax, edx
:00433565 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00433567 B90A000000              mov ecx, 0000000A
:0043356C F7F1                    div ecx
:0043356E 8945DC                  mov dword ptr [ebp-24], eax
:00433571 837D1000                cmp dword ptr [ebp+10], 00000000
:00433575 7511                    jne 00433588
:00433577 8B550C                  mov edx, dword ptr [ebp+0C]
:0043357A 52                      push edx
:0043357B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043357E E82AFEFFFF              call 004333AD
:00433583 8945D0                  mov dword ptr [ebp-30], eax
:00433586 EB0D                    jmp 00433595

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433575(C)
|
:00433588 6A00                    push 00000000
:0043358A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043358D E81BFEFFFF              call 004333AD
:00433592 8945D0                  mov dword ptr [ebp-30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433586(U)
|
:00433595 8B45D0                  mov eax, dword ptr [ebp-30]
:00433598 8945F4                  mov dword ptr [ebp-0C], eax
:0043359B 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043359F 7436                    je 004335D7
:004335A1 8B45DC                  mov eax, dword ptr [ebp-24]
:004335A4 6BC00C                  imul eax, 0000000C
:004335A7 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004335A9 B90A000000              mov ecx, 0000000A
:004335AE F7F1                    div ecx
:004335B0 8945DC                  mov dword ptr [ebp-24], eax
:004335B3 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004335B7 741E                    je 004335D7
:004335B9 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004335BB 6A03                    push 00000003
:004335BD 6A1D                    push 0000001D
:004335BF 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004335C2 E819EA0000              call 00441FE0
:004335C7 50                      push eax
:004335C8 68FF000000              push 000000FF
:004335CD B958494B00              mov ecx, 004B4958
:004335D2 E8B9B10100              call 0044E790

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043359F(C), :004335B7(C)
|
:004335D7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004335DA E8BEF8FFFF              call 00432E9D
:004335DF 8B55E0                  mov edx, dword ptr [ebp-20]
:004335E2 81E2FF000000            and edx, 000000FF
:004335E8 0FAFC2                  imul eax, edx
:004335EB 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004335ED B90A000000              mov ecx, 0000000A
:004335F2 F7F1                    div ecx
:004335F4 8945E4                  mov dword ptr [ebp-1C], eax
:004335F7 8B550C                  mov edx, dword ptr [ebp+0C]
:004335FA 52                      push edx
:004335FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004335FE E894FCFFFF              call 00433297
:00433603 85C0                    test eax, eax
:00433605 742A                    je 00433631
:00433607 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043360A 6BC003                  imul eax, 00000003
:0043360D D1E8                    shr eax, 1
:0043360F 8945E4                  mov dword ptr [ebp-1C], eax
:00433612 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00433616 7419                    je 00433631
:00433618 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043361A 6A03                    push 00000003
:0043361C 6A1E                    push 0000001E
:0043361E 8A4DD8                  mov cl, byte ptr [ebp-28]
:00433621 51                      push ecx
:00433622 68FF000000              push 000000FF
:00433627 B958494B00              mov ecx, 004B4958
:0043362C E85FB10100              call 0044E790

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433605(C), :00433616(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00433631 C745EC0A000000          mov [ebp-14], 0000000A
:00433638 837D1000                cmp dword ptr [ebp+10], 00000000
:0043363C 7511                    jne 0043364F
:0043363E 8B550C                  mov edx, dword ptr [ebp+0C]
:00433641 52                      push edx
:00433642 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00433645 E84DFCFFFF              call 00433297
:0043364A 8945CC                  mov dword ptr [ebp-34], eax
:0043364D EB0D                    jmp 0043365C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043363C(C)
|
:0043364F 6A00                    push 00000000
:00433651 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00433654 E83EFCFFFF              call 00433297
:00433659 8945CC                  mov dword ptr [ebp-34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043364D(U)
|
:0043365C 8B45CC                  mov eax, dword ptr [ebp-34]
:0043365F 8945F4                  mov dword ptr [ebp-0C], eax
:00433662 837DF400                cmp dword ptr [ebp-0C], 00000000
:00433666 742D                    je 00433695
:00433668 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043366B 83C105                  add ecx, 00000005
:0043366E 894DEC                  mov dword ptr [ebp-14], ecx
:00433671 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00433675 741E                    je 00433695
:00433677 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00433679 6A03                    push 00000003
:0043367B 6A29                    push 00000029
:0043367D 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00433680 E85BE90000              call 00441FE0
:00433685 50                      push eax
:00433686 68FF000000              push 000000FF
:0043368B B958494B00              mov ecx, 004B4958
:00433690 E8FBB00100              call 0044E790

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433666(C), :00433675(C)
|
:00433695 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433698 E853340000              call 00436AF0
:0043369D 25FF000000              and eax, 000000FF
:004336A2 85C0                    test eax, eax
:004336A4 7411                    je 004336B7
:004336A6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004336A9 E842340000              call 00436AF0
:004336AE 25FF000000              and eax, 000000FF
:004336B3 85C0                    test eax, eax
:004336B5 7509                    jne 004336C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004336A4(C)
|
:004336B7 8B55EC                  mov edx, dword ptr [ebp-14]
:004336BA 83EA05                  sub edx, 00000005
:004336BD 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004336B5(C)
|
:004336C0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004336C3 E886E7FCFF              call 00401E4E
:004336C8 50                      push eax
:004336C9 E8E24C0400              call 004783B0
:004336CE 83C404                  add esp, 00000004
:004336D1 8BF0                    mov esi, eax
:004336D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004336D6 E81EF8FFFF              call 00432EF9
:004336DB 25FF000000              and eax, 000000FF
:004336E0 33D2                    xor edx, edx
:004336E2 F775EC                  div [ebp-14]
:004336E5 3BF0                    cmp esi, eax
:004336E7 7318                    jnb 00433701
:004336E9 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004336ED 7412                    je 00433701
:004336EF 6A10                    push 00000010
:004336F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004336F4 E877330000              call 00436A70
:004336F9 85C0                    test eax, eax
:004336FB 7504                    jne 00433701
:004336FD 33C0                    xor eax, eax
:004336FF EB1D                    jmp 0043371E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004336E7(C), :004336ED(C), :004336FB(C)
|
:00433701 8B45DC                  mov eax, dword ptr [ebp-24]
:00433704 3B45E4                  cmp eax, dword ptr [ebp-1C]
:00433707 7709                    ja 00433712
:00433709 C745F801000000          mov [ebp-08], 00000001
:00433710 EB09                    jmp 0043371B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433707(C)
|
:00433712 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00433715 2B4DE4                  sub ecx, dword ptr [ebp-1C]
:00433718 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433710(U)
|
:0043371B 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433502(U), :004336FF(U)
|
:0043371E 5E                      pop esi
:0043371F 8BE5                    mov esp, ebp
:00433721 5D                      pop ebp
:00433722 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0045D57C   , :0045EB1B   
|
:00433725 55                      push ebp
:00433726 8BEC                    mov ebp, esp
:00433728 83EC28                  sub esp, 00000028
:0043372B 56                      push esi
:0043372C 894DDC                  mov dword ptr [ebp-24], ecx
:0043372F 8B45DC                  mov eax, dword ptr [ebp-24]
:00433732 8B08                    mov ecx, dword ptr [eax]
:00433734 6BC950                  imul ecx, 00000050
:00433737 81C1787F4900            add ecx, 00497F78
:0043373D 894DF0                  mov dword ptr [ebp-10], ecx
:00433740 8B55DC                  mov edx, dword ptr [ebp-24]
:00433743 8B4210                  mov eax, dword ptr [edx+10]
:00433746 8945EC                  mov dword ptr [ebp-14], eax
:00433749 C745F400000000          mov [ebp-0C], 00000000
:00433750 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00433753 E878890200              call 0045C0D0
:00433758 25FF000000              and eax, 000000FF
:0043375D 83F802                  cmp eax, 00000002
:00433760 7405                    je 00433767
:00433762 E98F020000              jmp 004339F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433760(C)
|
:00433767 6A10                    push 00000010
:00433769 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043376C E8FF320000              call 00436A70
:00433771 85C0                    test eax, eax
:00433773 7405                    je 0043377A
:00433775 E97C020000              jmp 004339F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433773(C)
|
:0043377A 6A00                    push 00000000
:0043377C B9C0534B00              mov ecx, 004B53C0
:00433781 E8DAA6FFFF              call 0042DE60
:00433786 6A00                    push 00000000
:00433788 6A00                    push 00000000
:0043378A E86EA50300              call 0046DCFD
:0043378F 83C408                  add esp, 00000008
:00433792 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00433795 83C105                  add ecx, 00000005
:00433798 51                      push ecx
:00433799 E8BAC00100              call 0044F858
:0043379E 83C404                  add esp, 00000004
:004337A1 8845F8                  mov byte ptr [ebp-08], al
:004337A4 C745FC00000000          mov [ebp-04], 00000000
:004337AB 8B55DC                  mov edx, dword ptr [ebp-24]
:004337AE 83C205                  add edx, 00000005
:004337B1 52                      push edx
:004337B2 E89DBE0100              call 0044F654
:004337B7 83C404                  add esp, 00000004
:004337BA 85C0                    test eax, eax
:004337BC 744C                    je 0043380A
:004337BE C745FC01000000          mov [ebp-04], 00000001
:004337C5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004337C8 E81DE6FCFF              call 00401DEA
:004337CD 8BF0                    mov esi, eax
:004337CF 8A45F8                  mov al, byte ptr [ebp-08]
:004337D2 50                      push eax
:004337D3 E823020000              call 004339FB
:004337D8 83C404                  add esp, 00000004
:004337DB 0FAFC6                  imul eax, esi
:004337DE 33D2                    xor edx, edx
:004337E0 B964000000              mov ecx, 00000064
:004337E5 F7F1                    div ecx
:004337E7 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004337EA 6A02                    push 00000002
:004337EC 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004337EF E87C320000              call 00436A70
:004337F4 85C0                    test eax, eax
:004337F6 7512                    jne 0043380A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004337F8 6A05                    push 00000005
:004337FA E8B14B0400              call 004783B0
:004337FF 83C404                  add esp, 00000004
:00433802 8B55F4                  mov edx, dword ptr [ebp-0C]
:00433805 03D0                    add edx, eax
:00433807 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004337BC(C), :004337F6(C)
|
:0043380A 8B45FC                  mov eax, dword ptr [ebp-04]
:0043380D 83E001                  and eax, 00000001
:00433810 85C0                    test eax, eax
:00433812 7426                    je 0043383A
:00433814 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00433817 8B7110                  mov esi, dword ptr [ecx+10]
:0043381A 0375F4                  add esi, dword ptr [ebp-0C]
:0043381D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433820 E8C5E5FCFF              call 00401DEA
:00433825 3BF0                    cmp esi, eax
:00433827 7611                    jbe 0043383A
:00433829 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043382C E8B9E5FCFF              call 00401DEA
:00433831 8B55DC                  mov edx, dword ptr [ebp-24]
:00433834 2B4210                  sub eax, dword ptr [edx+10]
:00433837 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433812(C), :00433827(C)
|
:0043383A 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043383D E83E1FFDFF              call 00405780
:00433842 25FF000000              and eax, 000000FF
:00433847 83F807                  cmp eax, 00000007
:0043384A 0F8561010000            jne 004339B1
:00433850 837DFC00                cmp dword ptr [ebp-04], 00000000
:00433854 0F8457010000            je 004339B1
:0043385A 837DFC01                cmp dword ptr [ebp-04], 00000001
:0043385E 7514                    jne 00433874
:00433860 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433863 E882E5FCFF              call 00401DEA
:00433868 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043386B 394110                  cmp dword ptr [ecx+10], eax
:0043386E 0F833D010000            jnb 004339B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043385E(C)
|
:00433874 8B55DC                  mov edx, dword ptr [ebp-24]
:00433877 8A4206                  mov al, byte ptr [edx+06]
:0043387A 50                      push eax
:0043387B 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043387E 8A5105                  mov dl, byte ptr [ecx+05]
:00433881 52                      push edx
:00433882 B958494B00              mov ecx, 004B4958
:00433887 E861A20100              call 0044DAED
:0043388C 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043388E 6A03                    push 00000003
:00433890 6A1B                    push 0000001B
:00433892 8B45DC                  mov eax, dword ptr [ebp-24]
:00433895 8A4804                  mov cl, byte ptr [eax+04]
:00433898 51                      push ecx
:00433899 68FF000000              push 000000FF
:0043389E B958494B00              mov ecx, 004B4958
:004338A3 E8E8AE0100              call 0044E790
:004338A8 8B55DC                  mov edx, dword ptr [ebp-24]
:004338AB 8A4204                  mov al, byte ptr [edx+04]
:004338AE 50                      push eax
:004338AF 8D4DE0                  lea ecx, dword ptr [ebp-20]
:004338B2 51                      push ecx
:004338B3 E8F4670100              call 0044A0AC
:004338B8 83C408                  add esp, 00000008
:004338BB B958494B00              mov ecx, 004B4958
:004338C0 E87EB00100              call 0044E943
:004338C5 2B05941E4800            sub eax, dword ptr [00481E94]
:004338CB 83C010                  add eax, 00000010
:004338CE 99                      cdq
:004338CF 83E20F                  and edx, 0000000F
:004338D2 03C2                    add eax, edx
:004338D4 C1F804                  sar eax, 04
:004338D7 8945E8                  mov dword ptr [ebp-18], eax
:004338DA 8B55E8                  mov edx, dword ptr [ebp-18]
:004338DD D1FA                    sar edx, 1
:004338DF 8855E4                  mov byte ptr [ebp-1C], dl
:004338E2 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004338E5 E82690FDFF              call 0040C910
:004338EA 85C0                    test eax, eax
:004338EC 7411                    je 004338FF
:004338EE 8B45E4                  mov eax, dword ptr [ebp-1C]
:004338F1 25FF000000              and eax, 000000FF
:004338F6 8D4C000E                lea ecx, dword ptr [eax+eax+0E]
:004338FA 894DD8                  mov dword ptr [ebp-28], ecx
:004338FD EB10                    jmp 0043390F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004338EC(C)
|
:004338FF 8B55E4                  mov edx, dword ptr [ebp-1C]
:00433902 81E2FF000000            and edx, 000000FF
:00433908 8D44122A                lea eax, dword ptr [edx+edx+2A]
:0043390C 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004338FD(U)
|
:0043390F 8A4DD8                  mov cl, byte ptr [ebp-28]
:00433912 884DE0                  mov byte ptr [ebp-20], cl
:00433915 33D2                    xor edx, edx
:00433917 8A159D4E4B00            mov dl, byte ptr [004B4E9D]
:0043391D 8D441206                lea eax, dword ptr [edx+edx+06]
:00433921 50                      push eax
:00433922 B9A83B4B00              mov ecx, 004B3BA8
:00433927 E8E4BFFEFF              call 0041F910
:0043392C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043392F 8A5104                  mov dl, byte ptr [ecx+04]
:00433932 52                      push edx
:00433933 668B45E0                mov ax, word ptr [ebp-20]
:00433937 50                      push eax
:00433938 E81B680100              call 0044A158
:0043393D 83C408                  add esp, 00000008
:00433940 E88BBCFFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00433945 6A03                    push 00000003
:00433947 E8EABDFFFF              call 0042F736
:0043394C 83C404                  add esp, 00000004
:0043394F 33C9                    xor ecx, ecx
:00433951 8A0D9D4E4B00            mov cl, byte ptr [004B4E9D]
:00433957 8D540906                lea edx, dword ptr [ecx+ecx+06]
:0043395B 52                      push edx
:0043395C B9A83B4B00              mov ecx, 004B3BA8
:00433961 E8AABFFEFF              call 0041F910
:00433966 6880000000              push 00000080
:0043396B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043396E 50                      push eax
:0043396F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00433972 8A5104                  mov dl, byte ptr [ecx+04]
:00433975 52                      push edx
:00433976 668B45E0                mov ax, word ptr [ebp-20]
:0043397A 50                      push eax
:0043397B E8926A0100              call 0044A412
:00433980 83C410                  add esp, 00000010
:00433983 E848BCFFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00433988 6A03                    push 00000003
:0043398A E8A7BDFFFF              call 0042F736
:0043398F 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00433992 6A09                    push 00000009
:00433994 6A21                    push 00000021
:00433996 8A4DE1                  mov cl, byte ptr [ebp-1F]
:00433999 51                      push ecx
:0043399A 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043399D 81E2FF000000            and edx, 000000FF
:004339A3 83C206                  add edx, 00000006
:004339A6 52                      push edx
:004339A7 B958494B00              mov ecx, 004B4958
:004339AC E8978F0100              call 0044C948

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043384A(C), :00433854(C), :0043386E(C)
|
:004339B1 8B45DC                  mov eax, dword ptr [ebp-24]
:004339B4 8B4810                  mov ecx, dword ptr [eax+10]
:004339B7 034DF4                  add ecx, dword ptr [ebp-0C]
:004339BA 8B55DC                  mov edx, dword ptr [ebp-24]
:004339BD 894A10                  mov dword ptr [edx+10], ecx
:004339C0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004339C3 E822E4FCFF              call 00401DEA
:004339C8 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004339CB 394110                  cmp dword ptr [ecx+10], eax
:004339CE 760E                    jbe 004339DE
:004339D0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004339D3 E812E4FCFF              call 00401DEA
:004339D8 8B55DC                  mov edx, dword ptr [ebp-24]
:004339DB 894210                  mov dword ptr [edx+10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004339CE(C)
|
:004339DE 6A00                    push 00000000
:004339E0 6A01                    push 00000001
:004339E2 E816A30300              call 0046DCFD
:004339E7 83C408                  add esp, 00000008
:004339EA 6A01                    push 00000001
:004339EC B9C0534B00              mov ecx, 004B53C0
:004339F1 E86AA4FFFF              call 0042DE60

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433762(U), :00433775(U)
|
:004339F6 5E                      pop esi
:004339F7 8BE5                    mov esp, ebp
:004339F9 5D                      pop ebp
:004339FA C3                      ret



* Referenced by a CALL at Address:
|:004337D3   
|
:004339FB 55                      push ebp
:004339FC 8BEC                    mov ebp, esp
:004339FE 51                      push ecx
:004339FF 8B4508                  mov eax, dword ptr [ebp+08]
:00433A02 25FF000000              and eax, 000000FF
:00433A07 8945FC                  mov dword ptr [ebp-04], eax
:00433A0A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433A0D 83E90F                  sub ecx, 0000000F
:00433A10 894DFC                  mov dword ptr [ebp-04], ecx
:00433A13 837DFC10                cmp dword ptr [ebp-04], 00000010
:00433A17 7727                    ja 00433A40
:00433A19 8B45FC                  mov eax, dword ptr [ebp-04]
:00433A1C 33D2                    xor edx, edx
:00433A1E 8A90623A4300            mov dl, byte ptr [eax+00433A62]
:00433A24 FF2495463A4300          jmp dword ptr [4*edx+00433A46]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00433A2B B80A000000              mov eax, 0000000A
:00433A30 EB10                    jmp 00433A42
:00433A32 B80F000000              mov eax, 0000000F
:00433A37 EB09                    jmp 00433A42

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00433A39 B814000000              mov eax, 00000014
:00433A3E EB02                    jmp 00433A42

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433A17(C)
|
:00433A40 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433A30(U), :00433A37(U), :00433A3E(U)
|
:00433A42 8BE5                    mov esp, ebp
:00433A44 5D                      pop ebp
:00433A45 C3                      ret



:00433A46 393A4300                DWORD 00433A39
:00433A4A 323A4300                DWORD 00433A32
:00433A4E 2B3A4300                DWORD 00433A2B
:00433A52 323A4300                DWORD 00433A32
:00433A56 393A4300                DWORD 00433A39
:00433A5A 393A4300                DWORD 00433A39
:00433A5E 403A4300                DWORD 00433A40


:00433A62 0001                    add byte ptr [ecx], al
:00433A64 0203                    add al, byte ptr [ebx]
:00433A66 06                      push es
:00433A67 06                      push es
:00433A68 06                      push es
:00433A69 06                      push es
:00433A6A 06                      push es
:00433A6B 06                      push es
:00433A6C 0406                    add al, 06
:00433A6E 06                      push es
:00433A6F 06                      push es
:00433A70 06                      push es
:00433A71 06                      push es
:00433A72 05                      BYTE 05h


* Referenced by a CALL at Addresses:
|:00433DB0   , :00433DCF   , :00433DEE   , :00433E0D   , :00433E34   
|
:00433A73 55                      push ebp
:00433A74 8BEC                    mov ebp, esp
:00433A76 83EC08                  sub esp, 00000008
:00433A79 56                      push esi
:00433A7A 894DF8                  mov dword ptr [ebp-08], ecx
:00433A7D 8B45F8                  mov eax, dword ptr [ebp-08]
:00433A80 8B08                    mov ecx, dword ptr [eax]
:00433A82 6BC950                  imul ecx, 00000050
:00433A85 81C1787F4900            add ecx, 00497F78
:00433A8B 894DFC                  mov dword ptr [ebp-04], ecx
:00433A8E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433A91 E8EEE2FCFF              call 00401D84
:00433A96 8BF0                    mov esi, eax
:00433A98 C1EE02                  shr esi, 02
:00433A9B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433A9E E8ED300000              call 00436B90
:00433AA3 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00433AA5 B90A000000              mov ecx, 0000000A
:00433AAA F7F1                    div ecx
:00433AAC 8D74060A                lea esi, dword ptr [esi+eax+0A]
:00433AB0 6A64                    push 00000064
:00433AB2 E8F9480400              call 004783B0
:00433AB7 83C404                  add esp, 00000004
:00433ABA 3BF0                    cmp esi, eax
:00433ABC 761A                    jbe 00433AD8
:00433ABE 6A01                    push 00000001
:00433AC0 8A550C                  mov dl, byte ptr [ebp+0C]
:00433AC3 52                      push edx
:00433AC4 8A4508                  mov al, byte ptr [ebp+08]
:00433AC7 50                      push eax
:00433AC8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433ACB 8B11                    mov edx, dword ptr [ecx]
:00433ACD 52                      push edx
:00433ACE B9C84F4B00              mov ecx, 004B4FC8
:00433AD3 E8B6CD0200              call 0046088E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433ABC(C)
|
:00433AD8 5E                      pop esi
:00433AD9 8BE5                    mov esp, ebp
:00433ADB 5D                      pop ebp
:00433ADC C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:00433C3A   , :00433C66   , :00433CBE   , :00433CEA   , :00433D42   
|:00433D6E   
|
:00433ADF 55                      push ebp
:00433AE0 8BEC                    mov ebp, esp
:00433AE2 83EC14                  sub esp, 00000014
:00433AE5 56                      push esi
:00433AE6 894DF0                  mov dword ptr [ebp-10], ecx
:00433AE9 C745F800000000          mov [ebp-08], 00000000
:00433AF0 8B45F0                  mov eax, dword ptr [ebp-10]
:00433AF3 8B08                    mov ecx, dword ptr [eax]
:00433AF5 6BC950                  imul ecx, 00000050
:00433AF8 81C1787F4900            add ecx, 00497F78
:00433AFE 894DF4                  mov dword ptr [ebp-0C], ecx
:00433B01 C645FC00                mov [ebp-04], 00
:00433B05 8B5510                  mov edx, dword ptr [ebp+10]
:00433B08 81E2FF000000            and edx, 000000FF
:00433B0E 83FA03                  cmp edx, 00000003
:00433B11 7505                    jne 00433B18
:00433B13 E98E000000              jmp 00433BA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433B11(C)
|
:00433B18 8B4510                  mov eax, dword ptr [ebp+10]
:00433B1B 25FF000000              and eax, 000000FF
:00433B20 8945EC                  mov dword ptr [ebp-14], eax
:00433B23 837DEC06                cmp dword ptr [ebp-14], 00000006
:00433B27 772C                    ja 00433B55
:00433B29 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00433B2C FF248DAD3B4300          jmp dword ptr [4*ecx+00433BAD]
:00433B33 C645FC00                mov [ebp-04], 00
:00433B37 EB1C                    jmp 00433B55
:00433B39 C645FC0A                mov [ebp-04], 0A
:00433B3D EB16                    jmp 00433B55
:00433B3F C645FC14                mov [ebp-04], 14
:00433B43 EB10                    jmp 00433B55
:00433B45 C645FC14                mov [ebp-04], 14
:00433B49 EB0A                    jmp 00433B55
:00433B4B C645FC1E                mov [ebp-04], 1E
:00433B4F EB04                    jmp 00433B55
:00433B51 C645FC28                mov [ebp-04], 28

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433B27(C), :00433B37(U), :00433B3D(U), :00433B43(U), :00433B49(U)
|:00433B4F(U)
|
:00433B55 8B75FC                  mov esi, dword ptr [ebp-04]
:00433B58 81E6FF000000            and esi, 000000FF
:00433B5E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433B61 E81EE2FCFF              call 00401D84
:00433B66 C1E802                  shr eax, 02
:00433B69 03F0                    add esi, eax
:00433B6B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433B6E E81D300000              call 00436B90
:00433B73 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00433B75 B90A000000              mov ecx, 0000000A
:00433B7A F7F1                    div ecx
:00433B7C 03F0                    add esi, eax
:00433B7E 6A64                    push 00000064
:00433B80 E82B480400              call 004783B0
:00433B85 83C404                  add esp, 00000004
:00433B88 3BF0                    cmp esi, eax
:00433B8A 761A                    jbe 00433BA6
:00433B8C 6A01                    push 00000001
:00433B8E 8A550C                  mov dl, byte ptr [ebp+0C]
:00433B91 52                      push edx
:00433B92 8A4508                  mov al, byte ptr [ebp+08]
:00433B95 50                      push eax
:00433B96 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00433B99 8B11                    mov edx, dword ptr [ecx]
:00433B9B 52                      push edx
:00433B9C B9C84F4B00              mov ecx, 004B4FC8
:00433BA1 E8E8CC0200              call 0046088E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433B13(U), :00433B8A(C)
|
:00433BA6 5E                      pop esi
:00433BA7 8BE5                    mov esp, ebp
:00433BA9 5D                      pop ebp
:00433BAA C20C00                  ret 000C



:00433BAD 333B4300                DWORD 00433B33
:00433BB1 393B4300                DWORD 00433B39
:00433BB5 3F3B4300                DWORD 00433B3F
:00433BB9 553B4300                DWORD 00433B55
:00433BBD 453B4300                DWORD 00433B45
:00433BC1 4B3B4300                DWORD 00433B4B
:00433BC5 513B4300                DWORD 00433B51



* Referenced by a CALL at Addresses:
|:0045D593   , :0045EB50   
|
:00433BC9 55                      push ebp
:00433BCA 8BEC                    mov ebp, esp
:00433BCC 51                      push ecx
:00433BCD 894DFC                  mov dword ptr [ebp-04], ecx
:00433BD0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433BD3 E8F8840200              call 0045C0D0
:00433BD8 25FF000000              and eax, 000000FF
:00433BDD 83F802                  cmp eax, 00000002
:00433BE0 7405                    je 00433BE7
:00433BE2 E952020000              jmp 00433E39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433BE0(C)
|
:00433BE7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433BEA E8E12F0000              call 00436BD0
:00433BEF 25FF000000              and eax, 000000FF
:00433BF4 83E040                  and eax, 00000040
:00433BF7 85C0                    test eax, eax
:00433BF9 741A                    je 00433C15
:00433BFB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433BFE E80D2E0000              call 00436A10
:00433C03 25FF000000              and eax, 000000FF
:00433C08 24BF                    and al, BF
:00433C0A 50                      push eax
:00433C0B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433C0E E89D2F0000              call 00436BB0
:00433C13 EB56                    jmp 00433C6B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433BF9(C)
|
:00433C15 8B45FC                  mov eax, dword ptr [ebp-04]
:00433C18 33C9                    xor ecx, ecx
:00433C1A 8A4818                  mov cl, byte ptr [eax+18]
:00433C1D 83F903                  cmp ecx, 00000003
:00433C20 7E1F                    jle 00433C41
:00433C22 8B55FC                  mov edx, dword ptr [ebp-04]
:00433C25 8A4218                  mov al, byte ptr [edx+18]
:00433C28 50                      push eax
:00433C29 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433C2C 33D2                    xor edx, edx
:00433C2E 8A5118                  mov dl, byte ptr [ecx+18]
:00433C31 83EA01                  sub edx, 00000001
:00433C34 52                      push edx
:00433C35 6A00                    push 00000000
:00433C37 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433C3A E8A0FEFFFF              call 00433ADF
:00433C3F EB2A                    jmp 00433C6B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433C20(C)
|
:00433C41 8B45FC                  mov eax, dword ptr [ebp-04]
:00433C44 33C9                    xor ecx, ecx
:00433C46 8A4818                  mov cl, byte ptr [eax+18]
:00433C49 83F903                  cmp ecx, 00000003
:00433C4C 7D1D                    jge 00433C6B
:00433C4E 8B55FC                  mov edx, dword ptr [ebp-04]
:00433C51 8A4218                  mov al, byte ptr [edx+18]
:00433C54 50                      push eax
:00433C55 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433C58 33D2                    xor edx, edx
:00433C5A 8A5118                  mov dl, byte ptr [ecx+18]
:00433C5D 83C201                  add edx, 00000001
:00433C60 52                      push edx
:00433C61 6A00                    push 00000000
:00433C63 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433C66 E874FEFFFF              call 00433ADF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433C13(U), :00433C3F(U), :00433C4C(C)
|
:00433C6B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433C6E E89D2F0000              call 00436C10
:00433C73 25FF000000              and eax, 000000FF
:00433C78 83E040                  and eax, 00000040
:00433C7B 85C0                    test eax, eax
:00433C7D 741A                    je 00433C99
:00433C7F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433C82 E8A92D0000              call 00436A30
:00433C87 25FF000000              and eax, 000000FF
:00433C8C 24BF                    and al, BF
:00433C8E 50                      push eax
:00433C8F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433C92 E8592F0000              call 00436BF0
:00433C97 EB56                    jmp 00433CEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433C7D(C)
|
:00433C99 8B45FC                  mov eax, dword ptr [ebp-04]
:00433C9C 33C9                    xor ecx, ecx
:00433C9E 8A4819                  mov cl, byte ptr [eax+19]
:00433CA1 83F903                  cmp ecx, 00000003
:00433CA4 7E1F                    jle 00433CC5
:00433CA6 8B55FC                  mov edx, dword ptr [ebp-04]
:00433CA9 8A4219                  mov al, byte ptr [edx+19]
:00433CAC 50                      push eax
:00433CAD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433CB0 33D2                    xor edx, edx
:00433CB2 8A5119                  mov dl, byte ptr [ecx+19]
:00433CB5 83EA01                  sub edx, 00000001
:00433CB8 52                      push edx
:00433CB9 6A01                    push 00000001
:00433CBB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433CBE E81CFEFFFF              call 00433ADF
:00433CC3 EB2A                    jmp 00433CEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433CA4(C)
|
:00433CC5 8B45FC                  mov eax, dword ptr [ebp-04]
:00433CC8 33C9                    xor ecx, ecx
:00433CCA 8A4819                  mov cl, byte ptr [eax+19]
:00433CCD 83F903                  cmp ecx, 00000003
:00433CD0 7D1D                    jge 00433CEF
:00433CD2 8B55FC                  mov edx, dword ptr [ebp-04]
:00433CD5 8A4219                  mov al, byte ptr [edx+19]
:00433CD8 50                      push eax
:00433CD9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433CDC 33D2                    xor edx, edx
:00433CDE 8A5119                  mov dl, byte ptr [ecx+19]
:00433CE1 83C201                  add edx, 00000001
:00433CE4 52                      push edx
:00433CE5 6A01                    push 00000001
:00433CE7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433CEA E8F0FDFFFF              call 00433ADF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433C97(U), :00433CC3(U), :00433CD0(C)
|
:00433CEF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433CF2 E8592F0000              call 00436C50
:00433CF7 25FF000000              and eax, 000000FF
:00433CFC 83E040                  and eax, 00000040
:00433CFF 85C0                    test eax, eax
:00433D01 741A                    je 00433D1D
:00433D03 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433D06 E8452D0000              call 00436A50
:00433D0B 25FF000000              and eax, 000000FF
:00433D10 24BF                    and al, BF
:00433D12 50                      push eax
:00433D13 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433D16 E8152F0000              call 00436C30
:00433D1B EB56                    jmp 00433D73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433D01(C)
|
:00433D1D 8B45FC                  mov eax, dword ptr [ebp-04]
:00433D20 33C9                    xor ecx, ecx
:00433D22 8A481A                  mov cl, byte ptr [eax+1A]
:00433D25 83F903                  cmp ecx, 00000003
:00433D28 7E1F                    jle 00433D49
:00433D2A 8B55FC                  mov edx, dword ptr [ebp-04]
:00433D2D 8A421A                  mov al, byte ptr [edx+1A]
:00433D30 50                      push eax
:00433D31 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433D34 33D2                    xor edx, edx
:00433D36 8A511A                  mov dl, byte ptr [ecx+1A]
:00433D39 83EA01                  sub edx, 00000001
:00433D3C 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00433D3D 6A04                    push 00000004
:00433D3F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433D42 E898FDFFFF              call 00433ADF
:00433D47 EB2A                    jmp 00433D73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433D28(C)
|
:00433D49 8B45FC                  mov eax, dword ptr [ebp-04]
:00433D4C 33C9                    xor ecx, ecx
:00433D4E 8A481A                  mov cl, byte ptr [eax+1A]
:00433D51 83F903                  cmp ecx, 00000003
:00433D54 7D1D                    jge 00433D73
:00433D56 8B55FC                  mov edx, dword ptr [ebp-04]
:00433D59 8A421A                  mov al, byte ptr [edx+1A]
:00433D5C 50                      push eax
:00433D5D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433D60 33D2                    xor edx, edx
:00433D62 8A511A                  mov dl, byte ptr [ecx+1A]
:00433D65 83C201                  add edx, 00000001
:00433D68 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00433D69 6A04                    push 00000004
:00433D6B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433D6E E86CFDFFFF              call 00433ADF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433D1B(U), :00433D47(U), :00433D54(C)
|
:00433D73 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433D76 E8F52E0000              call 00436C70
:00433D7B 25FF000000              and eax, 000000FF
:00433D80 83E040                  and eax, 00000040
:00433D83 85C0                    test eax, eax
:00433D85 740F                    je 00433D96
:00433D87 6A40                    push 00000040
:00433D89 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433D8C E8FF2E0000              call 00436C90
:00433D91 E9A3000000              jmp 00433E39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433D85(C)
|
:00433D96 6A01                    push 00000001
:00433D98 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433D9B E8D02C0000              call 00436A70
:00433DA0 85C0                    test eax, eax
:00433DA2 7411                    je 00433DB5

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00433DA4 6A02                    push 00000002
:00433DA6 6881000000              push 00000081

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00433DAB 6A03                    push 00000003
:00433DAD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433DB0 E8BEFCFFFF              call 00433A73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433DA2(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00433DB5 6A02                    push 00000002
:00433DB7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433DBA E8B12C0000              call 00436A70
:00433DBF 85C0                    test eax, eax
:00433DC1 7411                    je 00433DD4

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00433DC3 6A02                    push 00000002
:00433DC5 6882000000              push 00000082

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00433DCA 6A03                    push 00000003
:00433DCC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433DCF E89FFCFFFF              call 00433A73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433DC1(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00433DD4 6A04                    push 00000004
:00433DD6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433DD9 E8922C0000              call 00436A70
:00433DDE 85C0                    test eax, eax
:00433DE0 7411                    je 00433DF3

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00433DE2 6A02                    push 00000002
:00433DE4 6884000000              push 00000084

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00433DE9 6A03                    push 00000003
:00433DEB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433DEE E880FCFFFF              call 00433A73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433DE0(C)
|
:00433DF3 6A10                    push 00000010
:00433DF5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433DF8 E8732C0000              call 00436A70
:00433DFD 85C0                    test eax, eax
:00433DFF 7419                    je 00433E1A

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00433E01 6A02                    push 00000002
:00433E03 6890000000              push 00000090

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00433E08 6A03                    push 00000003
:00433E0A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433E0D E861FCFFFF              call 00433A73
:00433E12 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433E15 E8850D0000              call 00434B9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433DFF(C)
|
:00433E1A 6A20                    push 00000020
:00433E1C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433E1F E84C2C0000              call 00436A70
:00433E24 85C0                    test eax, eax
:00433E26 7411                    je 00433E39

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00433E28 6A02                    push 00000002

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:00433E2A 68A0000000              push 000000A0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00433E2F 6A03                    push 00000003
:00433E31 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433E34 E83AFCFFFF              call 00433A73

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433BE2(U), :00433D91(U), :00433E26(C)
|
:00433E39 8BE5                    mov esp, ebp
:00433E3B 5D                      pop ebp
:00433E3C C3                      ret



* Referenced by a CALL at Address:
|:0045D040   
|
:00433E3D 55                      push ebp
:00433E3E 8BEC                    mov ebp, esp
:00433E40 83EC08                  sub esp, 00000008
:00433E43 894DF8                  mov dword ptr [ebp-08], ecx
:00433E46 8B45F8                  mov eax, dword ptr [ebp-08]
:00433E49 8B08                    mov ecx, dword ptr [eax]
:00433E4B 6BC950                  imul ecx, 00000050
:00433E4E 81C1787F4900            add ecx, 00497F78
:00433E54 894DFC                  mov dword ptr [ebp-04], ecx
:00433E57 8A5508                  mov dl, byte ptr [ebp+08]
:00433E5A 52                      push edx
:00433E5B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433E5E E85D2E0000              call 00436CC0
:00433E63 8A450C                  mov al, byte ptr [ebp+0C]
:00433E66 50                      push eax
:00433E67 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433E6A E8712E0000              call 00436CE0
:00433E6F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433E72 33D2                    xor edx, edx
:00433E74 8A510C                  mov dl, byte ptr [ecx+0C]
:00433E77 83E210                  and edx, 00000010
:00433E7A 8B45F8                  mov eax, dword ptr [ebp-08]
:00433E7D 88500C                  mov byte ptr [eax+0C], dl
:00433E80 6A20                    push 00000020
:00433E82 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433E85 E8462A0000              call 004368D0
:00433E8A 8BE5                    mov esp, ebp
:00433E8C 5D                      pop ebp
:00433E8D C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0044EEF8   , :0045CEE3   , :0045CFFD   
|
:00433E90 55                      push ebp
:00433E91 8BEC                    mov ebp, esp
:00433E93 51                      push ecx
:00433E94 894DFC                  mov dword ptr [ebp-04], ecx
:00433E97 8B45FC                  mov eax, dword ptr [ebp-04]
:00433E9A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433E9D 8908                    mov dword ptr [eax], ecx
:00433E9F 6A01                    push 00000001
:00433EA1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433EA4 E8572E0000              call 00436D00
:00433EA9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433EAC 6BC950                  imul ecx, 00000050
:00433EAF 81C1787F4900            add ecx, 00497F78
:00433EB5 E830DFFCFF              call 00401DEA
:00433EBA 8B55FC                  mov edx, dword ptr [ebp-04]
:00433EBD 894210                  mov dword ptr [edx+10], eax
:00433EC0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00433EC3 6BC950                  imul ecx, 00000050
:00433EC6 81C1787F4900            add ecx, 00497F78
:00433ECC E84ADFFCFF              call 00401E1B
:00433ED1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433ED4 894114                  mov dword ptr [ecx+14], eax
:00433ED7 8B55FC                  mov edx, dword ptr [ebp-04]
:00433EDA C6421803                mov [edx+18], 03
:00433EDE 8B45FC                  mov eax, dword ptr [ebp-04]
:00433EE1 C6401903                mov [eax+19], 03
:00433EE5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433EE8 C6411A03                mov [ecx+1A], 03
:00433EEC 8B55FC                  mov edx, dword ptr [ebp-04]
:00433EEF C6421B00                mov [edx+1B], 00
:00433EF3 8BE5                    mov esp, ebp
:00433EF5 5D                      pop ebp
:00433EF6 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045D169   
|
:00433EF9 55                      push ebp
:00433EFA 8BEC                    mov ebp, esp
:00433EFC 83EC0C                  sub esp, 0000000C
:00433EFF 894DF4                  mov dword ptr [ebp-0C], ecx
:00433F02 8B45F4                  mov eax, dword ptr [ebp-0C]
:00433F05 8B08                    mov ecx, dword ptr [eax]
:00433F07 6BC950                  imul ecx, 00000050
:00433F0A 81C1787F4900            add ecx, 00497F78
:00433F10 894DF8                  mov dword ptr [ebp-08], ecx
:00433F13 8B5508                  mov edx, dword ptr [ebp+08]
:00433F16 81E2FF000000            and edx, 000000FF
:00433F1C 85D2                    test edx, edx
:00433F1E 7546                    jne 00433F66
:00433F20 C745FC00000000          mov [ebp-04], 00000000
:00433F27 EB09                    jmp 00433F32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433F62(U)
|
:00433F29 8B45FC                  mov eax, dword ptr [ebp-04]
:00433F2C 83C001                  add eax, 00000001
:00433F2F 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433F27(U)
|
:00433F32 837DFC08                cmp dword ptr [ebp-04], 00000008
:00433F36 732C                    jnb 00433F64
:00433F38 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00433F3B 51                      push ecx
:00433F3C 8B55F4                  mov edx, dword ptr [ebp-0C]
:00433F3F 8B0A                    mov ecx, dword ptr [edx]
:00433F41 6BC950                  imul ecx, 00000050
:00433F44 81C1787F4900            add ecx, 00497F78
:00433F4A E8FEE8FCFF              call 0040284D
:00433F4F 50                      push eax
:00433F50 8B45FC                  mov eax, dword ptr [ebp-04]
:00433F53 50                      push eax
:00433F54 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433F57 8B11                    mov edx, dword ptr [ecx]
:00433F59 52                      push edx
:00433F5A E876D9FCFF              call 004018D5
:00433F5F 83C40C                  add esp, 0000000C
:00433F62 EBC5                    jmp 00433F29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433F36(C)
|
:00433F64 EB3C                    jmp 00433FA2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433F1E(C)
|
:00433F66 8A4508                  mov al, byte ptr [ebp+08]
:00433F69 50                      push eax
:00433F6A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433F6D E8AE2D0000              call 00436D20
:00433F72 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00433F75 51                      push ecx
:00433F76 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433F79 E8E22D0000              call 00436D60
:00433F7E 8A5510                  mov dl, byte ptr [ebp+10]
:00433F81 52                      push edx
:00433F82 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433F85 E8B62D0000              call 00436D40
:00433F8A 8B4514                  mov eax, dword ptr [ebp+14]
:00433F8D 50                      push eax
:00433F8E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433F91 E8FAA2FFFF              call 0042E290
:00433F96 8A4D18                  mov cl, byte ptr [ebp+18]
:00433F99 51                      push ecx
:00433F9A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433F9D E8DE2D0000              call 00436D80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433F64(U)
|
:00433FA2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433FA5 E840DEFCFF              call 00401DEA
:00433FAA 8B55F4                  mov edx, dword ptr [ebp-0C]
:00433FAD 894210                  mov dword ptr [edx+10], eax
:00433FB0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00433FB3 E863DEFCFF              call 00401E1B
:00433FB8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00433FBB 894114                  mov dword ptr [ecx+14], eax
:00433FBE 8BE5                    mov esp, ebp
:00433FC0 5D                      pop ebp
:00433FC1 C21400                  ret 0014



* Referenced by a CALL at Address:
|:0043423E   
|
:00433FC4 55                      push ebp
:00433FC5 8BEC                    mov ebp, esp
:00433FC7 83EC10                  sub esp, 00000010
:00433FCA 894DF4                  mov dword ptr [ebp-0C], ecx
:00433FCD 8B45F4                  mov eax, dword ptr [ebp-0C]
:00433FD0 8B08                    mov ecx, dword ptr [eax]
:00433FD2 6BC950                  imul ecx, 00000050
:00433FD5 81C1787F4900            add ecx, 00497F78
:00433FDB E8A0BEFDFF              call 0040FE80
:00433FE0 25FF000000              and eax, 000000FF
:00433FE5 85C0                    test eax, eax
:00433FE7 7505                    jne 00433FEE
:00433FE9 E93D010000              jmp 0043412B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433FE7(C)
|
:00433FEE C745FCFF000000          mov [ebp-04], 000000FF
:00433FF5 C645F800                mov [ebp-08], 00
:00433FF9 EB09                    jmp 00434004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434055(U)
|
:00433FFB 8A4DF8                  mov cl, byte ptr [ebp-08]
:00433FFE 80C101                  add cl, 01
:00434001 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00433FF9(U)
|
:00434004 8B55F8                  mov edx, dword ptr [ebp-08]
:00434007 81E2FF000000            and edx, 000000FF
:0043400D 83FA08                  cmp edx, 00000008
:00434010 7D45                    jge 00434057
:00434012 8A45F8                  mov al, byte ptr [ebp-08]
:00434015 50                      push eax
:00434016 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00434019 8B09                    mov ecx, dword ptr [ecx]
:0043401B 6BC950                  imul ecx, 00000050
:0043401E 81C1787F4900            add ecx, 00497F78
:00434024 E8B7F1FCFF              call 004031E0
:00434029 25FF000000              and eax, 000000FF
:0043402E 8945FC                  mov dword ptr [ebp-04], eax
:00434031 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00434038 741B                    je 00434055
:0043403A 8B55FC                  mov edx, dword ptr [ebp-04]
:0043403D 52                      push edx
:0043403E E8E2D8FCFF              call 00401925
:00434043 83C404                  add esp, 00000004
:00434046 25FF000000              and eax, 000000FF
:0043404B 83F801                  cmp eax, 00000001
:0043404E 7505                    jne 00434055
:00434050 E9D6000000              jmp 0043412B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434038(C), :0043404E(C)
|
:00434055 EBA4                    jmp 00433FFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434010(C)
|
:00434057 B9784E4B00              mov ecx, 004B4E78
:0043405C E81FA4FFFF              call 0042E480
:00434061 25FF000000              and eax, 000000FF
:00434066 8945F0                  mov dword ptr [ebp-10], eax
:00434069 8B45F0                  mov eax, dword ptr [ebp-10]
:0043406C 83E805                  sub eax, 00000005
:0043406F 8945F0                  mov dword ptr [ebp-10], eax
:00434072 837DF018                cmp dword ptr [ebp-10], 00000018
:00434076 0F87AF000000            ja 0043412B
:0043407C 8B55F0                  mov edx, dword ptr [ebp-10]
:0043407F 33C9                    xor ecx, ecx
:00434081 8A8A4B414300            mov cl, byte ptr [edx+0043414B]
:00434087 FF248D2F414300          jmp dword ptr [4*ecx+0043412F]

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:0043408E 689C000000              push 0000009C
:00434093 8B45F4                  mov eax, dword ptr [ebp-0C]
:00434096 8B08                    mov ecx, dword ptr [eax]
:00434098 6BC950                  imul ecx, 00000050
:0043409B 81C1787F4900            add ecx, 00497F78
:004340A1 E8FEE1FCFF              call 004022A4
:004340A6 E980000000              jmp 0043412B
:004340AB 689D000000              push 0000009D
:004340B0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004340B3 8B09                    mov ecx, dword ptr [ecx]
:004340B5 6BC950                  imul ecx, 00000050
:004340B8 81C1787F4900            add ecx, 00497F78
:004340BE E8E1E1FCFF              call 004022A4
:004340C3 EB66                    jmp 0043412B

* Possible Ref to Menu: DBGMENU, Item: "0bH"
                                  |
:004340C5 689E000000              push 0000009E
:004340CA 8B55F4                  mov edx, dword ptr [ebp-0C]
:004340CD 8B0A                    mov ecx, dword ptr [edx]
:004340CF 6BC950                  imul ecx, 00000050
:004340D2 81C1787F4900            add ecx, 00497F78
:004340D8 E8C7E1FCFF              call 004022A4
:004340DD EB4C                    jmp 0043412B

* Possible Ref to Menu: DBGMENU, Item: ""
                                  |
:004340DF 689F000000              push 0000009F
:004340E4 8B45F4                  mov eax, dword ptr [ebp-0C]
:004340E7 8B08                    mov ecx, dword ptr [eax]
:004340E9 6BC950                  imul ecx, 00000050
:004340EC 81C1787F4900            add ecx, 00497F78
:004340F2 E8ADE1FCFF              call 004022A4
:004340F7 EB32                    jmp 0043412B

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:004340F9 68A0000000              push 000000A0
:004340FE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00434101 8B09                    mov ecx, dword ptr [ecx]
:00434103 6BC950                  imul ecx, 00000050
:00434106 81C1787F4900            add ecx, 00497F78
:0043410C E893E1FCFF              call 004022A4
:00434111 EB18                    jmp 0043412B

* Possible Ref to Menu: DBGMENU, Item: "n"
                                  |
:00434113 68A1000000              push 000000A1
:00434118 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043411B 8B0A                    mov ecx, dword ptr [edx]
:0043411D 6BC950                  imul ecx, 00000050
:00434120 81C1787F4900            add ecx, 00497F78
:00434126 E879E1FCFF              call 004022A4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00433FE9(U), :00434050(U), :00434076(C), :004340A6(U), :004340C3(U)
|:004340DD(U), :004340F7(U), :00434111(U)
|
:0043412B 8BE5                    mov esp, ebp
:0043412D 5D                      pop ebp
:0043412E C3                      ret



:0043412F 8E404300                DWORD 0043408E
:00434133 AB404300                DWORD 004340AB
:00434137 C5404300                DWORD 004340C5
:0043413B DF404300                DWORD 004340DF
:0043413F F9404300                DWORD 004340F9
:00434143 13414300                DWORD 00434113
:00434147 2B414300                DWORD 0043412B


:0043414B 000000000000            BYTE  6 DUP(0)


:00434151 0101                    add dword ptr [ecx], eax
:00434153 0102                    add dword ptr [edx], eax
:00434155 0202                    add al, byte ptr [edx]
:00434157 0203                    add al, byte ptr [ebx]
:00434159 0303                    add eax, dword ptr [ebx]
:0043415B 030404                  add eax, dword ptr [esp+eax]
:0043415E 0405                    add al, 05
:00434160 05                      BYTE 05h
:00434161 05                      BYTE 05h
:00434162 05                      BYTE 05h
:00434163 05                      BYTE 05h


* Referenced by a CALL at Addresses:
|:0045CFC1   , :0045D12F   
|
:00434164 55                      push ebp
:00434165 8BEC                    mov ebp, esp
:00434167 83EC08                  sub esp, 00000008
:0043416A 894DF8                  mov dword ptr [ebp-08], ecx
:0043416D 817D08A3010000          cmp dword ptr [ebp+08], 000001A3
:00434174 7207                    jb 0043417D
:00434176 33C0                    xor eax, eax
:00434178 E9CB000000              jmp 00434248

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434174(C)
|
:0043417D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00434180 E84B7F0200              call 0045C0D0
:00434185 25FF000000              and eax, 000000FF
:0043418A 85C0                    test eax, eax
:0043418C 7507                    jne 00434195
:0043418E 33C0                    xor eax, eax
:00434190 E9B3000000              jmp 00434248

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043418C(C)
|
:00434195 8B4508                  mov eax, dword ptr [ebp+08]
:00434198 50                      push eax
:00434199 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043419C 8B09                    mov ecx, dword ptr [ecx]
:0043419E 6BC950                  imul ecx, 00000050
:004341A1 81C1787F4900            add ecx, 00497F78
:004341A7 E832D8FCFF              call 004019DE
:004341AC 85C0                    test eax, eax
:004341AE 7507                    jne 004341B7
:004341B0 33C0                    xor eax, eax
:004341B2 E991000000              jmp 00434248

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004341AE(C)
|
:004341B7 8B55F8                  mov edx, dword ptr [ebp-08]
:004341BA 8B0A                    mov ecx, dword ptr [edx]
:004341BC 6BC950                  imul ecx, 00000050
:004341BF 81C1787F4900            add ecx, 00497F78
:004341C5 E8F6EFFCFF              call 004031C0
:004341CA 8845FC                  mov byte ptr [ebp-04], al
:004341CD 8B45FC                  mov eax, dword ptr [ebp-04]
:004341D0 25FF000000              and eax, 000000FF
:004341D5 3DFF000000              cmp eax, 000000FF
:004341DA 741C                    je 004341F8
:004341DC 68FF000000              push 000000FF
:004341E1 8A4DFC                  mov cl, byte ptr [ebp-04]
:004341E4 51                      push ecx
:004341E5 8B55F8                  mov edx, dword ptr [ebp-08]
:004341E8 8B0A                    mov ecx, dword ptr [edx]
:004341EA 6BC950                  imul ecx, 00000050
:004341ED 81C1787F4900            add ecx, 00497F78
:004341F3 E808F0FCFF              call 00403200

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004341DA(C)
|
:004341F8 8B4508                  mov eax, dword ptr [ebp+08]
:004341FB 50                      push eax
:004341FC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004341FF 8B09                    mov ecx, dword ptr [ecx]
:00434201 6BC950                  imul ecx, 00000050
:00434204 81C1787F4900            add ecx, 00497F78
:0043420A E895E0FCFF              call 004022A4
:0043420F 8845FC                  mov byte ptr [ebp-04], al
:00434212 8B55FC                  mov edx, dword ptr [ebp-04]
:00434215 81E2FF000000            and edx, 000000FF
:0043421B 83FA08                  cmp edx, 00000008
:0043421E 7C04                    jl 00434224
:00434220 33C0                    xor eax, eax
:00434222 EB24                    jmp 00434248

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043421E(C)
|
:00434224 8A45FC                  mov al, byte ptr [ebp-04]
:00434227 50                      push eax
:00434228 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043422B 8B09                    mov ecx, dword ptr [ecx]
:0043422D 6BC950                  imul ecx, 00000050
:00434230 81C1787F4900            add ecx, 00497F78
:00434236 E89586FDFF              call 0040C8D0
:0043423B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043423E E881FDFFFF              call 00433FC4
:00434243 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434178(U), :00434190(U), :004341B2(U), :00434222(U)
|
:00434248 8BE5                    mov esp, ebp
:0043424A 5D                      pop ebp
:0043424B C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0044ED64   , :0045CB26   , :0045D27A   , :004603FA   
|
:0043424E 55                      push ebp
:0043424F 8BEC                    mov ebp, esp
:00434251 51                      push ecx
:00434252 894DFC                  mov dword ptr [ebp-04], ecx
:00434255 8B45FC                  mov eax, dword ptr [ebp-04]
:00434258 C70000000000            mov dword ptr [eax], 00000000
:0043425E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434261 8A5508                  mov dl, byte ptr [ebp+08]
:00434264 885104                  mov byte ptr [ecx+04], dl
:00434267 8B45FC                  mov eax, dword ptr [ebp-04]
:0043426A C64005FF                mov [eax+05], FF
:0043426E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434271 C64106FF                mov [ecx+06], FF
:00434275 8B55FC                  mov edx, dword ptr [ebp-04]
:00434278 C64207FF                mov [edx+07], FF
:0043427C 8B45FC                  mov eax, dword ptr [ebp-04]
:0043427F C6400D00                mov [eax+0D], 00
:00434283 6A00                    push 00000000
:00434285 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434288 E8732A0000              call 00436D00
:0043428D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434290 C6410C00                mov [ecx+0C], 00
:00434294 8B55FC                  mov edx, dword ptr [ebp-04]
:00434297 C6421D00                mov [edx+1D], 00
:0043429B 6A20                    push 00000020
:0043429D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004342A0 E82B260000              call 004368D0
:004342A5 6A00                    push 00000000
:004342A7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004342AA E8F12A0000              call 00436DA0
:004342AF 8BE5                    mov esp, ebp
:004342B1 5D                      pop ebp
:004342B2 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0043453A   , :0043467F   , :0043472F   , :00435DDE   , :0044F7B8   
|:0044F7D3   
|
:004342B5 55                      push ebp
:004342B6 8BEC                    mov ebp, esp
:004342B8 83EC08                  sub esp, 00000008
:004342BB 894DF8                  mov dword ptr [ebp-08], ecx
:004342BE 8B45F8                  mov eax, dword ptr [ebp-08]
:004342C1 33C9                    xor ecx, ecx
:004342C3 8A480E                  mov cl, byte ptr [eax+0E]
:004342C6 85C9                    test ecx, ecx
:004342C8 740D                    je 004342D7
:004342CA 8B55F8                  mov edx, dword ptr [ebp-08]
:004342CD 33C0                    xor eax, eax
:004342CF 8A420E                  mov al, byte ptr [edx+0E]
:004342D2 83F802                  cmp eax, 00000002
:004342D5 750B                    jne 004342E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004342C8(C)
|
:004342D7 837D0800                cmp dword ptr [ebp+08], 00000000
:004342DB 7505                    jne 004342E2
:004342DD E9E8000000              jmp 004343CA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004342D5(C), :004342DB(C)
|
:004342E2 6A10                    push 00000010
:004342E4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004342E7 E8042B0000              call 00436DF0
:004342EC 394508                  cmp dword ptr [ebp+08], eax
:004342EF 0F84D5000000            je 004343CA

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004342F5 6A04                    push 00000004
:004342F7 6A00                    push 00000000
:004342F9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004342FC 33D2                    xor edx, edx
:004342FE 8A5104                  mov dl, byte ptr [ecx+04]
:00434301 69D2005A0000            imul edx, 00005A00
:00434307 81C200120000            add edx, 00001200
:0043430D 52                      push edx
:0043430E B9187D4A00              mov ecx, 004A7D18
:00434313 E8784C0400              call 00478F90
:00434318 8945FC                  mov dword ptr [ebp-04], eax
:0043431B B9D01C4B00              mov ecx, 004B1CD0
:00434320 E89BBBFDFF              call 0040FEC0
:00434325 50                      push eax
:00434326 8B45FC                  mov eax, dword ptr [ebp-04]
:00434329 50                      push eax
:0043432A 6A60                    push 00000060
:0043432C 6A30                    push 00000030
:0043432E E83BC2FDFF              call 0041056E
:00434333 83C410                  add esp, 00000010
:00434336 6800120000              push 00001200
:0043433B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043433E 51                      push ecx
:0043433F B9D01C4B00              mov ecx, 004B1CD0
:00434344 E877BBFDFF              call 0040FEC0
:00434349 50                      push eax
:0043434A E871420400              call 004785C0
:0043434F 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00434352 6A04                    push 00000004
:00434354 6A00                    push 00000000
:00434356 8B55F8                  mov edx, dword ptr [ebp-08]
:00434359 33C0                    xor eax, eax
:0043435B 8A4204                  mov al, byte ptr [edx+04]
:0043435E 69C0005A0000            imul eax, 00005A00
:00434364 05003F0000              add eax, 00003F00
:00434369 50                      push eax
:0043436A B9187D4A00              mov ecx, 004A7D18
:0043436F E81C4C0400              call 00478F90
:00434374 8945FC                  mov dword ptr [ebp-04], eax
:00434377 B9D01C4B00              mov ecx, 004B1CD0
:0043437C E83FBBFDFF              call 0040FEC0
:00434381 50                      push eax
:00434382 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434385 51                      push ecx
:00434386 6A30                    push 00000030
:00434388 6A30                    push 00000030
:0043438A E8DFC1FDFF              call 0041056E
:0043438F 83C410                  add esp, 00000010
:00434392 6800090000              push 00000900
:00434397 8B55FC                  mov edx, dword ptr [ebp-04]
:0043439A 52                      push edx
:0043439B B9D01C4B00              mov ecx, 004B1CD0
:004343A0 E81BBBFDFF              call 0040FEC0
:004343A5 50                      push eax
:004343A6 E815420400              call 004785C0
:004343AB 83C40C                  add esp, 0000000C
:004343AE 837D0800                cmp dword ptr [ebp+08], 00000000
:004343B2 740C                    je 004343C0
:004343B4 6A10                    push 00000010
:004343B6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004343B9 E812250000              call 004368D0
:004343BE EB0A                    jmp 004343CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004343B2(C)
|
:004343C0 6A10                    push 00000010
:004343C2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004343C5 E8F6290000              call 00436DC0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004342DD(U), :004342EF(C), :004343BE(U)
|
:004343CA 8BE5                    mov esp, ebp
:004343CC 5D                      pop ebp
:004343CD C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004344DA   , :00443084   , :00443340   , :004452D7   , :0044748C   
|
:004343D0 55                      push ebp
:004343D1 8BEC                    mov ebp, esp
:004343D3 83EC08                  sub esp, 00000008
:004343D6 894DFC                  mov dword ptr [ebp-04], ecx
:004343D9 8B45FC                  mov eax, dword ptr [ebp-04]
:004343DC 8B08                    mov ecx, dword ptr [eax]
:004343DE 51                      push ecx
:004343DF E8C0D5FCFF              call 004019A4
:004343E4 83C404                  add esp, 00000004
:004343E7 25FF000000              and eax, 000000FF
:004343EC 8945F8                  mov dword ptr [ebp-08], eax
:004343EF 837DF80E                cmp dword ptr [ebp-08], 0000000E
:004343F3 7735                    ja 0043442A
:004343F5 8B45F8                  mov eax, dword ptr [ebp-08]
:004343F8 33D2                    xor edx, edx
:004343FA 8A9052444300            mov dl, byte ptr [eax+00434452]
:00434400 FF249532444300          jmp dword ptr [4*edx+00434432]
:00434407 6633C0                  xor ax, ax
:0043440A EB22                    jmp 0043442E
:0043440C 66B80100                mov ax, 0001
:00434410 EB1C                    jmp 0043442E
:00434412 66B80200                mov ax, 0002
:00434416 EB16                    jmp 0043442E
:00434418 66B80300                mov ax, 0003
:0043441C EB10                    jmp 0043442E
:0043441E 66B80400                mov ax, 0004
:00434422 EB0A                    jmp 0043442E
:00434424 66B80500                mov ax, 0005
:00434428 EB04                    jmp 0043442E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004343F3(C)
|
:0043442A 66B80600                mov ax, 0006

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043440A(U), :00434410(U), :00434416(U), :0043441C(U), :00434422(U)
|:00434428(U)
|
:0043442E 8BE5                    mov esp, ebp
:00434430 5D                      pop ebp
:00434431 C3                      ret



:00434432 07444300                DWORD 00434407
:00434436 0C444300                DWORD 0043440C
:0043443A 0C444300                DWORD 0043440C
:0043443E 12444300                DWORD 00434412
:00434442 18444300                DWORD 00434418
:00434446 24444300                DWORD 00434424
:0043444A 1E444300                DWORD 0043441E
:0043444E 2A444300                DWORD 0043442A


:00434452 0007                    add byte ptr [edi], al
:00434454 0107                    add dword ptr [edi], eax
:00434456 0203                    add al, byte ptr [ebx]
:00434458 0407                    add al, 07
:0043445A 07                      pop es
:0043445B 07                      pop es
:0043445C 07                      pop es
:0043445D 07                      pop es
:0043445E 05                      BYTE 05h
:0043445F 07                      BYTE 07h
:00434460 06                      BYTE 06h


* Referenced by a CALL at Addresses:
|:004346A8   , :00434BD7   , :00435F5B   , :0045CC65   , :0045EFC7   
|:00460476   
|
:00434461 55                      push ebp
:00434462 8BEC                    mov ebp, esp
:00434464 6AFF                    push FFFFFFFF
:00434466 6842984700              push 00479842
:0043446B 64A100000000            mov eax, dword ptr fs:[00000000]
:00434471 50                      push eax
:00434472 64892500000000          mov dword ptr fs:[00000000], esp
:00434479 81EC10010000            sub esp, 00000110
:0043447F 898DE4FEFFFF            mov dword ptr [ebp+FFFFFEE4], ecx
:00434485 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0043448B E8B011FDFF              call 00405640
:00434490 C745FC00000000          mov [ebp-04], 00000000
:00434497 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0043449D 33C9                    xor ecx, ecx
:0043449F 8A4804                  mov cl, byte ptr [eax+04]
:004344A2 69C9005A0000            imul ecx, 00005A00
:004344A8 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx

* Possible StringData Ref from Data Obj ->"CHR_BS.E3"
                                  |
:004344AE 68B8D54700              push 0047D5B8
:004344B3 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004344B9 E817CDFDFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004344BE 6A04                    push 00000004
:004344C0 6A00                    push 00000000
:004344C2 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:004344C8 52                      push edx
:004344C9 B9187D4A00              mov ecx, 004A7D18
:004344CE E8BD4A0400              call 00478F90
:004344D3 50                      push eax
:004344D4 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:004344DA E8F1FEFFFF              call 004343D0
:004344DF 25FFFF0000              and eax, 0000FFFF
:004344E4 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:004344EA 33D2                    xor edx, edx
:004344EC 8A511C                  mov dl, byte ptr [ecx+1C]
:004344EF 6BD225                  imul edx, 00000025
:004344F2 8D44101E                lea eax, dword ptr [eax+edx+1E]
:004344F6 50                      push eax
:004344F7 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004344FD E827CEFDFF              call 00411329
:00434502 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00434508 E81897FDFF              call 0040DC25
:0043450D 6A10                    push 00000010
:0043450F 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:00434515 E8D6280000              call 00436DF0
:0043451A 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:00434520 6A10                    push 00000010
:00434522 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:00434528 E893280000              call 00436DC0
:0043452D 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00434533 51                      push ecx
:00434534 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:0043453A E876FDFFFF              call 004342B5
:0043453F 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00434545 C6421D01                mov [edx+1D], 01
:00434549 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00434550 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00434556 E80511FDFF              call 00405660
:0043455B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043455E 64890D00000000          mov dword ptr fs:[00000000], ecx
:00434565 8BE5                    mov esp, ebp
:00434567 5D                      pop ebp
:00434568 C3                      ret



* Referenced by a CALL at Addresses:
|:0040B0DC   , :00434BF7   , :00435F6E   , :0043ACAE   , :0044EF40   
|:0045CC7E   , :0045EFDA   , :00460480   
|
:00434569 55                      push ebp
:0043456A 8BEC                    mov ebp, esp
:0043456C 6AFF                    push FFFFFFFF
:0043456E 6858984700              push 00479858
:00434573 64A100000000            mov eax, dword ptr fs:[00000000]
:00434579 50                      push eax
:0043457A 64892500000000          mov dword ptr fs:[00000000], esp
:00434581 81EC14010000            sub esp, 00000114
:00434587 898DE0FEFFFF            mov dword ptr [ebp+FFFFFEE0], ecx
:0043458D 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:00434593 E8B9230000              call 00436951
:00434598 85C0                    test eax, eax
:0043459A 0F8402010000            je 004346A2
:004345A0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004345A6 E89510FDFF              call 00405640
:004345AB C745FC00000000          mov [ebp-04], 00000000
:004345B2 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:004345B8 33C9                    xor ecx, ecx
:004345BA 8A4804                  mov cl, byte ptr [eax+04]
:004345BD 69C9005A0000            imul ecx, 00005A00
:004345C3 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx
:004345C9 8B95E0FEFFFF            mov edx, dword ptr [ebp+FFFFFEE0]
:004345CF 33C0                    xor eax, eax
:004345D1 8A4204                  mov al, byte ptr [edx+04]
:004345D4 50                      push eax
:004345D5 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:004345DB E8C2DAFFFF              call 004320A2
:004345E0 8845F0                  mov byte ptr [ebp-10], al

* Possible StringData Ref from Data Obj ->"CHR_BS.E3"
                                  |
:004345E3 68B8D54700              push 0047D5B8
:004345E8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004345EE E8E2CBFDFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004345F3 6A04                    push 00000004
:004345F5 6A00                    push 00000000
:004345F7 6A00                    push 00000000
:004345F9 B9F0174B00              mov ecx, 004B17F0
:004345FE E88D490400              call 00478F90
:00434603 50                      push eax
:00434604 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00434607 81E1FF000000            and ecx, 000000FF
:0043460D 51                      push ecx
:0043460E 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00434614 E810CDFDFF              call 00411329
:00434619 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043461F E80196FDFF              call 0040DC25
:00434624 68005A0000              push 00005A00

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00434629 6A04                    push 00000004
:0043462B 6A00                    push 00000000
:0043462D 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:00434633 52                      push edx
:00434634 B9187D4A00              mov ecx, 004A7D18
:00434639 E852490400              call 00478F90
:0043463E 50                      push eax
:0043463F B9F0174B00              mov ecx, 004B17F0
:00434644 E877B8FDFF              call 0040FEC0
:00434649 50                      push eax
:0043464A E8713F0400              call 004785C0
:0043464F 83C40C                  add esp, 0000000C
:00434652 6A10                    push 00000010
:00434654 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0043465A E891270000              call 00436DF0
:0043465F 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:00434665 6A10                    push 00000010
:00434667 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0043466D E84E270000              call 00436DC0
:00434672 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00434678 50                      push eax
:00434679 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0043467F E831FCFFFF              call 004342B5
:00434684 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0043468A C6411D00                mov [ecx+1D], 00
:0043468E C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00434695 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0043469B E8C00FFDFF              call 00405660
:004346A0 EB0B                    jmp 004346AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043459A(C)
|
:004346A2 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:004346A8 E8B4FDFFFF              call 00434461

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004346A0(U)
|
:004346AD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004346B0 64890D00000000          mov dword ptr fs:[00000000], ecx
:004346B7 8BE5                    mov esp, ebp
:004346B9 5D                      pop ebp
:004346BA C3                      ret



* Referenced by a CALL at Addresses:
|:0043567D   , :004412E6   , :0044F1F6   , :004510E2   , :00456BBF   
|:0046049A   
|
:004346BB 55                      push ebp
:004346BC 8BEC                    mov ebp, esp
:004346BE 51                      push ecx
:004346BF 894DFC                  mov dword ptr [ebp-04], ecx
:004346C2 8B45FC                  mov eax, dword ptr [ebp-04]
:004346C5 8A4804                  mov cl, byte ptr [eax+04]
:004346C8 51                      push ecx
:004346C9 8B55FC                  mov edx, dword ptr [ebp-04]
:004346CC 83C205                  add edx, 00000005
:004346CF 52                      push edx
:004346D0 E8D4B20100              call 0044F9A9
:004346D5 83C408                  add esp, 00000008
:004346D8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004346DB E8BF040000              call 00434B9F
:004346E0 8BE5                    mov esp, ebp
:004346E2 5D                      pop ebp
:004346E3 C3                      ret



* Referenced by a CALL at Addresses:
|:00435655   , :0044125D   , :00451010   , :00456B37   , :004603D5   
|
:004346E4 55                      push ebp
:004346E5 8BEC                    mov ebp, esp
:004346E7 51                      push ecx
:004346E8 894DFC                  mov dword ptr [ebp-04], ecx
:004346EB 68FF000000              push 000000FF
:004346F0 8B45FC                  mov eax, dword ptr [ebp-04]
:004346F3 83C005                  add eax, 00000005
:004346F6 50                      push eax
:004346F7 E8ADB20100              call 0044F9A9
:004346FC 83C408                  add esp, 00000008
:004346FF 8BE5                    mov esp, ebp
:00434701 5D                      pop ebp
:00434702 C3                      ret



* Referenced by a CALL at Addresses:
|:00441F4B   , :0045CF4B   , :0045D1D1   , :0045F93D   , :0045FAE0   
|:0045FB82   
|
:00434703 55                      push ebp
:00434704 8BEC                    mov ebp, esp
:00434706 83EC08                  sub esp, 00000008
:00434709 894DF8                  mov dword ptr [ebp-08], ecx
:0043470C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043470F E8BC790200              call 0045C0D0
:00434714 25FF000000              and eax, 000000FF
:00434719 83F801                  cmp eax, 00000001
:0043471C 755D                    jne 0043477B

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043471E 6A02                    push 00000002
:00434720 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00434723 E8D8250000              call 00436D00
:00434728 8B4510                  mov eax, dword ptr [ebp+10]
:0043472B 50                      push eax
:0043472C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043472F E881FBFFFF              call 004342B5
:00434734 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00434737 51                      push ecx
:00434738 8A5508                  mov dl, byte ptr [ebp+08]
:0043473B 52                      push edx
:0043473C 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043473F E81C240000              call 00436B60
:00434744 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00434747 E8BFE8FFFF              call 0043300B
:0043474C A264484B00              mov byte ptr [004B4864], al
:00434751 C60560484B00FF          mov byte ptr [004B4860], FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00434758 6A05                    push 00000005
:0043475A 668B45FC                mov ax, word ptr [ebp-04]
:0043475E 50                      push eax
:0043475F E850E5FFFF              call 00432CB4
:00434764 83C408                  add esp, 00000008
:00434767 8A0D60484B00            mov cl, byte ptr [004B4860]
:0043476D 884D08                  mov byte ptr [ebp+08], cl
:00434770 8A1561484B00            mov dl, byte ptr [004B4861]
:00434776 88550C                  mov byte ptr [ebp+0C], dl
:00434779 EB2E                    jmp 004347A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043471C(C)
|
:0043477B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043477E E84D790200              call 0045C0D0
:00434783 25FF000000              and eax, 000000FF
:00434788 83F802                  cmp eax, 00000002
:0043478B 751C                    jne 004347A9
:0043478D 68FF000000              push 000000FF
:00434792 8B45F8                  mov eax, dword ptr [ebp-08]
:00434795 83C005                  add eax, 00000005
:00434798 50                      push eax
:00434799 E80BB20100              call 0044F9A9
:0043479E 83C408                  add esp, 00000008
:004347A1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004347A4 E8F6030000              call 00434B9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434779(U), :0043478B(C)
|
:004347A9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004347AC 8A5508                  mov dl, byte ptr [ebp+08]
:004347AF 885105                  mov byte ptr [ecx+05], dl
:004347B2 8B45F8                  mov eax, dword ptr [ebp-08]
:004347B5 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004347B8 884806                  mov byte ptr [eax+06], cl
:004347BB 8B55F8                  mov edx, dword ptr [ebp-08]
:004347BE 8A4204                  mov al, byte ptr [edx+04]
:004347C1 50                      push eax
:004347C2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004347C5 83C105                  add ecx, 00000005
:004347C8 51                      push ecx
:004347C9 E8DBB10100              call 0044F9A9
:004347CE 83C408                  add esp, 00000008
:004347D1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004347D4 E8C6030000              call 00434B9F
:004347D9 B801000000              mov eax, 00000001
:004347DE 8BE5                    mov esp, ebp
:004347E0 5D                      pop ebp
:004347E1 C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0044F098   
|
:004347E4 55                      push ebp
:004347E5 8BEC                    mov ebp, esp
:004347E7 83EC68                  sub esp, 00000068
:004347EA 837D0838                cmp dword ptr [ebp+08], 00000038
:004347EE 7322                    jnb 00434812
:004347F0 8B4508                  mov eax, dword ptr [ebp+08]
:004347F3 50                      push eax
:004347F4 8D4D98                  lea ecx, dword ptr [ebp-68]
:004347F7 51                      push ecx
:004347F8 E8CCEDFCFF              call 004035C9
:004347FD 83C408                  add esp, 00000008
:00434800 8B5508                  mov edx, dword ptr [ebp+08]
:00434803 52                      push edx
:00434804 8D4598                  lea eax, dword ptr [ebp-68]
:00434807 50                      push eax
:00434808 B9C84F4B00              mov ecx, 004B4FC8
:0043480D E82DB50200              call 0045FD3F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004347EE(C)
|
:00434812 8BE5                    mov esp, ebp
:00434814 5D                      pop ebp
:00434815 C3                      ret



* Referenced by a CALL at Addresses:
|:00434A98   , :00434AAA   
|
:00434816 55                      push ebp
:00434817 8BEC                    mov ebp, esp
:00434819 83EC68                  sub esp, 00000068
:0043481C 837D0838                cmp dword ptr [ebp+08], 00000038
:00434820 7322                    jnb 00434844
:00434822 8B4508                  mov eax, dword ptr [ebp+08]
:00434825 50                      push eax
:00434826 8D4D98                  lea ecx, dword ptr [ebp-68]
:00434829 51                      push ecx
:0043482A E8BCEDFCFF              call 004035EB
:0043482F 83C408                  add esp, 00000008
:00434832 8B5508                  mov edx, dword ptr [ebp+08]
:00434835 52                      push edx
:00434836 8D4598                  lea eax, dword ptr [ebp-68]
:00434839 50                      push eax
:0043483A B9C84F4B00              mov ecx, 004B4FC8
:0043483F E8FBB40200              call 0045FD3F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434820(C)
|
:00434844 8BE5                    mov esp, ebp
:00434846 5D                      pop ebp
:00434847 C3                      ret



* Referenced by a CALL at Addresses:
|:0043B987   , :0043C789   , :0044105B   , :00443DB5   , :0045EAAE   
|:0045ECA3   , :0045ECDF   , :0045ED0F   , :00460389   , :00460760   
|
:00434848 55                      push ebp
:00434849 8BEC                    mov ebp, esp
:0043484B 83EC1C                  sub esp, 0000001C
:0043484E 894DE4                  mov dword ptr [ebp-1C], ecx
:00434851 C745F400000000          mov [ebp-0C], 00000000
:00434858 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043485B E870780200              call 0045C0D0
:00434860 25FF000000              and eax, 000000FF
:00434865 83F802                  cmp eax, 00000002
:00434868 7405                    je 0043486F
:0043486A E92C030000              jmp 00434B9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434868(C)
|
:0043486F 68FF000000              push 000000FF
:00434874 8B45E4                  mov eax, dword ptr [ebp-1C]
:00434877 83C005                  add eax, 00000005
:0043487A 50                      push eax
:0043487B E829B10100              call 0044F9A9
:00434880 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00434883 6A04                    push 00000004
:00434885 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00434888 E873240000              call 00436D00
:0043488D 6A28                    push 00000028
:0043488F B9F8544B00              mov ecx, 004B54F8
:00434894 E8814C0300              call 0046951A
:00434899 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043489C E8FE020000              call 00434B9F
:004348A1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004348A4 C6411B00                mov [ecx+1B], 00
:004348A8 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004348AB E830210000              call 004369E0
:004348B0 50                      push eax
:004348B1 E866820300              call 0046CB1C
:004348B6 83C404                  add esp, 00000004
:004348B9 C645FC00                mov [ebp-04], 00
:004348BD EB09                    jmp 004348C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434977(U)
|
:004348BF 8A55FC                  mov dl, byte ptr [ebp-04]
:004348C2 80C201                  add dl, 01
:004348C5 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004348BD(U)
|
:004348C8 8B45FC                  mov eax, dword ptr [ebp-04]
:004348CB 25FF000000              and eax, 000000FF
:004348D0 83F85A                  cmp eax, 0000005A
:004348D3 0F8DA3000000            jnl 0043497C
:004348D9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004348DC 81E1FF000000            and ecx, 000000FF
:004348E2 6BC924                  imul ecx, 00000024
:004348E5 81C1B83B4B00            add ecx, 004B3BB8
:004348EB E810260000              call 00436F00
:004348F0 25FF000000              and eax, 000000FF
:004348F5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004348F8 33D2                    xor edx, edx
:004348FA 8A5104                  mov dl, byte ptr [ecx+04]
:004348FD 3BC2                    cmp eax, edx
:004348FF 7576                    jne 00434977
:00434901 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434904 81E1FF000000            and ecx, 000000FF
:0043490A 6BC924                  imul ecx, 00000024
:0043490D 81C1B83B4B00            add ecx, 004B3BB8
:00434913 E8680EFDFF              call 00405780
:00434918 25FF000000              and eax, 000000FF
:0043491D 85C0                    test eax, eax
:0043491F 7421                    je 00434942
:00434921 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434924 81E1FF000000            and ecx, 000000FF
:0043492A 6BC924                  imul ecx, 00000024
:0043492D 81C1B83B4B00            add ecx, 004B3BB8
:00434933 E8480EFDFF              call 00405780
:00434938 25FF000000              and eax, 000000FF
:0043493D 83F804                  cmp eax, 00000004
:00434940 7535                    jne 00434977

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043491F(C)
|
:00434942 68FF000000              push 000000FF
:00434947 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043494A 81E1FF000000            and ecx, 000000FF
:00434950 6BC924                  imul ecx, 00000024
:00434953 81C1B83B4B00            add ecx, 004B3BB8
:00434959 E8C2250000              call 00436F20
:0043495E 6A01                    push 00000001
:00434960 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434963 81E1FF000000            and ecx, 000000FF
:00434969 6BC924                  imul ecx, 00000024
:0043496C 81C1B83B4B00            add ecx, 004B3BB8
:00434972 E884080000              call 004351FB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004348FF(C), :00434940(C)
|
:00434977 E943FFFFFF              jmp 004348BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004348D3(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043497C 6A04                    push 00000004
:0043497E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00434981 E86A240000              call 00436DF0
:00434986 85C0                    test eax, eax
:00434988 7405                    je 0043498F
:0043498A E90C020000              jmp 00434B9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434988(C)
|
:0043498F B9784E4B00              mov ecx, 004B4E78
:00434994 E8A7250000              call 00436F40
:00434999 25FF000000              and eax, 000000FF
:0043499E 85C0                    test eax, eax
:004349A0 7552                    jne 004349F4
:004349A2 8B45E4                  mov eax, dword ptr [ebp-1C]
:004349A5 8B08                    mov ecx, dword ptr [eax]
:004349A7 51                      push ecx
:004349A8 B9806D4800              mov ecx, 00486D80
:004349AD E87E240000              call 00436E30
:004349B2 85C0                    test eax, eax
:004349B4 7415                    je 004349CB
:004349B6 6A01                    push 00000001
:004349B8 B9806D4800              mov ecx, 00486D80
:004349BD E8FE240000              call 00436EC0
:004349C2 C745F401000000          mov [ebp-0C], 00000001
:004349C9 EB27                    jmp 004349F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004349B4(C)
|
:004349CB 8B55E4                  mov edx, dword ptr [ebp-1C]
:004349CE 8B02                    mov eax, dword ptr [edx]
:004349D0 50                      push eax
:004349D1 B9806D4800              mov ecx, 00486D80
:004349D6 E8C5240000              call 00436EA0
:004349DB 85C0                    test eax, eax
:004349DD 7413                    je 004349F2
:004349DF 6A01                    push 00000001
:004349E1 B9806D4800              mov ecx, 00486D80
:004349E6 E8F5240000              call 00436EE0
:004349EB C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004349C9(U), :004349DD(C)
|
:004349F2 EB05                    jmp 004349F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004349A0(C)
|
:004349F4 E9A2010000              jmp 00434B9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004349F2(U)
|
:004349F9 C645F800                mov [ebp-08], 00
:004349FD 837DF400                cmp dword ptr [ebp-0C], 00000000
:00434A01 0F855F010000            jne 00434B66
:00434A07 C745EC00000000          mov [ebp-14], 00000000
:00434A0E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00434A11 833900                  cmp dword ptr [ecx], 00000000
:00434A14 7523                    jne 00434A39
:00434A16 C645F801                mov [ebp-08], 01

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434A1A 6A03                    push 00000003
:00434A1C B9784E4B00              mov ecx, 004B4E78
:00434A21 E8DAB4FDFF              call 0040FF00

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00434A26 6A04                    push 00000004
:00434A28 B900554B00              mov ecx, 004B5500
:00434A2D E86C4A0300              call 0046949E
:00434A32 C745EC01000000          mov [ebp-14], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434A14(C)
|
:00434A39 8B55E4                  mov edx, dword ptr [ebp-1C]
:00434A3C 833A02                  cmp dword ptr [edx], 00000002
:00434A3F 7531                    jne 00434A72
:00434A41 6A00                    push 00000000
:00434A43 E84894FDFF              call 0040DE90
:00434A48 83C404                  add esp, 00000004
:00434A4B 85C0                    test eax, eax
:00434A4D 7523                    jne 00434A72
:00434A4F C645F801                mov [ebp-08], 01

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434A53 6A03                    push 00000003
:00434A55 B9784E4B00              mov ecx, 004B4E78
:00434A5A E8A1B4FDFF              call 0040FF00

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00434A5F 6A04                    push 00000004
:00434A61 B900554B00              mov ecx, 004B5500
:00434A66 E8334A0300              call 0046949E
:00434A6B C745EC01000000          mov [ebp-14], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434A3F(C), :00434A4D(C)
|
:00434A72 8B45F8                  mov eax, dword ptr [ebp-08]
:00434A75 25FF000000              and eax, 000000FF
:00434A7A 85C0                    test eax, eax
:00434A7C 7524                    jne 00434AA2
:00434A7E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00434A81 8B11                    mov edx, dword ptr [ecx]
:00434A83 52                      push edx
:00434A84 E80794FDFF              call 0040DE90
:00434A89 83C404                  add esp, 00000004
:00434A8C 85C0                    test eax, eax
:00434A8E 7410                    je 00434AA0
:00434A90 6A00                    push 00000000
:00434A92 8B45E4                  mov eax, dword ptr [ebp-1C]
:00434A95 8B08                    mov ecx, dword ptr [eax]
:00434A97 51                      push ecx
:00434A98 E879FDFFFF              call 00434816
:00434A9D 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434A8E(C)
|
:00434AA0 EB28                    jmp 00434ACA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434A7C(C)
|
:00434AA2 6A01                    push 00000001
:00434AA4 8B55E4                  mov edx, dword ptr [ebp-1C]
:00434AA7 8B02                    mov eax, dword ptr [edx]
:00434AA9 50                      push eax
:00434AAA E867FDFFFF              call 00434816
:00434AAF 83C408                  add esp, 00000008
:00434AB2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00434AB5 E8361F0000              call 004369F0
:00434ABA 50                      push eax

* Possible StringData Ref from Data Obj ->"%s@bNMhF"
                                  |
:00434ABB 6810DE4700              push 0047DE10
:00434AC0 6A00                    push 00000000
:00434AC2 E86CC9FFFF              call 00431433
:00434AC7 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434AA0(U)
|
:00434ACA C745F000000000          mov [ebp-10], 00000000
:00434AD1 B9784E4B00              mov ecx, 004B4E78
:00434AD6 E865240000              call 00436F40
:00434ADB 25FF000000              and eax, 000000FF
:00434AE0 83F801                  cmp eax, 00000001
:00434AE3 746D                    je 00434B52
:00434AE5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00434AE8 81E1FF000000            and ecx, 000000FF
:00434AEE 85C9                    test ecx, ecx
:00434AF0 753C                    jne 00434B2E
:00434AF2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00434AF5 E8F61E0000              call 004369F0
:00434AFA 50                      push eax

* Possible StringData Ref from Data Obj ->"%sMhFI"
                                  |
:00434AFB 6824DE4700              push 0047DE24
:00434B00 6A00                    push 00000000
:00434B02 E82CC9FFFF              call 00431433
:00434B07 83C40C                  add esp, 0000000C
:00434B0A B9784E4B00              mov ecx, 004B4E78
:00434B0F E82C240000              call 00436F40
:00434B14 25FF000000              and eax, 000000FF
:00434B19 85C0                    test eax, eax
:00434B1B 7402                    je 00434B1F
:00434B1D EB7C                    jmp 00434B9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434B1B(C)
|
:00434B1F B9784E4B00              mov ecx, 004B4E78
:00434B24 E87AA60200              call 0045F1A3
:00434B29 8945F0                  mov dword ptr [ebp-10], eax
:00434B2C EB24                    jmp 00434B52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434AF0(C)
|
:00434B2E 837DEC00                cmp dword ptr [ebp-14], 00000000
:00434B32 7414                    je 00434B48
:00434B34 6A10                    push 00000010
:00434B36 68FFFF0000              push 0000FFFF

* Possible StringData Ref from Data Obj ->"QڷQ}FKKC"
                                  |
:00434B3B 6830DE4700              push 0047DE30
:00434B40 E869B0FFFF              call 0042FBAE
:00434B45 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434B32(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00434B48 6A05                    push 00000005
:00434B4A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00434B4D E8AE210000              call 00436D00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434AE3(C), :00434B2C(U)
|
:00434B52 837DF000                cmp dword ptr [ebp-10], 00000000
:00434B56 750C                    jne 00434B64
:00434B58 6A00                    push 00000000
:00434B5A B9806D4800              mov ecx, 00486D80
:00434B5F E8F375FDFF              call 0040C157

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434B56(C)
|
:00434B64 EB35                    jmp 00434B9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434A01(C)
|
:00434B66 C745E800000000          mov [ebp-18], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434B8D(U)
|
:00434B6D 837DE804                cmp dword ptr [ebp-18], 00000004
:00434B71 741C                    je 00434B8F
:00434B73 837DE802                cmp dword ptr [ebp-18], 00000002
:00434B77 7416                    je 00434B8F
:00434B79 6A00                    push 00000000
:00434B7B B9806D4800              mov ecx, 00486D80
:00434B80 E8D275FDFF              call 0040C157
:00434B85 8945E8                  mov dword ptr [ebp-18], eax
:00434B88 E8C9280400              call 00477456
:00434B8D EBDE                    jmp 00434B6D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434B71(C), :00434B77(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00434B8F 6A02                    push 00000002
:00434B91 B9784E4B00              mov ecx, 004B4E78
:00434B96 E865B3FDFF              call 0040FF00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043486A(U), :0043498A(U), :004349F4(U), :00434B1D(U), :00434B64(U)
|
:00434B9B 8BE5                    mov esp, ebp
:00434B9D 5D                      pop ebp
:00434B9E C3                      ret



* Referenced by a CALL at Addresses:
|:0040B0F3   , :00433E15   , :004346DB   , :004347A4   , :004347D4   
|:0043489C   , :004354C9   , :0043A4ED   , :0043A51B   , :0043A532   
|:0043A984   , :0043ACBF   , :0043C763   , :0043E8ED   , :0043FDA7   
|:00440205   , :0044458A   , :004446BC   , :00444964   , :00456618   
|:0045668C   
|
:00434B9F 55                      push ebp
:00434BA0 8BEC                    mov ebp, esp
:00434BA2 51                      push ecx
:00434BA3 56                      push esi
:00434BA4 894DFC                  mov dword ptr [ebp-04], ecx
:00434BA7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434BAA E821750200              call 0045C0D0
:00434BAF 25FF000000              and eax, 000000FF
:00434BB4 85C0                    test eax, eax
:00434BB6 0F8482000000            je 00434C3E
:00434BBC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434BBF E8CA0B0000              call 0043578E
:00434BC4 85C0                    test eax, eax
:00434BC6 7414                    je 00434BDC
:00434BC8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434BCB E890230000              call 00436F60
:00434BD0 85C0                    test eax, eax
:00434BD2 7508                    jne 00434BDC
:00434BD4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434BD7 E885F8FFFF              call 00434461

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434BC6(C), :00434BD2(C)
|
:00434BDC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434BDF E8AA0B0000              call 0043578E
:00434BE4 85C0                    test eax, eax
:00434BE6 7514                    jne 00434BFC
:00434BE8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434BEB E870230000              call 00436F60
:00434BF0 85C0                    test eax, eax
:00434BF2 7408                    je 00434BFC
:00434BF4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434BF7 E86DF9FFFF              call 00434569

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434BE6(C), :00434BF2(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434BFC 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434BFE 6A03                    push 00000003
:00434C00 8B45FC                  mov eax, dword ptr [ebp-04]
:00434C03 33C9                    xor ecx, ecx
:00434C05 8A4806                  mov cl, byte ptr [eax+06]
:00434C08 8BF1                    mov esi, ecx
:00434C0A 6BF603                  imul esi, 00000003
:00434C0D B958494B00              mov ecx, 004B4958
:00434C12 E80C610100              call 0044AD23
:00434C17 2BF0                    sub esi, eax
:00434C19 56                      push esi
:00434C1A 8B55FC                  mov edx, dword ptr [ebp-04]
:00434C1D 33C0                    xor eax, eax
:00434C1F 8A4205                  mov al, byte ptr [edx+05]
:00434C22 8BF0                    mov esi, eax
:00434C24 6BF603                  imul esi, 00000003
:00434C27 B958494B00              mov ecx, 004B4958
:00434C2C E8E1600100              call 0044AD12
:00434C31 2BF0                    sub esi, eax
:00434C33 56                      push esi
:00434C34 B958494B00              mov ecx, 004B4958
:00434C39 E89A630100              call 0044AFD8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434BB6(C)
|
:00434C3E 5E                      pop esi
:00434C3F 8BE5                    mov esp, ebp
:00434C41 5D                      pop ebp
:00434C42 C3                      ret



* Referenced by a CALL at Addresses:
|:0044DD97   , :0045E309   
|
:00434C43 55                      push ebp
:00434C44 8BEC                    mov ebp, esp
:00434C46 83EC48                  sub esp, 00000048
:00434C49 56                      push esi
:00434C4A 894DB8                  mov dword ptr [ebp-48], ecx
:00434C4D 8B45B8                  mov eax, dword ptr [ebp-48]
:00434C50 8B08                    mov ecx, dword ptr [eax]
:00434C52 6BC950                  imul ecx, 00000050
:00434C55 81C1787F4900            add ecx, 00497F78
:00434C5B 894DF4                  mov dword ptr [ebp-0C], ecx
:00434C5E 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00434C61 E81A230000              call 00436F80
:00434C66 8845E8                  mov byte ptr [ebp-18], al
:00434C69 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00434C6C E85EE4FFFF              call 004330CF
:00434C71 8845C8                  mov byte ptr [ebp-38], al
:00434C74 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00434C77 E8D51C0000              call 00436951
:00434C7C 85C0                    test eax, eax
:00434C7E 7505                    jne 00434C85
:00434C80 E93B040000              jmp 004350C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434C7E(C)
|
:00434C85 B958494B00              mov ecx, 004B4958
:00434C8A E883600100              call 0044AD12
:00434C8F 8945EC                  mov dword ptr [ebp-14], eax
:00434C92 B958494B00              mov ecx, 004B4958
:00434C97 E887600100              call 0044AD23
:00434C9C 8945FC                  mov dword ptr [ebp-04], eax
:00434C9F B958494B00              mov ecx, 004B4958
:00434CA4 E89A9C0100              call 0044E943
:00434CA9 99                      cdq
:00434CAA 83E20F                  and edx, 0000000F
:00434CAD 03C2                    add eax, edx
:00434CAF C1F804                  sar eax, 04
:00434CB2 8B55EC                  mov edx, dword ptr [ebp-14]
:00434CB5 03D0                    add edx, eax
:00434CB7 8955E4                  mov dword ptr [ebp-1C], edx
:00434CBA B958494B00              mov ecx, 004B4958
:00434CBF E8A69C0100              call 0044E96A
:00434CC4 99                      cdq
:00434CC5 83E20F                  and edx, 0000000F
:00434CC8 03C2                    add eax, edx
:00434CCA C1F804                  sar eax, 04
:00434CCD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00434CD0 03C8                    add ecx, eax
:00434CD2 894DDC                  mov dword ptr [ebp-24], ecx
:00434CD5 8B45E4                  mov eax, dword ptr [ebp-1C]
:00434CD8 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434CD9 B903000000              mov ecx, 00000003
:00434CDE F7F9                    idiv ecx
:00434CE0 8BC8                    mov ecx, eax
:00434CE2 8B45EC                  mov eax, dword ptr [ebp-14]
:00434CE5 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434CE6 BE03000000              mov esi, 00000003
:00434CEB F7FE                    idiv esi
:00434CED 2BC8                    sub ecx, eax
:00434CEF 8BC1                    mov eax, ecx
:00434CF1 99                      cdq
:00434CF2 2BC2                    sub eax, edx
:00434CF4 D1F8                    sar eax, 1
:00434CF6 8845D8                  mov byte ptr [ebp-28], al
:00434CF9 8B45DC                  mov eax, dword ptr [ebp-24]
:00434CFC 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434CFD B903000000              mov ecx, 00000003
:00434D02 F7F9                    idiv ecx
:00434D04 8BC8                    mov ecx, eax
:00434D06 8B45FC                  mov eax, dword ptr [ebp-04]
:00434D09 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434D0A BE03000000              mov esi, 00000003
:00434D0F F7FE                    idiv esi
:00434D11 2BC8                    sub ecx, eax
:00434D13 8BC1                    mov eax, ecx
:00434D15 99                      cdq
:00434D16 2BC2                    sub eax, edx
:00434D18 D1F8                    sar eax, 1
:00434D1A 8845CC                  mov byte ptr [ebp-34], al
:00434D1D 8B55B8                  mov edx, dword ptr [ebp-48]
:00434D20 33C0                    xor eax, eax
:00434D22 8A4205                  mov al, byte ptr [edx+05]
:00434D25 8BC8                    mov ecx, eax
:00434D27 8B45EC                  mov eax, dword ptr [ebp-14]
:00434D2A 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434D2B BE03000000              mov esi, 00000003
:00434D30 F7FE                    idiv esi
:00434D32 2BC8                    sub ecx, eax
:00434D34 894DD4                  mov dword ptr [ebp-2C], ecx
:00434D37 8B55D4                  mov edx, dword ptr [ebp-2C]
:00434D3A 8955D0                  mov dword ptr [ebp-30], edx
:00434D3D 8B45B8                  mov eax, dword ptr [ebp-48]
:00434D40 33C9                    xor ecx, ecx
:00434D42 8A4806                  mov cl, byte ptr [eax+06]
:00434D45 8B45FC                  mov eax, dword ptr [ebp-04]
:00434D48 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434D49 BE03000000              mov esi, 00000003
:00434D4E F7FE                    idiv esi
:00434D50 2BC8                    sub ecx, eax
:00434D52 894DC4                  mov dword ptr [ebp-3C], ecx
:00434D55 8B55C4                  mov edx, dword ptr [ebp-3C]
:00434D58 8955C0                  mov dword ptr [ebp-40], edx
:00434D5B 8B45D8                  mov eax, dword ptr [ebp-28]
:00434D5E 25FF000000              and eax, 000000FF
:00434D63 3945D0                  cmp dword ptr [ebp-30], eax
:00434D66 7309                    jnb 00434D71

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434D68 C745F803000000          mov [ebp-08], 00000003
:00434D6F EB10                    jmp 00434D81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434D66(C)
|
:00434D71 C745F800000000          mov [ebp-08], 00000000
:00434D78 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00434D7B 83E907                  sub ecx, 00000007
:00434D7E 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434D6F(U)
|
:00434D81 8B55CC                  mov edx, dword ptr [ebp-34]
:00434D84 81E2FF000000            and edx, 000000FF
:00434D8A 3955C0                  cmp dword ptr [ebp-40], edx
:00434D8D 7309                    jnb 00434D98
:00434D8F C745F000000000          mov [ebp-10], 00000000
:00434D96 EB10                    jmp 00434DA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434D8D(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00434D98 C745F003000000          mov [ebp-10], 00000003
:00434D9F 8B45F0                  mov eax, dword ptr [ebp-10]
:00434DA2 83E806                  sub eax, 00000006
:00434DA5 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434D96(U)
|
:00434DA8 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00434DAB 6BC903                  imul ecx, 00000003
:00434DAE 034DF8                  add ecx, dword ptr [ebp-08]
:00434DB1 894DD0                  mov dword ptr [ebp-30], ecx
:00434DB4 8B55C4                  mov edx, dword ptr [ebp-3C]
:00434DB7 6BD203                  imul edx, 00000003
:00434DBA 0355F0                  add edx, dword ptr [ebp-10]
:00434DBD 8955C0                  mov dword ptr [ebp-40], edx
:00434DC0 837DD400                cmp dword ptr [ebp-2C], 00000000
:00434DC4 0F82F6020000            jb 004350C0
:00434DCA 837DC400                cmp dword ptr [ebp-3C], 00000000
:00434DCE 0F82EC020000            jb 004350C0
:00434DD4 B958494B00              mov ecx, 004B4958
:00434DD9 E8659B0100              call 0044E943
:00434DDE 99                      cdq
:00434DDF 83E20F                  and edx, 0000000F
:00434DE2 03C2                    add eax, edx
:00434DE4 C1F804                  sar eax, 04
:00434DE7 3945D4                  cmp dword ptr [ebp-2C], eax
:00434DEA 0F83D0020000            jnb 004350C0
:00434DF0 B958494B00              mov ecx, 004B4958
:00434DF5 E8709B0100              call 0044E96A
:00434DFA 99                      cdq
:00434DFB 83E20F                  and edx, 0000000F
:00434DFE 03C2                    add eax, edx
:00434E00 C1F804                  sar eax, 04
:00434E03 3945C4                  cmp dword ptr [ebp-3C], eax
:00434E06 0F83B4020000            jnb 004350C0
:00434E0C E822B3FDFF              call 00410133

* Possible Reference to String Resource ID=00006: ""
                                  |
:00434E11 6A06                    push 00000006

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00434E13 6A07                    push 00000007
:00434E15 8A45C0                  mov al, byte ptr [ebp-40]
:00434E18 50                      push eax
:00434E19 8A4DD0                  mov cl, byte ptr [ebp-30]
:00434E1C 51                      push ecx
:00434E1D B958494B00              mov ecx, 004B4958
:00434E22 E8347C0100              call 0044CA5B
:00434E27 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00434E29 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00434E2B 6A04                    push 00000004
:00434E2D E8EB0E0400              call 00475D1D
:00434E32 83C40C                  add esp, 0000000C
:00434E35 C745E000000000          mov [ebp-20], 00000000
:00434E3C EB09                    jmp 00434E47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434EA5(U)
|
:00434E3E 8B55E0                  mov edx, dword ptr [ebp-20]
:00434E41 83C201                  add edx, 00000001
:00434E44 8955E0                  mov dword ptr [ebp-20], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434E3C(U)
|
:00434E47 837DE060                cmp dword ptr [ebp-20], 00000060
:00434E4B 735A                    jnb 00434EA7
:00434E4D 8B45E0                  mov eax, dword ptr [ebp-20]
:00434E50 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00434E52 B902000000              mov ecx, 00000002
:00434E57 F7F1                    div ecx
:00434E59 F7DA                    neg edx
:00434E5B 1BD2                    sbb edx, edx
:00434E5D 81E2ABAAFFFF            and edx, FFFFAAAB
:00434E63 81C2AAAA0000            add edx, 0000AAAA
:00434E69 52                      push edx
:00434E6A 8B55C0                  mov edx, dword ptr [ebp-40]
:00434E6D 83C202                  add edx, 00000002
:00434E70 C1E204                  shl edx, 04
:00434E73 8B45E0                  mov eax, dword ptr [ebp-20]
:00434E76 8D4C0208                lea ecx, dword ptr [edx+eax+08]
:00434E7A 51                      push ecx
:00434E7B 8B55D0                  mov edx, dword ptr [ebp-30]
:00434E7E C1E204                  shl edx, 04
:00434E81 83C26F                  add edx, 0000006F
:00434E84 52                      push edx
:00434E85 8B45C0                  mov eax, dword ptr [ebp-40]
:00434E88 83C002                  add eax, 00000002
:00434E8B C1E004                  shl eax, 04
:00434E8E 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00434E91 8D540808                lea edx, dword ptr [eax+ecx+08]
:00434E95 52                      push edx
:00434E96 8B45D0                  mov eax, dword ptr [ebp-30]
:00434E99 C1E004                  shl eax, 04
:00434E9C 50                      push eax
:00434E9D E875100400              call 00475F17
:00434EA2 83C414                  add esp, 00000014
:00434EA5 EB97                    jmp 00434E3E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00434E4B(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00434EA7 6A0A                    push 0000000A
:00434EA9 6A10                    push 00000010
:00434EAB 6A00                    push 00000000
:00434EAD E86B0E0400              call 00475D1D
:00434EB2 83C40C                  add esp, 0000000C
:00434EB5 6A01                    push 00000001
:00434EB7 B958494B00              mov ecx, 004B4958
:00434EBC E8F07C0100              call 0044CBB1
:00434EC1 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00434EC4 8D540901                lea edx, dword ptr [ecx+ecx+01]
:00434EC8 8955D0                  mov dword ptr [ebp-30], edx
:00434ECB 8B45C0                  mov eax, dword ptr [ebp-40]
:00434ECE 83C002                  add eax, 00000002
:00434ED1 C1E004                  shl eax, 04
:00434ED4 83C008                  add eax, 00000008
:00434ED7 8945C0                  mov dword ptr [ebp-40], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00434EDA 6A04                    push 00000004
:00434EDC B9306D4800              mov ecx, 00486D30
:00434EE1 E86E11FDFF              call 00406054
:00434EE6 6A10                    push 00000010
:00434EE8 B9306D4800              mov ecx, 00486D30
:00434EED E8C610FDFF              call 00405FB8
:00434EF2 6A00                    push 00000000
:00434EF4 B9306D4800              mov ecx, 00486D30
:00434EF9 E8F210FDFF              call 00405FF0
:00434EFE 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00434F01 83C102                  add ecx, 00000002
:00434F04 894DC0                  mov dword ptr [ebp-40], ecx
:00434F07 8B55C0                  mov edx, dword ptr [ebp-40]
:00434F0A 52                      push edx
:00434F0B 8B45D0                  mov eax, dword ptr [ebp-30]
:00434F0E 50                      push eax
:00434F0F B9306D4800              mov ecx, 00486D30
:00434F14 E8F20FFDFF              call 00405F0B
:00434F19 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00434F1C E888070000              call 004356A9
:00434F21 6A0D                    push 0000000D
:00434F23 B9306D4800              mov ecx, 00486D30
:00434F28 E88B10FDFF              call 00405FB8
:00434F2D 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00434F30 83C113                  add ecx, 00000013
:00434F33 894DC0                  mov dword ptr [ebp-40], ecx
:00434F36 8B55C0                  mov edx, dword ptr [ebp-40]
:00434F39 52                      push edx
:00434F3A 8B45D0                  mov eax, dword ptr [ebp-30]
:00434F3D 50                      push eax
:00434F3E B9306D4800              mov ecx, 00486D30
:00434F43 E8C30FFDFF              call 00405F0B
:00434F48 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00434F4B 81E1FF000000            and ecx, 000000FF
:00434F51 8B148DB0D64700          mov edx, dword ptr [4*ecx+0047D6B0]
:00434F58 52                      push edx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00434F59 6848DE4700              push 0047DE48
:00434F5E 68306D4800              push 00486D30
:00434F63 E8701CFDFF              call 00406BD8
:00434F68 83C40C                  add esp, 0000000C
:00434F6B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00434F6E E82DAFFDFF              call 0040FEA0
:00434F73 25FF000000              and eax, 000000FF
:00434F78 50                      push eax

* Possible StringData Ref from Data Obj ->" Lv%2u"
                                  |
:00434F79 684CDE4700              push 0047DE4C
:00434F7E 68306D4800              push 00486D30
:00434F83 E8501CFDFF              call 00406BD8
:00434F88 83C40C                  add esp, 0000000C
:00434F8B 6A10                    push 00000010
:00434F8D B9306D4800              mov ecx, 00486D30
:00434F92 E82110FDFF              call 00405FB8
:00434F97 8B45C0                  mov eax, dword ptr [ebp-40]
:00434F9A 83C013                  add eax, 00000013
:00434F9D 8945C0                  mov dword ptr [ebp-40], eax
:00434FA0 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00434FA3 51                      push ecx
:00434FA4 8B55D0                  mov edx, dword ptr [ebp-30]
:00434FA7 83C201                  add edx, 00000001
:00434FAA 8955D0                  mov dword ptr [ebp-30], edx
:00434FAD 8B45D0                  mov eax, dword ptr [ebp-30]
:00434FB0 50                      push eax
:00434FB1 B9306D4800              mov ecx, 00486D30
:00434FB6 E8500FFDFF              call 00405F0B
:00434FBB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00434FBE E827CEFCFF              call 00401DEA
:00434FC3 50                      push eax
:00434FC4 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00434FC7 8B5110                  mov edx, dword ptr [ecx+10]
:00434FCA 52                      push edx

* Possible StringData Ref from Data Obj ->"@ %4u/%3u"
                                  |
:00434FCB 6854DE4700              push 0047DE54
:00434FD0 68306D4800              push 00486D30
:00434FD5 E8FE1BFDFF              call 00406BD8
:00434FDA 83C410                  add esp, 00000010
:00434FDD 8B45C0                  mov eax, dword ptr [ebp-40]
:00434FE0 83C013                  add eax, 00000013
:00434FE3 8945C0                  mov dword ptr [ebp-40], eax
:00434FE6 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00434FE9 51                      push ecx
:00434FEA 8B55D0                  mov edx, dword ptr [ebp-30]
:00434FED 52                      push edx
:00434FEE B9306D4800              mov ecx, 00486D30
:00434FF3 E8130FFDFF              call 00405F0B
:00434FF8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00434FFB E81BCEFCFF              call 00401E1B
:00435000 50                      push eax
:00435001 8B45B8                  mov eax, dword ptr [ebp-48]
:00435004 8B4814                  mov ecx, dword ptr [eax+14]
:00435007 51                      push ecx

* Possible StringData Ref from Data Obj ->" %4u/%3u"
                                  |
:00435008 6860DE4700              push 0047DE60
:0043500D 68306D4800              push 00486D30
:00435012 E8C11BFDFF              call 00406BD8
:00435017 83C410                  add esp, 00000010
:0043501A 6A0E                    push 0000000E
:0043501C B9306D4800              mov ecx, 00486D30
:00435021 E8920FFDFF              call 00405FB8
:00435026 8B55C0                  mov edx, dword ptr [ebp-40]
:00435029 83C213                  add edx, 00000013
:0043502C 8955C0                  mov dword ptr [ebp-40], edx
:0043502F 8B45C0                  mov eax, dword ptr [ebp-40]
:00435032 50                      push eax
:00435033 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00435036 51                      push ecx
:00435037 B9306D4800              mov ecx, 00486D30
:0043503C E8CA0EFDFF              call 00405F0B
:00435041 8B55B8                  mov edx, dword ptr [ebp-48]
:00435044 83C205                  add edx, 00000005
:00435047 52                      push edx
:00435048 E80BA80100              call 0044F858
:0043504D 83C404                  add esp, 00000004
:00435050 8845BC                  mov byte ptr [ebp-44], al
:00435053 8B45BC                  mov eax, dword ptr [ebp-44]
:00435056 25FF000000              and eax, 000000FF
:0043505B 8B0C8548E94700          mov ecx, dword ptr [4*eax+0047E948]
:00435062 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00435063 686CDE4700              push 0047DE6C
:00435068 68306D4800              push 00486D30
:0043506D E8661BFDFF              call 00406BD8
:00435072 83C40C                  add esp, 0000000C
:00435075 8B55C0                  mov edx, dword ptr [ebp-40]
:00435078 52                      push edx
:00435079 8B45D0                  mov eax, dword ptr [ebp-30]
:0043507C 83C007                  add eax, 00000007
:0043507F 8945D0                  mov dword ptr [ebp-30], eax
:00435082 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00435085 51                      push ecx
:00435086 B9306D4800              mov ecx, 00486D30
:0043508B E87B0EFDFF              call 00405F0B
:00435090 8B55C8                  mov edx, dword ptr [ebp-38]
:00435093 81E2FF000000            and edx, 000000FF
:00435099 6BD20A                  imul edx, 0000000A
:0043509C 52                      push edx

* Possible StringData Ref from Data Obj ->"%3d%%"
                                  |
:0043509D 6870DE4700              push 0047DE70
:004350A2 68306D4800              push 00486D30
:004350A7 E82C1BFDFF              call 00406BD8
:004350AC 83C40C                  add esp, 0000000C
:004350AF 6A10                    push 00000010
:004350B1 B9306D4800              mov ecx, 00486D30
:004350B6 E8FD0EFDFF              call 00405FB8
:004350BB E88EB0FDFF              call 0041014E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00434C80(U), :00434DC4(C), :00434DCE(C), :00434DEA(C), :00434E06(C)
|
:004350C0 5E                      pop esi
:004350C1 8BE5                    mov esp, ebp
:004350C3 5D                      pop ebp
:004350C4 C3                      ret



* Referenced by a CALL at Addresses:
|:00436864   , :0045686D   
|
:004350C5 55                      push ebp
:004350C6 8BEC                    mov ebp, esp
:004350C8 83EC08                  sub esp, 00000008
:004350CB 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004350CE 6A04                    push 00000004
:004350D0 6A00                    push 00000000
:004350D2 8B4508                  mov eax, dword ptr [ebp+08]
:004350D5 33C9                    xor ecx, ecx
:004350D7 8A08                    mov cl, byte ptr [eax]
:004350D9 8B5508                  mov edx, dword ptr [ebp+08]
:004350DC 33C0                    xor eax, eax
:004350DE 8A4201                  mov al, byte ptr [edx+01]
:004350E1 33D2                    xor edx, edx
:004350E3 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:004350E9 0FAFC2                  imul eax, edx
:004350EC 8D8401004B0000          lea eax, dword ptr [ecx+eax+00004B00]
:004350F3 50                      push eax
:004350F4 B9881C4B00              mov ecx, 004B1C88
:004350F9 E8923E0400              call 00478F90
:004350FE 33C9                    xor ecx, ecx
:00435100 8A08                    mov cl, byte ptr [eax]
:00435102 81F9FF000000            cmp ecx, 000000FF
:00435108 752A                    jne 00435134
:0043510A 8B5508                  mov edx, dword ptr [ebp+08]
:0043510D 52                      push edx
:0043510E E845A70100              call 0044F858
:00435113 83C404                  add esp, 00000004
:00435116 50                      push eax
:00435117 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043511A E83EDFFFFF              call 0043305D
:0043511F 25FF000000              and eax, 000000FF
:00435124 3DFF000000              cmp eax, 000000FF
:00435129 7409                    je 00435134
:0043512B C745F801000000          mov [ebp-08], 00000001
:00435132 EB07                    jmp 0043513B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435108(C), :00435129(C)
|
:00435134 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435132(U)
|
:0043513B 8B45F8                  mov eax, dword ptr [ebp-08]
:0043513E 8BE5                    mov esp, ebp
:00435140 5D                      pop ebp
:00435141 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00435248   
|
:00435144 55                      push ebp
:00435145 8BEC                    mov ebp, esp
:00435147 83EC10                  sub esp, 00000010
:0043514A 894DF0                  mov dword ptr [ebp-10], ecx
:0043514D 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00435150 E89B05FDFF              call 004056F0
:00435155 8B4508                  mov eax, dword ptr [ebp+08]
:00435158 25FF000000              and eax, 000000FF
:0043515D 3DFF000000              cmp eax, 000000FF
:00435162 0F848B000000            je 004351F3
:00435168 C645F800                mov [ebp-08], 00
:0043516C EB09                    jmp 00435177

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004351EE(U)
|
:0043516E 8A4DF8                  mov cl, byte ptr [ebp-08]
:00435171 80C101                  add cl, 01
:00435174 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043516C(U)
|
:00435177 8B55F8                  mov edx, dword ptr [ebp-08]
:0043517A 81E2FF000000            and edx, 000000FF
:00435180 83FA04                  cmp edx, 00000004
:00435183 7D6E                    jge 004351F3
:00435185 8A45F8                  mov al, byte ptr [ebp-08]
:00435188 50                      push eax
:00435189 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043518C 83C105                  add ecx, 00000005
:0043518F 51                      push ecx
:00435190 E85CA70100              call 0044F8F1
:00435195 83C408                  add esp, 00000008
:00435198 50                      push eax
:00435199 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043519C E8FF180000              call 00436AA0
:004351A1 8B55FC                  mov edx, dword ptr [ebp-04]
:004351A4 81E2FF000000            and edx, 000000FF
:004351AA 81FAFF000000            cmp edx, 000000FF
:004351B0 743C                    je 004351EE
:004351B2 8D45FC                  lea eax, dword ptr [ebp-04]
:004351B5 50                      push eax
:004351B6 E821A60100              call 0044F7DC
:004351BB 83C404                  add esp, 00000004
:004351BE 8845F4                  mov byte ptr [ebp-0C], al
:004351C1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004351C4 81E1FF000000            and ecx, 000000FF
:004351CA 81F9FF000000            cmp ecx, 000000FF
:004351D0 741C                    je 004351EE
:004351D2 8B55F4                  mov edx, dword ptr [ebp-0C]
:004351D5 81E2FF000000            and edx, 000000FF
:004351DB 8B4508                  mov eax, dword ptr [ebp+08]
:004351DE 25FF000000              and eax, 000000FF
:004351E3 3BD0                    cmp edx, eax
:004351E5 7507                    jne 004351EE
:004351E7 B801000000              mov eax, 00000001
:004351EC EB07                    jmp 004351F5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004351B0(C), :004351D0(C), :004351E5(C)
|
:004351EE E97BFFFFFF              jmp 0043516E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435162(C), :00435183(C)
|
:004351F3 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004351EC(U)
|
:004351F5 8BE5                    mov esp, ebp
:004351F7 5D                      pop ebp
:004351F8 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00434972   , :004352AE   , :004352D7   , :004391AC   , :004391EA   
|:0044EF2E   , :00452686   , :0045CBE6   , :0045CBF2   , :0045D654   
|:0045FBDA   , :0045FC5E   , :0045FEA7   , :004604B1   
|
:004351FB 55                      push ebp
:004351FC 8BEC                    mov ebp, esp
:004351FE 51                      push ecx
:004351FF 894DFC                  mov dword ptr [ebp-04], ecx
:00435202 8B4508                  mov eax, dword ptr [ebp+08]
:00435205 25FF000000              and eax, 000000FF
:0043520A 83F807                  cmp eax, 00000007
:0043520D 7F09                    jg 00435218
:0043520F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435212 8A5508                  mov dl, byte ptr [ebp+08]
:00435215 88510D                  mov byte ptr [ecx+0D], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043520D(C)
|
:00435218 8BE5                    mov esp, ebp
:0043521A 5D                      pop ebp
:0043521B C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00452C32   , :0045FCB1   
|
:0043521E 55                      push ebp
:0043521F 8BEC                    mov ebp, esp
:00435221 83EC08                  sub esp, 00000008
:00435224 894DF8                  mov dword ptr [ebp-08], ecx
:00435227 C745FC00000000          mov [ebp-04], 00000000
:0043522E 8B45F8                  mov eax, dword ptr [ebp-08]
:00435231 33C9                    xor ecx, ecx
:00435233 8A4807                  mov cl, byte ptr [eax+07]
:00435236 81F9FF000000            cmp ecx, 000000FF
:0043523C 741C                    je 0043525A
:0043523E 8B55F8                  mov edx, dword ptr [ebp-08]
:00435241 8A4207                  mov al, byte ptr [edx+07]
:00435244 50                      push eax
:00435245 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00435248 E8F7FEFFFF              call 00435144
:0043524D 85C0                    test eax, eax
:0043524F 7407                    je 00435258
:00435251 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043524F(C)
|
:00435258 EB60                    jmp 004352BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043523C(C)
|
:0043525A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043525D 83C105                  add ecx, 00000005
:00435260 51                      push ecx
:00435261 8B55F8                  mov edx, dword ptr [ebp-08]
:00435264 83C208                  add edx, 00000008
:00435267 52                      push edx
:00435268 E8331D0000              call 00436FA0
:0043526D 83C408                  add esp, 00000008
:00435270 85C0                    test eax, eax
:00435272 7446                    je 004352BA
:00435274 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00435277 E80405FDFF              call 00405780
:0043527C 25FF000000              and eax, 000000FF
:00435281 85C0                    test eax, eax
:00435283 7412                    je 00435297
:00435285 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00435288 E8F304FDFF              call 00405780
:0043528D 25FF000000              and eax, 000000FF
:00435292 83F804                  cmp eax, 00000004
:00435295 751C                    jne 004352B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435283(C)
|
:00435297 8B45F8                  mov eax, dword ptr [ebp-08]
:0043529A 83C005                  add eax, 00000005
:0043529D 50                      push eax
:0043529E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004352A1 83C108                  add ecx, 00000008
:004352A4 E8F7170000              call 00436AA0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004352A9 6A03                    push 00000003
:004352AB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004352AE E848FFFFFF              call 004351FB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435295(C)
|
:004352B3 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435258(U), :00435272(C)
|
:004352BA 8B45FC                  mov eax, dword ptr [ebp-04]
:004352BD 8BE5                    mov esp, ebp
:004352BF 5D                      pop ebp
:004352C0 C3                      ret


:004352C1 55                      push ebp
:004352C2 8BEC                    mov ebp, esp
:004352C4 51                      push ecx
:004352C5 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004352C8 6A04                    push 00000004
:004352CA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004352CD E8EE1A0000              call 00436DC0
:004352D2 6A01                    push 00000001
:004352D4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004352D7 E81FFFFFFF              call 004351FB
:004352DC 8BE5                    mov esp, ebp
:004352DE 5D                      pop ebp
:004352DF C3                      ret



* Referenced by a CALL at Addresses:
|:00451008   , :00452591   , :00452C84   
|
:004352E0 55                      push ebp
:004352E1 8BEC                    mov ebp, esp
:004352E3 83EC3C                  sub esp, 0000003C
:004352E6 894DC4                  mov dword ptr [ebp-3C], ecx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004352E9 C745F078DE4700          mov [ebp-10], 0047DE78

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004352F0 C745F484DE4700          mov [ebp-0C], 0047DE84

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004352F7 C745F890DE4700          mov [ebp-08], 0047DE90
:004352FE 6A20                    push 00000020
:00435300 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00435303 E8E81A0000              call 00436DF0
:00435308 85C0                    test eax, eax
:0043530A 0F84E5010000            je 004354F5
:00435310 C745E0B0000000          mov [ebp-20], 000000B0
:00435317 C745CC28000000          mov [ebp-34], 00000028
:0043531E C745D440000000          mov [ebp-2C], 00000040
:00435325 C745C830000000          mov [ebp-38], 00000030
:0043532C B958494B00              mov ecx, 004B4958
:00435331 E80D960100              call 0044E943
:00435336 99                      cdq
:00435337 2BC2                    sub eax, edx
:00435339 D1F8                    sar eax, 1
:0043533B 83E858                  sub eax, 00000058
:0043533E 33D2                    xor edx, edx
:00435340 B930000000              mov ecx, 00000030
:00435345 F7F1                    div ecx
:00435347 6BC030                  imul eax, 00000030
:0043534A 8945E8                  mov dword ptr [ebp-18], eax
:0043534D C745DC30000000          mov [ebp-24], 00000030
:00435354 8B55E8                  mov edx, dword ptr [ebp-18]
:00435357 C1EA04                  shr edx, 04
:0043535A 8955EC                  mov dword ptr [ebp-14], edx
:0043535D 8B45DC                  mov eax, dword ptr [ebp-24]
:00435360 C1E804                  shr eax, 04
:00435363 8945E4                  mov dword ptr [ebp-1C], eax
:00435366 B978294B00              mov ecx, 004B2978
:0043536B E84075FDFF              call 0040C8B0
:00435370 2500010000              and eax, 00000100
:00435375 85C0                    test eax, eax
:00435377 750D                    jne 00435386
:00435379 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043537C 81E1FF000000            and ecx, 000000FF
:00435382 85C9                    test ecx, ecx
:00435384 7418                    je 0043539E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435377(C)
|
:00435386 8B55C4                  mov edx, dword ptr [ebp-3C]
:00435389 8A4206                  mov al, byte ptr [edx+06]
:0043538C 50                      push eax
:0043538D 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00435390 8A5105                  mov dl, byte ptr [ecx+05]
:00435393 52                      push edx
:00435394 B958494B00              mov ecx, 004B4958
:00435399 E84F870100              call 0044DAED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435384(C)
|
:0043539E E890ADFDFF              call 00410133
:004353A3 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004353A5 6A03                    push 00000003
:004353A7 6A28                    push 00000028
:004353A9 68B0000000              push 000000B0
:004353AE 8B45DC                  mov eax, dword ptr [ebp-24]
:004353B1 83C030                  add eax, 00000030
:004353B4 50                      push eax
:004353B5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004353B8 51                      push ecx
:004353B9 B978544B00              mov ecx, 004B5478
:004353BE E8122F0300              call 004682D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004353C3 6A04                    push 00000004
:004353C5 B9306D4800              mov ecx, 00486D30
:004353CA E8850CFDFF              call 00406054
:004353CF 6A10                    push 00000010
:004353D1 B9306D4800              mov ecx, 00486D30
:004353D6 E8DD0BFDFF              call 00405FB8
:004353DB 6A00                    push 00000000
:004353DD B9306D4800              mov ecx, 00486D30
:004353E2 E8090CFDFF              call 00405FF0
:004353E7 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004353EA E862150000              call 00436951
:004353EF 85C0                    test eax, eax
:004353F1 740D                    je 00435400
:004353F3 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004353F6 E8F5150000              call 004369F0
:004353FB 8945FC                  mov dword ptr [ebp-04], eax
:004353FE EB17                    jmp 00435417

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004353F1(C)
|
:00435400 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00435403 E8781B0000              call 00436F80
:00435408 25FF000000              and eax, 000000FF
:0043540D 8B1485B0D64700          mov edx, dword ptr [4*eax+0047D6B0]
:00435414 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004353FE(U)
|
:00435417 8B45FC                  mov eax, dword ptr [ebp-04]
:0043541A 50                      push eax
:0043541B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043541E 81E1FF000000            and ecx, 000000FF
:00435424 8B548DF0                mov edx, dword ptr [ebp+4*ecx-10]
:00435428 52                      push edx
:00435429 E82FBFFFFF              call 0043135D
:0043542E 83C408                  add esp, 00000008
:00435431 68A83A4B00              push 004B3AA8
:00435436 E8D5300400              call 00478510
:0043543B 83C404                  add esp, 00000004
:0043543E 8845D0                  mov byte ptr [ebp-30], al

* Possible Ref to Menu: APPMENU, Item: "   _(E)"
                                  |
:00435441 6A6D                    push 0000006D
:00435443 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00435446 83C158                  add ecx, 00000058
:00435449 C1E903                  shr ecx, 03
:0043544C 8B45D0                  mov eax, dword ptr [ebp-30]
:0043544F 25FF000000              and eax, 000000FF
:00435454 99                      cdq
:00435455 2BC2                    sub eax, edx
:00435457 D1F8                    sar eax, 1
:00435459 2BC8                    sub ecx, eax
:0043545B 51                      push ecx
:0043545C B9306D4800              mov ecx, 00486D30
:00435461 E8A50AFDFF              call 00405F0B
:00435466 68A83A4B00              push 004B3AA8

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043546B 689CDE4700              push 0047DE9C
:00435470 68306D4800              push 00486D30
:00435475 E85E17FDFF              call 00406BD8
:0043547A 83C40C                  add esp, 0000000C
:0043547D E8CCACFDFF              call 0041014E

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00435482 6A02                    push 00000002
:00435484 6A0B                    push 0000000B
:00435486 8A55E4                  mov dl, byte ptr [ebp-1C]
:00435489 52                      push edx
:0043548A 8A45EC                  mov al, byte ptr [ebp-14]
:0043548D 50                      push eax
:0043548E B958494B00              mov ecx, 004B4958
:00435493 E8C3750100              call 0044CA5B
:00435498 6A01                    push 00000001
:0043549A B958494B00              mov ecx, 004B4958
:0043549F E80D770100              call 0044CBB1
:004354A4 C745D800000000          mov [ebp-28], 00000000
:004354AB EB09                    jmp 004354B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004354D8(U)
|
:004354AD 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004354B0 83C101                  add ecx, 00000001
:004354B3 894DD8                  mov dword ptr [ebp-28], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004354AB(U)
|
:004354B6 837DD804                cmp dword ptr [ebp-28], 00000004
:004354BA 731E                    jnb 004354DA
:004354BC B9784E4B00              mov ecx, 004B4E78
:004354C1 E82A1B0000              call 00436FF0
:004354C6 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004354C9 E8D1F6FFFF              call 00434B9F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004354CE 6A03                    push 00000003
:004354D0 E861A2FFFF              call 0042F736
:004354D5 83C404                  add esp, 00000004
:004354D8 EBD3                    jmp 004354AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004354BA(C)
|
:004354DA B958494B00              mov ecx, 004B4958
:004354DF E87E760100              call 0044CB62
:004354E4 8B55C4                  mov edx, dword ptr [ebp-3C]
:004354E7 8A4204                  mov al, byte ptr [edx+04]
:004354EA 50                      push eax
:004354EB B958494B00              mov ecx, 004B4958
:004354F0 E8FA7C0100              call 0044D1EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043530A(C)
|
:004354F5 8BE5                    mov esp, ebp
:004354F7 5D                      pop ebp
:004354F8 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0045E85A   , :0046043F   
|
:004354FB 55                      push ebp
:004354FC 8BEC                    mov ebp, esp
:004354FE 83EC08                  sub esp, 00000008
:00435501 894DF8                  mov dword ptr [ebp-08], ecx
:00435504 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00435507 E80474FDFF              call 0040C910
:0043550C 85C0                    test eax, eax
:0043550E 7417                    je 00435527
:00435510 33C0                    xor eax, eax
:00435512 A028184800              mov al, byte ptr [00481828]
:00435517 3DFF000000              cmp eax, 000000FF
:0043551C 7509                    jne 00435527
:0043551E C745FC00000000          mov [ebp-04], 00000000
:00435525 EB5B                    jmp 00435582

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043550E(C), :0043551C(C)
|
:00435527 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043552A 8B09                    mov ecx, dword ptr [ecx]
:0043552C 6BC950                  imul ecx, 00000050
:0043552F 81C1787F4900            add ecx, 00497F78
:00435535 E846A9FDFF              call 0040FE80
:0043553A 25FF000000              and eax, 000000FF
:0043553F 8945FC                  mov dword ptr [ebp-04], eax
:00435542 837DFC11                cmp dword ptr [ebp-04], 00000011
:00435546 753A                    jne 00435582
:00435548 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043554B E8C073FDFF              call 0040C910
:00435550 8BC8                    mov ecx, eax
:00435552 F7D9                    neg ecx
:00435554 1BC9                    sbb ecx, ecx
:00435556 83E1E2                  and ecx, FFFFFFE2
:00435559 83C11E                  add ecx, 0000001E
:0043555C 6BC924                  imul ecx, 00000024
:0043555F 81C1B83B4B00            add ecx, 004B3BB8
:00435565 E876140000              call 004369E0
:0043556A 8BC8                    mov ecx, eax
:0043556C 6BC950                  imul ecx, 00000050
:0043556F 81C1787F4900            add ecx, 00497F78
:00435575 E806A9FDFF              call 0040FE80
:0043557A 25FF000000              and eax, 000000FF
:0043557F 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435525(U), :00435546(C)
|
:00435582 837DFC13                cmp dword ptr [ebp-04], 00000013
:00435586 7251                    jb 004355D9
:00435588 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043558B E88073FDFF              call 0040C910
:00435590 8BC8                    mov ecx, eax
:00435592 F7D9                    neg ecx
:00435594 1BC9                    sbb ecx, ecx
:00435596 83E1E2                  and ecx, FFFFFFE2
:00435599 83C11E                  add ecx, 0000001E
:0043559C 6BC924                  imul ecx, 00000024
:0043559F 81C1B83B4B00            add ecx, 004B3BB8
:004355A5 E836140000              call 004369E0
:004355AA 8BC8                    mov ecx, eax
:004355AC 6BC950                  imul ecx, 00000050
:004355AF 81C1787F4900            add ecx, 00497F78
:004355B5 E8C6A8FDFF              call 0040FE80
:004355BA 25FF000000              and eax, 000000FF
:004355BF 8945FC                  mov dword ptr [ebp-04], eax
:004355C2 8A55FC                  mov dl, byte ptr [ebp-04]
:004355C5 52                      push edx
:004355C6 8B45F8                  mov eax, dword ptr [ebp-08]
:004355C9 8B08                    mov ecx, dword ptr [eax]
:004355CB 6BC950                  imul ecx, 00000050
:004355CE 81C1787F4900            add ecx, 00497F78
:004355D4 E8C700FDFF              call 004056A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435586(C)
|
:004355D9 8B45FC                  mov eax, dword ptr [ebp-04]
:004355DC 8BE5                    mov esp, ebp
:004355DE 5D                      pop ebp
:004355DF C3                      ret



* Referenced by a CALL at Addresses:
|:00433393   , :00433478   
|
:004355E0 55                      push ebp
:004355E1 8BEC                    mov ebp, esp
:004355E3 83EC10                  sub esp, 00000010
:004355E6 56                      push esi
:004355E7 894DF0                  mov dword ptr [ebp-10], ecx
:004355EA 8B45F0                  mov eax, dword ptr [ebp-10]
:004355ED 33C9                    xor ecx, ecx
:004355EF 8A4805                  mov cl, byte ptr [eax+05]
:004355F2 8BF1                    mov esi, ecx
:004355F4 6BF603                  imul esi, 00000003
:004355F7 B958494B00              mov ecx, 004B4958
:004355FC E811570100              call 0044AD12
:00435601 2BF0                    sub esi, eax
:00435603 8975FC                  mov dword ptr [ebp-04], esi
:00435606 8B55F0                  mov edx, dword ptr [ebp-10]
:00435609 33C0                    xor eax, eax
:0043560B 8A4206                  mov al, byte ptr [edx+06]
:0043560E 8BF0                    mov esi, eax
:00435610 6BF603                  imul esi, 00000003
:00435613 B958494B00              mov ecx, 004B4958
:00435618 E806570100              call 0044AD23
:0043561D 2BF0                    sub esi, eax
:0043561F 8975F8                  mov dword ptr [ebp-08], esi
:00435622 B978294B00              mov ecx, 004B2978
:00435627 E88472FDFF              call 0040C8B0
:0043562C 2500800000              and eax, 00008000
:00435631 85C0                    test eax, eax
:00435633 746F                    je 004356A4
:00435635 C645F400                mov [ebp-0C], 00
:00435639 EB09                    jmp 00435644

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004356A2(U)
|
:0043563B 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0043563E 80C101                  add cl, 01
:00435641 884DF4                  mov byte ptr [ebp-0C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435639(U)
|
:00435644 8B55F4                  mov edx, dword ptr [ebp-0C]
:00435647 81E2FF000000            and edx, 000000FF
:0043564D 83FA02                  cmp edx, 00000002
:00435650 7D52                    jge 004356A4
:00435652 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00435655 E88AF0FFFF              call 004346E4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043565A 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043565C 6A03                    push 00000003
:0043565E 8A45F8                  mov al, byte ptr [ebp-08]
:00435661 50                      push eax
:00435662 8A4DFC                  mov cl, byte ptr [ebp-04]
:00435665 51                      push ecx
:00435666 B958494B00              mov ecx, 004B4958
:0043566B E8D8720100              call 0044C948

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00435670 6A03                    push 00000003
:00435672 E8BFA0FFFF              call 0042F736
:00435677 83C404                  add esp, 00000004
:0043567A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043567D E839F0FFFF              call 004346BB

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00435682 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00435684 6A03                    push 00000003
:00435686 8A55F8                  mov dl, byte ptr [ebp-08]
:00435689 52                      push edx
:0043568A 8A45FC                  mov al, byte ptr [ebp-04]
:0043568D 50                      push eax
:0043568E B958494B00              mov ecx, 004B4958
:00435693 E8B0720100              call 0044C948

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00435698 6A03                    push 00000003
:0043569A E897A0FFFF              call 0042F736
:0043569F 83C404                  add esp, 00000004
:004356A2 EB97                    jmp 0043563B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435633(C), :00435650(C)
|
:004356A4 5E                      pop esi
:004356A5 8BE5                    mov esp, ebp
:004356A7 5D                      pop ebp
:004356A8 C3                      ret



* Referenced by a CALL at Address:
|:00434F1C   
|
:004356A9 55                      push ebp
:004356AA 8BEC                    mov ebp, esp
:004356AC 51                      push ecx
:004356AD 894DFC                  mov dword ptr [ebp-04], ecx
:004356B0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004356B3 E85872FDFF              call 0040C910
:004356B8 85C0                    test eax, eax
:004356BA 744D                    je 00435709
:004356BC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004356BF E8BC00FDFF              call 00405780
:004356C4 25FF000000              and eax, 000000FF
:004356C9 83F807                  cmp eax, 00000007
:004356CC 752D                    jne 004356FB
:004356CE 6880000000              push 00000080
:004356D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004356D6 E815170000              call 00436DF0
:004356DB 85C0                    test eax, eax
:004356DD 740E                    je 004356ED
:004356DF 6A0F                    push 0000000F
:004356E1 B9306D4800              mov ecx, 00486D30
:004356E6 E8CD08FDFF              call 00405FB8
:004356EB EB0C                    jmp 004356F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004356DD(C)
|
:004356ED 6A4B                    push 0000004B
:004356EF B9306D4800              mov ecx, 00486D30
:004356F4 E8BF08FDFF              call 00405FB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004356EB(U)
|
:004356F9 EB0C                    jmp 00435707

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004356CC(C)
|
:004356FB 6A78                    push 00000078
:004356FD B9306D4800              mov ecx, 00486D30
:00435702 E8B108FDFF              call 00405FB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004356F9(U)
|
:00435707 EB2C                    jmp 00435735

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004356BA(C)
|
:00435709 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043570C E827CAFFFF              call 00432138
:00435711 25FF000000              and eax, 000000FF
:00435716 83F802                  cmp eax, 00000002
:00435719 750E                    jne 00435729
:0043571B 6A0C                    push 0000000C
:0043571D B9306D4800              mov ecx, 00486D30
:00435722 E89108FDFF              call 00405FB8
:00435727 EB0C                    jmp 00435735

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435719(C)
|
:00435729 6A2E                    push 0000002E
:0043572B B9306D4800              mov ecx, 00486D30
:00435730 E88308FDFF              call 00405FB8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435707(U), :00435727(U)
|
:00435735 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435738 E893690200              call 0045C0D0
:0043573D 25FF000000              and eax, 000000FF
:00435742 83F802                  cmp eax, 00000002
:00435745 740E                    je 00435755
:00435747 6A0C                    push 0000000C
:00435749 B9306D4800              mov ecx, 00486D30
:0043574E E86508FDFF              call 00405FB8
:00435753 EB1A                    jmp 0043576F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435745(C)
|
:00435755 6A10                    push 00000010
:00435757 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043575A E811130000              call 00436A70
:0043575F 85C0                    test eax, eax
:00435761 740C                    je 0043576F
:00435763 6A0D                    push 0000000D
:00435765 B9306D4800              mov ecx, 00486D30
:0043576A E84908FDFF              call 00405FB8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435753(U), :00435761(C)
|
:0043576F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00435772 E879120000              call 004369F0
:00435777 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00435778 68A0DE4700              push 0047DEA0
:0043577D 68306D4800              push 00486D30
:00435782 E85114FDFF              call 00406BD8
:00435787 83C40C                  add esp, 0000000C
:0043578A 8BE5                    mov esp, ebp
:0043578C 5D                      pop ebp
:0043578D C3                      ret



* Referenced by a CALL at Addresses:
|:00434BBF   , :00434BDF   , :0045CC4A   , :0046046A   
|
:0043578E 55                      push ebp
:0043578F 8BEC                    mov ebp, esp
:00435791 51                      push ecx
:00435792 894DFC                  mov dword ptr [ebp-04], ecx
:00435795 8B45FC                  mov eax, dword ptr [ebp-04]
:00435798 83C005                  add eax, 00000005
:0043579B 50                      push eax
:0043579C E8B7A00100              call 0044F858
:004357A1 83C404                  add esp, 00000004
:004357A4 25FF000000              and eax, 000000FF
:004357A9 33C9                    xor ecx, ecx
:004357AB 83F80A                  cmp eax, 0000000A
:004357AE 0F94C1                  sete cl
:004357B1 8BC1                    mov eax, ecx
:004357B3 8BE5                    mov esp, ebp
:004357B5 5D                      pop ebp
:004357B6 C3                      ret



* Referenced by a CALL at Addresses:
|:00435885   , :00435899   
|
:004357B7 55                      push ebp
:004357B8 8BEC                    mov ebp, esp
:004357BA 83EC08                  sub esp, 00000008
:004357BD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004357C0 6BC924                  imul ecx, 00000024
:004357C3 81C1B83B4B00            add ecx, 004B3BB8
:004357C9 E832A6FDFF              call 0040FE00
:004357CE 25FF000000              and eax, 000000FF
:004357D3 8945FC                  mov dword ptr [ebp-04], eax
:004357D6 8B45FC                  mov eax, dword ptr [ebp-04]
:004357D9 8945F8                  mov dword ptr [ebp-08], eax
:004357DC 837DF800                cmp dword ptr [ebp-08], 00000000
:004357E0 740E                    je 004357F0
:004357E2 837DF801                cmp dword ptr [ebp-08], 00000001
:004357E6 740F                    je 004357F7
:004357E8 837DF803                cmp dword ptr [ebp-08], 00000003
:004357EC 7409                    je 004357F7
:004357EE EB0E                    jmp 004357FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004357E0(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004357F0 B802000000              mov eax, 00000002
:004357F5 EB09                    jmp 00435800

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004357E6(C), :004357EC(C)
|
:004357F7 B801000000              mov eax, 00000001
:004357FC EB02                    jmp 00435800

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004357EE(U)
|
:004357FE 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004357F5(U), :004357FC(U)
|
:00435800 8BE5                    mov esp, ebp
:00435802 5D                      pop ebp
:00435803 C3                      ret



* Referenced by a CALL at Addresses:
|:004358F2   , :00435BDB   , :00435D9F   
|
:00435804 55                      push ebp
:00435805 8BEC                    mov ebp, esp
:00435807 83EC0C                  sub esp, 0000000C
:0043580A C745FC00000000          mov [ebp-04], 00000000
:00435811 6A10                    push 00000010
:00435813 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435816 6BC924                  imul ecx, 00000024
:00435819 81C1B83B4B00            add ecx, 004B3BB8
:0043581F E84C120000              call 00436A70
:00435824 85C0                    test eax, eax
:00435826 740C                    je 00435834

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00435828 C745FC09000000          mov [ebp-04], 00000009
:0043582F E98E000000              jmp 004358C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435826(C)
|
:00435834 6880000000              push 00000080
:00435839 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043583C 6BC924                  imul ecx, 00000024
:0043583F 81C1B83B4B00            add ecx, 004B3BB8
:00435845 E8A6150000              call 00436DF0
:0043584A 85C0                    test eax, eax
:0043584C 7520                    jne 0043586E
:0043584E 6A40                    push 00000040
:00435850 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435853 6BC924                  imul ecx, 00000024
:00435856 81C1B83B4B00            add ecx, 004B3BB8
:0043585C E88F150000              call 00436DF0
:00435861 85C0                    test eax, eax
:00435863 7509                    jne 0043586E
:00435865 C745F400000000          mov [ebp-0C], 00000000
:0043586C EB07                    jmp 00435875

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043584C(C), :00435863(C)
|
:0043586E C745F401000000          mov [ebp-0C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043586C(U)
|
:00435875 8B45F4                  mov eax, dword ptr [ebp-0C]
:00435878 8945F8                  mov dword ptr [ebp-08], eax
:0043587B 837DF800                cmp dword ptr [ebp-08], 00000000
:0043587F 7414                    je 00435895
:00435881 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435884 51                      push ecx
:00435885 E82DFFFFFF              call 004357B7
:0043588A 83C404                  add esp, 00000004
:0043588D 83C006                  add eax, 00000006
:00435890 8945FC                  mov dword ptr [ebp-04], eax
:00435893 EB2D                    jmp 004358C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043587F(C)
|
:00435895 8B5508                  mov edx, dword ptr [ebp+08]
:00435898 52                      push edx
:00435899 E819FFFFFF              call 004357B7
:0043589E 83C404                  add esp, 00000004
:004358A1 D1E0                    shl eax, 1
:004358A3 8945FC                  mov dword ptr [ebp-04], eax
:004358A6 B9784E4B00              mov ecx, 004B4E78
:004358AB E890A5FDFF              call 0040FE40
:004358B0 25FF000000              and eax, 000000FF
:004358B5 85C0                    test eax, eax
:004358B7 7409                    je 004358C2
:004358B9 8B45FC                  mov eax, dword ptr [ebp-04]
:004358BC 83C001                  add eax, 00000001
:004358BF 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043582F(U), :00435893(U), :004358B7(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004358C2 6A04                    push 00000004
:004358C4 6A00                    push 00000000
:004358C6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004358C9 69C9005A0000            imul ecx, 00005A00
:004358CF 8B55FC                  mov edx, dword ptr [ebp-04]
:004358D2 69D200090000            imul edx, 00000900
:004358D8 03CA                    add ecx, edx
:004358DA 51                      push ecx
:004358DB B9187D4A00              mov ecx, 004A7D18
:004358E0 E8AB360400              call 00478F90
:004358E5 8BE5                    mov esp, ebp
:004358E7 5D                      pop ebp
:004358E8 C3                      ret



* Referenced by a CALL at Addresses:
|:00442330   , :0044B856   
|
:004358E9 55                      push ebp
:004358EA 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004358EC 6A04                    push 00000004
:004358EE 8B4510                  mov eax, dword ptr [ebp+10]
:004358F1 50                      push eax
:004358F2 E80DFFFFFF              call 00435804
:004358F7 83C404                  add esp, 00000004
:004358FA 50                      push eax
:004358FB 6A30                    push 00000030
:004358FD 6A30                    push 00000030
:004358FF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00435902 51                      push ecx
:00435903 8B5508                  mov edx, dword ptr [ebp+08]
:00435906 52                      push edx
:00435907 E898520100              call 0044ABA4
:0043590C 83C418                  add esp, 00000018
:0043590F 5D                      pop ebp
:00435910 C3                      ret



* Referenced by a CALL at Addresses:
|:004412D0   , :0044F1C9   , :00451098   , :00456BA6   
|
:00435911 55                      push ebp
:00435912 8BEC                    mov ebp, esp
:00435914 81EC00010000            sub esp, 00000100
:0043591A 56                      push esi
:0043591B 898D48FFFFFF            mov dword ptr [ebp+FFFFFF48], ecx
:00435921 C645F810                mov [ebp-08], 10
:00435925 C645F908                mov [ebp-07], 08
:00435929 C645FA04                mov [ebp-06], 04
:0043592D C645FB02                mov [ebp-05], 02
:00435931 C645FC01                mov [ebp-04], 01
:00435935 B958494B00              mov ecx, 004B4958
:0043593A E8D3530100              call 0044AD12
:0043593F 8945E8                  mov dword ptr [ebp-18], eax
:00435942 B958494B00              mov ecx, 004B4958
:00435947 E8D7530100              call 0044AD23
:0043594C 8945D0                  mov dword ptr [ebp-30], eax
:0043594F C7458400000000          mov [ebp-7C], 00000000
:00435956 C7856CFFFFFF00000000    mov dword ptr [ebp+FFFFFF6C], 00000000
:00435960 C7458800000000          mov [ebp-78], 00000000
:00435967 C78570FFFFFF00000000    mov dword ptr [ebp+FFFFFF70], 00000000
:00435971 C7459C00000000          mov [ebp-64], 00000000
:00435978 C745AC00000000          mov [ebp-54], 00000000
:0043597F 6A10                    push 00000010
:00435981 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:00435987 E864140000              call 00436DF0
:0043598C 8945D8                  mov dword ptr [ebp-28], eax
:0043598F 8B8548FFFFFF            mov eax, dword ptr [ebp+FFFFFF48]
:00435995 33C9                    xor ecx, ecx
:00435997 8A4805                  mov cl, byte ptr [eax+05]
:0043599A 6BC903                  imul ecx, 00000003
:0043599D 894D90                  mov dword ptr [ebp-70], ecx
:004359A0 8B9548FFFFFF            mov edx, dword ptr [ebp+FFFFFF48]
:004359A6 33C0                    xor eax, eax
:004359A8 8A4206                  mov al, byte ptr [edx+06]
:004359AB 6BC003                  imul eax, 00000003
:004359AE 89857CFFFFFF            mov dword ptr [ebp+FFFFFF7C], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004359B4 C7459403000000          mov [ebp-6C], 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004359BB C7458003000000          mov [ebp-80], 00000003
:004359C2 8B4D90                  mov ecx, dword ptr [ebp-70]
:004359C5 894DD4                  mov dword ptr [ebp-2C], ecx
:004359C8 8B957CFFFFFF            mov edx, dword ptr [ebp+FFFFFF7C]
:004359CE 8955C8                  mov dword ptr [ebp-38], edx
:004359D1 8B4508                  mov eax, dword ptr [ebp+08]
:004359D4 25FF000000              and eax, 000000FF
:004359D9 898544FFFFFF            mov dword ptr [ebp+FFFFFF44], eax
:004359DF 83BD44FFFFFF03          cmp dword ptr [ebp+FFFFFF44], 00000003
:004359E6 0F879D000000            ja 00435A89
:004359EC 8B8D44FFFFFF            mov ecx, dword ptr [ebp+FFFFFF44]
:004359F2 FF248D34684300          jmp dword ptr [4*ecx+00436834]
:004359F9 8B9548FFFFFF            mov edx, dword ptr [ebp+FFFFFF48]
:004359FF C6420E00                mov [edx+0E], 00
:00435A03 C745B800240000          mov [ebp-48], 00002400
:00435A0A 8B45C8                  mov eax, dword ptr [ebp-38]
:00435A0D 83E803                  sub eax, 00000003
:00435A10 8945C8                  mov dword ptr [ebp-38], eax
:00435A13 8B4D80                  mov ecx, dword ptr [ebp-80]
:00435A16 83C103                  add ecx, 00000003
:00435A19 894D80                  mov dword ptr [ebp-80], ecx
:00435A1C EB7A                    jmp 00435A98
:00435A1E 8B9548FFFFFF            mov edx, dword ptr [ebp+FFFFFF48]
:00435A24 C6420E02                mov [edx+0E], 02
:00435A28 C745B800000000          mov [ebp-48], 00000000
:00435A2F 8B4580                  mov eax, dword ptr [ebp-80]
:00435A32 83C003                  add eax, 00000003
:00435A35 894580                  mov dword ptr [ebp-80], eax
:00435A38 EB5E                    jmp 00435A98
:00435A3A 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:00435A40 C6410E01                mov [ecx+0E], 01
:00435A44 C745B800120000          mov [ebp-48], 00001200
:00435A4B C745D801000000          mov [ebp-28], 00000001
:00435A52 8B5594                  mov edx, dword ptr [ebp-6C]
:00435A55 83C203                  add edx, 00000003
:00435A58 895594                  mov dword ptr [ebp-6C], edx
:00435A5B EB3B                    jmp 00435A98
:00435A5D 8B8548FFFFFF            mov eax, dword ptr [ebp+FFFFFF48]
:00435A63 C6400E03                mov [eax+0E], 03
:00435A67 C745B800120000          mov [ebp-48], 00001200
:00435A6E C745D800000000          mov [ebp-28], 00000000
:00435A75 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00435A78 83E903                  sub ecx, 00000003
:00435A7B 894DD4                  mov dword ptr [ebp-2C], ecx
:00435A7E 8B5594                  mov edx, dword ptr [ebp-6C]
:00435A81 83C203                  add edx, 00000003
:00435A84 895594                  mov dword ptr [ebp-6C], edx
:00435A87 EB0F                    jmp 00435A98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004359E6(C)
|

* Possible StringData Ref from Data Obj ->"HʤV ERROR!"
                                  |
:00435A89 68A4DE4700              push 0047DEA4
:00435A8E 6A00                    push 00000000
:00435A90 E89EB9FFFF              call 00431433
:00435A95 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435A1C(U), :00435A38(U), :00435A5B(U), :00435A87(U)
|
:00435A98 8B45D4                  mov eax, dword ptr [ebp-2C]
:00435A9B 3B45E8                  cmp eax, dword ptr [ebp-18]
:00435A9E 7309                    jnb 00435AA9
:00435AA0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00435AA3 2B4DD4                  sub ecx, dword ptr [ebp-2C]
:00435AA6 894D84                  mov dword ptr [ebp-7C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435A9E(C)
|
:00435AA9 8B75D4                  mov esi, dword ptr [ebp-2C]
:00435AAC 037594                  add esi, dword ptr [ebp-6C]
:00435AAF B958494B00              mov ecx, 004B4958
:00435AB4 E88A8E0100              call 0044E943
:00435AB9 99                      cdq
:00435ABA 83E20F                  and edx, 0000000F
:00435ABD 03C2                    add eax, edx
:00435ABF C1F804                  sar eax, 04
:00435AC2 8B55E8                  mov edx, dword ptr [ebp-18]
:00435AC5 03D0                    add edx, eax
:00435AC7 3BF2                    cmp esi, edx
:00435AC9 7623                    jbe 00435AEE
:00435ACB 8B75D4                  mov esi, dword ptr [ebp-2C]
:00435ACE 037594                  add esi, dword ptr [ebp-6C]
:00435AD1 B958494B00              mov ecx, 004B4958
:00435AD6 E8688E0100              call 0044E943
:00435ADB 99                      cdq
:00435ADC 83E20F                  and edx, 0000000F
:00435ADF 03C2                    add eax, edx
:00435AE1 C1F804                  sar eax, 04
:00435AE4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00435AE7 03C8                    add ecx, eax
:00435AE9 2BF1                    sub esi, ecx
:00435AEB 897588                  mov dword ptr [ebp-78], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435AC9(C)
|
:00435AEE 8B55C8                  mov edx, dword ptr [ebp-38]
:00435AF1 3B55D0                  cmp edx, dword ptr [ebp-30]
:00435AF4 730C                    jnb 00435B02
:00435AF6 8B45D0                  mov eax, dword ptr [ebp-30]
:00435AF9 2B45C8                  sub eax, dword ptr [ebp-38]
:00435AFC 89856CFFFFFF            mov dword ptr [ebp+FFFFFF6C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435AF4(C)
|
:00435B02 8B75C8                  mov esi, dword ptr [ebp-38]
:00435B05 037580                  add esi, dword ptr [ebp-80]
:00435B08 B958494B00              mov ecx, 004B4958
:00435B0D E8588E0100              call 0044E96A
:00435B12 99                      cdq
:00435B13 83E20F                  and edx, 0000000F
:00435B16 03C2                    add eax, edx
:00435B18 C1F804                  sar eax, 04
:00435B1B 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00435B1E 03C8                    add ecx, eax
:00435B20 3BF1                    cmp esi, ecx
:00435B22 7626                    jbe 00435B4A
:00435B24 8B75C8                  mov esi, dword ptr [ebp-38]
:00435B27 037580                  add esi, dword ptr [ebp-80]
:00435B2A B958494B00              mov ecx, 004B4958
:00435B2F E8368E0100              call 0044E96A
:00435B34 99                      cdq
:00435B35 83E20F                  and edx, 0000000F
:00435B38 03C2                    add eax, edx
:00435B3A C1F804                  sar eax, 04
:00435B3D 8B55D0                  mov edx, dword ptr [ebp-30]
:00435B40 03D0                    add edx, eax
:00435B42 2BF2                    sub esi, edx
:00435B44 89B570FFFFFF            mov dword ptr [ebp+FFFFFF70], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435B22(C)
|
:00435B4A 8B4508                  mov eax, dword ptr [ebp+08]
:00435B4D 25FF000000              and eax, 000000FF
:00435B52 83F801                  cmp eax, 00000001
:00435B55 740E                    je 00435B65
:00435B57 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435B5A 81E1FF000000            and ecx, 000000FF
:00435B60 83F903                  cmp ecx, 00000003
:00435B63 7525                    jne 00435B8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435B55(C)
|
:00435B65 837D8406                cmp dword ptr [ebp-7C], 00000006
:00435B69 7318                    jnb 00435B83
:00435B6B 837D8806                cmp dword ptr [ebp-78], 00000006
:00435B6F 7312                    jnb 00435B83
:00435B71 83BD6CFFFFFF03          cmp dword ptr [ebp+FFFFFF6C], 00000003
:00435B78 7309                    jnb 00435B83
:00435B7A 83BD70FFFFFF03          cmp dword ptr [ebp+FFFFFF70], 00000003
:00435B81 7205                    jb 00435B88

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435B69(C), :00435B6F(C), :00435B78(C)
|
:00435B83 E9A50C0000              jmp 0043682D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435B81(C)
|
:00435B88 EB23                    jmp 00435BAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435B63(C)
|
:00435B8A 83BD6CFFFFFF06          cmp dword ptr [ebp+FFFFFF6C], 00000006
:00435B91 7315                    jnb 00435BA8
:00435B93 83BD70FFFFFF06          cmp dword ptr [ebp+FFFFFF70], 00000006
:00435B9A 730C                    jnb 00435BA8
:00435B9C 837D8403                cmp dword ptr [ebp-7C], 00000003
:00435BA0 7306                    jnb 00435BA8
:00435BA2 837D8803                cmp dword ptr [ebp-78], 00000003
:00435BA6 7205                    jb 00435BAD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435B91(C), :00435B9A(C), :00435BA0(C)
|
:00435BA8 E9800C0000              jmp 0043682D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435B88(U), :00435BA6(C)
|
:00435BAD 8B9548FFFFFF            mov edx, dword ptr [ebp+FFFFFF48]
:00435BB3 83C205                  add edx, 00000005
:00435BB6 52                      push edx
:00435BB7 E8209C0100              call 0044F7DC
:00435BBC 83C404                  add esp, 00000004
:00435BBF 8845EC                  mov byte ptr [ebp-14], al
:00435BC2 8B45EC                  mov eax, dword ptr [ebp-14]
:00435BC5 25FF000000              and eax, 000000FF
:00435BCA 3DFF000000              cmp eax, 000000FF
:00435BCF 741C                    je 00435BED
:00435BD1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00435BD4 81E1FF000000            and ecx, 000000FF
:00435BDA 51                      push ecx
:00435BDB E824FCFFFF              call 00435804
:00435BE0 83C404                  add esp, 00000004
:00435BE3 89458C                  mov dword ptr [ebp-74], eax
:00435BE6 C7459C01000000          mov [ebp-64], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435BCF(C)
|
:00435BED 8A5508                  mov dl, byte ptr [ebp+08]
:00435BF0 52                      push edx
:00435BF1 8B8548FFFFFF            mov eax, dword ptr [ebp+FFFFFF48]
:00435BF7 83C005                  add eax, 00000005
:00435BFA 50                      push eax
:00435BFB E8F19C0100              call 0044F8F1
:00435C00 83C408                  add esp, 00000008
:00435C03 668B08                  mov cx, word ptr [eax]
:00435C06 66898D68FFFFFF          mov word ptr [ebp+FFFFFF68], cx
:00435C0D C645ECFF                mov [ebp-14], FF
:00435C11 8B9548FFFFFF            mov edx, dword ptr [ebp+FFFFFF48]
:00435C17 83C205                  add edx, 00000005
:00435C1A 52                      push edx
:00435C1B E8389C0100              call 0044F858
:00435C20 83C404                  add esp, 00000004
:00435C23 8845DC                  mov byte ptr [ebp-24], al
:00435C26 8D8568FFFFFF            lea eax, dword ptr [ebp+FFFFFF68]
:00435C2C 50                      push eax
:00435C2D E8269C0100              call 0044F858
:00435C32 83C404                  add esp, 00000004
:00435C35 884598                  mov byte ptr [ebp-68], al
:00435C38 C745BC00000000          mov [ebp-44], 00000000
:00435C3F C745B000000000          mov [ebp-50], 00000000
:00435C46 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00435C49 81E1FF000000            and ecx, 000000FF
:00435C4F 83F90A                  cmp ecx, 0000000A
:00435C52 741C                    je 00435C70
:00435C54 8B5598                  mov edx, dword ptr [ebp-68]
:00435C57 81E2FF000000            and edx, 000000FF
:00435C5D 83FA0A                  cmp edx, 0000000A
:00435C60 750E                    jne 00435C70
:00435C62 C745BC01000000          mov [ebp-44], 00000001
:00435C69 C745B001000000          mov [ebp-50], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435C52(C), :00435C60(C)
|
:00435C70 8B45DC                  mov eax, dword ptr [ebp-24]
:00435C73 25FF000000              and eax, 000000FF
:00435C78 83F80A                  cmp eax, 0000000A
:00435C7B 7515                    jne 00435C92
:00435C7D 8B4D98                  mov ecx, dword ptr [ebp-68]
:00435C80 81E1FF000000            and ecx, 000000FF
:00435C86 83F90A                  cmp ecx, 0000000A
:00435C89 7407                    je 00435C92
:00435C8B C745BC01000000          mov [ebp-44], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435C7B(C), :00435C89(C)
|
:00435C92 C645A00D                mov [ebp-60], 0D
:00435C96 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:00435C9C E84F0E0000              call 00436AF0
:00435CA1 8845B4                  mov byte ptr [ebp-4C], al
:00435CA4 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:00435CAA E8A20C0000              call 00436951
:00435CAF 85C0                    test eax, eax
:00435CB1 7455                    je 00435D08
:00435CB3 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:00435CB9 E8A2120000              call 00436F60
:00435CBE 85C0                    test eax, eax
:00435CC0 7406                    je 00435CC8
:00435CC2 C645A00F                mov [ebp-60], 0F
:00435CC6 EB2C                    jmp 00435CF4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435CC0(C)
|
:00435CC8 8B55B4                  mov edx, dword ptr [ebp-4C]
:00435CCB 81E2FF000000            and edx, 000000FF
:00435CD1 85D2                    test edx, edx
:00435CD3 741B                    je 00435CF0
:00435CD5 8B45B4                  mov eax, dword ptr [ebp-4C]
:00435CD8 25FF000000              and eax, 000000FF
:00435CDD 83F803                  cmp eax, 00000003
:00435CE0 740E                    je 00435CF0
:00435CE2 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00435CE5 81E1FF000000            and ecx, 000000FF
:00435CEB 83F904                  cmp ecx, 00000004
:00435CEE 7504                    jne 00435CF4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435CD3(C), :00435CE0(C)
|
:00435CF0 C645A00E                mov [ebp-60], 0E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435CC6(U), :00435CEE(C)
|
:00435CF4 8B55A0                  mov edx, dword ptr [ebp-60]
:00435CF7 81E2FF000000            and edx, 000000FF
:00435CFD 52                      push edx
:00435CFE B9F8544B00              mov ecx, 004B54F8
:00435D03 E812380300              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435CB1(C)
|
:00435D08 8B8568FFFFFF            mov eax, dword ptr [ebp+FFFFFF68]
:00435D0E 25FF000000              and eax, 000000FF
:00435D13 6BC003                  imul eax, 00000003
:00435D16 2B45E8                  sub eax, dword ptr [ebp-18]
:00435D19 8945F4                  mov dword ptr [ebp-0C], eax
:00435D1C 8B8D69FFFFFF            mov ecx, dword ptr [ebp+FFFFFF69]
:00435D22 81E1FF000000            and ecx, 000000FF
:00435D28 6BC903                  imul ecx, 00000003
:00435D2B 2B4DD0                  sub ecx, dword ptr [ebp-30]
:00435D2E 894DF0                  mov dword ptr [ebp-10], ecx
:00435D31 8B9568FFFFFF            mov edx, dword ptr [ebp+FFFFFF68]
:00435D37 81E2FF000000            and edx, 000000FF
:00435D3D 81FAFF000000            cmp edx, 000000FF
:00435D43 7412                    je 00435D57
:00435D45 8D8568FFFFFF            lea eax, dword ptr [ebp+FFFFFF68]
:00435D4B 50                      push eax
:00435D4C E88B9A0100              call 0044F7DC
:00435D51 83C404                  add esp, 00000004
:00435D54 8845EC                  mov byte ptr [ebp-14], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435D43(C)
|
:00435D57 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00435D5A 81E1FF000000            and ecx, 000000FF
:00435D60 81F9FF000000            cmp ecx, 000000FF
:00435D66 744C                    je 00435DB4
:00435D68 837DF400                cmp dword ptr [ebp-0C], 00000000
:00435D6C 7246                    jb 00435DB4
:00435D6E 837DF000                cmp dword ptr [ebp-10], 00000000
:00435D72 7240                    jb 00435DB4
:00435D74 B958494B00              mov ecx, 004B4958
:00435D79 E8C58B0100              call 0044E943
:00435D7E 3945F4                  cmp dword ptr [ebp-0C], eax
:00435D81 7331                    jnb 00435DB4
:00435D83 B958494B00              mov ecx, 004B4958
:00435D88 E8DD8B0100              call 0044E96A
:00435D8D 83C008                  add eax, 00000008
:00435D90 3945F0                  cmp dword ptr [ebp-10], eax
:00435D93 731F                    jnb 00435DB4
:00435D95 8B55EC                  mov edx, dword ptr [ebp-14]
:00435D98 81E2FF000000            and edx, 000000FF
:00435D9E 52                      push edx
:00435D9F E860FAFFFF              call 00435804
:00435DA4 83C404                  add esp, 00000004
:00435DA7 898574FFFFFF            mov dword ptr [ebp+FFFFFF74], eax
:00435DAD C745AC01000000          mov [ebp-54], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435D66(C), :00435D6C(C), :00435D72(C), :00435D81(C), :00435D93(C)
|
:00435DB4 8B8548FFFFFF            mov eax, dword ptr [ebp+FFFFFF48]
:00435DBA 33C9                    xor ecx, ecx
:00435DBC 8A480E                  mov cl, byte ptr [eax+0E]
:00435DBF 83F901                  cmp ecx, 00000001
:00435DC2 7410                    je 00435DD4
:00435DC4 8B9548FFFFFF            mov edx, dword ptr [ebp+FFFFFF48]
:00435DCA 33C0                    xor eax, eax
:00435DCC 8A420E                  mov al, byte ptr [edx+0E]
:00435DCF 83F803                  cmp eax, 00000003
:00435DD2 750F                    jne 00435DE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435DC2(C)
|
:00435DD4 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00435DD7 51                      push ecx
:00435DD8 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:00435DDE E8D2E4FFFF              call 004342B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435DD2(C)
|
:00435DE3 B978294B00              mov ecx, 004B2978
:00435DE8 E8C36AFDFF              call 0040C8B0
:00435DED 2500400000              and eax, 00004000
:00435DF2 85C0                    test eax, eax
:00435DF4 7417                    je 00435E0D
:00435DF6 B978294B00              mov ecx, 004B2978
:00435DFB E8906BFDFF              call 0040C990
:00435E00 25FF000000              and eax, 000000FF
:00435E05 898540FFFFFF            mov dword ptr [ebp+FFFFFF40], eax
:00435E0B EB0A                    jmp 00435E17

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435DF4(C)
|
:00435E0D C78540FFFFFF00000000    mov dword ptr [ebp+FFFFFF40], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435E0B(U)
|
:00435E17 8B9540FFFFFF            mov edx, dword ptr [ebp+FFFFFF40]
:00435E1D 8A4415F8                mov al, byte ptr [ebp+edx-08]
:00435E21 888564FFFFFF            mov byte ptr [ebp+FFFFFF64], al
:00435E27 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435E2A 81E1FF000000            and ecx, 000000FF
:00435E30 83F901                  cmp ecx, 00000001
:00435E33 750C                    jne 00435E41

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00435E35 C7853CFFFFFF03000000    mov dword ptr [ebp+FFFFFF3C], 00000003
:00435E3F EB1C                    jmp 00435E5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435E33(C)
|
:00435E41 8B5508                  mov edx, dword ptr [ebp+08]
:00435E44 81E2FF000000            and edx, 000000FF
:00435E4A 83EA03                  sub edx, 00000003
:00435E4D F7DA                    neg edx
:00435E4F 1BD2                    sbb edx, edx
:00435E51 83E203                  and edx, 00000003
:00435E54 83C2FD                  add edx, FFFFFFFD
:00435E57 89953CFFFFFF            mov dword ptr [ebp+FFFFFF3C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435E3F(U)
|
:00435E5D 8B853CFFFFFF            mov eax, dword ptr [ebp+FFFFFF3C]
:00435E63 8945A4                  mov dword ptr [ebp-5C], eax
:00435E66 8B4D08                  mov ecx, dword ptr [ebp+08]
:00435E69 81E1FF000000            and ecx, 000000FF
:00435E6F 85C9                    test ecx, ecx
:00435E71 750C                    jne 00435E7F
:00435E73 C78538FFFFFFFDFFFFFF    mov dword ptr [ebp+FFFFFF38], FFFFFFFD
:00435E7D EB1C                    jmp 00435E9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435E71(C)
|
:00435E7F 8B5508                  mov edx, dword ptr [ebp+08]
:00435E82 81E2FF000000            and edx, 000000FF
:00435E88 83EA02                  sub edx, 00000002
:00435E8B F7DA                    neg edx
:00435E8D 1BD2                    sbb edx, edx
:00435E8F 83E2FD                  and edx, FFFFFFFD
:00435E92 83C203                  add edx, 00000003
:00435E95 899538FFFFFF            mov dword ptr [ebp+FFFFFF38], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435E7D(U)
|
:00435E9B 8B8538FFFFFF            mov eax, dword ptr [ebp+FFFFFF38]
:00435EA1 898578FFFFFF            mov dword ptr [ebp+FFFFFF78], eax
:00435EA7 C645E000                mov [ebp-20], 00
:00435EAB B958494B00              mov ecx, 004B4958
:00435EB0 E85D4E0100              call 0044AD12
:00435EB5 8B4D90                  mov ecx, dword ptr [ebp-70]
:00435EB8 2BC8                    sub ecx, eax
:00435EBA C1E104                  shl ecx, 04
:00435EBD 894DE4                  mov dword ptr [ebp-1C], ecx
:00435EC0 8BB57CFFFFFF            mov esi, dword ptr [ebp+FFFFFF7C]
:00435EC6 83C602                  add esi, 00000002
:00435EC9 B958494B00              mov ecx, 004B4958
:00435ECE E8504E0100              call 0044AD23
:00435ED3 2BF0                    sub esi, eax
:00435ED5 C1E604                  shl esi, 04
:00435ED8 83C608                  add esi, 00000008
:00435EDB 8975CC                  mov dword ptr [ebp-34], esi
:00435EDE 837D8403                cmp dword ptr [ebp-7C], 00000003
:00435EE2 0F838F020000            jnb 00436177
:00435EE8 837D8803                cmp dword ptr [ebp-78], 00000003
:00435EEC 0F8385020000            jnb 00436177
:00435EF2 83BD6CFFFFFF03          cmp dword ptr [ebp+FFFFFF6C], 00000003
:00435EF9 0F8378020000            jnb 00436177
:00435EFF 83BD70FFFFFF03          cmp dword ptr [ebp+FFFFFF70], 00000003
:00435F06 0F836B020000            jnb 00436177
:00435F0C 8B9564FFFFFF            mov edx, dword ptr [ebp+FFFFFF64]
:00435F12 81E2FF000000            and edx, 000000FF
:00435F18 8955A8                  mov dword ptr [ebp-58], edx
:00435F1B EB1C                    jmp 00435F39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043616D(U)
|
:00435F1D 8B8564FFFFFF            mov eax, dword ptr [ebp+FFFFFF64]
:00435F23 25FF000000              and eax, 000000FF
:00435F28 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00435F2B 03C8                    add ecx, eax
:00435F2D 894DA8                  mov dword ptr [ebp-58], ecx
:00435F30 8A55E0                  mov dl, byte ptr [ebp-20]
:00435F33 80C201                  add dl, 01
:00435F36 8855E0                  mov byte ptr [ebp-20], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435F1B(U)
|
:00435F39 837DA830                cmp dword ptr [ebp-58], 00000030
:00435F3D 0F872F020000            ja 00436172
:00435F43 837DBC00                cmp dword ptr [ebp-44], 00000000
:00435F47 7437                    je 00435F80
:00435F49 837DA818                cmp dword ptr [ebp-58], 00000018
:00435F4D 7631                    jbe 00435F80
:00435F4F 837DB000                cmp dword ptr [ebp-50], 00000000
:00435F53 7413                    je 00435F68
:00435F55 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:00435F5B E801E5FFFF              call 00434461
:00435F60 898534FFFFFF            mov dword ptr [ebp+FFFFFF34], eax
:00435F66 EB11                    jmp 00435F79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435F53(C)
|
:00435F68 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:00435F6E E8F6E5FFFF              call 00434569
:00435F73 898534FFFFFF            mov dword ptr [ebp+FFFFFF34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435F66(U)
|
:00435F79 C745BC00000000          mov [ebp-44], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435F47(C), :00435F4D(C)
|
:00435F80 8B4508                  mov eax, dword ptr [ebp+08]
:00435F83 25FF000000              and eax, 000000FF
:00435F88 83F801                  cmp eax, 00000001
:00435F8B 750B                    jne 00435F98
:00435F8D 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00435F90 898D30FFFFFF            mov dword ptr [ebp+FFFFFF30], ecx
:00435F96 EB32                    jmp 00435FCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435F8B(C)
|
:00435F98 8B5508                  mov edx, dword ptr [ebp+08]
:00435F9B 81E2FF000000            and edx, 000000FF
:00435FA1 83FA03                  cmp edx, 00000003
:00435FA4 750E                    jne 00435FB4
:00435FA6 8B45A8                  mov eax, dword ptr [ebp-58]
:00435FA9 6BC0FF                  imul eax, FFFFFFFF
:00435FAC 89852CFFFFFF            mov dword ptr [ebp+FFFFFF2C], eax
:00435FB2 EB0A                    jmp 00435FBE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435FA4(C)
|
:00435FB4 C7852CFFFFFF00000000    mov dword ptr [ebp+FFFFFF2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435FB2(U)
|
:00435FBE 8B8D2CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF2C]
:00435FC4 898D30FFFFFF            mov dword ptr [ebp+FFFFFF30], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435F96(U)
|
:00435FCA 8B9530FFFFFF            mov edx, dword ptr [ebp+FFFFFF30]
:00435FD0 8955C4                  mov dword ptr [ebp-3C], edx
:00435FD3 8B4508                  mov eax, dword ptr [ebp+08]
:00435FD6 25FF000000              and eax, 000000FF
:00435FDB 85C0                    test eax, eax
:00435FDD 750E                    jne 00435FED
:00435FDF 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00435FE2 6BC9FF                  imul ecx, FFFFFFFF
:00435FE5 898D28FFFFFF            mov dword ptr [ebp+FFFFFF28], ecx
:00435FEB EB1B                    jmp 00436008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435FDD(C)
|
:00435FED 8B5508                  mov edx, dword ptr [ebp+08]
:00435FF0 81E2FF000000            and edx, 000000FF
:00435FF6 83EA02                  sub edx, 00000002
:00435FF9 F7DA                    neg edx
:00435FFB 1BD2                    sbb edx, edx
:00435FFD F7D2                    not edx
:00435FFF 2355A8                  and edx, dword ptr [ebp-58]
:00436002 899528FFFFFF            mov dword ptr [ebp+FFFFFF28], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435FEB(U)
|
:00436008 8B8528FFFFFF            mov eax, dword ptr [ebp+FFFFFF28]
:0043600E 8945C0                  mov dword ptr [ebp-40], eax
:00436011 8B45E0                  mov eax, dword ptr [ebp-20]
:00436014 25FF000000              and eax, 000000FF
:00436019 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043601A B903000000              mov ecx, 00000003
:0043601F F7F9                    idiv ecx
:00436021 83FA02                  cmp edx, 00000002
:00436024 750C                    jne 00436032
:00436026 6A01                    push 00000001
:00436028 B9A83B4B00              mov ecx, 004B3BA8
:0043602D E8DE98FEFF              call 0041F910

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436024(C)
|
:00436032 E8FCA0FDFF              call 00410133
:00436037 8B957CFFFFFF            mov edx, dword ptr [ebp+FFFFFF7C]
:0043603D 2B55D0                  sub edx, dword ptr [ebp-30]
:00436040 52                      push edx
:00436041 8B4590                  mov eax, dword ptr [ebp-70]
:00436044 2B45E8                  sub eax, dword ptr [ebp-18]
:00436047 50                      push eax
:00436048 E835C00000              call 00442082
:0043604D 83C408                  add esp, 00000008
:00436050 8B8D7CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF7C]
:00436056 2B4DD0                  sub ecx, dword ptr [ebp-30]
:00436059 038D78FFFFFF            add ecx, dword ptr [ebp+FFFFFF78]
:0043605F 51                      push ecx
:00436060 8B5590                  mov edx, dword ptr [ebp-70]
:00436063 2B55E8                  sub edx, dword ptr [ebp-18]
:00436066 0355A4                  add edx, dword ptr [ebp-5C]
:00436069 52                      push edx
:0043606A E813C00000              call 00442082
:0043606F 83C408                  add esp, 00000008
:00436072 837DAC00                cmp dword ptr [ebp-54], 00000000
:00436076 7429                    je 004360A1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00436078 6A04                    push 00000004
:0043607A 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:00436080 50                      push eax
:00436081 6A30                    push 00000030
:00436083 6A30                    push 00000030
:00436085 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00436088 83C102                  add ecx, 00000002
:0043608B C1E104                  shl ecx, 04
:0043608E 83C108                  add ecx, 00000008
:00436091 51                      push ecx
:00436092 8B55F4                  mov edx, dword ptr [ebp-0C]
:00436095 C1E204                  shl edx, 04
:00436098 52                      push edx
:00436099 E8064B0100              call 0044ABA4
:0043609E 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436076(C)
|
:004360A1 837D9C00                cmp dword ptr [ebp-64], 00000000
:004360A5 742F                    je 004360D6

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004360A7 6A04                    push 00000004
:004360A9 8B458C                  mov eax, dword ptr [ebp-74]
:004360AC 50                      push eax
:004360AD 6A30                    push 00000030
:004360AF 6A30                    push 00000030
:004360B1 8B8D7CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF7C]
:004360B7 83C102                  add ecx, 00000002
:004360BA 2B4DD0                  sub ecx, dword ptr [ebp-30]
:004360BD C1E104                  shl ecx, 04
:004360C0 83C108                  add ecx, 00000008
:004360C3 51                      push ecx
:004360C4 8B5590                  mov edx, dword ptr [ebp-70]
:004360C7 2B55E8                  sub edx, dword ptr [ebp-18]
:004360CA C1E204                  shl edx, 04
:004360CD 52                      push edx
:004360CE E8D14A0100              call 0044ABA4
:004360D3 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004360A5(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004360D6 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004360D8 6A04                    push 00000004
:004360DA 6A00                    push 00000000
:004360DC 6A00                    push 00000000
:004360DE B9187D4A00              mov ecx, 004A7D18
:004360E3 E8A82E0400              call 00478F90
:004360E8 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:004360EE 33D2                    xor edx, edx
:004360F0 8A5104                  mov dl, byte ptr [ecx+04]
:004360F3 8BCA                    mov ecx, edx
:004360F5 69C9005A0000            imul ecx, 00005A00
:004360FB 0345B8                  add eax, dword ptr [ebp-48]
:004360FE 03C8                    add ecx, eax
:00436100 8B45A8                  mov eax, dword ptr [ebp-58]
:00436103 83E801                  sub eax, 00000001
:00436106 33D2                    xor edx, edx
:00436108 BE18000000              mov esi, 00000018
:0043610D F7F6                    div esi
:0043610F 83FA0C                  cmp edx, 0000000C
:00436112 1BD2                    sbb edx, edx
:00436114 42                      inc edx
:00436115 69D200090000            imul edx, 00000900
:0043611B 03CA                    add ecx, edx
:0043611D 51                      push ecx
:0043611E 6A30                    push 00000030
:00436120 6A30                    push 00000030
:00436122 8B857CFFFFFF            mov eax, dword ptr [ebp+FFFFFF7C]
:00436128 83C002                  add eax, 00000002
:0043612B 2B45D0                  sub eax, dword ptr [ebp-30]
:0043612E C1E004                  shl eax, 04
:00436131 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00436134 8D540808                lea edx, dword ptr [eax+ecx+08]
:00436138 52                      push edx
:00436139 8B4590                  mov eax, dword ptr [ebp-70]
:0043613C 2B45E8                  sub eax, dword ptr [ebp-18]
:0043613F C1E004                  shl eax, 04
:00436142 0345C4                  add eax, dword ptr [ebp-3C]
:00436145 50                      push eax
:00436146 E8594A0100              call 0044ABA4
:0043614B 83C418                  add esp, 00000018
:0043614E E8FB9FFDFF              call 0041014E
:00436153 8B45E0                  mov eax, dword ptr [ebp-20]
:00436156 25FF000000              and eax, 000000FF
:0043615B 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043615C B903000000              mov ecx, 00000003
:00436161 F7F9                    idiv ecx
:00436163 83FA02                  cmp edx, 00000002
:00436166 7505                    jne 0043616D
:00436168 E86394FFFF              call 0042F5D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436166(C)
|
:0043616D E9ABFDFFFF              jmp 00435F1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00435F3D(C)
|
:00436172 E9B6060000              jmp 0043682D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435EE2(C), :00435EEC(C), :00435EF9(C), :00435F06(C)
|
:00436177 837D8403                cmp dword ptr [ebp-7C], 00000003
:0043617B 7406                    je 00436183
:0043617D 837D8803                cmp dword ptr [ebp-78], 00000003
:00436181 751B                    jne 0043619E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043617B(C)
|
:00436183 8B5508                  mov edx, dword ptr [ebp+08]
:00436186 81E2FF000000            and edx, 000000FF
:0043618C 83FA01                  cmp edx, 00000001
:0043618F 7442                    je 004361D3
:00436191 8B4508                  mov eax, dword ptr [ebp+08]
:00436194 25FF000000              and eax, 000000FF
:00436199 83F803                  cmp eax, 00000003
:0043619C 7435                    je 004361D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436181(C)
|
:0043619E 83BD6CFFFFFF03          cmp dword ptr [ebp+FFFFFF6C], 00000003
:004361A5 740D                    je 004361B4
:004361A7 83BD70FFFFFF03          cmp dword ptr [ebp+FFFFFF70], 00000003
:004361AE 0F8579060000            jne 0043682D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004361A5(C)
|
:004361B4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004361B7 81E1FF000000            and ecx, 000000FF
:004361BD 85C9                    test ecx, ecx
:004361BF 7412                    je 004361D3
:004361C1 8B5508                  mov edx, dword ptr [ebp+08]
:004361C4 81E2FF000000            and edx, 000000FF
:004361CA 83FA02                  cmp edx, 00000002
:004361CD 0F855A060000            jne 0043682D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043618F(C), :0043619C(C), :004361BF(C)
|
:004361D3 8B4508                  mov eax, dword ptr [ebp+08]
:004361D6 25FF000000              and eax, 000000FF
:004361DB 85C0                    test eax, eax
:004361DD 7412                    je 004361F1
:004361DF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004361E2 81E1FF000000            and ecx, 000000FF
:004361E8 83F902                  cmp ecx, 00000002
:004361EB 0F85EF020000            jne 004364E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004361DD(C)
|
:004361F1 8B9564FFFFFF            mov edx, dword ptr [ebp+FFFFFF64]
:004361F7 81E2FF000000            and edx, 000000FF
:004361FD 8955A8                  mov dword ptr [ebp-58], edx
:00436200 EB1C                    jmp 0043621E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004364D6(U)
|
:00436202 8B8564FFFFFF            mov eax, dword ptr [ebp+FFFFFF64]
:00436208 25FF000000              and eax, 000000FF
:0043620D 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00436210 03C8                    add ecx, eax
:00436212 894DA8                  mov dword ptr [ebp-58], ecx
:00436215 8A55E0                  mov dl, byte ptr [ebp-20]
:00436218 80C201                  add dl, 01
:0043621B 8855E0                  mov byte ptr [ebp-20], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436200(U)
|
:0043621E 837DA830                cmp dword ptr [ebp-58], 00000030
:00436222 0F87B3020000            ja 004364DB
:00436228 8B45E0                  mov eax, dword ptr [ebp-20]
:0043622B 25FF000000              and eax, 000000FF
:00436230 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00436231 B903000000              mov ecx, 00000003
:00436236 F7F9                    idiv ecx
:00436238 83FA02                  cmp edx, 00000002
:0043623B 750C                    jne 00436249
:0043623D 6A01                    push 00000001
:0043623F B9A83B4B00              mov ecx, 004B3BA8
:00436244 E8C796FEFF              call 0041F910

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043623B(C)
|
:00436249 E8E59EFDFF              call 00410133
:0043624E 83BD6CFFFFFF03          cmp dword ptr [ebp+FFFFFF6C], 00000003
:00436255 750D                    jne 00436264
:00436257 8B5508                  mov edx, dword ptr [ebp+08]
:0043625A 81E2FF000000            and edx, 000000FF
:00436260 85D2                    test edx, edx
:00436262 7416                    je 0043627A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436255(C)
|
:00436264 83BD70FFFFFF03          cmp dword ptr [ebp+FFFFFF70], 00000003
:0043626B 7546                    jne 004362B3
:0043626D 8B4508                  mov eax, dword ptr [ebp+08]
:00436270 25FF000000              and eax, 000000FF
:00436275 83F802                  cmp eax, 00000002
:00436278 7539                    jne 004362B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436262(C)
|
:0043627A 8B8D7CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF7C]
:00436280 2B4DD0                  sub ecx, dword ptr [ebp-30]
:00436283 51                      push ecx
:00436284 8B5590                  mov edx, dword ptr [ebp-70]
:00436287 2B55E8                  sub edx, dword ptr [ebp-18]
:0043628A 52                      push edx
:0043628B E8F2BD0000              call 00442082
:00436290 83C408                  add esp, 00000008
:00436293 837D9C00                cmp dword ptr [ebp-64], 00000000
:00436297 741A                    je 004362B3

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00436299 6A04                    push 00000004
:0043629B 8B458C                  mov eax, dword ptr [ebp-74]
:0043629E 50                      push eax
:0043629F 6A30                    push 00000030
:004362A1 6A30                    push 00000030
:004362A3 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004362A6 51                      push ecx
:004362A7 8B55E4                  mov edx, dword ptr [ebp-1C]
:004362AA 52                      push edx
:004362AB E8F4480100              call 0044ABA4
:004362B0 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043626B(C), :00436278(C), :00436297(C)
|
:004362B3 83BD6CFFFFFF03          cmp dword ptr [ebp+FFFFFF6C], 00000003
:004362BA 750D                    jne 004362C9
:004362BC 8B4508                  mov eax, dword ptr [ebp+08]
:004362BF 25FF000000              and eax, 000000FF
:004362C4 83F802                  cmp eax, 00000002
:004362C7 7416                    je 004362DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004362BA(C)
|
:004362C9 83BD70FFFFFF03          cmp dword ptr [ebp+FFFFFF70], 00000003
:004362D0 755E                    jne 00436330
:004362D2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004362D5 81E1FF000000            and ecx, 000000FF
:004362DB 85C9                    test ecx, ecx
:004362DD 7551                    jne 00436330

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004362C7(C)
|
:004362DF 8B957CFFFFFF            mov edx, dword ptr [ebp+FFFFFF7C]
:004362E5 2B55D0                  sub edx, dword ptr [ebp-30]
:004362E8 039578FFFFFF            add edx, dword ptr [ebp+FFFFFF78]
:004362EE 52                      push edx
:004362EF 8B4590                  mov eax, dword ptr [ebp-70]
:004362F2 2B45E8                  sub eax, dword ptr [ebp-18]
:004362F5 0345A4                  add eax, dword ptr [ebp-5C]
:004362F8 50                      push eax
:004362F9 E884BD0000              call 00442082
:004362FE 83C408                  add esp, 00000008
:00436301 837DAC00                cmp dword ptr [ebp-54], 00000000
:00436305 7429                    je 00436330

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00436307 6A04                    push 00000004
:00436309 8B8D74FFFFFF            mov ecx, dword ptr [ebp+FFFFFF74]
:0043630F 51                      push ecx
:00436310 6A30                    push 00000030
:00436312 6A30                    push 00000030
:00436314 8B55F0                  mov edx, dword ptr [ebp-10]
:00436317 83C202                  add edx, 00000002
:0043631A C1E204                  shl edx, 04
:0043631D 83C208                  add edx, 00000008
:00436320 52                      push edx
:00436321 8B45F4                  mov eax, dword ptr [ebp-0C]
:00436324 C1E004                  shl eax, 04
:00436327 50                      push eax
:00436328 E877480100              call 0044ABA4
:0043632D 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004362D0(C), :004362DD(C), :00436305(C)
|
:00436330 83BD6CFFFFFF03          cmp dword ptr [ebp+FFFFFF6C], 00000003
:00436337 720C                    jb 00436345
:00436339 C78524FFFFFF20000000    mov dword ptr [ebp+FFFFFF24], 00000020
:00436343 EB3D                    jmp 00436382

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436337(C)
|
:00436345 83BD70FFFFFF03          cmp dword ptr [ebp+FFFFFF70], 00000003
:0043634C 721C                    jb 0043636A
:0043634E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436351 81E1FF000000            and ecx, 000000FF
:00436357 83F902                  cmp ecx, 00000002
:0043635A 750E                    jne 0043636A
:0043635C 8B55CC                  mov edx, dword ptr [ebp-34]
:0043635F 0355A8                  add edx, dword ptr [ebp-58]
:00436362 899520FFFFFF            mov dword ptr [ebp+FFFFFF20], edx
:00436368 EB0C                    jmp 00436376

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043634C(C), :0043635A(C)
|
:0043636A 8B45CC                  mov eax, dword ptr [ebp-34]
:0043636D 2B45A8                  sub eax, dword ptr [ebp-58]
:00436370 898520FFFFFF            mov dword ptr [ebp+FFFFFF20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436368(U)
|
:00436376 8B8D20FFFFFF            mov ecx, dword ptr [ebp+FFFFFF20]
:0043637C 898D24FFFFFF            mov dword ptr [ebp+FFFFFF24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436343(U)
|
:00436382 8B9524FFFFFF            mov edx, dword ptr [ebp+FFFFFF24]
:00436388 899550FFFFFF            mov dword ptr [ebp+FFFFFF50], edx
:0043638E 83BD6CFFFFFF03          cmp dword ptr [ebp+FFFFFF6C], 00000003
:00436395 720D                    jb 004363A4
:00436397 8B4508                  mov eax, dword ptr [ebp+08]
:0043639A 25FF000000              and eax, 000000FF
:0043639F 83F802                  cmp eax, 00000002
:004363A2 7426                    je 004363CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436395(C)
|
:004363A4 83BD70FFFFFF03          cmp dword ptr [ebp+FFFFFF70], 00000003
:004363AB 720D                    jb 004363BA
:004363AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004363B0 81E1FF000000            and ecx, 000000FF
:004363B6 85C9                    test ecx, ecx
:004363B8 7410                    je 004363CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004363AB(C)
|
:004363BA BA30000000              mov edx, 00000030
:004363BF 2B55A8                  sub edx, dword ptr [ebp-58]
:004363C2 89951CFFFFFF            mov dword ptr [ebp+FFFFFF1C], edx
:004363C8 EB09                    jmp 004363D3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004363A2(C), :004363B8(C)
|
:004363CA 8B45A8                  mov eax, dword ptr [ebp-58]
:004363CD 89851CFFFFFF            mov dword ptr [ebp+FFFFFF1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004363C8(U)
|
:004363D3 8B8D1CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF1C]
:004363D9 898D54FFFFFF            mov dword ptr [ebp+FFFFFF54], ecx
:004363DF 83BD6CFFFFFF03          cmp dword ptr [ebp+FFFFFF6C], 00000003
:004363E6 7221                    jb 00436409
:004363E8 8B5508                  mov edx, dword ptr [ebp+08]
:004363EB 81E2FF000000            and edx, 000000FF
:004363F1 83FA02                  cmp edx, 00000002
:004363F4 7513                    jne 00436409
:004363F6 B830000000              mov eax, 00000030
:004363FB 2B45A8                  sub eax, dword ptr [ebp-58]
:004363FE 6BC030                  imul eax, 00000030
:00436401 898518FFFFFF            mov dword ptr [ebp+FFFFFF18], eax
:00436407 EB3A                    jmp 00436443

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004363E6(C), :004363F4(C)
|
:00436409 83BD6CFFFFFF03          cmp dword ptr [ebp+FFFFFF6C], 00000003
:00436410 721B                    jb 0043642D
:00436412 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436415 81E1FF000000            and ecx, 000000FF
:0043641B 85C9                    test ecx, ecx
:0043641D 750E                    jne 0043642D
:0043641F 8B55A8                  mov edx, dword ptr [ebp-58]
:00436422 6BD230                  imul edx, 00000030
:00436425 899514FFFFFF            mov dword ptr [ebp+FFFFFF14], edx
:0043642B EB0A                    jmp 00436437

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436410(C), :0043641D(C)
|
:0043642D C78514FFFFFF00000000    mov dword ptr [ebp+FFFFFF14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043642B(U)
|
:00436437 8B8514FFFFFF            mov eax, dword ptr [ebp+FFFFFF14]
:0043643D 898518FFFFFF            mov dword ptr [ebp+FFFFFF18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436407(U)
|
:00436443 8B8D18FFFFFF            mov ecx, dword ptr [ebp+FFFFFF18]
:00436449 898D60FFFFFF            mov dword ptr [ebp+FFFFFF60], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043644F 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00436451 6A04                    push 00000004
:00436453 6A00                    push 00000000
:00436455 6A00                    push 00000000
:00436457 B9187D4A00              mov ecx, 004A7D18
:0043645C E82F2B0400              call 00478F90
:00436461 8B9548FFFFFF            mov edx, dword ptr [ebp+FFFFFF48]
:00436467 33C9                    xor ecx, ecx
:00436469 8A4A04                  mov cl, byte ptr [edx+04]
:0043646C 69C9005A0000            imul ecx, 00005A00
:00436472 034DB8                  add ecx, dword ptr [ebp-48]
:00436475 038560FFFFFF            add eax, dword ptr [ebp+FFFFFF60]
:0043647B 03C8                    add ecx, eax
:0043647D 8B45A8                  mov eax, dword ptr [ebp-58]
:00436480 83E801                  sub eax, 00000001
:00436483 33D2                    xor edx, edx
:00436485 BE18000000              mov esi, 00000018
:0043648A F7F6                    div esi
:0043648C 83FA0C                  cmp edx, 0000000C
:0043648F 1BD2                    sbb edx, edx
:00436491 42                      inc edx
:00436492 69D200090000            imul edx, 00000900
:00436498 03CA                    add ecx, edx
:0043649A 51                      push ecx
:0043649B 8B8554FFFFFF            mov eax, dword ptr [ebp+FFFFFF54]
:004364A1 50                      push eax
:004364A2 6A30                    push 00000030
:004364A4 8B8D50FFFFFF            mov ecx, dword ptr [ebp+FFFFFF50]
:004364AA 51                      push ecx
:004364AB 8B55E4                  mov edx, dword ptr [ebp-1C]
:004364AE 52                      push edx
:004364AF E8F0460100              call 0044ABA4
:004364B4 83C418                  add esp, 00000018
:004364B7 E8929CFDFF              call 0041014E
:004364BC 8B45E0                  mov eax, dword ptr [ebp-20]
:004364BF 25FF000000              and eax, 000000FF
:004364C4 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004364C5 B903000000              mov ecx, 00000003
:004364CA F7F9                    idiv ecx
:004364CC 83FA02                  cmp edx, 00000002
:004364CF 7505                    jne 004364D6
:004364D1 E8FA90FFFF              call 0042F5D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004364CF(C)
|
:004364D6 E927FDFFFF              jmp 00436202

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436222(C)
|
:004364DB E94D030000              jmp 0043682D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004361EB(C)
|
:004364E0 8B5508                  mov edx, dword ptr [ebp+08]
:004364E3 81E2FF000000            and edx, 000000FF
:004364E9 83FA03                  cmp edx, 00000003
:004364EC 7411                    je 004364FF
:004364EE 8B4508                  mov eax, dword ptr [ebp+08]
:004364F1 25FF000000              and eax, 000000FF
:004364F6 83F801                  cmp eax, 00000001
:004364F9 0F852E030000            jne 0043682D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004364EC(C)
|
:004364FF 8B8D64FFFFFF            mov ecx, dword ptr [ebp+FFFFFF64]
:00436505 81E1FF000000            and ecx, 000000FF
:0043650B 894DA8                  mov dword ptr [ebp-58], ecx
:0043650E EB1D                    jmp 0043652D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436828(U)
|
:00436510 8B9564FFFFFF            mov edx, dword ptr [ebp+FFFFFF64]
:00436516 81E2FF000000            and edx, 000000FF
:0043651C 8B45A8                  mov eax, dword ptr [ebp-58]
:0043651F 03C2                    add eax, edx
:00436521 8945A8                  mov dword ptr [ebp-58], eax
:00436524 8A4DE0                  mov cl, byte ptr [ebp-20]
:00436527 80C101                  add cl, 01
:0043652A 884DE0                  mov byte ptr [ebp-20], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043650E(U)
|
:0043652D 837DA830                cmp dword ptr [ebp-58], 00000030
:00436531 0F87F6020000            ja 0043682D
:00436537 8B45E0                  mov eax, dword ptr [ebp-20]
:0043653A 25FF000000              and eax, 000000FF
:0043653F 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00436540 B903000000              mov ecx, 00000003
:00436545 F7F9                    idiv ecx
:00436547 83FA02                  cmp edx, 00000002
:0043654A 750C                    jne 00436558
:0043654C 6A01                    push 00000001
:0043654E B9A83B4B00              mov ecx, 004B3BA8
:00436553 E8B893FEFF              call 0041F910

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043654A(C)
|
:00436558 E8D69BFDFF              call 00410133
:0043655D 837D8403                cmp dword ptr [ebp-7C], 00000003
:00436561 750E                    jne 00436571
:00436563 8B5508                  mov edx, dword ptr [ebp+08]
:00436566 81E2FF000000            and edx, 000000FF
:0043656C 83FA03                  cmp edx, 00000003
:0043656F 7413                    je 00436584

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436561(C)
|
:00436571 837D8803                cmp dword ptr [ebp-78], 00000003
:00436575 7558                    jne 004365CF
:00436577 8B4508                  mov eax, dword ptr [ebp+08]
:0043657A 25FF000000              and eax, 000000FF
:0043657F 83F801                  cmp eax, 00000001
:00436582 754B                    jne 004365CF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043656F(C)
|
:00436584 B958494B00              mov ecx, 004B4958
:00436589 E895470100              call 0044AD23
:0043658E 8B8D7CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF7C]
:00436594 2BC8                    sub ecx, eax
:00436596 51                      push ecx
:00436597 B958494B00              mov ecx, 004B4958
:0043659C E871470100              call 0044AD12
:004365A1 8B5590                  mov edx, dword ptr [ebp-70]
:004365A4 2BD0                    sub edx, eax
:004365A6 52                      push edx
:004365A7 E8D6BA0000              call 00442082
:004365AC 83C408                  add esp, 00000008
:004365AF 837D9C00                cmp dword ptr [ebp-64], 00000000
:004365B3 741A                    je 004365CF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004365B5 6A04                    push 00000004
:004365B7 8B458C                  mov eax, dword ptr [ebp-74]
:004365BA 50                      push eax
:004365BB 6A30                    push 00000030
:004365BD 6A30                    push 00000030
:004365BF 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004365C2 51                      push ecx
:004365C3 8B55E4                  mov edx, dword ptr [ebp-1C]
:004365C6 52                      push edx
:004365C7 E8D8450100              call 0044ABA4
:004365CC 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436575(C), :00436582(C), :004365B3(C)
|
:004365CF 837D8403                cmp dword ptr [ebp-7C], 00000003
:004365D3 750D                    jne 004365E2
:004365D5 8B4508                  mov eax, dword ptr [ebp+08]
:004365D8 25FF000000              and eax, 000000FF
:004365DD 83F801                  cmp eax, 00000001
:004365E0 7414                    je 004365F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004365D3(C)
|
:004365E2 837D8803                cmp dword ptr [ebp-78], 00000003
:004365E6 755F                    jne 00436647
:004365E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004365EB 81E1FF000000            and ecx, 000000FF
:004365F1 83F903                  cmp ecx, 00000003
:004365F4 7551                    jne 00436647

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004365E0(C)
|
:004365F6 8B957CFFFFFF            mov edx, dword ptr [ebp+FFFFFF7C]
:004365FC 2B55D0                  sub edx, dword ptr [ebp-30]
:004365FF 039578FFFFFF            add edx, dword ptr [ebp+FFFFFF78]
:00436605 52                      push edx
:00436606 8B4590                  mov eax, dword ptr [ebp-70]
:00436609 2B45E8                  sub eax, dword ptr [ebp-18]
:0043660C 0345A4                  add eax, dword ptr [ebp-5C]
:0043660F 50                      push eax
:00436610 E86DBA0000              call 00442082
:00436615 83C408                  add esp, 00000008
:00436618 837DAC00                cmp dword ptr [ebp-54], 00000000
:0043661C 7429                    je 00436647

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043661E 6A04                    push 00000004
:00436620 8B8D74FFFFFF            mov ecx, dword ptr [ebp+FFFFFF74]
:00436626 51                      push ecx
:00436627 6A30                    push 00000030
:00436629 6A30                    push 00000030
:0043662B 8B55F0                  mov edx, dword ptr [ebp-10]
:0043662E 83C202                  add edx, 00000002
:00436631 C1E204                  shl edx, 04
:00436634 83C208                  add edx, 00000008
:00436637 52                      push edx
:00436638 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043663B C1E004                  shl eax, 04
:0043663E 50                      push eax
:0043663F E860450100              call 0044ABA4
:00436644 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004365E6(C), :004365F4(C), :0043661C(C)
|
:00436647 837D8403                cmp dword ptr [ebp-7C], 00000003
:0043664B 720C                    jb 00436659
:0043664D C78510FFFFFF00000000    mov dword ptr [ebp+FFFFFF10], 00000000
:00436657 EB3A                    jmp 00436693

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043664B(C)
|
:00436659 837D8803                cmp dword ptr [ebp-78], 00000003
:0043665D 721C                    jb 0043667B
:0043665F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436662 81E1FF000000            and ecx, 000000FF
:00436668 83F901                  cmp ecx, 00000001
:0043666B 750E                    jne 0043667B
:0043666D 8B55E4                  mov edx, dword ptr [ebp-1C]
:00436670 0355A8                  add edx, dword ptr [ebp-58]
:00436673 89950CFFFFFF            mov dword ptr [ebp+FFFFFF0C], edx
:00436679 EB0C                    jmp 00436687

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043665D(C), :0043666B(C)
|
:0043667B 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043667E 2B45A8                  sub eax, dword ptr [ebp-58]
:00436681 89850CFFFFFF            mov dword ptr [ebp+FFFFFF0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436679(U)
|
:00436687 8B8D0CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF0C]
:0043668D 898D10FFFFFF            mov dword ptr [ebp+FFFFFF10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436657(U)
|
:00436693 8B9510FFFFFF            mov edx, dword ptr [ebp+FFFFFF10]
:00436699 899558FFFFFF            mov dword ptr [ebp+FFFFFF58], edx
:0043669F 837D8403                cmp dword ptr [ebp-7C], 00000003
:004366A3 720D                    jb 004366B2
:004366A5 8B4508                  mov eax, dword ptr [ebp+08]
:004366A8 25FF000000              and eax, 000000FF
:004366AD 83F801                  cmp eax, 00000001
:004366B0 7424                    je 004366D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004366A3(C)
|
:004366B2 837D8803                cmp dword ptr [ebp-78], 00000003
:004366B6 720E                    jb 004366C6
:004366B8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004366BB 81E1FF000000            and ecx, 000000FF
:004366C1 83F903                  cmp ecx, 00000003
:004366C4 7410                    je 004366D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004366B6(C)
|
:004366C6 BA30000000              mov edx, 00000030
:004366CB 2B55A8                  sub edx, dword ptr [ebp-58]
:004366CE 899508FFFFFF            mov dword ptr [ebp+FFFFFF08], edx
:004366D4 EB09                    jmp 004366DF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004366B0(C), :004366C4(C)
|
:004366D6 8B45A8                  mov eax, dword ptr [ebp-58]
:004366D9 898508FFFFFF            mov dword ptr [ebp+FFFFFF08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004366D4(U)
|
:004366DF 8B8D08FFFFFF            mov ecx, dword ptr [ebp+FFFFFF08]
:004366E5 898D5CFFFFFF            mov dword ptr [ebp+FFFFFF5C], ecx
:004366EB 837D8403                cmp dword ptr [ebp-7C], 00000003
:004366EF 721E                    jb 0043670F
:004366F1 8B5508                  mov edx, dword ptr [ebp+08]
:004366F4 81E2FF000000            and edx, 000000FF
:004366FA 83FA01                  cmp edx, 00000001
:004366FD 7510                    jne 0043670F
:004366FF B830000000              mov eax, 00000030
:00436704 2B45A8                  sub eax, dword ptr [ebp-58]
:00436707 898504FFFFFF            mov dword ptr [ebp+FFFFFF04], eax
:0043670D EB35                    jmp 00436744

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004366EF(C), :004366FD(C)
|
:0043670F 837D8403                cmp dword ptr [ebp-7C], 00000003
:00436713 731A                    jnb 0043672F
:00436715 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436718 81E1FF000000            and ecx, 000000FF
:0043671E 83F903                  cmp ecx, 00000003
:00436721 740C                    je 0043672F
:00436723 C78500FFFFFF00000000    mov dword ptr [ebp+FFFFFF00], 00000000
:0043672D EB09                    jmp 00436738

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436713(C), :00436721(C)
|
:0043672F 8B55A8                  mov edx, dword ptr [ebp-58]
:00436732 899500FFFFFF            mov dword ptr [ebp+FFFFFF00], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043672D(U)
|
:00436738 8B8500FFFFFF            mov eax, dword ptr [ebp+FFFFFF00]
:0043673E 898504FFFFFF            mov dword ptr [ebp+FFFFFF04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043670D(U)
|
:00436744 8B8D04FFFFFF            mov ecx, dword ptr [ebp+FFFFFF04]
:0043674A 898D60FFFFFF            mov dword ptr [ebp+FFFFFF60], ecx
:00436750 C6854CFFFFFF00          mov byte ptr [ebp+FFFFFF4C], 00
:00436757 EB0F                    jmp 00436768

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436804(U)
|
:00436759 8A954CFFFFFF            mov dl, byte ptr [ebp+FFFFFF4C]
:0043675F 80C201                  add dl, 01
:00436762 88954CFFFFFF            mov byte ptr [ebp+FFFFFF4C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436757(U)
|
:00436768 8B854CFFFFFF            mov eax, dword ptr [ebp+FFFFFF4C]
:0043676E 25FF000000              and eax, 000000FF
:00436773 83F830                  cmp eax, 00000030
:00436776 0F8D8D000000            jnl 00436809

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043677C 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043677E 6A04                    push 00000004
:00436780 6A00                    push 00000000
:00436782 6A00                    push 00000000
:00436784 B9187D4A00              mov ecx, 004A7D18
:00436789 E802280400              call 00478F90
:0043678E 8B8D48FFFFFF            mov ecx, dword ptr [ebp+FFFFFF48]
:00436794 33D2                    xor edx, edx
:00436796 8A5104                  mov dl, byte ptr [ecx+04]
:00436799 8BCA                    mov ecx, edx
:0043679B 69C9005A0000            imul ecx, 00005A00
:004367A1 034DB8                  add ecx, dword ptr [ebp-48]
:004367A4 038560FFFFFF            add eax, dword ptr [ebp+FFFFFF60]
:004367AA 03C8                    add ecx, eax
:004367AC 8B45A8                  mov eax, dword ptr [ebp-58]
:004367AF 83E801                  sub eax, 00000001
:004367B2 33D2                    xor edx, edx
:004367B4 BE18000000              mov esi, 00000018
:004367B9 F7F6                    div esi
:004367BB 83FA0C                  cmp edx, 0000000C
:004367BE 1BD2                    sbb edx, edx
:004367C0 42                      inc edx
:004367C1 69D200090000            imul edx, 00000900
:004367C7 03CA                    add ecx, edx
:004367C9 8B854CFFFFFF            mov eax, dword ptr [ebp+FFFFFF4C]
:004367CF 25FF000000              and eax, 000000FF
:004367D4 6BC030                  imul eax, 00000030
:004367D7 03C8                    add ecx, eax
:004367D9 51                      push ecx
:004367DA 6A01                    push 00000001
:004367DC 8B8D5CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF5C]
:004367E2 51                      push ecx
:004367E3 8B954CFFFFFF            mov edx, dword ptr [ebp+FFFFFF4C]
:004367E9 81E2FF000000            and edx, 000000FF
:004367EF 8B45CC                  mov eax, dword ptr [ebp-34]
:004367F2 03C2                    add eax, edx
:004367F4 50                      push eax
:004367F5 8B8D58FFFFFF            mov ecx, dword ptr [ebp+FFFFFF58]
:004367FB 51                      push ecx
:004367FC E8A3430100              call 0044ABA4
:00436801 83C418                  add esp, 00000018
:00436804 E950FFFFFF              jmp 00436759

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436776(C)
|
:00436809 E84099FDFF              call 0041014E
:0043680E 8B45E0                  mov eax, dword ptr [ebp-20]
:00436811 25FF000000              and eax, 000000FF
:00436816 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00436817 B903000000              mov ecx, 00000003
:0043681C F7F9                    idiv ecx
:0043681E 83FA02                  cmp edx, 00000002
:00436821 7505                    jne 00436828
:00436823 E8A88DFFFF              call 0042F5D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436821(C)
|
:00436828 E9E3FCFFFF              jmp 00436510

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00435B83(U), :00435BA8(U), :00436172(U), :004361AE(C), :004361CD(C)
|:004364DB(U), :004364F9(C), :00436531(C)
|
:0043682D 5E                      pop esi
:0043682E 8BE5                    mov esp, ebp
:00436830 5D                      pop ebp
:00436831 C20400                  ret 0004



:00436834 F9594300                DWORD 004359F9
:00436838 3A5A4300                DWORD 00435A3A
:0043683C 1E5A4300                DWORD 00435A1E
:00436840 5D5A4300                DWORD 00435A5D



* Referenced by a CALL at Addresses:
|:0045FB70   , :0045FC3E   , :00460545   
|
:00436844 55                      push ebp
:00436845 8BEC                    mov ebp, esp
:00436847 83EC08                  sub esp, 00000008
:0043684A 894DF8                  mov dword ptr [ebp-08], ecx
:0043684D 8A450C                  mov al, byte ptr [ebp+0C]
:00436850 50                      push eax
:00436851 8A4D08                  mov cl, byte ptr [ebp+08]
:00436854 51                      push ecx
:00436855 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00436858 E803030000              call 00436B60
:0043685D 8D55FC                  lea edx, dword ptr [ebp-04]
:00436860 52                      push edx
:00436861 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00436864 E85CE8FFFF              call 004350C5
:00436869 85C0                    test eax, eax
:0043686B 741B                    je 00436888
:0043686D 8B45F8                  mov eax, dword ptr [ebp-08]
:00436870 8A4D08                  mov cl, byte ptr [ebp+08]
:00436873 884808                  mov byte ptr [eax+08], cl
:00436876 8B55F8                  mov edx, dword ptr [ebp-08]
:00436879 8A450C                  mov al, byte ptr [ebp+0C]
:0043687C 884209                  mov byte ptr [edx+09], al
:0043687F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00436882 C64107FF                mov [ecx+07], FF
:00436886 EB42                    jmp 004368CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043686B(C)
|
:00436888 8B5508                  mov edx, dword ptr [ebp+08]
:0043688B 81E2FF000000            and edx, 000000FF
:00436891 33C0                    xor eax, eax
:00436893 A0C44E4B00              mov al, byte ptr [004B4EC4]
:00436898 3BD0                    cmp edx, eax
:0043689A 7D2E                    jge 004368CA
:0043689C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043689F 81E1FF000000            and ecx, 000000FF
:004368A5 33D2                    xor edx, edx
:004368A7 8A15C54E4B00            mov dl, byte ptr [004B4EC5]
:004368AD 3BCA                    cmp ecx, edx
:004368AF 7D19                    jge 004368CA
:004368B1 8B45F8                  mov eax, dword ptr [ebp-08]
:004368B4 8A4D08                  mov cl, byte ptr [ebp+08]
:004368B7 884808                  mov byte ptr [eax+08], cl
:004368BA 8B55F8                  mov edx, dword ptr [ebp-08]
:004368BD 8A450C                  mov al, byte ptr [ebp+0C]
:004368C0 884209                  mov byte ptr [edx+09], al
:004368C3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004368C6 C64107FF                mov [ecx+07], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436886(U), :0043689A(C), :004368AF(C)
|
:004368CA 8BE5                    mov esp, ebp
:004368CC 5D                      pop ebp
:004368CD C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00433E85   , :004342A0   , :004343B9   , :00438F2E   , :00438F40   
|:00439216   , :00439587   , :004396A1   , :00439903   , :0043995C   
|:004399D9   , :00439B64   , :0043B2DC   , :0044F1EE   , :004510DA   
|:004525D2   , :0045659E   , :00456BC9   , :0045D6E2   , :0045FBD0   
|:00460758   
|
:004368D0 55                      push ebp
:004368D1 8BEC                    mov ebp, esp
:004368D3 51                      push ecx
:004368D4 894DFC                  mov dword ptr [ebp-04], ecx
:004368D7 8B4508                  mov eax, dword ptr [ebp+08]
:004368DA 25FF000000              and eax, 000000FF
:004368DF F7D0                    not eax
:004368E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004368E4 8A510C                  mov dl, byte ptr [ecx+0C]
:004368E7 22D0                    and dl, al
:004368E9 8B45FC                  mov eax, dword ptr [ebp-04]
:004368EC 88500C                  mov byte ptr [eax+0C], dl
:004368EF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004368F2 8A510C                  mov dl, byte ptr [ecx+0C]
:004368F5 0A5508                  or dl, byte ptr [ebp+08]
:004368F8 8B45FC                  mov eax, dword ptr [ebp-04]
:004368FB 88500C                  mov byte ptr [eax+0C], dl
:004368FE 8BE5                    mov esp, ebp
:00436900 5D                      pop ebp
:00436901 C20400                  ret 0004


:00436904 55                      push ebp
:00436905 8BEC                    mov ebp, esp
:00436907 83EC08                  sub esp, 00000008
:0043690A 894DF8                  mov dword ptr [ebp-08], ecx
:0043690D 8B45F8                  mov eax, dword ptr [ebp-08]
:00436910 8B08                    mov ecx, dword ptr [eax]
:00436912 6BC950                  imul ecx, 00000050
:00436915 81C1787F4900            add ecx, 00497F78
:0043691B E8FBB4FCFF              call 00401E1B
:00436920 8945FC                  mov dword ptr [ebp-04], eax
:00436923 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00436926 8B5508                  mov edx, dword ptr [ebp+08]
:00436929 035114                  add edx, dword ptr [ecx+14]
:0043692C 3955FC                  cmp dword ptr [ebp-04], edx
:0043692F 7D0B                    jge 0043693C
:00436931 8B45F8                  mov eax, dword ptr [ebp-08]
:00436934 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436937 894814                  mov dword ptr [eax+14], ecx
:0043693A EB0F                    jmp 0043694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043692F(C)
|
:0043693C 8B55F8                  mov edx, dword ptr [ebp-08]
:0043693F 8B4214                  mov eax, dword ptr [edx+14]
:00436942 034508                  add eax, dword ptr [ebp+08]
:00436945 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00436948 894114                  mov dword ptr [ecx+14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043693A(U)
|
:0043694B 8BE5                    mov esp, ebp
:0043694D 5D                      pop ebp
:0043694E C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00434593   , :00434C77   , :004353EA   , :00435CAA   , :0044D227   
|:0044E04D   , :0044E0EA   , :00450A28   , :00450A67   , :00451018   
|:00456999   , :004569E0   , :00456A38   , :00456A7C   , :0045D6C2   
|:0045E3FD   , :0045E4A6   , :0045E9A4   , :00460BB9   
|
:00436951 55                      push ebp
:00436952 8BEC                    mov ebp, esp
:00436954 83EC08                  sub esp, 00000008
:00436957 894DF8                  mov dword ptr [ebp-08], ecx
:0043695A C745FC00000000          mov [ebp-04], 00000000
:00436961 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00436964 E817060000              call 00436F80
:00436969 25FF000000              and eax, 000000FF
:0043696E 83F820                  cmp eax, 00000020
:00436971 7D07                    jge 0043697A
:00436973 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436971(C)
|
:0043697A 8B45FC                  mov eax, dword ptr [ebp-04]
:0043697D 8BE5                    mov esp, ebp
:0043697F 5D                      pop ebp
:00436980 C3                      ret



* Referenced by a CALL at Addresses:
|:0043B972   , :0043C774   , :00441046   , :00443D9E   , :0045EA99   
|
:00436981 55                      push ebp
:00436982 8BEC                    mov ebp, esp
:00436984 83EC08                  sub esp, 00000008
:00436987 894DF8                  mov dword ptr [ebp-08], ecx
:0043698A C745FC00000000          mov [ebp-04], 00000000
:00436991 8B45F8                  mov eax, dword ptr [ebp-08]
:00436994 83781000                cmp dword ptr [eax+10], 00000000
:00436998 7507                    jne 004369A1
:0043699A C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436998(C)
|
:004369A1 8B45FC                  mov eax, dword ptr [ebp-04]
:004369A4 8BE5                    mov esp, ebp
:004369A6 5D                      pop ebp
:004369A7 C3                      ret


:004369A8 CC                      int 03
:004369A9 CC                      int 03
:004369AA CC                      int 03
:004369AB CC                      int 03
:004369AC CC                      int 03
:004369AD CC                      int 03
:004369AE CC                      int 03
:004369AF CC                      int 03
:004369B0 55                      push ebp
:004369B1 8BEC                    mov ebp, esp
:004369B3 51                      push ecx
:004369B4 894DFC                  mov dword ptr [ebp-04], ecx
:004369B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004369BA 83C105                  add ecx, 00000005
:004369BD E82EEDFCFF              call 004056F0
:004369C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004369C5 83C108                  add ecx, 00000008
:004369C8 E823EDFCFF              call 004056F0
:004369CD 8B45FC                  mov eax, dword ptr [ebp-04]
:004369D0 C700FF000000            mov dword ptr [eax], 000000FF
:004369D6 8B45FC                  mov eax, dword ptr [ebp-04]
:004369D9 8BE5                    mov esp, ebp
:004369DB 5D                      pop ebp
:004369DC C3                      ret


:004369DD CC                      int 03
:004369DE CC                      int 03
:004369DF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040480A   , :0040484E   , :00407943   , :00416A69   , :004170BD   
|:00418303   , :0041FAD2   , :0041FB28   , :0041FC0A   , :0041FE2F   
|:0042053E   , :0042058D   , :00420EDC   , :0042342B   , :004235B5   
|:00423951   , :00427BF0   , :00428DAE   , :00428DD4   , :00428DFD   
|:004299EC   , :00429A48   , :00429F3C   , :00429F47   , :0042A38E   
|:0042A3BB   , :0042A3F8   , :0042A425   , :0042B49A   , :0042CA0D   
|:00431FF7   , :004329B3   , :004348AB   , :00435565   , :004355A5   
|:0043704F   , :004370AA   , :004373B8   , :00437584   , :004375F4   
|:00437AE5   , :00437E53   , :00437E79   , :00437E9D   , :00437EC3   
|:004381D9   , :00438442   , :004386DE   , :00439421   , :00439719   
|:00439743   , :004397DB   , :00439CAD   , :00439DE0   , :00439F5F   
|:0043A143   , :0043A3B3   , :0043A45E   , :0043A49D   , :0043A4DC   
|:0043A603   , :0043A912   , :0043AA47   , :0043ABBB   , :0043AC48   
|:0043B900   , :0043D1D4   , :0043D20B   , :0043D864   , :0043D8BD   
|:0043DB38   , :0043DB91   , :0043DEEC   , :0043DF83   , :0043DFFD   
|:0043E254   , :0043E2EB   , :0043E554   , :0043E5EB   , :0043E84C   
|:0043E8FE   , :0043EB43   , :0043EBE4   , :0043EC5C   , :0043F0EF   
|:0043F10F   , :0043F168   , :0043F1B4   , :0043F241   , :0043F380   
|:0043F40B   , :0043F51B   , :0043F675   , :0043F7F7   , :0043F94F   
|:0043FA0C   , :0043FBA0   , :0043FBDD   , :0043FCE8   , :0043FFC3   
|:004400C9   , :00440176   , :004401B5   , :004401F4   , :00440389   
|:004403C6   , :00440589   , :004405E2   , :0044082B   , :004409DD   
|:00440BF1   , :00440C0F   , :00440C3A   , :00440C93   , :00440E2A   
|:00440E4F   , :00440FE0   , :00441072   , :004419F4   , :00441E0B   
|:00442202   , :0044354E   , :00443609   , :00443627   , :004438C6   
|:00443AE9   , :00443EA8   , :00443F1D   , :00443F4F   , :0044411D   
|:0044451C   , :00444538   , :004446D3   , :00445360   , :0044574A   
|:0044A170   , :0044A42B   , :0044EEB3   , :0044F092   , :0044F22C   
|:004511C2   , :0045164B   , :00451718   , :00452D10   , :004534C1   
|:00453B7B   , :00453DB9   , :00453DF5   , :00453FB2   , :00454DF4   
|:00454E45   , :00455022   , :004552AB   , :00458456   , :004584F0   
|:00458571   , :00458593   , :004585B5   , :004585D7   , :004585F9   
|:004586A2   , :004586C4   , :004586E6   , :0045877B   , :0045879A   
|:004587B9   , :004587D8   , :0045B07B   , :0045B178   , :0045CBC3   
|:0045E447   , :0045E4F1   , :0045E5E8   , :0045E9BD   , :0045EA7F   
|:0045EC88   , :0045ECC3   , :0045F135   , :0045F7D1   , :0045FB0C   
|:0045FD7D   , :00460694   , :00460870   , :00460AC9   , :00460C06   
|:00460CE7   , :00460DCA   , :00461D21   , :00461D7F   , :00461DF7   
|:0046B118   , :0046B198   , :0046B260   , :0046C82F   , :0046C9AD   
|:0046EA91   , :0046EAAA   
|
:004369E0 55                      push ebp
:004369E1 8BEC                    mov ebp, esp
:004369E3 51                      push ecx
:004369E4 894DFC                  mov dword ptr [ebp-04], ecx
:004369E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004369EA 8B00                    mov eax, dword ptr [eax]
:004369EC 8BE5                    mov esp, ebp
:004369EE 5D                      pop ebp
:004369EF C3                      ret



* Referenced by a CALL at Addresses:
|:0043211D   , :00432163   , :004321D4   , :0043303D   , :0043308F   
|:004330FB   , :00434AB5   , :00434AF5   , :004353F6   , :00435772   
|:0043ADAD   , :0043DFC7   , :0043E8B7   , :0043EBAE   , :0043EC26   
|:00443B7E   , :00444386   , :004443BF   , :0044A2B5   , :0044D242   
|:0045D075   , :0045D0FF   
|
:004369F0 55                      push ebp
:004369F1 8BEC                    mov ebp, esp
:004369F3 51                      push ecx
:004369F4 894DFC                  mov dword ptr [ebp-04], ecx
:004369F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004369FA 8B08                    mov ecx, dword ptr [eax]
:004369FC 6BC950                  imul ecx, 00000050
:004369FF 81C1787F4900            add ecx, 00497F78
:00436A05 E8FAC6FCFF              call 00403104
:00436A0A 8BE5                    mov esp, ebp
:00436A0C 5D                      pop ebp
:00436A0D C3                      ret


:00436A0E CC                      int 03
:00436A0F CC                      int 03

* Referenced by a CALL at Addresses:
|:00432280   , :00433BFE   , :0043A2CB   , :0043A432   , :0043A443   
|:0043DF35   , :0043DF50   , :0044004B   , :0044014A   , :0044015B   
|:00451779   , :00452FBD   , :00453043   , :0045330F   , :00454965   
|:004549A4   , :0046B4F2   
|
:00436A10 55                      push ebp
:00436A11 8BEC                    mov ebp, esp
:00436A13 51                      push ecx
:00436A14 894DFC                  mov dword ptr [ebp-04], ecx
:00436A17 8B45FC                  mov eax, dword ptr [ebp-04]
:00436A1A 33C9                    xor ecx, ecx
:00436A1C 8A4818                  mov cl, byte ptr [eax+18]
:00436A1F 8BC1                    mov eax, ecx
:00436A21 24BF                    and al, BF
:00436A23 8BE5                    mov esp, ebp
:00436A25 5D                      pop ebp
:00436A26 C3                      ret


:00436A27 CC                      int 03
:00436A28 CC                      int 03
:00436A29 CC                      int 03
:00436A2A CC                      int 03
:00436A2B CC                      int 03
:00436A2C CC                      int 03
:00436A2D CC                      int 03
:00436A2E CC                      int 03
:00436A2F CC                      int 03

* Referenced by a CALL at Addresses:
|:004322C4   , :00433C82   , :0043A305   , :0043A471   , :0043A482   
|:0043E431   , :0043E59D   , :0043E5B8   , :00440064   , :00440189   
|:0044019A   , :004517C6   , :0045180E   , :00453000   , :00453341   
|:00454A1F   , :00454A5E   , :0046B54E   
|
:00436A30 55                      push ebp
:00436A31 8BEC                    mov ebp, esp
:00436A33 51                      push ecx
:00436A34 894DFC                  mov dword ptr [ebp-04], ecx
:00436A37 8B45FC                  mov eax, dword ptr [ebp-04]
:00436A3A 33C9                    xor ecx, ecx
:00436A3C 8A4819                  mov cl, byte ptr [eax+19]
:00436A3F 8BC1                    mov eax, ecx
:00436A41 24BF                    and al, BF
:00436A43 8BE5                    mov esp, ebp
:00436A45 5D                      pop ebp
:00436A46 C3                      ret


:00436A47 CC                      int 03
:00436A48 CC                      int 03
:00436A49 CC                      int 03
:00436A4A CC                      int 03
:00436A4B CC                      int 03
:00436A4C CC                      int 03
:00436A4D CC                      int 03
:00436A4E CC                      int 03
:00436A4F CC                      int 03

* Referenced by a CALL at Addresses:
|:0043231F   , :00433D06   , :0043A33F   , :0043A4B0   , :0043A4C1   
|:0043E29D   , :0043E2B8   , :0044007D   , :004401C8   , :004401D9   
|:00453373   , :00454ACC   , :00454B0B   , :0046B5AA   
|
:00436A50 55                      push ebp
:00436A51 8BEC                    mov ebp, esp
:00436A53 51                      push ecx
:00436A54 894DFC                  mov dword ptr [ebp-04], ecx
:00436A57 8B45FC                  mov eax, dword ptr [ebp-04]
:00436A5A 33C9                    xor ecx, ecx
:00436A5C 8A481A                  mov cl, byte ptr [eax+1A]
:00436A5F 8BC1                    mov eax, ecx
:00436A61 24BF                    and al, BF
:00436A63 8BE5                    mov esp, ebp
:00436A65 5D                      pop ebp
:00436A66 C3                      ret


:00436A67 CC                      int 03
:00436A68 CC                      int 03
:00436A69 CC                      int 03
:00436A6A CC                      int 03
:00436A6B CC                      int 03
:00436A6C CC                      int 03
:00436A6D CC                      int 03
:00436A6E CC                      int 03
:00436A6F CC                      int 03

* Referenced by a CALL at Addresses:
|:004325B8   , :0043261F   , :0043268E   , :004326F5   , :00432764   
|:004327CB   , :0043283A   , :004328A1   , :00432910   , :00432977   
|:00432F1E   , :004331F5   , :004336F4   , :0043376C   , :004337EF   
|:00433D9B   , :00433DBA   , :00433DD9   , :00433DF8   , :00433E1F   
|:0043575A   , :0043581F   , :004370D6   , :00437860   , :004378FE   
|:00437A4C   , :0043A7D0   , :0043A803   , :0043A836   , :0043A866   
|:0043A896   , :0043DFA6   , :0043E896   , :0043EB8D   , :0043EC05   
|:0043ECA4   , :0043ECDF   , :0043ED1A   , :0043FC58   , :0043FC67   
|:0043FC76   , :0043FC85   , :0043FC94   , :00441424   , :00441A64   
|:00442F07   , :004436FE   , :0044373D   , :00443A85   , :00451381   
|:00452F56   , :00452F95   , :00453088   , :004530B2   , :004530DC   
|:00453106   , :00453226   , :00453255   , :00453284   , :004532B3   
|:004532E2   , :0045410A   , :004544BF   , :004544F3   , :00454526   
|:00454628   , :00455359   , :004557F4   , :0045E71A   , :0045E98B   
|:0046B605   , :0046B65D   , :0046B6B5   , :0046B70D   , :0046B765   
|
:00436A70 55                      push ebp
:00436A71 8BEC                    mov ebp, esp
:00436A73 51                      push ecx
:00436A74 894DFC                  mov dword ptr [ebp-04], ecx
:00436A77 8B45FC                  mov eax, dword ptr [ebp-04]
:00436A7A 33C9                    xor ecx, ecx
:00436A7C 8A481B                  mov cl, byte ptr [eax+1B]
:00436A7F 8BC1                    mov eax, ecx
:00436A81 8B5508                  mov edx, dword ptr [ebp+08]
:00436A84 81E2FF000000            and edx, 000000FF
:00436A8A 23C2                    and eax, edx
:00436A8C 8BE5                    mov esp, ebp
:00436A8E 5D                      pop ebp
:00436A8F C20400                  ret 0004


:00436A92 CC                      int 03
:00436A93 CC                      int 03
:00436A94 CC                      int 03
:00436A95 CC                      int 03
:00436A96 CC                      int 03
:00436A97 CC                      int 03
:00436A98 CC                      int 03
:00436A99 CC                      int 03
:00436A9A CC                      int 03
:00436A9B CC                      int 03
:00436A9C CC                      int 03
:00436A9D CC                      int 03
:00436A9E CC                      int 03
:00436A9F CC                      int 03

* Referenced by a CALL at Addresses:
|:00432B0B   , :00432D1E   , :004332FD   , :00433412   , :0043519C   
|:004352A4   , :0043CEB1   , :0043DE08   , :0043E18E   , :0043E77E   
|:00441123   , :004412B1   , :00442011   , :004422D0   , :00442DED   
|:00442EB8   , :00442FB9   , :00444076   , :004442CC   , :004481A2   
|:00448519   , :00448A76   , :00448B02   , :00449440   , :00449736   
|:0044A0E5   , :0044AF5D   , :0044C820   , :0044C8D1   , :0044CD14   
|:0044CE72   , :0044CEFE   , :0044CF07   , :0044CF76   , :0044D053   
|:0044D2B3   , :0044DD68   , :0044DE27   , :0044DF45   , :0044F00C   
|:0044F1AA   , :0044F6AC   , :0044F931   , :00450AD5   , :00451079   
|:004510A7   , :00451942   , :004519F9   , :00451AFB   , :00452167   
|:00452726   , :0045274F   , :004528C9   , :00452933   , :00452944   
|:00452B35   , :00452B48   , :00452B5A   , :00452B6A   , :00452BD8   
|:00452C18   , :00453AF4   , :00455980   , :00455BD5   , :00455C72   
|:00455D0F   , :00455E3B   , :00455F87   , :00456024   , :0045648F   
|:00456847   , :00456B87   , :00456BB5   , :00456D75   , :0045E22E   
|:0045EA1D   , :0045FDD3   , :00460D3E   , :00460E2C   , :004610A0   
|:004610BE   
|
:00436AA0 55                      push ebp
:00436AA1 8BEC                    mov ebp, esp
:00436AA3 51                      push ecx
:00436AA4 894DFC                  mov dword ptr [ebp-04], ecx
:00436AA7 8B45FC                  mov eax, dword ptr [ebp-04]
:00436AAA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436AAD 8A11                    mov dl, byte ptr [ecx]
:00436AAF 8810                    mov byte ptr [eax], dl
:00436AB1 8B45FC                  mov eax, dword ptr [ebp-04]
:00436AB4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436AB7 8A5101                  mov dl, byte ptr [ecx+01]
:00436ABA 885001                  mov byte ptr [eax+01], dl
:00436ABD 8B45FC                  mov eax, dword ptr [ebp-04]
:00436AC0 8BE5                    mov esp, ebp
:00436AC2 5D                      pop ebp
:00436AC3 C20400                  ret 0004


:00436AC6 CC                      int 03
:00436AC7 CC                      int 03
:00436AC8 CC                      int 03
:00436AC9 CC                      int 03
:00436ACA CC                      int 03
:00436ACB CC                      int 03
:00436ACC CC                      int 03
:00436ACD CC                      int 03
:00436ACE CC                      int 03
:00436ACF CC                      int 03

* Referenced by a CALL at Addresses:
|:00432D04   , :004330C4   
|
:00436AD0 55                      push ebp
:00436AD1 8BEC                    mov ebp, esp
:00436AD3 51                      push ecx
:00436AD4 894DFC                  mov dword ptr [ebp-04], ecx
:00436AD7 8B45FC                  mov eax, dword ptr [ebp-04]
:00436ADA 034508                  add eax, dword ptr [ebp+08]
:00436ADD 8A00                    mov al, byte ptr [eax]
:00436ADF 8BE5                    mov esp, ebp
:00436AE1 5D                      pop ebp
:00436AE2 C20400                  ret 0004


:00436AE5 CC                      int 03
:00436AE6 CC                      int 03
:00436AE7 CC                      int 03
:00436AE8 CC                      int 03
:00436AE9 CC                      int 03
:00436AEA CC                      int 03
:00436AEB CC                      int 03
:00436AEC CC                      int 03
:00436AED CC                      int 03
:00436AEE CC                      int 03
:00436AEF CC                      int 03

* Referenced by a CALL at Addresses:
|:00433017   , :0043302F   , :00433069   , :00433081   , :004330DB   
|:004330ED   , :0043312E   , :00433347   , :00433698   , :004336A9   
|:00435C9C   , :00438A57   , :0043B797   , :0043D730   , :0043D751   
|:0043E3F3   , :00443AAA   , :00450DAF   , :00450E58   , :004511FA   
|:0045133C   , :0045134E   , :00451889   , :004524F3   , :00452D37   
|:00452D7F   , :00453E2E   , :00453E5B   , :00453E7C   , :004542CB   
|:00454356   , :00454383   , :004543AD   , :004543D7   , :00454CFC   
|:00454D28   , :00454D5B   , :00454D8E   , :00455223   , :0045523E   
|:00455656   , :0045568A   
|
:00436AF0 55                      push ebp
:00436AF1 8BEC                    mov ebp, esp
:00436AF3 83EC08                  sub esp, 00000008
:00436AF6 894DF8                  mov dword ptr [ebp-08], ecx
:00436AF9 8B45F8                  mov eax, dword ptr [ebp-08]
:00436AFC 8B08                    mov ecx, dword ptr [eax]
:00436AFE 6BC950                  imul ecx, 00000050
:00436B01 81C1787F4900            add ecx, 00497F78
:00436B07 E894C6FCFF              call 004031A0
:00436B0C 8845FC                  mov byte ptr [ebp-04], al
:00436B0F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436B12 81E1FF000000            and ecx, 000000FF
:00436B18 83F920                  cmp ecx, 00000020
:00436B1B 7C04                    jl 00436B21
:00436B1D B010                    mov al, 10
:00436B1F EB0D                    jmp 00436B2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436B1B(C)
|
:00436B21 8B45FC                  mov eax, dword ptr [ebp-04]
:00436B24 25FF000000              and eax, 000000FF
:00436B29 99                      cdq
:00436B2A 2BC2                    sub eax, edx
:00436B2C D1F8                    sar eax, 1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436B1F(U)
|
:00436B2E 8BE5                    mov esp, ebp
:00436B30 5D                      pop ebp
:00436B31 C3                      ret


:00436B32 CC                      int 03
:00436B33 CC                      int 03
:00436B34 CC                      int 03
:00436B35 CC                      int 03
:00436B36 CC                      int 03
:00436B37 CC                      int 03
:00436B38 CC                      int 03
:00436B39 CC                      int 03
:00436B3A CC                      int 03
:00436B3B CC                      int 03
:00436B3C CC                      int 03
:00436B3D CC                      int 03
:00436B3E CC                      int 03
:00436B3F CC                      int 03

* Referenced by a CALL at Address:
|:00433144   
|
:00436B40 55                      push ebp
:00436B41 8BEC                    mov ebp, esp
:00436B43 51                      push ecx
:00436B44 894DFC                  mov dword ptr [ebp-04], ecx
:00436B47 8B45FC                  mov eax, dword ptr [ebp-04]
:00436B4A 034508                  add eax, dword ptr [ebp+08]
:00436B4D 8A4024                  mov al, byte ptr [eax+24]
:00436B50 8BE5                    mov esp, ebp
:00436B52 5D                      pop ebp
:00436B53 C20400                  ret 0004


:00436B56 CC                      int 03
:00436B57 CC                      int 03
:00436B58 CC                      int 03
:00436B59 CC                      int 03
:00436B5A CC                      int 03
:00436B5B CC                      int 03
:00436B5C CC                      int 03
:00436B5D CC                      int 03
:00436B5E CC                      int 03
:00436B5F CC                      int 03

* Referenced by a CALL at Addresses:
|:004332BD   , :004333D2   , :0043473F   , :00436858   , :0044C7EB   
|:0044FA54   , :004509A2   , :00450AA0   , :00451DF5   , :00455AE5   
|:0045FFB6   
|
:00436B60 55                      push ebp
:00436B61 8BEC                    mov ebp, esp
:00436B63 51                      push ecx
:00436B64 894DFC                  mov dword ptr [ebp-04], ecx
:00436B67 8B45FC                  mov eax, dword ptr [ebp-04]
:00436B6A 8A4D08                  mov cl, byte ptr [ebp+08]
:00436B6D 8808                    mov byte ptr [eax], cl
:00436B6F 8B55FC                  mov edx, dword ptr [ebp-04]
:00436B72 8A450C                  mov al, byte ptr [ebp+0C]
:00436B75 884201                  mov byte ptr [edx+01], al
:00436B78 8B45FC                  mov eax, dword ptr [ebp-04]
:00436B7B 8BE5                    mov esp, ebp
:00436B7D 5D                      pop ebp
:00436B7E C20800                  ret 0008


:00436B81 CC                      int 03
:00436B82 CC                      int 03
:00436B83 CC                      int 03
:00436B84 CC                      int 03
:00436B85 CC                      int 03
:00436B86 CC                      int 03
:00436B87 CC                      int 03
:00436B88 CC                      int 03
:00436B89 CC                      int 03
:00436B8A CC                      int 03
:00436B8B CC                      int 03
:00436B8C CC                      int 03
:00436B8D CC                      int 03
:00436B8E CC                      int 03
:00436B8F CC                      int 03

* Referenced by a CALL at Addresses:
|:00433A9E   , :00433B6E   , :004370E2   , :0043818D   , :0043CF39   
|:00440DD9   , :0044158E   , :00441638   , :00441690   , :00441735   
|:00441769   , :004417CC   , :00441A70   , :00441AD9   , :00443724   
|:00455365   , :004553CE   
|
:00436B90 55                      push ebp
:00436B91 8BEC                    mov ebp, esp
:00436B93 51                      push ecx
:00436B94 894DFC                  mov dword ptr [ebp-04], ecx
:00436B97 8B45FC                  mov eax, dword ptr [ebp-04]
:00436B9A 8B08                    mov ecx, dword ptr [eax]
:00436B9C 6BC950                  imul ecx, 00000050
:00436B9F 81C1787F4900            add ecx, 00497F78
:00436BA5 E80DB2FCFF              call 00401DB7
:00436BAA 8BE5                    mov esp, ebp
:00436BAC 5D                      pop ebp
:00436BAD C3                      ret


:00436BAE CC                      int 03
:00436BAF CC                      int 03

* Referenced by a CALL at Addresses:
|:00433C0E   , :0043A456   , :0043DF72   , :0044016E   , :0045FA9F   
|:00460954   
|
:00436BB0 55                      push ebp
:00436BB1 8BEC                    mov ebp, esp
:00436BB3 51                      push ecx
:00436BB4 894DFC                  mov dword ptr [ebp-04], ecx
:00436BB7 8B45FC                  mov eax, dword ptr [ebp-04]
:00436BBA 8A4D08                  mov cl, byte ptr [ebp+08]
:00436BBD 884818                  mov byte ptr [eax+18], cl
:00436BC0 8BE5                    mov esp, ebp
:00436BC2 5D                      pop ebp
:00436BC3 C20400                  ret 0004


:00436BC6 CC                      int 03
:00436BC7 CC                      int 03
:00436BC8 CC                      int 03
:00436BC9 CC                      int 03
:00436BCA CC                      int 03
:00436BCB CC                      int 03
:00436BCC CC                      int 03
:00436BCD CC                      int 03
:00436BCE CC                      int 03
:00436BCF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040208A   , :00412CA4   , :00414312   , :00414890   , :00416154   
|:00418700   , :00418C30   , :00418C40   , :00433BEA   , :0046372E   
|:00464947   
|
:00436BD0 55                      push ebp
:00436BD1 8BEC                    mov ebp, esp
:00436BD3 51                      push ecx
:00436BD4 894DFC                  mov dword ptr [ebp-04], ecx
:00436BD7 8B45FC                  mov eax, dword ptr [ebp-04]
:00436BDA 8A4018                  mov al, byte ptr [eax+18]
:00436BDD 8BE5                    mov esp, ebp
:00436BDF 5D                      pop ebp
:00436BE0 C3                      ret


:00436BE1 CC                      int 03
:00436BE2 CC                      int 03
:00436BE3 CC                      int 03
:00436BE4 CC                      int 03
:00436BE5 CC                      int 03
:00436BE6 CC                      int 03
:00436BE7 CC                      int 03
:00436BE8 CC                      int 03
:00436BE9 CC                      int 03
:00436BEA CC                      int 03
:00436BEB CC                      int 03
:00436BEC CC                      int 03
:00436BED CC                      int 03
:00436BEE CC                      int 03
:00436BEF CC                      int 03

* Referenced by a CALL at Addresses:
|:00433C92   , :0043A495   , :0043E5DA   , :004401AD   , :0045FAA9   
|:0046097D   
|
:00436BF0 55                      push ebp
:00436BF1 8BEC                    mov ebp, esp
:00436BF3 51                      push ecx
:00436BF4 894DFC                  mov dword ptr [ebp-04], ecx
:00436BF7 8B45FC                  mov eax, dword ptr [ebp-04]
:00436BFA 8A4D08                  mov cl, byte ptr [ebp+08]
:00436BFD 884819                  mov byte ptr [eax+19], cl
:00436C00 8BE5                    mov esp, ebp
:00436C02 5D                      pop ebp
:00436C03 C20400                  ret 0004


:00436C06 CC                      int 03
:00436C07 CC                      int 03
:00436C08 CC                      int 03
:00436C09 CC                      int 03
:00436C0A CC                      int 03
:00436C0B CC                      int 03
:00436C0C CC                      int 03
:00436C0D CC                      int 03
:00436C0E CC                      int 03
:00436C0F CC                      int 03

* Referenced by a CALL at Addresses:
|:004020DD   , :004331C2   , :00433C6E   , :00439BDA   , :00439EA9   
|:0043A08B   , :0043A54B   , :0045670F   
|
:00436C10 55                      push ebp
:00436C11 8BEC                    mov ebp, esp
:00436C13 51                      push ecx
:00436C14 894DFC                  mov dword ptr [ebp-04], ecx
:00436C17 8B45FC                  mov eax, dword ptr [ebp-04]
:00436C1A 8A4019                  mov al, byte ptr [eax+19]
:00436C1D 8BE5                    mov esp, ebp
:00436C1F 5D                      pop ebp
:00436C20 C3                      ret


:00436C21 CC                      int 03
:00436C22 CC                      int 03
:00436C23 CC                      int 03
:00436C24 CC                      int 03
:00436C25 CC                      int 03
:00436C26 CC                      int 03
:00436C27 CC                      int 03
:00436C28 CC                      int 03
:00436C29 CC                      int 03
:00436C2A CC                      int 03
:00436C2B CC                      int 03
:00436C2C CC                      int 03
:00436C2D CC                      int 03
:00436C2E CC                      int 03
:00436C2F CC                      int 03

* Referenced by a CALL at Addresses:
|:00433D16   , :0043A4D4   , :0043E2DA   , :004401EC   , :0045FAB3   
|:00460AB2   
|
:00436C30 55                      push ebp
:00436C31 8BEC                    mov ebp, esp
:00436C33 51                      push ecx
:00436C34 894DFC                  mov dword ptr [ebp-04], ecx
:00436C37 8B45FC                  mov eax, dword ptr [ebp-04]
:00436C3A 8A4D08                  mov cl, byte ptr [ebp+08]
:00436C3D 88481A                  mov byte ptr [eax+1A], cl
:00436C40 8BE5                    mov esp, ebp
:00436C42 5D                      pop ebp
:00436C43 C20400                  ret 0004


:00436C46 CC                      int 03
:00436C47 CC                      int 03
:00436C48 CC                      int 03
:00436C49 CC                      int 03
:00436C4A CC                      int 03
:00436C4B CC                      int 03
:00436C4C CC                      int 03
:00436C4D CC                      int 03
:00436C4E CC                      int 03
:00436C4F CC                      int 03

* Referenced by a CALL at Addresses:
|:00402130   , :00433CF2   , :00439BEE   , :00439EBD   , :0043A09F   
|:0043A55F   , :0044416E   
|
:00436C50 55                      push ebp
:00436C51 8BEC                    mov ebp, esp
:00436C53 51                      push ecx
:00436C54 894DFC                  mov dword ptr [ebp-04], ecx
:00436C57 8B45FC                  mov eax, dword ptr [ebp-04]
:00436C5A 8A401A                  mov al, byte ptr [eax+1A]
:00436C5D 8BE5                    mov esp, ebp
:00436C5F 5D                      pop ebp
:00436C60 C3                      ret


:00436C61 CC                      int 03
:00436C62 CC                      int 03
:00436C63 CC                      int 03
:00436C64 CC                      int 03
:00436C65 CC                      int 03
:00436C66 CC                      int 03
:00436C67 CC                      int 03
:00436C68 CC                      int 03
:00436C69 CC                      int 03
:00436C6A CC                      int 03
:00436C6B CC                      int 03
:00436C6C CC                      int 03
:00436C6D CC                      int 03
:00436C6E CC                      int 03
:00436C6F CC                      int 03

* Referenced by a CALL at Address:
|:00433D76   
|
:00436C70 55                      push ebp
:00436C71 8BEC                    mov ebp, esp
:00436C73 51                      push ecx
:00436C74 894DFC                  mov dword ptr [ebp-04], ecx
:00436C77 8B45FC                  mov eax, dword ptr [ebp-04]
:00436C7A 8A401B                  mov al, byte ptr [eax+1B]
:00436C7D 8BE5                    mov esp, ebp
:00436C7F 5D                      pop ebp
:00436C80 C3                      ret


:00436C81 CC                      int 03
:00436C82 CC                      int 03
:00436C83 CC                      int 03
:00436C84 CC                      int 03
:00436C85 CC                      int 03
:00436C86 CC                      int 03
:00436C87 CC                      int 03
:00436C88 CC                      int 03
:00436C89 CC                      int 03
:00436C8A CC                      int 03
:00436C8B CC                      int 03
:00436C8C CC                      int 03
:00436C8D CC                      int 03
:00436C8E CC                      int 03
:00436C8F CC                      int 03

* Referenced by a CALL at Addresses:
|:00433D8C   , :0043A94C   , :0043A958   , :0043A964   , :0043A970   
|:0043A97C   , :0043FD6F   , :0043FD7B   , :0043FD87   , :0043FD93   
|:0043FD9F   , :0045CBAD   , :00460A68   
|
:00436C90 55                      push ebp
:00436C91 8BEC                    mov ebp, esp
:00436C93 51                      push ecx
:00436C94 894DFC                  mov dword ptr [ebp-04], ecx
:00436C97 8B4508                  mov eax, dword ptr [ebp+08]
:00436C9A 25FF000000              and eax, 000000FF
:00436C9F F7D0                    not eax
:00436CA1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436CA4 8A511B                  mov dl, byte ptr [ecx+1B]
:00436CA7 22D0                    and dl, al
:00436CA9 8B45FC                  mov eax, dword ptr [ebp-04]
:00436CAC 88501B                  mov byte ptr [eax+1B], dl
:00436CAF 8BE5                    mov esp, ebp
:00436CB1 5D                      pop ebp
:00436CB2 C20400                  ret 0004


:00436CB5 CC                      int 03
:00436CB6 CC                      int 03
:00436CB7 CC                      int 03
:00436CB8 CC                      int 03
:00436CB9 CC                      int 03
:00436CBA CC                      int 03
:00436CBB CC                      int 03
:00436CBC CC                      int 03
:00436CBD CC                      int 03
:00436CBE CC                      int 03
:00436CBF CC                      int 03

* Referenced by a CALL at Addresses:
|:00433E5E   , :0043AC60   
|
:00436CC0 55                      push ebp
:00436CC1 8BEC                    mov ebp, esp
:00436CC3 51                      push ecx
:00436CC4 894DFC                  mov dword ptr [ebp-04], ecx
:00436CC7 8B45FC                  mov eax, dword ptr [ebp-04]
:00436CCA 8A4D08                  mov cl, byte ptr [ebp+08]
:00436CCD 884831                  mov byte ptr [eax+31], cl
:00436CD0 8BE5                    mov esp, ebp
:00436CD2 5D                      pop ebp
:00436CD3 C20400                  ret 0004


:00436CD6 CC                      int 03
:00436CD7 CC                      int 03
:00436CD8 CC                      int 03
:00436CD9 CC                      int 03
:00436CDA CC                      int 03
:00436CDB CC                      int 03
:00436CDC CC                      int 03
:00436CDD CC                      int 03
:00436CDE CC                      int 03
:00436CDF CC                      int 03

* Referenced by a CALL at Addresses:
|:00433E6A   , :0045D0A8   
|
:00436CE0 55                      push ebp
:00436CE1 8BEC                    mov ebp, esp
:00436CE3 51                      push ecx
:00436CE4 894DFC                  mov dword ptr [ebp-04], ecx
:00436CE7 8B45FC                  mov eax, dword ptr [ebp-04]
:00436CEA 8A4D08                  mov cl, byte ptr [ebp+08]
:00436CED 884832                  mov byte ptr [eax+32], cl
:00436CF0 8BE5                    mov esp, ebp
:00436CF2 5D                      pop ebp
:00436CF3 C20400                  ret 0004


:00436CF6 CC                      int 03
:00436CF7 CC                      int 03
:00436CF8 CC                      int 03
:00436CF9 CC                      int 03
:00436CFA CC                      int 03
:00436CFB CC                      int 03
:00436CFC CC                      int 03
:00436CFD CC                      int 03
:00436CFE CC                      int 03
:00436CFF CC                      int 03

* Referenced by a CALL at Addresses:
|:00433EA4   , :00434288   , :00434723   , :00434888   , :00434B4D   
|:0044EF38   , :0044F1E1   , :0045F195   , :0045FAC7   , :00460404   
|
:00436D00 55                      push ebp
:00436D01 8BEC                    mov ebp, esp
:00436D03 51                      push ecx
:00436D04 894DFC                  mov dword ptr [ebp-04], ecx
:00436D07 8B45FC                  mov eax, dword ptr [ebp-04]
:00436D0A 8A4D08                  mov cl, byte ptr [ebp+08]
:00436D0D 88480B                  mov byte ptr [eax+0B], cl
:00436D10 8BE5                    mov esp, ebp
:00436D12 5D                      pop ebp
:00436D13 C20400                  ret 0004


:00436D16 CC                      int 03
:00436D17 CC                      int 03
:00436D18 CC                      int 03
:00436D19 CC                      int 03
:00436D1A CC                      int 03
:00436D1B CC                      int 03
:00436D1C CC                      int 03
:00436D1D CC                      int 03
:00436D1E CC                      int 03
:00436D1F CC                      int 03

* Referenced by a CALL at Address:
|:00433F6D   
|
:00436D20 55                      push ebp
:00436D21 8BEC                    mov ebp, esp
:00436D23 51                      push ecx
:00436D24 894DFC                  mov dword ptr [ebp-04], ecx
:00436D27 8B45FC                  mov eax, dword ptr [ebp-04]
:00436D2A 8A4D08                  mov cl, byte ptr [ebp+08]
:00436D2D 884828                  mov byte ptr [eax+28], cl
:00436D30 8BE5                    mov esp, ebp
:00436D32 5D                      pop ebp
:00436D33 C20400                  ret 0004


:00436D36 CC                      int 03
:00436D37 CC                      int 03
:00436D38 CC                      int 03
:00436D39 CC                      int 03
:00436D3A CC                      int 03
:00436D3B CC                      int 03
:00436D3C CC                      int 03
:00436D3D CC                      int 03
:00436D3E CC                      int 03
:00436D3F CC                      int 03

* Referenced by a CALL at Address:
|:00433F85   
|
:00436D40 55                      push ebp
:00436D41 8BEC                    mov ebp, esp
:00436D43 51                      push ecx
:00436D44 894DFC                  mov dword ptr [ebp-04], ecx
:00436D47 8B45FC                  mov eax, dword ptr [ebp-04]
:00436D4A 8A4D08                  mov cl, byte ptr [ebp+08]
:00436D4D 884829                  mov byte ptr [eax+29], cl
:00436D50 8BE5                    mov esp, ebp
:00436D52 5D                      pop ebp
:00436D53 C20400                  ret 0004


:00436D56 CC                      int 03
:00436D57 CC                      int 03
:00436D58 CC                      int 03
:00436D59 CC                      int 03
:00436D5A CC                      int 03
:00436D5B CC                      int 03
:00436D5C CC                      int 03
:00436D5D CC                      int 03
:00436D5E CC                      int 03
:00436D5F CC                      int 03

* Referenced by a CALL at Address:
|:00433F79   
|
:00436D60 55                      push ebp
:00436D61 8BEC                    mov ebp, esp
:00436D63 51                      push ecx
:00436D64 894DFC                  mov dword ptr [ebp-04], ecx
:00436D67 8B45FC                  mov eax, dword ptr [ebp-04]
:00436D6A 8A4D08                  mov cl, byte ptr [ebp+08]
:00436D6D 88482A                  mov byte ptr [eax+2A], cl
:00436D70 8BE5                    mov esp, ebp
:00436D72 5D                      pop ebp
:00436D73 C20400                  ret 0004


:00436D76 CC                      int 03
:00436D77 CC                      int 03
:00436D78 CC                      int 03
:00436D79 CC                      int 03
:00436D7A CC                      int 03
:00436D7B CC                      int 03
:00436D7C CC                      int 03
:00436D7D CC                      int 03
:00436D7E CC                      int 03
:00436D7F CC                      int 03

* Referenced by a CALL at Address:
|:00433F9D   
|
:00436D80 55                      push ebp
:00436D81 8BEC                    mov ebp, esp
:00436D83 51                      push ecx
:00436D84 894DFC                  mov dword ptr [ebp-04], ecx
:00436D87 8B45FC                  mov eax, dword ptr [ebp-04]
:00436D8A 8A4D08                  mov cl, byte ptr [ebp+08]
:00436D8D 88482C                  mov byte ptr [eax+2C], cl
:00436D90 8BE5                    mov esp, ebp
:00436D92 5D                      pop ebp
:00436D93 C20400                  ret 0004


:00436D96 CC                      int 03
:00436D97 CC                      int 03
:00436D98 CC                      int 03
:00436D99 CC                      int 03
:00436D9A CC                      int 03
:00436D9B CC                      int 03
:00436D9C CC                      int 03
:00436D9D CC                      int 03
:00436D9E CC                      int 03
:00436D9F CC                      int 03

* Referenced by a CALL at Addresses:
|:004342AA   , :00438961   , :00440F82   , :00440FA6   
|
:00436DA0 55                      push ebp
:00436DA1 8BEC                    mov ebp, esp
:00436DA3 51                      push ecx
:00436DA4 894DFC                  mov dword ptr [ebp-04], ecx
:00436DA7 8B45FC                  mov eax, dword ptr [ebp-04]
:00436DAA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436DAD 894820                  mov dword ptr [eax+20], ecx
:00436DB0 8BE5                    mov esp, ebp
:00436DB2 5D                      pop ebp
:00436DB3 C20400                  ret 0004


:00436DB6 CC                      int 03
:00436DB7 CC                      int 03
:00436DB8 CC                      int 03
:00436DB9 CC                      int 03
:00436DBA CC                      int 03
:00436DBB CC                      int 03
:00436DBC CC                      int 03
:00436DBD CC                      int 03
:00436DBE CC                      int 03
:00436DBF CC                      int 03

* Referenced by a CALL at Addresses:
|:004343C5   , :00434528   , :0043466D   , :004352CD   , :00438F79   
|:00440814   , :0045CBA3   , :0045EB04   , :0045FC6B   , :0045FE8F   
|:00460535   , :0046059C   , :0046076A   
|
:00436DC0 55                      push ebp
:00436DC1 8BEC                    mov ebp, esp
:00436DC3 51                      push ecx
:00436DC4 894DFC                  mov dword ptr [ebp-04], ecx
:00436DC7 8B4508                  mov eax, dword ptr [ebp+08]
:00436DCA 25FF000000              and eax, 000000FF
:00436DCF F7D0                    not eax
:00436DD1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436DD4 8A510C                  mov dl, byte ptr [ecx+0C]
:00436DD7 22D0                    and dl, al
:00436DD9 8B45FC                  mov eax, dword ptr [ebp-04]
:00436DDC 88500C                  mov byte ptr [eax+0C], dl
:00436DDF 8BE5                    mov esp, ebp
:00436DE1 5D                      pop ebp
:00436DE2 C20400                  ret 0004


:00436DE5 CC                      int 03
:00436DE6 CC                      int 03
:00436DE7 CC                      int 03
:00436DE8 CC                      int 03
:00436DE9 CC                      int 03
:00436DEA CC                      int 03
:00436DEB CC                      int 03
:00436DEC CC                      int 03
:00436DED CC                      int 03
:00436DEE CC                      int 03
:00436DEF CC                      int 03

* Referenced by a CALL at Addresses:
|:004342E7   , :00434515   , :0043465A   , :00434981   , :00435303   
|:004356D6   , :00435845   , :0043585C   , :00435987   , :004386BE   
|:00438905   , :00438928   , :00438978   , :00438E62   , :00438FBE   
|:00439173   , :00439191   , :00439328   , :0044070E   , :0044072E   
|:004407F2   , :00440803   , :0044F728   , :0044F744   , :004510B1   
|:00451901   , :00451E1D   , :00452355   , :0045247C   , :00452538   
|:004525F7   , :004526A9   , :004526EE   , :0045294E   , :00452C4A   
|:0045345C   , :0045346D   , :0045576D   , :0045673D   , :00456789   
|:0045679B   , :0045D74A   , :0045D76A   , :0045E0FD   , :0045E2DC   
|:0045E703   , :0045E7F8   , :0045E80F   , :00460C74   , :00460DAF   
|
:00436DF0 55                      push ebp
:00436DF1 8BEC                    mov ebp, esp
:00436DF3 51                      push ecx
:00436DF4 894DFC                  mov dword ptr [ebp-04], ecx
:00436DF7 8B45FC                  mov eax, dword ptr [ebp-04]
:00436DFA 33C9                    xor ecx, ecx
:00436DFC 8A480C                  mov cl, byte ptr [eax+0C]
:00436DFF 8B5508                  mov edx, dword ptr [ebp+08]
:00436E02 81E2FF000000            and edx, 000000FF
:00436E08 23CA                    and ecx, edx
:00436E0A 8B4508                  mov eax, dword ptr [ebp+08]
:00436E0D 25FF000000              and eax, 000000FF
:00436E12 33D2                    xor edx, edx
:00436E14 3BC8                    cmp ecx, eax
:00436E16 0F94C2                  sete dl
:00436E19 8BC2                    mov eax, edx
:00436E1B 8BE5                    mov esp, ebp
:00436E1D 5D                      pop ebp
:00436E1E C20400                  ret 0004


:00436E21 CC                      int 03
:00436E22 CC                      int 03
:00436E23 CC                      int 03
:00436E24 CC                      int 03
:00436E25 CC                      int 03
:00436E26 CC                      int 03
:00436E27 CC                      int 03
:00436E28 CC                      int 03
:00436E29 CC                      int 03
:00436E2A CC                      int 03
:00436E2B CC                      int 03
:00436E2C CC                      int 03
:00436E2D CC                      int 03
:00436E2E CC                      int 03
:00436E2F CC                      int 03

* Referenced by a CALL at Address:
|:004349AD   
|
:00436E30 55                      push ebp
:00436E31 8BEC                    mov ebp, esp
:00436E33 51                      push ecx
:00436E34 894DFC                  mov dword ptr [ebp-04], ecx
:00436E37 8B4508                  mov eax, dword ptr [ebp+08]
:00436E3A 50                      push eax
:00436E3B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436E3E 81C18C320000            add ecx, 0000328C
:00436E44 E807000000              call 00436E50
:00436E49 8BE5                    mov esp, ebp
:00436E4B 5D                      pop ebp
:00436E4C C20400                  ret 0004


:00436E4F CC                      int 03

* Referenced by a CALL at Addresses:
|:00436E44   , :00436EB4   
|
:00436E50 55                      push ebp
:00436E51 8BEC                    mov ebp, esp
:00436E53 83EC08                  sub esp, 00000008
:00436E56 894DFC                  mov dword ptr [ebp-04], ecx
:00436E59 8B45FC                  mov eax, dword ptr [ebp-04]
:00436E5C 33C9                    xor ecx, ecx
:00436E5E 668B08                  mov cx, word ptr [eax]
:00436E61 83E101                  and ecx, 00000001
:00436E64 85C9                    test ecx, ecx
:00436E66 741F                    je 00436E87
:00436E68 8B5508                  mov edx, dword ptr [ebp+08]
:00436E6B 81E2FFFF0000            and edx, 0000FFFF
:00436E71 8B45FC                  mov eax, dword ptr [ebp-04]
:00436E74 33C9                    xor ecx, ecx
:00436E76 668B4802                mov cx, word ptr [eax+02]
:00436E7A 3BD1                    cmp edx, ecx
:00436E7C 7509                    jne 00436E87
:00436E7E C745F801000000          mov [ebp-08], 00000001
:00436E85 EB07                    jmp 00436E8E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436E66(C), :00436E7C(C)
|
:00436E87 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436E85(U)
|
:00436E8E 8B45F8                  mov eax, dword ptr [ebp-08]
:00436E91 8BE5                    mov esp, ebp
:00436E93 5D                      pop ebp
:00436E94 C20400                  ret 0004


:00436E97 CC                      int 03
:00436E98 CC                      int 03
:00436E99 CC                      int 03
:00436E9A CC                      int 03
:00436E9B CC                      int 03
:00436E9C CC                      int 03
:00436E9D CC                      int 03
:00436E9E CC                      int 03
:00436E9F CC                      int 03

* Referenced by a CALL at Address:
|:004349D6   
|
:00436EA0 55                      push ebp
:00436EA1 8BEC                    mov ebp, esp
:00436EA3 51                      push ecx
:00436EA4 894DFC                  mov dword ptr [ebp-04], ecx
:00436EA7 8B4508                  mov eax, dword ptr [ebp+08]
:00436EAA 50                      push eax
:00436EAB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436EAE 81C190320000            add ecx, 00003290
:00436EB4 E897FFFFFF              call 00436E50
:00436EB9 8BE5                    mov esp, ebp
:00436EBB 5D                      pop ebp
:00436EBC C20400                  ret 0004


:00436EBF CC                      int 03

* Referenced by a CALL at Addresses:
|:004349BD   , :0045F22E   
|
:00436EC0 55                      push ebp
:00436EC1 8BEC                    mov ebp, esp
:00436EC3 51                      push ecx
:00436EC4 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00436EC7 6A04                    push 00000004
:00436EC9 8D4508                  lea eax, dword ptr [ebp+08]
:00436ECC 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00436ECD 6A05                    push 00000005
:00436ECF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436ED2 E86E60FDFF              call 0040CF45
:00436ED7 8BE5                    mov esp, ebp
:00436ED9 5D                      pop ebp
:00436EDA C20400                  ret 0004


:00436EDD CC                      int 03
:00436EDE CC                      int 03
:00436EDF CC                      int 03

* Referenced by a CALL at Address:
|:004349E6   
|
:00436EE0 55                      push ebp
:00436EE1 8BEC                    mov ebp, esp
:00436EE3 51                      push ecx
:00436EE4 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00436EE7 6A04                    push 00000004
:00436EE9 8D4508                  lea eax, dword ptr [ebp+08]
:00436EEC 50                      push eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00436EED 6A06                    push 00000006
:00436EEF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00436EF2 E84E60FDFF              call 0040CF45
:00436EF7 8BE5                    mov esp, ebp
:00436EF9 5D                      pop ebp
:00436EFA C20400                  ret 0004


:00436EFD CC                      int 03
:00436EFE CC                      int 03
:00436EFF CC                      int 03

* Referenced by a CALL at Addresses:
|:004348EB   , :0045161D   
|
:00436F00 55                      push ebp
:00436F01 8BEC                    mov ebp, esp
:00436F03 51                      push ecx
:00436F04 894DFC                  mov dword ptr [ebp-04], ecx
:00436F07 8B45FC                  mov eax, dword ptr [ebp-04]
:00436F0A 8A4007                  mov al, byte ptr [eax+07]
:00436F0D 8BE5                    mov esp, ebp
:00436F0F 5D                      pop ebp
:00436F10 C3                      ret


:00436F11 CC                      int 03
:00436F12 CC                      int 03
:00436F13 CC                      int 03
:00436F14 CC                      int 03
:00436F15 CC                      int 03
:00436F16 CC                      int 03
:00436F17 CC                      int 03
:00436F18 CC                      int 03
:00436F19 CC                      int 03
:00436F1A CC                      int 03
:00436F1B CC                      int 03
:00436F1C CC                      int 03
:00436F1D CC                      int 03
:00436F1E CC                      int 03
:00436F1F CC                      int 03

* Referenced by a CALL at Addresses:
|:00409F7E   , :0040A481   , :00411F1A   , :00412171   , :00412212   
|:0041DDAD   , :0041EEBD   , :00434959   , :004391C6   , :00439200   
|:004605AD   
|
:00436F20 55                      push ebp
:00436F21 8BEC                    mov ebp, esp
:00436F23 51                      push ecx
:00436F24 894DFC                  mov dword ptr [ebp-04], ecx
:00436F27 8B45FC                  mov eax, dword ptr [ebp-04]
:00436F2A 8A4D08                  mov cl, byte ptr [ebp+08]
:00436F2D 884807                  mov byte ptr [eax+07], cl
:00436F30 8BE5                    mov esp, ebp
:00436F32 5D                      pop ebp
:00436F33 C20400                  ret 0004


:00436F36 CC                      int 03
:00436F37 CC                      int 03
:00436F38 CC                      int 03
:00436F39 CC                      int 03
:00436F3A CC                      int 03
:00436F3B CC                      int 03
:00436F3C CC                      int 03
:00436F3D CC                      int 03
:00436F3E CC                      int 03
:00436F3F CC                      int 03

* Referenced by a CALL at Addresses:
|:00434994   , :00434AD6   , :00434B0F   , :0045C1B1   , :0045E562   
|:0045E605   , :0045E69F   , :00460C82   , :00460C9B   , :00460DF5   
|
:00436F40 55                      push ebp
:00436F41 8BEC                    mov ebp, esp
:00436F43 51                      push ecx
:00436F44 894DFC                  mov dword ptr [ebp-04], ecx
:00436F47 8B45FC                  mov eax, dword ptr [ebp-04]
:00436F4A 8A4001                  mov al, byte ptr [eax+01]
:00436F4D 8BE5                    mov esp, ebp
:00436F4F 5D                      pop ebp
:00436F50 C3                      ret


:00436F51 CC                      int 03
:00436F52 CC                      int 03
:00436F53 CC                      int 03
:00436F54 CC                      int 03
:00436F55 CC                      int 03
:00436F56 CC                      int 03
:00436F57 CC                      int 03
:00436F58 CC                      int 03
:00436F59 CC                      int 03
:00436F5A CC                      int 03
:00436F5B CC                      int 03
:00436F5C CC                      int 03
:00436F5D CC                      int 03
:00436F5E CC                      int 03
:00436F5F CC                      int 03

* Referenced by a CALL at Addresses:
|:00434BCB   , :00434BEB   , :00435CB9   
|
:00436F60 55                      push ebp
:00436F61 8BEC                    mov ebp, esp
:00436F63 51                      push ecx
:00436F64 894DFC                  mov dword ptr [ebp-04], ecx
:00436F67 8B45FC                  mov eax, dword ptr [ebp-04]
:00436F6A 33C9                    xor ecx, ecx
:00436F6C 8A481D                  mov cl, byte ptr [eax+1D]
:00436F6F 8BC1                    mov eax, ecx
:00436F71 83E801                  sub eax, 00000001
:00436F74 F7D8                    neg eax
:00436F76 1BC0                    sbb eax, eax
:00436F78 40                      inc eax
:00436F79 8BE5                    mov esp, ebp
:00436F7B 5D                      pop ebp
:00436F7C C3                      ret


:00436F7D CC                      int 03
:00436F7E CC                      int 03
:00436F7F CC                      int 03

* Referenced by a CALL at Addresses:
|:00434C61   , :00435403   , :00436964   , :0043871B   , :0043AB67   
|:004402D4   , :0044140C   , :004451AD   , :0044A303   , :00451D07   
|:00451D28   , :00452450   
|
:00436F80 55                      push ebp
:00436F81 8BEC                    mov ebp, esp
:00436F83 51                      push ecx
:00436F84 894DFC                  mov dword ptr [ebp-04], ecx
:00436F87 8B45FC                  mov eax, dword ptr [ebp-04]
:00436F8A 8B08                    mov ecx, dword ptr [eax]
:00436F8C 6BC950                  imul ecx, 00000050
:00436F8F 81C1787F4900            add ecx, 00497F78
:00436F95 E806C2FCFF              call 004031A0
:00436F9A 8BE5                    mov esp, ebp
:00436F9C 5D                      pop ebp
:00436F9D C3                      ret


:00436F9E CC                      int 03
:00436F9F CC                      int 03

* Referenced by a CALL at Addresses:
|:00435268   , :00441281   , :0044CCFF   , :0044CE45   , :0044CF8E   
|:0044F17A   , :0044F4AD   , :00450FC0   , :0045104B   , :00451967   
|:00451A2B   , :00451CDC   , :00451E2D   , :00452100   , :00452391   
|:00455758   , :004557D4   , :0045589B   , :00455906   , :00456B59   
|
:00436FA0 55                      push ebp
:00436FA1 8BEC                    mov ebp, esp
:00436FA3 51                      push ecx
:00436FA4 8B4508                  mov eax, dword ptr [ebp+08]
:00436FA7 33C9                    xor ecx, ecx
:00436FA9 8A08                    mov cl, byte ptr [eax]
:00436FAB 8B550C                  mov edx, dword ptr [ebp+0C]
:00436FAE 33C0                    xor eax, eax
:00436FB0 8A02                    mov al, byte ptr [edx]
:00436FB2 3BC8                    cmp ecx, eax
:00436FB4 751D                    jne 00436FD3
:00436FB6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00436FB9 33D2                    xor edx, edx
:00436FBB 8A5101                  mov dl, byte ptr [ecx+01]
:00436FBE 8B450C                  mov eax, dword ptr [ebp+0C]
:00436FC1 33C9                    xor ecx, ecx
:00436FC3 8A4801                  mov cl, byte ptr [eax+01]
:00436FC6 3BD1                    cmp edx, ecx
:00436FC8 7509                    jne 00436FD3
:00436FCA C745FC01000000          mov [ebp-04], 00000001
:00436FD1 EB07                    jmp 00436FDA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00436FB4(C), :00436FC8(C)
|
:00436FD3 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00436FD1(U)
|
:00436FDA 8B45FC                  mov eax, dword ptr [ebp-04]
:00436FDD 8BE5                    mov esp, ebp
:00436FDF 5D                      pop ebp
:00436FE0 C3                      ret


:00436FE1 CC                      int 03
:00436FE2 CC                      int 03
:00436FE3 CC                      int 03
:00436FE4 CC                      int 03
:00436FE5 CC                      int 03
:00436FE6 CC                      int 03
:00436FE7 CC                      int 03
:00436FE8 CC                      int 03
:00436FE9 CC                      int 03
:00436FEA CC                      int 03
:00436FEB CC                      int 03
:00436FEC CC                      int 03
:00436FED CC                      int 03
:00436FEE CC                      int 03
:00436FEF CC                      int 03

* Referenced by a CALL at Addresses:
|:004354C1   , :0044CF56   , :0044D033   , :0044E508   , :00456601   
|:00456675   
|
:00436FF0 55                      push ebp
:00436FF1 8BEC                    mov ebp, esp
:00436FF3 51                      push ecx
:00436FF4 894DFC                  mov dword ptr [ebp-04], ecx
:00436FF7 8B45FC                  mov eax, dword ptr [ebp-04]
:00436FFA 8A4805                  mov cl, byte ptr [eax+05]
:00436FFD 80F101                  xor cl, 01
:00437000 8B55FC                  mov edx, dword ptr [ebp-04]
:00437003 884A05                  mov byte ptr [edx+05], cl
:00437006 8BE5                    mov esp, ebp
:00437008 5D                      pop ebp
:00437009 C3                      ret


:0043700A CC                      int 03
:0043700B CC                      int 03
:0043700C CC                      int 03
:0043700D CC                      int 03
:0043700E CC                      int 03
:0043700F CC                      int 03
:00437010 55                      push ebp
:00437011 8BEC                    mov ebp, esp
:00437013 E802000000              call 0043701A
:00437018 5D                      pop ebp
:00437019 C3                      ret



* Referenced by a CALL at Address:
|:00437013   
|
:0043701A 55                      push ebp
:0043701B 8BEC                    mov ebp, esp
:0043701D 68F0564000              push 004056F0

* Possible Reference to String Resource ID=00006: ""
                                  |
:00437022 6A06                    push 00000006

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00437024 6A02                    push 00000002
:00437026 68C0484B00              push 004B48C0
:0043702B E88056FDFF              call 0040C6B0
:00437030 5D                      pop ebp
:00437031 C3                      ret



* Referenced by a CALL at Addresses:
|:0044036F   , :004551A7   , :004554D8   
|
:00437032 55                      push ebp
:00437033 8BEC                    mov ebp, esp
:00437035 83EC28                  sub esp, 00000028
:00437038 56                      push esi
:00437039 8B4508                  mov eax, dword ptr [ebp+08]
:0043703C 25FF000000              and eax, 000000FF
:00437041 6BC024                  imul eax, 00000024
:00437044 05B83B4B00              add eax, 004B3BB8
:00437049 8945F0                  mov dword ptr [ebp-10], eax
:0043704C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043704F E88CF9FFFF              call 004369E0
:00437054 6BC050                  imul eax, 00000050
:00437057 05787F4900              add eax, 00497F78
:0043705C 8945F4                  mov dword ptr [ebp-0C], eax
:0043705F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00437062 E8D9ABFFFF              call 00431C40
:00437067 668B08                  mov cx, word ptr [eax]
:0043706A 66894DFC                mov word ptr [ebp-04], cx
:0043706E 8B5518                  mov edx, dword ptr [ebp+18]
:00437071 81E2FF000000            and edx, 000000FF
:00437077 81FAFF000000            cmp edx, 000000FF
:0043707D 0F848D000000            je 00437110
:00437083 8B4514                  mov eax, dword ptr [ebp+14]
:00437086 25FF000000              and eax, 000000FF
:0043708B 3DFF000000              cmp eax, 000000FF
:00437090 747E                    je 00437110
:00437092 8B4D14                  mov ecx, dword ptr [ebp+14]
:00437095 81E1FF000000            and ecx, 000000FF
:0043709B 6BC924                  imul ecx, 00000024
:0043709E 81C1B83B4B00            add ecx, 004B3BB8
:004370A4 894DEC                  mov dword ptr [ebp-14], ecx
:004370A7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004370AA E831F9FFFF              call 004369E0
:004370AF 6BC050                  imul eax, 00000050
:004370B2 05787F4900              add eax, 00497F78
:004370B7 8945E8                  mov dword ptr [ebp-18], eax
:004370BA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004370BD E809BEFFFF              call 00432ECB
:004370C2 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004370C4 B90A000000              mov ecx, 0000000A
:004370C9 F7F1                    div ecx
:004370CB 83C014                  add eax, 00000014
:004370CE 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004370D1 6A02                    push 00000002
:004370D3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004370D6 E895F9FFFF              call 00436A70
:004370DB 85C0                    test eax, eax
:004370DD 752F                    jne 0043710E
:004370DF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004370E2 E8A9FAFFFF              call 00436B90
:004370E7 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:004370E9 68C8000000              push 000000C8
:004370EE E8BD120400              call 004783B0
:004370F3 83C404                  add esp, 00000004
:004370F6 3BF0                    cmp esi, eax
:004370F8 7614                    jbe 0043710E

* Possible Reference to String Resource ID=00006: ""
                                  |
:004370FA 6A06                    push 00000006
:004370FC E8AF120400              call 004783B0
:00437101 83C404                  add esp, 00000004
:00437104 8B55F8                  mov edx, dword ptr [ebp-08]
:00437107 8D440205                lea eax, dword ptr [edx+eax+05]
:0043710B 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004370DD(C), :004370F8(C)
|
:0043710E EB35                    jmp 00437145

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043707D(C), :00437090(C)
|
:00437110 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437113 81E1FF000000            and ecx, 000000FF
:00437119 85C9                    test ecx, ecx
:0043711B 7509                    jne 00437126

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0043711D C745DC14000000          mov [ebp-24], 00000014
:00437124 EB19                    jmp 0043713F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043711B(C)
|
:00437126 8B550C                  mov edx, dword ptr [ebp+0C]
:00437129 81E2FF000000            and edx, 000000FF
:0043712F 83EA01                  sub edx, 00000001
:00437132 F7DA                    neg edx
:00437134 1BD2                    sbb edx, edx
:00437136 83E228                  and edx, 00000028
:00437139 83C228                  add edx, 00000028
:0043713C 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437124(U)
|
:0043713F 8B45DC                  mov eax, dword ptr [ebp-24]
:00437142 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043710E(U)
|
:00437145 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00437148 E8B3C1FCFF              call 00403300
:0043714D 8B75F8                  mov esi, dword ptr [ebp-08]
:00437150 03F0                    add esi, eax
:00437152 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00437155 E8C1ACFCFF              call 00401E1B
:0043715A 3BF0                    cmp esi, eax
:0043715C 7617                    jbe 00437175
:0043715E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00437161 E8B5ACFCFF              call 00401E1B
:00437166 8BF0                    mov esi, eax
:00437168 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043716B E890C1FCFF              call 00403300
:00437170 2BF0                    sub esi, eax
:00437172 8975F8                  mov dword ptr [ebp-08], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043715C(C)
|
:00437175 8B4D10                  mov ecx, dword ptr [ebp+10]
:00437178 81E1FF000000            and ecx, 000000FF
:0043717E 85C9                    test ecx, ecx
:00437180 0F8497010000            je 0043731D
:00437186 8B5510                  mov edx, dword ptr [ebp+10]
:00437189 81E2FF000000            and edx, 000000FF
:0043718F 85D2                    test edx, edx
:00437191 7446                    je 004371D9
:00437193 8B4518                  mov eax, dword ptr [ebp+18]
:00437196 25FF000000              and eax, 000000FF
:0043719B 3DFF000000              cmp eax, 000000FF
:004371A0 751D                    jne 004371BF
:004371A2 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004371A4 6A03                    push 00000003
:004371A6 68FF000000              push 000000FF
:004371AB 8A4D08                  mov cl, byte ptr [ebp+08]
:004371AE 51                      push ecx
:004371AF 8A5514                  mov dl, byte ptr [ebp+14]
:004371B2 52                      push edx
:004371B3 B958494B00              mov ecx, 004B4958
:004371B8 E8D3750100              call 0044E790
:004371BD EB1A                    jmp 004371D9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004371A0(C)
|
:004371BF 6A01                    push 00000001

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004371C1 6A02                    push 00000002
:004371C3 8A4518                  mov al, byte ptr [ebp+18]
:004371C6 50                      push eax
:004371C7 8A4D08                  mov cl, byte ptr [ebp+08]
:004371CA 51                      push ecx
:004371CB 8A5514                  mov dl, byte ptr [ebp+14]
:004371CE 52                      push edx
:004371CF B958494B00              mov ecx, 004B4958
:004371D4 E8B7750100              call 0044E790

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437191(C), :004371BD(U)
|
:004371D9 B978294B00              mov ecx, 004B2978
:004371DE E8CD56FDFF              call 0040C8B0
:004371E3 83E010                  and eax, 00000010
:004371E6 85C0                    test eax, eax
:004371E8 7535                    jne 0043721F
:004371EA C645E400                mov [ebp-1C], 00
:004371EE EB08                    jmp 004371F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437218(U)
|
:004371F0 8A45E4                  mov al, byte ptr [ebp-1C]
:004371F3 0401                    add al, 01
:004371F5 8845E4                  mov byte ptr [ebp-1C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004371EE(U)
|
:004371F8 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004371FB 81E1FF000000            and ecx, 000000FF
:00437201 83F903                  cmp ecx, 00000003
:00437204 7D14                    jge 0043721A
:00437206 6A0F                    push 0000000F
:00437208 8B55F8                  mov edx, dword ptr [ebp-08]
:0043720B 52                      push edx
:0043720C 8A4508                  mov al, byte ptr [ebp+08]
:0043720F 50                      push eax
:00437210 E8F62B0100              call 00449E0B
:00437215 83C40C                  add esp, 0000000C
:00437218 EBD6                    jmp 004371F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437204(C)
|
:0043721A E9E8000000              jmp 00437307

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004371E8(C)
|
:0043721F 8A4D08                  mov cl, byte ptr [ebp+08]
:00437222 51                      push ecx
:00437223 8D55E0                  lea edx, dword ptr [ebp-20]
:00437226 52                      push edx
:00437227 E8802E0100              call 0044A0AC
:0043722C 83C408                  add esp, 00000008
:0043722F E8F1000000              call 00437325
:00437234 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437237 81E1FF000000            and ecx, 000000FF
:0043723D 6BC924                  imul ecx, 00000024
:00437240 81C1B83B4B00            add ecx, 004B3BB8
:00437246 E8C556FDFF              call 0040C910
:0043724B 85C0                    test eax, eax
:0043724D 7410                    je 0043725F
:0043724F 33C0                    xor eax, eax
:00437251 A0CC484B00              mov al, byte ptr [004B48CC]
:00437256 8D4C000E                lea ecx, dword ptr [eax+eax+0E]
:0043725A 894DD8                  mov dword ptr [ebp-28], ecx
:0043725D EB0F                    jmp 0043726E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043724D(C)
|
:0043725F 33D2                    xor edx, edx
:00437261 8A15CC484B00            mov dl, byte ptr [004B48CC]
:00437267 8D44122A                lea eax, dword ptr [edx+edx+2A]
:0043726B 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043725D(U)
|
:0043726E 8A4DD8                  mov cl, byte ptr [ebp-28]
:00437271 884DE0                  mov byte ptr [ebp-20], cl
:00437274 33D2                    xor edx, edx
:00437276 8A159D4E4B00            mov dl, byte ptr [004B4E9D]
:0043727C 8D441206                lea eax, dword ptr [edx+edx+06]
:00437280 50                      push eax
:00437281 B9A83B4B00              mov ecx, 004B3BA8
:00437286 E88586FEFF              call 0041F910
:0043728B 8A4D08                  mov cl, byte ptr [ebp+08]
:0043728E 51                      push ecx
:0043728F 668B55E0                mov dx, word ptr [ebp-20]
:00437293 52                      push edx
:00437294 E8BF2E0100              call 0044A158
:00437299 83C408                  add esp, 00000008
:0043729C E82F83FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004372A1 6A03                    push 00000003
:004372A3 E88E84FFFF              call 0042F736
:004372A8 83C404                  add esp, 00000004
:004372AB 33C0                    xor eax, eax
:004372AD A09D4E4B00              mov al, byte ptr [004B4E9D]
:004372B2 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:004372B6 51                      push ecx
:004372B7 B9A83B4B00              mov ecx, 004B3BA8
:004372BC E84F86FEFF              call 0041F910
:004372C1 6881000000              push 00000081
:004372C6 8B55F8                  mov edx, dword ptr [ebp-08]
:004372C9 52                      push edx
:004372CA 8A4508                  mov al, byte ptr [ebp+08]
:004372CD 50                      push eax
:004372CE 668B4DE0                mov cx, word ptr [ebp-20]
:004372D2 51                      push ecx
:004372D3 E83A310100              call 0044A412
:004372D8 83C410                  add esp, 00000010
:004372DB E8F082FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004372E0 6A03                    push 00000003
:004372E2 E84F84FFFF              call 0042F736
:004372E7 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:004372EA 6A09                    push 00000009
:004372EC 6A21                    push 00000021
:004372EE 8A55E1                  mov dl, byte ptr [ebp-1F]
:004372F1 52                      push edx
:004372F2 33C0                    xor eax, eax
:004372F4 A0CC484B00              mov al, byte ptr [004B48CC]
:004372F9 83C006                  add eax, 00000006
:004372FC 50                      push eax
:004372FD B958494B00              mov ecx, 004B4958
:00437302 E841560100              call 0044C948

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043721A(U)
|
:00437307 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043730A E8F1BFFCFF              call 00403300
:0043730F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00437312 03C8                    add ecx, eax
:00437314 51                      push ecx
:00437315 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00437318 E839BFFFFF              call 00433256

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437180(C)
|
:0043731D 8A45F8                  mov al, byte ptr [ebp-08]
:00437320 5E                      pop esi
:00437321 8BE5                    mov esp, ebp
:00437323 5D                      pop ebp
:00437324 C3                      ret



* Referenced by a CALL at Addresses:
|:0043722F   , :00437EFB   , :00438316   , :00438553   , :0043D0B0   
|:0043EF2F   , :00441BA8   
|
:00437325 55                      push ebp
:00437326 8BEC                    mov ebp, esp
:00437328 51                      push ecx
:00437329 B958494B00              mov ecx, 004B4958
:0043732E E810760100              call 0044E943
:00437333 2B05941E4800            sub eax, dword ptr [00481E94]
:00437339 83C010                  add eax, 00000010
:0043733C 99                      cdq
:0043733D 83E20F                  and edx, 0000000F
:00437340 03C2                    add eax, edx
:00437342 C1F804                  sar eax, 04
:00437345 8945FC                  mov dword ptr [ebp-04], eax
:00437348 8B45FC                  mov eax, dword ptr [ebp-04]
:0043734B D1F8                    sar eax, 1
:0043734D A2CC484B00              mov byte ptr [004B48CC], al
:00437352 8BE5                    mov esp, ebp
:00437354 5D                      pop ebp
:00437355 C3                      ret



* Referenced by a CALL at Addresses:
|:0043CEC0   , :0043D788   , :0043DA5C   , :0043DD3B   , :0043DE29   
|:0043E1AF   , :0043E4CF   , :0043E79F   , :0043EA7D   , :0043EEB8   
|:00440535   , :00440B51   , :0045463C   , :00454E0F   
|
:00437356 55                      push ebp
:00437357 8BEC                    mov ebp, esp
:00437359 51                      push ecx
:0043735A 56                      push esi
:0043735B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043735E 81E1FF000000            and ecx, 000000FF
:00437364 6BC924                  imul ecx, 00000024
:00437367 81C1B83B4B00            add ecx, 004B3BB8
:0043736D E859BBFFFF              call 00432ECB
:00437372 8BF0                    mov esi, eax
:00437374 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437377 81E1FF000000            and ecx, 000000FF
:0043737D 6BC924                  imul ecx, 00000024
:00437380 81C1B83B4B00            add ecx, 004B3BB8
:00437386 E840BBFFFF              call 00432ECB
:0043738B 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043738D B903000000              mov ecx, 00000003
:00437392 F7F1                    div ecx
:00437394 3BC6                    cmp eax, esi
:00437396 1BD2                    sbb edx, edx
:00437398 F7DA                    neg edx
:0043739A 8955FC                  mov dword ptr [ebp-04], edx
:0043739D 8B45FC                  mov eax, dword ptr [ebp-04]
:004373A0 5E                      pop esi
:004373A1 8BE5                    mov esp, ebp
:004373A3 5D                      pop ebp
:004373A4 C3                      ret



* Referenced by a CALL at Addresses:
|:0043B47E   , :0043B722   , :0043BA2C   , :0043BC52   , :0043BE73   
|:0043C060   , :0043C281   , :0043C429   , :0043C5E6   , :0043C82E   
|:0043CAA4   , :0043CDC5   , :0043D2D7   , :0043D4F1   , :0043D6CC   
|:0043D988   , :0043DC5C   , :0043E0A7   , :0043E38F   , :0043E697   
|:0043E9A0   , :0043EDE7   , :0043F328   , :0043F4C3   , :0043F731   
|:0043F8B3   , :0043FAD5   , :0043FE43   , :0044027C   , :00440474   
|:00440689   , :004408BA   , :00440A9C   , :00440D26   , :00440EDE   
|:00452CE7   
|
:004373A5 55                      push ebp
:004373A6 8BEC                    mov ebp, esp
:004373A8 83EC18                  sub esp, 00000018
:004373AB 56                      push esi
:004373AC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004373AF 6BC924                  imul ecx, 00000024
:004373B2 81C1B83B4B00            add ecx, 004B3BB8
:004373B8 E823F6FFFF              call 004369E0
:004373BD 8BC8                    mov ecx, eax
:004373BF 6BC950                  imul ecx, 00000050
:004373C2 81C1787F4900            add ecx, 00497F78
:004373C8 E83CACFCFF              call 00402009
:004373CD 8845F4                  mov byte ptr [ebp-0C], al
:004373D0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004373D3 6BC924                  imul ecx, 00000024
:004373D6 81C1B83B4B00            add ecx, 004B3BB8
:004373DC E85FA8FFFF              call 00431C40
:004373E1 50                      push eax
:004373E2 E871840100              call 0044F858
:004373E7 83C404                  add esp, 00000004
:004373EA 8845EC                  mov byte ptr [ebp-14], al
:004373ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:004373F0 6BC931                  imul ecx, 00000031
:004373F3 81C1001D4B00            add ecx, 004B1D00
:004373F9 E842E3FCFF              call 00405740
:004373FE 8845F0                  mov byte ptr [ebp-10], al
:00437401 C645F8FF                mov [ebp-08], FF
:00437405 C745FC00000000          mov [ebp-04], 00000000
:0043740C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043740F 25FF000000              and eax, 000000FF
:00437414 3DFF000000              cmp eax, 000000FF
:00437419 741A                    je 00437435
:0043741B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043741E 81E1FF000000            and ecx, 000000FF
:00437424 6BC922                  imul ecx, 00000022
:00437427 81C1D0474900            add ecx, 004947D0
:0043742D E804C1FCFF              call 00403536
:00437432 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437419(C)
|
:00437435 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00437438 81E1FF000000            and ecx, 000000FF
:0043743E 81F9FF000000            cmp ecx, 000000FF
:00437444 7427                    je 0043746D
:00437446 8B55F8                  mov edx, dword ptr [ebp-08]
:00437449 81E2FF000000            and edx, 000000FF
:0043744F 8B45F0                  mov eax, dword ptr [ebp-10]
:00437452 25FF000000              and eax, 000000FF
:00437457 3BD0                    cmp edx, eax
:00437459 7412                    je 0043746D
:0043745B 837D1000                cmp dword ptr [ebp+10], 00000000
:0043745F 7405                    je 00437466
:00437461 E83B080000              call 00437CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043745F(C)
|
:00437466 33C0                    xor eax, eax
:00437468 E97E070000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437444(C), :00437459(C)
|
:0043746D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437470 894DE8                  mov dword ptr [ebp-18], ecx
:00437473 837DE840                cmp dword ptr [ebp-18], 00000040
:00437477 0F8769070000            ja 00437BE6
:0043747D 8B45E8                  mov eax, dword ptr [ebp-18]
:00437480 33D2                    xor edx, edx
:00437482 8A90607C4300            mov dl, byte ptr [eax+00437C60]
:00437488 FF2495F07B4300          jmp dword ptr [4*edx+00437BF0]
:0043748F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00437492 81E1FF000000            and ecx, 000000FF
:00437498 8B55F0                  mov edx, dword ptr [ebp-10]
:0043749B 81E2FF000000            and edx, 000000FF
:004374A1 3BCA                    cmp ecx, edx
:004374A3 7412                    je 004374B7
:004374A5 837D1000                cmp dword ptr [ebp+10], 00000000
:004374A9 7405                    je 004374B0
:004374AB E8F1070000              call 00437CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004374A9(C)
|
:004374B0 33C0                    xor eax, eax
:004374B2 E934070000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004374A3(C)
|
:004374B7 E92A070000              jmp 00437BE6
:004374BC 8B45F8                  mov eax, dword ptr [ebp-08]
:004374BF 25FF000000              and eax, 000000FF
:004374C4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004374C7 81E1FF000000            and ecx, 000000FF
:004374CD 3BC1                    cmp eax, ecx
:004374CF 7412                    je 004374E3
:004374D1 837D1000                cmp dword ptr [ebp+10], 00000000
:004374D5 7405                    je 004374DC
:004374D7 E8C5070000              call 00437CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004374D5(C)
|
:004374DC 33C0                    xor eax, eax
:004374DE E908070000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004374CF(C)
|
:004374E3 E9FE060000              jmp 00437BE6
:004374E8 B9784E4B00              mov ecx, 004B4E78
:004374ED E88D7E0200              call 0045F37F
:004374F2 25FF000000              and eax, 000000FF
:004374F7 83F802                  cmp eax, 00000002
:004374FA 7428                    je 00437524
:004374FC 837D1000                cmp dword ptr [ebp+10], 00000000
:00437500 741B                    je 0043751D

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437502 6A07                    push 00000007
:00437504 B9F8544B00              mov ecx, 004B54F8
:00437509 E80C200300              call 0046951A

* Possible StringData Ref from Data Obj ->"ѩSUBAҥHLkϥΡC"
                                  |
:0043750E 6874DF4700              push 0047DF74
:00437513 6A00                    push 00000000
:00437515 E8199FFFFF              call 00431433
:0043751A 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437500(C)
|
:0043751D 33C0                    xor eax, eax
:0043751F E9C7060000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004374FA(C)
|
:00437524 8B55F8                  mov edx, dword ptr [ebp-08]
:00437527 81E2FF000000            and edx, 000000FF
:0043752D 8B45F0                  mov eax, dword ptr [ebp-10]
:00437530 25FF000000              and eax, 000000FF
:00437535 3BD0                    cmp edx, eax
:00437537 7412                    je 0043754B
:00437539 837D1000                cmp dword ptr [ebp+10], 00000000
:0043753D 7405                    je 00437544
:0043753F E85D070000              call 00437CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043753D(C)
|
:00437544 33C0                    xor eax, eax
:00437546 E9A0060000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437537(C)
|
:0043754B E996060000              jmp 00437BE6
:00437550 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00437553 81E1FF000000            and ecx, 000000FF
:00437559 8B55F0                  mov edx, dword ptr [ebp-10]
:0043755C 81E2FF000000            and edx, 000000FF
:00437562 3BCA                    cmp ecx, edx
:00437564 7412                    je 00437578
:00437566 837D1000                cmp dword ptr [ebp+10], 00000000
:0043756A 7405                    je 00437571
:0043756C E830070000              call 00437CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043756A(C)
|
:00437571 33C0                    xor eax, eax
:00437573 E973060000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437564(C)
|
:00437578 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043757B 6BC924                  imul ecx, 00000024
:0043757E 81C1B83B4B00            add ecx, 004B3BB8
:00437584 E857F4FFFF              call 004369E0
:00437589 8BC8                    mov ecx, eax
:0043758B 6BC950                  imul ecx, 00000050
:0043758E 81C1787F4900            add ecx, 00497F78
:00437594 E851A8FCFF              call 00401DEA
:00437599 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0043759B B90A000000              mov ecx, 0000000A
:004375A0 F7F1                    div ecx
:004375A2 8945FC                  mov dword ptr [ebp-04], eax
:004375A5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004375A8 6BC924                  imul ecx, 00000024
:004375AB 81C1B83B4B00            add ecx, 004B3BB8
:004375B1 E82ABDFCFF              call 004032E0
:004375B6 3B45FC                  cmp eax, dword ptr [ebp-04]
:004375B9 7328                    jnb 004375E3
:004375BB 837D1000                cmp dword ptr [ebp+10], 00000000
:004375BF 741B                    je 004375DC

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004375C1 6A07                    push 00000007
:004375C3 B9F8544B00              mov ecx, 004B54F8
:004375C8 E84D1F0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ۭx@[O"
                                  |
:004375CD 6894DF4700              push 0047DF94
:004375D2 6A00                    push 00000000
:004375D4 E85A9EFFFF              call 00431433
:004375D9 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004375BF(C)
|
:004375DC 33C0                    xor eax, eax
:004375DE E908060000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004375B9(C)
|
:004375E3 E9FE050000              jmp 00437BE6
:004375E8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004375EB 6BC924                  imul ecx, 00000024
:004375EE 81C1B83B4B00            add ecx, 004B3BB8
:004375F4 E8E7F3FFFF              call 004369E0
:004375F9 8BC8                    mov ecx, eax
:004375FB 6BC950                  imul ecx, 00000050
:004375FE 81C1787F4900            add ecx, 00497F78
:00437604 E8E1A7FCFF              call 00401DEA
:00437609 D1E8                    shr eax, 1
:0043760B 8945FC                  mov dword ptr [ebp-04], eax
:0043760E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437611 6BC924                  imul ecx, 00000024
:00437614 81C1B83B4B00            add ecx, 004B3BB8
:0043761A E8C1BCFCFF              call 004032E0
:0043761F 3B45FC                  cmp eax, dword ptr [ebp-04]
:00437622 7328                    jnb 0043764C
:00437624 837D1000                cmp dword ptr [ebp+10], 00000000
:00437628 741B                    je 00437645

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043762A 6A07                    push 00000007
:0043762C B9F8544B00              mov ecx, 004B54F8
:00437631 E8E41E0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ۭx@[O"
                                  |
:00437636 68ACDF4700              push 0047DFAC
:0043763B 6A00                    push 00000000
:0043763D E8F19DFFFF              call 00431433
:00437642 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437628(C)
|
:00437645 33C0                    xor eax, eax
:00437647 E99F050000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437622(C)
|
:0043764C E995050000              jmp 00437BE6
:00437651 8B55F8                  mov edx, dword ptr [ebp-08]
:00437654 81E2FF000000            and edx, 000000FF
:0043765A 8B45F0                  mov eax, dword ptr [ebp-10]
:0043765D 25FF000000              and eax, 000000FF
:00437662 3BD0                    cmp edx, eax
:00437664 7412                    je 00437678
:00437666 837D1000                cmp dword ptr [ebp+10], 00000000
:0043766A 7405                    je 00437671
:0043766C E830060000              call 00437CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043766A(C)
|
:00437671 33C0                    xor eax, eax
:00437673 E973050000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437664(C)
|
:00437678 E969050000              jmp 00437BE6
:0043767D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00437680 81E1FF000000            and ecx, 000000FF
:00437686 8B55F0                  mov edx, dword ptr [ebp-10]
:00437689 81E2FF000000            and edx, 000000FF
:0043768F 3BCA                    cmp ecx, edx
:00437691 7412                    je 004376A5
:00437693 837D1000                cmp dword ptr [ebp+10], 00000000
:00437697 7405                    je 0043769E
:00437699 E803060000              call 00437CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437697(C)
|
:0043769E 33C0                    xor eax, eax
:004376A0 E946050000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437691(C)
|
:004376A5 E93C050000              jmp 00437BE6
:004376AA 8B45F8                  mov eax, dword ptr [ebp-08]
:004376AD 25FF000000              and eax, 000000FF
:004376B2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004376B5 81E1FF000000            and ecx, 000000FF
:004376BB 3BC1                    cmp eax, ecx
:004376BD 7412                    je 004376D1
:004376BF 837D1000                cmp dword ptr [ebp+10], 00000000
:004376C3 7405                    je 004376CA
:004376C5 E8D7050000              call 00437CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004376C3(C)
|
:004376CA 33C0                    xor eax, eax
:004376CC E91A050000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004376BD(C)
|
:004376D1 E910050000              jmp 00437BE6
:004376D6 8B55F8                  mov edx, dword ptr [ebp-08]
:004376D9 81E2FF000000            and edx, 000000FF
:004376DF 8B45F0                  mov eax, dword ptr [ebp-10]
:004376E2 25FF000000              and eax, 000000FF
:004376E7 3BD0                    cmp edx, eax
:004376E9 7412                    je 004376FD
:004376EB 837D1000                cmp dword ptr [ebp+10], 00000000
:004376EF 7405                    je 004376F6
:004376F1 E8AB050000              call 00437CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004376EF(C)
|
:004376F6 33C0                    xor eax, eax
:004376F8 E9EE040000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004376E9(C)
|
:004376FD B9784E4B00              mov ecx, 004B4E78
:00437702 E8787C0200              call 0045F37F
:00437707 25FF000000              and eax, 000000FF
:0043770C 83F802                  cmp eax, 00000002
:0043770F 7528                    jne 00437739
:00437711 837D1000                cmp dword ptr [ebp+10], 00000000
:00437715 741B                    je 00437732

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437717 6A07                    push 00000007
:00437719 B9F8544B00              mov ecx, 004B54F8
:0043771E E8F71D0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ѩUBALkϥ"
                                  |
:00437723 68C4DF4700              push 0047DFC4
:00437728 6A00                    push 00000000
:0043772A E8049DFFFF              call 00431433
:0043772F 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437715(C)
|
:00437732 33C0                    xor eax, eax
:00437734 E9B2040000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043770F(C)
|
:00437739 E9A8040000              jmp 00437BE6
:0043773E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00437741 81E1FF000000            and ecx, 000000FF
:00437747 8B55F0                  mov edx, dword ptr [ebp-10]
:0043774A 81E2FF000000            and edx, 000000FF
:00437750 3BCA                    cmp ecx, edx
:00437752 7412                    je 00437766
:00437754 837D1000                cmp dword ptr [ebp+10], 00000000
:00437758 7405                    je 0043775F
:0043775A E842050000              call 00437CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437758(C)
|
:0043775F 33C0                    xor eax, eax
:00437761 E985040000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437752(C)
|
:00437766 B9784E4B00              mov ecx, 004B4E78
:0043776B E80F7C0200              call 0045F37F
:00437770 25FF000000              and eax, 000000FF
:00437775 83F802                  cmp eax, 00000002
:00437778 7528                    jne 004377A2
:0043777A 837D1000                cmp dword ptr [ebp+10], 00000000
:0043777E 741B                    je 0043779B

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437780 6A07                    push 00000007
:00437782 B9F8544B00              mov ecx, 004B54F8
:00437787 E88E1D0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ѩUBALkϥ"
                                  |
:0043778C 68D8DF4700              push 0047DFD8
:00437791 6A00                    push 00000000
:00437793 E89B9CFFFF              call 00431433
:00437798 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043777E(C)
|
:0043779B 33C0                    xor eax, eax
:0043779D E949040000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437778(C)
|
:004377A2 E93F040000              jmp 00437BE6
:004377A7 8B45F8                  mov eax, dword ptr [ebp-08]
:004377AA 25FF000000              and eax, 000000FF
:004377AF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004377B2 81E1FF000000            and ecx, 000000FF
:004377B8 3BC1                    cmp eax, ecx
:004377BA 7412                    je 004377CE
:004377BC 837D1000                cmp dword ptr [ebp+10], 00000000
:004377C0 7405                    je 004377C7
:004377C2 E8DA040000              call 00437CA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004377C0(C)
|
:004377C7 33C0                    xor eax, eax
:004377C9 E91D040000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004377BA(C)
|
:004377CE E913040000              jmp 00437BE6
:004377D3 B9784E4B00              mov ecx, 004B4E78
:004377D8 E8A27B0200              call 0045F37F
:004377DD 25FF000000              and eax, 000000FF
:004377E2 83F802                  cmp eax, 00000002
:004377E5 7528                    jne 0043780F
:004377E7 837D1000                cmp dword ptr [ebp+10], 00000000
:004377EB 741B                    je 00437808

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004377ED 6A07                    push 00000007
:004377EF B9F8544B00              mov ecx, 004B54F8
:004377F4 E8211D0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ѩUBALkϥ"
                                  |
:004377F9 68ECDF4700              push 0047DFEC
:004377FE 6A00                    push 00000000
:00437800 E82E9CFFFF              call 00431433
:00437805 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004377EB(C)
|
:00437808 33C0                    xor eax, eax
:0043780A E9DC030000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004377E5(C)
|
:0043780F E9D2030000              jmp 00437BE6
:00437814 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437817 6BC924                  imul ecx, 00000024
:0043781A 81C1B83B4B00            add ecx, 004B3BB8
:00437820 E8BBBAFCFF              call 004032E0
:00437825 83F832                  cmp eax, 00000032
:00437828 7328                    jnb 00437852
:0043782A 837D1000                cmp dword ptr [ebp+10], 00000000
:0043782E 741B                    je 0043784B

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437830 6A07                    push 00000007
:00437832 B9F8544B00              mov ecx, 004B54F8
:00437837 E8DE1C0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ۭx@[O"
                                  |
:0043783C 6800E04700              push 0047E000
:00437841 6A00                    push 00000000
:00437843 E8EB9BFFFF              call 00431433
:00437848 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043782E(C)
|
:0043784B 33C0                    xor eax, eax
:0043784D E999030000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437828(C)
|
:00437852 6A20                    push 00000020
:00437854 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437857 6BC924                  imul ecx, 00000024
:0043785A 81C1B83B4B00            add ecx, 004B3BB8
:00437860 E80BF2FFFF              call 00436A70
:00437865 85C0                    test eax, eax
:00437867 7428                    je 00437891
:00437869 837D1000                cmp dword ptr [ebp+10], 00000000
:0043786D 741B                    je 0043788A

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043786F 6A07                    push 00000007
:00437871 B9F8544B00              mov ecx, 004B54F8
:00437876 E89F1C0300              call 0046951A

* Possible StringData Ref from Data Obj ->"tFˡALkϥ"
                                  |
:0043787B 6818E04700              push 0047E018
:00437880 6A00                    push 00000000
:00437882 E8AC9BFFFF              call 00431433
:00437887 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043786D(C)
|
:0043788A 33C0                    xor eax, eax
:0043788C E95A030000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437867(C)
|
:00437891 E950030000              jmp 00437BE6
:00437896 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437899 6BC924                  imul ecx, 00000024
:0043789C 81C1B83B4B00            add ecx, 004B3BB8
:004378A2 E859BAFCFF              call 00403300
:004378A7 83F828                  cmp eax, 00000028
:004378AA 7628                    jbe 004378D4
:004378AC 837D1000                cmp dword ptr [ebp+10], 00000000
:004378B0 741B                    je 004378CD

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004378B2 6A07                    push 00000007
:004378B4 B9F8544B00              mov ecx, 004B54F8
:004378B9 E85C1C0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ۭxޯȤjAҥHLkϥ"
                                  |
:004378BE 682CE04700              push 0047E02C
:004378C3 6A00                    push 00000000
:004378C5 E8699BFFFF              call 00431433
:004378CA 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004378B0(C)
|
:004378CD 33C0                    xor eax, eax
:004378CF E917030000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004378AA(C)
|
:004378D4 E90D030000              jmp 00437BE6
:004378D9 8B5514                  mov edx, dword ptr [ebp+14]
:004378DC 81E2FF000000            and edx, 000000FF
:004378E2 81FAFF000000            cmp edx, 000000FF
:004378E8 7406                    je 004378F0
:004378EA 8A4514                  mov al, byte ptr [ebp+14]
:004378ED 8845EC                  mov byte ptr [ebp-14], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004378E8(C)
|
:004378F0 6A01                    push 00000001
:004378F2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004378F5 6BC924                  imul ecx, 00000024
:004378F8 81C1B83B4B00            add ecx, 004B3BB8
:004378FE E86DF1FFFF              call 00436A70
:00437903 85C0                    test eax, eax
:00437905 7428                    je 0043792F
:00437907 837D1000                cmp dword ptr [ebp+10], 00000000
:0043790B 741B                    je 00437928

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043790D 6A07                    push 00000007
:0043790F B9F8544B00              mov ecx, 004B54F8
:00437914 E8011C0300              call 0046951A

* Possible StringData Ref from Data Obj ->"TɭԵLk"
                                  |
:00437919 6850E04700              push 0047E050
:0043791E 6A00                    push 00000000
:00437920 E80E9BFFFF              call 00431433
:00437925 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043790B(C)
|
:00437928 33C0                    xor eax, eax
:0043792A E9BC020000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437905(C)
|
:0043792F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00437932 81E1FF000000            and ecx, 000000FF
:00437938 83F90A                  cmp ecx, 0000000A
:0043793B 7428                    je 00437965
:0043793D 837D1000                cmp dword ptr [ebp+10], 00000000
:00437941 741B                    je 0043795E

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437943 6A07                    push 00000007
:00437945 B9F8544B00              mov ecx, 004B54F8
:0043794A E8CB1B0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ub̮ɤ"
                                  |
:0043794F 6864E04700              push 0047E064
:00437954 6A00                    push 00000000
:00437956 E8D89AFFFF              call 00431433
:0043795B 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437941(C)
|
:0043795E 33C0                    xor eax, eax
:00437960 E986020000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043793B(C)
|
:00437965 E97C020000              jmp 00437BE6
:0043796A 8B5514                  mov edx, dword ptr [ebp+14]
:0043796D 81E2FF000000            and edx, 000000FF
:00437973 81FAFF000000            cmp edx, 000000FF
:00437979 7406                    je 00437981
:0043797B 8A4514                  mov al, byte ptr [ebp+14]
:0043797E 8845EC                  mov byte ptr [ebp-14], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437979(C)
|
:00437981 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00437984 81E1FF000000            and ecx, 000000FF
:0043798A 83F910                  cmp ecx, 00000010
:0043798D 7436                    je 004379C5
:0043798F 8B55EC                  mov edx, dword ptr [ebp-14]
:00437992 81E2FF000000            and edx, 000000FF
:00437998 83FA11                  cmp edx, 00000011
:0043799B 7428                    je 004379C5
:0043799D 837D1000                cmp dword ptr [ebp+10], 00000000
:004379A1 741B                    je 004379BE

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004379A3 6A07                    push 00000007
:004379A5 B9F8544B00              mov ecx, 004B54F8
:004379AA E86B1B0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ubNɭԤ"
                                  |
:004379AF 687CE04700              push 0047E07C
:004379B4 6A00                    push 00000000
:004379B6 E8789AFFFF              call 00431433
:004379BB 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004379A1(C)
|
:004379BE 33C0                    xor eax, eax
:004379C0 E926020000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043798D(C), :0043799B(C)
|
:004379C5 E91C020000              jmp 00437BE6
:004379CA 8B4514                  mov eax, dword ptr [ebp+14]
:004379CD 25FF000000              and eax, 000000FF
:004379D2 3DFF000000              cmp eax, 000000FF
:004379D7 7406                    je 004379DF
:004379D9 8A4D14                  mov cl, byte ptr [ebp+14]
:004379DC 884DEC                  mov byte ptr [ebp-14], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004379D7(C)
|
:004379DF 8B55EC                  mov edx, dword ptr [ebp-14]
:004379E2 81E2FF000000            and edx, 000000FF
:004379E8 83FA0A                  cmp edx, 0000000A
:004379EB 740D                    je 004379FA
:004379ED 8B45EC                  mov eax, dword ptr [ebp-14]
:004379F0 25FF000000              and eax, 000000FF
:004379F5 83F80D                  cmp eax, 0000000D
:004379F8 7528                    jne 00437A22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004379EB(C)
|
:004379FA 837D1000                cmp dword ptr [ebp+10], 00000000
:004379FE 741B                    je 00437A1B

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437A00 6A07                    push 00000007
:00437A02 B9F8544B00              mov ecx, 004B54F8
:00437A07 E80E1B0300              call 0046951A

* Possible StringData Ref from Data Obj ->"bNLyɵLkϥ"
                                  |
:00437A0C 68A0E04700              push 0047E0A0
:00437A11 6A00                    push 00000000
:00437A13 E81B9AFFFF              call 00431433
:00437A18 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004379FE(C)
|
:00437A1B 33C0                    xor eax, eax
:00437A1D E9C9010000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004379F8(C)
|
:00437A22 E9BF010000              jmp 00437BE6
:00437A27 8B4D14                  mov ecx, dword ptr [ebp+14]
:00437A2A 81E1FF000000            and ecx, 000000FF
:00437A30 81F9FF000000            cmp ecx, 000000FF
:00437A36 7406                    je 00437A3E
:00437A38 8A5514                  mov dl, byte ptr [ebp+14]
:00437A3B 8855EC                  mov byte ptr [ebp-14], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437A36(C)
|
:00437A3E 6A01                    push 00000001
:00437A40 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437A43 6BC924                  imul ecx, 00000024
:00437A46 81C1B83B4B00            add ecx, 004B3BB8
:00437A4C E81FF0FFFF              call 00436A70
:00437A51 85C0                    test eax, eax
:00437A53 7428                    je 00437A7D
:00437A55 837D1000                cmp dword ptr [ebp+10], 00000000
:00437A59 741B                    je 00437A76

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437A5B 6A07                    push 00000007
:00437A5D B9F8544B00              mov ecx, 004B54F8
:00437A62 E8B31A0300              call 0046951A

* Possible StringData Ref from Data Obj ->"TɭԵLk"
                                  |
:00437A67 68B8E04700              push 0047E0B8
:00437A6C 6A00                    push 00000000
:00437A6E E8C099FFFF              call 00431433
:00437A73 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437A59(C)
|
:00437A76 33C0                    xor eax, eax
:00437A78 E96E010000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437A53(C)
|
:00437A7D 8B45EC                  mov eax, dword ptr [ebp-14]
:00437A80 25FF000000              and eax, 000000FF
:00437A85 83F80A                  cmp eax, 0000000A
:00437A88 740E                    je 00437A98
:00437A8A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00437A8D 81E1FF000000            and ecx, 000000FF
:00437A93 83F90D                  cmp ecx, 0000000D
:00437A96 7528                    jne 00437AC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437A88(C)
|
:00437A98 837D1000                cmp dword ptr [ebp+10], 00000000
:00437A9C 741B                    je 00437AB9

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437A9E 6A07                    push 00000007
:00437AA0 B9F8544B00              mov ecx, 004B54F8
:00437AA5 E8701A0300              call 0046951A

* Possible StringData Ref from Data Obj ->"bNLyɭԵLkϥ"
                                  |
:00437AAA 68CCE04700              push 0047E0CC
:00437AAF 6A00                    push 00000000
:00437AB1 E87D99FFFF              call 00431433
:00437AB6 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437A9C(C)
|
:00437AB9 33C0                    xor eax, eax
:00437ABB E92B010000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437A96(C)
|
:00437AC0 837D083F                cmp dword ptr [ebp+08], 0000003F
:00437AC4 756C                    jne 00437B32
:00437AC6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437AC9 6BC924                  imul ecx, 00000024
:00437ACC 81C1B83B4B00            add ecx, 004B3BB8
:00437AD2 E809B8FCFF              call 004032E0
:00437AD7 8BF0                    mov esi, eax
:00437AD9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437ADC 6BC924                  imul ecx, 00000024
:00437ADF 81C1B83B4B00            add ecx, 004B3BB8
:00437AE5 E8F6EEFFFF              call 004369E0
:00437AEA 8BC8                    mov ecx, eax
:00437AEC 6BC950                  imul ecx, 00000050
:00437AEF 81C1787F4900            add ecx, 00497F78
:00437AF5 E8F0A2FCFF              call 00401DEA
:00437AFA 6BC003                  imul eax, 00000003
:00437AFD 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00437AFF B90A000000              mov ecx, 0000000A
:00437B04 F7F1                    div ecx
:00437B06 3BF0                    cmp esi, eax
:00437B08 7728                    ja 00437B32
:00437B0A 837D1000                cmp dword ptr [ebp+10], 00000000
:00437B0E 741B                    je 00437B2B

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437B10 6A07                    push 00000007
:00437B12 B9F8544B00              mov ecx, 004B54F8
:00437B17 E8FE190300              call 0046951A

* Possible StringData Ref from Data Obj ->"@[O"
                                  |
:00437B1C 68E8E04700              push 0047E0E8
:00437B21 6A00                    push 00000000
:00437B23 E80B99FFFF              call 00431433
:00437B28 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437B0E(C)
|
:00437B2B 33C0                    xor eax, eax
:00437B2D E9B9000000              jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437AC4(C), :00437B08(C)
|
:00437B32 E9AF000000              jmp 00437BE6
:00437B37 8B5514                  mov edx, dword ptr [ebp+14]
:00437B3A 81E2FF000000            and edx, 000000FF
:00437B40 81FAFF000000            cmp edx, 000000FF
:00437B46 7406                    je 00437B4E
:00437B48 8A4514                  mov al, byte ptr [ebp+14]
:00437B4B 8845EC                  mov byte ptr [ebp-14], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437B46(C)
|
:00437B4E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00437B51 81E1FF000000            and ecx, 000000FF
:00437B57 83F907                  cmp ecx, 00000007
:00437B5A 7433                    je 00437B8F
:00437B5C 8B55EC                  mov edx, dword ptr [ebp-14]
:00437B5F 81E2FF000000            and edx, 000000FF
:00437B65 83FA05                  cmp edx, 00000005
:00437B68 7425                    je 00437B8F
:00437B6A 837D1000                cmp dword ptr [ebp+10], 00000000
:00437B6E 741B                    je 00437B8B

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437B70 6A07                    push 00000007
:00437B72 B9F8544B00              mov ecx, 004B54F8
:00437B77 E89E190300              call 0046951A

* Possible StringData Ref from Data Obj ->"ubsaN˪LɭԤ"
                                  |
:00437B7C 68F4E04700              push 0047E0F4
:00437B81 6A00                    push 00000000
:00437B83 E8AB98FFFF              call 00431433
:00437B88 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437B6E(C)
|
:00437B8B 33C0                    xor eax, eax
:00437B8D EB5C                    jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437B5A(C), :00437B68(C)
|
:00437B8F EB55                    jmp 00437BE6
:00437B91 8B4514                  mov eax, dword ptr [ebp+14]
:00437B94 25FF000000              and eax, 000000FF
:00437B99 3DFF000000              cmp eax, 000000FF
:00437B9E 7406                    je 00437BA6
:00437BA0 8A4D14                  mov cl, byte ptr [ebp+14]
:00437BA3 884DEC                  mov byte ptr [ebp-14], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437B9E(C)
|
:00437BA6 8B55EC                  mov edx, dword ptr [ebp-14]
:00437BA9 81E2FF000000            and edx, 000000FF
:00437BAF 83FA0A                  cmp edx, 0000000A
:00437BB2 7432                    je 00437BE6
:00437BB4 8B45EC                  mov eax, dword ptr [ebp-14]
:00437BB7 25FF000000              and eax, 000000FF
:00437BBC 83F80D                  cmp eax, 0000000D
:00437BBF 7425                    je 00437BE6
:00437BC1 837D1000                cmp dword ptr [ebp+10], 00000000
:00437BC5 741B                    je 00437BE2

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437BC7 6A07                    push 00000007
:00437BC9 B9F8544B00              mov ecx, 004B54F8
:00437BCE E847190300              call 0046951A

* Possible StringData Ref from Data Obj ->"ubNLyɭԤ"
                                  |
:00437BD3 6814E14700              push 0047E114
:00437BD8 6A00                    push 00000000
:00437BDA E85498FFFF              call 00431433
:00437BDF 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437BC5(C)
|
:00437BE2 33C0                    xor eax, eax
:00437BE4 EB05                    jmp 00437BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437477(C), :004374B7(U), :004374E3(U), :0043754B(U), :004375E3(U)
|:0043764C(U), :00437678(U), :004376A5(U), :004376D1(U), :00437739(U)
|:004377A2(U), :004377CE(U), :0043780F(U), :00437891(U), :004378D4(U)
|:00437965(U), :004379C5(U), :00437A22(U), :00437B32(U), :00437B8F(U)
|:00437BB2(C), :00437BBF(C)
|
:00437BE6 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437468(U), :004374B2(U), :004374DE(U), :0043751F(U), :00437546(U)
|:00437573(U), :004375DE(U), :00437647(U), :00437673(U), :004376A0(U)
|:004376CC(U), :004376F8(U), :00437734(U), :00437761(U), :0043779D(U)
|:004377C9(U), :0043780A(U), :0043784D(U), :0043788C(U), :004378CF(U)
|:0043792A(U), :00437960(U), :004379C0(U), :00437A1D(U), :00437A78(U)
|:00437ABB(U), :00437B2D(U), :00437B8D(U), :00437BE4(U)
|
:00437BEB 5E                      pop esi
:00437BEC 8BE5                    mov esp, ebp
:00437BEE 5D                      pop ebp
:00437BEF C3                      ret



:00437BF0 8F744300                DWORD 0043748F
:00437BF4 BC744300                DWORD 004374BC
:00437BF8 E8744300                DWORD 004374E8
:00437BFC 50754300                DWORD 00437550
:00437C00 E8754300                DWORD 004375E8
:00437C04 51764300                DWORD 00437651
:00437C08 7D764300                DWORD 0043767D
:00437C0C AA764300                DWORD 004376AA
:00437C10 D6764300                DWORD 004376D6
:00437C14 3E774300                DWORD 0043773E
:00437C18 A7774300                DWORD 004377A7
:00437C1C D3774300                DWORD 004377D3
:00437C20 CA794300                DWORD 004379CA
:00437C24 CA794300                DWORD 004379CA
:00437C28 14784300                DWORD 00437814
:00437C2C CA794300                DWORD 004379CA
:00437C30 CA794300                DWORD 004379CA
:00437C34 CA794300                DWORD 004379CA
:00437C38 CA794300                DWORD 004379CA
:00437C3C CA794300                DWORD 004379CA
:00437C40 96784300                DWORD 00437896
:00437C44 377B4300                DWORD 00437B37
:00437C48 917B4300                DWORD 00437B91
:00437C4C CA794300                DWORD 004379CA
:00437C50 6A794300                DWORD 0043796A
:00437C54 277A4300                DWORD 00437A27
:00437C58 D9784300                DWORD 004378D9
:00437C5C E67B4300                DWORD 00437BE6


:00437C60 0001                    add byte ptr [ecx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437C1D(C)
|
:00437C62 1B02                    sbb eax, dword ptr [edx]
:00437C64 03040506070809          add eax, dword ptr [eax+09080706]
:00437C6B 0A0B                    or cl, byte ptr [ebx]
:00437C6D 0C1B                    or al, 1B
:00437C6F 1B0D0E0F1B10            sbb ecx, dword ptr [101B0F0E]
:00437C75 101B                    adc byte ptr [ebx], bl
:00437C77 111B                    adc dword ptr [ebx], ebx
:00437C79 1B12                    sbb edx, dword ptr [edx]
:00437C7B 121B                    adc bl, byte ptr [ebx]
:00437C7D 131B                    adc ebx, dword ptr [ebx]
:00437C7F 1B1B                    sbb ebx, dword ptr [ebx]
:00437C81 1B1B                    sbb ebx, dword ptr [ebx]
:00437C83 1B1B                    sbb ebx, dword ptr [ebx]
:00437C85 1B1B                    sbb ebx, dword ptr [ebx]
:00437C87 141B                    adc al, 1B
:00437C89 1B1B                    sbb ebx, dword ptr [ebx]
:00437C8B 1B15161B1B1B            sbb edx, dword ptr [1B1B1B16]
:00437C91 1B1B                    sbb ebx, dword ptr [ebx]
:00437C93 1B1B                    sbb ebx, dword ptr [ebx]
:00437C95 1B1B                    sbb ebx, dword ptr [ebx]
:00437C97 1B1B                    sbb ebx, dword ptr [ebx]
:00437C99 1B1B                    sbb ebx, dword ptr [ebx]
:00437C9B 1B17                    sbb edx, dword ptr [edi]
:00437C9D 1819                    sbb byte ptr [ecx], bl
:00437C9F 191A                    sbb dword ptr [edx], ebx

* Referenced by a CALL at Addresses:
|:00437461   , :004374AB   , :004374D7   , :0043753F   , :0043756C   
|:0043766C   , :00437699   , :004376C5   , :004376F1   , :0043775A   
|:004377C2   
|
:00437CA1 55                      push ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437C5D(C)
|
:00437CA2 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00437CA4 6A07                    push 00000007
:00437CA6 B9F8544B00              mov ecx, 004B54F8
:00437CAB E86A180300              call 0046951A

* Possible StringData Ref from Data Obj ->"ѩS˳ƥnZAҥHLkϥ"
                                  |
:00437CB0 6834E14700              push 0047E134
:00437CB5 6A00                    push 00000000
:00437CB7 E87797FFFF              call 00431433
:00437CBC 83C408                  add esp, 00000008
:00437CBF 5D                      pop ebp
:00437CC0 C3                      ret



* Referenced by a CALL at Addresses:
|:0043C892   , :0043C9AD   
|
:00437CC1 55                      push ebp
:00437CC2 8BEC                    mov ebp, esp
:00437CC4 83EC0C                  sub esp, 0000000C
:00437CC7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00437CCA 81E1FF000000            and ecx, 000000FF
:00437CD0 6BC924                  imul ecx, 00000024
:00437CD3 81C1B83B4B00            add ecx, 004B3BB8
:00437CD9 E8629FFFFF              call 00431C40
:00437CDE 50                      push eax
:00437CDF E8747B0100              call 0044F858
:00437CE4 83C404                  add esp, 00000004
:00437CE7 8845F8                  mov byte ptr [ebp-08], al
:00437CEA C745FC00000000          mov [ebp-04], 00000000
:00437CF1 8B450C                  mov eax, dword ptr [ebp+0C]
:00437CF4 25FF000000              and eax, 000000FF
:00437CF9 8945F4                  mov dword ptr [ebp-0C], eax
:00437CFC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00437CFF 83E912                  sub ecx, 00000012
:00437D02 894DF4                  mov dword ptr [ebp-0C], ecx
:00437D05 837DF404                cmp dword ptr [ebp-0C], 00000004
:00437D09 0F87AF000000            ja 00437DBE
:00437D0F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00437D12 FF2495C57D4300          jmp dword ptr [4*edx+00437DC5]
:00437D19 8B45F8                  mov eax, dword ptr [ebp-08]
:00437D1C 25FF000000              and eax, 000000FF
:00437D21 85C0                    test eax, eax
:00437D23 741C                    je 00437D41
:00437D25 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00437D28 81E1FF000000            and ecx, 000000FF
:00437D2E 83F901                  cmp ecx, 00000001
:00437D31 740E                    je 00437D41
:00437D33 8B55F8                  mov edx, dword ptr [ebp-08]
:00437D36 81E2FF000000            and edx, 000000FF
:00437D3C 83FA05                  cmp edx, 00000005
:00437D3F 7507                    jne 00437D48

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437D23(C), :00437D31(C)
|
:00437D41 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437D3F(C)
|
:00437D48 EB74                    jmp 00437DBE
:00437D4A 8B45F8                  mov eax, dword ptr [ebp-08]
:00437D4D 25FF000000              and eax, 000000FF
:00437D52 83F80A                  cmp eax, 0000000A
:00437D55 741C                    je 00437D73
:00437D57 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00437D5A 81E1FF000000            and ecx, 000000FF
:00437D60 83F90D                  cmp ecx, 0000000D
:00437D63 740E                    je 00437D73
:00437D65 8B55F8                  mov edx, dword ptr [ebp-08]
:00437D68 81E2FF000000            and edx, 000000FF
:00437D6E 83FA0E                  cmp edx, 0000000E
:00437D71 7507                    jne 00437D7A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437D55(C), :00437D63(C)
|
:00437D73 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437D71(C)
|
:00437D7A EB42                    jmp 00437DBE
:00437D7C 8B45F8                  mov eax, dword ptr [ebp-08]
:00437D7F 25FF000000              and eax, 000000FF
:00437D84 83F805                  cmp eax, 00000005
:00437D87 7507                    jne 00437D90
:00437D89 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437D87(C)
|
:00437D90 EB2C                    jmp 00437DBE
:00437D92 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00437D95 81E1FF000000            and ecx, 000000FF
:00437D9B 83F907                  cmp ecx, 00000007
:00437D9E 7507                    jne 00437DA7
:00437DA0 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437D9E(C)
|
:00437DA7 EB15                    jmp 00437DBE
:00437DA9 8B55F8                  mov edx, dword ptr [ebp-08]
:00437DAC 81E2FF000000            and edx, 000000FF
:00437DB2 83FA0A                  cmp edx, 0000000A
:00437DB5 7507                    jne 00437DBE
:00437DB7 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00437D09(C), :00437D48(U), :00437D7A(U), :00437D90(U), :00437DA7(U)
|:00437DB5(C)
|
:00437DBE 8B45FC                  mov eax, dword ptr [ebp-04]
:00437DC1 8BE5                    mov esp, ebp
:00437DC3 5D                      pop ebp
:00437DC4 C3                      ret



:00437DC5 197D4300                DWORD 00437D19
:00437DC9 4A7D4300                DWORD 00437D4A
:00437DCD 7C7D4300                DWORD 00437D7C
:00437DD1 927D4300                DWORD 00437D92
:00437DD5 A97D4300                DWORD 00437DA9



* Referenced by a CALL at Address:
|:0044056F   
|
:00437DD9 55                      push ebp
:00437DDA 8BEC                    mov ebp, esp
:00437DDC 83EC1C                  sub esp, 0000001C
:00437DDF 56                      push esi
:00437DE0 C745F800000000          mov [ebp-08], 00000000
:00437DE7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437DEA 6BC924                  imul ecx, 00000024
:00437DED 81C1B83B4B00            add ecx, 004B3BB8
:00437DF3 E8E8B4FCFF              call 004032E0
:00437DF8 8BF0                    mov esi, eax
:00437DFA 8B4D10                  mov ecx, dword ptr [ebp+10]
:00437DFD 6BC924                  imul ecx, 00000024
:00437E00 81C1B83B4B00            add ecx, 004B3BB8
:00437E06 E8D5B4FCFF              call 004032E0
:00437E0B 3BF0                    cmp esi, eax
:00437E0D 7309                    jnb 00437E18
:00437E0F C745F800000000          mov [ebp-08], 00000000
:00437E16 EB07                    jmp 00437E1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437E0D(C)
|
:00437E18 C745F801000000          mov [ebp-08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437E16(U)
|
:00437E1F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00437E22 6BC924                  imul ecx, 00000024
:00437E25 81C1B83B4B00            add ecx, 004B3BB8
:00437E2B E8B0B4FCFF              call 004032E0
:00437E30 8945EC                  mov dword ptr [ebp-14], eax
:00437E33 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437E36 6BC924                  imul ecx, 00000024
:00437E39 81C1B83B4B00            add ecx, 004B3BB8
:00437E3F E89CB4FCFF              call 004032E0
:00437E44 8945F4                  mov dword ptr [ebp-0C], eax
:00437E47 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437E4A 6BC924                  imul ecx, 00000024
:00437E4D 81C1B83B4B00            add ecx, 004B3BB8
:00437E53 E888EBFFFF              call 004369E0
:00437E58 8BC8                    mov ecx, eax
:00437E5A 6BC950                  imul ecx, 00000050
:00437E5D 81C1787F4900            add ecx, 00497F78
:00437E63 E8829FFCFF              call 00401DEA
:00437E68 3B45EC                  cmp eax, dword ptr [ebp-14]
:00437E6B 7324                    jnb 00437E91
:00437E6D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00437E70 6BC924                  imul ecx, 00000024
:00437E73 81C1B83B4B00            add ecx, 004B3BB8
:00437E79 E862EBFFFF              call 004369E0
:00437E7E 8BC8                    mov ecx, eax
:00437E80 6BC950                  imul ecx, 00000050
:00437E83 81C1787F4900            add ecx, 00497F78
:00437E89 E85C9FFCFF              call 00401DEA
:00437E8E 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437E6B(C)
|
:00437E91 8B4D10                  mov ecx, dword ptr [ebp+10]
:00437E94 6BC924                  imul ecx, 00000024
:00437E97 81C1B83B4B00            add ecx, 004B3BB8
:00437E9D E83EEBFFFF              call 004369E0
:00437EA2 8BC8                    mov ecx, eax
:00437EA4 6BC950                  imul ecx, 00000050
:00437EA7 81C1787F4900            add ecx, 00497F78
:00437EAD E8389FFCFF              call 00401DEA
:00437EB2 3B45F4                  cmp eax, dword ptr [ebp-0C]
:00437EB5 7324                    jnb 00437EDB
:00437EB7 8B4D10                  mov ecx, dword ptr [ebp+10]
:00437EBA 6BC924                  imul ecx, 00000024
:00437EBD 81C1B83B4B00            add ecx, 004B3BB8
:00437EC3 E818EBFFFF              call 004369E0
:00437EC8 8BC8                    mov ecx, eax
:00437ECA 6BC950                  imul ecx, 00000050
:00437ECD 81C1787F4900            add ecx, 00497F78
:00437ED3 E8129FFCFF              call 00401DEA
:00437ED8 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437EB5(C)
|
:00437EDB 8A4510                  mov al, byte ptr [ebp+10]
:00437EDE 50                      push eax
:00437EDF 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00437EE2 51                      push ecx
:00437EE3 E8C4210100              call 0044A0AC
:00437EE8 83C408                  add esp, 00000008
:00437EEB 8A550C                  mov dl, byte ptr [ebp+0C]
:00437EEE 52                      push edx
:00437EEF 8D45FC                  lea eax, dword ptr [ebp-04]
:00437EF2 50                      push eax
:00437EF3 E8B4210100              call 0044A0AC
:00437EF8 83C408                  add esp, 00000008
:00437EFB E825F4FFFF              call 00437325
:00437F00 8B4D10                  mov ecx, dword ptr [ebp+10]
:00437F03 6BC924                  imul ecx, 00000024
:00437F06 81C1B83B4B00            add ecx, 004B3BB8
:00437F0C E8FF49FDFF              call 0040C910
:00437F11 85C0                    test eax, eax
:00437F13 7411                    je 00437F26
:00437F15 33C9                    xor ecx, ecx
:00437F17 8A0DCC484B00            mov cl, byte ptr [004B48CC]
:00437F1D 8D54090E                lea edx, dword ptr [ecx+ecx+0E]
:00437F21 8955E8                  mov dword ptr [ebp-18], edx
:00437F24 EB0E                    jmp 00437F34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437F13(C)
|
:00437F26 33C0                    xor eax, eax
:00437F28 A0CC484B00              mov al, byte ptr [004B48CC]
:00437F2D 8D4C002A                lea ecx, dword ptr [eax+eax+2A]
:00437F31 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437F24(U)
|
:00437F34 8A55E8                  mov dl, byte ptr [ebp-18]
:00437F37 8855F0                  mov byte ptr [ebp-10], dl
:00437F3A 8B45F0                  mov eax, dword ptr [ebp-10]
:00437F3D 25FF000000              and eax, 000000FF
:00437F42 33C9                    xor ecx, ecx
:00437F44 8A0DCC484B00            mov cl, byte ptr [004B48CC]
:00437F4A 8D54090E                lea edx, dword ptr [ecx+ecx+0E]
:00437F4E 3BC2                    cmp eax, edx
:00437F50 7510                    jne 00437F62
:00437F52 33C0                    xor eax, eax
:00437F54 A0CC484B00              mov al, byte ptr [004B48CC]
:00437F59 8D4C002A                lea ecx, dword ptr [eax+eax+2A]
:00437F5D 894DE4                  mov dword ptr [ebp-1C], ecx
:00437F60 EB0F                    jmp 00437F71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437F50(C)
|
:00437F62 33D2                    xor edx, edx
:00437F64 8A15CC484B00            mov dl, byte ptr [004B48CC]
:00437F6A 8D44120E                lea eax, dword ptr [edx+edx+0E]
:00437F6E 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437F60(U)
|
:00437F71 8A4DE4                  mov cl, byte ptr [ebp-1C]
:00437F74 884DFC                  mov byte ptr [ebp-04], cl
:00437F77 33D2                    xor edx, edx
:00437F79 8A159D4E4B00            mov dl, byte ptr [004B4E9D]
:00437F7F 8D441206                lea eax, dword ptr [edx+edx+06]
:00437F83 50                      push eax
:00437F84 B9A83B4B00              mov ecx, 004B3BA8
:00437F89 E88279FEFF              call 0041F910
:00437F8E 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00437F91 51                      push ecx
:00437F92 668B55FC                mov dx, word ptr [ebp-04]
:00437F96 52                      push edx
:00437F97 E8BC210100              call 0044A158
:00437F9C 83C408                  add esp, 00000008
:00437F9F 8A4510                  mov al, byte ptr [ebp+10]
:00437FA2 50                      push eax
:00437FA3 668B4DF0                mov cx, word ptr [ebp-10]
:00437FA7 51                      push ecx
:00437FA8 E8AB210100              call 0044A158
:00437FAD 83C408                  add esp, 00000008
:00437FB0 E81B76FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00437FB5 6A03                    push 00000003
:00437FB7 E87A77FFFF              call 0042F736
:00437FBC 83C404                  add esp, 00000004
:00437FBF 33D2                    xor edx, edx
:00437FC1 8A159D4E4B00            mov dl, byte ptr [004B4E9D]
:00437FC7 8D441206                lea eax, dword ptr [edx+edx+06]
:00437FCB 50                      push eax
:00437FCC B9A83B4B00              mov ecx, 004B3BA8
:00437FD1 E83A79FEFF              call 0041F910
:00437FD6 837DF800                cmp dword ptr [ebp-08], 00000000
:00437FDA 7557                    jne 00438033
:00437FDC 6A00                    push 00000000
:00437FDE 8B4D10                  mov ecx, dword ptr [ebp+10]
:00437FE1 6BC924                  imul ecx, 00000024
:00437FE4 81C1B83B4B00            add ecx, 004B3BB8
:00437FEA E8F1B2FCFF              call 004032E0
:00437FEF 2B45F4                  sub eax, dword ptr [ebp-0C]
:00437FF2 50                      push eax
:00437FF3 8A4D10                  mov cl, byte ptr [ebp+10]
:00437FF6 51                      push ecx
:00437FF7 668B55F0                mov dx, word ptr [ebp-10]
:00437FFB 52                      push edx
:00437FFC E811240100              call 0044A412
:00438001 83C410                  add esp, 00000010
:00438004 6880000000              push 00000080
:00438009 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043800C 6BC924                  imul ecx, 00000024
:0043800F 81C1B83B4B00            add ecx, 004B3BB8
:00438015 E8C6B2FCFF              call 004032E0
:0043801A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043801D 2BC8                    sub ecx, eax
:0043801F 51                      push ecx
:00438020 8A550C                  mov dl, byte ptr [ebp+0C]
:00438023 52                      push edx
:00438024 668B45FC                mov ax, word ptr [ebp-04]
:00438028 50                      push eax
:00438029 E8E4230100              call 0044A412
:0043802E 83C410                  add esp, 00000010
:00438031 EB55                    jmp 00438088

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00437FDA(C)
|
:00438033 6880000000              push 00000080
:00438038 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043803B 6BC924                  imul ecx, 00000024
:0043803E 81C1B83B4B00            add ecx, 004B3BB8
:00438044 E897B2FCFF              call 004032E0
:00438049 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043804C 2BC8                    sub ecx, eax
:0043804E 51                      push ecx
:0043804F 8A5510                  mov dl, byte ptr [ebp+10]
:00438052 52                      push edx
:00438053 668B45F0                mov ax, word ptr [ebp-10]
:00438057 50                      push eax
:00438058 E8B5230100              call 0044A412
:0043805D 83C410                  add esp, 00000010
:00438060 6A00                    push 00000000
:00438062 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438065 6BC924                  imul ecx, 00000024
:00438068 81C1B83B4B00            add ecx, 004B3BB8
:0043806E E86DB2FCFF              call 004032E0
:00438073 2B45EC                  sub eax, dword ptr [ebp-14]
:00438076 50                      push eax
:00438077 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043807A 51                      push ecx
:0043807B 668B55FC                mov dx, word ptr [ebp-04]
:0043807F 52                      push edx
:00438080 E88D230100              call 0044A412
:00438085 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438031(U)
|
:00438088 E84375FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043808D 6A03                    push 00000003
:0043808F E8A276FFFF              call 0042F736
:00438094 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00438097 6A09                    push 00000009
:00438099 6A21                    push 00000021
:0043809B 8A45F1                  mov al, byte ptr [ebp-0F]
:0043809E 50                      push eax
:0043809F 33C9                    xor ecx, ecx
:004380A1 8A0DCC484B00            mov cl, byte ptr [004B48CC]
:004380A7 83C106                  add ecx, 00000006
:004380AA 51                      push ecx
:004380AB B958494B00              mov ecx, 004B4958
:004380B0 E893480100              call 0044C948

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:004380B5 6A09                    push 00000009
:004380B7 6A21                    push 00000021
:004380B9 8A55FD                  mov dl, byte ptr [ebp-03]
:004380BC 52                      push edx
:004380BD 33C0                    xor eax, eax
:004380BF A0CC484B00              mov al, byte ptr [004B48CC]
:004380C4 83C006                  add eax, 00000006
:004380C7 50                      push eax
:004380C8 B958494B00              mov ecx, 004B4958
:004380CD E876480100              call 0044C948
:004380D2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004380D5 51                      push ecx
:004380D6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004380D9 6BC924                  imul ecx, 00000024
:004380DC 81C1B83B4B00            add ecx, 004B3BB8
:004380E2 E82EB1FFFF              call 00433215
:004380E7 8B55F4                  mov edx, dword ptr [ebp-0C]
:004380EA 52                      push edx
:004380EB 8B4D10                  mov ecx, dword ptr [ebp+10]
:004380EE 6BC924                  imul ecx, 00000024
:004380F1 81C1B83B4B00            add ecx, 004B3BB8
:004380F7 E819B1FFFF              call 00433215
:004380FC 5E                      pop esi
:004380FD 8BE5                    mov esp, ebp
:004380FF 5D                      pop ebp
:00438100 C3                      ret



* Referenced by a CALL at Addresses:
|:00440B85   , :00454E2F   
|
:00438101 55                      push ebp
:00438102 8BEC                    mov ebp, esp
:00438104 83EC08                  sub esp, 00000008
:00438107 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043810A 81E1FF000000            and ecx, 000000FF
:00438110 6BC924                  imul ecx, 00000024
:00438113 81C1B83B4B00            add ecx, 004B3BB8
:00438119 E898ACFFFF              call 00432DB6
:0043811E 83C032                  add eax, 00000032
:00438121 8945FC                  mov dword ptr [ebp-04], eax
:00438124 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438127 81E1FF000000            and ecx, 000000FF
:0043812D 6BC924                  imul ecx, 00000024
:00438130 81C1B83B4B00            add ecx, 004B3BB8
:00438136 E862ADFFFF              call 00432E9D
:0043813B 3DFF000000              cmp eax, 000000FF
:00438140 731C                    jnb 0043815E
:00438142 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438145 81E1FF000000            and ecx, 000000FF
:0043814B 6BC924                  imul ecx, 00000024
:0043814E 81C1B83B4B00            add ecx, 004B3BB8
:00438154 E844ADFFFF              call 00432E9D
:00438159 8945F8                  mov dword ptr [ebp-08], eax
:0043815C EB07                    jmp 00438165

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438140(C)
|
:0043815E C745F8FF000000          mov [ebp-08], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043815C(U)
|
:00438165 8B45F8                  mov eax, dword ptr [ebp-08]
:00438168 C1E803                  shr eax, 03
:0043816B 50                      push eax
:0043816C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043816F 51                      push ecx
:00438170 E8AB010400              call 00478320
:00438175 83C408                  add esp, 00000008
:00438178 8945FC                  mov dword ptr [ebp-04], eax
:0043817B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043817E 81E1FF000000            and ecx, 000000FF
:00438184 6BC924                  imul ecx, 00000024
:00438187 81C1B83B4B00            add ecx, 004B3BB8
:0043818D E8FEE9FFFF              call 00436B90
:00438192 C1E803                  shr eax, 03
:00438195 50                      push eax
:00438196 E815020400              call 004783B0
:0043819B 83C404                  add esp, 00000004
:0043819E 8B55FC                  mov edx, dword ptr [ebp-04]
:004381A1 03D0                    add edx, eax
:004381A3 8955FC                  mov dword ptr [ebp-04], edx
:004381A6 8B45FC                  mov eax, dword ptr [ebp-04]
:004381A9 8BE5                    mov esp, ebp
:004381AB 5D                      pop ebp
:004381AC C3                      ret



* Referenced by a CALL at Addresses:
|:00439CFF   , :00439DA6   
|
:004381AD 55                      push ebp
:004381AE 8BEC                    mov ebp, esp
:004381B0 83EC1C                  sub esp, 0000001C
:004381B3 56                      push esi
:004381B4 8B4D10                  mov ecx, dword ptr [ebp+10]
:004381B7 6BC922                  imul ecx, 00000022
:004381BA 81C1D0474900            add ecx, 004947D0
:004381C0 E89BB0FCFF              call 00403260
:004381C5 25FF000000              and eax, 000000FF
:004381CA 8945FC                  mov dword ptr [ebp-04], eax
:004381CD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004381D0 6BC924                  imul ecx, 00000024
:004381D3 81C1B83B4B00            add ecx, 004B3BB8
:004381D9 E802E8FFFF              call 004369E0
:004381DE 6BC050                  imul eax, 00000050
:004381E1 05787F4900              add eax, 00497F78
:004381E6 8945F8                  mov dword ptr [ebp-08], eax
:004381E9 C745F400000000          mov [ebp-0C], 00000000
:004381F0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004381F3 6BC924                  imul ecx, 00000024
:004381F6 81C1B83B4B00            add ecx, 004B3BB8
:004381FC E8DFB0FCFF              call 004032E0
:00438201 8BF0                    mov esi, eax
:00438203 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00438206 E8DF9BFCFF              call 00401DEA
:0043820B 3BF0                    cmp esi, eax
:0043820D 7205                    jb 00438214
:0043820F E9FD010000              jmp 00438411

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043820D(C)
|
:00438214 817DFCE7030000          cmp dword ptr [ebp-04], 000003E7
:0043821B 7522                    jne 0043823F
:0043821D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00438220 E8C59BFCFF              call 00401DEA
:00438225 8BF0                    mov esi, eax
:00438227 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043822A 6BC924                  imul ecx, 00000024
:0043822D 81C1B83B4B00            add ecx, 004B3BB8
:00438233 E8A8B0FCFF              call 004032E0
:00438238 2BF0                    sub esi, eax
:0043823A 8975F4                  mov dword ptr [ebp-0C], esi
:0043823D EB59                    jmp 00438298

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043821B(C)
|
:0043823F 8B45FC                  mov eax, dword ptr [ebp-04]
:00438242 6BC00A                  imul eax, 0000000A
:00438245 8945FC                  mov dword ptr [ebp-04], eax
:00438248 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043824B E89A9BFCFF              call 00401DEA
:00438250 8BF0                    mov esi, eax
:00438252 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438255 6BC924                  imul ecx, 00000024
:00438258 81C1B83B4B00            add ecx, 004B3BB8
:0043825E E87DB0FCFF              call 004032E0
:00438263 2BF0                    sub esi, eax
:00438265 3B75FC                  cmp esi, dword ptr [ebp-04]
:00438268 7322                    jnb 0043828C
:0043826A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043826D E8789BFCFF              call 00401DEA
:00438272 8BF0                    mov esi, eax
:00438274 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438277 6BC924                  imul ecx, 00000024
:0043827A 81C1B83B4B00            add ecx, 004B3BB8
:00438280 E85BB0FCFF              call 004032E0
:00438285 2BF0                    sub esi, eax
:00438287 8975E8                  mov dword ptr [ebp-18], esi
:0043828A EB06                    jmp 00438292

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438268(C)
|
:0043828C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043828F 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043828A(U)
|
:00438292 8B55E8                  mov edx, dword ptr [ebp-18]
:00438295 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043823D(U)
|
:00438298 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043829A 6A03                    push 00000003
:0043829C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043829F 6BC922                  imul ecx, 00000022
:004382A2 81C1D0474900            add ecx, 004947D0
:004382A8 E8B37BFDFF              call 0040FE60
:004382AD 50                      push eax
:004382AE 8A450C                  mov al, byte ptr [ebp+0C]
:004382B1 50                      push eax
:004382B2 8A4D08                  mov cl, byte ptr [ebp+08]
:004382B5 51                      push ecx
:004382B6 B958494B00              mov ecx, 004B4958
:004382BB E8D0640100              call 0044E790
:004382C0 B978294B00              mov ecx, 004B2978
:004382C5 E8E645FDFF              call 0040C8B0
:004382CA 83E010                  and eax, 00000010
:004382CD 85C0                    test eax, eax
:004382CF 7535                    jne 00438306
:004382D1 C645F000                mov [ebp-10], 00
:004382D5 EB09                    jmp 004382E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004382FF(U)
|
:004382D7 8A55F0                  mov dl, byte ptr [ebp-10]
:004382DA 80C201                  add dl, 01
:004382DD 8855F0                  mov byte ptr [ebp-10], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004382D5(U)
|
:004382E0 8B45F0                  mov eax, dword ptr [ebp-10]
:004382E3 25FF000000              and eax, 000000FF
:004382E8 83F803                  cmp eax, 00000003
:004382EB 7D14                    jge 00438301
:004382ED 6A0E                    push 0000000E
:004382EF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004382F2 51                      push ecx
:004382F3 8A550C                  mov dl, byte ptr [ebp+0C]
:004382F6 52                      push edx
:004382F7 E80F1B0100              call 00449E0B
:004382FC 83C40C                  add esp, 0000000C
:004382FF EBD6                    jmp 004382D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004382EB(C)
|
:00438301 E9E5000000              jmp 004383EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004382CF(C)
|
:00438306 8A450C                  mov al, byte ptr [ebp+0C]
:00438309 50                      push eax
:0043830A 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0043830D 51                      push ecx
:0043830E E8991D0100              call 0044A0AC
:00438313 83C408                  add esp, 00000008
:00438316 E80AF0FFFF              call 00437325
:0043831B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043831E 6BC924                  imul ecx, 00000024
:00438321 81C1B83B4B00            add ecx, 004B3BB8
:00438327 E8E445FDFF              call 0040C910
:0043832C 85C0                    test eax, eax
:0043832E 7411                    je 00438341
:00438330 33D2                    xor edx, edx
:00438332 8A15CC484B00            mov dl, byte ptr [004B48CC]
:00438338 8D44120E                lea eax, dword ptr [edx+edx+0E]
:0043833C 8945E4                  mov dword ptr [ebp-1C], eax
:0043833F EB0F                    jmp 00438350

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043832E(C)
|
:00438341 33C9                    xor ecx, ecx
:00438343 8A0DCC484B00            mov cl, byte ptr [004B48CC]
:00438349 8D54092A                lea edx, dword ptr [ecx+ecx+2A]
:0043834D 8955E4                  mov dword ptr [ebp-1C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043833F(U)
|
:00438350 8A45E4                  mov al, byte ptr [ebp-1C]
:00438353 8845EC                  mov byte ptr [ebp-14], al
:00438356 33C9                    xor ecx, ecx
:00438358 8A0D9D4E4B00            mov cl, byte ptr [004B4E9D]
:0043835E 8D540906                lea edx, dword ptr [ecx+ecx+06]
:00438362 52                      push edx
:00438363 B9A83B4B00              mov ecx, 004B3BA8
:00438368 E8A375FEFF              call 0041F910
:0043836D 8A450C                  mov al, byte ptr [ebp+0C]
:00438370 50                      push eax
:00438371 668B4DEC                mov cx, word ptr [ebp-14]
:00438375 51                      push ecx
:00438376 E8DD1D0100              call 0044A158
:0043837B 83C408                  add esp, 00000008
:0043837E E84D72FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00438383 6A03                    push 00000003
:00438385 E8AC73FFFF              call 0042F736
:0043838A 83C404                  add esp, 00000004
:0043838D 33D2                    xor edx, edx
:0043838F 8A159D4E4B00            mov dl, byte ptr [004B4E9D]
:00438395 8D441206                lea eax, dword ptr [edx+edx+06]
:00438399 50                      push eax
:0043839A B9A83B4B00              mov ecx, 004B3BA8
:0043839F E86C75FEFF              call 0041F910
:004383A4 6880000000              push 00000080
:004383A9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004383AC 51                      push ecx
:004383AD 8A550C                  mov dl, byte ptr [ebp+0C]
:004383B0 52                      push edx
:004383B1 668B45EC                mov ax, word ptr [ebp-14]
:004383B5 50                      push eax
:004383B6 E857200100              call 0044A412
:004383BB 83C410                  add esp, 00000010
:004383BE E80D72FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004383C3 6A03                    push 00000003
:004383C5 E86C73FFFF              call 0042F736
:004383CA 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:004383CD 6A09                    push 00000009
:004383CF 6A21                    push 00000021
:004383D1 8A4DED                  mov cl, byte ptr [ebp-13]
:004383D4 51                      push ecx
:004383D5 33D2                    xor edx, edx
:004383D7 8A15CC484B00            mov dl, byte ptr [004B48CC]
:004383DD 83C206                  add edx, 00000006
:004383E0 52                      push edx
:004383E1 B958494B00              mov ecx, 004B4958
:004383E6 E85D450100              call 0044C948

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438301(U)
|
:004383EB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004383EE 6BC924                  imul ecx, 00000024
:004383F1 81C1B83B4B00            add ecx, 004B3BB8
:004383F7 E8E4AEFCFF              call 004032E0
:004383FC 0345F4                  add eax, dword ptr [ebp-0C]
:004383FF 50                      push eax
:00438400 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438403 6BC924                  imul ecx, 00000024
:00438406 81C1B83B4B00            add ecx, 004B3BB8
:0043840C E804AEFFFF              call 00433215

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043820F(U)
|
:00438411 5E                      pop esi
:00438412 8BE5                    mov esp, ebp
:00438414 5D                      pop ebp
:00438415 C3                      ret



* Referenced by a CALL at Addresses:
|:00439FB1   , :0043A058   
|
:00438416 55                      push ebp
:00438417 8BEC                    mov ebp, esp
:00438419 83EC1C                  sub esp, 0000001C
:0043841C 56                      push esi
:0043841D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00438420 6BC922                  imul ecx, 00000022
:00438423 81C1D0474900            add ecx, 004947D0
:00438429 E832AEFCFF              call 00403260
:0043842E 25FF000000              and eax, 000000FF
:00438433 8945FC                  mov dword ptr [ebp-04], eax
:00438436 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438439 6BC924                  imul ecx, 00000024
:0043843C 81C1B83B4B00            add ecx, 004B3BB8
:00438442 E899E5FFFF              call 004369E0
:00438447 6BC050                  imul eax, 00000050
:0043844A 05787F4900              add eax, 00497F78
:0043844F 8945F8                  mov dword ptr [ebp-08], eax
:00438452 C745F400000000          mov [ebp-0C], 00000000
:00438459 817DFCE7030000          cmp dword ptr [ebp-04], 000003E7
:00438460 7522                    jne 00438484
:00438462 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00438465 E8B199FCFF              call 00401E1B
:0043846A 8BF0                    mov esi, eax
:0043846C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043846F 6BC924                  imul ecx, 00000024
:00438472 81C1B83B4B00            add ecx, 004B3BB8
:00438478 E883AEFCFF              call 00403300
:0043847D 2BF0                    sub esi, eax
:0043847F 8975F4                  mov dword ptr [ebp-0C], esi
:00438482 EB50                    jmp 004384D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438460(C)
|
:00438484 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00438487 E88F99FCFF              call 00401E1B
:0043848C 8BF0                    mov esi, eax
:0043848E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438491 6BC924                  imul ecx, 00000024
:00438494 81C1B83B4B00            add ecx, 004B3BB8
:0043849A E861AEFCFF              call 00403300
:0043849F 2BF0                    sub esi, eax
:004384A1 3B75FC                  cmp esi, dword ptr [ebp-04]
:004384A4 7322                    jnb 004384C8
:004384A6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004384A9 E86D99FCFF              call 00401E1B
:004384AE 8BF0                    mov esi, eax
:004384B0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004384B3 6BC924                  imul ecx, 00000024
:004384B6 81C1B83B4B00            add ecx, 004B3BB8
:004384BC E83FAEFCFF              call 00403300
:004384C1 2BF0                    sub esi, eax
:004384C3 8975E8                  mov dword ptr [ebp-18], esi
:004384C6 EB06                    jmp 004384CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004384A4(C)
|
:004384C8 8B45FC                  mov eax, dword ptr [ebp-04]
:004384CB 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004384C6(U)
|
:004384CE 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004384D1 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438482(U)
|
:004384D4 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004384D6 6A03                    push 00000003
:004384D8 8B4D10                  mov ecx, dword ptr [ebp+10]
:004384DB 6BC922                  imul ecx, 00000022
:004384DE 81C1D0474900            add ecx, 004947D0
:004384E4 E87779FDFF              call 0040FE60
:004384E9 50                      push eax
:004384EA 8A550C                  mov dl, byte ptr [ebp+0C]
:004384ED 52                      push edx
:004384EE 8A4508                  mov al, byte ptr [ebp+08]
:004384F1 50                      push eax
:004384F2 B958494B00              mov ecx, 004B4958
:004384F7 E894620100              call 0044E790
:004384FC B978294B00              mov ecx, 004B2978
:00438501 E8AA43FDFF              call 0040C8B0
:00438506 83E010                  and eax, 00000010
:00438509 85C0                    test eax, eax
:0043850B 7536                    jne 00438543
:0043850D C645F000                mov [ebp-10], 00
:00438511 EB09                    jmp 0043851C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043853C(U)
|
:00438513 8A4DF0                  mov cl, byte ptr [ebp-10]
:00438516 80C101                  add cl, 01
:00438519 884DF0                  mov byte ptr [ebp-10], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438511(U)
|
:0043851C 8B55F0                  mov edx, dword ptr [ebp-10]
:0043851F 81E2FF000000            and edx, 000000FF
:00438525 83FA03                  cmp edx, 00000003
:00438528 7D14                    jge 0043853E
:0043852A 6A0E                    push 0000000E
:0043852C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043852F 50                      push eax
:00438530 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00438533 51                      push ecx
:00438534 E8D2180100              call 00449E0B
:00438539 83C40C                  add esp, 0000000C
:0043853C EBD5                    jmp 00438513

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438528(C)
|
:0043853E E9E3000000              jmp 00438626

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043850B(C)
|
:00438543 8A550C                  mov dl, byte ptr [ebp+0C]
:00438546 52                      push edx
:00438547 8D45EC                  lea eax, dword ptr [ebp-14]
:0043854A 50                      push eax
:0043854B E85C1B0100              call 0044A0AC
:00438550 83C408                  add esp, 00000008
:00438553 E8CDEDFFFF              call 00437325
:00438558 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043855B 6BC924                  imul ecx, 00000024
:0043855E 81C1B83B4B00            add ecx, 004B3BB8
:00438564 E8A743FDFF              call 0040C910
:00438569 85C0                    test eax, eax
:0043856B 7411                    je 0043857E
:0043856D 33C9                    xor ecx, ecx
:0043856F 8A0DCC484B00            mov cl, byte ptr [004B48CC]
:00438575 8D54090E                lea edx, dword ptr [ecx+ecx+0E]
:00438579 8955E4                  mov dword ptr [ebp-1C], edx
:0043857C EB0E                    jmp 0043858C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043856B(C)
|
:0043857E 33C0                    xor eax, eax
:00438580 A0CC484B00              mov al, byte ptr [004B48CC]
:00438585 8D4C002A                lea ecx, dword ptr [eax+eax+2A]
:00438589 894DE4                  mov dword ptr [ebp-1C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043857C(U)
|
:0043858C 8A55E4                  mov dl, byte ptr [ebp-1C]
:0043858F 8855EC                  mov byte ptr [ebp-14], dl
:00438592 33C0                    xor eax, eax
:00438594 A09D4E4B00              mov al, byte ptr [004B4E9D]
:00438599 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:0043859D 51                      push ecx
:0043859E B9A83B4B00              mov ecx, 004B3BA8
:004385A3 E86873FEFF              call 0041F910
:004385A8 8A550C                  mov dl, byte ptr [ebp+0C]
:004385AB 52                      push edx
:004385AC 668B45EC                mov ax, word ptr [ebp-14]
:004385B0 50                      push eax
:004385B1 E8A21B0100              call 0044A158
:004385B6 83C408                  add esp, 00000008
:004385B9 E81270FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004385BE 6A03                    push 00000003
:004385C0 E87171FFFF              call 0042F736
:004385C5 83C404                  add esp, 00000004
:004385C8 33C9                    xor ecx, ecx
:004385CA 8A0D9D4E4B00            mov cl, byte ptr [004B4E9D]
:004385D0 8D540906                lea edx, dword ptr [ecx+ecx+06]
:004385D4 52                      push edx
:004385D5 B9A83B4B00              mov ecx, 004B3BA8
:004385DA E83173FEFF              call 0041F910
:004385DF 6881000000              push 00000081
:004385E4 8B45F4                  mov eax, dword ptr [ebp-0C]
:004385E7 50                      push eax
:004385E8 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004385EB 51                      push ecx
:004385EC 668B55EC                mov dx, word ptr [ebp-14]
:004385F0 52                      push edx
:004385F1 E81C1E0100              call 0044A412
:004385F6 83C410                  add esp, 00000010
:004385F9 E8D26FFFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004385FE 6A03                    push 00000003
:00438600 E83171FFFF              call 0042F736
:00438605 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00438608 6A09                    push 00000009
:0043860A 6A21                    push 00000021
:0043860C 8A45ED                  mov al, byte ptr [ebp-13]
:0043860F 50                      push eax
:00438610 33C9                    xor ecx, ecx
:00438612 8A0DCC484B00            mov cl, byte ptr [004B48CC]
:00438618 83C106                  add ecx, 00000006
:0043861B 51                      push ecx
:0043861C B958494B00              mov ecx, 004B4958
:00438621 E822430100              call 0044C948

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043853E(U)
|
:00438626 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00438629 6BC924                  imul ecx, 00000024
:0043862C 81C1B83B4B00            add ecx, 004B3BB8
:00438632 E8C9ACFCFF              call 00403300
:00438637 0345F4                  add eax, dword ptr [ebp-0C]
:0043863A 50                      push eax
:0043863B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043863E 6BC924                  imul ecx, 00000024
:00438641 81C1B83B4B00            add ecx, 004B3BB8
:00438647 E80AACFFFF              call 00433256
:0043864C 5E                      pop esi
:0043864D 8BE5                    mov esp, ebp
:0043864F 5D                      pop ebp
:00438650 C3                      ret



* Referenced by a CALL at Addresses:
|:0045E418   , :0045E4C1   
|
:00438651 55                      push ebp
:00438652 8BEC                    mov ebp, esp
:00438654 81EC54070000            sub esp, 00000754
:0043865A 53                      push ebx
:0043865B 898DB4F8FFFF            mov dword ptr [ebp+FFFFF8B4], ecx
:00438661 8B85B4F8FFFF            mov eax, dword ptr [ebp+FFFFF8B4]
:00438667 668B4805                mov cx, word ptr [eax+05]
:0043866B 66898D5CFEFFFF          mov word ptr [ebp+FFFFFE5C], cx
:00438672 C7854CFEFFFF00000000    mov dword ptr [ebp+FFFFFE4C], 00000000
:0043867C C78554FEFFFF00000000    mov dword ptr [ebp+FFFFFE54], 00000000
:00438686 8B95B4F8FFFF            mov edx, dword ptr [ebp+FFFFF8B4]
:0043868C 33C0                    xor eax, eax
:0043868E 8A420E                  mov al, byte ptr [edx+0E]
:00438691 898528FEFFFF            mov dword ptr [ebp+FFFFFE28], eax
:00438697 C68550FEFFFF00          mov byte ptr [ebp+FFFFFE50], 00
:0043869E C685ECFEFFFF00          mov byte ptr [ebp+FFFFFEEC], 00
:004386A5 C68544FEFFFF04          mov byte ptr [ebp+FFFFFE44], 04
:004386AC B958494B00              mov ecx, 004B4958
:004386B1 E8AC440100              call 0044CB62
:004386B6 6A20                    push 00000020
:004386B8 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:004386BE E82DE7FFFF              call 00436DF0
:004386C3 85C0                    test eax, eax
:004386C5 743B                    je 00438702
:004386C7 8B0DE4554B00            mov ecx, dword ptr [004B55E4]
:004386CD 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:004386CE FF1558D64B00            Call dword ptr [004BD658]
:004386D4 85C0                    test eax, eax
:004386D6 7414                    je 004386EC
:004386D8 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:004386DE E8FDE2FFFF              call 004369E0
:004386E3 50                      push eax
:004386E4 E8AE410300              call 0046C897
:004386E9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004386D6(C)
|
:004386EC 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:004386F2 E8BEDF0100              call 004566B5
:004386F7 85C0                    test eax, eax
:004386F9 7507                    jne 00438702
:004386FB 33C0                    xor eax, eax
:004386FD E9E1080000              jmp 00438FE3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004386C5(C), :004386F9(C)
|
:00438702 8B95B4F8FFFF            mov edx, dword ptr [ebp+FFFFF8B4]
:00438708 8B02                    mov eax, dword ptr [edx]
:0043870A 50                      push eax
:0043870B B9C84F4B00              mov ecx, 004B4FC8
:00438710 E84B980000              call 00441F60
:00438715 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:0043871B E860E8FFFF              call 00436F80
:00438720 888548FEFFFF            mov byte ptr [ebp+FFFFFE48], al
:00438726 C685F0FEFFFF00          mov byte ptr [ebp+FFFFFEF0], 00
:0043872D C68524FEFFFF00          mov byte ptr [ebp+FFFFFE24], 00
:00438734 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:0043873A 8A5106                  mov dl, byte ptr [ecx+06]
:0043873D 52                      push edx
:0043873E 8B85B4F8FFFF            mov eax, dword ptr [ebp+FFFFF8B4]
:00438744 8A4805                  mov cl, byte ptr [eax+05]
:00438747 51                      push ecx
:00438748 B9C84C4B00              mov ecx, 004B4CC8
:0043874D E8C0FE0100              call 00458612
:00438752 6A00                    push 00000000
:00438754 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:0043875A E807AAFFFF              call 00433166
:0043875F 50                      push eax
:00438760 8B95B4F8FFFF            mov edx, dword ptr [ebp+FFFFF8B4]
:00438766 8A4204                  mov al, byte ptr [edx+04]
:00438769 50                      push eax
:0043876A E891080000              call 00439000
:0043876F 83C40C                  add esp, 0000000C
:00438772 25FF000000              and eax, 000000FF
:00438777 85C0                    test eax, eax
:00438779 740C                    je 00438787
:0043877B 6A01                    push 00000001
:0043877D B9C84C4B00              mov ecx, 004B4CC8
:00438782 E8F96EFEFF              call 0041F680

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438779(C)
|
:00438787 C68540FEFFFF00          mov byte ptr [ebp+FFFFFE40], 00
:0043878E EB0F                    jmp 0043879F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043883F(U)
|
:00438790 8A8D40FEFFFF            mov cl, byte ptr [ebp+FFFFFE40]
:00438796 80C101                  add cl, 01
:00438799 888D40FEFFFF            mov byte ptr [ebp+FFFFFE40], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043878E(U)
|
:0043879F 8B9540FEFFFF            mov edx, dword ptr [ebp+FFFFFE40]
:004387A5 81E2FF000000            and edx, 000000FF
:004387AB 83FA41                  cmp edx, 00000041
:004387AE 0F8D90000000            jnl 00438844
:004387B4 8B8548FEFFFF            mov eax, dword ptr [ebp+FFFFFE48]
:004387BA 25FF000000              and eax, 000000FF
:004387BF 50                      push eax
:004387C0 8B8D40FEFFFF            mov ecx, dword ptr [ebp+FFFFFE40]
:004387C6 81E1FF000000            and ecx, 000000FF
:004387CC 6BC931                  imul ecx, 00000031
:004387CF 81C1001D4B00            add ecx, 004B1D00
:004387D5 E8369CFDFF              call 00412410
:004387DA 25FF000000              and eax, 000000FF
:004387DF 85C0                    test eax, eax
:004387E1 745C                    je 0043883F
:004387E3 8B8D48FEFFFF            mov ecx, dword ptr [ebp+FFFFFE48]
:004387E9 81E1FF000000            and ecx, 000000FF
:004387EF 51                      push ecx
:004387F0 8B8D40FEFFFF            mov ecx, dword ptr [ebp+FFFFFE40]
:004387F6 81E1FF000000            and ecx, 000000FF
:004387FC 6BC931                  imul ecx, 00000031
:004387FF 81C1001D4B00            add ecx, 004B1D00
:00438805 E8069CFDFF              call 00412410
:0043880A 8AD8                    mov bl, al
:0043880C 81E3FF000000            and ebx, 000000FF
:00438812 8B95B4F8FFFF            mov edx, dword ptr [ebp+FFFFF8B4]
:00438818 8B0A                    mov ecx, dword ptr [edx]
:0043881A 6BC950                  imul ecx, 00000050
:0043881D 81C1787F4900            add ecx, 00497F78
:00438823 E87876FDFF              call 0040FEA0
:00438828 25FF000000              and eax, 000000FF
:0043882D 3BD8                    cmp ebx, eax
:0043882F 7F0E                    jg 0043883F
:00438831 6A01                    push 00000001
:00438833 B9C84C4B00              mov ecx, 004B4CC8
:00438838 E82357FFFF              call 0042DF60
:0043883D EB05                    jmp 00438844

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004387E1(C), :0043882F(C)
|
:0043883F E94CFFFFFF              jmp 00438790

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004387AE(C), :0043883D(U)
|
:00438844 8B85B4F8FFFF            mov eax, dword ptr [ebp+FFFFF8B4]
:0043884A 8B08                    mov ecx, dword ptr [eax]
:0043884C 6BC950                  imul ecx, 00000050
:0043884F 81C1787F4900            add ecx, 00497F78
:00438855 E8DD99FCFF              call 00402237
:0043885A 25FF000000              and eax, 000000FF
:0043885F 85C0                    test eax, eax
:00438861 740C                    je 0043886F
:00438863 6A01                    push 00000001
:00438865 B9C84C4B00              mov ecx, 004B4CC8
:0043886A E82159FFFF              call 0042E190

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438861(C)
|
:0043886F C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:00438879 C68540FEFFFF01          mov byte ptr [ebp+FFFFFE40], 01
:00438880 EB0F                    jmp 00438891

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438940(U)
|
:00438882 8A8D40FEFFFF            mov cl, byte ptr [ebp+FFFFFE40]
:00438888 80C101                  add cl, 01
:0043888B 888D40FEFFFF            mov byte ptr [ebp+FFFFFE40], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438880(U)
|
:00438891 8B9540FEFFFF            mov edx, dword ptr [ebp+FFFFFE40]
:00438897 81E2FF000000            and edx, 000000FF
:0043889D 83FA1E                  cmp edx, 0000001E
:004388A0 0F8D9F000000            jnl 00438945
:004388A6 8B8D40FEFFFF            mov ecx, dword ptr [ebp+FFFFFE40]
:004388AC 81E1FF000000            and ecx, 000000FF
:004388B2 6BC924                  imul ecx, 00000024
:004388B5 81C1B83B4B00            add ecx, 004B3BB8
:004388BB E810380200              call 0045C0D0
:004388C0 25FF000000              and eax, 000000FF
:004388C5 83F802                  cmp eax, 00000002
:004388C8 7576                    jne 00438940
:004388CA 8B8D40FEFFFF            mov ecx, dword ptr [ebp+FFFFFE40]
:004388D0 81E1FF000000            and ecx, 000000FF
:004388D6 6BC924                  imul ecx, 00000024
:004388D9 81C1B83B4B00            add ecx, 004B3BB8
:004388DF E89CCEFCFF              call 00405780
:004388E4 25FF000000              and eax, 000000FF
:004388E9 83F807                  cmp eax, 00000007
:004388EC 7552                    jne 00438940
:004388EE 6A40                    push 00000040
:004388F0 8B8D40FEFFFF            mov ecx, dword ptr [ebp+FFFFFE40]
:004388F6 81E1FF000000            and ecx, 000000FF
:004388FC 6BC924                  imul ecx, 00000024
:004388FF 81C1B83B4B00            add ecx, 004B3BB8
:00438905 E8E6E4FFFF              call 00436DF0
:0043890A 85C0                    test eax, eax
:0043890C 7532                    jne 00438940
:0043890E 6880000000              push 00000080
:00438913 8B8D40FEFFFF            mov ecx, dword ptr [ebp+FFFFFE40]
:00438919 81E1FF000000            and ecx, 000000FF
:0043891F 6BC924                  imul ecx, 00000024
:00438922 81C1B83B4B00            add ecx, 004B3BB8
:00438928 E8C3E4FFFF              call 00436DF0
:0043892D 85C0                    test eax, eax
:0043892F 750F                    jne 00438940
:00438931 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00438937 83C001                  add eax, 00000001
:0043893A 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004388C8(C), :004388EC(C), :0043890C(C), :0043892F(C)
|
:00438940 E93DFFFFFF              jmp 00438882

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004388A0(C)
|
:00438945 83BDE8FEFFFF00          cmp dword ptr [ebp+FFFFFEE8], 00000000
:0043894C 760C                    jbe 0043895A
:0043894E 6A01                    push 00000001
:00438950 B9C84C4B00              mov ecx, 004B4CC8
:00438955 E826960000              call 00441F80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043894C(C)
|
:0043895A 6A01                    push 00000001
:0043895C B9C84C4B00              mov ecx, 004B4CC8
:00438961 E83AE4FFFF              call 00436DA0
:00438966 C685F4FEFFFF00          mov byte ptr [ebp+FFFFFEF4], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438F58(U)
|
:0043896D 6880000000              push 00000080
:00438972 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438978 E873E4FFFF              call 00436DF0
:0043897D 85C0                    test eax, eax
:0043897F 0F85D8050000            jne 00438F5D
:00438985 8B8DF4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF4]
:0043898B 81E1FF000000            and ecx, 000000FF
:00438991 81F9FF000000            cmp ecx, 000000FF
:00438997 0F84C0050000            je 00438F5D
:0043899D E867100200              call 00459A09
:004389A2 8885F4FEFFFF            mov byte ptr [ebp+FFFFFEF4], al
:004389A8 6A00                    push 00000000
:004389AA 6A00                    push 00000000
:004389AC 6802020000              push 00000202
:004389B1 8B15B0554B00            mov edx, dword ptr [004B55B0]
:004389B7 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004389B8 FF1504D64B00            Call dword ptr [004BD604]
:004389BE 8B85F4FEFFFF            mov eax, dword ptr [ebp+FFFFFEF4]
:004389C4 25FF000000              and eax, 000000FF
:004389C9 3DFF000000              cmp eax, 000000FF
:004389CE 0F8484050000            je 00438F58
:004389D4 8B8DF4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF4]
:004389DA 81E1FF000000            and ecx, 000000FF
:004389E0 898DB0F8FFFF            mov dword ptr [ebp+FFFFF8B0], ecx
:004389E6 8B95B0F8FFFF            mov edx, dword ptr [ebp+FFFFF8B0]
:004389EC 83EA01                  sub edx, 00000001
:004389EF 8995B0F8FFFF            mov dword ptr [ebp+FFFFF8B0], edx
:004389F5 83BDB0F8FFFF05          cmp dword ptr [ebp+FFFFF8B0], 00000005
:004389FC 0F8756050000            ja 00438F58
:00438A02 8B85B0F8FFFF            mov eax, dword ptr [ebp+FFFFF8B0]
:00438A08 FF2485E88F4300          jmp dword ptr [4*eax+00438FE8]
:00438A0F 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438A15 8B09                    mov ecx, dword ptr [ecx]
:00438A17 6BC950                  imul ecx, 00000050
:00438A1A 81C1787F4900            add ecx, 00497F78
:00438A20 E89BA7FCFF              call 004031C0
:00438A25 25FF000000              and eax, 000000FF
:00438A2A 3DFF000000              cmp eax, 000000FF
:00438A2F 7520                    jne 00438A51

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00438A31 6A07                    push 00000007
:00438A33 B9F8544B00              mov ecx, 004B54F8
:00438A38 E8DD0A0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ѩS˳ƪZALk"
                                  |
:00438A3D 6860E14700              push 0047E160
:00438A42 6A00                    push 00000000
:00438A44 E8EA89FFFF              call 00431433
:00438A49 83C408                  add esp, 00000008
:00438A4C E907050000              jmp 00438F58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438A2F(C)
|
:00438A51 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438A57 E894E0FFFF              call 00436AF0
:00438A5C 25FF000000              and eax, 000000FF
:00438A61 83F805                  cmp eax, 00000005
:00438A64 7534                    jne 00438A9A
:00438A66 B9784E4B00              mov ecx, 004B4E78
:00438A6B E80F690200              call 0045F37F
:00438A70 25FF000000              and eax, 000000FF
:00438A75 83F802                  cmp eax, 00000002
:00438A78 7520                    jne 00438A9A

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00438A7A 6A07                    push 00000007
:00438A7C B9F8544B00              mov ecx, 004B54F8
:00438A81 E8940A0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ѩUBALk"
                                  |
:00438A86 687CE14700              push 0047E17C
:00438A8B 6A00                    push 00000000
:00438A8D E8A189FFFF              call 00431433
:00438A92 83C408                  add esp, 00000008
:00438A95 E9BE040000              jmp 00438F58

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438A64(C), :00438A78(C)
|
:00438A9A 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438AA0 E816DA0100              call 004564BB
:00438AA5 E9AE040000              jmp 00438F58
:00438AAA 8B95B4F8FFFF            mov edx, dword ptr [ebp+FFFFF8B4]
:00438AB0 33C0                    xor eax, eax
:00438AB2 8A421B                  mov al, byte ptr [edx+1B]
:00438AB5 83E004                  and eax, 00000004
:00438AB8 85C0                    test eax, eax
:00438ABA 7420                    je 00438ADC

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00438ABC 6A07                    push 00000007
:00438ABE B9F8544B00              mov ecx, 004B54F8
:00438AC3 E8520A0300              call 0046951A

* Possible StringData Ref from Data Obj ->"ѩQIʭpA۳QʦFC"
                                  |
:00438AC8 6890E14700              push 0047E190
:00438ACD 6A00                    push 00000000
:00438ACF E85F89FFFF              call 00431433
:00438AD4 83C408                  add esp, 00000008
:00438AD7 E97C040000              jmp 00438F58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438ABA(C)
|
:00438ADC 8D8DF8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF8]
:00438AE2 898D58FEFFFF            mov dword ptr [ebp+FFFFFE58], ecx
:00438AE8 C685F0FEFFFF00          mov byte ptr [ebp+FFFFFEF0], 00
:00438AEF 8D95A4FEFFFF            lea edx, dword ptr [ebp+FFFFFEA4]
:00438AF5 89952CFEFFFF            mov dword ptr [ebp+FFFFFE2C], edx
:00438AFB C6853CFEFFFF00          mov byte ptr [ebp+FFFFFE3C], 00
:00438B02 EB0E                    jmp 00438B12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438CBE(U)
|
:00438B04 8A853CFEFFFF            mov al, byte ptr [ebp+FFFFFE3C]
:00438B0A 0401                    add al, 01
:00438B0C 88853CFEFFFF            mov byte ptr [ebp+FFFFFE3C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438B02(U)
|
:00438B12 8B8D3CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE3C]
:00438B18 81E1FF000000            and ecx, 000000FF
:00438B1E 83F941                  cmp ecx, 00000041
:00438B21 0F8D9C010000            jnl 00438CC3
:00438B27 8B8D3CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE3C]
:00438B2D 81E1FF000000            and ecx, 000000FF
:00438B33 6BC931                  imul ecx, 00000031
:00438B36 81C1001D4B00            add ecx, 004B1D00
:00438B3C E8AFCBFCFF              call 004056F0
:00438B41 50                      push eax
:00438B42 E8C9F90300              call 00478510
:00438B47 83C404                  add esp, 00000004
:00438B4A 888530FEFFFF            mov byte ptr [ebp+FFFFFE30], al
:00438B50 8B953CFEFFFF            mov edx, dword ptr [ebp+FFFFFE3C]
:00438B56 81E2FF000000            and edx, 000000FF
:00438B5C 6BD215                  imul edx, 00000015
:00438B5F C68415B8F8FFFF00        mov byte ptr [ebp+edx-00000748], 00
:00438B67 8B8530FEFFFF            mov eax, dword ptr [ebp+FFFFFE30]
:00438B6D 25FF000000              and eax, 000000FF
:00438B72 83F804                  cmp eax, 00000004
:00438B75 7524                    jne 00438B9B

* Possible StringData Ref from Data Obj ->" "
                                  |
:00438B77 68B0E14700              push 0047E1B0
:00438B7C 8B8D3CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE3C]
:00438B82 81E1FF000000            and ecx, 000000FF
:00438B88 6BC915                  imul ecx, 00000015
:00438B8B 8D940DB8F8FFFF          lea edx, dword ptr [ebp+ecx-00000748]
:00438B92 52                      push edx
:00438B93 E898F90300              call 00478530
:00438B98 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438B75(C)
|
:00438B9B 8B8D3CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE3C]
:00438BA1 81E1FF000000            and ecx, 000000FF
:00438BA7 6BC931                  imul ecx, 00000031
:00438BAA 81C1001D4B00            add ecx, 004B1D00
:00438BB0 E83BCBFCFF              call 004056F0
:00438BB5 50                      push eax
:00438BB6 8B853CFEFFFF            mov eax, dword ptr [ebp+FFFFFE3C]
:00438BBC 25FF000000              and eax, 000000FF
:00438BC1 6BC015                  imul eax, 00000015
:00438BC4 8D8C05B8F8FFFF          lea ecx, dword ptr [ebp+eax-00000748]
:00438BCB 51                      push ecx
:00438BCC E87FF90300              call 00478550
:00438BD1 83C408                  add esp, 00000008
:00438BD4 8B9530FEFFFF            mov edx, dword ptr [ebp+FFFFFE30]
:00438BDA 81E2FF000000            and edx, 000000FF
:00438BE0 83FA04                  cmp edx, 00000004
:00438BE3 7523                    jne 00438C08

* Possible StringData Ref from Data Obj ->" "
                                  |
:00438BE5 68B4E14700              push 0047E1B4
:00438BEA 8B853CFEFFFF            mov eax, dword ptr [ebp+FFFFFE3C]
:00438BF0 25FF000000              and eax, 000000FF
:00438BF5 6BC015                  imul eax, 00000015
:00438BF8 8D8C05B8F8FFFF          lea ecx, dword ptr [ebp+eax-00000748]
:00438BFF 51                      push ecx
:00438C00 E84BF90300              call 00478550
:00438C05 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438BE3(C)
|

* Possible StringData Ref from Data Obj ->" "
                                  |
:00438C08 68B8E14700              push 0047E1B8
:00438C0D 8B953CFEFFFF            mov edx, dword ptr [ebp+FFFFFE3C]
:00438C13 81E2FF000000            and edx, 000000FF
:00438C19 6BD215                  imul edx, 00000015
:00438C1C 8D8415B8F8FFFF          lea eax, dword ptr [ebp+edx-00000748]
:00438C23 50                      push eax
:00438C24 E827F90300              call 00478550
:00438C29 83C408                  add esp, 00000008
:00438C2C C68534FEFFFF00          mov byte ptr [ebp+FFFFFE34], 00
:00438C33 8B8D3CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE3C]
:00438C39 81E1FF000000            and ecx, 000000FF
:00438C3F 6BC931                  imul ecx, 00000031
:00438C42 81C1001D4B00            add ecx, 004B1D00
:00438C48 E8B371FDFF              call 0040FE00
:00438C4D 25FF000000              and eax, 000000FF
:00438C52 50                      push eax
:00438C53 8D8D34FEFFFF            lea ecx, dword ptr [ebp+FFFFFE34]
:00438C59 51                      push ecx
:00438C5A E88183FFFF              call 00430FE0
:00438C5F 83C408                  add esp, 00000008
:00438C62 8D9534FEFFFF            lea edx, dword ptr [ebp+FFFFFE34]
:00438C68 52                      push edx
:00438C69 E8A2F80300              call 00478510
:00438C6E 83C404                  add esp, 00000004
:00438C71 83F801                  cmp eax, 00000001
:00438C74 7523                    jne 00438C99

* Possible StringData Ref from Data Obj ->" "
                                  |
:00438C76 68BCE14700              push 0047E1BC
:00438C7B 8B853CFEFFFF            mov eax, dword ptr [ebp+FFFFFE3C]
:00438C81 25FF000000              and eax, 000000FF
:00438C86 6BC015                  imul eax, 00000015
:00438C89 8D8C05B8F8FFFF          lea ecx, dword ptr [ebp+eax-00000748]
:00438C90 51                      push ecx
:00438C91 E8BAF80300              call 00478550
:00438C96 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438C74(C)
|
:00438C99 8D9534FEFFFF            lea edx, dword ptr [ebp+FFFFFE34]
:00438C9F 52                      push edx
:00438CA0 8B853CFEFFFF            mov eax, dword ptr [ebp+FFFFFE3C]
:00438CA6 25FF000000              and eax, 000000FF
:00438CAB 6BC015                  imul eax, 00000015
:00438CAE 8D8C05B8F8FFFF          lea ecx, dword ptr [ebp+eax-00000748]
:00438CB5 51                      push ecx
:00438CB6 E895F80300              call 00478550
:00438CBB 83C408                  add esp, 00000008
:00438CBE E941FEFFFF              jmp 00438B04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438B21(C)
|
:00438CC3 C6853CFEFFFF00          mov byte ptr [ebp+FFFFFE3C], 00
:00438CCA EB0F                    jmp 00438CDB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438E30(U)
|
:00438CCC 8A953CFEFFFF            mov dl, byte ptr [ebp+FFFFFE3C]
:00438CD2 80C201                  add dl, 01
:00438CD5 88953CFEFFFF            mov byte ptr [ebp+FFFFFE3C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438CCA(U)
|
:00438CDB 8B853CFEFFFF            mov eax, dword ptr [ebp+FFFFFE3C]
:00438CE1 25FF000000              and eax, 000000FF
:00438CE6 83F841                  cmp eax, 00000041
:00438CE9 0F8D46010000            jnl 00438E35
:00438CEF 8B8D48FEFFFF            mov ecx, dword ptr [ebp+FFFFFE48]
:00438CF5 81E1FF000000            and ecx, 000000FF
:00438CFB 51                      push ecx
:00438CFC 8B8D3CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE3C]
:00438D02 81E1FF000000            and ecx, 000000FF
:00438D08 6BC931                  imul ecx, 00000031
:00438D0B 81C1001D4B00            add ecx, 004B1D00
:00438D11 E8FA96FDFF              call 00412410
:00438D16 25FF000000              and eax, 000000FF
:00438D1B 85C0                    test eax, eax
:00438D1D 0F8401010000            je 00438E24
:00438D23 8B9548FEFFFF            mov edx, dword ptr [ebp+FFFFFE48]
:00438D29 81E2FF000000            and edx, 000000FF
:00438D2F 52                      push edx
:00438D30 8B8D3CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE3C]
:00438D36 81E1FF000000            and ecx, 000000FF
:00438D3C 6BC931                  imul ecx, 00000031
:00438D3F 81C1001D4B00            add ecx, 004B1D00
:00438D45 E8C696FDFF              call 00412410
:00438D4A 8AD8                    mov bl, al
:00438D4C 81E3FF000000            and ebx, 000000FF
:00438D52 8B85B4F8FFFF            mov eax, dword ptr [ebp+FFFFF8B4]
:00438D58 8B08                    mov ecx, dword ptr [eax]
:00438D5A 6BC950                  imul ecx, 00000050
:00438D5D 81C1787F4900            add ecx, 00497F78
:00438D63 E83871FDFF              call 0040FEA0
:00438D68 25FF000000              and eax, 000000FF
:00438D6D 3BD8                    cmp ebx, eax
:00438D6F 0F8FAF000000            jg 00438E24
:00438D75 8B8D3CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE3C]
:00438D7B 81E1FF000000            and ecx, 000000FF
:00438D81 6BC931                  imul ecx, 00000031
:00438D84 81C1001D4B00            add ecx, 004B1D00
:00438D8A E87170FDFF              call 0040FE00
:00438D8F 25FF000000              and eax, 000000FF
:00438D94 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438D9A 394114                  cmp dword ptr [ecx+14], eax
:00438D9D 731A                    jnb 00438DB9
:00438D9F 8B952CFEFFFF            mov edx, dword ptr [ebp+FFFFFE2C]
:00438DA5 C60200                  mov byte ptr [edx], 00
:00438DA8 8B852CFEFFFF            mov eax, dword ptr [ebp+FFFFFE2C]
:00438DAE 83C001                  add eax, 00000001
:00438DB1 89852CFEFFFF            mov dword ptr [ebp+FFFFFE2C], eax
:00438DB7 EB18                    jmp 00438DD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438D9D(C)
|
:00438DB9 8B8D2CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE2C]
:00438DBF C60101                  mov byte ptr [ecx], 01
:00438DC2 8B952CFEFFFF            mov edx, dword ptr [ebp+FFFFFE2C]
:00438DC8 83C201                  add edx, 00000001
:00438DCB 89952CFEFFFF            mov dword ptr [ebp+FFFFFE2C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438DB7(U)
|
:00438DD1 8B853CFEFFFF            mov eax, dword ptr [ebp+FFFFFE3C]
:00438DD7 25FF000000              and eax, 000000FF
:00438DDC 6BC015                  imul eax, 00000015
:00438DDF 8D8C05B8F8FFFF          lea ecx, dword ptr [ebp+eax-00000748]
:00438DE6 8B9558FEFFFF            mov edx, dword ptr [ebp+FFFFFE58]
:00438DEC 890A                    mov dword ptr [edx], ecx
:00438DEE 8B8558FEFFFF            mov eax, dword ptr [ebp+FFFFFE58]
:00438DF4 83C004                  add eax, 00000004
:00438DF7 898558FEFFFF            mov dword ptr [ebp+FFFFFE58], eax
:00438DFD 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:00438E03 81E1FF000000            and ecx, 000000FF
:00438E09 8A953CFEFFFF            mov dl, byte ptr [ebp+FFFFFE3C]
:00438E0F 88940D60FEFFFF          mov byte ptr [ebp+ecx-000001A0], dl
:00438E16 8A85F0FEFFFF            mov al, byte ptr [ebp+FFFFFEF0]
:00438E1C 0401                    add al, 01
:00438E1E 8885F0FEFFFF            mov byte ptr [ebp+FFFFFEF0], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438D1D(C), :00438D6F(C)
|
:00438E24 8B8D58FEFFFF            mov ecx, dword ptr [ebp+FFFFFE58]
:00438E2A C70100000000            mov dword ptr [ecx], 00000000
:00438E30 E997FEFFFF              jmp 00438CCC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438CE9(C)
|
:00438E35 8B95F0FEFFFF            mov edx, dword ptr [ebp+FFFFFEF0]
:00438E3B 81E2FF000000            and edx, 000000FF
:00438E41 85D2                    test edx, edx
:00438E43 0F8EA1000000            jle 00438EEA
:00438E49 C68550FEFFFF00          mov byte ptr [ebp+FFFFFE50], 00
:00438E50 C685ECFEFFFF00          mov byte ptr [ebp+FFFFFEEC], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438EE3(U)
|
:00438E57 6880000000              push 00000080
:00438E5C 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438E62 E889DFFFFF              call 00436DF0
:00438E67 85C0                    test eax, eax
:00438E69 757D                    jne 00438EE8
:00438E6B 8B8550FEFFFF            mov eax, dword ptr [ebp+FFFFFE50]
:00438E71 25FF000000              and eax, 000000FF
:00438E76 3DFF000000              cmp eax, 000000FF
:00438E7B 746B                    je 00438EE8
:00438E7D 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438E83 8B11                    mov edx, dword ptr [ecx]
:00438E85 6BD250                  imul edx, 00000050
:00438E88 81C2787F4900            add edx, 00497F78
:00438E8E 52                      push edx
:00438E8F 8D85A4FEFFFF            lea eax, dword ptr [ebp+FFFFFEA4]
:00438E95 50                      push eax
:00438E96 8D8D60FEFFFF            lea ecx, dword ptr [ebp+FFFFFE60]
:00438E9C 51                      push ecx
:00438E9D 8D95F8FEFFFF            lea edx, dword ptr [ebp+FFFFFEF8]
:00438EA3 52                      push edx
:00438EA4 E8661E0200              call 0045AD0F
:00438EA9 83C410                  add esp, 00000010
:00438EAC 888550FEFFFF            mov byte ptr [ebp+FFFFFE50], al
:00438EB2 8B8550FEFFFF            mov eax, dword ptr [ebp+FFFFFE50]
:00438EB8 25FF000000              and eax, 000000FF
:00438EBD 3DFF000000              cmp eax, 000000FF
:00438EC2 741F                    je 00438EE3
:00438EC4 8B8D50FEFFFF            mov ecx, dword ptr [ebp+FFFFFE50]
:00438ECA 81E1FF000000            and ecx, 000000FF
:00438ED0 8A940D60FEFFFF          mov dl, byte ptr [ebp+ecx-000001A0]
:00438ED7 52                      push edx
:00438ED8 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438EDE E8F11D0000              call 0043ACD4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438EC2(C)
|
:00438EE3 E96FFFFFFF              jmp 00438E57

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438E69(C), :00438E7B(C)
|
:00438EE8 EB1B                    jmp 00438F05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438E43(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00438EEA 6A07                    push 00000007
:00438EEC B9F8544B00              mov ecx, 004B54F8
:00438EF1 E824060300              call 0046951A

* Possible StringData Ref from Data Obj ->"SiH檺ۡI"
                                  |
:00438EF6 68C0E14700              push 0047E1C0
:00438EFB 6A00                    push 00000000
:00438EFD E83185FFFF              call 00431433
:00438F02 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438EE8(U)
|
:00438F05 EB51                    jmp 00438F58
:00438F07 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438F0D E881030000              call 00439293
:00438F12 EB44                    jmp 00438F58
:00438F14 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438F1A E889010000              call 004390A8
:00438F1F 85C0                    test eax, eax
:00438F21 7410                    je 00438F33
:00438F23 6880000000              push 00000080
:00438F28 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438F2E E89DD9FFFF              call 004368D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438F21(C)
|
:00438F33 EB23                    jmp 00438F58
:00438F35 6880000000              push 00000080
:00438F3A 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438F40 E88BD9FFFF              call 004368D0
:00438F45 EB11                    jmp 00438F58
:00438F47 8B85B4F8FFFF            mov eax, dword ptr [ebp+FFFFF8B4]
:00438F4D 8B08                    mov ecx, dword ptr [eax]
:00438F4F 51                      push ecx
:00438F50 E842390300              call 0046C897
:00438F55 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004389CE(C), :004389FC(C), :00438A4C(U), :00438A95(U), :00438AA5(U)
|:00438AD7(U), :00438F05(U), :00438F12(U), :00438F33(U), :00438F45(U)
|
:00438F58 E910FAFFFF              jmp 0043896D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043897F(C), :00438997(C)
|
:00438F5D 8B95F4FEFFFF            mov edx, dword ptr [ebp+FFFFFEF4]
:00438F63 81E2FF000000            and edx, 000000FF
:00438F69 81FAFF000000            cmp edx, 000000FF
:00438F6F 7530                    jne 00438FA1
:00438F71 6A40                    push 00000040
:00438F73 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438F79 E842DEFFFF              call 00436DC0
:00438F7E 6A00                    push 00000000
:00438F80 8D855CFEFFFF            lea eax, dword ptr [ebp+FFFFFE5C]
:00438F86 50                      push eax
:00438F87 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438F8D E89E8F0000              call 00441F30
:00438F92 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438F98 8A9528FEFFFF            mov dl, byte ptr [ebp+FFFFFE28]
:00438F9E 88510E                  mov byte ptr [ecx+0E], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438F6F(C)
|
:00438FA1 8B85F4FEFFFF            mov eax, dword ptr [ebp+FFFFFEF4]
:00438FA7 25FF000000              and eax, 000000FF
:00438FAC 3DFF000000              cmp eax, 000000FF
:00438FB1 7420                    je 00438FD3
:00438FB3 6880000000              push 00000080
:00438FB8 8B8DB4F8FFFF            mov ecx, dword ptr [ebp+FFFFF8B4]
:00438FBE E82DDEFFFF              call 00436DF0
:00438FC3 85C0                    test eax, eax
:00438FC5 740C                    je 00438FD3
:00438FC7 C785ACF8FFFF01000000    mov dword ptr [ebp+FFFFF8AC], 00000001
:00438FD1 EB0A                    jmp 00438FDD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00438FB1(C), :00438FC5(C)
|
:00438FD3 C785ACF8FFFF00000000    mov dword ptr [ebp+FFFFF8AC], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00438FD1(U)
|
:00438FDD 8B85ACF8FFFF            mov eax, dword ptr [ebp+FFFFF8AC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004386FD(U)
|
:00438FE3 5B                      pop ebx
:00438FE4 8BE5                    mov esp, ebp
:00438FE6 5D                      pop ebp
:00438FE7 C3                      ret



:00438FE8 0F8A4300                DWORD 00438A0F
:00438FEC AA8A4300                DWORD 00438AAA
:00438FF0 078F4300                DWORD 00438F07
:00438FF4 148F4300                DWORD 00438F14
:00438FF8 478F4300                DWORD 00438F47
:00438FFC 358F4300                DWORD 00438F35



* Referenced by a CALL at Address:
|:0043876A   
|
:00439000 55                      push ebp
:00439001 8BEC                    mov ebp, esp
:00439003 83EC0C                  sub esp, 0000000C
:00439006 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439009 81E1FF000000            and ecx, 000000FF
:0043900F 6BC924                  imul ecx, 00000024
:00439012 81C1B83B4B00            add ecx, 004B3BB8
:00439018 E863C7FCFF              call 00405780
:0043901D 25FF000000              and eax, 000000FF
:00439022 83F807                  cmp eax, 00000007
:00439025 7415                    je 0043903C
:00439027 33C0                    xor eax, eax
:00439029 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043902E 83E004                  and eax, 00000004
:00439031 85C0                    test eax, eax
:00439033 7507                    jne 0043903C
:00439035 A0504A4B00              mov al, byte ptr [004B4A50]
:0043903A EB68                    jmp 004390A4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439025(C), :00439033(C)
|
:0043903C C745FC01000000          mov [ebp-04], 00000001
:00439043 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439046 81E1FF000000            and ecx, 000000FF
:0043904C 6BC924                  imul ecx, 00000024
:0043904F 81C1B83B4B00            add ecx, 004B3BB8
:00439055 E8E68BFFFF              call 00431C40
:0043905A 668B08                  mov cx, word ptr [eax]
:0043905D 66894DF4                mov word ptr [ebp-0C], cx
:00439061 6A00                    push 00000000
:00439063 8A5510                  mov dl, byte ptr [ebp+10]
:00439066 52                      push edx
:00439067 8A450C                  mov al, byte ptr [ebp+0C]
:0043906A 50                      push eax
:0043906B 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0043906E 51                      push ecx
:0043906F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439072 81E1FF000000            and ecx, 000000FF
:00439078 6BC924                  imul ecx, 00000024
:0043907B 81C1B83B4B00            add ecx, 004B3BB8
:00439081 E8B4690100              call 0044FA3A
:00439086 8845F8                  mov byte ptr [ebp-08], al
:00439089 8B55F8                  mov edx, dword ptr [ebp-08]
:0043908C 81E2FF000000            and edx, 000000FF
:00439092 81FAFF000000            cmp edx, 000000FF
:00439098 7507                    jne 004390A1
:0043909A C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439098(C)
|
:004390A1 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043903A(U)
|
:004390A4 8BE5                    mov esp, ebp
:004390A6 5D                      pop ebp
:004390A7 C3                      ret



* Referenced by a CALL at Address:
|:00438F1A   
|
:004390A8 55                      push ebp
:004390A9 8BEC                    mov ebp, esp
:004390AB 83EC0C                  sub esp, 0000000C
:004390AE 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible StringData Ref from Data Obj ->"涰XܡH"
                                  |
:004390B1 68D8E14700              push 0047E1D8

* Possible Reference to String Resource ID=00006: ""
                                  |
:004390B6 6A06                    push 00000006
:004390B8 E87683FFFF              call 00431433
:004390BD 83C408                  add esp, 00000008
:004390C0 85C0                    test eax, eax
:004390C2 7507                    jne 004390CB
:004390C4 33C0                    xor eax, eax
:004390C6 E992010000              jmp 0043925D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004390C2(C)
|
:004390CB 6A00                    push 00000000
:004390CD E869150300              call 0046A63B
:004390D2 83C404                  add esp, 00000004
:004390D5 C705C04E4B0000000000    mov dword ptr [004B4EC0], 00000000
:004390DF 6A00                    push 00000000
:004390E1 A1C04E4B00              mov eax, dword ptr [004B4EC0]
:004390E6 50                      push eax
:004390E7 E8114C0300              call 0046DCFD
:004390EC 83C408                  add esp, 00000008
:004390EF C745FC00000000          mov [ebp-04], 00000000
:004390F6 EB09                    jmp 00439101

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043922E(U)
|
:004390F8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004390FB 83C101                  add ecx, 00000001
:004390FE 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004390F6(U)
|
:00439101 837DFC5A                cmp dword ptr [ebp-04], 0000005A
:00439105 0F8328010000            jnb 00439233
:0043910B C745F801000000          mov [ebp-08], 00000001
:00439112 EB09                    jmp 0043911D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439229(U)
|
:00439114 8B55F8                  mov edx, dword ptr [ebp-08]
:00439117 83C201                  add edx, 00000001
:0043911A 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439112(U)
|
:0043911D 837DF81E                cmp dword ptr [ebp-08], 0000001E
:00439121 0F8307010000            jnb 0043922E
:00439127 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043912A 6BC924                  imul ecx, 00000024
:0043912D 81C1B83B4B00            add ecx, 004B3BB8
:00439133 E8688E0000              call 00441FA0
:00439138 25FF000000              and eax, 000000FF
:0043913D 3B45FC                  cmp eax, dword ptr [ebp-04]
:00439140 0F85E3000000            jne 00439229
:00439146 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00439149 6BC924                  imul ecx, 00000024
:0043914C 81C1B83B4B00            add ecx, 004B3BB8
:00439152 E829C6FCFF              call 00405780
:00439157 25FF000000              and eax, 000000FF
:0043915C 83F807                  cmp eax, 00000007
:0043915F 0F85C4000000            jne 00439229
:00439165 6A40                    push 00000040
:00439167 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043916A 6BC924                  imul ecx, 00000024
:0043916D 81C1B83B4B00            add ecx, 004B3BB8
:00439173 E878DCFFFF              call 00436DF0
:00439178 85C0                    test eax, eax
:0043917A 0F85A9000000            jne 00439229
:00439180 6880000000              push 00000080
:00439185 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00439188 6BC924                  imul ecx, 00000024
:0043918B 81C1B83B4B00            add ecx, 004B3BB8
:00439191 E85ADCFFFF              call 00436DF0
:00439196 85C0                    test eax, eax
:00439198 0F858B000000            jne 00439229
:0043919E 6A00                    push 00000000
:004391A0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004391A3 6BC924                  imul ecx, 00000024
:004391A6 81C1B83B4B00            add ecx, 004B3BB8
:004391AC E84AC0FFFF              call 004351FB
:004391B1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004391B4 E8278E0000              call 00441FE0
:004391B9 50                      push eax
:004391BA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004391BD 6BC924                  imul ecx, 00000024
:004391C0 81C1B83B4B00            add ecx, 004B3BB8
:004391C6 E855DDFFFF              call 00436F20
:004391CB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004391CE 6BC924                  imul ecx, 00000024
:004391D1 81C1B83B4B00            add ecx, 004B3BB8
:004391D7 E809940100              call 004525E5

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004391DC 6A07                    push 00000007
:004391DE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004391E1 6BC924                  imul ecx, 00000024
:004391E4 81C1B83B4B00            add ecx, 004B3BB8
:004391EA E80CC0FFFF              call 004351FB
:004391EF 68FF000000              push 000000FF
:004391F4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004391F7 6BC924                  imul ecx, 00000024
:004391FA 81C1B83B4B00            add ecx, 004B3BB8
:00439200 E81BDDFFFF              call 00436F20
:00439205 6880000000              push 00000080
:0043920A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043920D 6BC924                  imul ecx, 00000024
:00439210 81C1B83B4B00            add ecx, 004B3BB8
:00439216 E8B5D6FFFF              call 004368D0
:0043921B 8A45F8                  mov al, byte ptr [ebp-08]
:0043921E 50                      push eax
:0043921F B9C84F4B00              mov ecx, 004B4FC8
:00439224 E8267A0200              call 00460C4F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439140(C), :0043915F(C), :0043917A(C), :00439198(C)
|
:00439229 E9E6FEFFFF              jmp 00439114

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439121(C)
|
:0043922E E9C5FEFFFF              jmp 004390F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439105(C)
|
:00439233 C705C04E4B0001000000    mov dword ptr [004B4EC0], 00000001
:0043923D 6A00                    push 00000000
:0043923F 8B0DC04E4B00            mov ecx, dword ptr [004B4EC0]
:00439245 51                      push ecx
:00439246 E8B24A0300              call 0046DCFD
:0043924B 83C408                  add esp, 00000008
:0043924E 6A01                    push 00000001
:00439250 E8E6130300              call 0046A63B
:00439255 83C404                  add esp, 00000004
:00439258 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004390C6(U)
|
:0043925D 8BE5                    mov esp, ebp
:0043925F 5D                      pop ebp
:00439260 C3                      ret



* Referenced by a CALL at Address:
|:00439365   
|
:00439261 55                      push ebp
:00439262 8BEC                    mov ebp, esp
:00439264 8B4508                  mov eax, dword ptr [ebp+08]
:00439267 A380AA4800              mov dword ptr [0048AA80], eax
:0043926C 6A00                    push 00000000
:0043926E 68B8444600              push 004644B8
:00439273 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00439279 51                      push ecx

* Possible Reference to Dialog: DialogID_00F2 
                                  |
:0043927A 68F2000000              push 000000F2
:0043927F 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00439285 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00439286 FF15DCD64B00            Call dword ptr [004BD6DC]
:0043928C A180AA4800              mov eax, dword ptr [0048AA80]
:00439291 5D                      pop ebp
:00439292 C3                      ret



* Referenced by a CALL at Address:
|:00438F0D   
|
:00439293 55                      push ebp
:00439294 8BEC                    mov ebp, esp
:00439296 83EC20                  sub esp, 00000020
:00439299 56                      push esi
:0043929A 894DE4                  mov dword ptr [ebp-1C], ecx
:0043929D 8B45E4                  mov eax, dword ptr [ebp-1C]
:004392A0 8B08                    mov ecx, dword ptr [eax]
:004392A2 6BC950                  imul ecx, 00000050
:004392A5 81C1787F4900            add ecx, 00497F78
:004392AB E8878FFCFF              call 00402237
:004392B0 25FF000000              and eax, 000000FF
:004392B5 85C0                    test eax, eax
:004392B7 7520                    jne 004392D9

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004392B9 6A07                    push 00000007
:004392BB B9F8544B00              mov ecx, 004B54F8
:004392C0 E855020300              call 0046951A

* Possible StringData Ref from Data Obj ->"DI"
                                  |
:004392C5 68E8E14700              push 0047E1E8
:004392CA 6A00                    push 00000000
:004392CC E86281FFFF              call 00431433
:004392D1 83C408                  add esp, 00000008
:004392D4 E901040000              jmp 004396DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004392B7(C)
|
:004392D9 C645F4FF                mov [ebp-0C], FF
:004392DD C645E800                mov [ebp-18], 00
:004392E1 C745F800000000          mov [ebp-08], 00000000
:004392E8 C645F0FF                mov [ebp-10], FF
:004392EC 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004392EF E84C89FFFF              call 00431C40
:004392F4 8A4801                  mov cl, byte ptr [eax+01]
:004392F7 51                      push ecx
:004392F8 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004392FB E84089FFFF              call 00431C40
:00439300 8A10                    mov dl, byte ptr [eax]
:00439302 52                      push edx
:00439303 B9704C4B00              mov ecx, 004B4C70
:00439308 E8E4F40100              call 004587F1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439379(U), :004396CB(U)
|
:0043930D 8B45E8                  mov eax, dword ptr [ebp-18]
:00439310 25FF000000              and eax, 000000FF
:00439315 3DFF000000              cmp eax, 000000FF
:0043931A 0F84B0030000            je 004396D0
:00439320 6880000000              push 00000080
:00439325 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00439328 E8C3DAFFFF              call 00436DF0
:0043932D 85C0                    test eax, eax
:0043932F 0F859B030000            jne 004396D0
:00439335 E8FD060200              call 00459A37
:0043933A 8845E8                  mov byte ptr [ebp-18], al
:0043933D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00439340 81E1FF000000            and ecx, 000000FF
:00439346 81F9FF000000            cmp ecx, 000000FF
:0043934C 7505                    jne 00439353
:0043934E E97D030000              jmp 004396D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043934C(C)
|
:00439353 6A00                    push 00000000
:00439355 B9F8544B00              mov ecx, 004B54F8
:0043935A E8BB010300              call 0046951A
:0043935F 8B55E4                  mov edx, dword ptr [ebp-1C]
:00439362 8B02                    mov eax, dword ptr [edx]
:00439364 50                      push eax
:00439365 E8F7FEFFFF              call 00439261
:0043936A 83C404                  add esp, 00000004
:0043936D 8945FC                  mov dword ptr [ebp-04], eax
:00439370 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00439377 7502                    jne 0043937B
:00439379 EB92                    jmp 0043930D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439377(C)
|
:0043937B 6A00                    push 00000000
:0043937D B9F8544B00              mov ecx, 004B54F8
:00439382 E893010300              call 0046951A
:00439387 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043938A 81E1FF000000            and ecx, 000000FF
:00439390 894DE0                  mov dword ptr [ebp-20], ecx
:00439393 837DE003                cmp dword ptr [ebp-20], 00000003
:00439397 0F871A030000            ja 004396B7
:0043939D 8B55E0                  mov edx, dword ptr [ebp-20]
:004393A0 FF2495DF964300          jmp dword ptr [4*edx+004396DF]
:004393A7 8A45FC                  mov al, byte ptr [ebp-04]
:004393AA 50                      push eax
:004393AB 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004393AE E83A040000              call 004397ED
:004393B3 E901030000              jmp 004396B9
:004393B8 8A4DFC                  mov cl, byte ptr [ebp-04]
:004393BB 51                      push ecx
:004393BC 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004393BF E82E060000              call 004399F2
:004393C4 E9F0020000              jmp 004396B9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004394A1(U), :00439520(U), :004395C4(U), :004395F9(U)
|
:004393C9 6A01                    push 00000001

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004393CB 6A02                    push 00000002
:004393CD 8B55E4                  mov edx, dword ptr [ebp-1C]
:004393D0 8A4204                  mov al, byte ptr [edx+04]
:004393D3 50                      push eax
:004393D4 B958494B00              mov ecx, 004B4958
:004393D9 E8D0490100              call 0044DDAE
:004393DE 8845F4                  mov byte ptr [ebp-0C], al
:004393E1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004393E4 81E1FF000000            and ecx, 000000FF
:004393EA 81F9FF000000            cmp ecx, 000000FF
:004393F0 0F84D3010000            je 004395C9
:004393F6 8B55F4                  mov edx, dword ptr [ebp-0C]
:004393F9 81E2FF000000            and edx, 000000FF
:004393FF 8B45E4                  mov eax, dword ptr [ebp-1C]
:00439402 33C9                    xor ecx, ecx
:00439404 8A4804                  mov cl, byte ptr [eax+04]
:00439407 3BD1                    cmp edx, ecx
:00439409 0F84BA010000            je 004395C9
:0043940F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439412 81E1FF000000            and ecx, 000000FF
:00439418 6BC924                  imul ecx, 00000024
:0043941B 81C1B83B4B00            add ecx, 004B3BB8
:00439421 E8BAD5FFFF              call 004369E0
:00439426 8945EC                  mov dword ptr [ebp-14], eax
:00439429 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043942C 6BC950                  imul ecx, 00000050
:0043942F 81C1787F4900            add ecx, 00497F78
:00439435 E8488EFCFF              call 00402282
:0043943A 85C0                    test eax, eax
:0043943C 0F8467010000            je 004395A9
:00439442 8B55FC                  mov edx, dword ptr [ebp-04]
:00439445 52                      push edx
:00439446 8B45E4                  mov eax, dword ptr [ebp-1C]
:00439449 8B08                    mov ecx, dword ptr [eax]
:0043944B 6BC950                  imul ecx, 00000050
:0043944E 81C1787F4900            add ecx, 00497F78
:00439454 E8D88AFCFF              call 00401F31
:00439459 8845F0                  mov byte ptr [ebp-10], al
:0043945C 8B75F0                  mov esi, dword ptr [ebp-10]
:0043945F 81E6FF000000            and esi, 000000FF
:00439465 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00439468 8B09                    mov ecx, dword ptr [ecx]
:0043946A 6BC950                  imul ecx, 00000050
:0043946D 81C1787F4900            add ecx, 00497F78
:00439473 E8489DFCFF              call 004031C0
:00439478 25FF000000              and eax, 000000FF
:0043947D 3BF0                    cmp esi, eax
:0043947F 7525                    jne 004394A6
:00439481 8B55FC                  mov edx, dword ptr [ebp-04]
:00439484 52                      push edx
:00439485 E889A0FCFF              call 00403513
:0043948A 83C404                  add esp, 00000004
:0043948D 50                      push eax

* Possible StringData Ref from Data Obj ->"{b˳ƤF%sAXܡH"
                                  |
:0043948E 68F8E14700              push 0047E1F8

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00439493 6A02                    push 00000002
:00439495 E8997FFFFF              call 00431433
:0043949A 83C40C                  add esp, 0000000C
:0043949D 85C0                    test eax, eax
:0043949F 7505                    jne 004394A6
:004394A1 E923FFFFFF              jmp 004393C9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043947F(C), :0043949F(C)
|
:004394A6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004394A9 6BC922                  imul ecx, 00000022
:004394AC 81C1D0474900            add ecx, 004947D0
:004394B2 E8A969FDFF              call 0040FE60
:004394B7 25FF000000              and eax, 000000FF
:004394BC 83F811                  cmp eax, 00000011
:004394BF 7D64                    jge 00439525
:004394C1 8B45EC                  mov eax, dword ptr [ebp-14]
:004394C4 50                      push eax
:004394C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004394C8 51                      push ecx
:004394C9 E8F385FCFF              call 00401AC1
:004394CE 83C408                  add esp, 00000008
:004394D1 85C0                    test eax, eax
:004394D3 7550                    jne 00439525
:004394D5 8B55FC                  mov edx, dword ptr [ebp-04]
:004394D8 52                      push edx
:004394D9 E835A0FCFF              call 00403513
:004394DE 83C404                  add esp, 00000004
:004394E1 50                      push eax
:004394E2 8B45EC                  mov eax, dword ptr [ebp-14]
:004394E5 50                      push eax
:004394E6 E8217DFCFF              call 0040120C
:004394EB 83C404                  add esp, 00000004
:004394EE 50                      push eax
:004394EF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004394F2 6BC950                  imul ecx, 00000050
:004394F5 81C1787F4900            add ecx, 00497F78
:004394FB E8A09CFCFF              call 004031A0
:00439500 25FF000000              and eax, 000000FF
:00439505 8B0C85B0D64700          mov ecx, dword ptr [4*eax+0047D6B0]
:0043950C 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s%sLk˳%sAXܡH"
                                  |
:0043950D 6810E24700              push 0047E210

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00439512 6A02                    push 00000002
:00439514 E81A7FFFFF              call 00431433
:00439519 83C414                  add esp, 00000014
:0043951C 85C0                    test eax, eax
:0043951E 7505                    jne 00439525
:00439520 E9A4FEFFFF              jmp 004393C9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004394BF(C), :004394D3(C), :0043951E(C)
|
:00439525 8B55FC                  mov edx, dword ptr [ebp-04]
:00439528 52                      push edx
:00439529 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043952C 6BC950                  imul ecx, 00000050
:0043952F 81C1787F4900            add ecx, 00497F78
:00439535 E86A8DFCFF              call 004022A4
:0043953A 68FF000000              push 000000FF
:0043953F 8A45F0                  mov al, byte ptr [ebp-10]
:00439542 50                      push eax
:00439543 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00439546 8B09                    mov ecx, dword ptr [ecx]
:00439548 6BC950                  imul ecx, 00000050
:0043954B 81C1787F4900            add ecx, 00497F78
:00439551 E8AA9CFCFF              call 00403200
:00439556 8B55EC                  mov edx, dword ptr [ebp-14]
:00439559 52                      push edx
:0043955A E8AD7CFCFF              call 0040120C
:0043955F 83C404                  add esp, 00000004
:00439562 50                      push eax
:00439563 8B45FC                  mov eax, dword ptr [ebp-04]
:00439566 50                      push eax
:00439567 E8A79FFCFF              call 00403513
:0043956C 83C404                  add esp, 00000004
:0043956F 50                      push eax

* Possible StringData Ref from Data Obj ->"%s浹%sF"
                                  |
:00439570 682CE24700              push 0047E22C
:00439575 6A00                    push 00000000
:00439577 E8B77EFFFF              call 00431433
:0043957C 83C410                  add esp, 00000010
:0043957F 6880000000              push 00000080
:00439584 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00439587 E844D3FFFF              call 004368D0
:0043958C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043958F 8A5104                  mov dl, byte ptr [ecx+04]
:00439592 52                      push edx
:00439593 E857010000              call 004396EF
:00439598 83C404                  add esp, 00000004
:0043959B 8A45F4                  mov al, byte ptr [ebp-0C]
:0043959E 50                      push eax
:0043959F E84B010000              call 004396EF
:004395A4 83C404                  add esp, 00000004
:004395A7 EB20                    jmp 004395C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043943C(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004395A9 6A07                    push 00000007
:004395AB B9F8544B00              mov ecx, 004B54F8
:004395B0 E865FF0200              call 0046951A

* Possible StringData Ref from Data Obj ->"䳡AhDF"
                                  |
:004395B5 683CE24700              push 0047E23C
:004395BA 6A00                    push 00000000
:004395BC E8727EFFFF              call 00431433
:004395C1 83C408                  add esp, 00000008
:004395C4 E900FEFFFF              jmp 004393C9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004393F0(C), :00439409(C), :004395A7(U)
|
:004395C9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004395CC 81E1FF000000            and ecx, 000000FF
:004395D2 8B55E4                  mov edx, dword ptr [ebp-1C]
:004395D5 33C0                    xor eax, eax
:004395D7 8A4204                  mov al, byte ptr [edx+04]
:004395DA 3BC8                    cmp ecx, eax
:004395DC 7520                    jne 004395FE

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004395DE 6A07                    push 00000007
:004395E0 B9F8544B00              mov ecx, 004B54F8
:004395E5 E830FF0200              call 0046951A

* Possible StringData Ref from Data Obj ->"൹ۭx"
                                  |
:004395EA 685CE24700              push 0047E25C
:004395EF 6A00                    push 00000000
:004395F1 E83D7EFFFF              call 00431433
:004395F6 83C408                  add esp, 00000008
:004395F9 E9CBFDFFFF              jmp 004393C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004395DC(C)
|
:004395FE E9B6000000              jmp 004396B9
:00439603 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00439606 8B09                    mov ecx, dword ptr [ecx]
:00439608 6BC950                  imul ecx, 00000050
:0043960B 81C1787F4900            add ecx, 00497F78
:00439611 E8F389FCFF              call 00402009
:00439616 3945FC                  cmp dword ptr [ebp-04], eax
:00439619 7521                    jne 0043963C
:0043961B 8B55FC                  mov edx, dword ptr [ebp-04]
:0043961E 52                      push edx
:0043961F E8EF9EFCFF              call 00403513
:00439624 83C404                  add esp, 00000004
:00439627 50                      push eax

* Possible StringData Ref from Data Obj ->"{b˳ƤF%sAoܡH"
                                  |
:00439628 686CE24700              push 0047E26C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043962D 6A02                    push 00000002
:0043962F E8FF7DFFFF              call 00431433
:00439634 83C40C                  add esp, 0000000C
:00439637 8945F8                  mov dword ptr [ebp-08], eax
:0043963A EB1F                    jmp 0043965B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439619(C)
|
:0043963C 8B45FC                  mov eax, dword ptr [ebp-04]
:0043963F 50                      push eax
:00439640 E8CE9EFCFF              call 00403513
:00439645 83C404                  add esp, 00000004
:00439648 50                      push eax

* Possible StringData Ref from Data Obj ->"o%sܡH"
                                  |
:00439649 6884E24700              push 0047E284

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043964E 6A02                    push 00000002
:00439650 E8DE7DFFFF              call 00431433
:00439655 83C40C                  add esp, 0000000C
:00439658 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043963A(U)
|
:0043965B 837DF800                cmp dword ptr [ebp-08], 00000000
:0043965F 7454                    je 004396B5
:00439661 68FF000000              push 000000FF
:00439666 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439669 51                      push ecx
:0043966A 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043966D 8B0A                    mov ecx, dword ptr [edx]
:0043966F 6BC950                  imul ecx, 00000050
:00439672 81C1787F4900            add ecx, 00497F78
:00439678 E8688BFCFF              call 004021E5
:0043967D 8B45FC                  mov eax, dword ptr [ebp-04]
:00439680 50                      push eax
:00439681 E88D9EFCFF              call 00403513
:00439686 83C404                  add esp, 00000004
:00439689 50                      push eax

* Possible StringData Ref from Data Obj ->"oF%s"
                                  |
:0043968A 6890E24700              push 0047E290
:0043968F 6A00                    push 00000000
:00439691 E89D7DFFFF              call 00431433
:00439696 83C40C                  add esp, 0000000C
:00439699 6880000000              push 00000080
:0043969E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004396A1 E82AD2FFFF              call 004368D0
:004396A6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004396A9 8A5104                  mov dl, byte ptr [ecx+04]
:004396AC 52                      push edx
:004396AD E83D000000              call 004396EF
:004396B2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043965F(C)
|
:004396B5 EB02                    jmp 004396B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439397(C)
|
:004396B7 EB21                    jmp 004396DA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004393B3(U), :004393C4(U), :004395FE(U), :004396B5(U)
|
:004396B9 6A18                    push 00000018
:004396BB 6A27                    push 00000027
:004396BD 6A00                    push 00000000
:004396BF 6A00                    push 00000000
:004396C1 B958494B00              mov ecx, 004B4958
:004396C6 E87D320100              call 0044C948
:004396CB E93DFCFFFF              jmp 0043930D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043931A(C), :0043932F(C), :0043934E(U)
|
:004396D0 B9784E4B00              mov ecx, 004B4E78
:004396D5 E8E85B0200              call 0045F2C2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004392D4(U), :004396B7(U)
|
:004396DA 5E                      pop esi
:004396DB 8BE5                    mov esp, ebp
:004396DD 5D                      pop ebp
:004396DE C3                      ret



:004396DF A7934300                DWORD 004393A7
:004396E3 B8934300                DWORD 004393B8
:004396E7 C9934300                DWORD 004393C9
:004396EB 03964300                DWORD 00439603



* Referenced by a CALL at Addresses:
|:00439593   , :0043959F   , :004396AD   
|
:004396EF 55                      push ebp
:004396F0 8BEC                    mov ebp, esp
:004396F2 83EC08                  sub esp, 00000008
:004396F5 8B4508                  mov eax, dword ptr [ebp+08]
:004396F8 25FF000000              and eax, 000000FF
:004396FD 83F85A                  cmp eax, 0000005A
:00439700 7C05                    jl 00439707
:00439702 E9E2000000              jmp 004397E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439700(C)
|
:00439707 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043970A 81E1FF000000            and ecx, 000000FF
:00439710 6BC924                  imul ecx, 00000024
:00439713 81C1B83B4B00            add ecx, 004B3BB8
:00439719 E8C2D2FFFF              call 004369E0
:0043971E 8BC8                    mov ecx, eax
:00439720 6BC950                  imul ecx, 00000050
:00439723 81C1787F4900            add ecx, 00497F78
:00439729 E8BC86FCFF              call 00401DEA
:0043972E 8945F8                  mov dword ptr [ebp-08], eax
:00439731 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439734 81E1FF000000            and ecx, 000000FF
:0043973A 6BC924                  imul ecx, 00000024
:0043973D 81C1B83B4B00            add ecx, 004B3BB8
:00439743 E898D2FFFF              call 004369E0
:00439748 8BC8                    mov ecx, eax
:0043974A 6BC950                  imul ecx, 00000050
:0043974D 81C1787F4900            add ecx, 00497F78
:00439753 E8C386FCFF              call 00401E1B
:00439758 8945FC                  mov dword ptr [ebp-04], eax
:0043975B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043975E 81E1FF000000            and ecx, 000000FF
:00439764 6BC924                  imul ecx, 00000024
:00439767 81C1B83B4B00            add ecx, 004B3BB8
:0043976D E86E9BFCFF              call 004032E0
:00439772 3B45F8                  cmp eax, dword ptr [ebp-08]
:00439775 761B                    jbe 00439792
:00439777 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043977A 51                      push ecx
:0043977B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043977E 81E1FF000000            and ecx, 000000FF
:00439784 6BC924                  imul ecx, 00000024
:00439787 81C1B83B4B00            add ecx, 004B3BB8
:0043978D E8839AFFFF              call 00433215

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439775(C)
|
:00439792 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439795 81E1FF000000            and ecx, 000000FF
:0043979B 6BC924                  imul ecx, 00000024
:0043979E 81C1B83B4B00            add ecx, 004B3BB8
:004397A4 E8579BFCFF              call 00403300
:004397A9 3B45FC                  cmp eax, dword ptr [ebp-04]
:004397AC 761B                    jbe 004397C9
:004397AE 8B55FC                  mov edx, dword ptr [ebp-04]
:004397B1 52                      push edx
:004397B2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004397B5 81E1FF000000            and ecx, 000000FF
:004397BB 6BC924                  imul ecx, 00000024
:004397BE 81C1B83B4B00            add ecx, 004B3BB8
:004397C4 E88D9AFFFF              call 00433256

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004397AC(C)
|
:004397C9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004397CC 81E1FF000000            and ecx, 000000FF
:004397D2 6BC924                  imul ecx, 00000024
:004397D5 81C1B83B4B00            add ecx, 004B3BB8
:004397DB E800D2FFFF              call 004369E0
:004397E0 50                      push eax
:004397E1 E836330300              call 0046CB1C
:004397E6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439702(U)
|
:004397E9 8BE5                    mov esp, ebp
:004397EB 5D                      pop ebp
:004397EC C3                      ret



* Referenced by a CALL at Address:
|:004393AE   
|
:004397ED 55                      push ebp
:004397EE 8BEC                    mov ebp, esp
:004397F0 83EC0C                  sub esp, 0000000C
:004397F3 894DF4                  mov dword ptr [ebp-0C], ecx
:004397F6 8B45F4                  mov eax, dword ptr [ebp-0C]
:004397F9 8B08                    mov ecx, dword ptr [eax]
:004397FB 6BC950                  imul ecx, 00000050
:004397FE 81C1787F4900            add ecx, 00497F78
:00439804 E80088FCFF              call 00402009
:00439809 8845F8                  mov byte ptr [ebp-08], al
:0043980C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043980F 81E1FF000000            and ecx, 000000FF
:00439815 51                      push ecx
:00439816 8B55F4                  mov edx, dword ptr [ebp-0C]
:00439819 8B0A                    mov ecx, dword ptr [edx]
:0043981B 6BC950                  imul ecx, 00000050
:0043981E 81C1787F4900            add ecx, 00497F78
:00439824 E8B581FCFF              call 004019DE
:00439829 85C0                    test eax, eax
:0043982B 7520                    jne 0043984D

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043982D 6A07                    push 00000007
:0043982F B9F8544B00              mov ecx, 004B54F8
:00439834 E8E1FC0200              call 0046951A

* Possible StringData Ref from Data Obj ->"DLk˳"
                                  |
:00439839 689CE24700              push 0047E29C
:0043983E 6A00                    push 00000000
:00439840 E8EE7BFFFF              call 00431433
:00439845 83C408                  add esp, 00000008
:00439848 E99F010000              jmp 004399EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043982B(C)
|
:0043984D 8B4508                  mov eax, dword ptr [ebp+08]
:00439850 25FF000000              and eax, 000000FF
:00439855 50                      push eax
:00439856 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439859 8B09                    mov ecx, dword ptr [ecx]
:0043985B 6BC950                  imul ecx, 00000050
:0043985E 81C1787F4900            add ecx, 00497F78
:00439864 E8C886FCFF              call 00401F31
:00439869 8845FC                  mov byte ptr [ebp-04], al
:0043986C 8B55FC                  mov edx, dword ptr [ebp-04]
:0043986F 81E2FF000000            and edx, 000000FF
:00439875 81FAFF000000            cmp edx, 000000FF
:0043987B 7505                    jne 00439882
:0043987D E96A010000              jmp 004399EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043987B(C)
|
:00439882 8B45F8                  mov eax, dword ptr [ebp-08]
:00439885 25FF000000              and eax, 000000FF
:0043988A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043988D 81E1FF000000            and ecx, 000000FF
:00439893 3BC1                    cmp eax, ecx
:00439895 0F84D6000000            je 00439971
:0043989B 8B55F8                  mov edx, dword ptr [ebp-08]
:0043989E 81E2FF000000            and edx, 000000FF
:004398A4 81FAFF000000            cmp edx, 000000FF
:004398AA 746C                    je 00439918
:004398AC 8B4508                  mov eax, dword ptr [ebp+08]
:004398AF 25FF000000              and eax, 000000FF
:004398B4 50                      push eax
:004398B5 E8599CFCFF              call 00403513
:004398BA 83C404                  add esp, 00000004
:004398BD 50                      push eax
:004398BE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004398C1 81E1FF000000            and ecx, 000000FF
:004398C7 51                      push ecx
:004398C8 E8469CFCFF              call 00403513
:004398CD 83C404                  add esp, 00000004
:004398D0 50                      push eax

* Possible StringData Ref from Data Obj ->"N˳ƪ%sܧ%s"
                                  |
:004398D1 68B0E24700              push 0047E2B0

* Possible Reference to String Resource ID=00006: ""
                                  |
:004398D6 6A06                    push 00000006
:004398D8 E8567BFFFF              call 00431433
:004398DD 83C410                  add esp, 00000010
:004398E0 85C0                    test eax, eax
:004398E2 7432                    je 00439916
:004398E4 8A55FC                  mov dl, byte ptr [ebp-04]
:004398E7 52                      push edx
:004398E8 8B45F4                  mov eax, dword ptr [ebp-0C]
:004398EB 8B08                    mov ecx, dword ptr [eax]
:004398ED 6BC950                  imul ecx, 00000050
:004398F0 81C1787F4900            add ecx, 00497F78
:004398F6 E8D52FFDFF              call 0040C8D0
:004398FB 6880000000              push 00000080
:00439900 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439903 E8C8CFFFFF              call 004368D0
:00439908 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043990B 8B11                    mov edx, dword ptr [ecx]
:0043990D 52                      push edx
:0043990E E809320300              call 0046CB1C
:00439913 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004398E2(C)
|
:00439916 EB57                    jmp 0043996F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004398AA(C)
|
:00439918 8B4508                  mov eax, dword ptr [ebp+08]
:0043991B 25FF000000              and eax, 000000FF
:00439920 50                      push eax
:00439921 E8ED9BFCFF              call 00403513
:00439926 83C404                  add esp, 00000004
:00439929 50                      push eax

* Possible StringData Ref from Data Obj ->"˳%s"
                                  |
:0043992A 68C4E24700              push 0047E2C4

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043992F 6A06                    push 00000006
:00439931 E8FD7AFFFF              call 00431433
:00439936 83C40C                  add esp, 0000000C
:00439939 85C0                    test eax, eax
:0043993B 7432                    je 0043996F
:0043993D 8A4DFC                  mov cl, byte ptr [ebp-04]
:00439940 51                      push ecx
:00439941 8B55F4                  mov edx, dword ptr [ebp-0C]
:00439944 8B0A                    mov ecx, dword ptr [edx]
:00439946 6BC950                  imul ecx, 00000050
:00439949 81C1787F4900            add ecx, 00497F78
:0043994F E87C2FFDFF              call 0040C8D0
:00439954 6880000000              push 00000080
:00439959 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043995C E86FCFFFFF              call 004368D0
:00439961 8B45F4                  mov eax, dword ptr [ebp-0C]
:00439964 8B08                    mov ecx, dword ptr [eax]
:00439966 51                      push ecx
:00439967 E8B0310300              call 0046CB1C
:0043996C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439916(U), :0043993B(C)
|
:0043996F EB7B                    jmp 004399EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439895(C)
|
:00439971 8B5508                  mov edx, dword ptr [ebp+08]
:00439974 81E2FF000000            and edx, 000000FF
:0043997A 52                      push edx
:0043997B E8939BFCFF              call 00403513
:00439980 83C404                  add esp, 00000004
:00439983 50                      push eax

* Possible StringData Ref from Data Obj ->"Ѱ˳Ƶ۪%s"
                                  |
:00439984 68CCE24700              push 0047E2CC

* Possible Reference to String Resource ID=00006: ""
                                  |
:00439989 6A06                    push 00000006
:0043998B E8A37AFFFF              call 00431433
:00439990 83C40C                  add esp, 0000000C
:00439993 85C0                    test eax, eax
:00439995 7455                    je 004399EC
:00439997 68FF000000              push 000000FF
:0043999C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043999F 8B08                    mov ecx, dword ptr [eax]
:004399A1 6BC950                  imul ecx, 00000050
:004399A4 81C1787F4900            add ecx, 00497F78
:004399AA E8212FFDFF              call 0040C8D0
:004399AF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004399B2 81E1FF000000            and ecx, 000000FF
:004399B8 51                      push ecx
:004399B9 E8559BFCFF              call 00403513
:004399BE 83C404                  add esp, 00000004
:004399C1 50                      push eax

* Possible StringData Ref from Data Obj ->"ѰF%s"
                                  |
:004399C2 68DCE24700              push 0047E2DC
:004399C7 6A00                    push 00000000
:004399C9 E8657AFFFF              call 00431433
:004399CE 83C40C                  add esp, 0000000C
:004399D1 6880000000              push 00000080
:004399D6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004399D9 E8F2CEFFFF              call 004368D0
:004399DE 8B55F4                  mov edx, dword ptr [ebp-0C]
:004399E1 8B02                    mov eax, dword ptr [edx]
:004399E3 50                      push eax
:004399E4 E833310300              call 0046CB1C
:004399E9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439848(U), :0043987D(U), :0043996F(U), :00439995(C)
|
:004399EC 8BE5                    mov esp, ebp
:004399EE 5D                      pop ebp
:004399EF C20400                  ret 0004



* Referenced by a CALL at Address:
|:004393BF   
|
:004399F2 55                      push ebp
:004399F3 8BEC                    mov ebp, esp
:004399F5 83EC0C                  sub esp, 0000000C
:004399F8 894DF8                  mov dword ptr [ebp-08], ecx
:004399FB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004399FE 81E1FF000000            and ecx, 000000FF
:00439A04 6BC922                  imul ecx, 00000022
:00439A07 81C1D0474900            add ecx, 004947D0
:00439A0D E84E64FDFF              call 0040FE60
:00439A12 25FF000000              and eax, 000000FF
:00439A17 8945FC                  mov dword ptr [ebp-04], eax
:00439A1A C705D0484B0000000000    mov dword ptr [004B48D0], 00000000
:00439A24 C705C04E4B0000000000    mov dword ptr [004B4EC0], 00000000
:00439A2E 6A00                    push 00000000
:00439A30 A1C04E4B00              mov eax, dword ptr [004B4EC0]
:00439A35 50                      push eax
:00439A36 E8C2420300              call 0046DCFD
:00439A3B 83C408                  add esp, 00000008
:00439A3E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439A41 894DF4                  mov dword ptr [ebp-0C], ecx
:00439A44 8B55F4                  mov edx, dword ptr [ebp-0C]
:00439A47 83EA17                  sub edx, 00000017
:00439A4A 8955F4                  mov dword ptr [ebp-0C], edx
:00439A4D 837DF40D                cmp dword ptr [ebp-0C], 0000000D
:00439A51 0F87A6000000            ja 00439AFD
:00439A57 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00439A5A 33C0                    xor eax, eax
:00439A5C 8A81BA9B4300            mov al, byte ptr [ecx+00439BBA]
:00439A62 FF2485A29B4300          jmp dword ptr [4*eax+00439BA2]
:00439A69 8B55F8                  mov edx, dword ptr [ebp-08]
:00439A6C 33C0                    xor eax, eax
:00439A6E 8A4204                  mov al, byte ptr [edx+04]
:00439A71 50                      push eax
:00439A72 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439A75 81E1FF000000            and ecx, 000000FF
:00439A7B 51                      push ecx
:00439A7C E847010000              call 00439BC8
:00439A81 83C408                  add esp, 00000008
:00439A84 E994000000              jmp 00439B1D
:00439A89 8B55F8                  mov edx, dword ptr [ebp-08]
:00439A8C 33C0                    xor eax, eax
:00439A8E 8A4204                  mov al, byte ptr [edx+04]
:00439A91 50                      push eax
:00439A92 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439A95 81E1FF000000            and ecx, 000000FF
:00439A9B 51                      push ecx
:00439A9C E8F6030000              call 00439E97
:00439AA1 83C408                  add esp, 00000008
:00439AA4 EB77                    jmp 00439B1D
:00439AA6 8B55F8                  mov edx, dword ptr [ebp-08]
:00439AA9 33C0                    xor eax, eax
:00439AAB 8A4204                  mov al, byte ptr [edx+04]
:00439AAE 50                      push eax
:00439AAF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439AB2 81E1FF000000            and ecx, 000000FF
:00439AB8 51                      push ecx
:00439AB9 E8BB050000              call 0043A079
:00439ABE 83C408                  add esp, 00000008
:00439AC1 EB5A                    jmp 00439B1D
:00439AC3 8B55F8                  mov edx, dword ptr [ebp-08]
:00439AC6 33C0                    xor eax, eax
:00439AC8 8A4204                  mov al, byte ptr [edx+04]
:00439ACB 50                      push eax
:00439ACC 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439ACF 81E1FF000000            and ecx, 000000FF
:00439AD5 51                      push ecx
:00439AD6 E85E0A0000              call 0043A539
:00439ADB 83C408                  add esp, 00000008
:00439ADE EB3D                    jmp 00439B1D
:00439AE0 8B55F8                  mov edx, dword ptr [ebp-08]
:00439AE3 33C0                    xor eax, eax
:00439AE5 8A4204                  mov al, byte ptr [edx+04]
:00439AE8 50                      push eax
:00439AE9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439AEC 81E1FF000000            and ecx, 000000FF
:00439AF2 51                      push ecx
:00439AF3 E8A90E0000              call 0043A9A1
:00439AF8 83C408                  add esp, 00000008
:00439AFB EB20                    jmp 00439B1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439A51(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00439AFD 6A07                    push 00000007
:00439AFF B9F8544B00              mov ecx, 004B54F8
:00439B04 E811FA0200              call 0046951A

* Possible StringData Ref from Data Obj ->"SiHϥΪD"
                                  |
:00439B09 68E8E24700              push 0047E2E8
:00439B0E 6A00                    push 00000000
:00439B10 E81E79FFFF              call 00431433
:00439B15 83C408                  add esp, 00000008
:00439B18 E8D35BFFFF              call 0042F6F0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439A84(U), :00439AA4(U), :00439AC1(U), :00439ADE(U), :00439AFB(U)
|
:00439B1D 833DD0484B0000          cmp dword ptr [004B48D0], 00000000
:00439B24 745B                    je 00439B81
:00439B26 68FF000000              push 000000FF
:00439B2B 8B5508                  mov edx, dword ptr [ebp+08]
:00439B2E 81E2FF000000            and edx, 000000FF
:00439B34 52                      push edx
:00439B35 8B45F8                  mov eax, dword ptr [ebp-08]
:00439B38 8B08                    mov ecx, dword ptr [eax]
:00439B3A 6BC950                  imul ecx, 00000050
:00439B3D 81C1787F4900            add ecx, 00497F78
:00439B43 E85286FCFF              call 0040219A
:00439B48 50                      push eax
:00439B49 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00439B4C 8B09                    mov ecx, dword ptr [ecx]
:00439B4E 6BC950                  imul ecx, 00000050
:00439B51 81C1787F4900            add ecx, 00497F78
:00439B57 E8A496FCFF              call 00403200
:00439B5C 6880000000              push 00000080
:00439B61 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00439B64 E867CDFFFF              call 004368D0
:00439B69 C705D0484B0000000000    mov dword ptr [004B48D0], 00000000
:00439B73 8B55F8                  mov edx, dword ptr [ebp-08]
:00439B76 8B02                    mov eax, dword ptr [edx]
:00439B78 50                      push eax
:00439B79 E89E2F0300              call 0046CB1C
:00439B7E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439B24(C)
|
:00439B81 C705C04E4B0001000000    mov dword ptr [004B4EC0], 00000001
:00439B8B 6A00                    push 00000000
:00439B8D 8B0DC04E4B00            mov ecx, dword ptr [004B4EC0]
:00439B93 51                      push ecx
:00439B94 E864410300              call 0046DCFD
:00439B99 83C408                  add esp, 00000008
:00439B9C 8BE5                    mov esp, ebp
:00439B9E 5D                      pop ebp
:00439B9F C20400                  ret 0004



:00439BA2 E09A4300                DWORD 00439AE0
:00439BA6 699A4300                DWORD 00439A69
:00439BAA 899A4300                DWORD 00439A89
:00439BAE A69A4300                DWORD 00439AA6
:00439BB2 C39A4300                DWORD 00439AC3
:00439BB6 FD9A4300                DWORD 00439AFD


:00439BBA 000505050102            add byte ptr [02010505], al
:00439BC0 0303                    add eax, dword ptr [ebx]
:00439BC2 030404                  add eax, dword ptr [esp+eax]
:00439BC5 0404                    add al, 04
:00439BC7 04                      BYTE 04h


* Referenced by a CALL at Address:
|:00439A7C   
|
:00439BC8 55                      push ebp
:00439BC9 8BEC                    mov ebp, esp
:00439BCB 83EC20                  sub esp, 00000020
:00439BCE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439BD1 6BC922                  imul ecx, 00000022
:00439BD4 81C1D0474900            add ecx, 004947D0
:00439BDA E831D0FFFF              call 00436C10
:00439BDF 8845F0                  mov byte ptr [ebp-10], al
:00439BE2 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439BE5 6BC922                  imul ecx, 00000022
:00439BE8 81C1D0474900            add ecx, 004947D0
:00439BEE E85DD0FFFF              call 00436C50
:00439BF3 8845EC                  mov byte ptr [ebp-14], al
:00439BF6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00439BF9 6BC924                  imul ecx, 00000024
:00439BFC 81C1B83B4B00            add ecx, 004B3BB8
:00439C02 E879BBFCFF              call 00405780
:00439C07 25FF000000              and eax, 000000FF
:00439C0C 83F807                  cmp eax, 00000007
:00439C0F 7417                    je 00439C28
:00439C11 33C0                    xor eax, eax
:00439C13 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:00439C18 83E004                  and eax, 00000004
:00439C1B 85C0                    test eax, eax
:00439C1D 7509                    jne 00439C28
:00439C1F C745E000000000          mov [ebp-20], 00000000
:00439C26 EB07                    jmp 00439C2F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439C0F(C), :00439C1D(C)
|
:00439C28 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439C26(U)
|
:00439C2F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00439C32 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439C85(U), :00439C99(U)
|
:00439C35 6A01                    push 00000001
:00439C37 8B55F0                  mov edx, dword ptr [ebp-10]
:00439C3A 81E2FF000000            and edx, 000000FF
:00439C40 80CA80                  or dl, 80
:00439C43 52                      push edx
:00439C44 8A450C                  mov al, byte ptr [ebp+0C]
:00439C47 50                      push eax
:00439C48 B958494B00              mov ecx, 004B4958
:00439C4D E85C410100              call 0044DDAE
:00439C52 8845FC                  mov byte ptr [ebp-04], al
:00439C55 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439C58 81E1FF000000            and ecx, 000000FF
:00439C5E 81F9FF000000            cmp ecx, 000000FF
:00439C64 0F8459010000            je 00439DC3
:00439C6A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439C6D 81E1FF000000            and ecx, 000000FF
:00439C73 6BC924                  imul ecx, 00000024
:00439C76 81C1B83B4B00            add ecx, 004B3BB8
:00439C7C E88F2CFDFF              call 0040C910
:00439C81 85C0                    test eax, eax
:00439C83 7502                    jne 00439C87
:00439C85 EBAE                    jmp 00439C35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439C83(C)
|
:00439C87 6A00                    push 00000000
:00439C89 8A55FC                  mov dl, byte ptr [ebp-04]
:00439C8C 52                      push edx
:00439C8D E835010000              call 00439DC7
:00439C92 83C408                  add esp, 00000008
:00439C95 85C0                    test eax, eax
:00439C97 7502                    jne 00439C9B
:00439C99 EB9A                    jmp 00439C35

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439C97(C)
|
:00439C9B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439C9E 81E1FF000000            and ecx, 000000FF
:00439CA4 6BC924                  imul ecx, 00000024
:00439CA7 81C1B83B4B00            add ecx, 004B3BB8
:00439CAD E82ECDFFFF              call 004369E0
:00439CB2 6BC050                  imul eax, 00000050
:00439CB5 05787F4900              add eax, 00497F78
:00439CBA 8945F8                  mov dword ptr [ebp-08], eax
:00439CBD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439CC0 81E1FF000000            and ecx, 000000FF
:00439CC6 6BC924                  imul ecx, 00000024
:00439CC9 81C1B83B4B00            add ecx, 004B3BB8
:00439CCF E86C7FFFFF              call 00431C40
:00439CD4 668B00                  mov ax, word ptr [eax]
:00439CD7 668945E8                mov word ptr [ebp-18], ax
:00439CDB 8A4DE9                  mov cl, byte ptr [ebp-17]
:00439CDE 51                      push ecx
:00439CDF 8A55E8                  mov dl, byte ptr [ebp-18]
:00439CE2 52                      push edx
:00439CE3 B958494B00              mov ecx, 004B4958
:00439CE8 E8003E0100              call 0044DAED
:00439CED 8B4508                  mov eax, dword ptr [ebp+08]
:00439CF0 50                      push eax
:00439CF1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439CF4 81E1FF000000            and ecx, 000000FF
:00439CFA 51                      push ecx
:00439CFB 8B550C                  mov edx, dword ptr [ebp+0C]
:00439CFE 52                      push edx
:00439CFF E8A9E4FFFF              call 004381AD
:00439D04 83C40C                  add esp, 0000000C
:00439D07 8B45EC                  mov eax, dword ptr [ebp-14]
:00439D0A 25FF000000              and eax, 000000FF
:00439D0F 85C0                    test eax, eax
:00439D11 0F84A2000000            je 00439DB9
:00439D17 68FF000000              push 000000FF
:00439D1C 6A11                    push 00000011
:00439D1E 6868484B00              push 004B4868
:00439D23 E8B8E80300              call 004785E0
:00439D28 83C40C                  add esp, 0000000C
:00439D2B 68FF000000              push 000000FF
:00439D30 68FF000000              push 000000FF
:00439D35 6A01                    push 00000001
:00439D37 6868484B00              push 004B4868
:00439D3C 8A4DEC                  mov cl, byte ptr [ebp-14]
:00439D3F 51                      push ecx
:00439D40 8A55FC                  mov dl, byte ptr [ebp-04]
:00439D43 52                      push edx
:00439D44 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00439D47 6BC924                  imul ecx, 00000024
:00439D4A 81C1B83B4B00            add ecx, 004B3BB8
:00439D50 E80EC70100              call 00456463
:00439D55 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439DB7(U)
|
:00439D58 8B45E4                  mov eax, dword ptr [ebp-1C]
:00439D5B 33C9                    xor ecx, ecx
:00439D5D 8A08                    mov cl, byte ptr [eax]
:00439D5F 81F9FF000000            cmp ecx, 000000FF
:00439D65 7452                    je 00439DB9
:00439D67 8B55E4                  mov edx, dword ptr [ebp-1C]
:00439D6A 33C0                    xor eax, eax
:00439D6C 8A02                    mov al, byte ptr [edx]
:00439D6E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439D71 81E1FF000000            and ecx, 000000FF
:00439D77 3BC1                    cmp eax, ecx
:00439D79 7433                    je 00439DAE
:00439D7B 8B55E4                  mov edx, dword ptr [ebp-1C]
:00439D7E 33C0                    xor eax, eax
:00439D80 8A02                    mov al, byte ptr [edx]
:00439D82 8BC8                    mov ecx, eax
:00439D84 6BC924                  imul ecx, 00000024
:00439D87 81C1B83B4B00            add ecx, 004B3BB8
:00439D8D E87E2BFDFF              call 0040C910
:00439D92 85C0                    test eax, eax
:00439D94 7418                    je 00439DAE
:00439D96 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439D99 51                      push ecx
:00439D9A 8B55E4                  mov edx, dword ptr [ebp-1C]
:00439D9D 33C0                    xor eax, eax
:00439D9F 8A02                    mov al, byte ptr [edx]
:00439DA1 50                      push eax
:00439DA2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00439DA5 51                      push ecx
:00439DA6 E802E4FFFF              call 004381AD
:00439DAB 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439D79(C), :00439D94(C)
|
:00439DAE 8B55E4                  mov edx, dword ptr [ebp-1C]
:00439DB1 83C201                  add edx, 00000001
:00439DB4 8955E4                  mov dword ptr [ebp-1C], edx
:00439DB7 EB9F                    jmp 00439D58

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439D11(C), :00439D65(C)
|
:00439DB9 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439C64(C)
|
:00439DC3 8BE5                    mov esp, ebp
:00439DC5 5D                      pop ebp
:00439DC6 C3                      ret



* Referenced by a CALL at Addresses:
|:00439C8D   , :00439F3F   , :0043F396   , :0043F531   , :0043F755   
|:0044031D   
|
:00439DC7 55                      push ebp
:00439DC8 8BEC                    mov ebp, esp
:00439DCA 83EC08                  sub esp, 00000008
:00439DCD 56                      push esi
:00439DCE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439DD1 81E1FF000000            and ecx, 000000FF
:00439DD7 6BC924                  imul ecx, 00000024
:00439DDA 81C1B83B4B00            add ecx, 004B3BB8
:00439DE0 E8FBCBFFFF              call 004369E0
:00439DE5 6BC050                  imul eax, 00000050
:00439DE8 05787F4900              add eax, 00497F78
:00439DED 8945F8                  mov dword ptr [ebp-08], eax
:00439DF0 C745FC01000000          mov [ebp-04], 00000001
:00439DF7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439DFA 81E1FF000000            and ecx, 000000FF
:00439E00 6BC924                  imul ecx, 00000024
:00439E03 81C1B83B4B00            add ecx, 004B3BB8
:00439E09 E8D294FCFF              call 004032E0
:00439E0E 8BF0                    mov esi, eax
:00439E10 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00439E13 E8D27FFCFF              call 00401DEA
:00439E18 3BF0                    cmp esi, eax
:00439E1A 7513                    jne 00439E2F
:00439E1C 8B450C                  mov eax, dword ptr [ebp+0C]
:00439E1F 25FF000000              and eax, 000000FF
:00439E24 85C0                    test eax, eax
:00439E26 7507                    jne 00439E2F
:00439E28 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439E1A(C), :00439E26(C)
|
:00439E2F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439E32 81E1FF000000            and ecx, 000000FF
:00439E38 6BC924                  imul ecx, 00000024
:00439E3B 81C1B83B4B00            add ecx, 004B3BB8
:00439E41 E8BA94FCFF              call 00403300
:00439E46 8BF0                    mov esi, eax
:00439E48 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00439E4B E8CB7FFCFF              call 00401E1B
:00439E50 3BF0                    cmp esi, eax
:00439E52 7515                    jne 00439E69
:00439E54 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00439E57 81E1FF000000            and ecx, 000000FF
:00439E5D 83F901                  cmp ecx, 00000001
:00439E60 7507                    jne 00439E69
:00439E62 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439E52(C), :00439E60(C)
|
:00439E69 837DFC00                cmp dword ptr [ebp-04], 00000000
:00439E6D 7520                    jne 00439E8F

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00439E6F 6A07                    push 00000007
:00439E71 B9F8544B00              mov ecx, 004B54F8
:00439E76 E89FF60200              call 0046951A

* Possible StringData Ref from Data Obj ->"o䳡S_n"
                                  |
:00439E7B 68FCE24700              push 0047E2FC
:00439E80 6A00                    push 00000000
:00439E82 E8AC75FFFF              call 00431433
:00439E87 83C408                  add esp, 00000008
:00439E8A E86158FFFF              call 0042F6F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439E6D(C)
|
:00439E8F 8B45FC                  mov eax, dword ptr [ebp-04]
:00439E92 5E                      pop esi
:00439E93 8BE5                    mov esp, ebp
:00439E95 5D                      pop ebp
:00439E96 C3                      ret



* Referenced by a CALL at Address:
|:00439A9C   
|
:00439E97 55                      push ebp
:00439E98 8BEC                    mov ebp, esp
:00439E9A 83EC20                  sub esp, 00000020
:00439E9D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439EA0 6BC922                  imul ecx, 00000022
:00439EA3 81C1D0474900            add ecx, 004947D0
:00439EA9 E862CDFFFF              call 00436C10
:00439EAE 8845F0                  mov byte ptr [ebp-10], al
:00439EB1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00439EB4 6BC922                  imul ecx, 00000022
:00439EB7 81C1D0474900            add ecx, 004947D0
:00439EBD E88ECDFFFF              call 00436C50
:00439EC2 8845EC                  mov byte ptr [ebp-14], al
:00439EC5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00439EC8 6BC924                  imul ecx, 00000024
:00439ECB 81C1B83B4B00            add ecx, 004B3BB8
:00439ED1 E8AAB8FCFF              call 00405780
:00439ED6 25FF000000              and eax, 000000FF
:00439EDB 83F807                  cmp eax, 00000007
:00439EDE 7417                    je 00439EF7
:00439EE0 33C0                    xor eax, eax
:00439EE2 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:00439EE7 83E004                  and eax, 00000004
:00439EEA 85C0                    test eax, eax
:00439EEC 7509                    jne 00439EF7
:00439EEE C745E000000000          mov [ebp-20], 00000000
:00439EF5 EB07                    jmp 00439EFE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439EDE(C), :00439EEC(C)
|
:00439EF7 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439EF5(U)
|
:00439EFE 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00439F01 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439F4B(U)
|
:00439F04 6A01                    push 00000001
:00439F06 8B55F0                  mov edx, dword ptr [ebp-10]
:00439F09 81E2FF000000            and edx, 000000FF
:00439F0F 80CA80                  or dl, 80
:00439F12 52                      push edx
:00439F13 8A450C                  mov al, byte ptr [ebp+0C]
:00439F16 50                      push eax
:00439F17 B958494B00              mov ecx, 004B4958
:00439F1C E88D3E0100              call 0044DDAE
:00439F21 8845FC                  mov byte ptr [ebp-04], al
:00439F24 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439F27 81E1FF000000            and ecx, 000000FF
:00439F2D 81F9FF000000            cmp ecx, 000000FF
:00439F33 0F843C010000            je 0043A075
:00439F39 6A01                    push 00000001
:00439F3B 8A55FC                  mov dl, byte ptr [ebp-04]
:00439F3E 52                      push edx
:00439F3F E883FEFFFF              call 00439DC7
:00439F44 83C408                  add esp, 00000008
:00439F47 85C0                    test eax, eax
:00439F49 7502                    jne 00439F4D
:00439F4B EBB7                    jmp 00439F04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439F49(C)
|
:00439F4D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439F50 81E1FF000000            and ecx, 000000FF
:00439F56 6BC924                  imul ecx, 00000024
:00439F59 81C1B83B4B00            add ecx, 004B3BB8
:00439F5F E87CCAFFFF              call 004369E0
:00439F64 6BC050                  imul eax, 00000050
:00439F67 05787F4900              add eax, 00497F78
:00439F6C 8945F8                  mov dword ptr [ebp-08], eax
:00439F6F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439F72 81E1FF000000            and ecx, 000000FF
:00439F78 6BC924                  imul ecx, 00000024
:00439F7B 81C1B83B4B00            add ecx, 004B3BB8
:00439F81 E8BA7CFFFF              call 00431C40
:00439F86 668B00                  mov ax, word ptr [eax]
:00439F89 668945E8                mov word ptr [ebp-18], ax
:00439F8D 8A4DE9                  mov cl, byte ptr [ebp-17]
:00439F90 51                      push ecx
:00439F91 8A55E8                  mov dl, byte ptr [ebp-18]
:00439F94 52                      push edx
:00439F95 B958494B00              mov ecx, 004B4958
:00439F9A E84E3B0100              call 0044DAED
:00439F9F 8B4508                  mov eax, dword ptr [ebp+08]
:00439FA2 50                      push eax
:00439FA3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00439FA6 81E1FF000000            and ecx, 000000FF
:00439FAC 51                      push ecx
:00439FAD 8B550C                  mov edx, dword ptr [ebp+0C]
:00439FB0 52                      push edx
:00439FB1 E860E4FFFF              call 00438416
:00439FB6 83C40C                  add esp, 0000000C
:00439FB9 8B45EC                  mov eax, dword ptr [ebp-14]
:00439FBC 25FF000000              and eax, 000000FF
:00439FC1 85C0                    test eax, eax
:00439FC3 0F84A2000000            je 0043A06B
:00439FC9 68FF000000              push 000000FF
:00439FCE 6A11                    push 00000011
:00439FD0 6868484B00              push 004B4868
:00439FD5 E806E60300              call 004785E0
:00439FDA 83C40C                  add esp, 0000000C
:00439FDD 68FF000000              push 000000FF
:00439FE2 68FF000000              push 000000FF
:00439FE7 6A01                    push 00000001
:00439FE9 6868484B00              push 004B4868
:00439FEE 8A4DEC                  mov cl, byte ptr [ebp-14]
:00439FF1 51                      push ecx
:00439FF2 8A55FC                  mov dl, byte ptr [ebp-04]
:00439FF5 52                      push edx
:00439FF6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00439FF9 6BC924                  imul ecx, 00000024
:00439FFC 81C1B83B4B00            add ecx, 004B3BB8
:0043A002 E85CC40100              call 00456463
:0043A007 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A069(U)
|
:0043A00A 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043A00D 33C9                    xor ecx, ecx
:0043A00F 8A08                    mov cl, byte ptr [eax]
:0043A011 81F9FF000000            cmp ecx, 000000FF
:0043A017 7452                    je 0043A06B
:0043A019 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043A01C 33C0                    xor eax, eax
:0043A01E 8A02                    mov al, byte ptr [edx]
:0043A020 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A023 81E1FF000000            and ecx, 000000FF
:0043A029 3BC1                    cmp eax, ecx
:0043A02B 7433                    je 0043A060
:0043A02D 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043A030 33C0                    xor eax, eax
:0043A032 8A02                    mov al, byte ptr [edx]
:0043A034 8BC8                    mov ecx, eax
:0043A036 6BC924                  imul ecx, 00000024
:0043A039 81C1B83B4B00            add ecx, 004B3BB8
:0043A03F E8CC28FDFF              call 0040C910
:0043A044 85C0                    test eax, eax
:0043A046 7418                    je 0043A060
:0043A048 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A04B 51                      push ecx
:0043A04C 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043A04F 33C0                    xor eax, eax
:0043A051 8A02                    mov al, byte ptr [edx]
:0043A053 50                      push eax
:0043A054 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A057 51                      push ecx
:0043A058 E8B9E3FFFF              call 00438416
:0043A05D 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A02B(C), :0043A046(C)
|
:0043A060 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043A063 83C201                  add edx, 00000001
:0043A066 8955E4                  mov dword ptr [ebp-1C], edx
:0043A069 EB9F                    jmp 0043A00A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00439FC3(C), :0043A017(C)
|
:0043A06B C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00439F33(C)
|
:0043A075 8BE5                    mov esp, ebp
:0043A077 5D                      pop ebp
:0043A078 C3                      ret



* Referenced by a CALL at Address:
|:00439AB9   
|
:0043A079 55                      push ebp
:0043A07A 8BEC                    mov ebp, esp
:0043A07C 83EC20                  sub esp, 00000020
:0043A07F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A082 6BC922                  imul ecx, 00000022
:0043A085 81C1D0474900            add ecx, 004947D0
:0043A08B E880CBFFFF              call 00436C10
:0043A090 8845F0                  mov byte ptr [ebp-10], al
:0043A093 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A096 6BC922                  imul ecx, 00000022
:0043A099 81C1D0474900            add ecx, 004947D0
:0043A09F E8ACCBFFFF              call 00436C50
:0043A0A4 8845EC                  mov byte ptr [ebp-14], al
:0043A0A7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A0AA 6BC924                  imul ecx, 00000024
:0043A0AD 81C1B83B4B00            add ecx, 004B3BB8
:0043A0B3 E8C8B6FCFF              call 00405780
:0043A0B8 25FF000000              and eax, 000000FF
:0043A0BD 83F807                  cmp eax, 00000007
:0043A0C0 7417                    je 0043A0D9
:0043A0C2 33C0                    xor eax, eax
:0043A0C4 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043A0C9 83E004                  and eax, 00000004
:0043A0CC 85C0                    test eax, eax
:0043A0CE 7509                    jne 0043A0D9
:0043A0D0 C745E000000000          mov [ebp-20], 00000000
:0043A0D7 EB07                    jmp 0043A0E0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A0C0(C), :0043A0CE(C)
|
:0043A0D9 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A0D7(U)
|
:0043A0E0 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043A0E3 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A12F(U)
|
:0043A0E6 6A01                    push 00000001
:0043A0E8 8B55F0                  mov edx, dword ptr [ebp-10]
:0043A0EB 81E2FF000000            and edx, 000000FF
:0043A0F1 80CA80                  or dl, 80
:0043A0F4 52                      push edx
:0043A0F5 8A450C                  mov al, byte ptr [ebp+0C]
:0043A0F8 50                      push eax
:0043A0F9 B958494B00              mov ecx, 004B4958
:0043A0FE E8AB3C0100              call 0044DDAE
:0043A103 8845FC                  mov byte ptr [ebp-04], al
:0043A106 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A109 81E1FF000000            and ecx, 000000FF
:0043A10F 81F9FF000000            cmp ecx, 000000FF
:0043A115 0F843D010000            je 0043A258
:0043A11B 8A55FC                  mov dl, byte ptr [ebp-04]
:0043A11E 52                      push edx
:0043A11F 8A4508                  mov al, byte ptr [ebp+08]
:0043A122 50                      push eax
:0043A123 E834010000              call 0043A25C
:0043A128 83C408                  add esp, 00000008
:0043A12B 85C0                    test eax, eax
:0043A12D 7502                    jne 0043A131
:0043A12F EBB5                    jmp 0043A0E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A12D(C)
|
:0043A131 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A134 81E1FF000000            and ecx, 000000FF
:0043A13A 6BC924                  imul ecx, 00000024
:0043A13D 81C1B83B4B00            add ecx, 004B3BB8
:0043A143 E898C8FFFF              call 004369E0
:0043A148 6BC050                  imul eax, 00000050
:0043A14B 05787F4900              add eax, 00497F78
:0043A150 8945F8                  mov dword ptr [ebp-08], eax
:0043A153 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A156 81E1FF000000            and ecx, 000000FF
:0043A15C 6BC924                  imul ecx, 00000024
:0043A15F 81C1B83B4B00            add ecx, 004B3BB8
:0043A165 E8D67AFFFF              call 00431C40
:0043A16A 668B08                  mov cx, word ptr [eax]
:0043A16D 66894DE8                mov word ptr [ebp-18], cx
:0043A171 8A55E9                  mov dl, byte ptr [ebp-17]
:0043A174 52                      push edx
:0043A175 8A45E8                  mov al, byte ptr [ebp-18]
:0043A178 50                      push eax
:0043A179 B958494B00              mov ecx, 004B4958
:0043A17E E86A390100              call 0044DAED
:0043A183 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A186 51                      push ecx
:0043A187 8B55FC                  mov edx, dword ptr [ebp-04]
:0043A18A 81E2FF000000            and edx, 000000FF
:0043A190 52                      push edx
:0043A191 8B450C                  mov eax, dword ptr [ebp+0C]
:0043A194 50                      push eax
:0043A195 E8E1010000              call 0043A37B
:0043A19A 83C40C                  add esp, 0000000C
:0043A19D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043A1A0 81E1FF000000            and ecx, 000000FF
:0043A1A6 85C9                    test ecx, ecx
:0043A1A8 0F84A0000000            je 0043A24E
:0043A1AE 68FF000000              push 000000FF
:0043A1B3 6A11                    push 00000011
:0043A1B5 6868484B00              push 004B4868
:0043A1BA E821E40300              call 004785E0
:0043A1BF 83C40C                  add esp, 0000000C
:0043A1C2 68FF000000              push 000000FF
:0043A1C7 68FF000000              push 000000FF
:0043A1CC 6A01                    push 00000001
:0043A1CE 6868484B00              push 004B4868
:0043A1D3 8A55EC                  mov dl, byte ptr [ebp-14]
:0043A1D6 52                      push edx
:0043A1D7 8A45FC                  mov al, byte ptr [ebp-04]
:0043A1DA 50                      push eax
:0043A1DB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A1DE 6BC924                  imul ecx, 00000024
:0043A1E1 81C1B83B4B00            add ecx, 004B3BB8
:0043A1E7 E877C20100              call 00456463
:0043A1EC 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A24C(U)
|
:0043A1EF 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043A1F2 33D2                    xor edx, edx
:0043A1F4 8A11                    mov dl, byte ptr [ecx]
:0043A1F6 81FAFF000000            cmp edx, 000000FF
:0043A1FC 7450                    je 0043A24E
:0043A1FE 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043A201 33C9                    xor ecx, ecx
:0043A203 8A08                    mov cl, byte ptr [eax]
:0043A205 8B55FC                  mov edx, dword ptr [ebp-04]
:0043A208 81E2FF000000            and edx, 000000FF
:0043A20E 3BCA                    cmp ecx, edx
:0043A210 7431                    je 0043A243
:0043A212 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043A215 33C9                    xor ecx, ecx
:0043A217 8A08                    mov cl, byte ptr [eax]
:0043A219 6BC924                  imul ecx, 00000024
:0043A21C 81C1B83B4B00            add ecx, 004B3BB8
:0043A222 E8E926FDFF              call 0040C910
:0043A227 85C0                    test eax, eax
:0043A229 7418                    je 0043A243
:0043A22B 8B5508                  mov edx, dword ptr [ebp+08]
:0043A22E 52                      push edx
:0043A22F 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043A232 33C9                    xor ecx, ecx
:0043A234 8A08                    mov cl, byte ptr [eax]
:0043A236 51                      push ecx
:0043A237 8B550C                  mov edx, dword ptr [ebp+0C]
:0043A23A 52                      push edx
:0043A23B E83B010000              call 0043A37B
:0043A240 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A210(C), :0043A229(C)
|
:0043A243 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043A246 83C001                  add eax, 00000001
:0043A249 8945E4                  mov dword ptr [ebp-1C], eax
:0043A24C EBA1                    jmp 0043A1EF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A1A8(C), :0043A1FC(C)
|
:0043A24E C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A115(C)
|
:0043A258 8BE5                    mov esp, ebp
:0043A25A 5D                      pop ebp
:0043A25B C3                      ret



* Referenced by a CALL at Address:
|:0043A123   
|
:0043A25C 55                      push ebp
:0043A25D 8BEC                    mov ebp, esp
:0043A25F 83EC10                  sub esp, 00000010
:0043A262 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A265 81E1FF000000            and ecx, 000000FF
:0043A26B 6BC922                  imul ecx, 00000022
:0043A26E 81C1D0474900            add ecx, 004947D0
:0043A274 E8E75BFDFF              call 0040FE60
:0043A279 8845FC                  mov byte ptr [ebp-04], al
:0043A27C C745F801000000          mov [ebp-08], 00000001
:0043A283 8B450C                  mov eax, dword ptr [ebp+0C]
:0043A286 25FF000000              and eax, 000000FF
:0043A28B 3DFF000000              cmp eax, 000000FF
:0043A290 0F84DE000000            je 0043A374
:0043A296 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A299 81E1FF000000            and ecx, 000000FF
:0043A29F 6BC924                  imul ecx, 00000024
:0043A2A2 81C1B83B4B00            add ecx, 004B3BB8
:0043A2A8 894DF4                  mov dword ptr [ebp-0C], ecx
:0043A2AB 8A55FC                  mov dl, byte ptr [ebp-04]
:0043A2AE 8855F0                  mov byte ptr [ebp-10], dl
:0043A2B1 807DF01D                cmp byte ptr [ebp-10], 1D
:0043A2B5 7411                    je 0043A2C8
:0043A2B7 807DF01E                cmp byte ptr [ebp-10], 1E
:0043A2BB 7445                    je 0043A302
:0043A2BD 807DF01F                cmp byte ptr [ebp-10], 1F
:0043A2C1 7479                    je 0043A33C
:0043A2C3 E9AC000000              jmp 0043A374

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A2B5(C)
|
:0043A2C8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A2CB E840C7FFFF              call 00436A10
:0043A2D0 25FF000000              and eax, 000000FF
:0043A2D5 33C9                    xor ecx, ecx
:0043A2D7 85C0                    test eax, eax
:0043A2D9 0F9FC1                  setg cl
:0043A2DC 894DF8                  mov dword ptr [ebp-08], ecx
:0043A2DF 837DF800                cmp dword ptr [ebp-08], 00000000
:0043A2E3 751B                    jne 0043A300

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043A2E5 6A07                    push 00000007
:0043A2E7 B9F8544B00              mov ecx, 004B54F8
:0043A2EC E829F20200              call 0046951A

* Possible StringData Ref from Data Obj ->"o䳡OAWɤF"
                                  |
:0043A2F1 6814E34700              push 0047E314
:0043A2F6 6A00                    push 00000000
:0043A2F8 E83671FFFF              call 00431433
:0043A2FD 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A2E3(C)
|
:0043A300 EB72                    jmp 0043A374

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A2BB(C)
|
:0043A302 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A305 E826C7FFFF              call 00436A30
:0043A30A 25FF000000              and eax, 000000FF
:0043A30F 33D2                    xor edx, edx
:0043A311 85C0                    test eax, eax
:0043A313 0F9FC2                  setg dl
:0043A316 8955F8                  mov dword ptr [ebp-08], edx
:0043A319 837DF800                cmp dword ptr [ebp-08], 00000000
:0043A31D 751B                    jne 0043A33A

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043A31F 6A07                    push 00000007
:0043A321 B9F8544B00              mov ecx, 004B54F8
:0043A326 E8EFF10200              call 0046951A

* Possible StringData Ref from Data Obj ->"o䳡mOAWɤF"
                                  |
:0043A32B 6834E34700              push 0047E334
:0043A330 6A00                    push 00000000
:0043A332 E8FC70FFFF              call 00431433
:0043A337 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A31D(C)
|
:0043A33A EB38                    jmp 0043A374

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A2C1(C)
|
:0043A33C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A33F E80CC7FFFF              call 00436A50
:0043A344 25FF000000              and eax, 000000FF
:0043A349 33C9                    xor ecx, ecx
:0043A34B 85C0                    test eax, eax
:0043A34D 0F9FC1                  setg cl
:0043A350 894DF8                  mov dword ptr [ebp-08], ecx
:0043A353 837DF800                cmp dword ptr [ebp-08], 00000000
:0043A357 751B                    jne 0043A374

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043A359 6A07                    push 00000007
:0043A35B B9F8544B00              mov ecx, 004B54F8
:0043A360 E8B5F10200              call 0046951A

* Possible StringData Ref from Data Obj ->"o䳡OAWɤF"
                                  |
:0043A365 6854E34700              push 0047E354
:0043A36A 6A00                    push 00000000
:0043A36C E8C270FFFF              call 00431433
:0043A371 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A290(C), :0043A2C3(U), :0043A300(U), :0043A33A(U), :0043A357(C)
|
:0043A374 8B45F8                  mov eax, dword ptr [ebp-08]
:0043A377 8BE5                    mov esp, ebp
:0043A379 5D                      pop ebp
:0043A37A C3                      ret



* Referenced by a CALL at Addresses:
|:0043A195   , :0043A23B   
|
:0043A37B 55                      push ebp
:0043A37C 8BEC                    mov ebp, esp
:0043A37E 83EC14                  sub esp, 00000014
:0043A381 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043A384 6BC922                  imul ecx, 00000022
:0043A387 81C1D0474900            add ecx, 004947D0
:0043A38D E8CE5AFDFF              call 0040FE60
:0043A392 8845FC                  mov byte ptr [ebp-04], al
:0043A395 817D0CFF000000          cmp dword ptr [ebp+0C], 000000FF
:0043A39C 0F8450010000            je 0043A4F2
:0043A3A2 8B450C                  mov eax, dword ptr [ebp+0C]
:0043A3A5 6BC024                  imul eax, 00000024
:0043A3A8 05B83B4B00              add eax, 004B3BB8
:0043A3AD 8945F8                  mov dword ptr [ebp-08], eax
:0043A3B0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A3B3 E828C6FFFF              call 004369E0
:0043A3B8 6BC050                  imul eax, 00000050
:0043A3BB 05787F4900              add eax, 00497F78
:0043A3C0 8945F0                  mov dword ptr [ebp-10], eax
:0043A3C3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A3C6 E87578FFFF              call 00431C40
:0043A3CB 668B08                  mov cx, word ptr [eax]
:0043A3CE 66894DF4                mov word ptr [ebp-0C], cx
:0043A3D2 8A55F5                  mov dl, byte ptr [ebp-0B]
:0043A3D5 52                      push edx
:0043A3D6 8A45F4                  mov al, byte ptr [ebp-0C]
:0043A3D9 50                      push eax
:0043A3DA B958494B00              mov ecx, 004B4958
:0043A3DF E809370100              call 0044DAED
:0043A3E4 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043A3E7 51                      push ecx
:0043A3E8 8A5508                  mov dl, byte ptr [ebp+08]
:0043A3EB 52                      push edx
:0043A3EC E805010000              call 0043A4F6
:0043A3F1 83C408                  add esp, 00000008
:0043A3F4 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043A3F6 6A03                    push 00000003
:0043A3F8 8A45FC                  mov al, byte ptr [ebp-04]
:0043A3FB 50                      push eax
:0043A3FC 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043A3FF 51                      push ecx
:0043A400 8A5508                  mov dl, byte ptr [ebp+08]
:0043A403 52                      push edx
:0043A404 B958494B00              mov ecx, 004B4958
:0043A409 E882430100              call 0044E790
:0043A40E 8A45FC                  mov al, byte ptr [ebp-04]
:0043A411 8845EC                  mov byte ptr [ebp-14], al
:0043A414 807DEC1D                cmp byte ptr [ebp-14], 1D
:0043A418 7415                    je 0043A42F
:0043A41A 807DEC1E                cmp byte ptr [ebp-14], 1E
:0043A41E 744E                    je 0043A46E
:0043A420 807DEC1F                cmp byte ptr [ebp-14], 1F
:0043A424 0F8483000000            je 0043A4AD
:0043A42A E9BB000000              jmp 0043A4EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A418(C)
|
:0043A42F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A432 E8D9C5FFFF              call 00436A10
:0043A437 25FF000000              and eax, 000000FF
:0043A43C 85C0                    test eax, eax
:0043A43E 7E2C                    jle 0043A46C
:0043A440 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A443 E8C8C5FFFF              call 00436A10
:0043A448 25FF000000              and eax, 000000FF
:0043A44D 83E801                  sub eax, 00000001
:0043A450 0C40                    or al, 40
:0043A452 50                      push eax
:0043A453 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A456 E855C7FFFF              call 00436BB0
:0043A45B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A45E E87DC5FFFF              call 004369E0
:0043A463 50                      push eax
:0043A464 E8B3260300              call 0046CB1C
:0043A469 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A43E(C)
|
:0043A46C EB7C                    jmp 0043A4EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A41E(C)
|
:0043A46E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A471 E8BAC5FFFF              call 00436A30
:0043A476 25FF000000              and eax, 000000FF
:0043A47B 85C0                    test eax, eax
:0043A47D 7E2C                    jle 0043A4AB
:0043A47F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A482 E8A9C5FFFF              call 00436A30
:0043A487 25FF000000              and eax, 000000FF
:0043A48C 83E801                  sub eax, 00000001
:0043A48F 0C40                    or al, 40
:0043A491 50                      push eax
:0043A492 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A495 E856C7FFFF              call 00436BF0
:0043A49A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A49D E83EC5FFFF              call 004369E0
:0043A4A2 50                      push eax
:0043A4A3 E874260300              call 0046CB1C
:0043A4A8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A47D(C)
|
:0043A4AB EB3D                    jmp 0043A4EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A424(C)
|
:0043A4AD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A4B0 E89BC5FFFF              call 00436A50
:0043A4B5 25FF000000              and eax, 000000FF
:0043A4BA 85C0                    test eax, eax
:0043A4BC 7E2C                    jle 0043A4EA
:0043A4BE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A4C1 E88AC5FFFF              call 00436A50
:0043A4C6 25FF000000              and eax, 000000FF
:0043A4CB 83E801                  sub eax, 00000001
:0043A4CE 0C40                    or al, 40
:0043A4D0 50                      push eax
:0043A4D1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A4D4 E857C7FFFF              call 00436C30
:0043A4D9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A4DC E8FFC4FFFF              call 004369E0
:0043A4E1 50                      push eax
:0043A4E2 E835260300              call 0046CB1C
:0043A4E7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A42A(U), :0043A46C(U), :0043A4AB(U), :0043A4BC(C)
|
:0043A4EA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A4ED E8ADA6FFFF              call 00434B9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A39C(C)
|
:0043A4F2 8BE5                    mov esp, ebp
:0043A4F4 5D                      pop ebp
:0043A4F5 C3                      ret



* Referenced by a CALL at Addresses:
|:0043A3EC   , :0043A64B   , :0043AABF   , :0043B4E3   , :0043B7CD   
|:0043BA91   , :0043BCAA   , :0043BEF9   , :0043C0BA   , :0043C8C3   
|:0043D331   , :0043D5C9   , :0043D7A0   , :0043DA74   , :0043DCB6   
|:0043E48F   , :0043EA3D   , :0043EE41   , :0043EE78   , :0043FD21   
|:00440102   , :004404F5   , :00440786   , :00440B11   
|
:0043A4F6 55                      push ebp
:0043A4F7 8BEC                    mov ebp, esp
:0043A4F9 8A450C                  mov al, byte ptr [ebp+0C]
:0043A4FC 50                      push eax
:0043A4FD 8A4D08                  mov cl, byte ptr [ebp+08]
:0043A500 51                      push ecx
:0043A501 E808520100              call 0044F70E
:0043A506 83C408                  add esp, 00000008
:0043A509 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A50C 81E1FF000000            and ecx, 000000FF
:0043A512 6BC924                  imul ecx, 00000024
:0043A515 81C1B83B4B00            add ecx, 004B3BB8
:0043A51B E87FA6FFFF              call 00434B9F
:0043A520 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A523 81E1FF000000            and ecx, 000000FF
:0043A529 6BC924                  imul ecx, 00000024
:0043A52C 81C1B83B4B00            add ecx, 004B3BB8
:0043A532 E868A6FFFF              call 00434B9F
:0043A537 5D                      pop ebp
:0043A538 C3                      ret



* Referenced by a CALL at Address:
|:00439AD6   
|
:0043A539 55                      push ebp
:0043A53A 8BEC                    mov ebp, esp
:0043A53C 83EC20                  sub esp, 00000020
:0043A53F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A542 6BC922                  imul ecx, 00000022
:0043A545 81C1D0474900            add ecx, 004947D0
:0043A54B E8C0C6FFFF              call 00436C10
:0043A550 8845F0                  mov byte ptr [ebp-10], al
:0043A553 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A556 6BC922                  imul ecx, 00000022
:0043A559 81C1D0474900            add ecx, 004947D0
:0043A55F E8ECC6FFFF              call 00436C50
:0043A564 8845EC                  mov byte ptr [ebp-14], al
:0043A567 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A56A 6BC924                  imul ecx, 00000024
:0043A56D 81C1B83B4B00            add ecx, 004B3BB8
:0043A573 E808B2FCFF              call 00405780
:0043A578 25FF000000              and eax, 000000FF
:0043A57D 83F807                  cmp eax, 00000007
:0043A580 7417                    je 0043A599
:0043A582 33C0                    xor eax, eax
:0043A584 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043A589 83E004                  and eax, 00000004
:0043A58C 85C0                    test eax, eax
:0043A58E 7509                    jne 0043A599
:0043A590 C745E000000000          mov [ebp-20], 00000000
:0043A597 EB07                    jmp 0043A5A0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A580(C), :0043A58E(C)
|
:0043A599 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A597(U)
|
:0043A5A0 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043A5A3 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A5EF(U)
|
:0043A5A6 6A01                    push 00000001
:0043A5A8 8B55F0                  mov edx, dword ptr [ebp-10]
:0043A5AB 81E2FF000000            and edx, 000000FF
:0043A5B1 80CA80                  or dl, 80
:0043A5B4 52                      push edx
:0043A5B5 8A450C                  mov al, byte ptr [ebp+0C]
:0043A5B8 50                      push eax
:0043A5B9 B958494B00              mov ecx, 004B4958
:0043A5BE E8EB370100              call 0044DDAE
:0043A5C3 8845FC                  mov byte ptr [ebp-04], al
:0043A5C6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A5C9 81E1FF000000            and ecx, 000000FF
:0043A5CF 81F9FF000000            cmp ecx, 000000FF
:0043A5D5 0F8474010000            je 0043A74F
:0043A5DB 8A55FC                  mov dl, byte ptr [ebp-04]
:0043A5DE 52                      push edx
:0043A5DF 8A4508                  mov al, byte ptr [ebp+08]
:0043A5E2 50                      push eax
:0043A5E3 E86B010000              call 0043A753
:0043A5E8 83C408                  add esp, 00000008
:0043A5EB 85C0                    test eax, eax
:0043A5ED 7502                    jne 0043A5F1
:0043A5EF EBB5                    jmp 0043A5A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A5ED(C)
|
:0043A5F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A5F4 81E1FF000000            and ecx, 000000FF
:0043A5FA 6BC924                  imul ecx, 00000024
:0043A5FD 81C1B83B4B00            add ecx, 004B3BB8
:0043A603 E8D8C3FFFF              call 004369E0
:0043A608 6BC050                  imul eax, 00000050
:0043A60B 05787F4900              add eax, 00497F78
:0043A610 8945F8                  mov dword ptr [ebp-08], eax
:0043A613 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A616 81E1FF000000            and ecx, 000000FF
:0043A61C 6BC924                  imul ecx, 00000024
:0043A61F 81C1B83B4B00            add ecx, 004B3BB8
:0043A625 E81676FFFF              call 00431C40
:0043A62A 668B08                  mov cx, word ptr [eax]
:0043A62D 66894DE8                mov word ptr [ebp-18], cx
:0043A631 8A55E9                  mov dl, byte ptr [ebp-17]
:0043A634 52                      push edx
:0043A635 8A45E8                  mov al, byte ptr [ebp-18]
:0043A638 50                      push eax
:0043A639 B958494B00              mov ecx, 004B4958
:0043A63E E8AA340100              call 0044DAED
:0043A643 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043A646 51                      push ecx
:0043A647 8A550C                  mov dl, byte ptr [ebp+0C]
:0043A64A 52                      push edx
:0043A64B E8A6FEFFFF              call 0043A4F6
:0043A650 83C408                  add esp, 00000008
:0043A653 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043A655 6A03                    push 00000003
:0043A657 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A65A 6BC922                  imul ecx, 00000022
:0043A65D 81C1D0474900            add ecx, 004947D0
:0043A663 E8F857FDFF              call 0040FE60
:0043A668 50                      push eax
:0043A669 8A45FC                  mov al, byte ptr [ebp-04]
:0043A66C 50                      push eax
:0043A66D 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043A670 51                      push ecx
:0043A671 B958494B00              mov ecx, 004B4958
:0043A676 E815410100              call 0044E790
:0043A67B 8B5508                  mov edx, dword ptr [ebp+08]
:0043A67E 52                      push edx
:0043A67F 8B45FC                  mov eax, dword ptr [ebp-04]
:0043A682 25FF000000              and eax, 000000FF
:0043A687 50                      push eax
:0043A688 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A68B 51                      push ecx
:0043A68C E849020000              call 0043A8DA
:0043A691 83C40C                  add esp, 0000000C
:0043A694 8B55EC                  mov edx, dword ptr [ebp-14]
:0043A697 81E2FF000000            and edx, 000000FF
:0043A69D 85D2                    test edx, edx
:0043A69F 0F84A0000000            je 0043A745
:0043A6A5 68FF000000              push 000000FF
:0043A6AA 6A11                    push 00000011
:0043A6AC 6868484B00              push 004B4868
:0043A6B1 E82ADF0300              call 004785E0
:0043A6B6 83C40C                  add esp, 0000000C
:0043A6B9 68FF000000              push 000000FF
:0043A6BE 68FF000000              push 000000FF
:0043A6C3 6A01                    push 00000001
:0043A6C5 6868484B00              push 004B4868
:0043A6CA 8A45EC                  mov al, byte ptr [ebp-14]
:0043A6CD 50                      push eax
:0043A6CE 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043A6D1 51                      push ecx
:0043A6D2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A6D5 6BC924                  imul ecx, 00000024
:0043A6D8 81C1B83B4B00            add ecx, 004B3BB8
:0043A6DE E880BD0100              call 00456463
:0043A6E3 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A743(U)
|
:0043A6E6 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043A6E9 33C0                    xor eax, eax
:0043A6EB 8A02                    mov al, byte ptr [edx]
:0043A6ED 3DFF000000              cmp eax, 000000FF
:0043A6F2 7451                    je 0043A745
:0043A6F4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043A6F7 33D2                    xor edx, edx
:0043A6F9 8A11                    mov dl, byte ptr [ecx]
:0043A6FB 8B45FC                  mov eax, dword ptr [ebp-04]
:0043A6FE 25FF000000              and eax, 000000FF
:0043A703 3BD0                    cmp edx, eax
:0043A705 7433                    je 0043A73A
:0043A707 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043A70A 33D2                    xor edx, edx
:0043A70C 8A11                    mov dl, byte ptr [ecx]
:0043A70E 8BCA                    mov ecx, edx
:0043A710 6BC924                  imul ecx, 00000024
:0043A713 81C1B83B4B00            add ecx, 004B3BB8
:0043A719 E8F221FDFF              call 0040C910
:0043A71E 85C0                    test eax, eax
:0043A720 7418                    je 0043A73A
:0043A722 8B4508                  mov eax, dword ptr [ebp+08]
:0043A725 50                      push eax
:0043A726 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043A729 33D2                    xor edx, edx
:0043A72B 8A11                    mov dl, byte ptr [ecx]
:0043A72D 52                      push edx
:0043A72E 8B450C                  mov eax, dword ptr [ebp+0C]
:0043A731 50                      push eax
:0043A732 E8A3010000              call 0043A8DA
:0043A737 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A705(C), :0043A720(C)
|
:0043A73A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043A73D 83C101                  add ecx, 00000001
:0043A740 894DE4                  mov dword ptr [ebp-1C], ecx
:0043A743 EBA1                    jmp 0043A6E6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A69F(C), :0043A6F2(C)
|
:0043A745 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A5D5(C)
|
:0043A74F 8BE5                    mov esp, ebp
:0043A751 5D                      pop ebp
:0043A752 C3                      ret



* Referenced by a CALL at Address:
|:0043A5E3   
|
:0043A753 55                      push ebp
:0043A754 8BEC                    mov ebp, esp
:0043A756 83EC10                  sub esp, 00000010
:0043A759 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043A75C 81E1FF000000            and ecx, 000000FF
:0043A762 6BC922                  imul ecx, 00000022
:0043A765 81C1D0474900            add ecx, 004947D0
:0043A76B E8F056FDFF              call 0040FE60
:0043A770 8845FC                  mov byte ptr [ebp-04], al
:0043A773 C745F801000000          mov [ebp-08], 00000001
:0043A77A 8B450C                  mov eax, dword ptr [ebp+0C]
:0043A77D 25FF000000              and eax, 000000FF
:0043A782 3DFF000000              cmp eax, 000000FF
:0043A787 0F8432010000            je 0043A8BF
:0043A78D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A790 81E1FF000000            and ecx, 000000FF
:0043A796 6BC924                  imul ecx, 00000024
:0043A799 81C1B83B4B00            add ecx, 004B3BB8
:0043A79F 894DF4                  mov dword ptr [ebp-0C], ecx
:0043A7A2 8B55FC                  mov edx, dword ptr [ebp-04]
:0043A7A5 81E2FF000000            and edx, 000000FF
:0043A7AB 8955F0                  mov dword ptr [ebp-10], edx
:0043A7AE 8B45F0                  mov eax, dword ptr [ebp-10]
:0043A7B1 83E820                  sub eax, 00000020
:0043A7B4 8945F0                  mov dword ptr [ebp-10], eax
:0043A7B7 837DF004                cmp dword ptr [ebp-10], 00000004
:0043A7BB 0F87FE000000            ja 0043A8BF
:0043A7C1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043A7C4 FF248DC6A84300          jmp dword ptr [4*ecx+0043A8C6]
:0043A7CB 6A10                    push 00000010
:0043A7CD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A7D0 E89BC2FFFF              call 00436A70
:0043A7D5 8945F8                  mov dword ptr [ebp-08], eax
:0043A7D8 837DF800                cmp dword ptr [ebp-08], 00000000
:0043A7DC 751B                    jne 0043A7F9

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043A7DE 6A07                    push 00000007
:0043A7E0 B9F8544B00              mov ecx, 004B54F8
:0043A7E5 E830ED0200              call 0046951A

* Possible StringData Ref from Data Obj ->"䳡SnqVä_"
                                  |
:0043A7EA 6870E34700              push 0047E370
:0043A7EF 6A00                    push 00000000
:0043A7F1 E83D6CFFFF              call 00431433
:0043A7F6 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A7DC(C)
|
:0043A7F9 E9C1000000              jmp 0043A8BF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043A7FE 6A04                    push 00000004
:0043A800 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A803 E868C2FFFF              call 00436A70
:0043A808 8945F8                  mov dword ptr [ebp-08], eax
:0043A80B 837DF800                cmp dword ptr [ebp-08], 00000000
:0043A80F 751B                    jne 0043A82C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043A811 6A07                    push 00000007
:0043A813 B9F8544B00              mov ecx, 004B54F8
:0043A818 E8FDEC0200              call 0046951A

* Possible StringData Ref from Data Obj ->"䳡Sn_"
                                  |
:0043A81D 6890E34700              push 0047E390
:0043A822 6A00                    push 00000000
:0043A824 E80A6CFFFF              call 00431433
:0043A829 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A80F(C)
|
:0043A82C E98E000000              jmp 0043A8BF
:0043A831 6A01                    push 00000001
:0043A833 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A836 E835C2FFFF              call 00436A70
:0043A83B 8945F8                  mov dword ptr [ebp-08], eax
:0043A83E 837DF800                cmp dword ptr [ebp-08], 00000000
:0043A842 751B                    jne 0043A85F

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043A844 6A07                    push 00000007
:0043A846 B9F8544B00              mov ecx, 004B54F8
:0043A84B E8CAEC0200              call 0046951A

* Possible StringData Ref from Data Obj ->"䳡Sn_"
                                  |
:0043A850 68ACE34700              push 0047E3AC
:0043A855 6A00                    push 00000000
:0043A857 E8D76BFFFF              call 00431433
:0043A85C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A842(C)
|
:0043A85F EB5E                    jmp 0043A8BF

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043A861 6A02                    push 00000002
:0043A863 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A866 E805C2FFFF              call 00436A70
:0043A86B 8945F8                  mov dword ptr [ebp-08], eax
:0043A86E 837DF800                cmp dword ptr [ebp-08], 00000000
:0043A872 751B                    jne 0043A88F

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043A874 6A07                    push 00000007
:0043A876 B9F8544B00              mov ecx, 004B54F8
:0043A87B E89AEC0200              call 0046951A

* Possible StringData Ref from Data Obj ->"䳡Sn_"
                                  |
:0043A880 68C8E34700              push 0047E3C8
:0043A885 6A00                    push 00000000
:0043A887 E8A76BFFFF              call 00431433
:0043A88C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A872(C)
|
:0043A88F EB2E                    jmp 0043A8BF
:0043A891 6A20                    push 00000020
:0043A893 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043A896 E8D5C1FFFF              call 00436A70
:0043A89B 8945F8                  mov dword ptr [ebp-08], eax
:0043A89E 837DF800                cmp dword ptr [ebp-08], 00000000
:0043A8A2 751B                    jne 0043A8BF

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043A8A4 6A07                    push 00000007
:0043A8A6 B9F8544B00              mov ecx, 004B54F8
:0043A8AB E86AEC0200              call 0046951A

* Possible StringData Ref from Data Obj ->"䳡Sn_˶"
                                  |
:0043A8B0 68E4E34700              push 0047E3E4
:0043A8B5 6A00                    push 00000000
:0043A8B7 E8776BFFFF              call 00431433
:0043A8BC 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A787(C), :0043A7BB(C), :0043A7F9(U), :0043A82C(U), :0043A85F(U)
|:0043A88F(U), :0043A8A2(C)
|
:0043A8BF 8B45F8                  mov eax, dword ptr [ebp-08]
:0043A8C2 8BE5                    mov esp, ebp
:0043A8C4 5D                      pop ebp
:0043A8C5 C3                      ret



:0043A8C6 31A84300                DWORD 0043A831
:0043A8CA FEA74300                DWORD 0043A7FE
:0043A8CE CBA74300                DWORD 0043A7CB
:0043A8D2 91A84300                DWORD 0043A891
:0043A8D6 61A84300                DWORD 0043A861



* Referenced by a CALL at Addresses:
|:0043A68C   , :0043A732   
|
:0043A8DA 55                      push ebp
:0043A8DB 8BEC                    mov ebp, esp
:0043A8DD 83EC10                  sub esp, 00000010
:0043A8E0 8B4D10                  mov ecx, dword ptr [ebp+10]
:0043A8E3 6BC922                  imul ecx, 00000022
:0043A8E6 81C1D0474900            add ecx, 004947D0
:0043A8EC E86F55FDFF              call 0040FE60
:0043A8F1 8845FC                  mov byte ptr [ebp-04], al
:0043A8F4 817D0CFF000000          cmp dword ptr [ebp+0C], 000000FF
:0043A8FB 0F8488000000            je 0043A989
:0043A901 8B450C                  mov eax, dword ptr [ebp+0C]
:0043A904 6BC024                  imul eax, 00000024
:0043A907 05B83B4B00              add eax, 004B3BB8
:0043A90C 8945F8                  mov dword ptr [ebp-08], eax
:0043A90F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A912 E8C9C0FFFF              call 004369E0
:0043A917 6BC050                  imul eax, 00000050
:0043A91A 05787F4900              add eax, 00497F78
:0043A91F 8945F4                  mov dword ptr [ebp-0C], eax
:0043A922 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043A925 81E1FF000000            and ecx, 000000FF
:0043A92B 894DF0                  mov dword ptr [ebp-10], ecx
:0043A92E 8B55F0                  mov edx, dword ptr [ebp-10]
:0043A931 83EA20                  sub edx, 00000020
:0043A934 8955F0                  mov dword ptr [ebp-10], edx
:0043A937 837DF004                cmp dword ptr [ebp-10], 00000004
:0043A93B 7744                    ja 0043A981
:0043A93D 8B45F0                  mov eax, dword ptr [ebp-10]
:0043A940 FF24858DA94300          jmp dword ptr [4*eax+0043A98D]
:0043A947 6A10                    push 00000010
:0043A949 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A94C E83FC3FFFF              call 00436C90
:0043A951 EB2E                    jmp 0043A981

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043A953 6A04                    push 00000004
:0043A955 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A958 E833C3FFFF              call 00436C90
:0043A95D EB22                    jmp 0043A981
:0043A95F 6A01                    push 00000001
:0043A961 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A964 E827C3FFFF              call 00436C90
:0043A969 EB16                    jmp 0043A981

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043A96B 6A02                    push 00000002
:0043A96D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A970 E81BC3FFFF              call 00436C90
:0043A975 EB0A                    jmp 0043A981
:0043A977 6A20                    push 00000020
:0043A979 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A97C E80FC3FFFF              call 00436C90

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A93B(C), :0043A951(U), :0043A95D(U), :0043A969(U), :0043A975(U)
|
:0043A981 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043A984 E816A2FFFF              call 00434B9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A8FB(C)
|
:0043A989 8BE5                    mov esp, ebp
:0043A98B 5D                      pop ebp
:0043A98C C3                      ret



:0043A98D 5FA94300                DWORD 0043A95F
:0043A991 53A94300                DWORD 0043A953
:0043A995 47A94300                DWORD 0043A947
:0043A999 77A94300                DWORD 0043A977
:0043A99D 6BA94300                DWORD 0043A96B



* Referenced by a CALL at Address:
|:00439AF3   
|
:0043A9A1 55                      push ebp
:0043A9A2 8BEC                    mov ebp, esp
:0043A9A4 83EC24                  sub esp, 00000024
:0043A9A7 C645F000                mov [ebp-10], 00
:0043A9AB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043A9AE 6BC924                  imul ecx, 00000024
:0043A9B1 81C1B83B4B00            add ecx, 004B3BB8
:0043A9B7 E8C4ADFCFF              call 00405780
:0043A9BC 25FF000000              and eax, 000000FF
:0043A9C1 83F807                  cmp eax, 00000007
:0043A9C4 7417                    je 0043A9DD
:0043A9C6 33C0                    xor eax, eax
:0043A9C8 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043A9CD 83E004                  and eax, 00000004
:0043A9D0 85C0                    test eax, eax
:0043A9D2 7509                    jne 0043A9DD
:0043A9D4 C745DC00000000          mov [ebp-24], 00000000
:0043A9DB EB07                    jmp 0043A9E4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043A9C4(C), :0043A9D2(C)
|
:0043A9DD C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043A9DB(U)
|
:0043A9E4 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043A9E7 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AA33(U)
|
:0043A9EA 6A01                    push 00000001
:0043A9EC 8B55F0                  mov edx, dword ptr [ebp-10]
:0043A9EF 81E2FF000000            and edx, 000000FF
:0043A9F5 80CA80                  or dl, 80
:0043A9F8 52                      push edx
:0043A9F9 8A450C                  mov al, byte ptr [ebp+0C]
:0043A9FC 50                      push eax
:0043A9FD B958494B00              mov ecx, 004B4958
:0043AA02 E8A7330100              call 0044DDAE
:0043AA07 8845FC                  mov byte ptr [ebp-04], al
:0043AA0A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043AA0D 81E1FF000000            and ecx, 000000FF
:0043AA13 81F9FF000000            cmp ecx, 000000FF
:0043AA19 0F84F6000000            je 0043AB15
:0043AA1F 8A55FC                  mov dl, byte ptr [ebp-04]
:0043AA22 52                      push edx
:0043AA23 8A4508                  mov al, byte ptr [ebp+08]
:0043AA26 50                      push eax
:0043AA27 E8ED000000              call 0043AB19
:0043AA2C 83C408                  add esp, 00000008
:0043AA2F 85C0                    test eax, eax
:0043AA31 7502                    jne 0043AA35
:0043AA33 EBB5                    jmp 0043A9EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AA31(C)
|
:0043AA35 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043AA38 81E1FF000000            and ecx, 000000FF
:0043AA3E 6BC924                  imul ecx, 00000024
:0043AA41 81C1B83B4B00            add ecx, 004B3BB8
:0043AA47 E894BFFFFF              call 004369E0
:0043AA4C 6BC050                  imul eax, 00000050
:0043AA4F 05787F4900              add eax, 00497F78
:0043AA54 8945F8                  mov dword ptr [ebp-08], eax
:0043AA57 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043AA5A 81E1FF000000            and ecx, 000000FF
:0043AA60 6BC924                  imul ecx, 00000024
:0043AA63 81C1B83B4B00            add ecx, 004B3BB8
:0043AA69 E8D271FFFF              call 00431C40
:0043AA6E 668B08                  mov cx, word ptr [eax]
:0043AA71 66894DEC                mov word ptr [ebp-14], cx
:0043AA75 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AA78 6BC922                  imul ecx, 00000022
:0043AA7B 81C1D0474900            add ecx, 004947D0
:0043AA81 E8DA87FCFF              call 00403260
:0043AA86 8845E0                  mov byte ptr [ebp-20], al
:0043AA89 8B55E0                  mov edx, dword ptr [ebp-20]
:0043AA8C 81E2FF000000            and edx, 000000FF
:0043AA92 D1E2                    shl edx, 1
:0043AA94 8855E8                  mov byte ptr [ebp-18], dl
:0043AA97 8B45E8                  mov eax, dword ptr [ebp-18]
:0043AA9A 25FF000000              and eax, 000000FF
:0043AA9F 83C001                  add eax, 00000001
:0043AAA2 8845E4                  mov byte ptr [ebp-1C], al
:0043AAA5 8A4DED                  mov cl, byte ptr [ebp-13]
:0043AAA8 51                      push ecx
:0043AAA9 8A55EC                  mov dl, byte ptr [ebp-14]
:0043AAAC 52                      push edx
:0043AAAD B958494B00              mov ecx, 004B4958
:0043AAB2 E836300100              call 0044DAED
:0043AAB7 8A45FC                  mov al, byte ptr [ebp-04]
:0043AABA 50                      push eax
:0043AABB 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043AABE 51                      push ecx
:0043AABF E832FAFFFF              call 0043A4F6
:0043AAC4 83C408                  add esp, 00000008
:0043AAC7 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043AAC9 6A03                    push 00000003
:0043AACB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AACE 6BC922                  imul ecx, 00000022
:0043AAD1 81C1D0474900            add ecx, 004947D0
:0043AAD7 E88453FDFF              call 0040FE60
:0043AADC 50                      push eax
:0043AADD 8A55FC                  mov dl, byte ptr [ebp-04]
:0043AAE0 52                      push edx
:0043AAE1 8A450C                  mov al, byte ptr [ebp+0C]
:0043AAE4 50                      push eax
:0043AAE5 B958494B00              mov ecx, 004B4958
:0043AAEA E8A13C0100              call 0044E790
:0043AAEF 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043AAF2 81E1FF000000            and ecx, 000000FF
:0043AAF8 51                      push ecx
:0043AAF9 8B55FC                  mov edx, dword ptr [ebp-04]
:0043AAFC 81E2FF000000            and edx, 000000FF
:0043AB02 52                      push edx
:0043AB03 E830010000              call 0043AC38
:0043AB08 83C408                  add esp, 00000008
:0043AB0B C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AA19(C)
|
:0043AB15 8BE5                    mov esp, ebp
:0043AB17 5D                      pop ebp
:0043AB18 C3                      ret



* Referenced by a CALL at Address:
|:0043AA27   
|
:0043AB19 55                      push ebp
:0043AB1A 8BEC                    mov ebp, esp
:0043AB1C 83EC10                  sub esp, 00000010
:0043AB1F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AB22 81E1FF000000            and ecx, 000000FF
:0043AB28 6BC922                  imul ecx, 00000022
:0043AB2B 81C1D0474900            add ecx, 004947D0
:0043AB31 E82A87FCFF              call 00403260
:0043AB36 8845F0                  mov byte ptr [ebp-10], al
:0043AB39 8B45F0                  mov eax, dword ptr [ebp-10]
:0043AB3C 25FF000000              and eax, 000000FF
:0043AB41 D1E0                    shl eax, 1
:0043AB43 8845FC                  mov byte ptr [ebp-04], al
:0043AB46 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043AB49 81E1FF000000            and ecx, 000000FF
:0043AB4F 83C101                  add ecx, 00000001
:0043AB52 884DF8                  mov byte ptr [ebp-08], cl
:0043AB55 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043AB58 81E1FF000000            and ecx, 000000FF
:0043AB5E 6BC924                  imul ecx, 00000024
:0043AB61 81C1B83B4B00            add ecx, 004B3BB8
:0043AB67 E814C4FFFF              call 00436F80
:0043AB6C 8845F4                  mov byte ptr [ebp-0C], al
:0043AB6F 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043AB72 25FF000000              and eax, 000000FF
:0043AB77 99                      cdq
:0043AB78 33C2                    xor eax, edx
:0043AB7A 2BC2                    sub eax, edx
:0043AB7C 83E001                  and eax, 00000001
:0043AB7F 33C2                    xor eax, edx
:0043AB81 2BC2                    sub eax, edx
:0043AB83 85C0                    test eax, eax
:0043AB85 7422                    je 0043ABA9

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043AB87 6A07                    push 00000007
:0043AB89 B9F8544B00              mov ecx, 004B54F8
:0043AB8E E887E90200              call 0046951A

* Possible StringData Ref from Data Obj ->"AݩʤF"
                                  |
:0043AB93 6800E44700              push 0047E400
:0043AB98 6A00                    push 00000000
:0043AB9A E89468FFFF              call 00431433
:0043AB9F 83C408                  add esp, 00000008
:0043ABA2 33C0                    xor eax, eax
:0043ABA4 E98B000000              jmp 0043AC34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AB85(C)
|
:0043ABA9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043ABAC 81E1FF000000            and ecx, 000000FF
:0043ABB2 6BC924                  imul ecx, 00000024
:0043ABB5 81C1B83B4B00            add ecx, 004B3BB8
:0043ABBB E820BEFFFF              call 004369E0
:0043ABC0 8BC8                    mov ecx, eax
:0043ABC2 6BC950                  imul ecx, 00000050
:0043ABC5 81C1787F4900            add ecx, 00497F78
:0043ABCB E8D052FDFF              call 0040FEA0
:0043ABD0 25FF000000              and eax, 000000FF
:0043ABD5 83F814                  cmp eax, 00000014
:0043ABD8 7D21                    jge 0043ABFB

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043ABDA 6A07                    push 00000007
:0043ABDC B9F8544B00              mov ecx, 004B54F8
:0043ABE1 E834E90200              call 0046951A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0043ABE6 6A14                    push 00000014

* Possible StringData Ref from Data Obj ->"Ŧb%wHULkݩ"
                                  |
:0043ABE8 6814E44700              push 0047E414
:0043ABED 6A00                    push 00000000
:0043ABEF E83F68FFFF              call 00431433
:0043ABF4 83C40C                  add esp, 0000000C
:0043ABF7 33C0                    xor eax, eax
:0043ABF9 EB39                    jmp 0043AC34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043ABD8(C)
|
:0043ABFB 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043ABFE 81E2FF000000            and edx, 000000FF
:0043AC04 8B45FC                  mov eax, dword ptr [ebp-04]
:0043AC07 25FF000000              and eax, 000000FF
:0043AC0C 3BD0                    cmp edx, eax
:0043AC0E 741F                    je 0043AC2F

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043AC10 6A07                    push 00000007
:0043AC12 B9F8544B00              mov ecx, 004B54F8
:0043AC17 E8FEE80200              call 0046951A

* Possible StringData Ref from Data Obj ->"ӹD㤣൹䳡ϥ"
                                  |
:0043AC1C 6830E44700              push 0047E430
:0043AC21 6A00                    push 00000000
:0043AC23 E80B68FFFF              call 00431433
:0043AC28 83C408                  add esp, 00000008
:0043AC2B 33C0                    xor eax, eax
:0043AC2D EB05                    jmp 0043AC34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AC0E(C)
|
:0043AC2F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043ABA4(U), :0043ABF9(U), :0043AC2D(U)
|
:0043AC34 8BE5                    mov esp, ebp
:0043AC36 5D                      pop ebp
:0043AC37 C3                      ret



* Referenced by a CALL at Address:
|:0043AB03   
|
:0043AC38 55                      push ebp
:0043AC39 8BEC                    mov ebp, esp
:0043AC3B 51                      push ecx
:0043AC3C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AC3F 6BC924                  imul ecx, 00000024
:0043AC42 81C1B83B4B00            add ecx, 004B3BB8
:0043AC48 E893BDFFFF              call 004369E0
:0043AC4D 8945FC                  mov dword ptr [ebp-04], eax
:0043AC50 8A450C                  mov al, byte ptr [ebp+0C]
:0043AC53 50                      push eax
:0043AC54 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043AC57 6BC950                  imul ecx, 00000050
:0043AC5A 81C1787F4900            add ecx, 00497F78
:0043AC60 E85BC0FFFF              call 00436CC0
:0043AC65 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043AC68 6BC950                  imul ecx, 00000050
:0043AC6B 81C1787F4900            add ecx, 00497F78
:0043AC71 E89373FCFF              call 00402009
:0043AC76 50                      push eax
:0043AC77 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043AC7A 6BC950                  imul ecx, 00000050
:0043AC7D 81C1787F4900            add ecx, 00497F78
:0043AC83 E8566DFCFF              call 004019DE
:0043AC88 85C0                    test eax, eax
:0043AC8A 7516                    jne 0043ACA2
:0043AC8C 68FF000000              push 000000FF
:0043AC91 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043AC94 6BC950                  imul ecx, 00000050
:0043AC97 81C1787F4900            add ecx, 00497F78
:0043AC9D E82E1CFDFF              call 0040C8D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AC8A(C)
|
:0043ACA2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043ACA5 6BC924                  imul ecx, 00000024
:0043ACA8 81C1B83B4B00            add ecx, 004B3BB8
:0043ACAE E8B698FFFF              call 00434569
:0043ACB3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043ACB6 6BC924                  imul ecx, 00000024
:0043ACB9 81C1B83B4B00            add ecx, 004B3BB8
:0043ACBF E8DB9EFFFF              call 00434B9F
:0043ACC4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043ACC7 51                      push ecx
:0043ACC8 E84F1E0300              call 0046CB1C
:0043ACCD 83C404                  add esp, 00000004
:0043ACD0 8BE5                    mov esp, ebp
:0043ACD2 5D                      pop ebp
:0043ACD3 C3                      ret



* Referenced by a CALL at Addresses:
|:00438EDE   , :00452C92   
|
:0043ACD4 55                      push ebp
:0043ACD5 8BEC                    mov ebp, esp
:0043ACD7 83EC10                  sub esp, 00000010
:0043ACDA 894DF8                  mov dword ptr [ebp-08], ecx
:0043ACDD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043ACE0 E89BAAFCFF              call 00405780
:0043ACE5 25FF000000              and eax, 000000FF
:0043ACEA 83F807                  cmp eax, 00000007
:0043ACED 7417                    je 0043AD06
:0043ACEF 33C0                    xor eax, eax
:0043ACF1 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043ACF6 83E004                  and eax, 00000004
:0043ACF9 85C0                    test eax, eax
:0043ACFB 7509                    jne 0043AD06
:0043ACFD C745F400000000          mov [ebp-0C], 00000000
:0043AD04 EB07                    jmp 0043AD0D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043ACED(C), :0043ACFB(C)
|
:0043AD06 C745F401000000          mov [ebp-0C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AD04(U)
|
:0043AD0D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043AD10 894DFC                  mov dword ptr [ebp-04], ecx
:0043AD13 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AD16 81E1FF000000            and ecx, 000000FF
:0043AD1C 6BC931                  imul ecx, 00000031
:0043AD1F 81C1001D4B00            add ecx, 004B1D00
:0043AD25 E8D650FDFF              call 0040FE00
:0043AD2A 25FF000000              and eax, 000000FF
:0043AD2F 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AD32 394214                  cmp dword ptr [edx+14], eax
:0043AD35 7332                    jnb 0043AD69

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043AD37 6A07                    push 00000007
:0043AD39 B9F8544B00              mov ecx, 004B54F8
:0043AD3E E8D7E70200              call 0046951A

* Possible StringData Ref from Data Obj ->"ޯȤ"
                                  |
:0043AD43 684CE44700              push 0047E44C
:0043AD48 6A00                    push 00000000
:0043AD4A E8E466FFFF              call 00431433
:0043AD4F 83C408                  add esp, 00000008
:0043AD52 6A18                    push 00000018
:0043AD54 6A27                    push 00000027
:0043AD56 6A00                    push 00000000
:0043AD58 6A00                    push 00000000
:0043AD5A B958494B00              mov ecx, 004B4958
:0043AD5F E8E41B0100              call 0044C948
:0043AD64 E9A8050000              jmp 0043B311

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AD35(C)
|
:0043AD69 8A4508                  mov al, byte ptr [ebp+08]
:0043AD6C 247F                    and al, 7F
:0043AD6E 884508                  mov byte ptr [ebp+08], al
:0043AD71 C705C04E4B0000000000    mov dword ptr [004B4EC0], 00000000
:0043AD7B 6A00                    push 00000000
:0043AD7D 8B0DC04E4B00            mov ecx, dword ptr [004B4EC0]
:0043AD83 51                      push ecx
:0043AD84 E8742F0300              call 0046DCFD
:0043AD89 83C408                  add esp, 00000008
:0043AD8C 837DFC00                cmp dword ptr [ebp-04], 00000000
:0043AD90 7530                    jne 0043ADC2
:0043AD92 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AD95 81E1FF000000            and ecx, 000000FF
:0043AD9B 6BC931                  imul ecx, 00000031
:0043AD9E 81C1001D4B00            add ecx, 004B1D00
:0043ADA4 E847A9FCFF              call 004056F0
:0043ADA9 50                      push eax
:0043ADAA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043ADAD E83EBCFFFF              call 004369F0
:0043ADB2 50                      push eax

* Possible StringData Ref from Data Obj ->"%sϥΤF%s"
                                  |
:0043ADB3 6858E44700              push 0047E458
:0043ADB8 6A00                    push 00000000
:0043ADBA E87466FFFF              call 00431433
:0043ADBF 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AD90(C)
|
:0043ADC2 8B5508                  mov edx, dword ptr [ebp+08]
:0043ADC5 81E2FF000000            and edx, 000000FF
:0043ADCB 8955F0                  mov dword ptr [ebp-10], edx
:0043ADCE 837DF040                cmp dword ptr [ebp-10], 00000040
:0043ADD2 0F87C9040000            ja 0043B2A1
:0043ADD8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043ADDB 33C0                    xor eax, eax
:0043ADDD 8A81ABB34300            mov al, byte ptr [ecx+0043B3AB]
:0043ADE3 FF248517B34300          jmp dword ptr [4*eax+0043B317]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043ADEA 6A02                    push 00000002
:0043ADEC 8B55F8                  mov edx, dword ptr [ebp-08]
:0043ADEF 33C0                    xor eax, eax
:0043ADF1 8A4204                  mov al, byte ptr [edx+04]
:0043ADF4 50                      push eax
:0043ADF5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043ADF8 81E1FF000000            and ecx, 000000FF
:0043ADFE 51                      push ecx
:0043ADFF E8E8050000              call 0043B3EC
:0043AE04 83C40C                  add esp, 0000000C
:0043AE07 E995040000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AE0C 6A02                    push 00000002
:0043AE0E 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AE11 33C0                    xor eax, eax
:0043AE13 8A4204                  mov al, byte ptr [edx+04]
:0043AE16 50                      push eax
:0043AE17 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AE1A 81E1FF000000            and ecx, 000000FF
:0043AE20 51                      push ecx
:0043AE21 E86A080000              call 0043B690
:0043AE26 83C40C                  add esp, 0000000C
:0043AE29 E973040000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AE2E 6A02                    push 00000002
:0043AE30 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AE33 33C0                    xor eax, eax
:0043AE35 8A4204                  mov al, byte ptr [edx+04]
:0043AE38 50                      push eax
:0043AE39 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AE3C 81E1FF000000            and ecx, 000000FF
:0043AE42 51                      push ecx
:0043AE43 E8520B0000              call 0043B99A
:0043AE48 83C40C                  add esp, 0000000C
:0043AE4B E951040000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AE50 6A02                    push 00000002
:0043AE52 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AE55 33C0                    xor eax, eax
:0043AE57 8A4204                  mov al, byte ptr [edx+04]
:0043AE5A 50                      push eax
:0043AE5B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AE5E 81E1FF000000            and ecx, 000000FF
:0043AE64 51                      push ecx
:0043AE65 E882050000              call 0043B3EC
:0043AE6A 83C40C                  add esp, 0000000C
:0043AE6D E92F040000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AE72 6A02                    push 00000002
:0043AE74 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AE77 33C0                    xor eax, eax
:0043AE79 8A4204                  mov al, byte ptr [edx+04]
:0043AE7C 50                      push eax
:0043AE7D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AE80 81E1FF000000            and ecx, 000000FF
:0043AE86 51                      push ecx
:0043AE87 E8340D0000              call 0043BBC0
:0043AE8C 83C40C                  add esp, 0000000C
:0043AE8F E90D040000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AE94 6A02                    push 00000002
:0043AE96 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AE99 33C0                    xor eax, eax
:0043AE9B 8A4204                  mov al, byte ptr [edx+04]
:0043AE9E 50                      push eax
:0043AE9F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AEA2 81E1FF000000            and ecx, 000000FF
:0043AEA8 51                      push ecx
:0043AEA9 E82C0F0000              call 0043BDDA
:0043AEAE 83C40C                  add esp, 0000000C
:0043AEB1 E9EB030000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AEB6 6A02                    push 00000002
:0043AEB8 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AEBB 33C0                    xor eax, eax
:0043AEBD 8A4204                  mov al, byte ptr [edx+04]
:0043AEC0 50                      push eax
:0043AEC1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AEC4 81E1FF000000            and ecx, 000000FF
:0043AECA 51                      push ecx
:0043AECB E8FE100000              call 0043BFCE
:0043AED0 83C40C                  add esp, 0000000C
:0043AED3 E9C9030000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AED8 6A02                    push 00000002
:0043AEDA 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AEDD 33C0                    xor eax, eax
:0043AEDF 8A4204                  mov al, byte ptr [edx+04]
:0043AEE2 50                      push eax
:0043AEE3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AEE6 81E1FF000000            and ecx, 000000FF
:0043AEEC 51                      push ecx
:0043AEED E8F6120000              call 0043C1E8
:0043AEF2 83C40C                  add esp, 0000000C
:0043AEF5 E9A7030000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AEFA 6A02                    push 00000002
:0043AEFC 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AEFF 33C0                    xor eax, eax
:0043AF01 8A4204                  mov al, byte ptr [edx+04]
:0043AF04 50                      push eax
:0043AF05 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AF08 81E1FF000000            and ecx, 000000FF
:0043AF0E 51                      push ecx
:0043AF0F E883140000              call 0043C397
:0043AF14 83C40C                  add esp, 0000000C
:0043AF17 E985030000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AF1C 6A02                    push 00000002
:0043AF1E 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AF21 33C0                    xor eax, eax
:0043AF23 8A4204                  mov al, byte ptr [edx+04]
:0043AF26 50                      push eax
:0043AF27 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AF2A 81E1FF000000            and ecx, 000000FF
:0043AF30 51                      push ecx
:0043AF31 E81E160000              call 0043C554
:0043AF36 83C40C                  add esp, 0000000C
:0043AF39 E963030000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AF3E 6A02                    push 00000002
:0043AF40 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AF43 33C0                    xor eax, eax
:0043AF45 8A4204                  mov al, byte ptr [edx+04]
:0043AF48 50                      push eax
:0043AF49 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AF4C 81E1FF000000            and ecx, 000000FF
:0043AF52 51                      push ecx
:0043AF53 E844180000              call 0043C79C
:0043AF58 83C40C                  add esp, 0000000C
:0043AF5B E941030000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AF60 6A02                    push 00000002
:0043AF62 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AF65 33C0                    xor eax, eax
:0043AF67 8A4204                  mov al, byte ptr [edx+04]
:0043AF6A 50                      push eax
:0043AF6B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AF6E 81E1FF000000            and ecx, 000000FF
:0043AF74 51                      push ecx
:0043AF75 E8981A0000              call 0043CA12
:0043AF7A 83C40C                  add esp, 0000000C
:0043AF7D E91F030000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AF82 6A02                    push 00000002
:0043AF84 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AF87 33C0                    xor eax, eax
:0043AF89 8A4204                  mov al, byte ptr [edx+04]
:0043AF8C 50                      push eax
:0043AF8D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AF90 81E1FF000000            and ecx, 000000FF
:0043AF96 51                      push ecx
:0043AF97 E8941D0000              call 0043CD30
:0043AF9C 83C40C                  add esp, 0000000C
:0043AF9F E9FD020000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AFA4 6A02                    push 00000002
:0043AFA6 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AFA9 33C0                    xor eax, eax
:0043AFAB 8A4204                  mov al, byte ptr [edx+04]
:0043AFAE 50                      push eax
:0043AFAF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AFB2 81E1FF000000            and ecx, 000000FF
:0043AFB8 51                      push ecx
:0043AFB9 E887220000              call 0043D245
:0043AFBE 83C40C                  add esp, 0000000C
:0043AFC1 E9DB020000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AFC6 6A02                    push 00000002
:0043AFC8 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AFCB 33C0                    xor eax, eax
:0043AFCD 8A4204                  mov al, byte ptr [edx+04]
:0043AFD0 50                      push eax
:0043AFD1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AFD4 81E1FF000000            and ecx, 000000FF
:0043AFDA 51                      push ecx
:0043AFDB E87F240000              call 0043D45F
:0043AFE0 83C40C                  add esp, 0000000C
:0043AFE3 E9B9020000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043AFE8 6A02                    push 00000002
:0043AFEA 8B55F8                  mov edx, dword ptr [ebp-08]
:0043AFED 33C0                    xor eax, eax
:0043AFEF 8A4204                  mov al, byte ptr [edx+04]
:0043AFF2 50                      push eax
:0043AFF3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043AFF6 81E1FF000000            and ecx, 000000FF
:0043AFFC 51                      push ecx
:0043AFFD E838260000              call 0043D63A
:0043B002 83C40C                  add esp, 0000000C
:0043B005 E997020000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B00A 6A02                    push 00000002
:0043B00C 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B00F 33C0                    xor eax, eax
:0043B011 8A4204                  mov al, byte ptr [edx+04]
:0043B014 50                      push eax
:0043B015 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B018 81E1FF000000            and ecx, 000000FF
:0043B01E 51                      push ecx
:0043B01F E8D2280000              call 0043D8F6
:0043B024 83C40C                  add esp, 0000000C
:0043B027 E975020000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B02C 6A02                    push 00000002
:0043B02E 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B031 33C0                    xor eax, eax
:0043B033 8A4204                  mov al, byte ptr [edx+04]
:0043B036 50                      push eax
:0043B037 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B03A 81E1FF000000            and ecx, 000000FF
:0043B040 51                      push ecx
:0043B041 E8842B0000              call 0043DBCA
:0043B046 83C40C                  add esp, 0000000C
:0043B049 E953020000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B04E 6A02                    push 00000002
:0043B050 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B053 33C0                    xor eax, eax
:0043B055 8A4204                  mov al, byte ptr [edx+04]
:0043B058 50                      push eax
:0043B059 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B05C 81E1FF000000            and ecx, 000000FF
:0043B062 51                      push ecx
:0043B063 E8A52F0000              call 0043E00D
:0043B068 83C40C                  add esp, 0000000C
:0043B06B E931020000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B070 6A02                    push 00000002
:0043B072 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B075 33C0                    xor eax, eax
:0043B077 8A4204                  mov al, byte ptr [edx+04]
:0043B07A 50                      push eax
:0043B07B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B07E 81E1FF000000            and ecx, 000000FF
:0043B084 51                      push ecx
:0043B085 E873320000              call 0043E2FD
:0043B08A 83C40C                  add esp, 0000000C
:0043B08D E90F020000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B092 6A02                    push 00000002
:0043B094 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B097 33C0                    xor eax, eax
:0043B099 8A4204                  mov al, byte ptr [edx+04]
:0043B09C 50                      push eax
:0043B09D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B0A0 81E1FF000000            and ecx, 000000FF
:0043B0A6 51                      push ecx
:0043B0A7 E851350000              call 0043E5FD
:0043B0AC 83C40C                  add esp, 0000000C
:0043B0AF E9ED010000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B0B4 6A02                    push 00000002
:0043B0B6 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B0B9 33C0                    xor eax, eax
:0043B0BB 8A4204                  mov al, byte ptr [edx+04]
:0043B0BE 50                      push eax
:0043B0BF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B0C2 81E1FF000000            and ecx, 000000FF
:0043B0C8 51                      push ecx
:0043B0C9 E840380000              call 0043E90E
:0043B0CE 83C40C                  add esp, 0000000C
:0043B0D1 E9CB010000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B0D6 6A02                    push 00000002
:0043B0D8 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B0DB 33C0                    xor eax, eax
:0043B0DD 8A4204                  mov al, byte ptr [edx+04]
:0043B0E0 50                      push eax
:0043B0E1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B0E4 81E1FF000000            and ecx, 000000FF
:0043B0EA 51                      push ecx
:0043B0EB E8653C0000              call 0043ED55
:0043B0F0 83C40C                  add esp, 0000000C
:0043B0F3 E9A9010000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B0F8 6A02                    push 00000002
:0043B0FA 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B0FD 33C0                    xor eax, eax
:0043B0FF 8A4204                  mov al, byte ptr [edx+04]
:0043B102 50                      push eax
:0043B103 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B106 81E1FF000000            and ecx, 000000FF
:0043B10C 51                      push ecx
:0043B10D E898410000              call 0043F2AA
:0043B112 83C40C                  add esp, 0000000C
:0043B115 E987010000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B11A 6A02                    push 00000002
:0043B11C 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B11F 33C0                    xor eax, eax
:0043B121 8A4204                  mov al, byte ptr [edx+04]
:0043B124 50                      push eax
:0043B125 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B128 81E1FF000000            and ecx, 000000FF
:0043B12E 51                      push ecx
:0043B12F E810430000              call 0043F444
:0043B134 83C40C                  add esp, 0000000C
:0043B137 E965010000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B13C 6A02                    push 00000002
:0043B13E 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B141 33C0                    xor eax, eax
:0043B143 8A4204                  mov al, byte ptr [edx+04]
:0043B146 50                      push eax
:0043B147 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B14A 81E1FF000000            and ecx, 000000FF
:0043B150 51                      push ecx
:0043B151 E859450000              call 0043F6AF
:0043B156 83C40C                  add esp, 0000000C
:0043B159 E943010000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B15E 6A02                    push 00000002
:0043B160 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B163 33C0                    xor eax, eax
:0043B165 8A4204                  mov al, byte ptr [edx+04]
:0043B168 50                      push eax
:0043B169 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B16C 81E1FF000000            and ecx, 000000FF
:0043B172 51                      push ecx
:0043B173 E8B8460000              call 0043F830
:0043B178 83C40C                  add esp, 0000000C
:0043B17B E921010000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B180 6A02                    push 00000002
:0043B182 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B185 33C0                    xor eax, eax
:0043B187 8A4204                  mov al, byte ptr [edx+04]
:0043B18A 50                      push eax
:0043B18B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B18E 81E1FF000000            and ecx, 000000FF
:0043B194 51                      push ecx
:0043B195 E8BD480000              call 0043FA57
:0043B19A 83C40C                  add esp, 0000000C
:0043B19D E9FF000000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B1A2 6A02                    push 00000002
:0043B1A4 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B1A7 33C0                    xor eax, eax
:0043B1A9 8A4204                  mov al, byte ptr [edx+04]
:0043B1AC 50                      push eax
:0043B1AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B1B0 81E1FF000000            and ecx, 000000FF
:0043B1B6 51                      push ecx
:0043B1B7 E8084C0000              call 0043FDC4
:0043B1BC 83C40C                  add esp, 0000000C
:0043B1BF E9DD000000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B1C4 6A02                    push 00000002
:0043B1C6 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B1C9 33C0                    xor eax, eax
:0043B1CB 8A4204                  mov al, byte ptr [edx+04]
:0043B1CE 50                      push eax
:0043B1CF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B1D2 81E1FF000000            and ecx, 000000FF
:0043B1D8 51                      push ecx
:0043B1D9 E830500000              call 0044020E
:0043B1DE 83C40C                  add esp, 0000000C
:0043B1E1 E9BB000000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B1E6 6A02                    push 00000002
:0043B1E8 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B1EB 33C0                    xor eax, eax
:0043B1ED 8A4204                  mov al, byte ptr [edx+04]
:0043B1F0 50                      push eax
:0043B1F1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B1F4 81E1FF000000            and ecx, 000000FF
:0043B1FA 51                      push ecx
:0043B1FB E8E2510000              call 004403E2
:0043B200 83C40C                  add esp, 0000000C
:0043B203 E999000000              jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B208 6A02                    push 00000002
:0043B20A 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B20D 33C0                    xor eax, eax
:0043B20F 8A4204                  mov al, byte ptr [edx+04]
:0043B212 50                      push eax
:0043B213 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B216 81E1FF000000            and ecx, 000000FF
:0043B21C 51                      push ecx
:0043B21D E8F9530000              call 0044061B
:0043B222 83C40C                  add esp, 0000000C
:0043B225 EB7A                    jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B227 6A02                    push 00000002
:0043B229 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B22C 33C0                    xor eax, eax
:0043B22E 8A4204                  mov al, byte ptr [edx+04]
:0043B231 50                      push eax
:0043B232 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B235 81E1FF000000            and ecx, 000000FF
:0043B23B 51                      push ecx
:0043B23C E823560000              call 00440864
:0043B241 83C40C                  add esp, 0000000C
:0043B244 EB5B                    jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B246 6A02                    push 00000002
:0043B248 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B24B 33C0                    xor eax, eax
:0043B24D 8A4204                  mov al, byte ptr [edx+04]
:0043B250 50                      push eax
:0043B251 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B254 81E1FF000000            and ecx, 000000FF
:0043B25A 51                      push ecx
:0043B25B E8CE570000              call 00440A2E
:0043B260 83C40C                  add esp, 0000000C
:0043B263 EB3C                    jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B265 6A02                    push 00000002
:0043B267 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B26A 33C0                    xor eax, eax
:0043B26C 8A4204                  mov al, byte ptr [edx+04]
:0043B26F 50                      push eax
:0043B270 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B273 81E1FF000000            and ecx, 000000FF
:0043B279 51                      push ecx
:0043B27A E84D5A0000              call 00440CCC
:0043B27F 83C40C                  add esp, 0000000C
:0043B282 EB1D                    jmp 0043B2A1

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B284 6A02                    push 00000002
:0043B286 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B289 33C0                    xor eax, eax
:0043B28B 8A4204                  mov al, byte ptr [edx+04]
:0043B28E 50                      push eax
:0043B28F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B292 81E1FF000000            and ecx, 000000FF
:0043B298 51                      push ecx
:0043B299 E8EA5B0000              call 00440E88
:0043B29E 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043ADD2(C), :0043AE07(U), :0043AE29(U), :0043AE4B(U), :0043AE6D(U)
|:0043AE8F(U), :0043AEB1(U), :0043AED3(U), :0043AEF5(U), :0043AF17(U)
|:0043AF39(U), :0043AF5B(U), :0043AF7D(U), :0043AF9F(U), :0043AFC1(U)
|:0043AFE3(U), :0043B005(U), :0043B027(U), :0043B049(U), :0043B06B(U)
|:0043B08D(U), :0043B0AF(U), :0043B0D1(U), :0043B0F3(U), :0043B115(U)
|:0043B137(U), :0043B159(U), :0043B17B(U), :0043B19D(U), :0043B1BF(U)
|:0043B1E1(U), :0043B203(U), :0043B225(U), :0043B244(U), :0043B263(U)
|:0043B282(U)
|
:0043B2A1 833DD0484B0000          cmp dword ptr [004B48D0], 00000000
:0043B2A8 744D                    je 0043B2F7
:0043B2AA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B2AD 81E1FF000000            and ecx, 000000FF
:0043B2B3 6BC931                  imul ecx, 00000031
:0043B2B6 81C1001D4B00            add ecx, 004B1D00
:0043B2BC E83F4BFDFF              call 0040FE00
:0043B2C1 25FF000000              and eax, 000000FF
:0043B2C6 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B2C9 8B4A14                  mov ecx, dword ptr [edx+14]
:0043B2CC 2BC8                    sub ecx, eax
:0043B2CE 8B55F8                  mov edx, dword ptr [ebp-08]
:0043B2D1 894A14                  mov dword ptr [edx+14], ecx
:0043B2D4 6880000000              push 00000080
:0043B2D9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043B2DC E8EFB5FFFF              call 004368D0
:0043B2E1 C705D0484B0000000000    mov dword ptr [004B48D0], 00000000
:0043B2EB 6A00                    push 00000000
:0043B2ED B958494B00              mov ecx, 004B4958
:0043B2F2 E85F350100              call 0044E856

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B2A8(C)
|
:0043B2F7 C705C04E4B0001000000    mov dword ptr [004B4EC0], 00000001
:0043B301 6A00                    push 00000000
:0043B303 A1C04E4B00              mov eax, dword ptr [004B4EC0]
:0043B308 50                      push eax
:0043B309 E8EF290300              call 0046DCFD
:0043B30E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043AD64(U)
|
:0043B311 8BE5                    mov esp, ebp
:0043B313 5D                      pop ebp
:0043B314 C20400                  ret 0004



:0043B317 EAAD4300                DWORD 0043ADEA
:0043B31B 0CAE4300                DWORD 0043AE0C
:0043B31F 2EAE4300                DWORD 0043AE2E
:0043B323 50AE4300                DWORD 0043AE50
:0043B327 72AE4300                DWORD 0043AE72
:0043B32B 94AE4300                DWORD 0043AE94
:0043B32F B6AE4300                DWORD 0043AEB6
:0043B333 D8AE4300                DWORD 0043AED8
:0043B337 FAAE4300                DWORD 0043AEFA
:0043B33B 1CAF4300                DWORD 0043AF1C
:0043B33F 3EAF4300                DWORD 0043AF3E
:0043B343 60AF4300                DWORD 0043AF60
:0043B347 82AF4300                DWORD 0043AF82
:0043B34B A4AF4300                DWORD 0043AFA4
:0043B34F C6AF4300                DWORD 0043AFC6
:0043B353 E8AF4300                DWORD 0043AFE8
:0043B357 0AB04300                DWORD 0043B00A
:0043B35B 2CB04300                DWORD 0043B02C
:0043B35F 4EB04300                DWORD 0043B04E
:0043B363 70B04300                DWORD 0043B070
:0043B367 92B04300                DWORD 0043B092
:0043B36B B4B04300                DWORD 0043B0B4
:0043B36F D6B04300                DWORD 0043B0D6
:0043B373 F8B04300                DWORD 0043B0F8
:0043B377 1AB14300                DWORD 0043B11A
:0043B37B 3CB14300                DWORD 0043B13C
:0043B37F 5EB14300                DWORD 0043B15E
:0043B383 80B14300                DWORD 0043B180
:0043B387 A2B14300                DWORD 0043B1A2
:0043B38B C4B14300                DWORD 0043B1C4
:0043B38F E6B14300                DWORD 0043B1E6
:0043B393 08B24300                DWORD 0043B208
:0043B397 27B24300                DWORD 0043B227
:0043B39B 46B24300                DWORD 0043B246
:0043B39F 65B24300                DWORD 0043B265
:0043B3A3 84B24300                DWORD 0043B284
:0043B3A7 A1B24300                DWORD 0043B2A1


:0043B3AB 00000000                BYTE  4 DUP(0)


:0043B3AF 0101                    add dword ptr [ecx], eax
:0043B3B1 0203                    add al, byte ptr [ebx]
:0043B3B3 0404                    add al, 04
:0043B3B5 0505060708              add eax, 08070605
:0043B3BA 0808                    or byte ptr [eax], cl
:0043B3BC 090A                    or dword ptr [edx], ecx
:0043B3BE 0A0A                    or cl, byte ptr [edx]
:0043B3C0 0A0A                    or cl, byte ptr [edx]
:0043B3C2 0B0B                    or ecx, dword ptr [ebx]
:0043B3C4 0C0D                    or al, 0D
:0043B3C6 0D0E0F1011              or eax, 11100F0E
:0043B3CB 1213                    adc dl, byte ptr [ebx]
:0043B3CD 1414                    adc al, 14
:0043B3CF 1515151617              adc eax, 17161515
:0043B3D4 17                      pop ss
:0043B3D5 1818                    sbb byte ptr [eax], bl
:0043B3D7 1919                    sbb dword ptr [ecx], ebx
:0043B3D9 1A1A                    sbb bl, byte ptr [edx]
:0043B3DB 1B1B                    sbb ebx, dword ptr [ebx]
:0043B3DD 1B1B                    sbb ebx, dword ptr [ebx]
:0043B3DF 1B1C1C                  sbb ebx, dword ptr [esp+ebx]
:0043B3E2 1C1D                    sbb al, 1D
:0043B3E4 1E                      push ds
:0043B3E5 1F                      pop ds
:0043B3E6 2021                    and byte ptr [ecx], ah
:0043B3E8 2223                    and ah, byte ptr [ebx]
:0043B3EA 2323                    and esp, dword ptr [ebx]

* Referenced by a CALL at Addresses:
|:0043ADFF   , :0043AE65   
|
:0043B3EC 55                      push ebp
:0043B3ED 8BEC                    mov ebp, esp
:0043B3EF 83EC20                  sub esp, 00000020
:0043B3F2 C645FCFF                mov [ebp-04], FF
:0043B3F6 8B4508                  mov eax, dword ptr [ebp+08]
:0043B3F9 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043B3FB B906000000              mov ecx, 00000006
:0043B400 F7F1                    div ecx
:0043B402 8845F4                  mov byte ptr [ebp-0C], al
:0043B405 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B408 6BC931                  imul ecx, 00000031
:0043B40B 81C1001D4B00            add ecx, 004B1D00
:0043B411 E86AA3FCFF              call 00405780
:0043B416 8845EC                  mov byte ptr [ebp-14], al
:0043B419 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B41C 6BC931                  imul ecx, 00000031
:0043B41F 81C1001D4B00            add ecx, 004B1D00
:0043B425 E836A3FCFF              call 00405760
:0043B42A 8845F0                  mov byte ptr [ebp-10], al
:0043B42D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B430 6BC924                  imul ecx, 00000024
:0043B433 81C1B83B4B00            add ecx, 004B3BB8
:0043B439 E842A3FCFF              call 00405780
:0043B43E 25FF000000              and eax, 000000FF
:0043B443 83F807                  cmp eax, 00000007
:0043B446 7418                    je 0043B460
:0043B448 33D2                    xor edx, edx
:0043B44A 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043B450 83E204                  and edx, 00000004
:0043B453 85D2                    test edx, edx
:0043B455 7509                    jne 0043B460
:0043B457 C745E000000000          mov [ebp-20], 00000000
:0043B45E EB07                    jmp 0043B467

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B446(C), :0043B455(C)
|
:0043B460 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B45E(U)
|
:0043B467 8B45E0                  mov eax, dword ptr [ebp-20]
:0043B46A 8945F8                  mov dword ptr [ebp-08], eax
:0043B46D 68FF000000              push 000000FF
:0043B472 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043B475 51                      push ecx
:0043B476 8B550C                  mov edx, dword ptr [ebp+0C]
:0043B479 52                      push edx
:0043B47A 8B4508                  mov eax, dword ptr [ebp+08]
:0043B47D 50                      push eax
:0043B47E E822BFFFFF              call 004373A5
:0043B483 83C410                  add esp, 00000010
:0043B486 85C0                    test eax, eax
:0043B488 7505                    jne 0043B48F
:0043B48A E97F010000              jmp 0043B60E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B488(C)
|
:0043B48F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043B492 81E1FF000000            and ecx, 000000FF
:0043B498 85C9                    test ecx, ecx
:0043B49A 740C                    je 0043B4A8
:0043B49C 8A55EC                  mov dl, byte ptr [ebp-14]
:0043B49F 52                      push edx
:0043B4A0 E86D010000              call 0043B612
:0043B4A5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B49A(C)
|
:0043B4A8 6A00                    push 00000000
:0043B4AA 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B4AD 25FF000000              and eax, 000000FF
:0043B4B2 0C80                    or al, 80
:0043B4B4 50                      push eax
:0043B4B5 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043B4B8 51                      push ecx
:0043B4B9 B958494B00              mov ecx, 004B4958
:0043B4BE E8EB280100              call 0044DDAE
:0043B4C3 8845FC                  mov byte ptr [ebp-04], al
:0043B4C6 8B55FC                  mov edx, dword ptr [ebp-04]
:0043B4C9 81E2FF000000            and edx, 000000FF
:0043B4CF 81FAFF000000            cmp edx, 000000FF
:0043B4D5 0F8433010000            je 0043B60E
:0043B4DB 8A45FC                  mov al, byte ptr [ebp-04]
:0043B4DE 50                      push eax
:0043B4DF 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043B4E2 51                      push ecx
:0043B4E3 E80EF0FFFF              call 0043A4F6
:0043B4E8 83C408                  add esp, 00000008
:0043B4EB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043B4EE 81E1FF000000            and ecx, 000000FF
:0043B4F4 6BC924                  imul ecx, 00000024
:0043B4F7 81C1B83B4B00            add ecx, 004B3BB8
:0043B4FD E83E67FFFF              call 00431C40
:0043B502 668B10                  mov dx, word ptr [eax]
:0043B505 668955E8                mov word ptr [ebp-18], dx
:0043B509 837DF800                cmp dword ptr [ebp-08], 00000000
:0043B50D 7421                    je 0043B530
:0043B50F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B512 6BC931                  imul ecx, 00000031
:0043B515 81C1001D4B00            add ecx, 004B1D00
:0043B51B E8D0A1FCFF              call 004056F0
:0043B520 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043B521 6864E44700              push 0047E464
:0043B526 6A00                    push 00000000
:0043B528 E8065FFFFF              call 00431433
:0043B52D 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B50D(C)
|
:0043B530 6A00                    push 00000000
:0043B532 8A4508                  mov al, byte ptr [ebp+08]
:0043B535 50                      push eax
:0043B536 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043B539 81E1FF000000            and ecx, 000000FF
:0043B53F C1E104                  shl ecx, 04
:0043B542 8B55F0                  mov edx, dword ptr [ebp-10]
:0043B545 81E2FF000000            and edx, 000000FF
:0043B54B 0BCA                    or ecx, edx
:0043B54D 51                      push ecx
:0043B54E 8A4510                  mov al, byte ptr [ebp+10]
:0043B551 50                      push eax
:0043B552 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043B555 51                      push ecx
:0043B556 8A550C                  mov dl, byte ptr [ebp+0C]
:0043B559 52                      push edx
:0043B55A B9E0484B00              mov ecx, 004B48E0
:0043B55F E82A8C0000              call 0044418E
:0043B564 8B45EC                  mov eax, dword ptr [ebp-14]
:0043B567 25FF000000              and eax, 000000FF
:0043B56C 85C0                    test eax, eax
:0043B56E 0F8490000000            je 0043B604
:0043B574 68FF000000              push 000000FF
:0043B579 6A11                    push 00000011
:0043B57B 6868484B00              push 004B4868
:0043B580 E85BD00300              call 004785E0
:0043B585 83C40C                  add esp, 0000000C
:0043B588 68FF000000              push 000000FF
:0043B58D 68FF000000              push 000000FF
:0043B592 6A00                    push 00000000
:0043B594 6868484B00              push 004B4868
:0043B599 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043B59C 51                      push ecx
:0043B59D 8A55FC                  mov dl, byte ptr [ebp-04]
:0043B5A0 52                      push edx
:0043B5A1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B5A4 6BC924                  imul ecx, 00000024
:0043B5A7 81C1B83B4B00            add ecx, 004B3BB8
:0043B5AD E8B1AE0100              call 00456463
:0043B5B2 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B602(U)
|
:0043B5B5 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043B5B8 33C9                    xor ecx, ecx
:0043B5BA 8A08                    mov cl, byte ptr [eax]
:0043B5BC 81F9FF000000            cmp ecx, 000000FF
:0043B5C2 7440                    je 0043B604
:0043B5C4 6A01                    push 00000001
:0043B5C6 8A5508                  mov dl, byte ptr [ebp+08]
:0043B5C9 52                      push edx
:0043B5CA 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043B5CD 25FF000000              and eax, 000000FF
:0043B5D2 C1E004                  shl eax, 04
:0043B5D5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043B5D8 81E1FF000000            and ecx, 000000FF
:0043B5DE 0BC1                    or eax, ecx
:0043B5E0 50                      push eax
:0043B5E1 8A5510                  mov dl, byte ptr [ebp+10]
:0043B5E4 52                      push edx
:0043B5E5 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043B5E8 8A08                    mov cl, byte ptr [eax]
:0043B5EA 51                      push ecx
:0043B5EB 8A550C                  mov dl, byte ptr [ebp+0C]
:0043B5EE 52                      push edx
:0043B5EF B9E0484B00              mov ecx, 004B48E0
:0043B5F4 E8958B0000              call 0044418E
:0043B5F9 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043B5FC 83C001                  add eax, 00000001
:0043B5FF 8945E4                  mov dword ptr [ebp-1C], eax
:0043B602 EBB1                    jmp 0043B5B5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B56E(C), :0043B5C2(C)
|
:0043B604 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B48A(U), :0043B4D5(C)
|
:0043B60E 8BE5                    mov esp, ebp
:0043B610 5D                      pop ebp
:0043B611 C3                      ret



* Referenced by a CALL at Addresses:
|:0043B4A0   , :0043B744   , :0043BA4E   , :0043BE88   , :0043C075   
|:0043C843   , :0043C84F   , :0043D2EC   , :0043D534   , :0043D6E1   
|:0043D99D   , :0043DC71   , :0043E3A4   , :0043E9B5   , :0043EDFC   
|:00440489   
|
:0043B612 55                      push ebp
:0043B613 8BEC                    mov ebp, esp
:0043B615 51                      push ecx
:0043B616 8B4508                  mov eax, dword ptr [ebp+08]
:0043B619 25FF000000              and eax, 000000FF
:0043B61E 8945FC                  mov dword ptr [ebp-04], eax
:0043B621 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043B624 83E901                  sub ecx, 00000001
:0043B627 894DFC                  mov dword ptr [ebp-04], ecx
:0043B62A 837DFC06                cmp dword ptr [ebp-04], 00000006
:0043B62E 7734                    ja 0043B664
:0043B630 8B55FC                  mov edx, dword ptr [ebp-04]
:0043B633 FF249574B64300          jmp dword ptr [4*edx+0043B674]
:0043B63A 6A01                    push 00000001
:0043B63C B958494B00              mov ecx, 004B4958
:0043B641 E810320100              call 0044E856
:0043B646 EB28                    jmp 0043B670

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043B648 6A02                    push 00000002
:0043B64A B958494B00              mov ecx, 004B4958
:0043B64F E802320100              call 0044E856
:0043B654 EB1A                    jmp 0043B670

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043B656 6A03                    push 00000003
:0043B658 B958494B00              mov ecx, 004B4958
:0043B65D E8F4310100              call 0044E856
:0043B662 EB0C                    jmp 0043B670

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B62E(C)
|
:0043B664 6A00                    push 00000000
:0043B666 B958494B00              mov ecx, 004B4958
:0043B66B E8E6310100              call 0044E856

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B646(U), :0043B654(U), :0043B662(U)
|
:0043B670 8BE5                    mov esp, ebp
:0043B672 5D                      pop ebp
:0043B673 C3                      ret



:0043B674 3AB64300                DWORD 0043B63A
:0043B678 48B64300                DWORD 0043B648
:0043B67C 3AB64300                DWORD 0043B63A
:0043B680 48B64300                DWORD 0043B648
:0043B684 56B64300                DWORD 0043B656
:0043B688 56B64300                DWORD 0043B656
:0043B68C 56B64300                DWORD 0043B656



* Referenced by a CALL at Address:
|:0043AE21   
|
:0043B690 55                      push ebp
:0043B691 8BEC                    mov ebp, esp
:0043B693 83EC24                  sub esp, 00000024
:0043B696 C645FCFF                mov [ebp-04], FF
:0043B69A 8B4508                  mov eax, dword ptr [ebp+08]
:0043B69D 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043B69F B906000000              mov ecx, 00000006
:0043B6A4 F7F1                    div ecx
:0043B6A6 8845F4                  mov byte ptr [ebp-0C], al
:0043B6A9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B6AC 6BC931                  imul ecx, 00000031
:0043B6AF 81C1001D4B00            add ecx, 004B1D00
:0043B6B5 E8C6A0FCFF              call 00405780
:0043B6BA 8845EC                  mov byte ptr [ebp-14], al
:0043B6BD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B6C0 6BC931                  imul ecx, 00000031
:0043B6C3 81C1001D4B00            add ecx, 004B1D00
:0043B6C9 E892A0FCFF              call 00405760
:0043B6CE 8845F0                  mov byte ptr [ebp-10], al
:0043B6D1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B6D4 6BC924                  imul ecx, 00000024
:0043B6D7 81C1B83B4B00            add ecx, 004B3BB8
:0043B6DD E89EA0FCFF              call 00405780
:0043B6E2 25FF000000              and eax, 000000FF
:0043B6E7 83F807                  cmp eax, 00000007
:0043B6EA 7418                    je 0043B704
:0043B6EC 33D2                    xor edx, edx
:0043B6EE 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043B6F4 83E204                  and edx, 00000004
:0043B6F7 85D2                    test edx, edx
:0043B6F9 7509                    jne 0043B704
:0043B6FB C745DC00000000          mov [ebp-24], 00000000
:0043B702 EB07                    jmp 0043B70B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B6EA(C), :0043B6F9(C)
|
:0043B704 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B702(U)
|
:0043B70B 8B45DC                  mov eax, dword ptr [ebp-24]
:0043B70E 8945F8                  mov dword ptr [ebp-08], eax
:0043B711 68FF000000              push 000000FF
:0043B716 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043B719 51                      push ecx
:0043B71A 8B550C                  mov edx, dword ptr [ebp+0C]
:0043B71D 52                      push edx
:0043B71E 8B4508                  mov eax, dword ptr [ebp+08]
:0043B721 50                      push eax
:0043B722 E87EBCFFFF              call 004373A5
:0043B727 83C410                  add esp, 00000010
:0043B72A 85C0                    test eax, eax
:0043B72C 7505                    jne 0043B733
:0043B72E E963020000              jmp 0043B996

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B72C(C), :0043B7C0(U)
|
:0043B733 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043B736 81E1FF000000            and ecx, 000000FF
:0043B73C 85C9                    test ecx, ecx
:0043B73E 740C                    je 0043B74C
:0043B740 8A55EC                  mov dl, byte ptr [ebp-14]
:0043B743 52                      push edx
:0043B744 E8C9FEFFFF              call 0043B612
:0043B749 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B73E(C)
|
:0043B74C 6A00                    push 00000000
:0043B74E 8B45F0                  mov eax, dword ptr [ebp-10]
:0043B751 25FF000000              and eax, 000000FF
:0043B756 0C80                    or al, 80
:0043B758 50                      push eax
:0043B759 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043B75C 51                      push ecx
:0043B75D B958494B00              mov ecx, 004B4958
:0043B762 E847260100              call 0044DDAE
:0043B767 8845FC                  mov byte ptr [ebp-04], al
:0043B76A 8B55FC                  mov edx, dword ptr [ebp-04]
:0043B76D 81E2FF000000            and edx, 000000FF
:0043B773 81FAFF000000            cmp edx, 000000FF
:0043B779 0F8417020000            je 0043B996
:0043B77F 837D0805                cmp dword ptr [ebp+08], 00000005
:0043B783 7540                    jne 0043B7C5
:0043B785 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043B788 81E1FF000000            and ecx, 000000FF
:0043B78E 6BC924                  imul ecx, 00000024
:0043B791 81C1B83B4B00            add ecx, 004B3BB8
:0043B797 E854B3FFFF              call 00436AF0
:0043B79C 25FF000000              and eax, 000000FF
:0043B7A1 85C0                    test eax, eax
:0043B7A3 7520                    jne 0043B7C5

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043B7A5 6A07                    push 00000007
:0043B7A7 B9F8544B00              mov ecx, 004B54F8
:0043B7AC E869DD0200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۤDӰ"
                                  |
:0043B7B1 6868E44700              push 0047E468
:0043B7B6 6A00                    push 00000000
:0043B7B8 E8765CFFFF              call 00431433
:0043B7BD 83C408                  add esp, 00000008
:0043B7C0 E96EFFFFFF              jmp 0043B733

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B783(C), :0043B7A3(C)
|
:0043B7C5 8A45FC                  mov al, byte ptr [ebp-04]
:0043B7C8 50                      push eax
:0043B7C9 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043B7CC 51                      push ecx
:0043B7CD E824EDFFFF              call 0043A4F6
:0043B7D2 83C408                  add esp, 00000008
:0043B7D5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043B7D8 81E1FF000000            and ecx, 000000FF
:0043B7DE 6BC924                  imul ecx, 00000024
:0043B7E1 81C1B83B4B00            add ecx, 004B3BB8
:0043B7E7 E85464FFFF              call 00431C40
:0043B7EC 668B10                  mov dx, word ptr [eax]
:0043B7EF 668955E8                mov word ptr [ebp-18], dx
:0043B7F3 837DF800                cmp dword ptr [ebp-08], 00000000
:0043B7F7 7421                    je 0043B81A
:0043B7F9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B7FC 6BC931                  imul ecx, 00000031
:0043B7FF 81C1001D4B00            add ecx, 004B1D00
:0043B805 E8E69EFCFF              call 004056F0
:0043B80A 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043B80B 6880E44700              push 0047E480
:0043B810 6A00                    push 00000000
:0043B812 E81C5CFFFF              call 00431433
:0043B817 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B7F7(C)
|
:0043B81A 6A00                    push 00000000
:0043B81C 8A4508                  mov al, byte ptr [ebp+08]
:0043B81F 50                      push eax
:0043B820 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043B823 81E1FF000000            and ecx, 000000FF
:0043B829 C1E104                  shl ecx, 04
:0043B82C 8B55F0                  mov edx, dword ptr [ebp-10]
:0043B82F 81E2FF000000            and edx, 000000FF
:0043B835 0BCA                    or ecx, edx
:0043B837 51                      push ecx
:0043B838 8A4510                  mov al, byte ptr [ebp+10]
:0043B83B 50                      push eax
:0043B83C 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043B83F 51                      push ecx
:0043B840 8A550C                  mov dl, byte ptr [ebp+0C]
:0043B843 52                      push edx
:0043B844 B9E0484B00              mov ecx, 004B48E0
:0043B849 E840890000              call 0044418E
:0043B84E 8B45EC                  mov eax, dword ptr [ebp-14]
:0043B851 25FF000000              and eax, 000000FF
:0043B856 85C0                    test eax, eax
:0043B858 0F8490000000            je 0043B8EE
:0043B85E 68FF000000              push 000000FF
:0043B863 6A11                    push 00000011
:0043B865 6868484B00              push 004B4868
:0043B86A E871CD0300              call 004785E0
:0043B86F 83C40C                  add esp, 0000000C
:0043B872 68FF000000              push 000000FF
:0043B877 68FF000000              push 000000FF
:0043B87C 6A00                    push 00000000
:0043B87E 6868484B00              push 004B4868
:0043B883 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043B886 51                      push ecx
:0043B887 8A55FC                  mov dl, byte ptr [ebp-04]
:0043B88A 52                      push edx
:0043B88B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B88E 6BC924                  imul ecx, 00000024
:0043B891 81C1B83B4B00            add ecx, 004B3BB8
:0043B897 E8C7AB0100              call 00456463
:0043B89C 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B8EC(U)
|
:0043B89F 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043B8A2 33C9                    xor ecx, ecx
:0043B8A4 8A08                    mov cl, byte ptr [eax]
:0043B8A6 81F9FF000000            cmp ecx, 000000FF
:0043B8AC 7440                    je 0043B8EE
:0043B8AE 6A01                    push 00000001
:0043B8B0 8A5508                  mov dl, byte ptr [ebp+08]
:0043B8B3 52                      push edx
:0043B8B4 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043B8B7 25FF000000              and eax, 000000FF
:0043B8BC C1E004                  shl eax, 04
:0043B8BF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043B8C2 81E1FF000000            and ecx, 000000FF
:0043B8C8 0BC1                    or eax, ecx
:0043B8CA 50                      push eax
:0043B8CB 8A5510                  mov dl, byte ptr [ebp+10]
:0043B8CE 52                      push edx
:0043B8CF 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043B8D2 8A08                    mov cl, byte ptr [eax]
:0043B8D4 51                      push ecx
:0043B8D5 8A550C                  mov dl, byte ptr [ebp+0C]
:0043B8D8 52                      push edx
:0043B8D9 B9E0484B00              mov ecx, 004B48E0
:0043B8DE E8AB880000              call 0044418E
:0043B8E3 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043B8E6 83C001                  add eax, 00000001
:0043B8E9 8945E4                  mov dword ptr [ebp-1C], eax
:0043B8EC EBB1                    jmp 0043B89F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B858(C), :0043B8AC(C)
|
:0043B8EE 837D0804                cmp dword ptr [ebp+08], 00000004
:0043B8F2 755F                    jne 0043B953
:0043B8F4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B8F7 6BC924                  imul ecx, 00000024
:0043B8FA 81C1B83B4B00            add ecx, 004B3BB8
:0043B900 E8DBB0FFFF              call 004369E0
:0043B905 8BC8                    mov ecx, eax
:0043B907 6BC950                  imul ecx, 00000050
:0043B90A 81C1787F4900            add ecx, 00497F78
:0043B910 E8D564FCFF              call 00401DEA
:0043B915 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0043B917 B90A000000              mov ecx, 0000000A
:0043B91C F7F1                    div ecx
:0043B91E 8945E0                  mov dword ptr [ebp-20], eax
:0043B921 8B55E0                  mov edx, dword ptr [ebp-20]
:0043B924 52                      push edx
:0043B925 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B928 6BC924                  imul ecx, 00000024
:0043B92B 81C1B83B4B00            add ecx, 004B3BB8
:0043B931 E8AA79FCFF              call 004032E0
:0043B936 50                      push eax
:0043B937 E8E4C90300              call 00478320
:0043B93C 83C408                  add esp, 00000008
:0043B93F 50                      push eax
:0043B940 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B943 6BC924                  imul ecx, 00000024
:0043B946 81C1B83B4B00            add ecx, 004B3BB8
:0043B94C E8C478FFFF              call 00433215
:0043B951 EB13                    jmp 0043B966

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B8F2(C)
|
:0043B953 6A00                    push 00000000
:0043B955 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B958 6BC924                  imul ecx, 00000024
:0043B95B 81C1B83B4B00            add ecx, 004B3BB8
:0043B961 E8AF78FFFF              call 00433215

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B951(U)
|
:0043B966 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B969 6BC924                  imul ecx, 00000024
:0043B96C 81C1B83B4B00            add ecx, 004B3BB8
:0043B972 E80AB0FFFF              call 00436981
:0043B977 85C0                    test eax, eax
:0043B979 7411                    je 0043B98C
:0043B97B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B97E 6BC924                  imul ecx, 00000024
:0043B981 81C1B83B4B00            add ecx, 004B3BB8
:0043B987 E8BC8EFFFF              call 00434848

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043B979(C)
|
:0043B98C C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B72E(U), :0043B779(C)
|
:0043B996 8BE5                    mov esp, ebp
:0043B998 5D                      pop ebp
:0043B999 C3                      ret



* Referenced by a CALL at Address:
|:0043AE43   
|
:0043B99A 55                      push ebp
:0043B99B 8BEC                    mov ebp, esp
:0043B99D 83EC20                  sub esp, 00000020
:0043B9A0 C645FCFF                mov [ebp-04], FF
:0043B9A4 8B4508                  mov eax, dword ptr [ebp+08]
:0043B9A7 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043B9A9 B906000000              mov ecx, 00000006
:0043B9AE F7F1                    div ecx
:0043B9B0 8845F4                  mov byte ptr [ebp-0C], al
:0043B9B3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B9B6 6BC931                  imul ecx, 00000031
:0043B9B9 81C1001D4B00            add ecx, 004B1D00
:0043B9BF E8BC9DFCFF              call 00405780
:0043B9C4 8845EC                  mov byte ptr [ebp-14], al
:0043B9C7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043B9CA 6BC931                  imul ecx, 00000031
:0043B9CD 81C1001D4B00            add ecx, 004B1D00
:0043B9D3 E8889DFCFF              call 00405760
:0043B9D8 8845F0                  mov byte ptr [ebp-10], al
:0043B9DB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043B9DE 6BC924                  imul ecx, 00000024
:0043B9E1 81C1B83B4B00            add ecx, 004B3BB8
:0043B9E7 E8949DFCFF              call 00405780
:0043B9EC 25FF000000              and eax, 000000FF
:0043B9F1 83F807                  cmp eax, 00000007
:0043B9F4 7418                    je 0043BA0E
:0043B9F6 33D2                    xor edx, edx
:0043B9F8 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043B9FE 83E204                  and edx, 00000004
:0043BA01 85D2                    test edx, edx
:0043BA03 7509                    jne 0043BA0E
:0043BA05 C745E000000000          mov [ebp-20], 00000000
:0043BA0C EB07                    jmp 0043BA15

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043B9F4(C), :0043BA03(C)
|
:0043BA0E C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BA0C(U)
|
:0043BA15 8B45E0                  mov eax, dword ptr [ebp-20]
:0043BA18 8945F8                  mov dword ptr [ebp-08], eax
:0043BA1B 68FF000000              push 000000FF
:0043BA20 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BA23 51                      push ecx
:0043BA24 8B550C                  mov edx, dword ptr [ebp+0C]
:0043BA27 52                      push edx
:0043BA28 8B4508                  mov eax, dword ptr [ebp+08]
:0043BA2B 50                      push eax
:0043BA2C E874B9FFFF              call 004373A5
:0043BA31 83C410                  add esp, 00000010
:0043BA34 85C0                    test eax, eax
:0043BA36 7505                    jne 0043BA3D
:0043BA38 E97F010000              jmp 0043BBBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BA36(C)
|
:0043BA3D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043BA40 81E1FF000000            and ecx, 000000FF
:0043BA46 85C9                    test ecx, ecx
:0043BA48 740C                    je 0043BA56
:0043BA4A 8A55EC                  mov dl, byte ptr [ebp-14]
:0043BA4D 52                      push edx
:0043BA4E E8BFFBFFFF              call 0043B612
:0043BA53 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BA48(C)
|
:0043BA56 6A00                    push 00000000
:0043BA58 8B45F0                  mov eax, dword ptr [ebp-10]
:0043BA5B 25FF000000              and eax, 000000FF
:0043BA60 0C80                    or al, 80
:0043BA62 50                      push eax
:0043BA63 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043BA66 51                      push ecx
:0043BA67 B958494B00              mov ecx, 004B4958
:0043BA6C E83D230100              call 0044DDAE
:0043BA71 8845FC                  mov byte ptr [ebp-04], al
:0043BA74 8B55FC                  mov edx, dword ptr [ebp-04]
:0043BA77 81E2FF000000            and edx, 000000FF
:0043BA7D 81FAFF000000            cmp edx, 000000FF
:0043BA83 0F8433010000            je 0043BBBC
:0043BA89 8A45FC                  mov al, byte ptr [ebp-04]
:0043BA8C 50                      push eax
:0043BA8D 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043BA90 51                      push ecx
:0043BA91 E860EAFFFF              call 0043A4F6
:0043BA96 83C408                  add esp, 00000008
:0043BA99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043BA9C 81E1FF000000            and ecx, 000000FF
:0043BAA2 6BC924                  imul ecx, 00000024
:0043BAA5 81C1B83B4B00            add ecx, 004B3BB8
:0043BAAB E89061FFFF              call 00431C40
:0043BAB0 668B10                  mov dx, word ptr [eax]
:0043BAB3 668955E8                mov word ptr [ebp-18], dx
:0043BAB7 837DF800                cmp dword ptr [ebp-08], 00000000
:0043BABB 7421                    je 0043BADE
:0043BABD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043BAC0 6BC931                  imul ecx, 00000031
:0043BAC3 81C1001D4B00            add ecx, 004B1D00
:0043BAC9 E8229CFCFF              call 004056F0
:0043BACE 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043BACF 6884E44700              push 0047E484
:0043BAD4 6A00                    push 00000000
:0043BAD6 E85859FFFF              call 00431433
:0043BADB 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BABB(C)
|
:0043BADE 6A00                    push 00000000
:0043BAE0 8A4508                  mov al, byte ptr [ebp+08]
:0043BAE3 50                      push eax
:0043BAE4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043BAE7 81E1FF000000            and ecx, 000000FF
:0043BAED C1E104                  shl ecx, 04
:0043BAF0 8B55F0                  mov edx, dword ptr [ebp-10]
:0043BAF3 81E2FF000000            and edx, 000000FF
:0043BAF9 0BCA                    or ecx, edx
:0043BAFB 51                      push ecx
:0043BAFC 8A4510                  mov al, byte ptr [ebp+10]
:0043BAFF 50                      push eax
:0043BB00 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043BB03 51                      push ecx
:0043BB04 8A550C                  mov dl, byte ptr [ebp+0C]
:0043BB07 52                      push edx
:0043BB08 B9E0484B00              mov ecx, 004B48E0
:0043BB0D E87C860000              call 0044418E
:0043BB12 8B45EC                  mov eax, dword ptr [ebp-14]
:0043BB15 25FF000000              and eax, 000000FF
:0043BB1A 85C0                    test eax, eax
:0043BB1C 0F8490000000            je 0043BBB2
:0043BB22 68FF000000              push 000000FF
:0043BB27 6A11                    push 00000011
:0043BB29 6868484B00              push 004B4868
:0043BB2E E8ADCA0300              call 004785E0
:0043BB33 83C40C                  add esp, 0000000C
:0043BB36 68FF000000              push 000000FF
:0043BB3B 68FF000000              push 000000FF
:0043BB40 6A00                    push 00000000
:0043BB42 6868484B00              push 004B4868
:0043BB47 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043BB4A 51                      push ecx
:0043BB4B 8A55FC                  mov dl, byte ptr [ebp-04]
:0043BB4E 52                      push edx
:0043BB4F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043BB52 6BC924                  imul ecx, 00000024
:0043BB55 81C1B83B4B00            add ecx, 004B3BB8
:0043BB5B E803A90100              call 00456463
:0043BB60 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BBB0(U)
|
:0043BB63 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043BB66 33C9                    xor ecx, ecx
:0043BB68 8A08                    mov cl, byte ptr [eax]
:0043BB6A 81F9FF000000            cmp ecx, 000000FF
:0043BB70 7440                    je 0043BBB2
:0043BB72 6A01                    push 00000001
:0043BB74 8A5508                  mov dl, byte ptr [ebp+08]
:0043BB77 52                      push edx
:0043BB78 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043BB7B 25FF000000              and eax, 000000FF
:0043BB80 C1E004                  shl eax, 04
:0043BB83 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043BB86 81E1FF000000            and ecx, 000000FF
:0043BB8C 0BC1                    or eax, ecx
:0043BB8E 50                      push eax
:0043BB8F 8A5510                  mov dl, byte ptr [ebp+10]
:0043BB92 52                      push edx
:0043BB93 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043BB96 8A08                    mov cl, byte ptr [eax]
:0043BB98 51                      push ecx
:0043BB99 8A550C                  mov dl, byte ptr [ebp+0C]
:0043BB9C 52                      push edx
:0043BB9D B9E0484B00              mov ecx, 004B48E0
:0043BBA2 E8E7850000              call 0044418E
:0043BBA7 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043BBAA 83C001                  add eax, 00000001
:0043BBAD 8945E4                  mov dword ptr [ebp-1C], eax
:0043BBB0 EBB1                    jmp 0043BB63

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BB1C(C), :0043BB70(C)
|
:0043BBB2 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BA38(U), :0043BA83(C)
|
:0043BBBC 8BE5                    mov esp, ebp
:0043BBBE 5D                      pop ebp
:0043BBBF C3                      ret



* Referenced by a CALL at Address:
|:0043AE87   
|
:0043BBC0 55                      push ebp
:0043BBC1 8BEC                    mov ebp, esp
:0043BBC3 83EC20                  sub esp, 00000020
:0043BBC6 C645FCFF                mov [ebp-04], FF
:0043BBCA 8B4508                  mov eax, dword ptr [ebp+08]
:0043BBCD 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043BBCF B906000000              mov ecx, 00000006
:0043BBD4 F7F1                    div ecx
:0043BBD6 8845F4                  mov byte ptr [ebp-0C], al
:0043BBD9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043BBDC 6BC931                  imul ecx, 00000031
:0043BBDF 81C1001D4B00            add ecx, 004B1D00
:0043BBE5 E8969BFCFF              call 00405780
:0043BBEA 8845EC                  mov byte ptr [ebp-14], al
:0043BBED 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043BBF0 6BC931                  imul ecx, 00000031
:0043BBF3 81C1001D4B00            add ecx, 004B1D00
:0043BBF9 E8629BFCFF              call 00405760
:0043BBFE 8845F0                  mov byte ptr [ebp-10], al
:0043BC01 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043BC04 6BC924                  imul ecx, 00000024
:0043BC07 81C1B83B4B00            add ecx, 004B3BB8
:0043BC0D E86E9BFCFF              call 00405780
:0043BC12 25FF000000              and eax, 000000FF
:0043BC17 83F807                  cmp eax, 00000007
:0043BC1A 7418                    je 0043BC34
:0043BC1C 33D2                    xor edx, edx
:0043BC1E 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043BC24 83E204                  and edx, 00000004
:0043BC27 85D2                    test edx, edx
:0043BC29 7509                    jne 0043BC34
:0043BC2B C745E000000000          mov [ebp-20], 00000000
:0043BC32 EB07                    jmp 0043BC3B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BC1A(C), :0043BC29(C)
|
:0043BC34 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BC32(U)
|
:0043BC3B 8B45E0                  mov eax, dword ptr [ebp-20]
:0043BC3E 8945F8                  mov dword ptr [ebp-08], eax
:0043BC41 68FF000000              push 000000FF
:0043BC46 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BC49 51                      push ecx
:0043BC4A 8B550C                  mov edx, dword ptr [ebp+0C]
:0043BC4D 52                      push edx
:0043BC4E 8B4508                  mov eax, dword ptr [ebp+08]
:0043BC51 50                      push eax
:0043BC52 E84EB7FFFF              call 004373A5
:0043BC57 83C410                  add esp, 00000010
:0043BC5A 85C0                    test eax, eax
:0043BC5C 7505                    jne 0043BC63
:0043BC5E E973010000              jmp 0043BDD6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BC5C(C)
|
:0043BC63 6A00                    push 00000000
:0043BC65 B958494B00              mov ecx, 004B4958
:0043BC6A E8E72B0100              call 0044E856
:0043BC6F 6A00                    push 00000000
:0043BC71 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043BC74 81E1FF000000            and ecx, 000000FF
:0043BC7A 80C980                  or cl, 80
:0043BC7D 51                      push ecx
:0043BC7E 8A550C                  mov dl, byte ptr [ebp+0C]
:0043BC81 52                      push edx
:0043BC82 B958494B00              mov ecx, 004B4958
:0043BC87 E822210100              call 0044DDAE
:0043BC8C 8845FC                  mov byte ptr [ebp-04], al
:0043BC8F 8B45FC                  mov eax, dword ptr [ebp-04]
:0043BC92 25FF000000              and eax, 000000FF
:0043BC97 3DFF000000              cmp eax, 000000FF
:0043BC9C 0F8434010000            je 0043BDD6
:0043BCA2 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043BCA5 51                      push ecx
:0043BCA6 8A550C                  mov dl, byte ptr [ebp+0C]
:0043BCA9 52                      push edx
:0043BCAA E847E8FFFF              call 0043A4F6
:0043BCAF 83C408                  add esp, 00000008
:0043BCB2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043BCB5 81E1FF000000            and ecx, 000000FF
:0043BCBB 6BC924                  imul ecx, 00000024
:0043BCBE 81C1B83B4B00            add ecx, 004B3BB8
:0043BCC4 E8775FFFFF              call 00431C40
:0043BCC9 668B00                  mov ax, word ptr [eax]
:0043BCCC 668945E8                mov word ptr [ebp-18], ax
:0043BCD0 837DF800                cmp dword ptr [ebp-08], 00000000
:0043BCD4 7421                    je 0043BCF7
:0043BCD6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043BCD9 6BC931                  imul ecx, 00000031
:0043BCDC 81C1001D4B00            add ecx, 004B1D00
:0043BCE2 E8099AFCFF              call 004056F0
:0043BCE7 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043BCE8 6888E44700              push 0047E488
:0043BCED 6A00                    push 00000000
:0043BCEF E83F57FFFF              call 00431433
:0043BCF4 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BCD4(C)
|
:0043BCF7 6A00                    push 00000000
:0043BCF9 8A4D08                  mov cl, byte ptr [ebp+08]
:0043BCFC 51                      push ecx
:0043BCFD 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043BD00 81E2FF000000            and edx, 000000FF
:0043BD06 C1E204                  shl edx, 04
:0043BD09 8B45F0                  mov eax, dword ptr [ebp-10]
:0043BD0C 25FF000000              and eax, 000000FF
:0043BD11 0BD0                    or edx, eax
:0043BD13 52                      push edx
:0043BD14 8A4D10                  mov cl, byte ptr [ebp+10]
:0043BD17 51                      push ecx
:0043BD18 8A55FC                  mov dl, byte ptr [ebp-04]
:0043BD1B 52                      push edx
:0043BD1C 8A450C                  mov al, byte ptr [ebp+0C]
:0043BD1F 50                      push eax
:0043BD20 B9E0484B00              mov ecx, 004B48E0
:0043BD25 E864840000              call 0044418E
:0043BD2A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043BD2D 81E1FF000000            and ecx, 000000FF
:0043BD33 85C9                    test ecx, ecx
:0043BD35 0F8491000000            je 0043BDCC
:0043BD3B 68FF000000              push 000000FF
:0043BD40 6A11                    push 00000011
:0043BD42 6868484B00              push 004B4868
:0043BD47 E894C80300              call 004785E0
:0043BD4C 83C40C                  add esp, 0000000C
:0043BD4F 68FF000000              push 000000FF
:0043BD54 68FF000000              push 000000FF
:0043BD59 6A00                    push 00000000
:0043BD5B 6868484B00              push 004B4868
:0043BD60 8A55EC                  mov dl, byte ptr [ebp-14]
:0043BD63 52                      push edx
:0043BD64 8A45FC                  mov al, byte ptr [ebp-04]
:0043BD67 50                      push eax
:0043BD68 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043BD6B 6BC924                  imul ecx, 00000024
:0043BD6E 81C1B83B4B00            add ecx, 004B3BB8
:0043BD74 E8EAA60100              call 00456463
:0043BD79 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BDCA(U)
|
:0043BD7C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BD7F 33D2                    xor edx, edx
:0043BD81 8A11                    mov dl, byte ptr [ecx]
:0043BD83 81FAFF000000            cmp edx, 000000FF
:0043BD89 7441                    je 0043BDCC
:0043BD8B 6A01                    push 00000001
:0043BD8D 8A4508                  mov al, byte ptr [ebp+08]
:0043BD90 50                      push eax
:0043BD91 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043BD94 81E1FF000000            and ecx, 000000FF
:0043BD9A C1E104                  shl ecx, 04
:0043BD9D 8B55F0                  mov edx, dword ptr [ebp-10]
:0043BDA0 81E2FF000000            and edx, 000000FF
:0043BDA6 0BCA                    or ecx, edx
:0043BDA8 51                      push ecx
:0043BDA9 8A4510                  mov al, byte ptr [ebp+10]
:0043BDAC 50                      push eax
:0043BDAD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BDB0 8A11                    mov dl, byte ptr [ecx]
:0043BDB2 52                      push edx
:0043BDB3 8A450C                  mov al, byte ptr [ebp+0C]
:0043BDB6 50                      push eax
:0043BDB7 B9E0484B00              mov ecx, 004B48E0
:0043BDBC E8CD830000              call 0044418E
:0043BDC1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043BDC4 83C101                  add ecx, 00000001
:0043BDC7 894DE4                  mov dword ptr [ebp-1C], ecx
:0043BDCA EBB0                    jmp 0043BD7C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BD35(C), :0043BD89(C)
|
:0043BDCC C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BC5E(U), :0043BC9C(C)
|
:0043BDD6 8BE5                    mov esp, ebp
:0043BDD8 5D                      pop ebp
:0043BDD9 C3                      ret



* Referenced by a CALL at Address:
|:0043AEA9   
|
:0043BDDA 55                      push ebp
:0043BDDB 8BEC                    mov ebp, esp
:0043BDDD 83EC24                  sub esp, 00000024
:0043BDE0 C645F8FF                mov [ebp-08], FF
:0043BDE4 8B4508                  mov eax, dword ptr [ebp+08]
:0043BDE7 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043BDE9 B906000000              mov ecx, 00000006
:0043BDEE F7F1                    div ecx
:0043BDF0 8845F0                  mov byte ptr [ebp-10], al
:0043BDF3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043BDF6 6BC931                  imul ecx, 00000031
:0043BDF9 81C1001D4B00            add ecx, 004B1D00
:0043BDFF E87C99FCFF              call 00405780
:0043BE04 8845E4                  mov byte ptr [ebp-1C], al
:0043BE07 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043BE0A 6BC931                  imul ecx, 00000031
:0043BE0D 81C1001D4B00            add ecx, 004B1D00
:0043BE13 E84899FCFF              call 00405760
:0043BE18 8845E8                  mov byte ptr [ebp-18], al
:0043BE1B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043BE1E 6BC924                  imul ecx, 00000024
:0043BE21 81C1B83B4B00            add ecx, 004B3BB8
:0043BE27 E85499FCFF              call 00405780
:0043BE2C 25FF000000              and eax, 000000FF
:0043BE31 83F807                  cmp eax, 00000007
:0043BE34 7418                    je 0043BE4E
:0043BE36 33D2                    xor edx, edx
:0043BE38 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043BE3E 83E204                  and edx, 00000004
:0043BE41 85D2                    test edx, edx
:0043BE43 7509                    jne 0043BE4E
:0043BE45 C745DC00000000          mov [ebp-24], 00000000
:0043BE4C EB07                    jmp 0043BE55

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BE34(C), :0043BE43(C)
|
:0043BE4E C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BE4C(U)
|
:0043BE55 8B45DC                  mov eax, dword ptr [ebp-24]
:0043BE58 8945F4                  mov dword ptr [ebp-0C], eax
:0043BE5B C745EC00000000          mov [ebp-14], 00000000
:0043BE62 68FF000000              push 000000FF
:0043BE67 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043BE6A 51                      push ecx
:0043BE6B 8B550C                  mov edx, dword ptr [ebp+0C]
:0043BE6E 52                      push edx
:0043BE6F 8B4508                  mov eax, dword ptr [ebp+08]
:0043BE72 50                      push eax
:0043BE73 E82DB5FFFF              call 004373A5
:0043BE78 83C410                  add esp, 00000010
:0043BE7B 85C0                    test eax, eax
:0043BE7D 7505                    jne 0043BE84
:0043BE7F E946010000              jmp 0043BFCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BE7D(C)
|
:0043BE84 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0043BE87 51                      push ecx
:0043BE88 E885F7FFFF              call 0043B612
:0043BE8D 83C404                  add esp, 00000004
:0043BE90 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BFC5(U)
|
:0043BE97 6A00                    push 00000000
:0043BE99 8B55E8                  mov edx, dword ptr [ebp-18]
:0043BE9C 81E2FF000000            and edx, 000000FF
:0043BEA2 80CA80                  or dl, 80
:0043BEA5 52                      push edx
:0043BEA6 8A450C                  mov al, byte ptr [ebp+0C]
:0043BEA9 50                      push eax
:0043BEAA B958494B00              mov ecx, 004B4958
:0043BEAF E8FA1E0100              call 0044DDAE
:0043BEB4 8845F8                  mov byte ptr [ebp-08], al
:0043BEB7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BEBA 81E1FF000000            and ecx, 000000FF
:0043BEC0 81F9FF000000            cmp ecx, 000000FF
:0043BEC6 0F84BF000000            je 0043BF8B
:0043BECC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BECF 81E1FF000000            and ecx, 000000FF
:0043BED5 6BC924                  imul ecx, 00000024
:0043BED8 81C1B83B4B00            add ecx, 004B3BB8
:0043BEDE E8ED010200              call 0045C0D0
:0043BEE3 25FF000000              and eax, 000000FF
:0043BEE8 83F802                  cmp eax, 00000002
:0043BEEB 0F8598000000            jne 0043BF89
:0043BEF1 8A55F8                  mov dl, byte ptr [ebp-08]
:0043BEF4 52                      push edx
:0043BEF5 8A450C                  mov al, byte ptr [ebp+0C]
:0043BEF8 50                      push eax
:0043BEF9 E8F8E5FFFF              call 0043A4F6
:0043BEFE 83C408                  add esp, 00000008
:0043BF01 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043BF04 81E1FF000000            and ecx, 000000FF
:0043BF0A 6BC924                  imul ecx, 00000024
:0043BF0D 81C1B83B4B00            add ecx, 004B3BB8
:0043BF13 E8285DFFFF              call 00431C40
:0043BF18 668B08                  mov cx, word ptr [eax]
:0043BF1B 66894DE0                mov word ptr [ebp-20], cx
:0043BF1F 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043BF23 7427                    je 0043BF4C
:0043BF25 837DFC00                cmp dword ptr [ebp-04], 00000000
:0043BF29 7521                    jne 0043BF4C
:0043BF2B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043BF2E 6BC931                  imul ecx, 00000031
:0043BF31 81C1001D4B00            add ecx, 004B1D00
:0043BF37 E8B497FCFF              call 004056F0
:0043BF3C 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043BF3D 688CE44700              push 0047E48C
:0043BF42 6A00                    push 00000000
:0043BF44 E8EA54FFFF              call 00431433
:0043BF49 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BF23(C), :0043BF29(C)
|
:0043BF4C 6A00                    push 00000000
:0043BF4E 8A5508                  mov dl, byte ptr [ebp+08]
:0043BF51 52                      push edx
:0043BF52 8B45F0                  mov eax, dword ptr [ebp-10]
:0043BF55 25FF000000              and eax, 000000FF
:0043BF5A C1E004                  shl eax, 04
:0043BF5D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043BF60 81E1FF000000            and ecx, 000000FF
:0043BF66 0BC1                    or eax, ecx
:0043BF68 50                      push eax
:0043BF69 8A5510                  mov dl, byte ptr [ebp+10]
:0043BF6C 52                      push edx
:0043BF6D 8A45F8                  mov al, byte ptr [ebp-08]
:0043BF70 50                      push eax
:0043BF71 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043BF74 51                      push ecx
:0043BF75 B9E0484B00              mov ecx, 004B48E0
:0043BF7A E80F820000              call 0044418E
:0043BF7F C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BEEB(C)
|
:0043BF89 EB02                    jmp 0043BF8D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BEC6(C)
|
:0043BF8B EB3D                    jmp 0043BFCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BF89(U)
|
:0043BF8D 8B55FC                  mov edx, dword ptr [ebp-04]
:0043BF90 83C201                  add edx, 00000001
:0043BF93 8955FC                  mov dword ptr [ebp-04], edx
:0043BF96 837D080A                cmp dword ptr [ebp+08], 0000000A
:0043BF9A 7508                    jne 0043BFA4
:0043BF9C 837DFC01                cmp dword ptr [ebp-04], 00000001
:0043BFA0 7602                    jbe 0043BFA4
:0043BFA2 EB26                    jmp 0043BFCA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BF9A(C), :0043BFA0(C)
|
:0043BFA4 6A1E                    push 0000001E
:0043BFA6 E805C40300              call 004783B0
:0043BFAB 83C404                  add esp, 00000004
:0043BFAE 8945EC                  mov dword ptr [ebp-14], eax
:0043BFB1 837D080B                cmp dword ptr [ebp+08], 0000000B
:0043BFB5 750E                    jne 0043BFC5
:0043BFB7 837DFC05                cmp dword ptr [ebp-04], 00000005
:0043BFBB 7306                    jnb 0043BFC3
:0043BFBD 837DEC0A                cmp dword ptr [ebp-14], 0000000A
:0043BFC1 7202                    jb 0043BFC5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043BFBB(C)
|
:0043BFC3 EB05                    jmp 0043BFCA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BFB5(C), :0043BFC1(C)
|
:0043BFC5 E9CDFEFFFF              jmp 0043BE97

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043BE7F(U), :0043BF8B(U), :0043BFA2(U), :0043BFC3(U)
|
:0043BFCA 8BE5                    mov esp, ebp
:0043BFCC 5D                      pop ebp
:0043BFCD C3                      ret



* Referenced by a CALL at Address:
|:0043AECB   
|
:0043BFCE 55                      push ebp
:0043BFCF 8BEC                    mov ebp, esp
:0043BFD1 83EC20                  sub esp, 00000020
:0043BFD4 C645FCFF                mov [ebp-04], FF
:0043BFD8 8B4508                  mov eax, dword ptr [ebp+08]
:0043BFDB 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043BFDD B906000000              mov ecx, 00000006
:0043BFE2 F7F1                    div ecx
:0043BFE4 8845F4                  mov byte ptr [ebp-0C], al
:0043BFE7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043BFEA 6BC931                  imul ecx, 00000031
:0043BFED 81C1001D4B00            add ecx, 004B1D00
:0043BFF3 E88897FCFF              call 00405780
:0043BFF8 8845EC                  mov byte ptr [ebp-14], al
:0043BFFB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043BFFE 6BC931                  imul ecx, 00000031
:0043C001 81C1001D4B00            add ecx, 004B1D00
:0043C007 E85497FCFF              call 00405760
:0043C00C 8845F0                  mov byte ptr [ebp-10], al
:0043C00F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C012 6BC924                  imul ecx, 00000024
:0043C015 81C1B83B4B00            add ecx, 004B3BB8
:0043C01B E86097FCFF              call 00405780
:0043C020 25FF000000              and eax, 000000FF
:0043C025 83F807                  cmp eax, 00000007
:0043C028 7418                    je 0043C042
:0043C02A 33D2                    xor edx, edx
:0043C02C 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043C032 83E204                  and edx, 00000004
:0043C035 85D2                    test edx, edx
:0043C037 7509                    jne 0043C042
:0043C039 C745E000000000          mov [ebp-20], 00000000
:0043C040 EB07                    jmp 0043C049

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C028(C), :0043C037(C)
|
:0043C042 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C040(U)
|
:0043C049 8B45E0                  mov eax, dword ptr [ebp-20]
:0043C04C 8945F8                  mov dword ptr [ebp-08], eax
:0043C04F 68FF000000              push 000000FF
:0043C054 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C057 51                      push ecx
:0043C058 8B550C                  mov edx, dword ptr [ebp+0C]
:0043C05B 52                      push edx
:0043C05C 8B4508                  mov eax, dword ptr [ebp+08]
:0043C05F 50                      push eax
:0043C060 E840B3FFFF              call 004373A5
:0043C065 83C410                  add esp, 00000010
:0043C068 85C0                    test eax, eax
:0043C06A 7505                    jne 0043C071
:0043C06C E973010000              jmp 0043C1E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C06A(C)
|
:0043C071 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043C074 51                      push ecx
:0043C075 E898F5FFFF              call 0043B612
:0043C07A 83C404                  add esp, 00000004
:0043C07D 6A00                    push 00000000
:0043C07F 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C082 81E2FF000000            and edx, 000000FF
:0043C088 80CA80                  or dl, 80
:0043C08B 52                      push edx
:0043C08C 8A450C                  mov al, byte ptr [ebp+0C]
:0043C08F 50                      push eax
:0043C090 B958494B00              mov ecx, 004B4958
:0043C095 E8141D0100              call 0044DDAE
:0043C09A 8845FC                  mov byte ptr [ebp-04], al
:0043C09D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C0A0 81E1FF000000            and ecx, 000000FF
:0043C0A6 81F9FF000000            cmp ecx, 000000FF
:0043C0AC 0F8432010000            je 0043C1E4
:0043C0B2 8A55FC                  mov dl, byte ptr [ebp-04]
:0043C0B5 52                      push edx
:0043C0B6 8A450C                  mov al, byte ptr [ebp+0C]
:0043C0B9 50                      push eax
:0043C0BA E837E4FFFF              call 0043A4F6
:0043C0BF 83C408                  add esp, 00000008
:0043C0C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C0C5 81E1FF000000            and ecx, 000000FF
:0043C0CB 6BC924                  imul ecx, 00000024
:0043C0CE 81C1B83B4B00            add ecx, 004B3BB8
:0043C0D4 E8675BFFFF              call 00431C40
:0043C0D9 668B08                  mov cx, word ptr [eax]
:0043C0DC 66894DE8                mov word ptr [ebp-18], cx
:0043C0E0 837DF800                cmp dword ptr [ebp-08], 00000000
:0043C0E4 7421                    je 0043C107
:0043C0E6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C0E9 6BC931                  imul ecx, 00000031
:0043C0EC 81C1001D4B00            add ecx, 004B1D00
:0043C0F2 E8F995FCFF              call 004056F0
:0043C0F7 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043C0F8 6890E44700              push 0047E490
:0043C0FD 6A00                    push 00000000
:0043C0FF E82F53FFFF              call 00431433
:0043C104 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C0E4(C)
|
:0043C107 6A00                    push 00000000
:0043C109 8A5508                  mov dl, byte ptr [ebp+08]
:0043C10C 52                      push edx
:0043C10D 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043C110 25FF000000              and eax, 000000FF
:0043C115 C1E004                  shl eax, 04
:0043C118 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C11B 81E1FF000000            and ecx, 000000FF
:0043C121 0BC1                    or eax, ecx
:0043C123 50                      push eax
:0043C124 8A5510                  mov dl, byte ptr [ebp+10]
:0043C127 52                      push edx
:0043C128 8A45FC                  mov al, byte ptr [ebp-04]
:0043C12B 50                      push eax
:0043C12C 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043C12F 51                      push ecx
:0043C130 B9E0484B00              mov ecx, 004B48E0
:0043C135 E854800000              call 0044418E
:0043C13A 8B55EC                  mov edx, dword ptr [ebp-14]
:0043C13D 81E2FF000000            and edx, 000000FF
:0043C143 85D2                    test edx, edx
:0043C145 0F848F000000            je 0043C1DA
:0043C14B 68FF000000              push 000000FF
:0043C150 6A11                    push 00000011
:0043C152 6868484B00              push 004B4868
:0043C157 E884C40300              call 004785E0
:0043C15C 83C40C                  add esp, 0000000C
:0043C15F 68FF000000              push 000000FF
:0043C164 68FF000000              push 000000FF
:0043C169 6A01                    push 00000001
:0043C16B 6868484B00              push 004B4868
:0043C170 8A45EC                  mov al, byte ptr [ebp-14]
:0043C173 50                      push eax
:0043C174 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043C177 51                      push ecx
:0043C178 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C17B 6BC924                  imul ecx, 00000024
:0043C17E 81C1B83B4B00            add ecx, 004B3BB8
:0043C184 E8DAA20100              call 00456463
:0043C189 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C1D8(U)
|
:0043C18C 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043C18F 33C0                    xor eax, eax
:0043C191 8A02                    mov al, byte ptr [edx]
:0043C193 3DFF000000              cmp eax, 000000FF
:0043C198 7440                    je 0043C1DA
:0043C19A 6A00                    push 00000000
:0043C19C 8A4D08                  mov cl, byte ptr [ebp+08]
:0043C19F 51                      push ecx
:0043C1A0 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043C1A3 81E2FF000000            and edx, 000000FF
:0043C1A9 C1E204                  shl edx, 04
:0043C1AC 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C1AF 25FF000000              and eax, 000000FF
:0043C1B4 0BD0                    or edx, eax
:0043C1B6 52                      push edx
:0043C1B7 8A4D10                  mov cl, byte ptr [ebp+10]
:0043C1BA 51                      push ecx
:0043C1BB 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043C1BE 8A02                    mov al, byte ptr [edx]
:0043C1C0 50                      push eax
:0043C1C1 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043C1C4 51                      push ecx
:0043C1C5 B9E0484B00              mov ecx, 004B48E0
:0043C1CA E8BF7F0000              call 0044418E
:0043C1CF 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043C1D2 83C201                  add edx, 00000001
:0043C1D5 8955E4                  mov dword ptr [ebp-1C], edx
:0043C1D8 EBB2                    jmp 0043C18C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C145(C), :0043C198(C)
|
:0043C1DA C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C06C(U), :0043C0AC(C)
|
:0043C1E4 8BE5                    mov esp, ebp
:0043C1E6 5D                      pop ebp
:0043C1E7 C3                      ret



* Referenced by a CALL at Address:
|:0043AEED   
|
:0043C1E8 55                      push ebp
:0043C1E9 8BEC                    mov ebp, esp
:0043C1EB 83EC20                  sub esp, 00000020
:0043C1EE C645F8FF                mov [ebp-08], FF
:0043C1F2 8B4508                  mov eax, dword ptr [ebp+08]
:0043C1F5 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043C1F7 B906000000              mov ecx, 00000006
:0043C1FC F7F1                    div ecx
:0043C1FE 8845F0                  mov byte ptr [ebp-10], al
:0043C201 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C204 6BC931                  imul ecx, 00000031
:0043C207 81C1001D4B00            add ecx, 004B1D00
:0043C20D E86E95FCFF              call 00405780
:0043C212 8845E4                  mov byte ptr [ebp-1C], al
:0043C215 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C218 6BC931                  imul ecx, 00000031
:0043C21B 81C1001D4B00            add ecx, 004B1D00
:0043C221 E83A95FCFF              call 00405760
:0043C226 8845E8                  mov byte ptr [ebp-18], al
:0043C229 C745FC00000000          mov [ebp-04], 00000000
:0043C230 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C233 6BC924                  imul ecx, 00000024
:0043C236 81C1B83B4B00            add ecx, 004B3BB8
:0043C23C E83F95FCFF              call 00405780
:0043C241 25FF000000              and eax, 000000FF
:0043C246 83F807                  cmp eax, 00000007
:0043C249 7418                    je 0043C263
:0043C24B 33D2                    xor edx, edx
:0043C24D 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043C253 83E204                  and edx, 00000004
:0043C256 85D2                    test edx, edx
:0043C258 7509                    jne 0043C263
:0043C25A C745E000000000          mov [ebp-20], 00000000
:0043C261 EB07                    jmp 0043C26A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C249(C), :0043C258(C)
|
:0043C263 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C261(U)
|
:0043C26A 8B45E0                  mov eax, dword ptr [ebp-20]
:0043C26D 8945F4                  mov dword ptr [ebp-0C], eax
:0043C270 68FF000000              push 000000FF
:0043C275 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043C278 51                      push ecx
:0043C279 8B550C                  mov edx, dword ptr [ebp+0C]
:0043C27C 52                      push edx
:0043C27D 8B4508                  mov eax, dword ptr [ebp+08]
:0043C280 50                      push eax
:0043C281 E81FB1FFFF              call 004373A5
:0043C286 83C410                  add esp, 00000010
:0043C289 85C0                    test eax, eax
:0043C28B 7505                    jne 0043C292
:0043C28D E901010000              jmp 0043C393

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C28B(C)
|
:0043C292 68FF000000              push 000000FF
:0043C297 6A11                    push 00000011
:0043C299 6868484B00              push 004B4868
:0043C29E E83DC30300              call 004785E0
:0043C2A3 83C40C                  add esp, 0000000C
:0043C2A6 68FF000000              push 000000FF
:0043C2AB 68FF000000              push 000000FF
:0043C2B0 6A01                    push 00000001
:0043C2B2 6868484B00              push 004B4868
:0043C2B7 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0043C2BA 51                      push ecx
:0043C2BB 8A550C                  mov dl, byte ptr [ebp+0C]
:0043C2BE 52                      push edx
:0043C2BF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C2C2 6BC924                  imul ecx, 00000024
:0043C2C5 81C1B83B4B00            add ecx, 004B3BB8
:0043C2CB E893A10100              call 00456463
:0043C2D0 8945EC                  mov dword ptr [ebp-14], eax
:0043C2D3 8B45EC                  mov eax, dword ptr [ebp-14]
:0043C2D6 33C9                    xor ecx, ecx
:0043C2D8 8A08                    mov cl, byte ptr [eax]
:0043C2DA 81F9FF000000            cmp ecx, 000000FF
:0043C2E0 7520                    jne 0043C302

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043C2E2 6A07                    push 00000007
:0043C2E4 B9F8544B00              mov ecx, 004B54F8
:0043C2E9 E82CD20200              call 0046951A

* Possible StringData Ref from Data Obj ->"vTd򤺤sbH"
                                  |
:0043C2EE 6894E44700              push 0047E494
:0043C2F3 6A00                    push 00000000
:0043C2F5 E83951FFFF              call 00431433
:0043C2FA 83C408                  add esp, 00000008
:0043C2FD E991000000              jmp 0043C393

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C2E0(C)
|
:0043C302 6A18                    push 00000018
:0043C304 6A27                    push 00000027
:0043C306 6A00                    push 00000000
:0043C308 6A00                    push 00000000
:0043C30A B958494B00              mov ecx, 004B4958
:0043C30F E834060100              call 0044C948
:0043C314 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043C318 7421                    je 0043C33B
:0043C31A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C31D 6BC931                  imul ecx, 00000031
:0043C320 81C1001D4B00            add ecx, 004B1D00
:0043C326 E8C593FCFF              call 004056F0
:0043C32B 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043C32C 68B0E44700              push 0047E4B0
:0043C331 6A00                    push 00000000
:0043C333 E8FB50FFFF              call 00431433
:0043C338 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C318(C), :0043C387(U)
|
:0043C33B 8B55EC                  mov edx, dword ptr [ebp-14]
:0043C33E 33C0                    xor eax, eax
:0043C340 8A02                    mov al, byte ptr [edx]
:0043C342 3DFF000000              cmp eax, 000000FF
:0043C347 7440                    je 0043C389
:0043C349 6A00                    push 00000000
:0043C34B 8A4D08                  mov cl, byte ptr [ebp+08]
:0043C34E 51                      push ecx
:0043C34F 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C352 81E2FF000000            and edx, 000000FF
:0043C358 C1E204                  shl edx, 04
:0043C35B 8B45E8                  mov eax, dword ptr [ebp-18]
:0043C35E 25FF000000              and eax, 000000FF
:0043C363 0BD0                    or edx, eax
:0043C365 52                      push edx
:0043C366 8A4D10                  mov cl, byte ptr [ebp+10]
:0043C369 51                      push ecx
:0043C36A 8B55EC                  mov edx, dword ptr [ebp-14]
:0043C36D 8A02                    mov al, byte ptr [edx]
:0043C36F 50                      push eax
:0043C370 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043C373 51                      push ecx
:0043C374 B9E0484B00              mov ecx, 004B48E0
:0043C379 E8107E0000              call 0044418E
:0043C37E 8B55EC                  mov edx, dword ptr [ebp-14]
:0043C381 83C201                  add edx, 00000001
:0043C384 8955EC                  mov dword ptr [ebp-14], edx
:0043C387 EBB2                    jmp 0043C33B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C347(C)
|
:0043C389 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C28D(U), :0043C2FD(U)
|
:0043C393 8BE5                    mov esp, ebp
:0043C395 5D                      pop ebp
:0043C396 C3                      ret



* Referenced by a CALL at Address:
|:0043AF0F   
|
:0043C397 55                      push ebp
:0043C398 8BEC                    mov ebp, esp
:0043C39A 83EC20                  sub esp, 00000020
:0043C39D C645FCFF                mov [ebp-04], FF
:0043C3A1 8B4508                  mov eax, dword ptr [ebp+08]
:0043C3A4 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043C3A6 B906000000              mov ecx, 00000006
:0043C3AB F7F1                    div ecx
:0043C3AD 8845F4                  mov byte ptr [ebp-0C], al
:0043C3B0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C3B3 6BC931                  imul ecx, 00000031
:0043C3B6 81C1001D4B00            add ecx, 004B1D00
:0043C3BC E8BF93FCFF              call 00405780
:0043C3C1 8845E4                  mov byte ptr [ebp-1C], al
:0043C3C4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C3C7 6BC931                  imul ecx, 00000031
:0043C3CA 81C1001D4B00            add ecx, 004B1D00
:0043C3D0 E88B93FCFF              call 00405760
:0043C3D5 8845E8                  mov byte ptr [ebp-18], al
:0043C3D8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C3DB 6BC924                  imul ecx, 00000024
:0043C3DE 81C1B83B4B00            add ecx, 004B3BB8
:0043C3E4 E89793FCFF              call 00405780
:0043C3E9 25FF000000              and eax, 000000FF
:0043C3EE 83F807                  cmp eax, 00000007
:0043C3F1 7418                    je 0043C40B
:0043C3F3 33D2                    xor edx, edx
:0043C3F5 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043C3FB 83E204                  and edx, 00000004
:0043C3FE 85D2                    test edx, edx
:0043C400 7509                    jne 0043C40B
:0043C402 C745E000000000          mov [ebp-20], 00000000
:0043C409 EB07                    jmp 0043C412

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C3F1(C), :0043C400(C)
|
:0043C40B C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C409(U)
|
:0043C412 8B45E0                  mov eax, dword ptr [ebp-20]
:0043C415 8945F8                  mov dword ptr [ebp-08], eax
:0043C418 68FF000000              push 000000FF
:0043C41D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C420 51                      push ecx
:0043C421 8B550C                  mov edx, dword ptr [ebp+0C]
:0043C424 52                      push edx
:0043C425 8B4508                  mov eax, dword ptr [ebp+08]
:0043C428 50                      push eax
:0043C429 E877AFFFFF              call 004373A5
:0043C42E 83C410                  add esp, 00000010
:0043C431 85C0                    test eax, eax
:0043C433 7505                    jne 0043C43A
:0043C435 E916010000              jmp 0043C550

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C433(C)
|
:0043C43A 68FF000000              push 000000FF
:0043C43F 6A11                    push 00000011
:0043C441 6868484B00              push 004B4868
:0043C446 E895C10300              call 004785E0
:0043C44B 83C40C                  add esp, 0000000C
:0043C44E 68FF000000              push 000000FF
:0043C453 68FF000000              push 000000FF
:0043C458 6A00                    push 00000000
:0043C45A 6868484B00              push 004B4868
:0043C45F 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0043C462 51                      push ecx
:0043C463 8A550C                  mov dl, byte ptr [ebp+0C]
:0043C466 52                      push edx
:0043C467 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C46A 6BC924                  imul ecx, 00000024
:0043C46D 81C1B83B4B00            add ecx, 004B3BB8
:0043C473 E8EB9F0100              call 00456463
:0043C478 8945F0                  mov dword ptr [ebp-10], eax
:0043C47B 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C47E 33C9                    xor ecx, ecx
:0043C480 8A08                    mov cl, byte ptr [eax]
:0043C482 81F9FF000000            cmp ecx, 000000FF
:0043C488 7520                    jne 0043C4AA

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043C48A 6A07                    push 00000007
:0043C48C B9F8544B00              mov ecx, 004B54F8
:0043C491 E884D00200              call 0046951A

* Possible StringData Ref from Data Obj ->"vTd򤺤sbHĭx"
                                  |
:0043C496 68B4E44700              push 0047E4B4
:0043C49B 6A00                    push 00000000
:0043C49D E8914FFFFF              call 00431433
:0043C4A2 83C408                  add esp, 00000008
:0043C4A5 E9A6000000              jmp 0043C550

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C488(C)
|
:0043C4AA 6A18                    push 00000018
:0043C4AC 6A27                    push 00000027
:0043C4AE 6A00                    push 00000000
:0043C4B0 6A00                    push 00000000
:0043C4B2 B958494B00              mov ecx, 004B4958
:0043C4B7 E88C040100              call 0044C948
:0043C4BC 837DF800                cmp dword ptr [ebp-08], 00000000
:0043C4C0 7421                    je 0043C4E3
:0043C4C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C4C5 6BC931                  imul ecx, 00000031
:0043C4C8 81C1001D4B00            add ecx, 004B1D00
:0043C4CE E81D92FCFF              call 004056F0
:0043C4D3 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043C4D4 68D4E44700              push 0047E4D4
:0043C4D9 6A00                    push 00000000
:0043C4DB E8534FFFFF              call 00431433
:0043C4E0 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C4C0(C)
|
:0043C4E3 C645EC00                mov [ebp-14], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C544(U)
|
:0043C4E7 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C4EA 33C0                    xor eax, eax
:0043C4EC 8A02                    mov al, byte ptr [edx]
:0043C4EE 3DFF000000              cmp eax, 000000FF
:0043C4F3 7451                    je 0043C546
:0043C4F5 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043C4F8 51                      push ecx
:0043C4F9 8A5508                  mov dl, byte ptr [ebp+08]
:0043C4FC 52                      push edx
:0043C4FD 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043C500 25FF000000              and eax, 000000FF
:0043C505 C1E004                  shl eax, 04
:0043C508 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043C50B 81E1FF000000            and ecx, 000000FF
:0043C511 0BC1                    or eax, ecx
:0043C513 50                      push eax
:0043C514 8A5510                  mov dl, byte ptr [ebp+10]
:0043C517 52                      push edx
:0043C518 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C51B 8A08                    mov cl, byte ptr [eax]
:0043C51D 51                      push ecx
:0043C51E 8A550C                  mov dl, byte ptr [ebp+0C]
:0043C521 52                      push edx
:0043C522 B9E0484B00              mov ecx, 004B48E0
:0043C527 E8627C0000              call 0044418E
:0043C52C 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C52F 83C001                  add eax, 00000001
:0043C532 8945F0                  mov dword ptr [ebp-10], eax
:0043C535 837D080F                cmp dword ptr [ebp+08], 0000000F
:0043C539 7409                    je 0043C544
:0043C53B 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043C53E 80C101                  add cl, 01
:0043C541 884DEC                  mov byte ptr [ebp-14], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C539(C)
|
:0043C544 EBA1                    jmp 0043C4E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C4F3(C)
|
:0043C546 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C435(U), :0043C4A5(U)
|
:0043C550 8BE5                    mov esp, ebp
:0043C552 5D                      pop ebp
:0043C553 C3                      ret



* Referenced by a CALL at Address:
|:0043AF31   
|
:0043C554 55                      push ebp
:0043C555 8BEC                    mov ebp, esp
:0043C557 83EC20                  sub esp, 00000020
:0043C55A C645FCFF                mov [ebp-04], FF
:0043C55E 8B4508                  mov eax, dword ptr [ebp+08]
:0043C561 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043C563 B906000000              mov ecx, 00000006
:0043C568 F7F1                    div ecx
:0043C56A 8845F4                  mov byte ptr [ebp-0C], al
:0043C56D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C570 6BC931                  imul ecx, 00000031
:0043C573 81C1001D4B00            add ecx, 004B1D00
:0043C579 E80292FCFF              call 00405780
:0043C57E 8845E4                  mov byte ptr [ebp-1C], al
:0043C581 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C584 6BC931                  imul ecx, 00000031
:0043C587 81C1001D4B00            add ecx, 004B1D00
:0043C58D E8CE91FCFF              call 00405760
:0043C592 8845E8                  mov byte ptr [ebp-18], al
:0043C595 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C598 6BC924                  imul ecx, 00000024
:0043C59B 81C1B83B4B00            add ecx, 004B3BB8
:0043C5A1 E8DA91FCFF              call 00405780
:0043C5A6 25FF000000              and eax, 000000FF
:0043C5AB 83F807                  cmp eax, 00000007
:0043C5AE 7418                    je 0043C5C8
:0043C5B0 33D2                    xor edx, edx
:0043C5B2 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043C5B8 83E204                  and edx, 00000004
:0043C5BB 85D2                    test edx, edx
:0043C5BD 7509                    jne 0043C5C8
:0043C5BF C745E000000000          mov [ebp-20], 00000000
:0043C5C6 EB07                    jmp 0043C5CF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C5AE(C), :0043C5BD(C)
|
:0043C5C8 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C5C6(U)
|
:0043C5CF 8B45E0                  mov eax, dword ptr [ebp-20]
:0043C5D2 8945F8                  mov dword ptr [ebp-08], eax
:0043C5D5 68FF000000              push 000000FF
:0043C5DA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C5DD 51                      push ecx
:0043C5DE 8B550C                  mov edx, dword ptr [ebp+0C]
:0043C5E1 52                      push edx
:0043C5E2 8B4508                  mov eax, dword ptr [ebp+08]
:0043C5E5 50                      push eax
:0043C5E6 E8BAADFFFF              call 004373A5
:0043C5EB 83C410                  add esp, 00000010
:0043C5EE 85C0                    test eax, eax
:0043C5F0 7505                    jne 0043C5F7
:0043C5F2 E9A1010000              jmp 0043C798

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C5F0(C)
|
:0043C5F7 68FF000000              push 000000FF
:0043C5FC 6A11                    push 00000011
:0043C5FE 6868484B00              push 004B4868
:0043C603 E8D8BF0300              call 004785E0
:0043C608 83C40C                  add esp, 0000000C
:0043C60B 68FF000000              push 000000FF
:0043C610 68FF000000              push 000000FF
:0043C615 6A00                    push 00000000
:0043C617 6868484B00              push 004B4868
:0043C61C 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0043C61F 51                      push ecx
:0043C620 8A550C                  mov dl, byte ptr [ebp+0C]
:0043C623 52                      push edx
:0043C624 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C627 6BC924                  imul ecx, 00000024
:0043C62A 81C1B83B4B00            add ecx, 004B3BB8
:0043C630 E82E9E0100              call 00456463
:0043C635 8945F0                  mov dword ptr [ebp-10], eax
:0043C638 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C63B 33C9                    xor ecx, ecx
:0043C63D 8A08                    mov cl, byte ptr [eax]
:0043C63F 81F9FF000000            cmp ecx, 000000FF
:0043C645 7520                    jne 0043C667

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043C647 6A07                    push 00000007
:0043C649 B9F8544B00              mov ecx, 004B54F8
:0043C64E E8C7CE0200              call 0046951A

* Possible StringData Ref from Data Obj ->"vTd򤺤sbHĭx"
                                  |
:0043C653 68D8E44700              push 0047E4D8
:0043C658 6A00                    push 00000000
:0043C65A E8D44DFFFF              call 00431433
:0043C65F 83C408                  add esp, 00000008
:0043C662 E931010000              jmp 0043C798

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C645(C)
|
:0043C667 6A18                    push 00000018
:0043C669 6A27                    push 00000027
:0043C66B 6A00                    push 00000000
:0043C66D 6A00                    push 00000000
:0043C66F B958494B00              mov ecx, 004B4958
:0043C674 E8CF020100              call 0044C948
:0043C679 837DF800                cmp dword ptr [ebp-08], 00000000
:0043C67D 7421                    je 0043C6A0
:0043C67F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C682 6BC931                  imul ecx, 00000031
:0043C685 81C1001D4B00            add ecx, 004B1D00
:0043C68B E86090FCFF              call 004056F0
:0043C690 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043C691 68F8E44700              push 0047E4F8
:0043C696 6A00                    push 00000000
:0043C698 E8964DFFFF              call 00431433
:0043C69D 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C67D(C)
|
:0043C6A0 C645EC00                mov [ebp-14], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C6FB(U)
|
:0043C6A4 8B55F0                  mov edx, dword ptr [ebp-10]
:0043C6A7 33C0                    xor eax, eax
:0043C6A9 8A02                    mov al, byte ptr [edx]
:0043C6AB 3DFF000000              cmp eax, 000000FF
:0043C6B0 744B                    je 0043C6FD
:0043C6B2 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043C6B5 51                      push ecx
:0043C6B6 8A5508                  mov dl, byte ptr [ebp+08]
:0043C6B9 52                      push edx
:0043C6BA 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043C6BD 25FF000000              and eax, 000000FF
:0043C6C2 C1E004                  shl eax, 04
:0043C6C5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043C6C8 81E1FF000000            and ecx, 000000FF
:0043C6CE 0BC1                    or eax, ecx
:0043C6D0 50                      push eax
:0043C6D1 8A5510                  mov dl, byte ptr [ebp+10]
:0043C6D4 52                      push edx
:0043C6D5 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C6D8 8A08                    mov cl, byte ptr [eax]
:0043C6DA 51                      push ecx
:0043C6DB 8A550C                  mov dl, byte ptr [ebp+0C]
:0043C6DE 52                      push edx
:0043C6DF B9E0484B00              mov ecx, 004B48E0
:0043C6E4 E8A57A0000              call 0044418E
:0043C6E9 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C6EC 83C001                  add eax, 00000001
:0043C6EF 8945F0                  mov dword ptr [ebp-10], eax
:0043C6F2 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043C6F5 80C101                  add cl, 01
:0043C6F8 884DEC                  mov byte ptr [ebp-14], cl
:0043C6FB EBA7                    jmp 0043C6A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C6B0(C)
|
:0043C6FD 837D0811                cmp dword ptr [ebp+08], 00000011
:0043C701 7565                    jne 0043C768
:0043C703 6A32                    push 00000032
:0043C705 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C708 6BC924                  imul ecx, 00000024
:0043C70B 81C1B83B4B00            add ecx, 004B3BB8
:0043C711 E8CA6BFCFF              call 004032E0
:0043C716 50                      push eax
:0043C717 E804BC0300              call 00478320
:0043C71C 83C408                  add esp, 00000008
:0043C71F 50                      push eax
:0043C720 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C723 6BC924                  imul ecx, 00000024
:0043C726 81C1B83B4B00            add ecx, 004B3BB8
:0043C72C E8E46AFFFF              call 00433215
:0043C731 6A20                    push 00000020
:0043C733 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C736 6BC924                  imul ecx, 00000024
:0043C739 81C1B83B4B00            add ecx, 004B3BB8
:0043C73F E87C580000              call 00441FC0
:0043C744 6A10                    push 00000010
:0043C746 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C749 6BC924                  imul ecx, 00000024
:0043C74C 81C1B83B4B00            add ecx, 004B3BB8
:0043C752 E869580000              call 00441FC0
:0043C757 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C75A 6BC924                  imul ecx, 00000024
:0043C75D 81C1B83B4B00            add ecx, 004B3BB8
:0043C763 E83784FFFF              call 00434B9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C701(C)
|
:0043C768 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C76B 6BC924                  imul ecx, 00000024
:0043C76E 81C1B83B4B00            add ecx, 004B3BB8
:0043C774 E808A2FFFF              call 00436981
:0043C779 85C0                    test eax, eax
:0043C77B 7411                    je 0043C78E
:0043C77D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C780 6BC924                  imul ecx, 00000024
:0043C783 81C1B83B4B00            add ecx, 004B3BB8
:0043C789 E8BA80FFFF              call 00434848

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C77B(C)
|
:0043C78E C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C5F2(U), :0043C662(U)
|
:0043C798 8BE5                    mov esp, ebp
:0043C79A 5D                      pop ebp
:0043C79B C3                      ret



* Referenced by a CALL at Address:
|:0043AF53   
|
:0043C79C 55                      push ebp
:0043C79D 8BEC                    mov ebp, esp
:0043C79F 83EC20                  sub esp, 00000020
:0043C7A2 C645FCFF                mov [ebp-04], FF
:0043C7A6 8B4508                  mov eax, dword ptr [ebp+08]
:0043C7A9 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043C7AB B906000000              mov ecx, 00000006
:0043C7B0 F7F1                    div ecx
:0043C7B2 8845F4                  mov byte ptr [ebp-0C], al
:0043C7B5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C7B8 6BC931                  imul ecx, 00000031
:0043C7BB 81C1001D4B00            add ecx, 004B1D00
:0043C7C1 E8BA8FFCFF              call 00405780
:0043C7C6 8845EC                  mov byte ptr [ebp-14], al
:0043C7C9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C7CC 6BC931                  imul ecx, 00000031
:0043C7CF 81C1001D4B00            add ecx, 004B1D00
:0043C7D5 E8868FFCFF              call 00405760
:0043C7DA 8845F0                  mov byte ptr [ebp-10], al
:0043C7DD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C7E0 6BC924                  imul ecx, 00000024
:0043C7E3 81C1B83B4B00            add ecx, 004B3BB8
:0043C7E9 E8928FFCFF              call 00405780
:0043C7EE 25FF000000              and eax, 000000FF
:0043C7F3 83F807                  cmp eax, 00000007
:0043C7F6 7418                    je 0043C810
:0043C7F8 33D2                    xor edx, edx
:0043C7FA 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043C800 83E204                  and edx, 00000004
:0043C803 85D2                    test edx, edx
:0043C805 7509                    jne 0043C810
:0043C807 C745E000000000          mov [ebp-20], 00000000
:0043C80E EB07                    jmp 0043C817

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C7F6(C), :0043C805(C)
|
:0043C810 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C80E(U)
|
:0043C817 8B45E0                  mov eax, dword ptr [ebp-20]
:0043C81A 8945F8                  mov dword ptr [ebp-08], eax
:0043C81D 68FF000000              push 000000FF
:0043C822 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043C825 51                      push ecx
:0043C826 8B550C                  mov edx, dword ptr [ebp+0C]
:0043C829 52                      push edx
:0043C82A 8B4508                  mov eax, dword ptr [ebp+08]
:0043C82D 50                      push eax
:0043C82E E872ABFFFF              call 004373A5
:0043C833 83C410                  add esp, 00000010
:0043C836 85C0                    test eax, eax
:0043C838 7505                    jne 0043C83F
:0043C83A E9CF010000              jmp 0043CA0E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C838(C)
|
:0043C83F 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043C842 51                      push ecx
:0043C843 E8CAEDFFFF              call 0043B612
:0043C848 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C8B9(U)
|
:0043C84B 8A55EC                  mov dl, byte ptr [ebp-14]
:0043C84E 52                      push edx
:0043C84F E8BEEDFFFF              call 0043B612
:0043C854 83C404                  add esp, 00000004
:0043C857 6A00                    push 00000000
:0043C859 8B45F0                  mov eax, dword ptr [ebp-10]
:0043C85C 25FF000000              and eax, 000000FF
:0043C861 0C80                    or al, 80
:0043C863 50                      push eax
:0043C864 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043C867 51                      push ecx
:0043C868 B958494B00              mov ecx, 004B4958
:0043C86D E83C150100              call 0044DDAE
:0043C872 8845FC                  mov byte ptr [ebp-04], al
:0043C875 8B55FC                  mov edx, dword ptr [ebp-04]
:0043C878 81E2FF000000            and edx, 000000FF
:0043C87E 81FAFF000000            cmp edx, 000000FF
:0043C884 0F8484010000            je 0043CA0E
:0043C88A 8A4508                  mov al, byte ptr [ebp+08]
:0043C88D 50                      push eax
:0043C88E 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043C891 51                      push ecx
:0043C892 E82AB4FFFF              call 00437CC1
:0043C897 83C408                  add esp, 00000008
:0043C89A 85C0                    test eax, eax
:0043C89C 751D                    jne 0043C8BB

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043C89E 6A07                    push 00000007
:0043C8A0 B9F8544B00              mov ecx, 004B54F8
:0043C8A5 E870CC0200              call 0046951A

* Possible StringData Ref from Data Obj ->"bo̵Lk"
                                  |
:0043C8AA 68FCE44700              push 0047E4FC
:0043C8AF 6A00                    push 00000000
:0043C8B1 E87D4BFFFF              call 00431433
:0043C8B6 83C408                  add esp, 00000008
:0043C8B9 EB90                    jmp 0043C84B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C89C(C)
|
:0043C8BB 8A55FC                  mov dl, byte ptr [ebp-04]
:0043C8BE 52                      push edx
:0043C8BF 8A450C                  mov al, byte ptr [ebp+0C]
:0043C8C2 50                      push eax
:0043C8C3 E82EDCFFFF              call 0043A4F6
:0043C8C8 83C408                  add esp, 00000008
:0043C8CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043C8CE 81E1FF000000            and ecx, 000000FF
:0043C8D4 6BC924                  imul ecx, 00000024
:0043C8D7 81C1B83B4B00            add ecx, 004B3BB8
:0043C8DD E85E53FFFF              call 00431C40
:0043C8E2 668B08                  mov cx, word ptr [eax]
:0043C8E5 66894DE8                mov word ptr [ebp-18], cx
:0043C8E9 837DF800                cmp dword ptr [ebp-08], 00000000
:0043C8ED 7421                    je 0043C910
:0043C8EF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043C8F2 6BC931                  imul ecx, 00000031
:0043C8F5 81C1001D4B00            add ecx, 004B1D00
:0043C8FB E8F08DFCFF              call 004056F0
:0043C900 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043C901 680CE54700              push 0047E50C
:0043C906 6A00                    push 00000000
:0043C908 E8264BFFFF              call 00431433
:0043C90D 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C8ED(C)
|
:0043C910 6A00                    push 00000000
:0043C912 8A5508                  mov dl, byte ptr [ebp+08]
:0043C915 52                      push edx
:0043C916 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043C919 25FF000000              and eax, 000000FF
:0043C91E C1E004                  shl eax, 04
:0043C921 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C924 81E1FF000000            and ecx, 000000FF
:0043C92A 0BC1                    or eax, ecx
:0043C92C 50                      push eax
:0043C92D 8A5510                  mov dl, byte ptr [ebp+10]
:0043C930 52                      push edx
:0043C931 8A45FC                  mov al, byte ptr [ebp-04]
:0043C934 50                      push eax
:0043C935 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043C938 51                      push ecx
:0043C939 B9E0484B00              mov ecx, 004B48E0
:0043C93E E84B780000              call 0044418E
:0043C943 8B55EC                  mov edx, dword ptr [ebp-14]
:0043C946 81E2FF000000            and edx, 000000FF
:0043C94C 85D2                    test edx, edx
:0043C94E 0F84B0000000            je 0043CA04
:0043C954 68FF000000              push 000000FF
:0043C959 6A11                    push 00000011
:0043C95B 6868484B00              push 004B4868
:0043C960 E87BBC0300              call 004785E0
:0043C965 83C40C                  add esp, 0000000C
:0043C968 68FF000000              push 000000FF
:0043C96D 68FF000000              push 000000FF
:0043C972 6A00                    push 00000000
:0043C974 6868484B00              push 004B4868
:0043C979 8A45EC                  mov al, byte ptr [ebp-14]
:0043C97C 50                      push eax
:0043C97D 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043C980 51                      push ecx
:0043C981 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043C984 6BC924                  imul ecx, 00000024
:0043C987 81C1B83B4B00            add ecx, 004B3BB8
:0043C98D E8D19A0100              call 00456463
:0043C992 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C9C2(U), :0043CA02(U)
|
:0043C995 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043C998 33C0                    xor eax, eax
:0043C99A 8A02                    mov al, byte ptr [edx]
:0043C99C 3DFF000000              cmp eax, 000000FF
:0043C9A1 7461                    je 0043CA04
:0043C9A3 8A4D08                  mov cl, byte ptr [ebp+08]
:0043C9A6 51                      push ecx
:0043C9A7 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043C9AA 8A02                    mov al, byte ptr [edx]
:0043C9AC 50                      push eax
:0043C9AD E80FB3FFFF              call 00437CC1
:0043C9B2 83C408                  add esp, 00000008
:0043C9B5 85C0                    test eax, eax
:0043C9B7 750B                    jne 0043C9C4
:0043C9B9 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043C9BC 83C101                  add ecx, 00000001
:0043C9BF 894DE4                  mov dword ptr [ebp-1C], ecx
:0043C9C2 EBD1                    jmp 0043C995

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043C9B7(C)
|
:0043C9C4 6A01                    push 00000001
:0043C9C6 8A5508                  mov dl, byte ptr [ebp+08]
:0043C9C9 52                      push edx
:0043C9CA 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043C9CD 25FF000000              and eax, 000000FF
:0043C9D2 C1E004                  shl eax, 04
:0043C9D5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043C9D8 81E1FF000000            and ecx, 000000FF
:0043C9DE 0BC1                    or eax, ecx
:0043C9E0 50                      push eax
:0043C9E1 8A5510                  mov dl, byte ptr [ebp+10]
:0043C9E4 52                      push edx
:0043C9E5 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043C9E8 8A08                    mov cl, byte ptr [eax]
:0043C9EA 51                      push ecx
:0043C9EB 8A550C                  mov dl, byte ptr [ebp+0C]
:0043C9EE 52                      push edx
:0043C9EF B9E0484B00              mov ecx, 004B48E0
:0043C9F4 E895770000              call 0044418E
:0043C9F9 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043C9FC 83C001                  add eax, 00000001
:0043C9FF 8945E4                  mov dword ptr [ebp-1C], eax
:0043CA02 EB91                    jmp 0043C995

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C94E(C), :0043C9A1(C)
|
:0043CA04 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043C83A(U), :0043C884(C)
|
:0043CA0E 8BE5                    mov esp, ebp
:0043CA10 5D                      pop ebp
:0043CA11 C3                      ret



* Referenced by a CALL at Address:
|:0043AF75   
|
:0043CA12 55                      push ebp
:0043CA13 8BEC                    mov ebp, esp
:0043CA15 83EC24                  sub esp, 00000024
:0043CA18 C645F8FF                mov [ebp-08], FF
:0043CA1C 8B4508                  mov eax, dword ptr [ebp+08]
:0043CA1F 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043CA21 B906000000              mov ecx, 00000006
:0043CA26 F7F1                    div ecx
:0043CA28 8845F0                  mov byte ptr [ebp-10], al
:0043CA2B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043CA2E 6BC931                  imul ecx, 00000031
:0043CA31 81C1001D4B00            add ecx, 004B1D00
:0043CA37 E8448DFCFF              call 00405780
:0043CA3C 8845E0                  mov byte ptr [ebp-20], al
:0043CA3F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043CA42 6BC931                  imul ecx, 00000031
:0043CA45 81C1001D4B00            add ecx, 004B1D00
:0043CA4B E8108DFCFF              call 00405760
:0043CA50 8845E4                  mov byte ptr [ebp-1C], al
:0043CA53 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043CA56 6BC924                  imul ecx, 00000024
:0043CA59 81C1B83B4B00            add ecx, 004B3BB8
:0043CA5F E81C8DFCFF              call 00405780
:0043CA64 25FF000000              and eax, 000000FF
:0043CA69 83F807                  cmp eax, 00000007
:0043CA6C 7418                    je 0043CA86
:0043CA6E 33D2                    xor edx, edx
:0043CA70 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043CA76 83E204                  and edx, 00000004
:0043CA79 85D2                    test edx, edx
:0043CA7B 7509                    jne 0043CA86
:0043CA7D C745DC00000000          mov [ebp-24], 00000000
:0043CA84 EB07                    jmp 0043CA8D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CA6C(C), :0043CA7B(C)
|
:0043CA86 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CA84(U)
|
:0043CA8D 8B45DC                  mov eax, dword ptr [ebp-24]
:0043CA90 8945F4                  mov dword ptr [ebp-0C], eax
:0043CA93 68FF000000              push 000000FF
:0043CA98 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043CA9B 51                      push ecx
:0043CA9C 8B550C                  mov edx, dword ptr [ebp+0C]
:0043CA9F 52                      push edx
:0043CAA0 8B4508                  mov eax, dword ptr [ebp+08]
:0043CAA3 50                      push eax
:0043CAA4 E8FCA8FFFF              call 004373A5
:0043CAA9 83C410                  add esp, 00000010
:0043CAAC 85C0                    test eax, eax
:0043CAAE 7505                    jne 0043CAB5
:0043CAB0 E9B0010000              jmp 0043CC65

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CAAE(C)
|
:0043CAB5 68FF000000              push 000000FF
:0043CABA 6A11                    push 00000011
:0043CABC 6868484B00              push 004B4868
:0043CAC1 E81ABB0300              call 004785E0
:0043CAC6 83C40C                  add esp, 0000000C
:0043CAC9 68FF000000              push 000000FF
:0043CACE 68FF000000              push 000000FF
:0043CAD3 6A00                    push 00000000
:0043CAD5 6868484B00              push 004B4868
:0043CADA 8A4DE0                  mov cl, byte ptr [ebp-20]
:0043CADD 51                      push ecx
:0043CADE 8A550C                  mov dl, byte ptr [ebp+0C]
:0043CAE1 52                      push edx
:0043CAE2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043CAE5 6BC924                  imul ecx, 00000024
:0043CAE8 81C1B83B4B00            add ecx, 004B3BB8
:0043CAEE E870990100              call 00456463
:0043CAF3 8945EC                  mov dword ptr [ebp-14], eax
:0043CAF6 8B45EC                  mov eax, dword ptr [ebp-14]
:0043CAF9 33C9                    xor ecx, ecx
:0043CAFB 8A08                    mov cl, byte ptr [eax]
:0043CAFD 81F9FF000000            cmp ecx, 000000FF
:0043CB03 7520                    jne 0043CB25

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043CB05 6A07                    push 00000007
:0043CB07 B9F8544B00              mov ecx, 004B54F8
:0043CB0C E809CA0200              call 0046951A

* Possible StringData Ref from Data Obj ->"vTd򤺤sbHĭx"
                                  |
:0043CB11 6810E54700              push 0047E510
:0043CB16 6A00                    push 00000000
:0043CB18 E81649FFFF              call 00431433
:0043CB1D 83C408                  add esp, 00000008
:0043CB20 E940010000              jmp 0043CC65

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CB03(C)
|
:0043CB25 8B55EC                  mov edx, dword ptr [ebp-14]
:0043CB28 52                      push edx
:0043CB29 8B4508                  mov eax, dword ptr [ebp+08]
:0043CB2C 50                      push eax
:0043CB2D E837010000              call 0043CC69
:0043CB32 83C408                  add esp, 00000008
:0043CB35 85C0                    test eax, eax
:0043CB37 7505                    jne 0043CB3E
:0043CB39 E927010000              jmp 0043CC65

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CB37(C)
|
:0043CB3E 6A18                    push 00000018
:0043CB40 6A27                    push 00000027
:0043CB42 6A00                    push 00000000
:0043CB44 6A00                    push 00000000
:0043CB46 B958494B00              mov ecx, 004B4958
:0043CB4B E8F8FD0000              call 0044C948
:0043CB50 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043CB54 7421                    je 0043CB77
:0043CB56 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043CB59 6BC931                  imul ecx, 00000031
:0043CB5C 81C1001D4B00            add ecx, 004B1D00
:0043CB62 E8898BFCFF              call 004056F0
:0043CB67 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043CB68 6830E54700              push 0047E530
:0043CB6D 6A00                    push 00000000
:0043CB6F E8BF48FFFF              call 00431433
:0043CB74 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CB54(C)
|
:0043CB77 C645FC00                mov [ebp-04], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CC56(U)
|
:0043CB7B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043CB7E 33D2                    xor edx, edx
:0043CB80 8A11                    mov dl, byte ptr [ecx]
:0043CB82 81FAFF000000            cmp edx, 000000FF
:0043CB88 0F84CD000000            je 0043CC5B
:0043CB8E 8B45EC                  mov eax, dword ptr [ebp-14]
:0043CB91 33C9                    xor ecx, ecx
:0043CB93 8A08                    mov cl, byte ptr [eax]
:0043CB95 6BC924                  imul ecx, 00000024
:0043CB98 81C1B83B4B00            add ecx, 004B3BB8
:0043CB9E E89D50FFFF              call 00431C40
:0043CBA3 50                      push eax
:0043CBA4 E8AF2C0100              call 0044F858
:0043CBA9 83C404                  add esp, 00000004
:0043CBAC 8845E8                  mov byte ptr [ebp-18], al
:0043CBAF 837D0817                cmp dword ptr [ebp+08], 00000017
:0043CBB3 7546                    jne 0043CBFB
:0043CBB5 8B55E8                  mov edx, dword ptr [ebp-18]
:0043CBB8 81E2FF000000            and edx, 000000FF
:0043CBBE 83FA07                  cmp edx, 00000007
:0043CBC1 7538                    jne 0043CBFB
:0043CBC3 6A00                    push 00000000
:0043CBC5 8A4508                  mov al, byte ptr [ebp+08]
:0043CBC8 50                      push eax
:0043CBC9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043CBCC 81E1FF000000            and ecx, 000000FF
:0043CBD2 C1E104                  shl ecx, 04
:0043CBD5 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043CBD8 81E2FF000000            and edx, 000000FF
:0043CBDE 0BCA                    or ecx, edx
:0043CBE0 51                      push ecx
:0043CBE1 8A4510                  mov al, byte ptr [ebp+10]
:0043CBE4 50                      push eax
:0043CBE5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043CBE8 8A11                    mov dl, byte ptr [ecx]
:0043CBEA 52                      push edx
:0043CBEB 8A450C                  mov al, byte ptr [ebp+0C]
:0043CBEE 50                      push eax
:0043CBEF B9E0484B00              mov ecx, 004B48E0
:0043CBF4 E895750000              call 0044418E
:0043CBF9 EB49                    jmp 0043CC44

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CBB3(C), :0043CBC1(C)
|
:0043CBFB 837D0818                cmp dword ptr [ebp+08], 00000018
:0043CBFF 7543                    jne 0043CC44
:0043CC01 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043CC04 81E1FF000000            and ecx, 000000FF
:0043CC0A 83F90A                  cmp ecx, 0000000A
:0043CC0D 7535                    jne 0043CC44
:0043CC0F 6A00                    push 00000000
:0043CC11 8A5508                  mov dl, byte ptr [ebp+08]
:0043CC14 52                      push edx
:0043CC15 8B45F0                  mov eax, dword ptr [ebp-10]
:0043CC18 25FF000000              and eax, 000000FF
:0043CC1D C1E004                  shl eax, 04
:0043CC20 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043CC23 81E1FF000000            and ecx, 000000FF
:0043CC29 0BC1                    or eax, ecx
:0043CC2B 50                      push eax
:0043CC2C 8A5510                  mov dl, byte ptr [ebp+10]
:0043CC2F 52                      push edx
:0043CC30 8B45EC                  mov eax, dword ptr [ebp-14]
:0043CC33 8A08                    mov cl, byte ptr [eax]
:0043CC35 51                      push ecx
:0043CC36 8A550C                  mov dl, byte ptr [ebp+0C]
:0043CC39 52                      push edx
:0043CC3A B9E0484B00              mov ecx, 004B48E0
:0043CC3F E84A750000              call 0044418E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CBF9(U), :0043CBFF(C), :0043CC0D(C)
|
:0043CC44 8B45EC                  mov eax, dword ptr [ebp-14]
:0043CC47 83C001                  add eax, 00000001
:0043CC4A 8945EC                  mov dword ptr [ebp-14], eax
:0043CC4D 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043CC50 80C101                  add cl, 01
:0043CC53 884DFC                  mov byte ptr [ebp-04], cl
:0043CC56 E920FFFFFF              jmp 0043CB7B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CB88(C)
|
:0043CC5B C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CAB0(U), :0043CB20(U), :0043CB39(U)
|
:0043CC65 8BE5                    mov esp, ebp
:0043CC67 5D                      pop ebp
:0043CC68 C3                      ret



* Referenced by a CALL at Address:
|:0043CB2D   
|
:0043CC69 55                      push ebp
:0043CC6A 8BEC                    mov ebp, esp
:0043CC6C 83EC08                  sub esp, 00000008
:0043CC6F C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CCE3(U)
|
:0043CC76 8B450C                  mov eax, dword ptr [ebp+0C]
:0043CC79 33C9                    xor ecx, ecx
:0043CC7B 8A08                    mov cl, byte ptr [eax]
:0043CC7D 81F9FF000000            cmp ecx, 000000FF
:0043CC83 7460                    je 0043CCE5
:0043CC85 8B550C                  mov edx, dword ptr [ebp+0C]
:0043CC88 33C0                    xor eax, eax
:0043CC8A 8A02                    mov al, byte ptr [edx]
:0043CC8C 8BC8                    mov ecx, eax
:0043CC8E 6BC924                  imul ecx, 00000024
:0043CC91 81C1B83B4B00            add ecx, 004B3BB8
:0043CC97 E8A44FFFFF              call 00431C40
:0043CC9C 50                      push eax
:0043CC9D E8B62B0100              call 0044F858
:0043CCA2 83C404                  add esp, 00000004
:0043CCA5 8845F8                  mov byte ptr [ebp-08], al
:0043CCA8 837D0817                cmp dword ptr [ebp+08], 00000017
:0043CCAC 7517                    jne 0043CCC5
:0043CCAE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043CCB1 81E1FF000000            and ecx, 000000FF
:0043CCB7 83F907                  cmp ecx, 00000007
:0043CCBA 7507                    jne 0043CCC3
:0043CCBC C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CCBA(C)
|
:0043CCC3 EB15                    jmp 0043CCDA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CCAC(C)
|
:0043CCC5 8B55F8                  mov edx, dword ptr [ebp-08]
:0043CCC8 81E2FF000000            and edx, 000000FF
:0043CCCE 83FA0A                  cmp edx, 0000000A
:0043CCD1 7507                    jne 0043CCDA
:0043CCD3 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CCC3(U), :0043CCD1(C)
|
:0043CCDA 8B450C                  mov eax, dword ptr [ebp+0C]
:0043CCDD 83C001                  add eax, 00000001
:0043CCE0 89450C                  mov dword ptr [ebp+0C], eax
:0043CCE3 EB91                    jmp 0043CC76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CC83(C)
|
:0043CCE5 837DFC00                cmp dword ptr [ebp-04], 00000000
:0043CCE9 753E                    jne 0043CD29
:0043CCEB 837D0817                cmp dword ptr [ebp+08], 00000017
:0043CCEF 751D                    jne 0043CD0E

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043CCF1 6A07                    push 00000007
:0043CCF3 B9F8544B00              mov ecx, 004B54F8
:0043CCF8 E81DC80200              call 0046951A

* Possible StringData Ref from Data Obj ->"ĤHbsWAҥHLk"
                                  |
:0043CCFD 6834E54700              push 0047E534
:0043CD02 6A00                    push 00000000
:0043CD04 E82A47FFFF              call 00431433
:0043CD09 83C408                  add esp, 00000008
:0043CD0C EB1B                    jmp 0043CD29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CCEF(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043CD0E 6A07                    push 00000007
:0043CD10 B9F8544B00              mov ecx, 004B54F8
:0043CD15 E800C80200              call 0046951A

* Possible StringData Ref from Data Obj ->"ĤHb̡AҥHLk"
                                  |
:0043CD1A 6850E54700              push 0047E550
:0043CD1F 6A00                    push 00000000
:0043CD21 E80D47FFFF              call 00431433
:0043CD26 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CCE9(C), :0043CD0C(U)
|
:0043CD29 8B45FC                  mov eax, dword ptr [ebp-04]
:0043CD2C 8BE5                    mov esp, ebp
:0043CD2E 5D                      pop ebp
:0043CD2F C3                      ret



* Referenced by a CALL at Address:
|:0043AF97   
|
:0043CD30 55                      push ebp
:0043CD31 8BEC                    mov ebp, esp
:0043CD33 83EC38                  sub esp, 00000038
:0043CD36 56                      push esi
:0043CD37 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043CD3A 6BC931                  imul ecx, 00000031
:0043CD3D 81C1001D4B00            add ecx, 004B1D00
:0043CD43 E8188AFCFF              call 00405760
:0043CD48 8845E0                  mov byte ptr [ebp-20], al
:0043CD4B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043CD4E 6BC931                  imul ecx, 00000031
:0043CD51 81C1001D4B00            add ecx, 004B1D00
:0043CD57 E8248AFCFF              call 00405780
:0043CD5C 8845E4                  mov byte ptr [ebp-1C], al
:0043CD5F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043CD62 6BC924                  imul ecx, 00000024
:0043CD65 81C1B83B4B00            add ecx, 004B3BB8
:0043CD6B E8108AFCFF              call 00405780
:0043CD70 25FF000000              and eax, 000000FF
:0043CD75 83F807                  cmp eax, 00000007
:0043CD78 7417                    je 0043CD91
:0043CD7A 33C0                    xor eax, eax
:0043CD7C A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043CD81 83E004                  and eax, 00000004
:0043CD84 85C0                    test eax, eax
:0043CD86 7509                    jne 0043CD91
:0043CD88 C745CC00000000          mov [ebp-34], 00000000
:0043CD8F EB07                    jmp 0043CD98

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CD78(C), :0043CD86(C)
|
:0043CD91 C745CC01000000          mov [ebp-34], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CD8F(U)
|
:0043CD98 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0043CD9B 894DF8                  mov dword ptr [ebp-08], ecx
:0043CD9E C745FC00000000          mov [ebp-04], 00000000
:0043CDA5 C745E800000000          mov [ebp-18], 00000000
:0043CDAC 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0043CDAF E83C89FCFF              call 004056F0
:0043CDB4 68FF000000              push 000000FF
:0043CDB9 8B55F8                  mov edx, dword ptr [ebp-08]
:0043CDBC 52                      push edx
:0043CDBD 8B450C                  mov eax, dword ptr [ebp+0C]
:0043CDC0 50                      push eax
:0043CDC1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043CDC4 51                      push ecx
:0043CDC5 E8DBA5FFFF              call 004373A5
:0043CDCA 83C410                  add esp, 00000010
:0043CDCD 85C0                    test eax, eax
:0043CDCF 7505                    jne 0043CDD6
:0043CDD1 E96A040000              jmp 0043D240

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CDCF(C)
|
:0043CDD6 68FF000000              push 000000FF
:0043CDDB 6A11                    push 00000011
:0043CDDD 6868484B00              push 004B4868
:0043CDE2 E8F9B70300              call 004785E0
:0043CDE7 83C40C                  add esp, 0000000C
:0043CDEA 68FF000000              push 000000FF
:0043CDEF 68FF000000              push 000000FF
:0043CDF4 6A00                    push 00000000
:0043CDF6 6868484B00              push 004B4868
:0043CDFB 8A55E4                  mov dl, byte ptr [ebp-1C]
:0043CDFE 52                      push edx
:0043CDFF 8A450C                  mov al, byte ptr [ebp+0C]
:0043CE02 50                      push eax
:0043CE03 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043CE06 6BC924                  imul ecx, 00000024
:0043CE09 81C1B83B4B00            add ecx, 004B3BB8
:0043CE0F E84F960100              call 00456463
:0043CE14 8945F0                  mov dword ptr [ebp-10], eax
:0043CE17 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043CE1A 33D2                    xor edx, edx
:0043CE1C 8A11                    mov dl, byte ptr [ecx]
:0043CE1E 81FAFF000000            cmp edx, 000000FF
:0043CE24 7520                    jne 0043CE46

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043CE26 6A07                    push 00000007
:0043CE28 B9F8544B00              mov ecx, 004B54F8
:0043CE2D E8E8C60200              call 0046951A

* Possible StringData Ref from Data Obj ->"vTd򤺤sbHĭx"
                                  |
:0043CE32 686CE54700              push 0047E56C
:0043CE37 6A00                    push 00000000
:0043CE39 E8F545FFFF              call 00431433
:0043CE3E 83C408                  add esp, 00000008
:0043CE41 E9FA030000              jmp 0043D240

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CE24(C)
|
:0043CE46 6A18                    push 00000018
:0043CE48 6A27                    push 00000027
:0043CE4A 6A00                    push 00000000
:0043CE4C 6A00                    push 00000000
:0043CE4E B958494B00              mov ecx, 004B4958
:0043CE53 E8F0FA0000              call 0044C948
:0043CE58 837DF800                cmp dword ptr [ebp-08], 00000000
:0043CE5C 7421                    je 0043CE7F
:0043CE5E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043CE61 6BC931                  imul ecx, 00000031
:0043CE64 81C1001D4B00            add ecx, 004B1D00
:0043CE6A E88188FCFF              call 004056F0
:0043CE6F 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043CE70 688CE54700              push 0047E58C
:0043CE75 6A00                    push 00000000
:0043CE77 E8B745FFFF              call 00431433
:0043CE7C 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CE5C(C)
|
:0043CE7F C645EC00                mov [ebp-14], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CF0E(U), :0043D1F4(U)
|
:0043CE83 8B45F0                  mov eax, dword ptr [ebp-10]
:0043CE86 33C9                    xor ecx, ecx
:0043CE88 8A08                    mov cl, byte ptr [eax]
:0043CE8A 81F9FF000000            cmp ecx, 000000FF
:0043CE90 0F8463030000            je 0043D1F9
:0043CE96 8B55F0                  mov edx, dword ptr [ebp-10]
:0043CE99 33C0                    xor eax, eax
:0043CE9B 8A02                    mov al, byte ptr [edx]
:0043CE9D 8BC8                    mov ecx, eax
:0043CE9F 6BC924                  imul ecx, 00000024
:0043CEA2 81C1B83B4B00            add ecx, 004B3BB8
:0043CEA8 E8934DFFFF              call 00431C40
:0043CEAD 50                      push eax
:0043CEAE 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0043CEB1 E8EA9BFFFF              call 00436AA0
:0043CEB6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043CEB9 8A11                    mov dl, byte ptr [ecx]
:0043CEBB 52                      push edx
:0043CEBC 8A450C                  mov al, byte ptr [ebp+0C]
:0043CEBF 50                      push eax
:0043CEC0 E891A4FFFF              call 00437356
:0043CEC5 83C408                  add esp, 00000008
:0043CEC8 85C0                    test eax, eax
:0043CECA 7547                    jne 0043CF13
:0043CECC 6A00                    push 00000000
:0043CECE 8A4D10                  mov cl, byte ptr [ebp+10]
:0043CED1 51                      push ecx
:0043CED2 8A5508                  mov dl, byte ptr [ebp+08]
:0043CED5 52                      push edx
:0043CED6 8B45F0                  mov eax, dword ptr [ebp-10]
:0043CED9 8A08                    mov cl, byte ptr [eax]
:0043CEDB 51                      push ecx
:0043CEDC 8A550C                  mov dl, byte ptr [ebp+0C]
:0043CEDF 52                      push edx
:0043CEE0 B958494B00              mov ecx, 004B4958
:0043CEE5 E8A6180100              call 0044E790

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043CEEA 6A07                    push 00000007
:0043CEEC B9F8544B00              mov ecx, 004B54F8
:0043CEF1 E824C60200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۥѤF"
                                  |
:0043CEF6 6890E54700              push 0047E590
:0043CEFB 6A00                    push 00000000
:0043CEFD E83145FFFF              call 00431433
:0043CF02 83C408                  add esp, 00000008
:0043CF05 8B45F0                  mov eax, dword ptr [ebp-10]
:0043CF08 83C001                  add eax, 00000001
:0043CF0B 8945F0                  mov dword ptr [ebp-10], eax
:0043CF0E E970FFFFFF              jmp 0043CE83

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CECA(C)
|
:0043CF13 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043CF16 6BC924                  imul ecx, 00000024
:0043CF19 81C1B83B4B00            add ecx, 004B3BB8
:0043CF1F E8A75FFFFF              call 00432ECB
:0043CF24 C1E803                  shr eax, 03
:0043CF27 83C014                  add eax, 00000014
:0043CF2A 8945E8                  mov dword ptr [ebp-18], eax
:0043CF2D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043CF30 6BC924                  imul ecx, 00000024
:0043CF33 81C1B83B4B00            add ecx, 004B3BB8
:0043CF39 E8529CFFFF              call 00436B90
:0043CF3E 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0043CF40 68C8000000              push 000000C8
:0043CF45 E866B40300              call 004783B0
:0043CF4A 83C404                  add esp, 00000004
:0043CF4D 3BF0                    cmp esi, eax
:0043CF4F 7614                    jbe 0043CF65

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043CF51 6A06                    push 00000006
:0043CF53 E858B40300              call 004783B0
:0043CF58 83C404                  add esp, 00000004
:0043CF5B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043CF5E 8D540105                lea edx, dword ptr [ecx+eax+05]
:0043CF62 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CF4F(C)
|
:0043CF65 8B45F0                  mov eax, dword ptr [ebp-10]
:0043CF68 33C9                    xor ecx, ecx
:0043CF6A 8A08                    mov cl, byte ptr [eax]
:0043CF6C 6BC924                  imul ecx, 00000024
:0043CF6F 81C1B83B4B00            add ecx, 004B3BB8
:0043CF75 E88663FCFF              call 00403300
:0043CF7A 85C0                    test eax, eax
:0043CF7C 7507                    jne 0043CF85
:0043CF7E C745E800000000          mov [ebp-18], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CF7C(C)
|
:0043CF85 8B55F0                  mov edx, dword ptr [ebp-10]
:0043CF88 33C0                    xor eax, eax
:0043CF8A 8A02                    mov al, byte ptr [edx]
:0043CF8C 8BC8                    mov ecx, eax
:0043CF8E 6BC924                  imul ecx, 00000024
:0043CF91 81C1B83B4B00            add ecx, 004B3BB8
:0043CF97 E86463FCFF              call 00403300
:0043CF9C 85C0                    test eax, eax
:0043CF9E 743A                    je 0043CFDA
:0043CFA0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043CFA3 33D2                    xor edx, edx
:0043CFA5 8A11                    mov dl, byte ptr [ecx]
:0043CFA7 8BCA                    mov ecx, edx
:0043CFA9 6BC924                  imul ecx, 00000024
:0043CFAC 81C1B83B4B00            add ecx, 004B3BB8
:0043CFB2 E84963FCFF              call 00403300
:0043CFB7 83E801                  sub eax, 00000001
:0043CFBA 3B45E8                  cmp eax, dword ptr [ebp-18]
:0043CFBD 731B                    jnb 0043CFDA
:0043CFBF 8B45F0                  mov eax, dword ptr [ebp-10]
:0043CFC2 33C9                    xor ecx, ecx
:0043CFC4 8A08                    mov cl, byte ptr [eax]
:0043CFC6 6BC924                  imul ecx, 00000024
:0043CFC9 81C1B83B4B00            add ecx, 004B3BB8
:0043CFCF E82C63FCFF              call 00403300
:0043CFD4 83E801                  sub eax, 00000001
:0043CFD7 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CF9E(C), :0043CFBD(C)
|
:0043CFDA 8B55F0                  mov edx, dword ptr [ebp-10]
:0043CFDD 33C0                    xor eax, eax
:0043CFDF 8A02                    mov al, byte ptr [edx]
:0043CFE1 8BC8                    mov ecx, eax
:0043CFE3 6BC924                  imul ecx, 00000024
:0043CFE6 81C1B83B4B00            add ecx, 004B3BB8
:0043CFEC E84F4CFFFF              call 00431C40
:0043CFF1 668B08                  mov cx, word ptr [eax]
:0043CFF4 66894DDC                mov word ptr [ebp-24], cx
:0043CFF8 8A55DD                  mov dl, byte ptr [ebp-23]
:0043CFFB 52                      push edx
:0043CFFC 8A45DC                  mov al, byte ptr [ebp-24]
:0043CFFF 50                      push eax
:0043D000 B958494B00              mov ecx, 004B4958
:0043D005 E8E30A0100              call 0044DAED
:0043D00A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043D00D 81E1FF000000            and ecx, 000000FF
:0043D013 85C9                    test ecx, ecx
:0043D015 7421                    je 0043D038
:0043D017 6A01                    push 00000001
:0043D019 8A5510                  mov dl, byte ptr [ebp+10]
:0043D01C 52                      push edx
:0043D01D 8A4508                  mov al, byte ptr [ebp+08]
:0043D020 50                      push eax
:0043D021 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043D024 8A11                    mov dl, byte ptr [ecx]
:0043D026 52                      push edx
:0043D027 68FF000000              push 000000FF
:0043D02C B958494B00              mov ecx, 004B4958
:0043D031 E85A170100              call 0044E790
:0043D036 EB1E                    jmp 0043D056

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D015(C)
|
:0043D038 6A01                    push 00000001
:0043D03A 8A4510                  mov al, byte ptr [ebp+10]
:0043D03D 50                      push eax
:0043D03E 8A4D08                  mov cl, byte ptr [ebp+08]
:0043D041 51                      push ecx
:0043D042 8B55F0                  mov edx, dword ptr [ebp-10]
:0043D045 8A02                    mov al, byte ptr [edx]
:0043D047 50                      push eax
:0043D048 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D04B 51                      push ecx
:0043D04C B958494B00              mov ecx, 004B4958
:0043D051 E83A170100              call 0044E790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D036(U)
|
:0043D056 B978294B00              mov ecx, 004B2978
:0043D05B E850F8FCFF              call 0040C8B0
:0043D060 83E010                  and eax, 00000010
:0043D063 85C0                    test eax, eax
:0043D065 7537                    jne 0043D09E
:0043D067 C645D800                mov [ebp-28], 00
:0043D06B EB09                    jmp 0043D076

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D097(U)
|
:0043D06D 8A55D8                  mov dl, byte ptr [ebp-28]
:0043D070 80C201                  add dl, 01
:0043D073 8855D8                  mov byte ptr [ebp-28], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D06B(U)
|
:0043D076 8B45D8                  mov eax, dword ptr [ebp-28]
:0043D079 25FF000000              and eax, 000000FF
:0043D07E 83F803                  cmp eax, 00000003
:0043D081 7D16                    jge 0043D099
:0043D083 6A0C                    push 0000000C
:0043D085 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043D088 51                      push ecx
:0043D089 8B55F0                  mov edx, dword ptr [ebp-10]
:0043D08C 8A02                    mov al, byte ptr [edx]
:0043D08E 50                      push eax
:0043D08F E877CD0000              call 00449E0B
:0043D094 83C40C                  add esp, 0000000C
:0043D097 EBD4                    jmp 0043D06D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D081(C)
|
:0043D099 E9ED000000              jmp 0043D18B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D065(C)
|
:0043D09E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043D0A1 8A11                    mov dl, byte ptr [ecx]
:0043D0A3 52                      push edx
:0043D0A4 8D45D4                  lea eax, dword ptr [ebp-2C]
:0043D0A7 50                      push eax
:0043D0A8 E8FFCF0000              call 0044A0AC
:0043D0AD 83C408                  add esp, 00000008
:0043D0B0 E870A2FFFF              call 00437325
:0043D0B5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043D0B8 33D2                    xor edx, edx
:0043D0BA 8A11                    mov dl, byte ptr [ecx]
:0043D0BC 8BCA                    mov ecx, edx
:0043D0BE 6BC924                  imul ecx, 00000024
:0043D0C1 81C1B83B4B00            add ecx, 004B3BB8
:0043D0C7 E844F8FCFF              call 0040C910
:0043D0CC 85C0                    test eax, eax
:0043D0CE 7410                    je 0043D0E0
:0043D0D0 33C0                    xor eax, eax
:0043D0D2 A0CC484B00              mov al, byte ptr [004B48CC]
:0043D0D7 8D4C000E                lea ecx, dword ptr [eax+eax+0E]
:0043D0DB 894DC8                  mov dword ptr [ebp-38], ecx
:0043D0DE EB0F                    jmp 0043D0EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D0CE(C)
|
:0043D0E0 33D2                    xor edx, edx
:0043D0E2 8A15CC484B00            mov dl, byte ptr [004B48CC]
:0043D0E8 8D44122A                lea eax, dword ptr [edx+edx+2A]
:0043D0EC 8945C8                  mov dword ptr [ebp-38], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D0DE(U)
|
:0043D0EF 8A4DC8                  mov cl, byte ptr [ebp-38]
:0043D0F2 884DD4                  mov byte ptr [ebp-2C], cl
:0043D0F5 33D2                    xor edx, edx
:0043D0F7 8A159D4E4B00            mov dl, byte ptr [004B4E9D]
:0043D0FD 8D441206                lea eax, dword ptr [edx+edx+06]
:0043D101 50                      push eax
:0043D102 B9A83B4B00              mov ecx, 004B3BA8
:0043D107 E80428FEFF              call 0041F910
:0043D10C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043D10F 8A11                    mov dl, byte ptr [ecx]
:0043D111 52                      push edx
:0043D112 668B45D4                mov ax, word ptr [ebp-2C]
:0043D116 50                      push eax
:0043D117 E83CD00000              call 0044A158
:0043D11C 83C408                  add esp, 00000008
:0043D11F E8AC24FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043D124 6A03                    push 00000003
:0043D126 E80B26FFFF              call 0042F736
:0043D12B 83C404                  add esp, 00000004
:0043D12E 33C9                    xor ecx, ecx
:0043D130 8A0D9D4E4B00            mov cl, byte ptr [004B4E9D]
:0043D136 8D540906                lea edx, dword ptr [ecx+ecx+06]
:0043D13A 52                      push edx
:0043D13B B9A83B4B00              mov ecx, 004B3BA8
:0043D140 E8CB27FEFF              call 0041F910
:0043D145 6A01                    push 00000001
:0043D147 8B45E8                  mov eax, dword ptr [ebp-18]
:0043D14A 50                      push eax
:0043D14B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043D14E 8A11                    mov dl, byte ptr [ecx]
:0043D150 52                      push edx
:0043D151 668B45D4                mov ax, word ptr [ebp-2C]
:0043D155 50                      push eax
:0043D156 E8B7D20000              call 0044A412
:0043D15B 83C410                  add esp, 00000010
:0043D15E E86D24FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043D163 6A03                    push 00000003
:0043D165 E8CC25FFFF              call 0042F736
:0043D16A 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0043D16D 6A09                    push 00000009
:0043D16F 6A21                    push 00000021
:0043D171 8A4DD5                  mov cl, byte ptr [ebp-2B]
:0043D174 51                      push ecx
:0043D175 33D2                    xor edx, edx
:0043D177 8A15CC484B00            mov dl, byte ptr [004B48CC]
:0043D17D 83C206                  add edx, 00000006
:0043D180 52                      push edx
:0043D181 B958494B00              mov ecx, 004B4958
:0043D186 E8BDF70000              call 0044C948

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D099(U)
|
:0043D18B 8B45F0                  mov eax, dword ptr [ebp-10]
:0043D18E 33C9                    xor ecx, ecx
:0043D190 8A08                    mov cl, byte ptr [eax]
:0043D192 6BC924                  imul ecx, 00000024
:0043D195 81C1B83B4B00            add ecx, 004B3BB8
:0043D19B E86061FCFF              call 00403300
:0043D1A0 2B45E8                  sub eax, dword ptr [ebp-18]
:0043D1A3 50                      push eax
:0043D1A4 8B55F0                  mov edx, dword ptr [ebp-10]
:0043D1A7 33C0                    xor eax, eax
:0043D1A9 8A02                    mov al, byte ptr [edx]
:0043D1AB 8BC8                    mov ecx, eax
:0043D1AD 6BC924                  imul ecx, 00000024
:0043D1B0 81C1B83B4B00            add ecx, 004B3BB8
:0043D1B6 E89B60FFFF              call 00433256
:0043D1BB C745FC01000000          mov [ebp-04], 00000001
:0043D1C2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043D1C5 33D2                    xor edx, edx
:0043D1C7 8A11                    mov dl, byte ptr [ecx]
:0043D1C9 8BCA                    mov ecx, edx
:0043D1CB 6BC924                  imul ecx, 00000024
:0043D1CE 81C1B83B4B00            add ecx, 004B3BB8
:0043D1D4 E80798FFFF              call 004369E0
:0043D1D9 50                      push eax
:0043D1DA E83DF90200              call 0046CB1C
:0043D1DF 83C404                  add esp, 00000004
:0043D1E2 8B45F0                  mov eax, dword ptr [ebp-10]
:0043D1E5 83C001                  add eax, 00000001
:0043D1E8 8945F0                  mov dword ptr [ebp-10], eax
:0043D1EB 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043D1EE 80C101                  add cl, 01
:0043D1F1 884DEC                  mov byte ptr [ebp-14], cl
:0043D1F4 E98AFCFFFF              jmp 0043CE83

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043CE90(C)
|
:0043D1F9 837DF800                cmp dword ptr [ebp-08], 00000000
:0043D1FD 7437                    je 0043D236
:0043D1FF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043D202 6BC924                  imul ecx, 00000024
:0043D205 81C1B83B4B00            add ecx, 004B3BB8
:0043D20B E8D097FFFF              call 004369E0
:0043D210 6BC050                  imul eax, 00000050
:0043D213 05787F4900              add eax, 00497F78
:0043D218 8945D0                  mov dword ptr [ebp-30], eax
:0043D21B 6A01                    push 00000001
:0043D21D 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0043D220 E8BB0CFFFF              call 0042DEE0
:0043D225 25FF000000              and eax, 000000FF
:0043D22A 83C00A                  add eax, 0000000A
:0043D22D 50                      push eax
:0043D22E 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0043D231 E87452FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D1FD(C)
|
:0043D236 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043CDD1(U), :0043CE41(U)
|
:0043D240 5E                      pop esi
:0043D241 8BE5                    mov esp, ebp
:0043D243 5D                      pop ebp
:0043D244 C3                      ret



* Referenced by a CALL at Address:
|:0043AFB9   
|
:0043D245 55                      push ebp
:0043D246 8BEC                    mov ebp, esp
:0043D248 83EC20                  sub esp, 00000020
:0043D24B C645FCFF                mov [ebp-04], FF
:0043D24F 8B4508                  mov eax, dword ptr [ebp+08]
:0043D252 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043D254 B906000000              mov ecx, 00000006
:0043D259 F7F1                    div ecx
:0043D25B 8845F4                  mov byte ptr [ebp-0C], al
:0043D25E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D261 6BC931                  imul ecx, 00000031
:0043D264 81C1001D4B00            add ecx, 004B1D00
:0043D26A E81185FCFF              call 00405780
:0043D26F 8845EC                  mov byte ptr [ebp-14], al
:0043D272 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D275 6BC931                  imul ecx, 00000031
:0043D278 81C1001D4B00            add ecx, 004B1D00
:0043D27E E8DD84FCFF              call 00405760
:0043D283 8845F0                  mov byte ptr [ebp-10], al
:0043D286 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043D289 6BC924                  imul ecx, 00000024
:0043D28C 81C1B83B4B00            add ecx, 004B3BB8
:0043D292 E8E984FCFF              call 00405780
:0043D297 25FF000000              and eax, 000000FF
:0043D29C 83F807                  cmp eax, 00000007
:0043D29F 7418                    je 0043D2B9
:0043D2A1 33D2                    xor edx, edx
:0043D2A3 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043D2A9 83E204                  and edx, 00000004
:0043D2AC 85D2                    test edx, edx
:0043D2AE 7509                    jne 0043D2B9
:0043D2B0 C745E000000000          mov [ebp-20], 00000000
:0043D2B7 EB07                    jmp 0043D2C0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D29F(C), :0043D2AE(C)
|
:0043D2B9 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D2B7(U)
|
:0043D2C0 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D2C3 8945F8                  mov dword ptr [ebp-08], eax
:0043D2C6 68FF000000              push 000000FF
:0043D2CB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043D2CE 51                      push ecx
:0043D2CF 8B550C                  mov edx, dword ptr [ebp+0C]
:0043D2D2 52                      push edx
:0043D2D3 8B4508                  mov eax, dword ptr [ebp+08]
:0043D2D6 50                      push eax
:0043D2D7 E8C9A0FFFF              call 004373A5
:0043D2DC 83C410                  add esp, 00000010
:0043D2DF 85C0                    test eax, eax
:0043D2E1 7505                    jne 0043D2E8
:0043D2E3 E973010000              jmp 0043D45B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D2E1(C)
|
:0043D2E8 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043D2EB 51                      push ecx
:0043D2EC E821E3FFFF              call 0043B612
:0043D2F1 83C404                  add esp, 00000004
:0043D2F4 6A00                    push 00000000
:0043D2F6 8B55F0                  mov edx, dword ptr [ebp-10]
:0043D2F9 81E2FF000000            and edx, 000000FF
:0043D2FF 80CA80                  or dl, 80
:0043D302 52                      push edx
:0043D303 8A450C                  mov al, byte ptr [ebp+0C]
:0043D306 50                      push eax
:0043D307 B958494B00              mov ecx, 004B4958
:0043D30C E89D0A0100              call 0044DDAE
:0043D311 8845FC                  mov byte ptr [ebp-04], al
:0043D314 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D317 81E1FF000000            and ecx, 000000FF
:0043D31D 81F9FF000000            cmp ecx, 000000FF
:0043D323 0F8432010000            je 0043D45B
:0043D329 8A55FC                  mov dl, byte ptr [ebp-04]
:0043D32C 52                      push edx
:0043D32D 8A450C                  mov al, byte ptr [ebp+0C]
:0043D330 50                      push eax
:0043D331 E8C0D1FFFF              call 0043A4F6
:0043D336 83C408                  add esp, 00000008
:0043D339 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D33C 81E1FF000000            and ecx, 000000FF
:0043D342 6BC924                  imul ecx, 00000024
:0043D345 81C1B83B4B00            add ecx, 004B3BB8
:0043D34B E8F048FFFF              call 00431C40
:0043D350 668B08                  mov cx, word ptr [eax]
:0043D353 66894DE8                mov word ptr [ebp-18], cx
:0043D357 837DF800                cmp dword ptr [ebp-08], 00000000
:0043D35B 7421                    je 0043D37E
:0043D35D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D360 6BC931                  imul ecx, 00000031
:0043D363 81C1001D4B00            add ecx, 004B1D00
:0043D369 E88283FCFF              call 004056F0
:0043D36E 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043D36F 689CE54700              push 0047E59C
:0043D374 6A00                    push 00000000
:0043D376 E8B840FFFF              call 00431433
:0043D37B 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D35B(C)
|
:0043D37E 6A00                    push 00000000
:0043D380 8A5508                  mov dl, byte ptr [ebp+08]
:0043D383 52                      push edx
:0043D384 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043D387 25FF000000              and eax, 000000FF
:0043D38C C1E004                  shl eax, 04
:0043D38F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043D392 81E1FF000000            and ecx, 000000FF
:0043D398 0BC1                    or eax, ecx
:0043D39A 50                      push eax
:0043D39B 8A5510                  mov dl, byte ptr [ebp+10]
:0043D39E 52                      push edx
:0043D39F 8A45FC                  mov al, byte ptr [ebp-04]
:0043D3A2 50                      push eax
:0043D3A3 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D3A6 51                      push ecx
:0043D3A7 B9E0484B00              mov ecx, 004B48E0
:0043D3AC E8DD6D0000              call 0044418E
:0043D3B1 8B55EC                  mov edx, dword ptr [ebp-14]
:0043D3B4 81E2FF000000            and edx, 000000FF
:0043D3BA 85D2                    test edx, edx
:0043D3BC 0F848F000000            je 0043D451
:0043D3C2 68FF000000              push 000000FF
:0043D3C7 6A11                    push 00000011
:0043D3C9 6868484B00              push 004B4868
:0043D3CE E80DB20300              call 004785E0
:0043D3D3 83C40C                  add esp, 0000000C
:0043D3D6 68FF000000              push 000000FF
:0043D3DB 68FF000000              push 000000FF
:0043D3E0 6A00                    push 00000000
:0043D3E2 6868484B00              push 004B4868
:0043D3E7 8A45EC                  mov al, byte ptr [ebp-14]
:0043D3EA 50                      push eax
:0043D3EB 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043D3EE 51                      push ecx
:0043D3EF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043D3F2 6BC924                  imul ecx, 00000024
:0043D3F5 81C1B83B4B00            add ecx, 004B3BB8
:0043D3FB E863900100              call 00456463
:0043D400 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D44F(U)
|
:0043D403 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043D406 33C0                    xor eax, eax
:0043D408 8A02                    mov al, byte ptr [edx]
:0043D40A 3DFF000000              cmp eax, 000000FF
:0043D40F 7440                    je 0043D451
:0043D411 6A01                    push 00000001
:0043D413 8A4D08                  mov cl, byte ptr [ebp+08]
:0043D416 51                      push ecx
:0043D417 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043D41A 81E2FF000000            and edx, 000000FF
:0043D420 C1E204                  shl edx, 04
:0043D423 8B45F0                  mov eax, dword ptr [ebp-10]
:0043D426 25FF000000              and eax, 000000FF
:0043D42B 0BD0                    or edx, eax
:0043D42D 52                      push edx
:0043D42E 8A4D10                  mov cl, byte ptr [ebp+10]
:0043D431 51                      push ecx
:0043D432 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043D435 8A02                    mov al, byte ptr [edx]
:0043D437 50                      push eax
:0043D438 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D43B 51                      push ecx
:0043D43C B9E0484B00              mov ecx, 004B48E0
:0043D441 E8486D0000              call 0044418E
:0043D446 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043D449 83C201                  add edx, 00000001
:0043D44C 8955E4                  mov dword ptr [ebp-1C], edx
:0043D44F EBB2                    jmp 0043D403

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D3BC(C), :0043D40F(C)
|
:0043D451 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D2E3(U), :0043D323(C)
|
:0043D45B 8BE5                    mov esp, ebp
:0043D45D 5D                      pop ebp
:0043D45E C3                      ret



* Referenced by a CALL at Address:
|:0043AFDB   
|
:0043D45F 55                      push ebp
:0043D460 8BEC                    mov ebp, esp
:0043D462 83EC20                  sub esp, 00000020
:0043D465 C645F8FF                mov [ebp-08], FF
:0043D469 8B4508                  mov eax, dword ptr [ebp+08]
:0043D46C 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043D46E B906000000              mov ecx, 00000006
:0043D473 F7F1                    div ecx
:0043D475 8845F0                  mov byte ptr [ebp-10], al
:0043D478 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D47B 6BC931                  imul ecx, 00000031
:0043D47E 81C1001D4B00            add ecx, 004B1D00
:0043D484 E8F782FCFF              call 00405780
:0043D489 8845E8                  mov byte ptr [ebp-18], al
:0043D48C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D48F 6BC931                  imul ecx, 00000031
:0043D492 81C1001D4B00            add ecx, 004B1D00
:0043D498 E8C382FCFF              call 00405760
:0043D49D 8845EC                  mov byte ptr [ebp-14], al
:0043D4A0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043D4A3 6BC924                  imul ecx, 00000024
:0043D4A6 81C1B83B4B00            add ecx, 004B3BB8
:0043D4AC E8CF82FCFF              call 00405780
:0043D4B1 25FF000000              and eax, 000000FF
:0043D4B6 83F807                  cmp eax, 00000007
:0043D4B9 7418                    je 0043D4D3
:0043D4BB 33D2                    xor edx, edx
:0043D4BD 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043D4C3 83E204                  and edx, 00000004
:0043D4C6 85D2                    test edx, edx
:0043D4C8 7509                    jne 0043D4D3
:0043D4CA C745E000000000          mov [ebp-20], 00000000
:0043D4D1 EB07                    jmp 0043D4DA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D4B9(C), :0043D4C8(C)
|
:0043D4D3 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D4D1(U)
|
:0043D4DA 8B45E0                  mov eax, dword ptr [ebp-20]
:0043D4DD 8945F4                  mov dword ptr [ebp-0C], eax
:0043D4E0 68FF000000              push 000000FF
:0043D4E5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043D4E8 51                      push ecx
:0043D4E9 8B550C                  mov edx, dword ptr [ebp+0C]
:0043D4EC 52                      push edx
:0043D4ED 8B4508                  mov eax, dword ptr [ebp+08]
:0043D4F0 50                      push eax
:0043D4F1 E8AF9EFFFF              call 004373A5
:0043D4F6 83C410                  add esp, 00000010
:0043D4F9 85C0                    test eax, eax
:0043D4FB 7505                    jne 0043D502
:0043D4FD E934010000              jmp 0043D636

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D4FB(C)
|
:0043D502 6A18                    push 00000018
:0043D504 6A27                    push 00000027
:0043D506 6A00                    push 00000000
:0043D508 6A00                    push 00000000
:0043D50A B958494B00              mov ecx, 004B4958
:0043D50F E834F40000              call 0044C948
:0043D514 C745FC00000000          mov [ebp-04], 00000000
:0043D51B EB09                    jmp 0043D526

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D631(U)
|
:0043D51D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D520 83C101                  add ecx, 00000001
:0043D523 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D51B(U)
|
:0043D526 837DFC02                cmp dword ptr [ebp-04], 00000002
:0043D52A 0F8306010000            jnb 0043D636
:0043D530 8A55E8                  mov dl, byte ptr [ebp-18]
:0043D533 52                      push edx
:0043D534 E8D9E0FFFF              call 0043B612
:0043D539 83C404                  add esp, 00000004
:0043D53C 6A00                    push 00000000
:0043D53E 8B45EC                  mov eax, dword ptr [ebp-14]
:0043D541 25FF000000              and eax, 000000FF
:0043D546 0C80                    or al, 80
:0043D548 50                      push eax
:0043D549 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D54C 51                      push ecx
:0043D54D B958494B00              mov ecx, 004B4958
:0043D552 E857080100              call 0044DDAE
:0043D557 8845F8                  mov byte ptr [ebp-08], al
:0043D55A 8B55F8                  mov edx, dword ptr [ebp-08]
:0043D55D 81E2FF000000            and edx, 000000FF
:0043D563 81FAFF000000            cmp edx, 000000FF
:0043D569 0F84C0000000            je 0043D62F
:0043D56F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043D572 81E1FF000000            and ecx, 000000FF
:0043D578 6BC924                  imul ecx, 00000024
:0043D57B 81C1B83B4B00            add ecx, 004B3BB8
:0043D581 E84AEB0100              call 0045C0D0
:0043D586 25FF000000              and eax, 000000FF
:0043D58B 83F802                  cmp eax, 00000002
:0043D58E 0F8599000000            jne 0043D62D
:0043D594 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043D598 7427                    je 0043D5C1
:0043D59A 837DFC00                cmp dword ptr [ebp-04], 00000000
:0043D59E 7521                    jne 0043D5C1
:0043D5A0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D5A3 6BC931                  imul ecx, 00000031
:0043D5A6 81C1001D4B00            add ecx, 004B1D00
:0043D5AC E83F81FCFF              call 004056F0
:0043D5B1 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043D5B2 68A0E54700              push 0047E5A0
:0043D5B7 6A00                    push 00000000
:0043D5B9 E8753EFFFF              call 00431433
:0043D5BE 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D598(C), :0043D59E(C)
|
:0043D5C1 8A45F8                  mov al, byte ptr [ebp-08]
:0043D5C4 50                      push eax
:0043D5C5 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D5C8 51                      push ecx
:0043D5C9 E828CFFFFF              call 0043A4F6
:0043D5CE 83C408                  add esp, 00000008
:0043D5D1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043D5D4 81E1FF000000            and ecx, 000000FF
:0043D5DA 6BC924                  imul ecx, 00000024
:0043D5DD 81C1B83B4B00            add ecx, 004B3BB8
:0043D5E3 E85846FFFF              call 00431C40
:0043D5E8 668B10                  mov dx, word ptr [eax]
:0043D5EB 668955E4                mov word ptr [ebp-1C], dx
:0043D5EF 6A00                    push 00000000
:0043D5F1 8A4508                  mov al, byte ptr [ebp+08]
:0043D5F4 50                      push eax
:0043D5F5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043D5F8 81E1FF000000            and ecx, 000000FF
:0043D5FE C1E104                  shl ecx, 04
:0043D601 8B55EC                  mov edx, dword ptr [ebp-14]
:0043D604 81E2FF000000            and edx, 000000FF
:0043D60A 0BCA                    or ecx, edx
:0043D60C 51                      push ecx
:0043D60D 8A4510                  mov al, byte ptr [ebp+10]
:0043D610 50                      push eax
:0043D611 8A4DF8                  mov cl, byte ptr [ebp-08]
:0043D614 51                      push ecx
:0043D615 8A550C                  mov dl, byte ptr [ebp+0C]
:0043D618 52                      push edx
:0043D619 B9E0484B00              mov ecx, 004B48E0
:0043D61E E86B6B0000              call 0044418E
:0043D623 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D58E(C)
|
:0043D62D EB02                    jmp 0043D631

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D569(C)
|
:0043D62F EB05                    jmp 0043D636

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D62D(U)
|
:0043D631 E9E7FEFFFF              jmp 0043D51D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D4FD(U), :0043D52A(C), :0043D62F(U)
|
:0043D636 8BE5                    mov esp, ebp
:0043D638 5D                      pop ebp
:0043D639 C3                      ret



* Referenced by a CALL at Address:
|:0043AFFD   
|
:0043D63A 55                      push ebp
:0043D63B 8BEC                    mov ebp, esp
:0043D63D 83EC24                  sub esp, 00000024
:0043D640 C645FCFF                mov [ebp-04], FF
:0043D644 8B4508                  mov eax, dword ptr [ebp+08]
:0043D647 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043D649 B906000000              mov ecx, 00000006
:0043D64E F7F1                    div ecx
:0043D650 8845F4                  mov byte ptr [ebp-0C], al
:0043D653 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D656 6BC931                  imul ecx, 00000031
:0043D659 81C1001D4B00            add ecx, 004B1D00
:0043D65F E81C81FCFF              call 00405780
:0043D664 8845EC                  mov byte ptr [ebp-14], al
:0043D667 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D66A 6BC931                  imul ecx, 00000031
:0043D66D 81C1001D4B00            add ecx, 004B1D00
:0043D673 E8E880FCFF              call 00405760
:0043D678 8845F0                  mov byte ptr [ebp-10], al
:0043D67B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043D67E 6BC924                  imul ecx, 00000024
:0043D681 81C1B83B4B00            add ecx, 004B3BB8
:0043D687 E8F480FCFF              call 00405780
:0043D68C 25FF000000              and eax, 000000FF
:0043D691 83F807                  cmp eax, 00000007
:0043D694 7418                    je 0043D6AE
:0043D696 33D2                    xor edx, edx
:0043D698 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043D69E 83E204                  and edx, 00000004
:0043D6A1 85D2                    test edx, edx
:0043D6A3 7509                    jne 0043D6AE
:0043D6A5 C745DC00000000          mov [ebp-24], 00000000
:0043D6AC EB07                    jmp 0043D6B5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D694(C), :0043D6A3(C)
|
:0043D6AE C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D6AC(U)
|
:0043D6B5 8B45DC                  mov eax, dword ptr [ebp-24]
:0043D6B8 8945F8                  mov dword ptr [ebp-08], eax
:0043D6BB 68FF000000              push 000000FF
:0043D6C0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043D6C3 51                      push ecx
:0043D6C4 8B550C                  mov edx, dword ptr [ebp+0C]
:0043D6C7 52                      push edx
:0043D6C8 8B4508                  mov eax, dword ptr [ebp+08]
:0043D6CB 50                      push eax
:0043D6CC E8D49CFFFF              call 004373A5
:0043D6D1 83C410                  add esp, 00000010
:0043D6D4 85C0                    test eax, eax
:0043D6D6 7505                    jne 0043D6DD
:0043D6D8 E915020000              jmp 0043D8F2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D6D6(C), :0043D77B(U)
|
:0043D6DD 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043D6E0 51                      push ecx
:0043D6E1 E82CDFFFFF              call 0043B612
:0043D6E6 83C404                  add esp, 00000004
:0043D6E9 6A00                    push 00000000
:0043D6EB 8B55F0                  mov edx, dword ptr [ebp-10]
:0043D6EE 81E2FF000000            and edx, 000000FF
:0043D6F4 80CA80                  or dl, 80
:0043D6F7 52                      push edx
:0043D6F8 8A450C                  mov al, byte ptr [ebp+0C]
:0043D6FB 50                      push eax
:0043D6FC B958494B00              mov ecx, 004B4958
:0043D701 E8A8060100              call 0044DDAE
:0043D706 8845FC                  mov byte ptr [ebp-04], al
:0043D709 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D70C 81E1FF000000            and ecx, 000000FF
:0043D712 81F9FF000000            cmp ecx, 000000FF
:0043D718 0F84D4010000            je 0043D8F2
:0043D71E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D721 81E1FF000000            and ecx, 000000FF
:0043D727 6BC924                  imul ecx, 00000024
:0043D72A 81C1B83B4B00            add ecx, 004B3BB8
:0043D730 E8BB93FFFF              call 00436AF0
:0043D735 25FF000000              and eax, 000000FF
:0043D73A 83F803                  cmp eax, 00000003
:0043D73D 7441                    je 0043D780
:0043D73F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D742 81E1FF000000            and ecx, 000000FF
:0043D748 6BC924                  imul ecx, 00000024
:0043D74B 81C1B83B4B00            add ecx, 004B3BB8
:0043D751 E89A93FFFF              call 00436AF0
:0043D756 25FF000000              and eax, 000000FF
:0043D75B 83F804                  cmp eax, 00000004
:0043D75E 7420                    je 0043D780

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043D760 6A07                    push 00000007
:0043D762 B9F8544B00              mov ecx, 004B54F8
:0043D767 E8AEBD0200              call 0046951A

* Possible StringData Ref from Data Obj ->"MLH"
                                  |
:0043D76C 68A4E54700              push 0047E5A4
:0043D771 6A00                    push 00000000
:0043D773 E8BB3CFFFF              call 00431433
:0043D778 83C408                  add esp, 00000008
:0043D77B E95DFFFFFF              jmp 0043D6DD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D73D(C), :0043D75E(C)
|
:0043D780 8A55FC                  mov dl, byte ptr [ebp-04]
:0043D783 52                      push edx
:0043D784 8A450C                  mov al, byte ptr [ebp+0C]
:0043D787 50                      push eax
:0043D788 E8C99BFFFF              call 00437356
:0043D78D 83C408                  add esp, 00000008
:0043D790 85C0                    test eax, eax
:0043D792 0F84DC000000            je 0043D874
:0043D798 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043D79B 51                      push ecx
:0043D79C 8A550C                  mov dl, byte ptr [ebp+0C]
:0043D79F 52                      push edx
:0043D7A0 E851CDFFFF              call 0043A4F6
:0043D7A5 83C408                  add esp, 00000008
:0043D7A8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D7AB 81E1FF000000            and ecx, 000000FF
:0043D7B1 6BC924                  imul ecx, 00000024
:0043D7B4 81C1B83B4B00            add ecx, 004B3BB8
:0043D7BA E88144FFFF              call 00431C40
:0043D7BF 668B00                  mov ax, word ptr [eax]
:0043D7C2 668945E8                mov word ptr [ebp-18], ax
:0043D7C6 837DF800                cmp dword ptr [ebp-08], 00000000
:0043D7CA 7421                    je 0043D7ED
:0043D7CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D7CF 6BC931                  imul ecx, 00000031
:0043D7D2 81C1001D4B00            add ecx, 004B1D00
:0043D7D8 E8137FFCFF              call 004056F0
:0043D7DD 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043D7DE 68B8E54700              push 0047E5B8
:0043D7E3 6A00                    push 00000000
:0043D7E5 E8493CFFFF              call 00431433
:0043D7EA 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D7CA(C)
|
:0043D7ED 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D7F0 81E1FF000000            and ecx, 000000FF
:0043D7F6 6BC924                  imul ecx, 00000024
:0043D7F9 81C1B83B4B00            add ecx, 004B3BB8
:0043D7FF E83C44FFFF              call 00431C40
:0043D804 668B08                  mov cx, word ptr [eax]
:0043D807 66894DE4                mov word ptr [ebp-1C], cx
:0043D80B 8A55E5                  mov dl, byte ptr [ebp-1B]
:0043D80E 52                      push edx
:0043D80F 8A45E4                  mov al, byte ptr [ebp-1C]
:0043D812 50                      push eax
:0043D813 B958494B00              mov ecx, 004B4958
:0043D818 E8D0020100              call 0044DAED
:0043D81D 6A01                    push 00000001
:0043D81F 8A4D10                  mov cl, byte ptr [ebp+10]
:0043D822 51                      push ecx
:0043D823 8A5508                  mov dl, byte ptr [ebp+08]
:0043D826 52                      push edx
:0043D827 8A45FC                  mov al, byte ptr [ebp-04]
:0043D82A 50                      push eax
:0043D82B 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043D82E 51                      push ecx
:0043D82F B958494B00              mov ecx, 004B4958
:0043D834 E8570F0100              call 0044E790
:0043D839 6A41                    push 00000041
:0043D83B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D83E 81E1FF000000            and ecx, 000000FF
:0043D844 6BC924                  imul ecx, 00000024
:0043D847 81C1B83B4B00            add ecx, 004B3BB8
:0043D84D E86E470000              call 00441FC0
:0043D852 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D855 81E1FF000000            and ecx, 000000FF
:0043D85B 6BC924                  imul ecx, 00000024
:0043D85E 81C1B83B4B00            add ecx, 004B3BB8
:0043D864 E87791FFFF              call 004369E0
:0043D869 50                      push eax
:0043D86A E8ADF20200              call 0046CB1C
:0043D86F 83C404                  add esp, 00000004
:0043D872 EB37                    jmp 0043D8AB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D792(C)
|
:0043D874 6A00                    push 00000000
:0043D876 8A5510                  mov dl, byte ptr [ebp+10]
:0043D879 52                      push edx
:0043D87A 8A4508                  mov al, byte ptr [ebp+08]
:0043D87D 50                      push eax
:0043D87E 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043D881 51                      push ecx
:0043D882 8A550C                  mov dl, byte ptr [ebp+0C]
:0043D885 52                      push edx
:0043D886 B958494B00              mov ecx, 004B4958
:0043D88B E8000F0100              call 0044E790

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043D890 6A07                    push 00000007
:0043D892 B9F8544B00              mov ecx, 004B54F8
:0043D897 E87EBC0200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۥѤF"
                                  |
:0043D89C 68BCE54700              push 0047E5BC
:0043D8A1 6A00                    push 00000000
:0043D8A3 E88B3BFFFF              call 00431433
:0043D8A8 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D872(U)
|
:0043D8AB 837DF800                cmp dword ptr [ebp-08], 00000000
:0043D8AF 7437                    je 0043D8E8
:0043D8B1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043D8B4 6BC924                  imul ecx, 00000024
:0043D8B7 81C1B83B4B00            add ecx, 004B3BB8
:0043D8BD E81E91FFFF              call 004369E0
:0043D8C2 6BC050                  imul eax, 00000050
:0043D8C5 05787F4900              add eax, 00497F78
:0043D8CA 8945E0                  mov dword ptr [ebp-20], eax
:0043D8CD 6A01                    push 00000001
:0043D8CF 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D8D2 E80906FFFF              call 0042DEE0
:0043D8D7 25FF000000              and eax, 000000FF
:0043D8DC 83C014                  add eax, 00000014
:0043D8DF 50                      push eax
:0043D8E0 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043D8E3 E8C24BFCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D8AF(C)
|
:0043D8E8 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D6D8(U), :0043D718(C)
|
:0043D8F2 8BE5                    mov esp, ebp
:0043D8F4 5D                      pop ebp
:0043D8F5 C3                      ret



* Referenced by a CALL at Address:
|:0043B01F   
|
:0043D8F6 55                      push ebp
:0043D8F7 8BEC                    mov ebp, esp
:0043D8F9 83EC28                  sub esp, 00000028
:0043D8FC C645FCFF                mov [ebp-04], FF
:0043D900 8B4508                  mov eax, dword ptr [ebp+08]
:0043D903 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043D905 B906000000              mov ecx, 00000006
:0043D90A F7F1                    div ecx
:0043D90C 8845F4                  mov byte ptr [ebp-0C], al
:0043D90F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D912 6BC931                  imul ecx, 00000031
:0043D915 81C1001D4B00            add ecx, 004B1D00
:0043D91B E8607EFCFF              call 00405780
:0043D920 8845EC                  mov byte ptr [ebp-14], al
:0043D923 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043D926 6BC931                  imul ecx, 00000031
:0043D929 81C1001D4B00            add ecx, 004B1D00
:0043D92F E82C7EFCFF              call 00405760
:0043D934 8845F0                  mov byte ptr [ebp-10], al
:0043D937 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043D93A 6BC924                  imul ecx, 00000024
:0043D93D 81C1B83B4B00            add ecx, 004B3BB8
:0043D943 E8387EFCFF              call 00405780
:0043D948 25FF000000              and eax, 000000FF
:0043D94D 83F807                  cmp eax, 00000007
:0043D950 7418                    je 0043D96A
:0043D952 33D2                    xor edx, edx
:0043D954 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043D95A 83E204                  and edx, 00000004
:0043D95D 85D2                    test edx, edx
:0043D95F 7509                    jne 0043D96A
:0043D961 C745D800000000          mov [ebp-28], 00000000
:0043D968 EB07                    jmp 0043D971

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D950(C), :0043D95F(C)
|
:0043D96A C745D801000000          mov [ebp-28], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043D968(U)
|
:0043D971 8B45D8                  mov eax, dword ptr [ebp-28]
:0043D974 8945F8                  mov dword ptr [ebp-08], eax
:0043D977 68FF000000              push 000000FF
:0043D97C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043D97F 51                      push ecx
:0043D980 8B550C                  mov edx, dword ptr [ebp+0C]
:0043D983 52                      push edx
:0043D984 8B4508                  mov eax, dword ptr [ebp+08]
:0043D987 50                      push eax
:0043D988 E8189AFFFF              call 004373A5
:0043D98D 83C410                  add esp, 00000010
:0043D990 85C0                    test eax, eax
:0043D992 7505                    jne 0043D999
:0043D994 E92D020000              jmp 0043DBC6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D992(C), :0043DA1F(U)
|
:0043D999 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043D99C 51                      push ecx
:0043D99D E870DCFFFF              call 0043B612
:0043D9A2 83C404                  add esp, 00000004
:0043D9A5 6A00                    push 00000000
:0043D9A7 8B55F0                  mov edx, dword ptr [ebp-10]
:0043D9AA 81E2FF000000            and edx, 000000FF
:0043D9B0 80CA80                  or dl, 80
:0043D9B3 52                      push edx
:0043D9B4 8A450C                  mov al, byte ptr [ebp+0C]
:0043D9B7 50                      push eax
:0043D9B8 B958494B00              mov ecx, 004B4958
:0043D9BD E8EC030100              call 0044DDAE
:0043D9C2 8845FC                  mov byte ptr [ebp-04], al
:0043D9C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D9C8 81E1FF000000            and ecx, 000000FF
:0043D9CE 81F9FF000000            cmp ecx, 000000FF
:0043D9D4 0F84EC010000            je 0043DBC6
:0043D9DA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043D9DD 81E1FF000000            and ecx, 000000FF
:0043D9E3 6BC924                  imul ecx, 00000024
:0043D9E6 81C1B83B4B00            add ecx, 004B3BB8
:0043D9EC E84F42FFFF              call 00431C40
:0043D9F1 50                      push eax
:0043D9F2 E8611E0100              call 0044F858
:0043D9F7 83C404                  add esp, 00000004
:0043D9FA 25FF000000              and eax, 000000FF
:0043D9FF 83F80A                  cmp eax, 0000000A
:0043DA02 7420                    je 0043DA24

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043DA04 6A07                    push 00000007
:0043DA06 B9F8544B00              mov ecx, 004B54F8
:0043DA0B E80ABB0200              call 0046951A

* Possible StringData Ref from Data Obj ->"ĤHb̮ɵLk"
                                  |
:0043DA10 68C8E54700              push 0047E5C8
:0043DA15 6A00                    push 00000000
:0043DA17 E8173AFFFF              call 00431433
:0043DA1C 83C408                  add esp, 00000008
:0043DA1F E975FFFFFF              jmp 0043D999

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DA02(C)
|
:0043DA24 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DA27 81E1FF000000            and ecx, 000000FF
:0043DA2D 6BC924                  imul ecx, 00000024
:0043DA30 81C1B83B4B00            add ecx, 004B3BB8
:0043DA36 E80542FFFF              call 00431C40
:0043DA3B 668B10                  mov dx, word ptr [eax]
:0043DA3E 668955E8                mov word ptr [ebp-18], dx
:0043DA42 8A45E9                  mov al, byte ptr [ebp-17]
:0043DA45 50                      push eax
:0043DA46 8A4DE8                  mov cl, byte ptr [ebp-18]
:0043DA49 51                      push ecx
:0043DA4A B958494B00              mov ecx, 004B4958
:0043DA4F E899000100              call 0044DAED
:0043DA54 8A55FC                  mov dl, byte ptr [ebp-04]
:0043DA57 52                      push edx
:0043DA58 8A450C                  mov al, byte ptr [ebp+0C]
:0043DA5B 50                      push eax
:0043DA5C E8F598FFFF              call 00437356
:0043DA61 83C408                  add esp, 00000008
:0043DA64 85C0                    test eax, eax
:0043DA66 0F84DC000000            je 0043DB48
:0043DA6C 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043DA6F 51                      push ecx
:0043DA70 8A550C                  mov dl, byte ptr [ebp+0C]
:0043DA73 52                      push edx
:0043DA74 E87DCAFFFF              call 0043A4F6
:0043DA79 83C408                  add esp, 00000008
:0043DA7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DA7F 81E1FF000000            and ecx, 000000FF
:0043DA85 6BC924                  imul ecx, 00000024
:0043DA88 81C1B83B4B00            add ecx, 004B3BB8
:0043DA8E E8AD41FFFF              call 00431C40
:0043DA93 668B00                  mov ax, word ptr [eax]
:0043DA96 668945E4                mov word ptr [ebp-1C], ax
:0043DA9A 837DF800                cmp dword ptr [ebp-08], 00000000
:0043DA9E 7421                    je 0043DAC1
:0043DAA0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DAA3 6BC931                  imul ecx, 00000031
:0043DAA6 81C1001D4B00            add ecx, 004B1D00
:0043DAAC E83F7CFCFF              call 004056F0
:0043DAB1 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043DAB2 68E0E54700              push 0047E5E0
:0043DAB7 6A00                    push 00000000
:0043DAB9 E87539FFFF              call 00431433
:0043DABE 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DA9E(C)
|
:0043DAC1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DAC4 81E1FF000000            and ecx, 000000FF
:0043DACA 6BC924                  imul ecx, 00000024
:0043DACD 81C1B83B4B00            add ecx, 004B3BB8
:0043DAD3 E86841FFFF              call 00431C40
:0043DAD8 668B08                  mov cx, word ptr [eax]
:0043DADB 66894DE0                mov word ptr [ebp-20], cx
:0043DADF 8A55E1                  mov dl, byte ptr [ebp-1F]
:0043DAE2 52                      push edx
:0043DAE3 8A45E0                  mov al, byte ptr [ebp-20]
:0043DAE6 50                      push eax
:0043DAE7 B958494B00              mov ecx, 004B4958
:0043DAEC E8FCFF0000              call 0044DAED
:0043DAF1 6A01                    push 00000001
:0043DAF3 8A4D10                  mov cl, byte ptr [ebp+10]
:0043DAF6 51                      push ecx
:0043DAF7 8A5508                  mov dl, byte ptr [ebp+08]
:0043DAFA 52                      push edx
:0043DAFB 8A45FC                  mov al, byte ptr [ebp-04]
:0043DAFE 50                      push eax
:0043DAFF 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043DB02 51                      push ecx
:0043DB03 B958494B00              mov ecx, 004B4958
:0043DB08 E8830C0100              call 0044E790
:0043DB0D 6A41                    push 00000041
:0043DB0F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DB12 81E1FF000000            and ecx, 000000FF
:0043DB18 6BC924                  imul ecx, 00000024
:0043DB1B 81C1B83B4B00            add ecx, 004B3BB8
:0043DB21 E89A440000              call 00441FC0
:0043DB26 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DB29 81E1FF000000            and ecx, 000000FF
:0043DB2F 6BC924                  imul ecx, 00000024
:0043DB32 81C1B83B4B00            add ecx, 004B3BB8
:0043DB38 E8A38EFFFF              call 004369E0
:0043DB3D 50                      push eax
:0043DB3E E8D9EF0200              call 0046CB1C
:0043DB43 83C404                  add esp, 00000004
:0043DB46 EB37                    jmp 0043DB7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DA66(C)
|
:0043DB48 6A00                    push 00000000
:0043DB4A 8A5510                  mov dl, byte ptr [ebp+10]
:0043DB4D 52                      push edx
:0043DB4E 8A4508                  mov al, byte ptr [ebp+08]
:0043DB51 50                      push eax
:0043DB52 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043DB55 51                      push ecx
:0043DB56 8A550C                  mov dl, byte ptr [ebp+0C]
:0043DB59 52                      push edx
:0043DB5A B958494B00              mov ecx, 004B4958
:0043DB5F E82C0C0100              call 0044E790

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043DB64 6A07                    push 00000007
:0043DB66 B9F8544B00              mov ecx, 004B54F8
:0043DB6B E8AAB90200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۥѤF"
                                  |
:0043DB70 68E4E54700              push 0047E5E4
:0043DB75 6A00                    push 00000000
:0043DB77 E8B738FFFF              call 00431433
:0043DB7C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DB46(U)
|
:0043DB7F 837DF800                cmp dword ptr [ebp-08], 00000000
:0043DB83 7437                    je 0043DBBC
:0043DB85 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043DB88 6BC924                  imul ecx, 00000024
:0043DB8B 81C1B83B4B00            add ecx, 004B3BB8
:0043DB91 E84A8EFFFF              call 004369E0
:0043DB96 6BC050                  imul eax, 00000050
:0043DB99 05787F4900              add eax, 00497F78
:0043DB9E 8945DC                  mov dword ptr [ebp-24], eax
:0043DBA1 6A01                    push 00000001
:0043DBA3 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043DBA6 E83503FFFF              call 0042DEE0
:0043DBAB 25FF000000              and eax, 000000FF
:0043DBB0 83C014                  add eax, 00000014
:0043DBB3 50                      push eax
:0043DBB4 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043DBB7 E8EE48FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DB83(C)
|
:0043DBBC C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043D994(U), :0043D9D4(C)
|
:0043DBC6 8BE5                    mov esp, ebp
:0043DBC8 5D                      pop ebp
:0043DBC9 C3                      ret



* Referenced by a CALL at Address:
|:0043B041   
|
:0043DBCA 55                      push ebp
:0043DBCB 8BEC                    mov ebp, esp
:0043DBCD 83EC28                  sub esp, 00000028
:0043DBD0 C645FCFF                mov [ebp-04], FF
:0043DBD4 8B4508                  mov eax, dword ptr [ebp+08]
:0043DBD7 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043DBD9 B906000000              mov ecx, 00000006
:0043DBDE F7F1                    div ecx
:0043DBE0 8845F4                  mov byte ptr [ebp-0C], al
:0043DBE3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DBE6 6BC931                  imul ecx, 00000031
:0043DBE9 81C1001D4B00            add ecx, 004B1D00
:0043DBEF E88C7BFCFF              call 00405780
:0043DBF4 8845EC                  mov byte ptr [ebp-14], al
:0043DBF7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DBFA 6BC931                  imul ecx, 00000031
:0043DBFD 81C1001D4B00            add ecx, 004B1D00
:0043DC03 E8587BFCFF              call 00405760
:0043DC08 8845F0                  mov byte ptr [ebp-10], al
:0043DC0B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043DC0E 6BC924                  imul ecx, 00000024
:0043DC11 81C1B83B4B00            add ecx, 004B3BB8
:0043DC17 E8647BFCFF              call 00405780
:0043DC1C 25FF000000              and eax, 000000FF
:0043DC21 83F807                  cmp eax, 00000007
:0043DC24 7418                    je 0043DC3E
:0043DC26 33D2                    xor edx, edx
:0043DC28 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043DC2E 83E204                  and edx, 00000004
:0043DC31 85D2                    test edx, edx
:0043DC33 7509                    jne 0043DC3E
:0043DC35 C745D800000000          mov [ebp-28], 00000000
:0043DC3C EB07                    jmp 0043DC45

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043DC24(C), :0043DC33(C)
|
:0043DC3E C745D801000000          mov [ebp-28], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DC3C(U)
|
:0043DC45 8B45D8                  mov eax, dword ptr [ebp-28]
:0043DC48 8945F8                  mov dword ptr [ebp-08], eax
:0043DC4B 68FF000000              push 000000FF
:0043DC50 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043DC53 51                      push ecx
:0043DC54 8B550C                  mov edx, dword ptr [ebp+0C]
:0043DC57 52                      push edx
:0043DC58 8B4508                  mov eax, dword ptr [ebp+08]
:0043DC5B 50                      push eax
:0043DC5C E84497FFFF              call 004373A5
:0043DC61 83C410                  add esp, 00000010
:0043DC64 85C0                    test eax, eax
:0043DC66 7505                    jne 0043DC6D
:0043DC68 E9B4020000              jmp 0043DF21

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DC66(C)
|
:0043DC6D 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043DC70 51                      push ecx
:0043DC71 E89CD9FFFF              call 0043B612
:0043DC76 83C404                  add esp, 00000004
:0043DC79 6A00                    push 00000000
:0043DC7B 8B55F0                  mov edx, dword ptr [ebp-10]
:0043DC7E 81E2FF000000            and edx, 000000FF
:0043DC84 80CA80                  or dl, 80
:0043DC87 52                      push edx
:0043DC88 8A450C                  mov al, byte ptr [ebp+0C]
:0043DC8B 50                      push eax
:0043DC8C B958494B00              mov ecx, 004B4958
:0043DC91 E818010100              call 0044DDAE
:0043DC96 8845FC                  mov byte ptr [ebp-04], al
:0043DC99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DC9C 81E1FF000000            and ecx, 000000FF
:0043DCA2 81F9FF000000            cmp ecx, 000000FF
:0043DCA8 0F8473020000            je 0043DF21
:0043DCAE 8A55FC                  mov dl, byte ptr [ebp-04]
:0043DCB1 52                      push edx
:0043DCB2 8A450C                  mov al, byte ptr [ebp+0C]
:0043DCB5 50                      push eax
:0043DCB6 E83BC8FFFF              call 0043A4F6
:0043DCBB 83C408                  add esp, 00000008
:0043DCBE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DCC1 81E1FF000000            and ecx, 000000FF
:0043DCC7 6BC924                  imul ecx, 00000024
:0043DCCA 81C1B83B4B00            add ecx, 004B3BB8
:0043DCD0 E86B3FFFFF              call 00431C40
:0043DCD5 668B08                  mov cx, word ptr [eax]
:0043DCD8 66894DE8                mov word ptr [ebp-18], cx
:0043DCDC 837DF800                cmp dword ptr [ebp-08], 00000000
:0043DCE0 7421                    je 0043DD03
:0043DCE2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DCE5 6BC931                  imul ecx, 00000031
:0043DCE8 81C1001D4B00            add ecx, 004B1D00
:0043DCEE E8FD79FCFF              call 004056F0
:0043DCF3 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043DCF4 68F0E54700              push 0047E5F0
:0043DCF9 6A00                    push 00000000
:0043DCFB E83337FFFF              call 00431433
:0043DD00 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DCE0(C)
|
:0043DD03 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043DD06 81E1FF000000            and ecx, 000000FF
:0043DD0C 6BC924                  imul ecx, 00000024
:0043DD0F 81C1B83B4B00            add ecx, 004B3BB8
:0043DD15 E8263FFFFF              call 00431C40
:0043DD1A 668B10                  mov dx, word ptr [eax]
:0043DD1D 668955E4                mov word ptr [ebp-1C], dx
:0043DD21 8A45E5                  mov al, byte ptr [ebp-1B]
:0043DD24 50                      push eax
:0043DD25 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0043DD28 51                      push ecx
:0043DD29 B958494B00              mov ecx, 004B4958
:0043DD2E E8BAFD0000              call 0044DAED
:0043DD33 8A55FC                  mov dl, byte ptr [ebp-04]
:0043DD36 52                      push edx
:0043DD37 8A450C                  mov al, byte ptr [ebp+0C]
:0043DD3A 50                      push eax
:0043DD3B E81696FFFF              call 00437356
:0043DD40 83C408                  add esp, 00000008
:0043DD43 85C0                    test eax, eax
:0043DD45 0F8458010000            je 0043DEA3
:0043DD4B 6A01                    push 00000001
:0043DD4D 8A4D10                  mov cl, byte ptr [ebp+10]
:0043DD50 51                      push ecx
:0043DD51 8A5508                  mov dl, byte ptr [ebp+08]
:0043DD54 52                      push edx
:0043DD55 8A45FC                  mov al, byte ptr [ebp-04]
:0043DD58 50                      push eax
:0043DD59 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043DD5C 51                      push ecx
:0043DD5D B958494B00              mov ecx, 004B4958
:0043DD62 E8290A0100              call 0044E790
:0043DD67 8B55FC                  mov edx, dword ptr [ebp-04]
:0043DD6A 81E2FF000000            and edx, 000000FF
:0043DD70 52                      push edx
:0043DD71 E8AF010000              call 0043DF25
:0043DD76 83C404                  add esp, 00000004
:0043DD79 8B45FC                  mov eax, dword ptr [ebp-04]
:0043DD7C 25FF000000              and eax, 000000FF
:0043DD81 50                      push eax
:0043DD82 E80E020000              call 0043DF95
:0043DD87 83C404                  add esp, 00000004
:0043DD8A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043DD8D 81E1FF000000            and ecx, 000000FF
:0043DD93 85C9                    test ecx, ecx
:0043DD95 0F8406010000            je 0043DEA1
:0043DD9B 68FF000000              push 000000FF
:0043DDA0 6A11                    push 00000011
:0043DDA2 6868484B00              push 004B4868
:0043DDA7 E834A80300              call 004785E0
:0043DDAC 83C40C                  add esp, 0000000C
:0043DDAF 68FF000000              push 000000FF
:0043DDB4 68FF000000              push 000000FF
:0043DDB9 6A00                    push 00000000
:0043DDBB 6868484B00              push 004B4868
:0043DDC0 8A55EC                  mov dl, byte ptr [ebp-14]
:0043DDC3 52                      push edx
:0043DDC4 8A45FC                  mov al, byte ptr [ebp-04]
:0043DDC7 50                      push eax
:0043DDC8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043DDCB 6BC924                  imul ecx, 00000024
:0043DDCE 81C1B83B4B00            add ecx, 004B3BB8
:0043DDD4 E88A860100              call 00456463
:0043DDD9 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DE9C(U)
|
:0043DDDC 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043DDDF 33D2                    xor edx, edx
:0043DDE1 8A11                    mov dl, byte ptr [ecx]
:0043DDE3 81FAFF000000            cmp edx, 000000FF
:0043DDE9 0F84B2000000            je 0043DEA1
:0043DDEF 8B45E0                  mov eax, dword ptr [ebp-20]
:0043DDF2 33C9                    xor ecx, ecx
:0043DDF4 8A08                    mov cl, byte ptr [eax]
:0043DDF6 6BC924                  imul ecx, 00000024
:0043DDF9 81C1B83B4B00            add ecx, 004B3BB8
:0043DDFF E83C3EFFFF              call 00431C40
:0043DE04 50                      push eax
:0043DE05 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0043DE08 E8938CFFFF              call 00436AA0
:0043DE0D 8A55E5                  mov dl, byte ptr [ebp-1B]
:0043DE10 52                      push edx
:0043DE11 8A45E4                  mov al, byte ptr [ebp-1C]
:0043DE14 50                      push eax
:0043DE15 B958494B00              mov ecx, 004B4958
:0043DE1A E8CEFC0000              call 0044DAED
:0043DE1F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043DE22 8A11                    mov dl, byte ptr [ecx]
:0043DE24 52                      push edx
:0043DE25 8A450C                  mov al, byte ptr [ebp+0C]
:0043DE28 50                      push eax
:0043DE29 E82895FFFF              call 00437356
:0043DE2E 83C408                  add esp, 00000008
:0043DE31 85C0                    test eax, eax
:0043DE33 7440                    je 0043DE75
:0043DE35 6A01                    push 00000001
:0043DE37 8A4D10                  mov cl, byte ptr [ebp+10]
:0043DE3A 51                      push ecx
:0043DE3B 8A5508                  mov dl, byte ptr [ebp+08]
:0043DE3E 52                      push edx
:0043DE3F 8B45E0                  mov eax, dword ptr [ebp-20]
:0043DE42 8A08                    mov cl, byte ptr [eax]
:0043DE44 51                      push ecx
:0043DE45 8A550C                  mov dl, byte ptr [ebp+0C]
:0043DE48 52                      push edx
:0043DE49 B958494B00              mov ecx, 004B4958
:0043DE4E E83D090100              call 0044E790
:0043DE53 8B45E0                  mov eax, dword ptr [ebp-20]
:0043DE56 33C9                    xor ecx, ecx
:0043DE58 8A08                    mov cl, byte ptr [eax]
:0043DE5A 51                      push ecx
:0043DE5B E8C5000000              call 0043DF25
:0043DE60 83C404                  add esp, 00000004
:0043DE63 8B55E0                  mov edx, dword ptr [ebp-20]
:0043DE66 33C0                    xor eax, eax
:0043DE68 8A02                    mov al, byte ptr [edx]
:0043DE6A 50                      push eax
:0043DE6B E825010000              call 0043DF95
:0043DE70 83C404                  add esp, 00000004
:0043DE73 EB1E                    jmp 0043DE93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DE33(C)
|
:0043DE75 6A00                    push 00000000
:0043DE77 8A4D10                  mov cl, byte ptr [ebp+10]
:0043DE7A 51                      push ecx
:0043DE7B 8A5508                  mov dl, byte ptr [ebp+08]
:0043DE7E 52                      push edx
:0043DE7F 8B45E0                  mov eax, dword ptr [ebp-20]
:0043DE82 8A08                    mov cl, byte ptr [eax]
:0043DE84 51                      push ecx
:0043DE85 8A550C                  mov dl, byte ptr [ebp+0C]
:0043DE88 52                      push edx
:0043DE89 B958494B00              mov ecx, 004B4958
:0043DE8E E8FD080100              call 0044E790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DE73(U)
|
:0043DE93 8B45E0                  mov eax, dword ptr [ebp-20]
:0043DE96 83C001                  add eax, 00000001
:0043DE99 8945E0                  mov dword ptr [ebp-20], eax
:0043DE9C E93BFFFFFF              jmp 0043DDDC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043DD95(C), :0043DDE9(C)
|
:0043DEA1 EB37                    jmp 0043DEDA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DD45(C)
|
:0043DEA3 6A00                    push 00000000
:0043DEA5 8A4D10                  mov cl, byte ptr [ebp+10]
:0043DEA8 51                      push ecx
:0043DEA9 8A5508                  mov dl, byte ptr [ebp+08]
:0043DEAC 52                      push edx
:0043DEAD 8A45FC                  mov al, byte ptr [ebp-04]
:0043DEB0 50                      push eax
:0043DEB1 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043DEB4 51                      push ecx
:0043DEB5 B958494B00              mov ecx, 004B4958
:0043DEBA E8D1080100              call 0044E790

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043DEBF 6A07                    push 00000007
:0043DEC1 B9F8544B00              mov ecx, 004B54F8
:0043DEC6 E84FB60200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۥѤF"
                                  |
:0043DECB 68F4E54700              push 0047E5F4
:0043DED0 6A00                    push 00000000
:0043DED2 E85C35FFFF              call 00431433
:0043DED7 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DEA1(U)
|
:0043DEDA 837DF800                cmp dword ptr [ebp-08], 00000000
:0043DEDE 7437                    je 0043DF17
:0043DEE0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043DEE3 6BC924                  imul ecx, 00000024
:0043DEE6 81C1B83B4B00            add ecx, 004B3BB8
:0043DEEC E8EF8AFFFF              call 004369E0
:0043DEF1 6BC050                  imul eax, 00000050
:0043DEF4 05787F4900              add eax, 00497F78
:0043DEF9 8945DC                  mov dword ptr [ebp-24], eax
:0043DEFC 6A01                    push 00000001
:0043DEFE 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043DF01 E8DAFFFEFF              call 0042DEE0
:0043DF06 25FF000000              and eax, 000000FF
:0043DF0B 83C014                  add eax, 00000014
:0043DF0E 50                      push eax
:0043DF0F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043DF12 E89345FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DEDE(C)
|
:0043DF17 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043DC68(U), :0043DCA8(C)
|
:0043DF21 8BE5                    mov esp, ebp
:0043DF23 5D                      pop ebp
:0043DF24 C3                      ret



* Referenced by a CALL at Addresses:
|:0043DD71   , :0043DE5B   , :0043E1E1   , :0043E7D7   
|
:0043DF25 55                      push ebp
:0043DF26 8BEC                    mov ebp, esp
:0043DF28 51                      push ecx
:0043DF29 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DF2C 6BC924                  imul ecx, 00000024
:0043DF2F 81C1B83B4B00            add ecx, 004B3BB8
:0043DF35 E8D68AFFFF              call 00436A10
:0043DF3A 25FF000000              and eax, 000000FF
:0043DF3F 83F806                  cmp eax, 00000006
:0043DF42 7D33                    jge 0043DF77
:0043DF44 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DF47 6BC924                  imul ecx, 00000024
:0043DF4A 81C1B83B4B00            add ecx, 004B3BB8
:0043DF50 E8BB8AFFFF              call 00436A10
:0043DF55 8845FC                  mov byte ptr [ebp-04], al
:0043DF58 8B45FC                  mov eax, dword ptr [ebp-04]
:0043DF5B 25FF000000              and eax, 000000FF
:0043DF60 83C001                  add eax, 00000001
:0043DF63 0C40                    or al, 40
:0043DF65 50                      push eax
:0043DF66 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DF69 6BC924                  imul ecx, 00000024
:0043DF6C 81C1B83B4B00            add ecx, 004B3BB8
:0043DF72 E8398CFFFF              call 00436BB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DF42(C)
|
:0043DF77 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DF7A 6BC924                  imul ecx, 00000024
:0043DF7D 81C1B83B4B00            add ecx, 004B3BB8
:0043DF83 E8588AFFFF              call 004369E0
:0043DF88 50                      push eax
:0043DF89 E88EEB0200              call 0046CB1C
:0043DF8E 83C404                  add esp, 00000004
:0043DF91 8BE5                    mov esp, ebp
:0043DF93 5D                      pop ebp
:0043DF94 C3                      ret



* Referenced by a CALL at Addresses:
|:0043DD82   , :0043DE6B   , :0043EAF0   
|
:0043DF95 55                      push ebp
:0043DF96 8BEC                    mov ebp, esp
:0043DF98 6A01                    push 00000001
:0043DF9A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DF9D 6BC924                  imul ecx, 00000024
:0043DFA0 81C1B83B4B00            add ecx, 004B3BB8
:0043DFA6 E8C58AFFFF              call 00436A70
:0043DFAB 85C0                    test eax, eax
:0043DFAD 742F                    je 0043DFDE

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043DFAF 6A07                    push 00000007
:0043DFB1 B9F8544B00              mov ecx, 004B54F8
:0043DFB6 E85FB50200              call 0046951A
:0043DFBB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DFBE 6BC924                  imul ecx, 00000024
:0043DFC1 81C1B83B4B00            add ecx, 004B3BB8
:0043DFC7 E8248AFFFF              call 004369F0
:0043DFCC 50                      push eax

* Possible StringData Ref from Data Obj ->"%swgOTpFC"
                                  |
:0043DFCD 6800E64700              push 0047E600
:0043DFD2 6A00                    push 00000000
:0043DFD4 E85A34FFFF              call 00431433
:0043DFD9 83C40C                  add esp, 0000000C
:0043DFDC EB2D                    jmp 0043E00B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DFAD(C)
|
:0043DFDE 6A41                    push 00000041
:0043DFE0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DFE3 6BC924                  imul ecx, 00000024
:0043DFE6 81C1B83B4B00            add ecx, 004B3BB8
:0043DFEC E8CF3F0000              call 00441FC0
:0043DFF1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043DFF4 6BC924                  imul ecx, 00000024
:0043DFF7 81C1B83B4B00            add ecx, 004B3BB8
:0043DFFD E8DE89FFFF              call 004369E0
:0043E002 50                      push eax
:0043E003 E814EB0200              call 0046CB1C
:0043E008 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043DFDC(U)
|
:0043E00B 5D                      pop ebp
:0043E00C C3                      ret



* Referenced by a CALL at Address:
|:0043B063   
|
:0043E00D 55                      push ebp
:0043E00E 8BEC                    mov ebp, esp
:0043E010 83EC24                  sub esp, 00000024
:0043E013 C645F8FF                mov [ebp-08], FF
:0043E017 8B4508                  mov eax, dword ptr [ebp+08]
:0043E01A 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043E01C B906000000              mov ecx, 00000006
:0043E021 F7F1                    div ecx
:0043E023 8845F0                  mov byte ptr [ebp-10], al
:0043E026 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E029 6BC931                  imul ecx, 00000031
:0043E02C 81C1001D4B00            add ecx, 004B1D00
:0043E032 E84977FCFF              call 00405780
:0043E037 8845E4                  mov byte ptr [ebp-1C], al
:0043E03A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E03D 6BC931                  imul ecx, 00000031
:0043E040 81C1001D4B00            add ecx, 004B1D00
:0043E046 E81577FCFF              call 00405760
:0043E04B 8845E8                  mov byte ptr [ebp-18], al
:0043E04E 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043E051 E89A76FCFF              call 004056F0
:0043E056 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E059 6BC924                  imul ecx, 00000024
:0043E05C 81C1B83B4B00            add ecx, 004B3BB8
:0043E062 E81977FCFF              call 00405780
:0043E067 25FF000000              and eax, 000000FF
:0043E06C 83F807                  cmp eax, 00000007
:0043E06F 7418                    je 0043E089
:0043E071 33D2                    xor edx, edx
:0043E073 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043E079 83E204                  and edx, 00000004
:0043E07C 85D2                    test edx, edx
:0043E07E 7509                    jne 0043E089
:0043E080 C745DC00000000          mov [ebp-24], 00000000
:0043E087 EB07                    jmp 0043E090

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E06F(C), :0043E07E(C)
|
:0043E089 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E087(U)
|
:0043E090 8B45DC                  mov eax, dword ptr [ebp-24]
:0043E093 8945F4                  mov dword ptr [ebp-0C], eax
:0043E096 68FF000000              push 000000FF
:0043E09B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043E09E 51                      push ecx
:0043E09F 8B550C                  mov edx, dword ptr [ebp+0C]
:0043E0A2 52                      push edx
:0043E0A3 8B4508                  mov eax, dword ptr [ebp+08]
:0043E0A6 50                      push eax
:0043E0A7 E8F992FFFF              call 004373A5
:0043E0AC 83C410                  add esp, 00000010
:0043E0AF 85C0                    test eax, eax
:0043E0B1 7505                    jne 0043E0B8
:0043E0B3 E9D1010000              jmp 0043E289

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E0B1(C)
|
:0043E0B8 68FF000000              push 000000FF
:0043E0BD 6A11                    push 00000011
:0043E0BF 6868484B00              push 004B4868
:0043E0C4 E817A50300              call 004785E0
:0043E0C9 83C40C                  add esp, 0000000C
:0043E0CC 68FF000000              push 000000FF
:0043E0D1 68FF000000              push 000000FF
:0043E0D6 6A00                    push 00000000
:0043E0D8 6868484B00              push 004B4868
:0043E0DD 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0043E0E0 51                      push ecx
:0043E0E1 8A550C                  mov dl, byte ptr [ebp+0C]
:0043E0E4 52                      push edx
:0043E0E5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E0E8 6BC924                  imul ecx, 00000024
:0043E0EB 81C1B83B4B00            add ecx, 004B3BB8
:0043E0F1 E86D830100              call 00456463
:0043E0F6 8945EC                  mov dword ptr [ebp-14], eax
:0043E0F9 8B45EC                  mov eax, dword ptr [ebp-14]
:0043E0FC 33C9                    xor ecx, ecx
:0043E0FE 8A08                    mov cl, byte ptr [eax]
:0043E100 81F9FF000000            cmp ecx, 000000FF
:0043E106 7520                    jne 0043E128

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043E108 6A07                    push 00000007
:0043E10A B9F8544B00              mov ecx, 004B54F8
:0043E10F E806B40200              call 0046951A

* Possible StringData Ref from Data Obj ->"vTd򤺤sbHĭx"
                                  |
:0043E114 6818E64700              push 0047E618
:0043E119 6A00                    push 00000000
:0043E11B E81333FFFF              call 00431433
:0043E120 83C408                  add esp, 00000008
:0043E123 E961010000              jmp 0043E289

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E106(C)
|
:0043E128 6A18                    push 00000018
:0043E12A 6A27                    push 00000027
:0043E12C 6A00                    push 00000000
:0043E12E 6A00                    push 00000000
:0043E130 B958494B00              mov ecx, 004B4958
:0043E135 E80EE80000              call 0044C948
:0043E13A 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043E13E 7421                    je 0043E161
:0043E140 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E143 6BC931                  imul ecx, 00000031
:0043E146 81C1001D4B00            add ecx, 004B1D00
:0043E14C E89F75FCFF              call 004056F0
:0043E151 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043E152 6838E64700              push 0047E638
:0043E157 6A00                    push 00000000
:0043E159 E8D532FFFF              call 00431433
:0043E15E 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E13E(C), :0043E23D(U)
|
:0043E161 8B55EC                  mov edx, dword ptr [ebp-14]
:0043E164 33C0                    xor eax, eax
:0043E166 8A02                    mov al, byte ptr [edx]
:0043E168 3DFF000000              cmp eax, 000000FF
:0043E16D 0F84CF000000            je 0043E242
:0043E173 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E176 33D2                    xor edx, edx
:0043E178 8A11                    mov dl, byte ptr [ecx]
:0043E17A 8BCA                    mov ecx, edx
:0043E17C 6BC924                  imul ecx, 00000024
:0043E17F 81C1B83B4B00            add ecx, 004B3BB8
:0043E185 E8B63AFFFF              call 00431C40
:0043E18A 50                      push eax
:0043E18B 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043E18E E80D89FFFF              call 00436AA0
:0043E193 8A45FD                  mov al, byte ptr [ebp-03]
:0043E196 50                      push eax
:0043E197 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043E19A 51                      push ecx
:0043E19B B958494B00              mov ecx, 004B4958
:0043E1A0 E848F90000              call 0044DAED
:0043E1A5 8B55EC                  mov edx, dword ptr [ebp-14]
:0043E1A8 8A02                    mov al, byte ptr [edx]
:0043E1AA 50                      push eax
:0043E1AB 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043E1AE 51                      push ecx
:0043E1AF E8A291FFFF              call 00437356
:0043E1B4 83C408                  add esp, 00000008
:0043E1B7 85C0                    test eax, eax
:0043E1B9 7440                    je 0043E1FB
:0043E1BB 6A01                    push 00000001
:0043E1BD 8A5510                  mov dl, byte ptr [ebp+10]
:0043E1C0 52                      push edx
:0043E1C1 8A4508                  mov al, byte ptr [ebp+08]
:0043E1C4 50                      push eax
:0043E1C5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E1C8 8A11                    mov dl, byte ptr [ecx]
:0043E1CA 52                      push edx
:0043E1CB 8A450C                  mov al, byte ptr [ebp+0C]
:0043E1CE 50                      push eax
:0043E1CF B958494B00              mov ecx, 004B4958
:0043E1D4 E8B7050100              call 0044E790
:0043E1D9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E1DC 33D2                    xor edx, edx
:0043E1DE 8A11                    mov dl, byte ptr [ecx]
:0043E1E0 52                      push edx
:0043E1E1 E83FFDFFFF              call 0043DF25
:0043E1E6 83C404                  add esp, 00000004
:0043E1E9 8B45EC                  mov eax, dword ptr [ebp-14]
:0043E1EC 33C9                    xor ecx, ecx
:0043E1EE 8A08                    mov cl, byte ptr [eax]
:0043E1F0 51                      push ecx
:0043E1F1 E897000000              call 0043E28D
:0043E1F6 83C404                  add esp, 00000004
:0043E1F9 EB39                    jmp 0043E234

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E1B9(C)
|
:0043E1FB 6A00                    push 00000000
:0043E1FD 8A5510                  mov dl, byte ptr [ebp+10]
:0043E200 52                      push edx
:0043E201 8A4508                  mov al, byte ptr [ebp+08]
:0043E204 50                      push eax
:0043E205 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E208 8A11                    mov dl, byte ptr [ecx]
:0043E20A 52                      push edx
:0043E20B 8A450C                  mov al, byte ptr [ebp+0C]
:0043E20E 50                      push eax
:0043E20F B958494B00              mov ecx, 004B4958
:0043E214 E877050100              call 0044E790

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043E219 6A07                    push 00000007
:0043E21B B9F8544B00              mov ecx, 004B54F8
:0043E220 E8F5B20200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۥѤF"
                                  |
:0043E225 683CE64700              push 0047E63C
:0043E22A 6A00                    push 00000000
:0043E22C E80232FFFF              call 00431433
:0043E231 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E1F9(U)
|
:0043E234 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E237 83C101                  add ecx, 00000001
:0043E23A 894DEC                  mov dword ptr [ebp-14], ecx
:0043E23D E91FFFFFFF              jmp 0043E161

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E16D(C)
|
:0043E242 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043E246 7437                    je 0043E27F
:0043E248 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E24B 6BC924                  imul ecx, 00000024
:0043E24E 81C1B83B4B00            add ecx, 004B3BB8
:0043E254 E88787FFFF              call 004369E0
:0043E259 6BC050                  imul eax, 00000050
:0043E25C 05787F4900              add eax, 00497F78
:0043E261 8945E0                  mov dword ptr [ebp-20], eax
:0043E264 6A01                    push 00000001
:0043E266 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043E269 E872FCFEFF              call 0042DEE0
:0043E26E 25FF000000              and eax, 000000FF
:0043E273 83C014                  add eax, 00000014
:0043E276 50                      push eax
:0043E277 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043E27A E82B42FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E246(C)
|
:0043E27F C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E0B3(U), :0043E123(U)
|
:0043E289 8BE5                    mov esp, ebp
:0043E28B 5D                      pop ebp
:0043E28C C3                      ret



* Referenced by a CALL at Address:
|:0043E1F1   
|
:0043E28D 55                      push ebp
:0043E28E 8BEC                    mov ebp, esp
:0043E290 51                      push ecx
:0043E291 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E294 6BC924                  imul ecx, 00000024
:0043E297 81C1B83B4B00            add ecx, 004B3BB8
:0043E29D E8AE87FFFF              call 00436A50
:0043E2A2 25FF000000              and eax, 000000FF
:0043E2A7 83F806                  cmp eax, 00000006
:0043E2AA 7D33                    jge 0043E2DF
:0043E2AC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E2AF 6BC924                  imul ecx, 00000024
:0043E2B2 81C1B83B4B00            add ecx, 004B3BB8
:0043E2B8 E89387FFFF              call 00436A50
:0043E2BD 8845FC                  mov byte ptr [ebp-04], al
:0043E2C0 8B45FC                  mov eax, dword ptr [ebp-04]
:0043E2C3 25FF000000              and eax, 000000FF
:0043E2C8 83C001                  add eax, 00000001
:0043E2CB 0C40                    or al, 40
:0043E2CD 50                      push eax
:0043E2CE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E2D1 6BC924                  imul ecx, 00000024
:0043E2D4 81C1B83B4B00            add ecx, 004B3BB8
:0043E2DA E85189FFFF              call 00436C30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E2AA(C)
|
:0043E2DF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E2E2 6BC924                  imul ecx, 00000024
:0043E2E5 81C1B83B4B00            add ecx, 004B3BB8
:0043E2EB E8F086FFFF              call 004369E0
:0043E2F0 50                      push eax
:0043E2F1 E826E80200              call 0046CB1C
:0043E2F6 83C404                  add esp, 00000004
:0043E2F9 8BE5                    mov esp, ebp
:0043E2FB 5D                      pop ebp
:0043E2FC C3                      ret



* Referenced by a CALL at Address:
|:0043B085   
|
:0043E2FD 55                      push ebp
:0043E2FE 8BEC                    mov ebp, esp
:0043E300 83EC20                  sub esp, 00000020
:0043E303 C645FCFF                mov [ebp-04], FF
:0043E307 8B4508                  mov eax, dword ptr [ebp+08]
:0043E30A 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043E30C B906000000              mov ecx, 00000006
:0043E311 F7F1                    div ecx
:0043E313 8845F4                  mov byte ptr [ebp-0C], al
:0043E316 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E319 6BC931                  imul ecx, 00000031
:0043E31C 81C1001D4B00            add ecx, 004B1D00
:0043E322 E85974FCFF              call 00405780
:0043E327 8845EC                  mov byte ptr [ebp-14], al
:0043E32A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E32D 6BC931                  imul ecx, 00000031
:0043E330 81C1001D4B00            add ecx, 004B1D00
:0043E336 E82574FCFF              call 00405760
:0043E33B 8845F0                  mov byte ptr [ebp-10], al
:0043E33E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E341 6BC924                  imul ecx, 00000024
:0043E344 81C1B83B4B00            add ecx, 004B3BB8
:0043E34A E83174FCFF              call 00405780
:0043E34F 25FF000000              and eax, 000000FF
:0043E354 83F807                  cmp eax, 00000007
:0043E357 7418                    je 0043E371
:0043E359 33D2                    xor edx, edx
:0043E35B 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043E361 83E204                  and edx, 00000004
:0043E364 85D2                    test edx, edx
:0043E366 7509                    jne 0043E371
:0043E368 C745E000000000          mov [ebp-20], 00000000
:0043E36F EB07                    jmp 0043E378

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E357(C), :0043E366(C)
|
:0043E371 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E36F(U)
|
:0043E378 8B45E0                  mov eax, dword ptr [ebp-20]
:0043E37B 8945F8                  mov dword ptr [ebp-08], eax
:0043E37E 68FF000000              push 000000FF
:0043E383 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043E386 51                      push ecx
:0043E387 8B550C                  mov edx, dword ptr [ebp+0C]
:0043E38A 52                      push edx
:0043E38B 8B4508                  mov eax, dword ptr [ebp+08]
:0043E38E 50                      push eax
:0043E38F E81190FFFF              call 004373A5
:0043E394 83C410                  add esp, 00000010
:0043E397 85C0                    test eax, eax
:0043E399 7505                    jne 0043E3A0
:0043E39B E9E9010000              jmp 0043E589

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E399(C), :0043E41D(U), :0043E45B(U)
|
:0043E3A0 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043E3A3 51                      push ecx
:0043E3A4 E869D2FFFF              call 0043B612
:0043E3A9 83C404                  add esp, 00000004
:0043E3AC 6A00                    push 00000000
:0043E3AE 8B55F0                  mov edx, dword ptr [ebp-10]
:0043E3B1 81E2FF000000            and edx, 000000FF
:0043E3B7 80CA80                  or dl, 80
:0043E3BA 52                      push edx
:0043E3BB 8A450C                  mov al, byte ptr [ebp+0C]
:0043E3BE 50                      push eax
:0043E3BF B958494B00              mov ecx, 004B4958
:0043E3C4 E8E5F90000              call 0044DDAE
:0043E3C9 8845FC                  mov byte ptr [ebp-04], al
:0043E3CC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043E3CF 81E1FF000000            and ecx, 000000FF
:0043E3D5 81F9FF000000            cmp ecx, 000000FF
:0043E3DB 0F84A8010000            je 0043E589
:0043E3E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043E3E4 81E1FF000000            and ecx, 000000FF
:0043E3EA 6BC924                  imul ecx, 00000024
:0043E3ED 81C1B83B4B00            add ecx, 004B3BB8
:0043E3F3 E8F886FFFF              call 00436AF0
:0043E3F8 25FF000000              and eax, 000000FF
:0043E3FD 83F809                  cmp eax, 00000009
:0043E400 751D                    jne 0043E41F

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043E402 6A07                    push 00000007
:0043E404 B9F8544B00              mov ecx, 004B54F8
:0043E409 E80CB10200              call 0046951A

* Possible StringData Ref from Data Obj ->"wkԪ"
                                  |
:0043E40E 6848E64700              push 0047E648
:0043E413 6A00                    push 00000000
:0043E415 E81930FFFF              call 00431433
:0043E41A 83C408                  add esp, 00000008
:0043E41D EB81                    jmp 0043E3A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E400(C)
|
:0043E41F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043E422 81E1FF000000            and ecx, 000000FF
:0043E428 6BC924                  imul ecx, 00000024
:0043E42B 81C1B83B4B00            add ecx, 004B3BB8
:0043E431 E8FA85FFFF              call 00436A30
:0043E436 25FF000000              and eax, 000000FF
:0043E43B 83F806                  cmp eax, 00000006
:0043E43E 7520                    jne 0043E460

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043E440 6A07                    push 00000007
:0043E442 B9F8544B00              mov ecx, 004B54F8
:0043E447 E8CEB00200              call 0046951A

* Possible StringData Ref from Data Obj ->"ACӳmOF"
                                  |
:0043E44C 685CE64700              push 0047E65C
:0043E451 6A00                    push 00000000
:0043E453 E8DB2FFFFF              call 00431433
:0043E458 83C408                  add esp, 00000008
:0043E45B E940FFFFFF              jmp 0043E3A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E43E(C)
|
:0043E460 837DF800                cmp dword ptr [ebp-08], 00000000
:0043E464 7421                    je 0043E487
:0043E466 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E469 6BC931                  imul ecx, 00000031
:0043E46C 81C1001D4B00            add ecx, 004B1D00
:0043E472 E87972FCFF              call 004056F0
:0043E477 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043E478 6878E64700              push 0047E678
:0043E47D 6A00                    push 00000000
:0043E47F E8AF2FFFFF              call 00431433
:0043E484 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E464(C)
|
:0043E487 8A55FC                  mov dl, byte ptr [ebp-04]
:0043E48A 52                      push edx
:0043E48B 8A450C                  mov al, byte ptr [ebp+0C]
:0043E48E 50                      push eax
:0043E48F E862C0FFFF              call 0043A4F6
:0043E494 83C408                  add esp, 00000008
:0043E497 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043E49A 81E1FF000000            and ecx, 000000FF
:0043E4A0 6BC924                  imul ecx, 00000024
:0043E4A3 81C1B83B4B00            add ecx, 004B3BB8
:0043E4A9 E89237FFFF              call 00431C40
:0043E4AE 668B08                  mov cx, word ptr [eax]
:0043E4B1 66894DE8                mov word ptr [ebp-18], cx
:0043E4B5 8A55E9                  mov dl, byte ptr [ebp-17]
:0043E4B8 52                      push edx
:0043E4B9 8A45E8                  mov al, byte ptr [ebp-18]
:0043E4BC 50                      push eax
:0043E4BD B958494B00              mov ecx, 004B4958
:0043E4C2 E826F60000              call 0044DAED
:0043E4C7 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043E4CA 51                      push ecx
:0043E4CB 8A550C                  mov dl, byte ptr [ebp+0C]
:0043E4CE 52                      push edx
:0043E4CF E8828EFFFF              call 00437356
:0043E4D4 83C408                  add esp, 00000008
:0043E4D7 85C0                    test eax, eax
:0043E4D9 7430                    je 0043E50B
:0043E4DB 6A01                    push 00000001
:0043E4DD 8A4510                  mov al, byte ptr [ebp+10]
:0043E4E0 50                      push eax
:0043E4E1 8A4D08                  mov cl, byte ptr [ebp+08]
:0043E4E4 51                      push ecx
:0043E4E5 8A55FC                  mov dl, byte ptr [ebp-04]
:0043E4E8 52                      push edx
:0043E4E9 8A450C                  mov al, byte ptr [ebp+0C]
:0043E4EC 50                      push eax
:0043E4ED B958494B00              mov ecx, 004B4958
:0043E4F2 E899020100              call 0044E790
:0043E4F7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043E4FA 81E1FF000000            and ecx, 000000FF
:0043E500 51                      push ecx
:0043E501 E887000000              call 0043E58D
:0043E506 83C404                  add esp, 00000004
:0043E509 EB37                    jmp 0043E542

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E4D9(C)
|
:0043E50B 6A00                    push 00000000
:0043E50D 8A5510                  mov dl, byte ptr [ebp+10]
:0043E510 52                      push edx
:0043E511 8A4508                  mov al, byte ptr [ebp+08]
:0043E514 50                      push eax
:0043E515 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043E518 51                      push ecx
:0043E519 8A550C                  mov dl, byte ptr [ebp+0C]
:0043E51C 52                      push edx
:0043E51D B958494B00              mov ecx, 004B4958
:0043E522 E869020100              call 0044E790

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043E527 6A07                    push 00000007
:0043E529 B9F8544B00              mov ecx, 004B54F8
:0043E52E E8E7AF0200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۥѤF"
                                  |
:0043E533 687CE64700              push 0047E67C
:0043E538 6A00                    push 00000000
:0043E53A E8F42EFFFF              call 00431433
:0043E53F 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E509(U)
|
:0043E542 837DF800                cmp dword ptr [ebp-08], 00000000
:0043E546 7437                    je 0043E57F
:0043E548 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E54B 6BC924                  imul ecx, 00000024
:0043E54E 81C1B83B4B00            add ecx, 004B3BB8
:0043E554 E88784FFFF              call 004369E0
:0043E559 6BC050                  imul eax, 00000050
:0043E55C 05787F4900              add eax, 00497F78
:0043E561 8945E4                  mov dword ptr [ebp-1C], eax
:0043E564 6A01                    push 00000001
:0043E566 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043E569 E872F9FEFF              call 0042DEE0
:0043E56E 25FF000000              and eax, 000000FF
:0043E573 83C014                  add eax, 00000014
:0043E576 50                      push eax
:0043E577 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043E57A E82B3FFCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E546(C)
|
:0043E57F C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E39B(U), :0043E3DB(C)
|
:0043E589 8BE5                    mov esp, ebp
:0043E58B 5D                      pop ebp
:0043E58C C3                      ret



* Referenced by a CALL at Address:
|:0043E501   
|
:0043E58D 55                      push ebp
:0043E58E 8BEC                    mov ebp, esp
:0043E590 51                      push ecx
:0043E591 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E594 6BC924                  imul ecx, 00000024
:0043E597 81C1B83B4B00            add ecx, 004B3BB8
:0043E59D E88E84FFFF              call 00436A30
:0043E5A2 25FF000000              and eax, 000000FF
:0043E5A7 83F806                  cmp eax, 00000006
:0043E5AA 7D33                    jge 0043E5DF
:0043E5AC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E5AF 6BC924                  imul ecx, 00000024
:0043E5B2 81C1B83B4B00            add ecx, 004B3BB8
:0043E5B8 E87384FFFF              call 00436A30
:0043E5BD 8845FC                  mov byte ptr [ebp-04], al
:0043E5C0 8B45FC                  mov eax, dword ptr [ebp-04]
:0043E5C3 25FF000000              and eax, 000000FF
:0043E5C8 83C001                  add eax, 00000001
:0043E5CB 0C40                    or al, 40
:0043E5CD 50                      push eax
:0043E5CE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E5D1 6BC924                  imul ecx, 00000024
:0043E5D4 81C1B83B4B00            add ecx, 004B3BB8
:0043E5DA E81186FFFF              call 00436BF0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E5AA(C)
|
:0043E5DF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E5E2 6BC924                  imul ecx, 00000024
:0043E5E5 81C1B83B4B00            add ecx, 004B3BB8
:0043E5EB E8F083FFFF              call 004369E0
:0043E5F0 50                      push eax
:0043E5F1 E826E50200              call 0046CB1C
:0043E5F6 83C404                  add esp, 00000004
:0043E5F9 8BE5                    mov esp, ebp
:0043E5FB 5D                      pop ebp
:0043E5FC C3                      ret



* Referenced by a CALL at Address:
|:0043B0A7   
|
:0043E5FD 55                      push ebp
:0043E5FE 8BEC                    mov ebp, esp
:0043E600 83EC24                  sub esp, 00000024
:0043E603 C645F8FF                mov [ebp-08], FF
:0043E607 8B4508                  mov eax, dword ptr [ebp+08]
:0043E60A 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043E60C B906000000              mov ecx, 00000006
:0043E611 F7F1                    div ecx
:0043E613 8845F0                  mov byte ptr [ebp-10], al
:0043E616 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E619 6BC931                  imul ecx, 00000031
:0043E61C 81C1001D4B00            add ecx, 004B1D00
:0043E622 E85971FCFF              call 00405780
:0043E627 8845E4                  mov byte ptr [ebp-1C], al
:0043E62A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E62D 6BC931                  imul ecx, 00000031
:0043E630 81C1001D4B00            add ecx, 004B1D00
:0043E636 E82571FCFF              call 00405760
:0043E63B 8845E8                  mov byte ptr [ebp-18], al
:0043E63E 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043E641 E8AA70FCFF              call 004056F0
:0043E646 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E649 6BC924                  imul ecx, 00000024
:0043E64C 81C1B83B4B00            add ecx, 004B3BB8
:0043E652 E82971FCFF              call 00405780
:0043E657 25FF000000              and eax, 000000FF
:0043E65C 83F807                  cmp eax, 00000007
:0043E65F 7418                    je 0043E679
:0043E661 33D2                    xor edx, edx
:0043E663 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043E669 83E204                  and edx, 00000004
:0043E66C 85D2                    test edx, edx
:0043E66E 7509                    jne 0043E679
:0043E670 C745DC00000000          mov [ebp-24], 00000000
:0043E677 EB07                    jmp 0043E680

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E65F(C), :0043E66E(C)
|
:0043E679 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E677(U)
|
:0043E680 8B45DC                  mov eax, dword ptr [ebp-24]
:0043E683 8945F4                  mov dword ptr [ebp-0C], eax
:0043E686 68FF000000              push 000000FF
:0043E68B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043E68E 51                      push ecx
:0043E68F 8B550C                  mov edx, dword ptr [ebp+0C]
:0043E692 52                      push edx
:0043E693 8B4508                  mov eax, dword ptr [ebp+08]
:0043E696 50                      push eax
:0043E697 E8098DFFFF              call 004373A5
:0043E69C 83C410                  add esp, 00000010
:0043E69F 85C0                    test eax, eax
:0043E6A1 7505                    jne 0043E6A8
:0043E6A3 E9D9010000              jmp 0043E881

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E6A1(C)
|
:0043E6A8 68FF000000              push 000000FF
:0043E6AD 6A11                    push 00000011
:0043E6AF 6868484B00              push 004B4868
:0043E6B4 E8279F0300              call 004785E0
:0043E6B9 83C40C                  add esp, 0000000C
:0043E6BC 68FF000000              push 000000FF
:0043E6C1 68FF000000              push 000000FF
:0043E6C6 6A00                    push 00000000
:0043E6C8 6868484B00              push 004B4868
:0043E6CD 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0043E6D0 51                      push ecx
:0043E6D1 8A550C                  mov dl, byte ptr [ebp+0C]
:0043E6D4 52                      push edx
:0043E6D5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E6D8 6BC924                  imul ecx, 00000024
:0043E6DB 81C1B83B4B00            add ecx, 004B3BB8
:0043E6E1 E87D7D0100              call 00456463
:0043E6E6 8945EC                  mov dword ptr [ebp-14], eax
:0043E6E9 8B45EC                  mov eax, dword ptr [ebp-14]
:0043E6EC 33C9                    xor ecx, ecx
:0043E6EE 8A08                    mov cl, byte ptr [eax]
:0043E6F0 81F9FF000000            cmp ecx, 000000FF
:0043E6F6 7520                    jne 0043E718

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043E6F8 6A07                    push 00000007
:0043E6FA B9F8544B00              mov ecx, 004B54F8
:0043E6FF E816AE0200              call 0046951A

* Possible StringData Ref from Data Obj ->"vTd򤺤sbHĭx"
                                  |
:0043E704 6888E64700              push 0047E688
:0043E709 6A00                    push 00000000
:0043E70B E8232DFFFF              call 00431433
:0043E710 83C408                  add esp, 00000008
:0043E713 E969010000              jmp 0043E881

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E6F6(C)
|
:0043E718 6A18                    push 00000018
:0043E71A 6A27                    push 00000027
:0043E71C 6A00                    push 00000000
:0043E71E 6A00                    push 00000000
:0043E720 B958494B00              mov ecx, 004B4958
:0043E725 E81EE20000              call 0044C948
:0043E72A 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043E72E 7421                    je 0043E751
:0043E730 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E733 6BC931                  imul ecx, 00000031
:0043E736 81C1001D4B00            add ecx, 004B1D00
:0043E73C E8AF6FFCFF              call 004056F0
:0043E741 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043E742 68A8E64700              push 0047E6A8
:0043E747 6A00                    push 00000000
:0043E749 E8E52CFFFF              call 00431433
:0043E74E 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E72E(C), :0043E835(U)
|
:0043E751 8B55EC                  mov edx, dword ptr [ebp-14]
:0043E754 33C0                    xor eax, eax
:0043E756 8A02                    mov al, byte ptr [edx]
:0043E758 3DFF000000              cmp eax, 000000FF
:0043E75D 0F84D7000000            je 0043E83A
:0043E763 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E766 33D2                    xor edx, edx
:0043E768 8A11                    mov dl, byte ptr [ecx]
:0043E76A 8BCA                    mov ecx, edx
:0043E76C 6BC924                  imul ecx, 00000024
:0043E76F 81C1B83B4B00            add ecx, 004B3BB8
:0043E775 E8C634FFFF              call 00431C40
:0043E77A 50                      push eax
:0043E77B 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0043E77E E81D83FFFF              call 00436AA0
:0043E783 8A45FD                  mov al, byte ptr [ebp-03]
:0043E786 50                      push eax
:0043E787 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043E78A 51                      push ecx
:0043E78B B958494B00              mov ecx, 004B4958
:0043E790 E858F30000              call 0044DAED
:0043E795 8B55EC                  mov edx, dword ptr [ebp-14]
:0043E798 8A02                    mov al, byte ptr [edx]
:0043E79A 50                      push eax
:0043E79B 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043E79E 51                      push ecx
:0043E79F E8B28BFFFF              call 00437356
:0043E7A4 83C408                  add esp, 00000008
:0043E7A7 85C0                    test eax, eax
:0043E7A9 7448                    je 0043E7F3
:0043E7AB 6A01                    push 00000001
:0043E7AD 8A5510                  mov dl, byte ptr [ebp+10]
:0043E7B0 52                      push edx
:0043E7B1 8A4508                  mov al, byte ptr [ebp+08]
:0043E7B4 50                      push eax
:0043E7B5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E7B8 8A11                    mov dl, byte ptr [ecx]
:0043E7BA 52                      push edx
:0043E7BB 8A450C                  mov al, byte ptr [ebp+0C]
:0043E7BE 50                      push eax
:0043E7BF B958494B00              mov ecx, 004B4958
:0043E7C4 E8C7FF0000              call 0044E790
:0043E7C9 837D0822                cmp dword ptr [ebp+08], 00000022
:0043E7CD 7512                    jne 0043E7E1
:0043E7CF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E7D2 33D2                    xor edx, edx
:0043E7D4 8A11                    mov dl, byte ptr [ecx]
:0043E7D6 52                      push edx
:0043E7D7 E849F7FFFF              call 0043DF25
:0043E7DC 83C404                  add esp, 00000004
:0043E7DF EB10                    jmp 0043E7F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E7CD(C)
|
:0043E7E1 8B45EC                  mov eax, dword ptr [ebp-14]
:0043E7E4 33C9                    xor ecx, ecx
:0043E7E6 8A08                    mov cl, byte ptr [eax]
:0043E7E8 51                      push ecx
:0043E7E9 E897000000              call 0043E885
:0043E7EE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E7DF(U)
|
:0043E7F1 EB39                    jmp 0043E82C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E7A9(C)
|
:0043E7F3 6A00                    push 00000000
:0043E7F5 8A5510                  mov dl, byte ptr [ebp+10]
:0043E7F8 52                      push edx
:0043E7F9 8A4508                  mov al, byte ptr [ebp+08]
:0043E7FC 50                      push eax
:0043E7FD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E800 8A11                    mov dl, byte ptr [ecx]
:0043E802 52                      push edx
:0043E803 8A450C                  mov al, byte ptr [ebp+0C]
:0043E806 50                      push eax
:0043E807 B958494B00              mov ecx, 004B4958
:0043E80C E87FFF0000              call 0044E790

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043E811 6A07                    push 00000007
:0043E813 B9F8544B00              mov ecx, 004B54F8
:0043E818 E8FDAC0200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۥѤF"
                                  |
:0043E81D 68ACE64700              push 0047E6AC
:0043E822 6A00                    push 00000000
:0043E824 E80A2CFFFF              call 00431433
:0043E829 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E7F1(U)
|
:0043E82C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043E82F 83C101                  add ecx, 00000001
:0043E832 894DEC                  mov dword ptr [ebp-14], ecx
:0043E835 E917FFFFFF              jmp 0043E751

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E75D(C)
|
:0043E83A 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043E83E 7437                    je 0043E877
:0043E840 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E843 6BC924                  imul ecx, 00000024
:0043E846 81C1B83B4B00            add ecx, 004B3BB8
:0043E84C E88F81FFFF              call 004369E0
:0043E851 6BC050                  imul eax, 00000050
:0043E854 05787F4900              add eax, 00497F78
:0043E859 8945E0                  mov dword ptr [ebp-20], eax
:0043E85C 6A01                    push 00000001
:0043E85E 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043E861 E87AF6FEFF              call 0042DEE0
:0043E866 25FF000000              and eax, 000000FF
:0043E86B 83C014                  add eax, 00000014
:0043E86E 50                      push eax
:0043E86F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043E872 E8333CFCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E83E(C)
|
:0043E877 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E6A3(U), :0043E713(U)
|
:0043E881 8BE5                    mov esp, ebp
:0043E883 5D                      pop ebp
:0043E884 C3                      ret



* Referenced by a CALL at Address:
|:0043E7E9   
|
:0043E885 55                      push ebp
:0043E886 8BEC                    mov ebp, esp
:0043E888 6A10                    push 00000010
:0043E88A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E88D 6BC924                  imul ecx, 00000024
:0043E890 81C1B83B4B00            add ecx, 004B3BB8
:0043E896 E8D581FFFF              call 00436A70
:0043E89B 85C0                    test eax, eax
:0043E89D 742F                    je 0043E8CE

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043E89F 6A07                    push 00000007
:0043E8A1 B9F8544B00              mov ecx, 004B54F8
:0043E8A6 E86FAC0200              call 0046951A
:0043E8AB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E8AE 6BC924                  imul ecx, 00000024
:0043E8B1 81C1B83B4B00            add ecx, 004B3BB8
:0043E8B7 E83481FFFF              call 004369F0
:0043E8BC 50                      push eax

* Possible StringData Ref from Data Obj ->"%swgOVêpF"
                                  |
:0043E8BD 68B8E64700              push 0047E6B8
:0043E8C2 6A00                    push 00000000
:0043E8C4 E86A2BFFFF              call 00431433
:0043E8C9 83C40C                  add esp, 0000000C
:0043E8CC EB3E                    jmp 0043E90C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E89D(C)
|
:0043E8CE 6A50                    push 00000050
:0043E8D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E8D3 6BC924                  imul ecx, 00000024
:0043E8D6 81C1B83B4B00            add ecx, 004B3BB8
:0043E8DC E8DF360000              call 00441FC0
:0043E8E1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E8E4 6BC924                  imul ecx, 00000024
:0043E8E7 81C1B83B4B00            add ecx, 004B3BB8
:0043E8ED E8AD62FFFF              call 00434B9F
:0043E8F2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E8F5 6BC924                  imul ecx, 00000024
:0043E8F8 81C1B83B4B00            add ecx, 004B3BB8
:0043E8FE E8DD80FFFF              call 004369E0
:0043E903 50                      push eax
:0043E904 E813E20200              call 0046CB1C
:0043E909 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E8CC(U)
|
:0043E90C 5D                      pop ebp
:0043E90D C3                      ret



* Referenced by a CALL at Address:
|:0043B0C9   
|
:0043E90E 55                      push ebp
:0043E90F 8BEC                    mov ebp, esp
:0043E911 83EC24                  sub esp, 00000024
:0043E914 C645FCFF                mov [ebp-04], FF
:0043E918 8B4508                  mov eax, dword ptr [ebp+08]
:0043E91B 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043E91D B906000000              mov ecx, 00000006
:0043E922 F7F1                    div ecx
:0043E924 8845F4                  mov byte ptr [ebp-0C], al
:0043E927 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E92A 6BC931                  imul ecx, 00000031
:0043E92D 81C1001D4B00            add ecx, 004B1D00
:0043E933 E8486EFCFF              call 00405780
:0043E938 8845EC                  mov byte ptr [ebp-14], al
:0043E93B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043E93E 6BC931                  imul ecx, 00000031
:0043E941 81C1001D4B00            add ecx, 004B1D00
:0043E947 E8146EFCFF              call 00405760
:0043E94C 8845F0                  mov byte ptr [ebp-10], al
:0043E94F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043E952 6BC924                  imul ecx, 00000024
:0043E955 81C1B83B4B00            add ecx, 004B3BB8
:0043E95B E8206EFCFF              call 00405780
:0043E960 25FF000000              and eax, 000000FF
:0043E965 83F807                  cmp eax, 00000007
:0043E968 7418                    je 0043E982
:0043E96A 33D2                    xor edx, edx
:0043E96C 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043E972 83E204                  and edx, 00000004
:0043E975 85D2                    test edx, edx
:0043E977 7509                    jne 0043E982
:0043E979 C745E000000000          mov [ebp-20], 00000000
:0043E980 EB07                    jmp 0043E989

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E968(C), :0043E977(C)
|
:0043E982 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043E980(U)
|
:0043E989 8B45E0                  mov eax, dword ptr [ebp-20]
:0043E98C 8945F8                  mov dword ptr [ebp-08], eax
:0043E98F 68FF000000              push 000000FF
:0043E994 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043E997 51                      push ecx
:0043E998 8B550C                  mov edx, dword ptr [ebp+0C]
:0043E99B 52                      push edx
:0043E99C 8B4508                  mov eax, dword ptr [ebp+08]
:0043E99F 50                      push eax
:0043E9A0 E8008AFFFF              call 004373A5
:0043E9A5 83C410                  add esp, 00000010
:0043E9A8 85C0                    test eax, eax
:0043E9AA 7505                    jne 0043E9B1
:0043E9AC E9C7010000              jmp 0043EB78

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E9AA(C), :0043EA0C(U)
|
:0043E9B1 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043E9B4 51                      push ecx
:0043E9B5 E858CCFFFF              call 0043B612
:0043E9BA 83C404                  add esp, 00000004
:0043E9BD 6A00                    push 00000000
:0043E9BF 8B55F0                  mov edx, dword ptr [ebp-10]
:0043E9C2 81E2FF000000            and edx, 000000FF
:0043E9C8 80CA80                  or dl, 80
:0043E9CB 52                      push edx
:0043E9CC 8A450C                  mov al, byte ptr [ebp+0C]
:0043E9CF 50                      push eax
:0043E9D0 B958494B00              mov ecx, 004B4958
:0043E9D5 E8D4F30000              call 0044DDAE
:0043E9DA 8845FC                  mov byte ptr [ebp-04], al
:0043E9DD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043E9E0 81E1FF000000            and ecx, 000000FF
:0043E9E6 81F9FF000000            cmp ecx, 000000FF
:0043E9EC 0F8486010000            je 0043EB78
:0043E9F2 8B55FC                  mov edx, dword ptr [ebp-04]
:0043E9F5 81E2FF000000            and edx, 000000FF
:0043E9FB 52                      push edx
:0043E9FC 8B4508                  mov eax, dword ptr [ebp+08]
:0043E9FF 50                      push eax
:0043EA00 E867020000              call 0043EC6C
:0043EA05 83C408                  add esp, 00000008
:0043EA08 85C0                    test eax, eax
:0043EA0A 7502                    jne 0043EA0E
:0043EA0C EBA3                    jmp 0043E9B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EA0A(C)
|
:0043EA0E 837DF800                cmp dword ptr [ebp-08], 00000000
:0043EA12 7421                    je 0043EA35
:0043EA14 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043EA17 6BC931                  imul ecx, 00000031
:0043EA1A 81C1001D4B00            add ecx, 004B1D00
:0043EA20 E8CB6CFCFF              call 004056F0
:0043EA25 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043EA26 68CCE64700              push 0047E6CC
:0043EA2B 6A00                    push 00000000
:0043EA2D E8012AFFFF              call 00431433
:0043EA32 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EA12(C)
|
:0043EA35 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043EA38 51                      push ecx
:0043EA39 8A550C                  mov dl, byte ptr [ebp+0C]
:0043EA3C 52                      push edx
:0043EA3D E8B4BAFFFF              call 0043A4F6
:0043EA42 83C408                  add esp, 00000008
:0043EA45 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043EA48 81E1FF000000            and ecx, 000000FF
:0043EA4E 6BC924                  imul ecx, 00000024
:0043EA51 81C1B83B4B00            add ecx, 004B3BB8
:0043EA57 E8E431FFFF              call 00431C40
:0043EA5C 668B00                  mov ax, word ptr [eax]
:0043EA5F 668945E8                mov word ptr [ebp-18], ax
:0043EA63 8A4DE9                  mov cl, byte ptr [ebp-17]
:0043EA66 51                      push ecx
:0043EA67 8A55E8                  mov dl, byte ptr [ebp-18]
:0043EA6A 52                      push edx
:0043EA6B B958494B00              mov ecx, 004B4958
:0043EA70 E878F00000              call 0044DAED
:0043EA75 8A45FC                  mov al, byte ptr [ebp-04]
:0043EA78 50                      push eax
:0043EA79 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043EA7C 51                      push ecx
:0043EA7D E8D488FFFF              call 00437356
:0043EA82 83C408                  add esp, 00000008
:0043EA85 85C0                    test eax, eax
:0043EA87 7471                    je 0043EAFA
:0043EA89 6A01                    push 00000001
:0043EA8B 8A5510                  mov dl, byte ptr [ebp+10]
:0043EA8E 52                      push edx
:0043EA8F 8A4508                  mov al, byte ptr [ebp+08]
:0043EA92 50                      push eax
:0043EA93 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043EA96 51                      push ecx
:0043EA97 8A550C                  mov dl, byte ptr [ebp+0C]
:0043EA9A 52                      push edx
:0043EA9B B958494B00              mov ecx, 004B4958
:0043EAA0 E8EBFC0000              call 0044E790
:0043EAA5 8B4508                  mov eax, dword ptr [ebp+08]
:0043EAA8 8945DC                  mov dword ptr [ebp-24], eax
:0043EAAB 837DDC24                cmp dword ptr [ebp-24], 00000024
:0043EAAF 740E                    je 0043EABF
:0043EAB1 837DDC25                cmp dword ptr [ebp-24], 00000025
:0043EAB5 741C                    je 0043EAD3
:0043EAB7 837DDC26                cmp dword ptr [ebp-24], 00000026
:0043EABB 742A                    je 0043EAE7
:0043EABD EB39                    jmp 0043EAF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EAAF(C)
|
:0043EABF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043EAC2 81E1FF000000            and ecx, 000000FF
:0043EAC8 51                      push ecx
:0043EAC9 E8AE000000              call 0043EB7C
:0043EACE 83C404                  add esp, 00000004
:0043EAD1 EB25                    jmp 0043EAF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EAB5(C)
|
:0043EAD3 8B55FC                  mov edx, dword ptr [ebp-04]
:0043EAD6 81E2FF000000            and edx, 000000FF
:0043EADC 52                      push edx
:0043EADD E812010000              call 0043EBF4
:0043EAE2 83C404                  add esp, 00000004
:0043EAE5 EB11                    jmp 0043EAF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EABB(C)
|
:0043EAE7 8B45FC                  mov eax, dword ptr [ebp-04]
:0043EAEA 25FF000000              and eax, 000000FF
:0043EAEF 50                      push eax
:0043EAF0 E8A0F4FFFF              call 0043DF95
:0043EAF5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043EABD(U), :0043EAD1(U), :0043EAE5(U)
|
:0043EAF8 EB37                    jmp 0043EB31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EA87(C)
|
:0043EAFA 6A00                    push 00000000
:0043EAFC 8A4D10                  mov cl, byte ptr [ebp+10]
:0043EAFF 51                      push ecx
:0043EB00 8A5508                  mov dl, byte ptr [ebp+08]
:0043EB03 52                      push edx
:0043EB04 8A45FC                  mov al, byte ptr [ebp-04]
:0043EB07 50                      push eax
:0043EB08 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043EB0B 51                      push ecx
:0043EB0C B958494B00              mov ecx, 004B4958
:0043EB11 E87AFC0000              call 0044E790

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043EB16 6A07                    push 00000007
:0043EB18 B9F8544B00              mov ecx, 004B54F8
:0043EB1D E8F8A90200              call 0046951A

* Possible StringData Ref from Data Obj ->"SnҦڤ賡_"
                                  |
:0043EB22 68D0E64700              push 0047E6D0
:0043EB27 6A00                    push 00000000
:0043EB29 E80529FFFF              call 00431433
:0043EB2E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EAF8(U)
|
:0043EB31 837DF800                cmp dword ptr [ebp-08], 00000000
:0043EB35 7437                    je 0043EB6E
:0043EB37 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043EB3A 6BC924                  imul ecx, 00000024
:0043EB3D 81C1B83B4B00            add ecx, 004B3BB8
:0043EB43 E8987EFFFF              call 004369E0
:0043EB48 6BC050                  imul eax, 00000050
:0043EB4B 05787F4900              add eax, 00497F78
:0043EB50 8945E4                  mov dword ptr [ebp-1C], eax
:0043EB53 6A01                    push 00000001
:0043EB55 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043EB58 E883F3FEFF              call 0042DEE0
:0043EB5D 25FF000000              and eax, 000000FF
:0043EB62 83C014                  add eax, 00000014
:0043EB65 50                      push eax
:0043EB66 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043EB69 E83C39FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EB35(C)
|
:0043EB6E C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043E9AC(U), :0043E9EC(C)
|
:0043EB78 8BE5                    mov esp, ebp
:0043EB7A 5D                      pop ebp
:0043EB7B C3                      ret



* Referenced by a CALL at Address:
|:0043EAC9   
|
:0043EB7C 55                      push ebp
:0043EB7D 8BEC                    mov ebp, esp

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043EB7F 6A02                    push 00000002
:0043EB81 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043EB84 6BC924                  imul ecx, 00000024
:0043EB87 81C1B83B4B00            add ecx, 004B3BB8
:0043EB8D E8DE7EFFFF              call 00436A70
:0043EB92 85C0                    test eax, eax
:0043EB94 742F                    je 0043EBC5

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043EB96 6A07                    push 00000007
:0043EB98 B9F8544B00              mov ecx, 004B54F8
:0043EB9D E878A90200              call 0046951A
:0043EBA2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043EBA5 6BC924                  imul ecx, 00000024
:0043EBA8 81C1B83B4B00            add ecx, 004B3BB8
:0043EBAE E83D7EFFFF              call 004369F0
:0043EBB3 50                      push eax

* Possible StringData Ref from Data Obj ->"%sBwg֤F"
                                  |
:0043EBB4 68ECE64700              push 0047E6EC
:0043EBB9 6A00                    push 00000000
:0043EBBB E87328FFFF              call 00431433
:0043EBC0 83C40C                  add esp, 0000000C
:0043EBC3 EB2D                    jmp 0043EBF2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EB94(C)
|
:0043EBC5 6A42                    push 00000042
:0043EBC7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043EBCA 6BC924                  imul ecx, 00000024
:0043EBCD 81C1B83B4B00            add ecx, 004B3BB8
:0043EBD3 E8E8330000              call 00441FC0
:0043EBD8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043EBDB 6BC924                  imul ecx, 00000024
:0043EBDE 81C1B83B4B00            add ecx, 004B3BB8
:0043EBE4 E8F77DFFFF              call 004369E0
:0043EBE9 50                      push eax
:0043EBEA E82DDF0200              call 0046CB1C
:0043EBEF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EBC3(U)
|
:0043EBF2 5D                      pop ebp
:0043EBF3 C3                      ret



* Referenced by a CALL at Address:
|:0043EADD   
|
:0043EBF4 55                      push ebp
:0043EBF5 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043EBF7 6A04                    push 00000004
:0043EBF9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043EBFC 6BC924                  imul ecx, 00000024
:0043EBFF 81C1B83B4B00            add ecx, 004B3BB8
:0043EC05 E8667EFFFF              call 00436A70
:0043EC0A 85C0                    test eax, eax
:0043EC0C 742F                    je 0043EC3D

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043EC0E 6A07                    push 00000007
:0043EC10 B9F8544B00              mov ecx, 004B54F8
:0043EC15 E800A90200              call 0046951A
:0043EC1A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043EC1D 6BC924                  imul ecx, 00000024
:0043EC20 81C1B83B4B00            add ecx, 004B3BB8
:0043EC26 E8C57DFFFF              call 004369F0
:0043EC2B 50                      push eax

* Possible StringData Ref from Data Obj ->"%swgQIFʭp,ʦF䵴"
                                  |
:0043EC2C 6800E74700              push 0047E700
:0043EC31 6A00                    push 00000000
:0043EC33 E8FB27FFFF              call 00431433
:0043EC38 83C40C                  add esp, 0000000C
:0043EC3B EB2D                    jmp 0043EC6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EC0C(C)
|
:0043EC3D 6A44                    push 00000044
:0043EC3F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043EC42 6BC924                  imul ecx, 00000024
:0043EC45 81C1B83B4B00            add ecx, 004B3BB8
:0043EC4B E870330000              call 00441FC0
:0043EC50 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043EC53 6BC924                  imul ecx, 00000024
:0043EC56 81C1B83B4B00            add ecx, 004B3BB8
:0043EC5C E87F7DFFFF              call 004369E0
:0043EC61 50                      push eax
:0043EC62 E8B5DE0200              call 0046CB1C
:0043EC67 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EC3B(U)
|
:0043EC6A 5D                      pop ebp
:0043EC6B C3                      ret



* Referenced by a CALL at Address:
|:0043EA00   
|
:0043EC6C 55                      push ebp
:0043EC6D 8BEC                    mov ebp, esp
:0043EC6F 83EC08                  sub esp, 00000008
:0043EC72 C745FC01000000          mov [ebp-04], 00000001
:0043EC79 8B4508                  mov eax, dword ptr [ebp+08]
:0043EC7C 8945F8                  mov dword ptr [ebp-08], eax
:0043EC7F 837DF824                cmp dword ptr [ebp-08], 00000024
:0043EC83 7411                    je 0043EC96
:0043EC85 837DF825                cmp dword ptr [ebp-08], 00000025
:0043EC89 7446                    je 0043ECD1
:0043EC8B 837DF826                cmp dword ptr [ebp-08], 00000026
:0043EC8F 747B                    je 0043ED0C
:0043EC91 E9B1000000              jmp 0043ED47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EC83(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043EC96 6A02                    push 00000002
:0043EC98 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043EC9B 6BC924                  imul ecx, 00000024
:0043EC9E 81C1B83B4B00            add ecx, 004B3BB8
:0043ECA4 E8C77DFFFF              call 00436A70
:0043ECA9 85C0                    test eax, eax
:0043ECAB 7422                    je 0043ECCF

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043ECAD 6A07                    push 00000007
:0043ECAF B9F8544B00              mov ecx, 004B54F8
:0043ECB4 E861A80200              call 0046951A

* Possible StringData Ref from Data Obj ->"ӳwgBcBp"
                                  |
:0043ECB9 6820E74700              push 0047E720
:0043ECBE 6A00                    push 00000000
:0043ECC0 E86E27FFFF              call 00431433
:0043ECC5 83C408                  add esp, 00000008
:0043ECC8 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043ECAB(C)
|
:0043ECCF EB7D                    jmp 0043ED4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EC89(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043ECD1 6A04                    push 00000004
:0043ECD3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043ECD6 6BC924                  imul ecx, 00000024
:0043ECD9 81C1B83B4B00            add ecx, 004B3BB8
:0043ECDF E88C7DFFFF              call 00436A70
:0043ECE4 85C0                    test eax, eax
:0043ECE6 7422                    je 0043ED0A

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043ECE8 6A07                    push 00000007
:0043ECEA B9F8544B00              mov ecx, 004B54F8
:0043ECEF E826A80200              call 0046951A

* Possible StringData Ref from Data Obj ->"ӳwgBʭpp"
                                  |
:0043ECF4 6838E74700              push 0047E738
:0043ECF9 6A00                    push 00000000
:0043ECFB E83327FFFF              call 00431433
:0043ED00 83C408                  add esp, 00000008
:0043ED03 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043ECE6(C)
|
:0043ED0A EB42                    jmp 0043ED4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EC8F(C)
|
:0043ED0C 6A01                    push 00000001
:0043ED0E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043ED11 6BC924                  imul ecx, 00000024
:0043ED14 81C1B83B4B00            add ecx, 004B3BB8
:0043ED1A E8517DFFFF              call 00436A70
:0043ED1F 85C0                    test eax, eax
:0043ED21 7422                    je 0043ED45

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043ED23 6A07                    push 00000007
:0043ED25 B9F8544B00              mov ecx, 004B54F8
:0043ED2A E8EBA70200              call 0046951A

* Possible StringData Ref from Data Obj ->"ӳwgBTp"
                                  |
:0043ED2F 6850E74700              push 0047E750
:0043ED34 6A00                    push 00000000
:0043ED36 E8F826FFFF              call 00431433
:0043ED3B 83C408                  add esp, 00000008
:0043ED3E C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043ED21(C)
|
:0043ED45 EB07                    jmp 0043ED4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EC91(U)
|
:0043ED47 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043ECCF(U), :0043ED0A(U), :0043ED45(U)
|
:0043ED4E 8B45FC                  mov eax, dword ptr [ebp-04]
:0043ED51 8BE5                    mov esp, ebp
:0043ED53 5D                      pop ebp
:0043ED54 C3                      ret



* Referenced by a CALL at Address:
|:0043B0EB   
|
:0043ED55 55                      push ebp
:0043ED56 8BEC                    mov ebp, esp
:0043ED58 83EC38                  sub esp, 00000038
:0043ED5B C645FCFF                mov [ebp-04], FF
:0043ED5F 8B4508                  mov eax, dword ptr [ebp+08]
:0043ED62 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0043ED64 B906000000              mov ecx, 00000006
:0043ED69 F7F1                    div ecx
:0043ED6B 8845F4                  mov byte ptr [ebp-0C], al
:0043ED6E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043ED71 6BC931                  imul ecx, 00000031
:0043ED74 81C1001D4B00            add ecx, 004B1D00
:0043ED7A E8016AFCFF              call 00405780
:0043ED7F 8845EC                  mov byte ptr [ebp-14], al
:0043ED82 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043ED85 6BC931                  imul ecx, 00000031
:0043ED88 81C1001D4B00            add ecx, 004B1D00
:0043ED8E E8CD69FCFF              call 00405760
:0043ED93 8845F0                  mov byte ptr [ebp-10], al
:0043ED96 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043ED99 6BC924                  imul ecx, 00000024
:0043ED9C 81C1B83B4B00            add ecx, 004B3BB8
:0043EDA2 E8D969FCFF              call 00405780
:0043EDA7 25FF000000              and eax, 000000FF
:0043EDAC 83F807                  cmp eax, 00000007
:0043EDAF 7418                    je 0043EDC9
:0043EDB1 33D2                    xor edx, edx
:0043EDB3 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0043EDB9 83E204                  and edx, 00000004
:0043EDBC 85D2                    test edx, edx
:0043EDBE 7509                    jne 0043EDC9
:0043EDC0 C745D000000000          mov [ebp-30], 00000000
:0043EDC7 EB07                    jmp 0043EDD0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043EDAF(C), :0043EDBE(C)
|
:0043EDC9 C745D001000000          mov [ebp-30], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EDC7(U)
|
:0043EDD0 8B45D0                  mov eax, dword ptr [ebp-30]
:0043EDD3 8945F8                  mov dword ptr [ebp-08], eax
:0043EDD6 68FF000000              push 000000FF
:0043EDDB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043EDDE 51                      push ecx
:0043EDDF 8B550C                  mov edx, dword ptr [ebp+0C]
:0043EDE2 52                      push edx
:0043EDE3 8B4508                  mov eax, dword ptr [ebp+08]
:0043EDE6 50                      push eax
:0043EDE7 E8B985FFFF              call 004373A5
:0043EDEC 83C410                  add esp, 00000010
:0043EDEF 85C0                    test eax, eax
:0043EDF1 7505                    jne 0043EDF8
:0043EDF3 E9A5030000              jmp 0043F19D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EDF1(C)
|
:0043EDF8 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043EDFB 51                      push ecx
:0043EDFC E811C8FFFF              call 0043B612
:0043EE01 83C404                  add esp, 00000004
:0043EE04 6A00                    push 00000000
:0043EE06 8B55F0                  mov edx, dword ptr [ebp-10]
:0043EE09 81E2FF000000            and edx, 000000FF
:0043EE0F 80CA80                  or dl, 80
:0043EE12 52                      push edx
:0043EE13 8A450C                  mov al, byte ptr [ebp+0C]
:0043EE16 50                      push eax
:0043EE17 B958494B00              mov ecx, 004B4958
:0043EE1C E88DEF0000              call 0044DDAE
:0043EE21 8845FC                  mov byte ptr [ebp-04], al
:0043EE24 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043EE27 81E1FF000000            and ecx, 000000FF
:0043EE2D 81F9FF000000            cmp ecx, 000000FF
:0043EE33 0F8464030000            je 0043F19D
:0043EE39 8A55FC                  mov dl, byte ptr [ebp-04]
:0043EE3C 52                      push edx
:0043EE3D 8A450C                  mov al, byte ptr [ebp+0C]
:0043EE40 50                      push eax
:0043EE41 E8B0B6FFFF              call 0043A4F6
:0043EE46 83C408                  add esp, 00000008
:0043EE49 837DF800                cmp dword ptr [ebp-08], 00000000
:0043EE4D 7421                    je 0043EE70
:0043EE4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043EE52 6BC931                  imul ecx, 00000031
:0043EE55 81C1001D4B00            add ecx, 004B1D00
:0043EE5B E89068FCFF              call 004056F0
:0043EE60 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043EE61 6868E74700              push 0047E768
:0043EE66 6A00                    push 00000000
:0043EE68 E8C625FFFF              call 00431433
:0043EE6D 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EE4D(C)
|
:0043EE70 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043EE73 51                      push ecx
:0043EE74 8A550C                  mov dl, byte ptr [ebp+0C]
:0043EE77 52                      push edx
:0043EE78 E879B6FFFF              call 0043A4F6
:0043EE7D 83C408                  add esp, 00000008
:0043EE80 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043EE83 81E1FF000000            and ecx, 000000FF
:0043EE89 6BC924                  imul ecx, 00000024
:0043EE8C 81C1B83B4B00            add ecx, 004B3BB8
:0043EE92 E8A92DFFFF              call 00431C40
:0043EE97 668B00                  mov ax, word ptr [eax]
:0043EE9A 668945E8                mov word ptr [ebp-18], ax
:0043EE9E 8A4DE9                  mov cl, byte ptr [ebp-17]
:0043EEA1 51                      push ecx
:0043EEA2 8A55E8                  mov dl, byte ptr [ebp-18]
:0043EEA5 52                      push edx
:0043EEA6 B958494B00              mov ecx, 004B4958
:0043EEAB E83DEC0000              call 0044DAED
:0043EEB0 8A45FC                  mov al, byte ptr [ebp-04]
:0043EEB3 50                      push eax
:0043EEB4 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043EEB7 51                      push ecx
:0043EEB8 E89984FFFF              call 00437356
:0043EEBD 83C408                  add esp, 00000008
:0043EEC0 85C0                    test eax, eax
:0043EEC2 0F8457020000            je 0043F11F
:0043EEC8 6A01                    push 00000001
:0043EECA 8A5510                  mov dl, byte ptr [ebp+10]
:0043EECD 52                      push edx
:0043EECE 8A4508                  mov al, byte ptr [ebp+08]
:0043EED1 50                      push eax
:0043EED2 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043EED5 51                      push ecx
:0043EED6 8A550C                  mov dl, byte ptr [ebp+0C]
:0043EED9 52                      push edx
:0043EEDA B958494B00              mov ecx, 004B4958
:0043EEDF E8ACF80000              call 0044E790
:0043EEE4 8B45FC                  mov eax, dword ptr [ebp-04]
:0043EEE7 25FF000000              and eax, 000000FF
:0043EEEC 50                      push eax
:0043EEED 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043EEF0 51                      push ecx
:0043EEF1 E8AB020000              call 0043F1A1
:0043EEF6 83C408                  add esp, 00000008
:0043EEF9 8945DC                  mov dword ptr [ebp-24], eax
:0043EEFC 8B55DC                  mov edx, dword ptr [ebp-24]
:0043EEFF 52                      push edx
:0043EF00 8B450C                  mov eax, dword ptr [ebp+0C]
:0043EF03 50                      push eax
:0043EF04 E825030000              call 0043F22E
:0043EF09 83C408                  add esp, 00000008
:0043EF0C 8945E0                  mov dword ptr [ebp-20], eax
:0043EF0F 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043EF12 51                      push ecx
:0043EF13 8D55D8                  lea edx, dword ptr [ebp-28]
:0043EF16 52                      push edx
:0043EF17 E890B10000              call 0044A0AC
:0043EF1C 83C408                  add esp, 00000008
:0043EF1F 8A450C                  mov al, byte ptr [ebp+0C]
:0043EF22 50                      push eax
:0043EF23 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0043EF26 51                      push ecx
:0043EF27 E880B10000              call 0044A0AC
:0043EF2C 83C408                  add esp, 00000008
:0043EF2F E8F183FFFF              call 00437325
:0043EF34 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043EF37 81E1FF000000            and ecx, 000000FF
:0043EF3D 6BC924                  imul ecx, 00000024
:0043EF40 81C1B83B4B00            add ecx, 004B3BB8
:0043EF46 E8C5D9FCFF              call 0040C910
:0043EF4B 85C0                    test eax, eax
:0043EF4D 7411                    je 0043EF60
:0043EF4F 33D2                    xor edx, edx
:0043EF51 8A15CC484B00            mov dl, byte ptr [004B48CC]
:0043EF57 8D44120E                lea eax, dword ptr [edx+edx+0E]
:0043EF5B 8945CC                  mov dword ptr [ebp-34], eax
:0043EF5E EB0F                    jmp 0043EF6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EF4D(C)
|
:0043EF60 33C9                    xor ecx, ecx
:0043EF62 8A0DCC484B00            mov cl, byte ptr [004B48CC]
:0043EF68 8D54092A                lea edx, dword ptr [ecx+ecx+2A]
:0043EF6C 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EF5E(U)
|
:0043EF6F 8A45CC                  mov al, byte ptr [ebp-34]
:0043EF72 8845D8                  mov byte ptr [ebp-28], al
:0043EF75 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0043EF78 81E1FF000000            and ecx, 000000FF
:0043EF7E 33D2                    xor edx, edx
:0043EF80 8A15CC484B00            mov dl, byte ptr [004B48CC]
:0043EF86 8D44120E                lea eax, dword ptr [edx+edx+0E]
:0043EF8A 3BC8                    cmp ecx, eax
:0043EF8C 7511                    jne 0043EF9F
:0043EF8E 33C9                    xor ecx, ecx
:0043EF90 8A0DCC484B00            mov cl, byte ptr [004B48CC]
:0043EF96 8D54092A                lea edx, dword ptr [ecx+ecx+2A]
:0043EF9A 8955C8                  mov dword ptr [ebp-38], edx
:0043EF9D EB0E                    jmp 0043EFAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EF8C(C)
|
:0043EF9F 33C0                    xor eax, eax
:0043EFA1 A0CC484B00              mov al, byte ptr [004B48CC]
:0043EFA6 8D4C000E                lea ecx, dword ptr [eax+eax+0E]
:0043EFAA 894DC8                  mov dword ptr [ebp-38], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EF9D(U)
|
:0043EFAD 8A55C8                  mov dl, byte ptr [ebp-38]
:0043EFB0 8855E4                  mov byte ptr [ebp-1C], dl
:0043EFB3 33C0                    xor eax, eax
:0043EFB5 A09D4E4B00              mov al, byte ptr [004B4E9D]
:0043EFBA 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:0043EFBE 51                      push ecx
:0043EFBF B9A83B4B00              mov ecx, 004B3BA8
:0043EFC4 E84709FEFF              call 0041F910
:0043EFC9 8A550C                  mov dl, byte ptr [ebp+0C]
:0043EFCC 52                      push edx
:0043EFCD 668B45E4                mov ax, word ptr [ebp-1C]
:0043EFD1 50                      push eax
:0043EFD2 E881B10000              call 0044A158
:0043EFD7 83C408                  add esp, 00000008
:0043EFDA 8A4DFC                  mov cl, byte ptr [ebp-04]
:0043EFDD 51                      push ecx
:0043EFDE 668B55D8                mov dx, word ptr [ebp-28]
:0043EFE2 52                      push edx
:0043EFE3 E870B10000              call 0044A158
:0043EFE8 83C408                  add esp, 00000008
:0043EFEB E8E005FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043EFF0 6A03                    push 00000003
:0043EFF2 E83F07FFFF              call 0042F736
:0043EFF7 83C404                  add esp, 00000004
:0043EFFA 33C0                    xor eax, eax
:0043EFFC A09D4E4B00              mov al, byte ptr [004B4E9D]
:0043F001 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:0043F005 51                      push ecx
:0043F006 B9A83B4B00              mov ecx, 004B3BA8
:0043F00B E80009FEFF              call 0041F910
:0043F010 6A01                    push 00000001
:0043F012 8B55DC                  mov edx, dword ptr [ebp-24]
:0043F015 52                      push edx
:0043F016 8A45FC                  mov al, byte ptr [ebp-04]
:0043F019 50                      push eax
:0043F01A 668B4DD8                mov cx, word ptr [ebp-28]
:0043F01E 51                      push ecx
:0043F01F E8EEB30000              call 0044A412
:0043F024 83C410                  add esp, 00000010
:0043F027 6881000000              push 00000081
:0043F02C 8B55E0                  mov edx, dword ptr [ebp-20]
:0043F02F 52                      push edx
:0043F030 8A45FC                  mov al, byte ptr [ebp-04]
:0043F033 50                      push eax
:0043F034 668B4DE4                mov cx, word ptr [ebp-1C]
:0043F038 51                      push ecx
:0043F039 E8D4B30000              call 0044A412
:0043F03E 83C410                  add esp, 00000010
:0043F041 E88A05FFFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0043F046 6A03                    push 00000003
:0043F048 E8E906FFFF              call 0042F736
:0043F04D 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0043F050 6A09                    push 00000009
:0043F052 6A21                    push 00000021
:0043F054 8A55D9                  mov dl, byte ptr [ebp-27]
:0043F057 52                      push edx
:0043F058 33C0                    xor eax, eax
:0043F05A A0CC484B00              mov al, byte ptr [004B48CC]
:0043F05F 83C006                  add eax, 00000006
:0043F062 50                      push eax
:0043F063 B958494B00              mov ecx, 004B4958
:0043F068 E8DBD80000              call 0044C948

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0043F06D 6A09                    push 00000009
:0043F06F 6A21                    push 00000021
:0043F071 8A4DE5                  mov cl, byte ptr [ebp-1B]
:0043F074 51                      push ecx
:0043F075 33D2                    xor edx, edx
:0043F077 8A15CC484B00            mov dl, byte ptr [004B48CC]
:0043F07D 83C206                  add edx, 00000006
:0043F080 52                      push edx
:0043F081 B958494B00              mov ecx, 004B4958
:0043F086 E8BDD80000              call 0044C948
:0043F08B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F08E 6BC924                  imul ecx, 00000024
:0043F091 81C1B83B4B00            add ecx, 004B3BB8
:0043F097 E86442FCFF              call 00403300
:0043F09C 0345E0                  add eax, dword ptr [ebp-20]
:0043F09F 50                      push eax
:0043F0A0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F0A3 6BC924                  imul ecx, 00000024
:0043F0A6 81C1B83B4B00            add ecx, 004B3BB8
:0043F0AC E8A541FFFF              call 00433256
:0043F0B1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F0B4 81E1FF000000            and ecx, 000000FF
:0043F0BA 6BC924                  imul ecx, 00000024
:0043F0BD 81C1B83B4B00            add ecx, 004B3BB8
:0043F0C3 E83842FCFF              call 00403300
:0043F0C8 2B45DC                  sub eax, dword ptr [ebp-24]
:0043F0CB 50                      push eax
:0043F0CC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F0CF 81E1FF000000            and ecx, 000000FF
:0043F0D5 6BC924                  imul ecx, 00000024
:0043F0D8 81C1B83B4B00            add ecx, 004B3BB8
:0043F0DE E87341FFFF              call 00433256
:0043F0E3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F0E6 6BC924                  imul ecx, 00000024
:0043F0E9 81C1B83B4B00            add ecx, 004B3BB8
:0043F0EF E8EC78FFFF              call 004369E0
:0043F0F4 50                      push eax
:0043F0F5 E822DA0200              call 0046CB1C
:0043F0FA 83C404                  add esp, 00000004
:0043F0FD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F100 81E1FF000000            and ecx, 000000FF
:0043F106 6BC924                  imul ecx, 00000024
:0043F109 81C1B83B4B00            add ecx, 004B3BB8
:0043F10F E8CC78FFFF              call 004369E0
:0043F114 50                      push eax
:0043F115 E802DA0200              call 0046CB1C
:0043F11A 83C404                  add esp, 00000004
:0043F11D EB37                    jmp 0043F156

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043EEC2(C)
|
:0043F11F 6A00                    push 00000000
:0043F121 8A4510                  mov al, byte ptr [ebp+10]
:0043F124 50                      push eax
:0043F125 8A4D08                  mov cl, byte ptr [ebp+08]
:0043F128 51                      push ecx
:0043F129 8A55FC                  mov dl, byte ptr [ebp-04]
:0043F12C 52                      push edx
:0043F12D 8A450C                  mov al, byte ptr [ebp+0C]
:0043F130 50                      push eax
:0043F131 B958494B00              mov ecx, 004B4958
:0043F136 E855F60000              call 0044E790

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043F13B 6A07                    push 00000007
:0043F13D B9F8544B00              mov ecx, 004B54F8
:0043F142 E8D3A30200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۥѤF"
                                  |
:0043F147 686CE74700              push 0047E76C
:0043F14C 6A00                    push 00000000
:0043F14E E8E022FFFF              call 00431433
:0043F153 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F11D(U)
|
:0043F156 837DF800                cmp dword ptr [ebp-08], 00000000
:0043F15A 7437                    je 0043F193
:0043F15C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F15F 6BC924                  imul ecx, 00000024
:0043F162 81C1B83B4B00            add ecx, 004B3BB8
:0043F168 E87378FFFF              call 004369E0
:0043F16D 6BC050                  imul eax, 00000050
:0043F170 05787F4900              add eax, 00497F78
:0043F175 8945D4                  mov dword ptr [ebp-2C], eax
:0043F178 6A01                    push 00000001
:0043F17A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043F17D E85EEDFEFF              call 0042DEE0
:0043F182 25FF000000              and eax, 000000FF
:0043F187 83C014                  add eax, 00000014
:0043F18A 50                      push eax
:0043F18B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0043F18E E81733FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F15A(C)
|
:0043F193 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043EDF3(U), :0043EE33(C)
|
:0043F19D 8BE5                    mov esp, ebp
:0043F19F 5D                      pop ebp
:0043F1A0 C3                      ret



* Referenced by a CALL at Address:
|:0043EEF1   
|
:0043F1A1 55                      push ebp
:0043F1A2 8BEC                    mov ebp, esp
:0043F1A4 83EC08                  sub esp, 00000008
:0043F1A7 56                      push esi
:0043F1A8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F1AB 6BC924                  imul ecx, 00000024
:0043F1AE 81C1B83B4B00            add ecx, 004B3BB8
:0043F1B4 E82778FFFF              call 004369E0
:0043F1B9 6BC050                  imul eax, 00000050
:0043F1BC 05787F4900              add eax, 00497F78
:0043F1C1 8945F8                  mov dword ptr [ebp-08], eax
:0043F1C4 C745FC00000000          mov [ebp-04], 00000000
:0043F1CB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F1CE 6BC924                  imul ecx, 00000024
:0043F1D1 81C1B83B4B00            add ecx, 004B3BB8
:0043F1D7 E82441FCFF              call 00403300
:0043F1DC 8BF0                    mov esi, eax
:0043F1DE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043F1E1 E8352CFCFF              call 00401E1B
:0043F1E6 C1E003                  shl eax, 03
:0043F1E9 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0043F1EB B90A000000              mov ecx, 0000000A
:0043F1F0 F7F1                    div ecx
:0043F1F2 3BF0                    cmp esi, eax
:0043F1F4 7619                    jbe 0043F20F
:0043F1F6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043F1F9 E81D2CFCFF              call 00401E1B
:0043F1FE C1E003                  shl eax, 03
:0043F201 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0043F203 B90A000000              mov ecx, 0000000A
:0043F208 F7F1                    div ecx
:0043F20A 8945FC                  mov dword ptr [ebp-04], eax
:0043F20D EB17                    jmp 0043F226

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F1F4(C)
|
:0043F20F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F212 6BC924                  imul ecx, 00000024
:0043F215 81C1B83B4B00            add ecx, 004B3BB8
:0043F21B E8E040FCFF              call 00403300
:0043F220 83E801                  sub eax, 00000001
:0043F223 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F20D(U)
|
:0043F226 8B45FC                  mov eax, dword ptr [ebp-04]
:0043F229 5E                      pop esi
:0043F22A 8BE5                    mov esp, ebp
:0043F22C 5D                      pop ebp
:0043F22D C3                      ret



* Referenced by a CALL at Address:
|:0043EF04   
|
:0043F22E 55                      push ebp
:0043F22F 8BEC                    mov ebp, esp
:0043F231 83EC08                  sub esp, 00000008
:0043F234 56                      push esi
:0043F235 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F238 6BC924                  imul ecx, 00000024
:0043F23B 81C1B83B4B00            add ecx, 004B3BB8
:0043F241 E89A77FFFF              call 004369E0
:0043F246 6BC050                  imul eax, 00000050
:0043F249 05787F4900              add eax, 00497F78
:0043F24E 8945FC                  mov dword ptr [ebp-04], eax
:0043F251 C745F800000000          mov [ebp-08], 00000000
:0043F258 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F25B 6BC924                  imul ecx, 00000024
:0043F25E 81C1B83B4B00            add ecx, 004B3BB8
:0043F264 E89740FCFF              call 00403300
:0043F269 8BF0                    mov esi, eax
:0043F26B 03750C                  add esi, dword ptr [ebp+0C]
:0043F26E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F271 E8A52BFCFF              call 00401E1B
:0043F276 3BF0                    cmp esi, eax
:0043F278 7622                    jbe 0043F29C
:0043F27A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F27D E8992BFCFF              call 00401E1B
:0043F282 8BF0                    mov esi, eax
:0043F284 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F287 6BC924                  imul ecx, 00000024
:0043F28A 81C1B83B4B00            add ecx, 004B3BB8
:0043F290 E86B40FCFF              call 00403300
:0043F295 2BF0                    sub esi, eax
:0043F297 8975F8                  mov dword ptr [ebp-08], esi
:0043F29A EB06                    jmp 0043F2A2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F278(C)
|
:0043F29C 8B450C                  mov eax, dword ptr [ebp+0C]
:0043F29F 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F29A(U)
|
:0043F2A2 8B45F8                  mov eax, dword ptr [ebp-08]
:0043F2A5 5E                      pop esi
:0043F2A6 8BE5                    mov esp, ebp
:0043F2A8 5D                      pop ebp
:0043F2A9 C3                      ret



* Referenced by a CALL at Address:
|:0043B10D   
|
:0043F2AA 55                      push ebp
:0043F2AB 8BEC                    mov ebp, esp
:0043F2AD 83EC20                  sub esp, 00000020
:0043F2B0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F2B3 6BC931                  imul ecx, 00000031
:0043F2B6 81C1001D4B00            add ecx, 004B1D00
:0043F2BC E89F64FCFF              call 00405760
:0043F2C1 8845F0                  mov byte ptr [ebp-10], al
:0043F2C4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F2C7 6BC931                  imul ecx, 00000031
:0043F2CA 81C1001D4B00            add ecx, 004B1D00
:0043F2D0 E8AB64FCFF              call 00405780
:0043F2D5 8845EC                  mov byte ptr [ebp-14], al
:0043F2D8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F2DB 6BC924                  imul ecx, 00000024
:0043F2DE 81C1B83B4B00            add ecx, 004B3BB8
:0043F2E4 E89764FCFF              call 00405780
:0043F2E9 25FF000000              and eax, 000000FF
:0043F2EE 83F807                  cmp eax, 00000007
:0043F2F1 7417                    je 0043F30A
:0043F2F3 33C0                    xor eax, eax
:0043F2F5 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043F2FA 83E004                  and eax, 00000004
:0043F2FD 85C0                    test eax, eax
:0043F2FF 7509                    jne 0043F30A
:0043F301 C745E000000000          mov [ebp-20], 00000000
:0043F308 EB07                    jmp 0043F311

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F2F1(C), :0043F2FF(C)
|
:0043F30A C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F308(U)
|
:0043F311 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043F314 894DF4                  mov dword ptr [ebp-0C], ecx
:0043F317 68FF000000              push 000000FF
:0043F31C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043F31F 52                      push edx
:0043F320 8B450C                  mov eax, dword ptr [ebp+0C]
:0043F323 50                      push eax
:0043F324 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F327 51                      push ecx
:0043F328 E87880FFFF              call 004373A5
:0043F32D 83C410                  add esp, 00000010
:0043F330 85C0                    test eax, eax
:0043F332 7505                    jne 0043F339
:0043F334 E907010000              jmp 0043F440

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F332(C)
|
:0043F339 6A01                    push 00000001
:0043F33B 8B55F0                  mov edx, dword ptr [ebp-10]
:0043F33E 81E2FF000000            and edx, 000000FF
:0043F344 80CA80                  or dl, 80
:0043F347 52                      push edx
:0043F348 8A450C                  mov al, byte ptr [ebp+0C]
:0043F34B 50                      push eax
:0043F34C B958494B00              mov ecx, 004B4958
:0043F351 E858EA0000              call 0044DDAE
:0043F356 8845FC                  mov byte ptr [ebp-04], al
:0043F359 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F35C 81E1FF000000            and ecx, 000000FF
:0043F362 81F9FF000000            cmp ecx, 000000FF
:0043F368 0F84D2000000            je 0043F440
:0043F36E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F371 81E1FF000000            and ecx, 000000FF
:0043F377 6BC924                  imul ecx, 00000024
:0043F37A 81C1B83B4B00            add ecx, 004B3BB8
:0043F380 E85B76FFFF              call 004369E0
:0043F385 6BC050                  imul eax, 00000050
:0043F388 05787F4900              add eax, 00497F78
:0043F38D 8945F8                  mov dword ptr [ebp-08], eax
:0043F390 6A00                    push 00000000
:0043F392 8A55FC                  mov dl, byte ptr [ebp-04]
:0043F395 52                      push edx
:0043F396 E82CAAFFFF              call 00439DC7
:0043F39B 83C408                  add esp, 00000008
:0043F39E 85C0                    test eax, eax
:0043F3A0 0F849A000000            je 0043F440
:0043F3A6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F3A9 81E1FF000000            and ecx, 000000FF
:0043F3AF 6BC924                  imul ecx, 00000024
:0043F3B2 81C1B83B4B00            add ecx, 004B3BB8
:0043F3B8 E88328FFFF              call 00431C40
:0043F3BD 668B00                  mov ax, word ptr [eax]
:0043F3C0 668945E8                mov word ptr [ebp-18], ax
:0043F3C4 8A4DE9                  mov cl, byte ptr [ebp-17]
:0043F3C7 51                      push ecx
:0043F3C8 8A55E8                  mov dl, byte ptr [ebp-18]
:0043F3CB 52                      push edx
:0043F3CC B958494B00              mov ecx, 004B4958
:0043F3D1 E817E70000              call 0044DAED
:0043F3D6 8A4510                  mov al, byte ptr [ebp+10]
:0043F3D9 50                      push eax
:0043F3DA 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043F3DD 51                      push ecx
:0043F3DE 8A5508                  mov dl, byte ptr [ebp+08]
:0043F3E1 52                      push edx
:0043F3E2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F3E5 81E1FF000000            and ecx, 000000FF
:0043F3EB 6BC924                  imul ecx, 00000024
:0043F3EE 81C1B83B4B00            add ecx, 004B3BB8
:0043F3F4 E891250000              call 0044198A
:0043F3F9 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043F3FD 7437                    je 0043F436
:0043F3FF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F402 6BC924                  imul ecx, 00000024
:0043F405 81C1B83B4B00            add ecx, 004B3BB8
:0043F40B E8D075FFFF              call 004369E0
:0043F410 6BC050                  imul eax, 00000050
:0043F413 05787F4900              add eax, 00497F78
:0043F418 8945E4                  mov dword ptr [ebp-1C], eax
:0043F41B 6A01                    push 00000001
:0043F41D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043F420 E8BBEAFEFF              call 0042DEE0
:0043F425 25FF000000              and eax, 000000FF
:0043F42A 83C014                  add eax, 00000014
:0043F42D 50                      push eax
:0043F42E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043F431 E87430FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F3FD(C)
|
:0043F436 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F334(U), :0043F368(C), :0043F3A0(C)
|
:0043F440 8BE5                    mov esp, ebp
:0043F442 5D                      pop ebp
:0043F443 C3                      ret



* Referenced by a CALL at Address:
|:0043B12F   
|
:0043F444 55                      push ebp
:0043F445 8BEC                    mov ebp, esp
:0043F447 83EC24                  sub esp, 00000024
:0043F44A 56                      push esi
:0043F44B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F44E 6BC931                  imul ecx, 00000031
:0043F451 81C1001D4B00            add ecx, 004B1D00
:0043F457 E80463FCFF              call 00405760
:0043F45C 8845F0                  mov byte ptr [ebp-10], al
:0043F45F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F462 6BC931                  imul ecx, 00000031
:0043F465 81C1001D4B00            add ecx, 004B1D00
:0043F46B E81063FCFF              call 00405780
:0043F470 8845EC                  mov byte ptr [ebp-14], al
:0043F473 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F476 6BC924                  imul ecx, 00000024
:0043F479 81C1B83B4B00            add ecx, 004B3BB8
:0043F47F E8FC62FCFF              call 00405780
:0043F484 25FF000000              and eax, 000000FF
:0043F489 83F807                  cmp eax, 00000007
:0043F48C 7417                    je 0043F4A5
:0043F48E 33C0                    xor eax, eax
:0043F490 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043F495 83E004                  and eax, 00000004
:0043F498 85C0                    test eax, eax
:0043F49A 7509                    jne 0043F4A5
:0043F49C C745DC00000000          mov [ebp-24], 00000000
:0043F4A3 EB07                    jmp 0043F4AC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F48C(C), :0043F49A(C)
|
:0043F4A5 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F4A3(U)
|
:0043F4AC 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0043F4AF 894DF4                  mov dword ptr [ebp-0C], ecx
:0043F4B2 68FF000000              push 000000FF
:0043F4B7 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043F4BA 52                      push edx
:0043F4BB 8B450C                  mov eax, dword ptr [ebp+0C]
:0043F4BE 50                      push eax
:0043F4BF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F4C2 51                      push ecx
:0043F4C3 E8DD7EFFFF              call 004373A5
:0043F4C8 83C410                  add esp, 00000010
:0043F4CB 85C0                    test eax, eax
:0043F4CD 7505                    jne 0043F4D4
:0043F4CF E9D6010000              jmp 0043F6AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F4CD(C)
|
:0043F4D4 6A01                    push 00000001
:0043F4D6 8B55F0                  mov edx, dword ptr [ebp-10]
:0043F4D9 81E2FF000000            and edx, 000000FF
:0043F4DF 80CA80                  or dl, 80
:0043F4E2 52                      push edx
:0043F4E3 8A450C                  mov al, byte ptr [ebp+0C]
:0043F4E6 50                      push eax
:0043F4E7 B958494B00              mov ecx, 004B4958
:0043F4EC E8BDE80000              call 0044DDAE
:0043F4F1 8845FC                  mov byte ptr [ebp-04], al
:0043F4F4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F4F7 81E1FF000000            and ecx, 000000FF
:0043F4FD 81F9FF000000            cmp ecx, 000000FF
:0043F503 0F84A1010000            je 0043F6AA
:0043F509 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F50C 81E1FF000000            and ecx, 000000FF
:0043F512 6BC924                  imul ecx, 00000024
:0043F515 81C1B83B4B00            add ecx, 004B3BB8
:0043F51B E8C074FFFF              call 004369E0
:0043F520 6BC050                  imul eax, 00000050
:0043F523 05787F4900              add eax, 00497F78
:0043F528 8945F8                  mov dword ptr [ebp-08], eax
:0043F52B 6A00                    push 00000000
:0043F52D 8A55FC                  mov dl, byte ptr [ebp-04]
:0043F530 52                      push edx
:0043F531 E891A8FFFF              call 00439DC7
:0043F536 83C408                  add esp, 00000008
:0043F539 85C0                    test eax, eax
:0043F53B 0F8469010000            je 0043F6AA
:0043F541 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F544 81E1FF000000            and ecx, 000000FF
:0043F54A 6BC924                  imul ecx, 00000024
:0043F54D 81C1B83B4B00            add ecx, 004B3BB8
:0043F553 E8E826FFFF              call 00431C40
:0043F558 668B00                  mov ax, word ptr [eax]
:0043F55B 668945E8                mov word ptr [ebp-18], ax
:0043F55F 8A4DE9                  mov cl, byte ptr [ebp-17]
:0043F562 51                      push ecx
:0043F563 8A55E8                  mov dl, byte ptr [ebp-18]
:0043F566 52                      push edx
:0043F567 B958494B00              mov ecx, 004B4958
:0043F56C E87CE50000              call 0044DAED
:0043F571 8A4510                  mov al, byte ptr [ebp+10]
:0043F574 50                      push eax
:0043F575 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043F578 51                      push ecx
:0043F579 8A5508                  mov dl, byte ptr [ebp+08]
:0043F57C 52                      push edx
:0043F57D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F580 81E1FF000000            and ecx, 000000FF
:0043F586 6BC924                  imul ecx, 00000024
:0043F589 81C1B83B4B00            add ecx, 004B3BB8
:0043F58F E8F6230000              call 0044198A
:0043F594 8B45EC                  mov eax, dword ptr [ebp-14]
:0043F597 25FF000000              and eax, 000000FF
:0043F59C 85C0                    test eax, eax
:0043F59E 0F84BF000000            je 0043F663
:0043F5A4 68FF000000              push 000000FF
:0043F5A9 6A11                    push 00000011
:0043F5AB 6868484B00              push 004B4868
:0043F5B0 E82B900300              call 004785E0
:0043F5B5 83C40C                  add esp, 0000000C
:0043F5B8 68FF000000              push 000000FF
:0043F5BD 68FF000000              push 000000FF
:0043F5C2 6A01                    push 00000001
:0043F5C4 6868484B00              push 004B4868
:0043F5C9 8A4DEC                  mov cl, byte ptr [ebp-14]
:0043F5CC 51                      push ecx
:0043F5CD 8A55FC                  mov dl, byte ptr [ebp-04]
:0043F5D0 52                      push edx
:0043F5D1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F5D4 6BC924                  imul ecx, 00000024
:0043F5D7 81C1B83B4B00            add ecx, 004B3BB8
:0043F5DD E8816E0100              call 00456463
:0043F5E2 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F661(U)
|
:0043F5E5 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043F5E8 33C9                    xor ecx, ecx
:0043F5EA 8A08                    mov cl, byte ptr [eax]
:0043F5EC 81F9FF000000            cmp ecx, 000000FF
:0043F5F2 746F                    je 0043F663
:0043F5F4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F5F7 6BC924                  imul ecx, 00000024
:0043F5FA 81C1B83B4B00            add ecx, 004B3BB8
:0043F600 E80BD3FCFF              call 0040C910
:0043F605 8BF0                    mov esi, eax
:0043F607 8B55E4                  mov edx, dword ptr [ebp-1C]
:0043F60A 33C0                    xor eax, eax
:0043F60C 8A02                    mov al, byte ptr [edx]
:0043F60E 8BC8                    mov ecx, eax
:0043F610 6BC924                  imul ecx, 00000024
:0043F613 81C1B83B4B00            add ecx, 004B3BB8
:0043F619 E8F2D2FCFF              call 0040C910
:0043F61E 3BF0                    cmp esi, eax
:0043F620 7536                    jne 0043F658
:0043F622 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043F625 33D2                    xor edx, edx
:0043F627 8A11                    mov dl, byte ptr [ecx]
:0043F629 8B45FC                  mov eax, dword ptr [ebp-04]
:0043F62C 25FF000000              and eax, 000000FF
:0043F631 3BD0                    cmp edx, eax
:0043F633 7423                    je 0043F658
:0043F635 8A4D10                  mov cl, byte ptr [ebp+10]
:0043F638 51                      push ecx
:0043F639 8A550C                  mov dl, byte ptr [ebp+0C]
:0043F63C 52                      push edx
:0043F63D 8A4508                  mov al, byte ptr [ebp+08]
:0043F640 50                      push eax
:0043F641 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043F644 33D2                    xor edx, edx
:0043F646 8A11                    mov dl, byte ptr [ecx]
:0043F648 8BCA                    mov ecx, edx
:0043F64A 6BC924                  imul ecx, 00000024
:0043F64D 81C1B83B4B00            add ecx, 004B3BB8
:0043F653 E832230000              call 0044198A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F620(C), :0043F633(C)
|
:0043F658 8B45E4                  mov eax, dword ptr [ebp-1C]
:0043F65B 83C001                  add eax, 00000001
:0043F65E 8945E4                  mov dword ptr [ebp-1C], eax
:0043F661 EB82                    jmp 0043F5E5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F59E(C), :0043F5F2(C)
|
:0043F663 837DF400                cmp dword ptr [ebp-0C], 00000000
:0043F667 7437                    je 0043F6A0
:0043F669 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F66C 6BC924                  imul ecx, 00000024
:0043F66F 81C1B83B4B00            add ecx, 004B3BB8
:0043F675 E86673FFFF              call 004369E0
:0043F67A 6BC050                  imul eax, 00000050
:0043F67D 05787F4900              add eax, 00497F78
:0043F682 8945E0                  mov dword ptr [ebp-20], eax
:0043F685 6A01                    push 00000001
:0043F687 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043F68A E851E8FEFF              call 0042DEE0
:0043F68F 25FF000000              and eax, 000000FF
:0043F694 83C014                  add eax, 00000014
:0043F697 50                      push eax
:0043F698 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043F69B E80A2EFCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F667(C)
|
:0043F6A0 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F4CF(U), :0043F503(C), :0043F53B(C)
|
:0043F6AA 5E                      pop esi
:0043F6AB 8BE5                    mov esp, ebp
:0043F6AD 5D                      pop ebp
:0043F6AE C3                      ret



* Referenced by a CALL at Address:
|:0043B151   
|
:0043F6AF 55                      push ebp
:0043F6B0 8BEC                    mov ebp, esp
:0043F6B2 83EC1C                  sub esp, 0000001C
:0043F6B5 C645FCFF                mov [ebp-04], FF
:0043F6B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F6BC 6BC931                  imul ecx, 00000031
:0043F6BF 81C1001D4B00            add ecx, 004B1D00
:0043F6C5 E89660FCFF              call 00405760
:0043F6CA 8845F4                  mov byte ptr [ebp-0C], al
:0043F6CD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F6D0 6BC931                  imul ecx, 00000031
:0043F6D3 81C1001D4B00            add ecx, 004B1D00
:0043F6D9 E8A260FCFF              call 00405780
:0043F6DE 8845F0                  mov byte ptr [ebp-10], al
:0043F6E1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F6E4 6BC924                  imul ecx, 00000024
:0043F6E7 81C1B83B4B00            add ecx, 004B3BB8
:0043F6ED E88E60FCFF              call 00405780
:0043F6F2 25FF000000              and eax, 000000FF
:0043F6F7 83F807                  cmp eax, 00000007
:0043F6FA 7417                    je 0043F713
:0043F6FC 33C0                    xor eax, eax
:0043F6FE A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043F703 83E004                  and eax, 00000004
:0043F706 85C0                    test eax, eax
:0043F708 7509                    jne 0043F713
:0043F70A C745E400000000          mov [ebp-1C], 00000000
:0043F711 EB07                    jmp 0043F71A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F6FA(C), :0043F708(C)
|
:0043F713 C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F711(U)
|
:0043F71A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043F71D 894DF8                  mov dword ptr [ebp-08], ecx
:0043F720 68FF000000              push 000000FF
:0043F725 8B55F8                  mov edx, dword ptr [ebp-08]
:0043F728 52                      push edx
:0043F729 8B450C                  mov eax, dword ptr [ebp+0C]
:0043F72C 50                      push eax
:0043F72D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F730 51                      push ecx
:0043F731 E86F7CFFFF              call 004373A5
:0043F736 83C410                  add esp, 00000010
:0043F739 85C0                    test eax, eax
:0043F73B 7505                    jne 0043F742
:0043F73D E9EA000000              jmp 0043F82C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F73B(C)
|
:0043F742 817D0CFF000000          cmp dword ptr [ebp+0C], 000000FF
:0043F749 0F84DD000000            je 0043F82C
:0043F74F 6A00                    push 00000000
:0043F751 8A550C                  mov dl, byte ptr [ebp+0C]
:0043F754 52                      push edx
:0043F755 E86DA6FFFF              call 00439DC7
:0043F75A 83C408                  add esp, 00000008
:0043F75D 85C0                    test eax, eax
:0043F75F 0F84C7000000            je 0043F82C
:0043F765 6A18                    push 00000018
:0043F767 6A27                    push 00000027
:0043F769 6A00                    push 00000000
:0043F76B 6A00                    push 00000000
:0043F76D B958494B00              mov ecx, 004B4958
:0043F772 E8D1D10000              call 0044C948
:0043F777 837DF800                cmp dword ptr [ebp-08], 00000000
:0043F77B 7421                    je 0043F79E
:0043F77D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F780 6BC931                  imul ecx, 00000031
:0043F783 81C1001D4B00            add ecx, 004B1D00
:0043F789 E8625FFCFF              call 004056F0
:0043F78E 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043F78F 6878E74700              push 0047E778
:0043F794 6A00                    push 00000000
:0043F796 E8981CFFFF              call 00431433
:0043F79B 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F77B(C)
|
:0043F79E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F7A1 6BC924                  imul ecx, 00000024
:0043F7A4 81C1B83B4B00            add ecx, 004B3BB8
:0043F7AA E89124FFFF              call 00431C40
:0043F7AF 668B00                  mov ax, word ptr [eax]
:0043F7B2 668945EC                mov word ptr [ebp-14], ax
:0043F7B6 8A4DED                  mov cl, byte ptr [ebp-13]
:0043F7B9 51                      push ecx
:0043F7BA 8A55EC                  mov dl, byte ptr [ebp-14]
:0043F7BD 52                      push edx
:0043F7BE B958494B00              mov ecx, 004B4958
:0043F7C3 E825E30000              call 0044DAED
:0043F7C8 8A4510                  mov al, byte ptr [ebp+10]
:0043F7CB 50                      push eax
:0043F7CC 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043F7CF 51                      push ecx
:0043F7D0 8A5508                  mov dl, byte ptr [ebp+08]
:0043F7D3 52                      push edx
:0043F7D4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F7D7 6BC924                  imul ecx, 00000024
:0043F7DA 81C1B83B4B00            add ecx, 004B3BB8
:0043F7E0 E8A5210000              call 0044198A
:0043F7E5 837DF800                cmp dword ptr [ebp-08], 00000000
:0043F7E9 7437                    je 0043F822
:0043F7EB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F7EE 6BC924                  imul ecx, 00000024
:0043F7F1 81C1B83B4B00            add ecx, 004B3BB8
:0043F7F7 E8E471FFFF              call 004369E0
:0043F7FC 6BC050                  imul eax, 00000050
:0043F7FF 05787F4900              add eax, 00497F78
:0043F804 8945E8                  mov dword ptr [ebp-18], eax
:0043F807 6A01                    push 00000001
:0043F809 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043F80C E8CFE6FEFF              call 0042DEE0
:0043F811 25FF000000              and eax, 000000FF
:0043F816 83C014                  add eax, 00000014
:0043F819 50                      push eax
:0043F81A 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043F81D E8882CFCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F7E9(C)
|
:0043F822 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F73D(U), :0043F749(C), :0043F75F(C)
|
:0043F82C 8BE5                    mov esp, ebp
:0043F82E 5D                      pop ebp
:0043F82F C3                      ret



* Referenced by a CALL at Address:
|:0043B173   
|
:0043F830 55                      push ebp
:0043F831 8BEC                    mov ebp, esp
:0043F833 83EC20                  sub esp, 00000020
:0043F836 56                      push esi
:0043F837 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F83A 6BC931                  imul ecx, 00000031
:0043F83D 81C1001D4B00            add ecx, 004B1D00
:0043F843 E8185FFCFF              call 00405760
:0043F848 8845EC                  mov byte ptr [ebp-14], al
:0043F84B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F84E 6BC931                  imul ecx, 00000031
:0043F851 81C1001D4B00            add ecx, 004B1D00
:0043F857 E8245FFCFF              call 00405780
:0043F85C 8845E8                  mov byte ptr [ebp-18], al
:0043F85F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F862 6BC924                  imul ecx, 00000024
:0043F865 81C1B83B4B00            add ecx, 004B3BB8
:0043F86B E8105FFCFF              call 00405780
:0043F870 25FF000000              and eax, 000000FF
:0043F875 83F807                  cmp eax, 00000007
:0043F878 7417                    je 0043F891
:0043F87A 33C0                    xor eax, eax
:0043F87C A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043F881 83E004                  and eax, 00000004
:0043F884 85C0                    test eax, eax
:0043F886 7509                    jne 0043F891
:0043F888 C745E000000000          mov [ebp-20], 00000000
:0043F88F EB07                    jmp 0043F898

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F878(C), :0043F886(C)
|
:0043F891 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F88F(U)
|
:0043F898 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0043F89B 894DF0                  mov dword ptr [ebp-10], ecx
:0043F89E C645F800                mov [ebp-08], 00
:0043F8A2 68FF000000              push 000000FF
:0043F8A7 8B55F0                  mov edx, dword ptr [ebp-10]
:0043F8AA 52                      push edx
:0043F8AB 8B450C                  mov eax, dword ptr [ebp+0C]
:0043F8AE 50                      push eax
:0043F8AF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F8B2 51                      push ecx
:0043F8B3 E8ED7AFFFF              call 004373A5
:0043F8B8 83C410                  add esp, 00000010
:0043F8BB 85C0                    test eax, eax
:0043F8BD 7505                    jne 0043F8C4
:0043F8BF E98E010000              jmp 0043FA52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F8BD(C)
|
:0043F8C4 6A18                    push 00000018
:0043F8C6 6A27                    push 00000027
:0043F8C8 6A00                    push 00000000
:0043F8CA 6A00                    push 00000000
:0043F8CC B958494B00              mov ecx, 004B4958
:0043F8D1 E872D00000              call 0044C948
:0043F8D6 837DF000                cmp dword ptr [ebp-10], 00000000
:0043F8DA 7421                    je 0043F8FD
:0043F8DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043F8DF 6BC931                  imul ecx, 00000031
:0043F8E2 81C1001D4B00            add ecx, 004B1D00
:0043F8E8 E8035EFCFF              call 004056F0
:0043F8ED 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043F8EE 687CE74700              push 0047E77C
:0043F8F3 6A00                    push 00000000
:0043F8F5 E8391BFFFF              call 00431433
:0043F8FA 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F8DA(C)
|
:0043F8FD C745FC00000000          mov [ebp-04], 00000000
:0043F904 EB09                    jmp 0043F90F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F941(U), :0043F9E8(U)
|
:0043F906 8B55FC                  mov edx, dword ptr [ebp-04]
:0043F909 83C201                  add edx, 00000001
:0043F90C 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F904(U)
|
:0043F90F 837DFC5A                cmp dword ptr [ebp-04], 0000005A
:0043F913 0F83D4000000            jnb 0043F9ED
:0043F919 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043F91C 6BC924                  imul ecx, 00000024
:0043F91F 81C1B83B4B00            add ecx, 004B3BB8
:0043F925 E8E6CFFCFF              call 0040C910
:0043F92A 8BF0                    mov esi, eax
:0043F92C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F92F 6BC924                  imul ecx, 00000024
:0043F932 81C1B83B4B00            add ecx, 004B3BB8
:0043F938 E8D3CFFCFF              call 0040C910
:0043F93D 3BF0                    cmp esi, eax
:0043F93F 7402                    je 0043F943
:0043F941 EBC3                    jmp 0043F906

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F93F(C)
|
:0043F943 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F946 6BC924                  imul ecx, 00000024
:0043F949 81C1B83B4B00            add ecx, 004B3BB8
:0043F94F E88C70FFFF              call 004369E0
:0043F954 6BC050                  imul eax, 00000050
:0043F957 05787F4900              add eax, 00497F78
:0043F95C 8945F4                  mov dword ptr [ebp-0C], eax
:0043F95F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F962 6BC924                  imul ecx, 00000024
:0043F965 81C1B83B4B00            add ecx, 004B3BB8
:0043F96B E860C70100              call 0045C0D0
:0043F970 25FF000000              and eax, 000000FF
:0043F975 83F802                  cmp eax, 00000002
:0043F978 756E                    jne 0043F9E8
:0043F97A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F97D 6BC924                  imul ecx, 00000024
:0043F980 81C1B83B4B00            add ecx, 004B3BB8
:0043F986 E85539FCFF              call 004032E0
:0043F98B 8BF0                    mov esi, eax
:0043F98D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043F990 E85524FCFF              call 00401DEA
:0043F995 3BF0                    cmp esi, eax
:0043F997 734F                    jnb 0043F9E8
:0043F999 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F99C 6BC924                  imul ecx, 00000024
:0043F99F 81C1B83B4B00            add ecx, 004B3BB8
:0043F9A5 E89622FFFF              call 00431C40
:0043F9AA 668B00                  mov ax, word ptr [eax]
:0043F9AD 668945E4                mov word ptr [ebp-1C], ax
:0043F9B1 8A4DE5                  mov cl, byte ptr [ebp-1B]
:0043F9B4 51                      push ecx
:0043F9B5 8A55E4                  mov dl, byte ptr [ebp-1C]
:0043F9B8 52                      push edx
:0043F9B9 B958494B00              mov ecx, 004B4958
:0043F9BE E82AE10000              call 0044DAED
:0043F9C3 8A4510                  mov al, byte ptr [ebp+10]
:0043F9C6 50                      push eax
:0043F9C7 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0043F9CA 51                      push ecx
:0043F9CB 8A5508                  mov dl, byte ptr [ebp+08]
:0043F9CE 52                      push edx
:0043F9CF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043F9D2 6BC924                  imul ecx, 00000024
:0043F9D5 81C1B83B4B00            add ecx, 004B3BB8
:0043F9DB E8AA1F0000              call 0044198A
:0043F9E0 8A45F8                  mov al, byte ptr [ebp-08]
:0043F9E3 0401                    add al, 01
:0043F9E5 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F978(C), :0043F997(C)
|
:0043F9E8 E919FFFFFF              jmp 0043F906

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F913(C)
|
:0043F9ED 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043F9F0 81E1FF000000            and ecx, 000000FF
:0043F9F6 85C9                    test ecx, ecx
:0043F9F8 7E49                    jle 0043FA43
:0043F9FA 837DF000                cmp dword ptr [ebp-10], 00000000
:0043F9FE 7437                    je 0043FA37
:0043FA00 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FA03 6BC924                  imul ecx, 00000024
:0043FA06 81C1B83B4B00            add ecx, 004B3BB8
:0043FA0C E8CF6FFFFF              call 004369E0
:0043FA11 6BC050                  imul eax, 00000050
:0043FA14 05787F4900              add eax, 00497F78
:0043FA19 8945F4                  mov dword ptr [ebp-0C], eax
:0043FA1C 6A01                    push 00000001
:0043FA1E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043FA21 E8BAE4FEFF              call 0042DEE0
:0043FA26 25FF000000              and eax, 000000FF
:0043FA2B 83C014                  add eax, 00000014
:0043FA2E 50                      push eax
:0043FA2F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043FA32 E8732AFCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F9FE(C)
|
:0043FA37 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001
:0043FA41 EB0F                    jmp 0043FA52

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043F9F8(C)
|

* Possible StringData Ref from Data Obj ->"ׂĂ̖͉񕜂Kv܂"
                                  |
:0043FA43 6880E74700              push 0047E780
:0043FA48 6A00                    push 00000000
:0043FA4A E8E419FFFF              call 00431433
:0043FA4F 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043F8BF(U), :0043FA41(U)
|
:0043FA52 5E                      pop esi
:0043FA53 8BE5                    mov esp, ebp
:0043FA55 5D                      pop ebp
:0043FA56 C3                      ret



* Referenced by a CALL at Address:
|:0043B195   
|
:0043FA57 55                      push ebp
:0043FA58 8BEC                    mov ebp, esp
:0043FA5A 83EC18                  sub esp, 00000018
:0043FA5D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043FA60 6BC931                  imul ecx, 00000031
:0043FA63 81C1001D4B00            add ecx, 004B1D00
:0043FA69 E8F25CFCFF              call 00405760
:0043FA6E 8845F4                  mov byte ptr [ebp-0C], al
:0043FA71 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043FA74 6BC931                  imul ecx, 00000031
:0043FA77 81C1001D4B00            add ecx, 004B1D00
:0043FA7D E8FE5CFCFF              call 00405780
:0043FA82 8845F0                  mov byte ptr [ebp-10], al
:0043FA85 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FA88 6BC924                  imul ecx, 00000024
:0043FA8B 81C1B83B4B00            add ecx, 004B3BB8
:0043FA91 E8EA5CFCFF              call 00405780
:0043FA96 25FF000000              and eax, 000000FF
:0043FA9B 83F807                  cmp eax, 00000007
:0043FA9E 7417                    je 0043FAB7
:0043FAA0 33C0                    xor eax, eax
:0043FAA2 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043FAA7 83E004                  and eax, 00000004
:0043FAAA 85C0                    test eax, eax
:0043FAAC 7509                    jne 0043FAB7
:0043FAAE C745E800000000          mov [ebp-18], 00000000
:0043FAB5 EB07                    jmp 0043FABE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FA9E(C), :0043FAAC(C)
|
:0043FAB7 C745E801000000          mov [ebp-18], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FAB5(U)
|
:0043FABE 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043FAC1 894DF8                  mov dword ptr [ebp-08], ecx
:0043FAC4 68FF000000              push 000000FF
:0043FAC9 8B55F8                  mov edx, dword ptr [ebp-08]
:0043FACC 52                      push edx
:0043FACD 8B450C                  mov eax, dword ptr [ebp+0C]
:0043FAD0 50                      push eax
:0043FAD1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043FAD4 51                      push ecx
:0043FAD5 E8CB78FFFF              call 004373A5
:0043FADA 83C410                  add esp, 00000010
:0043FADD 85C0                    test eax, eax
:0043FADF 7505                    jne 0043FAE6
:0043FAE1 E90F010000              jmp 0043FBF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FADF(C)
|
:0043FAE6 6A01                    push 00000001
:0043FAE8 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043FAEB 81E2FF000000            and edx, 000000FF
:0043FAF1 80CA80                  or dl, 80
:0043FAF4 52                      push edx
:0043FAF5 8A450C                  mov al, byte ptr [ebp+0C]
:0043FAF8 50                      push eax
:0043FAF9 B958494B00              mov ecx, 004B4958
:0043FAFE E8ABE20000              call 0044DDAE
:0043FB03 8845FC                  mov byte ptr [ebp-04], al
:0043FB06 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FB09 81E1FF000000            and ecx, 000000FF
:0043FB0F 81F9FF000000            cmp ecx, 000000FF
:0043FB15 0F84DA000000            je 0043FBF5
:0043FB1B 8A55FC                  mov dl, byte ptr [ebp-04]
:0043FB1E 52                      push edx
:0043FB1F 8A4508                  mov al, byte ptr [ebp+08]
:0043FB22 50                      push eax
:0043FB23 E8D1000000              call 0043FBF9
:0043FB28 83C408                  add esp, 00000008
:0043FB2B 85C0                    test eax, eax
:0043FB2D 7520                    jne 0043FB4F

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043FB2F 6A07                    push 00000007
:0043FB31 B9F8544B00              mov ecx, 004B54F8
:0043FB36 E8DF990200              call 0046951A

* Possible StringData Ref from Data Obj ->"SnҦڤ賡_"
                                  |
:0043FB3B 68B0E74700              push 0047E7B0
:0043FB40 6A00                    push 00000000
:0043FB42 E8EC18FFFF              call 00431433
:0043FB47 83C408                  add esp, 00000008
:0043FB4A E9A6000000              jmp 0043FBF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FB2D(C)
|
:0043FB4F 837DF800                cmp dword ptr [ebp-08], 00000000
:0043FB53 7421                    je 0043FB76
:0043FB55 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043FB58 6BC931                  imul ecx, 00000031
:0043FB5B 81C1001D4B00            add ecx, 004B1D00
:0043FB61 E88A5BFCFF              call 004056F0
:0043FB66 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043FB67 68CCE74700              push 0047E7CC
:0043FB6C 6A00                    push 00000000
:0043FB6E E8C018FFFF              call 00431433
:0043FB73 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FB53(C)
|
:0043FB76 8A4D10                  mov cl, byte ptr [ebp+10]
:0043FB79 51                      push ecx
:0043FB7A 8A550C                  mov dl, byte ptr [ebp+0C]
:0043FB7D 52                      push edx
:0043FB7E 8A45FC                  mov al, byte ptr [ebp-04]
:0043FB81 50                      push eax
:0043FB82 8A4D08                  mov cl, byte ptr [ebp+08]
:0043FB85 51                      push ecx
:0043FB86 E82C010000              call 0043FCB7
:0043FB8B 83C410                  add esp, 00000010
:0043FB8E 837DF800                cmp dword ptr [ebp-08], 00000000
:0043FB92 7437                    je 0043FBCB
:0043FB94 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FB97 6BC924                  imul ecx, 00000024
:0043FB9A 81C1B83B4B00            add ecx, 004B3BB8
:0043FBA0 E83B6EFFFF              call 004369E0
:0043FBA5 6BC050                  imul eax, 00000050
:0043FBA8 05787F4900              add eax, 00497F78
:0043FBAD 8945EC                  mov dword ptr [ebp-14], eax
:0043FBB0 6A01                    push 00000001
:0043FBB2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043FBB5 E826E3FEFF              call 0042DEE0
:0043FBBA 25FF000000              and eax, 000000FF
:0043FBBF 83C014                  add eax, 00000014
:0043FBC2 50                      push eax
:0043FBC3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043FBC6 E8DF28FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FB92(C)
|
:0043FBCB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FBCE 81E1FF000000            and ecx, 000000FF
:0043FBD4 6BC924                  imul ecx, 00000024
:0043FBD7 81C1B83B4B00            add ecx, 004B3BB8
:0043FBDD E8FE6DFFFF              call 004369E0
:0043FBE2 50                      push eax
:0043FBE3 E834CF0200              call 0046CB1C
:0043FBE8 83C404                  add esp, 00000004
:0043FBEB C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FAE1(U), :0043FB15(C), :0043FB4A(U)
|
:0043FBF5 8BE5                    mov esp, ebp
:0043FBF7 5D                      pop ebp
:0043FBF8 C3                      ret



* Referenced by a CALL at Address:
|:0043FB23   
|
:0043FBF9 55                      push ebp
:0043FBFA 8BEC                    mov ebp, esp
:0043FBFC 83EC0C                  sub esp, 0000000C
:0043FBFF C745FC00000000          mov [ebp-04], 00000000
:0043FC06 8B450C                  mov eax, dword ptr [ebp+0C]
:0043FC09 25FF000000              and eax, 000000FF
:0043FC0E 3DFF000000              cmp eax, 000000FF
:0043FC13 0F8483000000            je 0043FC9C
:0043FC19 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FC1C 81E1FF000000            and ecx, 000000FF
:0043FC22 6BC924                  imul ecx, 00000024
:0043FC25 81C1B83B4B00            add ecx, 004B3BB8
:0043FC2B 894DF8                  mov dword ptr [ebp-08], ecx
:0043FC2E 8B5508                  mov edx, dword ptr [ebp+08]
:0043FC31 81E2FF000000            and edx, 000000FF
:0043FC37 8955F4                  mov dword ptr [ebp-0C], edx
:0043FC3A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0043FC3D 83E830                  sub eax, 00000030
:0043FC40 8945F4                  mov dword ptr [ebp-0C], eax
:0043FC43 837DF404                cmp dword ptr [ebp-0C], 00000004
:0043FC47 7753                    ja 0043FC9C
:0043FC49 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0043FC4C FF248DA3FC4300          jmp dword ptr [4*ecx+0043FCA3]
:0043FC53 6A10                    push 00000010
:0043FC55 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FC58 E8136EFFFF              call 00436A70
:0043FC5D 8945FC                  mov dword ptr [ebp-04], eax
:0043FC60 EB3A                    jmp 0043FC9C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043FC62 6A04                    push 00000004
:0043FC64 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FC67 E8046EFFFF              call 00436A70
:0043FC6C 8945FC                  mov dword ptr [ebp-04], eax
:0043FC6F EB2B                    jmp 0043FC9C
:0043FC71 6A01                    push 00000001
:0043FC73 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FC76 E8F56DFFFF              call 00436A70
:0043FC7B 8945FC                  mov dword ptr [ebp-04], eax
:0043FC7E EB1C                    jmp 0043FC9C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043FC80 6A02                    push 00000002
:0043FC82 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FC85 E8E66DFFFF              call 00436A70
:0043FC8A 8945FC                  mov dword ptr [ebp-04], eax
:0043FC8D EB0D                    jmp 0043FC9C
:0043FC8F 6A20                    push 00000020
:0043FC91 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0043FC94 E8D76DFFFF              call 00436A70
:0043FC99 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FC13(C), :0043FC47(C), :0043FC60(U), :0043FC6F(U), :0043FC7E(U)
|:0043FC8D(U)
|
:0043FC9C 8B45FC                  mov eax, dword ptr [ebp-04]
:0043FC9F 8BE5                    mov esp, ebp
:0043FCA1 5D                      pop ebp
:0043FCA2 C3                      ret



:0043FCA3 53FC4300                DWORD 0043FC53
:0043FCA7 62FC4300                DWORD 0043FC62
:0043FCAB 71FC4300                DWORD 0043FC71
:0043FCAF 80FC4300                DWORD 0043FC80
:0043FCB3 8FFC4300                DWORD 0043FC8F



* Referenced by a CALL at Address:
|:0043FB86   
|
:0043FCB7 55                      push ebp
:0043FCB8 8BEC                    mov ebp, esp
:0043FCBA 83EC10                  sub esp, 00000010
:0043FCBD 8B450C                  mov eax, dword ptr [ebp+0C]
:0043FCC0 25FF000000              and eax, 000000FF
:0043FCC5 3DFF000000              cmp eax, 000000FF
:0043FCCA 0F84DC000000            je 0043FDAC
:0043FCD0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FCD3 81E1FF000000            and ecx, 000000FF
:0043FCD9 6BC924                  imul ecx, 00000024
:0043FCDC 81C1B83B4B00            add ecx, 004B3BB8
:0043FCE2 894DFC                  mov dword ptr [ebp-04], ecx
:0043FCE5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FCE8 E8F36CFFFF              call 004369E0
:0043FCED 6BC050                  imul eax, 00000050
:0043FCF0 05787F4900              add eax, 00497F78
:0043FCF5 8945F4                  mov dword ptr [ebp-0C], eax
:0043FCF8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FCFB E8401FFFFF              call 00431C40
:0043FD00 668B10                  mov dx, word ptr [eax]
:0043FD03 668955F8                mov word ptr [ebp-08], dx
:0043FD07 8A45F9                  mov al, byte ptr [ebp-07]
:0043FD0A 50                      push eax
:0043FD0B 8A4DF8                  mov cl, byte ptr [ebp-08]
:0043FD0E 51                      push ecx
:0043FD0F B958494B00              mov ecx, 004B4958
:0043FD14 E8D4DD0000              call 0044DAED
:0043FD19 8A550C                  mov dl, byte ptr [ebp+0C]
:0043FD1C 52                      push edx
:0043FD1D 8A4510                  mov al, byte ptr [ebp+10]
:0043FD20 50                      push eax
:0043FD21 E8D0A7FFFF              call 0043A4F6
:0043FD26 83C408                  add esp, 00000008
:0043FD29 6A01                    push 00000001
:0043FD2B 8A4D14                  mov cl, byte ptr [ebp+14]
:0043FD2E 51                      push ecx
:0043FD2F 8A5508                  mov dl, byte ptr [ebp+08]
:0043FD32 52                      push edx
:0043FD33 8A450C                  mov al, byte ptr [ebp+0C]
:0043FD36 50                      push eax
:0043FD37 8A4D10                  mov cl, byte ptr [ebp+10]
:0043FD3A 51                      push ecx
:0043FD3B B958494B00              mov ecx, 004B4958
:0043FD40 E84BEA0000              call 0044E790
:0043FD45 8B5508                  mov edx, dword ptr [ebp+08]
:0043FD48 81E2FF000000            and edx, 000000FF
:0043FD4E 8955F0                  mov dword ptr [ebp-10], edx
:0043FD51 8B45F0                  mov eax, dword ptr [ebp-10]
:0043FD54 83E830                  sub eax, 00000030
:0043FD57 8945F0                  mov dword ptr [ebp-10], eax
:0043FD5A 837DF004                cmp dword ptr [ebp-10], 00000004
:0043FD5E 7744                    ja 0043FDA4
:0043FD60 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0043FD63 FF248DB0FD4300          jmp dword ptr [4*ecx+0043FDB0]
:0043FD6A 6A10                    push 00000010
:0043FD6C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FD6F E81C6FFFFF              call 00436C90
:0043FD74 EB2E                    jmp 0043FDA4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0043FD76 6A04                    push 00000004
:0043FD78 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FD7B E8106FFFFF              call 00436C90
:0043FD80 EB22                    jmp 0043FDA4
:0043FD82 6A01                    push 00000001
:0043FD84 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FD87 E8046FFFFF              call 00436C90
:0043FD8C EB16                    jmp 0043FDA4

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0043FD8E 6A02                    push 00000002
:0043FD90 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FD93 E8F86EFFFF              call 00436C90
:0043FD98 EB0A                    jmp 0043FDA4
:0043FD9A 6A20                    push 00000020
:0043FD9C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FD9F E8EC6EFFFF              call 00436C90

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FD5E(C), :0043FD74(U), :0043FD80(U), :0043FD8C(U), :0043FD98(U)
|
:0043FDA4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FDA7 E8F34DFFFF              call 00434B9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FCCA(C)
|
:0043FDAC 8BE5                    mov esp, ebp
:0043FDAE 5D                      pop ebp
:0043FDAF C3                      ret



:0043FDB0 6AFD4300                DWORD 0043FD6A
:0043FDB4 76FD4300                DWORD 0043FD76
:0043FDB8 82FD4300                DWORD 0043FD82
:0043FDBC 8EFD4300                DWORD 0043FD8E
:0043FDC0 9AFD4300                DWORD 0043FD9A



* Referenced by a CALL at Address:
|:0043B1B7   
|
:0043FDC4 55                      push ebp
:0043FDC5 8BEC                    mov ebp, esp
:0043FDC7 83EC1C                  sub esp, 0000001C
:0043FDCA 56                      push esi
:0043FDCB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043FDCE 6BC931                  imul ecx, 00000031
:0043FDD1 81C1001D4B00            add ecx, 004B1D00
:0043FDD7 E88459FCFF              call 00405760
:0043FDDC 8845F4                  mov byte ptr [ebp-0C], al
:0043FDDF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043FDE2 6BC931                  imul ecx, 00000031
:0043FDE5 81C1001D4B00            add ecx, 004B1D00
:0043FDEB E89059FCFF              call 00405780
:0043FDF0 8845F0                  mov byte ptr [ebp-10], al
:0043FDF3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FDF6 6BC924                  imul ecx, 00000024
:0043FDF9 81C1B83B4B00            add ecx, 004B3BB8
:0043FDFF E87C59FCFF              call 00405780
:0043FE04 25FF000000              and eax, 000000FF
:0043FE09 83F807                  cmp eax, 00000007
:0043FE0C 7417                    je 0043FE25
:0043FE0E 33C0                    xor eax, eax
:0043FE10 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0043FE15 83E004                  and eax, 00000004
:0043FE18 85C0                    test eax, eax
:0043FE1A 7509                    jne 0043FE25
:0043FE1C C745E400000000          mov [ebp-1C], 00000000
:0043FE23 EB07                    jmp 0043FE2C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FE0C(C), :0043FE1A(C)
|
:0043FE25 C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FE23(U)
|
:0043FE2C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0043FE2F 894DF8                  mov dword ptr [ebp-08], ecx
:0043FE32 68FF000000              push 000000FF
:0043FE37 8B55F8                  mov edx, dword ptr [ebp-08]
:0043FE3A 52                      push edx
:0043FE3B 8B450C                  mov eax, dword ptr [ebp+0C]
:0043FE3E 50                      push eax
:0043FE3F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043FE42 51                      push ecx
:0043FE43 E85D75FFFF              call 004373A5
:0043FE48 83C410                  add esp, 00000010
:0043FE4B 85C0                    test eax, eax
:0043FE4D 7505                    jne 0043FE54
:0043FE4F E9A4010000              jmp 0043FFF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FE4D(C)
|
:0043FE54 6A01                    push 00000001
:0043FE56 8B55F4                  mov edx, dword ptr [ebp-0C]
:0043FE59 81E2FF000000            and edx, 000000FF
:0043FE5F 80CA80                  or dl, 80
:0043FE62 52                      push edx
:0043FE63 8A450C                  mov al, byte ptr [ebp+0C]
:0043FE66 50                      push eax
:0043FE67 B958494B00              mov ecx, 004B4958
:0043FE6C E83DDF0000              call 0044DDAE
:0043FE71 8845FC                  mov byte ptr [ebp-04], al
:0043FE74 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FE77 81E1FF000000            and ecx, 000000FF
:0043FE7D 81F9FF000000            cmp ecx, 000000FF
:0043FE83 0F846F010000            je 0043FFF8
:0043FE89 8A55FC                  mov dl, byte ptr [ebp-04]
:0043FE8C 52                      push edx
:0043FE8D 8A4508                  mov al, byte ptr [ebp+08]
:0043FE90 50                      push eax
:0043FE91 E867010000              call 0043FFFD
:0043FE96 83C408                  add esp, 00000008
:0043FE99 85C0                    test eax, eax
:0043FE9B 7520                    jne 0043FEBD

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0043FE9D 6A07                    push 00000007
:0043FE9F B9F8544B00              mov ecx, 004B54F8
:0043FEA4 E871960200              call 0046951A

* Possible StringData Ref from Data Obj ->"䳡AWɤF"
                                  |
:0043FEA9 68D0E74700              push 0047E7D0
:0043FEAE 6A00                    push 00000000
:0043FEB0 E87E15FFFF              call 00431433
:0043FEB5 83C408                  add esp, 00000008
:0043FEB8 E93B010000              jmp 0043FFF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FE9B(C)
|
:0043FEBD 837DF800                cmp dword ptr [ebp-08], 00000000
:0043FEC1 7421                    je 0043FEE4
:0043FEC3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0043FEC6 6BC931                  imul ecx, 00000031
:0043FEC9 81C1001D4B00            add ecx, 004B1D00
:0043FECF E81C58FCFF              call 004056F0
:0043FED4 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0043FED5 68E8E74700              push 0047E7E8
:0043FEDA 6A00                    push 00000000
:0043FEDC E85215FFFF              call 00431433
:0043FEE1 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FEC1(C)
|
:0043FEE4 8A4D10                  mov cl, byte ptr [ebp+10]
:0043FEE7 51                      push ecx
:0043FEE8 8A550C                  mov dl, byte ptr [ebp+0C]
:0043FEEB 52                      push edx
:0043FEEC 8A45FC                  mov al, byte ptr [ebp-04]
:0043FEEF 50                      push eax
:0043FEF0 8A4D08                  mov cl, byte ptr [ebp+08]
:0043FEF3 51                      push ecx
:0043FEF4 E89F010000              call 00440098
:0043FEF9 83C410                  add esp, 00000010
:0043FEFC 68FF000000              push 000000FF
:0043FF01 6A11                    push 00000011
:0043FF03 6868484B00              push 004B4868
:0043FF08 E8D3860300              call 004785E0
:0043FF0D 83C40C                  add esp, 0000000C
:0043FF10 68FF000000              push 000000FF
:0043FF15 68FF000000              push 000000FF
:0043FF1A 6A01                    push 00000001
:0043FF1C 6868484B00              push 004B4868
:0043FF21 8A55F0                  mov dl, byte ptr [ebp-10]
:0043FF24 52                      push edx
:0043FF25 8A45FC                  mov al, byte ptr [ebp-04]
:0043FF28 50                      push eax
:0043FF29 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FF2C 6BC924                  imul ecx, 00000024
:0043FF2F 81C1B83B4B00            add ecx, 004B3BB8
:0043FF35 E829650100              call 00456463
:0043FF3A 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FFAF(U)
|
:0043FF3D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043FF40 33D2                    xor edx, edx
:0043FF42 8A11                    mov dl, byte ptr [ecx]
:0043FF44 81FAFF000000            cmp edx, 000000FF
:0043FF4A 7465                    je 0043FFB1
:0043FF4C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FF4F 6BC924                  imul ecx, 00000024
:0043FF52 81C1B83B4B00            add ecx, 004B3BB8
:0043FF58 E8B3C9FCFF              call 0040C910
:0043FF5D 8BF0                    mov esi, eax
:0043FF5F 8B45EC                  mov eax, dword ptr [ebp-14]
:0043FF62 33C9                    xor ecx, ecx
:0043FF64 8A08                    mov cl, byte ptr [eax]
:0043FF66 6BC924                  imul ecx, 00000024
:0043FF69 81C1B83B4B00            add ecx, 004B3BB8
:0043FF6F E89CC9FCFF              call 0040C910
:0043FF74 3BF0                    cmp esi, eax
:0043FF76 752E                    jne 0043FFA6
:0043FF78 8B55EC                  mov edx, dword ptr [ebp-14]
:0043FF7B 33C0                    xor eax, eax
:0043FF7D 8A02                    mov al, byte ptr [edx]
:0043FF7F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0043FF82 81E1FF000000            and ecx, 000000FF
:0043FF88 3BC1                    cmp eax, ecx
:0043FF8A 741A                    je 0043FFA6
:0043FF8C 8A5510                  mov dl, byte ptr [ebp+10]
:0043FF8F 52                      push edx
:0043FF90 8A450C                  mov al, byte ptr [ebp+0C]
:0043FF93 50                      push eax
:0043FF94 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043FF97 8A11                    mov dl, byte ptr [ecx]
:0043FF99 52                      push edx
:0043FF9A 8A4508                  mov al, byte ptr [ebp+08]
:0043FF9D 50                      push eax
:0043FF9E E8F5000000              call 00440098
:0043FFA3 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FF76(C), :0043FF8A(C)
|
:0043FFA6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0043FFA9 83C101                  add ecx, 00000001
:0043FFAC 894DEC                  mov dword ptr [ebp-14], ecx
:0043FFAF EB8C                    jmp 0043FF3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FF4A(C)
|
:0043FFB1 837DF800                cmp dword ptr [ebp-08], 00000000
:0043FFB5 7437                    je 0043FFEE
:0043FFB7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0043FFBA 6BC924                  imul ecx, 00000024
:0043FFBD 81C1B83B4B00            add ecx, 004B3BB8
:0043FFC3 E8186AFFFF              call 004369E0
:0043FFC8 6BC050                  imul eax, 00000050
:0043FFCB 05787F4900              add eax, 00497F78
:0043FFD0 8945E8                  mov dword ptr [ebp-18], eax
:0043FFD3 6A01                    push 00000001
:0043FFD5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043FFD8 E803DFFEFF              call 0042DEE0
:0043FFDD 25FF000000              and eax, 000000FF
:0043FFE2 83C014                  add eax, 00000014
:0043FFE5 50                      push eax
:0043FFE6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0043FFE9 E8BC24FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0043FFB5(C)
|
:0043FFEE C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0043FE4F(U), :0043FE83(C), :0043FEB8(U)
|
:0043FFF8 5E                      pop esi
:0043FFF9 8BE5                    mov esp, ebp
:0043FFFB 5D                      pop ebp
:0043FFFC C3                      ret



* Referenced by a CALL at Address:
|:0043FE91   
|
:0043FFFD 55                      push ebp
:0043FFFE 8BEC                    mov ebp, esp
:00440000 83EC0C                  sub esp, 0000000C
:00440003 C745FC01000000          mov [ebp-04], 00000001
:0044000A 8B450C                  mov eax, dword ptr [ebp+0C]
:0044000D 25FF000000              and eax, 000000FF
:00440012 3DFF000000              cmp eax, 000000FF
:00440017 7478                    je 00440091
:00440019 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044001C 81E1FF000000            and ecx, 000000FF
:00440022 6BC924                  imul ecx, 00000024
:00440025 81C1B83B4B00            add ecx, 004B3BB8
:0044002B 894DF8                  mov dword ptr [ebp-08], ecx
:0044002E 8A5508                  mov dl, byte ptr [ebp+08]
:00440031 8855F4                  mov byte ptr [ebp-0C], dl
:00440034 807DF435                cmp byte ptr [ebp-0C], 35
:00440038 740E                    je 00440048
:0044003A 807DF436                cmp byte ptr [ebp-0C], 36
:0044003E 7421                    je 00440061
:00440040 807DF437                cmp byte ptr [ebp-0C], 37
:00440044 7434                    je 0044007A
:00440046 EB49                    jmp 00440091

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440038(C)
|
:00440048 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044004B E8C069FFFF              call 00436A10
:00440050 25FF000000              and eax, 000000FF
:00440055 33C9                    xor ecx, ecx
:00440057 85C0                    test eax, eax
:00440059 0F9FC1                  setg cl
:0044005C 894DFC                  mov dword ptr [ebp-04], ecx
:0044005F EB30                    jmp 00440091

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044003E(C)
|
:00440061 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00440064 E8C769FFFF              call 00436A30
:00440069 25FF000000              and eax, 000000FF
:0044006E 33D2                    xor edx, edx
:00440070 85C0                    test eax, eax
:00440072 0F9FC2                  setg dl
:00440075 8955FC                  mov dword ptr [ebp-04], edx
:00440078 EB17                    jmp 00440091

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440044(C)
|
:0044007A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044007D E8CE69FFFF              call 00436A50
:00440082 25FF000000              and eax, 000000FF
:00440087 33C9                    xor ecx, ecx
:00440089 85C0                    test eax, eax
:0044008B 0F9FC1                  setg cl
:0044008E 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440017(C), :00440046(U), :0044005F(U), :00440078(U)
|
:00440091 8B45FC                  mov eax, dword ptr [ebp-04]
:00440094 8BE5                    mov esp, ebp
:00440096 5D                      pop ebp
:00440097 C3                      ret



* Referenced by a CALL at Addresses:
|:0043FEF4   , :0043FF9E   
|
:00440098 55                      push ebp
:00440099 8BEC                    mov ebp, esp
:0044009B 83EC10                  sub esp, 00000010
:0044009E 8B450C                  mov eax, dword ptr [ebp+0C]
:004400A1 25FF000000              and eax, 000000FF
:004400A6 3DFF000000              cmp eax, 000000FF
:004400AB 0F8459010000            je 0044020A
:004400B1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004400B4 81E1FF000000            and ecx, 000000FF
:004400BA 6BC924                  imul ecx, 00000024
:004400BD 81C1B83B4B00            add ecx, 004B3BB8
:004400C3 894DFC                  mov dword ptr [ebp-04], ecx
:004400C6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004400C9 E81269FFFF              call 004369E0
:004400CE 6BC050                  imul eax, 00000050
:004400D1 05787F4900              add eax, 00497F78
:004400D6 8945F4                  mov dword ptr [ebp-0C], eax
:004400D9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004400DC E85F1BFFFF              call 00431C40
:004400E1 668B10                  mov dx, word ptr [eax]
:004400E4 668955F8                mov word ptr [ebp-08], dx
:004400E8 8A45F9                  mov al, byte ptr [ebp-07]
:004400EB 50                      push eax
:004400EC 8A4DF8                  mov cl, byte ptr [ebp-08]
:004400EF 51                      push ecx
:004400F0 B958494B00              mov ecx, 004B4958
:004400F5 E8F3D90000              call 0044DAED
:004400FA 8A550C                  mov dl, byte ptr [ebp+0C]
:004400FD 52                      push edx
:004400FE 8A4510                  mov al, byte ptr [ebp+10]
:00440101 50                      push eax
:00440102 E8EFA3FFFF              call 0043A4F6
:00440107 83C408                  add esp, 00000008
:0044010A 6A01                    push 00000001
:0044010C 8A4D14                  mov cl, byte ptr [ebp+14]
:0044010F 51                      push ecx
:00440110 8A5508                  mov dl, byte ptr [ebp+08]
:00440113 52                      push edx
:00440114 8A450C                  mov al, byte ptr [ebp+0C]
:00440117 50                      push eax
:00440118 8A4D10                  mov cl, byte ptr [ebp+10]
:0044011B 51                      push ecx
:0044011C B958494B00              mov ecx, 004B4958
:00440121 E86AE60000              call 0044E790
:00440126 8A5508                  mov dl, byte ptr [ebp+08]
:00440129 8855F0                  mov byte ptr [ebp-10], dl
:0044012C 807DF035                cmp byte ptr [ebp-10], 35
:00440130 7415                    je 00440147
:00440132 807DF036                cmp byte ptr [ebp-10], 36
:00440136 744E                    je 00440186
:00440138 807DF037                cmp byte ptr [ebp-10], 37
:0044013C 0F8483000000            je 004401C5
:00440142 E9BB000000              jmp 00440202

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440130(C)
|
:00440147 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044014A E8C168FFFF              call 00436A10
:0044014F 25FF000000              and eax, 000000FF
:00440154 85C0                    test eax, eax
:00440156 7E2C                    jle 00440184
:00440158 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044015B E8B068FFFF              call 00436A10
:00440160 25FF000000              and eax, 000000FF
:00440165 83E801                  sub eax, 00000001
:00440168 0C40                    or al, 40
:0044016A 50                      push eax
:0044016B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044016E E83D6AFFFF              call 00436BB0
:00440173 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00440176 E86568FFFF              call 004369E0
:0044017B 50                      push eax
:0044017C E89BC90200              call 0046CB1C
:00440181 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440156(C)
|
:00440184 EB7C                    jmp 00440202

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440136(C)
|
:00440186 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00440189 E8A268FFFF              call 00436A30
:0044018E 25FF000000              and eax, 000000FF
:00440193 85C0                    test eax, eax
:00440195 7E2C                    jle 004401C3
:00440197 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044019A E89168FFFF              call 00436A30
:0044019F 25FF000000              and eax, 000000FF
:004401A4 83E801                  sub eax, 00000001
:004401A7 0C40                    or al, 40
:004401A9 50                      push eax
:004401AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004401AD E83E6AFFFF              call 00436BF0
:004401B2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004401B5 E82668FFFF              call 004369E0
:004401BA 50                      push eax
:004401BB E85CC90200              call 0046CB1C
:004401C0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440195(C)
|
:004401C3 EB3D                    jmp 00440202

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044013C(C)
|
:004401C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004401C8 E88368FFFF              call 00436A50
:004401CD 25FF000000              and eax, 000000FF
:004401D2 85C0                    test eax, eax
:004401D4 7E2C                    jle 00440202
:004401D6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004401D9 E87268FFFF              call 00436A50
:004401DE 25FF000000              and eax, 000000FF
:004401E3 83E801                  sub eax, 00000001
:004401E6 0C40                    or al, 40
:004401E8 50                      push eax
:004401E9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004401EC E83F6AFFFF              call 00436C30
:004401F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004401F4 E8E767FFFF              call 004369E0
:004401F9 50                      push eax
:004401FA E81DC90200              call 0046CB1C
:004401FF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440142(U), :00440184(U), :004401C3(U), :004401D4(C)
|
:00440202 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00440205 E89549FFFF              call 00434B9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004400AB(C)
|
:0044020A 8BE5                    mov esp, ebp
:0044020C 5D                      pop ebp
:0044020D C3                      ret



* Referenced by a CALL at Address:
|:0043B1D9   
|
:0044020E 55                      push ebp
:0044020F 8BEC                    mov ebp, esp
:00440211 83EC18                  sub esp, 00000018
:00440214 C645FCFF                mov [ebp-04], FF
:00440218 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044021B 6BC931                  imul ecx, 00000031
:0044021E 81C1001D4B00            add ecx, 004B1D00
:00440224 E83755FCFF              call 00405760
:00440229 8845F4                  mov byte ptr [ebp-0C], al
:0044022C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044022F 6BC924                  imul ecx, 00000024
:00440232 81C1B83B4B00            add ecx, 004B3BB8
:00440238 E84355FCFF              call 00405780
:0044023D 25FF000000              and eax, 000000FF
:00440242 83F807                  cmp eax, 00000007
:00440245 7417                    je 0044025E
:00440247 33C0                    xor eax, eax
:00440249 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0044024E 83E004                  and eax, 00000004
:00440251 85C0                    test eax, eax
:00440253 7509                    jne 0044025E
:00440255 C745E800000000          mov [ebp-18], 00000000
:0044025C EB07                    jmp 00440265

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440245(C), :00440253(C)
|
:0044025E C745E801000000          mov [ebp-18], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044025C(U)
|
:00440265 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00440268 894DF8                  mov dword ptr [ebp-08], ecx
:0044026B 68FF000000              push 000000FF
:00440270 8B55F8                  mov edx, dword ptr [ebp-08]
:00440273 52                      push edx
:00440274 8B450C                  mov eax, dword ptr [ebp+0C]
:00440277 50                      push eax
:00440278 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044027B 51                      push ecx
:0044027C E82471FFFF              call 004373A5
:00440281 83C410                  add esp, 00000010
:00440284 85C0                    test eax, eax
:00440286 7505                    jne 0044028D
:00440288 E951010000              jmp 004403DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440286(C)
|
:0044028D 6A01                    push 00000001
:0044028F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00440292 81E2FF000000            and edx, 000000FF
:00440298 80CA80                  or dl, 80
:0044029B 52                      push edx
:0044029C 8A450C                  mov al, byte ptr [ebp+0C]
:0044029F 50                      push eax
:004402A0 B958494B00              mov ecx, 004B4958
:004402A5 E804DB0000              call 0044DDAE
:004402AA 8845FC                  mov byte ptr [ebp-04], al
:004402AD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004402B0 81E1FF000000            and ecx, 000000FF
:004402B6 81F9FF000000            cmp ecx, 000000FF
:004402BC 0F841C010000            je 004403DE
:004402C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004402C5 81E1FF000000            and ecx, 000000FF
:004402CB 6BC924                  imul ecx, 00000024
:004402CE 81C1B83B4B00            add ecx, 004B3BB8
:004402D4 E8A76CFFFF              call 00436F80
:004402D9 8845F0                  mov byte ptr [ebp-10], al
:004402DC 8B55F0                  mov edx, dword ptr [ebp-10]
:004402DF 81E2FF000000            and edx, 000000FF
:004402E5 83FA1C                  cmp edx, 0000001C
:004402E8 740D                    je 004402F7
:004402EA 8B45F0                  mov eax, dword ptr [ebp-10]
:004402ED 25FF000000              and eax, 000000FF
:004402F2 83F81D                  cmp eax, 0000001D
:004402F5 7520                    jne 00440317

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004402E8(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004402F7 6A07                    push 00000007
:004402F9 B9F8544B00              mov ecx, 004B54F8
:004402FE E817920200              call 0046951A

* Possible StringData Ref from Data Obj ->"B鶤Lk"
                                  |
:00440303 68ECE74700              push 0047E7EC
:00440308 6A00                    push 00000000
:0044030A E82411FFFF              call 00431433
:0044030F 83C408                  add esp, 00000008
:00440312 E9C7000000              jmp 004403DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004402F5(C)
|
:00440317 6A01                    push 00000001
:00440319 8A4DFC                  mov cl, byte ptr [ebp-04]
:0044031C 51                      push ecx
:0044031D E8A59AFFFF              call 00439DC7
:00440322 83C408                  add esp, 00000008
:00440325 85C0                    test eax, eax
:00440327 0F84B1000000            je 004403DE
:0044032D 837DF800                cmp dword ptr [ebp-08], 00000000
:00440331 7421                    je 00440354
:00440333 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440336 6BC931                  imul ecx, 00000031
:00440339 81C1001D4B00            add ecx, 004B1D00
:0044033F E8AC53FCFF              call 004056F0
:00440344 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00440345 68FCE74700              push 0047E7FC
:0044034A 6A00                    push 00000000
:0044034C E8E210FFFF              call 00431433
:00440351 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440331(C)
|
:00440354 8A5508                  mov dl, byte ptr [ebp+08]
:00440357 52                      push edx
:00440358 8A450C                  mov al, byte ptr [ebp+0C]
:0044035B 50                      push eax
:0044035C 6A01                    push 00000001
:0044035E 8B4508                  mov eax, dword ptr [ebp+08]
:00440361 33D2                    xor edx, edx
:00440363 B921000000              mov ecx, 00000021
:00440368 F7F1                    div ecx
:0044036A 52                      push edx
:0044036B 8A55FC                  mov dl, byte ptr [ebp-04]
:0044036E 52                      push edx
:0044036F E8BE6CFFFF              call 00437032
:00440374 83C414                  add esp, 00000014
:00440377 837DF800                cmp dword ptr [ebp-08], 00000000
:0044037B 7437                    je 004403B4
:0044037D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440380 6BC924                  imul ecx, 00000024
:00440383 81C1B83B4B00            add ecx, 004B3BB8
:00440389 E85266FFFF              call 004369E0
:0044038E 6BC050                  imul eax, 00000050
:00440391 05787F4900              add eax, 00497F78
:00440396 8945EC                  mov dword ptr [ebp-14], eax
:00440399 6A01                    push 00000001
:0044039B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044039E E83DDBFEFF              call 0042DEE0
:004403A3 25FF000000              and eax, 000000FF
:004403A8 83C014                  add eax, 00000014
:004403AB 50                      push eax
:004403AC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004403AF E8F620FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044037B(C)
|
:004403B4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004403B7 81E1FF000000            and ecx, 000000FF
:004403BD 6BC924                  imul ecx, 00000024
:004403C0 81C1B83B4B00            add ecx, 004B3BB8
:004403C6 E81566FFFF              call 004369E0
:004403CB 50                      push eax
:004403CC E84BC70200              call 0046CB1C
:004403D1 83C404                  add esp, 00000004
:004403D4 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440288(U), :004402BC(C), :00440312(U), :00440327(C)
|
:004403DE 8BE5                    mov esp, ebp
:004403E0 5D                      pop ebp
:004403E1 C3                      ret



* Referenced by a CALL at Address:
|:0043B1FB   
|
:004403E2 55                      push ebp
:004403E3 8BEC                    mov ebp, esp
:004403E5 83EC20                  sub esp, 00000020
:004403E8 C645FCFF                mov [ebp-04], FF
:004403EC 8B4508                  mov eax, dword ptr [ebp+08]
:004403EF 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00006: ""
                                  |
:004403F1 B906000000              mov ecx, 00000006
:004403F6 F7F1                    div ecx
:004403F8 8845F4                  mov byte ptr [ebp-0C], al
:004403FB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004403FE 6BC931                  imul ecx, 00000031
:00440401 81C1001D4B00            add ecx, 004B1D00
:00440407 E87453FCFF              call 00405780
:0044040C 8845EC                  mov byte ptr [ebp-14], al
:0044040F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440412 6BC931                  imul ecx, 00000031
:00440415 81C1001D4B00            add ecx, 004B1D00
:0044041B E84053FCFF              call 00405760
:00440420 8845F0                  mov byte ptr [ebp-10], al
:00440423 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440426 6BC924                  imul ecx, 00000024
:00440429 81C1B83B4B00            add ecx, 004B3BB8
:0044042F E84C53FCFF              call 00405780
:00440434 25FF000000              and eax, 000000FF
:00440439 83F807                  cmp eax, 00000007
:0044043C 7418                    je 00440456
:0044043E 33D2                    xor edx, edx
:00440440 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:00440446 83E204                  and edx, 00000004
:00440449 85D2                    test edx, edx
:0044044B 7509                    jne 00440456
:0044044D C745E000000000          mov [ebp-20], 00000000
:00440454 EB07                    jmp 0044045D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044043C(C), :0044044B(C)
|
:00440456 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440454(U)
|
:0044045D 8B45E0                  mov eax, dword ptr [ebp-20]
:00440460 8945F8                  mov dword ptr [ebp-08], eax
:00440463 68FF000000              push 000000FF
:00440468 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044046B 51                      push ecx
:0044046C 8B550C                  mov edx, dword ptr [ebp+0C]
:0044046F 52                      push edx
:00440470 8B4508                  mov eax, dword ptr [ebp+08]
:00440473 50                      push eax
:00440474 E82C6FFFFF              call 004373A5
:00440479 83C410                  add esp, 00000010
:0044047C 85C0                    test eax, eax
:0044047E 7505                    jne 00440485
:00440480 E992010000              jmp 00440617

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044047E(C)
|
:00440485 8A4DEC                  mov cl, byte ptr [ebp-14]
:00440488 51                      push ecx
:00440489 E884B1FFFF              call 0043B612
:0044048E 83C404                  add esp, 00000004
:00440491 6A00                    push 00000000
:00440493 8B55F0                  mov edx, dword ptr [ebp-10]
:00440496 81E2FF000000            and edx, 000000FF
:0044049C 80CA80                  or dl, 80
:0044049F 52                      push edx
:004404A0 8A450C                  mov al, byte ptr [ebp+0C]
:004404A3 50                      push eax
:004404A4 B958494B00              mov ecx, 004B4958
:004404A9 E800D90000              call 0044DDAE
:004404AE 8845FC                  mov byte ptr [ebp-04], al
:004404B1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004404B4 81E1FF000000            and ecx, 000000FF
:004404BA 81F9FF000000            cmp ecx, 000000FF
:004404C0 0F8451010000            je 00440617
:004404C6 837DF800                cmp dword ptr [ebp-08], 00000000
:004404CA 7421                    je 004404ED
:004404CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004404CF 6BC931                  imul ecx, 00000031
:004404D2 81C1001D4B00            add ecx, 004B1D00
:004404D8 E81352FCFF              call 004056F0
:004404DD 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004404DE 6800E84700              push 0047E800
:004404E3 6A00                    push 00000000
:004404E5 E8490FFFFF              call 00431433
:004404EA 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004404CA(C)
|
:004404ED 8A55FC                  mov dl, byte ptr [ebp-04]
:004404F0 52                      push edx
:004404F1 8A450C                  mov al, byte ptr [ebp+0C]
:004404F4 50                      push eax
:004404F5 E8FC9FFFFF              call 0043A4F6
:004404FA 83C408                  add esp, 00000008
:004404FD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00440500 81E1FF000000            and ecx, 000000FF
:00440506 6BC924                  imul ecx, 00000024
:00440509 81C1B83B4B00            add ecx, 004B3BB8
:0044050F E82C17FFFF              call 00431C40
:00440514 668B08                  mov cx, word ptr [eax]
:00440517 66894DE8                mov word ptr [ebp-18], cx
:0044051B 8A55E9                  mov dl, byte ptr [ebp-17]
:0044051E 52                      push edx
:0044051F 8A45E8                  mov al, byte ptr [ebp-18]
:00440522 50                      push eax
:00440523 B958494B00              mov ecx, 004B4958
:00440528 E8C0D50000              call 0044DAED
:0044052D 8A4DFC                  mov cl, byte ptr [ebp-04]
:00440530 51                      push ecx
:00440531 8A550C                  mov dl, byte ptr [ebp+0C]
:00440534 52                      push edx
:00440535 E81C6EFFFF              call 00437356
:0044053A 83C408                  add esp, 00000008
:0044053D 85C0                    test eax, eax
:0044053F 7458                    je 00440599
:00440541 6A01                    push 00000001
:00440543 8A4510                  mov al, byte ptr [ebp+10]
:00440546 50                      push eax
:00440547 8A4D08                  mov cl, byte ptr [ebp+08]
:0044054A 51                      push ecx
:0044054B 8A55FC                  mov dl, byte ptr [ebp-04]
:0044054E 52                      push edx
:0044054F 8A450C                  mov al, byte ptr [ebp+0C]
:00440552 50                      push eax
:00440553 B958494B00              mov ecx, 004B4958
:00440558 E833E20000              call 0044E790
:0044055D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00440560 81E1FF000000            and ecx, 000000FF
:00440566 51                      push ecx
:00440567 8B550C                  mov edx, dword ptr [ebp+0C]
:0044056A 52                      push edx
:0044056B 8B4508                  mov eax, dword ptr [ebp+08]
:0044056E 50                      push eax
:0044056F E86578FFFF              call 00437DD9
:00440574 83C40C                  add esp, 0000000C
:00440577 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044057A 81E1FF000000            and ecx, 000000FF
:00440580 6BC924                  imul ecx, 00000024
:00440583 81C1B83B4B00            add ecx, 004B3BB8
:00440589 E85264FFFF              call 004369E0
:0044058E 50                      push eax
:0044058F E888C50200              call 0046CB1C
:00440594 83C404                  add esp, 00000004
:00440597 EB37                    jmp 004405D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044053F(C)
|
:00440599 6A00                    push 00000000
:0044059B 8A4D10                  mov cl, byte ptr [ebp+10]
:0044059E 51                      push ecx
:0044059F 8A5508                  mov dl, byte ptr [ebp+08]
:004405A2 52                      push edx
:004405A3 8A45FC                  mov al, byte ptr [ebp-04]
:004405A6 50                      push eax
:004405A7 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004405AA 51                      push ecx
:004405AB B958494B00              mov ecx, 004B4958
:004405B0 E8DBE10000              call 0044E790

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004405B5 6A07                    push 00000007
:004405B7 B9F8544B00              mov ecx, 004B54F8
:004405BC E8598F0200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۥѤF"
                                  |
:004405C1 6804E84700              push 0047E804
:004405C6 6A00                    push 00000000
:004405C8 E8660EFFFF              call 00431433
:004405CD 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440597(U)
|
:004405D0 837DF800                cmp dword ptr [ebp-08], 00000000
:004405D4 7437                    je 0044060D
:004405D6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004405D9 6BC924                  imul ecx, 00000024
:004405DC 81C1B83B4B00            add ecx, 004B3BB8
:004405E2 E8F963FFFF              call 004369E0
:004405E7 6BC050                  imul eax, 00000050
:004405EA 05787F4900              add eax, 00497F78
:004405EF 8945E4                  mov dword ptr [ebp-1C], eax
:004405F2 6A01                    push 00000001
:004405F4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004405F7 E8E4D8FEFF              call 0042DEE0
:004405FC 25FF000000              and eax, 000000FF
:00440601 83C00A                  add eax, 0000000A
:00440604 50                      push eax
:00440605 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00440608 E89D1EFCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004405D4(C)
|
:0044060D C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440480(U), :004404C0(C)
|
:00440617 8BE5                    mov esp, ebp
:00440619 5D                      pop ebp
:0044061A C3                      ret



* Referenced by a CALL at Address:
|:0043B21D   
|
:0044061B 55                      push ebp
:0044061C 8BEC                    mov ebp, esp
:0044061E 83EC1C                  sub esp, 0000001C
:00440621 C645FCFF                mov [ebp-04], FF
:00440625 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440628 6BC931                  imul ecx, 00000031
:0044062B 81C1001D4B00            add ecx, 004B1D00
:00440631 E82A51FCFF              call 00405760
:00440636 8845F4                  mov byte ptr [ebp-0C], al
:00440639 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044063C 6BC924                  imul ecx, 00000024
:0044063F 81C1B83B4B00            add ecx, 004B3BB8
:00440645 E83651FCFF              call 00405780
:0044064A 25FF000000              and eax, 000000FF
:0044064F 83F807                  cmp eax, 00000007
:00440652 7417                    je 0044066B
:00440654 33C0                    xor eax, eax
:00440656 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0044065B 83E004                  and eax, 00000004
:0044065E 85C0                    test eax, eax
:00440660 7509                    jne 0044066B
:00440662 C745E400000000          mov [ebp-1C], 00000000
:00440669 EB07                    jmp 00440672

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440652(C), :00440660(C)
|
:0044066B C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440669(U)
|
:00440672 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00440675 894DF8                  mov dword ptr [ebp-08], ecx
:00440678 68FF000000              push 000000FF
:0044067D 8B55F8                  mov edx, dword ptr [ebp-08]
:00440680 52                      push edx
:00440681 8B450C                  mov eax, dword ptr [ebp+0C]
:00440684 50                      push eax
:00440685 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440688 51                      push ecx
:00440689 E8176DFFFF              call 004373A5
:0044068E 83C410                  add esp, 00000010
:00440691 85C0                    test eax, eax
:00440693 7505                    jne 0044069A
:00440695 E9C6010000              jmp 00440860

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440693(C), :004406F8(U), :00440752(U)
|
:0044069A 6A01                    push 00000001
:0044069C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044069F 81E2FF000000            and edx, 000000FF
:004406A5 80CA80                  or dl, 80
:004406A8 52                      push edx
:004406A9 8A450C                  mov al, byte ptr [ebp+0C]
:004406AC 50                      push eax
:004406AD B958494B00              mov ecx, 004B4958
:004406B2 E8F7D60000              call 0044DDAE
:004406B7 8845FC                  mov byte ptr [ebp-04], al
:004406BA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004406BD 81E1FF000000            and ecx, 000000FF
:004406C3 81F9FF000000            cmp ecx, 000000FF
:004406C9 0F8491010000            je 00440860
:004406CF 8B55FC                  mov edx, dword ptr [ebp-04]
:004406D2 81E2FF000000            and edx, 000000FF
:004406D8 3B550C                  cmp edx, dword ptr [ebp+0C]
:004406DB 751D                    jne 004406FA

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004406DD 6A07                    push 00000007
:004406DF B9F8544B00              mov ecx, 004B54F8
:004406E4 E8318E0200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۭxLk"
                                  |
:004406E9 6810E84700              push 0047E810
:004406EE 6A00                    push 00000000
:004406F0 E83E0DFFFF              call 00431433
:004406F5 83C408                  add esp, 00000008
:004406F8 EBA0                    jmp 0044069A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004406DB(C)
|
:004406FA 6A40                    push 00000040
:004406FC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004406FF 81E1FF000000            and ecx, 000000FF
:00440705 6BC924                  imul ecx, 00000024
:00440708 81C1B83B4B00            add ecx, 004B3BB8
:0044070E E8DD66FFFF              call 00436DF0
:00440713 85C0                    test eax, eax
:00440715 7540                    jne 00440757
:00440717 6880000000              push 00000080
:0044071C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044071F 81E1FF000000            and ecx, 000000FF
:00440725 6BC924                  imul ecx, 00000024
:00440728 81C1B83B4B00            add ecx, 004B3BB8
:0044072E E8BD66FFFF              call 00436DF0
:00440733 85C0                    test eax, eax
:00440735 7520                    jne 00440757

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00440737 6A07                    push 00000007
:00440739 B9F8544B00              mov ecx, 004B54F8
:0044073E E8D78D0200              call 0046951A

* Possible StringData Ref from Data Obj ->"䳡٨SRO"
                                  |
:00440743 6824E84700              push 0047E824
:00440748 6A00                    push 00000000
:0044074A E8E40CFFFF              call 00431433
:0044074F 83C408                  add esp, 00000008
:00440752 E943FFFFFF              jmp 0044069A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440715(C), :00440735(C)
|
:00440757 837DF800                cmp dword ptr [ebp-08], 00000000
:0044075B 7421                    je 0044077E
:0044075D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440760 6BC931                  imul ecx, 00000031
:00440763 81C1001D4B00            add ecx, 004B1D00
:00440769 E8824FFCFF              call 004056F0
:0044076E 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0044076F 683CE84700              push 0047E83C
:00440774 6A00                    push 00000000
:00440776 E8B80CFFFF              call 00431433
:0044077B 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044075B(C)
|
:0044077E 8A45FC                  mov al, byte ptr [ebp-04]
:00440781 50                      push eax
:00440782 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00440785 51                      push ecx
:00440786 E86B9DFFFF              call 0043A4F6
:0044078B 83C408                  add esp, 00000008
:0044078E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00440791 81E1FF000000            and ecx, 000000FF
:00440797 6BC924                  imul ecx, 00000024
:0044079A 81C1B83B4B00            add ecx, 004B3BB8
:004407A0 E89B14FFFF              call 00431C40
:004407A5 668B10                  mov dx, word ptr [eax]
:004407A8 668955F0                mov word ptr [ebp-10], dx
:004407AC 8A45F1                  mov al, byte ptr [ebp-0F]
:004407AF 50                      push eax
:004407B0 8A4DF0                  mov cl, byte ptr [ebp-10]
:004407B3 51                      push ecx
:004407B4 B958494B00              mov ecx, 004B4958
:004407B9 E82FD30000              call 0044DAED
:004407BE 6A01                    push 00000001
:004407C0 8A5510                  mov dl, byte ptr [ebp+10]
:004407C3 52                      push edx
:004407C4 8A4508                  mov al, byte ptr [ebp+08]
:004407C7 50                      push eax
:004407C8 8A4DFC                  mov cl, byte ptr [ebp-04]
:004407CB 51                      push ecx
:004407CC 8A550C                  mov dl, byte ptr [ebp+0C]
:004407CF 52                      push edx
:004407D0 B958494B00              mov ecx, 004B4958
:004407D5 E8B6DF0000              call 0044E790
:004407DA 8B45FC                  mov eax, dword ptr [ebp-04]
:004407DD 25FF000000              and eax, 000000FF
:004407E2 6BC024                  imul eax, 00000024
:004407E5 05B83B4B00              add eax, 004B3BB8
:004407EA 8945EC                  mov dword ptr [ebp-14], eax
:004407ED 6A40                    push 00000040
:004407EF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004407F2 E8F965FFFF              call 00436DF0
:004407F7 85C0                    test eax, eax
:004407F9 7511                    jne 0044080C
:004407FB 6880000000              push 00000080
:00440800 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00440803 E8E865FFFF              call 00436DF0
:00440808 85C0                    test eax, eax
:0044080A 740D                    je 00440819

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004407F9(C)
|
:0044080C 68C0000000              push 000000C0
:00440811 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00440814 E8A765FFFF              call 00436DC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044080A(C)
|
:00440819 837DF800                cmp dword ptr [ebp-08], 00000000
:0044081D 7437                    je 00440856
:0044081F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440822 6BC924                  imul ecx, 00000024
:00440825 81C1B83B4B00            add ecx, 004B3BB8
:0044082B E8B061FFFF              call 004369E0
:00440830 6BC050                  imul eax, 00000050
:00440833 05787F4900              add eax, 00497F78
:00440838 8945E8                  mov dword ptr [ebp-18], eax
:0044083B 6A01                    push 00000001
:0044083D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00440840 E89BD6FEFF              call 0042DEE0
:00440845 25FF000000              and eax, 000000FF
:0044084A 83C00A                  add eax, 0000000A
:0044084D 50                      push eax
:0044084E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00440851 E8541CFCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044081D(C)
|
:00440856 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440695(U), :004406C9(C)
|
:00440860 8BE5                    mov esp, ebp
:00440862 5D                      pop ebp
:00440863 C3                      ret



* Referenced by a CALL at Address:
|:0043B23C   
|
:00440864 55                      push ebp
:00440865 8BEC                    mov ebp, esp
:00440867 83EC14                  sub esp, 00000014
:0044086A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044086D 6BC924                  imul ecx, 00000024
:00440870 81C1B83B4B00            add ecx, 004B3BB8
:00440876 E8054FFCFF              call 00405780
:0044087B 25FF000000              and eax, 000000FF
:00440880 83F807                  cmp eax, 00000007
:00440883 7417                    je 0044089C
:00440885 33C0                    xor eax, eax
:00440887 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0044088C 83E004                  and eax, 00000004
:0044088F 85C0                    test eax, eax
:00440891 7509                    jne 0044089C
:00440893 C745F000000000          mov [ebp-10], 00000000
:0044089A EB07                    jmp 004408A3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440883(C), :00440891(C)
|
:0044089C C745F001000000          mov [ebp-10], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044089A(U)
|
:004408A3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004408A6 894DF8                  mov dword ptr [ebp-08], ecx
:004408A9 68FF000000              push 000000FF
:004408AE 8B55F8                  mov edx, dword ptr [ebp-08]
:004408B1 52                      push edx
:004408B2 8B450C                  mov eax, dword ptr [ebp+0C]
:004408B5 50                      push eax
:004408B6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004408B9 51                      push ecx
:004408BA E8E66AFFFF              call 004373A5
:004408BF 83C410                  add esp, 00000010
:004408C2 85C0                    test eax, eax
:004408C4 7505                    jne 004408CB
:004408C6 E947010000              jmp 00440A12

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004408C4(C)
|
:004408CB 6A18                    push 00000018
:004408CD 6A27                    push 00000027
:004408CF 6A00                    push 00000000
:004408D1 6A00                    push 00000000
:004408D3 B958494B00              mov ecx, 004B4958
:004408D8 E86BC00000              call 0044C948
:004408DD 837DF800                cmp dword ptr [ebp-08], 00000000
:004408E1 7421                    je 00440904
:004408E3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004408E6 6BC931                  imul ecx, 00000031
:004408E9 81C1001D4B00            add ecx, 004B1D00
:004408EF E8FC4DFCFF              call 004056F0
:004408F4 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:004408F5 6840E84700              push 0047E840
:004408FA 6A00                    push 00000000
:004408FC E8320BFFFF              call 00431433
:00440901 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004408E1(C)
|
:00440904 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440907 6BC924                  imul ecx, 00000024
:0044090A 81C1B83B4B00            add ecx, 004B3BB8
:00440910 E82B13FFFF              call 00431C40
:00440915 668B10                  mov dx, word ptr [eax]
:00440918 668955FC                mov word ptr [ebp-04], dx
:0044091C 8A45FD                  mov al, byte ptr [ebp-03]
:0044091F 50                      push eax
:00440920 8A4DFC                  mov cl, byte ptr [ebp-04]
:00440923 51                      push ecx
:00440924 B958494B00              mov ecx, 004B4958
:00440929 E8BFD10000              call 0044DAED
:0044092E 6A01                    push 00000001
:00440930 8A5510                  mov dl, byte ptr [ebp+10]
:00440933 52                      push edx
:00440934 8A4508                  mov al, byte ptr [ebp+08]
:00440937 50                      push eax
:00440938 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044093B 51                      push ecx
:0044093C 8A550C                  mov dl, byte ptr [ebp+0C]
:0044093F 52                      push edx
:00440940 B958494B00              mov ecx, 004B4958
:00440945 E846DE0000              call 0044E790
:0044094A B9784E4B00              mov ecx, 004B4E78
:0044094F E88C160000              call 00441FE0
:00440954 25FF000000              and eax, 000000FF
:00440959 8945EC                  mov dword ptr [ebp-14], eax
:0044095C 837DEC05                cmp dword ptr [ebp-14], 00000005
:00440960 775F                    ja 004409C1
:00440962 8B45EC                  mov eax, dword ptr [ebp-14]
:00440965 FF2485160A4400          jmp dword ptr [4*eax+00440A16]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044096C 6A04                    push 00000004
:0044096E B9784E4B00              mov ecx, 004B4E78
:00440973 E89819FDFF              call 00412310

* Possible StringData Ref from Data Obj ->"UBF"
                                  |
:00440978 6844E84700              push 0047E844
:0044097D 6A00                    push 00000000
:0044097F E8AF0AFFFF              call 00431433
:00440984 83C408                  add esp, 00000008
:00440987 EB38                    jmp 004409C1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00440989 6A05                    push 00000005
:0044098B B9784E4B00              mov ecx, 004B4E78
:00440990 E87B19FDFF              call 00412310

* Possible StringData Ref from Data Obj ->"UBF"
                                  |
:00440995 684CE84700              push 0047E84C
:0044099A 6A00                    push 00000000
:0044099C E8920AFFFF              call 00431433
:004409A1 83C408                  add esp, 00000008
:004409A4 EB1B                    jmp 004409C1
:004409A6 6A00                    push 00000000
:004409A8 B9784E4B00              mov ecx, 004B4E78
:004409AD E85E19FDFF              call 00412310

* Possible StringData Ref from Data Obj ->"ѴF"
                                  |
:004409B2 6854E84700              push 0047E854
:004409B7 6A00                    push 00000000
:004409B9 E8750AFFFF              call 00431433
:004409BE 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440960(C), :00440987(U), :004409A4(U)
|
:004409C1 B9784E4B00              mov ecx, 004B4E78
:004409C6 E86DEC0100              call 0045F638
:004409CB 837DF800                cmp dword ptr [ebp-08], 00000000
:004409CF 7437                    je 00440A08
:004409D1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004409D4 6BC924                  imul ecx, 00000024
:004409D7 81C1B83B4B00            add ecx, 004B3BB8
:004409DD E8FE5FFFFF              call 004369E0
:004409E2 6BC050                  imul eax, 00000050
:004409E5 05787F4900              add eax, 00497F78
:004409EA 8945F4                  mov dword ptr [ebp-0C], eax
:004409ED 6A01                    push 00000001
:004409EF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004409F2 E8E9D4FEFF              call 0042DEE0
:004409F7 25FF000000              and eax, 000000FF
:004409FC 83C00A                  add eax, 0000000A
:004409FF 50                      push eax
:00440A00 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00440A03 E8A21AFCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004409CF(C)
|
:00440A08 C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004408C6(U)
|
:00440A12 8BE5                    mov esp, ebp
:00440A14 5D                      pop ebp
:00440A15 C3                      ret



:00440A16 6C094400                DWORD 0044096C
:00440A1A 6C094400                DWORD 0044096C
:00440A1E 89094400                DWORD 00440989
:00440A22 89094400                DWORD 00440989
:00440A26 A6094400                DWORD 004409A6
:00440A2A A6094400                DWORD 004409A6



* Referenced by a CALL at Address:
|:0043B25B   
|
:00440A2E 55                      push ebp
:00440A2F 8BEC                    mov ebp, esp
:00440A31 83EC20                  sub esp, 00000020
:00440A34 C645FCFF                mov [ebp-04], FF
:00440A38 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440A3B 6BC931                  imul ecx, 00000031
:00440A3E 81C1001D4B00            add ecx, 004B1D00
:00440A44 E8174DFCFF              call 00405760
:00440A49 8845F4                  mov byte ptr [ebp-0C], al
:00440A4C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440A4F 6BC924                  imul ecx, 00000024
:00440A52 81C1B83B4B00            add ecx, 004B3BB8
:00440A58 E8234DFCFF              call 00405780
:00440A5D 25FF000000              and eax, 000000FF
:00440A62 83F807                  cmp eax, 00000007
:00440A65 7417                    je 00440A7E
:00440A67 33C0                    xor eax, eax
:00440A69 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:00440A6E 83E004                  and eax, 00000004
:00440A71 85C0                    test eax, eax
:00440A73 7509                    jne 00440A7E
:00440A75 C745E000000000          mov [ebp-20], 00000000
:00440A7C EB07                    jmp 00440A85

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440A65(C), :00440A73(C)
|
:00440A7E C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440A7C(U)
|
:00440A85 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00440A88 894DF8                  mov dword ptr [ebp-08], ecx
:00440A8B 68FF000000              push 000000FF
:00440A90 8B55F8                  mov edx, dword ptr [ebp-08]
:00440A93 52                      push edx
:00440A94 8B450C                  mov eax, dword ptr [ebp+0C]
:00440A97 50                      push eax
:00440A98 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440A9B 51                      push ecx
:00440A9C E80469FFFF              call 004373A5
:00440AA1 83C410                  add esp, 00000010
:00440AA4 85C0                    test eax, eax
:00440AA6 7505                    jne 00440AAD
:00440AA8 E91B020000              jmp 00440CC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440AA6(C)
|
:00440AAD 6A00                    push 00000000
:00440AAF 8B55F4                  mov edx, dword ptr [ebp-0C]
:00440AB2 81E2FF000000            and edx, 000000FF
:00440AB8 80CA80                  or dl, 80
:00440ABB 52                      push edx
:00440ABC 8A450C                  mov al, byte ptr [ebp+0C]
:00440ABF 50                      push eax
:00440AC0 B958494B00              mov ecx, 004B4958
:00440AC5 E8E4D20000              call 0044DDAE
:00440ACA 8845FC                  mov byte ptr [ebp-04], al
:00440ACD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00440AD0 81E1FF000000            and ecx, 000000FF
:00440AD6 81F9FF000000            cmp ecx, 000000FF
:00440ADC 0F84E6010000            je 00440CC8
:00440AE2 837DF800                cmp dword ptr [ebp-08], 00000000
:00440AE6 7421                    je 00440B09
:00440AE8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440AEB 6BC931                  imul ecx, 00000031
:00440AEE 81C1001D4B00            add ecx, 004B1D00
:00440AF4 E8F74BFCFF              call 004056F0
:00440AF9 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00440AFA 685CE84700              push 0047E85C
:00440AFF 6A00                    push 00000000
:00440B01 E82D09FFFF              call 00431433
:00440B06 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440AE6(C)
|
:00440B09 8A55FC                  mov dl, byte ptr [ebp-04]
:00440B0C 52                      push edx
:00440B0D 8A450C                  mov al, byte ptr [ebp+0C]
:00440B10 50                      push eax
:00440B11 E8E099FFFF              call 0043A4F6
:00440B16 83C408                  add esp, 00000008
:00440B19 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00440B1C 81E1FF000000            and ecx, 000000FF
:00440B22 6BC924                  imul ecx, 00000024
:00440B25 81C1B83B4B00            add ecx, 004B3BB8
:00440B2B E81011FFFF              call 00431C40
:00440B30 668B08                  mov cx, word ptr [eax]
:00440B33 66894DF0                mov word ptr [ebp-10], cx
:00440B37 8A55F1                  mov dl, byte ptr [ebp-0F]
:00440B3A 52                      push edx
:00440B3B 8A45F0                  mov al, byte ptr [ebp-10]
:00440B3E 50                      push eax
:00440B3F B958494B00              mov ecx, 004B4958
:00440B44 E8A4CF0000              call 0044DAED
:00440B49 8A4DFC                  mov cl, byte ptr [ebp-04]
:00440B4C 51                      push ecx
:00440B4D 8A550C                  mov dl, byte ptr [ebp+0C]
:00440B50 52                      push edx
:00440B51 E80068FFFF              call 00437356
:00440B56 83C408                  add esp, 00000008
:00440B59 85C0                    test eax, eax
:00440B5B 0F84E9000000            je 00440C4A
:00440B61 6A01                    push 00000001
:00440B63 8A4510                  mov al, byte ptr [ebp+10]
:00440B66 50                      push eax
:00440B67 8A4D08                  mov cl, byte ptr [ebp+08]
:00440B6A 51                      push ecx
:00440B6B 8A55FC                  mov dl, byte ptr [ebp-04]
:00440B6E 52                      push edx
:00440B6F 8A450C                  mov al, byte ptr [ebp+0C]
:00440B72 50                      push eax
:00440B73 B958494B00              mov ecx, 004B4958
:00440B78 E813DC0000              call 0044E790
:00440B7D 8A4DFC                  mov cl, byte ptr [ebp-04]
:00440B80 51                      push ecx
:00440B81 8A550C                  mov dl, byte ptr [ebp+0C]
:00440B84 52                      push edx
:00440B85 E87775FFFF              call 00438101
:00440B8A 83C408                  add esp, 00000008
:00440B8D 8945EC                  mov dword ptr [ebp-14], eax
:00440B90 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00440B93 81E1FF000000            and ecx, 000000FF
:00440B99 6BC924                  imul ecx, 00000024
:00440B9C 81C1B83B4B00            add ecx, 004B3BB8
:00440BA2 E89910FFFF              call 00431C40
:00440BA7 50                      push eax
:00440BA8 E8ABEC0000              call 0044F858
:00440BAD 83C404                  add esp, 00000004
:00440BB0 8845E8                  mov byte ptr [ebp-18], al
:00440BB3 8B45E8                  mov eax, dword ptr [ebp-18]
:00440BB6 25FF000000              and eax, 000000FF
:00440BBB 83F805                  cmp eax, 00000005
:00440BBE 740E                    je 00440BCE
:00440BC0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00440BC3 81E1FF000000            and ecx, 000000FF
:00440BC9 83F907                  cmp ecx, 00000007
:00440BCC 7509                    jne 00440BD7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440BBE(C)
|
:00440BCE 8B55EC                  mov edx, dword ptr [ebp-14]
:00440BD1 83C20A                  add edx, 0000000A
:00440BD4 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440BCC(C)
|
:00440BD7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440BDA 6BC924                  imul ecx, 00000024
:00440BDD 81C1B83B4B00            add ecx, 004B3BB8
:00440BE3 E828BDFCFF              call 0040C910
:00440BE8 85C0                    test eax, eax
:00440BEA 741A                    je 00440C06
:00440BEC B978294B00              mov ecx, 004B2978
:00440BF1 E8EA5DFFFF              call 004369E0
:00440BF6 0345EC                  add eax, dword ptr [ebp-14]
:00440BF9 50                      push eax
:00440BFA B978294B00              mov ecx, 004B2978
:00440BFF E8BC4AFCFF              call 004056C0
:00440C04 EB22                    jmp 00440C28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440BEA(C)
|
:00440C06 8B45EC                  mov eax, dword ptr [ebp-14]
:00440C09 50                      push eax
:00440C0A B978294B00              mov ecx, 004B2978
:00440C0F E8CC5DFFFF              call 004369E0
:00440C14 50                      push eax
:00440C15 E806770300              call 00478320
:00440C1A 83C408                  add esp, 00000008
:00440C1D 50                      push eax
:00440C1E B978294B00              mov ecx, 004B2978
:00440C23 E8984AFCFF              call 004056C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440C04(U)
|
:00440C28 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00440C2B 81E1FF000000            and ecx, 000000FF
:00440C31 6BC924                  imul ecx, 00000024
:00440C34 81C1B83B4B00            add ecx, 004B3BB8
:00440C3A E8A15DFFFF              call 004369E0
:00440C3F 50                      push eax
:00440C40 E8D7BE0200              call 0046CB1C
:00440C45 83C404                  add esp, 00000004
:00440C48 EB37                    jmp 00440C81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440B5B(C)
|
:00440C4A 6A00                    push 00000000
:00440C4C 8A4D10                  mov cl, byte ptr [ebp+10]
:00440C4F 51                      push ecx
:00440C50 8A5508                  mov dl, byte ptr [ebp+08]
:00440C53 52                      push edx
:00440C54 8A45FC                  mov al, byte ptr [ebp-04]
:00440C57 50                      push eax
:00440C58 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00440C5B 51                      push ecx
:00440C5C B958494B00              mov ecx, 004B4958
:00440C61 E82ADB0000              call 0044E790

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00440C66 6A07                    push 00000007
:00440C68 B9F8544B00              mov ecx, 004B54F8
:00440C6D E8A8880200              call 0046951A

* Possible StringData Ref from Data Obj ->"ۥѤF"
                                  |
:00440C72 6860E84700              push 0047E860
:00440C77 6A00                    push 00000000
:00440C79 E8B507FFFF              call 00431433
:00440C7E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440C48(U)
|
:00440C81 837DF800                cmp dword ptr [ebp-08], 00000000
:00440C85 7437                    je 00440CBE
:00440C87 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440C8A 6BC924                  imul ecx, 00000024
:00440C8D 81C1B83B4B00            add ecx, 004B3BB8
:00440C93 E8485DFFFF              call 004369E0
:00440C98 6BC050                  imul eax, 00000050
:00440C9B 05787F4900              add eax, 00497F78
:00440CA0 8945E4                  mov dword ptr [ebp-1C], eax
:00440CA3 6A01                    push 00000001
:00440CA5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00440CA8 E833D2FEFF              call 0042DEE0
:00440CAD 25FF000000              and eax, 000000FF
:00440CB2 83C00A                  add eax, 0000000A
:00440CB5 50                      push eax
:00440CB6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00440CB9 E8EC17FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440C85(C)
|
:00440CBE C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440AA8(U), :00440ADC(C)
|
:00440CC8 8BE5                    mov esp, ebp
:00440CCA 5D                      pop ebp
:00440CCB C3                      ret



* Referenced by a CALL at Address:
|:0043B27A   
|
:00440CCC 55                      push ebp
:00440CCD 8BEC                    mov ebp, esp
:00440CCF 83EC18                  sub esp, 00000018
:00440CD2 C645F8FF                mov [ebp-08], FF
:00440CD6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440CD9 6BC924                  imul ecx, 00000024
:00440CDC 81C1B83B4B00            add ecx, 004B3BB8
:00440CE2 E8994AFCFF              call 00405780
:00440CE7 25FF000000              and eax, 000000FF
:00440CEC 83F807                  cmp eax, 00000007
:00440CEF 7417                    je 00440D08
:00440CF1 33C0                    xor eax, eax
:00440CF3 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:00440CF8 83E004                  and eax, 00000004
:00440CFB 85C0                    test eax, eax
:00440CFD 7509                    jne 00440D08
:00440CFF C745E800000000          mov [ebp-18], 00000000
:00440D06 EB07                    jmp 00440D0F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440CEF(C), :00440CFD(C)
|
:00440D08 C745E801000000          mov [ebp-18], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440D06(U)
|
:00440D0F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00440D12 894DF0                  mov dword ptr [ebp-10], ecx
:00440D15 68FF000000              push 000000FF
:00440D1A 8B55F0                  mov edx, dword ptr [ebp-10]
:00440D1D 52                      push edx
:00440D1E 8B450C                  mov eax, dword ptr [ebp+0C]
:00440D21 50                      push eax
:00440D22 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440D25 51                      push ecx
:00440D26 E87A66FFFF              call 004373A5
:00440D2B 83C410                  add esp, 00000010
:00440D2E 85C0                    test eax, eax
:00440D30 7505                    jne 00440D37
:00440D32 E94D010000              jmp 00440E84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440D30(C)
|
:00440D37 6A18                    push 00000018
:00440D39 6A27                    push 00000027
:00440D3B 6A00                    push 00000000
:00440D3D 6A00                    push 00000000
:00440D3F B958494B00              mov ecx, 004B4958
:00440D44 E8FFBB0000              call 0044C948
:00440D49 837DF000                cmp dword ptr [ebp-10], 00000000
:00440D4D 7421                    je 00440D70
:00440D4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440D52 6BC931                  imul ecx, 00000031
:00440D55 81C1001D4B00            add ecx, 004B1D00
:00440D5B E89049FCFF              call 004056F0
:00440D60 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00440D61 686CE84700              push 0047E86C
:00440D66 6A00                    push 00000000
:00440D68 E8C606FFFF              call 00431433
:00440D6D 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440D4D(C)
|
:00440D70 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440D73 6BC924                  imul ecx, 00000024
:00440D76 81C1B83B4B00            add ecx, 004B3BB8
:00440D7C E8BF0EFFFF              call 00431C40
:00440D81 668B10                  mov dx, word ptr [eax]
:00440D84 668955FC                mov word ptr [ebp-04], dx
:00440D88 8A45FD                  mov al, byte ptr [ebp-03]
:00440D8B 50                      push eax
:00440D8C 8A4DFC                  mov cl, byte ptr [ebp-04]
:00440D8F 51                      push ecx
:00440D90 B958494B00              mov ecx, 004B4958
:00440D95 E853CD0000              call 0044DAED
:00440D9A 6A01                    push 00000001
:00440D9C 8A5510                  mov dl, byte ptr [ebp+10]
:00440D9F 52                      push edx
:00440DA0 8A4508                  mov al, byte ptr [ebp+08]
:00440DA3 50                      push eax
:00440DA4 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00440DA7 51                      push ecx
:00440DA8 8A550C                  mov dl, byte ptr [ebp+0C]
:00440DAB 52                      push edx
:00440DAC B958494B00              mov ecx, 004B4958
:00440DB1 E8DAD90000              call 0044E790
:00440DB6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440DB9 6BC924                  imul ecx, 00000024
:00440DBC 81C1B83B4B00            add ecx, 004B3BB8
:00440DC2 E8EF1FFFFF              call 00432DB6
:00440DC7 83C01E                  add eax, 0000001E
:00440DCA 8945F4                  mov dword ptr [ebp-0C], eax
:00440DCD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440DD0 6BC924                  imul ecx, 00000024
:00440DD3 81C1B83B4B00            add ecx, 004B3BB8
:00440DD9 E8B25DFFFF              call 00436B90
:00440DDE C1E803                  shr eax, 03
:00440DE1 50                      push eax
:00440DE2 E8C9750300              call 004783B0
:00440DE7 83C404                  add esp, 00000004
:00440DEA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00440DED 03C8                    add ecx, eax
:00440DEF 894DF4                  mov dword ptr [ebp-0C], ecx
:00440DF2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440DF5 6BC924                  imul ecx, 00000024
:00440DF8 81C1B83B4B00            add ecx, 004B3BB8
:00440DFE E83D0EFFFF              call 00431C40
:00440E03 50                      push eax
:00440E04 E84FEA0000              call 0044F858
:00440E09 83C404                  add esp, 00000004
:00440E0C 25FF000000              and eax, 000000FF
:00440E11 83F810                  cmp eax, 00000010
:00440E14 7509                    jne 00440E1F
:00440E16 8B55F4                  mov edx, dword ptr [ebp-0C]
:00440E19 83C20A                  add edx, 0000000A
:00440E1C 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440E14(C)
|
:00440E1F 837DF000                cmp dword ptr [ebp-10], 00000000
:00440E23 7418                    je 00440E3D
:00440E25 B978294B00              mov ecx, 004B2978
:00440E2A E8B15BFFFF              call 004369E0
:00440E2F 0345F4                  add eax, dword ptr [ebp-0C]
:00440E32 50                      push eax
:00440E33 B978294B00              mov ecx, 004B2978
:00440E38 E88348FCFF              call 004056C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440E23(C)
|
:00440E3D 837DF000                cmp dword ptr [ebp-10], 00000000
:00440E41 7437                    je 00440E7A
:00440E43 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440E46 6BC924                  imul ecx, 00000024
:00440E49 81C1B83B4B00            add ecx, 004B3BB8
:00440E4F E88C5BFFFF              call 004369E0
:00440E54 6BC050                  imul eax, 00000050
:00440E57 05787F4900              add eax, 00497F78
:00440E5C 8945EC                  mov dword ptr [ebp-14], eax
:00440E5F 6A01                    push 00000001
:00440E61 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00440E64 E877D0FEFF              call 0042DEE0
:00440E69 25FF000000              and eax, 000000FF
:00440E6E 83C001                  add eax, 00000001
:00440E71 50                      push eax
:00440E72 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00440E75 E83016FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440E41(C)
|
:00440E7A C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440D32(U)
|
:00440E84 8BE5                    mov esp, ebp
:00440E86 5D                      pop ebp
:00440E87 C3                      ret



* Referenced by a CALL at Address:
|:0043B299   
|
:00440E88 55                      push ebp
:00440E89 8BEC                    mov ebp, esp
:00440E8B 83EC18                  sub esp, 00000018
:00440E8E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440E91 6BC924                  imul ecx, 00000024
:00440E94 81C1B83B4B00            add ecx, 004B3BB8
:00440E9A E8E148FCFF              call 00405780
:00440E9F 25FF000000              and eax, 000000FF
:00440EA4 83F807                  cmp eax, 00000007
:00440EA7 7417                    je 00440EC0
:00440EA9 33C0                    xor eax, eax
:00440EAB A0BC4F4B00              mov al, byte ptr [004B4FBC]
:00440EB0 83E004                  and eax, 00000004
:00440EB3 85C0                    test eax, eax
:00440EB5 7509                    jne 00440EC0
:00440EB7 C745E800000000          mov [ebp-18], 00000000
:00440EBE EB07                    jmp 00440EC7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440EA7(C), :00440EB5(C)
|
:00440EC0 C745E801000000          mov [ebp-18], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440EBE(U)
|
:00440EC7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00440ECA 894DF8                  mov dword ptr [ebp-08], ecx
:00440ECD 68FF000000              push 000000FF
:00440ED2 8B55F8                  mov edx, dword ptr [ebp-08]
:00440ED5 52                      push edx
:00440ED6 8B450C                  mov eax, dword ptr [ebp+0C]
:00440ED9 50                      push eax
:00440EDA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440EDD 51                      push ecx
:00440EDE E8C264FFFF              call 004373A5
:00440EE3 83C410                  add esp, 00000010
:00440EE6 85C0                    test eax, eax
:00440EE8 7505                    jne 00440EEF
:00440EEA E9B8010000              jmp 004410A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440EE8(C)
|
:00440EEF 6A18                    push 00000018
:00440EF1 6A27                    push 00000027
:00440EF3 6A00                    push 00000000
:00440EF5 6A00                    push 00000000
:00440EF7 B958494B00              mov ecx, 004B4958
:00440EFC E847BA0000              call 0044C948
:00440F01 837DF800                cmp dword ptr [ebp-08], 00000000
:00440F05 7421                    je 00440F28
:00440F07 8B4D08                  mov ecx, dword ptr [ebp+08]
:00440F0A 6BC931                  imul ecx, 00000031
:00440F0D 81C1001D4B00            add ecx, 004B1D00
:00440F13 E8D847FCFF              call 004056F0
:00440F18 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00440F19 6870E84700              push 0047E870
:00440F1E 6A00                    push 00000000
:00440F20 E80E05FFFF              call 00431433
:00440F25 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440F05(C)
|
:00440F28 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440F2B 6BC924                  imul ecx, 00000024
:00440F2E 81C1B83B4B00            add ecx, 004B3BB8
:00440F34 E8070DFFFF              call 00431C40
:00440F39 668B10                  mov dx, word ptr [eax]
:00440F3C 668955FC                mov word ptr [ebp-04], dx
:00440F40 8A45FD                  mov al, byte ptr [ebp-03]
:00440F43 50                      push eax
:00440F44 8A4DFC                  mov cl, byte ptr [ebp-04]
:00440F47 51                      push ecx
:00440F48 B958494B00              mov ecx, 004B4958
:00440F4D E89BCB0000              call 0044DAED
:00440F52 6A01                    push 00000001
:00440F54 8A5510                  mov dl, byte ptr [ebp+10]
:00440F57 52                      push edx
:00440F58 8A4508                  mov al, byte ptr [ebp+08]
:00440F5B 50                      push eax
:00440F5C 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00440F5F 51                      push ecx
:00440F60 8A550C                  mov dl, byte ptr [ebp+0C]
:00440F63 52                      push edx
:00440F64 B958494B00              mov ecx, 004B4958
:00440F69 E822D80000              call 0044E790
:00440F6E 837DF800                cmp dword ptr [ebp-08], 00000000
:00440F72 7539                    jne 00440FAD
:00440F74 6A01                    push 00000001
:00440F76 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440F79 6BC924                  imul ecx, 00000024
:00440F7C 81C1B83B4B00            add ecx, 004B3BB8
:00440F82 E8195EFFFF              call 00436DA0
:00440F87 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440F8A 6BC924                  imul ecx, 00000024
:00440F8D 81C1B83B4B00            add ecx, 004B3BB8
:00440F93 E84D160100              call 004525E5
:00440F98 6A00                    push 00000000
:00440F9A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440F9D 6BC924                  imul ecx, 00000024
:00440FA0 81C1B83B4B00            add ecx, 004B3BB8
:00440FA6 E8F55DFFFF              call 00436DA0
:00440FAB EB1D                    jmp 00440FCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00440F72(C)
|
:00440FAD 8B450C                  mov eax, dword ptr [ebp+0C]
:00440FB0 6BC024                  imul eax, 00000024
:00440FB3 05B83B4B00              add eax, 004B3BB8
:00440FB8 50                      push eax
:00440FB9 E8ED000000              call 004410AB
:00440FBE 83C404                  add esp, 00000004
:00440FC1 85C0                    test eax, eax
:00440FC3 7505                    jne 00440FCA
:00440FC5 E9DD000000              jmp 004410A7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440FAB(U), :00440FC3(C)
|
:00440FCA 837D083F                cmp dword ptr [ebp+08], 0000003F
:00440FCE 0F858C000000            jne 00441060
:00440FD4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00440FD7 6BC924                  imul ecx, 00000024
:00440FDA 81C1B83B4B00            add ecx, 004B3BB8
:00440FE0 E8FB59FFFF              call 004369E0
:00440FE5 8BC8                    mov ecx, eax
:00440FE7 6BC950                  imul ecx, 00000050
:00440FEA 81C1787F4900            add ecx, 00497F78
:00440FF0 E8F50DFCFF              call 00401DEA
:00440FF5 6BC003                  imul eax, 00000003
:00440FF8 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00440FFA B90A000000              mov ecx, 0000000A
:00440FFF F7F1                    div ecx
:00441001 8945F0                  mov dword ptr [ebp-10], eax
:00441004 8B55F0                  mov edx, dword ptr [ebp-10]
:00441007 52                      push edx
:00441008 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044100B 6BC924                  imul ecx, 00000024
:0044100E 81C1B83B4B00            add ecx, 004B3BB8
:00441014 E8C722FCFF              call 004032E0
:00441019 50                      push eax
:0044101A E801730300              call 00478320
:0044101F 83C408                  add esp, 00000008
:00441022 8945F4                  mov dword ptr [ebp-0C], eax
:00441025 8B45F4                  mov eax, dword ptr [ebp-0C]
:00441028 50                      push eax
:00441029 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044102C 6BC924                  imul ecx, 00000024
:0044102F 81C1B83B4B00            add ecx, 004B3BB8
:00441035 E8DB21FFFF              call 00433215
:0044103A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044103D 6BC924                  imul ecx, 00000024
:00441040 81C1B83B4B00            add ecx, 004B3BB8
:00441046 E83659FFFF              call 00436981
:0044104B 85C0                    test eax, eax
:0044104D 7411                    je 00441060
:0044104F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00441052 6BC924                  imul ecx, 00000024
:00441055 81C1B83B4B00            add ecx, 004B3BB8
:0044105B E8E837FFFF              call 00434848

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440FCE(C), :0044104D(C)
|
:00441060 837DF800                cmp dword ptr [ebp-08], 00000000
:00441064 7437                    je 0044109D
:00441066 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00441069 6BC924                  imul ecx, 00000024
:0044106C 81C1B83B4B00            add ecx, 004B3BB8
:00441072 E86959FFFF              call 004369E0
:00441077 6BC050                  imul eax, 00000050
:0044107A 05787F4900              add eax, 00497F78
:0044107F 8945EC                  mov dword ptr [ebp-14], eax
:00441082 6A01                    push 00000001
:00441084 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00441087 E854CEFEFF              call 0042DEE0
:0044108C 25FF000000              and eax, 000000FF
:00441091 83C001                  add eax, 00000001
:00441094 50                      push eax
:00441095 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00441098 E80D14FCFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441064(C)
|
:0044109D C705D0484B0001000000    mov dword ptr [004B48D0], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00440EEA(U), :00440FC5(U)
|
:004410A7 8BE5                    mov esp, ebp
:004410A9 5D                      pop ebp
:004410AA C3                      ret



* Referenced by a CALL at Address:
|:00440FB9   
|
:004410AB 55                      push ebp
:004410AC 8BEC                    mov ebp, esp
:004410AE 83EC10                  sub esp, 00000010
:004410B1 8D4DF8                  lea ecx, dword ptr [ebp-08]
:004410B4 E83746FCFF              call 004056F0
:004410B9 C745F400000000          mov [ebp-0C], 00000000
:004410C0 C645FCFF                mov [ebp-04], FF
:004410C4 6A01                    push 00000001
:004410C6 68FF000000              push 000000FF
:004410CB 68FF000000              push 000000FF
:004410D0 6A00                    push 00000000
:004410D2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004410D5 E8F81EFFFF              call 00432FD2
:004410DA 50                      push eax
:004410DB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004410DE E85D0BFFFF              call 00431C40
:004410E3 50                      push eax
:004410E4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004410E7 E8CB0C0100              call 00451DB7
:004410EC 6A01                    push 00000001
:004410EE B958494B00              mov ecx, 004B4958
:004410F3 E8C99D0000              call 0044AEC1
:004410F8 B958494B00              mov ecx, 004B4958
:004410FD E80FB80000              call 0044C911

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441170(U), :00441191(U)
|
:00441102 8B45FC                  mov eax, dword ptr [ebp-04]
:00441105 25FF000000              and eax, 000000FF
:0044110A 3DFF000000              cmp eax, 000000FF
:0044110F 0F8581000000            jne 00441196
:00441115 B958494B00              mov ecx, 004B4958
:0044111A E87DBD0000              call 0044CE9C
:0044111F 50                      push eax
:00441120 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00441123 E87859FFFF              call 00436AA0
:00441128 B958494B00              mov ecx, 004B4958
:0044112D E872C00000              call 0044D1A4
:00441132 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441135 81E1FF000000            and ecx, 000000FF
:0044113B 81F9FF000000            cmp ecx, 000000FF
:00441141 7506                    jne 00441149
:00441143 C645FC00                mov [ebp-04], 00
:00441147 EB4D                    jmp 00441196

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441141(C)
|
:00441149 8D55F8                  lea edx, dword ptr [ebp-08]
:0044114C 52                      push edx
:0044114D E88AE60000              call 0044F7DC
:00441152 83C404                  add esp, 00000004
:00441155 25FF000000              and eax, 000000FF
:0044115A 3DFF000000              cmp eax, 000000FF
:0044115F 7411                    je 00441172

* Possible StringData Ref from Data Obj ->"Oʽd"
                                  |
:00441161 6874E84700              push 0047E874
:00441166 6A00                    push 00000000
:00441168 E8C602FFFF              call 00431433
:0044116D 83C408                  add esp, 00000008
:00441170 EB90                    jmp 00441102

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044115F(C)
|
:00441172 668B45F8                mov ax, word ptr [ebp-08]
:00441176 50                      push eax
:00441177 E87D000000              call 004411F9
:0044117C 83C404                  add esp, 00000004
:0044117F 33C9                    xor ecx, ecx
:00441181 8A08                    mov cl, byte ptr [eax]
:00441183 81F9FF000000            cmp ecx, 000000FF
:00441189 7406                    je 00441191
:0044118B C645FC01                mov [ebp-04], 01
:0044118F EB05                    jmp 00441196

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441189(C)
|
:00441191 E96CFFFFFF              jmp 00441102

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044110F(C), :00441147(U), :0044118F(U)
|
:00441196 8A55FC                  mov dl, byte ptr [ebp-04]
:00441199 8855F0                  mov byte ptr [ebp-10], dl
:0044119C 807DF001                cmp byte ptr [ebp-10], 01
:004411A0 7402                    je 004411A4
:004411A2 EB38                    jmp 004411DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004411A0(C)
|
:004411A4 8B4508                  mov eax, dword ptr [ebp+08]
:004411A7 50                      push eax
:004411A8 668B4DF8                mov cx, word ptr [ebp-08]
:004411AC 51                      push ecx
:004411AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004411B0 E88B0AFFFF              call 00431C40
:004411B5 668B10                  mov dx, word ptr [eax]
:004411B8 52                      push edx
:004411B9 E874000000              call 00441232
:004411BE 83C40C                  add esp, 0000000C
:004411C1 B9784E4B00              mov ecx, 004B4E78
:004411C6 E823B00100              call 0045C1EE
:004411CB B958494B00              mov ecx, 004B4958
:004411D0 E8CFBF0000              call 0044D1A4
:004411D5 C745F401000000          mov [ebp-0C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004411A2(U)
|
:004411DC 6A00                    push 00000000
:004411DE B958494B00              mov ecx, 004B4958
:004411E3 E8D99C0000              call 0044AEC1
:004411E8 B958494B00              mov ecx, 004B4958
:004411ED E81FB70000              call 0044C911
:004411F2 8B45F4                  mov eax, dword ptr [ebp-0C]
:004411F5 8BE5                    mov esp, ebp
:004411F7 5D                      pop ebp
:004411F8 C3                      ret



* Referenced by a CALL at Address:
|:00441177   
|
:004411F9 55                      push ebp
:004411FA 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004411FC 6A04                    push 00000004
:004411FE 6A00                    push 00000000
:00441200 6800960000              push 00009600
:00441205 B9881C4B00              mov ecx, 004B1C88
:0044120A E8817D0300              call 00478F90
:0044120F 8B4D09                  mov ecx, dword ptr [ebp+09]
:00441212 81E1FF000000            and ecx, 000000FF
:00441218 33D2                    xor edx, edx
:0044121A 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:00441220 0FAFCA                  imul ecx, edx
:00441223 8B5508                  mov edx, dword ptr [ebp+08]
:00441226 81E2FF000000            and edx, 000000FF
:0044122C 03CA                    add ecx, edx
:0044122E 03C1                    add eax, ecx
:00441230 5D                      pop ebp
:00441231 C3                      ret



* Referenced by a CALL at Address:
|:004411B9   
|
:00441232 55                      push ebp
:00441233 8BEC                    mov ebp, esp
:00441235 83EC10                  sub esp, 00000010
:00441238 6A00                    push 00000000
:0044123A 68FF000000              push 000000FF
:0044123F 8D450C                  lea eax, dword ptr [ebp+0C]
:00441242 50                      push eax
:00441243 8D4D08                  lea ecx, dword ptr [ebp+08]
:00441246 51                      push ecx
:00441247 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044124A E88D060100              call 004518DC
:0044124F 8945F4                  mov dword ptr [ebp-0C], eax
:00441252 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00441255 E89644FCFF              call 004056F0
:0044125A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044125D E88234FFFF              call 004346E4
:00441262 C745F800000000          mov [ebp-08], 00000000
:00441269 EB09                    jmp 00441274

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004412C7(U), :004412E1(U)
|
:0044126B 8B55F8                  mov edx, dword ptr [ebp-08]
:0044126E 83C201                  add edx, 00000001
:00441271 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441269(U)
|
:00441274 8D450C                  lea eax, dword ptr [ebp+0C]
:00441277 50                      push eax
:00441278 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044127B E8C009FFFF              call 00431C40
:00441280 50                      push eax
:00441281 E81A5DFFFF              call 00436FA0
:00441286 83C408                  add esp, 00000008
:00441289 85C0                    test eax, eax
:0044128B 7556                    jne 004412E3
:0044128D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00441290 034DF8                  add ecx, dword ptr [ebp-08]
:00441293 8A11                    mov dl, byte ptr [ecx]
:00441295 8855FC                  mov byte ptr [ebp-04], dl
:00441298 8A45FC                  mov al, byte ptr [ebp-04]
:0044129B 50                      push eax
:0044129C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044129F E89C09FFFF              call 00431C40
:004412A4 50                      push eax
:004412A5 E847E60000              call 0044F8F1
:004412AA 83C408                  add esp, 00000008
:004412AD 50                      push eax
:004412AE 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004412B1 E8EA57FFFF              call 00436AA0
:004412B6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004412B9 81E1FF000000            and ecx, 000000FF
:004412BF 81F9FF000000            cmp ecx, 000000FF
:004412C5 7502                    jne 004412C9
:004412C7 EBA2                    jmp 0044126B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004412C5(C)
|
:004412C9 8A55FC                  mov dl, byte ptr [ebp-04]
:004412CC 52                      push edx
:004412CD 8B4D10                  mov ecx, dword ptr [ebp+10]
:004412D0 E83C46FFFF              call 00435911
:004412D5 8D45F0                  lea eax, dword ptr [ebp-10]
:004412D8 50                      push eax
:004412D9 8B4D10                  mov ecx, dword ptr [ebp+10]
:004412DC E81F0D0000              call 00442000
:004412E1 EB88                    jmp 0044126B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044128B(C)
|
:004412E3 8B4D10                  mov ecx, dword ptr [ebp+10]
:004412E6 E8D033FFFF              call 004346BB
:004412EB 8BE5                    mov esp, ebp
:004412ED 5D                      pop ebp
:004412EE C3                      ret


:004412EF 55                      push ebp
:004412F0 8BEC                    mov ebp, esp
:004412F2 83EC14                  sub esp, 00000014
:004412F5 56                      push esi
:004412F6 C745F400000000          mov [ebp-0C], 00000000
:004412FD 8B450C                  mov eax, dword ptr [ebp+0C]
:00441300 25FF000000              and eax, 000000FF
:00441305 F7D8                    neg eax
:00441307 1BC0                    sbb eax, eax
:00441309 83E019                  and eax, 00000019
:0044130C 83C032                  add eax, 00000032
:0044130F 8945F0                  mov dword ptr [ebp-10], eax
:00441312 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00441315 81E1FF000000            and ecx, 000000FF
:0044131B F7D9                    neg ecx
:0044131D 1BC9                    sbb ecx, ecx
:0044131F 83E119                  and ecx, 00000019
:00441322 83C164                  add ecx, 00000064
:00441325 894DF8                  mov dword ptr [ebp-08], ecx
:00441328 8B550C                  mov edx, dword ptr [ebp+0C]
:0044132B 81E2FF000000            and edx, 000000FF
:00441331 F7DA                    neg edx
:00441333 1BD2                    sbb edx, edx
:00441335 83E232                  and edx, 00000032
:00441338 81C2C8000000            add edx, 000000C8
:0044133E 8955FC                  mov dword ptr [ebp-04], edx
:00441341 8A4510                  mov al, byte ptr [ebp+10]
:00441344 8845EC                  mov byte ptr [ebp-14], al
:00441347 807DEC00                cmp byte ptr [ebp-14], 00
:0044134B 740E                    je 0044135B
:0044134D 807DEC01                cmp byte ptr [ebp-14], 01
:00441351 7426                    je 00441379
:00441353 807DEC02                cmp byte ptr [ebp-14], 02
:00441357 743F                    je 00441398
:00441359 EB5A                    jmp 004413B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044134B(C)
|
:0044135B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044135E D1E9                    shr ecx, 1
:00441360 8B4508                  mov eax, dword ptr [ebp+08]
:00441363 25FF000000              and eax, 000000FF
:00441368 D1E0                    shl eax, 1
:0044136A 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044136B BE05000000              mov esi, 00000005
:00441370 F7FE                    idiv esi
:00441372 03C8                    add ecx, eax
:00441374 894DF4                  mov dword ptr [ebp-0C], ecx
:00441377 EB3C                    jmp 004413B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441351(C)
|
:00441379 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044137C D1E9                    shr ecx, 1
:0044137E 8B4508                  mov eax, dword ptr [ebp+08]
:00441381 25FF000000              and eax, 000000FF
:00441386 6BC003                  imul eax, 00000003
:00441389 99                      cdq

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044138A BE07000000              mov esi, 00000007
:0044138F F7FE                    idiv esi
:00441391 03C8                    add ecx, eax
:00441393 894DF4                  mov dword ptr [ebp-0C], ecx
:00441396 EB1D                    jmp 004413B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441357(C)
|
:00441398 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044139B D1E9                    shr ecx, 1
:0044139D 8B4508                  mov eax, dword ptr [ebp+08]
:004413A0 25FF000000              and eax, 000000FF
:004413A5 C1E002                  shl eax, 02
:004413A8 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004413A9 BE05000000              mov esi, 00000005
:004413AE F7FE                    idiv esi
:004413B0 03C8                    add ecx, eax
:004413B2 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441359(U), :00441377(U), :00441396(U)
|
:004413B5 8B45F4                  mov eax, dword ptr [ebp-0C]
:004413B8 5E                      pop esi
:004413B9 8BE5                    mov esp, ebp
:004413BB 5D                      pop ebp
:004413BC C3                      ret



* Referenced by a CALL at Address:
|:00441912   
|
:004413BD 55                      push ebp
:004413BE 8BEC                    mov ebp, esp
:004413C0 83EC10                  sub esp, 00000010
:004413C3 8B4508                  mov eax, dword ptr [ebp+08]
:004413C6 50                      push eax
:004413C7 E8BC36FCFF              call 00404A88
:004413CC 83C404                  add esp, 00000004
:004413CF 50                      push eax
:004413D0 E8FA0BFFFF              call 00431FCF
:004413D5 83C404                  add esp, 00000004
:004413D8 8845F0                  mov byte ptr [ebp-10], al
:004413DB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004413DE 81E1FF000000            and ecx, 000000FF
:004413E4 81F9FF000000            cmp ecx, 000000FF
:004413EA 7508                    jne 004413F4
:004413EC 8B4510                  mov eax, dword ptr [ebp+10]
:004413EF E9F4000000              jmp 004414E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004413EA(C)
|
:004413F4 8B55F0                  mov edx, dword ptr [ebp-10]
:004413F7 81E2FF000000            and edx, 000000FF
:004413FD 6BD224                  imul edx, 00000024
:00441400 81C2B83B4B00            add edx, 004B3BB8
:00441406 8955FC                  mov dword ptr [ebp-04], edx
:00441409 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044140C E86F5BFFFF              call 00436F80
:00441411 8845F8                  mov byte ptr [ebp-08], al
:00441414 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441417 E8B31CFFFF              call 004330CF
:0044141C 8845F4                  mov byte ptr [ebp-0C], al

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044141F 6A08                    push 00000008
:00441421 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441424 E84756FFFF              call 00436A70
:00441429 85C0                    test eax, eax
:0044142B 7408                    je 00441435
:0044142D 8B4510                  mov eax, dword ptr [ebp+10]
:00441430 D1E8                    shr eax, 1
:00441432 894510                  mov dword ptr [ebp+10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044142B(C)
|
:00441435 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00441438 81E1FF000000            and ecx, 000000FF
:0044143E 83F90A                  cmp ecx, 0000000A
:00441441 7D29                    jge 0044146C
:00441443 8B55F4                  mov edx, dword ptr [ebp-0C]
:00441446 81E2FF000000            and edx, 000000FF

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044144C B80A000000              mov eax, 0000000A
:00441451 2BC2                    sub eax, edx
:00441453 8B4D10                  mov ecx, dword ptr [ebp+10]
:00441456 0FAFC1                  imul eax, ecx
:00441459 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044145B B90A000000              mov ecx, 0000000A
:00441460 F7F1                    div ecx
:00441462 8B5510                  mov edx, dword ptr [ebp+10]
:00441465 03D0                    add edx, eax
:00441467 895510                  mov dword ptr [ebp+10], edx
:0044146A EB79                    jmp 004414E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441441(C)
|
:0044146C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044146F 25FF000000              and eax, 000000FF
:00441474 83F80A                  cmp eax, 0000000A
:00441477 7E25                    jle 0044149E
:00441479 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044147C 81E1FF000000            and ecx, 000000FF
:00441482 83E90A                  sub ecx, 0000000A
:00441485 8B4510                  mov eax, dword ptr [ebp+10]
:00441488 0FAFC1                  imul eax, ecx
:0044148B 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044148D B90A000000              mov ecx, 0000000A
:00441492 F7F1                    div ecx
:00441494 8B5510                  mov edx, dword ptr [ebp+10]
:00441497 2BD0                    sub edx, eax
:00441499 895510                  mov dword ptr [ebp+10], edx
:0044149C EB47                    jmp 004414E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441477(C)
|
:0044149E 8B45F8                  mov eax, dword ptr [ebp-08]
:004414A1 25FF000000              and eax, 000000FF
:004414A6 83F814                  cmp eax, 00000014
:004414A9 7C0E                    jl 004414B9
:004414AB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004414AE 81E1FF000000            and ecx, 000000FF
:004414B4 83F915                  cmp ecx, 00000015
:004414B7 7E1B                    jle 004414D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004414A9(C)
|
:004414B9 8B55F8                  mov edx, dword ptr [ebp-08]
:004414BC 81E2FF000000            and edx, 000000FF
:004414C2 83FA1A                  cmp edx, 0000001A
:004414C5 7C1E                    jl 004414E5
:004414C7 8B45F8                  mov eax, dword ptr [ebp-08]
:004414CA 25FF000000              and eax, 000000FF
:004414CF 83F81B                  cmp eax, 0000001B
:004414D2 7F11                    jg 004414E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004414B7(C)
|
:004414D4 8B4510                  mov eax, dword ptr [ebp+10]
:004414D7 D1E0                    shl eax, 1
:004414D9 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004414DB B903000000              mov ecx, 00000003
:004414E0 F7F1                    div ecx
:004414E2 894510                  mov dword ptr [ebp+10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044146A(U), :0044149C(U), :004414C5(C), :004414D2(C)
|
:004414E5 8B4510                  mov eax, dword ptr [ebp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004413EF(U)
|
:004414E8 8BE5                    mov esp, ebp
:004414EA 5D                      pop ebp
:004414EB C3                      ret



* Referenced by a CALL at Addresses:
|:004437B1   , :00453EF5   , :004541F7   , :004542B1   
|
:004414EC 55                      push ebp
:004414ED 8BEC                    mov ebp, esp
:004414EF 83EC14                  sub esp, 00000014
:004414F2 56                      push esi
:004414F3 894DF8                  mov dword ptr [ebp-08], ecx
:004414F6 8B4514                  mov eax, dword ptr [ebp+14]
:004414F9 25FF000000              and eax, 000000FF
:004414FE 83F818                  cmp eax, 00000018
:00441501 7E24                    jle 00441527
:00441503 8B4D14                  mov ecx, dword ptr [ebp+14]
:00441506 81E1FF000000            and ecx, 000000FF
:0044150C 83F91A                  cmp ecx, 0000001A
:0044150F 0F8C54030000            jl 00441869
:00441515 8B5514                  mov edx, dword ptr [ebp+14]
:00441518 81E2FF000000            and edx, 000000FF
:0044151E 83FA1C                  cmp edx, 0000001C
:00441521 0F8F42030000            jg 00441869

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441501(C)
|
:00441527 6A00                    push 00000000
:00441529 6A00                    push 00000000
:0044152B 8B450C                  mov eax, dword ptr [ebp+0C]
:0044152E 50                      push eax
:0044152F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441532 E8961FFFFF              call 004334CD
:00441537 8945FC                  mov dword ptr [ebp-04], eax
:0044153A 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044153D 81E1FF000000            and ecx, 000000FF
:00441543 894DF4                  mov dword ptr [ebp-0C], ecx
:00441546 837DF41B                cmp dword ptr [ebp-0C], 0000001B
:0044154A 0F8714030000            ja 00441864
:00441550 8B45F4                  mov eax, dword ptr [ebp-0C]
:00441553 33D2                    xor edx, edx
:00441555 8A90B2184400            mov dl, byte ptr [eax+004418B2]
:0044155B FF249572184400          jmp dword ptr [4*edx+00441872]
:00441562 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441565 6BC903                  imul ecx, 00000003
:00441568 894DFC                  mov dword ptr [ebp-04], ecx
:0044156B E9F4020000              jmp 00441864
:00441570 8B55FC                  mov edx, dword ptr [ebp-04]
:00441573 C1E202                  shl edx, 02
:00441576 8955FC                  mov dword ptr [ebp-04], edx
:00441579 E9E6020000              jmp 00441864
:0044157E 8B45FC                  mov eax, dword ptr [ebp-04]
:00441581 D1E0                    shl eax, 1
:00441583 8945FC                  mov dword ptr [ebp-04], eax
:00441586 E9D9020000              jmp 00441864
:0044158B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044158E E8FD55FFFF              call 00436B90
:00441593 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00441595 68C8000000              push 000000C8
:0044159A E8116E0300              call 004783B0
:0044159F 83C404                  add esp, 00000004
:004415A2 3BF0                    cmp esi, eax
:004415A4 7614                    jbe 004415BA

* Possible Reference to String Resource ID=00006: ""
                                  |
:004415A6 6A06                    push 00000006
:004415A8 E8036E0300              call 004783B0
:004415AD 83C404                  add esp, 00000004
:004415B0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004415B3 8D540105                lea edx, dword ptr [ecx+eax+05]
:004415B7 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004415A4(C)
|
:004415BA 8B45FC                  mov eax, dword ptr [ebp-04]
:004415BD C1E002                  shl eax, 02
:004415C0 8945FC                  mov dword ptr [ebp-04], eax
:004415C3 E99C020000              jmp 00441864
:004415C8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004415CB E8101DFCFF              call 004032E0
:004415D0 3B45FC                  cmp eax, dword ptr [ebp-04]
:004415D3 730D                    jnb 004415E2
:004415D5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004415D8 E8031DFCFF              call 004032E0
:004415DD 8945F0                  mov dword ptr [ebp-10], eax
:004415E0 EB06                    jmp 004415E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004415D3(C)
|
:004415E2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004415E5 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004415E0(U)
|
:004415E8 8B55F0                  mov edx, dword ptr [ebp-10]
:004415EB 8955FC                  mov dword ptr [ebp-04], edx
:004415EE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004415F1 E8EA1CFCFF              call 004032E0
:004415F6 2B45FC                  sub eax, dword ptr [ebp-04]
:004415F9 83F80A                  cmp eax, 0000000A
:004415FC 730E                    jnb 0044160C
:004415FE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441601 E8DA1CFCFF              call 004032E0
:00441606 83E80A                  sub eax, 0000000A
:00441609 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004415FC(C)
|
:0044160C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044160F E8CC1CFCFF              call 004032E0
:00441614 83F80A                  cmp eax, 0000000A
:00441617 7707                    ja 00441620
:00441619 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441617(C)
|
:00441620 E93F020000              jmp 00441864
:00441625 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441628 E8B31CFCFF              call 004032E0
:0044162D 8945FC                  mov dword ptr [ebp-04], eax
:00441630 E92F020000              jmp 00441864
:00441635 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441638 E85355FFFF              call 00436B90
:0044163D 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0044163F 68C8000000              push 000000C8
:00441644 E8676D0300              call 004783B0
:00441649 83C404                  add esp, 00000004
:0044164C 3BF0                    cmp esi, eax
:0044164E 7614                    jbe 00441664

* Possible Reference to String Resource ID=00006: ""
                                  |
:00441650 6A06                    push 00000006
:00441652 E8596D0300              call 004783B0
:00441657 83C404                  add esp, 00000004
:0044165A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044165D 8D540105                lea edx, dword ptr [ecx+eax+05]
:00441661 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044164E(C)
|
:00441664 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441667 E8D405FFFF              call 00431C40
:0044166C 50                      push eax
:0044166D E8E6E10000              call 0044F858
:00441672 83C404                  add esp, 00000004
:00441675 25FF000000              and eax, 000000FF
:0044167A 83F805                  cmp eax, 00000005
:0044167D 7509                    jne 00441688
:0044167F 8B45FC                  mov eax, dword ptr [ebp-04]
:00441682 C1E002                  shl eax, 02
:00441685 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044167D(C)
|
:00441688 E9D7010000              jmp 00441864
:0044168D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441690 E8FB54FFFF              call 00436B90
:00441695 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00441697 68C8000000              push 000000C8
:0044169C E80F6D0300              call 004783B0
:004416A1 83C404                  add esp, 00000004
:004416A4 3BF0                    cmp esi, eax
:004416A6 7614                    jbe 004416BC

* Possible Reference to String Resource ID=00006: ""
                                  |
:004416A8 6A06                    push 00000006
:004416AA E8016D0300              call 004783B0
:004416AF 83C404                  add esp, 00000004
:004416B2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004416B5 8D540105                lea edx, dword ptr [ecx+eax+05]
:004416B9 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004416A6(C)
|
:004416BC 8B45FC                  mov eax, dword ptr [ebp-04]
:004416BF D1E0                    shl eax, 1
:004416C1 8945FC                  mov dword ptr [ebp-04], eax
:004416C4 E99B010000              jmp 00441864
:004416C9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004416CC E8FA17FFFF              call 00432ECB
:004416D1 8BF0                    mov esi, eax
:004416D3 D1EE                    shr esi, 1
:004416D5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004416D8 E8EE17FFFF              call 00432ECB
:004416DD 3BF0                    cmp esi, eax
:004416DF 7609                    jbe 004416EA
:004416E1 C745FC64000000          mov [ebp-04], 00000064
:004416E8 EB43                    jmp 0044172D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004416DF(C)
|
:004416EA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004416ED E8D917FFFF              call 00432ECB
:004416F2 8BF0                    mov esi, eax
:004416F4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004416F7 E8CF17FFFF              call 00432ECB
:004416FC D1E8                    shr eax, 1
:004416FE 2BF0                    sub esi, eax
:00441700 83FE64                  cmp esi, 00000064
:00441703 761B                    jbe 00441720
:00441705 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441708 E8BE17FFFF              call 00432ECB
:0044170D 8BF0                    mov esi, eax
:0044170F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441712 E8B417FFFF              call 00432ECB
:00441717 D1E8                    shr eax, 1
:00441719 2BF0                    sub esi, eax
:0044171B 8975EC                  mov dword ptr [ebp-14], esi
:0044171E EB07                    jmp 00441727

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441703(C)
|
:00441720 C745EC64000000          mov [ebp-14], 00000064

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044171E(U)
|
:00441727 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044172A 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004416E8(U)
|
:0044172D E932010000              jmp 00441864
:00441732 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441735 E85654FFFF              call 00436B90
:0044173A 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0044173C 68C8000000              push 000000C8
:00441741 E86A6C0300              call 004783B0
:00441746 83C404                  add esp, 00000004
:00441749 3BF0                    cmp esi, eax
:0044174B 7614                    jbe 00441761

* Possible Reference to String Resource ID=00006: ""
                                  |
:0044174D 6A06                    push 00000006
:0044174F E85C6C0300              call 004783B0
:00441754 83C404                  add esp, 00000004
:00441757 8B55FC                  mov edx, dword ptr [ebp-04]
:0044175A 8D440205                lea eax, dword ptr [edx+eax+05]
:0044175E 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044174B(C)
|
:00441761 E9FE000000              jmp 00441864
:00441766 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441769 E82254FFFF              call 00436B90
:0044176E 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00441770 68C8000000              push 000000C8
:00441775 E8366C0300              call 004783B0
:0044177A 83C404                  add esp, 00000004
:0044177D 3BF0                    cmp esi, eax
:0044177F 7614                    jbe 00441795

* Possible Reference to String Resource ID=00006: ""
                                  |
:00441781 6A06                    push 00000006
:00441783 E8286C0300              call 004783B0
:00441788 83C404                  add esp, 00000004
:0044178B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044178E 8D540105                lea edx, dword ptr [ecx+eax+05]
:00441792 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044177F(C)
|
:00441795 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441798 E82E17FFFF              call 00432ECB
:0044179D 50                      push eax
:0044179E E80D6C0300              call 004783B0
:004417A3 83C404                  add esp, 00000004
:004417A6 8BF0                    mov esi, eax
:004417A8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004417AB E81B17FFFF              call 00432ECB
:004417B0 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004417B2 B903000000              mov ecx, 00000003
:004417B7 F7F1                    div ecx
:004417B9 3BF0                    cmp esi, eax
:004417BB 7307                    jnb 004417C4
:004417BD C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004417BB(C)
|
:004417C4 E99B000000              jmp 00441864
:004417C9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004417CC E8BF53FFFF              call 00436B90
:004417D1 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:004417D3 68C8000000              push 000000C8
:004417D8 E8D36B0300              call 004783B0
:004417DD 83C404                  add esp, 00000004
:004417E0 3BF0                    cmp esi, eax
:004417E2 7614                    jbe 004417F8

* Possible Reference to String Resource ID=00006: ""
                                  |
:004417E4 6A06                    push 00000006
:004417E6 E8C56B0300              call 004783B0
:004417EB 83C404                  add esp, 00000004
:004417EE 8B55FC                  mov edx, dword ptr [ebp-04]
:004417F1 8D440205                lea eax, dword ptr [edx+eax+05]
:004417F5 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004417E2(C)
|
:004417F8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004417FB E8CB16FFFF              call 00432ECB
:00441800 8BF0                    mov esi, eax
:00441802 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441805 E8C116FFFF              call 00432ECB
:0044180A 3BF0                    cmp esi, eax
:0044180C 7227                    jb 00441835
:0044180E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441811 E8B516FFFF              call 00432ECB
:00441816 8BF0                    mov esi, eax
:00441818 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044181B E8AB16FFFF              call 00432ECB
:00441820 2BF0                    sub esi, eax
:00441822 8BC6                    mov eax, esi
:00441824 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00441826 B905000000              mov ecx, 00000005
:0044182B F7F1                    div ecx
:0044182D 8B55FC                  mov edx, dword ptr [ebp-04]
:00441830 03D0                    add edx, eax
:00441832 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044180C(C)
|
:00441835 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00441838 E88E16FFFF              call 00432ECB
:0044183D 50                      push eax
:0044183E E86D6B0300              call 004783B0
:00441843 83C404                  add esp, 00000004
:00441846 8BF0                    mov esi, eax
:00441848 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044184B E87B16FFFF              call 00432ECB
:00441850 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00441852 B903000000              mov ecx, 00000003
:00441857 F7F1                    div ecx
:00441859 3BF0                    cmp esi, eax
:0044185B 7307                    jnb 00441864
:0044185D C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044154A(C), :0044156B(U), :00441579(U), :00441586(U), :004415C3(U)
|:00441620(U), :00441630(U), :00441688(U), :004416C4(U), :0044172D(U)
|:00441761(U), :004417C4(U), :0044185B(C)
|
:00441864 8B45FC                  mov eax, dword ptr [ebp-04]
:00441867 EB02                    jmp 0044186B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044150F(C), :00441521(C)
|
:00441869 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441867(U)
|
:0044186B 5E                      pop esi
:0044186C 8BE5                    mov esp, ebp
:0044186E 5D                      pop ebp
:0044186F C21000                  ret 0010



:00441872 70154400                DWORD 00441570
:00441876 62154400                DWORD 00441562
:0044187A C8154400                DWORD 004415C8
:0044187E 7E154400                DWORD 0044157E
:00441882 25164400                DWORD 00441625
:00441886 32174400                DWORD 00441732
:0044188A 35164400                DWORD 00441635
:0044188E 32174400                DWORD 00441732
:00441892 8D164400                DWORD 0044168D
:00441896 C9164400                DWORD 004416C9
:0044189A 32174400                DWORD 00441732
:0044189E 8B154400                DWORD 0044158B
:004418A2 66174400                DWORD 00441766
:004418A6 C9174400                DWORD 004417C9
:004418AA 32174400                DWORD 00441732
:004418AE 64184400                DWORD 00441864


:004418B2 0001                    add byte ptr [ecx], al
:004418B4 020F                    add cl, byte ptr [edi]
:004418B6 03040505050607          add eax, dword ptr [eax+07060505]
:004418BD 07                      pop es
:004418BE 07                      pop es
:004418BF 0809                    or byte ptr [ecx], cl
:004418C1 0A0A                    or cl, byte ptr [edx]
:004418C3 0B0C0C                  or ecx, dword ptr [esp+ecx]
:004418C6 0C0C                    or al, 0C
:004418C8 0C0D                    or al, 0D
:004418CA 0D                      BYTE 0dh
:004418CB 0F                      BYTE 0fh
:004418CC 0E                      BYTE 0eh
:004418CD 0E                      BYTE 0eh


* Referenced by a CALL at Address:
|:00443831   
|
:004418CE 55                      push ebp
:004418CF 8BEC                    mov ebp, esp
:004418D1 83EC10                  sub esp, 00000010
:004418D4 894DF0                  mov dword ptr [ebp-10], ecx
:004418D7 8B450C                  mov eax, dword ptr [ebp+0C]
:004418DA 25FF000000              and eax, 000000FF
:004418DF C1F804                  sar eax, 04
:004418E2 83E001                  and eax, 00000001
:004418E5 8845F4                  mov byte ptr [ebp-0C], al
:004418E8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004418EB 81E1FF000000            and ecx, 000000FF
:004418F1 83E10F                  and ecx, 0000000F
:004418F4 884DFC                  mov byte ptr [ebp-04], cl
:004418F7 8A55FC                  mov dl, byte ptr [ebp-04]
:004418FA 52                      push edx
:004418FB E826000000              call 00441926
:00441900 83C404                  add esp, 00000004
:00441903 8945F8                  mov dword ptr [ebp-08], eax
:00441906 8B45F8                  mov eax, dword ptr [ebp-08]
:00441909 50                      push eax
:0044190A 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044190D 51                      push ecx
:0044190E 8B5508                  mov edx, dword ptr [ebp+08]
:00441911 52                      push edx
:00441912 E8A6FAFFFF              call 004413BD
:00441917 83C40C                  add esp, 0000000C
:0044191A 8945F8                  mov dword ptr [ebp-08], eax
:0044191D 8B45F8                  mov eax, dword ptr [ebp-08]
:00441920 8BE5                    mov esp, ebp
:00441922 5D                      pop ebp
:00441923 C20800                  ret 0008



* Referenced by a CALL at Address:
|:004418FB   
|
:00441926 55                      push ebp
:00441927 8BEC                    mov ebp, esp
:00441929 83EC08                  sub esp, 00000008
:0044192C C745FC00000000          mov [ebp-04], 00000000
:00441933 8A4508                  mov al, byte ptr [ebp+08]
:00441936 8845F8                  mov byte ptr [ebp-08], al
:00441939 807DF800                cmp byte ptr [ebp-08], 00
:0044193D 740E                    je 0044194D
:0044193F 807DF801                cmp byte ptr [ebp-08], 01
:00441943 741A                    je 0044195F
:00441945 807DF802                cmp byte ptr [ebp-08], 02
:00441949 7426                    je 00441971
:0044194B EB36                    jmp 00441983

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044193D(C)
|
:0044194D 6A10                    push 00000010
:0044194F E85C6A0300              call 004783B0
:00441954 83C404                  add esp, 00000004
:00441957 83C032                  add eax, 00000032
:0044195A 8945FC                  mov dword ptr [ebp-04], eax
:0044195D EB24                    jmp 00441983

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441943(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:0044195F 6A1A                    push 0000001A
:00441961 E84A6A0300              call 004783B0
:00441966 83C404                  add esp, 00000004
:00441969 83C04B                  add eax, 0000004B
:0044196C 8945FC                  mov dword ptr [ebp-04], eax
:0044196F EB12                    jmp 00441983

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441949(C)
|
:00441971 6A33                    push 00000033
:00441973 E8386A0300              call 004783B0
:00441978 83C404                  add esp, 00000004
:0044197B 0596000000              add eax, 00000096
:00441980 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044194B(U), :0044195D(U), :0044196F(U)
|
:00441983 8B45FC                  mov eax, dword ptr [ebp-04]
:00441986 8BE5                    mov esp, ebp
:00441988 5D                      pop ebp
:00441989 C3                      ret



* Referenced by a CALL at Addresses:
|:0043F3F4   , :0043F58F   , :0043F653   , :0043F7E0   , :0043F9DB   
|:00441E4A   
|
:0044198A 55                      push ebp
:0044198B 8BEC                    mov ebp, esp
:0044198D 83EC20                  sub esp, 00000020
:00441990 56                      push esi
:00441991 894DE8                  mov dword ptr [ebp-18], ecx
:00441994 8B45E8                  mov eax, dword ptr [ebp-18]
:00441997 8B08                    mov ecx, dword ptr [eax]
:00441999 6BC950                  imul ecx, 00000050
:0044199C 81C1787F4900            add ecx, 00497F78
:004419A2 894DF4                  mov dword ptr [ebp-0C], ecx
:004419A5 C745FC00000000          mov [ebp-04], 00000000
:004419AC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004419AF E81CA70100              call 0045C0D0
:004419B4 25FF000000              and eax, 000000FF
:004419B9 83F802                  cmp eax, 00000002
:004419BC 7510                    jne 004419CE
:004419BE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004419C1 E82404FCFF              call 00401DEA
:004419C6 8B55E8                  mov edx, dword ptr [ebp-18]
:004419C9 394210                  cmp dword ptr [edx+10], eax
:004419CC 7505                    jne 004419D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004419BC(C)
|
:004419CE E9C3020000              jmp 00441C96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004419CC(C)
|
:004419D3 8B450C                  mov eax, dword ptr [ebp+0C]
:004419D6 25FF000000              and eax, 000000FF
:004419DB 3DFF000000              cmp eax, 000000FF
:004419E0 7422                    je 00441A04
:004419E2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004419E5 81E1FF000000            and ecx, 000000FF
:004419EB 6BC924                  imul ecx, 00000024
:004419EE 81C1B83B4B00            add ecx, 004B3BB8
:004419F4 E8E74FFFFF              call 004369E0
:004419F9 6BC050                  imul eax, 00000050
:004419FC 05787F4900              add eax, 00497F78
:00441A01 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004419E0(C)
|
:00441A04 8B4D10                  mov ecx, dword ptr [ebp+10]
:00441A07 81E1FF000000            and ecx, 000000FF
:00441A0D 83F903                  cmp ecx, 00000003
:00441A10 0F84EF000000            je 00441B05
:00441A16 8B5508                  mov edx, dword ptr [ebp+08]
:00441A19 81E2FF000000            and edx, 000000FF
:00441A1F 8955E4                  mov dword ptr [ebp-1C], edx
:00441A22 8B45E4                  mov eax, dword ptr [ebp-1C]
:00441A25 83E828                  sub eax, 00000028
:00441A28 8945E4                  mov dword ptr [ebp-1C], eax
:00441A2B 837DE407                cmp dword ptr [ebp-1C], 00000007
:00441A2F 0F87D0000000            ja 00441B05
:00441A35 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00441A38 FF248D9D1C4400          jmp dword ptr [4*ecx+00441C9D]
:00441A3F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00441A42 81E1FF000000            and ecx, 000000FF
:00441A48 6BC924                  imul ecx, 00000024
:00441A4B 81C1B83B4B00            add ecx, 004B3BB8
:00441A51 E87514FFFF              call 00432ECB
:00441A56 C1E803                  shr eax, 03
:00441A59 83C028                  add eax, 00000028
:00441A5C 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00441A5F 6A02                    push 00000002
:00441A61 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441A64 E80750FFFF              call 00436A70
:00441A69 85C0                    test eax, eax
:00441A6B 752F                    jne 00441A9C
:00441A6D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441A70 E81B51FFFF              call 00436B90
:00441A75 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00441A77 68C8000000              push 000000C8
:00441A7C E82F690300              call 004783B0
:00441A81 83C404                  add esp, 00000004
:00441A84 3BF0                    cmp esi, eax
:00441A86 7614                    jbe 00441A9C

* Possible Reference to String Resource ID=00006: ""
                                  |
:00441A88 6A06                    push 00000006
:00441A8A E821690300              call 004783B0
:00441A8F 83C404                  add esp, 00000004
:00441A92 8B55FC                  mov edx, dword ptr [ebp-04]
:00441A95 8D440205                lea eax, dword ptr [edx+eax+05]
:00441A99 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441A6B(C), :00441A86(C)
|
:00441A9C EB67                    jmp 00441B05
:00441A9E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441AA1 8B09                    mov ecx, dword ptr [ecx]
:00441AA3 6BC950                  imul ecx, 00000050
:00441AA6 81C1787F4900            add ecx, 00497F78
:00441AAC E83903FCFF              call 00401DEA
:00441AB1 8945FC                  mov dword ptr [ebp-04], eax
:00441AB4 EB4F                    jmp 00441B05
:00441AB6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00441AB9 81E1FF000000            and ecx, 000000FF
:00441ABF 6BC924                  imul ecx, 00000024
:00441AC2 81C1B83B4B00            add ecx, 004B3BB8
:00441AC8 E8FE13FFFF              call 00432ECB
:00441ACD C1E803                  shr eax, 03
:00441AD0 83C028                  add eax, 00000028
:00441AD3 8945FC                  mov dword ptr [ebp-04], eax
:00441AD6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441AD9 E8B250FFFF              call 00436B90
:00441ADE 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00441AE0 68C8000000              push 000000C8
:00441AE5 E8C6680300              call 004783B0
:00441AEA 83C404                  add esp, 00000004
:00441AED 3BF0                    cmp esi, eax
:00441AEF 7614                    jbe 00441B05

* Possible Reference to String Resource ID=00006: ""
                                  |
:00441AF1 6A06                    push 00000006
:00441AF3 E8B8680300              call 004783B0
:00441AF8 83C404                  add esp, 00000004
:00441AFB 8B55FC                  mov edx, dword ptr [ebp-04]
:00441AFE 8D440205                lea eax, dword ptr [edx+eax+05]
:00441B02 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441A10(C), :00441A2F(C), :00441A9C(U), :00441AB4(U), :00441AEF(C)
|
:00441B05 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441B08 8B75FC                  mov esi, dword ptr [ebp-04]
:00441B0B 037110                  add esi, dword ptr [ecx+10]
:00441B0E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00441B11 E8D402FCFF              call 00401DEA
:00441B16 3BF0                    cmp esi, eax
:00441B18 7611                    jbe 00441B2B
:00441B1A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00441B1D E8C802FCFF              call 00401DEA
:00441B22 8B55E8                  mov edx, dword ptr [ebp-18]
:00441B25 2B4210                  sub eax, dword ptr [edx+10]
:00441B28 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441B18(C)
|
:00441B2B 6A01                    push 00000001
:00441B2D 8A4510                  mov al, byte ptr [ebp+10]
:00441B30 50                      push eax
:00441B31 8A4D08                  mov cl, byte ptr [ebp+08]
:00441B34 51                      push ecx
:00441B35 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441B38 E8A3040000              call 00441FE0
:00441B3D 50                      push eax
:00441B3E 8A550C                  mov dl, byte ptr [ebp+0C]
:00441B41 52                      push edx
:00441B42 B958494B00              mov ecx, 004B4958
:00441B47 E844CC0000              call 0044E790
:00441B4C B978294B00              mov ecx, 004B2978
:00441B51 E85AADFCFF              call 0040C8B0
:00441B56 83E010                  and eax, 00000010
:00441B59 85C0                    test eax, eax
:00441B5B 7538                    jne 00441B95
:00441B5D C645F000                mov [ebp-10], 00
:00441B61 EB08                    jmp 00441B6B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441B8E(U)
|
:00441B63 8A45F0                  mov al, byte ptr [ebp-10]
:00441B66 0401                    add al, 01
:00441B68 8845F0                  mov byte ptr [ebp-10], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441B61(U)
|
:00441B6B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00441B6E 81E1FF000000            and ecx, 000000FF
:00441B74 83F903                  cmp ecx, 00000003
:00441B77 7D17                    jge 00441B90
:00441B79 6A0E                    push 0000000E
:00441B7B 8B55FC                  mov edx, dword ptr [ebp-04]
:00441B7E 52                      push edx
:00441B7F 8B45E8                  mov eax, dword ptr [ebp-18]
:00441B82 8A4804                  mov cl, byte ptr [eax+04]
:00441B85 51                      push ecx
:00441B86 E880820000              call 00449E0B
:00441B8B 83C40C                  add esp, 0000000C
:00441B8E EBD3                    jmp 00441B63

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441B77(C)
|
:00441B90 E9F2000000              jmp 00441C87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441B5B(C)
|
:00441B95 8B55E8                  mov edx, dword ptr [ebp-18]
:00441B98 8A4204                  mov al, byte ptr [edx+04]
:00441B9B 50                      push eax
:00441B9C 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00441B9F 51                      push ecx
:00441BA0 E807850000              call 0044A0AC
:00441BA5 83C408                  add esp, 00000008
:00441BA8 E87857FFFF              call 00437325
:00441BAD 8B55E8                  mov edx, dword ptr [ebp-18]
:00441BB0 33C0                    xor eax, eax
:00441BB2 8A4204                  mov al, byte ptr [edx+04]
:00441BB5 8BC8                    mov ecx, eax
:00441BB7 6BC924                  imul ecx, 00000024
:00441BBA 81C1B83B4B00            add ecx, 004B3BB8
:00441BC0 E84BADFCFF              call 0040C910
:00441BC5 85C0                    test eax, eax
:00441BC7 7411                    je 00441BDA
:00441BC9 33C9                    xor ecx, ecx
:00441BCB 8A0DCC484B00            mov cl, byte ptr [004B48CC]
:00441BD1 8D54090E                lea edx, dword ptr [ecx+ecx+0E]
:00441BD5 8955E0                  mov dword ptr [ebp-20], edx
:00441BD8 EB0E                    jmp 00441BE8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441BC7(C)
|
:00441BDA 33C0                    xor eax, eax
:00441BDC A0CC484B00              mov al, byte ptr [004B48CC]
:00441BE1 8D4C002A                lea ecx, dword ptr [eax+eax+2A]
:00441BE5 894DE0                  mov dword ptr [ebp-20], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441BD8(U)
|
:00441BE8 8A55E0                  mov dl, byte ptr [ebp-20]
:00441BEB 8855EC                  mov byte ptr [ebp-14], dl
:00441BEE 33C0                    xor eax, eax
:00441BF0 A09D4E4B00              mov al, byte ptr [004B4E9D]
:00441BF5 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:00441BF9 51                      push ecx
:00441BFA B9A83B4B00              mov ecx, 004B3BA8
:00441BFF E80CDDFDFF              call 0041F910
:00441C04 8B55E8                  mov edx, dword ptr [ebp-18]
:00441C07 8A4204                  mov al, byte ptr [edx+04]
:00441C0A 50                      push eax
:00441C0B 668B4DEC                mov cx, word ptr [ebp-14]
:00441C0F 51                      push ecx
:00441C10 E843850000              call 0044A158
:00441C15 83C408                  add esp, 00000008
:00441C18 E8B3D9FEFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00441C1D 6A03                    push 00000003
:00441C1F E812DBFEFF              call 0042F736
:00441C24 83C404                  add esp, 00000004
:00441C27 33D2                    xor edx, edx
:00441C29 8A159D4E4B00            mov dl, byte ptr [004B4E9D]
:00441C2F 8D441206                lea eax, dword ptr [edx+edx+06]
:00441C33 50                      push eax
:00441C34 B9A83B4B00              mov ecx, 004B3BA8
:00441C39 E8D2DCFDFF              call 0041F910
:00441C3E 6880000000              push 00000080
:00441C43 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441C46 51                      push ecx
:00441C47 8B55E8                  mov edx, dword ptr [ebp-18]
:00441C4A 8A4204                  mov al, byte ptr [edx+04]
:00441C4D 50                      push eax
:00441C4E 668B4DEC                mov cx, word ptr [ebp-14]
:00441C52 51                      push ecx
:00441C53 E8BA870000              call 0044A412
:00441C58 83C410                  add esp, 00000010
:00441C5B E870D9FEFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00441C60 6A03                    push 00000003
:00441C62 E8CFDAFEFF              call 0042F736
:00441C67 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00441C6A 6A09                    push 00000009
:00441C6C 6A21                    push 00000021
:00441C6E 8A55ED                  mov dl, byte ptr [ebp-13]
:00441C71 52                      push edx
:00441C72 33C0                    xor eax, eax
:00441C74 A0CC484B00              mov al, byte ptr [004B48CC]
:00441C79 83C006                  add eax, 00000006
:00441C7C 50                      push eax
:00441C7D B958494B00              mov ecx, 004B4958
:00441C82 E8C1AC0000              call 0044C948

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441B90(U)
|
:00441C87 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441C8A 8B5110                  mov edx, dword ptr [ecx+10]
:00441C8D 0355FC                  add edx, dword ptr [ebp-04]
:00441C90 8B45E8                  mov eax, dword ptr [ebp-18]
:00441C93 895010                  mov dword ptr [eax+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004419CE(U)
|
:00441C96 5E                      pop esi
:00441C97 8BE5                    mov esp, ebp
:00441C99 5D                      pop ebp
:00441C9A C20C00                  ret 000C



:00441C9D 9E1A4400                DWORD 00441A9E
:00441CA1 B61A4400                DWORD 00441AB6
:00441CA5 9E1A4400                DWORD 00441A9E
:00441CA9 B61A4400                DWORD 00441AB6
:00441CAD 3F1A4400                DWORD 00441A3F
:00441CB1 3F1A4400                DWORD 00441A3F
:00441CB5 9E1A4400                DWORD 00441A9E
:00441CB9 B61A4400                DWORD 00441AB6


:00441CBD 55                      push ebp
:00441CBE 8BEC                    mov ebp, esp
:00441CC0 83EC24                  sub esp, 00000024
:00441CC3 56                      push esi
:00441CC4 894DE4                  mov dword ptr [ebp-1C], ecx
:00441CC7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00441CCA E8B13AFCFF              call 00405780
:00441CCF 25FF000000              and eax, 000000FF
:00441CD4 83F807                  cmp eax, 00000007
:00441CD7 7417                    je 00441CF0
:00441CD9 33C0                    xor eax, eax
:00441CDB A0BC4F4B00              mov al, byte ptr [004B4FBC]
:00441CE0 83E004                  and eax, 00000004
:00441CE3 85C0                    test eax, eax
:00441CE5 7509                    jne 00441CF0
:00441CE7 C745E000000000          mov [ebp-20], 00000000
:00441CEE EB07                    jmp 00441CF7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00441CD7(C), :00441CE5(C)
|
:00441CF0 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441CEE(U)
|
:00441CF7 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00441CFA 894DF4                  mov dword ptr [ebp-0C], ecx
:00441CFD C745F800000000          mov [ebp-08], 00000000
:00441D04 68FF000000              push 000000FF
:00441D09 6880070000              push 00000780

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00441D0E 6A04                    push 00000004
:00441D10 6A00                    push 00000000
:00441D12 6800960000              push 00009600
:00441D17 B9881C4B00              mov ecx, 004B1C88
:00441D1C E86F720300              call 00478F90
:00441D21 50                      push eax
:00441D22 E8B9680300              call 004785E0
:00441D27 83C40C                  add esp, 0000000C
:00441D2A 6A00                    push 00000000
:00441D2C 6A01                    push 00000001
:00441D2E 6880000000              push 00000080
:00441D33 8B55E4                  mov edx, dword ptr [ebp-1C]
:00441D36 83C205                  add edx, 00000005
:00441D39 52                      push edx
:00441D3A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00441D3D E8F8DC0000              call 0044FA3A
:00441D42 8845FC                  mov byte ptr [ebp-04], al
:00441D45 837DF400                cmp dword ptr [ebp-0C], 00000000
:00441D49 7420                    je 00441D6B
:00441D4B 6A01                    push 00000001
:00441D4D B958494B00              mov ecx, 004B4958
:00441D52 E86A910000              call 0044AEC1
:00441D57 B958494B00              mov ecx, 004B4958
:00441D5C E8B0AB0000              call 0044C911

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00441D61 6A02                    push 00000002
:00441D63 E8C8D8FEFF              call 0042F630
:00441D68 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441D49(C)
|
:00441D6B 8B45FC                  mov eax, dword ptr [ebp-04]
:00441D6E 25FF000000              and eax, 000000FF
:00441D73 3DFF000000              cmp eax, 000000FF
:00441D78 0F8455010000            je 00441ED3
:00441D7E 837DF400                cmp dword ptr [ebp-0C], 00000000
:00441D82 7414                    je 00441D98

* Possible StringData Ref from Data Obj ->"_d򤺳@[O"
                                  |
:00441D84 6884E84700              push 0047E884

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00441D89 6A02                    push 00000002
:00441D8B E8A3F6FEFF              call 00431433
:00441D90 83C408                  add esp, 00000008
:00441D93 8945F0                  mov dword ptr [ebp-10], eax
:00441D96 EB07                    jmp 00441D9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441D82(C)
|
:00441D98 C745F001000000          mov [ebp-10], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441D96(U)
|
:00441D9F 837DF000                cmp dword ptr [ebp-10], 00000000
:00441DA3 0F8428010000            je 00441ED1
:00441DA9 C745EC00000000          mov [ebp-14], 00000000
:00441DB0 6A18                    push 00000018
:00441DB2 6A27                    push 00000027
:00441DB4 6A00                    push 00000000
:00441DB6 6A00                    push 00000000
:00441DB8 B958494B00              mov ecx, 004B4958
:00441DBD E886AB0000              call 0044C948
:00441DC2 C745E860DD4A00          mov [ebp-18], 004ADD60
:00441DC9 EB09                    jmp 00441DD4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441E4F(U)
|
:00441DCB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441DCE 83C101                  add ecx, 00000001
:00441DD1 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441DC9(U)
|
:00441DD4 8B55E8                  mov edx, dword ptr [ebp-18]
:00441DD7 33C0                    xor eax, eax
:00441DD9 8A02                    mov al, byte ptr [edx]
:00441DDB 3DFF000000              cmp eax, 000000FF
:00441DE0 7472                    je 00441E54
:00441DE2 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00441DE5 33D2                    xor edx, edx
:00441DE7 8A11                    mov dl, byte ptr [ecx]
:00441DE9 8BCA                    mov ecx, edx
:00441DEB 6BC924                  imul ecx, 00000024
:00441DEE 81C1B83B4B00            add ecx, 004B3BB8
:00441DF4 E8E714FCFF              call 004032E0
:00441DF9 8BF0                    mov esi, eax
:00441DFB 8B45E8                  mov eax, dword ptr [ebp-18]
:00441DFE 33C9                    xor ecx, ecx
:00441E00 8A08                    mov cl, byte ptr [eax]
:00441E02 6BC924                  imul ecx, 00000024
:00441E05 81C1B83B4B00            add ecx, 004B3BB8
:00441E0B E8D04BFFFF              call 004369E0
:00441E10 8BC8                    mov ecx, eax
:00441E12 6BC950                  imul ecx, 00000050
:00441E15 81C1787F4900            add ecx, 00497F78
:00441E1B E8CAFFFBFF              call 00401DEA
:00441E20 3BF0                    cmp esi, eax
:00441E22 732B                    jnb 00441E4F
:00441E24 C745EC01000000          mov [ebp-14], 00000001
:00441E2B 8A550C                  mov dl, byte ptr [ebp+0C]
:00441E2E 52                      push edx
:00441E2F 8B45E4                  mov eax, dword ptr [ebp-1C]
:00441E32 8A4804                  mov cl, byte ptr [eax+04]
:00441E35 51                      push ecx
:00441E36 8A5508                  mov dl, byte ptr [ebp+08]
:00441E39 52                      push edx
:00441E3A 8B45E8                  mov eax, dword ptr [ebp-18]
:00441E3D 33C9                    xor ecx, ecx
:00441E3F 8A08                    mov cl, byte ptr [eax]
:00441E41 6BC924                  imul ecx, 00000024
:00441E44 81C1B83B4B00            add ecx, 004B3BB8
:00441E4A E83BFBFFFF              call 0044198A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441E22(C)
|
:00441E4F E977FFFFFF              jmp 00441DCB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441DE0(C)
|
:00441E54 837DEC00                cmp dword ptr [ebp-14], 00000000
:00441E58 7431                    je 00441E8B
:00441E5A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00441E5D E8AEAAFCFF              call 0040C910
:00441E62 85C0                    test eax, eax
:00441E64 7409                    je 00441E6F

* Possible StringData Ref from Data Obj ->""
                                  |
:00441E66 C745DC9CE84700          mov [ebp-24], 0047E89C
:00441E6D EB07                    jmp 00441E76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441E64(C)
|

* Possible StringData Ref from Data Obj ->""
                                  |
:00441E6F C745DCA0E84700          mov [ebp-24], 0047E8A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441E6D(U)
|
:00441E76 8B55DC                  mov edx, dword ptr [ebp-24]
:00441E79 52                      push edx

* Possible StringData Ref from Data Obj ->"%sx@[O_F"
                                  |
:00441E7A 68A4E84700              push 0047E8A4
:00441E7F 6A00                    push 00000000
:00441E81 E8ADF5FEFF              call 00431433
:00441E86 83C40C                  add esp, 0000000C
:00441E89 EB35                    jmp 00441EC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441E58(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00441E8B 6A07                    push 00000007
:00441E8D B9F8544B00              mov ecx, 004B54F8
:00441E92 E883760200              call 0046951A

* Possible StringData Ref from Data Obj ->"S_"
                                  |
:00441E97 68B8E84700              push 0047E8B8
:00441E9C 6A00                    push 00000000
:00441E9E E890F5FEFF              call 00431433
:00441EA3 83C408                  add esp, 00000008
:00441EA6 6A00                    push 00000000
:00441EA8 B958494B00              mov ecx, 004B4958
:00441EAD E80F900000              call 0044AEC1
:00441EB2 B958494B00              mov ecx, 004B4958
:00441EB7 E855AA0000              call 0044C911
:00441EBC 33C0                    xor eax, eax
:00441EBE EB63                    jmp 00441F23

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441E89(U)
|
:00441EC0 B9F8544B00              mov ecx, 004B54F8
:00441EC5 E828760200              call 004694F2
:00441ECA C745F801000000          mov [ebp-08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441DA3(C)
|
:00441ED1 EB31                    jmp 00441F04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441D78(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00441ED3 6A07                    push 00000007
:00441ED5 B9F8544B00              mov ecx, 004B54F8
:00441EDA E83B760200              call 0046951A

* Possible StringData Ref from Data Obj ->"d򤺨Sۭx"
                                  |
:00441EDF 68CCE84700              push 0047E8CC
:00441EE4 6A00                    push 00000000
:00441EE6 E848F5FEFF              call 00431433
:00441EEB 83C408                  add esp, 00000008
:00441EEE 6A00                    push 00000000
:00441EF0 B958494B00              mov ecx, 004B4958
:00441EF5 E8C78F0000              call 0044AEC1
:00441EFA B958494B00              mov ecx, 004B4958
:00441EFF E80DAA0000              call 0044C911

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441ED1(U)
|
:00441F04 837DF400                cmp dword ptr [ebp-0C], 00000000
:00441F08 7416                    je 00441F20
:00441F0A 6A00                    push 00000000
:00441F0C B958494B00              mov ecx, 004B4958
:00441F11 E8AB8F0000              call 0044AEC1
:00441F16 B958494B00              mov ecx, 004B4958
:00441F1B E8F1A90000              call 0044C911

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441F08(C)
|
:00441F20 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00441EBE(U)
|
:00441F23 5E                      pop esi
:00441F24 8BE5                    mov esp, ebp
:00441F26 5D                      pop ebp
:00441F27 C20800                  ret 0008


:00441F2A CC                      int 03
:00441F2B CC                      int 03
:00441F2C CC                      int 03
:00441F2D CC                      int 03
:00441F2E CC                      int 03
:00441F2F CC                      int 03

* Referenced by a CALL at Addresses:
|:00438F8D   , :00456920   
|
:00441F30 55                      push ebp
:00441F31 8BEC                    mov ebp, esp
:00441F33 51                      push ecx
:00441F34 894DFC                  mov dword ptr [ebp-04], ecx
:00441F37 8B450C                  mov eax, dword ptr [ebp+0C]
:00441F3A 50                      push eax
:00441F3B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441F3E 8A5101                  mov dl, byte ptr [ecx+01]
:00441F41 52                      push edx
:00441F42 8B4508                  mov eax, dword ptr [ebp+08]
:00441F45 8A08                    mov cl, byte ptr [eax]
:00441F47 51                      push ecx
:00441F48 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00441F4B E8B327FFFF              call 00434703
:00441F50 8BE5                    mov esp, ebp
:00441F52 5D                      pop ebp
:00441F53 C20800                  ret 0008


:00441F56 CC                      int 03
:00441F57 CC                      int 03
:00441F58 CC                      int 03
:00441F59 CC                      int 03
:00441F5A CC                      int 03
:00441F5B CC                      int 03
:00441F5C CC                      int 03
:00441F5D CC                      int 03
:00441F5E CC                      int 03
:00441F5F CC                      int 03

* Referenced by a CALL at Addresses:
|:00438710   , :00452643   , :0045E452   , :0045E4FC   
|
:00441F60 55                      push ebp
:00441F61 8BEC                    mov ebp, esp
:00441F63 51                      push ecx
:00441F64 894DFC                  mov dword ptr [ebp-04], ecx
:00441F67 8B45FC                  mov eax, dword ptr [ebp-04]
:00441F6A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441F6D 89480C                  mov dword ptr [eax+0C], ecx
:00441F70 8BE5                    mov esp, ebp
:00441F72 5D                      pop ebp
:00441F73 C20400                  ret 0004


:00441F76 CC                      int 03
:00441F77 CC                      int 03
:00441F78 CC                      int 03
:00441F79 CC                      int 03
:00441F7A CC                      int 03
:00441F7B CC                      int 03
:00441F7C CC                      int 03
:00441F7D CC                      int 03
:00441F7E CC                      int 03
:00441F7F CC                      int 03

* Referenced by a CALL at Address:
|:00438955   
|
:00441F80 55                      push ebp
:00441F81 8BEC                    mov ebp, esp
:00441F83 51                      push ecx
:00441F84 894DFC                  mov dword ptr [ebp-04], ecx
:00441F87 8B45FC                  mov eax, dword ptr [ebp-04]
:00441F8A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00441F8D 89481C                  mov dword ptr [eax+1C], ecx
:00441F90 8BE5                    mov esp, ebp
:00441F92 5D                      pop ebp
:00441F93 C20400                  ret 0004


:00441F96 CC                      int 03
:00441F97 CC                      int 03
:00441F98 CC                      int 03
:00441F99 CC                      int 03
:00441F9A CC                      int 03
:00441F9B CC                      int 03
:00441F9C CC                      int 03
:00441F9D CC                      int 03
:00441F9E CC                      int 03
:00441F9F CC                      int 03

* Referenced by a CALL at Addresses:
|:00439133   , :0045D39B   , :0045D42D   , :0045D4A5   , :0045D6FB   
|
:00441FA0 55                      push ebp
:00441FA1 8BEC                    mov ebp, esp
:00441FA3 51                      push ecx
:00441FA4 894DFC                  mov dword ptr [ebp-04], ecx
:00441FA7 8B45FC                  mov eax, dword ptr [ebp-04]
:00441FAA 8A400A                  mov al, byte ptr [eax+0A]
:00441FAD 8BE5                    mov esp, ebp
:00441FAF 5D                      pop ebp
:00441FB0 C3                      ret


:00441FB1 CC                      int 03
:00441FB2 CC                      int 03
:00441FB3 CC                      int 03
:00441FB4 CC                      int 03
:00441FB5 CC                      int 03
:00441FB6 CC                      int 03
:00441FB7 CC                      int 03
:00441FB8 CC                      int 03
:00441FB9 CC                      int 03
:00441FBA CC                      int 03
:00441FBB CC                      int 03
:00441FBC CC                      int 03
:00441FBD CC                      int 03
:00441FBE CC                      int 03
:00441FBF CC                      int 03

* Referenced by a CALL at Addresses:
|:0043C73F   , :0043C752   , :0043D84D   , :0043DB21   , :0043DFEC   
|:0043E8DC   , :0043EBD3   , :0043EC4B   , :0044353B   , :004444F1   
|:0045FABD   , :00460720   , :00460A8E   
|
:00441FC0 55                      push ebp
:00441FC1 8BEC                    mov ebp, esp
:00441FC3 51                      push ecx
:00441FC4 894DFC                  mov dword ptr [ebp-04], ecx
:00441FC7 8B45FC                  mov eax, dword ptr [ebp-04]
:00441FCA 8A481B                  mov cl, byte ptr [eax+1B]
:00441FCD 0A4D08                  or cl, byte ptr [ebp+08]
:00441FD0 8B55FC                  mov edx, dword ptr [ebp-04]
:00441FD3 884A1B                  mov byte ptr [edx+1B], cl
:00441FD6 8BE5                    mov esp, ebp
:00441FD8 5D                      pop ebp
:00441FD9 C20400                  ret 0004


:00441FDC CC                      int 03
:00441FDD CC                      int 03
:00441FDE CC                      int 03
:00441FDF CC                      int 03

* Referenced by a CALL at Addresses:
|:00407A35   , :00407DD9   , :0040ED0B   , :00411883   , :00411B9A   
|:00411C6C   , :00411F52   , :0041D033   , :0041DCFD   , :004335C2   
|:00433680   , :004391B4   , :0044094F   , :00441B38   , :00442317   
|:00443921   , :00443BD8   , :004447AF   , :004448B0   , :004448C4   
|:00444917   , :0044492B   , :0044ED55   , :004525B3   , :004547C8   
|:00454871   , :0045657F   , :00459A02   , :00459A30   , :00459A5E   
|:004603F1   , :004605A4   
|
:00441FE0 55                      push ebp
:00441FE1 8BEC                    mov ebp, esp
:00441FE3 51                      push ecx
:00441FE4 894DFC                  mov dword ptr [ebp-04], ecx
:00441FE7 8B45FC                  mov eax, dword ptr [ebp-04]
:00441FEA 8A4004                  mov al, byte ptr [eax+04]
:00441FED 8BE5                    mov esp, ebp
:00441FEF 5D                      pop ebp
:00441FF0 C3                      ret


:00441FF1 CC                      int 03
:00441FF2 CC                      int 03
:00441FF3 CC                      int 03
:00441FF4 CC                      int 03
:00441FF5 CC                      int 03
:00441FF6 CC                      int 03
:00441FF7 CC                      int 03
:00441FF8 CC                      int 03
:00441FF9 CC                      int 03
:00441FFA CC                      int 03
:00441FFB CC                      int 03
:00441FFC CC                      int 03
:00441FFD CC                      int 03
:00441FFE CC                      int 03
:00441FFF CC                      int 03

* Referenced by a CALL at Addresses:
|:004412DC   , :0044F156   , :0044F1D5   
|
:00442000 55                      push ebp
:00442001 8BEC                    mov ebp, esp
:00442003 51                      push ecx
:00442004 894DFC                  mov dword ptr [ebp-04], ecx
:00442007 8B4508                  mov eax, dword ptr [ebp+08]
:0044200A 50                      push eax
:0044200B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044200E 83C105                  add ecx, 00000005
:00442011 E88A4AFFFF              call 00436AA0
:00442016 8BE5                    mov esp, ebp
:00442018 5D                      pop ebp
:00442019 C20400                  ret 0004


:0044201C CC                      int 03
:0044201D CC                      int 03
:0044201E CC                      int 03
:0044201F CC                      int 03
:00442020 55                      push ebp
:00442021 8BEC                    mov ebp, esp
:00442023 E807000000              call 0044202F
:00442028 E811000000              call 0044203E
:0044202D 5D                      pop ebp
:0044202E C3                      ret



* Referenced by a CALL at Address:
|:00442023   
|
:0044202F 55                      push ebp
:00442030 8BEC                    mov ebp, esp
:00442032 B9E0484B00              mov ecx, 004B48E0
:00442037 E8B436FCFF              call 004056F0
:0044203C 5D                      pop ebp
:0044203D C3                      ret



* Referenced by a CALL at Address:
|:00442028   
|
:0044203E 55                      push ebp
:0044203F 8BEC                    mov ebp, esp
:00442041 6850204400              push 00442050
:00442046 E865D40200              call 0046F4B0
:0044204B 83C404                  add esp, 00000004
:0044204E 5D                      pop ebp
:0044204F C3                      ret


:00442050 55                      push ebp
:00442051 8BEC                    mov ebp, esp
:00442053 B9E0484B00              mov ecx, 004B48E0
:00442058 E8A3C9FEFF              call 0042EA00
:0044205D 5D                      pop ebp
:0044205E C3                      ret


:0044205F 55                      push ebp
:00442060 8BEC                    mov ebp, esp
:00442062 E802000000              call 00442069
:00442067 5D                      pop ebp
:00442068 C3                      ret



* Referenced by a CALL at Address:
|:00442062   
|
:00442069 55                      push ebp
:0044206A 8BEC                    mov ebp, esp
:0044206C B93C494B00              mov ecx, 004B493C
:00442071 E87A36FCFF              call 004056F0
:00442076 B9DC484B00              mov ecx, 004B48DC
:0044207B E87036FCFF              call 004056F0
:00442080 5D                      pop ebp
:00442081 C3                      ret



* Referenced by a CALL at Addresses:
|:00436048   , :0043606A   , :0043628B   , :004362F9   , :004365A7   
|:00436610   , :004422E8   , :00442E26   , :00442EF1   , :00448691   
|:004486CB   , :00448758   , :004489BF   , :0044954A   
|
:00442082 55                      push ebp
:00442083 8BEC                    mov ebp, esp
:00442085 83EC18                  sub esp, 00000018
:00442088 56                      push esi
:00442089 B958494B00              mov ecx, 004B4958
:0044208E E87F8C0000              call 0044AD12
:00442093 8BF0                    mov esi, eax
:00442095 037508                  add esi, dword ptr [ebp+08]
:00442098 B958494B00              mov ecx, 004B4958
:0044209D E8818C0000              call 0044AD23
:004420A2 03450C                  add eax, dword ptr [ebp+0C]
:004420A5 33C9                    xor ecx, ecx
:004420A7 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:004420AD 0FAFC1                  imul eax, ecx
:004420B0 6BC003                  imul eax, 00000003
:004420B3 03F0                    add esi, eax
:004420B5 8975F4                  mov dword ptr [ebp-0C], esi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004420B8 6A04                    push 00000004
:004420BA 6A00                    push 00000000
:004420BC 6A00                    push 00000000
:004420BE B9881C4B00              mov ecx, 004B1C88
:004420C3 E8C86E0300              call 00478F90
:004420C8 0345F4                  add eax, dword ptr [ebp-0C]
:004420CB 8945F0                  mov dword ptr [ebp-10], eax
:004420CE 33D2                    xor edx, edx
:004420D0 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:004420D6 6BD203                  imul edx, 00000003
:004420D9 83EA03                  sub edx, 00000003
:004420DC 8955FC                  mov dword ptr [ebp-04], edx
:004420DF 8B4508                  mov eax, dword ptr [ebp+08]
:004420E2 C1E004                  shl eax, 04
:004420E5 894508                  mov dword ptr [ebp+08], eax
:004420E8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004420EB C1E104                  shl ecx, 04
:004420EE 894D0C                  mov dword ptr [ebp+0C], ecx
:004420F1 8B5508                  mov edx, dword ptr [ebp+08]
:004420F4 895508                  mov dword ptr [ebp+08], edx
:004420F7 8B450C                  mov eax, dword ptr [ebp+0C]
:004420FA 83C028                  add eax, 00000028
:004420FD 89450C                  mov dword ptr [ebp+0C], eax
:00442100 B958494B00              mov ecx, 004B4958
:00442105 E860C80000              call 0044E96A
:0044210A 50                      push eax
:0044210B B958494B00              mov ecx, 004B4958
:00442110 E82EC80000              call 0044E943
:00442115 50                      push eax
:00442116 6A20                    push 00000020
:00442118 6A00                    push 00000000
:0044211A E88E3C0300              call 00475DAD
:0044211F 83C410                  add esp, 00000010
:00442122 E80CE0FCFF              call 00410133
:00442127 C745F800000000          mov [ebp-08], 00000000
:0044212E EB1B                    jmp 0044214B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004421BF(U)
|
:00442130 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00442133 83C101                  add ecx, 00000001
:00442136 894DF8                  mov dword ptr [ebp-08], ecx
:00442139 8B55F0                  mov edx, dword ptr [ebp-10]
:0044213C 0355FC                  add edx, dword ptr [ebp-04]
:0044213F 8955F0                  mov dword ptr [ebp-10], edx
:00442142 8B45F4                  mov eax, dword ptr [ebp-0C]
:00442145 0345FC                  add eax, dword ptr [ebp-04]
:00442148 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044212E(U)
|
:0044214B 837DF803                cmp dword ptr [ebp-08], 00000003
:0044214F 7373                    jnb 004421C4
:00442151 C745E800000000          mov [ebp-18], 00000000
:00442158 EB1B                    jmp 00442175

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004421BD(U)
|
:0044215A 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044215D 83C101                  add ecx, 00000001
:00442160 894DE8                  mov dword ptr [ebp-18], ecx
:00442163 8B55F0                  mov edx, dword ptr [ebp-10]
:00442166 83C201                  add edx, 00000001
:00442169 8955F0                  mov dword ptr [ebp-10], edx
:0044216C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044216F 83C001                  add eax, 00000001
:00442172 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442158(U)
|
:00442175 837DE803                cmp dword ptr [ebp-18], 00000003
:00442179 7344                    jnb 004421BF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044217B 6A04                    push 00000004
:0044217D 6A00                    push 00000000
:0044217F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442182 C1E108                  shl ecx, 08
:00442185 51                      push ecx
:00442186 B9C0174B00              mov ecx, 004B17C0
:0044218B E8006E0300              call 00478F90
:00442190 8945EC                  mov dword ptr [ebp-14], eax
:00442193 6A00                    push 00000000
:00442195 8B55EC                  mov edx, dword ptr [ebp-14]
:00442198 52                      push edx
:00442199 6A10                    push 00000010
:0044219B 6A10                    push 00000010
:0044219D 8B45F8                  mov eax, dword ptr [ebp-08]
:004421A0 C1E004                  shl eax, 04
:004421A3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004421A6 03C8                    add ecx, eax
:004421A8 51                      push ecx
:004421A9 8B55E8                  mov edx, dword ptr [ebp-18]
:004421AC C1E204                  shl edx, 04
:004421AF 8B4508                  mov eax, dword ptr [ebp+08]
:004421B2 03C2                    add eax, edx
:004421B4 50                      push eax
:004421B5 E8EA890000              call 0044ABA4
:004421BA 83C418                  add esp, 00000018
:004421BD EB9B                    jmp 0044215A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442179(C)
|
:004421BF E96CFFFFFF              jmp 00442130

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044214F(C)
|
:004421C4 E885DFFCFF              call 0041014E
:004421C9 B958494B00              mov ecx, 004B4958
:004421CE E897C70000              call 0044E96A
:004421D3 50                      push eax
:004421D4 B958494B00              mov ecx, 004B4958
:004421D9 E865C70000              call 0044E943
:004421DE 50                      push eax
:004421DF 6A28                    push 00000028
:004421E1 6A00                    push 00000000
:004421E3 E8C53B0300              call 00475DAD
:004421E8 83C410                  add esp, 00000010
:004421EB 5E                      pop esi
:004421EC 8BE5                    mov esp, ebp
:004421EE 5D                      pop ebp
:004421EF C3                      ret



* Referenced by a CALL at Address:
|:00443FC9   
|
:004421F0 55                      push ebp
:004421F1 8BEC                    mov ebp, esp
:004421F3 83EC0C                  sub esp, 0000000C
:004421F6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004421F9 6BC924                  imul ecx, 00000024
:004421FC 81C1B83B4B00            add ecx, 004B3BB8
:00442202 E8D947FFFF              call 004369E0
:00442207 8BC8                    mov ecx, eax
:00442209 6BC950                  imul ecx, 00000050
:0044220C 81C1787F4900            add ecx, 00497F78
:00442212 E8F2FDFBFF              call 00402009
:00442217 8845F8                  mov byte ptr [ebp-08], al
:0044221A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044221D 81E1FF000000            and ecx, 000000FF
:00442223 6BC922                  imul ecx, 00000022
:00442226 81C1D0474900            add ecx, 004947D0
:0044222C E82FDCFCFF              call 0040FE60
:00442231 8845FC                  mov byte ptr [ebp-04], al
:00442234 8B45FC                  mov eax, dword ptr [ebp-04]
:00442237 25FF000000              and eax, 000000FF
:0044223C 8945F4                  mov dword ptr [ebp-0C], eax
:0044223F 837DF411                cmp dword ptr [ebp-0C], 00000011
:00442243 772A                    ja 0044226F
:00442245 8B55F4                  mov edx, dword ptr [ebp-0C]
:00442248 33C9                    xor ecx, ecx
:0044224A 8A8A91224400            mov cl, byte ptr [edx+00442291]
:00442250 FF248D75224400          jmp dword ptr [4*ecx+00442275]
:00442257 B009                    mov al, 09
:00442259 EB16                    jmp 00442271
:0044225B B00A                    mov al, 0A
:0044225D EB12                    jmp 00442271
:0044225F 32C0                    xor al, al
:00442261 EB0E                    jmp 00442271
:00442263 B003                    mov al, 03
:00442265 EB0A                    jmp 00442271
:00442267 B004                    mov al, 04
:00442269 EB06                    jmp 00442271
:0044226B B005                    mov al, 05
:0044226D EB02                    jmp 00442271

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442243(C)
|
:0044226F B008                    mov al, 08

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442259(U), :0044225D(U), :00442261(U), :00442265(U), :00442269(U)
|:0044226D(U)
|
:00442271 8BE5                    mov esp, ebp
:00442273 5D                      pop ebp
:00442274 C3                      ret



:00442275 57224400                DWORD 00442257
:00442279 5B224400                DWORD 0044225B
:0044227D 5F224400                DWORD 0044225F
:00442281 63224400                DWORD 00442263
:00442285 67224400                DWORD 00442267
:00442289 6B224400                DWORD 0044226B
:0044228D 6F224400                DWORD 0044226F


:00442291 000000                  BYTE  3 DUP(0)


:00442294 0101                    add dword ptr [ecx], eax
:00442296 0102                    add dword ptr [edx], eax
:00442298 0202                    add al, byte ptr [edx]
:0044229A 0303                    add eax, dword ptr [ebx]
:0044229C 030404                  add eax, dword ptr [esp+eax]
:0044229F 0405                    add al, 05
:004422A1 05                      BYTE 05h
:004422A2 05                      BYTE 05h


* Referenced by a CALL at Addresses:
|:004424D7   , :00442597   , :004489EF   
|
:004422A3 55                      push ebp
:004422A4 8BEC                    mov ebp, esp
:004422A6 83EC18                  sub esp, 00000018
:004422A9 894DE8                  mov dword ptr [ebp-18], ecx
:004422AC 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004422AF E83C34FCFF              call 004056F0
:004422B4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004422B7 E884F9FEFF              call 00431C40
:004422BC 668B00                  mov ax, word ptr [eax]
:004422BF 50                      push eax
:004422C0 8D4DEC                  lea ecx, dword ptr [ebp-14]
:004422C3 51                      push ecx
:004422C4 E886880000              call 0044AB4F
:004422C9 83C408                  add esp, 00000008
:004422CC 50                      push eax
:004422CD 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004422D0 E8CB47FFFF              call 00436AA0
:004422D5 8B55FD                  mov edx, dword ptr [ebp-03]
:004422D8 81E2FF000000            and edx, 000000FF
:004422DE 52                      push edx
:004422DF 8B45FC                  mov eax, dword ptr [ebp-04]
:004422E2 25FF000000              and eax, 000000FF
:004422E7 50                      push eax
:004422E8 E895FDFFFF              call 00442082
:004422ED 83C408                  add esp, 00000008
:004422F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004422F3 81E1FF000000            and ecx, 000000FF
:004422F9 C1E104                  shl ecx, 04
:004422FC 894DF4                  mov dword ptr [ebp-0C], ecx
:004422FF 8B55FD                  mov edx, dword ptr [ebp-03]
:00442302 81E2FF000000            and edx, 000000FF
:00442308 83C202                  add edx, 00000002
:0044230B C1E204                  shl edx, 04
:0044230E 83C208                  add edx, 00000008
:00442311 8955F0                  mov dword ptr [ebp-10], edx
:00442314 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442317 E8C4FCFFFF              call 00441FE0
:0044231C 25FF000000              and eax, 000000FF
:00442321 8945F8                  mov dword ptr [ebp-08], eax
:00442324 8B45F8                  mov eax, dword ptr [ebp-08]
:00442327 50                      push eax
:00442328 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044232B 51                      push ecx
:0044232C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044232F 52                      push edx
:00442330 E8B435FFFF              call 004358E9
:00442335 83C40C                  add esp, 0000000C
:00442338 8BE5                    mov esp, ebp
:0044233A 5D                      pop ebp
:0044233B C20400                  ret 0004



* Referenced by a CALL at Address:
|:00442FF9   
|
:0044233E 55                      push ebp
:0044233F 8BEC                    mov ebp, esp
:00442341 83EC0C                  sub esp, 0000000C
:00442344 894DF4                  mov dword ptr [ebp-0C], ecx
:00442347 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044234A 83C048                  add eax, 00000048
:0044234D 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442350 6A04                    push 00000004
:00442352 6A00                    push 00000000
:00442354 68006B0100              push 00016B00
:00442359 B9F0174B00              mov ecx, 004B17F0
:0044235E E82D6C0300              call 00478F90
:00442363 50                      push eax
:00442364 6A40                    push 00000040
:00442366 6A40                    push 00000040
:00442368 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044236B 51                      push ecx
:0044236C 8B5508                  mov edx, dword ptr [ebp+08]
:0044236F 52                      push edx
:00442370 E8F0880000              call 0044AC65
:00442375 83C414                  add esp, 00000014
:00442378 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044237B 33C9                    xor ecx, ecx
:0044237D 8A4816                  mov cl, byte ptr [eax+16]
:00442380 83F908                  cmp ecx, 00000008
:00442383 741A                    je 0044239F
:00442385 8B55F4                  mov edx, dword ptr [ebp-0C]
:00442388 33C0                    xor eax, eax
:0044238A 8A4216                  mov al, byte ptr [edx+16]
:0044238D 83F809                  cmp eax, 00000009
:00442390 740D                    je 0044239F
:00442392 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442395 33D2                    xor edx, edx
:00442397 8A5116                  mov dl, byte ptr [ecx+16]
:0044239A 83FA0A                  cmp edx, 0000000A
:0044239D 7513                    jne 004423B2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442383(C), :00442390(C)
|
:0044239F 6A00                    push 00000000
:004423A1 8B45F4                  mov eax, dword ptr [ebp-0C]
:004423A4 33C9                    xor ecx, ecx
:004423A6 8A4816                  mov cl, byte ptr [eax+16]
:004423A9 51                      push ecx
:004423AA E8F8020000              call 004426A7
:004423AF 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044239D(C)
|
:004423B2 C745F800000000          mov [ebp-08], 00000000
:004423B9 EB09                    jmp 004423C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044269C(U)
|
:004423BB 8B55F8                  mov edx, dword ptr [ebp-08]
:004423BE 83C201                  add edx, 00000001
:004423C1 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004423B9(U)
|
:004423C4 837DF804                cmp dword ptr [ebp-08], 00000004
:004423C8 0F83D3020000            jnb 004426A1
:004423CE 33C0                    xor eax, eax
:004423D0 A09D4E4B00              mov al, byte ptr [004B4E9D]
:004423D5 83C003                  add eax, 00000003
:004423D8 50                      push eax
:004423D9 B9A83B4B00              mov ecx, 004B3BA8
:004423DE E82DD5FDFF              call 0041F910
:004423E3 E84BDDFCFF              call 00410133
:004423E8 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004423EA 6A04                    push 00000004
:004423EC 6A00                    push 00000000
:004423EE 68006B0100              push 00016B00
:004423F3 B9F0174B00              mov ecx, 004B17F0
:004423F8 E8936B0300              call 00478F90
:004423FD 50                      push eax
:004423FE 6A40                    push 00000040
:00442400 6A40                    push 00000040
:00442402 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00442405 51                      push ecx
:00442406 8B5508                  mov edx, dword ptr [ebp+08]
:00442409 52                      push edx
:0044240A E895870000              call 0044ABA4
:0044240F 83C418                  add esp, 00000018
:00442412 837DF802                cmp dword ptr [ebp-08], 00000002
:00442416 0F8283000000            jb 0044249F
:0044241C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044241F 33C9                    xor ecx, ecx
:00442421 8A4816                  mov cl, byte ptr [eax+16]
:00442424 83F908                  cmp ecx, 00000008
:00442427 741A                    je 00442443
:00442429 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044242C 33C0                    xor eax, eax
:0044242E 8A4216                  mov al, byte ptr [edx+16]
:00442431 83F809                  cmp eax, 00000009
:00442434 740D                    je 00442443
:00442436 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442439 33D2                    xor edx, edx
:0044243B 8A5116                  mov dl, byte ptr [ecx+16]
:0044243E 83FA0A                  cmp edx, 0000000A
:00442441 755C                    jne 0044249F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442427(C), :00442434(C)
|
:00442443 8B45F8                  mov eax, dword ptr [ebp-08]
:00442446 83E802                  sub eax, 00000002
:00442449 50                      push eax
:0044244A 6A00                    push 00000000
:0044244C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044244F 33D2                    xor edx, edx
:00442451 8A5111                  mov dl, byte ptr [ecx+11]
:00442454 8B45F4                  mov eax, dword ptr [ebp-0C]
:00442457 8A4C1046                mov cl, byte ptr [eax+edx+46]
:0044245B 51                      push ecx
:0044245C E8030A0000              call 00442E64
:00442461 83C40C                  add esp, 0000000C
:00442464 8B45F8                  mov eax, dword ptr [ebp-08]
:00442467 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00442469 B903000000              mov ecx, 00000003
:0044246E F7F1                    div ecx
:00442470 83FA02                  cmp edx, 00000002
:00442473 752A                    jne 0044249F
:00442475 8B55F4                  mov edx, dword ptr [ebp-0C]
:00442478 837A3400                cmp dword ptr [edx+34], 00000000
:0044247C 7415                    je 00442493
:0044247E 6A01                    push 00000001
:00442480 8B45F4                  mov eax, dword ptr [ebp-0C]
:00442483 33C9                    xor ecx, ecx
:00442485 8A4816                  mov cl, byte ptr [eax+16]
:00442488 51                      push ecx
:00442489 E819020000              call 004426A7
:0044248E 83C408                  add esp, 00000008
:00442491 EB0C                    jmp 0044249F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044247C(C)
|
:00442493 6A1F                    push 0000001F
:00442495 B9F8544B00              mov ecx, 004B54F8
:0044249A E87B700200              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442416(C), :00442441(C), :00442473(C), :00442491(U)
|
:0044249F 837DF803                cmp dword ptr [ebp-08], 00000003
:004424A3 7320                    jnb 004424C5
:004424A5 8B55F8                  mov edx, dword ptr [ebp-08]
:004424A8 52                      push edx
:004424A9 8B45F4                  mov eax, dword ptr [ebp-0C]
:004424AC 33C9                    xor ecx, ecx
:004424AE 8A4810                  mov cl, byte ptr [eax+10]
:004424B1 8B55F4                  mov edx, dword ptr [ebp-0C]
:004424B4 33C0                    xor eax, eax
:004424B6 8A440A46                mov al, byte ptr [edx+ecx+46]
:004424BA 50                      push eax
:004424BB E8FA080000              call 00442DBA
:004424C0 83C408                  add esp, 00000008
:004424C3 EB17                    jmp 004424DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004424A3(C)
|
:004424C5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004424C8 33D2                    xor edx, edx
:004424CA 8A5110                  mov dl, byte ptr [ecx+10]
:004424CD 8B45F4                  mov eax, dword ptr [ebp-0C]
:004424D0 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:004424D3 51                      push ecx
:004424D4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004424D7 E8C7FDFFFF              call 004422A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004424C3(U)
|
:004424DC E86DDCFCFF              call 0041014E
:004424E1 E8EAD0FEFF              call 0042F5D0
:004424E6 8B55F4                  mov edx, dword ptr [ebp-0C]
:004424E9 33C0                    xor eax, eax
:004424EB 8A4216                  mov al, byte ptr [edx+16]
:004424EE 83F808                  cmp eax, 00000008
:004424F1 751B                    jne 0044250E
:004424F3 8B45F8                  mov eax, dword ptr [ebp-08]
:004424F6 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004424F8 B903000000              mov ecx, 00000003
:004424FD F7F1                    div ecx
:004424FF 83FA02                  cmp edx, 00000002
:00442502 750A                    jne 0044250E

* Possible Reference to String Resource ID=00006: ""
                                  |
:00442504 6A06                    push 00000006
:00442506 E82BD2FEFF              call 0042F736
:0044250B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004424F1(C), :00442502(C)
|
:0044250E 8B45F8                  mov eax, dword ptr [ebp-08]
:00442511 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00442513 B903000000              mov ecx, 00000003
:00442518 F7F1                    div ecx
:0044251A 83FA02                  cmp edx, 00000002
:0044251D 0F8579010000            jne 0044269C
:00442523 8B55F4                  mov edx, dword ptr [ebp-0C]
:00442526 33C0                    xor eax, eax
:00442528 8A4216                  mov al, byte ptr [edx+16]
:0044252B 83F808                  cmp eax, 00000008
:0044252E 0F8468010000            je 0044269C
:00442534 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442537 33D2                    xor edx, edx
:00442539 8A5116                  mov dl, byte ptr [ecx+16]
:0044253C 83FA09                  cmp edx, 00000009
:0044253F 0F8457010000            je 0044269C
:00442545 8B45F4                  mov eax, dword ptr [ebp-0C]
:00442548 33C9                    xor ecx, ecx
:0044254A 8A4816                  mov cl, byte ptr [eax+16]
:0044254D 83F90A                  cmp ecx, 0000000A
:00442550 0F8446010000            je 0044269C
:00442556 E8D8DBFCFF              call 00410133
:0044255B 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044255D 6A04                    push 00000004
:0044255F 6A00                    push 00000000
:00442561 68006B0100              push 00016B00
:00442566 B9F0174B00              mov ecx, 004B17F0
:0044256B E8206A0300              call 00478F90
:00442570 50                      push eax
:00442571 6A40                    push 00000040
:00442573 6A40                    push 00000040
:00442575 8B550C                  mov edx, dword ptr [ebp+0C]
:00442578 52                      push edx
:00442579 8B4508                  mov eax, dword ptr [ebp+08]
:0044257C 50                      push eax
:0044257D E822860000              call 0044ABA4
:00442582 83C418                  add esp, 00000018
:00442585 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442588 33D2                    xor edx, edx
:0044258A 8A5110                  mov dl, byte ptr [ecx+10]
:0044258D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00442590 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:00442593 51                      push ecx
:00442594 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442597 E807FDFFFF              call 004422A3
:0044259C E8ADDBFCFF              call 0041014E
:004425A1 8B55F4                  mov edx, dword ptr [ebp-0C]
:004425A4 33C0                    xor eax, eax
:004425A6 8A4210                  mov al, byte ptr [edx+10]
:004425A9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004425AC 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:004425AF E84CD8FCFF              call 0040FE00
:004425B4 25FF000000              and eax, 000000FF
:004425B9 50                      push eax
:004425BA 8B55F4                  mov edx, dword ptr [ebp-0C]
:004425BD 33C0                    xor eax, eax
:004425BF 8A4216                  mov al, byte ptr [edx+16]
:004425C2 50                      push eax
:004425C3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004425C6 33D2                    xor edx, edx
:004425C8 8A5111                  mov dl, byte ptr [ecx+11]
:004425CB 8B45F4                  mov eax, dword ptr [ebp-0C]
:004425CE 33C9                    xor ecx, ecx
:004425D0 8A4C1046                mov cl, byte ptr [eax+edx+46]
:004425D4 51                      push ecx
:004425D5 8B55F4                  mov edx, dword ptr [ebp-0C]
:004425D8 33C0                    xor eax, eax
:004425DA 8A4210                  mov al, byte ptr [edx+10]
:004425DD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004425E0 33D2                    xor edx, edx
:004425E2 8A540146                mov dl, byte ptr [ecx+eax+46]
:004425E6 52                      push edx
:004425E7 E8E1010000              call 004427CD
:004425EC 83C410                  add esp, 00000010

* Possible Reference to String Resource ID=00006: ""
                                  |
:004425EF 6A06                    push 00000006
:004425F1 E8C5CFFEFF              call 0042F5BB
:004425F6 83C404                  add esp, 00000004
:004425F9 E835DBFCFF              call 00410133
:004425FE 6A00                    push 00000000
:00442600 6A00                    push 00000000
:00442602 8B45F4                  mov eax, dword ptr [ebp-0C]
:00442605 33C9                    xor ecx, ecx
:00442607 8A4811                  mov cl, byte ptr [eax+11]
:0044260A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044260D 8A440A46                mov al, byte ptr [edx+ecx+46]
:00442611 50                      push eax
:00442612 E84D080000              call 00442E64
:00442617 83C40C                  add esp, 0000000C
:0044261A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044261D 83793400                cmp dword ptr [ecx+34], 00000000
:00442621 7415                    je 00442638
:00442623 6A01                    push 00000001
:00442625 8B55F4                  mov edx, dword ptr [ebp-0C]
:00442628 33C0                    xor eax, eax
:0044262A 8A4216                  mov al, byte ptr [edx+16]
:0044262D 50                      push eax
:0044262E E874000000              call 004426A7
:00442633 83C408                  add esp, 00000008
:00442636 EB0C                    jmp 00442644

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442621(C)
|
:00442638 6A1F                    push 0000001F
:0044263A B9F8544B00              mov ecx, 004B54F8
:0044263F E8D66E0200              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442636(U)
|
:00442644 E805DBFCFF              call 0041014E
:00442649 E882CFFEFF              call 0042F5D0

* Possible Reference to String Resource ID=00006: ""
                                  |
:0044264E 6A06                    push 00000006
:00442650 E8E1D0FEFF              call 0042F736
:00442655 83C404                  add esp, 00000004
:00442658 6A01                    push 00000001
:0044265A 6A00                    push 00000000
:0044265C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044265F 33D2                    xor edx, edx
:00442661 8A5111                  mov dl, byte ptr [ecx+11]
:00442664 8B45F4                  mov eax, dword ptr [ebp-0C]
:00442667 8A4C1046                mov cl, byte ptr [eax+edx+46]
:0044266B 51                      push ecx
:0044266C E8F3070000              call 00442E64
:00442671 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442674 6A04                    push 00000004
:00442676 6A00                    push 00000000
:00442678 68006B0100              push 00016B00
:0044267D B9F0174B00              mov ecx, 004B17F0
:00442682 E809690300              call 00478F90
:00442687 50                      push eax
:00442688 6A40                    push 00000040
:0044268A 6A40                    push 00000040
:0044268C 8B550C                  mov edx, dword ptr [ebp+0C]
:0044268F 52                      push edx
:00442690 8B4508                  mov eax, dword ptr [ebp+08]
:00442693 50                      push eax
:00442694 E8CC850000              call 0044AC65
:00442699 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044251D(C), :0044252E(C), :0044253F(C), :00442550(C)
|
:0044269C E91AFDFFFF              jmp 004423BB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004423C8(C)
|
:004426A1 8BE5                    mov esp, ebp
:004426A3 5D                      pop ebp
:004426A4 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004423AA   , :00442489   , :0044262E   , :00442976   , :00444312   
|:0044463A   , :00444684   
|
:004426A7 55                      push ebp
:004426A8 8BEC                    mov ebp, esp
:004426AA 83EC08                  sub esp, 00000008
:004426AD 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004426B1 7564                    jne 00442717
:004426B3 8B4508                  mov eax, dword ptr [ebp+08]
:004426B6 8945FC                  mov dword ptr [ebp-04], eax
:004426B9 837DFC0A                cmp dword ptr [ebp-04], 0000000A
:004426BD 7756                    ja 00442715
:004426BF 8B55FC                  mov edx, dword ptr [ebp-04]
:004426C2 33C9                    xor ecx, ecx
:004426C4 8A8A9F274400            mov cl, byte ptr [edx+0044279F]
:004426CA FF248D87274400          jmp dword ptr [4*ecx+00442787]
:004426D1 6A19                    push 00000019
:004426D3 B9F8544B00              mov ecx, 004B54F8
:004426D8 E83D6E0200              call 0046951A
:004426DD EB36                    jmp 00442715

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:004426DF 6A1A                    push 0000001A
:004426E1 B9F8544B00              mov ecx, 004B54F8
:004426E6 E82F6E0200              call 0046951A
:004426EB EB28                    jmp 00442715
:004426ED 6A1B                    push 0000001B
:004426EF B9F8544B00              mov ecx, 004B54F8
:004426F4 E8216E0200              call 0046951A
:004426F9 EB1A                    jmp 00442715
:004426FB 6A1C                    push 0000001C
:004426FD B9F8544B00              mov ecx, 004B54F8
:00442702 E8136E0200              call 0046951A
:00442707 EB0C                    jmp 00442715
:00442709 6A1D                    push 0000001D
:0044270B B9F8544B00              mov ecx, 004B54F8
:00442710 E8056E0200              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004426BD(C), :004426DD(U), :004426EB(U), :004426F9(U), :00442707(U)
|
:00442715 EB6C                    jmp 00442783

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004426B1(C)
|
:00442717 B9F8544B00              mov ecx, 004B54F8
:0044271C E8D16D0200              call 004694F2
:00442721 8B4508                  mov eax, dword ptr [ebp+08]
:00442724 8945F8                  mov dword ptr [ebp-08], eax
:00442727 837DF80A                cmp dword ptr [ebp-08], 0000000A
:0044272B 7756                    ja 00442783
:0044272D 8B55F8                  mov edx, dword ptr [ebp-08]
:00442730 33C9                    xor ecx, ecx
:00442732 8A8AC2274400            mov cl, byte ptr [edx+004427C2]
:00442738 FF248DAA274400          jmp dword ptr [4*ecx+004427AA]
:0044273F 6A23                    push 00000023
:00442741 B9F8544B00              mov ecx, 004B54F8
:00442746 E8CF6D0200              call 0046951A
:0044274B EB36                    jmp 00442783
:0044274D 6A25                    push 00000025
:0044274F B9F8544B00              mov ecx, 004B54F8
:00442754 E8C16D0200              call 0046951A
:00442759 EB28                    jmp 00442783
:0044275B 6A21                    push 00000021
:0044275D B9F8544B00              mov ecx, 004B54F8
:00442762 E8B36D0200              call 0046951A
:00442767 EB1A                    jmp 00442783
:00442769 6A20                    push 00000020
:0044276B B9F8544B00              mov ecx, 004B54F8
:00442770 E8A56D0200              call 0046951A
:00442775 EB0C                    jmp 00442783
:00442777 6A26                    push 00000026
:00442779 B9F8544B00              mov ecx, 004B54F8
:0044277E E8976D0200              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442715(U), :0044272B(C), :0044274B(U), :00442759(U), :00442767(U)
|:00442775(U)
|
:00442783 8BE5                    mov esp, ebp
:00442785 5D                      pop ebp
:00442786 C3                      ret



:00442787 DF264400                DWORD 004426DF
:0044278B ED264400                DWORD 004426ED
:0044278F FB264400                DWORD 004426FB
:00442793 09274400                DWORD 00442709
:00442797 D1264400                DWORD 004426D1
:0044279B 15274400                DWORD 00442715


:0044279F 000000                  BYTE  3 DUP(0)


:004427A2 0102                    add dword ptr [edx], eax
:004427A4 030505040404            add eax, dword ptr [04040405]

:004427AA 5B274400                DWORD 0044275B
:004427AE 69274400                DWORD 00442769
:004427B2 77274400                DWORD 00442777
:004427B6 3F274400                DWORD 0044273F
:004427BA 4D274400                DWORD 0044274D
:004427BE 83274400                DWORD 00442783


:004427C2 0001                    add byte ptr [ecx], al
:004427C4 0102                    add dword ptr [edx], eax
:004427C6 0202                    add al, byte ptr [edx]
:004427C8 0505030304              add eax, 04030305

* Referenced by a CALL at Address:
|:004425E7   
|
:004427CD 55                      push ebp
:004427CE 8BEC                    mov ebp, esp
:004427D0 83EC38                  sub esp, 00000038
:004427D3 56                      push esi
:004427D4 8B4514                  mov eax, dword ptr [ebp+14]
:004427D7 50                      push eax
:004427D8 8B4D10                  mov ecx, dword ptr [ebp+10]
:004427DB 51                      push ecx
:004427DC E81F040000              call 00442C00
:004427E1 83C408                  add esp, 00000008
:004427E4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004427E7 6BC924                  imul ecx, 00000024
:004427EA 81C1B83B4B00            add ecx, 004B3BB8
:004427F0 E84BF4FEFF              call 00431C40
:004427F5 668B10                  mov dx, word ptr [eax]
:004427F8 668955F4                mov word ptr [ebp-0C], dx
:004427FC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004427FF 6BC924                  imul ecx, 00000024
:00442802 81C1B83B4B00            add ecx, 004B3BB8
:00442808 E833F4FEFF              call 00431C40
:0044280D 668B00                  mov ax, word ptr [eax]
:00442810 668945E0                mov word ptr [ebp-20], ax
:00442814 837D1401                cmp dword ptr [ebp+14], 00000001
:00442818 7509                    jne 00442823
:0044281A C745CC01000000          mov [ebp-34], 00000001
:00442821 EB0D                    jmp 00442830

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442818(C)
|
:00442823 33C9                    xor ecx, ecx
:00442825 837D1403                cmp dword ptr [ebp+14], 00000003
:00442829 0F95C1                  setne cl
:0044282C 49                      dec ecx
:0044282D 894DCC                  mov dword ptr [ebp-34], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442821(U)
|
:00442830 8B55CC                  mov edx, dword ptr [ebp-34]
:00442833 8955E4                  mov dword ptr [ebp-1C], edx
:00442836 837D1402                cmp dword ptr [ebp+14], 00000002
:0044283A 7509                    jne 00442845
:0044283C C745C801000000          mov [ebp-38], 00000001
:00442843 EB0D                    jmp 00442852

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044283A(C)
|
:00442845 8B4514                  mov eax, dword ptr [ebp+14]
:00442848 F7D8                    neg eax
:0044284A 1BC0                    sbb eax, eax
:0044284C F7D8                    neg eax
:0044284E 48                      dec eax
:0044284F 8945C8                  mov dword ptr [ebp-38], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442843(U)
|
:00442852 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00442855 894DF8                  mov dword ptr [ebp-08], ecx
:00442858 8B75F4                  mov esi, dword ptr [ebp-0C]
:0044285B 81E6FF000000            and esi, 000000FF
:00442861 6BF603                  imul esi, 00000003
:00442864 B958494B00              mov ecx, 004B4958
:00442869 E8A4840000              call 0044AD12
:0044286E 2BF0                    sub esi, eax
:00442870 0375E4                  add esi, dword ptr [ebp-1C]
:00442873 C1E604                  shl esi, 04
:00442876 8975FC                  mov dword ptr [ebp-04], esi
:00442879 8B75F5                  mov esi, dword ptr [ebp-0B]
:0044287C 81E6FF000000            and esi, 000000FF
:00442882 6BF603                  imul esi, 00000003
:00442885 83C602                  add esi, 00000002
:00442888 B958494B00              mov ecx, 004B4958
:0044288D E891840000              call 0044AD23
:00442892 2BF0                    sub esi, eax
:00442894 0375F8                  add esi, dword ptr [ebp-08]
:00442897 C1E604                  shl esi, 04
:0044289A 83C608                  add esi, 00000008
:0044289D 8975DC                  mov dword ptr [ebp-24], esi
:004428A0 8B75E0                  mov esi, dword ptr [ebp-20]
:004428A3 81E6FF000000            and esi, 000000FF
:004428A9 6BF603                  imul esi, 00000003
:004428AC B958494B00              mov ecx, 004B4958
:004428B1 E85C840000              call 0044AD12
:004428B6 2BF0                    sub esi, eax
:004428B8 2B75E4                  sub esi, dword ptr [ebp-1C]
:004428BB C1E604                  shl esi, 04
:004428BE 8975EC                  mov dword ptr [ebp-14], esi
:004428C1 8B75E1                  mov esi, dword ptr [ebp-1F]
:004428C4 81E6FF000000            and esi, 000000FF
:004428CA 6BF603                  imul esi, 00000003
:004428CD 83C602                  add esi, 00000002
:004428D0 B958494B00              mov ecx, 004B4958
:004428D5 E849840000              call 0044AD23
:004428DA 2BF0                    sub esi, eax
:004428DC 2B75F8                  sub esi, dword ptr [ebp-08]
:004428DF C1E604                  shl esi, 04
:004428E2 83C608                  add esi, 00000008
:004428E5 8975D4                  mov dword ptr [ebp-2C], esi

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004428E8 6A08                    push 00000008
:004428EA E8C15A0300              call 004783B0
:004428EF 83C404                  add esp, 00000004
:004428F2 8BF0                    mov esi, eax
:004428F4 C1EE02                  shr esi, 02
:004428F7 6BF6FF                  imul esi, FFFFFFFF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004428FA 6A08                    push 00000008
:004428FC E8AF5A0300              call 004783B0
:00442901 83C404                  add esp, 00000004
:00442904 0FAFF0                  imul esi, eax
:00442907 8975F0                  mov dword ptr [ebp-10], esi

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044290A 6A08                    push 00000008
:0044290C E89F5A0300              call 004783B0
:00442911 83C404                  add esp, 00000004
:00442914 8BF0                    mov esi, eax
:00442916 C1EE02                  shr esi, 02
:00442919 6BF6FF                  imul esi, FFFFFFFF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044291C 6A08                    push 00000008
:0044291E E88D5A0300              call 004783B0
:00442923 83C404                  add esp, 00000004
:00442926 0FAFF0                  imul esi, eax
:00442929 8975D8                  mov dword ptr [ebp-28], esi

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044292C 6A08                    push 00000008
:0044292E E87D5A0300              call 004783B0
:00442933 83C404                  add esp, 00000004
:00442936 8BF0                    mov esi, eax
:00442938 C1EE02                  shr esi, 02
:0044293B 6BF6FF                  imul esi, FFFFFFFF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044293E 6A08                    push 00000008
:00442940 E86B5A0300              call 004783B0
:00442945 83C404                  add esp, 00000004
:00442948 0FAFF0                  imul esi, eax
:0044294B 8975E8                  mov dword ptr [ebp-18], esi

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044294E 6A08                    push 00000008
:00442950 E85B5A0300              call 004783B0
:00442955 83C404                  add esp, 00000004
:00442958 8BF0                    mov esi, eax
:0044295A C1EE02                  shr esi, 02
:0044295D 6BF6FF                  imul esi, FFFFFFFF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00442960 6A08                    push 00000008
:00442962 E8495A0300              call 004783B0
:00442967 83C404                  add esp, 00000004
:0044296A 0FAFF0                  imul esi, eax
:0044296D 8975D0                  mov dword ptr [ebp-30], esi
:00442970 6A00                    push 00000000
:00442972 8B5510                  mov edx, dword ptr [ebp+10]
:00442975 52                      push edx
:00442976 E82CFDFFFF              call 004426A7
:0044297B 83C408                  add esp, 00000008
:0044297E 8B4510                  mov eax, dword ptr [ebp+10]
:00442981 50                      push eax
:00442982 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00442985 034DD0                  add ecx, dword ptr [ebp-30]
:00442988 51                      push ecx
:00442989 8B55EC                  mov edx, dword ptr [ebp-14]
:0044298C 0355E8                  add edx, dword ptr [ebp-18]
:0044298F 52                      push edx
:00442990 8B45DC                  mov eax, dword ptr [ebp-24]
:00442993 0345D8                  add eax, dword ptr [ebp-28]
:00442996 50                      push eax
:00442997 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044299A 034DF0                  add ecx, dword ptr [ebp-10]
:0044299D 51                      push ecx
:0044299E E808000000              call 004429AB
:004429A3 83C414                  add esp, 00000014
:004429A6 5E                      pop esi
:004429A7 8BE5                    mov esp, ebp
:004429A9 5D                      pop ebp
:004429AA C3                      ret



* Referenced by a CALL at Address:
|:0044299E   
|
:004429AB 55                      push ebp
:004429AC 8BEC                    mov ebp, esp
:004429AE 83EC24                  sub esp, 00000024
:004429B1 8B4510                  mov eax, dword ptr [ebp+10]
:004429B4 2B4508                  sub eax, dword ptr [ebp+08]
:004429B7 8945E8                  mov dword ptr [ebp-18], eax
:004429BA 8B4D14                  mov ecx, dword ptr [ebp+14]
:004429BD 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:004429C0 894DE4                  mov dword ptr [ebp-1C], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004429C3 6A04                    push 00000004
:004429C5 6A00                    push 00000000
:004429C7 6800300000              push 00003000
:004429CC B9F0174B00              mov ecx, 004B17F0
:004429D1 E8BA650300              call 00478F90
:004429D6 8945EC                  mov dword ptr [ebp-14], eax
:004429D9 8B55E8                  mov edx, dword ptr [ebp-18]
:004429DC 0FAF55E8                imul edx, dword ptr [ebp-18]
:004429E0 8B45E4                  mov eax, dword ptr [ebp-1C]
:004429E3 0FAF45E4                imul eax, dword ptr [ebp-1C]
:004429E7 3BD0                    cmp edx, eax
:004429E9 0F8E09010000            jle 00442AF8
:004429EF 8B45E4                  mov eax, dword ptr [ebp-1C]
:004429F2 6BC064                  imul eax, 00000064
:004429F5 99                      cdq
:004429F6 F77DE8                  idiv [ebp-18]
:004429F9 8945F4                  mov dword ptr [ebp-0C], eax
:004429FC 33C9                    xor ecx, ecx
:004429FE 837DE800                cmp dword ptr [ebp-18], 00000000
:00442A02 0F9EC1                  setle cl
:00442A05 49                      dec ecx
:00442A06 83E110                  and ecx, 00000010
:00442A09 83C1F8                  add ecx, FFFFFFF8
:00442A0C 894DF0                  mov dword ptr [ebp-10], ecx
:00442A0F C745E000000000          mov [ebp-20], 00000000
:00442A16 EB09                    jmp 00442A21

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442AEE(U)
|
:00442A18 8B55E0                  mov edx, dword ptr [ebp-20]
:00442A1B 0355F0                  add edx, dword ptr [ebp-10]
:00442A1E 8955E0                  mov dword ptr [ebp-20], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442A16(U)
|
:00442A21 837DF000                cmp dword ptr [ebp-10], 00000000
:00442A25 7E0D                    jle 00442A34
:00442A27 8B45E0                  mov eax, dword ptr [ebp-20]
:00442A2A 3B45E8                  cmp eax, dword ptr [ebp-18]
:00442A2D 7E05                    jle 00442A34
:00442A2F E9BF000000              jmp 00442AF3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442A25(C), :00442A2D(C)
|
:00442A34 837DF000                cmp dword ptr [ebp-10], 00000000
:00442A38 7D0D                    jge 00442A47
:00442A3A 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00442A3D 3B4DE8                  cmp ecx, dword ptr [ebp-18]
:00442A40 7D05                    jge 00442A47
:00442A42 E9AC000000              jmp 00442AF3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442A38(C), :00442A40(C)
|
:00442A47 6A01                    push 00000001
:00442A49 B9A83B4B00              mov ecx, 004B3BA8
:00442A4E E8BDCEFDFF              call 0041F910
:00442A53 E8DBD6FCFF              call 00410133
:00442A58 8B45F4                  mov eax, dword ptr [ebp-0C]
:00442A5B 0FAF45E0                imul eax, dword ptr [ebp-20]
:00442A5F 99                      cdq
:00442A60 B964000000              mov ecx, 00000064
:00442A65 F7F9                    idiv ecx
:00442A67 8B550C                  mov edx, dword ptr [ebp+0C]
:00442A6A 03D0                    add edx, eax
:00442A6C 8955F8                  mov dword ptr [ebp-08], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442A6F 6A04                    push 00000004
:00442A71 6A00                    push 00000000
:00442A73 68007B0100              push 00017B00
:00442A78 B9F0174B00              mov ecx, 004B17F0
:00442A7D E80E650300              call 00478F90
:00442A82 50                      push eax
:00442A83 6A30                    push 00000030
:00442A85 6A30                    push 00000030
:00442A87 8B45F8                  mov eax, dword ptr [ebp-08]
:00442A8A 50                      push eax
:00442A8B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442A8E 034DE0                  add ecx, dword ptr [ebp-20]
:00442A91 51                      push ecx
:00442A92 E8CE810000              call 0044AC65
:00442A97 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442A9A 6A04                    push 00000004
:00442A9C 8B55EC                  mov edx, dword ptr [ebp-14]
:00442A9F 52                      push edx
:00442AA0 6A30                    push 00000030
:00442AA2 6A30                    push 00000030
:00442AA4 8B45F8                  mov eax, dword ptr [ebp-08]
:00442AA7 50                      push eax
:00442AA8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442AAB 034DE0                  add ecx, dword ptr [ebp-20]
:00442AAE 51                      push ecx
:00442AAF E8F0800000              call 0044ABA4
:00442AB4 83C418                  add esp, 00000018
:00442AB7 E892D6FCFF              call 0041014E
:00442ABC E80FCBFEFF              call 0042F5D0
:00442AC1 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442AC3 6A04                    push 00000004
:00442AC5 6A00                    push 00000000
:00442AC7 68007B0100              push 00017B00
:00442ACC B9F0174B00              mov ecx, 004B17F0
:00442AD1 E8BA640300              call 00478F90
:00442AD6 50                      push eax
:00442AD7 6A30                    push 00000030
:00442AD9 6A30                    push 00000030
:00442ADB 8B55F8                  mov edx, dword ptr [ebp-08]
:00442ADE 52                      push edx
:00442ADF 8B4508                  mov eax, dword ptr [ebp+08]
:00442AE2 0345E0                  add eax, dword ptr [ebp-20]
:00442AE5 50                      push eax
:00442AE6 E8B9800000              call 0044ABA4
:00442AEB 83C418                  add esp, 00000018
:00442AEE E925FFFFFF              jmp 00442A18

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442A2F(U), :00442A42(U)
|
:00442AF3 E904010000              jmp 00442BFC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004429E9(C)
|
:00442AF8 8B45E8                  mov eax, dword ptr [ebp-18]
:00442AFB 6BC064                  imul eax, 00000064
:00442AFE 99                      cdq
:00442AFF F77DE4                  idiv [ebp-1C]
:00442B02 8945F4                  mov dword ptr [ebp-0C], eax
:00442B05 33C9                    xor ecx, ecx
:00442B07 837DE400                cmp dword ptr [ebp-1C], 00000000
:00442B0B 0F9EC1                  setle cl
:00442B0E 49                      dec ecx
:00442B0F 83E110                  and ecx, 00000010
:00442B12 83C1F8                  add ecx, FFFFFFF8
:00442B15 894DF0                  mov dword ptr [ebp-10], ecx
:00442B18 C745DC00000000          mov [ebp-24], 00000000
:00442B1F EB09                    jmp 00442B2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442BF7(U)
|
:00442B21 8B55DC                  mov edx, dword ptr [ebp-24]
:00442B24 0355F0                  add edx, dword ptr [ebp-10]
:00442B27 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442B1F(U)
|
:00442B2A 837DF000                cmp dword ptr [ebp-10], 00000000
:00442B2E 7E0D                    jle 00442B3D
:00442B30 8B45DC                  mov eax, dword ptr [ebp-24]
:00442B33 3B45E4                  cmp eax, dword ptr [ebp-1C]
:00442B36 7E05                    jle 00442B3D
:00442B38 E9BF000000              jmp 00442BFC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442B2E(C), :00442B36(C)
|
:00442B3D 837DF000                cmp dword ptr [ebp-10], 00000000
:00442B41 7D0D                    jge 00442B50
:00442B43 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00442B46 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:00442B49 7D05                    jge 00442B50
:00442B4B E9AC000000              jmp 00442BFC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442B41(C), :00442B49(C)
|
:00442B50 6A01                    push 00000001
:00442B52 B9A83B4B00              mov ecx, 004B3BA8
:00442B57 E8B4CDFDFF              call 0041F910
:00442B5C E8D2D5FCFF              call 00410133
:00442B61 8B45F4                  mov eax, dword ptr [ebp-0C]
:00442B64 0FAF45DC                imul eax, dword ptr [ebp-24]
:00442B68 99                      cdq
:00442B69 B964000000              mov ecx, 00000064
:00442B6E F7F9                    idiv ecx
:00442B70 8B5508                  mov edx, dword ptr [ebp+08]
:00442B73 03D0                    add edx, eax
:00442B75 8955FC                  mov dword ptr [ebp-04], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442B78 6A04                    push 00000004
:00442B7A 6A00                    push 00000000
:00442B7C 68007B0100              push 00017B00
:00442B81 B9F0174B00              mov ecx, 004B17F0
:00442B86 E805640300              call 00478F90
:00442B8B 50                      push eax
:00442B8C 6A30                    push 00000030
:00442B8E 6A30                    push 00000030
:00442B90 8B450C                  mov eax, dword ptr [ebp+0C]
:00442B93 0345DC                  add eax, dword ptr [ebp-24]
:00442B96 50                      push eax
:00442B97 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442B9A 51                      push ecx
:00442B9B E8C5800000              call 0044AC65
:00442BA0 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442BA3 6A04                    push 00000004
:00442BA5 8B55EC                  mov edx, dword ptr [ebp-14]
:00442BA8 52                      push edx
:00442BA9 6A30                    push 00000030
:00442BAB 6A30                    push 00000030
:00442BAD 8B450C                  mov eax, dword ptr [ebp+0C]
:00442BB0 0345DC                  add eax, dword ptr [ebp-24]
:00442BB3 50                      push eax
:00442BB4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00442BB7 51                      push ecx
:00442BB8 E8E77F0000              call 0044ABA4
:00442BBD 83C418                  add esp, 00000018
:00442BC0 E889D5FCFF              call 0041014E
:00442BC5 E806CAFEFF              call 0042F5D0
:00442BCA 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442BCC 6A04                    push 00000004
:00442BCE 6A00                    push 00000000
:00442BD0 68007B0100              push 00017B00
:00442BD5 B9F0174B00              mov ecx, 004B17F0
:00442BDA E8B1630300              call 00478F90
:00442BDF 50                      push eax
:00442BE0 6A30                    push 00000030
:00442BE2 6A30                    push 00000030
:00442BE4 8B550C                  mov edx, dword ptr [ebp+0C]
:00442BE7 0355DC                  add edx, dword ptr [ebp-24]
:00442BEA 52                      push edx
:00442BEB 8B45FC                  mov eax, dword ptr [ebp-04]
:00442BEE 50                      push eax
:00442BEF E8B07F0000              call 0044ABA4
:00442BF4 83C418                  add esp, 00000018
:00442BF7 E925FFFFFF              jmp 00442B21

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442AF3(U), :00442B38(U), :00442B4B(U)
|
:00442BFC 8BE5                    mov esp, ebp
:00442BFE 5D                      pop ebp
:00442BFF C3                      ret



* Referenced by a CALL at Address:
|:004427DC   
|
:00442C00 55                      push ebp
:00442C01 8BEC                    mov ebp, esp
:00442C03 6AFF                    push FFFFFFFF
:00442C05 687C984700              push 0047987C
:00442C0A 64A100000000            mov eax, dword ptr fs:[00000000]
:00442C10 50                      push eax
:00442C11 64892500000000          mov dword ptr fs:[00000000], esp
:00442C18 81EC14010000            sub esp, 00000114
:00442C1E C745F000000000          mov [ebp-10], 00000000
:00442C25 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:00442C2F 8B4508                  mov eax, dword ptr [ebp+08]
:00442C32 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:00442C38 83BDE4FEFFFF05          cmp dword ptr [ebp+FFFFFEE4], 00000005
:00442C3F 7778                    ja 00442CB9
:00442C41 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:00442C47 FF248DA22D4400          jmp dword ptr [4*ecx+00442DA2]
:00442C4E 8B550C                  mov edx, dword ptr [ebp+0C]
:00442C51 8995E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], edx
:00442C57 83BDE0FEFFFF00          cmp dword ptr [ebp+FFFFFEE0], 00000000
:00442C5E 7414                    je 00442C74
:00442C60 83BDE0FEFFFF01          cmp dword ptr [ebp+FFFFFEE0], 00000001
:00442C67 7419                    je 00442C82
:00442C69 83BDE0FEFFFF03          cmp dword ptr [ebp+FFFFFEE0], 00000003
:00442C70 7417                    je 00442C89
:00442C72 EB26                    jmp 00442C9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442C5E(C)
|
:00442C74 8B4508                  mov eax, dword ptr [ebp+08]
:00442C77 6BC003                  imul eax, 00000003
:00442C7A 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:00442C80 EB27                    jmp 00442CA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442C67(C)
|
:00442C82 C745F001000000          mov [ebp-10], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442C70(C)
|
:00442C89 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442C8C 6BC903                  imul ecx, 00000003
:00442C8F 83C102                  add ecx, 00000002
:00442C92 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx
:00442C98 EB0F                    jmp 00442CA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442C72(U)
|
:00442C9A 8B5508                  mov edx, dword ptr [ebp+08]
:00442C9D 6BD203                  imul edx, 00000003
:00442CA0 83C201                  add edx, 00000001
:00442CA3 8995E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442C80(U), :00442C98(U)
|
:00442CA9 EB13                    jmp 00442CBE
:00442CAB 8B4508                  mov eax, dword ptr [ebp+08]
:00442CAE 83C006                  add eax, 00000006
:00442CB1 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:00442CB7 EB05                    jmp 00442CBE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442C3F(C)
|
:00442CB9 E9D6000000              jmp 00442D94

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00442CA9(U), :00442CB7(U)
|
:00442CBE 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00442CC4 E87729FCFF              call 00405640
:00442CC9 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"SARM.E3"
                                  |
:00442CD0 6838D54700              push 0047D538
:00442CD5 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00442CDB E8F5E4FCFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442CE0 6A04                    push 00000004
:00442CE2 6A00                    push 00000000
:00442CE4 68007B0100              push 00017B00
:00442CE9 B9F0174B00              mov ecx, 004B17F0
:00442CEE E89D620300              call 00478F90
:00442CF3 50                      push eax
:00442CF4 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00442CFA 51                      push ecx
:00442CFB 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00442D01 E823E6FCFF              call 00411329
:00442D06 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00442D0C E814AFFCFF              call 0040DC25
:00442D11 837DF000                cmp dword ptr [ebp-10], 00000000
:00442D15 7436                    je 00442D4D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442D17 6A04                    push 00000004
:00442D19 6A00                    push 00000000
:00442D1B 6800300000              push 00003000
:00442D20 B9F0174B00              mov ecx, 004B17F0
:00442D25 E866620300              call 00478F90
:00442D2A 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442D2B 6A04                    push 00000004
:00442D2D 6A00                    push 00000000
:00442D2F 68007B0100              push 00017B00
:00442D34 B9F0174B00              mov ecx, 004B17F0
:00442D39 E852620300              call 00478F90
:00442D3E 50                      push eax
:00442D3F 6A30                    push 00000030
:00442D41 6A30                    push 00000030
:00442D43 E826D8FCFF              call 0041056E
:00442D48 83C410                  add esp, 00000010
:00442D4B EB35                    jmp 00442D82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442D15(C)
|
:00442D4D 6800090000              push 00000900

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442D52 6A04                    push 00000004
:00442D54 6A00                    push 00000000
:00442D56 6800300000              push 00003000
:00442D5B B9F0174B00              mov ecx, 004B17F0
:00442D60 E82B620300              call 00478F90
:00442D65 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442D66 6A04                    push 00000004
:00442D68 6A00                    push 00000000
:00442D6A 68007B0100              push 00017B00
:00442D6F B9F0174B00              mov ecx, 004B17F0
:00442D74 E817620300              call 00478F90
:00442D79 50                      push eax
:00442D7A E841580300              call 004785C0
:00442D7F 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442D4B(U)
|
:00442D82 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00442D89 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00442D8F E8CC28FCFF              call 00405660

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442CB9(U)
|
:00442D94 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442D97 64890D00000000          mov dword ptr fs:[00000000], ecx
:00442D9E 8BE5                    mov esp, ebp
:00442DA0 5D                      pop ebp
:00442DA1 C3                      ret



:00442DA2 4E2C4400                DWORD 00442C4E
:00442DA6 4E2C4400                DWORD 00442C4E
:00442DAA 4E2C4400                DWORD 00442C4E
:00442DAE AB2C4400                DWORD 00442CAB
:00442DB2 AB2C4400                DWORD 00442CAB
:00442DB6 AB2C4400                DWORD 00442CAB



* Referenced by a CALL at Address:
|:004424BB   
|
:00442DBA 55                      push ebp
:00442DBB 8BEC                    mov ebp, esp
:00442DBD 83EC10                  sub esp, 00000010
:00442DC0 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00442DC3 E82829FCFF              call 004056F0
:00442DC8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442DCB 6BC924                  imul ecx, 00000024
:00442DCE 81C1B83B4B00            add ecx, 004B3BB8
:00442DD4 E867EEFEFF              call 00431C40
:00442DD9 668B00                  mov ax, word ptr [eax]
:00442DDC 50                      push eax
:00442DDD 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00442DE0 51                      push ecx
:00442DE1 E8697D0000              call 0044AB4F
:00442DE6 83C408                  add esp, 00000008
:00442DE9 50                      push eax
:00442DEA 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00442DED E8AE3CFFFF              call 00436AA0
:00442DF2 8B55FC                  mov edx, dword ptr [ebp-04]
:00442DF5 81E2FF000000            and edx, 000000FF
:00442DFB C1E204                  shl edx, 04
:00442DFE 8955F8                  mov dword ptr [ebp-08], edx
:00442E01 8B45FD                  mov eax, dword ptr [ebp-03]
:00442E04 25FF000000              and eax, 000000FF
:00442E09 C1E004                  shl eax, 04
:00442E0C 83C028                  add eax, 00000028
:00442E0F 8945F4                  mov dword ptr [ebp-0C], eax
:00442E12 8B4DFD                  mov ecx, dword ptr [ebp-03]
:00442E15 81E1FF000000            and ecx, 000000FF
:00442E1B 51                      push ecx
:00442E1C 8B55FC                  mov edx, dword ptr [ebp-04]
:00442E1F 81E2FF000000            and edx, 000000FF
:00442E25 52                      push edx
:00442E26 E857F2FFFF              call 00442082
:00442E2B 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442E2E 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442E30 6A04                    push 00000004
:00442E32 6A00                    push 00000000
:00442E34 8B450C                  mov eax, dword ptr [ebp+0C]
:00442E37 C1E00C                  shl eax, 0C
:00442E3A 50                      push eax
:00442E3B B9F0174B00              mov ecx, 004B17F0
:00442E40 E84B610300              call 00478F90
:00442E45 50                      push eax
:00442E46 6A40                    push 00000040
:00442E48 6A40                    push 00000040
:00442E4A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442E4D 83E908                  sub ecx, 00000008
:00442E50 51                      push ecx
:00442E51 8B55F8                  mov edx, dword ptr [ebp-08]
:00442E54 83EA08                  sub edx, 00000008
:00442E57 52                      push edx
:00442E58 E8477D0000              call 0044ABA4
:00442E5D 83C418                  add esp, 00000018
:00442E60 8BE5                    mov esp, ebp
:00442E62 5D                      pop ebp
:00442E63 C3                      ret



* Referenced by a CALL at Addresses:
|:0044245C   , :00442612   , :0044266C   , :0044461E   , :00444666   
|
:00442E64 55                      push ebp
:00442E65 8BEC                    mov ebp, esp
:00442E67 8B4510                  mov eax, dword ptr [ebp+10]
:00442E6A 50                      push eax
:00442E6B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00442E6E D1E1                    shl ecx, 1
:00442E70 51                      push ecx
:00442E71 8B5508                  mov edx, dword ptr [ebp+08]
:00442E74 81E2FF000000            and edx, 000000FF
:00442E7A 52                      push edx
:00442E7B E805000000              call 00442E85
:00442E80 83C40C                  add esp, 0000000C
:00442E83 5D                      pop ebp
:00442E84 C3                      ret



* Referenced by a CALL at Address:
|:00442E7B   
|
:00442E85 55                      push ebp
:00442E86 8BEC                    mov ebp, esp
:00442E88 83EC10                  sub esp, 00000010
:00442E8B 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00442E8E E85D28FCFF              call 004056F0
:00442E93 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442E96 6BC924                  imul ecx, 00000024
:00442E99 81C1B83B4B00            add ecx, 004B3BB8
:00442E9F E89CEDFEFF              call 00431C40
:00442EA4 668B00                  mov ax, word ptr [eax]
:00442EA7 50                      push eax
:00442EA8 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00442EAB 51                      push ecx
:00442EAC E89E7C0000              call 0044AB4F
:00442EB1 83C408                  add esp, 00000008
:00442EB4 50                      push eax
:00442EB5 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00442EB8 E8E33BFFFF              call 00436AA0
:00442EBD 8B55FC                  mov edx, dword ptr [ebp-04]
:00442EC0 81E2FF000000            and edx, 000000FF
:00442EC6 C1E204                  shl edx, 04
:00442EC9 8955F8                  mov dword ptr [ebp-08], edx
:00442ECC 8B45FD                  mov eax, dword ptr [ebp-03]
:00442ECF 25FF000000              and eax, 000000FF
:00442ED4 C1E004                  shl eax, 04
:00442ED7 83C028                  add eax, 00000028
:00442EDA 8945F4                  mov dword ptr [ebp-0C], eax
:00442EDD 8B4DFD                  mov ecx, dword ptr [ebp-03]
:00442EE0 81E1FF000000            and ecx, 000000FF
:00442EE6 51                      push ecx
:00442EE7 8B55FC                  mov edx, dword ptr [ebp-04]
:00442EEA 81E2FF000000            and edx, 000000FF
:00442EF0 52                      push edx
:00442EF1 E88CF1FFFF              call 00442082
:00442EF6 83C408                  add esp, 00000008
:00442EF9 6A10                    push 00000010
:00442EFB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00442EFE 6BC924                  imul ecx, 00000024
:00442F01 81C1B83B4B00            add ecx, 004B3BB8
:00442F07 E8643BFFFF              call 00436A70
:00442F0C 85C0                    test eax, eax
:00442F0E 7539                    jne 00442F49

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442F10 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442F12 6A04                    push 00000004
:00442F14 6A00                    push 00000000
:00442F16 8B450C                  mov eax, dword ptr [ebp+0C]
:00442F19 034510                  add eax, dword ptr [ebp+10]
:00442F1C 69C000090000            imul eax, 00000900
:00442F22 0500390000              add eax, 00003900
:00442F27 50                      push eax
:00442F28 B9F0174B00              mov ecx, 004B17F0
:00442F2D E85E600300              call 00478F90
:00442F32 50                      push eax
:00442F33 6A30                    push 00000030
:00442F35 6A30                    push 00000030
:00442F37 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442F3A 51                      push ecx
:00442F3B 8B55F8                  mov edx, dword ptr [ebp-08]
:00442F3E 52                      push edx
:00442F3F E8607C0000              call 0044ABA4
:00442F44 83C418                  add esp, 00000018
:00442F47 EB34                    jmp 00442F7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442F0E(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442F49 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00442F4B 6A04                    push 00000004
:00442F4D 6A00                    push 00000000
:00442F4F 8B4508                  mov eax, dword ptr [ebp+08]
:00442F52 69C0005A0000            imul eax, 00005A00
:00442F58 0500510000              add eax, 00005100
:00442F5D 50                      push eax
:00442F5E B9187D4A00              mov ecx, 004A7D18
:00442F63 E828600300              call 00478F90
:00442F68 50                      push eax
:00442F69 6A30                    push 00000030
:00442F6B 6A30                    push 00000030
:00442F6D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00442F70 51                      push ecx
:00442F71 8B55F8                  mov edx, dword ptr [ebp-08]
:00442F74 52                      push edx
:00442F75 E82A7C0000              call 0044ABA4
:00442F7A 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442F47(U)
|
:00442F7D 8BE5                    mov esp, ebp
:00442F7F 5D                      pop ebp
:00442F80 C3                      ret



* Referenced by a CALL at Address:
|:0044E7EE   
|
:00442F81 55                      push ebp
:00442F82 8BEC                    mov ebp, esp
:00442F84 83EC14                  sub esp, 00000014
:00442F87 894DEC                  mov dword ptr [ebp-14], ecx
:00442F8A 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00442F8D E85E27FCFF              call 004056F0
:00442F92 8B45EC                  mov eax, dword ptr [ebp-14]
:00442F95 33C9                    xor ecx, ecx
:00442F97 8A4810                  mov cl, byte ptr [eax+10]
:00442F9A 8B55EC                  mov edx, dword ptr [ebp-14]
:00442F9D 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:00442FA0 E89BECFEFF              call 00431C40
:00442FA5 668B00                  mov ax, word ptr [eax]
:00442FA8 50                      push eax
:00442FA9 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00442FAC 51                      push ecx
:00442FAD E89D7B0000              call 0044AB4F
:00442FB2 83C408                  add esp, 00000008
:00442FB5 50                      push eax
:00442FB6 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00442FB9 E8E23AFFFF              call 00436AA0
:00442FBE 8B55FC                  mov edx, dword ptr [ebp-04]
:00442FC1 81E2FF000000            and edx, 000000FF
:00442FC7 C1E204                  shl edx, 04
:00442FCA 83EA08                  sub edx, 00000008
:00442FCD 8955F8                  mov dword ptr [ebp-08], edx
:00442FD0 8B45FD                  mov eax, dword ptr [ebp-03]
:00442FD3 25FF000000              and eax, 000000FF
:00442FD8 83C002                  add eax, 00000002
:00442FDB C1E004                  shl eax, 04
:00442FDE 8945F4                  mov dword ptr [ebp-0C], eax
:00442FE1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00442FE4 33D2                    xor edx, edx
:00442FE6 8A5112                  mov dl, byte ptr [ecx+12]
:00442FE9 83FA01                  cmp edx, 00000001
:00442FEC 7510                    jne 00442FFE
:00442FEE 8B45F4                  mov eax, dword ptr [ebp-0C]
:00442FF1 50                      push eax
:00442FF2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00442FF5 51                      push ecx
:00442FF6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00442FF9 E840F3FFFF              call 0044233E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00442FEC(C)
|
:00442FFE 8BE5                    mov esp, ebp
:00443000 5D                      pop ebp
:00443001 C3                      ret



* Referenced by a CALL at Address:
|:0044E7D3   
|
:00443002 55                      push ebp
:00443003 8BEC                    mov ebp, esp
:00443005 6AFF                    push FFFFFFFF
:00443007 6892984700              push 00479892
:0044300C 64A100000000            mov eax, dword ptr fs:[00000000]
:00443012 50                      push eax
:00443013 64892500000000          mov dword ptr fs:[00000000], esp
:0044301A 81EC1C010000            sub esp, 0000011C
:00443020 56                      push esi
:00443021 898DDCFEFFFF            mov dword ptr [ebp+FFFFFEDC], ecx
:00443027 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:0044302D 33C9                    xor ecx, ecx
:0044302F 8A4810                  mov cl, byte ptr [eax+10]
:00443032 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:00443038 8A440A46                mov al, byte ptr [edx+ecx+46]
:0044303C 8885E8FEFFFF            mov byte ptr [ebp+FFFFFEE8], al
:00443042 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00443048 81E1FF000000            and ecx, 000000FF
:0044304E 6BC924                  imul ecx, 00000024
:00443051 81C1B83B4B00            add ecx, 004B3BB8
:00443057 E8E4EBFEFF              call 00431C40
:0044305C 50                      push eax
:0044305D E8F6C70000              call 0044F858
:00443062 83C404                  add esp, 00000004
:00443065 25FF000000              and eax, 000000FF
:0044306A 83F80A                  cmp eax, 0000000A
:0044306D 7552                    jne 004430C1
:0044306F 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00443075 81E1FF000000            and ecx, 000000FF
:0044307B 6BC924                  imul ecx, 00000024
:0044307E 81C1B83B4B00            add ecx, 004B3BB8
:00443084 E84713FFFF              call 004343D0
:00443089 668BF0                  mov si, ax
:0044308C 81E6FFFF0000            and esi, 0000FFFF
:00443092 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00443098 81E1FF000000            and ecx, 000000FF
:0044309E 6BC924                  imul ecx, 00000024
:004430A1 81C1B83B4B00            add ecx, 004B3BB8
:004430A7 E88CF0FEFF              call 00432138
:004430AC 25FF000000              and eax, 000000FF
:004430B1 6BC025                  imul eax, 00000025
:004430B4 8D4C061E                lea ecx, dword ptr [esi+eax+1E]
:004430B8 66898DE0FEFFFF          mov word ptr [ebp+FFFFFEE0], cx
:004430BF EB32                    jmp 004430F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044306D(C)
|
:004430C1 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:004430C7 81E2FF000000            and edx, 000000FF
:004430CD 52                      push edx
:004430CE 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:004430D4 81E1FF000000            and ecx, 000000FF
:004430DA 6BC924                  imul ecx, 00000024
:004430DD 81C1B83B4B00            add ecx, 004B3BB8
:004430E3 E8BAEFFEFF              call 004320A2
:004430E8 660FB6C0                movzx ax, al
:004430EC 668985E0FEFFFF          mov word ptr [ebp+FFFFFEE0], ax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004430BF(U)
|
:004430F3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004430F9 E84225FCFF              call 00405640
:004430FE C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"CHR_ATK.E3"
                                  |
:00443105 6898D54700              push 0047D598
:0044310A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00443110 E8C0E0FCFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00443115 6A04                    push 00000004
:00443117 6A00                    push 00000000
:00443119 68007B0100              push 00017B00
:0044311E B9F0174B00              mov ecx, 004B17F0
:00443123 E8685E0300              call 00478F90
:00443128 50                      push eax
:00443129 8B8DE0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE0]
:0044312F 81E1FFFF0000            and ecx, 0000FFFF
:00443135 51                      push ecx
:00443136 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0044313C E8E8E1FCFF              call 00411329
:00443141 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00443147 E8D9AAFCFF              call 0040DC25
:0044314C 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00443152 81E1FF000000            and ecx, 000000FF
:00443158 6BC924                  imul ecx, 00000024
:0044315B 81C1B83B4B00            add ecx, 004B3BB8
:00443161 E89ACCFCFF              call 0040FE00
:00443166 25FF000000              and eax, 000000FF
:0044316B 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:00443171 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00443177 8995D8FEFFFF            mov dword ptr [ebp+FFFFFED8], edx
:0044317D 83BDD8FEFFFF03          cmp dword ptr [ebp+FFFFFED8], 00000003
:00443184 0F87E0000000            ja 0044326A
:0044318A 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:00443190 FF24858B324400          jmp dword ptr [4*eax+0044328B]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00443197 6A04                    push 00000004
:00443199 6A00                    push 00000000
:0044319B 6800DB0100              push 0001DB00
:004431A0 B9F0174B00              mov ecx, 004B17F0
:004431A5 E8E65D0300              call 00478F90
:004431AA 8945F0                  mov dword ptr [ebp-10], eax
:004431AD 6800300000              push 00003000
:004431B2 B9F0174B00              mov ecx, 004B17F0
:004431B7 E804CDFCFF              call 0040FEC0
:004431BC 50                      push eax
:004431BD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004431C0 51                      push ecx
:004431C1 E8FA530300              call 004785C0
:004431C6 83C40C                  add esp, 0000000C
:004431C9 E99C000000              jmp 0044326A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004431CE 6A04                    push 00000004
:004431D0 6A00                    push 00000000
:004431D2 6800AB0100              push 0001AB00
:004431D7 B9F0174B00              mov ecx, 004B17F0
:004431DC E8AF5D0300              call 00478F90
:004431E1 8945F0                  mov dword ptr [ebp-10], eax
:004431E4 B9F0174B00              mov ecx, 004B17F0
:004431E9 E8D2CCFCFF              call 0040FEC0
:004431EE 50                      push eax
:004431EF 8B55F0                  mov edx, dword ptr [ebp-10]
:004431F2 52                      push edx
:004431F3 68C0000000              push 000000C0
:004431F8 6A40                    push 00000040
:004431FA E86FD3FCFF              call 0041056E
:004431FF 83C410                  add esp, 00000010
:00443202 EB66                    jmp 0044326A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00443204 6A04                    push 00000004
:00443206 6A00                    push 00000000
:00443208 6800AB0100              push 0001AB00
:0044320D B9F0174B00              mov ecx, 004B17F0
:00443212 E8795D0300              call 00478F90
:00443217 8945F0                  mov dword ptr [ebp-10], eax
:0044321A 6800300000              push 00003000
:0044321F B9F0174B00              mov ecx, 004B17F0
:00443224 E897CCFCFF              call 0040FEC0
:00443229 50                      push eax
:0044322A 8B45F0                  mov eax, dword ptr [ebp-10]
:0044322D 50                      push eax
:0044322E E88D530300              call 004785C0
:00443233 83C40C                  add esp, 0000000C
:00443236 EB32                    jmp 0044326A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00443238 6A04                    push 00000004
:0044323A 6A00                    push 00000000
:0044323C 68007B0100              push 00017B00
:00443241 B9F0174B00              mov ecx, 004B17F0
:00443246 E8455D0300              call 00478F90
:0044324B 8945F0                  mov dword ptr [ebp-10], eax
:0044324E 6800300000              push 00003000
:00443253 B9F0174B00              mov ecx, 004B17F0
:00443258 E863CCFCFF              call 0040FEC0
:0044325D 50                      push eax
:0044325E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00443261 51                      push ecx
:00443262 E859530300              call 004785C0
:00443267 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443184(C), :004431C9(U), :00443202(U), :00443236(U)
|
:0044326A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00443271 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00443277 E8E423FCFF              call 00405660
:0044327C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044327F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00443286 5E                      pop esi
:00443287 8BE5                    mov esp, ebp
:00443289 5D                      pop ebp
:0044328A C3                      ret



:0044328B 97314400                DWORD 00443197
:0044328F CE314400                DWORD 004431CE
:00443293 38324400                DWORD 00443238
:00443297 04324400                DWORD 00443204



* Referenced by a CALL at Addresses:
|:0044429C   , :0044E7E4   
|
:0044329B 55                      push ebp
:0044329C 8BEC                    mov ebp, esp
:0044329E 6AFF                    push FFFFFFFF
:004432A0 68A8984700              push 004798A8
:004432A5 64A100000000            mov eax, dword ptr fs:[00000000]
:004432AB 50                      push eax
:004432AC 64892500000000          mov dword ptr fs:[00000000], esp
:004432B3 81EC1C010000            sub esp, 0000011C
:004432B9 56                      push esi
:004432BA 898DDCFEFFFF            mov dword ptr [ebp+FFFFFEDC], ecx
:004432C0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004432C6 E87523FCFF              call 00405640
:004432CB C745FC00000000          mov [ebp-04], 00000000
:004432D2 817D08FF000000          cmp dword ptr [ebp+08], 000000FF
:004432D9 751A                    jne 004432F5
:004432DB 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:004432E1 33C9                    xor ecx, ecx
:004432E3 8A4811                  mov cl, byte ptr [eax+11]
:004432E6 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:004432EC 33C0                    xor eax, eax
:004432EE 8A440A46                mov al, byte ptr [edx+ecx+46]
:004432F2 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004432D9(C)
|
:004432F5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004432F8 51                      push ecx
:004432F9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004432FC 6BC924                  imul ecx, 00000024
:004432FF 81C1B83B4B00            add ecx, 004B3BB8
:00443305 E898EDFEFF              call 004320A2
:0044330A 8885E0FEFFFF            mov byte ptr [ebp+FFFFFEE0], al
:00443310 8B4D08                  mov ecx, dword ptr [ebp+08]
:00443313 6BC924                  imul ecx, 00000024
:00443316 81C1B83B4B00            add ecx, 004B3BB8
:0044331C E81FE9FEFF              call 00431C40
:00443321 50                      push eax
:00443322 E831C50000              call 0044F858
:00443327 83C404                  add esp, 00000004
:0044332A 25FF000000              and eax, 000000FF
:0044332F 83F80A                  cmp eax, 0000000A
:00443332 753D                    jne 00443371
:00443334 8B4D08                  mov ecx, dword ptr [ebp+08]
:00443337 6BC924                  imul ecx, 00000024
:0044333A 81C1B83B4B00            add ecx, 004B3BB8
:00443340 E88B10FFFF              call 004343D0
:00443345 668BF0                  mov si, ax
:00443348 81E6FFFF0000            and esi, 0000FFFF
:0044334E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00443351 6BC924                  imul ecx, 00000024
:00443354 81C1B83B4B00            add ecx, 004B3BB8
:0044335A E8D9EDFEFF              call 00432138
:0044335F 25FF000000              and eax, 000000FF
:00443364 6BC025                  imul eax, 00000025
:00443367 8D54061E                lea edx, dword ptr [esi+eax+1E]
:0044336B 8895E0FEFFFF            mov byte ptr [ebp+FFFFFEE0], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443332(C)
|
:00443371 8B4D08                  mov ecx, dword ptr [ebp+08]
:00443374 6BC924                  imul ecx, 00000024
:00443377 81C1B83B4B00            add ecx, 004B3BB8
:0044337D E87ECAFCFF              call 0040FE00
:00443382 25FF000000              and eax, 000000FF
:00443387 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax

* Possible StringData Ref from Data Obj ->"CHR_DEF.E3"
                                  |
:0044338D 68A8D54700              push 0047D5A8
:00443392 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00443398 E838DEFCFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044339D 6A04                    push 00000004
:0044339F 6A00                    push 00000000
:004433A1 68007B0100              push 00017B00
:004433A6 B9F0174B00              mov ecx, 004B17F0
:004433AB E8E05B0300              call 00478F90
:004433B0 50                      push eax
:004433B1 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:004433B7 25FF000000              and eax, 000000FF
:004433BC 50                      push eax
:004433BD 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004433C3 E861DFFCFF              call 00411329
:004433C8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004433CE E852A8FCFF              call 0040DC25

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004433D3 6A04                    push 00000004
:004433D5 6A00                    push 00000000
:004433D7 68008D0100              push 00018D00
:004433DC B9F0174B00              mov ecx, 004B17F0
:004433E1 E8AA5B0300              call 00478F90
:004433E6 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004433E9 6A04                    push 00000004
:004433EB 6A00                    push 00000000
:004433ED 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004433F0 69C900120000            imul ecx, 00001200
:004433F6 81C100390000            add ecx, 00003900
:004433FC 51                      push ecx
:004433FD B9F0174B00              mov ecx, 004B17F0
:00443402 E8895B0300              call 00478F90
:00443407 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0044340D 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00443413 8995D8FEFFFF            mov dword ptr [ebp+FFFFFED8], edx
:00443419 83BDD8FEFFFF03          cmp dword ptr [ebp+FFFFFED8], 00000003
:00443420 0F879E000000            ja 004434C4
:00443426 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:0044342C FF2485E7344400          jmp dword ptr [4*eax+004434E7]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00443433 6A04                    push 00000004
:00443435 6A00                    push 00000000
:00443437 68009F0100              push 00019F00
:0044343C B9F0174B00              mov ecx, 004B17F0
:00443441 E84A5B0300              call 00478F90
:00443446 8945F0                  mov dword ptr [ebp-10], eax
:00443449 6800120000              push 00001200
:0044344E 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00443454 51                      push ecx
:00443455 8B55F0                  mov edx, dword ptr [ebp-10]
:00443458 52                      push edx
:00443459 E862510300              call 004785C0
:0044345E 83C40C                  add esp, 0000000C
:00443461 EB61                    jmp 004434C4
:00443463 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00443469 50                      push eax
:0044346A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044346D 51                      push ecx
:0044346E 6A60                    push 00000060
:00443470 6A30                    push 00000030
:00443472 E8F7D0FCFF              call 0041056E
:00443477 83C410                  add esp, 00000010
:0044347A EB48                    jmp 004434C4
:0044347C 6800120000              push 00001200
:00443481 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:00443487 52                      push edx
:00443488 8B45F0                  mov eax, dword ptr [ebp-10]
:0044348B 50                      push eax
:0044348C E82F510300              call 004785C0
:00443491 83C40C                  add esp, 0000000C
:00443494 EB2E                    jmp 004434C4

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00443496 6A04                    push 00000004
:00443498 6A00                    push 00000000
:0044349A 68007B0100              push 00017B00
:0044349F B9F0174B00              mov ecx, 004B17F0
:004434A4 E8E75A0300              call 00478F90
:004434A9 8945F0                  mov dword ptr [ebp-10], eax
:004434AC 6800120000              push 00001200
:004434B1 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:004434B7 51                      push ecx
:004434B8 8B55F0                  mov edx, dword ptr [ebp-10]
:004434BB 52                      push edx
:004434BC E8FF500300              call 004785C0
:004434C1 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443420(C), :00443461(U), :0044347A(U), :00443494(U)
|
:004434C4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004434CB 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004434D1 E88A21FCFF              call 00405660
:004434D6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004434D9 64890D00000000          mov dword ptr fs:[00000000], ecx
:004434E0 5E                      pop esi
:004434E1 8BE5                    mov esp, ebp
:004434E3 5D                      pop ebp
:004434E4 C20800                  ret 0008



:004434E7 33344400                DWORD 00443433
:004434EB 63344400                DWORD 00443463
:004434EF 96344400                DWORD 00443496
:004434F3 7C344400                DWORD 0044347C



* Referenced by a CALL at Address:
|:00443697   
|
:004434F7 55                      push ebp
:004434F8 8BEC                    mov ebp, esp
:004434FA 51                      push ecx
:004434FB 894DFC                  mov dword ptr [ebp-04], ecx
:004434FE 8BE5                    mov esp, ebp
:00443500 5D                      pop ebp
:00443501 C3                      ret



* Referenced by a CALL at Address:
|:00443804   
|
:00443502 55                      push ebp
:00443503 8BEC                    mov ebp, esp
:00443505 83EC08                  sub esp, 00000008
:00443508 894DFC                  mov dword ptr [ebp-04], ecx
:0044350B 8B45FC                  mov eax, dword ptr [ebp-04]
:0044350E 33C9                    xor ecx, ecx
:00443510 8A4812                  mov cl, byte ptr [eax+12]
:00443513 83F902                  cmp ecx, 00000002
:00443516 7402                    je 0044351A
:00443518 EB42                    jmp 0044355C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443516(C)
|
:0044351A 8B55FC                  mov edx, dword ptr [ebp-04]
:0044351D 8A4214                  mov al, byte ptr [edx+14]
:00443520 8845F8                  mov byte ptr [ebp-08], al
:00443523 807DF808                cmp byte ptr [ebp-08], 08
:00443527 7402                    je 0044352B
:00443529 EB31                    jmp 0044355C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443527(C)
|
:0044352B 6A20                    push 00000020
:0044352D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443530 33D2                    xor edx, edx
:00443532 8A5111                  mov dl, byte ptr [ecx+11]
:00443535 8B45FC                  mov eax, dword ptr [ebp-04]
:00443538 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0044353B E880EAFFFF              call 00441FC0
:00443540 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443543 33D2                    xor edx, edx
:00443545 8A5111                  mov dl, byte ptr [ecx+11]
:00443548 8B45FC                  mov eax, dword ptr [ebp-04]
:0044354B 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0044354E E88D34FFFF              call 004369E0
:00443553 50                      push eax
:00443554 E8C3950200              call 0046CB1C
:00443559 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443518(U), :00443529(U)
|
:0044355C 8BE5                    mov esp, ebp
:0044355E 5D                      pop ebp
:0044355F C3                      ret



* Referenced by a CALL at Address:
|:004437C2   
|
:00443560 55                      push ebp
:00443561 8BEC                    mov ebp, esp
:00443563 83EC08                  sub esp, 00000008
:00443566 894DF8                  mov dword ptr [ebp-08], ecx
:00443569 C745FC00000000          mov [ebp-04], 00000000
:00443570 8B45F8                  mov eax, dword ptr [ebp-08]
:00443573 33C9                    xor ecx, ecx
:00443575 8A4812                  mov cl, byte ptr [eax+12]
:00443578 83F902                  cmp ecx, 00000002
:0044357B 7405                    je 00443582
:0044357D 8B45FC                  mov eax, dword ptr [ebp-04]
:00443580 EB6B                    jmp 004435ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044357B(C)
|
:00443582 8B55F8                  mov edx, dword ptr [ebp-08]
:00443585 33C0                    xor eax, eax
:00443587 8A4214                  mov al, byte ptr [edx+14]
:0044358A 83F806                  cmp eax, 00000006
:0044358D 755B                    jne 004435EA
:0044358F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443592 33D2                    xor edx, edx
:00443594 8A5111                  mov dl, byte ptr [ecx+11]
:00443597 8B45F8                  mov eax, dword ptr [ebp-08]
:0044359A 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0044359D E85EFDFBFF              call 00403300
:004435A2 83F80A                  cmp eax, 0000000A
:004435A5 7609                    jbe 004435B0

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004435A7 C745FC0A000000          mov [ebp-04], 0000000A
:004435AE EB3A                    jmp 004435EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004435A5(C)
|
:004435B0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004435B3 33D2                    xor edx, edx
:004435B5 8A5111                  mov dl, byte ptr [ecx+11]
:004435B8 8B45F8                  mov eax, dword ptr [ebp-08]
:004435BB 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:004435BE E83DFDFBFF              call 00403300
:004435C3 83F801                  cmp eax, 00000001
:004435C6 7709                    ja 004435D1
:004435C8 C745FC00000000          mov [ebp-04], 00000000
:004435CF EB19                    jmp 004435EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004435C6(C)
|
:004435D1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004435D4 33D2                    xor edx, edx
:004435D6 8A5111                  mov dl, byte ptr [ecx+11]
:004435D9 8B45F8                  mov eax, dword ptr [ebp-08]
:004435DC 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:004435DF E81CFDFBFF              call 00403300
:004435E4 83E801                  sub eax, 00000001
:004435E7 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044358D(C), :004435AE(U), :004435CF(U)
|
:004435EA 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443580(U)
|
:004435ED 8BE5                    mov esp, ebp
:004435EF 5D                      pop ebp
:004435F0 C3                      ret



* Referenced by a CALL at Addresses:
|:004442A8   , :004445E3   
|
:004435F1 55                      push ebp
:004435F2 8BEC                    mov ebp, esp
:004435F4 83EC20                  sub esp, 00000020
:004435F7 56                      push esi
:004435F8 894DE8                  mov dword ptr [ebp-18], ecx
:004435FB 8B45E8                  mov eax, dword ptr [ebp-18]
:004435FE 33C9                    xor ecx, ecx
:00443600 8A4810                  mov cl, byte ptr [eax+10]
:00443603 8B55E8                  mov edx, dword ptr [ebp-18]
:00443606 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:00443609 E8D233FFFF              call 004369E0
:0044360E 6BC050                  imul eax, 00000050
:00443611 05787F4900              add eax, 00497F78
:00443616 8945F4                  mov dword ptr [ebp-0C], eax
:00443619 8B45E8                  mov eax, dword ptr [ebp-18]
:0044361C 33C9                    xor ecx, ecx
:0044361E 8A4811                  mov cl, byte ptr [eax+11]
:00443621 8B55E8                  mov edx, dword ptr [ebp-18]
:00443624 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:00443627 E8B433FFFF              call 004369E0
:0044362C 6BC050                  imul eax, 00000050
:0044362F 05787F4900              add eax, 00497F78
:00443634 8945F0                  mov dword ptr [ebp-10], eax
:00443637 C745FC00000000          mov [ebp-04], 00000000
:0044363E C745F800000000          mov [ebp-08], 00000000
:00443645 8B45E8                  mov eax, dword ptr [ebp-18]
:00443648 33C9                    xor ecx, ecx
:0044364A 8A4812                  mov cl, byte ptr [eax+12]
:0044364D 83F901                  cmp ecx, 00000001
:00443650 0F851B010000            jne 00443771
:00443656 8B5508                  mov edx, dword ptr [ebp+08]
:00443659 52                      push edx
:0044365A 6A01                    push 00000001
:0044365C 8B45F0                  mov eax, dword ptr [ebp-10]
:0044365F 50                      push eax
:00443660 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00443663 33D2                    xor edx, edx
:00443665 8A5110                  mov dl, byte ptr [ecx+10]
:00443668 8B45E8                  mov eax, dword ptr [ebp-18]
:0044366B 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0044366E E85AFEFEFF              call 004334CD
:00443673 8945FC                  mov dword ptr [ebp-04], eax
:00443676 837D0801                cmp dword ptr [ebp+08], 00000001
:0044367A 730D                    jnb 00443689
:0044367C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044367F 33D2                    xor edx, edx
:00443681 8A5113                  mov dl, byte ptr [ecx+13]
:00443684 83FA01                  cmp edx, 00000001
:00443687 750B                    jne 00443694

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044367A(C)
|
:00443689 8B45FC                  mov eax, dword ptr [ebp-04]
:0044368C 99                      cdq
:0044368D 2BC2                    sub eax, edx
:0044368F D1F8                    sar eax, 1
:00443691 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443687(C)
|
:00443694 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00443697 E85BFEFFFF              call 004434F7
:0044369C 837DFC00                cmp dword ptr [ebp-04], 00000000
:004436A0 7E46                    jle 004436E8
:004436A2 68FF000000              push 000000FF
:004436A7 E8044D0300              call 004783B0
:004436AC 83C404                  add esp, 00000004
:004436AF 8BF0                    mov esi, eax
:004436B1 8B45E8                  mov eax, dword ptr [ebp-18]
:004436B4 33C9                    xor ecx, ecx
:004436B6 8A4811                  mov cl, byte ptr [eax+11]
:004436B9 8B55E8                  mov edx, dword ptr [ebp-18]
:004436BC 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:004436BF E835F8FEFF              call 00432EF9
:004436C4 25FF000000              and eax, 000000FF
:004436C9 3BF0                    cmp esi, eax
:004436CB 731B                    jnb 004436E8
:004436CD 8B45FC                  mov eax, dword ptr [ebp-04]
:004436D0 D1E0                    shl eax, 1
:004436D2 8945FC                  mov dword ptr [ebp-04], eax
:004436D5 C745F801000000          mov [ebp-08], 00000001
:004436DC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004436DF C6411901                mov [ecx+19], 01
:004436E3 E984000000              jmp 0044376C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004436A0(C), :004436CB(C)
|
:004436E8 837DFC00                cmp dword ptr [ebp-04], 00000000
:004436EC 7E7E                    jle 0044376C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004436EE 6A02                    push 00000002
:004436F0 8B55E8                  mov edx, dword ptr [ebp-18]
:004436F3 33C0                    xor eax, eax
:004436F5 8A4210                  mov al, byte ptr [edx+10]
:004436F8 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004436FB 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:004436FE E86D33FFFF              call 00436A70
:00443703 85C0                    test eax, eax
:00443705 7565                    jne 0044376C
:00443707 68F4010000              push 000001F4
:0044370C E89F4C0300              call 004783B0
:00443711 83C404                  add esp, 00000004
:00443714 8BF0                    mov esi, eax
:00443716 8B55E8                  mov edx, dword ptr [ebp-18]
:00443719 33C0                    xor eax, eax
:0044371B 8A4210                  mov al, byte ptr [edx+10]
:0044371E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00443721 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:00443724 E86734FFFF              call 00436B90
:00443729 3BF0                    cmp esi, eax
:0044372B 733F                    jnb 0044376C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044372D 6A02                    push 00000002
:0044372F 8B55E8                  mov edx, dword ptr [ebp-18]
:00443732 33C0                    xor eax, eax
:00443734 8A4211                  mov al, byte ptr [edx+11]
:00443737 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044373A 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0044373D E82E33FFFF              call 00436A70
:00443742 85C0                    test eax, eax
:00443744 740A                    je 00443750
:00443746 8B55FC                  mov edx, dword ptr [ebp-04]
:00443749 D1E2                    shl edx, 1
:0044374B 8955FC                  mov dword ptr [ebp-04], edx
:0044374E EB0E                    jmp 0044375E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443744(C)
|
:00443750 8B45FC                  mov eax, dword ptr [ebp-04]
:00443753 6BC003                  imul eax, 00000003
:00443756 99                      cdq
:00443757 2BC2                    sub eax, edx
:00443759 D1F8                    sar eax, 1
:0044375B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044374E(U)
|
:0044375E C745F801000000          mov [ebp-08], 00000001
:00443765 8B45E8                  mov eax, dword ptr [ebp-18]
:00443768 C6401902                mov [eax+19], 02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004436E3(U), :004436EC(C), :00443705(C), :0044372B(C)
|
:0044376C E9C8000000              jmp 00443839

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443650(C)
|
:00443771 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00443774 33D2                    xor edx, edx
:00443776 8A5112                  mov dl, byte ptr [ecx+12]
:00443779 83FA02                  cmp edx, 00000002
:0044377C 0F8589000000            jne 0044380B
:00443782 8B45E8                  mov eax, dword ptr [ebp-18]
:00443785 8A4814                  mov cl, byte ptr [eax+14]
:00443788 51                      push ecx
:00443789 8B55E8                  mov edx, dword ptr [ebp-18]
:0044378C 8A4213                  mov al, byte ptr [edx+13]
:0044378F 50                      push eax
:00443790 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00443793 51                      push ecx
:00443794 8B55E8                  mov edx, dword ptr [ebp-18]
:00443797 33C0                    xor eax, eax
:00443799 8A4211                  mov al, byte ptr [edx+11]
:0044379C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044379F 8B1481                  mov edx, dword ptr [ecx+4*eax]
:004437A2 52                      push edx
:004437A3 8B45E8                  mov eax, dword ptr [ebp-18]
:004437A6 33C9                    xor ecx, ecx
:004437A8 8A4810                  mov cl, byte ptr [eax+10]
:004437AB 8B55E8                  mov edx, dword ptr [ebp-18]
:004437AE 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:004437B1 E836DDFFFF              call 004414EC
:004437B6 8945FC                  mov dword ptr [ebp-04], eax
:004437B9 837DFC00                cmp dword ptr [ebp-04], 00000000
:004437BD 7E4A                    jle 00443809
:004437BF 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004437C2 E899FDFFFF              call 00443560
:004437C7 8945EC                  mov dword ptr [ebp-14], eax
:004437CA 8B45E8                  mov eax, dword ptr [ebp-18]
:004437CD 33C9                    xor ecx, ecx
:004437CF 8A4811                  mov cl, byte ptr [eax+11]
:004437D2 8B55E8                  mov edx, dword ptr [ebp-18]
:004437D5 8B448A24                mov eax, dword ptr [edx+4*ecx+24]
:004437D9 3B45EC                  cmp eax, dword ptr [ebp-14]
:004437DC 7314                    jnb 004437F2
:004437DE 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004437E1 33D2                    xor edx, edx
:004437E3 8A5111                  mov dl, byte ptr [ecx+11]
:004437E6 8B45E8                  mov eax, dword ptr [ebp-18]
:004437E9 8B4C9024                mov ecx, dword ptr [eax+4*edx+24]
:004437ED 894DE4                  mov dword ptr [ebp-1C], ecx
:004437F0 EB06                    jmp 004437F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004437DC(C)
|
:004437F2 8B55EC                  mov edx, dword ptr [ebp-14]
:004437F5 8955E4                  mov dword ptr [ebp-1C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004437F0(U)
|
:004437F8 8B45E8                  mov eax, dword ptr [ebp-18]
:004437FB 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004437FE 894838                  mov dword ptr [eax+38], ecx
:00443801 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00443804 E8F9FCFFFF              call 00443502

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004437BD(C)
|
:00443809 EB2E                    jmp 00443839

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044377C(C)
|
:0044380B 8B55E8                  mov edx, dword ptr [ebp-18]
:0044380E 33C0                    xor eax, eax
:00443810 8A4212                  mov al, byte ptr [edx+12]
:00443813 83F803                  cmp eax, 00000003
:00443816 7521                    jne 00443839
:00443818 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044381B 8A5113                  mov dl, byte ptr [ecx+13]
:0044381E 52                      push edx
:0044381F 8B45F0                  mov eax, dword ptr [ebp-10]
:00443822 50                      push eax
:00443823 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00443826 33D2                    xor edx, edx
:00443828 8A5110                  mov dl, byte ptr [ecx+10]
:0044382B 8B45E8                  mov eax, dword ptr [ebp-18]
:0044382E 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:00443831 E898E0FFFF              call 004418CE
:00443836 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044376C(U), :00443809(U), :00443816(C)
|
:00443839 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044383C 33D2                    xor edx, edx
:0044383E 8A5111                  mov dl, byte ptr [ecx+11]
:00443841 8B45E8                  mov eax, dword ptr [ebp-18]
:00443844 8B4C901C                mov ecx, dword ptr [eax+4*edx+1C]
:00443848 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:0044384B 7D14                    jge 00443861
:0044384D 8B55E8                  mov edx, dword ptr [ebp-18]
:00443850 33C0                    xor eax, eax
:00443852 8A4211                  mov al, byte ptr [edx+11]
:00443855 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00443858 8B54811C                mov edx, dword ptr [ecx+4*eax+1C]
:0044385C 8955E0                  mov dword ptr [ebp-20], edx
:0044385F EB06                    jmp 00443867

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044384B(C)
|
:00443861 8B45FC                  mov eax, dword ptr [ebp-04]
:00443864 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044385F(U)
|
:00443867 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044386A 8B55E0                  mov edx, dword ptr [ebp-20]
:0044386D 895134                  mov dword ptr [ecx+34], edx
:00443870 5E                      pop esi
:00443871 8BE5                    mov esp, ebp
:00443873 5D                      pop ebp
:00443874 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004444F9   , :004445EB   
|
:00443877 55                      push ebp
:00443878 8BEC                    mov ebp, esp
:0044387A 83EC10                  sub esp, 00000010
:0044387D 894DF0                  mov dword ptr [ebp-10], ecx
:00443880 8B45F0                  mov eax, dword ptr [ebp-10]
:00443883 33C9                    xor ecx, ecx
:00443885 8A4810                  mov cl, byte ptr [eax+10]
:00443888 8B55F0                  mov edx, dword ptr [ebp-10]
:0044388B 8B4C8A08                mov ecx, dword ptr [edx+4*ecx+08]
:0044388F E80CC6FCFF              call 0040FEA0
:00443894 25FF000000              and eax, 000000FF
:00443899 8945F8                  mov dword ptr [ebp-08], eax
:0044389C 8B45F0                  mov eax, dword ptr [ebp-10]
:0044389F 33C9                    xor ecx, ecx
:004438A1 8A4811                  mov cl, byte ptr [eax+11]
:004438A4 8B55F0                  mov edx, dword ptr [ebp-10]
:004438A7 8B4C8A08                mov ecx, dword ptr [edx+4*ecx+08]
:004438AB E8F0C5FCFF              call 0040FEA0
:004438B0 25FF000000              and eax, 000000FF
:004438B5 8945F4                  mov dword ptr [ebp-0C], eax
:004438B8 8B45F0                  mov eax, dword ptr [ebp-10]
:004438BB 33C9                    xor ecx, ecx
:004438BD 8A4810                  mov cl, byte ptr [eax+10]
:004438C0 8B55F0                  mov edx, dword ptr [ebp-10]
:004438C3 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:004438C6 E81531FFFF              call 004369E0
:004438CB 8BC8                    mov ecx, eax
:004438CD 6BC950                  imul ecx, 00000050
:004438D0 81C1787F4900            add ecx, 00497F78
:004438D6 E8A5C5FCFF              call 0040FE80
:004438DB 25FF000000              and eax, 000000FF
:004438E0 85C0                    test eax, eax
:004438E2 7405                    je 004438E9
:004438E4 E903010000              jmp 004439EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004438E2(C)
|
:004438E9 8B45F0                  mov eax, dword ptr [ebp-10]
:004438EC C7403C00000000          mov [eax+3C], 00000000
:004438F3 C745FC00000000          mov [ebp-04], 00000000
:004438FA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004438FD 33D2                    xor edx, edx
:004438FF 8A5111                  mov dl, byte ptr [ecx+11]
:00443902 8B45F0                  mov eax, dword ptr [ebp-10]
:00443905 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00443908 8B54901C                mov edx, dword ptr [eax+4*edx+1C]
:0044390C 2B5134                  sub edx, dword ptr [ecx+34]
:0044390F 85D2                    test edx, edx
:00443911 754E                    jne 00443961
:00443913 8B45F0                  mov eax, dword ptr [ebp-10]
:00443916 33C9                    xor ecx, ecx
:00443918 8A4811                  mov cl, byte ptr [eax+11]
:0044391B 8B55F0                  mov edx, dword ptr [ebp-10]
:0044391E 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:00443921 E8BAE6FFFF              call 00441FE0
:00443926 25FF000000              and eax, 000000FF
:0044392B 83F81E                  cmp eax, 0000001E
:0044392E 7509                    jne 00443939
:00443930 C745FC30000000          mov [ebp-04], 00000030
:00443937 EB26                    jmp 0044395F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044392E(C)
|
:00443939 8B45F8                  mov eax, dword ptr [ebp-08]
:0044393C 3B45F4                  cmp eax, dword ptr [ebp-0C]
:0044393F 7309                    jnb 0044394A
:00443941 C745FC20000000          mov [ebp-04], 00000020
:00443948 EB15                    jmp 0044395F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044393F(C)
|
:0044394A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044394D 2B4DF4                  sub ecx, dword ptr [ebp-0C]
:00443950 83C102                  add ecx, 00000002
:00443953 B840000000              mov eax, 00000040
:00443958 33D2                    xor edx, edx
:0044395A F7F1                    div ecx
:0044395C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443937(U), :00443948(U)
|
:0044395F EB32                    jmp 00443993

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443911(C)
|
:00443961 8B55F8                  mov edx, dword ptr [ebp-08]
:00443964 83C205                  add edx, 00000005
:00443967 3B55F4                  cmp edx, dword ptr [ebp-0C]
:0044396A 7709                    ja 00443975
:0044396C C745FC10000000          mov [ebp-04], 00000010
:00443973 EB1E                    jmp 00443993

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044396A(C)
|
:00443975 8B45F8                  mov eax, dword ptr [ebp-08]
:00443978 3B45F4                  cmp eax, dword ptr [ebp-0C]
:0044397B 7609                    jbe 00443986

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044397D C745FC04000000          mov [ebp-04], 00000004
:00443984 EB0D                    jmp 00443993

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044397B(C)
|
:00443986 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00443989 2B4DF8                  sub ecx, dword ptr [ebp-08]
:0044398C 8D540906                lea edx, dword ptr [ecx+ecx+06]
:00443990 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044395F(U), :00443973(U), :00443984(U)
|
:00443993 8B45F0                  mov eax, dword ptr [ebp-10]
:00443996 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443999 894840                  mov dword ptr [eax+40], ecx
:0044399C 6A00                    push 00000000
:0044399E 8B55F0                  mov edx, dword ptr [ebp-10]
:004439A1 33C0                    xor eax, eax
:004439A3 8A4210                  mov al, byte ptr [edx+10]
:004439A6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004439A9 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:004439AC E8E6F8FEFF              call 00433297
:004439B1 85C0                    test eax, eax
:004439B3 740F                    je 004439C4
:004439B5 8B55F0                  mov edx, dword ptr [ebp-10]
:004439B8 8B4240                  mov eax, dword ptr [edx+40]
:004439BB 83C005                  add eax, 00000005
:004439BE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004439C1 894140                  mov dword ptr [ecx+40], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004439B3(C)
|
:004439C4 8B55F0                  mov edx, dword ptr [ebp-10]
:004439C7 33C0                    xor eax, eax
:004439C9 8A4212                  mov al, byte ptr [edx+12]
:004439CC 83F802                  cmp eax, 00000002
:004439CF 751B                    jne 004439EC
:004439D1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004439D4 33D2                    xor edx, edx
:004439D6 8A5114                  mov dl, byte ptr [ecx+14]
:004439D9 83FA07                  cmp edx, 00000007
:004439DC 750E                    jne 004439EC
:004439DE 8B45F0                  mov eax, dword ptr [ebp-10]
:004439E1 8B4840                  mov ecx, dword ptr [eax+40]
:004439E4 D1E1                    shl ecx, 1
:004439E6 8B55F0                  mov edx, dword ptr [ebp-10]
:004439E9 894A40                  mov dword ptr [edx+40], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004438E4(U), :004439CF(C), :004439DC(C)
|
:004439EC 8BE5                    mov esp, ebp
:004439EE 5D                      pop ebp
:004439EF C3                      ret



* Referenced by a CALL at Address:
|:00444706   
|
:004439F0 55                      push ebp
:004439F1 8BEC                    mov ebp, esp
:004439F3 51                      push ecx
:004439F4 894DFC                  mov dword ptr [ebp-04], ecx
:004439F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004439FA 33C9                    xor ecx, ecx
:004439FC 8A4813                  mov cl, byte ptr [eax+13]
:004439FF 83F901                  cmp ecx, 00000001
:00443A02 7510                    jne 00443A14
:00443A04 8B55FC                  mov edx, dword ptr [ebp-04]
:00443A07 8A4215                  mov al, byte ptr [edx+15]
:00443A0A 24BF                    and al, BF
:00443A0C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443A0F 884115                  mov byte ptr [ecx+15], al
:00443A12 EB3A                    jmp 00443A4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443A02(C)
|
:00443A14 8B55FC                  mov edx, dword ptr [ebp-04]
:00443A17 33C0                    xor eax, eax
:00443A19 8A4212                  mov al, byte ptr [edx+12]
:00443A1C 83F801                  cmp eax, 00000001
:00443A1F 7511                    jne 00443A32
:00443A21 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443A24 8A5115                  mov dl, byte ptr [ecx+15]
:00443A27 80CA40                  or dl, 40
:00443A2A 8B45FC                  mov eax, dword ptr [ebp-04]
:00443A2D 885015                  mov byte ptr [eax+15], dl
:00443A30 EB1C                    jmp 00443A4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443A1F(C)
|
:00443A32 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443A35 33D2                    xor edx, edx
:00443A37 8A5112                  mov dl, byte ptr [ecx+12]
:00443A3A 83FA02                  cmp edx, 00000002
:00443A3D 750F                    jne 00443A4E
:00443A3F 8B45FC                  mov eax, dword ptr [ebp-04]
:00443A42 8A4815                  mov cl, byte ptr [eax+15]
:00443A45 80E1BF                  and cl, BF
:00443A48 8B55FC                  mov edx, dword ptr [ebp-04]
:00443A4B 884A15                  mov byte ptr [edx+15], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443A12(U), :00443A30(U), :00443A3D(C)
|
:00443A4E 8B45FC                  mov eax, dword ptr [ebp-04]
:00443A51 33C9                    xor ecx, ecx
:00443A53 8A4811                  mov cl, byte ptr [eax+11]
:00443A56 8B55FC                  mov edx, dword ptr [ebp-04]
:00443A59 8B45FC                  mov eax, dword ptr [ebp-04]
:00443A5C 8B4C8A1C                mov ecx, dword ptr [edx+4*ecx+1C]
:00443A60 2B4834                  sub ecx, dword ptr [eax+34]
:00443A63 85C9                    test ecx, ecx
:00443A65 750E                    jne 00443A75
:00443A67 8B55FC                  mov edx, dword ptr [ebp-04]
:00443A6A 8A4215                  mov al, byte ptr [edx+15]
:00443A6D 24BF                    and al, BF
:00443A6F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443A72 884115                  mov byte ptr [ecx+15], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443A65(C)
|
:00443A75 6A10                    push 00000010
:00443A77 8B55FC                  mov edx, dword ptr [ebp-04]
:00443A7A 33C0                    xor eax, eax
:00443A7C 8A4211                  mov al, byte ptr [edx+11]
:00443A7F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443A82 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:00443A85 E8E62FFFFF              call 00436A70
:00443A8A 85C0                    test eax, eax
:00443A8C 740E                    je 00443A9C
:00443A8E 8B55FC                  mov edx, dword ptr [ebp-04]
:00443A91 8A4215                  mov al, byte ptr [edx+15]
:00443A94 24BF                    and al, BF
:00443A96 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443A99 884115                  mov byte ptr [ecx+15], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443A8C(C)
|
:00443A9C 8B55FC                  mov edx, dword ptr [ebp-04]
:00443A9F 33C0                    xor eax, eax
:00443AA1 8A4211                  mov al, byte ptr [edx+11]
:00443AA4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443AA7 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:00443AAA E84130FFFF              call 00436AF0
:00443AAF 25FF000000              and eax, 000000FF
:00443AB4 83F805                  cmp eax, 00000005
:00443AB7 7522                    jne 00443ADB
:00443AB9 B9784E4B00              mov ecx, 004B4E78
:00443ABE E8BCB80100              call 0045F37F
:00443AC3 25FF000000              and eax, 000000FF
:00443AC8 83F802                  cmp eax, 00000002
:00443ACB 750E                    jne 00443ADB
:00443ACD 8B55FC                  mov edx, dword ptr [ebp-04]
:00443AD0 8A4215                  mov al, byte ptr [edx+15]
:00443AD3 24BF                    and al, BF
:00443AD5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443AD8 884115                  mov byte ptr [ecx+15], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443AB7(C), :00443ACB(C)
|
:00443ADB 8B55FC                  mov edx, dword ptr [ebp-04]
:00443ADE 33C0                    xor eax, eax
:00443AE0 8A4211                  mov al, byte ptr [edx+11]
:00443AE3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443AE6 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:00443AE9 E8F22EFFFF              call 004369E0
:00443AEE 8BC8                    mov ecx, eax
:00443AF0 6BC950                  imul ecx, 00000050
:00443AF3 81C1787F4900            add ecx, 00497F78
:00443AF9 E8C2F6FBFF              call 004031C0
:00443AFE 25FF000000              and eax, 000000FF
:00443B03 3DFF000000              cmp eax, 000000FF
:00443B08 750E                    jne 00443B18
:00443B0A 8B55FC                  mov edx, dword ptr [ebp-04]
:00443B0D 8A4215                  mov al, byte ptr [edx+15]
:00443B10 24BF                    and al, BF
:00443B12 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443B15 884115                  mov byte ptr [ecx+15], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443B08(C)
|
:00443B18 8BE5                    mov esp, ebp
:00443B1A 5D                      pop ebp
:00443B1B C3                      ret



* Referenced by a CALL at Addresses:
|:00444501   , :0044469D   
|
:00443B1C 55                      push ebp
:00443B1D 8BEC                    mov ebp, esp
:00443B1F 83EC08                  sub esp, 00000008
:00443B22 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00443B25 6A04                    push 00000004
:00443B27 B9306D4800              mov ecx, 00486D30
:00443B2C E82325FCFF              call 00406054
:00443B31 6A10                    push 00000010
:00443B33 B9306D4800              mov ecx, 00486D30
:00443B38 E87B24FCFF              call 00405FB8
:00443B3D 6A00                    push 00000000
:00443B3F B9306D4800              mov ecx, 00486D30
:00443B44 E8A724FCFF              call 00405FF0
:00443B49 8B45F8                  mov eax, dword ptr [ebp-08]
:00443B4C 83783400                cmp dword ptr [eax+34], 00000000
:00443B50 7546                    jne 00443B98
:00443B52 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443B55 33D2                    xor edx, edx
:00443B57 8A5112                  mov dl, byte ptr [ecx+12]
:00443B5A 83FA02                  cmp edx, 00000002
:00443B5D 7511                    jne 00443B70

* Possible StringData Ref from Data Obj ->"ۥѤF"
                                  |
:00443B5F 68E0E84700              push 0047E8E0
:00443B64 6A00                    push 00000000
:00443B66 E8C8D8FEFF              call 00431433
:00443B6B 83C408                  add esp, 00000008
:00443B6E EB23                    jmp 00443B93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443B5D(C)
|
:00443B70 8B45F8                  mov eax, dword ptr [ebp-08]
:00443B73 33C9                    xor ecx, ecx
:00443B75 8A4811                  mov cl, byte ptr [eax+11]
:00443B78 8B55F8                  mov edx, dword ptr [ebp-08]
:00443B7B 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:00443B7E E86D2EFFFF              call 004369F0
:00443B83 50                      push eax

* Possible StringData Ref from Data Obj ->"%sLF"
                                  |
:00443B84 68ECE84700              push 0047E8EC
:00443B89 6A00                    push 00000000
:00443B8B E8A3D8FEFF              call 00431433
:00443B90 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443B6E(U)
|
:00443B93 E955010000              jmp 00443CED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443B50(C)
|
:00443B98 B978294B00              mov ecx, 004B2978
:00443B9D E80E8DFCFF              call 0040C8B0
:00443BA2 83E010                  and eax, 00000010
:00443BA5 85C0                    test eax, eax
:00443BA7 7544                    jne 00443BED
:00443BA9 C745FC00000000          mov [ebp-04], 00000000
:00443BB0 EB09                    jmp 00443BBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443BE6(U)
|
:00443BB2 8B45FC                  mov eax, dword ptr [ebp-04]
:00443BB5 83C001                  add eax, 00000001
:00443BB8 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443BB0(U)
|
:00443BBB 837DFC03                cmp dword ptr [ebp-04], 00000003
:00443BBF 7327                    jnb 00443BE8
:00443BC1 6A10                    push 00000010
:00443BC3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443BC6 8B5134                  mov edx, dword ptr [ecx+34]
:00443BC9 52                      push edx
:00443BCA 8B45F8                  mov eax, dword ptr [ebp-08]
:00443BCD 33C9                    xor ecx, ecx
:00443BCF 8A4811                  mov cl, byte ptr [eax+11]
:00443BD2 8B55F8                  mov edx, dword ptr [ebp-08]
:00443BD5 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:00443BD8 E803E4FFFF              call 00441FE0
:00443BDD 50                      push eax
:00443BDE E828620000              call 00449E0B
:00443BE3 83C40C                  add esp, 0000000C
:00443BE6 EBCA                    jmp 00443BB2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443BBF(C)
|
:00443BE8 E900010000              jmp 00443CED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443BA7(C)
|
:00443BED 33C0                    xor eax, eax
:00443BEF A09D4E4B00              mov al, byte ptr [004B4E9D]
:00443BF4 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:00443BF8 51                      push ecx
:00443BF9 B9A83B4B00              mov ecx, 004B3BA8
:00443BFE E80DBDFDFF              call 0041F910
:00443C03 8B55F8                  mov edx, dword ptr [ebp-08]
:00443C06 33C0                    xor eax, eax
:00443C08 8A4210                  mov al, byte ptr [edx+10]
:00443C0B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443C0E 8A540146                mov dl, byte ptr [ecx+eax+46]
:00443C12 52                      push edx
:00443C13 66A13C494B00            mov ax, word ptr [004B493C]
:00443C19 50                      push eax
:00443C1A E839650000              call 0044A158
:00443C1F 83C408                  add esp, 00000008
:00443C22 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443C25 33D2                    xor edx, edx
:00443C27 8A5111                  mov dl, byte ptr [ecx+11]
:00443C2A 8B45F8                  mov eax, dword ptr [ebp-08]
:00443C2D 8A4C1046                mov cl, byte ptr [eax+edx+46]
:00443C31 51                      push ecx
:00443C32 668B15DC484B00          mov dx, word ptr [004B48DC]
:00443C39 52                      push edx
:00443C3A E819650000              call 0044A158
:00443C3F 83C408                  add esp, 00000008
:00443C42 E889B9FEFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00443C47 6A03                    push 00000003
:00443C49 E8E8BAFEFF              call 0042F736
:00443C4E 83C404                  add esp, 00000004
:00443C51 33C0                    xor eax, eax
:00443C53 A09D4E4B00              mov al, byte ptr [004B4E9D]
:00443C58 8D4C0006                lea ecx, dword ptr [eax+eax+06]
:00443C5C 51                      push ecx
:00443C5D B9A83B4B00              mov ecx, 004B3BA8
:00443C62 E8A9BCFDFF              call 0041F910
:00443C67 6A00                    push 00000000
:00443C69 8B55F8                  mov edx, dword ptr [ebp-08]
:00443C6C 8B4234                  mov eax, dword ptr [edx+34]
:00443C6F 50                      push eax
:00443C70 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443C73 33D2                    xor edx, edx
:00443C75 8A5111                  mov dl, byte ptr [ecx+11]
:00443C78 8B45F8                  mov eax, dword ptr [ebp-08]
:00443C7B 8A4C1046                mov cl, byte ptr [eax+edx+46]
:00443C7F 51                      push ecx
:00443C80 668B15DC484B00          mov dx, word ptr [004B48DC]
:00443C87 52                      push edx
:00443C88 E885670000              call 0044A412
:00443C8D 83C410                  add esp, 00000010
:00443C90 6A01                    push 00000001
:00443C92 8B45F8                  mov eax, dword ptr [ebp-08]
:00443C95 8B4838                  mov ecx, dword ptr [eax+38]
:00443C98 51                      push ecx
:00443C99 8B55F8                  mov edx, dword ptr [ebp-08]
:00443C9C 33C0                    xor eax, eax
:00443C9E 8A4211                  mov al, byte ptr [edx+11]
:00443CA1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443CA4 8A540146                mov dl, byte ptr [ecx+eax+46]
:00443CA8 52                      push edx
:00443CA9 66A1DC484B00            mov ax, word ptr [004B48DC]
:00443CAF 50                      push eax
:00443CB0 E85D670000              call 0044A412
:00443CB5 83C410                  add esp, 00000010
:00443CB8 E813B9FEFF              call 0042F5D0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00443CBD 6A03                    push 00000003
:00443CBF E872BAFEFF              call 0042F736
:00443CC4 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00443CC7 6A09                    push 00000009
:00443CC9 6A21                    push 00000021
:00443CCB 33C9                    xor ecx, ecx
:00443CCD 8A0DDD484B00            mov cl, byte ptr [004B48DD]
:00443CD3 83C102                  add ecx, 00000002
:00443CD6 51                      push ecx
:00443CD7 33D2                    xor edx, edx
:00443CD9 8A15D8484B00            mov dl, byte ptr [004B48D8]
:00443CDF 83C206                  add edx, 00000006
:00443CE2 52                      push edx
:00443CE3 B958494B00              mov ecx, 004B4958
:00443CE8 E85B8C0000              call 0044C948

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00443B93(U), :00443BE8(U)
|
:00443CED B9F8544B00              mov ecx, 004B54F8
:00443CF2 E8FB570200              call 004694F2
:00443CF7 8BE5                    mov esp, ebp
:00443CF9 5D                      pop ebp
:00443CFA C3                      ret



* Referenced by a CALL at Addresses:
|:00444509   , :004446A5   
|
:00443CFB 55                      push ebp
:00443CFC 8BEC                    mov ebp, esp
:00443CFE 51                      push ecx
:00443CFF 894DFC                  mov dword ptr [ebp-04], ecx
:00443D02 8B45FC                  mov eax, dword ptr [ebp-04]
:00443D05 33C9                    xor ecx, ecx
:00443D07 8A4811                  mov cl, byte ptr [eax+11]
:00443D0A 8B55FC                  mov edx, dword ptr [ebp-04]
:00443D0D 8B45FC                  mov eax, dword ptr [ebp-04]
:00443D10 8B4C8A1C                mov ecx, dword ptr [edx+4*ecx+1C]
:00443D14 2B4834                  sub ecx, dword ptr [eax+34]
:00443D17 51                      push ecx
:00443D18 8B55FC                  mov edx, dword ptr [ebp-04]
:00443D1B 33C0                    xor eax, eax
:00443D1D 8A4211                  mov al, byte ptr [edx+11]
:00443D20 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443D23 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:00443D26 E8EAF4FEFF              call 00433215
:00443D2B 8B55FC                  mov edx, dword ptr [ebp-04]
:00443D2E 33C0                    xor eax, eax
:00443D30 8A4211                  mov al, byte ptr [edx+11]
:00443D33 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443D36 8B55FC                  mov edx, dword ptr [ebp-04]
:00443D39 8B448124                mov eax, dword ptr [ecx+4*eax+24]
:00443D3D 2B4238                  sub eax, dword ptr [edx+38]
:00443D40 50                      push eax
:00443D41 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443D44 33D2                    xor edx, edx
:00443D46 8A5111                  mov dl, byte ptr [ecx+11]
:00443D49 8B45FC                  mov eax, dword ptr [ebp-04]
:00443D4C 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:00443D4F E802F5FEFF              call 00433256
:00443D54 6A01                    push 00000001
:00443D56 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443D59 33D2                    xor edx, edx
:00443D5B 8A5110                  mov dl, byte ptr [ecx+10]
:00443D5E 8B45FC                  mov eax, dword ptr [ebp-04]
:00443D61 8B4C9008                mov ecx, dword ptr [eax+4*edx+08]
:00443D65 E876A1FEFF              call 0042DEE0
:00443D6A 25FF000000              and eax, 000000FF
:00443D6F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443D72 03413C                  add eax, dword ptr [ecx+3C]
:00443D75 8B55FC                  mov edx, dword ptr [ebp-04]
:00443D78 034240                  add eax, dword ptr [edx+40]
:00443D7B 50                      push eax
:00443D7C 8B45FC                  mov eax, dword ptr [ebp-04]
:00443D7F 33C9                    xor ecx, ecx
:00443D81 8A4810                  mov cl, byte ptr [eax+10]
:00443D84 8B55FC                  mov edx, dword ptr [ebp-04]
:00443D87 8B4C8A08                mov ecx, dword ptr [edx+4*ecx+08]
:00443D8B E81AE7FBFF              call 004024AA
:00443D90 8B45FC                  mov eax, dword ptr [ebp-04]
:00443D93 33C9                    xor ecx, ecx
:00443D95 8A4811                  mov cl, byte ptr [eax+11]
:00443D98 8B55FC                  mov edx, dword ptr [ebp-04]
:00443D9B 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:00443D9E E8DE2BFFFF              call 00436981
:00443DA3 85C0                    test eax, eax
:00443DA5 7413                    je 00443DBA
:00443DA7 8B45FC                  mov eax, dword ptr [ebp-04]
:00443DAA 33C9                    xor ecx, ecx
:00443DAC 8A4811                  mov cl, byte ptr [eax+11]
:00443DAF 8B55FC                  mov edx, dword ptr [ebp-04]
:00443DB2 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:00443DB5 E88E0AFFFF              call 00434848

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443DA5(C)
|
:00443DBA 8BE5                    mov esp, ebp
:00443DBC 5D                      pop ebp
:00443DBD C3                      ret



* Referenced by a CALL at Addresses:
|:004441B7   , :004445D7   , :004446FE   
|
:00443DBE 55                      push ebp
:00443DBF 8BEC                    mov ebp, esp
:00443DC1 83EC08                  sub esp, 00000008
:00443DC4 894DF8                  mov dword ptr [ebp-08], ecx
:00443DC7 8B45F8                  mov eax, dword ptr [ebp-08]
:00443DCA 8A4D10                  mov cl, byte ptr [ebp+10]
:00443DCD 884812                  mov byte ptr [eax+12], cl
:00443DD0 8B55F8                  mov edx, dword ptr [ebp-08]
:00443DD3 8A4514                  mov al, byte ptr [ebp+14]
:00443DD6 884213                  mov byte ptr [edx+13], al
:00443DD9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443DDC 8A5518                  mov dl, byte ptr [ebp+18]
:00443DDF 885114                  mov byte ptr [ecx+14], dl
:00443DE2 8B45F8                  mov eax, dword ptr [ebp-08]
:00443DE5 C6401501                mov [eax+15], 01
:00443DE9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443DEC C6411900                mov [ecx+19], 00
:00443DF0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00443DF3 81E1FF000000            and ecx, 000000FF
:00443DF9 6BC924                  imul ecx, 00000024
:00443DFC 81C1B83B4B00            add ecx, 004B3BB8
:00443E02 E8098BFCFF              call 0040C910
:00443E07 85C0                    test eax, eax
:00443E09 743F                    je 00443E4A
:00443E0B 8B5508                  mov edx, dword ptr [ebp+08]
:00443E0E 81E2FF000000            and edx, 000000FF
:00443E14 6BD224                  imul edx, 00000024
:00443E17 81C2B83B4B00            add edx, 004B3BB8
:00443E1D 8B45F8                  mov eax, dword ptr [ebp-08]
:00443E20 8910                    mov dword ptr [eax], edx
:00443E22 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443E25 C6411000                mov [ecx+10], 00
:00443E29 8B550C                  mov edx, dword ptr [ebp+0C]
:00443E2C 81E2FF000000            and edx, 000000FF
:00443E32 6BD224                  imul edx, 00000024
:00443E35 81C2B83B4B00            add edx, 004B3BB8
:00443E3B 8B45F8                  mov eax, dword ptr [ebp-08]
:00443E3E 895004                  mov dword ptr [eax+04], edx
:00443E41 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443E44 C6411101                mov [ecx+11], 01
:00443E48 EB3D                    jmp 00443E87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443E09(C)
|
:00443E4A 8B5508                  mov edx, dword ptr [ebp+08]
:00443E4D 81E2FF000000            and edx, 000000FF
:00443E53 6BD224                  imul edx, 00000024
:00443E56 81C2B83B4B00            add edx, 004B3BB8
:00443E5C 8B45F8                  mov eax, dword ptr [ebp-08]
:00443E5F 895004                  mov dword ptr [eax+04], edx
:00443E62 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443E65 C6411001                mov [ecx+10], 01
:00443E69 8B550C                  mov edx, dword ptr [ebp+0C]
:00443E6C 81E2FF000000            and edx, 000000FF
:00443E72 6BD224                  imul edx, 00000024
:00443E75 81C2B83B4B00            add edx, 004B3BB8
:00443E7B 8B45F8                  mov eax, dword ptr [ebp-08]
:00443E7E 8910                    mov dword ptr [eax], edx
:00443E80 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443E83 C6411100                mov [ecx+11], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443E48(U)
|
:00443E87 C745FC00000000          mov [ebp-04], 00000000
:00443E8E EB09                    jmp 00443E99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443F0D(U)
|
:00443E90 8B55FC                  mov edx, dword ptr [ebp-04]
:00443E93 83C201                  add edx, 00000001
:00443E96 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443E8E(U)
|
:00443E99 837DFC02                cmp dword ptr [ebp-04], 00000002
:00443E9D 7370                    jnb 00443F0F
:00443E9F 8B45FC                  mov eax, dword ptr [ebp-04]
:00443EA2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443EA5 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:00443EA8 E8332BFFFF              call 004369E0
:00443EAD 6BC050                  imul eax, 00000050
:00443EB0 05787F4900              add eax, 00497F78
:00443EB5 8B55FC                  mov edx, dword ptr [ebp-04]
:00443EB8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443EBB 89449108                mov dword ptr [ecx+4*edx+08], eax
:00443EBF 8B55FC                  mov edx, dword ptr [ebp-04]
:00443EC2 8B45F8                  mov eax, dword ptr [ebp-08]
:00443EC5 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:00443EC8 E813F4FBFF              call 004032E0
:00443ECD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443ED0 8B55F8                  mov edx, dword ptr [ebp-08]
:00443ED3 89448A1C                mov dword ptr [edx+4*ecx+1C], eax
:00443ED7 8B45FC                  mov eax, dword ptr [ebp-04]
:00443EDA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443EDD 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:00443EE0 E81BF4FBFF              call 00403300
:00443EE5 8B55FC                  mov edx, dword ptr [ebp-04]
:00443EE8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443EEB 89449124                mov dword ptr [ecx+4*edx+24], eax
:00443EEF 8B55FC                  mov edx, dword ptr [ebp-04]
:00443EF2 8B45F8                  mov eax, dword ptr [ebp-08]
:00443EF5 8B4C9008                mov ecx, dword ptr [eax+4*edx+08]
:00443EF9 E8A2F2FBFF              call 004031A0
:00443EFE 25FF000000              and eax, 000000FF
:00443F03 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00443F06 8B55F8                  mov edx, dword ptr [ebp-08]
:00443F09 89448A2C                mov dword ptr [edx+4*ecx+2C], eax
:00443F0D EB81                    jmp 00443E90

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443E9D(C)
|
:00443F0F 8B45F8                  mov eax, dword ptr [ebp-08]
:00443F12 33C9                    xor ecx, ecx
:00443F14 8A4810                  mov cl, byte ptr [eax+10]
:00443F17 8B55F8                  mov edx, dword ptr [ebp-08]
:00443F1A 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:00443F1D E8BE2AFFFF              call 004369E0
:00443F22 8BC8                    mov ecx, eax
:00443F24 6BC950                  imul ecx, 00000050
:00443F27 81C1787F4900            add ecx, 00497F78
:00443F2D E888DFFBFF              call 00401EBA
:00443F32 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443F35 33D2                    xor edx, edx
:00443F37 8A5110                  mov dl, byte ptr [ecx+10]
:00443F3A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443F3D 88441144                mov byte ptr [ecx+edx+44], al
:00443F41 8B55F8                  mov edx, dword ptr [ebp-08]
:00443F44 33C0                    xor eax, eax
:00443F46 8A4211                  mov al, byte ptr [edx+11]
:00443F49 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443F4C 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:00443F4F E88C2AFFFF              call 004369E0
:00443F54 8BC8                    mov ecx, eax
:00443F56 6BC950                  imul ecx, 00000050
:00443F59 81C1787F4900            add ecx, 00497F78
:00443F5F E856DFFBFF              call 00401EBA
:00443F64 8B55F8                  mov edx, dword ptr [ebp-08]
:00443F67 33C9                    xor ecx, ecx
:00443F69 8A4A11                  mov cl, byte ptr [edx+11]
:00443F6C 8B55F8                  mov edx, dword ptr [ebp-08]
:00443F6F 88440A44                mov byte ptr [edx+ecx+44], al
:00443F73 8B45F8                  mov eax, dword ptr [ebp-08]
:00443F76 33C9                    xor ecx, ecx
:00443F78 8A4810                  mov cl, byte ptr [eax+10]
:00443F7B 8B55F8                  mov edx, dword ptr [ebp-08]
:00443F7E 8A4508                  mov al, byte ptr [ebp+08]
:00443F81 88440A46                mov byte ptr [edx+ecx+46], al
:00443F85 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443F88 33D2                    xor edx, edx
:00443F8A 8A5111                  mov dl, byte ptr [ecx+11]
:00443F8D 8B45F8                  mov eax, dword ptr [ebp-08]
:00443F90 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00443F93 884C1046                mov byte ptr [eax+edx+46], cl
:00443F97 8B55F8                  mov edx, dword ptr [ebp-08]
:00443F9A 33C0                    xor eax, eax
:00443F9C 8A4210                  mov al, byte ptr [edx+10]
:00443F9F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443FA2 33D2                    xor edx, edx
:00443FA4 8A540146                mov dl, byte ptr [ecx+eax+46]
:00443FA8 52                      push edx
:00443FA9 E859010000              call 00444107
:00443FAE 83C404                  add esp, 00000004
:00443FB1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443FB4 884118                  mov byte ptr [ecx+18], al
:00443FB7 8B55F8                  mov edx, dword ptr [ebp-08]
:00443FBA 33C0                    xor eax, eax
:00443FBC 8A4210                  mov al, byte ptr [edx+10]
:00443FBF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443FC2 33D2                    xor edx, edx
:00443FC4 8A540146                mov dl, byte ptr [ecx+eax+46]
:00443FC8 52                      push edx
:00443FC9 E822E2FFFF              call 004421F0
:00443FCE 83C404                  add esp, 00000004
:00443FD1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00443FD4 884116                  mov byte ptr [ecx+16], al
:00443FD7 B978294B00              mov ecx, 004B2978
:00443FDC E8CF88FCFF              call 0040C8B0
:00443FE1 83E010                  and eax, 00000010
:00443FE4 85C0                    test eax, eax
:00443FE6 741B                    je 00444003
:00443FE8 8B550C                  mov edx, dword ptr [ebp+0C]
:00443FEB 81E2FF000000            and edx, 000000FF
:00443FF1 52                      push edx
:00443FF2 8B4508                  mov eax, dword ptr [ebp+08]
:00443FF5 25FF000000              and eax, 000000FF
:00443FFA 50                      push eax
:00443FFB E831000000              call 00444031
:00444000 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00443FE6(C)
|
:00444003 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444006 C7413400000000          mov [ecx+34], 00000000
:0044400D 8B55F8                  mov edx, dword ptr [ebp-08]
:00444010 C7423800000000          mov [edx+38], 00000000
:00444017 8B45F8                  mov eax, dword ptr [ebp-08]
:0044401A C7403C00000000          mov [eax+3C], 00000000
:00444021 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444024 C7414000000000          mov [ecx+40], 00000000
:0044402B 8BE5                    mov esp, ebp
:0044402D 5D                      pop ebp
:0044402E C21400                  ret 0014



* Referenced by a CALL at Address:
|:00443FFB   
|
:00444031 55                      push ebp
:00444032 8BEC                    mov ebp, esp
:00444034 83EC10                  sub esp, 00000010
:00444037 B958494B00              mov ecx, 004B4958
:0044403C E802A90000              call 0044E943
:00444041 2B05941E4800            sub eax, dword ptr [00481E94]
:00444047 83C010                  add eax, 00000010
:0044404A 99                      cdq
:0044404B 83E20F                  and edx, 0000000F
:0044404E 03C2                    add eax, edx
:00444050 C1F804                  sar eax, 04
:00444053 8945FC                  mov dword ptr [ebp-04], eax
:00444056 8B45FC                  mov eax, dword ptr [ebp-04]
:00444059 D1F8                    sar eax, 1
:0044405B A2D8484B00              mov byte ptr [004B48D8], al
:00444060 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00444063 51                      push ecx
:00444064 8D55F8                  lea edx, dword ptr [ebp-08]
:00444067 52                      push edx
:00444068 E83F600000              call 0044A0AC
:0044406D 83C408                  add esp, 00000008
:00444070 50                      push eax
:00444071 B9DC484B00              mov ecx, 004B48DC
:00444076 E8252AFFFF              call 00436AA0
:0044407B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044407E 6BC924                  imul ecx, 00000024
:00444081 81C1B83B4B00            add ecx, 004B3BB8
:00444087 E88488FCFF              call 0040C910
:0044408C 85C0                    test eax, eax
:0044408E 7410                    je 004440A0
:00444090 8B45FC                  mov eax, dword ptr [ebp-04]
:00444093 25FF000000              and eax, 000000FF
:00444098 83C00E                  add eax, 0000000E
:0044409B 8945F4                  mov dword ptr [ebp-0C], eax
:0044409E EB0F                    jmp 004440AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044408E(C)
|
:004440A0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004440A3 81E1FF000000            and ecx, 000000FF
:004440A9 83C12A                  add ecx, 0000002A
:004440AC 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044409E(U)
|
:004440AF 8A55F4                  mov dl, byte ptr [ebp-0C]
:004440B2 8815DC484B00            mov byte ptr [004B48DC], dl
:004440B8 33C0                    xor eax, eax
:004440BA A0DC484B00              mov al, byte ptr [004B48DC]
:004440BF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004440C2 81E1FF000000            and ecx, 000000FF
:004440C8 83C12A                  add ecx, 0000002A
:004440CB 3BC1                    cmp eax, ecx
:004440CD 7511                    jne 004440E0
:004440CF 8B55FC                  mov edx, dword ptr [ebp-04]
:004440D2 81E2FF000000            and edx, 000000FF
:004440D8 83C20E                  add edx, 0000000E
:004440DB 8955F0                  mov dword ptr [ebp-10], edx
:004440DE EB0E                    jmp 004440EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004440CD(C)
|
:004440E0 8B45FC                  mov eax, dword ptr [ebp-04]
:004440E3 25FF000000              and eax, 000000FF
:004440E8 83C02A                  add eax, 0000002A
:004440EB 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004440DE(U)
|
:004440EE 8A4DF0                  mov cl, byte ptr [ebp-10]
:004440F1 880D3C494B00            mov byte ptr [004B493C], cl
:004440F7 8A15DD484B00            mov dl, byte ptr [004B48DD]
:004440FD 88153D494B00            mov byte ptr [004B493D], dl
:00444103 8BE5                    mov esp, ebp
:00444105 5D                      pop ebp
:00444106 C3                      ret



* Referenced by a CALL at Address:
|:00443FA9   
|
:00444107 55                      push ebp
:00444108 8BEC                    mov ebp, esp
:0044410A 83EC0C                  sub esp, 0000000C
:0044410D C645F400                mov [ebp-0C], 00
:00444111 8B4D08                  mov ecx, dword ptr [ebp+08]
:00444114 6BC924                  imul ecx, 00000024
:00444117 81C1B83B4B00            add ecx, 004B3BB8
:0044411D E8BE28FFFF              call 004369E0
:00444122 8945FC                  mov dword ptr [ebp-04], eax
:00444125 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444128 6BC950                  imul ecx, 00000050
:0044412B 81C1787F4900            add ecx, 00497F78
:00444131 E88AF0FBFF              call 004031C0
:00444136 8845F8                  mov byte ptr [ebp-08], al
:00444139 8B45F8                  mov eax, dword ptr [ebp-08]
:0044413C 25FF000000              and eax, 000000FF
:00444141 3DFF000000              cmp eax, 000000FF
:00444146 742E                    je 00444176
:00444148 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044414B 51                      push ecx
:0044414C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044414F 6BC950                  imul ecx, 00000050
:00444152 81C1787F4900            add ecx, 00497F78
:00444158 E883F0FBFF              call 004031E0
:0044415D 8AC8                    mov cl, al
:0044415F 81E1FF000000            and ecx, 000000FF
:00444165 6BC922                  imul ecx, 00000022
:00444168 81C1D0474900            add ecx, 004947D0
:0044416E E8DD2AFFFF              call 00436C50
:00444173 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444146(C)
|
:00444176 8B55F4                  mov edx, dword ptr [ebp-0C]
:00444179 81E2FF000000            and edx, 000000FF
:0044417F 85D2                    test edx, edx
:00444181 7504                    jne 00444187
:00444183 C645F4FF                mov [ebp-0C], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444181(C)
|
:00444187 8A45F4                  mov al, byte ptr [ebp-0C]
:0044418A 8BE5                    mov esp, ebp
:0044418C 5D                      pop ebp
:0044418D C3                      ret



* Referenced by a CALL at Addresses:
|:0043B55F   , :0043B5F4   , :0043B849   , :0043B8DE   , :0043BB0D   
|:0043BBA2   , :0043BD25   , :0043BDBC   , :0043BF7A   , :0043C135   
|:0043C1CA   , :0043C379   , :0043C527   , :0043C6E4   , :0043C93E   
|:0043C9F4   , :0043CBF4   , :0043CC3F   , :0043D3AC   , :0043D441   
|:0043D61E   , :004448CD   , :00444934   , :004525C5   , :00456591   
|
:0044418E 55                      push ebp
:0044418F 8BEC                    mov ebp, esp
:00444191 83EC2C                  sub esp, 0000002C
:00444194 894DD4                  mov dword ptr [ebp-2C], ecx
:00444197 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044419A 83C048                  add eax, 00000048
:0044419D 8945F4                  mov dword ptr [ebp-0C], eax
:004441A0 8A4D18                  mov cl, byte ptr [ebp+18]
:004441A3 51                      push ecx
:004441A4 8A5514                  mov dl, byte ptr [ebp+14]
:004441A7 52                      push edx
:004441A8 8A4510                  mov al, byte ptr [ebp+10]
:004441AB 50                      push eax
:004441AC 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004441AF 51                      push ecx
:004441B0 8A5508                  mov dl, byte ptr [ebp+08]
:004441B3 52                      push edx
:004441B4 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004441B7 E802FCFFFF              call 00443DBE
:004441BC C745F800000000          mov [ebp-08], 00000000
:004441C3 EB09                    jmp 004441CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004441DE(U)
|
:004441C5 8B45F8                  mov eax, dword ptr [ebp-08]
:004441C8 83C001                  add eax, 00000001
:004441CB 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004441C3(U)
|
:004441CE 837DF811                cmp dword ptr [ebp-08], 00000011
:004441D2 730C                    jnb 004441E0
:004441D4 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004441D7 034DF8                  add ecx, dword ptr [ebp-08]
:004441DA C64148FF                mov [ecx+48], FF
:004441DE EBE5                    jmp 004441C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004441D2(C)
|
:004441E0 6A00                    push 00000000
:004441E2 B9C0534B00              mov ecx, 004B53C0
:004441E7 E8749CFEFF              call 0042DE60
:004441EC 6A00                    push 00000000
:004441EE 6A00                    push 00000000
:004441F0 E8089B0200              call 0046DCFD
:004441F5 83C408                  add esp, 00000008
:004441F8 8B55D4                  mov edx, dword ptr [ebp-2C]
:004441FB 33C0                    xor eax, eax
:004441FD 8A4218                  mov al, byte ptr [edx+18]
:00444200 3DFF000000              cmp eax, 000000FF
:00444205 0F8498000000            je 004442A3
:0044420B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044420E 33D2                    xor edx, edx
:00444210 8A5112                  mov dl, byte ptr [ecx+12]
:00444213 83FA01                  cmp edx, 00000001
:00444216 0F8587000000            jne 004442A3
:0044421C 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044421F 33C9                    xor ecx, ecx
:00444221 8A4813                  mov cl, byte ptr [eax+13]
:00444224 83F901                  cmp ecx, 00000001
:00444227 747A                    je 004442A3
:00444229 68FF000000              push 000000FF
:0044422E 68FF000000              push 000000FF
:00444233 6A00                    push 00000000
:00444235 8B55D4                  mov edx, dword ptr [ebp-2C]
:00444238 83C248                  add edx, 00000048
:0044423B 52                      push edx
:0044423C 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044423F 8A4818                  mov cl, byte ptr [eax+18]
:00444242 51                      push ecx
:00444243 8A550C                  mov dl, byte ptr [ebp+0C]
:00444246 52                      push edx
:00444247 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044424A 33C9                    xor ecx, ecx
:0044424C 8A4810                  mov cl, byte ptr [eax+10]
:0044424F 8B55D4                  mov edx, dword ptr [ebp-2C]
:00444252 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:00444255 E809220100              call 00456463
:0044425A 8945F4                  mov dword ptr [ebp-0C], eax
:0044425D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00444260 8945EC                  mov dword ptr [ebp-14], eax
:00444263 C745F001000000          mov [ebp-10], 00000001
:0044426A EB12                    jmp 0044427E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004442A1(U)
|
:0044426C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044426F 83C101                  add ecx, 00000001
:00444272 894DEC                  mov dword ptr [ebp-14], ecx
:00444275 8B55F0                  mov edx, dword ptr [ebp-10]
:00444278 83C201                  add edx, 00000001
:0044427B 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044426A(U)
|
:0044427E 8B45EC                  mov eax, dword ptr [ebp-14]
:00444281 33C9                    xor ecx, ecx
:00444283 8A08                    mov cl, byte ptr [eax]
:00444285 81F9FF000000            cmp ecx, 000000FF
:0044428B 7416                    je 004442A3
:0044428D 8B55F0                  mov edx, dword ptr [ebp-10]
:00444290 52                      push edx
:00444291 8B45EC                  mov eax, dword ptr [ebp-14]
:00444294 33C9                    xor ecx, ecx
:00444296 8A08                    mov cl, byte ptr [eax]
:00444298 51                      push ecx
:00444299 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044429C E8FAEFFFFF              call 0044329B
:004442A1 EBC9                    jmp 0044426C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444205(C), :00444216(C), :00444227(C), :0044428B(C)
|
:004442A3 6A00                    push 00000000
:004442A5 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004442A8 E844F3FFFF              call 004435F1
:004442AD 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004442B0 E83B14FCFF              call 004056F0
:004442B5 8B55D4                  mov edx, dword ptr [ebp-2C]
:004442B8 33C0                    xor eax, eax
:004442BA 8A4211                  mov al, byte ptr [edx+11]
:004442BD 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004442C0 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:004442C3 E878D9FEFF              call 00431C40
:004442C8 50                      push eax
:004442C9 8D4DFC                  lea ecx, dword ptr [ebp-04]
:004442CC E8CF27FFFF              call 00436AA0
:004442D1 8A55FD                  mov dl, byte ptr [ebp-03]
:004442D4 52                      push edx
:004442D5 8A45FC                  mov al, byte ptr [ebp-04]
:004442D8 50                      push eax
:004442D9 B958494B00              mov ecx, 004B4958
:004442DE E80A980000              call 0044DAED
:004442E3 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004442E6 33D2                    xor edx, edx
:004442E8 8A5112                  mov dl, byte ptr [ecx+12]
:004442EB 83FA01                  cmp edx, 00000001
:004442EE 0F85EC000000            jne 004443E0
:004442F4 B978294B00              mov ecx, 004B2978
:004442F9 E8B285FCFF              call 0040C8B0
:004442FE 2500800000              and eax, 00008000
:00444303 85C0                    test eax, eax
:00444305 7515                    jne 0044431C
:00444307 6A00                    push 00000000
:00444309 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044430C 33C9                    xor ecx, ecx
:0044430E 8A4816                  mov cl, byte ptr [eax+16]
:00444311 51                      push ecx
:00444312 E890E3FFFF              call 004426A7
:00444317 83C408                  add esp, 00000008
:0044431A EB4F                    jmp 0044436B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444305(C)
|
:0044431C 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044431F 33C0                    xor eax, eax
:00444321 8A4210                  mov al, byte ptr [edx+10]
:00444324 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00444327 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0044432A E811D9FEFF              call 00431C40
:0044432F 668B10                  mov dx, word ptr [eax]
:00444332 668955E8                mov word ptr [ebp-18], dx
:00444336 6A00                    push 00000000
:00444338 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044433B 8A4812                  mov cl, byte ptr [eax+12]
:0044433E 51                      push ecx
:0044433F 6A00                    push 00000000
:00444341 8B55D4                  mov edx, dword ptr [ebp-2C]
:00444344 33C0                    xor eax, eax
:00444346 8A4211                  mov al, byte ptr [edx+11]
:00444349 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044434C 8A540146                mov dl, byte ptr [ecx+eax+46]
:00444350 52                      push edx
:00444351 8B45D4                  mov eax, dword ptr [ebp-2C]
:00444354 33C9                    xor ecx, ecx
:00444356 8A4810                  mov cl, byte ptr [eax+10]
:00444359 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044435C 8A440A46                mov al, byte ptr [edx+ecx+46]
:00444360 50                      push eax
:00444361 B958494B00              mov ecx, 004B4958
:00444366 E825A40000              call 0044E790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044431A(U)
|
:0044436B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044436E 33D2                    xor edx, edx
:00444370 8A5119                  mov dl, byte ptr [ecx+19]
:00444373 83FA01                  cmp edx, 00000001
:00444376 752C                    jne 004443A4
:00444378 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044437B 33C9                    xor ecx, ecx
:0044437D 8A4810                  mov cl, byte ptr [eax+10]
:00444380 8B55D4                  mov edx, dword ptr [ebp-2C]
:00444383 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:00444386 E86526FFFF              call 004369F0
:0044438B 50                      push eax

* Possible StringData Ref from Data Obj ->"%soXO@I"
                                  |
:0044438C 68FCE84700              push 0047E8FC
:00444391 6A00                    push 00000000
:00444393 E89BD0FEFF              call 00431433
:00444398 83C40C                  add esp, 0000000C
:0044439B 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044439E C6401900                mov [eax+19], 00
:004443A2 EB37                    jmp 004443DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444376(C)
|
:004443A4 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004443A7 33D2                    xor edx, edx
:004443A9 8A5119                  mov dl, byte ptr [ecx+19]
:004443AC 83FA02                  cmp edx, 00000002
:004443AF 752A                    jne 004443DB
:004443B1 8B45D4                  mov eax, dword ptr [ebp-2C]
:004443B4 33C9                    xor ecx, ecx
:004443B6 8A4810                  mov cl, byte ptr [eax+10]
:004443B9 8B55D4                  mov edx, dword ptr [ebp-2C]
:004443BC 8B0C8A                  mov ecx, dword ptr [edx+4*ecx]
:004443BF E82C26FFFF              call 004369F0
:004443C4 50                      push eax

* Possible StringData Ref from Data Obj ->"B%sAhI"
                                  |
:004443C5 6810E94700              push 0047E910
:004443CA 6A00                    push 00000000
:004443CC E862D0FEFF              call 00431433
:004443D1 83C40C                  add esp, 0000000C
:004443D4 8B45D4                  mov eax, dword ptr [ebp-2C]
:004443D7 C6401900                mov [eax+19], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004443A2(U), :004443AF(C)
|
:004443DB E916010000              jmp 004444F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004442EE(C)
|
:004443E0 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004443E3 33D2                    xor edx, edx
:004443E5 8A5112                  mov dl, byte ptr [ecx+12]
:004443E8 83FA02                  cmp edx, 00000002
:004443EB 7411                    je 004443FE
:004443ED 8B45D4                  mov eax, dword ptr [ebp-2C]
:004443F0 33C9                    xor ecx, ecx
:004443F2 8A4812                  mov cl, byte ptr [eax+12]
:004443F5 83F903                  cmp ecx, 00000003
:004443F8 0F85F8000000            jne 004444F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004443EB(C)
|
:004443FE 8B55D4                  mov edx, dword ptr [ebp-2C]
:00444401 33C0                    xor eax, eax
:00444403 3B4234                  cmp eax, dword ptr [edx+34]
:00444406 1BC9                    sbb ecx, ecx
:00444408 F7D9                    neg ecx
:0044440A 894DDC                  mov dword ptr [ebp-24], ecx
:0044440D 8B55D4                  mov edx, dword ptr [ebp-2C]
:00444410 33C0                    xor eax, eax
:00444412 8A4211                  mov al, byte ptr [edx+11]
:00444415 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00444418 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0044441B E820D8FEFF              call 00431C40
:00444420 668B10                  mov dx, word ptr [eax]
:00444423 668955E0                mov word ptr [ebp-20], dx
:00444427 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044442A 33C9                    xor ecx, ecx
:0044442C 8A4813                  mov cl, byte ptr [eax+13]
:0044442F C1F904                  sar ecx, 04
:00444432 83E101                  and ecx, 00000001
:00444435 884DE4                  mov byte ptr [ebp-1C], cl
:00444438 8B551C                  mov edx, dword ptr [ebp+1C]
:0044443B 81E2FF000000            and edx, 000000FF
:00444441 85D2                    test edx, edx
:00444443 753E                    jne 00444483
:00444445 8B45DC                  mov eax, dword ptr [ebp-24]
:00444448 50                      push eax
:00444449 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044444C 8A5112                  mov dl, byte ptr [ecx+12]
:0044444F 52                      push edx
:00444450 8B45D4                  mov eax, dword ptr [ebp-2C]
:00444453 8A4814                  mov cl, byte ptr [eax+14]
:00444456 51                      push ecx
:00444457 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044445A 33C0                    xor eax, eax
:0044445C 8A4211                  mov al, byte ptr [edx+11]
:0044445F 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00444462 8A540146                mov dl, byte ptr [ecx+eax+46]
:00444466 52                      push edx
:00444467 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044446A 33C9                    xor ecx, ecx
:0044446C 8A4810                  mov cl, byte ptr [eax+10]
:0044446F 8B55D4                  mov edx, dword ptr [ebp-2C]
:00444472 8A440A46                mov al, byte ptr [edx+ecx+46]
:00444476 50                      push eax
:00444477 B958494B00              mov ecx, 004B4958
:0044447C E80FA30000              call 0044E790
:00444481 EB31                    jmp 004444B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444443(C)
|
:00444483 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00444486 51                      push ecx
:00444487 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044448A 8A4212                  mov al, byte ptr [edx+12]
:0044448D 50                      push eax
:0044448E 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00444491 8A5114                  mov dl, byte ptr [ecx+14]
:00444494 52                      push edx
:00444495 8B45D4                  mov eax, dword ptr [ebp-2C]
:00444498 33C9                    xor ecx, ecx
:0044449A 8A4811                  mov cl, byte ptr [eax+11]
:0044449D 8B55D4                  mov edx, dword ptr [ebp-2C]
:004444A0 8A440A46                mov al, byte ptr [edx+ecx+46]
:004444A4 50                      push eax
:004444A5 68FF000000              push 000000FF
:004444AA B958494B00              mov ecx, 004B4958
:004444AF E8DCA20000              call 0044E790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444481(U)
|
:004444B4 837DDC00                cmp dword ptr [ebp-24], 00000000
:004444B8 743C                    je 004444F6
:004444BA 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004444BD 33D2                    xor edx, edx
:004444BF 8A5114                  mov dl, byte ptr [ecx+14]
:004444C2 83FA09                  cmp edx, 00000009
:004444C5 741A                    je 004444E1
:004444C7 8B45D4                  mov eax, dword ptr [ebp-2C]
:004444CA 33C9                    xor ecx, ecx
:004444CC 8A4814                  mov cl, byte ptr [eax+14]
:004444CF 83F917                  cmp ecx, 00000017
:004444D2 740D                    je 004444E1
:004444D4 8B55D4                  mov edx, dword ptr [ebp-2C]
:004444D7 33C0                    xor eax, eax
:004444D9 8A4214                  mov al, byte ptr [edx+14]
:004444DC 83F818                  cmp eax, 00000018
:004444DF 7515                    jne 004444F6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004444C5(C), :004444D2(C)
|
:004444E1 6A10                    push 00000010
:004444E3 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004444E6 33D2                    xor edx, edx
:004444E8 8A5111                  mov dl, byte ptr [ecx+11]
:004444EB 8B45D4                  mov eax, dword ptr [ebp-2C]
:004444EE 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:004444F1 E8CADAFFFF              call 00441FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004443DB(U), :004443F8(C), :004444B8(C), :004444DF(C)
|
:004444F6 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004444F9 E879F3FFFF              call 00443877
:004444FE 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00444501 E816F6FFFF              call 00443B1C
:00444506 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00444509 E8EDF7FFFF              call 00443CFB
:0044450E 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00444511 33D2                    xor edx, edx
:00444513 8A5110                  mov dl, byte ptr [ecx+10]
:00444516 8B45D4                  mov eax, dword ptr [ebp-2C]
:00444519 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0044451C E8BF24FFFF              call 004369E0
:00444521 50                      push eax
:00444522 E8F5850200              call 0046CB1C
:00444527 83C404                  add esp, 00000004
:0044452A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044452D 33D2                    xor edx, edx
:0044452F 8A5111                  mov dl, byte ptr [ecx+11]
:00444532 8B45D4                  mov eax, dword ptr [ebp-2C]
:00444535 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:00444538 E8A324FFFF              call 004369E0
:0044453D 50                      push eax
:0044453E E8D9850200              call 0046CB1C
:00444543 83C404                  add esp, 00000004
:00444546 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00444549 33D2                    xor edx, edx
:0044454B 8A5118                  mov dl, byte ptr [ecx+18]
:0044454E 81FAFF000000            cmp edx, 000000FF
:00444554 0F84A9010000            je 00444703
:0044455A 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044455D 33C9                    xor ecx, ecx
:0044455F 8A4812                  mov cl, byte ptr [eax+12]
:00444562 83F901                  cmp ecx, 00000001
:00444565 0F8598010000            jne 00444703
:0044456B 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044456E 33C0                    xor eax, eax
:00444570 8A4213                  mov al, byte ptr [edx+13]
:00444573 83F801                  cmp eax, 00000001
:00444576 0F8487010000            je 00444703
:0044457C 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044457F 33D2                    xor edx, edx
:00444581 8A5111                  mov dl, byte ptr [ecx+11]
:00444584 8B45D4                  mov eax, dword ptr [ebp-2C]
:00444587 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0044458A E81006FFFF              call 00434B9F
:0044458F C745D801000000          mov [ebp-28], 00000001
:00444596 EB12                    jmp 004445AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004446E1(U)
|
:00444598 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044459B 83C101                  add ecx, 00000001
:0044459E 894DF4                  mov dword ptr [ebp-0C], ecx
:004445A1 8B55D8                  mov edx, dword ptr [ebp-28]
:004445A4 83C201                  add edx, 00000001
:004445A7 8955D8                  mov dword ptr [ebp-28], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444596(U)
|
:004445AA 8B45F4                  mov eax, dword ptr [ebp-0C]
:004445AD 33C9                    xor ecx, ecx
:004445AF 8A08                    mov cl, byte ptr [eax]
:004445B1 81F9FF000000            cmp ecx, 000000FF
:004445B7 0F8429010000            je 004446E6
:004445BD 68FF000000              push 000000FF
:004445C2 8A5514                  mov dl, byte ptr [ebp+14]
:004445C5 52                      push edx
:004445C6 8A4510                  mov al, byte ptr [ebp+10]
:004445C9 50                      push eax
:004445CA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004445CD 8A11                    mov dl, byte ptr [ecx]
:004445CF 52                      push edx
:004445D0 8A4508                  mov al, byte ptr [ebp+08]
:004445D3 50                      push eax
:004445D4 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004445D7 E8E2F7FFFF              call 00443DBE
:004445DC 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004445DF 51                      push ecx
:004445E0 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004445E3 E809F0FFFF              call 004435F1
:004445E8 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004445EB E887F2FFFF              call 00443877
:004445F0 B978294B00              mov ecx, 004B2978
:004445F5 E8B682FCFF              call 0040C8B0
:004445FA 2500800000              and eax, 00008000
:004445FF 85C0                    test eax, eax
:00444601 746D                    je 00444670

* Possible Reference to String Resource ID=00006: ""
                                  |
:00444603 6A06                    push 00000006
:00444605 E8B1AFFEFF              call 0042F5BB
:0044460A 83C404                  add esp, 00000004
:0044460D E821BBFCFF              call 00410133
:00444612 6A00                    push 00000000
:00444614 8B55D8                  mov edx, dword ptr [ebp-28]
:00444617 52                      push edx
:00444618 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044461B 8A08                    mov cl, byte ptr [eax]
:0044461D 51                      push ecx
:0044461E E841E8FFFF              call 00442E64
:00444623 83C40C                  add esp, 0000000C
:00444626 8B55D4                  mov edx, dword ptr [ebp-2C]
:00444629 837A3400                cmp dword ptr [edx+34], 00000000
:0044462D 7415                    je 00444644
:0044462F 6A01                    push 00000001
:00444631 8B45D4                  mov eax, dword ptr [ebp-2C]
:00444634 33C9                    xor ecx, ecx
:00444636 8A4816                  mov cl, byte ptr [eax+16]
:00444639 51                      push ecx
:0044463A E868E0FFFF              call 004426A7
:0044463F 83C408                  add esp, 00000008
:00444642 EB0C                    jmp 00444650

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044462D(C)
|
:00444644 6A1F                    push 0000001F
:00444646 B9F8544B00              mov ecx, 004B54F8
:0044464B E8CA4E0200              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444642(U)
|
:00444650 E8F9BAFCFF              call 0041014E
:00444655 E876AFFEFF              call 0042F5D0
:0044465A 6A01                    push 00000001
:0044465C 8B55D8                  mov edx, dword ptr [ebp-28]
:0044465F 52                      push edx
:00444660 8B45F4                  mov eax, dword ptr [ebp-0C]
:00444663 8A08                    mov cl, byte ptr [eax]
:00444665 51                      push ecx
:00444666 E8F9E7FFFF              call 00442E64
:0044466B 83C40C                  add esp, 0000000C
:0044466E EB2A                    jmp 0044469A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444601(C)
|
:00444670 8B55D4                  mov edx, dword ptr [ebp-2C]
:00444673 837A3400                cmp dword ptr [edx+34], 00000000
:00444677 7415                    je 0044468E
:00444679 6A01                    push 00000001
:0044467B 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044467E 33C9                    xor ecx, ecx
:00444680 8A4816                  mov cl, byte ptr [eax+16]
:00444683 51                      push ecx
:00444684 E81EE0FFFF              call 004426A7
:00444689 83C408                  add esp, 00000008
:0044468C EB0C                    jmp 0044469A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444677(C)
|
:0044468E 6A1F                    push 0000001F
:00444690 B9F8544B00              mov ecx, 004B54F8
:00444695 E8804E0200              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044466E(U), :0044468C(U)
|
:0044469A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044469D E87AF4FFFF              call 00443B1C
:004446A2 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004446A5 E851F6FFFF              call 00443CFB
:004446AA 8B55F4                  mov edx, dword ptr [ebp-0C]
:004446AD 33C0                    xor eax, eax
:004446AF 8A02                    mov al, byte ptr [edx]
:004446B1 8BC8                    mov ecx, eax
:004446B3 6BC924                  imul ecx, 00000024
:004446B6 81C1B83B4B00            add ecx, 004B3BB8
:004446BC E8DE04FFFF              call 00434B9F
:004446C1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004446C4 33D2                    xor edx, edx
:004446C6 8A11                    mov dl, byte ptr [ecx]
:004446C8 8BCA                    mov ecx, edx
:004446CA 6BC924                  imul ecx, 00000024
:004446CD 81C1B83B4B00            add ecx, 004B3BB8
:004446D3 E80823FFFF              call 004369E0
:004446D8 50                      push eax
:004446D9 E83E840200              call 0046CB1C
:004446DE 83C404                  add esp, 00000004
:004446E1 E9B2FEFFFF              jmp 00444598

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004445B7(C)
|
:004446E6 68FF000000              push 000000FF
:004446EB 8A4514                  mov al, byte ptr [ebp+14]
:004446EE 50                      push eax
:004446EF 8A4D10                  mov cl, byte ptr [ebp+10]
:004446F2 51                      push ecx
:004446F3 8A550C                  mov dl, byte ptr [ebp+0C]
:004446F6 52                      push edx
:004446F7 8A4508                  mov al, byte ptr [ebp+08]
:004446FA 50                      push eax
:004446FB 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004446FE E8BBF6FFFF              call 00443DBE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444554(C), :00444565(C), :00444576(C)
|
:00444703 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00444706 E8E5F2FFFF              call 004439F0
:0044470B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044470E 8A5112                  mov dl, byte ptr [ecx+12]
:00444711 52                      push edx
:00444712 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00444715 E81E000000              call 00444738
:0044471A 6A00                    push 00000000
:0044471C 6A01                    push 00000001
:0044471E E8DA950200              call 0046DCFD
:00444723 83C408                  add esp, 00000008
:00444726 6A01                    push 00000001
:00444728 B9C0534B00              mov ecx, 004B53C0
:0044472D E82E97FEFF              call 0042DE60
:00444732 8BE5                    mov esp, ebp
:00444734 5D                      pop ebp
:00444735 C21800                  ret 0018



* Referenced by a CALL at Address:
|:00444715   
|
:00444738 55                      push ebp
:00444739 8BEC                    mov ebp, esp
:0044473B 83EC18                  sub esp, 00000018
:0044473E 53                      push ebx
:0044473F 56                      push esi
:00444740 894DE8                  mov dword ptr [ebp-18], ecx
:00444743 8B4508                  mov eax, dword ptr [ebp+08]
:00444746 25FF000000              and eax, 000000FF
:0044474B 83F801                  cmp eax, 00000001
:0044474E 0F85E7010000            jne 0044493B
:00444754 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00444757 33D2                    xor edx, edx
:00444759 8A5111                  mov dl, byte ptr [ecx+11]
:0044475C 8B45E8                  mov eax, dword ptr [ebp-18]
:0044475F 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:00444762 E8A981FCFF              call 0040C910
:00444767 8945F8                  mov dword ptr [ebp-08], eax
:0044476A C745FC00000000          mov [ebp-04], 00000000
:00444771 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00444774 33D2                    xor edx, edx
:00444776 8A5111                  mov dl, byte ptr [ecx+11]
:00444779 8B45E8                  mov eax, dword ptr [ebp-18]
:0044477C 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:0044477F E8E2E9FEFF              call 00433166
:00444784 8845F0                  mov byte ptr [ebp-10], al
:00444787 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044478A 33D2                    xor edx, edx
:0044478C 8A5111                  mov dl, byte ptr [ecx+11]
:0044478F 8B45E8                  mov eax, dword ptr [ebp-18]
:00444792 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:00444795 E8A6D4FEFF              call 00431C40
:0044479A 668B08                  mov cx, word ptr [eax]
:0044479D 66894DEC                mov word ptr [ebp-14], cx
:004447A1 8B55E8                  mov edx, dword ptr [ebp-18]
:004447A4 33C0                    xor eax, eax
:004447A6 8A4210                  mov al, byte ptr [edx+10]
:004447A9 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004447AC 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:004447AF E82CD8FFFF              call 00441FE0
:004447B4 A2504A4B00              mov byte ptr [004B4A50], al
:004447B9 6A00                    push 00000000
:004447BB 8B55F8                  mov edx, dword ptr [ebp-08]
:004447BE F7D2                    not edx
:004447C0 52                      push edx
:004447C1 8A45F0                  mov al, byte ptr [ebp-10]
:004447C4 50                      push eax
:004447C5 8D4DEC                  lea ecx, dword ptr [ebp-14]
:004447C8 51                      push ecx
:004447C9 8B55E8                  mov edx, dword ptr [ebp-18]
:004447CC 33C0                    xor eax, eax
:004447CE 8A4211                  mov al, byte ptr [edx+11]
:004447D1 8BC8                    mov ecx, eax
:004447D3 6BC924                  imul ecx, 00000024
:004447D6 81C1B83B4B00            add ecx, 004B3BB8
:004447DC E859B20000              call 0044FA3A
:004447E1 8845F4                  mov byte ptr [ebp-0C], al
:004447E4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004447E7 81E1FF000000            and ecx, 000000FF
:004447ED 33D2                    xor edx, edx
:004447EF 8A15504A4B00            mov dl, byte ptr [004B4A50]
:004447F5 3BCA                    cmp ecx, edx
:004447F7 7507                    jne 00444800
:004447F9 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004447F7(C)
|
:00444800 8B45E8                  mov eax, dword ptr [ebp-18]
:00444803 33C9                    xor ecx, ecx
:00444805 8A4810                  mov cl, byte ptr [eax+10]
:00444808 8B55E8                  mov edx, dword ptr [ebp-18]
:0044480B 33C0                    xor eax, eax
:0044480D 8A440A44                mov al, byte ptr [edx+ecx+44]
:00444811 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00444814 33D2                    xor edx, edx
:00444816 8A5111                  mov dl, byte ptr [ecx+11]
:00444819 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044481C 33DB                    xor ebx, ebx
:0044481E 8A5C1144                mov bl, byte ptr [ecx+edx+44]
:00444822 3BC3                    cmp eax, ebx
:00444824 0F8CA8000000            jl 004448D2
:0044482A 833D40494B0000          cmp dword ptr [004B4940], 00000000
:00444831 0F859B000000            jne 004448D2
:00444837 68FF000000              push 000000FF
:0044483C E86F3B0300              call 004783B0
:00444841 83C404                  add esp, 00000004
:00444844 8BF0                    mov esi, eax
:00444846 8B55E8                  mov edx, dword ptr [ebp-18]
:00444849 33C9                    xor ecx, ecx
:0044484B 8A4A10                  mov cl, byte ptr [edx+10]
:0044484E 8B55E8                  mov edx, dword ptr [ebp-18]
:00444851 33DB                    xor ebx, ebx
:00444853 8A5C0A44                mov bl, byte ptr [edx+ecx+44]
:00444857 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044485A 33D2                    xor edx, edx
:0044485C 8A5111                  mov dl, byte ptr [ecx+11]
:0044485F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00444862 33C0                    xor eax, eax
:00444864 8A441144                mov al, byte ptr [ecx+edx+44]
:00444868 2BD8                    sub ebx, eax
:0044486A 83C301                  add ebx, 00000001
:0044486D 3BF3                    cmp esi, ebx
:0044486F 7361                    jnb 004448D2
:00444871 C70540494B0001000000    mov dword ptr [004B4940], 00000001
:0044487B 8B55E8                  mov edx, dword ptr [ebp-18]
:0044487E 33C0                    xor eax, eax
:00444880 8A4211                  mov al, byte ptr [edx+11]
:00444883 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00444886 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:00444889 E852EAFBFF              call 004032E0
:0044488E 85C0                    test eax, eax
:00444890 7440                    je 004448D2
:00444892 6A00                    push 00000000
:00444894 68FF000000              push 000000FF
:00444899 8B55E8                  mov edx, dword ptr [ebp-18]
:0044489C 8A4213                  mov al, byte ptr [edx+13]
:0044489F 50                      push eax
:004448A0 6A01                    push 00000001
:004448A2 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004448A5 33D2                    xor edx, edx
:004448A7 8A5111                  mov dl, byte ptr [ecx+11]
:004448AA 8B45E8                  mov eax, dword ptr [ebp-18]
:004448AD 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:004448B0 E82BD7FFFF              call 00441FE0
:004448B5 50                      push eax
:004448B6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004448B9 33D2                    xor edx, edx
:004448BB 8A5110                  mov dl, byte ptr [ecx+10]
:004448BE 8B45E8                  mov eax, dword ptr [ebp-18]
:004448C1 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:004448C4 E817D7FFFF              call 00441FE0
:004448C9 50                      push eax
:004448CA 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004448CD E8BCF8FFFF              call 0044418E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444824(C), :00444831(C), :0044486F(C), :00444890(C)
|
:004448D2 C70540494B0000000000    mov dword ptr [004B4940], 00000000
:004448DC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004448DF 33D2                    xor edx, edx
:004448E1 8A5115                  mov dl, byte ptr [ecx+15]
:004448E4 83E240                  and edx, 00000040
:004448E7 85D2                    test edx, edx
:004448E9 744E                    je 00444939
:004448EB 8B45E8                  mov eax, dword ptr [ebp-18]
:004448EE 33C9                    xor ecx, ecx
:004448F0 8A4813                  mov cl, byte ptr [eax+13]
:004448F3 83F901                  cmp ecx, 00000001
:004448F6 7441                    je 00444939
:004448F8 837DFC00                cmp dword ptr [ebp-04], 00000000
:004448FC 743B                    je 00444939
:004448FE 6A00                    push 00000000
:00444900 68FF000000              push 000000FF
:00444905 6A01                    push 00000001
:00444907 6A01                    push 00000001
:00444909 8B55E8                  mov edx, dword ptr [ebp-18]
:0044490C 33C0                    xor eax, eax
:0044490E 8A4210                  mov al, byte ptr [edx+10]
:00444911 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00444914 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:00444917 E8C4D6FFFF              call 00441FE0
:0044491C 50                      push eax
:0044491D 8B55E8                  mov edx, dword ptr [ebp-18]
:00444920 33C0                    xor eax, eax
:00444922 8A4211                  mov al, byte ptr [edx+11]
:00444925 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00444928 8B0C81                  mov ecx, dword ptr [ecx+4*eax]
:0044492B E8B0D6FFFF              call 00441FE0
:00444930 50                      push eax
:00444931 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00444934 E855F8FFFF              call 0044418E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004448E9(C), :004448F6(C), :004448FC(C)
|
:00444939 EB2E                    jmp 00444969

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044474E(C)
|
:0044493B 8B5508                  mov edx, dword ptr [ebp+08]
:0044493E 81E2FF000000            and edx, 000000FF
:00444944 83FA02                  cmp edx, 00000002
:00444947 740D                    je 00444956
:00444949 8B4508                  mov eax, dword ptr [ebp+08]
:0044494C 25FF000000              and eax, 000000FF
:00444951 83F803                  cmp eax, 00000003
:00444954 7513                    jne 00444969

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444947(C)
|
:00444956 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00444959 33D2                    xor edx, edx
:0044495B 8A5111                  mov dl, byte ptr [ecx+11]
:0044495E 8B45E8                  mov eax, dword ptr [ebp-18]
:00444961 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:00444964 E83602FFFF              call 00434B9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444939(U), :00444954(C)
|
:00444969 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044496C 8A5115                  mov dl, byte ptr [ecx+15]
:0044496F 80E2FE                  and dl, FE
:00444972 8B45E8                  mov eax, dword ptr [ebp-18]
:00444975 885015                  mov byte ptr [eax+15], dl
:00444978 5E                      pop esi
:00444979 5B                      pop ebx
:0044497A 8BE5                    mov esp, ebp
:0044497C 5D                      pop ebp
:0044497D C20400                  ret 0004


:00444980 55                      push ebp
:00444981 8BEC                    mov ebp, esp
:00444983 E807000000              call 0044498F
:00444988 E811000000              call 0044499E
:0044498D 5D                      pop ebp
:0044498E C3                      ret



* Referenced by a CALL at Address:
|:00444983   
|
:0044498F 55                      push ebp
:00444990 8BEC                    mov ebp, esp
:00444992 B948494B00              mov ecx, 004B4948
:00444997 E8040EFCFF              call 004057A0
:0044499C 5D                      pop ebp
:0044499D C3                      ret



* Referenced by a CALL at Address:
|:00444988   
|
:0044499E 55                      push ebp
:0044499F 8BEC                    mov ebp, esp
:004449A1 68B0494400              push 004449B0
:004449A6 E805AB0200              call 0046F4B0
:004449AB 83C404                  add esp, 00000004
:004449AE 5D                      pop ebp
:004449AF C3                      ret


:004449B0 55                      push ebp
:004449B1 8BEC                    mov ebp, esp
:004449B3 B948494B00              mov ecx, 004B4948
:004449B8 E843A0FEFF              call 0042EA00
:004449BD 5D                      pop ebp
:004449BE C3                      ret



* Referenced by a CALL at Address:
|:0044E83E   
|
:004449BF 55                      push ebp
:004449C0 8BEC                    mov ebp, esp
:004449C2 51                      push ecx
:004449C3 894DFC                  mov dword ptr [ebp-04], ecx
:004449C6 8B4514                  mov eax, dword ptr [ebp+14]
:004449C9 50                      push eax
:004449CA 8A4D10                  mov cl, byte ptr [ebp+10]
:004449CD 51                      push ecx
:004449CE 8A550C                  mov dl, byte ptr [ebp+0C]
:004449D1 52                      push edx
:004449D2 8A4508                  mov al, byte ptr [ebp+08]
:004449D5 50                      push eax
:004449D6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004449D9 E85F030000              call 00444D3D
:004449DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004449E1 8B11                    mov edx, dword ptr [ecx]
:004449E3 83E201                  and edx, 00000001
:004449E6 85D2                    test edx, edx
:004449E8 7416                    je 00444A00
:004449EA 6A00                    push 00000000
:004449EC 8A4510                  mov al, byte ptr [ebp+10]
:004449EF 50                      push eax
:004449F0 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004449F3 51                      push ecx
:004449F4 8A5508                  mov dl, byte ptr [ebp+08]
:004449F7 52                      push edx
:004449F8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004449FB E856370000              call 00448156

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004449E8(C)
|
:00444A00 8B45FC                  mov eax, dword ptr [ebp-04]
:00444A03 8B08                    mov ecx, dword ptr [eax]
:00444A05 83E102                  and ecx, 00000002
:00444A08 85C9                    test ecx, ecx
:00444A0A 740E                    je 00444A1A
:00444A0C 6A00                    push 00000000
:00444A0E 8A5510                  mov dl, byte ptr [ebp+10]
:00444A11 52                      push edx
:00444A12 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444A15 E8BD360000              call 004480D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444A0A(C)
|
:00444A1A 8B45FC                  mov eax, dword ptr [ebp-04]
:00444A1D 8B08                    mov ecx, dword ptr [eax]
:00444A1F 83E104                  and ecx, 00000004
:00444A22 85C9                    test ecx, ecx
:00444A24 7418                    je 00444A3E
:00444A26 8B5514                  mov edx, dword ptr [ebp+14]
:00444A29 52                      push edx
:00444A2A 8A4510                  mov al, byte ptr [ebp+10]
:00444A2D 50                      push eax
:00444A2E 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00444A31 51                      push ecx
:00444A32 8A5508                  mov dl, byte ptr [ebp+08]
:00444A35 52                      push edx
:00444A36 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444A39 E8AF3A0000              call 004484ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444A24(C)
|
:00444A3E 8B45FC                  mov eax, dword ptr [ebp-04]
:00444A41 8B08                    mov ecx, dword ptr [eax]
:00444A43 83E110                  and ecx, 00000010
:00444A46 85C9                    test ecx, ecx
:00444A48 740E                    je 00444A58

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444A4A 6A02                    push 00000002
:00444A4C 8A5510                  mov dl, byte ptr [ebp+10]
:00444A4F 52                      push edx
:00444A50 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444A53 E87F360000              call 004480D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444A48(C)
|
:00444A58 8B45FC                  mov eax, dword ptr [ebp-04]
:00444A5B 8B08                    mov ecx, dword ptr [eax]
:00444A5D 83E120                  and ecx, 00000020
:00444A60 85C9                    test ecx, ecx
:00444A62 7418                    je 00444A7C
:00444A64 8B5514                  mov edx, dword ptr [ebp+14]
:00444A67 52                      push edx
:00444A68 8A4510                  mov al, byte ptr [ebp+10]
:00444A6B 50                      push eax
:00444A6C 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00444A6F 51                      push ecx
:00444A70 8A5508                  mov dl, byte ptr [ebp+08]
:00444A73 52                      push edx
:00444A74 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444A77 E88D3F0000              call 00448A09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444A62(C)
|
:00444A7C 8B45FC                  mov eax, dword ptr [ebp-04]
:00444A7F 8B08                    mov ecx, dword ptr [eax]
:00444A81 83E140                  and ecx, 00000040
:00444A84 85C9                    test ecx, ecx
:00444A86 7443                    je 00444ACB
:00444A88 8B5510                  mov edx, dword ptr [ebp+10]
:00444A8B 81E2FF000000            and edx, 000000FF
:00444A91 83FA39                  cmp edx, 00000039
:00444A94 7527                    jne 00444ABD
:00444A96 8B45FC                  mov eax, dword ptr [ebp-04]
:00444A99 83780400                cmp dword ptr [eax+04], 00000000
:00444A9D 7410                    je 00444AAF
:00444A9F 6A01                    push 00000001
:00444AA1 8A4D10                  mov cl, byte ptr [ebp+10]
:00444AA4 51                      push ecx
:00444AA5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444AA8 E82A360000              call 004480D7
:00444AAD EB0C                    jmp 00444ABB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444A9D(C)
|
:00444AAF 6A01                    push 00000001
:00444AB1 6A28                    push 00000028
:00444AB3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444AB6 E81C360000              call 004480D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444AAD(U)
|
:00444ABB EB0E                    jmp 00444ACB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444A94(C)
|
:00444ABD 6A01                    push 00000001
:00444ABF 8A5510                  mov dl, byte ptr [ebp+10]
:00444AC2 52                      push edx
:00444AC3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444AC6 E80C360000              call 004480D7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444A86(C), :00444ABB(U)
|
:00444ACB 8B45FC                  mov eax, dword ptr [ebp-04]
:00444ACE 8B08                    mov ecx, dword ptr [eax]
:00444AD0 81E180000000            and ecx, 00000080
:00444AD6 85C9                    test ecx, ecx
:00444AD8 741A                    je 00444AF4
:00444ADA 8B5514                  mov edx, dword ptr [ebp+14]
:00444ADD 52                      push edx
:00444ADE 8A4510                  mov al, byte ptr [ebp+10]
:00444AE1 50                      push eax
:00444AE2 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00444AE5 51                      push ecx
:00444AE6 8A5508                  mov dl, byte ptr [ebp+08]
:00444AE9 52                      push edx
:00444AEA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444AED E822490000              call 00449414
:00444AF2 EB1B                    jmp 00444B0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444AD8(C)
|
:00444AF4 8B45FC                  mov eax, dword ptr [ebp-04]
:00444AF7 8B08                    mov ecx, dword ptr [eax]
:00444AF9 81E100010000            and ecx, 00000100
:00444AFF 85C9                    test ecx, ecx
:00444B01 740C                    je 00444B0F
:00444B03 8A550C                  mov dl, byte ptr [ebp+0C]
:00444B06 52                      push edx
:00444B07 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444B0A E8E04B0000              call 004496EF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444AF2(U), :00444B01(C)
|
:00444B0F 8B45FC                  mov eax, dword ptr [ebp-04]
:00444B12 8B08                    mov ecx, dword ptr [eax]
:00444B14 81E100020000            and ecx, 00000200
:00444B1A 85C9                    test ecx, ecx
:00444B1C 7416                    je 00444B34
:00444B1E 6A01                    push 00000001
:00444B20 8A5510                  mov dl, byte ptr [ebp+10]
:00444B23 52                      push edx
:00444B24 8A450C                  mov al, byte ptr [ebp+0C]
:00444B27 50                      push eax
:00444B28 8A4D08                  mov cl, byte ptr [ebp+08]
:00444B2B 51                      push ecx
:00444B2C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444B2F E822360000              call 00448156

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444B1C(C)
|
:00444B34 8B55FC                  mov edx, dword ptr [ebp-04]
:00444B37 8B02                    mov eax, dword ptr [edx]
:00444B39 83E040                  and eax, 00000040
:00444B3C 85C0                    test eax, eax
:00444B3E 7436                    je 00444B76
:00444B40 8B4D10                  mov ecx, dword ptr [ebp+10]
:00444B43 81E1FF000000            and ecx, 000000FF
:00444B49 83F91F                  cmp ecx, 0000001F
:00444B4C 750C                    jne 00444B5A
:00444B4E 6A01                    push 00000001
:00444B50 6A26                    push 00000026
:00444B52 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444B55 E87D350000              call 004480D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444B4C(C)
|
:00444B5A 8B5510                  mov edx, dword ptr [ebp+10]
:00444B5D 81E2FF000000            and edx, 000000FF
:00444B63 83FA20                  cmp edx, 00000020
:00444B66 750E                    jne 00444B76
:00444B68 6A01                    push 00000001
:00444B6A 8A4510                  mov al, byte ptr [ebp+10]
:00444B6D 50                      push eax
:00444B6E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444B71 E861350000              call 004480D7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444B3E(C), :00444B66(C)
|
:00444B76 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444B79 8B11                    mov edx, dword ptr [ecx]
:00444B7B 81E200020000            and edx, 00000200
:00444B81 85D2                    test edx, edx
:00444B83 7433                    je 00444BB8
:00444B85 8B4510                  mov eax, dword ptr [ebp+10]
:00444B88 25FF000000              and eax, 000000FF
:00444B8D 83F81F                  cmp eax, 0000001F
:00444B90 740E                    je 00444BA0
:00444B92 8B4D10                  mov ecx, dword ptr [ebp+10]
:00444B95 81E1FF000000            and ecx, 000000FF
:00444B9B 83F920                  cmp ecx, 00000020
:00444B9E 7518                    jne 00444BB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444B90(C)
|
:00444BA0 6A00                    push 00000000
:00444BA2 6A01                    push 00000001
:00444BA4 8A5510                  mov dl, byte ptr [ebp+10]
:00444BA7 52                      push edx
:00444BA8 8A450C                  mov al, byte ptr [ebp+0C]
:00444BAB 50                      push eax
:00444BAC 8A4D08                  mov cl, byte ptr [ebp+08]
:00444BAF 51                      push ecx
:00444BB0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444BB3 E821380000              call 004483D9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444B83(C), :00444B9E(C)
|
:00444BB8 8B55FC                  mov edx, dword ptr [ebp-04]
:00444BBB 8B02                    mov eax, dword ptr [edx]
:00444BBD 2500040000              and eax, 00000400
:00444BC2 85C0                    test eax, eax
:00444BC4 7441                    je 00444C07
:00444BC6 8B4D10                  mov ecx, dword ptr [ebp+10]
:00444BC9 81E1FF000000            and ecx, 000000FF
:00444BCF 83F939                  cmp ecx, 00000039
:00444BD2 7525                    jne 00444BF9
:00444BD4 8B55FC                  mov edx, dword ptr [ebp-04]
:00444BD7 837A0400                cmp dword ptr [edx+04], 00000000
:00444BDB 740E                    je 00444BEB

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444BDD 6A02                    push 00000002
:00444BDF 6A39                    push 00000039
:00444BE1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444BE4 E8EE340000              call 004480D7
:00444BE9 EB0C                    jmp 00444BF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444BDB(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444BEB 6A02                    push 00000002
:00444BED 6A28                    push 00000028
:00444BEF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444BF2 E8E0340000              call 004480D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444BE9(U)
|
:00444BF7 EB0E                    jmp 00444C07

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444BD2(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444BF9 6A02                    push 00000002
:00444BFB 8A4510                  mov al, byte ptr [ebp+10]
:00444BFE 50                      push eax
:00444BFF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444C02 E8D0340000              call 004480D7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444BC4(C), :00444BF7(U)
|
:00444C07 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444C0A 8B11                    mov edx, dword ptr [ecx]
:00444C0C 81E200100000            and edx, 00001000
:00444C12 85D2                    test edx, edx
:00444C14 740E                    je 00444C24

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444C16 6A02                    push 00000002
:00444C18 8A4508                  mov al, byte ptr [ebp+08]
:00444C1B 50                      push eax
:00444C1C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444C1F E8E64A0000              call 0044970A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444C14(C)
|
:00444C24 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444C27 8B11                    mov edx, dword ptr [ecx]
:00444C29 81E200200000            and edx, 00002000
:00444C2F 85D2                    test edx, edx
:00444C31 7416                    je 00444C49

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444C33 6A02                    push 00000002
:00444C35 8A4510                  mov al, byte ptr [ebp+10]
:00444C38 50                      push eax
:00444C39 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00444C3C 51                      push ecx
:00444C3D 8A5508                  mov dl, byte ptr [ebp+08]
:00444C40 52                      push edx
:00444C41 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444C44 E80D350000              call 00448156

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444C31(C)
|
:00444C49 8B4510                  mov eax, dword ptr [ebp+10]
:00444C4C 25FF000000              and eax, 000000FF
:00444C51 83F811                  cmp eax, 00000011
:00444C54 0F85DD000000            jne 00444D37
:00444C5A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444C5D 8B11                    mov edx, dword ptr [ecx]
:00444C5F 81E200040000            and edx, 00000400
:00444C65 85D2                    test edx, edx
:00444C67 740C                    je 00444C75
:00444C69 6A01                    push 00000001
:00444C6B 6A1F                    push 0000001F
:00444C6D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444C70 E862340000              call 004480D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444C67(C)
|
:00444C75 8B45FC                  mov eax, dword ptr [ebp-04]
:00444C78 8B08                    mov ecx, dword ptr [eax]
:00444C7A 81E100100000            and ecx, 00001000
:00444C80 85C9                    test ecx, ecx
:00444C82 741E                    je 00444CA2

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444C84 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00444C86 6A03                    push 00000003
:00444C88 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444C8B E8541E0000              call 00446AE4
:00444C90 85C0                    test eax, eax
:00444C92 740E                    je 00444CA2

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444C94 6A02                    push 00000002
:00444C96 8A5508                  mov dl, byte ptr [ebp+08]
:00444C99 52                      push edx
:00444C9A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444C9D E8684A0000              call 0044970A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444C82(C), :00444C92(C)
|
:00444CA2 8B45FC                  mov eax, dword ptr [ebp-04]
:00444CA5 8B08                    mov ecx, dword ptr [eax]
:00444CA7 81E100200000            and ecx, 00002000
:00444CAD 85C9                    test ecx, ecx
:00444CAF 7418                    je 00444CC9
:00444CB1 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444CB3 6A02                    push 00000002
:00444CB5 8A5510                  mov dl, byte ptr [ebp+10]
:00444CB8 52                      push edx
:00444CB9 8A450C                  mov al, byte ptr [ebp+0C]
:00444CBC 50                      push eax
:00444CBD 8A4D08                  mov cl, byte ptr [ebp+08]
:00444CC0 51                      push ecx
:00444CC1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444CC4 E810370000              call 004483D9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444CAF(C)
|
:00444CC9 8B55FC                  mov edx, dword ptr [ebp-04]
:00444CCC 8B02                    mov eax, dword ptr [edx]
:00444CCE 2500040000              and eax, 00000400
:00444CD3 85C0                    test eax, eax
:00444CD5 740C                    je 00444CE3
:00444CD7 6A01                    push 00000001
:00444CD9 6A23                    push 00000023
:00444CDB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444CDE E8F4330000              call 004480D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444CD5(C)
|
:00444CE3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444CE6 8B11                    mov edx, dword ptr [ecx]
:00444CE8 81E200100000            and edx, 00001000
:00444CEE 85D2                    test edx, edx
:00444CF0 741E                    je 00444D10

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444CF2 6A02                    push 00000002

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00444CF4 6A03                    push 00000003
:00444CF6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444CF9 E8E61D0000              call 00446AE4
:00444CFE 85C0                    test eax, eax
:00444D00 740E                    je 00444D10

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444D02 6A02                    push 00000002
:00444D04 8A4508                  mov al, byte ptr [ebp+08]
:00444D07 50                      push eax
:00444D08 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444D0B E8FA490000              call 0044970A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444CF0(C), :00444D00(C)
|
:00444D10 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444D13 8B11                    mov edx, dword ptr [ecx]
:00444D15 81E200200000            and edx, 00002000
:00444D1B 85D2                    test edx, edx
:00444D1D 7418                    je 00444D37
:00444D1F 6A01                    push 00000001

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00444D21 6A02                    push 00000002
:00444D23 8A4510                  mov al, byte ptr [ebp+10]
:00444D26 50                      push eax
:00444D27 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00444D2A 51                      push ecx
:00444D2B 8A5508                  mov dl, byte ptr [ebp+08]
:00444D2E 52                      push edx
:00444D2F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444D32 E8A2360000              call 004483D9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444C54(C), :00444D1D(C)
|
:00444D37 8BE5                    mov esp, ebp
:00444D39 5D                      pop ebp
:00444D3A C21000                  ret 0010



* Referenced by a CALL at Address:
|:004449D9   
|
:00444D3D 55                      push ebp
:00444D3E 8BEC                    mov ebp, esp
:00444D40 51                      push ecx
:00444D41 894DFC                  mov dword ptr [ebp-04], ecx
:00444D44 8B45FC                  mov eax, dword ptr [ebp-04]
:00444D47 C70000000000            mov dword ptr [eax], 00000000
:00444D4D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00444D50 81E1FF000000            and ecx, 000000FF
:00444D56 81F9FF000000            cmp ecx, 000000FF
:00444D5C 0F8498000000            je 00444DFA
:00444D62 8A5510                  mov dl, byte ptr [ebp+10]
:00444D65 52                      push edx
:00444D66 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444D69 E853010000              call 00444EC1
:00444D6E 85C0                    test eax, eax
:00444D70 7507                    jne 00444D79
:00444D72 33C0                    xor eax, eax
:00444D74 E942010000              jmp 00444EBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444D70(C)
|
:00444D79 8A4510                  mov al, byte ptr [ebp+10]
:00444D7C 50                      push eax
:00444D7D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444D80 E80E030000              call 00445093
:00444D85 8A4D10                  mov cl, byte ptr [ebp+10]
:00444D88 51                      push ecx
:00444D89 8A550C                  mov dl, byte ptr [ebp+0C]
:00444D8C 52                      push edx
:00444D8D 8A4508                  mov al, byte ptr [ebp+08]
:00444D90 50                      push eax
:00444D91 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444D94 E856030000              call 004450EF
:00444D99 85C0                    test eax, eax
:00444D9B 7507                    jne 00444DA4
:00444D9D 33C0                    xor eax, eax
:00444D9F E917010000              jmp 00444EBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444D9B(C)
|
:00444DA4 8B4D14                  mov ecx, dword ptr [ebp+14]
:00444DA7 51                      push ecx
:00444DA8 8A5510                  mov dl, byte ptr [ebp+10]
:00444DAB 52                      push edx
:00444DAC 8A450C                  mov al, byte ptr [ebp+0C]
:00444DAF 50                      push eax
:00444DB0 8A4D08                  mov cl, byte ptr [ebp+08]
:00444DB3 51                      push ecx
:00444DB4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444DB7 E8241A0000              call 004467E0
:00444DBC 85C0                    test eax, eax
:00444DBE 7507                    jne 00444DC7
:00444DC0 33C0                    xor eax, eax
:00444DC2 E9F4000000              jmp 00444EBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444DBE(C)
|
:00444DC7 8A5510                  mov dl, byte ptr [ebp+10]
:00444DCA 52                      push edx
:00444DCB 8A4508                  mov al, byte ptr [ebp+08]
:00444DCE 50                      push eax
:00444DCF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444DD2 E86B1E0000              call 00446C42
:00444DD7 8B4D14                  mov ecx, dword ptr [ebp+14]
:00444DDA 51                      push ecx
:00444DDB 8A5510                  mov dl, byte ptr [ebp+10]
:00444DDE 52                      push edx
:00444DDF 8A450C                  mov al, byte ptr [ebp+0C]
:00444DE2 50                      push eax
:00444DE3 8A4D08                  mov cl, byte ptr [ebp+08]
:00444DE6 51                      push ecx
:00444DE7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444DEA E8961E0000              call 00446C85
:00444DEF 85C0                    test eax, eax
:00444DF1 7507                    jne 00444DFA
:00444DF3 33C0                    xor eax, eax
:00444DF5 E9C1000000              jmp 00444EBB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444D5C(C), :00444DF1(C)
|
:00444DFA 8B5514                  mov edx, dword ptr [ebp+14]
:00444DFD 52                      push edx
:00444DFE 8A4510                  mov al, byte ptr [ebp+10]
:00444E01 50                      push eax
:00444E02 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444E05 E894240000              call 0044729E
:00444E0A 8B4D14                  mov ecx, dword ptr [ebp+14]
:00444E0D 51                      push ecx
:00444E0E 8A5510                  mov dl, byte ptr [ebp+10]
:00444E11 52                      push edx
:00444E12 8A450C                  mov al, byte ptr [ebp+0C]
:00444E15 50                      push eax
:00444E16 8A4D08                  mov cl, byte ptr [ebp+08]
:00444E19 51                      push ecx
:00444E1A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444E1D E833250000              call 00447355
:00444E22 85C0                    test eax, eax
:00444E24 7507                    jne 00444E2D
:00444E26 33C0                    xor eax, eax
:00444E28 E98E000000              jmp 00444EBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444E24(C)
|
:00444E2D 8B5514                  mov edx, dword ptr [ebp+14]
:00444E30 52                      push edx
:00444E31 8A4510                  mov al, byte ptr [ebp+10]
:00444E34 50                      push eax
:00444E35 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00444E38 51                      push ecx
:00444E39 8A5508                  mov dl, byte ptr [ebp+08]
:00444E3C 52                      push edx
:00444E3D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444E40 E811290000              call 00447756
:00444E45 85C0                    test eax, eax
:00444E47 7504                    jne 00444E4D
:00444E49 33C0                    xor eax, eax
:00444E4B EB6E                    jmp 00444EBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444E47(C)
|
:00444E4D 8B4514                  mov eax, dword ptr [ebp+14]
:00444E50 50                      push eax
:00444E51 8A4D10                  mov cl, byte ptr [ebp+10]
:00444E54 51                      push ecx
:00444E55 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444E58 E82E2D0000              call 00447B8B
:00444E5D 85C0                    test eax, eax
:00444E5F 7504                    jne 00444E65
:00444E61 33C0                    xor eax, eax
:00444E63 EB56                    jmp 00444EBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444E5F(C)
|
:00444E65 8B5508                  mov edx, dword ptr [ebp+08]
:00444E68 81E2FF000000            and edx, 000000FF
:00444E6E 81FAFF000000            cmp edx, 000000FF
:00444E74 7440                    je 00444EB6
:00444E76 8B4514                  mov eax, dword ptr [ebp+14]
:00444E79 50                      push eax
:00444E7A 8A4D10                  mov cl, byte ptr [ebp+10]
:00444E7D 51                      push ecx
:00444E7E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444E81 E8542F0000              call 00447DDA
:00444E86 8B5514                  mov edx, dword ptr [ebp+14]
:00444E89 52                      push edx
:00444E8A 8A4510                  mov al, byte ptr [ebp+10]
:00444E8D 50                      push eax
:00444E8E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444E91 E8F62F0000              call 00447E8C
:00444E96 85C0                    test eax, eax
:00444E98 7504                    jne 00444E9E
:00444E9A 33C0                    xor eax, eax
:00444E9C EB1D                    jmp 00444EBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444E98(C)
|
:00444E9E 8B4D14                  mov ecx, dword ptr [ebp+14]
:00444EA1 51                      push ecx
:00444EA2 8A5510                  mov dl, byte ptr [ebp+10]
:00444EA5 52                      push edx
:00444EA6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00444EA9 E8F1300000              call 00447F9F
:00444EAE 85C0                    test eax, eax
:00444EB0 7504                    jne 00444EB6
:00444EB2 33C0                    xor eax, eax
:00444EB4 EB05                    jmp 00444EBB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444E74(C), :00444EB0(C)
|
:00444EB6 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444D74(U), :00444D9F(U), :00444DC2(U), :00444DF5(U), :00444E28(U)
|:00444E4B(U), :00444E63(U), :00444E9C(U), :00444EB4(U)
|
:00444EBB 8BE5                    mov esp, ebp
:00444EBD 5D                      pop ebp
:00444EBE C21000                  ret 0010



* Referenced by a CALL at Address:
|:00444D69   
|
:00444EC1 55                      push ebp
:00444EC2 8BEC                    mov ebp, esp
:00444EC4 83EC0C                  sub esp, 0000000C
:00444EC7 894DF8                  mov dword ptr [ebp-08], ecx
:00444ECA 8A4508                  mov al, byte ptr [ebp+08]
:00444ECD 8845F4                  mov byte ptr [ebp-0C], al
:00444ED0 807DF400                cmp byte ptr [ebp-0C], 00
:00444ED4 740E                    je 00444EE4
:00444ED6 807DF401                cmp byte ptr [ebp-0C], 01
:00444EDA 740E                    je 00444EEA
:00444EDC 807DF404                cmp byte ptr [ebp-0C], 04
:00444EE0 740E                    je 00444EF0
:00444EE2 EB12                    jmp 00444EF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444ED4(C)
|
:00444EE4 C645FC00                mov [ebp-04], 00
:00444EE8 EB13                    jmp 00444EFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444EDA(C)
|
:00444EEA C645FC01                mov [ebp-04], 01
:00444EEE EB0D                    jmp 00444EFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444EE0(C)
|
:00444EF0 C645FC02                mov [ebp-04], 02
:00444EF4 EB07                    jmp 00444EFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444EE2(U)
|
:00444EF6 B801000000              mov eax, 00000001
:00444EFB EB27                    jmp 00444F24

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444EE8(U), :00444EEE(U), :00444EF4(U)
|
:00444EFD 6A00                    push 00000000
:00444EFF 8A4DFC                  mov cl, byte ptr [ebp-04]
:00444F02 51                      push ecx
:00444F03 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444F06 E81F000000              call 00444F2A
:00444F0B 85C0                    test eax, eax
:00444F0D 7504                    jne 00444F13
:00444F0F 33C0                    xor eax, eax
:00444F11 EB11                    jmp 00444F24

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444F0D(C)
|
:00444F13 8B55F8                  mov edx, dword ptr [ebp-08]
:00444F16 8B02                    mov eax, dword ptr [edx]
:00444F18 0C01                    or al, 01
:00444F1A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00444F1D 8901                    mov dword ptr [ecx], eax
:00444F1F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444EFB(U), :00444F11(U)
|
:00444F24 8BE5                    mov esp, ebp
:00444F26 5D                      pop ebp
:00444F27 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00444F06   , :00447D10   , :00448054   , :00448493   , :00449BCC   
|
:00444F2A 55                      push ebp
:00444F2B 8BEC                    mov ebp, esp
:00444F2D 6AFF                    push FFFFFFFF
:00444F2F 68CC984700              push 004798CC
:00444F34 64A100000000            mov eax, dword ptr fs:[00000000]
:00444F3A 50                      push eax
:00444F3B 64892500000000          mov dword ptr fs:[00000000], esp
:00444F42 81EC1C010000            sub esp, 0000011C
:00444F48 898DD8FEFFFF            mov dword ptr [ebp+FFFFFED8], ecx
:00444F4E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00444F54 E8E706FCFF              call 00405640
:00444F59 C745FC00000000          mov [ebp-04], 00000000
:00444F60 8B450C                  mov eax, dword ptr [ebp+0C]
:00444F63 25FF000000              and eax, 000000FF
:00444F68 83F805                  cmp eax, 00000005
:00444F6B 741D                    je 00444F8A
:00444F6D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00444F70 81E1FF000000            and ecx, 000000FF
:00444F76 69C9001B0000            imul ecx, 00001B00
:00444F7C 81C100600000            add ecx, 00006000
:00444F82 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:00444F88 EB0A                    jmp 00444F94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444F6B(C)
|
:00444F8A C785ECFEFFFF00960100    mov dword ptr [ebp+FFFFFEEC], 00019600

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444F88(U)
|

* Possible StringData Ref from Data Obj ->"SPANEL.E3"
                                  |
:00444F94 6828D54700              push 0047D528
:00444F99 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00444F9F E831C2FCFF              call 004111D5
:00444FA4 85C0                    test eax, eax
:00444FA6 7527                    jne 00444FCF
:00444FA8 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:00444FB2 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00444FB9 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00444FBF E89C06FCFF              call 00405660
:00444FC4 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00444FCA E9B4000000              jmp 00445083

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444FA6(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00444FCF 6A04                    push 00000004
:00444FD1 6A00                    push 00000000
:00444FD3 6A00                    push 00000000
:00444FD5 B9F0174B00              mov ecx, 004B17F0
:00444FDA E8B13F0300              call 00478F90
:00444FDF 0385ECFEFFFF            add eax, dword ptr [ebp+FFFFFEEC]
:00444FE5 50                      push eax
:00444FE6 8B5508                  mov edx, dword ptr [ebp+08]
:00444FE9 81E2FF000000            and edx, 000000FF
:00444FEF 52                      push edx
:00444FF0 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00444FF6 E82EC3FCFF              call 00411329
:00444FFB 85C0                    test eax, eax
:00444FFD 752F                    jne 0044502E
:00444FFF 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00445005 E81B8CFCFF              call 0040DC25
:0044500A C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:00445014 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0044501B 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00445021 E83A06FCFF              call 00405660
:00445026 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0044502C EB55                    jmp 00445083

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00444FFD(C)
|
:0044502E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00445034 E8EC8BFCFF              call 0040DC25
:00445039 85C0                    test eax, eax
:0044503B 7524                    jne 00445061
:0044503D C785E0FEFFFF00000000    mov dword ptr [ebp+FFFFFEE0], 00000000
:00445047 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0044504E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00445054 E80706FCFF              call 00405660
:00445059 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0044505F EB22                    jmp 00445083

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044503B(C)
|
:00445061 C785DCFEFFFF01000000    mov dword ptr [ebp+FFFFFEDC], 00000001
:0044506B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00445072 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00445078 E8E305FCFF              call 00405660
:0044507D 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00444FCA(U), :0044502C(U), :0044505F(U)
|
:00445083 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00445086 64890D00000000          mov dword ptr fs:[00000000], ecx
:0044508D 8BE5                    mov esp, ebp
:0044508F 5D                      pop ebp
:00445090 C20800                  ret 0008



* Referenced by a CALL at Address:
|:00444D80   
|
:00445093 55                      push ebp
:00445094 8BEC                    mov ebp, esp
:00445096 51                      push ecx
:00445097 894DFC                  mov dword ptr [ebp-04], ecx
:0044509A 8B4508                  mov eax, dword ptr [ebp+08]
:0044509D 25FF000000              and eax, 000000FF
:004450A2 85C0                    test eax, eax
:004450A4 7537                    jne 004450DD
:004450A6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004450A9 81E1FF000000            and ecx, 000000FF
:004450AF 83F906                  cmp ecx, 00000006
:004450B2 7529                    jne 004450DD
:004450B4 8B5508                  mov edx, dword ptr [ebp+08]
:004450B7 81E2FF000000            and edx, 000000FF
:004450BD 83FA0D                  cmp edx, 0000000D
:004450C0 751B                    jne 004450DD
:004450C2 8B4508                  mov eax, dword ptr [ebp+08]
:004450C5 25FF000000              and eax, 000000FF
:004450CA 83F81B                  cmp eax, 0000001B
:004450CD 750E                    jne 004450DD
:004450CF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004450D2 81E1FF000000            and ecx, 000000FF
:004450D8 83F91A                  cmp ecx, 0000001A
:004450DB 740C                    je 004450E9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004450A4(C), :004450B2(C), :004450C0(C), :004450CD(C)
|
:004450DD 8B55FC                  mov edx, dword ptr [ebp-04]
:004450E0 8B02                    mov eax, dword ptr [edx]
:004450E2 0C02                    or al, 02
:004450E4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004450E7 8901                    mov dword ptr [ecx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004450DB(C)
|
:004450E9 8BE5                    mov esp, ebp
:004450EB 5D                      pop ebp
:004450EC C20400                  ret 0004



* Referenced by a CALL at Address:
|:00444D94   
|
:004450EF 55                      push ebp
:004450F0 8BEC                    mov ebp, esp
:004450F2 83EC0C                  sub esp, 0000000C
:004450F5 894DF4                  mov dword ptr [ebp-0C], ecx
:004450F8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004450FB 81E1FF000000            and ecx, 000000FF
:00445101 6BC924                  imul ecx, 00000024
:00445104 81C1B83B4B00            add ecx, 004B3BB8
:0044510A E831CBFEFF              call 00431C40
:0044510F 50                      push eax
:00445110 E843A70000              call 0044F858
:00445115 83C404                  add esp, 00000004
:00445118 25FF000000              and eax, 000000FF
:0044511D 83F80A                  cmp eax, 0000000A
:00445120 7409                    je 0044512B
:00445122 C745F800000000          mov [ebp-08], 00000000
:00445129 EB07                    jmp 00445132

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445120(C)
|
:0044512B C745F801000000          mov [ebp-08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445129(U)
|
:00445132 8B45F8                  mov eax, dword ptr [ebp-08]
:00445135 50                      push eax
:00445136 8A4D10                  mov cl, byte ptr [ebp+10]
:00445139 51                      push ecx
:0044513A 8A550C                  mov dl, byte ptr [ebp+0C]
:0044513D 52                      push edx
:0044513E 8A4508                  mov al, byte ptr [ebp+08]
:00445141 50                      push eax
:00445142 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00445145 E847000000              call 00445191
:0044514A 8945FC                  mov dword ptr [ebp-04], eax
:0044514D 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00445151 7507                    jne 0044515A
:00445153 B801000000              mov eax, 00000001
:00445158 EB31                    jmp 0044518B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445151(C)
|
:0044515A 8A4D10                  mov cl, byte ptr [ebp+10]
:0044515D 51                      push ecx
:0044515E 8A550C                  mov dl, byte ptr [ebp+0C]
:00445161 52                      push edx
:00445162 8A4508                  mov al, byte ptr [ebp+08]
:00445165 50                      push eax
:00445166 8A4DFC                  mov cl, byte ptr [ebp-04]
:00445169 51                      push ecx
:0044516A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044516D E8DD070000              call 0044594F
:00445172 85C0                    test eax, eax
:00445174 7504                    jne 0044517A
:00445176 33C0                    xor eax, eax
:00445178 EB11                    jmp 0044518B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445174(C)
|
:0044517A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044517D 8B02                    mov eax, dword ptr [edx]
:0044517F 0C04                    or al, 04
:00445181 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00445184 8901                    mov dword ptr [ecx], eax
:00445186 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445158(U), :00445178(U)
|
:0044518B 8BE5                    mov esp, ebp
:0044518D 5D                      pop ebp
:0044518E C20C00                  ret 000C



* Referenced by a CALL at Address:
|:00445145   
|
:00445191 55                      push ebp
:00445192 8BEC                    mov ebp, esp
:00445194 83EC1C                  sub esp, 0000001C
:00445197 56                      push esi
:00445198 894DE4                  mov dword ptr [ebp-1C], ecx
:0044519B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044519E 81E1FF000000            and ecx, 000000FF
:004451A4 6BC924                  imul ecx, 00000024
:004451A7 81C1B83B4B00            add ecx, 004B3BB8
:004451AD E8CE1DFFFF              call 00436F80
:004451B2 8845F4                  mov byte ptr [ebp-0C], al
:004451B5 8A4508                  mov al, byte ptr [ebp+08]
:004451B8 50                      push eax
:004451B9 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004451BC E884010000              call 00445345
:004451C1 8945F0                  mov dword ptr [ebp-10], eax
:004451C4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004451CB 837D1400                cmp dword ptr [ebp+14], 00000000
:004451CF 0F85D3000000            jne 004452A8
:004451D5 8A4D10                  mov cl, byte ptr [ebp+10]
:004451D8 51                      push ecx
:004451D9 8A550C                  mov dl, byte ptr [ebp+0C]
:004451DC 52                      push edx
:004451DD 8A4508                  mov al, byte ptr [ebp+08]
:004451E0 50                      push eax
:004451E1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004451E4 E862020000              call 0044544B
:004451E9 8945F8                  mov dword ptr [ebp-08], eax
:004451EC 837DF803                cmp dword ptr [ebp-08], 00000003
:004451F0 752E                    jne 00445220
:004451F2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004451F5 81E1FF000000            and ecx, 000000FF
:004451FB 51                      push ecx
:004451FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004451FF 81E1FF000000            and ecx, 000000FF
:00445205 6BC924                  imul ecx, 00000024
:00445208 81C1B83B4B00            add ecx, 004B3BB8
:0044520E E88FCEFEFF              call 004320A2
:00445213 25FF000000              and eax, 000000FF
:00445218 8945FC                  mov dword ptr [ebp-04], eax
:0044521B E983000000              jmp 004452A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004451F0(C)
|
:00445220 837DF803                cmp dword ptr [ebp-08], 00000003
:00445224 7D7D                    jge 004452A3
:00445226 837DF000                cmp dword ptr [ebp-10], 00000000
:0044522A 751E                    jne 0044524A
:0044522C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044522F 81E2FF000000            and edx, 000000FF
:00445235 83EA02                  sub edx, 00000002
:00445238 6BD20C                  imul edx, 0000000C
:0044523B 8B45F8                  mov eax, dword ptr [ebp-08]
:0044523E 8B8C82E0A34700          mov ecx, dword ptr [edx+4*eax+0047A3E0]
:00445245 894DFC                  mov dword ptr [ebp-04], ecx
:00445248 EB59                    jmp 004452A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044522A(C)
|
:0044524A 8A5508                  mov dl, byte ptr [ebp+08]
:0044524D 52                      push edx
:0044524E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00445251 E8D9040000              call 0044572F
:00445256 8945E8                  mov dword ptr [ebp-18], eax
:00445259 837DE8FF                cmp dword ptr [ebp-18], FFFFFFFF
:0044525D 7444                    je 004452A3
:0044525F 837DE82F                cmp dword ptr [ebp-18], 0000002F
:00445263 7D2B                    jge 00445290
:00445265 8B45F4                  mov eax, dword ptr [ebp-0C]
:00445268 25FF000000              and eax, 000000FF
:0044526D 99                      cdq
:0044526E 33C2                    xor eax, edx
:00445270 2BC2                    sub eax, edx
:00445272 83E001                  and eax, 00000001
:00445275 33C2                    xor eax, edx
:00445277 2BC2                    sub eax, edx
:00445279 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044527C 03C8                    add ecx, eax
:0044527E 6BC90C                  imul ecx, 0000000C
:00445281 8B55F8                  mov edx, dword ptr [ebp-08]
:00445284 8B8491E0A34700          mov eax, dword ptr [ecx+4*edx+0047A3E0]
:0044528B 8945FC                  mov dword ptr [ebp-04], eax
:0044528E EB13                    jmp 004452A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445263(C)
|
:00445290 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00445293 6BC90C                  imul ecx, 0000000C
:00445296 8B55F8                  mov edx, dword ptr [ebp-08]
:00445299 8B8491E0A34700          mov eax, dword ptr [ecx+4*edx+0047A3E0]
:004452A0 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044521B(U), :00445224(C), :00445248(U), :0044525D(C), :0044528E(U)
|
:004452A3 E993000000              jmp 0044533B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004451CF(C)
|
:004452A8 8A4D10                  mov cl, byte ptr [ebp+10]
:004452AB 51                      push ecx
:004452AC 8A550C                  mov dl, byte ptr [ebp+0C]
:004452AF 52                      push edx
:004452B0 8A4508                  mov al, byte ptr [ebp+08]
:004452B3 50                      push eax
:004452B4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004452B7 E88F010000              call 0044544B
:004452BC 8945F8                  mov dword ptr [ebp-08], eax
:004452BF 837DF803                cmp dword ptr [ebp-08], 00000003
:004452C3 7548                    jne 0044530D
:004452C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004452C8 81E1FF000000            and ecx, 000000FF
:004452CE 6BC924                  imul ecx, 00000024
:004452D1 81C1B83B4B00            add ecx, 004B3BB8
:004452D7 E8F4F0FEFF              call 004343D0
:004452DC 668BF0                  mov si, ax
:004452DF 81E6FFFF0000            and esi, 0000FFFF
:004452E5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004452E8 81E1FF000000            and ecx, 000000FF
:004452EE 6BC924                  imul ecx, 00000024
:004452F1 81C1B83B4B00            add ecx, 004B3BB8
:004452F7 E83CCEFEFF              call 00432138
:004452FC 25FF000000              and eax, 000000FF
:00445301 6BC025                  imul eax, 00000025
:00445304 8D4C061E                lea ecx, dword ptr [esi+eax+1E]
:00445308 894DFC                  mov dword ptr [ebp-04], ecx
:0044530B EB2E                    jmp 0044533B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004452C3(C)
|
:0044530D 837DF803                cmp dword ptr [ebp-08], 00000003
:00445311 7D28                    jge 0044533B
:00445313 8A55F4                  mov dl, byte ptr [ebp-0C]
:00445316 52                      push edx
:00445317 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044531A E876050000              call 00445895
:0044531F 8945EC                  mov dword ptr [ebp-14], eax
:00445322 837DECFF                cmp dword ptr [ebp-14], FFFFFFFF
:00445326 7413                    je 0044533B
:00445328 8B45EC                  mov eax, dword ptr [ebp-14]
:0044532B 6BC00C                  imul eax, 0000000C
:0044532E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00445331 8B9488E0A34700          mov edx, dword ptr [eax+4*ecx+0047A3E0]
:00445338 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004452A3(U), :0044530B(U), :00445311(C), :00445326(C)
|
:0044533B 8B45FC                  mov eax, dword ptr [ebp-04]
:0044533E 5E                      pop esi
:0044533F 8BE5                    mov esp, ebp
:00445341 5D                      pop ebp
:00445342 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:004451BC   , :00445B09   
|
:00445345 55                      push ebp
:00445346 8BEC                    mov ebp, esp
:00445348 83EC0C                  sub esp, 0000000C
:0044534B 894DF8                  mov dword ptr [ebp-08], ecx
:0044534E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445351 81E1FF000000            and ecx, 000000FF
:00445357 6BC924                  imul ecx, 00000024
:0044535A 81C1B83B4B00            add ecx, 004B3BB8
:00445360 E87B16FFFF              call 004369E0
:00445365 8945FC                  mov dword ptr [ebp-04], eax
:00445368 8B45FC                  mov eax, dword ptr [ebp-04]
:0044536B 8945F4                  mov dword ptr [ebp-0C], eax
:0044536E 817DF496000000          cmp dword ptr [ebp-0C], 00000096
:00445375 7719                    ja 00445390
:00445377 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044537A 33C9                    xor ecx, ecx
:0044537C 8A8AB4534400            mov cl, byte ptr [edx+004453B4]
:00445382 FF248D98534400          jmp dword ptr [4*ecx+00445398]
:00445389 B801000000              mov eax, 00000001
:0044538E EB02                    jmp 00445392

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445375(C)
|
:00445390 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044538E(U)
|
:00445392 8BE5                    mov esp, ebp
:00445394 5D                      pop ebp
:00445395 C20400                  ret 0004



:00445398 89534400                DWORD 00445389
:0044539C 89534400                DWORD 00445389
:004453A0 89534400                DWORD 00445389
:004453A4 89534400                DWORD 00445389
:004453A8 89534400                DWORD 00445389
:004453AC 89534400                DWORD 00445389
:004453B0 90534400                DWORD 00445390


:004453B4 00000000                BYTE  4 DUP(0)


:004453B8 06                      push es
:004453B9 0106                    add dword ptr [esi], eax
:004453BB 06                      push es
:004453BC 06                      push es
:004453BD 06                      push es
:004453BE 06                      push es
:004453BF 06                      push es
:004453C0 06                      push es
:004453C1 06                      push es
:004453C2 06                      push es
:004453C3 06                      push es
:004453C4 06                      push es
:004453C5 06                      push es
:004453C6 06                      push es
:004453C7 06                      push es
:004453C8 06                      push es
:004453C9 06                      push es
:004453CA 06                      push es
:004453CB 06                      push es
:004453CC 06                      push es
:004453CD 06                      push es
:004453CE 06                      push es
:004453CF 06                      push es
:004453D0 06                      push es
:004453D1 06                      push es
:004453D2 06                      push es
:004453D3 06                      push es
:004453D4 06                      push es
:004453D5 06                      push es
:004453D6 06                      push es
:004453D7 06                      push es
:004453D8 06                      push es
:004453D9 06                      push es
:004453DA 06                      push es
:004453DB 06                      push es
:004453DC 06                      push es
:004453DD 06                      push es
:004453DE 06                      push es
:004453DF 06                      push es
:004453E0 06                      push es
:004453E1 06                      push es
:004453E2 06                      push es
:004453E3 06                      push es
:004453E4 06                      push es
:004453E5 06                      push es
:004453E6 06                      push es
:004453E7 06                      push es
:004453E8 06                      push es
:004453E9 06                      push es
:004453EA 06                      push es
:004453EB 06                      push es
:004453EC 06                      push es
:004453ED 06                      push es
:004453EE 06                      push es
:004453EF 06                      push es
:004453F0 06                      push es
:004453F1 06                      push es
:004453F2 06                      push es
:004453F3 06                      push es
:004453F4 06                      push es
:004453F5 06                      push es
:004453F6 06                      push es
:004453F7 06                      push es
:004453F8 06                      push es
:004453F9 06                      push es
:004453FA 06                      push es
:004453FB 06                      push es
:004453FC 06                      push es
:004453FD 06                      push es
:004453FE 06                      push es
:004453FF 06                      push es
:00445400 06                      push es
:00445401 06                      push es
:00445402 06                      push es
:00445403 06                      push es
:00445404 06                      push es
:00445405 06                      push es
:00445406 06                      push es
:00445407 06                      push es
:00445408 06                      push es
:00445409 06                      push es
:0044540A 06                      push es
:0044540B 06                      push es
:0044540C 06                      push es
:0044540D 0206                    add al, byte ptr [esi]
:0044540F 06                      push es
:00445410 06                      push es
:00445411 06                      push es
:00445412 06                      push es
:00445413 06                      push es
:00445414 06                      push es
:00445415 06                      push es
:00445416 06                      push es
:00445417 06                      push es
:00445418 06                      push es
:00445419 06                      push es
:0044541A 06                      push es
:0044541B 06                      push es
:0044541C 06                      push es
:0044541D 0303                    add eax, dword ptr [ebx]
:0044541F 06                      push es
:00445420 06                      push es
:00445421 06                      push es
:00445422 06                      push es
:00445423 06                      push es
:00445424 06                      push es
:00445425 06                      push es
:00445426 06                      push es
:00445427 06                      push es
:00445428 06                      push es
:00445429 06                      push es
:0044542A 06                      push es
:0044542B 06                      push es
:0044542C 06                      push es
:0044542D 06                      push es
:0044542E 06                      push es
:0044542F 06                      push es
:00445430 06                      push es
:00445431 06                      push es
:00445432 06                      push es
:00445433 06                      push es
:00445434 06                      push es
:00445435 0404                    add al, 04
:00445437 06                      push es
:00445438 06                      push es
:00445439 06                      push es
:0044543A 06                      push es
:0044543B 06                      push es
:0044543C 06                      push es
:0044543D 06                      push es
:0044543E 06                      push es
:0044543F 06                      push es
:00445440 06                      push es
:00445441 06                      push es
:00445442 06                      push es
:00445443 06                      push es
:00445444 06                      push es
:00445445 06                      push es
:00445446 06                      push es
:00445447 06                      push es
:00445448 06                      push es
:00445449 06                      push es
:0044544A 05                      BYTE 05h


* Referenced by a CALL at Addresses:
|:004451E4   , :004452B7   , :00445997   , :004485C8   
|
:0044544B 55                      push ebp
:0044544C 8BEC                    mov ebp, esp
:0044544E 83EC1C                  sub esp, 0000001C
:00445451 894DEC                  mov dword ptr [ebp-14], ecx
:00445454 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445457 81E1FF000000            and ecx, 000000FF
:0044545D 6BC924                  imul ecx, 00000024
:00445460 81C1B83B4B00            add ecx, 004B3BB8
:00445466 E8D5C7FEFF              call 00431C40
:0044546B 50                      push eax
:0044546C E8E7A30000              call 0044F858
:00445471 83C404                  add esp, 00000004
:00445474 25FF000000              and eax, 000000FF
:00445479 83F80A                  cmp eax, 0000000A
:0044547C 0F84FE000000            je 00445580
:00445482 8B4510                  mov eax, dword ptr [ebp+10]
:00445485 25FF000000              and eax, 000000FF
:0044548A 8945E8                  mov dword ptr [ebp-18], eax
:0044548D 837DE83D                cmp dword ptr [ebp-18], 0000003D
:00445491 0F87E2000000            ja 00445579
:00445497 8B55E8                  mov edx, dword ptr [ebp-18]
:0044549A 33C9                    xor ecx, ecx
:0044549C 8A8A5C564400            mov cl, byte ptr [edx+0044565C]
:004454A2 FF248DC8554400          jmp dword ptr [4*ecx+004455C8]
:004454A9 33C0                    xor eax, eax
:004454AB E912010000              jmp 004455C2
:004454B0 B801000000              mov eax, 00000001
:004454B5 E908010000              jmp 004455C2

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004454BA B802000000              mov eax, 00000002
:004454BF E9FE000000              jmp 004455C2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004454C4 B803000000              mov eax, 00000003
:004454C9 E9F4000000              jmp 004455C2
:004454CE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004454D1 81E1FF000000            and ecx, 000000FF
:004454D7 6BC924                  imul ecx, 00000024
:004454DA 81C1B83B4B00            add ecx, 004B3BB8
:004454E0 E85BC7FEFF              call 00431C40
:004454E5 8A00                    mov al, byte ptr [eax]
:004454E7 8845F8                  mov byte ptr [ebp-08], al
:004454EA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004454ED 81E1FF000000            and ecx, 000000FF
:004454F3 6BC924                  imul ecx, 00000024
:004454F6 81C1B83B4B00            add ecx, 004B3BB8
:004454FC E83FC7FEFF              call 00431C40
:00445501 8A4801                  mov cl, byte ptr [eax+01]
:00445504 884DFC                  mov byte ptr [ebp-04], cl
:00445507 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044550A 81E1FF000000            and ecx, 000000FF
:00445510 6BC924                  imul ecx, 00000024
:00445513 81C1B83B4B00            add ecx, 004B3BB8
:00445519 E822C7FEFF              call 00431C40
:0044551E 8A10                    mov dl, byte ptr [eax]
:00445520 8855F4                  mov byte ptr [ebp-0C], dl
:00445523 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00445526 81E1FF000000            and ecx, 000000FF
:0044552C 6BC924                  imul ecx, 00000024
:0044552F 81C1B83B4B00            add ecx, 004B3BB8
:00445535 E806C7FEFF              call 00431C40
:0044553A 8A4001                  mov al, byte ptr [eax+01]
:0044553D 8845F0                  mov byte ptr [ebp-10], al
:00445540 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00445543 81E1FF000000            and ecx, 000000FF
:00445549 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044554C 81E2FF000000            and edx, 000000FF
:00445552 3BCA                    cmp ecx, edx
:00445554 7415                    je 0044556B
:00445556 8B45FC                  mov eax, dword ptr [ebp-04]
:00445559 25FF000000              and eax, 000000FF
:0044555E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00445561 81E1FF000000            and ecx, 000000FF
:00445567 3BC1                    cmp eax, ecx
:00445569 7507                    jne 00445572

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445554(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044556B B803000000              mov eax, 00000003
:00445570 EB50                    jmp 004455C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445569(C)
|
:00445572 B801000000              mov eax, 00000001
:00445577 EB49                    jmp 004455C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445491(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445579 B804000000              mov eax, 00000004
:0044557E EB42                    jmp 004455C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044547C(C)
|
:00445580 8B5510                  mov edx, dword ptr [ebp+10]
:00445583 81E2FF000000            and edx, 000000FF
:00445589 8955E4                  mov dword ptr [ebp-1C], edx
:0044558C 837DE438                cmp dword ptr [ebp-1C], 00000038
:00445590 772B                    ja 004455BD
:00445592 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00445595 33C0                    xor eax, eax
:00445597 8A81F6564400            mov al, byte ptr [ecx+004456F6]
:0044559D FF24859A564400          jmp dword ptr [4*eax+0044569A]
:004455A4 33C0                    xor eax, eax
:004455A6 EB1A                    jmp 004455C2
:004455A8 B801000000              mov eax, 00000001
:004455AD EB13                    jmp 004455C2

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004455AF B802000000              mov eax, 00000002
:004455B4 EB0C                    jmp 004455C2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004455B6 B803000000              mov eax, 00000003
:004455BB EB05                    jmp 004455C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445590(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004455BD B804000000              mov eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004454AB(U), :004454B5(U), :004454BF(U), :004454C9(U), :00445570(U)
|:00445577(U), :0044557E(U), :004455A6(U), :004455AD(U), :004455B4(U)
|:004455BB(U)
|
:004455C2 8BE5                    mov esp, ebp
:004455C4 5D                      pop ebp
:004455C5 C20C00                  ret 000C



:004455C8 A9544400                DWORD 004454A9
:004455CC C4544400                DWORD 004454C4
:004455D0 A9544400                DWORD 004454A9
:004455D4 B0544400                DWORD 004454B0
:004455D8 A9544400                DWORD 004454A9
:004455DC C4544400                DWORD 004454C4
:004455E0 A9544400                DWORD 004454A9
:004455E4 B0544400                DWORD 004454B0
:004455E8 C4544400                DWORD 004454C4
:004455EC A9544400                DWORD 004454A9
:004455F0 CE544400                DWORD 004454CE
:004455F4 B0544400                DWORD 004454B0
:004455F8 A9544400                DWORD 004454A9
:004455FC BA544400                DWORD 004454BA
:00445600 B0544400                DWORD 004454B0
:00445604 A9544400                DWORD 004454A9
:00445608 C4544400                DWORD 004454C4
:0044560C BA544400                DWORD 004454BA
:00445610 B0544400                DWORD 004454B0
:00445614 BA544400                DWORD 004454BA
:00445618 A9544400                DWORD 004454A9
:0044561C B0544400                DWORD 004454B0
:00445620 A9544400                DWORD 004454A9
:00445624 BA544400                DWORD 004454BA
:00445628 A9544400                DWORD 004454A9
:0044562C B0544400                DWORD 004454B0
:00445630 B0544400                DWORD 004454B0
:00445634 BA544400                DWORD 004454BA
:00445638 B0544400                DWORD 004454B0
:0044563C BA544400                DWORD 004454BA
:00445640 A9544400                DWORD 004454A9
:00445644 BA544400                DWORD 004454BA
:00445648 B0544400                DWORD 004454B0
:0044564C BA544400                DWORD 004454BA
:00445650 B0544400                DWORD 004454B0
:00445654 BA544400                DWORD 004454BA
:00445658 79554400                DWORD 00445579


:0044565C 0000                    add byte ptr [eax], al
:0044565E 0101                    add dword ptr [ecx], eax
:00445660 0203                    add al, byte ptr [ebx]
:00445662 0405                    add al, 05
:00445664 06                      push es
:00445665 07                      pop es
:00445666 0808                    or byte ptr [eax], cl
:00445668 090A                    or dword ptr [edx], ecx
:0044566A 0B0B                    or ecx, dword ptr [ebx]
:0044566C 0C0C                    or al, 0C
:0044566E 0C0C                    or al, 0C
:00445670 0C0C                    or al, 0C
:00445672 0C0D                    or al, 0D
:00445674 0D0D0E0F10              or eax, 100F0E0D
:00445679 1112                    adc dword ptr [edx], edx
:0044567B 1212                    adc dl, byte ptr [edx]
:0044567D 13141516161616          adc edx, dword ptr [edx+16161616]
:00445684 17                      pop ss
:00445685 1819                    sbb byte ptr [ecx], bl
:00445687 1919                    sbb dword ptr [ecx], ebx
:00445689 241A                    and al, 1A
:0044568B 1A1B                    sbb bl, byte ptr [ebx]
:0044568D 1B1B                    sbb ebx, dword ptr [ebx]
:0044568F 1C1D                    sbb al, 1D
:00445691 1E                      push ds
:00445692 1F                      pop ds
:00445693 1F                      pop ds
:00445694 1F                      pop ds
:00445695 2021                    and byte ptr [ecx], ah
:00445697 2222                    and ah, byte ptr [edx]
:00445699 23A4554400A855          and esp, dword ptr [ebp+2*edx+55A80044]
:004456A0 44                      inc esp
:004456A1 00B6554400A4            add byte ptr [esi+A4004455], dh
:004456A7 55                      push ebp
:004456A8 44                      inc esp
:004456A9 00A4554400B655          add byte ptr [ebp+2*edx+55B60044], ah
:004456B0 44                      inc esp
:004456B1 00A4554400A855          add byte ptr [ebp+2*edx+55A80044], ah
:004456B8 44                      inc esp
:004456B9 00B6554400A4            add byte ptr [esi+A4004455], dh
:004456BF 55                      push ebp
:004456C0 44                      inc esp
:004456C1 00AF554400A4            add byte ptr [edi+A4004455], ch
:004456C7 55                      push ebp
:004456C8 44                      inc esp
:004456C9 00A4554400A855          add byte ptr [ebp+2*edx+55A80044], ah
:004456D0 44                      inc esp
:004456D1 00B6554400A4            add byte ptr [esi+A4004455], dh
:004456D7 55                      push ebp
:004456D8 44                      inc esp
:004456D9 00A8554400A4            add byte ptr [eax+A4004455], ch
:004456DF 55                      push ebp
:004456E0 44                      inc esp
:004456E1 00A8554400AF            add byte ptr [eax+AF004455], ch
:004456E7 55                      push ebp
:004456E8 44                      inc esp
:004456E9 00AF554400AF            add byte ptr [edi+AF004455], ch
:004456EF 55                      push ebp
:004456F0 44                      inc esp
:004456F1 00BD55440000            add byte ptr [ebp+00004455], bh
:004456F7 0102                    add dword ptr [edx], eax
:004456F9 0203                    add al, byte ptr [ebx]
:004456FB 16                      push ss
:004456FC 0405                    add al, 05
:004456FE 06                      push es
:004456FF 07                      pop es
:00445700 0808                    or byte ptr [eax], cl
:00445702 0916                    or dword ptr [esi], edx
:00445704 16                      push ss
:00445705 0A16                    or dl, byte ptr [esi]
:00445707 0B16                    or edx, dword ptr [esi]
:00445709 16                      push ss
:0044570A 16                      push ss
:0044570B 16                      push ss
:0044570C 0C16                    or al, 16
:0044570E 0D1616160E              or eax, 0E161616
:00445713 16                      push ss
:00445714 0F                      BYTE 0fh
:00445715 1016                    adc byte ptr [esi], dl
:00445717 16                      push ss
:00445718 16                      push ss
:00445719 16                      push ss
:0044571A 16                      push ss
:0044571B 16                      push ss
:0044571C 16                      push ss
:0044571D 16                      push ss
:0044571E 16                      push ss
:0044571F 1112                    adc dword ptr [edx], edx
:00445721 1216                    adc dl, byte ptr [esi]
:00445723 1316                    adc edx, dword ptr [esi]
:00445725 16                      push ss
:00445726 16                      push ss
:00445727 16                      push ss
:00445728 16                      push ss
:00445729 16                      push ss
:0044572A 1416                    adc al, 16
:0044572C 16                      push ss
:0044572D 16                      push ss
:0044572E 15                      BYTE 15h


* Referenced by a CALL at Address:
|:00445251   
|
:0044572F 55                      push ebp
:00445730 8BEC                    mov ebp, esp
:00445732 83EC0C                  sub esp, 0000000C
:00445735 894DF8                  mov dword ptr [ebp-08], ecx
:00445738 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044573B 81E1FF000000            and ecx, 000000FF
:00445741 6BC924                  imul ecx, 00000024
:00445744 81C1B83B4B00            add ecx, 004B3BB8
:0044574A E89112FFFF              call 004369E0
:0044574F 8845FC                  mov byte ptr [ebp-04], al
:00445752 8B45FC                  mov eax, dword ptr [ebp-04]
:00445755 25FF000000              and eax, 000000FF
:0044575A 8945F4                  mov dword ptr [ebp-0C], eax
:0044575D 817DF496000000          cmp dword ptr [ebp-0C], 00000096
:00445764 775F                    ja 004457C5
:00445766 8B55F4                  mov edx, dword ptr [ebp-0C]
:00445769 33C9                    xor ecx, ecx
:0044576B 8A8AFE574400            mov cl, byte ptr [edx+004457FE]
:00445771 FF248DCE574400          jmp dword ptr [4*ecx+004457CE]
:00445778 B825000000              mov eax, 00000025
:0044577D EB49                    jmp 004457C8
:0044577F B827000000              mov eax, 00000027
:00445784 EB42                    jmp 004457C8
:00445786 B829000000              mov eax, 00000029
:0044578B EB3B                    jmp 004457C8
:0044578D B82B000000              mov eax, 0000002B
:00445792 EB34                    jmp 004457C8
:00445794 B82D000000              mov eax, 0000002D
:00445799 EB2D                    jmp 004457C8
:0044579B B82F000000              mov eax, 0000002F
:004457A0 EB26                    jmp 004457C8
:004457A2 B830000000              mov eax, 00000030
:004457A7 EB1F                    jmp 004457C8
:004457A9 B831000000              mov eax, 00000031
:004457AE EB18                    jmp 004457C8
:004457B0 B832000000              mov eax, 00000032
:004457B5 EB11                    jmp 004457C8
:004457B7 B833000000              mov eax, 00000033
:004457BC EB0A                    jmp 004457C8
:004457BE B834000000              mov eax, 00000034
:004457C3 EB03                    jmp 004457C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445764(C)
|
:004457C5 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044577D(U), :00445784(U), :0044578B(U), :00445792(U), :00445799(U)
|:004457A0(U), :004457A7(U), :004457AE(U), :004457B5(U), :004457BC(U)
|:004457C3(U)
|
:004457C8 8BE5                    mov esp, ebp
:004457CA 5D                      pop ebp
:004457CB C20400                  ret 0004



:004457CE 78574400                DWORD 00445778
:004457D2 86574400                DWORD 00445786
:004457D6 7F574400                DWORD 0044577F
:004457DA 8D574400                DWORD 0044578D
:004457DE 94574400                DWORD 00445794
:004457E2 B7574400                DWORD 004457B7
:004457E6 BE574400                DWORD 004457BE
:004457EA A2574400                DWORD 004457A2
:004457EE 9B574400                DWORD 0044579B
:004457F2 B0574400                DWORD 004457B0
:004457F6 A9574400                DWORD 004457A9
:004457FA C5574400                DWORD 004457C5


:004457FE 0001                    add byte ptr [ecx], al
:00445800 0203                    add al, byte ptr [ebx]
:00445802 0B040B                  or eax, dword ptr [ebx+ecx]
:00445805 0B0B                    or ecx, dword ptr [ebx]
:00445807 0B0B                    or ecx, dword ptr [ebx]
:00445809 0B0B                    or ecx, dword ptr [ebx]
:0044580B 0B0B                    or ecx, dword ptr [ebx]
:0044580D 0B0B                    or ecx, dword ptr [ebx]
:0044580F 0B0B                    or ecx, dword ptr [ebx]
:00445811 0B0B                    or ecx, dword ptr [ebx]
:00445813 0B0B                    or ecx, dword ptr [ebx]
:00445815 0B0B                    or ecx, dword ptr [ebx]
:00445817 0B0B                    or ecx, dword ptr [ebx]
:00445819 0B0B                    or ecx, dword ptr [ebx]
:0044581B 0B0B                    or ecx, dword ptr [ebx]
:0044581D 0B0B                    or ecx, dword ptr [ebx]
:0044581F 0B0B                    or ecx, dword ptr [ebx]
:00445821 0B0B                    or ecx, dword ptr [ebx]
:00445823 0B0B                    or ecx, dword ptr [ebx]
:00445825 0B0B                    or ecx, dword ptr [ebx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004457CE(C)
|
:00445827 0B0B                    or ecx, dword ptr [ebx]
:00445829 0B0B                    or ecx, dword ptr [ebx]
:0044582B 0B0B                    or ecx, dword ptr [ebx]
:0044582D 0B0B                    or ecx, dword ptr [ebx]
:0044582F 0B0B                    or ecx, dword ptr [ebx]
:00445831 0B0B                    or ecx, dword ptr [ebx]
:00445833 0B0B                    or ecx, dword ptr [ebx]
:00445835 0B0B                    or ecx, dword ptr [ebx]
:00445837 0B0B                    or ecx, dword ptr [ebx]
:00445839 0B0B                    or ecx, dword ptr [ebx]
:0044583B 0B0B                    or ecx, dword ptr [ebx]
:0044583D 0B0B                    or ecx, dword ptr [ebx]
:0044583F 0B0B                    or ecx, dword ptr [ebx]
:00445841 0B0B                    or ecx, dword ptr [ebx]
:00445843 0B0B                    or ecx, dword ptr [ebx]
:00445845 0B0B                    or ecx, dword ptr [ebx]
:00445847 0B0B                    or ecx, dword ptr [ebx]
:00445849 0B0B                    or ecx, dword ptr [ebx]
:0044584B 0B0B                    or ecx, dword ptr [ebx]
:0044584D 0B0B                    or ecx, dword ptr [ebx]
:0044584F 0B0B                    or ecx, dword ptr [ebx]
:00445851 0B0B                    or ecx, dword ptr [ebx]
:00445853 0B0B                    or ecx, dword ptr [ebx]
:00445855 0B0B                    or ecx, dword ptr [ebx]
:00445857 050B0B0B0B              add eax, 0B0B0B0B
:0044585C 0B0B                    or ecx, dword ptr [ebx]
:0044585E 0B0B                    or ecx, dword ptr [ebx]
:00445860 0B0B                    or ecx, dword ptr [ebx]
:00445862 0B0B                    or ecx, dword ptr [ebx]
:00445864 0B0B                    or ecx, dword ptr [ebx]
:00445866 0B06                    or eax, dword ptr [esi]
:00445868 07                      pop es
:00445869 0B0B                    or ecx, dword ptr [ebx]
:0044586B 0B0B                    or ecx, dword ptr [ebx]
:0044586D 0B0B                    or ecx, dword ptr [ebx]
:0044586F 0B0B                    or ecx, dword ptr [ebx]
:00445871 0B0B                    or ecx, dword ptr [ebx]
:00445873 0B0B                    or ecx, dword ptr [ebx]
:00445875 0B0B                    or ecx, dword ptr [ebx]
:00445877 0B0B                    or ecx, dword ptr [ebx]
:00445879 0B0B                    or ecx, dword ptr [ebx]
:0044587B 0B0B                    or ecx, dword ptr [ebx]
:0044587D 0B0B                    or ecx, dword ptr [ebx]
:0044587F 0809                    or byte ptr [ecx], cl
:00445881 0B0B                    or ecx, dword ptr [ebx]
:00445883 0B0B                    or ecx, dword ptr [ebx]
:00445885 0B0B                    or ecx, dword ptr [ebx]
:00445887 0B0B                    or ecx, dword ptr [ebx]
:00445889 0B0B                    or ecx, dword ptr [ebx]
:0044588B 0B0B                    or ecx, dword ptr [ebx]
:0044588D 0B0B                    or ecx, dword ptr [ebx]
:0044588F 0B0B                    or ecx, dword ptr [ebx]
:00445891 0B0B                    or ecx, dword ptr [ebx]
:00445893 0B0A                    or ecx, dword ptr [edx]

* Referenced by a CALL at Address:
|:0044531A   
|
:00445895 55                      push ebp
:00445896 8BEC                    mov ebp, esp
:00445898 83EC08                  sub esp, 00000008
:0044589B 894DFC                  mov dword ptr [ebp-04], ecx
:0044589E 8B4508                  mov eax, dword ptr [ebp+08]
:004458A1 25FF000000              and eax, 000000FF
:004458A6 8945F8                  mov dword ptr [ebp-08], eax
:004458A9 837DF81F                cmp dword ptr [ebp-08], 0000001F
:004458AD 7743                    ja 004458F2
:004458AF 8B55F8                  mov edx, dword ptr [ebp-08]
:004458B2 33C9                    xor ecx, ecx
:004458B4 8A8A2F594400            mov cl, byte ptr [edx+0044592F]
:004458BA FF248DFB584400          jmp dword ptr [4*ecx+004458FB]
:004458C1 B81E000000              mov eax, 0000001E
:004458C6 EB2D                    jmp 004458F5
:004458C8 B81F000000              mov eax, 0000001F
:004458CD EB26                    jmp 004458F5
:004458CF B820000000              mov eax, 00000020
:004458D4 EB1F                    jmp 004458F5
:004458D6 B821000000              mov eax, 00000021
:004458DB EB18                    jmp 004458F5
:004458DD B822000000              mov eax, 00000022
:004458E2 EB11                    jmp 004458F5
:004458E4 B823000000              mov eax, 00000023
:004458E9 EB0A                    jmp 004458F5
:004458EB B824000000              mov eax, 00000024
:004458F0 EB03                    jmp 004458F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004458AD(C)
|
:004458F2 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004458C6(U), :004458CD(U), :004458D4(U), :004458DB(U), :004458E2(U)
|:004458E9(U), :004458F0(U)
|
:004458F5 8BE5                    mov esp, ebp
:004458F7 5D                      pop ebp
:004458F8 C20400                  ret 0004



:004458FB C1584400                DWORD 004458C1
:004458FF EB584400                DWORD 004458EB
:00445903 C8584400                DWORD 004458C8
:00445907 EB584400                DWORD 004458EB
:0044590B C8584400                DWORD 004458C8
:0044590F CF584400                DWORD 004458CF
:00445913 D6584400                DWORD 004458D6
:00445917 EB584400                DWORD 004458EB
:0044591B E4584400                DWORD 004458E4
:0044591F EB584400                DWORD 004458EB
:00445923 DD584400                DWORD 004458DD
:00445927 EB584400                DWORD 004458EB
:0044592B F2584400                DWORD 004458F2


:0044592F 0000                    add byte ptr [eax], al
:00445931 0101                    add dword ptr [ecx], eax
:00445933 0202                    add al, byte ptr [edx]
:00445935 0303                    add eax, dword ptr [ebx]
:00445937 0404                    add al, 04
:00445939 0505060607              add eax, 07060605
:0044593E 07                      pop es
:0044593F 07                      pop es
:00445940 07                      pop es
:00445941 07                      pop es
:00445942 07                      pop es
:00445943 07                      pop es
:00445944 07                      pop es
:00445945 07                      pop es
:00445946 07                      pop es
:00445947 0808                    or byte ptr [eax], cl
:00445949 0909                    or dword ptr [ecx], ecx
:0044594B 0A0A                    or cl, byte ptr [edx]
:0044594D 0B0B                    or ecx, dword ptr [ebx]

* Referenced by a CALL at Address:
|:0044516D   
|
:0044594F 55                      push ebp
:00445950 8BEC                    mov ebp, esp
:00445952 6AFF                    push FFFFFFFF
:00445954 68E2984700              push 004798E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004458FF(U)
|
:00445959 64A100000000            mov eax, dword ptr fs:[00000000]
:0044595F 50                      push eax
:00445960 64892500000000          mov dword ptr fs:[00000000], esp
:00445967 81EC50010000            sub esp, 00000150
:0044596D 898DB8FEFFFF            mov dword ptr [ebp+FFFFFEB8], ecx
:00445973 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445979 E8C2FCFBFF              call 00405640
:0044597E C745FC00000000          mov [ebp-04], 00000000
:00445985 8A4514                  mov al, byte ptr [ebp+14]
:00445988 50                      push eax
:00445989 8A4D10                  mov cl, byte ptr [ebp+10]
:0044598C 51                      push ecx
:0044598D 8A550C                  mov dl, byte ptr [ebp+0C]
:00445990 52                      push edx
:00445991 8B8DB8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEB8]
:00445997 E8AFFAFFFF              call 0044544B
:0044599C 8985DCFEFFFF            mov dword ptr [ebp+FFFFFEDC], eax
:004459A2 83BDDCFEFFFF03          cmp dword ptr [ebp+FFFFFEDC], 00000003
:004459A9 0F85E0000000            jne 00445A8F

* Possible StringData Ref from Data Obj ->"CHR_ATK.E3"
                                  |
:004459AF 6898D54700              push 0047D598
:004459B4 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:004459BA E816B8FCFF              call 004111D5
:004459BF 85C0                    test eax, eax
:004459C1 7527                    jne 004459EA
:004459C3 C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:004459CD C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004459D4 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:004459DA E881FCFBFF              call 00405660
:004459DF 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:004459E5 E9D2070000              jmp 004461BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004459C1(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004459EA 6A04                    push 00000004
:004459EC 6A00                    push 00000000
:004459EE 6A00                    push 00000000
:004459F0 B9F0174B00              mov ecx, 004B17F0
:004459F5 E896350300              call 00478F90
:004459FA 05003D0100              add eax, 00013D00
:004459FF 50                      push eax
:00445A00 8B4508                  mov eax, dword ptr [ebp+08]
:00445A03 25FF000000              and eax, 000000FF
:00445A08 50                      push eax
:00445A09 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445A0F E815B9FCFF              call 00411329
:00445A14 85C0                    test eax, eax
:00445A16 7532                    jne 00445A4A
:00445A18 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445A1E E80282FCFF              call 0040DC25
:00445A23 C785D4FEFFFF00000000    mov dword ptr [ebp+FFFFFED4], 00000000
:00445A2D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00445A34 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445A3A E821FCFBFF              call 00405660
:00445A3F 8B85D4FEFFFF            mov eax, dword ptr [ebp+FFFFFED4]
:00445A45 E972070000              jmp 004461BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445A16(C)
|
:00445A4A 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445A50 E8D081FCFF              call 0040DC25
:00445A55 85C0                    test eax, eax
:00445A57 7527                    jne 00445A80
:00445A59 C785D0FEFFFF00000000    mov dword ptr [ebp+FFFFFED0], 00000000
:00445A63 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00445A6A 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445A70 E8EBFBFBFF              call 00405660
:00445A75 8B85D0FEFFFF            mov eax, dword ptr [ebp+FFFFFED0]
:00445A7B E93C070000              jmp 004461BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445A57(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00445A80 C785E4FEFFFF03000000    mov dword ptr [ebp+FFFFFEE4], 00000003
:00445A8A E98E010000              jmp 00445C1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004459A9(C)
|
:00445A8F 83BDDCFEFFFF03          cmp dword ptr [ebp+FFFFFEDC], 00000003
:00445A96 0F835A010000            jnb 00445BF6
:00445A9C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00445A9F 81E1FF000000            and ecx, 000000FF
:00445AA5 6BC924                  imul ecx, 00000024
:00445AA8 81C1B83B4B00            add ecx, 004B3BB8
:00445AAE E885C6FEFF              call 00432138
:00445AB3 25FF000000              and eax, 000000FF
:00445AB8 8985B4FEFFFF            mov dword ptr [ebp+FFFFFEB4], eax
:00445ABE 83BDB4FEFFFF03          cmp dword ptr [ebp+FFFFFEB4], 00000003
:00445AC5 7731                    ja 00445AF8
:00445AC7 8B8DB4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEB4]
:00445ACD FF248DCC614400          jmp dword ptr [4*ecx+004461CC]

* Possible StringData Ref from Data Obj ->"CHR_MWAZ.E3"
                                  |
:00445AD4 C745F058D54700          mov [ebp-10], 0047D558
:00445ADB EB22                    jmp 00445AFF

* Possible StringData Ref from Data Obj ->"CHR_BWAZ.E3"
                                  |
:00445ADD C745F068D54700          mov [ebp-10], 0047D568
:00445AE4 EB19                    jmp 00445AFF

* Possible StringData Ref from Data Obj ->"CHR_RWAZ.E3"
                                  |
:00445AE6 C745F078D54700          mov [ebp-10], 0047D578
:00445AED EB10                    jmp 00445AFF

* Possible StringData Ref from Data Obj ->"CHR_OWAZ.E3"
                                  |
:00445AEF C745F088D54700          mov [ebp-10], 0047D588
:00445AF6 EB07                    jmp 00445AFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445AC5(C)
|

* Possible StringData Ref from Data Obj ->"CHR_MWAZ.E3"
                                  |
:00445AF8 C745F058D54700          mov [ebp-10], 0047D558

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445ADB(U), :00445AE4(U), :00445AED(U), :00445AF6(U)
|
:00445AFF 8A550C                  mov dl, byte ptr [ebp+0C]
:00445B02 52                      push edx
:00445B03 8B8DB8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEB8]
:00445B09 E837F8FFFF              call 00445345
:00445B0E 85C0                    test eax, eax
:00445B10 7407                    je 00445B19

* Possible StringData Ref from Data Obj ->"CHR_MWAZ.E3"
                                  |
:00445B12 C745F058D54700          mov [ebp-10], 0047D558

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445B10(C)
|
:00445B19 8B45F0                  mov eax, dword ptr [ebp-10]
:00445B1C 50                      push eax
:00445B1D 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445B23 E8ADB6FCFF              call 004111D5
:00445B28 85C0                    test eax, eax
:00445B2A 7527                    jne 00445B53
:00445B2C C785CCFEFFFF00000000    mov dword ptr [ebp+FFFFFECC], 00000000
:00445B36 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00445B3D 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445B43 E818FBFBFF              call 00405660
:00445B48 8B85CCFEFFFF            mov eax, dword ptr [ebp+FFFFFECC]
:00445B4E E969060000              jmp 004461BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445B2A(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445B53 6A04                    push 00000004
:00445B55 6A00                    push 00000000
:00445B57 6A00                    push 00000000
:00445B59 B9F0174B00              mov ecx, 004B17F0
:00445B5E E82D340300              call 00478F90
:00445B63 05003D0100              add eax, 00013D00
:00445B68 50                      push eax
:00445B69 8B4D08                  mov ecx, dword ptr [ebp+08]
:00445B6C 81E1FF000000            and ecx, 000000FF
:00445B72 51                      push ecx
:00445B73 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445B79 E8ABB7FCFF              call 00411329
:00445B7E 85C0                    test eax, eax
:00445B80 7532                    jne 00445BB4
:00445B82 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445B88 E89880FCFF              call 0040DC25
:00445B8D C785C8FEFFFF00000000    mov dword ptr [ebp+FFFFFEC8], 00000000
:00445B97 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00445B9E 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445BA4 E8B7FAFBFF              call 00405660
:00445BA9 8B85C8FEFFFF            mov eax, dword ptr [ebp+FFFFFEC8]
:00445BAF E908060000              jmp 004461BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445B80(C)
|
:00445BB4 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445BBA E86680FCFF              call 0040DC25
:00445BBF 85C0                    test eax, eax
:00445BC1 7527                    jne 00445BEA
:00445BC3 C785C4FEFFFF00000000    mov dword ptr [ebp+FFFFFEC4], 00000000
:00445BCD C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00445BD4 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445BDA E881FAFBFF              call 00405660
:00445BDF 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:00445BE5 E9D2050000              jmp 004461BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445BC1(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00445BEA C785E4FEFFFF02000000    mov dword ptr [ebp+FFFFFEE4], 00000002
:00445BF4 EB27                    jmp 00445C1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445A96(C)
|
:00445BF6 C785C0FEFFFF01000000    mov dword ptr [ebp+FFFFFEC0], 00000001
:00445C00 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00445C07 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:00445C0D E84EFAFBFF              call 00405660
:00445C12 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]
:00445C18 E99F050000              jmp 004461BC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445A8A(U), :00445BF4(U)
|
:00445C1D 8B5514                  mov edx, dword ptr [ebp+14]
:00445C20 81E2FF000000            and edx, 000000FF
:00445C26 83FA0D                  cmp edx, 0000000D
:00445C29 0F85C3020000            jne 00445EF2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00445C2F C785E4FEFFFF03000000    mov dword ptr [ebp+FFFFFEE4], 00000003
:00445C39 6A01                    push 00000001
:00445C3B 8A4510                  mov al, byte ptr [ebp+10]
:00445C3E 50                      push eax
:00445C3F 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00445C42 51                      push ecx
:00445C43 8B8DB8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEB8]
:00445C49 E8CE050000              call 0044621C
:00445C4E 8985E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], eax
:00445C54 83BDDCFEFFFF03          cmp dword ptr [ebp+FFFFFEDC], 00000003
:00445C5B 0F8535010000            jne 00445D96
:00445C61 8B95E0FEFFFF            mov edx, dword ptr [ebp+FFFFFEE0]
:00445C67 8995B0FEFFFF            mov dword ptr [ebp+FFFFFEB0], edx
:00445C6D 83BDB0FEFFFF03          cmp dword ptr [ebp+FFFFFEB0], 00000003
:00445C74 0F8717010000            ja 00445D91
:00445C7A 8B85B0FEFFFF            mov eax, dword ptr [ebp+FFFFFEB0]
:00445C80 FF2485DC614400          jmp dword ptr [4*eax+004461DC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445C87 6A04                    push 00000004
:00445C89 6A00                    push 00000000
:00445C8B 6A00                    push 00000000
:00445C8D B9F0174B00              mov ecx, 004B17F0
:00445C92 E8F9320300              call 00478F90
:00445C97 05009D0100              add eax, 00019D00
:00445C9C 8945EC                  mov dword ptr [ebp-14], eax
:00445C9F 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:00445CA5 C1E10C                  shl ecx, 0C
:00445CA8 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445CA9 6A04                    push 00000004
:00445CAB 6A00                    push 00000000
:00445CAD 6A00                    push 00000000
:00445CAF B9F0174B00              mov ecx, 004B17F0
:00445CB4 E8D7320300              call 00478F90
:00445CB9 50                      push eax
:00445CBA 8B55EC                  mov edx, dword ptr [ebp-14]
:00445CBD 52                      push edx
:00445CBE E8FD280300              call 004785C0
:00445CC3 83C40C                  add esp, 0000000C
:00445CC6 E9C6000000              jmp 00445D91

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445CCB 6A04                    push 00000004
:00445CCD 6A00                    push 00000000
:00445CCF 6A00                    push 00000000
:00445CD1 B9F0174B00              mov ecx, 004B17F0
:00445CD6 E8B5320300              call 00478F90
:00445CDB 05006D0100              add eax, 00016D00
:00445CE0 8945EC                  mov dword ptr [ebp-14], eax
:00445CE3 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00445CE9 C1E00C                  shl eax, 0C
:00445CEC 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445CED 6A04                    push 00000004
:00445CEF 6A00                    push 00000000
:00445CF1 6A00                    push 00000000
:00445CF3 B9F0174B00              mov ecx, 004B17F0
:00445CF8 E893320300              call 00478F90
:00445CFD 50                      push eax
:00445CFE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445D01 51                      push ecx
:00445D02 E8B9280300              call 004785C0
:00445D07 83C40C                  add esp, 0000000C
:00445D0A E982000000              jmp 00445D91

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445D0F 6A04                    push 00000004
:00445D11 6A00                    push 00000000
:00445D13 6A00                    push 00000000
:00445D15 B9F0174B00              mov ecx, 004B17F0
:00445D1A E871320300              call 00478F90
:00445D1F 05006D0100              add eax, 00016D00
:00445D24 8945EC                  mov dword ptr [ebp-14], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445D27 6A04                    push 00000004
:00445D29 6A00                    push 00000000
:00445D2B 6A00                    push 00000000
:00445D2D B9F0174B00              mov ecx, 004B17F0
:00445D32 E859320300              call 00478F90
:00445D37 50                      push eax
:00445D38 8B55EC                  mov edx, dword ptr [ebp-14]
:00445D3B 52                      push edx
:00445D3C 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00445D42 C1E006                  shl eax, 06
:00445D45 50                      push eax
:00445D46 6A40                    push 00000040
:00445D48 E821A8FCFF              call 0041056E
:00445D4D 83C410                  add esp, 00000010
:00445D50 EB3F                    jmp 00445D91

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445D52 6A04                    push 00000004
:00445D54 6A00                    push 00000000
:00445D56 6A00                    push 00000000
:00445D58 B9F0174B00              mov ecx, 004B17F0
:00445D5D E82E320300              call 00478F90
:00445D62 05003D0100              add eax, 00013D00
:00445D67 8945EC                  mov dword ptr [ebp-14], eax
:00445D6A 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:00445D70 C1E10C                  shl ecx, 0C
:00445D73 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445D74 6A04                    push 00000004
:00445D76 6A00                    push 00000000
:00445D78 6A00                    push 00000000
:00445D7A B9F0174B00              mov ecx, 004B17F0
:00445D7F E80C320300              call 00478F90
:00445D84 50                      push eax
:00445D85 8B55EC                  mov edx, dword ptr [ebp-14]
:00445D88 52                      push edx
:00445D89 E832280300              call 004785C0
:00445D8E 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445C74(C), :00445CC6(U), :00445D0A(U), :00445D50(U)
|
:00445D91 E957010000              jmp 00445EED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445C5B(C)
|
:00445D96 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:00445D9C 8985ACFEFFFF            mov dword ptr [ebp+FFFFFEAC], eax
:00445DA2 8B8DACFEFFFF            mov ecx, dword ptr [ebp+FFFFFEAC]
:00445DA8 83E904                  sub ecx, 00000004
:00445DAB 898DACFEFFFF            mov dword ptr [ebp+FFFFFEAC], ecx
:00445DB1 83BDACFEFFFF03          cmp dword ptr [ebp+FFFFFEAC], 00000003
:00445DB8 0F872F010000            ja 00445EED
:00445DBE 8B95ACFEFFFF            mov edx, dword ptr [ebp+FFFFFEAC]
:00445DC4 FF2495EC614400          jmp dword ptr [4*edx+004461EC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445DCB 6A04                    push 00000004
:00445DCD 6A00                    push 00000000
:00445DCF 6A00                    push 00000000
:00445DD1 B9F0174B00              mov ecx, 004B17F0
:00445DD6 E8B5310300              call 00478F90
:00445DDB 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:00445DE1 C1E10C                  shl ecx, 0C
:00445DE4 8D9408003D0100          lea edx, dword ptr [eax+ecx+00013D00]
:00445DEB 8955EC                  mov dword ptr [ebp-14], edx
:00445DEE 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00445DF4 C1E00C                  shl eax, 0C
:00445DF7 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445DF8 6A04                    push 00000004
:00445DFA 6A00                    push 00000000
:00445DFC 6A00                    push 00000000
:00445DFE B9F0174B00              mov ecx, 004B17F0
:00445E03 E888310300              call 00478F90
:00445E08 50                      push eax
:00445E09 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445E0C 51                      push ecx
:00445E0D E8AE270300              call 004785C0
:00445E12 83C40C                  add esp, 0000000C
:00445E15 E9D3000000              jmp 00445EED

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445E1A 6A04                    push 00000004
:00445E1C 6A00                    push 00000000
:00445E1E 6A00                    push 00000000
:00445E20 B9F0174B00              mov ecx, 004B17F0
:00445E25 E866310300              call 00478F90
:00445E2A 05003D0100              add eax, 00013D00
:00445E2F 8945EC                  mov dword ptr [ebp-14], eax
:00445E32 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00445E38 C1E20C                  shl edx, 0C
:00445E3B 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445E3C 6A04                    push 00000004
:00445E3E 6A00                    push 00000000
:00445E40 6A00                    push 00000000
:00445E42 B9F0174B00              mov ecx, 004B17F0
:00445E47 E844310300              call 00478F90
:00445E4C 50                      push eax
:00445E4D 8B45EC                  mov eax, dword ptr [ebp-14]
:00445E50 50                      push eax
:00445E51 E86A270300              call 004785C0
:00445E56 83C40C                  add esp, 0000000C
:00445E59 E98F000000              jmp 00445EED

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445E5E 6A04                    push 00000004
:00445E60 6A00                    push 00000000
:00445E62 6A00                    push 00000000
:00445E64 B9F0174B00              mov ecx, 004B17F0
:00445E69 E822310300              call 00478F90
:00445E6E 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:00445E74 C1E10C                  shl ecx, 0C
:00445E77 8D9408003D0100          lea edx, dword ptr [eax+ecx+00013D00]
:00445E7E 8955EC                  mov dword ptr [ebp-14], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445E81 6A04                    push 00000004
:00445E83 6A00                    push 00000000
:00445E85 6A00                    push 00000000
:00445E87 B9F0174B00              mov ecx, 004B17F0
:00445E8C E8FF300300              call 00478F90
:00445E91 50                      push eax
:00445E92 8B45EC                  mov eax, dword ptr [ebp-14]
:00445E95 50                      push eax
:00445E96 8B8DE4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE4]
:00445E9C C1E106                  shl ecx, 06
:00445E9F 51                      push ecx
:00445EA0 6A40                    push 00000040
:00445EA2 E8C7A6FCFF              call 0041056E
:00445EA7 83C410                  add esp, 00000010
:00445EAA EB41                    jmp 00445EED

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445EAC 6A04                    push 00000004
:00445EAE 6A00                    push 00000000
:00445EB0 6A00                    push 00000000
:00445EB2 B9F0174B00              mov ecx, 004B17F0
:00445EB7 E8D4300300              call 00478F90
:00445EBC 05003D0100              add eax, 00013D00
:00445EC1 8945EC                  mov dword ptr [ebp-14], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445EC4 6A04                    push 00000004
:00445EC6 6A00                    push 00000000
:00445EC8 6A00                    push 00000000
:00445ECA B9F0174B00              mov ecx, 004B17F0
:00445ECF E8BC300300              call 00478F90
:00445ED4 50                      push eax
:00445ED5 8B55EC                  mov edx, dword ptr [ebp-14]
:00445ED8 52                      push edx
:00445ED9 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00445EDF C1E006                  shl eax, 06
:00445EE2 50                      push eax
:00445EE3 6A40                    push 00000040
:00445EE5 E884A6FCFF              call 0041056E
:00445EEA 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445D91(U), :00445DB8(C), :00445E15(U), :00445E59(U), :00445EAA(U)
|
:00445EED E9A8020000              jmp 0044619A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445C29(C)
|
:00445EF2 83BDDCFEFFFF03          cmp dword ptr [ebp+FFFFFEDC], 00000003
:00445EF9 0F8550010000            jne 0044604F
:00445EFF 6A00                    push 00000000
:00445F01 8A4D10                  mov cl, byte ptr [ebp+10]
:00445F04 51                      push ecx
:00445F05 8A550C                  mov dl, byte ptr [ebp+0C]
:00445F08 52                      push edx
:00445F09 8B8DB8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEB8]
:00445F0F E808030000              call 0044621C
:00445F14 8985E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], eax
:00445F1A 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:00445F20 8985A8FEFFFF            mov dword ptr [ebp+FFFFFEA8], eax
:00445F26 83BDA8FEFFFF03          cmp dword ptr [ebp+FFFFFEA8], 00000003
:00445F2D 0F8717010000            ja 0044604A
:00445F33 8B8DA8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA8]
:00445F39 FF248DFC614400          jmp dword ptr [4*ecx+004461FC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445F40 6A04                    push 00000004
:00445F42 6A00                    push 00000000
:00445F44 6A00                    push 00000000
:00445F46 B9F0174B00              mov ecx, 004B17F0
:00445F4B E840300300              call 00478F90
:00445F50 05009D0100              add eax, 00019D00
:00445F55 8945EC                  mov dword ptr [ebp-14], eax
:00445F58 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00445F5E C1E20C                  shl edx, 0C
:00445F61 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445F62 6A04                    push 00000004
:00445F64 6A00                    push 00000000
:00445F66 6A00                    push 00000000
:00445F68 B9F0174B00              mov ecx, 004B17F0
:00445F6D E81E300300              call 00478F90
:00445F72 50                      push eax
:00445F73 8B45EC                  mov eax, dword ptr [ebp-14]
:00445F76 50                      push eax
:00445F77 E844260300              call 004785C0
:00445F7C 83C40C                  add esp, 0000000C
:00445F7F E9C6000000              jmp 0044604A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445F84 6A04                    push 00000004
:00445F86 6A00                    push 00000000
:00445F88 6A00                    push 00000000
:00445F8A B9F0174B00              mov ecx, 004B17F0
:00445F8F E8FC2F0300              call 00478F90
:00445F94 05006D0100              add eax, 00016D00
:00445F99 8945EC                  mov dword ptr [ebp-14], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445F9C 6A04                    push 00000004
:00445F9E 6A00                    push 00000000
:00445FA0 6A00                    push 00000000
:00445FA2 B9F0174B00              mov ecx, 004B17F0
:00445FA7 E8E42F0300              call 00478F90
:00445FAC 50                      push eax
:00445FAD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00445FB0 51                      push ecx
:00445FB1 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00445FB7 C1E206                  shl edx, 06
:00445FBA 52                      push edx
:00445FBB 6A40                    push 00000040
:00445FBD E8ACA5FCFF              call 0041056E
:00445FC2 83C410                  add esp, 00000010
:00445FC5 E980000000              jmp 0044604A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445FCA 6A04                    push 00000004
:00445FCC 6A00                    push 00000000
:00445FCE 6A00                    push 00000000
:00445FD0 B9F0174B00              mov ecx, 004B17F0
:00445FD5 E8B62F0300              call 00478F90
:00445FDA 05006D0100              add eax, 00016D00
:00445FDF 8945EC                  mov dword ptr [ebp-14], eax
:00445FE2 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00445FE8 C1E00C                  shl eax, 0C
:00445FEB 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00445FEC 6A04                    push 00000004
:00445FEE 6A00                    push 00000000
:00445FF0 6A00                    push 00000000
:00445FF2 B9F0174B00              mov ecx, 004B17F0
:00445FF7 E8942F0300              call 00478F90
:00445FFC 50                      push eax
:00445FFD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00446000 51                      push ecx
:00446001 E8BA250300              call 004785C0
:00446006 83C40C                  add esp, 0000000C
:00446009 EB3F                    jmp 0044604A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044600B 6A04                    push 00000004
:0044600D 6A00                    push 00000000
:0044600F 6A00                    push 00000000
:00446011 B9F0174B00              mov ecx, 004B17F0
:00446016 E8752F0300              call 00478F90
:0044601B 05003D0100              add eax, 00013D00
:00446020 8945EC                  mov dword ptr [ebp-14], eax
:00446023 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00446029 C1E20C                  shl edx, 0C
:0044602C 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044602D 6A04                    push 00000004
:0044602F 6A00                    push 00000000
:00446031 6A00                    push 00000000
:00446033 B9F0174B00              mov ecx, 004B17F0
:00446038 E8532F0300              call 00478F90
:0044603D 50                      push eax
:0044603E 8B45EC                  mov eax, dword ptr [ebp-14]
:00446041 50                      push eax
:00446042 E879250300              call 004785C0
:00446047 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445F2D(C), :00445F7F(U), :00445FC5(U), :00446009(U)
|
:0044604A E94B010000              jmp 0044619A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00445EF9(C)
|
:0044604F 6A00                    push 00000000
:00446051 8A4D10                  mov cl, byte ptr [ebp+10]
:00446054 51                      push ecx
:00446055 8A550C                  mov dl, byte ptr [ebp+0C]
:00446058 52                      push edx
:00446059 8B8DB8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEB8]
:0044605F E8B8010000              call 0044621C
:00446064 8985E0FEFFFF            mov dword ptr [ebp+FFFFFEE0], eax
:0044606A 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:00446070 8985A4FEFFFF            mov dword ptr [ebp+FFFFFEA4], eax
:00446076 83BDA4FEFFFF03          cmp dword ptr [ebp+FFFFFEA4], 00000003
:0044607D 0F8717010000            ja 0044619A
:00446083 8B8DA4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA4]
:00446089 FF248D0C624400          jmp dword ptr [4*ecx+0044620C]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00446090 6A04                    push 00000004
:00446092 6A00                    push 00000000
:00446094 6A00                    push 00000000
:00446096 B9F0174B00              mov ecx, 004B17F0
:0044609B E8F02E0300              call 00478F90
:004460A0 05007D0100              add eax, 00017D00
:004460A5 8945EC                  mov dword ptr [ebp-14], eax
:004460A8 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:004460AE C1E20C                  shl edx, 0C
:004460B1 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004460B2 6A04                    push 00000004
:004460B4 6A00                    push 00000000
:004460B6 6A00                    push 00000000
:004460B8 B9F0174B00              mov ecx, 004B17F0
:004460BD E8CE2E0300              call 00478F90
:004460C2 50                      push eax
:004460C3 8B45EC                  mov eax, dword ptr [ebp-14]
:004460C6 50                      push eax
:004460C7 E8F4240300              call 004785C0
:004460CC 83C40C                  add esp, 0000000C
:004460CF E9C6000000              jmp 0044619A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004460D4 6A04                    push 00000004
:004460D6 6A00                    push 00000000
:004460D8 6A00                    push 00000000
:004460DA B9F0174B00              mov ecx, 004B17F0
:004460DF E8AC2E0300              call 00478F90
:004460E4 05005D0100              add eax, 00015D00
:004460E9 8945EC                  mov dword ptr [ebp-14], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004460EC 6A04                    push 00000004
:004460EE 6A00                    push 00000000
:004460F0 6A00                    push 00000000
:004460F2 B9F0174B00              mov ecx, 004B17F0
:004460F7 E8942E0300              call 00478F90
:004460FC 50                      push eax
:004460FD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00446100 51                      push ecx
:00446101 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00446107 C1E206                  shl edx, 06
:0044610A 52                      push edx
:0044610B 6A40                    push 00000040
:0044610D E85CA4FCFF              call 0041056E
:00446112 83C410                  add esp, 00000010
:00446115 E980000000              jmp 0044619A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044611A 6A04                    push 00000004
:0044611C 6A00                    push 00000000
:0044611E 6A00                    push 00000000
:00446120 B9F0174B00              mov ecx, 004B17F0
:00446125 E8662E0300              call 00478F90
:0044612A 05005D0100              add eax, 00015D00
:0044612F 8945EC                  mov dword ptr [ebp-14], eax
:00446132 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00446138 C1E00C                  shl eax, 0C
:0044613B 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044613C 6A04                    push 00000004
:0044613E 6A00                    push 00000000
:00446140 6A00                    push 00000000
:00446142 B9F0174B00              mov ecx, 004B17F0
:00446147 E8442E0300              call 00478F90
:0044614C 50                      push eax
:0044614D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00446150 51                      push ecx
:00446151 E86A240300              call 004785C0
:00446156 83C40C                  add esp, 0000000C
:00446159 EB3F                    jmp 0044619A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044615B 6A04                    push 00000004
:0044615D 6A00                    push 00000000
:0044615F 6A00                    push 00000000
:00446161 B9F0174B00              mov ecx, 004B17F0
:00446166 E8252E0300              call 00478F90
:0044616B 05003D0100              add eax, 00013D00
:00446170 8945EC                  mov dword ptr [ebp-14], eax
:00446173 8B95E4FEFFFF            mov edx, dword ptr [ebp+FFFFFEE4]
:00446179 C1E20C                  shl edx, 0C
:0044617C 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044617D 6A04                    push 00000004
:0044617F 6A00                    push 00000000
:00446181 6A00                    push 00000000
:00446183 B9F0174B00              mov ecx, 004B17F0
:00446188 E8032E0300              call 00478F90
:0044618D 50                      push eax
:0044618E 8B45EC                  mov eax, dword ptr [ebp-14]
:00446191 50                      push eax
:00446192 E829240300              call 004785C0
:00446197 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00445EED(U), :0044604A(U), :0044607D(C), :004460CF(U), :00446115(U)
|:00446159(U)
|
:0044619A C785BCFEFFFF01000000    mov dword ptr [ebp+FFFFFEBC], 00000001
:004461A4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004461AB 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:004461B1 E8AAF4FBFF              call 00405660
:004461B6 8B85BCFEFFFF            mov eax, dword ptr [ebp+FFFFFEBC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004459E5(U), :00445A45(U), :00445A7B(U), :00445B4E(U), :00445BAF(U)
|:00445BE5(U), :00445C18(U)
|
:004461BC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004461BF 64890D00000000          mov dword ptr fs:[00000000], ecx
:004461C6 8BE5                    mov esp, ebp
:004461C8 5D                      pop ebp
:004461C9 C21000                  ret 0010



:004461CC D45A4400                DWORD 00445AD4
:004461D0 DD5A4400                DWORD 00445ADD
:004461D4 E65A4400                DWORD 00445AE6
:004461D8 EF5A4400                DWORD 00445AEF
:004461DC 875C4400                DWORD 00445C87
:004461E0 0F5D4400                DWORD 00445D0F
:004461E4 525D4400                DWORD 00445D52
:004461E8 CB5C4400                DWORD 00445CCB
:004461EC 5E5E4400                DWORD 00445E5E
:004461F0 AC5E4400                DWORD 00445EAC
:004461F4 1A5E4400                DWORD 00445E1A
:004461F8 CB5D4400                DWORD 00445DCB
:004461FC 405F4400                DWORD 00445F40
:00446200 845F4400                DWORD 00445F84
:00446204 0B604400                DWORD 0044600B
:00446208 CA5F4400                DWORD 00445FCA
:0044620C 90604400                DWORD 00446090
:00446210 D4604400                DWORD 004460D4
:00446214 5B614400                DWORD 0044615B
:00446218 1A614400                DWORD 0044611A



* Referenced by a CALL at Addresses:
|:00445C49   , :00445F0F   , :0044605F   , :004468E7   , :0044701C   
|:004475B7   , :004477E7   , :004485FD   , :00448D02   , :0044F75B   
|:0044F772   
|
:0044621C 55                      push ebp
:0044621D 8BEC                    mov ebp, esp
:0044621F 83EC20                  sub esp, 00000020
:00446222 894DE0                  mov dword ptr [ebp-20], ecx
:00446225 8B4508                  mov eax, dword ptr [ebp+08]
:00446228 25FF000000              and eax, 000000FF
:0044622D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00446230 81E1FF000000            and ecx, 000000FF
:00446236 3BC1                    cmp eax, ecx
:00446238 7527                    jne 00446261
:0044623A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044623D 81E1FF000000            and ecx, 000000FF
:00446243 6BC924                  imul ecx, 00000024
:00446246 81C1B83B4B00            add ecx, 004B3BB8
:0044624C E8AF9BFCFF              call 0040FE00
:00446251 25FF000000              and eax, 000000FF
:00446256 8945F4                  mov dword ptr [ebp-0C], eax
:00446259 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044625C E979050000              jmp 004467DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446238(C)
|
:00446261 8B5508                  mov edx, dword ptr [ebp+08]
:00446264 81E2FF000000            and edx, 000000FF
:0044626A 81FAFF000000            cmp edx, 000000FF
:00446270 7527                    jne 00446299
:00446272 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00446275 81E1FF000000            and ecx, 000000FF
:0044627B 6BC924                  imul ecx, 00000024
:0044627E 81C1B83B4B00            add ecx, 004B3BB8
:00446284 E8779BFCFF              call 0040FE00
:00446289 25FF000000              and eax, 000000FF
:0044628E 8945F4                  mov dword ptr [ebp-0C], eax
:00446291 8B45F4                  mov eax, dword ptr [ebp-0C]
:00446294 E941050000              jmp 004467DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446270(C)
|
:00446299 8B450C                  mov eax, dword ptr [ebp+0C]
:0044629C 25FF000000              and eax, 000000FF
:004462A1 3DFF000000              cmp eax, 000000FF
:004462A6 7527                    jne 004462CF
:004462A8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004462AB 81E1FF000000            and ecx, 000000FF
:004462B1 6BC924                  imul ecx, 00000024
:004462B4 81C1B83B4B00            add ecx, 004B3BB8
:004462BA E8419BFCFF              call 0040FE00
:004462BF 25FF000000              and eax, 000000FF
:004462C4 8945F4                  mov dword ptr [ebp-0C], eax
:004462C7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004462CA E90B050000              jmp 004467DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004462A6(C)
|
:004462CF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004462D2 81E1FF000000            and ecx, 000000FF
:004462D8 6BC924                  imul ecx, 00000024
:004462DB 81C1B83B4B00            add ecx, 004B3BB8
:004462E1 E85AB9FEFF              call 00431C40
:004462E6 8A08                    mov cl, byte ptr [eax]
:004462E8 884DEC                  mov byte ptr [ebp-14], cl
:004462EB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004462EE 81E1FF000000            and ecx, 000000FF
:004462F4 6BC924                  imul ecx, 00000024
:004462F7 81C1B83B4B00            add ecx, 004B3BB8
:004462FD E83EB9FEFF              call 00431C40
:00446302 8A5001                  mov dl, byte ptr [eax+01]
:00446305 8855FC                  mov byte ptr [ebp-04], dl
:00446308 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044630B 81E1FF000000            and ecx, 000000FF
:00446311 6BC924                  imul ecx, 00000024
:00446314 81C1B83B4B00            add ecx, 004B3BB8
:0044631A E821B9FEFF              call 00431C40
:0044631F 8A00                    mov al, byte ptr [eax]
:00446321 8845E8                  mov byte ptr [ebp-18], al
:00446324 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00446327 81E1FF000000            and ecx, 000000FF
:0044632D 6BC924                  imul ecx, 00000024
:00446330 81C1B83B4B00            add ecx, 004B3BB8
:00446336 E805B9FEFF              call 00431C40
:0044633B 8A4801                  mov cl, byte ptr [eax+01]
:0044633E 884DE4                  mov byte ptr [ebp-1C], cl
:00446341 8B55FC                  mov edx, dword ptr [ebp-04]
:00446344 81E2FF000000            and edx, 000000FF
:0044634A 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044634D 25FF000000              and eax, 000000FF
:00446352 3BD0                    cmp edx, eax
:00446354 0F8EEB010000            jle 00446545
:0044635A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044635D 81E1FF000000            and ecx, 000000FF
:00446363 8B55E4                  mov edx, dword ptr [ebp-1C]
:00446366 81E2FF000000            and edx, 000000FF
:0044636C 2BCA                    sub ecx, edx
:0044636E 884DF0                  mov byte ptr [ebp-10], cl
:00446371 8B45EC                  mov eax, dword ptr [ebp-14]
:00446374 25FF000000              and eax, 000000FF
:00446379 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044637C 81E1FF000000            and ecx, 000000FF
:00446382 3BC1                    cmp eax, ecx
:00446384 753E                    jne 004463C4
:00446386 C745F400000000          mov [ebp-0C], 00000000
:0044638D 6A00                    push 00000000
:0044638F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446392 81E1FF000000            and ecx, 000000FF
:00446398 6BC924                  imul ecx, 00000024
:0044639B 81C1B83B4B00            add ecx, 004B3BB8
:004463A1 E89A7BFEFF              call 0042DF40

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004463A6 6A02                    push 00000002
:004463A8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004463AB 81E1FF000000            and ecx, 000000FF
:004463B1 6BC924                  imul ecx, 00000024
:004463B4 81C1B83B4B00            add ecx, 004B3BB8
:004463BA E8817BFEFF              call 0042DF40
:004463BF E97C010000              jmp 00446540

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446384(C)
|
:004463C4 8B55EC                  mov edx, dword ptr [ebp-14]
:004463C7 81E2FF000000            and edx, 000000FF
:004463CD 8B45E8                  mov eax, dword ptr [ebp-18]
:004463D0 25FF000000              and eax, 000000FF
:004463D5 3BD0                    cmp edx, eax
:004463D7 0F8EB4000000            jle 00446491
:004463DD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004463E0 81E1FF000000            and ecx, 000000FF
:004463E6 8B55E8                  mov edx, dword ptr [ebp-18]
:004463E9 81E2FF000000            and edx, 000000FF
:004463EF 2BCA                    sub ecx, edx
:004463F1 884DF8                  mov byte ptr [ebp-08], cl
:004463F4 8B45F0                  mov eax, dword ptr [ebp-10]
:004463F7 25FF000000              and eax, 000000FF
:004463FC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004463FF 81E1FF000000            and ecx, 000000FF
:00446405 3BC1                    cmp eax, ecx
:00446407 7E41                    jle 0044644A
:00446409 8B5510                  mov edx, dword ptr [ebp+10]
:0044640C F7DA                    neg edx
:0044640E 1BD2                    sbb edx, edx
:00446410 83E207                  and edx, 00000007
:00446413 8955F4                  mov dword ptr [ebp-0C], edx
:00446416 6A00                    push 00000000
:00446418 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044641B 81E1FF000000            and ecx, 000000FF
:00446421 6BC924                  imul ecx, 00000024
:00446424 81C1B83B4B00            add ecx, 004B3BB8
:0044642A E8117BFEFF              call 0042DF40

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044642F 6A02                    push 00000002
:00446431 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00446434 81E1FF000000            and ecx, 000000FF
:0044643A 6BC924                  imul ecx, 00000024
:0044643D 81C1B83B4B00            add ecx, 004B3BB8
:00446443 E8F87AFEFF              call 0042DF40
:00446448 EB42                    jmp 0044648C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446407(C)
|
:0044644A 8B4510                  mov eax, dword ptr [ebp+10]
:0044644D F7D8                    neg eax
:0044644F 1BC0                    sbb eax, eax
:00446451 83E004                  and eax, 00000004
:00446454 83C003                  add eax, 00000003
:00446457 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044645A 6A03                    push 00000003
:0044645C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044645F 81E1FF000000            and ecx, 000000FF
:00446465 6BC924                  imul ecx, 00000024
:00446468 81C1B83B4B00            add ecx, 004B3BB8
:0044646E E8CD7AFEFF              call 0042DF40
:00446473 6A01                    push 00000001
:00446475 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00446478 81E1FF000000            and ecx, 000000FF
:0044647E 6BC924                  imul ecx, 00000024
:00446481 81C1B83B4B00            add ecx, 004B3BB8
:00446487 E8B47AFEFF              call 0042DF40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446448(U)
|
:0044648C E9AF000000              jmp 00446540

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004463D7(C)
|
:00446491 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00446494 81E1FF000000            and ecx, 000000FF
:0044649A 8B55EC                  mov edx, dword ptr [ebp-14]
:0044649D 81E2FF000000            and edx, 000000FF
:004464A3 2BCA                    sub ecx, edx
:004464A5 884DF8                  mov byte ptr [ebp-08], cl
:004464A8 8B45F0                  mov eax, dword ptr [ebp-10]
:004464AB 25FF000000              and eax, 000000FF
:004464B0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004464B3 81E1FF000000            and ecx, 000000FF
:004464B9 3BC1                    cmp eax, ecx
:004464BB 7E41                    jle 004464FE
:004464BD 8B5510                  mov edx, dword ptr [ebp+10]
:004464C0 F7DA                    neg edx
:004464C2 1BD2                    sbb edx, edx
:004464C4 83E204                  and edx, 00000004
:004464C7 8955F4                  mov dword ptr [ebp-0C], edx
:004464CA 6A00                    push 00000000
:004464CC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004464CF 81E1FF000000            and ecx, 000000FF
:004464D5 6BC924                  imul ecx, 00000024
:004464D8 81C1B83B4B00            add ecx, 004B3BB8
:004464DE E85D7AFEFF              call 0042DF40

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004464E3 6A02                    push 00000002
:004464E5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004464E8 81E1FF000000            and ecx, 000000FF
:004464EE 6BC924                  imul ecx, 00000024
:004464F1 81C1B83B4B00            add ecx, 004B3BB8
:004464F7 E8447AFEFF              call 0042DF40
:004464FC EB42                    jmp 00446540

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004464BB(C)
|
:004464FE 8B4510                  mov eax, dword ptr [ebp+10]
:00446501 F7D8                    neg eax
:00446503 1BC0                    sbb eax, eax
:00446505 83E003                  and eax, 00000003
:00446508 83C001                  add eax, 00000001
:0044650B 8945F4                  mov dword ptr [ebp-0C], eax
:0044650E 6A01                    push 00000001
:00446510 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446513 81E1FF000000            and ecx, 000000FF
:00446519 6BC924                  imul ecx, 00000024
:0044651C 81C1B83B4B00            add ecx, 004B3BB8
:00446522 E8197AFEFF              call 0042DF40

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00446527 6A03                    push 00000003
:00446529 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044652C 81E1FF000000            and ecx, 000000FF
:00446532 6BC924                  imul ecx, 00000024
:00446535 81C1B83B4B00            add ecx, 004B3BB8
:0044653B E8007AFEFF              call 0042DF40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004463BF(U), :0044648C(U), :004464FC(U)
|
:00446540 E992020000              jmp 004467D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446354(C)
|
:00446545 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446548 81E1FF000000            and ecx, 000000FF
:0044654E 8B55E4                  mov edx, dword ptr [ebp-1C]
:00446551 81E2FF000000            and edx, 000000FF
:00446557 3BCA                    cmp ecx, edx
:00446559 0F8DEF010000            jnl 0044674E
:0044655F 8B45E4                  mov eax, dword ptr [ebp-1C]
:00446562 25FF000000              and eax, 000000FF
:00446567 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044656A 81E1FF000000            and ecx, 000000FF
:00446570 2BC1                    sub eax, ecx
:00446572 8845F0                  mov byte ptr [ebp-10], al
:00446575 8B55EC                  mov edx, dword ptr [ebp-14]
:00446578 81E2FF000000            and edx, 000000FF
:0044657E 8B45E8                  mov eax, dword ptr [ebp-18]
:00446581 25FF000000              and eax, 000000FF
:00446586 3BD0                    cmp edx, eax
:00446588 753E                    jne 004465C8

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044658A C745F402000000          mov [ebp-0C], 00000002

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00446591 6A02                    push 00000002
:00446593 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446596 81E1FF000000            and ecx, 000000FF
:0044659C 6BC924                  imul ecx, 00000024
:0044659F 81C1B83B4B00            add ecx, 004B3BB8
:004465A5 E89679FEFF              call 0042DF40
:004465AA 6A00                    push 00000000
:004465AC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004465AF 81E1FF000000            and ecx, 000000FF
:004465B5 6BC924                  imul ecx, 00000024
:004465B8 81C1B83B4B00            add ecx, 004B3BB8
:004465BE E87D79FEFF              call 0042DF40
:004465C3 E981010000              jmp 00446749

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446588(C)
|
:004465C8 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004465CB 81E1FF000000            and ecx, 000000FF
:004465D1 8B55E8                  mov edx, dword ptr [ebp-18]
:004465D4 81E2FF000000            and edx, 000000FF
:004465DA 3BCA                    cmp ecx, edx
:004465DC 0F8EB6000000            jle 00446698
:004465E2 8B45EC                  mov eax, dword ptr [ebp-14]
:004465E5 25FF000000              and eax, 000000FF
:004465EA 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004465ED 81E1FF000000            and ecx, 000000FF
:004465F3 2BC1                    sub eax, ecx
:004465F5 8845F8                  mov byte ptr [ebp-08], al
:004465F8 8B55F0                  mov edx, dword ptr [ebp-10]
:004465FB 81E2FF000000            and edx, 000000FF
:00446601 8B45F8                  mov eax, dword ptr [ebp-08]
:00446604 25FF000000              and eax, 000000FF
:00446609 3BD0                    cmp edx, eax
:0044660B 7E44                    jle 00446651
:0044660D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00446610 F7D9                    neg ecx
:00446612 1BC9                    sbb ecx, ecx
:00446614 83E104                  and ecx, 00000004
:00446617 83C102                  add ecx, 00000002
:0044661A 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044661D 6A02                    push 00000002
:0044661F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446622 81E1FF000000            and ecx, 000000FF
:00446628 6BC924                  imul ecx, 00000024
:0044662B 81C1B83B4B00            add ecx, 004B3BB8
:00446631 E80A79FEFF              call 0042DF40
:00446636 6A00                    push 00000000
:00446638 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044663B 81E1FF000000            and ecx, 000000FF
:00446641 6BC924                  imul ecx, 00000024
:00446644 81C1B83B4B00            add ecx, 004B3BB8
:0044664A E8F178FEFF              call 0042DF40
:0044664F EB42                    jmp 00446693

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044660B(C)
|
:00446651 8B5510                  mov edx, dword ptr [ebp+10]
:00446654 F7DA                    neg edx
:00446656 1BD2                    sbb edx, edx
:00446658 83E203                  and edx, 00000003
:0044665B 83C203                  add edx, 00000003
:0044665E 8955F4                  mov dword ptr [ebp-0C], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00446661 6A03                    push 00000003
:00446663 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446666 81E1FF000000            and ecx, 000000FF
:0044666C 6BC924                  imul ecx, 00000024
:0044666F 81C1B83B4B00            add ecx, 004B3BB8
:00446675 E8C678FEFF              call 0042DF40
:0044667A 6A01                    push 00000001
:0044667C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044667F 81E1FF000000            and ecx, 000000FF
:00446685 6BC924                  imul ecx, 00000024
:00446688 81C1B83B4B00            add ecx, 004B3BB8
:0044668E E8AD78FEFF              call 0042DF40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044664F(U)
|
:00446693 E9B1000000              jmp 00446749

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004465DC(C)
|
:00446698 8B45E8                  mov eax, dword ptr [ebp-18]
:0044669B 25FF000000              and eax, 000000FF
:004466A0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004466A3 81E1FF000000            and ecx, 000000FF
:004466A9 2BC1                    sub eax, ecx
:004466AB 8845F8                  mov byte ptr [ebp-08], al
:004466AE 8B55F0                  mov edx, dword ptr [ebp-10]
:004466B1 81E2FF000000            and edx, 000000FF
:004466B7 8B45F8                  mov eax, dword ptr [ebp-08]
:004466BA 25FF000000              and eax, 000000FF
:004466BF 3BD0                    cmp edx, eax
:004466C1 7E44                    jle 00446707
:004466C3 8B4D10                  mov ecx, dword ptr [ebp+10]
:004466C6 F7D9                    neg ecx
:004466C8 1BC9                    sbb ecx, ecx
:004466CA 83E103                  and ecx, 00000003
:004466CD 83C102                  add ecx, 00000002
:004466D0 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004466D3 6A02                    push 00000002
:004466D5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004466D8 81E1FF000000            and ecx, 000000FF
:004466DE 6BC924                  imul ecx, 00000024
:004466E1 81C1B83B4B00            add ecx, 004B3BB8
:004466E7 E85478FEFF              call 0042DF40
:004466EC 6A00                    push 00000000
:004466EE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004466F1 81E1FF000000            and ecx, 000000FF
:004466F7 6BC924                  imul ecx, 00000024
:004466FA 81C1B83B4B00            add ecx, 004B3BB8
:00446700 E83B78FEFF              call 0042DF40
:00446705 EB42                    jmp 00446749

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004466C1(C)
|
:00446707 8B5510                  mov edx, dword ptr [ebp+10]
:0044670A F7DA                    neg edx
:0044670C 1BD2                    sbb edx, edx
:0044670E 83E204                  and edx, 00000004
:00446711 83C201                  add edx, 00000001
:00446714 8955F4                  mov dword ptr [ebp-0C], edx
:00446717 6A01                    push 00000001
:00446719 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044671C 81E1FF000000            and ecx, 000000FF
:00446722 6BC924                  imul ecx, 00000024
:00446725 81C1B83B4B00            add ecx, 004B3BB8
:0044672B E81078FEFF              call 0042DF40

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00446730 6A03                    push 00000003
:00446732 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00446735 81E1FF000000            and ecx, 000000FF
:0044673B 6BC924                  imul ecx, 00000024
:0044673E 81C1B83B4B00            add ecx, 004B3BB8
:00446744 E8F777FEFF              call 0042DF40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004465C3(U), :00446693(U), :00446705(U)
|
:00446749 E989000000              jmp 004467D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446559(C)
|
:0044674E 8B45EC                  mov eax, dword ptr [ebp-14]
:00446751 25FF000000              and eax, 000000FF
:00446756 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00446759 81E1FF000000            and ecx, 000000FF
:0044675F 3BC1                    cmp eax, ecx
:00446761 7E3B                    jle 0044679E

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00446763 C745F403000000          mov [ebp-0C], 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044676A 6A03                    push 00000003
:0044676C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044676F 81E1FF000000            and ecx, 000000FF
:00446775 6BC924                  imul ecx, 00000024
:00446778 81C1B83B4B00            add ecx, 004B3BB8
:0044677E E8BD77FEFF              call 0042DF40
:00446783 6A01                    push 00000001
:00446785 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00446788 81E1FF000000            and ecx, 000000FF
:0044678E 6BC924                  imul ecx, 00000024
:00446791 81C1B83B4B00            add ecx, 004B3BB8
:00446797 E8A477FEFF              call 0042DF40
:0044679C EB39                    jmp 004467D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446761(C)
|
:0044679E C745F401000000          mov [ebp-0C], 00000001
:004467A5 6A01                    push 00000001
:004467A7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004467AA 81E1FF000000            and ecx, 000000FF
:004467B0 6BC924                  imul ecx, 00000024
:004467B3 81C1B83B4B00            add ecx, 004B3BB8
:004467B9 E88277FEFF              call 0042DF40

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004467BE 6A03                    push 00000003
:004467C0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004467C3 81E1FF000000            and ecx, 000000FF
:004467C9 6BC924                  imul ecx, 00000024
:004467CC 81C1B83B4B00            add ecx, 004B3BB8
:004467D2 E86977FEFF              call 0042DF40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446540(U), :00446749(U), :0044679C(U)
|
:004467D7 8B45F4                  mov eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044625C(U), :00446294(U), :004462CA(U)
|
:004467DA 8BE5                    mov esp, ebp
:004467DC 5D                      pop ebp
:004467DD C20C00                  ret 000C



* Referenced by a CALL at Address:
|:00444DB7   
|
:004467E0 55                      push ebp
:004467E1 8BEC                    mov ebp, esp
:004467E3 6AFF                    push FFFFFFFF
:004467E5 68F8984700              push 004798F8
:004467EA 64A100000000            mov eax, dword ptr fs:[00000000]
:004467F0 50                      push eax
:004467F1 64892500000000          mov dword ptr fs:[00000000], esp
:004467F8 81EC30010000            sub esp, 00000130
:004467FE 898DC8FEFFFF            mov dword ptr [ebp+FFFFFEC8], ecx
:00446804 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0044680A E831EEFBFF              call 00405640
:0044680F C745FC00000000          mov [ebp-04], 00000000
:00446816 8B4510                  mov eax, dword ptr [ebp+10]
:00446819 25FF000000              and eax, 000000FF
:0044681E 8985C4FEFFFF            mov dword ptr [ebp+FFFFFEC4], eax
:00446824 8B8DC4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC4]
:0044682A 83E920                  sub ecx, 00000020
:0044682D 898DC4FEFFFF            mov dword ptr [ebp+FFFFFEC4], ecx
:00446833 83BDC4FEFFFF1C          cmp dword ptr [ebp+FFFFFEC4], 0000001C
:0044683A 773C                    ja 00446878
:0044683C 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:00446842 33D2                    xor edx, edx
:00446844 8A90C76A4400            mov dl, byte ptr [eax+00446AC7]
:0044684A FF2495AF6A4400          jmp dword ptr [4*edx+00446AAF]
:00446851 C685ECFEFFFF0C          mov byte ptr [ebp+FFFFFEEC], 0C
:00446858 EB45                    jmp 0044689F
:0044685A C685ECFEFFFF11          mov byte ptr [ebp+FFFFFEEC], 11
:00446861 EB3C                    jmp 0044689F
:00446863 8B4D14                  mov ecx, dword ptr [ebp+14]
:00446866 F7D9                    neg ecx
:00446868 1BC9                    sbb ecx, ecx
:0044686A 83E113                  and ecx, 00000013
:0044686D 83C1FF                  add ecx, FFFFFFFF
:00446870 888DECFEFFFF            mov byte ptr [ebp+FFFFFEEC], cl
:00446876 EB27                    jmp 0044689F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044683A(C)
|
:00446878 C785E4FEFFFF01000000    mov dword ptr [ebp+FFFFFEE4], 00000001
:00446882 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446889 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0044688F E8CCEDFBFF              call 00405660
:00446894 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0044689A E900020000              jmp 00446A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446858(U), :00446861(U), :00446876(U)
|
:0044689F 8B95ECFEFFFF            mov edx, dword ptr [ebp+FFFFFEEC]
:004468A5 81E2FF000000            and edx, 000000FF
:004468AB 83FAFF                  cmp edx, FFFFFFFF
:004468AE 7527                    jne 004468D7
:004468B0 C785E0FEFFFF01000000    mov dword ptr [ebp+FFFFFEE0], 00000001
:004468BA C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004468C1 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004468C7 E894EDFBFF              call 00405660
:004468CC 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:004468D2 E9C8010000              jmp 00446A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004468AE(C)
|
:004468D7 6A00                    push 00000000
:004468D9 8A450C                  mov al, byte ptr [ebp+0C]
:004468DC 50                      push eax
:004468DD 8A4D08                  mov cl, byte ptr [ebp+08]
:004468E0 51                      push ecx
:004468E1 8B8DC8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC8]
:004468E7 E830F9FFFF              call 0044621C
:004468EC 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:004468F2 8B5510                  mov edx, dword ptr [ebp+10]
:004468F5 81E2FF000000            and edx, 000000FF
:004468FB 83FA2C                  cmp edx, 0000002C
:004468FE 7411                    je 00446911
:00446900 8B4510                  mov eax, dword ptr [ebp+10]
:00446903 25FF000000              and eax, 000000FF
:00446908 83F83C                  cmp eax, 0000003C
:0044690B 0F851D010000            jne 00446A2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004468FE(C)
|
:00446911 83BDE8FEFFFF01          cmp dword ptr [ebp+FFFFFEE8], 00000001
:00446918 740D                    je 00446927
:0044691A 83BDE8FEFFFF00          cmp dword ptr [ebp+FFFFFEE8], 00000000
:00446921 0F8507010000            jne 00446A2E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446918(C)
|

* Possible StringData Ref from Data Obj ->"SEFF.E3"
                                  |
:00446927 6840D54700              push 0047D540
:0044692C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446932 E89EA8FCFF              call 004111D5
:00446937 85C0                    test eax, eax
:00446939 7527                    jne 00446962
:0044693B C785DCFEFFFF00000000    mov dword ptr [ebp+FFFFFEDC], 00000000
:00446945 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0044694C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446952 E809EDFBFF              call 00405660
:00446957 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:0044695D E93D010000              jmp 00446A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446939(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00446962 6A04                    push 00000004
:00446964 6A00                    push 00000000
:00446966 6A00                    push 00000000
:00446968 B9F0174B00              mov ecx, 004B17F0
:0044696D E81E260300              call 00478F90
:00446972 05003D0100              add eax, 00013D00
:00446977 50                      push eax
:00446978 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0044697E 81E1FF000000            and ecx, 000000FF
:00446984 51                      push ecx
:00446985 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0044698B E899A9FCFF              call 00411329
:00446990 85C0                    test eax, eax
:00446992 7527                    jne 004469BB
:00446994 C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:0044699E C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004469A5 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004469AB E8B0ECFBFF              call 00405660
:004469B0 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:004469B6 E9E4000000              jmp 00446A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446992(C)
|
:004469BB 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004469C1 E85F72FCFF              call 0040DC25
:004469C6 85C0                    test eax, eax
:004469C8 7527                    jne 004469F1
:004469CA C785D4FEFFFF00000000    mov dword ptr [ebp+FFFFFED4], 00000000
:004469D4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004469DB 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004469E1 E87AECFBFF              call 00405660
:004469E6 8B85D4FEFFFF            mov eax, dword ptr [ebp+FFFFFED4]
:004469EC E9AE000000              jmp 00446A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004469C8(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004469F1 6A04                    push 00000004
:004469F3 6A00                    push 00000000
:004469F5 6A00                    push 00000000
:004469F7 B9F0174B00              mov ecx, 004B17F0
:004469FC E88F250300              call 00478F90
:00446A01 0500CC0000              add eax, 0000CC00
:00446A06 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00446A07 6A04                    push 00000004
:00446A09 6A00                    push 00000000
:00446A0B 6A00                    push 00000000
:00446A0D B9F0174B00              mov ecx, 004B17F0
:00446A12 E879250300              call 00478F90
:00446A17 05003D0100              add eax, 00013D00
:00446A1C 50                      push eax
:00446A1D 6890000000              push 00000090
:00446A22 6A30                    push 00000030
:00446A24 E8459BFCFF              call 0041056E
:00446A29 83C410                  add esp, 00000010
:00446A2C EB3C                    jmp 00446A6A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044690B(C), :00446921(C)
|
:00446A2E 6A00                    push 00000000
:00446A30 8A95ECFEFFFF            mov dl, byte ptr [ebp+FFFFFEEC]
:00446A36 52                      push edx
:00446A37 8B8DC8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEC8]
:00446A3D E8A2000000              call 00446AE4
:00446A42 85C0                    test eax, eax
:00446A44 7524                    jne 00446A6A
:00446A46 C785D0FEFFFF00000000    mov dword ptr [ebp+FFFFFED0], 00000000
:00446A50 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446A57 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446A5D E8FEEBFBFF              call 00405660
:00446A62 8B85D0FEFFFF            mov eax, dword ptr [ebp+FFFFFED0]
:00446A68 EB35                    jmp 00446A9F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446A2C(U), :00446A44(C)
|
:00446A6A 8B85C8FEFFFF            mov eax, dword ptr [ebp+FFFFFEC8]
:00446A70 8B08                    mov ecx, dword ptr [eax]
:00446A72 83C908                  or ecx, 00000008
:00446A75 8B95C8FEFFFF            mov edx, dword ptr [ebp+FFFFFEC8]
:00446A7B 890A                    mov dword ptr [edx], ecx
:00446A7D C785CCFEFFFF01000000    mov dword ptr [ebp+FFFFFECC], 00000001
:00446A87 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446A8E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446A94 E8C7EBFBFF              call 00405660
:00446A99 8B85CCFEFFFF            mov eax, dword ptr [ebp+FFFFFECC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044689A(U), :004468D2(U), :0044695D(U), :004469B6(U), :004469EC(U)
|:00446A68(U)
|
:00446A9F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00446AA2 64890D00000000          mov dword ptr fs:[00000000], ecx
:00446AA9 8BE5                    mov esp, ebp
:00446AAB 5D                      pop ebp
:00446AAC C21000                  ret 0010



:00446AAF 51684400                DWORD 00446851
:00446AB3 5A684400                DWORD 0044685A
:00446AB7 51684400                DWORD 00446851
:00446ABB 51684400                DWORD 00446851
:00446ABF 63684400                DWORD 00446863
:00446AC3 78684400                DWORD 00446878


:00446AC7 000505050505            add byte ptr [05050505], al
:00446ACD 0505050505              add eax, 05050505
:00446AD2 0501050505              add eax, 05050501
:00446AD7 0202                    add al, byte ptr [edx]
:00446AD9 020505050505            add al, byte ptr [05050505]
:00446ADF 0505030504              add eax, 04050305

* Referenced by a CALL at Addresses:
|:00444C8B   , :00444CF9   , :00446A3D   , :00447928   , :00447F2C   
|:00449A45   
|
:00446AE4 55                      push ebp
:00446AE5 8BEC                    mov ebp, esp
:00446AE7 6AFF                    push FFFFFFFF
:00446AE9 680E994700              push 0047990E
:00446AEE 64A100000000            mov eax, dword ptr fs:[00000000]
:00446AF4 50                      push eax
:00446AF5 64892500000000          mov dword ptr fs:[00000000], esp
:00446AFC 81EC1C010000            sub esp, 0000011C
:00446B02 898DD8FEFFFF            mov dword ptr [ebp+FFFFFED8], ecx
:00446B08 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446B0E E82DEBFBFF              call 00405640
:00446B13 C745FC00000000          mov [ebp-04], 00000000
:00446B1A 8B450C                  mov eax, dword ptr [ebp+0C]
:00446B1D 25FF000000              and eax, 000000FF
:00446B22 83F805                  cmp eax, 00000005
:00446B25 741D                    je 00446B44
:00446B27 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00446B2A 81E1FF000000            and ecx, 000000FF
:00446B30 69C9001B0000            imul ecx, 00001B00
:00446B36 81C100CC0000            add ecx, 0000CC00
:00446B3C 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:00446B42 EB0A                    jmp 00446B4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446B25(C)
|
:00446B44 C785ECFEFFFF007B0100    mov dword ptr [ebp+FFFFFEEC], 00017B00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446B42(U)
|

* Possible StringData Ref from Data Obj ->"SEFF.E3"
                                  |
:00446B4E 6840D54700              push 0047D540
:00446B53 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446B59 E877A6FCFF              call 004111D5
:00446B5E 85C0                    test eax, eax
:00446B60 7527                    jne 00446B89
:00446B62 C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:00446B6C C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446B73 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446B79 E8E2EAFBFF              call 00405660
:00446B7E 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:00446B84 E9A9000000              jmp 00446C32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446B60(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00446B89 6A04                    push 00000004
:00446B8B 6A00                    push 00000000
:00446B8D 6A00                    push 00000000
:00446B8F B9F0174B00              mov ecx, 004B17F0
:00446B94 E8F7230300              call 00478F90
:00446B99 0385ECFEFFFF            add eax, dword ptr [ebp+FFFFFEEC]
:00446B9F 50                      push eax
:00446BA0 8B5508                  mov edx, dword ptr [ebp+08]
:00446BA3 81E2FF000000            and edx, 000000FF
:00446BA9 52                      push edx
:00446BAA 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446BB0 E874A7FCFF              call 00411329
:00446BB5 85C0                    test eax, eax
:00446BB7 7524                    jne 00446BDD
:00446BB9 C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:00446BC3 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446BCA 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446BD0 E88BEAFBFF              call 00405660
:00446BD5 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00446BDB EB55                    jmp 00446C32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446BB7(C)
|
:00446BDD 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446BE3 E83D70FCFF              call 0040DC25
:00446BE8 85C0                    test eax, eax
:00446BEA 7524                    jne 00446C10
:00446BEC C785E0FEFFFF00000000    mov dword ptr [ebp+FFFFFEE0], 00000000
:00446BF6 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446BFD 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446C03 E858EAFBFF              call 00405660
:00446C08 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:00446C0E EB22                    jmp 00446C32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446BEA(C)
|
:00446C10 C785DCFEFFFF01000000    mov dword ptr [ebp+FFFFFEDC], 00000001
:00446C1A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446C21 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00446C27 E834EAFBFF              call 00405660
:00446C2C 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446B84(U), :00446BDB(U), :00446C0E(U)
|
:00446C32 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00446C35 64890D00000000          mov dword ptr fs:[00000000], ecx
:00446C3C 8BE5                    mov esp, ebp
:00446C3E 5D                      pop ebp
:00446C3F C20800                  ret 0008



* Referenced by a CALL at Address:
|:00444DD2   
|
:00446C42 55                      push ebp
:00446C43 8BEC                    mov ebp, esp
:00446C45 51                      push ecx
:00446C46 894DFC                  mov dword ptr [ebp-04], ecx
:00446C49 8B450C                  mov eax, dword ptr [ebp+0C]
:00446C4C 25FF000000              and eax, 000000FF
:00446C51 83F817                  cmp eax, 00000017
:00446C54 750F                    jne 00446C65
:00446C56 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446C59 8B11                    mov edx, dword ptr [ecx]
:00446C5B 83CA10                  or edx, 00000010
:00446C5E 8B45FC                  mov eax, dword ptr [ebp-04]
:00446C61 8910                    mov dword ptr [eax], edx
:00446C63 EB1A                    jmp 00446C7F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446C54(C)
|
:00446C65 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00446C68 81E1FF000000            and ecx, 000000FF
:00446C6E 83F918                  cmp ecx, 00000018
:00446C71 750C                    jne 00446C7F
:00446C73 8B55FC                  mov edx, dword ptr [ebp-04]
:00446C76 8B02                    mov eax, dword ptr [edx]
:00446C78 0C10                    or al, 10
:00446C7A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00446C7D 8901                    mov dword ptr [ecx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446C63(U), :00446C71(C)
|
:00446C7F 8BE5                    mov esp, ebp
:00446C81 5D                      pop ebp
:00446C82 C20800                  ret 0008



* Referenced by a CALL at Address:
|:00444DEA   
|
:00446C85 55                      push ebp
:00446C86 8BEC                    mov ebp, esp
:00446C88 83EC0C                  sub esp, 0000000C
:00446C8B 894DF8                  mov dword ptr [ebp-08], ecx
:00446C8E 8B4510                  mov eax, dword ptr [ebp+10]
:00446C91 25FF000000              and eax, 000000FF
:00446C96 8945F4                  mov dword ptr [ebp-0C], eax
:00446C99 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00446C9C 83E903                  sub ecx, 00000003
:00446C9F 894DF4                  mov dword ptr [ebp-0C], ecx
:00446CA2 837DF438                cmp dword ptr [ebp-0C], 00000038
:00446CA6 7772                    ja 00446D1A
:00446CA8 8B45F4                  mov eax, dword ptr [ebp-0C]
:00446CAB 33D2                    xor edx, edx
:00446CAD 8A90966D4400            mov dl, byte ptr [eax+00446D96]
:00446CB3 FF2495666D4400          jmp dword ptr [4*edx+00446D66]
:00446CBA 8B4D14                  mov ecx, dword ptr [ebp+14]
:00446CBD F7D9                    neg ecx
:00446CBF 1BC9                    sbb ecx, ecx
:00446CC1 83C10F                  add ecx, 0000000F
:00446CC4 894DFC                  mov dword ptr [ebp-04], ecx
:00446CC7 EB58                    jmp 00446D21
:00446CC9 8B5514                  mov edx, dword ptr [ebp+14]
:00446CCC F7DA                    neg edx
:00446CCE 1BD2                    sbb edx, edx
:00446CD0 83E205                  and edx, 00000005
:00446CD3 83C2FF                  add edx, FFFFFFFF
:00446CD6 8955FC                  mov dword ptr [ebp-04], edx
:00446CD9 EB46                    jmp 00446D21

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00446CDB C745FC09000000          mov [ebp-04], 00000009
:00446CE2 EB3D                    jmp 00446D21
:00446CE4 C745FC0B000000          mov [ebp-04], 0000000B
:00446CEB EB34                    jmp 00446D21

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00446CED C745FC03000000          mov [ebp-04], 00000003
:00446CF4 EB2B                    jmp 00446D21

* Possible Reference to String Resource ID=00006: ""
                                  |
:00446CF6 C745FC06000000          mov [ebp-04], 00000006
:00446CFD EB22                    jmp 00446D21
:00446CFF C745FC00000000          mov [ebp-04], 00000000
:00446D06 EB19                    jmp 00446D21
:00446D08 C745FC0C000000          mov [ebp-04], 0000000C
:00446D0F EB10                    jmp 00446D21
:00446D11 C745FC0F000000          mov [ebp-04], 0000000F
:00446D18 EB07                    jmp 00446D21

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446CA6(C)
|
:00446D1A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446CC7(U), :00446CD9(U), :00446CE2(U), :00446CEB(U), :00446CF4(U)
|:00446CFD(U), :00446D06(U), :00446D0F(U), :00446D18(U)
|
:00446D21 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00446D25 7507                    jne 00446D2E
:00446D27 B801000000              mov eax, 00000001
:00446D2C EB32                    jmp 00446D60

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446D25(C)
|
:00446D2E 8A4510                  mov al, byte ptr [ebp+10]
:00446D31 50                      push eax
:00446D32 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00446D35 51                      push ecx
:00446D36 8A5508                  mov dl, byte ptr [ebp+08]
:00446D39 52                      push edx
:00446D3A 8A45FC                  mov al, byte ptr [ebp-04]
:00446D3D 50                      push eax
:00446D3E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446D41 E889000000              call 00446DCF
:00446D46 85C0                    test eax, eax
:00446D48 7504                    jne 00446D4E
:00446D4A 33C0                    xor eax, eax
:00446D4C EB12                    jmp 00446D60

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446D48(C)
|
:00446D4E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00446D51 8B11                    mov edx, dword ptr [ecx]
:00446D53 83CA20                  or edx, 00000020
:00446D56 8B45F8                  mov eax, dword ptr [ebp-08]
:00446D59 8910                    mov dword ptr [eax], edx
:00446D5B B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446D2C(U), :00446D4C(U)
|
:00446D60 8BE5                    mov esp, ebp
:00446D62 5D                      pop ebp
:00446D63 C21000                  ret 0010



:00446D66 DB6C4400                DWORD 00446CDB
:00446D6A E46C4400                DWORD 00446CE4
:00446D6E ED6C4400                DWORD 00446CED
:00446D72 F66C4400                DWORD 00446CF6
:00446D76 DB6C4400                DWORD 00446CDB
:00446D7A DB6C4400                DWORD 00446CDB
:00446D7E C96C4400                DWORD 00446CC9
:00446D82 086D4400                DWORD 00446D08
:00446D86 116D4400                DWORD 00446D11
:00446D8A FF6C4400                DWORD 00446CFF
:00446D8E BA6C4400                DWORD 00446CBA
:00446D92 1A6D4400                DWORD 00446D1A


:00446D96 000B                    add byte ptr [ebx], cl
:00446D98 0B0B                    or ecx, dword ptr [ebx]
:00446D9A 0102                    add dword ptr [edx], eax
:00446D9C 03040B                  add eax, dword ptr [ebx+ecx]
:00446D9F 050B060B0B              add eax, 0B0B060B
:00446DA4 0B0B                    or ecx, dword ptr [ebx]
:00446DA6 0B0B                    or ecx, dword ptr [ebx]
:00446DA8 0B0B                    or ecx, dword ptr [ebx]
:00446DAA 07                      pop es
:00446DAB 080B                    or byte ptr [ebx], cl
:00446DAD 0B0B                    or ecx, dword ptr [ebx]
:00446DAF 090B                    or dword ptr [ebx], ecx
:00446DB1 0B0B                    or ecx, dword ptr [ebx]
:00446DB3 0B0B                    or ecx, dword ptr [ebx]
:00446DB5 0B0B                    or ecx, dword ptr [ebx]
:00446DB7 0B0B                    or ecx, dword ptr [ebx]
:00446DB9 0B0B                    or ecx, dword ptr [ebx]
:00446DBB 0B0B                    or ecx, dword ptr [ebx]
:00446DBD 0B0B                    or ecx, dword ptr [ebx]
:00446DBF 0B0B                    or ecx, dword ptr [ebx]
:00446DC1 0B0B                    or ecx, dword ptr [ebx]
:00446DC3 0B0B                    or ecx, dword ptr [ebx]
:00446DC5 0B0B                    or ecx, dword ptr [ebx]
:00446DC7 0B0B                    or ecx, dword ptr [ebx]
:00446DC9 0B0B                    or ecx, dword ptr [ebx]
:00446DCB 0B0B                    or ecx, dword ptr [ebx]
:00446DCD 0B0A                    or ecx, dword ptr [edx]

* Referenced by a CALL at Address:
|:00446D41   
|
:00446DCF 55                      push ebp
:00446DD0 8BEC                    mov ebp, esp
:00446DD2 6AFF                    push FFFFFFFF
:00446DD4 6824994700              push 00479924
:00446DD9 64A100000000            mov eax, dword ptr fs:[00000000]
:00446DDF 50                      push eax
:00446DE0 64892500000000          mov dword ptr fs:[00000000], esp
:00446DE7 81EC38010000            sub esp, 00000138
:00446DED 898DBCFEFFFF            mov dword ptr [ebp+FFFFFEBC], ecx
:00446DF3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446DF9 E842E8FBFF              call 00405640
:00446DFE C745FC00000000          mov [ebp-04], 00000000
:00446E05 8B4514                  mov eax, dword ptr [ebp+14]
:00446E08 25FF000000              and eax, 000000FF
:00446E0D 83F83B                  cmp eax, 0000003B
:00446E10 7412                    je 00446E24
:00446E12 8B4D14                  mov ecx, dword ptr [ebp+14]
:00446E15 81E1FF000000            and ecx, 000000FF
:00446E1B 83F90E                  cmp ecx, 0000000E
:00446E1E 0F85D7000000            jne 00446EFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E10(C)
|

* Possible StringData Ref from Data Obj ->"SEFF.E3"
                                  |
:00446E24 6840D54700              push 0047D540
:00446E29 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446E2F E8A1A3FCFF              call 004111D5
:00446E34 85C0                    test eax, eax
:00446E36 7527                    jne 00446E5F
:00446E38 C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:00446E42 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446E49 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446E4F E80CE8FBFF              call 00405660
:00446E54 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:00446E5A E92F040000              jmp 0044728E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E36(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00446E5F 6A04                    push 00000004
:00446E61 6A00                    push 00000000
:00446E63 6A00                    push 00000000
:00446E65 B9F0174B00              mov ecx, 004B17F0
:00446E6A E821210300              call 00478F90
:00446E6F 0500B10000              add eax, 0000B100
:00446E74 50                      push eax
:00446E75 8B5508                  mov edx, dword ptr [ebp+08]
:00446E78 81E2FF000000            and edx, 000000FF
:00446E7E 52                      push edx
:00446E7F 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446E85 E89FA4FCFF              call 00411329
:00446E8A 85C0                    test eax, eax
:00446E8C 7532                    jne 00446EC0
:00446E8E 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446E94 E88C6DFCFF              call 0040DC25
:00446E99 C785E0FEFFFF00000000    mov dword ptr [ebp+FFFFFEE0], 00000000
:00446EA3 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446EAA 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446EB0 E8ABE7FBFF              call 00405660
:00446EB5 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:00446EBB E9CE030000              jmp 0044728E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E8C(C)
|
:00446EC0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446EC6 E85A6DFCFF              call 0040DC25
:00446ECB 85C0                    test eax, eax
:00446ECD 7527                    jne 00446EF6
:00446ECF C785DCFEFFFF00000000    mov dword ptr [ebp+FFFFFEDC], 00000000
:00446ED9 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446EE0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446EE6 E875E7FBFF              call 00405660
:00446EEB 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:00446EF1 E998030000              jmp 0044728E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446ECD(C)
|
:00446EF6 E971030000              jmp 0044726C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446E1E(C)
|
:00446EFB 8B4514                  mov eax, dword ptr [ebp+14]
:00446EFE 25FF000000              and eax, 000000FF
:00446F03 83F803                  cmp eax, 00000003
:00446F06 742D                    je 00446F35
:00446F08 8B4D14                  mov ecx, dword ptr [ebp+14]
:00446F0B 81E1FF000000            and ecx, 000000FF
:00446F11 83F907                  cmp ecx, 00000007
:00446F14 741F                    je 00446F35
:00446F16 8B5514                  mov edx, dword ptr [ebp+14]
:00446F19 81E2FF000000            and edx, 000000FF
:00446F1F 83FA0A                  cmp edx, 0000000A
:00446F22 7411                    je 00446F35
:00446F24 8B4514                  mov eax, dword ptr [ebp+14]
:00446F27 25FF000000              and eax, 000000FF
:00446F2C 83F80C                  cmp eax, 0000000C
:00446F2F 0F85D7000000            jne 0044700C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446F06(C), :00446F14(C), :00446F22(C)
|

* Possible StringData Ref from Data Obj ->"SARM.E3"
                                  |
:00446F35 6838D54700              push 0047D538
:00446F3A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446F40 E890A2FCFF              call 004111D5
:00446F45 85C0                    test eax, eax
:00446F47 7527                    jne 00446F70
:00446F49 C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:00446F53 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446F5A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446F60 E8FBE6FBFF              call 00405660
:00446F65 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:00446F6B E91E030000              jmp 0044728E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446F47(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00446F70 6A04                    push 00000004
:00446F72 6A00                    push 00000000
:00446F74 6A00                    push 00000000
:00446F76 B9F0174B00              mov ecx, 004B17F0
:00446F7B E810200300              call 00478F90
:00446F80 0500B10000              add eax, 0000B100
:00446F85 50                      push eax
:00446F86 8B4D08                  mov ecx, dword ptr [ebp+08]
:00446F89 81E1FF000000            and ecx, 000000FF
:00446F8F 51                      push ecx
:00446F90 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446F96 E88EA3FCFF              call 00411329
:00446F9B 85C0                    test eax, eax
:00446F9D 7532                    jne 00446FD1
:00446F9F 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446FA5 E87B6CFCFF              call 0040DC25
:00446FAA C785D4FEFFFF00000000    mov dword ptr [ebp+FFFFFED4], 00000000
:00446FB4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446FBB 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446FC1 E89AE6FBFF              call 00405660
:00446FC6 8B85D4FEFFFF            mov eax, dword ptr [ebp+FFFFFED4]
:00446FCC E9BD020000              jmp 0044728E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446F9D(C)
|
:00446FD1 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446FD7 E8496CFCFF              call 0040DC25
:00446FDC 85C0                    test eax, eax
:00446FDE 7527                    jne 00447007
:00446FE0 C785D0FEFFFF00000000    mov dword ptr [ebp+FFFFFED0], 00000000
:00446FEA C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00446FF1 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00446FF7 E864E6FBFF              call 00405660
:00446FFC 8B85D0FEFFFF            mov eax, dword ptr [ebp+FFFFFED0]
:00447002 E987020000              jmp 0044728E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446FDE(C)
|
:00447007 E960020000              jmp 0044726C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00446F2F(C)
|
:0044700C 6A00                    push 00000000
:0044700E 8A5510                  mov dl, byte ptr [ebp+10]
:00447011 52                      push edx
:00447012 8A450C                  mov al, byte ptr [ebp+0C]
:00447015 50                      push eax
:00447016 8B8DBCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEBC]
:0044701C E8FBF1FFFF              call 0044621C
:00447021 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:00447027 83BDE8FEFFFF03          cmp dword ptr [ebp+FFFFFEE8], 00000003
:0044702E 7409                    je 00447039
:00447030 83BDE8FEFFFF01          cmp dword ptr [ebp+FFFFFEE8], 00000001
:00447037 750B                    jne 00447044

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044702E(C)
|
:00447039 8A4D08                  mov cl, byte ptr [ebp+08]
:0044703C 80C102                  add cl, 02
:0044703F 884D08                  mov byte ptr [ebp+08], cl
:00447042 EB12                    jmp 00447056

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447037(C)
|
:00447044 83BDE8FEFFFF02          cmp dword ptr [ebp+FFFFFEE8], 00000002
:0044704B 7509                    jne 00447056
:0044704D 8A5508                  mov dl, byte ptr [ebp+08]
:00447050 80C201                  add dl, 01
:00447053 885508                  mov byte ptr [ebp+08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447042(U), :0044704B(C)
|

* Possible StringData Ref from Data Obj ->"SARM.E3"
                                  |
:00447056 6838D54700              push 0047D538
:0044705B 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447061 E86FA1FCFF              call 004111D5
:00447066 85C0                    test eax, eax
:00447068 7527                    jne 00447091
:0044706A C785CCFEFFFF00000000    mov dword ptr [ebp+FFFFFECC], 00000000
:00447074 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0044707B 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447081 E8DAE5FBFF              call 00405660
:00447086 8B85CCFEFFFF            mov eax, dword ptr [ebp+FFFFFECC]
:0044708C E9FD010000              jmp 0044728E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447068(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00447091 6A04                    push 00000004
:00447093 6A00                    push 00000000
:00447095 6A00                    push 00000000
:00447097 B9F0174B00              mov ecx, 004B17F0
:0044709C E8EF1E0300              call 00478F90
:004470A1 05003D0100              add eax, 00013D00
:004470A6 50                      push eax
:004470A7 8B4508                  mov eax, dword ptr [ebp+08]
:004470AA 25FF000000              and eax, 000000FF
:004470AF 50                      push eax
:004470B0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004470B6 E86EA2FCFF              call 00411329
:004470BB 85C0                    test eax, eax
:004470BD 7532                    jne 004470F1
:004470BF 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004470C5 E85B6BFCFF              call 0040DC25
:004470CA C785C8FEFFFF00000000    mov dword ptr [ebp+FFFFFEC8], 00000000
:004470D4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004470DB 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004470E1 E87AE5FBFF              call 00405660
:004470E6 8B85C8FEFFFF            mov eax, dword ptr [ebp+FFFFFEC8]
:004470EC E99D010000              jmp 0044728E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004470BD(C)
|
:004470F1 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004470F7 E8296BFCFF              call 0040DC25
:004470FC 85C0                    test eax, eax
:004470FE 7527                    jne 00447127
:00447100 C785C4FEFFFF00000000    mov dword ptr [ebp+FFFFFEC4], 00000000
:0044710A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00447111 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447117 E844E5FBFF              call 00405660
:0044711C 8B85C4FEFFFF            mov eax, dword ptr [ebp+FFFFFEC4]
:00447122 E967010000              jmp 0044728E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004470FE(C)
|
:00447127 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044712A 81E1FF000000            and ecx, 000000FF
:00447130 83F908                  cmp ecx, 00000008
:00447133 741F                    je 00447154
:00447135 8B5514                  mov edx, dword ptr [ebp+14]
:00447138 81E2FF000000            and edx, 000000FF
:0044713E 83FA09                  cmp edx, 00000009
:00447141 7411                    je 00447154
:00447143 8B4514                  mov eax, dword ptr [ebp+14]
:00447146 25FF000000              and eax, 000000FF
:0044714B 83F81C                  cmp eax, 0000001C
:0044714E 0F858D000000            jne 004471E1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447133(C), :00447141(C)
|
:00447154 83BDE8FEFFFF01          cmp dword ptr [ebp+FFFFFEE8], 00000001
:0044715B 7540                    jne 0044719D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044715D 6A04                    push 00000004
:0044715F 6A00                    push 00000000
:00447161 6A00                    push 00000000
:00447163 B9F0174B00              mov ecx, 004B17F0
:00447168 E8231E0300              call 00478F90
:0044716D 05003D0100              add eax, 00013D00
:00447172 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00447175 6A04                    push 00000004
:00447177 6A00                    push 00000000
:00447179 6A00                    push 00000000
:0044717B B9F0174B00              mov ecx, 004B17F0
:00447180 E80B1E0300              call 00478F90
:00447185 0500B10000              add eax, 0000B100
:0044718A 50                      push eax
:0044718B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044718E 51                      push ecx
:0044718F 6A30                    push 00000030
:00447191 6A30                    push 00000030
:00447193 E8D693FCFF              call 0041056E
:00447198 83C410                  add esp, 00000010
:0044719B EB3F                    jmp 004471DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044715B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044719D 6A04                    push 00000004
:0044719F 6A00                    push 00000000
:004471A1 6A00                    push 00000000
:004471A3 B9F0174B00              mov ecx, 004B17F0
:004471A8 E8E31D0300              call 00478F90
:004471AD 05003D0100              add eax, 00013D00
:004471B2 8945F0                  mov dword ptr [ebp-10], eax
:004471B5 6800090000              push 00000900

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004471BA 6A04                    push 00000004
:004471BC 6A00                    push 00000000
:004471BE 6A00                    push 00000000
:004471C0 B9F0174B00              mov ecx, 004B17F0
:004471C5 E8C61D0300              call 00478F90
:004471CA 0500B10000              add eax, 0000B100
:004471CF 50                      push eax
:004471D0 8B55F0                  mov edx, dword ptr [ebp-10]
:004471D3 52                      push edx
:004471D4 E8E7130300              call 004785C0
:004471D9 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044719B(U)
|
:004471DC E98B000000              jmp 0044726C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044714E(C)
|
:004471E1 83BDE8FEFFFF01          cmp dword ptr [ebp+FFFFFEE8], 00000001
:004471E8 7543                    jne 0044722D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004471EA 6A04                    push 00000004
:004471EC 6A00                    push 00000000
:004471EE 6A00                    push 00000000
:004471F0 B9F0174B00              mov ecx, 004B17F0
:004471F5 E8961D0300              call 00478F90
:004471FA 05003D0100              add eax, 00013D00
:004471FF 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00447202 6A04                    push 00000004
:00447204 6A00                    push 00000000
:00447206 6A00                    push 00000000
:00447208 B9F0174B00              mov ecx, 004B17F0
:0044720D E87E1D0300              call 00478F90
:00447212 0500B10000              add eax, 0000B100
:00447217 50                      push eax
:00447218 8B45F0                  mov eax, dword ptr [ebp-10]
:0044721B 50                      push eax
:0044721C 6890000000              push 00000090
:00447221 6A30                    push 00000030
:00447223 E84693FCFF              call 0041056E
:00447228 83C410                  add esp, 00000010
:0044722B EB3F                    jmp 0044726C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004471E8(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044722D 6A04                    push 00000004
:0044722F 6A00                    push 00000000
:00447231 6A00                    push 00000000
:00447233 B9F0174B00              mov ecx, 004B17F0
:00447238 E8531D0300              call 00478F90
:0044723D 05003D0100              add eax, 00013D00
:00447242 8945F0                  mov dword ptr [ebp-10], eax
:00447245 68001B0000              push 00001B00

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044724A 6A04                    push 00000004
:0044724C 6A00                    push 00000000
:0044724E 6A00                    push 00000000
:00447250 B9F0174B00              mov ecx, 004B17F0
:00447255 E8361D0300              call 00478F90
:0044725A 0500B10000              add eax, 0000B100
:0044725F 50                      push eax
:00447260 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00447263 51                      push ecx
:00447264 E857130300              call 004785C0
:00447269 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446EF6(U), :00447007(U), :004471DC(U), :0044722B(U)
|
:0044726C C785C0FEFFFF01000000    mov dword ptr [ebp+FFFFFEC0], 00000001
:00447276 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0044727D 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447283 E8D8E3FBFF              call 00405660
:00447288 8B85C0FEFFFF            mov eax, dword ptr [ebp+FFFFFEC0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00446E5A(U), :00446EBB(U), :00446EF1(U), :00446F6B(U), :00446FCC(U)
|:00447002(U), :0044708C(U), :004470EC(U), :00447122(U)
|
:0044728E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00447291 64890D00000000          mov dword ptr fs:[00000000], ecx
:00447298 8BE5                    mov esp, ebp
:0044729A 5D                      pop ebp
:0044729B C21000                  ret 0010



* Referenced by a CALL at Address:
|:00444E05   
|
:0044729E 55                      push ebp
:0044729F 8BEC                    mov ebp, esp
:004472A1 83EC08                  sub esp, 00000008
:004472A4 894DFC                  mov dword ptr [ebp-04], ecx
:004472A7 8B4508                  mov eax, dword ptr [ebp+08]
:004472AA 25FF000000              and eax, 000000FF
:004472AF 8945F8                  mov dword ptr [ebp-08], eax
:004472B2 837DF83A                cmp dword ptr [ebp-08], 0000003A
:004472B6 7734                    ja 004472EC
:004472B8 8B55F8                  mov edx, dword ptr [ebp-08]
:004472BB 33C9                    xor ecx, ecx
:004472BD 8A8A1A734400            mov cl, byte ptr [edx+0044731A]
:004472C3 FF248DF2724400          jmp dword ptr [4*ecx+004472F2]
:004472CA 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004472CE 740D                    je 004472DD
:004472D0 8B45FC                  mov eax, dword ptr [ebp-04]
:004472D3 8B08                    mov ecx, dword ptr [eax]
:004472D5 83C940                  or ecx, 00000040
:004472D8 8B55FC                  mov edx, dword ptr [ebp-04]
:004472DB 890A                    mov dword ptr [edx], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004472CE(C)
|
:004472DD EB0D                    jmp 004472EC
:004472DF 8B45FC                  mov eax, dword ptr [ebp-04]
:004472E2 8B08                    mov ecx, dword ptr [eax]
:004472E4 83C940                  or ecx, 00000040
:004472E7 8B55FC                  mov edx, dword ptr [ebp-04]
:004472EA 890A                    mov dword ptr [edx], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004472B6(C), :004472DD(U)
|
:004472EC 8BE5                    mov esp, ebp
:004472EE 5D                      pop ebp
:004472EF C20800                  ret 0008



:004472F2 CA724400                DWORD 004472CA
:004472F6 CA724400                DWORD 004472CA
:004472FA CA724400                DWORD 004472CA
:004472FE CA724400                DWORD 004472CA
:00447302 CA724400                DWORD 004472CA
:00447306 DF724400                DWORD 004472DF
:0044730A DF724400                DWORD 004472DF
:0044730E CA724400                DWORD 004472CA
:00447312 DF724400                DWORD 004472DF
:00447316 EC724400                DWORD 004472EC


:0044731A 000000                  BYTE  3 DUP(0)


:0044731D 0901                    or dword ptr [ecx], eax
:0044731F 0902                    or dword ptr [edx], eax
:00447321 0202                    add al, byte ptr [edx]
:00447323 0209                    add cl, byte ptr [ecx]
:00447325 0309                    add ecx, dword ptr [ecx]
:00447327 0404                    add al, 04
:00447329 0404                    add al, 04
:0044732B 0404                    add al, 04
:0044732D 0404                    add al, 04
:0044732F 0404                    add al, 04
:00447331 0404                    add al, 04
:00447333 0404                    add al, 04
:00447335 0404                    add al, 04
:00447337 0404                    add al, 04
:00447339 0404                    add al, 04
:0044733B 0404                    add al, 04
:0044733D 0404                    add al, 04
:0044733F 0404                    add al, 04
:00447341 0405                    add al, 05
:00447343 0505050909              add eax, 09090505
:00447348 06                      push es
:00447349 06                      push es
:0044734A 06                      push es
:0044734B 06                      push es
:0044734C 06                      push es
:0044734D 06                      push es
:0044734E 06                      push es
:0044734F 06                      push es
:00447350 06                      push es

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044730B(C)
|
:00447351 06                      push es
:00447352 06                      push es
:00447353 07                      pop es
:00447354 08                      BYTE 08h


* Referenced by a CALL at Address:
|:00444E1D   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044730F(C)
|
:00447355 55                      push ebp
:00447356 8BEC                    mov ebp, esp
:00447358 83EC08                  sub esp, 00000008
:0044735B 894DFC                  mov dword ptr [ebp-04], ecx
:0044735E 837D1400                cmp dword ptr [ebp+14], 00000000
:00447362 7507                    jne 0044736B
:00447364 B801000000              mov eax, 00000001
:00447369 EB5D                    jmp 004473C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447362(C)
|
:0044736B 8B4510                  mov eax, dword ptr [ebp+10]
:0044736E 25FF000000              and eax, 000000FF
:00447373 8945F8                  mov dword ptr [ebp-08], eax
:00447376 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00447379 83E928                  sub ecx, 00000028
:0044737C 894DF8                  mov dword ptr [ebp-08], ecx
:0044737F 837DF818                cmp dword ptr [ebp-08], 00000018
:00447383 7719                    ja 0044739E
:00447385 8B45F8                  mov eax, dword ptr [ebp-08]
:00447388 33D2                    xor edx, edx
:0044738A 8A90DA734400            mov dl, byte ptr [eax+004473DA]
:00447390 FF2495CE734400          jmp dword ptr [4*edx+004473CE]
:00447397 B801000000              mov eax, 00000001
:0044739C EB2A                    jmp 004473C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447383(C)
|
:0044739E 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004473A1 51                      push ecx
:004473A2 8A5508                  mov dl, byte ptr [ebp+08]
:004473A5 52                      push edx
:004473A6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004473A9 E845000000              call 004473F3
:004473AE 85C0                    test eax, eax
:004473B0 7504                    jne 004473B6
:004473B2 33C0                    xor eax, eax
:004473B4 EB12                    jmp 004473C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004473B0(C)
|
:004473B6 8B45FC                  mov eax, dword ptr [ebp-04]
:004473B9 8B08                    mov ecx, dword ptr [eax]
:004473BB 80C980                  or cl, 80
:004473BE 8B55FC                  mov edx, dword ptr [ebp-04]
:004473C1 890A                    mov dword ptr [edx], ecx
:004473C3 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447369(U), :0044739C(U), :004473B4(U)
|
:004473C8 8BE5                    mov esp, ebp
:004473CA 5D                      pop ebp
:004473CB C21000                  ret 0010



:004473CE 97734400                DWORD 00447397
:004473D2 97734400                DWORD 00447397
:004473D6 9E734400                DWORD 0044739E


:004473DA 00000000000000000000    BYTE 10 DUP(0)
:004473E4 00000000000000          BYTE  7 DUP(0)


:004473EB 0201                    add al, byte ptr [ecx]
:004473ED 0101                    add dword ptr [ecx], eax
:004473EF 0101                    add dword ptr [ecx], eax
:004473F1 0101                    add dword ptr [ecx], eax

* Referenced by a CALL at Address:
|:004473A9   
|
:004473F3 55                      push ebp
:004473F4 8BEC                    mov ebp, esp
:004473F6 6AFF                    push FFFFFFFF
:004473F8 683A994700              push 0047993A
:004473FD 64A100000000            mov eax, dword ptr fs:[00000000]
:00447403 50                      push eax
:00447404 64892500000000          mov dword ptr fs:[00000000], esp
:0044740B 81EC28010000            sub esp, 00000128
:00447411 56                      push esi
:00447412 898DD0FEFFFF            mov dword ptr [ebp+FFFFFED0], ecx
:00447418 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0044741E E81DE2FBFF              call 00405640
:00447423 C745FC00000000          mov [ebp-04], 00000000
:0044742A 8B450C                  mov eax, dword ptr [ebp+0C]
:0044742D 25FF000000              and eax, 000000FF
:00447432 50                      push eax
:00447433 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447436 81E1FF000000            and ecx, 000000FF
:0044743C 6BC924                  imul ecx, 00000024
:0044743F 81C1B83B4B00            add ecx, 004B3BB8
:00447445 E858ACFEFF              call 004320A2
:0044744A 8885E8FEFFFF            mov byte ptr [ebp+FFFFFEE8], al
:00447450 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447453 81E1FF000000            and ecx, 000000FF
:00447459 6BC924                  imul ecx, 00000024
:0044745C 81C1B83B4B00            add ecx, 004B3BB8
:00447462 E8D9A7FEFF              call 00431C40
:00447467 50                      push eax
:00447468 E8EB830000              call 0044F858
:0044746D 83C404                  add esp, 00000004
:00447470 25FF000000              and eax, 000000FF
:00447475 83F80A                  cmp eax, 0000000A
:00447478 7549                    jne 004474C3
:0044747A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044747D 81E1FF000000            and ecx, 000000FF
:00447483 6BC924                  imul ecx, 00000024
:00447486 81C1B83B4B00            add ecx, 004B3BB8
:0044748C E83FCFFEFF              call 004343D0
:00447491 668BF0                  mov si, ax
:00447494 81E6FFFF0000            and esi, 0000FFFF
:0044749A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044749D 81E1FF000000            and ecx, 000000FF
:004474A3 6BC924                  imul ecx, 00000024
:004474A6 81C1B83B4B00            add ecx, 004B3BB8
:004474AC E887ACFEFF              call 00432138
:004474B1 25FF000000              and eax, 000000FF
:004474B6 6BC025                  imul eax, 00000025
:004474B9 8D4C061E                lea ecx, dword ptr [esi+eax+1E]
:004474BD 888DE8FEFFFF            mov byte ptr [ebp+FFFFFEE8], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447478(C)
|

* Possible StringData Ref from Data Obj ->"CHR_DEF.E3"
                                  |
:004474C3 68A8D54700              push 0047D5A8
:004474C8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004474CE E8029DFCFF              call 004111D5
:004474D3 85C0                    test eax, eax
:004474D5 7527                    jne 004474FE
:004474D7 C785E0FEFFFF00000000    mov dword ptr [ebp+FFFFFEE0], 00000000
:004474E1 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004474E8 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004474EE E86DE1FBFF              call 00405660
:004474F3 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:004474F9 E937020000              jmp 00447735

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004474D5(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004474FE 6A04                    push 00000004
:00447500 6A00                    push 00000000
:00447502 6A00                    push 00000000
:00447504 B9F0174B00              mov ecx, 004B17F0
:00447509 E8821A0300              call 00478F90
:0044750E 05003D0100              add eax, 00013D00
:00447513 50                      push eax
:00447514 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:0044751A 81E2FF000000            and edx, 000000FF
:00447520 52                      push edx
:00447521 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447527 E8FD9DFCFF              call 00411329
:0044752C 85C0                    test eax, eax
:0044752E 7532                    jne 00447562
:00447530 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447536 E8EA66FCFF              call 0040DC25
:0044753B C785DCFEFFFF00000000    mov dword ptr [ebp+FFFFFEDC], 00000000
:00447545 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0044754C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447552 E809E1FBFF              call 00405660
:00447557 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:0044755D E9D3010000              jmp 00447735

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044752E(C)
|
:00447562 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447568 E8B866FCFF              call 0040DC25
:0044756D 85C0                    test eax, eax
:0044756F 7527                    jne 00447598
:00447571 C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:0044757B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00447582 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447588 E8D3E0FBFF              call 00405660
:0044758D 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:00447593 E99D010000              jmp 00447735

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044756F(C)
|
:00447598 8B4508                  mov eax, dword ptr [ebp+08]
:0044759B 25FF000000              and eax, 000000FF
:004475A0 3DFF000000              cmp eax, 000000FF
:004475A5 741D                    je 004475C4
:004475A7 6A00                    push 00000000
:004475A9 8A4D08                  mov cl, byte ptr [ebp+08]
:004475AC 51                      push ecx
:004475AD 8A550C                  mov dl, byte ptr [ebp+0C]
:004475B0 52                      push edx
:004475B1 8B8DD0FEFFFF            mov ecx, dword ptr [ebp+FFFFFED0]
:004475B7 E860ECFFFF              call 0044621C
:004475BC 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax
:004475C2 EB22                    jmp 004475E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004475A5(C)
|
:004475C4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004475C7 81E1FF000000            and ecx, 000000FF
:004475CD 6BC924                  imul ecx, 00000024
:004475D0 81C1B83B4B00            add ecx, 004B3BB8
:004475D6 E82588FCFF              call 0040FE00
:004475DB 25FF000000              and eax, 000000FF
:004475E0 8985E4FEFFFF            mov dword ptr [ebp+FFFFFEE4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004475C2(U)
|
:004475E6 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:004475EC 8985CCFEFFFF            mov dword ptr [ebp+FFFFFECC], eax
:004475F2 83BDCCFEFFFF03          cmp dword ptr [ebp+FFFFFECC], 00000003
:004475F9 0F8714010000            ja 00447713
:004475FF 8B8DCCFEFFFF            mov ecx, dword ptr [ebp+FFFFFECC]
:00447605 FF248D46774400          jmp dword ptr [4*ecx+00447746]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044760C 6A04                    push 00000004
:0044760E 6A00                    push 00000000
:00447610 6A00                    push 00000000
:00447612 B9F0174B00              mov ecx, 004B17F0
:00447617 E874190300              call 00478F90
:0044761C 0500610100              add eax, 00016100
:00447621 8945F0                  mov dword ptr [ebp-10], eax
:00447624 6800120000              push 00001200

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00447629 6A04                    push 00000004
:0044762B 6A00                    push 00000000
:0044762D 6A00                    push 00000000
:0044762F B9F0174B00              mov ecx, 004B17F0
:00447634 E857190300              call 00478F90
:00447639 0500300000              add eax, 00003000
:0044763E 50                      push eax
:0044763F 8B55F0                  mov edx, dword ptr [ebp-10]
:00447642 52                      push edx
:00447643 E8780F0300              call 004785C0
:00447648 83C40C                  add esp, 0000000C
:0044764B E9C3000000              jmp 00447713

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00447650 6A04                    push 00000004
:00447652 6A00                    push 00000000
:00447654 6A00                    push 00000000
:00447656 B9F0174B00              mov ecx, 004B17F0
:0044765B E830190300              call 00478F90
:00447660 05004F0100              add eax, 00014F00
:00447665 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00447668 6A04                    push 00000004
:0044766A 6A00                    push 00000000
:0044766C 6A00                    push 00000000
:0044766E B9F0174B00              mov ecx, 004B17F0
:00447673 E818190300              call 00478F90
:00447678 0500300000              add eax, 00003000
:0044767D 50                      push eax
:0044767E 8B45F0                  mov eax, dword ptr [ebp-10]
:00447681 50                      push eax
:00447682 6A60                    push 00000060
:00447684 6A30                    push 00000030
:00447686 E8E38EFCFF              call 0041056E
:0044768B 83C410                  add esp, 00000010
:0044768E E980000000              jmp 00447713

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00447693 6A04                    push 00000004
:00447695 6A00                    push 00000000
:00447697 6A00                    push 00000000
:00447699 B9F0174B00              mov ecx, 004B17F0
:0044769E E8ED180300              call 00478F90
:004476A3 05004F0100              add eax, 00014F00
:004476A8 8945F0                  mov dword ptr [ebp-10], eax
:004476AB 6800120000              push 00001200

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004476B0 6A04                    push 00000004
:004476B2 6A00                    push 00000000
:004476B4 6A00                    push 00000000
:004476B6 B9F0174B00              mov ecx, 004B17F0
:004476BB E8D0180300              call 00478F90
:004476C0 0500300000              add eax, 00003000
:004476C5 50                      push eax
:004476C6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004476C9 51                      push ecx
:004476CA E8F10E0300              call 004785C0
:004476CF 83C40C                  add esp, 0000000C
:004476D2 EB3F                    jmp 00447713

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004476D4 6A04                    push 00000004
:004476D6 6A00                    push 00000000
:004476D8 6A00                    push 00000000
:004476DA B9F0174B00              mov ecx, 004B17F0
:004476DF E8AC180300              call 00478F90
:004476E4 05003D0100              add eax, 00013D00
:004476E9 8945F0                  mov dword ptr [ebp-10], eax
:004476EC 6800120000              push 00001200

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004476F1 6A04                    push 00000004
:004476F3 6A00                    push 00000000
:004476F5 6A00                    push 00000000
:004476F7 B9F0174B00              mov ecx, 004B17F0
:004476FC E88F180300              call 00478F90
:00447701 0500300000              add eax, 00003000
:00447706 50                      push eax
:00447707 8B55F0                  mov edx, dword ptr [ebp-10]
:0044770A 52                      push edx
:0044770B E8B00E0300              call 004785C0
:00447710 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004475F9(C), :0044764B(U), :0044768E(U), :004476D2(U)
|
:00447713 C785D4FEFFFF01000000    mov dword ptr [ebp+FFFFFED4], 00000001
:0044771D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00447724 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0044772A E831DFFBFF              call 00405660
:0044772F 8B85D4FEFFFF            mov eax, dword ptr [ebp+FFFFFED4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004474F9(U), :0044755D(U), :00447593(U)
|
:00447735 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00447738 64890D00000000          mov dword ptr fs:[00000000], ecx
:0044773F 5E                      pop esi
:00447740 8BE5                    mov esp, ebp
:00447742 5D                      pop ebp
:00447743 C20800                  ret 0008



:00447746 0C764400                DWORD 0044760C
:0044774A 50764400                DWORD 00447650
:0044774E D4764400                DWORD 004476D4
:00447752 93764400                DWORD 00447693



* Referenced by a CALL at Address:
|:00444E40   
|
:00447756 55                      push ebp
:00447757 8BEC                    mov ebp, esp
:00447759 6AFF                    push FFFFFFFF
:0044775B 6850994700              push 00479950
:00447760 64A100000000            mov eax, dword ptr fs:[00000000]
:00447766 50                      push eax
:00447767 64892500000000          mov dword ptr fs:[00000000], esp
:0044776E 81EC28010000            sub esp, 00000128
:00447774 898DCCFEFFFF            mov dword ptr [ebp+FFFFFECC], ecx
:0044777A 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447780 E8BBDEFBFF              call 00405640
:00447785 C745FC00000000          mov [ebp-04], 00000000
:0044778C 8B4514                  mov eax, dword ptr [ebp+14]
:0044778F 50                      push eax
:00447790 8A4D10                  mov cl, byte ptr [ebp+10]
:00447793 51                      push ecx
:00447794 8A550C                  mov dl, byte ptr [ebp+0C]
:00447797 52                      push edx
:00447798 8A4508                  mov al, byte ptr [ebp+08]
:0044779B 50                      push eax
:0044779C 8B8DCCFEFFFF            mov ecx, dword ptr [ebp+FFFFFECC]
:004477A2 E8F3010000              call 0044799A
:004477A7 8945F0                  mov dword ptr [ebp-10], eax
:004477AA 837DF0FF                cmp dword ptr [ebp-10], FFFFFFFF
:004477AE 7527                    jne 004477D7
:004477B0 C785E4FEFFFF01000000    mov dword ptr [ebp+FFFFFEE4], 00000001
:004477BA C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004477C1 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004477C7 E894DEFBFF              call 00405660
:004477CC 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:004477D2 E9B3010000              jmp 0044798A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004477AE(C)
|
:004477D7 6A00                    push 00000000
:004477D9 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004477DC 51                      push ecx
:004477DD 8A5508                  mov dl, byte ptr [ebp+08]
:004477E0 52                      push edx
:004477E1 8B8DCCFEFFFF            mov ecx, dword ptr [ebp+FFFFFECC]
:004477E7 E830EAFFFF              call 0044621C
:004477EC 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:004477F2 8B4510                  mov eax, dword ptr [ebp+10]
:004477F5 25FF000000              and eax, 000000FF
:004477FA 83F814                  cmp eax, 00000014
:004477FD 7412                    je 00447811
:004477FF 8B4D10                  mov ecx, dword ptr [ebp+10]
:00447802 81E1FF000000            and ecx, 000000FF
:00447808 83F916                  cmp ecx, 00000016
:0044780B 0F850B010000            jne 0044791C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004477FD(C)
|
:00447811 83BDE8FEFFFF01          cmp dword ptr [ebp+FFFFFEE8], 00000001
:00447818 0F85FE000000            jne 0044791C

* Possible StringData Ref from Data Obj ->"SEFF.E3"
                                  |
:0044781E 6840D54700              push 0047D540
:00447823 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447829 E8A799FCFF              call 004111D5
:0044782E 85C0                    test eax, eax
:00447830 7527                    jne 00447859
:00447832 C785E0FEFFFF00000000    mov dword ptr [ebp+FFFFFEE0], 00000000
:0044783C C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00447843 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447849 E812DEFBFF              call 00405660
:0044784E 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:00447854 E931010000              jmp 0044798A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447830(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00447859 6A04                    push 00000004
:0044785B 6A00                    push 00000000
:0044785D 6A00                    push 00000000
:0044785F B9F0174B00              mov ecx, 004B17F0
:00447864 E827170300              call 00478F90
:00447869 05003D0100              add eax, 00013D00
:0044786E 50                      push eax
:0044786F 8B55F0                  mov edx, dword ptr [ebp-10]
:00447872 52                      push edx
:00447873 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447879 E8AB9AFCFF              call 00411329
:0044787E 85C0                    test eax, eax
:00447880 7527                    jne 004478A9
:00447882 C785DCFEFFFF00000000    mov dword ptr [ebp+FFFFFEDC], 00000000
:0044788C C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00447893 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447899 E8C2DDFBFF              call 00405660
:0044789E 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:004478A4 E9E1000000              jmp 0044798A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447880(C)
|
:004478A9 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004478AF E87163FCFF              call 0040DC25
:004478B4 85C0                    test eax, eax
:004478B6 7527                    jne 004478DF
:004478B8 C785D8FEFFFF00000000    mov dword ptr [ebp+FFFFFED8], 00000000
:004478C2 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004478C9 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004478CF E88CDDFBFF              call 00405660
:004478D4 8B85D8FEFFFF            mov eax, dword ptr [ebp+FFFFFED8]
:004478DA E9AB000000              jmp 0044798A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004478B6(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004478DF 6A04                    push 00000004
:004478E1 6A00                    push 00000000
:004478E3 6A00                    push 00000000
:004478E5 B9F0174B00              mov ecx, 004B17F0
:004478EA E8A1160300              call 00478F90
:004478EF 0500E70000              add eax, 0000E700
:004478F4 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004478F5 6A04                    push 00000004
:004478F7 6A00                    push 00000000
:004478F9 6A00                    push 00000000
:004478FB B9F0174B00              mov ecx, 004B17F0
:00447900 E88B160300              call 00478F90
:00447905 05003D0100              add eax, 00013D00
:0044790A 50                      push eax
:0044790B 6890000000              push 00000090
:00447910 6A30                    push 00000030
:00447912 E8578CFCFF              call 0041056E
:00447917 83C410                  add esp, 00000010
:0044791A EB39                    jmp 00447955

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044780B(C), :00447818(C)
|
:0044791C 6A01                    push 00000001
:0044791E 8A45F0                  mov al, byte ptr [ebp-10]
:00447921 50                      push eax
:00447922 8B8DCCFEFFFF            mov ecx, dword ptr [ebp+FFFFFECC]
:00447928 E8B7F1FFFF              call 00446AE4
:0044792D 85C0                    test eax, eax
:0044792F 7524                    jne 00447955
:00447931 C785D4FEFFFF00000000    mov dword ptr [ebp+FFFFFED4], 00000000
:0044793B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00447942 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00447948 E813DDFBFF              call 00405660
:0044794D 8B85D4FEFFFF            mov eax, dword ptr [ebp+FFFFFED4]
:00447953 EB35                    jmp 0044798A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044791A(U), :0044792F(C)
|
:00447955 8B8DCCFEFFFF            mov ecx, dword ptr [ebp+FFFFFECC]
:0044795B 8B11                    mov edx, dword ptr [ecx]
:0044795D 80CE01                  or dh, 01
:00447960 8B85CCFEFFFF            mov eax, dword ptr [ebp+FFFFFECC]
:00447966 8910                    mov dword ptr [eax], edx
:00447968 C785D0FEFFFF01000000    mov dword ptr [ebp+FFFFFED0], 00000001
:00447972 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00447979 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0044797F E8DCDCFBFF              call 00405660
:00447984 8B85D0FEFFFF            mov eax, dword ptr [ebp+FFFFFED0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004477D2(U), :00447854(U), :004478A4(U), :004478DA(U), :00447953(U)
|
:0044798A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044798D 64890D00000000          mov dword ptr fs:[00000000], ecx
:00447994 8BE5                    mov esp, ebp
:00447996 5D                      pop ebp
:00447997 C21000                  ret 0010



* Referenced by a CALL at Address:
|:004477A2   
|
:0044799A 55                      push ebp
:0044799B 8BEC                    mov ebp, esp
:0044799D 83EC08                  sub esp, 00000008
:004479A0 56                      push esi
:004479A1 894DFC                  mov dword ptr [ebp-04], ecx
:004479A4 8B4510                  mov eax, dword ptr [ebp+10]
:004479A7 25FF000000              and eax, 000000FF
:004479AC 8945F8                  mov dword ptr [ebp-08], eax
:004479AF 837DF83A                cmp dword ptr [ebp-08], 0000003A
:004479B3 0F8729010000            ja 00447AE2
:004479B9 8B55F8                  mov edx, dword ptr [ebp-08]
:004479BC 33C9                    xor ecx, ecx
:004479BE 8A8A507B4400            mov cl, byte ptr [edx+00447B50]
:004479C4 FF248DEC7A4400          jmp dword ptr [4*ecx+00447AEC]
:004479CB 8B4514                  mov eax, dword ptr [ebp+14]
:004479CE F7D8                    neg eax
:004479D0 1BC0                    sbb eax, eax
:004479D2 83E011                  and eax, 00000011
:004479D5 83C0FF                  add eax, FFFFFFFF
:004479D8 E908010000              jmp 00447AE5
:004479DD 8B4514                  mov eax, dword ptr [ebp+14]
:004479E0 F7D8                    neg eax
:004479E2 1BC0                    sbb eax, eax
:004479E4 83E00C                  and eax, 0000000C
:004479E7 83C0FF                  add eax, FFFFFFFF
:004479EA E9F6000000              jmp 00447AE5
:004479EF 8B4514                  mov eax, dword ptr [ebp+14]
:004479F2 F7D8                    neg eax
:004479F4 1BC0                    sbb eax, eax
:004479F6 83E006                  and eax, 00000006
:004479F9 83C0FF                  add eax, FFFFFFFF
:004479FC E9E4000000              jmp 00447AE5
:00447A01 8B4514                  mov eax, dword ptr [ebp+14]
:00447A04 F7D8                    neg eax
:00447A06 1BC0                    sbb eax, eax
:00447A08 83E008                  and eax, 00000008
:00447A0B 83C0FF                  add eax, FFFFFFFF
:00447A0E E9D2000000              jmp 00447AE5
:00447A13 8B4514                  mov eax, dword ptr [ebp+14]
:00447A16 F7D8                    neg eax
:00447A18 1BC0                    sbb eax, eax
:00447A1A 83E007                  and eax, 00000007
:00447A1D 83C0FF                  add eax, FFFFFFFF
:00447A20 E9C0000000              jmp 00447AE5
:00447A25 8B4514                  mov eax, dword ptr [ebp+14]
:00447A28 F7D8                    neg eax
:00447A2A 1BC0                    sbb eax, eax
:00447A2C 83E009                  and eax, 00000009
:00447A2F 83C0FF                  add eax, FFFFFFFF
:00447A32 E9AE000000              jmp 00447AE5
:00447A37 8B4514                  mov eax, dword ptr [ebp+14]
:00447A3A F7D8                    neg eax
:00447A3C 1BC0                    sbb eax, eax
:00447A3E 83E00A                  and eax, 0000000A
:00447A41 83C0FF                  add eax, FFFFFFFF
:00447A44 E99C000000              jmp 00447AE5
:00447A49 8B4514                  mov eax, dword ptr [ebp+14]
:00447A4C F7D8                    neg eax
:00447A4E 1BC0                    sbb eax, eax
:00447A50 83E00B                  and eax, 0000000B
:00447A53 83C0FF                  add eax, FFFFFFFF
:00447A56 E98A000000              jmp 00447AE5
:00447A5B 8B4514                  mov eax, dword ptr [ebp+14]
:00447A5E F7D8                    neg eax
:00447A60 1BC0                    sbb eax, eax
:00447A62 83E004                  and eax, 00000004
:00447A65 83C0FF                  add eax, FFFFFFFF
:00447A68 EB7B                    jmp 00447AE5
:00447A6A 8B4514                  mov eax, dword ptr [ebp+14]
:00447A6D F7D8                    neg eax
:00447A6F 1BC0                    sbb eax, eax
:00447A71 83E00E                  and eax, 0000000E
:00447A74 83C0FF                  add eax, FFFFFFFF
:00447A77 EB6C                    jmp 00447AE5
:00447A79 837D1400                cmp dword ptr [ebp+14], 00000000
:00447A7D 7453                    je 00447AD2
:00447A7F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00447A82 81E1FF000000            and ecx, 000000FF
:00447A88 6BC924                  imul ecx, 00000024
:00447A8B 81C1B83B4B00            add ecx, 004B3BB8
:00447A91 E84AB8FBFF              call 004032E0
:00447A96 8BF0                    mov esi, eax
:00447A98 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447A9B 81E1FF000000            and ecx, 000000FF
:00447AA1 6BC924                  imul ecx, 00000024
:00447AA4 81C1B83B4B00            add ecx, 004B3BB8
:00447AAA E831B8FBFF              call 004032E0
:00447AAF 3BF0                    cmp esi, eax
:00447AB1 760E                    jbe 00447AC1
:00447AB3 8B45FC                  mov eax, dword ptr [ebp-04]
:00447AB6 C7400400000000          mov [eax+04], 00000000
:00447ABD 33C0                    xor eax, eax
:00447ABF EB24                    jmp 00447AE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447AB1(C)
|
:00447AC1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00447AC4 C7410401000000          mov [ecx+04], 00000001
:00447ACB B801000000              mov eax, 00000001
:00447AD0 EB13                    jmp 00447AE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447A7D(C)
|
:00447AD2 83C8FF                  or eax, FFFFFFFF
:00447AD5 EB0E                    jmp 00447AE5
:00447AD7 33C0                    xor eax, eax
:00447AD9 EB0A                    jmp 00447AE5

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00447ADB B802000000              mov eax, 00000002
:00447AE0 EB03                    jmp 00447AE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004479B3(C)
|
:00447AE2 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004479D8(U), :004479EA(U), :004479FC(U), :00447A0E(U), :00447A20(U)
|:00447A32(U), :00447A44(U), :00447A56(U), :00447A68(U), :00447A77(U)
|:00447ABF(U), :00447AD0(U), :00447AD5(U), :00447AD9(U), :00447AE0(U)
|
:00447AE5 5E                      pop esi
:00447AE6 8BE5                    mov esp, ebp
:00447AE8 5D                      pop ebp
:00447AE9 C21000                  ret 0010



:00447AEC CB794400                DWORD 004479CB
:00447AF0 CB794400                DWORD 004479CB
:00447AF4 CB794400                DWORD 004479CB
:00447AF8 CB794400                DWORD 004479CB
:00447AFC CB794400                DWORD 004479CB
:00447B00 DD794400                DWORD 004479DD
:00447B04 CB794400                DWORD 004479CB
:00447B08 EF794400                DWORD 004479EF
:00447B0C 017A4400                DWORD 00447A01
:00447B10 EF794400                DWORD 004479EF
:00447B14 137A4400                DWORD 00447A13
:00447B18 257A4400                DWORD 00447A25
:00447B1C 377A4400                DWORD 00447A37
:00447B20 497A4400                DWORD 00447A49
:00447B24 5B7A4400                DWORD 00447A5B
:00447B28 CB794400                DWORD 004479CB
:00447B2C 5B7A4400                DWORD 00447A5B
:00447B30 6A7A4400                DWORD 00447A6A
:00447B34 5B7A4400                DWORD 00447A5B
:00447B38 D77A4400                DWORD 00447AD7
:00447B3C D77A4400                DWORD 00447AD7
:00447B40 DB7A4400                DWORD 00447ADB
:00447B44 797A4400                DWORD 00447A79
:00447B48 DB7A4400                DWORD 00447ADB
:00447B4C E27A4400                DWORD 00447AE2


:00447B50 000000                  BYTE  3 DUP(0)



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447B0D(C)
|
:00447B53 1801                    sbb byte ptr [ecx], al
:00447B55 1802                    sbb byte ptr [edx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447B11(C)
|
:00447B57 1803                    sbb byte ptr [ebx], al
:00447B59 0318                    add ebx, dword ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447B15(C)
|
:00447B5B 1818                    sbb byte ptr [eax], bl
:00447B5D 0405                    add al, 05
:00447B5F 06                      push es
:00447B60 07                      pop es
:00447B61 0809                    or byte ptr [ecx], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447B1D(C)
|
:00447B63 0A0B                    or cl, byte ptr [ebx]
:00447B65 0C0D                    or al, 0D
:00447B67 0E                      push cs
:00447B68 0E                      push cs
:00447B69 0E                      push cs
:00447B6A 0F                      BYTE 0fh
:00447B6B 0F                      BYTE 0fh
:00447B6C 1810                    sbb byte ptr [eax], dl
:00447B6E 1010                    adc byte ptr [eax], dl
:00447B70 1011                    adc byte ptr [ecx], dl
:00447B72 1111                    adc dword ptr [ecx], edx
:00447B74 1212                    adc dl, byte ptr [edx]
:00447B76 1212                    adc dl, byte ptr [edx]
:00447B78 1313                    adc edx, dword ptr [ebx]
:00447B7A 1313                    adc edx, dword ptr [ebx]
:00447B7C 1818                    sbb byte ptr [eax], bl
:00447B7E 1414                    adc al, 14
:00447B80 1515151515              adc eax, 15151515
:00447B85 1515151516              adc eax, 16151515
:00447B8A 17                      pop ss

* Referenced by a CALL at Address:
|:00444E58   
|
:00447B8B 55                      push ebp
:00447B8C 8BEC                    mov ebp, esp
:00447B8E 83EC0C                  sub esp, 0000000C
:00447B91 894DF8                  mov dword ptr [ebp-08], ecx
:00447B94 8B4508                  mov eax, dword ptr [ebp+08]
:00447B97 25FF000000              and eax, 000000FF
:00447B9C 8945F4                  mov dword ptr [ebp-0C], eax
:00447B9F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00447BA2 83E906                  sub ecx, 00000006
:00447BA5 894DF4                  mov dword ptr [ebp-0C], ecx
:00447BA8 837DF434                cmp dword ptr [ebp-0C], 00000034
:00447BAC 0F8741010000            ja 00447CF3
:00447BB2 8B45F4                  mov eax, dword ptr [ebp-0C]
:00447BB5 33D2                    xor edx, edx
:00447BB7 8A90A57D4400            mov dl, byte ptr [eax+00447DA5]
:00447BBD FF2495357D4400          jmp dword ptr [4*edx+00447D35]
:00447BC4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447BC7 F7D9                    neg ecx
:00447BC9 1BC9                    sbb ecx, ecx
:00447BCB 83E106                  and ecx, 00000006
:00447BCE 83C1FF                  add ecx, FFFFFFFF
:00447BD1 894DFC                  mov dword ptr [ebp-04], ecx
:00447BD4 E921010000              jmp 00447CFA
:00447BD9 8B550C                  mov edx, dword ptr [ebp+0C]
:00447BDC F7DA                    neg edx
:00447BDE 1BD2                    sbb edx, edx
:00447BE0 83E210                  and edx, 00000010
:00447BE3 83C2FF                  add edx, FFFFFFFF
:00447BE6 8955FC                  mov dword ptr [ebp-04], edx
:00447BE9 E90C010000              jmp 00447CFA
:00447BEE 8B450C                  mov eax, dword ptr [ebp+0C]
:00447BF1 F7D8                    neg eax
:00447BF3 1BC0                    sbb eax, eax
:00447BF5 83E00C                  and eax, 0000000C
:00447BF8 83C0FF                  add eax, FFFFFFFF
:00447BFB 8945FC                  mov dword ptr [ebp-04], eax
:00447BFE E9F7000000              jmp 00447CFA
:00447C03 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447C06 F7D9                    neg ecx
:00447C08 1BC9                    sbb ecx, ecx
:00447C0A 83E10C                  and ecx, 0000000C
:00447C0D 83C1FF                  add ecx, FFFFFFFF
:00447C10 894DFC                  mov dword ptr [ebp-04], ecx
:00447C13 E9E2000000              jmp 00447CFA
:00447C18 8B550C                  mov edx, dword ptr [ebp+0C]
:00447C1B F7DA                    neg edx
:00447C1D 1BD2                    sbb edx, edx
:00447C1F 83E20E                  and edx, 0000000E
:00447C22 83C2FF                  add edx, FFFFFFFF
:00447C25 8955FC                  mov dword ptr [ebp-04], edx
:00447C28 E9CD000000              jmp 00447CFA
:00447C2D 8B450C                  mov eax, dword ptr [ebp+0C]
:00447C30 F7D8                    neg eax
:00447C32 1BC0                    sbb eax, eax
:00447C34 83E011                  and eax, 00000011
:00447C37 83C0FF                  add eax, FFFFFFFF
:00447C3A 8945FC                  mov dword ptr [ebp-04], eax
:00447C3D E9B8000000              jmp 00447CFA
:00447C42 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447C45 F7D9                    neg ecx
:00447C47 1BC9                    sbb ecx, ecx
:00447C49 83E10F                  and ecx, 0000000F
:00447C4C 83C1FF                  add ecx, FFFFFFFF
:00447C4F 894DFC                  mov dword ptr [ebp-04], ecx
:00447C52 E9A3000000              jmp 00447CFA
:00447C57 8B550C                  mov edx, dword ptr [ebp+0C]
:00447C5A F7DA                    neg edx
:00447C5C 1BD2                    sbb edx, edx
:00447C5E 83E20D                  and edx, 0000000D
:00447C61 83C2FF                  add edx, FFFFFFFF
:00447C64 8955FC                  mov dword ptr [ebp-04], edx
:00447C67 E98E000000              jmp 00447CFA
:00447C6C 8B450C                  mov eax, dword ptr [ebp+0C]
:00447C6F F7D8                    neg eax
:00447C71 1BC0                    sbb eax, eax
:00447C73 83E012                  and eax, 00000012
:00447C76 83C0FF                  add eax, FFFFFFFF
:00447C79 8945FC                  mov dword ptr [ebp-04], eax
:00447C7C EB7C                    jmp 00447CFA
:00447C7E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447C81 F7D9                    neg ecx
:00447C83 1BC9                    sbb ecx, ecx
:00447C85 83E11C                  and ecx, 0000001C
:00447C88 83C1FF                  add ecx, FFFFFFFF
:00447C8B 894DFC                  mov dword ptr [ebp-04], ecx
:00447C8E EB6A                    jmp 00447CFA

* Possible Reference to String Resource ID=00006: ""
                                  |
:00447C90 C745FC06000000          mov [ebp-04], 00000006
:00447C97 EB61                    jmp 00447CFA
:00447C99 C745FC13000000          mov [ebp-04], 00000013
:00447CA0 EB58                    jmp 00447CFA

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00447CA2 C745FC14000000          mov [ebp-04], 00000014
:00447CA9 EB4F                    jmp 00447CFA

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:00447CAB C745FC15000000          mov [ebp-04], 00000015
:00447CB2 EB46                    jmp 00447CFA
:00447CB4 C745FC16000000          mov [ebp-04], 00000016
:00447CBB EB3D                    jmp 00447CFA
:00447CBD C745FC17000000          mov [ebp-04], 00000017
:00447CC4 EB34                    jmp 00447CFA
:00447CC6 C745FC18000000          mov [ebp-04], 00000018
:00447CCD EB2B                    jmp 00447CFA
:00447CCF C745FC19000000          mov [ebp-04], 00000019
:00447CD6 EB22                    jmp 00447CFA

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:00447CD8 C745FC1A000000          mov [ebp-04], 0000001A
:00447CDF EB19                    jmp 00447CFA

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00447CE1 C745FC04000000          mov [ebp-04], 00000004
:00447CE8 EB10                    jmp 00447CFA
:00447CEA C745FC1C000000          mov [ebp-04], 0000001C
:00447CF1 EB07                    jmp 00447CFA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447BAC(C)
|
:00447CF3 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447BD4(U), :00447BE9(U), :00447BFE(U), :00447C13(U), :00447C28(U)
|:00447C3D(U), :00447C52(U), :00447C67(U), :00447C7C(U), :00447C8E(U)
|:00447C97(U), :00447CA0(U), :00447CA9(U), :00447CB2(U), :00447CBB(U)
|:00447CC4(U), :00447CCD(U), :00447CD6(U), :00447CDF(U), :00447CE8(U)
|:00447CF1(U)
|
:00447CFA 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00447CFE 7507                    jne 00447D07
:00447D00 B801000000              mov eax, 00000001
:00447D05 EB28                    jmp 00447D2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447CFE(C)
|
:00447D07 6A01                    push 00000001
:00447D09 8A55FC                  mov dl, byte ptr [ebp-04]
:00447D0C 52                      push edx
:00447D0D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00447D10 E815D2FFFF              call 00444F2A
:00447D15 85C0                    test eax, eax
:00447D17 7504                    jne 00447D1D
:00447D19 33C0                    xor eax, eax
:00447D1B EB12                    jmp 00447D2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447D17(C)
|
:00447D1D 8B45F8                  mov eax, dword ptr [ebp-08]
:00447D20 8B08                    mov ecx, dword ptr [eax]
:00447D22 80CD02                  or ch, 02
:00447D25 8B55F8                  mov edx, dword ptr [ebp-08]
:00447D28 890A                    mov dword ptr [edx], ecx
:00447D2A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447D05(U), :00447D1B(U)
|
:00447D2F 8BE5                    mov esp, ebp
:00447D31 5D                      pop ebp
:00447D32 C20800                  ret 0008



:00447D35 C47B4400                DWORD 00447BC4
:00447D39 D97B4400                DWORD 00447BD9
:00447D3D EE7B4400                DWORD 00447BEE
:00447D41 037C4400                DWORD 00447C03
:00447D45 C47B4400                DWORD 00447BC4
:00447D49 187C4400                DWORD 00447C18
:00447D4D 2D7C4400                DWORD 00447C2D
:00447D51 6C7C4400                DWORD 00447C6C
:00447D55 2D7C4400                DWORD 00447C2D
:00447D59 EE7B4400                DWORD 00447BEE
:00447D5D 427C4400                DWORD 00447C42
:00447D61 577C4400                DWORD 00447C57
:00447D65 187C4400                DWORD 00447C18
:00447D69 C47B4400                DWORD 00447BC4
:00447D6D 907C4400                DWORD 00447C90
:00447D71 907C4400                DWORD 00447C90
:00447D75 997C4400                DWORD 00447C99
:00447D79 A27C4400                DWORD 00447CA2
:00447D7D AB7C4400                DWORD 00447CAB
:00447D81 B47C4400                DWORD 00447CB4
:00447D85 BD7C4400                DWORD 00447CBD
:00447D89 C67C4400                DWORD 00447CC6
:00447D8D CF7C4400                DWORD 00447CCF
:00447D91 D87C4400                DWORD 00447CD8
:00447D95 E17C4400                DWORD 00447CE1
:00447D99 7E7C4400                DWORD 00447C7E
:00447D9D EA7C4400                DWORD 00447CEA
:00447DA1 F37C4400                DWORD 00447CF3


:00447DA5 001B                    add byte ptr [ebx], bl
:00447DA7 0102                    add dword ptr [edx], eax
:00447DA9 1B1B                    sbb ebx, dword ptr [ebx]
:00447DAB 1B1B                    sbb ebx, dword ptr [ebx]
:00447DAD 1B1B                    sbb ebx, dword ptr [ebx]
:00447DAF 1B1B                    sbb ebx, dword ptr [ebx]
:00447DB1 1B1B                    sbb ebx, dword ptr [ebx]
:00447DB3 1B1B                    sbb ebx, dword ptr [ebx]
:00447DB5 1B03                    sbb eax, dword ptr [ebx]
:00447DB7 03041B                  add eax, dword ptr [ebx+ebx]
:00447DBA 1B1B                    sbb ebx, dword ptr [ebx]
:00447DBC 0505060607              add eax, 07060605
:00447DC1 0809                    or byte ptr [ecx], cl
:00447DC3 0A0B                    or cl, byte ptr [ebx]
:00447DC5 0C0D                    or al, 0D
:00447DC7 0E                      push cs

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447D82(C)
|
:00447DC8 0E                      push cs
:00447DC9 0E                      push cs
:00447DCA 0E                      push cs
:00447DCB 1B1B                    sbb ebx, dword ptr [ebx]
:00447DCD 0F                      BYTE 0fh
:00447DCE 0F                      BYTE 0fh
:00447DCF 1011                    adc byte ptr [ecx], dl
:00447DD1 1213                    adc dl, byte ptr [ebx]
:00447DD3 1415                    adc al, 15
:00447DD5 16                      push ss
:00447DD6 17                      pop ss
:00447DD7 1819                    sbb byte ptr [ecx], bl
:00447DD9 1A                      BYTE 1ah


* Referenced by a CALL at Address:
|:00444E81   
|
:00447DDA 55                      push ebp
:00447DDB 8BEC                    mov ebp, esp
:00447DDD 83EC08                  sub esp, 00000008
:00447DE0 894DFC                  mov dword ptr [ebp-04], ecx
:00447DE3 8B4508                  mov eax, dword ptr [ebp+08]
:00447DE6 25FF000000              and eax, 000000FF
:00447DEB 8945F8                  mov dword ptr [ebp-08], eax
:00447DEE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00447DF1 83E904                  sub ecx, 00000004
:00447DF4 894DF8                  mov dword ptr [ebp-08], ecx
:00447DF7 837DF838                cmp dword ptr [ebp-08], 00000038
:00447DFB 7734                    ja 00447E31
:00447DFD 8B45F8                  mov eax, dword ptr [ebp-08]
:00447E00 33D2                    xor edx, edx
:00447E02 8A90537E4400            mov dl, byte ptr [eax+00447E53]
:00447E08 FF2495377E4400          jmp dword ptr [4*edx+00447E37]
:00447E0F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00447E12 8B11                    mov edx, dword ptr [ecx]
:00447E14 80CE04                  or dh, 04
:00447E17 8B45FC                  mov eax, dword ptr [ebp-04]
:00447E1A 8910                    mov dword ptr [eax], edx
:00447E1C EB13                    jmp 00447E31
:00447E1E 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00447E22 740D                    je 00447E31
:00447E24 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00447E27 8B11                    mov edx, dword ptr [ecx]
:00447E29 80CE04                  or dh, 04
:00447E2C 8B45FC                  mov eax, dword ptr [ebp-04]
:00447E2F 8910                    mov dword ptr [eax], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447DFB(C), :00447E1C(U), :00447E22(C)
|
:00447E31 8BE5                    mov esp, ebp
:00447E33 5D                      pop ebp
:00447E34 C20800                  ret 0008



:00447E37 0F7E4400                DWORD 00447E0F
:00447E3B 0F7E4400                DWORD 00447E0F
:00447E3F 1E7E4400                DWORD 00447E1E
:00447E43 0F7E4400                DWORD 00447E0F
:00447E47 1E7E4400                DWORD 00447E1E
:00447E4B 1E7E4400                DWORD 00447E1E
:00447E4F 317E4400                DWORD 00447E31


:00447E53 0006                    add byte ptr [esi], al
:00447E55 06                      push es
:00447E56 06                      push es
:00447E57 06                      push es
:00447E58 06                      push es
:00447E59 06                      push es
:00447E5A 06                      push es
:00447E5B 06                      push es
:00447E5C 06                      push es
:00447E5D 06                      push es
:00447E5E 06                      push es
:00447E5F 06                      push es
:00447E60 0106                    add dword ptr [esi], eax
:00447E62 06                      push es
:00447E63 06                      push es
:00447E64 06                      push es
:00447E65 06                      push es
:00447E66 06                      push es
:00447E67 06                      push es
:00447E68 06                      push es
:00447E69 06                      push es
:00447E6A 06                      push es
:00447E6B 06                      push es
:00447E6C 06                      push es
:00447E6D 06                      push es
:00447E6E 06                      push es
:00447E6F 06                      push es
:00447E70 06                      push es
:00447E71 06                      push es
:00447E72 06                      push es
:00447E73 06                      push es
:00447E74 06                      push es
:00447E75 06                      push es
:00447E76 0206                    add al, byte ptr [esi]
:00447E78 06                      push es
:00447E79 06                      push es
:00447E7A 06                      push es
:00447E7B 0303                    add eax, dword ptr [ebx]
:00447E7D 06                      push es
:00447E7E 06                      push es
:00447E7F 06                      push es
:00447E80 06                      push es
:00447E81 06                      push es

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447E3C(C)
|
:00447E82 06                      push es
:00447E83 06                      push es
:00447E84 06                      push es
:00447E85 06                      push es

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447E40(C)
|
:00447E86 06                      push es
:00447E87 06                      push es
:00447E88 0406                    add al, 06

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447E44(C)
|
:00447E8A 06                      push es
:00447E8B 05                      BYTE 05h


* Referenced by a CALL at Address:
|:00444E91   
|
:00447E8C 55                      push ebp
:00447E8D 8BEC                    mov ebp, esp
:00447E8F 83EC0C                  sub esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447E4C(C)
|
:00447E92 894DF8                  mov dword ptr [ebp-08], ecx
:00447E95 8B4508                  mov eax, dword ptr [ebp+08]
:00447E98 25FF000000              and eax, 000000FF
:00447E9D 8945F4                  mov dword ptr [ebp-0C], eax
:00447EA0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00447EA3 83E904                  sub ecx, 00000004
:00447EA6 894DF4                  mov dword ptr [ebp-0C], ecx
:00447EA9 837DF435                cmp dword ptr [ebp-0C], 00000035
:00447EAD 7760                    ja 00447F0F
:00447EAF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00447EB2 33D2                    xor edx, edx
:00447EB4 8A90697F4400            mov dl, byte ptr [eax+00447F69]
:00447EBA FF2495517F4400          jmp dword ptr [4*edx+00447F51]
:00447EC1 C745FC01000000          mov [ebp-04], 00000001
:00447EC8 EB4C                    jmp 00447F16
:00447ECA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447ECD F7D9                    neg ecx
:00447ECF 1BC9                    sbb ecx, ecx
:00447ED1 83E103                  and ecx, 00000003
:00447ED4 83C1FF                  add ecx, FFFFFFFF
:00447ED7 894DFC                  mov dword ptr [ebp-04], ecx
:00447EDA EB3A                    jmp 00447F16
:00447EDC C745FC00000000          mov [ebp-04], 00000000
:00447EE3 EB31                    jmp 00447F16
:00447EE5 8B55F8                  mov edx, dword ptr [ebp-08]
:00447EE8 837A0400                cmp dword ptr [edx+04], 00000000
:00447EEC 740F                    je 00447EFD
:00447EEE 8B450C                  mov eax, dword ptr [ebp+0C]
:00447EF1 F7D8                    neg eax
:00447EF3 1BC0                    sbb eax, eax
:00447EF5 F7D8                    neg eax
:00447EF7 48                      dec eax
:00447EF8 8945FC                  mov dword ptr [ebp-04], eax
:00447EFB EB10                    jmp 00447F0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447EEC(C)
|
:00447EFD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447F00 F7D9                    neg ecx
:00447F02 1BC9                    sbb ecx, ecx
:00447F04 83E102                  and ecx, 00000002
:00447F07 83C1FF                  add ecx, FFFFFFFF
:00447F0A 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447EFB(U)
|
:00447F0D EB07                    jmp 00447F16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447EAD(C)
|
:00447F0F C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447EC8(U), :00447EDA(U), :00447EE3(U), :00447F0D(U)
|
:00447F16 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00447F1A 7507                    jne 00447F23
:00447F1C B801000000              mov eax, 00000001
:00447F21 EB28                    jmp 00447F4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447F1A(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00447F23 6A02                    push 00000002
:00447F25 8A55FC                  mov dl, byte ptr [ebp-04]
:00447F28 52                      push edx
:00447F29 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00447F2C E8B3EBFFFF              call 00446AE4
:00447F31 85C0                    test eax, eax
:00447F33 7504                    jne 00447F39
:00447F35 33C0                    xor eax, eax
:00447F37 EB12                    jmp 00447F4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447F33(C)
|
:00447F39 8B45F8                  mov eax, dword ptr [ebp-08]
:00447F3C 8B08                    mov ecx, dword ptr [eax]
:00447F3E 80CD10                  or ch, 10
:00447F41 8B55F8                  mov edx, dword ptr [ebp-08]
:00447F44 890A                    mov dword ptr [edx], ecx
:00447F46 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447F21(U), :00447F37(U)
|
:00447F4B 8BE5                    mov esp, ebp
:00447F4D 5D                      pop ebp
:00447F4E C20800                  ret 0008



:00447F51 C17E4400                DWORD 00447EC1
:00447F55 C17E4400                DWORD 00447EC1
:00447F59 CA7E4400                DWORD 00447ECA
:00447F5D DC7E4400                DWORD 00447EDC
:00447F61 E57E4400                DWORD 00447EE5
:00447F65 0F7F4400                DWORD 00447F0F


:00447F69 000505050505            add byte ptr [05050505], al
:00447F6F 0505050505              add eax, 05050505
:00447F74 0505010505              add eax, 05050105
:00447F79 0505050505              add eax, 05050505
:00447F7E 0505050505              add eax, 05050505
:00447F83 0505050505              add eax, 05050505
:00447F88 0505050502              add eax, 02050505
:00447F8D 0505050503              add eax, 03050505
:00447F92 030505050505            add eax, dword ptr [05050505]
:00447F98 0505050505              add eax, 05050505
:00447F9D 05                      BYTE 05h
:00447F9E 04                      BYTE 04h


* Referenced by a CALL at Address:
|:00444EA9   
|
:00447F9F 55                      push ebp
:00447FA0 8BEC                    mov ebp, esp
:00447FA2 83EC0C                  sub esp, 0000000C
:00447FA5 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447F62(C)
|
:00447FA8 8B4508                  mov eax, dword ptr [ebp+08]
:00447FAB 25FF000000              and eax, 000000FF
:00447FB0 8945F4                  mov dword ptr [ebp-0C], eax
:00447FB3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00447FB6 83E904                  sub ecx, 00000004
:00447FB9 894DF4                  mov dword ptr [ebp-0C], ecx
:00447FBC 837DF439                cmp dword ptr [ebp-0C], 00000039
:00447FC0 7775                    ja 00448037
:00447FC2 8B45F4                  mov eax, dword ptr [ebp-0C]
:00447FC5 33D2                    xor edx, edx
:00447FC7 8A909D804400            mov dl, byte ptr [eax+0044809D]
:00447FCD FF249579804400          jmp dword ptr [4*edx+00448079]

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00447FD4 C745FC07000000          mov [ebp-04], 00000007
:00447FDB EB61                    jmp 0044803E
:00447FDD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00447FE0 F7D9                    neg ecx
:00447FE2 1BC9                    sbb ecx, ecx
:00447FE4 83E104                  and ecx, 00000004
:00447FE7 83C1FF                  add ecx, FFFFFFFF
:00447FEA 894DFC                  mov dword ptr [ebp-04], ecx
:00447FED EB4F                    jmp 0044803E
:00447FEF 8B550C                  mov edx, dword ptr [ebp+0C]
:00447FF2 F7DA                    neg edx
:00447FF4 1BD2                    sbb edx, edx
:00447FF6 83E205                  and edx, 00000005
:00447FF9 83C2FF                  add edx, FFFFFFFF
:00447FFC 8955FC                  mov dword ptr [ebp-04], edx
:00447FFF EB3D                    jmp 0044803E

* Possible Reference to String Resource ID=00006: ""
                                  |
:00448001 C745FC06000000          mov [ebp-04], 00000006
:00448008 EB34                    jmp 0044803E
:0044800A 8B450C                  mov eax, dword ptr [ebp+0C]
:0044800D F7D8                    neg eax
:0044800F 1BC0                    sbb eax, eax
:00448011 83E01C                  and eax, 0000001C
:00448014 83C0FF                  add eax, FFFFFFFF
:00448017 8945FC                  mov dword ptr [ebp-04], eax
:0044801A EB22                    jmp 0044803E
:0044801C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044801F F7D9                    neg ecx
:00448021 1BC9                    sbb ecx, ecx
:00448023 83E109                  and ecx, 00000009
:00448026 83C1FF                  add ecx, FFFFFFFF
:00448029 894DFC                  mov dword ptr [ebp-04], ecx
:0044802C EB10                    jmp 0044803E

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044802E C745FC08000000          mov [ebp-04], 00000008
:00448035 EB07                    jmp 0044803E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00447FC0(C)
|
:00448037 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00447FDB(U), :00447FED(U), :00447FFF(U), :00448008(U), :0044801A(U)
|:0044802C(U), :00448035(U)
|
:0044803E 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00448042 7507                    jne 0044804B
:00448044 B801000000              mov eax, 00000001
:00448049 EB28                    jmp 00448073

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448042(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044804B 6A02                    push 00000002
:0044804D 8A55FC                  mov dl, byte ptr [ebp-04]
:00448050 52                      push edx
:00448051 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00448054 E8D1CEFFFF              call 00444F2A
:00448059 85C0                    test eax, eax
:0044805B 7504                    jne 00448061
:0044805D 33C0                    xor eax, eax
:0044805F EB12                    jmp 00448073

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044805B(C)
|
:00448061 8B45F8                  mov eax, dword ptr [ebp-08]
:00448064 8B08                    mov ecx, dword ptr [eax]
:00448066 80CD20                  or ch, 20
:00448069 8B55F8                  mov edx, dword ptr [ebp-08]
:0044806C 890A                    mov dword ptr [edx], ecx
:0044806E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448049(U), :0044805F(U)
|
:00448073 8BE5                    mov esp, ebp
:00448075 5D                      pop ebp
:00448076 C20800                  ret 0008



:00448079 D47F4400                DWORD 00447FD4
:0044807D DD7F4400                DWORD 00447FDD
:00448081 D47F4400                DWORD 00447FD4
:00448085 EF7F4400                DWORD 00447FEF
:00448089 01804400                DWORD 00448001
:0044808D 0A804400                DWORD 0044800A
:00448091 1C804400                DWORD 0044801C
:00448095 2E804400                DWORD 0044802E
:00448099 37804400                DWORD 00448037


:0044809D 0008                    add byte ptr [eax], cl
:0044809F 0801                    or byte ptr [ecx], al
:004480A1 0808                    or byte ptr [eax], cl
:004480A3 0808                    or byte ptr [eax], cl
:004480A5 0808                    or byte ptr [eax], cl
:004480A7 0808                    or byte ptr [eax], cl
:004480A9 0802                    or byte ptr [edx], al
:004480AB 0808                    or byte ptr [eax], cl
:004480AD 0808                    or byte ptr [eax], cl
:004480AF 0808                    or byte ptr [eax], cl
:004480B1 0808                    or byte ptr [eax], cl
:004480B3 0808                    or byte ptr [eax], cl
:004480B5 0808                    or byte ptr [eax], cl
:004480B7 0808                    or byte ptr [eax], cl
:004480B9 0808                    or byte ptr [eax], cl
:004480BB 0808                    or byte ptr [eax], cl
:004480BD 0808                    or byte ptr [eax], cl
:004480BF 0803                    or byte ptr [ebx], al
:004480C1 0808                    or byte ptr [eax], cl
:004480C3 0808                    or byte ptr [eax], cl
:004480C5 0404                    add al, 04
:004480C7 0808                    or byte ptr [eax], cl
:004480C9 0808                    or byte ptr [eax], cl
:004480CB 0808                    or byte ptr [eax], cl
:004480CD 0808                    or byte ptr [eax], cl
:004480CF 0808                    or byte ptr [eax], cl
:004480D1 080508080607            or byte ptr [07060808], al

* Referenced by a CALL at Addresses:
|:0042A83A   , :0042ACDF   , :0042AD82   , :0042BAC0   , :0042C583   
|:00444A15   , :00444A53   , :00444AA8   , :00444AB6   , :00444AC6   
|:00444B55   , :00444B71   , :00444BE4   , :00444BF2   , :00444C02   
|:00444C70   , :00444CDE   
|
:004480D7 55                      push ebp
:004480D8 8BEC                    mov ebp, esp
:004480DA 51                      push ecx
:004480DB 894DFC                  mov dword ptr [ebp-04], ecx
:004480DE 8B450C                  mov eax, dword ptr [ebp+0C]
:004480E1 25FF000000              and eax, 000000FF
:004480E6 85C0                    test eax, eax
:004480E8 7C66                    jl 00448150
:004480EA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004480ED 81E1FF000000            and ecx, 000000FF
:004480F3 83F903                  cmp ecx, 00000003
:004480F6 7F58                    jg 00448150
:004480F8 8B5508                  mov edx, dword ptr [ebp+08]
:004480FB 81E2FF000000            and edx, 000000FF
:00448101 83FA40                  cmp edx, 00000040
:00448104 7F4A                    jg 00448150
:00448106 8B450C                  mov eax, dword ptr [ebp+0C]
:00448109 25FF000000              and eax, 000000FF
:0044810E 69C008010000            imul eax, 00000108
:00448114 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448117 81E1FF000000            and ecx, 000000FF
:0044811D 83BC88C8A04700FF        cmp dword ptr [eax+4*ecx+0047A0C8], FFFFFFFF
:00448125 7429                    je 00448150
:00448127 8B550C                  mov edx, dword ptr [ebp+0C]
:0044812A 81E2FF000000            and edx, 000000FF
:00448130 69D208010000            imul edx, 00000108
:00448136 8B4508                  mov eax, dword ptr [ebp+08]
:00448139 25FF000000              and eax, 000000FF
:0044813E 8B8C82C8A04700          mov ecx, dword ptr [edx+4*eax+0047A0C8]
:00448145 51                      push ecx
:00448146 B9F8544B00              mov ecx, 004B54F8
:0044814B E8CA130200              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004480E8(C), :004480F6(C), :00448104(C), :00448125(C)
|
:00448150 8BE5                    mov esp, ebp
:00448152 5D                      pop ebp
:00448153 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004449FB   , :00444B2F   , :00444C44   , :004484C6   , :004499BC   
|
:00448156 55                      push ebp
:00448157 8BEC                    mov ebp, esp
:00448159 83EC28                  sub esp, 00000028
:0044815C 894DDC                  mov dword ptr [ebp-24], ecx
:0044815F 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00448162 E889D5FBFF              call 004056F0
:00448167 837D1401                cmp dword ptr [ebp+14], 00000001
:0044816B 740E                    je 0044817B
:0044816D 837D1405                cmp dword ptr [ebp+14], 00000005
:00448171 7408                    je 0044817B
:00448173 8A4508                  mov al, byte ptr [ebp+08]
:00448176 8845DB                  mov byte ptr [ebp-25], al
:00448179 EB06                    jmp 00448181

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044816B(C), :00448171(C)
|
:0044817B 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044817E 884DDB                  mov byte ptr [ebp-25], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448179(U)
|
:00448181 8A55DB                  mov dl, byte ptr [ebp-25]
:00448184 8855FC                  mov byte ptr [ebp-04], dl
:00448187 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044818A 81E1FF000000            and ecx, 000000FF
:00448190 6BC924                  imul ecx, 00000024
:00448193 81C1B83B4B00            add ecx, 004B3BB8
:00448199 E8A29AFEFF              call 00431C40
:0044819E 50                      push eax
:0044819F 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:004481A2 E8F9E8FEFF              call 00436AA0
:004481A7 8B45E4                  mov eax, dword ptr [ebp-1C]
:004481AA 25FF000000              and eax, 000000FF
:004481AF 6BC003                  imul eax, 00000003
:004481B2 8945F4                  mov dword ptr [ebp-0C], eax
:004481B5 8B4DE5                  mov ecx, dword ptr [ebp-1B]
:004481B8 81E1FF000000            and ecx, 000000FF
:004481BE 6BC903                  imul ecx, 00000003
:004481C1 894DE8                  mov dword ptr [ebp-18], ecx
:004481C4 B958494B00              mov ecx, 004B4958
:004481C9 E8442B0000              call 0044AD12
:004481CE 8B55F4                  mov edx, dword ptr [ebp-0C]
:004481D1 2BD0                    sub edx, eax
:004481D3 C1E204                  shl edx, 04
:004481D6 8955EC                  mov dword ptr [ebp-14], edx
:004481D9 B958494B00              mov ecx, 004B4958
:004481DE E8402B0000              call 0044AD23
:004481E3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004481E6 2BC8                    sub ecx, eax
:004481E8 83C102                  add ecx, 00000002
:004481EB C1E104                  shl ecx, 04
:004481EE 83C108                  add ecx, 00000008
:004481F1 894DF8                  mov dword ptr [ebp-08], ecx
:004481F4 837D1405                cmp dword ptr [ebp+14], 00000005
:004481F8 7409                    je 00448203
:004481FA C745F0003D0100          mov [ebp-10], 00013D00
:00448201 EB07                    jmp 0044820A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004481F8(C)
|
:00448203 C745F0006B0100          mov [ebp-10], 00016B00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448201(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044820A 6A04                    push 00000004
:0044820C 6A00                    push 00000000
:0044820E 6A00                    push 00000000
:00448210 B9F0174B00              mov ecx, 004B17F0
:00448215 E8760D0300              call 00478F90
:0044821A 0345F0                  add eax, dword ptr [ebp-10]
:0044821D 50                      push eax
:0044821E 6A30                    push 00000030
:00448220 6A30                    push 00000030
:00448222 8B55F8                  mov edx, dword ptr [ebp-08]
:00448225 52                      push edx
:00448226 8B45EC                  mov eax, dword ptr [ebp-14]
:00448229 50                      push eax
:0044822A E8362A0000              call 0044AC65
:0044822F 83C414                  add esp, 00000014
:00448232 C745E000000000          mov [ebp-20], 00000000
:00448239 EB09                    jmp 00448244

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044839A(U)
|
:0044823B 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044823E 83C101                  add ecx, 00000001
:00448241 894DE0                  mov dword ptr [ebp-20], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448239(U)
|
:00448244 837DE003                cmp dword ptr [ebp-20], 00000003
:00448248 0F8351010000            jnb 0044839F

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044824E 6A02                    push 00000002
:00448250 B9A83B4B00              mov ecx, 004B3BA8
:00448255 E8B676FDFF              call 0041F910
:0044825A E8D47EFCFF              call 00410133
:0044825F 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448261 6A04                    push 00000004
:00448263 6A00                    push 00000000
:00448265 6A00                    push 00000000
:00448267 B9F0174B00              mov ecx, 004B17F0
:0044826C E81F0D0300              call 00478F90
:00448271 0345F0                  add eax, dword ptr [ebp-10]
:00448274 50                      push eax
:00448275 6A30                    push 00000030
:00448277 6A30                    push 00000030
:00448279 8B55F8                  mov edx, dword ptr [ebp-08]
:0044827C 52                      push edx
:0044827D 8B45EC                  mov eax, dword ptr [ebp-14]
:00448280 50                      push eax
:00448281 E81E290000              call 0044ABA4
:00448286 83C418                  add esp, 00000018
:00448289 837D1400                cmp dword ptr [ebp+14], 00000000
:0044828D 753C                    jne 004482CB

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044828F 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448291 6A04                    push 00000004
:00448293 6A00                    push 00000000
:00448295 6A00                    push 00000000
:00448297 B9F0174B00              mov ecx, 004B17F0
:0044829C E8EF0C0300              call 00478F90
:004482A1 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004482A4 69C900090000            imul ecx, 00000900
:004482AA 8D940800600000          lea edx, dword ptr [eax+ecx+00006000]
:004482B1 52                      push edx
:004482B2 6A30                    push 00000030
:004482B4 6A30                    push 00000030
:004482B6 8B45F8                  mov eax, dword ptr [ebp-08]
:004482B9 50                      push eax
:004482BA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004482BD 51                      push ecx
:004482BE E8E1280000              call 0044ABA4
:004482C3 83C418                  add esp, 00000018
:004482C6 E9BB000000              jmp 00448386

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044828D(C)
|
:004482CB 837D1401                cmp dword ptr [ebp+14], 00000001
:004482CF 7539                    jne 0044830A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004482D1 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004482D3 6A04                    push 00000004
:004482D5 6A00                    push 00000000
:004482D7 6A00                    push 00000000
:004482D9 B9F0174B00              mov ecx, 004B17F0
:004482DE E8AD0C0300              call 00478F90
:004482E3 8B55E0                  mov edx, dword ptr [ebp-20]
:004482E6 69D200090000            imul edx, 00000900
:004482EC 8D8410007B0000          lea eax, dword ptr [eax+edx+00007B00]
:004482F3 50                      push eax
:004482F4 6A30                    push 00000030
:004482F6 6A30                    push 00000030
:004482F8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004482FB 51                      push ecx
:004482FC 8B55EC                  mov edx, dword ptr [ebp-14]
:004482FF 52                      push edx
:00448300 E89F280000              call 0044ABA4
:00448305 83C418                  add esp, 00000018
:00448308 EB7C                    jmp 00448386

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004482CF(C)
|
:0044830A 837D1402                cmp dword ptr [ebp+14], 00000002
:0044830E 7539                    jne 00448349

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448310 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448312 6A04                    push 00000004
:00448314 6A00                    push 00000000
:00448316 6A00                    push 00000000
:00448318 B9F0174B00              mov ecx, 004B17F0
:0044831D E86E0C0300              call 00478F90
:00448322 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00448325 69C900090000            imul ecx, 00000900
:0044832B 8D940800960000          lea edx, dword ptr [eax+ecx+00009600]
:00448332 52                      push edx
:00448333 6A30                    push 00000030
:00448335 6A30                    push 00000030
:00448337 8B45F8                  mov eax, dword ptr [ebp-08]
:0044833A 50                      push eax
:0044833B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044833E 51                      push ecx
:0044833F E860280000              call 0044ABA4
:00448344 83C418                  add esp, 00000018
:00448347 EB3D                    jmp 00448386

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044830E(C)
|
:00448349 837D1405                cmp dword ptr [ebp+14], 00000005
:0044834D 7537                    jne 00448386

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044834F 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448351 6A04                    push 00000004
:00448353 6A00                    push 00000000
:00448355 6A00                    push 00000000
:00448357 B9F0174B00              mov ecx, 004B17F0
:0044835C E82F0C0300              call 00478F90
:00448361 8B55E0                  mov edx, dword ptr [ebp-20]
:00448364 69D200090000            imul edx, 00000900
:0044836A 8D841000960100          lea eax, dword ptr [eax+edx+00019600]
:00448371 50                      push eax
:00448372 6A30                    push 00000030
:00448374 6A30                    push 00000030
:00448376 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00448379 51                      push ecx
:0044837A 8B55EC                  mov edx, dword ptr [ebp-14]
:0044837D 52                      push edx
:0044837E E821280000              call 0044ABA4
:00448383 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004482C6(U), :00448308(U), :00448347(U), :0044834D(C)
|
:00448386 E8C37DFCFF              call 0041014E
:0044838B E84072FEFF              call 0042F5D0

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00448390 6A02                    push 00000002
:00448392 E89F73FEFF              call 0042F736
:00448397 83C404                  add esp, 00000004
:0044839A E99CFEFFFF              jmp 0044823B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448248(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044839F 6A04                    push 00000004
:004483A1 E89073FEFF              call 0042F736
:004483A6 83C404                  add esp, 00000004
:004483A9 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004483AB 6A04                    push 00000004
:004483AD 6A00                    push 00000000
:004483AF 6A00                    push 00000000
:004483B1 B9F0174B00              mov ecx, 004B17F0
:004483B6 E8D50B0300              call 00478F90
:004483BB 0345F0                  add eax, dword ptr [ebp-10]
:004483BE 50                      push eax
:004483BF 6A30                    push 00000030
:004483C1 6A30                    push 00000030
:004483C3 8B45F8                  mov eax, dword ptr [ebp-08]
:004483C6 50                      push eax
:004483C7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004483CA 51                      push ecx
:004483CB E8D4270000              call 0044ABA4
:004483D0 83C418                  add esp, 00000018
:004483D3 8BE5                    mov esp, ebp
:004483D5 5D                      pop ebp
:004483D6 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00444BB3   , :00444CC4   , :00444D32   
|
:004483D9 55                      push ebp
:004483DA 8BEC                    mov ebp, esp
:004483DC 6AFF                    push FFFFFFFF
:004483DE 6866994700              push 00479966
:004483E3 64A100000000            mov eax, dword ptr fs:[00000000]
:004483E9 50                      push eax
:004483EA 64892500000000          mov dword ptr fs:[00000000], esp
:004483F1 81EC0C010000            sub esp, 0000010C
:004483F7 898DE8FEFFFF            mov dword ptr [ebp+FFFFFEE8], ecx
:004483FD 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00448403 E838D2FBFF              call 00405640
:00448408 C745FC00000000          mov [ebp-04], 00000000
:0044840F 8B4510                  mov eax, dword ptr [ebp+10]
:00448412 25FF000000              and eax, 000000FF
:00448417 83F81F                  cmp eax, 0000001F
:0044841A 750C                    jne 00448428
:0044841C C785ECFEFFFF0D000000    mov dword ptr [ebp+FFFFFEEC], 0000000D
:00448426 EB5A                    jmp 00448482

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044841A(C)
|
:00448428 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044842B 81E1FF000000            and ecx, 000000FF
:00448431 83F920                  cmp ecx, 00000020
:00448434 750C                    jne 00448442
:00448436 C785ECFEFFFF12000000    mov dword ptr [ebp+FFFFFEEC], 00000012
:00448440 EB40                    jmp 00448482

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448434(C)
|
:00448442 8B5510                  mov edx, dword ptr [ebp+10]
:00448445 81E2FF000000            and edx, 000000FF
:0044844B 83FA11                  cmp edx, 00000011
:0044844E 751E                    jne 0044846E
:00448450 837D1800                cmp dword ptr [ebp+18], 00000000
:00448454 750C                    jne 00448462
:00448456 C785ECFEFFFF0F000000    mov dword ptr [ebp+FFFFFEEC], 0000000F
:00448460 EB0A                    jmp 0044846C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448454(C)
|
:00448462 C785ECFEFFFF0B000000    mov dword ptr [ebp+FFFFFEEC], 0000000B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448460(U)
|
:0044846C EB14                    jmp 00448482

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044844E(C)
|
:0044846E C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00448475 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0044847B E8E0D1FBFF              call 00405660
:00448480 EB5B                    jmp 004484DD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448426(U), :00448440(U), :0044846C(U)
|
:00448482 8A4514                  mov al, byte ptr [ebp+14]
:00448485 50                      push eax
:00448486 8A8DECFEFFFF            mov cl, byte ptr [ebp+FFFFFEEC]
:0044848C 51                      push ecx
:0044848D 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00448493 E892CAFFFF              call 00444F2A
:00448498 85C0                    test eax, eax
:0044849A 7514                    jne 004484B0
:0044849C C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004484A3 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004484A9 E8B2D1FBFF              call 00405660
:004484AE EB2D                    jmp 004484DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044849A(C)
|
:004484B0 8B5514                  mov edx, dword ptr [ebp+14]
:004484B3 52                      push edx
:004484B4 8A4510                  mov al, byte ptr [ebp+10]
:004484B7 50                      push eax
:004484B8 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004484BB 51                      push ecx
:004484BC 8A5508                  mov dl, byte ptr [ebp+08]
:004484BF 52                      push edx
:004484C0 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:004484C6 E88BFCFFFF              call 00448156
:004484CB C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004484D2 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004484D8 E883D1FBFF              call 00405660

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448480(U), :004484AE(U)
|
:004484DD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004484E0 64890D00000000          mov dword ptr fs:[00000000], ecx
:004484E7 8BE5                    mov esp, ebp
:004484E9 5D                      pop ebp
:004484EA C21400                  ret 0014



* Referenced by a CALL at Address:
|:00444A39   
|
:004484ED 55                      push ebp
:004484EE 8BEC                    mov ebp, esp
:004484F0 83EC2C                  sub esp, 0000002C
:004484F3 894DD4                  mov dword ptr [ebp-2C], ecx
:004484F6 8D4DE0                  lea ecx, dword ptr [ebp-20]
:004484F9 E8F2D1FBFF              call 004056F0
:004484FE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448501 81E1FF000000            and ecx, 000000FF
:00448507 6BC924                  imul ecx, 00000024
:0044850A 81C1B83B4B00            add ecx, 004B3BB8
:00448510 E82B97FEFF              call 00431C40
:00448515 50                      push eax
:00448516 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00448519 E882E5FEFF              call 00436AA0
:0044851E 8B45E0                  mov eax, dword ptr [ebp-20]
:00448521 25FF000000              and eax, 000000FF
:00448526 6BC003                  imul eax, 00000003
:00448529 8945F0                  mov dword ptr [ebp-10], eax
:0044852C 8B4DE1                  mov ecx, dword ptr [ebp-1F]
:0044852F 81E1FF000000            and ecx, 000000FF
:00448535 6BC903                  imul ecx, 00000003
:00448538 894DDC                  mov dword ptr [ebp-24], ecx
:0044853B B958494B00              mov ecx, 004B4958
:00448540 E8CD270000              call 0044AD12
:00448545 8B55F0                  mov edx, dword ptr [ebp-10]
:00448548 2BD0                    sub edx, eax
:0044854A C1E204                  shl edx, 04
:0044854D 83EA08                  sub edx, 00000008
:00448550 8955E8                  mov dword ptr [ebp-18], edx
:00448553 B958494B00              mov ecx, 004B4958
:00448558 E8C6270000              call 0044AD23
:0044855D 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00448560 2BC8                    sub ecx, eax
:00448562 83C102                  add ecx, 00000002
:00448565 C1E104                  shl ecx, 04
:00448568 894DF4                  mov dword ptr [ebp-0C], ecx
:0044856B B958494B00              mov ecx, 004B4958
:00448570 E89D270000              call 0044AD12
:00448575 8B55F0                  mov edx, dword ptr [ebp-10]
:00448578 2BD0                    sub edx, eax
:0044857A 8955F8                  mov dword ptr [ebp-08], edx
:0044857D B958494B00              mov ecx, 004B4958
:00448582 E89C270000              call 0044AD23
:00448587 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044858A 2BC8                    sub ecx, eax
:0044858C 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044858F 6A04                    push 00000004
:00448591 6A00                    push 00000000
:00448593 6A00                    push 00000000
:00448595 B9F0174B00              mov ecx, 004B17F0
:0044859A E8F1090300              call 00478F90
:0044859F 05001D0100              add eax, 00011D00
:004485A4 50                      push eax
:004485A5 6A40                    push 00000040
:004485A7 6A40                    push 00000040
:004485A9 8B55F4                  mov edx, dword ptr [ebp-0C]
:004485AC 52                      push edx
:004485AD 8B45E8                  mov eax, dword ptr [ebp-18]
:004485B0 50                      push eax
:004485B1 E8AF260000              call 0044AC65
:004485B6 83C414                  add esp, 00000014
:004485B9 8A4D10                  mov cl, byte ptr [ebp+10]
:004485BC 51                      push ecx
:004485BD 8A550C                  mov dl, byte ptr [ebp+0C]
:004485C0 52                      push edx
:004485C1 8A4508                  mov al, byte ptr [ebp+08]
:004485C4 50                      push eax
:004485C5 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004485C8 E87ECEFFFF              call 0044544B
:004485CD 83F803                  cmp eax, 00000003
:004485D0 740E                    je 004485E0
:004485D2 8B4D10                  mov ecx, dword ptr [ebp+10]
:004485D5 81E1FF000000            and ecx, 000000FF
:004485DB 83F90D                  cmp ecx, 0000000D
:004485DE 7509                    jne 004485E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004485D0(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004485E0 C745D803000000          mov [ebp-28], 00000003
:004485E7 EB07                    jmp 004485F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004485DE(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004485E9 C745D802000000          mov [ebp-28], 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004485E7(U)
|
:004485F0 6A00                    push 00000000
:004485F2 8A550C                  mov dl, byte ptr [ebp+0C]
:004485F5 52                      push edx
:004485F6 8A4508                  mov al, byte ptr [ebp+08]
:004485F9 50                      push eax
:004485FA 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004485FD E81ADCFFFF              call 0044621C
:00448602 8945E4                  mov dword ptr [ebp-1C], eax
:00448605 C745EC00000000          mov [ebp-14], 00000000
:0044860C EB09                    jmp 00448617

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448816(U)
|
:0044860E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00448611 83C101                  add ecx, 00000001
:00448614 894DEC                  mov dword ptr [ebp-14], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044860C(U)
|
:00448617 8B55EC                  mov edx, dword ptr [ebp-14]
:0044861A 3B55D8                  cmp edx, dword ptr [ebp-28]
:0044861D 0F83F8010000            jnb 0044881B

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00448623 6A02                    push 00000002
:00448625 B9A83B4B00              mov ecx, 004B3BA8
:0044862A E8E172FDFF              call 0041F910
:0044862F E8FF7AFCFF              call 00410133
:00448634 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448636 6A04                    push 00000004
:00448638 6A00                    push 00000000
:0044863A 6A00                    push 00000000
:0044863C B9F0174B00              mov ecx, 004B17F0
:00448641 E84A090300              call 00478F90
:00448646 05001D0100              add eax, 00011D00
:0044864B 50                      push eax
:0044864C 6A40                    push 00000040
:0044864E 6A40                    push 00000040
:00448650 8B45F4                  mov eax, dword ptr [ebp-0C]
:00448653 50                      push eax
:00448654 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448657 51                      push ecx
:00448658 E847250000              call 0044ABA4
:0044865D 83C418                  add esp, 00000018
:00448660 8B5510                  mov edx, dword ptr [ebp+10]
:00448663 81E2FF000000            and edx, 000000FF
:00448669 83FA2C                  cmp edx, 0000002C
:0044866C 7411                    je 0044867F
:0044866E 8B4510                  mov eax, dword ptr [ebp+10]
:00448671 25FF000000              and eax, 000000FF
:00448676 83F83C                  cmp eax, 0000003C
:00448679 0F85D1000000            jne 00448750

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044866C(C)
|
:0044867F 837DE400                cmp dword ptr [ebp-1C], 00000000
:00448683 0F85C7000000            jne 00448750
:00448689 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044868C 51                      push ecx
:0044868D 8B55F8                  mov edx, dword ptr [ebp-08]
:00448690 52                      push edx
:00448691 E8EC99FFFF              call 00442082
:00448696 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448699 6A04                    push 00000004
:0044869B 6A00                    push 00000000
:0044869D 6A00                    push 00000000
:0044869F B9F0174B00              mov ecx, 004B17F0
:004486A4 E8E7080300              call 00478F90
:004486A9 05003D0100              add eax, 00013D00
:004486AE 50                      push eax
:004486AF 6A40                    push 00000040
:004486B1 6A40                    push 00000040
:004486B3 8B45F4                  mov eax, dword ptr [ebp-0C]
:004486B6 50                      push eax
:004486B7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004486BA 51                      push ecx
:004486BB E8A5250000              call 0044AC65
:004486C0 83C414                  add esp, 00000014
:004486C3 8B55FC                  mov edx, dword ptr [ebp-04]
:004486C6 52                      push edx
:004486C7 8B45F8                  mov eax, dword ptr [ebp-08]
:004486CA 50                      push eax
:004486CB E8B299FFFF              call 00442082
:004486D0 83C408                  add esp, 00000008
:004486D3 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004486D6 8B11                    mov edx, dword ptr [ecx]
:004486D8 83E208                  and edx, 00000008
:004486DB 85D2                    test edx, edx
:004486DD 743D                    je 0044871C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004486DF 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004486E1 6A04                    push 00000004
:004486E3 6A00                    push 00000000
:004486E5 6A00                    push 00000000
:004486E7 B9F0174B00              mov ecx, 004B17F0
:004486EC E89F080300              call 00478F90
:004486F1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004486F4 69C900090000            imul ecx, 00000900
:004486FA 8D940800CC0000          lea edx, dword ptr [eax+ecx+0000CC00]
:00448701 52                      push edx
:00448702 6A30                    push 00000030
:00448704 6A30                    push 00000030
:00448706 8B45F4                  mov eax, dword ptr [ebp-0C]
:00448709 83C008                  add eax, 00000008
:0044870C 50                      push eax
:0044870D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448710 83C108                  add ecx, 00000008
:00448713 51                      push ecx
:00448714 E88B240000              call 0044ABA4
:00448719 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004486DD(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044871C 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044871E 6A04                    push 00000004
:00448720 6A00                    push 00000000
:00448722 6A00                    push 00000000
:00448724 B9F0174B00              mov ecx, 004B17F0
:00448729 E862080300              call 00478F90
:0044872E 8B55EC                  mov edx, dword ptr [ebp-14]
:00448731 C1E20C                  shl edx, 0C
:00448734 03C2                    add eax, edx
:00448736 50                      push eax
:00448737 6A40                    push 00000040
:00448739 6A40                    push 00000040
:0044873B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044873E 50                      push eax
:0044873F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448742 51                      push ecx
:00448743 E85C240000              call 0044ABA4
:00448748 83C418                  add esp, 00000018
:0044874B E9B2000000              jmp 00448802

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448679(C), :00448683(C)
|
:00448750 8B55FC                  mov edx, dword ptr [ebp-04]
:00448753 52                      push edx
:00448754 8B45F8                  mov eax, dword ptr [ebp-08]
:00448757 50                      push eax
:00448758 E82599FFFF              call 00442082
:0044875D 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448760 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448762 6A04                    push 00000004
:00448764 6A00                    push 00000000
:00448766 6A00                    push 00000000
:00448768 B9F0174B00              mov ecx, 004B17F0
:0044876D E81E080300              call 00478F90
:00448772 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00448775 C1E10C                  shl ecx, 0C
:00448778 03C1                    add eax, ecx
:0044877A 50                      push eax
:0044877B 6A40                    push 00000040
:0044877D 6A40                    push 00000040
:0044877F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00448782 52                      push edx
:00448783 8B45E8                  mov eax, dword ptr [ebp-18]
:00448786 50                      push eax
:00448787 E818240000              call 0044ABA4
:0044878C 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044878F 6A04                    push 00000004
:00448791 6A00                    push 00000000
:00448793 6A00                    push 00000000
:00448795 B9F0174B00              mov ecx, 004B17F0
:0044879A E8F1070300              call 00478F90
:0044879F 05003D0100              add eax, 00013D00
:004487A4 50                      push eax
:004487A5 6A40                    push 00000040
:004487A7 6A40                    push 00000040
:004487A9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004487AC 51                      push ecx
:004487AD 8B55E8                  mov edx, dword ptr [ebp-18]
:004487B0 52                      push edx
:004487B1 E8AF240000              call 0044AC65
:004487B6 83C414                  add esp, 00000014
:004487B9 8B45D4                  mov eax, dword ptr [ebp-2C]
:004487BC 8B08                    mov ecx, dword ptr [eax]
:004487BE 83E108                  and ecx, 00000008
:004487C1 85C9                    test ecx, ecx
:004487C3 743D                    je 00448802

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004487C5 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004487C7 6A04                    push 00000004
:004487C9 6A00                    push 00000000
:004487CB 6A00                    push 00000000
:004487CD B9F0174B00              mov ecx, 004B17F0
:004487D2 E8B9070300              call 00478F90
:004487D7 8B55EC                  mov edx, dword ptr [ebp-14]
:004487DA 69D200090000            imul edx, 00000900
:004487E0 8D841000CC0000          lea eax, dword ptr [eax+edx+0000CC00]
:004487E7 50                      push eax
:004487E8 6A30                    push 00000030
:004487EA 6A30                    push 00000030
:004487EC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004487EF 83C108                  add ecx, 00000008
:004487F2 51                      push ecx
:004487F3 8B55E8                  mov edx, dword ptr [ebp-18]
:004487F6 83C208                  add edx, 00000008
:004487F9 52                      push edx
:004487FA E8A5230000              call 0044ABA4
:004487FF 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044874B(U), :004487C3(C)
|
:00448802 E84779FCFF              call 0041014E
:00448807 E8C46DFEFF              call 0042F5D0

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044880C 6A02                    push 00000002
:0044880E E8236FFEFF              call 0042F736
:00448813 83C404                  add esp, 00000004
:00448816 E9F3FDFFFF              jmp 0044860E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044861D(C)
|
:0044881B 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044881E 8B08                    mov ecx, dword ptr [eax]
:00448820 83E108                  and ecx, 00000008
:00448823 85C9                    test ecx, ecx
:00448825 0F845B010000            je 00448986

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044882B C745EC02000000          mov [ebp-14], 00000002

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00448832 6A02                    push 00000002
:00448834 B9A83B4B00              mov ecx, 004B3BA8
:00448839 E8D270FDFF              call 0041F910
:0044883E E8F078FCFF              call 00410133
:00448843 8B5510                  mov edx, dword ptr [ebp+10]
:00448846 81E2FF000000            and edx, 000000FF
:0044884C 83FA2C                  cmp edx, 0000002C
:0044884F 7411                    je 00448862
:00448851 8B4510                  mov eax, dword ptr [ebp+10]
:00448854 25FF000000              and eax, 000000FF
:00448859 83F83C                  cmp eax, 0000003C
:0044885C 0F85A7000000            jne 00448909

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044884F(C)
|
:00448862 837DE400                cmp dword ptr [ebp-1C], 00000000
:00448866 0F859D000000            jne 00448909
:0044886C 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044886E 6A04                    push 00000004
:00448870 6A00                    push 00000000
:00448872 6A00                    push 00000000
:00448874 B9F0174B00              mov ecx, 004B17F0
:00448879 E812070300              call 00478F90
:0044887E 05003D0100              add eax, 00013D00
:00448883 50                      push eax
:00448884 6A40                    push 00000040
:00448886 6A40                    push 00000040
:00448888 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044888B 51                      push ecx
:0044888C 8B55E8                  mov edx, dword ptr [ebp-18]
:0044888F 52                      push edx
:00448890 E80F230000              call 0044ABA4
:00448895 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448898 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044889A 6A04                    push 00000004
:0044889C 6A00                    push 00000000
:0044889E 6A00                    push 00000000
:004488A0 B9F0174B00              mov ecx, 004B17F0
:004488A5 E8E6060300              call 00478F90
:004488AA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004488AD 69C900090000            imul ecx, 00000900
:004488B3 8D940800CC0000          lea edx, dword ptr [eax+ecx+0000CC00]
:004488BA 52                      push edx
:004488BB 6A30                    push 00000030
:004488BD 6A30                    push 00000030
:004488BF 8B45F4                  mov eax, dword ptr [ebp-0C]
:004488C2 83C008                  add eax, 00000008
:004488C5 50                      push eax
:004488C6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004488C9 83C108                  add ecx, 00000008
:004488CC 51                      push ecx
:004488CD E8D2220000              call 0044ABA4
:004488D2 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004488D5 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004488D7 6A04                    push 00000004
:004488D9 6A00                    push 00000000
:004488DB 6A00                    push 00000000
:004488DD B9F0174B00              mov ecx, 004B17F0
:004488E2 E8A9060300              call 00478F90
:004488E7 8B55EC                  mov edx, dword ptr [ebp-14]
:004488EA 83EA01                  sub edx, 00000001
:004488ED C1E20C                  shl edx, 0C
:004488F0 03C2                    add eax, edx
:004488F2 50                      push eax
:004488F3 6A40                    push 00000040
:004488F5 6A40                    push 00000040
:004488F7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004488FA 50                      push eax
:004488FB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004488FE 51                      push ecx
:004488FF E8A0220000              call 0044ABA4
:00448904 83C418                  add esp, 00000018
:00448907 EB69                    jmp 00448972

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044885C(C), :00448866(C)
|
:00448909 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044890B 6A04                    push 00000004
:0044890D 6A00                    push 00000000
:0044890F 6A00                    push 00000000
:00448911 B9F0174B00              mov ecx, 004B17F0
:00448916 E875060300              call 00478F90
:0044891B 05003D0100              add eax, 00013D00
:00448920 50                      push eax
:00448921 6A40                    push 00000040
:00448923 6A40                    push 00000040
:00448925 8B55F4                  mov edx, dword ptr [ebp-0C]
:00448928 52                      push edx
:00448929 8B45E8                  mov eax, dword ptr [ebp-18]
:0044892C 50                      push eax
:0044892D E872220000              call 0044ABA4
:00448932 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448935 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448937 6A04                    push 00000004
:00448939 6A00                    push 00000000
:0044893B 6A00                    push 00000000
:0044893D B9F0174B00              mov ecx, 004B17F0
:00448942 E849060300              call 00478F90
:00448947 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044894A 69C900090000            imul ecx, 00000900
:00448950 8D940800CC0000          lea edx, dword ptr [eax+ecx+0000CC00]
:00448957 52                      push edx
:00448958 6A30                    push 00000030
:0044895A 6A30                    push 00000030
:0044895C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044895F 83C008                  add eax, 00000008
:00448962 50                      push eax
:00448963 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448966 83C108                  add ecx, 00000008
:00448969 51                      push ecx
:0044896A E835220000              call 0044ABA4
:0044896F 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448907(U)
|
:00448972 E8D777FCFF              call 0041014E
:00448977 E8546CFEFF              call 0042F5D0

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044897C 6A02                    push 00000002
:0044897E E8B36DFEFF              call 0042F736
:00448983 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448825(C)
|
:00448986 E8A877FCFF              call 00410133
:0044898B 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044898D 6A04                    push 00000004
:0044898F 6A00                    push 00000000
:00448991 6A00                    push 00000000
:00448993 B9F0174B00              mov ecx, 004B17F0
:00448998 E8F3050300              call 00478F90
:0044899D 05001D0100              add eax, 00011D00
:004489A2 50                      push eax
:004489A3 6A40                    push 00000040
:004489A5 6A40                    push 00000040
:004489A7 8B55F4                  mov edx, dword ptr [ebp-0C]
:004489AA 52                      push edx
:004489AB 8B45E8                  mov eax, dword ptr [ebp-18]
:004489AE 50                      push eax
:004489AF E8F0210000              call 0044ABA4
:004489B4 83C418                  add esp, 00000018
:004489B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004489BA 51                      push ecx
:004489BB 8B55F8                  mov edx, dword ptr [ebp-08]
:004489BE 52                      push edx
:004489BF E8BE96FFFF              call 00442082
:004489C4 83C408                  add esp, 00000008
:004489C7 8A450C                  mov al, byte ptr [ebp+0C]
:004489CA 50                      push eax
:004489CB 8A4D08                  mov cl, byte ptr [ebp+08]
:004489CE 51                      push ecx
:004489CF E83A6D0000              call 0044F70E
:004489D4 83C408                  add esp, 00000008
:004489D7 8B5508                  mov edx, dword ptr [ebp+08]
:004489DA 81E2FF000000            and edx, 000000FF
:004489E0 6BD224                  imul edx, 00000024
:004489E3 81C2B83B4B00            add edx, 004B3BB8
:004489E9 52                      push edx
:004489EA B9E0484B00              mov ecx, 004B48E0
:004489EF E8AF98FFFF              call 004422A3
:004489F4 E85577FCFF              call 0041014E

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004489F9 6A02                    push 00000002
:004489FB E8366DFEFF              call 0042F736
:00448A00 83C404                  add esp, 00000004
:00448A03 8BE5                    mov esp, ebp
:00448A05 5D                      pop ebp
:00448A06 C21000                  ret 0010



* Referenced by a CALL at Address:
|:00444A77   
|
:00448A09 55                      push ebp
:00448A0A 8BEC                    mov ebp, esp
:00448A0C 83EC64                  sub esp, 00000064
:00448A0F 894DA4                  mov dword ptr [ebp-5C], ecx
:00448A12 8D4DBC                  lea ecx, dword ptr [ebp-44]
:00448A15 E8D6CCFBFF              call 004056F0
:00448A1A 8D4DC8                  lea ecx, dword ptr [ebp-38]
:00448A1D E8CECCFBFF              call 004056F0
:00448A22 8B4510                  mov eax, dword ptr [ebp+10]
:00448A25 25FF000000              and eax, 000000FF
:00448A2A 83F817                  cmp eax, 00000017
:00448A2D 750E                    jne 00448A3D
:00448A2F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00448A32 81E1FF000000            and ecx, 000000FF
:00448A38 83F918                  cmp ecx, 00000018
:00448A3B 7410                    je 00448A4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448A2D(C)
|
:00448A3D C745E001000000          mov [ebp-20], 00000001

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00448A44 C745E408000000          mov [ebp-1C], 00000008
:00448A4B EB0E                    jmp 00448A5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448A3B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00448A4D C745E005000000          mov [ebp-20], 00000005

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448A54 C745E404000000          mov [ebp-1C], 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448A4B(U)
|
:00448A5B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00448A5E 81E1FF000000            and ecx, 000000FF
:00448A64 6BC924                  imul ecx, 00000024
:00448A67 81C1B83B4B00            add ecx, 004B3BB8
:00448A6D E8CE91FEFF              call 00431C40
:00448A72 50                      push eax
:00448A73 8D4DBC                  lea ecx, dword ptr [ebp-44]
:00448A76 E825E0FEFF              call 00436AA0
:00448A7B 8B55BC                  mov edx, dword ptr [ebp-44]
:00448A7E 81E2FF000000            and edx, 000000FF
:00448A84 6BD203                  imul edx, 00000003
:00448A87 8955E8                  mov dword ptr [ebp-18], edx
:00448A8A 8B4510                  mov eax, dword ptr [ebp+10]
:00448A8D 25FF000000              and eax, 000000FF
:00448A92 83F83B                  cmp eax, 0000003B
:00448A95 740E                    je 00448AA5
:00448A97 8B4D10                  mov ecx, dword ptr [ebp+10]
:00448A9A 81E1FF000000            and ecx, 000000FF
:00448AA0 83F90E                  cmp ecx, 0000000E
:00448AA3 7534                    jne 00448AD9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448A95(C)
|
:00448AA5 8B55BD                  mov edx, dword ptr [ebp-43]
:00448AA8 81E2FF000000            and edx, 000000FF
:00448AAE 85D2                    test edx, edx
:00448AB0 750D                    jne 00448ABF
:00448AB2 8B45BD                  mov eax, dword ptr [ebp-43]
:00448AB5 25FF000000              and eax, 000000FF
:00448ABA 8945A0                  mov dword ptr [ebp-60], eax
:00448ABD EB0F                    jmp 00448ACE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448AB0(C)
|
:00448ABF 8B4DBD                  mov ecx, dword ptr [ebp-43]
:00448AC2 81E1FF000000            and ecx, 000000FF
:00448AC8 83E901                  sub ecx, 00000001
:00448ACB 894DA0                  mov dword ptr [ebp-60], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448ABD(U)
|
:00448ACE 8B55A0                  mov edx, dword ptr [ebp-60]
:00448AD1 6BD203                  imul edx, 00000003
:00448AD4 8955DC                  mov dword ptr [ebp-24], edx
:00448AD7 EB0E                    jmp 00448AE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448AA3(C)
|
:00448AD9 8B45BD                  mov eax, dword ptr [ebp-43]
:00448ADC 25FF000000              and eax, 000000FF
:00448AE1 6BC003                  imul eax, 00000003
:00448AE4 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448AD7(U)
|
:00448AE7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00448AEA 81E1FF000000            and ecx, 000000FF
:00448AF0 6BC924                  imul ecx, 00000024
:00448AF3 81C1B83B4B00            add ecx, 004B3BB8
:00448AF9 E84291FEFF              call 00431C40
:00448AFE 50                      push eax
:00448AFF 8D4DC8                  lea ecx, dword ptr [ebp-38]
:00448B02 E899DFFEFF              call 00436AA0
:00448B07 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00448B0A 81E1FF000000            and ecx, 000000FF
:00448B10 6BC903                  imul ecx, 00000003
:00448B13 894DB8                  mov dword ptr [ebp-48], ecx
:00448B16 8B55C9                  mov edx, dword ptr [ebp-37]
:00448B19 81E2FF000000            and edx, 000000FF
:00448B1F 6BD203                  imul edx, 00000003
:00448B22 8955C0                  mov dword ptr [ebp-40], edx
:00448B25 B958494B00              mov ecx, 004B4958
:00448B2A E8E3210000              call 0044AD12
:00448B2F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00448B32 2BC8                    sub ecx, eax
:00448B34 C1E104                  shl ecx, 04
:00448B37 894DD8                  mov dword ptr [ebp-28], ecx
:00448B3A B958494B00              mov ecx, 004B4958
:00448B3F E8DF210000              call 0044AD23
:00448B44 8B55DC                  mov edx, dword ptr [ebp-24]
:00448B47 2BD0                    sub edx, eax
:00448B49 83C202                  add edx, 00000002
:00448B4C C1E204                  shl edx, 04
:00448B4F 83C208                  add edx, 00000008
:00448B52 8955D0                  mov dword ptr [ebp-30], edx
:00448B55 B958494B00              mov ecx, 004B4958
:00448B5A E8B3210000              call 0044AD12
:00448B5F 8B4DB8                  mov ecx, dword ptr [ebp-48]
:00448B62 2BC8                    sub ecx, eax
:00448B64 C1E104                  shl ecx, 04
:00448B67 894DF0                  mov dword ptr [ebp-10], ecx
:00448B6A B958494B00              mov ecx, 004B4958
:00448B6F E8AF210000              call 0044AD23
:00448B74 8B55C0                  mov edx, dword ptr [ebp-40]
:00448B77 2BD0                    sub edx, eax
:00448B79 83C202                  add edx, 00000002
:00448B7C C1E204                  shl edx, 04
:00448B7F 83C208                  add edx, 00000008
:00448B82 8955D4                  mov dword ptr [ebp-2C], edx
:00448B85 8B4510                  mov eax, dword ptr [ebp+10]
:00448B88 25FF000000              and eax, 000000FF
:00448B8D 83F83B                  cmp eax, 0000003B
:00448B90 7412                    je 00448BA4
:00448B92 8B4D10                  mov ecx, dword ptr [ebp+10]
:00448B95 81E1FF000000            and ecx, 000000FF
:00448B9B 83F90E                  cmp ecx, 0000000E
:00448B9E 0F8551010000            jne 00448CF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448B90(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448BA4 6A04                    push 00000004
:00448BA6 6A00                    push 00000000
:00448BA8 6A00                    push 00000000
:00448BAA B9F0174B00              mov ecx, 004B17F0
:00448BAF E8DC030300              call 00478F90
:00448BB4 05003D0100              add eax, 00013D00
:00448BB9 50                      push eax
:00448BBA 6A30                    push 00000030
:00448BBC 6A30                    push 00000030
:00448BBE 8B55D0                  mov edx, dword ptr [ebp-30]
:00448BC1 52                      push edx
:00448BC2 8B45D8                  mov eax, dword ptr [ebp-28]
:00448BC5 50                      push eax
:00448BC6 E89A200000              call 0044AC65
:00448BCB 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00448BCE C745CC03000000          mov [ebp-34], 00000003
:00448BD5 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00448BD8 8B11                    mov edx, dword ptr [ecx]
:00448BDA 83E220                  and edx, 00000020
:00448BDD 85D2                    test edx, edx
:00448BDF 0F84D5000000            je 00448CBA

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448BE5 6A04                    push 00000004
:00448BE7 6A00                    push 00000000
:00448BE9 6A00                    push 00000000
:00448BEB B9F0174B00              mov ecx, 004B17F0
:00448BF0 E89B030300              call 00478F90
:00448BF5 0500B10000              add eax, 0000B100
:00448BFA 50                      push eax
:00448BFB 6A30                    push 00000030
:00448BFD 6A30                    push 00000030
:00448BFF 8B45D0                  mov eax, dword ptr [ebp-30]
:00448C02 50                      push eax
:00448C03 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00448C06 51                      push ecx
:00448C07 E859200000              call 0044AC65
:00448C0C 83C414                  add esp, 00000014
:00448C0F C745EC00000000          mov [ebp-14], 00000000
:00448C16 EB09                    jmp 00448C21

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448CB5(U)
|
:00448C18 8B55EC                  mov edx, dword ptr [ebp-14]
:00448C1B 83C201                  add edx, 00000001
:00448C1E 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448C16(U)
|
:00448C21 8B45EC                  mov eax, dword ptr [ebp-14]
:00448C24 3B45CC                  cmp eax, dword ptr [ebp-34]
:00448C27 0F838D000000            jnb 00448CBA

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00448C2D 6A02                    push 00000002
:00448C2F B9A83B4B00              mov ecx, 004B3BA8
:00448C34 E8D76CFDFF              call 0041F910
:00448C39 E8F574FCFF              call 00410133
:00448C3E 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448C40 6A04                    push 00000004
:00448C42 6A00                    push 00000000
:00448C44 6A00                    push 00000000
:00448C46 B9F0174B00              mov ecx, 004B17F0
:00448C4B E840030300              call 00478F90
:00448C50 05003D0100              add eax, 00013D00
:00448C55 50                      push eax
:00448C56 6A30                    push 00000030
:00448C58 6A30                    push 00000030
:00448C5A 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00448C5D 51                      push ecx
:00448C5E 8B55D8                  mov edx, dword ptr [ebp-28]
:00448C61 52                      push edx
:00448C62 E83D1F0000              call 0044ABA4
:00448C67 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448C6A 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448C6C 6A04                    push 00000004
:00448C6E 6A00                    push 00000000
:00448C70 6A00                    push 00000000
:00448C72 B9F0174B00              mov ecx, 004B17F0
:00448C77 E814030300              call 00478F90
:00448C7C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00448C7F 69C900090000            imul ecx, 00000900
:00448C85 8D940800B10000          lea edx, dword ptr [eax+ecx+0000B100]
:00448C8C 52                      push edx
:00448C8D 6A30                    push 00000030
:00448C8F 6A30                    push 00000030
:00448C91 8B45D0                  mov eax, dword ptr [ebp-30]
:00448C94 50                      push eax
:00448C95 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00448C98 51                      push ecx
:00448C99 E8061F0000              call 0044ABA4
:00448C9E 83C418                  add esp, 00000018
:00448CA1 E8A874FCFF              call 0041014E
:00448CA6 E82569FEFF              call 0042F5D0

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00448CAB 6A02                    push 00000002
:00448CAD E8846AFEFF              call 0042F736
:00448CB2 83C404                  add esp, 00000004
:00448CB5 E95EFFFFFF              jmp 00448C18

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448BDF(C), :00448C27(C)
|
:00448CBA E87474FCFF              call 00410133
:00448CBF 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448CC1 6A04                    push 00000004
:00448CC3 6A00                    push 00000000
:00448CC5 6A00                    push 00000000
:00448CC7 B9F0174B00              mov ecx, 004B17F0
:00448CCC E8BF020300              call 00478F90
:00448CD1 05003D0100              add eax, 00013D00
:00448CD6 50                      push eax
:00448CD7 6A30                    push 00000030
:00448CD9 6A30                    push 00000030
:00448CDB 8B55D0                  mov edx, dword ptr [ebp-30]
:00448CDE 52                      push edx
:00448CDF 8B45D8                  mov eax, dword ptr [ebp-28]
:00448CE2 50                      push eax
:00448CE3 E8BC1E0000              call 0044ABA4
:00448CE8 83C418                  add esp, 00000018
:00448CEB E85E74FCFF              call 0041014E
:00448CF0 E9BD050000              jmp 004492B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448B9E(C)
|
:00448CF5 6A00                    push 00000000
:00448CF7 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00448CFA 51                      push ecx
:00448CFB 8A5508                  mov dl, byte ptr [ebp+08]
:00448CFE 52                      push edx
:00448CFF 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00448D02 E815D5FFFF              call 0044621C
:00448D07 8945FC                  mov dword ptr [ebp-04], eax
:00448D0A 8B45D8                  mov eax, dword ptr [ebp-28]
:00448D0D 8945F4                  mov dword ptr [ebp-0C], eax
:00448D10 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00448D13 894DF8                  mov dword ptr [ebp-08], ecx
:00448D16 8B55FC                  mov edx, dword ptr [ebp-04]
:00448D19 89559C                  mov dword ptr [ebp-64], edx
:00448D1C 837D9C03                cmp dword ptr [ebp-64], 00000003
:00448D20 0F8760050000            ja 00449286
:00448D26 8B459C                  mov eax, dword ptr [ebp-64]
:00448D29 FF2485B8924400          jmp dword ptr [4*eax+004492B8]
:00448D30 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00448D33 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00448D36 720B                    jb 00448D43
:00448D38 8B55D8                  mov edx, dword ptr [ebp-28]
:00448D3B 2B55F0                  sub edx, dword ptr [ebp-10]
:00448D3E 8955A8                  mov dword ptr [ebp-58], edx
:00448D41 EB09                    jmp 00448D4C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448D36(C)
|
:00448D43 8B45F0                  mov eax, dword ptr [ebp-10]
:00448D46 2B45D8                  sub eax, dword ptr [ebp-28]
:00448D49 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448D41(U)
|
:00448D4C 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00448D4F 2B4DD4                  sub ecx, dword ptr [ebp-2C]
:00448D52 894DAC                  mov dword ptr [ebp-54], ecx
:00448D55 8B55D8                  mov edx, dword ptr [ebp-28]
:00448D58 3B55F0                  cmp edx, dword ptr [ebp-10]
:00448D5B 7214                    jb 00448D71
:00448D5D 8B45A8                  mov eax, dword ptr [ebp-58]
:00448D60 C1E004                  shl eax, 04
:00448D63 99                      cdq
:00448D64 F77DAC                  idiv [ebp-54]
:00448D67 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00448D6A 2BC8                    sub ecx, eax
:00448D6C 894DF4                  mov dword ptr [ebp-0C], ecx
:00448D6F EB12                    jmp 00448D83

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448D5B(C)
|
:00448D71 8B45A8                  mov eax, dword ptr [ebp-58]
:00448D74 C1E004                  shl eax, 04
:00448D77 99                      cdq
:00448D78 F77DAC                  idiv [ebp-54]
:00448D7B 8B55D8                  mov edx, dword ptr [ebp-28]
:00448D7E 03D0                    add edx, eax
:00448D80 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448D6F(U)
|
:00448D83 8B45D0                  mov eax, dword ptr [ebp-30]
:00448D86 83E810                  sub eax, 00000010
:00448D89 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448D8C 6A04                    push 00000004
:00448D8E 6A00                    push 00000000
:00448D90 6A00                    push 00000000
:00448D92 B9F0174B00              mov ecx, 004B17F0
:00448D97 E8F4010300              call 00478F90
:00448D9C 05003D0100              add eax, 00013D00
:00448DA1 50                      push eax
:00448DA2 6A30                    push 00000030
:00448DA4 6A30                    push 00000030
:00448DA6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00448DA9 51                      push ecx
:00448DAA 8B55F4                  mov edx, dword ptr [ebp-0C]
:00448DAD 52                      push edx
:00448DAE E8B21E0000              call 0044AC65
:00448DB3 83C414                  add esp, 00000014
:00448DB6 C745C400000000          mov [ebp-3C], 00000000
:00448DBD EB09                    jmp 00448DC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448E7C(U)
|
:00448DBF 8B45C4                  mov eax, dword ptr [ebp-3C]
:00448DC2 83C001                  add eax, 00000001
:00448DC5 8945C4                  mov dword ptr [ebp-3C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448DBD(U)
|
:00448DC8 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00448DCB 0FAF4DE4                imul ecx, dword ptr [ebp-1C]
:00448DCF 8B55AC                  mov edx, dword ptr [ebp-54]
:00448DD2 83EA20                  sub edx, 00000020
:00448DD5 3BCA                    cmp ecx, edx
:00448DD7 0F83A4000000            jnb 00448E81
:00448DDD 8B45F4                  mov eax, dword ptr [ebp-0C]
:00448DE0 8945B0                  mov dword ptr [ebp-50], eax
:00448DE3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00448DE6 894DB4                  mov dword ptr [ebp-4C], ecx
:00448DE9 8B55D8                  mov edx, dword ptr [ebp-28]
:00448DEC 3B55F0                  cmp edx, dword ptr [ebp-10]
:00448DEF 7216                    jb 00448E07
:00448DF1 8B45E4                  mov eax, dword ptr [ebp-1C]
:00448DF4 0FAF45A8                imul eax, dword ptr [ebp-58]
:00448DF8 33D2                    xor edx, edx
:00448DFA F775AC                  div [ebp-54]
:00448DFD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00448E00 2BC8                    sub ecx, eax
:00448E02 894DF4                  mov dword ptr [ebp-0C], ecx
:00448E05 EB14                    jmp 00448E1B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448DEF(C)
|
:00448E07 8B45E4                  mov eax, dword ptr [ebp-1C]
:00448E0A 0FAF45A8                imul eax, dword ptr [ebp-58]
:00448E0E 33D2                    xor edx, edx
:00448E10 F775AC                  div [ebp-54]
:00448E13 8B55F4                  mov edx, dword ptr [ebp-0C]
:00448E16 03D0                    add edx, eax
:00448E18 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448E05(U)
|
:00448E1B 8B45F8                  mov eax, dword ptr [ebp-08]
:00448E1E 2B45E4                  sub eax, dword ptr [ebp-1C]
:00448E21 8945F8                  mov dword ptr [ebp-08], eax
:00448E24 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00448E27 51                      push ecx
:00448E28 B9A83B4B00              mov ecx, 004B3BA8
:00448E2D E8DE6AFDFF              call 0041F910
:00448E32 8A5510                  mov dl, byte ptr [ebp+10]
:00448E35 52                      push edx
:00448E36 8B45C4                  mov eax, dword ptr [ebp-3C]
:00448E39 50                      push eax
:00448E3A 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00448E3D 51                      push ecx
:00448E3E 8B55B0                  mov edx, dword ptr [ebp-50]
:00448E41 52                      push edx
:00448E42 8B45F8                  mov eax, dword ptr [ebp-08]
:00448E45 50                      push eax
:00448E46 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00448E49 51                      push ecx
:00448E4A 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00448E4D E876040000              call 004492C8
:00448E52 E87967FEFF              call 0042F5D0
:00448E57 8B5510                  mov edx, dword ptr [ebp+10]
:00448E5A 81E2FF000000            and edx, 000000FF
:00448E60 83FA17                  cmp edx, 00000017
:00448E63 740D                    je 00448E72
:00448E65 8B4510                  mov eax, dword ptr [ebp+10]
:00448E68 25FF000000              and eax, 000000FF
:00448E6D 83F818                  cmp eax, 00000018
:00448E70 750A                    jne 00448E7C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448E63(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00448E72 6A02                    push 00000002
:00448E74 E8BD68FEFF              call 0042F736
:00448E79 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448E70(C)
|
:00448E7C E93EFFFFFF              jmp 00448DBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448DD7(C)
|
:00448E81 E900040000              jmp 00449286
:00448E86 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00448E89 2B4DF0                  sub ecx, dword ptr [ebp-10]
:00448E8C 894DA8                  mov dword ptr [ebp-58], ecx
:00448E8F 8B55D0                  mov edx, dword ptr [ebp-30]
:00448E92 3B55D4                  cmp edx, dword ptr [ebp-2C]
:00448E95 720B                    jb 00448EA2
:00448E97 8B45D0                  mov eax, dword ptr [ebp-30]
:00448E9A 2B45D4                  sub eax, dword ptr [ebp-2C]
:00448E9D 8945AC                  mov dword ptr [ebp-54], eax
:00448EA0 EB09                    jmp 00448EAB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448E95(C)
|
:00448EA2 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00448EA5 2B4DD0                  sub ecx, dword ptr [ebp-30]
:00448EA8 894DAC                  mov dword ptr [ebp-54], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448EA0(U)
|
:00448EAB 8B55D8                  mov edx, dword ptr [ebp-28]
:00448EAE 83EA10                  sub edx, 00000010
:00448EB1 8955F4                  mov dword ptr [ebp-0C], edx
:00448EB4 8B45D0                  mov eax, dword ptr [ebp-30]
:00448EB7 3B45D4                  cmp eax, dword ptr [ebp-2C]
:00448EBA 7214                    jb 00448ED0
:00448EBC 8B45AC                  mov eax, dword ptr [ebp-54]
:00448EBF C1E004                  shl eax, 04
:00448EC2 99                      cdq
:00448EC3 F77DA8                  idiv [ebp-58]
:00448EC6 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00448EC9 2BC8                    sub ecx, eax
:00448ECB 894DF8                  mov dword ptr [ebp-08], ecx
:00448ECE EB12                    jmp 00448EE2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448EBA(C)
|
:00448ED0 8B45AC                  mov eax, dword ptr [ebp-54]
:00448ED3 C1E004                  shl eax, 04
:00448ED6 99                      cdq
:00448ED7 F77DA8                  idiv [ebp-58]
:00448EDA 8B55D0                  mov edx, dword ptr [ebp-30]
:00448EDD 03D0                    add edx, eax
:00448EDF 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448ECE(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00448EE2 6A04                    push 00000004
:00448EE4 6A00                    push 00000000
:00448EE6 6A00                    push 00000000
:00448EE8 B9F0174B00              mov ecx, 004B17F0
:00448EED E89E000300              call 00478F90
:00448EF2 05003D0100              add eax, 00013D00
:00448EF7 50                      push eax
:00448EF8 6A30                    push 00000030
:00448EFA 6A30                    push 00000030
:00448EFC 8B45F8                  mov eax, dword ptr [ebp-08]
:00448EFF 50                      push eax
:00448F00 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00448F03 51                      push ecx
:00448F04 E85C1D0000              call 0044AC65
:00448F09 83C414                  add esp, 00000014
:00448F0C C745C400000000          mov [ebp-3C], 00000000
:00448F13 EB09                    jmp 00448F1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448FD3(U)
|
:00448F15 8B55C4                  mov edx, dword ptr [ebp-3C]
:00448F18 83C201                  add edx, 00000001
:00448F1B 8955C4                  mov dword ptr [ebp-3C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448F13(U)
|
:00448F1E 8B45C4                  mov eax, dword ptr [ebp-3C]
:00448F21 0FAF45E4                imul eax, dword ptr [ebp-1C]
:00448F25 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00448F28 83E920                  sub ecx, 00000020
:00448F2B 3BC1                    cmp eax, ecx
:00448F2D 0F83A5000000            jnb 00448FD8
:00448F33 8B55F4                  mov edx, dword ptr [ebp-0C]
:00448F36 8955B0                  mov dword ptr [ebp-50], edx
:00448F39 8B45F8                  mov eax, dword ptr [ebp-08]
:00448F3C 8945B4                  mov dword ptr [ebp-4C], eax
:00448F3F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00448F42 2B4DE4                  sub ecx, dword ptr [ebp-1C]
:00448F45 894DF4                  mov dword ptr [ebp-0C], ecx
:00448F48 8B55D0                  mov edx, dword ptr [ebp-30]
:00448F4B 3B55D4                  cmp edx, dword ptr [ebp-2C]
:00448F4E 7216                    jb 00448F66
:00448F50 8B45E4                  mov eax, dword ptr [ebp-1C]
:00448F53 0FAF45AC                imul eax, dword ptr [ebp-54]
:00448F57 33D2                    xor edx, edx
:00448F59 F775A8                  div [ebp-58]
:00448F5C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00448F5F 2BC8                    sub ecx, eax
:00448F61 894DF8                  mov dword ptr [ebp-08], ecx
:00448F64 EB14                    jmp 00448F7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448F4E(C)
|
:00448F66 8B45E4                  mov eax, dword ptr [ebp-1C]
:00448F69 0FAF45AC                imul eax, dword ptr [ebp-54]
:00448F6D 33D2                    xor edx, edx
:00448F6F F775A8                  div [ebp-58]
:00448F72 8B55F8                  mov edx, dword ptr [ebp-08]
:00448F75 03D0                    add edx, eax
:00448F77 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448F64(U)
|
:00448F7A 8B45E0                  mov eax, dword ptr [ebp-20]
:00448F7D 50                      push eax
:00448F7E B9A83B4B00              mov ecx, 004B3BA8
:00448F83 E88869FDFF              call 0041F910
:00448F88 8A4D10                  mov cl, byte ptr [ebp+10]
:00448F8B 51                      push ecx
:00448F8C 8B55C4                  mov edx, dword ptr [ebp-3C]
:00448F8F 52                      push edx
:00448F90 8B45B4                  mov eax, dword ptr [ebp-4C]
:00448F93 50                      push eax
:00448F94 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00448F97 51                      push ecx
:00448F98 8B55F8                  mov edx, dword ptr [ebp-08]
:00448F9B 52                      push edx
:00448F9C 8B45F4                  mov eax, dword ptr [ebp-0C]
:00448F9F 50                      push eax
:00448FA0 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00448FA3 E820030000              call 004492C8
:00448FA8 E82366FEFF              call 0042F5D0
:00448FAD 8B4D10                  mov ecx, dword ptr [ebp+10]
:00448FB0 81E1FF000000            and ecx, 000000FF
:00448FB6 83F917                  cmp ecx, 00000017
:00448FB9 740E                    je 00448FC9
:00448FBB 8B5510                  mov edx, dword ptr [ebp+10]
:00448FBE 81E2FF000000            and edx, 000000FF
:00448FC4 83FA18                  cmp edx, 00000018
:00448FC7 750A                    jne 00448FD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448FB9(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00448FC9 6A02                    push 00000002
:00448FCB E86667FEFF              call 0042F736
:00448FD0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448FC7(C)
|
:00448FD3 E93DFFFFFF              jmp 00448F15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448F2D(C)
|
:00448FD8 E9A9020000              jmp 00449286
:00448FDD 8B45F0                  mov eax, dword ptr [ebp-10]
:00448FE0 2B45D8                  sub eax, dword ptr [ebp-28]
:00448FE3 8945A8                  mov dword ptr [ebp-58], eax
:00448FE6 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00448FE9 3B4DD4                  cmp ecx, dword ptr [ebp-2C]
:00448FEC 720B                    jb 00448FF9
:00448FEE 8B55D0                  mov edx, dword ptr [ebp-30]
:00448FF1 2B55D4                  sub edx, dword ptr [ebp-2C]
:00448FF4 8955AC                  mov dword ptr [ebp-54], edx
:00448FF7 EB09                    jmp 00449002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448FEC(C)
|
:00448FF9 8B45D4                  mov eax, dword ptr [ebp-2C]
:00448FFC 2B45D0                  sub eax, dword ptr [ebp-30]
:00448FFF 8945AC                  mov dword ptr [ebp-54], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448FF7(U)
|
:00449002 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00449005 83C110                  add ecx, 00000010
:00449008 894DF4                  mov dword ptr [ebp-0C], ecx
:0044900B 8B55D0                  mov edx, dword ptr [ebp-30]
:0044900E 3B55D4                  cmp edx, dword ptr [ebp-2C]
:00449011 7214                    jb 00449027
:00449013 8B45AC                  mov eax, dword ptr [ebp-54]
:00449016 C1E004                  shl eax, 04
:00449019 99                      cdq
:0044901A F77DA8                  idiv [ebp-58]
:0044901D 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00449020 2BC8                    sub ecx, eax
:00449022 894DF8                  mov dword ptr [ebp-08], ecx
:00449025 EB12                    jmp 00449039

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449011(C)
|
:00449027 8B45AC                  mov eax, dword ptr [ebp-54]
:0044902A C1E004                  shl eax, 04
:0044902D 99                      cdq
:0044902E F77DA8                  idiv [ebp-58]
:00449031 8B55D0                  mov edx, dword ptr [ebp-30]
:00449034 03D0                    add edx, eax
:00449036 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449025(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449039 6A04                    push 00000004
:0044903B 6A00                    push 00000000
:0044903D 6A00                    push 00000000
:0044903F B9F0174B00              mov ecx, 004B17F0
:00449044 E847FF0200              call 00478F90
:00449049 05003D0100              add eax, 00013D00
:0044904E 50                      push eax
:0044904F 6A30                    push 00000030
:00449051 6A30                    push 00000030
:00449053 8B45F8                  mov eax, dword ptr [ebp-08]
:00449056 50                      push eax
:00449057 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044905A 51                      push ecx
:0044905B E8051C0000              call 0044AC65
:00449060 83C414                  add esp, 00000014
:00449063 C745C400000000          mov [ebp-3C], 00000000
:0044906A EB09                    jmp 00449075

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044912A(U)
|
:0044906C 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044906F 83C201                  add edx, 00000001
:00449072 8955C4                  mov dword ptr [ebp-3C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044906A(U)
|
:00449075 8B45C4                  mov eax, dword ptr [ebp-3C]
:00449078 0FAF45E4                imul eax, dword ptr [ebp-1C]
:0044907C 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0044907F 83E920                  sub ecx, 00000020
:00449082 3BC1                    cmp eax, ecx
:00449084 0F83A5000000            jnb 0044912F
:0044908A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044908D 8955B0                  mov dword ptr [ebp-50], edx
:00449090 8B45F8                  mov eax, dword ptr [ebp-08]
:00449093 8945B4                  mov dword ptr [ebp-4C], eax
:00449096 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00449099 034DE4                  add ecx, dword ptr [ebp-1C]
:0044909C 894DF4                  mov dword ptr [ebp-0C], ecx
:0044909F 8B55D0                  mov edx, dword ptr [ebp-30]
:004490A2 3B55D4                  cmp edx, dword ptr [ebp-2C]
:004490A5 7216                    jb 004490BD
:004490A7 8B45E4                  mov eax, dword ptr [ebp-1C]
:004490AA 0FAF45AC                imul eax, dword ptr [ebp-54]
:004490AE 33D2                    xor edx, edx
:004490B0 F775A8                  div [ebp-58]
:004490B3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004490B6 2BC8                    sub ecx, eax
:004490B8 894DF8                  mov dword ptr [ebp-08], ecx
:004490BB EB14                    jmp 004490D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004490A5(C)
|
:004490BD 8B45E4                  mov eax, dword ptr [ebp-1C]
:004490C0 0FAF45AC                imul eax, dword ptr [ebp-54]
:004490C4 33D2                    xor edx, edx
:004490C6 F775A8                  div [ebp-58]
:004490C9 8B55F8                  mov edx, dword ptr [ebp-08]
:004490CC 03D0                    add edx, eax
:004490CE 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004490BB(U)
|
:004490D1 8B45E0                  mov eax, dword ptr [ebp-20]
:004490D4 50                      push eax
:004490D5 B9A83B4B00              mov ecx, 004B3BA8
:004490DA E83168FDFF              call 0041F910
:004490DF 8A4D10                  mov cl, byte ptr [ebp+10]
:004490E2 51                      push ecx
:004490E3 8B55C4                  mov edx, dword ptr [ebp-3C]
:004490E6 52                      push edx
:004490E7 8B45B4                  mov eax, dword ptr [ebp-4C]
:004490EA 50                      push eax
:004490EB 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004490EE 51                      push ecx
:004490EF 8B55F8                  mov edx, dword ptr [ebp-08]
:004490F2 52                      push edx
:004490F3 8B45F4                  mov eax, dword ptr [ebp-0C]
:004490F6 50                      push eax
:004490F7 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:004490FA E8C9010000              call 004492C8
:004490FF E8CC64FEFF              call 0042F5D0
:00449104 8B4D10                  mov ecx, dword ptr [ebp+10]
:00449107 81E1FF000000            and ecx, 000000FF
:0044910D 83F917                  cmp ecx, 00000017
:00449110 740E                    je 00449120
:00449112 8B5510                  mov edx, dword ptr [ebp+10]
:00449115 81E2FF000000            and edx, 000000FF
:0044911B 83FA18                  cmp edx, 00000018
:0044911E 750A                    jne 0044912A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449110(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00449120 6A02                    push 00000002
:00449122 E80F66FEFF              call 0042F736
:00449127 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044911E(C)
|
:0044912A E93DFFFFFF              jmp 0044906C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449084(C)
|
:0044912F E952010000              jmp 00449286
:00449134 8B45D8                  mov eax, dword ptr [ebp-28]
:00449137 3B45F0                  cmp eax, dword ptr [ebp-10]
:0044913A 720B                    jb 00449147
:0044913C 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0044913F 2B4DF0                  sub ecx, dword ptr [ebp-10]
:00449142 894DA8                  mov dword ptr [ebp-58], ecx
:00449145 EB09                    jmp 00449150

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044913A(C)
|
:00449147 8B55F0                  mov edx, dword ptr [ebp-10]
:0044914A 2B55D8                  sub edx, dword ptr [ebp-28]
:0044914D 8955A8                  mov dword ptr [ebp-58], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449145(U)
|
:00449150 8B45D4                  mov eax, dword ptr [ebp-2C]
:00449153 2B45D0                  sub eax, dword ptr [ebp-30]
:00449156 8945AC                  mov dword ptr [ebp-54], eax
:00449159 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0044915C 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:0044915F 7214                    jb 00449175
:00449161 8B45A8                  mov eax, dword ptr [ebp-58]
:00449164 C1E004                  shl eax, 04
:00449167 99                      cdq
:00449168 F77DAC                  idiv [ebp-54]
:0044916B 8B55D8                  mov edx, dword ptr [ebp-28]
:0044916E 2BD0                    sub edx, eax
:00449170 8955F4                  mov dword ptr [ebp-0C], edx
:00449173 EB12                    jmp 00449187

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044915F(C)
|
:00449175 8B45A8                  mov eax, dword ptr [ebp-58]
:00449178 C1E004                  shl eax, 04
:0044917B 99                      cdq
:0044917C F77DAC                  idiv [ebp-54]
:0044917F 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00449182 03C8                    add ecx, eax
:00449184 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449173(U)
|
:00449187 8B55D0                  mov edx, dword ptr [ebp-30]
:0044918A 83C210                  add edx, 00000010
:0044918D 8955F8                  mov dword ptr [ebp-08], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449190 6A04                    push 00000004
:00449192 6A00                    push 00000000
:00449194 6A00                    push 00000000
:00449196 B9F0174B00              mov ecx, 004B17F0
:0044919B E8F0FD0200              call 00478F90
:004491A0 05003D0100              add eax, 00013D00
:004491A5 50                      push eax
:004491A6 6A30                    push 00000030
:004491A8 6A30                    push 00000030
:004491AA 8B45F8                  mov eax, dword ptr [ebp-08]
:004491AD 50                      push eax
:004491AE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004491B1 51                      push ecx
:004491B2 E8AE1A0000              call 0044AC65
:004491B7 83C414                  add esp, 00000014
:004491BA C745C400000000          mov [ebp-3C], 00000000
:004491C1 EB09                    jmp 004491CC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449281(U)
|
:004491C3 8B55C4                  mov edx, dword ptr [ebp-3C]
:004491C6 83C201                  add edx, 00000001
:004491C9 8955C4                  mov dword ptr [ebp-3C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004491C1(U)
|
:004491CC 8B45C4                  mov eax, dword ptr [ebp-3C]
:004491CF 0FAF45E4                imul eax, dword ptr [ebp-1C]
:004491D3 8B4DAC                  mov ecx, dword ptr [ebp-54]
:004491D6 83E920                  sub ecx, 00000020
:004491D9 3BC1                    cmp eax, ecx
:004491DB 0F83A5000000            jnb 00449286
:004491E1 8B55F4                  mov edx, dword ptr [ebp-0C]
:004491E4 8955B0                  mov dword ptr [ebp-50], edx
:004491E7 8B45F8                  mov eax, dword ptr [ebp-08]
:004491EA 8945B4                  mov dword ptr [ebp-4C], eax
:004491ED 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004491F0 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:004491F3 7216                    jb 0044920B
:004491F5 8B45E4                  mov eax, dword ptr [ebp-1C]
:004491F8 0FAF45A8                imul eax, dword ptr [ebp-58]
:004491FC 33D2                    xor edx, edx
:004491FE F775AC                  div [ebp-54]
:00449201 8B55F4                  mov edx, dword ptr [ebp-0C]
:00449204 2BD0                    sub edx, eax
:00449206 8955F4                  mov dword ptr [ebp-0C], edx
:00449209 EB14                    jmp 0044921F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004491F3(C)
|
:0044920B 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044920E 0FAF45A8                imul eax, dword ptr [ebp-58]
:00449212 33D2                    xor edx, edx
:00449214 F775AC                  div [ebp-54]
:00449217 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044921A 03C8                    add ecx, eax
:0044921C 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449209(U)
|
:0044921F 8B55F8                  mov edx, dword ptr [ebp-08]
:00449222 0355E4                  add edx, dword ptr [ebp-1C]
:00449225 8955F8                  mov dword ptr [ebp-08], edx
:00449228 8B45E0                  mov eax, dword ptr [ebp-20]
:0044922B 50                      push eax
:0044922C B9A83B4B00              mov ecx, 004B3BA8
:00449231 E8DA66FDFF              call 0041F910
:00449236 8A4D10                  mov cl, byte ptr [ebp+10]
:00449239 51                      push ecx
:0044923A 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044923D 52                      push edx
:0044923E 8B45B4                  mov eax, dword ptr [ebp-4C]
:00449241 50                      push eax
:00449242 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00449245 51                      push ecx
:00449246 8B55F8                  mov edx, dword ptr [ebp-08]
:00449249 52                      push edx
:0044924A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044924D 50                      push eax
:0044924E 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:00449251 E872000000              call 004492C8
:00449256 8B4D10                  mov ecx, dword ptr [ebp+10]
:00449259 81E1FF000000            and ecx, 000000FF
:0044925F 83F917                  cmp ecx, 00000017
:00449262 740E                    je 00449272
:00449264 8B5510                  mov edx, dword ptr [ebp+10]
:00449267 81E2FF000000            and edx, 000000FF
:0044926D 83FA18                  cmp edx, 00000018
:00449270 750A                    jne 0044927C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449262(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00449272 6A02                    push 00000002
:00449274 E8BD64FEFF              call 0042F736
:00449279 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449270(C)
|
:0044927C E84F63FEFF              call 0042F5D0
:00449281 E93DFFFFFF              jmp 004491C3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00448D20(C), :00448E81(U), :00448FD8(U), :0044912F(U), :004491DB(C)
|
:00449286 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449288 6A04                    push 00000004
:0044928A 6A00                    push 00000000
:0044928C 6A00                    push 00000000
:0044928E B9F0174B00              mov ecx, 004B17F0
:00449293 E8F8FC0200              call 00478F90
:00449298 05003D0100              add eax, 00013D00
:0044929D 50                      push eax
:0044929E 6A30                    push 00000030
:004492A0 6A30                    push 00000030
:004492A2 8B45F8                  mov eax, dword ptr [ebp-08]
:004492A5 50                      push eax
:004492A6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004492A9 51                      push ecx
:004492AA E8F5180000              call 0044ABA4
:004492AF 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00448CF0(U)
|
:004492B2 8BE5                    mov esp, ebp
:004492B4 5D                      pop ebp
:004492B5 C21000                  ret 0010



:004492B8 308D4400                DWORD 00448D30
:004492BC DD8F4400                DWORD 00448FDD
:004492C0 34914400                DWORD 00449134
:004492C4 868E4400                DWORD 00448E86



* Referenced by a CALL at Addresses:
|:00448E4D   , :00448FA3   , :004490FA   , :00449251   
|
:004492C8 55                      push ebp
:004492C9 8BEC                    mov ebp, esp
:004492CB 51                      push ecx
:004492CC 56                      push esi
:004492CD 894DFC                  mov dword ptr [ebp-04], ecx
:004492D0 8B451C                  mov eax, dword ptr [ebp+1C]
:004492D3 25FF000000              and eax, 000000FF
:004492D8 83F817                  cmp eax, 00000017
:004492DB 7512                    jne 004492EF
:004492DD 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:004492E0 81E1FF000000            and ecx, 000000FF
:004492E6 83F918                  cmp ecx, 00000018
:004492E9 0F8487000000            je 00449376

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004492DB(C)
|
:004492EF 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004492F1 6A04                    push 00000004
:004492F3 6A00                    push 00000000
:004492F5 6A00                    push 00000000
:004492F7 B9F0174B00              mov ecx, 004B17F0
:004492FC E88FFC0200              call 00478F90
:00449301 05003D0100              add eax, 00013D00
:00449306 50                      push eax
:00449307 6A30                    push 00000030
:00449309 6A30                    push 00000030
:0044930B 8B5514                  mov edx, dword ptr [ebp+14]
:0044930E 52                      push edx
:0044930F 8B4510                  mov eax, dword ptr [ebp+10]
:00449312 50                      push eax
:00449313 E88C180000              call 0044ABA4
:00449318 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044931B 6A04                    push 00000004
:0044931D 6A00                    push 00000000
:0044931F 6A00                    push 00000000
:00449321 B9F0174B00              mov ecx, 004B17F0
:00449326 E865FC0200              call 00478F90
:0044932B 05003D0100              add eax, 00013D00
:00449330 50                      push eax
:00449331 6A30                    push 00000030
:00449333 6A30                    push 00000030
:00449335 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00449338 51                      push ecx
:00449339 8B5508                  mov edx, dword ptr [ebp+08]
:0044933C 52                      push edx
:0044933D E823190000              call 0044AC65
:00449342 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449345 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449347 6A04                    push 00000004
:00449349 6A00                    push 00000000
:0044934B 6A00                    push 00000000
:0044934D B9F0174B00              mov ecx, 004B17F0
:00449352 E839FC0200              call 00478F90
:00449357 0500B10000              add eax, 0000B100
:0044935C 50                      push eax
:0044935D 6A30                    push 00000030
:0044935F 6A30                    push 00000030
:00449361 8B450C                  mov eax, dword ptr [ebp+0C]
:00449364 50                      push eax
:00449365 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449368 51                      push ecx
:00449369 E836180000              call 0044ABA4
:0044936E 83C418                  add esp, 00000018
:00449371 E997000000              jmp 0044940D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004492E9(C)
|
:00449376 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449378 6A04                    push 00000004
:0044937A 6A00                    push 00000000
:0044937C 6A00                    push 00000000
:0044937E B9F0174B00              mov ecx, 004B17F0
:00449383 E808FC0200              call 00478F90
:00449388 05003D0100              add eax, 00013D00
:0044938D 50                      push eax
:0044938E 6A30                    push 00000030
:00449390 6A30                    push 00000030
:00449392 8B5514                  mov edx, dword ptr [ebp+14]
:00449395 52                      push edx
:00449396 8B4510                  mov eax, dword ptr [ebp+10]
:00449399 50                      push eax
:0044939A E805180000              call 0044ABA4
:0044939F 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004493A2 6A04                    push 00000004
:004493A4 6A00                    push 00000000
:004493A6 6A00                    push 00000000
:004493A8 B9F0174B00              mov ecx, 004B17F0
:004493AD E8DEFB0200              call 00478F90
:004493B2 05003D0100              add eax, 00013D00
:004493B7 50                      push eax
:004493B8 6A30                    push 00000030
:004493BA 6A30                    push 00000030
:004493BC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004493BF 51                      push ecx
:004493C0 8B5508                  mov edx, dword ptr [ebp+08]
:004493C3 52                      push edx
:004493C4 E89C180000              call 0044AC65
:004493C9 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004493CC 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004493CE 6A04                    push 00000004
:004493D0 6A00                    push 00000000
:004493D2 6A00                    push 00000000
:004493D4 B9F0174B00              mov ecx, 004B17F0
:004493D9 E8B2FB0200              call 00478F90
:004493DE 8BC8                    mov ecx, eax
:004493E0 8B4518                  mov eax, dword ptr [ebp+18]
:004493E3 69C000090000            imul eax, 00000900
:004493E9 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004493EA BE03000000              mov esi, 00000003
:004493EF F7FE                    idiv esi
:004493F1 8D941100B10000          lea edx, dword ptr [ecx+edx+0000B100]
:004493F8 52                      push edx
:004493F9 6A30                    push 00000030
:004493FB 6A30                    push 00000030
:004493FD 8B450C                  mov eax, dword ptr [ebp+0C]
:00449400 50                      push eax
:00449401 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449404 51                      push ecx
:00449405 E89A170000              call 0044ABA4
:0044940A 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449371(U)
|
:0044940D 5E                      pop esi
:0044940E 8BE5                    mov esp, ebp
:00449410 5D                      pop ebp
:00449411 C21800                  ret 0018



* Referenced by a CALL at Address:
|:00444AED   
|
:00449414 55                      push ebp
:00449415 8BEC                    mov ebp, esp
:00449417 83EC28                  sub esp, 00000028
:0044941A 894DD8                  mov dword ptr [ebp-28], ecx
:0044941D 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00449420 E8CBC2FBFF              call 004056F0
:00449425 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00449428 81E1FF000000            and ecx, 000000FF
:0044942E 6BC924                  imul ecx, 00000024
:00449431 81C1B83B4B00            add ecx, 004B3BB8
:00449437 E80488FEFF              call 00431C40
:0044943C 50                      push eax
:0044943D 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00449440 E85BD6FEFF              call 00436AA0
:00449445 8B45E4                  mov eax, dword ptr [ebp-1C]
:00449448 25FF000000              and eax, 000000FF
:0044944D 6BC003                  imul eax, 00000003
:00449450 8945F0                  mov dword ptr [ebp-10], eax
:00449453 8B4DE5                  mov ecx, dword ptr [ebp-1B]
:00449456 81E1FF000000            and ecx, 000000FF
:0044945C 6BC903                  imul ecx, 00000003
:0044945F 894DE0                  mov dword ptr [ebp-20], ecx
:00449462 B958494B00              mov ecx, 004B4958
:00449467 E8A6180000              call 0044AD12
:0044946C 8B55F0                  mov edx, dword ptr [ebp-10]
:0044946F 2BD0                    sub edx, eax
:00449471 C1E204                  shl edx, 04
:00449474 8955E8                  mov dword ptr [ebp-18], edx
:00449477 B958494B00              mov ecx, 004B4958
:0044947C E8A2180000              call 0044AD23
:00449481 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00449484 2BC8                    sub ecx, eax
:00449486 83C102                  add ecx, 00000002
:00449489 C1E104                  shl ecx, 04
:0044948C 83C108                  add ecx, 00000008
:0044948F 894DF4                  mov dword ptr [ebp-0C], ecx
:00449492 B958494B00              mov ecx, 004B4958
:00449497 E876180000              call 0044AD12
:0044949C 8B55F0                  mov edx, dword ptr [ebp-10]
:0044949F 2BD0                    sub edx, eax
:004494A1 8955F8                  mov dword ptr [ebp-08], edx
:004494A4 B958494B00              mov ecx, 004B4958
:004494A9 E875180000              call 0044AD23
:004494AE 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004494B1 2BC8                    sub ecx, eax
:004494B3 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004494B6 6A04                    push 00000004
:004494B8 6A00                    push 00000000
:004494BA 6A00                    push 00000000
:004494BC B9F0174B00              mov ecx, 004B17F0
:004494C1 E8CAFA0200              call 00478F90
:004494C6 05002D0100              add eax, 00012D00
:004494CB 50                      push eax
:004494CC 6A30                    push 00000030
:004494CE 6A30                    push 00000030
:004494D0 8B55F4                  mov edx, dword ptr [ebp-0C]
:004494D3 52                      push edx
:004494D4 8B45E8                  mov eax, dword ptr [ebp-18]
:004494D7 50                      push eax
:004494D8 E888170000              call 0044AC65
:004494DD 83C414                  add esp, 00000014

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004494E0 C745DC02000000          mov [ebp-24], 00000002
:004494E7 C745EC00000000          mov [ebp-14], 00000000
:004494EE EB09                    jmp 004494F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044960D(U)
|
:004494F0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004494F3 83C101                  add ecx, 00000001
:004494F6 894DEC                  mov dword ptr [ebp-14], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004494EE(U)
|
:004494F9 8B55EC                  mov edx, dword ptr [ebp-14]
:004494FC 3B55DC                  cmp edx, dword ptr [ebp-24]
:004494FF 0F830D010000            jnb 00449612

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00449505 6A02                    push 00000002
:00449507 B9A83B4B00              mov ecx, 004B3BA8
:0044950C E8FF63FDFF              call 0041F910
:00449511 E81D6CFCFF              call 00410133
:00449516 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449518 6A04                    push 00000004
:0044951A 6A00                    push 00000000
:0044951C 6A00                    push 00000000
:0044951E B9F0174B00              mov ecx, 004B17F0
:00449523 E868FA0200              call 00478F90
:00449528 05002D0100              add eax, 00012D00
:0044952D 50                      push eax
:0044952E 6A30                    push 00000030
:00449530 6A30                    push 00000030
:00449532 8B45F4                  mov eax, dword ptr [ebp-0C]
:00449535 50                      push eax
:00449536 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00449539 51                      push ecx
:0044953A E865160000              call 0044ABA4
:0044953F 83C418                  add esp, 00000018
:00449542 8B55FC                  mov edx, dword ptr [ebp-04]
:00449545 52                      push edx
:00449546 8B45F8                  mov eax, dword ptr [ebp-08]
:00449549 50                      push eax
:0044954A E8338BFFFF              call 00442082
:0044954F 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449552 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449554 6A04                    push 00000004
:00449556 6A00                    push 00000000
:00449558 6A00                    push 00000000
:0044955A B9F0174B00              mov ecx, 004B17F0
:0044955F E82CFA0200              call 00478F90
:00449564 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00449567 69C900090000            imul ecx, 00000900
:0044956D 8D940800300000          lea edx, dword ptr [eax+ecx+00003000]
:00449574 52                      push edx
:00449575 6A30                    push 00000030
:00449577 6A30                    push 00000030
:00449579 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044957C 50                      push eax
:0044957D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00449580 51                      push ecx
:00449581 E81E160000              call 0044ABA4
:00449586 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449589 6A04                    push 00000004
:0044958B 6A00                    push 00000000
:0044958D 6A00                    push 00000000
:0044958F B9F0174B00              mov ecx, 004B17F0
:00449594 E8F7F90200              call 00478F90
:00449599 05003D0100              add eax, 00013D00
:0044959E 50                      push eax
:0044959F 6A30                    push 00000030
:004495A1 6A30                    push 00000030
:004495A3 8B55F4                  mov edx, dword ptr [ebp-0C]
:004495A6 52                      push edx
:004495A7 8B45E8                  mov eax, dword ptr [ebp-18]
:004495AA 50                      push eax
:004495AB E8B5160000              call 0044AC65
:004495B0 83C414                  add esp, 00000014
:004495B3 8B4DD8                  mov ecx, dword ptr [ebp-28]
:004495B6 8B11                    mov edx, dword ptr [ecx]
:004495B8 81E200010000            and edx, 00000100
:004495BE 85D2                    test edx, edx
:004495C0 7437                    je 004495F9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004495C2 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004495C4 6A04                    push 00000004
:004495C6 6A00                    push 00000000
:004495C8 6A00                    push 00000000
:004495CA B9F0174B00              mov ecx, 004B17F0
:004495CF E8BCF90200              call 00478F90
:004495D4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004495D7 69C900090000            imul ecx, 00000900
:004495DD 8D940800E70000          lea edx, dword ptr [eax+ecx+0000E700]
:004495E4 52                      push edx
:004495E5 6A30                    push 00000030
:004495E7 6A30                    push 00000030
:004495E9 8B45F4                  mov eax, dword ptr [ebp-0C]
:004495EC 50                      push eax
:004495ED 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004495F0 51                      push ecx
:004495F1 E8AE150000              call 0044ABA4
:004495F6 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004495C0(C)
|
:004495F9 E8506BFCFF              call 0041014E
:004495FE E8CD5FFEFF              call 0042F5D0

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00449603 6A02                    push 00000002
:00449605 E82C61FEFF              call 0042F736
:0044960A 83C404                  add esp, 00000004
:0044960D E9DEFEFFFF              jmp 004494F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004494FF(C)
|
:00449612 8B55D8                  mov edx, dword ptr [ebp-28]
:00449615 8B02                    mov eax, dword ptr [edx]
:00449617 2500010000              and eax, 00000100
:0044961C 85C0                    test eax, eax
:0044961E 0F848F000000            je 004496B3

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00449624 C745EC02000000          mov [ebp-14], 00000002

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044962B 6A02                    push 00000002
:0044962D B9A83B4B00              mov ecx, 004B3BA8
:00449632 E8D962FDFF              call 0041F910
:00449637 E8F76AFCFF              call 00410133
:0044963C 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044963E 6A04                    push 00000004
:00449640 6A00                    push 00000000
:00449642 6A00                    push 00000000
:00449644 B9F0174B00              mov ecx, 004B17F0
:00449649 E842F90200              call 00478F90
:0044964E 05003D0100              add eax, 00013D00
:00449653 50                      push eax
:00449654 6A30                    push 00000030
:00449656 6A30                    push 00000030
:00449658 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044965B 51                      push ecx
:0044965C 8B55E8                  mov edx, dword ptr [ebp-18]
:0044965F 52                      push edx
:00449660 E83F150000              call 0044ABA4
:00449665 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449668 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044966A 6A04                    push 00000004
:0044966C 6A00                    push 00000000
:0044966E 6A00                    push 00000000
:00449670 B9F0174B00              mov ecx, 004B17F0
:00449675 E816F90200              call 00478F90
:0044967A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044967D 69C900090000            imul ecx, 00000900
:00449683 8D940800E70000          lea edx, dword ptr [eax+ecx+0000E700]
:0044968A 52                      push edx
:0044968B 6A30                    push 00000030
:0044968D 6A30                    push 00000030
:0044968F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00449692 50                      push eax
:00449693 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00449696 51                      push ecx
:00449697 E808150000              call 0044ABA4
:0044969C 83C418                  add esp, 00000018
:0044969F E8AA6AFCFF              call 0041014E
:004496A4 E8275FFEFF              call 0042F5D0

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004496A9 6A02                    push 00000002
:004496AB E88660FEFF              call 0042F736
:004496B0 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044961E(C)
|
:004496B3 E87B6AFCFF              call 00410133
:004496B8 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004496BA 6A04                    push 00000004
:004496BC 6A00                    push 00000000
:004496BE 6A00                    push 00000000
:004496C0 B9F0174B00              mov ecx, 004B17F0
:004496C5 E8C6F80200              call 00478F90
:004496CA 05002D0100              add eax, 00012D00
:004496CF 50                      push eax
:004496D0 6A30                    push 00000030
:004496D2 6A30                    push 00000030
:004496D4 8B55F4                  mov edx, dword ptr [ebp-0C]
:004496D7 52                      push edx
:004496D8 8B45E8                  mov eax, dword ptr [ebp-18]
:004496DB 50                      push eax
:004496DC E8C3140000              call 0044ABA4
:004496E1 83C418                  add esp, 00000018
:004496E4 E8656AFCFF              call 0041014E
:004496E9 8BE5                    mov esp, ebp
:004496EB 5D                      pop ebp
:004496EC C21000                  ret 0010



* Referenced by a CALL at Address:
|:00444B0A   
|
:004496EF 55                      push ebp
:004496F0 8BEC                    mov ebp, esp
:004496F2 51                      push ecx
:004496F3 894DFC                  mov dword ptr [ebp-04], ecx
:004496F6 6A01                    push 00000001
:004496F8 8A4508                  mov al, byte ptr [ebp+08]
:004496FB 50                      push eax
:004496FC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004496FF E806000000              call 0044970A
:00449704 8BE5                    mov esp, ebp
:00449706 5D                      pop ebp
:00449707 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00444C1F   , :00444C9D   , :00444D0B   , :004496FF   , :00449D71   
|
:0044970A 55                      push ebp
:0044970B 8BEC                    mov ebp, esp
:0044970D 83EC34                  sub esp, 00000034
:00449710 894DCC                  mov dword ptr [ebp-34], ecx
:00449713 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00449716 E8D5BFFBFF              call 004056F0
:0044971B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044971E 81E1FF000000            and ecx, 000000FF
:00449724 6BC924                  imul ecx, 00000024
:00449727 81C1B83B4B00            add ecx, 004B3BB8
:0044972D E80E85FEFF              call 00431C40
:00449732 50                      push eax
:00449733 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00449736 E865D3FEFF              call 00436AA0
:0044973B 8B45D8                  mov eax, dword ptr [ebp-28]
:0044973E 25FF000000              and eax, 000000FF
:00449743 6BC003                  imul eax, 00000003
:00449746 8945EC                  mov dword ptr [ebp-14], eax
:00449749 8B4DD9                  mov ecx, dword ptr [ebp-27]
:0044974C 81E1FF000000            and ecx, 000000FF
:00449752 6BC903                  imul ecx, 00000003
:00449755 894DD4                  mov dword ptr [ebp-2C], ecx
:00449758 B958494B00              mov ecx, 004B4958
:0044975D E8B0150000              call 0044AD12
:00449762 8B55EC                  mov edx, dword ptr [ebp-14]
:00449765 2BD0                    sub edx, eax
:00449767 C1E204                  shl edx, 04
:0044976A 8955E4                  mov dword ptr [ebp-1C], edx
:0044976D B958494B00              mov ecx, 004B4958
:00449772 E8AC150000              call 0044AD23
:00449777 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044977A 2BC8                    sub ecx, eax
:0044977C 83C102                  add ecx, 00000002
:0044977F C1E104                  shl ecx, 04
:00449782 83C108                  add ecx, 00000008
:00449785 894DF0                  mov dword ptr [ebp-10], ecx
:00449788 B958494B00              mov ecx, 004B4958
:0044978D E880150000              call 0044AD12
:00449792 8B55EC                  mov edx, dword ptr [ebp-14]
:00449795 2BD0                    sub edx, eax
:00449797 8955F8                  mov dword ptr [ebp-08], edx
:0044979A B958494B00              mov ecx, 004B4958
:0044979F E87F150000              call 0044AD23
:004497A4 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004497A7 2BC8                    sub ecx, eax
:004497A9 894DFC                  mov dword ptr [ebp-04], ecx
:004497AC 837D0C01                cmp dword ptr [ebp+0C], 00000001
:004497B0 7517                    jne 004497C9
:004497B2 C745DC002D0100          mov [ebp-24], 00012D00
:004497B9 C745F400E70000          mov [ebp-0C], 0000E700
:004497C0 C745E000010000          mov [ebp-20], 00000100
:004497C7 EB3F                    jmp 00449808

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004497B0(C)
|
:004497C9 837D0C02                cmp dword ptr [ebp+0C], 00000002
:004497CD 7517                    jne 004497E6
:004497CF C745DC001D0100          mov [ebp-24], 00011D00
:004497D6 C745F400020100          mov [ebp-0C], 00010200
:004497DD C745E000100000          mov [ebp-20], 00001000
:004497E4 EB22                    jmp 00449808

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004497CD(C)
|
:004497E6 837D0C05                cmp dword ptr [ebp+0C], 00000005
:004497EA 7517                    jne 00449803
:004497EC C745DC006B0100          mov [ebp-24], 00016B00
:004497F3 C745F4007B0100          mov [ebp-0C], 00017B00
:004497FA C745E000400000          mov [ebp-20], 00004000
:00449801 EB05                    jmp 00449808

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004497EA(C)
|
:00449803 E942010000              jmp 0044994A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004497C7(U), :004497E4(U), :00449801(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449808 6A04                    push 00000004
:0044980A 6A00                    push 00000000
:0044980C 6A00                    push 00000000
:0044980E B9F0174B00              mov ecx, 004B17F0
:00449813 E878F70200              call 00478F90
:00449818 0345DC                  add eax, dword ptr [ebp-24]
:0044981B 50                      push eax
:0044981C 6A30                    push 00000030
:0044981E 6A30                    push 00000030
:00449820 8B55F0                  mov edx, dword ptr [ebp-10]
:00449823 52                      push edx
:00449824 8B45E4                  mov eax, dword ptr [ebp-1C]
:00449827 50                      push eax
:00449828 E838140000              call 0044AC65
:0044982D 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00449830 C745D003000000          mov [ebp-30], 00000003
:00449837 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0044983A 8B11                    mov edx, dword ptr [ecx]
:0044983C 2355E0                  and edx, dword ptr [ebp-20]
:0044983F 85D2                    test edx, edx
:00449841 0F84CF000000            je 00449916

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449847 6A04                    push 00000004
:00449849 6A00                    push 00000000
:0044984B 6A00                    push 00000000
:0044984D B9F0174B00              mov ecx, 004B17F0
:00449852 E839F70200              call 00478F90
:00449857 0345DC                  add eax, dword ptr [ebp-24]
:0044985A 50                      push eax
:0044985B 6A30                    push 00000030
:0044985D 6A30                    push 00000030
:0044985F 8B45F0                  mov eax, dword ptr [ebp-10]
:00449862 50                      push eax
:00449863 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00449866 51                      push ecx
:00449867 E8F9130000              call 0044AC65
:0044986C 83C414                  add esp, 00000014
:0044986F C745E800000000          mov [ebp-18], 00000000
:00449876 EB09                    jmp 00449881

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449911(U)
|
:00449878 8B55E8                  mov edx, dword ptr [ebp-18]
:0044987B 83C201                  add edx, 00000001
:0044987E 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449876(U)
|
:00449881 8B45E8                  mov eax, dword ptr [ebp-18]
:00449884 3B45D0                  cmp eax, dword ptr [ebp-30]
:00449887 0F8389000000            jnb 00449916

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044988D 6A02                    push 00000002
:0044988F B9A83B4B00              mov ecx, 004B3BA8
:00449894 E87760FDFF              call 0041F910
:00449899 E89568FCFF              call 00410133
:0044989E 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004498A0 6A04                    push 00000004
:004498A2 6A00                    push 00000000
:004498A4 6A00                    push 00000000
:004498A6 B9F0174B00              mov ecx, 004B17F0
:004498AB E8E0F60200              call 00478F90
:004498B0 0345DC                  add eax, dword ptr [ebp-24]
:004498B3 50                      push eax
:004498B4 6A30                    push 00000030
:004498B6 6A30                    push 00000030
:004498B8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004498BB 51                      push ecx
:004498BC 8B55E4                  mov edx, dword ptr [ebp-1C]
:004498BF 52                      push edx
:004498C0 E8DF120000              call 0044ABA4
:004498C5 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004498C8 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004498CA 6A04                    push 00000004
:004498CC 6A00                    push 00000000
:004498CE 6A00                    push 00000000
:004498D0 B9F0174B00              mov ecx, 004B17F0
:004498D5 E8B6F60200              call 00478F90
:004498DA 0345F4                  add eax, dword ptr [ebp-0C]
:004498DD 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004498E0 69C900090000            imul ecx, 00000900
:004498E6 03C1                    add eax, ecx
:004498E8 50                      push eax
:004498E9 6A30                    push 00000030
:004498EB 6A30                    push 00000030
:004498ED 8B55F0                  mov edx, dword ptr [ebp-10]
:004498F0 52                      push edx
:004498F1 8B45E4                  mov eax, dword ptr [ebp-1C]
:004498F4 50                      push eax
:004498F5 E8AA120000              call 0044ABA4
:004498FA 83C418                  add esp, 00000018
:004498FD E84C68FCFF              call 0041014E
:00449902 E8C95CFEFF              call 0042F5D0

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00449907 6A02                    push 00000002
:00449909 E8285EFEFF              call 0042F736
:0044990E 83C404                  add esp, 00000004
:00449911 E962FFFFFF              jmp 00449878

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449841(C), :00449887(C)
|
:00449916 E81868FCFF              call 00410133
:0044991B 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044991D 6A04                    push 00000004
:0044991F 6A00                    push 00000000
:00449921 6A00                    push 00000000
:00449923 B9F0174B00              mov ecx, 004B17F0
:00449928 E863F60200              call 00478F90
:0044992D 0345DC                  add eax, dword ptr [ebp-24]
:00449930 50                      push eax
:00449931 6A30                    push 00000030
:00449933 6A30                    push 00000030
:00449935 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00449938 51                      push ecx
:00449939 8B55E4                  mov edx, dword ptr [ebp-1C]
:0044993C 52                      push edx
:0044993D E862120000              call 0044ABA4
:00449942 83C418                  add esp, 00000018
:00449945 E80468FCFF              call 0041014E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449803(U)
|
:0044994A 8BE5                    mov esp, ebp
:0044994C 5D                      pop ebp
:0044994D C20800                  ret 0008



* Referenced by a CALL at Address:
|:0044E814   
|
:00449950 55                      push ebp
:00449951 8BEC                    mov ebp, esp
:00449953 51                      push ecx
:00449954 894DFC                  mov dword ptr [ebp-04], ecx
:00449957 8A4510                  mov al, byte ptr [ebp+10]
:0044995A 50                      push eax
:0044995B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044995E E864000000              call 004499C7
:00449963 85C0                    test eax, eax
:00449965 7502                    jne 00449969
:00449967 EB58                    jmp 004499C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449965(C)
|
:00449969 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044996C 8B11                    mov edx, dword ptr [ecx]
:0044996E 83E240                  and edx, 00000040
:00449971 85D2                    test edx, edx
:00449973 740C                    je 00449981
:00449975 8A4510                  mov al, byte ptr [ebp+10]
:00449978 50                      push eax
:00449979 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044997C E8BC020000              call 00449C3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449973(C)
|
:00449981 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00449984 8B11                    mov edx, dword ptr [ecx]
:00449986 81E200400000            and edx, 00004000
:0044998C 85D2                    test edx, edx
:0044998E 740C                    je 0044999C
:00449990 8A450C                  mov al, byte ptr [ebp+0C]
:00449993 50                      push eax
:00449994 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00449997 E8C5030000              call 00449D61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044998E(C)
|
:0044999C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044999F 8B11                    mov edx, dword ptr [ecx]
:004499A1 81E200800000            and edx, 00008000
:004499A7 85D2                    test edx, edx
:004499A9 7416                    je 004499C1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004499AB 6A05                    push 00000005
:004499AD 8A4510                  mov al, byte ptr [ebp+10]
:004499B0 50                      push eax
:004499B1 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004499B4 51                      push ecx
:004499B5 8A5508                  mov dl, byte ptr [ebp+08]
:004499B8 52                      push edx
:004499B9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004499BC E895E7FFFF              call 00448156

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449967(U), :004499A9(C)
|
:004499C1 8BE5                    mov esp, ebp
:004499C3 5D                      pop ebp
:004499C4 C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0044995E   
|
:004499C7 55                      push ebp
:004499C8 8BEC                    mov ebp, esp
:004499CA 51                      push ecx
:004499CB 894DFC                  mov dword ptr [ebp-04], ecx
:004499CE 8B45FC                  mov eax, dword ptr [ebp-04]
:004499D1 C70000000000            mov dword ptr [eax], 00000000
:004499D7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004499DA 8B11                    mov edx, dword ptr [ecx]
:004499DC 83CA40                  or edx, 00000040
:004499DF 8B45FC                  mov eax, dword ptr [ebp-04]
:004499E2 8910                    mov dword ptr [eax], edx
:004499E4 8A4D08                  mov cl, byte ptr [ebp+08]
:004499E7 51                      push ecx
:004499E8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004499EB E827000000              call 00449A17
:004499F0 85C0                    test eax, eax
:004499F2 7504                    jne 004499F8
:004499F4 33C0                    xor eax, eax
:004499F6 EB19                    jmp 00449A11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004499F2(C)
|
:004499F8 8A5508                  mov dl, byte ptr [ebp+08]
:004499FB 52                      push edx
:004499FC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004499FF E8E4000000              call 00449AE8
:00449A04 85C0                    test eax, eax
:00449A06 7504                    jne 00449A0C
:00449A08 33C0                    xor eax, eax
:00449A0A EB05                    jmp 00449A11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449A06(C)
|
:00449A0C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004499F6(U), :00449A0A(U)
|
:00449A11 8BE5                    mov esp, ebp
:00449A13 5D                      pop ebp
:00449A14 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004499EB   
|
:00449A17 55                      push ebp
:00449A18 8BEC                    mov ebp, esp
:00449A1A 83EC08                  sub esp, 00000008
:00449A1D 894DF8                  mov dword ptr [ebp-08], ecx
:00449A20 8A4508                  mov al, byte ptr [ebp+08]
:00449A23 50                      push eax
:00449A24 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00449A27 E83E000000              call 00449A6A
:00449A2C 8945FC                  mov dword ptr [ebp-04], eax
:00449A2F 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00449A33 7507                    jne 00449A3C
:00449A35 B801000000              mov eax, 00000001
:00449A3A EB28                    jmp 00449A64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449A33(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00449A3C 6A05                    push 00000005
:00449A3E 8A4DFC                  mov cl, byte ptr [ebp-04]
:00449A41 51                      push ecx
:00449A42 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00449A45 E89AD0FFFF              call 00446AE4
:00449A4A 85C0                    test eax, eax
:00449A4C 7504                    jne 00449A52
:00449A4E 33C0                    xor eax, eax
:00449A50 EB12                    jmp 00449A64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449A4C(C)
|
:00449A52 8B55F8                  mov edx, dword ptr [ebp-08]
:00449A55 8B02                    mov eax, dword ptr [edx]
:00449A57 80CC40                  or ah, 40
:00449A5A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00449A5D 8901                    mov dword ptr [ecx], eax
:00449A5F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449A3A(U), :00449A50(U)
|
:00449A64 8BE5                    mov esp, ebp
:00449A66 5D                      pop ebp
:00449A67 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00449A27   
|
:00449A6A 55                      push ebp
:00449A6B 8BEC                    mov ebp, esp
:00449A6D 83EC08                  sub esp, 00000008
:00449A70 894DFC                  mov dword ptr [ebp-04], ecx
:00449A73 8B4508                  mov eax, dword ptr [ebp+08]
:00449A76 25FF000000              and eax, 000000FF
:00449A7B 8945F8                  mov dword ptr [ebp-08], eax
:00449A7E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00449A81 83E91B                  sub ecx, 0000001B
:00449A84 894DF8                  mov dword ptr [ebp-08], ecx
:00449A87 837DF80E                cmp dword ptr [ebp-08], 0000000E
:00449A8B 772B                    ja 00449AB8
:00449A8D 8B45F8                  mov eax, dword ptr [ebp-08]
:00449A90 33D2                    xor edx, edx
:00449A92 8A90D99A4400            mov dl, byte ptr [eax+00449AD9]
:00449A98 FF2495C19A4400          jmp dword ptr [4*edx+00449AC1]
:00449A9F 33C0                    xor eax, eax
:00449AA1 EB18                    jmp 00449ABB

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00449AA3 B802000000              mov eax, 00000002
:00449AA8 EB11                    jmp 00449ABB

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00449AAA B803000000              mov eax, 00000003
:00449AAF EB0A                    jmp 00449ABB
:00449AB1 B801000000              mov eax, 00000001
:00449AB6 EB03                    jmp 00449ABB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449A8B(C)
|
:00449AB8 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449AA1(U), :00449AA8(U), :00449AAF(U), :00449AB6(U)
|
:00449ABB 8BE5                    mov esp, ebp
:00449ABD 5D                      pop ebp
:00449ABE C20400                  ret 0004



:00449AC1 9F9A4400                DWORD 00449A9F
:00449AC5 A39A4400                DWORD 00449AA3
:00449AC9 AA9A4400                DWORD 00449AAA
:00449ACD B19A4400                DWORD 00449AB1
:00449AD1 A39A4400                DWORD 00449AA3
:00449AD5 B89A4400                DWORD 00449AB8


:00449AD9 0001                    add byte ptr [ecx], al
:00449ADB 0101                    add dword ptr [ecx], eax
:00449ADD 0101                    add dword ptr [ecx], eax
:00449ADF 0101                    add dword ptr [ecx], eax
:00449AE1 0101                    add dword ptr [ecx], eax
:00449AE3 0202                    add al, byte ptr [edx]
:00449AE5 0203                    add al, byte ptr [ebx]
:00449AE7 04                      BYTE 04h


* Referenced by a CALL at Address:
|:004499FF   
|
:00449AE8 55                      push ebp
:00449AE9 8BEC                    mov ebp, esp
:00449AEB 83EC0C                  sub esp, 0000000C
:00449AEE 894DF8                  mov dword ptr [ebp-08], ecx
:00449AF1 8B4508                  mov eax, dword ptr [ebp+08]
:00449AF4 25FF000000              and eax, 000000FF
:00449AF9 8945F4                  mov dword ptr [ebp-0C], eax
:00449AFC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00449AFF 83E917                  sub ecx, 00000017
:00449B02 894DF4                  mov dword ptr [ebp-0C], ecx
:00449B05 837DF412                cmp dword ptr [ebp-0C], 00000012
:00449B09 0F87A0000000            ja 00449BAF
:00449B0F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00449B12 FF2495F19B4400          jmp dword ptr [4*edx+00449BF1]

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00449B19 C745FC09000000          mov [ebp-04], 00000009
:00449B20 E991000000              jmp 00449BB6

* Possible Reference to String Resource ID=00006: ""
                                  |
:00449B25 C745FC06000000          mov [ebp-04], 00000006
:00449B2C E985000000              jmp 00449BB6

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449B31 C745FC04000000          mov [ebp-04], 00000004
:00449B38 EB7C                    jmp 00449BB6
:00449B3A C745FC18000000          mov [ebp-04], 00000018
:00449B41 EB73                    jmp 00449BB6
:00449B43 C745FC19000000          mov [ebp-04], 00000019
:00449B4A EB6A                    jmp 00449BB6

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:00449B4C C745FC1A000000          mov [ebp-04], 0000001A
:00449B53 EB61                    jmp 00449BB6

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:00449B55 C745FC15000000          mov [ebp-04], 00000015
:00449B5C EB58                    jmp 00449BB6

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00449B5E C745FC14000000          mov [ebp-04], 00000014
:00449B65 EB4F                    jmp 00449BB6
:00449B67 C745FC13000000          mov [ebp-04], 00000013
:00449B6E EB46                    jmp 00449BB6
:00449B70 C745FC17000000          mov [ebp-04], 00000017
:00449B77 EB3D                    jmp 00449BB6
:00449B79 C745FC16000000          mov [ebp-04], 00000016
:00449B80 EB34                    jmp 00449BB6
:00449B82 C745FC10000000          mov [ebp-04], 00000010
:00449B89 EB2B                    jmp 00449BB6
:00449B8B C745FC11000000          mov [ebp-04], 00000011
:00449B92 EB22                    jmp 00449BB6
:00449B94 C745FC12000000          mov [ebp-04], 00000012
:00449B9B EB19                    jmp 00449BB6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00449B9D C745FC07000000          mov [ebp-04], 00000007
:00449BA4 EB10                    jmp 00449BB6
:00449BA6 C745FC1D000000          mov [ebp-04], 0000001D
:00449BAD EB07                    jmp 00449BB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449B09(C)
|
:00449BAF C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449B20(U), :00449B2C(U), :00449B38(U), :00449B41(U), :00449B4A(U)
|:00449B53(U), :00449B5C(U), :00449B65(U), :00449B6E(U), :00449B77(U)
|:00449B80(U), :00449B89(U), :00449B92(U), :00449B9B(U), :00449BA4(U)
|:00449BAD(U)
|
:00449BB6 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00449BBA 7507                    jne 00449BC3
:00449BBC B801000000              mov eax, 00000001
:00449BC1 EB28                    jmp 00449BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449BBA(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00449BC3 6A05                    push 00000005
:00449BC5 8A45FC                  mov al, byte ptr [ebp-04]
:00449BC8 50                      push eax
:00449BC9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00449BCC E859B3FFFF              call 00444F2A
:00449BD1 85C0                    test eax, eax
:00449BD3 7504                    jne 00449BD9
:00449BD5 33C0                    xor eax, eax
:00449BD7 EB12                    jmp 00449BEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449BD3(C)
|
:00449BD9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00449BDC 8B11                    mov edx, dword ptr [ecx]
:00449BDE 80CE80                  or dh, 80
:00449BE1 8B45F8                  mov eax, dword ptr [ebp-08]
:00449BE4 8910                    mov dword ptr [eax], edx
:00449BE6 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449BC1(U), :00449BD7(U)
|
:00449BEB 8BE5                    mov esp, ebp
:00449BED 5D                      pop ebp
:00449BEE C20400                  ret 0004



:00449BF1 199B4400                DWORD 00449B19
:00449BF5 AF9B4400                DWORD 00449BAF
:00449BF9 AF9B4400                DWORD 00449BAF
:00449BFD AF9B4400                DWORD 00449BAF
:00449C01 259B4400                DWORD 00449B25
:00449C05 319B4400                DWORD 00449B31
:00449C09 3A9B4400                DWORD 00449B3A
:00449C0D 439B4400                DWORD 00449B43
:00449C11 4C9B4400                DWORD 00449B4C
:00449C15 559B4400                DWORD 00449B55
:00449C19 5E9B4400                DWORD 00449B5E
:00449C1D 679B4400                DWORD 00449B67
:00449C21 709B4400                DWORD 00449B70
:00449C25 799B4400                DWORD 00449B79
:00449C29 829B4400                DWORD 00449B82
:00449C2D 8B9B4400                DWORD 00449B8B
:00449C31 949B4400                DWORD 00449B94
:00449C35 9D9B4400                DWORD 00449B9D
:00449C39 A69B4400                DWORD 00449BA6



* Referenced by a CALL at Address:
|:0044997C   
|
:00449C3D 55                      push ebp
:00449C3E 8BEC                    mov ebp, esp
:00449C40 51                      push ecx
:00449C41 894DFC                  mov dword ptr [ebp-04], ecx
:00449C44 8B4508                  mov eax, dword ptr [ebp+08]
:00449C47 25FF000000              and eax, 000000FF
:00449C4C 83F81B                  cmp eax, 0000001B
:00449C4F 7516                    jne 00449C67
:00449C51 8B0D74A24700            mov ecx, dword ptr [0047A274]
:00449C57 51                      push ecx
:00449C58 B9F8544B00              mov ecx, 004B54F8
:00449C5D E8B8F80100              call 0046951A
:00449C62 E9F4000000              jmp 00449D5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449C4F(C)
|
:00449C67 8B5508                  mov edx, dword ptr [ebp+08]
:00449C6A 81E2FF000000            and edx, 000000FF
:00449C70 83FA1C                  cmp edx, 0000001C
:00449C73 7C23                    jl 00449C98
:00449C75 8B4508                  mov eax, dword ptr [ebp+08]
:00449C78 25FF000000              and eax, 000000FF
:00449C7D 83F824                  cmp eax, 00000024
:00449C80 7F16                    jg 00449C98
:00449C82 8B0D90A24700            mov ecx, dword ptr [0047A290]
:00449C88 51                      push ecx
:00449C89 B9F8544B00              mov ecx, 004B54F8
:00449C8E E887F80100              call 0046951A
:00449C93 E9C3000000              jmp 00449D5B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449C73(C), :00449C80(C)
|
:00449C98 8B5508                  mov edx, dword ptr [ebp+08]
:00449C9B 81E2FF000000            and edx, 000000FF
:00449CA1 83FA17                  cmp edx, 00000017
:00449CA4 7515                    jne 00449CBB
:00449CA6 A1D4A24700              mov eax, dword ptr [0047A2D4]
:00449CAB 50                      push eax
:00449CAC B9F8544B00              mov ecx, 004B54F8
:00449CB1 E864F80100              call 0046951A
:00449CB6 E9A0000000              jmp 00449D5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449CA4(C)
|
:00449CBB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449CBE 81E1FF000000            and ecx, 000000FF
:00449CC4 83F925                  cmp ecx, 00000025
:00449CC7 7513                    jne 00449CDC
:00449CC9 8B1590A24700            mov edx, dword ptr [0047A290]
:00449CCF 52                      push edx
:00449CD0 B9F8544B00              mov ecx, 004B54F8
:00449CD5 E840F80100              call 0046951A
:00449CDA EB7F                    jmp 00449D5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449CC7(C)
|
:00449CDC 8B4508                  mov eax, dword ptr [ebp+08]
:00449CDF 25FF000000              and eax, 000000FF
:00449CE4 83F826                  cmp eax, 00000026
:00449CE7 7513                    jne 00449CFC
:00449CE9 8B0D90A24700            mov ecx, dword ptr [0047A290]
:00449CEF 51                      push ecx
:00449CF0 B9F8544B00              mov ecx, 004B54F8
:00449CF5 E820F80100              call 0046951A
:00449CFA EB5F                    jmp 00449D5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449CE7(C)
|
:00449CFC 8B5508                  mov edx, dword ptr [ebp+08]
:00449CFF 81E2FF000000            and edx, 000000FF
:00449D05 83FA27                  cmp edx, 00000027
:00449D08 7512                    jne 00449D1C
:00449D0A A190A24700              mov eax, dword ptr [0047A290]
:00449D0F 50                      push eax
:00449D10 B9F8544B00              mov ecx, 004B54F8
:00449D15 E800F80100              call 0046951A
:00449D1A EB3F                    jmp 00449D5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449D08(C)
|
:00449D1C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449D1F 81E1FF000000            and ecx, 000000FF
:00449D25 83F928                  cmp ecx, 00000028
:00449D28 7513                    jne 00449D3D
:00449D2A 8B15B4A24700            mov edx, dword ptr [0047A2B4]
:00449D30 52                      push edx
:00449D31 B9F8544B00              mov ecx, 004B54F8
:00449D36 E8DFF70100              call 0046951A
:00449D3B EB1E                    jmp 00449D5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449D28(C)
|
:00449D3D 8B4508                  mov eax, dword ptr [ebp+08]
:00449D40 25FF000000              and eax, 000000FF
:00449D45 83F829                  cmp eax, 00000029
:00449D48 7511                    jne 00449D5B
:00449D4A 8B0D90A24700            mov ecx, dword ptr [0047A290]
:00449D50 51                      push ecx
:00449D51 B9F8544B00              mov ecx, 004B54F8
:00449D56 E8BFF70100              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449C62(U), :00449C93(U), :00449CB6(U), :00449CDA(U), :00449CFA(U)
|:00449D1A(U), :00449D3B(U), :00449D48(C)
|
:00449D5B 8BE5                    mov esp, ebp
:00449D5D 5D                      pop ebp
:00449D5E C20400                  ret 0004



* Referenced by a CALL at Address:
|:00449997   
|
:00449D61 55                      push ebp
:00449D62 8BEC                    mov ebp, esp
:00449D64 51                      push ecx
:00449D65 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00449D68 6A05                    push 00000005
:00449D6A 8A4508                  mov al, byte ptr [ebp+08]
:00449D6D 50                      push eax
:00449D6E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00449D71 E894F9FFFF              call 0044970A
:00449D76 8BE5                    mov esp, ebp
:00449D78 5D                      pop ebp
:00449D79 C20400                  ret 0004


:00449D7C CC                      int 03
:00449D7D CC                      int 03
:00449D7E CC                      int 03
:00449D7F CC                      int 03
:00449D80 55                      push ebp
:00449D81 8BEC                    mov ebp, esp
:00449D83 E807000000              call 00449D8F
:00449D88 E811000000              call 00449D9E
:00449D8D 5D                      pop ebp
:00449D8E C3                      ret



* Referenced by a CALL at Address:
|:00449D83   
|
:00449D8F 55                      push ebp
:00449D90 8BEC                    mov ebp, esp
:00449D92 B958494B00              mov ecx, 004B4958
:00449D97 E8EA0E0000              call 0044AC86
:00449D9C 5D                      pop ebp
:00449D9D C3                      ret



* Referenced by a CALL at Address:
|:00449D88   
|
:00449D9E 55                      push ebp
:00449D9F 8BEC                    mov ebp, esp
:00449DA1 68B09D4400              push 00449DB0
:00449DA6 E805570200              call 0046F4B0
:00449DAB 83C404                  add esp, 00000004
:00449DAE 5D                      pop ebp
:00449DAF C3                      ret


:00449DB0 55                      push ebp
:00449DB1 8BEC                    mov ebp, esp
:00449DB3 B958494B00              mov ecx, 004B4958
:00449DB8 E8060F0000              call 0044ACC3
:00449DBD 5D                      pop ebp
:00449DBE C3                      ret


:00449DBF 55                      push ebp
:00449DC0 8BEC                    mov ebp, esp
:00449DC2 E807000000              call 00449DCE
:00449DC7 E81E000000              call 00449DEA
:00449DCC 5D                      pop ebp
:00449DCD C3                      ret



* Referenced by a CALL at Address:
|:00449DC2   
|
:00449DCE 55                      push ebp
:00449DCF 8BEC                    mov ebp, esp
:00449DD1 6A0F                    push 0000000F

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00449DD3 6A0A                    push 0000000A
:00449DD5 68F8000000              push 000000F8
:00449DDA 6A58                    push 00000058
:00449DDC 6A4C                    push 0000004C
:00449DDE B9004A4B00              mov ecx, 004B4A00
:00449DE3 E8787EFEFF              call 00431C60
:00449DE8 5D                      pop ebp
:00449DE9 C3                      ret



* Referenced by a CALL at Address:
|:00449DC7   
|
:00449DEA 55                      push ebp
:00449DEB 8BEC                    mov ebp, esp
:00449DED 68FC9D4400              push 00449DFC
:00449DF2 E8B9560200              call 0046F4B0
:00449DF7 83C404                  add esp, 00000004
:00449DFA 5D                      pop ebp
:00449DFB C3                      ret


:00449DFC 55                      push ebp
:00449DFD 8BEC                    mov ebp, esp
:00449DFF B9004A4B00              mov ecx, 004B4A00
:00449E04 E8F74BFEFF              call 0042EA00
:00449E09 5D                      pop ebp
:00449E0A C3                      ret



* Referenced by a CALL at Addresses:
|:00437210   , :004382F7   , :00438534   , :0043D08F   , :00441B86   
|:00443BDE   
|
:00449E0B 55                      push ebp
:00449E0C 8BEC                    mov ebp, esp
:00449E0E 83EC2C                  sub esp, 0000002C
:00449E11 56                      push esi
:00449E12 8B4D08                  mov ecx, dword ptr [ebp+08]
:00449E15 81E1FF000000            and ecx, 000000FF
:00449E1B 6BC924                  imul ecx, 00000024
:00449E1E 81C1B83B4B00            add ecx, 004B3BB8
:00449E24 E8177EFEFF              call 00431C40
:00449E29 668B00                  mov ax, word ptr [eax]
:00449E2C 668945D4                mov word ptr [ebp-2C], ax
:00449E30 8D4DE8                  lea ecx, dword ptr [ebp-18]
:00449E33 51                      push ecx
:00449E34 E8D7E60200              call 00478510
:00449E39 83C404                  add esp, 00000004
:00449E3C 8845D8                  mov byte ptr [ebp-28], al
:00449E3F 8B75D4                  mov esi, dword ptr [ebp-2C]
:00449E42 81E6FF000000            and esi, 000000FF
:00449E48 6BF603                  imul esi, 00000003
:00449E4B B958494B00              mov ecx, 004B4958
:00449E50 E8BD0E0000              call 0044AD12
:00449E55 2BF0                    sub esi, eax
:00449E57 8975FC                  mov dword ptr [ebp-04], esi
:00449E5A 8B75D5                  mov esi, dword ptr [ebp-2B]
:00449E5D 81E6FF000000            and esi, 000000FF
:00449E63 6BF603                  imul esi, 00000003
:00449E66 B958494B00              mov ecx, 004B4958
:00449E6B E8B30E0000              call 0044AD23
:00449E70 2BF0                    sub esi, eax
:00449E72 8975E0                  mov dword ptr [ebp-20], esi
:00449E75 8B550C                  mov edx, dword ptr [ebp+0C]
:00449E78 52                      push edx
:00449E79 8D45E8                  lea eax, dword ptr [ebp-18]
:00449E7C 50                      push eax
:00449E7D E8E271FEFF              call 00431064
:00449E82 83C408                  add esp, 00000008
:00449E85 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00449E89 7505                    jne 00449E90
:00449E8B E917020000              jmp 0044A0A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449E89(C)
|
:00449E90 837DFC00                cmp dword ptr [ebp-04], 00000000
:00449E94 7C36                    jl 00449ECC
:00449E96 837DE000                cmp dword ptr [ebp-20], 00000000
:00449E9A 7C30                    jl 00449ECC
:00449E9C B958494B00              mov ecx, 004B4958
:00449EA1 E89D4A0000              call 0044E943
:00449EA6 99                      cdq
:00449EA7 83E20F                  and edx, 0000000F
:00449EAA 03C2                    add eax, edx
:00449EAC C1F804                  sar eax, 04
:00449EAF 3945FC                  cmp dword ptr [ebp-04], eax
:00449EB2 7D18                    jge 00449ECC
:00449EB4 B958494B00              mov ecx, 004B4958
:00449EB9 E8AC4A0000              call 0044E96A
:00449EBE 99                      cdq
:00449EBF 83E20F                  and edx, 0000000F
:00449EC2 03C2                    add eax, edx
:00449EC4 C1F804                  sar eax, 04
:00449EC7 3945E0                  cmp dword ptr [ebp-20], eax
:00449ECA 7C05                    jl 00449ED1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449E94(C), :00449E9A(C), :00449EB2(C)
|
:00449ECC E9D6010000              jmp 0044A0A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449ECA(C)
|
:00449ED1 8B75D4                  mov esi, dword ptr [ebp-2C]
:00449ED4 81E6FF000000            and esi, 000000FF
:00449EDA 6BF603                  imul esi, 00000003
:00449EDD B958494B00              mov ecx, 004B4958
:00449EE2 E82B0E0000              call 0044AD12
:00449EE7 83C001                  add eax, 00000001
:00449EEA 3BF0                    cmp esi, eax
:00449EEC 7D09                    jge 00449EF7
:00449EEE C745FC00000000          mov [ebp-04], 00000000
:00449EF5 EB1E                    jmp 00449F15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449EEC(C)
|
:00449EF7 8B75D4                  mov esi, dword ptr [ebp-2C]
:00449EFA 81E6FF000000            and esi, 000000FF
:00449F00 6BF603                  imul esi, 00000003
:00449F03 B958494B00              mov ecx, 004B4958
:00449F08 E8050E0000              call 0044AD12
:00449F0D 2BF0                    sub esi, eax
:00449F0F 83EE01                  sub esi, 00000001
:00449F12 8975FC                  mov dword ptr [ebp-04], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449EF5(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00449F15 6A04                    push 00000004
:00449F17 B9306D4800              mov ecx, 00486D30
:00449F1C E833C1FBFF              call 00406054
:00449F21 8B4D10                  mov ecx, dword ptr [ebp+10]
:00449F24 81E1FF000000            and ecx, 000000FF
:00449F2A 51                      push ecx
:00449F2B B9306D4800              mov ecx, 00486D30
:00449F30 E883C0FBFF              call 00405FB8
:00449F35 6A00                    push 00000000
:00449F37 B9306D4800              mov ecx, 00486D30
:00449F3C E8AFC0FBFF              call 00405FF0
:00449F41 6A01                    push 00000001
:00449F43 B9306D4800              mov ecx, 00486D30
:00449F48 E8F1C0FBFF              call 0040603E
:00449F4D 6A00                    push 00000000
:00449F4F B9306D4800              mov ecx, 00486D30
:00449F54 E8CFC0FBFF              call 00406028
:00449F59 8B55D8                  mov edx, dword ptr [ebp-28]
:00449F5C 81E2FF000000            and edx, 000000FF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00449F62 B808000000              mov eax, 00000008
:00449F67 2BC2                    sub eax, edx
:00449F69 99                      cdq
:00449F6A 2BC2                    sub eax, edx
:00449F6C D1F8                    sar eax, 1
:00449F6E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00449F71 8D544801                lea edx, dword ptr [eax+2*ecx+01]
:00449F75 8955E4                  mov dword ptr [ebp-1C], edx
:00449F78 8B45E0                  mov eax, dword ptr [ebp-20]
:00449F7B 83C002                  add eax, 00000002
:00449F7E C1E004                  shl eax, 04
:00449F81 83C008                  add eax, 00000008
:00449F84 8945DC                  mov dword ptr [ebp-24], eax
:00449F87 837DE402                cmp dword ptr [ebp-1C], 00000002
:00449F8B 7307                    jnb 00449F94
:00449F8D C745E400000000          mov [ebp-1C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449F8B(C)
|
:00449F94 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00449F97 81E1FF000000            and ecx, 000000FF
:00449F9D 8B75E4                  mov esi, dword ptr [ebp-1C]
:00449FA0 03F1                    add esi, ecx
:00449FA2 B958494B00              mov ecx, 004B4958
:00449FA7 E897490000              call 0044E943
:00449FAC C1E804                  shr eax, 04
:00449FAF D1E0                    shl eax, 1
:00449FB1 3BF0                    cmp esi, eax
:00449FB3 7226                    jb 00449FDB
:00449FB5 B958494B00              mov ecx, 004B4958
:00449FBA E884490000              call 0044E943
:00449FBF C1E804                  shr eax, 04
:00449FC2 D1E0                    shl eax, 1
:00449FC4 8B55D8                  mov edx, dword ptr [ebp-28]
:00449FC7 81E2FF000000            and edx, 000000FF
:00449FCD 2BC2                    sub eax, edx
:00449FCF 8945E4                  mov dword ptr [ebp-1C], eax
:00449FD2 8B45FC                  mov eax, dword ptr [ebp-04]
:00449FD5 83E801                  sub eax, 00000001
:00449FD8 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00449FB3(C)
|
:00449FDB 33C9                    xor ecx, ecx
:00449FDD 8A0D9D4E4B00            mov cl, byte ptr [004B4E9D]
:00449FE3 83C104                  add ecx, 00000004
:00449FE6 51                      push ecx
:00449FE7 B9A83B4B00              mov ecx, 004B3BA8
:00449FEC E81F59FDFF              call 0041F910
:00449FF1 8B55DC                  mov edx, dword ptr [ebp-24]
:00449FF4 52                      push edx
:00449FF5 8B45E4                  mov eax, dword ptr [ebp-1C]
:00449FF8 50                      push eax
:00449FF9 B9306D4800              mov ecx, 00486D30
:00449FFE E808BFFBFF              call 00405F0B
:0044A003 B9F0174B00              mov ecx, 004B17F0
:0044A008 E8B35EFCFF              call 0040FEC0
:0044A00D 50                      push eax
:0044A00E 6A10                    push 00000010
:0044A010 6A40                    push 00000040
:0044A012 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044A015 51                      push ecx
:0044A016 8B55E4                  mov edx, dword ptr [ebp-1C]
:0044A019 C1E203                  shl edx, 03
:0044A01C 52                      push edx
:0044A01D E8430C0000              call 0044AC65
:0044A022 83C414                  add esp, 00000014
:0044A025 8D45E8                  lea eax, dword ptr [ebp-18]
:0044A028 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0044A029 680CEB4700              push 0047EB0C
:0044A02E 68306D4800              push 00486D30
:0044A033 E8A0CBFBFF              call 00406BD8
:0044A038 83C40C                  add esp, 0000000C
:0044A03B E89055FEFF              call 0042F5D0
:0044A040 33C9                    xor ecx, ecx
:0044A042 8A0D9D4E4B00            mov cl, byte ptr [004B4E9D]
:0044A048 83C104                  add ecx, 00000004
:0044A04B 51                      push ecx
:0044A04C B9A83B4B00              mov ecx, 004B3BA8
:0044A051 E8BA58FDFF              call 0041F910
:0044A056 8B45FC                  mov eax, dword ptr [ebp-04]
:0044A059 99                      cdq
:0044A05A 33C2                    xor eax, edx
:0044A05C 2BC2                    sub eax, edx
:0044A05E 83E001                  and eax, 00000001
:0044A061 33C2                    xor eax, edx
:0044A063 2BC2                    sub eax, edx
:0044A065 85C0                    test eax, eax
:0044A067 7409                    je 0044A072
:0044A069 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A06C 83EA01                  sub edx, 00000001
:0044A06F 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A067(C)
|
:0044A072 6A00                    push 00000000
:0044A074 B9F0174B00              mov ecx, 004B17F0
:0044A079 E8425EFCFF              call 0040FEC0
:0044A07E 50                      push eax
:0044A07F 6A10                    push 00000010
:0044A081 6A40                    push 00000040
:0044A083 8B45DC                  mov eax, dword ptr [ebp-24]
:0044A086 50                      push eax
:0044A087 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044A08A C1E103                  shl ecx, 03
:0044A08D 51                      push ecx
:0044A08E E8110B0000              call 0044ABA4
:0044A093 83C418                  add esp, 00000018
:0044A096 E83555FEFF              call 0042F5D0
:0044A09B 6A00                    push 00000000
:0044A09D B9306D4800              mov ecx, 00486D30
:0044A0A2 E897BFFBFF              call 0040603E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00449E8B(U), :00449ECC(U)
|
:0044A0A7 5E                      pop esi
:0044A0A8 8BE5                    mov esp, ebp
:0044A0AA 5D                      pop ebp
:0044A0AB C3                      ret



* Referenced by a CALL at Addresses:
|:004338B3   , :00437227   , :00437EE3   , :00437EF3   , :0043830E   
|:0043854B   , :0043D0A8   , :0043EF17   , :0043EF27   , :00441BA0   
|:00444068   
|
:0044A0AC 55                      push ebp
:0044A0AD 8BEC                    mov ebp, esp
:0044A0AF 83EC0C                  sub esp, 0000000C
:0044A0B2 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0044A0B5 E836B6FBFF              call 004056F0
:0044A0BA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A0BD 81E1FF000000            and ecx, 000000FF
:0044A0C3 6BC924                  imul ecx, 00000024
:0044A0C6 81C1B83B4B00            add ecx, 004B3BB8
:0044A0CC E86F7BFEFF              call 00431C40
:0044A0D1 668B00                  mov ax, word ptr [eax]
:0044A0D4 50                      push eax
:0044A0D5 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0044A0D8 51                      push ecx
:0044A0D9 E8710A0000              call 0044AB4F
:0044A0DE 83C408                  add esp, 00000008
:0044A0E1 50                      push eax
:0044A0E2 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0044A0E5 E8B6C9FEFF              call 00436AA0
:0044A0EA B958494B00              mov ecx, 004B4958
:0044A0EF E876480000              call 0044E96A
:0044A0F4 99                      cdq
:0044A0F5 83E20F                  and edx, 0000000F
:0044A0F8 03C2                    add eax, edx
:0044A0FA C1F804                  sar eax, 04
:0044A0FD 99                      cdq
:0044A0FE 2BC2                    sub eax, edx
:0044A100 D1F8                    sar eax, 1
:0044A102 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044A103 B903000000              mov ecx, 00000003
:0044A108 F7F9                    idiv ecx
:0044A10A 6BC003                  imul eax, 00000003
:0044A10D 8945FC                  mov dword ptr [ebp-04], eax
:0044A110 8B55F9                  mov edx, dword ptr [ebp-07]
:0044A113 81E2FF000000            and edx, 000000FF
:0044A119 8B45FC                  mov eax, dword ptr [ebp-04]
:0044A11C 25FF000000              and eax, 000000FF
:0044A121 3BD0                    cmp edx, eax
:0044A123 7D19                    jge 0044A13E
:0044A125 B958494B00              mov ecx, 004B4958
:0044A12A E8F40B0000              call 0044AD23
:0044A12F 85C0                    test eax, eax
:0044A131 750B                    jne 0044A13E
:0044A133 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044A136 83C103                  add ecx, 00000003
:0044A139 884DF9                  mov byte ptr [ebp-07], cl
:0044A13C EB09                    jmp 0044A147

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A123(C), :0044A131(C)
|
:0044A13E 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A141 83EA09                  sub edx, 00000009
:0044A144 8855F9                  mov byte ptr [ebp-07], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A13C(U)
|
:0044A147 8B4508                  mov eax, dword ptr [ebp+08]
:0044A14A 668B4DF8                mov cx, word ptr [ebp-08]
:0044A14E 668908                  mov word ptr [eax], cx
:0044A151 8B4508                  mov eax, dword ptr [ebp+08]
:0044A154 8BE5                    mov esp, ebp
:0044A156 5D                      pop ebp
:0044A157 C3                      ret



* Referenced by a CALL at Addresses:
|:00433938   , :00437294   , :00437F97   , :00437FA8   , :00438376   
|:004385B1   , :0043D117   , :0043EFD2   , :0043EFE3   , :00441C10   
|:00443C1A   , :00443C3A   
|
:0044A158 55                      push ebp
:0044A159 8BEC                    mov ebp, esp
:0044A15B 83EC14                  sub esp, 00000014
:0044A15E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A161 81E1FF000000            and ecx, 000000FF
:0044A167 6BC924                  imul ecx, 00000024
:0044A16A 81C1B83B4B00            add ecx, 004B3BB8
:0044A170 E86BC8FEFF              call 004369E0
:0044A175 6BC050                  imul eax, 00000050
:0044A178 05787F4900              add eax, 00497F78
:0044A17D 8945FC                  mov dword ptr [ebp-04], eax
:0044A180 8B4508                  mov eax, dword ptr [ebp+08]
:0044A183 25FF000000              and eax, 000000FF
:0044A188 8945F0                  mov dword ptr [ebp-10], eax
:0044A18B 8B4D09                  mov ecx, dword ptr [ebp+09]
:0044A18E 81E1FF000000            and ecx, 000000FF
:0044A194 83C102                  add ecx, 00000002
:0044A197 C1E104                  shl ecx, 04
:0044A19A 83C108                  add ecx, 00000008
:0044A19D 894DEC                  mov dword ptr [ebp-14], ecx
:0044A1A0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A1A3 81E1FF000000            and ecx, 000000FF
:0044A1A9 6BC924                  imul ecx, 00000024
:0044A1AC 81C1B83B4B00            add ecx, 004B3BB8
:0044A1B2 E85927FCFF              call 0040C910
:0044A1B7 F7D8                    neg eax
:0044A1B9 1BC0                    sbb eax, eax
:0044A1BB 2540E7FFFF              and eax, FFFFE740
:0044A1C0 05C0180000              add eax, 000018C0
:0044A1C5 8945F8                  mov dword ptr [ebp-08], eax
:0044A1C8 E8665FFCFF              call 00410133
:0044A1CD 6A60                    push 00000060
:0044A1CF 68C0000000              push 000000C0
:0044A1D4 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A1D7 52                      push edx
:0044A1D8 8B45F0                  mov eax, dword ptr [ebp-10]
:0044A1DB C1E003                  shl eax, 03
:0044A1DE 50                      push eax
:0044A1DF E859050000              call 0044A73D
:0044A1E4 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A1E7 6A04                    push 00000004
:0044A1E9 6A00                    push 00000000
:0044A1EB 68007B0100              push 00017B00
:0044A1F0 B9F0174B00              mov ecx, 004B17F0
:0044A1F5 E896ED0200              call 00478F90
:0044A1FA 0345F8                  add eax, dword ptr [ebp-08]
:0044A1FD 50                      push eax
:0044A1FE 6A30                    push 00000030
:0044A200 6884000000              push 00000084
:0044A205 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A208 83C120                  add ecx, 00000020
:0044A20B 51                      push ecx
:0044A20C 8B55F0                  mov edx, dword ptr [ebp-10]
:0044A20F 8D04D528000000          lea eax, dword ptr [8*edx+00000028]
:0044A216 50                      push eax
:0044A217 E8490A0000              call 0044AC65
:0044A21C 83C414                  add esp, 00000014
:0044A21F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A222 81E1FF000000            and ecx, 000000FF
:0044A228 6BC924                  imul ecx, 00000024
:0044A22B 81C1B83B4B00            add ecx, 004B3BB8
:0044A231 E8DA26FCFF              call 0040C910
:0044A236 85C0                    test eax, eax
:0044A238 742D                    je 0044A267
:0044A23A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A23D 81E1FF000000            and ecx, 000000FF
:0044A243 6BC924                  imul ecx, 00000024
:0044A246 81C1B83B4B00            add ecx, 004B3BB8
:0044A24C E82FB5FBFF              call 00405780
:0044A251 25FF000000              and eax, 000000FF
:0044A256 83F807                  cmp eax, 00000007
:0044A259 7506                    jne 0044A261
:0044A25B C645F44B                mov [ebp-0C], 4B
:0044A25F EB04                    jmp 0044A265

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A259(C)
|
:0044A261 C645F478                mov [ebp-0C], 78

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A25F(U)
|
:0044A265 EB04                    jmp 0044A26B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A238(C)
|
:0044A267 C645F40C                mov [ebp-0C], 0C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A265(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A26B 6A04                    push 00000004
:0044A26D B9306D4800              mov ecx, 00486D30
:0044A272 E8DDBDFBFF              call 00406054
:0044A277 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044A27A 81E1FF000000            and ecx, 000000FF
:0044A280 51                      push ecx
:0044A281 B9306D4800              mov ecx, 00486D30
:0044A286 E82DBDFBFF              call 00405FB8
:0044A28B 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A28E 83C208                  add edx, 00000008
:0044A291 52                      push edx
:0044A292 8B45F0                  mov eax, dword ptr [ebp-10]
:0044A295 83C001                  add eax, 00000001
:0044A298 50                      push eax
:0044A299 B9306D4800              mov ecx, 00486D30
:0044A29E E868BCFBFF              call 00405F0B
:0044A2A3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A2A6 81E1FF000000            and ecx, 000000FF
:0044A2AC 6BC924                  imul ecx, 00000024
:0044A2AF 81C1B83B4B00            add ecx, 004B3BB8
:0044A2B5 E836C7FEFF              call 004369F0
:0044A2BA 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0044A2BB 6810EB4700              push 0047EB10
:0044A2C0 68306D4800              push 00486D30
:0044A2C5 E80EC9FBFF              call 00406BD8
:0044A2CA 83C40C                  add esp, 0000000C
:0044A2CD 6A10                    push 00000010
:0044A2CF B9306D4800              mov ecx, 00486D30
:0044A2D4 E8DFBCFBFF              call 00405FB8
:0044A2D9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A2DC 83C108                  add ecx, 00000008
:0044A2DF 51                      push ecx
:0044A2E0 8B55F0                  mov edx, dword ptr [ebp-10]
:0044A2E3 83C20E                  add edx, 0000000E
:0044A2E6 52                      push edx
:0044A2E7 B9306D4800              mov ecx, 00486D30
:0044A2EC E81ABCFBFF              call 00405F0B
:0044A2F1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A2F4 81E1FF000000            and ecx, 000000FF
:0044A2FA 6BC924                  imul ecx, 00000024
:0044A2FD 81C1B83B4B00            add ecx, 004B3BB8
:0044A303 E878CCFEFF              call 00436F80
:0044A308 25FF000000              and eax, 000000FF
:0044A30D 8B0485B0D64700          mov eax, dword ptr [4*eax+0047D6B0]
:0044A314 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0044A315 6814EB4700              push 0047EB14
:0044A31A 68306D4800              push 00486D30
:0044A31F E8B4C8FBFF              call 00406BD8
:0044A324 83C40C                  add esp, 0000000C
:0044A327 6880000000              push 00000080
:0044A32C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A32F 81E1FF000000            and ecx, 000000FF
:0044A335 6BC924                  imul ecx, 00000024
:0044A338 81C1B83B4B00            add ecx, 004B3BB8
:0044A33E E89D8FFBFF              call 004032E0
:0044A343 50                      push eax
:0044A344 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044A347 51                      push ecx
:0044A348 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A34B 83C220                  add edx, 00000020
:0044A34E 52                      push edx
:0044A34F 8B45F0                  mov eax, dword ptr [ebp-10]
:0044A352 8D0CC528000000          lea ecx, dword ptr [8*eax+00000028]
:0044A359 51                      push ecx
:0044A35A 6A0D                    push 0000000D
:0044A35C E8B2050000              call 0044A913
:0044A361 83C418                  add esp, 00000018
:0044A364 6880000000              push 00000080
:0044A369 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A36C 81E1FF000000            and ecx, 000000FF
:0044A372 6BC924                  imul ecx, 00000024
:0044A375 81C1B83B4B00            add ecx, 004B3BB8
:0044A37B E8808FFBFF              call 00403300
:0044A380 50                      push eax
:0044A381 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A384 52                      push edx
:0044A385 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A388 83C038                  add eax, 00000038
:0044A38B 50                      push eax
:0044A38C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A38F 8D14CD28000000          lea edx, dword ptr [8*ecx+00000028]
:0044A396 52                      push edx
:0044A397 6A0E                    push 0000000E
:0044A399 E875050000              call 0044A913
:0044A39E 83C418                  add esp, 00000018
:0044A3A1 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A3A3 6A04                    push 00000004
:0044A3A5 6A00                    push 00000000
:0044A3A7 6800190000              push 00001900
:0044A3AC B9A01C4B00              mov ecx, 004B1CA0
:0044A3B1 E8DAEB0200              call 00478F90
:0044A3B6 50                      push eax
:0044A3B7 6A18                    push 00000018
:0044A3B9 6A18                    push 00000018
:0044A3BB 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A3BE 83C020                  add eax, 00000020
:0044A3C1 50                      push eax
:0044A3C2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A3C5 8D14CD08000000          lea edx, dword ptr [8*ecx+00000008]
:0044A3CC 52                      push edx
:0044A3CD E8D2070000              call 0044ABA4
:0044A3D2 83C418                  add esp, 00000018
:0044A3D5 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A3D7 6A04                    push 00000004
:0044A3D9 6A00                    push 00000000
:0044A3DB 68401B0000              push 00001B40
:0044A3E0 B9A01C4B00              mov ecx, 004B1CA0
:0044A3E5 E8A6EB0200              call 00478F90
:0044A3EA 50                      push eax
:0044A3EB 6A18                    push 00000018
:0044A3ED 6A18                    push 00000018
:0044A3EF 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A3F2 83C038                  add eax, 00000038
:0044A3F5 50                      push eax
:0044A3F6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A3F9 8D14CD08000000          lea edx, dword ptr [8*ecx+00000008]
:0044A400 52                      push edx
:0044A401 E89E070000              call 0044ABA4
:0044A406 83C418                  add esp, 00000018
:0044A409 E8405DFCFF              call 0041014E
:0044A40E 8BE5                    mov esp, ebp
:0044A410 5D                      pop ebp
:0044A411 C3                      ret



* Referenced by a CALL at Addresses:
|:0043397B   , :004372D3   , :00437FFC   , :00438029   , :00438058   
|:00438080   , :004383B6   , :004385F1   , :0043D156   , :0043F01F   
|:0043F039   , :00441C53   , :00443C88   , :00443CB0   
|
:0044A412 55                      push ebp
:0044A413 8BEC                    mov ebp, esp
:0044A415 83EC28                  sub esp, 00000028
:0044A418 56                      push esi
:0044A419 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A41C 81E1FF000000            and ecx, 000000FF
:0044A422 6BC924                  imul ecx, 00000024
:0044A425 81C1B83B4B00            add ecx, 004B3BB8
:0044A42B E8B0C5FEFF              call 004369E0
:0044A430 6BC050                  imul eax, 00000050
:0044A433 05787F4900              add eax, 00497F78
:0044A438 8945FC                  mov dword ptr [ebp-04], eax
:0044A43B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A43E 81E1FF000000            and ecx, 000000FF
:0044A444 6BC924                  imul ecx, 00000024
:0044A447 81C1B83B4B00            add ecx, 004B3BB8
:0044A44D E88E8EFBFF              call 004032E0
:0044A452 8945E8                  mov dword ptr [ebp-18], eax
:0044A455 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A458 81E1FF000000            and ecx, 000000FF
:0044A45E 6BC924                  imul ecx, 00000024
:0044A461 81C1B83B4B00            add ecx, 004B3BB8
:0044A467 E8948EFBFF              call 00403300
:0044A46C 8945F4                  mov dword ptr [ebp-0C], eax
:0044A46F 8B4508                  mov eax, dword ptr [ebp+08]
:0044A472 25FF000000              and eax, 000000FF
:0044A477 8945F0                  mov dword ptr [ebp-10], eax
:0044A47A 8B4D09                  mov ecx, dword ptr [ebp+09]
:0044A47D 81E1FF000000            and ecx, 000000FF
:0044A483 83C102                  add ecx, 00000002
:0044A486 C1E104                  shl ecx, 04
:0044A489 83C108                  add ecx, 00000008
:0044A48C 894DEC                  mov dword ptr [ebp-14], ecx
:0044A48F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A492 81E1FF000000            and ecx, 000000FF
:0044A498 6BC924                  imul ecx, 00000024
:0044A49B 81C1B83B4B00            add ecx, 004B3BB8
:0044A4A1 E86A24FCFF              call 0040C910
:0044A4A6 F7D8                    neg eax
:0044A4A8 1BC0                    sbb eax, eax
:0044A4AA 2540E7FFFF              and eax, FFFFE740
:0044A4AF 05C0180000              add eax, 000018C0
:0044A4B4 8945F8                  mov dword ptr [ebp-08], eax
:0044A4B7 8B5514                  mov edx, dword ptr [ebp+14]
:0044A4BA 81E2FF000000            and edx, 000000FF
:0044A4C0 83E201                  and edx, 00000001
:0044A4C3 F7DA                    neg edx
:0044A4C5 1BD2                    sbb edx, edx
:0044A4C7 81E2600C0000            and edx, 00000C60
:0044A4CD 8B45F8                  mov eax, dword ptr [ebp-08]
:0044A4D0 03C2                    add eax, edx
:0044A4D2 8945F8                  mov dword ptr [ebp-08], eax
:0044A4D5 E8595CFCFF              call 00410133
:0044A4DA 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044A4DD 81E1FF000000            and ecx, 000000FF
:0044A4E3 83E101                  and ecx, 00000001
:0044A4E6 85C9                    test ecx, ecx
:0044A4E8 0F851F010000            jne 0044A60D
:0044A4EE 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A4F0 6A04                    push 00000004
:0044A4F2 6A00                    push 00000000
:0044A4F4 68007B0100              push 00017B00
:0044A4F9 B9F0174B00              mov ecx, 004B17F0
:0044A4FE E88DEA0200              call 00478F90
:0044A503 0345F8                  add eax, dword ptr [ebp-08]
:0044A506 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044A507 6A08                    push 00000008
:0044A509 6884000000              push 00000084
:0044A50E 8B55EC                  mov edx, dword ptr [ebp-14]
:0044A511 83C220                  add edx, 00000020
:0044A514 52                      push edx
:0044A515 8B45F0                  mov eax, dword ptr [ebp-10]
:0044A518 8D0CC528000000          lea ecx, dword ptr [8*eax+00000028]
:0044A51F 51                      push ecx
:0044A520 E87F060000              call 0044ABA4
:0044A525 83C418                  add esp, 00000018
:0044A528 8B5514                  mov edx, dword ptr [ebp+14]
:0044A52B 81E2FF000000            and edx, 000000FF
:0044A531 81E280000000            and edx, 00000080
:0044A537 85D2                    test edx, edx
:0044A539 745A                    je 0044A595
:0044A53B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A53E 81E1FF000000            and ecx, 000000FF
:0044A544 6BC924                  imul ecx, 00000024
:0044A547 81C1B83B4B00            add ecx, 004B3BB8
:0044A54D E88E8DFBFF              call 004032E0
:0044A552 8BF0                    mov esi, eax
:0044A554 037510                  add esi, dword ptr [ebp+10]
:0044A557 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044A55A E88B78FBFF              call 00401DEA
:0044A55F 3BF0                    cmp esi, eax
:0044A561 7D1F                    jge 0044A582
:0044A563 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A566 81E1FF000000            and ecx, 000000FF
:0044A56C 6BC924                  imul ecx, 00000024
:0044A56F 81C1B83B4B00            add ecx, 004B3BB8
:0044A575 E8668DFBFF              call 004032E0
:0044A57A 034510                  add eax, dword ptr [ebp+10]
:0044A57D 8945E4                  mov dword ptr [ebp-1C], eax
:0044A580 EB0B                    jmp 0044A58D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A561(C)
|
:0044A582 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044A585 E86078FBFF              call 00401DEA
:0044A58A 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A580(U)
|
:0044A58D 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044A590 8945E8                  mov dword ptr [ebp-18], eax
:0044A593 EB4A                    jmp 0044A5DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A539(C)
|
:0044A595 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A598 81E1FF000000            and ecx, 000000FF
:0044A59E 6BC924                  imul ecx, 00000024
:0044A5A1 81C1B83B4B00            add ecx, 004B3BB8
:0044A5A7 E8348DFBFF              call 004032E0
:0044A5AC 2B4510                  sub eax, dword ptr [ebp+10]
:0044A5AF 85C0                    test eax, eax
:0044A5B1 7E1F                    jle 0044A5D2
:0044A5B3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A5B6 81E1FF000000            and ecx, 000000FF
:0044A5BC 6BC924                  imul ecx, 00000024
:0044A5BF 81C1B83B4B00            add ecx, 004B3BB8
:0044A5C5 E8168DFBFF              call 004032E0
:0044A5CA 2B4510                  sub eax, dword ptr [ebp+10]
:0044A5CD 8945E0                  mov dword ptr [ebp-20], eax
:0044A5D0 EB07                    jmp 0044A5D9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A5B1(C)
|
:0044A5D2 C745E000000000          mov [ebp-20], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A5D0(U)
|
:0044A5D9 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044A5DC 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A593(U)
|
:0044A5DF 6880000000              push 00000080
:0044A5E4 8B55E8                  mov edx, dword ptr [ebp-18]
:0044A5E7 52                      push edx
:0044A5E8 8B45FC                  mov eax, dword ptr [ebp-04]
:0044A5EB 50                      push eax
:0044A5EC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A5EF 83C120                  add ecx, 00000020
:0044A5F2 51                      push ecx
:0044A5F3 8B55F0                  mov edx, dword ptr [ebp-10]
:0044A5F6 8D04D528000000          lea eax, dword ptr [8*edx+00000028]
:0044A5FD 50                      push eax
:0044A5FE 6A0D                    push 0000000D
:0044A600 E80E030000              call 0044A913
:0044A605 83C418                  add esp, 00000018
:0044A608 E926010000              jmp 0044A733

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A4E8(C)
|
:0044A60D 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A60F 6A04                    push 00000004
:0044A611 6A00                    push 00000000
:0044A613 68007B0100              push 00017B00
:0044A618 B9F0174B00              mov ecx, 004B17F0
:0044A61D E86EE90200              call 00478F90
:0044A622 0345F8                  add eax, dword ptr [ebp-08]
:0044A625 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044A626 6A08                    push 00000008
:0044A628 6884000000              push 00000084
:0044A62D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044A630 83C138                  add ecx, 00000038
:0044A633 51                      push ecx
:0044A634 8B55F0                  mov edx, dword ptr [ebp-10]
:0044A637 8D04D528000000          lea eax, dword ptr [8*edx+00000028]
:0044A63E 50                      push eax
:0044A63F E860050000              call 0044ABA4
:0044A644 83C418                  add esp, 00000018
:0044A647 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044A64A 81E1FF000000            and ecx, 000000FF
:0044A650 81E180000000            and ecx, 00000080
:0044A656 85C9                    test ecx, ecx
:0044A658 7466                    je 0044A6C0
:0044A65A 6A13                    push 00000013
:0044A65C B9F8544B00              mov ecx, 004B54F8
:0044A661 E8B4EE0100              call 0046951A
:0044A666 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A669 81E1FF000000            and ecx, 000000FF
:0044A66F 6BC924                  imul ecx, 00000024
:0044A672 81C1B83B4B00            add ecx, 004B3BB8
:0044A678 E8838CFBFF              call 00403300
:0044A67D 8BF0                    mov esi, eax
:0044A67F 037510                  add esi, dword ptr [ebp+10]
:0044A682 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044A685 E89177FBFF              call 00401E1B
:0044A68A 3BF0                    cmp esi, eax
:0044A68C 7D1F                    jge 0044A6AD
:0044A68E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A691 81E1FF000000            and ecx, 000000FF
:0044A697 6BC924                  imul ecx, 00000024
:0044A69A 81C1B83B4B00            add ecx, 004B3BB8
:0044A6A0 E85B8CFBFF              call 00403300
:0044A6A5 034510                  add eax, dword ptr [ebp+10]
:0044A6A8 8945DC                  mov dword ptr [ebp-24], eax
:0044A6AB EB0B                    jmp 0044A6B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A68C(C)
|
:0044A6AD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044A6B0 E86677FBFF              call 00401E1B
:0044A6B5 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A6AB(U)
|
:0044A6B8 8B55DC                  mov edx, dword ptr [ebp-24]
:0044A6BB 8955F4                  mov dword ptr [ebp-0C], edx
:0044A6BE EB4A                    jmp 0044A70A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A658(C)
|
:0044A6C0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A6C3 81E1FF000000            and ecx, 000000FF
:0044A6C9 6BC924                  imul ecx, 00000024
:0044A6CC 81C1B83B4B00            add ecx, 004B3BB8
:0044A6D2 E8298CFBFF              call 00403300
:0044A6D7 2B4510                  sub eax, dword ptr [ebp+10]
:0044A6DA 85C0                    test eax, eax
:0044A6DC 7E1F                    jle 0044A6FD
:0044A6DE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A6E1 81E1FF000000            and ecx, 000000FF
:0044A6E7 6BC924                  imul ecx, 00000024
:0044A6EA 81C1B83B4B00            add ecx, 004B3BB8
:0044A6F0 E80B8CFBFF              call 00403300
:0044A6F5 2B4510                  sub eax, dword ptr [ebp+10]
:0044A6F8 8945D8                  mov dword ptr [ebp-28], eax
:0044A6FB EB07                    jmp 0044A704

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A6DC(C)
|
:0044A6FD C745D800000000          mov [ebp-28], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A6FB(U)
|
:0044A704 8B45D8                  mov eax, dword ptr [ebp-28]
:0044A707 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A6BE(U)
|
:0044A70A 6880000000              push 00000080
:0044A70F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044A712 51                      push ecx
:0044A713 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A716 52                      push edx
:0044A717 8B45EC                  mov eax, dword ptr [ebp-14]
:0044A71A 83C038                  add eax, 00000038
:0044A71D 50                      push eax
:0044A71E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044A721 8D14CD28000000          lea edx, dword ptr [8*ecx+00000028]
:0044A728 52                      push edx
:0044A729 6A0E                    push 0000000E
:0044A72B E8E3010000              call 0044A913
:0044A730 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A608(U)
|
:0044A733 E8165AFCFF              call 0041014E
:0044A738 5E                      pop esi
:0044A739 8BE5                    mov esp, ebp
:0044A73B 5D                      pop ebp
:0044A73C C3                      ret



* Referenced by a CALL at Addresses:
|:0044A1DF   , :0044E344   
|
:0044A73D 55                      push ebp
:0044A73E 8BEC                    mov ebp, esp
:0044A740 81EC10010000            sub esp, 00000110
:0044A746 8D85FCFEFFFF            lea eax, dword ptr [ebp+FFFFFEFC]
:0044A74C 8945FC                  mov dword ptr [ebp-04], eax
:0044A74F C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:0044A759 EB18                    jmp 0044A773

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A7AA(U)
|
:0044A75B 8B8DF4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF4]
:0044A761 83C101                  add ecx, 00000001
:0044A764 898DF4FEFFFF            mov dword ptr [ebp+FFFFFEF4], ecx
:0044A76A 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A76D 83C201                  add edx, 00000001
:0044A770 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A759(U)
|
:0044A773 81BDF4FEFFFF00010000    cmp dword ptr [ebp+FFFFFEF4], 00000100
:0044A77D 732D                    jnb 0044A7AC
:0044A77F 8B85F4FEFFFF            mov eax, dword ptr [ebp+FFFFFEF4]
:0044A785 33D2                    xor edx, edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044A787 B902000000              mov ecx, 00000002
:0044A78C F7F1                    div ecx
:0044A78E F7DA                    neg edx
:0044A790 1BD2                    sbb edx, edx
:0044A792 80E201                  and dl, 01
:0044A795 81C2FF000000            add edx, 000000FF
:0044A79B 52                      push edx
:0044A79C 6A01                    push 00000001
:0044A79E 8B55FC                  mov edx, dword ptr [ebp-04]
:0044A7A1 52                      push edx
:0044A7A2 E839DE0200              call 004785E0
:0044A7A7 83C40C                  add esp, 0000000C
:0044A7AA EBAF                    jmp 0044A75B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A77D(C)
|
:0044A7AC E88259FCFF              call 00410133
:0044A7B1 8B450C                  mov eax, dword ptr [ebp+0C]
:0044A7B4 8985F0FEFFFF            mov dword ptr [ebp+FFFFFEF0], eax
:0044A7BA EB0F                    jmp 0044A7CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A826(U)
|
:0044A7BC 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:0044A7C2 83C110                  add ecx, 00000010
:0044A7C5 898DF0FEFFFF            mov dword ptr [ebp+FFFFFEF0], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A7BA(U)
|
:0044A7CB 8B550C                  mov edx, dword ptr [ebp+0C]
:0044A7CE 035514                  add edx, dword ptr [ebp+14]
:0044A7D1 3995F0FEFFFF            cmp dword ptr [ebp+FFFFFEF0], edx
:0044A7D7 734F                    jnb 0044A828
:0044A7D9 8B4508                  mov eax, dword ptr [ebp+08]
:0044A7DC 8985F8FEFFFF            mov dword ptr [ebp+FFFFFEF8], eax
:0044A7E2 EB0F                    jmp 0044A7F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A824(U)
|
:0044A7E4 8B8DF8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF8]
:0044A7EA 83C110                  add ecx, 00000010
:0044A7ED 898DF8FEFFFF            mov dword ptr [ebp+FFFFFEF8], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A7E2(U)
|
:0044A7F3 8B5508                  mov edx, dword ptr [ebp+08]
:0044A7F6 035510                  add edx, dword ptr [ebp+10]
:0044A7F9 3995F8FEFFFF            cmp dword ptr [ebp+FFFFFEF8], edx
:0044A7FF 7325                    jnb 0044A826

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044A801 6A02                    push 00000002
:0044A803 8D85FCFEFFFF            lea eax, dword ptr [ebp+FFFFFEFC]
:0044A809 50                      push eax
:0044A80A 6A10                    push 00000010
:0044A80C 6A10                    push 00000010
:0044A80E 8B8DF0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF0]
:0044A814 51                      push ecx
:0044A815 8B95F8FEFFFF            mov edx, dword ptr [ebp+FFFFFEF8]
:0044A81B 52                      push edx
:0044A81C E883030000              call 0044ABA4
:0044A821 83C418                  add esp, 00000018
:0044A824 EBBE                    jmp 0044A7E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A7FF(C)
|
:0044A826 EB94                    jmp 0044A7BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A7D7(C)
|
:0044A828 E82159FCFF              call 0041014E
:0044A82D 8BE5                    mov esp, ebp
:0044A82F 5D                      pop ebp
:0044A830 C3                      ret



* Referenced by a CALL at Addresses:
|:0044A940   , :0044A99D   , :0044AAC6   
|
:0044A831 55                      push ebp
:0044A832 8BEC                    mov ebp, esp
:0044A834 83EC14                  sub esp, 00000014
:0044A837 8B4514                  mov eax, dword ptr [ebp+14]
:0044A83A 8945FC                  mov dword ptr [ebp-04], eax
:0044A83D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044A840 894DF0                  mov dword ptr [ebp-10], ecx
:0044A843 837DF00D                cmp dword ptr [ebp-10], 0000000D
:0044A847 7408                    je 0044A851
:0044A849 837DF00E                cmp dword ptr [ebp-10], 0000000E
:0044A84D 7415                    je 0044A864
:0044A84F EB26                    jmp 0044A877

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A847(C)
|
:0044A851 8B5514                  mov edx, dword ptr [ebp+14]
:0044A854 8955F8                  mov dword ptr [ebp-08], edx
:0044A857 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044A85A E88B75FBFF              call 00401DEA
:0044A85F 8945FC                  mov dword ptr [ebp-04], eax
:0044A862 EB35                    jmp 0044A899

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A84D(C)
|
:0044A864 8B4514                  mov eax, dword ptr [ebp+14]
:0044A867 8945F8                  mov dword ptr [ebp-08], eax
:0044A86A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044A86D E8A975FBFF              call 00401E1B
:0044A872 8945FC                  mov dword ptr [ebp-04], eax
:0044A875 EB22                    jmp 0044A899

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A84F(U)
|
:0044A877 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044A87A 51                      push ecx
:0044A87B E808A2FBFF              call 00404A88
:0044A880 83C404                  add esp, 00000004
:0044A883 8945F4                  mov dword ptr [ebp-0C], eax
:0044A886 8B550C                  mov edx, dword ptr [ebp+0C]
:0044A889 52                      push edx
:0044A88A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044A88D 50                      push eax
:0044A88E E84B6BFBFF              call 004013DE
:0044A893 83C408                  add esp, 00000008
:0044A896 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A862(U), :0044A875(U)
|
:0044A899 837D1002                cmp dword ptr [ebp+10], 00000002
:0044A89D 7426                    je 0044A8C5
:0044A89F 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:0044A8A6 741D                    je 0044A8C5
:0044A8A8 837DFC00                cmp dword ptr [ebp-04], 00000000
:0044A8AC 7417                    je 0044A8C5
:0044A8AE 837DF800                cmp dword ptr [ebp-08], 00000000
:0044A8B2 7411                    je 0044A8C5
:0044A8B4 8B45F8                  mov eax, dword ptr [ebp-08]
:0044A8B7 69C0FF000000            imul eax, 000000FF
:0044A8BD 33D2                    xor edx, edx
:0044A8BF F775FC                  div [ebp-04]
:0044A8C2 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A89D(C), :0044A8A6(C), :0044A8AC(C), :0044A8B2(C)
|
:0044A8C5 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044A8C8 894DEC                  mov dword ptr [ebp-14], ecx
:0044A8CB 837DEC00                cmp dword ptr [ebp-14], 00000000
:0044A8CF 7408                    je 0044A8D9
:0044A8D1 837DEC01                cmp dword ptr [ebp-14], 00000001
:0044A8D5 7423                    je 0044A8FA
:0044A8D7 EB33                    jmp 0044A90C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A8CF(C)
|
:0044A8D9 817DF8A1000000          cmp dword ptr [ebp-08], 000000A1
:0044A8E0 7204                    jb 0044A8E6
:0044A8E2 33C0                    xor eax, eax
:0044A8E4 EB29                    jmp 0044A90F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A8E0(C)
|
:0044A8E6 837DF851                cmp dword ptr [ebp-08], 00000051
:0044A8EA 7207                    jb 0044A8F3
:0044A8EC B801000000              mov eax, 00000001
:0044A8F1 EB1C                    jmp 0044A90F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A8EA(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044A8F3 B802000000              mov eax, 00000002
:0044A8F8 EB15                    jmp 0044A90F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A8D5(C)
|
:0044A8FA 8B4518                  mov eax, dword ptr [ebp+18]
:0044A8FD 0FAF45F8                imul eax, dword ptr [ebp-08]
:0044A901 33D2                    xor edx, edx
:0044A903 B9FF000000              mov ecx, 000000FF
:0044A908 F7F1                    div ecx
:0044A90A EB03                    jmp 0044A90F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A8D7(U)
|
:0044A90C 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044A8E4(U), :0044A8F1(U), :0044A8F8(U), :0044A90A(U)
|
:0044A90F 8BE5                    mov esp, ebp
:0044A911 5D                      pop ebp
:0044A912 C3                      ret



* Referenced by a CALL at Addresses:
|:0044A35C   , :0044A399   , :0044A600   , :0044A72B   
|
:0044A913 55                      push ebp
:0044A914 8BEC                    mov ebp, esp
:0044A916 83EC10                  sub esp, 00000010
:0044A919 8B4510                  mov eax, dword ptr [ebp+10]
:0044A91C 8D0CC540000000          lea ecx, dword ptr [8*eax+00000040]
:0044A923 C1E903                  shr ecx, 03
:0044A926 894DF8                  mov dword ptr [ebp-08], ecx
:0044A929 E80558FCFF              call 00410133
:0044A92E 8B551C                  mov edx, dword ptr [ebp+1C]
:0044A931 52                      push edx
:0044A932 8B4518                  mov eax, dword ptr [ebp+18]
:0044A935 50                      push eax
:0044A936 6A00                    push 00000000
:0044A938 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044A93B 51                      push ecx
:0044A93C 8B5514                  mov edx, dword ptr [ebp+14]
:0044A93F 52                      push edx
:0044A940 E8ECFEFFFF              call 0044A831
:0044A945 83C414                  add esp, 00000014
:0044A948 8B0485D8E94700          mov eax, dword ptr [4*eax+0047E9D8]
:0044A94F 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044A952 6A0A                    push 0000000A
:0044A954 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0044A956 6A0A                    push 0000000A
:0044A958 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0044A95B 51                      push ecx
:0044A95C 8B55F8                  mov edx, dword ptr [ebp-08]
:0044A95F 52                      push edx
:0044A960 8B450C                  mov eax, dword ptr [ebp+0C]
:0044A963 50                      push eax
:0044A964 E89258FCFF              call 004101FB
:0044A969 83C418                  add esp, 00000018

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A96C 6A04                    push 00000004
:0044A96E 6A00                    push 00000000
:0044A970 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044A973 51                      push ecx
:0044A974 B9A01C4B00              mov ecx, 004B1CA0
:0044A979 E812E60200              call 00478F90
:0044A97E 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044A97F 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044A981 6A08                    push 00000008
:0044A983 E831B50200              call 00475EB9
:0044A988 83C40C                  add esp, 0000000C
:0044A98B 8B551C                  mov edx, dword ptr [ebp+1C]
:0044A98E 52                      push edx
:0044A98F 8B4518                  mov eax, dword ptr [ebp+18]
:0044A992 50                      push eax
:0044A993 6A01                    push 00000001
:0044A995 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044A998 51                      push ecx
:0044A999 8B5514                  mov edx, dword ptr [ebp+14]
:0044A99C 52                      push edx
:0044A99D E88FFEFFFF              call 0044A831
:0044A9A2 83C414                  add esp, 00000014
:0044A9A5 8945F4                  mov dword ptr [ebp-0C], eax
:0044A9A8 837DF400                cmp dword ptr [ebp-0C], 00000000
:0044A9AC 7427                    je 0044A9D5

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044A9AE 6A02                    push 00000002
:0044A9B0 8B45F8                  mov eax, dword ptr [ebp-08]
:0044A9B3 83C008                  add eax, 00000008
:0044A9B6 50                      push eax
:0044A9B7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044A9BA 8B550C                  mov edx, dword ptr [ebp+0C]
:0044A9BD 8D440AFF                lea eax, dword ptr [edx+ecx-01]
:0044A9C1 50                      push eax
:0044A9C2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044A9C5 83C101                  add ecx, 00000001
:0044A9C8 51                      push ecx
:0044A9C9 8B550C                  mov edx, dword ptr [ebp+0C]
:0044A9CC 52                      push edx
:0044A9CD E84ABC0200              call 0047661C
:0044A9D2 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044A9AC(C)
|
:0044A9D5 E87457FCFF              call 0041014E
:0044A9DA 6A00                    push 00000000
:0044A9DC B9306D4800              mov ecx, 00486D30
:0044A9E1 E80AB6FBFF              call 00405FF0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044A9E6 6A04                    push 00000004
:0044A9E8 B9306D4800              mov ecx, 00486D30
:0044A9ED E862B6FBFF              call 00406054
:0044A9F2 6A01                    push 00000001
:0044A9F4 B9306D4800              mov ecx, 00486D30
:0044A9F9 E840B6FBFF              call 0040603E
:0044A9FE 6A00                    push 00000000
:0044AA00 B9306D4800              mov ecx, 00486D30
:0044AA05 E81EB6FBFF              call 00406028
:0044AA0A 6A10                    push 00000010
:0044AA0C B9306D4800              mov ecx, 00486D30
:0044AA11 E8A2B5FBFF              call 00405FB8
:0044AA16 8B4508                  mov eax, dword ptr [ebp+08]
:0044AA19 8945F0                  mov dword ptr [ebp-10], eax
:0044AA1C 837DF00D                cmp dword ptr [ebp-10], 0000000D
:0044AA20 7408                    je 0044AA2A
:0044AA22 837DF00E                cmp dword ptr [ebp-10], 0000000E
:0044AA26 743B                    je 0044AA63
:0044AA28 EB72                    jmp 0044AA9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AA20(C)
|
:0044AA2A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044AA2D 51                      push ecx
:0044AA2E 8B550C                  mov edx, dword ptr [ebp+0C]
:0044AA31 C1EA03                  shr edx, 03
:0044AA34 83C203                  add edx, 00000003
:0044AA37 52                      push edx
:0044AA38 B9306D4800              mov ecx, 00486D30
:0044AA3D E8C9B4FBFF              call 00405F0B
:0044AA42 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044AA45 E8A073FBFF              call 00401DEA
:0044AA4A 50                      push eax
:0044AA4B 8B4518                  mov eax, dword ptr [ebp+18]
:0044AA4E 50                      push eax

* Possible StringData Ref from Data Obj ->"%4u /%4u"
                                  |
:0044AA4F 6818EB4700              push 0047EB18
:0044AA54 68306D4800              push 00486D30
:0044AA59 E87AC1FBFF              call 00406BD8
:0044AA5E 83C410                  add esp, 00000010
:0044AA61 EB7E                    jmp 0044AAE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AA26(C)
|
:0044AA63 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044AA66 51                      push ecx
:0044AA67 8B550C                  mov edx, dword ptr [ebp+0C]
:0044AA6A C1EA03                  shr edx, 03
:0044AA6D 83C203                  add edx, 00000003
:0044AA70 52                      push edx
:0044AA71 B9306D4800              mov ecx, 00486D30
:0044AA76 E890B4FBFF              call 00405F0B
:0044AA7B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044AA7E E89873FBFF              call 00401E1B
:0044AA83 50                      push eax
:0044AA84 8B4518                  mov eax, dword ptr [ebp+18]
:0044AA87 50                      push eax

* Possible StringData Ref from Data Obj ->"%4u /%4u"
                                  |
:0044AA88 6824EB4700              push 0047EB24
:0044AA8D 68306D4800              push 00486D30
:0044AA92 E841C1FBFF              call 00406BD8
:0044AA97 83C410                  add esp, 00000010
:0044AA9A EB45                    jmp 0044AAE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AA28(U)
|
:0044AA9C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044AA9F 51                      push ecx
:0044AAA0 8B550C                  mov edx, dword ptr [ebp+0C]
:0044AAA3 C1EA03                  shr edx, 03
:0044AAA6 83C205                  add edx, 00000005
:0044AAA9 52                      push edx
:0044AAAA B9306D4800              mov ecx, 00486D30
:0044AAAF E857B4FBFF              call 00405F0B
:0044AAB4 8B451C                  mov eax, dword ptr [ebp+1C]
:0044AAB7 50                      push eax
:0044AAB8 8B4D18                  mov ecx, dword ptr [ebp+18]
:0044AABB 51                      push ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044AABC 6A02                    push 00000002
:0044AABE 8B5508                  mov edx, dword ptr [ebp+08]
:0044AAC1 52                      push edx
:0044AAC2 8B4514                  mov eax, dword ptr [ebp+14]
:0044AAC5 50                      push eax
:0044AAC6 E866FDFFFF              call 0044A831
:0044AACB 83C414                  add esp, 00000014
:0044AACE 50                      push eax

* Possible StringData Ref from Data Obj ->"%4u"
                                  |
:0044AACF 6830EB4700              push 0047EB30
:0044AAD4 68306D4800              push 00486D30
:0044AAD9 E8FAC0FBFF              call 00406BD8
:0044AADE 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044AA61(U), :0044AA9A(U)
|
:0044AAE1 6A00                    push 00000000
:0044AAE3 B9306D4800              mov ecx, 00486D30
:0044AAE8 E851B5FBFF              call 0040603E
:0044AAED 8BE5                    mov esp, ebp
:0044AAEF 5D                      pop ebp
:0044AAF0 C3                      ret


:0044AAF1 55                      push ebp
:0044AAF2 8BEC                    mov ebp, esp
:0044AAF4 51                      push ecx
:0044AAF5 B978294B00              mov ecx, 004B2978
:0044AAFA E8B11DFCFF              call 0040C8B0
:0044AAFF 8945FC                  mov dword ptr [ebp-04], eax
:0044AB02 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AB05 2500400000              and eax, 00004000
:0044AB0A 85C0                    test eax, eax
:0044AB0C 7419                    je 0044AB27
:0044AB0E 837D0800                cmp dword ptr [ebp+08], 00000000
:0044AB12 7513                    jne 0044AB27
:0044AB14 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044AB17 80E5BF                  and ch, BF
:0044AB1A 51                      push ecx
:0044AB1B B978294B00              mov ecx, 004B2978
:0044AB20 E8FB46FDFF              call 0041F220
:0044AB25 EB24                    jmp 0044AB4B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044AB0C(C), :0044AB12(C)
|
:0044AB27 8B55FC                  mov edx, dword ptr [ebp-04]
:0044AB2A 81E200400000            and edx, 00004000
:0044AB30 85D2                    test edx, edx
:0044AB32 7517                    jne 0044AB4B
:0044AB34 837D0800                cmp dword ptr [ebp+08], 00000000
:0044AB38 7411                    je 0044AB4B
:0044AB3A 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AB3D 80CC40                  or ah, 40
:0044AB40 50                      push eax
:0044AB41 B978294B00              mov ecx, 004B2978
:0044AB46 E8D546FDFF              call 0041F220

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044AB25(U), :0044AB32(C), :0044AB38(C)
|
:0044AB4B 8BE5                    mov esp, ebp
:0044AB4D 5D                      pop ebp
:0044AB4E C3                      ret



* Referenced by a CALL at Addresses:
|:004422C4   , :00442DE1   , :00442EAC   , :00442FAD   , :0044A0D9   
|
:0044AB4F 55                      push ebp
:0044AB50 8BEC                    mov ebp, esp
:0044AB52 51                      push ecx
:0044AB53 53                      push ebx
:0044AB54 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044AB57 E894ABFBFF              call 004056F0
:0044AB5C 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0044AB5F 81E3FF000000            and ebx, 000000FF
:0044AB65 6BDB03                  imul ebx, 00000003
:0044AB68 B958494B00              mov ecx, 004B4958
:0044AB6D E8A0010000              call 0044AD12
:0044AB72 2BD8                    sub ebx, eax
:0044AB74 885DFC                  mov byte ptr [ebp-04], bl
:0044AB77 8B5D0D                  mov ebx, dword ptr [ebp+0D]
:0044AB7A 81E3FF000000            and ebx, 000000FF
:0044AB80 6BDB03                  imul ebx, 00000003
:0044AB83 B958494B00              mov ecx, 004B4958
:0044AB88 E896010000              call 0044AD23
:0044AB8D 2BD8                    sub ebx, eax
:0044AB8F 885DFD                  mov byte ptr [ebp-03], bl
:0044AB92 8B4508                  mov eax, dword ptr [ebp+08]
:0044AB95 668B4DFC                mov cx, word ptr [ebp-04]
:0044AB99 668908                  mov word ptr [eax], cx
:0044AB9C 8B4508                  mov eax, dword ptr [ebp+08]
:0044AB9F 5B                      pop ebx
:0044ABA0 8BE5                    mov esp, ebp
:0044ABA2 5D                      pop ebp
:0044ABA3 C3                      ret



* Referenced by a CALL at Addresses:
|:00432C05   , :00432C3B   , :00432C84   , :00435907   , :00436099   
|:004360CE   , :00436146   , :004362AB   , :00436328   , :004364AF   
|:004365C7   , :0043663F   , :004367FC   , :004421B5   , :0044240A   
|:0044257D   , :00442AAF   , :00442AE6   , :00442BB8   , :00442BEF   
|:00442E58   , :00442F3F   , :00442F75   , :00448281   , :004482BE   
|:00448300   , :0044833F   , :0044837E   , :004483CB   , :00448658   
|:00448714   , :00448743   , :00448787   , :004487FA   , :00448890   
|:004488CD   , :004488FF   , :0044892D   , :0044896A   , :004489AF   
|:00448C62   , :00448C99   , :00448CE3   , :004492AA   , :00449313   
|:00449369   , :0044939A   , :00449405   , :0044953A   , :00449581   
|:004495F1   , :00449660   , :00449697   , :004496DC   , :004498C0   
|:004498F5   , :0044993D   , :0044A08E   , :0044A3CD   , :0044A401   
|:0044A520   , :0044A63F   , :0044A81C   , :0044B72E   , :0044B793   
|:0044B7FB   , :0044B8A4   , :0044BA2A   , :0044E371   
|
:0044ABA4 55                      push ebp
:0044ABA5 8BEC                    mov ebp, esp
:0044ABA7 B958494B00              mov ecx, 004B4958
:0044ABAC E8B93D0000              call 0044E96A
:0044ABB1 83C007                  add eax, 00000007
:0044ABB4 99                      cdq
:0044ABB5 B930000000              mov ecx, 00000030
:0044ABBA F7F9                    idiv ecx
:0044ABBC 6BC030                  imul eax, 00000030
:0044ABBF 83C028                  add eax, 00000028
:0044ABC2 50                      push eax
:0044ABC3 B958494B00              mov ecx, 004B4958
:0044ABC8 E8763D0000              call 0044E943
:0044ABCD 83C02F                  add eax, 0000002F
:0044ABD0 99                      cdq
:0044ABD1 B930000000              mov ecx, 00000030
:0044ABD6 F7F9                    idiv ecx
:0044ABD8 6BC030                  imul eax, 00000030
:0044ABDB 50                      push eax
:0044ABDC 6A28                    push 00000028
:0044ABDE 6A00                    push 00000000
:0044ABE0 E8C8B10200              call 00475DAD
:0044ABE5 83C410                  add esp, 00000010
:0044ABE8 6A00                    push 00000000
:0044ABEA 6A00                    push 00000000
:0044ABEC 8B551C                  mov edx, dword ptr [ebp+1C]
:0044ABEF 52                      push edx
:0044ABF0 E828B10200              call 00475D1D
:0044ABF5 83C40C                  add esp, 0000000C
:0044ABF8 8B4518                  mov eax, dword ptr [ebp+18]
:0044ABFB 50                      push eax
:0044ABFC 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044ABFF 51                      push ecx
:0044AC00 8B5510                  mov edx, dword ptr [ebp+10]
:0044AC03 52                      push edx
:0044AC04 8B450C                  mov eax, dword ptr [ebp+0C]
:0044AC07 50                      push eax
:0044AC08 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044AC0B 51                      push ecx
:0044AC0C E8E3BE0200              call 00476AF4
:0044AC11 83C414                  add esp, 00000014
:0044AC14 6A00                    push 00000000
:0044AC16 6A00                    push 00000000
:0044AC18 6A00                    push 00000000
:0044AC1A E8FEB00200              call 00475D1D
:0044AC1F 83C40C                  add esp, 0000000C
:0044AC22 B958494B00              mov ecx, 004B4958
:0044AC27 E83E3D0000              call 0044E96A
:0044AC2C 83C007                  add eax, 00000007
:0044AC2F 99                      cdq
:0044AC30 B930000000              mov ecx, 00000030
:0044AC35 F7F9                    idiv ecx
:0044AC37 6BC030                  imul eax, 00000030
:0044AC3A 83C028                  add eax, 00000028
:0044AC3D 50                      push eax
:0044AC3E B958494B00              mov ecx, 004B4958
:0044AC43 E8FB3C0000              call 0044E943
:0044AC48 83C02F                  add eax, 0000002F
:0044AC4B 99                      cdq
:0044AC4C B930000000              mov ecx, 00000030
:0044AC51 F7F9                    idiv ecx
:0044AC53 6BC030                  imul eax, 00000030
:0044AC56 50                      push eax
:0044AC57 6A28                    push 00000028
:0044AC59 6A00                    push 00000000
:0044AC5B E84DB10200              call 00475DAD
:0044AC60 83C410                  add esp, 00000010
:0044AC63 5D                      pop ebp
:0044AC64 C3                      ret



* Referenced by a CALL at Addresses:
|:00420095   , :004200F0   , :00432B9C   , :00442370   , :00442694   
|:00442A92   , :00442B9B   , :0044822A   , :004485B1   , :004486BB   
|:004487B1   , :00448BC6   , :00448C07   , :00448DAE   , :00448F04   
|:0044905B   , :004491B2   , :0044933D   , :004493C4   , :004494D8   
|:004495AB   , :00449828   , :00449867   , :0044A01D   , :0044A217   
|
:0044AC65 55                      push ebp
:0044AC66 8BEC                    mov ebp, esp
:0044AC68 8B4518                  mov eax, dword ptr [ebp+18]
:0044AC6B 50                      push eax
:0044AC6C 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044AC6F 51                      push ecx
:0044AC70 8B5510                  mov edx, dword ptr [ebp+10]
:0044AC73 52                      push edx
:0044AC74 8B450C                  mov eax, dword ptr [ebp+0C]
:0044AC77 50                      push eax
:0044AC78 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044AC7B 51                      push ecx
:0044AC7C E829C00200              call 00476CAA
:0044AC81 83C414                  add esp, 00000014
:0044AC84 5D                      pop ebp
:0044AC85 C3                      ret



* Referenced by a CALL at Address:
|:00449D97   
|
:0044AC86 55                      push ebp
:0044AC87 8BEC                    mov ebp, esp
:0044AC89 51                      push ecx
:0044AC8A 894DFC                  mov dword ptr [ebp-04], ecx
:0044AC8D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044AC90 83C144                  add ecx, 00000044
:0044AC93 E858AAFBFF              call 004056F0
:0044AC98 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044AC9B 83C146                  add ecx, 00000046
:0044AC9E E84DAAFBFF              call 004056F0
:0044ACA3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ACA6 83C154                  add ecx, 00000054
:0044ACA9 E842AAFBFF              call 004056F0
:0044ACAE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ACB1 81C182000000            add ecx, 00000082
:0044ACB7 E834AAFBFF              call 004056F0
:0044ACBC 8B45FC                  mov eax, dword ptr [ebp-04]
:0044ACBF 8BE5                    mov esp, ebp
:0044ACC1 5D                      pop ebp
:0044ACC2 C3                      ret



* Referenced by a CALL at Address:
|:00449DB8   
|
:0044ACC3 55                      push ebp
:0044ACC4 8BEC                    mov ebp, esp
:0044ACC6 51                      push ecx
:0044ACC7 894DFC                  mov dword ptr [ebp-04], ecx
:0044ACCA 8BE5                    mov esp, ebp
:0044ACCC 5D                      pop ebp
:0044ACCD C3                      ret



* Referenced by a CALL at Addresses:
|:0044BB20   , :0044BB4A   , :0044E578   , :0045835F   
|
:0044ACCE 55                      push ebp
:0044ACCF 8BEC                    mov ebp, esp
:0044ACD1 51                      push ecx
:0044ACD2 894DFC                  mov dword ptr [ebp-04], ecx
:0044ACD5 8B45FC                  mov eax, dword ptr [ebp-04]
:0044ACD8 8B403C                  mov eax, dword ptr [eax+3C]
:0044ACDB 8BE5                    mov esp, ebp
:0044ACDD 5D                      pop ebp
:0044ACDE C3                      ret



* Referenced by a CALL at Addresses:
|:0044BB35   , :0044BB5F   , :0044E5AB   , :00458396   
|
:0044ACDF 55                      push ebp
:0044ACE0 8BEC                    mov ebp, esp
:0044ACE2 51                      push ecx
:0044ACE3 894DFC                  mov dword ptr [ebp-04], ecx
:0044ACE6 8B45FC                  mov eax, dword ptr [ebp-04]
:0044ACE9 8B4040                  mov eax, dword ptr [eax+40]
:0044ACEC 8BE5                    mov esp, ebp
:0044ACEE 5D                      pop ebp
:0044ACEF C3                      ret


:0044ACF0 55                      push ebp
:0044ACF1 8BEC                    mov ebp, esp
:0044ACF3 51                      push ecx
:0044ACF4 894DFC                  mov dword ptr [ebp-04], ecx
:0044ACF7 8B45FC                  mov eax, dword ptr [ebp-04]
:0044ACFA 83C044                  add eax, 00000044
:0044ACFD 8BE5                    mov esp, ebp
:0044ACFF 5D                      pop ebp
:0044AD00 C3                      ret


:0044AD01 55                      push ebp
:0044AD02 8BEC                    mov ebp, esp
:0044AD04 51                      push ecx
:0044AD05 894DFC                  mov dword ptr [ebp-04], ecx
:0044AD08 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AD0B 83C046                  add eax, 00000046
:0044AD0E 8BE5                    mov esp, ebp
:0044AD10 5D                      pop ebp
:0044AD11 C3                      ret



* Referenced by a CALL at Addresses:
|:00432B3F   , :00434C2C   , :00434C8A   , :004355FC   , :0043593A   
|:00435EB0   , :0043659C   , :0044208E   , :00442869   , :004428B1   
|:004481C9   , :00448540   , :00448570   , :00448B2A   , :00448B5A   
|:00449467   , :00449497   , :0044975D   , :0044978D   , :00449E50   
|:00449EE2   , :00449F08   , :0044AB6D   , :0044D9C8   , :0044E58B   
|:00458374   
|
:0044AD12 55                      push ebp
:0044AD13 8BEC                    mov ebp, esp
:0044AD15 51                      push ecx
:0044AD16 894DFC                  mov dword ptr [ebp-04], ecx
:0044AD19 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AD1C 8B4004                  mov eax, dword ptr [eax+04]
:0044AD1F 8BE5                    mov esp, ebp
:0044AD21 5D                      pop ebp
:0044AD22 C3                      ret



* Referenced by a CALL at Addresses:
|:00432B5A   , :00434C12   , :00434C97   , :00435618   , :00435947   
|:00435ECE   , :00436589   , :0044209D   , :0044288D   , :004428D5   
|:004481DE   , :00448558   , :00448582   , :00448B3F   , :00448B6F   
|:0044947C   , :004494A9   , :00449772   , :0044979F   , :00449E6B   
|:0044A12A   , :0044AB88   , :0044D9D3   , :0044E5BE   , :004583AB   
|
:0044AD23 55                      push ebp
:0044AD24 8BEC                    mov ebp, esp
:0044AD26 51                      push ecx
:0044AD27 894DFC                  mov dword ptr [ebp-04], ecx
:0044AD2A 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AD2D 8B4008                  mov eax, dword ptr [eax+08]
:0044AD30 8BE5                    mov esp, ebp
:0044AD32 5D                      pop ebp
:0044AD33 C3                      ret



* Referenced by a CALL at Addresses:
|:0045CAE1   , :0045EFF4   
|
:0044AD34 55                      push ebp
:0044AD35 8BEC                    mov ebp, esp
:0044AD37 83EC0C                  sub esp, 0000000C
:0044AD3A 894DFC                  mov dword ptr [ebp-04], ecx
:0044AD3D 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AD40 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044AD43 89483C                  mov dword ptr [eax+3C], ecx
:0044AD46 8B55FC                  mov edx, dword ptr [ebp-04]
:0044AD49 8B450C                  mov eax, dword ptr [ebp+0C]
:0044AD4C 894240                  mov dword ptr [edx+40], eax
:0044AD4F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044AD52 8B5510                  mov edx, dword ptr [ebp+10]
:0044AD55 895114                  mov dword ptr [ecx+14], edx
:0044AD58 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AD5B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044AD5E 894818                  mov dword ptr [eax+18], ecx
:0044AD61 8B55FC                  mov edx, dword ptr [ebp-04]
:0044AD64 C7420400000000          mov [edx+04], 00000000
:0044AD6B 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AD6E C7400800000000          mov [eax+08], 00000000
:0044AD75 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044AD78 C7414800000000          mov [ecx+48], 00000000
:0044AD7F 8B55FC                  mov edx, dword ptr [ebp-04]
:0044AD82 C7424C00000000          mov [edx+4C], 00000000
:0044AD89 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AD8C C7405000000000          mov [eax+50], 00000000
:0044AD93 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044AD96 C64154FF                mov [ecx+54], FF
:0044AD9A 8B55FC                  mov edx, dword ptr [ebp-04]
:0044AD9D C64255FF                mov [edx+55], FF
:0044ADA1 8B45FC                  mov eax, dword ptr [ebp-04]
:0044ADA4 C74058FFFF0000          mov [eax+58], 0000FFFF
:0044ADAB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ADAE C7415CFFFF0000          mov [ecx+5C], 0000FFFF
:0044ADB5 8B55FC                  mov edx, dword ptr [ebp-04]
:0044ADB8 C6426000                mov [edx+60], 00
:0044ADBC 8B45FC                  mov eax, dword ptr [ebp-04]
:0044ADBF C6406100                mov [eax+61], 00
:0044ADC3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ADC6 C70101000000            mov dword ptr [ecx], 00000001
:0044ADCC 33D2                    xor edx, edx
:0044ADCE 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044ADD4 6BD203                  imul edx, 00000003
:0044ADD7 C1E204                  shl edx, 04
:0044ADDA 8B45FC                  mov eax, dword ptr [ebp-04]
:0044ADDD 895034                  mov dword ptr [eax+34], edx
:0044ADE0 33C9                    xor ecx, ecx
:0044ADE2 8A0DC54E4B00            mov cl, byte ptr [004B4EC5]
:0044ADE8 6BC903                  imul ecx, 00000003
:0044ADEB C1E104                  shl ecx, 04
:0044ADEE 8B55FC                  mov edx, dword ptr [ebp-04]
:0044ADF1 894A38                  mov dword ptr [edx+38], ecx
:0044ADF4 8B45FC                  mov eax, dword ptr [ebp-04]
:0044ADF7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044ADFA 8B502C                  mov edx, dword ptr [eax+2C]
:0044ADFD 3B5134                  cmp edx, dword ptr [ecx+34]
:0044AE00 7D0B                    jge 0044AE0D
:0044AE02 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AE05 8B482C                  mov ecx, dword ptr [eax+2C]
:0044AE08 894DF8                  mov dword ptr [ebp-08], ecx
:0044AE0B EB09                    jmp 0044AE16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AE00(C)
|
:0044AE0D 8B55FC                  mov edx, dword ptr [ebp-04]
:0044AE10 8B4234                  mov eax, dword ptr [edx+34]
:0044AE13 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AE0B(U)
|
:0044AE16 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044AE19 8B55F8                  mov edx, dword ptr [ebp-08]
:0044AE1C 895124                  mov dword ptr [ecx+24], edx
:0044AE1F 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AE22 8B4838                  mov ecx, dword ptr [eax+38]
:0044AE25 83C128                  add ecx, 00000028
:0044AE28 8B55FC                  mov edx, dword ptr [ebp-04]
:0044AE2B 394A30                  cmp dword ptr [edx+30], ecx
:0044AE2E 7D0B                    jge 0044AE3B
:0044AE30 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AE33 8B4830                  mov ecx, dword ptr [eax+30]
:0044AE36 894DF4                  mov dword ptr [ebp-0C], ecx
:0044AE39 EB0C                    jmp 0044AE47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AE2E(C)
|
:0044AE3B 8B55FC                  mov edx, dword ptr [ebp-04]
:0044AE3E 8B4238                  mov eax, dword ptr [edx+38]
:0044AE41 83C028                  add eax, 00000028
:0044AE44 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AE39(U)
|
:0044AE47 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044AE4A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044AE4D 895128                  mov dword ptr [ecx+28], edx
:0044AE50 6A01                    push 00000001
:0044AE52 B9784E4B00              mov ecx, 004B4E78
:0044AE57 E8743C0000              call 0044EAD0
:0044AE5C 50                      push eax
:0044AE5D E89B2E0200              call 0046DCFD
:0044AE62 83C408                  add esp, 00000008
:0044AE65 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AE68 C68081000000FF          mov byte ptr [eax+00000081], FF
:0044AE6F 68FF000000              push 000000FF
:0044AE74 6880070000              push 00000780

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044AE79 6A04                    push 00000004
:0044AE7B 6A00                    push 00000000
:0044AE7D 6880520000              push 00005280
:0044AE82 B9881C4B00              mov ecx, 004B1C88
:0044AE87 E804E10200              call 00478F90
:0044AE8C 50                      push eax
:0044AE8D E84ED70200              call 004785E0
:0044AE92 83C40C                  add esp, 0000000C
:0044AE95 68FF000000              push 000000FF
:0044AE9A 6880430000              push 00004380

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044AE9F 6A04                    push 00000004
:0044AEA1 6A00                    push 00000000
:0044AEA3 6800A50000              push 0000A500
:0044AEA8 B9881C4B00              mov ecx, 004B1C88
:0044AEAD E8DEE00200              call 00478F90
:0044AEB2 50                      push eax
:0044AEB3 E828D70200              call 004785E0
:0044AEB8 83C40C                  add esp, 0000000C
:0044AEBB 8BE5                    mov esp, ebp
:0044AEBD 5D                      pop ebp
:0044AEBE C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:004410F3   , :004411E3   , :00441D52   , :00441EAD   , :00441EF5   
|:00441F11   , :0044DE7F   , :0044E160   , :0044EFDA   , :0044F0D8   
|:004567F0   , :00456AA7   
|
:0044AEC1 55                      push ebp
:0044AEC2 8BEC                    mov ebp, esp
:0044AEC4 51                      push ecx
:0044AEC5 894DFC                  mov dword ptr [ebp-04], ecx
:0044AEC8 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AECB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044AECE 894864                  mov dword ptr [eax+64], ecx
:0044AED1 8B55FC                  mov edx, dword ptr [ebp-04]
:0044AED4 8B4218                  mov eax, dword ptr [edx+18]
:0044AED7 99                      cdq
:0044AED8 83E20F                  and edx, 0000000F
:0044AEDB 03C2                    add eax, edx
:0044AEDD C1F804                  sar eax, 04
:0044AEE0 50                      push eax
:0044AEE1 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AEE4 8B4014                  mov eax, dword ptr [eax+14]
:0044AEE7 99                      cdq
:0044AEE8 83E20F                  and edx, 0000000F
:0044AEEB 03C2                    add eax, edx
:0044AEED C1F804                  sar eax, 04
:0044AEF0 50                      push eax
:0044AEF1 6A00                    push 00000000
:0044AEF3 6A00                    push 00000000
:0044AEF5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044AEF8 E89B0C0000              call 0044BB98
:0044AEFD 8BE5                    mov esp, ebp
:0044AEFF 5D                      pop ebp
:0044AF00 C20400                  ret 0004


:0044AF03 55                      push ebp
:0044AF04 8BEC                    mov ebp, esp
:0044AF06 51                      push ecx
:0044AF07 894DFC                  mov dword ptr [ebp-04], ecx
:0044AF0A 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AF0D 8B4064                  mov eax, dword ptr [eax+64]
:0044AF10 8BE5                    mov esp, ebp
:0044AF12 5D                      pop ebp
:0044AF13 C3                      ret


:0044AF14 55                      push ebp
:0044AF15 8BEC                    mov ebp, esp
:0044AF17 51                      push ecx
:0044AF18 894DFC                  mov dword ptr [ebp-04], ecx
:0044AF1B 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AF1E 8A4D08                  mov cl, byte ptr [ebp+08]
:0044AF21 884868                  mov byte ptr [eax+68], cl
:0044AF24 8BE5                    mov esp, ebp
:0044AF26 5D                      pop ebp
:0044AF27 C20400                  ret 0004


:0044AF2A 55                      push ebp
:0044AF2B 8BEC                    mov ebp, esp
:0044AF2D 51                      push ecx
:0044AF2E 894DFC                  mov dword ptr [ebp-04], ecx
:0044AF31 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AF34 8A4068                  mov al, byte ptr [eax+68]
:0044AF37 8BE5                    mov esp, ebp
:0044AF39 5D                      pop ebp
:0044AF3A C3                      ret



* Referenced by a CALL at Address:
|:0044B63D   
|
:0044AF3B 55                      push ebp
:0044AF3C 8BEC                    mov ebp, esp
:0044AF3E 83EC18                  sub esp, 00000018
:0044AF41 894DEC                  mov dword ptr [ebp-14], ecx
:0044AF44 C745FC00000000          mov [ebp-04], 00000000
:0044AF4B 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0044AF4E E89DA7FBFF              call 004056F0
:0044AF53 8B45EC                  mov eax, dword ptr [ebp-14]
:0044AF56 83C054                  add eax, 00000054
:0044AF59 50                      push eax
:0044AF5A 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0044AF5D E83EBBFEFF              call 00436AA0
:0044AF62 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044AF65 C1E904                  shr ecx, 04
:0044AF68 894DF4                  mov dword ptr [ebp-0C], ecx
:0044AF6B 8B550C                  mov edx, dword ptr [ebp+0C]
:0044AF6E C1EA04                  shr edx, 04
:0044AF71 8955F0                  mov dword ptr [ebp-10], edx
:0044AF74 8B45EC                  mov eax, dword ptr [ebp-14]
:0044AF77 8A4861                  mov cl, byte ptr [eax+61]
:0044AF7A 884DE8                  mov byte ptr [ebp-18], cl
:0044AF7D 807DE800                cmp byte ptr [ebp-18], 00
:0044AF81 724C                    jb 0044AFCF
:0044AF83 807DE804                cmp byte ptr [ebp-18], 04
:0044AF87 7602                    jbe 0044AF8B
:0044AF89 EB44                    jmp 0044AFCF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044AF87(C)
|
:0044AF8B 8B55F8                  mov edx, dword ptr [ebp-08]
:0044AF8E 81E2FF000000            and edx, 000000FF
:0044AF94 3955F4                  cmp dword ptr [ebp-0C], edx
:0044AF97 7236                    jb 0044AFCF
:0044AF99 8B45F8                  mov eax, dword ptr [ebp-08]
:0044AF9C 25FF000000              and eax, 000000FF
:0044AFA1 83C003                  add eax, 00000003
:0044AFA4 3945F4                  cmp dword ptr [ebp-0C], eax
:0044AFA7 7326                    jnb 0044AFCF
:0044AFA9 8B4DF9                  mov ecx, dword ptr [ebp-07]
:0044AFAC 81E1FF000000            and ecx, 000000FF
:0044AFB2 394DF0                  cmp dword ptr [ebp-10], ecx
:0044AFB5 7218                    jb 0044AFCF
:0044AFB7 8B55F9                  mov edx, dword ptr [ebp-07]
:0044AFBA 81E2FF000000            and edx, 000000FF
:0044AFC0 83C203                  add edx, 00000003
:0044AFC3 3955F0                  cmp dword ptr [ebp-10], edx
:0044AFC6 7307                    jnb 0044AFCF
:0044AFC8 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044AF81(C), :0044AF89(U), :0044AF97(C), :0044AFA7(C), :0044AFB5(C)
|:0044AFC6(C)
|
:0044AFCF 8B45FC                  mov eax, dword ptr [ebp-04]
:0044AFD2 8BE5                    mov esp, ebp
:0044AFD4 5D                      pop ebp
:0044AFD5 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00434C39   , :0044C93F   , :0044CA38   
|
:0044AFD8 55                      push ebp
:0044AFD9 8BEC                    mov ebp, esp
:0044AFDB 81ECA0000000            sub esp, 000000A0
:0044AFE1 56                      push esi
:0044AFE2 898D6CFFFFFF            mov dword ptr [ebp+FFFFFF6C], ecx
:0044AFE8 8B4508                  mov eax, dword ptr [ebp+08]
:0044AFEB 25FF000000              and eax, 000000FF
:0044AFF0 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044AFF6 8B5104                  mov edx, dword ptr [ecx+04]
:0044AFF9 03D0                    add edx, eax
:0044AFFB 8B450C                  mov eax, dword ptr [ebp+0C]
:0044AFFE 25FF000000              and eax, 000000FF
:0044B003 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044B009 8B4908                  mov ecx, dword ptr [ecx+08]
:0044B00C 03C8                    add ecx, eax
:0044B00E 33C0                    xor eax, eax
:0044B010 A0C44E4B00              mov al, byte ptr [004B4EC4]
:0044B015 0FAFC8                  imul ecx, eax
:0044B018 6BC903                  imul ecx, 00000003
:0044B01B 03D1                    add edx, ecx
:0044B01D 895590                  mov dword ptr [ebp-70], edx
:0044B020 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044B023 81E1FF000000            and ecx, 000000FF
:0044B029 8B750C                  mov esi, dword ptr [ebp+0C]
:0044B02C 81E6FF000000            and esi, 000000FF
:0044B032 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0044B038 8B4214                  mov eax, dword ptr [edx+14]
:0044B03B 99                      cdq
:0044B03C 83E20F                  and edx, 0000000F
:0044B03F 03C2                    add eax, edx
:0044B041 C1F804                  sar eax, 04
:0044B044 0FAFF0                  imul esi, eax
:0044B047 03CE                    add ecx, esi
:0044B049 894DE8                  mov dword ptr [ebp-18], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B04C 6A04                    push 00000004
:0044B04E 6A00                    push 00000000
:0044B050 6A00                    push 00000000
:0044B052 B9881C4B00              mov ecx, 004B1C88
:0044B057 E834DF0200              call 00478F90
:0044B05C 034590                  add eax, dword ptr [ebp-70]
:0044B05F 89458C                  mov dword ptr [ebp-74], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B062 6A04                    push 00000004
:0044B064 6A00                    push 00000000
:0044B066 6A00                    push 00000000
:0044B068 B9881C4B00              mov ecx, 004B1C88
:0044B06D E81EDF0200              call 00478F90
:0044B072 8BC8                    mov ecx, eax
:0044B074 8B5508                  mov edx, dword ptr [ebp+08]
:0044B077 81E2FF000000            and edx, 000000FF
:0044B07D 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B083 8B4004                  mov eax, dword ptr [eax+04]
:0044B086 03C2                    add eax, edx
:0044B088 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044B089 BE03000000              mov esi, 00000003
:0044B08E F7FE                    idiv esi
:0044B090 8D8C0100960000          lea ecx, dword ptr [ecx+eax+00009600]
:0044B097 8B550C                  mov edx, dword ptr [ebp+0C]
:0044B09A 81E2FF000000            and edx, 000000FF
:0044B0A0 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B0A6 8B4008                  mov eax, dword ptr [eax+08]
:0044B0A9 03C2                    add eax, edx
:0044B0AB 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044B0AC BE03000000              mov esi, 00000003
:0044B0B1 F7FE                    idiv esi
:0044B0B3 33D2                    xor edx, edx
:0044B0B5 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044B0BB 0FAFC2                  imul eax, edx
:0044B0BE 03C8                    add ecx, eax
:0044B0C0 894DA8                  mov dword ptr [ebp-58], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B0C3 6A04                    push 00000004
:0044B0C5 6A00                    push 00000000
:0044B0C7 6A00                    push 00000000
:0044B0C9 B9881C4B00              mov ecx, 004B1C88
:0044B0CE E8BDDE0200              call 00478F90
:0044B0D3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044B0D6 8D940880520000          lea edx, dword ptr [eax+ecx+00005280]
:0044B0DD 89559C                  mov dword ptr [ebp-64], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B0E0 6A04                    push 00000004
:0044B0E2 6A00                    push 00000000
:0044B0E4 6A00                    push 00000000
:0044B0E6 B9881C4B00              mov ecx, 004B1C88
:0044B0EB E8A0DE0200              call 00478F90
:0044B0F0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044B0F3 8D940800A50000          lea edx, dword ptr [eax+ecx+0000A500]
:0044B0FA 8955D8                  mov dword ptr [ebp-28], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B0FD 6A04                    push 00000004
:0044B0FF 6A00                    push 00000000
:0044B101 6A00                    push 00000000
:0044B103 B9881C4B00              mov ecx, 004B1C88
:0044B108 E883DE0200              call 00478F90
:0044B10D 8BC8                    mov ecx, eax
:0044B10F 8B5508                  mov edx, dword ptr [ebp+08]
:0044B112 81E2FF000000            and edx, 000000FF
:0044B118 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B11E 8B4004                  mov eax, dword ptr [eax+04]
:0044B121 03C2                    add eax, edx
:0044B123 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044B124 BE03000000              mov esi, 00000003
:0044B129 F7FE                    idiv esi
:0044B12B 8D8C01004B0000          lea ecx, dword ptr [ecx+eax+00004B00]
:0044B132 8B550C                  mov edx, dword ptr [ebp+0C]
:0044B135 81E2FF000000            and edx, 000000FF
:0044B13B 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B141 8B4008                  mov eax, dword ptr [eax+08]
:0044B144 03C2                    add eax, edx
:0044B146 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044B147 BE03000000              mov esi, 00000003
:0044B14C F7FE                    idiv esi
:0044B14E 33D2                    xor edx, edx
:0044B150 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044B156 0FAFC2                  imul eax, edx
:0044B159 03C8                    add ecx, eax
:0044B15B 898D70FFFFFF            mov dword ptr [ebp+FFFFFF70], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B161 6A04                    push 00000004
:0044B163 6A00                    push 00000000
:0044B165 6A00                    push 00000000
:0044B167 B9E81C4B00              mov ecx, 004B1CE8
:0044B16C E81FDE0200              call 00478F90
:0044B171 8BC8                    mov ecx, eax
:0044B173 8B5508                  mov edx, dword ptr [ebp+08]
:0044B176 81E2FF000000            and edx, 000000FF
:0044B17C 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B182 8B4004                  mov eax, dword ptr [eax+04]
:0044B185 03C2                    add eax, edx
:0044B187 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044B188 BE03000000              mov esi, 00000003
:0044B18D F7FE                    idiv esi
:0044B18F 03C8                    add ecx, eax
:0044B191 8B550C                  mov edx, dword ptr [ebp+0C]
:0044B194 81E2FF000000            and edx, 000000FF
:0044B19A 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B1A0 8B4008                  mov eax, dword ptr [eax+08]
:0044B1A3 03C2                    add eax, edx
:0044B1A5 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044B1A6 BE03000000              mov esi, 00000003
:0044B1AB F7FE                    idiv esi
:0044B1AD 33D2                    xor edx, edx
:0044B1AF 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044B1B5 0FAFC2                  imul eax, edx
:0044B1B8 03C8                    add ecx, eax
:0044B1BA 894DB4                  mov dword ptr [ebp-4C], ecx
:0044B1BD 33C0                    xor eax, eax
:0044B1BF A0C44E4B00              mov al, byte ptr [004B4EC4]
:0044B1C4 83E801                  sub eax, 00000001
:0044B1C7 6BC003                  imul eax, 00000003
:0044B1CA 8945E4                  mov dword ptr [ebp-1C], eax
:0044B1CD 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044B1D3 8B4114                  mov eax, dword ptr [ecx+14]
:0044B1D6 99                      cdq
:0044B1D7 83E20F                  and edx, 0000000F
:0044B1DA 03C2                    add eax, edx
:0044B1DC C1F804                  sar eax, 04
:0044B1DF 83E803                  sub eax, 00000003
:0044B1E2 8945B8                  mov dword ptr [ebp-48], eax
:0044B1E5 33D2                    xor edx, edx
:0044B1E7 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044B1ED 8BCA                    mov ecx, edx
:0044B1EF 8B4510                  mov eax, dword ptr [ebp+10]
:0044B1F2 25FF000000              and eax, 000000FF
:0044B1F7 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044B1F8 BE03000000              mov esi, 00000003
:0044B1FD F7FE                    idiv esi
:0044B1FF 2BC8                    sub ecx, eax
:0044B201 894DBC                  mov dword ptr [ebp-44], ecx
:0044B204 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0044B20A 8B4214                  mov eax, dword ptr [edx+14]
:0044B20D 99                      cdq
:0044B20E 83E20F                  and edx, 0000000F
:0044B211 03C2                    add eax, edx
:0044B213 8BC8                    mov ecx, eax
:0044B215 C1F904                  sar ecx, 04
:0044B218 8B5510                  mov edx, dword ptr [ebp+10]
:0044B21B 81E2FF000000            and edx, 000000FF
:0044B221 2BCA                    sub ecx, edx
:0044B223 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B229 8B4014                  mov eax, dword ptr [eax+14]
:0044B22C 99                      cdq
:0044B22D 83E20F                  and edx, 0000000F
:0044B230 03C2                    add eax, edx
:0044B232 C1F804                  sar eax, 04
:0044B235 8D0C41                  lea ecx, dword ptr [ecx+2*eax]
:0044B238 894DA0                  mov dword ptr [ebp-60], ecx
:0044B23B 33D2                    xor edx, edx
:0044B23D 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044B243 6BD203                  imul edx, 00000003
:0044B246 8B4510                  mov eax, dword ptr [ebp+10]
:0044B249 25FF000000              and eax, 000000FF
:0044B24E 2BD0                    sub edx, eax
:0044B250 33C9                    xor ecx, ecx
:0044B252 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0044B258 6BC903                  imul ecx, 00000003
:0044B25B 8D144A                  lea edx, dword ptr [edx+2*ecx]
:0044B25E 8955EC                  mov dword ptr [ebp-14], edx
:0044B261 B9784E4B00              mov ecx, 004B4E78
:0044B266 E8D54BFCFF              call 0040FE40
:0044B26B 25FF000000              and eax, 000000FF
:0044B270 F7D8                    neg eax
:0044B272 1BC0                    sbb eax, eax
:0044B274 F7D8                    neg eax
:0044B276 89857CFFFFFF            mov dword ptr [ebp+FFFFFF7C], eax
:0044B27C 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B282 33C9                    xor ecx, ecx
:0044B284 8A4844                  mov cl, byte ptr [eax+44]
:0044B287 894DDC                  mov dword ptr [ebp-24], ecx
:0044B28A 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0044B290 33C0                    xor eax, eax
:0044B292 8A4245                  mov al, byte ptr [edx+45]
:0044B295 8945C8                  mov dword ptr [ebp-38], eax
:0044B298 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044B29E 33D2                    xor edx, edx
:0044B2A0 8A5144                  mov dl, byte ptr [ecx+44]
:0044B2A3 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B2A9 33C9                    xor ecx, ecx
:0044B2AB 8A4846                  mov cl, byte ptr [eax+46]
:0044B2AE 03D1                    add edx, ecx
:0044B2B0 8955D4                  mov dword ptr [ebp-2C], edx
:0044B2B3 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0044B2B9 33C0                    xor eax, eax
:0044B2BB 8A4245                  mov al, byte ptr [edx+45]
:0044B2BE 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044B2C4 33D2                    xor edx, edx
:0044B2C6 8A5147                  mov dl, byte ptr [ecx+47]
:0044B2C9 03C2                    add eax, edx
:0044B2CB 8945C0                  mov dword ptr [ebp-40], eax
:0044B2CE 8B4508                  mov eax, dword ptr [ebp+08]
:0044B2D1 25FF000000              and eax, 000000FF
:0044B2D6 C1E004                  shl eax, 04
:0044B2D9 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044B2DF 03413C                  add eax, dword ptr [ecx+3C]
:0044B2E2 8945B0                  mov dword ptr [ebp-50], eax
:0044B2E5 8B550C                  mov edx, dword ptr [ebp+0C]
:0044B2E8 81E2FF000000            and edx, 000000FF
:0044B2EE C1E204                  shl edx, 04
:0044B2F1 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B2F7 035040                  add edx, dword ptr [eax+40]
:0044B2FA 8955A4                  mov dword ptr [ebp-5C], edx
:0044B2FD 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044B300 81E1FF000000            and ecx, 000000FF
:0044B306 C1E104                  shl ecx, 04
:0044B309 8B55B0                  mov edx, dword ptr [ebp-50]
:0044B30C 03D1                    add edx, ecx
:0044B30E 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B314 8B483C                  mov ecx, dword ptr [eax+3C]
:0044B317 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B31D 034814                  add ecx, dword ptr [eax+14]
:0044B320 3BD1                    cmp edx, ecx
:0044B322 7D19                    jge 0044B33D
:0044B324 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044B327 81E1FF000000            and ecx, 000000FF
:0044B32D C1E104                  shl ecx, 04
:0044B330 8B55B0                  mov edx, dword ptr [ebp-50]
:0044B333 03D1                    add edx, ecx
:0044B335 899568FFFFFF            mov dword ptr [ebp+FFFFFF68], edx
:0044B33B EB18                    jmp 0044B355

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B322(C)
|
:0044B33D 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B343 8B483C                  mov ecx, dword ptr [eax+3C]
:0044B346 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0044B34C 034A14                  add ecx, dword ptr [edx+14]
:0044B34F 898D68FFFFFF            mov dword ptr [ebp+FFFFFF68], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B33B(U)
|
:0044B355 8B8568FFFFFF            mov eax, dword ptr [ebp+FFFFFF68]
:0044B35B 894598                  mov dword ptr [ebp-68], eax
:0044B35E 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044B361 81E1FF000000            and ecx, 000000FF
:0044B367 C1E104                  shl ecx, 04
:0044B36A 8B55A4                  mov edx, dword ptr [ebp-5C]
:0044B36D 03D1                    add edx, ecx
:0044B36F 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B375 8B4840                  mov ecx, dword ptr [eax+40]
:0044B378 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B37E 034818                  add ecx, dword ptr [eax+18]
:0044B381 3BD1                    cmp edx, ecx
:0044B383 7D19                    jge 0044B39E
:0044B385 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044B388 81E1FF000000            and ecx, 000000FF
:0044B38E C1E104                  shl ecx, 04
:0044B391 8B55A4                  mov edx, dword ptr [ebp-5C]
:0044B394 03D1                    add edx, ecx
:0044B396 899564FFFFFF            mov dword ptr [ebp+FFFFFF64], edx
:0044B39C EB18                    jmp 0044B3B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B383(C)
|
:0044B39E 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B3A4 8B4840                  mov ecx, dword ptr [eax+40]
:0044B3A7 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0044B3AD 034A18                  add ecx, dword ptr [edx+18]
:0044B3B0 898D64FFFFFF            mov dword ptr [ebp+FFFFFF64], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B39C(U)
|
:0044B3B6 8B8564FFFFFF            mov eax, dword ptr [ebp+FFFFFF64]
:0044B3BC 894588                  mov dword ptr [ebp-78], eax
:0044B3BF 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044B3C5 E80E180000              call 0044CBD8
:0044B3CA E8644DFCFF              call 00410133
:0044B3CF 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:0044B3D2 894D84                  mov dword ptr [ebp-7C], ecx
:0044B3D5 EB45                    jmp 0044B41C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B8B1(U)
|
:0044B3D7 8B5584                  mov edx, dword ptr [ebp-7C]
:0044B3DA 83C230                  add edx, 00000030
:0044B3DD 895584                  mov dword ptr [ebp-7C], edx
:0044B3E0 8B8570FFFFFF            mov eax, dword ptr [ebp+FFFFFF70]
:0044B3E6 0345BC                  add eax, dword ptr [ebp-44]
:0044B3E9 898570FFFFFF            mov dword ptr [ebp+FFFFFF70], eax
:0044B3EF 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0044B3F2 034DBC                  add ecx, dword ptr [ebp-44]
:0044B3F5 894DA8                  mov dword ptr [ebp-58], ecx
:0044B3F8 8B55B4                  mov edx, dword ptr [ebp-4C]
:0044B3FB 0355BC                  add edx, dword ptr [ebp-44]
:0044B3FE 8955B4                  mov dword ptr [ebp-4C], edx
:0044B401 8B458C                  mov eax, dword ptr [ebp-74]
:0044B404 0345EC                  add eax, dword ptr [ebp-14]
:0044B407 89458C                  mov dword ptr [ebp-74], eax
:0044B40A 8B4D9C                  mov ecx, dword ptr [ebp-64]
:0044B40D 034DA0                  add ecx, dword ptr [ebp-60]
:0044B410 894D9C                  mov dword ptr [ebp-64], ecx
:0044B413 8B55D8                  mov edx, dword ptr [ebp-28]
:0044B416 0355A0                  add edx, dword ptr [ebp-60]
:0044B419 8955D8                  mov dword ptr [ebp-28], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B3D5(U)
|
:0044B41C 8B4584                  mov eax, dword ptr [ebp-7C]
:0044B41F 3B4588                  cmp eax, dword ptr [ebp-78]
:0044B422 0F838E040000            jnb 0044B8B6
:0044B428 E829C00200              call 00477456
:0044B42D 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0044B430 894DAC                  mov dword ptr [ebp-54], ecx
:0044B433 EB45                    jmp 0044B47A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B8AC(U)
|
:0044B435 8B55AC                  mov edx, dword ptr [ebp-54]
:0044B438 83C230                  add edx, 00000030
:0044B43B 8955AC                  mov dword ptr [ebp-54], edx
:0044B43E 8B8570FFFFFF            mov eax, dword ptr [ebp+FFFFFF70]
:0044B444 83C001                  add eax, 00000001
:0044B447 898570FFFFFF            mov dword ptr [ebp+FFFFFF70], eax
:0044B44D 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0044B450 83C101                  add ecx, 00000001
:0044B453 894DA8                  mov dword ptr [ebp-58], ecx
:0044B456 8B55B4                  mov edx, dword ptr [ebp-4C]
:0044B459 83C201                  add edx, 00000001
:0044B45C 8955B4                  mov dword ptr [ebp-4C], edx
:0044B45F 8B458C                  mov eax, dword ptr [ebp-74]
:0044B462 83C003                  add eax, 00000003
:0044B465 89458C                  mov dword ptr [ebp-74], eax
:0044B468 8B4D9C                  mov ecx, dword ptr [ebp-64]
:0044B46B 83C103                  add ecx, 00000003
:0044B46E 894D9C                  mov dword ptr [ebp-64], ecx
:0044B471 8B55D8                  mov edx, dword ptr [ebp-28]
:0044B474 83C203                  add edx, 00000003
:0044B477 8955D8                  mov dword ptr [ebp-28], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B433(U)
|
:0044B47A 8B45AC                  mov eax, dword ptr [ebp-54]
:0044B47D 3B4598                  cmp eax, dword ptr [ebp-68]
:0044B480 0F832B040000            jnb 0044B8B1
:0044B486 C645FC04                mov [ebp-04], 04
:0044B48A 8B8D70FFFFFF            mov ecx, dword ptr [ebp+FFFFFF70]
:0044B490 8A11                    mov dl, byte ptr [ecx]
:0044B492 8855F4                  mov byte ptr [ebp-0C], dl
:0044B495 8B458C                  mov eax, dword ptr [ebp-74]
:0044B498 8945E0                  mov dword ptr [ebp-20], eax
:0044B49B 8B4D9C                  mov ecx, dword ptr [ebp-64]
:0044B49E 898D78FFFFFF            mov dword ptr [ebp+FFFFFF78], ecx
:0044B4A4 8B55D8                  mov edx, dword ptr [ebp-28]
:0044B4A7 8955CC                  mov dword ptr [ebp-34], edx
:0044B4AA 8B4584                  mov eax, dword ptr [ebp-7C]
:0044B4AD 894580                  mov dword ptr [ebp-80], eax
:0044B4B0 EB33                    jmp 0044B4E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B757(U)
|
:0044B4B2 8B4D80                  mov ecx, dword ptr [ebp-80]
:0044B4B5 83C110                  add ecx, 00000010
:0044B4B8 894D80                  mov dword ptr [ebp-80], ecx
:0044B4BB 8B55E0                  mov edx, dword ptr [ebp-20]
:0044B4BE 0355E4                  add edx, dword ptr [ebp-1C]
:0044B4C1 8955E0                  mov dword ptr [ebp-20], edx
:0044B4C4 8B4590                  mov eax, dword ptr [ebp-70]
:0044B4C7 0345E4                  add eax, dword ptr [ebp-1C]
:0044B4CA 894590                  mov dword ptr [ebp-70], eax
:0044B4CD 8B8D78FFFFFF            mov ecx, dword ptr [ebp+FFFFFF78]
:0044B4D3 034DB8                  add ecx, dword ptr [ebp-48]
:0044B4D6 898D78FFFFFF            mov dword ptr [ebp+FFFFFF78], ecx
:0044B4DC 8B55CC                  mov edx, dword ptr [ebp-34]
:0044B4DF 0355B8                  add edx, dword ptr [ebp-48]
:0044B4E2 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B4B0(U)
|
:0044B4E5 8B4584                  mov eax, dword ptr [ebp-7C]
:0044B4E8 83C030                  add eax, 00000030
:0044B4EB 394580                  cmp dword ptr [ebp-80], eax
:0044B4EE 0F8368020000            jnb 0044B75C
:0044B4F4 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0044B4F7 894D94                  mov dword ptr [ebp-6C], ecx
:0044B4FA EB33                    jmp 0044B52F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B5AA(U), :0044B5EA(U), :0044B752(U)
|
:0044B4FC 8B5594                  mov edx, dword ptr [ebp-6C]
:0044B4FF 83C210                  add edx, 00000010
:0044B502 895594                  mov dword ptr [ebp-6C], edx
:0044B505 8B45E0                  mov eax, dword ptr [ebp-20]
:0044B508 83C001                  add eax, 00000001
:0044B50B 8945E0                  mov dword ptr [ebp-20], eax
:0044B50E 8B4D90                  mov ecx, dword ptr [ebp-70]
:0044B511 83C101                  add ecx, 00000001
:0044B514 894D90                  mov dword ptr [ebp-70], ecx
:0044B517 8B9578FFFFFF            mov edx, dword ptr [ebp+FFFFFF78]
:0044B51D 83C201                  add edx, 00000001
:0044B520 899578FFFFFF            mov dword ptr [ebp+FFFFFF78], edx
:0044B526 8B45CC                  mov eax, dword ptr [ebp-34]
:0044B529 83C001                  add eax, 00000001
:0044B52C 8945CC                  mov dword ptr [ebp-34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B4FA(U)
|
:0044B52F 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0044B532 83C130                  add ecx, 00000030
:0044B535 394D94                  cmp dword ptr [ebp-6C], ecx
:0044B538 0F8319020000            jnb 0044B757
:0044B53E 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0044B544 837A5000                cmp dword ptr [edx+50], 00000000
:0044B548 0F84A1000000            je 0044B5EF
:0044B54E 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044B551 25FF000000              and eax, 000000FF
:0044B556 3DFF000000              cmp eax, 000000FF
:0044B55B 7452                    je 0044B5AF
:0044B55D 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044B563 33D2                    xor edx, edx
:0044B565 8A5147                  mov dl, byte ptr [ecx+47]
:0044B568 52                      push edx
:0044B569 8B856CFFFFFF            mov eax, dword ptr [ebp+FFFFFF6C]
:0044B56F 33C9                    xor ecx, ecx
:0044B571 8A4846                  mov cl, byte ptr [eax+46]
:0044B574 51                      push ecx
:0044B575 8B956CFFFFFF            mov edx, dword ptr [ebp+FFFFFF6C]
:0044B57B 33C0                    xor eax, eax
:0044B57D 8A4245                  mov al, byte ptr [edx+45]
:0044B580 50                      push eax
:0044B581 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044B587 33D2                    xor edx, edx
:0044B589 8A5144                  mov dl, byte ptr [ecx+44]
:0044B58C 52                      push edx
:0044B58D 8B4580                  mov eax, dword ptr [ebp-80]
:0044B590 50                      push eax
:0044B591 8B4D94                  mov ecx, dword ptr [ebp-6C]
:0044B594 51                      push ecx
:0044B595 E89C040000              call 0044BA36
:0044B59A 83C418                  add esp, 00000018
:0044B59D 85C0                    test eax, eax
:0044B59F 740E                    je 0044B5AF
:0044B5A1 8A55FC                  mov dl, byte ptr [ebp-04]
:0044B5A4 80E2FB                  and dl, FB
:0044B5A7 8855FC                  mov byte ptr [ebp-04], dl
:0044B5AA E94DFFFFFF              jmp 0044B4FC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B55B(C), :0044B59F(C)
|
:0044B5AF 8B45DC                  mov eax, dword ptr [ebp-24]
:0044B5B2 C1E004                  shl eax, 04
:0044B5B5 394594                  cmp dword ptr [ebp-6C], eax
:0044B5B8 7235                    jb 0044B5EF
:0044B5BA 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044B5BD C1E104                  shl ecx, 04
:0044B5C0 394D94                  cmp dword ptr [ebp-6C], ecx
:0044B5C3 732A                    jnb 0044B5EF
:0044B5C5 8B55C8                  mov edx, dword ptr [ebp-38]
:0044B5C8 C1E204                  shl edx, 04
:0044B5CB 83C220                  add edx, 00000020
:0044B5CE 395580                  cmp dword ptr [ebp-80], edx
:0044B5D1 721C                    jb 0044B5EF
:0044B5D3 8B45C0                  mov eax, dword ptr [ebp-40]
:0044B5D6 C1E004                  shl eax, 04
:0044B5D9 83C020                  add eax, 00000020
:0044B5DC 394580                  cmp dword ptr [ebp-80], eax
:0044B5DF 730E                    jnb 0044B5EF
:0044B5E1 8A4DFC                  mov cl, byte ptr [ebp-04]
:0044B5E4 80E1FB                  and cl, FB
:0044B5E7 884DFC                  mov byte ptr [ebp-04], cl
:0044B5EA E90DFFFFFF              jmp 0044B4FC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B548(C), :0044B5B8(C), :0044B5C3(C), :0044B5D1(C), :0044B5DF(C)
|
:0044B5EF 8B55E0                  mov edx, dword ptr [ebp-20]
:0044B5F2 8A02                    mov al, byte ptr [edx]
:0044B5F4 8845C4                  mov byte ptr [ebp-3C], al
:0044B5F7 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044B5FD 83796400                cmp dword ptr [ecx+64], 00000000
:0044B601 7419                    je 0044B61C
:0044B603 8B55A8                  mov edx, dword ptr [ebp-58]
:0044B606 33C0                    xor eax, eax
:0044B608 8A02                    mov al, byte ptr [edx]
:0044B60A 33C9                    xor ecx, ecx
:0044B60C 3DFF000000              cmp eax, 000000FF
:0044B611 0F94C1                  sete cl
:0044B614 898D60FFFFFF            mov dword ptr [ebp+FFFFFF60], ecx
:0044B61A EB0A                    jmp 0044B626

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B601(C)
|
:0044B61C C78560FFFFFF00000000    mov dword ptr [ebp+FFFFFF60], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B61A(U)
|
:0044B626 8A9560FFFFFF            mov dl, byte ptr [ebp+FFFFFF60]
:0044B62C 8855F0                  mov byte ptr [ebp-10], dl
:0044B62F 8B4580                  mov eax, dword ptr [ebp-80]
:0044B632 50                      push eax
:0044B633 8B4D94                  mov ecx, dword ptr [ebp-6C]
:0044B636 51                      push ecx
:0044B637 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044B63D E8F9F8FFFF              call 0044AF3B
:0044B642 85C0                    test eax, eax
:0044B644 741F                    je 0044B665
:0044B646 8A55FC                  mov dl, byte ptr [ebp-04]
:0044B649 80CA01                  or dl, 01
:0044B64C 8855FC                  mov byte ptr [ebp-04], dl

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B64F 6A04                    push 00000004
:0044B651 6A00                    push 00000000
:0044B653 6800370000              push 00003700
:0044B658 B9A01C4B00              mov ecx, 004B1CA0
:0044B65D E82ED90200              call 00478F90
:0044B662 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B644(C)
|
:0044B665 B9881C4B00              mov ecx, 004B1C88
:0044B66A E85148FCFF              call 0040FEC0
:0044B66F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044B672 2BC8                    sub ecx, eax
:0044B674 894DD0                  mov dword ptr [ebp-30], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B677 6A04                    push 00000004
:0044B679 6A00                    push 00000000
:0044B67B 8B55D0                  mov edx, dword ptr [ebp-30]
:0044B67E C1E208                  shl edx, 08
:0044B681 52                      push edx
:0044B682 B9C0174B00              mov ecx, 004B17C0
:0044B687 E804D90200              call 00478F90
:0044B68C 898574FFFFFF            mov dword ptr [ebp+FFFFFF74], eax
:0044B692 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044B695 25FF000000              and eax, 000000FF
:0044B69A 3DFF000000              cmp eax, 000000FF
:0044B69F 7455                    je 0044B6F6
:0044B6A1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044B6A4 81E1FF000000            and ecx, 000000FF
:0044B6AA 83F95A                  cmp ecx, 0000005A
:0044B6AD 7C19                    jl 0044B6C8
:0044B6AF 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044B6B2 81E2FF000000            and edx, 000000FF
:0044B6B8 81FAFF000000            cmp edx, 000000FF
:0044B6BE 7408                    je 0044B6C8
:0044B6C0 8A45FC                  mov al, byte ptr [ebp-04]
:0044B6C3 0C02                    or al, 02
:0044B6C5 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B6AD(C), :0044B6BE(C)
|
:0044B6C8 B9784E4B00              mov ecx, 004B4E78
:0044B6CD E86E47FCFF              call 0040FE40
:0044B6D2 25FF000000              and eax, 000000FF
:0044B6D7 F7D8                    neg eax
:0044B6D9 1BC0                    sbb eax, eax
:0044B6DB F7D8                    neg eax
:0044B6DD 89857CFFFFFF            mov dword ptr [ebp+FFFFFF7C], eax
:0044B6E3 8B8D78FFFFFF            mov ecx, dword ptr [ebp+FFFFFF78]
:0044B6E9 C601FF                  mov byte ptr [ecx], FF
:0044B6EC 8B55CC                  mov edx, dword ptr [ebp-34]
:0044B6EF 8A45F0                  mov al, byte ptr [ebp-10]
:0044B6F2 8802                    mov byte ptr [edx], al
:0044B6F4 EB13                    jmp 0044B709

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B69F(C)
|
:0044B6F6 8B8D78FFFFFF            mov ecx, dword ptr [ebp+FFFFFF78]
:0044B6FC 8A55C4                  mov dl, byte ptr [ebp-3C]
:0044B6FF 8811                    mov byte ptr [ecx], dl
:0044B701 8B45CC                  mov eax, dword ptr [ebp-34]
:0044B704 8A4DF0                  mov cl, byte ptr [ebp-10]
:0044B707 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B6F4(U)
|
:0044B709 8B55F0                  mov edx, dword ptr [ebp-10]
:0044B70C 81E2FF000000            and edx, 000000FF
:0044B712 85D2                    test edx, edx
:0044B714 7522                    jne 0044B738
:0044B716 6A00                    push 00000000
:0044B718 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:0044B71E 50                      push eax
:0044B71F 6A10                    push 00000010
:0044B721 6A10                    push 00000010
:0044B723 8B4D80                  mov ecx, dword ptr [ebp-80]
:0044B726 83C108                  add ecx, 00000008
:0044B729 51                      push ecx
:0044B72A 8B5594                  mov edx, dword ptr [ebp-6C]
:0044B72D 52                      push edx
:0044B72E E871F4FFFF              call 0044ABA4
:0044B733 83C418                  add esp, 00000018
:0044B736 EB1A                    jmp 0044B752

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B714(C)
|
:0044B738 8B8574FFFFFF            mov eax, dword ptr [ebp+FFFFFF74]
:0044B73E 50                      push eax
:0044B73F 8B4D80                  mov ecx, dword ptr [ebp-80]
:0044B742 83C108                  add ecx, 00000008
:0044B745 51                      push ecx
:0044B746 8B5594                  mov edx, dword ptr [ebp-6C]
:0044B749 52                      push edx
:0044B74A E873010000              call 0044B8C2
:0044B74F 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B736(U)
|
:0044B752 E9A5FDFFFF              jmp 0044B4FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B538(C)
|
:0044B757 E956FDFFFF              jmp 0044B4B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B4EE(C)
|
:0044B75C 8B857CFFFFFF            mov eax, dword ptr [ebp+FFFFFF7C]
:0044B762 69C000090000            imul eax, 00000900
:0044B768 89857CFFFFFF            mov dword ptr [ebp+FFFFFF7C], eax
:0044B76E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044B771 81E1FF000000            and ecx, 000000FF
:0044B777 83E101                  and ecx, 00000001
:0044B77A 85C9                    test ecx, ecx
:0044B77C 741D                    je 0044B79B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B77E 6A04                    push 00000004
:0044B780 8B55F8                  mov edx, dword ptr [ebp-08]
:0044B783 52                      push edx
:0044B784 6A30                    push 00000030
:0044B786 6A30                    push 00000030
:0044B788 8B4584                  mov eax, dword ptr [ebp-7C]
:0044B78B 83C008                  add eax, 00000008
:0044B78E 50                      push eax
:0044B78F 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0044B792 51                      push ecx
:0044B793 E80CF4FFFF              call 0044ABA4
:0044B798 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B77C(C)
|
:0044B79B 8B55FC                  mov edx, dword ptr [ebp-04]
:0044B79E 81E2FF000000            and edx, 000000FF
:0044B7A4 83E202                  and edx, 00000002
:0044B7A7 85D2                    test edx, edx
:0044B7A9 7458                    je 0044B803
:0044B7AB 8B45FC                  mov eax, dword ptr [ebp-04]
:0044B7AE 25FF000000              and eax, 000000FF
:0044B7B3 83E004                  and eax, 00000004
:0044B7B6 85C0                    test eax, eax
:0044B7B8 7449                    je 0044B803

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B7BA 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B7BC 6A04                    push 00000004
:0044B7BE 6A00                    push 00000000
:0044B7C0 6800770000              push 00007700
:0044B7C5 B9A01C4B00              mov ecx, 004B1CA0
:0044B7CA E8C1D70200              call 00478F90
:0044B7CF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044B7D2 81E1FF000000            and ecx, 000000FF
:0044B7D8 83E95A                  sub ecx, 0000005A
:0044B7DB 69C900090000            imul ecx, 00000900
:0044B7E1 8B957CFFFFFF            mov edx, dword ptr [ebp+FFFFFF7C]
:0044B7E7 03D0                    add edx, eax
:0044B7E9 03CA                    add ecx, edx
:0044B7EB 51                      push ecx
:0044B7EC 6A30                    push 00000030
:0044B7EE 6A30                    push 00000030
:0044B7F0 8B4584                  mov eax, dword ptr [ebp-7C]
:0044B7F3 83C008                  add eax, 00000008
:0044B7F6 50                      push eax
:0044B7F7 8B4DAC                  mov ecx, dword ptr [ebp-54]
:0044B7FA 51                      push ecx
:0044B7FB E8A4F3FFFF              call 0044ABA4
:0044B800 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B7A9(C), :0044B7B8(C)
|
:0044B803 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044B806 81E2FF000000            and edx, 000000FF
:0044B80C 83FA5A                  cmp edx, 0000005A
:0044B80F 7D4D                    jge 0044B85E
:0044B811 8B45FC                  mov eax, dword ptr [ebp-04]
:0044B814 25FF000000              and eax, 000000FF
:0044B819 83E004                  and eax, 00000004
:0044B81C 85C0                    test eax, eax
:0044B81E 743E                    je 0044B85E
:0044B820 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044B823 81E1FF000000            and ecx, 000000FF
:0044B829 6BC924                  imul ecx, 00000024
:0044B82C 81C1B83B4B00            add ecx, 004B3BB8
:0044B832 E899080100              call 0045C0D0
:0044B837 25FF000000              and eax, 000000FF
:0044B83C 83F802                  cmp eax, 00000002
:0044B83F 751D                    jne 0044B85E
:0044B841 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044B844 81E1FF000000            and ecx, 000000FF
:0044B84A 51                      push ecx
:0044B84B 8B5584                  mov edx, dword ptr [ebp-7C]
:0044B84E 83C208                  add edx, 00000008
:0044B851 52                      push edx
:0044B852 8B45AC                  mov eax, dword ptr [ebp-54]
:0044B855 50                      push eax
:0044B856 E88EA0FEFF              call 004358E9
:0044B85B 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B80F(C), :0044B81E(C), :0044B83F(C)
|
:0044B85E 8B8D6CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF6C]
:0044B864 33D2                    xor edx, edx
:0044B866 8A9181000000            mov dl, byte ptr [ecx+00000081]
:0044B86C 81FAFF000000            cmp edx, 000000FF
:0044B872 7438                    je 0044B8AC
:0044B874 8B45B4                  mov eax, dword ptr [ebp-4C]
:0044B877 33C9                    xor ecx, ecx
:0044B879 8A08                    mov cl, byte ptr [eax]
:0044B87B 85C9                    test ecx, ecx
:0044B87D 742D                    je 0044B8AC

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B87F 6A04                    push 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044B881 6A04                    push 00000004
:0044B883 6A00                    push 00000000
:0044B885 68002E0000              push 00002E00
:0044B88A B9A01C4B00              mov ecx, 004B1CA0
:0044B88F E8FCD60200              call 00478F90
:0044B894 50                      push eax
:0044B895 6A30                    push 00000030
:0044B897 6A30                    push 00000030
:0044B899 8B5584                  mov edx, dword ptr [ebp-7C]
:0044B89C 83C208                  add edx, 00000008
:0044B89F 52                      push edx
:0044B8A0 8B45AC                  mov eax, dword ptr [ebp-54]
:0044B8A3 50                      push eax
:0044B8A4 E8FBF2FFFF              call 0044ABA4
:0044B8A9 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044B872(C), :0044B87D(C)
|
:0044B8AC E984FBFFFF              jmp 0044B435

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B480(C)
|
:0044B8B1 E921FBFFFF              jmp 0044B3D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B422(C)
|
:0044B8B6 E89348FCFF              call 0041014E
:0044B8BB 5E                      pop esi
:0044B8BC 8BE5                    mov esp, ebp
:0044B8BE 5D                      pop ebp
:0044B8BF C21000                  ret 0010



* Referenced by a CALL at Address:
|:0044B74A   
|
:0044B8C2 55                      push ebp
:0044B8C3 8BEC                    mov ebp, esp
:0044B8C5 81EC0C010000            sub esp, 0000010C
:0044B8CB 6800010000              push 00000100
:0044B8D0 8D85F8FEFFFF            lea eax, dword ptr [ebp+FFFFFEF8]
:0044B8D6 50                      push eax
:0044B8D7 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044B8DA 51                      push ecx
:0044B8DB E8E0CC0200              call 004785C0
:0044B8E0 83C40C                  add esp, 0000000C
:0044B8E3 8D95F8FEFFFF            lea edx, dword ptr [ebp+FFFFFEF8]
:0044B8E9 8955FC                  mov dword ptr [ebp-04], edx
:0044B8EC C745F800000000          mov [ebp-08], 00000000
:0044B8F3 EB09                    jmp 0044B8FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BA10(U)
|
:0044B8F5 8B45F8                  mov eax, dword ptr [ebp-08]
:0044B8F8 83C001                  add eax, 00000001
:0044B8FB 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B8F3(U)
|
:0044B8FE 837DF808                cmp dword ptr [ebp-08], 00000008
:0044B902 0F830D010000            jnb 0044BA15
:0044B908 C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:0044B912 EB0F                    jmp 0044B923

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B948(U)
|
:0044B914 8B8DF4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF4]
:0044B91A 83C101                  add ecx, 00000001
:0044B91D 898DF4FEFFFF            mov dword ptr [ebp+FFFFFEF4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B912(U)
|
:0044B923 83BDF4FEFFFF04          cmp dword ptr [ebp+FFFFFEF4], 00000004
:0044B92A 731E                    jnb 0044B94A
:0044B92C 8B55FC                  mov edx, dword ptr [ebp-04]
:0044B92F 668B02                  mov ax, word ptr [edx]
:0044B932 66230530E94700          and ax, word ptr [0047E930]
:0044B939 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044B93C 668901                  mov word ptr [ecx], ax
:0044B93F 8B55FC                  mov edx, dword ptr [ebp-04]
:0044B942 83C202                  add edx, 00000002
:0044B945 8955FC                  mov dword ptr [ebp-04], edx
:0044B948 EBCA                    jmp 0044B914

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B92A(C)
|
:0044B94A C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:0044B954 EB0F                    jmp 0044B965

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B98A(U)
|
:0044B956 8B85F4FEFFFF            mov eax, dword ptr [ebp+FFFFFEF4]
:0044B95C 83C001                  add eax, 00000001
:0044B95F 8985F4FEFFFF            mov dword ptr [ebp+FFFFFEF4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B954(U)
|
:0044B965 83BDF4FEFFFF04          cmp dword ptr [ebp+FFFFFEF4], 00000004
:0044B96C 731E                    jnb 0044B98C
:0044B96E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044B971 668B11                  mov dx, word ptr [ecx]
:0044B974 66231534E94700          and dx, word ptr [0047E934]
:0044B97B 8B45FC                  mov eax, dword ptr [ebp-04]
:0044B97E 668910                  mov word ptr [eax], dx
:0044B981 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044B984 83C102                  add ecx, 00000002
:0044B987 894DFC                  mov dword ptr [ebp-04], ecx
:0044B98A EBCA                    jmp 0044B956

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B96C(C)
|
:0044B98C C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:0044B996 EB0F                    jmp 0044B9A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B9CC(U)
|
:0044B998 8B95F4FEFFFF            mov edx, dword ptr [ebp+FFFFFEF4]
:0044B99E 83C201                  add edx, 00000001
:0044B9A1 8995F4FEFFFF            mov dword ptr [ebp+FFFFFEF4], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B996(U)
|
:0044B9A7 83BDF4FEFFFF04          cmp dword ptr [ebp+FFFFFEF4], 00000004
:0044B9AE 731E                    jnb 0044B9CE
:0044B9B0 8B45FC                  mov eax, dword ptr [ebp-04]
:0044B9B3 668B08                  mov cx, word ptr [eax]
:0044B9B6 66230D38E94700          and cx, word ptr [0047E938]
:0044B9BD 8B55FC                  mov edx, dword ptr [ebp-04]
:0044B9C0 66890A                  mov word ptr [edx], cx
:0044B9C3 8B45FC                  mov eax, dword ptr [ebp-04]
:0044B9C6 83C002                  add eax, 00000002
:0044B9C9 8945FC                  mov dword ptr [ebp-04], eax
:0044B9CC EBCA                    jmp 0044B998

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B9AE(C)
|
:0044B9CE C785F4FEFFFF00000000    mov dword ptr [ebp+FFFFFEF4], 00000000
:0044B9D8 EB0F                    jmp 0044B9E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BA0E(U)
|
:0044B9DA 8B8DF4FEFFFF            mov ecx, dword ptr [ebp+FFFFFEF4]
:0044B9E0 83C101                  add ecx, 00000001
:0044B9E3 898DF4FEFFFF            mov dword ptr [ebp+FFFFFEF4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B9D8(U)
|
:0044B9E9 83BDF4FEFFFF04          cmp dword ptr [ebp+FFFFFEF4], 00000004
:0044B9F0 731E                    jnb 0044BA10
:0044B9F2 8B55FC                  mov edx, dword ptr [ebp-04]
:0044B9F5 668B02                  mov ax, word ptr [edx]
:0044B9F8 6623053CE94700          and ax, word ptr [0047E93C]
:0044B9FF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044BA02 668901                  mov word ptr [ecx], ax
:0044BA05 8B55FC                  mov edx, dword ptr [ebp-04]
:0044BA08 83C202                  add edx, 00000002
:0044BA0B 8955FC                  mov dword ptr [ebp-04], edx
:0044BA0E EBCA                    jmp 0044B9DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B9F0(C)
|
:0044BA10 E9E0FEFFFF              jmp 0044B8F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044B902(C)
|
:0044BA15 6A00                    push 00000000
:0044BA17 8D85F8FEFFFF            lea eax, dword ptr [ebp+FFFFFEF8]
:0044BA1D 50                      push eax
:0044BA1E 6A10                    push 00000010
:0044BA20 6A10                    push 00000010
:0044BA22 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044BA25 51                      push ecx
:0044BA26 8B5508                  mov edx, dword ptr [ebp+08]
:0044BA29 52                      push edx
:0044BA2A E875F1FFFF              call 0044ABA4
:0044BA2F 83C418                  add esp, 00000018
:0044BA32 8BE5                    mov esp, ebp
:0044BA34 5D                      pop ebp
:0044BA35 C3                      ret



* Referenced by a CALL at Address:
|:0044B595   
|
:0044BA36 55                      push ebp
:0044BA37 8BEC                    mov ebp, esp
:0044BA39 83EC14                  sub esp, 00000014
:0044BA3C 56                      push esi
:0044BA3D C745FC00000000          mov [ebp-04], 00000000
:0044BA44 8B4510                  mov eax, dword ptr [ebp+10]
:0044BA47 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044BA49 B903000000              mov ecx, 00000003
:0044BA4E F7F1                    div ecx
:0044BA50 8855F8                  mov byte ptr [ebp-08], dl
:0044BA53 8B4514                  mov eax, dword ptr [ebp+14]
:0044BA56 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044BA58 B903000000              mov ecx, 00000003
:0044BA5D F7F1                    div ecx
:0044BA5F 8855F4                  mov byte ptr [ebp-0C], dl
:0044BA62 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BA65 81E2FF000000            and edx, 000000FF
:0044BA6B 8B4510                  mov eax, dword ptr [ebp+10]
:0044BA6E 2BC2                    sub eax, edx
:0044BA70 894510                  mov dword ptr [ebp+10], eax
:0044BA73 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044BA76 81E1FF000000            and ecx, 000000FF
:0044BA7C 8B5514                  mov edx, dword ptr [ebp+14]
:0044BA7F 2BD1                    sub edx, ecx
:0044BA81 895514                  mov dword ptr [ebp+14], edx
:0044BA84 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BA87 25FF000000              and eax, 000000FF
:0044BA8C 8B4D18                  mov ecx, dword ptr [ebp+18]
:0044BA8F 03C8                    add ecx, eax
:0044BA91 894D18                  mov dword ptr [ebp+18], ecx
:0044BA94 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044BA97 81E2FF000000            and edx, 000000FF
:0044BA9D 8B451C                  mov eax, dword ptr [ebp+1C]
:0044BAA0 03C2                    add eax, edx
:0044BAA2 89451C                  mov dword ptr [ebp+1C], eax
:0044BAA5 8B4518                  mov eax, dword ptr [ebp+18]
:0044BAA8 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044BAAA B903000000              mov ecx, 00000003
:0044BAAF F7F1                    div ecx
:0044BAB1 85D2                    test edx, edx
:0044BAB3 7509                    jne 0044BABE
:0044BAB5 C745F000000000          mov [ebp-10], 00000000
:0044BABC EB16                    jmp 0044BAD4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BAB3(C)
|
:0044BABE 8B4518                  mov eax, dword ptr [ebp+18]
:0044BAC1 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044BAC3 B903000000              mov ecx, 00000003
:0044BAC8 F7F1                    div ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044BACA B803000000              mov eax, 00000003
:0044BACF 2BC2                    sub eax, edx
:0044BAD1 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BABC(U)
|
:0044BAD4 8B4D18                  mov ecx, dword ptr [ebp+18]
:0044BAD7 034DF0                  add ecx, dword ptr [ebp-10]
:0044BADA 894D18                  mov dword ptr [ebp+18], ecx
:0044BADD 8B451C                  mov eax, dword ptr [ebp+1C]
:0044BAE0 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044BAE2 B903000000              mov ecx, 00000003
:0044BAE7 F7F1                    div ecx
:0044BAE9 85D2                    test edx, edx
:0044BAEB 7509                    jne 0044BAF6
:0044BAED C745EC00000000          mov [ebp-14], 00000000
:0044BAF4 EB16                    jmp 0044BB0C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BAEB(C)
|
:0044BAF6 8B451C                  mov eax, dword ptr [ebp+1C]
:0044BAF9 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044BAFB B903000000              mov ecx, 00000003
:0044BB00 F7F1                    div ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044BB02 B803000000              mov eax, 00000003
:0044BB07 2BC2                    sub eax, edx
:0044BB09 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BAF4(U)
|
:0044BB0C 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0044BB0F 034DEC                  add ecx, dword ptr [ebp-14]
:0044BB12 894D1C                  mov dword ptr [ebp+1C], ecx
:0044BB15 8B7510                  mov esi, dword ptr [ebp+10]
:0044BB18 C1E604                  shl esi, 04
:0044BB1B B958494B00              mov ecx, 004B4958
:0044BB20 E8A9F1FFFF              call 0044ACCE
:0044BB25 03F0                    add esi, eax
:0044BB27 897510                  mov dword ptr [ebp+10], esi
:0044BB2A 8B7514                  mov esi, dword ptr [ebp+14]
:0044BB2D C1E604                  shl esi, 04
:0044BB30 B958494B00              mov ecx, 004B4958
:0044BB35 E8A5F1FFFF              call 0044ACDF
:0044BB3A 03F0                    add esi, eax
:0044BB3C 897514                  mov dword ptr [ebp+14], esi
:0044BB3F 8B7518                  mov esi, dword ptr [ebp+18]
:0044BB42 C1E604                  shl esi, 04
:0044BB45 B958494B00              mov ecx, 004B4958
:0044BB4A E87FF1FFFF              call 0044ACCE
:0044BB4F 03F0                    add esi, eax
:0044BB51 897518                  mov dword ptr [ebp+18], esi
:0044BB54 8B751C                  mov esi, dword ptr [ebp+1C]
:0044BB57 C1E604                  shl esi, 04
:0044BB5A B958494B00              mov ecx, 004B4958
:0044BB5F E87BF1FFFF              call 0044ACDF
:0044BB64 03F0                    add esi, eax
:0044BB66 89751C                  mov dword ptr [ebp+1C], esi
:0044BB69 8B5508                  mov edx, dword ptr [ebp+08]
:0044BB6C 3B5510                  cmp edx, dword ptr [ebp+10]
:0044BB6F 721F                    jb 0044BB90
:0044BB71 8B4508                  mov eax, dword ptr [ebp+08]
:0044BB74 3B4518                  cmp eax, dword ptr [ebp+18]
:0044BB77 7317                    jnb 0044BB90
:0044BB79 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044BB7C 3B4D14                  cmp ecx, dword ptr [ebp+14]
:0044BB7F 720F                    jb 0044BB90
:0044BB81 8B550C                  mov edx, dword ptr [ebp+0C]
:0044BB84 3B551C                  cmp edx, dword ptr [ebp+1C]
:0044BB87 7307                    jnb 0044BB90
:0044BB89 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BB6F(C), :0044BB77(C), :0044BB7F(C), :0044BB87(C)
|
:0044BB90 8B45FC                  mov eax, dword ptr [ebp-04]
:0044BB93 5E                      pop esi
:0044BB94 8BE5                    mov esp, ebp
:0044BB96 5D                      pop ebp
:0044BB97 C3                      ret



* Referenced by a CALL at Addresses:
|:0044AEF8   , :0044CA50   
|
:0044BB98 55                      push ebp
:0044BB99 8BEC                    mov ebp, esp
:0044BB9B 83EC20                  sub esp, 00000020
:0044BB9E 894DE8                  mov dword ptr [ebp-18], ecx
:0044BBA1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BBA4 81E1FF000000            and ecx, 000000FF
:0044BBAA 8B55E8                  mov edx, dword ptr [ebp-18]
:0044BBAD 8B4214                  mov eax, dword ptr [edx+14]
:0044BBB0 99                      cdq
:0044BBB1 83E20F                  and edx, 0000000F
:0044BBB4 03C2                    add eax, edx
:0044BBB6 C1F804                  sar eax, 04
:0044BBB9 3BC8                    cmp ecx, eax
:0044BBBB 7D1C                    jge 0044BBD9
:0044BBBD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044BBC0 81E1FF000000            and ecx, 000000FF
:0044BBC6 8B55E8                  mov edx, dword ptr [ebp-18]
:0044BBC9 8B4218                  mov eax, dword ptr [edx+18]
:0044BBCC 99                      cdq
:0044BBCD 83E20F                  and edx, 0000000F
:0044BBD0 03C2                    add eax, edx
:0044BBD2 C1F804                  sar eax, 04
:0044BBD5 3BC8                    cmp ecx, eax
:0044BBD7 7C05                    jl 0044BBDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BBBB(C)
|
:0044BBD9 E906010000              jmp 0044BCE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BBD7(C)
|
:0044BBDE 8B4508                  mov eax, dword ptr [ebp+08]
:0044BBE1 25FF000000              and eax, 000000FF
:0044BBE6 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044BBE9 81E1FF000000            and ecx, 000000FF
:0044BBEF 03C1                    add eax, ecx
:0044BBF1 8B55E8                  mov edx, dword ptr [ebp-18]
:0044BBF4 8B4A14                  mov ecx, dword ptr [edx+14]
:0044BBF7 C1E904                  shr ecx, 04
:0044BBFA 3BC1                    cmp eax, ecx
:0044BBFC 7318                    jnb 0044BC16
:0044BBFE 8B5508                  mov edx, dword ptr [ebp+08]
:0044BC01 81E2FF000000            and edx, 000000FF
:0044BC07 8B4510                  mov eax, dword ptr [ebp+10]
:0044BC0A 25FF000000              and eax, 000000FF
:0044BC0F 03D0                    add edx, eax
:0044BC11 8955E4                  mov dword ptr [ebp-1C], edx
:0044BC14 EB0C                    jmp 0044BC22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BBFC(C)
|
:0044BC16 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044BC19 8B5114                  mov edx, dword ptr [ecx+14]
:0044BC1C C1EA04                  shr edx, 04
:0044BC1F 8955E4                  mov dword ptr [ebp-1C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BC14(U)
|
:0044BC22 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044BC25 8945F4                  mov dword ptr [ebp-0C], eax
:0044BC28 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044BC2B 81E1FF000000            and ecx, 000000FF
:0044BC31 8B5514                  mov edx, dword ptr [ebp+14]
:0044BC34 81E2FF000000            and edx, 000000FF
:0044BC3A 03CA                    add ecx, edx
:0044BC3C 8B45E8                  mov eax, dword ptr [ebp-18]
:0044BC3F 8B5018                  mov edx, dword ptr [eax+18]
:0044BC42 C1EA04                  shr edx, 04
:0044BC45 3BCA                    cmp ecx, edx
:0044BC47 7318                    jnb 0044BC61
:0044BC49 8B450C                  mov eax, dword ptr [ebp+0C]
:0044BC4C 25FF000000              and eax, 000000FF
:0044BC51 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044BC54 81E1FF000000            and ecx, 000000FF
:0044BC5A 03C1                    add eax, ecx
:0044BC5C 8945E0                  mov dword ptr [ebp-20], eax
:0044BC5F EB0C                    jmp 0044BC6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BC47(C)
|
:0044BC61 8B55E8                  mov edx, dword ptr [ebp-18]
:0044BC64 8B4218                  mov eax, dword ptr [edx+18]
:0044BC67 C1E804                  shr eax, 04
:0044BC6A 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BC5F(U)
|
:0044BC6D 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044BC70 894DF0                  mov dword ptr [ebp-10], ecx
:0044BC73 8B550C                  mov edx, dword ptr [ebp+0C]
:0044BC76 81E2FF000000            and edx, 000000FF
:0044BC7C 8955F8                  mov dword ptr [ebp-08], edx
:0044BC7F EB09                    jmp 0044BC8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BCE2(U)
|
:0044BC81 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BC84 83C001                  add eax, 00000001
:0044BC87 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BC7F(U)
|
:0044BC8A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BC8D 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:0044BC90 7352                    jnb 0044BCE4
:0044BC92 8B55E8                  mov edx, dword ptr [ebp-18]
:0044BC95 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BC98 0FAF4214                imul eax, dword ptr [edx+14]
:0044BC9C C1E804                  shr eax, 04
:0044BC9F 8945EC                  mov dword ptr [ebp-14], eax
:0044BCA2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044BCA5 81E1FF000000            and ecx, 000000FF
:0044BCAB 894DFC                  mov dword ptr [ebp-04], ecx
:0044BCAE EB09                    jmp 0044BCB9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BCE0(U)
|
:0044BCB0 8B55FC                  mov edx, dword ptr [ebp-04]
:0044BCB3 83C201                  add edx, 00000001
:0044BCB6 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BCAE(U)
|
:0044BCB9 8B45FC                  mov eax, dword ptr [ebp-04]
:0044BCBC 3B45F4                  cmp eax, dword ptr [ebp-0C]
:0044BCBF 7321                    jnb 0044BCE2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044BCC1 6A04                    push 00000004
:0044BCC3 6A00                    push 00000000
:0044BCC5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044BCC8 8B55FC                  mov edx, dword ptr [ebp-04]
:0044BCCB 8D840A80520000          lea eax, dword ptr [edx+ecx+00005280]
:0044BCD2 50                      push eax
:0044BCD3 B9881C4B00              mov ecx, 004B1C88
:0044BCD8 E8B3D20200              call 00478F90
:0044BCDD C600FF                  mov byte ptr [eax], FF
:0044BCE0 EBCE                    jmp 0044BCB0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BCBF(C)
|
:0044BCE2 EB9D                    jmp 0044BC81

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BBD9(U), :0044BC90(C)
|
:0044BCE4 8BE5                    mov esp, ebp
:0044BCE6 5D                      pop ebp
:0044BCE7 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0044C906   
|
:0044BCEA 55                      push ebp
:0044BCEB 8BEC                    mov ebp, esp
:0044BCED 83EC0C                  sub esp, 0000000C
:0044BCF0 894DF8                  mov dword ptr [ebp-08], ecx
:0044BCF3 C745FC00000000          mov [ebp-04], 00000000
:0044BCFA 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BCFD 33C9                    xor ecx, ecx
:0044BCFF 8A8881000000            mov cl, byte ptr [eax+00000081]
:0044BD05 894DF4                  mov dword ptr [ebp-0C], ecx
:0044BD08 837DF40F                cmp dword ptr [ebp-0C], 0000000F
:0044BD0C 0F87230A0000            ja 0044C735
:0044BD12 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044BD15 FF249539C74400          jmp dword ptr [4*edx+0044C739]
:0044BD1C 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BD1F 668B8882000000          mov cx, word ptr [eax+00000082]
:0044BD26 51                      push ecx
:0044BD27 E8AC0A0000              call 0044C7D8
:0044BD2C 83C404                  add esp, 00000004
:0044BD2F E9010A0000              jmp 0044C735
:0044BD34 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BD37 668B8282000000          mov ax, word ptr [edx+00000082]
:0044BD3E 50                      push eax
:0044BD3F E8080B0000              call 0044C84C
:0044BD44 83C404                  add esp, 00000004
:0044BD47 E9E9090000              jmp 0044C735
:0044BD4C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BD4F 668B9182000000          mov dx, word ptr [ecx+00000082]
:0044BD56 52                      push edx
:0044BD57 E87C0A0000              call 0044C7D8
:0044BD5C 83C404                  add esp, 00000004
:0044BD5F 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BD62 668B8882000000          mov cx, word ptr [eax+00000082]
:0044BD69 51                      push ecx
:0044BD6A E8DD0A0000              call 0044C84C
:0044BD6F 83C404                  add esp, 00000004
:0044BD72 E9BE090000              jmp 0044C735
:0044BD77 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BD7A 668B8282000000          mov ax, word ptr [edx+00000082]
:0044BD81 50                      push eax
:0044BD82 E8510A0000              call 0044C7D8
:0044BD87 83C404                  add esp, 00000004
:0044BD8A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BD8D 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044BD93 52                      push edx
:0044BD94 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BD97 33C9                    xor ecx, ecx
:0044BD99 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044BD9F 83E902                  sub ecx, 00000002
:0044BDA2 51                      push ecx
:0044BDA3 E8D1090000              call 0044C779
:0044BDA8 83C408                  add esp, 00000008
:0044BDAB 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BDAE 8A8283000000            mov al, byte ptr [edx+00000083]
:0044BDB4 50                      push eax
:0044BDB5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BDB8 33D2                    xor edx, edx
:0044BDBA 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044BDC0 83C202                  add edx, 00000002
:0044BDC3 52                      push edx
:0044BDC4 E8B0090000              call 0044C779
:0044BDC9 83C408                  add esp, 00000008
:0044BDCC 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BDCF 33C9                    xor ecx, ecx
:0044BDD1 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044BDD7 83E902                  sub ecx, 00000002
:0044BDDA 51                      push ecx
:0044BDDB 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BDDE 8A8282000000            mov al, byte ptr [edx+00000082]
:0044BDE4 50                      push eax
:0044BDE5 E88F090000              call 0044C779
:0044BDEA 83C408                  add esp, 00000008
:0044BDED 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BDF0 33D2                    xor edx, edx
:0044BDF2 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044BDF8 83C202                  add edx, 00000002
:0044BDFB 52                      push edx
:0044BDFC 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BDFF 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044BE05 51                      push ecx
:0044BE06 E86E090000              call 0044C779
:0044BE0B 83C408                  add esp, 00000008
:0044BE0E E922090000              jmp 0044C735
:0044BE13 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BE16 668B8282000000          mov ax, word ptr [edx+00000082]
:0044BE1D 50                      push eax
:0044BE1E E8B5090000              call 0044C7D8
:0044BE23 83C404                  add esp, 00000004
:0044BE26 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BE29 668B9182000000          mov dx, word ptr [ecx+00000082]
:0044BE30 52                      push edx
:0044BE31 E8160A0000              call 0044C84C
:0044BE36 83C404                  add esp, 00000004
:0044BE39 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BE3C 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044BE42 51                      push ecx
:0044BE43 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BE46 33C0                    xor eax, eax
:0044BE48 8A8282000000            mov al, byte ptr [edx+00000082]
:0044BE4E 83E802                  sub eax, 00000002
:0044BE51 50                      push eax
:0044BE52 E822090000              call 0044C779
:0044BE57 83C408                  add esp, 00000008
:0044BE5A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BE5D 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044BE63 52                      push edx
:0044BE64 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BE67 33C9                    xor ecx, ecx
:0044BE69 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044BE6F 83C102                  add ecx, 00000002
:0044BE72 51                      push ecx
:0044BE73 E801090000              call 0044C779
:0044BE78 83C408                  add esp, 00000008
:0044BE7B 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BE7E 33C0                    xor eax, eax
:0044BE80 8A8283000000            mov al, byte ptr [edx+00000083]
:0044BE86 83E802                  sub eax, 00000002
:0044BE89 50                      push eax
:0044BE8A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BE8D 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044BE93 52                      push edx
:0044BE94 E8E0080000              call 0044C779
:0044BE99 83C408                  add esp, 00000008
:0044BE9C 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BE9F 33C9                    xor ecx, ecx
:0044BEA1 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044BEA7 83C102                  add ecx, 00000002
:0044BEAA 51                      push ecx
:0044BEAB 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BEAE 8A8282000000            mov al, byte ptr [edx+00000082]
:0044BEB4 50                      push eax
:0044BEB5 E8BF080000              call 0044C779
:0044BEBA 83C408                  add esp, 00000008
:0044BEBD E973080000              jmp 0044C735
:0044BEC2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BEC5 668B9182000000          mov dx, word ptr [ecx+00000082]
:0044BECC 52                      push edx
:0044BECD E87A090000              call 0044C84C
:0044BED2 83C404                  add esp, 00000004
:0044BED5 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BED8 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044BEDE 51                      push ecx
:0044BEDF 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BEE2 33C0                    xor eax, eax
:0044BEE4 8A8282000000            mov al, byte ptr [edx+00000082]
:0044BEEA 83E802                  sub eax, 00000002
:0044BEED 50                      push eax
:0044BEEE E886080000              call 0044C779
:0044BEF3 83C408                  add esp, 00000008
:0044BEF6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BEF9 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044BEFF 52                      push edx
:0044BF00 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BF03 33C9                    xor ecx, ecx
:0044BF05 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044BF0B 83C102                  add ecx, 00000002
:0044BF0E 51                      push ecx
:0044BF0F E865080000              call 0044C779
:0044BF14 83C408                  add esp, 00000008
:0044BF17 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BF1A 33C0                    xor eax, eax
:0044BF1C 8A8283000000            mov al, byte ptr [edx+00000083]
:0044BF22 83E802                  sub eax, 00000002
:0044BF25 50                      push eax
:0044BF26 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BF29 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044BF2F 52                      push edx
:0044BF30 E844080000              call 0044C779
:0044BF35 83C408                  add esp, 00000008
:0044BF38 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BF3B 33C9                    xor ecx, ecx
:0044BF3D 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044BF43 83C102                  add ecx, 00000002
:0044BF46 51                      push ecx
:0044BF47 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BF4A 8A8282000000            mov al, byte ptr [edx+00000082]
:0044BF50 50                      push eax
:0044BF51 E823080000              call 0044C779
:0044BF56 83C408                  add esp, 00000008
:0044BF59 E9D7070000              jmp 0044C735
:0044BF5E C745FC00000000          mov [ebp-04], 00000000
:0044BF65 EB09                    jmp 0044BF70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BFCA(U)
|
:0044BF67 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044BF6A 83C101                  add ecx, 00000001
:0044BF6D 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BF65(U)
|
:0044BF70 837DFC03                cmp dword ptr [ebp-04], 00000003
:0044BF74 7356                    jnb 0044BFCC
:0044BF76 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BF79 33C0                    xor eax, eax
:0044BF7B 8A8283000000            mov al, byte ptr [edx+00000083]
:0044BF81 83E802                  sub eax, 00000002
:0044BF84 50                      push eax
:0044BF85 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BF88 33D2                    xor edx, edx
:0044BF8A 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044BF90 8B45FC                  mov eax, dword ptr [ebp-04]
:0044BF93 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044BF97 51                      push ecx
:0044BF98 E8DC070000              call 0044C779
:0044BF9D 83C408                  add esp, 00000008
:0044BFA0 8B55F8                  mov edx, dword ptr [ebp-08]
:0044BFA3 33C0                    xor eax, eax
:0044BFA5 8A8283000000            mov al, byte ptr [edx+00000083]
:0044BFAB 83C002                  add eax, 00000002
:0044BFAE 50                      push eax
:0044BFAF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BFB2 33D2                    xor edx, edx
:0044BFB4 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044BFBA 8B45FC                  mov eax, dword ptr [ebp-04]
:0044BFBD 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044BFC1 51                      push ecx
:0044BFC2 E8B2070000              call 0044C779
:0044BFC7 83C408                  add esp, 00000008
:0044BFCA EB9B                    jmp 0044BF67

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BF74(C)
|
:0044BFCC C745FC00000000          mov [ebp-04], 00000000
:0044BFD3 EB09                    jmp 0044BFDE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C038(U)
|
:0044BFD5 8B55FC                  mov edx, dword ptr [ebp-04]
:0044BFD8 83C201                  add edx, 00000001
:0044BFDB 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BFD3(U)
|
:0044BFDE 837DFC03                cmp dword ptr [ebp-04], 00000003
:0044BFE2 7356                    jnb 0044C03A
:0044BFE4 8B45F8                  mov eax, dword ptr [ebp-08]
:0044BFE7 33C9                    xor ecx, ecx
:0044BFE9 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044BFEF 8B55FC                  mov edx, dword ptr [ebp-04]
:0044BFF2 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:0044BFF6 50                      push eax
:0044BFF7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044BFFA 33D2                    xor edx, edx
:0044BFFC 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C002 83C202                  add edx, 00000002
:0044C005 52                      push edx
:0044C006 E86E070000              call 0044C779
:0044C00B 83C408                  add esp, 00000008
:0044C00E 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C011 33C9                    xor ecx, ecx
:0044C013 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044C019 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C01C 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:0044C020 50                      push eax
:0044C021 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C024 33D2                    xor edx, edx
:0044C026 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C02C 83EA02                  sub edx, 00000002
:0044C02F 52                      push edx
:0044C030 E844070000              call 0044C779
:0044C035 83C408                  add esp, 00000008
:0044C038 EB9B                    jmp 0044BFD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044BFE2(C)
|
:0044C03A E9F6060000              jmp 0044C735
:0044C03F 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C042 668B8882000000          mov cx, word ptr [eax+00000082]
:0044C049 51                      push ecx
:0044C04A E8FD070000              call 0044C84C
:0044C04F 83C404                  add esp, 00000004
:0044C052 C745FC00000000          mov [ebp-04], 00000000
:0044C059 EB09                    jmp 0044C064

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C0BE(U)
|
:0044C05B 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C05E 83C201                  add edx, 00000001
:0044C061 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C059(U)
|
:0044C064 837DFC03                cmp dword ptr [ebp-04], 00000003
:0044C068 7356                    jnb 0044C0C0
:0044C06A 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C06D 33C9                    xor ecx, ecx
:0044C06F 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044C075 83E902                  sub ecx, 00000002
:0044C078 51                      push ecx
:0044C079 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C07C 33C0                    xor eax, eax
:0044C07E 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C084 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C087 8D5408FF                lea edx, dword ptr [eax+ecx-01]
:0044C08B 52                      push edx
:0044C08C E8E8060000              call 0044C779
:0044C091 83C408                  add esp, 00000008
:0044C094 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C097 33C9                    xor ecx, ecx
:0044C099 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044C09F 83C102                  add ecx, 00000002
:0044C0A2 51                      push ecx
:0044C0A3 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C0A6 33C0                    xor eax, eax
:0044C0A8 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C0AE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C0B1 8D5408FF                lea edx, dword ptr [eax+ecx-01]
:0044C0B5 52                      push edx
:0044C0B6 E8BE060000              call 0044C779
:0044C0BB 83C408                  add esp, 00000008
:0044C0BE EB9B                    jmp 0044C05B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C068(C)
|
:0044C0C0 C745FC00000000          mov [ebp-04], 00000000
:0044C0C7 EB09                    jmp 0044C0D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C12C(U)
|
:0044C0C9 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C0CC 83C001                  add eax, 00000001
:0044C0CF 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C0C7(U)
|
:0044C0D2 837DFC03                cmp dword ptr [ebp-04], 00000003
:0044C0D6 7356                    jnb 0044C12E
:0044C0D8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C0DB 33D2                    xor edx, edx
:0044C0DD 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C0E3 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C0E6 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044C0EA 51                      push ecx
:0044C0EB 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C0EE 33C0                    xor eax, eax
:0044C0F0 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C0F6 83C002                  add eax, 00000002
:0044C0F9 50                      push eax
:0044C0FA E87A060000              call 0044C779
:0044C0FF 83C408                  add esp, 00000008
:0044C102 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C105 33D2                    xor edx, edx
:0044C107 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C10D 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C110 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044C114 51                      push ecx
:0044C115 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C118 33C0                    xor eax, eax
:0044C11A 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C120 83E802                  sub eax, 00000002
:0044C123 50                      push eax
:0044C124 E850060000              call 0044C779
:0044C129 83C408                  add esp, 00000008
:0044C12C EB9B                    jmp 0044C0C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C0D6(C)
|
:0044C12E E902060000              jmp 0044C735
:0044C133 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C136 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C13C 52                      push edx
:0044C13D 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C140 33C9                    xor ecx, ecx
:0044C142 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C148 83E902                  sub ecx, 00000002
:0044C14B 51                      push ecx
:0044C14C E828060000              call 0044C779
:0044C151 83C408                  add esp, 00000008
:0044C154 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C157 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C15D 50                      push eax
:0044C15E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C161 33D2                    xor edx, edx
:0044C163 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C169 83C202                  add edx, 00000002
:0044C16C 52                      push edx
:0044C16D E807060000              call 0044C779
:0044C172 83C408                  add esp, 00000008
:0044C175 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C178 33C9                    xor ecx, ecx
:0044C17A 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044C180 83E902                  sub ecx, 00000002
:0044C183 51                      push ecx
:0044C184 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C187 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C18D 50                      push eax
:0044C18E E8E6050000              call 0044C779
:0044C193 83C408                  add esp, 00000008
:0044C196 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C199 33D2                    xor edx, edx
:0044C19B 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C1A1 83C202                  add edx, 00000002
:0044C1A4 52                      push edx
:0044C1A5 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C1A8 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C1AE 51                      push ecx
:0044C1AF E8C5050000              call 0044C779
:0044C1B4 83C408                  add esp, 00000008
:0044C1B7 E979050000              jmp 0044C735
:0044C1BC 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C1BF 33C0                    xor eax, eax
:0044C1C1 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C1C7 83E802                  sub eax, 00000002
:0044C1CA 50                      push eax
:0044C1CB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C1CE 33D2                    xor edx, edx
:0044C1D0 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C1D6 83EA02                  sub edx, 00000002
:0044C1D9 52                      push edx
:0044C1DA E89A050000              call 0044C779
:0044C1DF 83C408                  add esp, 00000008
:0044C1E2 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C1E5 33C9                    xor ecx, ecx
:0044C1E7 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044C1ED 83C102                  add ecx, 00000002
:0044C1F0 51                      push ecx
:0044C1F1 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C1F4 33C0                    xor eax, eax
:0044C1F6 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C1FC 83C002                  add eax, 00000002
:0044C1FF 50                      push eax
:0044C200 E874050000              call 0044C779
:0044C205 83C408                  add esp, 00000008
:0044C208 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C20B 33D2                    xor edx, edx
:0044C20D 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C213 83EA02                  sub edx, 00000002
:0044C216 52                      push edx
:0044C217 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C21A 33C9                    xor ecx, ecx
:0044C21C 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C222 83C102                  add ecx, 00000002
:0044C225 51                      push ecx
:0044C226 E84E050000              call 0044C779
:0044C22B 83C408                  add esp, 00000008
:0044C22E 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C231 33C0                    xor eax, eax
:0044C233 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C239 83C002                  add eax, 00000002
:0044C23C 50                      push eax
:0044C23D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C240 33D2                    xor edx, edx
:0044C242 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C248 83EA02                  sub edx, 00000002
:0044C24B 52                      push edx
:0044C24C E828050000              call 0044C779
:0044C251 83C408                  add esp, 00000008
:0044C254 E9DC040000              jmp 0044C735
:0044C259 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C25C 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044C262 51                      push ecx
:0044C263 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C266 33C0                    xor eax, eax
:0044C268 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C26E 83E802                  sub eax, 00000002
:0044C271 50                      push eax
:0044C272 E802050000              call 0044C779
:0044C277 83C408                  add esp, 00000008
:0044C27A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C27D 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C283 52                      push edx
:0044C284 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C287 33C9                    xor ecx, ecx
:0044C289 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C28F 83C102                  add ecx, 00000002
:0044C292 51                      push ecx
:0044C293 E8E1040000              call 0044C779
:0044C298 83C408                  add esp, 00000008
:0044C29B 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C29E 33C0                    xor eax, eax
:0044C2A0 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C2A6 83E802                  sub eax, 00000002
:0044C2A9 50                      push eax
:0044C2AA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C2AD 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C2B3 52                      push edx
:0044C2B4 E8C0040000              call 0044C779
:0044C2B9 83C408                  add esp, 00000008
:0044C2BC 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C2BF 33C9                    xor ecx, ecx
:0044C2C1 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044C2C7 83C102                  add ecx, 00000002
:0044C2CA 51                      push ecx
:0044C2CB 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C2CE 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C2D4 50                      push eax
:0044C2D5 E89F040000              call 0044C779
:0044C2DA 83C408                  add esp, 00000008
:0044C2DD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C2E0 33D2                    xor edx, edx
:0044C2E2 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C2E8 83EA02                  sub edx, 00000002
:0044C2EB 52                      push edx
:0044C2EC 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C2EF 33C9                    xor ecx, ecx
:0044C2F1 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C2F7 83E902                  sub ecx, 00000002
:0044C2FA 51                      push ecx
:0044C2FB E879040000              call 0044C779
:0044C300 83C408                  add esp, 00000008
:0044C303 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C306 33C0                    xor eax, eax
:0044C308 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C30E 83C002                  add eax, 00000002
:0044C311 50                      push eax
:0044C312 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C315 33D2                    xor edx, edx
:0044C317 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C31D 83C202                  add edx, 00000002
:0044C320 52                      push edx
:0044C321 E853040000              call 0044C779
:0044C326 83C408                  add esp, 00000008
:0044C329 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C32C 33C9                    xor ecx, ecx
:0044C32E 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044C334 83E902                  sub ecx, 00000002
:0044C337 51                      push ecx
:0044C338 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C33B 33C0                    xor eax, eax
:0044C33D 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C343 83C002                  add eax, 00000002
:0044C346 50                      push eax
:0044C347 E82D040000              call 0044C779
:0044C34C 83C408                  add esp, 00000008
:0044C34F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C352 33D2                    xor edx, edx
:0044C354 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C35A 83C202                  add edx, 00000002
:0044C35D 52                      push edx
:0044C35E 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C361 33C9                    xor ecx, ecx
:0044C363 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C369 83E902                  sub ecx, 00000002
:0044C36C 51                      push ecx
:0044C36D E807040000              call 0044C779
:0044C372 83C408                  add esp, 00000008
:0044C375 E9BB030000              jmp 0044C735
:0044C37A C745FC00000000          mov [ebp-04], 00000000
:0044C381 EB09                    jmp 0044C38C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C3E6(U)
|
:0044C383 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C386 83C201                  add edx, 00000001
:0044C389 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C381(U)
|
:0044C38C 837DFC05                cmp dword ptr [ebp-04], 00000005
:0044C390 7356                    jnb 0044C3E8
:0044C392 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C395 33C9                    xor ecx, ecx
:0044C397 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044C39D 83E902                  sub ecx, 00000002
:0044C3A0 51                      push ecx
:0044C3A1 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C3A4 33C0                    xor eax, eax
:0044C3A6 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C3AC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C3AF 8D5408FE                lea edx, dword ptr [eax+ecx-02]
:0044C3B3 52                      push edx
:0044C3B4 E8C0030000              call 0044C779
:0044C3B9 83C408                  add esp, 00000008
:0044C3BC 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C3BF 33C9                    xor ecx, ecx
:0044C3C1 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044C3C7 83C102                  add ecx, 00000002
:0044C3CA 51                      push ecx
:0044C3CB 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C3CE 33C0                    xor eax, eax
:0044C3D0 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C3D6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C3D9 8D5408FE                lea edx, dword ptr [eax+ecx-02]
:0044C3DD 52                      push edx
:0044C3DE E896030000              call 0044C779
:0044C3E3 83C408                  add esp, 00000008
:0044C3E6 EB9B                    jmp 0044C383

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C390(C)
|
:0044C3E8 C745FC00000000          mov [ebp-04], 00000000
:0044C3EF EB09                    jmp 0044C3FA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C454(U)
|
:0044C3F1 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C3F4 83C001                  add eax, 00000001
:0044C3F7 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C3EF(U)
|
:0044C3FA 837DFC03                cmp dword ptr [ebp-04], 00000003
:0044C3FE 7356                    jnb 0044C456
:0044C400 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C403 33D2                    xor edx, edx
:0044C405 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C40B 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C40E 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044C412 51                      push ecx
:0044C413 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C416 33C0                    xor eax, eax
:0044C418 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C41E 83E802                  sub eax, 00000002
:0044C421 50                      push eax
:0044C422 E852030000              call 0044C779
:0044C427 83C408                  add esp, 00000008
:0044C42A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C42D 33D2                    xor edx, edx
:0044C42F 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C435 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C438 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044C43C 51                      push ecx
:0044C43D 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C440 33C0                    xor eax, eax
:0044C442 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C448 83C002                  add eax, 00000002
:0044C44B 50                      push eax
:0044C44C E828030000              call 0044C779
:0044C451 83C408                  add esp, 00000008
:0044C454 EB9B                    jmp 0044C3F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C3FE(C)
|
:0044C456 E9DA020000              jmp 0044C735
:0044C45B C745FC00000000          mov [ebp-04], 00000000
:0044C462 EB09                    jmp 0044C46D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C50B(U)
|
:0044C464 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C467 83C101                  add ecx, 00000001
:0044C46A 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C462(U)
|
:0044C46D 837DFC02                cmp dword ptr [ebp-04], 00000002
:0044C471 0F8399000000            jnb 0044C510
:0044C477 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C47A 33C0                    xor eax, eax
:0044C47C 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C482 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C485 8D5408FD                lea edx, dword ptr [eax+ecx-03]
:0044C489 52                      push edx
:0044C48A 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C48D 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C493 51                      push ecx
:0044C494 E8E0020000              call 0044C779
:0044C499 83C408                  add esp, 00000008
:0044C49C 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C49F 33C0                    xor eax, eax
:0044C4A1 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C4A7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C4AA 8D540802                lea edx, dword ptr [eax+ecx+02]
:0044C4AE 52                      push edx
:0044C4AF 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C4B2 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C4B8 51                      push ecx
:0044C4B9 E8BB020000              call 0044C779
:0044C4BE 83C408                  add esp, 00000008
:0044C4C1 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C4C4 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C4CA 50                      push eax
:0044C4CB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C4CE 33D2                    xor edx, edx
:0044C4D0 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C4D6 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C4D9 8D4C02FD                lea ecx, dword ptr [edx+eax-03]
:0044C4DD 51                      push ecx
:0044C4DE E896020000              call 0044C779
:0044C4E3 83C408                  add esp, 00000008
:0044C4E6 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C4E9 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C4EF 50                      push eax
:0044C4F0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C4F3 33D2                    xor edx, edx
:0044C4F5 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C4FB 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C4FE 8D4C0202                lea ecx, dword ptr [edx+eax+02]
:0044C502 51                      push ecx
:0044C503 E871020000              call 0044C779
:0044C508 83C408                  add esp, 00000008
:0044C50B E954FFFFFF              jmp 0044C464

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C471(C)
|
:0044C510 E920020000              jmp 0044C735
:0044C515 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C518 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C51E 50                      push eax
:0044C51F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C522 33D2                    xor edx, edx
:0044C524 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C52A 83EA03                  sub edx, 00000003
:0044C52D 52                      push edx
:0044C52E E846020000              call 0044C779
:0044C533 83C408                  add esp, 00000008
:0044C536 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C539 8A8883000000            mov cl, byte ptr [eax+00000083]
:0044C53F 51                      push ecx
:0044C540 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C543 33C0                    xor eax, eax
:0044C545 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C54B 83C003                  add eax, 00000003
:0044C54E 50                      push eax
:0044C54F E825020000              call 0044C779
:0044C554 83C408                  add esp, 00000008
:0044C557 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C55A 33D2                    xor edx, edx
:0044C55C 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C562 83EA03                  sub edx, 00000003
:0044C565 52                      push edx
:0044C566 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C569 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C56F 51                      push ecx
:0044C570 E804020000              call 0044C779
:0044C575 83C408                  add esp, 00000008
:0044C578 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C57B 33C0                    xor eax, eax
:0044C57D 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C583 83C003                  add eax, 00000003
:0044C586 50                      push eax
:0044C587 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C58A 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C590 52                      push edx
:0044C591 E8E3010000              call 0044C779
:0044C596 83C408                  add esp, 00000008
:0044C599 E997010000              jmp 0044C735
:0044C59E C745FC00000000          mov [ebp-04], 00000000
:0044C5A5 EB09                    jmp 0044C5B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C662(U)
|
:0044C5A7 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C5AA 83C001                  add eax, 00000001
:0044C5AD 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C5A5(U)
|
:0044C5B0 837DFC03                cmp dword ptr [ebp-04], 00000003
:0044C5B4 0F83AD000000            jnb 0044C667
:0044C5BA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C5BD 33D2                    xor edx, edx
:0044C5BF 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C5C5 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C5C8 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044C5CC 51                      push ecx
:0044C5CD 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C5D0 33C0                    xor eax, eax
:0044C5D2 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C5D8 83E803                  sub eax, 00000003
:0044C5DB 50                      push eax
:0044C5DC E898010000              call 0044C779
:0044C5E1 83C408                  add esp, 00000008
:0044C5E4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C5E7 33D2                    xor edx, edx
:0044C5E9 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C5EF 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C5F2 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044C5F6 51                      push ecx
:0044C5F7 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C5FA 33C0                    xor eax, eax
:0044C5FC 8A8282000000            mov al, byte ptr [edx+00000082]
:0044C602 83C003                  add eax, 00000003
:0044C605 50                      push eax
:0044C606 E86E010000              call 0044C779
:0044C60B 83C408                  add esp, 00000008
:0044C60E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C611 33D2                    xor edx, edx
:0044C613 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C619 83EA03                  sub edx, 00000003
:0044C61C 52                      push edx
:0044C61D 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C620 33C9                    xor ecx, ecx
:0044C622 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C628 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C62B 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:0044C62F 50                      push eax
:0044C630 E844010000              call 0044C779
:0044C635 83C408                  add esp, 00000008
:0044C638 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C63B 33D2                    xor edx, edx
:0044C63D 8A9183000000            mov dl, byte ptr [ecx+00000083]
:0044C643 83C203                  add edx, 00000003
:0044C646 52                      push edx
:0044C647 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C64A 33C9                    xor ecx, ecx
:0044C64C 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C652 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C655 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:0044C659 50                      push eax
:0044C65A E81A010000              call 0044C779
:0044C65F 83C408                  add esp, 00000008
:0044C662 E940FFFFFF              jmp 0044C5A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C5B4(C)
|
:0044C667 E9C9000000              jmp 0044C735
:0044C66C C745FC00000000          mov [ebp-04], 00000000
:0044C673 EB09                    jmp 0044C67E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C730(U)
|
:0044C675 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C678 83C101                  add ecx, 00000001
:0044C67B 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C673(U)
|
:0044C67E 837DFC05                cmp dword ptr [ebp-04], 00000005
:0044C682 0F83AD000000            jnb 0044C735
:0044C688 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C68B 33C0                    xor eax, eax
:0044C68D 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C693 83E803                  sub eax, 00000003
:0044C696 50                      push eax
:0044C697 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C69A 33D2                    xor edx, edx
:0044C69C 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C6A2 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C6A5 8D4C02FE                lea ecx, dword ptr [edx+eax-02]
:0044C6A9 51                      push ecx
:0044C6AA E8CA000000              call 0044C779
:0044C6AF 83C408                  add esp, 00000008
:0044C6B2 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C6B5 33C0                    xor eax, eax
:0044C6B7 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C6BD 83C003                  add eax, 00000003
:0044C6C0 50                      push eax
:0044C6C1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C6C4 33D2                    xor edx, edx
:0044C6C6 8A9182000000            mov dl, byte ptr [ecx+00000082]
:0044C6CC 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C6CF 8D4C02FE                lea ecx, dword ptr [edx+eax-02]
:0044C6D3 51                      push ecx
:0044C6D4 E8A0000000              call 0044C779
:0044C6D9 83C408                  add esp, 00000008
:0044C6DC 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C6DF 33C0                    xor eax, eax
:0044C6E1 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C6E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C6EA 8D5408FE                lea edx, dword ptr [eax+ecx-02]
:0044C6EE 52                      push edx
:0044C6EF 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C6F2 33C9                    xor ecx, ecx
:0044C6F4 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C6FA 83E903                  sub ecx, 00000003
:0044C6FD 51                      push ecx
:0044C6FE E876000000              call 0044C779
:0044C703 83C408                  add esp, 00000008
:0044C706 8B55F8                  mov edx, dword ptr [ebp-08]
:0044C709 33C0                    xor eax, eax
:0044C70B 8A8283000000            mov al, byte ptr [edx+00000083]
:0044C711 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C714 8D5408FE                lea edx, dword ptr [eax+ecx-02]
:0044C718 52                      push edx
:0044C719 8B45F8                  mov eax, dword ptr [ebp-08]
:0044C71C 33C9                    xor ecx, ecx
:0044C71E 8A8882000000            mov cl, byte ptr [eax+00000082]
:0044C724 83C103                  add ecx, 00000003
:0044C727 51                      push ecx
:0044C728 E84C000000              call 0044C779
:0044C72D 83C408                  add esp, 00000008
:0044C730 E940FFFFFF              jmp 0044C675

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044BD0C(C), :0044BD2F(U), :0044BD47(U), :0044BD72(U), :0044BE0E(U)
|:0044BEBD(U), :0044BF59(U), :0044C03A(U), :0044C12E(U), :0044C1B7(U)
|:0044C254(U), :0044C375(U), :0044C456(U), :0044C510(U), :0044C599(U)
|:0044C667(U), :0044C682(C)
|
:0044C735 8BE5                    mov esp, ebp
:0044C737 5D                      pop ebp
:0044C738 C3                      ret



:0044C739 1CBD4400                DWORD 0044BD1C
:0044C73D 34BD4400                DWORD 0044BD34
:0044C741 4CBD4400                DWORD 0044BD4C
:0044C745 77BD4400                DWORD 0044BD77
:0044C749 13BE4400                DWORD 0044BE13
:0044C74D C2BE4400                DWORD 0044BEC2
:0044C751 5EBF4400                DWORD 0044BF5E
:0044C755 3FC04400                DWORD 0044C03F
:0044C759 33C14400                DWORD 0044C133
:0044C75D BCC14400                DWORD 0044C1BC
:0044C761 59C24400                DWORD 0044C259
:0044C765 7AC34400                DWORD 0044C37A
:0044C769 5BC44400                DWORD 0044C45B
:0044C76D 15C54400                DWORD 0044C515
:0044C771 9EC54400                DWORD 0044C59E
:0044C775 6CC64400                DWORD 0044C66C



* Referenced by a CALL at Addresses:
|:0044BDA3   , :0044BDC4   , :0044BDE5   , :0044BE06   , :0044BE52   
|:0044BE73   , :0044BE94   , :0044BEB5   , :0044BEEE   , :0044BF0F   
|:0044BF30   , :0044BF51   , :0044BF98   , :0044BFC2   , :0044C006   
|:0044C030   , :0044C08C   , :0044C0B6   , :0044C0FA   , :0044C124   
|:0044C14C   , :0044C16D   , :0044C18E   , :0044C1AF   , :0044C1DA   
|:0044C200   , :0044C226   , :0044C24C   , :0044C272   , :0044C293   
|:0044C2B4   , :0044C2D5   , :0044C2FB   , :0044C321   , :0044C347   
|:0044C36D   , :0044C3B4   , :0044C3DE   , :0044C422   , :0044C44C   
|:0044C494   , :0044C4B9   , :0044C4DE   , :0044C503   , :0044C52E   
|:0044C54F   , :0044C570   , :0044C591   , :0044C5DC   , :0044C606   
|:0044C630   , :0044C65A   , :0044C6AA   , :0044C6D4   , :0044C6FE   
|:0044C728   , :0044C83E   , :0044C8A3   
|
:0044C779 55                      push ebp
:0044C77A 8BEC                    mov ebp, esp
:0044C77C 8B4508                  mov eax, dword ptr [ebp+08]
:0044C77F 25FF000000              and eax, 000000FF
:0044C784 33C9                    xor ecx, ecx
:0044C786 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0044C78C 3BC1                    cmp eax, ecx
:0044C78E 7D14                    jge 0044C7A4
:0044C790 8B550C                  mov edx, dword ptr [ebp+0C]
:0044C793 81E2FF000000            and edx, 000000FF
:0044C799 33C0                    xor eax, eax
:0044C79B A0C54E4B00              mov al, byte ptr [004B4EC5]
:0044C7A0 3BD0                    cmp edx, eax
:0044C7A2 7C02                    jl 0044C7A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C78E(C)
|
:0044C7A4 EB30                    jmp 0044C7D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C7A2(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044C7A6 6A04                    push 00000004
:0044C7A8 6A00                    push 00000000
:0044C7AA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044C7AD 81E1FF000000            and ecx, 000000FF
:0044C7B3 33D2                    xor edx, edx
:0044C7B5 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044C7BB 0FAFCA                  imul ecx, edx
:0044C7BE 8B4508                  mov eax, dword ptr [ebp+08]
:0044C7C1 25FF000000              and eax, 000000FF
:0044C7C6 03C8                    add ecx, eax
:0044C7C8 51                      push ecx
:0044C7C9 B9E81C4B00              mov ecx, 004B1CE8
:0044C7CE E8BDC70200              call 00478F90
:0044C7D3 C60001                  mov byte ptr [eax], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C7A4(U)
|
:0044C7D6 5D                      pop ebp
:0044C7D7 C3                      ret



* Referenced by a CALL at Addresses:
|:0044BD27   , :0044BD57   , :0044BD82   , :0044BE1E   
|
:0044C7D8 55                      push ebp
:0044C7D9 8BEC                    mov ebp, esp
:0044C7DB 83EC08                  sub esp, 00000008
:0044C7DE 68FF000000              push 000000FF
:0044C7E3 68FF000000              push 000000FF
:0044C7E8 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044C7EB E870A3FEFF              call 00436B60
:0044C7F0 C645F800                mov [ebp-08], 00
:0044C7F4 EB08                    jmp 0044C7FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C846(U)
|
:0044C7F6 8A45F8                  mov al, byte ptr [ebp-08]
:0044C7F9 0401                    add al, 01
:0044C7FB 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C7F4(U)
|
:0044C7FE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044C801 81E1FF000000            and ecx, 000000FF
:0044C807 83F904                  cmp ecx, 00000004
:0044C80A 7D3C                    jge 0044C848
:0044C80C 8A55F8                  mov dl, byte ptr [ebp-08]
:0044C80F 52                      push edx
:0044C810 8D4508                  lea eax, dword ptr [ebp+08]
:0044C813 50                      push eax
:0044C814 E8D8300000              call 0044F8F1
:0044C819 83C408                  add esp, 00000008
:0044C81C 50                      push eax
:0044C81D 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044C820 E87BA2FEFF              call 00436AA0
:0044C825 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C828 81E1FF000000            and ecx, 000000FF
:0044C82E 81F9FF000000            cmp ecx, 000000FF
:0044C834 7410                    je 0044C846
:0044C836 8A55FD                  mov dl, byte ptr [ebp-03]
:0044C839 52                      push edx
:0044C83A 8A45FC                  mov al, byte ptr [ebp-04]
:0044C83D 50                      push eax
:0044C83E E836FFFFFF              call 0044C779
:0044C843 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C834(C)
|
:0044C846 EBAE                    jmp 0044C7F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C80A(C)
|
:0044C848 8BE5                    mov esp, ebp
:0044C84A 5D                      pop ebp
:0044C84B C3                      ret



* Referenced by a CALL at Addresses:
|:0044BD3F   , :0044BD6A   , :0044BE31   , :0044BECD   , :0044C04A   
|
:0044C84C 55                      push ebp
:0044C84D 8BEC                    mov ebp, esp
:0044C84F 51                      push ecx
:0044C850 C645FC00                mov [ebp-04], 00
:0044C854 EB08                    jmp 0044C85E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C8AB(U)
|
:0044C856 8A45FC                  mov al, byte ptr [ebp-04]
:0044C859 0401                    add al, 01
:0044C85B 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C854(U)
|
:0044C85E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C861 81E1FF000000            and ecx, 000000FF
:0044C867 83F904                  cmp ecx, 00000004
:0044C86A 7D41                    jge 0044C8AD
:0044C86C 8B5509                  mov edx, dword ptr [ebp+09]
:0044C86F 81E2FF000000            and edx, 000000FF
:0044C875 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C878 25FF000000              and eax, 000000FF
:0044C87D D1E0                    shl eax, 1
:0044C87F 031485ECE94700          add edx, dword ptr [4*eax+0047E9EC]
:0044C886 52                      push edx
:0044C887 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044C88A 81E1FF000000            and ecx, 000000FF
:0044C890 8B55FC                  mov edx, dword ptr [ebp-04]
:0044C893 81E2FF000000            and edx, 000000FF
:0044C899 D1E2                    shl edx, 1
:0044C89B 030C95E8E94700          add ecx, dword ptr [4*edx+0047E9E8]
:0044C8A2 51                      push ecx
:0044C8A3 E8D1FEFFFF              call 0044C779
:0044C8A8 83C408                  add esp, 00000008
:0044C8AB EBA9                    jmp 0044C856

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C86A(C)
|
:0044C8AD 8BE5                    mov esp, ebp
:0044C8AF 5D                      pop ebp
:0044C8B0 C3                      ret



* Referenced by a CALL at Addresses:
|:0044DEB1   , :0044E174   , :00456817   , :00456ABE   
|
:0044C8B1 55                      push ebp
:0044C8B2 8BEC                    mov ebp, esp
:0044C8B4 51                      push ecx
:0044C8B5 894DFC                  mov dword ptr [ebp-04], ecx
:0044C8B8 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C8BB 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044C8BE 888881000000            mov byte ptr [eax+00000081], cl
:0044C8C4 8D5508                  lea edx, dword ptr [ebp+08]
:0044C8C7 52                      push edx
:0044C8C8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C8CB 81C182000000            add ecx, 00000082
:0044C8D1 E8CAA1FEFF              call 00436AA0
:0044C8D6 6A00                    push 00000000
:0044C8D8 6880070000              push 00000780
:0044C8DD B9E81C4B00              mov ecx, 004B1CE8
:0044C8E2 E8D935FCFF              call 0040FEC0
:0044C8E7 50                      push eax
:0044C8E8 E8F3BC0200              call 004785E0
:0044C8ED 83C40C                  add esp, 0000000C
:0044C8F0 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C8F3 33C9                    xor ecx, ecx
:0044C8F5 8A8881000000            mov cl, byte ptr [eax+00000081]
:0044C8FB 81F9FF000000            cmp ecx, 000000FF
:0044C901 7408                    je 0044C90B
:0044C903 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C906 E8DFF3FFFF              call 0044BCEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C901(C)
|
:0044C90B 8BE5                    mov esp, ebp
:0044C90D 5D                      pop ebp
:0044C90E C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004410FD   , :004411ED   , :00441D5C   , :00441EB7   , :00441EFF   
|:00441F1B   , :0044CF5E   , :0044D03B   , :0044D965   , :0044DEB9   
|:0044E184   , :0044E510   , :0044EFE4   , :0044F0E2   , :004525DC   
|:004565A8   , :00456821   , :00456AC8   , :0045CCBA   , :0045E21B   
|:0045F042   , :00467141   
|
:0044C911 55                      push ebp
:0044C912 8BEC                    mov ebp, esp
:0044C914 51                      push ecx
:0044C915 894DFC                  mov dword ptr [ebp-04], ecx
:0044C918 8B45FC                  mov eax, dword ptr [ebp-04]
:0044C91B 8B4018                  mov eax, dword ptr [eax+18]
:0044C91E 99                      cdq
:0044C91F 83E20F                  and edx, 0000000F
:0044C922 03C2                    add eax, edx
:0044C924 C1F804                  sar eax, 04
:0044C927 50                      push eax
:0044C928 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C92B 8B4114                  mov eax, dword ptr [ecx+14]
:0044C92E 99                      cdq
:0044C92F 83E20F                  and edx, 0000000F
:0044C932 03C2                    add eax, edx
:0044C934 C1F804                  sar eax, 04
:0044C937 50                      push eax
:0044C938 6A00                    push 00000000
:0044C93A 6A00                    push 00000000
:0044C93C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044C93F E894E6FFFF              call 0044AFD8
:0044C944 8BE5                    mov esp, ebp
:0044C946 5D                      pop ebp
:0044C947 C3                      ret



* Referenced by a CALL at Addresses:
|:004339AC   , :0043566B   , :00435693   , :00437302   , :004380B0   
|:004380CD   , :004383E6   , :00438621   , :004396C6   , :0043AD5F   
|:0043C30F   , :0043C4B7   , :0043C674   , :0043CB4B   , :0043CE53   
|:0043D186   , :0043D50F   , :0043E135   , :0043E725   , :0043F068   
|:0043F086   , :0043F772   , :0043F8D1   , :004408D8   , :00440D44   
|:00440EFC   , :00441C82   , :00441DBD   , :00443CE8   , :0044CBA3   
|:0044D12F   , :0044D1E1   , :0044E77A   , :0044EBC1   , :0044EDCB   
|
:0044C948 55                      push ebp
:0044C949 8BEC                    mov ebp, esp
:0044C94B 83EC14                  sub esp, 00000014
:0044C94E 894DF4                  mov dword ptr [ebp-0C], ecx
:0044C951 8B4508                  mov eax, dword ptr [ebp+08]
:0044C954 25FF000000              and eax, 000000FF
:0044C959 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044C95A B903000000              mov ecx, 00000003
:0044C95F F7F9                    idiv ecx
:0044C961 8855FC                  mov byte ptr [ebp-04], dl
:0044C964 8B450C                  mov eax, dword ptr [ebp+0C]
:0044C967 25FF000000              and eax, 000000FF
:0044C96C 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044C96D B903000000              mov ecx, 00000003
:0044C972 F7F9                    idiv ecx
:0044C974 8855F8                  mov byte ptr [ebp-08], dl
:0044C977 8A5508                  mov dl, byte ptr [ebp+08]
:0044C97A 2A55FC                  sub dl, byte ptr [ebp-04]
:0044C97D 885508                  mov byte ptr [ebp+08], dl
:0044C980 8A450C                  mov al, byte ptr [ebp+0C]
:0044C983 2A45F8                  sub al, byte ptr [ebp-08]
:0044C986 88450C                  mov byte ptr [ebp+0C], al
:0044C989 8A4D10                  mov cl, byte ptr [ebp+10]
:0044C98C 024DFC                  add cl, byte ptr [ebp-04]
:0044C98F 884D10                  mov byte ptr [ebp+10], cl
:0044C992 8A5514                  mov dl, byte ptr [ebp+14]
:0044C995 0255F8                  add dl, byte ptr [ebp-08]
:0044C998 885514                  mov byte ptr [ebp+14], dl
:0044C99B 8B4510                  mov eax, dword ptr [ebp+10]
:0044C99E 25FF000000              and eax, 000000FF
:0044C9A3 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044C9A4 B903000000              mov ecx, 00000003
:0044C9A9 F7F9                    idiv ecx
:0044C9AB 85D2                    test edx, edx
:0044C9AD 7509                    jne 0044C9B8
:0044C9AF C745F000000000          mov [ebp-10], 00000000
:0044C9B6 EB1F                    jmp 0044C9D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C9AD(C)
|
:0044C9B8 8B4510                  mov eax, dword ptr [ebp+10]
:0044C9BB 25FF000000              and eax, 000000FF
:0044C9C0 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044C9C1 B903000000              mov ecx, 00000003
:0044C9C6 F7F9                    idiv ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044C9C8 B803000000              mov eax, 00000003
:0044C9CD 2BC2                    sub eax, edx
:0044C9CF 25FF000000              and eax, 000000FF
:0044C9D4 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C9B6(U)
|
:0044C9D7 8A4D10                  mov cl, byte ptr [ebp+10]
:0044C9DA 024DF0                  add cl, byte ptr [ebp-10]
:0044C9DD 884D10                  mov byte ptr [ebp+10], cl
:0044C9E0 8B4514                  mov eax, dword ptr [ebp+14]
:0044C9E3 25FF000000              and eax, 000000FF
:0044C9E8 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044C9E9 B903000000              mov ecx, 00000003
:0044C9EE F7F9                    idiv ecx
:0044C9F0 85D2                    test edx, edx
:0044C9F2 7509                    jne 0044C9FD
:0044C9F4 C745EC00000000          mov [ebp-14], 00000000
:0044C9FB EB1F                    jmp 0044CA1C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C9F2(C)
|
:0044C9FD 8B4514                  mov eax, dword ptr [ebp+14]
:0044CA00 25FF000000              and eax, 000000FF
:0044CA05 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CA06 B903000000              mov ecx, 00000003
:0044CA0B F7F9                    idiv ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CA0D B803000000              mov eax, 00000003
:0044CA12 2BC2                    sub eax, edx
:0044CA14 25FF000000              and eax, 000000FF
:0044CA19 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044C9FB(U)
|
:0044CA1C 8A4D14                  mov cl, byte ptr [ebp+14]
:0044CA1F 024DEC                  add cl, byte ptr [ebp-14]
:0044CA22 884D14                  mov byte ptr [ebp+14], cl
:0044CA25 8A5514                  mov dl, byte ptr [ebp+14]
:0044CA28 52                      push edx
:0044CA29 8A4510                  mov al, byte ptr [ebp+10]
:0044CA2C 50                      push eax
:0044CA2D 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044CA30 51                      push ecx
:0044CA31 8A5508                  mov dl, byte ptr [ebp+08]
:0044CA34 52                      push edx
:0044CA35 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CA38 E89BE5FFFF              call 0044AFD8
:0044CA3D 8A4514                  mov al, byte ptr [ebp+14]
:0044CA40 50                      push eax
:0044CA41 8A4D10                  mov cl, byte ptr [ebp+10]
:0044CA44 51                      push ecx
:0044CA45 8A550C                  mov dl, byte ptr [ebp+0C]
:0044CA48 52                      push edx
:0044CA49 8A4508                  mov al, byte ptr [ebp+08]
:0044CA4C 50                      push eax
:0044CA4D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CA50 E843F1FFFF              call 0044BB98
:0044CA55 8BE5                    mov esp, ebp
:0044CA57 5D                      pop ebp
:0044CA58 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00434E22   , :00435493   , :0044E327   
|
:0044CA5B 55                      push ebp
:0044CA5C 8BEC                    mov ebp, esp
:0044CA5E 83EC14                  sub esp, 00000014
:0044CA61 894DF4                  mov dword ptr [ebp-0C], ecx
:0044CA64 8B4508                  mov eax, dword ptr [ebp+08]
:0044CA67 25FF000000              and eax, 000000FF
:0044CA6C 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CA6D B903000000              mov ecx, 00000003
:0044CA72 F7F9                    idiv ecx
:0044CA74 8855FC                  mov byte ptr [ebp-04], dl
:0044CA77 8B450C                  mov eax, dword ptr [ebp+0C]
:0044CA7A 25FF000000              and eax, 000000FF
:0044CA7F 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CA80 B903000000              mov ecx, 00000003
:0044CA85 F7F9                    idiv ecx
:0044CA87 8855F8                  mov byte ptr [ebp-08], dl
:0044CA8A 8A5508                  mov dl, byte ptr [ebp+08]
:0044CA8D 2A55FC                  sub dl, byte ptr [ebp-04]
:0044CA90 885508                  mov byte ptr [ebp+08], dl
:0044CA93 8A450C                  mov al, byte ptr [ebp+0C]
:0044CA96 2A45F8                  sub al, byte ptr [ebp-08]
:0044CA99 88450C                  mov byte ptr [ebp+0C], al
:0044CA9C 8A4D10                  mov cl, byte ptr [ebp+10]
:0044CA9F 024DFC                  add cl, byte ptr [ebp-04]
:0044CAA2 884D10                  mov byte ptr [ebp+10], cl
:0044CAA5 8A5514                  mov dl, byte ptr [ebp+14]
:0044CAA8 0255F8                  add dl, byte ptr [ebp-08]
:0044CAAB 885514                  mov byte ptr [ebp+14], dl
:0044CAAE 8B4510                  mov eax, dword ptr [ebp+10]
:0044CAB1 25FF000000              and eax, 000000FF
:0044CAB6 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CAB7 B903000000              mov ecx, 00000003
:0044CABC F7F9                    idiv ecx
:0044CABE 85D2                    test edx, edx
:0044CAC0 7509                    jne 0044CACB
:0044CAC2 C745F000000000          mov [ebp-10], 00000000
:0044CAC9 EB1F                    jmp 0044CAEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CAC0(C)
|
:0044CACB 8B4510                  mov eax, dword ptr [ebp+10]
:0044CACE 25FF000000              and eax, 000000FF
:0044CAD3 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CAD4 B903000000              mov ecx, 00000003
:0044CAD9 F7F9                    idiv ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CADB B803000000              mov eax, 00000003
:0044CAE0 2BC2                    sub eax, edx
:0044CAE2 25FF000000              and eax, 000000FF
:0044CAE7 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CAC9(U)
|
:0044CAEA 8A4D10                  mov cl, byte ptr [ebp+10]
:0044CAED 024DF0                  add cl, byte ptr [ebp-10]
:0044CAF0 884D10                  mov byte ptr [ebp+10], cl
:0044CAF3 8B4514                  mov eax, dword ptr [ebp+14]
:0044CAF6 25FF000000              and eax, 000000FF
:0044CAFB 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CAFC B903000000              mov ecx, 00000003
:0044CB01 F7F9                    idiv ecx
:0044CB03 85D2                    test edx, edx
:0044CB05 7509                    jne 0044CB10
:0044CB07 C745EC00000000          mov [ebp-14], 00000000
:0044CB0E EB1F                    jmp 0044CB2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CB05(C)
|
:0044CB10 8B4514                  mov eax, dword ptr [ebp+14]
:0044CB13 25FF000000              and eax, 000000FF
:0044CB18 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CB19 B903000000              mov ecx, 00000003
:0044CB1E F7F9                    idiv ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CB20 B803000000              mov eax, 00000003
:0044CB25 2BC2                    sub eax, edx
:0044CB27 25FF000000              and eax, 000000FF
:0044CB2C 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CB0E(U)
|
:0044CB2F 8A4D14                  mov cl, byte ptr [ebp+14]
:0044CB32 024DEC                  add cl, byte ptr [ebp-14]
:0044CB35 884D14                  mov byte ptr [ebp+14], cl
:0044CB38 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044CB3B 8A4508                  mov al, byte ptr [ebp+08]
:0044CB3E 884244                  mov byte ptr [edx+44], al
:0044CB41 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CB44 8A550C                  mov dl, byte ptr [ebp+0C]
:0044CB47 885145                  mov byte ptr [ecx+45], dl
:0044CB4A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044CB4D 8A4D10                  mov cl, byte ptr [ebp+10]
:0044CB50 884846                  mov byte ptr [eax+46], cl
:0044CB53 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044CB56 8A4514                  mov al, byte ptr [ebp+14]
:0044CB59 884247                  mov byte ptr [edx+47], al
:0044CB5C 8BE5                    mov esp, ebp
:0044CB5E 5D                      pop ebp
:0044CB5F C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:004354DF   , :004386B1   , :0044CF9D   , :0044D07D   , :0044D763   
|:0044E480   , :0045E063   , :0045E26E   , :0045E35C   , :0045E3D2   
|:0045E62C   , :0045E909   , :0046CD59   , :0046D5EF   , :0046E17D   
|:0046E4CE   , :0046E6D5   
|
:0044CB62 55                      push ebp
:0044CB63 8BEC                    mov ebp, esp
:0044CB65 51                      push ecx
:0044CB66 894DFC                  mov dword ptr [ebp-04], ecx
:0044CB69 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044CB6C E856000000              call 0044CBC7
:0044CB71 85C0                    test eax, eax
:0044CB73 7438                    je 0044CBAD
:0044CB75 E8B935FCFF              call 00410133
:0044CB7A 6A00                    push 00000000
:0044CB7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044CB7F E82D000000              call 0044CBB1
:0044CB84 8B45FC                  mov eax, dword ptr [ebp-04]
:0044CB87 8A4847                  mov cl, byte ptr [eax+47]
:0044CB8A 51                      push ecx
:0044CB8B 8B55FC                  mov edx, dword ptr [ebp-04]
:0044CB8E 8A4246                  mov al, byte ptr [edx+46]
:0044CB91 50                      push eax
:0044CB92 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044CB95 8A5145                  mov dl, byte ptr [ecx+45]
:0044CB98 52                      push edx
:0044CB99 8B45FC                  mov eax, dword ptr [ebp-04]
:0044CB9C 8A4844                  mov cl, byte ptr [eax+44]
:0044CB9F 51                      push ecx
:0044CBA0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044CBA3 E8A0FDFFFF              call 0044C948
:0044CBA8 E8A135FCFF              call 0041014E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CB73(C)
|
:0044CBAD 8BE5                    mov esp, ebp
:0044CBAF 5D                      pop ebp
:0044CBB0 C3                      ret



* Referenced by a CALL at Addresses:
|:00434EBC   , :0043549F   , :0044CB7F   , :0044E478   , :0044E4BA   
|:0044E526   
|
:0044CBB1 55                      push ebp
:0044CBB2 8BEC                    mov ebp, esp
:0044CBB4 51                      push ecx
:0044CBB5 894DFC                  mov dword ptr [ebp-04], ecx
:0044CBB8 8B45FC                  mov eax, dword ptr [ebp-04]
:0044CBBB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044CBBE 894850                  mov dword ptr [eax+50], ecx
:0044CBC1 8BE5                    mov esp, ebp
:0044CBC3 5D                      pop ebp
:0044CBC4 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0044CB6C   , :0045E260   , :0045E34E   , :0046E16F   , :0046E4C0   
|:0046E6C7   
|
:0044CBC7 55                      push ebp
:0044CBC8 8BEC                    mov ebp, esp
:0044CBCA 51                      push ecx
:0044CBCB 894DFC                  mov dword ptr [ebp-04], ecx
:0044CBCE 8B45FC                  mov eax, dword ptr [ebp-04]
:0044CBD1 8B4050                  mov eax, dword ptr [eax+50]
:0044CBD4 8BE5                    mov esp, ebp
:0044CBD6 5D                      pop ebp
:0044CBD7 C3                      ret



* Referenced by a CALL at Addresses:
|:0044B3C5   , :0044CEEB   , :0044CF28   , :0044D000   , :0044E4FE   
|:0045E1D7   
|
:0044CBD8 55                      push ebp
:0044CBD9 8BEC                    mov ebp, esp
:0044CBDB 51                      push ecx
:0044CBDC 894DFC                  mov dword ptr [ebp-04], ecx
:0044CBDF B928B44800              mov ecx, 0048B428
:0044CBE4 E819CCFCFF              call 00419802
:0044CBE9 B928B44800              mov ecx, 0048B428
:0044CBEE E873CCFCFF              call 00419866
:0044CBF3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044CBF6 89416C                  mov dword ptr [ecx+6C], eax
:0044CBF9 B928B44800              mov ecx, 0048B428
:0044CBFE E874CCFCFF              call 00419877
:0044CC03 8B55FC                  mov edx, dword ptr [ebp-04]
:0044CC06 894270                  mov dword ptr [edx+70], eax
:0044CC09 8BE5                    mov esp, ebp
:0044CC0B 5D                      pop ebp
:0044CC0C C3                      ret


:0044CC0D 55                      push ebp
:0044CC0E 8BEC                    mov ebp, esp
:0044CC10 83EC10                  sub esp, 00000010
:0044CC13 894DF0                  mov dword ptr [ebp-10], ecx
:0044CC16 33C0                    xor eax, eax
:0044CC18 A0FC494B00              mov al, byte ptr [004B49FC]
:0044CC1D 83E001                  and eax, 00000001
:0044CC20 85C0                    test eax, eax
:0044CC22 7526                    jne 0044CC4A
:0044CC24 8A0DFC494B00            mov cl, byte ptr [004B49FC]
:0044CC2A 80C901                  or cl, 01
:0044CC2D 880DFC494B00            mov byte ptr [004B49FC], cl
:0044CC33 B9F0494B00              mov ecx, 004B49F0
:0044CC38 E8B38AFBFF              call 004056F0
:0044CC3D 6822CD4400              push 0044CD22
:0044CC42 E869280200              call 0046F4B0
:0044CC47 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CC22(C)
|
:0044CC4A 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044CC4D E89E8AFBFF              call 004056F0
:0044CC52 8B55F0                  mov edx, dword ptr [ebp-10]
:0044CC55 8B426C                  mov eax, dword ptr [edx+6C]
:0044CC58 8945F8                  mov dword ptr [ebp-08], eax
:0044CC5B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044CC5E 8B5170                  mov edx, dword ptr [ecx+70]
:0044CC61 8955F4                  mov dword ptr [ebp-0C], edx
:0044CC64 8B45F0                  mov eax, dword ptr [ebp-10]
:0044CC67 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044CC6A 3B483C                  cmp ecx, dword ptr [eax+3C]
:0044CC6D 7C2D                    jl 0044CC9C
:0044CC6F 8B55F0                  mov edx, dword ptr [ebp-10]
:0044CC72 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044CC75 3B4240                  cmp eax, dword ptr [edx+40]
:0044CC78 7C22                    jl 0044CC9C
:0044CC7A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044CC7D 8B513C                  mov edx, dword ptr [ecx+3C]
:0044CC80 8B45F0                  mov eax, dword ptr [ebp-10]
:0044CC83 035014                  add edx, dword ptr [eax+14]
:0044CC86 3955F8                  cmp dword ptr [ebp-08], edx
:0044CC89 7D11                    jge 0044CC9C
:0044CC8B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044CC8E 8B5140                  mov edx, dword ptr [ecx+40]
:0044CC91 8B45F0                  mov eax, dword ptr [ebp-10]
:0044CC94 035018                  add edx, dword ptr [eax+18]
:0044CC97 3955F4                  cmp dword ptr [ebp-0C], edx
:0044CC9A 7C0A                    jl 0044CCA6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CC6D(C), :0044CC78(C), :0044CC89(C)
|
:0044CC9C C645FCFF                mov [ebp-04], FF
:0044CCA0 C645FDFF                mov [ebp-03], FF
:0044CCA4 EB3A                    jmp 0044CCE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CC9A(C)
|
:0044CCA6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044CCA9 8B45F8                  mov eax, dword ptr [ebp-08]
:0044CCAC 2B413C                  sub eax, dword ptr [ecx+3C]
:0044CCAF 99                      cdq
:0044CCB0 83E20F                  and edx, 0000000F
:0044CCB3 03C2                    add eax, edx
:0044CCB5 C1F804                  sar eax, 04
:0044CCB8 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CCB9 B903000000              mov ecx, 00000003
:0044CCBE F7F9                    idiv ecx
:0044CCC0 8845FC                  mov byte ptr [ebp-04], al
:0044CCC3 8B55F0                  mov edx, dword ptr [ebp-10]
:0044CCC6 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044CCC9 2B4240                  sub eax, dword ptr [edx+40]
:0044CCCC 99                      cdq
:0044CCCD 83E20F                  and edx, 0000000F
:0044CCD0 03C2                    add eax, edx
:0044CCD2 C1F804                  sar eax, 04
:0044CCD5 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CCD6 B903000000              mov ecx, 00000003
:0044CCDB F7F9                    idiv ecx
:0044CCDD 8845FD                  mov byte ptr [ebp-03], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CCA4(U)
|
:0044CCE0 8B55F0                  mov edx, dword ptr [ebp-10]
:0044CCE3 33C0                    xor eax, eax
:0044CCE5 8A4254                  mov al, byte ptr [edx+54]
:0044CCE8 3DFF000000              cmp eax, 000000FF
:0044CCED 7507                    jne 0044CCF6
:0044CCEF C605F0494B00FF          mov byte ptr [004B49F0], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CCED(C)
|
:0044CCF6 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044CCF9 51                      push ecx
:0044CCFA 68F0494B00              push 004B49F0
:0044CCFF E89CA2FEFF              call 00436FA0
:0044CD04 83C408                  add esp, 00000008
:0044CD07 85C0                    test eax, eax
:0044CD09 750E                    jne 0044CD19
:0044CD0B 8D55FC                  lea edx, dword ptr [ebp-04]
:0044CD0E 52                      push edx
:0044CD0F B9F0494B00              mov ecx, 004B49F0
:0044CD14 E8879DFEFF              call 00436AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CD09(C)
|
:0044CD19 B8F0494B00              mov eax, 004B49F0
:0044CD1E 8BE5                    mov esp, ebp
:0044CD20 5D                      pop ebp
:0044CD21 C3                      ret


:0044CD22 55                      push ebp
:0044CD23 8BEC                    mov ebp, esp
:0044CD25 5D                      pop ebp
:0044CD26 C3                      ret



* Referenced by a CALL at Addresses:
|:0044CEF3   , :0044CF6B   , :0044D048   , :0044D2AA   , :0045E225   
|
:0044CD27 55                      push ebp
:0044CD28 8BEC                    mov ebp, esp
:0044CD2A 83EC20                  sub esp, 00000020
:0044CD2D 894DE0                  mov dword ptr [ebp-20], ecx
:0044CD30 33C0                    xor eax, eax
:0044CD32 A0F8494B00              mov al, byte ptr [004B49F8]
:0044CD37 83E001                  and eax, 00000001
:0044CD3A 85C0                    test eax, eax
:0044CD3C 7526                    jne 0044CD64
:0044CD3E 8A0DF8494B00            mov cl, byte ptr [004B49F8]
:0044CD44 80C901                  or cl, 01
:0044CD47 880DF8494B00            mov byte ptr [004B49F8], cl
:0044CD4D B950494B00              mov ecx, 004B4950
:0044CD52 E89989FBFF              call 004056F0
:0044CD57 6897CE4400              push 0044CE97
:0044CD5C E84F270200              call 0046F4B0
:0044CD61 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CD3C(C)
|
:0044CD64 8B55E0                  mov edx, dword ptr [ebp-20]
:0044CD67 8B426C                  mov eax, dword ptr [edx+6C]
:0044CD6A 8945E8                  mov dword ptr [ebp-18], eax
:0044CD6D 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044CD70 8B5170                  mov edx, dword ptr [ecx+70]
:0044CD73 8955E4                  mov dword ptr [ebp-1C], edx
:0044CD76 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0044CD79 E87289FBFF              call 004056F0
:0044CD7E 8D45F0                  lea eax, dword ptr [ebp-10]
:0044CD81 50                      push eax
:0044CD82 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0044CD88 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0044CD89 FF15D8D64B00            Call dword ptr [004BD6D8]
:0044CD8F 8B55E0                  mov edx, dword ptr [ebp-20]
:0044CD92 8B45E8                  mov eax, dword ptr [ebp-18]
:0044CD95 3B423C                  cmp eax, dword ptr [edx+3C]
:0044CD98 7C25                    jl 0044CDBF
:0044CD9A 837DE428                cmp dword ptr [ebp-1C], 00000028
:0044CD9E 7C1F                    jl 0044CDBF
:0044CDA0 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044CDA3 8B513C                  mov edx, dword ptr [ecx+3C]
:0044CDA6 8B45E0                  mov eax, dword ptr [ebp-20]
:0044CDA9 035014                  add edx, dword ptr [eax+14]
:0044CDAC 3955E8                  cmp dword ptr [ebp-18], edx
:0044CDAF 7D0E                    jge 0044CDBF
:0044CDB1 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044CDB4 8B5118                  mov edx, dword ptr [ecx+18]
:0044CDB7 83C228                  add edx, 00000028
:0044CDBA 3955E4                  cmp dword ptr [ebp-1C], edx
:0044CDBD 7C0A                    jl 0044CDC9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CD98(C), :0044CD9E(C), :0044CDAF(C)
|
:0044CDBF C645ECFF                mov [ebp-14], FF
:0044CDC3 C645EDFF                mov [ebp-13], FF
:0044CDC7 EB5D                    jmp 0044CE26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CDBD(C)
|
:0044CDC9 8B45E8                  mov eax, dword ptr [ebp-18]
:0044CDCC 3B45F8                  cmp eax, dword ptr [ebp-08]
:0044CDCF 7D08                    jge 0044CDD9
:0044CDD1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044CDD4 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:0044CDD7 7C0A                    jl 0044CDE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CDCF(C)
|
:0044CDD9 C645ECFF                mov [ebp-14], FF
:0044CDDD C645EDFF                mov [ebp-13], FF
:0044CDE1 EB43                    jmp 0044CE26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CDD7(C)
|
:0044CDE3 8B55E0                  mov edx, dword ptr [ebp-20]
:0044CDE6 8B45E8                  mov eax, dword ptr [ebp-18]
:0044CDE9 2B423C                  sub eax, dword ptr [edx+3C]
:0044CDEC 99                      cdq
:0044CDED 83E20F                  and edx, 0000000F
:0044CDF0 03C2                    add eax, edx
:0044CDF2 C1F804                  sar eax, 04
:0044CDF5 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044CDF8 034104                  add eax, dword ptr [ecx+04]
:0044CDFB 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CDFC B903000000              mov ecx, 00000003
:0044CE01 F7F9                    idiv ecx
:0044CE03 8845EC                  mov byte ptr [ebp-14], al
:0044CE06 8B45E4                  mov eax, dword ptr [ebp-1C]
:0044CE09 83E828                  sub eax, 00000028
:0044CE0C 99                      cdq
:0044CE0D 83E20F                  and edx, 0000000F
:0044CE10 03C2                    add eax, edx
:0044CE12 C1F804                  sar eax, 04
:0044CE15 8B55E0                  mov edx, dword ptr [ebp-20]
:0044CE18 034208                  add eax, dword ptr [edx+08]
:0044CE1B 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044CE1C B903000000              mov ecx, 00000003
:0044CE21 F7F9                    idiv ecx
:0044CE23 8845ED                  mov byte ptr [ebp-13], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CDC7(U), :0044CDE1(U)
|
:0044CE26 8B55E0                  mov edx, dword ptr [ebp-20]
:0044CE29 33C0                    xor eax, eax
:0044CE2B 8A4254                  mov al, byte ptr [edx+54]
:0044CE2E 3DFF000000              cmp eax, 000000FF
:0044CE33 7507                    jne 0044CE3C
:0044CE35 C60550494B00FF          mov byte ptr [004B4950], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CE33(C)
|
:0044CE3C 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0044CE3F 51                      push ecx
:0044CE40 6850494B00              push 004B4950
:0044CE45 E856A1FEFF              call 00436FA0
:0044CE4A 83C408                  add esp, 00000008
:0044CE4D 85C0                    test eax, eax
:0044CE4F 753D                    jne 0044CE8E
:0044CE51 33D2                    xor edx, edx
:0044CE53 8A1550494B00            mov dl, byte ptr [004B4950]
:0044CE59 81FAFF000000            cmp edx, 000000FF
:0044CE5F 7408                    je 0044CE69
:0044CE61 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044CE64 E83B030000              call 0044D1A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CE5F(C)
|
:0044CE69 8D45EC                  lea eax, dword ptr [ebp-14]
:0044CE6C 50                      push eax
:0044CE6D B950494B00              mov ecx, 004B4950
:0044CE72 E8299CFEFF              call 00436AA0
:0044CE77 E8B732FCFF              call 00410133
:0044CE7C 6850494B00              push 004B4950
:0044CE81 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044CE84 E814020000              call 0044D09D
:0044CE89 E8C032FCFF              call 0041014E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CE4F(C)
|
:0044CE8E B850494B00              mov eax, 004B4950
:0044CE93 8BE5                    mov esp, ebp
:0044CE95 5D                      pop ebp
:0044CE96 C3                      ret


:0044CE97 55                      push ebp
:0044CE98 8BEC                    mov ebp, esp
:0044CE9A 5D                      pop ebp
:0044CE9B C3                      ret



* Referenced by a CALL at Addresses:
|:0044111A   , :0044DF3C   , :0044F003   , :0045683E   
|
:0044CE9C 55                      push ebp
:0044CE9D 8BEC                    mov ebp, esp
:0044CE9F 83EC0C                  sub esp, 0000000C
:0044CEA2 894DF4                  mov dword ptr [ebp-0C], ecx
:0044CEA5 33C0                    xor eax, eax
:0044CEA7 A054494B00              mov al, byte ptr [004B4954]
:0044CEAC 83E001                  and eax, 00000001
:0044CEAF 85C0                    test eax, eax
:0044CEB1 7526                    jne 0044CED9
:0044CEB3 8A0D54494B00            mov cl, byte ptr [004B4954]
:0044CEB9 80C901                  or cl, 01
:0044CEBC 880D54494B00            mov byte ptr [004B4954], cl
:0044CEC2 B9F4494B00              mov ecx, 004B49F4
:0044CEC7 E82488FBFF              call 004056F0
:0044CECC 6898D04400              push 0044D098
:0044CED1 E8DA250200              call 0046F4B0
:0044CED6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CEB1(C)
|
:0044CED9 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044CEDC E80F88FBFF              call 004056F0
:0044CEE1 C745F801000000          mov [ebp-08], 00000001
:0044CEE8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CEEB E8E8FCFFFF              call 0044CBD8
:0044CEF0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CEF3 E82FFEFFFF              call 0044CD27
:0044CEF8 50                      push eax
:0044CEF9 B9F4494B00              mov ecx, 004B49F4
:0044CEFE E89D9BFEFF              call 00436AA0
:0044CF03 50                      push eax
:0044CF04 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044CF07 E8949BFEFF              call 00436AA0

* Possible Reference to String Resource ID=00006: ""
                                  |
:0044CF0C 6A06                    push 00000006
:0044CF0E E8A826FEFF              call 0042F5BB
:0044CF13 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CF83(U)
|
:0044CF16 B928B44800              mov ecx, 0048B428
:0044CF1B E82DC9FCFF              call 0041984D
:0044CF20 83F801                  cmp eax, 00000001
:0044CF23 7560                    jne 0044CF85
:0044CF25 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CF28 E8ABFCFFFF              call 0044CBD8
:0044CF2D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CF30 E82C030000              call 0044D261
:0044CF35 85C0                    test eax, eax
:0044CF37 752A                    jne 0044CF63
:0044CF39 B9A83B4B00              mov ecx, 004B3BA8
:0044CF3E E8ED29FDFF              call 0041F930
:0044CF43 85C0                    test eax, eax
:0044CF45 741C                    je 0044CF63

* Possible Reference to String Resource ID=00006: ""
                                  |
:0044CF47 6A06                    push 00000006
:0044CF49 E86D26FEFF              call 0042F5BB
:0044CF4E 83C404                  add esp, 00000004
:0044CF51 B9784E4B00              mov ecx, 004B4E78
:0044CF56 E895A0FEFF              call 00436FF0
:0044CF5B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CF5E E8AEF9FFFF              call 0044C911

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CF37(C), :0044CF45(C)
|
:0044CF63 E8EEA40200              call 00477456
:0044CF68 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CF6B E8B7FDFFFF              call 0044CD27
:0044CF70 50                      push eax
:0044CF71 B9F4494B00              mov ecx, 004B49F4
:0044CF76 E8259BFEFF              call 00436AA0
:0044CF7B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CF7E E8DE020000              call 0044D261
:0044CF83 EB91                    jmp 0044CF16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CF23(C)
|
:0044CF85 8D55FC                  lea edx, dword ptr [ebp-04]
:0044CF88 52                      push edx
:0044CF89 68F4494B00              push 004B49F4
:0044CF8E E80DA0FEFF              call 00436FA0
:0044CF93 83C408                  add esp, 00000008
:0044CF96 85C0                    test eax, eax
:0044CF98 7512                    jne 0044CFAC
:0044CF9A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044CF9D E8C0FBFFFF              call 0044CB62
:0044CFA2 B8F4494B00              mov eax, 004B49F4
:0044CFA7 E9E8000000              jmp 0044D094

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CF98(C)
|
:0044CFAC E83F27FEFF              call 0042F6F0

* Possible Reference to String Resource ID=00006: ""
                                  |
:0044CFB1 6A06                    push 00000006
:0044CFB3 E80326FEFF              call 0042F5BB
:0044CFB8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D075(U)
|
:0044CFBB B928B44800              mov ecx, 0048B428
:0044CFC0 E888C8FCFF              call 0041984D
:0044CFC5 83F801                  cmp eax, 00000001
:0044CFC8 752E                    jne 0044CFF8
:0044CFCA B928B44800              mov ecx, 0048B428
:0044CFCF E879C8FCFF              call 0041984D
:0044CFD4 83F801                  cmp eax, 00000001
:0044CFD7 751F                    jne 0044CFF8
:0044CFD9 33C0                    xor eax, eax
:0044CFDB A0C04F4B00              mov al, byte ptr [004B4FC0]
:0044CFE0 85C0                    test eax, eax
:0044CFE2 7514                    jne 0044CFF8
:0044CFE4 33C9                    xor ecx, ecx
:0044CFE6 8A0DF4494B00            mov cl, byte ptr [004B49F4]
:0044CFEC 81F9FF000000            cmp ecx, 000000FF
:0044CFF2 0F8582000000            jne 0044D07A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CFC8(C), :0044CFD7(C), :0044CFE2(C)
|
:0044CFF8 E859A40200              call 00477456
:0044CFFD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D000 E8D3FBFFFF              call 0044CBD8
:0044D005 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D008 E854020000              call 0044D261
:0044D00D 85C0                    test eax, eax
:0044D00F 7534                    jne 0044D045
:0044D011 B9A83B4B00              mov ecx, 004B3BA8
:0044D016 E81529FDFF              call 0041F930
:0044D01B 85C0                    test eax, eax
:0044D01D 7426                    je 0044D045

* Possible Reference to String Resource ID=00006: ""
                                  |
:0044D01F 6A06                    push 00000006
:0044D021 E89525FEFF              call 0042F5BB
:0044D026 83C404                  add esp, 00000004
:0044D029 E80531FCFF              call 00410133
:0044D02E B9784E4B00              mov ecx, 004B4E78
:0044D033 E8B89FFEFF              call 00436FF0
:0044D038 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D03B E8D1F8FFFF              call 0044C911
:0044D040 E80931FCFF              call 0041014E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D00F(C), :0044D01D(C)
|
:0044D045 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D048 E8DAFCFFFF              call 0044CD27
:0044D04D 50                      push eax
:0044D04E B9F4494B00              mov ecx, 004B49F4
:0044D053 E8489AFEFF              call 00436AA0
:0044D058 B928B44800              mov ecx, 0048B428
:0044D05D E8EBC7FCFF              call 0041984D
:0044D062 83F802                  cmp eax, 00000002
:0044D065 750E                    jne 0044D075
:0044D067 C745F800000000          mov [ebp-08], 00000000
:0044D06E E87D26FEFF              call 0042F6F0
:0044D073 EB05                    jmp 0044D07A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D065(C)
|
:0044D075 E941FFFFFF              jmp 0044CFBB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044CFF2(C), :0044D073(U)
|
:0044D07A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D07D E8E0FAFFFF              call 0044CB62
:0044D082 837DF800                cmp dword ptr [ebp-08], 00000000
:0044D086 7507                    jne 0044D08F
:0044D088 C605F4494B00FF          mov byte ptr [004B49F4], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D086(C)
|
:0044D08F B8F4494B00              mov eax, 004B49F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044CFA7(U)
|
:0044D094 8BE5                    mov esp, ebp
:0044D096 5D                      pop ebp
:0044D097 C3                      ret


:0044D098 55                      push ebp
:0044D099 8BEC                    mov ebp, esp
:0044D09B 5D                      pop ebp
:0044D09C C3                      ret



* Referenced by a CALL at Addresses:
|:0044CE84   , :0044DDA3   , :0045FDF3   
|
:0044D09D 55                      push ebp
:0044D09E 8BEC                    mov ebp, esp
:0044D0A0 83EC14                  sub esp, 00000014
:0044D0A3 894DEC                  mov dword ptr [ebp-14], ecx
:0044D0A6 8B4508                  mov eax, dword ptr [ebp+08]
:0044D0A9 33C9                    xor ecx, ecx
:0044D0AB 8A08                    mov cl, byte ptr [eax]
:0044D0AD 6BC903                  imul ecx, 00000003
:0044D0B0 8B55EC                  mov edx, dword ptr [ebp-14]
:0044D0B3 2B4A04                  sub ecx, dword ptr [edx+04]
:0044D0B6 894DFC                  mov dword ptr [ebp-04], ecx
:0044D0B9 8B4508                  mov eax, dword ptr [ebp+08]
:0044D0BC 33C9                    xor ecx, ecx
:0044D0BE 8A4801                  mov cl, byte ptr [eax+01]
:0044D0C1 6BC903                  imul ecx, 00000003
:0044D0C4 83C102                  add ecx, 00000002
:0044D0C7 8B55EC                  mov edx, dword ptr [ebp-14]
:0044D0CA 2B4A08                  sub ecx, dword ptr [edx+08]
:0044D0CD 894DF8                  mov dword ptr [ebp-08], ecx
:0044D0D0 837DFC00                cmp dword ptr [ebp-04], 00000000
:0044D0D4 0F82C4000000            jb 0044D19E
:0044D0DA 8B45EC                  mov eax, dword ptr [ebp-14]
:0044D0DD 8B4814                  mov ecx, dword ptr [eax+14]
:0044D0E0 C1E904                  shr ecx, 04
:0044D0E3 394DFC                  cmp dword ptr [ebp-04], ecx
:0044D0E6 0F83B2000000            jnb 0044D19E
:0044D0EC 837DF800                cmp dword ptr [ebp-08], 00000000
:0044D0F0 0F82A8000000            jb 0044D19E
:0044D0F6 8B55EC                  mov edx, dword ptr [ebp-14]
:0044D0F9 8B4218                  mov eax, dword ptr [edx+18]
:0044D0FC 83C00F                  add eax, 0000000F
:0044D0FF C1E804                  shr eax, 04
:0044D102 3945F8                  cmp dword ptr [ebp-08], eax
:0044D105 0F8393000000            jnb 0044D19E
:0044D10B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D10E 8A55FC                  mov dl, byte ptr [ebp-04]
:0044D111 885154                  mov byte ptr [ecx+54], dl
:0044D114 8B45EC                  mov eax, dword ptr [ebp-14]
:0044D117 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044D11A 884855                  mov byte ptr [eax+55], cl

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D11D 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D11F 6A03                    push 00000003
:0044D121 8B55F8                  mov edx, dword ptr [ebp-08]
:0044D124 83EA02                  sub edx, 00000002
:0044D127 52                      push edx
:0044D128 8A45FC                  mov al, byte ptr [ebp-04]
:0044D12B 50                      push eax
:0044D12C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D12F E814F8FFFF              call 0044C948

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044D134 6A04                    push 00000004
:0044D136 6A00                    push 00000000
:0044D138 6A00                    push 00000000
:0044D13A B9881C4B00              mov ecx, 004B1C88
:0044D13F E84CBE0200              call 00478F90
:0044D144 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D147 33D2                    xor edx, edx
:0044D149 8A11                    mov dl, byte ptr [ecx]
:0044D14B 8D8410004B0000          lea eax, dword ptr [eax+edx+00004B00]
:0044D152 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D155 33D2                    xor edx, edx
:0044D157 8A5101                  mov dl, byte ptr [ecx+01]
:0044D15A 33C9                    xor ecx, ecx
:0044D15C 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0044D162 0FAFD1                  imul edx, ecx
:0044D165 8A1410                  mov dl, byte ptr [eax+edx]
:0044D168 8855F0                  mov byte ptr [ebp-10], dl
:0044D16B 8A45F0                  mov al, byte ptr [ebp-10]
:0044D16E 50                      push eax
:0044D16F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D172 E878000000              call 0044D1EF
:0044D177 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D17A 51                      push ecx
:0044D17B E8D8260000              call 0044F858
:0044D180 83C404                  add esp, 00000004
:0044D183 25FF000000              and eax, 000000FF
:0044D188 8B148548E94700          mov edx, dword ptr [4*eax+0047E948]
:0044D18F 8955F4                  mov dword ptr [ebp-0C], edx
:0044D192 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D195 50                      push eax
:0044D196 E899D80100              call 0046AA34
:0044D19B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D0D4(C), :0044D0E6(C), :0044D0F0(C), :0044D105(C)
|
:0044D19E 8BE5                    mov esp, ebp
:0044D1A0 5D                      pop ebp
:0044D1A1 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0044112D   , :004411D0   , :0044CE64   , :0044D9DE   , :0044DD70   
|:0044E17C   , :0044E68B   , :0044F016   , :0044F0C5   , :0045E644   
|:0045E77F   , :0045E7AE   , :0045FE1A   , :00467E27   , :0046E4B6   
|:0046E6BD   
|
:0044D1A4 55                      push ebp
:0044D1A5 8BEC                    mov ebp, esp
:0044D1A7 83EC0C                  sub esp, 0000000C
:0044D1AA 894DF4                  mov dword ptr [ebp-0C], ecx
:0044D1AD 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D1B0 8A4854                  mov cl, byte ptr [eax+54]
:0044D1B3 884DFC                  mov byte ptr [ebp-04], cl
:0044D1B6 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D1B9 33C0                    xor eax, eax
:0044D1BB 8A4255                  mov al, byte ptr [edx+55]
:0044D1BE 83E802                  sub eax, 00000002
:0044D1C1 8845F8                  mov byte ptr [ebp-08], al
:0044D1C4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D1C7 C64154FF                mov [ecx+54], FF
:0044D1CB 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044D1CE C64255FF                mov [edx+55], FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D1D2 6A03                    push 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D1D4 6A03                    push 00000003
:0044D1D6 8A45F8                  mov al, byte ptr [ebp-08]
:0044D1D9 50                      push eax
:0044D1DA 8A4DFC                  mov cl, byte ptr [ebp-04]
:0044D1DD 51                      push ecx
:0044D1DE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D1E1 E862F7FFFF              call 0044C948
:0044D1E6 E87DD80100              call 0046AA68
:0044D1EB 8BE5                    mov esp, ebp
:0044D1ED 5D                      pop ebp
:0044D1EE C3                      ret



* Referenced by a CALL at Addresses:
|:004354F0   , :0044D172   
|
:0044D1EF 55                      push ebp
:0044D1F0 8BEC                    mov ebp, esp
:0044D1F2 83EC08                  sub esp, 00000008
:0044D1F5 894DF8                  mov dword ptr [ebp-08], ecx
:0044D1F8 8B4508                  mov eax, dword ptr [ebp+08]
:0044D1FB 25FF000000              and eax, 000000FF
:0044D200 3DFF000000              cmp eax, 000000FF
:0044D205 7454                    je 0044D25B
:0044D207 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D20A 81E1FF000000            and ecx, 000000FF
:0044D210 83F95A                  cmp ecx, 0000005A
:0044D213 7D46                    jge 0044D25B
:0044D215 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D218 81E1FF000000            and ecx, 000000FF
:0044D21E 6BC924                  imul ecx, 00000024
:0044D221 81C1B83B4B00            add ecx, 004B3BB8
:0044D227 E82597FEFF              call 00436951
:0044D22C 85C0                    test eax, eax
:0044D22E 742B                    je 0044D25B
:0044D230 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D233 81E1FF000000            and ecx, 000000FF
:0044D239 6BC924                  imul ecx, 00000024
:0044D23C 81C1B83B4B00            add ecx, 004B3BB8
:0044D242 E8A997FEFF              call 004369F0
:0044D247 8945FC                  mov dword ptr [ebp-04], eax
:0044D24A E819D80100              call 0046AA68
:0044D24F 8B55FC                  mov edx, dword ptr [ebp-04]
:0044D252 52                      push edx
:0044D253 E8BAD70100              call 0046AA12
:0044D258 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D205(C), :0044D213(C), :0044D22E(C)
|
:0044D25B 8BE5                    mov esp, ebp
:0044D25D 5D                      pop ebp
:0044D25E C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0044CF30   , :0044CF7E   , :0044D008   , :0045E1E1   
|
:0044D261 55                      push ebp
:0044D262 8BEC                    mov ebp, esp
:0044D264 83EC40                  sub esp, 00000040
:0044D267 56                      push esi
:0044D268 57                      push edi
:0044D269 894DC4                  mov dword ptr [ebp-3C], ecx
:0044D26C 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D26F 8B486C                  mov ecx, dword ptr [eax+6C]
:0044D272 894DD0                  mov dword ptr [ebp-30], ecx
:0044D275 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D278 8B4270                  mov eax, dword ptr [edx+70]
:0044D27B 8945C8                  mov dword ptr [ebp-38], eax
:0044D27E C745D400000000          mov [ebp-2C], 00000000
:0044D285 C745CC00000000          mov [ebp-34], 00000000
:0044D28C C745E400000000          mov [ebp-1C], 00000000
:0044D293 C645E800                mov [ebp-18], 00
:0044D297 C645E000                mov [ebp-20], 00
:0044D29B C645DC00                mov [ebp-24], 00
:0044D29F 8D4DD8                  lea ecx, dword ptr [ebp-28]
:0044D2A2 E84984FBFF              call 004056F0
:0044D2A7 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D2AA E878FAFFFF              call 0044CD27
:0044D2AF 50                      push eax
:0044D2B0 8D4DD8                  lea ecx, dword ptr [ebp-28]
:0044D2B3 E8E897FEFF              call 00436AA0
:0044D2B8 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0044D2BB 51                      push ecx
:0044D2BC 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0044D2C2 52                      push edx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0044D2C3 FF15D8D64B00            Call dword ptr [004BD6D8]
:0044D2C9 E874160200              call 0046E942
:0044D2CE 85C0                    test eax, eax
:0044D2D0 7414                    je 0044D2E6
:0044D2D2 6A17                    push 00000017
:0044D2D4 E8B11CFEFF              call 0042EF8A
:0044D2D9 83C404                  add esp, 00000004
:0044D2DC B801000000              mov eax, 00000001
:0044D2E1 E99C040000              jmp 0044D782

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D2D0(C)
|
:0044D2E6 8B45D0                  mov eax, dword ptr [ebp-30]
:0044D2E9 3B45F0                  cmp eax, dword ptr [ebp-10]
:0044D2EC 7E28                    jle 0044D316
:0044D2EE 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0044D2F1 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:0044D2F4 7D20                    jge 0044D316
:0044D2F6 837DC804                cmp dword ptr [ebp-38], 00000004
:0044D2FA 7C1A                    jl 0044D316
:0044D2FC 837DC828                cmp dword ptr [ebp-38], 00000028
:0044D300 7D14                    jge 0044D316
:0044D302 6A01                    push 00000001
:0044D304 E8811CFEFF              call 0042EF8A
:0044D309 83C404                  add esp, 00000004
:0044D30C B801000000              mov eax, 00000001
:0044D311 E96C040000              jmp 0044D782

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D2EC(C), :0044D2F4(C), :0044D2FA(C), :0044D300(C)
|
:0044D316 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D319 8B45D0                  mov eax, dword ptr [ebp-30]
:0044D31C 3B423C                  cmp eax, dword ptr [edx+3C]
:0044D31F 7C40                    jl 0044D361
:0044D321 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D324 8B513C                  mov edx, dword ptr [ecx+3C]
:0044D327 83C230                  add edx, 00000030
:0044D32A 3955D0                  cmp dword ptr [ebp-30], edx
:0044D32D 7D32                    jge 0044D361
:0044D32F 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D332 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0044D335 3B4840                  cmp ecx, dword ptr [eax+40]
:0044D338 7C27                    jl 0044D361
:0044D33A 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D33D 8B4240                  mov eax, dword ptr [edx+40]
:0044D340 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D343 034114                  add eax, dword ptr [ecx+14]
:0044D346 3945C8                  cmp dword ptr [ebp-38], eax
:0044D349 7D16                    jge 0044D361
:0044D34B 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D34E 8B4204                  mov eax, dword ptr [edx+04]
:0044D351 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D352 B903000000              mov ecx, 00000003
:0044D357 F7F9                    idiv ecx
:0044D359 85C0                    test eax, eax
:0044D35B 7404                    je 0044D361
:0044D35D C645E006                mov [ebp-20], 06

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D31F(C), :0044D32D(C), :0044D338(C), :0044D349(C), :0044D35B(C)
|
:0044D361 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D364 8B423C                  mov eax, dword ptr [edx+3C]
:0044D367 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D36A 8B5114                  mov edx, dword ptr [ecx+14]
:0044D36D 8D4410D0                lea eax, dword ptr [eax+edx-30]
:0044D371 3945D0                  cmp dword ptr [ebp-30], eax
:0044D374 7C5F                    jl 0044D3D5
:0044D376 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D379 8B513C                  mov edx, dword ptr [ecx+3C]
:0044D37C 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D37F 035014                  add edx, dword ptr [eax+14]
:0044D382 3955D0                  cmp dword ptr [ebp-30], edx
:0044D385 7D4E                    jge 0044D3D5
:0044D387 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D38A 8B55C8                  mov edx, dword ptr [ebp-38]
:0044D38D 3B5140                  cmp edx, dword ptr [ecx+40]
:0044D390 7C43                    jl 0044D3D5
:0044D392 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D395 8B4840                  mov ecx, dword ptr [eax+40]
:0044D398 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D39B 034A18                  add ecx, dword ptr [edx+18]
:0044D39E 394DC8                  cmp dword ptr [ebp-38], ecx
:0044D3A1 7D32                    jge 0044D3D5
:0044D3A3 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D3A6 8B4004                  mov eax, dword ptr [eax+04]
:0044D3A9 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D3AA B903000000              mov ecx, 00000003
:0044D3AF F7F9                    idiv ecx
:0044D3B1 8BC8                    mov ecx, eax
:0044D3B3 33D2                    xor edx, edx
:0044D3B5 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044D3BB 8BF2                    mov esi, edx
:0044D3BD 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D3C0 8B4014                  mov eax, dword ptr [eax+14]
:0044D3C3 99                      cdq
:0044D3C4 BF30000000              mov edi, 00000030
:0044D3C9 F7FF                    idiv edi
:0044D3CB 2BF0                    sub esi, eax
:0044D3CD 3BCE                    cmp ecx, esi
:0044D3CF 7404                    je 0044D3D5
:0044D3D1 C645E002                mov [ebp-20], 02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D374(C), :0044D385(C), :0044D390(C), :0044D3A1(C), :0044D3CF(C)
|
:0044D3D5 837DC828                cmp dword ptr [ebp-38], 00000028
:0044D3D9 7C38                    jl 0044D413
:0044D3DB 837DC858                cmp dword ptr [ebp-38], 00000058
:0044D3DF 7D32                    jge 0044D413
:0044D3E1 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D3E4 8B55D0                  mov edx, dword ptr [ebp-30]
:0044D3E7 3B513C                  cmp edx, dword ptr [ecx+3C]
:0044D3EA 7C27                    jl 0044D413
:0044D3EC 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D3EF 8B483C                  mov ecx, dword ptr [eax+3C]
:0044D3F2 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D3F5 034A14                  add ecx, dword ptr [edx+14]
:0044D3F8 394DD0                  cmp dword ptr [ebp-30], ecx
:0044D3FB 7D16                    jge 0044D413
:0044D3FD 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D400 8B4008                  mov eax, dword ptr [eax+08]
:0044D403 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D404 B903000000              mov ecx, 00000003
:0044D409 F7F9                    idiv ecx
:0044D40B 85C0                    test eax, eax
:0044D40D 7404                    je 0044D413
:0044D40F C645DC04                mov [ebp-24], 04

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D3D9(C), :0044D3DF(C), :0044D3EA(C), :0044D3FB(C), :0044D40D(C)
|
:0044D413 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D416 8B4218                  mov eax, dword ptr [edx+18]
:0044D419 83E801                  sub eax, 00000001
:0044D41C 99                      cdq
:0044D41D B930000000              mov ecx, 00000030
:0044D422 F7F9                    idiv ecx
:0044D424 6BC030                  imul eax, 00000030
:0044D427 83C028                  add eax, 00000028
:0044D42A 3945C8                  cmp dword ptr [ebp-38], eax
:0044D42D 7C5F                    jl 0044D48E
:0044D42F 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D432 8B4218                  mov eax, dword ptr [edx+18]
:0044D435 83C028                  add eax, 00000028
:0044D438 3945C8                  cmp dword ptr [ebp-38], eax
:0044D43B 7D51                    jge 0044D48E
:0044D43D 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D440 8B55D0                  mov edx, dword ptr [ebp-30]
:0044D443 3B513C                  cmp edx, dword ptr [ecx+3C]
:0044D446 7C46                    jl 0044D48E
:0044D448 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D44B 8B483C                  mov ecx, dword ptr [eax+3C]
:0044D44E 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D451 034A14                  add ecx, dword ptr [edx+14]
:0044D454 394DD0                  cmp dword ptr [ebp-30], ecx
:0044D457 7D35                    jge 0044D48E
:0044D459 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D45C 8B4008                  mov eax, dword ptr [eax+08]
:0044D45F 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D460 B903000000              mov ecx, 00000003
:0044D465 F7F9                    idiv ecx
:0044D467 8BC8                    mov ecx, eax
:0044D469 33D2                    xor edx, edx
:0044D46B 8A15C54E4B00            mov dl, byte ptr [004B4EC5]
:0044D471 8BF2                    mov esi, edx
:0044D473 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D476 8B4018                  mov eax, dword ptr [eax+18]
:0044D479 83C02F                  add eax, 0000002F
:0044D47C 99                      cdq
:0044D47D BF30000000              mov edi, 00000030
:0044D482 F7FF                    idiv edi
:0044D484 2BF0                    sub esi, eax
:0044D486 3BCE                    cmp ecx, esi
:0044D488 7404                    je 0044D48E
:0044D48A C645DC08                mov [ebp-24], 08

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D42D(C), :0044D43B(C), :0044D446(C), :0044D457(C), :0044D488(C)
|
:0044D48E 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0044D491 81E1FF000000            and ecx, 000000FF
:0044D497 85C9                    test ecx, ecx
:0044D499 7508                    jne 0044D4A3
:0044D49B 8A55DC                  mov dl, byte ptr [ebp-24]
:0044D49E 8855E8                  mov byte ptr [ebp-18], dl
:0044D4A1 EB50                    jmp 0044D4F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D499(C)
|
:0044D4A3 8B45DC                  mov eax, dword ptr [ebp-24]
:0044D4A6 25FF000000              and eax, 000000FF
:0044D4AB 85C0                    test eax, eax
:0044D4AD 7508                    jne 0044D4B7
:0044D4AF 8A4DE0                  mov cl, byte ptr [ebp-20]
:0044D4B2 884DE8                  mov byte ptr [ebp-18], cl
:0044D4B5 EB3C                    jmp 0044D4F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D4AD(C)
|
:0044D4B7 8B55DC                  mov edx, dword ptr [ebp-24]
:0044D4BA 81E2FF000000            and edx, 000000FF
:0044D4C0 83FA08                  cmp edx, 00000008
:0044D4C3 7513                    jne 0044D4D8
:0044D4C5 8B45E0                  mov eax, dword ptr [ebp-20]
:0044D4C8 25FF000000              and eax, 000000FF
:0044D4CD 83F802                  cmp eax, 00000002
:0044D4D0 7506                    jne 0044D4D8
:0044D4D2 C645E809                mov [ebp-18], 09
:0044D4D6 EB1B                    jmp 0044D4F3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D4C3(C), :0044D4D0(C)
|
:0044D4D8 8B45E0                  mov eax, dword ptr [ebp-20]
:0044D4DB 25FF000000              and eax, 000000FF
:0044D4E0 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044D4E3 81E1FF000000            and ecx, 000000FF
:0044D4E9 03C1                    add eax, ecx
:0044D4EB 99                      cdq
:0044D4EC 2BC2                    sub eax, edx
:0044D4EE D1F8                    sar eax, 1
:0044D4F0 8845E8                  mov byte ptr [ebp-18], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D4A1(U), :0044D4B5(U), :0044D4D6(U)
|
:0044D4F3 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D4F6 33C0                    xor eax, eax
:0044D4F8 8A4261                  mov al, byte ptr [edx+61]
:0044D4FB 85C0                    test eax, eax
:0044D4FD 0F8487000000            je 0044D58A
:0044D503 8D4DD8                  lea ecx, dword ptr [ebp-28]
:0044D506 51                      push ecx
:0044D507 E8D0220000              call 0044F7DC
:0044D50C 83C404                  add esp, 00000004
:0044D50F 25FF000000              and eax, 000000FF
:0044D514 3DFF000000              cmp eax, 000000FF
:0044D519 746F                    je 0044D58A
:0044D51B 668B55D8                mov dx, word ptr [ebp-28]
:0044D51F 52                      push edx
:0044D520 E863020000              call 0044D788
:0044D525 83C404                  add esp, 00000004
:0044D528 25FF000000              and eax, 000000FF
:0044D52D 85C0                    test eax, eax
:0044D52F 7459                    je 0044D58A
:0044D531 8B45E8                  mov eax, dword ptr [ebp-18]
:0044D534 25FF000000              and eax, 000000FF
:0044D539 83F802                  cmp eax, 00000002
:0044D53C 7C0E                    jl 0044D54C
:0044D53E 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044D541 81E1FF000000            and ecx, 000000FF
:0044D547 83F909                  cmp ecx, 00000009
:0044D54A 7E3E                    jle 0044D58A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D53C(C)
|
:0044D54C 8D55D8                  lea edx, dword ptr [ebp-28]
:0044D54F 52                      push edx
:0044D550 E887220000              call 0044F7DC
:0044D555 83C404                  add esp, 00000004
:0044D558 8AC8                    mov cl, al
:0044D55A 81E1FF000000            and ecx, 000000FF
:0044D560 6BC924                  imul ecx, 00000024
:0044D563 81C1B83B4B00            add ecx, 004B3BB8
:0044D569 E8A2F3FBFF              call 0040C910
:0044D56E 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D571 3B4174                  cmp eax, dword ptr [ecx+74]
:0044D574 7514                    jne 0044D58A
:0044D576 668B55D8                mov dx, word ptr [ebp-28]
:0044D57A 52                      push edx
:0044D57B 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D57E E8C6120000              call 0044E849
:0044D583 33C0                    xor eax, eax
:0044D585 E9F8010000              jmp 0044D782

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D4FD(C), :0044D519(C), :0044D52F(C), :0044D54A(C), :0044D574(C)
|
:0044D58A 8B45E8                  mov eax, dword ptr [ebp-18]
:0044D58D 25FF000000              and eax, 000000FF
:0044D592 50                      push eax
:0044D593 E8F219FEFF              call 0042EF8A
:0044D598 83C404                  add esp, 00000004
:0044D59B 8A4DE8                  mov cl, byte ptr [ebp-18]
:0044D59E 880DC04F4B00            mov byte ptr [004B4FC0], cl
:0044D5A4 B978294B00              mov ecx, 004B2978
:0044D5A9 E882EB0000              call 0045C130
:0044D5AE 25FF000000              and eax, 000000FF
:0044D5B3 85C0                    test eax, eax
:0044D5B5 7D09                    jge 0044D5C0
:0044D5B7 C745C000000000          mov [ebp-40], 00000000
:0044D5BE EB12                    jmp 0044D5D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D5B5(C)
|
:0044D5C0 B978294B00              mov ecx, 004B2978
:0044D5C5 E866EB0000              call 0045C130
:0044D5CA 25FF000000              and eax, 000000FF
:0044D5CF 8945C0                  mov dword ptr [ebp-40], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D5BE(U)
|
:0044D5D2 8A55C0                  mov dl, byte ptr [ebp-40]
:0044D5D5 8855EC                  mov byte ptr [ebp-14], dl
:0044D5D8 8B45EC                  mov eax, dword ptr [ebp-14]
:0044D5DB 25FF000000              and eax, 000000FF
:0044D5E0 3DFF000000              cmp eax, 000000FF
:0044D5E5 0F8494010000            je 0044D77F
:0044D5EB B928B44800              mov ecx, 0048B428
:0044D5F0 E858C2FCFF              call 0041984D
:0044D5F5 83F801                  cmp eax, 00000001
:0044D5F8 0F8581010000            jne 0044D77F
:0044D5FE 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D601 8B5104                  mov edx, dword ptr [ecx+04]
:0044D604 8955D4                  mov dword ptr [ebp-2C], edx
:0044D607 8B45C4                  mov eax, dword ptr [ebp-3C]
:0044D60A 8B4808                  mov ecx, dword ptr [eax+08]
:0044D60D 894DCC                  mov dword ptr [ebp-34], ecx
:0044D610 8B55E8                  mov edx, dword ptr [ebp-18]
:0044D613 81E2FF000000            and edx, 000000FF
:0044D619 85D2                    test edx, edx
:0044D61B 0F842D010000            je 0044D74E
:0044D621 8B45E0                  mov eax, dword ptr [ebp-20]
:0044D624 25FF000000              and eax, 000000FF
:0044D629 83F802                  cmp eax, 00000002
:0044D62C 7558                    jne 0044D686
:0044D62E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D631 81E1FF000000            and ecx, 000000FF
:0044D637 6BC903                  imul ecx, 00000003
:0044D63A 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044D63D 03D1                    add edx, ecx
:0044D63F 8955D4                  mov dword ptr [ebp-2C], edx
:0044D642 33C0                    xor eax, eax
:0044D644 A0C44E4B00              mov al, byte ptr [004B4EC4]
:0044D649 8BC8                    mov ecx, eax
:0044D64B 6BC903                  imul ecx, 00000003
:0044D64E 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D651 8B4214                  mov eax, dword ptr [edx+14]
:0044D654 99                      cdq
:0044D655 83E20F                  and edx, 0000000F
:0044D658 03C2                    add eax, edx
:0044D65A C1F804                  sar eax, 04
:0044D65D 2BC8                    sub ecx, eax
:0044D65F 394DD4                  cmp dword ptr [ebp-2C], ecx
:0044D662 7E20                    jle 0044D684
:0044D664 33C0                    xor eax, eax
:0044D666 A0C44E4B00              mov al, byte ptr [004B4EC4]
:0044D66B 8BC8                    mov ecx, eax
:0044D66D 6BC903                  imul ecx, 00000003
:0044D670 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D673 8B4214                  mov eax, dword ptr [edx+14]
:0044D676 99                      cdq
:0044D677 83E20F                  and edx, 0000000F
:0044D67A 03C2                    add eax, edx
:0044D67C C1F804                  sar eax, 04
:0044D67F 2BC8                    sub ecx, eax
:0044D681 894DD4                  mov dword ptr [ebp-2C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D662(C)
|
:0044D684 EB2E                    jmp 0044D6B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D62C(C)
|
:0044D686 8B45E0                  mov eax, dword ptr [ebp-20]
:0044D689 25FF000000              and eax, 000000FF
:0044D68E 83F806                  cmp eax, 00000006
:0044D691 7521                    jne 0044D6B4
:0044D693 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D696 81E1FF000000            and ecx, 000000FF
:0044D69C 6BC903                  imul ecx, 00000003
:0044D69F 8B55D4                  mov edx, dword ptr [ebp-2C]
:0044D6A2 2BD1                    sub edx, ecx
:0044D6A4 8955D4                  mov dword ptr [ebp-2C], edx
:0044D6A7 837DD400                cmp dword ptr [ebp-2C], 00000000
:0044D6AB 7D07                    jge 0044D6B4
:0044D6AD C745D400000000          mov [ebp-2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D684(U), :0044D691(C), :0044D6AB(C)
|
:0044D6B4 8B45DC                  mov eax, dword ptr [ebp-24]
:0044D6B7 25FF000000              and eax, 000000FF
:0044D6BC 83F808                  cmp eax, 00000008
:0044D6BF 7558                    jne 0044D719
:0044D6C1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D6C4 81E1FF000000            and ecx, 000000FF
:0044D6CA 6BC903                  imul ecx, 00000003
:0044D6CD 8B55CC                  mov edx, dword ptr [ebp-34]
:0044D6D0 03D1                    add edx, ecx
:0044D6D2 8955CC                  mov dword ptr [ebp-34], edx
:0044D6D5 33C0                    xor eax, eax
:0044D6D7 A0C54E4B00              mov al, byte ptr [004B4EC5]
:0044D6DC 8BC8                    mov ecx, eax
:0044D6DE 6BC903                  imul ecx, 00000003
:0044D6E1 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D6E4 8B4218                  mov eax, dword ptr [edx+18]
:0044D6E7 99                      cdq
:0044D6E8 83E20F                  and edx, 0000000F
:0044D6EB 03C2                    add eax, edx
:0044D6ED C1F804                  sar eax, 04
:0044D6F0 2BC8                    sub ecx, eax
:0044D6F2 394DCC                  cmp dword ptr [ebp-34], ecx
:0044D6F5 7E20                    jle 0044D717
:0044D6F7 33C0                    xor eax, eax
:0044D6F9 A0C54E4B00              mov al, byte ptr [004B4EC5]
:0044D6FE 8BC8                    mov ecx, eax
:0044D700 6BC903                  imul ecx, 00000003
:0044D703 8B55C4                  mov edx, dword ptr [ebp-3C]
:0044D706 8B4218                  mov eax, dword ptr [edx+18]
:0044D709 99                      cdq
:0044D70A 83E20F                  and edx, 0000000F
:0044D70D 03C2                    add eax, edx
:0044D70F C1F804                  sar eax, 04
:0044D712 2BC8                    sub ecx, eax
:0044D714 894DCC                  mov dword ptr [ebp-34], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D6F5(C)
|
:0044D717 EB2E                    jmp 0044D747

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D6BF(C)
|
:0044D719 8B45DC                  mov eax, dword ptr [ebp-24]
:0044D71C 25FF000000              and eax, 000000FF
:0044D721 83F804                  cmp eax, 00000004
:0044D724 7521                    jne 0044D747
:0044D726 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D729 81E1FF000000            and ecx, 000000FF
:0044D72F 6BC903                  imul ecx, 00000003
:0044D732 8B55CC                  mov edx, dword ptr [ebp-34]
:0044D735 2BD1                    sub edx, ecx
:0044D737 8955CC                  mov dword ptr [ebp-34], edx
:0044D73A 837DCC00                cmp dword ptr [ebp-34], 00000000
:0044D73E 7D07                    jge 0044D747
:0044D740 C745CC00000000          mov [ebp-34], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D717(U), :0044D724(C), :0044D73E(C)
|
:0044D747 C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D61B(C)
|
:0044D74E 837DE400                cmp dword ptr [ebp-1C], 00000000
:0044D752 742B                    je 0044D77F

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044D754 6A02                    push 00000002
:0044D756 B9A83B4B00              mov ecx, 004B3BA8
:0044D75B E8B021FDFF              call 0041F910
:0044D760 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D763 E8FAF3FFFF              call 0044CB62
:0044D768 6A00                    push 00000000
:0044D76A 8B45CC                  mov eax, dword ptr [ebp-34]
:0044D76D 50                      push eax
:0044D76E 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044D771 51                      push ecx
:0044D772 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0044D775 E860000000              call 0044D7DA
:0044D77A E8511EFEFF              call 0042F5D0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D5E5(C), :0044D5F8(C), :0044D752(C)
|
:0044D77F 8B45E4                  mov eax, dword ptr [ebp-1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D2E1(U), :0044D311(U), :0044D585(U)
|
:0044D782 5F                      pop edi
:0044D783 5E                      pop esi
:0044D784 8BE5                    mov esp, ebp
:0044D786 5D                      pop ebp
:0044D787 C3                      ret



* Referenced by a CALL at Address:
|:0044D520   
|
:0044D788 55                      push ebp
:0044D789 8BEC                    mov ebp, esp
:0044D78B 51                      push ecx
:0044D78C C645FC00                mov [ebp-04], 00

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044D790 6A04                    push 00000004
:0044D792 6A00                    push 00000000
:0044D794 6800960000              push 00009600
:0044D799 B9881C4B00              mov ecx, 004B1C88
:0044D79E E8EDB70200              call 00478F90
:0044D7A3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D7A6 81E1FF000000            and ecx, 000000FF
:0044D7AC 03C1                    add eax, ecx
:0044D7AE 8B5509                  mov edx, dword ptr [ebp+09]
:0044D7B1 81E2FF000000            and edx, 000000FF
:0044D7B7 33C9                    xor ecx, ecx
:0044D7B9 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0044D7BF 0FAFD1                  imul edx, ecx
:0044D7C2 33C9                    xor ecx, ecx
:0044D7C4 8A0C10                  mov cl, byte ptr [eax+edx]
:0044D7C7 81F9FF000000            cmp ecx, 000000FF
:0044D7CD 7404                    je 0044D7D3
:0044D7CF C645FC01                mov [ebp-04], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D7CD(C)
|
:0044D7D3 8A45FC                  mov al, byte ptr [ebp-04]
:0044D7D6 8BE5                    mov esp, ebp
:0044D7D8 5D                      pop ebp
:0044D7D9 C3                      ret



* Referenced by a CALL at Addresses:
|:0044D775   , :0044DADD   , :0046E44A   
|
:0044D7DA 55                      push ebp
:0044D7DB 8BEC                    mov ebp, esp
:0044D7DD 83EC14                  sub esp, 00000014
:0044D7E0 894DEC                  mov dword ptr [ebp-14], ecx
:0044D7E3 8B4508                  mov eax, dword ptr [ebp+08]
:0044D7E6 8945F4                  mov dword ptr [ebp-0C], eax
:0044D7E9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044D7EC 894DF0                  mov dword ptr [ebp-10], ecx
:0044D7EF 8B5510                  mov edx, dword ptr [ebp+10]
:0044D7F2 81E2FF000000            and edx, 000000FF
:0044D7F8 83FA01                  cmp edx, 00000001
:0044D7FB 0F85DE000000            jne 0044D8DF
:0044D801 8B45EC                  mov eax, dword ptr [ebp-14]
:0044D804 8B4014                  mov eax, dword ptr [eax+14]
:0044D807 99                      cdq
:0044D808 83E20F                  and edx, 0000000F
:0044D80B 03C2                    add eax, edx
:0044D80D C1F804                  sar eax, 04
:0044D810 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044D813 2BC8                    sub ecx, eax
:0044D815 894DF4                  mov dword ptr [ebp-0C], ecx
:0044D818 8B55EC                  mov edx, dword ptr [ebp-14]
:0044D81B 8B4218                  mov eax, dword ptr [edx+18]
:0044D81E 99                      cdq
:0044D81F 83E20F                  and edx, 0000000F
:0044D822 03C2                    add eax, edx
:0044D824 C1F804                  sar eax, 04
:0044D827 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044D82A 2BC8                    sub ecx, eax
:0044D82C 894DF0                  mov dword ptr [ebp-10], ecx
:0044D82F 837DF400                cmp dword ptr [ebp-0C], 00000000
:0044D833 7D07                    jge 0044D83C
:0044D835 C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D833(C)
|
:0044D83C 837DF000                cmp dword ptr [ebp-10], 00000000
:0044D840 7D07                    jge 0044D849
:0044D842 C745F000000000          mov [ebp-10], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D840(C)
|
:0044D849 8B55EC                  mov edx, dword ptr [ebp-14]
:0044D84C 8B4214                  mov eax, dword ptr [edx+14]
:0044D84F 99                      cdq
:0044D850 83E20F                  and edx, 0000000F
:0044D853 03C2                    add eax, edx
:0044D855 C1F804                  sar eax, 04
:0044D858 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D85B 03C8                    add ecx, eax
:0044D85D 33D2                    xor edx, edx
:0044D85F 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044D865 6BD203                  imul edx, 00000003
:0044D868 3BCA                    cmp ecx, edx
:0044D86A 7E29                    jle 0044D895
:0044D86C 8B45EC                  mov eax, dword ptr [ebp-14]
:0044D86F 8B4014                  mov eax, dword ptr [eax+14]
:0044D872 99                      cdq
:0044D873 83E20F                  and edx, 0000000F
:0044D876 03C2                    add eax, edx
:0044D878 C1F804                  sar eax, 04
:0044D87B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044D87E 03C8                    add ecx, eax
:0044D880 33D2                    xor edx, edx
:0044D882 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044D888 6BD203                  imul edx, 00000003
:0044D88B 2BCA                    sub ecx, edx
:0044D88D 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D890 2BC1                    sub eax, ecx
:0044D892 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D86A(C)
|
:0044D895 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D898 8B4118                  mov eax, dword ptr [ecx+18]
:0044D89B 99                      cdq
:0044D89C 83E20F                  and edx, 0000000F
:0044D89F 03C2                    add eax, edx
:0044D8A1 C1F804                  sar eax, 04
:0044D8A4 8B55F0                  mov edx, dword ptr [ebp-10]
:0044D8A7 03D0                    add edx, eax
:0044D8A9 33C0                    xor eax, eax
:0044D8AB A0C54E4B00              mov al, byte ptr [004B4EC5]
:0044D8B0 6BC003                  imul eax, 00000003
:0044D8B3 3BD0                    cmp edx, eax
:0044D8B5 7E28                    jle 0044D8DF
:0044D8B7 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D8BA 8B4118                  mov eax, dword ptr [ecx+18]
:0044D8BD 99                      cdq
:0044D8BE 83E20F                  and edx, 0000000F
:0044D8C1 03C2                    add eax, edx
:0044D8C3 C1F804                  sar eax, 04
:0044D8C6 8B55F0                  mov edx, dword ptr [ebp-10]
:0044D8C9 03D0                    add edx, eax
:0044D8CB 33C0                    xor eax, eax
:0044D8CD A0C54E4B00              mov al, byte ptr [004B4EC5]
:0044D8D2 6BC003                  imul eax, 00000003
:0044D8D5 2BD0                    sub edx, eax
:0044D8D7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044D8DA 2BCA                    sub ecx, edx
:0044D8DC 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044D7FB(C), :0044D8B5(C)
|
:0044D8DF 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044D8E2 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D8E3 B903000000              mov ecx, 00000003
:0044D8E8 F7F9                    idiv ecx
:0044D8EA 6BC003                  imul eax, 00000003
:0044D8ED 8945F8                  mov dword ptr [ebp-08], eax
:0044D8F0 8B45F0                  mov eax, dword ptr [ebp-10]
:0044D8F3 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D8F4 B903000000              mov ecx, 00000003
:0044D8F9 F7F9                    idiv ecx
:0044D8FB 6BC003                  imul eax, 00000003
:0044D8FE 8945FC                  mov dword ptr [ebp-04], eax
:0044D901 8B55EC                  mov edx, dword ptr [ebp-14]
:0044D904 8B4204                  mov eax, dword ptr [edx+04]
:0044D907 3B45F8                  cmp eax, dword ptr [ebp-08]
:0044D90A 750B                    jne 0044D917
:0044D90C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D90F 8B5108                  mov edx, dword ptr [ecx+08]
:0044D912 3B55FC                  cmp edx, dword ptr [ebp-04]
:0044D915 7458                    je 0044D96F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D90A(C)
|
:0044D917 E81728FCFF              call 00410133
:0044D91C 8B45EC                  mov eax, dword ptr [ebp-14]
:0044D91F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044D922 894804                  mov dword ptr [eax+04], ecx
:0044D925 8B55EC                  mov edx, dword ptr [ebp-14]
:0044D928 8B45FC                  mov eax, dword ptr [ebp-04]
:0044D92B 894208                  mov dword ptr [edx+08], eax
:0044D92E 6A01                    push 00000001
:0044D930 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D933 8B5104                  mov edx, dword ptr [ecx+04]
:0044D936 C1E204                  shl edx, 04
:0044D939 52                      push edx
:0044D93A 6A00                    push 00000000
:0044D93C A1B0554B00              mov eax, dword ptr [004B55B0]
:0044D941 50                      push eax

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:0044D942 FF1560D64B00            Call dword ptr [004BD660]
:0044D948 6A01                    push 00000001
:0044D94A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D94D 8B5108                  mov edx, dword ptr [ecx+08]
:0044D950 C1E204                  shl edx, 04
:0044D953 52                      push edx
:0044D954 6A01                    push 00000001
:0044D956 A1B0554B00              mov eax, dword ptr [004B55B0]
:0044D95B 50                      push eax

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:0044D95C FF1560D64B00            Call dword ptr [004BD660]
:0044D962 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D965 E8A7EFFFFF              call 0044C911
:0044D96A E8DF27FCFF              call 0041014E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D915(C)
|
:0044D96F 8B0D18544B00            mov ecx, dword ptr [004B5418]
:0044D975 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0044D976 FF1558D64B00            Call dword ptr [004BD658]
:0044D97C 85C0                    test eax, eax
:0044D97E 740A                    je 0044D98A
:0044D980 B9784E4B00              mov ecx, 004B4E78
:0044D985 E81DEA0000              call 0045C3A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D97E(C)
|
:0044D98A 8BE5                    mov esp, ebp
:0044D98C 5D                      pop ebp
:0044D98D C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0040A710   , :0044DD10   , :0044E206   
|
:0044D990 55                      push ebp
:0044D991 8BEC                    mov ebp, esp
:0044D993 83EC2C                  sub esp, 0000002C
:0044D996 894DEC                  mov dword ptr [ebp-14], ecx
:0044D999 8B4508                  mov eax, dword ptr [ebp+08]
:0044D99C 25FF000000              and eax, 000000FF
:0044D9A1 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D9A2 B903000000              mov ecx, 00000003
:0044D9A7 F7F9                    idiv ecx
:0044D9A9 6BC003                  imul eax, 00000003
:0044D9AC 884508                  mov byte ptr [ebp+08], al
:0044D9AF 8B450C                  mov eax, dword ptr [ebp+0C]
:0044D9B2 25FF000000              and eax, 000000FF
:0044D9B7 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044D9B8 B903000000              mov ecx, 00000003
:0044D9BD F7F9                    idiv ecx
:0044D9BF 6BC003                  imul eax, 00000003
:0044D9C2 88450C                  mov byte ptr [ebp+0C], al
:0044D9C5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D9C8 E845D3FFFF              call 0044AD12
:0044D9CD 8945FC                  mov dword ptr [ebp-04], eax
:0044D9D0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D9D3 E84BD3FFFF              call 0044AD23
:0044D9D8 8945F4                  mov dword ptr [ebp-0C], eax
:0044D9DB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044D9DE E8C1F7FFFF              call 0044D1A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DAE2(U)
|
:0044D9E3 8B5508                  mov edx, dword ptr [ebp+08]
:0044D9E6 81E2FF000000            and edx, 000000FF
:0044D9EC 8B45EC                  mov eax, dword ptr [ebp-14]
:0044D9EF 395004                  cmp dword ptr [eax+04], edx
:0044D9F2 7515                    jne 0044DA09
:0044D9F4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044D9F7 81E1FF000000            and ecx, 000000FF
:0044D9FD 8B55EC                  mov edx, dword ptr [ebp-14]
:0044DA00 394A08                  cmp dword ptr [edx+08], ecx
:0044DA03 0F84DE000000            je 0044DAE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044D9F2(C)
|
:0044DA09 8B4508                  mov eax, dword ptr [ebp+08]
:0044DA0C 25FF000000              and eax, 000000FF
:0044DA11 2B45FC                  sub eax, dword ptr [ebp-04]
:0044DA14 8945F8                  mov dword ptr [ebp-08], eax
:0044DA17 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044DA1A 81E1FF000000            and ecx, 000000FF
:0044DA20 2B4DF4                  sub ecx, dword ptr [ebp-0C]
:0044DA23 894DF0                  mov dword ptr [ebp-10], ecx
:0044DA26 837DF800                cmp dword ptr [ebp-08], 00000000
:0044DA2A 7509                    jne 0044DA35
:0044DA2C C745E800000000          mov [ebp-18], 00000000
:0044DA33 EB3D                    jmp 0044DA72

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA2A(C)
|
:0044DA35 837DF80C                cmp dword ptr [ebp-08], 0000000C
:0044DA39 7C09                    jl 0044DA44

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0044DA3B C745E409000000          mov [ebp-1C], 00000009
:0044DA42 EB28                    jmp 0044DA6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA39(C)
|
:0044DA44 837DF8F4                cmp dword ptr [ebp-08], FFFFFFF4
:0044DA48 7F09                    jg 0044DA53
:0044DA4A C745E0F7FFFFFF          mov [ebp-20], FFFFFFF7
:0044DA51 EB13                    jmp 0044DA66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA48(C)
|
:0044DA53 33D2                    xor edx, edx
:0044DA55 837DF800                cmp dword ptr [ebp-08], 00000000
:0044DA59 0F9EC2                  setle dl
:0044DA5C 4A                      dec edx
:0044DA5D 83E206                  and edx, 00000006
:0044DA60 83C2FD                  add edx, FFFFFFFD
:0044DA63 8955E0                  mov dword ptr [ebp-20], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA51(U)
|
:0044DA66 8B45E0                  mov eax, dword ptr [ebp-20]
:0044DA69 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA42(U)
|
:0044DA6C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0044DA6F 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA33(U)
|
:0044DA72 8B55FC                  mov edx, dword ptr [ebp-04]
:0044DA75 0355E8                  add edx, dword ptr [ebp-18]
:0044DA78 8955FC                  mov dword ptr [ebp-04], edx
:0044DA7B 837DF000                cmp dword ptr [ebp-10], 00000000
:0044DA7F 7509                    jne 0044DA8A
:0044DA81 C745DC00000000          mov [ebp-24], 00000000
:0044DA88 EB3D                    jmp 0044DAC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA7F(C)
|
:0044DA8A 837DF00C                cmp dword ptr [ebp-10], 0000000C
:0044DA8E 7C09                    jl 0044DA99

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0044DA90 C745D809000000          mov [ebp-28], 00000009
:0044DA97 EB28                    jmp 0044DAC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA8E(C)
|
:0044DA99 837DF0F4                cmp dword ptr [ebp-10], FFFFFFF4
:0044DA9D 7F09                    jg 0044DAA8
:0044DA9F C745D4F7FFFFFF          mov [ebp-2C], FFFFFFF7
:0044DAA6 EB13                    jmp 0044DABB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA9D(C)
|
:0044DAA8 33C0                    xor eax, eax
:0044DAAA 837DF000                cmp dword ptr [ebp-10], 00000000
:0044DAAE 0F9EC0                  setle al
:0044DAB1 48                      dec eax
:0044DAB2 83E006                  and eax, 00000006
:0044DAB5 83C0FD                  add eax, FFFFFFFD
:0044DAB8 8945D4                  mov dword ptr [ebp-2C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DAA6(U)
|
:0044DABB 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0044DABE 894DD8                  mov dword ptr [ebp-28], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA97(U)
|
:0044DAC1 8B55D8                  mov edx, dword ptr [ebp-28]
:0044DAC4 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA88(U)
|
:0044DAC7 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044DACA 0345DC                  add eax, dword ptr [ebp-24]
:0044DACD 8945F4                  mov dword ptr [ebp-0C], eax
:0044DAD0 6A00                    push 00000000
:0044DAD2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044DAD5 51                      push ecx
:0044DAD6 8B55FC                  mov edx, dword ptr [ebp-04]
:0044DAD9 52                      push edx
:0044DADA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044DADD E8F8FCFFFF              call 0044D7DA
:0044DAE2 E9FCFEFFFF              jmp 0044D9E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DA03(C)
|
:0044DAE7 8BE5                    mov esp, ebp
:0044DAE9 5D                      pop ebp
:0044DAEA C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0043223A   , :00433887   , :00435399   , :00439CE8   , :00439F9A   
|:0043A17E   , :0043A3DF   , :0043A63E   , :0043AAB2   , :0043D005   
|:0043D818   , :0043DA4F   , :0043DAEC   , :0043DD2E   , :0043DE1A   
|:0043E1A0   , :0043E4C2   , :0043E790   , :0043EA70   , :0043EEAB   
|:0043F3D1   , :0043F56C   , :0043F7C3   , :0043F9BE   , :0043FD14   
|:004400F5   , :00440528   , :004407B9   , :00440929   , :00440B44   
|:00440D95   , :00440F4D   , :004442DE   , :0044DD80   , :0045CCA6   
|:0045E169   , :0045EA2F   , :0045F02E   , :0045F90E   , :0045FA4B   
|:0045FDE5   , :0045FFD6   
|
:0044DAED 55                      push ebp
:0044DAEE 8BEC                    mov ebp, esp
:0044DAF0 83EC30                  sub esp, 00000030
:0044DAF3 894DD8                  mov dword ptr [ebp-28], ecx
:0044DAF6 8B4508                  mov eax, dword ptr [ebp+08]
:0044DAF9 25FF000000              and eax, 000000FF
:0044DAFE 25FF000000              and eax, 000000FF
:0044DB03 8945DC                  mov dword ptr [ebp-24], eax
:0044DB06 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044DB09 81E1FF000000            and ecx, 000000FF
:0044DB0F 81E1FF000000            and ecx, 000000FF
:0044DB15 894DFC                  mov dword ptr [ebp-04], ecx
:0044DB18 C745E800000000          mov [ebp-18], 00000000
:0044DB1F C745E000000000          mov [ebp-20], 00000000
:0044DB26 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0044DB29 6BC903                  imul ecx, 00000003
:0044DB2C 8B55D8                  mov edx, dword ptr [ebp-28]
:0044DB2F 8B4214                  mov eax, dword ptr [edx+14]
:0044DB32 99                      cdq
:0044DB33 83E20F                  and edx, 0000000F
:0044DB36 03C2                    add eax, edx
:0044DB38 C1F804                  sar eax, 04
:0044DB3B 99                      cdq
:0044DB3C 2BC2                    sub eax, edx
:0044DB3E D1F8                    sar eax, 1
:0044DB40 2BC8                    sub ecx, eax
:0044DB42 894DF8                  mov dword ptr [ebp-08], ecx
:0044DB45 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044DB48 6BC903                  imul ecx, 00000003
:0044DB4B 8B55D8                  mov edx, dword ptr [ebp-28]
:0044DB4E 8B4218                  mov eax, dword ptr [edx+18]
:0044DB51 99                      cdq
:0044DB52 83E20F                  and edx, 0000000F
:0044DB55 03C2                    add eax, edx
:0044DB57 C1F804                  sar eax, 04
:0044DB5A 99                      cdq
:0044DB5B 2BC2                    sub eax, edx
:0044DB5D D1F8                    sar eax, 1
:0044DB5F 2BC8                    sub ecx, eax
:0044DB61 894DF4                  mov dword ptr [ebp-0C], ecx
:0044DB64 8B45D8                  mov eax, dword ptr [ebp-28]
:0044DB67 8B4804                  mov ecx, dword ptr [eax+04]
:0044DB6A 2B4DF8                  sub ecx, dword ptr [ebp-08]
:0044DB6D 894DEC                  mov dword ptr [ebp-14], ecx
:0044DB70 8B55D8                  mov edx, dword ptr [ebp-28]
:0044DB73 8B4208                  mov eax, dword ptr [edx+08]
:0044DB76 2B45F4                  sub eax, dword ptr [ebp-0C]
:0044DB79 8945E4                  mov dword ptr [ebp-1C], eax

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0044DB7C C745F009000000          mov [ebp-10], 00000009
:0044DB83 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044DB86 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:0044DB89 7D24                    jge 0044DBAF
:0044DB8B 8B55F0                  mov edx, dword ptr [ebp-10]
:0044DB8E 83EA02                  sub edx, 00000002
:0044DB91 3955E4                  cmp dword ptr [ebp-1C], edx
:0044DB94 7D19                    jge 0044DBAF
:0044DB96 8B45F0                  mov eax, dword ptr [ebp-10]
:0044DB99 F7D8                    neg eax
:0044DB9B 3945EC                  cmp dword ptr [ebp-14], eax
:0044DB9E 7E0F                    jle 0044DBAF
:0044DBA0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044DBA3 F7D9                    neg ecx
:0044DBA5 394DE4                  cmp dword ptr [ebp-1C], ecx
:0044DBA8 7E05                    jle 0044DBAF
:0044DBAA E966010000              jmp 0044DD15

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DB89(C), :0044DB94(C), :0044DB9E(C), :0044DBA8(C)
|
:0044DBAF 837DF800                cmp dword ptr [ebp-08], 00000000
:0044DBB3 7C0B                    jl 0044DBC0
:0044DBB5 8B55DC                  mov edx, dword ptr [ebp-24]
:0044DBB8 6BD203                  imul edx, 00000003
:0044DBBB 3B55F0                  cmp edx, dword ptr [ebp-10]
:0044DBBE 7D07                    jge 0044DBC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DBB3(C)
|
:0044DBC0 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DBBE(C)
|
:0044DBC7 837DF400                cmp dword ptr [ebp-0C], 00000000
:0044DBCB 7C0B                    jl 0044DBD8
:0044DBCD 8B45FC                  mov eax, dword ptr [ebp-04]
:0044DBD0 6BC003                  imul eax, 00000003
:0044DBD3 3B45F0                  cmp eax, dword ptr [ebp-10]
:0044DBD6 7D07                    jge 0044DBDF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DBCB(C)
|
:0044DBD8 C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DBD6(C)
|
:0044DBDF 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0044DBE2 8B4114                  mov eax, dword ptr [ecx+14]
:0044DBE5 99                      cdq
:0044DBE6 83E20F                  and edx, 0000000F
:0044DBE9 03C2                    add eax, edx
:0044DBEB C1F804                  sar eax, 04
:0044DBEE 8B55F8                  mov edx, dword ptr [ebp-08]
:0044DBF1 03D0                    add edx, eax
:0044DBF3 33C0                    xor eax, eax
:0044DBF5 A0C44E4B00              mov al, byte ptr [004B4EC4]
:0044DBFA 6BC003                  imul eax, 00000003
:0044DBFD 3BD0                    cmp edx, eax
:0044DBFF 7F21                    jg 0044DC22
:0044DC01 33C9                    xor ecx, ecx
:0044DC03 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0044DC09 6BC903                  imul ecx, 00000003
:0044DC0C 8B55D8                  mov edx, dword ptr [ebp-28]
:0044DC0F 8B4214                  mov eax, dword ptr [edx+14]
:0044DC12 99                      cdq
:0044DC13 83E20F                  and edx, 0000000F
:0044DC16 03C2                    add eax, edx
:0044DC18 C1F804                  sar eax, 04
:0044DC1B 2BC8                    sub ecx, eax
:0044DC1D 394DF8                  cmp dword ptr [ebp-08], ecx
:0044DC20 7E50                    jle 0044DC72

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DBFF(C)
|
:0044DC22 33C0                    xor eax, eax
:0044DC24 A0C44E4B00              mov al, byte ptr [004B4EC4]
:0044DC29 8BC8                    mov ecx, eax
:0044DC2B 6BC903                  imul ecx, 00000003
:0044DC2E 8B55D8                  mov edx, dword ptr [ebp-28]
:0044DC31 8B4214                  mov eax, dword ptr [edx+14]
:0044DC34 99                      cdq
:0044DC35 83E20F                  and edx, 0000000F
:0044DC38 03C2                    add eax, edx
:0044DC3A C1F804                  sar eax, 04
:0044DC3D 2BC8                    sub ecx, eax
:0044DC3F 85C9                    test ecx, ecx
:0044DC41 7D09                    jge 0044DC4C
:0044DC43 C745D400000000          mov [ebp-2C], 00000000
:0044DC4A EB20                    jmp 0044DC6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DC41(C)
|
:0044DC4C 33C0                    xor eax, eax
:0044DC4E A0C44E4B00              mov al, byte ptr [004B4EC4]
:0044DC53 8BC8                    mov ecx, eax
:0044DC55 6BC903                  imul ecx, 00000003
:0044DC58 8B55D8                  mov edx, dword ptr [ebp-28]
:0044DC5B 8B4214                  mov eax, dword ptr [edx+14]
:0044DC5E 99                      cdq
:0044DC5F 83E20F                  and edx, 0000000F
:0044DC62 03C2                    add eax, edx
:0044DC64 C1F804                  sar eax, 04
:0044DC67 2BC8                    sub ecx, eax
:0044DC69 894DD4                  mov dword ptr [ebp-2C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DC4A(U)
|
:0044DC6C 8B45D4                  mov eax, dword ptr [ebp-2C]
:0044DC6F 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DC20(C)
|
:0044DC72 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0044DC75 8B4118                  mov eax, dword ptr [ecx+18]
:0044DC78 99                      cdq
:0044DC79 83E20F                  and edx, 0000000F
:0044DC7C 03C2                    add eax, edx
:0044DC7E C1F804                  sar eax, 04
:0044DC81 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044DC84 03D0                    add edx, eax
:0044DC86 33C0                    xor eax, eax
:0044DC88 A0C54E4B00              mov al, byte ptr [004B4EC5]
:0044DC8D 6BC003                  imul eax, 00000003
:0044DC90 3BD0                    cmp edx, eax
:0044DC92 7F21                    jg 0044DCB5
:0044DC94 33C9                    xor ecx, ecx
:0044DC96 8A0DC54E4B00            mov cl, byte ptr [004B4EC5]
:0044DC9C 6BC903                  imul ecx, 00000003
:0044DC9F 8B55D8                  mov edx, dword ptr [ebp-28]
:0044DCA2 8B4218                  mov eax, dword ptr [edx+18]
:0044DCA5 99                      cdq
:0044DCA6 83E20F                  and edx, 0000000F
:0044DCA9 03C2                    add eax, edx
:0044DCAB C1F804                  sar eax, 04
:0044DCAE 2BC8                    sub ecx, eax
:0044DCB0 394DF4                  cmp dword ptr [ebp-0C], ecx
:0044DCB3 7E50                    jle 0044DD05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DC92(C)
|
:0044DCB5 33C0                    xor eax, eax
:0044DCB7 A0C54E4B00              mov al, byte ptr [004B4EC5]
:0044DCBC 8BC8                    mov ecx, eax
:0044DCBE 6BC903                  imul ecx, 00000003
:0044DCC1 8B55D8                  mov edx, dword ptr [ebp-28]
:0044DCC4 8B4218                  mov eax, dword ptr [edx+18]
:0044DCC7 99                      cdq
:0044DCC8 83E20F                  and edx, 0000000F
:0044DCCB 03C2                    add eax, edx
:0044DCCD C1F804                  sar eax, 04
:0044DCD0 2BC8                    sub ecx, eax
:0044DCD2 85C9                    test ecx, ecx
:0044DCD4 7D09                    jge 0044DCDF
:0044DCD6 C745D000000000          mov [ebp-30], 00000000
:0044DCDD EB20                    jmp 0044DCFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DCD4(C)
|
:0044DCDF 33C0                    xor eax, eax
:0044DCE1 A0C54E4B00              mov al, byte ptr [004B4EC5]
:0044DCE6 8BC8                    mov ecx, eax
:0044DCE8 6BC903                  imul ecx, 00000003
:0044DCEB 8B55D8                  mov edx, dword ptr [ebp-28]
:0044DCEE 8B4218                  mov eax, dword ptr [edx+18]
:0044DCF1 99                      cdq
:0044DCF2 83E20F                  and edx, 0000000F
:0044DCF5 03C2                    add eax, edx
:0044DCF7 C1F804                  sar eax, 04
:0044DCFA 2BC8                    sub ecx, eax
:0044DCFC 894DD0                  mov dword ptr [ebp-30], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DCDD(U)
|
:0044DCFF 8B45D0                  mov eax, dword ptr [ebp-30]
:0044DD02 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DCB3(C)
|
:0044DD05 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0044DD08 51                      push ecx
:0044DD09 8A55F8                  mov dl, byte ptr [ebp-08]
:0044DD0C 52                      push edx
:0044DD0D 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0044DD10 E87BFCFFFF              call 0044D990

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DBAA(U)
|
:0044DD15 8BE5                    mov esp, ebp
:0044DD17 5D                      pop ebp
:0044DD18 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0045E920   , :0046CD67   
|
:0044DD1B 55                      push ebp
:0044DD1C 8BEC                    mov ebp, esp
:0044DD1E 83EC08                  sub esp, 00000008
:0044DD21 894DF8                  mov dword ptr [ebp-08], ecx
:0044DD24 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044DD27 E8C479FBFF              call 004056F0
:0044DD2C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044DD2F 81E1FF000000            and ecx, 000000FF
:0044DD35 6BC924                  imul ecx, 00000024
:0044DD38 81C1B83B4B00            add ecx, 004B3BB8
:0044DD3E E88DE30000              call 0045C0D0
:0044DD43 25FF000000              and eax, 000000FF
:0044DD48 83F804                  cmp eax, 00000004
:0044DD4B 745B                    je 0044DDA8
:0044DD4D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044DD50 81E1FF000000            and ecx, 000000FF
:0044DD56 6BC924                  imul ecx, 00000024
:0044DD59 81C1B83B4B00            add ecx, 004B3BB8
:0044DD5F E8DC3EFEFF              call 00431C40
:0044DD64 50                      push eax
:0044DD65 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044DD68 E8338DFEFF              call 00436AA0
:0044DD6D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044DD70 E82FF4FFFF              call 0044D1A4
:0044DD75 8A45FD                  mov al, byte ptr [ebp-03]
:0044DD78 50                      push eax
:0044DD79 8A4DFC                  mov cl, byte ptr [ebp-04]
:0044DD7C 51                      push ecx
:0044DD7D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044DD80 E868FDFFFF              call 0044DAED
:0044DD85 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044DD88 81E1FF000000            and ecx, 000000FF
:0044DD8E 6BC924                  imul ecx, 00000024
:0044DD91 81C1B83B4B00            add ecx, 004B3BB8
:0044DD97 E8A76EFEFF              call 00434C43
:0044DD9C 8D55FC                  lea edx, dword ptr [ebp-04]
:0044DD9F 52                      push edx
:0044DDA0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044DDA3 E8F5F2FFFF              call 0044D09D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DD4B(C)
|
:0044DDA8 8BE5                    mov esp, ebp
:0044DDAA 5D                      pop ebp
:0044DDAB C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004393D9   , :00439C4D   , :00439F1C   , :0043A0FE   , :0043A5BE   
|:0043AA02   , :0043B4BE   , :0043B762   , :0043BA6C   , :0043BC87   
|:0043BEAF   , :0043C095   , :0043C86D   , :0043D30C   , :0043D552   
|:0043D701   , :0043D9BD   , :0043DC91   , :0043E3C4   , :0043E9D5   
|:0043EE1C   , :0043F351   , :0043F4EC   , :0043FAFE   , :0043FE6C   
|:004402A5   , :004404A9   , :004406B2   , :00440AC5   , :00456536   
|
:0044DDAE 55                      push ebp
:0044DDAF 8BEC                    mov ebp, esp
:0044DDB1 83EC18                  sub esp, 00000018
:0044DDB4 56                      push esi
:0044DDB5 894DE8                  mov dword ptr [ebp-18], ecx
:0044DDB8 C745F801000000          mov [ebp-08], 00000001
:0044DDBF 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0044DDC2 E82979FBFF              call 004056F0
:0044DDC7 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0044DDCA E82179FBFF              call 004056F0
:0044DDCF C645FCFF                mov [ebp-04], FF
:0044DDD3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044DDD6 81E1FF000000            and ecx, 000000FF
:0044DDDC 6BC924                  imul ecx, 00000024
:0044DDDF 81C1B83B4B00            add ecx, 004B3BB8
:0044DDE5 E89679FBFF              call 00405780
:0044DDEA 25FF000000              and eax, 000000FF
:0044DDEF 83F807                  cmp eax, 00000007
:0044DDF2 7418                    je 0044DE0C
:0044DDF4 33C0                    xor eax, eax
:0044DDF6 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0044DDFB 83E004                  and eax, 00000004
:0044DDFE 85C0                    test eax, eax
:0044DE00 750A                    jne 0044DE0C
:0044DE02 A0504A4B00              mov al, byte ptr [004B4A50]
:0044DE07 E9B8030000              jmp 0044E1C4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DDF2(C), :0044DE00(C)
|
:0044DE0C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044DE0F 81E1FF000000            and ecx, 000000FF
:0044DE15 6BC924                  imul ecx, 00000024
:0044DE18 81C1B83B4B00            add ecx, 004B3BB8
:0044DE1E E81D3EFEFF              call 00431C40
:0044DE23 50                      push eax
:0044DE24 8D4DEC                  lea ecx, dword ptr [ebp-14]
:0044DE27 E8748CFEFF              call 00436AA0
:0044DE2C 68FF000000              push 000000FF
:0044DE31 6880070000              push 00000780

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044DE36 6A04                    push 00000004
:0044DE38 6A00                    push 00000000
:0044DE3A 6800960000              push 00009600
:0044DE3F B9881C4B00              mov ecx, 004B1C88
:0044DE44 E847B10200              call 00478F90
:0044DE49 50                      push eax
:0044DE4A E891A70200              call 004785E0
:0044DE4F 83C40C                  add esp, 0000000C
:0044DE52 6A00                    push 00000000
:0044DE54 8A4D10                  mov cl, byte ptr [ebp+10]
:0044DE57 51                      push ecx
:0044DE58 8A550C                  mov dl, byte ptr [ebp+0C]
:0044DE5B 52                      push edx
:0044DE5C 8D45EC                  lea eax, dword ptr [ebp-14]
:0044DE5F 50                      push eax
:0044DE60 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044DE63 81E1FF000000            and ecx, 000000FF
:0044DE69 6BC924                  imul ecx, 00000024
:0044DE6C 81C1B83B4B00            add ecx, 004B3BB8
:0044DE72 E8C31B0000              call 0044FA3A
:0044DE77 8845F4                  mov byte ptr [ebp-0C], al
:0044DE7A 6A01                    push 00000001
:0044DE7C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044DE7F E83DD0FFFF              call 0044AEC1
:0044DE84 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044DE87 81E1FF000000            and ecx, 000000FF
:0044DE8D 83F901                  cmp ecx, 00000001
:0044DE90 7424                    je 0044DEB6
:0044DE92 8B550C                  mov edx, dword ptr [ebp+0C]
:0044DE95 81E2FF000000            and edx, 000000FF
:0044DE9B 81FAFF000000            cmp edx, 000000FF
:0044DEA1 7413                    je 0044DEB6
:0044DEA3 8A450C                  mov al, byte ptr [ebp+0C]
:0044DEA6 50                      push eax
:0044DEA7 668B4DEC                mov cx, word ptr [ebp-14]
:0044DEAB 51                      push ecx
:0044DEAC B958494B00              mov ecx, 004B4958
:0044DEB1 E8FBE9FFFF              call 0044C8B1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DE90(C), :0044DEA1(C)
|
:0044DEB6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044DEB9 E853EAFFFF              call 0044C911
:0044DEBE 8A5508                  mov dl, byte ptr [ebp+08]
:0044DEC1 8815DC494B00            mov byte ptr [004B49DC], dl
:0044DEC7 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044DECA 25FF000000              and eax, 000000FF
:0044DECF 3DFF000000              cmp eax, 000000FF
:0044DED4 7559                    jne 0044DF2F
:0044DED6 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044DED9 81E1FF000000            and ecx, 000000FF
:0044DEDF 83F901                  cmp ecx, 00000001
:0044DEE2 7511                    jne 0044DEF5

* Possible StringData Ref from Data Obj ->"d򤺨Sۭx"
                                  |
:0044DEE4 6834EB4700              push 0047EB34
:0044DEE9 6A00                    push 00000000
:0044DEEB E84335FEFF              call 00431433
:0044DEF0 83C408                  add esp, 00000008
:0044DEF3 EB33                    jmp 0044DF28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DEE2(C)
|
:0044DEF5 8B550C                  mov edx, dword ptr [ebp+0C]
:0044DEF8 81E2FF000000            and edx, 000000FF
:0044DEFE 81E280000000            and edx, 00000080
:0044DF04 85D2                    test edx, edx
:0044DF06 7411                    je 0044DF19

* Possible StringData Ref from Data Obj ->"d򤺨SiH浴۪ĭx"
                                  |
:0044DF08 6848EB4700              push 0047EB48
:0044DF0D 6A00                    push 00000000
:0044DF0F E81F35FEFF              call 00431433
:0044DF14 83C408                  add esp, 00000008
:0044DF17 EB0F                    jmp 0044DF28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DF06(C)
|

* Possible StringData Ref from Data Obj ->"d򤺨Sĭx"
                                  |
:0044DF19 686CEB4700              push 0047EB6C
:0044DF1E 6A00                    push 00000000
:0044DF20 E80E35FEFF              call 00431433
:0044DF25 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DEF3(U), :0044DF17(U)
|
:0044DF28 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DED4(C), :0044E156(U)
|
:0044DF2F 837DF800                cmp dword ptr [ebp-08], 00000000
:0044DF33 0F8422020000            je 0044E15B
:0044DF39 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044DF3C E85BEFFFFF              call 0044CE9C
:0044DF41 50                      push eax
:0044DF42 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0044DF45 E8568BFEFF              call 00436AA0
:0044DF4A E807950200              call 00477456
:0044DF4F 8B45F0                  mov eax, dword ptr [ebp-10]
:0044DF52 25FF000000              and eax, 000000FF
:0044DF57 3DFF000000              cmp eax, 000000FF
:0044DF5C 7510                    jne 0044DF6E
:0044DF5E C745F800000000          mov [ebp-08], 00000000
:0044DF65 C645FCFF                mov [ebp-04], FF
:0044DF69 E9ED010000              jmp 0044E15B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DF5C(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044DF6E 6A04                    push 00000004
:0044DF70 6A00                    push 00000000
:0044DF72 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044DF75 81E1FF000000            and ecx, 000000FF
:0044DF7B 8B55F1                  mov edx, dword ptr [ebp-0F]
:0044DF7E 81E2FF000000            and edx, 000000FF
:0044DF84 33C0                    xor eax, eax
:0044DF86 A0C44E4B00              mov al, byte ptr [004B4EC4]
:0044DF8B 0FAFD0                  imul edx, eax
:0044DF8E 8D8C1100960000          lea ecx, dword ptr [ecx+edx+00009600]
:0044DF95 51                      push ecx
:0044DF96 B9881C4B00              mov ecx, 004B1C88
:0044DF9B E8F0AF0200              call 00478F90
:0044DFA0 33D2                    xor edx, edx
:0044DFA2 8A10                    mov dl, byte ptr [eax]
:0044DFA4 81FAFF000000            cmp edx, 000000FF
:0044DFAA 0F846D010000            je 0044E11D
:0044DFB0 8D45F0                  lea eax, dword ptr [ebp-10]
:0044DFB3 50                      push eax
:0044DFB4 E823180000              call 0044F7DC
:0044DFB9 83C404                  add esp, 00000004
:0044DFBC 8845FC                  mov byte ptr [ebp-04], al
:0044DFBF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044DFC2 81E1FF000000            and ecx, 000000FF
:0044DFC8 81F9FF000000            cmp ecx, 000000FF
:0044DFCE 0F8447010000            je 0044E11B
:0044DFD4 8B5510                  mov edx, dword ptr [ebp+10]
:0044DFD7 81E2FF000000            and edx, 000000FF
:0044DFDD 83FA01                  cmp edx, 00000001
:0044DFE0 0F859D000000            jne 0044E083
:0044DFE6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044DFE9 81E1FF000000            and ecx, 000000FF
:0044DFEF 6BC924                  imul ecx, 00000024
:0044DFF2 81C1B83B4B00            add ecx, 004B3BB8
:0044DFF8 E813E9FBFF              call 0040C910
:0044DFFD 8BF0                    mov esi, eax
:0044DFFF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E002 81E1FF000000            and ecx, 000000FF
:0044E008 6BC924                  imul ecx, 00000024
:0044E00B 81C1B83B4B00            add ecx, 004B3BB8
:0044E011 E8FAE8FBFF              call 0040C910
:0044E016 3BF0                    cmp esi, eax
:0044E018 7421                    je 0044E03B

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044E01A 6A07                    push 00000007
:0044E01C B9F8544B00              mov ecx, 004B54F8
:0044E021 E8F4B40100              call 0046951A

* Possible StringData Ref from Data Obj ->"Oĭx"
                                  |
:0044E026 6884EB4700              push 0047EB84
:0044E02B 6A00                    push 00000000
:0044E02D E80134FEFF              call 00431433
:0044E032 83C408                  add esp, 00000008
:0044E035 C645FCFF                mov [ebp-04], FF
:0044E039 EB43                    jmp 0044E07E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E018(C)
|
:0044E03B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E03E 81E1FF000000            and ecx, 000000FF
:0044E044 6BC924                  imul ecx, 00000024
:0044E047 81C1B83B4B00            add ecx, 004B3BB8
:0044E04D E8FF88FEFF              call 00436951
:0044E052 85C0                    test eax, eax
:0044E054 7521                    jne 0044E077

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044E056 6A07                    push 00000007
:0044E058 B9F8544B00              mov ecx, 004B54F8
:0044E05D E8B8B40100              call 0046951A

* Possible StringData Ref from Data Obj ->"ܨ䳡"
                                  |
:0044E062 6890EB4700              push 0047EB90
:0044E067 6A00                    push 00000000
:0044E069 E8C533FEFF              call 00431433
:0044E06E 83C408                  add esp, 00000008
:0044E071 C645FCFF                mov [ebp-04], FF
:0044E075 EB07                    jmp 0044E07E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E054(C)
|
:0044E077 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044E039(U), :0044E075(U)
|
:0044E07E E998000000              jmp 0044E11B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DFE0(C)
|
:0044E083 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E086 81E1FF000000            and ecx, 000000FF
:0044E08C 6BC924                  imul ecx, 00000024
:0044E08F 81C1B83B4B00            add ecx, 004B3BB8
:0044E095 E876E8FBFF              call 0040C910
:0044E09A 8BF0                    mov esi, eax
:0044E09C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E09F 81E1FF000000            and ecx, 000000FF
:0044E0A5 6BC924                  imul ecx, 00000024
:0044E0A8 81C1B83B4B00            add ecx, 004B3BB8
:0044E0AE E85DE8FBFF              call 0040C910
:0044E0B3 3BF0                    cmp esi, eax
:0044E0B5 7521                    jne 0044E0D8

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044E0B7 6A07                    push 00000007
:0044E0B9 B9F8544B00              mov ecx, 004B54F8
:0044E0BE E857B40100              call 0046951A

* Possible StringData Ref from Data Obj ->"ۭx"
                                  |
:0044E0C3 68A4EB4700              push 0047EBA4
:0044E0C8 6A00                    push 00000000
:0044E0CA E86433FEFF              call 00431433
:0044E0CF 83C408                  add esp, 00000008
:0044E0D2 C645FCFF                mov [ebp-04], FF
:0044E0D6 EB43                    jmp 0044E11B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E0B5(C)
|
:0044E0D8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E0DB 81E1FF000000            and ecx, 000000FF
:0044E0E1 6BC924                  imul ecx, 00000024
:0044E0E4 81C1B83B4B00            add ecx, 004B3BB8
:0044E0EA E86288FEFF              call 00436951
:0044E0EF 85C0                    test eax, eax
:0044E0F1 7521                    jne 0044E114

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044E0F3 6A07                    push 00000007
:0044E0F5 B9F8544B00              mov ecx, 004B54F8
:0044E0FA E81BB40100              call 0046951A

* Possible StringData Ref from Data Obj ->"ܨ䳡"
                                  |
:0044E0FF 68B8EB4700              push 0047EBB8
:0044E104 6A00                    push 00000000
:0044E106 E82833FEFF              call 00431433
:0044E10B 83C408                  add esp, 00000008
:0044E10E C645FCFF                mov [ebp-04], FF
:0044E112 EB07                    jmp 0044E11B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E0F1(C)
|
:0044E114 C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DFCE(C), :0044E07E(U), :0044E0D6(U), :0044E112(U)
|
:0044E11B EB39                    jmp 0044E156

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DFAA(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044E11D 6A07                    push 00000007
:0044E11F B9F8544B00              mov ecx, 004B54F8
:0044E124 E8F1B30100              call 0046951A
:0044E129 8B4510                  mov eax, dword ptr [ebp+10]
:0044E12C 25FF000000              and eax, 000000FF
:0044E131 83F801                  cmp eax, 00000001
:0044E134 7511                    jne 0044E147

* Possible StringData Ref from Data Obj ->"bd"
                                  |
:0044E136 68CCEB4700              push 0047EBCC
:0044E13B 6A00                    push 00000000
:0044E13D E8F132FEFF              call 00431433
:0044E142 83C408                  add esp, 00000008
:0044E145 EB0F                    jmp 0044E156

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E134(C)
|

* Possible StringData Ref from Data Obj ->"bd"
                                  |
:0044E147 68D8EB4700              push 0047EBD8
:0044E14C 6A00                    push 00000000
:0044E14E E8E032FEFF              call 00431433
:0044E153 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044E11B(U), :0044E145(U)
|
:0044E156 E9D4FDFFFF              jmp 0044DF2F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044DF33(C), :0044DF69(U)
|
:0044E15B 6A00                    push 00000000
:0044E15D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044E160 E85CCDFFFF              call 0044AEC1
:0044E165 68FF000000              push 000000FF
:0044E16A 668B4DEC                mov cx, word ptr [ebp-14]
:0044E16E 51                      push ecx
:0044E16F B958494B00              mov ecx, 004B4958
:0044E174 E838E7FFFF              call 0044C8B1
:0044E179 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044E17C E823F0FFFF              call 0044D1A4
:0044E181 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044E184 E888E7FFFF              call 0044C911
:0044E189 8B55FC                  mov edx, dword ptr [ebp-04]
:0044E18C 81E2FF000000            and edx, 000000FF
:0044E192 81FAFF000000            cmp edx, 000000FF
:0044E198 750C                    jne 0044E1A6
:0044E19A 6A01                    push 00000001
:0044E19C B9F8544B00              mov ecx, 004B54F8
:0044E1A1 E874B30100              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E198(C)
|
:0044E1A6 8B45E8                  mov eax, dword ptr [ebp-18]
:0044E1A9 C6406100                mov [eax+61], 00
:0044E1AD 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044E1B0 C7417400000000          mov [ecx+74], 00000000
:0044E1B7 6A00                    push 00000000
:0044E1B9 E8CC0DFEFF              call 0042EF8A
:0044E1BE 83C404                  add esp, 00000004
:0044E1C1 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044DE07(U)
|
:0044E1C4 5E                      pop esi
:0044E1C5 8BE5                    mov esp, ebp
:0044E1C7 5D                      pop ebp
:0044E1C8 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0045CCB0   , :0045E7B8   , :0045F038   
|
:0044E1CB 55                      push ebp
:0044E1CC 8BEC                    mov ebp, esp
:0044E1CE 51                      push ecx
:0044E1CF 894DFC                  mov dword ptr [ebp-04], ecx
:0044E1D2 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E1D5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E1D8 8B5104                  mov edx, dword ptr [ecx+04]
:0044E1DB 895048                  mov dword ptr [eax+48], edx
:0044E1DE 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E1E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E1E4 8B5108                  mov edx, dword ptr [ecx+08]
:0044E1E7 89504C                  mov dword ptr [eax+4C], edx
:0044E1EA 8BE5                    mov esp, ebp
:0044E1EC 5D                      pop ebp
:0044E1ED C3                      ret



* Referenced by a CALL at Address:
|:0045EB6B   
|
:0044E1EE 55                      push ebp
:0044E1EF 8BEC                    mov ebp, esp
:0044E1F1 51                      push ecx
:0044E1F2 894DFC                  mov dword ptr [ebp-04], ecx
:0044E1F5 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E1F8 8A484C                  mov cl, byte ptr [eax+4C]
:0044E1FB 51                      push ecx
:0044E1FC 8B55FC                  mov edx, dword ptr [ebp-04]
:0044E1FF 8A4248                  mov al, byte ptr [edx+48]
:0044E202 50                      push eax
:0044E203 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E206 E885F7FFFF              call 0044D990
:0044E20B 8BE5                    mov esp, ebp
:0044E20D 5D                      pop ebp
:0044E20E C3                      ret



* Referenced by a CALL at Address:
|:0045E54E   
|
:0044E20F 55                      push ebp
:0044E210 8BEC                    mov ebp, esp
:0044E212 83EC18                  sub esp, 00000018
:0044E215 894DE8                  mov dword ptr [ebp-18], ecx
:0044E218 8B4508                  mov eax, dword ptr [ebp+08]
:0044E21B 33C9                    xor ecx, ecx
:0044E21D 8A08                    mov cl, byte ptr [eax]
:0044E21F 6BC903                  imul ecx, 00000003
:0044E222 8B55E8                  mov edx, dword ptr [ebp-18]
:0044E225 2B4A04                  sub ecx, dword ptr [edx+04]
:0044E228 894DF0                  mov dword ptr [ebp-10], ecx
:0044E22B 8B4508                  mov eax, dword ptr [ebp+08]
:0044E22E 33C9                    xor ecx, ecx
:0044E230 8A4801                  mov cl, byte ptr [eax+01]
:0044E233 6BC903                  imul ecx, 00000003
:0044E236 8B55E8                  mov edx, dword ptr [ebp-18]
:0044E239 2B4A08                  sub ecx, dword ptr [edx+08]
:0044E23C 83C102                  add ecx, 00000002
:0044E23F 894DEC                  mov dword ptr [ebp-14], ecx
:0044E242 8B4508                  mov eax, dword ptr [ebp+08]
:0044E245 33C9                    xor ecx, ecx
:0044E247 8A08                    mov cl, byte ptr [eax]
:0044E249 81F9FF000000            cmp ecx, 000000FF
:0044E24F 7514                    jne 0044E265
:0044E251 8B5508                  mov edx, dword ptr [ebp+08]
:0044E254 33C0                    xor eax, eax
:0044E256 8A4201                  mov al, byte ptr [edx+01]
:0044E259 3DFF000000              cmp eax, 000000FF
:0044E25E 7505                    jne 0044E265
:0044E260 E92C020000              jmp 0044E491

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044E24F(C), :0044E25E(C)
|
:0044E265 6A00                    push 00000000
:0044E267 B9784E4B00              mov ecx, 004B4E78
:0044E26C E85F080000              call 0044EAD0
:0044E271 50                      push eax
:0044E272 E886FA0100              call 0046DCFD
:0044E277 83C408                  add esp, 00000008
:0044E27A 6A00                    push 00000000
:0044E27C B9C0534B00              mov ecx, 004B53C0
:0044E281 E8DAFBFDFF              call 0042DE60
:0044E286 B9F0174B00              mov ecx, 004B17F0
:0044E28B E8301CFCFF              call 0040FEC0
:0044E290 50                      push eax
:0044E291 6A30                    push 00000030
:0044E293 6A30                    push 00000030
:0044E295 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044E298 C1E104                  shl ecx, 04
:0044E29B 83C108                  add ecx, 00000008
:0044E29E 51                      push ecx
:0044E29F 8B55F0                  mov edx, dword ptr [ebp-10]
:0044E2A2 C1E204                  shl edx, 04
:0044E2A5 52                      push edx
:0044E2A6 E8FF890200              call 00476CAA
:0044E2AB 83C414                  add esp, 00000014
:0044E2AE 837DF00E                cmp dword ptr [ebp-10], 0000000E
:0044E2B2 7D09                    jge 0044E2BD

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044E2B4 C745FC03000000          mov [ebp-04], 00000003
:0044E2BB EB07                    jmp 0044E2C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E2B2(C)
|
:0044E2BD C745FCF7FFFFFF          mov [ebp-04], FFFFFFF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E2BB(U)
|
:0044E2C4 837DEC0C                cmp dword ptr [ebp-14], 0000000C
:0044E2C8 7D09                    jge 0044E2D3
:0044E2CA C745F800000000          mov [ebp-08], 00000000
:0044E2D1 EB07                    jmp 0044E2DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E2C8(C)
|
:0044E2D3 C745F8FDFFFFFF          mov [ebp-08], FFFFFFFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E2D1(U)
|
:0044E2DA 8B45F0                  mov eax, dword ptr [ebp-10]
:0044E2DD 0345FC                  add eax, dword ptr [ebp-04]
:0044E2E0 8945F0                  mov dword ptr [ebp-10], eax
:0044E2E3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044E2E6 034DF8                  add ecx, dword ptr [ebp-08]
:0044E2E9 894DEC                  mov dword ptr [ebp-14], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044E2EC 6A04                    push 00000004
:0044E2EE B9306D4800              mov ecx, 00486D30
:0044E2F3 E85C7DFBFF              call 00406054
:0044E2F8 6A10                    push 00000010
:0044E2FA B9306D4800              mov ecx, 00486D30
:0044E2FF E8B47CFBFF              call 00405FB8
:0044E304 6A00                    push 00000000
:0044E306 B9306D4800              mov ecx, 00486D30
:0044E30B E8E07CFBFF              call 00405FF0
:0044E310 E81E1EFCFF              call 00410133

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044E315 6A05                    push 00000005

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0044E317 6A09                    push 00000009
:0044E319 8B55EC                  mov edx, dword ptr [ebp-14]
:0044E31C 83EA02                  sub edx, 00000002
:0044E31F 52                      push edx
:0044E320 8A45F0                  mov al, byte ptr [ebp-10]
:0044E323 50                      push eax
:0044E324 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044E327 E82FE7FFFF              call 0044CA5B
:0044E32C 6A50                    push 00000050
:0044E32E 6890000000              push 00000090
:0044E333 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044E336 C1E104                  shl ecx, 04
:0044E339 83C108                  add ecx, 00000008
:0044E33C 51                      push ecx
:0044E33D 8B55F0                  mov edx, dword ptr [ebp-10]
:0044E340 C1E204                  shl edx, 04
:0044E343 52                      push edx
:0044E344 E8F4C3FFFF              call 0044A73D
:0044E349 83C410                  add esp, 00000010
:0044E34C 6A00                    push 00000000
:0044E34E B9F0174B00              mov ecx, 004B17F0
:0044E353 E8681BFCFF              call 0040FEC0
:0044E358 50                      push eax
:0044E359 6A30                    push 00000030
:0044E35B 6A30                    push 00000030
:0044E35D 8B45EC                  mov eax, dword ptr [ebp-14]
:0044E360 C1E004                  shl eax, 04
:0044E363 83C018                  add eax, 00000018
:0044E366 50                      push eax
:0044E367 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0044E36A C1E104                  shl ecx, 04
:0044E36D 83C108                  add ecx, 00000008
:0044E370 51                      push ecx
:0044E371 E82EC8FFFF              call 0044ABA4
:0044E376 83C418                  add esp, 00000018
:0044E379 8B5508                  mov edx, dword ptr [ebp+08]
:0044E37C 52                      push edx
:0044E37D E8D6140000              call 0044F858
:0044E382 83C404                  add esp, 00000004
:0044E385 8845F4                  mov byte ptr [ebp-0C], al
:0044E388 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044E38B 25FF000000              and eax, 000000FF
:0044E390 83F824                  cmp eax, 00000024
:0044E393 7C26                    jl 0044E3BB
:0044E395 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044E398 81E1FF000000            and ecx, 000000FF
:0044E39E 51                      push ecx

* Possible StringData Ref from Data Obj ->"aΧǸ%d"
                                  |
:0044E39F 68E8EB4700              push 0047EBE8
:0044E3A4 68306D4800              push 00486D30
:0044E3A9 E82A88FBFF              call 00406BD8
:0044E3AE 83C40C                  add esp, 0000000C
:0044E3B1 E8981DFCFF              call 0041014E
:0044E3B6 E9D6000000              jmp 0044E491

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E393(C)
|
:0044E3BB 8B55EC                  mov edx, dword ptr [ebp-14]
:0044E3BE C1E204                  shl edx, 04
:0044E3C1 83C210                  add edx, 00000010
:0044E3C4 52                      push edx
:0044E3C5 8B45F0                  mov eax, dword ptr [ebp-10]
:0044E3C8 8D4C000A                lea ecx, dword ptr [eax+eax+0A]
:0044E3CC 51                      push ecx
:0044E3CD B9306D4800              mov ecx, 00486D30
:0044E3D2 E8347BFBFF              call 00405F0B
:0044E3D7 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044E3DA 81E2FF000000            and edx, 000000FF
:0044E3E0 8B049548E94700          mov eax, dword ptr [4*edx+0047E948]
:0044E3E7 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:0044E3E8 68F4EB4700              push 0047EBF4
:0044E3ED 68306D4800              push 00486D30
:0044E3F2 E8E187FBFF              call 00406BD8
:0044E3F7 83C40C                  add esp, 0000000C
:0044E3FA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0044E3FD C1E104                  shl ecx, 04
:0044E400 83C130                  add ecx, 00000030
:0044E403 51                      push ecx
:0044E404 8B55F0                  mov edx, dword ptr [ebp-10]
:0044E407 8D441208                lea eax, dword ptr [edx+edx+08]
:0044E40B 50                      push eax
:0044E40C B9306D4800              mov ecx, 00486D30
:0044E411 E8F57AFBFF              call 00405F0B
:0044E416 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0044E419 51                      push ecx
:0044E41A E8C0110000              call 0044F5DF
:0044E41F 83C404                  add esp, 00000004
:0044E422 85C0                    test eax, eax
:0044E424 7414                    je 0044E43A

* Possible StringData Ref from Data Obj ->"iH_"
                                  |
:0044E426 68F8EB4700              push 0047EBF8
:0044E42B 68306D4800              push 00486D30
:0044E430 E8A387FBFF              call 00406BD8
:0044E435 83C408                  add esp, 00000008
:0044E438 EB22                    jmp 0044E45C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E424(C)
|
:0044E43A 8A55F4                  mov dl, byte ptr [ebp-0C]
:0044E43D 52                      push edx
:0044E43E E81F110000              call 0044F562
:0044E443 83C404                  add esp, 00000004
:0044E446 85C0                    test eax, eax
:0044E448 7412                    je 0044E45C

* Possible StringData Ref from Data Obj ->"ಾ"
                                  |
:0044E44A 6804EC4700              push 0047EC04
:0044E44F 68306D4800              push 00486D30
:0044E454 E87F87FBFF              call 00406BD8
:0044E459 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044E438(U), :0044E448(C)
|
:0044E45C E8ED1CFCFF              call 0041014E
:0044E461 E88A12FEFF              call 0042F6F0
:0044E466 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044E469 E829000000              call 0044E497
:0044E46E E87D12FEFF              call 0042F6F0
:0044E473 6A01                    push 00000001
:0044E475 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044E478 E834E7FFFF              call 0044CBB1
:0044E47D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044E480 E8DDE6FFFF              call 0044CB62
:0044E485 6A01                    push 00000001
:0044E487 B9C0534B00              mov ecx, 004B53C0
:0044E48C E8CFF9FDFF              call 0042DE60

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044E260(U), :0044E3B6(U)
|
:0044E491 8BE5                    mov esp, ebp
:0044E493 5D                      pop ebp
:0044E494 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0044E469   
|
:0044E497 55                      push ebp
:0044E498 8BEC                    mov ebp, esp
:0044E49A 83EC08                  sub esp, 00000008
:0044E49D 894DF8                  mov dword ptr [ebp-08], ecx
:0044E4A0 C645FC0A                mov [ebp-04], 0A
:0044E4A4 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E4A7 25FF000000              and eax, 000000FF
:0044E4AC 50                      push eax
:0044E4AD E8D80AFEFF              call 0042EF8A
:0044E4B2 83C404                  add esp, 00000004
:0044E4B5 6A01                    push 00000001
:0044E4B7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E4BA E8F2E6FFFF              call 0044CBB1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044E4BF 6A04                    push 00000004
:0044E4C1 E8F510FEFF              call 0042F5BB
:0044E4C6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E51F(U)
|
:0044E4C9 E88D11FEFF              call 0042F65B
:0044E4CE 85C0                    test eax, eax
:0044E4D0 754F                    jne 0044E521
:0044E4D2 B9A83B4B00              mov ecx, 004B3BA8
:0044E4D7 E85414FDFF              call 0041F930
:0044E4DC 85C0                    test eax, eax
:0044E4DE 743F                    je 0044E51F
:0044E4E0 8A4DFC                  mov cl, byte ptr [ebp-04]
:0044E4E3 80F101                  xor cl, 01
:0044E4E6 884DFC                  mov byte ptr [ebp-04], cl
:0044E4E9 8B55FC                  mov edx, dword ptr [ebp-04]
:0044E4EC 81E2FF000000            and edx, 000000FF
:0044E4F2 52                      push edx
:0044E4F3 E8920AFEFF              call 0042EF8A
:0044E4F8 83C404                  add esp, 00000004
:0044E4FB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E4FE E8D5E6FFFF              call 0044CBD8
:0044E503 B9784E4B00              mov ecx, 004B4E78
:0044E508 E8E38AFEFF              call 00436FF0
:0044E50D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E510 E8FCE3FFFF              call 0044C911

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044E515 6A04                    push 00000004
:0044E517 E89F10FEFF              call 0042F5BB
:0044E51C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E4DE(C)
|
:0044E51F EBA8                    jmp 0044E4C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E4D0(C)
|
:0044E521 6A00                    push 00000000
:0044E523 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E526 E886E6FFFF              call 0044CBB1
:0044E52B 6A00                    push 00000000
:0044E52D E8580AFEFF              call 0042EF8A
:0044E532 83C404                  add esp, 00000004
:0044E535 8BE5                    mov esp, ebp
:0044E537 5D                      pop ebp
:0044E538 C3                      ret



* Referenced by a CALL at Address:
|:0044EB16   
|
:0044E539 55                      push ebp
:0044E53A 8BEC                    mov ebp, esp
:0044E53C 83EC08                  sub esp, 00000008
:0044E53F 56                      push esi
:0044E540 57                      push edi
:0044E541 894DF8                  mov dword ptr [ebp-08], ecx
:0044E544 8B45F8                  mov eax, dword ptr [ebp-08]
:0044E547 C6406000                mov [eax+60], 00
:0044E54B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E54E 81E1FF000000            and ecx, 000000FF
:0044E554 81F9FF000000            cmp ecx, 000000FF
:0044E55A 7519                    jne 0044E575
:0044E55C 8B55F8                  mov edx, dword ptr [ebp-08]
:0044E55F C7425830000000          mov [edx+58], 00000030
:0044E566 8B45F8                  mov eax, dword ptr [ebp-08]
:0044E569 C7405C30000000          mov [eax+5C], 00000030
:0044E570 E902010000              jmp 0044E677

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E55A(C)
|
:0044E575 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E578 E851C7FFFF              call 0044ACCE
:0044E57D 8BF0                    mov esi, eax
:0044E57F 8B7D08                  mov edi, dword ptr [ebp+08]
:0044E582 81E7FF000000            and edi, 000000FF
:0044E588 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E58B E882C7FFFF              call 0044AD12
:0044E590 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044E591 B903000000              mov ecx, 00000003
:0044E596 F7F9                    idiv ecx
:0044E598 2BF8                    sub edi, eax
:0044E59A 6BFF03                  imul edi, 00000003
:0044E59D C1E704                  shl edi, 04
:0044E5A0 03F7                    add esi, edi
:0044E5A2 8B55F8                  mov edx, dword ptr [ebp-08]
:0044E5A5 897258                  mov dword ptr [edx+58], esi
:0044E5A8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E5AB E82FC7FFFF              call 0044ACDF
:0044E5B0 8BF0                    mov esi, eax
:0044E5B2 8B7D0C                  mov edi, dword ptr [ebp+0C]
:0044E5B5 81E7FF000000            and edi, 000000FF
:0044E5BB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E5BE E860C7FFFF              call 0044AD23
:0044E5C3 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0044E5C4 B903000000              mov ecx, 00000003
:0044E5C9 F7F9                    idiv ecx
:0044E5CB 2BF8                    sub edi, eax
:0044E5CD 6BFF03                  imul edi, 00000003
:0044E5D0 C1E704                  shl edi, 04
:0044E5D3 03F7                    add esi, edi
:0044E5D5 8B55F8                  mov edx, dword ptr [ebp-08]
:0044E5D8 89725C                  mov dword ptr [edx+5C], esi
:0044E5DB 8B45F8                  mov eax, dword ptr [ebp-08]
:0044E5DE 8B405C                  mov eax, dword ptr [eax+5C]
:0044E5E1 99                      cdq
:0044E5E2 83E20F                  and edx, 0000000F
:0044E5E5 03C2                    add eax, edx
:0044E5E7 C1F804                  sar eax, 04
:0044E5EA 83E813                  sub eax, 00000013
:0044E5ED 8945FC                  mov dword ptr [ebp-04], eax
:0044E5F0 837DFC00                cmp dword ptr [ebp-04], 00000000
:0044E5F4 7C20                    jl 0044E616
:0044E5F6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E5F9 C1E104                  shl ecx, 04
:0044E5FC 8B55F8                  mov edx, dword ptr [ebp-08]
:0044E5FF 8B425C                  mov eax, dword ptr [edx+5C]
:0044E602 2BC1                    sub eax, ecx
:0044E604 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E607 89415C                  mov dword ptr [ecx+5C], eax
:0044E60A C705E4494B00F0FFFFFF    mov dword ptr [004B49E4], FFFFFFF0
:0044E614 EB0A                    jmp 0044E620

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E5F4(C)
|
:0044E616 C705E4494B0010000000    mov dword ptr [004B49E4], 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E614(U)
|
:0044E620 8B55F8                  mov edx, dword ptr [ebp-08]
:0044E623 8B4258                  mov eax, dword ptr [edx+58]
:0044E626 99                      cdq
:0044E627 83E20F                  and edx, 0000000F
:0044E62A 03C2                    add eax, edx
:0044E62C 8BC8                    mov ecx, eax
:0044E62E C1F904                  sar ecx, 04
:0044E631 8B55F8                  mov edx, dword ptr [ebp-08]
:0044E634 8B4214                  mov eax, dword ptr [edx+14]
:0044E637 99                      cdq
:0044E638 BE30000000              mov esi, 00000030
:0044E63D F7FE                    idiv esi
:0044E63F 3BC8                    cmp ecx, eax
:0044E641 7C1B                    jl 0044E65E
:0044E643 8B45F8                  mov eax, dword ptr [ebp-08]
:0044E646 8B4858                  mov ecx, dword ptr [eax+58]
:0044E649 83E970                  sub ecx, 00000070
:0044E64C 8B55F8                  mov edx, dword ptr [ebp-08]
:0044E64F 894A58                  mov dword ptr [edx+58], ecx
:0044E652 C705E0494B00F0FFFFFF    mov dword ptr [004B49E0], FFFFFFF0
:0044E65C EB19                    jmp 0044E677

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E641(C)
|
:0044E65E 8B45F8                  mov eax, dword ptr [ebp-08]
:0044E661 8B4858                  mov ecx, dword ptr [eax+58]
:0044E664 83C150                  add ecx, 00000050
:0044E667 8B55F8                  mov edx, dword ptr [ebp-08]
:0044E66A 894A58                  mov dword ptr [edx+58], ecx
:0044E66D C705E0494B0010000000    mov dword ptr [004B49E0], 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044E570(U), :0044E65C(U)
|
:0044E677 5F                      pop edi
:0044E678 5E                      pop esi
:0044E679 8BE5                    mov esp, ebp
:0044E67B 5D                      pop ebp
:0044E67C C20800                  ret 0008


:0044E67F 55                      push ebp
:0044E680 8BEC                    mov ebp, esp
:0044E682 83EC08                  sub esp, 00000008
:0044E685 894DF8                  mov dword ptr [ebp-08], ecx
:0044E688 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E68B E814EBFFFF              call 0044D1A4
:0044E690 8B4514                  mov eax, dword ptr [ebp+14]
:0044E693 50                      push eax
:0044E694 6A00                    push 00000000
:0044E696 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044E699 51                      push ecx
:0044E69A 8B550C                  mov edx, dword ptr [ebp+0C]
:0044E69D 81E2FF000000            and edx, 000000FF
:0044E6A3 83CA40                  or edx, 00000040
:0044E6A6 52                      push edx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0044E6A7 6A08                    push 00000008
:0044E6A9 8B4508                  mov eax, dword ptr [ebp+08]
:0044E6AC 50                      push eax
:0044E6AD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E6B0 8B515C                  mov edx, dword ptr [ecx+5C]
:0044E6B3 52                      push edx
:0044E6B4 8B45F8                  mov eax, dword ptr [ebp-08]
:0044E6B7 8B4858                  mov ecx, dword ptr [eax+58]
:0044E6BA 51                      push ecx
:0044E6BB E8201DFEFF              call 004303E0
:0044E6C0 83C420                  add esp, 00000020
:0044E6C3 8845FC                  mov byte ptr [ebp-04], al
:0044E6C6 8B55F8                  mov edx, dword ptr [ebp-08]
:0044E6C9 8A4260                  mov al, byte ptr [edx+60]
:0044E6CC 0401                    add al, 01
:0044E6CE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E6D1 884160                  mov byte ptr [ecx+60], al
:0044E6D4 8B55F8                  mov edx, dword ptr [ebp-08]
:0044E6D7 8B4258                  mov eax, dword ptr [edx+58]
:0044E6DA 0305E0494B00            add eax, dword ptr [004B49E0]
:0044E6E0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E6E3 894158                  mov dword ptr [ecx+58], eax
:0044E6E6 8B55F8                  mov edx, dword ptr [ebp-08]
:0044E6E9 8B425C                  mov eax, dword ptr [edx+5C]
:0044E6EC 0305E4494B00            add eax, dword ptr [004B49E4]
:0044E6F2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044E6F5 89415C                  mov dword ptr [ecx+5C], eax
:0044E6F8 8A45FC                  mov al, byte ptr [ebp-04]
:0044E6FB 8BE5                    mov esp, ebp
:0044E6FD 5D                      pop ebp
:0044E6FE C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0044EC24   , :0044ED95   
|
:0044E701 55                      push ebp
:0044E702 8BEC                    mov ebp, esp
:0044E704 51                      push ecx
:0044E705 894DFC                  mov dword ptr [ebp-04], ecx
:0044E708 6A01                    push 00000001
:0044E70A B9F8544B00              mov ecx, 004B54F8
:0044E70F E806AE0100              call 0046951A
:0044E714 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E717 8A4860                  mov cl, byte ptr [eax+60]
:0044E71A 80E901                  sub cl, 01
:0044E71D 8B55FC                  mov edx, dword ptr [ebp-04]
:0044E720 884A60                  mov byte ptr [edx+60], cl
:0044E723 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E726 8B4858                  mov ecx, dword ptr [eax+58]
:0044E729 2B0DE0494B00            sub ecx, dword ptr [004B49E0]
:0044E72F 8B55FC                  mov edx, dword ptr [ebp-04]
:0044E732 894A58                  mov dword ptr [edx+58], ecx
:0044E735 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E738 8B485C                  mov ecx, dword ptr [eax+5C]
:0044E73B 2B0DE4494B00            sub ecx, dword ptr [004B49E4]
:0044E741 8B55FC                  mov edx, dword ptr [ebp-04]
:0044E744 894A5C                  mov dword ptr [edx+5C], ecx
:0044E747 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E74A 33C9                    xor ecx, ecx
:0044E74C 8A4860                  mov cl, byte ptr [eax+60]
:0044E74F 85C9                    test ecx, ecx
:0044E751 752C                    jne 0044E77F
:0044E753 8B55FC                  mov edx, dword ptr [ebp-04]
:0044E756 8B4218                  mov eax, dword ptr [edx+18]
:0044E759 99                      cdq
:0044E75A 83E20F                  and edx, 0000000F
:0044E75D 03C2                    add eax, edx
:0044E75F C1F804                  sar eax, 04
:0044E762 50                      push eax
:0044E763 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E766 8B4014                  mov eax, dword ptr [eax+14]
:0044E769 99                      cdq
:0044E76A 83E20F                  and edx, 0000000F
:0044E76D 03C2                    add eax, edx
:0044E76F C1F804                  sar eax, 04
:0044E772 50                      push eax
:0044E773 6A00                    push 00000000
:0044E775 6A00                    push 00000000
:0044E777 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044E77A E8C9E1FFFF              call 0044C948

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E751(C)
|
:0044E77F 8BE5                    mov esp, ebp
:0044E781 5D                      pop ebp
:0044E782 C3                      ret


:0044E783 55                      push ebp
:0044E784 8BEC                    mov ebp, esp
:0044E786 51                      push ecx
:0044E787 894DFC                  mov dword ptr [ebp-04], ecx
:0044E78A 8BE5                    mov esp, ebp
:0044E78C 5D                      pop ebp
:0044E78D C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:004323B4   , :00432493   , :0043253B   , :004325D5   , :004326AB   
|:00432781   , :00432857   , :0043292D   , :004335D2   , :0043362C   
|:00433690   , :004338A3   , :004371B8   , :004371D4   , :004382BB   
|:004384F7   , :0043A409   , :0043A676   , :0043AAEA   , :0043CEE5   
|:0043D031   , :0043D051   , :0043D834   , :0043D88B   , :0043DB08   
|:0043DB5F   , :0043DD62   , :0043DE4E   , :0043DE8E   , :0043DEBA   
|:0043E1D4   , :0043E214   , :0043E4F2   , :0043E522   , :0043E7C4   
|:0043E80C   , :0043EAA0   , :0043EB11   , :0043EEDF   , :0043F136   
|:0043FD40   , :00440121   , :00440558   , :004405B0   , :004407D5   
|:00440945   , :00440B78   , :00440C61   , :00440DB1   , :00440F69   
|:00441B47   , :00444366   , :0044447C   , :004444AF   , :0045EA48   
|
:0044E790 55                      push ebp
:0044E791 8BEC                    mov ebp, esp
:0044E793 51                      push ecx
:0044E794 894DFC                  mov dword ptr [ebp-04], ecx
:0044E797 B978294B00              mov ecx, 004B2978
:0044E79C E80FE1FBFF              call 0040C8B0
:0044E7A1 2500800000              and eax, 00008000
:0044E7A6 85C0                    test eax, eax
:0044E7A8 0F8495000000            je 0044E843
:0044E7AE 8B4514                  mov eax, dword ptr [ebp+14]
:0044E7B1 25FF000000              and eax, 000000FF
:0044E7B6 83F801                  cmp eax, 00000001
:0044E7B9 753A                    jne 0044E7F5
:0044E7BB B978294B00              mov ecx, 004B2978
:0044E7C0 E8EBE0FBFF              call 0040C8B0
:0044E7C5 2500800000              and eax, 00008000
:0044E7CA 85C0                    test eax, eax
:0044E7CC 7425                    je 0044E7F3
:0044E7CE B9E0484B00              mov ecx, 004B48E0
:0044E7D3 E82A48FFFF              call 00443002
:0044E7D8 6A00                    push 00000000
:0044E7DA 68FF000000              push 000000FF
:0044E7DF B9E0484B00              mov ecx, 004B48E0
:0044E7E4 E8B24AFFFF              call 0044329B
:0044E7E9 B9E0484B00              mov ecx, 004B48E0
:0044E7EE E88E47FFFF              call 00442F81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E7CC(C)
|
:0044E7F3 EB4E                    jmp 0044E843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E7B9(C)
|
:0044E7F5 8B4D14                  mov ecx, dword ptr [ebp+14]
:0044E7F8 81E1FF000000            and ecx, 000000FF
:0044E7FE 83F903                  cmp ecx, 00000003
:0044E801 7518                    jne 0044E81B
:0044E803 8A5510                  mov dl, byte ptr [ebp+10]
:0044E806 52                      push edx
:0044E807 8A450C                  mov al, byte ptr [ebp+0C]
:0044E80A 50                      push eax
:0044E80B 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E80E 51                      push ecx
:0044E80F B948494B00              mov ecx, 004B4948
:0044E814 E837B1FFFF              call 00449950
:0044E819 EB28                    jmp 0044E843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044E801(C)
|
:0044E81B 8B5514                  mov edx, dword ptr [ebp+14]
:0044E81E 81E2FF000000            and edx, 000000FF
:0044E824 83FA02                  cmp edx, 00000002
:0044E827 751A                    jne 0044E843
:0044E829 8B4518                  mov eax, dword ptr [ebp+18]
:0044E82C 50                      push eax
:0044E82D 8A4D10                  mov cl, byte ptr [ebp+10]
:0044E830 51                      push ecx
:0044E831 8A550C                  mov dl, byte ptr [ebp+0C]
:0044E834 52                      push edx
:0044E835 8A4508                  mov al, byte ptr [ebp+08]
:0044E838 50                      push eax
:0044E839 B948494B00              mov ecx, 004B4948
:0044E83E E87C61FFFF              call 004449BF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044E7A8(C), :0044E7F3(U), :0044E819(U), :0044E827(C)
|
:0044E843 8BE5                    mov esp, ebp
:0044E845 5D                      pop ebp
:0044E846 C21400                  ret 0014



* Referenced by a CALL at Address:
|:0044D57E   
|
:0044E849 55                      push ebp
:0044E84A 8BEC                    mov ebp, esp
:0044E84C 51                      push ecx
:0044E84D 894DFC                  mov dword ptr [ebp-04], ecx
:0044E850 8BE5                    mov esp, ebp
:0044E852 5D                      pop ebp
:0044E853 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0043B2F2   , :0043B641   , :0043B64F   , :0043B65D   , :0043B66B   
|:0043BC6A   , :004564FE   , :0045650C   , :0045651A   
|
:0044E856 55                      push ebp
:0044E857 8BEC                    mov ebp, esp
:0044E859 51                      push ecx
:0044E85A 894DFC                  mov dword ptr [ebp-04], ecx
:0044E85D 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E860 8A4D08                  mov cl, byte ptr [ebp+08]
:0044E863 884861                  mov byte ptr [eax+61], cl
:0044E866 8BE5                    mov esp, ebp
:0044E868 5D                      pop ebp
:0044E869 C20400                  ret 0004


:0044E86C 55                      push ebp
:0044E86D 8BEC                    mov ebp, esp
:0044E86F 51                      push ecx
:0044E870 894DFC                  mov dword ptr [ebp-04], ecx
:0044E873 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E876 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E879 894874                  mov dword ptr [eax+74], ecx
:0044E87C 8BE5                    mov esp, ebp
:0044E87E 5D                      pop ebp
:0044E87F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042FC9F   , :0046DEA8   , :0046E15D   
|
:0044E882 55                      push ebp
:0044E883 8BEC                    mov ebp, esp
:0044E885 51                      push ecx
:0044E886 894DFC                  mov dword ptr [ebp-04], ecx
:0044E889 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E88C 8B00                    mov eax, dword ptr [eax]
:0044E88E 8BE5                    mov esp, ebp
:0044E890 5D                      pop ebp
:0044E891 C3                      ret



* Referenced by a CALL at Addresses:
|:0046D9A1   , :0046DAEB   
|
:0044E892 55                      push ebp
:0044E893 8BEC                    mov ebp, esp
:0044E895 51                      push ecx
:0044E896 894DFC                  mov dword ptr [ebp-04], ecx
:0044E899 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E89C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E89F 8908                    mov dword ptr [eax], ecx
:0044E8A1 8BE5                    mov esp, ebp
:0044E8A3 5D                      pop ebp
:0044E8A4 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0045C412   , :00467E91   , :0046E2CE   , :0046E43F   , :0046E49A   
|
:0044E8A7 55                      push ebp
:0044E8A8 8BEC                    mov ebp, esp
:0044E8AA 51                      push ecx
:0044E8AB 894DFC                  mov dword ptr [ebp-04], ecx
:0044E8AE 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E8B1 8B4004                  mov eax, dword ptr [eax+04]
:0044E8B4 8BE5                    mov esp, ebp
:0044E8B6 5D                      pop ebp
:0044E8B7 C3                      ret



* Referenced by a CALL at Addresses:
|:00467E5E   , :0046DA1E   , :0046E327   , :0046E621   
|
:0044E8B8 55                      push ebp
:0044E8B9 8BEC                    mov ebp, esp
:0044E8BB 51                      push ecx
:0044E8BC 894DFC                  mov dword ptr [ebp-04], ecx
:0044E8BF 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E8C2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E8C5 894804                  mov dword ptr [eax+04], ecx
:0044E8C8 8BE5                    mov esp, ebp
:0044E8CA 5D                      pop ebp
:0044E8CB C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042FD1C   , :0045C42D   , :00467EAF   , :0046E331   , :0046E434   
|:0046E6A1   
|
:0044E8CE 55                      push ebp
:0044E8CF 8BEC                    mov ebp, esp
:0044E8D1 51                      push ecx
:0044E8D2 894DFC                  mov dword ptr [ebp-04], ecx
:0044E8D5 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E8D8 8B4008                  mov eax, dword ptr [eax+08]
:0044E8DB 8BE5                    mov esp, ebp
:0044E8DD 5D                      pop ebp
:0044E8DE C3                      ret



* Referenced by a CALL at Addresses:
|:00467E85   , :0046DA2A   , :0046E38A   , :0046E828   
|
:0044E8DF 55                      push ebp
:0044E8E0 8BEC                    mov ebp, esp
:0044E8E2 51                      push ecx
:0044E8E3 894DFC                  mov dword ptr [ebp-04], ecx
:0044E8E6 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E8E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E8EC 894808                  mov dword ptr [eax+08], ecx
:0044E8EF 8BE5                    mov esp, ebp
:0044E8F1 5D                      pop ebp
:0044E8F2 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046E51F   , :0046E541   , :0046E5AC   , :0046E5CE   
|
:0044E8F5 55                      push ebp
:0044E8F6 8BEC                    mov ebp, esp
:0044E8F8 51                      push ecx
:0044E8F9 894DFC                  mov dword ptr [ebp-04], ecx
:0044E8FC 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E8FF 8B400C                  mov eax, dword ptr [eax+0C]
:0044E902 8BE5                    mov esp, ebp
:0044E904 5D                      pop ebp
:0044E905 C3                      ret



* Referenced by a CALL at Addresses:
|:0046D989   , :0046DC54   , :0046E2B6   
|
:0044E906 55                      push ebp
:0044E907 8BEC                    mov ebp, esp
:0044E909 51                      push ecx
:0044E90A 894DFC                  mov dword ptr [ebp-04], ecx
:0044E90D 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E910 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E913 89480C                  mov dword ptr [eax+0C], ecx
:0044E916 8BE5                    mov esp, ebp
:0044E918 5D                      pop ebp
:0044E919 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046E726   , :0046E748   , :0046E7B3   , :0046E7D5   
|
:0044E91C 55                      push ebp
:0044E91D 8BEC                    mov ebp, esp
:0044E91F 51                      push ecx
:0044E920 894DFC                  mov dword ptr [ebp-04], ecx
:0044E923 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E926 8B4010                  mov eax, dword ptr [eax+10]
:0044E929 8BE5                    mov esp, ebp
:0044E92B 5D                      pop ebp
:0044E92C C3                      ret



* Referenced by a CALL at Addresses:
|:0046D995   , :0046DC62   , :0046E2C4   
|
:0044E92D 55                      push ebp
:0044E92E 8BEC                    mov ebp, esp
:0044E930 51                      push ecx
:0044E931 894DFC                  mov dword ptr [ebp-04], ecx
:0044E934 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E937 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E93A 894810                  mov dword ptr [eax+10], ecx
:0044E93D 8BE5                    mov esp, ebp
:0044E93F 5D                      pop ebp
:0044E940 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042FC44   , :004316B8   , :004338C0   , :00434CA4   , :00434DD9   
|:00435331   , :00435AB4   , :00435AD6   , :00435D79   , :0043732E   
|:00442110   , :004421D9   , :0044403C   , :00449EA1   , :00449FA7   
|:00449FBA   , :0044ABC8   , :0044AC43   , :0044EBA9   , :0044EDB3   
|:0045840D   , :0045A45F   , :0045A6B2   , :0045C448   , :0045CD0D   
|:0045F3B7   , :004677A6   , :0046DB9A   , :0046DBCB   , :0046DC9F   
|:0046DDF0   , :0046DE1F   , :0046DEBA   , :0046E564   , :0046E591   
|
:0044E943 55                      push ebp
:0044E944 8BEC                    mov ebp, esp
:0044E946 51                      push ecx
:0044E947 894DFC                  mov dword ptr [ebp-04], ecx
:0044E94A 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E94D 8B4014                  mov eax, dword ptr [eax+14]
:0044E950 8BE5                    mov esp, ebp
:0044E952 5D                      pop ebp
:0044E953 C3                      ret



* Referenced by a CALL at Addresses:
|:0046D9B2   , :0046DACC   , :0046DE59   , :0046E204   
|
:0044E954 55                      push ebp
:0044E955 8BEC                    mov ebp, esp
:0044E957 51                      push ecx
:0044E958 894DFC                  mov dword ptr [ebp-04], ecx
:0044E95B 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E95E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E961 894814                  mov dword ptr [eax+14], ecx
:0044E964 8BE5                    mov esp, ebp
:0044E966 5D                      pop ebp
:0044E967 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0042FC6B   , :0042FD82   , :0042FDDA   , :004316CD   , :00434CBF   
|:00434DF5   , :00435B0D   , :00435B2F   , :00435D88   , :00442105   
|:004421CE   , :00449EB9   , :0044A0EF   , :0044ABAC   , :0044AC27   
|:0044EB95   , :0044ED9F   , :0045A443   , :0045A696   , :0045C46B   
|:0045CD22   , :0046DBF8   , :0046DC2C   , :0046DC94   , :0046DE05   
|:0046DE34   , :0046DECA   , :0046E76B   , :0046E798   
|
:0044E96A 55                      push ebp
:0044E96B 8BEC                    mov ebp, esp
:0044E96D 51                      push ecx
:0044E96E 894DFC                  mov dword ptr [ebp-04], ecx
:0044E971 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E974 8B4018                  mov eax, dword ptr [eax+18]
:0044E977 8BE5                    mov esp, ebp
:0044E979 5D                      pop ebp
:0044E97A C3                      ret



* Referenced by a CALL at Addresses:
|:0046D9DE   , :0046DADF   , :0046DE6E   , :0046E212   
|
:0044E97B 55                      push ebp
:0044E97C 8BEC                    mov ebp, esp
:0044E97E 51                      push ecx
:0044E97F 894DFC                  mov dword ptr [ebp-04], ecx
:0044E982 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E985 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E988 894818                  mov dword ptr [eax+18], ecx
:0044E98B 8BE5                    mov esp, ebp
:0044E98D 5D                      pop ebp
:0044E98E C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046DE4E   
|
:0044E991 55                      push ebp
:0044E992 8BEC                    mov ebp, esp
:0044E994 51                      push ecx
:0044E995 894DFC                  mov dword ptr [ebp-04], ecx
:0044E998 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E99B 8B401C                  mov eax, dword ptr [eax+1C]
:0044E99E 8BE5                    mov esp, ebp
:0044E9A0 5D                      pop ebp
:0044E9A1 C3                      ret



* Referenced by a CALL at Addresses:
|:0045CD18   , :0046DDFB   , :0046DE2A   
|
:0044E9A2 55                      push ebp
:0044E9A3 8BEC                    mov ebp, esp
:0044E9A5 51                      push ecx
:0044E9A6 894DFC                  mov dword ptr [ebp-04], ecx
:0044E9A9 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E9AC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E9AF 89481C                  mov dword ptr [eax+1C], ecx
:0044E9B2 8BE5                    mov esp, ebp
:0044E9B4 5D                      pop ebp
:0044E9B5 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046DE63   
|
:0044E9B8 55                      push ebp
:0044E9B9 8BEC                    mov ebp, esp
:0044E9BB 51                      push ecx
:0044E9BC 894DFC                  mov dword ptr [ebp-04], ecx
:0044E9BF 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E9C2 8B4020                  mov eax, dword ptr [eax+20]
:0044E9C5 8BE5                    mov esp, ebp
:0044E9C7 5D                      pop ebp
:0044E9C8 C3                      ret



* Referenced by a CALL at Addresses:
|:0045CD2D   , :0046DE10   , :0046DE3F   
|
:0044E9C9 55                      push ebp
:0044E9CA 8BEC                    mov ebp, esp
:0044E9CC 51                      push ecx
:0044E9CD 894DFC                  mov dword ptr [ebp-04], ecx
:0044E9D0 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E9D3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E9D6 894820                  mov dword ptr [eax+20], ecx
:0044E9D9 8BE5                    mov esp, ebp
:0044E9DB 5D                      pop ebp
:0044E9DC C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046DB5D   , :0046DF76   , :0046DF96   
|
:0044E9DF 55                      push ebp
:0044E9E0 8BEC                    mov ebp, esp
:0044E9E2 51                      push ecx
:0044E9E3 894DFC                  mov dword ptr [ebp-04], ecx
:0044E9E6 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E9E9 8B4024                  mov eax, dword ptr [eax+24]
:0044E9EC 8BE5                    mov esp, ebp
:0044E9EE 5D                      pop ebp
:0044E9EF C3                      ret



* Referenced by a CALL at Addresses:
|:0046D945   , :0046DA62   
|
:0044E9F0 55                      push ebp
:0044E9F1 8BEC                    mov ebp, esp
:0044E9F3 51                      push ecx
:0044E9F4 894DFC                  mov dword ptr [ebp-04], ecx
:0044E9F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0044E9FA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044E9FD 894824                  mov dword ptr [eax+24], ecx
:0044EA00 8BE5                    mov esp, ebp
:0044EA02 5D                      pop ebp
:0044EA03 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046DB6D   , :0046DFBE   , :0046DFDE   , :0046E038   , :0046E055   
|
:0044EA06 55                      push ebp
:0044EA07 8BEC                    mov ebp, esp
:0044EA09 51                      push ecx
:0044EA0A 894DFC                  mov dword ptr [ebp-04], ecx
:0044EA0D 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EA10 8B4028                  mov eax, dword ptr [eax+28]
:0044EA13 8BE5                    mov esp, ebp
:0044EA15 5D                      pop ebp
:0044EA16 C3                      ret



* Referenced by a CALL at Addresses:
|:0046D96F   , :0046DA9A   
|
:0044EA17 55                      push ebp
:0044EA18 8BEC                    mov ebp, esp
:0044EA1A 51                      push ecx
:0044EA1B 894DFC                  mov dword ptr [ebp-04], ecx
:0044EA1E 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EA21 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EA24 894828                  mov dword ptr [eax+28], ecx
:0044EA27 8BE5                    mov esp, ebp
:0044EA29 5D                      pop ebp
:0044EA2A C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046DA34   , :0046DA51   
|
:0044EA2D 55                      push ebp
:0044EA2E 8BEC                    mov ebp, esp
:0044EA30 51                      push ecx
:0044EA31 894DFC                  mov dword ptr [ebp-04], ecx
:0044EA34 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EA37 8B402C                  mov eax, dword ptr [eax+2C]
:0044EA3A 8BE5                    mov esp, ebp
:0044EA3C 5D                      pop ebp
:0044EA3D C3                      ret



* Referenced by a CALL at Address:
|:0046D937   
|
:0044EA3E 55                      push ebp
:0044EA3F 8BEC                    mov ebp, esp
:0044EA41 51                      push ecx
:0044EA42 894DFC                  mov dword ptr [ebp-04], ecx
:0044EA45 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EA48 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EA4B 89482C                  mov dword ptr [eax+2C], ecx
:0044EA4E 8BE5                    mov esp, ebp
:0044EA50 5D                      pop ebp
:0044EA51 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046DA6C   , :0046DA89   
|
:0044EA54 55                      push ebp
:0044EA55 8BEC                    mov ebp, esp
:0044EA57 51                      push ecx
:0044EA58 894DFC                  mov dword ptr [ebp-04], ecx
:0044EA5B 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EA5E 8B4030                  mov eax, dword ptr [eax+30]
:0044EA61 8BE5                    mov esp, ebp
:0044EA63 5D                      pop ebp
:0044EA64 C3                      ret



* Referenced by a CALL at Address:
|:0046D961   
|
:0044EA65 55                      push ebp
:0044EA66 8BEC                    mov ebp, esp
:0044EA68 51                      push ecx
:0044EA69 894DFC                  mov dword ptr [ebp-04], ecx
:0044EA6C 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EA6F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EA72 894830                  mov dword ptr [eax+30], ecx
:0044EA75 8BE5                    mov esp, ebp
:0044EA77 5D                      pop ebp
:0044EA78 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0045F3E9   , :0045F47B   , :0045F69D   , :00467B2C   , :0046DB8E   
|:0046DBBF   , :0046DF85   , :0046DFA8   , :0046E21C   
|
:0044EA7B 55                      push ebp
:0044EA7C 8BEC                    mov ebp, esp
:0044EA7E 51                      push ecx
:0044EA7F 894DFC                  mov dword ptr [ebp-04], ecx
:0044EA82 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EA85 8B4034                  mov eax, dword ptr [eax+34]
:0044EA88 8BE5                    mov esp, ebp
:0044EA8A 5D                      pop ebp
:0044EA8B C3                      ret



* Referenced by a CALL at Addresses:
|:0046D953   , :0046DAAA   
|
:0044EA8C 55                      push ebp
:0044EA8D 8BEC                    mov ebp, esp
:0044EA8F 51                      push ecx
:0044EA90 894DFC                  mov dword ptr [ebp-04], ecx
:0044EA93 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EA96 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EA99 894834                  mov dword ptr [eax+34], ecx
:0044EA9C 8BE5                    mov esp, ebp
:0044EA9E 5D                      pop ebp
:0044EA9F C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0045F402   , :0045F467   , :0045F4EE   , :0045F689   , :00467B4F   
|:0046DBEC   , :0046DC20   , :0046DFCD   , :0046DFF0   , :0046E229   
|
:0044EAA2 55                      push ebp
:0044EAA3 8BEC                    mov ebp, esp
:0044EAA5 51                      push ecx
:0044EAA6 894DFC                  mov dword ptr [ebp-04], ecx
:0044EAA9 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EAAC 8B4038                  mov eax, dword ptr [eax+38]
:0044EAAF 8BE5                    mov esp, ebp
:0044EAB1 5D                      pop ebp
:0044EAB2 C3                      ret



* Referenced by a CALL at Addresses:
|:0046D97D   , :0046DABB   
|
:0044EAB3 55                      push ebp
:0044EAB4 8BEC                    mov ebp, esp
:0044EAB6 51                      push ecx
:0044EAB7 894DFC                  mov dword ptr [ebp-04], ecx
:0044EABA 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EABD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EAC0 894838                  mov dword ptr [eax+38], ecx
:0044EAC3 8BE5                    mov esp, ebp
:0044EAC5 5D                      pop ebp
:0044EAC6 C20400                  ret 0004


:0044EAC9 CC                      int 03
:0044EACA CC                      int 03
:0044EACB CC                      int 03
:0044EACC CC                      int 03
:0044EACD CC                      int 03
:0044EACE CC                      int 03
:0044EACF CC                      int 03

* Referenced by a CALL at Addresses:
|:0044AE57   , :0044E26C   , :00467107   , :0046DF52   , :0046E476   
|:0046E67D   
|
:0044EAD0 55                      push ebp
:0044EAD1 8BEC                    mov ebp, esp
:0044EAD3 51                      push ecx
:0044EAD4 894DFC                  mov dword ptr [ebp-04], ecx
:0044EAD7 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EADA 8B4048                  mov eax, dword ptr [eax+48]
:0044EADD 8BE5                    mov esp, ebp
:0044EADF 5D                      pop ebp
:0044EAE0 C3                      ret


:0044EAE1 CC                      int 03
:0044EAE2 CC                      int 03
:0044EAE3 CC                      int 03
:0044EAE4 CC                      int 03
:0044EAE5 CC                      int 03
:0044EAE6 CC                      int 03
:0044EAE7 CC                      int 03
:0044EAE8 CC                      int 03
:0044EAE9 CC                      int 03
:0044EAEA CC                      int 03
:0044EAEB CC                      int 03
:0044EAEC CC                      int 03
:0044EAED CC                      int 03
:0044EAEE CC                      int 03
:0044EAEF CC                      int 03

* Referenced by a CALL at Address:
|:0045E3E2   
|
:0044EAF0 55                      push ebp
:0044EAF1 8BEC                    mov ebp, esp
:0044EAF3 83EC10                  sub esp, 00000010
:0044EAF6 894DF4                  mov dword ptr [ebp-0C], ecx
:0044EAF9 C645FC00                mov [ebp-04], 00
:0044EAFD C745F800000000          mov [ebp-08], 00000000
:0044EB04 8B4508                  mov eax, dword ptr [ebp+08]
:0044EB07 8A4801                  mov cl, byte ptr [eax+01]
:0044EB0A 51                      push ecx
:0044EB0B 8B5508                  mov edx, dword ptr [ebp+08]
:0044EB0E 8A02                    mov al, byte ptr [edx]
:0044EB10 50                      push eax
:0044EB11 B958494B00              mov ecx, 004B4958
:0044EB16 E81EFAFFFF              call 0044E539

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EC31(U)
|
:0044EB1B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EB1E 81E1FF000000            and ecx, 000000FF
:0044EB24 81F9FF000000            cmp ecx, 000000FF
:0044EB2A 0F8406010000            je 0044EC36
:0044EB30 8B5508                  mov edx, dword ptr [ebp+08]
:0044EB33 8A4201                  mov al, byte ptr [edx+01]
:0044EB36 50                      push eax
:0044EB37 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EB3A 8A11                    mov dl, byte ptr [ecx]
:0044EB3C 52                      push edx
:0044EB3D B9A84C4B00              mov ecx, 004B4CA8
:0044EB42 E8B89B0000              call 004586FF
:0044EB47 8B4508                  mov eax, dword ptr [ebp+08]
:0044EB4A 668B08                  mov cx, word ptr [eax]
:0044EB4D 51                      push ecx
:0044EB4E E8F9060000              call 0044F24C
:0044EB53 83C404                  add esp, 00000004
:0044EB56 85C0                    test eax, eax
:0044EB58 7514                    jne 0044EB6E

* Possible StringData Ref from Data Obj ->"ӥD礤@ӤH]S"
                                  |
:0044EB5A 6834EC4700              push 0047EC34

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044EB5F 6A05                    push 00000005
:0044EB61 E8CD28FEFF              call 00431433
:0044EB66 83C408                  add esp, 00000008
:0044EB69 E9C8000000              jmp 0044EC36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EB58(C)
|
:0044EB6E E852AE0000              call 004599C5
:0044EB73 8845FC                  mov byte ptr [ebp-04], al
:0044EB76 E8DB880200              call 00477456
:0044EB7B 8B55FC                  mov edx, dword ptr [ebp-04]
:0044EB7E 81E2FF000000            and edx, 000000FF
:0044EB84 81FAFF000000            cmp edx, 000000FF
:0044EB8A 0F848F000000            je 0044EC1F
:0044EB90 B958494B00              mov ecx, 004B4958
:0044EB95 E8D0FDFFFF              call 0044E96A
:0044EB9A 99                      cdq
:0044EB9B 83E20F                  and edx, 0000000F
:0044EB9E 03C2                    add eax, edx
:0044EBA0 C1F804                  sar eax, 04
:0044EBA3 50                      push eax
:0044EBA4 B958494B00              mov ecx, 004B4958
:0044EBA9 E895FDFFFF              call 0044E943
:0044EBAE 99                      cdq
:0044EBAF 83E20F                  and edx, 0000000F
:0044EBB2 03C2                    add eax, edx
:0044EBB4 C1F804                  sar eax, 04
:0044EBB7 50                      push eax
:0044EBB8 6A00                    push 00000000
:0044EBBA 6A00                    push 00000000
:0044EBBC B958494B00              mov ecx, 004B4958
:0044EBC1 E882DDFFFF              call 0044C948
:0044EBC6 8A45FC                  mov al, byte ptr [ebp-04]
:0044EBC9 8845F0                  mov byte ptr [ebp-10], al
:0044EBCC 807DF000                cmp byte ptr [ebp-10], 00
:0044EBD0 740E                    je 0044EBE0
:0044EBD2 807DF001                cmp byte ptr [ebp-10], 01
:0044EBD6 741D                    je 0044EBF5
:0044EBD8 807DF002                cmp byte ptr [ebp-10], 02
:0044EBDC 7430                    je 0044EC0E
:0044EBDE EB3B                    jmp 0044EC1B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EBD0(C)
|
:0044EBE0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EBE3 668B11                  mov dx, word ptr [ecx]
:0044EBE6 52                      push edx
:0044EBE7 E8A4000000              call 0044EC90
:0044EBEC 83C404                  add esp, 00000004
:0044EBEF C645FCFF                mov [ebp-04], FF
:0044EBF3 EB2A                    jmp 0044EC1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EBD6(C)
|
:0044EBF5 8A450C                  mov al, byte ptr [ebp+0C]
:0044EBF8 50                      push eax
:0044EBF9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EBFC 668B11                  mov dx, word ptr [ecx]
:0044EBFF 52                      push edx
:0044EC00 E8FA050000              call 0044F1FF
:0044EC05 83C408                  add esp, 00000008
:0044EC08 C645FCFF                mov [ebp-04], FF
:0044EC0C EB11                    jmp 0044EC1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EBDC(C)
|
:0044EC0E C745F801000000          mov [ebp-08], 00000001
:0044EC15 C645FCFF                mov [ebp-04], FF
:0044EC19 EB04                    jmp 0044EC1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EBDE(U)
|
:0044EC1B C645FCFF                mov [ebp-04], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044EB8A(C), :0044EBF3(U), :0044EC0C(U), :0044EC19(U)
|
:0044EC1F B958494B00              mov ecx, 004B4958
:0044EC24 E8D8FAFFFF              call 0044E701
:0044EC29 837DF800                cmp dword ptr [ebp-08], 00000000
:0044EC2D 7402                    je 0044EC31
:0044EC2F EB05                    jmp 0044EC36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EC2D(C)
|
:0044EC31 E9E5FEFFFF              jmp 0044EB1B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044EB2A(C), :0044EB69(U), :0044EC2F(U)
|
:0044EC36 8B45F8                  mov eax, dword ptr [ebp-08]
:0044EC39 8BE5                    mov esp, ebp
:0044EC3B 5D                      pop ebp
:0044EC3C C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0044ECA4   , :00458AD8   
|
:0044EC3F 55                      push ebp
:0044EC40 8BEC                    mov ebp, esp
:0044EC42 83EC08                  sub esp, 00000008
:0044EC45 C745F800000000          mov [ebp-08], 00000000
:0044EC4C C745FC00000000          mov [ebp-04], 00000000
:0044EC53 EB09                    jmp 0044EC5E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EC87(U)
|
:0044EC55 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EC58 83C001                  add eax, 00000001
:0044EC5B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EC53(U)
|
:0044EC5E 837DFC1E                cmp dword ptr [ebp-04], 0000001E
:0044EC62 7325                    jnb 0044EC89
:0044EC64 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EC67 6BC924                  imul ecx, 00000024
:0044EC6A 81C1B83B4B00            add ecx, 004B3BB8
:0044EC70 E85BD40000              call 0045C0D0
:0044EC75 25FF000000              and eax, 000000FF
:0044EC7A 85C0                    test eax, eax
:0044EC7C 7509                    jne 0044EC87
:0044EC7E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044EC81 83C101                  add ecx, 00000001
:0044EC84 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EC7C(C)
|
:0044EC87 EBCC                    jmp 0044EC55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EC62(C)
|
:0044EC89 8B45F8                  mov eax, dword ptr [ebp-08]
:0044EC8C 8BE5                    mov esp, ebp
:0044EC8E 5D                      pop ebp
:0044EC8F C3                      ret



* Referenced by a CALL at Address:
|:0044EBE7   
|
:0044EC90 55                      push ebp
:0044EC91 8BEC                    mov ebp, esp
:0044EC93 83EC18                  sub esp, 00000018
:0044EC96 C745F000000000          mov [ebp-10], 00000000
:0044EC9D C745FC00000000          mov [ebp-04], 00000000
:0044ECA4 E896FFFFFF              call 0044EC3F
:0044ECA9 85C0                    test eax, eax
:0044ECAB 7514                    jne 0044ECC1

* Possible StringData Ref from Data Obj ->"AW}F"
                                  |
:0044ECAD 684CEC4700              push 0047EC4C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0044ECB2 6A05                    push 00000005
:0044ECB4 E87A27FEFF              call 00431433
:0044ECB9 83C408                  add esp, 00000008
:0044ECBC E90F010000              jmp 0044EDD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ECAB(C)
|
:0044ECC1 668B4508                mov ax, word ptr [ebp+08]
:0044ECC5 50                      push eax
:0044ECC6 E809010000              call 0044EDD4
:0044ECCB 83C404                  add esp, 00000004
:0044ECCE 8945F0                  mov dword ptr [ebp-10], eax
:0044ECD1 837DF000                cmp dword ptr [ebp-10], 00000000
:0044ECD5 7705                    ja 0044ECDC
:0044ECD7 E9F4000000              jmp 0044EDD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ECD5(C)
|
:0044ECDC 68F04C4B00              push 004B4CF0
:0044ECE1 E891AE0000              call 00459B77
:0044ECE6 83C404                  add esp, 00000004
:0044ECE9 8945F4                  mov dword ptr [ebp-0C], eax
:0044ECEC C745E800000000          mov [ebp-18], 00000000
:0044ECF3 C745F800000000          mov [ebp-08], 00000000
:0044ECFA C645ECFF                mov [ebp-14], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ED86(U)
|
:0044ECFE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044ED01 833900                  cmp dword ptr [ecx], 00000000
:0044ED04 0F8481000000            je 0044ED8B
:0044ED0A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044ED0D 8B02                    mov eax, dword ptr [edx]
:0044ED0F 8945E8                  mov dword ptr [ebp-18], eax
:0044ED12 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044ED15 51                      push ecx
:0044ED16 E8BB010000              call 0044EED6
:0044ED1B 83C404                  add esp, 00000004
:0044ED1E 8945F8                  mov dword ptr [ebp-08], eax
:0044ED21 837DF800                cmp dword ptr [ebp-08], 00000000
:0044ED25 7505                    jne 0044ED2C
:0044ED27 E9A4000000              jmp 0044EDD0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ED25(C)
|
:0044ED2C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044ED2F E84C44FBFF              call 00403180
:0044ED34 50                      push eax
:0044ED35 E869DD0100              call 0046CAA3
:0044ED3A 83C404                  add esp, 00000004
:0044ED3D 8B55F8                  mov edx, dword ptr [ebp-08]
:0044ED40 52                      push edx
:0044ED41 668B4508                mov ax, word ptr [ebp+08]
:0044ED45 50                      push eax
:0044ED46 E84C020000              call 0044EF97
:0044ED4B 83C408                  add esp, 00000008
:0044ED4E 85C0                    test eax, eax
:0044ED50 752B                    jne 0044ED7D
:0044ED52 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044ED55 E88632FFFF              call 00441FE0
:0044ED5A 8845EC                  mov byte ptr [ebp-14], al
:0044ED5D 8A4DEC                  mov cl, byte ptr [ebp-14]
:0044ED60 51                      push ecx
:0044ED61 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044ED64 E8E554FEFF              call 0043424E
:0044ED69 6A00                    push 00000000
:0044ED6B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044ED6E E8E344FEFF              call 00433256
:0044ED73 6A00                    push 00000000
:0044ED75 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044ED78 E89844FEFF              call 00433215

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ED50(C)
|
:0044ED7D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044ED80 83C204                  add edx, 00000004
:0044ED83 8955F4                  mov dword ptr [ebp-0C], edx
:0044ED86 E973FFFFFF              jmp 0044ECFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044ED04(C)
|
:0044ED8B E841DC0100              call 0046C9D1
:0044ED90 B958494B00              mov ecx, 004B4958
:0044ED95 E867F9FFFF              call 0044E701
:0044ED9A B958494B00              mov ecx, 004B4958
:0044ED9F E8C6FBFFFF              call 0044E96A
:0044EDA4 99                      cdq
:0044EDA5 83E20F                  and edx, 0000000F
:0044EDA8 03C2                    add eax, edx
:0044EDAA C1F804                  sar eax, 04
:0044EDAD 50                      push eax
:0044EDAE B958494B00              mov ecx, 004B4958
:0044EDB3 E88BFBFFFF              call 0044E943
:0044EDB8 99                      cdq
:0044EDB9 83E20F                  and edx, 0000000F
:0044EDBC 03C2                    add eax, edx
:0044EDBE C1F804                  sar eax, 04
:0044EDC1 50                      push eax
:0044EDC2 6A00                    push 00000000
:0044EDC4 6A00                    push 00000000
:0044EDC6 B958494B00              mov ecx, 004B4958
:0044EDCB E878DBFFFF              call 0044C948

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044ECBC(U), :0044ECD7(U), :0044ED27(U)
|
:0044EDD0 8BE5                    mov esp, ebp
:0044EDD2 5D                      pop ebp
:0044EDD3 C3                      ret



* Referenced by a CALL at Address:
|:0044ECC6   
|
:0044EDD4 55                      push ebp
:0044EDD5 8BEC                    mov ebp, esp
:0044EDD7 83EC08                  sub esp, 00000008
:0044EDDA C745F800000000          mov [ebp-08], 00000000
:0044EDE1 C745FC00000000          mov [ebp-04], 00000000
:0044EDE8 EB09                    jmp 0044EDF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EE70(U)
|
:0044EDEA 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EDED 83C001                  add eax, 00000001
:0044EDF0 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EDE8(U)
|
:0044EDF3 817DFC20030000          cmp dword ptr [ebp-04], 00000320
:0044EDFA 7379                    jnb 0044EE75
:0044EDFC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EDFF 6BC950                  imul ecx, 00000050
:0044EE02 81C1787F4900            add ecx, 00497F78
:0044EE08 E87310FCFF              call 0040FE80
:0044EE0D 25FF000000              and eax, 000000FF
:0044EE12 85C0                    test eax, eax
:0044EE14 7552                    jne 0044EE68
:0044EE16 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE19 6BC950                  imul ecx, 00000050
:0044EE1C 81C1787F4900            add ecx, 00497F78
:0044EE22 E809DBFBFF              call 0040C930
:0044EE27 25FF000000              and eax, 000000FF
:0044EE2C 85C0                    test eax, eax
:0044EE2E 7538                    jne 0044EE68
:0044EE30 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EE33 6BC950                  imul ecx, 00000050
:0044EE36 81C1787F4900            add ecx, 00497F78
:0044EE3C 51                      push ecx
:0044EE3D E848000000              call 0044EE8A
:0044EE42 83C404                  add esp, 00000004
:0044EE45 85C0                    test eax, eax
:0044EE47 751F                    jne 0044EE68
:0044EE49 8B55FC                  mov edx, dword ptr [ebp-04]
:0044EE4C 6BD250                  imul edx, 00000050
:0044EE4F 81C2787F4900            add edx, 00497F78
:0044EE55 8B45F8                  mov eax, dword ptr [ebp-08]
:0044EE58 891485F04C4B00          mov dword ptr [4*eax+004B4CF0], edx
:0044EE5F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044EE62 83C101                  add ecx, 00000001
:0044EE65 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044EE14(C), :0044EE2E(C), :0044EE47(C)
|
:0044EE68 837DF830                cmp dword ptr [ebp-08], 00000030
:0044EE6C 7202                    jb 0044EE70
:0044EE6E EB05                    jmp 0044EE75

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EE6C(C)
|
:0044EE70 E975FFFFFF              jmp 0044EDEA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044EDFA(C), :0044EE6E(U)
|
:0044EE75 8B55F8                  mov edx, dword ptr [ebp-08]
:0044EE78 C70495F04C4B0000000000  mov dword ptr [4*edx+004B4CF0], 00000000
:0044EE83 8B45F8                  mov eax, dword ptr [ebp-08]
:0044EE86 8BE5                    mov esp, ebp
:0044EE88 5D                      pop ebp
:0044EE89 C3                      ret



* Referenced by a CALL at Addresses:
|:0044EE3D   , :0044F410   
|
:0044EE8A 55                      push ebp
:0044EE8B 8BEC                    mov ebp, esp
:0044EE8D 51                      push ecx
:0044EE8E 56                      push esi
:0044EE8F C745FC00000000          mov [ebp-04], 00000000
:0044EE96 EB09                    jmp 0044EEA1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EECD(U)
|
:0044EE98 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EE9B 83C001                  add eax, 00000001
:0044EE9E 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EE96(U)
|
:0044EEA1 837DFC5A                cmp dword ptr [ebp-04], 0000005A
:0044EEA5 7328                    jnb 0044EECF
:0044EEA7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EEAA 6BC924                  imul ecx, 00000024
:0044EEAD 81C1B83B4B00            add ecx, 004B3BB8
:0044EEB3 E8287BFEFF              call 004369E0
:0044EEB8 8BF0                    mov esi, eax
:0044EEBA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EEBD E8BE42FBFF              call 00403180
:0044EEC2 3BF0                    cmp esi, eax
:0044EEC4 7507                    jne 0044EECD
:0044EEC6 B801000000              mov eax, 00000001
:0044EECB EB04                    jmp 0044EED1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EEC4(C)
|
:0044EECD EBC9                    jmp 0044EE98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EEA5(C)
|
:0044EECF 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EECB(U)
|
:0044EED1 5E                      pop esi
:0044EED2 8BE5                    mov esp, ebp
:0044EED4 5D                      pop ebp
:0044EED5 C3                      ret



* Referenced by a CALL at Address:
|:0044ED16   
|
:0044EED6 55                      push ebp
:0044EED7 8BEC                    mov ebp, esp
:0044EED9 51                      push ecx
:0044EEDA E86D000000              call 0044EF4C
:0044EEDF 8945FC                  mov dword ptr [ebp-04], eax
:0044EEE2 837DFC00                cmp dword ptr [ebp-04], 00000000
:0044EEE6 7504                    jne 0044EEEC
:0044EEE8 33C0                    xor eax, eax
:0044EEEA EB5C                    jmp 0044EF48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EEE6(C)
|
:0044EEEC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EEEF E88C42FBFF              call 00403180
:0044EEF4 50                      push eax
:0044EEF5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EEF8 E8934FFEFF              call 00433E90
:0044EEFD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EF00 E8E52EFBFF              call 00401DEA
:0044EF05 50                      push eax
:0044EF06 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF09 E80743FEFF              call 00433215
:0044EF0E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044EF11 E8052FFBFF              call 00401E1B
:0044EF16 50                      push eax
:0044EF17 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF1A E83743FEFF              call 00433256
:0044EF1F 6A00                    push 00000000
:0044EF21 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF24 E8C531FEFF              call 004320EE

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0044EF29 6A07                    push 00000007
:0044EF2B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF2E E8C862FEFF              call 004351FB
:0044EF33 6A01                    push 00000001
:0044EF35 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF38 E8C37DFEFF              call 00436D00
:0044EF3D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF40 E82456FEFF              call 00434569
:0044EF45 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EEEA(U)
|
:0044EF48 8BE5                    mov esp, ebp
:0044EF4A 5D                      pop ebp
:0044EF4B C3                      ret



* Referenced by a CALL at Address:
|:0044EEDA   
|
:0044EF4C 55                      push ebp
:0044EF4D 8BEC                    mov ebp, esp
:0044EF4F 51                      push ecx
:0044EF50 C745FC00000000          mov [ebp-04], 00000000
:0044EF57 EB09                    jmp 0044EF62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EF8F(U)
|
:0044EF59 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EF5C 83C001                  add eax, 00000001
:0044EF5F 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EF57(U)
|
:0044EF62 837DFC1E                cmp dword ptr [ebp-04], 0000001E
:0044EF66 7329                    jnb 0044EF91
:0044EF68 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EF6B 6BC924                  imul ecx, 00000024
:0044EF6E 81C1B83B4B00            add ecx, 004B3BB8
:0044EF74 E857D10000              call 0045C0D0
:0044EF79 25FF000000              and eax, 000000FF
:0044EF7E 85C0                    test eax, eax
:0044EF80 750D                    jne 0044EF8F
:0044EF82 8B45FC                  mov eax, dword ptr [ebp-04]
:0044EF85 6BC024                  imul eax, 00000024
:0044EF88 05B83B4B00              add eax, 004B3BB8
:0044EF8D EB04                    jmp 0044EF93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EF80(C)
|
:0044EF8F EBC8                    jmp 0044EF59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EF66(C)
|
:0044EF91 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044EF8D(U)
|
:0044EF93 8BE5                    mov esp, ebp
:0044EF95 5D                      pop ebp
:0044EF96 C3                      ret



* Referenced by a CALL at Address:
|:0044ED46   
|
:0044EF97 55                      push ebp
:0044EF98 8BEC                    mov ebp, esp
:0044EF9A 83EC10                  sub esp, 00000010
:0044EF9D 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0044EFA0 E84B67FBFF              call 004056F0
:0044EFA5 C745F400000000          mov [ebp-0C], 00000000
:0044EFAC C645FCFF                mov [ebp-04], FF
:0044EFB0 6A01                    push 00000001
:0044EFB2 68FF000000              push 000000FF
:0044EFB7 68FF000000              push 000000FF
:0044EFBC 6A00                    push 00000000
:0044EFBE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044EFC1 E80C40FEFF              call 00432FD2
:0044EFC6 50                      push eax
:0044EFC7 8D4508                  lea eax, dword ptr [ebp+08]
:0044EFCA 50                      push eax
:0044EFCB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044EFCE E8E42D0000              call 00451DB7
:0044EFD3 6A01                    push 00000001
:0044EFD5 B958494B00              mov ecx, 004B4958
:0044EFDA E8E2BEFFFF              call 0044AEC1
:0044EFDF B958494B00              mov ecx, 004B4958
:0044EFE4 E828D9FFFF              call 0044C911

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044F059(U), :0044F07A(U)
|
:0044EFE9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044EFEC 81E1FF000000            and ecx, 000000FF
:0044EFF2 81F9FF000000            cmp ecx, 000000FF
:0044EFF8 0F8581000000            jne 0044F07F
:0044EFFE B958494B00              mov ecx, 004B4958
:0044F003 E894DEFFFF              call 0044CE9C
:0044F008 50                      push eax
:0044F009 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0044F00C E88F7AFEFF              call 00436AA0
:0044F011 B958494B00              mov ecx, 004B4958
:0044F016 E889E1FFFF              call 0044D1A4
:0044F01B 8B55F8                  mov edx, dword ptr [ebp-08]
:0044F01E 81E2FF000000            and edx, 000000FF
:0044F024 81FAFF000000            cmp edx, 000000FF
:0044F02A 7506                    jne 0044F032
:0044F02C C645FC00                mov [ebp-04], 00
:0044F030 EB4D                    jmp 0044F07F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F02A(C)
|
:0044F032 8D45F8                  lea eax, dword ptr [ebp-08]
:0044F035 50                      push eax
:0044F036 E8A1070000              call 0044F7DC
:0044F03B 83C404                  add esp, 00000004
:0044F03E 25FF000000              and eax, 000000FF
:0044F043 3DFF000000              cmp eax, 000000FF
:0044F048 7411                    je 0044F05B

* Possible StringData Ref from Data Obj ->"Oʽd"
                                  |
:0044F04A 685CEC4700              push 0047EC5C
:0044F04F 6A00                    push 00000000
:0044F051 E8DD23FEFF              call 00431433
:0044F056 83C408                  add esp, 00000008
:0044F059 EB8E                    jmp 0044EFE9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F048(C)
|
:0044F05B 668B4DF8                mov cx, word ptr [ebp-08]
:0044F05F 51                      push ecx
:0044F060 E889000000              call 0044F0EE
:0044F065 83C404                  add esp, 00000004
:0044F068 33D2                    xor edx, edx
:0044F06A 8A10                    mov dl, byte ptr [eax]
:0044F06C 81FAFF000000            cmp edx, 000000FF
:0044F072 7406                    je 0044F07A
:0044F074 C645FC01                mov [ebp-04], 01
:0044F078 EB05                    jmp 0044F07F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F072(C)
|
:0044F07A E96AFFFFFF              jmp 0044EFE9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044EFF8(C), :0044F030(U), :0044F078(U)
|
:0044F07F 8A45FC                  mov al, byte ptr [ebp-04]
:0044F082 8845F0                  mov byte ptr [ebp-10], al
:0044F085 807DF001                cmp byte ptr [ebp-10], 01
:0044F089 7402                    je 0044F08D
:0044F08B EB44                    jmp 0044F0D1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F089(C)
|
:0044F08D 6A00                    push 00000000
:0044F08F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044F092 E84979FEFF              call 004369E0
:0044F097 50                      push eax
:0044F098 E84757FEFF              call 004347E4
:0044F09D 83C408                  add esp, 00000008
:0044F0A0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044F0A3 51                      push ecx
:0044F0A4 668B55F8                mov dx, word ptr [ebp-08]
:0044F0A8 52                      push edx
:0044F0A9 668B4508                mov ax, word ptr [ebp+08]
:0044F0AD 50                      push eax
:0044F0AE E874000000              call 0044F127
:0044F0B3 83C40C                  add esp, 0000000C
:0044F0B6 B9784E4B00              mov ecx, 004B4E78
:0044F0BB E82ED10000              call 0045C1EE
:0044F0C0 B958494B00              mov ecx, 004B4958
:0044F0C5 E8DAE0FFFF              call 0044D1A4
:0044F0CA C745F401000000          mov [ebp-0C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F08B(U)
|
:0044F0D1 6A00                    push 00000000
:0044F0D3 B958494B00              mov ecx, 004B4958
:0044F0D8 E8E4BDFFFF              call 0044AEC1
:0044F0DD B958494B00              mov ecx, 004B4958
:0044F0E2 E82AD8FFFF              call 0044C911
:0044F0E7 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044F0EA 8BE5                    mov esp, ebp
:0044F0EC 5D                      pop ebp
:0044F0ED C3                      ret



* Referenced by a CALL at Address:
|:0044F060   
|
:0044F0EE 55                      push ebp
:0044F0EF 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044F0F1 6A04                    push 00000004
:0044F0F3 6A00                    push 00000000
:0044F0F5 6800960000              push 00009600
:0044F0FA B9881C4B00              mov ecx, 004B1C88
:0044F0FF E88C9E0200              call 00478F90
:0044F104 8B4D09                  mov ecx, dword ptr [ebp+09]
:0044F107 81E1FF000000            and ecx, 000000FF
:0044F10D 33D2                    xor edx, edx
:0044F10F 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044F115 0FAFCA                  imul ecx, edx
:0044F118 8B5508                  mov edx, dword ptr [ebp+08]
:0044F11B 81E2FF000000            and edx, 000000FF
:0044F121 03CA                    add ecx, edx
:0044F123 03C1                    add eax, ecx
:0044F125 5D                      pop ebp
:0044F126 C3                      ret



* Referenced by a CALL at Address:
|:0044F0AE   
|
:0044F127 55                      push ebp
:0044F128 8BEC                    mov ebp, esp
:0044F12A 83EC10                  sub esp, 00000010
:0044F12D 6A00                    push 00000000
:0044F12F 68FF000000              push 000000FF
:0044F134 8D450C                  lea eax, dword ptr [ebp+0C]
:0044F137 50                      push eax
:0044F138 8D4D08                  lea ecx, dword ptr [ebp+08]
:0044F13B 51                      push ecx
:0044F13C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044F13F E898270000              call 004518DC
:0044F144 8945F4                  mov dword ptr [ebp-0C], eax
:0044F147 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0044F14A E8A165FBFF              call 004056F0
:0044F14F 8D5508                  lea edx, dword ptr [ebp+08]
:0044F152 52                      push edx
:0044F153 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044F156 E8A52EFFFF              call 00442000
:0044F15B C745F800000000          mov [ebp-08], 00000000
:0044F162 EB09                    jmp 0044F16D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044F1C0(U), :0044F1DA(U)
|
:0044F164 8B45F8                  mov eax, dword ptr [ebp-08]
:0044F167 83C001                  add eax, 00000001
:0044F16A 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F162(U)
|
:0044F16D 8D4D0C                  lea ecx, dword ptr [ebp+0C]
:0044F170 51                      push ecx
:0044F171 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044F174 E8C72AFEFF              call 00431C40
:0044F179 50                      push eax
:0044F17A E8217EFEFF              call 00436FA0
:0044F17F 83C408                  add esp, 00000008
:0044F182 85C0                    test eax, eax
:0044F184 7556                    jne 0044F1DC
:0044F186 8B55F4                  mov edx, dword ptr [ebp-0C]
:0044F189 0355F8                  add edx, dword ptr [ebp-08]
:0044F18C 8A02                    mov al, byte ptr [edx]
:0044F18E 8845FC                  mov byte ptr [ebp-04], al
:0044F191 8A4DFC                  mov cl, byte ptr [ebp-04]
:0044F194 51                      push ecx
:0044F195 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044F198 E8A32AFEFF              call 00431C40
:0044F19D 50                      push eax
:0044F19E E84E070000              call 0044F8F1
:0044F1A3 83C408                  add esp, 00000008
:0044F1A6 50                      push eax
:0044F1A7 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0044F1AA E8F178FEFF              call 00436AA0
:0044F1AF 8B55F0                  mov edx, dword ptr [ebp-10]
:0044F1B2 81E2FF000000            and edx, 000000FF
:0044F1B8 81FAFF000000            cmp edx, 000000FF
:0044F1BE 7502                    jne 0044F1C2
:0044F1C0 EBA2                    jmp 0044F164

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F1BE(C)
|
:0044F1C2 8A45FC                  mov al, byte ptr [ebp-04]
:0044F1C5 50                      push eax
:0044F1C6 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044F1C9 E84367FEFF              call 00435911
:0044F1CE 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0044F1D1 51                      push ecx
:0044F1D2 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044F1D5 E8262EFFFF              call 00442000
:0044F1DA EB88                    jmp 0044F164

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F184(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0044F1DC 6A02                    push 00000002
:0044F1DE 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044F1E1 E81A7BFEFF              call 00436D00
:0044F1E6 68C0000000              push 000000C0
:0044F1EB 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044F1EE E8DD76FEFF              call 004368D0
:0044F1F3 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044F1F6 E8C054FEFF              call 004346BB
:0044F1FB 8BE5                    mov esp, ebp
:0044F1FD 5D                      pop ebp
:0044F1FE C3                      ret



* Referenced by a CALL at Address:
|:0044EC00   
|
:0044F1FF 55                      push ebp
:0044F200 8BEC                    mov ebp, esp
:0044F202 83EC08                  sub esp, 00000008
:0044F205 8B450C                  mov eax, dword ptr [ebp+0C]
:0044F208 25FF000000              and eax, 000000FF
:0044F20D 83F81E                  cmp eax, 0000001E
:0044F210 7E02                    jle 0044F214
:0044F212 EB34                    jmp 0044F248

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F210(C)
|
:0044F214 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044F217 81E1FF000000            and ecx, 000000FF
:0044F21D 6BC924                  imul ecx, 00000024
:0044F220 81C1B83B4B00            add ecx, 004B3BB8
:0044F226 894DF8                  mov dword ptr [ebp-08], ecx
:0044F229 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044F22C E8AF77FEFF              call 004369E0
:0044F231 6BC050                  imul eax, 00000050
:0044F234 05787F4900              add eax, 00497F78
:0044F239 8945FC                  mov dword ptr [ebp-04], eax
:0044F23C 8B55FC                  mov edx, dword ptr [ebp-04]
:0044F23F 52                      push edx
:0044F240 E88AB80000              call 0045AACF
:0044F245 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F212(U)
|
:0044F248 8BE5                    mov esp, ebp
:0044F24A 5D                      pop ebp
:0044F24B C3                      ret



* Referenced by a CALL at Address:
|:0044EB4E   
|
:0044F24C 55                      push ebp
:0044F24D 8BEC                    mov ebp, esp
:0044F24F 83EC08                  sub esp, 00000008
:0044F252 C645F800                mov [ebp-08], 00
:0044F256 668B4508                mov ax, word ptr [ebp+08]
:0044F25A 50                      push eax
:0044F25B E8CE010000              call 0044F42E
:0044F260 83C404                  add esp, 00000004
:0044F263 85C0                    test eax, eax
:0044F265 7425                    je 0044F28C
:0044F267 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044F26A 81E1FF000000            and ecx, 000000FF
:0044F270 C681284A4B0002          mov byte ptr [ecx+004B4A28], 02
:0044F277 8A55F8                  mov dl, byte ptr [ebp-08]
:0044F27A 80C201                  add dl, 01
:0044F27D 8855F8                  mov byte ptr [ebp-08], dl
:0044F280 6A01                    push 00000001
:0044F282 B9A84C4B00              mov ecx, 004B4CA8
:0044F287 E8F403FDFF              call 0041F680

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F265(C)
|
:0044F28C 668B4508                mov ax, word ptr [ebp+08]
:0044F290 50                      push eax
:0044F291 E8CD000000              call 0044F363
:0044F296 83C404                  add esp, 00000004
:0044F299 85C0                    test eax, eax
:0044F29B 7425                    je 0044F2C2
:0044F29D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044F2A0 81E1FF000000            and ecx, 000000FF
:0044F2A6 C681284A4B0000          mov byte ptr [ecx+004B4A28], 00
:0044F2AD 8A55F8                  mov dl, byte ptr [ebp-08]
:0044F2B0 80C201                  add dl, 01
:0044F2B3 8855F8                  mov byte ptr [ebp-08], dl
:0044F2B6 6A01                    push 00000001
:0044F2B8 B9A84C4B00              mov ecx, 004B4CA8
:0044F2BD E89EECFDFF              call 0042DF60

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F29B(C)
|
:0044F2C2 668B4508                mov ax, word ptr [ebp+08]
:0044F2C6 50                      push eax
:0044F2C7 E835020000              call 0044F501
:0044F2CC 83C404                  add esp, 00000004
:0044F2CF 85C0                    test eax, eax
:0044F2D1 7425                    je 0044F2F8
:0044F2D3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044F2D6 81E1FF000000            and ecx, 000000FF
:0044F2DC C681284A4B0001          mov byte ptr [ecx+004B4A28], 01
:0044F2E3 8A55F8                  mov dl, byte ptr [ebp-08]
:0044F2E6 80C201                  add dl, 01
:0044F2E9 8855F8                  mov byte ptr [ebp-08], dl
:0044F2EC 6A01                    push 00000001
:0044F2EE B9A84C4B00              mov ecx, 004B4CA8
:0044F2F3 E898EEFDFF              call 0042E190

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F2D1(C)
|
:0044F2F8 8B45F8                  mov eax, dword ptr [ebp-08]
:0044F2FB 25FF000000              and eax, 000000FF
:0044F300 C680284A4B00FF          mov byte ptr [eax+004B4A28], FF
:0044F307 C745FC00000000          mov [ebp-04], 00000000
:0044F30E EB09                    jmp 0044F319

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F347(U)
|
:0044F310 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F313 83C101                  add ecx, 00000001
:0044F316 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F30E(U)
|
:0044F319 8B55FC                  mov edx, dword ptr [ebp-04]
:0044F31C 33C0                    xor eax, eax
:0044F31E 8A82284A4B00            mov al, byte ptr [edx+004B4A28]
:0044F324 3DFF000000              cmp eax, 000000FF
:0044F329 741E                    je 0044F349
:0044F32B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F32E 33D2                    xor edx, edx
:0044F330 8A91284A4B00            mov dl, byte ptr [ecx+004B4A28]
:0044F336 8B45FC                  mov eax, dword ptr [ebp-04]
:0044F339 8B0C9510EC4700          mov ecx, dword ptr [4*edx+0047EC10]
:0044F340 890C85304A4B00          mov dword ptr [4*eax+004B4A30], ecx
:0044F347 EBC7                    jmp 0044F310

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F329(C)
|
:0044F349 8B55FC                  mov edx, dword ptr [ebp-04]
:0044F34C C70495304A4B0000000000  mov dword ptr [4*edx+004B4A30], 00000000
:0044F357 8B45F8                  mov eax, dword ptr [ebp-08]
:0044F35A 25FF000000              and eax, 000000FF
:0044F35F 8BE5                    mov esp, ebp
:0044F361 5D                      pop ebp
:0044F362 C3                      ret



* Referenced by a CALL at Address:
|:0044F291   
|
:0044F363 55                      push ebp
:0044F364 8BEC                    mov ebp, esp
:0044F366 51                      push ecx
:0044F367 C745FC00000000          mov [ebp-04], 00000000
:0044F36E 668B4508                mov ax, word ptr [ebp+08]
:0044F372 50                      push eax
:0044F373 E815000000              call 0044F38D
:0044F378 83C404                  add esp, 00000004
:0044F37B 85C0                    test eax, eax
:0044F37D 7607                    jbe 0044F386
:0044F37F C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F37D(C)
|
:0044F386 8B45FC                  mov eax, dword ptr [ebp-04]
:0044F389 8BE5                    mov esp, ebp
:0044F38B 5D                      pop ebp
:0044F38C C3                      ret



* Referenced by a CALL at Address:
|:0044F373   
|
:0044F38D 55                      push ebp
:0044F38E 8BEC                    mov ebp, esp
:0044F390 83EC08                  sub esp, 00000008
:0044F393 C745FC00000000          mov [ebp-04], 00000000
:0044F39A 8D4508                  lea eax, dword ptr [ebp+08]
:0044F39D 50                      push eax
:0044F39E E8B5040000              call 0044F858
:0044F3A3 83C404                  add esp, 00000004
:0044F3A6 25FF000000              and eax, 000000FF
:0044F3AB 83F81F                  cmp eax, 0000001F
:0044F3AE 7404                    je 0044F3B4
:0044F3B0 33C0                    xor eax, eax
:0044F3B2 EB76                    jmp 0044F42A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F3AE(C)
|
:0044F3B4 C745F800000000          mov [ebp-08], 00000000
:0044F3BB EB09                    jmp 0044F3C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F425(U)
|
:0044F3BD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044F3C0 83C101                  add ecx, 00000001
:0044F3C3 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F3BB(U)
|
:0044F3C6 817DF820030000          cmp dword ptr [ebp-08], 00000320
:0044F3CD 7358                    jnb 0044F427
:0044F3CF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044F3D2 6BC950                  imul ecx, 00000050
:0044F3D5 81C1787F4900            add ecx, 00497F78
:0044F3DB E8A00AFCFF              call 0040FE80
:0044F3E0 25FF000000              and eax, 000000FF
:0044F3E5 85C0                    test eax, eax
:0044F3E7 753C                    jne 0044F425
:0044F3E9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044F3EC 6BC950                  imul ecx, 00000050
:0044F3EF 81C1787F4900            add ecx, 00497F78
:0044F3F5 E836D5FBFF              call 0040C930
:0044F3FA 25FF000000              and eax, 000000FF
:0044F3FF 85C0                    test eax, eax
:0044F401 7522                    jne 0044F425
:0044F403 8B55F8                  mov edx, dword ptr [ebp-08]
:0044F406 6BD250                  imul edx, 00000050
:0044F409 81C2787F4900            add edx, 00497F78
:0044F40F 52                      push edx
:0044F410 E875FAFFFF              call 0044EE8A
:0044F415 83C404                  add esp, 00000004
:0044F418 85C0                    test eax, eax
:0044F41A 7509                    jne 0044F425
:0044F41C 8B45FC                  mov eax, dword ptr [ebp-04]
:0044F41F 83C001                  add eax, 00000001
:0044F422 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044F3E7(C), :0044F401(C), :0044F41A(C)
|
:0044F425 EB96                    jmp 0044F3BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F3CD(C)
|
:0044F427 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F3B2(U)
|
:0044F42A 8BE5                    mov esp, ebp
:0044F42C 5D                      pop ebp
:0044F42D C3                      ret



* Referenced by a CALL at Address:
|:0044F25B   
|
:0044F42E 55                      push ebp
:0044F42F 8BEC                    mov ebp, esp
:0044F431 51                      push ecx
:0044F432 C745FC00000000          mov [ebp-04], 00000000
:0044F439 668B4508                mov ax, word ptr [ebp+08]
:0044F43D 50                      push eax
:0044F43E E815000000              call 0044F458
:0044F443 83C404                  add esp, 00000004
:0044F446 85C0                    test eax, eax
:0044F448 7607                    jbe 0044F451
:0044F44A C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F448(C)
|
:0044F451 8B45FC                  mov eax, dword ptr [ebp-04]
:0044F454 8BE5                    mov esp, ebp
:0044F456 5D                      pop ebp
:0044F457 C3                      ret



* Referenced by a CALL at Addresses:
|:0044F43E   , :0044F511   
|
:0044F458 55                      push ebp
:0044F459 8BEC                    mov ebp, esp
:0044F45B 83EC08                  sub esp, 00000008
:0044F45E C745F800000000          mov [ebp-08], 00000000
:0044F465 8D4508                  lea eax, dword ptr [ebp+08]
:0044F468 50                      push eax
:0044F469 E8EA030000              call 0044F858
:0044F46E 83C404                  add esp, 00000004
:0044F471 25FF000000              and eax, 000000FF
:0044F476 83F81F                  cmp eax, 0000001F
:0044F479 7404                    je 0044F47F
:0044F47B 33C0                    xor eax, eax
:0044F47D EB7E                    jmp 0044F4FD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F479(C)
|
:0044F47F C745FC00000000          mov [ebp-04], 00000000
:0044F486 EB09                    jmp 0044F491

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F4F8(U)
|
:0044F488 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F48B 83C101                  add ecx, 00000001
:0044F48E 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F486(U)
|
:0044F491 837DFC1E                cmp dword ptr [ebp-04], 0000001E
:0044F495 7363                    jnb 0044F4FA
:0044F497 8D5508                  lea edx, dword ptr [ebp+08]
:0044F49A 52                      push edx
:0044F49B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F49E 6BC924                  imul ecx, 00000024
:0044F4A1 81C1B83B4B00            add ecx, 004B3BB8
:0044F4A7 E89427FEFF              call 00431C40
:0044F4AC 50                      push eax
:0044F4AD E8EE7AFEFF              call 00436FA0
:0044F4B2 83C408                  add esp, 00000008
:0044F4B5 85C0                    test eax, eax
:0044F4B7 743F                    je 0044F4F8
:0044F4B9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F4BC 6BC924                  imul ecx, 00000024
:0044F4BF 81C1B83B4B00            add ecx, 004B3BB8
:0044F4C5 E806CC0000              call 0045C0D0
:0044F4CA 25FF000000              and eax, 000000FF
:0044F4CF 83F802                  cmp eax, 00000002
:0044F4D2 7524                    jne 0044F4F8
:0044F4D4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F4D7 6BC924                  imul ecx, 00000024
:0044F4DA 81C1B83B4B00            add ecx, 004B3BB8
:0044F4E0 E89B62FBFF              call 00405780
:0044F4E5 25FF000000              and eax, 000000FF
:0044F4EA 83F807                  cmp eax, 00000007
:0044F4ED 7509                    jne 0044F4F8
:0044F4EF 8B45F8                  mov eax, dword ptr [ebp-08]
:0044F4F2 83C001                  add eax, 00000001
:0044F4F5 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044F4B7(C), :0044F4D2(C), :0044F4ED(C)
|
:0044F4F8 EB8E                    jmp 0044F488

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F495(C)
|
:0044F4FA 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F47D(U)
|
:0044F4FD 8BE5                    mov esp, ebp
:0044F4FF 5D                      pop ebp
:0044F500 C3                      ret



* Referenced by a CALL at Address:
|:0044F2C7   
|
:0044F501 55                      push ebp
:0044F502 8BEC                    mov ebp, esp
:0044F504 51                      push ecx
:0044F505 C745FC00000000          mov [ebp-04], 00000000
:0044F50C 668B4508                mov ax, word ptr [ebp+08]
:0044F510 50                      push eax
:0044F511 E842FFFFFF              call 0044F458
:0044F516 83C404                  add esp, 00000004
:0044F519 85C0                    test eax, eax
:0044F51B 7607                    jbe 0044F524
:0044F51D C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F51B(C)
|
:0044F524 8B45FC                  mov eax, dword ptr [ebp-04]
:0044F527 8BE5                    mov esp, ebp
:0044F529 5D                      pop ebp
:0044F52A C3                      ret


:0044F52B CC                      int 03
:0044F52C CC                      int 03
:0044F52D CC                      int 03
:0044F52E CC                      int 03
:0044F52F CC                      int 03
:0044F530 55                      push ebp
:0044F531 8BEC                    mov ebp, esp
:0044F533 E802000000              call 0044F53A
:0044F538 5D                      pop ebp
:0044F539 C3                      ret



* Referenced by a CALL at Address:
|:0044F533   
|
:0044F53A 55                      push ebp
:0044F53B 8BEC                    mov ebp, esp
:0044F53D B9484A4B00              mov ecx, 004B4A48
:0044F542 E8A961FBFF              call 004056F0
:0044F547 5D                      pop ebp
:0044F548 C3                      ret


:0044F549 55                      push ebp
:0044F54A 8BEC                    mov ebp, esp
:0044F54C E802000000              call 0044F553
:0044F551 5D                      pop ebp
:0044F552 C3                      ret



* Referenced by a CALL at Address:
|:0044F54C   
|
:0044F553 55                      push ebp
:0044F554 8BEC                    mov ebp, esp
:0044F556 B9604A4B00              mov ecx, 004B4A60
:0044F55B E89061FBFF              call 004056F0
:0044F560 5D                      pop ebp
:0044F561 C3                      ret



* Referenced by a CALL at Address:
|:0044E43E   
|
:0044F562 55                      push ebp
:0044F563 8BEC                    mov ebp, esp
:0044F565 83EC08                  sub esp, 00000008
:0044F568 8B4508                  mov eax, dword ptr [ebp+08]
:0044F56B 25FF000000              and eax, 000000FF
:0044F570 8945F8                  mov dword ptr [ebp-08], eax
:0044F573 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044F576 83E908                  sub ecx, 00000008
:0044F579 894DF8                  mov dword ptr [ebp-08], ecx
:0044F57C 837DF81B                cmp dword ptr [ebp-08], 0000001B
:0044F580 771B                    ja 0044F59D
:0044F582 8B45F8                  mov eax, dword ptr [ebp-08]
:0044F585 33D2                    xor edx, edx
:0044F587 8A90C3F54400            mov dl, byte ptr [eax+0044F5C3]
:0044F58D FF2495ABF54400          jmp dword ptr [4*edx+0044F5AB]
:0044F594 C745FC01000000          mov [ebp-04], 00000001
:0044F59B EB07                    jmp 0044F5A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F580(C)
|
:0044F59D C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F59B(U)
|
:0044F5A4 8B45FC                  mov eax, dword ptr [ebp-04]
:0044F5A7 8BE5                    mov esp, ebp
:0044F5A9 5D                      pop ebp
:0044F5AA C3                      ret



:0044F5AB 94F54400                DWORD 0044F594
:0044F5AF 94F54400                DWORD 0044F594
:0044F5B3 94F54400                DWORD 0044F594
:0044F5B7 94F54400                DWORD 0044F594
:0044F5BB 94F54400                DWORD 0044F594
:0044F5BF 9DF54400                DWORD 0044F59D


:0044F5C3 0000                    add byte ptr [eax], al
:0044F5C5 0501010505              add eax, 05050101
:0044F5CA 0505050505              add eax, 05050505
:0044F5CF 0505050502              add eax, 02050505
:0044F5D4 0503030305              add eax, 05030303
:0044F5D9 0505050504              add eax, 04050505
:0044F5DE 04                      BYTE 04h


* Referenced by a CALL at Addresses:
|:0044E41A   , :0044F664   
|
:0044F5DF 55                      push ebp
:0044F5E0 8BEC                    mov ebp, esp
:0044F5E2 83EC08                  sub esp, 00000008
:0044F5E5 8B4508                  mov eax, dword ptr [ebp+08]
:0044F5E8 25FF000000              and eax, 000000FF
:0044F5ED 83F811                  cmp eax, 00000011
:0044F5F0 744E                    je 0044F640
:0044F5F2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044F5F5 81E1FF000000            and ecx, 000000FF
:0044F5FB 83F912                  cmp ecx, 00000012
:0044F5FE 7440                    je 0044F640
:0044F600 8B5508                  mov edx, dword ptr [ebp+08]
:0044F603 81E2FF000000            and edx, 000000FF
:0044F609 83FA10                  cmp edx, 00000010
:0044F60C 7432                    je 0044F640
:0044F60E 8B4508                  mov eax, dword ptr [ebp+08]
:0044F611 25FF000000              and eax, 000000FF
:0044F616 83F80F                  cmp eax, 0000000F
:0044F619 7425                    je 0044F640
:0044F61B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044F61E 81E1FF000000            and ecx, 000000FF
:0044F624 83F919                  cmp ecx, 00000019
:0044F627 7417                    je 0044F640
:0044F629 8B5508                  mov edx, dword ptr [ebp+08]
:0044F62C 81E2FF000000            and edx, 000000FF
:0044F632 83FA1F                  cmp edx, 0000001F
:0044F635 7409                    je 0044F640
:0044F637 C745F800000000          mov [ebp-08], 00000000
:0044F63E EB07                    jmp 0044F647

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044F5F0(C), :0044F5FE(C), :0044F60C(C), :0044F619(C), :0044F627(C)
|:0044F635(C)
|
:0044F640 C745F801000000          mov [ebp-08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F63E(U)
|
:0044F647 8B45F8                  mov eax, dword ptr [ebp-08]
:0044F64A 8945FC                  mov dword ptr [ebp-04], eax
:0044F64D 8B45FC                  mov eax, dword ptr [ebp-04]
:0044F650 8BE5                    mov esp, ebp
:0044F652 5D                      pop ebp
:0044F653 C3                      ret



* Referenced by a CALL at Addresses:
|:004337B2   , :00450EFF   , :0045D37D   
|
:0044F654 55                      push ebp
:0044F655 8BEC                    mov ebp, esp
:0044F657 8B4508                  mov eax, dword ptr [ebp+08]
:0044F65A 50                      push eax
:0044F65B E8F8010000              call 0044F858
:0044F660 83C404                  add esp, 00000004
:0044F663 50                      push eax
:0044F664 E876FFFFFF              call 0044F5DF
:0044F669 83C404                  add esp, 00000004
:0044F66C 5D                      pop ebp
:0044F66D C3                      ret



* Referenced by a CALL at Addresses:
|:00451A17   , :00452126   , :004522C7   
|
:0044F66E 55                      push ebp
:0044F66F 8BEC                    mov ebp, esp
:0044F671 83EC0C                  sub esp, 0000000C
:0044F674 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044F677 E87460FBFF              call 004056F0
:0044F67C C645F800                mov [ebp-08], 00
:0044F680 EB08                    jmp 0044F68A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F703(U)
|
:0044F682 8A45F8                  mov al, byte ptr [ebp-08]
:0044F685 0401                    add al, 01
:0044F687 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F680(U)
|
:0044F68A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044F68D 81E1FF000000            and ecx, 000000FF
:0044F693 83F904                  cmp ecx, 00000004
:0044F696 7D70                    jge 0044F708
:0044F698 8A55F8                  mov dl, byte ptr [ebp-08]
:0044F69B 52                      push edx
:0044F69C 8B4508                  mov eax, dword ptr [ebp+08]
:0044F69F 50                      push eax
:0044F6A0 E84C020000              call 0044F8F1
:0044F6A5 83C408                  add esp, 00000008
:0044F6A8 50                      push eax
:0044F6A9 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044F6AC E8EF73FEFF              call 00436AA0
:0044F6B1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0044F6B4 81E1FF000000            and ecx, 000000FF
:0044F6BA 81F9FF000000            cmp ecx, 000000FF
:0044F6C0 7441                    je 0044F703
:0044F6C2 8D55FC                  lea edx, dword ptr [ebp-04]
:0044F6C5 52                      push edx
:0044F6C6 E811010000              call 0044F7DC
:0044F6CB 83C404                  add esp, 00000004
:0044F6CE 8845F4                  mov byte ptr [ebp-0C], al
:0044F6D1 8B45F4                  mov eax, dword ptr [ebp-0C]
:0044F6D4 25FF000000              and eax, 000000FF
:0044F6D9 3DFF000000              cmp eax, 000000FF
:0044F6DE 7423                    je 0044F703
:0044F6E0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0044F6E3 81E1FF000000            and ecx, 000000FF
:0044F6E9 6BC924                  imul ecx, 00000024
:0044F6EC 81C1B83B4B00            add ecx, 004B3BB8
:0044F6F2 E819D2FBFF              call 0040C910
:0044F6F7 3B450C                  cmp eax, dword ptr [ebp+0C]
:0044F6FA 7407                    je 0044F703
:0044F6FC B801000000              mov eax, 00000001
:0044F701 EB07                    jmp 0044F70A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044F6C0(C), :0044F6DE(C), :0044F6FA(C)
|
:0044F703 E97AFFFFFF              jmp 0044F682

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F696(C)
|
:0044F708 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F701(U)
|
:0044F70A 8BE5                    mov esp, ebp
:0044F70C 5D                      pop ebp
:0044F70D C3                      ret



* Referenced by a CALL at Addresses:
|:0043A501   , :004489CF   , :00452584   , :0045655A   
|
:0044F70E 55                      push ebp
:0044F70F 8BEC                    mov ebp, esp
:0044F711 83EC10                  sub esp, 00000010
:0044F714 6A10                    push 00000010
:0044F716 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044F719 81E1FF000000            and ecx, 000000FF
:0044F71F 6BC924                  imul ecx, 00000024
:0044F722 81C1B83B4B00            add ecx, 004B3BB8
:0044F728 E8C376FEFF              call 00436DF0
:0044F72D 8945F8                  mov dword ptr [ebp-08], eax
:0044F730 6A10                    push 00000010
:0044F732 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044F735 81E1FF000000            and ecx, 000000FF
:0044F73B 6BC924                  imul ecx, 00000024
:0044F73E 81C1B83B4B00            add ecx, 004B3BB8
:0044F744 E8A776FEFF              call 00436DF0
:0044F749 8945F0                  mov dword ptr [ebp-10], eax
:0044F74C 6A00                    push 00000000
:0044F74E 8A450C                  mov al, byte ptr [ebp+0C]
:0044F751 50                      push eax
:0044F752 8A4D08                  mov cl, byte ptr [ebp+08]
:0044F755 51                      push ecx
:0044F756 B948494B00              mov ecx, 004B4948
:0044F75B E8BC6AFFFF              call 0044621C
:0044F760 8945F4                  mov dword ptr [ebp-0C], eax
:0044F763 6A00                    push 00000000
:0044F765 8A5508                  mov dl, byte ptr [ebp+08]
:0044F768 52                      push edx
:0044F769 8A450C                  mov al, byte ptr [ebp+0C]
:0044F76C 50                      push eax
:0044F76D B948494B00              mov ecx, 004B4948
:0044F772 E8A56AFFFF              call 0044621C
:0044F777 8945FC                  mov dword ptr [ebp-04], eax
:0044F77A 837DF401                cmp dword ptr [ebp-0C], 00000001
:0044F77E 750E                    jne 0044F78E
:0044F780 C745F801000000          mov [ebp-08], 00000001
:0044F787 C745F000000000          mov [ebp-10], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F77E(C)
|
:0044F78E 837DFC01                cmp dword ptr [ebp-04], 00000001
:0044F792 750E                    jne 0044F7A2
:0044F794 C745F800000000          mov [ebp-08], 00000000
:0044F79B C745F001000000          mov [ebp-10], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F792(C)
|
:0044F7A2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044F7A5 51                      push ecx
:0044F7A6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044F7A9 81E1FF000000            and ecx, 000000FF
:0044F7AF 6BC924                  imul ecx, 00000024
:0044F7B2 81C1B83B4B00            add ecx, 004B3BB8
:0044F7B8 E8F84AFEFF              call 004342B5
:0044F7BD 8B55F0                  mov edx, dword ptr [ebp-10]
:0044F7C0 52                      push edx
:0044F7C1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044F7C4 81E1FF000000            and ecx, 000000FF
:0044F7CA 6BC924                  imul ecx, 00000024
:0044F7CD 81C1B83B4B00            add ecx, 004B3BB8
:0044F7D3 E8DD4AFEFF              call 004342B5
:0044F7D8 8BE5                    mov esp, ebp
:0044F7DA 5D                      pop ebp
:0044F7DB C3                      ret



* Referenced by a CALL at Addresses:
|:00432CCC   , :0043331B   , :0043342C   , :004351B6   , :00435BB7   
|:00435D4C   , :0044114D   , :0044D507   , :0044D550   , :0044DFB4   
|:0044F036   , :0044F6C6   , :004509AB   , :00451930   , :00451B39   
|:00451CAC   , :00453B0E   , :00455739   , :00455A3C   , :00455AFE   
|:00455BDE   , :00455C7B   , :00455D18   , :00455E44   , :00455F90   
|:0045602D   , :004568C3   , :004568F4   , :0045E237   , :0045E5BA   
|:0045FBF7   , :0045FF17   , :0045FFDF   , :004607EF   , :00460B66   
|:00460D5C   
|
:0044F7DC 55                      push ebp
:0044F7DD 8BEC                    mov ebp, esp
:0044F7DF 51                      push ecx
:0044F7E0 8B4508                  mov eax, dword ptr [ebp+08]
:0044F7E3 33C9                    xor ecx, ecx
:0044F7E5 8A08                    mov cl, byte ptr [eax]
:0044F7E7 33D2                    xor edx, edx
:0044F7E9 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044F7EF 3BCA                    cmp ecx, edx
:0044F7F1 7D5F                    jge 0044F852
:0044F7F3 8B4508                  mov eax, dword ptr [ebp+08]
:0044F7F6 33C9                    xor ecx, ecx
:0044F7F8 8A4801                  mov cl, byte ptr [eax+01]
:0044F7FB 33D2                    xor edx, edx
:0044F7FD 8A15C54E4B00            mov dl, byte ptr [004B4EC5]
:0044F803 3BCA                    cmp ecx, edx
:0044F805 7D4B                    jge 0044F852

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044F807 6A04                    push 00000004
:0044F809 6A00                    push 00000000
:0044F80B 68004B0000              push 00004B00
:0044F810 B9881C4B00              mov ecx, 004B1C88
:0044F815 E876970200              call 00478F90
:0044F81A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044F81D 33D2                    xor edx, edx
:0044F81F 8A11                    mov dl, byte ptr [ecx]
:0044F821 03C2                    add eax, edx
:0044F823 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044F826 33D2                    xor edx, edx
:0044F828 8A5101                  mov dl, byte ptr [ecx+01]
:0044F82B 33C9                    xor ecx, ecx
:0044F82D 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0044F833 0FAFD1                  imul edx, ecx
:0044F836 8A1410                  mov dl, byte ptr [eax+edx]
:0044F839 8855FC                  mov byte ptr [ebp-04], dl
:0044F83C 8B45FC                  mov eax, dword ptr [ebp-04]
:0044F83F 25FF000000              and eax, 000000FF
:0044F844 83F85A                  cmp eax, 0000005A
:0044F847 7D05                    jge 0044F84E
:0044F849 8A45FC                  mov al, byte ptr [ebp-04]
:0044F84C EB06                    jmp 0044F854

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F847(C)
|
:0044F84E 0CFF                    or al, FF
:0044F850 EB02                    jmp 0044F854

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044F7F1(C), :0044F805(C)
|
:0044F852 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044F84C(U), :0044F850(U)
|
:0044F854 8BE5                    mov esp, ebp
:0044F856 5D                      pop ebp
:0044F857 C3                      ret



* Referenced by a CALL at Addresses:
|:00432CE4   , :0043311D   , :00433799   , :00435048   , :0043510E   
|:0043579C   , :00435C1B   , :00435C2D   , :004373E2   , :00437CDF   
|:0043CBA4   , :0043CC9D   , :0043D9F2   , :00440BA8   , :00440E04   
|:0044166D   , :0044305D   , :00443322   , :00445110   , :0044546C   
|:00447468   , :0044D17B   , :0044E37D   , :0044F39E   , :0044F469   
|:0044F65B   , :00450DE3   , :00450DF9   , :00450E8C   , :00450EA2   
|:00451A91   , :00451C3B   , :00451FC9   , :004521FA   , :00452D29   
|:00453811   , :0045391C   , :00453BAD   , :004555B3   , :0045E3B7   
|:0045EFA9   
|
:0044F858 55                      push ebp
:0044F859 8BEC                    mov ebp, esp
:0044F85B 8B4508                  mov eax, dword ptr [ebp+08]
:0044F85E 33C9                    xor ecx, ecx
:0044F860 8A08                    mov cl, byte ptr [eax]
:0044F862 33D2                    xor edx, edx
:0044F864 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044F86A 3BCA                    cmp ecx, edx
:0044F86C 7D4A                    jge 0044F8B8
:0044F86E 8B4508                  mov eax, dword ptr [ebp+08]
:0044F871 33C9                    xor ecx, ecx
:0044F873 8A4801                  mov cl, byte ptr [eax+01]
:0044F876 33D2                    xor edx, edx
:0044F878 8A15C54E4B00            mov dl, byte ptr [004B4EC5]
:0044F87E 3BCA                    cmp ecx, edx
:0044F880 7D36                    jge 0044F8B8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044F882 6A04                    push 00000004
:0044F884 6A00                    push 00000000
:0044F886 6A00                    push 00000000
:0044F888 B9881C4B00              mov ecx, 004B1C88
:0044F88D E8FE960200              call 00478F90
:0044F892 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044F895 33D2                    xor edx, edx
:0044F897 8A11                    mov dl, byte ptr [ecx]
:0044F899 8D841080430000          lea eax, dword ptr [eax+edx+00004380]
:0044F8A0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044F8A3 33D2                    xor edx, edx
:0044F8A5 8A5101                  mov dl, byte ptr [ecx+01]
:0044F8A8 33C9                    xor ecx, ecx
:0044F8AA 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0044F8B0 0FAFD1                  imul edx, ecx
:0044F8B3 8A0410                  mov al, byte ptr [eax+edx]
:0044F8B6 EB02                    jmp 0044F8BA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044F86C(C), :0044F880(C)
|
:0044F8B8 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F8B6(U)
|
:0044F8BA 5D                      pop ebp
:0044F8BB C3                      ret



* Referenced by a CALL at Address:
|:00455AEE   
|
:0044F8BC 55                      push ebp
:0044F8BD 8BEC                    mov ebp, esp
:0044F8BF 8B4508                  mov eax, dword ptr [ebp+08]
:0044F8C2 33C9                    xor ecx, ecx
:0044F8C4 8A08                    mov cl, byte ptr [eax]
:0044F8C6 33D2                    xor edx, edx
:0044F8C8 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044F8CE 3BCA                    cmp ecx, edx
:0044F8D0 7D14                    jge 0044F8E6
:0044F8D2 8B4508                  mov eax, dword ptr [ebp+08]
:0044F8D5 33C9                    xor ecx, ecx
:0044F8D7 8A4801                  mov cl, byte ptr [eax+01]
:0044F8DA 33D2                    xor edx, edx
:0044F8DC 8A15C54E4B00            mov dl, byte ptr [004B4EC5]
:0044F8E2 3BCA                    cmp ecx, edx
:0044F8E4 7C04                    jl 0044F8EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F8D0(C)
|
:0044F8E6 33C0                    xor eax, eax
:0044F8E8 EB05                    jmp 0044F8EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F8E4(C)
|
:0044F8EA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F8E8(U)
|
:0044F8EF 5D                      pop ebp
:0044F8F0 C3                      ret



* Referenced by a CALL at Addresses:
|:00432D6D   , :004332F1   , :00433406   , :00435190   , :00435BFB   
|:004412A5   , :0044C814   , :0044F19E   , :0044F6A0   , :00450AC9   
|:0045106D   , :004519ED   , :00451AEF   , :00451D5B   , :0045215B   
|:00453AE8   , :00455BC9   , :00455C66   , :00455D03   , :00455E2F   
|:00455F7B   , :00456018   , :00456B7B   , :00460D32   
|
:0044F8F1 55                      push ebp
:0044F8F2 8BEC                    mov ebp, esp
:0044F8F4 33C0                    xor eax, eax
:0044F8F6 A0404A4B00              mov al, byte ptr [004B4A40]
:0044F8FB 83E001                  and eax, 00000001
:0044F8FE 85C0                    test eax, eax
:0044F900 7526                    jne 0044F928
:0044F902 8A0D404A4B00            mov cl, byte ptr [004B4A40]
:0044F908 80C901                  or cl, 01
:0044F90B 880D404A4B00            mov byte ptr [004B4A40], cl
:0044F911 B9644A4B00              mov ecx, 004B4A64
:0044F916 E8D55DFBFF              call 004056F0
:0044F91B 68A4F94400              push 0044F9A4
:0044F920 E88BFB0100              call 0046F4B0
:0044F925 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F900(C)
|
:0044F928 8B5508                  mov edx, dword ptr [ebp+08]
:0044F92B 52                      push edx
:0044F92C B9644A4B00              mov ecx, 004B4A64
:0044F931 E86A71FEFF              call 00436AA0
:0044F936 8B450C                  mov eax, dword ptr [ebp+0C]
:0044F939 25FF000000              and eax, 000000FF
:0044F93E D1E0                    shl eax, 1
:0044F940 8A0D644A4B00            mov cl, byte ptr [004B4A64]
:0044F946 020C8570EC4700          add cl, byte ptr [4*eax+0047EC70]
:0044F94D 880D644A4B00            mov byte ptr [004B4A64], cl
:0044F953 8B550C                  mov edx, dword ptr [ebp+0C]
:0044F956 81E2FF000000            and edx, 000000FF
:0044F95C D1E2                    shl edx, 1
:0044F95E A0654A4B00              mov al, byte ptr [004B4A65]
:0044F963 02049574EC4700          add al, byte ptr [4*edx+0047EC74]
:0044F96A A2654A4B00              mov byte ptr [004B4A65], al
:0044F96F 33C9                    xor ecx, ecx
:0044F971 8A0D644A4B00            mov cl, byte ptr [004B4A64]
:0044F977 33D2                    xor edx, edx
:0044F979 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0044F97F 3BCA                    cmp ecx, edx
:0044F981 7D13                    jge 0044F996
:0044F983 33C0                    xor eax, eax
:0044F985 A0654A4B00              mov al, byte ptr [004B4A65]
:0044F98A 33C9                    xor ecx, ecx
:0044F98C 8A0DC54E4B00            mov cl, byte ptr [004B4EC5]
:0044F992 3BC1                    cmp eax, ecx
:0044F994 7C07                    jl 0044F99D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F981(C)
|
:0044F996 C605644A4B00FF          mov byte ptr [004B4A64], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F994(C)
|
:0044F99D B8644A4B00              mov eax, 004B4A64
:0044F9A2 5D                      pop ebp
:0044F9A3 C3                      ret


:0044F9A4 55                      push ebp
:0044F9A5 8BEC                    mov ebp, esp
:0044F9A7 5D                      pop ebp
:0044F9A8 C3                      ret



* Referenced by a CALL at Addresses:
|:004346D0   , :004346F7   , :00434799   , :004347C9   , :0043487B   
|:0045FF42   , :00460019   , :004601A3   
|
:0044F9A9 55                      push ebp
:0044F9AA 8BEC                    mov ebp, esp
:0044F9AC 8B450C                  mov eax, dword ptr [ebp+0C]
:0044F9AF 25FF000000              and eax, 000000FF
:0044F9B4 83F85C                  cmp eax, 0000005C
:0044F9B7 7C04                    jl 0044F9BD
:0044F9B9 C6450CFF                mov [ebp+0C], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044F9B7(C)
|
:0044F9BD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044F9C0 81E1FF000000            and ecx, 000000FF
:0044F9C6 83F95A                  cmp ecx, 0000005A
:0044F9C9 7D36                    jge 0044FA01
:0044F9CB 8B550C                  mov edx, dword ptr [ebp+0C]
:0044F9CE 81E2FF000000            and edx, 000000FF
:0044F9D4 81FAFF000000            cmp edx, 000000FF
:0044F9DA 7425                    je 0044FA01
:0044F9DC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044F9DF 81E1FF000000            and ecx, 000000FF
:0044F9E5 6BC924                  imul ecx, 00000024
:0044F9E8 81C1B83B4B00            add ecx, 004B3BB8
:0044F9EE E8DDC60000              call 0045C0D0
:0044F9F3 25FF000000              and eax, 000000FF
:0044F9F8 83F804                  cmp eax, 00000004
:0044F9FB 7504                    jne 0044FA01
:0044F9FD C6450CFF                mov [ebp+0C], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044F9C9(C), :0044F9DA(C), :0044F9FB(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0044FA01 6A04                    push 00000004
:0044FA03 6A00                    push 00000000
:0044FA05 6A00                    push 00000000
:0044FA07 B9881C4B00              mov ecx, 004B1C88
:0044FA0C E87F950200              call 00478F90
:0044FA11 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FA14 33D2                    xor edx, edx
:0044FA16 8A11                    mov dl, byte ptr [ecx]
:0044FA18 8D8410004B0000          lea eax, dword ptr [eax+edx+00004B00]
:0044FA1F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FA22 33D2                    xor edx, edx
:0044FA24 8A5101                  mov dl, byte ptr [ecx+01]
:0044FA27 33C9                    xor ecx, ecx
:0044FA29 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0044FA2F 0FAFD1                  imul edx, ecx
:0044FA32 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0044FA35 880C10                  mov byte ptr [eax+edx], cl
:0044FA38 5D                      pop ebp
:0044FA39 C3                      ret



* Referenced by a CALL at Addresses:
|:00439081   , :00441D3D   , :004447DC   , :0044DE72   , :00450CD9   
|:00451120   , :004514F4   , :0045246F   , :004538EE   
|
:0044FA3A 55                      push ebp
:0044FA3B 8BEC                    mov ebp, esp
:0044FA3D 83EC1C                  sub esp, 0000001C
:0044FA40 894DE8                  mov dword ptr [ebp-18], ecx
:0044FA43 C645ECFF                mov [ebp-14], FF
:0044FA47 68FF000000              push 000000FF
:0044FA4C 68FF000000              push 000000FF
:0044FA51 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0044FA54 E80771FEFF              call 00436B60
:0044FA59 8B450C                  mov eax, dword ptr [ebp+0C]
:0044FA5C 25FF000000              and eax, 000000FF
:0044FA61 3DFF000000              cmp eax, 000000FF
:0044FA66 7507                    jne 0044FA6F
:0044FA68 0CFF                    or al, FF
:0044FA6A E9E20D0000              jmp 00450851

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FA66(C)
|
:0044FA6F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044FA72 81E1FF000000            and ecx, 000000FF
:0044FA78 81E180000000            and ecx, 00000080
:0044FA7E 894DF0                  mov dword ptr [ebp-10], ecx
:0044FA81 8A550C                  mov dl, byte ptr [ebp+0C]
:0044FA84 80E27F                  and dl, 7F
:0044FA87 88550C                  mov byte ptr [ebp+0C], dl
:0044FA8A 8B4514                  mov eax, dword ptr [ebp+14]
:0044FA8D 25FF000000              and eax, 000000FF
:0044FA92 85C0                    test eax, eax
:0044FA94 750A                    jne 0044FAA0
:0044FA96 C7055C4A4B0060DD4A00    mov dword ptr [004B4A5C], 004ADD60

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FA94(C)
|
:0044FAA0 8B4D10                  mov ecx, dword ptr [ebp+10]
:0044FAA3 81E1FF000000            and ecx, 000000FF
:0044FAA9 83E101                  and ecx, 00000001
:0044FAAC 85C9                    test ecx, ecx
:0044FAAE 7424                    je 0044FAD4
:0044FAB0 8A5514                  mov dl, byte ptr [ebp+14]
:0044FAB3 52                      push edx
:0044FAB4 8A4510                  mov al, byte ptr [ebp+10]
:0044FAB7 50                      push eax
:0044FAB8 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044FABB 8A5104                  mov dl, byte ptr [ecx+04]
:0044FABE 52                      push edx
:0044FABF 8B4508                  mov eax, dword ptr [ebp+08]
:0044FAC2 8A4801                  mov cl, byte ptr [eax+01]
:0044FAC5 51                      push ecx
:0044FAC6 8B5508                  mov edx, dword ptr [ebp+08]
:0044FAC9 8A02                    mov al, byte ptr [edx]
:0044FACB 50                      push eax
:0044FACC E8C60D0000              call 00450897
:0044FAD1 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FAAE(C)
|
:0044FAD4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0044FAD7 81E1FF000000            and ecx, 000000FF
:0044FADD 894DE4                  mov dword ptr [ebp-1C], ecx
:0044FAE0 837DE40F                cmp dword ptr [ebp-1C], 0000000F
:0044FAE4 0F87ED0C0000            ja 004507D7
:0044FAEA 8B55E4                  mov edx, dword ptr [ebp-1C]
:0044FAED FF249557084500          jmp dword ptr [4*edx+00450857]
:0044FAF4 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FAF7 8A4804                  mov cl, byte ptr [eax+04]
:0044FAFA 51                      push ecx
:0044FAFB 8A5514                  mov dl, byte ptr [ebp+14]
:0044FAFE 52                      push edx
:0044FAFF 8A4510                  mov al, byte ptr [ebp+10]
:0044FB02 50                      push eax
:0044FB03 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FB06 51                      push ecx
:0044FB07 E8810F0000              call 00450A8D
:0044FB0C 83C410                  add esp, 00000010
:0044FB0F E9C30C0000              jmp 004507D7
:0044FB14 8B55E8                  mov edx, dword ptr [ebp-18]
:0044FB17 8A4204                  mov al, byte ptr [edx+04]
:0044FB1A 50                      push eax
:0044FB1B 8A4D14                  mov cl, byte ptr [ebp+14]
:0044FB1E 51                      push ecx
:0044FB1F 8A5510                  mov dl, byte ptr [ebp+10]
:0044FB22 52                      push edx
:0044FB23 8B4508                  mov eax, dword ptr [ebp+08]
:0044FB26 50                      push eax
:0044FB27 E8E10F0000              call 00450B0D
:0044FB2C 83C410                  add esp, 00000010
:0044FB2F E9A30C0000              jmp 004507D7
:0044FB34 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044FB37 8A5104                  mov dl, byte ptr [ecx+04]
:0044FB3A 52                      push edx
:0044FB3B 8A4514                  mov al, byte ptr [ebp+14]
:0044FB3E 50                      push eax
:0044FB3F 8A4D10                  mov cl, byte ptr [ebp+10]
:0044FB42 51                      push ecx
:0044FB43 8B5508                  mov edx, dword ptr [ebp+08]
:0044FB46 52                      push edx
:0044FB47 E8410F0000              call 00450A8D
:0044FB4C 83C410                  add esp, 00000010
:0044FB4F 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FB52 8A4804                  mov cl, byte ptr [eax+04]
:0044FB55 51                      push ecx
:0044FB56 8A5514                  mov dl, byte ptr [ebp+14]
:0044FB59 52                      push edx
:0044FB5A 8A4510                  mov al, byte ptr [ebp+10]
:0044FB5D 50                      push eax
:0044FB5E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FB61 51                      push ecx
:0044FB62 E8A60F0000              call 00450B0D
:0044FB67 83C410                  add esp, 00000010
:0044FB6A E9680C0000              jmp 004507D7
:0044FB6F 8B55E8                  mov edx, dword ptr [ebp-18]
:0044FB72 8A4204                  mov al, byte ptr [edx+04]
:0044FB75 50                      push eax
:0044FB76 8A4D14                  mov cl, byte ptr [ebp+14]
:0044FB79 51                      push ecx
:0044FB7A 8A5510                  mov dl, byte ptr [ebp+10]
:0044FB7D 52                      push edx
:0044FB7E 8B4508                  mov eax, dword ptr [ebp+08]
:0044FB81 50                      push eax
:0044FB82 E8060F0000              call 00450A8D
:0044FB87 83C410                  add esp, 00000010
:0044FB8A 8A4D14                  mov cl, byte ptr [ebp+14]
:0044FB8D 51                      push ecx
:0044FB8E 8A5510                  mov dl, byte ptr [ebp+10]
:0044FB91 52                      push edx
:0044FB92 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FB95 8A4804                  mov cl, byte ptr [eax+04]
:0044FB98 51                      push ecx
:0044FB99 8B5508                  mov edx, dword ptr [ebp+08]
:0044FB9C 8A4201                  mov al, byte ptr [edx+01]
:0044FB9F 50                      push eax
:0044FBA0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FBA3 33D2                    xor edx, edx
:0044FBA5 8A11                    mov dl, byte ptr [ecx]
:0044FBA7 83EA02                  sub edx, 00000002
:0044FBAA 52                      push edx
:0044FBAB E8E70C0000              call 00450897
:0044FBB0 83C414                  add esp, 00000014
:0044FBB3 8A4514                  mov al, byte ptr [ebp+14]
:0044FBB6 50                      push eax
:0044FBB7 8A4D10                  mov cl, byte ptr [ebp+10]
:0044FBBA 51                      push ecx
:0044FBBB 8B55E8                  mov edx, dword ptr [ebp-18]
:0044FBBE 8A4204                  mov al, byte ptr [edx+04]
:0044FBC1 50                      push eax
:0044FBC2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FBC5 8A5101                  mov dl, byte ptr [ecx+01]
:0044FBC8 52                      push edx
:0044FBC9 8B4508                  mov eax, dword ptr [ebp+08]
:0044FBCC 33C9                    xor ecx, ecx
:0044FBCE 8A08                    mov cl, byte ptr [eax]
:0044FBD0 83C102                  add ecx, 00000002
:0044FBD3 51                      push ecx
:0044FBD4 E8BE0C0000              call 00450897
:0044FBD9 83C414                  add esp, 00000014
:0044FBDC 8A5514                  mov dl, byte ptr [ebp+14]
:0044FBDF 52                      push edx
:0044FBE0 8A4510                  mov al, byte ptr [ebp+10]
:0044FBE3 50                      push eax
:0044FBE4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044FBE7 8A5104                  mov dl, byte ptr [ecx+04]
:0044FBEA 52                      push edx
:0044FBEB 8B4508                  mov eax, dword ptr [ebp+08]
:0044FBEE 33C9                    xor ecx, ecx
:0044FBF0 8A4801                  mov cl, byte ptr [eax+01]
:0044FBF3 83E902                  sub ecx, 00000002
:0044FBF6 51                      push ecx
:0044FBF7 8B5508                  mov edx, dword ptr [ebp+08]
:0044FBFA 8A02                    mov al, byte ptr [edx]
:0044FBFC 50                      push eax
:0044FBFD E8950C0000              call 00450897
:0044FC02 83C414                  add esp, 00000014
:0044FC05 8A4D14                  mov cl, byte ptr [ebp+14]
:0044FC08 51                      push ecx
:0044FC09 8A5510                  mov dl, byte ptr [ebp+10]
:0044FC0C 52                      push edx
:0044FC0D 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FC10 8A4804                  mov cl, byte ptr [eax+04]
:0044FC13 51                      push ecx
:0044FC14 8B5508                  mov edx, dword ptr [ebp+08]
:0044FC17 33C0                    xor eax, eax
:0044FC19 8A4201                  mov al, byte ptr [edx+01]
:0044FC1C 83C002                  add eax, 00000002
:0044FC1F 50                      push eax
:0044FC20 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FC23 8A11                    mov dl, byte ptr [ecx]
:0044FC25 52                      push edx
:0044FC26 E86C0C0000              call 00450897
:0044FC2B 83C414                  add esp, 00000014
:0044FC2E E9A40B0000              jmp 004507D7
:0044FC33 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FC36 8A4804                  mov cl, byte ptr [eax+04]
:0044FC39 51                      push ecx
:0044FC3A 8A5514                  mov dl, byte ptr [ebp+14]
:0044FC3D 52                      push edx
:0044FC3E 8A4510                  mov al, byte ptr [ebp+10]
:0044FC41 50                      push eax
:0044FC42 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FC45 51                      push ecx
:0044FC46 E8420E0000              call 00450A8D
:0044FC4B 83C410                  add esp, 00000010
:0044FC4E 8B55E8                  mov edx, dword ptr [ebp-18]
:0044FC51 8A4204                  mov al, byte ptr [edx+04]
:0044FC54 50                      push eax
:0044FC55 8A4D14                  mov cl, byte ptr [ebp+14]
:0044FC58 51                      push ecx
:0044FC59 8A5510                  mov dl, byte ptr [ebp+10]
:0044FC5C 52                      push edx
:0044FC5D 8B4508                  mov eax, dword ptr [ebp+08]
:0044FC60 50                      push eax
:0044FC61 E8A70E0000              call 00450B0D
:0044FC66 83C410                  add esp, 00000010
:0044FC69 8A4D14                  mov cl, byte ptr [ebp+14]
:0044FC6C 51                      push ecx
:0044FC6D 8A5510                  mov dl, byte ptr [ebp+10]
:0044FC70 52                      push edx
:0044FC71 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FC74 8A4804                  mov cl, byte ptr [eax+04]
:0044FC77 51                      push ecx
:0044FC78 8B5508                  mov edx, dword ptr [ebp+08]
:0044FC7B 8A4201                  mov al, byte ptr [edx+01]
:0044FC7E 50                      push eax
:0044FC7F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FC82 33D2                    xor edx, edx
:0044FC84 8A11                    mov dl, byte ptr [ecx]
:0044FC86 83EA02                  sub edx, 00000002
:0044FC89 52                      push edx
:0044FC8A E8080C0000              call 00450897
:0044FC8F 83C414                  add esp, 00000014
:0044FC92 8A4514                  mov al, byte ptr [ebp+14]
:0044FC95 50                      push eax
:0044FC96 8A4D10                  mov cl, byte ptr [ebp+10]
:0044FC99 51                      push ecx
:0044FC9A 8B55E8                  mov edx, dword ptr [ebp-18]
:0044FC9D 8A4204                  mov al, byte ptr [edx+04]
:0044FCA0 50                      push eax
:0044FCA1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FCA4 8A5101                  mov dl, byte ptr [ecx+01]
:0044FCA7 52                      push edx
:0044FCA8 8B4508                  mov eax, dword ptr [ebp+08]
:0044FCAB 33C9                    xor ecx, ecx
:0044FCAD 8A08                    mov cl, byte ptr [eax]
:0044FCAF 83C102                  add ecx, 00000002
:0044FCB2 51                      push ecx
:0044FCB3 E8DF0B0000              call 00450897
:0044FCB8 83C414                  add esp, 00000014
:0044FCBB 8A5514                  mov dl, byte ptr [ebp+14]
:0044FCBE 52                      push edx
:0044FCBF 8A4510                  mov al, byte ptr [ebp+10]
:0044FCC2 50                      push eax
:0044FCC3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044FCC6 8A5104                  mov dl, byte ptr [ecx+04]
:0044FCC9 52                      push edx
:0044FCCA 8B4508                  mov eax, dword ptr [ebp+08]
:0044FCCD 33C9                    xor ecx, ecx
:0044FCCF 8A4801                  mov cl, byte ptr [eax+01]
:0044FCD2 83E902                  sub ecx, 00000002
:0044FCD5 51                      push ecx
:0044FCD6 8B5508                  mov edx, dword ptr [ebp+08]
:0044FCD9 8A02                    mov al, byte ptr [edx]
:0044FCDB 50                      push eax
:0044FCDC E8B60B0000              call 00450897
:0044FCE1 83C414                  add esp, 00000014
:0044FCE4 8A4D14                  mov cl, byte ptr [ebp+14]
:0044FCE7 51                      push ecx
:0044FCE8 8A5510                  mov dl, byte ptr [ebp+10]
:0044FCEB 52                      push edx
:0044FCEC 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FCEF 8A4804                  mov cl, byte ptr [eax+04]
:0044FCF2 51                      push ecx
:0044FCF3 8B5508                  mov edx, dword ptr [ebp+08]
:0044FCF6 33C0                    xor eax, eax
:0044FCF8 8A4201                  mov al, byte ptr [edx+01]
:0044FCFB 83C002                  add eax, 00000002
:0044FCFE 50                      push eax
:0044FCFF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FD02 8A11                    mov dl, byte ptr [ecx]
:0044FD04 52                      push edx
:0044FD05 E88D0B0000              call 00450897
:0044FD0A 83C414                  add esp, 00000014
:0044FD0D E9C50A0000              jmp 004507D7
:0044FD12 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FD15 8A4804                  mov cl, byte ptr [eax+04]
:0044FD18 51                      push ecx
:0044FD19 8A5514                  mov dl, byte ptr [ebp+14]
:0044FD1C 52                      push edx
:0044FD1D 8A4510                  mov al, byte ptr [ebp+10]
:0044FD20 50                      push eax
:0044FD21 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FD24 51                      push ecx
:0044FD25 E8E30D0000              call 00450B0D
:0044FD2A 83C410                  add esp, 00000010
:0044FD2D 8A5514                  mov dl, byte ptr [ebp+14]
:0044FD30 52                      push edx
:0044FD31 8A4510                  mov al, byte ptr [ebp+10]
:0044FD34 50                      push eax
:0044FD35 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044FD38 8A5104                  mov dl, byte ptr [ecx+04]
:0044FD3B 52                      push edx
:0044FD3C 8B4508                  mov eax, dword ptr [ebp+08]
:0044FD3F 8A4801                  mov cl, byte ptr [eax+01]
:0044FD42 51                      push ecx
:0044FD43 8B5508                  mov edx, dword ptr [ebp+08]
:0044FD46 33C0                    xor eax, eax
:0044FD48 8A02                    mov al, byte ptr [edx]
:0044FD4A 83E802                  sub eax, 00000002
:0044FD4D 50                      push eax
:0044FD4E E8440B0000              call 00450897
:0044FD53 83C414                  add esp, 00000014
:0044FD56 8A4D14                  mov cl, byte ptr [ebp+14]
:0044FD59 51                      push ecx
:0044FD5A 8A5510                  mov dl, byte ptr [ebp+10]
:0044FD5D 52                      push edx
:0044FD5E 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FD61 8A4804                  mov cl, byte ptr [eax+04]
:0044FD64 51                      push ecx
:0044FD65 8B5508                  mov edx, dword ptr [ebp+08]
:0044FD68 8A4201                  mov al, byte ptr [edx+01]
:0044FD6B 50                      push eax
:0044FD6C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FD6F 33D2                    xor edx, edx
:0044FD71 8A11                    mov dl, byte ptr [ecx]
:0044FD73 83C202                  add edx, 00000002
:0044FD76 52                      push edx
:0044FD77 E81B0B0000              call 00450897
:0044FD7C 83C414                  add esp, 00000014
:0044FD7F 8A4514                  mov al, byte ptr [ebp+14]
:0044FD82 50                      push eax
:0044FD83 8A4D10                  mov cl, byte ptr [ebp+10]
:0044FD86 51                      push ecx
:0044FD87 8B55E8                  mov edx, dword ptr [ebp-18]
:0044FD8A 8A4204                  mov al, byte ptr [edx+04]
:0044FD8D 50                      push eax
:0044FD8E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FD91 33D2                    xor edx, edx
:0044FD93 8A5101                  mov dl, byte ptr [ecx+01]
:0044FD96 83EA02                  sub edx, 00000002
:0044FD99 52                      push edx
:0044FD9A 8B4508                  mov eax, dword ptr [ebp+08]
:0044FD9D 8A08                    mov cl, byte ptr [eax]
:0044FD9F 51                      push ecx
:0044FDA0 E8F20A0000              call 00450897
:0044FDA5 83C414                  add esp, 00000014
:0044FDA8 8A5514                  mov dl, byte ptr [ebp+14]
:0044FDAB 52                      push edx
:0044FDAC 8A4510                  mov al, byte ptr [ebp+10]
:0044FDAF 50                      push eax
:0044FDB0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044FDB3 8A5104                  mov dl, byte ptr [ecx+04]
:0044FDB6 52                      push edx
:0044FDB7 8B4508                  mov eax, dword ptr [ebp+08]
:0044FDBA 33C9                    xor ecx, ecx
:0044FDBC 8A4801                  mov cl, byte ptr [eax+01]
:0044FDBF 83C102                  add ecx, 00000002
:0044FDC2 51                      push ecx
:0044FDC3 8B5508                  mov edx, dword ptr [ebp+08]
:0044FDC6 8A02                    mov al, byte ptr [edx]
:0044FDC8 50                      push eax
:0044FDC9 E8C90A0000              call 00450897
:0044FDCE 83C414                  add esp, 00000014
:0044FDD1 E9010A0000              jmp 004507D7
:0044FDD6 C645F800                mov [ebp-08], 00
:0044FDDA EB09                    jmp 0044FDE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FE62(U)
|
:0044FDDC 8A4DF8                  mov cl, byte ptr [ebp-08]
:0044FDDF 80C101                  add cl, 01
:0044FDE2 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FDDA(U)
|
:0044FDE5 8B55F8                  mov edx, dword ptr [ebp-08]
:0044FDE8 81E2FF000000            and edx, 000000FF
:0044FDEE 83FA03                  cmp edx, 00000003
:0044FDF1 7D74                    jge 0044FE67
:0044FDF3 8A4514                  mov al, byte ptr [ebp+14]
:0044FDF6 50                      push eax
:0044FDF7 8A4D10                  mov cl, byte ptr [ebp+10]
:0044FDFA 51                      push ecx
:0044FDFB 8B55E8                  mov edx, dword ptr [ebp-18]
:0044FDFE 8A4204                  mov al, byte ptr [edx+04]
:0044FE01 50                      push eax
:0044FE02 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FE05 33D2                    xor edx, edx
:0044FE07 8A5101                  mov dl, byte ptr [ecx+01]
:0044FE0A 83EA02                  sub edx, 00000002
:0044FE0D 52                      push edx
:0044FE0E 8B4508                  mov eax, dword ptr [ebp+08]
:0044FE11 33C9                    xor ecx, ecx
:0044FE13 8A08                    mov cl, byte ptr [eax]
:0044FE15 8B55F8                  mov edx, dword ptr [ebp-08]
:0044FE18 81E2FF000000            and edx, 000000FF
:0044FE1E 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:0044FE22 50                      push eax
:0044FE23 E86F0A0000              call 00450897
:0044FE28 83C414                  add esp, 00000014
:0044FE2B 8A4D14                  mov cl, byte ptr [ebp+14]
:0044FE2E 51                      push ecx
:0044FE2F 8A5510                  mov dl, byte ptr [ebp+10]
:0044FE32 52                      push edx
:0044FE33 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FE36 8A4804                  mov cl, byte ptr [eax+04]
:0044FE39 51                      push ecx
:0044FE3A 8B5508                  mov edx, dword ptr [ebp+08]
:0044FE3D 33C0                    xor eax, eax
:0044FE3F 8A4201                  mov al, byte ptr [edx+01]
:0044FE42 83C002                  add eax, 00000002
:0044FE45 50                      push eax
:0044FE46 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FE49 33D2                    xor edx, edx
:0044FE4B 8A11                    mov dl, byte ptr [ecx]
:0044FE4D 8B45F8                  mov eax, dword ptr [ebp-08]
:0044FE50 25FF000000              and eax, 000000FF
:0044FE55 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044FE59 51                      push ecx
:0044FE5A E8380A0000              call 00450897
:0044FE5F 83C414                  add esp, 00000014
:0044FE62 E975FFFFFF              jmp 0044FDDC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FDF1(C)
|
:0044FE67 C645F800                mov [ebp-08], 00
:0044FE6B EB09                    jmp 0044FE76

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FEF3(U)
|
:0044FE6D 8A55F8                  mov dl, byte ptr [ebp-08]
:0044FE70 80C201                  add dl, 01
:0044FE73 8855F8                  mov byte ptr [ebp-08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FE6B(U)
|
:0044FE76 8B45F8                  mov eax, dword ptr [ebp-08]
:0044FE79 25FF000000              and eax, 000000FF
:0044FE7E 83F803                  cmp eax, 00000003
:0044FE81 7D75                    jge 0044FEF8
:0044FE83 8A4D14                  mov cl, byte ptr [ebp+14]
:0044FE86 51                      push ecx
:0044FE87 8A5510                  mov dl, byte ptr [ebp+10]
:0044FE8A 52                      push edx
:0044FE8B 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FE8E 8A4804                  mov cl, byte ptr [eax+04]
:0044FE91 51                      push ecx
:0044FE92 8B5508                  mov edx, dword ptr [ebp+08]
:0044FE95 33C0                    xor eax, eax
:0044FE97 8A4201                  mov al, byte ptr [edx+01]
:0044FE9A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044FE9D 81E1FF000000            and ecx, 000000FF
:0044FEA3 8D5408FF                lea edx, dword ptr [eax+ecx-01]
:0044FEA7 52                      push edx
:0044FEA8 8B4508                  mov eax, dword ptr [ebp+08]
:0044FEAB 33C9                    xor ecx, ecx
:0044FEAD 8A08                    mov cl, byte ptr [eax]
:0044FEAF 83C102                  add ecx, 00000002
:0044FEB2 51                      push ecx
:0044FEB3 E8DF090000              call 00450897
:0044FEB8 83C414                  add esp, 00000014
:0044FEBB 8A5514                  mov dl, byte ptr [ebp+14]
:0044FEBE 52                      push edx
:0044FEBF 8A4510                  mov al, byte ptr [ebp+10]
:0044FEC2 50                      push eax
:0044FEC3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044FEC6 8A5104                  mov dl, byte ptr [ecx+04]
:0044FEC9 52                      push edx
:0044FECA 8B4508                  mov eax, dword ptr [ebp+08]
:0044FECD 33C9                    xor ecx, ecx
:0044FECF 8A4801                  mov cl, byte ptr [eax+01]
:0044FED2 8B55F8                  mov edx, dword ptr [ebp-08]
:0044FED5 81E2FF000000            and edx, 000000FF
:0044FEDB 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:0044FEDF 50                      push eax
:0044FEE0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FEE3 33D2                    xor edx, edx
:0044FEE5 8A11                    mov dl, byte ptr [ecx]
:0044FEE7 83EA02                  sub edx, 00000002
:0044FEEA 52                      push edx
:0044FEEB E8A7090000              call 00450897
:0044FEF0 83C414                  add esp, 00000014
:0044FEF3 E975FFFFFF              jmp 0044FE6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FE81(C)
|
:0044FEF8 E9DA080000              jmp 004507D7
:0044FEFD 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FF00 8A4804                  mov cl, byte ptr [eax+04]
:0044FF03 51                      push ecx
:0044FF04 8A5514                  mov dl, byte ptr [ebp+14]
:0044FF07 52                      push edx
:0044FF08 8A4510                  mov al, byte ptr [ebp+10]
:0044FF0B 50                      push eax
:0044FF0C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FF0F 51                      push ecx
:0044FF10 E8F80B0000              call 00450B0D
:0044FF15 83C410                  add esp, 00000010
:0044FF18 C645F800                mov [ebp-08], 00
:0044FF1C EB09                    jmp 0044FF27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FFA3(U)
|
:0044FF1E 8A55F8                  mov dl, byte ptr [ebp-08]
:0044FF21 80C201                  add dl, 01
:0044FF24 8855F8                  mov byte ptr [ebp-08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FF1C(U)
|
:0044FF27 8B45F8                  mov eax, dword ptr [ebp-08]
:0044FF2A 25FF000000              and eax, 000000FF
:0044FF2F 83F803                  cmp eax, 00000003
:0044FF32 7D74                    jge 0044FFA8
:0044FF34 8A4D14                  mov cl, byte ptr [ebp+14]
:0044FF37 51                      push ecx
:0044FF38 8A5510                  mov dl, byte ptr [ebp+10]
:0044FF3B 52                      push edx
:0044FF3C 8B45E8                  mov eax, dword ptr [ebp-18]
:0044FF3F 8A4804                  mov cl, byte ptr [eax+04]
:0044FF42 51                      push ecx
:0044FF43 8B5508                  mov edx, dword ptr [ebp+08]
:0044FF46 33C0                    xor eax, eax
:0044FF48 8A4201                  mov al, byte ptr [edx+01]
:0044FF4B 83E802                  sub eax, 00000002
:0044FF4E 50                      push eax
:0044FF4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FF52 33D2                    xor edx, edx
:0044FF54 8A11                    mov dl, byte ptr [ecx]
:0044FF56 8B45F8                  mov eax, dword ptr [ebp-08]
:0044FF59 25FF000000              and eax, 000000FF
:0044FF5E 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0044FF62 51                      push ecx
:0044FF63 E82F090000              call 00450897
:0044FF68 83C414                  add esp, 00000014
:0044FF6B 8A5514                  mov dl, byte ptr [ebp+14]
:0044FF6E 52                      push edx
:0044FF6F 8A4510                  mov al, byte ptr [ebp+10]
:0044FF72 50                      push eax
:0044FF73 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044FF76 8A5104                  mov dl, byte ptr [ecx+04]
:0044FF79 52                      push edx
:0044FF7A 8B4508                  mov eax, dword ptr [ebp+08]
:0044FF7D 33C9                    xor ecx, ecx
:0044FF7F 8A4801                  mov cl, byte ptr [eax+01]
:0044FF82 83C102                  add ecx, 00000002
:0044FF85 51                      push ecx
:0044FF86 8B5508                  mov edx, dword ptr [ebp+08]
:0044FF89 33C0                    xor eax, eax
:0044FF8B 8A02                    mov al, byte ptr [edx]
:0044FF8D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044FF90 81E1FF000000            and ecx, 000000FF
:0044FF96 8D5408FF                lea edx, dword ptr [eax+ecx-01]
:0044FF9A 52                      push edx
:0044FF9B E8F7080000              call 00450897
:0044FFA0 83C414                  add esp, 00000014
:0044FFA3 E976FFFFFF              jmp 0044FF1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FF32(C)
|
:0044FFA8 C645F800                mov [ebp-08], 00
:0044FFAC EB08                    jmp 0044FFB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450033(U)
|
:0044FFAE 8A45F8                  mov al, byte ptr [ebp-08]
:0044FFB1 0401                    add al, 01
:0044FFB3 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FFAC(U)
|
:0044FFB6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0044FFB9 81E1FF000000            and ecx, 000000FF
:0044FFBF 83F903                  cmp ecx, 00000003
:0044FFC2 7D74                    jge 00450038
:0044FFC4 8A5514                  mov dl, byte ptr [ebp+14]
:0044FFC7 52                      push edx
:0044FFC8 8A4510                  mov al, byte ptr [ebp+10]
:0044FFCB 50                      push eax
:0044FFCC 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0044FFCF 8A5104                  mov dl, byte ptr [ecx+04]
:0044FFD2 52                      push edx
:0044FFD3 8B4508                  mov eax, dword ptr [ebp+08]
:0044FFD6 33C9                    xor ecx, ecx
:0044FFD8 8A4801                  mov cl, byte ptr [eax+01]
:0044FFDB 8B55F8                  mov edx, dword ptr [ebp-08]
:0044FFDE 81E2FF000000            and edx, 000000FF
:0044FFE4 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:0044FFE8 50                      push eax
:0044FFE9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0044FFEC 33D2                    xor edx, edx
:0044FFEE 8A11                    mov dl, byte ptr [ecx]
:0044FFF0 83C202                  add edx, 00000002
:0044FFF3 52                      push edx
:0044FFF4 E89E080000              call 00450897
:0044FFF9 83C414                  add esp, 00000014
:0044FFFC 8A4514                  mov al, byte ptr [ebp+14]
:0044FFFF 50                      push eax
:00450000 8A4D10                  mov cl, byte ptr [ebp+10]
:00450003 51                      push ecx
:00450004 8B55E8                  mov edx, dword ptr [ebp-18]
:00450007 8A4204                  mov al, byte ptr [edx+04]
:0045000A 50                      push eax
:0045000B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045000E 33D2                    xor edx, edx
:00450010 8A5101                  mov dl, byte ptr [ecx+01]
:00450013 8B45F8                  mov eax, dword ptr [ebp-08]
:00450016 25FF000000              and eax, 000000FF
:0045001B 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0045001F 51                      push ecx
:00450020 8B5508                  mov edx, dword ptr [ebp+08]
:00450023 33C0                    xor eax, eax
:00450025 8A02                    mov al, byte ptr [edx]
:00450027 83E802                  sub eax, 00000002
:0045002A 50                      push eax
:0045002B E867080000              call 00450897
:00450030 83C414                  add esp, 00000014
:00450033 E976FFFFFF              jmp 0044FFAE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0044FFC2(C)
|
:00450038 E99A070000              jmp 004507D7
:0045003D 8A4D14                  mov cl, byte ptr [ebp+14]
:00450040 51                      push ecx
:00450041 8A5510                  mov dl, byte ptr [ebp+10]
:00450044 52                      push edx
:00450045 8B45E8                  mov eax, dword ptr [ebp-18]
:00450048 8A4804                  mov cl, byte ptr [eax+04]
:0045004B 51                      push ecx
:0045004C 8B5508                  mov edx, dword ptr [ebp+08]
:0045004F 8A4201                  mov al, byte ptr [edx+01]
:00450052 50                      push eax
:00450053 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450056 33D2                    xor edx, edx
:00450058 8A11                    mov dl, byte ptr [ecx]
:0045005A 83EA02                  sub edx, 00000002
:0045005D 52                      push edx
:0045005E E834080000              call 00450897
:00450063 83C414                  add esp, 00000014
:00450066 8A4514                  mov al, byte ptr [ebp+14]
:00450069 50                      push eax
:0045006A 8A4D10                  mov cl, byte ptr [ebp+10]
:0045006D 51                      push ecx
:0045006E 8B55E8                  mov edx, dword ptr [ebp-18]
:00450071 8A4204                  mov al, byte ptr [edx+04]
:00450074 50                      push eax
:00450075 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450078 8A5101                  mov dl, byte ptr [ecx+01]
:0045007B 52                      push edx
:0045007C 8B4508                  mov eax, dword ptr [ebp+08]
:0045007F 33C9                    xor ecx, ecx
:00450081 8A08                    mov cl, byte ptr [eax]
:00450083 83C102                  add ecx, 00000002
:00450086 51                      push ecx
:00450087 E80B080000              call 00450897
:0045008C 83C414                  add esp, 00000014
:0045008F 8A5514                  mov dl, byte ptr [ebp+14]
:00450092 52                      push edx
:00450093 8A4510                  mov al, byte ptr [ebp+10]
:00450096 50                      push eax
:00450097 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045009A 8A5104                  mov dl, byte ptr [ecx+04]
:0045009D 52                      push edx
:0045009E 8B4508                  mov eax, dword ptr [ebp+08]
:004500A1 33C9                    xor ecx, ecx
:004500A3 8A4801                  mov cl, byte ptr [eax+01]
:004500A6 83E902                  sub ecx, 00000002
:004500A9 51                      push ecx
:004500AA 8B5508                  mov edx, dword ptr [ebp+08]
:004500AD 8A02                    mov al, byte ptr [edx]
:004500AF 50                      push eax
:004500B0 E8E2070000              call 00450897
:004500B5 83C414                  add esp, 00000014
:004500B8 8A4D14                  mov cl, byte ptr [ebp+14]
:004500BB 51                      push ecx
:004500BC 8A5510                  mov dl, byte ptr [ebp+10]
:004500BF 52                      push edx
:004500C0 8B45E8                  mov eax, dword ptr [ebp-18]
:004500C3 8A4804                  mov cl, byte ptr [eax+04]
:004500C6 51                      push ecx
:004500C7 8B5508                  mov edx, dword ptr [ebp+08]
:004500CA 33C0                    xor eax, eax
:004500CC 8A4201                  mov al, byte ptr [edx+01]
:004500CF 83C002                  add eax, 00000002
:004500D2 50                      push eax
:004500D3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004500D6 8A11                    mov dl, byte ptr [ecx]
:004500D8 52                      push edx
:004500D9 E8B9070000              call 00450897
:004500DE 83C414                  add esp, 00000014
:004500E1 E9F1060000              jmp 004507D7
:004500E6 8A4514                  mov al, byte ptr [ebp+14]
:004500E9 50                      push eax
:004500EA 8A4D10                  mov cl, byte ptr [ebp+10]
:004500ED 51                      push ecx
:004500EE 8B55E8                  mov edx, dword ptr [ebp-18]
:004500F1 8A4204                  mov al, byte ptr [edx+04]
:004500F4 50                      push eax
:004500F5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004500F8 33D2                    xor edx, edx
:004500FA 8A5101                  mov dl, byte ptr [ecx+01]
:004500FD 83EA02                  sub edx, 00000002
:00450100 52                      push edx
:00450101 8B4508                  mov eax, dword ptr [ebp+08]
:00450104 33C9                    xor ecx, ecx
:00450106 8A08                    mov cl, byte ptr [eax]
:00450108 83E902                  sub ecx, 00000002
:0045010B 51                      push ecx
:0045010C E886070000              call 00450897
:00450111 83C414                  add esp, 00000014
:00450114 8A5514                  mov dl, byte ptr [ebp+14]
:00450117 52                      push edx
:00450118 8A4510                  mov al, byte ptr [ebp+10]
:0045011B 50                      push eax
:0045011C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045011F 8A5104                  mov dl, byte ptr [ecx+04]
:00450122 52                      push edx
:00450123 8B4508                  mov eax, dword ptr [ebp+08]
:00450126 33C9                    xor ecx, ecx
:00450128 8A4801                  mov cl, byte ptr [eax+01]
:0045012B 83C102                  add ecx, 00000002
:0045012E 51                      push ecx
:0045012F 8B5508                  mov edx, dword ptr [ebp+08]
:00450132 33C0                    xor eax, eax
:00450134 8A02                    mov al, byte ptr [edx]
:00450136 83C002                  add eax, 00000002
:00450139 50                      push eax
:0045013A E858070000              call 00450897
:0045013F 83C414                  add esp, 00000014
:00450142 8A4D14                  mov cl, byte ptr [ebp+14]
:00450145 51                      push ecx
:00450146 8A5510                  mov dl, byte ptr [ebp+10]
:00450149 52                      push edx
:0045014A 8B45E8                  mov eax, dword ptr [ebp-18]
:0045014D 8A4804                  mov cl, byte ptr [eax+04]
:00450150 51                      push ecx
:00450151 8B5508                  mov edx, dword ptr [ebp+08]
:00450154 33C0                    xor eax, eax
:00450156 8A4201                  mov al, byte ptr [edx+01]
:00450159 83E802                  sub eax, 00000002
:0045015C 50                      push eax
:0045015D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450160 33D2                    xor edx, edx
:00450162 8A11                    mov dl, byte ptr [ecx]
:00450164 83C202                  add edx, 00000002
:00450167 52                      push edx
:00450168 E82A070000              call 00450897
:0045016D 83C414                  add esp, 00000014
:00450170 8A4514                  mov al, byte ptr [ebp+14]
:00450173 50                      push eax
:00450174 8A4D10                  mov cl, byte ptr [ebp+10]
:00450177 51                      push ecx
:00450178 8B55E8                  mov edx, dword ptr [ebp-18]
:0045017B 8A4204                  mov al, byte ptr [edx+04]
:0045017E 50                      push eax
:0045017F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450182 33D2                    xor edx, edx
:00450184 8A5101                  mov dl, byte ptr [ecx+01]
:00450187 83C202                  add edx, 00000002
:0045018A 52                      push edx
:0045018B 8B4508                  mov eax, dword ptr [ebp+08]
:0045018E 33C9                    xor ecx, ecx
:00450190 8A08                    mov cl, byte ptr [eax]
:00450192 83E902                  sub ecx, 00000002
:00450195 51                      push ecx
:00450196 E8FC060000              call 00450897
:0045019B 83C414                  add esp, 00000014
:0045019E E934060000              jmp 004507D7
:004501A3 8A5514                  mov dl, byte ptr [ebp+14]
:004501A6 52                      push edx
:004501A7 8A4510                  mov al, byte ptr [ebp+10]
:004501AA 50                      push eax
:004501AB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004501AE 8A5104                  mov dl, byte ptr [ecx+04]
:004501B1 52                      push edx
:004501B2 8B4508                  mov eax, dword ptr [ebp+08]
:004501B5 8A4801                  mov cl, byte ptr [eax+01]
:004501B8 51                      push ecx
:004501B9 8B5508                  mov edx, dword ptr [ebp+08]
:004501BC 33C0                    xor eax, eax
:004501BE 8A02                    mov al, byte ptr [edx]
:004501C0 83E802                  sub eax, 00000002
:004501C3 50                      push eax
:004501C4 E8CE060000              call 00450897
:004501C9 83C414                  add esp, 00000014
:004501CC 8A4D14                  mov cl, byte ptr [ebp+14]
:004501CF 51                      push ecx
:004501D0 8A5510                  mov dl, byte ptr [ebp+10]
:004501D3 52                      push edx
:004501D4 8B45E8                  mov eax, dword ptr [ebp-18]
:004501D7 8A4804                  mov cl, byte ptr [eax+04]
:004501DA 51                      push ecx
:004501DB 8B5508                  mov edx, dword ptr [ebp+08]
:004501DE 8A4201                  mov al, byte ptr [edx+01]
:004501E1 50                      push eax
:004501E2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004501E5 33D2                    xor edx, edx
:004501E7 8A11                    mov dl, byte ptr [ecx]
:004501E9 83C202                  add edx, 00000002
:004501EC 52                      push edx
:004501ED E8A5060000              call 00450897
:004501F2 83C414                  add esp, 00000014
:004501F5 8A4514                  mov al, byte ptr [ebp+14]
:004501F8 50                      push eax
:004501F9 8A4D10                  mov cl, byte ptr [ebp+10]
:004501FC 51                      push ecx
:004501FD 8B55E8                  mov edx, dword ptr [ebp-18]
:00450200 8A4204                  mov al, byte ptr [edx+04]
:00450203 50                      push eax
:00450204 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450207 33D2                    xor edx, edx
:00450209 8A5101                  mov dl, byte ptr [ecx+01]
:0045020C 83EA02                  sub edx, 00000002
:0045020F 52                      push edx
:00450210 8B4508                  mov eax, dword ptr [ebp+08]
:00450213 8A08                    mov cl, byte ptr [eax]
:00450215 51                      push ecx
:00450216 E87C060000              call 00450897
:0045021B 83C414                  add esp, 00000014
:0045021E 8A5514                  mov dl, byte ptr [ebp+14]
:00450221 52                      push edx
:00450222 8A4510                  mov al, byte ptr [ebp+10]
:00450225 50                      push eax
:00450226 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00450229 8A5104                  mov dl, byte ptr [ecx+04]
:0045022C 52                      push edx
:0045022D 8B4508                  mov eax, dword ptr [ebp+08]
:00450230 33C9                    xor ecx, ecx
:00450232 8A4801                  mov cl, byte ptr [eax+01]
:00450235 83C102                  add ecx, 00000002
:00450238 51                      push ecx
:00450239 8B5508                  mov edx, dword ptr [ebp+08]
:0045023C 8A02                    mov al, byte ptr [edx]
:0045023E 50                      push eax
:0045023F E853060000              call 00450897
:00450244 83C414                  add esp, 00000014
:00450247 8A4D14                  mov cl, byte ptr [ebp+14]
:0045024A 51                      push ecx
:0045024B 8A5510                  mov dl, byte ptr [ebp+10]
:0045024E 52                      push edx
:0045024F 8B45E8                  mov eax, dword ptr [ebp-18]
:00450252 8A4804                  mov cl, byte ptr [eax+04]
:00450255 51                      push ecx
:00450256 8B5508                  mov edx, dword ptr [ebp+08]
:00450259 33C0                    xor eax, eax
:0045025B 8A4201                  mov al, byte ptr [edx+01]
:0045025E 83E802                  sub eax, 00000002
:00450261 50                      push eax
:00450262 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450265 33D2                    xor edx, edx
:00450267 8A11                    mov dl, byte ptr [ecx]
:00450269 83EA02                  sub edx, 00000002
:0045026C 52                      push edx
:0045026D E825060000              call 00450897
:00450272 83C414                  add esp, 00000014
:00450275 8A4514                  mov al, byte ptr [ebp+14]
:00450278 50                      push eax
:00450279 8A4D10                  mov cl, byte ptr [ebp+10]
:0045027C 51                      push ecx
:0045027D 8B55E8                  mov edx, dword ptr [ebp-18]
:00450280 8A4204                  mov al, byte ptr [edx+04]
:00450283 50                      push eax
:00450284 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450287 33D2                    xor edx, edx
:00450289 8A5101                  mov dl, byte ptr [ecx+01]
:0045028C 83C202                  add edx, 00000002
:0045028F 52                      push edx
:00450290 8B4508                  mov eax, dword ptr [ebp+08]
:00450293 33C9                    xor ecx, ecx
:00450295 8A08                    mov cl, byte ptr [eax]
:00450297 83C102                  add ecx, 00000002
:0045029A 51                      push ecx
:0045029B E8F7050000              call 00450897
:004502A0 83C414                  add esp, 00000014
:004502A3 8A5514                  mov dl, byte ptr [ebp+14]
:004502A6 52                      push edx
:004502A7 8A4510                  mov al, byte ptr [ebp+10]
:004502AA 50                      push eax
:004502AB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004502AE 8A5104                  mov dl, byte ptr [ecx+04]
:004502B1 52                      push edx
:004502B2 8B4508                  mov eax, dword ptr [ebp+08]
:004502B5 33C9                    xor ecx, ecx
:004502B7 8A4801                  mov cl, byte ptr [eax+01]
:004502BA 83E902                  sub ecx, 00000002
:004502BD 51                      push ecx
:004502BE 8B5508                  mov edx, dword ptr [ebp+08]
:004502C1 33C0                    xor eax, eax
:004502C3 8A02                    mov al, byte ptr [edx]
:004502C5 83C002                  add eax, 00000002
:004502C8 50                      push eax
:004502C9 E8C9050000              call 00450897
:004502CE 83C414                  add esp, 00000014
:004502D1 8A4D14                  mov cl, byte ptr [ebp+14]
:004502D4 51                      push ecx
:004502D5 8A5510                  mov dl, byte ptr [ebp+10]
:004502D8 52                      push edx
:004502D9 8B45E8                  mov eax, dword ptr [ebp-18]
:004502DC 8A4804                  mov cl, byte ptr [eax+04]
:004502DF 51                      push ecx
:004502E0 8B5508                  mov edx, dword ptr [ebp+08]
:004502E3 33C0                    xor eax, eax
:004502E5 8A4201                  mov al, byte ptr [edx+01]
:004502E8 83C002                  add eax, 00000002
:004502EB 50                      push eax
:004502EC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004502EF 33D2                    xor edx, edx
:004502F1 8A11                    mov dl, byte ptr [ecx]
:004502F3 83EA02                  sub edx, 00000002
:004502F6 52                      push edx
:004502F7 E89B050000              call 00450897
:004502FC 83C414                  add esp, 00000014
:004502FF E9D3040000              jmp 004507D7
:00450304 C645F800                mov [ebp-08], 00
:00450308 EB08                    jmp 00450312

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450390(U)
|
:0045030A 8A45F8                  mov al, byte ptr [ebp-08]
:0045030D 0401                    add al, 01
:0045030F 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450308(U)
|
:00450312 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450315 81E1FF000000            and ecx, 000000FF
:0045031B 83F905                  cmp ecx, 00000005
:0045031E 7D75                    jge 00450395
:00450320 8A5514                  mov dl, byte ptr [ebp+14]
:00450323 52                      push edx
:00450324 8A4510                  mov al, byte ptr [ebp+10]
:00450327 50                      push eax
:00450328 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045032B 8A5104                  mov dl, byte ptr [ecx+04]
:0045032E 52                      push edx
:0045032F 8B4508                  mov eax, dword ptr [ebp+08]
:00450332 33C9                    xor ecx, ecx
:00450334 8A4801                  mov cl, byte ptr [eax+01]
:00450337 83E902                  sub ecx, 00000002
:0045033A 51                      push ecx
:0045033B 8B5508                  mov edx, dword ptr [ebp+08]
:0045033E 33C0                    xor eax, eax
:00450340 8A02                    mov al, byte ptr [edx]
:00450342 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450345 81E1FF000000            and ecx, 000000FF
:0045034B 8D5408FE                lea edx, dword ptr [eax+ecx-02]
:0045034F 52                      push edx
:00450350 E842050000              call 00450897
:00450355 83C414                  add esp, 00000014
:00450358 8A4514                  mov al, byte ptr [ebp+14]
:0045035B 50                      push eax
:0045035C 8A4D10                  mov cl, byte ptr [ebp+10]
:0045035F 51                      push ecx
:00450360 8B55E8                  mov edx, dword ptr [ebp-18]
:00450363 8A4204                  mov al, byte ptr [edx+04]
:00450366 50                      push eax
:00450367 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045036A 33D2                    xor edx, edx
:0045036C 8A5101                  mov dl, byte ptr [ecx+01]
:0045036F 83C202                  add edx, 00000002
:00450372 52                      push edx
:00450373 8B4508                  mov eax, dword ptr [ebp+08]
:00450376 33C9                    xor ecx, ecx
:00450378 8A08                    mov cl, byte ptr [eax]
:0045037A 8B55F8                  mov edx, dword ptr [ebp-08]
:0045037D 81E2FF000000            and edx, 000000FF
:00450383 8D4411FE                lea eax, dword ptr [ecx+edx-02]
:00450387 50                      push eax
:00450388 E80A050000              call 00450897
:0045038D 83C414                  add esp, 00000014
:00450390 E975FFFFFF              jmp 0045030A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045031E(C)
|
:00450395 C645F800                mov [ebp-08], 00
:00450399 EB09                    jmp 004503A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450421(U)
|
:0045039B 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045039E 80C101                  add cl, 01
:004503A1 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450399(U)
|
:004503A4 8B55F8                  mov edx, dword ptr [ebp-08]
:004503A7 81E2FF000000            and edx, 000000FF
:004503AD 83FA03                  cmp edx, 00000003
:004503B0 7D74                    jge 00450426
:004503B2 8A4514                  mov al, byte ptr [ebp+14]
:004503B5 50                      push eax
:004503B6 8A4D10                  mov cl, byte ptr [ebp+10]
:004503B9 51                      push ecx
:004503BA 8B55E8                  mov edx, dword ptr [ebp-18]
:004503BD 8A4204                  mov al, byte ptr [edx+04]
:004503C0 50                      push eax
:004503C1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004503C4 33D2                    xor edx, edx
:004503C6 8A5101                  mov dl, byte ptr [ecx+01]
:004503C9 8B45F8                  mov eax, dword ptr [ebp-08]
:004503CC 25FF000000              and eax, 000000FF
:004503D1 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:004503D5 51                      push ecx
:004503D6 8B5508                  mov edx, dword ptr [ebp+08]
:004503D9 33C0                    xor eax, eax
:004503DB 8A02                    mov al, byte ptr [edx]
:004503DD 83E802                  sub eax, 00000002
:004503E0 50                      push eax
:004503E1 E8B1040000              call 00450897
:004503E6 83C414                  add esp, 00000014
:004503E9 8A4D14                  mov cl, byte ptr [ebp+14]
:004503EC 51                      push ecx
:004503ED 8A5510                  mov dl, byte ptr [ebp+10]
:004503F0 52                      push edx
:004503F1 8B45E8                  mov eax, dword ptr [ebp-18]
:004503F4 8A4804                  mov cl, byte ptr [eax+04]
:004503F7 51                      push ecx
:004503F8 8B5508                  mov edx, dword ptr [ebp+08]
:004503FB 33C0                    xor eax, eax
:004503FD 8A4201                  mov al, byte ptr [edx+01]
:00450400 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450403 81E1FF000000            and ecx, 000000FF
:00450409 8D5408FF                lea edx, dword ptr [eax+ecx-01]
:0045040D 52                      push edx
:0045040E 8B4508                  mov eax, dword ptr [ebp+08]
:00450411 33C9                    xor ecx, ecx
:00450413 8A08                    mov cl, byte ptr [eax]
:00450415 83C102                  add ecx, 00000002
:00450418 51                      push ecx
:00450419 E879040000              call 00450897
:0045041E 83C414                  add esp, 00000014
:00450421 E975FFFFFF              jmp 0045039B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004503B0(C)
|
:00450426 E9AC030000              jmp 004507D7
:0045042B C645F800                mov [ebp-08], 00
:0045042F EB09                    jmp 0045043A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450516(U)
|
:00450431 8A55F8                  mov dl, byte ptr [ebp-08]
:00450434 80C201                  add dl, 01
:00450437 8855F8                  mov byte ptr [ebp-08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045042F(U)
|
:0045043A 8B45F8                  mov eax, dword ptr [ebp-08]
:0045043D 25FF000000              and eax, 000000FF
:00450442 83F802                  cmp eax, 00000002
:00450445 0F8DD0000000            jnl 0045051B
:0045044B 8A4D14                  mov cl, byte ptr [ebp+14]
:0045044E 51                      push ecx
:0045044F 8A5510                  mov dl, byte ptr [ebp+10]
:00450452 52                      push edx
:00450453 8B45E8                  mov eax, dword ptr [ebp-18]
:00450456 8A4804                  mov cl, byte ptr [eax+04]
:00450459 51                      push ecx
:0045045A 8B5508                  mov edx, dword ptr [ebp+08]
:0045045D 33C0                    xor eax, eax
:0045045F 8A4201                  mov al, byte ptr [edx+01]
:00450462 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450465 81E1FF000000            and ecx, 000000FF
:0045046B 8D5408FD                lea edx, dword ptr [eax+ecx-03]
:0045046F 52                      push edx
:00450470 8B4508                  mov eax, dword ptr [ebp+08]
:00450473 8A08                    mov cl, byte ptr [eax]
:00450475 51                      push ecx
:00450476 E81C040000              call 00450897
:0045047B 83C414                  add esp, 00000014
:0045047E 8A5514                  mov dl, byte ptr [ebp+14]
:00450481 52                      push edx
:00450482 8A4510                  mov al, byte ptr [ebp+10]
:00450485 50                      push eax
:00450486 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00450489 8A5104                  mov dl, byte ptr [ecx+04]
:0045048C 52                      push edx
:0045048D 8B4508                  mov eax, dword ptr [ebp+08]
:00450490 33C9                    xor ecx, ecx
:00450492 8A4801                  mov cl, byte ptr [eax+01]
:00450495 8B55F8                  mov edx, dword ptr [ebp-08]
:00450498 81E2FF000000            and edx, 000000FF
:0045049E 8D441102                lea eax, dword ptr [ecx+edx+02]
:004504A2 50                      push eax
:004504A3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004504A6 8A11                    mov dl, byte ptr [ecx]
:004504A8 52                      push edx
:004504A9 E8E9030000              call 00450897
:004504AE 83C414                  add esp, 00000014
:004504B1 8A4514                  mov al, byte ptr [ebp+14]
:004504B4 50                      push eax
:004504B5 8A4D10                  mov cl, byte ptr [ebp+10]
:004504B8 51                      push ecx
:004504B9 8B55E8                  mov edx, dword ptr [ebp-18]
:004504BC 8A4204                  mov al, byte ptr [edx+04]
:004504BF 50                      push eax
:004504C0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004504C3 8A5101                  mov dl, byte ptr [ecx+01]
:004504C6 52                      push edx
:004504C7 8B4508                  mov eax, dword ptr [ebp+08]
:004504CA 33C9                    xor ecx, ecx
:004504CC 8A08                    mov cl, byte ptr [eax]
:004504CE 8B55F8                  mov edx, dword ptr [ebp-08]
:004504D1 81E2FF000000            and edx, 000000FF
:004504D7 8D4411FD                lea eax, dword ptr [ecx+edx-03]
:004504DB 50                      push eax
:004504DC E8B6030000              call 00450897
:004504E1 83C414                  add esp, 00000014
:004504E4 8A4D14                  mov cl, byte ptr [ebp+14]
:004504E7 51                      push ecx
:004504E8 8A5510                  mov dl, byte ptr [ebp+10]
:004504EB 52                      push edx
:004504EC 8B45E8                  mov eax, dword ptr [ebp-18]
:004504EF 8A4804                  mov cl, byte ptr [eax+04]
:004504F2 51                      push ecx
:004504F3 8B5508                  mov edx, dword ptr [ebp+08]
:004504F6 8A4201                  mov al, byte ptr [edx+01]
:004504F9 50                      push eax
:004504FA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004504FD 33D2                    xor edx, edx
:004504FF 8A11                    mov dl, byte ptr [ecx]
:00450501 8B45F8                  mov eax, dword ptr [ebp-08]
:00450504 25FF000000              and eax, 000000FF
:00450509 8D4C0202                lea ecx, dword ptr [edx+eax+02]
:0045050D 51                      push ecx
:0045050E E884030000              call 00450897
:00450513 83C414                  add esp, 00000014
:00450516 E916FFFFFF              jmp 00450431

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450445(C)
|
:0045051B E9B7020000              jmp 004507D7
:00450520 8A5514                  mov dl, byte ptr [ebp+14]
:00450523 52                      push edx
:00450524 8A4510                  mov al, byte ptr [ebp+10]
:00450527 50                      push eax
:00450528 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045052B 8A5104                  mov dl, byte ptr [ecx+04]
:0045052E 52                      push edx
:0045052F 8B4508                  mov eax, dword ptr [ebp+08]
:00450532 8A4801                  mov cl, byte ptr [eax+01]
:00450535 51                      push ecx
:00450536 8B5508                  mov edx, dword ptr [ebp+08]
:00450539 33C0                    xor eax, eax
:0045053B 8A02                    mov al, byte ptr [edx]
:0045053D 83E803                  sub eax, 00000003
:00450540 50                      push eax
:00450541 E851030000              call 00450897
:00450546 83C414                  add esp, 00000014
:00450549 8A4D14                  mov cl, byte ptr [ebp+14]
:0045054C 51                      push ecx
:0045054D 8A5510                  mov dl, byte ptr [ebp+10]
:00450550 52                      push edx
:00450551 8B45E8                  mov eax, dword ptr [ebp-18]
:00450554 8A4804                  mov cl, byte ptr [eax+04]
:00450557 51                      push ecx
:00450558 8B5508                  mov edx, dword ptr [ebp+08]
:0045055B 8A4201                  mov al, byte ptr [edx+01]
:0045055E 50                      push eax
:0045055F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450562 33D2                    xor edx, edx
:00450564 8A11                    mov dl, byte ptr [ecx]
:00450566 83C203                  add edx, 00000003
:00450569 52                      push edx
:0045056A E828030000              call 00450897
:0045056F 83C414                  add esp, 00000014
:00450572 8A4514                  mov al, byte ptr [ebp+14]
:00450575 50                      push eax
:00450576 8A4D10                  mov cl, byte ptr [ebp+10]
:00450579 51                      push ecx
:0045057A 8B55E8                  mov edx, dword ptr [ebp-18]
:0045057D 8A4204                  mov al, byte ptr [edx+04]
:00450580 50                      push eax
:00450581 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450584 33D2                    xor edx, edx
:00450586 8A5101                  mov dl, byte ptr [ecx+01]
:00450589 83EA03                  sub edx, 00000003
:0045058C 52                      push edx
:0045058D 8B4508                  mov eax, dword ptr [ebp+08]
:00450590 8A08                    mov cl, byte ptr [eax]
:00450592 51                      push ecx
:00450593 E8FF020000              call 00450897
:00450598 83C414                  add esp, 00000014
:0045059B 8A5514                  mov dl, byte ptr [ebp+14]
:0045059E 52                      push edx
:0045059F 8A4510                  mov al, byte ptr [ebp+10]
:004505A2 50                      push eax
:004505A3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004505A6 8A5104                  mov dl, byte ptr [ecx+04]
:004505A9 52                      push edx
:004505AA 8B4508                  mov eax, dword ptr [ebp+08]
:004505AD 33C9                    xor ecx, ecx
:004505AF 8A4801                  mov cl, byte ptr [eax+01]
:004505B2 83C103                  add ecx, 00000003
:004505B5 51                      push ecx
:004505B6 8B5508                  mov edx, dword ptr [ebp+08]
:004505B9 8A02                    mov al, byte ptr [edx]
:004505BB 50                      push eax
:004505BC E8D6020000              call 00450897
:004505C1 83C414                  add esp, 00000014
:004505C4 E90E020000              jmp 004507D7
:004505C9 C645F800                mov [ebp-08], 00
:004505CD EB09                    jmp 004505D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004506C9(U)
|
:004505CF 8A4DF8                  mov cl, byte ptr [ebp-08]
:004505D2 80C101                  add cl, 01
:004505D5 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004505CD(U)
|
:004505D8 8B55F8                  mov edx, dword ptr [ebp-08]
:004505DB 81E2FF000000            and edx, 000000FF
:004505E1 83FA03                  cmp edx, 00000003
:004505E4 0F8DE4000000            jnl 004506CE
:004505EA 8A4514                  mov al, byte ptr [ebp+14]
:004505ED 50                      push eax
:004505EE 8A4D10                  mov cl, byte ptr [ebp+10]
:004505F1 51                      push ecx
:004505F2 8B55E8                  mov edx, dword ptr [ebp-18]
:004505F5 8A4204                  mov al, byte ptr [edx+04]
:004505F8 50                      push eax
:004505F9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004505FC 33D2                    xor edx, edx
:004505FE 8A5101                  mov dl, byte ptr [ecx+01]
:00450601 8B45F8                  mov eax, dword ptr [ebp-08]
:00450604 25FF000000              and eax, 000000FF
:00450609 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:0045060D 51                      push ecx
:0045060E 8B5508                  mov edx, dword ptr [ebp+08]
:00450611 33C0                    xor eax, eax
:00450613 8A02                    mov al, byte ptr [edx]
:00450615 83E803                  sub eax, 00000003
:00450618 50                      push eax
:00450619 E879020000              call 00450897
:0045061E 83C414                  add esp, 00000014
:00450621 8A4D14                  mov cl, byte ptr [ebp+14]
:00450624 51                      push ecx
:00450625 8A5510                  mov dl, byte ptr [ebp+10]
:00450628 52                      push edx
:00450629 8B45E8                  mov eax, dword ptr [ebp-18]
:0045062C 8A4804                  mov cl, byte ptr [eax+04]
:0045062F 51                      push ecx
:00450630 8B5508                  mov edx, dword ptr [ebp+08]
:00450633 33C0                    xor eax, eax
:00450635 8A4201                  mov al, byte ptr [edx+01]
:00450638 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045063B 81E1FF000000            and ecx, 000000FF
:00450641 8D5408FF                lea edx, dword ptr [eax+ecx-01]
:00450645 52                      push edx
:00450646 8B4508                  mov eax, dword ptr [ebp+08]
:00450649 33C9                    xor ecx, ecx
:0045064B 8A08                    mov cl, byte ptr [eax]
:0045064D 83C103                  add ecx, 00000003
:00450650 51                      push ecx
:00450651 E841020000              call 00450897
:00450656 83C414                  add esp, 00000014
:00450659 8A5514                  mov dl, byte ptr [ebp+14]
:0045065C 52                      push edx
:0045065D 8A4510                  mov al, byte ptr [ebp+10]
:00450660 50                      push eax
:00450661 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00450664 8A5104                  mov dl, byte ptr [ecx+04]
:00450667 52                      push edx
:00450668 8B4508                  mov eax, dword ptr [ebp+08]
:0045066B 33C9                    xor ecx, ecx
:0045066D 8A4801                  mov cl, byte ptr [eax+01]
:00450670 83E903                  sub ecx, 00000003
:00450673 51                      push ecx
:00450674 8B5508                  mov edx, dword ptr [ebp+08]
:00450677 33C0                    xor eax, eax
:00450679 8A02                    mov al, byte ptr [edx]
:0045067B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045067E 81E1FF000000            and ecx, 000000FF
:00450684 8D5408FF                lea edx, dword ptr [eax+ecx-01]
:00450688 52                      push edx
:00450689 E809020000              call 00450897
:0045068E 83C414                  add esp, 00000014
:00450691 8A4514                  mov al, byte ptr [ebp+14]
:00450694 50                      push eax
:00450695 8A4D10                  mov cl, byte ptr [ebp+10]
:00450698 51                      push ecx
:00450699 8B55E8                  mov edx, dword ptr [ebp-18]
:0045069C 8A4204                  mov al, byte ptr [edx+04]
:0045069F 50                      push eax
:004506A0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004506A3 33D2                    xor edx, edx
:004506A5 8A5101                  mov dl, byte ptr [ecx+01]
:004506A8 83C203                  add edx, 00000003
:004506AB 52                      push edx
:004506AC 8B4508                  mov eax, dword ptr [ebp+08]
:004506AF 33C9                    xor ecx, ecx
:004506B1 8A08                    mov cl, byte ptr [eax]
:004506B3 8B55F8                  mov edx, dword ptr [ebp-08]
:004506B6 81E2FF000000            and edx, 000000FF
:004506BC 8D4411FF                lea eax, dword ptr [ecx+edx-01]
:004506C0 50                      push eax
:004506C1 E8D1010000              call 00450897
:004506C6 83C414                  add esp, 00000014
:004506C9 E901FFFFFF              jmp 004505CF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004505E4(C)
|
:004506CE E904010000              jmp 004507D7
:004506D3 C645F800                mov [ebp-08], 00
:004506D7 EB09                    jmp 004506E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004507D2(U)
|
:004506D9 8A4DF8                  mov cl, byte ptr [ebp-08]
:004506DC 80C101                  add cl, 01
:004506DF 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004506D7(U)
|
:004506E2 8B55F8                  mov edx, dword ptr [ebp-08]
:004506E5 81E2FF000000            and edx, 000000FF
:004506EB 83FA05                  cmp edx, 00000005
:004506EE 0F8DE3000000            jnl 004507D7
:004506F4 8A4514                  mov al, byte ptr [ebp+14]
:004506F7 50                      push eax
:004506F8 8A4D10                  mov cl, byte ptr [ebp+10]
:004506FB 51                      push ecx
:004506FC 8B55E8                  mov edx, dword ptr [ebp-18]
:004506FF 8A4204                  mov al, byte ptr [edx+04]
:00450702 50                      push eax
:00450703 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450706 33D2                    xor edx, edx
:00450708 8A5101                  mov dl, byte ptr [ecx+01]
:0045070B 83EA03                  sub edx, 00000003
:0045070E 52                      push edx
:0045070F 8B4508                  mov eax, dword ptr [ebp+08]
:00450712 33C9                    xor ecx, ecx
:00450714 8A08                    mov cl, byte ptr [eax]
:00450716 8B55F8                  mov edx, dword ptr [ebp-08]
:00450719 81E2FF000000            and edx, 000000FF
:0045071F 8D4411FE                lea eax, dword ptr [ecx+edx-02]
:00450723 50                      push eax
:00450724 E86E010000              call 00450897
:00450729 83C414                  add esp, 00000014
:0045072C 8A4D14                  mov cl, byte ptr [ebp+14]
:0045072F 51                      push ecx
:00450730 8A5510                  mov dl, byte ptr [ebp+10]
:00450733 52                      push edx
:00450734 8B45E8                  mov eax, dword ptr [ebp-18]
:00450737 8A4804                  mov cl, byte ptr [eax+04]
:0045073A 51                      push ecx
:0045073B 8B5508                  mov edx, dword ptr [ebp+08]
:0045073E 33C0                    xor eax, eax
:00450740 8A4201                  mov al, byte ptr [edx+01]
:00450743 83C003                  add eax, 00000003
:00450746 50                      push eax
:00450747 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045074A 33D2                    xor edx, edx
:0045074C 8A11                    mov dl, byte ptr [ecx]
:0045074E 8B45F8                  mov eax, dword ptr [ebp-08]
:00450751 25FF000000              and eax, 000000FF
:00450756 8D4C02FE                lea ecx, dword ptr [edx+eax-02]
:0045075A 51                      push ecx
:0045075B E837010000              call 00450897
:00450760 83C414                  add esp, 00000014
:00450763 8A5514                  mov dl, byte ptr [ebp+14]
:00450766 52                      push edx
:00450767 8A4510                  mov al, byte ptr [ebp+10]
:0045076A 50                      push eax
:0045076B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045076E 8A5104                  mov dl, byte ptr [ecx+04]
:00450771 52                      push edx
:00450772 8B4508                  mov eax, dword ptr [ebp+08]
:00450775 33C9                    xor ecx, ecx
:00450777 8A4801                  mov cl, byte ptr [eax+01]
:0045077A 8B55F8                  mov edx, dword ptr [ebp-08]
:0045077D 81E2FF000000            and edx, 000000FF
:00450783 8D4411FE                lea eax, dword ptr [ecx+edx-02]
:00450787 50                      push eax
:00450788 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045078B 33D2                    xor edx, edx
:0045078D 8A11                    mov dl, byte ptr [ecx]
:0045078F 83EA03                  sub edx, 00000003
:00450792 52                      push edx
:00450793 E8FF000000              call 00450897
:00450798 83C414                  add esp, 00000014
:0045079B 8A4514                  mov al, byte ptr [ebp+14]
:0045079E 50                      push eax
:0045079F 8A4D10                  mov cl, byte ptr [ebp+10]
:004507A2 51                      push ecx
:004507A3 8B55E8                  mov edx, dword ptr [ebp-18]
:004507A6 8A4204                  mov al, byte ptr [edx+04]
:004507A9 50                      push eax
:004507AA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004507AD 33D2                    xor edx, edx
:004507AF 8A5101                  mov dl, byte ptr [ecx+01]
:004507B2 8B45F8                  mov eax, dword ptr [ebp-08]
:004507B5 25FF000000              and eax, 000000FF
:004507BA 8D4C02FE                lea ecx, dword ptr [edx+eax-02]
:004507BE 51                      push ecx
:004507BF 8B5508                  mov edx, dword ptr [ebp+08]
:004507C2 33C0                    xor eax, eax
:004507C4 8A02                    mov al, byte ptr [edx]
:004507C6 83C003                  add eax, 00000003
:004507C9 50                      push eax
:004507CA E8C8000000              call 00450897
:004507CF 83C414                  add esp, 00000014
:004507D2 E902FFFFFF              jmp 004506D9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044FAE4(C), :0044FB0F(U), :0044FB2F(U), :0044FB6A(U), :0044FC2E(U)
|:0044FD0D(U), :0044FDD1(U), :0044FEF8(U), :00450038(U), :004500E1(U)
|:0045019E(U), :004502FF(U), :00450426(U), :0045051B(U), :004505C4(U)
|:004506CE(U), :004506EE(C)
|
:004507D7 8B4D14                  mov ecx, dword ptr [ebp+14]
:004507DA 81E1FF000000            and ecx, 000000FF
:004507E0 85C9                    test ecx, ecx
:004507E2 7404                    je 004507E8
:004507E4 0CFF                    or al, FF
:004507E6 EB69                    jmp 00450851

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004507E2(C)
|
:004507E8 8B155C4A4B00            mov edx, dword ptr [004B4A5C]
:004507EE C602FF                  mov byte ptr [edx], FF
:004507F1 A15C4A4B00              mov eax, dword ptr [004B4A5C]
:004507F6 83C001                  add eax, 00000001
:004507F9 A35C4A4B00              mov dword ptr [004B4A5C], eax
:004507FE C745F460DD4A00          mov [ebp-0C], 004ADD60
:00450805 EB09                    jmp 00450810

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045084C(U)
|
:00450807 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045080A 83C101                  add ecx, 00000001
:0045080D 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450805(U)
|
:00450810 8B55F4                  mov edx, dword ptr [ebp-0C]
:00450813 33C0                    xor eax, eax
:00450815 8A02                    mov al, byte ptr [edx]
:00450817 3DFF000000              cmp eax, 000000FF
:0045081C 7430                    je 0045084E
:0045081E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00450821 8A11                    mov dl, byte ptr [ecx]
:00450823 8855EC                  mov byte ptr [ebp-14], dl
:00450826 8B45EC                  mov eax, dword ptr [ebp-14]
:00450829 25FF000000              and eax, 000000FF
:0045082E 3DFF000000              cmp eax, 000000FF
:00450833 7417                    je 0045084C
:00450835 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00450838 81E1FF000000            and ecx, 000000FF
:0045083E 33D2                    xor edx, edx
:00450840 8A15504A4B00            mov dl, byte ptr [004B4A50]
:00450846 3BCA                    cmp ecx, edx
:00450848 7502                    jne 0045084C
:0045084A EB02                    jmp 0045084E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00450833(C), :00450848(C)
|
:0045084C EBB9                    jmp 00450807

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045081C(C), :0045084A(U)
|
:0045084E 8A45EC                  mov al, byte ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0044FA6A(U), :004507E6(U)
|
:00450851 8BE5                    mov esp, ebp
:00450853 5D                      pop ebp
:00450854 C21000                  ret 0010


:00450857 F4                      hlt
:00450858 FA                      cli
:00450859 44                      inc esp
:0045085A 0014FB                  add byte ptr [ebx+8*edi], dl
:0045085D 44                      inc esp
:0045085E 0034FB                  add byte ptr [ebx+8*edi], dh
:00450861 44                      inc esp
:00450862 006FFB                  add byte ptr [edi-05], ch
:00450865 44                      inc esp
:00450866 0033                    add byte ptr [ebx], dh
:00450868 FC                      cld
:00450869 44                      inc esp
:0045086A 0012                    add byte ptr [edx], dl
:0045086C FD                      std
:0045086D 44                      inc esp
:0045086E 00D6                    add dh, dl
:00450870 FD                      std
:00450871 44                      inc esp
:00450872 00FD                    add ch, bh
:00450874 FE44003D                inc [eax+eax+3D]
:00450878 004500                  add byte ptr [ebp+00], al

:0045087B E6004500                DWORD 004500E6
:0045087F A3014500                DWORD 004501A3
:00450883 04034500                DWORD 00450304
:00450887 2B044500                DWORD 0045042B
:0045088B 20054500                DWORD 00450520
:0045088F C9054500                DWORD 004505C9
:00450893 D3064500                DWORD 004506D3



* Referenced by a CALL at Addresses:
|:0044FACC   , :0044FBAB   , :0044FBD4   , :0044FBFD   , :0044FC26   
|:0044FC8A   , :0044FCB3   , :0044FCDC   , :0044FD05   , :0044FD4E   
|:0044FD77   , :0044FDA0   , :0044FDC9   , :0044FE23   , :0044FE5A   
|:0044FEB3   , :0044FEEB   , :0044FF63   , :0044FF9B   , :0044FFF4   
|:0045002B   , :0045005E   , :00450087   , :004500B0   , :004500D9   
|:0045010C   , :0045013A   , :00450168   , :00450196   , :004501C4   
|:004501ED   , :00450216   , :0045023F   , :0045026D   , :0045029B   
|:004502C9   , :004502F7   , :00450350   , :00450388   , :004503E1   
|:00450419   , :00450476   , :004504A9   , :004504DC   , :0045050E   
|:00450541   , :0045056A   , :00450593   , :004505BC   , :00450619   
|:00450651   , :00450689   , :004506C1   , :00450724   , :0045075B   
|:00450793   , :004507CA   , :00450AFF   , :00450B6E   
|
:00450897 55                      push ebp
:00450898 8BEC                    mov ebp, esp
:0045089A 83EC10                  sub esp, 00000010
:0045089D 8B4508                  mov eax, dword ptr [ebp+08]
:004508A0 25FF000000              and eax, 000000FF
:004508A5 33C9                    xor ecx, ecx
:004508A7 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:004508AD 3BC1                    cmp eax, ecx
:004508AF 0F8DD4010000            jnl 00450A89
:004508B5 8B550C                  mov edx, dword ptr [ebp+0C]
:004508B8 81E2FF000000            and edx, 000000FF
:004508BE 33C0                    xor eax, eax
:004508C0 A0C54E4B00              mov al, byte ptr [004B4EC5]
:004508C5 3BD0                    cmp edx, eax
:004508C7 0F8DBC010000            jnl 00450A89
:004508CD 8B4D14                  mov ecx, dword ptr [ebp+14]
:004508D0 81E1FF000000            and ecx, 000000FF
:004508D6 81E180000000            and ecx, 00000080
:004508DC 85C9                    test ecx, ecx
:004508DE 756F                    jne 0045094F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004508E0 6A04                    push 00000004
:004508E2 6A00                    push 00000000
:004508E4 6A00                    push 00000000
:004508E6 B9881C4B00              mov ecx, 004B1C88
:004508EB E8A0860200              call 00478F90
:004508F0 8B5508                  mov edx, dword ptr [ebp+08]
:004508F3 81E2FF000000            and edx, 000000FF
:004508F9 8D841000960000          lea eax, dword ptr [eax+edx+00009600]
:00450900 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00450903 81E1FF000000            and ecx, 000000FF
:00450909 33D2                    xor edx, edx
:0045090B 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:00450911 0FAFCA                  imul ecx, edx
:00450914 8A5510                  mov dl, byte ptr [ebp+10]
:00450917 881408                  mov byte ptr [eax+ecx], dl

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045091A 6A04                    push 00000004
:0045091C 6A00                    push 00000000
:0045091E 6A00                    push 00000000
:00450920 B9007D4A00              mov ecx, 004A7D00
:00450925 E866860200              call 00478F90
:0045092A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045092D 81E1FF000000            and ecx, 000000FF
:00450933 03C1                    add eax, ecx
:00450935 8B550C                  mov edx, dword ptr [ebp+0C]
:00450938 81E2FF000000            and edx, 000000FF
:0045093E 33C9                    xor ecx, ecx
:00450940 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:00450946 0FAFD1                  imul edx, ecx
:00450949 8A4D10                  mov cl, byte ptr [ebp+10]
:0045094C 880C10                  mov byte ptr [eax+edx], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004508DE(C)
|
:0045094F 8B5518                  mov edx, dword ptr [ebp+18]
:00450952 81E2FF000000            and edx, 000000FF
:00450958 85D2                    test edx, edx
:0045095A 743B                    je 00450997

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045095C 6A04                    push 00000004
:0045095E 6A00                    push 00000000
:00450960 68000F0000              push 00000F00
:00450965 B9007D4A00              mov ecx, 004A7D00
:0045096A E821860200              call 00478F90
:0045096F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00450972 81E1FF000000            and ecx, 000000FF
:00450978 03C1                    add eax, ecx
:0045097A 8B550C                  mov edx, dword ptr [ebp+0C]
:0045097D 81E2FF000000            and edx, 000000FF
:00450983 33C9                    xor ecx, ecx
:00450985 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0045098B 0FAFD1                  imul edx, ecx
:0045098E C6041001                mov byte ptr [eax+edx], 01
:00450992 E9F2000000              jmp 00450A89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045095A(C)
|
:00450997 8A550C                  mov dl, byte ptr [ebp+0C]
:0045099A 52                      push edx
:0045099B 8A4508                  mov al, byte ptr [ebp+08]
:0045099E 50                      push eax
:0045099F 8D4DF8                  lea ecx, dword ptr [ebp-08]
:004509A2 E8B961FEFF              call 00436B60
:004509A7 8D4DF8                  lea ecx, dword ptr [ebp-08]
:004509AA 51                      push ecx
:004509AB E82CEEFFFF              call 0044F7DC
:004509B0 83C404                  add esp, 00000004
:004509B3 8845FC                  mov byte ptr [ebp-04], al
:004509B6 8B55FC                  mov edx, dword ptr [ebp-04]
:004509B9 81E2FF000000            and edx, 000000FF
:004509BF 81FAFF000000            cmp edx, 000000FF
:004509C5 0F84BE000000            je 00450A89
:004509CB 8B4D10                  mov ecx, dword ptr [ebp+10]
:004509CE 81E1FF000000            and ecx, 000000FF
:004509D4 6BC924                  imul ecx, 00000024
:004509D7 81C1B83B4B00            add ecx, 004B3BB8
:004509DD E82EBFFBFF              call 0040C910
:004509E2 8945F4                  mov dword ptr [ebp-0C], eax
:004509E5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004509E8 81E1FF000000            and ecx, 000000FF
:004509EE 6BC924                  imul ecx, 00000024
:004509F1 81C1B83B4B00            add ecx, 004B3BB8
:004509F7 E814BFFBFF              call 0040C910
:004509FC 8945F0                  mov dword ptr [ebp-10], eax
:004509FF 8B4514                  mov eax, dword ptr [ebp+14]
:00450A02 25FF000000              and eax, 000000FF
:00450A07 83E001                  and eax, 00000001
:00450A0A 85C0                    test eax, eax
:00450A0C 743F                    je 00450A4D
:00450A0E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00450A11 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:00450A14 7535                    jne 00450A4B
:00450A16 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450A19 81E1FF000000            and ecx, 000000FF
:00450A1F 6BC924                  imul ecx, 00000024
:00450A22 81C1B83B4B00            add ecx, 004B3BB8
:00450A28 E8245FFEFF              call 00436951
:00450A2D 85C0                    test eax, eax
:00450A2F 741A                    je 00450A4B
:00450A31 8B155C4A4B00            mov edx, dword ptr [004B4A5C]
:00450A37 8A45FC                  mov al, byte ptr [ebp-04]
:00450A3A 8802                    mov byte ptr [edx], al
:00450A3C 8B0D5C4A4B00            mov ecx, dword ptr [004B4A5C]
:00450A42 83C101                  add ecx, 00000001
:00450A45 890D5C4A4B00            mov dword ptr [004B4A5C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00450A14(C), :00450A2F(C)
|
:00450A4B EB3C                    jmp 00450A89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450A0C(C)
|
:00450A4D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00450A50 3B55F0                  cmp edx, dword ptr [ebp-10]
:00450A53 7434                    je 00450A89
:00450A55 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450A58 81E1FF000000            and ecx, 000000FF
:00450A5E 6BC924                  imul ecx, 00000024
:00450A61 81C1B83B4B00            add ecx, 004B3BB8
:00450A67 E8E55EFEFF              call 00436951
:00450A6C 85C0                    test eax, eax
:00450A6E 7419                    je 00450A89
:00450A70 A15C4A4B00              mov eax, dword ptr [004B4A5C]
:00450A75 8A4DFC                  mov cl, byte ptr [ebp-04]
:00450A78 8808                    mov byte ptr [eax], cl
:00450A7A 8B155C4A4B00            mov edx, dword ptr [004B4A5C]
:00450A80 83C201                  add edx, 00000001
:00450A83 89155C4A4B00            mov dword ptr [004B4A5C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004508AF(C), :004508C7(C), :00450992(U), :004509C5(C), :00450A4B(U)
|:00450A53(C), :00450A6E(C)
|
:00450A89 8BE5                    mov esp, ebp
:00450A8B 5D                      pop ebp
:00450A8C C3                      ret



* Referenced by a CALL at Addresses:
|:0044FB07   , :0044FB47   , :0044FB82   , :0044FC46   
|
:00450A8D 55                      push ebp
:00450A8E 8BEC                    mov ebp, esp
:00450A90 83EC08                  sub esp, 00000008
:00450A93 68FF000000              push 000000FF
:00450A98 68FF000000              push 000000FF
:00450A9D 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00450AA0 E8BB60FEFF              call 00436B60
:00450AA5 C645F800                mov [ebp-08], 00
:00450AA9 EB08                    jmp 00450AB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450B07(U)
|
:00450AAB 8A45F8                  mov al, byte ptr [ebp-08]
:00450AAE 0401                    add al, 01
:00450AB0 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450AA9(U)
|
:00450AB3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450AB6 81E1FF000000            and ecx, 000000FF
:00450ABC 83F904                  cmp ecx, 00000004
:00450ABF 7D48                    jge 00450B09
:00450AC1 8A55F8                  mov dl, byte ptr [ebp-08]
:00450AC4 52                      push edx
:00450AC5 8B4508                  mov eax, dword ptr [ebp+08]
:00450AC8 50                      push eax
:00450AC9 E823EEFFFF              call 0044F8F1
:00450ACE 83C408                  add esp, 00000008
:00450AD1 50                      push eax
:00450AD2 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00450AD5 E8C65FFEFF              call 00436AA0
:00450ADA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450ADD 81E1FF000000            and ecx, 000000FF
:00450AE3 81F9FF000000            cmp ecx, 000000FF
:00450AE9 741C                    je 00450B07
:00450AEB 8A5510                  mov dl, byte ptr [ebp+10]
:00450AEE 52                      push edx
:00450AEF 8A450C                  mov al, byte ptr [ebp+0C]
:00450AF2 50                      push eax
:00450AF3 8A4D14                  mov cl, byte ptr [ebp+14]
:00450AF6 51                      push ecx
:00450AF7 8A55FD                  mov dl, byte ptr [ebp-03]
:00450AFA 52                      push edx
:00450AFB 8A45FC                  mov al, byte ptr [ebp-04]
:00450AFE 50                      push eax
:00450AFF E893FDFFFF              call 00450897
:00450B04 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450AE9(C)
|
:00450B07 EBA2                    jmp 00450AAB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450ABF(C)
|
:00450B09 8BE5                    mov esp, ebp
:00450B0B 5D                      pop ebp
:00450B0C C3                      ret



* Referenced by a CALL at Addresses:
|:0044FB27   , :0044FB62   , :0044FC61   , :0044FD25   , :0044FF10   
|
:00450B0D 55                      push ebp
:00450B0E 8BEC                    mov ebp, esp
:00450B10 51                      push ecx
:00450B11 C645FC00                mov [ebp-04], 00
:00450B15 EB08                    jmp 00450B1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450B76(U)
|
:00450B17 8A45FC                  mov al, byte ptr [ebp-04]
:00450B1A 0401                    add al, 01
:00450B1C 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450B15(U)
|
:00450B1F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450B22 81E1FF000000            and ecx, 000000FF
:00450B28 83F904                  cmp ecx, 00000004
:00450B2B 7D4B                    jge 00450B78
:00450B2D 8A5510                  mov dl, byte ptr [ebp+10]
:00450B30 52                      push edx
:00450B31 8A450C                  mov al, byte ptr [ebp+0C]
:00450B34 50                      push eax
:00450B35 8A4D14                  mov cl, byte ptr [ebp+14]
:00450B38 51                      push ecx
:00450B39 8B5508                  mov edx, dword ptr [ebp+08]
:00450B3C 33C0                    xor eax, eax
:00450B3E 8A4201                  mov al, byte ptr [edx+01]
:00450B41 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450B44 81E1FF000000            and ecx, 000000FF
:00450B4A D1E1                    shl ecx, 1
:00450B4C 03048DB4EC4700          add eax, dword ptr [4*ecx+0047ECB4]
:00450B53 50                      push eax
:00450B54 8B5508                  mov edx, dword ptr [ebp+08]
:00450B57 33C0                    xor eax, eax
:00450B59 8A02                    mov al, byte ptr [edx]
:00450B5B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450B5E 81E1FF000000            and ecx, 000000FF
:00450B64 D1E1                    shl ecx, 1
:00450B66 03048DB0EC4700          add eax, dword ptr [4*ecx+0047ECB0]
:00450B6D 50                      push eax
:00450B6E E824FDFFFF              call 00450897
:00450B73 83C414                  add esp, 00000014
:00450B76 EB9F                    jmp 00450B17

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450B2B(C)
|
:00450B78 8BE5                    mov esp, ebp
:00450B7A 5D                      pop ebp
:00450B7B C3                      ret



* Referenced by a CALL at Addresses:
|:00450D1A   , :00454282   , :0045466F   , :0045469F   , :00454724   
|:004547EF   , :00454898   , :00454C5A   , :00455498   , :0045D412   
|
:00450B7C 55                      push ebp
:00450B7D 8BEC                    mov ebp, esp
:00450B7F 83EC10                  sub esp, 00000010
:00450B82 894DF4                  mov dword ptr [ebp-0C], ecx
:00450B85 8B45F4                  mov eax, dword ptr [ebp-0C]
:00450B88 8B08                    mov ecx, dword ptr [eax]
:00450B8A 6BC950                  imul ecx, 00000050
:00450B8D 81C1787F4900            add ecx, 00497F78
:00450B93 894DF8                  mov dword ptr [ebp-08], ecx
:00450B96 8B55F4                  mov edx, dword ptr [ebp-0C]
:00450B99 837A1000                cmp dword ptr [edx+10], 00000000
:00450B9D 7504                    jne 00450BA3
:00450B9F 33C0                    xor eax, eax
:00450BA1 EB49                    jmp 00450BEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450B9D(C)
|
:00450BA3 8B45F4                  mov eax, dword ptr [ebp-0C]
:00450BA6 8138C8000000            cmp dword ptr [eax], 000000C8
:00450BAC 7718                    ja 00450BC6
:00450BAE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450BB1 E83412FBFF              call 00401DEA
:00450BB6 D1E0                    shl eax, 1
:00450BB8 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00450BBA B905000000              mov ecx, 00000005
:00450BBF F7F1                    div ecx
:00450BC1 8945F0                  mov dword ptr [ebp-10], eax
:00450BC4 EB14                    jmp 00450BDA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450BAC(C)
|
:00450BC6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00450BC9 E81C12FBFF              call 00401DEA
:00450BCE 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00450BD0 B905000000              mov ecx, 00000005
:00450BD5 F7F1                    div ecx
:00450BD7 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450BC4(U)
|
:00450BDA 8B55F0                  mov edx, dword ptr [ebp-10]
:00450BDD 8955FC                  mov dword ptr [ebp-04], edx
:00450BE0 8B45F4                  mov eax, dword ptr [ebp-0C]
:00450BE3 8B4810                  mov ecx, dword ptr [eax+10]
:00450BE6 394DFC                  cmp dword ptr [ebp-04], ecx
:00450BE9 1BC0                    sbb eax, eax
:00450BEB 40                      inc eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450BA1(U)
|
:00450BEC 8BE5                    mov esp, ebp
:00450BEE 5D                      pop ebp
:00450BEF C3                      ret



* Referenced by a CALL at Address:
|:004526D1   
|
:00450BF0 55                      push ebp
:00450BF1 8BEC                    mov ebp, esp
:00450BF3 83EC28                  sub esp, 00000028
:00450BF6 56                      push esi
:00450BF7 894DE4                  mov dword ptr [ebp-1C], ecx
:00450BFA 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00450BFD E86425FEFF              call 00433166
:00450C02 8845F8                  mov byte ptr [ebp-08], al
:00450C05 C6054C4A4B0000          mov byte ptr [004B4A4C], 00
:00450C0C 68FF000000              push 000000FF
:00450C11 33C0                    xor eax, eax
:00450C13 A0C44E4B00              mov al, byte ptr [004B4EC4]
:00450C18 33C9                    xor ecx, ecx
:00450C1A 8A0DC54E4B00            mov cl, byte ptr [004B4EC5]
:00450C20 0FAFC1                  imul eax, ecx
:00450C23 50                      push eax
:00450C24 B9007D4A00              mov ecx, 004A7D00
:00450C29 E892F2FBFF              call 0040FEC0
:00450C2E 50                      push eax
:00450C2F E8AC790200              call 004785E0
:00450C34 83C40C                  add esp, 0000000C
:00450C37 C645FC00                mov [ebp-04], 00
:00450C3B EB09                    jmp 00450C46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450CDE(U)
|
:00450C3D 8A55FC                  mov dl, byte ptr [ebp-04]
:00450C40 80C201                  add dl, 01
:00450C43 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450C3B(U)
|
:00450C46 8B45FC                  mov eax, dword ptr [ebp-04]
:00450C49 25FF000000              and eax, 000000FF
:00450C4E 83F85A                  cmp eax, 0000005A
:00450C51 0F8D8C000000            jnl 00450CE3
:00450C57 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450C5A 81E1FF000000            and ecx, 000000FF
:00450C60 6BC924                  imul ecx, 00000024
:00450C63 81C1B83B4B00            add ecx, 004B3BB8
:00450C69 E8A2BCFBFF              call 0040C910
:00450C6E 8BF0                    mov esi, eax
:00450C70 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00450C73 E898BCFBFF              call 0040C910
:00450C78 3BF0                    cmp esi, eax
:00450C7A 7462                    je 00450CDE
:00450C7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450C7F 81E1FF000000            and ecx, 000000FF
:00450C85 6BC924                  imul ecx, 00000024
:00450C88 81C1B83B4B00            add ecx, 004B3BB8
:00450C8E E83DB40000              call 0045C0D0
:00450C93 25FF000000              and eax, 000000FF
:00450C98 83F802                  cmp eax, 00000002
:00450C9B 7541                    jne 00450CDE
:00450C9D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450CA0 81E1FF000000            and ecx, 000000FF
:00450CA6 6BC924                  imul ecx, 00000024
:00450CA9 81C1B83B4B00            add ecx, 004B3BB8
:00450CAF E88C0FFEFF              call 00431C40
:00450CB4 668B08                  mov cx, word ptr [eax]
:00450CB7 66894DF4                mov word ptr [ebp-0C], cx
:00450CBB 6A00                    push 00000000
:00450CBD 6A00                    push 00000000
:00450CBF 8A55F8                  mov dl, byte ptr [ebp-08]
:00450CC2 52                      push edx
:00450CC3 8D45F4                  lea eax, dword ptr [ebp-0C]
:00450CC6 50                      push eax
:00450CC7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00450CCA 81E1FF000000            and ecx, 000000FF
:00450CD0 6BC924                  imul ecx, 00000024
:00450CD3 81C1B83B4B00            add ecx, 004B3BB8
:00450CD9 E85CEDFFFF              call 0044FA3A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00450C7A(C), :00450C9B(C)
|
:00450CDE E95AFFFFFF              jmp 00450C3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450C51(C)
|
:00450CE3 6A00                    push 00000000
:00450CE5 33C9                    xor ecx, ecx
:00450CE7 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:00450CED 33D2                    xor edx, edx
:00450CEF 8A15C54E4B00            mov dl, byte ptr [004B4EC5]
:00450CF5 0FAFCA                  imul ecx, edx
:00450CF8 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00450CF9 6A04                    push 00000004
:00450CFB 6A00                    push 00000000
:00450CFD 6A00                    push 00000000
:00450CFF B9007D4A00              mov ecx, 004A7D00
:00450D04 E887820200              call 00478F90
:00450D09 0580070000              add eax, 00000780
:00450D0E 50                      push eax
:00450D0F E8CC780200              call 004785E0
:00450D14 83C40C                  add esp, 0000000C
:00450D17 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00450D1A E85DFEFFFF              call 00450B7C
:00450D1F 85C0                    test eax, eax
:00450D21 0F8435020000            je 00450F5C
:00450D27 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00450D2A E8514AFBFF              call 00405780
:00450D2F 25FF000000              and eax, 000000FF
:00450D34 83F802                  cmp eax, 00000002
:00450D37 0F841F020000            je 00450F5C
:00450D3D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00450D40 E83B4AFBFF              call 00405780
:00450D45 25FF000000              and eax, 000000FF
:00450D4A 83F804                  cmp eax, 00000004
:00450D4D 0F8409020000            je 00450F5C
:00450D53 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00450D56 E89549FBFF              call 004056F0
:00450D5B C745EC00000000          mov [ebp-14], 00000000
:00450D62 EB09                    jmp 00450D6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450F48(U)
|
:00450D64 8B45EC                  mov eax, dword ptr [ebp-14]
:00450D67 83C001                  add eax, 00000001
:00450D6A 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450D62(U)
|
:00450D6D 33C9                    xor ecx, ecx
:00450D6F 8A0DC54E4B00            mov cl, byte ptr [004B4EC5]
:00450D75 394DEC                  cmp dword ptr [ebp-14], ecx
:00450D78 0F83CF010000            jnb 00450F4D
:00450D7E C745E800000000          mov [ebp-18], 00000000
:00450D85 EB09                    jmp 00450D90

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450F43(U)
|
:00450D87 8B55E8                  mov edx, dword ptr [ebp-18]
:00450D8A 83C201                  add edx, 00000001
:00450D8D 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450D85(U)
|
:00450D90 33C0                    xor eax, eax
:00450D92 A0C44E4B00              mov al, byte ptr [004B4EC4]
:00450D97 3945E8                  cmp dword ptr [ebp-18], eax
:00450D9A 0F83A8010000            jnb 00450F48
:00450DA0 8A4DE8                  mov cl, byte ptr [ebp-18]
:00450DA3 884DF0                  mov byte ptr [ebp-10], cl
:00450DA6 8A55EC                  mov dl, byte ptr [ebp-14]
:00450DA9 8855F1                  mov byte ptr [ebp-0F], dl
:00450DAC 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00450DAF E83C5DFEFF              call 00436AF0
:00450DB4 25FF000000              and eax, 000000FF
:00450DB9 83F80C                  cmp eax, 0000000C
:00450DBC 0F8593000000            jne 00450E55
:00450DC2 8B45E4                  mov eax, dword ptr [ebp-1C]
:00450DC5 8B08                    mov ecx, dword ptr [eax]
:00450DC7 6BC950                  imul ecx, 00000050
:00450DCA 81C1787F4900            add ecx, 00497F78
:00450DD0 E8CBF0FBFF              call 0040FEA0
:00450DD5 25FF000000              and eax, 000000FF
:00450DDA 83F80A                  cmp eax, 0000000A
:00450DDD 7C76                    jl 00450E55
:00450DDF 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00450DE2 51                      push ecx
:00450DE3 E870EAFFFF              call 0044F858
:00450DE8 83C404                  add esp, 00000004
:00450DEB 25FF000000              and eax, 000000FF
:00450DF0 83F80A                  cmp eax, 0000000A
:00450DF3 7416                    je 00450E0B
:00450DF5 8D55F0                  lea edx, dword ptr [ebp-10]
:00450DF8 52                      push edx
:00450DF9 E85AEAFFFF              call 0044F858
:00450DFE 83C404                  add esp, 00000004
:00450E01 25FF000000              and eax, 000000FF
:00450E06 83F80D                  cmp eax, 0000000D
:00450E09 754A                    jne 00450E55

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450DF3(C)
|
:00450E0B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00450E0E E8ED24FBFF              call 00403300
:00450E13 83F80A                  cmp eax, 0000000A
:00450E16 763D                    jbe 00450E55

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00450E18 6A04                    push 00000004
:00450E1A 6A00                    push 00000000
:00450E1C 6A00                    push 00000000
:00450E1E B9007D4A00              mov ecx, 004A7D00
:00450E23 E868810200              call 00478F90
:00450E28 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00450E2B 8D940880070000          lea edx, dword ptr [eax+ecx+00000780]
:00450E32 33C0                    xor eax, eax
:00450E34 A0C44E4B00              mov al, byte ptr [004B4EC4]
:00450E39 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00450E3C 0FAFC8                  imul ecx, eax
:00450E3F 03D1                    add edx, ecx
:00450E41 8955E0                  mov dword ptr [ebp-20], edx
:00450E44 8B55E0                  mov edx, dword ptr [ebp-20]
:00450E47 8A02                    mov al, byte ptr [edx]
:00450E49 0419                    add al, 19
:00450E4B 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00450E4E 8801                    mov byte ptr [ecx], al
:00450E50 E9A6000000              jmp 00450EFB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00450DBC(C), :00450DDD(C), :00450E09(C), :00450E16(C)
|
:00450E55 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00450E58 E8935CFEFF              call 00436AF0
:00450E5D 25FF000000              and eax, 000000FF
:00450E62 83F80B                  cmp eax, 0000000B
:00450E65 0F8590000000            jne 00450EFB
:00450E6B 8B55E4                  mov edx, dword ptr [ebp-1C]
:00450E6E 8B0A                    mov ecx, dword ptr [edx]
:00450E70 6BC950                  imul ecx, 00000050
:00450E73 81C1787F4900            add ecx, 00497F78
:00450E79 E822F0FBFF              call 0040FEA0
:00450E7E 25FF000000              and eax, 000000FF
:00450E83 83F80A                  cmp eax, 0000000A
:00450E86 7C73                    jl 00450EFB
:00450E88 8D45F0                  lea eax, dword ptr [ebp-10]
:00450E8B 50                      push eax
:00450E8C E8C7E9FFFF              call 0044F858
:00450E91 83C404                  add esp, 00000004
:00450E94 25FF000000              and eax, 000000FF
:00450E99 83F805                  cmp eax, 00000005
:00450E9C 7416                    je 00450EB4
:00450E9E 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00450EA1 51                      push ecx
:00450EA2 E8B1E9FFFF              call 0044F858
:00450EA7 83C404                  add esp, 00000004
:00450EAA 25FF000000              and eax, 000000FF
:00450EAF 83F807                  cmp eax, 00000007
:00450EB2 7547                    jne 00450EFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450E9C(C)
|
:00450EB4 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00450EB7 E84424FBFF              call 00403300
:00450EBC 83F80A                  cmp eax, 0000000A
:00450EBF 763A                    jbe 00450EFB

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00450EC1 6A04                    push 00000004
:00450EC3 6A00                    push 00000000
:00450EC5 6A00                    push 00000000
:00450EC7 B9007D4A00              mov ecx, 004A7D00
:00450ECC E8BF800200              call 00478F90
:00450ED1 8B55E8                  mov edx, dword ptr [ebp-18]
:00450ED4 8D841080070000          lea eax, dword ptr [eax+edx+00000780]
:00450EDB 33C9                    xor ecx, ecx
:00450EDD 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:00450EE3 8B55EC                  mov edx, dword ptr [ebp-14]
:00450EE6 0FAFD1                  imul edx, ecx
:00450EE9 03C2                    add eax, edx
:00450EEB 8945DC                  mov dword ptr [ebp-24], eax
:00450EEE 8B45DC                  mov eax, dword ptr [ebp-24]
:00450EF1 8A08                    mov cl, byte ptr [eax]
:00450EF3 80C119                  add cl, 19
:00450EF6 8B55DC                  mov edx, dword ptr [ebp-24]
:00450EF9 880A                    mov byte ptr [edx], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00450E50(U), :00450E65(C), :00450E86(C), :00450EB2(C), :00450EBF(C)
|
:00450EFB 8D45F0                  lea eax, dword ptr [ebp-10]
:00450EFE 50                      push eax
:00450EFF E850E7FFFF              call 0044F654
:00450F04 83C404                  add esp, 00000004
:00450F07 85C0                    test eax, eax
:00450F09 7438                    je 00450F43

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00450F0B 6A04                    push 00000004
:00450F0D 6A00                    push 00000000
:00450F0F 6A00                    push 00000000
:00450F11 B9007D4A00              mov ecx, 004A7D00
:00450F16 E875800200              call 00478F90
:00450F1B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00450F1E 8D940880070000          lea edx, dword ptr [eax+ecx+00000780]
:00450F25 33C0                    xor eax, eax
:00450F27 A0C44E4B00              mov al, byte ptr [004B4EC4]
:00450F2C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00450F2F 0FAFC8                  imul ecx, eax
:00450F32 03D1                    add edx, ecx
:00450F34 8955D8                  mov dword ptr [ebp-28], edx
:00450F37 8B55D8                  mov edx, dword ptr [ebp-28]
:00450F3A 8A02                    mov al, byte ptr [edx]
:00450F3C 0432                    add al, 32
:00450F3E 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00450F41 8801                    mov byte ptr [ecx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450F09(C)
|
:00450F43 E93FFEFFFF              jmp 00450D87

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450D9A(C)
|
:00450F48 E917FEFFFF              jmp 00450D64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450D78(C)
|
:00450F4D 8A154C4A4B00            mov dl, byte ptr [004B4A4C]
:00450F53 80CA01                  or dl, 01
:00450F56 88154C4A4B00            mov byte ptr [004B4A4C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00450D21(C), :00450D37(C), :00450D4D(C)
|
:00450F5C C605704A4B0000          mov byte ptr [004B4A70], 00
:00450F63 C605504A4B00FF          mov byte ptr [004B4A50], FF
:00450F6A C605484A4B00FF          mov byte ptr [004B4A48], FF
:00450F71 C6056C4A4B00FF          mov byte ptr [004B4A6C], FF
:00450F78 5E                      pop esi
:00450F79 8BE5                    mov esp, ebp
:00450F7B 5D                      pop ebp
:00450F7C C20400                  ret 0004



* Referenced by a CALL at Address:
|:00452C2A   
|
:00450F7F 55                      push ebp
:00450F80 8BEC                    mov ebp, esp
:00450F82 83EC18                  sub esp, 00000018
:00450F85 894DE8                  mov dword ptr [ebp-18], ecx
:00450F88 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00450F8B E86047FBFF              call 004056F0
:00450F90 C645FC00                mov [ebp-04], 00
:00450F94 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00450F97 E834B10000              call 0045C0D0
:00450F9C 25FF000000              and eax, 000000FF
:00450FA1 83F802                  cmp eax, 00000002
:00450FA4 7526                    jne 00450FCC
:00450FA6 33C0                    xor eax, eax
:00450FA8 A0484A4B00              mov al, byte ptr [004B4A48]
:00450FAD 3DFF000000              cmp eax, 000000FF
:00450FB2 7418                    je 00450FCC
:00450FB4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00450FB7 83C105                  add ecx, 00000005
:00450FBA 51                      push ecx
:00450FBB 68484A4B00              push 004B4A48
:00450FC0 E8DB5FFEFF              call 00436FA0
:00450FC5 83C408                  add esp, 00000008
:00450FC8 85C0                    test eax, eax
:00450FCA 7405                    je 00450FD1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00450FA4(C), :00450FB2(C)
|
:00450FCC E916010000              jmp 004510E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450FCA(C)
|
:00450FD1 6A00                    push 00000000
:00450FD3 68FF000000              push 000000FF
:00450FD8 68484A4B00              push 004B4A48
:00450FDD 8B55E8                  mov edx, dword ptr [ebp-18]
:00450FE0 83C205                  add edx, 00000005
:00450FE3 52                      push edx
:00450FE4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00450FE7 E8F0080000              call 004518DC
:00450FEC 8945F0                  mov dword ptr [ebp-10], eax
:00450FEF 8B45F0                  mov eax, dword ptr [ebp-10]
:00450FF2 33C9                    xor ecx, ecx
:00450FF4 8A08                    mov cl, byte ptr [eax]
:00450FF6 81F9FF000000            cmp ecx, 000000FF
:00450FFC 7505                    jne 00451003
:00450FFE E9E4000000              jmp 004510E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00450FFC(C)
|
:00451003 6A00                    push 00000000
:00451005 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00451008 E8D342FEFF              call 004352E0
:0045100D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00451010 E8CF36FEFF              call 004346E4
:00451015 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00451018 E83459FEFF              call 00436951
:0045101D 85C0                    test eax, eax
:0045101F 750C                    jne 0045102D

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00451021 6A08                    push 00000008
:00451023 B9F8544B00              mov ecx, 004B54F8
:00451028 E8ED840100              call 0046951A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045101F(C)
|
:0045102D C745F400000000          mov [ebp-0C], 00000000
:00451034 EB09                    jmp 0045103F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045108F(U), :004510D0(U)
|
:00451036 8B55F4                  mov edx, dword ptr [ebp-0C]
:00451039 83C201                  add edx, 00000001
:0045103C 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451034(U)
|
:0045103F 8B45E8                  mov eax, dword ptr [ebp-18]
:00451042 83C005                  add eax, 00000005
:00451045 50                      push eax
:00451046 68484A4B00              push 004B4A48
:0045104B E8505FFEFF              call 00436FA0
:00451050 83C408                  add esp, 00000008
:00451053 85C0                    test eax, eax
:00451055 757E                    jne 004510D5
:00451057 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045105A 034DF4                  add ecx, dword ptr [ebp-0C]
:0045105D 8A11                    mov dl, byte ptr [ecx]
:0045105F 8855F8                  mov byte ptr [ebp-08], dl
:00451062 8A45F8                  mov al, byte ptr [ebp-08]
:00451065 50                      push eax
:00451066 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00451069 83C105                  add ecx, 00000005
:0045106C 51                      push ecx
:0045106D E87FE8FFFF              call 0044F8F1
:00451072 83C408                  add esp, 00000008
:00451075 50                      push eax
:00451076 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00451079 E8225AFEFF              call 00436AA0
:0045107E 8B55EC                  mov edx, dword ptr [ebp-14]
:00451081 81E2FF000000            and edx, 000000FF
:00451087 81FAFF000000            cmp edx, 000000FF
:0045108D 7502                    jne 00451091
:0045108F EBA5                    jmp 00451036

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045108D(C)
|
:00451091 8A45F8                  mov al, byte ptr [ebp-08]
:00451094 50                      push eax
:00451095 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00451098 E87448FEFF              call 00435911
:0045109D 8D4DEC                  lea ecx, dword ptr [ebp-14]
:004510A0 51                      push ecx
:004510A1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004510A4 83C105                  add ecx, 00000005
:004510A7 E8F459FEFF              call 00436AA0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004510AC 6A04                    push 00000004
:004510AE 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004510B1 E83A5DFEFF              call 00436DF0
:004510B6 85C0                    test eax, eax
:004510B8 7516                    jne 004510D0
:004510BA 8B55FC                  mov edx, dword ptr [ebp-04]
:004510BD 81E2FF000000            and edx, 000000FF
:004510C3 83FA64                  cmp edx, 00000064
:004510C6 7C08                    jl 004510D0
:004510C8 8A45FC                  mov al, byte ptr [ebp-04]
:004510CB 0401                    add al, 01
:004510CD 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004510B8(C), :004510C6(C)
|
:004510D0 E961FFFFFF              jmp 00451036

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451055(C)
|
:004510D5 6A40                    push 00000040
:004510D7 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004510DA E8F157FEFF              call 004368D0
:004510DF 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004510E2 E8D435FEFF              call 004346BB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00450FCC(U), :00450FFE(U)
|
:004510E7 8BE5                    mov esp, ebp
:004510E9 5D                      pop ebp
:004510EA C3                      ret



* Referenced by a CALL at Address:
|:004557E7   
|
:004510EB 55                      push ebp
:004510EC 8BEC                    mov ebp, esp
:004510EE 83EC14                  sub esp, 00000014
:004510F1 894DEC                  mov dword ptr [ebp-14], ecx
:004510F4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004510F7 E86A20FEFF              call 00433166
:004510FC 8845F8                  mov byte ptr [ebp-08], al
:004510FF C645FC00                mov [ebp-04], 00
:00451103 C645F400                mov [ebp-0C], 00
:00451107 C605584A4B00FF          mov byte ptr [004B4A58], FF
:0045110E 6A00                    push 00000000
:00451110 6880000000              push 00000080
:00451115 8A45F8                  mov al, byte ptr [ebp-08]
:00451118 50                      push eax
:00451119 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045111C 51                      push ecx
:0045111D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00451120 E815E9FFFF              call 0044FA3A
:00451125 25FF000000              and eax, 000000FF
:0045112A 3DFF000000              cmp eax, 000000FF
:0045112F 746C                    je 0045119D
:00451131 C745F060DD4A00          mov [ebp-10], 004ADD60
:00451138 EB09                    jmp 00451143

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045119B(U)
|
:0045113A 8B55F0                  mov edx, dword ptr [ebp-10]
:0045113D 83C201                  add edx, 00000001
:00451140 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451138(U)
|
:00451143 8B45F0                  mov eax, dword ptr [ebp-10]
:00451146 33C9                    xor ecx, ecx
:00451148 8A08                    mov cl, byte ptr [eax]
:0045114A 81F9FF000000            cmp ecx, 000000FF
:00451150 744B                    je 0045119D
:00451152 8B55F0                  mov edx, dword ptr [ebp-10]
:00451155 33C0                    xor eax, eax
:00451157 8A02                    mov al, byte ptr [edx]
:00451159 83F85A                  cmp eax, 0000005A
:0045115C 7D3F                    jge 0045119D
:0045115E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451161 668B11                  mov dx, word ptr [ecx]
:00451164 52                      push edx
:00451165 8B45F0                  mov eax, dword ptr [ebp-10]
:00451168 8A08                    mov cl, byte ptr [eax]
:0045116A 51                      push ecx
:0045116B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045116E E833000000              call 004511A6
:00451173 8845FC                  mov byte ptr [ebp-04], al
:00451176 8B55F4                  mov edx, dword ptr [ebp-0C]
:00451179 81E2FF000000            and edx, 000000FF
:0045117F 8B45FC                  mov eax, dword ptr [ebp-04]
:00451182 25FF000000              and eax, 000000FF
:00451187 3BD0                    cmp edx, eax
:00451189 7D10                    jge 0045119B
:0045118B 8A4DFC                  mov cl, byte ptr [ebp-04]
:0045118E 884DF4                  mov byte ptr [ebp-0C], cl
:00451191 8B55F0                  mov edx, dword ptr [ebp-10]
:00451194 8A02                    mov al, byte ptr [edx]
:00451196 A2584A4B00              mov byte ptr [004B4A58], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451189(C)
|
:0045119B EB9D                    jmp 0045113A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045112F(C), :00451150(C), :0045115C(C)
|
:0045119D 8A45F4                  mov al, byte ptr [ebp-0C]
:004511A0 8BE5                    mov esp, ebp
:004511A2 5D                      pop ebp
:004511A3 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045116E   
|
:004511A6 55                      push ebp
:004511A7 8BEC                    mov ebp, esp
:004511A9 83EC38                  sub esp, 00000038
:004511AC 56                      push esi
:004511AD 894DC8                  mov dword ptr [ebp-38], ecx
:004511B0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004511B3 81E1FF000000            and ecx, 000000FF
:004511B9 6BC924                  imul ecx, 00000024
:004511BC 81C1B83B4B00            add ecx, 004B3BB8
:004511C2 E81958FEFF              call 004369E0
:004511C7 8945F8                  mov dword ptr [ebp-08], eax
:004511CA C745F400000000          mov [ebp-0C], 00000000
:004511D1 8B45C8                  mov eax, dword ptr [ebp-38]
:004511D4 8B08                    mov ecx, dword ptr [eax]
:004511D6 6BC950                  imul ecx, 00000050
:004511D9 81C1787F4900            add ecx, 00497F78
:004511DF E8DC1FFBFF              call 004031C0
:004511E4 25FF000000              and eax, 000000FF
:004511E9 3DFF000000              cmp eax, 000000FF
:004511EE 7507                    jne 004511F7
:004511F0 33C0                    xor eax, eax
:004511F2 E950030000              jmp 00451547

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004511EE(C)
|
:004511F7 8B4DC8                  mov ecx, dword ptr [ebp-38]
:004511FA E8F158FEFF              call 00436AF0
:004511FF 25FF000000              and eax, 000000FF
:00451204 83F805                  cmp eax, 00000005
:00451207 751B                    jne 00451224
:00451209 B9784E4B00              mov ecx, 004B4E78
:0045120E E86CE10000              call 0045F37F
:00451213 25FF000000              and eax, 000000FF
:00451218 83F802                  cmp eax, 00000002
:0045121B 7507                    jne 00451224
:0045121D 33C0                    xor eax, eax
:0045121F E923030000              jmp 00451547

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451207(C), :0045121B(C)
|
:00451224 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451227 81E1FF000000            and ecx, 000000FF
:0045122D 81F9FF000000            cmp ecx, 000000FF
:00451233 0F8434010000            je 0045136D
:00451239 8B5508                  mov edx, dword ptr [ebp+08]
:0045123C 81E2FF000000            and edx, 000000FF
:00451242 83FA5A                  cmp edx, 0000005A
:00451245 0F8D22010000            jnl 0045136D
:0045124B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045124E 81E1FF000000            and ecx, 000000FF
:00451254 6BC924                  imul ecx, 00000024
:00451257 81C1B83B4B00            add ecx, 004B3BB8
:0045125D E8AEB6FBFF              call 0040C910
:00451262 8BF0                    mov esi, eax
:00451264 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00451267 E8A4B6FBFF              call 0040C910
:0045126C 3BF0                    cmp esi, eax
:0045126E 0F84F9000000            je 0045136D
:00451274 8B45F8                  mov eax, dword ptr [ebp-08]
:00451277 6BC050                  imul eax, 00000050
:0045127A 05787F4900              add eax, 00497F78
:0045127F 8945F0                  mov dword ptr [ebp-10], eax
:00451282 6A00                    push 00000000
:00451284 6A00                    push 00000000
:00451286 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00451289 51                      push ecx
:0045128A 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045128D E83B22FEFF              call 004334CD
:00451292 8945EC                  mov dword ptr [ebp-14], eax
:00451295 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451298 81E1FF000000            and ecx, 000000FF
:0045129E 6BC924                  imul ecx, 00000024
:004512A1 81C1B83B4B00            add ecx, 004B3BB8
:004512A7 E83420FBFF              call 004032E0
:004512AC 3945EC                  cmp dword ptr [ebp-14], eax
:004512AF 720C                    jb 004512BD
:004512B1 C745F450000000          mov [ebp-0C], 00000050
:004512B8 E9B0000000              jmp 0045136D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004512AF(C)
|
:004512BD 8B75EC                  mov esi, dword ptr [ebp-14]
:004512C0 6BF60A                  imul esi, 0000000A
:004512C3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004512C6 E81F0BFBFF              call 00401DEA
:004512CB 8BC8                    mov ecx, eax
:004512CD 8BC6                    mov eax, esi
:004512CF 33D2                    xor edx, edx
:004512D1 F7F1                    div ecx
:004512D3 83F801                  cmp eax, 00000001
:004512D6 720C                    jb 004512E4
:004512D8 C745F410000000          mov [ebp-0C], 00000010
:004512DF E989000000              jmp 0045136D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004512D6(C)
|
:004512E4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004512E7 81E1FF000000            and ecx, 000000FF
:004512ED 6BC924                  imul ecx, 00000024
:004512F0 81C1B83B4B00            add ecx, 004B3BB8
:004512F6 E8E51FFBFF              call 004032E0
:004512FB 8BF0                    mov esi, eax
:004512FD 6BF664                  imul esi, 00000064
:00451300 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00451303 6BC950                  imul ecx, 00000050
:00451306 81C1787F4900            add ecx, 00497F78
:0045130C E8D90AFBFF              call 00401DEA
:00451311 8BC8                    mov ecx, eax
:00451313 8BC6                    mov eax, esi
:00451315 33D2                    xor edx, edx
:00451317 F7F1                    div ecx
:00451319 83F828                  cmp eax, 00000028
:0045131C 7709                    ja 00451327
:0045131E C745F410000000          mov [ebp-0C], 00000010
:00451325 EB46                    jmp 0045136D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045131C(C)
|
:00451327 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045132A E85144FBFF              call 00405780
:0045132F 25FF000000              and eax, 000000FF
:00451334 83F801                  cmp eax, 00000001
:00451337 752D                    jne 00451366
:00451339 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045133C E8AF57FEFF              call 00436AF0
:00451341 25FF000000              and eax, 000000FF
:00451346 83F80E                  cmp eax, 0000000E
:00451349 741B                    je 00451366
:0045134B 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045134E E89D57FEFF              call 00436AF0
:00451353 25FF000000              and eax, 000000FF
:00451358 83F80F                  cmp eax, 0000000F
:0045135B 7409                    je 00451366

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045135D C745F40A000000          mov [ebp-0C], 0000000A
:00451364 EB07                    jmp 0045136D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451337(C), :00451349(C), :0045135B(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00451366 C745F402000000          mov [ebp-0C], 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451233(C), :00451245(C), :0045126E(C), :004512B8(U), :004512DF(U)
|:00451325(U), :00451364(U)
|
:0045136D 6A10                    push 00000010
:0045136F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451372 81E1FF000000            and ecx, 000000FF
:00451378 6BC924                  imul ecx, 00000024
:0045137B 81C1B83B4B00            add ecx, 004B3BB8
:00451381 E8EA56FEFF              call 00436A70
:00451386 85C0                    test eax, eax
:00451388 7409                    je 00451393
:0045138A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045138D 83C208                  add edx, 00000008
:00451390 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451388(C)
|
:00451393 837DF400                cmp dword ptr [ebp-0C], 00000000
:00451397 7637                    jbe 004513D0
:00451399 817DF8C8000000          cmp dword ptr [ebp-08], 000000C8
:004513A0 732E                    jnb 004513D0
:004513A2 8B4508                  mov eax, dword ptr [ebp+08]
:004513A5 25FF000000              and eax, 000000FF
:004513AA 85C0                    test eax, eax
:004513AC 740E                    je 004513BC
:004513AE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004513B1 81E1FF000000            and ecx, 000000FF
:004513B7 83F91E                  cmp ecx, 0000001E
:004513BA 750B                    jne 004513C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004513AC(C)
|
:004513BC 8B55F4                  mov edx, dword ptr [ebp-0C]
:004513BF 83C208                  add edx, 00000008
:004513C2 8955F4                  mov dword ptr [ebp-0C], edx
:004513C5 EB09                    jmp 004513D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004513BA(C)
|
:004513C7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004513CA 83C004                  add eax, 00000004
:004513CD 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451397(C), :004513A0(C), :004513C5(U)
|
:004513D0 837DF44B                cmp dword ptr [ebp-0C], 0000004B
:004513D4 731A                    jnb 004513F0
:004513D6 8B4DC8                  mov ecx, dword ptr [ebp-38]
:004513D9 8A5104                  mov dl, byte ptr [ecx+04]
:004513DC 52                      push edx
:004513DD E88F040000              call 00451871
:004513E2 83C404                  add esp, 00000004
:004513E5 85C0                    test eax, eax
:004513E7 7407                    je 004513F0
:004513E9 33C0                    xor eax, eax
:004513EB E957010000              jmp 00451547

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004513D4(C), :004513E7(C)
|
:004513F0 8B45C8                  mov eax, dword ptr [ebp-38]
:004513F3 8B08                    mov ecx, dword ptr [eax]
:004513F5 6BC950                  imul ecx, 00000050
:004513F8 81C1787F4900            add ecx, 00497F78
:004513FE E8E90CFBFF              call 004020EC
:00451403 8845FC                  mov byte ptr [ebp-04], al
:00451406 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00451409 81E1FF000000            and ecx, 000000FF
:0045140F 81F9FF000000            cmp ecx, 000000FF
:00451415 7457                    je 0045146E
:00451417 8B55FC                  mov edx, dword ptr [ebp-04]
:0045141A 81E2FF000000            and edx, 000000FF
:00451420 85D2                    test edx, edx
:00451422 744A                    je 0045146E
:00451424 8D45D8                  lea eax, dword ptr [ebp-28]
:00451427 8945D4                  mov dword ptr [ebp-2C], eax
:0045142A 68FF000000              push 000000FF
:0045142F 68FF000000              push 000000FF
:00451434 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00451437 51                      push ecx
:00451438 8A55FC                  mov dl, byte ptr [ebp-04]
:0045143B 52                      push edx
:0045143C 6A01                    push 00000001
:0045143E 8A4508                  mov al, byte ptr [ebp+08]
:00451441 50                      push eax
:00451442 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00451445 E841450000              call 0045598B
:0045144A 8945D4                  mov dword ptr [ebp-2C], eax
:0045144D 68FF000000              push 000000FF
:00451452 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00451455 8A5104                  mov dl, byte ptr [ecx+04]
:00451458 52                      push edx
:00451459 6A00                    push 00000000
:0045145B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045145E 50                      push eax
:0045145F 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00451462 51                      push ecx
:00451463 E8E6000000              call 0045154E
:00451468 83C414                  add esp, 00000014
:0045146B 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451415(C), :00451422(C)
|
:0045146E 837DF400                cmp dword ptr [ebp-0C], 00000000
:00451472 0F86CC000000            jbe 00451544
:00451478 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045147B 81E1FF000000            and ecx, 000000FF
:00451481 6BC924                  imul ecx, 00000024
:00451484 81C1B83B4B00            add ecx, 004B3BB8
:0045148A E8B107FEFF              call 00431C40
:0045148F 668B10                  mov dx, word ptr [eax]
:00451492 668955D0                mov word ptr [ebp-30], dx
:00451496 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451499 81E1FF000000            and ecx, 000000FF
:0045149F 6BC924                  imul ecx, 00000024
:004514A2 81C1B83B4B00            add ecx, 004B3BB8
:004514A8 E8B91CFEFF              call 00433166
:004514AD 8845CC                  mov byte ptr [ebp-34], al
:004514B0 6A00                    push 00000000
:004514B2 6880070000              push 00000780

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004514B7 6A04                    push 00000004
:004514B9 6A00                    push 00000000
:004514BB 68000F0000              push 00000F00
:004514C0 B9007D4A00              mov ecx, 004A7D00
:004514C5 E8C67A0200              call 00478F90
:004514CA 50                      push eax
:004514CB E810710200              call 004785E0
:004514D0 83C40C                  add esp, 0000000C
:004514D3 6A01                    push 00000001
:004514D5 6880000000              push 00000080
:004514DA 8A45CC                  mov al, byte ptr [ebp-34]
:004514DD 50                      push eax
:004514DE 8D4DD0                  lea ecx, dword ptr [ebp-30]
:004514E1 51                      push ecx
:004514E2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004514E5 81E1FF000000            and ecx, 000000FF
:004514EB 6BC924                  imul ecx, 00000024
:004514EE 81C1B83B4B00            add ecx, 004B3BB8
:004514F4 E841E5FFFF              call 0044FA3A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004514F9 6A04                    push 00000004
:004514FB 6A00                    push 00000000
:004514FD 68000F0000              push 00000F00
:00451502 B9007D4A00              mov ecx, 004A7D00
:00451507 E8847A0200              call 00478F90
:0045150C 8B550C                  mov edx, dword ptr [ebp+0C]
:0045150F 81E2FF000000            and edx, 000000FF
:00451515 03C2                    add eax, edx
:00451517 8B4D0D                  mov ecx, dword ptr [ebp+0D]
:0045151A 81E1FF000000            and ecx, 000000FF
:00451520 33D2                    xor edx, edx
:00451522 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:00451528 0FAFCA                  imul ecx, edx
:0045152B 33D2                    xor edx, edx
:0045152D 8A1408                  mov dl, byte ptr [eax+ecx]
:00451530 83FA01                  cmp edx, 00000001
:00451533 750F                    jne 00451544
:00451535 837DF401                cmp dword ptr [ebp-0C], 00000001
:00451539 7609                    jbe 00451544
:0045153B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045153E 83E801                  sub eax, 00000001
:00451541 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451472(C), :00451533(C), :00451539(C)
|
:00451544 8B45F4                  mov eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004511F2(U), :0045121F(U), :004513EB(U)
|
:00451547 5E                      pop esi
:00451548 8BE5                    mov esp, ebp
:0045154A 5D                      pop ebp
:0045154B C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00451463   , :00453F6F   , :004540D0   , :004546DA   
|
:0045154E 55                      push ebp
:0045154F 8BEC                    mov ebp, esp
:00451551 83EC14                  sub esp, 00000014
:00451554 56                      push esi
:00451555 C745FC00000000          mov [ebp-04], 00000000
:0045155C C745F400000000          mov [ebp-0C], 00000000
:00451563 C745F800000000          mov [ebp-08], 00000000
:0045156A 8B4508                  mov eax, dword ptr [ebp+08]
:0045156D 33C9                    xor ecx, ecx
:0045156F 8A08                    mov cl, byte ptr [eax]
:00451571 81F9FF000000            cmp ecx, 000000FF
:00451577 751D                    jne 00451596
:00451579 837D0C04                cmp dword ptr [ebp+0C], 00000004
:0045157D 7E0B                    jle 0045158A
:0045157F 8B550C                  mov edx, dword ptr [ebp+0C]
:00451582 83EA04                  sub edx, 00000004
:00451585 89550C                  mov dword ptr [ebp+0C], edx
:00451588 EB07                    jmp 00451591

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045157D(C)
|
:0045158A C7450C00000000          mov [ebp+0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451588(U)
|
:00451591 E99D020000              jmp 00451833

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451577(C), :0045182E(U)
|
:00451596 8B4508                  mov eax, dword ptr [ebp+08]
:00451599 33C9                    xor ecx, ecx
:0045159B 8A08                    mov cl, byte ptr [eax]
:0045159D 81F9FF000000            cmp ecx, 000000FF
:004515A3 0F848A020000            je 00451833
:004515A9 8B5510                  mov edx, dword ptr [ebp+10]
:004515AC 81E2FF000000            and edx, 000000FF
:004515B2 8955F0                  mov dword ptr [ebp-10], edx
:004515B5 837DF004                cmp dword ptr [ebp-10], 00000004
:004515B9 0F8766020000            ja 00451825
:004515BF 8B45F0                  mov eax, dword ptr [ebp-10]
:004515C2 FF24855D184500          jmp dword ptr [4*eax+0045185D]
:004515C9 8B4D18                  mov ecx, dword ptr [ebp+18]
:004515CC 81E1FF000000            and ecx, 000000FF
:004515D2 81F9FF000000            cmp ecx, 000000FF
:004515D8 745F                    je 00451639
:004515DA 68FF000000              push 000000FF
:004515DF 8A5518                  mov dl, byte ptr [ebp+18]
:004515E2 52                      push edx
:004515E3 8B4508                  mov eax, dword ptr [ebp+08]
:004515E6 8A08                    mov cl, byte ptr [eax]
:004515E8 51                      push ecx
:004515E9 8A5514                  mov dl, byte ptr [ebp+14]
:004515EC 52                      push edx
:004515ED E8D4160000              call 00452CC6
:004515F2 83C410                  add esp, 00000010
:004515F5 85C0                    test eax, eax
:004515F7 743B                    je 00451634
:004515F9 8B45FC                  mov eax, dword ptr [ebp-04]
:004515FC 83C003                  add eax, 00000003
:004515FF 8945FC                  mov dword ptr [ebp-04], eax
:00451602 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451605 33D2                    xor edx, edx
:00451607 8A11                    mov dl, byte ptr [ecx]
:00451609 8BF2                    mov esi, edx
:0045160B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045160E 81E1FF000000            and ecx, 000000FF
:00451614 6BC924                  imul ecx, 00000024
:00451617 81C1B83B4B00            add ecx, 004B3BB8
:0045161D E8DE58FEFF              call 00436F00
:00451622 25FF000000              and eax, 000000FF
:00451627 3BF0                    cmp esi, eax
:00451629 7509                    jne 00451634
:0045162B 8B45FC                  mov eax, dword ptr [ebp-04]
:0045162E 83C003                  add eax, 00000003
:00451631 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004515F7(C), :00451629(C)
|
:00451634 E98F000000              jmp 004516C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004515D8(C)
|
:00451639 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045163C 33D2                    xor edx, edx
:0045163E 8A11                    mov dl, byte ptr [ecx]
:00451640 8BCA                    mov ecx, edx
:00451642 6BC924                  imul ecx, 00000024
:00451645 81C1B83B4B00            add ecx, 004B3BB8
:0045164B E89053FEFF              call 004369E0
:00451650 6BC050                  imul eax, 00000050
:00451653 05787F4900              add eax, 00497F78
:00451658 8945F8                  mov dword ptr [ebp-08], eax
:0045165B 6A00                    push 00000000
:0045165D 6A00                    push 00000000
:0045165F 8B45F8                  mov eax, dword ptr [ebp-08]
:00451662 50                      push eax
:00451663 8B4D14                  mov ecx, dword ptr [ebp+14]
:00451666 81E1FF000000            and ecx, 000000FF
:0045166C 6BC924                  imul ecx, 00000024
:0045166F 81C1B83B4B00            add ecx, 004B3BB8
:00451675 E8531EFEFF              call 004334CD
:0045167A 8945F4                  mov dword ptr [ebp-0C], eax
:0045167D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451680 33D2                    xor edx, edx
:00451682 8A11                    mov dl, byte ptr [ecx]
:00451684 8BCA                    mov ecx, edx
:00451686 6BC924                  imul ecx, 00000024
:00451689 81C1B83B4B00            add ecx, 004B3BB8
:0045168F E84C1CFBFF              call 004032E0
:00451694 3945F4                  cmp dword ptr [ebp-0C], eax
:00451697 720B                    jb 004516A4
:00451699 8B45FC                  mov eax, dword ptr [ebp-04]
:0045169C 83C00A                  add eax, 0000000A
:0045169F 8945FC                  mov dword ptr [ebp-04], eax
:004516A2 EB24                    jmp 004516C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451697(C)
|
:004516A4 8B75F4                  mov esi, dword ptr [ebp-0C]
:004516A7 6BF60A                  imul esi, 0000000A
:004516AA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004516AD E83807FBFF              call 00401DEA
:004516B2 8BC8                    mov ecx, eax
:004516B4 8BC6                    mov eax, esi
:004516B6 33D2                    xor edx, edx
:004516B8 F7F1                    div ecx
:004516BA 83F801                  cmp eax, 00000001
:004516BD 7209                    jb 004516C8
:004516BF 8B55FC                  mov edx, dword ptr [ebp-04]
:004516C2 83C204                  add edx, 00000004
:004516C5 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451634(U), :004516A2(U), :004516BD(C)
|
:004516C8 E958010000              jmp 00451825
:004516CD 68FF000000              push 000000FF
:004516D2 8A4518                  mov al, byte ptr [ebp+18]
:004516D5 50                      push eax
:004516D6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004516D9 8A11                    mov dl, byte ptr [ecx]
:004516DB 52                      push edx
:004516DC 8A4514                  mov al, byte ptr [ebp+14]
:004516DF 50                      push eax
:004516E0 E8E1150000              call 00452CC6
:004516E5 83C410                  add esp, 00000010
:004516E8 85C0                    test eax, eax
:004516EA 7457                    je 00451743
:004516EC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004516EF 33D2                    xor edx, edx
:004516F1 8A11                    mov dl, byte ptr [ecx]
:004516F3 8BCA                    mov ecx, edx
:004516F5 6BC924                  imul ecx, 00000024
:004516F8 81C1B83B4B00            add ecx, 004B3BB8
:004516FE E8DD1BFBFF              call 004032E0
:00451703 8BF0                    mov esi, eax
:00451705 6BF664                  imul esi, 00000064
:00451708 8B4508                  mov eax, dword ptr [ebp+08]
:0045170B 33C9                    xor ecx, ecx
:0045170D 8A08                    mov cl, byte ptr [eax]
:0045170F 6BC924                  imul ecx, 00000024
:00451712 81C1B83B4B00            add ecx, 004B3BB8
:00451718 E8C352FEFF              call 004369E0
:0045171D 8BC8                    mov ecx, eax
:0045171F 6BC950                  imul ecx, 00000050
:00451722 81C1787F4900            add ecx, 00497F78
:00451728 E8BD06FBFF              call 00401DEA
:0045172D 8BC8                    mov ecx, eax
:0045172F 8BC6                    mov eax, esi
:00451731 33D2                    xor edx, edx
:00451733 F7F1                    div ecx
:00451735 83F83C                  cmp eax, 0000003C
:00451738 7309                    jnb 00451743
:0045173A 8B55FC                  mov edx, dword ptr [ebp-04]
:0045173D 83C205                  add edx, 00000005
:00451740 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004516EA(C), :00451738(C)
|
:00451743 E9DD000000              jmp 00451825
:00451748 68FF000000              push 000000FF
:0045174D 8A4518                  mov al, byte ptr [ebp+18]
:00451750 50                      push eax
:00451751 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451754 8A11                    mov dl, byte ptr [ecx]
:00451756 52                      push edx
:00451757 8A4514                  mov al, byte ptr [ebp+14]
:0045175A 50                      push eax
:0045175B E866150000              call 00452CC6
:00451760 83C410                  add esp, 00000010
:00451763 85C0                    test eax, eax
:00451765 7429                    je 00451790
:00451767 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045176A 33D2                    xor edx, edx
:0045176C 8A11                    mov dl, byte ptr [ecx]
:0045176E 8BCA                    mov ecx, edx
:00451770 6BC924                  imul ecx, 00000024
:00451773 81C1B83B4B00            add ecx, 004B3BB8
:00451779 E89252FEFF              call 00436A10
:0045177E 25FF000000              and eax, 000000FF
:00451783 85C0                    test eax, eax
:00451785 7409                    je 00451790
:00451787 8B45FC                  mov eax, dword ptr [ebp-04]
:0045178A 83C003                  add eax, 00000003
:0045178D 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451765(C), :00451785(C)
|
:00451790 E990000000              jmp 00451825
:00451795 68FF000000              push 000000FF
:0045179A 8A4D18                  mov cl, byte ptr [ebp+18]
:0045179D 51                      push ecx
:0045179E 8B5508                  mov edx, dword ptr [ebp+08]
:004517A1 8A02                    mov al, byte ptr [edx]
:004517A3 50                      push eax
:004517A4 8A4D14                  mov cl, byte ptr [ebp+14]
:004517A7 51                      push ecx
:004517A8 E819150000              call 00452CC6
:004517AD 83C410                  add esp, 00000010
:004517B0 85C0                    test eax, eax
:004517B2 7429                    je 004517DD
:004517B4 8B5508                  mov edx, dword ptr [ebp+08]
:004517B7 33C0                    xor eax, eax
:004517B9 8A02                    mov al, byte ptr [edx]
:004517BB 8BC8                    mov ecx, eax
:004517BD 6BC924                  imul ecx, 00000024
:004517C0 81C1B83B4B00            add ecx, 004B3BB8
:004517C6 E86552FEFF              call 00436A30
:004517CB 25FF000000              and eax, 000000FF
:004517D0 85C0                    test eax, eax
:004517D2 7409                    je 004517DD
:004517D4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004517D7 83C103                  add ecx, 00000003
:004517DA 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004517B2(C), :004517D2(C)
|
:004517DD EB46                    jmp 00451825
:004517DF 68FF000000              push 000000FF
:004517E4 8A5518                  mov dl, byte ptr [ebp+18]
:004517E7 52                      push edx
:004517E8 8B4508                  mov eax, dword ptr [ebp+08]
:004517EB 8A08                    mov cl, byte ptr [eax]
:004517ED 51                      push ecx
:004517EE 8A5514                  mov dl, byte ptr [ebp+14]
:004517F1 52                      push edx
:004517F2 E8CF140000              call 00452CC6
:004517F7 83C410                  add esp, 00000010
:004517FA 85C0                    test eax, eax
:004517FC 7427                    je 00451825
:004517FE 8B4508                  mov eax, dword ptr [ebp+08]
:00451801 33C9                    xor ecx, ecx
:00451803 8A08                    mov cl, byte ptr [eax]
:00451805 6BC924                  imul ecx, 00000024
:00451808 81C1B83B4B00            add ecx, 004B3BB8
:0045180E E81D52FEFF              call 00436A30
:00451813 25FF000000              and eax, 000000FF
:00451818 85C0                    test eax, eax
:0045181A 7409                    je 00451825
:0045181C 8B55FC                  mov edx, dword ptr [ebp-04]
:0045181F 83C203                  add edx, 00000003
:00451822 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004515B9(C), :004516C8(U), :00451743(U), :00451790(U), :004517DD(U)
|:004517FC(C), :0045181A(C)
|
:00451825 8B4508                  mov eax, dword ptr [ebp+08]
:00451828 83C001                  add eax, 00000001
:0045182B 894508                  mov dword ptr [ebp+08], eax
:0045182E E963FDFFFF              jmp 00451596

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451591(U), :004515A3(C)
|
:00451833 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00451836 034DFC                  add ecx, dword ptr [ebp-04]
:00451839 85C9                    test ecx, ecx
:0045183B 7E0B                    jle 00451848
:0045183D 8B550C                  mov edx, dword ptr [ebp+0C]
:00451840 0355FC                  add edx, dword ptr [ebp-04]
:00451843 8955EC                  mov dword ptr [ebp-14], edx
:00451846 EB07                    jmp 0045184F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045183B(C)
|
:00451848 C745EC00000000          mov [ebp-14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451846(U)
|
:0045184F 8B45EC                  mov eax, dword ptr [ebp-14]
:00451852 8945FC                  mov dword ptr [ebp-04], eax
:00451855 8B45FC                  mov eax, dword ptr [ebp-04]
:00451858 5E                      pop esi
:00451859 8BE5                    mov esp, ebp
:0045185B 5D                      pop ebp
:0045185C C3                      ret



:0045185D C9154500                DWORD 004515C9
:00451861 CD164500                DWORD 004516CD
:00451865 48174500                DWORD 00451748
:00451869 95174500                DWORD 00451795
:0045186D DF174500                DWORD 004517DF



* Referenced by a CALL at Addresses:
|:004513DD   , :00454F90   
|
:00451871 55                      push ebp
:00451872 8BEC                    mov ebp, esp
:00451874 83EC08                  sub esp, 00000008
:00451877 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045187A 81E1FF000000            and ecx, 000000FF
:00451880 6BC924                  imul ecx, 00000024
:00451883 81C1B83B4B00            add ecx, 004B3BB8
:00451889 E86252FEFF              call 00436AF0
:0045188E 8845F8                  mov byte ptr [ebp-08], al
:00451891 C745FC00000000          mov [ebp-04], 00000000
:00451898 8B45F8                  mov eax, dword ptr [ebp-08]
:0045189B 25FF000000              and eax, 000000FF
:004518A0 83F80A                  cmp eax, 0000000A
:004518A3 7429                    je 004518CE
:004518A5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004518A8 81E1FF000000            and ecx, 000000FF
:004518AE 83F90E                  cmp ecx, 0000000E
:004518B1 741B                    je 004518CE
:004518B3 8B55F8                  mov edx, dword ptr [ebp-08]
:004518B6 81E2FF000000            and edx, 000000FF
:004518BC 83FA0F                  cmp edx, 0000000F
:004518BF 740D                    je 004518CE
:004518C1 8B45F8                  mov eax, dword ptr [ebp-08]
:004518C4 25FF000000              and eax, 000000FF
:004518C9 83F80D                  cmp eax, 0000000D
:004518CC 7507                    jne 004518D5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004518A3(C), :004518B1(C), :004518BF(C)
|
:004518CE C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004518CC(C)
|
:004518D5 8B45FC                  mov eax, dword ptr [ebp-04]
:004518D8 8BE5                    mov esp, ebp
:004518DA 5D                      pop ebp
:004518DB C3                      ret



* Referenced by a CALL at Addresses:
|:0044124A   , :0044F13F   , :00450FE7   , :004527F4   , :0045283E   
|:00452A64   , :00452AAE   , :00456B24   , :00456D41   
|
:004518DC 55                      push ebp
:004518DD 8BEC                    mov ebp, esp
:004518DF 83EC50                  sub esp, 00000050
:004518E2 894DB0                  mov dword ptr [ebp-50], ecx
:004518E5 8D4DDC                  lea ecx, dword ptr [ebp-24]
:004518E8 E8033EFBFF              call 004056F0
:004518ED 8D4DD8                  lea ecx, dword ptr [ebp-28]
:004518F0 E8FB3DFBFF              call 004056F0
:004518F5 C745E001000000          mov [ebp-20], 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004518FC 6A04                    push 00000004
:004518FE 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00451901 E8EA54FEFF              call 00436DF0
:00451906 8945F8                  mov dword ptr [ebp-08], eax
:00451909 8B4DB0                  mov ecx, dword ptr [ebp-50]
:0045190C E8FFAFFBFF              call 0040C910
:00451911 8945EC                  mov dword ptr [ebp-14], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00451914 6A04                    push 00000004
:00451916 6A00                    push 00000000
:00451918 6A00                    push 00000000
:0045191A B9881C4B00              mov ecx, 004B1C88
:0045191F E86C760200              call 00478F90
:00451924 05809D0000              add eax, 00009D80
:00451929 8945E4                  mov dword ptr [ebp-1C], eax
:0045192C 8B4508                  mov eax, dword ptr [ebp+08]
:0045192F 50                      push eax
:00451930 E8A7DEFFFF              call 0044F7DC
:00451935 83C404                  add esp, 00000004
:00451938 8845F0                  mov byte ptr [ebp-10], al
:0045193B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045193E 51                      push ecx
:0045193F 8D4DDC                  lea ecx, dword ptr [ebp-24]
:00451942 E85951FEFF              call 00436AA0
:00451947 8A5510                  mov dl, byte ptr [ebp+10]
:0045194A 8855E8                  mov byte ptr [ebp-18], dl
:0045194D C745FC00000000          mov [ebp-04], 00000000
:00451954 EB09                    jmp 0045195F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451B1D(U)
|
:00451956 8B45FC                  mov eax, dword ptr [ebp-04]
:00451959 83C001                  add eax, 00000001
:0045195C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451954(U)
|
:0045195F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451962 51                      push ecx
:00451963 8D55DC                  lea edx, dword ptr [ebp-24]
:00451966 52                      push edx
:00451967 E83456FEFF              call 00436FA0
:0045196C 83C408                  add esp, 00000008
:0045196F 85C0                    test eax, eax
:00451971 0F85AB010000            jne 00451B22
:00451977 837DE000                cmp dword ptr [ebp-20], 00000000
:0045197B 0F84A1010000            je 00451B22

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00451981 6A04                    push 00000004
:00451983 6A00                    push 00000000
:00451985 6A00                    push 00000000
:00451987 B9881C4B00              mov ecx, 004B1C88
:0045198C E8FF750200              call 00478F90
:00451991 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00451994 81E1FF000000            and ecx, 000000FF
:0045199A 8D940800960000          lea edx, dword ptr [eax+ecx+00009600]
:004519A1 8B45DD                  mov eax, dword ptr [ebp-23]
:004519A4 25FF000000              and eax, 000000FF
:004519A9 33C9                    xor ecx, ecx
:004519AB 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:004519B1 0FAFC1                  imul eax, ecx
:004519B4 8A1402                  mov dl, byte ptr [edx+eax]
:004519B7 8855CC                  mov byte ptr [ebp-34], dl
:004519BA C645D4FF                mov [ebp-2C], FF
:004519BE 8A45CC                  mov al, byte ptr [ebp-34]
:004519C1 8845C0                  mov byte ptr [ebp-40], al
:004519C4 C645C400                mov [ebp-3C], 00
:004519C8 EB09                    jmp 004519D3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451A3D(U), :00451AD3(U)
|
:004519CA 8A4DC4                  mov cl, byte ptr [ebp-3C]
:004519CD 80C101                  add cl, 01
:004519D0 884DC4                  mov byte ptr [ebp-3C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004519C8(U)
|
:004519D3 8B55C4                  mov edx, dword ptr [ebp-3C]
:004519D6 81E2FF000000            and edx, 000000FF
:004519DC 83FA04                  cmp edx, 00000004
:004519DF 0F8DF3000000            jnl 00451AD8
:004519E5 8A45C4                  mov al, byte ptr [ebp-3C]
:004519E8 50                      push eax
:004519E9 8D4DDC                  lea ecx, dword ptr [ebp-24]
:004519EC 51                      push ecx
:004519ED E8FFDEFFFF              call 0044F8F1
:004519F2 83C408                  add esp, 00000008
:004519F5 50                      push eax
:004519F6 8D4DD8                  lea ecx, dword ptr [ebp-28]
:004519F9 E8A250FEFF              call 00436AA0
:004519FE 8B55D8                  mov edx, dword ptr [ebp-28]
:00451A01 81E2FF000000            and edx, 000000FF
:00451A07 81FAFF000000            cmp edx, 000000FF
:00451A0D 742E                    je 00451A3D
:00451A0F 8B45EC                  mov eax, dword ptr [ebp-14]
:00451A12 50                      push eax
:00451A13 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00451A16 51                      push ecx
:00451A17 E852DCFFFF              call 0044F66E
:00451A1C 83C408                  add esp, 00000008
:00451A1F 85C0                    test eax, eax
:00451A21 741C                    je 00451A3F
:00451A23 8B5508                  mov edx, dword ptr [ebp+08]
:00451A26 52                      push edx
:00451A27 8D45D8                  lea eax, dword ptr [ebp-28]
:00451A2A 50                      push eax
:00451A2B E87055FEFF              call 00436FA0
:00451A30 83C408                  add esp, 00000008
:00451A33 85C0                    test eax, eax
:00451A35 7508                    jne 00451A3F
:00451A37 837DF800                cmp dword ptr [ebp-08], 00000000
:00451A3B 7502                    jne 00451A3F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451A0D(C)
|
:00451A3D EB8B                    jmp 004519CA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451A21(C), :00451A35(C), :00451A3B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00451A3F 6A04                    push 00000004
:00451A41 6A00                    push 00000000
:00451A43 6A00                    push 00000000
:00451A45 B9881C4B00              mov ecx, 004B1C88
:00451A4A E841750200              call 00478F90
:00451A4F 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00451A52 81E1FF000000            and ecx, 000000FF
:00451A58 8D940800960000          lea edx, dword ptr [eax+ecx+00009600]
:00451A5F 8B45D9                  mov eax, dword ptr [ebp-27]
:00451A62 25FF000000              and eax, 000000FF
:00451A67 33C9                    xor ecx, ecx
:00451A69 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:00451A6F 0FAFC1                  imul eax, ecx
:00451A72 8A1402                  mov dl, byte ptr [edx+eax]
:00451A75 8855C8                  mov byte ptr [ebp-38], dl
:00451A78 8B45CC                  mov eax, dword ptr [ebp-34]
:00451A7B 25FF000000              and eax, 000000FF
:00451A80 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00451A83 81E1FF000000            and ecx, 000000FF
:00451A89 3BC1                    cmp eax, ecx
:00451A8B 7E46                    jle 00451AD3
:00451A8D 8D55D8                  lea edx, dword ptr [ebp-28]
:00451A90 52                      push edx
:00451A91 E8C2DDFFFF              call 0044F858
:00451A96 83C404                  add esp, 00000004
:00451A99 8845B8                  mov byte ptr [ebp-48], al
:00451A9C 8A45B8                  mov al, byte ptr [ebp-48]
:00451A9F 50                      push eax
:00451AA0 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00451AA3 E8B515FEFF              call 0043305D
:00451AA8 8845BC                  mov byte ptr [ebp-44], al
:00451AAB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00451AAE 81E1FF000000            and ecx, 000000FF
:00451AB4 8B55BC                  mov edx, dword ptr [ebp-44]
:00451AB7 81E2FF000000            and edx, 000000FF
:00451ABD 3BCA                    cmp ecx, edx
:00451ABF 7C12                    jl 00451AD3
:00451AC1 8A45C8                  mov al, byte ptr [ebp-38]
:00451AC4 8845CC                  mov byte ptr [ebp-34], al
:00451AC7 8A4DC4                  mov cl, byte ptr [ebp-3C]
:00451ACA 884DD4                  mov byte ptr [ebp-2C], cl
:00451ACD 8A55BC                  mov dl, byte ptr [ebp-44]
:00451AD0 8855D0                  mov byte ptr [ebp-30], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451A8B(C), :00451ABF(C)
|
:00451AD3 E9F2FEFFFF              jmp 004519CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004519DF(C)
|
:00451AD8 8B45D4                  mov eax, dword ptr [ebp-2C]
:00451ADB 25FF000000              and eax, 000000FF
:00451AE0 3DFF000000              cmp eax, 000000FF
:00451AE5 742F                    je 00451B16
:00451AE7 8A4DD4                  mov cl, byte ptr [ebp-2C]
:00451AEA 51                      push ecx
:00451AEB 8D55DC                  lea edx, dword ptr [ebp-24]
:00451AEE 52                      push edx
:00451AEF E8FDDDFFFF              call 0044F8F1
:00451AF4 83C408                  add esp, 00000008
:00451AF7 50                      push eax
:00451AF8 8D4DDC                  lea ecx, dword ptr [ebp-24]
:00451AFB E8A04FFEFF              call 00436AA0
:00451B00 8A45E8                  mov al, byte ptr [ebp-18]
:00451B03 2A45D0                  sub al, byte ptr [ebp-30]
:00451B06 8845E8                  mov byte ptr [ebp-18], al
:00451B09 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00451B0C 034DFC                  add ecx, dword ptr [ebp-04]
:00451B0F 8A55D4                  mov dl, byte ptr [ebp-2C]
:00451B12 8811                    mov byte ptr [ecx], dl
:00451B14 EB07                    jmp 00451B1D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451AE5(C)
|
:00451B16 C745E000000000          mov [ebp-20], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451B14(U)
|
:00451B1D E934FEFFFF              jmp 00451956

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451971(C), :0045197B(C)
|
:00451B22 837DE000                cmp dword ptr [ebp-20], 00000000
:00451B26 7551                    jne 00451B79
:00451B28 8B4514                  mov eax, dword ptr [ebp+14]
:00451B2B 25FF000000              and eax, 000000FF
:00451B30 83F801                  cmp eax, 00000001
:00451B33 7544                    jne 00451B79
:00451B35 8D4DDC                  lea ecx, dword ptr [ebp-24]
:00451B38 51                      push ecx
:00451B39 E89EDCFFFF              call 0044F7DC
:00451B3E 83C404                  add esp, 00000004
:00451B41 25FF000000              and eax, 000000FF
:00451B46 3DFF000000              cmp eax, 000000FF
:00451B4B 7417                    je 00451B64
:00451B4D 8B55B0                  mov edx, dword ptr [ebp-50]
:00451B50 8A4204                  mov al, byte ptr [edx+04]
:00451B53 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00451B54 6A14                    push 00000014
:00451B56 8D4DDC                  lea ecx, dword ptr [ebp-24]
:00451B59 51                      push ecx
:00451B5A E8C8000000              call 00451C27
:00451B5F 83C40C                  add esp, 0000000C
:00451B62 EB15                    jmp 00451B79

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451B4B(C)
|
:00451B64 8B55B0                  mov edx, dword ptr [ebp-50]
:00451B67 8A4204                  mov al, byte ptr [edx+04]
:00451B6A 50                      push eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00451B6B 6A0A                    push 0000000A
:00451B6D 8D4DDC                  lea ecx, dword ptr [ebp-24]
:00451B70 51                      push ecx
:00451B71 E8B1000000              call 00451C27
:00451B76 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451B26(C), :00451B33(C), :00451B62(U)
|
:00451B79 8B55FC                  mov edx, dword ptr [ebp-04]
:00451B7C 83EA01                  sub edx, 00000001
:00451B7F 8955FC                  mov dword ptr [ebp-04], edx
:00451B82 837DFC00                cmp dword ptr [ebp-04], 00000000
:00451B86 0F8C8C000000            jl 00451C18
:00451B8C C645B400                mov [ebp-4C], 00
:00451B90 EB11                    jmp 00451BA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451C11(U)
|
:00451B92 8A45B4                  mov al, byte ptr [ebp-4C]
:00451B95 0401                    add al, 01
:00451B97 8845B4                  mov byte ptr [ebp-4C], al
:00451B9A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00451B9D 83E901                  sub ecx, 00000001
:00451BA0 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451B90(U)
|
:00451BA3 837DFC00                cmp dword ptr [ebp-04], 00000000
:00451BA7 7C6D                    jl 00451C16
:00451BA9 8B55B4                  mov edx, dword ptr [ebp-4C]
:00451BAC 81E2FF000000            and edx, 000000FF
:00451BB2 3B55FC                  cmp edx, dword ptr [ebp-04]
:00451BB5 7F5F                    jg 00451C16
:00451BB7 8B45B4                  mov eax, dword ptr [ebp-4C]
:00451BBA 25FF000000              and eax, 000000FF
:00451BBF 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00451BC2 8A1401                  mov dl, byte ptr [ecx+eax]
:00451BC5 8855F4                  mov byte ptr [ebp-0C], dl
:00451BC8 8B45E4                  mov eax, dword ptr [ebp-1C]
:00451BCB 0345FC                  add eax, dword ptr [ebp-04]
:00451BCE 33C9                    xor ecx, ecx
:00451BD0 8A08                    mov cl, byte ptr [eax]
:00451BD2 8BC1                    mov eax, ecx
:00451BD4 83C002                  add eax, 00000002
:00451BD7 99                      cdq
:00451BD8 33C2                    xor eax, edx
:00451BDA 2BC2                    sub eax, edx
:00451BDC 83E003                  and eax, 00000003
:00451BDF 33C2                    xor eax, edx
:00451BE1 2BC2                    sub eax, edx
:00451BE3 8B55B4                  mov edx, dword ptr [ebp-4C]
:00451BE6 81E2FF000000            and edx, 000000FF
:00451BEC 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00451BEF 880411                  mov byte ptr [ecx+edx], al
:00451BF2 8B45F4                  mov eax, dword ptr [ebp-0C]
:00451BF5 25FF000000              and eax, 000000FF
:00451BFA 83C002                  add eax, 00000002
:00451BFD 99                      cdq
:00451BFE 33C2                    xor eax, edx
:00451C00 2BC2                    sub eax, edx
:00451C02 83E003                  and eax, 00000003
:00451C05 33C2                    xor eax, edx
:00451C07 2BC2                    sub eax, edx
:00451C09 8B55E4                  mov edx, dword ptr [ebp-1C]
:00451C0C 0355FC                  add edx, dword ptr [ebp-04]
:00451C0F 8802                    mov byte ptr [edx], al
:00451C11 E97CFFFFFF              jmp 00451B92

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451BA7(C), :00451BB5(C)
|
:00451C16 EB06                    jmp 00451C1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451B86(C)
|
:00451C18 8B45E4                  mov eax, dword ptr [ebp-1C]
:00451C1B C600FF                  mov byte ptr [eax], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451C16(U)
|
:00451C1E 8B45E4                  mov eax, dword ptr [ebp-1C]
:00451C21 8BE5                    mov esp, ebp
:00451C23 5D                      pop ebp
:00451C24 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00451B5A   , :00451B71   , :00451D90   , :00451DA9   , :0045277C   
|:004529B1   , :004529EC   
|
:00451C27 55                      push ebp
:00451C28 8BEC                    mov ebp, esp
:00451C2A 83EC10                  sub esp, 00000010
:00451C2D 837D0C09                cmp dword ptr [ebp+0C], 00000009
:00451C31 0F8C7C010000            jl 00451DB3
:00451C37 8B4508                  mov eax, dword ptr [ebp+08]
:00451C3A 50                      push eax
:00451C3B E818DCFFFF              call 0044F858
:00451C40 83C404                  add esp, 00000004
:00451C43 8845F8                  mov byte ptr [ebp-08], al

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00451C46 6A04                    push 00000004
:00451C48 6A00                    push 00000000
:00451C4A 6880070000              push 00000780
:00451C4F B9007D4A00              mov ecx, 004A7D00
:00451C54 E837730200              call 00478F90
:00451C59 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451C5C 33D2                    xor edx, edx
:00451C5E 8A11                    mov dl, byte ptr [ecx]
:00451C60 03C2                    add eax, edx
:00451C62 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451C65 33D2                    xor edx, edx
:00451C67 8A5101                  mov dl, byte ptr [ecx+01]
:00451C6A 33C9                    xor ecx, ecx
:00451C6C 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:00451C72 0FAFD1                  imul edx, ecx
:00451C75 03C2                    add eax, edx
:00451C77 8945FC                  mov dword ptr [ebp-04], eax
:00451C7A 8B4D10                  mov ecx, dword ptr [ebp+10]
:00451C7D 81E1FF000000            and ecx, 000000FF
:00451C83 6BC924                  imul ecx, 00000024
:00451C86 81C1B83B4B00            add ecx, 004B3BB8
:00451C8C E83E14FEFF              call 004330CF
:00451C91 25FF000000              and eax, 000000FF
:00451C96 3DFF000000              cmp eax, 000000FF
:00451C9B 7458                    je 00451CF5
:00451C9D 8B55FC                  mov edx, dword ptr [ebp-04]
:00451CA0 33C0                    xor eax, eax
:00451CA2 8A02                    mov al, byte ptr [edx]
:00451CA4 85C0                    test eax, eax
:00451CA6 754D                    jne 00451CF5
:00451CA8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451CAB 51                      push ecx
:00451CAC E82BDBFFFF              call 0044F7DC
:00451CB1 83C404                  add esp, 00000004
:00451CB4 25FF000000              and eax, 000000FF
:00451CB9 3DFF000000              cmp eax, 000000FF
:00451CBE 7428                    je 00451CE8
:00451CC0 8B4D10                  mov ecx, dword ptr [ebp+10]
:00451CC3 81E1FF000000            and ecx, 000000FF
:00451CC9 6BC924                  imul ecx, 00000024
:00451CCC 81C1B83B4B00            add ecx, 004B3BB8
:00451CD2 E869FFFDFF              call 00431C40
:00451CD7 50                      push eax
:00451CD8 8B5508                  mov edx, dword ptr [ebp+08]
:00451CDB 52                      push edx
:00451CDC E8BF52FEFF              call 00436FA0
:00451CE1 83C408                  add esp, 00000008
:00451CE4 85C0                    test eax, eax
:00451CE6 740D                    je 00451CF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451CBE(C)
|
:00451CE8 8B45FC                  mov eax, dword ptr [ebp-04]
:00451CEB 8A08                    mov cl, byte ptr [eax]
:00451CED 024D0C                  add cl, byte ptr [ebp+0C]
:00451CF0 8B55FC                  mov edx, dword ptr [ebp-04]
:00451CF3 880A                    mov byte ptr [edx], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451C9B(C), :00451CA6(C), :00451CE6(C)
|
:00451CF5 8B4D10                  mov ecx, dword ptr [ebp+10]
:00451CF8 81E1FF000000            and ecx, 000000FF
:00451CFE 6BC924                  imul ecx, 00000024
:00451D01 81C1B83B4B00            add ecx, 004B3BB8
:00451D07 E87452FEFF              call 00436F80
:00451D0C 25FF000000              and eax, 000000FF
:00451D11 83F80C                  cmp eax, 0000000C
:00451D14 7C21                    jl 00451D37
:00451D16 8B4D10                  mov ecx, dword ptr [ebp+10]
:00451D19 81E1FF000000            and ecx, 000000FF
:00451D1F 6BC924                  imul ecx, 00000024
:00451D22 81C1B83B4B00            add ecx, 004B3BB8
:00451D28 E85352FEFF              call 00436F80
:00451D2D 25FF000000              and eax, 000000FF
:00451D32 83F80D                  cmp eax, 0000000D
:00451D35 7E7C                    jle 00451DB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451D14(C)
|
:00451D37 C645F400                mov [ebp-0C], 00
:00451D3B EB08                    jmp 00451D45

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451DB1(U)
|
:00451D3D 8A45F4                  mov al, byte ptr [ebp-0C]
:00451D40 0401                    add al, 01
:00451D42 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451D3B(U)
|
:00451D45 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00451D48 81E1FF000000            and ecx, 000000FF
:00451D4E 83F904                  cmp ecx, 00000004
:00451D51 7D60                    jge 00451DB3
:00451D53 8A55F4                  mov dl, byte ptr [ebp-0C]
:00451D56 52                      push edx
:00451D57 8B4508                  mov eax, dword ptr [ebp+08]
:00451D5A 50                      push eax
:00451D5B E891DBFFFF              call 0044F8F1
:00451D60 83C408                  add esp, 00000008
:00451D63 668B08                  mov cx, word ptr [eax]
:00451D66 66894DF0                mov word ptr [ebp-10], cx
:00451D6A 8B55F0                  mov edx, dword ptr [ebp-10]
:00451D6D 81E2FF000000            and edx, 000000FF
:00451D73 81FAFF000000            cmp edx, 000000FF
:00451D79 7436                    je 00451DB1
:00451D7B 837D0C0A                cmp dword ptr [ebp+0C], 0000000A
:00451D7F 7E19                    jle 00451D9A
:00451D81 8A4510                  mov al, byte ptr [ebp+10]
:00451D84 50                      push eax
:00451D85 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00451D88 83E90A                  sub ecx, 0000000A
:00451D8B 51                      push ecx
:00451D8C 8D55F0                  lea edx, dword ptr [ebp-10]
:00451D8F 52                      push edx
:00451D90 E892FEFFFF              call 00451C27
:00451D95 83C40C                  add esp, 0000000C
:00451D98 EB17                    jmp 00451DB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451D7F(C)
|
:00451D9A 8A4510                  mov al, byte ptr [ebp+10]
:00451D9D 50                      push eax
:00451D9E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00451DA1 83E901                  sub ecx, 00000001
:00451DA4 51                      push ecx
:00451DA5 8D55F0                  lea edx, dword ptr [ebp-10]
:00451DA8 52                      push edx
:00451DA9 E879FEFFFF              call 00451C27
:00451DAE 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451D79(C), :00451D98(U)
|
:00451DB1 EB8A                    jmp 00451D3D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451C31(C), :00451D35(C), :00451D51(C)
|
:00451DB3 8BE5                    mov esp, ebp
:00451DB5 5D                      pop ebp
:00451DB6 C3                      ret



* Referenced by a CALL at Addresses:
|:004410E7   , :0044EFCE   , :004527A2   , :004527CF   , :00452815   
|:0045285F   , :00452977   , :004529D5   , :00452A12   , :00452A3F   
|:00452A85   , :00452ACF   , :00452AF4   , :00452B1E   , :00452B90   
|:00452BC5   , :00452C07   , :004567E4   , :00456C18   , :00456C57   
|:00456C7E   , :00456CD9   , :00456D06   , :00456D62   
|
:00451DB7 55                      push ebp
:00451DB8 8BEC                    mov ebp, esp
:00451DBA 83EC68                  sub esp, 00000068
:00451DBD 53                      push ebx
:00451DBE 56                      push esi
:00451DBF 894D98                  mov dword ptr [ebp-68], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00451DC2 6A04                    push 00000004
:00451DC4 6A00                    push 00000000
:00451DC6 6A00                    push 00000000
:00451DC8 B9881C4B00              mov ecx, 004B1C88
:00451DCD E8BE710200              call 00478F90
:00451DD2 0500960000              add eax, 00009600
:00451DD7 8945B4                  mov dword ptr [ebp-4C], eax
:00451DDA 8D4DC4                  lea ecx, dword ptr [ebp-3C]
:00451DDD E80E39FBFF              call 004056F0
:00451DE2 8D4DB8                  lea ecx, dword ptr [ebp-48]
:00451DE5 E80639FBFF              call 004056F0
:00451DEA 8A4518                  mov al, byte ptr [ebp+18]
:00451DED 50                      push eax
:00451DEE 8A4D14                  mov cl, byte ptr [ebp+14]
:00451DF1 51                      push ecx
:00451DF2 8D4DEC                  lea ecx, dword ptr [ebp-14]
:00451DF5 E8664DFEFF              call 00436B60
:00451DFA 8B4D98                  mov ecx, dword ptr [ebp-68]
:00451DFD E80EABFBFF              call 0040C910
:00451E02 8845C0                  mov byte ptr [ebp-40], al
:00451E05 C645BCFF                mov [ebp-44], FF
:00451E09 C645FCFF                mov [ebp-04], FF
:00451E0D C645F0FF                mov [ebp-10], FF
:00451E11 C745E801000000          mov [ebp-18], 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00451E18 6A04                    push 00000004
:00451E1A 8B4D98                  mov ecx, dword ptr [ebp-68]
:00451E1D E8CE4FFEFF              call 00436DF0
:00451E22 8945F4                  mov dword ptr [ebp-0C], eax
:00451E25 8D55EC                  lea edx, dword ptr [ebp-14]
:00451E28 52                      push edx
:00451E29 8B4508                  mov eax, dword ptr [ebp+08]
:00451E2C 50                      push eax
:00451E2D E86E51FEFF              call 00436FA0
:00451E32 83C408                  add esp, 00000008
:00451E35 85C0                    test eax, eax
:00451E37 7407                    je 00451E40
:00451E39 0CFF                    or al, FF
:00451E3B E9D4050000              jmp 00452414

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451E37(C)
|
:00451E40 68FF000000              push 000000FF
:00451E45 33C9                    xor ecx, ecx
:00451E47 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:00451E4D 33D2                    xor edx, edx
:00451E4F 8A15C54E4B00            mov dl, byte ptr [004B4EC5]
:00451E55 0FAFCA                  imul ecx, edx
:00451E58 51                      push ecx
:00451E59 8B45B4                  mov eax, dword ptr [ebp-4C]
:00451E5C 50                      push eax
:00451E5D E87E670200              call 004785E0
:00451E62 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00451E65 6A04                    push 00000004
:00451E67 6A00                    push 00000000
:00451E69 6A00                    push 00000000
:00451E6B B9881C4B00              mov ecx, 004B1C88
:00451E70 E81B710200              call 00478F90
:00451E75 C680809D0000FF          mov byte ptr [eax+00009D80], FF
:00451E7C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451E7F 33D2                    xor edx, edx
:00451E81 8A11                    mov dl, byte ptr [ecx]
:00451E83 8B45B4                  mov eax, dword ptr [ebp-4C]
:00451E86 03C2                    add eax, edx
:00451E88 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451E8B 33D2                    xor edx, edx
:00451E8D 8A5101                  mov dl, byte ptr [ecx+01]
:00451E90 33C9                    xor ecx, ecx
:00451E92 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:00451E98 0FAFD1                  imul edx, ecx
:00451E9B C6041000                mov byte ptr [eax+edx], 00
:00451E9F 8B5510                  mov edx, dword ptr [ebp+10]
:00451EA2 81E2FF000000            and edx, 000000FF
:00451EA8 83E204                  and edx, 00000004
:00451EAB 85D2                    test edx, edx
:00451EAD 0F8412010000            je 00451FC5
:00451EB3 C605704A4B0000          mov byte ptr [004B4A70], 00
:00451EBA C605504A4B00FF          mov byte ptr [004B4A50], FF
:00451EC1 C605484A4B00FF          mov byte ptr [004B4A48], FF
:00451EC8 C6056C4A4B00FF          mov byte ptr [004B4A6C], FF
:00451ECF 8B4598                  mov eax, dword ptr [ebp-68]
:00451ED2 8B08                    mov ecx, dword ptr [eax]
:00451ED4 6BC950                  imul ecx, 00000050
:00451ED7 81C1787F4900            add ecx, 00497F78
:00451EDD 894DA8                  mov dword ptr [ebp-58], ecx
:00451EE0 C745B0C4DD4A00          mov [ebp-50], 004ADDC4
:00451EE7 C645AC00                mov [ebp-54], 00
:00451EEB EB09                    jmp 00451EF6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451FA8(U)
|
:00451EED 8A55AC                  mov dl, byte ptr [ebp-54]
:00451EF0 80C201                  add dl, 01
:00451EF3 8855AC                  mov byte ptr [ebp-54], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451EEB(U)
|
:00451EF6 8B45AC                  mov eax, dword ptr [ebp-54]
:00451EF9 25FF000000              and eax, 000000FF
:00451EFE 83F841                  cmp eax, 00000041
:00451F01 0F8DA6000000            jnl 00451FAD
:00451F07 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00451F0A E89112FBFF              call 004031A0
:00451F0F 25FF000000              and eax, 000000FF
:00451F14 50                      push eax
:00451F15 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00451F18 81E1FF000000            and ecx, 000000FF
:00451F1E 6BC931                  imul ecx, 00000031
:00451F21 81C1001D4B00            add ecx, 004B1D00
:00451F27 E8E404FCFF              call 00412410
:00451F2C 25FF000000              and eax, 000000FF
:00451F31 85C0                    test eax, eax
:00451F33 7473                    je 00451FA8
:00451F35 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00451F38 E86312FBFF              call 004031A0
:00451F3D 25FF000000              and eax, 000000FF
:00451F42 50                      push eax
:00451F43 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00451F46 81E1FF000000            and ecx, 000000FF
:00451F4C 6BC931                  imul ecx, 00000031
:00451F4F 81C1001D4B00            add ecx, 004B1D00
:00451F55 E8B604FCFF              call 00412410
:00451F5A 8AD8                    mov bl, al
:00451F5C 81E3FF000000            and ebx, 000000FF
:00451F62 8B4DA8                  mov ecx, dword ptr [ebp-58]
:00451F65 E836DFFBFF              call 0040FEA0
:00451F6A 25FF000000              and eax, 000000FF
:00451F6F 3BD8                    cmp ebx, eax
:00451F71 7F35                    jg 00451FA8
:00451F73 8B4DAC                  mov ecx, dword ptr [ebp-54]
:00451F76 81E1FF000000            and ecx, 000000FF
:00451F7C 6BC931                  imul ecx, 00000031
:00451F7F 81C1001D4B00            add ecx, 004B1D00
:00451F85 E876DEFBFF              call 0040FE00
:00451F8A 25FF000000              and eax, 000000FF
:00451F8F 8B4D98                  mov ecx, dword ptr [ebp-68]
:00451F92 394114                  cmp dword ptr [ecx+14], eax
:00451F95 7211                    jb 00451FA8
:00451F97 8B55B0                  mov edx, dword ptr [ebp-50]
:00451F9A 8A45AC                  mov al, byte ptr [ebp-54]
:00451F9D 8802                    mov byte ptr [edx], al
:00451F9F 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00451FA2 83C101                  add ecx, 00000001
:00451FA5 894DB0                  mov dword ptr [ebp-50], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451F33(C), :00451F71(C), :00451F95(C)
|
:00451FA8 E940FFFFFF              jmp 00451EED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451F01(C)
|
:00451FAD 8B55B0                  mov edx, dword ptr [ebp-50]
:00451FB0 C602FF                  mov byte ptr [edx], FF
:00451FB3 837DF400                cmp dword ptr [ebp-0C], 00000000
:00451FB7 750C                    jne 00451FC5
:00451FB9 8B4508                  mov eax, dword ptr [ebp+08]
:00451FBC 50                      push eax
:00451FBD 8B4D98                  mov ecx, dword ptr [ebp-68]
:00451FC0 E829370000              call 004556EE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451EAD(C), :00451FB7(C)
|
:00451FC5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00451FC8 51                      push ecx
:00451FC9 E88AD8FFFF              call 0044F858
:00451FCE 83C404                  add esp, 00000004
:00451FD1 8845C8                  mov byte ptr [ebp-38], al
:00451FD4 8A55C8                  mov dl, byte ptr [ebp-38]
:00451FD7 52                      push edx
:00451FD8 8B4D98                  mov ecx, dword ptr [ebp-68]
:00451FDB E87D10FEFF              call 0043305D
:00451FE0 25FF000000              and eax, 000000FF
:00451FE5 3DFF000000              cmp eax, 000000FF
:00451FEA 7507                    jne 00451FF3
:00451FEC 0CFF                    or al, FF
:00451FEE E921040000              jmp 00452414

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451FEA(C)
|
:00451FF3 C645E000                mov [ebp-20], 00
:00451FF7 EB06                    jmp 00451FFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045240D(U)
|
:00451FF9 8A45BC                  mov al, byte ptr [ebp-44]
:00451FFC 8845E0                  mov byte ptr [ebp-20], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00451FF7(U)
|
:00451FFF 837DE800                cmp dword ptr [ebp-18], 00000000
:00452003 0F8409040000            je 00452412
:00452009 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045200C 81E1FF000000            and ecx, 000000FF
:00452012 8B550C                  mov edx, dword ptr [ebp+0C]
:00452015 81E2FF000000            and edx, 000000FF
:0045201B 3BCA                    cmp ecx, edx
:0045201D 0F8DEF030000            jnl 00452412
:00452023 C745E800000000          mov [ebp-18], 00000000
:0045202A C645BCFF                mov [ebp-44], FF
:0045202E C645FCFF                mov [ebp-04], FF
:00452032 C745D000000000          mov [ebp-30], 00000000
:00452039 EB09                    jmp 00452044

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452408(U)
|
:0045203B 8B45D0                  mov eax, dword ptr [ebp-30]
:0045203E 83C001                  add eax, 00000001
:00452041 8945D0                  mov dword ptr [ebp-30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452039(U)
|
:00452044 33C9                    xor ecx, ecx
:00452046 8A0DC54E4B00            mov cl, byte ptr [004B4EC5]
:0045204C 394DD0                  cmp dword ptr [ebp-30], ecx
:0045204F 0F83B8030000            jnb 0045240D
:00452055 C745DC00000000          mov [ebp-24], 00000000
:0045205C EB09                    jmp 00452067

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004520E7(U), :00452132(U), :004523C2(U)
|
:0045205E 8B55DC                  mov edx, dword ptr [ebp-24]
:00452061 83C201                  add edx, 00000001
:00452064 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045205C(U)
|
:00452067 33C0                    xor eax, eax
:00452069 A0C44E4B00              mov al, byte ptr [004B4EC4]
:0045206E 3945DC                  cmp dword ptr [ebp-24], eax
:00452071 0F8350030000            jnb 004523C7
:00452077 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:0045207A 034DDC                  add ecx, dword ptr [ebp-24]
:0045207D 33D2                    xor edx, edx
:0045207F 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:00452085 8B45D0                  mov eax, dword ptr [ebp-30]
:00452088 0FAFC2                  imul eax, edx
:0045208B 8A0C01                  mov cl, byte ptr [ecx+eax]
:0045208E 884DA4                  mov byte ptr [ebp-5C], cl
:00452091 8B55A4                  mov edx, dword ptr [ebp-5C]
:00452094 81E2FF000000            and edx, 000000FF
:0045209A 8B45E0                  mov eax, dword ptr [ebp-20]
:0045209D 25FF000000              and eax, 000000FF
:004520A2 3BD0                    cmp edx, eax
:004520A4 7E2C                    jle 004520D2
:004520A6 8B4DA4                  mov ecx, dword ptr [ebp-5C]
:004520A9 81E1FF000000            and ecx, 000000FF
:004520AF 81F9FF000000            cmp ecx, 000000FF
:004520B5 741B                    je 004520D2
:004520B7 8B55FC                  mov edx, dword ptr [ebp-04]
:004520BA 81E2FF000000            and edx, 000000FF
:004520C0 8B45A4                  mov eax, dword ptr [ebp-5C]
:004520C3 25FF000000              and eax, 000000FF
:004520C8 3BD0                    cmp edx, eax
:004520CA 7E06                    jle 004520D2
:004520CC 8A4DA4                  mov cl, byte ptr [ebp-5C]
:004520CF 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004520A4(C), :004520B5(C), :004520CA(C)
|
:004520D2 8B55A4                  mov edx, dword ptr [ebp-5C]
:004520D5 81E2FF000000            and edx, 000000FF
:004520DB 8B45E0                  mov eax, dword ptr [ebp-20]
:004520DE 25FF000000              and eax, 000000FF
:004520E3 3BD0                    cmp edx, eax
:004520E5 7405                    je 004520EC
:004520E7 E972FFFFFF              jmp 0045205E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004520E5(C)
|
:004520EC 8A4DDC                  mov cl, byte ptr [ebp-24]
:004520EF 884DC4                  mov byte ptr [ebp-3C], cl
:004520F2 8A55D0                  mov dl, byte ptr [ebp-30]
:004520F5 8855C5                  mov byte ptr [ebp-3B], dl
:004520F8 8D45C4                  lea eax, dword ptr [ebp-3C]
:004520FB 50                      push eax
:004520FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004520FF 51                      push ecx
:00452100 E89B4EFEFF              call 00436FA0
:00452105 83C408                  add esp, 00000008
:00452108 85C0                    test eax, eax
:0045210A 752B                    jne 00452137
:0045210C 837D1C00                cmp dword ptr [ebp+1C], 00000000
:00452110 7425                    je 00452137
:00452112 837DF400                cmp dword ptr [ebp-0C], 00000000
:00452116 751F                    jne 00452137
:00452118 8B55C0                  mov edx, dword ptr [ebp-40]
:0045211B 81E2FF000000            and edx, 000000FF
:00452121 52                      push edx
:00452122 8D45C4                  lea eax, dword ptr [ebp-3C]
:00452125 50                      push eax
:00452126 E843D5FFFF              call 0044F66E
:0045212B 83C408                  add esp, 00000008
:0045212E 85C0                    test eax, eax
:00452130 7405                    je 00452137
:00452132 E927FFFFFF              jmp 0045205E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045210A(C), :00452110(C), :00452116(C), :00452130(C)
|
:00452137 C745CC00000000          mov [ebp-34], 00000000
:0045213E EB09                    jmp 00452149

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045217D(U), :00452277(U), :004523BD(U)
|
:00452140 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00452143 83C101                  add ecx, 00000001
:00452146 894DCC                  mov dword ptr [ebp-34], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045213E(U)
|
:00452149 837DCC04                cmp dword ptr [ebp-34], 00000004
:0045214D 0F836F020000            jnb 004523C2
:00452153 8A55CC                  mov dl, byte ptr [ebp-34]
:00452156 52                      push edx
:00452157 8D45C4                  lea eax, dword ptr [ebp-3C]
:0045215A 50                      push eax
:0045215B E891D7FFFF              call 0044F8F1
:00452160 83C408                  add esp, 00000008
:00452163 50                      push eax
:00452164 8D4DB8                  lea ecx, dword ptr [ebp-48]
:00452167 E83449FEFF              call 00436AA0
:0045216C 8B4DB8                  mov ecx, dword ptr [ebp-48]
:0045216F 81E1FF000000            and ecx, 000000FF
:00452175 81F9FF000000            cmp ecx, 000000FF
:0045217B 7502                    jne 0045217F
:0045217D EBC1                    jmp 00452140

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045217B(C)
|
:0045217F 8B55B8                  mov edx, dword ptr [ebp-48]
:00452182 81E2FF000000            and edx, 000000FF
:00452188 8B45B9                  mov eax, dword ptr [ebp-47]
:0045218B 25FF000000              and eax, 000000FF
:00452190 33C9                    xor ecx, ecx
:00452192 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:00452198 0FAFC1                  imul eax, ecx
:0045219B 03D0                    add edx, eax
:0045219D 8955E4                  mov dword ptr [ebp-1C], edx
:004521A0 8B55B4                  mov edx, dword ptr [ebp-4C]
:004521A3 0355E4                  add edx, dword ptr [ebp-1C]
:004521A6 8955D4                  mov dword ptr [ebp-2C], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004521A9 6A04                    push 00000004
:004521AB 6A00                    push 00000000
:004521AD 6A00                    push 00000000
:004521AF B9881C4B00              mov ecx, 004B1C88
:004521B4 E8D76D0200              call 00478F90
:004521B9 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004521BC 8D9408004B0000          lea edx, dword ptr [eax+ecx+00004B00]
:004521C3 8955D8                  mov dword ptr [ebp-28], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004521C6 6A04                    push 00000004
:004521C8 6A00                    push 00000000
:004521CA 6A00                    push 00000000
:004521CC B9007D4A00              mov ecx, 004A7D00
:004521D1 E8BA6D0200              call 00478F90
:004521D6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004521D9 8D940880070000          lea edx, dword ptr [eax+ecx+00000780]
:004521E0 8955F8                  mov dword ptr [ebp-08], edx
:004521E3 8B45D4                  mov eax, dword ptr [ebp-2C]
:004521E6 33C9                    xor ecx, ecx
:004521E8 8A08                    mov cl, byte ptr [eax]
:004521EA 81F9FF000000            cmp ecx, 000000FF
:004521F0 0F85C7010000            jne 004523BD
:004521F6 8D55B8                  lea edx, dword ptr [ebp-48]
:004521F9 52                      push edx
:004521FA E859D6FFFF              call 0044F858
:004521FF 83C404                  add esp, 00000004
:00452202 88459C                  mov byte ptr [ebp-64], al
:00452205 8A459C                  mov al, byte ptr [ebp-64]
:00452208 50                      push eax
:00452209 8B4D98                  mov ecx, dword ptr [ebp-68]
:0045220C E84C0EFEFF              call 0043305D
:00452211 8845A0                  mov byte ptr [ebp-60], al
:00452214 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00452217 81E1FF000000            and ecx, 000000FF
:0045221D 81F9FF000000            cmp ecx, 000000FF
:00452223 7452                    je 00452277
:00452225 8B55A0                  mov edx, dword ptr [ebp-60]
:00452228 81E2FF000000            and edx, 000000FF
:0045222E 8B45A4                  mov eax, dword ptr [ebp-5C]
:00452231 25FF000000              and eax, 000000FF
:00452236 03D0                    add edx, eax
:00452238 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045223B 81E1FF000000            and ecx, 000000FF
:00452241 3BD1                    cmp edx, ecx
:00452243 7F32                    jg 00452277
:00452245 8B55D8                  mov edx, dword ptr [ebp-28]
:00452248 33C0                    xor eax, eax
:0045224A 8A02                    mov al, byte ptr [edx]
:0045224C 3DFF000000              cmp eax, 000000FF
:00452251 7429                    je 0045227C
:00452253 8B75C0                  mov esi, dword ptr [ebp-40]
:00452256 81E6FF000000            and esi, 000000FF
:0045225C 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045225F 33D2                    xor edx, edx
:00452261 8A11                    mov dl, byte ptr [ecx]
:00452263 8BCA                    mov ecx, edx
:00452265 6BC924                  imul ecx, 00000024
:00452268 81C1B83B4B00            add ecx, 004B3BB8
:0045226E E89DA6FBFF              call 0040C910
:00452273 3BF0                    cmp esi, eax
:00452275 7405                    je 0045227C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452223(C), :00452243(C)
|
:00452277 E9C4FEFFFF              jmp 00452140

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452251(C), :00452275(C)
|
:0045227C 8B45A4                  mov eax, dword ptr [ebp-5C]
:0045227F 25FF000000              and eax, 000000FF
:00452284 8B4DA0                  mov ecx, dword ptr [ebp-60]
:00452287 81E1FF000000            and ecx, 000000FF
:0045228D 03C1                    add eax, ecx
:0045228F 8B55D4                  mov edx, dword ptr [ebp-2C]
:00452292 8802                    mov byte ptr [edx], al
:00452294 C745E801000000          mov [ebp-18], 00000001
:0045229B 8B45BC                  mov eax, dword ptr [ebp-44]
:0045229E 25FF000000              and eax, 000000FF
:004522A3 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004522A6 33D2                    xor edx, edx
:004522A8 8A11                    mov dl, byte ptr [ecx]
:004522AA 3BC2                    cmp eax, edx
:004522AC 7E53                    jle 00452301
:004522AE 837D1C00                cmp dword ptr [ebp+1C], 00000000
:004522B2 7445                    je 004522F9
:004522B4 837DF400                cmp dword ptr [ebp-0C], 00000000
:004522B8 753F                    jne 004522F9
:004522BA 8B45C0                  mov eax, dword ptr [ebp-40]
:004522BD 25FF000000              and eax, 000000FF
:004522C2 50                      push eax
:004522C3 8D4DB8                  lea ecx, dword ptr [ebp-48]
:004522C6 51                      push ecx
:004522C7 E8A2D3FFFF              call 0044F66E
:004522CC 83C408                  add esp, 00000008
:004522CF 85C0                    test eax, eax
:004522D1 7524                    jne 004522F7
:004522D3 8B55D4                  mov edx, dword ptr [ebp-2C]
:004522D6 8A02                    mov al, byte ptr [edx]
:004522D8 8845BC                  mov byte ptr [ebp-44], al
:004522DB 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004522DE 81E1FF000000            and ecx, 000000FF
:004522E4 8B55FC                  mov edx, dword ptr [ebp-04]
:004522E7 81E2FF000000            and edx, 000000FF
:004522ED 3BCA                    cmp ecx, edx
:004522EF 7E06                    jle 004522F7
:004522F1 8A45FC                  mov al, byte ptr [ebp-04]
:004522F4 8845BC                  mov byte ptr [ebp-44], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004522D1(C), :004522EF(C)
|
:004522F7 EB08                    jmp 00452301

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004522B2(C), :004522B8(C)
|
:004522F9 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004522FC 8A11                    mov dl, byte ptr [ecx]
:004522FE 8855BC                  mov byte ptr [ebp-44], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004522AC(C), :004522F7(U)
|
:00452301 8B4510                  mov eax, dword ptr [ebp+10]
:00452304 25FF000000              and eax, 000000FF
:00452309 83E008                  and eax, 00000008
:0045230C 85C0                    test eax, eax
:0045230E 7469                    je 00452379

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00452310 6A04                    push 00000004
:00452312 6A00                    push 00000000
:00452314 6A00                    push 00000000
:00452316 B9007D4A00              mov ecx, 004A7D00
:0045231B E8706C0200              call 00478F90
:00452320 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00452323 33D2                    xor edx, edx
:00452325 8A1408                  mov dl, byte ptr [eax+ecx]
:00452328 81FAFF000000            cmp edx, 000000FF
:0045232E 7449                    je 00452379
:00452330 6A20                    push 00000020

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00452332 6A04                    push 00000004
:00452334 6A00                    push 00000000
:00452336 6A00                    push 00000000
:00452338 B9007D4A00              mov ecx, 004A7D00
:0045233D E84E6C0200              call 00478F90
:00452342 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00452345 33D2                    xor edx, edx
:00452347 8A1408                  mov dl, byte ptr [eax+ecx]
:0045234A 8BCA                    mov ecx, edx
:0045234C 6BC924                  imul ecx, 00000024
:0045234F 81C1B83B4B00            add ecx, 004B3BB8
:00452355 E8964AFEFF              call 00436DF0
:0045235A 85C0                    test eax, eax
:0045235C 741B                    je 00452379

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045235E 6A04                    push 00000004
:00452360 6A00                    push 00000000
:00452362 6A00                    push 00000000
:00452364 B9007D4A00              mov ecx, 004A7D00
:00452369 E8226C0200              call 00478F90
:0045236E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00452371 8A0408                  mov al, byte ptr [eax+ecx]
:00452374 E99B000000              jmp 00452414

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045230E(C), :0045232E(C), :0045235C(C)
|
:00452379 8B5510                  mov edx, dword ptr [ebp+10]
:0045237C 81E2FF000000            and edx, 000000FF
:00452382 83E202                  and edx, 00000002
:00452385 85D2                    test edx, edx
:00452387 7418                    je 004523A1
:00452389 8D45EC                  lea eax, dword ptr [ebp-14]
:0045238C 50                      push eax
:0045238D 8D4DB8                  lea ecx, dword ptr [ebp-48]
:00452390 51                      push ecx
:00452391 E80A4CFEFF              call 00436FA0
:00452396 83C408                  add esp, 00000008
:00452399 85C0                    test eax, eax
:0045239B 7404                    je 004523A1
:0045239D B001                    mov al, 01
:0045239F EB73                    jmp 00452414

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452387(C), :0045239B(C)
|
:004523A1 8B5510                  mov edx, dword ptr [ebp+10]
:004523A4 81E2FF000000            and edx, 000000FF
:004523AA 83E204                  and edx, 00000004
:004523AD 85D2                    test edx, edx
:004523AF 740C                    je 004523BD
:004523B1 8D45B8                  lea eax, dword ptr [ebp-48]
:004523B4 50                      push eax
:004523B5 8B4D98                  mov ecx, dword ptr [ebp-68]
:004523B8 E831330000              call 004556EE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004521F0(C), :004523AF(C)
|
:004523BD E97EFDFFFF              jmp 00452140

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045214D(C)
|
:004523C2 E997FCFFFF              jmp 0045205E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452071(C)
|
:004523C7 837DE800                cmp dword ptr [ebp-18], 00000000
:004523CB 7520                    jne 004523ED
:004523CD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004523D0 81E1FF000000            and ecx, 000000FF
:004523D6 81F9FF000000            cmp ecx, 000000FF
:004523DC 740D                    je 004523EB
:004523DE 8A55FC                  mov dl, byte ptr [ebp-04]
:004523E1 8855BC                  mov byte ptr [ebp-44], dl
:004523E4 C745E801000000          mov [ebp-18], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004523DC(C)
|
:004523EB EB1B                    jmp 00452408

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004523CB(C)
|
:004523ED 8B45BC                  mov eax, dword ptr [ebp-44]
:004523F0 25FF000000              and eax, 000000FF
:004523F5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004523F8 81E1FF000000            and ecx, 000000FF
:004523FE 3BC1                    cmp eax, ecx
:00452400 7E06                    jle 00452408
:00452402 8A55FC                  mov dl, byte ptr [ebp-04]
:00452405 8855BC                  mov byte ptr [ebp-44], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004523EB(U), :00452400(C)
|
:00452408 E92EFCFFFF              jmp 0045203B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045204F(C)
|
:0045240D E9E7FBFFFF              jmp 00451FF9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452003(C), :0045201D(C)
|
:00452412 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00451E3B(U), :00451FEE(U), :00452374(U), :0045239F(U)
|
:00452414 5E                      pop esi
:00452415 5B                      pop ebx
:00452416 8BE5                    mov esp, ebp
:00452418 5D                      pop ebp
:00452419 C21800                  ret 0018



* Referenced by a CALL at Address:
|:00452C78   
|
:0045241C 55                      push ebp
:0045241D 8BEC                    mov ebp, esp
:0045241F 83EC10                  sub esp, 00000010
:00452422 894DF0                  mov dword ptr [ebp-10], ecx
:00452425 68FF000000              push 000000FF
:0045242A 6880070000              push 00000780

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045242F 6A04                    push 00000004
:00452431 6A00                    push 00000000
:00452433 6A00                    push 00000000
:00452435 B9881C4B00              mov ecx, 004B1C88
:0045243A E8516B0200              call 00478F90
:0045243F 0500960000              add eax, 00009600
:00452444 50                      push eax
:00452445 E896610200              call 004785E0
:0045244A 83C40C                  add esp, 0000000C
:0045244D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452450 E82B4BFEFF              call 00436F80
:00452455 8845FC                  mov byte ptr [ebp-04], al
:00452458 6A00                    push 00000000
:0045245A 6A00                    push 00000000
:0045245C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045245F E8020DFEFF              call 00433166
:00452464 50                      push eax
:00452465 8B45F0                  mov eax, dword ptr [ebp-10]
:00452468 83C005                  add eax, 00000005
:0045246B 50                      push eax
:0045246C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045246F E8C6D5FFFF              call 0044FA3A
:00452474 8845F8                  mov byte ptr [ebp-08], al

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00452477 6A04                    push 00000004
:00452479 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045247C E86F49FEFF              call 00436DF0
:00452481 85C0                    test eax, eax
:00452483 7512                    jne 00452497
:00452485 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452488 E8F332FBFF              call 00405780
:0045248D 25FF000000              and eax, 000000FF
:00452492 83F804                  cmp eax, 00000004
:00452495 7505                    jne 0045249C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452483(C)
|
:00452497 E945010000              jmp 004525E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452495(C)
|
:0045249C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045249F 8B09                    mov ecx, dword ptr [ecx]
:004524A1 6BC950                  imul ecx, 00000050
:004524A4 81C1787F4900            add ecx, 00497F78
:004524AA E8110DFBFF              call 004031C0
:004524AF 25FF000000              and eax, 000000FF
:004524B4 3DFF000000              cmp eax, 000000FF
:004524B9 7505                    jne 004524C0
:004524BB E921010000              jmp 004525E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004524B9(C)
|
:004524C0 8B55F0                  mov edx, dword ptr [ebp-10]
:004524C3 8B0A                    mov ecx, dword ptr [edx]
:004524C5 6BC950                  imul ecx, 00000050
:004524C8 81C1787F4900            add ecx, 00497F78
:004524CE E836FBFAFF              call 00402009
:004524D3 50                      push eax
:004524D4 8B45F0                  mov eax, dword ptr [ebp-10]
:004524D7 8B08                    mov ecx, dword ptr [eax]
:004524D9 6BC950                  imul ecx, 00000050
:004524DC 81C1787F4900            add ecx, 00497F78
:004524E2 E8F7F4FAFF              call 004019DE
:004524E7 85C0                    test eax, eax
:004524E9 7505                    jne 004524F0
:004524EB E9F1000000              jmp 004525E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004524E9(C)
|
:004524F0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004524F3 E8F845FEFF              call 00436AF0
:004524F8 25FF000000              and eax, 000000FF
:004524FD 83F805                  cmp eax, 00000005
:00452500 7519                    jne 0045251B
:00452502 B9784E4B00              mov ecx, 004B4E78
:00452507 E873CE0000              call 0045F37F
:0045250C 25FF000000              and eax, 000000FF
:00452511 83F802                  cmp eax, 00000002
:00452514 7505                    jne 0045251B
:00452516 E9C6000000              jmp 004525E1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452500(C), :00452514(C)
|
:0045251B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045251E 81E1FF000000            and ecx, 000000FF
:00452524 81F9FF000000            cmp ecx, 000000FF
:0045252A 0F84B1000000            je 004525E1
:00452530 6880000000              push 00000080
:00452535 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452538 E8B348FEFF              call 00436DF0
:0045253D 85C0                    test eax, eax
:0045253F 0F859C000000            jne 004525E1
:00452545 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452548 E83332FBFF              call 00405780
:0045254D 25FF000000              and eax, 000000FF
:00452552 83F804                  cmp eax, 00000004
:00452555 0F8486000000            je 004525E1
:0045255B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045255E 81E1FF000000            and ecx, 000000FF
:00452564 6BC924                  imul ecx, 00000024
:00452567 81C1B83B4B00            add ecx, 004B3BB8
:0045256D E8CEF6FDFF              call 00431C40
:00452572 668B10                  mov dx, word ptr [eax]
:00452575 668955F4                mov word ptr [ebp-0C], dx
:00452579 8A45F8                  mov al, byte ptr [ebp-08]
:0045257C 50                      push eax
:0045257D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452580 8A5104                  mov dl, byte ptr [ecx+04]
:00452583 52                      push edx
:00452584 E885D1FFFF              call 0044F70E
:00452589 83C408                  add esp, 00000008
:0045258C 6A01                    push 00000001
:0045258E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452591 E84A2DFEFF              call 004352E0
:00452596 6A00                    push 00000000
:00452598 68FF000000              push 000000FF
:0045259D 6A00                    push 00000000
:0045259F 6A01                    push 00000001
:004525A1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004525A4 81E1FF000000            and ecx, 000000FF
:004525AA 6BC924                  imul ecx, 00000024
:004525AD 81C1B83B4B00            add ecx, 004B3BB8
:004525B3 E828FAFEFF              call 00441FE0
:004525B8 50                      push eax
:004525B9 8B45F0                  mov eax, dword ptr [ebp-10]
:004525BC 8A4804                  mov cl, byte ptr [eax+04]
:004525BF 51                      push ecx
:004525C0 B9E0484B00              mov ecx, 004B48E0
:004525C5 E8C41BFFFF              call 0044418E
:004525CA 6880000000              push 00000080
:004525CF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004525D2 E8F942FEFF              call 004368D0
:004525D7 B958494B00              mov ecx, 004B4958
:004525DC E830A3FFFF              call 0044C911

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452497(U), :004524BB(U), :004524EB(U), :00452516(U), :0045252A(C)
|:0045253F(C), :00452555(C)
|
:004525E1 8BE5                    mov esp, ebp
:004525E3 5D                      pop ebp
:004525E4 C3                      ret



* Referenced by a CALL at Addresses:
|:004391D7   , :00440F93   , :0045D79D   , :0045FC46   
|
:004525E5 55                      push ebp
:004525E6 8BEC                    mov ebp, esp
:004525E8 83EC1C                  sub esp, 0000001C
:004525EB 894DEC                  mov dword ptr [ebp-14], ecx
:004525EE C645FCFF                mov [ebp-04], FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004525F2 6A04                    push 00000004
:004525F4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004525F7 E8F447FEFF              call 00436DF0
:004525FC 85C0                    test eax, eax
:004525FE 7409                    je 00452609
:00452600 C745E864000000          mov [ebp-18], 00000064
:00452607 EB10                    jmp 00452619

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004525FE(C)
|
:00452609 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045260C E8C109FEFF              call 00432FD2
:00452611 25FF000000              and eax, 000000FF
:00452616 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452607(U)
|
:00452619 8A45E8                  mov al, byte ptr [ebp-18]
:0045261C 8845F8                  mov byte ptr [ebp-08], al
:0045261F 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00452622 E8C930FBFF              call 004056F0
:00452627 C605604A4B00FF          mov byte ptr [004B4A60], FF
:0045262E C705444A4B0000000000    mov dword ptr [004B4A44], 00000000
:00452638 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045263B 8B11                    mov edx, dword ptr [ecx]
:0045263D 52                      push edx
:0045263E B9C84F4B00              mov ecx, 004B4FC8
:00452643 E818F9FEFF              call 00441F60
:00452648 8B45EC                  mov eax, dword ptr [ebp-14]
:0045264B 33C9                    xor ecx, ecx
:0045264D 8A4807                  mov cl, byte ptr [eax+07]
:00452650 81F9FF000000            cmp ecx, 000000FF
:00452656 7433                    je 0045268B
:00452658 8B55EC                  mov edx, dword ptr [ebp-14]
:0045265B 33C0                    xor eax, eax
:0045265D 8A4207                  mov al, byte ptr [edx+07]
:00452660 8BC8                    mov ecx, eax
:00452662 6BC924                  imul ecx, 00000024
:00452665 81C1B83B4B00            add ecx, 004B3BB8
:0045266B E8609A0000              call 0045C0D0
:00452670 25FF000000              and eax, 000000FF
:00452675 83F802                  cmp eax, 00000002
:00452678 7411                    je 0045268B
:0045267A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045267D C64107FF                mov [ecx+07], FF
:00452681 6A01                    push 00000001
:00452683 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452686 E8702BFEFF              call 004351FB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452656(C), :00452678(C)
|
:0045268B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045268E E83D9A0000              call 0045C0D0
:00452693 25FF000000              and eax, 000000FF
:00452698 83F802                  cmp eax, 00000002
:0045269B 0F850D060000            jne 00452CAE
:004526A1 6880000000              push 00000080
:004526A6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004526A9 E84247FEFF              call 00436DF0
:004526AE 85C0                    test eax, eax
:004526B0 0F85F8050000            jne 00452CAE
:004526B6 8B55EC                  mov edx, dword ptr [ebp-14]
:004526B9 33C0                    xor eax, eax
:004526BB 8A421B                  mov al, byte ptr [edx+1B]
:004526BE 83E010                  and eax, 00000010
:004526C1 85C0                    test eax, eax
:004526C3 0F85E5050000            jne 00452CAE
:004526C9 68FF000000              push 000000FF
:004526CE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004526D1 E81AE5FFFF              call 00450BF0
:004526D6 33C9                    xor ecx, ecx
:004526D8 8A0D4C4A4B00            mov cl, byte ptr [004B4A4C]
:004526DE 83E101                  and ecx, 00000001
:004526E1 85C9                    test ecx, ecx
:004526E3 0F848E010000            je 00452877

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004526E9 6A04                    push 00000004
:004526EB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004526EE E8FD46FEFF              call 00436DF0
:004526F3 85C0                    test eax, eax
:004526F5 0F857C010000            jne 00452877
:004526FB 8B55EC                  mov edx, dword ptr [ebp-14]
:004526FE 33C0                    xor eax, eax
:00452700 8A4204                  mov al, byte ptr [edx+04]
:00452703 83F81E                  cmp eax, 0000001E
:00452706 0F846B010000            je 00452877
:0045270C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045270F E8FCA1FBFF              call 0040C910
:00452714 85C0                    test eax, eax
:00452716 7415                    je 0045272D
:00452718 B9B83B4B00              mov ecx, 004B3BB8
:0045271D E81EF5FDFF              call 00431C40
:00452722 50                      push eax
:00452723 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00452726 E87543FEFF              call 00436AA0
:0045272B EB2D                    jmp 0045275A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452716(C)
|
:0045272D B9F03F4B00              mov ecx, 004B3FF0
:00452732 E899990000              call 0045C0D0
:00452737 25FF000000              and eax, 000000FF
:0045273C 83F802                  cmp eax, 00000002
:0045273F 7515                    jne 00452756
:00452741 B9F03F4B00              mov ecx, 004B3FF0
:00452746 E8F5F4FDFF              call 00431C40
:0045274B 50                      push eax
:0045274C 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0045274F E84C43FEFF              call 00436AA0
:00452754 EB04                    jmp 0045275A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045273F(C)
|
:00452756 C645F4FF                mov [ebp-0C], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045272B(U), :00452754(U)
|
:0045275A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045275D 81E1FF000000            and ecx, 000000FF
:00452763 81F9FF000000            cmp ecx, 000000FF
:00452769 0F84F7000000            je 00452866
:0045276F 8B55EC                  mov edx, dword ptr [ebp-14]
:00452772 8A4204                  mov al, byte ptr [edx+04]
:00452775 50                      push eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00452776 6A0A                    push 0000000A
:00452778 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:0045277B 51                      push ecx
:0045277C E8A6F4FFFF              call 00451C27
:00452781 83C40C                  add esp, 0000000C
:00452784 6A01                    push 00000001
:00452786 8B55EC                  mov edx, dword ptr [ebp-14]
:00452789 8A4206                  mov al, byte ptr [edx+06]
:0045278C 50                      push eax
:0045278D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452790 8A5105                  mov dl, byte ptr [ecx+05]
:00452793 52                      push edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00452794 6A02                    push 00000002
:00452796 68FF000000              push 000000FF
:0045279B 8D45F4                  lea eax, dword ptr [ebp-0C]
:0045279E 50                      push eax
:0045279F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004527A2 E810F6FFFF              call 00451DB7
:004527A7 25FF000000              and eax, 000000FF
:004527AC 83F801                  cmp eax, 00000001
:004527AF 7479                    je 0045282A
:004527B1 6A00                    push 00000000
:004527B3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004527B6 8A5106                  mov dl, byte ptr [ecx+06]
:004527B9 52                      push edx
:004527BA 8B45EC                  mov eax, dword ptr [ebp-14]
:004527BD 8A4805                  mov cl, byte ptr [eax+05]
:004527C0 51                      push ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004527C1 6A02                    push 00000002
:004527C3 68FF000000              push 000000FF
:004527C8 8D55F4                  lea edx, dword ptr [ebp-0C]
:004527CB 52                      push edx
:004527CC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004527CF E8E3F5FFFF              call 00451DB7
:004527D4 25FF000000              and eax, 000000FF
:004527D9 3DFF000000              cmp eax, 000000FF
:004527DE 743C                    je 0045281C
:004527E0 6A01                    push 00000001
:004527E2 8A45F8                  mov al, byte ptr [ebp-08]
:004527E5 50                      push eax
:004527E6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004527E9 83C105                  add ecx, 00000005
:004527EC 51                      push ecx
:004527ED 8D55F4                  lea edx, dword ptr [ebp-0C]
:004527F0 52                      push edx
:004527F1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004527F4 E8E3F0FFFF              call 004518DC
:004527F9 6A01                    push 00000001
:004527FB 68FF000000              push 000000FF
:00452800 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00452805 6A04                    push 00000004
:00452807 8A45F8                  mov al, byte ptr [ebp-08]
:0045280A 50                      push eax
:0045280B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045280E 83C105                  add ecx, 00000005
:00452811 51                      push ecx
:00452812 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452815 E89DF5FFFF              call 00451DB7
:0045281A EB0C                    jmp 00452828

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004527DE(C)
|
:0045281C 8A55F8                  mov dl, byte ptr [ebp-08]
:0045281F 52                      push edx
:00452820 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452823 E8CB430000              call 00456BF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045281A(U)
|
:00452828 EB3A                    jmp 00452864

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004527AF(C)
|
:0045282A 6A01                    push 00000001
:0045282C 8A45F8                  mov al, byte ptr [ebp-08]
:0045282F 50                      push eax
:00452830 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452833 83C105                  add ecx, 00000005
:00452836 51                      push ecx
:00452837 8D55F4                  lea edx, dword ptr [ebp-0C]
:0045283A 52                      push edx
:0045283B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045283E E899F0FFFF              call 004518DC
:00452843 6A01                    push 00000001
:00452845 68FF000000              push 000000FF
:0045284A 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045284F 6A04                    push 00000004
:00452851 8A45F8                  mov al, byte ptr [ebp-08]
:00452854 50                      push eax
:00452855 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452858 83C105                  add ecx, 00000005
:0045285B 51                      push ecx
:0045285C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045285F E853F5FFFF              call 00451DB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452828(U)
|
:00452864 EB0C                    jmp 00452872

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452769(C)
|
:00452866 8A55F8                  mov dl, byte ptr [ebp-08]
:00452869 52                      push edx
:0045286A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045286D E881430000              call 00456BF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452864(U)
|
:00452872 E9B0030000              jmp 00452C27

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004526E3(C), :004526F5(C), :00452706(C)
|
:00452877 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045287A E8012FFBFF              call 00405780
:0045287F 25FF000000              and eax, 000000FF
:00452884 8945E4                  mov dword ptr [ebp-1C], eax
:00452887 837DE404                cmp dword ptr [ebp-1C], 00000004
:0045288B 0F878C030000            ja 00452C1D
:00452891 8B45E4                  mov eax, dword ptr [ebp-1C]
:00452894 FF2485B22C4500          jmp dword ptr [4*eax+00452CB2]
:0045289B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045289E 33D2                    xor edx, edx
:004528A0 8A5107                  mov dl, byte ptr [ecx+07]
:004528A3 81FAFF000000            cmp edx, 000000FF
:004528A9 0F848B000000            je 0045293A
:004528AF 8B45EC                  mov eax, dword ptr [ebp-14]
:004528B2 33C9                    xor ecx, ecx
:004528B4 8A4807                  mov cl, byte ptr [eax+07]
:004528B7 6BC924                  imul ecx, 00000024
:004528BA 81C1B83B4B00            add ecx, 004B3BB8
:004528C0 E87BF3FDFF              call 00431C40
:004528C5 50                      push eax
:004528C6 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:004528C9 E8D241FEFF              call 00436AA0
:004528CE 8B55EC                  mov edx, dword ptr [ebp-14]
:004528D1 33C0                    xor eax, eax
:004528D3 8A4207                  mov al, byte ptr [edx+07]
:004528D6 8BC8                    mov ecx, eax
:004528D8 6BC924                  imul ecx, 00000024
:004528DB 81C1B83B4B00            add ecx, 004B3BB8
:004528E1 E89A2EFBFF              call 00405780
:004528E6 25FF000000              and eax, 000000FF
:004528EB 85C0                    test eax, eax
:004528ED 7422                    je 00452911
:004528EF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004528F2 33D2                    xor edx, edx
:004528F4 8A5107                  mov dl, byte ptr [ecx+07]
:004528F7 8BCA                    mov ecx, edx
:004528F9 6BC924                  imul ecx, 00000024
:004528FC 81C1B83B4B00            add ecx, 004B3BB8
:00452902 E8792EFBFF              call 00405780
:00452907 25FF000000              and eax, 000000FF
:0045290C 83F804                  cmp eax, 00000004
:0045290F 7527                    jne 00452938

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004528ED(C)
|
:00452911 8D45F0                  lea eax, dword ptr [ebp-10]
:00452914 50                      push eax
:00452915 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452918 33D2                    xor edx, edx
:0045291A 8A5107                  mov dl, byte ptr [ecx+07]
:0045291D 8BCA                    mov ecx, edx
:0045291F 6BC924                  imul ecx, 00000024
:00452922 81C1B83B4B00            add ecx, 004B3BB8
:00452928 E853440000              call 00456D80
:0045292D 50                      push eax
:0045292E B9604A4B00              mov ecx, 004B4A60
:00452933 E86841FEFF              call 00436AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045290F(C)
|
:00452938 EB0F                    jmp 00452949

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004528A9(C)
|
:0045293A 8B45EC                  mov eax, dword ptr [ebp-14]
:0045293D 83C008                  add eax, 00000008
:00452940 50                      push eax
:00452941 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00452944 E85741FEFF              call 00436AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452938(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00452949 6A04                    push 00000004
:0045294B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045294E E89D44FEFF              call 00436DF0
:00452953 85C0                    test eax, eax
:00452955 0F857E010000            jne 00452AD9
:0045295B 6A01                    push 00000001
:0045295D 68FF000000              push 000000FF
:00452962 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00452967 6A08                    push 00000008
:00452969 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045296C 51                      push ecx
:0045296D 8B55EC                  mov edx, dword ptr [ebp-14]
:00452970 83C205                  add edx, 00000005
:00452973 52                      push edx
:00452974 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452977 E83BF4FFFF              call 00451DB7
:0045297C 8845FC                  mov byte ptr [ebp-04], al
:0045297F 8B45EC                  mov eax, dword ptr [ebp-14]
:00452982 33C9                    xor ecx, ecx
:00452984 8A4807                  mov cl, byte ptr [eax+07]
:00452987 81F9FF000000            cmp ecx, 000000FF
:0045298D 7450                    je 004529DF
:0045298F 8B55FC                  mov edx, dword ptr [ebp-04]
:00452992 81E2FF000000            and edx, 000000FF
:00452998 8B45EC                  mov eax, dword ptr [ebp-14]
:0045299B 33C9                    xor ecx, ecx
:0045299D 8A4807                  mov cl, byte ptr [eax+07]
:004529A0 3BD1                    cmp edx, ecx
:004529A2 753B                    jne 004529DF
:004529A4 8B55EC                  mov edx, dword ptr [ebp-14]
:004529A7 8A4204                  mov al, byte ptr [edx+04]
:004529AA 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:004529AB 6A14                    push 00000014
:004529AD 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:004529B0 51                      push ecx
:004529B1 E871F2FFFF              call 00451C27
:004529B6 83C40C                  add esp, 0000000C
:004529B9 6A01                    push 00000001
:004529BB 68FF000000              push 000000FF
:004529C0 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004529C5 6A04                    push 00000004
:004529C7 8A55F8                  mov dl, byte ptr [ebp-08]
:004529CA 52                      push edx
:004529CB 8B45EC                  mov eax, dword ptr [ebp-14]
:004529CE 83C005                  add eax, 00000005
:004529D1 50                      push eax
:004529D2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004529D5 E8DDF3FFFF              call 00451DB7
:004529DA E9F5000000              jmp 00452AD4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045298D(C), :004529A2(C)
|
:004529DF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004529E2 8A5104                  mov dl, byte ptr [ecx+04]
:004529E5 52                      push edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004529E6 6A0A                    push 0000000A
:004529E8 8D45F4                  lea eax, dword ptr [ebp-0C]
:004529EB 50                      push eax
:004529EC E836F2FFFF              call 00451C27
:004529F1 83C40C                  add esp, 0000000C
:004529F4 6A01                    push 00000001
:004529F6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004529F9 8A5106                  mov dl, byte ptr [ecx+06]
:004529FC 52                      push edx
:004529FD 8B45EC                  mov eax, dword ptr [ebp-14]
:00452A00 8A4805                  mov cl, byte ptr [eax+05]
:00452A03 51                      push ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00452A04 6A02                    push 00000002
:00452A06 68FF000000              push 000000FF
:00452A0B 8D55F4                  lea edx, dword ptr [ebp-0C]
:00452A0E 52                      push edx
:00452A0F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452A12 E8A0F3FFFF              call 00451DB7
:00452A17 25FF000000              and eax, 000000FF
:00452A1C 83F801                  cmp eax, 00000001
:00452A1F 7479                    je 00452A9A
:00452A21 6A00                    push 00000000
:00452A23 8B45EC                  mov eax, dword ptr [ebp-14]
:00452A26 8A4806                  mov cl, byte ptr [eax+06]
:00452A29 51                      push ecx
:00452A2A 8B55EC                  mov edx, dword ptr [ebp-14]
:00452A2D 8A4205                  mov al, byte ptr [edx+05]
:00452A30 50                      push eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00452A31 6A02                    push 00000002
:00452A33 68FF000000              push 000000FF
:00452A38 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00452A3B 51                      push ecx
:00452A3C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452A3F E873F3FFFF              call 00451DB7
:00452A44 25FF000000              and eax, 000000FF
:00452A49 3DFF000000              cmp eax, 000000FF
:00452A4E 743C                    je 00452A8C
:00452A50 6A01                    push 00000001
:00452A52 8A55F8                  mov dl, byte ptr [ebp-08]
:00452A55 52                      push edx
:00452A56 8B45EC                  mov eax, dword ptr [ebp-14]
:00452A59 83C005                  add eax, 00000005
:00452A5C 50                      push eax
:00452A5D 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00452A60 51                      push ecx
:00452A61 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452A64 E873EEFFFF              call 004518DC
:00452A69 6A01                    push 00000001
:00452A6B 68FF000000              push 000000FF
:00452A70 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00452A75 6A04                    push 00000004
:00452A77 8A55F8                  mov dl, byte ptr [ebp-08]
:00452A7A 52                      push edx
:00452A7B 8B45EC                  mov eax, dword ptr [ebp-14]
:00452A7E 83C005                  add eax, 00000005
:00452A81 50                      push eax
:00452A82 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452A85 E82DF3FFFF              call 00451DB7
:00452A8A EB0C                    jmp 00452A98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452A4E(C)
|
:00452A8C 8A4DF8                  mov cl, byte ptr [ebp-08]
:00452A8F 51                      push ecx
:00452A90 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452A93 E85B410000              call 00456BF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452A8A(U)
|
:00452A98 EB3A                    jmp 00452AD4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452A1F(C)
|
:00452A9A 6A01                    push 00000001
:00452A9C 8A55F8                  mov dl, byte ptr [ebp-08]
:00452A9F 52                      push edx
:00452AA0 8B45EC                  mov eax, dword ptr [ebp-14]
:00452AA3 83C005                  add eax, 00000005
:00452AA6 50                      push eax
:00452AA7 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00452AAA 51                      push ecx
:00452AAB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452AAE E829EEFFFF              call 004518DC
:00452AB3 6A01                    push 00000001
:00452AB5 68FF000000              push 000000FF
:00452ABA 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00452ABF 6A04                    push 00000004
:00452AC1 8A55F8                  mov dl, byte ptr [ebp-08]
:00452AC4 52                      push edx
:00452AC5 8B45EC                  mov eax, dword ptr [ebp-14]
:00452AC8 83C005                  add eax, 00000005
:00452ACB 50                      push eax
:00452ACC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452ACF E8E3F2FFFF              call 00451DB7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004529DA(U), :00452A98(U)
|
:00452AD4 E996000000              jmp 00452B6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452955(C)
|
:00452AD9 6A01                    push 00000001
:00452ADB 8A4DF5                  mov cl, byte ptr [ebp-0B]
:00452ADE 51                      push ecx
:00452ADF 8A55F4                  mov dl, byte ptr [ebp-0C]
:00452AE2 52                      push edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00452AE3 6A02                    push 00000002
:00452AE5 68FF000000              push 000000FF
:00452AEA 8B45EC                  mov eax, dword ptr [ebp-14]
:00452AED 83C005                  add eax, 00000005
:00452AF0 50                      push eax
:00452AF1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452AF4 E8BEF2FFFF              call 00451DB7
:00452AF9 25FF000000              and eax, 000000FF
:00452AFE 83F801                  cmp eax, 00000001
:00452B01 745E                    je 00452B61
:00452B03 6A00                    push 00000000
:00452B05 8A4DF5                  mov cl, byte ptr [ebp-0B]
:00452B08 51                      push ecx
:00452B09 8A55F4                  mov dl, byte ptr [ebp-0C]
:00452B0C 52                      push edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00452B0D 6A02                    push 00000002
:00452B0F 68FF000000              push 000000FF
:00452B14 8B45EC                  mov eax, dword ptr [ebp-14]
:00452B17 83C005                  add eax, 00000005
:00452B1A 50                      push eax
:00452B1B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452B1E E894F2FFFF              call 00451DB7
:00452B23 25FF000000              and eax, 000000FF
:00452B28 85C0                    test eax, eax
:00452B2A 7410                    je 00452B3C
:00452B2C 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00452B2F 51                      push ecx
:00452B30 B9484A4B00              mov ecx, 004B4A48
:00452B35 E8663FFEFF              call 00436AA0
:00452B3A EB23                    jmp 00452B5F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452B2A(C)
|
:00452B3C 8B55EC                  mov edx, dword ptr [ebp-14]
:00452B3F 83C205                  add edx, 00000005
:00452B42 52                      push edx
:00452B43 B9484A4B00              mov ecx, 004B4A48
:00452B48 E8533FFEFF              call 00436AA0
:00452B4D 8B45EC                  mov eax, dword ptr [ebp-14]
:00452B50 83C005                  add eax, 00000005
:00452B53 50                      push eax
:00452B54 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452B57 83C108                  add ecx, 00000008
:00452B5A E8413FFEFF              call 00436AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452B3A(U)
|
:00452B5F EB0E                    jmp 00452B6F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452B01(C)
|
:00452B61 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00452B64 51                      push ecx
:00452B65 B9484A4B00              mov ecx, 004B4A48
:00452B6A E8313FFEFF              call 00436AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452AD4(U), :00452B5F(U)
|
:00452B6F E9A9000000              jmp 00452C1D
:00452B74 6A01                    push 00000001
:00452B76 68FF000000              push 000000FF
:00452B7B 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00452B80 6A08                    push 00000008
:00452B82 8A55F8                  mov dl, byte ptr [ebp-08]
:00452B85 52                      push edx
:00452B86 8B45EC                  mov eax, dword ptr [ebp-14]
:00452B89 83C005                  add eax, 00000005
:00452B8C 50                      push eax
:00452B8D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452B90 E822F2FFFF              call 00451DB7
:00452B95 8845FC                  mov byte ptr [ebp-04], al
:00452B98 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452B9B 81E1FF000000            and ecx, 000000FF
:00452BA1 81F9FF000000            cmp ecx, 000000FF
:00452BA7 7423                    je 00452BCC
:00452BA9 6A01                    push 00000001
:00452BAB 68FF000000              push 000000FF
:00452BB0 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00452BB5 6A04                    push 00000004
:00452BB7 8A55F8                  mov dl, byte ptr [ebp-08]
:00452BBA 52                      push edx
:00452BBB 8B45EC                  mov eax, dword ptr [ebp-14]
:00452BBE 83C005                  add eax, 00000005
:00452BC1 50                      push eax
:00452BC2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452BC5 E8EDF1FFFF              call 00451DB7
:00452BCA EB11                    jmp 00452BDD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452BA7(C)
|
:00452BCC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452BCF 83C105                  add ecx, 00000005
:00452BD2 51                      push ecx
:00452BD3 B9484A4B00              mov ecx, 004B4A48
:00452BD8 E8C33EFEFF              call 00436AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452BCA(U)
|
:00452BDD EB3E                    jmp 00452C1D
:00452BDF 8A55F8                  mov dl, byte ptr [ebp-08]
:00452BE2 52                      push edx
:00452BE3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452BE6 E808400000              call 00456BF3
:00452BEB EB30                    jmp 00452C1D
:00452BED 6A01                    push 00000001
:00452BEF 68FF000000              push 000000FF
:00452BF4 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00452BF9 6A04                    push 00000004
:00452BFB 6A00                    push 00000000
:00452BFD 8B45EC                  mov eax, dword ptr [ebp-14]
:00452C00 83C005                  add eax, 00000005
:00452C03 50                      push eax
:00452C04 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452C07 E8ABF1FFFF              call 00451DB7
:00452C0C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452C0F 83C105                  add ecx, 00000005
:00452C12 51                      push ecx
:00452C13 B9484A4B00              mov ecx, 004B4A48
:00452C18 E8833EFEFF              call 00436AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045288B(C), :00452B6F(U), :00452BDD(U), :00452BEB(U)
|
:00452C1D B9784E4B00              mov ecx, 004B4E78
:00452C22 E811CA0000              call 0045F638

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452872(U)
|
:00452C27 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452C2A E850E3FFFF              call 00450F7F
:00452C2F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452C32 E8E725FEFF              call 0043521E
:00452C37 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452C3A E861410000              call 00456DA0
:00452C3F 85C0                    test eax, eax
:00452C41 7402                    je 00452C45
:00452C43 EB69                    jmp 00452CAE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452C41(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00452C45 6A04                    push 00000004
:00452C47 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452C4A E8A141FEFF              call 00436DF0
:00452C4F 85C0                    test eax, eax
:00452C51 755B                    jne 00452CAE
:00452C53 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452C56 E8252BFBFF              call 00405780
:00452C5B 25FF000000              and eax, 000000FF
:00452C60 83F804                  cmp eax, 00000004
:00452C63 7449                    je 00452CAE
:00452C65 33D2                    xor edx, edx
:00452C67 8A156C4A4B00            mov dl, byte ptr [004B4A6C]
:00452C6D 81FAFF000000            cmp edx, 000000FF
:00452C73 750A                    jne 00452C7F
:00452C75 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452C78 E89FF7FFFF              call 0045241C
:00452C7D EB2F                    jmp 00452CAE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452C73(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00452C7F 6A02                    push 00000002
:00452C81 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452C84 E85726FEFF              call 004352E0
:00452C89 A06C4A4B00              mov al, byte ptr [004B4A6C]
:00452C8E 50                      push eax
:00452C8F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00452C92 E83D80FEFF              call 0043ACD4
:00452C97 33C9                    xor ecx, ecx
:00452C99 8A0D6C4A4B00            mov cl, byte ptr [004B4A6C]
:00452C9F 83F93A                  cmp ecx, 0000003A
:00452CA2 750A                    jne 00452CAE
:00452CA4 C705A44E4B0001000000    mov dword ptr [004B4EA4], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045269B(C), :004526B0(C), :004526C3(C), :00452C43(U), :00452C51(C)
|:00452C63(C), :00452C7D(U), :00452CA2(C)
|
:00452CAE 8BE5                    mov esp, ebp
:00452CB0 5D                      pop ebp
:00452CB1 C3                      ret



:00452CB2 9B284500                DWORD 0045289B
:00452CB6 DF2B4500                DWORD 00452BDF
:00452CBA ED2B4500                DWORD 00452BED
:00452CBE 742B4500                DWORD 00452B74
:00452CC2 9B284500                DWORD 0045289B



* Referenced by a CALL at Addresses:
|:004515ED   , :004516E0   , :0045175B   , :004517A8   , :004517F2   
|:00453D09   , :00453D64   , :00453D96   , :00453EBB   , :00454048   
|:0045414C   , :004541C0   , :00454267   , :00454417   , :00454485   
|:00454557   , :004545C5   , :004546FD   , :004547D5   , :0045487E   
|:004548C7   , :004548FE   , :00454942   , :004549FC   , :00454AA9   
|:00454B4F   , :00454BDD   , :00454C84   , :00454DD7   
|
:00452CC6 55                      push ebp
:00452CC7 8BEC                    mov ebp, esp
:00452CC9 83EC14                  sub esp, 00000014
:00452CCC 56                      push esi
:00452CCD 8A4514                  mov al, byte ptr [ebp+14]
:00452CD0 50                      push eax
:00452CD1 6A00                    push 00000000
:00452CD3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00452CD6 81E1FF000000            and ecx, 000000FF
:00452CDC 51                      push ecx
:00452CDD 8B5510                  mov edx, dword ptr [ebp+10]
:00452CE0 81E2FF000000            and edx, 000000FF
:00452CE6 52                      push edx
:00452CE7 E8B946FEFF              call 004373A5
:00452CEC 83C410                  add esp, 00000010
:00452CEF 85C0                    test eax, eax
:00452CF1 7507                    jne 00452CFA
:00452CF3 33C0                    xor eax, eax
:00452CF5 E915080000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452CF1(C)
|
:00452CFA 8B450C                  mov eax, dword ptr [ebp+0C]
:00452CFD 25FF000000              and eax, 000000FF
:00452D02 6BC024                  imul eax, 00000024
:00452D05 05B83B4B00              add eax, 004B3BB8
:00452D0A 8945F0                  mov dword ptr [ebp-10], eax
:00452D0D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452D10 E8CB3CFEFF              call 004369E0
:00452D15 6BC050                  imul eax, 00000050
:00452D18 05787F4900              add eax, 00497F78
:00452D1D 8945F8                  mov dword ptr [ebp-08], eax
:00452D20 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452D23 E818EFFDFF              call 00431C40
:00452D28 50                      push eax
:00452D29 E82ACBFFFF              call 0044F858
:00452D2E 83C404                  add esp, 00000004
:00452D31 8845FC                  mov byte ptr [ebp-04], al
:00452D34 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452D37 E8B43DFEFF              call 00436AF0
:00452D3C 8845F4                  mov byte ptr [ebp-0C], al
:00452D3F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00452D42 81E1FF000000            and ecx, 000000FF
:00452D48 894DEC                  mov dword ptr [ebp-14], ecx
:00452D4B 837DEC40                cmp dword ptr [ebp-14], 00000040
:00452D4F 0F87B8070000            ja 0045350D
:00452D55 8B45EC                  mov eax, dword ptr [ebp-14]
:00452D58 33D2                    xor edx, edx
:00452D5A 8A90B4354500            mov dl, byte ptr [eax+004535B4]
:00452D60 FF249514354500          jmp dword ptr [4*edx+00453514]
:00452D67 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00452D6A 51                      push ecx
:00452D6B 8A5508                  mov dl, byte ptr [ebp+08]
:00452D6E 52                      push edx
:00452D6F E881080000              call 004535F5
:00452D74 83C408                  add esp, 00000008
:00452D77 E993070000              jmp 0045350F
:00452D7C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452D7F E86C3DFEFF              call 00436AF0
:00452D84 25FF000000              and eax, 000000FF
:00452D89 85C0                    test eax, eax
:00452D8B 7507                    jne 00452D94
:00452D8D 33C0                    xor eax, eax
:00452D8F E97B070000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452D8B(C)
|
:00452D94 8A450C                  mov al, byte ptr [ebp+0C]
:00452D97 50                      push eax
:00452D98 8A4D08                  mov cl, byte ptr [ebp+08]
:00452D9B 51                      push ecx
:00452D9C E854080000              call 004535F5
:00452DA1 83C408                  add esp, 00000008
:00452DA4 E966070000              jmp 0045350F
:00452DA9 8A550C                  mov dl, byte ptr [ebp+0C]
:00452DAC 52                      push edx
:00452DAD 8A4508                  mov al, byte ptr [ebp+08]
:00452DB0 50                      push eax
:00452DB1 E83F080000              call 004535F5
:00452DB6 83C408                  add esp, 00000008
:00452DB9 E951070000              jmp 0045350F
:00452DBE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452DC1 81E1FF000000            and ecx, 000000FF
:00452DC7 83F905                  cmp ecx, 00000005
:00452DCA 7421                    je 00452DED
:00452DCC 8B55FC                  mov edx, dword ptr [ebp-04]
:00452DCF 81E2FF000000            and edx, 000000FF
:00452DD5 83FA01                  cmp edx, 00000001
:00452DD8 7413                    je 00452DED
:00452DDA 8B45FC                  mov eax, dword ptr [ebp-04]
:00452DDD 25FF000000              and eax, 000000FF
:00452DE2 85C0                    test eax, eax
:00452DE4 7407                    je 00452DED
:00452DE6 33C0                    xor eax, eax
:00452DE8 E922070000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452DCA(C), :00452DD8(C), :00452DE4(C)
|
:00452DED 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00452DF0 51                      push ecx
:00452DF1 8A5508                  mov dl, byte ptr [ebp+08]
:00452DF4 52                      push edx
:00452DF5 E8FB070000              call 004535F5
:00452DFA 83C408                  add esp, 00000008
:00452DFD E90D070000              jmp 0045350F
:00452E02 8B45FC                  mov eax, dword ptr [ebp-04]
:00452E05 25FF000000              and eax, 000000FF
:00452E0A 83F80A                  cmp eax, 0000000A
:00452E0D 7423                    je 00452E32
:00452E0F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00452E12 81E1FF000000            and ecx, 000000FF
:00452E18 83F90D                  cmp ecx, 0000000D
:00452E1B 7415                    je 00452E32
:00452E1D 8B55FC                  mov edx, dword ptr [ebp-04]
:00452E20 81E2FF000000            and edx, 000000FF
:00452E26 83FA0E                  cmp edx, 0000000E
:00452E29 7407                    je 00452E32
:00452E2B 33C0                    xor eax, eax
:00452E2D E9DD060000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452E0D(C), :00452E1B(C), :00452E29(C)
|
:00452E32 8A450C                  mov al, byte ptr [ebp+0C]
:00452E35 50                      push eax
:00452E36 8A4D08                  mov cl, byte ptr [ebp+08]
:00452E39 51                      push ecx
:00452E3A E8B6070000              call 004535F5
:00452E3F 83C408                  add esp, 00000008
:00452E42 E9C8060000              jmp 0045350F
:00452E47 8B55FC                  mov edx, dword ptr [ebp-04]
:00452E4A 81E2FF000000            and edx, 000000FF
:00452E50 83FA05                  cmp edx, 00000005
:00452E53 7407                    je 00452E5C
:00452E55 33C0                    xor eax, eax
:00452E57 E9B3060000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452E53(C)
|
:00452E5C 8A450C                  mov al, byte ptr [ebp+0C]
:00452E5F 50                      push eax
:00452E60 8A4D08                  mov cl, byte ptr [ebp+08]
:00452E63 51                      push ecx
:00452E64 E88C070000              call 004535F5
:00452E69 83C408                  add esp, 00000008
:00452E6C E99E060000              jmp 0045350F
:00452E71 8B55FC                  mov edx, dword ptr [ebp-04]
:00452E74 81E2FF000000            and edx, 000000FF
:00452E7A 83FA07                  cmp edx, 00000007
:00452E7D 7407                    je 00452E86
:00452E7F 33C0                    xor eax, eax
:00452E81 E989060000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452E7D(C)
|
:00452E86 8A450C                  mov al, byte ptr [ebp+0C]
:00452E89 50                      push eax
:00452E8A 8A4D08                  mov cl, byte ptr [ebp+08]
:00452E8D 51                      push ecx
:00452E8E E862070000              call 004535F5
:00452E93 83C408                  add esp, 00000008
:00452E96 E974060000              jmp 0045350F
:00452E9B 8B55FC                  mov edx, dword ptr [ebp-04]
:00452E9E 81E2FF000000            and edx, 000000FF
:00452EA4 83FA0A                  cmp edx, 0000000A
:00452EA7 7407                    je 00452EB0
:00452EA9 33C0                    xor eax, eax
:00452EAB E95F060000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452EA7(C)
|
:00452EB0 8A450C                  mov al, byte ptr [ebp+0C]
:00452EB3 50                      push eax
:00452EB4 8A4D08                  mov cl, byte ptr [ebp+08]
:00452EB7 51                      push ecx
:00452EB8 E838070000              call 004535F5
:00452EBD 83C408                  add esp, 00000008
:00452EC0 E94A060000              jmp 0045350F
:00452EC5 8B55FC                  mov edx, dword ptr [ebp-04]
:00452EC8 81E2FF000000            and edx, 000000FF
:00452ECE 83FA07                  cmp edx, 00000007
:00452ED1 7407                    je 00452EDA
:00452ED3 33C0                    xor eax, eax
:00452ED5 E935060000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452ED1(C)
|
:00452EDA 8A450C                  mov al, byte ptr [ebp+0C]
:00452EDD 50                      push eax
:00452EDE 8A4D08                  mov cl, byte ptr [ebp+08]
:00452EE1 51                      push ecx
:00452EE2 E80E070000              call 004535F5
:00452EE7 83C408                  add esp, 00000008
:00452EEA E920060000              jmp 0045350F
:00452EEF 8B55FC                  mov edx, dword ptr [ebp-04]
:00452EF2 81E2FF000000            and edx, 000000FF
:00452EF8 83FA0A                  cmp edx, 0000000A
:00452EFB 7407                    je 00452F04
:00452EFD 33C0                    xor eax, eax
:00452EFF E90B060000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452EFB(C)
|
:00452F04 8A450C                  mov al, byte ptr [ebp+0C]
:00452F07 50                      push eax
:00452F08 8A4D08                  mov cl, byte ptr [ebp+08]
:00452F0B 51                      push ecx
:00452F0C E8E4060000              call 004535F5
:00452F11 83C408                  add esp, 00000008
:00452F14 E9F6050000              jmp 0045350F
:00452F19 8A550C                  mov dl, byte ptr [ebp+0C]
:00452F1C 52                      push edx
:00452F1D 8A4508                  mov al, byte ptr [ebp+08]
:00452F20 50                      push eax
:00452F21 E8CF060000              call 004535F5
:00452F26 83C408                  add esp, 00000008
:00452F29 E9E1050000              jmp 0045350F
:00452F2E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00452F31 81E1FF000000            and ecx, 000000FF
:00452F37 83F903                  cmp ecx, 00000003
:00452F3A 7415                    je 00452F51
:00452F3C 8B55F4                  mov edx, dword ptr [ebp-0C]
:00452F3F 81E2FF000000            and edx, 000000FF
:00452F45 83FA04                  cmp edx, 00000004
:00452F48 7407                    je 00452F51
:00452F4A 33C0                    xor eax, eax
:00452F4C E9BE050000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452F3A(C), :00452F48(C)
|
:00452F51 6A01                    push 00000001
:00452F53 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452F56 E8153BFEFF              call 00436A70
:00452F5B 85C0                    test eax, eax
:00452F5D 7407                    je 00452F66
:00452F5F 33C0                    xor eax, eax
:00452F61 E9A9050000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452F5D(C)
|
:00452F66 8A450C                  mov al, byte ptr [ebp+0C]
:00452F69 50                      push eax
:00452F6A 8A4D08                  mov cl, byte ptr [ebp+08]
:00452F6D 51                      push ecx
:00452F6E E882060000              call 004535F5
:00452F73 83C408                  add esp, 00000008
:00452F76 E994050000              jmp 0045350F
:00452F7B 8B55FC                  mov edx, dword ptr [ebp-04]
:00452F7E 81E2FF000000            and edx, 000000FF
:00452F84 83FA0A                  cmp edx, 0000000A
:00452F87 7407                    je 00452F90
:00452F89 33C0                    xor eax, eax
:00452F8B E97F050000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452F87(C)
|
:00452F90 6A01                    push 00000001
:00452F92 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452F95 E8D63AFEFF              call 00436A70
:00452F9A 85C0                    test eax, eax
:00452F9C 7407                    je 00452FA5
:00452F9E 33C0                    xor eax, eax
:00452FA0 E96A050000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452F9C(C)
|
:00452FA5 8A450C                  mov al, byte ptr [ebp+0C]
:00452FA8 50                      push eax
:00452FA9 8A4D08                  mov cl, byte ptr [ebp+08]
:00452FAC 51                      push ecx
:00452FAD E843060000              call 004535F5
:00452FB2 83C408                  add esp, 00000008
:00452FB5 E955050000              jmp 0045350F
:00452FBA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00452FBD E84E3AFEFF              call 00436A10
:00452FC2 25FF000000              and eax, 000000FF
:00452FC7 83F806                  cmp eax, 00000006
:00452FCA 7507                    jne 00452FD3
:00452FCC 33C0                    xor eax, eax
:00452FCE E93C050000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452FCA(C)
|
:00452FD3 8A550C                  mov dl, byte ptr [ebp+0C]
:00452FD6 52                      push edx
:00452FD7 8A4508                  mov al, byte ptr [ebp+08]
:00452FDA 50                      push eax
:00452FDB E815060000              call 004535F5
:00452FE0 83C408                  add esp, 00000008
:00452FE3 E927050000              jmp 0045350F
:00452FE8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00452FEB 81E1FF000000            and ecx, 000000FF
:00452FF1 83F909                  cmp ecx, 00000009
:00452FF4 7507                    jne 00452FFD
:00452FF6 33C0                    xor eax, eax
:00452FF8 E912050000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452FF4(C)
|
:00452FFD 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453000 E82B3AFEFF              call 00436A30
:00453005 25FF000000              and eax, 000000FF
:0045300A 83F806                  cmp eax, 00000006
:0045300D 7507                    jne 00453016
:0045300F 33C0                    xor eax, eax
:00453011 E9F9040000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045300D(C)
|
:00453016 8A550C                  mov dl, byte ptr [ebp+0C]
:00453019 52                      push edx
:0045301A 8A4508                  mov al, byte ptr [ebp+08]
:0045301D 50                      push eax
:0045301E E8D2050000              call 004535F5
:00453023 83C408                  add esp, 00000008
:00453026 E9E4040000              jmp 0045350F
:0045302B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045302E 81E1FF000000            and ecx, 000000FF
:00453034 83F909                  cmp ecx, 00000009
:00453037 7507                    jne 00453040
:00453039 33C0                    xor eax, eax
:0045303B E9CF040000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453037(C)
|
:00453040 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453043 E8C839FEFF              call 00436A10
:00453048 25FF000000              and eax, 000000FF
:0045304D 83F806                  cmp eax, 00000006
:00453050 7507                    jne 00453059
:00453052 33C0                    xor eax, eax
:00453054 E9B6040000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453050(C)
|
:00453059 8A550C                  mov dl, byte ptr [ebp+0C]
:0045305C 52                      push edx
:0045305D 8A4508                  mov al, byte ptr [ebp+08]
:00453060 50                      push eax
:00453061 E88F050000              call 004535F5
:00453066 83C408                  add esp, 00000008
:00453069 E9A1040000              jmp 0045350F
:0045306E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00453071 81E1FF000000            and ecx, 000000FF
:00453077 83F909                  cmp ecx, 00000009
:0045307A 7507                    jne 00453083
:0045307C 33C0                    xor eax, eax
:0045307E E98C040000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045307A(C)
|
:00453083 6A10                    push 00000010
:00453085 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453088 E8E339FEFF              call 00436A70
:0045308D 85C0                    test eax, eax
:0045308F 7407                    je 00453098
:00453091 33C0                    xor eax, eax
:00453093 E977040000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045308F(C)
|
:00453098 8A550C                  mov dl, byte ptr [ebp+0C]
:0045309B 52                      push edx
:0045309C 8A4508                  mov al, byte ptr [ebp+08]
:0045309F 50                      push eax
:004530A0 E850050000              call 004535F5
:004530A5 83C408                  add esp, 00000008
:004530A8 E962040000              jmp 0045350F

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004530AD 6A02                    push 00000002
:004530AF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004530B2 E8B939FEFF              call 00436A70
:004530B7 85C0                    test eax, eax
:004530B9 7407                    je 004530C2
:004530BB 33C0                    xor eax, eax
:004530BD E94D040000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004530B9(C)
|
:004530C2 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004530C5 51                      push ecx
:004530C6 8A5508                  mov dl, byte ptr [ebp+08]
:004530C9 52                      push edx
:004530CA E826050000              call 004535F5
:004530CF 83C408                  add esp, 00000008
:004530D2 E938040000              jmp 0045350F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004530D7 6A04                    push 00000004
:004530D9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004530DC E88F39FEFF              call 00436A70
:004530E1 85C0                    test eax, eax
:004530E3 7407                    je 004530EC
:004530E5 33C0                    xor eax, eax
:004530E7 E923040000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004530E3(C)
|
:004530EC 8A450C                  mov al, byte ptr [ebp+0C]
:004530EF 50                      push eax
:004530F0 8A4D08                  mov cl, byte ptr [ebp+08]
:004530F3 51                      push ecx
:004530F4 E8FC040000              call 004535F5
:004530F9 83C408                  add esp, 00000008
:004530FC E90E040000              jmp 0045350F
:00453101 6A01                    push 00000001
:00453103 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453106 E86539FEFF              call 00436A70
:0045310B 85C0                    test eax, eax
:0045310D 7407                    je 00453116
:0045310F 33C0                    xor eax, eax
:00453111 E9F9030000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045310D(C)
|
:00453116 8A550C                  mov dl, byte ptr [ebp+0C]
:00453119 52                      push edx
:0045311A 8A4508                  mov al, byte ptr [ebp+08]
:0045311D 50                      push eax
:0045311E E8D2040000              call 004535F5
:00453123 83C408                  add esp, 00000008
:00453126 E9E4030000              jmp 0045350F
:0045312B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045312E E8E8ECFAFF              call 00401E1B
:00453133 83F80A                  cmp eax, 0000000A
:00453136 7307                    jnb 0045313F
:00453138 33C0                    xor eax, eax
:0045313A E9D0030000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453136(C)
|
:0045313F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453142 E8B901FBFF              call 00403300
:00453147 8BF0                    mov esi, eax
:00453149 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045314C E8CAECFAFF              call 00401E1B
:00453151 6BC005                  imul eax, 00000005
:00453154 33D2                    xor edx, edx
:00453156 B91E000000              mov ecx, 0000001E
:0045315B F7F1                    div ecx
:0045315D 3BF0                    cmp esi, eax
:0045315F 7707                    ja 00453168
:00453161 33C0                    xor eax, eax
:00453163 E9A7030000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045315F(C)
|
:00453168 8A550C                  mov dl, byte ptr [ebp+0C]
:0045316B 52                      push edx
:0045316C 8A4508                  mov al, byte ptr [ebp+08]
:0045316F 50                      push eax
:00453170 E880040000              call 004535F5
:00453175 83C408                  add esp, 00000008
:00453178 E992030000              jmp 0045350F
:0045317D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453180 E85B01FBFF              call 004032E0
:00453185 8BF0                    mov esi, eax
:00453187 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045318A E85BECFAFF              call 00401DEA
:0045318F 3BF0                    cmp esi, eax
:00453191 7507                    jne 0045319A
:00453193 33C0                    xor eax, eax
:00453195 E975030000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453191(C)
|
:0045319A 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0045319D 51                      push ecx
:0045319E 8A5508                  mov dl, byte ptr [ebp+08]
:004531A1 52                      push edx
:004531A2 E84E040000              call 004535F5
:004531A7 83C408                  add esp, 00000008
:004531AA F7D8                    neg eax
:004531AC 1BC0                    sbb eax, eax
:004531AE 40                      inc eax
:004531AF E95B030000              jmp 0045350F
:004531B4 8B4508                  mov eax, dword ptr [ebp+08]
:004531B7 25FF000000              and eax, 000000FF
:004531BC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004531BF 81E1FF000000            and ecx, 000000FF
:004531C5 3BC1                    cmp eax, ecx
:004531C7 7407                    je 004531D0
:004531C9 33C0                    xor eax, eax
:004531CB E93F030000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004531C7(C)
|
:004531D0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004531D3 E80801FBFF              call 004032E0
:004531D8 8BF0                    mov esi, eax
:004531DA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004531DD E808ECFAFF              call 00401DEA
:004531E2 3BF0                    cmp esi, eax
:004531E4 7507                    jne 004531ED
:004531E6 33C0                    xor eax, eax
:004531E8 E922030000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004531E4(C)
|
:004531ED 8A550C                  mov dl, byte ptr [ebp+0C]
:004531F0 52                      push edx
:004531F1 8A4508                  mov al, byte ptr [ebp+08]
:004531F4 50                      push eax
:004531F5 E8FB030000              call 004535F5
:004531FA 83C408                  add esp, 00000008
:004531FD F7D8                    neg eax
:004531FF 1BC0                    sbb eax, eax
:00453201 40                      inc eax
:00453202 E908030000              jmp 0045350F
:00453207 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0045320A 51                      push ecx
:0045320B 8A5508                  mov dl, byte ptr [ebp+08]
:0045320E 52                      push edx
:0045320F E8E1030000              call 004535F5
:00453214 83C408                  add esp, 00000008
:00453217 F7D8                    neg eax
:00453219 1BC0                    sbb eax, eax
:0045321B 40                      inc eax
:0045321C E9EE020000              jmp 0045350F
:00453221 6A10                    push 00000010
:00453223 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453226 E84538FEFF              call 00436A70
:0045322B 85C0                    test eax, eax
:0045322D 7507                    jne 00453236
:0045322F 33C0                    xor eax, eax
:00453231 E9D9020000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045322D(C)
|
:00453236 8A450C                  mov al, byte ptr [ebp+0C]
:00453239 50                      push eax
:0045323A 8A4D08                  mov cl, byte ptr [ebp+08]
:0045323D 51                      push ecx
:0045323E E8B2030000              call 004535F5
:00453243 83C408                  add esp, 00000008
:00453246 F7D8                    neg eax
:00453248 1BC0                    sbb eax, eax
:0045324A 40                      inc eax
:0045324B E9BF020000              jmp 0045350F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00453250 6A04                    push 00000004
:00453252 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453255 E81638FEFF              call 00436A70
:0045325A 85C0                    test eax, eax
:0045325C 7507                    jne 00453265
:0045325E 33C0                    xor eax, eax
:00453260 E9AA020000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045325C(C)
|
:00453265 8A550C                  mov dl, byte ptr [ebp+0C]
:00453268 52                      push edx
:00453269 8A4508                  mov al, byte ptr [ebp+08]
:0045326C 50                      push eax
:0045326D E883030000              call 004535F5
:00453272 83C408                  add esp, 00000008
:00453275 F7D8                    neg eax
:00453277 1BC0                    sbb eax, eax
:00453279 40                      inc eax
:0045327A E990020000              jmp 0045350F
:0045327F 6A01                    push 00000001
:00453281 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453284 E8E737FEFF              call 00436A70
:00453289 85C0                    test eax, eax
:0045328B 7507                    jne 00453294
:0045328D 33C0                    xor eax, eax
:0045328F E97B020000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045328B(C)
|
:00453294 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00453297 51                      push ecx
:00453298 8A5508                  mov dl, byte ptr [ebp+08]
:0045329B 52                      push edx
:0045329C E854030000              call 004535F5
:004532A1 83C408                  add esp, 00000008
:004532A4 F7D8                    neg eax
:004532A6 1BC0                    sbb eax, eax
:004532A8 40                      inc eax
:004532A9 E961020000              jmp 0045350F

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004532AE 6A02                    push 00000002
:004532B0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004532B3 E8B837FEFF              call 00436A70
:004532B8 85C0                    test eax, eax
:004532BA 7507                    jne 004532C3
:004532BC 33C0                    xor eax, eax
:004532BE E94C020000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004532BA(C)
|
:004532C3 8A450C                  mov al, byte ptr [ebp+0C]
:004532C6 50                      push eax
:004532C7 8A4D08                  mov cl, byte ptr [ebp+08]
:004532CA 51                      push ecx
:004532CB E825030000              call 004535F5
:004532D0 83C408                  add esp, 00000008
:004532D3 F7D8                    neg eax
:004532D5 1BC0                    sbb eax, eax
:004532D7 40                      inc eax
:004532D8 E932020000              jmp 0045350F
:004532DD 6A20                    push 00000020
:004532DF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004532E2 E88937FEFF              call 00436A70
:004532E7 85C0                    test eax, eax
:004532E9 7507                    jne 004532F2
:004532EB 33C0                    xor eax, eax
:004532ED E91D020000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004532E9(C)
|
:004532F2 8A550C                  mov dl, byte ptr [ebp+0C]
:004532F5 52                      push edx
:004532F6 8A4508                  mov al, byte ptr [ebp+08]
:004532F9 50                      push eax
:004532FA E8F6020000              call 004535F5
:004532FF 83C408                  add esp, 00000008
:00453302 F7D8                    neg eax
:00453304 1BC0                    sbb eax, eax
:00453306 40                      inc eax
:00453307 E903020000              jmp 0045350F
:0045330C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045330F E8FC36FEFF              call 00436A10
:00453314 25FF000000              and eax, 000000FF
:00453319 85C0                    test eax, eax
:0045331B 7507                    jne 00453324
:0045331D 33C0                    xor eax, eax
:0045331F E9EB010000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045331B(C)
|
:00453324 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00453327 51                      push ecx
:00453328 8A5508                  mov dl, byte ptr [ebp+08]
:0045332B 52                      push edx
:0045332C E8C4020000              call 004535F5
:00453331 83C408                  add esp, 00000008
:00453334 F7D8                    neg eax
:00453336 1BC0                    sbb eax, eax
:00453338 40                      inc eax
:00453339 E9D1010000              jmp 0045350F
:0045333E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453341 E8EA36FEFF              call 00436A30
:00453346 25FF000000              and eax, 000000FF
:0045334B 85C0                    test eax, eax
:0045334D 7507                    jne 00453356
:0045334F 33C0                    xor eax, eax
:00453351 E9B9010000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045334D(C)
|
:00453356 8A450C                  mov al, byte ptr [ebp+0C]
:00453359 50                      push eax
:0045335A 8A4D08                  mov cl, byte ptr [ebp+08]
:0045335D 51                      push ecx
:0045335E E892020000              call 004535F5
:00453363 83C408                  add esp, 00000008
:00453366 F7D8                    neg eax
:00453368 1BC0                    sbb eax, eax
:0045336A 40                      inc eax
:0045336B E99F010000              jmp 0045350F
:00453370 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453373 E8D836FEFF              call 00436A50
:00453378 25FF000000              and eax, 000000FF
:0045337D 85C0                    test eax, eax
:0045337F 7507                    jne 00453388
:00453381 33C0                    xor eax, eax
:00453383 E987010000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045337F(C)
|
:00453388 8A550C                  mov dl, byte ptr [ebp+0C]
:0045338B 52                      push edx
:0045338C 8A4508                  mov al, byte ptr [ebp+08]
:0045338F 50                      push eax
:00453390 E860020000              call 004535F5
:00453395 83C408                  add esp, 00000008
:00453398 F7D8                    neg eax
:0045339A 1BC0                    sbb eax, eax
:0045339C 40                      inc eax
:0045339D E96D010000              jmp 0045350F
:004533A2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004533A5 81E1FF000000            and ecx, 000000FF
:004533AB 8B550C                  mov edx, dword ptr [ebp+0C]
:004533AE 81E2FF000000            and edx, 000000FF
:004533B4 3BCA                    cmp ecx, edx
:004533B6 7507                    jne 004533BF
:004533B8 33C0                    xor eax, eax
:004533BA E950010000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004533B6(C)
|
:004533BF 8B45F4                  mov eax, dword ptr [ebp-0C]
:004533C2 25FF000000              and eax, 000000FF
:004533C7 83F80E                  cmp eax, 0000000E
:004533CA 7507                    jne 004533D3
:004533CC 33C0                    xor eax, eax
:004533CE E93C010000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004533CA(C)
|
:004533D3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004533D6 E825FFFAFF              call 00403300
:004533DB 8BF0                    mov esi, eax
:004533DD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004533E0 E836EAFAFF              call 00401E1B
:004533E5 3BF0                    cmp esi, eax
:004533E7 7507                    jne 004533F0
:004533E9 33C0                    xor eax, eax
:004533EB E91F010000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004533E7(C)
|
:004533F0 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004533F3 51                      push ecx
:004533F4 8A5508                  mov dl, byte ptr [ebp+08]
:004533F7 52                      push edx
:004533F8 E8F8010000              call 004535F5
:004533FD 83C408                  add esp, 00000008
:00453400 F7D8                    neg eax
:00453402 1BC0                    sbb eax, eax
:00453404 40                      inc eax
:00453405 E905010000              jmp 0045350F
:0045340A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045340D 81E1FF000000            and ecx, 000000FF
:00453413 6BC924                  imul ecx, 00000024
:00453416 81C1B83B4B00            add ecx, 004B3BB8
:0045341C E8BFFEFAFF              call 004032E0
:00453421 6BC00C                  imul eax, 0000000C
:00453424 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00453426 B90A000000              mov ecx, 0000000A
:0045342B F7F1                    div ecx
:0045342D 8BF0                    mov esi, eax
:0045342F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00453432 E8A9FEFAFF              call 004032E0
:00453437 3BF0                    cmp esi, eax
:00453439 7607                    jbe 00453442
:0045343B 33C0                    xor eax, eax
:0045343D E9CD000000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453439(C)
|
:00453442 8A550C                  mov dl, byte ptr [ebp+0C]
:00453445 52                      push edx
:00453446 8A4508                  mov al, byte ptr [ebp+08]
:00453449 50                      push eax
:0045344A E8A6010000              call 004535F5
:0045344F 83C408                  add esp, 00000008
:00453452 E9B8000000              jmp 0045350F
:00453457 6A40                    push 00000040
:00453459 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045345C E88F39FEFF              call 00436DF0
:00453461 85C0                    test eax, eax
:00453463 7411                    je 00453476
:00453465 6880000000              push 00000080
:0045346A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045346D E87E39FEFF              call 00436DF0
:00453472 85C0                    test eax, eax
:00453474 7507                    jne 0045347D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453463(C)
|
:00453476 33C0                    xor eax, eax
:00453478 E992000000              jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453474(C)
|
:0045347D 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00453480 51                      push ecx
:00453481 8A5508                  mov dl, byte ptr [ebp+08]
:00453484 52                      push edx
:00453485 E86B010000              call 004535F5
:0045348A 83C408                  add esp, 00000008
:0045348D F7D8                    neg eax
:0045348F 1BC0                    sbb eax, eax
:00453491 40                      inc eax
:00453492 EB7B                    jmp 0045350F
:00453494 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453497 81E1FF000000            and ecx, 000000FF
:0045349D 6BC924                  imul ecx, 00000024
:004534A0 81C1B83B4B00            add ecx, 004B3BB8
:004534A6 E86594FBFF              call 0040C910
:004534AB 85C0                    test eax, eax
:004534AD 7528                    jne 004534D7
:004534AF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004534B2 81E1FF000000            and ecx, 000000FF
:004534B8 6BC924                  imul ecx, 00000024
:004534BB 81C1B83B4B00            add ecx, 004B3BB8
:004534C1 E81A35FEFF              call 004369E0
:004534C6 50                      push eax
:004534C7 E8C4A9FBFF              call 0040DE90
:004534CC 83C404                  add esp, 00000004
:004534CF 85C0                    test eax, eax
:004534D1 7504                    jne 004534D7
:004534D3 33C0                    xor eax, eax
:004534D5 EB38                    jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004534AD(C), :004534D1(C)
|
:004534D7 8A450C                  mov al, byte ptr [ebp+0C]
:004534DA 50                      push eax
:004534DB 8A4D08                  mov cl, byte ptr [ebp+08]
:004534DE 51                      push ecx
:004534DF E811010000              call 004535F5
:004534E4 83C408                  add esp, 00000008
:004534E7 EB26                    jmp 0045350F
:004534E9 33C0                    xor eax, eax
:004534EB EB22                    jmp 0045350F
:004534ED 33C0                    xor eax, eax
:004534EF EB1E                    jmp 0045350F
:004534F1 8B5508                  mov edx, dword ptr [ebp+08]
:004534F4 81E2FF000000            and edx, 000000FF
:004534FA 8B450C                  mov eax, dword ptr [ebp+0C]
:004534FD 25FF000000              and eax, 000000FF
:00453502 33C9                    xor ecx, ecx
:00453504 3BD0                    cmp edx, eax
:00453506 0F94C1                  sete cl
:00453509 8BC1                    mov eax, ecx
:0045350B EB02                    jmp 0045350F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00452D4F(C)
|
:0045350D 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00452CF5(U), :00452D77(U), :00452D8F(U), :00452DA4(U), :00452DB9(U)
|:00452DE8(U), :00452DFD(U), :00452E2D(U), :00452E42(U), :00452E57(U)
|:00452E6C(U), :00452E81(U), :00452E96(U), :00452EAB(U), :00452EC0(U)
|:00452ED5(U), :00452EEA(U), :00452EFF(U), :00452F14(U), :00452F29(U)
|:00452F4C(U), :00452F61(U), :00452F76(U), :00452F8B(U), :00452FA0(U)
|:00452FB5(U), :00452FCE(U), :00452FE3(U), :00452FF8(U), :00453011(U)
|:00453026(U), :0045303B(U), :00453054(U), :00453069(U), :0045307E(U)
|:00453093(U), :004530A8(U), :004530BD(U), :004530D2(U), :004530E7(U)
|:004530FC(U), :00453111(U), :00453126(U), :0045313A(U), :00453163(U)
|:00453178(U), :00453195(U), :004531AF(U), :004531CB(U), :004531E8(U)
|:00453202(U), :0045321C(U), :00453231(U), :0045324B(U), :00453260(U)
|:0045327A(U), :0045328F(U), :004532A9(U), :004532BE(U), :004532D8(U)
|:004532ED(U), :00453307(U), :0045331F(U), :00453339(U), :00453351(U)
|:0045336B(U), :00453383(U), :0045339D(U), :004533BA(U), :004533CE(U)
|:004533EB(U), :00453405(U), :0045343D(U), :00453452(U), :00453478(U)
|:00453492(U), :004534D5(U), :004534E7(U), :004534EB(U), :004534EF(U)
|:0045350B(U)
|
:0045350F 5E                      pop esi
:00453510 8BE5                    mov esp, ebp
:00453512 5D                      pop ebp
:00453513 C3                      ret



:00453514 672D4500                DWORD 00452D67
:00453518 7C2D4500                DWORD 00452D7C
:0045351C A92D4500                DWORD 00452DA9
:00453520 BE2D4500                DWORD 00452DBE
:00453524 022E4500                DWORD 00452E02
:00453528 472E4500                DWORD 00452E47
:0045352C 712E4500                DWORD 00452E71
:00453530 9B2E4500                DWORD 00452E9B
:00453534 C52E4500                DWORD 00452EC5
:00453538 EF2E4500                DWORD 00452EEF
:0045353C 192F4500                DWORD 00452F19
:00453540 2E2F4500                DWORD 00452F2E
:00453544 7B2F4500                DWORD 00452F7B
:00453548 BA2F4500                DWORD 00452FBA
:0045354C E82F4500                DWORD 00452FE8
:00453550 2B304500                DWORD 0045302B
:00453554 6E304500                DWORD 0045306E
:00453558 AD304500                DWORD 004530AD
:0045355C D7304500                DWORD 004530D7
:00453560 01314500                DWORD 00453101
:00453564 2B314500                DWORD 0045312B
:00453568 7D314500                DWORD 0045317D
:0045356C B4314500                DWORD 004531B4
:00453570 07324500                DWORD 00453207
:00453574 21324500                DWORD 00453221
:00453578 50324500                DWORD 00453250
:0045357C 7F324500                DWORD 0045327F
:00453580 AE324500                DWORD 004532AE
:00453584 DD324500                DWORD 004532DD
:00453588 0C334500                DWORD 0045330C
:0045358C 3E334500                DWORD 0045333E
:00453590 70334500                DWORD 00453370
:00453594 A2334500                DWORD 004533A2
:00453598 0A344500                DWORD 0045340A
:0045359C 57344500                DWORD 00453457
:004535A0 E9344500                DWORD 004534E9
:004535A4 94344500                DWORD 00453494
:004535A8 ED344500                DWORD 004534ED
:004535AC F1344500                DWORD 004534F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045357C(C)
|
:004535B0 0D354500                DWORD 0045350D
:004535B4 0000000000              BYTE  5 DUP(0)


:004535B9 0102                    add dword ptr [edx], eax
:004535BB 0202                    add al, byte ptr [edx]
:004535BD 0202                    add al, byte ptr [edx]
:004535BF 0202                    add al, byte ptr [edx]
:004535C1 0202                    add al, byte ptr [edx]
:004535C3 0202                    add al, byte ptr [edx]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453590(C)
|
:004535C5 0203                    add al, byte ptr [ebx]
:004535C7 0405                    add al, 05
:004535C9 06                      push es
:004535CA 07                      pop es
:004535CB 0809                    or byte ptr [ecx], cl
:004535CD 0A0A                    or cl, byte ptr [edx]
:004535CF 0A0A                    or cl, byte ptr [edx]
:004535D1 0B0C0D0D0E0F10          or ecx, dword ptr [ecx+100F0E0D]
:004535D8 1112                    adc dword ptr [edx], edx
:004535DA 13141515151516          adc edx, dword ptr [edx+16151515]
:004535E1 16                      push ss
:004535E2 17                      pop ss
:004535E3 17                      pop ss
:004535E4 1819                    sbb byte ptr [ecx], bl
:004535E6 1A1B                    sbb bl, byte ptr [ebx]
:004535E8 1C1D                    sbb al, 1D
:004535EA 1E                      push ds
:004535EB 1F                      pop ds
:004535EC 2021                    and byte ptr [ecx], ah
:004535EE 2223                    and ah, byte ptr [ebx]
:004535F0 2425                    and al, 25
:004535F2 26                      BYTE 026h


:004535F3 26                      BYTE 026h


:004535F4 26                      BYTE 026h



* Referenced by a CALL at Addresses:
|:00452D6F   , :00452D9C   , :00452DB1   , :00452DF5   , :00452E3A   
|:00452E64   , :00452E8E   , :00452EB8   , :00452EE2   , :00452F0C   
|:00452F21   , :00452F6E   , :00452FAD   , :00452FDB   , :0045301E   
|:00453061   , :004530A0   , :004530CA   , :004530F4   , :0045311E   
|:00453170   , :004531A2   , :004531F5   , :0045320F   , :0045323E   
|:0045326D   , :0045329C   , :004532CB   , :004532FA   , :0045332C   
|:0045335E   , :00453390   , :004533F8   , :0045344A   , :00453485   
|:004534DF   
|
:004535F5 55                      push ebp
:004535F6 8BEC                    mov ebp, esp
:004535F8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004535FB 81E1FF000000            and ecx, 000000FF
:00453601 6BC924                  imul ecx, 00000024
:00453604 81C1B83B4B00            add ecx, 004B3BB8
:0045360A E80193FBFF              call 0040C910
:0045360F 85C0                    test eax, eax
:00453611 741E                    je 00453631
:00453613 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00453616 81E1FF000000            and ecx, 000000FF
:0045361C 6BC924                  imul ecx, 00000024
:0045361F 81C1B83B4B00            add ecx, 004B3BB8
:00453625 E8E692FBFF              call 0040C910
:0045362A F7D8                    neg eax
:0045362C 1BC0                    sbb eax, eax
:0045362E 40                      inc eax
:0045362F EB17                    jmp 00453648

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453611(C)
|
:00453631 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00453634 81E1FF000000            and ecx, 000000FF
:0045363A 6BC924                  imul ecx, 00000024
:0045363D 81C1B83B4B00            add ecx, 004B3BB8
:00453643 E8C892FBFF              call 0040C910

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045362F(U)
|
:00453648 5D                      pop ebp
:00453649 C3                      ret



* Referenced by a CALL at Address:
|:00453768   
|
:0045364A 55                      push ebp
:0045364B 8BEC                    mov ebp, esp
:0045364D 8B4508                  mov eax, dword ptr [ebp+08]
:00453650 25FF000000              and eax, 000000FF
:00453655 83F827                  cmp eax, 00000027
:00453658 7F04                    jg 0045365E
:0045365A 32C0                    xor al, al
:0045365C EB7E                    jmp 004536DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453658(C)
|
:0045365E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453661 81E1FF000000            and ecx, 000000FF
:00453667 83F938                  cmp ecx, 00000038
:0045366A 7F04                    jg 00453670
:0045366C B001                    mov al, 01
:0045366E EB6C                    jmp 004536DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045366A(C)
|
:00453670 8B5508                  mov edx, dword ptr [ebp+08]
:00453673 81E2FF000000            and edx, 000000FF
:00453679 83FA39                  cmp edx, 00000039
:0045367C 7504                    jne 00453682
:0045367E 32C0                    xor al, al
:00453680 EB5A                    jmp 004536DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045367C(C)
|
:00453682 8B4508                  mov eax, dword ptr [ebp+08]
:00453685 25FF000000              and eax, 000000FF
:0045368A 83F83C                  cmp eax, 0000003C
:0045368D 7504                    jne 00453693
:0045368F 32C0                    xor al, al
:00453691 EB49                    jmp 004536DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045368D(C)
|
:00453693 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453696 81E1FF000000            and ecx, 000000FF
:0045369C 83F93A                  cmp ecx, 0000003A
:0045369F 7504                    jne 004536A5
:004536A1 B001                    mov al, 01
:004536A3 EB37                    jmp 004536DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045369F(C)
|
:004536A5 8B5508                  mov edx, dword ptr [ebp+08]
:004536A8 81E2FF000000            and edx, 000000FF
:004536AE 83FA3E                  cmp edx, 0000003E
:004536B1 7504                    jne 004536B7
:004536B3 B001                    mov al, 01
:004536B5 EB25                    jmp 004536DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004536B1(C)
|
:004536B7 8B4508                  mov eax, dword ptr [ebp+08]
:004536BA 25FF000000              and eax, 000000FF
:004536BF 83F83F                  cmp eax, 0000003F
:004536C2 7504                    jne 004536C8
:004536C4 B001                    mov al, 01
:004536C6 EB14                    jmp 004536DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004536C2(C)
|
:004536C8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004536CB 81E1FF000000            and ecx, 000000FF
:004536D1 83F940                  cmp ecx, 00000040
:004536D4 7504                    jne 004536DA
:004536D6 B001                    mov al, 01
:004536D8 EB02                    jmp 004536DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004536D4(C)
|
:004536DA 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045365C(U), :0045366E(U), :00453680(U), :00453691(U), :004536A3(U)
|:004536B5(U), :004536C6(U), :004536D8(U)
|
:004536DC 5D                      pop ebp
:004536DD C3                      ret



* Referenced by a CALL at Address:
|:00455804   
|
:004536DE 55                      push ebp
:004536DF 8BEC                    mov ebp, esp
:004536E1 83EC48                  sub esp, 00000048
:004536E4 894DBC                  mov dword ptr [ebp-44], ecx
:004536E7 C645D800                mov [ebp-28], 00
:004536EB C645DCFF                mov [ebp-24], FF
:004536EF C645E400                mov [ebp-1C], 00
:004536F3 C605544A4B00FF          mov byte ptr [004B4A54], FF
:004536FA C605684A4B00FF          mov byte ptr [004B4A68], FF
:00453701 C745E000000000          mov [ebp-20], 00000000
:00453708 EB09                    jmp 00453713

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453721(U)
|
:0045370A 8B45E0                  mov eax, dword ptr [ebp-20]
:0045370D 83C001                  add eax, 00000001
:00453710 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453708(U)
|
:00453713 837DE011                cmp dword ptr [ebp-20], 00000011
:00453717 730A                    jnb 00453723
:00453719 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045371C C6440DECFF              mov [ebp+ecx-14], FF
:00453721 EBE7                    jmp 0045370A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453717(C)
|
:00453723 C745E8C4DD4A00          mov [ebp-18], 004ADDC4
:0045372A EB09                    jmp 00453735

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453782(U), :004539F3(U)
|
:0045372C 8B55E8                  mov edx, dword ptr [ebp-18]
:0045372F 83C201                  add edx, 00000001
:00453732 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045372A(U)
|
:00453735 8B45E8                  mov eax, dword ptr [ebp-18]
:00453738 33C9                    xor ecx, ecx
:0045373A 8A08                    mov cl, byte ptr [eax]
:0045373C 81F9FF000000            cmp ecx, 000000FF
:00453742 0F84B0020000            je 004539F8
:00453748 8B55E8                  mov edx, dword ptr [ebp-18]
:0045374B 33C0                    xor eax, eax
:0045374D 8A02                    mov al, byte ptr [edx]
:0045374F 8BC8                    mov ecx, eax
:00453751 6BC931                  imul ecx, 00000031
:00453754 81C1001D4B00            add ecx, 004B1D00
:0045375A E80120FBFF              call 00405760
:0045375F 8845DC                  mov byte ptr [ebp-24], al
:00453762 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00453765 8A11                    mov dl, byte ptr [ecx]
:00453767 52                      push edx
:00453768 E8DDFEFFFF              call 0045364A
:0045376D 83C404                  add esp, 00000004
:00453770 8845E4                  mov byte ptr [ebp-1C], al
:00453773 8B45E4                  mov eax, dword ptr [ebp-1C]
:00453776 25FF000000              and eax, 000000FF
:0045377B 3DFF000000              cmp eax, 000000FF
:00453780 7502                    jne 00453784
:00453782 EBA8                    jmp 0045372C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453780(C)
|
:00453784 C745D400000000          mov [ebp-2C], 00000000
:0045378B 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045378E 81E1FF000000            and ecx, 000000FF
:00453794 81F9FF000000            cmp ecx, 000000FF
:0045379A 0F852D010000            jne 004538CD
:004537A0 8B55E8                  mov edx, dword ptr [ebp-18]
:004537A3 33C0                    xor eax, eax
:004537A5 8A02                    mov al, byte ptr [edx]
:004537A7 8BC8                    mov ecx, eax
:004537A9 6BC931                  imul ecx, 00000031
:004537AC 81C1001D4B00            add ecx, 004B1D00
:004537B2 E8C91FFBFF              call 00405780
:004537B7 8845D0                  mov byte ptr [ebp-30], al
:004537BA 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004537BD 8A11                    mov dl, byte ptr [ecx]
:004537BF 52                      push edx
:004537C0 E83C020000              call 00453A01
:004537C5 83C404                  add esp, 00000004
:004537C8 8845CC                  mov byte ptr [ebp-34], al
:004537CB 68FF000000              push 000000FF
:004537D0 68FF000000              push 000000FF
:004537D5 8D45EC                  lea eax, dword ptr [ebp-14]
:004537D8 50                      push eax
:004537D9 8A4DD0                  mov cl, byte ptr [ebp-30]
:004537DC 51                      push ecx
:004537DD 8A55CC                  mov dl, byte ptr [ebp-34]
:004537E0 52                      push edx
:004537E1 8B4508                  mov eax, dword ptr [ebp+08]
:004537E4 668B08                  mov cx, word ptr [eax]
:004537E7 51                      push ecx
:004537E8 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004537EB E82C220000              call 00455A1C
:004537F0 8945C8                  mov dword ptr [ebp-38], eax
:004537F3 EB09                    jmp 004537FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045385F(U)
|
:004537F5 8B55C8                  mov edx, dword ptr [ebp-38]
:004537F8 83C201                  add edx, 00000001
:004537FB 8955C8                  mov dword ptr [ebp-38], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004537F3(U)
|
:004537FE 8B45C8                  mov eax, dword ptr [ebp-38]
:00453801 33C9                    xor ecx, ecx
:00453803 8A08                    mov cl, byte ptr [eax]
:00453805 81F9FF000000            cmp ecx, 000000FF
:0045380B 7454                    je 00453861
:0045380D 8B5508                  mov edx, dword ptr [ebp+08]
:00453810 52                      push edx
:00453811 E842C0FFFF              call 0044F858
:00453816 83C404                  add esp, 00000004
:00453819 50                      push eax
:0045381A 8B4508                  mov eax, dword ptr [ebp+08]
:0045381D 668B08                  mov cx, word ptr [eax]
:00453820 51                      push ecx
:00453821 8B55E8                  mov edx, dword ptr [ebp-18]
:00453824 8A02                    mov al, byte ptr [edx]
:00453826 50                      push eax
:00453827 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045382A 8A11                    mov dl, byte ptr [ecx]
:0045382C 52                      push edx
:0045382D 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00453830 E819030000              call 00453B4E
:00453835 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00453838 03C8                    add ecx, eax
:0045383A 894DD4                  mov dword ptr [ebp-2C], ecx
:0045383D 837DD400                cmp dword ptr [ebp-2C], 00000000
:00453841 761C                    jbe 0045385F
:00453843 8B55C8                  mov edx, dword ptr [ebp-38]
:00453846 33C0                    xor eax, eax
:00453848 8A02                    mov al, byte ptr [edx]
:0045384A 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0045384D 33D2                    xor edx, edx
:0045384F 8A5107                  mov dl, byte ptr [ecx+07]
:00453852 3BC2                    cmp eax, edx
:00453854 7509                    jne 0045385F
:00453856 8B45D4                  mov eax, dword ptr [ebp-2C]
:00453859 83C00A                  add eax, 0000000A
:0045385C 8945D4                  mov dword ptr [ebp-2C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453841(C), :00453854(C)
|
:0045385F EB94                    jmp 004537F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045380B(C)
|
:00453861 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00453864 8139C8000000            cmp dword ptr [ecx], 000000C8
:0045386A 7236                    jb 004538A2
:0045386C 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0045386F E89C90FBFF              call 0040C910
:00453874 85C0                    test eax, eax
:00453876 752A                    jne 004538A2
:00453878 6A64                    push 00000064
:0045387A E8314B0200              call 004783B0
:0045387F 83C404                  add esp, 00000004
:00453882 83F846                  cmp eax, 00000046
:00453885 731B                    jnb 004538A2
:00453887 8B55E8                  mov edx, dword ptr [ebp-18]
:0045388A 33C0                    xor eax, eax
:0045388C 8A02                    mov al, byte ptr [edx]
:0045388E 83F827                  cmp eax, 00000027
:00453891 7F0F                    jg 004538A2
:00453893 8B45D4                  mov eax, dword ptr [ebp-2C]
:00453896 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00453898 B90A000000              mov ecx, 0000000A
:0045389D F7F1                    div ecx
:0045389F 8945D4                  mov dword ptr [ebp-2C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045386A(C), :00453876(C), :00453885(C), :00453891(C)
|
:004538A2 8B55D8                  mov edx, dword ptr [ebp-28]
:004538A5 81E2FF000000            and edx, 000000FF
:004538AB 3B55D4                  cmp edx, dword ptr [ebp-2C]
:004538AE 7318                    jnb 004538C8
:004538B0 8A45D4                  mov al, byte ptr [ebp-2C]
:004538B3 8845D8                  mov byte ptr [ebp-28], al
:004538B6 C605544A4B00FF          mov byte ptr [004B4A54], FF
:004538BD 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004538C0 8A11                    mov dl, byte ptr [ecx]
:004538C2 8815684A4B00            mov byte ptr [004B4A68], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004538AE(C)
|
:004538C8 E926010000              jmp 004539F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045379A(C)
|
:004538CD 6A00                    push 00000000
:004538CF 8B45E4                  mov eax, dword ptr [ebp-1C]
:004538D2 25FF000000              and eax, 000000FF
:004538D7 0C80                    or al, 80
:004538D9 50                      push eax
:004538DA 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004538DD 81E1FF000000            and ecx, 000000FF
:004538E3 80C980                  or cl, 80
:004538E6 51                      push ecx
:004538E7 8B5508                  mov edx, dword ptr [ebp+08]
:004538EA 52                      push edx
:004538EB 8B4DBC                  mov ecx, dword ptr [ebp-44]
:004538EE E847C1FFFF              call 0044FA3A
:004538F3 C745C460DD4A00          mov [ebp-3C], 004ADD60
:004538FA EB09                    jmp 00453905

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004539EE(U)
|
:004538FC 8B45C4                  mov eax, dword ptr [ebp-3C]
:004538FF 83C001                  add eax, 00000001
:00453902 8945C4                  mov dword ptr [ebp-3C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004538FA(U)
|
:00453905 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:00453908 33D2                    xor edx, edx
:0045390A 8A11                    mov dl, byte ptr [ecx]
:0045390C 81FAFF000000            cmp edx, 000000FF
:00453912 0F84DB000000            je 004539F3
:00453918 8B4508                  mov eax, dword ptr [ebp+08]
:0045391B 50                      push eax
:0045391C E837BFFFFF              call 0044F858
:00453921 83C404                  add esp, 00000004
:00453924 50                      push eax
:00453925 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453928 668B11                  mov dx, word ptr [ecx]
:0045392B 52                      push edx
:0045392C 8B45E8                  mov eax, dword ptr [ebp-18]
:0045392F 8A08                    mov cl, byte ptr [eax]
:00453931 51                      push ecx
:00453932 8B55C4                  mov edx, dword ptr [ebp-3C]
:00453935 8A02                    mov al, byte ptr [edx]
:00453937 50                      push eax
:00453938 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0045393B E80E020000              call 00453B4E
:00453940 8945C0                  mov dword ptr [ebp-40], eax
:00453943 817DC0FF000000          cmp dword ptr [ebp-40], 000000FF
:0045394A 7E09                    jle 00453955
:0045394C C745B8FF000000          mov [ebp-48], 000000FF
:00453953 EB06                    jmp 0045395B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045394A(C)
|
:00453955 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00453958 894DB8                  mov dword ptr [ebp-48], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453953(U)
|
:0045395B 8B55B8                  mov edx, dword ptr [ebp-48]
:0045395E 8955C0                  mov dword ptr [ebp-40], edx
:00453961 837DC000                cmp dword ptr [ebp-40], 00000000
:00453965 761C                    jbe 00453983
:00453967 8B45C4                  mov eax, dword ptr [ebp-3C]
:0045396A 33C9                    xor ecx, ecx
:0045396C 8A08                    mov cl, byte ptr [eax]
:0045396E 8B55BC                  mov edx, dword ptr [ebp-44]
:00453971 33C0                    xor eax, eax
:00453973 8A4207                  mov al, byte ptr [edx+07]
:00453976 3BC8                    cmp ecx, eax
:00453978 7509                    jne 00453983
:0045397A 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0045397D 83C10A                  add ecx, 0000000A
:00453980 894DC0                  mov dword ptr [ebp-40], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453965(C), :00453978(C)
|
:00453983 8B55BC                  mov edx, dword ptr [ebp-44]
:00453986 813AC8000000            cmp dword ptr [edx], 000000C8
:0045398C 7236                    jb 004539C4
:0045398E 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00453991 E87A8FFBFF              call 0040C910
:00453996 85C0                    test eax, eax
:00453998 752A                    jne 004539C4
:0045399A 6A64                    push 00000064
:0045399C E80F4A0200              call 004783B0
:004539A1 83C404                  add esp, 00000004
:004539A4 83F846                  cmp eax, 00000046
:004539A7 731B                    jnb 004539C4
:004539A9 8B45E8                  mov eax, dword ptr [ebp-18]
:004539AC 33C9                    xor ecx, ecx
:004539AE 8A08                    mov cl, byte ptr [eax]
:004539B0 83F927                  cmp ecx, 00000027
:004539B3 7F0F                    jg 004539C4
:004539B5 8B45C0                  mov eax, dword ptr [ebp-40]
:004539B8 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004539BA B90A000000              mov ecx, 0000000A
:004539BF F7F1                    div ecx
:004539C1 8945C0                  mov dword ptr [ebp-40], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045398C(C), :00453998(C), :004539A7(C), :004539B3(C)
|
:004539C4 8B55D8                  mov edx, dword ptr [ebp-28]
:004539C7 81E2FF000000            and edx, 000000FF
:004539CD 3B55C0                  cmp edx, dword ptr [ebp-40]
:004539D0 731C                    jnb 004539EE
:004539D2 8A45C0                  mov al, byte ptr [ebp-40]
:004539D5 8845D8                  mov byte ptr [ebp-28], al
:004539D8 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004539DB 8A11                    mov dl, byte ptr [ecx]
:004539DD 8815544A4B00            mov byte ptr [004B4A54], dl
:004539E3 8B45E8                  mov eax, dword ptr [ebp-18]
:004539E6 8A08                    mov cl, byte ptr [eax]
:004539E8 880D684A4B00            mov byte ptr [004B4A68], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004539D0(C)
|
:004539EE E909FFFFFF              jmp 004538FC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004538C8(U), :00453912(C)
|
:004539F3 E934FDFFFF              jmp 0045372C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453742(C)
|
:004539F8 8A45D8                  mov al, byte ptr [ebp-28]
:004539FB 8BE5                    mov esp, ebp
:004539FD 5D                      pop ebp
:004539FE C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004537C0   , :00453BF6   
|
:00453A01 55                      push ebp
:00453A02 8BEC                    mov ebp, esp
:00453A04 51                      push ecx
:00453A05 C645FC00                mov [ebp-04], 00
:00453A09 8B4508                  mov eax, dword ptr [ebp+08]
:00453A0C 25FF000000              and eax, 000000FF
:00453A11 83F80C                  cmp eax, 0000000C
:00453A14 7C0E                    jl 00453A24
:00453A16 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453A19 81E1FF000000            and ecx, 000000FF
:00453A1F 83F91C                  cmp ecx, 0000001C
:00453A22 7E37                    jle 00453A5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453A14(C)
|
:00453A24 8B5508                  mov edx, dword ptr [ebp+08]
:00453A27 81E2FF000000            and edx, 000000FF
:00453A2D 83FA1F                  cmp edx, 0000001F
:00453A30 7C0D                    jl 00453A3F
:00453A32 8B4508                  mov eax, dword ptr [ebp+08]
:00453A35 25FF000000              and eax, 000000FF
:00453A3A 83F820                  cmp eax, 00000020
:00453A3D 7E1C                    jle 00453A5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453A30(C)
|
:00453A3F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453A42 81E1FF000000            and ecx, 000000FF
:00453A48 83F922                  cmp ecx, 00000022
:00453A4B 7C14                    jl 00453A61
:00453A4D 8B5508                  mov edx, dword ptr [ebp+08]
:00453A50 81E2FF000000            and edx, 000000FF
:00453A56 83FA23                  cmp edx, 00000023
:00453A59 7F06                    jg 00453A61

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453A22(C), :00453A3D(C)
|
:00453A5B C645FC01                mov [ebp-04], 01
:00453A5F EB3A                    jmp 00453A9B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453A4B(C), :00453A59(C)
|
:00453A61 8B4508                  mov eax, dword ptr [ebp+08]
:00453A64 25FF000000              and eax, 000000FF
:00453A69 83F82A                  cmp eax, 0000002A
:00453A6C 7C0E                    jl 00453A7C
:00453A6E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453A71 81E1FF000000            and ecx, 000000FF
:00453A77 83F92B                  cmp ecx, 0000002B
:00453A7A 7E1B                    jle 00453A97

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453A6C(C)
|
:00453A7C 8B5508                  mov edx, dword ptr [ebp+08]
:00453A7F 81E2FF000000            and edx, 000000FF
:00453A85 83FA2E                  cmp edx, 0000002E
:00453A88 7C11                    jl 00453A9B
:00453A8A 8B4508                  mov eax, dword ptr [ebp+08]
:00453A8D 25FF000000              and eax, 000000FF
:00453A92 83F82F                  cmp eax, 0000002F
:00453A95 7F04                    jg 00453A9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453A7A(C)
|
:00453A97 C645FC02                mov [ebp-04], 02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453A5F(U), :00453A88(C), :00453A95(C)
|
:00453A9B 8A45FC                  mov al, byte ptr [ebp-04]
:00453A9E 8BE5                    mov esp, ebp
:00453AA0 5D                      pop ebp
:00453AA1 C3                      ret


:00453AA2 55                      push ebp
:00453AA3 8BEC                    mov ebp, esp
:00453AA5 83EC0C                  sub esp, 0000000C
:00453AA8 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00453AAB E8401CFBFF              call 004056F0
:00453AB0 8B4508                  mov eax, dword ptr [ebp+08]
:00453AB3 25FF000000              and eax, 000000FF
:00453AB8 3DFF000000              cmp eax, 000000FF
:00453ABD 0F8485000000            je 00453B48
:00453AC3 C645F800                mov [ebp-08], 00
:00453AC7 EB09                    jmp 00453AD2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453B46(U)
|
:00453AC9 8A4DF8                  mov cl, byte ptr [ebp-08]
:00453ACC 80C101                  add cl, 01
:00453ACF 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453AC7(U)
|
:00453AD2 8B55F8                  mov edx, dword ptr [ebp-08]
:00453AD5 81E2FF000000            and edx, 000000FF
:00453ADB 83FA04                  cmp edx, 00000004
:00453ADE 7D68                    jge 00453B48
:00453AE0 8A45F8                  mov al, byte ptr [ebp-08]
:00453AE3 50                      push eax
:00453AE4 8D4D0C                  lea ecx, dword ptr [ebp+0C]
:00453AE7 51                      push ecx
:00453AE8 E804BEFFFF              call 0044F8F1
:00453AED 83C408                  add esp, 00000008
:00453AF0 50                      push eax
:00453AF1 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00453AF4 E8A72FFEFF              call 00436AA0
:00453AF9 8B55FC                  mov edx, dword ptr [ebp-04]
:00453AFC 81E2FF000000            and edx, 000000FF
:00453B02 81FAFF000000            cmp edx, 000000FF
:00453B08 743C                    je 00453B46
:00453B0A 8D45FC                  lea eax, dword ptr [ebp-04]
:00453B0D 50                      push eax
:00453B0E E8C9BCFFFF              call 0044F7DC
:00453B13 83C404                  add esp, 00000004
:00453B16 8845F4                  mov byte ptr [ebp-0C], al
:00453B19 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00453B1C 81E1FF000000            and ecx, 000000FF
:00453B22 81F9FF000000            cmp ecx, 000000FF
:00453B28 741C                    je 00453B46
:00453B2A 8B55F4                  mov edx, dword ptr [ebp-0C]
:00453B2D 81E2FF000000            and edx, 000000FF
:00453B33 8B4508                  mov eax, dword ptr [ebp+08]
:00453B36 25FF000000              and eax, 000000FF
:00453B3B 3BD0                    cmp edx, eax
:00453B3D 7507                    jne 00453B46
:00453B3F B801000000              mov eax, 00000001
:00453B44 EB04                    jmp 00453B4A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453B08(C), :00453B28(C), :00453B3D(C)
|
:00453B46 EB81                    jmp 00453AC9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453ABD(C), :00453ADE(C)
|
:00453B48 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453B44(U)
|
:00453B4A 8BE5                    mov esp, ebp
:00453B4C 5D                      pop ebp
:00453B4D C3                      ret



* Referenced by a CALL at Addresses:
|:00453830   , :0045393B   
|
:00453B4E 55                      push ebp
:00453B4F 8BEC                    mov ebp, esp
:00453B51 83EC58                  sub esp, 00000058
:00453B54 56                      push esi
:00453B55 894DB0                  mov dword ptr [ebp-50], ecx
:00453B58 8B45B0                  mov eax, dword ptr [ebp-50]
:00453B5B 8B08                    mov ecx, dword ptr [eax]
:00453B5D 6BC950                  imul ecx, 00000050
:00453B60 81C1787F4900            add ecx, 00497F78
:00453B66 894DB4                  mov dword ptr [ebp-4C], ecx
:00453B69 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453B6C 81E1FF000000            and ecx, 000000FF
:00453B72 6BC924                  imul ecx, 00000024
:00453B75 81C1B83B4B00            add ecx, 004B3BB8
:00453B7B E8602EFEFF              call 004369E0
:00453B80 6BC050                  imul eax, 00000050
:00453B83 05787F4900              add eax, 00497F78
:00453B88 8945D4                  mov dword ptr [ebp-2C], eax
:00453B8B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453B8E 81E1FF000000            and ecx, 000000FF
:00453B94 6BC924                  imul ecx, 00000024
:00453B97 81C1B83B4B00            add ecx, 004B3BB8
:00453B9D E89EE0FDFF              call 00431C40
:00453BA2 668B10                  mov dx, word ptr [eax]
:00453BA5 668955C8                mov word ptr [ebp-38], dx
:00453BA9 8D45C8                  lea eax, dword ptr [ebp-38]
:00453BAC 50                      push eax
:00453BAD E8A6BCFFFF              call 0044F858
:00453BB2 83C404                  add esp, 00000004
:00453BB5 8845BC                  mov byte ptr [ebp-44], al
:00453BB8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00453BBB 81E1FF000000            and ecx, 000000FF
:00453BC1 6BC931                  imul ecx, 00000031
:00453BC4 81C1001D4B00            add ecx, 004B1D00
:00453BCA E8911BFBFF              call 00405760
:00453BCF 8845D0                  mov byte ptr [ebp-30], al
:00453BD2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00453BD5 81E1FF000000            and ecx, 000000FF
:00453BDB 6BC931                  imul ecx, 00000031
:00453BDE 81C1001D4B00            add ecx, 004B1D00
:00453BE4 E8971BFBFF              call 00405780
:00453BE9 8845F8                  mov byte ptr [ebp-08], al
:00453BEC 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00453BEF 894DC0                  mov dword ptr [ebp-40], ecx
:00453BF2 8A550C                  mov dl, byte ptr [ebp+0C]
:00453BF5 52                      push edx
:00453BF6 E806FEFFFF              call 00453A01
:00453BFB 83C404                  add esp, 00000004
:00453BFE 8845C4                  mov byte ptr [ebp-3C], al
:00453C01 C645B800                mov [ebp-48], 00
:00453C05 C745CC00000000          mov [ebp-34], 00000000
:00453C0C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453C0F 81E1FF000000            and ecx, 000000FF
:00453C15 6BC924                  imul ecx, 00000024
:00453C18 81C1B83B4B00            add ecx, 004B3BB8
:00453C1E E8BDF6FAFF              call 004032E0
:00453C23 8BF0                    mov esi, eax
:00453C25 6BF664                  imul esi, 00000064
:00453C28 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00453C2B E8BAE1FAFF              call 00401DEA
:00453C30 8BC8                    mov ecx, eax
:00453C32 8BC6                    mov eax, esi
:00453C34 33D2                    xor edx, edx
:00453C36 F7F1                    div ecx
:00453C38 8845E0                  mov byte ptr [ebp-20], al
:00453C3B C745D800000000          mov [ebp-28], 00000000
:00453C42 C745CC00000000          mov [ebp-34], 00000000
:00453C49 EB09                    jmp 00453C54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453C62(U)
|
:00453C4B 8B55CC                  mov edx, dword ptr [ebp-34]
:00453C4E 83C201                  add edx, 00000001
:00453C51 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453C49(U)
|
:00453C54 837DCC11                cmp dword ptr [ebp-34], 00000011
:00453C58 730A                    jnb 00453C64
:00453C5A 8B45CC                  mov eax, dword ptr [ebp-34]
:00453C5D C64405E4FF              mov [ebp+eax-1C], FF
:00453C62 EBE7                    jmp 00453C4B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453C58(C)
|
:00453C64 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00453C67 81E1FF000000            and ecx, 000000FF
:00453C6D 81F9FF000000            cmp ecx, 000000FF
:00453C73 7472                    je 00453CE7
:00453C75 8B55C4                  mov edx, dword ptr [ebp-3C]
:00453C78 81E2FF000000            and edx, 000000FF
:00453C7E 85D2                    test edx, edx
:00453C80 7465                    je 00453CE7
:00453C82 8B450C                  mov eax, dword ptr [ebp+0C]
:00453C85 25FF000000              and eax, 000000FF
:00453C8A 83F81A                  cmp eax, 0000001A
:00453C8D 740E                    je 00453C9D
:00453C8F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00453C92 81E1FF000000            and ecx, 000000FF
:00453C98 83F91B                  cmp ecx, 0000001B
:00453C9B 7525                    jne 00453CC2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453C8D(C)
|
:00453C9D 8A5511                  mov dl, byte ptr [ebp+11]
:00453CA0 52                      push edx
:00453CA1 8A4510                  mov al, byte ptr [ebp+10]
:00453CA4 50                      push eax
:00453CA5 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:00453CA8 51                      push ecx
:00453CA9 8A55F8                  mov dl, byte ptr [ebp-08]
:00453CAC 52                      push edx
:00453CAD 8A45C4                  mov al, byte ptr [ebp-3C]
:00453CB0 50                      push eax
:00453CB1 8A4D08                  mov cl, byte ptr [ebp+08]
:00453CB4 51                      push ecx
:00453CB5 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00453CB8 E8CE1C0000              call 0045598B
:00453CBD 8945C0                  mov dword ptr [ebp-40], eax
:00453CC0 EB25                    jmp 00453CE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453C9B(C)
|
:00453CC2 68FF000000              push 000000FF
:00453CC7 68FF000000              push 000000FF
:00453CCC 8D55E4                  lea edx, dword ptr [ebp-1C]
:00453CCF 52                      push edx
:00453CD0 8A45F8                  mov al, byte ptr [ebp-08]
:00453CD3 50                      push eax
:00453CD4 8A4DC4                  mov cl, byte ptr [ebp-3C]
:00453CD7 51                      push ecx
:00453CD8 8A5508                  mov dl, byte ptr [ebp+08]
:00453CDB 52                      push edx
:00453CDC 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00453CDF E8A71C0000              call 0045598B
:00453CE4 8945C0                  mov dword ptr [ebp-40], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453C73(C), :00453C80(C), :00453CC0(U)
|
:00453CE7 8B45D0                  mov eax, dword ptr [ebp-30]
:00453CEA 25FF000000              and eax, 000000FF
:00453CEF 3DFF000000              cmp eax, 000000FF
:00453CF4 7426                    je 00453D1C
:00453CF6 8A4D14                  mov cl, byte ptr [ebp+14]
:00453CF9 51                      push ecx
:00453CFA 8A550C                  mov dl, byte ptr [ebp+0C]
:00453CFD 52                      push edx
:00453CFE 8A4508                  mov al, byte ptr [ebp+08]
:00453D01 50                      push eax
:00453D02 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00453D05 8A5104                  mov dl, byte ptr [ecx+04]
:00453D08 52                      push edx
:00453D09 E8B8EFFFFF              call 00452CC6
:00453D0E 83C410                  add esp, 00000010
:00453D11 85C0                    test eax, eax
:00453D13 7507                    jne 00453D1C
:00453D15 33C0                    xor eax, eax
:00453D17 E95A110000              jmp 00454E76

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453CF4(C), :00453D13(C)
|
:00453D1C C745DC00000000          mov [ebp-24], 00000000
:00453D23 C745FC00000000          mov [ebp-04], 00000000
:00453D2A 8B450C                  mov eax, dword ptr [ebp+0C]
:00453D2D 25FF000000              and eax, 000000FF
:00453D32 8945AC                  mov dword ptr [ebp-54], eax
:00453D35 837DAC40                cmp dword ptr [ebp-54], 00000040
:00453D39 0F8734110000            ja 00454E73
:00453D3F 8B55AC                  mov edx, dword ptr [ebp-54]
:00453D42 33C9                    xor ecx, ecx
:00453D44 8A8A114F4500            mov cl, byte ptr [edx+00454F11]
:00453D4A FF248D7D4E4500          jmp dword ptr [4*ecx+00454E7D]
:00453D51 8A4514                  mov al, byte ptr [ebp+14]
:00453D54 50                      push eax
:00453D55 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00453D58 51                      push ecx
:00453D59 8A5508                  mov dl, byte ptr [ebp+08]
:00453D5C 52                      push edx
:00453D5D 8B45B0                  mov eax, dword ptr [ebp-50]
:00453D60 8A4804                  mov cl, byte ptr [eax+04]
:00453D63 51                      push ecx
:00453D64 E85DEFFFFF              call 00452CC6
:00453D69 83C410                  add esp, 00000010
:00453D6C 85C0                    test eax, eax
:00453D6E 7407                    je 00453D77

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00453D70 C745DC05000000          mov [ebp-24], 00000005

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453D6E(C)
|
:00453D77 E9F7100000              jmp 00454E73
:00453D7C C745DC00000000          mov [ebp-24], 00000000
:00453D83 8A5514                  mov dl, byte ptr [ebp+14]
:00453D86 52                      push edx
:00453D87 8A450C                  mov al, byte ptr [ebp+0C]
:00453D8A 50                      push eax
:00453D8B 8A4D08                  mov cl, byte ptr [ebp+08]
:00453D8E 51                      push ecx
:00453D8F 8B55B0                  mov edx, dword ptr [ebp-50]
:00453D92 8A4204                  mov al, byte ptr [edx+04]
:00453D95 50                      push eax
:00453D96 E82BEFFFFF              call 00452CC6
:00453D9B 83C410                  add esp, 00000010
:00453D9E 85C0                    test eax, eax
:00453DA0 7505                    jne 00453DA7
:00453DA2 E9CC100000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453DA0(C)
|
:00453DA7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453DAA 81E1FF000000            and ecx, 000000FF
:00453DB0 6BC924                  imul ecx, 00000024
:00453DB3 81C1B83B4B00            add ecx, 004B3BB8
:00453DB9 E8222CFEFF              call 004369E0

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00453DBE 3DC8000000              cmp eax, 000000C8
:00453DC3 7605                    jbe 00453DCA
:00453DC5 E9A9100000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453DC3(C)
|
:00453DCA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453DCD 81E1FF000000            and ecx, 000000FF
:00453DD3 6BC924                  imul ecx, 00000024
:00453DD6 81C1B83B4B00            add ecx, 004B3BB8
:00453DDC E8FFF4FAFF              call 004032E0
:00453DE1 8BF0                    mov esi, eax
:00453DE3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453DE6 81E1FF000000            and ecx, 000000FF
:00453DEC 6BC924                  imul ecx, 00000024
:00453DEF 81C1B83B4B00            add ecx, 004B3BB8
:00453DF5 E8E62BFEFF              call 004369E0
:00453DFA 8BC8                    mov ecx, eax
:00453DFC 6BC950                  imul ecx, 00000050
:00453DFF 81C1787F4900            add ecx, 00497F78
:00453E05 E8E0DFFAFF              call 00401DEA
:00453E0A 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00453E0C B903000000              mov ecx, 00000003
:00453E11 F7F1                    div ecx
:00453E13 3BF0                    cmp esi, eax
:00453E15 7305                    jnb 00453E1C
:00453E17 E957100000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453E15(C)
|
:00453E1C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453E1F 81E1FF000000            and ecx, 000000FF
:00453E25 6BC924                  imul ecx, 00000024
:00453E28 81C1B83B4B00            add ecx, 004B3BB8
:00453E2E E8BD2CFEFF              call 00436AF0
:00453E33 25FF000000              and eax, 000000FF
:00453E38 83F80D                  cmp eax, 0000000D
:00453E3B 750C                    jne 00453E49

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00453E3D C745DC14000000          mov [ebp-24], 00000014
:00453E44 E92A100000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453E3B(C)
|
:00453E49 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453E4C 81E1FF000000            and ecx, 000000FF
:00453E52 6BC924                  imul ecx, 00000024
:00453E55 81C1B83B4B00            add ecx, 004B3BB8
:00453E5B E8902CFEFF              call 00436AF0
:00453E60 25FF000000              and eax, 000000FF
:00453E65 83F80E                  cmp eax, 0000000E
:00453E68 7421                    je 00453E8B
:00453E6A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453E6D 81E1FF000000            and ecx, 000000FF
:00453E73 6BC924                  imul ecx, 00000024
:00453E76 81C1B83B4B00            add ecx, 004B3BB8
:00453E7C E86F2CFEFF              call 00436AF0
:00453E81 25FF000000              and eax, 000000FF
:00453E86 83F80A                  cmp eax, 0000000A
:00453E89 750C                    jne 00453E97

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453E68(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00453E8B C745DC0A000000          mov [ebp-24], 0000000A
:00453E92 E9DC0F0000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453E89(C)
|
:00453E97 E9D70F0000              jmp 00454E73
:00453E9C C745DC00000000          mov [ebp-24], 00000000
:00453EA3 E9CB0F0000              jmp 00454E73
:00453EA8 8A5514                  mov dl, byte ptr [ebp+14]
:00453EAB 52                      push edx
:00453EAC 8A450C                  mov al, byte ptr [ebp+0C]
:00453EAF 50                      push eax
:00453EB0 8A4D08                  mov cl, byte ptr [ebp+08]
:00453EB3 51                      push ecx
:00453EB4 8B55B0                  mov edx, dword ptr [ebp-50]
:00453EB7 8A4204                  mov al, byte ptr [edx+04]
:00453EBA 50                      push eax
:00453EBB E806EEFFFF              call 00452CC6
:00453EC0 83C410                  add esp, 00000010
:00453EC3 85C0                    test eax, eax
:00453EC5 750C                    jne 00453ED3
:00453EC7 C745DC00000000          mov [ebp-24], 00000000
:00453ECE E95D010000              jmp 00454030

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453EC5(C)
|
:00453ED3 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00453ED6 51                      push ecx
:00453ED7 8A550C                  mov dl, byte ptr [ebp+0C]
:00453EDA 52                      push edx
:00453EDB 8B45D4                  mov eax, dword ptr [ebp-2C]
:00453EDE 50                      push eax
:00453EDF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453EE2 81E1FF000000            and ecx, 000000FF
:00453EE8 6BC924                  imul ecx, 00000024
:00453EEB 81C1B83B4B00            add ecx, 004B3BB8
:00453EF1 51                      push ecx
:00453EF2 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00453EF5 E8F2D5FEFF              call 004414EC
:00453EFA 8945FC                  mov dword ptr [ebp-04], eax
:00453EFD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453F00 81E1FF000000            and ecx, 000000FF
:00453F06 6BC924                  imul ecx, 00000024
:00453F09 81C1B83B4B00            add ecx, 004B3BB8
:00453F0F E8CCF3FAFF              call 004032E0
:00453F14 3945FC                  cmp dword ptr [ebp-04], eax
:00453F17 7209                    jb 00453F22
:00453F19 C745DC4C000000          mov [ebp-24], 0000004C
:00453F20 EB2B                    jmp 00453F4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453F17(C)
|
:00453F22 8B75FC                  mov esi, dword ptr [ebp-04]
:00453F25 6BF60A                  imul esi, 0000000A
:00453F28 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00453F2B E8BADEFAFF              call 00401DEA
:00453F30 8BC8                    mov ecx, eax
:00453F32 8BC6                    mov eax, esi
:00453F34 33D2                    xor edx, edx
:00453F36 F7F1                    div ecx
:00453F38 83F801                  cmp eax, 00000001
:00453F3B 7209                    jb 00453F46

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00453F3D C745DC0A000000          mov [ebp-24], 0000000A
:00453F44 EB07                    jmp 00453F4D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453F3B(C)
|
:00453F46 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453F20(U), :00453F44(U)
|
:00453F4D 8B55F8                  mov edx, dword ptr [ebp-08]
:00453F50 81E2FF000000            and edx, 000000FF
:00453F56 85D2                    test edx, edx
:00453F58 7420                    je 00453F7A
:00453F5A 8A450C                  mov al, byte ptr [ebp+0C]
:00453F5D 50                      push eax
:00453F5E 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00453F61 8A5104                  mov dl, byte ptr [ecx+04]
:00453F64 52                      push edx
:00453F65 6A00                    push 00000000
:00453F67 8B45DC                  mov eax, dword ptr [ebp-24]
:00453F6A 50                      push eax
:00453F6B 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00453F6E 51                      push ecx
:00453F6F E8DAD5FFFF              call 0045154E
:00453F74 83C414                  add esp, 00000014
:00453F77 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453F58(C)
|
:00453F7A 8B550C                  mov edx, dword ptr [ebp+0C]
:00453F7D 81E2FF000000            and edx, 000000FF
:00453F83 8955A8                  mov dword ptr [ebp-58], edx
:00453F86 837DA80B                cmp dword ptr [ebp-58], 0000000B
:00453F8A 0F87A0000000            ja 00454030
:00453F90 8B45A8                  mov eax, dword ptr [ebp-58]
:00453F93 FF2485524F4500          jmp dword ptr [4*eax+00454F52]
:00453F9A 837DDC4B                cmp dword ptr [ebp-24], 0000004B
:00453F9E 7335                    jnb 00453FD5
:00453FA0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00453FA3 81E1FF000000            and ecx, 000000FF
:00453FA9 6BC924                  imul ecx, 00000024
:00453FAC 81C1B83B4B00            add ecx, 004B3BB8
:00453FB2 E8292AFEFF              call 004369E0

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00453FB7 3DC8000000              cmp eax, 000000C8
:00453FBC 7317                    jnb 00453FD5
:00453FBE 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00453FC1 81E1FF000000            and ecx, 000000FF
:00453FC7 83F950                  cmp ecx, 00000050
:00453FCA 7E09                    jle 00453FD5
:00453FCC 8B55DC                  mov edx, dword ptr [ebp-24]
:00453FCF 83C205                  add edx, 00000005
:00453FD2 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453F9E(C), :00453FBC(C), :00453FCA(C)
|
:00453FD5 837DDC4B                cmp dword ptr [ebp-24], 0000004B
:00453FD9 7309                    jnb 00453FE4
:00453FDB 8B45DC                  mov eax, dword ptr [ebp-24]
:00453FDE 83C005                  add eax, 00000005
:00453FE1 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453FD9(C)
|
:00453FE4 EB4A                    jmp 00454030
:00453FE6 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00453FE9 83C10A                  add ecx, 0000000A
:00453FEC 894DDC                  mov dword ptr [ebp-24], ecx
:00453FEF EB3F                    jmp 00454030
:00453FF1 8B55DC                  mov edx, dword ptr [ebp-24]
:00453FF4 83C205                  add edx, 00000005
:00453FF7 8955DC                  mov dword ptr [ebp-24], edx
:00453FFA EB34                    jmp 00454030
:00453FFC 8B45DC                  mov eax, dword ptr [ebp-24]
:00453FFF 83C002                  add eax, 00000002
:00454002 8945DC                  mov dword ptr [ebp-24], eax
:00454005 EB29                    jmp 00454030
:00454007 837DDC03                cmp dword ptr [ebp-24], 00000003
:0045400B 760B                    jbe 00454018
:0045400D 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00454010 83E903                  sub ecx, 00000003
:00454013 894DDC                  mov dword ptr [ebp-24], ecx
:00454016 EB07                    jmp 0045401F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045400B(C)
|
:00454018 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454016(U)
|
:0045401F EB0F                    jmp 00454030
:00454021 837DDC4B                cmp dword ptr [ebp-24], 0000004B
:00454025 7309                    jnb 00454030
:00454027 8B55DC                  mov edx, dword ptr [ebp-24]
:0045402A 83C20A                  add edx, 0000000A
:0045402D 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453ECE(U), :00453F8A(C), :00453FE4(U), :00453FEF(U), :00453FFA(U)
|:00454005(U), :0045401F(U), :00454025(C)
|
:00454030 E93E0E0000              jmp 00454E73
:00454035 8A4514                  mov al, byte ptr [ebp+14]
:00454038 50                      push eax
:00454039 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0045403C 51                      push ecx
:0045403D 8A5508                  mov dl, byte ptr [ebp+08]
:00454040 52                      push edx
:00454041 8B45B0                  mov eax, dword ptr [ebp-50]
:00454044 8A4804                  mov cl, byte ptr [eax+04]
:00454047 51                      push ecx
:00454048 E879ECFFFF              call 00452CC6
:0045404D 83C410                  add esp, 00000010
:00454050 85C0                    test eax, eax
:00454052 750C                    jne 00454060
:00454054 C745DC00000000          mov [ebp-24], 00000000
:0045405B E9130E0000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454052(C)
|
:00454060 8B55E0                  mov edx, dword ptr [ebp-20]
:00454063 81E2FF000000            and edx, 000000FF
:00454069 83FA14                  cmp edx, 00000014
:0045406C 7F0C                    jg 0045407A
:0045406E C745DC00000000          mov [ebp-24], 00000000
:00454075 E9F90D0000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045406C(C)
|
:0045407A 8B45E0                  mov eax, dword ptr [ebp-20]
:0045407D 25FF000000              and eax, 000000FF
:00454082 83F832                  cmp eax, 00000032
:00454085 7F09                    jg 00454090

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00454087 C745DC07000000          mov [ebp-24], 00000007
:0045408E EB1E                    jmp 004540AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454085(C)
|
:00454090 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00454093 81E1FF000000            and ecx, 000000FF
:00454099 83F950                  cmp ecx, 00000050
:0045409C 7F09                    jg 004540A7
:0045409E C745DC0B000000          mov [ebp-24], 0000000B
:004540A5 EB07                    jmp 004540AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045409C(C)
|
:004540A7 C745DC10000000          mov [ebp-24], 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045408E(U), :004540A5(U)
|
:004540AE 8B55F8                  mov edx, dword ptr [ebp-08]
:004540B1 81E2FF000000            and edx, 000000FF
:004540B7 85D2                    test edx, edx
:004540B9 7420                    je 004540DB
:004540BB 8A450C                  mov al, byte ptr [ebp+0C]
:004540BE 50                      push eax
:004540BF 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004540C2 8A5104                  mov dl, byte ptr [ecx+04]
:004540C5 52                      push edx
:004540C6 6A00                    push 00000000
:004540C8 8B45DC                  mov eax, dword ptr [ebp-24]
:004540CB 50                      push eax
:004540CC 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004540CF 51                      push ecx
:004540D0 E879D4FFFF              call 0045154E
:004540D5 83C414                  add esp, 00000014
:004540D8 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004540B9(C)
|
:004540DB 8B550C                  mov edx, dword ptr [ebp+0C]
:004540DE 81E2FF000000            and edx, 000000FF
:004540E4 83FA1F                  cmp edx, 0000001F
:004540E7 740D                    je 004540F6
:004540E9 8B450C                  mov eax, dword ptr [ebp+0C]
:004540EC 25FF000000              and eax, 000000FF
:004540F1 83F81D                  cmp eax, 0000001D
:004540F4 753E                    jne 00454134

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004540E7(C)
|
:004540F6 6A01                    push 00000001
:004540F8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004540FB 81E1FF000000            and ecx, 000000FF
:00454101 6BC924                  imul ecx, 00000024
:00454104 81C1B83B4B00            add ecx, 004B3BB8
:0045410A E86129FEFF              call 00436A70
:0045410F 85C0                    test eax, eax
:00454111 751A                    jne 0045412D
:00454113 6A64                    push 00000064
:00454115 E896420200              call 004783B0
:0045411A 83C404                  add esp, 00000004
:0045411D 83F832                  cmp eax, 00000032
:00454120 7309                    jnb 0045412B
:00454122 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00454125 83C10F                  add ecx, 0000000F
:00454128 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454120(C)
|
:0045412B EB07                    jmp 00454134

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454111(C)
|
:0045412D C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004540F4(C), :0045412B(U)
|
:00454134 E93A0D0000              jmp 00454E73
:00454139 8A5514                  mov dl, byte ptr [ebp+14]
:0045413C 52                      push edx
:0045413D 8A450C                  mov al, byte ptr [ebp+0C]
:00454140 50                      push eax
:00454141 8A4D08                  mov cl, byte ptr [ebp+08]
:00454144 51                      push ecx
:00454145 8B55B0                  mov edx, dword ptr [ebp-50]
:00454148 8A4204                  mov al, byte ptr [edx+04]
:0045414B 50                      push eax
:0045414C E875EBFFFF              call 00452CC6
:00454151 83C410                  add esp, 00000010
:00454154 85C0                    test eax, eax
:00454156 7509                    jne 00454161
:00454158 C745DC00000000          mov [ebp-24], 00000000
:0045415F EB47                    jmp 004541A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454156(C)
|
:00454161 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00454164 33D2                    xor edx, edx
:00454166 8A5104                  mov dl, byte ptr [ecx+04]
:00454169 8BCA                    mov ecx, edx
:0045416B 6BC924                  imul ecx, 00000024
:0045416E 81C1B83B4B00            add ecx, 004B3BB8
:00454174 E887F1FAFF              call 00403300
:00454179 8BF0                    mov esi, eax
:0045417B D1E6                    shl esi, 1
:0045417D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454180 81E1FF000000            and ecx, 000000FF
:00454186 6BC924                  imul ecx, 00000024
:00454189 81C1B83B4B00            add ecx, 004B3BB8
:0045418F E86CF1FAFF              call 00403300
:00454194 3BF0                    cmp esi, eax
:00454196 7709                    ja 004541A1
:00454198 C745DC50000000          mov [ebp-24], 00000050
:0045419F EB07                    jmp 004541A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454196(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004541A1 C745DC07000000          mov [ebp-24], 00000007

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045415F(U), :0045419F(U)
|
:004541A8 E9C60C0000              jmp 00454E73
:004541AD 8A4514                  mov al, byte ptr [ebp+14]
:004541B0 50                      push eax
:004541B1 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004541B4 51                      push ecx
:004541B5 8A5508                  mov dl, byte ptr [ebp+08]
:004541B8 52                      push edx
:004541B9 8B45B0                  mov eax, dword ptr [ebp-50]
:004541BC 8A4804                  mov cl, byte ptr [eax+04]
:004541BF 51                      push ecx
:004541C0 E801EBFFFF              call 00452CC6
:004541C5 83C410                  add esp, 00000010
:004541C8 85C0                    test eax, eax
:004541CA 7509                    jne 004541D5
:004541CC C745DC00000000          mov [ebp-24], 00000000
:004541D3 EB7A                    jmp 0045424F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004541CA(C)
|
:004541D5 8A550C                  mov dl, byte ptr [ebp+0C]
:004541D8 52                      push edx
:004541D9 8A450C                  mov al, byte ptr [ebp+0C]
:004541DC 50                      push eax
:004541DD 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004541E0 51                      push ecx
:004541E1 8B5508                  mov edx, dword ptr [ebp+08]
:004541E4 81E2FF000000            and edx, 000000FF
:004541EA 6BD224                  imul edx, 00000024
:004541ED 81C2B83B4B00            add edx, 004B3BB8
:004541F3 52                      push edx
:004541F4 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004541F7 E8F0D2FEFF              call 004414EC
:004541FC 8945FC                  mov dword ptr [ebp-04], eax
:004541FF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454202 81E1FF000000            and ecx, 000000FF
:00454208 6BC924                  imul ecx, 00000024
:0045420B 81C1B83B4B00            add ecx, 004B3BB8
:00454211 E8CAF0FAFF              call 004032E0
:00454216 3945FC                  cmp dword ptr [ebp-04], eax
:00454219 7209                    jb 00454224
:0045421B C745DC1E000000          mov [ebp-24], 0000001E
:00454222 EB2B                    jmp 0045424F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454219(C)
|
:00454224 8B75FC                  mov esi, dword ptr [ebp-04]
:00454227 6BF60A                  imul esi, 0000000A
:0045422A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045422D E8B8DBFAFF              call 00401DEA
:00454232 8BC8                    mov ecx, eax
:00454234 8BC6                    mov eax, esi
:00454236 33D2                    xor edx, edx
:00454238 F7F1                    div ecx
:0045423A 83F801                  cmp eax, 00000001
:0045423D 7209                    jb 00454248

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045423F C745DC03000000          mov [ebp-24], 00000003
:00454246 EB07                    jmp 0045424F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045423D(C)
|
:00454248 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004541D3(U), :00454222(U), :00454246(U)
|
:0045424F E91F0C0000              jmp 00454E73
:00454254 8A5514                  mov dl, byte ptr [ebp+14]
:00454257 52                      push edx
:00454258 8A450C                  mov al, byte ptr [ebp+0C]
:0045425B 50                      push eax
:0045425C 8A4D08                  mov cl, byte ptr [ebp+08]
:0045425F 51                      push ecx
:00454260 8B55B0                  mov edx, dword ptr [ebp-50]
:00454263 8A4204                  mov al, byte ptr [edx+04]
:00454266 50                      push eax
:00454267 E85AEAFFFF              call 00452CC6
:0045426C 83C410                  add esp, 00000010
:0045426F 85C0                    test eax, eax
:00454271 750C                    jne 0045427F
:00454273 C745DC00000000          mov [ebp-24], 00000000
:0045427A E980010000              jmp 004543FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454271(C)
|
:0045427F 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00454282 E8F5C8FFFF              call 00450B7C
:00454287 85C0                    test eax, eax
:00454289 0F8469010000            je 004543F8
:0045428F 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00454292 51                      push ecx
:00454293 8A550C                  mov dl, byte ptr [ebp+0C]
:00454296 52                      push edx
:00454297 8B45D4                  mov eax, dword ptr [ebp-2C]
:0045429A 50                      push eax
:0045429B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045429E 81E1FF000000            and ecx, 000000FF
:004542A4 6BC924                  imul ecx, 00000024
:004542A7 81C1B83B4B00            add ecx, 004B3BB8
:004542AD 51                      push ecx
:004542AE 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004542B1 E836D2FEFF              call 004414EC
:004542B6 8945FC                  mov dword ptr [ebp-04], eax
:004542B9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004542BC 81E1FF000000            and ecx, 000000FF
:004542C2 6BC924                  imul ecx, 00000024
:004542C5 81C1B83B4B00            add ecx, 004B3BB8
:004542CB E82028FEFF              call 00436AF0
:004542D0 25FF000000              and eax, 000000FF
:004542D5 85C0                    test eax, eax
:004542D7 756B                    jne 00454344

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004542D9 C745DC07000000          mov [ebp-24], 00000007
:004542E0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004542E3 81E1FF000000            and ecx, 000000FF
:004542E9 6BC924                  imul ecx, 00000024
:004542EC 81C1B83B4B00            add ecx, 004B3BB8
:004542F2 E8E9EFFAFF              call 004032E0
:004542F7 3945FC                  cmp dword ptr [ebp-04], eax
:004542FA 7209                    jb 00454305
:004542FC C745DC1E000000          mov [ebp-24], 0000001E
:00454303 EB22                    jmp 00454327

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004542FA(C)
|
:00454305 8B75FC                  mov esi, dword ptr [ebp-04]
:00454308 6BF60A                  imul esi, 0000000A
:0045430B 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045430E E8D7DAFAFF              call 00401DEA
:00454313 8BC8                    mov ecx, eax
:00454315 8BC6                    mov eax, esi
:00454317 33D2                    xor edx, edx
:00454319 F7F1                    div ecx
:0045431B 83F806                  cmp eax, 00000006
:0045431E 7207                    jb 00454327
:00454320 C745DC0F000000          mov [ebp-24], 0000000F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00454303(U), :0045431E(C)
|
:00454327 6A32                    push 00000032
:00454329 E882400200              call 004783B0
:0045432E 83C404                  add esp, 00000004
:00454331 83F802                  cmp eax, 00000002
:00454334 7309                    jnb 0045433F
:00454336 8B55DC                  mov edx, dword ptr [ebp-24]
:00454339 83C20A                  add edx, 0000000A
:0045433C 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454334(C)
|
:0045433F E9B2000000              jmp 004543F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004542D7(C)
|
:00454344 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454347 81E1FF000000            and ecx, 000000FF
:0045434D 6BC924                  imul ecx, 00000024
:00454350 81C1B83B4B00            add ecx, 004B3BB8
:00454356 E89527FEFF              call 00436AF0
:0045435B 25FF000000              and eax, 000000FF
:00454360 83F808                  cmp eax, 00000008
:00454363 750C                    jne 00454371

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00454365 C745DC05000000          mov [ebp-24], 00000005
:0045436C E985000000              jmp 004543F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454363(C)
|
:00454371 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454374 81E1FF000000            and ecx, 000000FF
:0045437A 6BC924                  imul ecx, 00000024
:0045437D 81C1B83B4B00            add ecx, 004B3BB8
:00454383 E86827FEFF              call 00436AF0
:00454388 25FF000000              and eax, 000000FF
:0045438D 83F809                  cmp eax, 00000009
:00454390 7509                    jne 0045439B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00454392 C745DC05000000          mov [ebp-24], 00000005
:00454399 EB5B                    jmp 004543F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454390(C)
|
:0045439B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045439E 81E1FF000000            and ecx, 000000FF
:004543A4 6BC924                  imul ecx, 00000024
:004543A7 81C1B83B4B00            add ecx, 004B3BB8
:004543AD E83E27FEFF              call 00436AF0
:004543B2 25FF000000              and eax, 000000FF
:004543B7 83F80D                  cmp eax, 0000000D
:004543BA 7509                    jne 004543C5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004543BC C745DC05000000          mov [ebp-24], 00000005
:004543C3 EB31                    jmp 004543F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004543BA(C)
|
:004543C5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004543C8 81E1FF000000            and ecx, 000000FF
:004543CE 6BC924                  imul ecx, 00000024
:004543D1 81C1B83B4B00            add ecx, 004B3BB8
:004543D7 E81427FEFF              call 00436AF0
:004543DC 25FF000000              and eax, 000000FF
:004543E1 83F80E                  cmp eax, 0000000E
:004543E4 7509                    jne 004543EF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004543E6 C745DC03000000          mov [ebp-24], 00000003
:004543ED EB07                    jmp 004543F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004543E4(C)
|
:004543EF C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045433F(U), :0045436C(U), :00454399(U), :004543C3(U), :004543ED(U)
|
:004543F6 EB07                    jmp 004543FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454289(C)
|
:004543F8 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045427A(U), :004543F6(U)
|
:004543FF E96F0A0000              jmp 00454E73
:00454404 8A4514                  mov al, byte ptr [ebp+14]
:00454407 50                      push eax
:00454408 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0045440B 51                      push ecx
:0045440C 8A5508                  mov dl, byte ptr [ebp+08]
:0045440F 52                      push edx
:00454410 8B45B0                  mov eax, dword ptr [ebp-50]
:00454413 8A4804                  mov cl, byte ptr [eax+04]
:00454416 51                      push ecx
:00454417 E8AAE8FFFF              call 00452CC6
:0045441C 83C410                  add esp, 00000010
:0045441F 85C0                    test eax, eax
:00454421 7509                    jne 0045442C
:00454423 C745DC00000000          mov [ebp-24], 00000000
:0045442A EB41                    jmp 0045446D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454421(C)
|
:0045442C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045442F 81E1FF000000            and ecx, 000000FF
:00454435 6BC924                  imul ecx, 00000024
:00454438 81C1B83B4B00            add ecx, 004B3BB8
:0045443E E8BDEEFAFF              call 00403300
:00454443 8BF0                    mov esi, eax
:00454445 6BF664                  imul esi, 00000064
:00454448 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045444B E8CBD9FAFF              call 00401E1B
:00454450 8BC8                    mov ecx, eax
:00454452 8BC6                    mov eax, esi
:00454454 33D2                    xor edx, edx
:00454456 F7F1                    div ecx
:00454458 83F832                  cmp eax, 00000032
:0045445B 7309                    jnb 00454466
:0045445D C745DC00000000          mov [ebp-24], 00000000
:00454464 EB07                    jmp 0045446D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045445B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00454466 C745DC05000000          mov [ebp-24], 00000005

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045442A(U), :00454464(U)
|
:0045446D E9010A0000              jmp 00454E73
:00454472 8A5514                  mov dl, byte ptr [ebp+14]
:00454475 52                      push edx
:00454476 8A450C                  mov al, byte ptr [ebp+0C]
:00454479 50                      push eax
:0045447A 8A4D08                  mov cl, byte ptr [ebp+08]
:0045447D 51                      push ecx
:0045447E 8B55B0                  mov edx, dword ptr [ebp-50]
:00454481 8A4204                  mov al, byte ptr [edx+04]
:00454484 50                      push eax
:00454485 E83CE8FFFF              call 00452CC6
:0045448A 83C410                  add esp, 00000010
:0045448D 85C0                    test eax, eax
:0045448F 750C                    jne 0045449D
:00454491 C745DC00000000          mov [ebp-24], 00000000
:00454498 E9A2000000              jmp 0045453F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045448F(C)
|
:0045449D 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004544A0 81E1FF000000            and ecx, 000000FF
:004544A6 83F950                  cmp ecx, 00000050
:004544A9 7E26                    jle 004544D1
:004544AB 6A10                    push 00000010
:004544AD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004544B0 81E1FF000000            and ecx, 000000FF
:004544B6 6BC924                  imul ecx, 00000024
:004544B9 81C1B83B4B00            add ecx, 004B3BB8
:004544BF E8AC25FEFF              call 00436A70
:004544C4 85C0                    test eax, eax
:004544C6 7509                    jne 004544D1
:004544C8 C745DC16000000          mov [ebp-24], 00000016
:004544CF EB6E                    jmp 0045453F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004544A9(C), :004544C6(C)
|
:004544D1 8B55E0                  mov edx, dword ptr [ebp-20]
:004544D4 81E2FF000000            and edx, 000000FF
:004544DA 83FA3C                  cmp edx, 0000003C
:004544DD 7E26                    jle 00454505
:004544DF 6A10                    push 00000010
:004544E1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004544E4 81E1FF000000            and ecx, 000000FF
:004544EA 6BC924                  imul ecx, 00000024
:004544ED 81C1B83B4B00            add ecx, 004B3BB8
:004544F3 E87825FEFF              call 00436A70
:004544F8 85C0                    test eax, eax
:004544FA 7509                    jne 00454505
:004544FC C745DC12000000          mov [ebp-24], 00000012
:00454503 EB3A                    jmp 0045453F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004544DD(C), :004544FA(C)
|
:00454505 8B45E0                  mov eax, dword ptr [ebp-20]
:00454508 25FF000000              and eax, 000000FF
:0045450D 83F828                  cmp eax, 00000028
:00454510 7E26                    jle 00454538
:00454512 6A10                    push 00000010
:00454514 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454517 81E1FF000000            and ecx, 000000FF
:0045451D 6BC924                  imul ecx, 00000024
:00454520 81C1B83B4B00            add ecx, 004B3BB8
:00454526 E84525FEFF              call 00436A70
:0045452B 85C0                    test eax, eax
:0045452D 7509                    jne 00454538
:0045452F C745DC0C000000          mov [ebp-24], 0000000C
:00454536 EB07                    jmp 0045453F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00454510(C), :0045452D(C)
|
:00454538 C745DC01000000          mov [ebp-24], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00454498(U), :004544CF(U), :00454503(U), :00454536(U)
|
:0045453F E92F090000              jmp 00454E73
:00454544 8A4D14                  mov cl, byte ptr [ebp+14]
:00454547 51                      push ecx
:00454548 8A550C                  mov dl, byte ptr [ebp+0C]
:0045454B 52                      push edx
:0045454C 8A4508                  mov al, byte ptr [ebp+08]
:0045454F 50                      push eax
:00454550 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00454553 8A5104                  mov dl, byte ptr [ecx+04]
:00454556 52                      push edx
:00454557 E86AE7FFFF              call 00452CC6
:0045455C 83C410                  add esp, 00000010
:0045455F 85C0                    test eax, eax
:00454561 7509                    jne 0045456C
:00454563 C745DC00000000          mov [ebp-24], 00000000
:0045456A EB41                    jmp 004545AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454561(C)
|
:0045456C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045456F 81E1FF000000            and ecx, 000000FF
:00454575 6BC924                  imul ecx, 00000024
:00454578 81C1B83B4B00            add ecx, 004B3BB8
:0045457E E85DEDFAFF              call 004032E0
:00454583 8BF0                    mov esi, eax
:00454585 6BF664                  imul esi, 00000064
:00454588 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045458B E85AD8FAFF              call 00401DEA
:00454590 8BC8                    mov ecx, eax
:00454592 8BC6                    mov eax, esi
:00454594 33D2                    xor edx, edx
:00454596 F7F1                    div ecx
:00454598 83F828                  cmp eax, 00000028
:0045459B 7309                    jnb 004545A6
:0045459D C745DC00000000          mov [ebp-24], 00000000
:004545A4 EB07                    jmp 004545AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045459B(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004545A6 C745DC0A000000          mov [ebp-24], 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045456A(U), :004545A4(U)
|
:004545AD E9C1080000              jmp 00454E73
:004545B2 8A5514                  mov dl, byte ptr [ebp+14]
:004545B5 52                      push edx
:004545B6 8A450C                  mov al, byte ptr [ebp+0C]
:004545B9 50                      push eax
:004545BA 8A4D08                  mov cl, byte ptr [ebp+08]
:004545BD 51                      push ecx
:004545BE 8B55B0                  mov edx, dword ptr [ebp-50]
:004545C1 8A4204                  mov al, byte ptr [edx+04]
:004545C4 50                      push eax
:004545C5 E8FCE6FFFF              call 00452CC6
:004545CA 83C410                  add esp, 00000010
:004545CD 85C0                    test eax, eax
:004545CF 7509                    jne 004545DA
:004545D1 C745DC00000000          mov [ebp-24], 00000000
:004545D8 EB7E                    jmp 00454658

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004545CF(C)
|
:004545DA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004545DD 81E1FF000000            and ecx, 000000FF
:004545E3 6BC924                  imul ecx, 00000024
:004545E6 81C1B83B4B00            add ecx, 004B3BB8
:004545EC E8EFECFAFF              call 004032E0
:004545F1 8BF0                    mov esi, eax
:004545F3 6BF664                  imul esi, 00000064
:004545F6 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004545F9 E8ECD7FAFF              call 00401DEA
:004545FE 8BC8                    mov ecx, eax
:00454600 8BC6                    mov eax, esi
:00454602 33D2                    xor edx, edx
:00454604 F7F1                    div ecx
:00454606 83F828                  cmp eax, 00000028
:00454609 7309                    jnb 00454614
:0045460B C745DC00000000          mov [ebp-24], 00000000
:00454612 EB44                    jmp 00454658

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454609(C)
|
:00454614 6A10                    push 00000010
:00454616 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454619 81E1FF000000            and ecx, 000000FF
:0045461F 6BC924                  imul ecx, 00000024
:00454622 81C1B83B4B00            add ecx, 004B3BB8
:00454628 E84324FEFF              call 00436A70
:0045462D 85C0                    test eax, eax
:0045462F 7520                    jne 00454651
:00454631 8A5508                  mov dl, byte ptr [ebp+08]
:00454634 52                      push edx
:00454635 8B45B0                  mov eax, dword ptr [ebp-50]
:00454638 8A4804                  mov cl, byte ptr [eax+04]
:0045463B 51                      push ecx
:0045463C E8152DFEFF              call 00437356
:00454641 83C408                  add esp, 00000008
:00454644 85C0                    test eax, eax
:00454646 7409                    je 00454651
:00454648 C745DC19000000          mov [ebp-24], 00000019
:0045464F EB07                    jmp 00454658

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045462F(C), :00454646(C)
|
:00454651 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004545D8(U), :00454612(U), :0045464F(U)
|
:00454658 E916080000              jmp 00454E73
:0045465D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454660 81E1FF000000            and ecx, 000000FF
:00454666 6BC924                  imul ecx, 00000024
:00454669 81C1B83B4B00            add ecx, 004B3BB8
:0045466F E808C5FFFF              call 00450B7C
:00454674 85C0                    test eax, eax
:00454676 7409                    je 00454681

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00454678 C745DC14000000          mov [ebp-24], 00000014
:0045467F EB07                    jmp 00454688

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454676(C)
|
:00454681 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045467F(U)
|
:00454688 E9E6070000              jmp 00454E73
:0045468D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454690 81E1FF000000            and ecx, 000000FF
:00454696 6BC924                  imul ecx, 00000024
:00454699 81C1B83B4B00            add ecx, 004B3BB8
:0045469F E8D8C4FFFF              call 00450B7C
:004546A4 85C0                    test eax, eax
:004546A6 7409                    je 004546B1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:004546A8 C745DC14000000          mov [ebp-24], 00000014
:004546AF EB07                    jmp 004546B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004546A6(C)
|
:004546B1 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004546AF(U)
|
:004546B8 8B55F8                  mov edx, dword ptr [ebp-08]
:004546BB 81E2FF000000            and edx, 000000FF
:004546C1 85D2                    test edx, edx
:004546C3 7420                    je 004546E5
:004546C5 8A450C                  mov al, byte ptr [ebp+0C]
:004546C8 50                      push eax
:004546C9 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004546CC 8A5104                  mov dl, byte ptr [ecx+04]
:004546CF 52                      push edx
:004546D0 6A01                    push 00000001
:004546D2 8B45DC                  mov eax, dword ptr [ebp-24]
:004546D5 50                      push eax
:004546D6 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004546D9 51                      push ecx
:004546DA E86FCEFFFF              call 0045154E
:004546DF 83C414                  add esp, 00000014
:004546E2 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004546C3(C)
|
:004546E5 E989070000              jmp 00454E73
:004546EA 8A5514                  mov dl, byte ptr [ebp+14]
:004546ED 52                      push edx
:004546EE 8A450C                  mov al, byte ptr [ebp+0C]
:004546F1 50                      push eax
:004546F2 8A4D08                  mov cl, byte ptr [ebp+08]
:004546F5 51                      push ecx
:004546F6 8B55B0                  mov edx, dword ptr [ebp-50]
:004546F9 8A4204                  mov al, byte ptr [edx+04]
:004546FC 50                      push eax
:004546FD E8C4E5FFFF              call 00452CC6
:00454702 83C410                  add esp, 00000010
:00454705 85C0                    test eax, eax
:00454707 7509                    jne 00454712
:00454709 C745DC00000000          mov [ebp-24], 00000000
:00454710 EB4B                    jmp 0045475D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454707(C)
|
:00454712 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454715 81E1FF000000            and ecx, 000000FF
:0045471B 6BC924                  imul ecx, 00000024
:0045471E 81C1B83B4B00            add ecx, 004B3BB8
:00454724 E853C4FFFF              call 00450B7C
:00454729 85C0                    test eax, eax
:0045472B 7429                    je 00454756
:0045472D 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00454730 51                      push ecx
:00454731 8B55B0                  mov edx, dword ptr [ebp-50]
:00454734 8A4204                  mov al, byte ptr [edx+04]
:00454737 50                      push eax
:00454738 6A00                    push 00000000
:0045473A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045473D 81E1FF000000            and ecx, 000000FF
:00454743 6BC924                  imul ecx, 00000024
:00454746 81C1B83B4B00            add ecx, 004B3BB8
:0045474C E82D0B0000              call 0045527E
:00454751 8945DC                  mov dword ptr [ebp-24], eax
:00454754 EB07                    jmp 0045475D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045472B(C)
|
:00454756 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00454710(U), :00454754(U)
|
:0045475D E911070000              jmp 00454E73
:00454762 C745DC00000000          mov [ebp-24], 00000000
:00454769 C745CC00000000          mov [ebp-34], 00000000
:00454770 EB09                    jmp 0045477B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004547E1(U), :00454801(U)
|
:00454772 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00454775 83C101                  add ecx, 00000001
:00454778 894DCC                  mov dword ptr [ebp-34], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454770(U)
|
:0045477B 837DCC5A                cmp dword ptr [ebp-34], 0000005A
:0045477F 0F8381000000            jnb 00454806
:00454785 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00454788 6BC924                  imul ecx, 00000024
:0045478B 81C1B83B4B00            add ecx, 004B3BB8
:00454791 E87A81FBFF              call 0040C910
:00454796 8BF0                    mov esi, eax
:00454798 8B55B0                  mov edx, dword ptr [ebp-50]
:0045479B 33C0                    xor eax, eax
:0045479D 8A4204                  mov al, byte ptr [edx+04]
:004547A0 8BC8                    mov ecx, eax
:004547A2 6BC924                  imul ecx, 00000024
:004547A5 81C1B83B4B00            add ecx, 004B3BB8
:004547AB E86081FBFF              call 0040C910
:004547B0 3BF0                    cmp esi, eax
:004547B2 754D                    jne 00454801
:004547B4 8A4D14                  mov cl, byte ptr [ebp+14]
:004547B7 51                      push ecx
:004547B8 8A550C                  mov dl, byte ptr [ebp+0C]
:004547BB 52                      push edx
:004547BC 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004547BF 6BC924                  imul ecx, 00000024
:004547C2 81C1B83B4B00            add ecx, 004B3BB8
:004547C8 E813D8FEFF              call 00441FE0
:004547CD 50                      push eax
:004547CE 8B45B0                  mov eax, dword ptr [ebp-50]
:004547D1 8A4804                  mov cl, byte ptr [eax+04]
:004547D4 51                      push ecx
:004547D5 E8ECE4FFFF              call 00452CC6
:004547DA 83C410                  add esp, 00000010
:004547DD 85C0                    test eax, eax
:004547DF 7502                    jne 004547E3
:004547E1 EB8F                    jmp 00454772

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004547DF(C)
|
:004547E3 8B4DCC                  mov ecx, dword ptr [ebp-34]
:004547E6 6BC924                  imul ecx, 00000024
:004547E9 81C1B83B4B00            add ecx, 004B3BB8
:004547EF E888C3FFFF              call 00450B7C
:004547F4 85C0                    test eax, eax
:004547F6 7409                    je 00454801
:004547F8 8B55DC                  mov edx, dword ptr [ebp-24]
:004547FB 83C206                  add edx, 00000006
:004547FE 8955DC                  mov dword ptr [ebp-24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004547B2(C), :004547F6(C)
|
:00454801 E96CFFFFFF              jmp 00454772

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045477F(C)
|
:00454806 E968060000              jmp 00454E73
:0045480B C745DC00000000          mov [ebp-24], 00000000
:00454812 C745CC00000000          mov [ebp-34], 00000000
:00454819 EB09                    jmp 00454824

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045488A(U), :004548AA(U)
|
:0045481B 8B45CC                  mov eax, dword ptr [ebp-34]
:0045481E 83C001                  add eax, 00000001
:00454821 8945CC                  mov dword ptr [ebp-34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454819(U)
|
:00454824 837DCC5A                cmp dword ptr [ebp-34], 0000005A
:00454828 0F8381000000            jnb 004548AF
:0045482E 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00454831 6BC924                  imul ecx, 00000024
:00454834 81C1B83B4B00            add ecx, 004B3BB8
:0045483A E8D180FBFF              call 0040C910
:0045483F 8BF0                    mov esi, eax
:00454841 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00454844 33D2                    xor edx, edx
:00454846 8A5104                  mov dl, byte ptr [ecx+04]
:00454849 8BCA                    mov ecx, edx
:0045484B 6BC924                  imul ecx, 00000024
:0045484E 81C1B83B4B00            add ecx, 004B3BB8
:00454854 E8B780FBFF              call 0040C910
:00454859 3BF0                    cmp esi, eax
:0045485B 754D                    jne 004548AA
:0045485D 8A4514                  mov al, byte ptr [ebp+14]
:00454860 50                      push eax
:00454861 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00454864 51                      push ecx
:00454865 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00454868 6BC924                  imul ecx, 00000024
:0045486B 81C1B83B4B00            add ecx, 004B3BB8
:00454871 E86AD7FEFF              call 00441FE0
:00454876 50                      push eax
:00454877 8B55B0                  mov edx, dword ptr [ebp-50]
:0045487A 8A4204                  mov al, byte ptr [edx+04]
:0045487D 50                      push eax
:0045487E E843E4FFFF              call 00452CC6
:00454883 83C410                  add esp, 00000010
:00454886 85C0                    test eax, eax
:00454888 7502                    jne 0045488C
:0045488A EB8F                    jmp 0045481B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454888(C)
|
:0045488C 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0045488F 6BC924                  imul ecx, 00000024
:00454892 81C1B83B4B00            add ecx, 004B3BB8
:00454898 E8DFC2FFFF              call 00450B7C
:0045489D 85C0                    test eax, eax
:0045489F 7409                    je 004548AA
:004548A1 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004548A4 83C105                  add ecx, 00000005
:004548A7 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045485B(C), :0045489F(C)
|
:004548AA E96CFFFFFF              jmp 0045481B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454828(C)
|
:004548AF E9BF050000              jmp 00454E73
:004548B4 8A5514                  mov dl, byte ptr [ebp+14]
:004548B7 52                      push edx
:004548B8 8A450C                  mov al, byte ptr [ebp+0C]
:004548BB 50                      push eax
:004548BC 8A4D08                  mov cl, byte ptr [ebp+08]
:004548BF 51                      push ecx
:004548C0 8B55B0                  mov edx, dword ptr [ebp-50]
:004548C3 8A4204                  mov al, byte ptr [edx+04]
:004548C6 50                      push eax
:004548C7 E8FAE3FFFF              call 00452CC6
:004548CC 83C410                  add esp, 00000010
:004548CF 85C0                    test eax, eax
:004548D1 750C                    jne 004548DF
:004548D3 C745DC00000000          mov [ebp-24], 00000000
:004548DA E994050000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004548D1(C)
|
:004548DF C745DC28000000          mov [ebp-24], 00000028
:004548E6 E988050000              jmp 00454E73
:004548EB 8A4D14                  mov cl, byte ptr [ebp+14]
:004548EE 51                      push ecx
:004548EF 8A550C                  mov dl, byte ptr [ebp+0C]
:004548F2 52                      push edx
:004548F3 8A4508                  mov al, byte ptr [ebp+08]
:004548F6 50                      push eax
:004548F7 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004548FA 8A5104                  mov dl, byte ptr [ecx+04]
:004548FD 52                      push edx
:004548FE E8C3E3FFFF              call 00452CC6
:00454903 83C410                  add esp, 00000010
:00454906 85C0                    test eax, eax
:00454908 750C                    jne 00454916
:0045490A C745DC00000000          mov [ebp-24], 00000000
:00454911 E95D050000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454908(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00454916 6A0A                    push 0000000A
:00454918 E8933A0200              call 004783B0
:0045491D 83C404                  add esp, 00000004
:00454920 8945DC                  mov dword ptr [ebp-24], eax
:00454923 E94B050000              jmp 00454E73
:00454928 C745DC00000000          mov [ebp-24], 00000000
:0045492F 8A4514                  mov al, byte ptr [ebp+14]
:00454932 50                      push eax
:00454933 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00454936 51                      push ecx
:00454937 8A5508                  mov dl, byte ptr [ebp+08]
:0045493A 52                      push edx
:0045493B 8B45B0                  mov eax, dword ptr [ebp-50]
:0045493E 8A4804                  mov cl, byte ptr [eax+04]
:00454941 51                      push ecx
:00454942 E87FE3FFFF              call 00452CC6
:00454947 83C410                  add esp, 00000010
:0045494A 85C0                    test eax, eax
:0045494C 7505                    jne 00454953
:0045494E E920050000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045494C(C)
|
:00454953 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454956 81E1FF000000            and ecx, 000000FF
:0045495C 6BC924                  imul ecx, 00000024
:0045495F 81C1B83B4B00            add ecx, 004B3BB8
:00454965 E8A620FEFF              call 00436A10
:0045496A 50                      push eax
:0045496B 8A5508                  mov dl, byte ptr [ebp+08]
:0045496E 52                      push edx
:0045496F E80E060000              call 00454F82
:00454974 83C408                  add esp, 00000008
:00454977 25FF000000              and eax, 000000FF
:0045497C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045497F 03C8                    add ecx, eax
:00454981 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004549CE(U)
|
:00454984 8B55C0                  mov edx, dword ptr [ebp-40]
:00454987 33C0                    xor eax, eax
:00454989 8A02                    mov al, byte ptr [edx]
:0045498B 3DFF000000              cmp eax, 000000FF
:00454990 743E                    je 004549D0
:00454992 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00454995 33D2                    xor edx, edx
:00454997 8A11                    mov dl, byte ptr [ecx]
:00454999 8BCA                    mov ecx, edx
:0045499B 6BC924                  imul ecx, 00000024
:0045499E 81C1B83B4B00            add ecx, 004B3BB8
:004549A4 E86720FEFF              call 00436A10
:004549A9 50                      push eax
:004549AA 8B45C0                  mov eax, dword ptr [ebp-40]
:004549AD 8A08                    mov cl, byte ptr [eax]
:004549AF 51                      push ecx
:004549B0 E8CD050000              call 00454F82
:004549B5 83C408                  add esp, 00000008
:004549B8 25FF000000              and eax, 000000FF
:004549BD 8B55DC                  mov edx, dword ptr [ebp-24]
:004549C0 03D0                    add edx, eax
:004549C2 8955DC                  mov dword ptr [ebp-24], edx
:004549C5 8B45C0                  mov eax, dword ptr [ebp-40]
:004549C8 83C001                  add eax, 00000001
:004549CB 8945C0                  mov dword ptr [ebp-40], eax
:004549CE EBB4                    jmp 00454984

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454990(C)
|
:004549D0 837DDC0A                cmp dword ptr [ebp-24], 0000000A
:004549D4 7307                    jnb 004549DD
:004549D6 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004549D4(C)
|
:004549DD E991040000              jmp 00454E73
:004549E2 C745DC00000000          mov [ebp-24], 00000000
:004549E9 8A4D14                  mov cl, byte ptr [ebp+14]
:004549EC 51                      push ecx
:004549ED 8A550C                  mov dl, byte ptr [ebp+0C]
:004549F0 52                      push edx
:004549F1 8A4508                  mov al, byte ptr [ebp+08]
:004549F4 50                      push eax
:004549F5 8B4DB0                  mov ecx, dword ptr [ebp-50]
:004549F8 8A5104                  mov dl, byte ptr [ecx+04]
:004549FB 52                      push edx
:004549FC E8C5E2FFFF              call 00452CC6
:00454A01 83C410                  add esp, 00000010
:00454A04 85C0                    test eax, eax
:00454A06 7505                    jne 00454A0D
:00454A08 E966040000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454A06(C)
|
:00454A0D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454A10 81E1FF000000            and ecx, 000000FF
:00454A16 6BC924                  imul ecx, 00000024
:00454A19 81C1B83B4B00            add ecx, 004B3BB8
:00454A1F E80C20FEFF              call 00436A30
:00454A24 50                      push eax
:00454A25 8A4508                  mov al, byte ptr [ebp+08]
:00454A28 50                      push eax
:00454A29 E854050000              call 00454F82
:00454A2E 83C408                  add esp, 00000008
:00454A31 25FF000000              and eax, 000000FF
:00454A36 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00454A39 03C8                    add ecx, eax
:00454A3B 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454A88(U)
|
:00454A3E 8B55C0                  mov edx, dword ptr [ebp-40]
:00454A41 33C0                    xor eax, eax
:00454A43 8A02                    mov al, byte ptr [edx]
:00454A45 3DFF000000              cmp eax, 000000FF
:00454A4A 743E                    je 00454A8A
:00454A4C 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00454A4F 33D2                    xor edx, edx
:00454A51 8A11                    mov dl, byte ptr [ecx]
:00454A53 8BCA                    mov ecx, edx
:00454A55 6BC924                  imul ecx, 00000024
:00454A58 81C1B83B4B00            add ecx, 004B3BB8
:00454A5E E8CD1FFEFF              call 00436A30
:00454A63 50                      push eax
:00454A64 8B45C0                  mov eax, dword ptr [ebp-40]
:00454A67 8A08                    mov cl, byte ptr [eax]
:00454A69 51                      push ecx
:00454A6A E813050000              call 00454F82
:00454A6F 83C408                  add esp, 00000008
:00454A72 25FF000000              and eax, 000000FF
:00454A77 8B55DC                  mov edx, dword ptr [ebp-24]
:00454A7A 03D0                    add edx, eax
:00454A7C 8955DC                  mov dword ptr [ebp-24], edx
:00454A7F 8B45C0                  mov eax, dword ptr [ebp-40]
:00454A82 83C001                  add eax, 00000001
:00454A85 8945C0                  mov dword ptr [ebp-40], eax
:00454A88 EBB4                    jmp 00454A3E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454A4A(C)
|
:00454A8A E9E4030000              jmp 00454E73
:00454A8F C745DC00000000          mov [ebp-24], 00000000
:00454A96 8A4D14                  mov cl, byte ptr [ebp+14]
:00454A99 51                      push ecx
:00454A9A 8A550C                  mov dl, byte ptr [ebp+0C]
:00454A9D 52                      push edx
:00454A9E 8A4508                  mov al, byte ptr [ebp+08]
:00454AA1 50                      push eax
:00454AA2 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00454AA5 8A5104                  mov dl, byte ptr [ecx+04]
:00454AA8 52                      push edx
:00454AA9 E818E2FFFF              call 00452CC6
:00454AAE 83C410                  add esp, 00000010
:00454AB1 85C0                    test eax, eax
:00454AB3 7505                    jne 00454ABA
:00454AB5 E9B9030000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454AB3(C)
|
:00454ABA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454ABD 81E1FF000000            and ecx, 000000FF
:00454AC3 6BC924                  imul ecx, 00000024
:00454AC6 81C1B83B4B00            add ecx, 004B3BB8
:00454ACC E87F1FFEFF              call 00436A50
:00454AD1 50                      push eax
:00454AD2 8A4508                  mov al, byte ptr [ebp+08]
:00454AD5 50                      push eax
:00454AD6 E8A7040000              call 00454F82
:00454ADB 83C408                  add esp, 00000008
:00454ADE 25FF000000              and eax, 000000FF
:00454AE3 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00454AE6 03C8                    add ecx, eax
:00454AE8 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454B35(U)
|
:00454AEB 8B55C0                  mov edx, dword ptr [ebp-40]
:00454AEE 33C0                    xor eax, eax
:00454AF0 8A02                    mov al, byte ptr [edx]
:00454AF2 3DFF000000              cmp eax, 000000FF
:00454AF7 743E                    je 00454B37
:00454AF9 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00454AFC 33D2                    xor edx, edx
:00454AFE 8A11                    mov dl, byte ptr [ecx]
:00454B00 8BCA                    mov ecx, edx
:00454B02 6BC924                  imul ecx, 00000024
:00454B05 81C1B83B4B00            add ecx, 004B3BB8
:00454B0B E8401FFEFF              call 00436A50
:00454B10 50                      push eax
:00454B11 8B45C0                  mov eax, dword ptr [ebp-40]
:00454B14 8A08                    mov cl, byte ptr [eax]
:00454B16 51                      push ecx
:00454B17 E866040000              call 00454F82
:00454B1C 83C408                  add esp, 00000008
:00454B1F 25FF000000              and eax, 000000FF
:00454B24 8B55DC                  mov edx, dword ptr [ebp-24]
:00454B27 03D0                    add edx, eax
:00454B29 8955DC                  mov dword ptr [ebp-24], edx
:00454B2C 8B45C0                  mov eax, dword ptr [ebp-40]
:00454B2F 83C001                  add eax, 00000001
:00454B32 8945C0                  mov dword ptr [ebp-40], eax
:00454B35 EBB4                    jmp 00454AEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454AF7(C)
|
:00454B37 E937030000              jmp 00454E73
:00454B3C 8A4D14                  mov cl, byte ptr [ebp+14]
:00454B3F 51                      push ecx
:00454B40 8A550C                  mov dl, byte ptr [ebp+0C]
:00454B43 52                      push edx
:00454B44 8A4508                  mov al, byte ptr [ebp+08]
:00454B47 50                      push eax
:00454B48 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00454B4B 8A5104                  mov dl, byte ptr [ecx+04]
:00454B4E 52                      push edx
:00454B4F E872E1FFFF              call 00452CC6
:00454B54 83C410                  add esp, 00000010
:00454B57 85C0                    test eax, eax
:00454B59 7509                    jne 00454B64
:00454B5B C745DC00000000          mov [ebp-24], 00000000
:00454B62 EB61                    jmp 00454BC5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454B59(C)
|
:00454B64 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454B67 81E1FF000000            and ecx, 000000FF
:00454B6D 6BC924                  imul ecx, 00000024
:00454B70 81C1B83B4B00            add ecx, 004B3BB8
:00454B76 E885E7FAFF              call 00403300
:00454B7B 8BF0                    mov esi, eax
:00454B7D 6BF664                  imul esi, 00000064
:00454B80 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00454B83 E893D2FAFF              call 00401E1B
:00454B88 8BC8                    mov ecx, eax
:00454B8A 8BC6                    mov eax, esi
:00454B8C 33D2                    xor edx, edx
:00454B8E F7F1                    div ecx
:00454B90 83F850                  cmp eax, 00000050
:00454B93 7209                    jb 00454B9E
:00454B95 C745DC00000000          mov [ebp-24], 00000000
:00454B9C EB27                    jmp 00454BC5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454B93(C)
|
:00454B9E 8A550C                  mov dl, byte ptr [ebp+0C]
:00454BA1 52                      push edx
:00454BA2 8B45B0                  mov eax, dword ptr [ebp-50]
:00454BA5 8A4804                  mov cl, byte ptr [eax+04]
:00454BA8 51                      push ecx
:00454BA9 6A01                    push 00000001
:00454BAB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454BAE 81E1FF000000            and ecx, 000000FF
:00454BB4 6BC924                  imul ecx, 00000024
:00454BB7 81C1B83B4B00            add ecx, 004B3BB8
:00454BBD E8BC060000              call 0045527E
:00454BC2 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00454B62(U), :00454B9C(U)
|
:00454BC5 E9A9020000              jmp 00454E73
:00454BCA 8A5514                  mov dl, byte ptr [ebp+14]
:00454BCD 52                      push edx
:00454BCE 8A450C                  mov al, byte ptr [ebp+0C]
:00454BD1 50                      push eax
:00454BD2 8A4D08                  mov cl, byte ptr [ebp+08]
:00454BD5 51                      push ecx
:00454BD6 8B55B0                  mov edx, dword ptr [ebp-50]
:00454BD9 8A4204                  mov al, byte ptr [edx+04]
:00454BDC 50                      push eax
:00454BDD E8E4E0FFFF              call 00452CC6
:00454BE2 83C410                  add esp, 00000010
:00454BE5 85C0                    test eax, eax
:00454BE7 7509                    jne 00454BF2
:00454BE9 C745DC00000000          mov [ebp-24], 00000000
:00454BF0 EB7A                    jmp 00454C6C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454BE7(C)
|
:00454BF2 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00454BF5 33D2                    xor edx, edx
:00454BF7 8A5104                  mov dl, byte ptr [ecx+04]
:00454BFA 8BCA                    mov ecx, edx
:00454BFC 6BC924                  imul ecx, 00000024
:00454BFF 81C1B83B4B00            add ecx, 004B3BB8
:00454C05 E8D6E6FAFF              call 004032E0
:00454C0A 8BF0                    mov esi, eax
:00454C0C D1E6                    shl esi, 1
:00454C0E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454C11 81E1FF000000            and ecx, 000000FF
:00454C17 6BC924                  imul ecx, 00000024
:00454C1A 81C1B83B4B00            add ecx, 004B3BB8
:00454C20 E8BBE6FAFF              call 004032E0
:00454C25 3BF0                    cmp esi, eax
:00454C27 7727                    ja 00454C50
:00454C29 8B4508                  mov eax, dword ptr [ebp+08]
:00454C2C 25FF000000              and eax, 000000FF
:00454C31 85C0                    test eax, eax
:00454C33 7509                    jne 00454C3E
:00454C35 C745DC5F000000          mov [ebp-24], 0000005F
:00454C3C EB10                    jmp 00454C4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454C33(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00454C3E 6A0A                    push 0000000A
:00454C40 E86B370200              call 004783B0
:00454C45 83C404                  add esp, 00000004
:00454C48 83C050                  add eax, 00000050
:00454C4B 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454C3C(U)
|
:00454C4E EB07                    jmp 00454C57

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454C27(C)
|
:00454C50 C745DC0F000000          mov [ebp-24], 0000000F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454C4E(U)
|
:00454C57 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00454C5A E81DBFFFFF              call 00450B7C
:00454C5F 85C0                    test eax, eax
:00454C61 7409                    je 00454C6C
:00454C63 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00454C66 83C105                  add ecx, 00000005
:00454C69 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00454BF0(U), :00454C61(C)
|
:00454C6C E902020000              jmp 00454E73
:00454C71 8A5514                  mov dl, byte ptr [ebp+14]
:00454C74 52                      push edx
:00454C75 8A450C                  mov al, byte ptr [ebp+0C]
:00454C78 50                      push eax
:00454C79 8A4D08                  mov cl, byte ptr [ebp+08]
:00454C7C 51                      push ecx
:00454C7D 8B55B0                  mov edx, dword ptr [ebp-50]
:00454C80 8A4204                  mov al, byte ptr [edx+04]
:00454C83 50                      push eax
:00454C84 E83DE0FFFF              call 00452CC6
:00454C89 83C410                  add esp, 00000010
:00454C8C 85C0                    test eax, eax
:00454C8E 750C                    jne 00454C9C
:00454C90 C745DC00000000          mov [ebp-24], 00000000
:00454C97 E917010000              jmp 00454DB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454C8E(C)
|
:00454C9C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454C9F 81E1FF000000            and ecx, 000000FF
:00454CA5 6BC924                  imul ecx, 00000024
:00454CA8 81C1B83B4B00            add ecx, 004B3BB8
:00454CAE E8CD0AFBFF              call 00405780
:00454CB3 25FF000000              and eax, 000000FF
:00454CB8 83F803                  cmp eax, 00000003
:00454CBB 7421                    je 00454CDE
:00454CBD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454CC0 81E1FF000000            and ecx, 000000FF
:00454CC6 6BC924                  imul ecx, 00000024
:00454CC9 81C1B83B4B00            add ecx, 004B3BB8
:00454CCF E8AC0AFBFF              call 00405780
:00454CD4 25FF000000              and eax, 000000FF
:00454CD9 83F802                  cmp eax, 00000002
:00454CDC 750C                    jne 00454CEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454CBB(C)
|
:00454CDE C745DC00000000          mov [ebp-24], 00000000
:00454CE5 E9C9000000              jmp 00454DB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454CDC(C)
|
:00454CEA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454CED 81E1FF000000            and ecx, 000000FF
:00454CF3 6BC924                  imul ecx, 00000024
:00454CF6 81C1B83B4B00            add ecx, 004B3BB8
:00454CFC E8EF1DFEFF              call 00436AF0
:00454D01 25FF000000              and eax, 000000FF
:00454D06 85C0                    test eax, eax
:00454D08 750C                    jne 00454D16
:00454D0A C745DC0F000000          mov [ebp-24], 0000000F
:00454D11 E99D000000              jmp 00454DB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454D08(C)
|
:00454D16 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454D19 81E1FF000000            and ecx, 000000FF
:00454D1F 6BC924                  imul ecx, 00000024
:00454D22 81C1B83B4B00            add ecx, 004B3BB8
:00454D28 E8C31DFEFF              call 00436AF0
:00454D2D 25FF000000              and eax, 000000FF
:00454D32 83F805                  cmp eax, 00000005
:00454D35 7512                    jne 00454D49

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00454D37 6A04                    push 00000004
:00454D39 E872360200              call 004783B0
:00454D3E 83C404                  add esp, 00000004
:00454D41 83C00A                  add eax, 0000000A
:00454D44 8945DC                  mov dword ptr [ebp-24], eax
:00454D47 EB6A                    jmp 00454DB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454D35(C)
|
:00454D49 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454D4C 81E1FF000000            and ecx, 000000FF
:00454D52 6BC924                  imul ecx, 00000024
:00454D55 81C1B83B4B00            add ecx, 004B3BB8
:00454D5B E8901DFEFF              call 00436AF0
:00454D60 25FF000000              and eax, 000000FF
:00454D65 83F806                  cmp eax, 00000006
:00454D68 7512                    jne 00454D7C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00454D6A 6A04                    push 00000004
:00454D6C E83F360200              call 004783B0
:00454D71 83C404                  add esp, 00000004
:00454D74 83C00A                  add eax, 0000000A
:00454D77 8945DC                  mov dword ptr [ebp-24], eax
:00454D7A EB37                    jmp 00454DB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454D68(C)
|
:00454D7C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00454D7F 81E1FF000000            and ecx, 000000FF
:00454D85 6BC924                  imul ecx, 00000024
:00454D88 81C1B83B4B00            add ecx, 004B3BB8
:00454D8E E85D1DFEFF              call 00436AF0
:00454D93 25FF000000              and eax, 000000FF
:00454D98 83F80D                  cmp eax, 0000000D
:00454D9B 7509                    jne 00454DA6

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00454D9D C745DC0A000000          mov [ebp-24], 0000000A
:00454DA4 EB0D                    jmp 00454DB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454D9B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00454DA6 6A05                    push 00000005
:00454DA8 E803360200              call 004783B0
:00454DAD 83C404                  add esp, 00000004
:00454DB0 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00454C97(U), :00454CE5(U), :00454D11(U), :00454D47(U), :00454D7A(U)
|:00454DA4(U)
|
:00454DB3 E9BB000000              jmp 00454E73
:00454DB8 C745DC00000000          mov [ebp-24], 00000000
:00454DBF E9AF000000              jmp 00454E73
:00454DC4 8A4D14                  mov cl, byte ptr [ebp+14]
:00454DC7 51                      push ecx
:00454DC8 8A550C                  mov dl, byte ptr [ebp+0C]
:00454DCB 52                      push edx
:00454DCC 8A4508                  mov al, byte ptr [ebp+08]
:00454DCF 50                      push eax
:00454DD0 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00454DD3 8A5104                  mov dl, byte ptr [ecx+04]
:00454DD6 52                      push edx
:00454DD7 E8EADEFFFF              call 00452CC6
:00454DDC 83C410                  add esp, 00000010
:00454DDF 85C0                    test eax, eax
:00454DE1 750C                    jne 00454DEF
:00454DE3 C745DC00000000          mov [ebp-24], 00000000
:00454DEA E984000000              jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454DE1(C)
|
:00454DEF B978294B00              mov ecx, 004B2978
:00454DF4 E8E71BFEFF              call 004369E0
:00454DF9 85C0                    test eax, eax
:00454DFB 7707                    ja 00454E04
:00454DFD C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454DFB(C)
|
:00454E04 8A4508                  mov al, byte ptr [ebp+08]
:00454E07 50                      push eax
:00454E08 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00454E0B 8A5104                  mov dl, byte ptr [ecx+04]
:00454E0E 52                      push edx
:00454E0F E84225FEFF              call 00437356
:00454E14 83C408                  add esp, 00000008
:00454E17 85C0                    test eax, eax
:00454E19 7509                    jne 00454E24
:00454E1B C745DC00000000          mov [ebp-24], 00000000
:00454E22 EB4F                    jmp 00454E73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454E19(C)
|
:00454E24 8A4508                  mov al, byte ptr [ebp+08]
:00454E27 50                      push eax
:00454E28 8B4DB0                  mov ecx, dword ptr [ebp-50]
:00454E2B 8A5104                  mov dl, byte ptr [ecx+04]
:00454E2E 52                      push edx
:00454E2F E8CD32FEFF              call 00438101
:00454E34 83C408                  add esp, 00000008
:00454E37 8945D8                  mov dword ptr [ebp-28], eax
:00454E3A 8B75D8                  mov esi, dword ptr [ebp-28]
:00454E3D 6BF60A                  imul esi, 0000000A
:00454E40 B978294B00              mov ecx, 004B2978
:00454E45 E8961BFEFF              call 004369E0
:00454E4A 3BF0                    cmp esi, eax
:00454E4C 760F                    jbe 00454E5D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00454E4E 6A14                    push 00000014
:00454E50 E85B350200              call 004783B0
:00454E55 83C404                  add esp, 00000004
:00454E58 8945DC                  mov dword ptr [ebp-24], eax
:00454E5B EB0D                    jmp 00454E6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454E4C(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00454E5D 6A08                    push 00000008
:00454E5F E84C350200              call 004783B0
:00454E64 83C404                  add esp, 00000004
:00454E67 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454E5B(U)
|
:00454E6A EB07                    jmp 00454E73
:00454E6C C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00453D39(C), :00453D77(U), :00453DA2(U), :00453DC5(U), :00453E17(U)
|:00453E44(U), :00453E92(U), :00453E97(U), :00453EA3(U), :00454030(U)
|:0045405B(U), :00454075(U), :00454134(U), :004541A8(U), :0045424F(U)
|:004543FF(U), :0045446D(U), :0045453F(U), :004545AD(U), :00454658(U)
|:00454688(U), :004546E5(U), :0045475D(U), :00454806(U), :004548AF(U)
|:004548DA(U), :004548E6(U), :00454911(U), :00454923(U), :0045494E(U)
|:004549DD(U), :00454A08(U), :00454A8A(U), :00454AB5(U), :00454B37(U)
|:00454BC5(U), :00454C6C(U), :00454DB3(U), :00454DBF(U), :00454DEA(U)
|:00454E22(U), :00454E6A(U)
|
:00454E73 8B45DC                  mov eax, dword ptr [ebp-24]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00453D17(U)
|
:00454E76 5E                      pop esi
:00454E77 8BE5                    mov esp, ebp
:00454E79 5D                      pop ebp
:00454E7A C21000                  ret 0010



:00454E7D A83E4500                DWORD 00453EA8
:00454E81 7C3D4500                DWORD 00453D7C
:00454E85 A83E4500                DWORD 00453EA8
:00454E89 9C3E4500                DWORD 00453E9C
:00454E8D A83E4500                DWORD 00453EA8
:00454E91 AD414500                DWORD 004541AD
:00454E95 54424500                DWORD 00454254
:00454E99 A83E4500                DWORD 00453EA8
:00454E9D 72444500                DWORD 00454472
:00454EA1 04444500                DWORD 00454404
:00454EA5 A83E4500                DWORD 00453EA8
:00454EA9 513D4500                DWORD 00453D51
:00454EAD 35404500                DWORD 00454035
:00454EB1 44454500                DWORD 00454544
:00454EB5 35404500                DWORD 00454035
:00454EB9 44454500                DWORD 00454544
:00454EBD B2454500                DWORD 004545B2
:00454EC1 35404500                DWORD 00454035
:00454EC5 39414500                DWORD 00454139
:00454EC9 5D464500                DWORD 0045465D
:00454ECD 8D464500                DWORD 0045468D
:00454ED1 EA464500                DWORD 004546EA
:00454ED5 62474500                DWORD 00454762
:00454ED9 0B484500                DWORD 0045480B
:00454EDD B4484500                DWORD 004548B4
:00454EE1 EB484500                DWORD 004548EB
:00454EE5 28494500                DWORD 00454928
:00454EE9 E2494500                DWORD 004549E2
:00454EED 8F4A4500                DWORD 00454A8F
:00454EF1 3C4B4500                DWORD 00454B3C
:00454EF5 CA4B4500                DWORD 00454BCA
:00454EF9 714C4500                DWORD 00454C71
:00454EFD 6C4E4500                DWORD 00454E6C
:00454F01 C44D4500                DWORD 00454DC4
:00454F05 6C4E4500                DWORD 00454E6C
:00454F09 B84D4500                DWORD 00454DB8
:00454F0D 734E4500                DWORD 00454E73


:00454F11 0000000000              BYTE  5 DUP(0)


:00454F16 0102                    add dword ptr [edx], eax
:00454F18 030404                  add eax, dword ptr [esp+eax]
:00454F1B 0404                    add al, 04
:00454F1D 0405                    add al, 05
:00454F1F 0505050607              add eax, 07060505
:00454F24 07                      pop es
:00454F25 07                      pop es
:00454F26 07                      pop es
:00454F27 07                      pop es
:00454F28 0808                    or byte ptr [eax], cl
:00454F2A 090A                    or dword ptr [edx], ecx
:00454F2C 0A0B                    or cl, byte ptr [ebx]
:00454F2E 0C0C                    or al, 0C
:00454F30 0C0D                    or al, 0D
:00454F32 0E                      push cs
:00454F33 0F                      BYTE 0fh
:00454F34 1011                    adc byte ptr [ecx], dl
:00454F36 1111                    adc dword ptr [ecx], edx
:00454F38 1213                    adc dl, byte ptr [ebx]
:00454F3A 131414                  adc edx, dword ptr [esp+edx]
:00454F3D 1515161718              adc eax, 18171615
:00454F42 1818                    sbb byte ptr [eax], bl
:00454F44 1919                    sbb dword ptr [ecx], ebx
:00454F46 1A1B                    sbb bl, byte ptr [ebx]
:00454F48 1C1D                    sbb al, 1D
:00454F4A 1E                      push ds
:00454F4B 1F                      pop ds
:00454F4C 2021                    and byte ptr [ecx], ah
:00454F4E 2223                    and ah, byte ptr [ebx]
:00454F50 2323                    and esp, dword ptr [ebx]

:00454F52 9A3F4500                DWORD 00453F9A
:00454F56 30404500                DWORD 00454030
:00454F5A 30404500                DWORD 00454030
:00454F5E 30404500                DWORD 00454030
:00454F62 07404500                DWORD 00454007
:00454F66 30404500                DWORD 00454030
:00454F6A D53F4500                DWORD 00453FD5
:00454F6E 30404500                DWORD 00454030
:00454F72 FC3F4500                DWORD 00453FFC
:00454F76 E63F4500                DWORD 00453FE6
:00454F7A F13F4500                DWORD 00453FF1
:00454F7E 21404500                DWORD 00454021



* Referenced by a CALL at Addresses:
|:0045496F   , :004549B0   , :00454A29   , :00454A6A   , :00454AD6   
|:00454B17   
|
:00454F82 55                      push ebp
:00454F83 8BEC                    mov ebp, esp
:00454F85 83EC08                  sub esp, 00000008
:00454F88 C645FC00                mov [ebp-04], 00
:00454F8C 8A4508                  mov al, byte ptr [ebp+08]
:00454F8F 50                      push eax
:00454F90 E8DCC8FFFF              call 00451871
:00454F95 83C404                  add esp, 00000004
:00454F98 85C0                    test eax, eax
:00454F9A 7404                    je 00454FA0
:00454F9C 32C0                    xor al, al
:00454F9E EB35                    jmp 00454FD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454F9A(C)
|
:00454FA0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00454FA3 81E1FF000000            and ecx, 000000FF
:00454FA9 894DF8                  mov dword ptr [ebp-08], ecx
:00454FAC 837DF806                cmp dword ptr [ebp-08], 00000006
:00454FB0 7720                    ja 00454FD2
:00454FB2 8B55F8                  mov edx, dword ptr [ebp-08]
:00454FB5 FF2495D94F4500          jmp dword ptr [4*edx+00454FD9]
:00454FBC C645FC00                mov [ebp-04], 00
:00454FC0 EB10                    jmp 00454FD2
:00454FC2 C645FC05                mov [ebp-04], 05
:00454FC6 EB0A                    jmp 00454FD2
:00454FC8 C645FC1D                mov [ebp-04], 1D
:00454FCC EB04                    jmp 00454FD2
:00454FCE C645FC1F                mov [ebp-04], 1F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00454FB0(C), :00454FC0(U), :00454FC6(U), :00454FCC(U)
|
:00454FD2 8A45FC                  mov al, byte ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00454F9E(U)
|
:00454FD5 8BE5                    mov esp, ebp
:00454FD7 5D                      pop ebp
:00454FD8 C3                      ret



:00454FD9 BC4F4500                DWORD 00454FBC
:00454FDD BC4F4500                DWORD 00454FBC
:00454FE1 BC4F4500                DWORD 00454FBC
:00454FE5 BC4F4500                DWORD 00454FBC
:00454FE9 C24F4500                DWORD 00454FC2
:00454FED C84F4500                DWORD 00454FC8
:00454FF1 CE4F4500                DWORD 00454FCE


:00454FF5 55                      push ebp
:00454FF6 8BEC                    mov ebp, esp
:00454FF8 83EC24                  sub esp, 00000024
:00454FFB 56                      push esi
:00454FFC 894DE0                  mov dword ptr [ebp-20], ecx
:00454FFF 8B45E0                  mov eax, dword ptr [ebp-20]
:00455002 8B08                    mov ecx, dword ptr [eax]
:00455004 6BC950                  imul ecx, 00000050
:00455007 81C1787F4900            add ecx, 00497F78
:0045500D 894DE8                  mov dword ptr [ebp-18], ecx
:00455010 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00455013 81E1FF000000            and ecx, 000000FF
:00455019 6BC924                  imul ecx, 00000024
:0045501C 81C1B83B4B00            add ecx, 004B3BB8
:00455022 E8B919FEFF              call 004369E0
:00455027 6BC050                  imul eax, 00000050
:0045502A 05787F4900              add eax, 00497F78
:0045502F 8945F0                  mov dword ptr [ebp-10], eax
:00455032 8B5508                  mov edx, dword ptr [ebp+08]
:00455035 81E2FF000000            and edx, 000000FF
:0045503B 81E2F0000000            and edx, 000000F0
:00455041 C1FA04                  sar edx, 04
:00455044 8855F8                  mov byte ptr [ebp-08], dl
:00455047 C745F400000000          mov [ebp-0C], 00000000
:0045504E C745E400000000          mov [ebp-1C], 00000000
:00455055 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00455058 E843E1FAFF              call 004031A0
:0045505D 8845EC                  mov byte ptr [ebp-14], al
:00455060 C745FC00000000          mov [ebp-04], 00000000
:00455067 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045506A E861700000              call 0045C0D0
:0045506F 25FF000000              and eax, 000000FF
:00455074 83F802                  cmp eax, 00000002
:00455077 7407                    je 00455080
:00455079 33C0                    xor eax, eax
:0045507B E9F7010000              jmp 00455277

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455077(C)
|
:00455080 8B4508                  mov eax, dword ptr [ebp+08]
:00455083 25FF000000              and eax, 000000FF
:00455088 83E001                  and eax, 00000001
:0045508B 85C0                    test eax, eax
:0045508D 0F84E3000000            je 00455176
:00455093 C745FC1E000000          mov [ebp-04], 0000001E
:0045509A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045509D 81E1FF000000            and ecx, 000000FF
:004550A3 83F903                  cmp ecx, 00000003
:004550A6 750D                    jne 004550B5
:004550A8 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004550AB E83ACDFAFF              call 00401DEA
:004550B0 8945F4                  mov dword ptr [ebp-0C], eax
:004550B3 EB26                    jmp 004550DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004550A6(C)
|
:004550B5 8B75F8                  mov esi, dword ptr [ebp-08]
:004550B8 81E6FF000000            and esi, 000000FF
:004550BE 69F6C8000000            imul esi, 000000C8
:004550C4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004550C7 E8D4ADFBFF              call 0040FEA0
:004550CC 25FF000000              and eax, 000000FF
:004550D1 8D9406C8000000          lea edx, dword ptr [esi+eax+000000C8]
:004550D8 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004550B3(U)
|
:004550DB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004550DE E807CDFAFF              call 00401DEA
:004550E3 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004550E6 2B4110                  sub eax, dword ptr [ecx+10]
:004550E9 3945F4                  cmp dword ptr [ebp-0C], eax
:004550EC 7D08                    jge 004550F6
:004550EE 8B55F4                  mov edx, dword ptr [ebp-0C]
:004550F1 8955DC                  mov dword ptr [ebp-24], edx
:004550F4 EB11                    jmp 00455107

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004550EC(C)
|
:004550F6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004550F9 E8ECCCFAFF              call 00401DEA
:004550FE 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00455101 2B4110                  sub eax, dword ptr [ecx+10]
:00455104 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004550F4(U)
|
:00455107 8B55DC                  mov edx, dword ptr [ebp-24]
:0045510A 8955F4                  mov dword ptr [ebp-0C], edx
:0045510D 8B45E0                  mov eax, dword ptr [ebp-20]
:00455110 8B75F4                  mov esi, dword ptr [ebp-0C]
:00455113 037010                  add esi, dword ptr [eax+10]
:00455116 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00455119 E8CCCCFAFF              call 00401DEA
:0045511E 3BF0                    cmp esi, eax
:00455120 7209                    jb 0045512B
:00455122 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00455125 83C102                  add ecx, 00000002
:00455128 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455120(C)
|
:0045512B 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045512E E8B7CCFAFF              call 00401DEA
:00455133 8B55E0                  mov edx, dword ptr [ebp-20]
:00455136 2B4210                  sub eax, dword ptr [edx+10]
:00455139 6BC005                  imul eax, 00000005
:0045513C 33D2                    xor edx, edx
:0045513E F775F4                  div [ebp-0C]
:00455141 83F803                  cmp eax, 00000003
:00455144 7709                    ja 0045514F
:00455146 8B45FC                  mov eax, dword ptr [ebp-04]
:00455149 83E804                  sub eax, 00000004
:0045514C 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455144(C)
|
:0045514F 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00455152 8B7110                  mov esi, dword ptr [ecx+10]
:00455155 6BF60A                  imul esi, 0000000A
:00455158 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045515B E88ACCFAFF              call 00401DEA
:00455160 8BC8                    mov ecx, eax
:00455162 8BC6                    mov eax, esi
:00455164 33D2                    xor edx, edx
:00455166 F7F1                    div ecx
:00455168 83F802                  cmp eax, 00000002
:0045516B 7709                    ja 00455176
:0045516D 8B55FC                  mov edx, dword ptr [ebp-04]
:00455170 83C205                  add edx, 00000005
:00455173 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045508D(C), :0045516B(C)
|
:00455176 8B4508                  mov eax, dword ptr [ebp+08]
:00455179 25FF000000              and eax, 000000FF
:0045517E 83E002                  and eax, 00000002
:00455181 85C0                    test eax, eax
:00455183 0F84CD000000            je 00455256
:00455189 C745FC1C000000          mov [ebp-04], 0000001C
:00455190 68FF000000              push 000000FF
:00455195 68FF000000              push 000000FF
:0045519A 6A00                    push 00000000
:0045519C 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045519F 51                      push ecx
:004551A0 8B55E0                  mov edx, dword ptr [ebp-20]
:004551A3 8A4204                  mov al, byte ptr [edx+04]
:004551A6 50                      push eax
:004551A7 E8861EFEFF              call 00437032
:004551AC 83C414                  add esp, 00000014
:004551AF 25FF000000              and eax, 000000FF
:004551B4 8945E4                  mov dword ptr [ebp-1C], eax
:004551B7 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004551BA 8B75E4                  mov esi, dword ptr [ebp-1C]
:004551BD 037114                  add esi, dword ptr [ecx+14]
:004551C0 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004551C3 E853CCFAFF              call 00401E1B
:004551C8 3BF0                    cmp esi, eax
:004551CA 7209                    jb 004551D5
:004551CC 8B55FC                  mov edx, dword ptr [ebp-04]
:004551CF 83C202                  add edx, 00000002
:004551D2 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004551CA(C)
|
:004551D5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004551D8 E83ECCFAFF              call 00401E1B
:004551DD 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004551E0 2B4114                  sub eax, dword ptr [ecx+14]
:004551E3 6BC005                  imul eax, 00000005
:004551E6 33D2                    xor edx, edx
:004551E8 F775E4                  div [ebp-1C]
:004551EB 83F803                  cmp eax, 00000003
:004551EE 7709                    ja 004551F9
:004551F0 8B55FC                  mov edx, dword ptr [ebp-04]
:004551F3 83EA04                  sub edx, 00000004
:004551F6 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004551EE(C)
|
:004551F9 8B45E0                  mov eax, dword ptr [ebp-20]
:004551FC 8B7014                  mov esi, dword ptr [eax+14]
:004551FF 6BF60A                  imul esi, 0000000A
:00455202 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00455205 E811CCFAFF              call 00401E1B
:0045520A 8BC8                    mov ecx, eax
:0045520C 8BC6                    mov eax, esi
:0045520E 33D2                    xor edx, edx
:00455210 F7F1                    div ecx
:00455212 83F802                  cmp eax, 00000002
:00455215 7709                    ja 00455220
:00455217 8B55FC                  mov edx, dword ptr [ebp-04]
:0045521A 83C204                  add edx, 00000004
:0045521D 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455215(C)
|
:00455220 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00455223 E8C818FEFF              call 00436AF0
:00455228 25FF000000              and eax, 000000FF
:0045522D 83F80A                  cmp eax, 0000000A
:00455230 7509                    jne 0045523B
:00455232 8B45FC                  mov eax, dword ptr [ebp-04]
:00455235 83C005                  add eax, 00000005
:00455238 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455230(C)
|
:0045523B 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045523E E8AD18FEFF              call 00436AF0
:00455243 25FF000000              and eax, 000000FF
:00455248 83F80D                  cmp eax, 0000000D
:0045524B 7509                    jne 00455256
:0045524D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00455250 83C105                  add ecx, 00000005
:00455253 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455183(C), :0045524B(C)
|
:00455256 8B55E0                  mov edx, dword ptr [ebp-20]
:00455259 33C0                    xor eax, eax
:0045525B 8A4204                  mov al, byte ptr [edx+04]
:0045525E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00455261 81E1FF000000            and ecx, 000000FF
:00455267 3BC1                    cmp eax, ecx
:00455269 7509                    jne 00455274
:0045526B 8B55FC                  mov edx, dword ptr [ebp-04]
:0045526E 83C201                  add edx, 00000001
:00455271 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455269(C)
|
:00455274 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045507B(U)
|
:00455277 5E                      pop esi
:00455278 8BE5                    mov esp, ebp
:0045527A 5D                      pop ebp
:0045527B C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0045474C   , :00454BBD   
|
:0045527E 55                      push ebp
:0045527F 8BEC                    mov ebp, esp
:00455281 83EC24                  sub esp, 00000024
:00455284 56                      push esi
:00455285 894DE4                  mov dword ptr [ebp-1C], ecx
:00455288 8B45E4                  mov eax, dword ptr [ebp-1C]
:0045528B 8B08                    mov ecx, dword ptr [eax]
:0045528D 6BC950                  imul ecx, 00000050
:00455290 81C1787F4900            add ecx, 00497F78
:00455296 894DEC                  mov dword ptr [ebp-14], ecx
:00455299 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045529C 81E1FF000000            and ecx, 000000FF
:004552A2 6BC924                  imul ecx, 00000024
:004552A5 81C1B83B4B00            add ecx, 004B3BB8
:004552AB E83017FEFF              call 004369E0
:004552B0 6BC050                  imul eax, 00000050
:004552B3 05787F4900              add eax, 00497F78
:004552B8 8945F4                  mov dword ptr [ebp-0C], eax
:004552BB C745F800000000          mov [ebp-08], 00000000
:004552C2 C745E800000000          mov [ebp-18], 00000000
:004552C9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004552CC E8CFDEFAFF              call 004031A0
:004552D1 8845F0                  mov byte ptr [ebp-10], al
:004552D4 C745FC00000000          mov [ebp-04], 00000000
:004552DB 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004552DE E8ED6D0000              call 0045C0D0
:004552E3 25FF000000              and eax, 000000FF
:004552E8 83F802                  cmp eax, 00000002
:004552EB 7407                    je 004552F4
:004552ED 33C0                    xor eax, eax
:004552EF E98B020000              jmp 0045557F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004552EB(C)
|
:004552F4 8B5508                  mov edx, dword ptr [ebp+08]
:004552F7 81E2FF000000            and edx, 000000FF
:004552FD 85D2                    test edx, edx
:004552FF 0F85AA010000            jne 004554AF
:00455305 C745FC1E000000          mov [ebp-04], 0000001E
:0045530C 8B4510                  mov eax, dword ptr [ebp+10]
:0045530F 25FF000000              and eax, 000000FF
:00455314 8945E0                  mov dword ptr [ebp-20], eax
:00455317 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045531A 83E928                  sub ecx, 00000028
:0045531D 894DE0                  mov dword ptr [ebp-20], ecx
:00455320 837DE007                cmp dword ptr [ebp-20], 00000007
:00455324 0F87D0000000            ja 004553FA
:0045532A 8B55E0                  mov edx, dword ptr [ebp-20]
:0045532D FF249586554500          jmp dword ptr [4*edx+00455586]
:00455334 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00455337 81E1FF000000            and ecx, 000000FF
:0045533D 6BC924                  imul ecx, 00000024
:00455340 81C1B83B4B00            add ecx, 004B3BB8
:00455346 E880DBFDFF              call 00432ECB
:0045534B C1E803                  shr eax, 03
:0045534E 83C028                  add eax, 00000028
:00455351 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00455354 6A02                    push 00000002
:00455356 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455359 E81217FEFF              call 00436A70
:0045535E 85C0                    test eax, eax
:00455360 752F                    jne 00455391
:00455362 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455365 E82618FEFF              call 00436B90
:0045536A 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0045536C 68C8000000              push 000000C8
:00455371 E83A300200              call 004783B0
:00455376 83C404                  add esp, 00000004
:00455379 3BF0                    cmp esi, eax
:0045537B 7614                    jbe 00455391

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045537D 6A06                    push 00000006
:0045537F E82C300200              call 004783B0
:00455384 83C404                  add esp, 00000004
:00455387 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045538A 8D540105                lea edx, dword ptr [ecx+eax+05]
:0045538E 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455360(C), :0045537B(C)
|
:00455391 EB67                    jmp 004553FA
:00455393 8B45E4                  mov eax, dword ptr [ebp-1C]
:00455396 8B08                    mov ecx, dword ptr [eax]
:00455398 6BC950                  imul ecx, 00000050
:0045539B 81C1787F4900            add ecx, 00497F78
:004553A1 E844CAFAFF              call 00401DEA
:004553A6 8945F8                  mov dword ptr [ebp-08], eax
:004553A9 EB4F                    jmp 004553FA
:004553AB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004553AE 81E1FF000000            and ecx, 000000FF
:004553B4 6BC924                  imul ecx, 00000024
:004553B7 81C1B83B4B00            add ecx, 004B3BB8
:004553BD E809DBFDFF              call 00432ECB
:004553C2 C1E803                  shr eax, 03
:004553C5 83C028                  add eax, 00000028
:004553C8 8945F8                  mov dword ptr [ebp-08], eax
:004553CB 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004553CE E8BD17FEFF              call 00436B90
:004553D3 8BF0                    mov esi, eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:004553D5 68C8000000              push 000000C8
:004553DA E8D12F0200              call 004783B0
:004553DF 83C404                  add esp, 00000004
:004553E2 3BF0                    cmp esi, eax
:004553E4 7614                    jbe 004553FA

* Possible Reference to String Resource ID=00006: ""
                                  |
:004553E6 6A06                    push 00000006
:004553E8 E8C32F0200              call 004783B0
:004553ED 83C404                  add esp, 00000004
:004553F0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004553F3 8D540105                lea edx, dword ptr [ecx+eax+05]
:004553F7 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455324(C), :00455391(U), :004553A9(U), :004553E4(C)
|
:004553FA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004553FD E8E8C9FAFF              call 00401DEA
:00455402 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455405 2B4110                  sub eax, dword ptr [ecx+10]
:00455408 3945F8                  cmp dword ptr [ebp-08], eax
:0045540B 7D08                    jge 00455415
:0045540D 8B55F8                  mov edx, dword ptr [ebp-08]
:00455410 8955DC                  mov dword ptr [ebp-24], edx
:00455413 EB11                    jmp 00455426

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045540B(C)
|
:00455415 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00455418 E8CDC9FAFF              call 00401DEA
:0045541D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455420 2B4110                  sub eax, dword ptr [ecx+10]
:00455423 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455413(U)
|
:00455426 8B55DC                  mov edx, dword ptr [ebp-24]
:00455429 8955F8                  mov dword ptr [ebp-08], edx
:0045542C 8B45E4                  mov eax, dword ptr [ebp-1C]
:0045542F 8B75F8                  mov esi, dword ptr [ebp-08]
:00455432 037010                  add esi, dword ptr [eax+10]
:00455435 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00455438 E8ADC9FAFF              call 00401DEA
:0045543D 3BF0                    cmp esi, eax
:0045543F 7209                    jb 0045544A
:00455441 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00455444 83C102                  add ecx, 00000002
:00455447 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045543F(C)
|
:0045544A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045544D E898C9FAFF              call 00401DEA
:00455452 8B55E4                  mov edx, dword ptr [ebp-1C]
:00455455 2B4210                  sub eax, dword ptr [edx+10]
:00455458 6BC005                  imul eax, 00000005
:0045545B 33D2                    xor edx, edx
:0045545D F775F8                  div [ebp-08]
:00455460 83F803                  cmp eax, 00000003
:00455463 7709                    ja 0045546E
:00455465 8B45FC                  mov eax, dword ptr [ebp-04]
:00455468 83E804                  sub eax, 00000004
:0045546B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455463(C)
|
:0045546E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455471 8B7110                  mov esi, dword ptr [ecx+10]
:00455474 6BF60A                  imul esi, 0000000A
:00455477 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045547A E86BC9FAFF              call 00401DEA
:0045547F 8BC8                    mov ecx, eax
:00455481 8BC6                    mov eax, esi
:00455483 33D2                    xor edx, edx
:00455485 F7F1                    div ecx
:00455487 83F802                  cmp eax, 00000002
:0045548A 7709                    ja 00455495
:0045548C 8B55FC                  mov edx, dword ptr [ebp-04]
:0045548F 83C204                  add edx, 00000004
:00455492 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045548A(C)
|
:00455495 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455498 E8DFB6FFFF              call 00450B7C
:0045549D 85C0                    test eax, eax
:0045549F 7409                    je 004554AA
:004554A1 8B45FC                  mov eax, dword ptr [ebp-04]
:004554A4 83C004                  add eax, 00000004
:004554A7 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045549F(C)
|
:004554AA E9AF000000              jmp 0045555E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004552FF(C)
|
:004554AF C745FC1C000000          mov [ebp-04], 0000001C
:004554B6 8A4D10                  mov cl, byte ptr [ebp+10]
:004554B9 51                      push ecx
:004554BA 8A550C                  mov dl, byte ptr [ebp+0C]
:004554BD 52                      push edx
:004554BE 6A00                    push 00000000
:004554C0 8B4510                  mov eax, dword ptr [ebp+10]
:004554C3 25FF000000              and eax, 000000FF
:004554C8 99                      cdq
:004554C9 B921000000              mov ecx, 00000021
:004554CE F7F9                    idiv ecx
:004554D0 52                      push edx
:004554D1 8B55E4                  mov edx, dword ptr [ebp-1C]
:004554D4 8A4204                  mov al, byte ptr [edx+04]
:004554D7 50                      push eax
:004554D8 E8551BFEFF              call 00437032
:004554DD 83C414                  add esp, 00000014
:004554E0 25FF000000              and eax, 000000FF
:004554E5 8945E8                  mov dword ptr [ebp-18], eax
:004554E8 837DE800                cmp dword ptr [ebp-18], 00000000
:004554EC 7507                    jne 004554F5
:004554EE 33C0                    xor eax, eax
:004554F0 E98A000000              jmp 0045557F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004554EC(C)
|
:004554F5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004554F8 8B75E8                  mov esi, dword ptr [ebp-18]
:004554FB 037114                  add esi, dword ptr [ecx+14]
:004554FE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00455501 E815C9FAFF              call 00401E1B
:00455506 3BF0                    cmp esi, eax
:00455508 7209                    jb 00455513
:0045550A 8B55FC                  mov edx, dword ptr [ebp-04]
:0045550D 83C202                  add edx, 00000002
:00455510 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455508(C)
|
:00455513 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00455516 E800C9FAFF              call 00401E1B
:0045551B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045551E 2B4114                  sub eax, dword ptr [ecx+14]
:00455521 6BC005                  imul eax, 00000005
:00455524 33D2                    xor edx, edx
:00455526 F775E8                  div [ebp-18]
:00455529 83F803                  cmp eax, 00000003
:0045552C 7709                    ja 00455537
:0045552E 8B55FC                  mov edx, dword ptr [ebp-04]
:00455531 83EA04                  sub edx, 00000004
:00455534 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045552C(C)
|
:00455537 8B45E4                  mov eax, dword ptr [ebp-1C]
:0045553A 8B7014                  mov esi, dword ptr [eax+14]
:0045553D 6BF60A                  imul esi, 0000000A
:00455540 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00455543 E8D3C8FAFF              call 00401E1B
:00455548 8BC8                    mov ecx, eax
:0045554A 8BC6                    mov eax, esi
:0045554C 33D2                    xor edx, edx
:0045554E F7F1                    div ecx
:00455550 83F802                  cmp eax, 00000002
:00455553 7709                    ja 0045555E
:00455555 8B55FC                  mov edx, dword ptr [ebp-04]
:00455558 83C228                  add edx, 00000028
:0045555B 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004554AA(U), :00455553(C)
|
:0045555E 8B45E4                  mov eax, dword ptr [ebp-1C]
:00455561 33C9                    xor ecx, ecx
:00455563 8A4804                  mov cl, byte ptr [eax+04]
:00455566 8B550C                  mov edx, dword ptr [ebp+0C]
:00455569 81E2FF000000            and edx, 000000FF
:0045556F 3BCA                    cmp ecx, edx
:00455571 7509                    jne 0045557C
:00455573 8B45FC                  mov eax, dword ptr [ebp-04]
:00455576 83C001                  add eax, 00000001
:00455579 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455571(C)
|
:0045557C 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004552EF(U), :004554F0(U)
|
:0045557F 5E                      pop esi
:00455580 8BE5                    mov esp, ebp
:00455582 5D                      pop ebp
:00455583 C20C00                  ret 000C



:00455586 93534500                DWORD 00455393
:0045558A AB534500                DWORD 004553AB
:0045558E 93534500                DWORD 00455393
:00455592 AB534500                DWORD 004553AB
:00455596 34534500                DWORD 00455334
:0045559A 34534500                DWORD 00455334
:0045559E 93534500                DWORD 00455393
:004555A2 AB534500                DWORD 004553AB



* Referenced by a CALL at Address:
|:0045584F   
|
:004555A6 55                      push ebp
:004555A7 8BEC                    mov ebp, esp
:004555A9 83EC10                  sub esp, 00000010
:004555AC 894DF4                  mov dword ptr [ebp-0C], ecx
:004555AF 8B4508                  mov eax, dword ptr [ebp+08]
:004555B2 50                      push eax
:004555B3 E8A0A2FFFF              call 0044F858
:004555B8 83C404                  add esp, 00000004
:004555BB 8845F8                  mov byte ptr [ebp-08], al
:004555BE C745FC00000000          mov [ebp-04], 00000000
:004555C5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004555C8 81E1FF000000            and ecx, 000000FF
:004555CE 894DF0                  mov dword ptr [ebp-10], ecx
:004555D1 8B55F0                  mov edx, dword ptr [ebp-10]
:004555D4 83EA0F                  sub edx, 0000000F
:004555D7 8955F0                  mov dword ptr [ebp-10], edx
:004555DA 837DF010                cmp dword ptr [ebp-10], 00000010
:004555DE 774E                    ja 0045562E
:004555E0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004555E3 33C0                    xor eax, eax
:004555E5 8A81DD564500            mov al, byte ptr [ecx+004556DD]
:004555EB FF2485C5564500          jmp dword ptr [4*eax+004556C5]

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004555F2 C745FC08000000          mov [ebp-04], 00000008
:004555F9 E9BE000000              jmp 004556BC

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004555FE C745FC05000000          mov [ebp-04], 00000005
:00455605 E9B2000000              jmp 004556BC

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045560A C745FC06000000          mov [ebp-04], 00000006
:00455611 E9A6000000              jmp 004556BC

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00455616 C745FC05000000          mov [ebp-04], 00000005
:0045561D E99A000000              jmp 004556BC

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00455622 C745FC04000000          mov [ebp-04], 00000004
:00455629 E98E000000              jmp 004556BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004555DE(C)
|
:0045562E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455631 E899DAFDFF              call 004330CF
:00455636 25FF000000              and eax, 000000FF
:0045563B 83F80A                  cmp eax, 0000000A
:0045563E 7E13                    jle 00455653
:00455640 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455643 E887DAFDFF              call 004330CF
:00455648 25FF000000              and eax, 000000FF
:0045564D 83E80A                  sub eax, 0000000A
:00455650 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045563E(C)
|
:00455653 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455656 E89514FEFF              call 00436AF0
:0045565B 25FF000000              and eax, 000000FF
:00455660 83F80C                  cmp eax, 0000000C
:00455663 7522                    jne 00455687
:00455665 8B55F8                  mov edx, dword ptr [ebp-08]
:00455668 81E2FF000000            and edx, 000000FF
:0045566E 83FA0A                  cmp edx, 0000000A
:00455671 740D                    je 00455680
:00455673 8B45F8                  mov eax, dword ptr [ebp-08]
:00455676 25FF000000              and eax, 000000FF
:0045567B 83F80D                  cmp eax, 0000000D
:0045567E 7507                    jne 00455687

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455671(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00455680 C745FC03000000          mov [ebp-04], 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455663(C), :0045567E(C)
|
:00455687 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045568A E86114FEFF              call 00436AF0
:0045568F 25FF000000              and eax, 000000FF
:00455694 83F80B                  cmp eax, 0000000B
:00455697 7523                    jne 004556BC
:00455699 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045569C 81E1FF000000            and ecx, 000000FF
:004556A2 83F905                  cmp ecx, 00000005
:004556A5 740E                    je 004556B5
:004556A7 8B55F8                  mov edx, dword ptr [ebp-08]
:004556AA 81E2FF000000            and edx, 000000FF
:004556B0 83FA07                  cmp edx, 00000007
:004556B3 7507                    jne 004556BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004556A5(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004556B5 C745FC03000000          mov [ebp-04], 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004555F9(U), :00455605(U), :00455611(U), :0045561D(U), :00455629(U)
|:00455697(C), :004556B3(C)
|
:004556BC 8B45FC                  mov eax, dword ptr [ebp-04]
:004556BF 8BE5                    mov esp, ebp
:004556C1 5D                      pop ebp
:004556C2 C20400                  ret 0004



:004556C5 F2554500                DWORD 004555F2
:004556C9 22564500                DWORD 00455622
:004556CD 16564500                DWORD 00455616
:004556D1 0A564500                DWORD 0045560A
:004556D5 FE554500                DWORD 004555FE
:004556D9 2E564500                DWORD 0045562E


:004556DD 0001                    add byte ptr [ecx], al
:004556DF 0203                    add al, byte ptr [ebx]
:004556E1 0505050505              add eax, 05050505
:004556E6 0505050505              add eax, 05050505
:004556EB 05                      BYTE 05h
:004556EC 05                      BYTE 05h
:004556ED 04                      BYTE 04h


* Referenced by a CALL at Addresses:
|:00451FC0   , :004523B8   
|
:004556EE 55                      push ebp
:004556EF 8BEC                    mov ebp, esp
:004556F1 83EC20                  sub esp, 00000020
:004556F4 894DEC                  mov dword ptr [ebp-14], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004556F7 6A04                    push 00000004
:004556F9 6A00                    push 00000000
:004556FB 6A00                    push 00000000
:004556FD B9007D4A00              mov ecx, 004A7D00
:00455702 E889380200              call 00478F90
:00455707 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045570A 33D2                    xor edx, edx
:0045570C 8A11                    mov dl, byte ptr [ecx]
:0045570E 8D841080070000          lea eax, dword ptr [eax+edx+00000780]
:00455715 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455718 33D2                    xor edx, edx
:0045571A 8A5101                  mov dl, byte ptr [ecx+01]
:0045571D 33C9                    xor ecx, ecx
:0045571F 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:00455725 0FAFD1                  imul edx, ecx
:00455728 03C2                    add eax, edx
:0045572A 8945F8                  mov dword ptr [ebp-08], eax
:0045572D C645F400                mov [ebp-0C], 00
:00455731 C645FC00                mov [ebp-04], 00
:00455735 8B5508                  mov edx, dword ptr [ebp+08]
:00455738 52                      push edx
:00455739 E89EA0FFFF              call 0044F7DC
:0045573E 83C404                  add esp, 00000004
:00455741 25FF000000              and eax, 000000FF
:00455746 3DFF000000              cmp eax, 000000FF
:0045574B 741B                    je 00455768
:0045574D 8B45EC                  mov eax, dword ptr [ebp-14]
:00455750 83C005                  add eax, 00000005
:00455753 50                      push eax
:00455754 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455757 51                      push ecx
:00455758 E84318FEFF              call 00436FA0
:0045575D 83C408                  add esp, 00000008
:00455760 85C0                    test eax, eax
:00455762 0F841D020000            je 00455985

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045574B(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00455768 6A04                    push 00000004
:0045576A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045576D E87E16FEFF              call 00436DF0
:00455772 85C0                    test eax, eax
:00455774 0F8573010000            jne 004558ED
:0045577A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045577D E8FEFFFAFF              call 00405780
:00455782 25FF000000              and eax, 000000FF
:00455787 83F804                  cmp eax, 00000004
:0045578A 0F84B8000000            je 00455848

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00455790 6A04                    push 00000004
:00455792 6A00                    push 00000000
:00455794 6A00                    push 00000000
:00455796 B9007D4A00              mov ecx, 004A7D00
:0045579B E8F0370200              call 00478F90
:004557A0 8B5508                  mov edx, dword ptr [ebp+08]
:004557A3 33C9                    xor ecx, ecx
:004557A5 8A0A                    mov cl, byte ptr [edx]
:004557A7 03C1                    add eax, ecx
:004557A9 8B5508                  mov edx, dword ptr [ebp+08]
:004557AC 33C9                    xor ecx, ecx
:004557AE 8A4A01                  mov cl, byte ptr [edx+01]
:004557B1 33D2                    xor edx, edx
:004557B3 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:004557B9 0FAFCA                  imul ecx, edx
:004557BC 33D2                    xor edx, edx
:004557BE 8A1408                  mov dl, byte ptr [eax+ecx]
:004557C1 81FAFF000000            cmp edx, 000000FF
:004557C7 7517                    jne 004557E0
:004557C9 8B45EC                  mov eax, dword ptr [ebp-14]
:004557CC 83C005                  add eax, 00000005
:004557CF 50                      push eax
:004557D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004557D3 51                      push ecx
:004557D4 E8C717FEFF              call 00436FA0
:004557D9 83C408                  add esp, 00000008
:004557DC 85C0                    test eax, eax
:004557DE 740F                    je 004557EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004557C7(C)
|
:004557E0 8B5508                  mov edx, dword ptr [ebp+08]
:004557E3 52                      push edx
:004557E4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004557E7 E8FFB8FFFF              call 004510EB
:004557EC 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004557DE(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004557EF 6A04                    push 00000004
:004557F1 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004557F4 E87712FEFF              call 00436A70
:004557F9 85C0                    test eax, eax
:004557FB 750F                    jne 0045580C
:004557FD 8B4508                  mov eax, dword ptr [ebp+08]
:00455800 50                      push eax
:00455801 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00455804 E8D5DEFFFF              call 004536DE
:00455809 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004557FB(C)
|
:0045580C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045580F 81E1FF000000            and ecx, 000000FF
:00455815 8B55FC                  mov edx, dword ptr [ebp-04]
:00455818 81E2FF000000            and edx, 000000FF
:0045581E 3BCA                    cmp ecx, edx
:00455820 7E0D                    jle 0045582F
:00455822 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455825 25FF000000              and eax, 000000FF
:0045582A 8945E8                  mov dword ptr [ebp-18], eax
:0045582D EB0C                    jmp 0045583B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455820(C)
|
:0045582F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00455832 81E1FF000000            and ecx, 000000FF
:00455838 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045582D(U)
|
:0045583B 8B55F8                  mov edx, dword ptr [ebp-08]
:0045583E 8A02                    mov al, byte ptr [edx]
:00455840 0245E8                  add al, byte ptr [ebp-18]
:00455843 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00455846 8801                    mov byte ptr [ecx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045578A(C)
|
:00455848 8B5508                  mov edx, dword ptr [ebp+08]
:0045584B 52                      push edx
:0045584C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045584F E852FDFFFF              call 004555A6
:00455854 8945F0                  mov dword ptr [ebp-10], eax
:00455857 8B45F8                  mov eax, dword ptr [ebp-08]
:0045585A 33C9                    xor ecx, ecx
:0045585C 8A08                    mov cl, byte ptr [eax]
:0045585E BAFF000000              mov edx, 000000FF
:00455863 2BD1                    sub edx, ecx
:00455865 3955F0                  cmp dword ptr [ebp-10], edx
:00455868 7D08                    jge 00455872
:0045586A 8B45F0                  mov eax, dword ptr [ebp-10]
:0045586D 8945E4                  mov dword ptr [ebp-1C], eax
:00455870 EB11                    jmp 00455883

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455868(C)
|
:00455872 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00455875 33D2                    xor edx, edx
:00455877 8A11                    mov dl, byte ptr [ecx]
:00455879 B8FF000000              mov eax, 000000FF
:0045587E 2BC2                    sub eax, edx
:00455880 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455870(U)
|
:00455883 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00455886 8A11                    mov dl, byte ptr [ecx]
:00455888 0255E4                  add dl, byte ptr [ebp-1C]
:0045588B 8B45F8                  mov eax, dword ptr [ebp-08]
:0045588E 8810                    mov byte ptr [eax], dl
:00455890 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00455893 83C105                  add ecx, 00000005
:00455896 51                      push ecx
:00455897 8B5508                  mov edx, dword ptr [ebp+08]
:0045589A 52                      push edx
:0045589B E80017FEFF              call 00436FA0
:004558A0 83C408                  add esp, 00000008
:004558A3 85C0                    test eax, eax
:004558A5 7446                    je 004558ED
:004558A7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004558AA 25FF000000              and eax, 000000FF
:004558AF 85C0                    test eax, eax
:004558B1 753A                    jne 004558ED
:004558B3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004558B6 33D2                    xor edx, edx
:004558B8 8A11                    mov dl, byte ptr [ecx]
:004558BA B8FF000000              mov eax, 000000FF
:004558BF 2BC2                    sub eax, edx
:004558C1 83F801                  cmp eax, 00000001
:004558C4 7E09                    jle 004558CF
:004558C6 C745E001000000          mov [ebp-20], 00000001
:004558CD EB11                    jmp 004558E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004558C4(C)
|
:004558CF 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004558D2 33D2                    xor edx, edx
:004558D4 8A11                    mov dl, byte ptr [ecx]
:004558D6 B8FF000000              mov eax, 000000FF
:004558DB 2BC2                    sub eax, edx
:004558DD 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004558CD(U)
|
:004558E0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004558E3 8A11                    mov dl, byte ptr [ecx]
:004558E5 0255E0                  add dl, byte ptr [ebp-20]
:004558E8 8B45F8                  mov eax, dword ptr [ebp-08]
:004558EB 8810                    mov byte ptr [eax], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455774(C), :004558A5(C), :004558B1(C)
|
:004558ED 33C9                    xor ecx, ecx
:004558EF 8A0D604A4B00            mov cl, byte ptr [004B4A60]
:004558F5 81F9FF000000            cmp ecx, 000000FF
:004558FB 741B                    je 00455918
:004558FD 68604A4B00              push 004B4A60
:00455902 8B5508                  mov edx, dword ptr [ebp+08]
:00455905 52                      push edx
:00455906 E89516FEFF              call 00436FA0
:0045590B 83C408                  add esp, 00000008
:0045590E 85C0                    test eax, eax
:00455910 7406                    je 00455918
:00455912 8B45F8                  mov eax, dword ptr [ebp-08]
:00455915 C60000                  mov byte ptr [eax], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004558FB(C), :00455910(C)
|
:00455918 33C9                    xor ecx, ecx
:0045591A 8A0D704A4B00            mov cl, byte ptr [004B4A70]
:00455920 8B55F8                  mov edx, dword ptr [ebp-08]
:00455923 33C0                    xor eax, eax
:00455925 8A02                    mov al, byte ptr [edx]
:00455927 3BC8                    cmp ecx, eax
:00455929 7D5A                    jge 00455985
:0045592B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045592E 81E1FF000000            and ecx, 000000FF
:00455934 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455937 81E2FF000000            and edx, 000000FF
:0045593D 3BCA                    cmp ecx, edx
:0045593F 7E18                    jle 00455959
:00455941 A0684A4B00              mov al, byte ptr [004B4A68]
:00455946 A26C4A4B00              mov byte ptr [004B4A6C], al
:0045594B 8A0D544A4B00            mov cl, byte ptr [004B4A54]
:00455951 880D504A4B00            mov byte ptr [004B4A50], cl
:00455957 EB13                    jmp 0045596C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045593F(C)
|
:00455959 C6056C4A4B00FF          mov byte ptr [004B4A6C], FF
:00455960 8A15584A4B00            mov dl, byte ptr [004B4A58]
:00455966 8815504A4B00            mov byte ptr [004B4A50], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455957(U)
|
:0045596C 8B45F8                  mov eax, dword ptr [ebp-08]
:0045596F 8A08                    mov cl, byte ptr [eax]
:00455971 880D704A4B00            mov byte ptr [004B4A70], cl
:00455977 8B5508                  mov edx, dword ptr [ebp+08]
:0045597A 52                      push edx
:0045597B B9484A4B00              mov ecx, 004B4A48
:00455980 E81B11FEFF              call 00436AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455762(C), :00455929(C)
|
:00455985 8BE5                    mov esp, ebp
:00455987 5D                      pop ebp
:00455988 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00451445   , :00453CB8   , :00453CDF   
|
:0045598B 55                      push ebp
:0045598C 8BEC                    mov ebp, esp
:0045598E 83EC08                  sub esp, 00000008
:00455991 894DF8                  mov dword ptr [ebp-08], ecx
:00455994 8B4514                  mov eax, dword ptr [ebp+14]
:00455997 8945FC                  mov dword ptr [ebp-04], eax
:0045599A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045599D 81E1FF000000            and ecx, 000000FF
:004559A3 85C9                    test ecx, ecx
:004559A5 7519                    jne 004559C0
:004559A7 8B5514                  mov edx, dword ptr [ebp+14]
:004559AA 8A4508                  mov al, byte ptr [ebp+08]
:004559AD 8802                    mov byte ptr [edx], al
:004559AF 8B4D14                  mov ecx, dword ptr [ebp+14]
:004559B2 83C101                  add ecx, 00000001
:004559B5 894D14                  mov dword ptr [ebp+14], ecx
:004559B8 8B5514                  mov edx, dword ptr [ebp+14]
:004559BB C602FF                  mov byte ptr [edx], FF
:004559BE EB53                    jmp 00455A13

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004559A5(C)
|
:004559C0 8B450C                  mov eax, dword ptr [ebp+0C]
:004559C3 25FF000000              and eax, 000000FF
:004559C8 83F801                  cmp eax, 00000001
:004559CB 7523                    jne 004559F0
:004559CD 8A4D1C                  mov cl, byte ptr [ebp+1C]
:004559D0 51                      push ecx
:004559D1 8A5518                  mov dl, byte ptr [ebp+18]
:004559D4 52                      push edx
:004559D5 6A00                    push 00000000
:004559D7 8B4514                  mov eax, dword ptr [ebp+14]
:004559DA 50                      push eax
:004559DB 8A4D10                  mov cl, byte ptr [ebp+10]
:004559DE 51                      push ecx
:004559DF 8A5508                  mov dl, byte ptr [ebp+08]
:004559E2 52                      push edx
:004559E3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004559E6 E8780A0000              call 00456463
:004559EB 8945FC                  mov dword ptr [ebp-04], eax
:004559EE EB23                    jmp 00455A13

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004559CB(C)
|
:004559F0 68FF000000              push 000000FF
:004559F5 68FF000000              push 000000FF
:004559FA 6A01                    push 00000001
:004559FC 8B4514                  mov eax, dword ptr [ebp+14]
:004559FF 50                      push eax
:00455A00 8A4D10                  mov cl, byte ptr [ebp+10]
:00455A03 51                      push ecx
:00455A04 8A5508                  mov dl, byte ptr [ebp+08]
:00455A07 52                      push edx
:00455A08 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00455A0B E8530A0000              call 00456463
:00455A10 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004559BE(U), :004559EE(U)
|
:00455A13 8B45FC                  mov eax, dword ptr [ebp-04]
:00455A16 8BE5                    mov esp, ebp
:00455A18 5D                      pop ebp
:00455A19 C21800                  ret 0018



* Referenced by a CALL at Address:
|:004537EB   
|
:00455A1C 55                      push ebp
:00455A1D 8BEC                    mov ebp, esp
:00455A1F 83EC0C                  sub esp, 0000000C
:00455A22 894DF4                  mov dword ptr [ebp-0C], ecx
:00455A25 8B4514                  mov eax, dword ptr [ebp+14]
:00455A28 8945FC                  mov dword ptr [ebp-04], eax
:00455A2B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00455A2E 81E1FF000000            and ecx, 000000FF
:00455A34 85C9                    test ecx, ecx
:00455A36 753A                    jne 00455A72
:00455A38 8D5508                  lea edx, dword ptr [ebp+08]
:00455A3B 52                      push edx
:00455A3C E89B9DFFFF              call 0044F7DC
:00455A41 83C404                  add esp, 00000004
:00455A44 8845F8                  mov byte ptr [ebp-08], al
:00455A47 8B45F8                  mov eax, dword ptr [ebp-08]
:00455A4A 25FF000000              and eax, 000000FF
:00455A4F 3DFF000000              cmp eax, 000000FF
:00455A54 7514                    jne 00455A6A
:00455A56 8B4D14                  mov ecx, dword ptr [ebp+14]
:00455A59 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455A5C 8A4204                  mov al, byte ptr [edx+04]
:00455A5F 8801                    mov byte ptr [ecx], al
:00455A61 8B4D14                  mov ecx, dword ptr [ebp+14]
:00455A64 83C101                  add ecx, 00000001
:00455A67 894D14                  mov dword ptr [ebp+14], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455A54(C)
|
:00455A6A 8B5514                  mov edx, dword ptr [ebp+14]
:00455A6D C602FF                  mov byte ptr [edx], FF
:00455A70 EB55                    jmp 00455AC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455A36(C)
|
:00455A72 8B450C                  mov eax, dword ptr [ebp+0C]
:00455A75 25FF000000              and eax, 000000FF
:00455A7A 83F801                  cmp eax, 00000001
:00455A7D 7524                    jne 00455AA3
:00455A7F 8A4D1C                  mov cl, byte ptr [ebp+1C]
:00455A82 51                      push ecx
:00455A83 8A5518                  mov dl, byte ptr [ebp+18]
:00455A86 52                      push edx
:00455A87 6A00                    push 00000000
:00455A89 8B4514                  mov eax, dword ptr [ebp+14]
:00455A8C 50                      push eax
:00455A8D 8A4D10                  mov cl, byte ptr [ebp+10]
:00455A90 51                      push ecx
:00455A91 668B5508                mov dx, word ptr [ebp+08]
:00455A95 52                      push edx
:00455A96 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455A99 E8C2000000              call 00455B60
:00455A9E 8945FC                  mov dword ptr [ebp-04], eax
:00455AA1 EB24                    jmp 00455AC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455A7D(C)
|
:00455AA3 68FF000000              push 000000FF
:00455AA8 68FF000000              push 000000FF
:00455AAD 6A01                    push 00000001
:00455AAF 8B4514                  mov eax, dword ptr [ebp+14]
:00455AB2 50                      push eax
:00455AB3 8A4D10                  mov cl, byte ptr [ebp+10]
:00455AB6 51                      push ecx
:00455AB7 668B5508                mov dx, word ptr [ebp+08]
:00455ABB 52                      push edx
:00455ABC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455ABF E89C000000              call 00455B60
:00455AC4 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455A70(U), :00455AA1(U)
|
:00455AC7 8B45FC                  mov eax, dword ptr [ebp-04]
:00455ACA 8BE5                    mov esp, ebp
:00455ACC 5D                      pop ebp
:00455ACD C21800                  ret 0018



* Referenced by a CALL at Addresses:
|:00455D90   , :00455DB4   , :00455DD8   , :00455DFC   , :00455EC3   
|:00455EF0   , :00455F1C   , :00455F48   , :004560A6   , :004560C9   
|:004560EC   , :00456110   , :00456164   , :00456195   , :004561E0   
|:00456211   , :004562FB   , :004563E3   , :00456427   
|
:00455AD0 55                      push ebp
:00455AD1 8BEC                    mov ebp, esp
:00455AD3 83EC0C                  sub esp, 0000000C
:00455AD6 56                      push esi
:00455AD7 894DF4                  mov dword ptr [ebp-0C], ecx
:00455ADA 8A450C                  mov al, byte ptr [ebp+0C]
:00455ADD 50                      push eax
:00455ADE 8A4D08                  mov cl, byte ptr [ebp+08]
:00455AE1 51                      push ecx
:00455AE2 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00455AE5 E87610FEFF              call 00436B60
:00455AEA 8D55F8                  lea edx, dword ptr [ebp-08]
:00455AED 52                      push edx
:00455AEE E8C99DFFFF              call 0044F8BC
:00455AF3 83C404                  add esp, 00000004
:00455AF6 85C0                    test eax, eax
:00455AF8 745C                    je 00455B56
:00455AFA 8D45F8                  lea eax, dword ptr [ebp-08]
:00455AFD 50                      push eax
:00455AFE E8D99CFFFF              call 0044F7DC
:00455B03 83C404                  add esp, 00000004
:00455B06 8845FC                  mov byte ptr [ebp-04], al
:00455B09 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00455B0C 81E1FF000000            and ecx, 000000FF
:00455B12 81F9FF000000            cmp ecx, 000000FF
:00455B18 743C                    je 00455B56
:00455B1A 837D1400                cmp dword ptr [ebp+14], 00000000
:00455B1E 7525                    jne 00455B45
:00455B20 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00455B23 81E1FF000000            and ecx, 000000FF
:00455B29 6BC924                  imul ecx, 00000024
:00455B2C 81C1B83B4B00            add ecx, 004B3BB8
:00455B32 E8D96DFBFF              call 0040C910
:00455B37 8BF0                    mov esi, eax
:00455B39 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455B3C E8CF6DFBFF              call 0040C910
:00455B41 3BF0                    cmp esi, eax
:00455B43 7411                    je 00455B56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455B1E(C)
|
:00455B45 8B5510                  mov edx, dword ptr [ebp+10]
:00455B48 8A45FC                  mov al, byte ptr [ebp-04]
:00455B4B 8802                    mov byte ptr [edx], al
:00455B4D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00455B50 83C101                  add ecx, 00000001
:00455B53 894D10                  mov dword ptr [ebp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455AF8(C), :00455B18(C), :00455B43(C)
|
:00455B56 8B4510                  mov eax, dword ptr [ebp+10]
:00455B59 5E                      pop esi
:00455B5A 8BE5                    mov esp, ebp
:00455B5C 5D                      pop ebp
:00455B5D C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00455A99   , :00455ABF   , :004564B0   
|
:00455B60 55                      push ebp
:00455B61 8BEC                    mov ebp, esp
:00455B63 83EC20                  sub esp, 00000020
:00455B66 56                      push esi
:00455B67 894DE4                  mov dword ptr [ebp-1C], ecx
:00455B6A 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00455B6D E87EFBFAFF              call 004056F0
:00455B72 C645EC00                mov [ebp-14], 00
:00455B76 C645E800                mov [ebp-18], 00
:00455B7A 8B4510                  mov eax, dword ptr [ebp+10]
:00455B7D 8945F4                  mov dword ptr [ebp-0C], eax
:00455B80 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00455B83 81E1FF000000            and ecx, 000000FF
:00455B89 894DE0                  mov dword ptr [ebp-20], ecx
:00455B8C 8B55E0                  mov edx, dword ptr [ebp-20]
:00455B8F 83EA01                  sub edx, 00000001
:00455B92 8955E0                  mov dword ptr [ebp-20], edx
:00455B95 837DE008                cmp dword ptr [ebp-20], 00000008
:00455B99 0F8796080000            ja 00456435
:00455B9F 8B45E0                  mov eax, dword ptr [ebp-20]
:00455BA2 FF24853F644500          jmp dword ptr [4*eax+0045643F]
:00455BA9 C745F000000000          mov [ebp-10], 00000000
:00455BB0 EB09                    jmp 00455BBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455C36(U)
|
:00455BB2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00455BB5 83C101                  add ecx, 00000001
:00455BB8 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455BB0(U)
|
:00455BBB 837DF004                cmp dword ptr [ebp-10], 00000004
:00455BBF 737A                    jnb 00455C3B
:00455BC1 8A55F0                  mov dl, byte ptr [ebp-10]
:00455BC4 52                      push edx
:00455BC5 8D4508                  lea eax, dword ptr [ebp+08]
:00455BC8 50                      push eax
:00455BC9 E8239DFFFF              call 0044F8F1
:00455BCE 83C408                  add esp, 00000008
:00455BD1 50                      push eax
:00455BD2 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00455BD5 E8C60EFEFF              call 00436AA0
:00455BDA 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00455BDD 51                      push ecx
:00455BDE E8F99BFFFF              call 0044F7DC
:00455BE3 83C404                  add esp, 00000004
:00455BE6 8845F8                  mov byte ptr [ebp-08], al
:00455BE9 8B55F8                  mov edx, dword ptr [ebp-08]
:00455BEC 81E2FF000000            and edx, 000000FF
:00455BF2 81FAFF000000            cmp edx, 000000FF
:00455BF8 743C                    je 00455C36
:00455BFA 837D1400                cmp dword ptr [ebp+14], 00000000
:00455BFE 7525                    jne 00455C25
:00455C00 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00455C03 81E1FF000000            and ecx, 000000FF
:00455C09 6BC924                  imul ecx, 00000024
:00455C0C 81C1B83B4B00            add ecx, 004B3BB8
:00455C12 E8F96CFBFF              call 0040C910
:00455C17 8BF0                    mov esi, eax
:00455C19 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455C1C E8EF6CFBFF              call 0040C910
:00455C21 3BF0                    cmp esi, eax
:00455C23 7411                    je 00455C36

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455BFE(C)
|
:00455C25 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455C28 8A4DF8                  mov cl, byte ptr [ebp-08]
:00455C2B 8808                    mov byte ptr [eax], cl
:00455C2D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455C30 83C201                  add edx, 00000001
:00455C33 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455BF8(C), :00455C23(C)
|
:00455C36 E977FFFFFF              jmp 00455BB2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455BBF(C)
|
:00455C3B 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455C3E C600FF                  mov byte ptr [eax], FF
:00455C41 E9EF070000              jmp 00456435

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00455C46 C745F004000000          mov [ebp-10], 00000004
:00455C4D EB09                    jmp 00455C58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455CD3(U)
|
:00455C4F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00455C52 83C101                  add ecx, 00000001
:00455C55 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455C4D(U)
|
:00455C58 837DF008                cmp dword ptr [ebp-10], 00000008
:00455C5C 737A                    jnb 00455CD8
:00455C5E 8A55F0                  mov dl, byte ptr [ebp-10]
:00455C61 52                      push edx
:00455C62 8D4508                  lea eax, dword ptr [ebp+08]
:00455C65 50                      push eax
:00455C66 E8869CFFFF              call 0044F8F1
:00455C6B 83C408                  add esp, 00000008
:00455C6E 50                      push eax
:00455C6F 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00455C72 E8290EFEFF              call 00436AA0
:00455C77 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00455C7A 51                      push ecx
:00455C7B E85C9BFFFF              call 0044F7DC
:00455C80 83C404                  add esp, 00000004
:00455C83 8845F8                  mov byte ptr [ebp-08], al
:00455C86 8B55F8                  mov edx, dword ptr [ebp-08]
:00455C89 81E2FF000000            and edx, 000000FF
:00455C8F 81FAFF000000            cmp edx, 000000FF
:00455C95 743C                    je 00455CD3
:00455C97 837D1400                cmp dword ptr [ebp+14], 00000000
:00455C9B 7525                    jne 00455CC2
:00455C9D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00455CA0 81E1FF000000            and ecx, 000000FF
:00455CA6 6BC924                  imul ecx, 00000024
:00455CA9 81C1B83B4B00            add ecx, 004B3BB8
:00455CAF E85C6CFBFF              call 0040C910
:00455CB4 8BF0                    mov esi, eax
:00455CB6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455CB9 E8526CFBFF              call 0040C910
:00455CBE 3BF0                    cmp esi, eax
:00455CC0 7411                    je 00455CD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455C9B(C)
|
:00455CC2 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455CC5 8A4DF8                  mov cl, byte ptr [ebp-08]
:00455CC8 8808                    mov byte ptr [eax], cl
:00455CCA 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455CCD 83C201                  add edx, 00000001
:00455CD0 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455C95(C), :00455CC0(C)
|
:00455CD3 E977FFFFFF              jmp 00455C4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455C5C(C)
|
:00455CD8 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455CDB C600FF                  mov byte ptr [eax], FF
:00455CDE E952070000              jmp 00456435
:00455CE3 C745F000000000          mov [ebp-10], 00000000
:00455CEA EB09                    jmp 00455CF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455D70(U)
|
:00455CEC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00455CEF 83C101                  add ecx, 00000001
:00455CF2 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455CEA(U)
|
:00455CF5 837DF004                cmp dword ptr [ebp-10], 00000004
:00455CF9 737A                    jnb 00455D75
:00455CFB 8A55F0                  mov dl, byte ptr [ebp-10]
:00455CFE 52                      push edx
:00455CFF 8D4508                  lea eax, dword ptr [ebp+08]
:00455D02 50                      push eax
:00455D03 E8E99BFFFF              call 0044F8F1
:00455D08 83C408                  add esp, 00000008
:00455D0B 50                      push eax
:00455D0C 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00455D0F E88C0DFEFF              call 00436AA0
:00455D14 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00455D17 51                      push ecx
:00455D18 E8BF9AFFFF              call 0044F7DC
:00455D1D 83C404                  add esp, 00000004
:00455D20 8845F8                  mov byte ptr [ebp-08], al
:00455D23 8B55F8                  mov edx, dword ptr [ebp-08]
:00455D26 81E2FF000000            and edx, 000000FF
:00455D2C 81FAFF000000            cmp edx, 000000FF
:00455D32 743C                    je 00455D70
:00455D34 837D1400                cmp dword ptr [ebp+14], 00000000
:00455D38 7525                    jne 00455D5F
:00455D3A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00455D3D 81E1FF000000            and ecx, 000000FF
:00455D43 6BC924                  imul ecx, 00000024
:00455D46 81C1B83B4B00            add ecx, 004B3BB8
:00455D4C E8BF6BFBFF              call 0040C910
:00455D51 8BF0                    mov esi, eax
:00455D53 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455D56 E8B56BFBFF              call 0040C910
:00455D5B 3BF0                    cmp esi, eax
:00455D5D 7411                    je 00455D70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455D38(C)
|
:00455D5F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455D62 8A4DF8                  mov cl, byte ptr [ebp-08]
:00455D65 8808                    mov byte ptr [eax], cl
:00455D67 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455D6A 83C201                  add edx, 00000001
:00455D6D 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455D32(C), :00455D5D(C)
|
:00455D70 E977FFFFFF              jmp 00455CEC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455CF9(C)
|
:00455D75 8B4514                  mov eax, dword ptr [ebp+14]
:00455D78 50                      push eax
:00455D79 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455D7C 51                      push ecx
:00455D7D 8A5509                  mov dl, byte ptr [ebp+09]
:00455D80 52                      push edx
:00455D81 8B4508                  mov eax, dword ptr [ebp+08]
:00455D84 25FF000000              and eax, 000000FF
:00455D89 83C002                  add eax, 00000002
:00455D8C 50                      push eax
:00455D8D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455D90 E83BFDFFFF              call 00455AD0
:00455D95 8945F4                  mov dword ptr [ebp-0C], eax
:00455D98 8B4D14                  mov ecx, dword ptr [ebp+14]
:00455D9B 51                      push ecx
:00455D9C 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455D9F 52                      push edx
:00455DA0 8A4509                  mov al, byte ptr [ebp+09]
:00455DA3 50                      push eax
:00455DA4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455DA7 81E1FF000000            and ecx, 000000FF
:00455DAD 83E902                  sub ecx, 00000002
:00455DB0 51                      push ecx
:00455DB1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455DB4 E817FDFFFF              call 00455AD0
:00455DB9 8945F4                  mov dword ptr [ebp-0C], eax
:00455DBC 8B5514                  mov edx, dword ptr [ebp+14]
:00455DBF 52                      push edx
:00455DC0 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455DC3 50                      push eax
:00455DC4 8B4D09                  mov ecx, dword ptr [ebp+09]
:00455DC7 81E1FF000000            and ecx, 000000FF
:00455DCD 83C102                  add ecx, 00000002
:00455DD0 51                      push ecx
:00455DD1 8A5508                  mov dl, byte ptr [ebp+08]
:00455DD4 52                      push edx
:00455DD5 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455DD8 E8F3FCFFFF              call 00455AD0
:00455DDD 8945F4                  mov dword ptr [ebp-0C], eax
:00455DE0 8B4514                  mov eax, dword ptr [ebp+14]
:00455DE3 50                      push eax
:00455DE4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455DE7 51                      push ecx
:00455DE8 8B5509                  mov edx, dword ptr [ebp+09]
:00455DEB 81E2FF000000            and edx, 000000FF
:00455DF1 83EA02                  sub edx, 00000002
:00455DF4 52                      push edx
:00455DF5 8A4508                  mov al, byte ptr [ebp+08]
:00455DF8 50                      push eax
:00455DF9 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455DFC E8CFFCFFFF              call 00455AD0
:00455E01 8945F4                  mov dword ptr [ebp-0C], eax
:00455E04 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455E07 C601FF                  mov byte ptr [ecx], FF
:00455E0A E926060000              jmp 00456435

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00455E0F C745F004000000          mov [ebp-10], 00000004
:00455E16 EB09                    jmp 00455E21

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455E9A(U)
|
:00455E18 8B55F0                  mov edx, dword ptr [ebp-10]
:00455E1B 83C201                  add edx, 00000001
:00455E1E 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455E16(U)
|
:00455E21 837DF008                cmp dword ptr [ebp-10], 00000008
:00455E25 7378                    jnb 00455E9F
:00455E27 8A45F0                  mov al, byte ptr [ebp-10]
:00455E2A 50                      push eax
:00455E2B 8D4D08                  lea ecx, dword ptr [ebp+08]
:00455E2E 51                      push ecx
:00455E2F E8BD9AFFFF              call 0044F8F1
:00455E34 83C408                  add esp, 00000008
:00455E37 50                      push eax
:00455E38 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00455E3B E8600CFEFF              call 00436AA0
:00455E40 8D55FC                  lea edx, dword ptr [ebp-04]
:00455E43 52                      push edx
:00455E44 E89399FFFF              call 0044F7DC
:00455E49 83C404                  add esp, 00000004
:00455E4C 8845F8                  mov byte ptr [ebp-08], al
:00455E4F 8B45F8                  mov eax, dword ptr [ebp-08]
:00455E52 25FF000000              and eax, 000000FF
:00455E57 3DFF000000              cmp eax, 000000FF
:00455E5C 743C                    je 00455E9A
:00455E5E 837D1400                cmp dword ptr [ebp+14], 00000000
:00455E62 7525                    jne 00455E89
:00455E64 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00455E67 81E1FF000000            and ecx, 000000FF
:00455E6D 6BC924                  imul ecx, 00000024
:00455E70 81C1B83B4B00            add ecx, 004B3BB8
:00455E76 E8956AFBFF              call 0040C910
:00455E7B 8BF0                    mov esi, eax
:00455E7D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455E80 E88B6AFBFF              call 0040C910
:00455E85 3BF0                    cmp esi, eax
:00455E87 7411                    je 00455E9A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455E62(C)
|
:00455E89 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455E8C 8A55F8                  mov dl, byte ptr [ebp-08]
:00455E8F 8811                    mov byte ptr [ecx], dl
:00455E91 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455E94 83C001                  add eax, 00000001
:00455E97 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455E5C(C), :00455E87(C)
|
:00455E9A E979FFFFFF              jmp 00455E18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455E25(C)
|
:00455E9F 8B4D14                  mov ecx, dword ptr [ebp+14]
:00455EA2 51                      push ecx
:00455EA3 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455EA6 52                      push edx
:00455EA7 8B4509                  mov eax, dword ptr [ebp+09]
:00455EAA 25FF000000              and eax, 000000FF
:00455EAF 83C002                  add eax, 00000002
:00455EB2 50                      push eax
:00455EB3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455EB6 81E1FF000000            and ecx, 000000FF
:00455EBC 83C102                  add ecx, 00000002
:00455EBF 51                      push ecx
:00455EC0 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455EC3 E808FCFFFF              call 00455AD0
:00455EC8 8945F4                  mov dword ptr [ebp-0C], eax
:00455ECB 8B5514                  mov edx, dword ptr [ebp+14]
:00455ECE 52                      push edx
:00455ECF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00455ED2 50                      push eax
:00455ED3 8B4D09                  mov ecx, dword ptr [ebp+09]
:00455ED6 81E1FF000000            and ecx, 000000FF
:00455EDC 83E902                  sub ecx, 00000002
:00455EDF 51                      push ecx
:00455EE0 8B5508                  mov edx, dword ptr [ebp+08]
:00455EE3 81E2FF000000            and edx, 000000FF
:00455EE9 83C202                  add edx, 00000002
:00455EEC 52                      push edx
:00455EED 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455EF0 E8DBFBFFFF              call 00455AD0
:00455EF5 8945F4                  mov dword ptr [ebp-0C], eax
:00455EF8 8B4514                  mov eax, dword ptr [ebp+14]
:00455EFB 50                      push eax
:00455EFC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455EFF 51                      push ecx
:00455F00 8B5509                  mov edx, dword ptr [ebp+09]
:00455F03 81E2FF000000            and edx, 000000FF
:00455F09 83C202                  add edx, 00000002
:00455F0C 52                      push edx
:00455F0D 8B4508                  mov eax, dword ptr [ebp+08]
:00455F10 25FF000000              and eax, 000000FF
:00455F15 83E802                  sub eax, 00000002
:00455F18 50                      push eax
:00455F19 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455F1C E8AFFBFFFF              call 00455AD0
:00455F21 8945F4                  mov dword ptr [ebp-0C], eax
:00455F24 8B4D14                  mov ecx, dword ptr [ebp+14]
:00455F27 51                      push ecx
:00455F28 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455F2B 52                      push edx
:00455F2C 8B4509                  mov eax, dword ptr [ebp+09]
:00455F2F 25FF000000              and eax, 000000FF
:00455F34 83E802                  sub eax, 00000002
:00455F37 50                      push eax
:00455F38 8B4D08                  mov ecx, dword ptr [ebp+08]
:00455F3B 81E1FF000000            and ecx, 000000FF
:00455F41 83E902                  sub ecx, 00000002
:00455F44 51                      push ecx
:00455F45 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455F48 E883FBFFFF              call 00455AD0
:00455F4D 8945F4                  mov dword ptr [ebp-0C], eax
:00455F50 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455F53 C602FF                  mov byte ptr [edx], FF
:00455F56 E9DA040000              jmp 00456435
:00455F5B C745F000000000          mov [ebp-10], 00000000
:00455F62 EB09                    jmp 00455F6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455FE8(U)
|
:00455F64 8B45F0                  mov eax, dword ptr [ebp-10]
:00455F67 83C001                  add eax, 00000001
:00455F6A 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455F62(U)
|
:00455F6D 837DF008                cmp dword ptr [ebp-10], 00000008
:00455F71 737A                    jnb 00455FED
:00455F73 8A4DF0                  mov cl, byte ptr [ebp-10]
:00455F76 51                      push ecx
:00455F77 8D5508                  lea edx, dword ptr [ebp+08]
:00455F7A 52                      push edx
:00455F7B E87199FFFF              call 0044F8F1
:00455F80 83C408                  add esp, 00000008
:00455F83 50                      push eax
:00455F84 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00455F87 E8140BFEFF              call 00436AA0
:00455F8C 8D45FC                  lea eax, dword ptr [ebp-04]
:00455F8F 50                      push eax
:00455F90 E84798FFFF              call 0044F7DC
:00455F95 83C404                  add esp, 00000004
:00455F98 8845F8                  mov byte ptr [ebp-08], al
:00455F9B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00455F9E 81E1FF000000            and ecx, 000000FF
:00455FA4 81F9FF000000            cmp ecx, 000000FF
:00455FAA 743C                    je 00455FE8
:00455FAC 837D1400                cmp dword ptr [ebp+14], 00000000
:00455FB0 7525                    jne 00455FD7
:00455FB2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00455FB5 81E1FF000000            and ecx, 000000FF
:00455FBB 6BC924                  imul ecx, 00000024
:00455FBE 81C1B83B4B00            add ecx, 004B3BB8
:00455FC4 E84769FBFF              call 0040C910
:00455FC9 8BF0                    mov esi, eax
:00455FCB 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00455FCE E83D69FBFF              call 0040C910
:00455FD3 3BF0                    cmp esi, eax
:00455FD5 7411                    je 00455FE8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455FB0(C)
|
:00455FD7 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455FDA 8A45F8                  mov al, byte ptr [ebp-08]
:00455FDD 8802                    mov byte ptr [edx], al
:00455FDF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00455FE2 83C101                  add ecx, 00000001
:00455FE5 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455FAA(C), :00455FD5(C)
|
:00455FE8 E977FFFFFF              jmp 00455F64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455F71(C)
|
:00455FED 8B55F4                  mov edx, dword ptr [ebp-0C]
:00455FF0 C602FF                  mov byte ptr [edx], FF
:00455FF3 E93D040000              jmp 00456435
:00455FF8 C745F000000000          mov [ebp-10], 00000000
:00455FFF EB09                    jmp 0045600A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456085(U)
|
:00456001 8B45F0                  mov eax, dword ptr [ebp-10]
:00456004 83C001                  add eax, 00000001
:00456007 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00455FFF(U)
|
:0045600A 837DF008                cmp dword ptr [ebp-10], 00000008
:0045600E 737A                    jnb 0045608A
:00456010 8A4DF0                  mov cl, byte ptr [ebp-10]
:00456013 51                      push ecx
:00456014 8D5508                  lea edx, dword ptr [ebp+08]
:00456017 52                      push edx
:00456018 E8D498FFFF              call 0044F8F1
:0045601D 83C408                  add esp, 00000008
:00456020 50                      push eax
:00456021 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00456024 E8770AFEFF              call 00436AA0
:00456029 8D45FC                  lea eax, dword ptr [ebp-04]
:0045602C 50                      push eax
:0045602D E8AA97FFFF              call 0044F7DC
:00456032 83C404                  add esp, 00000004
:00456035 8845F8                  mov byte ptr [ebp-08], al
:00456038 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045603B 81E1FF000000            and ecx, 000000FF
:00456041 81F9FF000000            cmp ecx, 000000FF
:00456047 743C                    je 00456085
:00456049 837D1400                cmp dword ptr [ebp+14], 00000000
:0045604D 7525                    jne 00456074
:0045604F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00456052 81E1FF000000            and ecx, 000000FF
:00456058 6BC924                  imul ecx, 00000024
:0045605B 81C1B83B4B00            add ecx, 004B3BB8
:00456061 E8AA68FBFF              call 0040C910
:00456066 8BF0                    mov esi, eax
:00456068 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045606B E8A068FBFF              call 0040C910
:00456070 3BF0                    cmp esi, eax
:00456072 7411                    je 00456085

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045604D(C)
|
:00456074 8B55F4                  mov edx, dword ptr [ebp-0C]
:00456077 8A45F8                  mov al, byte ptr [ebp-08]
:0045607A 8802                    mov byte ptr [edx], al
:0045607C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045607F 83C101                  add ecx, 00000001
:00456082 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456047(C), :00456072(C)
|
:00456085 E977FFFFFF              jmp 00456001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045600E(C)
|
:0045608A 8B5514                  mov edx, dword ptr [ebp+14]
:0045608D 52                      push edx
:0045608E 8B45F4                  mov eax, dword ptr [ebp-0C]
:00456091 50                      push eax
:00456092 8A4D09                  mov cl, byte ptr [ebp+09]
:00456095 51                      push ecx
:00456096 8B5508                  mov edx, dword ptr [ebp+08]
:00456099 81E2FF000000            and edx, 000000FF
:0045609F 83C202                  add edx, 00000002
:004560A2 52                      push edx
:004560A3 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004560A6 E825FAFFFF              call 00455AD0
:004560AB 8945F4                  mov dword ptr [ebp-0C], eax
:004560AE 8B4514                  mov eax, dword ptr [ebp+14]
:004560B1 50                      push eax
:004560B2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004560B5 51                      push ecx
:004560B6 8A5509                  mov dl, byte ptr [ebp+09]
:004560B9 52                      push edx
:004560BA 8B4508                  mov eax, dword ptr [ebp+08]
:004560BD 25FF000000              and eax, 000000FF
:004560C2 83E802                  sub eax, 00000002
:004560C5 50                      push eax
:004560C6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004560C9 E802FAFFFF              call 00455AD0
:004560CE 8945F4                  mov dword ptr [ebp-0C], eax
:004560D1 8B4D14                  mov ecx, dword ptr [ebp+14]
:004560D4 51                      push ecx
:004560D5 8B55F4                  mov edx, dword ptr [ebp-0C]
:004560D8 52                      push edx
:004560D9 8B4509                  mov eax, dword ptr [ebp+09]
:004560DC 25FF000000              and eax, 000000FF
:004560E1 83C002                  add eax, 00000002
:004560E4 50                      push eax
:004560E5 8A4D08                  mov cl, byte ptr [ebp+08]
:004560E8 51                      push ecx
:004560E9 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004560EC E8DFF9FFFF              call 00455AD0
:004560F1 8945F4                  mov dword ptr [ebp-0C], eax
:004560F4 8B5514                  mov edx, dword ptr [ebp+14]
:004560F7 52                      push edx
:004560F8 8B45F4                  mov eax, dword ptr [ebp-0C]
:004560FB 50                      push eax
:004560FC 8B4D09                  mov ecx, dword ptr [ebp+09]
:004560FF 81E1FF000000            and ecx, 000000FF
:00456105 83E902                  sub ecx, 00000002
:00456108 51                      push ecx
:00456109 8A5508                  mov dl, byte ptr [ebp+08]
:0045610C 52                      push edx
:0045610D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00456110 E8BBF9FFFF              call 00455AD0
:00456115 8945F4                  mov dword ptr [ebp-0C], eax
:00456118 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045611B C600FF                  mov byte ptr [eax], FF
:0045611E E912030000              jmp 00456435
:00456123 C745F000000000          mov [ebp-10], 00000000
:0045612A EB09                    jmp 00456135

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045619D(U)
|
:0045612C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045612F 83C101                  add ecx, 00000001
:00456132 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045612A(U)
|
:00456135 837DF005                cmp dword ptr [ebp-10], 00000005
:00456139 7364                    jnb 0045619F
:0045613B 8B5514                  mov edx, dword ptr [ebp+14]
:0045613E 52                      push edx
:0045613F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00456142 50                      push eax
:00456143 8B4D09                  mov ecx, dword ptr [ebp+09]
:00456146 81E1FF000000            and ecx, 000000FF
:0045614C 83E902                  sub ecx, 00000002
:0045614F 51                      push ecx
:00456150 8B5508                  mov edx, dword ptr [ebp+08]
:00456153 81E2FF000000            and edx, 000000FF
:00456159 8B45F0                  mov eax, dword ptr [ebp-10]
:0045615C 8D4C02FE                lea ecx, dword ptr [edx+eax-02]
:00456160 51                      push ecx
:00456161 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00456164 E867F9FFFF              call 00455AD0
:00456169 8945F4                  mov dword ptr [ebp-0C], eax
:0045616C 8B5514                  mov edx, dword ptr [ebp+14]
:0045616F 52                      push edx
:00456170 8B45F4                  mov eax, dword ptr [ebp-0C]
:00456173 50                      push eax
:00456174 8B4D09                  mov ecx, dword ptr [ebp+09]
:00456177 81E1FF000000            and ecx, 000000FF
:0045617D 83C102                  add ecx, 00000002
:00456180 51                      push ecx
:00456181 8B5508                  mov edx, dword ptr [ebp+08]
:00456184 81E2FF000000            and edx, 000000FF
:0045618A 8B45F0                  mov eax, dword ptr [ebp-10]
:0045618D 8D4C02FE                lea ecx, dword ptr [edx+eax-02]
:00456191 51                      push ecx
:00456192 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00456195 E836F9FFFF              call 00455AD0
:0045619A 8945F4                  mov dword ptr [ebp-0C], eax
:0045619D EB8D                    jmp 0045612C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456139(C)
|
:0045619F C745F000000000          mov [ebp-10], 00000000
:004561A6 EB09                    jmp 004561B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456219(U)
|
:004561A8 8B55F0                  mov edx, dword ptr [ebp-10]
:004561AB 83C201                  add edx, 00000001
:004561AE 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004561A6(U)
|
:004561B1 837DF003                cmp dword ptr [ebp-10], 00000003
:004561B5 7364                    jnb 0045621B
:004561B7 8B4514                  mov eax, dword ptr [ebp+14]
:004561BA 50                      push eax
:004561BB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004561BE 51                      push ecx
:004561BF 8B5509                  mov edx, dword ptr [ebp+09]
:004561C2 81E2FF000000            and edx, 000000FF
:004561C8 8B45F0                  mov eax, dword ptr [ebp-10]
:004561CB 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:004561CF 51                      push ecx
:004561D0 8B5508                  mov edx, dword ptr [ebp+08]
:004561D3 81E2FF000000            and edx, 000000FF
:004561D9 83EA02                  sub edx, 00000002
:004561DC 52                      push edx
:004561DD 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004561E0 E8EBF8FFFF              call 00455AD0
:004561E5 8945F4                  mov dword ptr [ebp-0C], eax
:004561E8 8B4514                  mov eax, dword ptr [ebp+14]
:004561EB 50                      push eax
:004561EC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004561EF 51                      push ecx
:004561F0 8B5509                  mov edx, dword ptr [ebp+09]
:004561F3 81E2FF000000            and edx, 000000FF
:004561F9 8B45F0                  mov eax, dword ptr [ebp-10]
:004561FC 8D4C02FF                lea ecx, dword ptr [edx+eax-01]
:00456200 51                      push ecx
:00456201 8B5508                  mov edx, dword ptr [ebp+08]
:00456204 81E2FF000000            and edx, 000000FF
:0045620A 83C202                  add edx, 00000002
:0045620D 52                      push edx
:0045620E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00456211 E8BAF8FFFF              call 00455AD0
:00456216 8945F4                  mov dword ptr [ebp-0C], eax
:00456219 EB8D                    jmp 004561A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004561B5(C)
|
:0045621B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045621E C600FF                  mov byte ptr [eax], FF
:00456221 E90F020000              jmp 00456435
:00456226 8B4D18                  mov ecx, dword ptr [ebp+18]
:00456229 81E1FF000000            and ecx, 000000FF
:0045622F 81F9FF000000            cmp ecx, 000000FF
:00456235 7509                    jne 00456240
:00456237 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045623A 8A4205                  mov al, byte ptr [edx+05]
:0045623D 884518                  mov byte ptr [ebp+18], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456235(C)
|
:00456240 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:00456243 81E1FF000000            and ecx, 000000FF
:00456249 81F9FF000000            cmp ecx, 000000FF
:0045624F 7509                    jne 0045625A
:00456251 8B55E4                  mov edx, dword ptr [ebp-1C]
:00456254 8A4206                  mov al, byte ptr [edx+06]
:00456257 88451C                  mov byte ptr [ebp+1C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045624F(C)
|
:0045625A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045625D 81E1FF000000            and ecx, 000000FF
:00456263 8B5518                  mov edx, dword ptr [ebp+18]
:00456266 81E2FF000000            and edx, 000000FF
:0045626C 3BCA                    cmp ecx, edx
:0045626E 7506                    jne 00456276
:00456270 C645EC00                mov [ebp-14], 00
:00456274 EB1F                    jmp 00456295

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045626E(C)
|
:00456276 8B4508                  mov eax, dword ptr [ebp+08]
:00456279 25FF000000              and eax, 000000FF
:0045627E 8B4D18                  mov ecx, dword ptr [ebp+18]
:00456281 81E1FF000000            and ecx, 000000FF
:00456287 3BC1                    cmp eax, ecx
:00456289 7E06                    jle 00456291
:0045628B C645EC01                mov [ebp-14], 01
:0045628F EB04                    jmp 00456295

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456289(C)
|
:00456291 C645ECFF                mov [ebp-14], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456274(U), :0045628F(U)
|
:00456295 8B5509                  mov edx, dword ptr [ebp+09]
:00456298 81E2FF000000            and edx, 000000FF
:0045629E 8B451C                  mov eax, dword ptr [ebp+1C]
:004562A1 25FF000000              and eax, 000000FF
:004562A6 3BD0                    cmp edx, eax
:004562A8 7506                    jne 004562B0
:004562AA C645E800                mov [ebp-18], 00
:004562AE EB20                    jmp 004562D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004562A8(C)
|
:004562B0 8B4D09                  mov ecx, dword ptr [ebp+09]
:004562B3 81E1FF000000            and ecx, 000000FF
:004562B9 8B551C                  mov edx, dword ptr [ebp+1C]
:004562BC 81E2FF000000            and edx, 000000FF
:004562C2 3BCA                    cmp ecx, edx
:004562C4 7E06                    jle 004562CC
:004562C6 C645E801                mov [ebp-18], 01
:004562CA EB04                    jmp 004562D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004562C4(C)
|
:004562CC C645E8FF                mov [ebp-18], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004562AE(U), :004562CA(U)
|
:004562D0 8B4514                  mov eax, dword ptr [ebp+14]
:004562D3 50                      push eax
:004562D4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004562D7 51                      push ecx
:004562D8 8B5509                  mov edx, dword ptr [ebp+09]
:004562DB 81E2FF000000            and edx, 000000FF
:004562E1 0FBE45E8                movsx eax, byte ptr [ebp-18]
:004562E5 03D0                    add edx, eax
:004562E7 52                      push edx
:004562E8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004562EB 81E1FF000000            and ecx, 000000FF
:004562F1 0FBE55EC                movsx edx, byte ptr [ebp-14]
:004562F5 03CA                    add ecx, edx
:004562F7 51                      push ecx
:004562F8 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004562FB E8D0F7FFFF              call 00455AD0
:00456300 8945F4                  mov dword ptr [ebp-0C], eax
:00456303 8B45F4                  mov eax, dword ptr [ebp-0C]
:00456306 C600FF                  mov byte ptr [eax], FF
:00456309 E927010000              jmp 00456435
:0045630E 8B4D18                  mov ecx, dword ptr [ebp+18]
:00456311 81E1FF000000            and ecx, 000000FF
:00456317 81F9FF000000            cmp ecx, 000000FF
:0045631D 7509                    jne 00456328
:0045631F 8B55E4                  mov edx, dword ptr [ebp-1C]
:00456322 8A4205                  mov al, byte ptr [edx+05]
:00456325 884518                  mov byte ptr [ebp+18], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045631D(C)
|
:00456328 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:0045632B 81E1FF000000            and ecx, 000000FF
:00456331 81F9FF000000            cmp ecx, 000000FF
:00456337 7509                    jne 00456342
:00456339 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045633C 8A4206                  mov al, byte ptr [edx+06]
:0045633F 88451C                  mov byte ptr [ebp+1C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456337(C)
|
:00456342 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456345 81E1FF000000            and ecx, 000000FF
:0045634B 8B5518                  mov edx, dword ptr [ebp+18]
:0045634E 81E2FF000000            and edx, 000000FF
:00456354 3BCA                    cmp ecx, edx
:00456356 7506                    jne 0045635E
:00456358 C645EC00                mov [ebp-14], 00
:0045635C EB1F                    jmp 0045637D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456356(C)
|
:0045635E 8B4508                  mov eax, dword ptr [ebp+08]
:00456361 25FF000000              and eax, 000000FF
:00456366 8B4D18                  mov ecx, dword ptr [ebp+18]
:00456369 81E1FF000000            and ecx, 000000FF
:0045636F 3BC1                    cmp eax, ecx
:00456371 7E06                    jle 00456379
:00456373 C645EC01                mov [ebp-14], 01
:00456377 EB04                    jmp 0045637D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456371(C)
|
:00456379 C645ECFF                mov [ebp-14], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045635C(U), :00456377(U)
|
:0045637D 8B5509                  mov edx, dword ptr [ebp+09]
:00456380 81E2FF000000            and edx, 000000FF
:00456386 8B451C                  mov eax, dword ptr [ebp+1C]
:00456389 25FF000000              and eax, 000000FF
:0045638E 3BD0                    cmp edx, eax
:00456390 7506                    jne 00456398
:00456392 C645E800                mov [ebp-18], 00
:00456396 EB20                    jmp 004563B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456390(C)
|
:00456398 8B4D09                  mov ecx, dword ptr [ebp+09]
:0045639B 81E1FF000000            and ecx, 000000FF
:004563A1 8B551C                  mov edx, dword ptr [ebp+1C]
:004563A4 81E2FF000000            and edx, 000000FF
:004563AA 3BCA                    cmp ecx, edx
:004563AC 7E06                    jle 004563B4
:004563AE C645E801                mov [ebp-18], 01
:004563B2 EB04                    jmp 004563B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004563AC(C)
|
:004563B4 C645E8FF                mov [ebp-18], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456396(U), :004563B2(U)
|
:004563B8 8B4514                  mov eax, dword ptr [ebp+14]
:004563BB 50                      push eax
:004563BC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004563BF 51                      push ecx
:004563C0 8B5509                  mov edx, dword ptr [ebp+09]
:004563C3 81E2FF000000            and edx, 000000FF
:004563C9 0FBE45E8                movsx eax, byte ptr [ebp-18]
:004563CD 03D0                    add edx, eax
:004563CF 52                      push edx
:004563D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004563D3 81E1FF000000            and ecx, 000000FF
:004563D9 0FBE55EC                movsx edx, byte ptr [ebp-14]
:004563DD 03CA                    add ecx, edx
:004563DF 51                      push ecx
:004563E0 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004563E3 E8E8F6FFFF              call 00455AD0
:004563E8 8945F4                  mov dword ptr [ebp-0C], eax
:004563EB 8A4508                  mov al, byte ptr [ebp+08]
:004563EE 0245EC                  add al, byte ptr [ebp-14]
:004563F1 884508                  mov byte ptr [ebp+08], al
:004563F4 8A4D09                  mov cl, byte ptr [ebp+09]
:004563F7 024DE8                  add cl, byte ptr [ebp-18]
:004563FA 884D09                  mov byte ptr [ebp+09], cl
:004563FD 8B5514                  mov edx, dword ptr [ebp+14]
:00456400 52                      push edx
:00456401 8B45F4                  mov eax, dword ptr [ebp-0C]
:00456404 50                      push eax
:00456405 8B4D09                  mov ecx, dword ptr [ebp+09]
:00456408 81E1FF000000            and ecx, 000000FF
:0045640E 0FBE55E8                movsx edx, byte ptr [ebp-18]
:00456412 03CA                    add ecx, edx
:00456414 51                      push ecx
:00456415 8B4508                  mov eax, dword ptr [ebp+08]
:00456418 25FF000000              and eax, 000000FF
:0045641D 0FBE4DEC                movsx ecx, byte ptr [ebp-14]
:00456421 03C1                    add eax, ecx
:00456423 50                      push eax
:00456424 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00456427 E8A4F6FFFF              call 00455AD0
:0045642C 8945F4                  mov dword ptr [ebp-0C], eax
:0045642F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00456432 C602FF                  mov byte ptr [edx], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00455B99(C), :00455C41(U), :00455CDE(U), :00455E0A(U), :00455F56(U)
|:00455FF3(U), :0045611E(U), :00456221(U), :00456309(U)
|
:00456435 8B4510                  mov eax, dword ptr [ebp+10]
:00456438 5E                      pop esi
:00456439 8BE5                    mov esp, ebp
:0045643B 5D                      pop ebp
:0045643C C21800                  ret 0018



:0045643F A95B4500                DWORD 00455BA9
:00456443 465C4500                DWORD 00455C46
:00456447 E35C4500                DWORD 00455CE3
:0045644B 0F5E4500                DWORD 00455E0F
:0045644F 5B5F4500                DWORD 00455F5B
:00456453 F85F4500                DWORD 00455FF8
:00456457 23614500                DWORD 00456123
:0045645B 26624500                DWORD 00456226
:0045645F 0E634500                DWORD 0045630E



* Referenced by a CALL at Addresses:
|:00439D50   , :0043A002   , :0043A1E7   , :0043A6DE   , :0043B5AD   
|:0043B897   , :0043BB5B   , :0043BD74   , :0043C184   , :0043C2CB   
|:0043C473   , :0043C630   , :0043C98D   , :0043CAEE   , :0043CE0F   
|:0043D3FB   , :0043DDD4   , :0043E0F1   , :0043E6E1   , :0043F5DD   
|:0043FF35   , :00444255   , :004559E6   , :00455A0B   
|
:00456463 55                      push ebp
:00456464 8BEC                    mov ebp, esp
:00456466 83EC08                  sub esp, 00000008
:00456469 894DF8                  mov dword ptr [ebp-08], ecx
:0045646C 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0045646F E87CF2FAFF              call 004056F0
:00456474 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456477 81E1FF000000            and ecx, 000000FF
:0045647D 6BC924                  imul ecx, 00000024
:00456480 81C1B83B4B00            add ecx, 004B3BB8
:00456486 E8B5B7FDFF              call 00431C40
:0045648B 50                      push eax
:0045648C 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0045648F E80C06FEFF              call 00436AA0
:00456494 8A451C                  mov al, byte ptr [ebp+1C]
:00456497 50                      push eax
:00456498 8A4D18                  mov cl, byte ptr [ebp+18]
:0045649B 51                      push ecx
:0045649C 8B5514                  mov edx, dword ptr [ebp+14]
:0045649F 52                      push edx
:004564A0 8B4510                  mov eax, dword ptr [ebp+10]
:004564A3 50                      push eax
:004564A4 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004564A7 51                      push ecx
:004564A8 668B55FC                mov dx, word ptr [ebp-04]
:004564AC 52                      push edx
:004564AD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004564B0 E8ABF6FFFF              call 00455B60
:004564B5 8BE5                    mov esp, ebp
:004564B7 5D                      pop ebp
:004564B8 C21800                  ret 0018



* Referenced by a CALL at Address:
|:00438AA0   
|
:004564BB 55                      push ebp
:004564BC 8BEC                    mov ebp, esp
:004564BE 83EC10                  sub esp, 00000010
:004564C1 894DF4                  mov dword ptr [ebp-0C], ecx
:004564C4 C645F8FF                mov [ebp-08], FF
:004564C8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004564CB E8DFCFFDFF              call 004334AF
:004564D0 8845FC                  mov byte ptr [ebp-04], al
:004564D3 8B45FC                  mov eax, dword ptr [ebp-04]
:004564D6 25FF000000              and eax, 000000FF
:004564DB 8945F0                  mov dword ptr [ebp-10], eax
:004564DE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004564E1 83E901                  sub ecx, 00000001
:004564E4 894DF0                  mov dword ptr [ebp-10], ecx
:004564E7 837DF006                cmp dword ptr [ebp-10], 00000006
:004564EB 7732                    ja 0045651F
:004564ED 8B55F0                  mov edx, dword ptr [ebp-10]
:004564F0 FF2495B1654500          jmp dword ptr [4*edx+004565B1]
:004564F7 6A01                    push 00000001
:004564F9 B958494B00              mov ecx, 004B4958
:004564FE E85383FFFF              call 0044E856
:00456503 EB1A                    jmp 0045651F

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00456505 6A02                    push 00000002
:00456507 B958494B00              mov ecx, 004B4958
:0045650C E84583FFFF              call 0044E856
:00456511 EB0C                    jmp 0045651F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00456513 6A03                    push 00000003
:00456515 B958494B00              mov ecx, 004B4958
:0045651A E83783FFFF              call 0044E856

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004564EB(C), :00456503(U), :00456511(U)
|
:0045651F 6A00                    push 00000000
:00456521 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00456524 E83DCCFDFF              call 00433166
:00456529 50                      push eax
:0045652A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045652D 8A4804                  mov cl, byte ptr [eax+04]
:00456530 51                      push ecx
:00456531 B958494B00              mov ecx, 004B4958
:00456536 E87378FFFF              call 0044DDAE
:0045653B 8845F8                  mov byte ptr [ebp-08], al
:0045653E 8B55F8                  mov edx, dword ptr [ebp-08]
:00456541 81E2FF000000            and edx, 000000FF
:00456547 81FAFF000000            cmp edx, 000000FF
:0045654D 745E                    je 004565AD
:0045654F 8A45F8                  mov al, byte ptr [ebp-08]
:00456552 50                      push eax
:00456553 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00456556 8A5104                  mov dl, byte ptr [ecx+04]
:00456559 52                      push edx
:0045655A E8AF91FFFF              call 0044F70E
:0045655F 83C408                  add esp, 00000008
:00456562 6A00                    push 00000000
:00456564 68FF000000              push 000000FF
:00456569 6A00                    push 00000000
:0045656B 6A01                    push 00000001
:0045656D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00456570 81E1FF000000            and ecx, 000000FF
:00456576 6BC924                  imul ecx, 00000024
:00456579 81C1B83B4B00            add ecx, 004B3BB8
:0045657F E85CBAFEFF              call 00441FE0
:00456584 50                      push eax
:00456585 8B45F4                  mov eax, dword ptr [ebp-0C]
:00456588 8A4804                  mov cl, byte ptr [eax+04]
:0045658B 51                      push ecx
:0045658C B9E0484B00              mov ecx, 004B48E0
:00456591 E8F8DBFEFF              call 0044418E
:00456596 6880000000              push 00000080
:0045659B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045659E E82D03FEFF              call 004368D0
:004565A3 B958494B00              mov ecx, 004B4958
:004565A8 E86463FFFF              call 0044C911

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045654D(C)
|
:004565AD 8BE5                    mov esp, ebp
:004565AF 5D                      pop ebp
:004565B0 C3                      ret



:004565B1 F7644500                DWORD 004564F7
:004565B5 05654500                DWORD 00456505
:004565B9 F7644500                DWORD 004564F7
:004565BD 05654500                DWORD 00456505
:004565C1 13654500                DWORD 00456513
:004565C5 13654500                DWORD 00456513
:004565C9 13654500                DWORD 00456513



* Referenced by a CALL at Addresses:
|:00456982   , :004569C9   , :00456A21   , :00456A65   
|
:004565CD 55                      push ebp
:004565CE 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004565D0 6A04                    push 00000004
:004565D2 E8E48FFDFF              call 0042F5BB
:004565D7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456631(U)
|
:004565DA B928B44800              mov ecx, 0048B428
:004565DF E86932FCFF              call 0041984D
:004565E4 83F801                  cmp eax, 00000001
:004565E7 754A                    jne 00456633
:004565E9 E8680E0200              call 00477456
:004565EE B9A83B4B00              mov ecx, 004B3BA8
:004565F3 E83893FCFF              call 0041F930
:004565F8 85C0                    test eax, eax
:004565FA 7435                    je 00456631
:004565FC B9784E4B00              mov ecx, 004B4E78
:00456601 E8EA09FEFF              call 00436FF0
:00456606 8B4D08                  mov ecx, dword ptr [ebp+08]
:00456609 81E1FF000000            and ecx, 000000FF
:0045660F 6BC924                  imul ecx, 00000024
:00456612 81C1B83B4B00            add ecx, 004B3BB8
:00456618 E882E5FDFF              call 00434B9F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045661D 6A05                    push 00000005
:0045661F E81291FDFF              call 0042F736
:00456624 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00456627 6A04                    push 00000004
:00456629 E88D8FFDFF              call 0042F5BB
:0045662E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004565FA(C)
|
:00456631 EBA7                    jmp 004565DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004565E7(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00456633 6A07                    push 00000007
:00456635 B9F8544B00              mov ecx, 004B54F8
:0045663A E8DB2E0100              call 0046951A
:0045663F 5D                      pop ebp
:00456640 C3                      ret



* Referenced by a CALL at Addresses:
|:004569A9   , :004569F0   , :00456A48   , :00456A8C   
|
:00456641 55                      push ebp
:00456642 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00456644 6A04                    push 00000004
:00456646 E8708FFDFF              call 0042F5BB
:0045664B 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004566A5(U)
|
:0045664E B928B44800              mov ecx, 0048B428
:00456653 E8F531FCFF              call 0041984D
:00456658 83F802                  cmp eax, 00000002
:0045665B 744A                    je 004566A7
:0045665D E8F40D0200              call 00477456
:00456662 B9A83B4B00              mov ecx, 004B3BA8
:00456667 E8C492FCFF              call 0041F930
:0045666C 85C0                    test eax, eax
:0045666E 7435                    je 004566A5
:00456670 B9784E4B00              mov ecx, 004B4E78
:00456675 E87609FEFF              call 00436FF0
:0045667A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045667D 81E1FF000000            and ecx, 000000FF
:00456683 6BC924                  imul ecx, 00000024
:00456686 81C1B83B4B00            add ecx, 004B3BB8
:0045668C E80EE5FDFF              call 00434B9F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00456691 6A05                    push 00000005
:00456693 E89E90FDFF              call 0042F736
:00456698 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045669B 6A04                    push 00000004
:0045669D E8198FFDFF              call 0042F5BB
:004566A2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045666E(C)
|
:004566A5 EBA7                    jmp 0045664E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045665B(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004566A7 6A07                    push 00000007
:004566A9 B9F8544B00              mov ecx, 004B54F8
:004566AE E8672E0100              call 0046951A
:004566B3 5D                      pop ebp
:004566B4 C3                      ret



* Referenced by a CALL at Address:
|:004386F2   
|
:004566B5 55                      push ebp
:004566B6 8BEC                    mov ebp, esp
:004566B8 83EC34                  sub esp, 00000034
:004566BB 894DD4                  mov dword ptr [ebp-2C], ecx
:004566BE 8D4DE0                  lea ecx, dword ptr [ebp-20]
:004566C1 E82AF0FAFF              call 004056F0
:004566C6 8D4DEC                  lea ecx, dword ptr [ebp-14]
:004566C9 E822F0FAFF              call 004056F0
:004566CE C645FCFF                mov [ebp-04], FF
:004566D2 C645DCFF                mov [ebp-24], FF
:004566D6 8B45D4                  mov eax, dword ptr [ebp-2C]
:004566D9 8B08                    mov ecx, dword ptr [eax]
:004566DB 6BC950                  imul ecx, 00000050
:004566DE 81C1787F4900            add ecx, 00497F78
:004566E4 E820B9FAFF              call 00402009
:004566E9 8845F4                  mov byte ptr [ebp-0C], al
:004566EC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004566EF 81E1FF000000            and ecx, 000000FF
:004566F5 81F9FF000000            cmp ecx, 000000FF
:004566FB 741A                    je 00456717
:004566FD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00456700 81E1FF000000            and ecx, 000000FF
:00456706 6BC922                  imul ecx, 00000022
:00456709 81C1D0474900            add ecx, 004947D0
:0045670F E8FC04FEFF              call 00436C10
:00456714 8845DC                  mov byte ptr [ebp-24], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004566FB(C)
|
:00456717 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045671A E8F161FBFF              call 0040C910
:0045671F 85C0                    test eax, eax
:00456721 7515                    jne 00456738
:00456723 33D2                    xor edx, edx
:00456725 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0045672B 83E204                  and edx, 00000004
:0045672E 85D2                    test edx, edx
:00456730 7506                    jne 00456738
:00456732 C645FC00                mov [ebp-04], 00
:00456736 EB5E                    jmp 00456796

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456721(C), :00456730(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00456738 6A04                    push 00000004
:0045673A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045673D E8AE06FEFF              call 00436DF0
:00456742 85C0                    test eax, eax
:00456744 7512                    jne 00456758
:00456746 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456749 E832F0FAFF              call 00405780
:0045674E 25FF000000              and eax, 000000FF
:00456753 83F807                  cmp eax, 00000007
:00456756 7414                    je 0045676C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456744(C)
|
:00456758 33C0                    xor eax, eax
:0045675A A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0045675F 83E004                  and eax, 00000004
:00456762 85C0                    test eax, eax
:00456764 7506                    jne 0045676C
:00456766 C645FC01                mov [ebp-04], 01
:0045676A EB2A                    jmp 00456796

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456756(C), :00456764(C)
|
:0045676C 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045676F 33D2                    xor edx, edx
:00456771 8A511B                  mov dl, byte ptr [ecx+1B]
:00456774 83E210                  and edx, 00000010
:00456777 85D2                    test edx, edx
:00456779 7406                    je 00456781
:0045677B C645FC05                mov [ebp-04], 05
:0045677F EB15                    jmp 00456796

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456779(C)
|
:00456781 6880000000              push 00000080
:00456786 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456789 E86206FEFF              call 00436DF0
:0045678E 85C0                    test eax, eax
:00456790 7404                    je 00456796
:00456792 C645FC06                mov [ebp-04], 06

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456736(U), :0045676A(U), :0045677F(U), :00456790(C)
|
:00456796 6A20                    push 00000020
:00456798 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045679B E85006FEFF              call 00436DF0
:004567A0 85C0                    test eax, eax
:004567A2 7412                    je 004567B6
:004567A4 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004567A7 E826C8FDFF              call 00432FD2
:004567AC 25FF000000              and eax, 000000FF
:004567B1 8945D0                  mov dword ptr [ebp-30], eax
:004567B4 EB07                    jmp 004567BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004567A2(C)
|
:004567B6 C745D000000000          mov [ebp-30], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004567B4(U)
|
:004567BD 8A45D0                  mov al, byte ptr [ebp-30]
:004567C0 8845F0                  mov byte ptr [ebp-10], al
:004567C3 6A01                    push 00000001
:004567C5 68FF000000              push 000000FF
:004567CA 68FF000000              push 000000FF
:004567CF 6A00                    push 00000000
:004567D1 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004567D4 E8F9C7FDFF              call 00432FD2
:004567D9 50                      push eax
:004567DA 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004567DD 83C105                  add ecx, 00000005
:004567E0 51                      push ecx
:004567E1 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004567E4 E8CEB5FFFF              call 00451DB7
:004567E9 6A01                    push 00000001
:004567EB B958494B00              mov ecx, 004B4958
:004567F0 E8CC46FFFF              call 0044AEC1
:004567F5 8B55DC                  mov edx, dword ptr [ebp-24]
:004567F8 81E2FF000000            and edx, 000000FF
:004567FE 81FAFF000000            cmp edx, 000000FF
:00456804 7416                    je 0045681C
:00456806 8A45DC                  mov al, byte ptr [ebp-24]
:00456809 50                      push eax
:0045680A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045680D 668B5105                mov dx, word ptr [ecx+05]
:00456811 52                      push edx
:00456812 B958494B00              mov ecx, 004B4958
:00456817 E89560FFFF              call 0044C8B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456804(C)
|
:0045681C B958494B00              mov ecx, 004B4958
:00456821 E8EB60FFFF              call 0044C911

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456957(U)
|
:00456826 8B45FC                  mov eax, dword ptr [ebp-04]
:00456829 25FF000000              and eax, 000000FF
:0045682E 3DFF000000              cmp eax, 000000FF
:00456833 0F8523010000            jne 0045695C
:00456839 B958494B00              mov ecx, 004B4958
:0045683E E85966FFFF              call 0044CE9C
:00456843 50                      push eax
:00456844 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00456847 E85402FEFF              call 00436AA0
:0045684C 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045684F 81E1FF000000            and ecx, 000000FF
:00456855 81F9FF000000            cmp ecx, 000000FF
:0045685B 7509                    jne 00456866
:0045685D C645FC02                mov [ebp-04], 02
:00456861 E9F6000000              jmp 0045695C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045685B(C)
|
:00456866 8D55E0                  lea edx, dword ptr [ebp-20]
:00456869 52                      push edx
:0045686A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045686D E853E8FDFF              call 004350C5
:00456872 85C0                    test eax, eax
:00456874 7449                    je 004568BF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00456876 6A04                    push 00000004
:00456878 6A00                    push 00000000
:0045687A 6A00                    push 00000000
:0045687C B9881C4B00              mov ecx, 004B1C88
:00456881 E80A270200              call 00478F90
:00456886 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00456889 81E1FF000000            and ecx, 000000FF
:0045688F 8D940800960000          lea edx, dword ptr [eax+ecx+00009600]
:00456896 8B45E1                  mov eax, dword ptr [ebp-1F]
:00456899 25FF000000              and eax, 000000FF
:0045689E 33C9                    xor ecx, ecx
:004568A0 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:004568A6 0FAFC1                  imul eax, ecx
:004568A9 33C9                    xor ecx, ecx
:004568AB 8A0C02                  mov cl, byte ptr [edx+eax]
:004568AE 81F9FF000000            cmp ecx, 000000FF
:004568B4 7409                    je 004568BF
:004568B6 C645FC04                mov [ebp-04], 04
:004568BA E99D000000              jmp 0045695C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456874(C), :004568B4(C)
|
:004568BF 8D55E0                  lea edx, dword ptr [ebp-20]
:004568C2 52                      push edx
:004568C3 E8148FFFFF              call 0044F7DC
:004568C8 83C404                  add esp, 00000004
:004568CB 25FF000000              and eax, 000000FF
:004568D0 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004568D3 33D2                    xor edx, edx
:004568D5 8A5104                  mov dl, byte ptr [ecx+04]
:004568D8 3BC2                    cmp eax, edx
:004568DA 7506                    jne 004568E2
:004568DC C645FC03                mov [ebp-04], 03
:004568E0 EB7A                    jmp 0045695C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004568DA(C)
|
:004568E2 33C0                    xor eax, eax
:004568E4 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:004568E9 83E008                  and eax, 00000008
:004568EC 85C0                    test eax, eax
:004568EE 744C                    je 0045693C
:004568F0 8D4DE0                  lea ecx, dword ptr [ebp-20]
:004568F3 51                      push ecx
:004568F4 E8E38EFFFF              call 0044F7DC
:004568F9 83C404                  add esp, 00000004
:004568FC 25FF000000              and eax, 000000FF
:00456901 3DFF000000              cmp eax, 000000FF
:00456906 7523                    jne 0045692B
:00456908 68F0EC4700              push 0047ECF0
:0045690D 6A00                    push 00000000
:0045690F E81FABFDFF              call 00431433
:00456914 83C408                  add esp, 00000008
:00456917 6A00                    push 00000000
:00456919 8D55E0                  lea edx, dword ptr [ebp-20]
:0045691C 52                      push edx
:0045691D 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456920 E80BB6FEFF              call 00441F30
:00456925 C645FC03                mov [ebp-04], 03
:00456929 EB31                    jmp 0045695C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456906(C)
|

* Possible StringData Ref from Data Obj ->"AಾʡI"
                                  |
:0045692B 6800ED4700              push 0047ED00

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00456930 6A05                    push 00000005
:00456932 E8FCAAFDFF              call 00431433
:00456937 83C408                  add esp, 00000008
:0045693A EB1B                    jmp 00456957

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004568EE(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045693C 6A07                    push 00000007
:0045693E B9F8544B00              mov ecx, 004B54F8
:00456943 E8D22B0100              call 0046951A

* Possible StringData Ref from Data Obj ->"Oʽd"
                                  |
:00456948 6814ED4700              push 0047ED14
:0045694D 6A00                    push 00000000
:0045694F E8DFAAFDFF              call 00431433
:00456954 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045693A(U)
|
:00456957 E9CAFEFFFF              jmp 00456826

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456833(C), :00456861(U), :004568BA(U), :004568E0(U), :00456929(U)
|
:0045695C 8B45FC                  mov eax, dword ptr [ebp-04]
:0045695F 25FF000000              and eax, 000000FF
:00456964 8945CC                  mov dword ptr [ebp-34], eax
:00456967 837DCC06                cmp dword ptr [ebp-34], 00000006
:0045696B 0F872F010000            ja 00456AA0
:00456971 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00456974 FF248DD76B4500          jmp dword ptr [4*ecx+00456BD7]
:0045697B 8B55D4                  mov edx, dword ptr [ebp-2C]
:0045697E 8A4204                  mov al, byte ptr [edx+04]
:00456981 50                      push eax
:00456982 E846FCFFFF              call 004565CD
:00456987 83C404                  add esp, 00000004
:0045698A 6A00                    push 00000000
:0045698C B9C0534B00              mov ecx, 004B53C0
:00456991 E8CA74FDFF              call 0042DE60
:00456996 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456999 E8B3FFFDFF              call 00436951
:0045699E 85C0                    test eax, eax
:004569A0 740F                    je 004569B1
:004569A2 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004569A5 8A5104                  mov dl, byte ptr [ecx+04]
:004569A8 52                      push edx
:004569A9 E893FCFFFF              call 00456641
:004569AE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004569A0(C)
|
:004569B1 6A01                    push 00000001
:004569B3 B9C0534B00              mov ecx, 004B53C0
:004569B8 E8A374FDFF              call 0042DE60
:004569BD E9DE000000              jmp 00456AA0
:004569C2 8B45D4                  mov eax, dword ptr [ebp-2C]
:004569C5 8A4804                  mov cl, byte ptr [eax+04]
:004569C8 51                      push ecx
:004569C9 E8FFFBFFFF              call 004565CD
:004569CE 83C404                  add esp, 00000004
:004569D1 6A00                    push 00000000
:004569D3 B9C0534B00              mov ecx, 004B53C0
:004569D8 E88374FDFF              call 0042DE60
:004569DD 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:004569E0 E86CFFFDFF              call 00436951
:004569E5 85C0                    test eax, eax
:004569E7 740F                    je 004569F8
:004569E9 8B55D4                  mov edx, dword ptr [ebp-2C]
:004569EC 8A4204                  mov al, byte ptr [edx+04]
:004569EF 50                      push eax
:004569F0 E84CFCFFFF              call 00456641
:004569F5 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004569E7(C)
|
:004569F8 6A01                    push 00000001
:004569FA B9C0534B00              mov ecx, 004B53C0
:004569FF E85C74FDFF              call 0042DE60
:00456A04 E997000000              jmp 00456AA0
:00456A09 6A01                    push 00000001
:00456A0B B9F8544B00              mov ecx, 004B54F8
:00456A10 E8052B0100              call 0046951A
:00456A15 E986000000              jmp 00456AA0
:00456A1A 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456A1D 8A5104                  mov dl, byte ptr [ecx+04]
:00456A20 52                      push edx
:00456A21 E8A7FBFFFF              call 004565CD
:00456A26 83C404                  add esp, 00000004
:00456A29 6A00                    push 00000000
:00456A2B B9C0534B00              mov ecx, 004B53C0
:00456A30 E82B74FDFF              call 0042DE60
:00456A35 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456A38 E814FFFDFF              call 00436951
:00456A3D 85C0                    test eax, eax
:00456A3F 740F                    je 00456A50
:00456A41 8B45D4                  mov eax, dword ptr [ebp-2C]
:00456A44 8A4804                  mov cl, byte ptr [eax+04]
:00456A47 51                      push ecx
:00456A48 E8F4FBFFFF              call 00456641
:00456A4D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456A3F(C)
|
:00456A50 6A01                    push 00000001
:00456A52 B9C0534B00              mov ecx, 004B53C0
:00456A57 E80474FDFF              call 0042DE60
:00456A5C EB42                    jmp 00456AA0
:00456A5E 8B55D4                  mov edx, dword ptr [ebp-2C]
:00456A61 8A4204                  mov al, byte ptr [edx+04]
:00456A64 50                      push eax
:00456A65 E863FBFFFF              call 004565CD
:00456A6A 83C404                  add esp, 00000004
:00456A6D 6A00                    push 00000000
:00456A6F B9C0534B00              mov ecx, 004B53C0
:00456A74 E8E773FDFF              call 0042DE60
:00456A79 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456A7C E8D0FEFDFF              call 00436951
:00456A81 85C0                    test eax, eax
:00456A83 740F                    je 00456A94
:00456A85 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456A88 8A5104                  mov dl, byte ptr [ecx+04]
:00456A8B 52                      push edx
:00456A8C E8B0FBFFFF              call 00456641
:00456A91 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456A83(C)
|
:00456A94 6A01                    push 00000001
:00456A96 B9C0534B00              mov ecx, 004B53C0
:00456A9B E8C073FDFF              call 0042DE60

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045696B(C), :004569BD(U), :00456A04(U), :00456A15(U), :00456A5C(U)
|
:00456AA0 6A00                    push 00000000
:00456AA2 B958494B00              mov ecx, 004B4958
:00456AA7 E81544FFFF              call 0044AEC1
:00456AAC 68FF000000              push 000000FF
:00456AB1 8B45D4                  mov eax, dword ptr [ebp-2C]
:00456AB4 668B4805                mov cx, word ptr [eax+05]
:00456AB8 51                      push ecx
:00456AB9 B958494B00              mov ecx, 004B4958
:00456ABE E8EE5DFFFF              call 0044C8B1
:00456AC3 B958494B00              mov ecx, 004B4958
:00456AC8 E8445EFFFF              call 0044C911
:00456ACD 8B55FC                  mov edx, dword ptr [ebp-04]
:00456AD0 81E2FF000000            and edx, 000000FF
:00456AD6 83FA03                  cmp edx, 00000003
:00456AD9 751B                    jne 00456AF6
:00456ADB 6A00                    push 00000000
:00456ADD B9F8544B00              mov ecx, 004B54F8
:00456AE2 E8332A0100              call 0046951A
:00456AE7 E8048CFDFF              call 0042F6F0
:00456AEC B801000000              mov eax, 00000001
:00456AF1 E9DD000000              jmp 00456BD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456AD9(C)
|
:00456AF6 8B45FC                  mov eax, dword ptr [ebp-04]
:00456AF9 25FF000000              and eax, 000000FF
:00456AFE 83F804                  cmp eax, 00000004
:00456B01 740C                    je 00456B0F
:00456B03 E8E88BFDFF              call 0042F6F0
:00456B08 33C0                    xor eax, eax
:00456B0A E9C4000000              jmp 00456BD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456B01(C)
|
:00456B0F 6A00                    push 00000000
:00456B11 68FF000000              push 000000FF
:00456B16 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00456B19 51                      push ecx
:00456B1A 8B55D4                  mov edx, dword ptr [ebp-2C]
:00456B1D 83C205                  add edx, 00000005
:00456B20 52                      push edx
:00456B21 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456B24 E8B3ADFFFF              call 004518DC
:00456B29 8945E4                  mov dword ptr [ebp-1C], eax
:00456B2C 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00456B2F E8BCEBFAFF              call 004056F0
:00456B34 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456B37 E8A8DBFDFF              call 004346E4
:00456B3C C745E800000000          mov [ebp-18], 00000000
:00456B43 EB09                    jmp 00456B4E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456B9D(U), :00456BBA(U)
|
:00456B45 8B45E8                  mov eax, dword ptr [ebp-18]
:00456B48 83C001                  add eax, 00000001
:00456B4B 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456B43(U)
|
:00456B4E 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00456B51 51                      push ecx
:00456B52 8B55D4                  mov edx, dword ptr [ebp-2C]
:00456B55 83C205                  add edx, 00000005
:00456B58 52                      push edx
:00456B59 E84204FEFF              call 00436FA0
:00456B5E 83C408                  add esp, 00000008
:00456B61 85C0                    test eax, eax
:00456B63 7557                    jne 00456BBC
:00456B65 8B45E4                  mov eax, dword ptr [ebp-1C]
:00456B68 0345E8                  add eax, dword ptr [ebp-18]
:00456B6B 8A08                    mov cl, byte ptr [eax]
:00456B6D 884DF8                  mov byte ptr [ebp-08], cl
:00456B70 8A55F8                  mov dl, byte ptr [ebp-08]
:00456B73 52                      push edx
:00456B74 8B45D4                  mov eax, dword ptr [ebp-2C]
:00456B77 83C005                  add eax, 00000005
:00456B7A 50                      push eax
:00456B7B E8718DFFFF              call 0044F8F1
:00456B80 83C408                  add esp, 00000008
:00456B83 50                      push eax
:00456B84 8D4DD8                  lea ecx, dword ptr [ebp-28]
:00456B87 E814FFFDFF              call 00436AA0
:00456B8C 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00456B8F 81E1FF000000            and ecx, 000000FF
:00456B95 81F9FF000000            cmp ecx, 000000FF
:00456B9B 7502                    jne 00456B9F
:00456B9D EBA6                    jmp 00456B45

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456B9B(C)
|
:00456B9F 8A55F8                  mov dl, byte ptr [ebp-08]
:00456BA2 52                      push edx
:00456BA3 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456BA6 E866EDFDFF              call 00435911
:00456BAB 8D45D8                  lea eax, dword ptr [ebp-28]
:00456BAE 50                      push eax
:00456BAF 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456BB2 83C105                  add ecx, 00000005
:00456BB5 E8E6FEFDFF              call 00436AA0
:00456BBA EB89                    jmp 00456B45

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456B63(C)
|
:00456BBC 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456BBF E8F7DAFDFF              call 004346BB
:00456BC4 6A40                    push 00000040
:00456BC6 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00456BC9 E802FDFDFF              call 004368D0
:00456BCE B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456AF1(U), :00456B0A(U)
|
:00456BD3 8BE5                    mov esp, ebp
:00456BD5 5D                      pop ebp
:00456BD6 C3                      ret



:00456BD7 7B694500                DWORD 0045697B
:00456BDB C2694500                DWORD 004569C2
:00456BDF 096A4500                DWORD 00456A09
:00456BE3 A06A4500                DWORD 00456AA0
:00456BE7 A06A4500                DWORD 00456AA0
:00456BEB 1A6A4500                DWORD 00456A1A
:00456BEF 5E6A4500                DWORD 00456A5E



* Referenced by a CALL at Addresses:
|:00452823   , :0045286D   , :00452A93   , :00452BE6   
|
:00456BF3 55                      push ebp
:00456BF4 8BEC                    mov ebp, esp
:00456BF6 83EC10                  sub esp, 00000010
:00456BF9 894DF0                  mov dword ptr [ebp-10], ecx
:00456BFC 6A01                    push 00000001
:00456BFE 68FF000000              push 000000FF
:00456C03 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00456C08 6A08                    push 00000008
:00456C0A 8A4508                  mov al, byte ptr [ebp+08]
:00456C0D 50                      push eax
:00456C0E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456C11 83C105                  add ecx, 00000005
:00456C14 51                      push ecx
:00456C15 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456C18 E89AB1FFFF              call 00451DB7
:00456C1D 8845FC                  mov byte ptr [ebp-04], al
:00456C20 8B55FC                  mov edx, dword ptr [ebp-04]
:00456C23 81E2FF000000            and edx, 000000FF
:00456C29 81FAFF000000            cmp edx, 000000FF
:00456C2F 7430                    je 00456C61
:00456C31 C705444A4B0001000000    mov dword ptr [004B4A44], 00000001
:00456C3B 6A01                    push 00000001
:00456C3D 68FF000000              push 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456BD7(C)
|
:00456C42 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00456C47 6A04                    push 00000004
:00456C49 8A4508                  mov al, byte ptr [ebp+08]
:00456C4C 50                      push eax
:00456C4D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456C50 83C105                  add ecx, 00000005
:00456C53 51                      push ecx
:00456C54 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456C57 E85BB1FFFF              call 00451DB7
:00456C5C E919010000              jmp 00456D7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456C2F(C)
|
:00456C61 6A01                    push 00000001
:00456C63 68FF000000              push 000000FF
:00456C68 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00456C6D 6A08                    push 00000008
:00456C6F 68FF000000              push 000000FF
:00456C74 8B55F0                  mov edx, dword ptr [ebp-10]
:00456C77 83C205                  add edx, 00000005
:00456C7A 52                      push edx
:00456C7B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456C7E E834B1FFFF              call 00451DB7
:00456C83 8845FC                  mov byte ptr [ebp-04], al
:00456C86 8B45FC                  mov eax, dword ptr [ebp-04]
:00456C89 25FF000000              and eax, 000000FF
:00456C8E 3DFF000000              cmp eax, 000000FF
:00456C93 0F84D0000000            je 00456D69
:00456C99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456C9C 81E1FF000000            and ecx, 000000FF
:00456CA2 6BC924                  imul ecx, 00000024
:00456CA5 81C1B83B4B00            add ecx, 004B3BB8
:00456CAB E890AFFDFF              call 00431C40
:00456CB0 668B08                  mov cx, word ptr [eax]
:00456CB3 66894DF4                mov word ptr [ebp-0C], cx
:00456CB7 C645F800                mov [ebp-08], 00
:00456CBB 6A01                    push 00000001
:00456CBD 8B55F0                  mov edx, dword ptr [ebp-10]
:00456CC0 8A4206                  mov al, byte ptr [edx+06]
:00456CC3 50                      push eax
:00456CC4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456CC7 8A5105                  mov dl, byte ptr [ecx+05]
:00456CCA 52                      push edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00456CCB 6A02                    push 00000002
:00456CCD 68FF000000              push 000000FF
:00456CD2 8D45F4                  lea eax, dword ptr [ebp-0C]
:00456CD5 50                      push eax
:00456CD6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456CD9 E8D9B0FFFF              call 00451DB7
:00456CDE 25FF000000              and eax, 000000FF
:00456CE3 83F801                  cmp eax, 00000001
:00456CE6 7435                    je 00456D1D
:00456CE8 6A00                    push 00000000
:00456CEA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456CED 8A5106                  mov dl, byte ptr [ecx+06]
:00456CF0 52                      push edx
:00456CF1 8B45F0                  mov eax, dword ptr [ebp-10]
:00456CF4 8A4805                  mov cl, byte ptr [eax+05]
:00456CF7 51                      push ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00456CF8 6A02                    push 00000002
:00456CFA 68FF000000              push 000000FF
:00456CFF 8D55F4                  lea edx, dword ptr [ebp-0C]
:00456D02 52                      push edx
:00456D03 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456D06 E8ACB0FFFF              call 00451DB7
:00456D0B 25FF000000              and eax, 000000FF
:00456D10 3DFF000000              cmp eax, 000000FF
:00456D15 7404                    je 00456D1B
:00456D17 C645F801                mov [ebp-08], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456D15(C)
|
:00456D1B EB04                    jmp 00456D21

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456CE6(C)
|
:00456D1D C645F801                mov [ebp-08], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456D1B(U)
|
:00456D21 8B45F8                  mov eax, dword ptr [ebp-08]
:00456D24 25FF000000              and eax, 000000FF
:00456D29 85C0                    test eax, eax
:00456D2B 743A                    je 00456D67
:00456D2D 6A01                    push 00000001
:00456D2F 8A4D08                  mov cl, byte ptr [ebp+08]
:00456D32 51                      push ecx
:00456D33 8B55F0                  mov edx, dword ptr [ebp-10]
:00456D36 83C205                  add edx, 00000005
:00456D39 52                      push edx
:00456D3A 8D45F4                  lea eax, dword ptr [ebp-0C]
:00456D3D 50                      push eax
:00456D3E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456D41 E896ABFFFF              call 004518DC
:00456D46 6A01                    push 00000001
:00456D48 68FF000000              push 000000FF
:00456D4D 68FF000000              push 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00456D52 6A04                    push 00000004
:00456D54 8A4D08                  mov cl, byte ptr [ebp+08]
:00456D57 51                      push ecx
:00456D58 8B55F0                  mov edx, dword ptr [ebp-10]
:00456D5B 83C205                  add edx, 00000005
:00456D5E 52                      push edx
:00456D5F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00456D62 E850B0FFFF              call 00451DB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456D2B(C)
|
:00456D67 EB11                    jmp 00456D7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456C93(C)
|
:00456D69 8B45F0                  mov eax, dword ptr [ebp-10]
:00456D6C 83C005                  add eax, 00000005
:00456D6F 50                      push eax
:00456D70 B9484A4B00              mov ecx, 004B4A48
:00456D75 E826FDFDFF              call 00436AA0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456C5C(U), :00456D67(U)
|
:00456D7A 8BE5                    mov esp, ebp
:00456D7C 5D                      pop ebp
:00456D7D C20400                  ret 0004



* Referenced by a CALL at Address:
|:00452928   
|
:00456D80 55                      push ebp
:00456D81 8BEC                    mov ebp, esp
:00456D83 51                      push ecx
:00456D84 894DFC                  mov dword ptr [ebp-04], ecx
:00456D87 8B45FC                  mov eax, dword ptr [ebp-04]
:00456D8A 668B4808                mov cx, word ptr [eax+08]
:00456D8E 8B5508                  mov edx, dword ptr [ebp+08]
:00456D91 66890A                  mov word ptr [edx], cx
:00456D94 8B4508                  mov eax, dword ptr [ebp+08]
:00456D97 8BE5                    mov esp, ebp
:00456D99 5D                      pop ebp
:00456D9A C20400                  ret 0004


:00456D9D CC                      int 03
:00456D9E CC                      int 03
:00456D9F CC                      int 03

* Referenced by a CALL at Address:
|:00452C3A   
|
:00456DA0 55                      push ebp
:00456DA1 8BEC                    mov ebp, esp
:00456DA3 51                      push ecx
:00456DA4 894DFC                  mov dword ptr [ebp-04], ecx
:00456DA7 8B45FC                  mov eax, dword ptr [ebp-04]
:00456DAA 8B4020                  mov eax, dword ptr [eax+20]
:00456DAD 8BE5                    mov esp, ebp
:00456DAF 5D                      pop ebp
:00456DB0 C3                      ret


:00456DB1 CC                      int 03
:00456DB2 CC                      int 03
:00456DB3 CC                      int 03
:00456DB4 CC                      int 03
:00456DB5 CC                      int 03
:00456DB6 CC                      int 03
:00456DB7 CC                      int 03
:00456DB8 CC                      int 03
:00456DB9 CC                      int 03
:00456DBA CC                      int 03
:00456DBB CC                      int 03
:00456DBC CC                      int 03
:00456DBD CC                      int 03
:00456DBE CC                      int 03
:00456DBF CC                      int 03

* Referenced by a CALL at Address:
|:0045CB48   
|
:00456DC0 55                      push ebp
:00456DC1 8BEC                    mov ebp, esp
:00456DC3 51                      push ecx
:00456DC4 894DFC                  mov dword ptr [ebp-04], ecx
:00456DC7 B9784E4B00              mov ecx, 004B4E78
:00456DCC E82F150000              call 00458300
:00456DD1 50                      push eax
:00456DD2 6A00                    push 00000000
:00456DD4 E85AA6FDFF              call 00431433
:00456DD9 83C408                  add esp, 00000008
:00456DDC 8B4508                  mov eax, dword ptr [ebp+08]
:00456DDF 25FF000000              and eax, 000000FF
:00456DE4 85C0                    test eax, eax
:00456DE6 0F8587000000            jne 00456E73

* Possible StringData Ref from Data Obj ->"ZФc"
                                  |
:00456DEC 68F4104800              push 004810F4
:00456DF1 6A00                    push 00000000
:00456DF3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456DF6 E881130000              call 0045817C

* Possible StringData Ref from Data Obj ->""
                                  |
:00456DFB 6800114800              push 00481100
:00456E00 6A01                    push 00000001
:00456E02 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456E05 E872130000              call 0045817C
:00456E0A 6A00                    push 00000000
:00456E0C 8A4D08                  mov cl, byte ptr [ebp+08]
:00456E0F 51                      push ecx
:00456E10 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456E13 E80C130000              call 00458124
:00456E18 6A00                    push 00000000
:00456E1A 8A5508                  mov dl, byte ptr [ebp+08]
:00456E1D 52                      push edx
:00456E1E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456E21 E81C140000              call 00458242

* Possible StringData Ref from Data Obj ->"pЫH"
                                  |
:00456E26 680C114800              push 0048110C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00456E2B 6A02                    push 00000002
:00456E2D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456E30 E847130000              call 0045817C
:00456E35 6A01                    push 00000001
:00456E37 8A4508                  mov al, byte ptr [ebp+08]
:00456E3A 50                      push eax
:00456E3B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456E3E E8E1120000              call 00458124

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:00456E43 6818114800              push 00481118

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00456E48 6A03                    push 00000003
:00456E4A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456E4D E82A130000              call 0045817C
:00456E52 6A01                    push 00000001
:00456E54 8A4D08                  mov cl, byte ptr [ebp+08]
:00456E57 51                      push ecx
:00456E58 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456E5B E8E2130000              call 00458242

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00456E60 6A02                    push 00000002
:00456E62 8A5508                  mov dl, byte ptr [ebp+08]
:00456E65 52                      push edx
:00456E66 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456E69 E8B6120000              call 00458124
:00456E6E E973110000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456DE6(C)
|
:00456E73 8B4508                  mov eax, dword ptr [ebp+08]
:00456E76 25FF000000              and eax, 000000FF
:00456E7B 83F801                  cmp eax, 00000001
:00456E7E 0F85B2000000            jne 00456F36

* Possible StringData Ref from Data Obj ->"lg["
                                  |
:00456E84 6824114800              push 00481124

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00456E89 6A04                    push 00000004
:00456E8B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456E8E E8E9120000              call 0045817C
:00456E93 6A00                    push 00000000
:00456E95 8A4D08                  mov cl, byte ptr [ebp+08]
:00456E98 51                      push ecx
:00456E99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456E9C E883120000              call 00458124

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00456EA1 6A05                    push 00000005
:00456EA3 8A5508                  mov dl, byte ptr [ebp+08]
:00456EA6 52                      push edx
:00456EA7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456EAA E893130000              call 00458242

* Possible StringData Ref from Data Obj ->"Ntg"
                                  |
:00456EAF 6830114800              push 00481130

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00456EB4 6A05                    push 00000005
:00456EB6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456EB9 E8BE120000              call 0045817C

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:00456EBE 683C114800              push 0048113C

* Possible Reference to String Resource ID=00006: ""
                                  |
:00456EC3 6A06                    push 00000006
:00456EC5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456EC8 E8AF120000              call 0045817C
:00456ECD 6A01                    push 00000001
:00456ECF 8A4508                  mov al, byte ptr [ebp+08]
:00456ED2 50                      push eax
:00456ED3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456ED6 E849120000              call 00458124

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00456EDB 6A04                    push 00000004
:00456EDD 8A4D08                  mov cl, byte ptr [ebp+08]
:00456EE0 51                      push ecx
:00456EE1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456EE4 E859130000              call 00458242

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00456EE9 6A03                    push 00000003
:00456EEB 8A5508                  mov dl, byte ptr [ebp+08]
:00456EEE 52                      push edx
:00456EEF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456EF2 E84B130000              call 00458242

* Possible StringData Ref from Data Obj ->"äsЫH"
                                  |
:00456EF7 6848114800              push 00481148

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00456EFC 6A07                    push 00000007
:00456EFE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456F01 E876120000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00456F06 6A02                    push 00000002
:00456F08 8A4508                  mov al, byte ptr [ebp+08]
:00456F0B 50                      push eax
:00456F0C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456F0F E810120000              call 00458124

* Possible StringData Ref from Data Obj ->"x"
                                  |
:00456F14 6854114800              push 00481154

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00456F19 6A08                    push 00000008
:00456F1B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456F1E E859120000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00456F23 6A02                    push 00000002
:00456F25 8A4D08                  mov cl, byte ptr [ebp+08]
:00456F28 51                      push ecx
:00456F29 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456F2C E811130000              call 00458242
:00456F31 E9B0100000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456E7E(C)
|
:00456F36 8B5508                  mov edx, dword ptr [ebp+08]
:00456F39 81E2FF000000            and edx, 000000FF
:00456F3F 83FA02                  cmp edx, 00000002
:00456F42 756B                    jne 00456FAF

* Possible StringData Ref from Data Obj ->"tq"
                                  |
:00456F44 685C114800              push 0048115C

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00456F49 6A09                    push 00000009
:00456F4B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456F4E E829120000              call 0045817C

* Possible StringData Ref from Data Obj ->"ۦX"
                                  |
:00456F53 6868114800              push 00481168

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00456F58 6A0A                    push 0000000A
:00456F5A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456F5D E81A120000              call 0045817C
:00456F62 6A00                    push 00000000
:00456F64 8A4508                  mov al, byte ptr [ebp+08]
:00456F67 50                      push eax
:00456F68 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456F6B E8B4110000              call 00458124

* Possible StringData Ref from Data Obj ->"sq"
                                  |
:00456F70 6874114800              push 00481174
:00456F75 6A0B                    push 0000000B
:00456F77 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456F7A E8FD110000              call 0045817C
:00456F7F 6A01                    push 00000001
:00456F81 8A4D08                  mov cl, byte ptr [ebp+08]
:00456F84 51                      push ecx
:00456F85 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456F88 E897110000              call 00458124

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:00456F8D 687C114800              push 0048117C
:00456F92 6A0C                    push 0000000C
:00456F94 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456F97 E8E0110000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00456F9C 6A02                    push 00000002
:00456F9E 8A5508                  mov dl, byte ptr [ebp+08]
:00456FA1 52                      push edx
:00456FA2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456FA5 E87A110000              call 00458124
:00456FAA E937100000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456F42(C)
|
:00456FAF 8B4508                  mov eax, dword ptr [ebp+08]
:00456FB2 25FF000000              and eax, 000000FF
:00456FB7 83F803                  cmp eax, 00000003
:00456FBA 0F85A3000000            jne 00457063

* Possible StringData Ref from Data Obj ->"jq"
                                  |
:00456FC0 6888114800              push 00481188
:00456FC5 6A0D                    push 0000000D
:00456FC7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456FCA E8AD110000              call 0045817C

* Possible StringData Ref from Data Obj ->"ZХM"
                                  |
:00456FCF 6894114800              push 00481194
:00456FD4 6A0E                    push 0000000E
:00456FD6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456FD9 E89E110000              call 0045817C

* Possible Reference to String Resource ID=00006: ""
                                  |
:00456FDE 6A06                    push 00000006
:00456FE0 8A4D08                  mov cl, byte ptr [ebp+08]
:00456FE3 51                      push ecx
:00456FE4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456FE7 E856120000              call 00458242
:00456FEC 6A00                    push 00000000
:00456FEE 8A5508                  mov dl, byte ptr [ebp+08]
:00456FF1 52                      push edx
:00456FF2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00456FF5 E82A110000              call 00458124

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:00456FFA 68A0114800              push 004811A0
:00456FFF 6A0F                    push 0000000F
:00457001 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457004 E873110000              call 0045817C

* Possible StringData Ref from Data Obj ->"Ntg"
                                  |
:00457009 68AC114800              push 004811AC
:0045700E 6A10                    push 00000010
:00457010 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457013 E864110000              call 0045817C
:00457018 6A01                    push 00000001
:0045701A 8A4508                  mov al, byte ptr [ebp+08]
:0045701D 50                      push eax
:0045701E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457021 E8FE100000              call 00458124

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00457026 6A07                    push 00000007
:00457028 8A4D08                  mov cl, byte ptr [ebp+08]
:0045702B 51                      push ecx
:0045702C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045702F E80E120000              call 00458242

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457034 6A02                    push 00000002
:00457036 8A5508                  mov dl, byte ptr [ebp+08]
:00457039 52                      push edx
:0045703A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045703D E8E2100000              call 00458124

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00457042 6A08                    push 00000008
:00457044 8A4508                  mov al, byte ptr [ebp+08]
:00457047 50                      push eax
:00457048 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045704B E8F2110000              call 00458242

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00457050 6A03                    push 00000003
:00457052 8A4D08                  mov cl, byte ptr [ebp+08]
:00457055 51                      push ecx
:00457056 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457059 E8C6100000              call 00458124
:0045705E E9830F0000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00456FBA(C)
|
:00457063 8B5508                  mov edx, dword ptr [ebp+08]
:00457066 81E2FF000000            and edx, 000000FF
:0045706C 83FA04                  cmp edx, 00000004
:0045706F 0F8595000000            jne 0045710A

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:00457075 68B8114800              push 004811B8
:0045707A 6A11                    push 00000011
:0045707C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045707F E8F8100000              call 0045817C
:00457084 6A00                    push 00000000
:00457086 8A4508                  mov al, byte ptr [ebp+08]
:00457089 50                      push eax
:0045708A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045708D E892100000              call 00458124

* Possible StringData Ref from Data Obj ->"ZХM"
                                  |
:00457092 68C4114800              push 004811C4
:00457097 6A12                    push 00000012
:00457099 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045709C E8DB100000              call 0045817C
:004570A1 6A01                    push 00000001
:004570A3 8A4D08                  mov cl, byte ptr [ebp+08]
:004570A6 51                      push ecx
:004570A7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004570AA E875100000              call 00458124

* Possible StringData Ref from Data Obj ->"H"
                                  |
:004570AF 68D0114800              push 004811D0
:004570B4 6A13                    push 00000013
:004570B6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004570B9 E8BE100000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004570BE 6A02                    push 00000002
:004570C0 8A5508                  mov dl, byte ptr [ebp+08]
:004570C3 52                      push edx
:004570C4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004570C7 E858100000              call 00458124

* Possible StringData Ref from Data Obj ->"ޤᤸ"
                                  |
:004570CC 68DC114800              push 004811DC

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:004570D1 6A14                    push 00000014
:004570D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004570D6 E8A1100000              call 0045817C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004570DB 6A03                    push 00000003
:004570DD 8A4508                  mov al, byte ptr [ebp+08]
:004570E0 50                      push eax
:004570E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004570E4 E83B100000              call 00458124

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:004570E9 6A09                    push 00000009
:004570EB 8A4D08                  mov cl, byte ptr [ebp+08]
:004570EE 51                      push ecx
:004570EF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004570F2 E84B110000              call 00458242

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004570F7 6A04                    push 00000004
:004570F9 8A5508                  mov dl, byte ptr [ebp+08]
:004570FC 52                      push edx
:004570FD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457100 E81F100000              call 00458124
:00457105 E9DC0E0000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045706F(C)
|
:0045710A 8B4508                  mov eax, dword ptr [ebp+08]
:0045710D 25FF000000              and eax, 000000FF
:00457112 83F805                  cmp eax, 00000005
:00457115 0F85CE000000            jne 004571E9

* Possible StringData Ref from Data Obj ->"l["
                                  |
:0045711B 68E8114800              push 004811E8

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:00457120 6A15                    push 00000015
:00457122 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457125 E852100000              call 0045817C
:0045712A 6A00                    push 00000000
:0045712C 8A4D08                  mov cl, byte ptr [ebp+08]
:0045712F 51                      push ecx
:00457130 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457133 E8EC0F0000              call 00458124
:00457138 6A0D                    push 0000000D
:0045713A 8A5508                  mov dl, byte ptr [ebp+08]
:0045713D 52                      push edx
:0045713E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457141 E8FC100000              call 00458242

* Possible StringData Ref from Data Obj ->"Ntg"
                                  |
:00457146 68F4114800              push 004811F4
:0045714B 6A16                    push 00000016
:0045714D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457150 E827100000              call 0045817C
:00457155 6A01                    push 00000001
:00457157 8A4508                  mov al, byte ptr [ebp+08]
:0045715A 50                      push eax
:0045715B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045715E E8C10F0000              call 00458124
:00457163 6A0C                    push 0000000C
:00457165 8A4D08                  mov cl, byte ptr [ebp+08]
:00457168 51                      push ecx
:00457169 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045716C E8D1100000              call 00458242

* Possible StringData Ref from Data Obj ->"ZЫH"
                                  |
:00457171 6800124800              push 00481200
:00457176 6A17                    push 00000017
:00457178 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045717B E8FC0F0000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457180 6A02                    push 00000002
:00457182 8A5508                  mov dl, byte ptr [ebp+08]
:00457185 52                      push edx
:00457186 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457189 E8960F0000              call 00458124
:0045718E 6A0B                    push 0000000B
:00457190 8A4508                  mov al, byte ptr [ebp+08]
:00457193 50                      push eax
:00457194 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457197 E8A6100000              call 00458242

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:0045719C 680C124800              push 0048120C
:004571A1 6A18                    push 00000018
:004571A3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004571A6 E8D10F0000              call 0045817C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004571AB 6A03                    push 00000003
:004571AD 8A4D08                  mov cl, byte ptr [ebp+08]
:004571B0 51                      push ecx
:004571B1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004571B4 E86B0F0000              call 00458124

* Possible StringData Ref from Data Obj ->""
                                  |
:004571B9 6818124800              push 00481218
:004571BE 6A19                    push 00000019
:004571C0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004571C3 E8B40F0000              call 0045817C

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004571C8 6A0A                    push 0000000A
:004571CA 8A5508                  mov dl, byte ptr [ebp+08]
:004571CD 52                      push edx
:004571CE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004571D1 E86C100000              call 00458242

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004571D6 6A04                    push 00000004
:004571D8 8A4508                  mov al, byte ptr [ebp+08]
:004571DB 50                      push eax
:004571DC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004571DF E8400F0000              call 00458124
:004571E4 E9FD0D0000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457115(C)
|
:004571E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004571EC 81E1FF000000            and ecx, 000000FF
:004571F2 83F906                  cmp ecx, 00000006
:004571F5 0F8595000000            jne 00457290

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:004571FB 6820124800              push 00481220

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:00457200 6A1A                    push 0000001A
:00457202 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457205 E8720F0000              call 0045817C

* Possible StringData Ref from Data Obj ->"pt"
                                  |
:0045720A 682C124800              push 0048122C
:0045720F 6A1B                    push 0000001B
:00457211 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457214 E8630F0000              call 0045817C
:00457219 6A00                    push 00000000
:0045721B 8A5508                  mov dl, byte ptr [ebp+08]
:0045721E 52                      push edx
:0045721F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457222 E8FD0E0000              call 00458124
:00457227 6A0F                    push 0000000F
:00457229 8A4508                  mov al, byte ptr [ebp+08]
:0045722C 50                      push eax
:0045722D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457230 E80D100000              call 00458242

* Possible StringData Ref from Data Obj ->"l["
                                  |
:00457235 6838124800              push 00481238
:0045723A 6A1C                    push 0000001C
:0045723C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045723F E8380F0000              call 0045817C
:00457244 6A01                    push 00000001
:00457246 8A4D08                  mov cl, byte ptr [ebp+08]
:00457249 51                      push ecx
:0045724A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045724D E8D20E0000              call 00458124
:00457252 6A10                    push 00000010
:00457254 8A5508                  mov dl, byte ptr [ebp+08]
:00457257 52                      push edx
:00457258 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045725B E8E20F0000              call 00458242
:00457260 6A0E                    push 0000000E
:00457262 8A4508                  mov al, byte ptr [ebp+08]
:00457265 50                      push eax
:00457266 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457269 E8D40F0000              call 00458242

* Possible StringData Ref from Data Obj ->"Ntg"
                                  |
:0045726E 6844124800              push 00481244
:00457273 6A1D                    push 0000001D
:00457275 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457278 E8FF0E0000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0045727D 6A02                    push 00000002
:0045727F 8A4D08                  mov cl, byte ptr [ebp+08]
:00457282 51                      push ecx
:00457283 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457286 E8990E0000              call 00458124
:0045728B E9560D0000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004571F5(C)
|
:00457290 8B5508                  mov edx, dword ptr [ebp+08]
:00457293 81E2FF000000            and edx, 000000FF
:00457299 83FA07                  cmp edx, 00000007
:0045729C 0F85B2000000            jne 00457354

* Possible StringData Ref from Data Obj ->"z"
                                  |
:004572A2 6850124800              push 00481250
:004572A7 6A1E                    push 0000001E
:004572A9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004572AC E8CB0E0000              call 0045817C
:004572B1 6A13                    push 00000013
:004572B3 8A4508                  mov al, byte ptr [ebp+08]
:004572B6 50                      push eax
:004572B7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004572BA E8830F0000              call 00458242
:004572BF 6A00                    push 00000000
:004572C1 8A4D08                  mov cl, byte ptr [ebp+08]
:004572C4 51                      push ecx
:004572C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004572C8 E8570E0000              call 00458124

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:004572CD 685C124800              push 0048125C
:004572D2 6A1F                    push 0000001F
:004572D4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004572D7 E8A00E0000              call 0045817C
:004572DC 6A11                    push 00000011
:004572DE 8A5508                  mov dl, byte ptr [ebp+08]
:004572E1 52                      push edx
:004572E2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004572E5 E8580F0000              call 00458242
:004572EA 6A01                    push 00000001
:004572EC 8A4508                  mov al, byte ptr [ebp+08]
:004572EF 50                      push eax
:004572F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004572F3 E82C0E0000              call 00458124

* Possible StringData Ref from Data Obj ->"l["
                                  |
:004572F8 6868124800              push 00481268
:004572FD 6A20                    push 00000020
:004572FF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457302 E8750E0000              call 0045817C

* Possible StringData Ref from Data Obj ->"tq"
                                  |
:00457307 6874124800              push 00481274
:0045730C 6A21                    push 00000021
:0045730E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457311 E8660E0000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457316 6A02                    push 00000002
:00457318 8A4D08                  mov cl, byte ptr [ebp+08]
:0045731B 51                      push ecx
:0045731C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045731F E8000E0000              call 00458124
:00457324 6A12                    push 00000012
:00457326 8A5508                  mov dl, byte ptr [ebp+08]
:00457329 52                      push edx
:0045732A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045732D E8100F0000              call 00458242

* Possible StringData Ref from Data Obj ->"TNG"
                                  |
:00457332 6880124800              push 00481280
:00457337 6A22                    push 00000022
:00457339 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045733C E83B0E0000              call 0045817C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00457341 6A03                    push 00000003
:00457343 8A4508                  mov al, byte ptr [ebp+08]
:00457346 50                      push eax
:00457347 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045734A E8D50D0000              call 00458124
:0045734F E9920C0000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045729C(C)
|
:00457354 8B4D08                  mov ecx, dword ptr [ebp+08]
:00457357 81E1FF000000            and ecx, 000000FF
:0045735D 83F908                  cmp ecx, 00000008
:00457360 755B                    jne 004573BD

* Possible StringData Ref from Data Obj ->"z"
                                  |
:00457362 688C124800              push 0048128C
:00457367 6A23                    push 00000023
:00457369 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045736C E80B0E0000              call 0045817C
:00457371 6A00                    push 00000000
:00457373 8A5508                  mov dl, byte ptr [ebp+08]
:00457376 52                      push edx
:00457377 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045737A E8A50D0000              call 00458124

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:0045737F 6898124800              push 00481298
:00457384 6A24                    push 00000024
:00457386 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457389 E8EE0D0000              call 0045817C
:0045738E 6A01                    push 00000001
:00457390 8A4508                  mov al, byte ptr [ebp+08]
:00457393 50                      push eax
:00457394 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457397 E8880D0000              call 00458124

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0045739C 6A14                    push 00000014
:0045739E 8A4D08                  mov cl, byte ptr [ebp+08]
:004573A1 51                      push ecx
:004573A2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004573A5 E8980E0000              call 00458242

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004573AA 6A02                    push 00000002
:004573AC 8A5508                  mov dl, byte ptr [ebp+08]
:004573AF 52                      push edx
:004573B0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004573B3 E86C0D0000              call 00458124
:004573B8 E9290C0000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457360(C)
|
:004573BD 8B4508                  mov eax, dword ptr [ebp+08]
:004573C0 25FF000000              and eax, 000000FF
:004573C5 83F809                  cmp eax, 00000009
:004573C8 0F85A4000000            jne 00457472

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:004573CE 68A4124800              push 004812A4
:004573D3 6A25                    push 00000025
:004573D5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004573D8 E89F0D0000              call 0045817C

* Possible StringData Ref from Data Obj ->"hsq"
                                  |
:004573DD 68B0124800              push 004812B0
:004573E2 6A26                    push 00000026
:004573E4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004573E7 E8900D0000              call 0045817C
:004573EC 6A00                    push 00000000
:004573EE 8A4D08                  mov cl, byte ptr [ebp+08]
:004573F1 51                      push ecx
:004573F2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004573F5 E82A0D0000              call 00458124

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:004573FA 6A15                    push 00000015
:004573FC 8A5508                  mov dl, byte ptr [ebp+08]
:004573FF 52                      push edx
:00457400 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457403 E83A0E0000              call 00458242

* Possible StringData Ref from Data Obj ->"l["
                                  |
:00457408 68BC124800              push 004812BC
:0045740D 6A27                    push 00000027
:0045740F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457412 E8650D0000              call 0045817C

* Possible StringData Ref from Data Obj ->"sq"
                                  |
:00457417 68C8124800              push 004812C8
:0045741C 6A28                    push 00000028
:0045741E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457421 E8560D0000              call 0045817C

* Possible StringData Ref from Data Obj ->"жq"
                                  |
:00457426 68D4124800              push 004812D4
:0045742B 6A29                    push 00000029
:0045742D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457430 E8470D0000              call 0045817C
:00457435 6A01                    push 00000001
:00457437 8A4508                  mov al, byte ptr [ebp+08]
:0045743A 50                      push eax
:0045743B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045743E E8E10C0000              call 00458124
:00457443 6A16                    push 00000016
:00457445 8A4D08                  mov cl, byte ptr [ebp+08]
:00457448 51                      push ecx
:00457449 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045744C E8F10D0000              call 00458242

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457451 6A02                    push 00000002
:00457453 8A5508                  mov dl, byte ptr [ebp+08]
:00457456 52                      push edx
:00457457 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045745A E8C50C0000              call 00458124

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045745F 6A03                    push 00000003
:00457461 8A4508                  mov al, byte ptr [ebp+08]
:00457464 50                      push eax
:00457465 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457468 E8B70C0000              call 00458124
:0045746D E9740B0000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004573C8(C)
|
:00457472 8B4D08                  mov ecx, dword ptr [ebp+08]
:00457475 81E1FF000000            and ecx, 000000FF
:0045747B 83F90A                  cmp ecx, 0000000A
:0045747E 0F8595000000            jne 00457519

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:00457484 68E0124800              push 004812E0
:00457489 6A2A                    push 0000002A
:0045748B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045748E E8E90C0000              call 0045817C
:00457493 6A00                    push 00000000
:00457495 8A5508                  mov dl, byte ptr [ebp+08]
:00457498 52                      push edx
:00457499 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045749C E8830C0000              call 00458124
:004574A1 6A18                    push 00000018
:004574A3 8A4508                  mov al, byte ptr [ebp+08]
:004574A6 50                      push eax
:004574A7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004574AA E8930D0000              call 00458242
:004574AF 6A01                    push 00000001
:004574B1 8A4D08                  mov cl, byte ptr [ebp+08]
:004574B4 51                      push ecx
:004574B5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004574B8 E8670C0000              call 00458124

* Possible StringData Ref from Data Obj ->"v"
                                  |
:004574BD 68EC124800              push 004812EC
:004574C2 6A2B                    push 0000002B
:004574C4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004574C7 E8B00C0000              call 0045817C

* Possible StringData Ref from Data Obj ->"s"
                                  |
:004574CC 68F8124800              push 004812F8
:004574D1 6A2C                    push 0000002C
:004574D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004574D6 E8A10C0000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004574DB 6A02                    push 00000002
:004574DD 8A5508                  mov dl, byte ptr [ebp+08]
:004574E0 52                      push edx
:004574E1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004574E4 E83B0C0000              call 00458124

* Possible StringData Ref from Data Obj ->"ctЪ"
                                  |
:004574E9 6804134800              push 00481304
:004574EE 6A2D                    push 0000002D
:004574F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004574F3 E8840C0000              call 0045817C
:004574F8 6A17                    push 00000017
:004574FA 8A4508                  mov al, byte ptr [ebp+08]
:004574FD 50                      push eax
:004574FE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457501 E83C0D0000              call 00458242

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00457506 6A03                    push 00000003
:00457508 8A4D08                  mov cl, byte ptr [ebp+08]
:0045750B 51                      push ecx
:0045750C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045750F E8100C0000              call 00458124
:00457514 E9CD0A0000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045747E(C)
|
:00457519 8B5508                  mov edx, dword ptr [ebp+08]
:0045751C 81E2FF000000            and edx, 000000FF
:00457522 83FA0B                  cmp edx, 0000000B
:00457525 755B                    jne 00457582

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:00457527 6810134800              push 00481310
:0045752C 6A2E                    push 0000002E
:0045752E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457531 E8460C0000              call 0045817C
:00457536 6A00                    push 00000000
:00457538 8A4508                  mov al, byte ptr [ebp+08]
:0045753B 50                      push eax
:0045753C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045753F E8E00B0000              call 00458124

* Possible StringData Ref from Data Obj ->""
                                  |
:00457544 681C134800              push 0048131C
:00457549 6A2F                    push 0000002F
:0045754B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045754E E8290C0000              call 0045817C
:00457553 6A19                    push 00000019
:00457555 8A4D08                  mov cl, byte ptr [ebp+08]
:00457558 51                      push ecx
:00457559 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045755C E8E10C0000              call 00458242
:00457561 6A01                    push 00000001
:00457563 8A5508                  mov dl, byte ptr [ebp+08]
:00457566 52                      push edx
:00457567 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045756A E8B50B0000              call 00458124

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0045756F 6A02                    push 00000002
:00457571 8A4508                  mov al, byte ptr [ebp+08]
:00457574 50                      push eax
:00457575 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457578 E8A70B0000              call 00458124
:0045757D E9640A0000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457525(C)
|
:00457582 8B4D08                  mov ecx, dword ptr [ebp+08]
:00457585 81E1FF000000            and ecx, 000000FF
:0045758B 83F90C                  cmp ecx, 0000000C
:0045758E 0F85A4000000            jne 00457638

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:00457594 6824134800              push 00481324
:00457599 6A30                    push 00000030
:0045759B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045759E E8D90B0000              call 0045817C

* Possible StringData Ref from Data Obj ->"jq"
                                  |
:004575A3 6830134800              push 00481330
:004575A8 6A31                    push 00000031
:004575AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004575AD E8CA0B0000              call 0045817C
:004575B2 6A00                    push 00000000
:004575B4 8A5508                  mov dl, byte ptr [ebp+08]
:004575B7 52                      push edx
:004575B8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004575BB E8640B0000              call 00458124

* Possible StringData Ref from Data Obj ->"N"
                                  |
:004575C0 683C134800              push 0048133C
:004575C5 6A32                    push 00000032
:004575C7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004575CA E8AD0B0000              call 0045817C
:004575CF 6A01                    push 00000001
:004575D1 8A4508                  mov al, byte ptr [ebp+08]
:004575D4 50                      push eax
:004575D5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004575D8 E8470B0000              call 00458124

* Possible StringData Ref from Data Obj ->"бd"
                                  |
:004575DD 6848134800              push 00481348
:004575E2 6A33                    push 00000033
:004575E4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004575E7 E8900B0000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004575EC 6A02                    push 00000002
:004575EE 8A4D08                  mov cl, byte ptr [ebp+08]
:004575F1 51                      push ecx
:004575F2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004575F5 E82A0B0000              call 00458124

* Possible StringData Ref from Data Obj ->""
                                  |
:004575FA 6854134800              push 00481354
:004575FF 6A34                    push 00000034
:00457601 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457604 E8730B0000              call 0045817C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00457609 6A03                    push 00000003
:0045760B 8A5508                  mov dl, byte ptr [ebp+08]
:0045760E 52                      push edx
:0045760F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457612 E80D0B0000              call 00458124

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:001A, ""
                                  |
:00457617 6A1A                    push 0000001A
:00457619 8A4508                  mov al, byte ptr [ebp+08]
:0045761C 50                      push eax
:0045761D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457620 E81D0C0000              call 00458242

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00457625 6A04                    push 00000004
:00457627 8A4D08                  mov cl, byte ptr [ebp+08]
:0045762A 51                      push ecx
:0045762B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045762E E8F10A0000              call 00458124
:00457633 E9AE090000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045758E(C)
|
:00457638 8B5508                  mov edx, dword ptr [ebp+08]
:0045763B 81E2FF000000            and edx, 000000FF
:00457641 83FA0D                  cmp edx, 0000000D
:00457644 0F85A3000000            jne 004576ED

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:0045764A 685C134800              push 0048135C
:0045764F 6A35                    push 00000035
:00457651 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457654 E8230B0000              call 0045817C
:00457659 6A00                    push 00000000
:0045765B 8A4508                  mov al, byte ptr [ebp+08]
:0045765E 50                      push eax
:0045765F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457662 E8BD0A0000              call 00458124

* Possible StringData Ref from Data Obj ->"jͩv"
                                  |
:00457667 6868134800              push 00481368

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:0036, ""
                                  |
:0045766C 6A36                    push 00000036
:0045766E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457671 E8060B0000              call 0045817C
:00457676 6A01                    push 00000001
:00457678 8A4D08                  mov cl, byte ptr [ebp+08]
:0045767B 51                      push ecx
:0045767C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045767F E8A00A0000              call 00458124

* Possible StringData Ref from Data Obj ->"Э˧"
                                  |
:00457684 6874134800              push 00481374
:00457689 6A37                    push 00000037
:0045768B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045768E E8E90A0000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457693 6A02                    push 00000002
:00457695 8A5508                  mov dl, byte ptr [ebp+08]
:00457698 52                      push edx
:00457699 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045769C E8830A0000              call 00458124
:004576A1 6A1C                    push 0000001C
:004576A3 8A4508                  mov al, byte ptr [ebp+08]
:004576A6 50                      push eax
:004576A7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004576AA E8930B0000              call 00458242

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004576AF 6A03                    push 00000003
:004576B1 8A4D08                  mov cl, byte ptr [ebp+08]
:004576B4 51                      push ecx
:004576B5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004576B8 E8670A0000              call 00458124

* Possible StringData Ref from Data Obj ->"ᦸŲs"
                                  |
:004576BD 6880134800              push 00481380
:004576C2 6A38                    push 00000038
:004576C4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004576C7 E8B00A0000              call 0045817C
:004576CC 6A1B                    push 0000001B
:004576CE 8A5508                  mov dl, byte ptr [ebp+08]
:004576D1 52                      push edx
:004576D2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004576D5 E8680B0000              call 00458242

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004576DA 6A04                    push 00000004
:004576DC 8A4508                  mov al, byte ptr [ebp+08]
:004576DF 50                      push eax
:004576E0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004576E3 E83C0A0000              call 00458124
:004576E8 E9F9080000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457644(C)
|
:004576ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:004576F0 81E1FF000000            and ecx, 000000FF
:004576F6 83F90E                  cmp ecx, 0000000E
:004576F9 0F85A3000000            jne 004577A2
:004576FF 6A00                    push 00000000
:00457701 8A5508                  mov dl, byte ptr [ebp+08]
:00457704 52                      push edx
:00457705 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457708 E8170A0000              call 00458124

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:0045770D 688C134800              push 0048138C
:00457712 6A39                    push 00000039
:00457714 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457717 E8600A0000              call 0045817C
:0045771C 6A01                    push 00000001
:0045771E 8A4508                  mov al, byte ptr [ebp+08]
:00457721 50                      push eax
:00457722 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457725 E8FA090000              call 00458124
:0045772A 6A1E                    push 0000001E
:0045772C 8A4D08                  mov cl, byte ptr [ebp+08]
:0045772F 51                      push ecx
:00457730 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457733 E80A0B0000              call 00458242

* Possible StringData Ref from Data Obj ->"֩ж"
                                  |
:00457738 6898134800              push 00481398

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003A, ""
                                  |
:0045773D 6A3A                    push 0000003A
:0045773F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457742 E8350A0000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457747 6A02                    push 00000002
:00457749 8A5508                  mov dl, byte ptr [ebp+08]
:0045774C 52                      push edx
:0045774D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457750 E8CF090000              call 00458124

* Possible StringData Ref from Data Obj ->"`"
                                  |
:00457755 68A4134800              push 004813A4

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003B, ""
                                  |
:0045775A 6A3B                    push 0000003B
:0045775C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045775F E8180A0000              call 0045817C

* Possible StringData Ref from Data Obj ->"qí"
                                  |
:00457764 68B0134800              push 004813B0

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003C, ""
                                  |
:00457769 6A3C                    push 0000003C
:0045776B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045776E E8090A0000              call 0045817C
:00457773 6A1F                    push 0000001F
:00457775 8A4508                  mov al, byte ptr [ebp+08]
:00457778 50                      push eax
:00457779 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045777C E8C10A0000              call 00458242
:00457781 6A1D                    push 0000001D
:00457783 8A4D08                  mov cl, byte ptr [ebp+08]
:00457786 51                      push ecx
:00457787 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045778A E8B30A0000              call 00458242

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045778F 6A03                    push 00000003
:00457791 8A5508                  mov dl, byte ptr [ebp+08]
:00457794 52                      push edx
:00457795 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457798 E887090000              call 00458124
:0045779D E944080000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004576F9(C)
|
:004577A2 8B4508                  mov eax, dword ptr [ebp+08]
:004577A5 25FF000000              and eax, 000000FF
:004577AA 83F80F                  cmp eax, 0000000F
:004577AD 0F8596000000            jne 00457849
:004577B3 6A00                    push 00000000
:004577B5 8A4D08                  mov cl, byte ptr [ebp+08]
:004577B8 51                      push ecx
:004577B9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004577BC E863090000              call 00458124

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:004577C1 68BC134800              push 004813BC
:004577C6 6A3D                    push 0000003D
:004577C8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004577CB E8AC090000              call 0045817C
:004577D0 6A01                    push 00000001
:004577D2 8A5508                  mov dl, byte ptr [ebp+08]
:004577D5 52                      push edx
:004577D6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004577D9 E846090000              call 00458124

* Possible StringData Ref from Data Obj ->"Qи۫O"
                                  |
:004577DE 68C8134800              push 004813C8
:004577E3 6A3E                    push 0000003E
:004577E5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004577E8 E88F090000              call 0045817C

* Possible StringData Ref from Data Obj ->"TMΤ["
                                  |
:004577ED 68D4134800              push 004813D4
:004577F2 6A3F                    push 0000003F
:004577F4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004577F7 E880090000              call 0045817C

* Possible StringData Ref from Data Obj ->"TAM"
                                  |
:004577FC 68E0134800              push 004813E0
:00457801 6A40                    push 00000040
:00457803 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457806 E871090000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0045780B 6A02                    push 00000002
:0045780D 8A4508                  mov al, byte ptr [ebp+08]
:00457810 50                      push eax
:00457811 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457814 E80B090000              call 00458124
:00457819 6A20                    push 00000020
:0045781B 8A4D08                  mov cl, byte ptr [ebp+08]
:0045781E 51                      push ecx
:0045781F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457822 E81B0A0000              call 00458242

* Possible StringData Ref from Data Obj ->"s"
                                  |
:00457827 68EC134800              push 004813EC
:0045782C 6A41                    push 00000041
:0045782E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457831 E846090000              call 0045817C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00457836 6A03                    push 00000003
:00457838 8A5508                  mov dl, byte ptr [ebp+08]
:0045783B 52                      push edx
:0045783C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045783F E8E0080000              call 00458124
:00457844 E99D070000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004577AD(C)
|
:00457849 8B4508                  mov eax, dword ptr [ebp+08]
:0045784C 25FF000000              and eax, 000000FF
:00457851 83F810                  cmp eax, 00000010
:00457854 756A                    jne 004578C0

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:00457856 68F8134800              push 004813F8
:0045785B 6A42                    push 00000042
:0045785D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457860 E817090000              call 0045817C
:00457865 6A00                    push 00000000
:00457867 8A4D08                  mov cl, byte ptr [ebp+08]
:0045786A 51                      push ecx
:0045786B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045786E E8B1080000              call 00458124
:00457873 6A22                    push 00000022
:00457875 8A5508                  mov dl, byte ptr [ebp+08]
:00457878 52                      push edx
:00457879 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045787C E8C1090000              call 00458242
:00457881 6A01                    push 00000001
:00457883 8A4508                  mov al, byte ptr [ebp+08]
:00457886 50                      push eax
:00457887 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045788A E895080000              call 00458124

* Possible StringData Ref from Data Obj ->"lq["
                                  |
:0045788F 6804144800              push 00481404
:00457894 6A43                    push 00000043
:00457896 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457899 E8DE080000              call 0045817C

* Possible StringData Ref from Data Obj ->"s"
                                  |
:0045789E 6810144800              push 00481410
:004578A3 6A44                    push 00000044
:004578A5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004578A8 E8CF080000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004578AD 6A02                    push 00000002
:004578AF 8A4D08                  mov cl, byte ptr [ebp+08]
:004578B2 51                      push ecx
:004578B3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004578B6 E869080000              call 00458124
:004578BB E926070000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457854(C)
|
:004578C0 8B5508                  mov edx, dword ptr [ebp+08]
:004578C3 81E2FF000000            and edx, 000000FF
:004578C9 83FA11                  cmp edx, 00000011
:004578CC 7579                    jne 00457947

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:004578CE 681C144800              push 0048141C
:004578D3 6A45                    push 00000045
:004578D5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004578D8 E89F080000              call 0045817C

* Possible StringData Ref from Data Obj ->"eq"
                                  |
:004578DD 6828144800              push 00481428
:004578E2 6A46                    push 00000046
:004578E4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004578E7 E890080000              call 0045817C
:004578EC 6A00                    push 00000000
:004578EE 8A4508                  mov al, byte ptr [ebp+08]
:004578F1 50                      push eax
:004578F2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004578F5 E82A080000              call 00458124

* Possible StringData Ref from Data Obj ->"tc׺"
                                  |
:004578FA 6834144800              push 00481434
:004578FF 6A47                    push 00000047
:00457901 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457904 E873080000              call 0045817C

* Possible StringData Ref from Data Obj ->"xs"
                                  |
:00457909 6840144800              push 00481440
:0045790E 6A48                    push 00000048
:00457910 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457913 E864080000              call 0045817C
:00457918 6A01                    push 00000001
:0045791A 8A4D08                  mov cl, byte ptr [ebp+08]
:0045791D 51                      push ecx
:0045791E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457921 E8FE070000              call 00458124
:00457926 6A23                    push 00000023
:00457928 8A5508                  mov dl, byte ptr [ebp+08]
:0045792B 52                      push edx
:0045792C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045792F E80E090000              call 00458242

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457934 6A02                    push 00000002
:00457936 8A4508                  mov al, byte ptr [ebp+08]
:00457939 50                      push eax
:0045793A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045793D E8E2070000              call 00458124
:00457942 E99F060000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004578CC(C)
|
:00457947 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045794A 81E1FF000000            and ecx, 000000FF
:00457950 83F912                  cmp ecx, 00000012
:00457953 0F85A4000000            jne 004579FD

* Possible StringData Ref from Data Obj ->"Ų"
                                  |
:00457959 684C144800              push 0048144C
:0045795E 6A49                    push 00000049
:00457960 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457963 E814080000              call 0045817C
:00457968 6A00                    push 00000000
:0045796A 8A5508                  mov dl, byte ptr [ebp+08]
:0045796D 52                      push edx
:0045796E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457971 E8AE070000              call 00458124

* Possible StringData Ref from Data Obj ->"jͩv"
                                  |
:00457976 6858144800              push 00481458
:0045797B 6A4A                    push 0000004A
:0045797D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457980 E8F7070000              call 0045817C

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:00457985 6864144800              push 00481464
:0045798A 6A4B                    push 0000004B
:0045798C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045798F E8E8070000              call 0045817C
:00457994 6A01                    push 00000001
:00457996 8A4508                  mov al, byte ptr [ebp+08]
:00457999 50                      push eax
:0045799A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045799D E882070000              call 00458124
:004579A2 6A24                    push 00000024
:004579A4 8A4D08                  mov cl, byte ptr [ebp+08]
:004579A7 51                      push ecx
:004579A8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004579AB E892080000              call 00458242
:004579B0 6A25                    push 00000025
:004579B2 8A5508                  mov dl, byte ptr [ebp+08]
:004579B5 52                      push edx
:004579B6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004579B9 E884080000              call 00458242

* Possible StringData Ref from Data Obj ->"ᦸŲs"
                                  |
:004579BE 6870144800              push 00481470
:004579C3 6A4C                    push 0000004C
:004579C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004579C8 E8AF070000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004579CD 6A02                    push 00000002
:004579CF 8A4508                  mov al, byte ptr [ebp+08]
:004579D2 50                      push eax
:004579D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004579D6 E849070000              call 00458124

* Possible StringData Ref from Data Obj ->"j"
                                  |
:004579DB 687C144800              push 0048147C
:004579E0 6A4D                    push 0000004D
:004579E2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004579E5 E892070000              call 0045817C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004579EA 6A03                    push 00000003
:004579EC 8A4D08                  mov cl, byte ptr [ebp+08]
:004579EF 51                      push ecx
:004579F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004579F3 E82C070000              call 00458124
:004579F8 E9E9050000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457953(C)
|
:004579FD 8B5508                  mov edx, dword ptr [ebp+08]
:00457A00 81E2FF000000            and edx, 000000FF
:00457A06 83FA13                  cmp edx, 00000013
:00457A09 7578                    jne 00457A83

* Possible StringData Ref from Data Obj ->"lӤ["
                                  |
:00457A0B 6888144800              push 00481488
:00457A10 6A4E                    push 0000004E
:00457A12 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457A15 E862070000              call 0045817C

* Possible StringData Ref from Data Obj ->"s"
                                  |
:00457A1A 6894144800              push 00481494
:00457A1F 6A4F                    push 0000004F
:00457A21 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457A24 E853070000              call 0045817C
:00457A29 6A00                    push 00000000
:00457A2B 8A4508                  mov al, byte ptr [ebp+08]
:00457A2E 50                      push eax
:00457A2F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457A32 E8ED060000              call 00458124
:00457A37 6A27                    push 00000027
:00457A39 8A4D08                  mov cl, byte ptr [ebp+08]
:00457A3C 51                      push ecx
:00457A3D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457A40 E8FD070000              call 00458242

* Possible StringData Ref from Data Obj ->"QN"
                                  |
:00457A45 68A0144800              push 004814A0
:00457A4A 6A50                    push 00000050
:00457A4C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457A4F E828070000              call 0045817C
:00457A54 6A01                    push 00000001
:00457A56 8A5508                  mov dl, byte ptr [ebp+08]
:00457A59 52                      push edx
:00457A5A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457A5D E8C2060000              call 00458124
:00457A62 6A26                    push 00000026
:00457A64 8A4508                  mov al, byte ptr [ebp+08]
:00457A67 50                      push eax
:00457A68 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457A6B E8D2070000              call 00458242

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457A70 6A02                    push 00000002
:00457A72 8A4D08                  mov cl, byte ptr [ebp+08]
:00457A75 51                      push ecx
:00457A76 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457A79 E8A6060000              call 00458124
:00457A7E E963050000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457A09(C)
|
:00457A83 8B5508                  mov edx, dword ptr [ebp+08]
:00457A86 81E2FF000000            and edx, 000000FF
:00457A8C 83FA14                  cmp edx, 00000014
:00457A8F 0F85A4000000            jne 00457B39

* Possible StringData Ref from Data Obj ->"tߦha"
                                  |
:00457A95 68AC144800              push 004814AC
:00457A9A 6A51                    push 00000051
:00457A9C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457A9F E8D8060000              call 0045817C

* Possible StringData Ref from Data Obj ->"WZN"
                                  |
:00457AA4 68B8144800              push 004814B8
:00457AA9 6A52                    push 00000052
:00457AAB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457AAE E8C9060000              call 0045817C
:00457AB3 6A00                    push 00000000
:00457AB5 8A4508                  mov al, byte ptr [ebp+08]
:00457AB8 50                      push eax
:00457AB9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457ABC E863060000              call 00458124

* Possible StringData Ref from Data Obj ->"s"
                                  |
:00457AC1 68C4144800              push 004814C4
:00457AC6 6A53                    push 00000053
:00457AC8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457ACB E8AC060000              call 0045817C
:00457AD0 6A29                    push 00000029
:00457AD2 8A4D08                  mov cl, byte ptr [ebp+08]
:00457AD5 51                      push ecx
:00457AD6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457AD9 E864070000              call 00458242
:00457ADE 6A01                    push 00000001
:00457AE0 8A5508                  mov dl, byte ptr [ebp+08]
:00457AE3 52                      push edx
:00457AE4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457AE7 E838060000              call 00458124

* Possible StringData Ref from Data Obj ->"jͩv"
                                  |
:00457AEC 68D0144800              push 004814D0
:00457AF1 6A54                    push 00000054
:00457AF3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457AF6 E881060000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457AFB 6A02                    push 00000002
:00457AFD 8A4508                  mov al, byte ptr [ebp+08]
:00457B00 50                      push eax
:00457B01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457B04 E81B060000              call 00458124
:00457B09 6A28                    push 00000028
:00457B0B 8A4D08                  mov cl, byte ptr [ebp+08]
:00457B0E 51                      push ecx
:00457B0F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457B12 E82B070000              call 00458242

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:00457B17 68DC144800              push 004814DC
:00457B1C 6A55                    push 00000055
:00457B1E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457B21 E856060000              call 0045817C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00457B26 6A03                    push 00000003
:00457B28 8A5508                  mov dl, byte ptr [ebp+08]
:00457B2B 52                      push edx
:00457B2C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457B2F E8F0050000              call 00458124
:00457B34 E9AD040000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457A8F(C)
|
:00457B39 8B4508                  mov eax, dword ptr [ebp+08]
:00457B3C 25FF000000              and eax, 000000FF
:00457B41 83F815                  cmp eax, 00000015
:00457B44 0F8587000000            jne 00457BD1

* Possible StringData Ref from Data Obj ->"гӮa"
                                  |
:00457B4A 68E8144800              push 004814E8
:00457B4F 6A56                    push 00000056
:00457B51 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457B54 E823060000              call 0045817C

* Possible StringData Ref from Data Obj ->"@xp"
                                  |
:00457B59 68F4144800              push 004814F4
:00457B5E 6A57                    push 00000057
:00457B60 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457B63 E814060000              call 0045817C
:00457B68 6A2B                    push 0000002B
:00457B6A 8A4D08                  mov cl, byte ptr [ebp+08]
:00457B6D 51                      push ecx
:00457B6E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457B71 E8CC060000              call 00458242
:00457B76 6A00                    push 00000000
:00457B78 8A5508                  mov dl, byte ptr [ebp+08]
:00457B7B 52                      push edx
:00457B7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457B7F E8A0050000              call 00458124

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:00457B84 6800154800              push 00481500
:00457B89 6A58                    push 00000058
:00457B8B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457B8E E8E9050000              call 0045817C
:00457B93 6A2A                    push 0000002A
:00457B95 8A4508                  mov al, byte ptr [ebp+08]
:00457B98 50                      push eax
:00457B99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457B9C E8A1060000              call 00458242
:00457BA1 6A01                    push 00000001
:00457BA3 8A4D08                  mov cl, byte ptr [ebp+08]
:00457BA6 51                      push ecx
:00457BA7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457BAA E875050000              call 00458124

* Possible StringData Ref from Data Obj ->"EŶ"
                                  |
:00457BAF 680C154800              push 0048150C
:00457BB4 6A59                    push 00000059
:00457BB6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457BB9 E8BE050000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457BBE 6A02                    push 00000002
:00457BC0 8A5508                  mov dl, byte ptr [ebp+08]
:00457BC3 52                      push edx
:00457BC4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457BC7 E858050000              call 00458124
:00457BCC E915040000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457B44(C)
|
:00457BD1 8B4508                  mov eax, dword ptr [ebp+08]
:00457BD4 25FF000000              and eax, 000000FF
:00457BD9 83F816                  cmp eax, 00000016
:00457BDC 0F8587000000            jne 00457C69

* Possible StringData Ref from Data Obj ->"lӤ["
                                  |
:00457BE2 6818154800              push 00481518
:00457BE7 6A5A                    push 0000005A
:00457BE9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457BEC E88B050000              call 0045817C

* Possible StringData Ref from Data Obj ->"s"
                                  |
:00457BF1 6824154800              push 00481524
:00457BF6 6A5B                    push 0000005B
:00457BF8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457BFB E87C050000              call 0045817C

* Possible StringData Ref from Data Obj ->"ЮqN"
                                  |
:00457C00 6830154800              push 00481530
:00457C05 6A5C                    push 0000005C
:00457C07 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457C0A E86D050000              call 0045817C
:00457C0F 6A00                    push 00000000
:00457C11 8A4D08                  mov cl, byte ptr [ebp+08]
:00457C14 51                      push ecx
:00457C15 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457C18 E807050000              call 00458124
:00457C1D 6A2D                    push 0000002D
:00457C1F 8A5508                  mov dl, byte ptr [ebp+08]
:00457C22 52                      push edx
:00457C23 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457C26 E817060000              call 00458242

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:00457C2B 683C154800              push 0048153C
:00457C30 6A5D                    push 0000005D
:00457C32 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457C35 E842050000              call 0045817C
:00457C3A 6A01                    push 00000001
:00457C3C 8A4508                  mov al, byte ptr [ebp+08]
:00457C3F 50                      push eax
:00457C40 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457C43 E8DC040000              call 00458124
:00457C48 6A2C                    push 0000002C
:00457C4A 8A4D08                  mov cl, byte ptr [ebp+08]
:00457C4D 51                      push ecx
:00457C4E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457C51 E8EC050000              call 00458242

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457C56 6A02                    push 00000002
:00457C58 8A5508                  mov dl, byte ptr [ebp+08]
:00457C5B 52                      push edx
:00457C5C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457C5F E8C0040000              call 00458124
:00457C64 E97D030000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457BDC(C)
|
:00457C69 8B4508                  mov eax, dword ptr [ebp+08]
:00457C6C 25FF000000              and eax, 000000FF
:00457C71 83F817                  cmp eax, 00000017
:00457C74 0F85B1000000            jne 00457D2B

* Possible StringData Ref from Data Obj ->"ЮqN"
                                  |
:00457C7A 6848154800              push 00481548
:00457C7F 6A5E                    push 0000005E
:00457C81 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457C84 E8F3040000              call 0045817C
:00457C89 6A00                    push 00000000
:00457C8B 8A4D08                  mov cl, byte ptr [ebp+08]
:00457C8E 51                      push ecx
:00457C8F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457C92 E88D040000              call 00458124

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:00457C97 6854154800              push 00481554
:00457C9C 6A5F                    push 0000005F
:00457C9E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457CA1 E8D6040000              call 0045817C
:00457CA6 6A2E                    push 0000002E
:00457CA8 8A5508                  mov dl, byte ptr [ebp+08]
:00457CAB 52                      push edx
:00457CAC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457CAF E88E050000              call 00458242
:00457CB4 6A01                    push 00000001
:00457CB6 8A4508                  mov al, byte ptr [ebp+08]
:00457CB9 50                      push eax
:00457CBA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457CBD E862040000              call 00458124

* Possible StringData Ref from Data Obj ->"Mvv"
                                  |
:00457CC2 6860154800              push 00481560
:00457CC7 6A60                    push 00000060
:00457CC9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457CCC E8AB040000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457CD1 6A02                    push 00000002
:00457CD3 8A4D08                  mov cl, byte ptr [ebp+08]
:00457CD6 51                      push ecx
:00457CD7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457CDA E845040000              call 00458124
:00457CDF 6A2F                    push 0000002F
:00457CE1 8A5508                  mov dl, byte ptr [ebp+08]
:00457CE4 52                      push edx
:00457CE5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457CE8 E855050000              call 00458242

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00457CED 6A03                    push 00000003
:00457CEF 8A4508                  mov al, byte ptr [ebp+08]
:00457CF2 50                      push eax
:00457CF3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457CF6 E829040000              call 00458124

* Possible StringData Ref from Data Obj ->"q"
                                  |
:00457CFB 686C154800              push 0048156C
:00457D00 6A61                    push 00000061
:00457D02 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457D05 E872040000              call 0045817C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00457D0A 6A04                    push 00000004
:00457D0C 8A4D08                  mov cl, byte ptr [ebp+08]
:00457D0F 51                      push ecx
:00457D10 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457D13 E80C040000              call 00458124

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00457D18 6A05                    push 00000005
:00457D1A 8A5508                  mov dl, byte ptr [ebp+08]
:00457D1D 52                      push edx
:00457D1E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457D21 E8FE030000              call 00458124
:00457D26 E9BB020000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457C74(C)
|
:00457D2B 8B4508                  mov eax, dword ptr [ebp+08]
:00457D2E 25FF000000              and eax, 000000FF
:00457D33 83F818                  cmp eax, 00000018
:00457D36 0F85B2000000            jne 00457DEE

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:00457D3C 6878154800              push 00481578
:00457D41 6A62                    push 00000062
:00457D43 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457D46 E831040000              call 0045817C

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:00457D4B 6884154800              push 00481584
:00457D50 6A63                    push 00000063
:00457D52 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457D55 E822040000              call 0045817C
:00457D5A 6A00                    push 00000000
:00457D5C 8A4D08                  mov cl, byte ptr [ebp+08]
:00457D5F 51                      push ecx
:00457D60 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457D63 E8BC030000              call 00458124
:00457D68 6A30                    push 00000030
:00457D6A 8A5508                  mov dl, byte ptr [ebp+08]
:00457D6D 52                      push edx
:00457D6E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457D71 E8CC040000              call 00458242

* Possible StringData Ref from Data Obj ->"q"
                                  |
:00457D76 6890154800              push 00481590
:00457D7B 6A64                    push 00000064
:00457D7D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457D80 E8F7030000              call 0045817C
:00457D85 6A32                    push 00000032
:00457D87 8A4508                  mov al, byte ptr [ebp+08]
:00457D8A 50                      push eax
:00457D8B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457D8E E8AF040000              call 00458242
:00457D93 6A01                    push 00000001
:00457D95 8A4D08                  mov cl, byte ptr [ebp+08]
:00457D98 51                      push ecx
:00457D99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457D9C E883030000              call 00458124

* Possible StringData Ref from Data Obj ->"Ӥtç"
                                  |
:00457DA1 689C154800              push 0048159C

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:00457DA6 6A65                    push 00000065
:00457DA8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457DAB E8CC030000              call 0045817C
:00457DB0 6A31                    push 00000031
:00457DB2 8A5508                  mov dl, byte ptr [ebp+08]
:00457DB5 52                      push edx
:00457DB6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457DB9 E884040000              call 00458242

* Possible StringData Ref from Data Obj ->"y"
                                  |
:00457DBE 68A8154800              push 004815A8

* Possible Ref to Menu: APPMENU, Item: "}e(L)"
                                  |
:00457DC3 6A66                    push 00000066
:00457DC5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457DC8 E8AF030000              call 0045817C
:00457DCD 6A33                    push 00000033
:00457DCF 8A4508                  mov al, byte ptr [ebp+08]
:00457DD2 50                      push eax
:00457DD3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457DD6 E867040000              call 00458242

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457DDB 6A02                    push 00000002
:00457DDD 8A4D08                  mov cl, byte ptr [ebp+08]
:00457DE0 51                      push ecx
:00457DE1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457DE4 E83B030000              call 00458124
:00457DE9 E9F8010000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457D36(C)
|
:00457DEE 8B5508                  mov edx, dword ptr [ebp+08]
:00457DF1 81E2FF000000            and edx, 000000FF
:00457DF7 83FA19                  cmp edx, 00000019
:00457DFA 756A                    jne 00457E66

* Possible StringData Ref from Data Obj ->"q"
                                  |
:00457DFC 68B4154800              push 004815B4
:00457E01 6A67                    push 00000067
:00457E03 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457E06 E871030000              call 0045817C
:00457E0B 6A00                    push 00000000
:00457E0D 8A4508                  mov al, byte ptr [ebp+08]
:00457E10 50                      push eax
:00457E11 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457E14 E80B030000              call 00458124

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:00457E19 68C0154800              push 004815C0

* Possible Ref to Menu: APPMENU, Item: "8_(X)"
                                  |
:00457E1E 6A68                    push 00000068
:00457E20 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457E23 E854030000              call 0045817C
:00457E28 6A01                    push 00000001
:00457E2A 8A4D08                  mov cl, byte ptr [ebp+08]
:00457E2D 51                      push ecx
:00457E2E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457E31 E8EE020000              call 00458124
:00457E36 6A34                    push 00000034
:00457E38 8A5508                  mov dl, byte ptr [ebp+08]
:00457E3B 52                      push edx
:00457E3C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457E3F E8FE030000              call 00458242

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:00457E44 68CC154800              push 004815CC

* Possible Ref to Menu: APPMENU, Item: "fo(B)"
                                  |
:00457E49 6A69                    push 00000069
:00457E4B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457E4E E829030000              call 0045817C

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457E53 6A02                    push 00000002
:00457E55 8A4508                  mov al, byte ptr [ebp+08]
:00457E58 50                      push eax
:00457E59 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457E5C E8C3020000              call 00458124
:00457E61 E980010000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457DFA(C)
|
:00457E66 8B4D08                  mov ecx, dword ptr [ebp+08]
:00457E69 81E1FF000000            and ecx, 000000FF
:00457E6F 83F91A                  cmp ecx, 0000001A
:00457E72 0F8596000000            jne 00457F0E

* Possible StringData Ref from Data Obj ->"´ЫH"
                                  |
:00457E78 68D8154800              push 004815D8

* Possible Ref to Menu: APPMENU, Item: "g,o(T)"
                                  |
:00457E7D 6A6A                    push 0000006A
:00457E7F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457E82 E8F5020000              call 0045817C

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:00457E87 68E4154800              push 004815E4

* Possible Ref to Menu: APPMENU, Item: "(K)"
                                  |
:00457E8C 6A6B                    push 0000006B
:00457E8E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457E91 E8E6020000              call 0045817C
:00457E96 6A00                    push 00000000
:00457E98 8A5508                  mov dl, byte ptr [ebp+08]
:00457E9B 52                      push edx
:00457E9C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457E9F E880020000              call 00458124

* Possible StringData Ref from Data Obj ->"гӮa"
                                  |
:00457EA4 68F0154800              push 004815F0

* Possible Ref to Menu: APPMENU, Item: ":)(J)"
                                  |
:00457EA9 6A6C                    push 0000006C
:00457EAB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457EAE E8C9020000              call 0045817C

* Possible StringData Ref from Data Obj ->"]t@q"
                                  |
:00457EB3 68FC154800              push 004815FC

* Possible Ref to Menu: APPMENU, Item: "   _(E)"
                                  |
:00457EB8 6A6D                    push 0000006D
:00457EBA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457EBD E8BA020000              call 0045817C
:00457EC2 6A01                    push 00000001
:00457EC4 8A4508                  mov al, byte ptr [ebp+08]
:00457EC7 50                      push eax
:00457EC8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457ECB E854020000              call 00458124

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:00457ED0 6808164800              push 00481608
:00457ED5 6A6E                    push 0000006E
:00457ED7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457EDA E89D020000              call 0045817C
:00457EDF 6A35                    push 00000035
:00457EE1 8A4D08                  mov cl, byte ptr [ebp+08]
:00457EE4 51                      push ecx
:00457EE5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457EE8 E855030000              call 00458242

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:0036, ""
                                  |
:00457EED 6A36                    push 00000036
:00457EEF 8A5508                  mov dl, byte ptr [ebp+08]
:00457EF2 52                      push edx
:00457EF3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457EF6 E847030000              call 00458242

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457EFB 6A02                    push 00000002
:00457EFD 8A4508                  mov al, byte ptr [ebp+08]
:00457F00 50                      push eax
:00457F01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457F04 E81B020000              call 00458124
:00457F09 E9D8000000              jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457E72(C)
|
:00457F0E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00457F11 81E1FF000000            and ecx, 000000FF
:00457F17 83F91B                  cmp ecx, 0000001B
:00457F1A 7566                    jne 00457F82

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:00457F1C 6814164800              push 00481614
:00457F21 6A6F                    push 0000006F
:00457F23 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457F26 E851020000              call 0045817C

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:00457F2B 6820164800              push 00481620

* Possible Ref to Menu: APPMENU, Item: "6\Sw"
                                  |
:00457F30 6A70                    push 00000070
:00457F32 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457F35 E842020000              call 0045817C
:00457F3A 6A00                    push 00000000
:00457F3C 8A5508                  mov dl, byte ptr [ebp+08]
:00457F3F 52                      push edx
:00457F40 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457F43 E8DC010000              call 00458124
:00457F48 6A38                    push 00000038
:00457F4A 8A4508                  mov al, byte ptr [ebp+08]
:00457F4D 50                      push eax
:00457F4E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457F51 E8EC020000              call 00458242
:00457F56 6A01                    push 00000001
:00457F58 8A4D08                  mov cl, byte ptr [ebp+08]
:00457F5B 51                      push ecx
:00457F5C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457F5F E8C0010000              call 00458124
:00457F64 6A37                    push 00000037
:00457F66 8A5508                  mov dl, byte ptr [ebp+08]
:00457F69 52                      push edx
:00457F6A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457F6D E8D0020000              call 00458242

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00457F72 6A02                    push 00000002
:00457F74 8A4508                  mov al, byte ptr [ebp+08]
:00457F77 50                      push eax
:00457F78 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457F7B E8A4010000              call 00458124
:00457F80 EB64                    jmp 00457FE6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457F1A(C)
|
:00457F82 8B4D08                  mov ecx, dword ptr [ebp+08]
:00457F85 81E1FF000000            and ecx, 000000FF
:00457F8B 83F91C                  cmp ecx, 0000001C
:00457F8E 7556                    jne 00457FE6

* Possible StringData Ref from Data Obj ->"Q"
                                  |
:00457F90 682C164800              push 0048162C
:00457F95 6A71                    push 00000071
:00457F97 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457F9A E8DD010000              call 0045817C

* Possible StringData Ref from Data Obj ->"wtad"
                                  |
:00457F9F 6838164800              push 00481638
:00457FA4 6A72                    push 00000072
:00457FA6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457FA9 E8CE010000              call 0045817C

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003A, ""
                                  |
:00457FAE 6A3A                    push 0000003A
:00457FB0 8A5508                  mov dl, byte ptr [ebp+08]
:00457FB3 52                      push edx
:00457FB4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457FB7 E886020000              call 00458242
:00457FBC 6A00                    push 00000000
:00457FBE 8A4508                  mov al, byte ptr [ebp+08]
:00457FC1 50                      push eax
:00457FC2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457FC5 E85A010000              call 00458124
:00457FCA 6A39                    push 00000039
:00457FCC 8A4D08                  mov cl, byte ptr [ebp+08]
:00457FCF 51                      push ecx
:00457FD0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457FD3 E86A020000              call 00458242
:00457FD8 6A01                    push 00000001
:00457FDA 8A5508                  mov dl, byte ptr [ebp+08]
:00457FDD 52                      push edx
:00457FDE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457FE1 E83E010000              call 00458124

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00456E6E(U), :00456F31(U), :00456FAA(U), :0045705E(U), :00457105(U)
|:004571E4(U), :0045728B(U), :0045734F(U), :004573B8(U), :0045746D(U)
|:00457514(U), :0045757D(U), :00457633(U), :004576E8(U), :0045779D(U)
|:00457844(U), :004578BB(U), :00457942(U), :004579F8(U), :00457A7E(U)
|:00457B34(U), :00457BCC(U), :00457C64(U), :00457D26(U), :00457DE9(U)
|:00457E61(U), :00457F09(U), :00457F80(U), :00457F8E(C)
|
:00457FE6 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00457FEA 7408                    je 00457FF4
:00457FEC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00457FEF E872490000              call 0045C966

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00457FEA(C)
|
:00457FF4 8BE5                    mov esp, ebp
:00457FF6 5D                      pop ebp
:00457FF7 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0045825E   
|
:00457FFA 55                      push ebp
:00457FFB 8BEC                    mov ebp, esp
:00457FFD 6AFF                    push FFFFFFFF
:00457FFF 687C994700              push 0047997C
:00458004 64A100000000            mov eax, dword ptr fs:[00000000]
:0045800A 50                      push eax
:0045800B 64892500000000          mov dword ptr fs:[00000000], esp
:00458012 81EC18010000            sub esp, 00000118
:00458018 898DDCFEFFFF            mov dword ptr [ebp+FFFFFEDC], ecx
:0045801E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00458024 E817D6FAFF              call 00405640
:00458029 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"CHR_ALW.E3"
                                  |
:00458030 A1E4104800              mov eax, dword ptr [004810E4]
:00458035 50                      push eax
:00458036 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045803C E89491FBFF              call 004111D5
:00458041 85C0                    test eax, eax
:00458043 7527                    jne 0045806C
:00458045 C785ECFEFFFF00000000    mov dword ptr [ebp+FFFFFEEC], 00000000
:0045804F C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00458056 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045805C E8FFD5FAFF              call 00405660
:00458061 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:00458067 E9A8000000              jmp 00458114

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458043(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045806C 6A04                    push 00000004
:0045806E 6A00                    push 00000000
:00458070 6A00                    push 00000000
:00458072 B9F0174B00              mov ecx, 004B17F0
:00458077 E8140F0200              call 00478F90
:0045807C 50                      push eax
:0045807D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00458080 51                      push ecx
:00458081 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00458087 E89D92FBFF              call 00411329
:0045808C 85C0                    test eax, eax
:0045808E 752F                    jne 004580BF
:00458090 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00458096 E88A5BFBFF              call 0040DC25
:0045809B C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:004580A5 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004580AC 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004580B2 E8A9D5FAFF              call 00405660
:004580B7 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:004580BD EB55                    jmp 00458114

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045808E(C)
|
:004580BF 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004580C5 E85B5BFBFF              call 0040DC25
:004580CA 85C0                    test eax, eax
:004580CC 7524                    jne 004580F2
:004580CE C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:004580D8 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004580DF 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004580E5 E876D5FAFF              call 00405660
:004580EA 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:004580F0 EB22                    jmp 00458114

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004580CC(C)
|
:004580F2 C785E0FEFFFF01000000    mov dword ptr [ebp+FFFFFEE0], 00000001
:004580FC C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00458103 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00458109 E852D5FAFF              call 00405660
:0045810E 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458067(U), :004580BD(U), :004580F0(U)
|
:00458114 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00458117 64890D00000000          mov dword ptr fs:[00000000], ecx
:0045811E 8BE5                    mov esp, ebp
:00458120 5D                      pop ebp
:00458121 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00456E13   , :00456E3E   , :00456E69   , :00456E9C   , :00456ED6   
|:00456F0F   , :00456F6B   , :00456F88   , :00456FA5   , :00456FF5   
|:00457021   , :0045703D   , :00457059   , :0045708D   , :004570AA   
|:004570C7   , :004570E4   , :00457100   , :00457133   , :0045715E   
|:00457189   , :004571B4   , :004571DF   , :00457222   , :0045724D   
|:00457286   , :004572C8   , :004572F3   , :0045731F   , :0045734A   
|:0045737A   , :00457397   , :004573B3   , :004573F5   , :0045743E   
|:0045745A   , :00457468   , :0045749C   , :004574B8   , :004574E4   
|:0045750F   , :0045753F   , :0045756A   , :00457578   , :004575BB   
|:004575D8   , :004575F5   , :00457612   , :0045762E   , :00457662   
|:0045767F   , :0045769C   , :004576B8   , :004576E3   , :00457708   
|:00457725   , :00457750   , :00457798   , :004577BC   , :004577D9   
|:00457814   , :0045783F   , :0045786E   , :0045788A   , :004578B6   
|:004578F5   , :00457921   , :0045793D   , :00457971   , :0045799D   
|:004579D6   , :004579F3   , :00457A32   , :00457A5D   , :00457A79   
|:00457ABC   , :00457AE7   , :00457B04   , :00457B2F   , :00457B7F   
|:00457BAA   , :00457BC7   , :00457C18   , :00457C43   , :00457C5F   
|:00457C92   , :00457CBD   , :00457CDA   , :00457CF6   , :00457D13   
|:00457D21   , :00457D63   , :00457D9C   , :00457DE4   , :00457E14   
|:00457E31   , :00457E5C   , :00457E9F   , :00457ECB   , :00457F04   
|:00457F43   , :00457F5F   , :00457F7B   , :00457FC5   , :00457FE1   
|
:00458124 55                      push ebp
:00458125 8BEC                    mov ebp, esp
:00458127 51                      push ecx
:00458128 894DFC                  mov dword ptr [ebp-04], ecx
:0045812B 8B4508                  mov eax, dword ptr [ebp+08]
:0045812E 25FF000000              and eax, 000000FF
:00458133 6BC018                  imul eax, 00000018
:00458136 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00458139 8B948828ED4700          mov edx, dword ptr [eax+4*ecx+0047ED28]
:00458140 52                      push edx

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00458141 6A07                    push 00000007
:00458143 E8EB92FDFF              call 00431433
:00458148 83C408                  add esp, 00000008
:0045814B 6A00                    push 00000000
:0045814D 6A00                    push 00000000
:0045814F 6801020000              push 00000201
:00458154 A1B0554B00              mov eax, dword ptr [004B55B0]
:00458159 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045815A FF1504D64B00            Call dword ptr [004BD604]
:00458160 6A00                    push 00000000
:00458162 6A00                    push 00000000
:00458164 6802020000              push 00000202
:00458169 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0045816F 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00458170 FF1504D64B00            Call dword ptr [004BD604]
:00458176 8BE5                    mov esp, ebp
:00458178 5D                      pop ebp
:00458179 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00456DF6   , :00456E05   , :00456E30   , :00456E4D   , :00456E8E   
|:00456EB9   , :00456EC8   , :00456F01   , :00456F1E   , :00456F4E   
|:00456F5D   , :00456F7A   , :00456F97   , :00456FCA   , :00456FD9   
|:00457004   , :00457013   , :0045707F   , :0045709C   , :004570B9   
|:004570D6   , :00457125   , :00457150   , :0045717B   , :004571A6   
|:004571C3   , :00457205   , :00457214   , :0045723F   , :00457278   
|:004572AC   , :004572D7   , :00457302   , :00457311   , :0045733C   
|:0045736C   , :00457389   , :004573D8   , :004573E7   , :00457412   
|:00457421   , :00457430   , :0045748E   , :004574C7   , :004574D6   
|:004574F3   , :00457531   , :0045754E   , :0045759E   , :004575AD   
|:004575CA   , :004575E7   , :00457604   , :00457654   , :00457671   
|:0045768E   , :004576C7   , :00457717   , :00457742   , :0045775F   
|:0045776E   , :004577CB   , :004577E8   , :004577F7   , :00457806   
|:00457831   , :00457860   , :00457899   , :004578A8   , :004578D8   
|:004578E7   , :00457904   , :00457913   , :00457963   , :00457980   
|:0045798F   , :004579C8   , :004579E5   , :00457A15   , :00457A24   
|:00457A4F   , :00457A9F   , :00457AAE   , :00457ACB   , :00457AF6   
|:00457B21   , :00457B54   , :00457B63   , :00457B8E   , :00457BB9   
|:00457BEC   , :00457BFB   , :00457C0A   , :00457C35   , :00457C84   
|:00457CA1   , :00457CCC   , :00457D05   , :00457D46   , :00457D55   
|:00457D80   , :00457DAB   , :00457DC8   , :00457E06   , :00457E23   
|:00457E4E   , :00457E82   , :00457E91   , :00457EAE   , :00457EBD   
|:00457EDA   , :00457F26   , :00457F35   , :00457F9A   , :00457FA9   
|
:0045817C 55                      push ebp
:0045817D 8BEC                    mov ebp, esp
:0045817F 83EC08                  sub esp, 00000008
:00458182 894DF8                  mov dword ptr [ebp-08], ecx
:00458185 6A00                    push 00000000
:00458187 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00458189 6A04                    push 00000004
:0045818B E88DDB0100              call 00475D1D
:00458190 83C40C                  add esp, 0000000C
:00458193 8B450C                  mov eax, dword ptr [ebp+0C]
:00458196 50                      push eax
:00458197 E83F84FBFF              call 004105DB
:0045819C 83C404                  add esp, 00000004
:0045819F 668945FC                mov word ptr [ebp-04], ax
:004581A3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004581A6 81E1FFFF0000            and ecx, 0000FFFF
:004581AC 81F9FFFF0000            cmp ecx, 0000FFFF
:004581B2 7445                    je 004581F9
:004581B4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004581B7 81E1FFFF0000            and ecx, 0000FFFF
:004581BD 6BC950                  imul ecx, 00000050
:004581C0 81C1787F4900            add ecx, 00497F78
:004581C6 E8B55CFDFF              call 0042DE80
:004581CB 50                      push eax
:004581CC 8B5508                  mov edx, dword ptr [ebp+08]
:004581CF 81E2FF000000            and edx, 000000FF
:004581D5 8B04D53CAC4700          mov eax, dword ptr [8*edx+0047AC3C]
:004581DC 83C028                  add eax, 00000028
:004581DF 50                      push eax
:004581E0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004581E3 81E1FF000000            and ecx, 000000FF
:004581E9 8B14CD38AC4700          mov edx, dword ptr [8*ecx+0047AC38]
:004581F0 52                      push edx
:004581F1 E8F281FBFF              call 004103E8
:004581F6 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004581B2(C)
|
:004581F9 6A00                    push 00000000
:004581FB 6A10                    push 00000010
:004581FD 6A00                    push 00000000
:004581FF E819DB0100              call 00475D1D
:00458204 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00458207 6A05                    push 00000005
:00458209 E82875FDFF              call 0042F736
:0045820E 83C404                  add esp, 00000004
:00458211 6A00                    push 00000000
:00458213 6A00                    push 00000000
:00458215 6801020000              push 00000201
:0045821A A1B0554B00              mov eax, dword ptr [004B55B0]
:0045821F 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00458220 FF1504D64B00            Call dword ptr [004BD604]
:00458226 6A00                    push 00000000
:00458228 6A00                    push 00000000
:0045822A 6802020000              push 00000202
:0045822F 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00458235 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00458236 FF1504D64B00            Call dword ptr [004BD604]
:0045823C 8BE5                    mov esp, ebp
:0045823E 5D                      pop ebp
:0045823F C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00456E21   , :00456E5B   , :00456EAA   , :00456EE4   , :00456EF2   
|:00456F2C   , :00456FE7   , :0045702F   , :0045704B   , :004570F2   
|:00457141   , :0045716C   , :00457197   , :004571D1   , :00457230   
|:0045725B   , :00457269   , :004572BA   , :004572E5   , :0045732D   
|:004573A5   , :00457403   , :0045744C   , :004574AA   , :00457501   
|:0045755C   , :00457620   , :004576AA   , :004576D5   , :00457733   
|:0045777C   , :0045778A   , :00457822   , :0045787C   , :0045792F   
|:004579AB   , :004579B9   , :00457A40   , :00457A6B   , :00457AD9   
|:00457B12   , :00457B71   , :00457B9C   , :00457C26   , :00457C51   
|:00457CAF   , :00457CE8   , :00457D71   , :00457D8E   , :00457DB9   
|:00457DD6   , :00457E3F   , :00457EE8   , :00457EF6   , :00457F51   
|:00457F6D   , :00457FB7   , :00457FD3   
|
:00458242 55                      push ebp
:00458243 8BEC                    mov ebp, esp
:00458245 51                      push ecx
:00458246 894DFC                  mov dword ptr [ebp-04], ecx
:00458249 6A00                    push 00000000
:0045824B 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045824D 6A04                    push 00000004
:0045824F E8C9DA0100              call 00475D1D
:00458254 83C40C                  add esp, 0000000C
:00458257 8B450C                  mov eax, dword ptr [ebp+0C]
:0045825A 50                      push eax
:0045825B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045825E E897FDFFFF              call 00457FFA
:00458263 85C0                    test eax, eax
:00458265 7450                    je 004582B7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00458267 6A04                    push 00000004
:00458269 6A00                    push 00000000
:0045826B 6A00                    push 00000000
:0045826D B9F0174B00              mov ecx, 004B17F0
:00458272 E8190D0200              call 00478F90
:00458277 50                      push eax
:00458278 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045827B C1E104                  shl ecx, 04
:0045827E 8B9194A84700            mov edx, dword ptr [ecx+0047A894]
:00458284 52                      push edx
:00458285 8B450C                  mov eax, dword ptr [ebp+0C]
:00458288 C1E004                  shl eax, 04
:0045828B 8B8890A84700            mov ecx, dword ptr [eax+0047A890]
:00458291 51                      push ecx
:00458292 8B550C                  mov edx, dword ptr [ebp+0C]
:00458295 C1E204                  shl edx, 04
:00458298 8B828CA84700            mov eax, dword ptr [edx+0047A88C]
:0045829E 83C028                  add eax, 00000028
:004582A1 50                      push eax
:004582A2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004582A5 C1E104                  shl ecx, 04
:004582A8 8B9188A84700            mov edx, dword ptr [ecx+0047A888]
:004582AE 52                      push edx
:004582AF E840E80100              call 00476AF4
:004582B4 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458265(C)
|
:004582B7 6A00                    push 00000000
:004582B9 6A10                    push 00000010
:004582BB 6A00                    push 00000000
:004582BD E85BDA0100              call 00475D1D
:004582C2 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004582C5 6A05                    push 00000005
:004582C7 E86A74FDFF              call 0042F736
:004582CC 83C404                  add esp, 00000004
:004582CF 6A00                    push 00000000
:004582D1 6A00                    push 00000000
:004582D3 6801020000              push 00000201
:004582D8 A1B0554B00              mov eax, dword ptr [004B55B0]
:004582DD 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004582DE FF1504D64B00            Call dword ptr [004BD604]
:004582E4 6A00                    push 00000000
:004582E6 6A00                    push 00000000
:004582E8 6802020000              push 00000202
:004582ED 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:004582F3 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004582F4 FF1504D64B00            Call dword ptr [004BD604]
:004582FA 8BE5                    mov esp, ebp
:004582FC 5D                      pop ebp
:004582FD C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00456DCC   , :0045EEA1   , :0045EF1A   , :0045F2D1   
|
:00458300 55                      push ebp
:00458301 8BEC                    mov ebp, esp
:00458303 51                      push ecx
:00458304 894DFC                  mov dword ptr [ebp-04], ecx
:00458307 8B45FC                  mov eax, dword ptr [ebp-04]
:0045830A 83C006                  add eax, 00000006
:0045830D 8BE5                    mov esp, ebp
:0045830F 5D                      pop ebp
:00458310 C3                      ret


:00458311 CC                      int 03
:00458312 CC                      int 03
:00458313 CC                      int 03
:00458314 CC                      int 03
:00458315 CC                      int 03
:00458316 CC                      int 03
:00458317 CC                      int 03
:00458318 CC                      int 03
:00458319 CC                      int 03
:0045831A CC                      int 03
:0045831B CC                      int 03
:0045831C CC                      int 03
:0045831D CC                      int 03
:0045831E CC                      int 03
:0045831F CC                      int 03

* Referenced by a CALL at Addresses:
|:0045866D   , :00458746   , :00458842   
|
:00458320 55                      push ebp
:00458321 8BEC                    mov ebp, esp
:00458323 83EC08                  sub esp, 00000008
:00458326 56                      push esi
:00458327 57                      push edi
:00458328 894DF8                  mov dword ptr [ebp-08], ecx
:0045832B C745FC00000000          mov [ebp-04], 00000000
:00458332 8B4508                  mov eax, dword ptr [ebp+08]
:00458335 25FF000000              and eax, 000000FF
:0045833A 3DFF000000              cmp eax, 000000FF
:0045833F 7519                    jne 0045835A
:00458341 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00458344 C7410830000000          mov [ecx+08], 00000030
:0045834B 8B55F8                  mov edx, dword ptr [ebp-08]
:0045834E C7420C30000000          mov [edx+0C], 00000030
:00458355 E9E4000000              jmp 0045843E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045833F(C)
|
:0045835A B958494B00              mov ecx, 004B4958
:0045835F E86A29FFFF              call 0044ACCE
:00458364 8BF0                    mov esi, eax
:00458366 8B7D08                  mov edi, dword ptr [ebp+08]
:00458369 81E7FF000000            and edi, 000000FF
:0045836F B958494B00              mov ecx, 004B4958
:00458374 E89929FFFF              call 0044AD12
:00458379 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045837A B903000000              mov ecx, 00000003
:0045837F F7F9                    idiv ecx
:00458381 2BF8                    sub edi, eax
:00458383 6BFF03                  imul edi, 00000003
:00458386 C1E704                  shl edi, 04
:00458389 03F7                    add esi, edi
:0045838B 8B55F8                  mov edx, dword ptr [ebp-08]
:0045838E 897208                  mov dword ptr [edx+08], esi
:00458391 B958494B00              mov ecx, 004B4958
:00458396 E84429FFFF              call 0044ACDF
:0045839B 8BF0                    mov esi, eax
:0045839D 8B7D0C                  mov edi, dword ptr [ebp+0C]
:004583A0 81E7FF000000            and edi, 000000FF
:004583A6 B958494B00              mov ecx, 004B4958
:004583AB E87329FFFF              call 0044AD23
:004583B0 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004583B1 B903000000              mov ecx, 00000003
:004583B6 F7F9                    idiv ecx
:004583B8 2BF8                    sub edi, eax
:004583BA 6BFF03                  imul edi, 00000003
:004583BD C1E704                  shl edi, 04
:004583C0 03F7                    add esi, edi
:004583C2 8B55F8                  mov edx, dword ptr [ebp-08]
:004583C5 89720C                  mov dword ptr [edx+0C], esi
:004583C8 8B45F8                  mov eax, dword ptr [ebp-08]
:004583CB 8B400C                  mov eax, dword ptr [eax+0C]
:004583CE 99                      cdq
:004583CF 83E20F                  and edx, 0000000F
:004583D2 03C2                    add eax, edx
:004583D4 C1F804                  sar eax, 04
:004583D7 83E813                  sub eax, 00000013
:004583DA 8945FC                  mov dword ptr [ebp-04], eax
:004583DD 837DFC00                cmp dword ptr [ebp-04], 00000000
:004583E1 7C14                    jl 004583F7
:004583E3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004583E6 C1E104                  shl ecx, 04
:004583E9 8B55F8                  mov edx, dword ptr [ebp-08]
:004583EC 8B420C                  mov eax, dword ptr [edx+0C]
:004583EF 2BC1                    sub eax, ecx
:004583F1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004583F4 89410C                  mov dword ptr [ecx+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004583E1(C)
|
:004583F7 8B55F8                  mov edx, dword ptr [ebp-08]
:004583FA 8B4208                  mov eax, dword ptr [edx+08]
:004583FD 99                      cdq
:004583FE 83E20F                  and edx, 0000000F
:00458401 03C2                    add eax, edx
:00458403 8BF0                    mov esi, eax
:00458405 C1FE04                  sar esi, 04
:00458408 B958494B00              mov ecx, 004B4958
:0045840D E83165FFFF              call 0044E943
:00458412 99                      cdq
:00458413 B930000000              mov ecx, 00000030
:00458418 F7F9                    idiv ecx
:0045841A 3BF0                    cmp esi, eax
:0045841C 7C11                    jl 0045842F
:0045841E 8B55F8                  mov edx, dword ptr [ebp-08]
:00458421 8B4208                  mov eax, dword ptr [edx+08]
:00458424 83E870                  sub eax, 00000070
:00458427 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045842A 894108                  mov dword ptr [ecx+08], eax
:0045842D EB0F                    jmp 0045843E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045841C(C)
|
:0045842F 8B55F8                  mov edx, dword ptr [ebp-08]
:00458432 8B4208                  mov eax, dword ptr [edx+08]
:00458435 83C050                  add eax, 00000050
:00458438 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045843B 894108                  mov dword ptr [ecx+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458355(U), :0045842D(U)
|
:0045843E 5F                      pop edi
:0045843F 5E                      pop esi
:00458440 8BE5                    mov esp, ebp
:00458442 5D                      pop ebp
:00458443 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00458553   , :0045868E   , :00458767   
|
:00458446 55                      push ebp
:00458447 8BEC                    mov ebp, esp
:00458449 83EC40                  sub esp, 00000040
:0045844C 894DC0                  mov dword ptr [ebp-40], ecx
:0045844F 8D45C8                  lea eax, dword ptr [ebp-38]
:00458452 50                      push eax
:00458453 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00458456 E885E5FDFF              call 004369E0
:0045845B 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0045845C FF15A4D64B00            Call dword ptr [004BD6A4]
:00458462 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00458465 E866270000              call 0045ABD0
:0045846A 8945FC                  mov dword ptr [ebp-04], eax
:0045846D 8B4DC0                  mov ecx, dword ptr [ebp-40]
:00458470 E87B270000              call 0045ABF0
:00458475 8945F8                  mov dword ptr [ebp-08], eax
:00458478 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045847B 034DFC                  add ecx, dword ptr [ebp-04]
:0045847E 894DD8                  mov dword ptr [ebp-28], ecx
:00458481 8B55D0                  mov edx, dword ptr [ebp-30]
:00458484 0355FC                  add edx, dword ptr [ebp-04]
:00458487 8955E0                  mov dword ptr [ebp-20], edx
:0045848A 8B45CC                  mov eax, dword ptr [ebp-34]
:0045848D 0345F8                  add eax, dword ptr [ebp-08]
:00458490 8945DC                  mov dword ptr [ebp-24], eax
:00458493 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00458496 034DF8                  add ecx, dword ptr [ebp-08]
:00458499 894DE4                  mov dword ptr [ebp-1C], ecx
:0045849C 8D55E8                  lea edx, dword ptr [ebp-18]
:0045849F 52                      push edx
:004584A0 A1B0554B00              mov eax, dword ptr [004B55B0]
:004584A5 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:004584A6 FF15A4D64B00            Call dword ptr [004BD6A4]
:004584AC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004584AF 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:004584B2 7D1B                    jge 004584CF
:004584B4 8B55E4                  mov edx, dword ptr [ebp-1C]
:004584B7 2B55F4                  sub edx, dword ptr [ebp-0C]
:004584BA 8955C4                  mov dword ptr [ebp-3C], edx
:004584BD 8B45DC                  mov eax, dword ptr [ebp-24]
:004584C0 2B45C4                  sub eax, dword ptr [ebp-3C]
:004584C3 8945DC                  mov dword ptr [ebp-24], eax
:004584C6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004584C9 2B4DC4                  sub ecx, dword ptr [ebp-3C]
:004584CC 894DE4                  mov dword ptr [ebp-1C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004584B2(C)
|
:004584CF 6A01                    push 00000001
:004584D1 8B55E4                  mov edx, dword ptr [ebp-1C]
:004584D4 2B55DC                  sub edx, dword ptr [ebp-24]
:004584D7 83C201                  add edx, 00000001
:004584DA 52                      push edx
:004584DB 8B45E0                  mov eax, dword ptr [ebp-20]
:004584DE 2B45D8                  sub eax, dword ptr [ebp-28]
:004584E1 83C001                  add eax, 00000001
:004584E4 50                      push eax
:004584E5 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004584E8 51                      push ecx
:004584E9 8B55D8                  mov edx, dword ptr [ebp-28]
:004584EC 52                      push edx
:004584ED 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004584F0 E8EBE4FDFF              call 004369E0
:004584F5 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004584F6 FF15ECD54B00            Call dword ptr [004BD5EC]
:004584FC 8BE5                    mov esp, ebp
:004584FE 5D                      pop ebp
:004584FF C3                      ret



* Referenced by a CALL at Addresses:
|:00458524   , :0045865D   , :00458736   , :00458832   
|
:00458500 55                      push ebp
:00458501 8BEC                    mov ebp, esp
:00458503 51                      push ecx
:00458504 894DFC                  mov dword ptr [ebp-04], ecx
:00458507 8B45FC                  mov eax, dword ptr [ebp-04]
:0045850A 8A4D08                  mov cl, byte ptr [ebp+08]
:0045850D 884804                  mov byte ptr [eax+04], cl
:00458510 8BE5                    mov esp, ebp
:00458512 5D                      pop ebp
:00458513 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00459D5F   , :00459D7A   , :00459D97   , :00459DB4   , :00459DCF   
|:00459DEC   , :00459E42   , :00459E5D   , :00459E7A   , :00459E97   
|:00459EF0   , :00459F09   , :00459F23   , :00459F3D   , :00459F59   
|
:00458516 55                      push ebp
:00458517 8BEC                    mov ebp, esp
:00458519 51                      push ecx
:0045851A 894DFC                  mov dword ptr [ebp-04], ecx
:0045851D 8A4508                  mov al, byte ptr [ebp+08]
:00458520 50                      push eax
:00458521 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458524 E8D7FFFFFF              call 00458500
:00458529 6A00                    push 00000000
:0045852B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045852E 8B11                    mov edx, dword ptr [ecx]
:00458530 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00458531 FF15D8D54B00            Call dword ptr [004BD5D8]
:00458537 8BE5                    mov esp, ebp
:00458539 5D                      pop ebp
:0045853A C20400                  ret 0004



* Referenced by a CALL at Address:
|:00459D3D   
|
:0045853D 55                      push ebp
:0045853E 8BEC                    mov ebp, esp
:00458540 51                      push ecx
:00458541 894DFC                  mov dword ptr [ebp-04], ecx
:00458544 8B4508                  mov eax, dword ptr [ebp+08]
:00458547 50                      push eax
:00458548 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045854B E8205DFDFF              call 0042E270
:00458550 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458553 E8EEFEFFFF              call 00458446
:00458558 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045855B C7412001000000          mov [ecx+20], 00000001
:00458562 8B55FC                  mov edx, dword ptr [ebp-04]
:00458565 8B4210                  mov eax, dword ptr [edx+10]
:00458568 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0507, ";"
                                  |
:00458569 6807050000              push 00000507
:0045856E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458571 E86AE4FDFF              call 004369E0
:00458576 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00458577 FF1510D64B00            Call dword ptr [004BD610]
:0045857D 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0045857E FF1584D64B00            Call dword ptr [004BD684]
:00458584 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458587 8B5114                  mov edx, dword ptr [ecx+14]
:0045858A 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0508, ""
                                  |
:0045858B 6808050000              push 00000508
:00458590 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458593 E848E4FDFF              call 004369E0
:00458598 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00458599 FF1510D64B00            Call dword ptr [004BD610]
:0045859F 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004585A0 FF1584D64B00            Call dword ptr [004BD684]
:004585A6 8B45FC                  mov eax, dword ptr [ebp-04]
:004585A9 8B4818                  mov ecx, dword ptr [eax+18]
:004585AC 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0509, "Sw"
                                  |
:004585AD 6809050000              push 00000509
:004585B2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004585B5 E826E4FDFF              call 004369E0
:004585BA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004585BB FF1510D64B00            Call dword ptr [004BD610]
:004585C1 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004585C2 FF1584D64B00            Call dword ptr [004BD684]
:004585C8 8B55FC                  mov edx, dword ptr [ebp-04]
:004585CB 8B421C                  mov eax, dword ptr [edx+1C]
:004585CE 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050C, ""
                                  |
:004585CF 680C050000              push 0000050C
:004585D4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004585D7 E804E4FDFF              call 004369E0
:004585DC 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004585DD FF1510D64B00            Call dword ptr [004BD610]
:004585E3 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004585E4 FF1584D64B00            Call dword ptr [004BD684]
:004585EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004585ED 8B5120                  mov edx, dword ptr [ecx+20]
:004585F0 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050B, "I"
                                  |
:004585F1 680B050000              push 0000050B
:004585F6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004585F9 E8E2E3FDFF              call 004369E0
:004585FE 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004585FF FF1510D64B00            Call dword ptr [004BD610]
:00458605 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00458606 FF1584D64B00            Call dword ptr [004BD684]
:0045860C 8BE5                    mov esp, ebp
:0045860E 5D                      pop ebp
:0045860F C20400                  ret 0004



* Referenced by a CALL at Address:
|:0043874D   
|
:00458612 55                      push ebp
:00458613 8BEC                    mov ebp, esp
:00458615 51                      push ecx
:00458616 894DFC                  mov dword ptr [ebp-04], ecx
:00458619 8B45FC                  mov eax, dword ptr [ebp-04]
:0045861C C7401000000000          mov [eax+10], 00000000
:00458623 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458626 C7411400000000          mov [ecx+14], 00000000
:0045862D 8B55FC                  mov edx, dword ptr [ebp-04]
:00458630 C7421800000000          mov [edx+18], 00000000
:00458637 8B45FC                  mov eax, dword ptr [ebp-04]
:0045863A C7401C00000000          mov [eax+1C], 00000000
:00458641 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458644 C7412000000000          mov [ecx+20], 00000000
:0045864B 6A00                    push 00000000
:0045864D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458650 E81B5CFDFF              call 0042E270
:00458655 68FF000000              push 000000FF
:0045865A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045865D E89EFEFFFF              call 00458500
:00458662 8A550C                  mov dl, byte ptr [ebp+0C]
:00458665 52                      push edx
:00458666 8A4508                  mov al, byte ptr [ebp+08]
:00458669 50                      push eax
:0045866A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045866D E8AEFCFFFF              call 00458320
:00458672 8BE5                    mov esp, ebp
:00458674 5D                      pop ebp
:00458675 C20800                  ret 0008



* Referenced by a CALL at Address:
|:00459E23   
|
:00458678 55                      push ebp
:00458679 8BEC                    mov ebp, esp
:0045867B 51                      push ecx
:0045867C 894DFC                  mov dword ptr [ebp-04], ecx
:0045867F 8B4508                  mov eax, dword ptr [ebp+08]
:00458682 50                      push eax
:00458683 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458686 E8E55BFDFF              call 0042E270
:0045868B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045868E E8B3FDFFFF              call 00458446
:00458693 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458696 8B5110                  mov edx, dword ptr [ecx+10]
:00458699 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0509, "Sw"
                                  |
:0045869A 6809050000              push 00000509
:0045869F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004586A2 E839E3FDFF              call 004369E0
:004586A7 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004586A8 FF1510D64B00            Call dword ptr [004BD610]
:004586AE 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004586AF FF1584D64B00            Call dword ptr [004BD684]
:004586B5 8B45FC                  mov eax, dword ptr [ebp-04]
:004586B8 8B4814                  mov ecx, dword ptr [eax+14]
:004586BB 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050A, "
"
                                  |
:004586BC 680A050000              push 0000050A
:004586C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004586C4 E817E3FDFF              call 004369E0
:004586C9 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004586CA FF1510D64B00            Call dword ptr [004BD610]
:004586D0 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004586D1 FF1584D64B00            Call dword ptr [004BD684]
:004586D7 8B55FC                  mov edx, dword ptr [ebp-04]
:004586DA 8B4218                  mov eax, dword ptr [edx+18]
:004586DD 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050C, ""
                                  |
:004586DE 680C050000              push 0000050C
:004586E3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004586E6 E8F5E2FDFF              call 004369E0
:004586EB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004586EC FF1510D64B00            Call dword ptr [004BD610]
:004586F2 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004586F3 FF1584D64B00            Call dword ptr [004BD684]
:004586F9 8BE5                    mov esp, ebp
:004586FB 5D                      pop ebp
:004586FC C20400                  ret 0004



* Referenced by a CALL at Address:
|:0044EB42   
|
:004586FF 55                      push ebp
:00458700 8BEC                    mov ebp, esp
:00458702 51                      push ecx
:00458703 894DFC                  mov dword ptr [ebp-04], ecx
:00458706 8B45FC                  mov eax, dword ptr [ebp-04]
:00458709 C7401000000000          mov [eax+10], 00000000
:00458710 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458713 C7411400000000          mov [ecx+14], 00000000
:0045871A 8B55FC                  mov edx, dword ptr [ebp-04]
:0045871D C7421800000000          mov [edx+18], 00000000
:00458724 6A00                    push 00000000
:00458726 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458729 E8425BFDFF              call 0042E270
:0045872E 68FF000000              push 000000FF
:00458733 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458736 E8C5FDFFFF              call 00458500
:0045873B 8A450C                  mov al, byte ptr [ebp+0C]
:0045873E 50                      push eax
:0045873F 8A4D08                  mov cl, byte ptr [ebp+08]
:00458742 51                      push ecx
:00458743 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458746 E8D5FBFFFF              call 00458320
:0045874B 8BE5                    mov esp, ebp
:0045874D 5D                      pop ebp
:0045874E C20800                  ret 0008



* Referenced by a CALL at Address:
|:00459ECE   
|
:00458751 55                      push ebp
:00458752 8BEC                    mov ebp, esp
:00458754 51                      push ecx
:00458755 894DFC                  mov dword ptr [ebp-04], ecx
:00458758 8B4508                  mov eax, dword ptr [ebp+08]
:0045875B 50                      push eax
:0045875C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045875F E80C5BFDFF              call 0042E270
:00458764 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458767 E8DAFCFFFF              call 00458446
:0045876C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045876F 8B5110                  mov edx, dword ptr [ecx+10]
:00458772 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050B, "I"
                                  |
:00458773 680B050000              push 0000050B
:00458778 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045877B E860E2FDFF              call 004369E0
:00458780 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00458781 FF1510D64B00            Call dword ptr [004BD610]
:00458787 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00458788 FF1584D64B00            Call dword ptr [004BD684]
:0045878E 8B45FC                  mov eax, dword ptr [ebp-04]
:00458791 8B4814                  mov ecx, dword ptr [eax+14]
:00458794 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00458795 6A03                    push 00000003
:00458797 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045879A E841E2FDFF              call 004369E0
:0045879F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004587A0 FF1510D64B00            Call dword ptr [004BD610]
:004587A6 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004587A7 FF1584D64B00            Call dword ptr [004BD684]
:004587AD 8B55FC                  mov edx, dword ptr [ebp-04]
:004587B0 8B4218                  mov eax, dword ptr [edx+18]
:004587B3 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004587B4 6A04                    push 00000004
:004587B6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004587B9 E822E2FDFF              call 004369E0
:004587BE 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004587BF FF1510D64B00            Call dword ptr [004BD610]
:004587C5 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004587C6 FF1584D64B00            Call dword ptr [004BD684]
:004587CC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004587CF 8B511C                  mov edx, dword ptr [ecx+1C]
:004587D2 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004587D3 6A05                    push 00000005
:004587D5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004587D8 E803E2FDFF              call 004369E0
:004587DD 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004587DE FF1510D64B00            Call dword ptr [004BD610]
:004587E4 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:004587E5 FF1584D64B00            Call dword ptr [004BD684]
:004587EB 8BE5                    mov esp, ebp
:004587ED 5D                      pop ebp
:004587EE C20400                  ret 0004



* Referenced by a CALL at Address:
|:00439308   
|
:004587F1 55                      push ebp
:004587F2 8BEC                    mov ebp, esp
:004587F4 51                      push ecx
:004587F5 894DFC                  mov dword ptr [ebp-04], ecx
:004587F8 8B45FC                  mov eax, dword ptr [ebp-04]
:004587FB C7401001000000          mov [eax+10], 00000001
:00458802 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458805 C7411401000000          mov [ecx+14], 00000001
:0045880C 8B55FC                  mov edx, dword ptr [ebp-04]
:0045880F C7421801000000          mov [edx+18], 00000001
:00458816 8B45FC                  mov eax, dword ptr [ebp-04]
:00458819 C7401C01000000          mov [eax+1C], 00000001
:00458820 6A00                    push 00000000
:00458822 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458825 E8465AFDFF              call 0042E270
:0045882A 68FF000000              push 000000FF
:0045882F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458832 E8C9FCFFFF              call 00458500
:00458837 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0045883A 51                      push ecx
:0045883B 8A5508                  mov dl, byte ptr [ebp+08]
:0045883E 52                      push edx
:0045883F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458842 E8D9FAFFFF              call 00458320
:00458847 8BE5                    mov esp, ebp
:00458849 5D                      pop ebp
:0045884A C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00459AA0   , :00459BB9   
|
:0045884D 55                      push ebp
:0045884E 8BEC                    mov ebp, esp
:00458850 51                      push ecx
:00458851 894DFC                  mov dword ptr [ebp-04], ecx
:00458854 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458857 83C10C                  add ecx, 0000000C
:0045885A E8B155FDFF              call 0042DE10
:0045885F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458862 83C120                  add ecx, 00000020
:00458865 E8A655FDFF              call 0042DE10
:0045886A 8B45FC                  mov eax, dword ptr [ebp-04]
:0045886D C70000000000            mov dword ptr [eax], 00000000
:00458873 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458876 C64108FF                mov [ecx+08], FF
:0045887A 8B55FC                  mov edx, dword ptr [ebp-04]
:0045887D C64209FF                mov [edx+09], FF
:00458881 8B45FC                  mov eax, dword ptr [ebp-04]
:00458884 C7400400000000          mov [eax+04], 00000000
:0045888B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045888E C7413400000000          mov [ecx+34], 00000000
:00458895 8B55FC                  mov edx, dword ptr [ebp-04]
:00458898 C7423800000000          mov [edx+38], 00000000
:0045889F 6A01                    push 00000001
:004588A1 6800B00100              push 0001B000
:004588A6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004588A9 83C10C                  add ecx, 0000000C
:004588AC E8DF050200              call 00478E90
:004588B1 85C0                    test eax, eax
:004588B3 750D                    jne 004588C2

* Possible StringData Ref from Data Obj ->"SelectBushouClass::Can't Alloc "
                                        ->"Memory!!"
                                  |
:004588B5 6844164800              push 00481644
:004588BA E8E862FDFF              call 0042EBA7
:004588BF 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004588B3(C)
|
:004588C2 6A01                    push 00000001
:004588C4 6800B00100              push 0001B000
:004588C9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004588CC 83C120                  add ecx, 00000020
:004588CF E8BC050200              call 00478E90
:004588D4 85C0                    test eax, eax
:004588D6 750D                    jne 004588E5

* Possible StringData Ref from Data Obj ->"SelectBushouClass::Can't Alloc "
                                        ->"Memory!!"
                                  |
:004588D8 686C164800              push 0048166C
:004588DD E8C562FDFF              call 0042EBA7
:004588E2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004588D6(C)
|
:004588E5 8B45FC                  mov eax, dword ptr [ebp-04]
:004588E8 8BE5                    mov esp, ebp
:004588EA 5D                      pop ebp
:004588EB C3                      ret



* Referenced by a CALL at Address:
|:0045ABAA   
|
:004588EC 55                      push ebp
:004588ED 8BEC                    mov ebp, esp
:004588EF 51                      push ecx
:004588F0 894DFC                  mov dword ptr [ebp-04], ecx
:004588F3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004588F6 83C10C                  add ecx, 0000000C
:004588F9 E8E2050200              call 00478EE0
:004588FE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458901 83C120                  add ecx, 00000020
:00458904 E8D7050200              call 00478EE0
:00458909 8BE5                    mov esp, ebp
:0045890B 5D                      pop ebp
:0045890C C3                      ret



* Referenced by a CALL at Addresses:
|:0045A765   , :0045A95A   
|
:0045890D 55                      push ebp
:0045890E 8BEC                    mov ebp, esp
:00458910 51                      push ecx
:00458911 894DFC                  mov dword ptr [ebp-04], ecx
:00458914 8B45FC                  mov eax, dword ptr [ebp-04]
:00458917 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045891A 8A5108                  mov dl, byte ptr [ecx+08]
:0045891D 885009                  mov byte ptr [eax+09], dl
:00458920 8BE5                    mov esp, ebp
:00458922 5D                      pop ebp
:00458923 C3                      ret



* Referenced by a CALL at Addresses:
|:0045A0AD   , :0045A18C   
|
:00458924 55                      push ebp
:00458925 8BEC                    mov ebp, esp
:00458927 51                      push ecx
:00458928 894DFC                  mov dword ptr [ebp-04], ecx
:0045892B 8B45FC                  mov eax, dword ptr [ebp-04]
:0045892E 8A4D08                  mov cl, byte ptr [ebp+08]
:00458931 884809                  mov byte ptr [eax+09], cl
:00458934 8B55FC                  mov edx, dword ptr [ebp-04]
:00458937 33C0                    xor eax, eax
:00458939 8A4209                  mov al, byte ptr [edx+09]
:0045893C 3DFF000000              cmp eax, 000000FF
:00458941 741A                    je 0045895D
:00458943 6A01                    push 00000001
:00458945 6A01                    push 00000001
:00458947 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045894A 8B5134                  mov edx, dword ptr [ecx+34]
:0045894D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045894E FF1510D64B00            Call dword ptr [004BD610]
:00458954 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00458955 FF1584D64B00            Call dword ptr [004BD684]
:0045895B EB18                    jmp 00458975

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458941(C)
|
:0045895D 6A00                    push 00000000
:0045895F 6A01                    push 00000001
:00458961 8B45FC                  mov eax, dword ptr [ebp-04]
:00458964 8B4834                  mov ecx, dword ptr [eax+34]
:00458967 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00458968 FF1510D64B00            Call dword ptr [004BD610]
:0045896E 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0045896F FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045895B(U)
|
:00458975 8BE5                    mov esp, ebp
:00458977 5D                      pop ebp
:00458978 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00459B09   , :00459C4D   
|
:0045897B 55                      push ebp
:0045897C 8BEC                    mov ebp, esp
:0045897E 6AFF                    push FFFFFFFF
:00458980 689C994700              push 0047999C
:00458985 64A100000000            mov eax, dword ptr fs:[00000000]
:0045898B 50                      push eax
:0045898C 64892500000000          mov dword ptr fs:[00000000], esp
:00458993 81EC18010000            sub esp, 00000118
:00458999 898DDCFEFFFF            mov dword ptr [ebp+FFFFFEDC], ecx
:0045899F C785E8FEFFFF00000000    mov dword ptr [ebp+FFFFFEE8], 00000000
:004589A9 C785E0FEFFFF00000000    mov dword ptr [ebp+FFFFFEE0], 00000000
:004589B3 C785ECFEFFFF00000000    mov dword ptr [ebp+FFFFFEEC], 00000000
:004589BD C785E4FEFFFF00000000    mov dword ptr [ebp+FFFFFEE4], 00000000
:004589C7 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:004589CD C64008FF                mov [eax+08], FF
:004589D1 8B8DDCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEDC]
:004589D7 C64109FF                mov [ecx+09], FF
:004589DB 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:004589E1 C7423400000000          mov [edx+34], 00000000
:004589E8 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:004589EE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004589F1 8908                    mov dword ptr [eax], ecx
:004589F3 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004589F9 E842CCFAFF              call 00405640
:004589FE C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"CHR_BS.E3"
                                  |
:00458A05 68B8D54700              push 0047D5B8
:00458A0A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00458A10 E8C087FBFF              call 004111D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458AA5(U)
|
:00458A15 8B5508                  mov edx, dword ptr [ebp+08]
:00458A18 833A00                  cmp dword ptr [edx], 00000000
:00458A1B 0F8489000000            je 00458AAA
:00458A21 B9F0174B00              mov ecx, 004B17F0
:00458A26 E89574FBFF              call 0040FEC0
:00458A2B 50                      push eax
:00458A2C 8B4508                  mov eax, dword ptr [ebp+08]
:00458A2F 8B08                    mov ecx, dword ptr [eax]
:00458A31 E87487FAFF              call 004011AA
:00458A36 25FF000000              and eax, 000000FF
:00458A3B 50                      push eax
:00458A3C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00458A42 E8E288FBFF              call 00411329
:00458A47 6800090000              push 00000900

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00458A4C 6A04                    push 00000004
:00458A4E 6A00                    push 00000000
:00458A50 8B8DE8FEFFFF            mov ecx, dword ptr [ebp+FFFFFEE8]
:00458A56 69C900090000            imul ecx, 00000900
:00458A5C 51                      push ecx
:00458A5D 8B8DDCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEDC]
:00458A63 83C10C                  add ecx, 0000000C
:00458A66 E825050200              call 00478F90
:00458A6B 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00458A6C 6A04                    push 00000004
:00458A6E 6A00                    push 00000000
:00458A70 6800360000              push 00003600
:00458A75 B9F0174B00              mov ecx, 004B17F0
:00458A7A E811050200              call 00478F90
:00458A7F 50                      push eax
:00458A80 E83BFB0100              call 004785C0
:00458A85 83C40C                  add esp, 0000000C
:00458A88 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:00458A8E 83C201                  add edx, 00000001
:00458A91 8995E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], edx
:00458A97 8B4508                  mov eax, dword ptr [ebp+08]
:00458A9A 83C004                  add eax, 00000004
:00458A9D 894508                  mov dword ptr [ebp+08], eax
:00458AA0 E8B1E90100              call 00477456
:00458AA5 E96BFFFFFF              jmp 00458A15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458A1B(C)
|
:00458AAA 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00458AB0 E87051FBFF              call 0040DC25
:00458AB5 8B8DDCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEDC]
:00458ABB 8B95E8FEFFFF            mov edx, dword ptr [ebp+FFFFFEE8]
:00458AC1 895104                  mov dword ptr [ecx+04], edx
:00458AC4 8B8DDCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEDC]
:00458ACA E877080000              call 00459346
:00458ACF E89E8AFBFF              call 00411572
:00458AD4 85C0                    test eax, eax
:00458AD6 743F                    je 00458B17
:00458AD8 E86261FFFF              call 0044EC3F
:00458ADD 8B8DDCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEDC]
:00458AE3 898100010000            mov dword ptr [ecx+00000100], eax
:00458AE9 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:00458AEF 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:00458AF5 8B8A00010000            mov ecx, dword ptr [edx+00000100]
:00458AFB 3B4804                  cmp ecx, dword ptr [eax+04]
:00458AFE 7615                    jbe 00458B15
:00458B00 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:00458B06 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:00458B0C 8B4804                  mov ecx, dword ptr [eax+04]
:00458B0F 898A00010000            mov dword ptr [edx+00000100], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458AFE(C)
|
:00458B15 EB10                    jmp 00458B27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458AD6(C)
|
:00458B17 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:00458B1D C7820001000001000000    mov dword ptr [ebx+00000100], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458B15(U)
|
:00458B27 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:00458B2D 83780410                cmp dword ptr [eax+04], 00000010
:00458B31 770F                    ja 00458B42
:00458B33 8B8DDCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEDC]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00458B39 C7413802000000          mov [ecx+38], 00000002
:00458B40 EB28                    jmp 00458B6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458B31(C)
|
:00458B42 8B95DCFEFFFF            mov edx, dword ptr [ebp+FFFFFEDC]
:00458B48 837A0420                cmp dword ptr [edx+04], 00000020
:00458B4C 760F                    jbe 00458B5D
:00458B4E 8B85DCFEFFFF            mov eax, dword ptr [ebp+FFFFFEDC]
:00458B54 C7403800000000          mov [eax+38], 00000000
:00458B5B EB0D                    jmp 00458B6A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458B4C(C)
|
:00458B5D 8B8DDCFEFFFF            mov ecx, dword ptr [ebp+FFFFFEDC]
:00458B63 C7413801000000          mov [ecx+38], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458B40(U), :00458B5B(U)
|
:00458B6A C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00458B71 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00458B77 E8E4CAFAFF              call 00405660
:00458B7C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00458B7F 64890D00000000          mov dword ptr fs:[00000000], ecx
:00458B86 8BE5                    mov esp, ebp
:00458B88 5D                      pop ebp
:00458B89 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0045A046   , :0045A124   
|
:00458B8C 55                      push ebp
:00458B8D 8BEC                    mov ebp, esp
:00458B8F 51                      push ecx
:00458B90 894DFC                  mov dword ptr [ebp-04], ecx
:00458B93 837D0800                cmp dword ptr [ebp+08], 00000000
:00458B97 7409                    je 00458BA2
:00458B99 8B45FC                  mov eax, dword ptr [ebp-04]
:00458B9C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00458B9F 894834                  mov dword ptr [eax+34], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458B97(C)
|
:00458BA2 8BE5                    mov esp, ebp
:00458BA4 5D                      pop ebp
:00458BA5 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045902A   
|
:00458BA8 55                      push ebp
:00458BA9 8BEC                    mov ebp, esp
:00458BAB 83EC08                  sub esp, 00000008
:00458BAE 894DF8                  mov dword ptr [ebp-08], ecx
:00458BB1 C745FC00000000          mov [ebp-04], 00000000
:00458BB8 8B450C                  mov eax, dword ptr [ebp+0C]
:00458BBB 33D2                    xor edx, edx
:00458BBD B930000000              mov ecx, 00000030
:00458BC2 F7F1                    div ecx
:00458BC4 8B55FC                  mov edx, dword ptr [ebp-04]
:00458BC7 8D04C2                  lea eax, dword ptr [edx+8*eax]
:00458BCA 8945FC                  mov dword ptr [ebp-04], eax
:00458BCD 8B4508                  mov eax, dword ptr [ebp+08]
:00458BD0 33D2                    xor edx, edx
:00458BD2 B930000000              mov ecx, 00000030
:00458BD7 F7F1                    div ecx
:00458BD9 8B55FC                  mov edx, dword ptr [ebp-04]
:00458BDC 03D0                    add edx, eax
:00458BDE 8955FC                  mov dword ptr [ebp-04], edx
:00458BE1 8B45F8                  mov eax, dword ptr [ebp-08]
:00458BE4 8B4838                  mov ecx, dword ptr [eax+38]
:00458BE7 C1E103                  shl ecx, 03
:00458BEA 8B55FC                  mov edx, dword ptr [ebp-04]
:00458BED 2BD1                    sub edx, ecx
:00458BEF 8955FC                  mov dword ptr [ebp-04], edx
:00458BF2 8B45F8                  mov eax, dword ptr [ebp-08]
:00458BF5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00458BF8 3B4804                  cmp ecx, dword ptr [eax+04]
:00458BFB 7207                    jb 00458C04
:00458BFD C745FCFF000000          mov [ebp-04], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458BFB(C)
|
:00458C04 8A45FC                  mov al, byte ptr [ebp-04]
:00458C07 8BE5                    mov esp, ebp
:00458C09 5D                      pop ebp
:00458C0A C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0045906B   , :00459130   , :0045A067   , :0045A145   
|
:00458C0D 55                      push ebp
:00458C0E 8BEC                    mov ebp, esp
:00458C10 83EC14                  sub esp, 00000014
:00458C13 894DEC                  mov dword ptr [ebp-14], ecx
:00458C16 8B45EC                  mov eax, dword ptr [ebp-14]
:00458C19 83783400                cmp dword ptr [eax+34], 00000000
:00458C1D 7505                    jne 00458C24
:00458C1F E9EE030000              jmp 00459012

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458C1D(C)
|
:00458C24 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458C27 33D2                    xor edx, edx
:00458C29 8A5108                  mov dl, byte ptr [ecx+08]
:00458C2C 81FAFF000000            cmp edx, 000000FF
:00458C32 0F8564010000            jne 00458D9C
:00458C38 68B84D4B00              push 004B4DB8
:00458C3D 6A00                    push 00000000
:00458C3F 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0473, ""
                                  |
:00458C41 6873040000              push 00000473
:00458C46 8B45EC                  mov eax, dword ptr [ebp-14]
:00458C49 8B4834                  mov ecx, dword ptr [eax+34]
:00458C4C 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458C4D FF15D4D54B00            Call dword ptr [004BD5D4]
:00458C53 68BC4D4B00              push 004B4DBC
:00458C58 6A00                    push 00000000
:00458C5A 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0475, ""
                                  |
:00458C5C 6875040000              push 00000475
:00458C61 8B55EC                  mov edx, dword ptr [ebp-14]
:00458C64 8B4234                  mov eax, dword ptr [edx+34]
:00458C67 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458C68 FF15D4D54B00            Call dword ptr [004BD5D4]
:00458C6E 68C04D4B00              push 004B4DC0
:00458C73 6A00                    push 00000000
:00458C75 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:00458C77 68F9030000              push 000003F9
:00458C7C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458C7F 8B5134                  mov edx, dword ptr [ecx+34]
:00458C82 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458C83 FF15D4D54B00            Call dword ptr [004BD5D4]
:00458C89 68C44D4B00              push 004B4DC4
:00458C8E 6A00                    push 00000000
:00458C90 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0474, "1000"
                                  |
:00458C92 6874040000              push 00000474
:00458C97 8B45EC                  mov eax, dword ptr [ebp-14]
:00458C9A 8B4834                  mov ecx, dword ptr [eax+34]
:00458C9D 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458C9E FF15D4D54B00            Call dword ptr [004BD5D4]
:00458CA4 68FF000000              push 000000FF
:00458CA9 6A00                    push 00000000
:00458CAB 6806040000              push 00000406
:00458CB0 8B55EC                  mov edx, dword ptr [ebp-14]
:00458CB3 8B4234                  mov eax, dword ptr [edx+34]
:00458CB6 50                      push eax
:00458CB7 E86E1F0100              call 0046AC2A
:00458CBC 83C410                  add esp, 00000010
:00458CBF 68C84D4B00              push 004B4DC8
:00458CC4 6A00                    push 00000000
:00458CC6 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:03FF, "1000"
                                  |
:00458CC8 68FF030000              push 000003FF
:00458CCD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458CD0 8B5134                  mov edx, dword ptr [ecx+34]
:00458CD3 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458CD4 FF15D4D54B00            Call dword ptr [004BD5D4]
:00458CDA 68FF000000              push 000000FF
:00458CDF 6A00                    push 00000000
:00458CE1 6808040000              push 00000408
:00458CE6 8B45EC                  mov eax, dword ptr [ebp-14]
:00458CE9 8B4834                  mov ecx, dword ptr [eax+34]
:00458CEC 51                      push ecx
:00458CED E8381F0100              call 0046AC2A
:00458CF2 83C410                  add esp, 00000010
:00458CF5 68CC4D4B00              push 004B4DCC
:00458CFA 6A00                    push 00000000
:00458CFC 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:00458CFE 6800040000              push 00000400
:00458D03 8B55EC                  mov edx, dword ptr [ebp-14]
:00458D06 8B4234                  mov eax, dword ptr [edx+34]
:00458D09 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458D0A FF15D4D54B00            Call dword ptr [004BD5D4]
:00458D10 68FF000000              push 000000FF
:00458D15 6A00                    push 00000000
:00458D17 6807040000              push 00000407
:00458D1C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458D1F 8B5134                  mov edx, dword ptr [ecx+34]
:00458D22 52                      push edx
:00458D23 E8021F0100              call 0046AC2A
:00458D28 83C410                  add esp, 00000010
:00458D2B 68D04D4B00              push 004B4DD0
:00458D30 6A00                    push 00000000
:00458D32 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:03FE, "1000"
                                  |
:00458D34 68FE030000              push 000003FE
:00458D39 8B45EC                  mov eax, dword ptr [ebp-14]
:00458D3C 8B4834                  mov ecx, dword ptr [eax+34]
:00458D3F 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458D40 FF15D4D54B00            Call dword ptr [004BD5D4]
:00458D46 68E8030000              push 000003E8
:00458D4B 6A00                    push 00000000
:00458D4D 6809040000              push 00000409
:00458D52 8B55EC                  mov edx, dword ptr [ebp-14]
:00458D55 8B4234                  mov eax, dword ptr [edx+34]
:00458D58 50                      push eax
:00458D59 E8CC1E0100              call 0046AC2A
:00458D5E 83C410                  add esp, 00000010
:00458D61 68D44D4B00              push 004B4DD4
:00458D66 6A00                    push 00000000
:00458D68 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:00458D6A 6801040000              push 00000401
:00458D6F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458D72 8B5134                  mov edx, dword ptr [ecx+34]
:00458D75 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458D76 FF15D4D54B00            Call dword ptr [004BD5D4]
:00458D7C 68FF000000              push 000000FF
:00458D81 6A00                    push 00000000
:00458D83 680A040000              push 0000040A
:00458D88 8B45EC                  mov eax, dword ptr [ebp-14]
:00458D8B 8B4834                  mov ecx, dword ptr [eax+34]
:00458D8E 51                      push ecx
:00458D8F E8961E0100              call 0046AC2A
:00458D94 83C410                  add esp, 00000010
:00458D97 E976020000              jmp 00459012

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00458C32(C)
|
:00458D9C 8B55EC                  mov edx, dword ptr [ebp-14]
:00458D9F 33C0                    xor eax, eax
:00458DA1 8A4208                  mov al, byte ptr [edx+08]
:00458DA4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458DA7 8B11                    mov edx, dword ptr [ecx]
:00458DA9 8B0482                  mov eax, dword ptr [edx+4*eax]
:00458DAC 8945F0                  mov dword ptr [ebp-10], eax
:00458DAF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458DB2 E84DA3FAFF              call 00403104
:00458DB7 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00458DB8 6894164800              push 00481694
:00458DBD 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00458DC0 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00458DC1 FF1504D74B00            Call dword ptr [004BD704]
:00458DC7 83C40C                  add esp, 0000000C
:00458DCA 8D55F4                  lea edx, dword ptr [ebp-0C]
:00458DCD 52                      push edx
:00458DCE 6A00                    push 00000000
:00458DD0 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0473, ""
                                  |
:00458DD2 6873040000              push 00000473
:00458DD7 8B45EC                  mov eax, dword ptr [ebp-14]
:00458DDA 8B4834                  mov ecx, dword ptr [eax+34]
:00458DDD 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458DDE FF15D4D54B00            Call dword ptr [004BD5D4]
:00458DE4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458DE7 E8B4A3FAFF              call 004031A0
:00458DEC 25FF000000              and eax, 000000FF
:00458DF1 8B1485B0D64700          mov edx, dword ptr [4*eax+0047D6B0]
:00458DF8 52                      push edx

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00458DF9 6898164800              push 00481698
:00458DFE 8D45F4                  lea eax, dword ptr [ebp-0C]
:00458E01 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00458E02 FF1504D74B00            Call dword ptr [004BD704]
:00458E08 83C40C                  add esp, 0000000C
:00458E0B 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00458E0E 51                      push ecx
:00458E0F 6A00                    push 00000000
:00458E11 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0475, ""
                                  |
:00458E13 6875040000              push 00000475
:00458E18 8B55EC                  mov edx, dword ptr [ebp-14]
:00458E1B 8B4234                  mov eax, dword ptr [edx+34]
:00458E1E 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458E1F FF15D4D54B00            Call dword ptr [004BD5D4]
:00458E25 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458E28 E87370FBFF              call 0040FEA0
:00458E2D 25FF000000              and eax, 000000FF
:00458E32 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00458E33 689C164800              push 0048169C
:00458E38 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00458E3B 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00458E3C FF1504D74B00            Call dword ptr [004BD704]
:00458E42 83C40C                  add esp, 0000000C
:00458E45 8D55F4                  lea edx, dword ptr [ebp-0C]
:00458E48 52                      push edx
:00458E49 6A00                    push 00000000
:00458E4B 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:00458E4D 68F9030000              push 000003F9
:00458E52 8B45EC                  mov eax, dword ptr [ebp-14]
:00458E55 8B4834                  mov ecx, dword ptr [eax+34]
:00458E58 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458E59 FF15D4D54B00            Call dword ptr [004BD5D4]
:00458E5F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458E62 E8B78EFAFF              call 00401D1E
:00458E67 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00458E68 68A0164800              push 004816A0
:00458E6D 8D55F4                  lea edx, dword ptr [ebp-0C]
:00458E70 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00458E71 FF1504D74B00            Call dword ptr [004BD704]
:00458E77 83C40C                  add esp, 0000000C
:00458E7A 8D45F4                  lea eax, dword ptr [ebp-0C]
:00458E7D 50                      push eax
:00458E7E 6A00                    push 00000000
:00458E80 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0474, "1000"
                                  |
:00458E82 6874040000              push 00000474
:00458E87 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458E8A 8B5134                  mov edx, dword ptr [ecx+34]
:00458E8D 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458E8E FF15D4D54B00            Call dword ptr [004BD5D4]
:00458E94 68FF000000              push 000000FF
:00458E99 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458E9C E87D8EFAFF              call 00401D1E
:00458EA1 50                      push eax
:00458EA2 6806040000              push 00000406
:00458EA7 8B45EC                  mov eax, dword ptr [ebp-14]
:00458EAA 8B4834                  mov ecx, dword ptr [eax+34]
:00458EAD 51                      push ecx
:00458EAE E8771D0100              call 0046AC2A
:00458EB3 83C410                  add esp, 00000010
:00458EB6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458EB9 E85D8FFAFF              call 00401E1B
:00458EBE 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00458EBF 68A4164800              push 004816A4
:00458EC4 8D55F4                  lea edx, dword ptr [ebp-0C]
:00458EC7 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00458EC8 FF1504D74B00            Call dword ptr [004BD704]
:00458ECE 83C40C                  add esp, 0000000C
:00458ED1 8D45F4                  lea eax, dword ptr [ebp-0C]
:00458ED4 50                      push eax
:00458ED5 6A00                    push 00000000
:00458ED7 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:03FF, "1000"
                                  |
:00458ED9 68FF030000              push 000003FF
:00458EDE 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458EE1 8B5134                  mov edx, dword ptr [ecx+34]
:00458EE4 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458EE5 FF15D4D54B00            Call dword ptr [004BD5D4]
:00458EEB 68F4010000              push 000001F4
:00458EF0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458EF3 E8238FFAFF              call 00401E1B
:00458EF8 50                      push eax
:00458EF9 6808040000              push 00000408
:00458EFE 8B45EC                  mov eax, dword ptr [ebp-14]
:00458F01 8B4834                  mov ecx, dword ptr [eax+34]
:00458F04 51                      push ecx
:00458F05 E8201D0100              call 0046AC2A
:00458F0A 83C410                  add esp, 00000010
:00458F0D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458F10 E83C8EFAFF              call 00401D51
:00458F15 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00458F16 68A8164800              push 004816A8
:00458F1B 8D55F4                  lea edx, dword ptr [ebp-0C]
:00458F1E 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00458F1F FF1504D74B00            Call dword ptr [004BD704]
:00458F25 83C40C                  add esp, 0000000C
:00458F28 8D45F4                  lea eax, dword ptr [ebp-0C]
:00458F2B 50                      push eax
:00458F2C 6A00                    push 00000000
:00458F2E 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:00458F30 6800040000              push 00000400
:00458F35 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458F38 8B5134                  mov edx, dword ptr [ecx+34]
:00458F3B 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458F3C FF15D4D54B00            Call dword ptr [004BD5D4]
:00458F42 68FF000000              push 000000FF
:00458F47 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458F4A E8028EFAFF              call 00401D51
:00458F4F 50                      push eax
:00458F50 6807040000              push 00000407
:00458F55 8B45EC                  mov eax, dword ptr [ebp-14]
:00458F58 8B4834                  mov ecx, dword ptr [eax+34]
:00458F5B 51                      push ecx
:00458F5C E8C91C0100              call 0046AC2A
:00458F61 83C410                  add esp, 00000010
:00458F64 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458F67 E87E8EFAFF              call 00401DEA
:00458F6C 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00458F6D 68AC164800              push 004816AC
:00458F72 8D55F4                  lea edx, dword ptr [ebp-0C]
:00458F75 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00458F76 FF1504D74B00            Call dword ptr [004BD704]
:00458F7C 83C40C                  add esp, 0000000C
:00458F7F 8D45F4                  lea eax, dword ptr [ebp-0C]
:00458F82 50                      push eax
:00458F83 6A00                    push 00000000
:00458F85 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:03FE, "1000"
                                  |
:00458F87 68FE030000              push 000003FE
:00458F8C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458F8F 8B5134                  mov edx, dword ptr [ecx+34]
:00458F92 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458F93 FF15D4D54B00            Call dword ptr [004BD5D4]
:00458F99 68E8030000              push 000003E8
:00458F9E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458FA1 E8448EFAFF              call 00401DEA
:00458FA6 50                      push eax
:00458FA7 6809040000              push 00000409
:00458FAC 8B45EC                  mov eax, dword ptr [ebp-14]
:00458FAF 8B4834                  mov ecx, dword ptr [eax+34]
:00458FB2 51                      push ecx
:00458FB3 E8721C0100              call 0046AC2A
:00458FB8 83C410                  add esp, 00000010
:00458FBB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458FBE E8C18DFAFF              call 00401D84
:00458FC3 50                      push eax

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:00458FC4 68B0164800              push 004816B0
:00458FC9 8D55F4                  lea edx, dword ptr [ebp-0C]
:00458FCC 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00458FCD FF1504D74B00            Call dword ptr [004BD704]
:00458FD3 83C40C                  add esp, 0000000C
:00458FD6 8D45F4                  lea eax, dword ptr [ebp-0C]
:00458FD9 50                      push eax
:00458FDA 6A00                    push 00000000
:00458FDC 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:00458FDE 6801040000              push 00000401
:00458FE3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00458FE6 8B5134                  mov edx, dword ptr [ecx+34]
:00458FE9 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00458FEA FF15D4D54B00            Call dword ptr [004BD5D4]
:00458FF0 68F4010000              push 000001F4
:00458FF5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00458FF8 E8878DFAFF              call 00401D84
:00458FFD 50                      push eax
:00458FFE 680A040000              push 0000040A
:00459003 8B45EC                  mov eax, dword ptr [ebp-14]
:00459006 8B4834                  mov ecx, dword ptr [eax+34]
:00459009 51                      push ecx
:0045900A E81B1C0100              call 0046AC2A
:0045900F 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00458C1F(U), :00458D97(U)
|
:00459012 8BE5                    mov esp, ebp
:00459014 5D                      pop ebp
:00459015 C3                      ret



* Referenced by a CALL at Addresses:
|:0045A74F   , :0045A944   
|
:00459016 55                      push ebp
:00459017 8BEC                    mov ebp, esp
:00459019 83EC10                  sub esp, 00000010
:0045901C 894DF0                  mov dword ptr [ebp-10], ecx
:0045901F 8B450C                  mov eax, dword ptr [ebp+0C]
:00459022 50                      push eax
:00459023 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459026 51                      push ecx
:00459027 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045902A E879FBFFFF              call 00458BA8
:0045902F 8845FC                  mov byte ptr [ebp-04], al
:00459032 8B55F0                  mov edx, dword ptr [ebp-10]
:00459035 33C0                    xor eax, eax
:00459037 8A4208                  mov al, byte ptr [edx+08]
:0045903A 3DFF000000              cmp eax, 000000FF
:0045903F 7411                    je 00459052
:00459041 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00459044 33D2                    xor edx, edx
:00459046 8A5108                  mov dl, byte ptr [ecx+08]
:00459049 52                      push edx
:0045904A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045904D E8E9000000              call 0045913B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045903F(C)
|
:00459052 8B45FC                  mov eax, dword ptr [ebp-04]
:00459055 25FF000000              and eax, 000000FF
:0045905A 3DFF000000              cmp eax, 000000FF
:0045905F 7514                    jne 00459075
:00459061 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00459064 C64108FF                mov [ecx+08], FF
:00459068 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045906B E89DFBFFFF              call 00458C0D
:00459070 E9C0000000              jmp 00459135

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045905F(C)
|
:00459075 8B45FC                  mov eax, dword ptr [ebp-04]
:00459078 25FF000000              and eax, 000000FF
:0045907D 99                      cdq
:0045907E 33C2                    xor eax, edx
:00459080 2BC2                    sub eax, edx
:00459082 83E007                  and eax, 00000007
:00459085 33C2                    xor eax, edx
:00459087 2BC2                    sub eax, edx
:00459089 6BC030                  imul eax, 00000030
:0045908C 8945F8                  mov dword ptr [ebp-08], eax
:0045908F 8B45FC                  mov eax, dword ptr [ebp-04]
:00459092 25FF000000              and eax, 000000FF
:00459097 99                      cdq
:00459098 83E207                  and edx, 00000007
:0045909B 03C2                    add eax, edx
:0045909D C1F803                  sar eax, 03
:004590A0 6BC030                  imul eax, 00000030
:004590A3 8945F4                  mov dword ptr [ebp-0C], eax
:004590A6 8B55F0                  mov edx, dword ptr [ebp-10]
:004590A9 8B4238                  mov eax, dword ptr [edx+38]
:004590AC 6BC030                  imul eax, 00000030
:004590AF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004590B2 03C8                    add ecx, eax
:004590B4 894DF4                  mov dword ptr [ebp-0C], ecx
:004590B7 E8B684FBFF              call 00411572
:004590BC 85C0                    test eax, eax
:004590BE 750C                    jne 004590CC

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004590C0 6A07                    push 00000007
:004590C2 E848C50100              call 0047560F
:004590C7 83C404                  add esp, 00000004
:004590CA EB0A                    jmp 004590D6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004590BE(C)
|
:004590CC 6A0C                    push 0000000C
:004590CE E83CC50100              call 0047560F
:004590D3 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004590CA(U)
|
:004590D6 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004590D8 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004590DA 6A04                    push 00000004
:004590DC E83CCC0100              call 00475D1D
:004590E1 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004590E4 6A04                    push 00000004
:004590E6 6A00                    push 00000000
:004590E8 6800370000              push 00003700
:004590ED B9A01C4B00              mov ecx, 004B1CA0
:004590F2 E899FE0100              call 00478F90
:004590F7 50                      push eax
:004590F8 6A30                    push 00000030
:004590FA 6A30                    push 00000030
:004590FC 8B55F4                  mov edx, dword ptr [ebp-0C]
:004590FF 52                      push edx
:00459100 8B45F8                  mov eax, dword ptr [ebp-08]
:00459103 50                      push eax
:00459104 E8EBD90100              call 00476AF4
:00459109 83C414                  add esp, 00000014
:0045910C 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045910E 6A0A                    push 0000000A
:00459110 6A00                    push 00000000
:00459112 E806CC0100              call 00475D1D
:00459117 83C40C                  add esp, 0000000C
:0045911A 6A00                    push 00000000
:0045911C E8EEC40100              call 0047560F
:00459121 83C404                  add esp, 00000004
:00459124 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00459127 8A55FC                  mov dl, byte ptr [ebp-04]
:0045912A 885108                  mov byte ptr [ecx+08], dl
:0045912D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00459130 E8D8FAFFFF              call 00458C0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459070(U)
|
:00459135 8BE5                    mov esp, ebp
:00459137 5D                      pop ebp
:00459138 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0045904D   , :004592C4   , :00459412   
|
:0045913B 55                      push ebp
:0045913C 8BEC                    mov ebp, esp
:0045913E 83EC10                  sub esp, 00000010
:00459141 894DF0                  mov dword ptr [ebp-10], ecx
:00459144 8B45F0                  mov eax, dword ptr [ebp-10]
:00459147 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045914A 3B4804                  cmp ecx, dword ptr [eax+04]
:0045914D 7205                    jb 00459154
:0045914F E910010000              jmp 00459264

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045914D(C)
|
:00459154 8B55F0                  mov edx, dword ptr [ebp-10]
:00459157 8B02                    mov eax, dword ptr [edx]
:00459159 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045915C 833C8800                cmp dword ptr [eax+4*ecx], 00000000
:00459160 7505                    jne 00459167
:00459162 E9FD000000              jmp 00459264

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459160(C)
|
:00459167 E80684FBFF              call 00411572
:0045916C 85C0                    test eax, eax
:0045916E 750C                    jne 0045917C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00459170 6A07                    push 00000007
:00459172 E898C40100              call 0047560F
:00459177 83C404                  add esp, 00000004
:0045917A EB0A                    jmp 00459186

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045916E(C)
|
:0045917C 6A0C                    push 0000000C
:0045917E E88CC40100              call 0047560F
:00459183 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045917A(U)
|
:00459186 C745FC00000000          mov [ebp-04], 00000000
:0045918D 8B4508                  mov eax, dword ptr [ebp+08]
:00459190 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00459192 B908000000              mov ecx, 00000008
:00459197 F7F1                    div ecx
:00459199 6BD230                  imul edx, 00000030
:0045919C 8955F8                  mov dword ptr [ebp-08], edx
:0045919F 8B5508                  mov edx, dword ptr [ebp+08]
:004591A2 C1EA03                  shr edx, 03
:004591A5 6BD230                  imul edx, 00000030
:004591A8 8955F4                  mov dword ptr [ebp-0C], edx
:004591AB 8B45F0                  mov eax, dword ptr [ebp-10]
:004591AE 8B4838                  mov ecx, dword ptr [eax+38]
:004591B1 6BC930                  imul ecx, 00000030
:004591B4 8B55F4                  mov edx, dword ptr [ebp-0C]
:004591B7 03D1                    add edx, ecx
:004591B9 8955F4                  mov dword ptr [ebp-0C], edx
:004591BC 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004591BE 6A0A                    push 0000000A
:004591C0 6A00                    push 00000000
:004591C2 E856CB0100              call 00475D1D
:004591C7 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004591CA 6A04                    push 00000004
:004591CC 6A00                    push 00000000
:004591CE 8B4508                  mov eax, dword ptr [ebp+08]
:004591D1 69C000090000            imul eax, 00000900
:004591D7 50                      push eax
:004591D8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004591DB 83C120                  add ecx, 00000020
:004591DE E8ADFD0100              call 00478F90
:004591E3 8945FC                  mov dword ptr [ebp-04], eax
:004591E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004591E9 51                      push ecx
:004591EA 6A30                    push 00000030
:004591EC 6A30                    push 00000030
:004591EE 8B55F4                  mov edx, dword ptr [ebp-0C]
:004591F1 52                      push edx
:004591F2 8B45F8                  mov eax, dword ptr [ebp-08]
:004591F5 50                      push eax
:004591F6 E8F9D80100              call 00476AF4
:004591FB 83C414                  add esp, 00000014
:004591FE 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00459200 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00459202 6A04                    push 00000004
:00459204 E814CB0100              call 00475D1D
:00459209 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045920C 6A04                    push 00000004
:0045920E 6A00                    push 00000000
:00459210 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459213 69C900090000            imul ecx, 00000900
:00459219 51                      push ecx
:0045921A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045921D 83C10C                  add ecx, 0000000C
:00459220 E86BFD0100              call 00478F90
:00459225 8945FC                  mov dword ptr [ebp-04], eax
:00459228 8B55FC                  mov edx, dword ptr [ebp-04]
:0045922B 52                      push edx
:0045922C 6A30                    push 00000030
:0045922E 6A30                    push 00000030
:00459230 8B45F4                  mov eax, dword ptr [ebp-0C]
:00459233 50                      push eax
:00459234 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00459237 51                      push ecx
:00459238 E8B7D80100              call 00476AF4
:0045923D 83C414                  add esp, 00000014
:00459240 8B5508                  mov edx, dword ptr [ebp+08]
:00459243 52                      push edx
:00459244 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00459247 E80F020000              call 0045945B
:0045924C 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045924E 6A0A                    push 0000000A
:00459250 6A00                    push 00000000
:00459252 E8C6CA0100              call 00475D1D
:00459257 83C40C                  add esp, 0000000C
:0045925A 6A00                    push 00000000
:0045925C E8AEC30100              call 0047560F
:00459261 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045914F(U), :00459162(U)
|
:00459264 8BE5                    mov esp, ebp
:00459266 5D                      pop ebp
:00459267 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0045955C   , :0045A05C   , :0045A13A   
|
:0045926A 55                      push ebp
:0045926B 8BEC                    mov ebp, esp
:0045926D 83EC08                  sub esp, 00000008
:00459270 894DF8                  mov dword ptr [ebp-08], ecx
:00459273 E8FA82FBFF              call 00411572
:00459278 85C0                    test eax, eax
:0045927A 7410                    je 0045928C
:0045927C 6A00                    push 00000000
:0045927E A13C544B00              mov eax, dword ptr [004B543C]
:00459283 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00459284 FF1500D74B00            Call dword ptr [004BD700]
:0045928A EB0F                    jmp 0045929B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045927A(C)
|
:0045928C 6A00                    push 00000000
:0045928E 8B0D28544B00            mov ecx, dword ptr [004B5428]
:00459294 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00459295 FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045928A(U)
|
:0045929B E8936EFBFF              call 00410133
:004592A0 C745FC00000000          mov [ebp-04], 00000000
:004592A7 EB09                    jmp 004592B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004592C9(U)
|
:004592A9 8B55FC                  mov edx, dword ptr [ebp-04]
:004592AC 83C201                  add edx, 00000001
:004592AF 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004592A7(U)
|
:004592B2 8B45F8                  mov eax, dword ptr [ebp-08]
:004592B5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004592B8 3B4804                  cmp ecx, dword ptr [eax+04]
:004592BB 730E                    jnb 004592CB
:004592BD 8B55FC                  mov edx, dword ptr [ebp-04]
:004592C0 52                      push edx
:004592C1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004592C4 E872FEFFFF              call 0045913B
:004592C9 EBDE                    jmp 004592A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004592BB(C)
|
:004592CB E87E6EFBFF              call 0041014E
:004592D0 E89D82FBFF              call 00411572
:004592D5 85C0                    test eax, eax
:004592D7 7418                    je 004592F1
:004592D9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004592DC E80F020000              call 004594F0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004592E1 6A05                    push 00000005
:004592E3 A13C544B00              mov eax, dword ptr [004B543C]
:004592E8 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004592E9 FF1500D74B00            Call dword ptr [004BD700]
:004592EF EB0F                    jmp 00459300

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004592D7(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004592F1 6A05                    push 00000005
:004592F3 8B0D28544B00            mov ecx, dword ptr [004B5428]
:004592F9 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004592FA FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004592EF(U)
|
:00459300 8BE5                    mov esp, ebp
:00459302 5D                      pop ebp
:00459303 C3                      ret



* Referenced by a CALL at Address:
|:0045A787   
|
:00459304 55                      push ebp
:00459305 8BEC                    mov ebp, esp
:00459307 51                      push ecx
:00459308 894DFC                  mov dword ptr [ebp-04], ecx
:0045930B 6A00                    push 00000000
:0045930D 6A01                    push 00000001
:0045930F 6811010000              push 00000111
:00459314 8B45FC                  mov eax, dword ptr [ebp-04]
:00459317 8B4834                  mov ecx, dword ptr [eax+34]
:0045931A 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045931B FF1504D64B00            Call dword ptr [004BD604]
:00459321 8BE5                    mov esp, ebp
:00459323 5D                      pop ebp
:00459324 C3                      ret



* Referenced by a CALL at Addresses:
|:0045A79D   , :0045A9A3   
|
:00459325 55                      push ebp
:00459326 8BEC                    mov ebp, esp
:00459328 51                      push ecx
:00459329 894DFC                  mov dword ptr [ebp-04], ecx
:0045932C 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0045932E 6A02                    push 00000002
:00459330 6811010000              push 00000111
:00459335 8B45FC                  mov eax, dword ptr [ebp-04]
:00459338 8B4834                  mov ecx, dword ptr [eax+34]
:0045933B 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045933C FF1504D64B00            Call dword ptr [004BD604]
:00459342 8BE5                    mov esp, ebp
:00459344 5D                      pop ebp
:00459345 C3                      ret



* Referenced by a CALL at Addresses:
|:00458ACA   , :00459551   , :0045A197   
|
:00459346 55                      push ebp
:00459347 8BEC                    mov ebp, esp
:00459349 83EC08                  sub esp, 00000008
:0045934C 894DF8                  mov dword ptr [ebp-08], ecx
:0045934F C745FC00000000          mov [ebp-04], 00000000
:00459356 EB09                    jmp 00459361

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459375(U)
|
:00459358 8B45FC                  mov eax, dword ptr [ebp-04]
:0045935B 83C001                  add eax, 00000001
:0045935E 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459356(U)
|
:00459361 837DFC30                cmp dword ptr [ebp-04], 00000030
:00459365 7310                    jnb 00459377
:00459367 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045936A 8B55F8                  mov edx, dword ptr [ebp-08]
:0045936D C7448A3C00000000        mov [edx+4*ecx+3C], 00000000
:00459375 EBE1                    jmp 00459358

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459365(C)
|
:00459377 8B45F8                  mov eax, dword ptr [ebp-08]
:0045937A C780FC00000000000000    mov dword ptr [ebx+000000FC], 00000000
:00459384 8BE5                    mov esp, ebp
:00459386 5D                      pop ebp
:00459387 C3                      ret



* Referenced by a CALL at Addresses:
|:00459803   , :0045A98D   
|
:00459388 55                      push ebp
:00459389 8BEC                    mov ebp, esp
:0045938B 51                      push ecx
:0045938C 894DFC                  mov dword ptr [ebp-04], ecx
:0045938F 8B4508                  mov eax, dword ptr [ebp+08]
:00459392 50                      push eax
:00459393 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459396 E8D5180000              call 0045AC70
:0045939B 85C0                    test eax, eax
:0045939D 742D                    je 004593CC
:0045939F 6A00                    push 00000000
:004593A1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004593A4 51                      push ecx
:004593A5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004593A8 E8E3180000              call 0045AC90
:004593AD 6A01                    push 00000001
:004593AF 8B55FC                  mov edx, dword ptr [ebp-04]
:004593B2 8B82FC000000            mov eax, dword ptr [edx+000000FC]
:004593B8 50                      push eax
:004593B9 E862EF0100              call 00478320
:004593BE 83C408                  add esp, 00000008
:004593C1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004593C4 8981FC000000            mov dword ptr [ecx+000000FC], eax
:004593CA EB37                    jmp 00459403

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045939D(C)
|
:004593CC 8B55FC                  mov edx, dword ptr [ebp-04]
:004593CF 8B45FC                  mov eax, dword ptr [ebp-04]
:004593D2 8B8AFC000000            mov ecx, dword ptr [edx+000000FC]
:004593D8 3B8800010000            cmp ecx, dword ptr [eax+00000100]
:004593DE 7323                    jnb 00459403
:004593E0 6A01                    push 00000001
:004593E2 8B5508                  mov edx, dword ptr [ebp+08]
:004593E5 52                      push edx
:004593E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004593E9 E8A2180000              call 0045AC90
:004593EE 8B45FC                  mov eax, dword ptr [ebp-04]
:004593F1 8B88FC000000            mov ecx, dword ptr [eax+000000FC]
:004593F7 83C101                  add ecx, 00000001
:004593FA 8B55FC                  mov edx, dword ptr [ebp-04]
:004593FD 898AFC000000            mov dword ptr [edx+000000FC], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004593CA(U), :004593DE(C)
|
:00459403 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459406 E8E5000000              call 004594F0
:0045940B 8B4508                  mov eax, dword ptr [ebp+08]
:0045940E 50                      push eax
:0045940F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459412 E824FDFFFF              call 0045913B
:00459417 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045941A 83B9FC00000000          cmp dword ptr [ecx+000000FC], 00000000
:00459421 761A                    jbe 0045943D
:00459423 6A01                    push 00000001
:00459425 6A01                    push 00000001
:00459427 8B55FC                  mov edx, dword ptr [ebp-04]
:0045942A 8B4234                  mov eax, dword ptr [edx+34]
:0045942D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045942E FF1510D64B00            Call dword ptr [004BD610]
:00459434 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:00459435 FF1584D64B00            Call dword ptr [004BD684]
:0045943B EB18                    jmp 00459455

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459421(C)
|
:0045943D 6A00                    push 00000000
:0045943F 6A01                    push 00000001
:00459441 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00459444 8B5134                  mov edx, dword ptr [ecx+34]
:00459447 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00459448 FF1510D64B00            Call dword ptr [004BD610]
:0045944E 50                      push eax

* Reference To: USER32.EnableWindow, Ord:00B2h
                                  |
:0045944F FF1584D64B00            Call dword ptr [004BD684]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045943B(U)
|
:00459455 8BE5                    mov esp, ebp
:00459457 5D                      pop ebp
:00459458 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00459247   
|
:0045945B 55                      push ebp
:0045945C 8BEC                    mov ebp, esp
:0045945E 83EC0C                  sub esp, 0000000C
:00459461 894DF4                  mov dword ptr [ebp-0C], ecx
:00459464 8B4508                  mov eax, dword ptr [ebp+08]
:00459467 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045946A 837C813C00              cmp dword ptr [ecx+4*eax+3C], 00000000
:0045946F 7479                    je 004594EA
:00459471 8B4508                  mov eax, dword ptr [ebp+08]
:00459474 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00459476 B908000000              mov ecx, 00000008
:0045947B F7F1                    div ecx
:0045947D 6BD230                  imul edx, 00000030
:00459480 8955FC                  mov dword ptr [ebp-04], edx
:00459483 8B5508                  mov edx, dword ptr [ebp+08]
:00459486 C1EA03                  shr edx, 03
:00459489 6BD230                  imul edx, 00000030
:0045948C 8955F8                  mov dword ptr [ebp-08], edx
:0045948F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00459492 8B4838                  mov ecx, dword ptr [eax+38]
:00459495 6BC930                  imul ecx, 00000030
:00459498 8B55F8                  mov edx, dword ptr [ebp-08]
:0045949B 03D1                    add edx, ecx
:0045949D 8955F8                  mov dword ptr [ebp-08], edx
:004594A0 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004594A2 6A0A                    push 0000000A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004594A4 6A04                    push 00000004
:004594A6 E872C80100              call 00475D1D
:004594AB 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004594AE 6A04                    push 00000004
:004594B0 6A00                    push 00000000
:004594B2 68401B0000              push 00001B40
:004594B7 B9A01C4B00              mov ecx, 004B1CA0
:004594BC E8CFFA0100              call 00478F90
:004594C1 50                      push eax
:004594C2 6A18                    push 00000018
:004594C4 6A18                    push 00000018
:004594C6 8B45F8                  mov eax, dword ptr [ebp-08]
:004594C9 83C00C                  add eax, 0000000C
:004594CC 50                      push eax
:004594CD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004594D0 83C10C                  add ecx, 0000000C
:004594D3 51                      push ecx
:004594D4 E81BD60100              call 00476AF4
:004594D9 83C414                  add esp, 00000014
:004594DC 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004594DE 6A0A                    push 0000000A
:004594E0 6A00                    push 00000000
:004594E2 E836C80100              call 00475D1D
:004594E7 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045946F(C)
|
:004594EA 8BE5                    mov esp, ebp
:004594EC 5D                      pop ebp
:004594ED C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004592DC   , :00459406   
|
:004594F0 55                      push ebp
:004594F1 8BEC                    mov ebp, esp
:004594F3 83EC10                  sub esp, 00000010
:004594F6 894DF0                  mov dword ptr [ebp-10], ecx
:004594F9 8B45F0                  mov eax, dword ptr [ebp-10]
:004594FC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004594FF 8B9000010000            mov edx, dword ptr [eax+00000100]
:00459505 2B91FC000000            sub edx, dword ptr [ecx+000000FC]
:0045950B 52                      push edx

* Possible StringData Ref from Data Obj ->"%d"
                                  |
:0045950C 68B4164800              push 004816B4
:00459511 8D45F4                  lea eax, dword ptr [ebp-0C]
:00459514 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00459515 FF1504D74B00            Call dword ptr [004BD704]
:0045951B 83C40C                  add esp, 0000000C
:0045951E 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00459521 51                      push ecx
:00459522 6A00                    push 00000000
:00459524 6A0C                    push 0000000C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0536, "99"
                                  |
:00459526 6836050000              push 00000536
:0045952B 8B55F0                  mov edx, dword ptr [ebp-10]
:0045952E 8B4234                  mov eax, dword ptr [edx+34]
:00459531 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00459532 FF15D4D54B00            Call dword ptr [004BD5D4]
:00459538 8BE5                    mov esp, ebp
:0045953A 5D                      pop ebp
:0045953B C3                      ret



* Referenced by a CALL at Addresses:
|:0045A1E7   , :0045A205   , :0045A221   
|
:0045953C 55                      push ebp
:0045953D 8BEC                    mov ebp, esp
:0045953F 81ECA4010000            sub esp, 000001A4
:00459545 898D60FEFFFF            mov dword ptr [ebp+FFFFFE60], ecx
:0045954B 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:00459551 E8F0FDFFFF              call 00459346
:00459556 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:0045955C E809FDFFFF              call 0045926A
:00459561 C7856CFEFFFF00000000    mov dword ptr [ebp+FFFFFE6C], 00000000
:0045956B EB0F                    jmp 0045957C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004595A7(U)
|
:0045956D 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:00459573 83C001                  add eax, 00000001
:00459576 89856CFEFFFF            mov dword ptr [ebp+FFFFFE6C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045956B(U)
|
:0045957C 83BD6CFEFFFF31          cmp dword ptr [ebp+FFFFFE6C], 00000031
:00459583 7324                    jnb 004595A9
:00459585 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:0045958B C7848D74FEFFFFFFFF0000  mov dword ptr [ebp+4*ecx-0000018C], 0000FFFF
:00459596 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:0045959C C7849538FFFFFF00000000  mov dword ptr [ebp+4*edx-000000C8], 00000000
:004595A7 EBC4                    jmp 0045956D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459583(C)
|
:004595A9 C7856CFEFFFF00000000    mov dword ptr [ebp+FFFFFE6C], 00000000
:004595B3 8B8560FEFFFF            mov eax, dword ptr [ebp+FFFFFE60]
:004595B9 8B08                    mov ecx, dword ptr [eax]
:004595BB 8B11                    mov edx, dword ptr [ecx]
:004595BD 899568FEFFFF            mov dword ptr [ebp+FFFFFE68], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045969F(U)
|
:004595C3 83BD68FEFFFF00          cmp dword ptr [ebp+FFFFFE68], 00000000
:004595CA 0F84D4000000            je 004596A4
:004595D0 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:004595D6 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:004595DC 898C8574FEFFFF          mov dword ptr [ebp+4*eax-0000018C], ecx
:004595E3 8B5508                  mov edx, dword ptr [ebp+08]
:004595E6 89955CFEFFFF            mov dword ptr [ebp+FFFFFE5C], edx
:004595EC 83BD5CFEFFFF00          cmp dword ptr [ebp+FFFFFE5C], 00000000
:004595F3 7414                    je 00459609
:004595F5 83BD5CFEFFFF01          cmp dword ptr [ebp+FFFFFE5C], 00000001
:004595FC 742A                    je 00459628
:004595FE 83BD5CFEFFFF02          cmp dword ptr [ebp+FFFFFE5C], 00000002
:00459605 743B                    je 00459642
:00459607 EB53                    jmp 0045965C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004595F3(C)
|
:00459609 8B8D68FEFFFF            mov ecx, dword ptr [ebp+FFFFFE68]
:0045960F E88C68FBFF              call 0040FEA0
:00459614 25FF000000              and eax, 000000FF
:00459619 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:0045961F 89848D38FFFFFF          mov dword ptr [ebp+4*ecx-000000C8], eax
:00459626 EB51                    jmp 00459679

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004595FC(C)
|
:00459628 8B8D68FEFFFF            mov ecx, dword ptr [ebp+FFFFFE68]
:0045962E E8EB86FAFF              call 00401D1E
:00459633 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00459639 89849538FFFFFF          mov dword ptr [ebp+4*edx-000000C8], eax
:00459640 EB37                    jmp 00459679

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459605(C)
|
:00459642 8B8D68FEFFFF            mov ecx, dword ptr [ebp+FFFFFE68]
:00459648 E80487FAFF              call 00401D51
:0045964D 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:00459653 89848D38FFFFFF          mov dword ptr [ebp+4*ecx-000000C8], eax
:0045965A EB1D                    jmp 00459679

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459607(U)
|
:0045965C 8B8D68FEFFFF            mov ecx, dword ptr [ebp+FFFFFE68]
:00459662 E83968FBFF              call 0040FEA0
:00459667 25FF000000              and eax, 000000FF
:0045966C 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00459672 89849538FFFFFF          mov dword ptr [ebp+4*edx-000000C8], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459626(U), :00459640(U), :0045965A(U)
|
:00459679 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:0045967F 83C001                  add eax, 00000001
:00459682 89856CFEFFFF            mov dword ptr [ebp+FFFFFE6C], eax
:00459688 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:0045968E 8B11                    mov edx, dword ptr [ecx]
:00459690 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:00459696 8B0C82                  mov ecx, dword ptr [edx+4*eax]
:00459699 898D68FEFFFF            mov dword ptr [ebp+FFFFFE68], ecx
:0045969F E91FFFFFFF              jmp 004595C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004595CA(C)
|
:004596A4 C7856CFEFFFF00000000    mov dword ptr [ebp+FFFFFE6C], 00000000
:004596AE EB0F                    jmp 004596BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459794(U)
|
:004596B0 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:004596B6 83C201                  add edx, 00000001
:004596B9 89956CFEFFFF            mov dword ptr [ebp+FFFFFE6C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004596AE(U)
|
:004596BF 83BD6CFEFFFF30          cmp dword ptr [ebp+FFFFFE6C], 00000030
:004596C6 0F83CD000000            jnb 00459799
:004596CC 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:004596D2 83C001                  add eax, 00000001
:004596D5 898564FEFFFF            mov dword ptr [ebp+FFFFFE64], eax
:004596DB EB0F                    jmp 004596EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045978F(U)
|
:004596DD 8B8D64FEFFFF            mov ecx, dword ptr [ebp+FFFFFE64]
:004596E3 83C101                  add ecx, 00000001
:004596E6 898D64FEFFFF            mov dword ptr [ebp+FFFFFE64], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004596DB(U)
|
:004596EC 83BD64FEFFFF30          cmp dword ptr [ebp+FFFFFE64], 00000030
:004596F3 0F839B000000            jnb 00459794
:004596F9 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:004596FF 8B8564FEFFFF            mov eax, dword ptr [ebp+FFFFFE64]
:00459705 8B8C9538FFFFFF          mov ecx, dword ptr [ebp+4*edx-000000C8]
:0045970C 3B8C8538FFFFFF          cmp ecx, dword ptr [ebp+4*eax-000000C8]
:00459713 737A                    jnb 0045978F
:00459715 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:0045971B 8B849538FFFFFF          mov eax, dword ptr [ebp+4*edx-000000C8]
:00459722 8945FC                  mov dword ptr [ebp-04], eax
:00459725 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:0045972B 8B9564FEFFFF            mov edx, dword ptr [ebp+FFFFFE64]
:00459731 8B849538FFFFFF          mov eax, dword ptr [ebp+4*edx-000000C8]
:00459738 89848D38FFFFFF          mov dword ptr [ebp+4*ecx-000000C8], eax
:0045973F 8B8D64FEFFFF            mov ecx, dword ptr [ebp+FFFFFE64]
:00459745 8B55FC                  mov edx, dword ptr [ebp-04]
:00459748 89948D38FFFFFF          mov dword ptr [ebp+4*ecx-000000C8], edx
:0045974F 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:00459755 8B8C8574FEFFFF          mov ecx, dword ptr [ebp+4*eax-0000018C]
:0045975C 898D70FEFFFF            mov dword ptr [ebp+FFFFFE70], ecx
:00459762 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00459768 8B8564FEFFFF            mov eax, dword ptr [ebp+FFFFFE64]
:0045976E 8B8C8574FEFFFF          mov ecx, dword ptr [ebp+4*eax-0000018C]
:00459775 898C9574FEFFFF          mov dword ptr [ebp+4*edx-0000018C], ecx
:0045977C 8B9564FEFFFF            mov edx, dword ptr [ebp+FFFFFE64]
:00459782 8B8570FEFFFF            mov eax, dword ptr [ebp+FFFFFE70]
:00459788 89849574FEFFFF          mov dword ptr [ebp+4*edx-0000018C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459713(C)
|
:0045978F E949FFFFFF              jmp 004596DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004596F3(C)
|
:00459794 E917FFFFFF              jmp 004596B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004596C6(C)
|
:00459799 C7856CFEFFFF00000000    mov dword ptr [ebp+FFFFFE6C], 00000000
:004597A3 EB0F                    jmp 004597B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459826(U)
|
:004597A5 8B8D6CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE6C]
:004597AB 83C101                  add ecx, 00000001
:004597AE 898D6CFEFFFF            mov dword ptr [ebp+FFFFFE6C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004597A3(U)
|
:004597B4 83BD6CFEFFFF30          cmp dword ptr [ebp+FFFFFE6C], 00000030
:004597BB 736E                    jnb 0045982B
:004597BD 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:004597C3 81BC9574FEFFFFFFFF0000  cmp dword ptr [ebp+4*edx-0000018C], 0000FFFF
:004597CE 7502                    jne 004597D2
:004597D0 EB59                    jmp 0045982B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004597CE(C)
|
:004597D2 8B856CFEFFFF            mov eax, dword ptr [ebp+FFFFFE6C]
:004597D8 8B8C8574FEFFFF          mov ecx, dword ptr [ebp+4*eax-0000018C]
:004597DF 51                      push ecx
:004597E0 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:004597E6 E885140000              call 0045AC70
:004597EB 85C0                    test eax, eax
:004597ED 7537                    jne 00459826
:004597EF 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:004597F5 8B849574FEFFFF          mov eax, dword ptr [ebp+4*edx-0000018C]
:004597FC 50                      push eax
:004597FD 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:00459803 E880FBFFFF              call 00459388
:00459808 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:0045980E 8B9560FEFFFF            mov edx, dword ptr [ebp+FFFFFE60]
:00459814 8B8100010000            mov eax, dword ptr [ecx+00000100]
:0045981A 2B82FC000000            sub eax, dword ptr [edx+000000FC]
:00459820 85C0                    test eax, eax
:00459822 7702                    ja 00459826
:00459824 EB05                    jmp 0045982B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004597ED(C), :00459822(C)
|
:00459826 E97AFFFFFF              jmp 004597A5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004597BB(C), :004597D0(U), :00459824(U)
|
:0045982B 8B8D60FEFFFF            mov ecx, dword ptr [ebp+FFFFFE60]
:00459831 C64108FF                mov [ecx+08], FF
:00459835 8BE5                    mov esp, ebp
:00459837 5D                      pop ebp
:00459838 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0045A051   , :0045A12F   
|
:0045983B 55                      push ebp
:0045983C 8BEC                    mov ebp, esp
:0045983E 83EC14                  sub esp, 00000014
:00459841 894DEC                  mov dword ptr [ebp-14], ecx
:00459844 C745FC00000000          mov [ebp-04], 00000000
:0045984B C745F800000000          mov [ebp-08], 00000000
:00459852 C745F400000000          mov [ebp-0C], 00000000
:00459859 E8147DFBFF              call 00411572
:0045985E 85C0                    test eax, eax
:00459860 750C                    jne 0045986E

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00459862 6A07                    push 00000007
:00459864 E8A6BD0100              call 0047560F
:00459869 83C404                  add esp, 00000004
:0045986C EB0A                    jmp 00459878

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459860(C)
|
:0045986E 6A0C                    push 0000000C
:00459870 E89ABD0100              call 0047560F
:00459875 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045986C(U)
|
:00459878 C745F000000000          mov [ebp-10], 00000000
:0045987F EB09                    jmp 0045988A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004598F8(U)
|
:00459881 8B45F0                  mov eax, dword ptr [ebp-10]
:00459884 83C001                  add eax, 00000001
:00459887 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045987F(U)
|
:0045988A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045988D 8B55F0                  mov edx, dword ptr [ebp-10]
:00459890 3B5104                  cmp edx, dword ptr [ecx+04]
:00459893 7365                    jnb 004598FA

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00459895 6A04                    push 00000004
:00459897 6A00                    push 00000000
:00459899 8B45F0                  mov eax, dword ptr [ebp-10]
:0045989C 69C000090000            imul eax, 00000900
:004598A2 50                      push eax
:004598A3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004598A6 83C120                  add ecx, 00000020
:004598A9 E8E2F60100              call 00478F90
:004598AE 8945FC                  mov dword ptr [ebp-04], eax
:004598B1 8B45F0                  mov eax, dword ptr [ebp-10]
:004598B4 33D2                    xor edx, edx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004598B6 B908000000              mov ecx, 00000008
:004598BB F7F1                    div ecx
:004598BD 6BD230                  imul edx, 00000030
:004598C0 8955F8                  mov dword ptr [ebp-08], edx
:004598C3 8B55F0                  mov edx, dword ptr [ebp-10]
:004598C6 C1EA03                  shr edx, 03
:004598C9 6BD230                  imul edx, 00000030
:004598CC 8955F4                  mov dword ptr [ebp-0C], edx
:004598CF 8B45EC                  mov eax, dword ptr [ebp-14]
:004598D2 8B4838                  mov ecx, dword ptr [eax+38]
:004598D5 6BC930                  imul ecx, 00000030
:004598D8 8B55F4                  mov edx, dword ptr [ebp-0C]
:004598DB 03D1                    add edx, ecx
:004598DD 8955F4                  mov dword ptr [ebp-0C], edx
:004598E0 8B45FC                  mov eax, dword ptr [ebp-04]
:004598E3 50                      push eax
:004598E4 6A30                    push 00000030
:004598E6 6A30                    push 00000030
:004598E8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004598EB 51                      push ecx
:004598EC 8B55F8                  mov edx, dword ptr [ebp-08]
:004598EF 52                      push edx
:004598F0 E8B5D30100              call 00476CAA
:004598F5 83C414                  add esp, 00000014
:004598F8 EB87                    jmp 00459881

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459893(C)
|
:004598FA 6A00                    push 00000000
:004598FC E80EBD0100              call 0047560F
:00459901 83C404                  add esp, 00000004
:00459904 8BE5                    mov esp, ebp
:00459906 5D                      pop ebp
:00459907 C3                      ret


:00459908 55                      push ebp
:00459909 8BEC                    mov ebp, esp
:0045990B E807000000              call 00459917
:00459910 E811000000              call 00459926
:00459915 5D                      pop ebp
:00459916 C3                      ret



* Referenced by a CALL at Address:
|:0045990B   
|
:00459917 55                      push ebp
:00459918 8BEC                    mov ebp, esp
:0045991A B9C84C4B00              mov ecx, 004B4CC8
:0045991F E80C130000              call 0045AC30
:00459924 5D                      pop ebp
:00459925 C3                      ret



* Referenced by a CALL at Address:
|:00459910   
|
:00459926 55                      push ebp
:00459927 8BEC                    mov ebp, esp
:00459929 6838994500              push 00459938
:0045992E E87D5B0100              call 0046F4B0
:00459933 83C404                  add esp, 00000004
:00459936 5D                      pop ebp
:00459937 C3                      ret


:00459938 55                      push ebp
:00459939 8BEC                    mov ebp, esp
:0045993B B9C84C4B00              mov ecx, 004B4CC8
:00459940 E8CB120000              call 0045AC10
:00459945 5D                      pop ebp
:00459946 C3                      ret


:00459947 55                      push ebp
:00459948 8BEC                    mov ebp, esp
:0045994A E807000000              call 00459956
:0045994F E811000000              call 00459965
:00459954 5D                      pop ebp
:00459955 C3                      ret



* Referenced by a CALL at Address:
|:0045994A   
|
:00459956 55                      push ebp
:00459957 8BEC                    mov ebp, esp
:00459959 B9A84C4B00              mov ecx, 004B4CA8
:0045995E E8CD120000              call 0045AC30
:00459963 5D                      pop ebp
:00459964 C3                      ret



* Referenced by a CALL at Address:
|:0045994F   
|
:00459965 55                      push ebp
:00459966 8BEC                    mov ebp, esp
:00459968 6877994500              push 00459977
:0045996D E83E5B0100              call 0046F4B0
:00459972 83C404                  add esp, 00000004
:00459975 5D                      pop ebp
:00459976 C3                      ret


:00459977 55                      push ebp
:00459978 8BEC                    mov ebp, esp
:0045997A B9A84C4B00              mov ecx, 004B4CA8
:0045997F E88C120000              call 0045AC10
:00459984 5D                      pop ebp
:00459985 C3                      ret


:00459986 55                      push ebp
:00459987 8BEC                    mov ebp, esp
:00459989 E807000000              call 00459995
:0045998E E811000000              call 004599A4
:00459993 5D                      pop ebp
:00459994 C3                      ret



* Referenced by a CALL at Address:
|:00459989   
|
:00459995 55                      push ebp
:00459996 8BEC                    mov ebp, esp
:00459998 B9704C4B00              mov ecx, 004B4C70
:0045999D E88E120000              call 0045AC30
:004599A2 5D                      pop ebp
:004599A3 C3                      ret



* Referenced by a CALL at Address:
|:0045998E   
|
:004599A4 55                      push ebp
:004599A5 8BEC                    mov ebp, esp
:004599A7 68B6994500              push 004599B6
:004599AC E8FF5A0100              call 0046F4B0
:004599B1 83C404                  add esp, 00000004
:004599B4 5D                      pop ebp
:004599B5 C3                      ret


:004599B6 55                      push ebp
:004599B7 8BEC                    mov ebp, esp
:004599B9 B9704C4B00              mov ecx, 004B4C70
:004599BE E84D120000              call 0045AC10
:004599C3 5D                      pop ebp
:004599C4 C3                      ret



* Referenced by a CALL at Address:
|:0044EB6E   
|
:004599C5 55                      push ebp
:004599C6 8BEC                    mov ebp, esp
:004599C8 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:004599CA 68F99D4500              push 00459DF9
:004599CF A1B0554B00              mov eax, dword ptr [004B55B0]
:004599D4 50                      push eax
:004599D5 6818010000              push 00000118
:004599DA 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:004599E0 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:004599E1 FF15DCD64B00            Call dword ptr [004BD6DC]
:004599E7 6A00                    push 00000000
:004599E9 6A00                    push 00000000
:004599EB 6802020000              push 00000202
:004599F0 8B15B0554B00            mov edx, dword ptr [004B55B0]
:004599F6 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004599F7 FF1504D64B00            Call dword ptr [004BD604]
:004599FD B9A84C4B00              mov ecx, 004B4CA8
:00459A02 E8D985FEFF              call 00441FE0
:00459A07 5D                      pop ebp
:00459A08 C3                      ret



* Referenced by a CALL at Address:
|:0043899D   
|
:00459A09 55                      push ebp
:00459A0A 8BEC                    mov ebp, esp
:00459A0C 6A00                    push 00000000
:00459A0E 68139D4500              push 00459D13
:00459A13 A1B0554B00              mov eax, dword ptr [004B55B0]
:00459A18 50                      push eax
:00459A19 6817010000              push 00000117
:00459A1E 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00459A24 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00459A25 FF15DCD64B00            Call dword ptr [004BD6DC]
:00459A2B B9C84C4B00              mov ecx, 004B4CC8
:00459A30 E8AB85FEFF              call 00441FE0
:00459A35 5D                      pop ebp
:00459A36 C3                      ret



* Referenced by a CALL at Address:
|:00439335   
|
:00459A37 55                      push ebp
:00459A38 8BEC                    mov ebp, esp
:00459A3A 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00459A3C 68A49E4500              push 00459EA4
:00459A41 A1B0554B00              mov eax, dword ptr [004B55B0]
:00459A46 50                      push eax
:00459A47 6819010000              push 00000119
:00459A4C 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00459A52 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00459A53 FF15DCD64B00            Call dword ptr [004BD6DC]
:00459A59 B9704C4B00              mov ecx, 004B4C70
:00459A5E E87D85FEFF              call 00441FE0
:00459A63 5D                      pop ebp
:00459A64 C3                      ret



* Referenced by a CALL at Address:
|:0041FDCA   
|
:00459A65 55                      push ebp
:00459A66 8BEC                    mov ebp, esp
:00459A68 6AFF                    push FFFFFFFF
:00459A6A 68B1994700              push 004799B1
:00459A6F 64A100000000            mov eax, dword ptr fs:[00000000]
:00459A75 50                      push eax
:00459A76 64892500000000          mov dword ptr fs:[00000000], esp
:00459A7D 83EC20                  sub esp, 00000020
:00459A80 6804010000              push 00000104
:00459A85 E8C65A0100              call 0046F550
:00459A8A 83C404                  add esp, 00000004
:00459A8D 8945E8                  mov dword ptr [ebp-18], eax
:00459A90 C745FC00000000          mov [ebp-04], 00000000
:00459A97 837DE800                cmp dword ptr [ebp-18], 00000000
:00459A9B 740D                    je 00459AAA
:00459A9D 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00459AA0 E8A8EDFFFF              call 0045884D
:00459AA5 8945D8                  mov dword ptr [ebp-28], eax
:00459AA8 EB07                    jmp 00459AB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459A9B(C)
|
:00459AAA C745D800000000          mov [ebp-28], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459AA8(U)
|
:00459AB1 8B45D8                  mov eax, dword ptr [ebp-28]
:00459AB4 8945E4                  mov dword ptr [ebp-1C], eax
:00459AB7 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00459ABE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00459AC1 890D904C4B00            mov dword ptr [004B4C90], ecx
:00459AC7 33D2                    xor edx, edx
:00459AC9 833D904C4B0000          cmp dword ptr [004B4C90], 00000000
:00459AD0 0F94C2                  sete dl
:00459AD3 8855EC                  mov byte ptr [ebp-14], dl
:00459AD6 8B45EC                  mov eax, dword ptr [ebp-14]
:00459AD9 25FF000000              and eax, 000000FF
:00459ADE 85C0                    test eax, eax
:00459AE0 741D                    je 00459AFF
:00459AE2 6A30                    push 00000030

* Possible StringData Ref from Data Obj ->"ZNܿ"
                                  |
:00459AE4 68B8164800              push 004816B8

* Possible StringData Ref from Data Obj ->"LkܪZN@ǳ"
                                  |
:00459AE9 68C8164800              push 004816C8
:00459AEE 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00459AF4 51                      push ecx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00459AF5 FF15E0D64B00            Call dword ptr [004BD6E0]
:00459AFB 0CFF                    or al, FF
:00459AFD EB6A                    jmp 00459B69

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459AE0(C)
|
:00459AFF 8B5508                  mov edx, dword ptr [ebp+08]
:00459B02 52                      push edx
:00459B03 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:00459B09 E86DEEFFFF              call 0045897B
:00459B0E 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00459B10 68669F4500              push 00459F66
:00459B15 A1B0554B00              mov eax, dword ptr [004B55B0]
:00459B1A 50                      push eax

* Possible Reference to Dialog: DialogID_00EC 
                                  |
:00459B1B 68EC000000              push 000000EC
:00459B20 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00459B26 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00459B27 FF15DCD64B00            Call dword ptr [004BD6DC]
:00459B2D 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:00459B33 E818110000              call 0045AC50
:00459B38 8845F0                  mov byte ptr [ebp-10], al
:00459B3B 8B15904C4B00            mov edx, dword ptr [004B4C90]
:00459B41 8955DC                  mov dword ptr [ebp-24], edx
:00459B44 8B45DC                  mov eax, dword ptr [ebp-24]
:00459B47 8945E0                  mov dword ptr [ebp-20], eax
:00459B4A 837DE000                cmp dword ptr [ebp-20], 00000000
:00459B4E 740F                    je 00459B5F
:00459B50 6A01                    push 00000001
:00459B52 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00459B55 E846100000              call 0045ABA0
:00459B5A 8945D4                  mov dword ptr [ebp-2C], eax
:00459B5D EB07                    jmp 00459B66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459B4E(C)
|
:00459B5F C745D400000000          mov [ebp-2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459B5D(U)
|
:00459B66 8A45F0                  mov al, byte ptr [ebp-10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459AFD(U)
|
:00459B69 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00459B6C 64890D00000000          mov dword ptr fs:[00000000], ecx
:00459B73 8BE5                    mov esp, ebp
:00459B75 5D                      pop ebp
:00459B76 C3                      ret



* Referenced by a CALL at Address:
|:0044ECE1   
|
:00459B77 55                      push ebp
:00459B78 8BEC                    mov ebp, esp
:00459B7A 6AFF                    push FFFFFFFF
:00459B7C 68C6994700              push 004799C6
:00459B81 64A100000000            mov eax, dword ptr fs:[00000000]
:00459B87 50                      push eax
:00459B88 64892500000000          mov dword ptr fs:[00000000], esp
:00459B8F 83EC24                  sub esp, 00000024
:00459B92 C745EC00000000          mov [ebp-14], 00000000
:00459B99 6804010000              push 00000104
:00459B9E E8AD590100              call 0046F550
:00459BA3 83C404                  add esp, 00000004
:00459BA6 8945E4                  mov dword ptr [ebp-1C], eax
:00459BA9 C745FC00000000          mov [ebp-04], 00000000
:00459BB0 837DE400                cmp dword ptr [ebp-1C], 00000000
:00459BB4 740D                    je 00459BC3
:00459BB6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00459BB9 E88FECFFFF              call 0045884D
:00459BBE 8945D4                  mov dword ptr [ebp-2C], eax
:00459BC1 EB07                    jmp 00459BCA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459BB4(C)
|
:00459BC3 C745D400000000          mov [ebp-2C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459BC1(U)
|
:00459BCA 8B45D4                  mov eax, dword ptr [ebp-2C]
:00459BCD 8945E0                  mov dword ptr [ebp-20], eax
:00459BD0 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00459BD7 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00459BDA 890D904C4B00            mov dword ptr [004B4C90], ecx
:00459BE0 33D2                    xor edx, edx
:00459BE2 833D904C4B0000          cmp dword ptr [004B4C90], 00000000
:00459BE9 0F94C2                  sete dl
:00459BEC 8855E8                  mov byte ptr [ebp-18], dl
:00459BEF 8B45E8                  mov eax, dword ptr [ebp-18]
:00459BF2 25FF000000              and eax, 000000FF
:00459BF7 85C0                    test eax, eax
:00459BF9 7420                    je 00459C1B
:00459BFB 6A30                    push 00000030

* Possible StringData Ref from Data Obj ->"ZNܿ"
                                  |
:00459BFD 68E0164800              push 004816E0

* Possible StringData Ref from Data Obj ->"LkyϪZN@ǳ"
                                  |
:00459C02 68F0164800              push 004816F0
:00459C07 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00459C0D 51                      push ecx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00459C0E FF15E0D64B00            Call dword ptr [004BD6E0]
:00459C14 33C0                    xor eax, eax
:00459C16 E9EA000000              jmp 00459D05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459BF9(C)
|
:00459C1B C745EC00000000          mov [ebp-14], 00000000
:00459C22 EB09                    jmp 00459C2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459C41(U)
|
:00459C24 8B55EC                  mov edx, dword ptr [ebp-14]
:00459C27 83C201                  add edx, 00000001
:00459C2A 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459C22(U)
|
:00459C2D 837DEC31                cmp dword ptr [ebp-14], 00000031
:00459C31 7310                    jnb 00459C43
:00459C33 8B45EC                  mov eax, dword ptr [ebp-14]
:00459C36 C70485A84B4B0000000000  mov dword ptr [4*eax+004B4BA8], 00000000
:00459C41 EBE1                    jmp 00459C24

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459C31(C)
|
:00459C43 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459C46 51                      push ecx
:00459C47 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:00459C4D E829EDFFFF              call 0045897B
:00459C52 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00459C54 68EDA04500              push 0045A0ED
:00459C59 8B15B0554B00            mov edx, dword ptr [004B55B0]
:00459C5F 52                      push edx

* Possible Reference to Dialog: DialogID_00EC 
                                  |
:00459C60 68EC000000              push 000000EC
:00459C65 A1A8554B00              mov eax, dword ptr [004B55A8]
:00459C6A 50                      push eax

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00459C6B FF15DCD64B00            Call dword ptr [004BD6DC]
:00459C71 C745F000000000          mov [ebp-10], 00000000
:00459C78 C745EC00000000          mov [ebp-14], 00000000
:00459C7F EB09                    jmp 00459C8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459CC5(U)
|
:00459C81 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00459C84 83C101                  add ecx, 00000001
:00459C87 894DEC                  mov dword ptr [ebp-14], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459C7F(U)
|
:00459C8A 837DEC30                cmp dword ptr [ebp-14], 00000030
:00459C8E 7337                    jnb 00459CC7
:00459C90 8B55EC                  mov edx, dword ptr [ebp-14]
:00459C93 52                      push edx
:00459C94 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:00459C9A E8D10F0000              call 0045AC70
:00459C9F 85C0                    test eax, eax
:00459CA1 7422                    je 00459CC5
:00459CA3 8B45EC                  mov eax, dword ptr [ebp-14]
:00459CA6 50                      push eax
:00459CA7 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:00459CAD E8FE0F0000              call 0045ACB0
:00459CB2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00459CB5 89048DA84B4B00          mov dword ptr [4*ecx+004B4BA8], eax
:00459CBC 8B55F0                  mov edx, dword ptr [ebp-10]
:00459CBF 83C201                  add edx, 00000001
:00459CC2 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459CA1(C)
|
:00459CC5 EBBA                    jmp 00459C81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459C8E(C)
|
:00459CC7 8B45F0                  mov eax, dword ptr [ebp-10]
:00459CCA C70485A84B4B0000000000  mov dword ptr [4*eax+004B4BA8], 00000000
:00459CD5 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:00459CDB 894DD8                  mov dword ptr [ebp-28], ecx
:00459CDE 8B55D8                  mov edx, dword ptr [ebp-28]
:00459CE1 8955DC                  mov dword ptr [ebp-24], edx
:00459CE4 837DDC00                cmp dword ptr [ebp-24], 00000000
:00459CE8 740F                    je 00459CF9
:00459CEA 6A01                    push 00000001
:00459CEC 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00459CEF E8AC0E0000              call 0045ABA0
:00459CF4 8945D0                  mov dword ptr [ebp-30], eax
:00459CF7 EB07                    jmp 00459D00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459CE8(C)
|
:00459CF9 C745D000000000          mov [ebp-30], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459CF7(U)
|
:00459D00 B8A84B4B00              mov eax, 004B4BA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459C16(U)
|
:00459D05 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00459D08 64890D00000000          mov dword ptr fs:[00000000], ecx
:00459D0F 8BE5                    mov esp, ebp
:00459D11 5D                      pop ebp
:00459D12 C3                      ret


:00459D13 55                      push ebp
:00459D14 8BEC                    mov ebp, esp
:00459D16 51                      push ecx
:00459D17 8B450C                  mov eax, dword ptr [ebp+0C]
:00459D1A 8945FC                  mov dword ptr [ebp-04], eax
:00459D1D 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00459D24 740E                    je 00459D34
:00459D26 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00459D2D 7418                    je 00459D47
:00459D2F E9BD000000              jmp 00459DF1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459D24(C)
|
:00459D34 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459D37 51                      push ecx
:00459D38 B9C84C4B00              mov ecx, 004B4CC8
:00459D3D E8FBE7FFFF              call 0045853D
:00459D42 E9AA000000              jmp 00459DF1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459D2D(C)
|
:00459D47 8B5510                  mov edx, dword ptr [ebp+10]
:00459D4A 81E2FFFF0000            and edx, 0000FFFF
:00459D50 81FA07050000            cmp edx, 00000507
:00459D56 750C                    jne 00459D64
:00459D58 6A01                    push 00000001
:00459D5A B9C84C4B00              mov ecx, 004B4CC8
:00459D5F E8B2E7FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459D56(C)
|
:00459D64 8B4510                  mov eax, dword ptr [ebp+10]
:00459D67 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0508, ""
                                  |
:00459D6C 3D08050000              cmp eax, 00000508
:00459D71 750C                    jne 00459D7F

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00459D73 6A02                    push 00000002
:00459D75 B9C84C4B00              mov ecx, 004B4CC8
:00459D7A E897E7FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459D71(C)
|
:00459D7F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00459D82 81E1FFFF0000            and ecx, 0000FFFF
:00459D88 81F909050000            cmp ecx, 00000509
:00459D8E 750C                    jne 00459D9C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00459D90 6A03                    push 00000003
:00459D92 B9C84C4B00              mov ecx, 004B4CC8
:00459D97 E87AE7FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459D8E(C)
|
:00459D9C 8B5510                  mov edx, dword ptr [ebp+10]
:00459D9F 81E2FFFF0000            and edx, 0000FFFF
:00459DA5 81FA0C050000            cmp edx, 0000050C
:00459DAB 750C                    jne 00459DB9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00459DAD 6A04                    push 00000004
:00459DAF B9C84C4B00              mov ecx, 004B4CC8
:00459DB4 E85DE7FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459DAB(C)
|
:00459DB9 8B4510                  mov eax, dword ptr [ebp+10]
:00459DBC 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050B, "I"
                                  |
:00459DC1 3D0B050000              cmp eax, 0000050B
:00459DC6 750C                    jne 00459DD4

* Possible Reference to String Resource ID=00006: ""
                                  |
:00459DC8 6A06                    push 00000006
:00459DCA B9C84C4B00              mov ecx, 004B4CC8
:00459DCF E842E7FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459DC6(C)
|
:00459DD4 8B4D10                  mov ecx, dword ptr [ebp+10]
:00459DD7 81E1FFFF0000            and ecx, 0000FFFF
:00459DDD 83F902                  cmp ecx, 00000002
:00459DE0 750F                    jne 00459DF1
:00459DE2 68FF000000              push 000000FF
:00459DE7 B9C84C4B00              mov ecx, 004B4CC8
:00459DEC E825E7FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459D2F(U), :00459D42(U), :00459DE0(C)
|
:00459DF1 33C0                    xor eax, eax
:00459DF3 8BE5                    mov esp, ebp
:00459DF5 5D                      pop ebp
:00459DF6 C21000                  ret 0010


:00459DF9 55                      push ebp
:00459DFA 8BEC                    mov ebp, esp
:00459DFC 51                      push ecx
:00459DFD 8B450C                  mov eax, dword ptr [ebp+0C]
:00459E00 8945FC                  mov dword ptr [ebp-04], eax
:00459E03 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00459E0A 740E                    je 00459E1A
:00459E0C 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00459E13 7415                    je 00459E2A
:00459E15 E982000000              jmp 00459E9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459E0A(C)
|
:00459E1A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459E1D 51                      push ecx
:00459E1E B9A84C4B00              mov ecx, 004B4CA8
:00459E23 E850E8FFFF              call 00458678
:00459E28 EB72                    jmp 00459E9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459E13(C)
|
:00459E2A 8B5510                  mov edx, dword ptr [ebp+10]
:00459E2D 81E2FFFF0000            and edx, 0000FFFF
:00459E33 81FA09050000            cmp edx, 00000509
:00459E39 750C                    jne 00459E47

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00459E3B 6A02                    push 00000002
:00459E3D B9A84C4B00              mov ecx, 004B4CA8
:00459E42 E8CFE6FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459E39(C)
|
:00459E47 8B4510                  mov eax, dword ptr [ebp+10]
:00459E4A 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050A, "
"
                                  |
:00459E4F 3D0A050000              cmp eax, 0000050A
:00459E54 750C                    jne 00459E62
:00459E56 6A00                    push 00000000
:00459E58 B9A84C4B00              mov ecx, 004B4CA8
:00459E5D E8B4E6FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459E54(C)
|
:00459E62 8B4D10                  mov ecx, dword ptr [ebp+10]
:00459E65 81E1FFFF0000            and ecx, 0000FFFF
:00459E6B 81F90C050000            cmp ecx, 0000050C
:00459E71 750C                    jne 00459E7F
:00459E73 6A01                    push 00000001
:00459E75 B9A84C4B00              mov ecx, 004B4CA8
:00459E7A E897E6FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459E71(C)
|
:00459E7F 8B5510                  mov edx, dword ptr [ebp+10]
:00459E82 81E2FFFF0000            and edx, 0000FFFF
:00459E88 83FA02                  cmp edx, 00000002
:00459E8B 750F                    jne 00459E9C
:00459E8D 68FF000000              push 000000FF
:00459E92 B9A84C4B00              mov ecx, 004B4CA8
:00459E97 E87AE6FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459E15(U), :00459E28(U), :00459E8B(C)
|
:00459E9C 33C0                    xor eax, eax
:00459E9E 8BE5                    mov esp, ebp
:00459EA0 5D                      pop ebp
:00459EA1 C21000                  ret 0010


:00459EA4 55                      push ebp
:00459EA5 8BEC                    mov ebp, esp
:00459EA7 51                      push ecx
:00459EA8 8B450C                  mov eax, dword ptr [ebp+0C]
:00459EAB 8945FC                  mov dword ptr [ebp-04], eax
:00459EAE 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00459EB5 740E                    je 00459EC5
:00459EB7 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00459EBE 7418                    je 00459ED8
:00459EC0 E999000000              jmp 00459F5E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459EB5(C)
|
:00459EC5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459EC8 51                      push ecx
:00459EC9 B9704C4B00              mov ecx, 004B4C70
:00459ECE E87EE8FFFF              call 00458751
:00459ED3 E986000000              jmp 00459F5E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459EBE(C)
|
:00459ED8 8B5510                  mov edx, dword ptr [ebp+10]
:00459EDB 81E2FFFF0000            and edx, 0000FFFF
:00459EE1 81FA0B050000            cmp edx, 0000050B
:00459EE7 750C                    jne 00459EF5
:00459EE9 6A00                    push 00000000
:00459EEB B9704C4B00              mov ecx, 004B4C70
:00459EF0 E821E6FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459EE7(C)
|
:00459EF5 8B4510                  mov eax, dword ptr [ebp+10]
:00459EF8 25FFFF0000              and eax, 0000FFFF
:00459EFD 83F803                  cmp eax, 00000003
:00459F00 750C                    jne 00459F0E
:00459F02 6A01                    push 00000001
:00459F04 B9704C4B00              mov ecx, 004B4C70
:00459F09 E808E6FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459F00(C)
|
:00459F0E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00459F11 81E1FFFF0000            and ecx, 0000FFFF
:00459F17 83F904                  cmp ecx, 00000004
:00459F1A 750C                    jne 00459F28

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00459F1C 6A02                    push 00000002
:00459F1E B9704C4B00              mov ecx, 004B4C70
:00459F23 E8EEE5FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459F1A(C)
|
:00459F28 8B5510                  mov edx, dword ptr [ebp+10]
:00459F2B 81E2FFFF0000            and edx, 0000FFFF
:00459F31 83FA05                  cmp edx, 00000005
:00459F34 750C                    jne 00459F42

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00459F36 6A03                    push 00000003
:00459F38 B9704C4B00              mov ecx, 004B4C70
:00459F3D E8D4E5FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459F34(C)
|
:00459F42 8B4510                  mov eax, dword ptr [ebp+10]
:00459F45 25FFFF0000              and eax, 0000FFFF
:00459F4A 83F802                  cmp eax, 00000002
:00459F4D 750F                    jne 00459F5E
:00459F4F 68FF000000              push 000000FF
:00459F54 B9704C4B00              mov ecx, 004B4C70
:00459F59 E8B8E5FFFF              call 00458516

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459EC0(U), :00459ED3(U), :00459F4D(C)
|
:00459F5E 33C0                    xor eax, eax
:00459F60 8BE5                    mov esp, ebp
:00459F62 5D                      pop ebp
:00459F63 C21000                  ret 0010


:00459F66 55                      push ebp
:00459F67 8BEC                    mov ebp, esp
:00459F69 51                      push ecx
:00459F6A 8B450C                  mov eax, dword ptr [ebp+0C]
:00459F6D 8945FC                  mov dword ptr [ebp-04], eax
:00459F70 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00459F77 7412                    je 00459F8B
:00459F79 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00459F80 0F84E8000000            je 0045A06E
:00459F86 E95A010000              jmp 0045A0E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459F77(C)
|
:00459F8B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459F8E 51                      push ecx
:00459F8F E89A020000              call 0045A22E
:00459F94 83C404                  add esp, 00000004
:00459F97 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0535, "iYK
"
                                  |
:00459F99 6835050000              push 00000535
:00459F9E 8B5508                  mov edx, dword ptr [ebp+08]
:00459FA1 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00459FA2 FF1510D64B00            Call dword ptr [004BD610]
:00459FA8 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00459FA9 FF1500D74B00            Call dword ptr [004BD700]
:00459FAF 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0537, ""
                                  |
:00459FB1 6837050000              push 00000537
:00459FB6 8B4508                  mov eax, dword ptr [ebp+08]
:00459FB9 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00459FBA FF1510D64B00            Call dword ptr [004BD610]
:00459FC0 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00459FC1 FF1500D74B00            Call dword ptr [004BD700]
:00459FC7 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0536, "99"
                                  |
:00459FC9 6836050000              push 00000536
:00459FCE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00459FD1 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00459FD2 FF1510D64B00            Call dword ptr [004BD610]
:00459FD8 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00459FD9 FF1500D74B00            Call dword ptr [004BD700]
:00459FDF 6A00                    push 00000000
:00459FE1 6A01                    push 00000001
:00459FE3 8B5508                  mov edx, dword ptr [ebp+08]
:00459FE6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00459FE7 FF1510D64B00            Call dword ptr [004BD610]
:00459FED 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00459FEE FF1500D74B00            Call dword ptr [004BD700]
:00459FF4 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:053F, ""
                                  |
:00459FF6 683F050000              push 0000053F
:00459FFB 8B4508                  mov eax, dword ptr [ebp+08]
:00459FFE 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00459FFF FF1510D64B00            Call dword ptr [004BD610]
:0045A005 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045A006 FF1500D74B00            Call dword ptr [004BD700]
:0045A00C 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0540, ""
                                  |
:0045A00E 6840050000              push 00000540
:0045A013 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A016 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045A017 FF1510D64B00            Call dword ptr [004BD610]
:0045A01D 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045A01E FF1500D74B00            Call dword ptr [004BD700]
:0045A024 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:053E, ""
                                  |
:0045A026 683E050000              push 0000053E
:0045A02B 8B5508                  mov edx, dword ptr [ebp+08]
:0045A02E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045A02F FF1510D64B00            Call dword ptr [004BD610]
:0045A035 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045A036 FF1500D74B00            Call dword ptr [004BD700]
:0045A03C 8B4508                  mov eax, dword ptr [ebp+08]
:0045A03F 50                      push eax
:0045A040 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A046 E841EBFFFF              call 00458B8C
:0045A04B 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A051 E8E5F7FFFF              call 0045983B
:0045A056 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A05C E809F2FFFF              call 0045926A
:0045A061 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A067 E8A1EBFFFF              call 00458C0D
:0045A06C EB77                    jmp 0045A0E5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00459F80(C)
|
:0045A06E 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045A071 81E1FFFF0000            and ecx, 0000FFFF
:0045A077 83F901                  cmp ecx, 00000001
:0045A07A 7518                    jne 0045A094
:0045A07C 8B5508                  mov edx, dword ptr [ebp+08]
:0045A07F 52                      push edx
:0045A080 E86D030000              call 0045A3F2
:0045A085 83C404                  add esp, 00000004
:0045A088 6A00                    push 00000000
:0045A08A 8B4508                  mov eax, dword ptr [ebp+08]
:0045A08D 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045A08E FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A07A(C)
|
:0045A094 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045A097 81E1FFFF0000            and ecx, 0000FFFF
:0045A09D 83F902                  cmp ecx, 00000002
:0045A0A0 7528                    jne 0045A0CA
:0045A0A2 68FF000000              push 000000FF
:0045A0A7 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A0AD E872E8FFFF              call 00458924
:0045A0B2 8B5508                  mov edx, dword ptr [ebp+08]
:0045A0B5 52                      push edx
:0045A0B6 E837030000              call 0045A3F2
:0045A0BB 83C404                  add esp, 00000004
:0045A0BE 6A00                    push 00000000
:0045A0C0 8B4508                  mov eax, dword ptr [ebp+08]
:0045A0C3 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045A0C4 FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A0A0(C)
|
:0045A0CA 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045A0CD 81E1FFFF0000            and ecx, 0000FFFF
:0045A0D3 83F909                  cmp ecx, 00000009
:0045A0D6 750D                    jne 0045A0E5
:0045A0D8 685E080000              push 0000085E
:0045A0DD E8E9F90000              call 00469ACB
:0045A0E2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00459F86(U), :0045A06C(U), :0045A0D6(C)
|
:0045A0E5 33C0                    xor eax, eax
:0045A0E7 8BE5                    mov esp, ebp
:0045A0E9 5D                      pop ebp
:0045A0EA C21000                  ret 0010


:0045A0ED 55                      push ebp
:0045A0EE 8BEC                    mov ebp, esp
:0045A0F0 51                      push ecx
:0045A0F1 8B450C                  mov eax, dword ptr [ebp+0C]
:0045A0F4 8945FC                  mov dword ptr [ebp-04], eax
:0045A0F7 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:0045A0FE 740E                    je 0045A10E
:0045A100 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0045A107 7446                    je 0045A14F
:0045A109 E918010000              jmp 0045A226

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A0FE(C)
|
:0045A10E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A111 51                      push ecx
:0045A112 E86A030000              call 0045A481
:0045A117 83C404                  add esp, 00000004
:0045A11A 8B5508                  mov edx, dword ptr [ebp+08]
:0045A11D 52                      push edx
:0045A11E 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A124 E863EAFFFF              call 00458B8C
:0045A129 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A12F E807F7FFFF              call 0045983B
:0045A134 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A13A E82BF1FFFF              call 0045926A
:0045A13F 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A145 E8C3EAFFFF              call 00458C0D
:0045A14A E9D7000000              jmp 0045A226

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A107(C)
|
:0045A14F 8B4510                  mov eax, dword ptr [ebp+10]
:0045A152 25FFFF0000              and eax, 0000FFFF
:0045A157 83F801                  cmp eax, 00000001
:0045A15A 7518                    jne 0045A174
:0045A15C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A15F 51                      push ecx
:0045A160 E8E0040000              call 0045A645
:0045A165 83C404                  add esp, 00000004
:0045A168 6A00                    push 00000000
:0045A16A 8B5508                  mov edx, dword ptr [ebp+08]
:0045A16D 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045A16E FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A15A(C)
|
:0045A174 8B4510                  mov eax, dword ptr [ebp+10]
:0045A177 25FFFF0000              and eax, 0000FFFF
:0045A17C 83F802                  cmp eax, 00000002
:0045A17F 7533                    jne 0045A1B4
:0045A181 68FF000000              push 000000FF
:0045A186 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A18C E893E7FFFF              call 00458924
:0045A191 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A197 E8AAF1FFFF              call 00459346
:0045A19C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A19F 51                      push ecx
:0045A1A0 E8A0040000              call 0045A645
:0045A1A5 83C404                  add esp, 00000004
:0045A1A8 6A00                    push 00000000
:0045A1AA 8B5508                  mov edx, dword ptr [ebp+08]
:0045A1AD 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045A1AE FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A17F(C)
|
:0045A1B4 8B4510                  mov eax, dword ptr [ebp+10]
:0045A1B7 25FFFF0000              and eax, 0000FFFF
:0045A1BC 83F809                  cmp eax, 00000009
:0045A1BF 750D                    jne 0045A1CE
:0045A1C1 6898080000              push 00000898
:0045A1C6 E800F90000              call 00469ACB
:0045A1CB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A1BF(C)
|
:0045A1CE 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045A1D1 81E1FFFF0000            and ecx, 0000FFFF
:0045A1D7 81F93F050000            cmp ecx, 0000053F
:0045A1DD 750D                    jne 0045A1EC
:0045A1DF 6A00                    push 00000000
:0045A1E1 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A1E7 E850F3FFFF              call 0045953C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A1DD(C)
|
:0045A1EC 8B5510                  mov edx, dword ptr [ebp+10]
:0045A1EF 81E2FFFF0000            and edx, 0000FFFF
:0045A1F5 81FA40050000            cmp edx, 00000540
:0045A1FB 750D                    jne 0045A20A
:0045A1FD 6A01                    push 00000001
:0045A1FF 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A205 E832F3FFFF              call 0045953C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A1FB(C)
|
:0045A20A 8B4510                  mov eax, dword ptr [ebp+10]
:0045A20D 25FFFF0000              and eax, 0000FFFF

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:053E, ""
                                  |
:0045A212 3D3E050000              cmp eax, 0000053E
:0045A217 750D                    jne 0045A226

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0045A219 6A02                    push 00000002
:0045A21B 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A221 E816F3FFFF              call 0045953C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A109(U), :0045A14A(U), :0045A217(C)
|
:0045A226 33C0                    xor eax, eax
:0045A228 8BE5                    mov esp, ebp
:0045A22A 5D                      pop ebp
:0045A22B C21000                  ret 0010



* Referenced by a CALL at Address:
|:00459F8F   
|
:0045A22E 55                      push ebp
:0045A22F 8BEC                    mov ebp, esp
:0045A231 6AFF                    push FFFFFFFF
:0045A233 68DC994700              push 004799DC
:0045A238 64A100000000            mov eax, dword ptr fs:[00000000]
:0045A23E 50                      push eax
:0045A23F 64892500000000          mov dword ptr fs:[00000000], esp
:0045A246 81EC1C010000            sub esp, 0000011C
:0045A24C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045A252 E8E9B3FAFF              call 00405640
:0045A257 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"bslct.e3"
                                  |
:0045A25E 6808174800              push 00481708
:0045A263 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045A269 E8676FFBFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045A26E 6A04                    push 00000004
:0045A270 6A00                    push 00000000
:0045A272 6A00                    push 00000000
:0045A274 B9F0174B00              mov ecx, 004B17F0
:0045A279 E812ED0100              call 00478F90
:0045A27E 50                      push eax
:0045A27F 6A00                    push 00000000
:0045A281 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045A287 E89D70FBFF              call 00411329
:0045A28C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045A292 E88E39FBFF              call 0040DC25
:0045A297 6A00                    push 00000000
:0045A299 A128544B00              mov eax, dword ptr [004B5428]
:0045A29E 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045A29F FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045A2A5 6A07                    push 00000007
:0045A2A7 E863B30100              call 0047560F
:0045A2AC 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045A2AF 6A07                    push 00000007
:0045A2B1 E840BA0100              call 00475CF6
:0045A2B6 83C404                  add esp, 00000004
:0045A2B9 8B0D64B04700            mov ecx, dword ptr [0047B064]
:0045A2BF 51                      push ecx
:0045A2C0 8B1560B04700            mov edx, dword ptr [0047B060]
:0045A2C6 52                      push edx
:0045A2C7 6A00                    push 00000000
:0045A2C9 6A00                    push 00000000
:0045A2CB E8DDBA0100              call 00475DAD
:0045A2D0 83C410                  add esp, 00000010
:0045A2D3 E894BB0100              call 00475E6C
:0045A2D8 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045A2DA 6A0A                    push 0000000A
:0045A2DC 6A00                    push 00000000
:0045A2DE E83ABA0100              call 00475D1D
:0045A2E3 83C40C                  add esp, 0000000C
:0045A2E6 B9F0174B00              mov ecx, 004B17F0
:0045A2EB E8D05BFBFF              call 0040FEC0
:0045A2F0 50                      push eax
:0045A2F1 A164B04700              mov eax, dword ptr [0047B064]
:0045A2F6 50                      push eax
:0045A2F7 8B0D60B04700            mov ecx, dword ptr [0047B060]
:0045A2FD 51                      push ecx
:0045A2FE 6A00                    push 00000000
:0045A300 6A00                    push 00000000
:0045A302 E8EDC70100              call 00476AF4
:0045A307 83C414                  add esp, 00000014
:0045A30A 6A00                    push 00000000
:0045A30C E8FEB20100              call 0047560F
:0045A311 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043F, ""
                                  |
:0045A314 683F040000              push 0000043F
:0045A319 8B5508                  mov edx, dword ptr [ebp+08]
:0045A31C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045A31D FF1510D64B00            Call dword ptr [004BD610]
:0045A323 50                      push eax
:0045A324 A128544B00              mov eax, dword ptr [004B5428]
:0045A329 50                      push eax

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0045A32A FF15E8D54B00            Call dword ptr [004BD5E8]
:0045A330 85C0                    test eax, eax
:0045A332 7516                    jne 0045A34A
:0045A334 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"Err"
                                  |
:0045A336 6814174800              push 00481714

* Possible StringData Ref from Data Obj ->"Err"
                                  |
:0045A33B 6818174800              push 00481718
:0045A340 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A343 51                      push ecx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:0045A344 FF15E0D64B00            Call dword ptr [004BD6E0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A332(C)
|
:0045A34A 8D95D8FEFFFF            lea edx, dword ptr [ebp+FFFFFED8]
:0045A350 52                      push edx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043F, ""
                                  |
:0045A351 683F040000              push 0000043F
:0045A356 8B4508                  mov eax, dword ptr [ebp+08]
:0045A359 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045A35A FF1510D64B00            Call dword ptr [004BD610]
:0045A360 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045A361 FF15D8D64B00            Call dword ptr [004BD6D8]
:0045A367 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0045A36D 83C001                  add eax, 00000001
:0045A370 99                      cdq
:0045A371 2BC2                    sub eax, edx
:0045A373 D1F8                    sar eax, 1
:0045A375 2DC0000000              sub eax, 000000C0
:0045A37A 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax
:0045A380 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0045A386 83C001                  add eax, 00000001
:0045A389 99                      cdq
:0045A38A 2BC2                    sub eax, edx
:0045A38C D1F8                    sar eax, 1
:0045A38E 2D90000000              sub eax, 00000090
:0045A393 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0045A399 6A00                    push 00000000
:0045A39B 8B0D64B04700            mov ecx, dword ptr [0047B064]
:0045A3A1 51                      push ecx
:0045A3A2 8B1560B04700            mov edx, dword ptr [0047B060]
:0045A3A8 52                      push edx
:0045A3A9 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0045A3AF 50                      push eax
:0045A3B0 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0045A3B6 51                      push ecx
:0045A3B7 8B1528544B00            mov edx, dword ptr [004B5428]
:0045A3BD 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045A3BE FF15ECD54B00            Call dword ptr [004BD5EC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045A3C4 6A05                    push 00000005
:0045A3C6 A128544B00              mov eax, dword ptr [004B5428]
:0045A3CB 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045A3CC FF1500D74B00            Call dword ptr [004BD700]
:0045A3D2 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0045A3D9 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045A3DF E87CB2FAFF              call 00405660
:0045A3E4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A3E7 64890D00000000          mov dword ptr fs:[00000000], ecx
:0045A3EE 8BE5                    mov esp, ebp
:0045A3F0 5D                      pop ebp
:0045A3F1 C3                      ret



* Referenced by a CALL at Addresses:
|:0045A080   , :0045A0B6   
|
:0045A3F2 55                      push ebp
:0045A3F3 8BEC                    mov ebp, esp
:0045A3F5 6A00                    push 00000000
:0045A3F7 A128544B00              mov eax, dword ptr [004B5428]
:0045A3FC 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045A3FD FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045A403 6A07                    push 00000007
:0045A405 E805B20100              call 0047560F
:0045A40A 83C404                  add esp, 00000004
:0045A40D E85ABA0100              call 00475E6C
:0045A412 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045A414 6A0A                    push 0000000A
:0045A416 6A00                    push 00000000
:0045A418 E800B90100              call 00475D1D
:0045A41D 83C40C                  add esp, 0000000C
:0045A420 6A00                    push 00000000
:0045A422 E8E8B10100              call 0047560F
:0045A427 83C404                  add esp, 00000004
:0045A42A 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0045A430 51                      push ecx
:0045A431 8B1528544B00            mov edx, dword ptr [004B5428]
:0045A437 52                      push edx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0045A438 FF15E8D54B00            Call dword ptr [004BD5E8]
:0045A43E B958494B00              mov ecx, 004B4958
:0045A443 E82245FFFF              call 0044E96A
:0045A448 83C007                  add eax, 00000007
:0045A44B 99                      cdq
:0045A44C B930000000              mov ecx, 00000030
:0045A451 F7F9                    idiv ecx
:0045A453 6BC030                  imul eax, 00000030
:0045A456 83C028                  add eax, 00000028
:0045A459 50                      push eax
:0045A45A B958494B00              mov ecx, 004B4958
:0045A45F E8DF44FFFF              call 0044E943
:0045A464 83C02F                  add eax, 0000002F
:0045A467 99                      cdq
:0045A468 B930000000              mov ecx, 00000030
:0045A46D F7F9                    idiv ecx
:0045A46F 6BC030                  imul eax, 00000030
:0045A472 50                      push eax
:0045A473 6A28                    push 00000028
:0045A475 6A00                    push 00000000
:0045A477 E831B90100              call 00475DAD
:0045A47C 83C410                  add esp, 00000010
:0045A47F 5D                      pop ebp
:0045A480 C3                      ret



* Referenced by a CALL at Address:
|:0045A112   
|
:0045A481 55                      push ebp
:0045A482 8BEC                    mov ebp, esp
:0045A484 6AFF                    push FFFFFFFF
:0045A486 68F2994700              push 004799F2
:0045A48B 64A100000000            mov eax, dword ptr fs:[00000000]
:0045A491 50                      push eax
:0045A492 64892500000000          mov dword ptr fs:[00000000], esp
:0045A499 81EC1C010000            sub esp, 0000011C
:0045A49F 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045A4A5 E896B1FAFF              call 00405640
:0045A4AA C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"bslct.e3"
                                  |
:0045A4B1 681C174800              push 0048171C
:0045A4B6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045A4BC E8146DFBFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045A4C1 6A04                    push 00000004
:0045A4C3 6A00                    push 00000000
:0045A4C5 6A00                    push 00000000
:0045A4C7 B9F0174B00              mov ecx, 004B17F0
:0045A4CC E8BFEA0100              call 00478F90
:0045A4D1 50                      push eax
:0045A4D2 6A00                    push 00000000
:0045A4D4 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045A4DA E84A6EFBFF              call 00411329
:0045A4DF 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045A4E5 E83B37FBFF              call 0040DC25
:0045A4EA 6A00                    push 00000000
:0045A4EC A13C544B00              mov eax, dword ptr [004B543C]
:0045A4F1 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045A4F2 FF1500D74B00            Call dword ptr [004BD700]
:0045A4F8 6A0C                    push 0000000C
:0045A4FA E810B10100              call 0047560F
:0045A4FF 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045A502 6A07                    push 00000007
:0045A504 E8EDB70100              call 00475CF6
:0045A509 83C404                  add esp, 00000004
:0045A50C 8B0DB4B04700            mov ecx, dword ptr [0047B0B4]
:0045A512 51                      push ecx
:0045A513 8B15B0B04700            mov edx, dword ptr [0047B0B0]
:0045A519 52                      push edx
:0045A51A 6A00                    push 00000000
:0045A51C 6A00                    push 00000000
:0045A51E E88AB80100              call 00475DAD
:0045A523 83C410                  add esp, 00000010
:0045A526 E841B90100              call 00475E6C
:0045A52B 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045A52D 6A0A                    push 0000000A
:0045A52F 6A00                    push 00000000
:0045A531 E8E7B70100              call 00475D1D
:0045A536 83C40C                  add esp, 0000000C
:0045A539 B9F0174B00              mov ecx, 004B17F0
:0045A53E E87D59FBFF              call 0040FEC0
:0045A543 50                      push eax
:0045A544 A1B4B04700              mov eax, dword ptr [0047B0B4]
:0045A549 50                      push eax
:0045A54A 8B0DB0B04700            mov ecx, dword ptr [0047B0B0]
:0045A550 51                      push ecx
:0045A551 6A00                    push 00000000
:0045A553 6A00                    push 00000000
:0045A555 E89AC50100              call 00476AF4
:0045A55A 83C414                  add esp, 00000014
:0045A55D 6A00                    push 00000000
:0045A55F E8ABB00100              call 0047560F
:0045A564 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043F, ""
                                  |
:0045A567 683F040000              push 0000043F
:0045A56C 8B5508                  mov edx, dword ptr [ebp+08]
:0045A56F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045A570 FF1510D64B00            Call dword ptr [004BD610]
:0045A576 50                      push eax
:0045A577 A13C544B00              mov eax, dword ptr [004B543C]
:0045A57C 50                      push eax

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0045A57D FF15E8D54B00            Call dword ptr [004BD5E8]
:0045A583 85C0                    test eax, eax
:0045A585 7516                    jne 0045A59D
:0045A587 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"Err"
                                  |
:0045A589 6828174800              push 00481728

* Possible StringData Ref from Data Obj ->"Err"
                                  |
:0045A58E 682C174800              push 0048172C
:0045A593 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A596 51                      push ecx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:0045A597 FF15E0D64B00            Call dword ptr [004BD6E0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A585(C)
|
:0045A59D 8D95D8FEFFFF            lea edx, dword ptr [ebp+FFFFFED8]
:0045A5A3 52                      push edx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:043F, ""
                                  |
:0045A5A4 683F040000              push 0000043F
:0045A5A9 8B4508                  mov eax, dword ptr [ebp+08]
:0045A5AC 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045A5AD FF1510D64B00            Call dword ptr [004BD610]
:0045A5B3 50                      push eax

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045A5B4 FF15D8D64B00            Call dword ptr [004BD6D8]
:0045A5BA 8B85E0FEFFFF            mov eax, dword ptr [ebp+FFFFFEE0]
:0045A5C0 83C001                  add eax, 00000001
:0045A5C3 99                      cdq
:0045A5C4 2BC2                    sub eax, edx
:0045A5C6 D1F8                    sar eax, 1
:0045A5C8 2DC0000000              sub eax, 000000C0
:0045A5CD 8985ECFEFFFF            mov dword ptr [ebp+FFFFFEEC], eax
:0045A5D3 8B85E4FEFFFF            mov eax, dword ptr [ebp+FFFFFEE4]
:0045A5D9 83C001                  add eax, 00000001
:0045A5DC 99                      cdq
:0045A5DD 2BC2                    sub eax, edx
:0045A5DF D1F8                    sar eax, 1
:0045A5E1 2D90000000              sub eax, 00000090
:0045A5E6 8985E8FEFFFF            mov dword ptr [ebp+FFFFFEE8], eax
:0045A5EC 6A00                    push 00000000
:0045A5EE 8B0DB4B04700            mov ecx, dword ptr [0047B0B4]
:0045A5F4 51                      push ecx
:0045A5F5 8B15B0B04700            mov edx, dword ptr [0047B0B0]
:0045A5FB 52                      push edx
:0045A5FC 8B85E8FEFFFF            mov eax, dword ptr [ebp+FFFFFEE8]
:0045A602 50                      push eax
:0045A603 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0045A609 51                      push ecx
:0045A60A 8B153C544B00            mov edx, dword ptr [004B543C]
:0045A610 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045A611 FF15ECD54B00            Call dword ptr [004BD5EC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045A617 6A05                    push 00000005
:0045A619 A13C544B00              mov eax, dword ptr [004B543C]
:0045A61E 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045A61F FF1500D74B00            Call dword ptr [004BD700]
:0045A625 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0045A62C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045A632 E829B0FAFF              call 00405660
:0045A637 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045A63A 64890D00000000          mov dword ptr fs:[00000000], ecx
:0045A641 8BE5                    mov esp, ebp
:0045A643 5D                      pop ebp
:0045A644 C3                      ret



* Referenced by a CALL at Addresses:
|:0045A160   , :0045A1A0   
|
:0045A645 55                      push ebp
:0045A646 8BEC                    mov ebp, esp
:0045A648 6A00                    push 00000000
:0045A64A A13C544B00              mov eax, dword ptr [004B543C]
:0045A64F 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045A650 FF1500D74B00            Call dword ptr [004BD700]
:0045A656 6A0C                    push 0000000C
:0045A658 E8B2AF0100              call 0047560F
:0045A65D 83C404                  add esp, 00000004
:0045A660 E807B80100              call 00475E6C
:0045A665 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045A667 6A0A                    push 0000000A
:0045A669 6A00                    push 00000000
:0045A66B E8ADB60100              call 00475D1D
:0045A670 83C40C                  add esp, 0000000C
:0045A673 6A00                    push 00000000
:0045A675 E895AF0100              call 0047560F
:0045A67A 83C404                  add esp, 00000004
:0045A67D 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0045A683 51                      push ecx
:0045A684 8B153C544B00            mov edx, dword ptr [004B543C]
:0045A68A 52                      push edx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0045A68B FF15E8D54B00            Call dword ptr [004BD5E8]
:0045A691 B958494B00              mov ecx, 004B4958
:0045A696 E8CF42FFFF              call 0044E96A
:0045A69B 83C007                  add eax, 00000007
:0045A69E 99                      cdq
:0045A69F B930000000              mov ecx, 00000030
:0045A6A4 F7F9                    idiv ecx
:0045A6A6 6BC030                  imul eax, 00000030
:0045A6A9 83C028                  add eax, 00000028
:0045A6AC 50                      push eax
:0045A6AD B958494B00              mov ecx, 004B4958
:0045A6B2 E88C42FFFF              call 0044E943
:0045A6B7 83C02F                  add eax, 0000002F
:0045A6BA 99                      cdq
:0045A6BB B930000000              mov ecx, 00000030
:0045A6C0 F7F9                    idiv ecx
:0045A6C2 6BC030                  imul eax, 00000030
:0045A6C5 50                      push eax
:0045A6C6 6A28                    push 00000028
:0045A6C8 6A00                    push 00000000
:0045A6CA E8DEB60100              call 00475DAD
:0045A6CF 83C410                  add esp, 00000010
:0045A6D2 5D                      pop ebp
:0045A6D3 C3                      ret


:0045A6D4 55                      push ebp
:0045A6D5 8BEC                    mov ebp, esp
:0045A6D7 51                      push ecx
:0045A6D8 8B450C                  mov eax, dword ptr [ebp+0C]
:0045A6DB 8945FC                  mov dword ptr [ebp-04], eax
:0045A6DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045A6E1 81E911010000            sub ecx, 00000111
:0045A6E7 894DFC                  mov dword ptr [ebp-04], ecx
:0045A6EA 817DFCF4000000          cmp dword ptr [ebp-04], 000000F4
:0045A6F1 0F87AB000000            ja 0045A7A2
:0045A6F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A6FA 33D2                    xor edx, edx
:0045A6FC 8A90D4A74500            mov dl, byte ptr [eax+0045A7D4]
:0045A702 FF2495C0A74500          jmp dword ptr [4*edx+0045A7C0]
:0045A709 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045A70C 51                      push ecx
:0045A70D 8B5510                  mov edx, dword ptr [ebp+10]
:0045A710 52                      push edx
:0045A711 8B450C                  mov eax, dword ptr [ebp+0C]
:0045A714 50                      push eax
:0045A715 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A718 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0045A719 FF155CD64B00            Call dword ptr [004BD65C]
:0045A71F E996000000              jmp 0045A7BA
:0045A724 833D904C4B0000          cmp dword ptr [004B4C90], 00000000
:0045A72B 7427                    je 0045A754
:0045A72D 8B5514                  mov edx, dword ptr [ebp+14]
:0045A730 C1EA10                  shr edx, 10
:0045A733 81E2FFFF0000            and edx, 0000FFFF
:0045A739 81E2FFFF0000            and edx, 0000FFFF
:0045A73F 52                      push edx
:0045A740 8B4514                  mov eax, dword ptr [ebp+14]
:0045A743 25FFFF0000              and eax, 0000FFFF
:0045A748 50                      push eax
:0045A749 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A74F E8C2E8FFFF              call 00459016

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A72B(C)
|
:0045A754 EB4C                    jmp 0045A7A2
:0045A756 833D904C4B0000          cmp dword ptr [004B4C90], 00000000
:0045A75D 742D                    je 0045A78C
:0045A75F 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A765 E8A3E1FFFF              call 0045890D
:0045A76A 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A770 E8DB040000              call 0045AC50
:0045A775 25FF000000              and eax, 000000FF
:0045A77A 3DFF000000              cmp eax, 000000FF
:0045A77F 740B                    je 0045A78C
:0045A781 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A787 E878EBFFFF              call 00459304

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A75D(C), :0045A77F(C)
|
:0045A78C EB14                    jmp 0045A7A2
:0045A78E 833D904C4B0000          cmp dword ptr [004B4C90], 00000000
:0045A795 740B                    je 0045A7A2
:0045A797 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A79D E883EBFFFF              call 00459325

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A6F1(C), :0045A754(U), :0045A78C(U), :0045A795(C)
|
:0045A7A2 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045A7A5 51                      push ecx
:0045A7A6 8B5510                  mov edx, dword ptr [ebp+10]
:0045A7A9 52                      push edx
:0045A7AA 8B450C                  mov eax, dword ptr [ebp+0C]
:0045A7AD 50                      push eax
:0045A7AE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A7B1 51                      push ecx
:0045A7B2 E83AD10100              call 004778F1
:0045A7B7 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A71F(U)
|
:0045A7BA 8BE5                    mov esp, ebp
:0045A7BC 5D                      pop ebp
:0045A7BD C21000                  ret 0010



:0045A7C0 09A74500                DWORD 0045A709
:0045A7C4 24A74500                DWORD 0045A724
:0045A7C8 56A74500                DWORD 0045A756
:0045A7CC 8EA74500                DWORD 0045A78E
:0045A7D0 A2A74500                DWORD 0045A7A2


:0045A7D4 000404                  add byte ptr [esp+eax], al
:0045A7D7 0404                    add al, 04
:0045A7D9 0404                    add al, 04
:0045A7DB 0404                    add al, 04
:0045A7DD 0404                    add al, 04
:0045A7DF 0404                    add al, 04
:0045A7E1 0404                    add al, 04
:0045A7E3 0404                    add al, 04
:0045A7E5 0404                    add al, 04
:0045A7E7 0404                    add al, 04
:0045A7E9 0404                    add al, 04
:0045A7EB 0404                    add al, 04
:0045A7ED 0404                    add al, 04
:0045A7EF 0404                    add al, 04
:0045A7F1 0404                    add al, 04
:0045A7F3 0404                    add al, 04
:0045A7F5 0404                    add al, 04
:0045A7F7 0404                    add al, 04
:0045A7F9 0404                    add al, 04
:0045A7FB 0404                    add al, 04
:0045A7FD 0404                    add al, 04
:0045A7FF 0404                    add al, 04
:0045A801 0404                    add al, 04
:0045A803 0404                    add al, 04
:0045A805 0404                    add al, 04
:0045A807 0404                    add al, 04
:0045A809 0404                    add al, 04
:0045A80B 0404                    add al, 04
:0045A80D 0404                    add al, 04
:0045A80F 0404                    add al, 04
:0045A811 0404                    add al, 04
:0045A813 0404                    add al, 04
:0045A815 0404                    add al, 04
:0045A817 0404                    add al, 04
:0045A819 0404                    add al, 04
:0045A81B 0404                    add al, 04
:0045A81D 0404                    add al, 04
:0045A81F 0404                    add al, 04
:0045A821 0404                    add al, 04
:0045A823 0404                    add al, 04
:0045A825 0404                    add al, 04
:0045A827 0404                    add al, 04
:0045A829 0404                    add al, 04
:0045A82B 0404                    add al, 04
:0045A82D 0404                    add al, 04
:0045A82F 0404                    add al, 04
:0045A831 0404                    add al, 04
:0045A833 0404                    add al, 04
:0045A835 0404                    add al, 04
:0045A837 0404                    add al, 04
:0045A839 0404                    add al, 04
:0045A83B 0404                    add al, 04
:0045A83D 0404                    add al, 04
:0045A83F 0404                    add al, 04
:0045A841 0404                    add al, 04
:0045A843 0404                    add al, 04
:0045A845 0404                    add al, 04
:0045A847 0404                    add al, 04
:0045A849 0404                    add al, 04
:0045A84B 0404                    add al, 04
:0045A84D 0404                    add al, 04
:0045A84F 0404                    add al, 04
:0045A851 0404                    add al, 04
:0045A853 0404                    add al, 04
:0045A855 0404                    add al, 04
:0045A857 0404                    add al, 04
:0045A859 0404                    add al, 04
:0045A85B 0404                    add al, 04
:0045A85D 0404                    add al, 04
:0045A85F 0404                    add al, 04
:0045A861 0404                    add al, 04
:0045A863 0404                    add al, 04
:0045A865 0404                    add al, 04
:0045A867 0404                    add al, 04
:0045A869 0404                    add al, 04
:0045A86B 0404                    add al, 04
:0045A86D 0404                    add al, 04
:0045A86F 0404                    add al, 04
:0045A871 0404                    add al, 04
:0045A873 0404                    add al, 04
:0045A875 0404                    add al, 04
:0045A877 0404                    add al, 04
:0045A879 0404                    add al, 04
:0045A87B 0404                    add al, 04
:0045A87D 0404                    add al, 04
:0045A87F 0404                    add al, 04
:0045A881 0404                    add al, 04
:0045A883 0404                    add al, 04
:0045A885 0404                    add al, 04
:0045A887 0404                    add al, 04
:0045A889 0404                    add al, 04
:0045A88B 0404                    add al, 04
:0045A88D 0404                    add al, 04
:0045A88F 0404                    add al, 04
:0045A891 0404                    add al, 04
:0045A893 0404                    add al, 04
:0045A895 0404                    add al, 04
:0045A897 0404                    add al, 04
:0045A899 0404                    add al, 04
:0045A89B 0404                    add al, 04
:0045A89D 0404                    add al, 04
:0045A89F 0404                    add al, 04
:0045A8A1 0404                    add al, 04
:0045A8A3 0404                    add al, 04
:0045A8A5 0404                    add al, 04
:0045A8A7 0404                    add al, 04
:0045A8A9 0404                    add al, 04
:0045A8AB 0404                    add al, 04
:0045A8AD 0404                    add al, 04
:0045A8AF 0404                    add al, 04
:0045A8B1 0404                    add al, 04
:0045A8B3 0404                    add al, 04
:0045A8B5 0404                    add al, 04
:0045A8B7 0404                    add al, 04
:0045A8B9 0404                    add al, 04
:0045A8BB 0404                    add al, 04
:0045A8BD 0404                    add al, 04
:0045A8BF 0404                    add al, 04
:0045A8C1 0404                    add al, 04
:0045A8C3 010402                  add dword ptr [edx+eax], eax
:0045A8C6 0404                    add al, 04
:0045A8C8 03558B                  add edx, dword ptr [ebp-75]
:0045A8CB EC                      in al, dx
:0045A8CC 51                      push ecx
:0045A8CD 8B450C                  mov eax, dword ptr [ebp+0C]
:0045A8D0 8945FC                  mov dword ptr [ebp-04], eax
:0045A8D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045A8D6 81E911010000            sub ecx, 00000111
:0045A8DC 894DFC                  mov dword ptr [ebp-04], ecx
:0045A8DF 817DFCF4000000          cmp dword ptr [ebp-04], 000000F4
:0045A8E6 0F87BC000000            ja 0045A9A8
:0045A8EC 8B45FC                  mov eax, dword ptr [ebp-04]
:0045A8EF 33D2                    xor edx, edx
:0045A8F1 8A90DAA94500            mov dl, byte ptr [eax+0045A9DA]
:0045A8F7 FF2495C6A94500          jmp dword ptr [4*edx+0045A9C6]
:0045A8FE 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045A901 51                      push ecx
:0045A902 8B5510                  mov edx, dword ptr [ebp+10]
:0045A905 52                      push edx
:0045A906 8B450C                  mov eax, dword ptr [ebp+0C]
:0045A909 50                      push eax
:0045A90A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A90D 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0045A90E FF155CD64B00            Call dword ptr [004BD65C]
:0045A914 E9A7000000              jmp 0045A9C0
:0045A919 833D904C4B0000          cmp dword ptr [004B4C90], 00000000
:0045A920 7427                    je 0045A949
:0045A922 8B5514                  mov edx, dword ptr [ebp+14]
:0045A925 C1EA10                  shr edx, 10
:0045A928 81E2FFFF0000            and edx, 0000FFFF
:0045A92E 81E2FFFF0000            and edx, 0000FFFF
:0045A934 52                      push edx
:0045A935 8B4514                  mov eax, dword ptr [ebp+14]
:0045A938 25FFFF0000              and eax, 0000FFFF
:0045A93D 50                      push eax
:0045A93E 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A944 E8CDE6FFFF              call 00459016

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A920(C)
|
:0045A949 EB5D                    jmp 0045A9A8
:0045A94B 833D904C4B0000          cmp dword ptr [004B4C90], 00000000
:0045A952 743E                    je 0045A992
:0045A954 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A95A E8AEDFFFFF              call 0045890D
:0045A95F 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A965 E8E6020000              call 0045AC50
:0045A96A 25FF000000              and eax, 000000FF
:0045A96F 3DFF000000              cmp eax, 000000FF
:0045A974 741C                    je 0045A992
:0045A976 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A97C E8CF020000              call 0045AC50
:0045A981 25FF000000              and eax, 000000FF
:0045A986 50                      push eax
:0045A987 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A98D E8F6E9FFFF              call 00459388

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A952(C), :0045A974(C)
|
:0045A992 EB14                    jmp 0045A9A8
:0045A994 833D904C4B0000          cmp dword ptr [004B4C90], 00000000
:0045A99B 740B                    je 0045A9A8
:0045A99D 8B0D904C4B00            mov ecx, dword ptr [004B4C90]
:0045A9A3 E87DE9FFFF              call 00459325

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045A8E6(C), :0045A949(U), :0045A992(U), :0045A99B(C)
|
:0045A9A8 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045A9AB 51                      push ecx
:0045A9AC 8B5510                  mov edx, dword ptr [ebp+10]
:0045A9AF 52                      push edx
:0045A9B0 8B450C                  mov eax, dword ptr [ebp+0C]
:0045A9B3 50                      push eax
:0045A9B4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045A9B7 51                      push ecx
:0045A9B8 E834CF0100              call 004778F1
:0045A9BD 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045A914(U)
|
:0045A9C0 8BE5                    mov esp, ebp
:0045A9C2 5D                      pop ebp
:0045A9C3 C21000                  ret 0010



:0045A9C6 FEA84500                DWORD 0045A8FE
:0045A9CA 19A94500                DWORD 0045A919
:0045A9CE 4BA94500                DWORD 0045A94B
:0045A9D2 94A94500                DWORD 0045A994
:0045A9D6 A8A94500                DWORD 0045A9A8


:0045A9DA 000404                  add byte ptr [esp+eax], al
:0045A9DD 0404                    add al, 04
:0045A9DF 0404                    add al, 04
:0045A9E1 0404                    add al, 04
:0045A9E3 0404                    add al, 04
:0045A9E5 0404                    add al, 04
:0045A9E7 0404                    add al, 04
:0045A9E9 0404                    add al, 04
:0045A9EB 0404                    add al, 04
:0045A9ED 0404                    add al, 04
:0045A9EF 0404                    add al, 04
:0045A9F1 0404                    add al, 04
:0045A9F3 0404                    add al, 04
:0045A9F5 0404                    add al, 04
:0045A9F7 0404                    add al, 04
:0045A9F9 0404                    add al, 04
:0045A9FB 0404                    add al, 04
:0045A9FD 0404                    add al, 04
:0045A9FF 0404                    add al, 04
:0045AA01 0404                    add al, 04
:0045AA03 0404                    add al, 04
:0045AA05 0404                    add al, 04
:0045AA07 0404                    add al, 04
:0045AA09 0404                    add al, 04
:0045AA0B 0404                    add al, 04
:0045AA0D 0404                    add al, 04
:0045AA0F 0404                    add al, 04
:0045AA11 0404                    add al, 04
:0045AA13 0404                    add al, 04
:0045AA15 0404                    add al, 04
:0045AA17 0404                    add al, 04
:0045AA19 0404                    add al, 04
:0045AA1B 0404                    add al, 04
:0045AA1D 0404                    add al, 04
:0045AA1F 0404                    add al, 04
:0045AA21 0404                    add al, 04
:0045AA23 0404                    add al, 04
:0045AA25 0404                    add al, 04
:0045AA27 0404                    add al, 04
:0045AA29 0404                    add al, 04
:0045AA2B 0404                    add al, 04
:0045AA2D 0404                    add al, 04
:0045AA2F 0404                    add al, 04
:0045AA31 0404                    add al, 04
:0045AA33 0404                    add al, 04
:0045AA35 0404                    add al, 04
:0045AA37 0404                    add al, 04
:0045AA39 0404                    add al, 04
:0045AA3B 0404                    add al, 04
:0045AA3D 0404                    add al, 04
:0045AA3F 0404                    add al, 04
:0045AA41 0404                    add al, 04
:0045AA43 0404                    add al, 04
:0045AA45 0404                    add al, 04
:0045AA47 0404                    add al, 04
:0045AA49 0404                    add al, 04
:0045AA4B 0404                    add al, 04
:0045AA4D 0404                    add al, 04
:0045AA4F 0404                    add al, 04
:0045AA51 0404                    add al, 04
:0045AA53 0404                    add al, 04
:0045AA55 0404                    add al, 04
:0045AA57 0404                    add al, 04
:0045AA59 0404                    add al, 04
:0045AA5B 0404                    add al, 04
:0045AA5D 0404                    add al, 04
:0045AA5F 0404                    add al, 04
:0045AA61 0404                    add al, 04
:0045AA63 0404                    add al, 04
:0045AA65 0404                    add al, 04
:0045AA67 0404                    add al, 04
:0045AA69 0404                    add al, 04
:0045AA6B 0404                    add al, 04
:0045AA6D 0404                    add al, 04
:0045AA6F 0404                    add al, 04
:0045AA71 0404                    add al, 04
:0045AA73 0404                    add al, 04
:0045AA75 0404                    add al, 04
:0045AA77 0404                    add al, 04
:0045AA79 0404                    add al, 04
:0045AA7B 0404                    add al, 04
:0045AA7D 0404                    add al, 04
:0045AA7F 0404                    add al, 04
:0045AA81 0404                    add al, 04
:0045AA83 0404                    add al, 04
:0045AA85 0404                    add al, 04
:0045AA87 0404                    add al, 04
:0045AA89 0404                    add al, 04
:0045AA8B 0404                    add al, 04
:0045AA8D 0404                    add al, 04
:0045AA8F 0404                    add al, 04
:0045AA91 0404                    add al, 04
:0045AA93 0404                    add al, 04
:0045AA95 0404                    add al, 04
:0045AA97 0404                    add al, 04
:0045AA99 0404                    add al, 04
:0045AA9B 0404                    add al, 04
:0045AA9D 0404                    add al, 04
:0045AA9F 0404                    add al, 04
:0045AAA1 0404                    add al, 04
:0045AAA3 0404                    add al, 04
:0045AAA5 0404                    add al, 04
:0045AAA7 0404                    add al, 04
:0045AAA9 0404                    add al, 04
:0045AAAB 0404                    add al, 04
:0045AAAD 0404                    add al, 04
:0045AAAF 0404                    add al, 04
:0045AAB1 0404                    add al, 04
:0045AAB3 0404                    add al, 04
:0045AAB5 0404                    add al, 04
:0045AAB7 0404                    add al, 04
:0045AAB9 0404                    add al, 04
:0045AABB 0404                    add al, 04
:0045AABD 0404                    add al, 04
:0045AABF 0404                    add al, 04
:0045AAC1 0404                    add al, 04
:0045AAC3 0404                    add al, 04
:0045AAC5 0404                    add al, 04
:0045AAC7 0404                    add al, 04
:0045AAC9 010402                  add dword ptr [edx+eax], eax
:0045AACC 0404                    add al, 04
:0045AACE 03                      BYTE 03h


* Referenced by a CALL at Addresses:
|:0042DA2E   , :0044F240   
|
:0045AACF 55                      push ebp
:0045AAD0 8BEC                    mov ebp, esp
:0045AAD2 8B4508                  mov eax, dword ptr [ebp+08]
:0045AAD5 A3B44D4B00              mov dword ptr [004B4DB4], eax
:0045AADA 6A00                    push 00000000
:0045AADC 6855264100              push 00412655
:0045AAE1 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0045AAE7 51                      push ecx

* Possible Reference to Dialog: DialogID_00EB 
                                  |
:0045AAE8 68EB000000              push 000000EB
:0045AAED 8B15A8554B00            mov edx, dword ptr [004B55A8]
:0045AAF3 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0045AAF4 FF15DCD64B00            Call dword ptr [004BD6DC]
:0045AAFA C705B44D4B0000000000    mov dword ptr [004B4DB4], 00000000
:0045AB04 837D0800                cmp dword ptr [ebp+08], 00000000
:0045AB08 7411                    je 0045AB1B
:0045AB0A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045AB0D E86E86FAFF              call 00403180
:0045AB12 50                      push eax
:0045AB13 E804200100              call 0046CB1C
:0045AB18 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AB08(C)
|
:0045AB1B 5D                      pop ebp
:0045AB1C C3                      ret



* Referenced by a CALL at Address:
|:00402459   
|
:0045AB1D 55                      push ebp
:0045AB1E 8BEC                    mov ebp, esp
:0045AB20 51                      push ecx
:0045AB21 C705B44D4B0028CF4900    mov dword ptr [004B4DB4], 0049CF28
:0045AB2B 6A00                    push 00000000
:0045AB2D 6855264100              push 00412655
:0045AB32 A1B0554B00              mov eax, dword ptr [004B55B0]
:0045AB37 50                      push eax

* Possible Reference to Dialog: DialogID_00EB 
                                  |
:0045AB38 68EB000000              push 000000EB
:0045AB3D 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0045AB43 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0045AB44 FF15DCD64B00            Call dword ptr [004BD6DC]
:0045AB4A C705B44D4B0000000000    mov dword ptr [004B4DB4], 00000000
:0045AB54 C745FC00000000          mov [ebp-04], 00000000
:0045AB5B EB09                    jmp 0045AB66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AB8B(U)
|
:0045AB5D 8B55FC                  mov edx, dword ptr [ebp-04]
:0045AB60 83C201                  add edx, 00000001
:0045AB63 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AB5B(U)
|
:0045AB66 817DFCC8000000          cmp dword ptr [ebp-04], 000000C8
:0045AB6D 731E                    jnb 0045AB8D
:0045AB6F 8B45FC                  mov eax, dword ptr [ebp-04]
:0045AB72 50                      push eax
:0045AB73 E81833FBFF              call 0040DE90
:0045AB78 83C404                  add esp, 00000004
:0045AB7B 85C0                    test eax, eax
:0045AB7D 740C                    je 0045AB8B
:0045AB7F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AB82 51                      push ecx
:0045AB83 E8941F0100              call 0046CB1C
:0045AB88 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AB7D(C)
|
:0045AB8B EBD0                    jmp 0045AB5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AB6D(C)
|
:0045AB8D 8BE5                    mov esp, ebp
:0045AB8F 5D                      pop ebp
:0045AB90 C3                      ret


:0045AB91 CC                      int 03
:0045AB92 CC                      int 03
:0045AB93 CC                      int 03
:0045AB94 CC                      int 03
:0045AB95 CC                      int 03
:0045AB96 CC                      int 03
:0045AB97 CC                      int 03
:0045AB98 CC                      int 03
:0045AB99 CC                      int 03
:0045AB9A CC                      int 03
:0045AB9B CC                      int 03
:0045AB9C CC                      int 03
:0045AB9D CC                      int 03
:0045AB9E CC                      int 03
:0045AB9F CC                      int 03

* Referenced by a CALL at Addresses:
|:00459B55   , :00459CEF   
|
:0045ABA0 55                      push ebp
:0045ABA1 8BEC                    mov ebp, esp
:0045ABA3 51                      push ecx
:0045ABA4 894DFC                  mov dword ptr [ebp-04], ecx
:0045ABA7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045ABAA E83DDDFFFF              call 004588EC
:0045ABAF 8B4508                  mov eax, dword ptr [ebp+08]
:0045ABB2 83E001                  and eax, 00000001
:0045ABB5 85C0                    test eax, eax
:0045ABB7 740C                    je 0045ABC5
:0045ABB9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045ABBC 51                      push ecx
:0045ABBD E84E490100              call 0046F510
:0045ABC2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045ABB7(C)
|
:0045ABC5 8B45FC                  mov eax, dword ptr [ebp-04]
:0045ABC8 8BE5                    mov esp, ebp
:0045ABCA 5D                      pop ebp
:0045ABCB C20400                  ret 0004


:0045ABCE CC                      int 03
:0045ABCF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040553E   , :00412FAA   , :00414618   , :00414B96   , :0041645A   
|:00423255   , :00423CC2   , :00423DF2   , :00423E0F   , :00423E5B   
|:00423F31   , :0042C187   , :0042C246   , :0042C51E   , :00458465   
|:0045B1C0   , :0045B3C6   , :00463A08   , :00464C4D   
|
:0045ABD0 55                      push ebp
:0045ABD1 8BEC                    mov ebp, esp
:0045ABD3 51                      push ecx
:0045ABD4 894DFC                  mov dword ptr [ebp-04], ecx
:0045ABD7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045ABDA 8B4008                  mov eax, dword ptr [eax+08]
:0045ABDD 8BE5                    mov esp, ebp
:0045ABDF 5D                      pop ebp
:0045ABE0 C3                      ret


:0045ABE1 CC                      int 03
:0045ABE2 CC                      int 03
:0045ABE3 CC                      int 03
:0045ABE4 CC                      int 03
:0045ABE5 CC                      int 03
:0045ABE6 CC                      int 03
:0045ABE7 CC                      int 03
:0045ABE8 CC                      int 03
:0045ABE9 CC                      int 03
:0045ABEA CC                      int 03
:0045ABEB CC                      int 03
:0045ABEC CC                      int 03
:0045ABED CC                      int 03
:0045ABEE CC                      int 03
:0045ABEF CC                      int 03

* Referenced by a CALL at Addresses:
|:00407402   , :004088C0   , :0040A066   , :0040A99C   , :0040AE55   
|:0040B00C   , :0040B424   , :0040B650   , :00429272   , :0042927F   
|:004295A7   , :00429639   , :004296AD   , :004296BC   , :004296D7   
|:004296E6   , :00458470   
|
:0045ABF0 55                      push ebp
:0045ABF1 8BEC                    mov ebp, esp
:0045ABF3 51                      push ecx
:0045ABF4 894DFC                  mov dword ptr [ebp-04], ecx
:0045ABF7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045ABFA 8B400C                  mov eax, dword ptr [eax+0C]
:0045ABFD 8BE5                    mov esp, ebp
:0045ABFF 5D                      pop ebp
:0045AC00 C3                      ret


:0045AC01 CC                      int 03
:0045AC02 CC                      int 03
:0045AC03 CC                      int 03
:0045AC04 CC                      int 03
:0045AC05 CC                      int 03
:0045AC06 CC                      int 03
:0045AC07 CC                      int 03
:0045AC08 CC                      int 03
:0045AC09 CC                      int 03
:0045AC0A CC                      int 03
:0045AC0B CC                      int 03
:0045AC0C CC                      int 03
:0045AC0D CC                      int 03
:0045AC0E CC                      int 03
:0045AC0F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041A5FE   , :0041F9EC   , :00459940   , :0045997F   , :004599BE   
|
:0045AC10 55                      push ebp
:0045AC11 8BEC                    mov ebp, esp
:0045AC13 51                      push ecx
:0045AC14 894DFC                  mov dword ptr [ebp-04], ecx
:0045AC17 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AC1A E8E13DFDFF              call 0042EA00
:0045AC1F 8BE5                    mov esp, ebp
:0045AC21 5D                      pop ebp
:0045AC22 C3                      ret


:0045AC23 CC                      int 03
:0045AC24 CC                      int 03
:0045AC25 CC                      int 03
:0045AC26 CC                      int 03
:0045AC27 CC                      int 03
:0045AC28 CC                      int 03
:0045AC29 CC                      int 03
:0045AC2A CC                      int 03
:0045AC2B CC                      int 03
:0045AC2C CC                      int 03
:0045AC2D CC                      int 03
:0045AC2E CC                      int 03
:0045AC2F CC                      int 03

* Referenced by a CALL at Addresses:
|:0045991F   , :0045995E   , :0045999D   
|
:0045AC30 55                      push ebp
:0045AC31 8BEC                    mov ebp, esp
:0045AC33 51                      push ecx
:0045AC34 894DFC                  mov dword ptr [ebp-04], ecx
:0045AC37 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AC3A E8B1AAFAFF              call 004056F0
:0045AC3F 8B45FC                  mov eax, dword ptr [ebp-04]
:0045AC42 8BE5                    mov esp, ebp
:0045AC44 5D                      pop ebp
:0045AC45 C3                      ret


:0045AC46 CC                      int 03
:0045AC47 CC                      int 03
:0045AC48 CC                      int 03
:0045AC49 CC                      int 03
:0045AC4A CC                      int 03
:0045AC4B CC                      int 03
:0045AC4C CC                      int 03
:0045AC4D CC                      int 03
:0045AC4E CC                      int 03
:0045AC4F CC                      int 03

* Referenced by a CALL at Addresses:
|:00459B33   , :0045A770   , :0045A965   , :0045A97C   
|
:0045AC50 55                      push ebp
:0045AC51 8BEC                    mov ebp, esp
:0045AC53 51                      push ecx
:0045AC54 894DFC                  mov dword ptr [ebp-04], ecx
:0045AC57 8B45FC                  mov eax, dword ptr [ebp-04]
:0045AC5A 8A4009                  mov al, byte ptr [eax+09]
:0045AC5D 8BE5                    mov esp, ebp
:0045AC5F 5D                      pop ebp
:0045AC60 C3                      ret


:0045AC61 CC                      int 03
:0045AC62 CC                      int 03
:0045AC63 CC                      int 03
:0045AC64 CC                      int 03
:0045AC65 CC                      int 03
:0045AC66 CC                      int 03
:0045AC67 CC                      int 03
:0045AC68 CC                      int 03
:0045AC69 CC                      int 03
:0045AC6A CC                      int 03
:0045AC6B CC                      int 03
:0045AC6C CC                      int 03
:0045AC6D CC                      int 03
:0045AC6E CC                      int 03
:0045AC6F CC                      int 03

* Referenced by a CALL at Addresses:
|:00459396   , :004597E6   , :00459C9A   
|
:0045AC70 55                      push ebp
:0045AC71 8BEC                    mov ebp, esp
:0045AC73 51                      push ecx
:0045AC74 894DFC                  mov dword ptr [ebp-04], ecx
:0045AC77 8B4508                  mov eax, dword ptr [ebp+08]
:0045AC7A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AC7D 8B44813C                mov eax, dword ptr [ecx+4*eax+3C]
:0045AC81 8BE5                    mov esp, ebp
:0045AC83 5D                      pop ebp
:0045AC84 C20400                  ret 0004


:0045AC87 CC                      int 03
:0045AC88 CC                      int 03
:0045AC89 CC                      int 03
:0045AC8A CC                      int 03
:0045AC8B CC                      int 03
:0045AC8C CC                      int 03
:0045AC8D CC                      int 03
:0045AC8E CC                      int 03
:0045AC8F CC                      int 03

* Referenced by a CALL at Addresses:
|:004593A8   , :004593E9   
|
:0045AC90 55                      push ebp
:0045AC91 8BEC                    mov ebp, esp
:0045AC93 51                      push ecx
:0045AC94 894DFC                  mov dword ptr [ebp-04], ecx
:0045AC97 8B4508                  mov eax, dword ptr [ebp+08]
:0045AC9A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AC9D 8B550C                  mov edx, dword ptr [ebp+0C]
:0045ACA0 8954813C                mov dword ptr [ecx+4*eax+3C], edx
:0045ACA4 8BE5                    mov esp, ebp
:0045ACA6 5D                      pop ebp
:0045ACA7 C20800                  ret 0008


:0045ACAA CC                      int 03
:0045ACAB CC                      int 03
:0045ACAC CC                      int 03
:0045ACAD CC                      int 03
:0045ACAE CC                      int 03
:0045ACAF CC                      int 03

* Referenced by a CALL at Address:
|:00459CAD   
|
:0045ACB0 55                      push ebp
:0045ACB1 8BEC                    mov ebp, esp
:0045ACB3 51                      push ecx
:0045ACB4 894DFC                  mov dword ptr [ebp-04], ecx
:0045ACB7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045ACBA 8B08                    mov ecx, dword ptr [eax]
:0045ACBC 8B5508                  mov edx, dword ptr [ebp+08]
:0045ACBF 8B0491                  mov eax, dword ptr [ecx+4*edx]
:0045ACC2 8BE5                    mov esp, ebp
:0045ACC4 5D                      pop ebp
:0045ACC5 C20400                  ret 0004


:0045ACC8 CC                      int 03
:0045ACC9 CC                      int 03
:0045ACCA CC                      int 03
:0045ACCB CC                      int 03
:0045ACCC CC                      int 03
:0045ACCD CC                      int 03
:0045ACCE CC                      int 03
:0045ACCF CC                      int 03
:0045ACD0 55                      push ebp
:0045ACD1 8BEC                    mov ebp, esp
:0045ACD3 E807000000              call 0045ACDF
:0045ACD8 E811000000              call 0045ACEE
:0045ACDD 5D                      pop ebp
:0045ACDE C3                      ret



* Referenced by a CALL at Address:
|:0045ACD3   
|
:0045ACDF 55                      push ebp
:0045ACE0 8BEC                    mov ebp, esp
:0045ACE2 B9004E4B00              mov ecx, 004B4E00
:0045ACE7 E804AAFAFF              call 004056F0
:0045ACEC 5D                      pop ebp
:0045ACED C3                      ret



* Referenced by a CALL at Address:
|:0045ACD8   
|
:0045ACEE 55                      push ebp
:0045ACEF 8BEC                    mov ebp, esp
:0045ACF1 6800AD4500              push 0045AD00
:0045ACF6 E8B5470100              call 0046F4B0
:0045ACFB 83C404                  add esp, 00000004
:0045ACFE 5D                      pop ebp
:0045ACFF C3                      ret


:0045AD00 55                      push ebp
:0045AD01 8BEC                    mov ebp, esp
:0045AD03 B9004E4B00              mov ecx, 004B4E00
:0045AD08 E8F33CFDFF              call 0042EA00
:0045AD0D 5D                      pop ebp
:0045AD0E C3                      ret



* Referenced by a CALL at Addresses:
|:0042385C   , :00438EA4   
|
:0045AD0F 55                      push ebp
:0045AD10 8BEC                    mov ebp, esp
:0045AD12 51                      push ecx
:0045AD13 C645FCFF                mov [ebp-04], FF
:0045AD17 8B4508                  mov eax, dword ptr [ebp+08]
:0045AD1A 50                      push eax
:0045AD1B B9004E4B00              mov ecx, 004B4E00
:0045AD20 E84B35FDFF              call 0042E270
:0045AD25 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045AD28 51                      push ecx
:0045AD29 B9004E4B00              mov ecx, 004B4E00
:0045AD2E E82D31FDFF              call 0042DE60
:0045AD33 8B5510                  mov edx, dword ptr [ebp+10]
:0045AD36 52                      push edx
:0045AD37 B9004E4B00              mov ecx, 004B4E00
:0045AD3C E84F35FDFF              call 0042E290
:0045AD41 B9004E4B00              mov ecx, 004B4E00
:0045AD46 E8C5130000              call 0045C110
:0045AD4B 68FF000000              push 000000FF
:0045AD50 B9004E4B00              mov ecx, 004B4E00
:0045AD55 E896130000              call 0045C0F0
:0045AD5A 8B4514                  mov eax, dword ptr [ebp+14]
:0045AD5D 50                      push eax
:0045AD5E 6886AD4500              push 0045AD86
:0045AD63 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0045AD69 51                      push ecx
:0045AD6A 6822010000              push 00000122
:0045AD6F 8B15A8554B00            mov edx, dword ptr [004B55A8]
:0045AD75 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0045AD76 FF15DCD64B00            Call dword ptr [004BD6DC]
:0045AD7C 8845FC                  mov byte ptr [ebp-04], al
:0045AD7F 8A45FC                  mov al, byte ptr [ebp-04]
:0045AD82 8BE5                    mov esp, ebp
:0045AD84 5D                      pop ebp
:0045AD85 C3                      ret


:0045AD86 55                      push ebp
:0045AD87 8BEC                    mov ebp, esp
:0045AD89 83EC08                  sub esp, 00000008
:0045AD8C 8B450C                  mov eax, dword ptr [ebp+0C]
:0045AD8F 8945F8                  mov dword ptr [ebp-08], eax
:0045AD92 837DF810                cmp dword ptr [ebp-08], 00000010
:0045AD96 7719                    ja 0045ADB1
:0045AD98 837DF810                cmp dword ptr [ebp-08], 00000010
:0045AD9C 0F84B2000000            je 0045AE54
:0045ADA2 837DF802                cmp dword ptr [ebp-08], 00000002
:0045ADA6 0F8480000000            je 0045AE2C
:0045ADAC E9F4000000              jmp 0045AEA5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AD96(C)
|
:0045ADB1 837DF84E                cmp dword ptr [ebp-08], 0000004E
:0045ADB5 0F84D2000000            je 0045AE8D
:0045ADBB 817DF810010000          cmp dword ptr [ebp-08], 00000110
:0045ADC2 7412                    je 0045ADD6
:0045ADC4 817DF811010000          cmp dword ptr [ebp-08], 00000111
:0045ADCB 0F8494000000            je 0045AE65
:0045ADD1 E9CF000000              jmp 0045AEA5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045ADC2(C)
|
:0045ADD6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045ADD9 51                      push ecx
:0045ADDA E8CE000000              call 0045AEAD
:0045ADDF 83C404                  add esp, 00000004
:0045ADE2 8B5514                  mov edx, dword ptr [ebp+14]
:0045ADE5 8915D84D4B00            mov dword ptr [004B4DD8], edx

* Possible StringData Ref from Data Obj ->"MgcIcon.dll"
                                  |
:0045ADEB 68F0D44700              push 0047D4F0
:0045ADF0 E83F2AFBFF              call 0040D834
:0045ADF5 83C404                  add esp, 00000004
:0045ADF8 50                      push eax

* Reference To: KERNEL32.LoadLibraryA, Ord:0190h
                                  |
:0045ADF9 FF15ECD44B00            Call dword ptr [004BD4EC]
:0045ADFF 8945FC                  mov dword ptr [ebp-04], eax
:0045AE02 8B45FC                  mov eax, dword ptr [ebp-04]
:0045AE05 50                      push eax
:0045AE06 B9004E4B00              mov ecx, 004B4E00
:0045AE0B E85031FDFF              call 0042DF60
:0045AE10 8B0DD84D4B00            mov ecx, dword ptr [004B4DD8]
:0045AE16 51                      push ecx
:0045AE17 8A15684E4B00            mov dl, byte ptr [004B4E68]
:0045AE1D 52                      push edx
:0045AE1E 8B4508                  mov eax, dword ptr [ebp+08]
:0045AE21 50                      push eax
:0045AE22 E84A010000              call 0045AF71
:0045AE27 83C40C                  add esp, 0000000C
:0045AE2A EB79                    jmp 0045AEA5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045ADA6(C)
|
:0045AE2C B9004E4B00              mov ecx, 004B4E00
:0045AE31 E8CA84FAFF              call 00403300
:0045AE36 8945FC                  mov dword ptr [ebp-04], eax
:0045AE39 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045AE3C 51                      push ecx

* Reference To: KERNEL32.FreeLibrary, Ord:0098h
                                  |
:0045AE3D FF15E0D44B00            Call dword ptr [004BD4E0]
:0045AE43 8B15D84D4B00            mov edx, dword ptr [004B4DD8]
:0045AE49 52                      push edx
:0045AE4A E8B90F0000              call 0045BE08
:0045AE4F 83C404                  add esp, 00000004
:0045AE52 EB51                    jmp 0045AEA5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AD9C(C)
|
:0045AE54 68FF000000              push 000000FF
:0045AE59 8B4508                  mov eax, dword ptr [ebp+08]
:0045AE5C 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045AE5D FF15D8D54B00            Call dword ptr [004BD5D8]
:0045AE63 EB40                    jmp 0045AEA5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045ADCB(C)
|
:0045AE65 68684E4B00              push 004B4E68
:0045AE6A 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045AE6D 51                      push ecx
:0045AE6E 668B5510                mov dx, word ptr [ebp+10]
:0045AE72 52                      push edx
:0045AE73 8B4510                  mov eax, dword ptr [ebp+10]
:0045AE76 C1E810                  shr eax, 10
:0045AE79 25FFFF0000              and eax, 0000FFFF
:0045AE7E 50                      push eax
:0045AE7F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045AE82 51                      push ecx
:0045AE83 E8D8070000              call 0045B660
:0045AE88 83C414                  add esp, 00000014
:0045AE8B EB18                    jmp 0045AEA5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045ADB5(C)
|
:0045AE8D 8B5514                  mov edx, dword ptr [ebp+14]
:0045AE90 52                      push edx
:0045AE91 A1D84D4B00              mov eax, dword ptr [004B4DD8]
:0045AE96 50                      push eax
:0045AE97 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045AE9A 51                      push ecx
:0045AE9B E8E1090000              call 0045B881
:0045AEA0 83C40C                  add esp, 0000000C
:0045AEA3 EB02                    jmp 0045AEA7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045ADAC(U), :0045ADD1(U), :0045AE2A(U), :0045AE52(U), :0045AE63(U)
|:0045AE8B(U)
|
:0045AEA5 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AEA3(U)
|
:0045AEA7 8BE5                    mov esp, ebp
:0045AEA9 5D                      pop ebp
:0045AEAA C21000                  ret 0010



* Referenced by a CALL at Address:
|:0045ADDA   
|
:0045AEAD 55                      push ebp
:0045AEAE 8BEC                    mov ebp, esp
:0045AEB0 6A00                    push 00000000
:0045AEB2 A144544B00              mov eax, dword ptr [004B5444]
:0045AEB7 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045AEB8 FF1500D74B00            Call dword ptr [004BD700]
:0045AEBE 6A00                    push 00000000
:0045AEC0 8B0D48544B00            mov ecx, dword ptr [004B5448]
:0045AEC6 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045AEC7 FF1500D74B00            Call dword ptr [004BD700]
:0045AECD 68E9030000              push 000003E9
:0045AED2 8B5508                  mov edx, dword ptr [ebp+08]
:0045AED5 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045AED6 FF1510D64B00            Call dword ptr [004BD610]
:0045AEDC 50                      push eax
:0045AEDD A144544B00              mov eax, dword ptr [004B5444]
:0045AEE2 50                      push eax

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0045AEE3 FF15E8D54B00            Call dword ptr [004BD5E8]

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0045AEE9 68EA030000              push 000003EA
:0045AEEE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045AEF1 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045AEF2 FF1510D64B00            Call dword ptr [004BD610]
:0045AEF8 50                      push eax
:0045AEF9 8B1548544B00            mov edx, dword ptr [004B5448]
:0045AEFF 52                      push edx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0045AF00 FF15E8D54B00            Call dword ptr [004BD5E8]
:0045AF06 6A00                    push 00000000
:0045AF08 A1D4B04700              mov eax, dword ptr [0047B0D4]
:0045AF0D 50                      push eax
:0045AF0E 8B0DD0B04700            mov ecx, dword ptr [0047B0D0]
:0045AF14 51                      push ecx
:0045AF15 6A00                    push 00000000
:0045AF17 6A00                    push 00000000
:0045AF19 8B1544544B00            mov edx, dword ptr [004B5444]
:0045AF1F 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045AF20 FF15ECD54B00            Call dword ptr [004BD5EC]
:0045AF26 6A00                    push 00000000
:0045AF28 A1E4B04700              mov eax, dword ptr [0047B0E4]
:0045AF2D 50                      push eax
:0045AF2E 8B0DE0B04700            mov ecx, dword ptr [0047B0E0]
:0045AF34 51                      push ecx
:0045AF35 6A00                    push 00000000
:0045AF37 6A00                    push 00000000
:0045AF39 8B1548544B00            mov edx, dword ptr [004B5448]
:0045AF3F 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045AF40 FF15ECD54B00            Call dword ptr [004BD5EC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045AF46 6A05                    push 00000005
:0045AF48 A144544B00              mov eax, dword ptr [004B5444]
:0045AF4D 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045AF4E FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045AF54 6A05                    push 00000005
:0045AF56 8B0D48544B00            mov ecx, dword ptr [004B5448]
:0045AF5C 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045AF5D FF1500D74B00            Call dword ptr [004BD700]
:0045AF63 6A00                    push 00000000
:0045AF65 6A10                    push 00000010
:0045AF67 E8840D0000              call 0045BCF0
:0045AF6C 83C408                  add esp, 00000008
:0045AF6F 5D                      pop ebp
:0045AF70 C3                      ret



* Referenced by a CALL at Address:
|:0045AE22   
|
:0045AF71 55                      push ebp
:0045AF72 8BEC                    mov ebp, esp
:0045AF74 83EC10                  sub esp, 00000010
:0045AF77 8B450C                  mov eax, dword ptr [ebp+0C]
:0045AF7A 25FF000000              and eax, 000000FF
:0045AF7F 85C0                    test eax, eax
:0045AF81 753F                    jne 0045AFC2
:0045AF83 6A00                    push 00000000
:0045AF85 6A01                    push 00000001
:0045AF87 68F1000000              push 000000F1
:0045AF8C 6811050000              push 00000511
:0045AF91 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045AF94 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045AF95 FF1510D64B00            Call dword ptr [004BD610]
:0045AF9B 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045AF9C FF1504D64B00            Call dword ptr [004BD604]
:0045AFA2 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050C, ""
                                  |
:0045AFA4 680C050000              push 0000050C
:0045AFA9 8B5508                  mov edx, dword ptr [ebp+08]
:0045AFAC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045AFAD FF1510D64B00            Call dword ptr [004BD610]
:0045AFB3 50                      push eax
:0045AFB4 8B4508                  mov eax, dword ptr [ebp+08]
:0045AFB7 50                      push eax
:0045AFB8 E8C9E0FBFF              call 00419086
:0045AFBD 83C40C                  add esp, 0000000C
:0045AFC0 EB3D                    jmp 0045AFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AF81(C)
|
:0045AFC2 6A00                    push 00000000
:0045AFC4 6A01                    push 00000001
:0045AFC6 68F1000000              push 000000F1
:0045AFCB 6812050000              push 00000512
:0045AFD0 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045AFD3 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045AFD4 FF1510D64B00            Call dword ptr [004BD610]
:0045AFDA 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045AFDB FF1504D64B00            Call dword ptr [004BD604]
:0045AFE1 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050C, ""
                                  |
:0045AFE3 680C050000              push 0000050C
:0045AFE8 8B5508                  mov edx, dword ptr [ebp+08]
:0045AFEB 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045AFEC FF1510D64B00            Call dword ptr [004BD610]
:0045AFF2 50                      push eax
:0045AFF3 8B4508                  mov eax, dword ptr [ebp+08]
:0045AFF6 50                      push eax
:0045AFF7 E88AE0FBFF              call 00419086
:0045AFFC 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045AFC0(U)
|
:0045AFFF 6A00                    push 00000000
:0045B001 6A30                    push 00000030
:0045B003 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0045B006 51                      push ecx
:0045B007 8D55F8                  lea edx, dword ptr [ebp-08]
:0045B00A 52                      push edx
:0045B00B 8B4508                  mov eax, dword ptr [ebp+08]
:0045B00E 50                      push eax
:0045B00F E850D3FBFF              call 00418364
:0045B014 83C414                  add esp, 00000014
:0045B017 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045B01A 51                      push ecx
:0045B01B 8B55F8                  mov edx, dword ptr [ebp-08]
:0045B01E 52                      push edx
:0045B01F E805030000              call 0045B329
:0045B024 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050C, ""
                                  |
:0045B027 680C050000              push 0000050C
:0045B02C 8B4508                  mov eax, dword ptr [ebp+08]
:0045B02F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B030 FF1510D64B00            Call dword ptr [004BD610]
:0045B036 8945F4                  mov dword ptr [ebp-0C], eax
:0045B039 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045B03C 51                      push ecx
:0045B03D 8B55F8                  mov edx, dword ptr [ebp-08]
:0045B040 52                      push edx
:0045B041 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045B044 50                      push eax
:0045B045 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B048 51                      push ecx
:0045B049 E8D5030000              call 0045B423
:0045B04E 83C410                  add esp, 00000010
:0045B051 68FF000000              push 000000FF
:0045B056 B9004E4B00              mov ecx, 004B4E00
:0045B05B E890100000              call 0045C0F0
:0045B060 837D1000                cmp dword ptr [ebp+10], 00000000
:0045B064 7410                    je 0045B076
:0045B066 8B5510                  mov edx, dword ptr [ebp+10]
:0045B069 52                      push edx
:0045B06A 8B4508                  mov eax, dword ptr [ebp+08]
:0045B06D 50                      push eax
:0045B06E E841000000              call 0045B0B4
:0045B073 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B064(C)
|
:0045B076 B9004E4B00              mov ecx, 004B4E00
:0045B07B E860B9FDFF              call 004369E0
:0045B080 8945F0                  mov dword ptr [ebp-10], eax
:0045B083 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045B086 833900                  cmp dword ptr [ecx], 00000000
:0045B089 7525                    jne 0045B0B0

* Possible StringData Ref from Data Obj ->"SiHܪ"
                                  |
:0045B08B 6830174800              push 00481730
:0045B090 8B5508                  mov edx, dword ptr [ebp+08]
:0045B093 52                      push edx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B094 FF1514D64B00            Call dword ptr [004BD614]
:0045B09A 6800000002              push 02000000
:0045B09F 6A00                    push 00000000
:0045B0A1 6801100000              push 00001001
:0045B0A6 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045B0A9 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045B0AA FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B089(C)
|
:0045B0B0 8BE5                    mov esp, ebp
:0045B0B2 5D                      pop ebp
:0045B0B3 C3                      ret



* Referenced by a CALL at Address:
|:0045B06E   
|
:0045B0B4 55                      push ebp
:0045B0B5 8BEC                    mov ebp, esp
:0045B0B7 83EC1C                  sub esp, 0000001C
:0045B0BA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B0BD E84280FAFF              call 00403104
:0045B0C2 50                      push eax

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:03EB, ""
                                  |
:0045B0C3 68EB030000              push 000003EB
:0045B0C8 8B4508                  mov eax, dword ptr [ebp+08]
:0045B0CB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B0CC FF1510D64B00            Call dword ptr [004BD610]
:0045B0D2 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B0D3 FF1514D64B00            Call dword ptr [004BD614]
:0045B0D9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B0DC E8BF4DFBFF              call 0040FEA0
:0045B0E1 25FF000000              and eax, 000000FF
:0045B0E6 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045B0E7 6844174800              push 00481744
:0045B0EC 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0045B0EF 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0045B0F0 FF1504D74B00            Call dword ptr [004BD704]
:0045B0F6 83C40C                  add esp, 0000000C
:0045B0F9 8D55E8                  lea edx, dword ptr [ebp-18]
:0045B0FC 52                      push edx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:0045B0FD 68F9030000              push 000003F9
:0045B102 8B4508                  mov eax, dword ptr [ebp+08]
:0045B105 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B106 FF1510D64B00            Call dword ptr [004BD610]
:0045B10C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B10D FF1514D64B00            Call dword ptr [004BD614]
:0045B113 C745F800000000          mov [ebp-08], 00000000
:0045B11A C745FC00000000          mov [ebp-04], 00000000
:0045B121 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B124 E8CC000100              call 0046B1F5
:0045B129 8845E4                  mov byte ptr [ebp-1C], al
:0045B12C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045B12F 81E1FF000000            and ecx, 000000FF
:0045B135 81F9FF000000            cmp ecx, 000000FF
:0045B13B 7436                    je 0045B173
:0045B13D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045B140 81E1FF000000            and ecx, 000000FF
:0045B146 6BC924                  imul ecx, 00000024
:0045B149 81C1B83B4B00            add ecx, 004B3BB8
:0045B14F E88C81FAFF              call 004032E0
:0045B154 8945F8                  mov dword ptr [ebp-08], eax
:0045B157 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045B15A 81E1FF000000            and ecx, 000000FF
:0045B160 6BC924                  imul ecx, 00000024
:0045B163 81C1B83B4B00            add ecx, 004B3BB8
:0045B169 E89281FAFF              call 00403300
:0045B16E 8945FC                  mov dword ptr [ebp-04], eax
:0045B171 EB1A                    jmp 0045B18D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B13B(C)
|
:0045B173 B938464900              mov ecx, 00494638
:0045B178 E863B8FDFF              call 004369E0
:0045B17D 8945F8                  mov dword ptr [ebp-08], eax
:0045B180 B938464900              mov ecx, 00494638
:0045B185 E8F62CFDFF              call 0042DE80
:0045B18A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B171(U)
|
:0045B18D 8B55F8                  mov edx, dword ptr [ebp-08]
:0045B190 52                      push edx

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045B191 6848174800              push 00481748
:0045B196 8D45E8                  lea eax, dword ptr [ebp-18]
:0045B199 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0045B19A FF1504D74B00            Call dword ptr [004BD704]
:0045B1A0 83C40C                  add esp, 0000000C
:0045B1A3 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0045B1A6 51                      push ecx

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:03FE, "1000"
                                  |
:0045B1A7 68FE030000              push 000003FE
:0045B1AC 8B5508                  mov edx, dword ptr [ebp+08]
:0045B1AF 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B1B0 FF1510D64B00            Call dword ptr [004BD610]
:0045B1B6 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B1B7 FF1514D64B00            Call dword ptr [004BD614]
:0045B1BD 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B1C0 E80BFAFFFF              call 0045ABD0
:0045B1C5 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045B1C6 684C174800              push 0048174C
:0045B1CB 8D45E8                  lea eax, dword ptr [ebp-18]
:0045B1CE 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0045B1CF FF1504D74B00            Call dword ptr [004BD704]
:0045B1D5 83C40C                  add esp, 0000000C
:0045B1D8 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0045B1DB 51                      push ecx

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:0045B1DC 6800040000              push 00000400
:0045B1E1 8B5508                  mov edx, dword ptr [ebp+08]
:0045B1E4 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B1E5 FF1510D64B00            Call dword ptr [004BD610]
:0045B1EB 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B1EC FF1514D64B00            Call dword ptr [004BD614]
:0045B1F2 8B45FC                  mov eax, dword ptr [ebp-04]
:0045B1F5 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045B1F6 6850174800              push 00481750
:0045B1FB 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0045B1FE 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0045B1FF FF1504D74B00            Call dword ptr [004BD704]
:0045B205 83C40C                  add esp, 0000000C
:0045B208 8D55E8                  lea edx, dword ptr [ebp-18]
:0045B20B 52                      push edx

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F2, "255"
                                  |
:0045B20C 68F2030000              push 000003F2
:0045B211 8B4508                  mov eax, dword ptr [ebp+08]
:0045B214 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B215 FF1510D64B00            Call dword ptr [004BD610]
:0045B21B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B21C FF1514D64B00            Call dword ptr [004BD614]
:0045B222 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B225 E8F16BFAFF              call 00401E1B
:0045B22A 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045B22B 6854174800              push 00481754
:0045B230 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0045B233 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0045B234 FF1504D74B00            Call dword ptr [004BD704]
:0045B23A 83C40C                  add esp, 0000000C
:0045B23D 8D55E8                  lea edx, dword ptr [ebp-18]
:0045B240 52                      push edx

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F3, "255"
                                  |
:0045B241 68F3030000              push 000003F3
:0045B246 8B4508                  mov eax, dword ptr [ebp+08]
:0045B249 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B24A FF1510D64B00            Call dword ptr [004BD610]
:0045B250 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B251 FF1514D64B00            Call dword ptr [004BD614]
:0045B257 686C4E4B00              push 004B4E6C

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03FD, "1000"
                                  |
:0045B25C 68FD030000              push 000003FD
:0045B261 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B264 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B265 FF1510D64B00            Call dword ptr [004BD610]
:0045B26B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B26C FF1514D64B00            Call dword ptr [004BD614]
:0045B272 6800006400              push 00640000
:0045B277 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0045B279 6801040000              push 00000401
:0045B27E 6808040000              push 00000408
:0045B283 8B5508                  mov edx, dword ptr [ebp+08]
:0045B286 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045B287 FF15D4D54B00            Call dword ptr [004BD5D4]
:0045B28D 6A00                    push 00000000
:0045B28F 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0045B291 6802040000              push 00000402
:0045B296 6808040000              push 00000408
:0045B29B 8B4508                  mov eax, dword ptr [ebp+08]
:0045B29E 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045B29F FF15D4D54B00            Call dword ptr [004BD5D4]
:0045B2A5 68704E4B00              push 004B4E70

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:03FF, "1000"
                                  |
:0045B2AA 68FF030000              push 000003FF
:0045B2AF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B2B2 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B2B3 FF1510D64B00            Call dword ptr [004BD610]
:0045B2B9 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045B2BA FF1514D64B00            Call dword ptr [004BD614]
:0045B2C0 68E9030000              push 000003E9
:0045B2C5 8B5508                  mov edx, dword ptr [ebp+08]
:0045B2C8 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B2C9 FF1510D64B00            Call dword ptr [004BD610]
:0045B2CF 50                      push eax
:0045B2D0 E81F000000              call 0045B2F4
:0045B2D5 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0045B2D8 68EA030000              push 000003EA
:0045B2DD 8B4508                  mov eax, dword ptr [ebp+08]
:0045B2E0 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B2E1 FF1510D64B00            Call dword ptr [004BD610]
:0045B2E7 50                      push eax
:0045B2E8 E807000000              call 0045B2F4
:0045B2ED 83C404                  add esp, 00000004
:0045B2F0 8BE5                    mov esp, ebp
:0045B2F2 5D                      pop ebp
:0045B2F3 C3                      ret



* Referenced by a CALL at Addresses:
|:0045B2D0   , :0045B2E8   
|
:0045B2F4 55                      push ebp
:0045B2F5 8BEC                    mov ebp, esp
:0045B2F7 51                      push ecx
:0045B2F8 8B4508                  mov eax, dword ptr [ebp+08]
:0045B2FB 50                      push eax

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0045B2FC FF1518D64B00            Call dword ptr [004BD618]
:0045B302 8945FC                  mov dword ptr [ebp-04], eax
:0045B305 6A00                    push 00000000
:0045B307 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045B30A 51                      push ecx
:0045B30B 6A0F                    push 0000000F
:0045B30D 8B5508                  mov edx, dword ptr [ebp+08]
:0045B310 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045B311 FF1504D64B00            Call dword ptr [004BD604]
:0045B317 8B45FC                  mov eax, dword ptr [ebp-04]
:0045B31A 50                      push eax
:0045B31B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B31E 51                      push ecx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0045B31F FF151CD64B00            Call dword ptr [004BD61C]
:0045B325 8BE5                    mov esp, ebp
:0045B327 5D                      pop ebp
:0045B328 C3                      ret



* Referenced by a CALL at Address:
|:0045B01F   
|
:0045B329 55                      push ebp
:0045B32A 8BEC                    mov ebp, esp
:0045B32C 83EC14                  sub esp, 00000014
:0045B32F B9004E4B00              mov ecx, 004B4E00
:0045B334 E8C77FFAFF              call 00403300
:0045B339 8945F8                  mov dword ptr [ebp-08], eax
:0045B33C C745EC00000000          mov [ebp-14], 00000000
:0045B343 EB09                    jmp 0045B34E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B3BF(U)
|
:0045B345 8B45EC                  mov eax, dword ptr [ebp-14]
:0045B348 83C001                  add eax, 00000001
:0045B34B 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B343(U)
|
:0045B34E B9004E4B00              mov ecx, 004B4E00
:0045B353 E8660B0000              call 0045BEBE
:0045B358 3945EC                  cmp dword ptr [ebp-14], eax
:0045B35B 7D64                    jge 0045B3C1
:0045B35D B9004E4B00              mov ecx, 004B4E00
:0045B362 E8192BFDFF              call 0042DE80
:0045B367 8945F4                  mov dword ptr [ebp-0C], eax
:0045B36A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045B36D 034DEC                  add ecx, dword ptr [ebp-14]
:0045B370 33D2                    xor edx, edx
:0045B372 8A11                    mov dl, byte ptr [ecx]
:0045B374 8BCA                    mov ecx, edx
:0045B376 6BC931                  imul ecx, 00000031
:0045B379 81C1001D4B00            add ecx, 004B1D00
:0045B37F E8AC0D0000              call 0045C130
:0045B384 25FF000000              and eax, 000000FF
:0045B389 83C064                  add eax, 00000064
:0045B38C 25FFFF0000              and eax, 0000FFFF
:0045B391 50                      push eax
:0045B392 8B45F8                  mov eax, dword ptr [ebp-08]
:0045B395 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0045B396 FF15E4D64B00            Call dword ptr [004BD6E4]
:0045B39C 8945FC                  mov dword ptr [ebp-04], eax
:0045B39F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045B3A2 51                      push ecx
:0045B3A3 6AFF                    push FFFFFFFF
:0045B3A5 8B5508                  mov edx, dword ptr [ebp+08]
:0045B3A8 52                      push edx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:0045B3A9 FF1514D44B00            Call dword ptr [004BD414]
:0045B3AF 8B45FC                  mov eax, dword ptr [ebp-04]
:0045B3B2 50                      push eax
:0045B3B3 6AFF                    push FFFFFFFF
:0045B3B5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B3B8 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:0045B3B9 FF1514D44B00            Call dword ptr [004BD414]
:0045B3BF EB84                    jmp 0045B345

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B35B(C)
|
:0045B3C1 B9004E4B00              mov ecx, 004B4E00
:0045B3C6 E805F8FFFF              call 0045ABD0
:0045B3CB 8945F0                  mov dword ptr [ebp-10], eax
:0045B3CE C745EC00000000          mov [ebp-14], 00000000
:0045B3D5 EB09                    jmp 0045B3E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B41D(U)
|
:0045B3D7 8B55EC                  mov edx, dword ptr [ebp-14]
:0045B3DA 83C201                  add edx, 00000001
:0045B3DD 8955EC                  mov dword ptr [ebp-14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B3D5(U)
|
:0045B3E0 B9004E4B00              mov ecx, 004B4E00
:0045B3E5 E8D40A0000              call 0045BEBE
:0045B3EA 3945EC                  cmp dword ptr [ebp-14], eax
:0045B3ED 7D30                    jge 0045B41F
:0045B3EF 8B45F0                  mov eax, dword ptr [ebp-10]
:0045B3F2 0345EC                  add eax, dword ptr [ebp-14]
:0045B3F5 33C9                    xor ecx, ecx
:0045B3F7 8A08                    mov cl, byte ptr [eax]
:0045B3F9 85C9                    test ecx, ecx
:0045B3FB 7520                    jne 0045B41D
:0045B3FD 8B5508                  mov edx, dword ptr [ebp+08]
:0045B400 52                      push edx
:0045B401 8B45EC                  mov eax, dword ptr [ebp-14]
:0045B404 50                      push eax
:0045B405 E877900000              call 00464481
:0045B40A 83C408                  add esp, 00000008
:0045B40D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045B410 51                      push ecx
:0045B411 8B55EC                  mov edx, dword ptr [ebp-14]
:0045B414 52                      push edx
:0045B415 E867900000              call 00464481
:0045B41A 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B3FB(C)
|
:0045B41D EBB8                    jmp 0045B3D7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B3ED(C)
|
:0045B41F 8BE5                    mov esp, ebp
:0045B421 5D                      pop ebp
:0045B422 C3                      ret



* Referenced by a CALL at Address:
|:0045B049   
|
:0045B423 55                      push ebp
:0045B424 8BEC                    mov ebp, esp
:0045B426 8B450C                  mov eax, dword ptr [ebp+0C]
:0045B429 50                      push eax
:0045B42A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B42D 51                      push ecx
:0045B42E E83F000000              call 0045B472
:0045B433 83C408                  add esp, 00000008
:0045B436 8B5510                  mov edx, dword ptr [ebp+10]
:0045B439 52                      push edx
:0045B43A 6A01                    push 00000001
:0045B43C 6803100000              push 00001003
:0045B441 8B450C                  mov eax, dword ptr [ebp+0C]
:0045B444 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045B445 FF1504D64B00            Call dword ptr [004BD604]
:0045B44B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0045B44E 51                      push ecx
:0045B44F 6A00                    push 00000000
:0045B451 6803100000              push 00001003
:0045B456 8B550C                  mov edx, dword ptr [ebp+0C]
:0045B459 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045B45A FF1504D64B00            Call dword ptr [004BD604]
:0045B460 8B450C                  mov eax, dword ptr [ebp+0C]
:0045B463 50                      push eax
:0045B464 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B467 51                      push ecx
:0045B468 E8FA000000              call 0045B567
:0045B46D 83C408                  add esp, 00000008
:0045B470 5D                      pop ebp
:0045B471 C3                      ret



* Referenced by a CALL at Address:
|:0045B42E   
|
:0045B472 55                      push ebp
:0045B473 8BEC                    mov ebp, esp
:0045B475 83EC24                  sub esp, 00000024
:0045B478 6A20                    push 00000020
:0045B47A 6A00                    push 00000000
:0045B47C 8D45E0                  lea eax, dword ptr [ebp-20]
:0045B47F 50                      push eax
:0045B480 E84B460100              call 0046FAD0
:0045B485 83C40C                  add esp, 0000000C
:0045B488 C745E00F000000          mov [ebp-20], 0000000F
:0045B48F C745E400000000          mov [ebp-1C], 00000000
:0045B496 C745F020000000          mov [ebp-10], 00000020
:0045B49D C745DC00000000          mov [ebp-24], 00000000
:0045B4A4 EB09                    jmp 0045B4AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B515(U)
|
:0045B4A6 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045B4A9 83C101                  add ecx, 00000001
:0045B4AC 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B4A4(U)
|
:0045B4AF 837DDC04                cmp dword ptr [ebp-24], 00000004
:0045B4B3 7D62                    jge 0045B517
:0045B4B5 837DDC01                cmp dword ptr [ebp-24], 00000001
:0045B4B9 7F09                    jg 0045B4C4
:0045B4BB C745E860000000          mov [ebp-18], 00000060
:0045B4C2 EB07                    jmp 0045B4CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B4B9(C)
|
:0045B4C4 C745E82E000000          mov [ebp-18], 0000002E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B4C2(U)
|
:0045B4CB 8B55DC                  mov edx, dword ptr [ebp-24]
:0045B4CE 52                      push edx
:0045B4CF E847000000              call 0045B51B
:0045B4D4 83C404                  add esp, 00000004
:0045B4D7 8945EC                  mov dword ptr [ebp-14], eax
:0045B4DA 8B45DC                  mov eax, dword ptr [ebp-24]
:0045B4DD 8945F4                  mov dword ptr [ebp-0C], eax
:0045B4E0 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0045B4E3 51                      push ecx
:0045B4E4 8B55DC                  mov edx, dword ptr [ebp-24]
:0045B4E7 52                      push edx
:0045B4E8 681B100000              push 0000101B
:0045B4ED 8B450C                  mov eax, dword ptr [ebp+0C]
:0045B4F0 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045B4F1 FF1504D64B00            Call dword ptr [004BD604]
:0045B4F7 83F8FF                  cmp eax, FFFFFFFF
:0045B4FA 7519                    jne 0045B515
:0045B4FC 6830200000              push 00002030

* Possible StringData Ref from Data Obj ->" in ListView_InsertColumnSelMagic()"
                                  |
:0045B501 6858174800              push 00481758

* Possible StringData Ref from Data Obj ->"ListView_InsertColumn"
                                  |
:0045B506 687C174800              push 0048177C
:0045B50B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B50E 51                      push ecx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:0045B50F FF15E0D64B00            Call dword ptr [004BD6E0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B4FA(C)
|
:0045B515 EB8F                    jmp 0045B4A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B4B3(C)
|
:0045B517 8BE5                    mov esp, ebp
:0045B519 5D                      pop ebp
:0045B51A C3                      ret



* Referenced by a CALL at Address:
|:0045B4CF   
|
:0045B51B 55                      push ebp
:0045B51C 8BEC                    mov ebp, esp
:0045B51E 51                      push ecx
:0045B51F 8B4508                  mov eax, dword ptr [ebp+08]
:0045B522 8945FC                  mov dword ptr [ebp-04], eax
:0045B525 837DFC03                cmp dword ptr [ebp-04], 00000003
:0045B529 7726                    ja 0045B551
:0045B52B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045B52E FF248D57B54500          jmp dword ptr [4*ecx+0045B557]

* Possible StringData Ref from Data Obj ->"ۦW"
                                  |
:0045B535 B898174800              mov eax, 00481798
:0045B53A EB17                    jmp 0045B553

* Possible StringData Ref from Data Obj ->"MPOq"
                                  |
:0045B53C B8A0174800              mov eax, 004817A0
:0045B541 EB10                    jmp 0045B553

* Possible StringData Ref from Data Obj ->"n_"
                                  |
:0045B543 B8AC174800              mov eax, 004817AC
:0045B548 EB09                    jmp 0045B553

* Possible StringData Ref from Data Obj ->"H"
                                  |
:0045B54A B8B8174800              mov eax, 004817B8
:0045B54F EB02                    jmp 0045B553

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B529(C)
|
:0045B551 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045B53A(U), :0045B541(U), :0045B548(U), :0045B54F(U)
|
:0045B553 8BE5                    mov esp, ebp
:0045B555 5D                      pop ebp
:0045B556 C3                      ret



:0045B557 35B54500                DWORD 0045B535
:0045B55B 3CB54500                DWORD 0045B53C
:0045B55F 43B54500                DWORD 0045B543
:0045B563 4AB54500                DWORD 0045B54A



* Referenced by a CALL at Address:
|:0045B468   
|
:0045B567 55                      push ebp
:0045B568 8BEC                    mov ebp, esp
:0045B56A 83EC30                  sub esp, 00000030
:0045B56D 6A28                    push 00000028
:0045B56F 6A00                    push 00000000
:0045B571 8D45D4                  lea eax, dword ptr [ebp-2C]
:0045B574 50                      push eax
:0045B575 E856450100              call 0046FAD0
:0045B57A 83C40C                  add esp, 0000000C
:0045B57D C745D40F000000          mov [ebp-2C], 0000000F
:0045B584 C745E000000000          mov [ebp-20], 00000000
:0045B58B C745E400000000          mov [ebp-1C], 00000000
:0045B592 C745DC00000000          mov [ebp-24], 00000000
:0045B599 C745E8FFFFFFFF          mov [ebp-18], FFFFFFFF
:0045B5A0 C745F0FFFFFFFF          mov [ebp-10], FFFFFFFF
:0045B5A7 C745EC20000000          mov [ebp-14], 00000020
:0045B5AE C745D000000000          mov [ebp-30], 00000000
:0045B5B5 EB09                    jmp 0045B5C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B657(U)
|
:0045B5B7 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0045B5BA 83C101                  add ecx, 00000001
:0045B5BD 894DD0                  mov dword ptr [ebp-30], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B5B5(U)
|
:0045B5C0 B9004E4B00              mov ecx, 004B4E00
:0045B5C5 E8F4080000              call 0045BEBE
:0045B5CA 3945D0                  cmp dword ptr [ebp-30], eax
:0045B5CD 0F8D89000000            jnl 0045B65C
:0045B5D3 8B55D0                  mov edx, dword ptr [ebp-30]
:0045B5D6 8955D8                  mov dword ptr [ebp-28], edx
:0045B5D9 B9004E4B00              mov ecx, 004B4E00
:0045B5DE E89D28FDFF              call 0042DE80
:0045B5E3 8945FC                  mov dword ptr [ebp-04], eax
:0045B5E6 8B45FC                  mov eax, dword ptr [ebp-04]
:0045B5E9 0345D0                  add eax, dword ptr [ebp-30]
:0045B5EC 33C9                    xor ecx, ecx
:0045B5EE 8A08                    mov cl, byte ptr [eax]
:0045B5F0 6BC931                  imul ecx, 00000031
:0045B5F3 81C1001D4B00            add ecx, 004B1D00
:0045B5F9 8B55D0                  mov edx, dword ptr [ebp-30]
:0045B5FC 890CD5184E4B00          mov dword ptr [8*edx+004B4E18], ecx
:0045B603 8B45D0                  mov eax, dword ptr [ebp-30]
:0045B606 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0045B609 890CC51C4E4B00          mov dword ptr [8*eax+004B4E1C], ecx
:0045B610 8B55D0                  mov edx, dword ptr [ebp-30]
:0045B613 8D04D5184E4B00          lea eax, dword ptr [8*edx+004B4E18]
:0045B61A 8945F4                  mov dword ptr [ebp-0C], eax
:0045B61D 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:0045B620 51                      push ecx
:0045B621 6A00                    push 00000000
:0045B623 6807100000              push 00001007
:0045B628 8B550C                  mov edx, dword ptr [ebp+0C]
:0045B62B 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045B62C FF1504D64B00            Call dword ptr [004BD604]
:0045B632 83F8FF                  cmp eax, FFFFFFFF
:0045B635 7520                    jne 0045B657
:0045B637 6830200000              push 00002030

* Possible StringData Ref from Data Obj ->" in InitLVItemOfSelMagic()"
                                  |
:0045B63C 68C0174800              push 004817C0

* Possible StringData Ref from Data Obj ->"ListView_InsertItem "
                                  |
:0045B641 68DC174800              push 004817DC
:0045B646 8B450C                  mov eax, dword ptr [ebp+0C]
:0045B649 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:0045B64A FF15C4D64B00            Call dword ptr [004BD6C4]
:0045B650 50                      push eax

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:0045B651 FF15E0D64B00            Call dword ptr [004BD6E0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B635(C)
|
:0045B657 E95BFFFFFF              jmp 0045B5B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B5CD(C)
|
:0045B65C 8BE5                    mov esp, ebp
:0045B65E 5D                      pop ebp
:0045B65F C3                      ret



* Referenced by a CALL at Address:
|:0045AE83   
|
:0045B660 55                      push ebp
:0045B661 8BEC                    mov ebp, esp
:0045B663 51                      push ecx
:0045B664 8B4510                  mov eax, dword ptr [ebp+10]
:0045B667 25FFFF0000              and eax, 0000FFFF
:0045B66C 8945FC                  mov dword ptr [ebp-04], eax
:0045B66F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045B672 81E93C040000            sub ecx, 0000043C
:0045B678 894DFC                  mov dword ptr [ebp-04], ecx
:0045B67B 817DFCD6000000          cmp dword ptr [ebp-04], 000000D6
:0045B682 0F87A2000000            ja 0045B72A
:0045B688 8B45FC                  mov eax, dword ptr [ebp-04]
:0045B68B 33D2                    xor edx, edx
:0045B68D 8A9048B74500            mov dl, byte ptr [eax+0045B748]
:0045B693 FF249530B74500          jmp dword ptr [4*edx+0045B730]
:0045B69A B9004E4B00              mov ecx, 004B4E00
:0045B69F E88C0A0000              call 0045C130
:0045B6A4 25FF000000              and eax, 000000FF
:0045B6A9 50                      push eax
:0045B6AA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B6AD 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045B6AE FF15D8D54B00            Call dword ptr [004BD5D8]
:0045B6B4 EB74                    jmp 0045B72A
:0045B6B6 68FF000000              push 000000FF
:0045B6BB 8B5508                  mov edx, dword ptr [ebp+08]
:0045B6BE 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045B6BF FF15D8D54B00            Call dword ptr [004BD5D8]
:0045B6C5 EB63                    jmp 0045B72A
:0045B6C7 8B4518                  mov eax, dword ptr [ebp+18]
:0045B6CA C60000                  mov byte ptr [eax], 00
:0045B6CD 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050C, ""
                                  |
:0045B6CF 680C050000              push 0000050C
:0045B6D4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B6D7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B6D8 FF1510D64B00            Call dword ptr [004BD610]
:0045B6DE 50                      push eax
:0045B6DF 8B5508                  mov edx, dword ptr [ebp+08]
:0045B6E2 52                      push edx
:0045B6E3 E89ED9FBFF              call 00419086
:0045B6E8 83C40C                  add esp, 0000000C
:0045B6EB B801000000              mov eax, 00000001
:0045B6F0 EB3A                    jmp 0045B72C
:0045B6F2 8B4518                  mov eax, dword ptr [ebp+18]
:0045B6F5 C60001                  mov byte ptr [eax], 01
:0045B6F8 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:050C, ""
                                  |
:0045B6FA 680C050000              push 0000050C
:0045B6FF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B702 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045B703 FF1510D64B00            Call dword ptr [004BD610]
:0045B709 50                      push eax
:0045B70A 8B5508                  mov edx, dword ptr [ebp+08]
:0045B70D 52                      push edx
:0045B70E E873D9FBFF              call 00419086
:0045B713 83C40C                  add esp, 0000000C
:0045B716 B801000000              mov eax, 00000001
:0045B71B EB0F                    jmp 0045B72C
:0045B71D 68CA080000              push 000008CA
:0045B722 E8A4E30000              call 00469ACB
:0045B727 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045B682(C), :0045B6B4(U), :0045B6C5(U)
|
:0045B72A 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045B6F0(U), :0045B71B(U)
|
:0045B72C 8BE5                    mov esp, ebp
:0045B72E 5D                      pop ebp
:0045B72F C3                      ret



:0045B730 B6B64500                DWORD 0045B6B6
:0045B734 1DB74500                DWORD 0045B71D
:0045B738 9AB64500                DWORD 0045B69A
:0045B73C C7B64500                DWORD 0045B6C7
:0045B740 F2B64500                DWORD 0045B6F2
:0045B744 2AB74500                DWORD 0045B72A


:0045B748 000505050505            add byte ptr [05050505], al
:0045B74E 0505050505              add eax, 05050505
:0045B753 0505050505              add eax, 05050505
:0045B758 0505050505              add eax, 05050505
:0045B75D 0505050505              add eax, 05050505
:0045B762 0505050505              add eax, 05050505
:0045B767 0505050505              add eax, 05050505
:0045B76C 0505050505              add eax, 05050505
:0045B771 0505050505              add eax, 05050505
:0045B776 0505050505              add eax, 05050505
:0045B77B 0505050505              add eax, 05050505
:0045B780 0505050505              add eax, 05050505
:0045B785 0505050505              add eax, 05050505
:0045B78A 0505050505              add eax, 05050505
:0045B78F 0505050505              add eax, 05050505
:0045B794 0505050505              add eax, 05050505
:0045B799 0505050505              add eax, 05050505
:0045B79E 0505050505              add eax, 05050505
:0045B7A3 0505050505              add eax, 05050505
:0045B7A8 0505050505              add eax, 05050505
:0045B7AD 0505050505              add eax, 05050505
:0045B7B2 0505050105              add eax, 05010505
:0045B7B7 0505050505              add eax, 05050505
:0045B7BC 0505050505              add eax, 05050505
:0045B7C1 0505050505              add eax, 05050505
:0045B7C6 0505050505              add eax, 05050505
:0045B7CB 0505050505              add eax, 05050505
:0045B7D0 0505050505              add eax, 05050505
:0045B7D5 0505050505              add eax, 05050505
:0045B7DA 0505050505              add eax, 05050505
:0045B7DF 0505050505              add eax, 05050505
:0045B7E4 0505050505              add eax, 05050505
:0045B7E9 0505050505              add eax, 05050505
:0045B7EE 0505050505              add eax, 05050505
:0045B7F3 0505050505              add eax, 05050505
:0045B7F8 0505050505              add eax, 05050505
:0045B7FD 0505050505              add eax, 05050505
:0045B802 0505050505              add eax, 05050505
:0045B807 0505050505              add eax, 05050505
:0045B80C 0505050505              add eax, 05050505
:0045B811 0505050505              add eax, 05050505
:0045B816 0505050502              add eax, 02050505
:0045B81B 05                      BYTE 05h
:0045B81C 05                      BYTE 05h
:0045B81D 03                      BYTE 03h
:0045B81E 04                      BYTE 04h


* Referenced by a CALL at Addresses:
|:0045B8D9   , :0045B952   
|
:0045B81F 55                      push ebp
:0045B820 8BEC                    mov ebp, esp
:0045B822 83EC0C                  sub esp, 0000000C
:0045B825 6A00                    push 00000000
:0045B827 6A00                    push 00000000
:0045B829 6804100000              push 00001004
:0045B82E 8B4508                  mov eax, dword ptr [ebp+08]
:0045B831 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045B832 FF1504D64B00            Call dword ptr [004BD604]
:0045B838 8945F8                  mov dword ptr [ebp-08], eax
:0045B83B C745F400000000          mov [ebp-0C], 00000000
:0045B842 EB09                    jmp 0045B84D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B878(U)
|
:0045B844 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045B847 83C101                  add ecx, 00000001
:0045B84A 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B842(U)
|
:0045B84D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045B850 3B55F8                  cmp edx, dword ptr [ebp-08]
:0045B853 7D25                    jge 0045B87A

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0045B855 6A02                    push 00000002
:0045B857 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045B85A 50                      push eax
:0045B85B 682C100000              push 0000102C
:0045B860 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045B863 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045B864 FF1504D64B00            Call dword ptr [004BD604]
:0045B86A 8945FC                  mov dword ptr [ebp-04], eax
:0045B86D 837DFC02                cmp dword ptr [ebp-04], 00000002
:0045B871 7505                    jne 0045B878
:0045B873 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045B876 EB05                    jmp 0045B87D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B871(C)
|
:0045B878 EBCA                    jmp 0045B844

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B853(C)
|
:0045B87A 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B876(U)
|
:0045B87D 8BE5                    mov esp, ebp
:0045B87F 5D                      pop ebp
:0045B880 C3                      ret



* Referenced by a CALL at Address:
|:0045AE9B   
|
:0045B881 55                      push ebp
:0045B882 8BEC                    mov ebp, esp
:0045B884 83EC18                  sub esp, 00000018
:0045B887 8B4510                  mov eax, dword ptr [ebp+10]
:0045B88A 8945F8                  mov dword ptr [ebp-08], eax
:0045B88D 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045B890 894DFC                  mov dword ptr [ebp-04], ecx
:0045B893 8B55F8                  mov edx, dword ptr [ebp-08]
:0045B896 8B4208                  mov eax, dword ptr [edx+08]
:0045B899 8945E8                  mov dword ptr [ebp-18], eax
:0045B89C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045B89F 81C196000000            add ecx, 00000096
:0045B8A5 894DE8                  mov dword ptr [ebp-18], ecx
:0045B8A8 817DE894000000          cmp dword ptr [ebp-18], 00000094
:0045B8AF 0F870E010000            ja 0045B9C3
:0045B8B5 8B45E8                  mov eax, dword ptr [ebp-18]
:0045B8B8 33D2                    xor edx, edx
:0045B8BA 8A90E9B94500            mov dl, byte ptr [eax+0045B9E9]
:0045B8C0 FF2495C9B94500          jmp dword ptr [4*edx+0045B9C9]
:0045B8C7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045B8CA 8179040C050000          cmp dword ptr [ecx+04], 0000050C
:0045B8D1 752B                    jne 0045B8FE
:0045B8D3 8B55F8                  mov edx, dword ptr [ebp-08]
:0045B8D6 8B02                    mov eax, dword ptr [edx]
:0045B8D8 50                      push eax
:0045B8D9 E841FFFFFF              call 0045B81F
:0045B8DE 83C404                  add esp, 00000004
:0045B8E1 8945F4                  mov dword ptr [ebp-0C], eax
:0045B8E4 837DF400                cmp dword ptr [ebp-0C], 00000000
:0045B8E8 7D14                    jge 0045B8FE
:0045B8EA 68FF000000              push 000000FF
:0045B8EF B9004E4B00              mov ecx, 004B4E00
:0045B8F4 E8F7070000              call 0045C0F0
:0045B8F9 E9C5000000              jmp 0045B9C3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045B8D1(C), :0045B8E8(C)
|
:0045B8FE E9C0000000              jmp 0045B9C3
:0045B903 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045B906 894DF0                  mov dword ptr [ebp-10], ecx
:0045B909 8B55F0                  mov edx, dword ptr [ebp-10]
:0045B90C 8B4214                  mov eax, dword ptr [edx+14]
:0045B90F 83E002                  and eax, 00000002
:0045B912 85C0                    test eax, eax
:0045B914 7434                    je 0045B94A
:0045B916 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045B919 8B510C                  mov edx, dword ptr [ecx+0C]
:0045B91C 52                      push edx
:0045B91D 8B45F0                  mov eax, dword ptr [ebp-10]
:0045B920 8B08                    mov ecx, dword ptr [eax]
:0045B922 51                      push ecx
:0045B923 E856010000              call 0045BA7E
:0045B928 83C408                  add esp, 00000008
:0045B92B 8845EC                  mov byte ptr [ebp-14], al
:0045B92E 8A55EC                  mov dl, byte ptr [ebp-14]
:0045B931 52                      push edx
:0045B932 B9004E4B00              mov ecx, 004B4E00
:0045B937 E8B4070000              call 0045C0F0
:0045B93C 8B4508                  mov eax, dword ptr [ebp+08]
:0045B93F 50                      push eax
:0045B940 B9004E4B00              mov ecx, 004B4E00
:0045B945 E8BF050000              call 0045BF09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B914(C)
|
:0045B94A EB77                    jmp 0045B9C3
:0045B94C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045B94F 8B11                    mov edx, dword ptr [ecx]
:0045B951 52                      push edx
:0045B952 E8C8FEFFFF              call 0045B81F
:0045B957 83C404                  add esp, 00000004
:0045B95A 85C0                    test eax, eax
:0045B95C 7D02                    jge 0045B960
:0045B95E EB63                    jmp 0045B9C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045B95C(C)
|
:0045B960 B9004E4B00              mov ecx, 004B4E00
:0045B965 E8C6070000              call 0045C130
:0045B96A 25FF000000              and eax, 000000FF
:0045B96F 50                      push eax
:0045B970 8B4508                  mov eax, dword ptr [ebp+08]
:0045B973 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0045B974 FF15D8D54B00            Call dword ptr [004BD5D8]
:0045B97A EB47                    jmp 0045B9C3
:0045B97C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045B97F 51                      push ecx
:0045B980 E838010000              call 0045BABD
:0045B985 83C404                  add esp, 00000004
:0045B988 EB3B                    jmp 0045B9C5
:0045B98A 6A00                    push 00000000
:0045B98C 6AFF                    push FFFFFFFF
:0045B98E 6817100000              push 00001017
:0045B993 8B55FC                  mov edx, dword ptr [ebp-04]
:0045B996 8B02                    mov eax, dword ptr [edx]
:0045B998 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045B999 FF1504D64B00            Call dword ptr [004BD604]
:0045B99F B801000000              mov eax, 00000001
:0045B9A4 EB1F                    jmp 0045B9C5

* Possible StringData Ref from Code Obj ->"USVEEMMUEMU}"
                                  |
:0045B9A6 68DABB4500              push 0045BBDA
:0045B9AB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045B9AE 8B5110                  mov edx, dword ptr [ecx+10]
:0045B9B1 52                      push edx
:0045B9B2 6830100000              push 00001030
:0045B9B7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045B9BA 8B08                    mov ecx, dword ptr [eax]
:0045B9BC 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045B9BD FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045B8AF(C), :0045B8F9(U), :0045B8FE(U), :0045B94A(U), :0045B95E(U)
|:0045B97A(U)
|
:0045B9C3 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045B988(U), :0045B9A4(U)
|
:0045B9C5 8BE5                    mov esp, ebp
:0045B9C7 5D                      pop ebp
:0045B9C8 C3                      ret



:0045B9C9 7CB94500                DWORD 0045B97C
:0045B9CD A6B94500                DWORD 0045B9A6
:0045B9D1 8AB94500                DWORD 0045B98A
:0045B9D5 03B94500                DWORD 0045B903
:0045B9D9 C7B84500                DWORD 0045B8C7
:0045B9DD 4CB94500                DWORD 0045B94C
:0045B9E1 C7B84500                DWORD 0045B8C7
:0045B9E5 C3B94500                DWORD 0045B9C3


:0045B9E9 0007                    add byte ptr [edi], al
:0045B9EB 07                      pop es
:0045B9EC 07                      pop es
:0045B9ED 07                      pop es
:0045B9EE 07                      pop es
:0045B9EF 07                      pop es
:0045B9F0 07                      pop es
:0045B9F1 07                      pop es
:0045B9F2 07                      pop es
:0045B9F3 07                      pop es
:0045B9F4 07                      pop es
:0045B9F5 07                      pop es
:0045B9F6 07                      pop es
:0045B9F7 07                      pop es
:0045B9F8 07                      pop es
:0045B9F9 07                      pop es
:0045B9FA 07                      pop es
:0045B9FB 07                      pop es
:0045B9FC 07                      pop es
:0045B9FD 07                      pop es
:0045B9FE 07                      pop es
:0045B9FF 07                      pop es
:0045BA00 07                      pop es
:0045BA01 07                      pop es
:0045BA02 07                      pop es
:0045BA03 07                      pop es
:0045BA04 07                      pop es
:0045BA05 07                      pop es
:0045BA06 07                      pop es
:0045BA07 07                      pop es
:0045BA08 07                      pop es
:0045BA09 07                      pop es
:0045BA0A 07                      pop es
:0045BA0B 07                      pop es
:0045BA0C 07                      pop es
:0045BA0D 07                      pop es
:0045BA0E 07                      pop es
:0045BA0F 07                      pop es
:0045BA10 07                      pop es
:0045BA11 07                      pop es
:0045BA12 07                      pop es
:0045BA13 0107                    add dword ptr [edi], eax
:0045BA15 07                      pop es
:0045BA16 0207                    add al, byte ptr [edi]
:0045BA18 07                      pop es
:0045BA19 07                      pop es
:0045BA1A 0307                    add eax, dword ptr [edi]
:0045BA1C 07                      pop es
:0045BA1D 07                      pop es
:0045BA1E 07                      pop es
:0045BA1F 07                      pop es
:0045BA20 07                      pop es
:0045BA21 07                      pop es
:0045BA22 07                      pop es
:0045BA23 07                      pop es
:0045BA24 07                      pop es
:0045BA25 07                      pop es
:0045BA26 07                      pop es
:0045BA27 07                      pop es
:0045BA28 07                      pop es
:0045BA29 07                      pop es
:0045BA2A 07                      pop es
:0045BA2B 07                      pop es
:0045BA2C 07                      pop es
:0045BA2D 07                      pop es
:0045BA2E 07                      pop es
:0045BA2F 07                      pop es
:0045BA30 07                      pop es
:0045BA31 07                      pop es
:0045BA32 07                      pop es
:0045BA33 07                      pop es
:0045BA34 07                      pop es
:0045BA35 07                      pop es
:0045BA36 07                      pop es
:0045BA37 07                      pop es
:0045BA38 07                      pop es
:0045BA39 07                      pop es
:0045BA3A 07                      pop es
:0045BA3B 07                      pop es
:0045BA3C 07                      pop es
:0045BA3D 07                      pop es
:0045BA3E 07                      pop es
:0045BA3F 07                      pop es
:0045BA40 07                      pop es
:0045BA41 07                      pop es
:0045BA42 07                      pop es
:0045BA43 07                      pop es
:0045BA44 07                      pop es
:0045BA45 07                      pop es
:0045BA46 07                      pop es
:0045BA47 07                      pop es
:0045BA48 07                      pop es
:0045BA49 07                      pop es
:0045BA4A 07                      pop es
:0045BA4B 07                      pop es
:0045BA4C 07                      pop es
:0045BA4D 07                      pop es
:0045BA4E 07                      pop es
:0045BA4F 07                      pop es
:0045BA50 07                      pop es
:0045BA51 07                      pop es
:0045BA52 07                      pop es
:0045BA53 07                      pop es
:0045BA54 07                      pop es
:0045BA55 07                      pop es
:0045BA56 07                      pop es
:0045BA57 07                      pop es
:0045BA58 07                      pop es
:0045BA59 07                      pop es
:0045BA5A 07                      pop es
:0045BA5B 07                      pop es
:0045BA5C 07                      pop es
:0045BA5D 07                      pop es
:0045BA5E 07                      pop es
:0045BA5F 07                      pop es
:0045BA60 07                      pop es
:0045BA61 07                      pop es
:0045BA62 07                      pop es
:0045BA63 07                      pop es
:0045BA64 07                      pop es
:0045BA65 07                      pop es
:0045BA66 07                      pop es
:0045BA67 07                      pop es
:0045BA68 07                      pop es
:0045BA69 07                      pop es
:0045BA6A 07                      pop es
:0045BA6B 07                      pop es
:0045BA6C 07                      pop es
:0045BA6D 07                      pop es
:0045BA6E 07                      pop es
:0045BA6F 07                      pop es
:0045BA70 07                      pop es
:0045BA71 07                      pop es
:0045BA72 07                      pop es
:0045BA73 07                      pop es
:0045BA74 07                      pop es
:0045BA75 07                      pop es
:0045BA76 07                      pop es
:0045BA77 07                      pop es
:0045BA78 07                      pop es
:0045BA79 07                      pop es
:0045BA7A 0407                    add al, 07
:0045BA7C 05                      BYTE 05h
:0045BA7D 06                      BYTE 06h


* Referenced by a CALL at Address:
|:0045B923   
|
:0045BA7E 55                      push ebp
:0045BA7F 8BEC                    mov ebp, esp
:0045BA81 83EC2C                  sub esp, 0000002C
:0045BA84 8B450C                  mov eax, dword ptr [ebp+0C]
:0045BA87 8945DC                  mov dword ptr [ebp-24], eax
:0045BA8A C745E000000000          mov [ebp-20], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045BA91 C745D804000000          mov [ebp-28], 00000004
:0045BA98 8D4DD8                  lea ecx, dword ptr [ebp-28]
:0045BA9B 51                      push ecx
:0045BA9C 6A00                    push 00000000
:0045BA9E 6805100000              push 00001005
:0045BAA3 8B5508                  mov edx, dword ptr [ebp+08]
:0045BAA6 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045BAA7 FF1504D64B00            Call dword ptr [004BD604]
:0045BAAD 8B45F8                  mov eax, dword ptr [ebp-08]
:0045BAB0 8945D4                  mov dword ptr [ebp-2C], eax
:0045BAB3 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045BAB6 8A4104                  mov al, byte ptr [ecx+04]
:0045BAB9 8BE5                    mov esp, ebp
:0045BABB 5D                      pop ebp
:0045BABC C3                      ret



* Referenced by a CALL at Address:
|:0045B980   
|
:0045BABD 55                      push ebp
:0045BABE 8BEC                    mov ebp, esp
:0045BAC0 83EC0C                  sub esp, 0000000C
:0045BAC3 8B4508                  mov eax, dword ptr [ebp+08]
:0045BAC6 8B482C                  mov ecx, dword ptr [eax+2C]
:0045BAC9 894DF8                  mov dword ptr [ebp-08], ecx
:0045BACC 8B55F8                  mov edx, dword ptr [ebp-08]
:0045BACF 8B02                    mov eax, dword ptr [edx]
:0045BAD1 8945FC                  mov dword ptr [ebp-04], eax
:0045BAD4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BAD7 8B5114                  mov edx, dword ptr [ecx+14]
:0045BADA 8955F4                  mov dword ptr [ebp-0C], edx
:0045BADD 837DF403                cmp dword ptr [ebp-0C], 00000003
:0045BAE1 0F87DA000000            ja 0045BBC1
:0045BAE7 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045BAEA FF2485CABB4500          jmp dword ptr [4*eax+0045BBCA]
:0045BAF1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BAF4 8B55F8                  mov edx, dword ptr [ebp-08]
:0045BAF7 8B4204                  mov eax, dword ptr [edx+04]
:0045BAFA 894128                  mov dword ptr [ecx+28], eax
:0045BAFD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045BB00 E8EB9BFAFF              call 004056F0
:0045BB05 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BB08 894120                  mov dword ptr [ecx+20], eax
:0045BB0B E9B1000000              jmp 0045BBC1
:0045BB10 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045BB13 E8E842FBFF              call 0040FE00
:0045BB18 25FF000000              and eax, 000000FF
:0045BB1D 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045BB1E 68F8174800              push 004817F8
:0045BB23 68E04D4B00              push 004B4DE0

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0045BB28 FF1504D74B00            Call dword ptr [004BD704]
:0045BB2E 83C40C                  add esp, 0000000C
:0045BB31 8B5508                  mov edx, dword ptr [ebp+08]
:0045BB34 C74220E04D4B00          mov [edx+20], 004B4DE0
:0045BB3B E981000000              jmp 0045BBC1
:0045BB40 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045BB43 E8F89BFAFF              call 00405740
:0045BB48 25FF000000              and eax, 000000FF
:0045BB4D 3DFF000000              cmp eax, 000000FF
:0045BB52 741C                    je 0045BB70
:0045BB54 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045BB57 E8E49BFAFF              call 00405740
:0045BB5C 25FF000000              and eax, 000000FF
:0045BB61 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BB64 8B148510D64700          mov edx, dword ptr [4*eax+0047D610]
:0045BB6B 895120                  mov dword ptr [ecx+20], edx
:0045BB6E EB0A                    jmp 0045BB7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BB52(C)
|
:0045BB70 8B4508                  mov eax, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->"S"
                                  |
:0045BB73 C74020FC174800          mov [eax+20], 004817FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BB6E(U)
|
:0045BB7A EB45                    jmp 0045BBC1
:0045BB7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045BB7F E84C050000              call 0045C0D0
:0045BB84 25FF000000              and eax, 000000FF
:0045BB89 85C0                    test eax, eax
:0045BB8B 750C                    jne 0045BB99
:0045BB8D 8B4D08                  mov ecx, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->"ۤv"
                                  |
:0045BB90 C7412004184800          mov [ecx+20], 00481804
:0045BB97 EB28                    jmp 0045BBC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BB8B(C)
|
:0045BB99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045BB9C E82F050000              call 0045C0D0
:0045BBA1 25FF000000              and eax, 000000FF
:0045BBA6 83F801                  cmp eax, 00000001
:0045BBA9 750C                    jne 0045BBB7
:0045BBAB 8B5508                  mov edx, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->""
                                  |
:0045BBAE C742200C184800          mov [edx+20], 0048180C
:0045BBB5 EB0A                    jmp 0045BBC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BBA9(C)
|
:0045BBB7 8B4508                  mov eax, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->"Ƽ"
                                  |
:0045BBBA C7402014184800          mov [eax+20], 00481814

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045BAE1(C), :0045BB0B(U), :0045BB3B(U), :0045BB7A(U), :0045BB97(U)
|:0045BBB5(U)
|
:0045BBC1 B801000000              mov eax, 00000001
:0045BBC6 8BE5                    mov esp, ebp
:0045BBC8 5D                      pop ebp
:0045BBC9 C3                      ret



:0045BBCA F1BA4500                DWORD 0045BAF1
:0045BBCE 10BB4500                DWORD 0045BB10
:0045BBD2 40BB4500                DWORD 0045BB40
:0045BBD6 7CBB4500                DWORD 0045BB7C


:0045BBDA 55                      push ebp
:0045BBDB 8BEC                    mov ebp, esp
:0045BBDD 83EC18                  sub esp, 00000018
:0045BBE0 53                      push ebx
:0045BBE1 56                      push esi
:0045BBE2 8B4508                  mov eax, dword ptr [ebp+08]
:0045BBE5 8945F8                  mov dword ptr [ebp-08], eax
:0045BBE8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045BBEB 894DF4                  mov dword ptr [ebp-0C], ecx
:0045BBEE 8B55F8                  mov edx, dword ptr [ebp-08]
:0045BBF1 8B02                    mov eax, dword ptr [edx]
:0045BBF3 8945F0                  mov dword ptr [ebp-10], eax
:0045BBF6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045BBF9 8B11                    mov edx, dword ptr [ecx]
:0045BBFB 8955EC                  mov dword ptr [ebp-14], edx
:0045BBFE 837DF000                cmp dword ptr [ebp-10], 00000000
:0045BC02 0F84B8000000            je 0045BCC0
:0045BC08 837DEC00                cmp dword ptr [ebp-14], 00000000
:0045BC0C 0F84AE000000            je 0045BCC0
:0045BC12 8B4510                  mov eax, dword ptr [ebp+10]
:0045BC15 8945E8                  mov dword ptr [ebp-18], eax
:0045BC18 837DE803                cmp dword ptr [ebp-18], 00000003
:0045BC1C 0F8797000000            ja 0045BCB9
:0045BC22 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045BC25 FF248DCBBC4500          jmp dword ptr [4*ecx+0045BCCB]
:0045BC2C 8B55F0                  mov edx, dword ptr [ebp-10]
:0045BC2F 52                      push edx
:0045BC30 E8A6000000              call 0045BCDB
:0045BC35 83C404                  add esp, 00000004
:0045BC38 8BF0                    mov esi, eax
:0045BC3A 8B45EC                  mov eax, dword ptr [ebp-14]
:0045BC3D 50                      push eax
:0045BC3E E898000000              call 0045BCDB
:0045BC43 83C404                  add esp, 00000004
:0045BC46 2BF0                    sub esi, eax
:0045BC48 8975FC                  mov dword ptr [ebp-04], esi
:0045BC4B EB73                    jmp 0045BCC0
:0045BC4D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045BC50 E8AB41FBFF              call 0040FE00
:0045BC55 8AD8                    mov bl, al
:0045BC57 81E3FF000000            and ebx, 000000FF
:0045BC5D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045BC60 E89B41FBFF              call 0040FE00
:0045BC65 25FF000000              and eax, 000000FF
:0045BC6A 2BD8                    sub ebx, eax
:0045BC6C 895DFC                  mov dword ptr [ebp-04], ebx
:0045BC6F EB4F                    jmp 0045BCC0
:0045BC71 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045BC74 E8C79AFAFF              call 00405740
:0045BC79 8AD8                    mov bl, al
:0045BC7B 81E3FF000000            and ebx, 000000FF
:0045BC81 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045BC84 E8B79AFAFF              call 00405740
:0045BC89 25FF000000              and eax, 000000FF
:0045BC8E 2BD8                    sub ebx, eax
:0045BC90 895DFC                  mov dword ptr [ebp-04], ebx
:0045BC93 EB2B                    jmp 0045BCC0
:0045BC95 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045BC98 E833040000              call 0045C0D0
:0045BC9D 8AD8                    mov bl, al
:0045BC9F 81E3FF000000            and ebx, 000000FF
:0045BCA5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045BCA8 E823040000              call 0045C0D0
:0045BCAD 25FF000000              and eax, 000000FF
:0045BCB2 2BD8                    sub ebx, eax
:0045BCB4 895DFC                  mov dword ptr [ebp-04], ebx
:0045BCB7 EB07                    jmp 0045BCC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BC1C(C)
|
:0045BCB9 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045BC02(C), :0045BC0C(C), :0045BC4B(U), :0045BC6F(U), :0045BC93(U)
|:0045BCB7(U)
|
:0045BCC0 8B45FC                  mov eax, dword ptr [ebp-04]
:0045BCC3 5E                      pop esi
:0045BCC4 5B                      pop ebx
:0045BCC5 8BE5                    mov esp, ebp
:0045BCC7 5D                      pop ebp
:0045BCC8 C20C00                  ret 000C



:0045BCCB 2CBC4500                DWORD 0045BC2C
:0045BCCF 4DBC4500                DWORD 0045BC4D
:0045BCD3 71BC4500                DWORD 0045BC71
:0045BCD7 95BC4500                DWORD 0045BC95



* Referenced by a CALL at Addresses:
|:0045BC30   , :0045BC3E   
|
:0045BCDB 55                      push ebp
:0045BCDC 8BEC                    mov ebp, esp
:0045BCDE 8B4508                  mov eax, dword ptr [ebp+08]
:0045BCE1 2D001D4B00              sub eax, 004B1D00
:0045BCE6 99                      cdq
:0045BCE7 B931000000              mov ecx, 00000031
:0045BCEC F7F9                    idiv ecx
:0045BCEE 5D                      pop ebp
:0045BCEF C3                      ret



* Referenced by a CALL at Addresses:
|:0045AF67   , :0045C0B5   
|
:0045BCF0 55                      push ebp
:0045BCF1 8BEC                    mov ebp, esp
:0045BCF3 6AFF                    push FFFFFFFF
:0045BCF5 680C9A4700              push 00479A0C
:0045BCFA 64A100000000            mov eax, dword ptr fs:[00000000]
:0045BD00 50                      push eax
:0045BD01 64892500000000          mov dword ptr fs:[00000000], esp
:0045BD08 B804210000              mov eax, 00002104
:0045BD0D E80E380100              call 0046F520
:0045BD12 8D8DF0EEFFFF            lea ecx, dword ptr [ebp+FFFFEEF0]
:0045BD18 E82399FAFF              call 00405640
:0045BD1D C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"HITAREA.E3"
                                  |
:0045BD24 68B0D44700              push 0047D4B0
:0045BD29 8D8DF0EEFFFF            lea ecx, dword ptr [ebp+FFFFEEF0]
:0045BD2F E8A154FBFF              call 004111D5
:0045BD34 8D85F4EFFFFF            lea eax, dword ptr [ebp+FFFFEFF4]
:0045BD3A 50                      push eax
:0045BD3B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BD3E 81E1FF000000            and ecx, 000000FF
:0045BD44 51                      push ecx
:0045BD45 8D8DF0EEFFFF            lea ecx, dword ptr [ebp+FFFFEEF0]
:0045BD4B E8D955FBFF              call 00411329
:0045BD50 8D8DF0EEFFFF            lea ecx, dword ptr [ebp+FFFFEEF0]
:0045BD56 E8CA1EFBFF              call 0040DC25
:0045BD5B 6A0E                    push 0000000E
:0045BD5D E8AD980100              call 0047560F
:0045BD62 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045BD65 6A07                    push 00000007
:0045BD67 E88A9F0100              call 00475CF6
:0045BD6C 83C404                  add esp, 00000004
:0045BD6F 8D95F4EFFFFF            lea edx, dword ptr [ebp+FFFFEFF4]
:0045BD75 52                      push edx
:0045BD76 6A40                    push 00000040
:0045BD78 6A40                    push 00000040
:0045BD7A 6A00                    push 00000000
:0045BD7C 6A00                    push 00000000
:0045BD7E E871AD0100              call 00476AF4
:0045BD83 83C414                  add esp, 00000014

* Possible StringData Ref from Data Obj ->"EFFAREA.E3"
                                  |
:0045BD86 68C0D44700              push 0047D4C0
:0045BD8B 8D8DF0EEFFFF            lea ecx, dword ptr [ebp+FFFFEEF0]
:0045BD91 E83F54FBFF              call 004111D5
:0045BD96 8D85F0DEFFFF            lea eax, dword ptr [ebp+FFFFDEF0]
:0045BD9C 50                      push eax
:0045BD9D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045BDA0 81E1FF000000            and ecx, 000000FF
:0045BDA6 51                      push ecx
:0045BDA7 8D8DF0EEFFFF            lea ecx, dword ptr [ebp+FFFFEEF0]
:0045BDAD E87755FBFF              call 00411329
:0045BDB2 8D8DF0EEFFFF            lea ecx, dword ptr [ebp+FFFFEEF0]
:0045BDB8 E8681EFBFF              call 0040DC25
:0045BDBD 6A0F                    push 0000000F
:0045BDBF E84B980100              call 0047560F
:0045BDC4 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045BDC7 6A07                    push 00000007
:0045BDC9 E8289F0100              call 00475CF6
:0045BDCE 83C404                  add esp, 00000004
:0045BDD1 8D95F0DEFFFF            lea edx, dword ptr [ebp+FFFFDEF0]
:0045BDD7 52                      push edx
:0045BDD8 6A40                    push 00000040
:0045BDDA 6A40                    push 00000040
:0045BDDC 6A00                    push 00000000
:0045BDDE 6A00                    push 00000000
:0045BDE0 E80FAD0100              call 00476AF4
:0045BDE5 83C414                  add esp, 00000014
:0045BDE8 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0045BDEF 8D8DF0EEFFFF            lea ecx, dword ptr [ebp+FFFFEEF0]
:0045BDF5 E86698FAFF              call 00405660
:0045BDFA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045BDFD 64890D00000000          mov dword ptr fs:[00000000], ecx
:0045BE04 8BE5                    mov esp, ebp
:0045BE06 5D                      pop ebp
:0045BE07 C3                      ret



* Referenced by a CALL at Address:
|:0045AE4A   
|
:0045BE08 55                      push ebp
:0045BE09 8BEC                    mov ebp, esp
:0045BE0B 51                      push ecx
:0045BE0C 6A00                    push 00000000
:0045BE0E A144544B00              mov eax, dword ptr [004B5444]
:0045BE13 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045BE14 FF1500D74B00            Call dword ptr [004BD700]
:0045BE1A 6A0E                    push 0000000E
:0045BE1C E8EE970100              call 0047560F
:0045BE21 83C404                  add esp, 00000004
:0045BE24 E843A00100              call 00475E6C
:0045BE29 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045BE2B 6A0A                    push 0000000A
:0045BE2D 6A00                    push 00000000
:0045BE2F E8E99E0100              call 00475D1D
:0045BE34 83C40C                  add esp, 0000000C
:0045BE37 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0045BE3D 51                      push ecx
:0045BE3E 8B1544544B00            mov edx, dword ptr [004B5444]
:0045BE44 52                      push edx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0045BE45 FF15E8D54B00            Call dword ptr [004BD5E8]
:0045BE4B 6A00                    push 00000000
:0045BE4D A148544B00              mov eax, dword ptr [004B5448]
:0045BE52 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045BE53 FF1500D74B00            Call dword ptr [004BD700]
:0045BE59 6A0F                    push 0000000F
:0045BE5B E8AF970100              call 0047560F
:0045BE60 83C404                  add esp, 00000004
:0045BE63 E804A00100              call 00475E6C
:0045BE68 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045BE6A 6A0A                    push 0000000A
:0045BE6C 6A00                    push 00000000
:0045BE6E E8AA9E0100              call 00475D1D
:0045BE73 83C40C                  add esp, 0000000C
:0045BE76 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0045BE7C 51                      push ecx
:0045BE7D 8B1548544B00            mov edx, dword ptr [004B5448]
:0045BE83 52                      push edx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0045BE84 FF15E8D54B00            Call dword ptr [004BD5E8]
:0045BE8A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045BE8D E863F30000              call 0046B1F5
:0045BE92 8845FC                  mov byte ptr [ebp-04], al
:0045BE95 8B45FC                  mov eax, dword ptr [ebp-04]
:0045BE98 25FF000000              and eax, 000000FF
:0045BE9D 3DFF000000              cmp eax, 000000FF
:0045BEA2 740C                    je 0045BEB0
:0045BEA4 6A00                    push 00000000
:0045BEA6 E864970100              call 0047560F
:0045BEAB 83C404                  add esp, 00000004
:0045BEAE EB0A                    jmp 0045BEBA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BEA2(C)
|

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0045BEB0 6A09                    push 00000009
:0045BEB2 E858970100              call 0047560F
:0045BEB7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BEAE(U)
|
:0045BEBA 8BE5                    mov esp, ebp
:0045BEBC 5D                      pop ebp
:0045BEBD C3                      ret



* Referenced by a CALL at Addresses:
|:0045B353   , :0045B3E5   , :0045B5C5   
|
:0045BEBE 55                      push ebp
:0045BEBF 8BEC                    mov ebp, esp
:0045BEC1 83EC08                  sub esp, 00000008
:0045BEC4 894DF8                  mov dword ptr [ebp-08], ecx
:0045BEC7 8B45F8                  mov eax, dword ptr [ebp-08]
:0045BECA 83780C00                cmp dword ptr [eax+0C], 00000000
:0045BECE 7408                    je 0045BED8
:0045BED0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045BED3 8B410C                  mov eax, dword ptr [ecx+0C]
:0045BED6 EB2D                    jmp 0045BF05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BECE(C)
|
:0045BED8 C745FC00000000          mov [ebp-04], 00000000
:0045BEDF EB09                    jmp 0045BEEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BF00(U)
|
:0045BEE1 8B55FC                  mov edx, dword ptr [ebp-04]
:0045BEE4 83C201                  add edx, 00000001
:0045BEE7 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BEDF(U)
|
:0045BEEA 837DFC0A                cmp dword ptr [ebp-04], 0000000A
:0045BEEE 7D12                    jge 0045BF02
:0045BEF0 8B45F8                  mov eax, dword ptr [ebp-08]
:0045BEF3 8B08                    mov ecx, dword ptr [eax]
:0045BEF5 8B55FC                  mov edx, dword ptr [ebp-04]
:0045BEF8 833C9100                cmp dword ptr [ecx+4*edx], 00000000
:0045BEFC 7502                    jne 0045BF00
:0045BEFE EB02                    jmp 0045BF02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BEFC(C)
|
:0045BF00 EBDF                    jmp 0045BEE1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045BEEE(C), :0045BEFE(U)
|
:0045BF02 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BED6(U)
|
:0045BF05 8BE5                    mov esp, ebp
:0045BF07 5D                      pop ebp
:0045BF08 C3                      ret



* Referenced by a CALL at Address:
|:0045B945   
|
:0045BF09 55                      push ebp
:0045BF0A 8BEC                    mov ebp, esp
:0045BF0C 81EC84000000            sub esp, 00000084
:0045BF12 898D7CFFFFFF            mov dword ptr [ebp+FFFFFF7C], ecx
:0045BF18 8B857CFFFFFF            mov eax, dword ptr [ebp+FFFFFF7C]
:0045BF1E 33C9                    xor ecx, ecx
:0045BF20 8A4810                  mov cl, byte ptr [eax+10]
:0045BF23 81F9FF000000            cmp ecx, 000000FF
:0045BF29 7505                    jne 0045BF30
:0045BF2B E933010000              jmp 0045C063

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BF29(C)
|
:0045BF30 8B957CFFFFFF            mov edx, dword ptr [ebp+FFFFFF7C]
:0045BF36 33C0                    xor eax, eax
:0045BF38 8A4210                  mov al, byte ptr [edx+10]
:0045BF3B 8B8D7CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF7C]
:0045BF41 8B5104                  mov edx, dword ptr [ecx+04]
:0045BF44 33C9                    xor ecx, ecx
:0045BF46 8A0C02                  mov cl, byte ptr [edx+eax]
:0045BF49 6BC931                  imul ecx, 00000031
:0045BF4C 81C1001D4B00            add ecx, 004B1D00
:0045BF52 894D80                  mov dword ptr [ebp-80], ecx
:0045BF55 8B957CFFFFFF            mov edx, dword ptr [ebp+FFFFFF7C]
:0045BF5B 33C0                    xor eax, eax
:0045BF5D 8A4210                  mov al, byte ptr [edx+10]
:0045BF60 8B8D7CFFFFFF            mov ecx, dword ptr [ebp+FFFFFF7C]
:0045BF66 8B5104                  mov edx, dword ptr [ecx+04]
:0045BF69 33C9                    xor ecx, ecx
:0045BF6B 8A0C02                  mov cl, byte ptr [edx+eax]
:0045BF6E 51                      push ecx
:0045BF6F 8D5584                  lea edx, dword ptr [ebp-7C]
:0045BF72 52                      push edx
:0045BF73 E82F76FAFF              call 004035A7
:0045BF78 83C408                  add esp, 00000008
:0045BF7B 6A00                    push 00000000
:0045BF7D 8B4D80                  mov ecx, dword ptr [ebp-80]
:0045BF80 E87B3EFBFF              call 0040FE00
:0045BF85 25FF000000              and eax, 000000FF
:0045BF8A 50                      push eax

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0045BF8B 6802040000              push 00000402
:0045BF90 6808040000              push 00000408
:0045BF95 8B4508                  mov eax, dword ptr [ebp+08]
:0045BF98 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0045BF99 FF15D4D54B00            Call dword ptr [004BD5D4]
:0045BF9F 8B4D80                  mov ecx, dword ptr [ebp-80]
:0045BFA2 E8593EFBFF              call 0040FE00
:0045BFA7 25FF000000              and eax, 000000FF
:0045BFAC 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0045BFAD 681C184800              push 0048181C
:0045BFB2 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0045BFB5 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0045BFB6 FF1504D74B00            Call dword ptr [004BD704]
:0045BFBC 83C40C                  add esp, 0000000C
:0045BFBF 8D55F0                  lea edx, dword ptr [ebp-10]
:0045BFC2 52                      push edx

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03FD, "1000"
                                  |
:0045BFC3 68FD030000              push 000003FD
:0045BFC8 8B4508                  mov eax, dword ptr [ebp+08]
:0045BFCB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045BFCC FF1510D64B00            Call dword ptr [004BD610]
:0045BFD2 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045BFD3 FF1514D64B00            Call dword ptr [004BD614]
:0045BFD9 8B4D80                  mov ecx, dword ptr [ebp-80]
:0045BFDC E85F97FAFF              call 00405740
:0045BFE1 8845EC                  mov byte ptr [ebp-14], al
:0045BFE4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045BFE7 81E1FF000000            and ecx, 000000FF
:0045BFED 81F9FF000000            cmp ecx, 000000FF
:0045BFF3 7429                    je 0045C01E
:0045BFF5 8B55EC                  mov edx, dword ptr [ebp-14]
:0045BFF8 81E2FF000000            and edx, 000000FF
:0045BFFE 8B049510D64700          mov eax, dword ptr [4*edx+0047D610]
:0045C005 50                      push eax

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:03FF, "1000"
                                  |
:0045C006 68FF030000              push 000003FF
:0045C00B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C00E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C00F FF1510D64B00            Call dword ptr [004BD610]
:0045C015 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045C016 FF1514D64B00            Call dword ptr [004BD614]
:0045C01C EB1B                    jmp 0045C039

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BFF3(C)
|

* Possible StringData Ref from Data Obj ->"S"
                                  |
:0045C01E 6820184800              push 00481820

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:03FF, "1000"
                                  |
:0045C023 68FF030000              push 000003FF
:0045C028 8B5508                  mov edx, dword ptr [ebp+08]
:0045C02B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C02C FF1510D64B00            Call dword ptr [004BD610]
:0045C032 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045C033 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C01C(U)
|
:0045C039 8D4584                  lea eax, dword ptr [ebp-7C]
:0045C03C 50                      push eax
:0045C03D 682A050000              push 0000052A
:0045C042 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C045 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045C046 FF1510D64B00            Call dword ptr [004BD610]
:0045C04C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045C04D FF1514D64B00            Call dword ptr [004BD614]
:0045C053 8B5580                  mov edx, dword ptr [ebp-80]
:0045C056 52                      push edx
:0045C057 8B4508                  mov eax, dword ptr [ebp+08]
:0045C05A 50                      push eax
:0045C05B E809000000              call 0045C069
:0045C060 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045BF2B(U)
|
:0045C063 8BE5                    mov esp, ebp
:0045C065 5D                      pop ebp
:0045C066 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045C05B   
|
:0045C069 55                      push ebp
:0045C06A 8BEC                    mov ebp, esp
:0045C06C 83EC08                  sub esp, 00000008
:0045C06F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045C072 E8E996FAFF              call 00405760
:0045C077 8845FC                  mov byte ptr [ebp-04], al
:0045C07A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045C07D E8FE96FAFF              call 00405780
:0045C082 8845F8                  mov byte ptr [ebp-08], al
:0045C085 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C088 25FF000000              and eax, 000000FF
:0045C08D 3DFF000000              cmp eax, 000000FF
:0045C092 7504                    jne 0045C098
:0045C094 C645FC10                mov [ebp-04], 10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C092(C)
|
:0045C098 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045C09B 81E1FF000000            and ecx, 000000FF
:0045C0A1 81F9FF000000            cmp ecx, 000000FF
:0045C0A7 7504                    jne 0045C0AD
:0045C0A9 C645F800                mov [ebp-08], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C0A7(C)
|
:0045C0AD 8A55F8                  mov dl, byte ptr [ebp-08]
:0045C0B0 52                      push edx
:0045C0B1 8A45FC                  mov al, byte ptr [ebp-04]
:0045C0B4 50                      push eax
:0045C0B5 E836FCFFFF              call 0045BCF0
:0045C0BA 83C408                  add esp, 00000008
:0045C0BD 8BE5                    mov esp, ebp
:0045C0BF 5D                      pop ebp
:0045C0C0 C3                      ret


:0045C0C1 CC                      int 03
:0045C0C2 CC                      int 03
:0045C0C3 CC                      int 03
:0045C0C4 CC                      int 03
:0045C0C5 CC                      int 03
:0045C0C6 CC                      int 03
:0045C0C7 CC                      int 03
:0045C0C8 CC                      int 03
:0045C0C9 CC                      int 03
:0045C0CA CC                      int 03
:0045C0CB CC                      int 03
:0045C0CC CC                      int 03
:0045C0CD CC                      int 03
:0045C0CE CC                      int 03
:0045C0CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00433753   , :00433BD3   , :00434180   , :0043470F   , :0043477E   
|:0043485B   , :00434BAA   , :00435738   , :004388BB   , :0043BEDE   
|:0043D581   , :0043F96B   , :004419AF   , :0044B832   , :0044DD3E   
|:0044EC70   , :0044EF74   , :0044F4C5   , :0044F9EE   , :00450C8E   
|:00450F97   , :0045266B   , :0045268E   , :00452732   , :0045506A   
|:004552DE   , :0045BB7F   , :0045BB9C   , :0045BC98   , :0045BCA8   
|:0045C233   , :0045CC2A   , :0045E12D   , :0045E29E   , :0045E72F   
|:0045E824   , :0045ECFB   , :0045EF89   , :0045F114   , :0045F200   
|:0045F615   , :0045F7ED   , :0045F86C   , :0045F9A5   , :0045FB56   
|:0045FDB8   , :004602C5   , :0046035B   , :004603C3   , :00460488   
|:00460619   , :0046081D   , :004608E5   , :00460B98   , :00460CC1   
|:00460D8C   , :0046B240   , :0046C958   
|
:0045C0D0 55                      push ebp
:0045C0D1 8BEC                    mov ebp, esp
:0045C0D3 51                      push ecx
:0045C0D4 894DFC                  mov dword ptr [ebp-04], ecx
:0045C0D7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C0DA 8A400B                  mov al, byte ptr [eax+0B]
:0045C0DD 8BE5                    mov esp, ebp
:0045C0DF 5D                      pop ebp
:0045C0E0 C3                      ret


:0045C0E1 CC                      int 03
:0045C0E2 CC                      int 03
:0045C0E3 CC                      int 03
:0045C0E4 CC                      int 03
:0045C0E5 CC                      int 03
:0045C0E6 CC                      int 03
:0045C0E7 CC                      int 03
:0045C0E8 CC                      int 03
:0045C0E9 CC                      int 03
:0045C0EA CC                      int 03
:0045C0EB CC                      int 03
:0045C0EC CC                      int 03
:0045C0ED CC                      int 03
:0045C0EE CC                      int 03
:0045C0EF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040F7C7   , :0045AD55   , :0045B05B   , :0045B8F4   , :0045B937   
|
:0045C0F0 55                      push ebp
:0045C0F1 8BEC                    mov ebp, esp
:0045C0F3 51                      push ecx
:0045C0F4 894DFC                  mov dword ptr [ebp-04], ecx
:0045C0F7 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C0FA 8A4D08                  mov cl, byte ptr [ebp+08]
:0045C0FD 884810                  mov byte ptr [eax+10], cl
:0045C100 8BE5                    mov esp, ebp
:0045C102 5D                      pop ebp
:0045C103 C20400                  ret 0004


:0045C106 CC                      int 03
:0045C107 CC                      int 03
:0045C108 CC                      int 03
:0045C109 CC                      int 03
:0045C10A CC                      int 03
:0045C10B CC                      int 03
:0045C10C CC                      int 03
:0045C10D CC                      int 03
:0045C10E CC                      int 03
:0045C10F CC                      int 03

* Referenced by a CALL at Address:
|:0045AD46   
|
:0045C110 55                      push ebp
:0045C111 8BEC                    mov ebp, esp
:0045C113 51                      push ecx
:0045C114 894DFC                  mov dword ptr [ebp-04], ecx
:0045C117 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C11A C7400C00000000          mov [eax+0C], 00000000
:0045C121 8BE5                    mov esp, ebp
:0045C123 5D                      pop ebp
:0045C124 C3                      ret


:0045C125 CC                      int 03
:0045C126 CC                      int 03
:0045C127 CC                      int 03
:0045C128 CC                      int 03
:0045C129 CC                      int 03
:0045C12A CC                      int 03
:0045C12B CC                      int 03
:0045C12C CC                      int 03
:0045C12D CC                      int 03
:0045C12E CC                      int 03
:0045C12F CC                      int 03

* Referenced by a CALL at Addresses:
|:004053C6   , :00405436   , :0040F9A2   , :0044D5A9   , :0044D5C5   
|:0045B37F   , :0045B69F   , :0045B965   
|
:0045C130 55                      push ebp
:0045C131 8BEC                    mov ebp, esp
:0045C133 51                      push ecx
:0045C134 894DFC                  mov dword ptr [ebp-04], ecx
:0045C137 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C13A 8A4010                  mov al, byte ptr [eax+10]
:0045C13D 8BE5                    mov esp, ebp
:0045C13F 5D                      pop ebp
:0045C140 C3                      ret


:0045C141 CC                      int 03
:0045C142 CC                      int 03
:0045C143 CC                      int 03
:0045C144 CC                      int 03
:0045C145 CC                      int 03
:0045C146 CC                      int 03
:0045C147 CC                      int 03
:0045C148 CC                      int 03
:0045C149 CC                      int 03
:0045C14A CC                      int 03
:0045C14B CC                      int 03
:0045C14C CC                      int 03
:0045C14D CC                      int 03
:0045C14E CC                      int 03
:0045C14F CC                      int 03
:0045C150 55                      push ebp
:0045C151 8BEC                    mov ebp, esp
:0045C153 E807000000              call 0045C15F
:0045C158 E811000000              call 0045C16E
:0045C15D 5D                      pop ebp
:0045C15E C3                      ret



* Referenced by a CALL at Address:
|:0045C153   
|
:0045C15F 55                      push ebp
:0045C160 8BEC                    mov ebp, esp
:0045C162 B9784E4B00              mov ecx, 004B4E78
:0045C167 E8F4350000              call 0045F760
:0045C16C 5D                      pop ebp
:0045C16D C3                      ret



* Referenced by a CALL at Address:
|:0045C158   
|
:0045C16E 55                      push ebp
:0045C16F 8BEC                    mov ebp, esp
:0045C171 6880C14500              push 0045C180
:0045C176 E835330100              call 0046F4B0
:0045C17B 83C404                  add esp, 00000004
:0045C17E 5D                      pop ebp
:0045C17F C3                      ret


:0045C180 55                      push ebp
:0045C181 8BEC                    mov ebp, esp
:0045C183 B9784E4B00              mov ecx, 004B4E78
:0045C188 E87328FDFF              call 0042EA00
:0045C18D 5D                      pop ebp
:0045C18E C3                      ret


:0045C18F 55                      push ebp
:0045C190 8BEC                    mov ebp, esp
:0045C192 E802000000              call 0045C199
:0045C197 5D                      pop ebp
:0045C198 C3                      ret



* Referenced by a CALL at Address:
|:0045C192   
|
:0045C199 55                      push ebp
:0045C19A 8BEC                    mov ebp, esp
:0045C19C B9C44E4B00              mov ecx, 004B4EC4
:0045C1A1 E84A95FAFF              call 004056F0
:0045C1A6 5D                      pop ebp
:0045C1A7 C3                      ret



* Referenced by a CALL at Address:
|:0045EB61   
|
:0045C1A8 55                      push ebp
:0045C1A9 8BEC                    mov ebp, esp
:0045C1AB 51                      push ecx
:0045C1AC B9784E4B00              mov ecx, 004B4E78
:0045C1B1 E88AADFDFF              call 00436F40
:0045C1B6 25FF000000              and eax, 000000FF
:0045C1BB 85C0                    test eax, eax
:0045C1BD 750F                    jne 0045C1CE
:0045C1BF 6A00                    push 00000000
:0045C1C1 B9806D4800              mov ecx, 00486D80
:0045C1C6 E88CFFFAFF              call 0040C157
:0045C1CB 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C1BD(C)
|
:0045C1CE 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C1D1 8BE5                    mov esp, ebp
:0045C1D3 5D                      pop ebp
:0045C1D4 C3                      ret



* Referenced by a CALL at Address:
|:0045F45D   
|
:0045C1D5 55                      push ebp
:0045C1D6 8BEC                    mov ebp, esp
:0045C1D8 51                      push ecx
:0045C1D9 894DFC                  mov dword ptr [ebp-04], ecx
:0045C1DC 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C1DF C6403000                mov [eax+30], 00
:0045C1E3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C1E6 C6413100                mov [ecx+31], 00
:0045C1EA 8BE5                    mov esp, ebp
:0045C1EC 5D                      pop ebp
:0045C1ED C3                      ret



* Referenced by a CALL at Addresses:
|:004411C6   , :0044F0BB   , :0045C5DD   , :0045C712   
|
:0045C1EE 55                      push ebp
:0045C1EF 8BEC                    mov ebp, esp
:0045C1F1 83EC08                  sub esp, 00000008
:0045C1F4 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045C1F7 6A03                    push 00000003
:0045C1F9 E811940100              call 0047560F
:0045C1FE 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045C201 6A07                    push 00000007
:0045C203 E8EE9A0100              call 00475CF6
:0045C208 83C404                  add esp, 00000004
:0045C20B C745FC00000000          mov [ebp-04], 00000000
:0045C212 EB09                    jmp 0045C21D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C386(U)
|
:0045C214 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C217 83C001                  add eax, 00000001
:0045C21A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C212(U)
|
:0045C21D 837DFC5A                cmp dword ptr [ebp-04], 0000005A
:0045C221 0F8D64010000            jnl 0045C38B
:0045C227 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C22A 6BC924                  imul ecx, 00000024
:0045C22D 81C1B83B4B00            add ecx, 004B3BB8
:0045C233 E898FEFFFF              call 0045C0D0
:0045C238 25FF000000              and eax, 000000FF
:0045C23D 83F802                  cmp eax, 00000002
:0045C240 0F8540010000            jne 0045C386
:0045C246 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C249 6BC924                  imul ecx, 00000024
:0045C24C 81C1B83B4B00            add ecx, 004B3BB8
:0045C252 E8E15EFDFF              call 00432138
:0045C257 25FF000000              and eax, 000000FF
:0045C25C 83F802                  cmp eax, 00000002
:0045C25F 7510                    jne 0045C271
:0045C261 6A00                    push 00000000
:0045C263 6A0C                    push 0000000C
:0045C265 6A00                    push 00000000
:0045C267 E8B19A0100              call 00475D1D
:0045C26C 83C40C                  add esp, 0000000C
:0045C26F EB63                    jmp 0045C2D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C25F(C)
|
:0045C271 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C274 6BC924                  imul ecx, 00000024
:0045C277 81C1B83B4B00            add ecx, 004B3BB8
:0045C27D E8B65EFDFF              call 00432138
:0045C282 25FF000000              and eax, 000000FF
:0045C287 85C0                    test eax, eax
:0045C289 7510                    jne 0045C29B
:0045C28B 6A00                    push 00000000
:0045C28D 6A0B                    push 0000000B
:0045C28F 6A00                    push 00000000
:0045C291 E8879A0100              call 00475D1D
:0045C296 83C40C                  add esp, 0000000C
:0045C299 EB39                    jmp 0045C2D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C289(C)
|
:0045C29B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C29E 6BC924                  imul ecx, 00000024
:0045C2A1 81C1B83B4B00            add ecx, 004B3BB8
:0045C2A7 E88C5EFDFF              call 00432138
:0045C2AC 25FF000000              and eax, 000000FF
:0045C2B1 83F803                  cmp eax, 00000003
:0045C2B4 7510                    jne 0045C2C6
:0045C2B6 6A00                    push 00000000
:0045C2B8 6A2E                    push 0000002E
:0045C2BA 6A00                    push 00000000
:0045C2BC E85C9A0100              call 00475D1D
:0045C2C1 83C40C                  add esp, 0000000C
:0045C2C4 EB0E                    jmp 0045C2D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C2B4(C)
|
:0045C2C6 6A00                    push 00000000
:0045C2C8 6A78                    push 00000078
:0045C2CA 6A00                    push 00000000
:0045C2CC E84C9A0100              call 00475D1D
:0045C2D1 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045C26F(U), :0045C299(U), :0045C2C4(U)
|
:0045C2D4 E85A3EFBFF              call 00410133
:0045C2D9 6A00                    push 00000000
:0045C2DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C2DE 6BC924                  imul ecx, 00000024
:0045C2E1 81C1B83B4B00            add ecx, 004B3BB8
:0045C2E7 E85459FDFF              call 00431C40
:0045C2EC 33C9                    xor ecx, ecx
:0045C2EE 8A4801                  mov cl, byte ptr [eax+01]
:0045C2F1 8D540902                lea edx, dword ptr [ecx+ecx+02]
:0045C2F5 6BD203                  imul edx, 00000003
:0045C2F8 8B45F8                  mov eax, dword ptr [ebp-08]
:0045C2FB 33C9                    xor ecx, ecx
:0045C2FD 8A4831                  mov cl, byte ptr [eax+31]
:0045C300 8D540AFE                lea edx, dword ptr [edx+ecx-02]
:0045C304 52                      push edx
:0045C305 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C308 6BC924                  imul ecx, 00000024
:0045C30B 81C1B83B4B00            add ecx, 004B3BB8
:0045C311 E82A59FDFF              call 00431C40
:0045C316 33C9                    xor ecx, ecx
:0045C318 8A08                    mov cl, byte ptr [eax]
:0045C31A 8D540902                lea edx, dword ptr [ecx+ecx+02]
:0045C31E 6BD203                  imul edx, 00000003
:0045C321 8B45F8                  mov eax, dword ptr [ebp-08]
:0045C324 33C9                    xor ecx, ecx
:0045C326 8A4830                  mov cl, byte ptr [eax+30]
:0045C329 8D540AFE                lea edx, dword ptr [edx+ecx-02]
:0045C32D 52                      push edx
:0045C32E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C331 6BC924                  imul ecx, 00000024
:0045C334 81C1B83B4B00            add ecx, 004B3BB8
:0045C33A E80159FDFF              call 00431C40
:0045C33F 33C9                    xor ecx, ecx
:0045C341 8A4801                  mov cl, byte ptr [eax+01]
:0045C344 D1E1                    shl ecx, 1
:0045C346 6BC903                  imul ecx, 00000003
:0045C349 8B55F8                  mov edx, dword ptr [ebp-08]
:0045C34C 33C0                    xor eax, eax
:0045C34E 8A4231                  mov al, byte ptr [edx+31]
:0045C351 03C8                    add ecx, eax
:0045C353 51                      push ecx
:0045C354 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C357 6BC924                  imul ecx, 00000024
:0045C35A 81C1B83B4B00            add ecx, 004B3BB8
:0045C360 E8DB58FDFF              call 00431C40
:0045C365 33C9                    xor ecx, ecx
:0045C367 8A08                    mov cl, byte ptr [eax]
:0045C369 D1E1                    shl ecx, 1
:0045C36B 6BC903                  imul ecx, 00000003
:0045C36E 8B55F8                  mov edx, dword ptr [ebp-08]
:0045C371 33C0                    xor eax, eax
:0045C373 8A4230                  mov al, byte ptr [edx+30]
:0045C376 03C8                    add ecx, eax
:0045C378 51                      push ecx
:0045C379 E89EA20100              call 0047661C
:0045C37E 83C414                  add esp, 00000014
:0045C381 E8C83DFBFF              call 0041014E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C240(C)
|
:0045C386 E989FEFFFF              jmp 0045C214

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C221(C)
|
:0045C38B 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045C38D 6A0A                    push 0000000A
:0045C38F 6A00                    push 00000000
:0045C391 E887990100              call 00475D1D
:0045C396 83C40C                  add esp, 0000000C
:0045C399 6A00                    push 00000000
:0045C39B E86F920100              call 0047560F
:0045C3A0 83C404                  add esp, 00000004
:0045C3A3 8BE5                    mov esp, ebp
:0045C3A5 5D                      pop ebp
:0045C3A6 C3                      ret



* Referenced by a CALL at Addresses:
|:0044D985   , :0045C72A   , :0045F581   , :0045F70F   , :0046E651   
|:0046E858   
|
:0045C3A7 55                      push ebp
:0045C3A8 8BEC                    mov ebp, esp
:0045C3AA 51                      push ecx
:0045C3AB 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045C3AE 6A03                    push 00000003
:0045C3B0 E85A920100              call 0047560F
:0045C3B5 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045C3B8 6A07                    push 00000007
:0045C3BA E837990100              call 00475CF6
:0045C3BF 83C404                  add esp, 00000004
:0045C3C2 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C3C5 83784400                cmp dword ptr [eax+44], 00000000
:0045C3C9 7435                    je 0045C400
:0045C3CB 6A01                    push 00000001
:0045C3CD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C3D0 83C134                  add ecx, 00000034
:0045C3D3 83EC10                  sub esp, 00000010
:0045C3D6 8BD4                    mov edx, esp
:0045C3D8 8B01                    mov eax, dword ptr [ecx]
:0045C3DA 8902                    mov dword ptr [edx], eax
:0045C3DC 8B4104                  mov eax, dword ptr [ecx+04]
:0045C3DF 894204                  mov dword ptr [edx+04], eax
:0045C3E2 8B4108                  mov eax, dword ptr [ecx+08]
:0045C3E5 894208                  mov dword ptr [edx+08], eax
:0045C3E8 8B490C                  mov ecx, dword ptr [ecx+0C]
:0045C3EB 894A0C                  mov dword ptr [edx+0C], ecx
:0045C3EE E8F0BA0000              call 00467EE3
:0045C3F3 83C414                  add esp, 00000014
:0045C3F6 8B55FC                  mov edx, dword ptr [ebp-04]
:0045C3F9 C7424400000000          mov [edx+44], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C3C9(C)
|
:0045C400 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C403 83784400                cmp dword ptr [eax+44], 00000000
:0045C407 0F85B1000000            jne 0045C4BE
:0045C40D B958494B00              mov ecx, 004B4958
:0045C412 E89024FFFF              call 0044E8A7
:0045C417 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C41A 33D2                    xor edx, edx
:0045C41C 8A5130                  mov dl, byte ptr [ecx+30]
:0045C41F 8D0442                  lea eax, dword ptr [edx+2*eax]
:0045C422 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C425 894134                  mov dword ptr [ecx+34], eax
:0045C428 B958494B00              mov ecx, 004B4958
:0045C42D E89C24FFFF              call 0044E8CE
:0045C432 8B55FC                  mov edx, dword ptr [ebp-04]
:0045C435 33C9                    xor ecx, ecx
:0045C437 8A4A31                  mov cl, byte ptr [edx+31]
:0045C43A 8D1441                  lea edx, dword ptr [ecx+2*eax]
:0045C43D 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C440 895038                  mov dword ptr [eax+38], edx
:0045C443 B958494B00              mov ecx, 004B4958
:0045C448 E8F624FFFF              call 0044E943
:0045C44D 99                      cdq
:0045C44E 83E207                  and edx, 00000007
:0045C451 03C2                    add eax, edx
:0045C453 C1F803                  sar eax, 03
:0045C456 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C459 8B5134                  mov edx, dword ptr [ecx+34]
:0045C45C 8D4402FE                lea eax, dword ptr [edx+eax-02]
:0045C460 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C463 89413C                  mov dword ptr [ecx+3C], eax
:0045C466 B958494B00              mov ecx, 004B4958
:0045C46B E8FA24FFFF              call 0044E96A
:0045C470 99                      cdq
:0045C471 83E207                  and edx, 00000007
:0045C474 03C2                    add eax, edx
:0045C476 C1F803                  sar eax, 03
:0045C479 8B55FC                  mov edx, dword ptr [ebp-04]
:0045C47C 8B4A38                  mov ecx, dword ptr [edx+38]
:0045C47F 8D5401FE                lea edx, dword ptr [ecx+eax-02]
:0045C483 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C486 895040                  mov dword ptr [eax+40], edx
:0045C489 6A00                    push 00000000
:0045C48B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C48E 83C134                  add ecx, 00000034
:0045C491 83EC10                  sub esp, 00000010
:0045C494 8BD4                    mov edx, esp
:0045C496 8B01                    mov eax, dword ptr [ecx]
:0045C498 8902                    mov dword ptr [edx], eax
:0045C49A 8B4104                  mov eax, dword ptr [ecx+04]
:0045C49D 894204                  mov dword ptr [edx+04], eax
:0045C4A0 8B4108                  mov eax, dword ptr [ecx+08]
:0045C4A3 894208                  mov dword ptr [edx+08], eax
:0045C4A6 8B490C                  mov ecx, dword ptr [ecx+0C]
:0045C4A9 894A0C                  mov dword ptr [edx+0C], ecx
:0045C4AC E832BA0000              call 00467EE3
:0045C4B1 83C414                  add esp, 00000014
:0045C4B4 8B55FC                  mov edx, dword ptr [ebp-04]
:0045C4B7 C7424401000000          mov [edx+44], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C407(C)
|
:0045C4BE 6A00                    push 00000000
:0045C4C0 E84A910100              call 0047560F
:0045C4C5 83C404                  add esp, 00000004
:0045C4C8 8BE5                    mov esp, ebp
:0045C4CA 5D                      pop ebp
:0045C4CB C3                      ret



* Referenced by a CALL at Address:
|:00467E38   
|
:0045C4CC 55                      push ebp
:0045C4CD 8BEC                    mov ebp, esp
:0045C4CF 51                      push ecx
:0045C4D0 894DFC                  mov dword ptr [ebp-04], ecx
:0045C4D3 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C4D6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C4D9 8B11                    mov edx, dword ptr [ecx]
:0045C4DB 895034                  mov dword ptr [eax+34], edx
:0045C4DE 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C4E1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C4E4 8B5108                  mov edx, dword ptr [ecx+08]
:0045C4E7 89503C                  mov dword ptr [eax+3C], edx
:0045C4EA 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C4ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C4F0 8B5104                  mov edx, dword ptr [ecx+04]
:0045C4F3 895038                  mov dword ptr [eax+38], edx
:0045C4F6 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C4F9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045C4FC 8B510C                  mov edx, dword ptr [ecx+0C]
:0045C4FF 895040                  mov dword ptr [eax+40], edx
:0045C502 8BE5                    mov esp, ebp
:0045C504 5D                      pop ebp
:0045C505 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045F49F   
|
:0045C508 55                      push ebp
:0045C509 8BEC                    mov ebp, esp
:0045C50B 6AFF                    push FFFFFFFF
:0045C50D 682C9A4700              push 00479A2C
:0045C512 64A100000000            mov eax, dword ptr fs:[00000000]
:0045C518 50                      push eax
:0045C519 64892500000000          mov dword ptr fs:[00000000], esp
:0045C520 81EC08010000            sub esp, 00000108
:0045C526 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:0045C52C 6A00                    push 00000000
:0045C52E A118544B00              mov eax, dword ptr [004B5418]
:0045C533 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045C534 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045C53A 6A03                    push 00000003
:0045C53C E8CE900100              call 0047560F
:0045C541 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045C544 6A07                    push 00000007
:0045C546 E8AB970100              call 00475CF6
:0045C54B 83C404                  add esp, 00000004
:0045C54E 6A00                    push 00000000
:0045C550 6A10                    push 00000010
:0045C552 6A00                    push 00000000
:0045C554 E8C4970100              call 00475D1D
:0045C559 83C40C                  add esp, 0000000C
:0045C55C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C562 E8D990FAFF              call 00405640
:0045C567 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"SMLMAP.E3"
                                  |
:0045C56E 68D0D44700              push 0047D4D0
:0045C573 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C579 E8574CFBFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045C57E 6A04                    push 00000004
:0045C580 6A00                    push 00000000
:0045C582 6A00                    push 00000000
:0045C584 B9B81C4B00              mov ecx, 004B1CB8
:0045C589 E802CA0100              call 00478F90
:0045C58E 50                      push eax
:0045C58F 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0045C595 33D2                    xor edx, edx
:0045C597 8A11                    mov dl, byte ptr [ecx]
:0045C599 52                      push edx
:0045C59A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C5A0 E8844DFBFF              call 00411329
:0045C5A5 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C5AB E87516FBFF              call 0040DC25
:0045C5B0 B9B81C4B00              mov ecx, 004B1CB8
:0045C5B5 E80639FBFF              call 0040FEC0
:0045C5BA 50                      push eax
:0045C5BB 8B4514                  mov eax, dword ptr [ebp+14]
:0045C5BE D1E0                    shl eax, 1
:0045C5C0 50                      push eax
:0045C5C1 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045C5C4 D1E1                    shl ecx, 1
:0045C5C6 51                      push ecx
:0045C5C7 8B550C                  mov edx, dword ptr [ebp+0C]
:0045C5CA 52                      push edx
:0045C5CB 8B4508                  mov eax, dword ptr [ebp+08]
:0045C5CE 50                      push eax
:0045C5CF E820A50100              call 00476AF4
:0045C5D4 83C414                  add esp, 00000014
:0045C5D7 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0045C5DD E80CFCFFFF              call 0045C1EE
:0045C5E2 6A00                    push 00000000
:0045C5E4 8B0D1C544B00            mov ecx, dword ptr [004B541C]
:0045C5EA 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045C5EB FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045C5F1 6A04                    push 00000004
:0045C5F3 E817900100              call 0047560F
:0045C5F8 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045C5FB 6A07                    push 00000007
:0045C5FD E8F4960100              call 00475CF6
:0045C602 83C404                  add esp, 00000004
:0045C605 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045C607 6A0A                    push 0000000A
:0045C609 6A00                    push 00000000
:0045C60B E80D970100              call 00475D1D
:0045C610 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045C613 6A04                    push 00000004
:0045C615 6A00                    push 00000000
:0045C617 B9784E4B00              mov ecx, 004B4E78
:0045C61C E85E2D0000              call 0045F37F
:0045C621 25FF000000              and eax, 000000FF
:0045C626 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045C627 B903000000              mov ecx, 00000003
:0045C62C F7F9                    idiv ecx
:0045C62E C1E20A                  shl edx, 0A
:0045C631 81C2801D0000            add edx, 00001D80
:0045C637 52                      push edx
:0045C638 B9A01C4B00              mov ecx, 004B1CA0
:0045C63D E84EC90100              call 00478F90
:0045C642 50                      push eax
:0045C643 8B1534B04700            mov edx, dword ptr [0047B034]
:0045C649 52                      push edx
:0045C64A A130B04700              mov eax, dword ptr [0047B030]
:0045C64F 50                      push eax
:0045C650 6A00                    push 00000000
:0045C652 6A00                    push 00000000
:0045C654 E89BA40100              call 00476AF4
:0045C659 83C414                  add esp, 00000014
:0045C65C 6A00                    push 00000000
:0045C65E E8AC8F0100              call 0047560F
:0045C663 83C404                  add esp, 00000004
:0045C666 E818AF0000              call 00467583
:0045C66B C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0045C672 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C678 E8E38FFAFF              call 00405660
:0045C67D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045C680 64890D00000000          mov dword ptr fs:[00000000], ecx
:0045C687 8BE5                    mov esp, ebp
:0045C689 5D                      pop ebp
:0045C68A C21000                  ret 0010



* Referenced by a CALL at Address:
|:0045F6C1   
|
:0045C68D 55                      push ebp
:0045C68E 8BEC                    mov ebp, esp
:0045C690 6AFF                    push FFFFFFFF
:0045C692 68429A4700              push 00479A42
:0045C697 64A100000000            mov eax, dword ptr fs:[00000000]
:0045C69D 50                      push eax
:0045C69E 64892500000000          mov dword ptr fs:[00000000], esp
:0045C6A5 81EC08010000            sub esp, 00000108
:0045C6AB 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:0045C6B1 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C6B7 E8848FFAFF              call 00405640
:0045C6BC C745FC00000000          mov [ebp-04], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045C6C3 6A03                    push 00000003
:0045C6C5 E8458F0100              call 0047560F
:0045C6CA 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045C6CD 6A07                    push 00000007
:0045C6CF E822960100              call 00475CF6
:0045C6D4 83C404                  add esp, 00000004
:0045C6D7 6A00                    push 00000000
:0045C6D9 6A10                    push 00000010
:0045C6DB 6A00                    push 00000000
:0045C6DD E83B960100              call 00475D1D
:0045C6E2 83C40C                  add esp, 0000000C
:0045C6E5 B9B81C4B00              mov ecx, 004B1CB8
:0045C6EA E8D137FBFF              call 0040FEC0
:0045C6EF 50                      push eax
:0045C6F0 8B4514                  mov eax, dword ptr [ebp+14]
:0045C6F3 D1E0                    shl eax, 1
:0045C6F5 50                      push eax
:0045C6F6 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045C6F9 D1E1                    shl ecx, 1
:0045C6FB 51                      push ecx
:0045C6FC 8B550C                  mov edx, dword ptr [ebp+0C]
:0045C6FF 52                      push edx
:0045C700 8B4508                  mov eax, dword ptr [ebp+08]
:0045C703 50                      push eax
:0045C704 E8EBA30100              call 00476AF4
:0045C709 83C414                  add esp, 00000014
:0045C70C 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0045C712 E8D7FAFFFF              call 0045C1EE
:0045C717 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0045C71D C7414400000000          mov [ecx+44], 00000000
:0045C724 8B8DECFEFFFF            mov ecx, dword ptr [ebp+FFFFFEEC]
:0045C72A E878FCFFFF              call 0045C3A7

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045C72F 6A04                    push 00000004
:0045C731 E8D98E0100              call 0047560F
:0045C736 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045C739 6A07                    push 00000007
:0045C73B E8B6950100              call 00475CF6
:0045C740 83C404                  add esp, 00000004
:0045C743 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045C745 6A0A                    push 0000000A
:0045C747 6A00                    push 00000000
:0045C749 E8CF950100              call 00475D1D
:0045C74E 83C40C                  add esp, 0000000C

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045C751 6A04                    push 00000004
:0045C753 6A00                    push 00000000
:0045C755 B9784E4B00              mov ecx, 004B4E78
:0045C75A E8202C0000              call 0045F37F
:0045C75F 25FF000000              and eax, 000000FF
:0045C764 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045C765 B903000000              mov ecx, 00000003
:0045C76A F7F9                    idiv ecx
:0045C76C C1E20A                  shl edx, 0A
:0045C76F 81C2801D0000            add edx, 00001D80
:0045C775 52                      push edx
:0045C776 B9A01C4B00              mov ecx, 004B1CA0
:0045C77B E810C80100              call 00478F90
:0045C780 50                      push eax
:0045C781 8B1534B04700            mov edx, dword ptr [0047B034]
:0045C787 52                      push edx
:0045C788 A130B04700              mov eax, dword ptr [0047B030]
:0045C78D 50                      push eax
:0045C78E 6A00                    push 00000000
:0045C790 6A00                    push 00000000
:0045C792 E85DA30100              call 00476AF4
:0045C797 83C414                  add esp, 00000014
:0045C79A 6A00                    push 00000000
:0045C79C E86E8E0100              call 0047560F
:0045C7A1 83C404                  add esp, 00000004
:0045C7A4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0045C7AB 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C7B1 E8AA8EFAFF              call 00405660
:0045C7B6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045C7B9 64890D00000000          mov dword ptr fs:[00000000], ecx
:0045C7C0 8BE5                    mov esp, ebp
:0045C7C2 5D                      pop ebp
:0045C7C3 C21000                  ret 0010



* Referenced by a CALL at Address:
|:0045C990   
|
:0045C7C6 55                      push ebp
:0045C7C7 8BEC                    mov ebp, esp
:0045C7C9 6AFF                    push FFFFFFFF
:0045C7CB 68589A4700              push 00479A58
:0045C7D0 64A100000000            mov eax, dword ptr fs:[00000000]
:0045C7D6 50                      push eax
:0045C7D7 64892500000000          mov dword ptr fs:[00000000], esp
:0045C7DE 81EC08010000            sub esp, 00000108
:0045C7E4 898DECFEFFFF            mov dword ptr [ebp+FFFFFEEC], ecx
:0045C7EA 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C7F0 E84B8EFAFF              call 00405640
:0045C7F5 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"HEXZMAP.E3"
                                  |
:0045C7FC 6848D54700              push 0047D548
:0045C801 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C807 E8C949FBFF              call 004111D5
:0045C80C B9F0174B00              mov ecx, 004B17F0
:0045C811 E8AA36FBFF              call 0040FEC0
:0045C816 50                      push eax
:0045C817 8B85ECFEFFFF            mov eax, dword ptr [ebp+FFFFFEEC]
:0045C81D 33C9                    xor ecx, ecx
:0045C81F 8A08                    mov cl, byte ptr [eax]
:0045C821 51                      push ecx
:0045C822 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C828 E8FC4AFBFF              call 00411329
:0045C82D 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C833 E8ED13FBFF              call 0040DC25

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045C838 6A04                    push 00000004
:0045C83A 6A00                    push 00000000
:0045C83C 6A00                    push 00000000
:0045C83E B9F0174B00              mov ecx, 004B17F0
:0045C843 E848C70100              call 00478F90
:0045C848 33D2                    xor edx, edx
:0045C84A 8A10                    mov dl, byte ptr [eax]
:0045C84C 8BC2                    mov eax, edx
:0045C84E 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045C84F B903000000              mov ecx, 00000003
:0045C854 F7F9                    idiv ecx
:0045C856 A2C44E4B00              mov byte ptr [004B4EC4], al

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045C85B 6A04                    push 00000004
:0045C85D 6A00                    push 00000000
:0045C85F 6A01                    push 00000001
:0045C861 B9F0174B00              mov ecx, 004B17F0
:0045C866 E825C70100              call 00478F90
:0045C86B 33D2                    xor edx, edx
:0045C86D 8A10                    mov dl, byte ptr [eax]
:0045C86F 8BC2                    mov eax, edx
:0045C871 99                      cdq

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045C872 B903000000              mov ecx, 00000003
:0045C877 F7F9                    idiv ecx
:0045C879 A2C54E4B00              mov byte ptr [004B4EC5], al
:0045C87E 33D2                    xor edx, edx
:0045C880 8A15C44E4B00            mov dl, byte ptr [004B4EC4]
:0045C886 33C0                    xor eax, eax
:0045C888 A0C54E4B00              mov al, byte ptr [004B4EC5]
:0045C88D 0FAFD0                  imul edx, eax
:0045C890 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045C891 6A04                    push 00000004
:0045C893 6A00                    push 00000000
:0045C895 6880430000              push 00004380
:0045C89A B9881C4B00              mov ecx, 004B1C88
:0045C89F E8ECC60100              call 00478F90
:0045C8A4 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045C8A5 6A04                    push 00000004
:0045C8A7 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0045C8A9 6A02                    push 00000002
:0045C8AB B9F0174B00              mov ecx, 004B17F0
:0045C8B0 E8DBC60100              call 00478F90
:0045C8B5 50                      push eax
:0045C8B6 E805BD0100              call 004785C0
:0045C8BB 83C40C                  add esp, 0000000C
:0045C8BE C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0045C8C5 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0045C8CB E8908DFAFF              call 00405660
:0045C8D0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045C8D3 64890D00000000          mov dword ptr fs:[00000000], ecx
:0045C8DA 8BE5                    mov esp, ebp
:0045C8DC 5D                      pop ebp
:0045C8DD C3                      ret



* Referenced by a CALL at Addresses:
|:0045CA5A   , :0045EF4A   
|
:0045C8DE 55                      push ebp
:0045C8DF 8BEC                    mov ebp, esp
:0045C8E1 83EC0C                  sub esp, 0000000C
:0045C8E4 894DF4                  mov dword ptr [ebp-0C], ecx
:0045C8E7 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045C8EA 8A4D08                  mov cl, byte ptr [ebp+08]
:0045C8ED 8808                    mov byte ptr [eax], cl

* Possible StringData Ref from Data Obj ->"HM00.E3"
                                  |
:0045C8EF C745F8A0184800          mov [ebp-08], 004818A0
:0045C8F6 8B55F8                  mov edx, dword ptr [ebp-08]
:0045C8F9 83C202                  add edx, 00000002
:0045C8FC 8955FC                  mov dword ptr [ebp-04], edx
:0045C8FF 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045C902 33C9                    xor ecx, ecx
:0045C904 8A08                    mov cl, byte ptr [eax]
:0045C906 8BC1                    mov eax, ecx
:0045C908 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045C909 B90A000000              mov ecx, 0000000A
:0045C90E F7F9                    idiv ecx
:0045C910 83C030                  add eax, 00000030
:0045C913 8B55FC                  mov edx, dword ptr [ebp-04]
:0045C916 8802                    mov byte ptr [edx], al
:0045C918 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C91B 83C001                  add eax, 00000001
:0045C91E 8945FC                  mov dword ptr [ebp-04], eax
:0045C921 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045C924 33C0                    xor eax, eax
:0045C926 8A01                    mov al, byte ptr [ecx]
:0045C928 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045C929 B90A000000              mov ecx, 0000000A
:0045C92E F7F9                    idiv ecx
:0045C930 83C230                  add edx, 00000030
:0045C933 8B45FC                  mov eax, dword ptr [ebp-04]
:0045C936 8810                    mov byte ptr [eax], dl
:0045C938 B9C0174B00              mov ecx, 004B17C0
:0045C93D E87E35FBFF              call 0040FEC0
:0045C942 50                      push eax
:0045C943 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045C946 51                      push ecx
:0045C947 B9B0624B00              mov ecx, 004B62B0
:0045C94C E8E9240100              call 0046EE3A
:0045C951 8B5508                  mov edx, dword ptr [ebp+08]
:0045C954 81E2FF000000            and edx, 000000FF
:0045C95A 891564D44700            mov dword ptr [0047D464], edx
:0045C960 8BE5                    mov esp, ebp
:0045C962 5D                      pop ebp
:0045C963 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00457FEF   , :0045F00B   
|
:0045C966 55                      push ebp
:0045C967 8BEC                    mov ebp, esp
:0045C969 51                      push ecx
:0045C96A 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C980(U)
|
:0045C96D B9B0624B00              mov ecx, 004B62B0
:0045C972 E830240100              call 0046EDA7
:0045C977 85C0                    test eax, eax
:0045C979 7507                    jne 0045C982
:0045C97B E8D6AA0100              call 00477456
:0045C980 EBEB                    jmp 0045C96D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C979(C)
|
:0045C982 8BE5                    mov esp, ebp
:0045C984 5D                      pop ebp
:0045C985 C3                      ret



* Referenced by a CALL at Addresses:
|:0045CA9D   , :0045EF60   
|
:0045C986 55                      push ebp
:0045C987 8BEC                    mov ebp, esp
:0045C989 51                      push ecx
:0045C98A 894DFC                  mov dword ptr [ebp-04], ecx
:0045C98D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045C990 E831FEFFFF              call 0045C7C6
:0045C995 B9C84F4B00              mov ecx, 004B4FC8
:0045C99A E822350000              call 0045FEC1
:0045C99F 8BE5                    mov esp, ebp
:0045C9A1 5D                      pop ebp
:0045C9A2 C3                      ret



* Referenced by a CALL at Addresses:
|:0045EE04   , :0045FD2B   
|
:0045C9A3 55                      push ebp
:0045C9A4 8BEC                    mov ebp, esp
:0045C9A6 83EC14                  sub esp, 00000014
:0045C9A9 894DF0                  mov dword ptr [ebp-10], ecx
:0045C9AC E82A020100              call 0046CBDB
:0045C9B1 A12C544B00              mov eax, dword ptr [004B542C]
:0045C9B6 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0045C9B7 FF1558D64B00            Call dword ptr [004BD658]
:0045C9BD 85C0                    test eax, eax
:0045C9BF 740A                    je 0045C9CB
:0045C9C1 B950544B00              mov ecx, 004B5450
:0045C9C6 E88FAE0000              call 0046785A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C9BF(C)
|
:0045C9CB B978294B00              mov ecx, 004B2978
:0045C9D0 E8DBFEFAFF              call 0040C8B0
:0045C9D5 2500400000              and eax, 00004000
:0045C9DA 85C0                    test eax, eax
:0045C9DC 7409                    je 0045C9E7
:0045C9DE C745EC00000000          mov [ebp-14], 00000000
:0045C9E5 EB12                    jmp 0045C9F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C9DC(C)
|
:0045C9E7 B978294B00              mov ecx, 004B2978
:0045C9EC E89FFFFAFF              call 0040C990
:0045C9F1 25FF000000              and eax, 000000FF
:0045C9F6 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045C9E5(U)
|
:0045C9F9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045C9FC 8A55EC                  mov dl, byte ptr [ebp-14]
:0045C9FF 885125                  mov byte ptr [ecx+25], dl
:0045CA02 C7055CD44700FFFF0000    mov dword ptr [0047D45C], 0000FFFF
:0045CA0C C70558D44700FFFF0000    mov dword ptr [0047D458], 0000FFFF
:0045CA16 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CA19 E857280000              call 0045F275
:0045CA1E 8B45F0                  mov eax, dword ptr [ebp-10]
:0045CA21 8A08                    mov cl, byte ptr [eax]
:0045CA23 51                      push ecx
:0045CA24 B978294B00              mov ecx, 004B2978
:0045CA29 E8B22AFDFF              call 0042F4E0
:0045CA2E B900554B00              mov ecx, 004B5500
:0045CA33 E881CA0000              call 004694B9
:0045CA38 B9F8544B00              mov ecx, 004B54F8
:0045CA3D E8B0CA0000              call 004694F2
:0045CA42 6880000000              push 00000080
:0045CA47 B9F8544B00              mov ecx, 004B54F8
:0045CA4C E8E4CA0000              call 00469535
:0045CA51 8B55F0                  mov edx, dword ptr [ebp-10]
:0045CA54 8A02                    mov al, byte ptr [edx]
:0045CA56 50                      push eax
:0045CA57 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CA5A E87FFEFFFF              call 0045C8DE
:0045CA5F C605BC4F4B0000          mov byte ptr [004B4FBC], 00
:0045CA66 C605C04F4B0000          mov byte ptr [004B4FC0], 00
:0045CA6D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CA70 C6410500                mov [ecx+05], 00
:0045CA74 8B55F0                  mov edx, dword ptr [ebp-10]
:0045CA77 C6420100                mov [edx+01], 00
:0045CA7B 8B45F0                  mov eax, dword ptr [ebp-10]
:0045CA7E C6402400                mov [eax+24], 00
:0045CA82 837D0800                cmp dword ptr [ebp+08], 00000000
:0045CA86 750A                    jne 0045CA92
:0045CA88 B9C84F4B00              mov ecx, 004B4FC8
:0045CA8D E8842D0000              call 0045F816

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CA86(C)
|
:0045CA92 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CA95 E8E6270000              call 0045F280
:0045CA9A 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CA9D E8E4FEFFFF              call 0045C986
:0045CAA2 837D0800                cmp dword ptr [ebp+08], 00000000
:0045CAA6 7526                    jne 0045CACE
:0045CAA8 68FF000000              push 000000FF
:0045CAAD 6880070000              push 00000780

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045CAB2 6A04                    push 00000004
:0045CAB4 6A00                    push 00000000
:0045CAB6 68004B0000              push 00004B00
:0045CABB B9881C4B00              mov ecx, 004B1C88
:0045CAC0 E8CBC40100              call 00478F90
:0045CAC5 50                      push eax
:0045CAC6 E815BB0100              call 004785E0
:0045CACB 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CAA6(C)
|
:0045CACE 6880010000              push 00000180
:0045CAD3 6870020000              push 00000270
:0045CAD8 6A20                    push 00000020
:0045CADA 6A00                    push 00000000
:0045CADC B958494B00              mov ecx, 004B4958
:0045CAE1 E84EE2FEFF              call 0044AD34
:0045CAE6 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CAE9 C6410200                mov [ecx+02], 00
:0045CAED 8B55F0                  mov edx, dword ptr [ebp-10]
:0045CAF0 C6420401                mov [edx+04], 01
:0045CAF4 C645FC00                mov [ebp-04], 00
:0045CAF8 EB08                    jmp 0045CB02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CB2B(U)
|
:0045CAFA 8A45FC                  mov al, byte ptr [ebp-04]
:0045CAFD 0401                    add al, 01
:0045CAFF 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CAF8(U)
|
:0045CB02 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CB05 81E1FF000000            and ecx, 000000FF
:0045CB0B 83F95A                  cmp ecx, 0000005A
:0045CB0E 7D1D                    jge 0045CB2D
:0045CB10 8A55FC                  mov dl, byte ptr [ebp-04]
:0045CB13 52                      push edx
:0045CB14 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CB17 81E1FF000000            and ecx, 000000FF
:0045CB1D 6BC924                  imul ecx, 00000024
:0045CB20 81C1B83B4B00            add ecx, 004B3BB8
:0045CB26 E82377FDFF              call 0043424E
:0045CB2B EBCD                    jmp 0045CAFA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CB0E(C)
|
:0045CB2D B9806D4800              mov ecx, 00486D80
:0045CB32 E8E92B0000              call 0045F720
:0045CB37 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CB3A 884103                  mov byte ptr [ecx+03], al
:0045CB3D 6A01                    push 00000001
:0045CB3F 8B55F0                  mov edx, dword ptr [ebp-10]
:0045CB42 8A02                    mov al, byte ptr [edx]
:0045CB44 50                      push eax
:0045CB45 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CB48 E873A2FFFF              call 00456DC0
:0045CB4D E8E135FBFF              call 00410133
:0045CB52 6A00                    push 00000000
:0045CB54 E8E2DA0000              call 0046A63B
:0045CB59 83C404                  add esp, 00000004
:0045CB5C 837D0800                cmp dword ptr [ebp+08], 00000000
:0045CB60 0F8596000000            jne 0045CBFC
:0045CB66 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CB69 E8D2010000              call 0045CD40
:0045CB6E C645FC00                mov [ebp-04], 00
:0045CB72 EB09                    jmp 0045CB7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CBF7(U)
|
:0045CB74 8A4DFC                  mov cl, byte ptr [ebp-04]
:0045CB77 80C101                  add cl, 01
:0045CB7A 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CB72(U)
|
:0045CB7D 8B55FC                  mov edx, dword ptr [ebp-04]
:0045CB80 81E2FF000000            and edx, 000000FF
:0045CB86 83FA5A                  cmp edx, 0000005A
:0045CB89 7D71                    jge 0045CBFC
:0045CB8B 8B45FC                  mov eax, dword ptr [ebp-04]
:0045CB8E 25FF000000              and eax, 000000FF
:0045CB93 6BC024                  imul eax, 00000024
:0045CB96 05B83B4B00              add eax, 004B3BB8
:0045CB9B 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045CB9E 6A04                    push 00000004
:0045CBA0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045CBA3 E818A2FDFF              call 00436DC0
:0045CBA8 6A7E                    push 0000007E
:0045CBAA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045CBAD E8DEA0FDFF              call 00436C90
:0045CBB2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CBB5 81E1FF000000            and ecx, 000000FF
:0045CBBB 83F91E                  cmp ecx, 0000001E
:0045CBBE 7D37                    jge 0045CBF7
:0045CBC0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045CBC3 E8189EFDFF              call 004369E0
:0045CBC8 8BC8                    mov ecx, eax
:0045CBCA 6BC950                  imul ecx, 00000050
:0045CBCD 81C1787F4900            add ecx, 00497F78
:0045CBD3 E8A832FBFF              call 0040FE80
:0045CBD8 25FF000000              and eax, 000000FF
:0045CBDD 85C0                    test eax, eax
:0045CBDF 750C                    jne 0045CBED

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045CBE1 6A07                    push 00000007
:0045CBE3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045CBE6 E81086FDFF              call 004351FB
:0045CBEB EB0A                    jmp 0045CBF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CBDF(C)
|
:0045CBED 6A01                    push 00000001
:0045CBEF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045CBF2 E80486FDFF              call 004351FB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045CBBE(C), :0045CBEB(U)
|
:0045CBF7 E978FFFFFF              jmp 0045CB74

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045CB60(C), :0045CB89(C)
|
:0045CBFC C645FC00                mov [ebp-04], 00
:0045CC00 EB09                    jmp 0045CC0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CC83(U)
|
:0045CC02 8A55FC                  mov dl, byte ptr [ebp-04]
:0045CC05 80C201                  add dl, 01
:0045CC08 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CC00(U)
|
:0045CC0B 8B45FC                  mov eax, dword ptr [ebp-04]
:0045CC0E 25FF000000              and eax, 000000FF
:0045CC13 83F85A                  cmp eax, 0000005A
:0045CC16 7D70                    jge 0045CC88
:0045CC18 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CC1B 81E1FF000000            and ecx, 000000FF
:0045CC21 6BC924                  imul ecx, 00000024
:0045CC24 81C1B83B4B00            add ecx, 004B3BB8
:0045CC2A E8A1F4FFFF              call 0045C0D0
:0045CC2F 25FF000000              and eax, 000000FF
:0045CC34 85C0                    test eax, eax
:0045CC36 744B                    je 0045CC83
:0045CC38 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CC3B 81E1FF000000            and ecx, 000000FF
:0045CC41 6BC924                  imul ecx, 00000024
:0045CC44 81C1B83B4B00            add ecx, 004B3BB8
:0045CC4A E83F8BFDFF              call 0043578E
:0045CC4F 85C0                    test eax, eax
:0045CC51 7419                    je 0045CC6C
:0045CC53 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CC56 81E1FF000000            and ecx, 000000FF
:0045CC5C 6BC924                  imul ecx, 00000024
:0045CC5F 81C1B83B4B00            add ecx, 004B3BB8
:0045CC65 E8F777FDFF              call 00434461
:0045CC6A EB17                    jmp 0045CC83

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CC51(C)
|
:0045CC6C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045CC6F 81E1FF000000            and ecx, 000000FF
:0045CC75 6BC924                  imul ecx, 00000024
:0045CC78 81C1B83B4B00            add ecx, 004B3BB8
:0045CC7E E8E678FDFF              call 00434569

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045CC36(C), :0045CC6A(U)
|
:0045CC83 E97AFFFFFF              jmp 0045CC02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CC16(C)
|
:0045CC88 B9B83B4B00              mov ecx, 004B3BB8
:0045CC8D E8AE4FFDFF              call 00431C40
:0045CC92 668B08                  mov cx, word ptr [eax]
:0045CC95 66894DF8                mov word ptr [ebp-08], cx
:0045CC99 8A55F9                  mov dl, byte ptr [ebp-07]
:0045CC9C 52                      push edx
:0045CC9D 8A45F8                  mov al, byte ptr [ebp-08]
:0045CCA0 50                      push eax
:0045CCA1 B958494B00              mov ecx, 004B4958
:0045CCA6 E8420EFFFF              call 0044DAED
:0045CCAB B958494B00              mov ecx, 004B4958
:0045CCB0 E81615FFFF              call 0044E1CB
:0045CCB5 B958494B00              mov ecx, 004B4958
:0045CCBA E852FCFEFF              call 0044C911
:0045CCBF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CCC2 E8FB250000              call 0045F2C2
:0045CCC7 E88234FBFF              call 0041014E
:0045CCCC 6A00                    push 00000000
:0045CCCE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CCD1 660FB611                movzx dx, byte ptr [ecx]
:0045CCD5 52                      push edx
:0045CCD6 E88532FBFF              call 0040FF60
:0045CCDB 83C408                  add esp, 00000008
:0045CCDE B9F8544B00              mov ecx, 004B54F8
:0045CCE3 E80AC80000              call 004694F2
:0045CCE8 E83734FBFF              call 00410124
:0045CCED A1B0554B00              mov eax, dword ptr [004B55B0]
:0045CCF2 50                      push eax

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0045CCF3 FF15FCD54B00            Call dword ptr [004BD5FC]
:0045CCF9 E84929FDFF              call 0042F647
:0045CCFE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CD01 C7414400000000          mov [ecx+44], 00000000
:0045CD08 B958494B00              mov ecx, 004B4958
:0045CD0D E8311CFFFF              call 0044E943
:0045CD12 50                      push eax
:0045CD13 B958494B00              mov ecx, 004B4958
:0045CD18 E8851CFFFF              call 0044E9A2
:0045CD1D B958494B00              mov ecx, 004B4958
:0045CD22 E8431CFFFF              call 0044E96A
:0045CD27 50                      push eax
:0045CD28 B958494B00              mov ecx, 004B4958
:0045CD2D E8971CFFFF              call 0044E9C9
:0045CD32 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CD35 E85E260000              call 0045F398
:0045CD3A 8BE5                    mov esp, ebp
:0045CD3C 5D                      pop ebp
:0045CD3D C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045CB69   
|
:0045CD40 55                      push ebp
:0045CD41 8BEC                    mov ebp, esp
:0045CD43 83EC30                  sub esp, 00000030
:0045CD46 894DD4                  mov dword ptr [ebp-2C], ecx
:0045CD49 C645E400                mov [ebp-1C], 00
:0045CD4D C645EC1E                mov [ebp-14], 1E
:0045CD51 C60528184800FF          mov byte ptr [00481828], FF
:0045CD58 B9F0174B00              mov ecx, 004B17F0
:0045CD5D E85E31FBFF              call 0040FEC0
:0045CD62 50                      push eax
:0045CD63 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"DATA.E3"
                                  |
:0045CD65 6800D54700              push 0047D500
:0045CD6A E8C525FBFF              call 0040F334
:0045CD6F 83C40C                  add esp, 0000000C
:0045CD72 C745DCFFFF0000          mov [ebp-24], 0000FFFF
:0045CD79 C745F800000000          mov [ebp-08], 00000000
:0045CD80 C745F000000000          mov [ebp-10], 00000000
:0045CD87 EB09                    jmp 0045CD92

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D246(U)
|
:0045CD89 8B45F0                  mov eax, dword ptr [ebp-10]
:0045CD8C 83C001                  add eax, 00000001
:0045CD8F 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CD87(U)
|
:0045CD92 837DF05A                cmp dword ptr [ebp-10], 0000005A
:0045CD96 0F83AF040000            jnb 0045D24B
:0045CD9C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045CD9F 51                      push ecx
:0045CDA0 B9806D4800              mov ecx, 00486D80
:0045CDA5 E826FCFAFF              call 0040C9D0
:0045CDAA 8945E8                  mov dword ptr [ebp-18], eax
:0045CDAD 8B55E8                  mov edx, dword ptr [ebp-18]
:0045CDB0 8955FC                  mov dword ptr [ebp-04], edx
:0045CDB3 8B45FC                  mov eax, dword ptr [ebp-04]
:0045CDB6 8B08                    mov ecx, dword ptr [eax]
:0045CDB8 894DDC                  mov dword ptr [ebp-24], ecx
:0045CDBB 8B55FC                  mov edx, dword ptr [ebp-04]
:0045CDBE 83C204                  add edx, 00000004
:0045CDC1 8955E0                  mov dword ptr [ebp-20], edx
:0045CDC4 8B45FC                  mov eax, dword ptr [ebp-04]
:0045CDC7 8B4808                  mov ecx, dword ptr [eax+08]
:0045CDCA 894DF8                  mov dword ptr [ebp-08], ecx
:0045CDCD 817DDCFFFF0000          cmp dword ptr [ebp-24], 0000FFFF
:0045CDD4 0F846C040000            je 0045D246
:0045CDDA 817DDC00040000          cmp dword ptr [ebp-24], 00000400
:0045CDE1 0F845F040000            je 0045D246
:0045CDE7 817DDCC8000000          cmp dword ptr [ebp-24], 000000C8
:0045CDEE 730A                    jnb 0045CDFA
:0045CDF0 8B55F8                  mov edx, dword ptr [ebp-08]
:0045CDF3 83E201                  and edx, 00000001
:0045CDF6 85D2                    test edx, edx
:0045CDF8 7449                    je 0045CE43

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CDEE(C)
|
:0045CDFA 837DDC6A                cmp dword ptr [ebp-24], 0000006A
:0045CDFE 742A                    je 0045CE2A
:0045CE00 817DDC96000000          cmp dword ptr [ebp-24], 00000096
:0045CE07 7421                    je 0045CE2A
:0045CE09 837DDC59                cmp dword ptr [ebp-24], 00000059
:0045CE0D 741B                    je 0045CE2A
:0045CE0F 6A00                    push 00000000
:0045CE11 8B45DC                  mov eax, dword ptr [ebp-24]
:0045CE14 50                      push eax
:0045CE15 B9F0174B00              mov ecx, 004B17F0
:0045CE1A E8A130FBFF              call 0040FEC0
:0045CE1F 50                      push eax
:0045CE20 E8F725FBFF              call 0040F41C
:0045CE25 83C40C                  add esp, 0000000C
:0045CE28 EB19                    jmp 0045CE43

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045CDFE(C), :0045CE07(C), :0045CE0D(C)
|
:0045CE2A 6A01                    push 00000001
:0045CE2C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045CE2F 51                      push ecx
:0045CE30 B9F0174B00              mov ecx, 004B17F0
:0045CE35 E88630FBFF              call 0040FEC0
:0045CE3A 50                      push eax
:0045CE3B E8DC25FBFF              call 0040F41C
:0045CE40 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045CDF8(C), :0045CE28(U)
|
:0045CE43 6A00                    push 00000000
:0045CE45 E84610FBFF              call 0040DE90
:0045CE4A 83C404                  add esp, 00000004
:0045CE4D 85C0                    test eax, eax
:0045CE4F 7411                    je 0045CE62
:0045CE51 837DDC00                cmp dword ptr [ebp-24], 00000000
:0045CE55 7509                    jne 0045CE60
:0045CE57 8A55E4                  mov dl, byte ptr [ebp-1C]
:0045CE5A 881528184800            mov byte ptr [00481828], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CE55(C)
|
:0045CE60 EB0E                    jmp 0045CE70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CE4F(C)
|
:0045CE62 837DDC02                cmp dword ptr [ebp-24], 00000002
:0045CE66 7508                    jne 0045CE70
:0045CE68 8A45E4                  mov al, byte ptr [ebp-1C]
:0045CE6B A228184800              mov byte ptr [00481828], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045CE60(U), :0045CE66(C)
|
:0045CE70 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045CE73 83E101                  and ecx, 00000001
:0045CE76 85C9                    test ecx, ecx
:0045CE78 0F8556010000            jne 0045CFD4
:0045CE7E 8B55DC                  mov edx, dword ptr [ebp-24]
:0045CE81 52                      push edx
:0045CE82 E80910FBFF              call 0040DE90
:0045CE87 83C404                  add esp, 00000004
:0045CE8A 8945F4                  mov dword ptr [ebp-0C], eax
:0045CE8D 837DF400                cmp dword ptr [ebp-0C], 00000000
:0045CE91 7519                    jne 0045CEAC
:0045CE93 6A00                    push 00000000
:0045CE95 8B45DC                  mov eax, dword ptr [ebp-24]
:0045CE98 50                      push eax
:0045CE99 B9F0174B00              mov ecx, 004B17F0
:0045CE9E E81D30FBFF              call 0040FEC0
:0045CEA3 50                      push eax
:0045CEA4 E87325FBFF              call 0040F41C
:0045CEA9 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CE91(C)
|
:0045CEAC 33C9                    xor ecx, ecx
:0045CEAE 837DF400                cmp dword ptr [ebp-0C], 00000000
:0045CEB2 0F94C1                  sete cl
:0045CEB5 51                      push ecx
:0045CEB6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045CEB9 81E1FF000000            and ecx, 000000FF
:0045CEBF 6BC924                  imul ecx, 00000024
:0045CEC2 81C1B83B4B00            add ecx, 004B3BB8
:0045CEC8 E82152FDFF              call 004320EE
:0045CECD 8B55DC                  mov edx, dword ptr [ebp-24]
:0045CED0 52                      push edx
:0045CED1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045CED4 81E1FF000000            and ecx, 000000FF
:0045CEDA 6BC924                  imul ecx, 00000024
:0045CEDD 81C1B83B4B00            add ecx, 004B3BB8
:0045CEE3 E8A86FFDFF              call 00433E90
:0045CEE8 8B45F8                  mov eax, dword ptr [ebp-08]
:0045CEEB 83E002                  and eax, 00000002
:0045CEEE 85C0                    test eax, eax
:0045CEF0 755E                    jne 0045CF50
:0045CEF2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045CEF5 83E104                  and ecx, 00000004
:0045CEF8 83E904                  sub ecx, 00000004
:0045CEFB F7D9                    neg ecx
:0045CEFD 1BC9                    sbb ecx, ecx
:0045CEFF 83E102                  and ecx, 00000002
:0045CF02 83C101                  add ecx, 00000001
:0045CF05 51                      push ecx
:0045CF06 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045CF09 81E1FF000000            and ecx, 000000FF
:0045CF0F 6BC924                  imul ecx, 00000024
:0045CF12 81C1B83B4B00            add ecx, 004B3BB8
:0045CF18 E82310FDFF              call 0042DF40
:0045CF1D 8B55F8                  mov edx, dword ptr [ebp-08]
:0045CF20 83E204                  and edx, 00000004
:0045CF23 33C0                    xor eax, eax
:0045CF25 83FA04                  cmp edx, 00000004
:0045CF28 0F94C0                  sete al
:0045CF2B 50                      push eax
:0045CF2C 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045CF2F 8A5101                  mov dl, byte ptr [ecx+01]
:0045CF32 52                      push edx
:0045CF33 8B45E0                  mov eax, dword ptr [ebp-20]
:0045CF36 8A08                    mov cl, byte ptr [eax]
:0045CF38 51                      push ecx
:0045CF39 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045CF3C 81E1FF000000            and ecx, 000000FF
:0045CF42 6BC924                  imul ecx, 00000024
:0045CF45 81C1B83B4B00            add ecx, 004B3BB8
:0045CF4B E8B377FDFF              call 00434703

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CEF0(C)
|
:0045CF50 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045CF53 6BC950                  imul ecx, 00000050
:0045CF56 81C1787F4900            add ecx, 00497F78
:0045CF5C E8894EFAFF              call 00401DEA
:0045CF61 50                      push eax
:0045CF62 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045CF65 81E1FF000000            and ecx, 000000FF
:0045CF6B 6BC924                  imul ecx, 00000024
:0045CF6E 81C1B83B4B00            add ecx, 004B3BB8
:0045CF74 E89C62FDFF              call 00433215
:0045CF79 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045CF7C 6BC950                  imul ecx, 00000050
:0045CF7F 81C1787F4900            add ecx, 00497F78
:0045CF85 E8914EFAFF              call 00401E1B
:0045CF8A 50                      push eax
:0045CF8B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045CF8E 81E1FF000000            and ecx, 000000FF
:0045CF94 6BC924                  imul ecx, 00000024
:0045CF97 81C1B83B4B00            add ecx, 004B3BB8
:0045CF9D E8B462FDFF              call 00433256
:0045CFA2 837DF400                cmp dword ptr [ebp-0C], 00000000
:0045CFA6 751E                    jne 0045CFC6
:0045CFA8 8B55E8                  mov edx, dword ptr [ebp-18]
:0045CFAB 8B4214                  mov eax, dword ptr [edx+14]
:0045CFAE 50                      push eax
:0045CFAF 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045CFB2 81E1FF000000            and ecx, 000000FF
:0045CFB8 6BC924                  imul ecx, 00000024
:0045CFBB 81C1B83B4B00            add ecx, 004B3BB8
:0045CFC1 E89E71FDFF              call 00434164

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CFA6(C)
|
:0045CFC6 8A4DE4                  mov cl, byte ptr [ebp-1C]
:0045CFC9 80C101                  add cl, 01
:0045CFCC 884DE4                  mov byte ptr [ebp-1C], cl
:0045CFCF E972020000              jmp 0045D246

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CE78(C)
|
:0045CFD4 8B55EC                  mov edx, dword ptr [ebp-14]
:0045CFD7 81E2FF000000            and edx, 000000FF
:0045CFDD 8B45DC                  mov eax, dword ptr [ebp-24]
:0045CFE0 890495504E4B00          mov dword ptr [4*edx+004B4E50], eax
:0045CFE7 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045CFEA 51                      push ecx
:0045CFEB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045CFEE 81E1FF000000            and ecx, 000000FF
:0045CFF4 6BC924                  imul ecx, 00000024
:0045CFF7 81C1B83B4B00            add ecx, 004B3BB8
:0045CFFD E88E6EFDFF              call 00433E90
:0045D002 8B55E8                  mov edx, dword ptr [ebp-18]
:0045D005 8A4212                  mov al, byte ptr [edx+12]
:0045D008 50                      push eax
:0045D009 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D00C 81E1FF000000            and ecx, 000000FF
:0045D012 6BC924                  imul ecx, 00000024
:0045D015 81C1B83B4B00            add ecx, 004B3BB8
:0045D01B E8CE50FDFF              call 004320EE
:0045D020 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045D023 8A5111                  mov dl, byte ptr [ecx+11]
:0045D026 52                      push edx
:0045D027 8B45E8                  mov eax, dword ptr [ebp-18]
:0045D02A 8A4810                  mov cl, byte ptr [eax+10]
:0045D02D 51                      push ecx
:0045D02E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D031 81E1FF000000            and ecx, 000000FF
:0045D037 6BC924                  imul ecx, 00000024
:0045D03A 81C1B83B4B00            add ecx, 004B3BB8
:0045D040 E8F86DFDFF              call 00433E3D
:0045D045 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045D048 6BC950                  imul ecx, 00000050
:0045D04B 81C1787F4900            add ecx, 00497F78
:0045D051 E84A2EFBFF              call 0040FEA0
:0045D056 25FF000000              and eax, 000000FF
:0045D05B 85C0                    test eax, eax
:0045D05D 754E                    jne 0045D0AD
:0045D05F 8B55DC                  mov edx, dword ptr [ebp-24]
:0045D062 52                      push edx
:0045D063 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D066 81E1FF000000            and ecx, 000000FF
:0045D06C 6BC924                  imul ecx, 00000024
:0045D06F 81C1B83B4B00            add ecx, 004B3BB8
:0045D075 E87699FDFF              call 004369F0
:0045D07A 50                      push eax

* Possible StringData Ref from Data Obj ->"ĪZN]wERROR: %s( No.%d )Level0"
                                  |
:0045D07B 68A8184800              push 004818A8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045D080 6A05                    push 00000005
:0045D082 E8AC43FDFF              call 00431433
:0045D087 83C410                  add esp, 00000010
:0045D08A 8B45D4                  mov eax, dword ptr [ebp-2C]
:0045D08D 33C9                    xor ecx, ecx
:0045D08F 8A08                    mov cl, byte ptr [eax]
:0045D091 8BC1                    mov eax, ecx
:0045D093 99                      cdq
:0045D094 2BC2                    sub eax, edx
:0045D096 D1F8                    sar eax, 1
:0045D098 83C001                  add eax, 00000001
:0045D09B 50                      push eax
:0045D09C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045D09F 6BC950                  imul ecx, 00000050
:0045D0A2 81C1787F4900            add ecx, 00497F78
:0045D0A8 E8339CFDFF              call 00436CE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D05D(C)
|
:0045D0AD C645D800                mov [ebp-28], 00
:0045D0B1 EB09                    jmp 0045D0BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D114(U)
|
:0045D0B3 8A55D8                  mov dl, byte ptr [ebp-28]
:0045D0B6 80C201                  add dl, 01
:0045D0B9 8855D8                  mov byte ptr [ebp-28], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D0B1(U)
|
:0045D0BC 8B45D8                  mov eax, dword ptr [ebp-28]
:0045D0BF 25FF000000              and eax, 000000FF
:0045D0C4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D0C7 81E1FF000000            and ecx, 000000FF
:0045D0CD 83E91E                  sub ecx, 0000001E
:0045D0D0 3BC1                    cmp eax, ecx
:0045D0D2 7D42                    jge 0045D116
:0045D0D4 8B55D8                  mov edx, dword ptr [ebp-28]
:0045D0D7 81E2FF000000            and edx, 000000FF
:0045D0DD 8B0495C84E4B00          mov eax, dword ptr [4*edx+004B4EC8]
:0045D0E4 3B45DC                  cmp eax, dword ptr [ebp-24]
:0045D0E7 752B                    jne 0045D114
:0045D0E9 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045D0EC 51                      push ecx
:0045D0ED 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D0F0 81E1FF000000            and ecx, 000000FF
:0045D0F6 6BC924                  imul ecx, 00000024
:0045D0F9 81C1B83B4B00            add ecx, 004B3BB8
:0045D0FF E8EC98FDFF              call 004369F0
:0045D104 50                      push eax

* Possible StringData Ref from Data Obj ->"ĪZN]wERROR:%s( No.%3d )_F"
                                  |
:0045D105 68CC184800              push 004818CC

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045D10A 6A05                    push 00000005
:0045D10C E82243FDFF              call 00431433
:0045D111 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D0E7(C)
|
:0045D114 EB9D                    jmp 0045D0B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D0D2(C)
|
:0045D116 8B55E8                  mov edx, dword ptr [ebp-18]
:0045D119 8B4214                  mov eax, dword ptr [edx+14]
:0045D11C 50                      push eax
:0045D11D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D120 81E1FF000000            and ecx, 000000FF
:0045D126 6BC924                  imul ecx, 00000024
:0045D129 81C1B83B4B00            add ecx, 004B3BB8
:0045D12F E83070FDFF              call 00434164
:0045D134 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045D137 8A5130                  mov dl, byte ptr [ecx+30]
:0045D13A 52                      push edx
:0045D13B 8B45E8                  mov eax, dword ptr [ebp-18]
:0045D13E 8B482C                  mov ecx, dword ptr [eax+2C]
:0045D141 51                      push ecx
:0045D142 8B55E8                  mov edx, dword ptr [ebp-18]
:0045D145 8A4227                  mov al, byte ptr [edx+27]
:0045D148 50                      push eax
:0045D149 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045D14C 8A5128                  mov dl, byte ptr [ecx+28]
:0045D14F 52                      push edx
:0045D150 8B45E8                  mov eax, dword ptr [ebp-18]
:0045D153 8A4826                  mov cl, byte ptr [eax+26]
:0045D156 51                      push ecx
:0045D157 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D15A 81E1FF000000            and ecx, 000000FF
:0045D160 6BC924                  imul ecx, 00000024
:0045D163 81C1B83B4B00            add ecx, 004B3BB8
:0045D169 E88B6DFDFF              call 00433EF9
:0045D16E 8B55F8                  mov edx, dword ptr [ebp-08]
:0045D171 83E202                  and edx, 00000002
:0045D174 85D2                    test edx, edx
:0045D176 755E                    jne 0045D1D6
:0045D178 8B45F8                  mov eax, dword ptr [ebp-08]
:0045D17B 83E004                  and eax, 00000004
:0045D17E 83E804                  sub eax, 00000004
:0045D181 F7D8                    neg eax
:0045D183 1BC0                    sbb eax, eax
:0045D185 83E002                  and eax, 00000002
:0045D188 83C001                  add eax, 00000001
:0045D18B 50                      push eax
:0045D18C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D18F 81E1FF000000            and ecx, 000000FF
:0045D195 6BC924                  imul ecx, 00000024
:0045D198 81C1B83B4B00            add ecx, 004B3BB8
:0045D19E E89D0DFDFF              call 0042DF40
:0045D1A3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045D1A6 83E104                  and ecx, 00000004
:0045D1A9 33D2                    xor edx, edx
:0045D1AB 83F904                  cmp ecx, 00000004
:0045D1AE 0F94C2                  sete dl
:0045D1B1 52                      push edx
:0045D1B2 8B45E0                  mov eax, dword ptr [ebp-20]
:0045D1B5 8A4801                  mov cl, byte ptr [eax+01]
:0045D1B8 51                      push ecx
:0045D1B9 8B55E0                  mov edx, dword ptr [ebp-20]
:0045D1BC 8A02                    mov al, byte ptr [edx]
:0045D1BE 50                      push eax
:0045D1BF 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D1C2 81E1FF000000            and ecx, 000000FF
:0045D1C8 6BC924                  imul ecx, 00000024
:0045D1CB 81C1B83B4B00            add ecx, 004B3BB8
:0045D1D1 E82D75FDFF              call 00434703

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D176(C)
|
:0045D1D6 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045D1D9 8A510C                  mov dl, byte ptr [ecx+0C]
:0045D1DC 52                      push edx
:0045D1DD 8B45DC                  mov eax, dword ptr [ebp-24]
:0045D1E0 50                      push eax
:0045D1E1 B9C84F4B00              mov ecx, 004B4FC8
:0045D1E6 E8472C0000              call 0045FE32
:0045D1EB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045D1EE 33D2                    xor edx, edx
:0045D1F0 8A510C                  mov dl, byte ptr [ecx+0C]
:0045D1F3 8955D0                  mov dword ptr [ebp-30], edx
:0045D1F6 837DD006                cmp dword ptr [ebp-30], 00000006
:0045D1FA 7742                    ja 0045D23E
:0045D1FC 8B45D0                  mov eax, dword ptr [ebp-30]
:0045D1FF FF2485A3D24500          jmp dword ptr [4*eax+0045D2A3]
:0045D206 EB36                    jmp 0045D23E
:0045D208 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045D20B 33D2                    xor edx, edx
:0045D20D 668B510E                mov dx, word ptr [ecx+0E]
:0045D211 52                      push edx
:0045D212 8B45DC                  mov eax, dword ptr [ebp-24]
:0045D215 50                      push eax
:0045D216 B9C84F4B00              mov ecx, 004B4FC8
:0045D21B E83A330000              call 0046055A
:0045D220 EB1C                    jmp 0045D23E
:0045D222 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045D225 8A510F                  mov dl, byte ptr [ecx+0F]
:0045D228 52                      push edx
:0045D229 8B45E8                  mov eax, dword ptr [ebp-18]
:0045D22C 8A480E                  mov cl, byte ptr [eax+0E]
:0045D22F 51                      push ecx
:0045D230 8B55DC                  mov edx, dword ptr [ebp-24]
:0045D233 52                      push edx
:0045D234 B9C84F4B00              mov ecx, 004B4FC8
:0045D239 E88D320000              call 004604CB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D1FA(C), :0045D206(U), :0045D220(U)
|
:0045D23E 8A45EC                  mov al, byte ptr [ebp-14]
:0045D241 0401                    add al, 01
:0045D243 8845EC                  mov byte ptr [ebp-14], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045CDD4(C), :0045CDE1(C), :0045CFCF(U)
|
:0045D246 E93EFBFFFF              jmp 0045CD89

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045CD96(C)
|
:0045D24B EB09                    jmp 0045D256

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D293(U)
|
:0045D24D 8A4DEC                  mov cl, byte ptr [ebp-14]
:0045D250 80C101                  add cl, 01
:0045D253 884DEC                  mov byte ptr [ebp-14], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D24B(U)
|
:0045D256 8B55EC                  mov edx, dword ptr [ebp-14]
:0045D259 81E2FF000000            and edx, 000000FF
:0045D25F 83FA5A                  cmp edx, 0000005A
:0045D262 7D31                    jge 0045D295
:0045D264 8A45EC                  mov al, byte ptr [ebp-14]
:0045D267 50                      push eax
:0045D268 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D26B 81E1FF000000            and ecx, 000000FF
:0045D271 6BC924                  imul ecx, 00000024
:0045D274 81C1B83B4B00            add ecx, 004B3BB8
:0045D27A E8CF6FFDFF              call 0043424E
:0045D27F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045D282 81E1FF000000            and ecx, 000000FF
:0045D288 C7048D504E4B00FF000000  mov dword ptr [4*ecx+004B4E50], 000000FF
:0045D293 EBB8                    jmp 0045D24D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D262(C)
|
:0045D295 C705B84F4B00FF000000    mov dword ptr [004B4FB8], 000000FF
:0045D29F 8BE5                    mov esp, ebp
:0045D2A1 5D                      pop ebp
:0045D2A2 C3                      ret



:0045D2A3 06D24500                DWORD 0045D206
:0045D2A7 3ED24500                DWORD 0045D23E
:0045D2AB 3ED24500                DWORD 0045D23E
:0045D2AF 08D24500                DWORD 0045D208
:0045D2B3 22D24500                DWORD 0045D222
:0045D2B7 08D24500                DWORD 0045D208
:0045D2BB 22D24500                DWORD 0045D222



* Referenced by a CALL at Address:
|:0045E675   
|
:0045D2BF 55                      push ebp
:0045D2C0 8BEC                    mov ebp, esp
:0045D2C2 51                      push ecx
:0045D2C3 894DFC                  mov dword ptr [ebp-04], ecx
:0045D2C6 33C0                    xor eax, eax
:0045D2C8 8BE5                    mov esp, ebp
:0045D2CA 5D                      pop ebp
:0045D2CB C3                      ret



* Referenced by a CALL at Addresses:
|:0045D5AC   , :0045D7E8   
|
:0045D2CC 55                      push ebp
:0045D2CD 8BEC                    mov ebp, esp
:0045D2CF 83EC1C                  sub esp, 0000001C
:0045D2D2 894DE8                  mov dword ptr [ebp-18], ecx
:0045D2D5 837D0800                cmp dword ptr [ebp+08], 00000000
:0045D2D9 740A                    je 0045D2E5
:0045D2DB C645F800                mov [ebp-08], 00
:0045D2DF C645F01E                mov [ebp-10], 1E
:0045D2E3 EB08                    jmp 0045D2ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D2D9(C)
|
:0045D2E5 C645F81E                mov [ebp-08], 1E
:0045D2E9 C645F05A                mov [ebp-10], 5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D2E3(U)
|
:0045D2ED 8A45F8                  mov al, byte ptr [ebp-08]
:0045D2F0 8845F4                  mov byte ptr [ebp-0C], al
:0045D2F3 EB09                    jmp 0045D2FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D32F(U)
|
:0045D2F5 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0045D2F8 80C101                  add cl, 01
:0045D2FB 884DF4                  mov byte ptr [ebp-0C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D2F3(U)
|
:0045D2FE 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045D301 81E2FF000000            and edx, 000000FF
:0045D307 8B45F0                  mov eax, dword ptr [ebp-10]
:0045D30A 25FF000000              and eax, 000000FF
:0045D30F 3BD0                    cmp edx, eax
:0045D311 7D1E                    jge 0045D331
:0045D313 68FF000000              push 000000FF
:0045D318 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D31B 81E1FF000000            and ecx, 000000FF
:0045D321 6BC924                  imul ecx, 00000024
:0045D324 81C1B83B4B00            add ecx, 004B3BB8
:0045D32A E811240000              call 0045F740
:0045D32F EBC4                    jmp 0045D2F5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D311(C)
|
:0045D331 C645FC00                mov [ebp-04], 00
:0045D335 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045D338 884DF4                  mov byte ptr [ebp-0C], cl
:0045D33B EB09                    jmp 0045D346

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D3D5(U)
|
:0045D33D 8A55F4                  mov dl, byte ptr [ebp-0C]
:0045D340 80C201                  add dl, 01
:0045D343 8855F4                  mov byte ptr [ebp-0C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D33B(U)
|
:0045D346 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045D349 25FF000000              and eax, 000000FF
:0045D34E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045D351 81E1FF000000            and ecx, 000000FF
:0045D357 3BC1                    cmp eax, ecx
:0045D359 7D7F                    jge 0045D3DA
:0045D35B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D35E 81E1FF000000            and ecx, 000000FF
:0045D364 6BC924                  imul ecx, 00000024
:0045D367 81C1B83B4B00            add ecx, 004B3BB8
:0045D36D E8CE48FDFF              call 00431C40
:0045D372 668B10                  mov dx, word ptr [eax]
:0045D375 668955EC                mov word ptr [ebp-14], dx
:0045D379 8D45EC                  lea eax, dword ptr [ebp-14]
:0045D37C 50                      push eax
:0045D37D E8D222FFFF              call 0044F654
:0045D382 83C404                  add esp, 00000004
:0045D385 85C0                    test eax, eax
:0045D387 744C                    je 0045D3D5
:0045D389 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D38C 81E1FF000000            and ecx, 000000FF
:0045D392 6BC924                  imul ecx, 00000024
:0045D395 81C1B83B4B00            add ecx, 004B3BB8
:0045D39B E8004CFEFF              call 00441FA0
:0045D3A0 25FF000000              and eax, 000000FF
:0045D3A5 3DFF000000              cmp eax, 000000FF
:0045D3AA 7529                    jne 0045D3D5
:0045D3AC 8A4DFC                  mov cl, byte ptr [ebp-04]
:0045D3AF 884DE7                  mov byte ptr [ebp-19], cl
:0045D3B2 8A55E7                  mov dl, byte ptr [ebp-19]
:0045D3B5 52                      push edx
:0045D3B6 8A45FC                  mov al, byte ptr [ebp-04]
:0045D3B9 0401                    add al, 01
:0045D3BB 8845FC                  mov byte ptr [ebp-04], al
:0045D3BE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D3C1 81E1FF000000            and ecx, 000000FF
:0045D3C7 6BC924                  imul ecx, 00000024
:0045D3CA 81C1B83B4B00            add ecx, 004B3BB8
:0045D3D0 E86B230000              call 0045F740

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D387(C), :0045D3AA(C)
|
:0045D3D5 E963FFFFFF              jmp 0045D33D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D359(C)
|
:0045D3DA 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045D3DD 884DF4                  mov byte ptr [ebp-0C], cl
:0045D3E0 EB09                    jmp 0045D3EB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D468(U)
|
:0045D3E2 8A55F4                  mov dl, byte ptr [ebp-0C]
:0045D3E5 80C201                  add dl, 01
:0045D3E8 8855F4                  mov byte ptr [ebp-0C], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D3E0(U)
|
:0045D3EB 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045D3EE 25FF000000              and eax, 000000FF
:0045D3F3 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045D3F6 81E1FF000000            and ecx, 000000FF
:0045D3FC 3BC1                    cmp eax, ecx
:0045D3FE 7D6D                    jge 0045D46D
:0045D400 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D403 81E1FF000000            and ecx, 000000FF
:0045D409 6BC924                  imul ecx, 00000024
:0045D40C 81C1B83B4B00            add ecx, 004B3BB8
:0045D412 E86537FFFF              call 00450B7C
:0045D417 85C0                    test eax, eax
:0045D419 744D                    je 0045D468
:0045D41B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D41E 81E1FF000000            and ecx, 000000FF
:0045D424 6BC924                  imul ecx, 00000024
:0045D427 81C1B83B4B00            add ecx, 004B3BB8
:0045D42D E86E4BFEFF              call 00441FA0
:0045D432 25FF000000              and eax, 000000FF
:0045D437 3DFF000000              cmp eax, 000000FF
:0045D43C 752A                    jne 0045D468
:0045D43E 8A55FC                  mov dl, byte ptr [ebp-04]
:0045D441 8855E6                  mov byte ptr [ebp-1A], dl
:0045D444 8A45E6                  mov al, byte ptr [ebp-1A]
:0045D447 50                      push eax
:0045D448 8A4DFC                  mov cl, byte ptr [ebp-04]
:0045D44B 80C101                  add cl, 01
:0045D44E 884DFC                  mov byte ptr [ebp-04], cl
:0045D451 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D454 81E1FF000000            and ecx, 000000FF
:0045D45A 6BC924                  imul ecx, 00000024
:0045D45D 81C1B83B4B00            add ecx, 004B3BB8
:0045D463 E8D8220000              call 0045F740

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D419(C), :0045D43C(C)
|
:0045D468 E975FFFFFF              jmp 0045D3E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D3FE(C)
|
:0045D46D 8A55F8                  mov dl, byte ptr [ebp-08]
:0045D470 8855F4                  mov byte ptr [ebp-0C], dl
:0045D473 EB08                    jmp 0045D47D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D4E0(U)
|
:0045D475 8A45F4                  mov al, byte ptr [ebp-0C]
:0045D478 0401                    add al, 01
:0045D47A 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D473(U)
|
:0045D47D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D480 81E1FF000000            and ecx, 000000FF
:0045D486 8B55F0                  mov edx, dword ptr [ebp-10]
:0045D489 81E2FF000000            and edx, 000000FF
:0045D48F 3BCA                    cmp ecx, edx
:0045D491 7D4F                    jge 0045D4E2
:0045D493 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D496 81E1FF000000            and ecx, 000000FF
:0045D49C 6BC924                  imul ecx, 00000024
:0045D49F 81C1B83B4B00            add ecx, 004B3BB8
:0045D4A5 E8F64AFEFF              call 00441FA0
:0045D4AA 25FF000000              and eax, 000000FF
:0045D4AF 3DFF000000              cmp eax, 000000FF
:0045D4B4 752A                    jne 0045D4E0
:0045D4B6 8A45FC                  mov al, byte ptr [ebp-04]
:0045D4B9 8845E5                  mov byte ptr [ebp-1B], al
:0045D4BC 8A4DE5                  mov cl, byte ptr [ebp-1B]
:0045D4BF 51                      push ecx
:0045D4C0 8A55FC                  mov dl, byte ptr [ebp-04]
:0045D4C3 80C201                  add dl, 01
:0045D4C6 8855FC                  mov byte ptr [ebp-04], dl
:0045D4C9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D4CC 81E1FF000000            and ecx, 000000FF
:0045D4D2 6BC924                  imul ecx, 00000024
:0045D4D5 81C1B83B4B00            add ecx, 004B3BB8
:0045D4DB E860220000              call 0045F740

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D4B4(C)
|
:0045D4E0 EB93                    jmp 0045D475

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D491(C)
|
:0045D4E2 8BE5                    mov esp, ebp
:0045D4E4 5D                      pop ebp
:0045D4E5 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045EBE5   
|
:0045D4E8 55                      push ebp
:0045D4E9 8BEC                    mov ebp, esp
:0045D4EB 83EC28                  sub esp, 00000028
:0045D4EE 894DD8                  mov dword ptr [ebp-28], ecx
:0045D4F1 8B45D8                  mov eax, dword ptr [ebp-28]
:0045D4F4 C7402C00000000          mov [eax+2C], 00000000
:0045D4FB C645F400                mov [ebp-0C], 00
:0045D4FF EB09                    jmp 0045D50A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D800(U)
|
:0045D501 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0045D504 80C101                  add cl, 01
:0045D507 884DF4                  mov byte ptr [ebp-0C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D4FF(U)
|
:0045D50A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045D50D 81E2FF000000            and edx, 000000FF
:0045D513 83FA02                  cmp edx, 00000002
:0045D516 0F8DE9020000            jnl 0045D805
:0045D51C 8B45D8                  mov eax, dword ptr [ebp-28]
:0045D51F 33C9                    xor ecx, ecx
:0045D521 8A4801                  mov cl, byte ptr [eax+01]
:0045D524 85C9                    test ecx, ecx
:0045D526 0F85D9020000            jne 0045D805
:0045D52C E8259F0100              call 00477456
:0045D531 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045D534 81E2FF000000            and edx, 000000FF
:0045D53A 83FA01                  cmp edx, 00000001
:0045D53D 755B                    jne 0045D59A

* Possible StringData Ref from Data Obj ->"ĭxp"
                                  |
:0045D53F 68F0184800              push 004818F0
:0045D544 6A00                    push 00000000
:0045D546 E8E83EFDFF              call 00431433
:0045D54B 83C408                  add esp, 00000008
:0045D54E C645E41E                mov [ebp-1C], 1E
:0045D552 EB08                    jmp 0045D55C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D598(U)
|
:0045D554 8A45E4                  mov al, byte ptr [ebp-1C]
:0045D557 0401                    add al, 01
:0045D559 8845E4                  mov byte ptr [ebp-1C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D552(U)
|
:0045D55C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045D55F 81E1FF000000            and ecx, 000000FF
:0045D565 83F95A                  cmp ecx, 0000005A
:0045D568 7D30                    jge 0045D59A
:0045D56A 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045D56D 81E1FF000000            and ecx, 000000FF
:0045D573 6BC924                  imul ecx, 00000024
:0045D576 81C1B83B4B00            add ecx, 004B3BB8
:0045D57C E8A461FDFF              call 00433725
:0045D581 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045D584 81E1FF000000            and ecx, 000000FF
:0045D58A 6BC924                  imul ecx, 00000024
:0045D58D 81C1B83B4B00            add ecx, 004B3BB8
:0045D593 E83166FDFF              call 00433BC9
:0045D598 EBBA                    jmp 0045D554

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D53D(C), :0045D568(C)
|
:0045D59A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045D59D 81E2FF000000            and edx, 000000FF
:0045D5A3 F7DA                    neg edx
:0045D5A5 1BD2                    sbb edx, edx
:0045D5A7 42                      inc edx
:0045D5A8 52                      push edx
:0045D5A9 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045D5AC E81BFDFFFF              call 0045D2CC
:0045D5B1 C745E800000000          mov [ebp-18], 00000000
:0045D5B8 C645FC00                mov [ebp-04], 00
:0045D5BC EB08                    jmp 0045D5C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D7FB(U)
|
:0045D5BE 8A45FC                  mov al, byte ptr [ebp-04]
:0045D5C1 0401                    add al, 01
:0045D5C3 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D5BC(U)
|
:0045D5C6 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045D5C9 33D2                    xor edx, edx
:0045D5CB 8A5101                  mov dl, byte ptr [ecx+01]
:0045D5CE 85D2                    test edx, edx
:0045D5D0 0F852A020000            jne 0045D800
:0045D5D6 0FBE45FC                movsx eax, byte ptr [ebp-04]
:0045D5DA 83F85A                  cmp eax, 0000005A
:0045D5DD 0F8D1D020000            jnl 0045D800
:0045D5E3 E86E9E0100              call 00477456
:0045D5E8 33C9                    xor ecx, ecx
:0045D5EA 8A0DBC4F4B00            mov cl, byte ptr [004B4FBC]
:0045D5F0 83E101                  and ecx, 00000001
:0045D5F3 85C9                    test ecx, ecx
:0045D5F5 7469                    je 0045D660
:0045D5F7 B928B44800              mov ecx, 0048B428
:0045D5FC E84CC2FBFF              call 0041984D
:0045D601 83F802                  cmp eax, 00000002
:0045D604 755A                    jne 0045D660
:0045D606 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0045D60C 80E2FE                  and dl, FE
:0045D60F 8815BC4F4B00            mov byte ptr [004B4FBC], dl

* Possible StringData Ref from Data Obj ->"1HC"
                                  |
:0045D615 68FC184800              push 004818FC
:0045D61A 6A00                    push 00000000
:0045D61C E8123EFDFF              call 00431433
:0045D621 83C408                  add esp, 00000008
:0045D624 C645E000                mov [ebp-20], 00
:0045D628 EB08                    jmp 0045D632

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D659(U)
|
:0045D62A 8A45E0                  mov al, byte ptr [ebp-20]
:0045D62D 0401                    add al, 01
:0045D62F 8845E0                  mov byte ptr [ebp-20], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D628(U)
|
:0045D632 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045D635 81E1FF000000            and ecx, 000000FF
:0045D63B 83F91E                  cmp ecx, 0000001E
:0045D63E 7D1B                    jge 0045D65B

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045D640 6A07                    push 00000007
:0045D642 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0045D645 81E1FF000000            and ecx, 000000FF
:0045D64B 6BC924                  imul ecx, 00000024
:0045D64E 81C1B83B4B00            add ecx, 004B3BB8
:0045D654 E8A27BFDFF              call 004351FB
:0045D659 EBCF                    jmp 0045D62A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D63E(C)
|
:0045D65B E9DB010000              jmp 0045D83B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D5F5(C), :0045D604(C)
|
:0045D660 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045D663 81E2FF000000            and edx, 000000FF
:0045D669 F7DA                    neg edx
:0045D66B 1BD2                    sbb edx, edx
:0045D66D 83E21E                  and edx, 0000001E
:0045D670 8855EC                  mov byte ptr [ebp-14], dl
:0045D673 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045D676 25FF000000              and eax, 000000FF
:0045D67B F7D8                    neg eax
:0045D67D 1AC0                    sbb al, al
:0045D67F 243C                    and al, 3C
:0045D681 041E                    add al, 1E
:0045D683 8845F8                  mov byte ptr [ebp-08], al
:0045D686 8A4DEC                  mov cl, byte ptr [ebp-14]
:0045D689 884DF0                  mov byte ptr [ebp-10], cl
:0045D68C EB09                    jmp 0045D697

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D6E7(U), :0045D7C8(U)
|
:0045D68E 8A55F0                  mov dl, byte ptr [ebp-10]
:0045D691 80C201                  add dl, 01
:0045D694 8855F0                  mov byte ptr [ebp-10], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D68C(U)
|
:0045D697 8B45F0                  mov eax, dword ptr [ebp-10]
:0045D69A 25FF000000              and eax, 000000FF
:0045D69F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045D6A2 81E1FF000000            and ecx, 000000FF
:0045D6A8 3BC1                    cmp eax, ecx
:0045D6AA 0F8D1D010000            jnl 0045D7CD
:0045D6B0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045D6B3 81E1FF000000            and ecx, 000000FF
:0045D6B9 6BC924                  imul ecx, 00000024
:0045D6BC 81C1B83B4B00            add ecx, 004B3BB8
:0045D6C2 E88A92FDFF              call 00436951
:0045D6C7 85C0                    test eax, eax
:0045D6C9 751E                    jne 0045D6E9
:0045D6CB 6880000000              push 00000080
:0045D6D0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045D6D3 81E1FF000000            and ecx, 000000FF
:0045D6D9 6BC924                  imul ecx, 00000024
:0045D6DC 81C1B83B4B00            add ecx, 004B3BB8
:0045D6E2 E8E991FDFF              call 004368D0
:0045D6E7 EBA5                    jmp 0045D68E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D6C9(C)
|
:0045D6E9 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045D6EC 81E1FF000000            and ecx, 000000FF
:0045D6F2 6BC924                  imul ecx, 00000024
:0045D6F5 81C1B83B4B00            add ecx, 004B3BB8
:0045D6FB E8A048FEFF              call 00441FA0
:0045D700 25FF000000              and eax, 000000FF
:0045D705 0FBE55FC                movsx edx, byte ptr [ebp-04]
:0045D709 3BC2                    cmp eax, edx
:0045D70B 0F85B7000000            jne 0045D7C8
:0045D711 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045D714 81E1FF000000            and ecx, 000000FF
:0045D71A 6BC924                  imul ecx, 00000024
:0045D71D 81C1B83B4B00            add ecx, 004B3BB8
:0045D723 E85880FAFF              call 00405780
:0045D728 25FF000000              and eax, 000000FF
:0045D72D 83F807                  cmp eax, 00000007
:0045D730 0F8492000000            je 0045D7C8
:0045D736 6A40                    push 00000040
:0045D738 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045D73B 81E1FF000000            and ecx, 000000FF
:0045D741 6BC924                  imul ecx, 00000024
:0045D744 81C1B83B4B00            add ecx, 004B3BB8
:0045D74A E8A196FDFF              call 00436DF0
:0045D74F 85C0                    test eax, eax
:0045D751 7575                    jne 0045D7C8
:0045D753 6880000000              push 00000080
:0045D758 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045D75B 81E1FF000000            and ecx, 000000FF
:0045D761 6BC924                  imul ecx, 00000024
:0045D764 81C1B83B4B00            add ecx, 004B3BB8
:0045D76A E88196FDFF              call 00436DF0
:0045D76F 85C0                    test eax, eax
:0045D771 7555                    jne 0045D7C8
:0045D773 33C0                    xor eax, eax
:0045D775 A0BC4F4B00              mov al, byte ptr [004B4FBC]
:0045D77A 83E004                  and eax, 00000004
:0045D77D 85C0                    test eax, eax
:0045D77F 7545                    jne 0045D7C6
:0045D781 6A00                    push 00000000
:0045D783 E80218FDFF              call 0042EF8A
:0045D788 83C404                  add esp, 00000004
:0045D78B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045D78E 81E1FF000000            and ecx, 000000FF
:0045D794 6BC924                  imul ecx, 00000024
:0045D797 81C1B83B4B00            add ecx, 004B3BB8
:0045D79D E8434EFFFF              call 004525E5
:0045D7A2 6A00                    push 00000000
:0045D7A4 6A00                    push 00000000
:0045D7A6 6802020000              push 00000202
:0045D7AB 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0045D7B1 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045D7B2 FF1504D64B00            Call dword ptr [004BD604]
:0045D7B8 8A55F0                  mov dl, byte ptr [ebp-10]
:0045D7BB 52                      push edx
:0045D7BC B9C84F4B00              mov ecx, 004B4FC8
:0045D7C1 E889340000              call 00460C4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D77F(C)
|
:0045D7C6 EB05                    jmp 0045D7CD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D70B(C), :0045D730(C), :0045D751(C), :0045D771(C)
|
:0045D7C8 E9C1FEFFFF              jmp 0045D68E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D6AA(C), :0045D7C6(U)
|
:0045D7CD 8B45D8                  mov eax, dword ptr [ebp-28]
:0045D7D0 83782C00                cmp dword ptr [eax+2C], 00000000
:0045D7D4 7425                    je 0045D7FB
:0045D7D6 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045D7D9 81E1FF000000            and ecx, 000000FF
:0045D7DF F7D9                    neg ecx
:0045D7E1 1BC9                    sbb ecx, ecx
:0045D7E3 41                      inc ecx
:0045D7E4 51                      push ecx
:0045D7E5 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045D7E8 E8DFFAFFFF              call 0045D2CC
:0045D7ED 8B55D8                  mov edx, dword ptr [ebp-28]
:0045D7F0 C7422C00000000          mov [edx+2C], 00000000
:0045D7F7 C645FCFF                mov [ebp-04], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D7D4(C)
|
:0045D7FB E9BEFDFFFF              jmp 0045D5BE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D5D0(C), :0045D5DD(C)
|
:0045D800 E9FCFCFFFF              jmp 0045D501

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D516(C), :0045D526(C)
|
:0045D805 8B45D8                  mov eax, dword ptr [ebp-28]
:0045D808 33C9                    xor ecx, ecx
:0045D80A 8A4801                  mov cl, byte ptr [eax+01]
:0045D80D 83F902                  cmp ecx, 00000002
:0045D810 7529                    jne 0045D83B
:0045D812 C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045D839(U)
|
:0045D819 837DDC04                cmp dword ptr [ebp-24], 00000004
:0045D81D 741C                    je 0045D83B
:0045D81F 837DDC02                cmp dword ptr [ebp-24], 00000002
:0045D823 7416                    je 0045D83B
:0045D825 6A00                    push 00000000
:0045D827 B9806D4800              mov ecx, 00486D80
:0045D82C E826E9FAFF              call 0040C157
:0045D831 8945DC                  mov dword ptr [ebp-24], eax
:0045D834 E81D9C0100              call 00477456
:0045D839 EBDE                    jmp 0045D819

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045D65B(U), :0045D810(C), :0045D81D(C), :0045D823(C)
|
:0045D83B 8BE5                    mov esp, ebp
:0045D83D 5D                      pop ebp
:0045D83E C3                      ret



* Referenced by a CALL at Address:
|:0045DED5   
|
:0045D83F 55                      push ebp
:0045D840 8BEC                    mov ebp, esp
:0045D842 51                      push ecx
:0045D843 894DFC                  mov dword ptr [ebp-04], ecx
:0045D846 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D849 8B08                    mov ecx, dword ptr [eax]
:0045D84B 81E1FF000000            and ecx, 000000FF
:0045D851 8B5508                  mov edx, dword ptr [ebp+08]
:0045D854 880A                    mov byte ptr [edx], cl
:0045D856 8B4508                  mov eax, dword ptr [ebp+08]
:0045D859 83C001                  add eax, 00000001
:0045D85C 894508                  mov dword ptr [ebp+08], eax
:0045D85F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D862 8B11                    mov edx, dword ptr [ecx]
:0045D864 C1EA08                  shr edx, 08
:0045D867 8B4508                  mov eax, dword ptr [ebp+08]
:0045D86A 8810                    mov byte ptr [eax], dl
:0045D86C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D86F 83C101                  add ecx, 00000001
:0045D872 894D08                  mov dword ptr [ebp+08], ecx
:0045D875 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D878 8B4210                  mov eax, dword ptr [edx+10]
:0045D87B 25FF000000              and eax, 000000FF
:0045D880 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D883 8801                    mov byte ptr [ecx], al
:0045D885 8B5508                  mov edx, dword ptr [ebp+08]
:0045D888 83C201                  add edx, 00000001
:0045D88B 895508                  mov dword ptr [ebp+08], edx
:0045D88E 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D891 8B4810                  mov ecx, dword ptr [eax+10]
:0045D894 C1E908                  shr ecx, 08
:0045D897 8B5508                  mov edx, dword ptr [ebp+08]
:0045D89A 880A                    mov byte ptr [edx], cl
:0045D89C 8B4508                  mov eax, dword ptr [ebp+08]
:0045D89F 83C001                  add eax, 00000001
:0045D8A2 894508                  mov dword ptr [ebp+08], eax
:0045D8A5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D8A8 8B5114                  mov edx, dword ptr [ecx+14]
:0045D8AB 81E2FF000000            and edx, 000000FF
:0045D8B1 8B4508                  mov eax, dword ptr [ebp+08]
:0045D8B4 8810                    mov byte ptr [eax], dl
:0045D8B6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D8B9 83C101                  add ecx, 00000001
:0045D8BC 894D08                  mov dword ptr [ebp+08], ecx
:0045D8BF 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D8C2 8B4214                  mov eax, dword ptr [edx+14]
:0045D8C5 C1E808                  shr eax, 08
:0045D8C8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D8CB 8801                    mov byte ptr [ecx], al
:0045D8CD 8B5508                  mov edx, dword ptr [ebp+08]
:0045D8D0 83C201                  add edx, 00000001
:0045D8D3 895508                  mov dword ptr [ebp+08], edx
:0045D8D6 8B4508                  mov eax, dword ptr [ebp+08]
:0045D8D9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D8DC 8A5105                  mov dl, byte ptr [ecx+05]
:0045D8DF 8810                    mov byte ptr [eax], dl
:0045D8E1 8B4508                  mov eax, dword ptr [ebp+08]
:0045D8E4 83C001                  add eax, 00000001
:0045D8E7 894508                  mov dword ptr [ebp+08], eax
:0045D8EA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D8ED 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D8F0 8A4206                  mov al, byte ptr [edx+06]
:0045D8F3 8801                    mov byte ptr [ecx], al
:0045D8F5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D8F8 83C101                  add ecx, 00000001
:0045D8FB 894D08                  mov dword ptr [ebp+08], ecx
:0045D8FE 8B5508                  mov edx, dword ptr [ebp+08]
:0045D901 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D904 8A4808                  mov cl, byte ptr [eax+08]
:0045D907 880A                    mov byte ptr [edx], cl
:0045D909 8B5508                  mov edx, dword ptr [ebp+08]
:0045D90C 83C201                  add edx, 00000001
:0045D90F 895508                  mov dword ptr [ebp+08], edx
:0045D912 8B4508                  mov eax, dword ptr [ebp+08]
:0045D915 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D918 8A5109                  mov dl, byte ptr [ecx+09]
:0045D91B 8810                    mov byte ptr [eax], dl
:0045D91D 8B4508                  mov eax, dword ptr [ebp+08]
:0045D920 83C001                  add eax, 00000001
:0045D923 894508                  mov dword ptr [ebp+08], eax
:0045D926 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D929 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D92C 8A4204                  mov al, byte ptr [edx+04]
:0045D92F 8801                    mov byte ptr [ecx], al
:0045D931 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D934 83C101                  add ecx, 00000001
:0045D937 894D08                  mov dword ptr [ebp+08], ecx
:0045D93A 8B5508                  mov edx, dword ptr [ebp+08]
:0045D93D 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D940 8A4807                  mov cl, byte ptr [eax+07]
:0045D943 880A                    mov byte ptr [edx], cl
:0045D945 8B5508                  mov edx, dword ptr [ebp+08]
:0045D948 83C201                  add edx, 00000001
:0045D94B 895508                  mov dword ptr [ebp+08], edx
:0045D94E 8B4508                  mov eax, dword ptr [ebp+08]
:0045D951 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D954 8A510A                  mov dl, byte ptr [ecx+0A]
:0045D957 8810                    mov byte ptr [eax], dl
:0045D959 8B4508                  mov eax, dword ptr [ebp+08]
:0045D95C 83C001                  add eax, 00000001
:0045D95F 894508                  mov dword ptr [ebp+08], eax
:0045D962 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D965 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D968 8A420B                  mov al, byte ptr [edx+0B]
:0045D96B 8801                    mov byte ptr [ecx], al
:0045D96D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D970 83C101                  add ecx, 00000001
:0045D973 894D08                  mov dword ptr [ebp+08], ecx
:0045D976 8B5508                  mov edx, dword ptr [ebp+08]
:0045D979 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D97C 8A480C                  mov cl, byte ptr [eax+0C]
:0045D97F 880A                    mov byte ptr [edx], cl
:0045D981 8B5508                  mov edx, dword ptr [ebp+08]
:0045D984 83C201                  add edx, 00000001
:0045D987 895508                  mov dword ptr [ebp+08], edx
:0045D98A 8B4508                  mov eax, dword ptr [ebp+08]
:0045D98D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D990 8A510D                  mov dl, byte ptr [ecx+0D]
:0045D993 8810                    mov byte ptr [eax], dl
:0045D995 8B4508                  mov eax, dword ptr [ebp+08]
:0045D998 83C001                  add eax, 00000001
:0045D99B 894508                  mov dword ptr [ebp+08], eax
:0045D99E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D9A1 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D9A4 8A420E                  mov al, byte ptr [edx+0E]
:0045D9A7 8801                    mov byte ptr [ecx], al
:0045D9A9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D9AC 83C101                  add ecx, 00000001
:0045D9AF 894D08                  mov dword ptr [ebp+08], ecx
:0045D9B2 8B5508                  mov edx, dword ptr [ebp+08]
:0045D9B5 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D9B8 8A4818                  mov cl, byte ptr [eax+18]
:0045D9BB 880A                    mov byte ptr [edx], cl
:0045D9BD 8B5508                  mov edx, dword ptr [ebp+08]
:0045D9C0 83C201                  add edx, 00000001
:0045D9C3 895508                  mov dword ptr [ebp+08], edx
:0045D9C6 8B4508                  mov eax, dword ptr [ebp+08]
:0045D9C9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045D9CC 8A5119                  mov dl, byte ptr [ecx+19]
:0045D9CF 8810                    mov byte ptr [eax], dl
:0045D9D1 8B4508                  mov eax, dword ptr [ebp+08]
:0045D9D4 83C001                  add eax, 00000001
:0045D9D7 894508                  mov dword ptr [ebp+08], eax
:0045D9DA 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D9DD 8B55FC                  mov edx, dword ptr [ebp-04]
:0045D9E0 8A421A                  mov al, byte ptr [edx+1A]
:0045D9E3 8801                    mov byte ptr [ecx], al
:0045D9E5 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045D9E8 83C101                  add ecx, 00000001
:0045D9EB 894D08                  mov dword ptr [ebp+08], ecx
:0045D9EE 8B5508                  mov edx, dword ptr [ebp+08]
:0045D9F1 8B45FC                  mov eax, dword ptr [ebp-04]
:0045D9F4 8A481B                  mov cl, byte ptr [eax+1B]
:0045D9F7 880A                    mov byte ptr [edx], cl
:0045D9F9 8B5508                  mov edx, dword ptr [ebp+08]
:0045D9FC 83C201                  add edx, 00000001
:0045D9FF 895508                  mov dword ptr [ebp+08], edx
:0045DA02 8B4508                  mov eax, dword ptr [ebp+08]
:0045DA05 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DA08 8A511C                  mov dl, byte ptr [ecx+1C]
:0045DA0B 8810                    mov byte ptr [eax], dl
:0045DA0D 8B4508                  mov eax, dword ptr [ebp+08]
:0045DA10 83C001                  add eax, 00000001
:0045DA13 894508                  mov dword ptr [ebp+08], eax
:0045DA16 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DA19 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DA1C 8A421D                  mov al, byte ptr [edx+1D]
:0045DA1F 8801                    mov byte ptr [ecx], al
:0045DA21 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DA24 83C101                  add ecx, 00000001
:0045DA27 894D08                  mov dword ptr [ebp+08], ecx
:0045DA2A 8B5508                  mov edx, dword ptr [ebp+08]
:0045DA2D 8B45FC                  mov eax, dword ptr [ebp-04]
:0045DA30 8A4820                  mov cl, byte ptr [eax+20]
:0045DA33 880A                    mov byte ptr [edx], cl
:0045DA35 8B5508                  mov edx, dword ptr [ebp+08]
:0045DA38 83C201                  add edx, 00000001
:0045DA3B 895508                  mov dword ptr [ebp+08], edx
:0045DA3E 8B4508                  mov eax, dword ptr [ebp+08]
:0045DA41 8BE5                    mov esp, ebp
:0045DA43 5D                      pop ebp
:0045DA44 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045DFDD   
|
:0045DA47 55                      push ebp
:0045DA48 8BEC                    mov ebp, esp
:0045DA4A 83EC08                  sub esp, 00000008
:0045DA4D 894DF8                  mov dword ptr [ebp-08], ecx
:0045DA50 8B4508                  mov eax, dword ptr [ebp+08]
:0045DA53 33C9                    xor ecx, ecx
:0045DA55 8A08                    mov cl, byte ptr [eax]
:0045DA57 894DFC                  mov dword ptr [ebp-04], ecx
:0045DA5A 8B5508                  mov edx, dword ptr [ebp+08]
:0045DA5D 83C201                  add edx, 00000001
:0045DA60 895508                  mov dword ptr [ebp+08], edx
:0045DA63 8B4508                  mov eax, dword ptr [ebp+08]
:0045DA66 33C9                    xor ecx, ecx
:0045DA68 8A08                    mov cl, byte ptr [eax]
:0045DA6A C1E108                  shl ecx, 08
:0045DA6D 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DA70 03D1                    add edx, ecx
:0045DA72 8955FC                  mov dword ptr [ebp-04], edx
:0045DA75 8B4508                  mov eax, dword ptr [ebp+08]
:0045DA78 83C001                  add eax, 00000001
:0045DA7B 894508                  mov dword ptr [ebp+08], eax
:0045DA7E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045DA81 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DA84 8911                    mov dword ptr [ecx], edx
:0045DA86 8B4508                  mov eax, dword ptr [ebp+08]
:0045DA89 33C9                    xor ecx, ecx
:0045DA8B 8A08                    mov cl, byte ptr [eax]
:0045DA8D 894DFC                  mov dword ptr [ebp-04], ecx
:0045DA90 8B5508                  mov edx, dword ptr [ebp+08]
:0045DA93 83C201                  add edx, 00000001
:0045DA96 895508                  mov dword ptr [ebp+08], edx
:0045DA99 8B4508                  mov eax, dword ptr [ebp+08]
:0045DA9C 33C9                    xor ecx, ecx
:0045DA9E 8A08                    mov cl, byte ptr [eax]
:0045DAA0 C1E108                  shl ecx, 08
:0045DAA3 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DAA6 03D1                    add edx, ecx
:0045DAA8 8955FC                  mov dword ptr [ebp-04], edx
:0045DAAB 8B4508                  mov eax, dword ptr [ebp+08]
:0045DAAE 83C001                  add eax, 00000001
:0045DAB1 894508                  mov dword ptr [ebp+08], eax
:0045DAB4 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045DAB7 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DABA 895110                  mov dword ptr [ecx+10], edx
:0045DABD 8B4508                  mov eax, dword ptr [ebp+08]
:0045DAC0 33C9                    xor ecx, ecx
:0045DAC2 8A08                    mov cl, byte ptr [eax]
:0045DAC4 894DFC                  mov dword ptr [ebp-04], ecx
:0045DAC7 8B5508                  mov edx, dword ptr [ebp+08]
:0045DACA 83C201                  add edx, 00000001
:0045DACD 895508                  mov dword ptr [ebp+08], edx
:0045DAD0 8B4508                  mov eax, dword ptr [ebp+08]
:0045DAD3 33C9                    xor ecx, ecx
:0045DAD5 8A08                    mov cl, byte ptr [eax]
:0045DAD7 C1E108                  shl ecx, 08
:0045DADA 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DADD 03D1                    add edx, ecx
:0045DADF 8955FC                  mov dword ptr [ebp-04], edx
:0045DAE2 8B4508                  mov eax, dword ptr [ebp+08]
:0045DAE5 83C001                  add eax, 00000001
:0045DAE8 894508                  mov dword ptr [ebp+08], eax
:0045DAEB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045DAEE 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DAF1 895114                  mov dword ptr [ecx+14], edx
:0045DAF4 8B45F8                  mov eax, dword ptr [ebp-08]
:0045DAF7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DAFA 8A11                    mov dl, byte ptr [ecx]
:0045DAFC 885005                  mov byte ptr [eax+05], dl
:0045DAFF 8B4508                  mov eax, dword ptr [ebp+08]
:0045DB02 83C001                  add eax, 00000001
:0045DB05 894508                  mov dword ptr [ebp+08], eax
:0045DB08 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045DB0B 8B5508                  mov edx, dword ptr [ebp+08]
:0045DB0E 8A02                    mov al, byte ptr [edx]
:0045DB10 884106                  mov byte ptr [ecx+06], al
:0045DB13 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DB16 83C101                  add ecx, 00000001
:0045DB19 894D08                  mov dword ptr [ebp+08], ecx
:0045DB1C 8B55F8                  mov edx, dword ptr [ebp-08]
:0045DB1F 8B4508                  mov eax, dword ptr [ebp+08]
:0045DB22 8A08                    mov cl, byte ptr [eax]
:0045DB24 884A08                  mov byte ptr [edx+08], cl
:0045DB27 8B5508                  mov edx, dword ptr [ebp+08]
:0045DB2A 83C201                  add edx, 00000001
:0045DB2D 895508                  mov dword ptr [ebp+08], edx
:0045DB30 8B45F8                  mov eax, dword ptr [ebp-08]
:0045DB33 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DB36 8A11                    mov dl, byte ptr [ecx]
:0045DB38 885009                  mov byte ptr [eax+09], dl
:0045DB3B 8B4508                  mov eax, dword ptr [ebp+08]
:0045DB3E 83C001                  add eax, 00000001
:0045DB41 894508                  mov dword ptr [ebp+08], eax
:0045DB44 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045DB47 8B5508                  mov edx, dword ptr [ebp+08]
:0045DB4A 8A02                    mov al, byte ptr [edx]
:0045DB4C 884104                  mov byte ptr [ecx+04], al
:0045DB4F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DB52 83C101                  add ecx, 00000001
:0045DB55 894D08                  mov dword ptr [ebp+08], ecx
:0045DB58 8B55F8                  mov edx, dword ptr [ebp-08]
:0045DB5B 8B4508                  mov eax, dword ptr [ebp+08]
:0045DB5E 8A08                    mov cl, byte ptr [eax]
:0045DB60 884A07                  mov byte ptr [edx+07], cl
:0045DB63 8B5508                  mov edx, dword ptr [ebp+08]
:0045DB66 83C201                  add edx, 00000001
:0045DB69 895508                  mov dword ptr [ebp+08], edx
:0045DB6C 8B45F8                  mov eax, dword ptr [ebp-08]
:0045DB6F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DB72 8A11                    mov dl, byte ptr [ecx]
:0045DB74 88500A                  mov byte ptr [eax+0A], dl
:0045DB77 8B4508                  mov eax, dword ptr [ebp+08]
:0045DB7A 83C001                  add eax, 00000001
:0045DB7D 894508                  mov dword ptr [ebp+08], eax
:0045DB80 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045DB83 8B5508                  mov edx, dword ptr [ebp+08]
:0045DB86 8A02                    mov al, byte ptr [edx]
:0045DB88 88410B                  mov byte ptr [ecx+0B], al
:0045DB8B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DB8E 83C101                  add ecx, 00000001
:0045DB91 894D08                  mov dword ptr [ebp+08], ecx
:0045DB94 8B55F8                  mov edx, dword ptr [ebp-08]
:0045DB97 8B4508                  mov eax, dword ptr [ebp+08]
:0045DB9A 8A08                    mov cl, byte ptr [eax]
:0045DB9C 884A0C                  mov byte ptr [edx+0C], cl
:0045DB9F 8B5508                  mov edx, dword ptr [ebp+08]
:0045DBA2 83C201                  add edx, 00000001
:0045DBA5 895508                  mov dword ptr [ebp+08], edx
:0045DBA8 8B45F8                  mov eax, dword ptr [ebp-08]
:0045DBAB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DBAE 8A11                    mov dl, byte ptr [ecx]
:0045DBB0 88500D                  mov byte ptr [eax+0D], dl
:0045DBB3 8B4508                  mov eax, dword ptr [ebp+08]
:0045DBB6 83C001                  add eax, 00000001
:0045DBB9 894508                  mov dword ptr [ebp+08], eax
:0045DBBC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045DBBF 8B5508                  mov edx, dword ptr [ebp+08]
:0045DBC2 8A02                    mov al, byte ptr [edx]
:0045DBC4 88410E                  mov byte ptr [ecx+0E], al
:0045DBC7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DBCA 83C101                  add ecx, 00000001
:0045DBCD 894D08                  mov dword ptr [ebp+08], ecx
:0045DBD0 8B55F8                  mov edx, dword ptr [ebp-08]
:0045DBD3 8B4508                  mov eax, dword ptr [ebp+08]
:0045DBD6 8A08                    mov cl, byte ptr [eax]
:0045DBD8 884A18                  mov byte ptr [edx+18], cl
:0045DBDB 8B5508                  mov edx, dword ptr [ebp+08]
:0045DBDE 83C201                  add edx, 00000001
:0045DBE1 895508                  mov dword ptr [ebp+08], edx
:0045DBE4 8B45F8                  mov eax, dword ptr [ebp-08]
:0045DBE7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DBEA 8A11                    mov dl, byte ptr [ecx]
:0045DBEC 885019                  mov byte ptr [eax+19], dl
:0045DBEF 8B4508                  mov eax, dword ptr [ebp+08]
:0045DBF2 83C001                  add eax, 00000001
:0045DBF5 894508                  mov dword ptr [ebp+08], eax
:0045DBF8 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045DBFB 8B5508                  mov edx, dword ptr [ebp+08]
:0045DBFE 8A02                    mov al, byte ptr [edx]
:0045DC00 88411A                  mov byte ptr [ecx+1A], al
:0045DC03 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DC06 83C101                  add ecx, 00000001
:0045DC09 894D08                  mov dword ptr [ebp+08], ecx
:0045DC0C 8B55F8                  mov edx, dword ptr [ebp-08]
:0045DC0F 8B4508                  mov eax, dword ptr [ebp+08]
:0045DC12 8A08                    mov cl, byte ptr [eax]
:0045DC14 884A1B                  mov byte ptr [edx+1B], cl
:0045DC17 8B5508                  mov edx, dword ptr [ebp+08]
:0045DC1A 83C201                  add edx, 00000001
:0045DC1D 895508                  mov dword ptr [ebp+08], edx
:0045DC20 8B45F8                  mov eax, dword ptr [ebp-08]
:0045DC23 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DC26 8A11                    mov dl, byte ptr [ecx]
:0045DC28 88501C                  mov byte ptr [eax+1C], dl
:0045DC2B 8B4508                  mov eax, dword ptr [ebp+08]
:0045DC2E 83C001                  add eax, 00000001
:0045DC31 894508                  mov dword ptr [ebp+08], eax
:0045DC34 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045DC37 8B5508                  mov edx, dword ptr [ebp+08]
:0045DC3A 8A02                    mov al, byte ptr [edx]
:0045DC3C 88411D                  mov byte ptr [ecx+1D], al
:0045DC3F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DC42 83C101                  add ecx, 00000001
:0045DC45 894D08                  mov dword ptr [ebp+08], ecx
:0045DC48 8B5508                  mov edx, dword ptr [ebp+08]
:0045DC4B 33C0                    xor eax, eax
:0045DC4D 8A02                    mov al, byte ptr [edx]
:0045DC4F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045DC52 894120                  mov dword ptr [ecx+20], eax
:0045DC55 8B5508                  mov edx, dword ptr [ebp+08]
:0045DC58 83C201                  add edx, 00000001
:0045DC5B 895508                  mov dword ptr [ebp+08], edx
:0045DC5E 8B4508                  mov eax, dword ptr [ebp+08]
:0045DC61 8BE5                    mov esp, ebp
:0045DC63 5D                      pop ebp
:0045DC64 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045DEA5   
|
:0045DC67 55                      push ebp
:0045DC68 8BEC                    mov ebp, esp
:0045DC6A 51                      push ecx
:0045DC6B 894DFC                  mov dword ptr [ebp-04], ecx
:0045DC6E 8B4508                  mov eax, dword ptr [ebp+08]
:0045DC71 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DC74 8A11                    mov dl, byte ptr [ecx]
:0045DC76 8810                    mov byte ptr [eax], dl
:0045DC78 8B4508                  mov eax, dword ptr [ebp+08]
:0045DC7B 83C001                  add eax, 00000001
:0045DC7E 894508                  mov dword ptr [ebp+08], eax
:0045DC81 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DC84 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DC87 8A4201                  mov al, byte ptr [edx+01]
:0045DC8A 8801                    mov byte ptr [ecx], al
:0045DC8C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DC8F 83C101                  add ecx, 00000001
:0045DC92 894D08                  mov dword ptr [ebp+08], ecx
:0045DC95 8B5508                  mov edx, dword ptr [ebp+08]
:0045DC98 8B45FC                  mov eax, dword ptr [ebp-04]
:0045DC9B 8A4802                  mov cl, byte ptr [eax+02]
:0045DC9E 880A                    mov byte ptr [edx], cl
:0045DCA0 8B5508                  mov edx, dword ptr [ebp+08]
:0045DCA3 83C201                  add edx, 00000001
:0045DCA6 895508                  mov dword ptr [ebp+08], edx
:0045DCA9 8B4508                  mov eax, dword ptr [ebp+08]
:0045DCAC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DCAF 8A5103                  mov dl, byte ptr [ecx+03]
:0045DCB2 8810                    mov byte ptr [eax], dl
:0045DCB4 8B4508                  mov eax, dword ptr [ebp+08]
:0045DCB7 83C001                  add eax, 00000001
:0045DCBA 894508                  mov dword ptr [ebp+08], eax
:0045DCBD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DCC0 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DCC3 8A4204                  mov al, byte ptr [edx+04]
:0045DCC6 8801                    mov byte ptr [ecx], al
:0045DCC8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DCCB 83C101                  add ecx, 00000001
:0045DCCE 894D08                  mov dword ptr [ebp+08], ecx
:0045DCD1 8B5508                  mov edx, dword ptr [ebp+08]
:0045DCD4 8B45FC                  mov eax, dword ptr [ebp-04]
:0045DCD7 8A4805                  mov cl, byte ptr [eax+05]
:0045DCDA 880A                    mov byte ptr [edx], cl
:0045DCDC 8B5508                  mov edx, dword ptr [ebp+08]
:0045DCDF 83C201                  add edx, 00000001
:0045DCE2 895508                  mov dword ptr [ebp+08], edx
:0045DCE5 8B4508                  mov eax, dword ptr [ebp+08]
:0045DCE8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DCEB 8A5124                  mov dl, byte ptr [ecx+24]
:0045DCEE 8810                    mov byte ptr [eax], dl
:0045DCF0 8B4508                  mov eax, dword ptr [ebp+08]
:0045DCF3 83C001                  add eax, 00000001
:0045DCF6 894508                  mov dword ptr [ebp+08], eax
:0045DCF9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DCFC 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DCFF 8A4225                  mov al, byte ptr [edx+25]
:0045DD02 8801                    mov byte ptr [ecx], al
:0045DD04 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DD07 83C101                  add ecx, 00000001
:0045DD0A 894D08                  mov dword ptr [ebp+08], ecx
:0045DD0D 8B5508                  mov edx, dword ptr [ebp+08]
:0045DD10 8B45FC                  mov eax, dword ptr [ebp-04]
:0045DD13 8A4828                  mov cl, byte ptr [eax+28]
:0045DD16 880A                    mov byte ptr [edx], cl
:0045DD18 8B5508                  mov edx, dword ptr [ebp+08]
:0045DD1B 83C201                  add edx, 00000001
:0045DD1E 895508                  mov dword ptr [ebp+08], edx
:0045DD21 8B4508                  mov eax, dword ptr [ebp+08]
:0045DD24 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DD27 8A512C                  mov dl, byte ptr [ecx+2C]
:0045DD2A 8810                    mov byte ptr [eax], dl
:0045DD2C 8B4508                  mov eax, dword ptr [ebp+08]
:0045DD2F 83C001                  add eax, 00000001
:0045DD32 894508                  mov dword ptr [ebp+08], eax
:0045DD35 8B4508                  mov eax, dword ptr [ebp+08]
:0045DD38 8BE5                    mov esp, ebp
:0045DD3A 5D                      pop ebp
:0045DD3B C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045DFAD   
|
:0045DD3E 55                      push ebp
:0045DD3F 8BEC                    mov ebp, esp
:0045DD41 51                      push ecx
:0045DD42 894DFC                  mov dword ptr [ebp-04], ecx
:0045DD45 8B45FC                  mov eax, dword ptr [ebp-04]
:0045DD48 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DD4B 8A11                    mov dl, byte ptr [ecx]
:0045DD4D 8810                    mov byte ptr [eax], dl
:0045DD4F 8B4508                  mov eax, dword ptr [ebp+08]
:0045DD52 83C001                  add eax, 00000001
:0045DD55 894508                  mov dword ptr [ebp+08], eax
:0045DD58 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DD5B 8B5508                  mov edx, dword ptr [ebp+08]
:0045DD5E 8A02                    mov al, byte ptr [edx]
:0045DD60 884101                  mov byte ptr [ecx+01], al
:0045DD63 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DD66 83C101                  add ecx, 00000001
:0045DD69 894D08                  mov dword ptr [ebp+08], ecx
:0045DD6C 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DD6F 8B4508                  mov eax, dword ptr [ebp+08]
:0045DD72 8A08                    mov cl, byte ptr [eax]
:0045DD74 884A02                  mov byte ptr [edx+02], cl
:0045DD77 8B5508                  mov edx, dword ptr [ebp+08]
:0045DD7A 83C201                  add edx, 00000001
:0045DD7D 895508                  mov dword ptr [ebp+08], edx
:0045DD80 8B45FC                  mov eax, dword ptr [ebp-04]
:0045DD83 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DD86 8A11                    mov dl, byte ptr [ecx]
:0045DD88 885003                  mov byte ptr [eax+03], dl
:0045DD8B 8B4508                  mov eax, dword ptr [ebp+08]
:0045DD8E 83C001                  add eax, 00000001
:0045DD91 894508                  mov dword ptr [ebp+08], eax
:0045DD94 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DD97 8B5508                  mov edx, dword ptr [ebp+08]
:0045DD9A 8A02                    mov al, byte ptr [edx]
:0045DD9C 884104                  mov byte ptr [ecx+04], al
:0045DD9F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DDA2 83C101                  add ecx, 00000001
:0045DDA5 894D08                  mov dword ptr [ebp+08], ecx
:0045DDA8 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DDAB 8B4508                  mov eax, dword ptr [ebp+08]
:0045DDAE 8A08                    mov cl, byte ptr [eax]
:0045DDB0 884A05                  mov byte ptr [edx+05], cl
:0045DDB3 8B5508                  mov edx, dword ptr [ebp+08]
:0045DDB6 83C201                  add edx, 00000001
:0045DDB9 895508                  mov dword ptr [ebp+08], edx
:0045DDBC 8B45FC                  mov eax, dword ptr [ebp-04]
:0045DDBF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DDC2 8A11                    mov dl, byte ptr [ecx]
:0045DDC4 885024                  mov byte ptr [eax+24], dl
:0045DDC7 8B4508                  mov eax, dword ptr [ebp+08]
:0045DDCA 83C001                  add eax, 00000001
:0045DDCD 894508                  mov dword ptr [ebp+08], eax
:0045DDD0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DDD3 8B5508                  mov edx, dword ptr [ebp+08]
:0045DDD6 8A02                    mov al, byte ptr [edx]
:0045DDD8 884125                  mov byte ptr [ecx+25], al
:0045DDDB 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DDDE 83C101                  add ecx, 00000001
:0045DDE1 894D08                  mov dword ptr [ebp+08], ecx
:0045DDE4 8B5508                  mov edx, dword ptr [ebp+08]
:0045DDE7 33C0                    xor eax, eax
:0045DDE9 8A02                    mov al, byte ptr [edx]
:0045DDEB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DDEE 894128                  mov dword ptr [ecx+28], eax
:0045DDF1 8B5508                  mov edx, dword ptr [ebp+08]
:0045DDF4 83C201                  add edx, 00000001
:0045DDF7 895508                  mov dword ptr [ebp+08], edx
:0045DDFA 8B4508                  mov eax, dword ptr [ebp+08]
:0045DDFD 33C9                    xor ecx, ecx
:0045DDFF 8A08                    mov cl, byte ptr [eax]
:0045DE01 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DE04 894A2C                  mov dword ptr [edx+2C], ecx
:0045DE07 8B4508                  mov eax, dword ptr [ebp+08]
:0045DE0A 83C001                  add eax, 00000001
:0045DE0D 894508                  mov dword ptr [ebp+08], eax
:0045DE10 8B4508                  mov eax, dword ptr [ebp+08]
:0045DE13 8BE5                    mov esp, ebp
:0045DE15 5D                      pop ebp
:0045DE16 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040EF7C   
|
:0045DE19 55                      push ebp
:0045DE1A 8BEC                    mov ebp, esp
:0045DE1C 83EC14                  sub esp, 00000014
:0045DE1F 894DEC                  mov dword ptr [ebp-14], ecx
:0045DE22 6A19                    push 00000019
:0045DE24 E86111FDFF              call 0042EF8A
:0045DE29 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045DE2C 6A04                    push 00000004
:0045DE2E 6A00                    push 00000000
:0045DE30 6A00                    push 00000000
:0045DE32 B9D01C4B00              mov ecx, 004B1CD0
:0045DE37 E854B10100              call 00478F90
:0045DE3C 8945F0                  mov dword ptr [ebp-10], eax
:0045DE3F 8B45F0                  mov eax, dword ptr [ebp-10]
:0045DE42 8945FC                  mov dword ptr [ebp-04], eax
:0045DE45 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DE48 C60108                  mov byte ptr [ecx], 08
:0045DE4B 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DE4E 83C201                  add edx, 00000001
:0045DE51 8955FC                  mov dword ptr [ebp-04], edx
:0045DE54 B9787F4900              mov ecx, 00497F78
:0045DE59 E84220FBFF              call 0040FEA0
:0045DE5E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045DE61 884101                  mov byte ptr [ecx+01], al
:0045DE64 8B55EC                  mov edx, dword ptr [ebp-14]
:0045DE67 33C0                    xor eax, eax
:0045DE69 8A4202                  mov al, byte ptr [edx+02]
:0045DE6C 83C001                  add eax, 00000001
:0045DE6F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045DE72 884102                  mov byte ptr [ecx+02], al
:0045DE75 8B55F0                  mov edx, dword ptr [ebp-10]
:0045DE78 83C205                  add edx, 00000005
:0045DE7B 8955FC                  mov dword ptr [ebp-04], edx
:0045DE7E B9806D4800              mov ecx, 00486D80
:0045DE83 E89820FBFF              call 0040FF20
:0045DE88 50                      push eax
:0045DE89 8B45FC                  mov eax, dword ptr [ebp-04]
:0045DE8C 50                      push eax
:0045DE8D E89EA60100              call 00478530
:0045DE92 83C408                  add esp, 00000008
:0045DE95 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DE98 83C11E                  add ecx, 0000001E
:0045DE9B 894DFC                  mov dword ptr [ebp-04], ecx
:0045DE9E 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DEA1 52                      push edx
:0045DEA2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045DEA5 E8BDFDFFFF              call 0045DC67
:0045DEAA 8945FC                  mov dword ptr [ebp-04], eax
:0045DEAD C745F400000000          mov [ebp-0C], 00000000
:0045DEB4 EB09                    jmp 0045DEBF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DEDD(U)
|
:0045DEB6 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045DEB9 83C001                  add eax, 00000001
:0045DEBC 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DEB4(U)
|
:0045DEBF 837DF45A                cmp dword ptr [ebp-0C], 0000005A
:0045DEC3 731A                    jnb 0045DEDF
:0045DEC5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DEC8 51                      push ecx
:0045DEC9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045DECC 6BC924                  imul ecx, 00000024
:0045DECF 81C1B83B4B00            add ecx, 004B3BB8
:0045DED5 E865F9FFFF              call 0045D83F
:0045DEDA 8945FC                  mov dword ptr [ebp-04], eax
:0045DEDD EBD7                    jmp 0045DEB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DEC3(C)
|
:0045DEDF C745F880070000          mov [ebp-08], 00000780
:0045DEE6 8B55F8                  mov edx, dword ptr [ebp-08]
:0045DEE9 52                      push edx
:0045DEEA 8B45FC                  mov eax, dword ptr [ebp-04]
:0045DEED 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045DEEE 6A04                    push 00000004
:0045DEF0 6A00                    push 00000000
:0045DEF2 68004B0000              push 00004B00
:0045DEF7 B9881C4B00              mov ecx, 004B1C88
:0045DEFC E88FB00100              call 00478F90
:0045DF01 50                      push eax
:0045DF02 E8B9A60100              call 004785C0
:0045DF07 83C40C                  add esp, 0000000C
:0045DF0A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DF0D 034DF8                  add ecx, dword ptr [ebp-08]
:0045DF10 894DFC                  mov dword ptr [ebp-04], ecx
:0045DF13 6A3D                    push 0000003D
:0045DF15 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DF18 52                      push edx
:0045DF19 68C84E4B00              push 004B4EC8
:0045DF1E E89DA60100              call 004785C0
:0045DF23 83C40C                  add esp, 0000000C
:0045DF26 8B45FC                  mov eax, dword ptr [ebp-04]
:0045DF29 83C03D                  add eax, 0000003D
:0045DF2C 8945FC                  mov dword ptr [ebp-04], eax
:0045DF2F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DF32 2B4DF0                  sub ecx, dword ptr [ebp-10]
:0045DF35 894DF8                  mov dword ptr [ebp-08], ecx
:0045DF38 8B55F8                  mov edx, dword ptr [ebp-08]
:0045DF3B 52                      push edx
:0045DF3C 8B45F0                  mov eax, dword ptr [ebp-10]
:0045DF3F 50                      push eax
:0045DF40 6A00                    push 00000000
:0045DF42 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DF45 E8B0FCFAFF              call 0040DBFA
:0045DF4A 8945F8                  mov dword ptr [ebp-08], eax
:0045DF4D 6A00                    push 00000000
:0045DF4F E83610FDFF              call 0042EF8A
:0045DF54 83C404                  add esp, 00000004
:0045DF57 8BE5                    mov esp, ebp
:0045DF59 5D                      pop ebp
:0045DF5A C20400                  ret 0004



* Referenced by a CALL at Address:
|:0040E8CE   
|
:0045DF5D 55                      push ebp
:0045DF5E 8BEC                    mov ebp, esp
:0045DF60 83EC14                  sub esp, 00000014
:0045DF63 894DEC                  mov dword ptr [ebp-14], ecx
:0045DF66 C745F880070000          mov [ebp-08], 00000780
:0045DF6D 6A19                    push 00000019
:0045DF6F E81610FDFF              call 0042EF8A
:0045DF74 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045DF77 6A04                    push 00000004
:0045DF79 6A00                    push 00000000
:0045DF7B 6A00                    push 00000000
:0045DF7D B9D01C4B00              mov ecx, 004B1CD0
:0045DF82 E809B00100              call 00478F90
:0045DF87 8945F0                  mov dword ptr [ebp-10], eax
:0045DF8A 6800500000              push 00005000
:0045DF8F 8B45F0                  mov eax, dword ptr [ebp-10]
:0045DF92 50                      push eax
:0045DF93 6A00                    push 00000000
:0045DF95 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045DF98 E847FBFAFF              call 0040DAE4
:0045DF9D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045DFA0 83C123                  add ecx, 00000023
:0045DFA3 894DFC                  mov dword ptr [ebp-04], ecx
:0045DFA6 8B55FC                  mov edx, dword ptr [ebp-04]
:0045DFA9 52                      push edx
:0045DFAA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045DFAD E88CFDFFFF              call 0045DD3E
:0045DFB2 8945FC                  mov dword ptr [ebp-04], eax
:0045DFB5 C745F400000000          mov [ebp-0C], 00000000
:0045DFBC EB09                    jmp 0045DFC7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DFE5(U)
|
:0045DFBE 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045DFC1 83C001                  add eax, 00000001
:0045DFC4 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DFBC(U)
|
:0045DFC7 837DF45A                cmp dword ptr [ebp-0C], 0000005A
:0045DFCB 731A                    jnb 0045DFE7
:0045DFCD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045DFD0 51                      push ecx
:0045DFD1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045DFD4 6BC924                  imul ecx, 00000024
:0045DFD7 81C1B83B4B00            add ecx, 004B3BB8
:0045DFDD E865FAFFFF              call 0045DA47
:0045DFE2 8945FC                  mov dword ptr [ebp-04], eax
:0045DFE5 EBD7                    jmp 0045DFBE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045DFCB(C)
|
:0045DFE7 8B55F8                  mov edx, dword ptr [ebp-08]
:0045DFEA 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045DFEB 6A04                    push 00000004
:0045DFED 6A00                    push 00000000
:0045DFEF 68004B0000              push 00004B00
:0045DFF4 B9881C4B00              mov ecx, 004B1C88
:0045DFF9 E892AF0100              call 00478F90
:0045DFFE 50                      push eax
:0045DFFF 8B45FC                  mov eax, dword ptr [ebp-04]
:0045E002 50                      push eax
:0045E003 E8B8A50100              call 004785C0
:0045E008 83C40C                  add esp, 0000000C
:0045E00B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045E00E 034DF8                  add ecx, dword ptr [ebp-08]
:0045E011 894DFC                  mov dword ptr [ebp-04], ecx
:0045E014 6A3D                    push 0000003D
:0045E016 68C84E4B00              push 004B4EC8
:0045E01B 8B55FC                  mov edx, dword ptr [ebp-04]
:0045E01E 52                      push edx
:0045E01F E89CA50100              call 004785C0
:0045E024 83C40C                  add esp, 0000000C
:0045E027 8B45FC                  mov eax, dword ptr [ebp-04]
:0045E02A 83C03D                  add eax, 0000003D
:0045E02D 8945FC                  mov dword ptr [ebp-04], eax
:0045E030 6A00                    push 00000000
:0045E032 E8530FFDFF              call 0042EF8A
:0045E037 83C404                  add esp, 00000004
:0045E03A 8BE5                    mov esp, ebp
:0045E03C 5D                      pop ebp
:0045E03D C20400                  ret 0004



* Referenced by a CALL at Address:
|:00469BFD   
|
:0045E040 55                      push ebp
:0045E041 8BEC                    mov ebp, esp
:0045E043 E81B35FBFF              call 00411563
:0045E048 25FF000000              and eax, 000000FF
:0045E04D 83F803                  cmp eax, 00000003
:0045E050 7516                    jne 0045E068

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045E052 6A06                    push 00000006
:0045E054 B9784E4B00              mov ecx, 004B4E78
:0045E059 E8A21EFBFF              call 0040FF00
:0045E05E B958494B00              mov ecx, 004B4958
:0045E063 E8FAEAFEFF              call 0044CB62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E050(C)
|
:0045E068 5D                      pop ebp
:0045E069 C3                      ret



* Referenced by a CALL at Addresses:
|:00469C09   , :00469C18   
|
:0045E06A 55                      push ebp
:0045E06B 8BEC                    mov ebp, esp
:0045E06D E8F134FBFF              call 00411563
:0045E072 25FF000000              and eax, 000000FF
:0045E077 83F803                  cmp eax, 00000003
:0045E07A 7515                    jne 0045E091
:0045E07C 8B4508                  mov eax, dword ptr [ebp+08]
:0045E07F F7D8                    neg eax
:0045E081 1BC0                    sbb eax, eax
:0045E083 83C008                  add eax, 00000008
:0045E086 50                      push eax
:0045E087 B9784E4B00              mov ecx, 004B4E78
:0045E08C E86F1EFBFF              call 0040FF00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E07A(C)
|
:0045E091 5D                      pop ebp
:0045E092 C3                      ret



* Referenced by a CALL at Address:
|:0045EBA0   
|
:0045E093 55                      push ebp
:0045E094 8BEC                    mov ebp, esp
:0045E096 83EC38                  sub esp, 00000038
:0045E099 894DC8                  mov dword ptr [ebp-38], ecx
:0045E09C C645F0FF                mov [ebp-10], FF
:0045E0A0 C645E0FF                mov [ebp-20], FF
:0045E0A4 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0045E0A7 E84476FAFF              call 004056F0
:0045E0AC C745F801000000          mov [ebp-08], 00000001
:0045E0B3 C745E800000000          mov [ebp-18], 00000000
:0045E0BA 8B45C8                  mov eax, dword ptr [ebp-38]
:0045E0BD 33C9                    xor ecx, ecx
:0045E0BF 8A4801                  mov cl, byte ptr [eax+01]
:0045E0C2 85C9                    test ecx, ecx
:0045E0C4 7405                    je 0045E0CB
:0045E0C6 E9F2060000              jmp 0045E7BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E0C4(C)
|
:0045E0CB C745F400000000          mov [ebp-0C], 00000000
:0045E0D2 EB09                    jmp 0045E0DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E143(U)
|
:0045E0D4 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045E0D7 83C201                  add edx, 00000001
:0045E0DA 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E0D2(U)
|
:0045E0DD 837DF41E                cmp dword ptr [ebp-0C], 0000001E
:0045E0E1 7362                    jnb 0045E145
:0045E0E3 8B45C8                  mov eax, dword ptr [ebp-38]
:0045E0E6 33C9                    xor ecx, ecx
:0045E0E8 8A4801                  mov cl, byte ptr [eax+01]
:0045E0EB 85C9                    test ecx, ecx
:0045E0ED 7556                    jne 0045E145

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045E0EF 6A04                    push 00000004
:0045E0F1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045E0F4 6BC924                  imul ecx, 00000024
:0045E0F7 81C1B83B4B00            add ecx, 004B3BB8
:0045E0FD E8EE8CFDFF              call 00436DF0
:0045E102 85C0                    test eax, eax
:0045E104 753D                    jne 0045E143
:0045E106 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045E109 6BC924                  imul ecx, 00000024
:0045E10C 81C1B83B4B00            add ecx, 004B3BB8
:0045E112 E86976FAFF              call 00405780
:0045E117 25FF000000              and eax, 000000FF
:0045E11C 83F807                  cmp eax, 00000007
:0045E11F 7522                    jne 0045E143
:0045E121 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045E124 6BC924                  imul ecx, 00000024
:0045E127 81C1B83B4B00            add ecx, 004B3BB8
:0045E12D E89EDFFFFF              call 0045C0D0
:0045E132 25FF000000              and eax, 000000FF
:0045E137 83F802                  cmp eax, 00000002
:0045E13A 7507                    jne 0045E143
:0045E13C C745F800000000          mov [ebp-08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E104(C), :0045E11F(C), :0045E13A(C)
|
:0045E143 EB8F                    jmp 0045E0D4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E0E1(C), :0045E0ED(C)
|
:0045E145 837DF800                cmp dword ptr [ebp-08], 00000000
:0045E149 7423                    je 0045E16E
:0045E14B B9B83B4B00              mov ecx, 004B3BB8
:0045E150 E8EB3AFDFF              call 00431C40
:0045E155 668B10                  mov dx, word ptr [eax]
:0045E158 668955D8                mov word ptr [ebp-28], dx
:0045E15C 8A45D9                  mov al, byte ptr [ebp-27]
:0045E15F 50                      push eax
:0045E160 8A4DD8                  mov cl, byte ptr [ebp-28]
:0045E163 51                      push ecx
:0045E164 B958494B00              mov ecx, 004B4958
:0045E169 E87FF9FEFF              call 0044DAED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E149(C)
|
:0045E16E 8B55C8                  mov edx, dword ptr [ebp-38]
:0045E171 C6420500                mov [edx+05], 00

* Possible StringData Ref from Data Obj ->"ۭxp"
                                  |
:0045E175 6808194800              push 00481908
:0045E17A 6A00                    push 00000000
:0045E17C E8B232FDFF              call 00431433
:0045E181 83C408                  add esp, 00000008
:0045E184 6A01                    push 00000001
:0045E186 E8B0C40000              call 0046A63B
:0045E18B 83C404                  add esp, 00000004
:0045E18E 6A00                    push 00000000
:0045E190 E8F50DFDFF              call 0042EF8A
:0045E195 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E7A4(U)
|
:0045E198 837DF800                cmp dword ptr [ebp-08], 00000000
:0045E19C 0F8507060000            jne 0045E7A9

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045E1A2 6A04                    push 00000004
:0045E1A4 E81214FDFF              call 0042F5BB
:0045E1A9 83C404                  add esp, 00000004
:0045E1AC E8A5920100              call 00477456
:0045E1B1 C745F400000000          mov [ebp-0C], 00000000
:0045E1B8 EB09                    jmp 0045E1C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E79F(U)
|
:0045E1BA 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045E1BD 83C001                  add eax, 00000001
:0045E1C0 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E1B8(U)
|
:0045E1C3 837DF800                cmp dword ptr [ebp-08], 00000000
:0045E1C7 0F85D7050000            jne 0045E7A4
:0045E1CD E884920100              call 00477456
:0045E1D2 B958494B00              mov ecx, 004B4958
:0045E1D7 E8FCE9FEFF              call 0044CBD8
:0045E1DC B958494B00              mov ecx, 004B4958
:0045E1E1 E87BF0FEFF              call 0044D261
:0045E1E6 8945EC                  mov dword ptr [ebp-14], eax
:0045E1E9 B9A83B4B00              mov ecx, 004B3BA8
:0045E1EE E83D17FCFF              call 0041F930
:0045E1F3 85C0                    test eax, eax
:0045E1F5 7429                    je 0045E220
:0045E1F7 837DEC00                cmp dword ptr [ebp-14], 00000000
:0045E1FB 7523                    jne 0045E220

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045E1FD 6A04                    push 00000004
:0045E1FF E8B713FDFF              call 0042F5BB
:0045E204 83C404                  add esp, 00000004
:0045E207 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045E20A 8A5105                  mov dl, byte ptr [ecx+05]
:0045E20D 80F201                  xor dl, 01
:0045E210 8B45C8                  mov eax, dword ptr [ebp-38]
:0045E213 885005                  mov byte ptr [eax+05], dl
:0045E216 B958494B00              mov ecx, 004B4958
:0045E21B E8F1E6FEFF              call 0044C911

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E1F5(C), :0045E1FB(C)
|
:0045E220 B958494B00              mov ecx, 004B4958
:0045E225 E8FDEAFEFF              call 0044CD27
:0045E22A 50                      push eax
:0045E22B 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0045E22E E86D88FDFF              call 00436AA0
:0045E233 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0045E236 51                      push ecx
:0045E237 E8A015FFFF              call 0044F7DC
:0045E23C 83C404                  add esp, 00000004
:0045E23F 8845DC                  mov byte ptr [ebp-24], al
:0045E242 8B55F0                  mov edx, dword ptr [ebp-10]
:0045E245 81E2FF000000            and edx, 000000FF
:0045E24B 8B45DC                  mov eax, dword ptr [ebp-24]
:0045E24E 25FF000000              and eax, 000000FF
:0045E253 3BD0                    cmp edx, eax
:0045E255 0F84B3000000            je 0045E30E
:0045E25B B958494B00              mov ecx, 004B4958
:0045E260 E862E9FEFF              call 0044CBC7
:0045E265 85C0                    test eax, eax
:0045E267 740E                    je 0045E277
:0045E269 B958494B00              mov ecx, 004B4958
:0045E26E E8EFE8FEFF              call 0044CB62
:0045E273 C645F0FF                mov [ebp-10], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E267(C)
|
:0045E277 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045E27A 81E1FF000000            and ecx, 000000FF
:0045E280 81F9FF000000            cmp ecx, 000000FF
:0045E286 0F8482000000            je 0045E30E
:0045E28C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045E28F 81E1FF000000            and ecx, 000000FF
:0045E295 6BC924                  imul ecx, 00000024
:0045E298 81C1B83B4B00            add ecx, 004B3BB8
:0045E29E E82DDEFFFF              call 0045C0D0
:0045E2A3 25FF000000              and eax, 000000FF
:0045E2A8 83F802                  cmp eax, 00000002
:0045E2AB 7561                    jne 0045E30E
:0045E2AD 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045E2B0 81E1FF000000            and ecx, 000000FF
:0045E2B6 6BC924                  imul ecx, 00000024
:0045E2B9 81C1B83B4B00            add ecx, 004B3BB8
:0045E2BF E84CE6FAFF              call 0040C910
:0045E2C4 85C0                    test eax, eax
:0045E2C6 751D                    jne 0045E2E5
:0045E2C8 6A20                    push 00000020
:0045E2CA 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045E2CD 81E1FF000000            and ecx, 000000FF
:0045E2D3 6BC924                  imul ecx, 00000024
:0045E2D6 81C1B83B4B00            add ecx, 004B3BB8
:0045E2DC E80F8BFDFF              call 00436DF0
:0045E2E1 85C0                    test eax, eax
:0045E2E3 7429                    je 0045E30E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E2C6(C)
|
:0045E2E5 33D2                    xor edx, edx
:0045E2E7 8A15C04F4B00            mov dl, byte ptr [004B4FC0]
:0045E2ED 85D2                    test edx, edx
:0045E2EF 751D                    jne 0045E30E
:0045E2F1 8A45DC                  mov al, byte ptr [ebp-24]
:0045E2F4 8845F0                  mov byte ptr [ebp-10], al
:0045E2F7 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045E2FA 81E1FF000000            and ecx, 000000FF
:0045E300 6BC924                  imul ecx, 00000024
:0045E303 81C1B83B4B00            add ecx, 004B3BB8
:0045E309 E83569FDFF              call 00434C43

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E255(C), :0045E286(C), :0045E2AB(C), :0045E2E3(C), :0045E2EF(C)
|
:0045E30E C605F87C4A00FF          mov byte ptr [004A7CF8], FF
:0045E315 8B4DE5                  mov ecx, dword ptr [ebp-1B]
:0045E318 81E1FF000000            and ecx, 000000FF
:0045E31E 33D2                    xor edx, edx
:0045E320 81F9FF000000            cmp ecx, 000000FF
:0045E326 0F95C2                  setne dl
:0045E329 8B45C8                  mov eax, dword ptr [ebp-38]
:0045E32C 895028                  mov dword ptr [eax+28], edx
:0045E32F 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045E332 83792800                cmp dword ptr [ecx+28], 00000000
:0045E336 7433                    je 0045E36B
:0045E338 8B55DC                  mov edx, dword ptr [ebp-24]
:0045E33B 81E2FF000000            and edx, 000000FF
:0045E341 81FAFF000000            cmp edx, 000000FF
:0045E347 7522                    jne 0045E36B
:0045E349 B958494B00              mov ecx, 004B4958
:0045E34E E874E8FEFF              call 0044CBC7
:0045E353 85C0                    test eax, eax
:0045E355 7414                    je 0045E36B
:0045E357 B958494B00              mov ecx, 004B4958
:0045E35C E801E8FEFF              call 0044CB62
:0045E361 8B45C8                  mov eax, dword ptr [ebp-38]
:0045E364 C7402800000000          mov [eax+28], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E336(C), :0045E347(C), :0045E355(C)
|
:0045E36B 8B4DE5                  mov ecx, dword ptr [ebp-1B]
:0045E36E 81E1FF000000            and ecx, 000000FF
:0045E374 81F9FF000000            cmp ecx, 000000FF
:0045E37A 7505                    jne 0045E381
:0045E37C E8F9C60000              call 0046AA7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E37A(C)
|
:0045E381 E8D0900100              call 00477456
:0045E386 B928B44800              mov ecx, 0048B428
:0045E38B E8BDB4FBFF              call 0041984D
:0045E390 83F801                  cmp eax, 00000001
:0045E393 0F85C4010000            jne 0045E55D
:0045E399 33D2                    xor edx, edx
:0045E39B 8A15C04F4B00            mov dl, byte ptr [004B4FC0]
:0045E3A1 85D2                    test edx, edx
:0045E3A3 0F85B4010000            jne 0045E55D
:0045E3A9 6A00                    push 00000000
:0045E3AB E88BC20000              call 0046A63B
:0045E3B0 83C404                  add esp, 00000004
:0045E3B3 8D45E4                  lea eax, dword ptr [ebp-1C]
:0045E3B6 50                      push eax
:0045E3B7 E89C14FFFF              call 0044F858
:0045E3BC 83C404                  add esp, 00000004
:0045E3BF 25FF000000              and eax, 000000FF
:0045E3C4 83F81F                  cmp eax, 0000001F
:0045E3C7 0F85A1000000            jne 0045E46E
:0045E3CD B958494B00              mov ecx, 004B4958
:0045E3D2 E88BE7FEFF              call 0044CB62
:0045E3D7 8A4DF0                  mov cl, byte ptr [ebp-10]
:0045E3DA 51                      push ecx
:0045E3DB 8D55E4                  lea edx, dword ptr [ebp-1C]
:0045E3DE 52                      push edx
:0045E3DF 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045E3E2 E80907FFFF              call 0044EAF0
:0045E3E7 85C0                    test eax, eax
:0045E3E9 747A                    je 0045E465
:0045E3EB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E3EE 81E1FF000000            and ecx, 000000FF
:0045E3F4 6BC924                  imul ecx, 00000024
:0045E3F7 81C1B83B4B00            add ecx, 004B3BB8
:0045E3FD E84F85FDFF              call 00436951
:0045E402 85C0                    test eax, eax
:0045E404 745F                    je 0045E465
:0045E406 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E409 81E1FF000000            and ecx, 000000FF
:0045E40F 6BC924                  imul ecx, 00000024
:0045E412 81C1B83B4B00            add ecx, 004B3BB8
:0045E418 E834A2FDFF              call 00438651
:0045E41D 8945E8                  mov dword ptr [ebp-18], eax
:0045E420 6A00                    push 00000000
:0045E422 6A00                    push 00000000
:0045E424 6802020000              push 00000202
:0045E429 A1B0554B00              mov eax, dword ptr [004B55B0]
:0045E42E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E42F FF1504D64B00            Call dword ptr [004BD604]
:0045E435 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E438 81E1FF000000            and ecx, 000000FF
:0045E43E 6BC924                  imul ecx, 00000024
:0045E441 81C1B83B4B00            add ecx, 004B3BB8
:0045E447 E89485FDFF              call 004369E0
:0045E44C 50                      push eax
:0045E44D B9C84F4B00              mov ecx, 004B4FC8
:0045E452 E8093BFEFF              call 00441F60
:0045E457 8A4DF0                  mov cl, byte ptr [ebp-10]
:0045E45A 51                      push ecx
:0045E45B B9C84F4B00              mov ecx, 004B4FC8
:0045E460 E8EA270000              call 00460C4F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E3E9(C), :0045E404(C)
|
:0045E465 C645F0FF                mov [ebp-10], FF
:0045E469 E9E5000000              jmp 0045E553

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E3C7(C)
|
:0045E46E 8B55F0                  mov edx, dword ptr [ebp-10]
:0045E471 81E2FF000000            and edx, 000000FF
:0045E477 81FAFF000000            cmp edx, 000000FF
:0045E47D 0F84B1000000            je 0045E534
:0045E483 8B45F0                  mov eax, dword ptr [ebp-10]
:0045E486 25FF000000              and eax, 000000FF
:0045E48B 83F85A                  cmp eax, 0000005A
:0045E48E 0F8DA0000000            jnl 0045E534
:0045E494 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E497 81E1FF000000            and ecx, 000000FF
:0045E49D 6BC924                  imul ecx, 00000024
:0045E4A0 81C1B83B4B00            add ecx, 004B3BB8
:0045E4A6 E8A684FDFF              call 00436951
:0045E4AB 85C0                    test eax, eax
:0045E4AD 7460                    je 0045E50F
:0045E4AF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E4B2 81E1FF000000            and ecx, 000000FF
:0045E4B8 6BC924                  imul ecx, 00000024
:0045E4BB 81C1B83B4B00            add ecx, 004B3BB8
:0045E4C1 E88BA1FDFF              call 00438651
:0045E4C6 8945E8                  mov dword ptr [ebp-18], eax
:0045E4C9 6A00                    push 00000000
:0045E4CB 6A00                    push 00000000
:0045E4CD 6802020000              push 00000202
:0045E4D2 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0045E4D8 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E4D9 FF1504D64B00            Call dword ptr [004BD604]
:0045E4DF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E4E2 81E1FF000000            and ecx, 000000FF
:0045E4E8 6BC924                  imul ecx, 00000024
:0045E4EB 81C1B83B4B00            add ecx, 004B3BB8
:0045E4F1 E8EA84FDFF              call 004369E0
:0045E4F6 50                      push eax
:0045E4F7 B9C84F4B00              mov ecx, 004B4FC8
:0045E4FC E85F3AFEFF              call 00441F60
:0045E501 8A55F0                  mov dl, byte ptr [ebp-10]
:0045E504 52                      push edx
:0045E505 B9C84F4B00              mov ecx, 004B4FC8
:0045E50A E840270000              call 00460C4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E4AD(C)
|
:0045E50F B9784E4B00              mov ecx, 004B4E78
:0045E514 E81F110000              call 0045F638
:0045E519 C645F0FF                mov [ebp-10], FF
:0045E51D 6A00                    push 00000000
:0045E51F 6A00                    push 00000000
:0045E521 6802020000              push 00000202
:0045E526 A1B0554B00              mov eax, dword ptr [004B55B0]
:0045E52B 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0045E52C FF1504D64B00            Call dword ptr [004BD604]
:0045E532 EB1F                    jmp 0045E553

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E47D(C), :0045E48E(C)
|
:0045E534 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E537 81E1FF000000            and ecx, 000000FF
:0045E53D 81F9FF000000            cmp ecx, 000000FF
:0045E543 750E                    jne 0045E553
:0045E545 8D55E4                  lea edx, dword ptr [ebp-1C]
:0045E548 52                      push edx
:0045E549 B958494B00              mov ecx, 004B4958
:0045E54E E8BCFCFEFF              call 0044E20F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E469(U), :0045E532(U), :0045E543(C)
|
:0045E553 6A01                    push 00000001
:0045E555 E8E1C00000              call 0046A63B
:0045E55A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E393(C), :0045E3A3(C)
|
:0045E55D B9784E4B00              mov ecx, 004B4E78
:0045E562 E8D989FDFF              call 00436F40
:0045E567 25FF000000              and eax, 000000FF
:0045E56C 8945FC                  mov dword ptr [ebp-04], eax
:0045E56F 837DFC07                cmp dword ptr [ebp-04], 00000007
:0045E573 7406                    je 0045E57B
:0045E575 837DFC08                cmp dword ptr [ebp-04], 00000008
:0045E579 752C                    jne 0045E5A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E573(C)
|
:0045E57B 6A00                    push 00000000
:0045E57D 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045E580 E87B19FBFF              call 0040FF00
:0045E585 33C0                    xor eax, eax
:0045E587 837DFC07                cmp dword ptr [ebp-04], 00000007
:0045E58B 0F94C0                  sete al
:0045E58E 50                      push eax
:0045E58F E82D020000              call 0045E7C1
:0045E594 83C404                  add esp, 00000004
:0045E597 85C0                    test eax, eax
:0045E599 740C                    je 0045E5A7

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045E59B 6A06                    push 00000006
:0045E59D B9784E4B00              mov ecx, 004B4E78
:0045E5A2 E85919FBFF              call 0040FF00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E579(C), :0045E599(C)
|
:0045E5A7 B928B44800              mov ecx, 0048B428
:0045E5AC E89CB2FBFF              call 0041984D
:0045E5B1 83F802                  cmp eax, 00000002
:0045E5B4 754C                    jne 0045E602
:0045E5B6 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0045E5B9 51                      push ecx
:0045E5BA E81D12FFFF              call 0044F7DC
:0045E5BF 83C404                  add esp, 00000004
:0045E5C2 8845D4                  mov byte ptr [ebp-2C], al
:0045E5C5 8B55D4                  mov edx, dword ptr [ebp-2C]
:0045E5C8 81E2FF000000            and edx, 000000FF
:0045E5CE 81FAFF000000            cmp edx, 000000FF
:0045E5D4 7422                    je 0045E5F8
:0045E5D6 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0045E5D9 81E1FF000000            and ecx, 000000FF
:0045E5DF 6BC924                  imul ecx, 00000024
:0045E5E2 81C1B83B4B00            add ecx, 004B3BB8
:0045E5E8 E8F383FDFF              call 004369E0
:0045E5ED 50                      push eax
:0045E5EE E8A4E20000              call 0046C897
:0045E5F3 83C404                  add esp, 00000004
:0045E5F6 EB0A                    jmp 0045E602

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E5D4(C)
|

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045E5F8 6A06                    push 00000006
:0045E5FA 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045E5FD E8FE18FBFF              call 0040FF00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E5B4(C), :0045E5F6(U)
|
:0045E602 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045E605 E83689FDFF              call 00436F40
:0045E60A 25FF000000              and eax, 000000FF
:0045E60F 83F806                  cmp eax, 00000006
:0045E612 0F8584000000            jne 0045E69C
:0045E618 8B45F0                  mov eax, dword ptr [ebp-10]
:0045E61B 25FF000000              and eax, 000000FF
:0045E620 3DFF000000              cmp eax, 000000FF
:0045E625 740E                    je 0045E635
:0045E627 B958494B00              mov ecx, 004B4958
:0045E62C E831E5FEFF              call 0044CB62
:0045E631 C645F0FF                mov [ebp-10], FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E625(C)
|
:0045E635 6A00                    push 00000000
:0045E637 E8FFBF0000              call 0046A63B
:0045E63C 83C404                  add esp, 00000004
:0045E63F B958494B00              mov ecx, 004B4958
:0045E644 E85BEBFEFF              call 0044D1A4

* Possible StringData Ref from Data Obj ->"ҦROܡH"
                                  |
:0045E649 8B0D48184800            mov ecx, dword ptr [00481848]
:0045E64F 51                      push ecx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045E650 6A06                    push 00000006
:0045E652 E8DC2DFDFF              call 00431433
:0045E657 83C408                  add esp, 00000008
:0045E65A 8945F8                  mov dword ptr [ebp-08], eax
:0045E65D 837DF800                cmp dword ptr [ebp-08], 00000000
:0045E661 7525                    jne 0045E688
:0045E663 33D2                    xor edx, edx
:0045E665 8A15BC4F4B00            mov dl, byte ptr [004B4FBC]
:0045E66B 83E202                  and edx, 00000002
:0045E66E 85D2                    test edx, edx
:0045E670 7416                    je 0045E688
:0045E672 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045E675 E845ECFFFF              call 0045D2BF
:0045E67A 8945F8                  mov dword ptr [ebp-08], eax
:0045E67D 837DF800                cmp dword ptr [ebp-08], 00000000
:0045E681 7405                    je 0045E688
:0045E683 E935010000              jmp 0045E7BD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E661(C), :0045E670(C), :0045E681(C)
|
:0045E688 6A00                    push 00000000
:0045E68A 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045E68D E86E18FBFF              call 0040FF00
:0045E692 6A01                    push 00000001
:0045E694 E8A2BF0000              call 0046A63B
:0045E699 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E612(C)
|
:0045E69C 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045E69F E89C88FDFF              call 00436F40
:0045E6A4 25FF000000              and eax, 000000FF
:0045E6A9 83F805                  cmp eax, 00000005
:0045E6AC 7505                    jne 0045E6B3
:0045E6AE E90A010000              jmp 0045E7BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E6AC(C)
|
:0045E6B3 837DE800                cmp dword ptr [ebp-18], 00000000
:0045E6B7 0F84E2000000            je 0045E79F
:0045E6BD 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045E6C0 E8DE0A0000              call 0045F1A3
:0045E6C5 8B45C8                  mov eax, dword ptr [ebp-38]
:0045E6C8 33C9                    xor ecx, ecx
:0045E6CA 8A4801                  mov cl, byte ptr [eax+01]
:0045E6CD 85C9                    test ecx, ecx
:0045E6CF 7405                    je 0045E6D6
:0045E6D1 E9E7000000              jmp 0045E7BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E6CF(C)
|
:0045E6D6 C645D000                mov [ebp-30], 00
:0045E6DA C745CC00000000          mov [ebp-34], 00000000
:0045E6E1 EB09                    jmp 0045E6EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E761(U)
|
:0045E6E3 8B55CC                  mov edx, dword ptr [ebp-34]
:0045E6E6 83C201                  add edx, 00000001
:0045E6E9 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E6E1(U)
|
:0045E6EC 837DCC1E                cmp dword ptr [ebp-34], 0000001E
:0045E6F0 7371                    jnb 0045E763
:0045E6F2 6880000000              push 00000080
:0045E6F7 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0045E6FA 6BC924                  imul ecx, 00000024
:0045E6FD 81C1B83B4B00            add ecx, 004B3BB8
:0045E703 E8E886FDFF              call 00436DF0
:0045E708 85C0                    test eax, eax
:0045E70A 7555                    jne 0045E761
:0045E70C 6A10                    push 00000010
:0045E70E 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0045E711 6BC924                  imul ecx, 00000024
:0045E714 81C1B83B4B00            add ecx, 004B3BB8
:0045E71A E85183FDFF              call 00436A70
:0045E71F 85C0                    test eax, eax
:0045E721 753E                    jne 0045E761
:0045E723 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0045E726 6BC924                  imul ecx, 00000024
:0045E729 81C1B83B4B00            add ecx, 004B3BB8
:0045E72F E89CD9FFFF              call 0045C0D0
:0045E734 25FF000000              and eax, 000000FF
:0045E739 83F802                  cmp eax, 00000002
:0045E73C 7523                    jne 0045E761
:0045E73E 8B4DCC                  mov ecx, dword ptr [ebp-34]
:0045E741 6BC924                  imul ecx, 00000024
:0045E744 81C1B83B4B00            add ecx, 004B3BB8
:0045E74A E83170FAFF              call 00405780
:0045E74F 25FF000000              and eax, 000000FF
:0045E754 83F807                  cmp eax, 00000007
:0045E757 7508                    jne 0045E761
:0045E759 8A45D0                  mov al, byte ptr [ebp-30]
:0045E75C 0401                    add al, 01
:0045E75E 8845D0                  mov byte ptr [ebp-30], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E70A(C), :0045E721(C), :0045E73C(C), :0045E757(C)
|
:0045E761 EB80                    jmp 0045E6E3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E6F0(C)
|
:0045E763 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0045E766 81E1FF000000            and ecx, 000000FF
:0045E76C 85C9                    test ecx, ecx
:0045E76E 7528                    jne 0045E798
:0045E770 B9784E4B00              mov ecx, 004B4E78
:0045E775 E8BE0E0000              call 0045F638
:0045E77A B958494B00              mov ecx, 004B4958
:0045E77F E820EAFEFF              call 0044D1A4

* Possible StringData Ref from Data Obj ->"ҦROܡH"
                                  |
:0045E784 8B1548184800            mov edx, dword ptr [00481848]
:0045E78A 52                      push edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0045E78B 6A02                    push 00000002
:0045E78D E8A12CFDFF              call 00431433
:0045E792 83C408                  add esp, 00000008
:0045E795 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E76E(C)
|
:0045E798 C745E800000000          mov [ebp-18], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E6B7(C)
|
:0045E79F E916FAFFFF              jmp 0045E1BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E1C7(C)
|
:0045E7A4 E9EFF9FFFF              jmp 0045E198

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E19C(C)
|
:0045E7A9 B958494B00              mov ecx, 004B4958
:0045E7AE E8F1E9FEFF              call 0044D1A4
:0045E7B3 B958494B00              mov ecx, 004B4958
:0045E7B8 E80EFAFEFF              call 0044E1CB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E0C6(U), :0045E683(U), :0045E6AE(U), :0045E6D1(U)
|
:0045E7BD 8BE5                    mov esp, ebp
:0045E7BF 5D                      pop ebp
:0045E7C0 C3                      ret



* Referenced by a CALL at Address:
|:0045E58F   
|
:0045E7C1 55                      push ebp
:0045E7C2 8BEC                    mov ebp, esp
:0045E7C4 83EC28                  sub esp, 00000028
:0045E7C7 C645DC00                mov [ebp-24], 00
:0045E7CB C745D800000000          mov [ebp-28], 00000000
:0045E7D2 EB09                    jmp 0045E7DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E87B(U)
|
:0045E7D4 8B45D8                  mov eax, dword ptr [ebp-28]
:0045E7D7 83C001                  add eax, 00000001
:0045E7DA 8945D8                  mov dword ptr [ebp-28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E7D2(U)
|
:0045E7DD 837DD81E                cmp dword ptr [ebp-28], 0000001E
:0045E7E1 0F8399000000            jnb 0045E880
:0045E7E7 6880000000              push 00000080
:0045E7EC 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045E7EF 6BC924                  imul ecx, 00000024
:0045E7F2 81C1B83B4B00            add ecx, 004B3BB8
:0045E7F8 E8F385FDFF              call 00436DF0
:0045E7FD 85C0                    test eax, eax
:0045E7FF 757A                    jne 0045E87B
:0045E801 6A40                    push 00000040
:0045E803 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045E806 6BC924                  imul ecx, 00000024
:0045E809 81C1B83B4B00            add ecx, 004B3BB8
:0045E80F E8DC85FDFF              call 00436DF0
:0045E814 85C0                    test eax, eax
:0045E816 7563                    jne 0045E87B
:0045E818 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045E81B 6BC924                  imul ecx, 00000024
:0045E81E 81C1B83B4B00            add ecx, 004B3BB8
:0045E824 E8A7D8FFFF              call 0045C0D0
:0045E829 25FF000000              and eax, 000000FF
:0045E82E 83F802                  cmp eax, 00000002
:0045E831 7548                    jne 0045E87B
:0045E833 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045E836 6BC924                  imul ecx, 00000024
:0045E839 81C1B83B4B00            add ecx, 004B3BB8
:0045E83F E83C6FFAFF              call 00405780
:0045E844 25FF000000              and eax, 000000FF
:0045E849 83F807                  cmp eax, 00000007
:0045E84C 752D                    jne 0045E87B
:0045E84E 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0045E851 6BC924                  imul ecx, 00000024
:0045E854 81C1B83B4B00            add ecx, 004B3BB8
:0045E85A E89C6CFDFF              call 004354FB
:0045E85F 85C0                    test eax, eax
:0045E861 7518                    jne 0045E87B
:0045E863 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045E866 81E1FF000000            and ecx, 000000FF
:0045E86C 8A55D8                  mov dl, byte ptr [ebp-28]
:0045E86F 88540DE0                mov byte ptr [ebp+ecx-20], dl
:0045E873 8A45DC                  mov al, byte ptr [ebp-24]
:0045E876 0401                    add al, 01
:0045E878 8845DC                  mov byte ptr [ebp-24], al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E7FF(C), :0045E816(C), :0045E831(C), :0045E84C(C), :0045E861(C)
|
:0045E87B E954FFFFFF              jmp 0045E7D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E7E1(C)
|
:0045E880 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045E883 81E1FF000000            and ecx, 000000FF
:0045E889 85C9                    test ecx, ecx
:0045E88B 7517                    jne 0045E8A4

* Possible StringData Ref from Data Obj ->"SiHʪC"
                                  |
:0045E88D 6814194800              push 00481914
:0045E892 E8BFB00000              call 00469956
:0045E897 83C404                  add esp, 00000004
:0045E89A B801000000              mov eax, 00000001
:0045E89F E983000000              jmp 0045E927

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E88B(C)
|
:0045E8A4 837D0800                cmp dword ptr [ebp+08], 00000000
:0045E8A8 7411                    je 0045E8BB
:0045E8AA 8A15C44F4B00            mov dl, byte ptr [004B4FC4]
:0045E8B0 80C201                  add dl, 01
:0045E8B3 8815C44F4B00            mov byte ptr [004B4FC4], dl
:0045E8B9 EB2E                    jmp 0045E8E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E8A8(C)
|
:0045E8BB 33C0                    xor eax, eax
:0045E8BD A0C44F4B00              mov al, byte ptr [004B4FC4]
:0045E8C2 85C0                    test eax, eax
:0045E8C4 7514                    jne 0045E8DA
:0045E8C6 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045E8C9 81E1FF000000            and ecx, 000000FF
:0045E8CF 83E901                  sub ecx, 00000001
:0045E8D2 880DC44F4B00            mov byte ptr [004B4FC4], cl
:0045E8D8 EB0F                    jmp 0045E8E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E8C4(C)
|
:0045E8DA 8A15C44F4B00            mov dl, byte ptr [004B4FC4]
:0045E8E0 80EA01                  sub dl, 01
:0045E8E3 8815C44F4B00            mov byte ptr [004B4FC4], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E8B9(U), :0045E8D8(U)
|
:0045E8E9 33C0                    xor eax, eax
:0045E8EB A0C44F4B00              mov al, byte ptr [004B4FC4]
:0045E8F0 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0045E8F3 81E1FF000000            and ecx, 000000FF
:0045E8F9 3BC1                    cmp eax, ecx
:0045E8FB 7C07                    jl 0045E904
:0045E8FD C605C44F4B0000          mov byte ptr [004B4FC4], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E8FB(C)
|
:0045E904 B958494B00              mov ecx, 004B4958
:0045E909 E854E2FEFF              call 0044CB62
:0045E90E 33D2                    xor edx, edx
:0045E910 8A15C44F4B00            mov dl, byte ptr [004B4FC4]
:0045E916 8A4415E0                mov al, byte ptr [ebp+edx-20]
:0045E91A 50                      push eax
:0045E91B B958494B00              mov ecx, 004B4958
:0045E920 E8F6F3FEFF              call 0044DD1B
:0045E925 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E89F(U)
|
:0045E927 8BE5                    mov esp, ebp
:0045E929 5D                      pop ebp
:0045E92A C3                      ret



* Referenced by a CALL at Addresses:
|:0045EB5C   , :0045EBDD   
|
:0045E92B 55                      push ebp
:0045E92C 8BEC                    mov ebp, esp
:0045E92E 83EC18                  sub esp, 00000018
:0045E931 894DE8                  mov dword ptr [ebp-18], ecx
:0045E934 8B4508                  mov eax, dword ptr [ebp+08]
:0045E937 F7D8                    neg eax
:0045E939 1BC0                    sbb eax, eax
:0045E93B 83E01E                  and eax, 0000001E
:0045E93E 8945EC                  mov dword ptr [ebp-14], eax
:0045E941 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045E944 F7D9                    neg ecx
:0045E946 1BC9                    sbb ecx, ecx
:0045E948 83E13C                  and ecx, 0000003C
:0045E94B 83C11E                  add ecx, 0000001E
:0045E94E 894DF4                  mov dword ptr [ebp-0C], ecx
:0045E951 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0045E954 E8976DFAFF              call 004056F0
:0045E959 C745F800000000          mov [ebp-08], 00000000
:0045E960 8B55EC                  mov edx, dword ptr [ebp-14]
:0045E963 8955F0                  mov dword ptr [ebp-10], edx
:0045E966 EB09                    jmp 0045E971

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EAB3(U)
|
:0045E968 8B45F0                  mov eax, dword ptr [ebp-10]
:0045E96B 83C001                  add eax, 00000001
:0045E96E 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E966(U)
|
:0045E971 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E974 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:0045E977 0F833B010000            jnb 0045EAB8
:0045E97D 6A20                    push 00000020
:0045E97F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E982 6BC924                  imul ecx, 00000024
:0045E985 81C1B83B4B00            add ecx, 004B3BB8
:0045E98B E8E080FDFF              call 00436A70
:0045E990 85C0                    test eax, eax
:0045E992 0F841B010000            je 0045EAB3
:0045E998 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E99B 6BC924                  imul ecx, 00000024
:0045E99E 81C1B83B4B00            add ecx, 004B3BB8
:0045E9A4 E8A87FFDFF              call 00436951
:0045E9A9 85C0                    test eax, eax
:0045E9AB 0F8402010000            je 0045EAB3
:0045E9B1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E9B4 6BC924                  imul ecx, 00000024
:0045E9B7 81C1B83B4B00            add ecx, 004B3BB8
:0045E9BD E81E80FDFF              call 004369E0
:0045E9C2 8BC8                    mov ecx, eax
:0045E9C4 6BC950                  imul ecx, 00000050
:0045E9C7 81C1787F4900            add ecx, 00497F78
:0045E9CD E81834FAFF              call 00401DEA
:0045E9D2 C1E804                  shr eax, 04
:0045E9D5 83C001                  add eax, 00000001
:0045E9D8 8945F8                  mov dword ptr [ebp-08], eax
:0045E9DB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E9DE 6BC924                  imul ecx, 00000024
:0045E9E1 81C1B83B4B00            add ecx, 004B3BB8
:0045E9E7 E8F448FAFF              call 004032E0
:0045E9EC 3B45F8                  cmp eax, dword ptr [ebp-08]
:0045E9EF 7717                    ja 0045EA08
:0045E9F1 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045E9F4 6BC924                  imul ecx, 00000024
:0045E9F7 81C1B83B4B00            add ecx, 004B3BB8
:0045E9FD E8DE48FAFF              call 004032E0
:0045EA02 83E801                  sub eax, 00000001
:0045EA05 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E9EF(C)
|
:0045EA08 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EA0B 6BC924                  imul ecx, 00000024
:0045EA0E 81C1B83B4B00            add ecx, 004B3BB8
:0045EA14 E82732FDFF              call 00431C40
:0045EA19 50                      push eax
:0045EA1A 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0045EA1D E87E80FDFF              call 00436AA0
:0045EA22 8A55FD                  mov dl, byte ptr [ebp-03]
:0045EA25 52                      push edx
:0045EA26 8A45FC                  mov al, byte ptr [ebp-04]
:0045EA29 50                      push eax
:0045EA2A B958494B00              mov ecx, 004B4958
:0045EA2F E8B9F0FEFF              call 0044DAED
:0045EA34 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045EA36 6A03                    push 00000003
:0045EA38 6A28                    push 00000028
:0045EA3A 8A4DF0                  mov cl, byte ptr [ebp-10]
:0045EA3D 51                      push ecx
:0045EA3E 68FF000000              push 000000FF
:0045EA43 B958494B00              mov ecx, 004B4958
:0045EA48 E843FDFEFF              call 0044E790
:0045EA4D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EA50 6BC924                  imul ecx, 00000024
:0045EA53 81C1B83B4B00            add ecx, 004B3BB8
:0045EA59 E88248FAFF              call 004032E0
:0045EA5E 2B45F8                  sub eax, dword ptr [ebp-08]
:0045EA61 50                      push eax
:0045EA62 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EA65 6BC924                  imul ecx, 00000024
:0045EA68 81C1B83B4B00            add ecx, 004B3BB8
:0045EA6E E8A247FDFF              call 00433215
:0045EA73 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EA76 6BC924                  imul ecx, 00000024
:0045EA79 81C1B83B4B00            add ecx, 004B3BB8
:0045EA7F E85C7FFDFF              call 004369E0
:0045EA84 50                      push eax
:0045EA85 E892E00000              call 0046CB1C
:0045EA8A 83C404                  add esp, 00000004
:0045EA8D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EA90 6BC924                  imul ecx, 00000024
:0045EA93 81C1B83B4B00            add ecx, 004B3BB8
:0045EA99 E8E37EFDFF              call 00436981
:0045EA9E 85C0                    test eax, eax
:0045EAA0 7411                    je 0045EAB3
:0045EAA2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EAA5 6BC924                  imul ecx, 00000024
:0045EAA8 81C1B83B4B00            add ecx, 004B3BB8
:0045EAAE E8955DFDFF              call 00434848

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045E992(C), :0045E9AB(C), :0045EAA0(C)
|
:0045EAB3 E9B0FEFFFF              jmp 0045E968

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045E977(C)
|
:0045EAB8 8BE5                    mov esp, ebp
:0045EABA 5D                      pop ebp
:0045EABB C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045ED96   
|
:0045EABE 55                      push ebp
:0045EABF 8BEC                    mov ebp, esp
:0045EAC1 83EC08                  sub esp, 00000008
:0045EAC4 894DF8                  mov dword ptr [ebp-08], ecx
:0045EAC7 837D0800                cmp dword ptr [ebp+08], 00000000
:0045EACB 0F8595000000            jne 0045EB66
:0045EAD1 C645FC00                mov [ebp-04], 00
:0045EAD5 EB08                    jmp 0045EADF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EB20(U)
|
:0045EAD7 8A45FC                  mov al, byte ptr [ebp-04]
:0045EADA 0401                    add al, 01
:0045EADC 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EAD5(U)
|
:0045EADF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045EAE2 81E1FF000000            and ecx, 000000FF
:0045EAE8 83F95A                  cmp ecx, 0000005A
:0045EAEB 7D35                    jge 0045EB22
:0045EAED 68C0000000              push 000000C0
:0045EAF2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045EAF5 81E1FF000000            and ecx, 000000FF
:0045EAFB 6BC924                  imul ecx, 00000024
:0045EAFE 81C1B83B4B00            add ecx, 004B3BB8
:0045EB04 E8B782FDFF              call 00436DC0
:0045EB09 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045EB0C 81E1FF000000            and ecx, 000000FF
:0045EB12 6BC924                  imul ecx, 00000024
:0045EB15 81C1B83B4B00            add ecx, 004B3BB8
:0045EB1B E8054CFDFF              call 00433725
:0045EB20 EBB5                    jmp 0045EAD7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EAEB(C)
|
:0045EB22 C645FC00                mov [ebp-04], 00
:0045EB26 EB09                    jmp 0045EB31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EB55(U)
|
:0045EB28 8A55FC                  mov dl, byte ptr [ebp-04]
:0045EB2B 80C201                  add dl, 01
:0045EB2E 8855FC                  mov byte ptr [ebp-04], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EB26(U)
|
:0045EB31 8B45FC                  mov eax, dword ptr [ebp-04]
:0045EB34 25FF000000              and eax, 000000FF
:0045EB39 83F81E                  cmp eax, 0000001E
:0045EB3C 7D19                    jge 0045EB57
:0045EB3E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045EB41 81E1FF000000            and ecx, 000000FF
:0045EB47 6BC924                  imul ecx, 00000024
:0045EB4A 81C1B83B4B00            add ecx, 004B3BB8
:0045EB50 E87450FDFF              call 00433BC9
:0045EB55 EBD1                    jmp 0045EB28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EB3C(C)
|
:0045EB57 6A00                    push 00000000
:0045EB59 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EB5C E8CAFDFFFF              call 0045E92B
:0045EB61 E842D6FFFF              call 0045C1A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EACB(C)
|
:0045EB66 B958494B00              mov ecx, 004B4958
:0045EB6B E87EF6FEFF              call 0044E1EE
:0045EB70 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EB73 E8C00A0000              call 0045F638
:0045EB78 6A01                    push 00000001
:0045EB7A E8BCBA0000              call 0046A63B
:0045EB7F 83C404                  add esp, 00000004
:0045EB82 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EB85 C7414801000000          mov [ecx+48], 00000001
:0045EB8C 6A00                    push 00000000
:0045EB8E 8B55F8                  mov edx, dword ptr [ebp-08]
:0045EB91 8B4248                  mov eax, dword ptr [edx+48]
:0045EB94 50                      push eax
:0045EB95 E863F10000              call 0046DCFD
:0045EB9A 83C408                  add esp, 00000008
:0045EB9D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EBA0 E8EEF4FFFF              call 0045E093
:0045EBA5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EBA8 C7414800000000          mov [ecx+48], 00000000
:0045EBAF 6A00                    push 00000000
:0045EBB1 8B55F8                  mov edx, dword ptr [ebp-08]
:0045EBB4 8B4248                  mov eax, dword ptr [edx+48]
:0045EBB7 50                      push eax
:0045EBB8 E840F10000              call 0046DCFD
:0045EBBD 83C408                  add esp, 00000008
:0045EBC0 6A00                    push 00000000
:0045EBC2 E874BA0000              call 0046A63B
:0045EBC7 83C404                  add esp, 00000004
:0045EBCA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EBCD 33D2                    xor edx, edx
:0045EBCF 8A5101                  mov dl, byte ptr [ecx+01]
:0045EBD2 85D2                    test edx, edx
:0045EBD4 7402                    je 0045EBD8
:0045EBD6 EB12                    jmp 0045EBEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EBD4(C)
|
:0045EBD8 6A01                    push 00000001
:0045EBDA 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EBDD E849FDFFFF              call 0045E92B
:0045EBE2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EBE5 E8FEE8FFFF              call 0045D4E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EBD6(U)
|
:0045EBEA 8BE5                    mov esp, ebp
:0045EBEC 5D                      pop ebp
:0045EBED C20400                  ret 0004



* Referenced by a CALL at Address:
|:0045EE1A   
|
:0045EBF0 55                      push ebp
:0045EBF1 8BEC                    mov ebp, esp
:0045EBF3 83EC0C                  sub esp, 0000000C
:0045EBF6 894DF4                  mov dword ptr [ebp-0C], ecx
:0045EBF9 EB0F                    jmp 0045EC0A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EDBD(U)
|
:0045EBFB 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045EBFE 8A4802                  mov cl, byte ptr [eax+02]
:0045EC01 80C101                  add cl, 01
:0045EC04 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045EC07 884A02                  mov byte ptr [edx+02], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EBF9(U)
|
:0045EC0A 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045EC0D 33C9                    xor ecx, ecx
:0045EC0F 8A4801                  mov cl, byte ptr [eax+01]
:0045EC12 85C9                    test ecx, ecx
:0045EC14 0F85A8010000            jne 0045EDC2
:0045EC1A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045EC1D 33C0                    xor eax, eax
:0045EC1F 8A4202                  mov al, byte ptr [edx+02]
:0045EC22 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045EC25 33D2                    xor edx, edx
:0045EC27 8A5103                  mov dl, byte ptr [ecx+03]
:0045EC2A 3BC2                    cmp eax, edx
:0045EC2C 0F8CEE000000            jl 0045ED20

* Possible StringData Ref from Data Obj ->"ѩ԰ӪFAMhC
"
                                  |
:0045EC32 682C194800              push 0048192C
:0045EC37 6A00                    push 00000000
:0045EC39 E8F527FDFF              call 00431433
:0045EC3E 83C408                  add esp, 00000008
:0045EC41 C745FC01000000          mov [ebp-04], 00000001
:0045EC48 C645F800                mov [ebp-08], 00
:0045EC4C EB08                    jmp 0045EC56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045ECEB(U)
|
:0045EC4E 8A45F8                  mov al, byte ptr [ebp-08]
:0045EC51 0401                    add al, 01
:0045EC53 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EC4C(U)
|
:0045EC56 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EC59 81E1FF000000            and ecx, 000000FF
:0045EC5F 83F91E                  cmp ecx, 0000001E
:0045EC62 0F8D88000000            jnl 0045ECF0
:0045EC68 6A00                    push 00000000
:0045EC6A E821F2FAFF              call 0040DE90
:0045EC6F 83C404                  add esp, 00000004
:0045EC72 85C0                    test eax, eax
:0045EC74 743B                    je 0045ECB1
:0045EC76 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EC79 81E1FF000000            and ecx, 000000FF
:0045EC7F 6BC924                  imul ecx, 00000024
:0045EC82 81C1B83B4B00            add ecx, 004B3BB8
:0045EC88 E8537DFDFF              call 004369E0
:0045EC8D 85C0                    test eax, eax
:0045EC8F 751E                    jne 0045ECAF
:0045EC91 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EC94 81E1FF000000            and ecx, 000000FF
:0045EC9A 6BC924                  imul ecx, 00000024
:0045EC9D 81C1B83B4B00            add ecx, 004B3BB8
:0045ECA3 E8A05BFDFF              call 00434848
:0045ECA8 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EC8F(C)
|
:0045ECAF EB3A                    jmp 0045ECEB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EC74(C)
|
:0045ECB1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045ECB4 81E1FF000000            and ecx, 000000FF
:0045ECBA 6BC924                  imul ecx, 00000024
:0045ECBD 81C1B83B4B00            add ecx, 004B3BB8
:0045ECC3 E8187DFDFF              call 004369E0
:0045ECC8 83F802                  cmp eax, 00000002
:0045ECCB 751E                    jne 0045ECEB
:0045ECCD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045ECD0 81E1FF000000            and ecx, 000000FF
:0045ECD6 6BC924                  imul ecx, 00000024
:0045ECD9 81C1B83B4B00            add ecx, 004B3BB8
:0045ECDF E8645BFDFF              call 00434848
:0045ECE4 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045ECAF(U), :0045ECCB(C)
|
:0045ECEB E95EFFFFFF              jmp 0045EC4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EC62(C)
|
:0045ECF0 837DFC00                cmp dword ptr [ebp-04], 00000000
:0045ECF4 741E                    je 0045ED14
:0045ECF6 B9B83B4B00              mov ecx, 004B3BB8
:0045ECFB E8D0D3FFFF              call 0045C0D0
:0045ED00 25FF000000              and eax, 000000FF
:0045ED05 83F802                  cmp eax, 00000002
:0045ED08 750A                    jne 0045ED14
:0045ED0A B9B83B4B00              mov ecx, 004B3BB8
:0045ED0F E8345BFDFF              call 00434848

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045ECF4(C), :0045ED08(C)
|
:0045ED14 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045ED17 C6420103                mov [edx+01], 03
:0045ED1B E9A2000000              jmp 0045EDC2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EC2C(C)
|
:0045ED20 C605C44F4B0000          mov byte ptr [004B4FC4], 00
:0045ED27 837D0800                cmp dword ptr [ebp+08], 00000000
:0045ED2B 7508                    jne 0045ED35
:0045ED2D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045ED30 E8B3050000              call 0045F2E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045ED2B(C)
|
:0045ED35 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045ED38 E842060000              call 0045F37F
:0045ED3D 25FF000000              and eax, 000000FF
:0045ED42 8B048538184800          mov eax, dword ptr [4*eax+00481838]
:0045ED49 50                      push eax
:0045ED4A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045ED4D 33D2                    xor edx, edx
:0045ED4F 8A5102                  mov dl, byte ptr [ecx+02]
:0045ED52 83C201                  add edx, 00000001
:0045ED55 52                      push edx

* Possible StringData Ref from Data Obj ->"%w^X  %s"
                                  |
:0045ED56 6848194800              push 00481948
:0045ED5B 6A00                    push 00000000
:0045ED5D E8D126FDFF              call 00431433
:0045ED62 83C410                  add esp, 00000010
:0045ED65 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045ED68 33C9                    xor ecx, ecx
:0045ED6A 8A4801                  mov cl, byte ptr [eax+01]
:0045ED6D 85C9                    test ecx, ecx
:0045ED6F 7512                    jne 0045ED83
:0045ED71 837D0800                cmp dword ptr [ebp+08], 00000000
:0045ED75 750C                    jne 0045ED83
:0045ED77 6A00                    push 00000000
:0045ED79 B9806D4800              mov ecx, 00486D80
:0045ED7E E8D4D3FAFF              call 0040C157

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045ED6F(C), :0045ED75(C)
|
:0045ED83 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045ED86 33C0                    xor eax, eax
:0045ED88 8A4201                  mov al, byte ptr [edx+01]
:0045ED8B 85C0                    test eax, eax
:0045ED8D 752E                    jne 0045EDBD
:0045ED8F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045ED92 51                      push ecx
:0045ED93 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045ED96 E823FDFFFF              call 0045EABE
:0045ED9B 837D0800                cmp dword ptr [ebp+08], 00000000
:0045ED9F 7407                    je 0045EDA8
:0045EDA1 C7450800000000          mov [ebp+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045ED9F(C)
|
:0045EDA8 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045EDAB 33C0                    xor eax, eax
:0045EDAD 8A4201                  mov al, byte ptr [edx+01]
:0045EDB0 83F805                  cmp eax, 00000005
:0045EDB3 7508                    jne 0045EDBD
:0045EDB5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045EDB8 8A4101                  mov al, byte ptr [ecx+01]
:0045EDBB EB13                    jmp 0045EDD0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045ED8D(C), :0045EDB3(C)
|
:0045EDBD E939FEFFFF              jmp 0045EBFB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045EC14(C), :0045ED1B(U)
|
:0045EDC2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045EDC5 E8D0020000              call 0045F09A
:0045EDCA 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045EDCD 8A4201                  mov al, byte ptr [edx+01]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EDBB(U)
|
:0045EDD0 8BE5                    mov esp, ebp
:0045EDD2 5D                      pop ebp
:0045EDD3 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0042F344   
|
:0045EDD6 55                      push ebp
:0045EDD7 8BEC                    mov ebp, esp
:0045EDD9 83EC08                  sub esp, 00000008
:0045EDDC 894DF8                  mov dword ptr [ebp-08], ecx
:0045EDDF A18CAA4800              mov eax, dword ptr [0048AA8C]
:0045EDE4 8945FC                  mov dword ptr [ebp-04], eax
:0045EDE7 833D8CAA480000          cmp dword ptr [0048AA8C], 00000000
:0045EDEE 740A                    je 0045EDFA
:0045EDF0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EDF3 E836000000              call 0045EE2E
:0045EDF8 EB0F                    jmp 0045EE09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EDEE(C)
|
:0045EDFA 8B0D8CAA4800            mov ecx, dword ptr [0048AA8C]
:0045EE00 51                      push ecx
:0045EE01 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EE04 E89ADBFFFF              call 0045C9A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EDF8(U)
|
:0045EE09 C7058CAA480000000000    mov dword ptr [0048AA8C], 00000000
:0045EE13 8B55FC                  mov edx, dword ptr [ebp-04]
:0045EE16 52                      push edx
:0045EE17 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EE1A E8D1FDFFFF              call 0045EBF0
:0045EE1F E8E3DD0000              call 0046CC07
:0045EE24 8B45F8                  mov eax, dword ptr [ebp-08]
:0045EE27 8A4001                  mov al, byte ptr [eax+01]
:0045EE2A 8BE5                    mov esp, ebp
:0045EE2C 5D                      pop ebp
:0045EE2D C3                      ret



* Referenced by a CALL at Address:
|:0045EDF3   
|
:0045EE2E 55                      push ebp
:0045EE2F 8BEC                    mov ebp, esp
:0045EE31 83EC14                  sub esp, 00000014
:0045EE34 894DF0                  mov dword ptr [ebp-10], ecx
:0045EE37 6A19                    push 00000019
:0045EE39 E84C01FDFF              call 0042EF8A
:0045EE3E 83C404                  add esp, 00000004
:0045EE41 8B45F0                  mov eax, dword ptr [ebp-10]
:0045EE44 C6400100                mov [eax+01], 00
:0045EE48 E88EDD0000              call 0046CBDB
:0045EE4D B978294B00              mov ecx, 004B2978
:0045EE52 E859DAFAFF              call 0040C8B0
:0045EE57 2500400000              and eax, 00004000
:0045EE5C 85C0                    test eax, eax
:0045EE5E 7409                    je 0045EE69
:0045EE60 C745EC00000000          mov [ebp-14], 00000000
:0045EE67 EB12                    jmp 0045EE7B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EE5E(C)
|
:0045EE69 B978294B00              mov ecx, 004B2978
:0045EE6E E81DDBFAFF              call 0040C990
:0045EE73 25FF000000              and eax, 000000FF
:0045EE78 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EE67(U)
|
:0045EE7B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EE7E 8A55EC                  mov dl, byte ptr [ebp-14]
:0045EE81 885125                  mov byte ptr [ecx+25], dl
:0045EE84 E8AA12FBFF              call 00410133
:0045EE89 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EE8C E8EF030000              call 0045F280
:0045EE91 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EE94 E829040000              call 0045F2C2
:0045EE99 E84913FBFF              call 004101E7
:0045EE9E 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EEA1 E85A94FFFF              call 00458300
:0045EEA6 50                      push eax
:0045EEA7 E864960100              call 00478510
:0045EEAC 83C404                  add esp, 00000004
:0045EEAF 8945FC                  mov dword ptr [ebp-04], eax
:0045EEB2 6A00                    push 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045EEB4 6A06                    push 00000006
:0045EEB6 6A38                    push 00000038
:0045EEB8 8B45FC                  mov eax, dword ptr [ebp-04]
:0045EEBB 8D0CC540000000          lea ecx, dword ptr [8*eax+00000040]
:0045EEC2 51                      push ecx

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0045EEC3 68C8000000              push 000000C8
:0045EEC8 8B55FC                  mov edx, dword ptr [ebp-04]
:0045EECB C1E202                  shl edx, 02
:0045EECE B840010000              mov eax, 00000140
:0045EED3 2BC2                    sub eax, edx
:0045EED5 83E820                  sub eax, 00000020
:0045EED8 50                      push eax
:0045EED9 B978544B00              mov ecx, 004B5478
:0045EEDE E8F2930000              call 004682D5
:0045EEE3 68DC000000              push 000000DC
:0045EEE8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045EEEB D1E9                    shr ecx, 1
:0045EEED BA28000000              mov edx, 00000028
:0045EEF2 2BD1                    sub edx, ecx
:0045EEF4 52                      push edx
:0045EEF5 B9306D4800              mov ecx, 00486D30
:0045EEFA E80C70FAFF              call 00405F0B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045EEFF 6A04                    push 00000004
:0045EF01 B9306D4800              mov ecx, 00486D30
:0045EF06 E84971FAFF              call 00406054
:0045EF0B 6A10                    push 00000010
:0045EF0D B9306D4800              mov ecx, 00486D30
:0045EF12 E8A170FAFF              call 00405FB8
:0045EF17 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EF1A E8E193FFFF              call 00458300
:0045EF1F 50                      push eax
:0045EF20 68306D4800              push 00486D30
:0045EF25 E8287CFAFF              call 00406B52
:0045EF2A 83C408                  add esp, 00000008
:0045EF2D E81C12FBFF              call 0041014E
:0045EF32 8B45F0                  mov eax, dword ptr [ebp-10]
:0045EF35 33C9                    xor ecx, ecx
:0045EF37 8A08                    mov cl, byte ptr [eax]
:0045EF39 3B0D64D44700            cmp ecx, dword ptr [0047D464]
:0045EF3F 740E                    je 0045EF4F
:0045EF41 8B55F0                  mov edx, dword ptr [ebp-10]
:0045EF44 8A02                    mov al, byte ptr [edx]
:0045EF46 50                      push eax
:0045EF47 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EF4A E88FD9FFFF              call 0045C8DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EF3F(C)
|
:0045EF4F C605BC4F4B0000          mov byte ptr [004B4FBC], 00
:0045EF56 C605C04F4B0000          mov byte ptr [004B4FC0], 00
:0045EF5D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045EF60 E821DAFFFF              call 0045C986
:0045EF65 C745F800000000          mov [ebp-08], 00000000
:0045EF6C EB09                    jmp 0045EF77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EFDF(U)
|
:0045EF6E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EF71 83C101                  add ecx, 00000001
:0045EF74 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EF6C(U)
|
:0045EF77 837DF85A                cmp dword ptr [ebp-08], 0000005A
:0045EF7B 7364                    jnb 0045EFE1
:0045EF7D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EF80 6BC924                  imul ecx, 00000024
:0045EF83 81C1B83B4B00            add ecx, 004B3BB8
:0045EF89 E842D1FFFF              call 0045C0D0
:0045EF8E 25FF000000              and eax, 000000FF
:0045EF93 85C0                    test eax, eax
:0045EF95 7448                    je 0045EFDF
:0045EF97 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EF9A 6BC924                  imul ecx, 00000024
:0045EF9D 81C1B83B4B00            add ecx, 004B3BB8
:0045EFA3 E8982CFDFF              call 00431C40
:0045EFA8 50                      push eax
:0045EFA9 E8AA08FFFF              call 0044F858
:0045EFAE 83C404                  add esp, 00000004
:0045EFB1 25FF000000              and eax, 000000FF
:0045EFB6 83F80A                  cmp eax, 0000000A
:0045EFB9 7513                    jne 0045EFCE
:0045EFBB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EFBE 6BC924                  imul ecx, 00000024
:0045EFC1 81C1B83B4B00            add ecx, 004B3BB8
:0045EFC7 E89554FDFF              call 00434461
:0045EFCC EB11                    jmp 0045EFDF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EFB9(C)
|
:0045EFCE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045EFD1 6BC924                  imul ecx, 00000024
:0045EFD4 81C1B83B4B00            add ecx, 004B3BB8
:0045EFDA E88A55FDFF              call 00434569

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045EF95(C), :0045EFCC(U)
|
:0045EFDF EB8D                    jmp 0045EF6E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045EF7B(C)
|
:0045EFE1 6880010000              push 00000180
:0045EFE6 6870020000              push 00000270
:0045EFEB 6A20                    push 00000020
:0045EFED 6A00                    push 00000000
:0045EFEF B958494B00              mov ecx, 004B4958
:0045EFF4 E83BBDFEFF              call 0044AD34
:0045EFF9 E83511FBFF              call 00410133
:0045EFFE 6A00                    push 00000000
:0045F000 E836B60000              call 0046A63B
:0045F005 83C404                  add esp, 00000004
:0045F008 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045F00B E856D9FFFF              call 0045C966
:0045F010 B9B83B4B00              mov ecx, 004B3BB8
:0045F015 E8262CFDFF              call 00431C40
:0045F01A 668B10                  mov dx, word ptr [eax]
:0045F01D 668955F4                mov word ptr [ebp-0C], dx
:0045F021 8A45F5                  mov al, byte ptr [ebp-0B]
:0045F024 50                      push eax
:0045F025 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0045F028 51                      push ecx
:0045F029 B958494B00              mov ecx, 004B4958
:0045F02E E8BAEAFEFF              call 0044DAED
:0045F033 B958494B00              mov ecx, 004B4958
:0045F038 E88EF1FEFF              call 0044E1CB
:0045F03D B958494B00              mov ecx, 004B4958
:0045F042 E8CAD8FEFF              call 0044C911
:0045F047 E80211FBFF              call 0041014E
:0045F04C 6A00                    push 00000000
:0045F04E 8B55F0                  mov edx, dword ptr [ebp-10]
:0045F051 660FB602                movzx ax, byte ptr [edx]
:0045F055 50                      push eax
:0045F056 E8050FFBFF              call 0040FF60
:0045F05B 83C408                  add esp, 00000008
:0045F05E E8C110FBFF              call 00410124
:0045F063 E8DF05FDFF              call 0042F647
:0045F068 6A00                    push 00000000
:0045F06A E81BFFFCFF              call 0042EF8A
:0045F06F 83C404                  add esp, 00000004
:0045F072 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045F075 E81E030000              call 0045F398
:0045F07A 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0045F080 51                      push ecx

* Reference To: USER32.SetActiveWindow, Ord:01E2h
                                  |
:0045F081 FF1568D64B00            Call dword ptr [004BD668]
:0045F087 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0045F08D 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0045F08E FF15FCD54B00            Call dword ptr [004BD5FC]
:0045F094 32C0                    xor al, al
:0045F096 8BE5                    mov esp, ebp
:0045F098 5D                      pop ebp
:0045F099 C3                      ret



* Referenced by a CALL at Address:
|:0045EDC5   
|
:0045F09A 55                      push ebp
:0045F09B 8BEC                    mov ebp, esp
:0045F09D 83EC0C                  sub esp, 0000000C
:0045F0A0 894DF4                  mov dword ptr [ebp-0C], ecx
:0045F0A3 6A00                    push 00000000
:0045F0A5 E891B50000              call 0046A63B
:0045F0AA 83C404                  add esp, 00000004
:0045F0AD 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045F0B0 33C9                    xor ecx, ecx
:0045F0B2 8A4801                  mov cl, byte ptr [eax+01]
:0045F0B5 83F902                  cmp ecx, 00000002
:0045F0B8 0F85E1000000            jne 0045F19F
:0045F0BE 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045F0C1 33C0                    xor eax, eax
:0045F0C3 8A4224                  mov al, byte ptr [edx+24]
:0045F0C6 85C0                    test eax, eax
:0045F0C8 7E18                    jle 0045F0E2
:0045F0CA 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045F0CD 33D2                    xor edx, edx
:0045F0CF 8A5124                  mov dl, byte ptr [ecx+24]
:0045F0D2 52                      push edx

* Possible StringData Ref from Data Obj ->"ݦsU۱o%wIg"
                                  |
:0045F0D3 6858194800              push 00481958
:0045F0D8 6A00                    push 00000000
:0045F0DA E85423FDFF              call 00431433
:0045F0DF 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F0C8(C)
|
:0045F0E2 C645FC00                mov [ebp-04], 00
:0045F0E6 EB08                    jmp 0045F0F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F19A(U)
|
:0045F0E8 8A45FC                  mov al, byte ptr [ebp-04]
:0045F0EB 0401                    add al, 01
:0045F0ED 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F0E6(U)
|
:0045F0F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F0F3 81E1FF000000            and ecx, 000000FF
:0045F0F9 83F95A                  cmp ecx, 0000005A
:0045F0FC 0F8D9D000000            jnl 0045F19F
:0045F102 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F105 81E1FF000000            and ecx, 000000FF
:0045F10B 6BC924                  imul ecx, 00000024
:0045F10E 81C1B83B4B00            add ecx, 004B3BB8
:0045F114 E8B7CFFFFF              call 0045C0D0
:0045F119 25FF000000              and eax, 000000FF
:0045F11E 83F802                  cmp eax, 00000002
:0045F121 7577                    jne 0045F19A
:0045F123 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F126 81E1FF000000            and ecx, 000000FF
:0045F12C 6BC924                  imul ecx, 00000024
:0045F12F 81C1B83B4B00            add ecx, 004B3BB8
:0045F135 E8A678FDFF              call 004369E0
:0045F13A 6BC050                  imul eax, 00000050
:0045F13D 05787F4900              add eax, 00497F78
:0045F142 8945F8                  mov dword ptr [ebp-08], eax
:0045F145 8B55FC                  mov edx, dword ptr [ebp-04]
:0045F148 81E2FF000000            and edx, 000000FF
:0045F14E 83FA1E                  cmp edx, 0000001E
:0045F151 7D2E                    jge 0045F181
:0045F153 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045F156 33C9                    xor ecx, ecx
:0045F158 8A4824                  mov cl, byte ptr [eax+24]
:0045F15B 85C9                    test ecx, ecx
:0045F15D 7E22                    jle 0045F181
:0045F15F 6A01                    push 00000001
:0045F161 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F164 E877EDFCFF              call 0042DEE0
:0045F169 25FF000000              and eax, 000000FF
:0045F16E 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045F171 33C9                    xor ecx, ecx
:0045F173 8A4A24                  mov cl, byte ptr [edx+24]
:0045F176 03C1                    add eax, ecx
:0045F178 50                      push eax
:0045F179 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F17C E82933FAFF              call 004024AA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F151(C), :0045F15D(C)
|
:0045F181 6A01                    push 00000001
:0045F183 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F186 81E1FF000000            and ecx, 000000FF
:0045F18C 6BC924                  imul ecx, 00000024
:0045F18F 81C1B83B4B00            add ecx, 004B3BB8
:0045F195 E8667BFDFF              call 00436D00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F121(C)
|
:0045F19A E949FFFFFF              jmp 0045F0E8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F0B8(C), :0045F0FC(C)
|
:0045F19F 8BE5                    mov esp, ebp
:0045F1A1 5D                      pop ebp
:0045F1A2 C3                      ret



* Referenced by a CALL at Addresses:
|:00434B24   , :0045E6C0   
|
:0045F1A3 55                      push ebp
:0045F1A4 8BEC                    mov ebp, esp
:0045F1A6 83EC10                  sub esp, 00000010
:0045F1A9 894DF0                  mov dword ptr [ebp-10], ecx
:0045F1AC 8B45F0                  mov eax, dword ptr [ebp-10]
:0045F1AF 33C9                    xor ecx, ecx
:0045F1B1 8A4801                  mov cl, byte ptr [eax+01]
:0045F1B4 85C9                    test ecx, ecx
:0045F1B6 7416                    je 0045F1CE
:0045F1B8 6A00                    push 00000000
:0045F1BA B9806D4800              mov ecx, 00486D80
:0045F1BF E893CFFAFF              call 0040C157
:0045F1C4 B801000000              mov eax, 00000001
:0045F1C9 E9A3000000              jmp 0045F271

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F1B6(C)
|
:0045F1CE C645FC00                mov [ebp-04], 00
:0045F1D2 C645F81E                mov [ebp-08], 1E
:0045F1D6 EB09                    jmp 0045F1E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F218(U)
|
:0045F1D8 8A55F8                  mov dl, byte ptr [ebp-08]
:0045F1DB 80C201                  add dl, 01
:0045F1DE 8855F8                  mov byte ptr [ebp-08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F1D6(U)
|
:0045F1E1 8B45F8                  mov eax, dword ptr [ebp-08]
:0045F1E4 25FF000000              and eax, 000000FF
:0045F1E9 83F85A                  cmp eax, 0000005A
:0045F1EC 7D2C                    jge 0045F21A
:0045F1EE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F1F1 81E1FF000000            and ecx, 000000FF
:0045F1F7 6BC924                  imul ecx, 00000024
:0045F1FA 81C1B83B4B00            add ecx, 004B3BB8
:0045F200 E8CBCEFFFF              call 0045C0D0
:0045F205 25FF000000              and eax, 000000FF
:0045F20A 83F802                  cmp eax, 00000002
:0045F20D 7509                    jne 0045F218
:0045F20F 8A4DFC                  mov cl, byte ptr [ebp-04]
:0045F212 80C101                  add cl, 01
:0045F215 884DFC                  mov byte ptr [ebp-04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F20D(C)
|
:0045F218 EBBE                    jmp 0045F1D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F1EC(C)
|
:0045F21A 8B55FC                  mov edx, dword ptr [ebp-04]
:0045F21D 81E2FF000000            and edx, 000000FF
:0045F223 85D2                    test edx, edx
:0045F225 7548                    jne 0045F26F
:0045F227 6A01                    push 00000001
:0045F229 B9806D4800              mov ecx, 00486D80
:0045F22E E88D7CFDFF              call 00436EC0
:0045F233 C745F400000000          mov [ebp-0C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F25A(U)
|
:0045F23A 837DF404                cmp dword ptr [ebp-0C], 00000004
:0045F23E 741C                    je 0045F25C
:0045F240 837DF402                cmp dword ptr [ebp-0C], 00000002
:0045F244 7416                    je 0045F25C
:0045F246 6A00                    push 00000000
:0045F248 B9806D4800              mov ecx, 00486D80
:0045F24D E805CFFAFF              call 0040C157
:0045F252 8945F4                  mov dword ptr [ebp-0C], eax
:0045F255 E8FC810100              call 00477456
:0045F25A EBDE                    jmp 0045F23A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F23E(C), :0045F244(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0045F25C 6A02                    push 00000002
:0045F25E B9784E4B00              mov ecx, 004B4E78
:0045F263 E8980CFBFF              call 0040FF00
:0045F268 B801000000              mov eax, 00000001
:0045F26D EB02                    jmp 0045F271

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F225(C)
|
:0045F26F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F1C9(U), :0045F26D(U)
|
:0045F271 8BE5                    mov esp, ebp
:0045F273 5D                      pop ebp
:0045F274 C3                      ret



* Referenced by a CALL at Address:
|:0045CA19   
|
:0045F275 55                      push ebp
:0045F276 8BEC                    mov ebp, esp
:0045F278 51                      push ecx
:0045F279 894DFC                  mov dword ptr [ebp-04], ecx
:0045F27C 8BE5                    mov esp, ebp
:0045F27E 5D                      pop ebp
:0045F27F C3                      ret



* Referenced by a CALL at Addresses:
|:0045CA95   , :0045EE8C   
|
:0045F280 55                      push ebp
:0045F281 8BEC                    mov ebp, esp
:0045F283 83EC6C                  sub esp, 0000006C
:0045F286 894D94                  mov dword ptr [ebp-6C], ecx
:0045F289 8B4594                  mov eax, dword ptr [ebp-6C]
:0045F28C 33C9                    xor ecx, ecx
:0045F28E 8A08                    mov cl, byte ptr [eax]
:0045F290 83F91E                  cmp ecx, 0000001E
:0045F293 7D29                    jge 0045F2BE
:0045F295 8B5594                  mov edx, dword ptr [ebp-6C]
:0045F298 33C0                    xor eax, eax
:0045F29A 8A02                    mov al, byte ptr [edx]
:0045F29C 50                      push eax
:0045F29D 8D4D98                  lea ecx, dword ptr [ebp-68]
:0045F2A0 51                      push ecx
:0045F2A1 E86743FAFF              call 0040360D
:0045F2A6 83C408                  add esp, 00000008
:0045F2A9 6A1E                    push 0000001E
:0045F2AB 8D5598                  lea edx, dword ptr [ebp-68]
:0045F2AE 52                      push edx
:0045F2AF 8B4594                  mov eax, dword ptr [ebp-6C]
:0045F2B2 83C006                  add eax, 00000006
:0045F2B5 50                      push eax
:0045F2B6 E8A5020100              call 0046F560
:0045F2BB 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F293(C)
|
:0045F2BE 8BE5                    mov esp, ebp
:0045F2C0 5D                      pop ebp
:0045F2C1 C3                      ret



* Referenced by a CALL at Addresses:
|:004396D5   , :0045CCC2   , :0045EE94   
|
:0045F2C2 55                      push ebp
:0045F2C3 8BEC                    mov ebp, esp
:0045F2C5 51                      push ecx
:0045F2C6 894DFC                  mov dword ptr [ebp-04], ecx
:0045F2C9 E8650EFBFF              call 00410133
:0045F2CE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F2D1 E82A90FFFF              call 00458300
:0045F2D6 50                      push eax
:0045F2D7 E814B70000              call 0046A9F0
:0045F2DC 83C404                  add esp, 00000004
:0045F2DF E86A0EFBFF              call 0041014E
:0045F2E4 8BE5                    mov esp, ebp
:0045F2E6 5D                      pop ebp
:0045F2E7 C3                      ret



* Referenced by a CALL at Address:
|:0045ED30   
|
:0045F2E8 55                      push ebp
:0045F2E9 8BEC                    mov ebp, esp
:0045F2EB 83EC0C                  sub esp, 0000000C
:0045F2EE 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to String Resource ID=00006: ""
                                  |
:0045F2F1 6A06                    push 00000006
:0045F2F3 E8B8900100              call 004783B0
:0045F2F8 83C404                  add esp, 00000004
:0045F2FB 8845FC                  mov byte ptr [ebp-04], al
:0045F2FE 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045F301 8A4804                  mov cl, byte ptr [eax+04]
:0045F304 884DF8                  mov byte ptr [ebp-08], cl
:0045F307 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F30A 81E2FF000000            and edx, 000000FF
:0045F310 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F313 25FF000000              and eax, 000000FF
:0045F318 3BD0                    cmp edx, eax
:0045F31A 7E0B                    jle 0045F327
:0045F31C 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045F31F 80E901                  sub cl, 01
:0045F322 884DF8                  mov byte ptr [ebp-08], cl
:0045F325 EB1E                    jmp 0045F345

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F31A(C)
|
:0045F327 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F32A 81E2FF000000            and edx, 000000FF
:0045F330 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F333 25FF000000              and eax, 000000FF
:0045F338 3BD0                    cmp edx, eax
:0045F33A 7D09                    jge 0045F345
:0045F33C 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045F33F 80C101                  add cl, 01
:0045F342 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F325(U), :0045F33A(C)
|
:0045F345 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F348 81E2FF000000            and edx, 000000FF
:0045F34E 85D2                    test edx, edx
:0045F350 7509                    jne 0045F35B
:0045F352 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045F355 C6400405                mov [eax+04], 05
:0045F359 EB20                    jmp 0045F37B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F350(C)
|
:0045F35B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F35E 81E1FF000000            and ecx, 000000FF
:0045F364 83F905                  cmp ecx, 00000005
:0045F367 7509                    jne 0045F372
:0045F369 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045F36C C6420400                mov [edx+04], 00
:0045F370 EB09                    jmp 0045F37B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F367(C)
|
:0045F372 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045F375 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045F378 884804                  mov byte ptr [eax+04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F359(U), :0045F370(U)
|
:0045F37B 8BE5                    mov esp, ebp
:0045F37D 5D                      pop ebp
:0045F37E C3                      ret



* Referenced by a CALL at Addresses:
|:004374ED   , :00437702   , :0043776B   , :004377D8   , :00438A6B   
|:00443ABE   , :0045120E   , :00452507   , :0045C61C   , :0045C75A   
|:0045ED38   
|
:0045F37F 55                      push ebp
:0045F380 8BEC                    mov ebp, esp
:0045F382 51                      push ecx
:0045F383 894DFC                  mov dword ptr [ebp-04], ecx
:0045F386 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F389 33C9                    xor ecx, ecx
:0045F38B 8A4804                  mov cl, byte ptr [eax+04]
:0045F38E 8A812C184800            mov al, byte ptr [ecx+0048182C]
:0045F394 8BE5                    mov esp, ebp
:0045F396 5D                      pop ebp
:0045F397 C3                      ret



* Referenced by a CALL at Addresses:
|:0045CD35   , :0045F075   
|
:0045F398 55                      push ebp
:0045F399 8BEC                    mov ebp, esp
:0045F39B 83EC74                  sub esp, 00000074
:0045F39E 56                      push esi
:0045F39F 894D8C                  mov dword ptr [ebp-74], ecx
:0045F3A2 8D45C4                  lea eax, dword ptr [ebp-3C]
:0045F3A5 50                      push eax
:0045F3A6 8D4DB0                  lea ecx, dword ptr [ebp-50]
:0045F3A9 51                      push ecx
:0045F3AA E80E820100              call 004775BD
:0045F3AF 83C408                  add esp, 00000008
:0045F3B2 B958494B00              mov ecx, 004B4958
:0045F3B7 E887F5FEFF              call 0044E943
:0045F3BC 8945A8                  mov dword ptr [ebp-58], eax
:0045F3BF C745AC00000000          mov [ebp-54], 00000000
:0045F3C6 8D55A8                  lea edx, dword ptr [ebp-58]
:0045F3C9 52                      push edx
:0045F3CA A1B0554B00              mov eax, dword ptr [004B55B0]
:0045F3CF 50                      push eax

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:0045F3D0 FF15D0D64B00            Call dword ptr [004BD6D0]
:0045F3D6 C7459400000000          mov [ebp-6C], 00000000
:0045F3DD C7459800000000          mov [ebp-68], 00000000
:0045F3E4 B958494B00              mov ecx, 004B4958
:0045F3E9 E88DF6FEFF              call 0044EA7B
:0045F3EE 83E801                  sub eax, 00000001
:0045F3F1 99                      cdq
:0045F3F2 83E207                  and edx, 00000007
:0045F3F5 03C2                    add eax, edx
:0045F3F7 C1F803                  sar eax, 03
:0045F3FA 89459C                  mov dword ptr [ebp-64], eax
:0045F3FD B958494B00              mov ecx, 004B4958
:0045F402 E89BF6FEFF              call 0044EAA2
:0045F407 83E801                  sub eax, 00000001
:0045F40A 99                      cdq
:0045F40B 83E207                  and edx, 00000007
:0045F40E 03C2                    add eax, edx
:0045F410 C1F803                  sar eax, 03
:0045F413 8945A0                  mov dword ptr [ebp-60], eax
:0045F416 6A01                    push 00000001
:0045F418 6AF0                    push FFFFFFF0
:0045F41A 8B0D18544B00            mov ecx, dword ptr [004B5418]
:0045F420 51                      push ecx

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:0045F421 FF15B0D64B00            Call dword ptr [004BD6B0]
:0045F427 50                      push eax
:0045F428 8D5594                  lea edx, dword ptr [ebp-6C]
:0045F42B 52                      push edx

* Reference To: USER32.AdjustWindowRect, Ord:0001h
                                  |
:0045F42C FF154CD64B00            Call dword ptr [004BD64C]
:0045F432 8B45A8                  mov eax, dword ptr [ebp-58]
:0045F435 03459C                  add eax, dword ptr [ebp-64]
:0045F438 2B4594                  sub eax, dword ptr [ebp-6C]
:0045F43B 83C001                  add eax, 00000001
:0045F43E 3B45B0                  cmp eax, dword ptr [ebp-50]
:0045F441 7E17                    jle 0045F45A
:0045F443 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0045F446 034D9C                  add ecx, dword ptr [ebp-64]
:0045F449 2B4D94                  sub ecx, dword ptr [ebp-6C]
:0045F44C 83C101                  add ecx, 00000001
:0045F44F 2B4DB0                  sub ecx, dword ptr [ebp-50]
:0045F452 8B55A8                  mov edx, dword ptr [ebp-58]
:0045F455 2BD1                    sub edx, ecx
:0045F457 8955A8                  mov dword ptr [ebp-58], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F441(C)
|
:0045F45A 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0045F45D E873CDFFFF              call 0045C1D5
:0045F462 B958494B00              mov ecx, 004B4958
:0045F467 E836F6FEFF              call 0044EAA2
:0045F46C 99                      cdq
:0045F46D 83E20F                  and edx, 0000000F
:0045F470 03C2                    add eax, edx
:0045F472 C1F804                  sar eax, 04
:0045F475 50                      push eax
:0045F476 B958494B00              mov ecx, 004B4958
:0045F47B E8FBF5FEFF              call 0044EA7B
:0045F480 99                      cdq
:0045F481 83E20F                  and edx, 0000000F
:0045F484 03C2                    add eax, edx
:0045F486 C1F804                  sar eax, 04
:0045F489 50                      push eax
:0045F48A 8B458C                  mov eax, dword ptr [ebp-74]
:0045F48D 33C9                    xor ecx, ecx
:0045F48F 8A4831                  mov cl, byte ptr [eax+31]
:0045F492 51                      push ecx
:0045F493 8B558C                  mov edx, dword ptr [ebp-74]
:0045F496 33C0                    xor eax, eax
:0045F498 8A4230                  mov al, byte ptr [edx+30]
:0045F49B 50                      push eax
:0045F49C 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0045F49F E864D0FFFF              call 0045C508
:0045F4A4 6A00                    push 00000000
:0045F4A6 8B4DA0                  mov ecx, dword ptr [ebp-60]
:0045F4A9 2B4D98                  sub ecx, dword ptr [ebp-68]
:0045F4AC 83C101                  add ecx, 00000001
:0045F4AF 51                      push ecx
:0045F4B0 8B559C                  mov edx, dword ptr [ebp-64]
:0045F4B3 2B5594                  sub edx, dword ptr [ebp-6C]
:0045F4B6 83C201                  add edx, 00000001
:0045F4B9 52                      push edx
:0045F4BA 8B45AC                  mov eax, dword ptr [ebp-54]
:0045F4BD 50                      push eax
:0045F4BE 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0045F4C1 51                      push ecx
:0045F4C2 8B1518544B00            mov edx, dword ptr [004B5418]
:0045F4C8 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045F4C9 FF15ECD54B00            Call dword ptr [004BD5EC]
:0045F4CF 8D45B4                  lea eax, dword ptr [ebp-4C]
:0045F4D2 50                      push eax
:0045F4D3 8B0D18544B00            mov ecx, dword ptr [004B5418]
:0045F4D9 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:0045F4DA FF15D8D64B00            Call dword ptr [004BD6D8]
:0045F4E0 8B75C0                  mov esi, dword ptr [ebp-40]
:0045F4E3 2B75B8                  sub esi, dword ptr [ebp-48]
:0045F4E6 83C601                  add esi, 00000001
:0045F4E9 B958494B00              mov ecx, 004B4958
:0045F4EE E8AFF5FEFF              call 0044EAA2
:0045F4F3 99                      cdq
:0045F4F4 83E207                  and edx, 00000007
:0045F4F7 03C2                    add eax, edx
:0045F4F9 C1F803                  sar eax, 03
:0045F4FC 3BF0                    cmp esi, eax
:0045F4FE 7D66                    jge 0045F566
:0045F500 8B1518544B00            mov edx, dword ptr [004B5418]
:0045F506 52                      push edx

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0045F507 FF1518D64B00            Call dword ptr [004BD618]
:0045F50D 894590                  mov dword ptr [ebp-70], eax
:0045F510 8D45C8                  lea eax, dword ptr [ebp-38]
:0045F513 50                      push eax
:0045F514 8B4D90                  mov ecx, dword ptr [ebp-70]
:0045F517 51                      push ecx

* Reference To: GDI32.GetTextMetricsA, Ord:010Bh
                                  |
:0045F518 FF155CD44B00            Call dword ptr [004BD45C]
:0045F51E 8B5590                  mov edx, dword ptr [ebp-70]
:0045F521 52                      push edx
:0045F522 A118544B00              mov eax, dword ptr [004B5418]
:0045F527 50                      push eax

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0045F528 FF151CD64B00            Call dword ptr [004BD61C]
:0045F52E 8B4DC8                  mov ecx, dword ptr [ebp-38]
:0045F531 034DD8                  add ecx, dword ptr [ebp-28]
:0045F534 894DA4                  mov dword ptr [ebp-5C], ecx
:0045F537 6A00                    push 00000000
:0045F539 8B55A0                  mov edx, dword ptr [ebp-60]
:0045F53C 2B5598                  sub edx, dword ptr [ebp-68]
:0045F53F 8B45A4                  mov eax, dword ptr [ebp-5C]
:0045F542 8D4C0201                lea ecx, dword ptr [edx+eax+01]
:0045F546 51                      push ecx
:0045F547 8B559C                  mov edx, dword ptr [ebp-64]
:0045F54A 2B5594                  sub edx, dword ptr [ebp-6C]
:0045F54D 83C201                  add edx, 00000001
:0045F550 52                      push edx
:0045F551 8B45AC                  mov eax, dword ptr [ebp-54]
:0045F554 50                      push eax
:0045F555 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0045F558 51                      push ecx
:0045F559 8B1518544B00            mov edx, dword ptr [004B5418]
:0045F55F 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0045F560 FF15ECD54B00            Call dword ptr [004BD5EC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F4FE(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045F566 6A05                    push 00000005
:0045F568 A118544B00              mov eax, dword ptr [004B5418]
:0045F56D 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045F56E FF1500D74B00            Call dword ptr [004BD700]
:0045F574 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0045F577 C7414400000000          mov [ecx+44], 00000000
:0045F57E 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0045F581 E821CEFFFF              call 0045C3A7
:0045F586 5E                      pop esi
:0045F587 8BE5                    mov esp, ebp
:0045F589 5D                      pop ebp
:0045F58A C3                      ret



* Referenced by a CALL at Addresses:
|:004075A8   , :004075CF   
|
:0045F58B 55                      push ebp
:0045F58C 8BEC                    mov ebp, esp
:0045F58E 83EC18                  sub esp, 00000018
:0045F591 894DEC                  mov dword ptr [ebp-14], ecx
:0045F594 C645F800                mov [ebp-08], 00
:0045F598 8A4508                  mov al, byte ptr [ebp+08]
:0045F59B 8845E8                  mov byte ptr [ebp-18], al
:0045F59E 807DE800                cmp byte ptr [ebp-18], 00
:0045F5A2 740E                    je 0045F5B2
:0045F5A4 807DE801                cmp byte ptr [ebp-18], 01
:0045F5A8 7418                    je 0045F5C2
:0045F5AA 807DE802                cmp byte ptr [ebp-18], 02
:0045F5AE 7422                    je 0045F5D2
:0045F5B0 EB30                    jmp 0045F5E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F5A2(C)
|
:0045F5B2 C745FC00000000          mov [ebp-04], 00000000
:0045F5B9 C745F05A000000          mov [ebp-10], 0000005A
:0045F5C0 EB2E                    jmp 0045F5F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F5A8(C)
|
:0045F5C2 C745FC00000000          mov [ebp-04], 00000000
:0045F5C9 C745F01E000000          mov [ebp-10], 0000001E
:0045F5D0 EB1E                    jmp 0045F5F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F5AE(C)
|
:0045F5D2 C745FC1E000000          mov [ebp-04], 0000001E
:0045F5D9 C745F05A000000          mov [ebp-10], 0000005A
:0045F5E0 EB0E                    jmp 0045F5F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F5B0(U)
|
:0045F5E2 C745FC00000000          mov [ebp-04], 00000000
:0045F5E9 C745F05A000000          mov [ebp-10], 0000005A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F5C0(U), :0045F5D0(U), :0045F5E0(U)
|
:0045F5F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F5F3 894DF4                  mov dword ptr [ebp-0C], ecx
:0045F5F6 EB09                    jmp 0045F601

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F62D(U)
|
:0045F5F8 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045F5FB 83C201                  add edx, 00000001
:0045F5FE 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F5F6(U)
|
:0045F601 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045F604 3B45F0                  cmp eax, dword ptr [ebp-10]
:0045F607 7326                    jnb 0045F62F
:0045F609 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045F60C 6BC924                  imul ecx, 00000024
:0045F60F 81C1B83B4B00            add ecx, 004B3BB8
:0045F615 E8B6CAFFFF              call 0045C0D0
:0045F61A 25FF000000              and eax, 000000FF
:0045F61F 83F802                  cmp eax, 00000002
:0045F622 7509                    jne 0045F62D
:0045F624 8A4DF8                  mov cl, byte ptr [ebp-08]
:0045F627 80C101                  add cl, 01
:0045F62A 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F622(C)
|
:0045F62D EBC9                    jmp 0045F5F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F607(C)
|
:0045F62F 8A45F8                  mov al, byte ptr [ebp-08]
:0045F632 8BE5                    mov esp, ebp
:0045F634 5D                      pop ebp
:0045F635 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004409C6   , :00452C22   , :0045E514   , :0045E775   , :0045EB73   
|:0045FB1F   , :004604BB   
|
:0045F638 55                      push ebp
:0045F639 8BEC                    mov ebp, esp
:0045F63B 83EC68                  sub esp, 00000068
:0045F63E 894D98                  mov dword ptr [ebp-68], ecx
:0045F641 8B4598                  mov eax, dword ptr [ebp-68]
:0045F644 33C9                    xor ecx, ecx
:0045F646 8A4803                  mov cl, byte ptr [eax+03]
:0045F649 51                      push ecx
:0045F64A 8B5598                  mov edx, dword ptr [ebp-68]
:0045F64D 33C0                    xor eax, eax
:0045F64F 8A4202                  mov al, byte ptr [edx+02]
:0045F652 83C001                  add eax, 00000001
:0045F655 50                      push eax

* Possible StringData Ref from Data Obj ->"^X%3d/%3d"
                                  |
:0045F656 6878194800              push 00481978
:0045F65B 8D4D9C                  lea ecx, dword ptr [ebp-64]
:0045F65E 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0045F65F FF1504D74B00            Call dword ptr [004BD704]
:0045F665 83C410                  add esp, 00000010
:0045F668 8D559C                  lea edx, dword ptr [ebp-64]
:0045F66B 52                      push edx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:0045F66C 68FA030000              push 000003FA
:0045F671 A16C624B00              mov eax, dword ptr [004B626C]
:0045F676 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0045F677 FF1510D64B00            Call dword ptr [004BD610]
:0045F67D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0045F67E FF1514D64B00            Call dword ptr [004BD614]
:0045F684 B958494B00              mov ecx, 004B4958
:0045F689 E814F4FEFF              call 0044EAA2
:0045F68E 99                      cdq
:0045F68F 83E20F                  and edx, 0000000F
:0045F692 03C2                    add eax, edx
:0045F694 C1F804                  sar eax, 04
:0045F697 50                      push eax
:0045F698 B958494B00              mov ecx, 004B4958
:0045F69D E8D9F3FEFF              call 0044EA7B
:0045F6A2 99                      cdq
:0045F6A3 83E20F                  and edx, 0000000F
:0045F6A6 03C2                    add eax, edx
:0045F6A8 C1F804                  sar eax, 04
:0045F6AB 50                      push eax
:0045F6AC 8B4D98                  mov ecx, dword ptr [ebp-68]
:0045F6AF 33D2                    xor edx, edx
:0045F6B1 8A5131                  mov dl, byte ptr [ecx+31]
:0045F6B4 52                      push edx
:0045F6B5 8B4598                  mov eax, dword ptr [ebp-68]
:0045F6B8 33C9                    xor ecx, ecx
:0045F6BA 8A4830                  mov cl, byte ptr [eax+30]
:0045F6BD 51                      push ecx
:0045F6BE 8B4D98                  mov ecx, dword ptr [ebp-68]
:0045F6C1 E8C7CFFFFF              call 0045C68D
:0045F6C6 8BE5                    mov esp, ebp
:0045F6C8 5D                      pop ebp
:0045F6C9 C3                      ret



* Referenced by a CALL at Address:
|:00469BF3   
|
:0045F6CA 55                      push ebp
:0045F6CB 8BEC                    mov ebp, esp
:0045F6CD E8911EFBFF              call 00411563
:0045F6D2 25FF000000              and eax, 000000FF
:0045F6D7 83F803                  cmp eax, 00000003
:0045F6DA 7538                    jne 0045F714
:0045F6DC A118544B00              mov eax, dword ptr [004B5418]
:0045F6E1 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0045F6E2 FF1558D64B00            Call dword ptr [004BD658]
:0045F6E8 85C0                    test eax, eax
:0045F6EA 740F                    je 0045F6FB
:0045F6EC 8B0D18544B00            mov ecx, dword ptr [004B5418]
:0045F6F2 51                      push ecx

* Reference To: USER32.BringWindowToTop, Ord:000Ah
                                  |
:0045F6F3 FF1554D64B00            Call dword ptr [004BD654]
:0045F6F9 EB19                    jmp 0045F714

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F6EA(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0045F6FB 6A05                    push 00000005
:0045F6FD 8B1518544B00            mov edx, dword ptr [004B5418]
:0045F703 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0045F704 FF1500D74B00            Call dword ptr [004BD700]
:0045F70A B9784E4B00              mov ecx, 004B4E78
:0045F70F E893CCFFFF              call 0045C3A7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F6DA(C), :0045F6F9(U)
|
:0045F714 5D                      pop ebp
:0045F715 C3                      ret


:0045F716 CC                      int 03
:0045F717 CC                      int 03
:0045F718 CC                      int 03
:0045F719 CC                      int 03
:0045F71A CC                      int 03
:0045F71B CC                      int 03
:0045F71C CC                      int 03
:0045F71D CC                      int 03
:0045F71E CC                      int 03
:0045F71F CC                      int 03

* Referenced by a CALL at Address:
|:0045CB32   
|
:0045F720 55                      push ebp
:0045F721 8BEC                    mov ebp, esp
:0045F723 51                      push ecx
:0045F724 894DFC                  mov dword ptr [ebp-04], ecx
:0045F727 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F72A 33C9                    xor ecx, ecx
:0045F72C 8A8896320000            mov cl, byte ptr [eax+00003296]
:0045F732 8BC1                    mov eax, ecx
:0045F734 8BE5                    mov esp, ebp
:0045F736 5D                      pop ebp
:0045F737 C3                      ret


:0045F738 CC                      int 03
:0045F739 CC                      int 03
:0045F73A CC                      int 03
:0045F73B CC                      int 03
:0045F73C CC                      int 03
:0045F73D CC                      int 03
:0045F73E CC                      int 03
:0045F73F CC                      int 03

* Referenced by a CALL at Addresses:
|:0045D32A   , :0045D3D0   , :0045D463   , :0045D4DB   
|
:0045F740 55                      push ebp
:0045F741 8BEC                    mov ebp, esp
:0045F743 51                      push ecx
:0045F744 894DFC                  mov dword ptr [ebp-04], ecx
:0045F747 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F74A 8A4D08                  mov cl, byte ptr [ebp+08]
:0045F74D 88480A                  mov byte ptr [eax+0A], cl
:0045F750 8BE5                    mov esp, ebp
:0045F752 5D                      pop ebp
:0045F753 C20400                  ret 0004


:0045F756 CC                      int 03
:0045F757 CC                      int 03
:0045F758 CC                      int 03
:0045F759 CC                      int 03
:0045F75A CC                      int 03
:0045F75B CC                      int 03
:0045F75C CC                      int 03
:0045F75D CC                      int 03
:0045F75E CC                      int 03
:0045F75F CC                      int 03

* Referenced by a CALL at Address:
|:0045C167   
|
:0045F760 55                      push ebp
:0045F761 8BEC                    mov ebp, esp
:0045F763 51                      push ecx
:0045F764 894DFC                  mov dword ptr [ebp-04], ecx
:0045F767 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F76A 83C130                  add ecx, 00000030
:0045F76D E87E5FFAFF              call 004056F0
:0045F772 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F775 C7404800000000          mov [eax+48], 00000000
:0045F77C 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F77F 8BE5                    mov esp, ebp
:0045F781 5D                      pop ebp
:0045F782 C3                      ret


:0045F783 CC                      int 03
:0045F784 CC                      int 03
:0045F785 CC                      int 03
:0045F786 CC                      int 03
:0045F787 CC                      int 03
:0045F788 CC                      int 03
:0045F789 CC                      int 03
:0045F78A CC                      int 03
:0045F78B CC                      int 03
:0045F78C CC                      int 03
:0045F78D CC                      int 03
:0045F78E CC                      int 03
:0045F78F CC                      int 03
:0045F790 55                      push ebp
:0045F791 8BEC                    mov ebp, esp
:0045F793 E802000000              call 0045F79A
:0045F798 5D                      pop ebp
:0045F799 C3                      ret



* Referenced by a CALL at Address:
|:0045F793   
|
:0045F79A 55                      push ebp
:0045F79B 8BEC                    mov ebp, esp
:0045F79D 5D                      pop ebp
:0045F79E C3                      ret



* Referenced by a CALL at Addresses:
|:0045F850   , :0045F98D   , :0045FB3A   , :0045FC8D   , :0045FE3F   
|:00460275   , :004604D8   , :00460567   , :00460581   , :0046073D   
|
:0045F79F 55                      push ebp
:0045F7A0 8BEC                    mov ebp, esp
:0045F7A2 51                      push ecx
:0045F7A3 C645FC00                mov [ebp-04], 00
:0045F7A7 EB08                    jmp 0045F7B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F80D(U)
|
:0045F7A9 8A45FC                  mov al, byte ptr [ebp-04]
:0045F7AC 0401                    add al, 01
:0045F7AE 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F7A7(U)
|
:0045F7B1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F7B4 81E1FF000000            and ecx, 000000FF
:0045F7BA 83F95A                  cmp ecx, 0000005A
:0045F7BD 7D50                    jge 0045F80F
:0045F7BF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F7C2 81E1FF000000            and ecx, 000000FF
:0045F7C8 6BC924                  imul ecx, 00000024
:0045F7CB 81C1B83B4B00            add ecx, 004B3BB8
:0045F7D1 E80A72FDFF              call 004369E0
:0045F7D6 3B4508                  cmp eax, dword ptr [ebp+08]
:0045F7D9 7532                    jne 0045F80D
:0045F7DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F7DE 81E1FF000000            and ecx, 000000FF
:0045F7E4 6BC924                  imul ecx, 00000024
:0045F7E7 81C1B83B4B00            add ecx, 004B3BB8
:0045F7ED E8DEC8FFFF              call 0045C0D0
:0045F7F2 25FF000000              and eax, 000000FF
:0045F7F7 85C0                    test eax, eax
:0045F7F9 7412                    je 0045F80D
:0045F7FB 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F7FE 25FF000000              and eax, 000000FF
:0045F803 6BC024                  imul eax, 00000024
:0045F806 05B83B4B00              add eax, 004B3BB8
:0045F80B EB05                    jmp 0045F812

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F7D9(C), :0045F7F9(C)
|
:0045F80D EB9A                    jmp 0045F7A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F7BD(C)
|
:0045F80F 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F80B(U)
|
:0045F812 8BE5                    mov esp, ebp
:0045F814 5D                      pop ebp
:0045F815 C3                      ret



* Referenced by a CALL at Address:
|:0045CA8D   
|
:0045F816 55                      push ebp
:0045F817 8BEC                    mov ebp, esp
:0045F819 51                      push ecx
:0045F81A 894DFC                  mov dword ptr [ebp-04], ecx
:0045F81D 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F820 C600FF                  mov byte ptr [eax], FF
:0045F823 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F826 C7410800000000          mov [ecx+08], 00000000
:0045F82D BA28DE4A00              mov edx, 004ADE28
:0045F832 8B45FC                  mov eax, dword ptr [ebp-04]
:0045F835 895004                  mov dword ptr [eax+04], edx
:0045F838 8BE5                    mov esp, ebp
:0045F83A 5D                      pop ebp
:0045F83B C3                      ret



* Referenced by a CALL at Addresses:
|:00409A1D   , :0040B196   
|
:0045F83C 55                      push ebp
:0045F83D 8BEC                    mov ebp, esp
:0045F83F 83EC24                  sub esp, 00000024
:0045F842 894DDC                  mov dword ptr [ebp-24], ecx
:0045F845 C745F4FFFFFFFF          mov [ebp-0C], FFFFFFFF
:0045F84C 8B4508                  mov eax, dword ptr [ebp+08]
:0045F84F 50                      push eax
:0045F850 E84AFFFFFF              call 0045F79F
:0045F855 83C404                  add esp, 00000004
:0045F858 8945EC                  mov dword ptr [ebp-14], eax
:0045F85B C645FCFF                mov [ebp-04], FF
:0045F85F 837DECFF                cmp dword ptr [ebp-14], FFFFFFFF
:0045F863 0F84F2000000            je 0045F95B
:0045F869 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045F86C E85FC8FFFF              call 0045C0D0
:0045F871 25FF000000              and eax, 000000FF
:0045F876 83F801                  cmp eax, 00000001
:0045F879 0F85D5000000            jne 0045F954
:0045F87F C745E800000000          mov [ebp-18], 00000000
:0045F886 EB09                    jmp 0045F891

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F8C0(U)
|
:0045F888 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045F88B 83C101                  add ecx, 00000001
:0045F88E 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F886(U)
|
:0045F891 837DE85A                cmp dword ptr [ebp-18], 0000005A
:0045F895 732B                    jnb 0045F8C2
:0045F897 8B55E8                  mov edx, dword ptr [ebp-18]
:0045F89A 52                      push edx
:0045F89B B9806D4800              mov ecx, 00486D80
:0045F8A0 E82BD1FAFF              call 0040C9D0
:0045F8A5 8945F0                  mov dword ptr [ebp-10], eax
:0045F8A8 8B45F0                  mov eax, dword ptr [ebp-10]
:0045F8AB 8945F8                  mov dword ptr [ebp-08], eax
:0045F8AE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F8B1 8B11                    mov edx, dword ptr [ecx]
:0045F8B3 3B5508                  cmp edx, dword ptr [ebp+08]
:0045F8B6 7508                    jne 0045F8C0
:0045F8B8 8A45E8                  mov al, byte ptr [ebp-18]
:0045F8BB 8845FC                  mov byte ptr [ebp-04], al
:0045F8BE EB02                    jmp 0045F8C2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F8B6(C)
|
:0045F8C0 EBC6                    jmp 0045F888

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F895(C), :0045F8BE(U)
|
:0045F8C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F8C5 81E1FF000000            and ecx, 000000FF
:0045F8CB 81F9FF000000            cmp ecx, 000000FF
:0045F8D1 7478                    je 0045F94B
:0045F8D3 6A0C                    push 0000000C
:0045F8D5 B9F8544B00              mov ecx, 004B54F8
:0045F8DA E83B9C0000              call 0046951A
:0045F8DF 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F8E2 8B4208                  mov eax, dword ptr [edx+08]
:0045F8E5 83E004                  and eax, 00000004
:0045F8E8 33C9                    xor ecx, ecx
:0045F8EA 83F804                  cmp eax, 00000004
:0045F8ED 0F94C1                  sete cl
:0045F8F0 894DE4                  mov dword ptr [ebp-1C], ecx
:0045F8F3 8B55F8                  mov edx, dword ptr [ebp-08]
:0045F8F6 83C204                  add edx, 00000004
:0045F8F9 8955E0                  mov dword ptr [ebp-20], edx
:0045F8FC 8B45E0                  mov eax, dword ptr [ebp-20]
:0045F8FF 8A4801                  mov cl, byte ptr [eax+01]
:0045F902 51                      push ecx
:0045F903 8B55E0                  mov edx, dword ptr [ebp-20]
:0045F906 8A02                    mov al, byte ptr [edx]
:0045F908 50                      push eax
:0045F909 B958494B00              mov ecx, 004B4958
:0045F90E E8DAE1FEFF              call 0044DAED
:0045F913 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045F916 F7D9                    neg ecx
:0045F918 1BC9                    sbb ecx, ecx
:0045F91A 83E1FE                  and ecx, FFFFFFFE
:0045F91D 83C103                  add ecx, 00000003
:0045F920 51                      push ecx
:0045F921 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045F924 E817E6FCFF              call 0042DF40
:0045F929 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045F92C 52                      push edx
:0045F92D 8B45E0                  mov eax, dword ptr [ebp-20]
:0045F930 8A4801                  mov cl, byte ptr [eax+01]
:0045F933 51                      push ecx
:0045F934 8B55E0                  mov edx, dword ptr [ebp-20]
:0045F937 8A02                    mov al, byte ptr [edx]
:0045F939 50                      push eax
:0045F93A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045F93D E8C14DFDFF              call 00434703
:0045F942 C745F401000000          mov [ebp-0C], 00000001
:0045F949 EB07                    jmp 0045F952

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F8D1(C)
|
:0045F94B C745F4FFFFFFFF          mov [ebp-0C], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F949(U)
|
:0045F952 EB07                    jmp 0045F95B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F879(C)
|
:0045F954 C745F4FFFFFFFF          mov [ebp-0C], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F863(C), :0045F952(U)
|
:0045F95B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045F95E 8BE5                    mov esp, ebp
:0045F960 5D                      pop ebp
:0045F961 C20C00                  ret 000C



* Referenced by a CALL at Address:
|:0040B89C   
|
:0045F964 55                      push ebp
:0045F965 8BEC                    mov ebp, esp
:0045F967 83EC24                  sub esp, 00000024
:0045F96A 894DDC                  mov dword ptr [ebp-24], ecx
:0045F96D C745F4FFFFFFFF          mov [ebp-0C], FFFFFFFF
:0045F974 C645FCFF                mov [ebp-04], FF
:0045F978 817D0820030000          cmp dword ptr [ebp+08], 00000320
:0045F97F 7208                    jb 0045F989
:0045F981 83C8FF                  or eax, FFFFFFFF
:0045F984 E99E010000              jmp 0045FB27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F97F(C)
|
:0045F989 8B4508                  mov eax, dword ptr [ebp+08]
:0045F98C 50                      push eax
:0045F98D E80DFEFFFF              call 0045F79F
:0045F992 83C404                  add esp, 00000004
:0045F995 8945EC                  mov dword ptr [ebp-14], eax
:0045F998 837DECFF                cmp dword ptr [ebp-14], FFFFFFFF
:0045F99C 0F845C010000            je 0045FAFE
:0045F9A2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045F9A5 E826C7FFFF              call 0045C0D0
:0045F9AA 25FF000000              and eax, 000000FF
:0045F9AF 83F804                  cmp eax, 00000004
:0045F9B2 0F853F010000            jne 0045FAF7
:0045F9B8 C745E800000000          mov [ebp-18], 00000000
:0045F9BF EB09                    jmp 0045F9CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F9F9(U)
|
:0045F9C1 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0045F9C4 83C101                  add ecx, 00000001
:0045F9C7 894DE8                  mov dword ptr [ebp-18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F9BF(U)
|
:0045F9CA 837DE85A                cmp dword ptr [ebp-18], 0000005A
:0045F9CE 732B                    jnb 0045F9FB
:0045F9D0 8B55E8                  mov edx, dword ptr [ebp-18]
:0045F9D3 52                      push edx
:0045F9D4 B9806D4800              mov ecx, 00486D80
:0045F9D9 E8F2CFFAFF              call 0040C9D0
:0045F9DE 8945F0                  mov dword ptr [ebp-10], eax
:0045F9E1 8B45F0                  mov eax, dword ptr [ebp-10]
:0045F9E4 8945F8                  mov dword ptr [ebp-08], eax
:0045F9E7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045F9EA 8B11                    mov edx, dword ptr [ecx]
:0045F9EC 3B5508                  cmp edx, dword ptr [ebp+08]
:0045F9EF 7508                    jne 0045F9F9
:0045F9F1 8A45E8                  mov al, byte ptr [ebp-18]
:0045F9F4 8845FC                  mov byte ptr [ebp-04], al
:0045F9F7 EB02                    jmp 0045F9FB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F9EF(C)
|
:0045F9F9 EBC6                    jmp 0045F9C1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F9CE(C), :0045F9F7(U)
|
:0045F9FB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045F9FE 81E1FF000000            and ecx, 000000FF
:0045FA04 81F9FF000000            cmp ecx, 000000FF
:0045FA0A 0F84DE000000            je 0045FAEE
:0045FA10 6A0C                    push 0000000C
:0045FA12 B9F8544B00              mov ecx, 004B54F8
:0045FA17 E8FE9A0000              call 0046951A
:0045FA1C 8B55F8                  mov edx, dword ptr [ebp-08]
:0045FA1F 8B4208                  mov eax, dword ptr [edx+08]
:0045FA22 83E004                  and eax, 00000004
:0045FA25 33C9                    xor ecx, ecx
:0045FA27 83F804                  cmp eax, 00000004
:0045FA2A 0F94C1                  sete cl
:0045FA2D 894DE4                  mov dword ptr [ebp-1C], ecx
:0045FA30 8B55F8                  mov edx, dword ptr [ebp-08]
:0045FA33 83C204                  add edx, 00000004
:0045FA36 8955E0                  mov dword ptr [ebp-20], edx
:0045FA39 8B45E0                  mov eax, dword ptr [ebp-20]
:0045FA3C 8A4801                  mov cl, byte ptr [eax+01]
:0045FA3F 51                      push ecx
:0045FA40 8B55E0                  mov edx, dword ptr [ebp-20]
:0045FA43 8A02                    mov al, byte ptr [edx]
:0045FA45 50                      push eax
:0045FA46 B958494B00              mov ecx, 004B4958
:0045FA4B E89DE0FEFF              call 0044DAED
:0045FA50 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045FA53 6BC950                  imul ecx, 00000050
:0045FA56 81C1787F4900            add ecx, 00497F78
:0045FA5C E88923FAFF              call 00401DEA
:0045FA61 50                      push eax
:0045FA62 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045FA65 E8AB37FDFF              call 00433215
:0045FA6A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045FA6D 6BC950                  imul ecx, 00000050
:0045FA70 81C1787F4900            add ecx, 00497F78
:0045FA76 E8A023FAFF              call 00401E1B
:0045FA7B 50                      push eax
:0045FA7C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045FA7F E8D237FDFF              call 00433256
:0045FA84 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0045FA87 F7D9                    neg ecx
:0045FA89 1BC9                    sbb ecx, ecx
:0045FA8B 83E1FE                  and ecx, FFFFFFFE
:0045FA8E 83C103                  add ecx, 00000003
:0045FA91 51                      push ecx
:0045FA92 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045FA95 E8A6E4FCFF              call 0042DF40

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045FA9A 6A03                    push 00000003
:0045FA9C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045FA9F E80C71FDFF              call 00436BB0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045FAA4 6A03                    push 00000003
:0045FAA6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045FAA9 E84271FDFF              call 00436BF0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0045FAAE 6A03                    push 00000003
:0045FAB0 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045FAB3 E87871FDFF              call 00436C30
:0045FAB8 6A00                    push 00000000
:0045FABA 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045FABD E8FE24FEFF              call 00441FC0
:0045FAC2 6A01                    push 00000001
:0045FAC4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045FAC7 E83472FDFF              call 00436D00
:0045FACC 8B55E4                  mov edx, dword ptr [ebp-1C]
:0045FACF 52                      push edx
:0045FAD0 8B45E0                  mov eax, dword ptr [ebp-20]
:0045FAD3 8A4801                  mov cl, byte ptr [eax+01]
:0045FAD6 51                      push ecx
:0045FAD7 8B55E0                  mov edx, dword ptr [ebp-20]
:0045FADA 8A02                    mov al, byte ptr [edx]
:0045FADC 50                      push eax
:0045FADD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045FAE0 E81E4CFDFF              call 00434703
:0045FAE5 C745F401000000          mov [ebp-0C], 00000001
:0045FAEC EB07                    jmp 0045FAF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FA0A(C)
|
:0045FAEE C745F4FFFFFFFF          mov [ebp-0C], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FAEC(U)
|
:0045FAF5 EB07                    jmp 0045FAFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045F9B2(C)
|
:0045FAF7 C745F401000000          mov [ebp-0C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F99C(C), :0045FAF5(U)
|
:0045FAFE 837DF401                cmp dword ptr [ebp-0C], 00000001
:0045FB02 7405                    je 0045FB09
:0045FB04 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045FB07 EB1E                    jmp 0045FB27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FB02(C)
|
:0045FB09 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0045FB0C E8CF6EFDFF              call 004369E0
:0045FB11 50                      push eax
:0045FB12 E805D00000              call 0046CB1C
:0045FB17 83C404                  add esp, 00000004
:0045FB1A B9784E4B00              mov ecx, 004B4E78
:0045FB1F E814FBFFFF              call 0045F638
:0045FB24 8B45F4                  mov eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045F984(U), :0045FB07(U)
|
:0045FB27 8BE5                    mov esp, ebp
:0045FB29 5D                      pop ebp
:0045FB2A C20C00                  ret 000C



* Referenced by a CALL at Address:
|:00409C2A   
|
:0045FB2D 55                      push ebp
:0045FB2E 8BEC                    mov ebp, esp
:0045FB30 83EC10                  sub esp, 00000010
:0045FB33 894DF0                  mov dword ptr [ebp-10], ecx
:0045FB36 8B4508                  mov eax, dword ptr [ebp+08]
:0045FB39 50                      push eax
:0045FB3A E860FCFFFF              call 0045F79F
:0045FB3F 83C404                  add esp, 00000004
:0045FB42 8945FC                  mov dword ptr [ebp-04], eax
:0045FB45 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:0045FB49 7508                    jne 0045FB53
:0045FB4B 83C8FF                  or eax, FFFFFFFF
:0045FB4E E927010000              jmp 0045FC7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FB49(C)
|
:0045FB53 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FB56 E875C5FFFF              call 0045C0D0
:0045FB5B 25FF000000              and eax, 000000FF
:0045FB60 83F804                  cmp eax, 00000004
:0045FB63 752A                    jne 0045FB8F
:0045FB65 8A4D10                  mov cl, byte ptr [ebp+10]
:0045FB68 51                      push ecx
:0045FB69 8A550C                  mov dl, byte ptr [ebp+0C]
:0045FB6C 52                      push edx
:0045FB6D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FB70 E8CF6CFDFF              call 00436844
:0045FB75 6A00                    push 00000000
:0045FB77 8A4510                  mov al, byte ptr [ebp+10]
:0045FB7A 50                      push eax
:0045FB7B 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0045FB7E 51                      push ecx
:0045FB7F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FB82 E87C4BFDFF              call 00434703
:0045FB87 83C8FF                  or eax, FFFFFFFF
:0045FB8A E9EB000000              jmp 0045FC7A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FB63(C)
|
:0045FB8F 8B550C                  mov edx, dword ptr [ebp+0C]
:0045FB92 81E2FF000000            and edx, 000000FF
:0045FB98 33C0                    xor eax, eax
:0045FB9A A0C44E4B00              mov al, byte ptr [004B4EC4]
:0045FB9F 3BD0                    cmp edx, eax
:0045FBA1 0F8DD0000000            jnl 0045FC77
:0045FBA7 8B4D10                  mov ecx, dword ptr [ebp+10]
:0045FBAA 81E1FF000000            and ecx, 000000FF
:0045FBB0 33D2                    xor edx, edx
:0045FBB2 8A15C54E4B00            mov dl, byte ptr [004B4EC5]
:0045FBB8 3BCA                    cmp ecx, edx
:0045FBBA 0F8DB7000000            jnl 0045FC77
:0045FBC0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FBC3 E8B85BFAFF              call 00405780
:0045FBC8 8845F4                  mov byte ptr [ebp-0C], al

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045FBCB 6A04                    push 00000004
:0045FBCD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FBD0 E8FB6CFDFF              call 004368D0
:0045FBD5 6A00                    push 00000000
:0045FBD7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FBDA E81C56FDFF              call 004351FB
:0045FBDF 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0045FBE2 E8095BFAFF              call 004056F0
:0045FBE7 8A450C                  mov al, byte ptr [ebp+0C]
:0045FBEA 8845F8                  mov byte ptr [ebp-08], al
:0045FBED 8A4D10                  mov cl, byte ptr [ebp+10]
:0045FBF0 884DF9                  mov byte ptr [ebp-07], cl
:0045FBF3 8D55F8                  lea edx, dword ptr [ebp-08]
:0045FBF6 52                      push edx
:0045FBF7 E8E0FBFEFF              call 0044F7DC
:0045FBFC 83C404                  add esp, 00000004
:0045FBFF 25FF000000              and eax, 000000FF
:0045FC04 3DFF000000              cmp eax, 000000FF
:0045FC09 7428                    je 0045FC33
:0045FC0B C60560484B00FF          mov byte ptr [004B4860], FF

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0045FC12 6A0A                    push 0000000A
:0045FC14 668B45F8                mov ax, word ptr [ebp-08]
:0045FC18 50                      push eax
:0045FC19 E89630FDFF              call 00432CB4
:0045FC1E 83C408                  add esp, 00000008
:0045FC21 8A0D60484B00            mov cl, byte ptr [004B4860]
:0045FC27 884D0C                  mov byte ptr [ebp+0C], cl
:0045FC2A 8A1561484B00            mov dl, byte ptr [004B4861]
:0045FC30 885510                  mov byte ptr [ebp+10], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FC09(C)
|
:0045FC33 8A4510                  mov al, byte ptr [ebp+10]
:0045FC36 50                      push eax
:0045FC37 8A4D0C                  mov cl, byte ptr [ebp+0C]
:0045FC3A 51                      push ecx
:0045FC3B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FC3E E8016CFDFF              call 00436844
:0045FC43 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FC46 E89A29FFFF              call 004525E5
:0045FC4B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045FC4E 81E2FF000000            and edx, 000000FF
:0045FC54 83FA07                  cmp edx, 00000007
:0045FC57 750A                    jne 0045FC63

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0045FC59 6A07                    push 00000007
:0045FC5B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FC5E E89855FDFF              call 004351FB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FC57(C)
|
:0045FC63 68C4000000              push 000000C4
:0045FC68 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FC6B E85071FDFF              call 00436DC0
:0045FC70 B801000000              mov eax, 00000001
:0045FC75 EB03                    jmp 0045FC7A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FBA1(C), :0045FBBA(C)
|
:0045FC77 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FB4E(U), :0045FB8A(U), :0045FC75(U)
|
:0045FC7A 8BE5                    mov esp, ebp
:0045FC7C 5D                      pop ebp
:0045FC7D C20C00                  ret 000C


:0045FC80 55                      push ebp
:0045FC81 8BEC                    mov ebp, esp
:0045FC83 83EC0C                  sub esp, 0000000C
:0045FC86 894DF4                  mov dword ptr [ebp-0C], ecx
:0045FC89 8B4508                  mov eax, dword ptr [ebp+08]
:0045FC8C 50                      push eax
:0045FC8D E80DFBFFFF              call 0045F79F
:0045FC92 83C404                  add esp, 00000004
:0045FC95 8945F8                  mov dword ptr [ebp-08], eax
:0045FC98 C745FC00000000          mov [ebp-04], 00000000
:0045FC9F 837DF8FF                cmp dword ptr [ebp-08], FFFFFFFF
:0045FCA3 7509                    jne 0045FCAE
:0045FCA5 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0045FCAC EB13                    jmp 0045FCC1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FCA3(C)
|
:0045FCAE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045FCB1 E86855FDFF              call 0043521E
:0045FCB6 85C0                    test eax, eax
:0045FCB8 7407                    je 0045FCC1
:0045FCBA C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FCAC(U), :0045FCB8(C)
|
:0045FCC1 8B45FC                  mov eax, dword ptr [ebp-04]
:0045FCC4 8BE5                    mov esp, ebp
:0045FCC6 5D                      pop ebp
:0045FCC7 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040B6BF   , :0040B7BA   
|
:0045FCCA 55                      push ebp
:0045FCCB 8BEC                    mov ebp, esp
:0045FCCD 51                      push ecx
:0045FCCE 894DFC                  mov dword ptr [ebp-04], ecx
:0045FCD1 B9D8174B00              mov ecx, 004B17D8
:0045FCD6 E86501FBFF              call 0040FE40
:0045FCDB 25FF000000              and eax, 000000FF
:0045FCE0 83F803                  cmp eax, 00000003
:0045FCE3 752F                    jne 0045FD14
:0045FCE5 8A4508                  mov al, byte ptr [ebp+08]
:0045FCE8 50                      push eax
:0045FCE9 B9784E4B00              mov ecx, 004B4E78
:0045FCEE E80D02FBFF              call 0040FF00
:0045FCF3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045FCF6 81E1FF000000            and ecx, 000000FF
:0045FCFC 83F903                  cmp ecx, 00000003
:0045FCFF 750C                    jne 0045FD0D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045FD01 6A04                    push 00000004
:0045FD03 B900554B00              mov ecx, 004B5500
:0045FD08 E891970000              call 0046949E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FCFF(C)
|
:0045FD0D B801000000              mov eax, 00000001
:0045FD12 EB03                    jmp 0045FD17

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FCE3(C)
|
:0045FD14 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FD12(U)
|
:0045FD17 8BE5                    mov esp, ebp
:0045FD19 5D                      pop ebp
:0045FD1A C20400                  ret 0004


:0045FD1D 55                      push ebp
:0045FD1E 8BEC                    mov ebp, esp
:0045FD20 51                      push ecx
:0045FD21 894DFC                  mov dword ptr [ebp-04], ecx
:0045FD24 6A00                    push 00000000
:0045FD26 B9784E4B00              mov ecx, 004B4E78
:0045FD2B E873CCFFFF              call 0045C9A3
:0045FD30 8BE5                    mov esp, ebp
:0045FD32 5D                      pop ebp
:0045FD33 C3                      ret


:0045FD34 55                      push ebp
:0045FD35 8BEC                    mov ebp, esp
:0045FD37 51                      push ecx
:0045FD38 894DFC                  mov dword ptr [ebp-04], ecx
:0045FD3B 8BE5                    mov esp, ebp
:0045FD3D 5D                      pop ebp
:0045FD3E C3                      ret



* Referenced by a CALL at Addresses:
|:0040A14B   , :0043480D   , :0043483F   
|
:0045FD3F 55                      push ebp
:0045FD40 8BEC                    mov ebp, esp
:0045FD42 83EC14                  sub esp, 00000014
:0045FD45 894DEC                  mov dword ptr [ebp-14], ecx
:0045FD48 C745F800000000          mov [ebp-08], 00000000
:0045FD4F C645F400                mov [ebp-0C], 00
:0045FD53 EB08                    jmp 0045FD5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FDA5(U)
|
:0045FD55 8A45F4                  mov al, byte ptr [ebp-0C]
:0045FD58 0401                    add al, 01
:0045FD5A 8845F4                  mov byte ptr [ebp-0C], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FD53(U)
|
:0045FD5D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045FD60 81E1FF000000            and ecx, 000000FF
:0045FD66 83F95A                  cmp ecx, 0000005A
:0045FD69 7D3C                    jge 0045FDA7
:0045FD6B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045FD6E 81E1FF000000            and ecx, 000000FF
:0045FD74 6BC924                  imul ecx, 00000024
:0045FD77 81C1B83B4B00            add ecx, 004B3BB8
:0045FD7D E85E6CFDFF              call 004369E0
:0045FD82 3B450C                  cmp eax, dword ptr [ebp+0C]
:0045FD85 751E                    jne 0045FDA5
:0045FD87 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045FD8A 81E2FF000000            and edx, 000000FF
:0045FD90 6BD224                  imul edx, 00000024
:0045FD93 81C2B83B4B00            add edx, 004B3BB8
:0045FD99 8955F0                  mov dword ptr [ebp-10], edx
:0045FD9C C745F801000000          mov [ebp-08], 00000001
:0045FDA3 EB02                    jmp 0045FDA7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FD85(C)
|
:0045FDA5 EBAE                    jmp 0045FD55

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FD69(C), :0045FDA3(U)
|
:0045FDA7 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0045FDAA E84159FAFF              call 004056F0
:0045FDAF 837DF801                cmp dword ptr [ebp-08], 00000001
:0045FDB3 7545                    jne 0045FDFA
:0045FDB5 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045FDB8 E813C3FFFF              call 0045C0D0
:0045FDBD 25FF000000              and eax, 000000FF
:0045FDC2 83F802                  cmp eax, 00000002
:0045FDC5 7531                    jne 0045FDF8
:0045FDC7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0045FDCA E8711EFDFF              call 00431C40
:0045FDCF 50                      push eax
:0045FDD0 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0045FDD3 E8C86CFDFF              call 00436AA0
:0045FDD8 8A45FD                  mov al, byte ptr [ebp-03]
:0045FDDB 50                      push eax
:0045FDDC 8A4DFC                  mov cl, byte ptr [ebp-04]
:0045FDDF 51                      push ecx
:0045FDE0 B958494B00              mov ecx, 004B4958
:0045FDE5 E803DDFEFF              call 0044DAED
:0045FDEA 8D55FC                  lea edx, dword ptr [ebp-04]
:0045FDED 52                      push edx
:0045FDEE B958494B00              mov ecx, 004B4958
:0045FDF3 E8A5D2FEFF              call 0044D09D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FDC5(C)
|
:0045FDF8 EB04                    jmp 0045FDFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FDB3(C)
|
:0045FDFA C645FD00                mov [ebp-03], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FDF8(U)
|
:0045FDFE E844F8FCFF              call 0042F647
:0045FE03 6A00                    push 00000000
:0045FE05 8B450C                  mov eax, dword ptr [ebp+0C]
:0045FE08 50                      push eax
:0045FE09 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045FE0C 51                      push ecx
:0045FE0D E89CFDFCFF              call 0042FBAE
:0045FE12 83C40C                  add esp, 0000000C
:0045FE15 B958494B00              mov ecx, 004B4958
:0045FE1A E885D3FEFF              call 0044D1A4
:0045FE1F 8BE5                    mov esp, ebp
:0045FE21 5D                      pop ebp
:0045FE22 C20800                  ret 0008


:0045FE25 55                      push ebp
:0045FE26 8BEC                    mov ebp, esp
:0045FE28 51                      push ecx
:0045FE29 894DFC                  mov dword ptr [ebp-04], ecx
:0045FE2C 8BE5                    mov esp, ebp
:0045FE2E 5D                      pop ebp
:0045FE2F C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040AADD   , :0045D1E6   
|
:0045FE32 55                      push ebp
:0045FE33 8BEC                    mov ebp, esp
:0045FE35 83EC08                  sub esp, 00000008
:0045FE38 894DF8                  mov dword ptr [ebp-08], ecx
:0045FE3B 8B4508                  mov eax, dword ptr [ebp+08]
:0045FE3E 50                      push eax
:0045FE3F E85BF9FFFF              call 0045F79F
:0045FE44 83C404                  add esp, 00000004
:0045FE47 8945FC                  mov dword ptr [ebp-04], eax
:0045FE4A 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:0045FE4E 7505                    jne 0045FE55
:0045FE50 83C8FF                  or eax, FFFFFFFF
:0045FE53 EB66                    jmp 0045FEBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FE4E(C)
|
:0045FE55 8B4D08                  mov ecx, dword ptr [ebp+08]
:0045FE58 6BC950                  imul ecx, 00000050
:0045FE5B 81C1787F4900            add ecx, 00497F78
:0045FE61 E81A00FBFF              call 0040FE80
:0045FE66 25FF000000              and eax, 000000FF
:0045FE6B 85C0                    test eax, eax
:0045FE6D 7449                    je 0045FEB8
:0045FE6F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0045FE72 81E1FF000000            and ecx, 000000FF
:0045FE78 85C9                    test ecx, ecx
:0045FE7A 7C37                    jl 0045FEB3
:0045FE7C 8B550C                  mov edx, dword ptr [ebp+0C]
:0045FE7F 81E2FF000000            and edx, 000000FF
:0045FE85 83FA06                  cmp edx, 00000006
:0045FE88 7F29                    jg 0045FEB3

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045FE8A 6A04                    push 00000004
:0045FE8C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FE8F E82C6FFDFF              call 00436DC0
:0045FE94 8B450C                  mov eax, dword ptr [ebp+0C]
:0045FE97 25FF000000              and eax, 000000FF
:0045FE9C 8A0C8588194800          mov cl, byte ptr [4*eax+00481988]
:0045FEA3 51                      push ecx
:0045FEA4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FEA7 E84F53FDFF              call 004351FB
:0045FEAC B801000000              mov eax, 00000001
:0045FEB1 EB08                    jmp 0045FEBB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FE7A(C), :0045FE88(C)
|
:0045FEB3 83C8FF                  or eax, FFFFFFFF
:0045FEB6 EB03                    jmp 0045FEBB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FE6D(C)
|
:0045FEB8 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FE53(U), :0045FEB1(U), :0045FEB6(U)
|
:0045FEBB 8BE5                    mov esp, ebp
:0045FEBD 5D                      pop ebp
:0045FEBE C20800                  ret 0008



* Referenced by a CALL at Address:
|:0045C99A   
|
:0045FEC1 55                      push ebp
:0045FEC2 8BEC                    mov ebp, esp
:0045FEC4 83EC0C                  sub esp, 0000000C
:0045FEC7 56                      push esi
:0045FEC8 894DF4                  mov dword ptr [ebp-0C], ecx
:0045FECB 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0045FECE E81D58FAFF              call 004056F0
:0045FED3 C745F800000000          mov [ebp-08], 00000000
:0045FEDA EB09                    jmp 0045FEE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FF97(U)
|
:0045FEDC 8B45F8                  mov eax, dword ptr [ebp-08]
:0045FEDF 83C004                  add eax, 00000004
:0045FEE2 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FEDA(U)
|
:0045FEE5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045FEE8 8B55F8                  mov edx, dword ptr [ebp-08]
:0045FEEB 3B5108                  cmp edx, dword ptr [ecx+08]
:0045FEEE 0F83A8000000            jnb 0045FF9C
:0045FEF4 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045FEF7 8B4804                  mov ecx, dword ptr [eax+04]
:0045FEFA 8B55F8                  mov edx, dword ptr [ebp-08]
:0045FEFD 8A0411                  mov al, byte ptr [ecx+edx]
:0045FF00 8845FC                  mov byte ptr [ebp-04], al
:0045FF03 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0045FF06 8B5104                  mov edx, dword ptr [ecx+04]
:0045FF09 8B45F8                  mov eax, dword ptr [ebp-08]
:0045FF0C 8A4C0201                mov cl, byte ptr [edx+eax+01]
:0045FF10 884DFD                  mov byte ptr [ebp-03], cl
:0045FF13 8D55FC                  lea edx, dword ptr [ebp-04]
:0045FF16 52                      push edx
:0045FF17 E8C0F8FEFF              call 0044F7DC
:0045FF1C 83C404                  add esp, 00000004
:0045FF1F 25FF000000              and eax, 000000FF
:0045FF24 3DFF000000              cmp eax, 000000FF
:0045FF29 756C                    jne 0045FF97
:0045FF2B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0045FF2E 8B4804                  mov ecx, dword ptr [eax+04]
:0045FF31 8B55F8                  mov edx, dword ptr [ebp-08]
:0045FF34 33C0                    xor eax, eax
:0045FF36 8A441102                mov al, byte ptr [ecx+edx+02]
:0045FF3A 83C05A                  add eax, 0000005A
:0045FF3D 50                      push eax
:0045FF3E 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0045FF41 51                      push ecx
:0045FF42 E862FAFEFF              call 0044F9A9
:0045FF47 83C408                  add esp, 00000008
:0045FF4A 8B55F4                  mov edx, dword ptr [ebp-0C]
:0045FF4D 8B4204                  mov eax, dword ptr [edx+04]
:0045FF50 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0045FF53 33D2                    xor edx, edx
:0045FF55 8A540802                mov dl, byte ptr [eax+ecx+02]
:0045FF59 8BF2                    mov esi, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0045FF5B 6A04                    push 00000004
:0045FF5D 6A00                    push 00000000
:0045FF5F 6A00                    push 00000000
:0045FF61 B9881C4B00              mov ecx, 004B1C88
:0045FF66 E825900100              call 00478F90
:0045FF6B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0045FF6E 81E1FF000000            and ecx, 000000FF
:0045FF74 8D940880430000          lea edx, dword ptr [eax+ecx+00004380]
:0045FF7B 8B45FD                  mov eax, dword ptr [ebp-03]
:0045FF7E 25FF000000              and eax, 000000FF
:0045FF83 33C9                    xor ecx, ecx
:0045FF85 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0045FF8B 0FAFC1                  imul eax, ecx
:0045FF8E 8A8EA4194800            mov cl, byte ptr [esi+004819A4]
:0045FF94 880C02                  mov byte ptr [edx+eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FF29(C)
|
:0045FF97 E940FFFFFF              jmp 0045FEDC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FEEE(C)
|
:0045FF9C 5E                      pop esi
:0045FF9D 8BE5                    mov esp, ebp
:0045FF9F 5D                      pop ebp
:0045FFA0 C3                      ret



* Referenced by a CALL at Address:
|:0040A66E   
|
:0045FFA1 55                      push ebp
:0045FFA2 8BEC                    mov ebp, esp
:0045FFA4 83EC10                  sub esp, 00000010
:0045FFA7 56                      push esi
:0045FFA8 894DF0                  mov dword ptr [ebp-10], ecx
:0045FFAB 8A450C                  mov al, byte ptr [ebp+0C]
:0045FFAE 50                      push eax
:0045FFAF 8A4D08                  mov cl, byte ptr [ebp+08]
:0045FFB2 51                      push ecx
:0045FFB3 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0045FFB6 E8A56BFDFF              call 00436B60
:0045FFBB 8B5510                  mov edx, dword ptr [ebp+10]
:0045FFBE 81E2FF000000            and edx, 000000FF
:0045FFC4 83FA02                  cmp edx, 00000002
:0045FFC7 7412                    je 0045FFDB
:0045FFC9 8A45FD                  mov al, byte ptr [ebp-03]
:0045FFCC 50                      push eax
:0045FFCD 8A4DFC                  mov cl, byte ptr [ebp-04]
:0045FFD0 51                      push ecx
:0045FFD1 B958494B00              mov ecx, 004B4958
:0045FFD6 E812DBFEFF              call 0044DAED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0045FFC7(C)
|
:0045FFDB 8D55FC                  lea edx, dword ptr [ebp-04]
:0045FFDE 52                      push edx
:0045FFDF E8F8F7FEFF              call 0044F7DC
:0045FFE4 83C404                  add esp, 00000004
:0045FFE7 25FF000000              and eax, 000000FF
:0045FFEC 3DFF000000              cmp eax, 000000FF
:0045FFF1 0F850D020000            jne 00460204
:0045FFF7 8B4510                  mov eax, dword ptr [ebp+10]
:0045FFFA 25FF000000              and eax, 000000FF
:0045FFFF 83F802                  cmp eax, 00000002
:00460002 0F8DF0000000            jnl 004600F8
:00460008 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046000B 81E1FF000000            and ecx, 000000FF
:00460011 83C15A                  add ecx, 0000005A
:00460014 51                      push ecx
:00460015 8D55FC                  lea edx, dword ptr [ebp-04]
:00460018 52                      push edx
:00460019 E88BF9FEFF              call 0044F9A9
:0046001E 83C408                  add esp, 00000008

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00460021 6A04                    push 00000004
:00460023 6A00                    push 00000000
:00460025 6A00                    push 00000000
:00460027 B9881C4B00              mov ecx, 004B1C88
:0046002C E85F8F0100              call 00478F90
:00460031 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460034 81E1FF000000            and ecx, 000000FF
:0046003A 8D940880430000          lea edx, dword ptr [eax+ecx+00004380]
:00460041 8B450C                  mov eax, dword ptr [ebp+0C]
:00460044 25FF000000              and eax, 000000FF
:00460049 33C9                    xor ecx, ecx
:0046004B 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:00460051 0FAFC1                  imul eax, ecx
:00460054 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00460057 8B4908                  mov ecx, dword ptr [ecx+08]
:0046005A 8B75F0                  mov esi, dword ptr [ebp-10]
:0046005D 8B7604                  mov esi, dword ptr [esi+04]
:00460060 8A1402                  mov dl, byte ptr [edx+eax]
:00460063 88540E03                mov byte ptr [esi+ecx+03], dl
:00460067 8B7510                  mov esi, dword ptr [ebp+10]
:0046006A 81E6FF000000            and esi, 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00460070 6A04                    push 00000004
:00460072 6A00                    push 00000000
:00460074 6A00                    push 00000000
:00460076 B9881C4B00              mov ecx, 004B1C88
:0046007B E8108F0100              call 00478F90
:00460080 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460083 81E1FF000000            and ecx, 000000FF
:00460089 8D940880430000          lea edx, dword ptr [eax+ecx+00004380]
:00460090 8B450C                  mov eax, dword ptr [ebp+0C]
:00460093 25FF000000              and eax, 000000FF
:00460098 33C9                    xor ecx, ecx
:0046009A 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:004600A0 0FAFC1                  imul eax, ecx
:004600A3 8A8EA4194800            mov cl, byte ptr [esi+004819A4]
:004600A9 880C02                  mov byte ptr [edx+eax], cl
:004600AC 8B55F0                  mov edx, dword ptr [ebp-10]
:004600AF 8B4204                  mov eax, dword ptr [edx+04]
:004600B2 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004600B5 8B5108                  mov edx, dword ptr [ecx+08]
:004600B8 8A4D08                  mov cl, byte ptr [ebp+08]
:004600BB 880C10                  mov byte ptr [eax+edx], cl
:004600BE 8B55F0                  mov edx, dword ptr [ebp-10]
:004600C1 8B4208                  mov eax, dword ptr [edx+08]
:004600C4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004600C7 8B5104                  mov edx, dword ptr [ecx+04]
:004600CA 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004600CD 884C0201                mov byte ptr [edx+eax+01], cl
:004600D1 8B55F0                  mov edx, dword ptr [ebp-10]
:004600D4 8B4208                  mov eax, dword ptr [edx+08]
:004600D7 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004600DA 8B5104                  mov edx, dword ptr [ecx+04]
:004600DD 8A4D10                  mov cl, byte ptr [ebp+10]
:004600E0 884C0202                mov byte ptr [edx+eax+02], cl
:004600E4 8B55F0                  mov edx, dword ptr [ebp-10]
:004600E7 8B4208                  mov eax, dword ptr [edx+08]
:004600EA 83C004                  add eax, 00000004
:004600ED 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004600F0 894108                  mov dword ptr [ecx+08], eax
:004600F3 E90C010000              jmp 00460204

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460002(C)
|
:004600F8 C745F800000000          mov [ebp-08], 00000000
:004600FF EB09                    jmp 0046010A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004601FF(U)
|
:00460101 8B55F8                  mov edx, dword ptr [ebp-08]
:00460104 83C204                  add edx, 00000004
:00460107 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004600FF(U)
|
:0046010A 8B45F0                  mov eax, dword ptr [ebp-10]
:0046010D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460110 3B4808                  cmp ecx, dword ptr [eax+08]
:00460113 0F83EB000000            jnb 00460204
:00460119 8B55F0                  mov edx, dword ptr [ebp-10]
:0046011C 8B4204                  mov eax, dword ptr [edx+04]
:0046011F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460122 33D2                    xor edx, edx
:00460124 8A1408                  mov dl, byte ptr [eax+ecx]
:00460127 8B45FC                  mov eax, dword ptr [ebp-04]
:0046012A 25FF000000              and eax, 000000FF
:0046012F 3BD0                    cmp edx, eax
:00460131 0F85C8000000            jne 004601FF
:00460137 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046013A 8B5104                  mov edx, dword ptr [ecx+04]
:0046013D 8B45F8                  mov eax, dword ptr [ebp-08]
:00460140 33C9                    xor ecx, ecx
:00460142 8A4C0201                mov cl, byte ptr [edx+eax+01]
:00460146 8B55FD                  mov edx, dword ptr [ebp-03]
:00460149 81E2FF000000            and edx, 000000FF
:0046014F 3BCA                    cmp ecx, edx
:00460151 0F85A8000000            jne 004601FF
:00460157 8B45F0                  mov eax, dword ptr [ebp-10]
:0046015A 8B7004                  mov esi, dword ptr [eax+04]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046015D 6A04                    push 00000004
:0046015F 6A00                    push 00000000
:00460161 6A00                    push 00000000
:00460163 B9881C4B00              mov ecx, 004B1C88
:00460168 E8238E0100              call 00478F90
:0046016D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460170 81E1FF000000            and ecx, 000000FF
:00460176 8D940880430000          lea edx, dword ptr [eax+ecx+00004380]
:0046017D 8B450C                  mov eax, dword ptr [ebp+0C]
:00460180 25FF000000              and eax, 000000FF
:00460185 33C9                    xor ecx, ecx
:00460187 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:0046018D 0FAFC1                  imul eax, ecx
:00460190 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460193 8A4C0E03                mov cl, byte ptr [esi+ecx+03]
:00460197 880C02                  mov byte ptr [edx+eax], cl
:0046019A 68FF000000              push 000000FF
:0046019F 8D55FC                  lea edx, dword ptr [ebp-04]
:004601A2 52                      push edx
:004601A3 E801F8FEFF              call 0044F9A9
:004601A8 83C408                  add esp, 00000008
:004601AB 8B45F8                  mov eax, dword ptr [ebp-08]
:004601AE 8945F4                  mov dword ptr [ebp-0C], eax
:004601B1 EB09                    jmp 004601BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004601EC(U)
|
:004601B3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004601B6 83C104                  add ecx, 00000004
:004601B9 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004601B1(U)
|
:004601BC 8B55F0                  mov edx, dword ptr [ebp-10]
:004601BF 8B4208                  mov eax, dword ptr [edx+08]
:004601C2 83E804                  sub eax, 00000004
:004601C5 3945F4                  cmp dword ptr [ebp-0C], eax
:004601C8 7324                    jnb 004601EE

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004601CA 6A04                    push 00000004
:004601CC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004601CF 8B5104                  mov edx, dword ptr [ecx+04]
:004601D2 0355F4                  add edx, dword ptr [ebp-0C]
:004601D5 52                      push edx
:004601D6 8B45F0                  mov eax, dword ptr [ebp-10]
:004601D9 8B4804                  mov ecx, dword ptr [eax+04]
:004601DC 8B55F4                  mov edx, dword ptr [ebp-0C]
:004601DF 8D441104                lea eax, dword ptr [ecx+edx+04]
:004601E3 50                      push eax
:004601E4 E8D7830100              call 004785C0
:004601E9 83C40C                  add esp, 0000000C
:004601EC EBC5                    jmp 004601B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004601C8(C)
|
:004601EE 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004601F1 8B5108                  mov edx, dword ptr [ecx+08]
:004601F4 83EA04                  sub edx, 00000004
:004601F7 8B45F0                  mov eax, dword ptr [ebp-10]
:004601FA 895008                  mov dword ptr [eax+08], edx
:004601FD EB05                    jmp 00460204

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460131(C), :00460151(C)
|
:004601FF E9FDFEFFFF              jmp 00460101

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0045FFF1(C), :004600F3(U), :00460113(C), :004601FD(U)
|
:00460204 5E                      pop esi
:00460205 8BE5                    mov esp, ebp
:00460207 5D                      pop ebp
:00460208 C20C00                  ret 000C


:0046020B 55                      push ebp
:0046020C 8BEC                    mov ebp, esp
:0046020E 51                      push ecx
:0046020F 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00460212 6A04                    push 00000004
:00460214 B9F8544B00              mov ecx, 004B54F8
:00460219 E8FC920000              call 0046951A

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046021E 6A08                    push 00000008
:00460220 E896F3FCFF              call 0042F5BB
:00460225 83C404                  add esp, 00000004
:00460228 8B4510                  mov eax, dword ptr [ebp+10]
:0046022B 25FF000000              and eax, 000000FF
:00460230 83F804                  cmp eax, 00000004
:00460233 7516                    jne 0046024B

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00460235 6A02                    push 00000002
:00460237 E827000000              call 00460263
:0046023C 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046023F 6A03                    push 00000003
:00460241 E81D000000              call 00460263
:00460246 83C404                  add esp, 00000004
:00460249 EB12                    jmp 0046025D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460233(C)
|
:0046024B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046024E 81E1FF000000            and ecx, 000000FF
:00460254 51                      push ecx
:00460255 E809000000              call 00460263
:0046025A 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460249(U)
|
:0046025D 8BE5                    mov esp, ebp
:0046025F 5D                      pop ebp
:00460260 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:00460237   , :00460241   , :00460255   
|
:00460263 55                      push ebp
:00460264 8BEC                    mov ebp, esp
:00460266 5D                      pop ebp
:00460267 C3                      ret



* Referenced by a CALL at Address:
|:0040AC07   
|
:00460268 55                      push ebp
:00460269 8BEC                    mov ebp, esp
:0046026B 83EC14                  sub esp, 00000014
:0046026E 894DEC                  mov dword ptr [ebp-14], ecx
:00460271 8B4508                  mov eax, dword ptr [ebp+08]
:00460274 50                      push eax
:00460275 E825F5FFFF              call 0045F79F
:0046027A 83C404                  add esp, 00000004
:0046027D 8945F4                  mov dword ptr [ebp-0C], eax
:00460280 C745FC00000000          mov [ebp-04], 00000000
:00460287 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046028A 6BC950                  imul ecx, 00000050
:0046028D 81C1787F4900            add ecx, 00497F78
:00460293 E8E8FBFAFF              call 0040FE80
:00460298 25FF000000              and eax, 000000FF
:0046029D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004602A0 81E1FF000000            and ecx, 000000FF
:004602A6 3BC1                    cmp eax, ecx
:004602A8 750A                    jne 004602B4
:004602AA B801000000              mov eax, 00000001
:004602AF E911020000              jmp 004604C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004602A8(C)
|
:004602B4 837DF4FF                cmp dword ptr [ebp-0C], FFFFFFFF
:004602B8 7508                    jne 004602C2
:004602BA 83C8FF                  or eax, FFFFFFFF
:004602BD E903020000              jmp 004604C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004602B8(C)
|
:004602C2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004602C5 E806BEFFFF              call 0045C0D0
:004602CA 25FF000000              and eax, 000000FF
:004602CF 83F804                  cmp eax, 00000004
:004602D2 751F                    jne 004602F3
:004602D4 8A550C                  mov dl, byte ptr [ebp+0C]
:004602D7 52                      push edx
:004602D8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004602DB 6BC950                  imul ecx, 00000050
:004602DE 81C1787F4900            add ecx, 00497F78
:004602E4 E8B753FAFF              call 004056A0
:004602E9 B801000000              mov eax, 00000001
:004602EE E9D2010000              jmp 004604C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004602D2(C)
|
:004602F3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004602F6 E815C6FAFF              call 0040C910
:004602FB 8945F8                  mov dword ptr [ebp-08], eax
:004602FE 837DF800                cmp dword ptr [ebp-08], 00000000
:00460302 7414                    je 00460318
:00460304 8B450C                  mov eax, dword ptr [ebp+0C]
:00460307 25FF000000              and eax, 000000FF
:0046030C 85C0                    test eax, eax
:0046030E 7508                    jne 00460318
:00460310 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460313 894DFC                  mov dword ptr [ebp-04], ecx
:00460316 EB68                    jmp 00460380

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460302(C), :0046030E(C)
|
:00460318 8B55F8                  mov edx, dword ptr [ebp-08]
:0046031B F7DA                    neg edx
:0046031D 1BD2                    sbb edx, edx
:0046031F 83E21E                  and edx, 0000001E
:00460322 8855F0                  mov byte ptr [ebp-10], dl
:00460325 EB08                    jmp 0046032F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046037E(U)
|
:00460327 8A45F0                  mov al, byte ptr [ebp-10]
:0046032A 0401                    add al, 01
:0046032C 8845F0                  mov byte ptr [ebp-10], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460325(U)
|
:0046032F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00460332 81E1FF000000            and ecx, 000000FF
:00460338 8B55F8                  mov edx, dword ptr [ebp-08]
:0046033B F7DA                    neg edx
:0046033D 1BD2                    sbb edx, edx
:0046033F 83E23C                  and edx, 0000003C
:00460342 83C21E                  add edx, 0000001E
:00460345 3BCA                    cmp ecx, edx
:00460347 7D37                    jge 00460380
:00460349 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046034C 81E1FF000000            and ecx, 000000FF
:00460352 6BC924                  imul ecx, 00000024
:00460355 81C1B83B4B00            add ecx, 004B3BB8
:0046035B E870BDFFFF              call 0045C0D0
:00460360 25FF000000              and eax, 000000FF
:00460365 85C0                    test eax, eax
:00460367 7515                    jne 0046037E
:00460369 8B45F0                  mov eax, dword ptr [ebp-10]
:0046036C 25FF000000              and eax, 000000FF
:00460371 6BC024                  imul eax, 00000024
:00460374 05B83B4B00              add eax, 004B3BB8
:00460379 8945FC                  mov dword ptr [ebp-04], eax
:0046037C EB02                    jmp 00460380

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460367(C)
|
:0046037E EBA7                    jmp 00460327

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460316(U), :00460347(C), :0046037C(U)
|
:00460380 837DFC00                cmp dword ptr [ebp-04], 00000000
:00460384 7525                    jne 004603AB
:00460386 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460389 E8BA44FDFF              call 00434848
:0046038E 8A4D0C                  mov cl, byte ptr [ebp+0C]
:00460391 51                      push ecx
:00460392 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460395 6BC950                  imul ecx, 00000050
:00460398 81C1787F4900            add ecx, 00497F78
:0046039E E8FD52FAFF              call 004056A0
:004603A3 83C8FF                  or eax, FFFFFFFF
:004603A6 E91A010000              jmp 004604C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460384(C)
|
:004603AB 8A550C                  mov dl, byte ptr [ebp+0C]
:004603AE 52                      push edx
:004603AF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004603B2 6BC950                  imul ecx, 00000050
:004603B5 81C1787F4900            add ecx, 00497F78
:004603BB E8E052FAFF              call 004056A0
:004603C0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004603C3 E808BDFFFF              call 0045C0D0
:004603C8 25FF000000              and eax, 000000FF
:004603CD 83F802                  cmp eax, 00000002
:004603D0 7508                    jne 004603DA
:004603D2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004603D5 E80A43FDFF              call 004346E4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004603D0(C)
|
:004603DA 8B45FC                  mov eax, dword ptr [ebp-04]
:004603DD 3B45F4                  cmp eax, dword ptr [ebp-0C]
:004603E0 7427                    je 00460409
:004603E2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004603E5 51                      push ecx
:004603E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004603E9 E8920C0000              call 00461080
:004603EE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004603F1 E8EA1BFEFF              call 00441FE0
:004603F6 50                      push eax
:004603F7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004603FA E84F3EFDFF              call 0043424E
:004603FF 6A00                    push 00000000
:00460401 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460404 E8F768FDFF              call 00436D00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004603E0(C)
|
:00460409 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046040C E8FFC4FAFF              call 0040C910
:00460411 85C0                    test eax, eax
:00460413 7425                    je 0046043A
:00460415 8B550C                  mov edx, dword ptr [ebp+0C]
:00460418 81E2FF000000            and edx, 000000FF
:0046041E 85D2                    test edx, edx
:00460420 750C                    jne 0046042E
:00460422 6A00                    push 00000000
:00460424 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460427 E8C21CFDFF              call 004320EE
:0046042C EB0A                    jmp 00460438

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460420(C)
|
:0046042E 6A01                    push 00000001
:00460430 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460433 E8B61CFDFF              call 004320EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046042C(U)
|
:00460438 EB2D                    jmp 00460467

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460413(C)
|
:0046043A B9F03F4B00              mov ecx, 004B3FF0
:0046043F E8B750FDFF              call 004354FB
:00460444 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00460447 81E1FF000000            and ecx, 000000FF
:0046044D 3BC1                    cmp eax, ecx
:0046044F 750C                    jne 0046045D

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00460451 6A02                    push 00000002
:00460453 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460456 E8931CFDFF              call 004320EE
:0046045B EB0A                    jmp 00460467

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046044F(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046045D 6A03                    push 00000003
:0046045F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460462 E8871CFDFF              call 004320EE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460438(U), :0046045B(U)
|
:00460467 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046046A E81F53FDFF              call 0043578E
:0046046F 85C0                    test eax, eax
:00460471 740A                    je 0046047D
:00460473 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460476 E8E63FFDFF              call 00434461
:0046047B EB08                    jmp 00460485

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460471(C)
|
:0046047D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460480 E8E440FDFF              call 00434569

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046047B(U)
|
:00460485 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460488 E843BCFFFF              call 0045C0D0
:0046048D 25FF000000              and eax, 000000FF
:00460492 83F802                  cmp eax, 00000002
:00460495 7529                    jne 004604C0
:00460497 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046049A E81C42FDFF              call 004346BB
:0046049F 8B550C                  mov edx, dword ptr [ebp+0C]
:004604A2 81E2FF000000            and edx, 000000FF
:004604A8 85D2                    test edx, edx
:004604AA 750A                    jne 004604B6

* Possible Reference to String Resource ID=00007: "
"
                                  |
:004604AC 6A07                    push 00000007
:004604AE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004604B1 E8454DFDFF              call 004351FB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004604AA(C)
|
:004604B6 B9784E4B00              mov ecx, 004B4E78
:004604BB E878F1FFFF              call 0045F638

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460495(C)
|
:004604C0 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004602AF(U), :004602BD(U), :004602EE(U), :004603A6(U)
|
:004604C5 8BE5                    mov esp, ebp
:004604C7 5D                      pop ebp
:004604C8 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040AB37   , :0045D239   
|
:004604CB 55                      push ebp
:004604CC 8BEC                    mov ebp, esp
:004604CE 83EC08                  sub esp, 00000008
:004604D1 894DF8                  mov dword ptr [ebp-08], ecx
:004604D4 8B4508                  mov eax, dword ptr [ebp+08]
:004604D7 50                      push eax
:004604D8 E8C2F2FFFF              call 0045F79F
:004604DD 83C404                  add esp, 00000004
:004604E0 8945FC                  mov dword ptr [ebp-04], eax
:004604E3 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:004604E7 7505                    jne 004604EE
:004604E9 83C8FF                  or eax, FFFFFFFF
:004604EC EB66                    jmp 00460554

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004604E7(C)
|
:004604EE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004604F1 81E1FF000000            and ecx, 000000FF
:004604F7 85C9                    test ecx, ecx
:004604F9 7C56                    jl 00460551
:004604FB 8B5510                  mov edx, dword ptr [ebp+10]
:004604FE 81E2FF000000            and edx, 000000FF
:00460504 85D2                    test edx, edx
:00460506 7C49                    jl 00460551
:00460508 8B450C                  mov eax, dword ptr [ebp+0C]
:0046050B 25FF000000              and eax, 000000FF
:00460510 33C9                    xor ecx, ecx
:00460512 8A0DC44E4B00            mov cl, byte ptr [004B4EC4]
:00460518 3BC1                    cmp eax, ecx
:0046051A 7D35                    jge 00460551
:0046051C 8B5510                  mov edx, dword ptr [ebp+10]
:0046051F 81E2FF000000            and edx, 000000FF
:00460525 33C0                    xor eax, eax
:00460527 A0C54E4B00              mov al, byte ptr [004B4EC5]
:0046052C 3BD0                    cmp edx, eax
:0046052E 7D21                    jge 00460551

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00460530 6A04                    push 00000004
:00460532 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460535 E88668FDFF              call 00436DC0
:0046053A 8A4D10                  mov cl, byte ptr [ebp+10]
:0046053D 51                      push ecx
:0046053E 8A550C                  mov dl, byte ptr [ebp+0C]
:00460541 52                      push edx
:00460542 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460545 E8FA62FDFF              call 00436844
:0046054A B801000000              mov eax, 00000001
:0046054F EB03                    jmp 00460554

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004604F9(C), :00460506(C), :0046051A(C), :0046052E(C)
|
:00460551 83C8FF                  or eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004604EC(U), :0046054F(U)
|
:00460554 8BE5                    mov esp, ebp
:00460556 5D                      pop ebp
:00460557 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:0040AB19   , :0045D21B   
|
:0046055A 55                      push ebp
:0046055B 8BEC                    mov ebp, esp
:0046055D 83EC0C                  sub esp, 0000000C
:00460560 894DF4                  mov dword ptr [ebp-0C], ecx
:00460563 8B4508                  mov eax, dword ptr [ebp+08]
:00460566 50                      push eax
:00460567 E833F2FFFF              call 0045F79F
:0046056C 83C404                  add esp, 00000004
:0046056F 8945FC                  mov dword ptr [ebp-04], eax
:00460572 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:00460576 7505                    jne 0046057D
:00460578 83C8FF                  or eax, FFFFFFFF
:0046057B EB3A                    jmp 004605B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460576(C)
|
:0046057D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00460580 51                      push ecx
:00460581 E819F2FFFF              call 0045F79F
:00460586 83C404                  add esp, 00000004
:00460589 8945F8                  mov dword ptr [ebp-08], eax
:0046058C 837DF8FF                cmp dword ptr [ebp-08], FFFFFFFF
:00460590 7505                    jne 00460597
:00460592 83C8FF                  or eax, FFFFFFFF
:00460595 EB20                    jmp 004605B7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460590(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00460597 6A04                    push 00000004
:00460599 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046059C E81F68FDFF              call 00436DC0
:004605A1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004605A4 E8371AFEFF              call 00441FE0
:004605A9 50                      push eax
:004605AA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004605AD E86E69FDFF              call 00436F20
:004605B2 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046057B(U), :00460595(U)
|
:004605B7 8BE5                    mov esp, ebp
:004605B9 5D                      pop ebp
:004605BA C20800                  ret 0008


:004605BD 55                      push ebp
:004605BE 8BEC                    mov ebp, esp
:004605C0 83EC24                  sub esp, 00000024
:004605C3 894DE4                  mov dword ptr [ebp-1C], ecx
:004605C6 8B4508                  mov eax, dword ptr [ebp+08]
:004605C9 25FF000000              and eax, 000000FF
:004605CE 85C0                    test eax, eax
:004605D0 7510                    jne 004605E2
:004605D2 C745F400000000          mov [ebp-0C], 00000000
:004605D9 C745FC1E000000          mov [ebp-04], 0000001E
:004605E0 EB0E                    jmp 004605F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004605D0(C)
|
:004605E2 C745F41E000000          mov [ebp-0C], 0000001E
:004605E9 C745FC5A000000          mov [ebp-04], 0000005A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004605E0(U)
|
:004605F0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004605F3 894DF8                  mov dword ptr [ebp-08], ecx
:004605F6 EB09                    jmp 00460601

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460725(U)
|
:004605F8 8B55F8                  mov edx, dword ptr [ebp-08]
:004605FB 83C201                  add edx, 00000001
:004605FE 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004605F6(U)
|
:00460601 8B45F8                  mov eax, dword ptr [ebp-08]
:00460604 3B45FC                  cmp eax, dword ptr [ebp-04]
:00460607 0F831D010000            jnb 0046072A
:0046060D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460610 6BC924                  imul ecx, 00000024
:00460613 81C1B83B4B00            add ecx, 004B3BB8
:00460619 E8B2BAFFFF              call 0045C0D0
:0046061E 25FF000000              and eax, 000000FF
:00460623 83F802                  cmp eax, 00000002
:00460626 0F85F9000000            jne 00460725
:0046062C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046062F 81E1FF000000            and ecx, 000000FF
:00460635 85C9                    test ecx, ecx
:00460637 744F                    je 00460688
:00460639 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046063C 6BC924                  imul ecx, 00000024
:0046063F 81C1B83B4B00            add ecx, 004B3BB8
:00460645 E8962CFAFF              call 004032E0
:0046064A 8945F0                  mov dword ptr [ebp-10], eax
:0046064D 8B55F0                  mov edx, dword ptr [ebp-10]
:00460650 D1EA                    shr edx, 1
:00460652 83FA01                  cmp edx, 00000001
:00460655 7E0A                    jle 00460661
:00460657 8B45F0                  mov eax, dword ptr [ebp-10]
:0046065A D1E8                    shr eax, 1
:0046065C 8945E0                  mov dword ptr [ebp-20], eax
:0046065F EB07                    jmp 00460668

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460655(C)
|
:00460661 C745E001000000          mov [ebp-20], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046065F(U)
|
:00460668 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0046066B 894DF0                  mov dword ptr [ebp-10], ecx
:0046066E 8B55F0                  mov edx, dword ptr [ebp-10]
:00460671 52                      push edx
:00460672 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460675 6BC924                  imul ecx, 00000024
:00460678 81C1B83B4B00            add ecx, 004B3BB8
:0046067E E8922BFDFF              call 00433215
:00460683 E99D000000              jmp 00460725

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460637(C)
|
:00460688 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046068B 6BC924                  imul ecx, 00000024
:0046068E 81C1B83B4B00            add ecx, 004B3BB8
:00460694 E84763FDFF              call 004369E0
:00460699 8BC8                    mov ecx, eax
:0046069B 6BC950                  imul ecx, 00000050
:0046069E 81C1787F4900            add ecx, 00497F78
:004606A4 E8F7F7FAFF              call 0040FEA0
:004606A9 8845E8                  mov byte ptr [ebp-18], al
:004606AC 8B45E8                  mov eax, dword ptr [ebp-18]
:004606AF 25FF000000              and eax, 000000FF
:004606B4 99                      cdq
:004606B5 2BC2                    sub eax, edx
:004606B7 D1F8                    sar eax, 1
:004606B9 8845EC                  mov byte ptr [ebp-14], al
:004606BC 8B45EC                  mov eax, dword ptr [ebp-14]
:004606BF 25FF000000              and eax, 000000FF
:004606C4 83F801                  cmp eax, 00000001
:004606C7 7D09                    jge 004606D2
:004606C9 C745DC01000000          mov [ebp-24], 00000001
:004606D0 EB0C                    jmp 004606DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004606C7(C)
|
:004606D2 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004606D5 81E1FF000000            and ecx, 000000FF
:004606DB 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004606D0(U)
|
:004606DE 8A55DC                  mov dl, byte ptr [ebp-24]
:004606E1 8855EC                  mov byte ptr [ebp-14], dl
:004606E4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004606E7 81E1FF000000            and ecx, 000000FF
:004606ED 8B45E8                  mov eax, dword ptr [ebp-18]
:004606F0 25FF000000              and eax, 000000FF
:004606F5 99                      cdq
:004606F6 2BC2                    sub eax, edx
:004606F8 D1F8                    sar eax, 1
:004606FA 03C8                    add ecx, eax
:004606FC 51                      push ecx
:004606FD E8AE7C0100              call 004783B0
:00460702 83C404                  add esp, 00000004
:00460705 8B55EC                  mov edx, dword ptr [ebp-14]
:00460708 81E2FF000000            and edx, 000000FF
:0046070E 3BC2                    cmp eax, edx
:00460710 7713                    ja 00460725
:00460712 6A10                    push 00000010
:00460714 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460717 6BC924                  imul ecx, 00000024
:0046071A 81C1B83B4B00            add ecx, 004B3BB8
:00460720 E89B18FEFF              call 00441FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460626(C), :00460683(U), :00460710(C)
|
:00460725 E9CEFEFFFF              jmp 004605F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460607(C)
|
:0046072A 8BE5                    mov esp, ebp
:0046072C 5D                      pop ebp
:0046072D C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040B667   , :00460879   
|
:00460730 55                      push ebp
:00460731 8BEC                    mov ebp, esp
:00460733 83EC08                  sub esp, 00000008
:00460736 894DF8                  mov dword ptr [ebp-08], ecx
:00460739 8B4508                  mov eax, dword ptr [ebp+08]
:0046073C 50                      push eax
:0046073D E85DF0FFFF              call 0045F79F
:00460742 83C404                  add esp, 00000004
:00460745 8945FC                  mov dword ptr [ebp-04], eax
:00460748 837DFCFF                cmp dword ptr [ebp-04], FFFFFFFF
:0046074C 7505                    jne 00460753
:0046074E 83C8FF                  or eax, FFFFFFFF
:00460751 EB21                    jmp 00460774

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046074C(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00460753 6A04                    push 00000004
:00460755 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460758 E87361FDFF              call 004368D0
:0046075D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460760 E8E340FDFF              call 00434848

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00460765 6A04                    push 00000004
:00460767 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046076A E85166FDFF              call 00436DC0
:0046076F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460751(U)
|
:00460774 8BE5                    mov esp, ebp
:00460776 5D                      pop ebp
:00460777 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00409B69   , :0040B69E   
|
:0046077A 55                      push ebp
:0046077B 8BEC                    mov ebp, esp
:0046077D 83EC14                  sub esp, 00000014
:00460780 894DEC                  mov dword ptr [ebp-14], ecx
:00460783 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00460786 E8654FFAFF              call 004056F0
:0046078B 8A450C                  mov al, byte ptr [ebp+0C]
:0046078E 8845F4                  mov byte ptr [ebp-0C], al
:00460791 EB09                    jmp 0046079C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460883(U)
|
:00460793 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00460796 80C101                  add cl, 01
:00460799 884DF4                  mov byte ptr [ebp-0C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460791(U)
|
:0046079C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046079F 81E2FF000000            and edx, 000000FF
:004607A5 8B4514                  mov eax, dword ptr [ebp+14]
:004607A8 25FF000000              and eax, 000000FF
:004607AD 3BD0                    cmp edx, eax
:004607AF 0F8FD3000000            jg 00460888
:004607B5 8A4D08                  mov cl, byte ptr [ebp+08]
:004607B8 884DF8                  mov byte ptr [ebp-08], cl
:004607BB EB09                    jmp 004607C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046087E(U)
|
:004607BD 8A55F8                  mov dl, byte ptr [ebp-08]
:004607C0 80C201                  add dl, 01
:004607C3 8855F8                  mov byte ptr [ebp-08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004607BB(U)
|
:004607C6 8B45F8                  mov eax, dword ptr [ebp-08]
:004607C9 25FF000000              and eax, 000000FF
:004607CE 8B4D10                  mov ecx, dword ptr [ebp+10]
:004607D1 81E1FF000000            and ecx, 000000FF
:004607D7 3BC1                    cmp eax, ecx
:004607D9 0F8FA4000000            jg 00460883
:004607DF 8A55F8                  mov dl, byte ptr [ebp-08]
:004607E2 8855F0                  mov byte ptr [ebp-10], dl
:004607E5 8A45F4                  mov al, byte ptr [ebp-0C]
:004607E8 8845F1                  mov byte ptr [ebp-0F], al
:004607EB 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004607EE 51                      push ecx
:004607EF E8E8EFFEFF              call 0044F7DC
:004607F4 83C404                  add esp, 00000004
:004607F7 8845FC                  mov byte ptr [ebp-04], al
:004607FA 8B55FC                  mov edx, dword ptr [ebp-04]
:004607FD 81E2FF000000            and edx, 000000FF
:00460803 81FAFF000000            cmp edx, 000000FF
:00460809 7473                    je 0046087E
:0046080B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046080E 81E1FF000000            and ecx, 000000FF
:00460814 6BC924                  imul ecx, 00000024
:00460817 81C1B83B4B00            add ecx, 004B3BB8
:0046081D E8AEB8FFFF              call 0045C0D0
:00460822 25FF000000              and eax, 000000FF
:00460827 83F802                  cmp eax, 00000002
:0046082A 7552                    jne 0046087E
:0046082C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046082F 81E1FF000000            and ecx, 000000FF
:00460835 6BC924                  imul ecx, 00000024
:00460838 81C1B83B4B00            add ecx, 004B3BB8
:0046083E E8CDC0FAFF              call 0040C910
:00460843 8B4D18                  mov ecx, dword ptr [ebp+18]
:00460846 81E1FF000000            and ecx, 000000FF
:0046084C 3BC1                    cmp eax, ecx
:0046084E 750E                    jne 0046085E
:00460850 8B5518                  mov edx, dword ptr [ebp+18]
:00460853 81E2FF000000            and edx, 000000FF
:00460859 83FA02                  cmp edx, 00000002
:0046085C 7520                    jne 0046087E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046084E(C)
|
:0046085E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460861 81E1FF000000            and ecx, 000000FF
:00460867 6BC924                  imul ecx, 00000024
:0046086A 81C1B83B4B00            add ecx, 004B3BB8
:00460870 E86B61FDFF              call 004369E0
:00460875 50                      push eax
:00460876 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00460879 E8B2FEFFFF              call 00460730

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460809(C), :0046082A(C), :0046085C(C)
|
:0046087E E93AFFFFFF              jmp 004607BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004607D9(C)
|
:00460883 E90BFFFFFF              jmp 00460793

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004607AF(C)
|
:00460888 8BE5                    mov esp, ebp
:0046088A 5D                      pop ebp
:0046088B C21400                  ret 0014



* Referenced by a CALL at Addresses:
|:0040B446   , :00433AD3   , :00433BA1   , :00460C1F   
|
:0046088E 55                      push ebp
:0046088F 8BEC                    mov ebp, esp
:00460891 83EC1C                  sub esp, 0000001C
:00460894 894DF0                  mov dword ptr [ebp-10], ecx
:00460897 817D0820030000          cmp dword ptr [ebp+08], 00000320
:0046089E 7605                    jbe 004608A5
:004608A0 E932020000              jmp 00460AD7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046089E(C)
|
:004608A5 8B4508                  mov eax, dword ptr [ebp+08]
:004608A8 50                      push eax
:004608A9 E82117FDFF              call 00431FCF
:004608AE 83C404                  add esp, 00000004
:004608B1 8845FC                  mov byte ptr [ebp-04], al
:004608B4 C745F800000000          mov [ebp-08], 00000000
:004608BB C745F401000000          mov [ebp-0C], 00000001
:004608C2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004608C5 81E1FF000000            and ecx, 000000FF
:004608CB 81F9FF000000            cmp ecx, 000000FF
:004608D1 7421                    je 004608F4
:004608D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004608D6 81E1FF000000            and ecx, 000000FF
:004608DC 6BC924                  imul ecx, 00000024
:004608DF 81C1B83B4B00            add ecx, 004B3BB8
:004608E5 E8E6B7FFFF              call 0045C0D0
:004608EA 25FF000000              and eax, 000000FF
:004608EF 83F802                  cmp eax, 00000002
:004608F2 7405                    je 004608F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004608D1(C)
|
:004608F4 E9DE010000              jmp 00460AD7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004608F2(C)
|
:004608F9 837D1400                cmp dword ptr [ebp+14], 00000000
:004608FD 7416                    je 00460915
:004608FF 6A00                    push 00000000
:00460901 8A5510                  mov dl, byte ptr [ebp+10]
:00460904 52                      push edx
:00460905 8A450C                  mov al, byte ptr [ebp+0C]
:00460908 50                      push eax
:00460909 8A4DFC                  mov cl, byte ptr [ebp-04]
:0046090C 51                      push ecx
:0046090D E88C18FDFF              call 0043219E
:00460912 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004608FD(C)
|
:00460915 8B550C                  mov edx, dword ptr [ebp+0C]
:00460918 81E2FF000000            and edx, 000000FF
:0046091E 8955EC                  mov dword ptr [ebp-14], edx
:00460921 837DEC04                cmp dword ptr [ebp-14], 00000004
:00460925 0F878C010000            ja 00460AB7
:0046092B 8B45EC                  mov eax, dword ptr [ebp-14]
:0046092E FF2485DD0A4600          jmp dword ptr [4*eax+00460ADD]
:00460935 8B4D10                  mov ecx, dword ptr [ebp+10]
:00460938 81E1FF000000            and ecx, 000000FF
:0046093E 83C940                  or ecx, 00000040
:00460941 51                      push ecx
:00460942 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460945 81E1FF000000            and ecx, 000000FF
:0046094B 6BC924                  imul ecx, 00000024
:0046094E 81C1B83B4B00            add ecx, 004B3BB8
:00460954 E85762FDFF              call 00436BB0
:00460959 E959010000              jmp 00460AB7
:0046095E 8B5510                  mov edx, dword ptr [ebp+10]
:00460961 81E2FF000000            and edx, 000000FF
:00460967 83CA40                  or edx, 00000040
:0046096A 52                      push edx
:0046096B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046096E 81E1FF000000            and ecx, 000000FF
:00460974 6BC924                  imul ecx, 00000024
:00460977 81C1B83B4B00            add ecx, 004B3BB8
:0046097D E86E62FDFF              call 00436BF0
:00460982 E930010000              jmp 00460AB7
:00460987 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046098A 81E1FF000000            and ecx, 000000FF
:00460990 6BC924                  imul ecx, 00000024
:00460993 81C1B83B4B00            add ecx, 004B3BB8
:00460999 E84229FAFF              call 004032E0
:0046099E 8B4D10                  mov ecx, dword ptr [ebp+10]
:004609A1 81E1FF000000            and ecx, 000000FF
:004609A7 3BC1                    cmp eax, ecx
:004609A9 7D1C                    jge 004609C7
:004609AB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004609AE 81E1FF000000            and ecx, 000000FF
:004609B4 6BC924                  imul ecx, 00000024
:004609B7 81C1B83B4B00            add ecx, 004B3BB8
:004609BD E81E29FAFF              call 004032E0
:004609C2 8945E8                  mov dword ptr [ebp-18], eax
:004609C5 EB0C                    jmp 004609D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004609A9(C)
|
:004609C7 8B5510                  mov edx, dword ptr [ebp+10]
:004609CA 81E2FF000000            and edx, 000000FF
:004609D0 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004609C5(U)
|
:004609D3 8B45E8                  mov eax, dword ptr [ebp-18]
:004609D6 8945F8                  mov dword ptr [ebp-08], eax
:004609D9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004609DC 81E1FF000000            and ecx, 000000FF
:004609E2 6BC924                  imul ecx, 00000024
:004609E5 81C1B83B4B00            add ecx, 004B3BB8
:004609EB E8F028FAFF              call 004032E0
:004609F0 2B45F8                  sub eax, dword ptr [ebp-08]
:004609F3 83F801                  cmp eax, 00000001
:004609F6 761F                    jbe 00460A17
:004609F8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004609FB 81E1FF000000            and ecx, 000000FF
:00460A01 6BC924                  imul ecx, 00000024
:00460A04 81C1B83B4B00            add ecx, 004B3BB8
:00460A0A E8D128FAFF              call 004032E0
:00460A0F 2B45F8                  sub eax, dword ptr [ebp-08]
:00460A12 8945E4                  mov dword ptr [ebp-1C], eax
:00460A15 EB07                    jmp 00460A1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004609F6(C)
|
:00460A17 C745E401000000          mov [ebp-1C], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460A15(U)
|
:00460A1E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460A21 894DF4                  mov dword ptr [ebp-0C], ecx
:00460A24 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460A27 52                      push edx
:00460A28 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460A2B 81E1FF000000            and ecx, 000000FF
:00460A31 6BC924                  imul ecx, 00000024
:00460A34 81C1B83B4B00            add ecx, 004B3BB8
:00460A3A E8D627FDFF              call 00433215
:00460A3F EB76                    jmp 00460AB7
:00460A41 8B4510                  mov eax, dword ptr [ebp+10]
:00460A44 25FF000000              and eax, 000000FF
:00460A49 2580000000              and eax, 00000080
:00460A4E 85C0                    test eax, eax
:00460A50 741D                    je 00460A6F
:00460A52 8A4D10                  mov cl, byte ptr [ebp+10]
:00460A55 51                      push ecx
:00460A56 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460A59 81E1FF000000            and ecx, 000000FF
:00460A5F 6BC924                  imul ecx, 00000024
:00460A62 81C1B83B4B00            add ecx, 004B3BB8
:00460A68 E82362FDFF              call 00436C90
:00460A6D EB24                    jmp 00460A93

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460A50(C)
|
:00460A6F 8B5510                  mov edx, dword ptr [ebp+10]
:00460A72 81E2FF000000            and edx, 000000FF
:00460A78 83CA40                  or edx, 00000040
:00460A7B 52                      push edx
:00460A7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460A7F 81E1FF000000            and ecx, 000000FF
:00460A85 6BC924                  imul ecx, 00000024
:00460A88 81C1B83B4B00            add ecx, 004B3BB8
:00460A8E E82D15FEFF              call 00441FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460A6D(U)
|
:00460A93 EB22                    jmp 00460AB7
:00460A95 8B4510                  mov eax, dword ptr [ebp+10]
:00460A98 25FF000000              and eax, 000000FF
:00460A9D 0C40                    or al, 40
:00460A9F 50                      push eax
:00460AA0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460AA3 81E1FF000000            and ecx, 000000FF
:00460AA9 6BC924                  imul ecx, 00000024
:00460AAC 81C1B83B4B00            add ecx, 004B3BB8
:00460AB2 E87961FDFF              call 00436C30

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460925(C), :00460959(U), :00460982(U), :00460A3F(U), :00460A93(U)
|
:00460AB7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460ABA 81E1FF000000            and ecx, 000000FF
:00460AC0 6BC924                  imul ecx, 00000024
:00460AC3 81C1B83B4B00            add ecx, 004B3BB8
:00460AC9 E8125FFDFF              call 004369E0
:00460ACE 50                      push eax
:00460ACF E848C00000              call 0046CB1C
:00460AD4 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004608A0(U), :004608F4(U)
|
:00460AD7 8BE5                    mov esp, ebp
:00460AD9 5D                      pop ebp
:00460ADA C21000                  ret 0010



:00460ADD 35094600                DWORD 00460935
:00460AE1 5E094600                DWORD 0046095E
:00460AE5 87094600                DWORD 00460987
:00460AE9 410A4600                DWORD 00460A41
:00460AED 950A4600                DWORD 00460A95



* Referenced by a CALL at Address:
|:0040B4C2   
|
:00460AF1 55                      push ebp
:00460AF2 8BEC                    mov ebp, esp
:00460AF4 83EC18                  sub esp, 00000018
:00460AF7 894DE8                  mov dword ptr [ebp-18], ecx
:00460AFA 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00460AFD E8EE4BFAFF              call 004056F0
:00460B02 8A450C                  mov al, byte ptr [ebp+0C]
:00460B05 8845F4                  mov byte ptr [ebp-0C], al
:00460B08 EB09                    jmp 00460B13

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460C29(U)
|
:00460B0A 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00460B0D 80C101                  add cl, 01
:00460B10 884DF4                  mov byte ptr [ebp-0C], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460B08(U)
|
:00460B13 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460B16 81E2FF000000            and edx, 000000FF
:00460B1C 8B4514                  mov eax, dword ptr [ebp+14]
:00460B1F 25FF000000              and eax, 000000FF
:00460B24 3BD0                    cmp edx, eax
:00460B26 0F8F02010000            jg 00460C2E
:00460B2C 8A4D08                  mov cl, byte ptr [ebp+08]
:00460B2F 884DF8                  mov byte ptr [ebp-08], cl
:00460B32 EB09                    jmp 00460B3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460C24(U)
|
:00460B34 8A55F8                  mov dl, byte ptr [ebp-08]
:00460B37 80C201                  add dl, 01
:00460B3A 8855F8                  mov byte ptr [ebp-08], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460B32(U)
|
:00460B3D 8B45F8                  mov eax, dword ptr [ebp-08]
:00460B40 25FF000000              and eax, 000000FF
:00460B45 8B4D10                  mov ecx, dword ptr [ebp+10]
:00460B48 81E1FF000000            and ecx, 000000FF
:00460B4E 3BC1                    cmp eax, ecx
:00460B50 0F8FD3000000            jg 00460C29
:00460B56 8A55F8                  mov dl, byte ptr [ebp-08]
:00460B59 8855F0                  mov byte ptr [ebp-10], dl
:00460B5C 8A45F4                  mov al, byte ptr [ebp-0C]
:00460B5F 8845F1                  mov byte ptr [ebp-0F], al
:00460B62 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00460B65 51                      push ecx
:00460B66 E871ECFEFF              call 0044F7DC
:00460B6B 83C404                  add esp, 00000004
:00460B6E 8845FC                  mov byte ptr [ebp-04], al
:00460B71 8B55FC                  mov edx, dword ptr [ebp-04]
:00460B74 81E2FF000000            and edx, 000000FF
:00460B7A 81FAFF000000            cmp edx, 000000FF
:00460B80 0F849E000000            je 00460C24
:00460B86 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460B89 81E1FF000000            and ecx, 000000FF
:00460B8F 6BC924                  imul ecx, 00000024
:00460B92 81C1B83B4B00            add ecx, 004B3BB8
:00460B98 E833B5FFFF              call 0045C0D0
:00460B9D 25FF000000              and eax, 000000FF
:00460BA2 83F802                  cmp eax, 00000002
:00460BA5 757D                    jne 00460C24
:00460BA7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460BAA 81E1FF000000            and ecx, 000000FF
:00460BB0 6BC924                  imul ecx, 00000024
:00460BB3 81C1B83B4B00            add ecx, 004B3BB8
:00460BB9 E8935DFDFF              call 00436951
:00460BBE 85C0                    test eax, eax
:00460BC0 7462                    je 00460C24
:00460BC2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460BC5 81E1FF000000            and ecx, 000000FF
:00460BCB 6BC924                  imul ecx, 00000024
:00460BCE 81C1B83B4B00            add ecx, 004B3BB8
:00460BD4 E837BDFAFF              call 0040C910
:00460BD9 8B4D18                  mov ecx, dword ptr [ebp+18]
:00460BDC 81E1FF000000            and ecx, 000000FF
:00460BE2 3BC1                    cmp eax, ecx
:00460BE4 750E                    jne 00460BF4
:00460BE6 8B5518                  mov edx, dword ptr [ebp+18]
:00460BE9 81E2FF000000            and edx, 000000FF
:00460BEF 83FA02                  cmp edx, 00000002
:00460BF2 7530                    jne 00460C24

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460BE4(C)
|
:00460BF4 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460BF7 81E1FF000000            and ecx, 000000FF
:00460BFD 6BC924                  imul ecx, 00000024
:00460C00 81C1B83B4B00            add ecx, 004B3BB8
:00460C06 E8D55DFDFF              call 004369E0
:00460C0B 8945EC                  mov dword ptr [ebp-14], eax
:00460C0E 6A01                    push 00000001
:00460C10 8A4520                  mov al, byte ptr [ebp+20]
:00460C13 50                      push eax
:00460C14 8A4D1C                  mov cl, byte ptr [ebp+1C]
:00460C17 51                      push ecx
:00460C18 8B55EC                  mov edx, dword ptr [ebp-14]
:00460C1B 52                      push edx
:00460C1C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00460C1F E86AFCFFFF              call 0046088E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460B80(C), :00460BA5(C), :00460BC0(C), :00460BF2(C)
|
:00460C24 E90BFFFFFF              jmp 00460B34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460B50(C)
|
:00460C29 E9DCFEFFFF              jmp 00460B0A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460B26(C)
|
:00460C2E 8BE5                    mov esp, ebp
:00460C30 5D                      pop ebp
:00460C31 C21C00                  ret 001C


:00460C34 55                      push ebp
:00460C35 8BEC                    mov ebp, esp
:00460C37 51                      push ecx
:00460C38 894DFC                  mov dword ptr [ebp-04], ecx
:00460C3B 8B4508                  mov eax, dword ptr [ebp+08]
:00460C3E 50                      push eax
:00460C3F B9784E4B00              mov ecx, 004B4E78
:00460C44 E867050000              call 004611B0
:00460C49 8BE5                    mov esp, ebp
:00460C4B 5D                      pop ebp
:00460C4C C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00439224   , :0045D7C1   , :0045E460   , :0045E50A   
|
:00460C4F 55                      push ebp
:00460C50 8BEC                    mov ebp, esp
:00460C52 83EC28                  sub esp, 00000028
:00460C55 894DD8                  mov dword ptr [ebp-28], ecx
:00460C58 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00460C5B E8904AFAFF              call 004056F0
:00460C60 6A40                    push 00000040
:00460C62 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460C65 81E1FF000000            and ecx, 000000FF
:00460C6B 6BC924                  imul ecx, 00000024
:00460C6E 81C1B83B4B00            add ecx, 004B3BB8
:00460C74 E87761FDFF              call 00436DF0
:00460C79 85C0                    test eax, eax
:00460C7B 7414                    je 00460C91
:00460C7D B9784E4B00              mov ecx, 004B4E78
:00460C82 E8B962FDFF              call 00436F40
:00460C87 25FF000000              and eax, 000000FF
:00460C8C 83F802                  cmp eax, 00000002
:00460C8F 7505                    jne 00460C96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460C7B(C)
|
:00460C91 E9DF010000              jmp 00460E75

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460C8F(C)
|
:00460C96 B9784E4B00              mov ecx, 004B4E78
:00460C9B E8A062FDFF              call 00436F40
:00460CA0 25FF000000              and eax, 000000FF
:00460CA5 83F803                  cmp eax, 00000003
:00460CA8 7505                    jne 00460CAF
:00460CAA E9C6010000              jmp 00460E75

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460CA8(C)
|
:00460CAF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460CB2 81E1FF000000            and ecx, 000000FF
:00460CB8 6BC924                  imul ecx, 00000024
:00460CBB 81C1B83B4B00            add ecx, 004B3BB8
:00460CC1 E80AB4FFFF              call 0045C0D0
:00460CC6 25FF000000              and eax, 000000FF
:00460CCB 83F802                  cmp eax, 00000002
:00460CCE 7405                    je 00460CD5
:00460CD0 E9A0010000              jmp 00460E75

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460CCE(C)
|
:00460CD5 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460CD8 81E1FF000000            and ecx, 000000FF
:00460CDE 6BC924                  imul ecx, 00000024
:00460CE1 81C1B83B4B00            add ecx, 004B3BB8
:00460CE7 E8F45CFDFF              call 004369E0
:00460CEC 8945FC                  mov dword ptr [ebp-04], eax
:00460CEF 8B45FC                  mov eax, dword ptr [ebp-04]
:00460CF2 8945F0                  mov dword ptr [ebp-10], eax
:00460CF5 C645F800                mov [ebp-08], 00
:00460CF9 EB09                    jmp 00460D04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460E06(U)
|
:00460CFB 8A4DF8                  mov cl, byte ptr [ebp-08]
:00460CFE 80C101                  add cl, 01
:00460D01 884DF8                  mov byte ptr [ebp-08], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460CF9(U)
|
:00460D04 8B55F8                  mov edx, dword ptr [ebp-08]
:00460D07 81E2FF000000            and edx, 000000FF
:00460D0D 83FA04                  cmp edx, 00000004
:00460D10 0F8DF5000000            jnl 00460E0B
:00460D16 8A45F8                  mov al, byte ptr [ebp-08]
:00460D19 50                      push eax
:00460D1A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460D1D 81E1FF000000            and ecx, 000000FF
:00460D23 6BC924                  imul ecx, 00000024
:00460D26 81C1B83B4B00            add ecx, 004B3BB8
:00460D2C E80F0FFDFF              call 00431C40
:00460D31 50                      push eax
:00460D32 E8BAEBFEFF              call 0044F8F1
:00460D37 83C408                  add esp, 00000008
:00460D3A 50                      push eax
:00460D3B 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00460D3E E85D5DFDFF              call 00436AA0
:00460D43 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00460D46 81E1FF000000            and ecx, 000000FF
:00460D4C 81F9FF000000            cmp ecx, 000000FF
:00460D52 0F84AE000000            je 00460E06
:00460D58 8D55E0                  lea edx, dword ptr [ebp-20]
:00460D5B 52                      push edx
:00460D5C E87BEAFEFF              call 0044F7DC
:00460D61 83C404                  add esp, 00000004
:00460D64 8845DC                  mov byte ptr [ebp-24], al
:00460D67 8B45DC                  mov eax, dword ptr [ebp-24]
:00460D6A 25FF000000              and eax, 000000FF
:00460D6F 3DFF000000              cmp eax, 000000FF
:00460D74 0F848C000000            je 00460E06
:00460D7A 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00460D7D 81E1FF000000            and ecx, 000000FF
:00460D83 6BC924                  imul ecx, 00000024
:00460D86 81C1B83B4B00            add ecx, 004B3BB8
:00460D8C E83FB3FFFF              call 0045C0D0
:00460D91 25FF000000              and eax, 000000FF
:00460D96 83F802                  cmp eax, 00000002
:00460D99 756B                    jne 00460E06

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00460D9B 6A02                    push 00000002
:00460D9D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460DA0 81E1FF000000            and ecx, 000000FF
:00460DA6 6BC924                  imul ecx, 00000024
:00460DA9 81C1B83B4B00            add ecx, 004B3BB8
:00460DAF E83C60FDFF              call 00436DF0
:00460DB4 85C0                    test eax, eax
:00460DB6 754E                    jne 00460E06
:00460DB8 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00460DBB 81E1FF000000            and ecx, 000000FF
:00460DC1 6BC924                  imul ecx, 00000024
:00460DC4 81C1B83B4B00            add ecx, 004B3BB8
:00460DCA E8115CFDFF              call 004369E0
:00460DCF 8945F4                  mov dword ptr [ebp-0C], eax
:00460DD2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00460DD5 51                      push ecx
:00460DD6 8B55F0                  mov edx, dword ptr [ebp-10]
:00460DD9 52                      push edx
:00460DDA B9806D4800              mov ecx, 00486D80
:00460DDF E85C020000              call 00461040
:00460DE4 6A00                    push 00000000
:00460DE6 B9806D4800              mov ecx, 00486D80
:00460DEB E867B3FAFF              call 0040C157
:00460DF0 B9784E4B00              mov ecx, 004B4E78
:00460DF5 E84661FDFF              call 00436F40
:00460DFA 25FF000000              and eax, 000000FF
:00460DFF 83F802                  cmp eax, 00000002
:00460E02 7502                    jne 00460E06
:00460E04 EB6F                    jmp 00460E75

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460D52(C), :00460D74(C), :00460D99(C), :00460DB6(C), :00460E02(C)
|
:00460E06 E9F0FEFFFF              jmp 00460CFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460D10(C)
|
:00460E0B 8B45FC                  mov eax, dword ptr [ebp-04]
:00460E0E 8945E4                  mov dword ptr [ebp-1C], eax
:00460E11 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460E14 81E1FF000000            and ecx, 000000FF
:00460E1A 6BC924                  imul ecx, 00000024
:00460E1D 81C1B83B4B00            add ecx, 004B3BB8
:00460E23 E8180EFDFF              call 00431C40
:00460E28 50                      push eax
:00460E29 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00460E2C E86F5CFDFF              call 00436AA0
:00460E31 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00460E34 81E1FF000000            and ecx, 000000FF
:00460E3A 894DE8                  mov dword ptr [ebp-18], ecx
:00460E3D 8B55E1                  mov edx, dword ptr [ebp-1F]
:00460E40 81E2FF000000            and edx, 000000FF
:00460E46 8955EC                  mov dword ptr [ebp-14], edx
:00460E49 83EC0C                  sub esp, 0000000C
:00460E4C 8BC4                    mov eax, esp
:00460E4E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460E51 8908                    mov dword ptr [eax], ecx
:00460E53 8B55E8                  mov edx, dword ptr [ebp-18]
:00460E56 895004                  mov dword ptr [eax+04], edx
:00460E59 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00460E5C 894808                  mov dword ptr [eax+08], ecx
:00460E5F B9806D4800              mov ecx, 00486D80
:00460E64 E8F7010000              call 00461060
:00460E69 6A00                    push 00000000
:00460E6B B9806D4800              mov ecx, 00486D80
:00460E70 E8E2B2FAFF              call 0040C157

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460C91(U), :00460CAA(U), :00460CD0(U), :00460E04(U)
|
:00460E75 8BE5                    mov esp, ebp
:00460E77 5D                      pop ebp
:00460E78 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00408936   
|
:00460E7B 55                      push ebp
:00460E7C 8BEC                    mov ebp, esp
:00460E7E 83EC28                  sub esp, 00000028
:00460E81 894DF0                  mov dword ptr [ebp-10], ecx
:00460E84 C745FC00000000          mov [ebp-04], 00000000
:00460E8B C745F400000000          mov [ebp-0C], 00000000
:00460E92 817D0820030000          cmp dword ptr [ebp+08], 00000320
:00460E99 7205                    jb 00460EA0
:00460E9B E98D010000              jmp 0046102D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460E99(C)
|
:00460EA0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460EA3 6BC950                  imul ecx, 00000050
:00460EA6 81C1787F4900            add ecx, 00497F78
:00460EAC E844A30000              call 0046B1F5
:00460EB1 8845F8                  mov byte ptr [ebp-08], al
:00460EB4 8B45F8                  mov eax, dword ptr [ebp-08]
:00460EB7 25FF000000              and eax, 000000FF
:00460EBC 3DFF000000              cmp eax, 000000FF
:00460EC1 7505                    jne 00460EC8
:00460EC3 E965010000              jmp 0046102D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460EC1(C)
|
:00460EC8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00460ECB 81E1FF000000            and ecx, 000000FF
:00460ED1 83F90F                  cmp ecx, 0000000F
:00460ED4 7530                    jne 00460F06
:00460ED6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460ED9 81E1FF000000            and ecx, 000000FF
:00460EDF 6BC924                  imul ecx, 00000024
:00460EE2 81C1B83B4B00            add ecx, 004B3BB8
:00460EE8 E8F323FAFF              call 004032E0
:00460EED 8945FC                  mov dword ptr [ebp-04], eax
:00460EF0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460EF3 6BC950                  imul ecx, 00000050
:00460EF6 81C1787F4900            add ecx, 00497F78
:00460EFC E8E90EFAFF              call 00401DEA
:00460F01 8945F4                  mov dword ptr [ebp-0C], eax
:00460F04 EB2E                    jmp 00460F34

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460ED4(C)
|
:00460F06 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460F09 81E1FF000000            and ecx, 000000FF
:00460F0F 6BC924                  imul ecx, 00000024
:00460F12 81C1B83B4B00            add ecx, 004B3BB8
:00460F18 E8E323FAFF              call 00403300
:00460F1D 8945FC                  mov dword ptr [ebp-04], eax
:00460F20 8B4D08                  mov ecx, dword ptr [ebp+08]
:00460F23 6BC950                  imul ecx, 00000050
:00460F26 81C1787F4900            add ecx, 00497F78
:00460F2C E8EA0EFAFF              call 00401E1B
:00460F31 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460F04(U)
|
:00460F34 8A5510                  mov dl, byte ptr [ebp+10]
:00460F37 8855EC                  mov byte ptr [ebp-14], dl
:00460F3A 807DEC00                cmp byte ptr [ebp-14], 00
:00460F3E 7411                    je 00460F51
:00460F40 807DEC01                cmp byte ptr [ebp-14], 01
:00460F44 7429                    je 00460F6F
:00460F46 807DEC02                cmp byte ptr [ebp-14], 02
:00460F4A 7447                    je 00460F93
:00460F4C E996000000              jmp 00460FE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460F3E(C)
|
:00460F51 8B4514                  mov eax, dword ptr [ebp+14]
:00460F54 3B45F4                  cmp eax, dword ptr [ebp-0C]
:00460F57 7D08                    jge 00460F61
:00460F59 8B4D14                  mov ecx, dword ptr [ebp+14]
:00460F5C 894DE8                  mov dword ptr [ebp-18], ecx
:00460F5F EB06                    jmp 00460F67

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460F57(C)
|
:00460F61 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460F64 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460F5F(U)
|
:00460F67 8B45E8                  mov eax, dword ptr [ebp-18]
:00460F6A 8945FC                  mov dword ptr [ebp-04], eax
:00460F6D EB78                    jmp 00460FE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460F44(C)
|
:00460F6F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00460F72 034D14                  add ecx, dword ptr [ebp+14]
:00460F75 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:00460F78 7D0B                    jge 00460F85
:00460F7A 8B55FC                  mov edx, dword ptr [ebp-04]
:00460F7D 035514                  add edx, dword ptr [ebp+14]
:00460F80 8955E4                  mov dword ptr [ebp-1C], edx
:00460F83 EB06                    jmp 00460F8B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460F78(C)
|
:00460F85 8B45F4                  mov eax, dword ptr [ebp-0C]
:00460F88 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460F83(U)
|
:00460F8B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00460F8E 894DFC                  mov dword ptr [ebp-04], ecx
:00460F91 EB54                    jmp 00460FE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460F4A(C)
|
:00460F93 8B55FC                  mov edx, dword ptr [ebp-04]
:00460F96 2B5514                  sub edx, dword ptr [ebp+14]
:00460F99 85D2                    test edx, edx
:00460F9B 7E0B                    jle 00460FA8
:00460F9D 8B45FC                  mov eax, dword ptr [ebp-04]
:00460FA0 2B4514                  sub eax, dword ptr [ebp+14]
:00460FA3 8945E0                  mov dword ptr [ebp-20], eax
:00460FA6 EB07                    jmp 00460FAF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460F9B(C)
|
:00460FA8 C745E000000000          mov [ebp-20], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460FA6(U)
|
:00460FAF 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00460FB2 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:00460FB5 7D24                    jge 00460FDB
:00460FB7 8B55FC                  mov edx, dword ptr [ebp-04]
:00460FBA 2B5514                  sub edx, dword ptr [ebp+14]
:00460FBD 85D2                    test edx, edx
:00460FBF 7E0B                    jle 00460FCC
:00460FC1 8B45FC                  mov eax, dword ptr [ebp-04]
:00460FC4 2B4514                  sub eax, dword ptr [ebp+14]
:00460FC7 8945DC                  mov dword ptr [ebp-24], eax
:00460FCA EB07                    jmp 00460FD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460FBF(C)
|
:00460FCC C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460FCA(U)
|
:00460FD3 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00460FD6 894DD8                  mov dword ptr [ebp-28], ecx
:00460FD9 EB06                    jmp 00460FE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460FB5(C)
|
:00460FDB 8B55F4                  mov edx, dword ptr [ebp-0C]
:00460FDE 8955D8                  mov dword ptr [ebp-28], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460FD9(U)
|
:00460FE1 8B45D8                  mov eax, dword ptr [ebp-28]
:00460FE4 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460F4C(U), :00460F6D(U), :00460F91(U)
|
:00460FE7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00460FEA 81E1FF000000            and ecx, 000000FF
:00460FF0 83F90F                  cmp ecx, 0000000F
:00460FF3 751D                    jne 00461012
:00460FF5 8B55FC                  mov edx, dword ptr [ebp-04]
:00460FF8 52                      push edx
:00460FF9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00460FFC 81E1FF000000            and ecx, 000000FF
:00461002 6BC924                  imul ecx, 00000024
:00461005 81C1B83B4B00            add ecx, 004B3BB8
:0046100B E80522FDFF              call 00433215
:00461010 EB1B                    jmp 0046102D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00460FF3(C)
|
:00461012 8B45FC                  mov eax, dword ptr [ebp-04]
:00461015 50                      push eax
:00461016 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00461019 81E1FF000000            and ecx, 000000FF
:0046101F 6BC924                  imul ecx, 00000024
:00461022 81C1B83B4B00            add ecx, 004B3BB8
:00461028 E82922FDFF              call 00433256

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00460E9B(U), :00460EC3(U), :00461010(U)
|
:0046102D 8BE5                    mov esp, ebp
:0046102F 5D                      pop ebp
:00461030 C21000                  ret 0010


:00461033 CC                      int 03
:00461034 CC                      int 03
:00461035 CC                      int 03
:00461036 CC                      int 03
:00461037 CC                      int 03
:00461038 CC                      int 03
:00461039 CC                      int 03
:0046103A CC                      int 03
:0046103B CC                      int 03
:0046103C CC                      int 03
:0046103D CC                      int 03
:0046103E CC                      int 03
:0046103F CC                      int 03

* Referenced by a CALL at Address:
|:00460DDF   
|
:00461040 55                      push ebp
:00461041 8BEC                    mov ebp, esp
:00461043 51                      push ecx
:00461044 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00461047 6A08                    push 00000008
:00461049 8D4508                  lea eax, dword ptr [ebp+08]
:0046104C 50                      push eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046104D 6A02                    push 00000002
:0046104F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461052 E8EEBEFAFF              call 0040CF45
:00461057 8BE5                    mov esp, ebp
:00461059 5D                      pop ebp
:0046105A C20800                  ret 0008


:0046105D CC                      int 03
:0046105E CC                      int 03
:0046105F CC                      int 03

* Referenced by a CALL at Address:
|:00460E64   
|
:00461060 55                      push ebp
:00461061 8BEC                    mov ebp, esp
:00461063 51                      push ecx
:00461064 894DFC                  mov dword ptr [ebp-04], ecx
:00461067 6A0C                    push 0000000C
:00461069 8D4508                  lea eax, dword ptr [ebp+08]
:0046106C 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046106D 6A03                    push 00000003
:0046106F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461072 E8CEBEFAFF              call 0040CF45
:00461077 8BE5                    mov esp, ebp
:00461079 5D                      pop ebp
:0046107A C20C00                  ret 000C


:0046107D CC                      int 03
:0046107E CC                      int 03
:0046107F CC                      int 03

* Referenced by a CALL at Address:
|:004603E9   
|
:00461080 55                      push ebp
:00461081 8BEC                    mov ebp, esp
:00461083 83EC08                  sub esp, 00000008
:00461086 894DFC                  mov dword ptr [ebp-04], ecx
:00461089 8B45FC                  mov eax, dword ptr [ebp-04]
:0046108C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046108F 8B11                    mov edx, dword ptr [ecx]
:00461091 8910                    mov dword ptr [eax], edx
:00461093 8B4508                  mov eax, dword ptr [ebp+08]
:00461096 83C005                  add eax, 00000005
:00461099 50                      push eax
:0046109A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046109D 83C105                  add ecx, 00000005
:004610A0 E8FB59FDFF              call 00436AA0
:004610A5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004610A8 8B5508                  mov edx, dword ptr [ebp+08]
:004610AB 8A4207                  mov al, byte ptr [edx+07]
:004610AE 884107                  mov byte ptr [ecx+07], al
:004610B1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004610B4 83C108                  add ecx, 00000008
:004610B7 51                      push ecx
:004610B8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004610BB 83C108                  add ecx, 00000008
:004610BE E8DD59FDFF              call 00436AA0
:004610C3 8B55FC                  mov edx, dword ptr [ebp-04]
:004610C6 8B4508                  mov eax, dword ptr [ebp+08]
:004610C9 8A480B                  mov cl, byte ptr [eax+0B]
:004610CC 884A0B                  mov byte ptr [edx+0B], cl
:004610CF 8B55FC                  mov edx, dword ptr [ebp-04]
:004610D2 8B4508                  mov eax, dword ptr [ebp+08]
:004610D5 8A480C                  mov cl, byte ptr [eax+0C]
:004610D8 884A0C                  mov byte ptr [edx+0C], cl
:004610DB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004610DE E82DB8FAFF              call 0040C910
:004610E3 85C0                    test eax, eax
:004610E5 7425                    je 0046110C
:004610E7 8B55FC                  mov edx, dword ptr [ebp-04]
:004610EA 8B0A                    mov ecx, dword ptr [edx]
:004610EC 6BC950                  imul ecx, 00000050
:004610EF 81C1787F4900            add ecx, 00497F78
:004610F5 E886EDFAFF              call 0040FE80
:004610FA 25FF000000              and eax, 000000FF
:004610FF 85C0                    test eax, eax
:00461101 7509                    jne 0046110C

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00461103 C745F807000000          mov [ebp-08], 00000007
:0046110A EB07                    jmp 00461113

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004610E5(C), :00461101(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046110C C745F803000000          mov [ebp-08], 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046110A(U)
|
:00461113 8B45FC                  mov eax, dword ptr [ebp-04]
:00461116 8A4DF8                  mov cl, byte ptr [ebp-08]
:00461119 88480D                  mov byte ptr [eax+0D], cl
:0046111C 8B55FC                  mov edx, dword ptr [ebp-04]
:0046111F 8B4508                  mov eax, dword ptr [ebp+08]
:00461122 8A480A                  mov cl, byte ptr [eax+0A]
:00461125 884A0A                  mov byte ptr [edx+0A], cl
:00461128 8B55FC                  mov edx, dword ptr [ebp-04]
:0046112B 8B4508                  mov eax, dword ptr [ebp+08]
:0046112E 8A480E                  mov cl, byte ptr [eax+0E]
:00461131 884A0E                  mov byte ptr [edx+0E], cl
:00461134 8B55FC                  mov edx, dword ptr [ebp-04]
:00461137 8B4508                  mov eax, dword ptr [ebp+08]
:0046113A 8B4810                  mov ecx, dword ptr [eax+10]
:0046113D 894A10                  mov dword ptr [edx+10], ecx
:00461140 8B55FC                  mov edx, dword ptr [ebp-04]
:00461143 8B4508                  mov eax, dword ptr [ebp+08]
:00461146 8B4814                  mov ecx, dword ptr [eax+14]
:00461149 894A14                  mov dword ptr [edx+14], ecx
:0046114C 8B55FC                  mov edx, dword ptr [ebp-04]
:0046114F 8B4508                  mov eax, dword ptr [ebp+08]
:00461152 8A4818                  mov cl, byte ptr [eax+18]
:00461155 884A18                  mov byte ptr [edx+18], cl
:00461158 8B55FC                  mov edx, dword ptr [ebp-04]
:0046115B 8B4508                  mov eax, dword ptr [ebp+08]
:0046115E 8A4819                  mov cl, byte ptr [eax+19]
:00461161 884A19                  mov byte ptr [edx+19], cl
:00461164 8B55FC                  mov edx, dword ptr [ebp-04]
:00461167 8B4508                  mov eax, dword ptr [ebp+08]
:0046116A 8A481A                  mov cl, byte ptr [eax+1A]
:0046116D 884A1A                  mov byte ptr [edx+1A], cl
:00461170 8B55FC                  mov edx, dword ptr [ebp-04]
:00461173 8B4508                  mov eax, dword ptr [ebp+08]
:00461176 8A481B                  mov cl, byte ptr [eax+1B]
:00461179 884A1B                  mov byte ptr [edx+1B], cl
:0046117C 8B55FC                  mov edx, dword ptr [ebp-04]
:0046117F 8B4508                  mov eax, dword ptr [ebp+08]
:00461182 8A481D                  mov cl, byte ptr [eax+1D]
:00461185 884A1D                  mov byte ptr [edx+1D], cl
:00461188 8B55FC                  mov edx, dword ptr [ebp-04]
:0046118B 8B4508                  mov eax, dword ptr [ebp+08]
:0046118E 8B4820                  mov ecx, dword ptr [eax+20]
:00461191 894A20                  mov dword ptr [edx+20], ecx
:00461194 8B55FC                  mov edx, dword ptr [ebp-04]
:00461197 8B4508                  mov eax, dword ptr [ebp+08]
:0046119A 8A481C                  mov cl, byte ptr [eax+1C]
:0046119D 884A1C                  mov byte ptr [edx+1C], cl
:004611A0 8B45FC                  mov eax, dword ptr [ebp-04]
:004611A3 8BE5                    mov esp, ebp
:004611A5 5D                      pop ebp
:004611A6 C20400                  ret 0004


:004611A9 CC                      int 03
:004611AA CC                      int 03
:004611AB CC                      int 03
:004611AC CC                      int 03
:004611AD CC                      int 03
:004611AE CC                      int 03
:004611AF CC                      int 03

* Referenced by a CALL at Address:
|:00460C44   
|
:004611B0 55                      push ebp
:004611B1 8BEC                    mov ebp, esp
:004611B3 51                      push ecx
:004611B4 894DFC                  mov dword ptr [ebp-04], ecx
:004611B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004611BA 8A4D08                  mov cl, byte ptr [ebp+08]
:004611BD 884824                  mov byte ptr [eax+24], cl
:004611C0 8BE5                    mov esp, ebp
:004611C2 5D                      pop ebp
:004611C3 C20400                  ret 0004


:004611C6 CC                      int 03
:004611C7 CC                      int 03
:004611C8 CC                      int 03
:004611C9 CC                      int 03
:004611CA CC                      int 03
:004611CB CC                      int 03
:004611CC CC                      int 03
:004611CD CC                      int 03
:004611CE CC                      int 03
:004611CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00461326   , :00461348   , :00461369   
|
:004611D0 55                      push ebp
:004611D1 8BEC                    mov ebp, esp
:004611D3 6A00                    push 00000000
:004611D5 68785A4100              push 00415A78
:004611DA 8B450C                  mov eax, dword ptr [ebp+0C]
:004611DD 50                      push eax

* Possible Reference to Dialog: DialogID_00ED 
                                  |
:004611DE 68ED000000              push 000000ED
:004611E3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004611E6 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:004611E7 FF15DCD64B00            Call dword ptr [004BD6DC]
:004611ED 5D                      pop ebp
:004611EE C3                      ret



* Referenced by a CALL at Address:
|:0041DFE5   
|
:004611EF 55                      push ebp
:004611F0 8BEC                    mov ebp, esp
:004611F2 51                      push ecx
:004611F3 8B4508                  mov eax, dword ptr [ebp+08]
:004611F6 50                      push eax
:004611F7 E83300FAFF              call 0040122F
:004611FC 83C404                  add esp, 00000004
:004611FF 8945FC                  mov dword ptr [ebp-04], eax
:00461202 6A00                    push 00000000
:00461204 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461207 51                      push ecx

* Possible StringData Ref from Data Obj ->"ڬOܮwݦuC"
                                  |
:00461208 68B0194800              push 004819B0
:0046120D E89CE9FCFF              call 0042FBAE
:00461212 83C40C                  add esp, 0000000C
:00461215 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0046121B 52                      push edx
:0046121C A1A8554B00              mov eax, dword ptr [004B55A8]
:00461221 50                      push eax
:00461222 E8A713FBFF              call 004125CE
:00461227 83C408                  add esp, 00000008
:0046122A 8BE5                    mov esp, ebp
:0046122C 5D                      pop ebp
:0046122D C3                      ret



* Referenced by a CALL at Addresses:
|:00461501   , :00461E11   , :0046411B   , :00466203   
|
:0046122E 55                      push ebp
:0046122F 8BEC                    mov ebp, esp
:00461231 83EC0C                  sub esp, 0000000C
:00461234 C745FC00000000          mov [ebp-04], 00000000
:0046123B 8B45FC                  mov eax, dword ptr [ebp-04]
:0046123E 8945F8                  mov dword ptr [ebp-08], eax
:00461241 EB09                    jmp 0046124C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461281(U), :0046129C(U)
|
:00461243 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00461246 83C101                  add ecx, 00000001
:00461249 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461241(U)
|
:0046124C 837DF803                cmp dword ptr [ebp-08], 00000003
:00461250 734C                    jnb 0046129E
:00461252 8B55F8                  mov edx, dword ptr [ebp-08]
:00461255 52                      push edx
:00461256 8B4D08                  mov ecx, dword ptr [ebp+08]
:00461259 6BC922                  imul ecx, 00000022
:0046125C 81C1D0474900            add ecx, 004947D0
:00461262 E809530000              call 00466570
:00461267 25FFFF0000              and eax, 0000FFFF
:0046126C 8945F4                  mov dword ptr [ebp-0C], eax
:0046126F 817DF4FFFF0000          cmp dword ptr [ebp-0C], 0000FFFF
:00461276 750B                    jne 00461283
:00461278 8B45FC                  mov eax, dword ptr [ebp-04]
:0046127B 83C001                  add eax, 00000001
:0046127E 8945FC                  mov dword ptr [ebp-04], eax
:00461281 EBC0                    jmp 00461243

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461276(C)
|
:00461283 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00461286 51                      push ecx
:00461287 B978294B00              mov ecx, 004B2978
:0046128C E84932FAFF              call 004044DA
:00461291 3DFFFF0000              cmp eax, 0000FFFF
:00461296 7504                    jne 0046129C
:00461298 33C0                    xor eax, eax
:0046129A EB13                    jmp 004612AF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461296(C)
|
:0046129C EBA5                    jmp 00461243

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461250(C)
|
:0046129E 8B45FC                  mov eax, dword ptr [ebp-04]
:004612A1 83E803                  sub eax, 00000003
:004612A4 F7D8                    neg eax
:004612A6 1BC0                    sbb eax, eax
:004612A8 2402                    and al, 02
:004612AA 05FF000000              add eax, 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046129A(U)
|
:004612AF 8BE5                    mov esp, ebp
:004612B1 5D                      pop ebp
:004612B2 C3                      ret



* Referenced by a CALL at Address:
|:0041E00C   
|
:004612B3 55                      push ebp
:004612B4 8BEC                    mov ebp, esp
:004612B6 83EC6C                  sub esp, 0000006C
:004612B9 8B4508                  mov eax, dword ptr [ebp+08]
:004612BC 50                      push eax
:004612BD E86DFFF9FF              call 0040122F
:004612C2 83C404                  add esp, 00000004
:004612C5 894598                  mov dword ptr [ebp-68], eax

* Possible StringData Ref from Data Obj ->"w{C"
                                  |
:004612C8 68C0194800              push 004819C0
:004612CD 8D4D9C                  lea ecx, dword ptr [ebp-64]
:004612D0 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004612D1 FF1504D74B00            Call dword ptr [004BD704]
:004612D7 83C408                  add esp, 00000008
:004612DA 6A00                    push 00000000
:004612DC 8B5598                  mov edx, dword ptr [ebp-68]
:004612DF 52                      push edx
:004612E0 8D459C                  lea eax, dword ptr [ebp-64]
:004612E3 50                      push eax
:004612E4 E8C5E8FCFF              call 0042FBAE
:004612E9 83C40C                  add esp, 0000000C
:004612EC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004612EF 894D94                  mov dword ptr [ebp-6C], ecx
:004612F2 817D94F0110000          cmp dword ptr [ebp-6C], 000011F0
:004612F9 7414                    je 0046130F
:004612FB 817D94F1110000          cmp dword ptr [ebp-6C], 000011F1
:00461302 742C                    je 00461330
:00461304 817D94F2110000          cmp dword ptr [ebp-6C], 000011F2
:0046130B 7445                    je 00461352
:0046130D EB62                    jmp 00461371

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004612F9(C)
|
:0046130F C705E04F4B0000000000    mov dword ptr [004B4FE0], 00000000
:00461319 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0046131F 52                      push edx
:00461320 A1A8554B00              mov eax, dword ptr [004B55A8]
:00461325 50                      push eax
:00461326 E8A5FEFFFF              call 004611D0
:0046132B 83C408                  add esp, 00000008
:0046132E EB41                    jmp 00461371

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461302(C)
|
:00461330 C705E04F4B0001000000    mov dword ptr [004B4FE0], 00000001
:0046133A 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00461340 51                      push ecx
:00461341 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00461347 52                      push edx
:00461348 E883FEFFFF              call 004611D0
:0046134D 83C408                  add esp, 00000008
:00461350 EB1F                    jmp 00461371

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046130B(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00461352 C705E04F4B0002000000    mov dword ptr [004B4FE0], 00000002
:0046135C A1B0554B00              mov eax, dword ptr [004B55B0]
:00461361 50                      push eax
:00461362 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00461368 51                      push ecx
:00461369 E862FEFFFF              call 004611D0
:0046136E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046130D(U), :0046132E(U), :00461350(U)
|
:00461371 8BE5                    mov esp, ebp
:00461373 5D                      pop ebp
:00461374 C3                      ret



* Referenced by a CALL at Address:
|:0041E018   
|
:00461375 55                      push ebp
:00461376 8BEC                    mov ebp, esp
:00461378 6AFF                    push FFFFFFFF
:0046137A 68799A4700              push 00479A79
:0046137F 64A100000000            mov eax, dword ptr fs:[00000000]
:00461385 50                      push eax
:00461386 64892500000000          mov dword ptr fs:[00000000], esp
:0046138D 83EC60                  sub esp, 00000060
:00461390 53                      push ebx

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00461391 C745F0C8000000          mov [ebp-10], 000000C8
:00461398 EB09                    jmp 004613A3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004613D9(U)
|
:0046139A 8B45F0                  mov eax, dword ptr [ebp-10]
:0046139D 83C001                  add eax, 00000001
:004613A0 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461398(U)
|
:004613A3 817DF020030000          cmp dword ptr [ebp-10], 00000320
:004613AA 732F                    jnb 004613DB
:004613AC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004613AF 51                      push ecx
:004613B0 E8DBCAFAFF              call 0040DE90
:004613B5 83C404                  add esp, 00000004
:004613B8 85C0                    test eax, eax
:004613BA 741D                    je 004613D9
:004613BC 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004613BF 6BC950                  imul ecx, 00000050
:004613C2 81C1787F4900            add ecx, 00497F78
:004613C8 E863B5FAFF              call 0040C930
:004613CD 25FF000000              and eax, 000000FF
:004613D2 83F801                  cmp eax, 00000001
:004613D5 7502                    jne 004613D9
:004613D7 EB02                    jmp 004613DB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004613BA(C), :004613D5(C)
|
:004613D9 EBBF                    jmp 0046139A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004613AA(C), :004613D7(U)
|
:004613DB 817DF020030000          cmp dword ptr [ebp-10], 00000320
:004613E2 7519                    jne 004613FD
:004613E4 6A00                    push 00000000
:004613E6 68EF010000              push 000001EF

* Possible StringData Ref from Data Obj ->"@{حSuKC"
                                  |
:004613EB 68CC194800              push 004819CC
:004613F0 E8B9E7FCFF              call 0042FBAE
:004613F5 83C40C                  add esp, 0000000C
:004613F8 E980020000              jmp 0046167D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004613E2(C)
|
:004613FD 33D2                    xor edx, edx
:004613FF 8A15A8194800            mov dl, byte ptr [004819A8]
:00461405 85D2                    test edx, edx
:00461407 7458                    je 00461461
:00461409 6A00                    push 00000000
:0046140B 68EF010000              push 000001EF

* Possible StringData Ref from Data Obj ->"uKpA
ڼgb檺@{D@"
                                        ->"C"
                                  |
:00461410 68E0194800              push 004819E0
:00461415 E894E7FCFF              call 0042FBAE
:0046141A 83C40C                  add esp, 0000000C
:0046141D 6A00                    push 00000000
:0046141F 68EF010000              push 000001EF

* Possible StringData Ref from Data Obj ->"Ьݤ@UC"
                                  |
:00461424 68141A4800              push 00481A14
:00461429 E880E7FCFF              call 0042FBAE
:0046142E 83C40C                  add esp, 0000000C
:00461431 A1B0554B00              mov eax, dword ptr [004B55B0]
:00461436 50                      push eax
:00461437 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0046143D 51                      push ecx
:0046143E E847C20000              call 0046D68A
:00461443 83C408                  add esp, 00000008
:00461446 6A00                    push 00000000
:00461448 68EF010000              push 000001EF

* Possible StringData Ref from Data Obj ->"bRFɡA
аѦҡC"
                                  |
:0046144D 68201A4800              push 00481A20
:00461452 E857E7FCFF              call 0042FBAE
:00461457 83C40C                  add esp, 0000000C
:0046145A C605A819480000          mov byte ptr [004819A8], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461407(C)
|
:00461461 8D4DE8                  lea ecx, dword ptr [ebp-18]
:00461464 E847510000              call 004665B0
:00461469 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461546(U), :00461591(U), :004615C5(U), :004615E6(U), :00461669(U)
|
:00461470 BA01000000              mov edx, 00000001
:00461475 85D2                    test edx, edx
:00461477 0F84F1010000            je 0046166E
:0046147D 8D45E8                  lea eax, dword ptr [ebp-18]
:00461480 50                      push eax
:00461481 6888234600              push 00462388
:00461486 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0046148C 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE 
                                  |
:0046148D 68EE000000              push 000000EE
:00461492 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00461498 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00461499 FF15DCD64B00            Call dword ptr [004BD6DC]
:0046149F 89459C                  mov dword ptr [ebp-64], eax
:004614A2 837D9C00                cmp dword ptr [ebp-64], 00000000
:004614A6 7505                    jne 004614AD
:004614A8 E9C1010000              jmp 0046166E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004614A6(C)
|
:004614AD 8D4DE8                  lea ecx, dword ptr [ebp-18]
:004614B0 E81B510000              call 004665D0
:004614B5 8845A0                  mov byte ptr [ebp-60], al
:004614B8 8D4DE8                  lea ecx, dword ptr [ebp-18]
:004614BB E8C0C9FCFF              call 0042DE80
:004614C0 894598                  mov dword ptr [ebp-68], eax
:004614C3 8B45A0                  mov eax, dword ptr [ebp-60]
:004614C6 25FF000000              and eax, 000000FF
:004614CB 3DFF000000              cmp eax, 000000FF
:004614D0 7409                    je 004614DB
:004614D2 817D98FFFF0000          cmp dword ptr [ebp-68], 0000FFFF
:004614D9 7505                    jne 004614E0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004614D0(C)
|
:004614DB E98E010000              jmp 0046166E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004614D9(C)
|
:004614E0 8A4DA0                  mov cl, byte ptr [ebp-60]
:004614E3 51                      push ecx
:004614E4 8B4D98                  mov ecx, dword ptr [ebp-68]
:004614E7 6BC950                  imul ecx, 00000050
:004614EA 81C1787F4900            add ecx, 00497F78
:004614F0 E8EB1CFAFF              call 004031E0
:004614F5 25FF000000              and eax, 000000FF
:004614FA 894594                  mov dword ptr [ebp-6C], eax
:004614FD 8B5594                  mov edx, dword ptr [ebp-6C]
:00461500 52                      push edx
:00461501 E828FDFFFF              call 0046122E
:00461506 83C404                  add esp, 00000004
:00461509 8945A4                  mov dword ptr [ebp-5C], eax
:0046150C 817DA4FF000000          cmp dword ptr [ebp-5C], 000000FF
:00461513 7536                    jne 0046154B
:00461515 8B4594                  mov eax, dword ptr [ebp-6C]
:00461518 50                      push eax
:00461519 E8F51FFAFF              call 00403513
:0046151E 83C404                  add esp, 00000004
:00461521 50                      push eax

* Possible StringData Ref from Data Obj ->"is@%sC"
                                  |
:00461522 683C1A4800              push 00481A3C
:00461527 8D4DA8                  lea ecx, dword ptr [ebp-58]
:0046152A 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:0046152B FF1504D74B00            Call dword ptr [004BD704]
:00461531 83C40C                  add esp, 0000000C
:00461534 6A00                    push 00000000
:00461536 8B5598                  mov edx, dword ptr [ebp-68]
:00461539 52                      push edx
:0046153A 8D45A8                  lea eax, dword ptr [ebp-58]
:0046153D 50                      push eax
:0046153E E86BE6FCFF              call 0042FBAE
:00461543 83C40C                  add esp, 0000000C
:00461546 E925FFFFFF              jmp 00461470

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461513(C)
|
:0046154B 8B4D98                  mov ecx, dword ptr [ebp-68]
:0046154E 6BC950                  imul ecx, 00000050
:00461551 81C1787F4900            add ecx, 00497F78
:00461557 E844E9FAFF              call 0040FEA0
:0046155C 8AD8                    mov bl, al
:0046155E 81E3FF000000            and ebx, 000000FF
:00461564 8B4D94                  mov ecx, dword ptr [ebp-6C]
:00461567 6BC922                  imul ecx, 00000022
:0046156A 81C1D0474900            add ecx, 004947D0
:00461570 E81B500000              call 00466590
:00461575 25FF000000              and eax, 000000FF
:0046157A 3BD8                    cmp ebx, eax
:0046157C 7D18                    jge 00461596
:0046157E 6A00                    push 00000000
:00461580 8B4D98                  mov ecx, dword ptr [ebp-68]
:00461583 51                      push ecx

* Possible StringData Ref from Data Obj ->"׽m٤aAs@FC"
                                  |
:00461584 684C1A4800              push 00481A4C
:00461589 E820E6FCFF              call 0042FBAE
:0046158E 83C40C                  add esp, 0000000C
:00461591 E9DAFEFFFF              jmp 00461470

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046157C(C)
|
:00461596 6A00                    push 00000000
:00461598 8B5598                  mov edx, dword ptr [ebp-68]
:0046159B 52                      push edx

* Possible StringData Ref from Data Obj ->"еyC"
                                  |
:0046159C 68681A4800              push 00481A68
:004615A1 E808E6FCFF              call 0042FBAE
:004615A6 83C40C                  add esp, 0000000C
:004615A9 817DA4FF000000          cmp dword ptr [ebp-5C], 000000FF
:004615B0 7518                    jne 004615CA
:004615B2 6A00                    push 00000000
:004615B4 8B4598                  mov eax, dword ptr [ebp-68]
:004615B7 50                      push eax

* Possible StringData Ref from Data Obj ->"Ӥs@C"
                                  |
:004615B8 68741A4800              push 00481A74
:004615BD E8ECE5FCFF              call 0042FBAE
:004615C2 83C40C                  add esp, 0000000C
:004615C5 E9A6FEFFFF              jmp 00461470

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004615B0(C)
|
:004615CA 837DA400                cmp dword ptr [ebp-5C], 00000000
:004615CE 751B                    jne 004615EB

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004615D0 6A02                    push 00000002
:004615D2 8B4D98                  mov ecx, dword ptr [ebp-68]
:004615D5 51                      push ecx
:004615D6 8B5594                  mov edx, dword ptr [ebp-6C]
:004615D9 52                      push edx
:004615DA E8AD000000              call 0046168C
:004615DF 83C40C                  add esp, 0000000C
:004615E2 85C0                    test eax, eax
:004615E4 7505                    jne 004615EB
:004615E6 E985FEFFFF              jmp 00461470

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004615CE(C), :004615E4(C)
|
:004615EB 8B4594                  mov eax, dword ptr [ebp-6C]
:004615EE 50                      push eax
:004615EF E81F1FFAFF              call 00403513
:004615F4 83C404                  add esp, 00000004
:004615F7 50                      push eax

* Possible StringData Ref from Data Obj ->"%sFC
sbܮwFC"
                                  |
:004615F8 68841A4800              push 00481A84
:004615FD 8D4DA8                  lea ecx, dword ptr [ebp-58]
:00461600 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00461601 FF1504D74B00            Call dword ptr [004BD704]
:00461607 83C40C                  add esp, 0000000C
:0046160A 6A00                    push 00000000
:0046160C 8B5598                  mov edx, dword ptr [ebp-68]
:0046160F 52                      push edx
:00461610 8D45A8                  lea eax, dword ptr [ebp-58]
:00461613 50                      push eax
:00461614 E895E5FCFF              call 0042FBAE
:00461619 83C40C                  add esp, 0000000C
:0046161C 8A4D94                  mov cl, byte ptr [ebp-6C]
:0046161F 51                      push ecx
:00461620 8B5598                  mov edx, dword ptr [ebp-68]
:00461623 52                      push edx
:00461624 E82C0C0000              call 00462255
:00461629 83C408                  add esp, 00000008
:0046162C 6A01                    push 00000001
:0046162E 8B4598                  mov eax, dword ptr [ebp-68]
:00461631 50                      push eax
:00461632 8B4D94                  mov ecx, dword ptr [ebp-6C]
:00461635 51                      push ecx
:00461636 E851000000              call 0046168C
:0046163B 83C40C                  add esp, 0000000C
:0046163E B978294B00              mov ecx, 004B2978
:00461643 E8822FFAFF              call 004045CA
:00461648 85C0                    test eax, eax
:0046164A 7410                    je 0046165C
:0046164C 8B5594                  mov edx, dword ptr [ebp-6C]
:0046164F 52                      push edx
:00461650 B978294B00              mov ecx, 004B2978
:00461655 E8942FFAFF              call 004045EE
:0046165A EB0D                    jmp 00461669

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046164A(C)
|

* Possible StringData Ref from Data Obj ->"ܮwwgFC"
                                  |
:0046165C 68A01A4800              push 00481AA0
:00461661 E8F0820000              call 00469956
:00461666 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046165A(U)
|
:00461669 E902FEFFFF              jmp 00461470

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461477(C), :004614A8(U), :004614DB(U)
|
:0046166E C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00461675 8D4DE8                  lea ecx, dword ptr [ebp-18]
:00461678 E883D3FCFF              call 0042EA00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004613F8(U)
|
:0046167D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00461680 64890D00000000          mov dword ptr fs:[00000000], ecx
:00461687 5B                      pop ebx
:00461688 8BE5                    mov esp, ebp
:0046168A 5D                      pop ebp
:0046168B C3                      ret



* Referenced by a CALL at Addresses:
|:004615DA   , :00461636   
|
:0046168C 55                      push ebp
:0046168D 8BEC                    mov ebp, esp
:0046168F 81ECC0010000            sub esp, 000001C0
:00461695 C78530FFFFFF00000000    mov dword ptr [ebp+FFFFFF30], 00000000
:0046169F C78534FFFFFF00000000    mov dword ptr [ebp+FFFFFF34], 00000000
:004616A9 6A00                    push 00000000
:004616AB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004616AE 6BC922                  imul ecx, 00000022
:004616B1 81C1D0474900            add ecx, 004947D0
:004616B7 E8B44E0000              call 00466570
:004616BC 25FFFF0000              and eax, 0000FFFF
:004616C1 8985A0FEFFFF            mov dword ptr [ebp+FFFFFEA0], eax
:004616C7 6A01                    push 00000001
:004616C9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004616CC 6BC922                  imul ecx, 00000022
:004616CF 81C1D0474900            add ecx, 004947D0
:004616D5 E8964E0000              call 00466570
:004616DA 25FFFF0000              and eax, 0000FFFF
:004616DF 89859CFEFFFF            mov dword ptr [ebp+FFFFFE9C], eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004616E5 6A02                    push 00000002
:004616E7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004616EA 6BC922                  imul ecx, 00000022
:004616ED 81C1D0474900            add ecx, 004947D0
:004616F3 E8784E0000              call 00466570
:004616F8 25FFFF0000              and eax, 0000FFFF
:004616FD 898598FEFFFF            mov dword ptr [ebp+FFFFFE98], eax
:00461703 8B4510                  mov eax, dword ptr [ebp+10]
:00461706 898594FEFFFF            mov dword ptr [ebp+FFFFFE94], eax
:0046170C 83BD94FEFFFF00          cmp dword ptr [ebp+FFFFFE94], 00000000
:00461713 741F                    je 00461734
:00461715 83BD94FEFFFF01          cmp dword ptr [ebp+FFFFFE94], 00000001
:0046171C 0F84EA000000            je 0046180C
:00461722 83BD94FEFFFF02          cmp dword ptr [ebp+FFFFFE94], 00000002
:00461729 0F8424010000            je 00461853
:0046172F E9F1060000              jmp 00461E25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461713(C)
|
:00461734 81BD98FEFFFFFFFF0000    cmp dword ptr [ebp+FFFFFE98], 0000FFFF
:0046173E 750C                    jne 0046174C
:00461740 C78590FEFFFF78534B00    mov dword ptr [ebp+FFFFFE90], 004B5378
:0046174A EB15                    jmp 00461761

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046173E(C)
|
:0046174C 8B8D98FEFFFF            mov ecx, dword ptr [ebp+FFFFFE98]
:00461752 51                      push ecx
:00461753 E8BB1DFAFF              call 00403513
:00461758 83C404                  add esp, 00000004
:0046175B 898590FEFFFF            mov dword ptr [ebp+FFFFFE90], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046174A(U)
|
:00461761 81BD9CFEFFFFFFFF0000    cmp dword ptr [ebp+FFFFFE9C], 0000FFFF
:0046176B 750C                    jne 00461779
:0046176D C7858CFEFFFF7C534B00    mov dword ptr [ebp+FFFFFE8C], 004B537C
:00461777 EB15                    jmp 0046178E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046176B(C)
|
:00461779 8B959CFEFFFF            mov edx, dword ptr [ebp+FFFFFE9C]
:0046177F 52                      push edx
:00461780 E88E1DFAFF              call 00403513
:00461785 83C404                  add esp, 00000004
:00461788 89858CFEFFFF            mov dword ptr [ebp+FFFFFE8C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461777(U)
|
:0046178E 81BDA0FEFFFFFFFF0000    cmp dword ptr [ebp+FFFFFEA0], 0000FFFF
:00461798 750C                    jne 004617A6
:0046179A C78588FEFFFF80534B00    mov dword ptr [ebp+FFFFFE88], 004B5380
:004617A4 EB15                    jmp 004617BB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461798(C)
|
:004617A6 8B85A0FEFFFF            mov eax, dword ptr [ebp+FFFFFEA0]
:004617AC 50                      push eax
:004617AD E8611DFAFF              call 00403513
:004617B2 83C404                  add esp, 00000004
:004617B5 898588FEFFFF            mov dword ptr [ebp+FFFFFE88], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004617A4(U)
|
:004617BB 8B8D90FEFFFF            mov ecx, dword ptr [ebp+FFFFFE90]
:004617C1 51                      push ecx
:004617C2 8B958CFEFFFF            mov edx, dword ptr [ebp+FFFFFE8C]
:004617C8 52                      push edx
:004617C9 8B8588FEFFFF            mov eax, dword ptr [ebp+FFFFFE88]
:004617CF 50                      push eax
:004617D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004617D3 51                      push ecx
:004617D4 E83A1DFAFF              call 00403513
:004617D9 83C404                  add esp, 00000004
:004617DC 50                      push eax

* Possible StringData Ref from Data Obj ->"ns@%sݭn%s,%s,%sC"
                                  |
:004617DD 68B01A4800              push 00481AB0
:004617E2 8D9538FFFFFF            lea edx, dword ptr [ebp+FFFFFF38]
:004617E8 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:004617E9 FF1504D74B00            Call dword ptr [004BD704]
:004617EF 83C418                  add esp, 00000018
:004617F2 6A00                    push 00000000
:004617F4 8B450C                  mov eax, dword ptr [ebp+0C]
:004617F7 50                      push eax
:004617F8 8D8D38FFFFFF            lea ecx, dword ptr [ebp+FFFFFF38]
:004617FE 51                      push ecx
:004617FF E8AAE3FCFF              call 0042FBAE
:00461804 83C40C                  add esp, 0000000C
:00461807 E919060000              jmp 00461E25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046171C(C)
|
:0046180C 68FFFF0000              push 0000FFFF
:00461811 8B95A0FEFFFF            mov edx, dword ptr [ebp+FFFFFEA0]
:00461817 52                      push edx
:00461818 B978294B00              mov ecx, 004B2978
:0046181D E8002DFAFF              call 00404522
:00461822 68FFFF0000              push 0000FFFF
:00461827 8B859CFEFFFF            mov eax, dword ptr [ebp+FFFFFE9C]
:0046182D 50                      push eax
:0046182E B978294B00              mov ecx, 004B2978
:00461833 E8EA2CFAFF              call 00404522
:00461838 68FFFF0000              push 0000FFFF
:0046183D 8B8D98FEFFFF            mov ecx, dword ptr [ebp+FFFFFE98]
:00461843 51                      push ecx
:00461844 B978294B00              mov ecx, 004B2978
:00461849 E8D42CFAFF              call 00404522
:0046184E E9D2050000              jmp 00461E25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461729(C)
|
:00461853 81BDA0FEFFFFFFFF0000    cmp dword ptr [ebp+FFFFFEA0], 0000FFFF
:0046185D 7424                    je 00461883
:0046185F 8B95A0FEFFFF            mov edx, dword ptr [ebp+FFFFFEA0]
:00461865 52                      push edx
:00461866 B978294B00              mov ecx, 004B2978
:0046186B E86A2CFAFF              call 004044DA
:00461870 3DFFFF0000              cmp eax, 0000FFFF
:00461875 750C                    jne 00461883
:00461877 C78584FEFFFF01000000    mov dword ptr [ebp+FFFFFE84], 00000001
:00461881 EB0A                    jmp 0046188D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046185D(C), :00461875(C)
|
:00461883 C78584FEFFFF00000000    mov dword ptr [ebp+FFFFFE84], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461881(U)
|
:0046188D 8B8584FEFFFF            mov eax, dword ptr [ebp+FFFFFE84]
:00461893 89852CFFFFFF            mov dword ptr [ebp+FFFFFF2C], eax
:00461899 81BD9CFEFFFFFFFF0000    cmp dword ptr [ebp+FFFFFE9C], 0000FFFF
:004618A3 7424                    je 004618C9
:004618A5 8B8D9CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE9C]
:004618AB 51                      push ecx
:004618AC B978294B00              mov ecx, 004B2978
:004618B1 E8242CFAFF              call 004044DA
:004618B6 3DFFFF0000              cmp eax, 0000FFFF
:004618BB 750C                    jne 004618C9
:004618BD C78580FEFFFF01000000    mov dword ptr [ebp+FFFFFE80], 00000001
:004618C7 EB0A                    jmp 004618D3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004618A3(C), :004618BB(C)
|
:004618C9 C78580FEFFFF00000000    mov dword ptr [ebp+FFFFFE80], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004618C7(U)
|
:004618D3 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:004618D9 899528FFFFFF            mov dword ptr [ebp+FFFFFF28], edx
:004618DF 81BD98FEFFFFFFFF0000    cmp dword ptr [ebp+FFFFFE98], 0000FFFF
:004618E9 7424                    je 0046190F
:004618EB 8B8598FEFFFF            mov eax, dword ptr [ebp+FFFFFE98]
:004618F1 50                      push eax
:004618F2 B978294B00              mov ecx, 004B2978
:004618F7 E8DE2BFAFF              call 004044DA
:004618FC 3DFFFF0000              cmp eax, 0000FFFF
:00461901 750C                    jne 0046190F
:00461903 C7857CFEFFFF01000000    mov dword ptr [ebp+FFFFFE7C], 00000001
:0046190D EB0A                    jmp 00461919

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004618E9(C), :00461901(C)
|
:0046190F C7857CFEFFFF00000000    mov dword ptr [ebp+FFFFFE7C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046190D(U)
|
:00461919 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:0046191F 898D24FFFFFF            mov dword ptr [ebp+FFFFFF24], ecx
:00461925 83BD24FFFFFF00          cmp dword ptr [ebp+FFFFFF24], 00000000
:0046192C 7417                    je 00461945
:0046192E 8B9598FEFFFF            mov edx, dword ptr [ebp+FFFFFE98]
:00461934 52                      push edx
:00461935 E8D91BFAFF              call 00403513
:0046193A 83C404                  add esp, 00000004
:0046193D 898578FEFFFF            mov dword ptr [ebp+FFFFFE78], eax
:00461943 EB0A                    jmp 0046194F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046192C(C)
|
:00461945 C78578FEFFFF84534B00    mov dword ptr [ebp+FFFFFE78], 004B5384

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461943(U)
|
:0046194F 83BD28FFFFFF00          cmp dword ptr [ebp+FFFFFF28], 00000000
:00461956 7415                    je 0046196D
:00461958 83BD24FFFFFF00          cmp dword ptr [ebp+FFFFFF24], 00000000
:0046195F 740C                    je 0046196D

* Possible StringData Ref from Data Obj ->"N"
                                  |
:00461961 C78574FEFFFFC81A4800    mov dword ptr [ebp+FFFFFE74], 00481AC8
:0046196B EB0A                    jmp 00461977

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461956(C), :0046195F(C)
|
:0046196D C78574FEFFFF88534B00    mov dword ptr [ebp+FFFFFE74], 004B5388

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046196B(U)
|
:00461977 83BD28FFFFFF00          cmp dword ptr [ebp+FFFFFF28], 00000000
:0046197E 7417                    je 00461997
:00461980 8B859CFEFFFF            mov eax, dword ptr [ebp+FFFFFE9C]
:00461986 50                      push eax
:00461987 E8871BFAFF              call 00403513
:0046198C 83C404                  add esp, 00000004
:0046198F 898570FEFFFF            mov dword ptr [ebp+FFFFFE70], eax
:00461995 EB0A                    jmp 004619A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046197E(C)
|
:00461997 C78570FEFFFF8C534B00    mov dword ptr [ebp+FFFFFE70], 004B538C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461995(U)
|
:004619A1 83BD2CFFFFFF00          cmp dword ptr [ebp+FFFFFF2C], 00000000
:004619A8 741E                    je 004619C8
:004619AA 83BD28FFFFFF00          cmp dword ptr [ebp+FFFFFF28], 00000000
:004619B1 7509                    jne 004619BC
:004619B3 83BD24FFFFFF00          cmp dword ptr [ebp+FFFFFF24], 00000000
:004619BA 740C                    je 004619C8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004619B1(C)
|

* Possible StringData Ref from Data Obj ->"N"
                                  |
:004619BC C7856CFEFFFFCC1A4800    mov dword ptr [ebp+FFFFFE6C], 00481ACC
:004619C6 EB0A                    jmp 004619D2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004619A8(C), :004619BA(C)
|
:004619C8 C7856CFEFFFF90534B00    mov dword ptr [ebp+FFFFFE6C], 004B5390

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004619C6(U)
|
:004619D2 83BD2CFFFFFF00          cmp dword ptr [ebp+FFFFFF2C], 00000000
:004619D9 7417                    je 004619F2
:004619DB 8B8DA0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA0]
:004619E1 51                      push ecx
:004619E2 E82C1BFAFF              call 00403513
:004619E7 83C404                  add esp, 00000004
:004619EA 898568FEFFFF            mov dword ptr [ebp+FFFFFE68], eax
:004619F0 EB0A                    jmp 004619FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004619D9(C)
|
:004619F2 C78568FEFFFF94534B00    mov dword ptr [ebp+FFFFFE68], 004B5394

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004619F0(U)
|
:004619FC 8B9578FEFFFF            mov edx, dword ptr [ebp+FFFFFE78]
:00461A02 52                      push edx
:00461A03 8B8574FEFFFF            mov eax, dword ptr [ebp+FFFFFE74]
:00461A09 50                      push eax
:00461A0A 8B8D70FEFFFF            mov ecx, dword ptr [ebp+FFFFFE70]
:00461A10 51                      push ecx
:00461A11 8B956CFEFFFF            mov edx, dword ptr [ebp+FFFFFE6C]
:00461A17 52                      push edx
:00461A18 8B8568FEFFFF            mov eax, dword ptr [ebp+FFFFFE68]
:00461A1E 50                      push eax

* Possible StringData Ref from Data Obj ->"%s%s%s%s%sC"
                                  |
:00461A1F 68D01A4800              push 00481AD0
:00461A24 8D8D38FFFFFF            lea ecx, dword ptr [ebp+FFFFFF38]
:00461A2A 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00461A2B FF1504D74B00            Call dword ptr [004BD704]
:00461A31 83C41C                  add esp, 0000001C
:00461A34 6A00                    push 00000000
:00461A36 8B550C                  mov edx, dword ptr [ebp+0C]
:00461A39 52                      push edx
:00461A3A 8D8538FFFFFF            lea eax, dword ptr [ebp+FFFFFF38]
:00461A40 50                      push eax
:00461A41 E868E1FCFF              call 0042FBAE
:00461A46 83C40C                  add esp, 0000000C
:00461A49 83BD2CFFFFFF00          cmp dword ptr [ebp+FFFFFF2C], 00000000
:00461A50 741F                    je 00461A71
:00461A52 8B8DA0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA0]
:00461A58 51                      push ecx
:00461A59 E871040000              call 00461ECF
:00461A5E 83C404                  add esp, 00000004
:00461A61 85C0                    test eax, eax
:00461A63 740C                    je 00461A71
:00461A65 C78564FEFFFF01000000    mov dword ptr [ebp+FFFFFE64], 00000001
:00461A6F EB0A                    jmp 00461A7B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461A50(C), :00461A63(C)
|
:00461A71 C78564FEFFFF00000000    mov dword ptr [ebp+FFFFFE64], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461A6F(U)
|
:00461A7B 8B9564FEFFFF            mov edx, dword ptr [ebp+FFFFFE64]
:00461A81 89952CFFFFFF            mov dword ptr [ebp+FFFFFF2C], edx
:00461A87 83BD2CFFFFFF00          cmp dword ptr [ebp+FFFFFF2C], 00000000
:00461A8E 740F                    je 00461A9F
:00461A90 8B8534FFFFFF            mov eax, dword ptr [ebp+FFFFFF34]
:00461A96 83C001                  add eax, 00000001
:00461A99 898534FFFFFF            mov dword ptr [ebp+FFFFFF34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461A8E(C)
|
:00461A9F 83BD28FFFFFF00          cmp dword ptr [ebp+FFFFFF28], 00000000
:00461AA6 741F                    je 00461AC7
:00461AA8 8B8D9CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE9C]
:00461AAE 51                      push ecx
:00461AAF E81B040000              call 00461ECF
:00461AB4 83C404                  add esp, 00000004
:00461AB7 85C0                    test eax, eax
:00461AB9 740C                    je 00461AC7
:00461ABB C78560FEFFFF01000000    mov dword ptr [ebp+FFFFFE60], 00000001
:00461AC5 EB0A                    jmp 00461AD1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461AA6(C), :00461AB9(C)
|
:00461AC7 C78560FEFFFF00000000    mov dword ptr [ebp+FFFFFE60], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461AC5(U)
|
:00461AD1 8B9560FEFFFF            mov edx, dword ptr [ebp+FFFFFE60]
:00461AD7 899528FFFFFF            mov dword ptr [ebp+FFFFFF28], edx
:00461ADD 83BD28FFFFFF00          cmp dword ptr [ebp+FFFFFF28], 00000000
:00461AE4 740F                    je 00461AF5
:00461AE6 8B8534FFFFFF            mov eax, dword ptr [ebp+FFFFFF34]
:00461AEC 83C001                  add eax, 00000001
:00461AEF 898534FFFFFF            mov dword ptr [ebp+FFFFFF34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461AE4(C)
|
:00461AF5 83BD24FFFFFF00          cmp dword ptr [ebp+FFFFFF24], 00000000
:00461AFC 741F                    je 00461B1D
:00461AFE 8B8D98FEFFFF            mov ecx, dword ptr [ebp+FFFFFE98]
:00461B04 51                      push ecx
:00461B05 E8C5030000              call 00461ECF
:00461B0A 83C404                  add esp, 00000004
:00461B0D 85C0                    test eax, eax
:00461B0F 740C                    je 00461B1D
:00461B11 C7855CFEFFFF01000000    mov dword ptr [ebp+FFFFFE5C], 00000001
:00461B1B EB0A                    jmp 00461B27

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461AFC(C), :00461B0F(C)
|
:00461B1D C7855CFEFFFF00000000    mov dword ptr [ebp+FFFFFE5C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461B1B(U)
|
:00461B27 8B955CFEFFFF            mov edx, dword ptr [ebp+FFFFFE5C]
:00461B2D 899524FFFFFF            mov dword ptr [ebp+FFFFFF24], edx
:00461B33 83BD24FFFFFF00          cmp dword ptr [ebp+FFFFFF24], 00000000
:00461B3A 740F                    je 00461B4B
:00461B3C 8B8534FFFFFF            mov eax, dword ptr [ebp+FFFFFF34]
:00461B42 83C001                  add eax, 00000001
:00461B45 898534FFFFFF            mov dword ptr [ebp+FFFFFF34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461B3A(C)
|
:00461B4B 83BD34FFFFFF00          cmp dword ptr [ebp+FFFFFF34], 00000000
:00461B52 7507                    jne 00461B5B
:00461B54 33C0                    xor eax, eax
:00461B56 E9CC020000              jmp 00461E27

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461B52(C)
|
:00461B5B 8B8D98FEFFFF            mov ecx, dword ptr [ebp+FFFFFE98]
:00461B61 51                      push ecx
:00461B62 8B959CFEFFFF            mov edx, dword ptr [ebp+FFFFFE9C]
:00461B68 52                      push edx
:00461B69 8B85A0FEFFFF            mov eax, dword ptr [ebp+FFFFFEA0]
:00461B6F 50                      push eax
:00461B70 8B8D24FFFFFF            mov ecx, dword ptr [ebp+FFFFFF24]
:00461B76 51                      push ecx
:00461B77 8B9528FFFFFF            mov edx, dword ptr [ebp+FFFFFF28]
:00461B7D 52                      push edx
:00461B7E 8B852CFFFFFF            mov eax, dword ptr [ebp+FFFFFF2C]
:00461B84 50                      push eax
:00461B85 E8A1020000              call 00461E2B
:00461B8A 83C418                  add esp, 00000018
:00461B8D 898530FFFFFF            mov dword ptr [ebp+FFFFFF30], eax
:00461B93 8B8D30FFFFFF            mov ecx, dword ptr [ebp+FFFFFF30]
:00461B99 898D54FEFFFF            mov dword ptr [ebp+FFFFFE54], ecx
:00461B9F C78558FEFFFF00000000    mov dword ptr [ebp+FFFFFE58], 00000000
:00461BA9 DFAD54FEFFFF            fild qword ptr [ebp+FFFFFE54]
:00461BAF DC0DD0AF4700            fmul qword ptr [0047AFD0]
:00461BB5 E8E6DF0000              call 0046FBA0
:00461BBA 898530FFFFFF            mov dword ptr [ebp+FFFFFF30], eax
:00461BC0 83BD24FFFFFF00          cmp dword ptr [ebp+FFFFFF24], 00000000
:00461BC7 7417                    je 00461BE0
:00461BC9 8B9598FEFFFF            mov edx, dword ptr [ebp+FFFFFE98]
:00461BCF 52                      push edx
:00461BD0 E83E19FAFF              call 00403513
:00461BD5 83C404                  add esp, 00000004
:00461BD8 898550FEFFFF            mov dword ptr [ebp+FFFFFE50], eax
:00461BDE EB0A                    jmp 00461BEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461BC7(C)
|
:00461BE0 C78550FEFFFF98534B00    mov dword ptr [ebp+FFFFFE50], 004B5398

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461BDE(U)
|
:00461BEA 83BD28FFFFFF00          cmp dword ptr [ebp+FFFFFF28], 00000000
:00461BF1 7415                    je 00461C08
:00461BF3 83BD24FFFFFF00          cmp dword ptr [ebp+FFFFFF24], 00000000
:00461BFA 740C                    je 00461C08

* Possible StringData Ref from Data Obj ->"N"
                                  |
:00461BFC C7854CFEFFFFE41A4800    mov dword ptr [ebp+FFFFFE4C], 00481AE4
:00461C06 EB0A                    jmp 00461C12

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461BF1(C), :00461BFA(C)
|
:00461C08 C7854CFEFFFF9C534B00    mov dword ptr [ebp+FFFFFE4C], 004B539C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461C06(U)
|
:00461C12 83BD28FFFFFF00          cmp dword ptr [ebp+FFFFFF28], 00000000
:00461C19 7417                    je 00461C32
:00461C1B 8B859CFEFFFF            mov eax, dword ptr [ebp+FFFFFE9C]
:00461C21 50                      push eax
:00461C22 E8EC18FAFF              call 00403513
:00461C27 83C404                  add esp, 00000004
:00461C2A 898548FEFFFF            mov dword ptr [ebp+FFFFFE48], eax
:00461C30 EB0A                    jmp 00461C3C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461C19(C)
|
:00461C32 C78548FEFFFFA0534B00    mov dword ptr [ebp+FFFFFE48], 004B53A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461C30(U)
|
:00461C3C 83BD2CFFFFFF00          cmp dword ptr [ebp+FFFFFF2C], 00000000
:00461C43 741E                    je 00461C63
:00461C45 83BD28FFFFFF00          cmp dword ptr [ebp+FFFFFF28], 00000000
:00461C4C 7509                    jne 00461C57
:00461C4E 83BD24FFFFFF00          cmp dword ptr [ebp+FFFFFF24], 00000000
:00461C55 740C                    je 00461C63

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461C4C(C)
|

* Possible StringData Ref from Data Obj ->"N"
                                  |
:00461C57 C78544FEFFFFE81A4800    mov dword ptr [ebp+FFFFFE44], 00481AE8
:00461C61 EB0A                    jmp 00461C6D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461C43(C), :00461C55(C)
|
:00461C63 C78544FEFFFFA4534B00    mov dword ptr [ebp+FFFFFE44], 004B53A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461C61(U)
|
:00461C6D 83BD2CFFFFFF00          cmp dword ptr [ebp+FFFFFF2C], 00000000
:00461C74 7417                    je 00461C8D
:00461C76 8B8DA0FEFFFF            mov ecx, dword ptr [ebp+FFFFFEA0]
:00461C7C 51                      push ecx
:00461C7D E89118FAFF              call 00403513
:00461C82 83C404                  add esp, 00000004
:00461C85 898540FEFFFF            mov dword ptr [ebp+FFFFFE40], eax
:00461C8B EB0A                    jmp 00461C97

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461C74(C)
|
:00461C8D C78540FEFFFFA8534B00    mov dword ptr [ebp+FFFFFE40], 004B53A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461C8B(U)
|
:00461C97 8B9530FFFFFF            mov edx, dword ptr [ebp+FFFFFF30]
:00461C9D 52                      push edx
:00461C9E 8B8550FEFFFF            mov eax, dword ptr [ebp+FFFFFE50]
:00461CA4 50                      push eax
:00461CA5 8B8D4CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE4C]
:00461CAB 51                      push ecx
:00461CAC 8B9548FEFFFF            mov edx, dword ptr [ebp+FFFFFE48]
:00461CB2 52                      push edx
:00461CB3 8B8544FEFFFF            mov eax, dword ptr [ebp+FFFFFE44]
:00461CB9 50                      push eax
:00461CBA 8B8D40FEFFFF            mov ecx, dword ptr [ebp+FFFFFE40]
:00461CC0 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s%s%s%s%s"
                                  |
:00461CC1 68EC1A4800              push 00481AEC
:00461CC6 8D95A4FEFFFF            lea edx, dword ptr [ebp+FFFFFEA4]
:00461CCC 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00461CCD FF1504D74B00            Call dword ptr [004BD704]
:00461CD3 83C420                  add esp, 00000020
:00461CD6 8B8530FFFFFF            mov eax, dword ptr [ebp+FFFFFF30]
:00461CDC 50                      push eax
:00461CDD 8D8DA4FEFFFF            lea ecx, dword ptr [ebp+FFFFFEA4]
:00461CE3 51                      push ecx

* Possible StringData Ref from Data Obj ->"ƤA%siHΥ]Ab%uʤJC"
                                  |
:00461CE4 68F81A4800              push 00481AF8
:00461CE9 8D9538FFFFFF            lea edx, dword ptr [ebp+FFFFFF38]
:00461CEF 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00461CF0 FF1504D74B00            Call dword ptr [004BD704]
:00461CF6 83C410                  add esp, 00000010
:00461CF9 6A00                    push 00000000
:00461CFB 8B450C                  mov eax, dword ptr [ebp+0C]
:00461CFE 50                      push eax
:00461CFF 8D8D38FFFFFF            lea ecx, dword ptr [ebp+FFFFFF38]
:00461D05 51                      push ecx
:00461D06 E8A3DEFCFF              call 0042FBAE
:00461D0B 83C40C                  add esp, 0000000C
:00461D0E 8D95A4FEFFFF            lea edx, dword ptr [ebp+FFFFFEA4]
:00461D14 52                      push edx
:00461D15 8B8530FFFFFF            mov eax, dword ptr [ebp+FFFFFF30]
:00461D1B 50                      push eax
:00461D1C B978294B00              mov ecx, 004B2978
:00461D21 E8BA4CFDFF              call 004369E0
:00461D26 50                      push eax

* Possible StringData Ref from Data Obj ->"{%uC
ζ%uʤJ%sܡH"
                                  |
:00461D27 68281B4800              push 00481B28
:00461D2C 8D8D38FFFFFF            lea ecx, dword ptr [ebp+FFFFFF38]
:00461D32 51                      push ecx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00461D33 FF1504D74B00            Call dword ptr [004BD704]
:00461D39 83C414                  add esp, 00000014
:00461D3C 6A00                    push 00000000
:00461D3E 8D9538FFFFFF            lea edx, dword ptr [ebp+FFFFFF38]
:00461D44 52                      push edx
:00461D45 E8967B0000              call 004698E0
:00461D4A 83C408                  add esp, 00000008
:00461D4D 85C0                    test eax, eax
:00461D4F 0F84D0000000            je 00461E25
:00461D55 E858010000              call 00461EB2
:00461D5A 3B8534FFFFFF            cmp eax, dword ptr [ebp+FFFFFF34]
:00461D60 7D18                    jge 00461D7A
:00461D62 6A00                    push 00000000
:00461D64 8B450C                  mov eax, dword ptr [ebp+0C]
:00461D67 50                      push eax

* Possible StringData Ref from Data Obj ->"ܮwبSsfaFALkʤJC"
                                  |
:00461D68 68481B4800              push 00481B48
:00461D6D E83CDEFCFF              call 0042FBAE
:00461D72 83C40C                  add esp, 0000000C
:00461D75 E9AB000000              jmp 00461E25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461D60(C)
|
:00461D7A B978294B00              mov ecx, 004B2978
:00461D7F E85C4CFDFF              call 004369E0
:00461D84 3B8530FFFFFF            cmp eax, dword ptr [ebp+FFFFFF30]
:00461D8A 7318                    jnb 00461DA4
:00461D8C 6A00                    push 00000000
:00461D8E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00461D91 51                      push ecx

* Possible StringData Ref from Data Obj ->"C"
                                  |
:00461D92 68701B4800              push 00481B70
:00461D97 E812DEFCFF              call 0042FBAE
:00461D9C 83C40C                  add esp, 0000000C
:00461D9F E981000000              jmp 00461E25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461D8A(C)
|
:00461DA4 83BD2CFFFFFF00          cmp dword ptr [ebp+FFFFFF2C], 00000000
:00461DAB 7411                    je 00461DBE
:00461DAD 8B95A0FEFFFF            mov edx, dword ptr [ebp+FFFFFEA0]
:00461DB3 52                      push edx
:00461DB4 B978294B00              mov ecx, 004B2978
:00461DB9 E83028FAFF              call 004045EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461DAB(C)
|
:00461DBE 83BD28FFFFFF00          cmp dword ptr [ebp+FFFFFF28], 00000000
:00461DC5 7411                    je 00461DD8
:00461DC7 8B859CFEFFFF            mov eax, dword ptr [ebp+FFFFFE9C]
:00461DCD 50                      push eax
:00461DCE B978294B00              mov ecx, 004B2978
:00461DD3 E81628FAFF              call 004045EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461DC5(C)
|
:00461DD8 83BD24FFFFFF00          cmp dword ptr [ebp+FFFFFF24], 00000000
:00461DDF 7411                    je 00461DF2
:00461DE1 8B8D98FEFFFF            mov ecx, dword ptr [ebp+FFFFFE98]
:00461DE7 51                      push ecx
:00461DE8 B978294B00              mov ecx, 004B2978
:00461DED E8FC27FAFF              call 004045EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461DDF(C)
|
:00461DF2 B978294B00              mov ecx, 004B2978
:00461DF7 E8E44BFDFF              call 004369E0
:00461DFC 2B8530FFFFFF            sub eax, dword ptr [ebp+FFFFFF30]
:00461E02 50                      push eax
:00461E03 B978294B00              mov ecx, 004B2978
:00461E08 E8B338FAFF              call 004056C0
:00461E0D 8B5508                  mov edx, dword ptr [ebp+08]
:00461E10 52                      push edx
:00461E11 E818F4FFFF              call 0046122E
:00461E16 83C404                  add esp, 00000004
:00461E19 83F801                  cmp eax, 00000001
:00461E1C 7507                    jne 00461E25
:00461E1E B801000000              mov eax, 00000001
:00461E23 EB02                    jmp 00461E27

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046172F(U), :00461807(U), :0046184E(U), :00461D4F(C), :00461D75(U)
|:00461D9F(U), :00461E1C(C)
|
:00461E25 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461B56(U), :00461E23(U)
|
:00461E27 8BE5                    mov esp, ebp
:00461E29 5D                      pop ebp
:00461E2A C3                      ret



* Referenced by a CALL at Address:
|:00461B85   
|
:00461E2B 55                      push ebp
:00461E2C 8BEC                    mov ebp, esp
:00461E2E 51                      push ecx
:00461E2F C745FC00000000          mov [ebp-04], 00000000
:00461E36 837D0800                cmp dword ptr [ebp+08], 00000000
:00461E3A 7421                    je 00461E5D
:00461E3C 8B4D14                  mov ecx, dword ptr [ebp+14]
:00461E3F 6BC922                  imul ecx, 00000022
:00461E42 81C1D0474900            add ecx, 004947D0
:00461E48 E8B338FAFF              call 00405700
:00461E4D 25FF000000              and eax, 000000FF
:00461E52 6BC00A                  imul eax, 0000000A
:00461E55 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461E58 03C8                    add ecx, eax
:00461E5A 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461E3A(C)
|
:00461E5D 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00461E61 7421                    je 00461E84
:00461E63 8B4D18                  mov ecx, dword ptr [ebp+18]
:00461E66 6BC922                  imul ecx, 00000022
:00461E69 81C1D0474900            add ecx, 004947D0
:00461E6F E88C38FAFF              call 00405700
:00461E74 25FF000000              and eax, 000000FF
:00461E79 6BC00A                  imul eax, 0000000A
:00461E7C 8B55FC                  mov edx, dword ptr [ebp-04]
:00461E7F 03D0                    add edx, eax
:00461E81 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461E61(C)
|
:00461E84 837D1000                cmp dword ptr [ebp+10], 00000000
:00461E88 7421                    je 00461EAB
:00461E8A 8B4D1C                  mov ecx, dword ptr [ebp+1C]
:00461E8D 6BC922                  imul ecx, 00000022
:00461E90 81C1D0474900            add ecx, 004947D0
:00461E96 E86538FAFF              call 00405700
:00461E9B 25FF000000              and eax, 000000FF
:00461EA0 6BC00A                  imul eax, 0000000A
:00461EA3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461EA6 03C8                    add ecx, eax
:00461EA8 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461E88(C)
|
:00461EAB 8B45FC                  mov eax, dword ptr [ebp-04]
:00461EAE 8BE5                    mov esp, ebp
:00461EB0 5D                      pop ebp
:00461EB1 C3                      ret



* Referenced by a CALL at Address:
|:00461D55   
|
:00461EB2 55                      push ebp
:00461EB3 8BEC                    mov ebp, esp
:00461EB5 B978294B00              mov ecx, 004B2978
:00461EBA E8BA26FAFF              call 00404579
:00461EBF 25FF000000              and eax, 000000FF
:00461EC4 B980000000              mov ecx, 00000080
:00461EC9 2BC8                    sub ecx, eax
:00461ECB 8BC1                    mov eax, ecx
:00461ECD 5D                      pop ebp
:00461ECE C3                      ret



* Referenced by a CALL at Addresses:
|:00461A59   , :00461AAF   , :00461B05   
|
:00461ECF 55                      push ebp
:00461ED0 8BEC                    mov ebp, esp
:00461ED2 51                      push ecx
:00461ED3 8B4508                  mov eax, dword ptr [ebp+08]
:00461ED6 50                      push eax
:00461ED7 6A00                    push 00000000
:00461ED9 E83F020000              call 0046211D
:00461EDE 83C408                  add esp, 00000008
:00461EE1 85C0                    test eax, eax
:00461EE3 740A                    je 00461EEF
:00461EE5 B801000000              mov eax, 00000001
:00461EEA E92A020000              jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00461EE3(C)
|
:00461EEF B978294B00              mov ecx, 004B2978
:00461EF4 E867DFFAFF              call 0040FE60
:00461EF9 8845FC                  mov byte ptr [ebp-04], al
:00461EFC 8A4DFC                  mov cl, byte ptr [ebp-04]
:00461EFF 80C102                  add cl, 02
:00461F02 884DFC                  mov byte ptr [ebp-04], cl
:00461F05 8B55FC                  mov edx, dword ptr [ebp-04]
:00461F08 81E2FF000000            and edx, 000000FF
:00461F0E 83FA0A                  cmp edx, 0000000A
:00461F11 7C1C                    jl 00461F2F
:00461F13 8B4508                  mov eax, dword ptr [ebp+08]
:00461F16 50                      push eax
:00461F17 6A01                    push 00000001
:00461F19 E8FF010000              call 0046211D
:00461F1E 83C408                  add esp, 00000008
:00461F21 85C0                    test eax, eax
:00461F23 740A                    je 00461F2F
:00461F25 B801000000              mov eax, 00000001
:00461F2A E9EA010000              jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461F11(C), :00461F23(C)
|
:00461F2F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461F32 81E1FF000000            and ecx, 000000FF
:00461F38 83F909                  cmp ecx, 00000009
:00461F3B 7C1C                    jl 00461F59
:00461F3D 8B5508                  mov edx, dword ptr [ebp+08]
:00461F40 52                      push edx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00461F41 6A02                    push 00000002
:00461F43 E8D5010000              call 0046211D
:00461F48 83C408                  add esp, 00000008
:00461F4B 85C0                    test eax, eax
:00461F4D 740A                    je 00461F59
:00461F4F B801000000              mov eax, 00000001
:00461F54 E9C0010000              jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461F3B(C), :00461F4D(C)
|
:00461F59 8B45FC                  mov eax, dword ptr [ebp-04]
:00461F5C 25FF000000              and eax, 000000FF
:00461F61 83F80D                  cmp eax, 0000000D
:00461F64 7C1C                    jl 00461F82
:00461F66 8B4D08                  mov ecx, dword ptr [ebp+08]
:00461F69 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00461F6A 6A03                    push 00000003
:00461F6C E8AC010000              call 0046211D
:00461F71 83C408                  add esp, 00000008
:00461F74 85C0                    test eax, eax
:00461F76 740A                    je 00461F82
:00461F78 B801000000              mov eax, 00000001
:00461F7D E997010000              jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461F64(C), :00461F76(C)
|
:00461F82 8B55FC                  mov edx, dword ptr [ebp-04]
:00461F85 81E2FF000000            and edx, 000000FF
:00461F8B 83FA0F                  cmp edx, 0000000F
:00461F8E 7C1C                    jl 00461FAC
:00461F90 8B4508                  mov eax, dword ptr [ebp+08]
:00461F93 50                      push eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00461F94 6A06                    push 00000006
:00461F96 E882010000              call 0046211D
:00461F9B 83C408                  add esp, 00000008
:00461F9E 85C0                    test eax, eax
:00461FA0 740A                    je 00461FAC
:00461FA2 B801000000              mov eax, 00000001
:00461FA7 E96D010000              jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461F8E(C), :00461FA0(C)
|
:00461FAC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00461FAF 81E1FF000000            and ecx, 000000FF
:00461FB5 83F911                  cmp ecx, 00000011
:00461FB8 7C1C                    jl 00461FD6
:00461FBA 8B5508                  mov edx, dword ptr [ebp+08]
:00461FBD 52                      push edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00461FBE 6A04                    push 00000004
:00461FC0 E858010000              call 0046211D
:00461FC5 83C408                  add esp, 00000008
:00461FC8 85C0                    test eax, eax
:00461FCA 740A                    je 00461FD6
:00461FCC B801000000              mov eax, 00000001
:00461FD1 E943010000              jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461FB8(C), :00461FCA(C)
|
:00461FD6 8B45FC                  mov eax, dword ptr [ebp-04]
:00461FD9 25FF000000              and eax, 000000FF
:00461FDE 83F812                  cmp eax, 00000012
:00461FE1 7C1C                    jl 00461FFF
:00461FE3 8B4D08                  mov ecx, dword ptr [ebp+08]
:00461FE6 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00461FE7 6A05                    push 00000005
:00461FE9 E82F010000              call 0046211D
:00461FEE 83C408                  add esp, 00000008
:00461FF1 85C0                    test eax, eax
:00461FF3 740A                    je 00461FFF
:00461FF5 B801000000              mov eax, 00000001
:00461FFA E91A010000              jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461FE1(C), :00461FF3(C)
|
:00461FFF 8B55FC                  mov edx, dword ptr [ebp-04]
:00462002 81E2FF000000            and edx, 000000FF
:00462008 83FA16                  cmp edx, 00000016
:0046200B 7C1C                    jl 00462029
:0046200D 8B4508                  mov eax, dword ptr [ebp+08]
:00462010 50                      push eax

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00462011 6A07                    push 00000007
:00462013 E805010000              call 0046211D
:00462018 83C408                  add esp, 00000008
:0046201B 85C0                    test eax, eax
:0046201D 740A                    je 00462029
:0046201F B801000000              mov eax, 00000001
:00462024 E9F0000000              jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046200B(C), :0046201D(C)
|
:00462029 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046202C 81E1FF000000            and ecx, 000000FF
:00462032 83F914                  cmp ecx, 00000014
:00462035 7C1C                    jl 00462053
:00462037 8B5508                  mov edx, dword ptr [ebp+08]
:0046203A 52                      push edx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046203B 6A08                    push 00000008
:0046203D E8DB000000              call 0046211D
:00462042 83C408                  add esp, 00000008
:00462045 85C0                    test eax, eax
:00462047 740A                    je 00462053
:00462049 B801000000              mov eax, 00000001
:0046204E E9C6000000              jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462035(C), :00462047(C)
|
:00462053 8B45FC                  mov eax, dword ptr [ebp-04]
:00462056 25FF000000              and eax, 000000FF
:0046205B 83F819                  cmp eax, 00000019
:0046205E 7C1C                    jl 0046207C
:00462060 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462063 51                      push ecx

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00462064 6A09                    push 00000009
:00462066 E8B2000000              call 0046211D
:0046206B 83C408                  add esp, 00000008
:0046206E 85C0                    test eax, eax
:00462070 740A                    je 0046207C
:00462072 B801000000              mov eax, 00000001
:00462077 E99D000000              jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046205E(C), :00462070(C)
|
:0046207C 8B55FC                  mov edx, dword ptr [ebp-04]
:0046207F 81E2FF000000            and edx, 000000FF
:00462085 83FA1A                  cmp edx, 0000001A
:00462088 7C19                    jl 004620A3
:0046208A 8B4508                  mov eax, dword ptr [ebp+08]
:0046208D 50                      push eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046208E 6A0A                    push 0000000A
:00462090 E888000000              call 0046211D
:00462095 83C408                  add esp, 00000008
:00462098 85C0                    test eax, eax
:0046209A 7407                    je 004620A3
:0046209C B801000000              mov eax, 00000001
:004620A1 EB76                    jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462088(C), :0046209A(C)
|
:004620A3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004620A6 81E1FF000000            and ecx, 000000FF
:004620AC 83F91B                  cmp ecx, 0000001B
:004620AF 7C19                    jl 004620CA
:004620B1 8B5508                  mov edx, dword ptr [ebp+08]
:004620B4 52                      push edx
:004620B5 6A0B                    push 0000000B
:004620B7 E861000000              call 0046211D
:004620BC 83C408                  add esp, 00000008
:004620BF 85C0                    test eax, eax
:004620C1 7407                    je 004620CA
:004620C3 B801000000              mov eax, 00000001
:004620C8 EB4F                    jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004620AF(C), :004620C1(C)
|
:004620CA 8B45FC                  mov eax, dword ptr [ebp-04]
:004620CD 25FF000000              and eax, 000000FF
:004620D2 83F80C                  cmp eax, 0000000C
:004620D5 7519                    jne 004620F0
:004620D7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004620DA 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004620DB 6A03                    push 00000003
:004620DD E8F0000000              call 004621D2
:004620E2 83C408                  add esp, 00000008
:004620E5 85C0                    test eax, eax
:004620E7 7407                    je 004620F0
:004620E9 B801000000              mov eax, 00000001
:004620EE EB29                    jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004620D5(C), :004620E7(C)
|
:004620F0 8B55FC                  mov edx, dword ptr [ebp-04]
:004620F3 81E2FF000000            and edx, 000000FF
:004620F9 83FA0E                  cmp edx, 0000000E
:004620FC 7519                    jne 00462117
:004620FE 8B4508                  mov eax, dword ptr [ebp+08]
:00462101 50                      push eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00462102 6A06                    push 00000006
:00462104 E8C9000000              call 004621D2
:00462109 83C408                  add esp, 00000008
:0046210C 85C0                    test eax, eax
:0046210E 7407                    je 00462117
:00462110 B801000000              mov eax, 00000001
:00462115 EB02                    jmp 00462119

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004620FC(C), :0046210E(C)
|
:00462117 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00461EEA(U), :00461F2A(U), :00461F54(U), :00461F7D(U), :00461FA7(U)
|:00461FD1(U), :00461FFA(U), :00462024(U), :0046204E(U), :00462077(U)
|:004620A1(U), :004620C8(U), :004620EE(U), :00462115(U)
|
:00462119 8BE5                    mov esp, ebp
:0046211B 5D                      pop ebp
:0046211C C3                      ret



* Referenced by a CALL at Addresses:
|:00461ED9   , :00461F19   , :00461F43   , :00461F6C   , :00461F96   
|:00461FC0   , :00461FE9   , :00462013   , :0046203D   , :00462066   
|:00462090   , :004620B7   
|
:0046211D 55                      push ebp
:0046211E 8BEC                    mov ebp, esp
:00462120 83EC10                  sub esp, 00000010
:00462123 C745FC00000000          mov [ebp-04], 00000000
:0046212A EB09                    jmp 00462135

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004621C7(U)
|
:0046212C 8B45FC                  mov eax, dword ptr [ebp-04]
:0046212F 83C001                  add eax, 00000001
:00462132 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046212A(U)
|
:00462135 837DFC10                cmp dword ptr [ebp-04], 00000010
:00462139 0F8D8D000000            jnl 004621CC
:0046213F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462142 51                      push ecx
:00462143 6A00                    push 00000000
:00462145 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462148 81E1FF000000            and ecx, 000000FF
:0046214E 69C9EC000000            imul ecx, 000000EC
:00462154 81C150D24A00            add ecx, 004AD250
:0046215A E8F175FBFF              call 00419750
:0046215F 8945F4                  mov dword ptr [ebp-0C], eax
:00462162 8B55FC                  mov edx, dword ptr [ebp-04]
:00462165 52                      push edx
:00462166 6A01                    push 00000001
:00462168 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046216B 81E1FF000000            and ecx, 000000FF
:00462171 69C9EC000000            imul ecx, 000000EC
:00462177 81C150D24A00            add ecx, 004AD250
:0046217D E8CE75FBFF              call 00419750
:00462182 8945F0                  mov dword ptr [ebp-10], eax
:00462185 8B45FC                  mov eax, dword ptr [ebp-04]
:00462188 50                      push eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00462189 6A02                    push 00000002
:0046218B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046218E 81E1FF000000            and ecx, 000000FF
:00462194 69C9EC000000            imul ecx, 000000EC
:0046219A 81C150D24A00            add ecx, 004AD250
:004621A0 E8AB75FBFF              call 00419750
:004621A5 8945F8                  mov dword ptr [ebp-08], eax
:004621A8 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004621AB 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:004621AE 7410                    je 004621C0
:004621B0 8B550C                  mov edx, dword ptr [ebp+0C]
:004621B3 3B55F0                  cmp edx, dword ptr [ebp-10]
:004621B6 7408                    je 004621C0
:004621B8 8B450C                  mov eax, dword ptr [ebp+0C]
:004621BB 3B45F8                  cmp eax, dword ptr [ebp-08]
:004621BE 7507                    jne 004621C7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004621AE(C), :004621B6(C)
|
:004621C0 B801000000              mov eax, 00000001
:004621C5 EB07                    jmp 004621CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004621BE(C)
|
:004621C7 E960FFFFFF              jmp 0046212C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462139(C)
|
:004621CC 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004621C5(U)
|
:004621CE 8BE5                    mov esp, ebp
:004621D0 5D                      pop ebp
:004621D1 C3                      ret



* Referenced by a CALL at Addresses:
|:004620DD   , :00462104   
|
:004621D2 55                      push ebp
:004621D3 8BEC                    mov ebp, esp
:004621D5 83EC0C                  sub esp, 0000000C
:004621D8 C745FC00000000          mov [ebp-04], 00000000
:004621DF EB09                    jmp 004621EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046224D(U)
|
:004621E1 8B45FC                  mov eax, dword ptr [ebp-04]
:004621E4 83C001                  add eax, 00000001
:004621E7 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004621DF(U)
|
:004621EA 837DFC10                cmp dword ptr [ebp-04], 00000010
:004621EE 7D5F                    jge 0046224F
:004621F0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004621F3 51                      push ecx
:004621F4 6A00                    push 00000000
:004621F6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004621F9 81E1FF000000            and ecx, 000000FF
:004621FF 69C9EC000000            imul ecx, 000000EC
:00462205 81C150D24A00            add ecx, 004AD250
:0046220B E84075FBFF              call 00419750
:00462210 8945F8                  mov dword ptr [ebp-08], eax
:00462213 8B55FC                  mov edx, dword ptr [ebp-04]
:00462216 52                      push edx
:00462217 6A01                    push 00000001
:00462219 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046221C 81E1FF000000            and ecx, 000000FF
:00462222 69C9EC000000            imul ecx, 000000EC
:00462228 81C150D24A00            add ecx, 004AD250
:0046222E E81D75FBFF              call 00419750
:00462233 8945F4                  mov dword ptr [ebp-0C], eax
:00462236 8B450C                  mov eax, dword ptr [ebp+0C]
:00462239 3B45F8                  cmp eax, dword ptr [ebp-08]
:0046223C 7408                    je 00462246
:0046223E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462241 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:00462244 7507                    jne 0046224D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046223C(C)
|
:00462246 B801000000              mov eax, 00000001
:0046224B EB04                    jmp 00462251

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462244(C)
|
:0046224D EB92                    jmp 004621E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004621EE(C)
|
:0046224F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046224B(U)
|
:00462251 8BE5                    mov esp, ebp
:00462253 5D                      pop ebp
:00462254 C3                      ret



* Referenced by a CALL at Address:
|:00461624   
|
:00462255 55                      push ebp
:00462256 8BEC                    mov ebp, esp
:00462258 83EC0C                  sub esp, 0000000C
:0046225B 53                      push ebx
:0046225C C745FC00000000          mov [ebp-04], 00000000
:00462263 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462266 6BC950                  imul ecx, 00000050
:00462269 81C1787F4900            add ecx, 00497F78
:0046226F E82CDCFAFF              call 0040FEA0
:00462274 25FF000000              and eax, 000000FF
:00462279 83F863                  cmp eax, 00000063
:0046227C 0F8C87000000            jl 00462309
:00462282 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462285 6BC950                  imul ecx, 00000050
:00462288 81C1787F4900            add ecx, 00497F78
:0046228E E84DBCFCFF              call 0042DEE0
:00462293 8AD8                    mov bl, al
:00462295 81E3FF000000            and ebx, 000000FF
:0046229B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046229E 81E1FF000000            and ecx, 000000FF
:004622A4 6BC922                  imul ecx, 00000022
:004622A7 81C1D0474900            add ecx, 004947D0
:004622AD E8AE0FFAFF              call 00403260
:004622B2 25FF000000              and eax, 000000FF
:004622B7 03D8                    add ebx, eax
:004622B9 83FB64                  cmp ebx, 00000064
:004622BC 7D3C                    jge 004622FA
:004622BE 8B4D08                  mov ecx, dword ptr [ebp+08]
:004622C1 6BC950                  imul ecx, 00000050
:004622C4 81C1787F4900            add ecx, 00497F78
:004622CA E811BCFCFF              call 0042DEE0
:004622CF 8AD8                    mov bl, al
:004622D1 81E3FF000000            and ebx, 000000FF
:004622D7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004622DA 81E1FF000000            and ecx, 000000FF
:004622E0 6BC922                  imul ecx, 00000022
:004622E3 81C1D0474900            add ecx, 004947D0
:004622E9 E8720FFAFF              call 00403260
:004622EE 25FF000000              and eax, 000000FF
:004622F3 03D8                    add ebx, eax
:004622F5 895DF8                  mov dword ptr [ebp-08], ebx
:004622F8 EB07                    jmp 00462301

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004622BC(C)
|
:004622FA C745F864000000          mov [ebp-08], 00000064

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004622F8(U)
|
:00462301 8B45F8                  mov eax, dword ptr [ebp-08]
:00462304 8945FC                  mov dword ptr [ebp-04], eax
:00462307 EB65                    jmp 0046236E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046227C(C)
|
:00462309 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046230C 81E1FF000000            and ecx, 000000FF
:00462312 6BC922                  imul ecx, 00000022
:00462315 81C1D0474900            add ecx, 004947D0
:0046231B E8400FFAFF              call 00403260
:00462320 25FF000000              and eax, 000000FF
:00462325 83F864                  cmp eax, 00000064
:00462328 7D21                    jge 0046234B
:0046232A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046232D 81E1FF000000            and ecx, 000000FF
:00462333 6BC922                  imul ecx, 00000022
:00462336 81C1D0474900            add ecx, 004947D0
:0046233C E81F0FFAFF              call 00403260
:00462341 25FF000000              and eax, 000000FF
:00462346 8945F4                  mov dword ptr [ebp-0C], eax
:00462349 EB07                    jmp 00462352

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462328(C)
|
:0046234B C745F464000000          mov [ebp-0C], 00000064

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462349(U)
|
:00462352 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462355 6BC950                  imul ecx, 00000050
:00462358 81C1787F4900            add ecx, 00497F78
:0046235E E87DBBFCFF              call 0042DEE0
:00462363 25FF000000              and eax, 000000FF
:00462368 0345F4                  add eax, dword ptr [ebp-0C]
:0046236B 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462307(U)
|
:0046236E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462371 51                      push ecx
:00462372 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462375 6BC950                  imul ecx, 00000050
:00462378 81C1787F4900            add ecx, 00497F78
:0046237E E8CB03FAFF              call 0040274E
:00462383 5B                      pop ebx
:00462384 8BE5                    mov esp, ebp
:00462386 5D                      pop ebp
:00462387 C3                      ret


:00462388 55                      push ebp
:00462389 8BEC                    mov ebp, esp
:0046238B 83EC08                  sub esp, 00000008
:0046238E 8B450C                  mov eax, dword ptr [ebp+0C]
:00462391 8945F8                  mov dword ptr [ebp-08], eax
:00462394 837DF810                cmp dword ptr [ebp-08], 00000010
:00462398 7719                    ja 004623B3
:0046239A 837DF810                cmp dword ptr [ebp-08], 00000010
:0046239E 0F84CD000000            je 00462471
:004623A4 837DF802                cmp dword ptr [ebp-08], 00000002
:004623A8 0F849C000000            je 0046244A
:004623AE E965010000              jmp 00462518

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462398(C)
|
:004623B3 837DF84E                cmp dword ptr [ebp-08], 0000004E
:004623B7 0F84F1000000            je 004624AE
:004623BD 817DF810010000          cmp dword ptr [ebp-08], 00000110
:004623C4 7412                    je 004623D8
:004623C6 817DF811010000          cmp dword ptr [ebp-08], 00000111
:004623CD 0F84AF000000            je 00462482
:004623D3 E940010000              jmp 00462518

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004623C4(C)
|
:004623D8 8B4D14                  mov ecx, dword ptr [ebp+14]
:004623DB 890DDC4F4B00            mov dword ptr [004B4FDC], ecx
:004623E1 6A40                    push 00000040
:004623E3 6A00                    push 00000000
:004623E5 6860AE4800              push 0048AE60
:004623EA E8E1D60000              call 0046FAD0
:004623EF 83C40C                  add esp, 0000000C
:004623F2 6A40                    push 00000040
:004623F4 6A00                    push 00000000
:004623F6 68A0AE4800              push 0048AEA0
:004623FB E8D0D60000              call 0046FAD0
:00462400 83C40C                  add esp, 0000000C
:00462403 8B15DC4F4B00            mov edx, dword ptr [004B4FDC]
:00462409 52                      push edx
:0046240A A070534B00              mov al, byte ptr [004B5370]
:0046240F 50                      push eax
:00462410 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462413 51                      push ecx
:00462414 E84F170000              call 00463B68
:00462419 83C40C                  add esp, 0000000C
:0046241C 3DFFFF0000              cmp eax, 0000FFFF
:00462421 750C                    jne 0046242F
:00462423 6A00                    push 00000000
:00462425 8B5508                  mov edx, dword ptr [ebp+08]
:00462428 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00462429 FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462421(C)
|
:0046242F 683C050000              push 0000053C
:00462434 8B4508                  mov eax, dword ptr [ebp+08]
:00462437 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462438 FF1510D64B00            Call dword ptr [004BD610]
:0046243E 50                      push eax

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:0046243F FF1500D64B00            Call dword ptr [004BD600]
:00462445 E9CE000000              jmp 00462518

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004623A8(C)
|
:0046244A 6A40                    push 00000040
:0046244C 6A00                    push 00000000
:0046244E 6860AE4800              push 0048AE60
:00462453 E878D60000              call 0046FAD0
:00462458 83C40C                  add esp, 0000000C
:0046245B 6A40                    push 00000040
:0046245D 6A00                    push 00000000
:0046245F 68A0AE4800              push 0048AEA0
:00462464 E867D60000              call 0046FAD0
:00462469 83C40C                  add esp, 0000000C
:0046246C E9A7000000              jmp 00462518

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046239E(C)
|
:00462471 6A00                    push 00000000
:00462473 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462476 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00462477 FF15D8D54B00            Call dword ptr [004BD5D8]
:0046247D E996000000              jmp 00462518

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004623CD(C)
|
:00462482 8B15DC4F4B00            mov edx, dword ptr [004B4FDC]
:00462488 52                      push edx
:00462489 6870534B00              push 004B5370
:0046248E 668B4510                mov ax, word ptr [ebp+10]
:00462492 50                      push eax
:00462493 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462496 C1E910                  shr ecx, 10
:00462499 81E1FFFF0000            and ecx, 0000FFFF
:0046249F 51                      push ecx
:004624A0 8B5508                  mov edx, dword ptr [ebp+08]
:004624A3 52                      push edx
:004624A4 E8640A0000              call 00462F0D
:004624A9 83C414                  add esp, 00000014
:004624AC EB6A                    jmp 00462518

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004623B7(C)
|
:004624AE 8B4514                  mov eax, dword ptr [ebp+14]
:004624B1 8B4804                  mov ecx, dword ptr [eax+04]
:004624B4 894DFC                  mov dword ptr [ebp-04], ecx
:004624B7 817DFC7B040000          cmp dword ptr [ebp-04], 0000047B
:004624BE 7409                    je 004624C9
:004624C0 817DFC7C040000          cmp dword ptr [ebp-04], 0000047C
:004624C7 7521                    jne 004624EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004624BE(C)
|
:004624C9 8B15DC4F4B00            mov edx, dword ptr [004B4FDC]
:004624CF 52                      push edx
:004624D0 8B4514                  mov eax, dword ptr [ebp+14]
:004624D3 50                      push eax
:004624D4 8B4D10                  mov ecx, dword ptr [ebp+10]
:004624D7 51                      push ecx
:004624D8 8B550C                  mov edx, dword ptr [ebp+0C]
:004624DB 52                      push edx
:004624DC 8B4508                  mov eax, dword ptr [ebp+08]
:004624DF 50                      push eax
:004624E0 E83B000000              call 00462520
:004624E5 83C414                  add esp, 00000014
:004624E8 EB30                    jmp 0046251A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004624C7(C)
|
:004624EA 817DFC3C050000          cmp dword ptr [ebp-04], 0000053C
:004624F1 7521                    jne 00462514
:004624F3 8B0DDC4F4B00            mov ecx, dword ptr [004B4FDC]
:004624F9 51                      push ecx
:004624FA 8B5514                  mov edx, dword ptr [ebp+14]
:004624FD 52                      push edx
:004624FE 8B4510                  mov eax, dword ptr [ebp+10]
:00462501 50                      push eax
:00462502 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462505 51                      push ecx
:00462506 8B5508                  mov edx, dword ptr [ebp+08]
:00462509 52                      push edx
:0046250A E80E040000              call 0046291D
:0046250F 83C414                  add esp, 00000014
:00462512 EB06                    jmp 0046251A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004624F1(C)
|
:00462514 33C0                    xor eax, eax
:00462516 EB02                    jmp 0046251A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004623AE(U), :004623D3(U), :00462445(U), :0046246C(U), :0046247D(U)
|:004624AC(U)
|
:00462518 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004624E8(U), :00462512(U), :00462516(U)
|
:0046251A 8BE5                    mov esp, ebp
:0046251C 5D                      pop ebp
:0046251D C21000                  ret 0010



* Referenced by a CALL at Address:
|:004624E0   
|
:00462520 55                      push ebp
:00462521 8BEC                    mov ebp, esp
:00462523 83EC28                  sub esp, 00000028
:00462526 8B4514                  mov eax, dword ptr [ebp+14]
:00462529 8945F8                  mov dword ptr [ebp-08], eax
:0046252C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046252F 8B5104                  mov edx, dword ptr [ecx+04]
:00462532 8955FC                  mov dword ptr [ebp-04], edx
:00462535 8B45F8                  mov eax, dword ptr [ebp-08]
:00462538 8B4808                  mov ecx, dword ptr [eax+08]
:0046253B 894DD8                  mov dword ptr [ebp-28], ecx
:0046253E 8B55D8                  mov edx, dword ptr [ebp-28]
:00462541 83C26F                  add edx, 0000006F
:00462544 8955D8                  mov dword ptr [ebp-28], edx
:00462547 837DD86D                cmp dword ptr [ebp-28], 0000006D
:0046254B 0F8713020000            ja 00462764
:00462551 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00462554 33C0                    xor eax, eax
:00462556 8A81BF274600            mov al, byte ptr [ecx+004627BF]
:0046255C FF2485A3274600          jmp dword ptr [4*eax+004627A3]
:00462563 817DFC7B040000          cmp dword ptr [ebp-04], 0000047B
:0046256A 7539                    jne 004625A5
:0046256C 6A00                    push 00000000
:0046256E 6A00                    push 00000000
:00462570 6804100000              push 00001004
:00462575 687C040000              push 0000047C
:0046257A 8B5508                  mov edx, dword ptr [ebp+08]
:0046257D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046257E FF1510D64B00            Call dword ptr [004BD610]
:00462584 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462585 FF1504D64B00            Call dword ptr [004BD604]
:0046258B 85C0                    test eax, eax
:0046258D 7E16                    jle 004625A5
:0046258F 6A01                    push 00000001
:00462591 8B4508                  mov eax, dword ptr [ebp+08]
:00462594 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00462595 FF15D8D54B00            Call dword ptr [004BD5D8]
:0046259B B801000000              mov eax, 00000001
:004625A0 E9FA010000              jmp 0046279F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046256A(C), :0046258D(C)
|
:004625A5 E9F3010000              jmp 0046279D
:004625AA 817DFC7B040000          cmp dword ptr [ebp-04], 0000047B
:004625B1 7409                    je 004625BC
:004625B3 817DFC7C040000          cmp dword ptr [ebp-04], 0000047C
:004625BA 7514                    jne 004625D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004625B1(C)
|
:004625BC 8B4D18                  mov ecx, dword ptr [ebp+18]
:004625BF 51                      push ecx
:004625C0 8B55F8                  mov edx, dword ptr [ebp-08]
:004625C3 52                      push edx
:004625C4 8B4508                  mov eax, dword ptr [ebp+08]
:004625C7 50                      push eax
:004625C8 E82A080000              call 00462DF7
:004625CD 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004625BA(C)
|
:004625D0 817DFC7B040000          cmp dword ptr [ebp-04], 0000047B
:004625D7 0F85EC000000            jne 004626C9
:004625DD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004625E0 8B11                    mov edx, dword ptr [ecx]
:004625E2 52                      push edx
:004625E3 E8DB6AFBFF              call 004190C3
:004625E8 83C404                  add esp, 00000004
:004625EB 8945F0                  mov dword ptr [ebp-10], eax
:004625EE 837DF000                cmp dword ptr [ebp-10], 00000000
:004625F2 7D7B                    jge 0046266F
:004625F4 6849050000              push 00000549
:004625F9 8B4508                  mov eax, dword ptr [ebp+08]
:004625FC 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004625FD FF1510D64B00            Call dword ptr [004BD610]
:00462603 50                      push eax
:00462604 E84C0DFBFF              call 00413355
:00462609 83C404                  add esp, 00000004
:0046260C 50                      push eax
:0046260D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462610 51                      push ecx
:00462611 E8F40C0000              call 0046330A
:00462616 83C408                  add esp, 00000008
:00462619 68FF000000              push 000000FF
:0046261E 8B4D18                  mov ecx, dword ptr [ebp+18]
:00462621 E8CA3F0000              call 004665F0
:00462626 8B55F8                  mov edx, dword ptr [ebp-08]
:00462629 8B02                    mov eax, dword ptr [edx]
:0046262B 50                      push eax
:0046262C E80204FBFF              call 00412A33
:00462631 83C404                  add esp, 00000004
:00462634 6A00                    push 00000000
:00462636 6A00                    push 00000000
:00462638 6809100000              push 00001009
:0046263D 687C040000              push 0000047C
:00462642 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462645 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462646 FF1510D64B00            Call dword ptr [004BD610]
:0046264C 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046264D FF1504D64B00            Call dword ptr [004BD604]
:00462653 6A00                    push 00000000
:00462655 687C040000              push 0000047C
:0046265A 8B5508                  mov edx, dword ptr [ebp+08]
:0046265D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046265E FF1510D64B00            Call dword ptr [004BD610]
:00462664 50                      push eax
:00462665 E8C3010000              call 0046282D
:0046266A 83C408                  add esp, 00000008
:0046266D EB5A                    jmp 004626C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004625F2(C)
|
:0046266F 0FBE05AC194800          movsx eax, byte ptr [004819AC]
:00462676 3945F0                  cmp dword ptr [ebp-10], eax
:00462679 754E                    jne 004626C9
:0046267B 6849050000              push 00000549
:00462680 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462683 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462684 FF1510D64B00            Call dword ptr [004BD610]
:0046268A 50                      push eax
:0046268B E8C50CFBFF              call 00413355
:00462690 83C404                  add esp, 00000004
:00462693 8945E8                  mov dword ptr [ebp-18], eax
:00462696 8B55F0                  mov edx, dword ptr [ebp-10]
:00462699 52                      push edx
:0046269A 687B040000              push 0000047B
:0046269F 8B4508                  mov eax, dword ptr [ebp+08]
:004626A2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004626A3 FF1510D64B00            Call dword ptr [004BD610]
:004626A9 50                      push eax
:004626AA E8AD6BFBFF              call 0041925C
:004626AF 83C408                  add esp, 00000008
:004626B2 8945EC                  mov dword ptr [ebp-14], eax
:004626B5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004626B8 51                      push ecx
:004626B9 8B55E8                  mov edx, dword ptr [ebp-18]
:004626BC 52                      push edx
:004626BD 8B4508                  mov eax, dword ptr [ebp+08]
:004626C0 50                      push eax
:004626C1 E85D0F0000              call 00463623
:004626C6 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004625D7(C), :0046266D(U), :00462679(C)
|
:004626C9 E9CF000000              jmp 0046279D
:004626CE 8B4D14                  mov ecx, dword ptr [ebp+14]
:004626D1 894DE4                  mov dword ptr [ebp-1C], ecx
:004626D4 8B55E4                  mov edx, dword ptr [ebp-1C]
:004626D7 8A420C                  mov al, byte ptr [edx+0C]
:004626DA A2AC194800              mov byte ptr [004819AC], al
:004626DF 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004626E2 8B5114                  mov edx, dword ptr [ecx+14]
:004626E5 83E202                  and edx, 00000002
:004626E8 85D2                    test edx, edx
:004626EA 7476                    je 00462762
:004626EC 6849050000              push 00000549
:004626F1 8B4508                  mov eax, dword ptr [ebp+08]
:004626F4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004626F5 FF1510D64B00            Call dword ptr [004BD610]
:004626FB 50                      push eax
:004626FC E8540CFBFF              call 00413355
:00462701 83C404                  add esp, 00000004
:00462704 8945E0                  mov dword ptr [ebp-20], eax
:00462707 817DFC7B040000          cmp dword ptr [ebp-04], 0000047B
:0046270E 7542                    jne 00462752
:00462710 8B4D18                  mov ecx, dword ptr [ebp+18]
:00462713 51                      push ecx
:00462714 8B5514                  mov edx, dword ptr [ebp+14]
:00462717 52                      push edx
:00462718 8B4508                  mov eax, dword ptr [ebp+08]
:0046271B 50                      push eax
:0046271C E80D070000              call 00462E2E
:00462721 83C40C                  add esp, 0000000C
:00462724 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00462727 8B510C                  mov edx, dword ptr [ecx+0C]
:0046272A 52                      push edx
:0046272B 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046272E 8B08                    mov ecx, dword ptr [eax]
:00462730 51                      push ecx
:00462731 E8266BFBFF              call 0041925C
:00462736 83C408                  add esp, 00000008
:00462739 8945DC                  mov dword ptr [ebp-24], eax
:0046273C 8B55DC                  mov edx, dword ptr [ebp-24]
:0046273F 52                      push edx
:00462740 8B45E0                  mov eax, dword ptr [ebp-20]
:00462743 50                      push eax
:00462744 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462747 51                      push ecx
:00462748 E8D60E0000              call 00463623
:0046274D 83C40C                  add esp, 0000000C
:00462750 EB10                    jmp 00462762

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046270E(C)
|
:00462752 8B55E0                  mov edx, dword ptr [ebp-20]
:00462755 52                      push edx
:00462756 8B4508                  mov eax, dword ptr [ebp+08]
:00462759 50                      push eax
:0046275A E8AB0B0000              call 0046330A
:0046275F 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004626EA(C), :00462750(U)
|
:00462762 EB39                    jmp 0046279D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046254B(C)
|
:00462764 6A00                    push 00000000
:00462766 6A00                    push 00000000
:00462768 68F0000000              push 000000F0
:0046276D 6878040000              push 00000478
:00462772 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462775 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00462776 FF15D4D54B00            Call dword ptr [004BD5D4]
:0046277C 8945F4                  mov dword ptr [ebp-0C], eax
:0046277F 8B55F4                  mov edx, dword ptr [ebp-0C]
:00462782 52                      push edx
:00462783 8B4514                  mov eax, dword ptr [ebp+14]
:00462786 50                      push eax
:00462787 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046278A 51                      push ecx
:0046278B 8B550C                  mov edx, dword ptr [ebp+0C]
:0046278E 52                      push edx
:0046278F 8B4508                  mov eax, dword ptr [ebp+08]
:00462792 50                      push eax
:00462793 E8905DFBFF              call 00418528
:00462798 83C414                  add esp, 00000014
:0046279B EB02                    jmp 0046279F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004625A5(U), :004626C9(U), :00462762(U)
|
:0046279D 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004625A0(U), :0046279B(U)
|
:0046279F 8BE5                    mov esp, ebp
:004627A1 5D                      pop ebp
:004627A2 C3                      ret



:004627A3 AA254600                DWORD 004625AA
:004627A7 D0254600                DWORD 004625D0
:004627AB CE264600                DWORD 004626CE
:004627AF AA254600                DWORD 004625AA
:004627B3 63254600                DWORD 00462563
:004627B7 D0254600                DWORD 004625D0
:004627BB 64274600                DWORD 00462764


:004627BF 0006                    add byte ptr [esi], al
:004627C1 0106                    add dword ptr [esi], eax
:004627C3 06                      push es
:004627C4 06                      push es
:004627C5 06                      push es
:004627C6 06                      push es
:004627C7 06                      push es
:004627C8 06                      push es
:004627C9 0206                    add al, byte ptr [esi]
:004627CB 06                      push es
:004627CC 06                      push es
:004627CD 06                      push es
:004627CE 06                      push es
:004627CF 06                      push es
:004627D0 06                      push es
:004627D1 06                      push es
:004627D2 06                      push es
:004627D3 06                      push es
:004627D4 06                      push es
:004627D5 06                      push es
:004627D6 06                      push es
:004627D7 06                      push es
:004627D8 06                      push es
:004627D9 06                      push es
:004627DA 06                      push es
:004627DB 06                      push es
:004627DC 06                      push es
:004627DD 06                      push es
:004627DE 06                      push es
:004627DF 06                      push es
:004627E0 06                      push es
:004627E1 06                      push es
:004627E2 06                      push es
:004627E3 06                      push es
:004627E4 06                      push es
:004627E5 06                      push es
:004627E6 06                      push es
:004627E7 06                      push es
:004627E8 06                      push es
:004627E9 06                      push es
:004627EA 06                      push es
:004627EB 06                      push es
:004627EC 06                      push es
:004627ED 06                      push es
:004627EE 06                      push es
:004627EF 06                      push es
:004627F0 06                      push es
:004627F1 06                      push es
:004627F2 06                      push es
:004627F3 06                      push es
:004627F4 06                      push es
:004627F5 06                      push es
:004627F6 06                      push es
:004627F7 06                      push es
:004627F8 06                      push es
:004627F9 06                      push es
:004627FA 06                      push es
:004627FB 06                      push es
:004627FC 06                      push es
:004627FD 06                      push es
:004627FE 06                      push es
:004627FF 06                      push es
:00462800 06                      push es
:00462801 06                      push es
:00462802 06                      push es
:00462803 06                      push es
:00462804 06                      push es
:00462805 06                      push es
:00462806 06                      push es
:00462807 06                      push es
:00462808 06                      push es
:00462809 06                      push es
:0046280A 06                      push es
:0046280B 06                      push es
:0046280C 06                      push es
:0046280D 06                      push es
:0046280E 06                      push es
:0046280F 06                      push es
:00462810 06                      push es
:00462811 06                      push es
:00462812 06                      push es
:00462813 06                      push es
:00462814 06                      push es
:00462815 06                      push es
:00462816 06                      push es
:00462817 06                      push es
:00462818 06                      push es
:00462819 06                      push es
:0046281A 06                      push es
:0046281B 06                      push es
:0046281C 06                      push es
:0046281D 06                      push es
:0046281E 06                      push es
:0046281F 06                      push es
:00462820 06                      push es
:00462821 06                      push es
:00462822 06                      push es
:00462823 06                      push es
:00462824 06                      push es
:00462825 06                      push es
:00462826 06                      push es
:00462827 06                      push es
:00462828 06                      push es
:00462829 0306                    add eax, dword ptr [esi]
:0046282B 0405                    add al, 05

* Referenced by a CALL at Addresses:
|:00462665   , :00462B21   , :0046408F   , :00464465   , :00464475   
|
:0046282D 55                      push ebp
:0046282E 8BEC                    mov ebp, esp
:00462830 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00462834 7553                    jne 00462889
:00462836 6896C8E602              push 02E6C896
:0046283B 6A00                    push 00000000
:0046283D 6801100000              push 00001001
:00462842 8B4508                  mov eax, dword ptr [ebp+08]
:00462845 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462846 FF1504D64B00            Call dword ptr [004BD604]
:0046284C 6896C8E602              push 02E6C896
:00462851 6A00                    push 00000000
:00462853 6826100000              push 00001026
:00462858 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046285B 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046285C FF1504D64B00            Call dword ptr [004BD604]

* Possible StringData Ref from Data Obj ->""
                                  |
:00462862 687C1B4800              push 00481B7C
:00462867 6843050000              push 00000543
:0046286C 8B5508                  mov edx, dword ptr [ebp+08]
:0046286F 52                      push edx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00462870 FF15C4D64B00            Call dword ptr [004BD6C4]
:00462876 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462877 FF1510D64B00            Call dword ptr [004BD610]
:0046287D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046287E FF1514D64B00            Call dword ptr [004BD614]
:00462884 E992000000              jmp 0046291B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462834(C)
|
:00462889 837D0C01                cmp dword ptr [ebp+0C], 00000001
:0046288D 7544                    jne 004628D3
:0046288F 68FF505002              push 025050FF
:00462894 6A00                    push 00000000
:00462896 6801100000              push 00001001
:0046289B 8B4508                  mov eax, dword ptr [ebp+08]
:0046289E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046289F FF1504D64B00            Call dword ptr [004BD604]
:004628A5 68FF505002              push 025050FF
:004628AA 6A00                    push 00000000
:004628AC 6826100000              push 00001026
:004628B1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004628B4 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004628B5 FF1504D64B00            Call dword ptr [004BD604]
:004628BB 68FFFFFF02              push 02FFFFFF
:004628C0 6A00                    push 00000000
:004628C2 6824100000              push 00001024
:004628C7 8B5508                  mov edx, dword ptr [ebp+08]
:004628CA 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004628CB FF1504D64B00            Call dword ptr [004BD604]
:004628D1 EB48                    jmp 0046291B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046288D(C)
|
:004628D3 837D0C02                cmp dword ptr [ebp+0C], 00000002
:004628D7 7542                    jne 0046291B
:004628D9 685050FF02              push 02FF5050
:004628DE 6A00                    push 00000000
:004628E0 6801100000              push 00001001
:004628E5 8B4508                  mov eax, dword ptr [ebp+08]
:004628E8 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004628E9 FF1504D64B00            Call dword ptr [004BD604]
:004628EF 685050FF02              push 02FF5050
:004628F4 6A00                    push 00000000
:004628F6 6826100000              push 00001026
:004628FB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004628FE 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004628FF FF1504D64B00            Call dword ptr [004BD604]
:00462905 68FFFFFF02              push 02FFFFFF
:0046290A 6A00                    push 00000000
:0046290C 6824100000              push 00001024
:00462911 8B5508                  mov edx, dword ptr [ebp+08]
:00462914 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462915 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462884(U), :004628D1(U), :004628D7(C)
|
:0046291B 5D                      pop ebp
:0046291C C3                      ret



* Referenced by a CALL at Address:
|:0046250A   
|
:0046291D 55                      push ebp
:0046291E 8BEC                    mov ebp, esp
:00462920 83EC20                  sub esp, 00000020
:00462923 8B4514                  mov eax, dword ptr [ebp+14]
:00462926 8945F4                  mov dword ptr [ebp-0C], eax
:00462929 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046292C 8B5104                  mov edx, dword ptr [ecx+04]
:0046292F 8955FC                  mov dword ptr [ebp-04], edx
:00462932 8B45F4                  mov eax, dword ptr [ebp-0C]
:00462935 8B08                    mov ecx, dword ptr [eax]
:00462937 894DF0                  mov dword ptr [ebp-10], ecx
:0046293A C745F800000000          mov [ebp-08], 00000000
:00462941 8B55F4                  mov edx, dword ptr [ebp-0C]
:00462944 8B4208                  mov eax, dword ptr [edx+08]
:00462947 8945E0                  mov dword ptr [ebp-20], eax
:0046294A 817DE06AFFFFFF          cmp dword ptr [ebp-20], FFFFFF6A
:00462951 745B                    je 004629AE
:00462953 837DE094                cmp dword ptr [ebp-20], FFFFFF94
:00462957 7469                    je 004629C2
:00462959 837DE09B                cmp dword ptr [ebp-20], FFFFFF9B
:0046295D 7405                    je 00462964
:0046295F E992000000              jmp 004629F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046295D(C)
|
:00462964 8B4D14                  mov ecx, dword ptr [ebp+14]
:00462967 894DEC                  mov dword ptr [ebp-14], ecx
:0046296A 8B55EC                  mov edx, dword ptr [ebp-14]
:0046296D 8B4214                  mov eax, dword ptr [edx+14]
:00462970 83E002                  and eax, 00000002
:00462973 85C0                    test eax, eax
:00462975 7435                    je 004629AC
:00462977 8B4D18                  mov ecx, dword ptr [ebp+18]
:0046297A 51                      push ecx
:0046297B 8B55EC                  mov edx, dword ptr [ebp-14]
:0046297E 8B420C                  mov eax, dword ptr [edx+0C]
:00462981 50                      push eax
:00462982 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00462985 51                      push ecx
:00462986 8B5508                  mov edx, dword ptr [ebp+08]
:00462989 52                      push edx
:0046298A E83D010000              call 00462ACC
:0046298F 83C410                  add esp, 00000010
:00462992 8B45EC                  mov eax, dword ptr [ebp-14]
:00462995 8B480C                  mov ecx, dword ptr [eax+0C]
:00462998 51                      push ecx
:00462999 8B55F0                  mov edx, dword ptr [ebp-10]
:0046299C 52                      push edx
:0046299D E819030000              call 00462CBB
:004629A2 83C408                  add esp, 00000008
:004629A5 B801000000              mov eax, 00000001
:004629AA EB4C                    jmp 004629F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462975(C)
|
:004629AC EB48                    jmp 004629F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462951(C)
|
:004629AE 8B4514                  mov eax, dword ptr [ebp+14]
:004629B1 8945E8                  mov dword ptr [ebp-18], eax
:004629B4 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004629B7 51                      push ecx
:004629B8 E8A1030000              call 00462D5E
:004629BD 83C404                  add esp, 00000004
:004629C0 EB36                    jmp 004629F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462957(C)
|
:004629C2 8B5514                  mov edx, dword ptr [ebp+14]
:004629C5 8955E4                  mov dword ptr [ebp-1C], edx
:004629C8 68FC294600              push 004629FC
:004629CD 8B45E4                  mov eax, dword ptr [ebp-1C]
:004629D0 8B4810                  mov ecx, dword ptr [eax+10]
:004629D3 51                      push ecx
:004629D4 6830100000              push 00001030
:004629D9 8B55E4                  mov edx, dword ptr [ebp-1C]
:004629DC 8B02                    mov eax, dword ptr [edx]
:004629DE 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004629DF FF1504D64B00            Call dword ptr [004BD604]
:004629E5 B96CB34800              mov ecx, 0048B36C
:004629EA E8816DFBFF              call 00419770
:004629EF B801000000              mov eax, 00000001
:004629F4 EB02                    jmp 004629F8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046295F(U), :004629AC(U)
|
:004629F6 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004629AA(U), :004629C0(U), :004629F4(U)
|
:004629F8 8BE5                    mov esp, ebp
:004629FA 5D                      pop ebp
:004629FB C3                      ret


:004629FC 55                      push ebp
:004629FD 8BEC                    mov ebp, esp
:004629FF 83EC10                  sub esp, 00000010
:00462A02 53                      push ebx
:00462A03 56                      push esi
:00462A04 8B4508                  mov eax, dword ptr [ebp+08]
:00462A07 8945F8                  mov dword ptr [ebp-08], eax
:00462A0A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462A0D 894DF4                  mov dword ptr [ebp-0C], ecx
:00462A10 837DF800                cmp dword ptr [ebp-08], 00000000
:00462A14 0F848A000000            je 00462AA4
:00462A1A 837DF400                cmp dword ptr [ebp-0C], 00000000
:00462A1E 0F8480000000            je 00462AA4
:00462A24 8B5510                  mov edx, dword ptr [ebp+10]
:00462A27 8955F0                  mov dword ptr [ebp-10], edx
:00462A2A 837DF003                cmp dword ptr [ebp-10], 00000003
:00462A2E 776D                    ja 00462A9D
:00462A30 8B45F0                  mov eax, dword ptr [ebp-10]
:00462A33 FF2485BC2A4600          jmp dword ptr [4*eax+00462ABC]
:00462A3A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462A3D E83E07FAFF              call 00403180
:00462A42 8BF0                    mov esi, eax
:00462A44 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00462A47 E83407FAFF              call 00403180
:00462A4C 2BF0                    sub esi, eax
:00462A4E 8975FC                  mov dword ptr [ebp-04], esi
:00462A51 EB51                    jmp 00462AA4
:00462A53 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462A56 E84507FAFF              call 004031A0
:00462A5B 8AD8                    mov bl, al
:00462A5D 81E3FF000000            and ebx, 000000FF
:00462A63 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00462A66 E83507FAFF              call 004031A0
:00462A6B 25FF000000              and eax, 000000FF
:00462A70 2BD8                    sub ebx, eax
:00462A72 895DFC                  mov dword ptr [ebp-04], ebx
:00462A75 EB2D                    jmp 00462AA4
:00462A77 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462A7A E821D4FAFF              call 0040FEA0
:00462A7F 8AD8                    mov bl, al
:00462A81 81E3FF000000            and ebx, 000000FF
:00462A87 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00462A8A E811D4FAFF              call 0040FEA0
:00462A8F 25FF000000              and eax, 000000FF
:00462A94 2BD8                    sub ebx, eax
:00462A96 895DFC                  mov dword ptr [ebp-04], ebx
:00462A99 EB09                    jmp 00462AA4
:00462A9B EB07                    jmp 00462AA4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462A2E(C)
|
:00462A9D C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462A14(C), :00462A1E(C), :00462A51(U), :00462A75(U), :00462A99(U)
|:00462A9B(U)
|
:00462AA4 B96CB34800              mov ecx, 0048B36C
:00462AA9 E8E26CFBFF              call 00419790
:00462AAE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462AB1 0FAFC1                  imul eax, ecx
:00462AB4 5E                      pop esi
:00462AB5 5B                      pop ebx
:00462AB6 8BE5                    mov esp, ebp
:00462AB8 5D                      pop ebp
:00462AB9 C20C00                  ret 000C



:00462ABC 3A2A4600                DWORD 00462A3A
:00462AC0 532A4600                DWORD 00462A53
:00462AC4 772A4600                DWORD 00462A77
:00462AC8 9B2A4600                DWORD 00462A9B



* Referenced by a CALL at Address:
|:0046298A   
|
:00462ACC 55                      push ebp
:00462ACD 8BEC                    mov ebp, esp
:00462ACF 51                      push ecx
:00462AD0 837D1000                cmp dword ptr [ebp+10], 00000000
:00462AD4 7D05                    jge 00462ADB
:00462AD6 E989000000              jmp 00462B64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462AD4(C)
|
:00462ADB 8B4510                  mov eax, dword ptr [ebp+10]
:00462ADE 50                      push eax
:00462ADF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462AE2 51                      push ecx
:00462AE3 E880000000              call 00462B68
:00462AE8 83C408                  add esp, 00000008
:00462AEB 8945FC                  mov dword ptr [ebp-04], eax
:00462AEE 8B5514                  mov edx, dword ptr [ebp+14]
:00462AF1 52                      push edx
:00462AF2 8B45FC                  mov eax, dword ptr [ebp-04]
:00462AF5 50                      push eax
:00462AF6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462AF9 51                      push ecx
:00462AFA E868010000              call 00462C67
:00462AFF 83C40C                  add esp, 0000000C
:00462B02 68FF000000              push 000000FF
:00462B07 8B4D14                  mov ecx, dword ptr [ebp+14]
:00462B0A E8E13A0000              call 004665F0
:00462B0F 6A00                    push 00000000
:00462B11 687C040000              push 0000047C
:00462B16 8B5508                  mov edx, dword ptr [ebp+08]
:00462B19 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462B1A FF1510D64B00            Call dword ptr [004BD610]
:00462B20 50                      push eax
:00462B21 E807FDFFFF              call 0046282D
:00462B26 83C408                  add esp, 00000008
:00462B29 8B45FC                  mov eax, dword ptr [ebp-04]
:00462B2C 50                      push eax
:00462B2D 687B040000              push 0000047B
:00462B32 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462B35 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462B36 FF1510D64B00            Call dword ptr [004BD610]
:00462B3C 50                      push eax
:00462B3D E867000000              call 00462BA9
:00462B42 83C408                  add esp, 00000008
:00462B45 6A00                    push 00000000
:00462B47 6A00                    push 00000000
:00462B49 6809100000              push 00001009
:00462B4E 687C040000              push 0000047C
:00462B53 8B5508                  mov edx, dword ptr [ebp+08]
:00462B56 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462B57 FF1510D64B00            Call dword ptr [004BD610]
:00462B5D 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462B5E FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462AD6(U)
|
:00462B64 8BE5                    mov esp, ebp
:00462B66 5D                      pop ebp
:00462B67 C3                      ret



* Referenced by a CALL at Address:
|:00462AE3   
|
:00462B68 55                      push ebp
:00462B69 8BEC                    mov ebp, esp
:00462B6B 83EC2C                  sub esp, 0000002C
:00462B6E 8B450C                  mov eax, dword ptr [ebp+0C]
:00462B71 8945D8                  mov dword ptr [ebp-28], eax
:00462B74 C745DC00000000          mov [ebp-24], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00462B7B C745D404000000          mov [ebp-2C], 00000004
:00462B82 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:00462B85 51                      push ecx
:00462B86 6A00                    push 00000000
:00462B88 6805100000              push 00001005
:00462B8D 8B5508                  mov edx, dword ptr [ebp+08]
:00462B90 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462B91 FF1504D64B00            Call dword ptr [004BD604]
:00462B97 8B45F4                  mov eax, dword ptr [ebp-0C]
:00462B9A 8945FC                  mov dword ptr [ebp-04], eax
:00462B9D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462BA0 E8DB05FAFF              call 00403180
:00462BA5 8BE5                    mov esp, ebp
:00462BA7 5D                      pop ebp
:00462BA8 C3                      ret



* Referenced by a CALL at Address:
|:00462B3D   
|
:00462BA9 55                      push ebp
:00462BAA 8BEC                    mov ebp, esp
:00462BAC 83EC08                  sub esp, 00000008
:00462BAF 6A00                    push 00000000
:00462BB1 6A00                    push 00000000
:00462BB3 6809100000              push 00001009
:00462BB8 8B4508                  mov eax, dword ptr [ebp+08]
:00462BBB 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462BBC FF1504D64B00            Call dword ptr [004BD604]
:00462BC2 6A00                    push 00000000
:00462BC4 6A00                    push 00000000
:00462BC6 6802100000              push 00001002
:00462BCB 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462BCE 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462BCF FF1504D64B00            Call dword ptr [004BD604]
:00462BD5 50                      push eax

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:00462BD6 FF1504D44B00            Call dword ptr [004BD404]
:00462BDC 6A00                    push 00000000
:00462BDE 6A01                    push 00000001
:00462BE0 6802100000              push 00001002
:00462BE5 8B5508                  mov edx, dword ptr [ebp+08]
:00462BE8 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462BE9 FF1504D64B00            Call dword ptr [004BD604]
:00462BEF 50                      push eax

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:00462BF0 FF1504D44B00            Call dword ptr [004BD404]
:00462BF6 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00462BF8 6A08                    push 00000008
:00462BFA 8D45F8                  lea eax, dword ptr [ebp-08]
:00462BFD 50                      push eax
:00462BFE 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00462C01 51                      push ecx
:00462C02 8B5508                  mov edx, dword ptr [ebp+08]
:00462C05 52                      push edx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00462C06 FF15C4D64B00            Call dword ptr [004BD6C4]
:00462C0C 50                      push eax
:00462C0D E85257FBFF              call 00418364
:00462C12 83C414                  add esp, 00000014
:00462C15 8B450C                  mov eax, dword ptr [ebp+0C]
:00462C18 50                      push eax
:00462C19 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462C1C 51                      push ecx
:00462C1D 8B55FC                  mov edx, dword ptr [ebp-04]
:00462C20 52                      push edx
:00462C21 E820060000              call 00463246
:00462C26 83C40C                  add esp, 0000000C
:00462C29 8B45FC                  mov eax, dword ptr [ebp-04]
:00462C2C 50                      push eax
:00462C2D 6A01                    push 00000001
:00462C2F 6803100000              push 00001003
:00462C34 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462C37 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462C38 FF1504D64B00            Call dword ptr [004BD604]
:00462C3E 8B55F8                  mov edx, dword ptr [ebp-08]
:00462C41 52                      push edx
:00462C42 6A00                    push 00000000
:00462C44 6803100000              push 00001003
:00462C49 8B4508                  mov eax, dword ptr [ebp+08]
:00462C4C 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462C4D FF1504D64B00            Call dword ptr [004BD604]
:00462C53 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462C56 51                      push ecx
:00462C57 8B5508                  mov edx, dword ptr [ebp+08]
:00462C5A 52                      push edx
:00462C5B E839140000              call 00464099
:00462C60 83C408                  add esp, 00000008
:00462C63 8BE5                    mov esp, ebp
:00462C65 5D                      pop ebp
:00462C66 C3                      ret



* Referenced by a CALL at Addresses:
|:00462AFA   , :0046427D   
|
:00462C67 55                      push ebp
:00462C68 8BEC                    mov ebp, esp
:00462C6A 83EC40                  sub esp, 00000040
:00462C6D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00462C70 6BC950                  imul ecx, 00000050
:00462C73 81C1787F4900            add ecx, 00497F78
:00462C79 E88604FAFF              call 00403104
:00462C7E 50                      push eax

* Possible StringData Ref from Data Obj ->"%ss@C"
                                  |
:00462C7F 68841B4800              push 00481B84
:00462C84 8D45C0                  lea eax, dword ptr [ebp-40]
:00462C87 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00462C88 FF1504D74B00            Call dword ptr [004BD704]
:00462C8E 83C40C                  add esp, 0000000C
:00462C91 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00462C94 51                      push ecx
:00462C95 6844050000              push 00000544
:00462C9A 8B5508                  mov edx, dword ptr [ebp+08]
:00462C9D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462C9E FF1510D64B00            Call dword ptr [004BD610]
:00462CA4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00462CA5 FF1514D64B00            Call dword ptr [004BD614]
:00462CAB 8B450C                  mov eax, dword ptr [ebp+0C]
:00462CAE 50                      push eax
:00462CAF 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462CB2 E8A9B1FCFF              call 0042DE60
:00462CB7 8BE5                    mov esp, ebp
:00462CB9 5D                      pop ebp
:00462CBA C3                      ret



* Referenced by a CALL at Address:
|:0046299D   
|
:00462CBB 55                      push ebp
:00462CBC 8BEC                    mov ebp, esp
:00462CBE 83EC08                  sub esp, 00000008
:00462CC1 6A00                    push 00000000
:00462CC3 8B450C                  mov eax, dword ptr [ebp+0C]
:00462CC6 50                      push eax
:00462CC7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462CCA 51                      push ecx
:00462CCB E855000000              call 00462D25
:00462CD0 83C40C                  add esp, 0000000C
:00462CD3 6A00                    push 00000000
:00462CD5 6A00                    push 00000000
:00462CD7 6804100000              push 00001004
:00462CDC 8B5508                  mov edx, dword ptr [ebp+08]
:00462CDF 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462CE0 FF1504D64B00            Call dword ptr [004BD604]
:00462CE6 8945FC                  mov dword ptr [ebp-04], eax
:00462CE9 C745F800000000          mov [ebp-08], 00000000
:00462CF0 EB09                    jmp 00462CFB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462D0B(U), :00462D1F(U)
|
:00462CF2 8B45F8                  mov eax, dword ptr [ebp-08]
:00462CF5 83C001                  add eax, 00000001
:00462CF8 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462CF0(U)
|
:00462CFB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462CFE 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:00462D01 7D1E                    jge 00462D21
:00462D03 8B55F8                  mov edx, dword ptr [ebp-08]
:00462D06 3B550C                  cmp edx, dword ptr [ebp+0C]
:00462D09 7502                    jne 00462D0D
:00462D0B EBE5                    jmp 00462CF2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462D09(C)
|
:00462D0D 6A01                    push 00000001
:00462D0F 8B45F8                  mov eax, dword ptr [ebp-08]
:00462D12 50                      push eax
:00462D13 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462D16 51                      push ecx
:00462D17 E809000000              call 00462D25
:00462D1C 83C40C                  add esp, 0000000C
:00462D1F EBD1                    jmp 00462CF2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462D01(C)
|
:00462D21 8BE5                    mov esp, ebp
:00462D23 5D                      pop ebp
:00462D24 C3                      ret



* Referenced by a CALL at Addresses:
|:00462CCB   , :00462D17   
|
:00462D25 55                      push ebp
:00462D26 8BEC                    mov ebp, esp
:00462D28 83EC28                  sub esp, 00000028
:00462D2B 8B450C                  mov eax, dword ptr [ebp+0C]
:00462D2E 8945DC                  mov dword ptr [ebp-24], eax
:00462D31 C745E000000000          mov [ebp-20], 00000000
:00462D38 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462D3B 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00462D3E C745D802000000          mov [ebp-28], 00000002
:00462D45 8D55D8                  lea edx, dword ptr [ebp-28]
:00462D48 52                      push edx
:00462D49 6A00                    push 00000000
:00462D4B 6806100000              push 00001006
:00462D50 8B4508                  mov eax, dword ptr [ebp+08]
:00462D53 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462D54 FF1504D64B00            Call dword ptr [004BD604]
:00462D5A 8BE5                    mov esp, ebp
:00462D5C 5D                      pop ebp
:00462D5D C3                      ret



* Referenced by a CALL at Address:
|:004629B8   
|
:00462D5E 55                      push ebp
:00462D5F 8BEC                    mov ebp, esp
:00462D61 83EC08                  sub esp, 00000008
:00462D64 8B4508                  mov eax, dword ptr [ebp+08]
:00462D67 8B482C                  mov ecx, dword ptr [eax+2C]
:00462D6A 894DFC                  mov dword ptr [ebp-04], ecx
:00462D6D 837DFC00                cmp dword ptr [ebp-04], 00000000
:00462D71 7507                    jne 00462D7A
:00462D73 B801000000              mov eax, 00000001
:00462D78 EB79                    jmp 00462DF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462D71(C)
|
:00462D7A 8B5508                  mov edx, dword ptr [ebp+08]
:00462D7D 8B4214                  mov eax, dword ptr [edx+14]
:00462D80 8945F8                  mov dword ptr [ebp-08], eax
:00462D83 837DF800                cmp dword ptr [ebp-08], 00000000
:00462D87 740E                    je 00462D97
:00462D89 837DF801                cmp dword ptr [ebp-08], 00000001
:00462D8D 7418                    je 00462DA7
:00462D8F 837DF802                cmp dword ptr [ebp-08], 00000002
:00462D93 742E                    je 00462DC3
:00462D95 EB57                    jmp 00462DEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462D87(C)
|
:00462D97 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462D9A E86503FAFF              call 00403104
:00462D9F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462DA2 894120                  mov dword ptr [ecx+20], eax
:00462DA5 EB47                    jmp 00462DEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462D8D(C)
|
:00462DA7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462DAA E8F103FAFF              call 004031A0
:00462DAF 25FF000000              and eax, 000000FF
:00462DB4 8B5508                  mov edx, dword ptr [ebp+08]
:00462DB7 8B0485C8D54700          mov eax, dword ptr [4*eax+0047D5C8]
:00462DBE 894220                  mov dword ptr [edx+20], eax
:00462DC1 EB2B                    jmp 00462DEE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462D93(C)
|
:00462DC3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462DC6 E8D5D0FAFF              call 0040FEA0
:00462DCB 25FF000000              and eax, 000000FF
:00462DD0 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:00462DD1 68941B4800              push 00481B94
:00462DD6 6850534B00              push 004B5350

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00462DDB FF1504D74B00            Call dword ptr [004BD704]
:00462DE1 83C40C                  add esp, 0000000C
:00462DE4 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462DE7 C7412050534B00          mov [ecx+20], 004B5350

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462D95(U), :00462DA5(U), :00462DC1(U)
|
:00462DEE B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462D78(U)
|
:00462DF3 8BE5                    mov esp, ebp
:00462DF5 5D                      pop ebp
:00462DF6 C3                      ret



* Referenced by a CALL at Address:
|:004625C8   
|
:00462DF7 55                      push ebp
:00462DF8 8BEC                    mov ebp, esp
:00462DFA 83EC08                  sub esp, 00000008
:00462DFD 8B450C                  mov eax, dword ptr [ebp+0C]
:00462E00 8B08                    mov ecx, dword ptr [eax]
:00462E02 894DFC                  mov dword ptr [ebp-04], ecx
:00462E05 8B55FC                  mov edx, dword ptr [ebp-04]
:00462E08 52                      push edx
:00462E09 E8B562FBFF              call 004190C3
:00462E0E 83C404                  add esp, 00000004
:00462E11 8945F8                  mov dword ptr [ebp-08], eax
:00462E14 837DF800                cmp dword ptr [ebp-08], 00000000
:00462E18 7C10                    jl 00462E2A
:00462E1A 8B45F8                  mov eax, dword ptr [ebp-08]
:00462E1D 50                      push eax
:00462E1E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00462E21 51                      push ecx
:00462E22 E89366FBFF              call 004194BA
:00462E27 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462E18(C)
|
:00462E2A 8BE5                    mov esp, ebp
:00462E2C 5D                      pop ebp
:00462E2D C3                      ret



* Referenced by a CALL at Address:
|:0046271C   
|
:00462E2E 55                      push ebp
:00462E2F 8BEC                    mov ebp, esp
:00462E31 83EC54                  sub esp, 00000054
:00462E34 8B450C                  mov eax, dword ptr [ebp+0C]
:00462E37 8B480C                  mov ecx, dword ptr [eax+0C]
:00462E3A 894DAC                  mov dword ptr [ebp-54], ecx
:00462E3D 8B550C                  mov edx, dword ptr [ebp+0C]
:00462E40 8B02                    mov eax, dword ptr [edx]
:00462E42 8945B4                  mov dword ptr [ebp-4C], eax
:00462E45 687C040000              push 0000047C
:00462E4A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462E4D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462E4E FF1510D64B00            Call dword ptr [004BD610]
:00462E54 8945B0                  mov dword ptr [ebp-50], eax
:00462E57 6A00                    push 00000000
:00462E59 6A00                    push 00000000
:00462E5B 6809100000              push 00001009
:00462E60 8B55B0                  mov edx, dword ptr [ebp-50]
:00462E63 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462E64 FF1504D64B00            Call dword ptr [004BD604]
:00462E6A 8B45AC                  mov eax, dword ptr [ebp-54]
:00462E6D 50                      push eax
:00462E6E 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00462E71 51                      push ecx
:00462E72 E82364FBFF              call 0041929A
:00462E77 83C408                  add esp, 00000008
:00462E7A 8845FC                  mov byte ptr [ebp-04], al
:00462E7D 8A55FC                  mov dl, byte ptr [ebp-04]
:00462E80 52                      push edx
:00462E81 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462E84 E867370000              call 004665F0
:00462E89 8B4510                  mov eax, dword ptr [ebp+10]
:00462E8C 50                      push eax
:00462E8D 8B4DB4                  mov ecx, dword ptr [ebp-4C]
:00462E90 51                      push ecx
:00462E91 8B55B0                  mov edx, dword ptr [ebp-50]
:00462E94 52                      push edx
:00462E95 E8F2130000              call 0046428C
:00462E9A 83C40C                  add esp, 0000000C
:00462E9D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462EA0 E82B370000              call 004665D0
:00462EA5 50                      push eax
:00462EA6 8B4D10                  mov ecx, dword ptr [ebp+10]
:00462EA9 E8D2AFFCFF              call 0042DE80
:00462EAE 8BC8                    mov ecx, eax
:00462EB0 6BC950                  imul ecx, 00000050
:00462EB3 81C1787F4900            add ecx, 00497F78
:00462EB9 E82203FAFF              call 004031E0
:00462EBE 25FF000000              and eax, 000000FF
:00462EC3 8945F8                  mov dword ptr [ebp-08], eax
:00462EC6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462EC9 6BC922                  imul ecx, 00000022
:00462ECC 81C1D0474900            add ecx, 004947D0
:00462ED2 E81928FAFF              call 004056F0
:00462ED7 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00462ED8 68981B4800              push 00481B98
:00462EDD 8D45B8                  lea eax, dword ptr [ebp-48]
:00462EE0 50                      push eax

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00462EE1 FF1504D74B00            Call dword ptr [004BD704]
:00462EE7 83C40C                  add esp, 0000000C
:00462EEA 8D4DB8                  lea ecx, dword ptr [ebp-48]
:00462EED 51                      push ecx
:00462EEE 6843050000              push 00000543
:00462EF3 8B5508                  mov edx, dword ptr [ebp+08]
:00462EF6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462EF7 FF1510D64B00            Call dword ptr [004BD610]
:00462EFD 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00462EFE FF1514D64B00            Call dword ptr [004BD614]
:00462F04 B801000000              mov eax, 00000001
:00462F09 8BE5                    mov esp, ebp
:00462F0B 5D                      pop ebp
:00462F0C C3                      ret



* Referenced by a CALL at Address:
|:004624A4   
|
:00462F0D 55                      push ebp
:00462F0E 8BEC                    mov ebp, esp
:00462F10 83EC08                  sub esp, 00000008
:00462F13 8B4510                  mov eax, dword ptr [ebp+10]
:00462F16 25FFFF0000              and eax, 0000FFFF
:00462F1B 8945F8                  mov dword ptr [ebp-08], eax
:00462F1E 817DF878040000          cmp dword ptr [ebp-08], 00000478
:00462F25 7F2A                    jg 00462F51
:00462F27 817DF878040000          cmp dword ptr [ebp-08], 00000478
:00462F2E 0F8490000000            je 00462FC4
:00462F34 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00462F37 83E901                  sub ecx, 00000001
:00462F3A 894DF8                  mov dword ptr [ebp-08], ecx
:00462F3D 837DF803                cmp dword ptr [ebp-08], 00000003
:00462F41 0F8782010000            ja 004630C9
:00462F47 8B55F8                  mov edx, dword ptr [ebp-08]
:00462F4A FF2495CF304600          jmp dword ptr [4*edx+004630CF]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462F25(C)
|
:00462F51 817DF879040000          cmp dword ptr [ebp-08], 00000479
:00462F58 0F84B2000000            je 00463010
:00462F5E 817DF849050000          cmp dword ptr [ebp-08], 00000549
:00462F65 0F84FD000000            je 00463068
:00462F6B E959010000              jmp 004630C9
:00462F70 6A00                    push 00000000
:00462F72 8B4508                  mov eax, dword ptr [ebp+08]
:00462F75 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00462F76 FF15D8D54B00            Call dword ptr [004BD5D8]
:00462F7C B801000000              mov eax, 00000001
:00462F81 E945010000              jmp 004630CB
:00462F86 6A00                    push 00000000
:00462F88 6A00                    push 00000000
:00462F8A 6804100000              push 00001004
:00462F8F 687C040000              push 0000047C
:00462F94 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462F97 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462F98 FF1510D64B00            Call dword ptr [004BD610]
:00462F9E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00462F9F FF1504D64B00            Call dword ptr [004BD604]
:00462FA5 85C0                    test eax, eax
:00462FA7 7E16                    jle 00462FBF
:00462FA9 6A01                    push 00000001
:00462FAB 8B5508                  mov edx, dword ptr [ebp+08]
:00462FAE 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00462FAF FF15D8D54B00            Call dword ptr [004BD5D8]
:00462FB5 B801000000              mov eax, 00000001
:00462FBA E90C010000              jmp 004630CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462FA7(C)
|
:00462FBF E905010000              jmp 004630C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462F2E(C)
|
:00462FC4 8B4514                  mov eax, dword ptr [ebp+14]
:00462FC7 C60000                  mov byte ptr [eax], 00
:00462FCA 6A00                    push 00000000
:00462FCC 687B040000              push 0000047B
:00462FD1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462FD4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462FD5 FF1510D64B00            Call dword ptr [004BD610]
:00462FDB 50                      push eax
:00462FDC 8B5508                  mov edx, dword ptr [ebp+08]
:00462FDF 52                      push edx
:00462FE0 E8A160FBFF              call 00419086
:00462FE5 83C40C                  add esp, 0000000C
:00462FE8 6A00                    push 00000000
:00462FEA 687C040000              push 0000047C
:00462FEF 8B4508                  mov eax, dword ptr [ebp+08]
:00462FF2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00462FF3 FF1510D64B00            Call dword ptr [004BD610]
:00462FF9 50                      push eax
:00462FFA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00462FFD 51                      push ecx
:00462FFE E88360FBFF              call 00419086
:00463003 83C40C                  add esp, 0000000C
:00463006 B801000000              mov eax, 00000001
:0046300B E9BB000000              jmp 004630CB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462F58(C)
|
:00463010 8B5514                  mov edx, dword ptr [ebp+14]
:00463013 C60201                  mov byte ptr [edx], 01
:00463016 6A01                    push 00000001
:00463018 687B040000              push 0000047B
:0046301D 8B4508                  mov eax, dword ptr [ebp+08]
:00463020 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463021 FF1510D64B00            Call dword ptr [004BD610]
:00463027 50                      push eax
:00463028 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046302B 51                      push ecx
:0046302C E85560FBFF              call 00419086
:00463031 83C40C                  add esp, 0000000C
:00463034 6A01                    push 00000001
:00463036 687C040000              push 0000047C
:0046303B 8B5508                  mov edx, dword ptr [ebp+08]
:0046303E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046303F FF1510D64B00            Call dword ptr [004BD610]
:00463045 50                      push eax
:00463046 8B4508                  mov eax, dword ptr [ebp+08]
:00463049 50                      push eax
:0046304A E83760FBFF              call 00419086
:0046304F 83C40C                  add esp, 0000000C
:00463052 B801000000              mov eax, 00000001
:00463057 EB72                    jmp 004630CB
:00463059 6866080000              push 00000866
:0046305E E8686A0000              call 00469ACB
:00463063 83C404                  add esp, 00000004
:00463066 EB61                    jmp 004630C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00462F65(C)
|
:00463068 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046306B 81E1FFFF0000            and ecx, 0000FFFF
:00463071 83F909                  cmp ecx, 00000009
:00463074 752B                    jne 004630A1
:00463076 6849050000              push 00000549
:0046307B 8B5508                  mov edx, dword ptr [ebp+08]
:0046307E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046307F FF1510D64B00            Call dword ptr [004BD610]
:00463085 50                      push eax
:00463086 E8CA02FBFF              call 00413355
:0046308B 83C404                  add esp, 00000004
:0046308E 8945FC                  mov dword ptr [ebp-04], eax
:00463091 8B45FC                  mov eax, dword ptr [ebp-04]
:00463094 50                      push eax
:00463095 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463098 51                      push ecx
:00463099 E86C020000              call 0046330A
:0046309E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463074(C)
|
:004630A1 EB26                    jmp 004630C9
:004630A3 E8127B0000              call 0046ABBA
:004630A8 6849050000              push 00000549
:004630AD 8B5508                  mov edx, dword ptr [ebp+08]
:004630B0 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004630B1 FF1510D64B00            Call dword ptr [004BD610]
:004630B7 50                      push eax
:004630B8 E89802FBFF              call 00413355
:004630BD 83C404                  add esp, 00000004
:004630C0 50                      push eax
:004630C1 E8D1970000              call 0046C897
:004630C6 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462F41(C), :00462F6B(U), :00462FBF(U), :00463066(U), :004630A1(U)
|
:004630C9 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00462F81(U), :00462FBA(U), :0046300B(U), :00463057(U)
|
:004630CB 8BE5                    mov esp, ebp
:004630CD 5D                      pop ebp
:004630CE C3                      ret



:004630CF 862F4600                DWORD 00462F86
:004630D3 702F4600                DWORD 00462F70
:004630D7 59304600                DWORD 00463059
:004630DB A3304600                DWORD 004630A3



* Referenced by a CALL at Address:
|:00463261   
|
:004630DF 55                      push ebp
:004630E0 8BEC                    mov ebp, esp
:004630E2 83EC0C                  sub esp, 0000000C
:004630E5 C745F400000000          mov [ebp-0C], 00000000
:004630EC EB09                    jmp 004630F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463185(U)
|
:004630EE 8B45F4                  mov eax, dword ptr [ebp-0C]
:004630F1 83C001                  add eax, 00000001
:004630F4 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004630EC(U)
|
:004630F7 837DF408                cmp dword ptr [ebp-0C], 00000008
:004630FB 0F8D89000000            jnl 0046318A
:00463101 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00463104 51                      push ecx
:00463105 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463108 E8D300FAFF              call 004031E0
:0046310D 25FF000000              and eax, 000000FF
:00463112 8945FC                  mov dword ptr [ebp-04], eax
:00463115 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:0046311C 7517                    jne 00463135
:0046311E 68FA000000              push 000000FA
:00463123 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00463129 52                      push edx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0046312A FF15E4D64B00            Call dword ptr [004BD6E4]
:00463130 8945F8                  mov dword ptr [ebp-08], eax
:00463133 EB30                    jmp 00463165

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046311C(C)
|
:00463135 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00463138 6BC922                  imul ecx, 00000022
:0046313B 81C1D0474900            add ecx, 004947D0
:00463141 E8FA00FAFF              call 00403240
:00463146 25FF000000              and eax, 000000FF
:0046314B 05FA000000              add eax, 000000FA
:00463150 25FFFF0000              and eax, 0000FFFF
:00463155 50                      push eax
:00463156 A1A8554B00              mov eax, dword ptr [004B55A8]
:0046315B 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0046315C FF15E4D64B00            Call dword ptr [004BD6E4]
:00463162 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463133(U)
|
:00463165 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00463168 51                      push ecx
:00463169 6AFF                    push FFFFFFFF
:0046316B 8B5508                  mov edx, dword ptr [ebp+08]
:0046316E 52                      push edx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:0046316F FF1514D44B00            Call dword ptr [004BD414]
:00463175 8B45F8                  mov eax, dword ptr [ebp-08]
:00463178 50                      push eax
:00463179 6AFF                    push FFFFFFFF
:0046317B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046317E 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:0046317F FF1514D44B00            Call dword ptr [004BD414]
:00463185 E964FFFFFF              jmp 004630EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004630FB(C)
|
:0046318A 8BE5                    mov esp, ebp
:0046318C 5D                      pop ebp
:0046318D C3                      ret



* Referenced by a CALL at Address:
|:00464324   
|
:0046318E 55                      push ebp
:0046318F 8BEC                    mov ebp, esp
:00463191 83EC0C                  sub esp, 0000000C
:00463194 C745F800000000          mov [ebp-08], 00000000
:0046319B EB09                    jmp 004631A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046323D(U)
|
:0046319D 8B45F8                  mov eax, dword ptr [ebp-08]
:004631A0 83C001                  add eax, 00000001
:004631A3 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046319B(U)
|
:004631A6 837DF803                cmp dword ptr [ebp-08], 00000003
:004631AA 0F8D92000000            jnl 00463242
:004631B0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004631B3 51                      push ecx
:004631B4 8B4D10                  mov ecx, dword ptr [ebp+10]
:004631B7 6BC922                  imul ecx, 00000022
:004631BA 81C1D0474900            add ecx, 004947D0
:004631C0 E8AB330000              call 00466570
:004631C5 25FFFF0000              and eax, 0000FFFF
:004631CA 8945F4                  mov dword ptr [ebp-0C], eax
:004631CD 817DF4FFFF0000          cmp dword ptr [ebp-0C], 0000FFFF
:004631D4 7517                    jne 004631ED
:004631D6 68FA000000              push 000000FA
:004631DB 8B15A8554B00            mov edx, dword ptr [004B55A8]
:004631E1 52                      push edx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:004631E2 FF15E4D64B00            Call dword ptr [004BD6E4]
:004631E8 8945FC                  mov dword ptr [ebp-04], eax
:004631EB EB30                    jmp 0046321D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004631D4(C)
|
:004631ED 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004631F0 6BC922                  imul ecx, 00000022
:004631F3 81C1D0474900            add ecx, 004947D0
:004631F9 E84200FAFF              call 00403240
:004631FE 25FF000000              and eax, 000000FF
:00463203 05FA000000              add eax, 000000FA
:00463208 25FFFF0000              and eax, 0000FFFF
:0046320D 50                      push eax
:0046320E A1A8554B00              mov eax, dword ptr [004B55A8]
:00463213 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00463214 FF15E4D64B00            Call dword ptr [004BD6E4]
:0046321A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004631EB(U)
|
:0046321D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00463220 51                      push ecx
:00463221 6AFF                    push FFFFFFFF
:00463223 8B5508                  mov edx, dword ptr [ebp+08]
:00463226 52                      push edx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:00463227 FF1514D44B00            Call dword ptr [004BD414]
:0046322D 8B45FC                  mov eax, dword ptr [ebp-04]
:00463230 50                      push eax
:00463231 6AFF                    push FFFFFFFF
:00463233 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463236 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:00463237 FF1514D44B00            Call dword ptr [004BD414]
:0046323D E95BFFFFFF              jmp 0046319D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004631AA(C)
|
:00463242 8BE5                    mov esp, ebp
:00463244 5D                      pop ebp
:00463245 C3                      ret



* Referenced by a CALL at Addresses:
|:00462C21   , :00463CDB   
|
:00463246 55                      push ebp
:00463247 8BEC                    mov ebp, esp
:00463249 83EC08                  sub esp, 00000008
:0046324C 53                      push ebx
:0046324D 8B4510                  mov eax, dword ptr [ebp+10]
:00463250 6BC050                  imul eax, 00000050
:00463253 05787F4900              add eax, 00497F78
:00463258 50                      push eax
:00463259 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046325C 51                      push ecx
:0046325D 8B5508                  mov edx, dword ptr [ebp+08]
:00463260 52                      push edx
:00463261 E879FEFFFF              call 004630DF
:00463266 83C40C                  add esp, 0000000C
:00463269 C745FC00000000          mov [ebp-04], 00000000
:00463270 EB09                    jmp 0046327B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004632AB(U), :00463300(U)
|
:00463272 8B45FC                  mov eax, dword ptr [ebp-04]
:00463275 83C001                  add eax, 00000001
:00463278 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463270(U)
|
:0046327B 837DFC08                cmp dword ptr [ebp-04], 00000008
:0046327F 0F8D80000000            jnl 00463305
:00463285 8A4DFC                  mov cl, byte ptr [ebp-04]
:00463288 51                      push ecx
:00463289 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046328C 6BC950                  imul ecx, 00000050
:0046328F 81C1787F4900            add ecx, 00497F78
:00463295 E846FFF9FF              call 004031E0
:0046329A 25FF000000              and eax, 000000FF
:0046329F 8945F8                  mov dword ptr [ebp-08], eax
:004632A2 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:004632A9 7502                    jne 004632AD
:004632AB EBC5                    jmp 00463272

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004632A9(C)
|
:004632AD 8B4D10                  mov ecx, dword ptr [ebp+10]
:004632B0 6BC950                  imul ecx, 00000050
:004632B3 81C1787F4900            add ecx, 00497F78
:004632B9 E8E2CBFAFF              call 0040FEA0
:004632BE 8AD8                    mov bl, al
:004632C0 81E3FF000000            and ebx, 000000FF
:004632C6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004632C9 6BC922                  imul ecx, 00000022
:004632CC 81C1D0474900            add ecx, 004947D0
:004632D2 E8B9320000              call 00466590
:004632D7 25FF000000              and eax, 000000FF
:004632DC 3BD8                    cmp ebx, eax
:004632DE 7D20                    jge 00463300
:004632E0 8B5508                  mov edx, dword ptr [ebp+08]
:004632E3 52                      push edx
:004632E4 8B45FC                  mov eax, dword ptr [ebp-04]
:004632E7 50                      push eax
:004632E8 E894110000              call 00464481
:004632ED 83C408                  add esp, 00000008
:004632F0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004632F3 51                      push ecx
:004632F4 8B55FC                  mov edx, dword ptr [ebp-04]
:004632F7 52                      push edx
:004632F8 E884110000              call 00464481
:004632FD 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004632DE(C)
|
:00463300 E96DFFFFFF              jmp 00463272

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046327F(C)
|
:00463305 5B                      pop ebx
:00463306 8BE5                    mov esp, ebp
:00463308 5D                      pop ebp
:00463309 C3                      ret



* Referenced by a CALL at Addresses:
|:00462611   , :0046275A   , :00463099   , :0046385F   , :00463AF0   
|:0046401B   
|
:0046330A 55                      push ebp
:0046330B 8BEC                    mov ebp, esp
:0046330D 83EC0C                  sub esp, 0000000C
:00463310 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463313 6BC950                  imul ecx, 00000050
:00463316 81C1787F4900            add ecx, 00497F78
:0046331C E89FFEF9FF              call 004031C0
:00463321 25FF000000              and eax, 000000FF
:00463326 8945FC                  mov dword ptr [ebp-04], eax
:00463329 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00463330 7444                    je 00463376
:00463332 8A45FC                  mov al, byte ptr [ebp-04]
:00463335 50                      push eax
:00463336 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463339 6BC950                  imul ecx, 00000050
:0046333C 81C1787F4900            add ecx, 00497F78
:00463342 E899FEF9FF              call 004031E0
:00463347 8AC8                    mov cl, al
:00463349 81E1FF000000            and ecx, 000000FF
:0046334F 6BC922                  imul ecx, 00000022
:00463352 81C1D0474900            add ecx, 004947D0
:00463358 E89323FAFF              call 004056F0
:0046335D 50                      push eax
:0046335E 684B050000              push 0000054B
:00463363 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463366 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463367 FF1510D64B00            Call dword ptr [004BD610]
:0046336D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046336E FF1514D64B00            Call dword ptr [004BD614]
:00463374 EB1B                    jmp 00463391

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463330(C)
|

* Possible StringData Ref from Data Obj ->"L˳ƪZ"
                                  |
:00463376 68A41B4800              push 00481BA4
:0046337B 684B050000              push 0000054B
:00463380 8B5508                  mov edx, dword ptr [ebp+08]
:00463383 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463384 FF1510D64B00            Call dword ptr [004BD610]
:0046338A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046338B FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463374(U)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00463391 6A0A                    push 0000000A
:00463393 8D45F4                  lea eax, dword ptr [ebp-0C]
:00463396 50                      push eax
:00463397 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046339A 6BC950                  imul ecx, 00000050
:0046339D 81C1787F4900            add ecx, 00497F78
:004633A3 E876E9F9FF              call 00401D1E
:004633A8 50                      push eax
:004633A9 E812720000              call 0046A5C0
:004633AE 83C40C                  add esp, 0000000C
:004633B1 50                      push eax
:004633B2 684D050000              push 0000054D
:004633B7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004633BA 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004633BB FF1510D64B00            Call dword ptr [004BD610]
:004633C1 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004633C2 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004633C8 6A0A                    push 0000000A
:004633CA 8D55F4                  lea edx, dword ptr [ebp-0C]
:004633CD 52                      push edx
:004633CE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004633D1 6BC950                  imul ecx, 00000050
:004633D4 81C1787F4900            add ecx, 00497F78
:004633DA E872E9F9FF              call 00401D51
:004633DF 50                      push eax
:004633E0 E8DB710000              call 0046A5C0
:004633E5 83C40C                  add esp, 0000000C
:004633E8 50                      push eax
:004633E9 6850050000              push 00000550
:004633EE 8B4508                  mov eax, dword ptr [ebp+08]
:004633F1 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004633F2 FF1510D64B00            Call dword ptr [004BD610]
:004633F8 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004633F9 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004633FF 6A0A                    push 0000000A
:00463401 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00463404 51                      push ecx
:00463405 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463408 6BC950                  imul ecx, 00000050
:0046340B 81C1787F4900            add ecx, 00497F78
:00463411 E86EE9F9FF              call 00401D84
:00463416 50                      push eax
:00463417 E8A4710000              call 0046A5C0
:0046341C 83C40C                  add esp, 0000000C
:0046341F 50                      push eax
:00463420 6853050000              push 00000553
:00463425 8B5508                  mov edx, dword ptr [ebp+08]
:00463428 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463429 FF1510D64B00            Call dword ptr [004BD610]
:0046342F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00463430 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00463436 6A0A                    push 0000000A
:00463438 8D45F4                  lea eax, dword ptr [ebp-0C]
:0046343B 50                      push eax
:0046343C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046343F 6BC950                  imul ecx, 00000050
:00463442 81C1787F4900            add ecx, 00497F78
:00463448 E86AE9F9FF              call 00401DB7
:0046344D 50                      push eax
:0046344E E86D710000              call 0046A5C0
:00463453 83C40C                  add esp, 0000000C
:00463456 50                      push eax
:00463457 6856050000              push 00000556
:0046345C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046345F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463460 FF1510D64B00            Call dword ptr [004BD610]
:00463466 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00463467 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046346D 6A0A                    push 0000000A
:0046346F 8D55F4                  lea edx, dword ptr [ebp-0C]
:00463472 52                      push edx
:00463473 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463476 6BC950                  imul ecx, 00000050
:00463479 81C1787F4900            add ecx, 00497F78
:0046347F E866E9F9FF              call 00401DEA
:00463484 50                      push eax
:00463485 E836710000              call 0046A5C0
:0046348A 83C40C                  add esp, 0000000C
:0046348D 50                      push eax
:0046348E 6857050000              push 00000557
:00463493 8B4508                  mov eax, dword ptr [ebp+08]
:00463496 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463497 FF1510D64B00            Call dword ptr [004BD610]
:0046349D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046349E FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004634A4 6A0A                    push 0000000A
:004634A6 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:004634A9 51                      push ecx
:004634AA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004634AD 6BC950                  imul ecx, 00000050
:004634B0 81C1787F4900            add ecx, 00497F78
:004634B6 E860E9F9FF              call 00401E1B
:004634BB 50                      push eax
:004634BC E8FF700000              call 0046A5C0
:004634C1 83C40C                  add esp, 0000000C
:004634C4 50                      push eax
:004634C5 6858050000              push 00000558
:004634CA 8B5508                  mov edx, dword ptr [ebp+08]
:004634CD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004634CE FF1510D64B00            Call dword ptr [004BD610]
:004634D4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004634D5 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004634DB 6A0A                    push 0000000A
:004634DD 8D45F4                  lea eax, dword ptr [ebp-0C]
:004634E0 50                      push eax
:004634E1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004634E4 6BC950                  imul ecx, 00000050
:004634E7 81C1787F4900            add ecx, 00497F78
:004634ED E85CE9F9FF              call 00401E4E
:004634F2 50                      push eax
:004634F3 E8C8700000              call 0046A5C0
:004634F8 83C40C                  add esp, 0000000C
:004634FB 50                      push eax
:004634FC 685C050000              push 0000055C
:00463501 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463504 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463505 FF1510D64B00            Call dword ptr [004BD610]
:0046350B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046350C FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00463512 6A0A                    push 0000000A
:00463514 8D55F4                  lea edx, dword ptr [ebp-0C]
:00463517 52                      push edx
:00463518 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046351B 6BC950                  imul ecx, 00000050
:0046351E 81C1787F4900            add ecx, 00497F78
:00463524 E891E9F9FF              call 00401EBA
:00463529 25FF000000              and eax, 000000FF
:0046352E 50                      push eax
:0046352F E88C700000              call 0046A5C0
:00463534 83C40C                  add esp, 0000000C
:00463537 50                      push eax
:00463538 685D050000              push 0000055D
:0046353D 8B4508                  mov eax, dword ptr [ebp+08]
:00463540 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463541 FF1510D64B00            Call dword ptr [004BD610]
:00463547 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00463548 FF1514D64B00            Call dword ptr [004BD614]
:0046354E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463551 51                      push ecx
:00463552 E807000000              call 0046355E
:00463557 83C404                  add esp, 00000004
:0046355A 8BE5                    mov esp, ebp
:0046355C 5D                      pop ebp
:0046355D C3                      ret



* Referenced by a CALL at Addresses:
|:00463552   , :0046362F   
|
:0046355E 55                      push ebp
:0046355F 8BEC                    mov ebp, esp
:00463561 6A00                    push 00000000
:00463563 684E050000              push 0000054E
:00463568 8B4508                  mov eax, dword ptr [ebp+08]
:0046356B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046356C FF1510D64B00            Call dword ptr [004BD610]
:00463572 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00463573 FF1500D74B00            Call dword ptr [004BD700]
:00463579 6A00                    push 00000000
:0046357B 6851050000              push 00000551
:00463580 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463583 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463584 FF1510D64B00            Call dword ptr [004BD610]
:0046358A 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046358B FF1500D74B00            Call dword ptr [004BD700]
:00463591 6A00                    push 00000000
:00463593 6854050000              push 00000554
:00463598 8B5508                  mov edx, dword ptr [ebp+08]
:0046359B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046359C FF1510D64B00            Call dword ptr [004BD610]
:004635A2 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004635A3 FF1500D74B00            Call dword ptr [004BD700]
:004635A9 6A00                    push 00000000
:004635AB 6859050000              push 00000559
:004635B0 8B4508                  mov eax, dword ptr [ebp+08]
:004635B3 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004635B4 FF1510D64B00            Call dword ptr [004BD610]
:004635BA 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004635BB FF1500D74B00            Call dword ptr [004BD700]
:004635C1 6A00                    push 00000000
:004635C3 685A050000              push 0000055A
:004635C8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004635CB 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004635CC FF1510D64B00            Call dword ptr [004BD610]
:004635D2 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004635D3 FF1500D74B00            Call dword ptr [004BD700]
:004635D9 6A00                    push 00000000
:004635DB 685B050000              push 0000055B
:004635E0 8B5508                  mov edx, dword ptr [ebp+08]
:004635E3 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004635E4 FF1510D64B00            Call dword ptr [004BD610]
:004635EA 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004635EB FF1500D74B00            Call dword ptr [004BD700]
:004635F1 6A00                    push 00000000
:004635F3 685E050000              push 0000055E
:004635F8 8B4508                  mov eax, dword ptr [ebp+08]
:004635FB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004635FC FF1510D64B00            Call dword ptr [004BD610]
:00463602 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00463603 FF1500D74B00            Call dword ptr [004BD700]
:00463609 6A00                    push 00000000
:0046360B 685F050000              push 0000055F
:00463610 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463613 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463614 FF1510D64B00            Call dword ptr [004BD610]
:0046361A 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046361B FF1500D74B00            Call dword ptr [004BD700]
:00463621 5D                      pop ebp
:00463622 C3                      ret



* Referenced by a CALL at Addresses:
|:004626C1   , :00462748   
|
:00463623 55                      push ebp
:00463624 8BEC                    mov ebp, esp
:00463626 83EC1C                  sub esp, 0000001C
:00463629 53                      push ebx
:0046362A 56                      push esi
:0046362B 8B4508                  mov eax, dword ptr [ebp+08]
:0046362E 50                      push eax
:0046362F E82AFFFFFF              call 0046355E
:00463634 83C404                  add esp, 00000004
:00463637 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046363A 6BC922                  imul ecx, 00000022
:0046363D 81C1D0474900            add ecx, 004947D0
:00463643 E818C8FAFF              call 0040FE60
:00463648 25FF000000              and eax, 000000FF
:0046364D 8945F4                  mov dword ptr [ebp-0C], eax
:00463650 837DF411                cmp dword ptr [ebp-0C], 00000011
:00463654 0F8717020000            ja 00463871
:0046365A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046365D 51                      push ecx
:0046365E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463661 6BC950                  imul ecx, 00000050
:00463664 81C1787F4900            add ecx, 00497F78
:0046366A E8CAE3F9FF              call 00401A39
:0046366F 85C0                    test eax, eax
:00463671 0F84E0010000            je 00463857
:00463677 68F4010000              push 000001F4
:0046367C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046367F 6BC950                  imul ecx, 00000050
:00463682 81C1787F4900            add ecx, 00497F78
:00463688 E8C35FFBFF              call 00419650
:0046368D 8AD8                    mov bl, al
:0046368F 81E3FF000000            and ebx, 000000FF
:00463695 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463698 6BC922                  imul ecx, 00000022
:0046369B 81C1D0474900            add ecx, 004947D0
:004636A1 E8BAFBF9FF              call 00403260
:004636A6 25FF000000              and eax, 000000FF
:004636AB 03D8                    add ebx, eax
:004636AD 53                      push ebx
:004636AE 6A00                    push 00000000
:004636B0 E8F401FCFF              call 004238A9
:004636B5 83C40C                  add esp, 0000000C
:004636B8 8945EC                  mov dword ptr [ebp-14], eax
:004636BB 68F4010000              push 000001F4
:004636C0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004636C3 6BC950                  imul ecx, 00000050
:004636C6 81C1787F4900            add ecx, 00497F78
:004636CC E81F60FBFF              call 004196F0
:004636D1 8AD8                    mov bl, al
:004636D3 81E3FF000000            and ebx, 000000FF
:004636D9 8B4D10                  mov ecx, dword ptr [ebp+10]
:004636DC 6BC922                  imul ecx, 00000022
:004636DF 81C1D0474900            add ecx, 004947D0
:004636E5 E896FBF9FF              call 00403280
:004636EA 25FF000000              and eax, 000000FF
:004636EF 99                      cdq
:004636F0 2BC2                    sub eax, edx
:004636F2 D1F8                    sar eax, 1
:004636F4 03D8                    add ebx, eax
:004636F6 53                      push ebx
:004636F7 6A00                    push 00000000
:004636F9 E8AB01FCFF              call 004238A9
:004636FE 83C40C                  add esp, 0000000C
:00463701 8945E8                  mov dword ptr [ebp-18], eax
:00463704 68FF000000              push 000000FF
:00463709 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046370C 6BC950                  imul ecx, 00000050
:0046370F 81C1787F4900            add ecx, 00497F78
:00463715 E8F65FFBFF              call 00419710
:0046371A 8AD8                    mov bl, al
:0046371C 81E3FF000000            and ebx, 000000FF
:00463722 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463725 6BC922                  imul ecx, 00000022
:00463728 81C1D0474900            add ecx, 004947D0
:0046372E E89D34FDFF              call 00436BD0
:00463733 25FF000000              and eax, 000000FF
:00463738 2BD8                    sub ebx, eax
:0046373A 53                      push ebx
:0046373B 6A00                    push 00000000
:0046373D E86701FCFF              call 004238A9
:00463742 83C40C                  add esp, 0000000C
:00463745 8945E4                  mov dword ptr [ebp-1C], eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00463748 6A0A                    push 0000000A
:0046374A 8D55F8                  lea edx, dword ptr [ebp-08]
:0046374D 52                      push edx
:0046374E 8B45EC                  mov eax, dword ptr [ebp-14]
:00463751 50                      push eax
:00463752 E8696E0000              call 0046A5C0
:00463757 83C40C                  add esp, 0000000C
:0046375A 50                      push eax
:0046375B 684D050000              push 0000054D
:00463760 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463763 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463764 FF1510D64B00            Call dword ptr [004BD610]
:0046376A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046376B FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00463771 6A0A                    push 0000000A
:00463773 8D55F8                  lea edx, dword ptr [ebp-08]
:00463776 52                      push edx
:00463777 8B45E8                  mov eax, dword ptr [ebp-18]
:0046377A 50                      push eax
:0046377B E8406E0000              call 0046A5C0
:00463780 83C40C                  add esp, 0000000C
:00463783 50                      push eax
:00463784 685C050000              push 0000055C
:00463789 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046378C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046378D FF1510D64B00            Call dword ptr [004BD610]
:00463793 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00463794 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046379A 6A0A                    push 0000000A
:0046379C 8D55F8                  lea edx, dword ptr [ebp-08]
:0046379F 52                      push edx
:004637A0 8B45E4                  mov eax, dword ptr [ebp-1C]
:004637A3 50                      push eax
:004637A4 E8176E0000              call 0046A5C0
:004637A9 83C40C                  add esp, 0000000C
:004637AC 50                      push eax
:004637AD 685D050000              push 0000055D
:004637B2 8B4D08                  mov ecx, dword ptr [ebp+08]
:004637B5 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004637B6 FF1510D64B00            Call dword ptr [004BD610]
:004637BC 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004637BD FF1514D64B00            Call dword ptr [004BD614]
:004637C3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004637C6 6BC950                  imul ecx, 00000050
:004637C9 81C1787F4900            add ecx, 00497F78
:004637CF E84AE5F9FF              call 00401D1E
:004637D4 8B55EC                  mov edx, dword ptr [ebp-14]
:004637D7 2BD0                    sub edx, eax
:004637D9 52                      push edx
:004637DA 684E050000              push 0000054E
:004637DF 8B4508                  mov eax, dword ptr [ebp+08]
:004637E2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004637E3 FF1510D64B00            Call dword ptr [004BD610]
:004637E9 50                      push eax
:004637EA E8DD59FBFF              call 004191CC
:004637EF 83C408                  add esp, 00000008
:004637F2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004637F5 6BC950                  imul ecx, 00000050
:004637F8 81C1787F4900            add ecx, 00497F78
:004637FE E84BE6F9FF              call 00401E4E
:00463803 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00463806 2BC8                    sub ecx, eax
:00463808 51                      push ecx
:00463809 685E050000              push 0000055E
:0046380E 8B5508                  mov edx, dword ptr [ebp+08]
:00463811 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463812 FF1510D64B00            Call dword ptr [004BD610]
:00463818 50                      push eax
:00463819 E8AE59FBFF              call 004191CC
:0046381E 83C408                  add esp, 00000008
:00463821 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463824 6BC950                  imul ecx, 00000050
:00463827 81C1787F4900            add ecx, 00497F78
:0046382D E888E6F9FF              call 00401EBA
:00463832 25FF000000              and eax, 000000FF
:00463837 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0046383A 2BC8                    sub ecx, eax
:0046383C 51                      push ecx
:0046383D 685F050000              push 0000055F
:00463842 8B5508                  mov edx, dword ptr [ebp+08]
:00463845 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463846 FF1510D64B00            Call dword ptr [004BD610]
:0046384C 50                      push eax
:0046384D E87A59FBFF              call 004191CC
:00463852 83C408                  add esp, 00000008
:00463855 EB15                    jmp 0046386C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463671(C)
|
:00463857 8B450C                  mov eax, dword ptr [ebp+0C]
:0046385A 50                      push eax
:0046385B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046385E 51                      push ecx
:0046385F E8A6FAFFFF              call 0046330A
:00463864 83C408                  add esp, 00000008
:00463867 E98C020000              jmp 00463AF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463855(U)
|
:0046386C E987020000              jmp 00463AF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463654(C)
|
:00463871 837DF412                cmp dword ptr [ebp-0C], 00000012
:00463875 757A                    jne 004638F1
:00463877 68F4010000              push 000001F4
:0046387C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046387F 6BC950                  imul ecx, 00000050
:00463882 81C1787F4900            add ecx, 00497F78
:00463888 E8E35DFBFF              call 00419670
:0046388D 8AD8                    mov bl, al
:0046388F 81E3FF000000            and ebx, 000000FF
:00463895 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463898 6BC922                  imul ecx, 00000022
:0046389B 81C1D0474900            add ecx, 004947D0
:004638A1 E8BAF9F9FF              call 00403260
:004638A6 25FF000000              and eax, 000000FF
:004638AB 03D8                    add ebx, eax
:004638AD 53                      push ebx
:004638AE 6A00                    push 00000000
:004638B0 E8F4FFFBFF              call 004238A9
:004638B5 83C40C                  add esp, 0000000C
:004638B8 8945F0                  mov dword ptr [ebp-10], eax
:004638BB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004638BE 6BC950                  imul ecx, 00000050
:004638C1 81C1787F4900            add ecx, 00497F78
:004638C7 E885E4F9FF              call 00401D51
:004638CC 8B55F0                  mov edx, dword ptr [ebp-10]
:004638CF 2BD0                    sub edx, eax
:004638D1 52                      push edx
:004638D2 8B45F0                  mov eax, dword ptr [ebp-10]
:004638D5 50                      push eax
:004638D6 6851050000              push 00000551
:004638DB 6850050000              push 00000550
:004638E0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004638E3 51                      push ecx
:004638E4 E815020000              call 00463AFE
:004638E9 83C414                  add esp, 00000014
:004638EC E907020000              jmp 00463AF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463875(C)
|
:004638F1 837DF413                cmp dword ptr [ebp-0C], 00000013
:004638F5 757A                    jne 00463971
:004638F7 68F4010000              push 000001F4
:004638FC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004638FF 6BC950                  imul ecx, 00000050
:00463902 81C1787F4900            add ecx, 00497F78
:00463908 E8835DFBFF              call 00419690
:0046390D 8AD8                    mov bl, al
:0046390F 81E3FF000000            and ebx, 000000FF
:00463915 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463918 6BC922                  imul ecx, 00000022
:0046391B 81C1D0474900            add ecx, 004947D0
:00463921 E83AF9F9FF              call 00403260
:00463926 25FF000000              and eax, 000000FF
:0046392B 03D8                    add ebx, eax
:0046392D 53                      push ebx
:0046392E 6A00                    push 00000000
:00463930 E874FFFBFF              call 004238A9
:00463935 83C40C                  add esp, 0000000C
:00463938 8945F0                  mov dword ptr [ebp-10], eax
:0046393B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046393E 6BC950                  imul ecx, 00000050
:00463941 81C1787F4900            add ecx, 00497F78
:00463947 E838E4F9FF              call 00401D84
:0046394C 8B55F0                  mov edx, dword ptr [ebp-10]
:0046394F 2BD0                    sub edx, eax
:00463951 52                      push edx
:00463952 8B45F0                  mov eax, dword ptr [ebp-10]
:00463955 50                      push eax
:00463956 6854050000              push 00000554
:0046395B 6853050000              push 00000553
:00463960 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463963 51                      push ecx
:00463964 E895010000              call 00463AFE
:00463969 83C414                  add esp, 00000014
:0046396C E987010000              jmp 00463AF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004638F5(C)
|
:00463971 837DF414                cmp dword ptr [ebp-0C], 00000014
:00463975 757A                    jne 004639F1
:00463977 68F4010000              push 000001F4
:0046397C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046397F 6BC950                  imul ecx, 00000050
:00463982 81C1787F4900            add ecx, 00497F78
:00463988 E8235DFBFF              call 004196B0
:0046398D 8AD8                    mov bl, al
:0046398F 81E3FF000000            and ebx, 000000FF
:00463995 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463998 6BC922                  imul ecx, 00000022
:0046399B 81C1D0474900            add ecx, 004947D0
:004639A1 E8BAF8F9FF              call 00403260
:004639A6 25FF000000              and eax, 000000FF
:004639AB 03D8                    add ebx, eax
:004639AD 53                      push ebx
:004639AE 6A00                    push 00000000
:004639B0 E8F4FEFBFF              call 004238A9
:004639B5 83C40C                  add esp, 0000000C
:004639B8 8945F0                  mov dword ptr [ebp-10], eax
:004639BB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004639BE 6BC950                  imul ecx, 00000050
:004639C1 81C1787F4900            add ecx, 00497F78
:004639C7 E8EBE3F9FF              call 00401DB7
:004639CC 8B55F0                  mov edx, dword ptr [ebp-10]
:004639CF 2BD0                    sub edx, eax
:004639D1 52                      push edx
:004639D2 8B45F0                  mov eax, dword ptr [ebp-10]
:004639D5 50                      push eax
:004639D6 6859050000              push 00000559
:004639DB 6856050000              push 00000556
:004639E0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004639E3 51                      push ecx
:004639E4 E815010000              call 00463AFE
:004639E9 83C414                  add esp, 00000014
:004639EC E907010000              jmp 00463AF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463975(C)
|
:004639F1 837DF415                cmp dword ptr [ebp-0C], 00000015
:004639F5 7574                    jne 00463A6B
:004639F7 68E8030000              push 000003E8
:004639FC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004639FF 6BC950                  imul ecx, 00000050
:00463A02 81C1787F4900            add ecx, 00497F78
:00463A08 E8C371FFFF              call 0045ABD0
:00463A0D 8BF0                    mov esi, eax
:00463A0F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463A12 6BC922                  imul ecx, 00000022
:00463A15 81C1D0474900            add ecx, 004947D0
:00463A1B E840F8F9FF              call 00403260
:00463A20 25FF000000              and eax, 000000FF
:00463A25 03F0                    add esi, eax
:00463A27 56                      push esi
:00463A28 6A00                    push 00000000
:00463A2A E87AFEFBFF              call 004238A9
:00463A2F 83C40C                  add esp, 0000000C
:00463A32 8945F0                  mov dword ptr [ebp-10], eax
:00463A35 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463A38 6BC950                  imul ecx, 00000050
:00463A3B 81C1787F4900            add ecx, 00497F78
:00463A41 E8A4E3F9FF              call 00401DEA
:00463A46 8B55F0                  mov edx, dword ptr [ebp-10]
:00463A49 2BD0                    sub edx, eax
:00463A4B 52                      push edx
:00463A4C 8B45F0                  mov eax, dword ptr [ebp-10]
:00463A4F 50                      push eax
:00463A50 685A050000              push 0000055A
:00463A55 6857050000              push 00000557
:00463A5A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463A5D 51                      push ecx
:00463A5E E89B000000              call 00463AFE
:00463A63 83C414                  add esp, 00000014
:00463A66 E98D000000              jmp 00463AF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004639F5(C)
|
:00463A6B 837DF416                cmp dword ptr [ebp-0C], 00000016
:00463A6F 7577                    jne 00463AE8
:00463A71 68F4010000              push 000001F4
:00463A76 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463A79 6BC950                  imul ecx, 00000050
:00463A7C 81C1787F4900            add ecx, 00497F78
:00463A82 E8495CFBFF              call 004196D0
:00463A87 8AD8                    mov bl, al
:00463A89 81E3FF000000            and ebx, 000000FF
:00463A8F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463A92 6BC922                  imul ecx, 00000022
:00463A95 81C1D0474900            add ecx, 004947D0
:00463A9B E8C0F7F9FF              call 00403260
:00463AA0 25FF000000              and eax, 000000FF
:00463AA5 03D8                    add ebx, eax
:00463AA7 53                      push ebx
:00463AA8 6A00                    push 00000000
:00463AAA E8FAFDFBFF              call 004238A9
:00463AAF 83C40C                  add esp, 0000000C
:00463AB2 8945F0                  mov dword ptr [ebp-10], eax
:00463AB5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463AB8 6BC950                  imul ecx, 00000050
:00463ABB 81C1787F4900            add ecx, 00497F78
:00463AC1 E855E3F9FF              call 00401E1B
:00463AC6 8B55F0                  mov edx, dword ptr [ebp-10]
:00463AC9 2BD0                    sub edx, eax
:00463ACB 52                      push edx
:00463ACC 8B45F0                  mov eax, dword ptr [ebp-10]
:00463ACF 50                      push eax
:00463AD0 685B050000              push 0000055B
:00463AD5 6858050000              push 00000558
:00463ADA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463ADD 51                      push ecx
:00463ADE E81B000000              call 00463AFE
:00463AE3 83C414                  add esp, 00000014
:00463AE6 EB10                    jmp 00463AF8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463A6F(C)
|
:00463AE8 8B550C                  mov edx, dword ptr [ebp+0C]
:00463AEB 52                      push edx
:00463AEC 8B4508                  mov eax, dword ptr [ebp+08]
:00463AEF 50                      push eax
:00463AF0 E815F8FFFF              call 0046330A
:00463AF5 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00463867(U), :0046386C(U), :004638EC(U), :0046396C(U), :004639EC(U)
|:00463A66(U), :00463AE6(U)
|
:00463AF8 5E                      pop esi
:00463AF9 5B                      pop ebx
:00463AFA 8BE5                    mov esp, ebp
:00463AFC 5D                      pop ebp
:00463AFD C3                      ret



* Referenced by a CALL at Addresses:
|:004638E4   , :00463964   , :004639E4   , :00463A5E   , :00463ADE   
|
:00463AFE 55                      push ebp
:00463AFF 8BEC                    mov ebp, esp
:00463B01 83EC08                  sub esp, 00000008

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00463B04 6A0A                    push 0000000A
:00463B06 8D45F8                  lea eax, dword ptr [ebp-08]
:00463B09 50                      push eax
:00463B0A 8B4D14                  mov ecx, dword ptr [ebp+14]
:00463B0D 51                      push ecx
:00463B0E E8AD6A0000              call 0046A5C0
:00463B13 83C40C                  add esp, 0000000C
:00463B16 50                      push eax
:00463B17 8B550C                  mov edx, dword ptr [ebp+0C]
:00463B1A 52                      push edx
:00463B1B 8B4508                  mov eax, dword ptr [ebp+08]
:00463B1E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463B1F FF1510D64B00            Call dword ptr [004BD610]
:00463B25 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00463B26 FF1514D64B00            Call dword ptr [004BD614]
:00463B2C 837D1800                cmp dword ptr [ebp+18], 00000000
:00463B30 7432                    je 00463B64

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00463B32 6A05                    push 00000005
:00463B34 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463B37 51                      push ecx
:00463B38 8B5508                  mov edx, dword ptr [ebp+08]
:00463B3B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463B3C FF1510D64B00            Call dword ptr [004BD610]
:00463B42 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00463B43 FF1500D74B00            Call dword ptr [004BD700]
:00463B49 8B4518                  mov eax, dword ptr [ebp+18]
:00463B4C 50                      push eax
:00463B4D 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463B50 51                      push ecx
:00463B51 8B5508                  mov edx, dword ptr [ebp+08]
:00463B54 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463B55 FF1510D64B00            Call dword ptr [004BD610]
:00463B5B 50                      push eax
:00463B5C E86B56FBFF              call 004191CC
:00463B61 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463B30(C)
|
:00463B64 8BE5                    mov esp, ebp
:00463B66 5D                      pop ebp
:00463B67 C3                      ret



* Referenced by a CALL at Address:
|:00462414   
|
:00463B68 55                      push ebp
:00463B69 8BEC                    mov ebp, esp
:00463B6B 83EC3C                  sub esp, 0000003C
:00463B6E 8B450C                  mov eax, dword ptr [ebp+0C]
:00463B71 25FF000000              and eax, 000000FF
:00463B76 85C0                    test eax, eax
:00463B78 755D                    jne 00463BD7
:00463B7A 6A00                    push 00000000
:00463B7C 6A01                    push 00000001
:00463B7E 68F1000000              push 000000F1
:00463B83 6878040000              push 00000478
:00463B88 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463B8B 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463B8C FF1510D64B00            Call dword ptr [004BD610]
:00463B92 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00463B93 FF1504D64B00            Call dword ptr [004BD604]
:00463B99 6A00                    push 00000000
:00463B9B 687B040000              push 0000047B
:00463BA0 8B5508                  mov edx, dword ptr [ebp+08]
:00463BA3 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463BA4 FF1510D64B00            Call dword ptr [004BD610]
:00463BAA 50                      push eax
:00463BAB 8B4508                  mov eax, dword ptr [ebp+08]
:00463BAE 50                      push eax
:00463BAF E8D254FBFF              call 00419086
:00463BB4 83C40C                  add esp, 0000000C
:00463BB7 6A00                    push 00000000
:00463BB9 687C040000              push 0000047C
:00463BBE 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463BC1 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463BC2 FF1510D64B00            Call dword ptr [004BD610]
:00463BC8 50                      push eax
:00463BC9 8B5508                  mov edx, dword ptr [ebp+08]
:00463BCC 52                      push edx
:00463BCD E8B454FBFF              call 00419086
:00463BD2 83C40C                  add esp, 0000000C
:00463BD5 EB5B                    jmp 00463C32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463B78(C)
|
:00463BD7 6A00                    push 00000000
:00463BD9 6A01                    push 00000001
:00463BDB 68F1000000              push 000000F1
:00463BE0 6879040000              push 00000479
:00463BE5 8B4508                  mov eax, dword ptr [ebp+08]
:00463BE8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463BE9 FF1510D64B00            Call dword ptr [004BD610]
:00463BEF 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00463BF0 FF1504D64B00            Call dword ptr [004BD604]
:00463BF6 6A01                    push 00000001
:00463BF8 687B040000              push 0000047B
:00463BFD 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463C00 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463C01 FF1510D64B00            Call dword ptr [004BD610]
:00463C07 50                      push eax
:00463C08 8B5508                  mov edx, dword ptr [ebp+08]
:00463C0B 52                      push edx
:00463C0C E87554FBFF              call 00419086
:00463C11 83C40C                  add esp, 0000000C
:00463C14 6A01                    push 00000001
:00463C16 687C040000              push 0000047C
:00463C1B 8B4508                  mov eax, dword ptr [ebp+08]
:00463C1E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463C1F FF1510D64B00            Call dword ptr [004BD610]
:00463C25 50                      push eax
:00463C26 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463C29 51                      push ecx
:00463C2A E85754FBFF              call 00419086
:00463C2F 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463BD5(U)
|
:00463C32 8B5510                  mov edx, dword ptr [ebp+10]
:00463C35 52                      push edx
:00463C36 683C050000              push 0000053C
:00463C3B 8B4508                  mov eax, dword ptr [ebp+08]
:00463C3E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463C3F FF1510D64B00            Call dword ptr [004BD610]
:00463C45 50                      push eax
:00463C46 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463C49 51                      push ecx
:00463C4A E812010000              call 00463D61
:00463C4F 83C40C                  add esp, 0000000C
:00463C52 8945F0                  mov dword ptr [ebp-10], eax
:00463C55 8B4D10                  mov ecx, dword ptr [ebp+10]
:00463C58 E823A2FCFF              call 0042DE80
:00463C5D 8945F8                  mov dword ptr [ebp-08], eax
:00463C60 817DF8FFFF0000          cmp dword ptr [ebp-08], 0000FFFF
:00463C67 750A                    jne 00463C73
:00463C69 B8FFFF0000              mov eax, 0000FFFF
:00463C6E E9EA000000              jmp 00463D5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463C67(C)
|
:00463C73 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00463C75 6A08                    push 00000008
:00463C77 8D55FC                  lea edx, dword ptr [ebp-04]
:00463C7A 52                      push edx
:00463C7B 8D45F4                  lea eax, dword ptr [ebp-0C]
:00463C7E 50                      push eax
:00463C7F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463C82 51                      push ecx
:00463C83 E8DC46FBFF              call 00418364
:00463C88 83C414                  add esp, 00000014
:00463C8B 687C040000              push 0000047C
:00463C90 8B5508                  mov edx, dword ptr [ebp+08]
:00463C93 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463C94 FF1510D64B00            Call dword ptr [004BD610]
:00463C9A 50                      push eax
:00463C9B 8B4508                  mov eax, dword ptr [ebp+08]
:00463C9E 50                      push eax
:00463C9F E8D2030000              call 00464076
:00463CA4 83C408                  add esp, 00000008
:00463CA7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00463CAA 51                      push ecx
:00463CAB 8B55FC                  mov edx, dword ptr [ebp-04]
:00463CAE 52                      push edx
:00463CAF 8B45F4                  mov eax, dword ptr [ebp-0C]
:00463CB2 50                      push eax
:00463CB3 687B040000              push 0000047B
:00463CB8 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463CBB 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463CBC FF1510D64B00            Call dword ptr [004BD610]
:00463CC2 50                      push eax
:00463CC3 8B5508                  mov edx, dword ptr [ebp+08]
:00463CC6 52                      push edx
:00463CC7 E85B030000              call 00464027
:00463CCC 83C414                  add esp, 00000014
:00463CCF 8B45F8                  mov eax, dword ptr [ebp-08]
:00463CD2 50                      push eax
:00463CD3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00463CD6 51                      push ecx
:00463CD7 8B55F4                  mov edx, dword ptr [ebp-0C]
:00463CDA 52                      push edx
:00463CDB E866F5FFFF              call 00463246
:00463CE0 83C40C                  add esp, 0000000C
:00463CE3 683C050000              push 0000053C
:00463CE8 8B4508                  mov eax, dword ptr [ebp+08]
:00463CEB 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463CEC FF1510D64B00            Call dword ptr [004BD610]
:00463CF2 8945EC                  mov dword ptr [ebp-14], eax
:00463CF5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00463CF8 51                      push ecx

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:00463CF9 FF1500D64B00            Call dword ptr [004BD600]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00463CFF C745D403000000          mov [ebp-2C], 00000003

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00463D06 C745D003000000          mov [ebp-30], 00000003
:00463D0D 8D55C4                  lea edx, dword ptr [ebp-3C]
:00463D10 52                      push edx
:00463D11 8B45F0                  mov eax, dword ptr [ebp-10]
:00463D14 50                      push eax
:00463D15 682B100000              push 0000102B
:00463D1A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00463D1D 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00463D1E FF1504D64B00            Call dword ptr [004BD604]
:00463D24 6A00                    push 00000000
:00463D26 8B55F0                  mov edx, dword ptr [ebp-10]
:00463D29 52                      push edx
:00463D2A 6813100000              push 00001013
:00463D2F 8B45EC                  mov eax, dword ptr [ebp-14]
:00463D32 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00463D33 FF1504D64B00            Call dword ptr [004BD604]
:00463D39 6A00                    push 00000000
:00463D3B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00463D3E 51                      push ecx
:00463D3F 682A100000              push 0000102A
:00463D44 8B55EC                  mov edx, dword ptr [ebp-14]
:00463D47 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00463D48 FF1504D64B00            Call dword ptr [004BD604]
:00463D4E 8B4508                  mov eax, dword ptr [ebp+08]
:00463D51 50                      push eax
:00463D52 E88E020000              call 00463FE5
:00463D57 83C404                  add esp, 00000004
:00463D5A 8B45F8                  mov eax, dword ptr [ebp-08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463C6E(U)
|
:00463D5D 8BE5                    mov esp, ebp
:00463D5F 5D                      pop ebp
:00463D60 C3                      ret



* Referenced by a CALL at Address:
|:00463C4A   
|
:00463D61 55                      push ebp
:00463D62 8BEC                    mov ebp, esp
:00463D64 83EC0C                  sub esp, 0000000C
:00463D67 8B450C                  mov eax, dword ptr [ebp+0C]
:00463D6A 50                      push eax
:00463D6B 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463D6E 51                      push ecx
:00463D6F E86F000000              call 00463DE3
:00463D74 83C408                  add esp, 00000008
:00463D77 8B5510                  mov edx, dword ptr [ebp+10]
:00463D7A 52                      push edx
:00463D7B 8B450C                  mov eax, dword ptr [ebp+0C]
:00463D7E 50                      push eax
:00463D7F E8EF030000              call 00464173
:00463D84 83C408                  add esp, 00000008
:00463D87 8945F4                  mov dword ptr [ebp-0C], eax
:00463D8A 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00463D8C 6A02                    push 00000002
:00463D8E 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00463D91 51                      push ecx
:00463D92 8D55F8                  lea edx, dword ptr [ebp-08]
:00463D95 52                      push edx
:00463D96 8B4508                  mov eax, dword ptr [ebp+08]
:00463D99 50                      push eax
:00463D9A E8C545FBFF              call 00418364
:00463D9F 83C414                  add esp, 00000014
:00463DA2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00463DA5 51                      push ecx
:00463DA6 6A01                    push 00000001
:00463DA8 6803100000              push 00001003
:00463DAD 8B550C                  mov edx, dword ptr [ebp+0C]
:00463DB0 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00463DB1 FF1504D64B00            Call dword ptr [004BD604]
:00463DB7 8B45FC                  mov eax, dword ptr [ebp-04]
:00463DBA 50                      push eax
:00463DBB 6A00                    push 00000000
:00463DBD 6803100000              push 00001003
:00463DC2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463DC5 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00463DC6 FF1504D64B00            Call dword ptr [004BD604]
:00463DCC 8B55FC                  mov edx, dword ptr [ebp-04]
:00463DCF 52                      push edx
:00463DD0 8B45F8                  mov eax, dword ptr [ebp-08]
:00463DD3 50                      push eax
:00463DD4 E8D0010000              call 00463FA9
:00463DD9 83C408                  add esp, 00000008
:00463DDC 8B45F4                  mov eax, dword ptr [ebp-0C]
:00463DDF 8BE5                    mov esp, ebp
:00463DE1 5D                      pop ebp
:00463DE2 C3                      ret



* Referenced by a CALL at Address:
|:00463D6F   
|
:00463DE3 55                      push ebp
:00463DE4 8BEC                    mov ebp, esp
:00463DE6 83EC44                  sub esp, 00000044
:00463DE9 6A20                    push 00000020
:00463DEB 6A00                    push 00000000
:00463DED 8D45E0                  lea eax, dword ptr [ebp-20]
:00463DF0 50                      push eax
:00463DF1 E8DABC0000              call 0046FAD0
:00463DF6 83C40C                  add esp, 0000000C
:00463DF9 C745E00F000000          mov [ebp-20], 0000000F
:00463E00 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00463E03 894DEC                  mov dword ptr [ebp-14], ecx
:00463E06 C745F020000000          mov [ebp-10], 00000020
:00463E0D C745BC00000000          mov [ebp-44], 00000000
:00463E14 EB09                    jmp 00463E1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463E82(U)
|
:00463E16 8B55BC                  mov edx, dword ptr [ebp-44]
:00463E19 83C201                  add edx, 00000001
:00463E1C 8955BC                  mov dword ptr [ebp-44], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463E14(U)
|
:00463E1F 837DBC04                cmp dword ptr [ebp-44], 00000004
:00463E23 7D5F                    jge 00463E84
:00463E25 837DBC01                cmp dword ptr [ebp-44], 00000001
:00463E29 7502                    jne 00463E2D
:00463E2B EB59                    jmp 00463E86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463E29(C)
|
:00463E2D 33C0                    xor eax, eax
:00463E2F 837DBC02                cmp dword ptr [ebp-44], 00000002
:00463E33 0F9DC0                  setnl al
:00463E36 8945E4                  mov dword ptr [ebp-1C], eax
:00463E39 8B4DBC                  mov ecx, dword ptr [ebp-44]
:00463E3C 51                      push ecx
:00463E3D 8B550C                  mov edx, dword ptr [ebp+0C]
:00463E40 52                      push edx
:00463E41 E846000000              call 00463E8C
:00463E46 83C408                  add esp, 00000008
:00463E49 8945E8                  mov dword ptr [ebp-18], eax
:00463E4C 8B45BC                  mov eax, dword ptr [ebp-44]
:00463E4F 8945F4                  mov dword ptr [ebp-0C], eax
:00463E52 6A20                    push 00000020
:00463E54 8D4DC0                  lea ecx, dword ptr [ebp-40]
:00463E57 51                      push ecx
:00463E58 8B55BC                  mov edx, dword ptr [ebp-44]
:00463E5B 83C207                  add edx, 00000007
:00463E5E 52                      push edx
:00463E5F A1A8554B00              mov eax, dword ptr [004B55A8]
:00463E64 50                      push eax

* Reference To: USER32.LoadStringA, Ord:0183h
                                  |
:00463E65 FF15BCD64B00            Call dword ptr [004BD6BC]
:00463E6B 8D4DE0                  lea ecx, dword ptr [ebp-20]
:00463E6E 51                      push ecx
:00463E6F 8B55BC                  mov edx, dword ptr [ebp-44]
:00463E72 52                      push edx
:00463E73 681B100000              push 0000101B
:00463E78 8B450C                  mov eax, dword ptr [ebp+0C]
:00463E7B 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00463E7C FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463E86(U)
|
:00463E82 EB92                    jmp 00463E16

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463E23(C)
|
:00463E84 EB02                    jmp 00463E88

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463E2B(U)
|
:00463E86 EBFA                    jmp 00463E82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463E84(U)
|
:00463E88 8BE5                    mov esp, ebp
:00463E8A 5D                      pop ebp
:00463E8B C3                      ret



* Referenced by a CALL at Address:
|:00463E41   
|
:00463E8C 55                      push ebp
:00463E8D 8BEC                    mov ebp, esp
:00463E8F 83EC24                  sub esp, 00000024
:00463E92 E8AD000000              call 00463F44
:00463E97 8945EC                  mov dword ptr [ebp-14], eax
:00463E9A 8D45F0                  lea eax, dword ptr [ebp-10]
:00463E9D 50                      push eax
:00463E9E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00463EA1 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:00463EA2 FF15D8D64B00            Call dword ptr [004BD6D8]
:00463EA8 837DEC06                cmp dword ptr [ebp-14], 00000006
:00463EAC 7D08                    jge 00463EB6
:00463EAE DB45F8                  fild dword ptr [ebp-08]
:00463EB1 DD5DE4                  fstp qword ptr [ebp-1C]
:00463EB4 EB16                    jmp 00463ECC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463EAC(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:00463EB6 6A15                    push 00000015

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00463EB8 FF1578D64B00            Call dword ptr [004BD678]
:00463EBE 8B55F8                  mov edx, dword ptr [ebp-08]
:00463EC1 2BD0                    sub edx, eax
:00463EC3 8955E0                  mov dword ptr [ebp-20], edx
:00463EC6 DB45E0                  fild dword ptr [ebp-20]
:00463EC9 DD5DE4                  fstp qword ptr [ebp-1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463EB4(U)
|
:00463ECC 8B450C                  mov eax, dword ptr [ebp+0C]
:00463ECF 8945DC                  mov dword ptr [ebp-24], eax
:00463ED2 837DDC03                cmp dword ptr [ebp-24], 00000003
:00463ED6 7742                    ja 00463F1A
:00463ED8 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00463EDB FF248D343F4600          jmp dword ptr [4*ecx+00463F34]
:00463EE2 DD45E4                  fld qword ptr [ebp-1C]
:00463EE5 DC0DD8AF4700            fmul qword ptr [0047AFD8]
:00463EEB DD5DE4                  fstp qword ptr [ebp-1C]
:00463EEE EB38                    jmp 00463F28
:00463EF0 DD45E4                  fld qword ptr [ebp-1C]
:00463EF3 DC0DE0AF4700            fmul qword ptr [0047AFE0]
:00463EF9 DD5DE4                  fstp qword ptr [ebp-1C]
:00463EFC EB2A                    jmp 00463F28
:00463EFE DD45E4                  fld qword ptr [ebp-1C]
:00463F01 DC0DE8AF4700            fmul qword ptr [0047AFE8]
:00463F07 DD5DE4                  fstp qword ptr [ebp-1C]
:00463F0A EB1C                    jmp 00463F28
:00463F0C DD45E4                  fld qword ptr [ebp-1C]
:00463F0F DC0DF0AF4700            fmul qword ptr [0047AFF0]
:00463F15 DD5DE4                  fstp qword ptr [ebp-1C]
:00463F18 EB0E                    jmp 00463F28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463ED6(C)
|
:00463F1A C745E400000000          mov [ebp-1C], 00000000
:00463F21 C745E800003440          mov [ebp-18], 40340000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00463EEE(U), :00463EFC(U), :00463F0A(U), :00463F18(U)
|
:00463F28 DD45E4                  fld qword ptr [ebp-1C]
:00463F2B E870BC0000              call 0046FBA0
:00463F30 8BE5                    mov esp, ebp
:00463F32 5D                      pop ebp
:00463F33 C3                      ret



:00463F34 E23E4600                DWORD 00463EE2
:00463F38 F03E4600                DWORD 00463EF0
:00463F3C FE3E4600                DWORD 00463EFE
:00463F40 0C3F4600                DWORD 00463F0C



* Referenced by a CALL at Address:
|:00463E92   
|
:00463F44 55                      push ebp
:00463F45 8BEC                    mov ebp, esp
:00463F47 83EC08                  sub esp, 00000008
:00463F4A C745F800000000          mov [ebp-08], 00000000

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00463F51 C745FCC8000000          mov [ebp-04], 000000C8
:00463F58 EB09                    jmp 00463F63

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463FA0(U)
|
:00463F5A 8B45FC                  mov eax, dword ptr [ebp-04]
:00463F5D 83C001                  add eax, 00000001
:00463F60 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463F58(U)
|
:00463F63 817DFC20030000          cmp dword ptr [ebp-04], 00000320
:00463F6A 7336                    jnb 00463FA2
:00463F6C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00463F6F 51                      push ecx
:00463F70 E81B9FFAFF              call 0040DE90
:00463F75 83C404                  add esp, 00000004
:00463F78 85C0                    test eax, eax
:00463F7A 7424                    je 00463FA0
:00463F7C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00463F7F 6BC950                  imul ecx, 00000050
:00463F82 81C1787F4900            add ecx, 00497F78
:00463F88 E8A389FAFF              call 0040C930
:00463F8D 25FF000000              and eax, 000000FF
:00463F92 83F801                  cmp eax, 00000001
:00463F95 7509                    jne 00463FA0
:00463F97 8B55F8                  mov edx, dword ptr [ebp-08]
:00463F9A 83C201                  add edx, 00000001
:00463F9D 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00463F7A(C), :00463F95(C)
|
:00463FA0 EBB8                    jmp 00463F5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00463F6A(C)
|
:00463FA2 8B45F8                  mov eax, dword ptr [ebp-08]
:00463FA5 8BE5                    mov esp, ebp
:00463FA7 5D                      pop ebp
:00463FA8 C3                      ret



* Referenced by a CALL at Address:
|:00463DD4   
|
:00463FA9 55                      push ebp
:00463FAA 8BEC                    mov ebp, esp
:00463FAC 51                      push ecx
:00463FAD 6822010000              push 00000122
:00463FB2 A1A8554B00              mov eax, dword ptr [004B55A8]
:00463FB7 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00463FB8 FF15E4D64B00            Call dword ptr [004BD6E4]
:00463FBE 8945FC                  mov dword ptr [ebp-04], eax
:00463FC1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00463FC4 51                      push ecx
:00463FC5 6AFF                    push FFFFFFFF
:00463FC7 8B5508                  mov edx, dword ptr [ebp+08]
:00463FCA 52                      push edx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:00463FCB FF1514D44B00            Call dword ptr [004BD414]
:00463FD1 8B45FC                  mov eax, dword ptr [ebp-04]
:00463FD4 50                      push eax
:00463FD5 6AFF                    push FFFFFFFF
:00463FD7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00463FDA 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:00463FDB FF1514D44B00            Call dword ptr [004BD414]
:00463FE1 8BE5                    mov esp, ebp
:00463FE3 5D                      pop ebp
:00463FE4 C3                      ret



* Referenced by a CALL at Address:
|:00463D52   
|
:00463FE5 55                      push ebp
:00463FE6 8BEC                    mov ebp, esp
:00463FE8 83EC08                  sub esp, 00000008
:00463FEB 6849050000              push 00000549
:00463FF0 8B4508                  mov eax, dword ptr [ebp+08]
:00463FF3 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00463FF4 FF1510D64B00            Call dword ptr [004BD610]
:00463FFA 8945F8                  mov dword ptr [ebp-08], eax
:00463FFD 6A00                    push 00000000
:00463FFF 6820030000              push 00000320
:00464004 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00464007 51                      push ecx
:00464008 E8B818FBFF              call 004158C5
:0046400D 83C40C                  add esp, 0000000C
:00464010 8945FC                  mov dword ptr [ebp-04], eax
:00464013 8B55FC                  mov edx, dword ptr [ebp-04]
:00464016 52                      push edx
:00464017 8B4508                  mov eax, dword ptr [ebp+08]
:0046401A 50                      push eax
:0046401B E8EAF2FFFF              call 0046330A
:00464020 83C408                  add esp, 00000008
:00464023 8BE5                    mov esp, ebp
:00464025 5D                      pop ebp
:00464026 C3                      ret



* Referenced by a CALL at Address:
|:00463CC7   
|
:00464027 55                      push ebp
:00464028 8BEC                    mov ebp, esp
:0046402A 8B450C                  mov eax, dword ptr [ebp+0C]
:0046402D 50                      push eax
:0046402E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464031 51                      push ecx
:00464032 E85C44FBFF              call 00418493
:00464037 83C408                  add esp, 00000008
:0046403A 8B5510                  mov edx, dword ptr [ebp+10]
:0046403D 52                      push edx
:0046403E 6A01                    push 00000001
:00464040 6803100000              push 00001003
:00464045 8B450C                  mov eax, dword ptr [ebp+0C]
:00464048 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464049 FF1504D64B00            Call dword ptr [004BD604]
:0046404F 8B4D14                  mov ecx, dword ptr [ebp+14]
:00464052 51                      push ecx
:00464053 6A00                    push 00000000
:00464055 6803100000              push 00001003
:0046405A 8B550C                  mov edx, dword ptr [ebp+0C]
:0046405D 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046405E FF1504D64B00            Call dword ptr [004BD604]
:00464064 8B4518                  mov eax, dword ptr [ebp+18]
:00464067 50                      push eax
:00464068 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046406B 51                      push ecx
:0046406C E828000000              call 00464099
:00464071 83C408                  add esp, 00000008
:00464074 5D                      pop ebp
:00464075 C3                      ret



* Referenced by a CALL at Address:
|:00463C9F   
|
:00464076 55                      push ebp
:00464077 8BEC                    mov ebp, esp
:00464079 8B450C                  mov eax, dword ptr [ebp+0C]
:0046407C 50                      push eax
:0046407D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464080 51                      push ecx
:00464081 E80D44FBFF              call 00418493
:00464086 83C408                  add esp, 00000008
:00464089 6A00                    push 00000000
:0046408B 8B550C                  mov edx, dword ptr [ebp+0C]
:0046408E 52                      push edx
:0046408F E899E7FFFF              call 0046282D
:00464094 83C408                  add esp, 00000008
:00464097 5D                      pop ebp
:00464098 C3                      ret



* Referenced by a CALL at Addresses:
|:00462C5B   , :0046406C   
|
:00464099 55                      push ebp
:0046409A 8BEC                    mov ebp, esp
:0046409C 83EC30                  sub esp, 00000030
:0046409F C745D40F000000          mov [ebp-2C], 0000000F
:004640A6 C745E000000000          mov [ebp-20], 00000000
:004640AD C745E400000000          mov [ebp-1C], 00000000
:004640B4 C745DC00000000          mov [ebp-24], 00000000
:004640BB C745E8FFFFFFFF          mov [ebp-18], FFFFFFFF
:004640C2 C745EC20000000          mov [ebp-14], 00000020
:004640C9 C745D000000000          mov [ebp-30], 00000000
:004640D0 EB09                    jmp 004640DB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046413C(U), :0046416A(U)
|
:004640D2 8B45D0                  mov eax, dword ptr [ebp-30]
:004640D5 83C001                  add eax, 00000001
:004640D8 8945D0                  mov dword ptr [ebp-30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004640D0(U)
|
:004640DB 837DD008                cmp dword ptr [ebp-30], 00000008
:004640DF 0F8D8A000000            jnl 0046416F
:004640E5 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004640E8 894DF0                  mov dword ptr [ebp-10], ecx
:004640EB 8A55D0                  mov dl, byte ptr [ebp-30]
:004640EE 52                      push edx
:004640EF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004640F2 6BC950                  imul ecx, 00000050
:004640F5 81C1787F4900            add ecx, 00497F78
:004640FB E8E0F0F9FF              call 004031E0
:00464100 25FF000000              and eax, 000000FF
:00464105 8945FC                  mov dword ptr [ebp-04], eax
:00464108 8B45D0                  mov eax, dword ptr [ebp-30]
:0046410B 8945D8                  mov dword ptr [ebp-28], eax
:0046410E 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:00464115 7413                    je 0046412A
:00464117 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046411A 51                      push ecx
:0046411B E80ED1FFFF              call 0046122E
:00464120 83C404                  add esp, 00000004
:00464123 3DFF000000              cmp eax, 000000FF
:00464128 7514                    jne 0046413E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464115(C)
|
:0046412A 6A00                    push 00000000
:0046412C 8B55D0                  mov edx, dword ptr [ebp-30]
:0046412F 52                      push edx
:00464130 8B4508                  mov eax, dword ptr [ebp+08]
:00464133 50                      push eax
:00464134 E8A051FBFF              call 004192D9
:00464139 83C40C                  add esp, 0000000C
:0046413C EB94                    jmp 004640D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464128(C)
|
:0046413E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464141 51                      push ecx
:00464142 8B55D0                  mov edx, dword ptr [ebp-30]
:00464145 52                      push edx
:00464146 8B4508                  mov eax, dword ptr [ebp+08]
:00464149 50                      push eax
:0046414A E88A51FBFF              call 004192D9
:0046414F 83C40C                  add esp, 0000000C
:00464152 8945F4                  mov dword ptr [ebp-0C], eax
:00464155 8D4DD4                  lea ecx, dword ptr [ebp-2C]
:00464158 51                      push ecx
:00464159 6A00                    push 00000000
:0046415B 6807100000              push 00001007
:00464160 8B5508                  mov edx, dword ptr [ebp+08]
:00464163 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464164 FF1504D64B00            Call dword ptr [004BD604]
:0046416A E963FFFFFF              jmp 004640D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004640DF(C)
|
:0046416F 8BE5                    mov esp, ebp
:00464171 5D                      pop ebp
:00464172 C3                      ret



* Referenced by a CALL at Address:
|:00463D7F   
|
:00464173 55                      push ebp
:00464174 8BEC                    mov ebp, esp
:00464176 83EC38                  sub esp, 00000038
:00464179 C745CC0F000000          mov [ebp-34], 0000000F
:00464180 C745D800000000          mov [ebp-28], 00000000
:00464187 C745DC00000000          mov [ebp-24], 00000000
:0046418E C745D400000000          mov [ebp-2C], 00000000
:00464195 C745E420000000          mov [ebp-1C], 00000020
:0046419C C745E0FFFFFFFF          mov [ebp-20], FFFFFFFF
:004641A3 C745F400000000          mov [ebp-0C], 00000000
:004641AA C745C8FFFF0000          mov [ebp-38], 0000FFFF
:004641B1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004641B4 E8C79CFCFF              call 0042DE80
:004641B9 8945FC                  mov dword ptr [ebp-04], eax

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:004641BC C745F8C8000000          mov [ebp-08], 000000C8
:004641C3 EB09                    jmp 004641CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464265(U)
|
:004641C5 8B45F8                  mov eax, dword ptr [ebp-08]
:004641C8 83C001                  add eax, 00000001
:004641CB 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004641C3(U)
|
:004641CE 817DF820030000          cmp dword ptr [ebp-08], 00000320
:004641D5 0F838F000000            jnb 0046426A
:004641DB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004641DE 51                      push ecx
:004641DF E8AC9CFAFF              call 0040DE90
:004641E4 83C404                  add esp, 00000004
:004641E7 85C0                    test eax, eax
:004641E9 747A                    je 00464265
:004641EB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004641EE 6BC950                  imul ecx, 00000050
:004641F1 81C1787F4900            add ecx, 00497F78
:004641F7 E83487FAFF              call 0040C930
:004641FC 25FF000000              and eax, 000000FF
:00464201 83F801                  cmp eax, 00000001
:00464204 755F                    jne 00464265
:00464206 8B55F4                  mov edx, dword ptr [ebp-0C]
:00464209 8955D0                  mov dword ptr [ebp-30], edx
:0046420C 8B45F8                  mov eax, dword ptr [ebp-08]
:0046420F 6BC050                  imul eax, 00000050
:00464212 05787F4900              add eax, 00497F78
:00464217 8945EC                  mov dword ptr [ebp-14], eax
:0046421A 817DFCFFFF0000          cmp dword ptr [ebp-04], 0000FFFF
:00464221 7408                    je 0046422B
:00464223 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464226 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:00464229 7515                    jne 00464240

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464221(C)
|
:0046422B C745E800000000          mov [ebp-18], 00000000
:00464232 8B55F4                  mov edx, dword ptr [ebp-0C]
:00464235 8955C8                  mov dword ptr [ebp-38], edx
:00464238 8B45F8                  mov eax, dword ptr [ebp-08]
:0046423B 8945FC                  mov dword ptr [ebp-04], eax
:0046423E EB07                    jmp 00464247

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464229(C)
|
:00464240 C745E801000000          mov [ebp-18], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046423E(U)
|
:00464247 8D4DCC                  lea ecx, dword ptr [ebp-34]
:0046424A 51                      push ecx
:0046424B 6A00                    push 00000000
:0046424D 6807100000              push 00001007
:00464252 8B5508                  mov edx, dword ptr [ebp+08]
:00464255 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464256 FF1504D64B00            Call dword ptr [004BD604]
:0046425C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046425F 83C001                  add eax, 00000001
:00464262 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004641E9(C), :00464204(C)
|
:00464265 E95BFFFFFF              jmp 004641C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004641D5(C)
|
:0046426A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046426D 51                      push ecx
:0046426E 8B55FC                  mov edx, dword ptr [ebp-04]
:00464271 52                      push edx
:00464272 8B4508                  mov eax, dword ptr [ebp+08]
:00464275 50                      push eax

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00464276 FF15C4D64B00            Call dword ptr [004BD6C4]
:0046427C 50                      push eax
:0046427D E8E5E9FFFF              call 00462C67
:00464282 83C40C                  add esp, 0000000C
:00464285 8B45C8                  mov eax, dword ptr [ebp-38]
:00464288 8BE5                    mov esp, ebp
:0046428A 5D                      pop ebp
:0046428B C3                      ret



* Referenced by a CALL at Address:
|:00462E95   
|
:0046428C 55                      push ebp
:0046428D 8BEC                    mov ebp, esp
:0046428F 83EC48                  sub esp, 00000048
:00464292 6A00                    push 00000000
:00464294 6A00                    push 00000000
:00464296 6802100000              push 00001002
:0046429B 8B4508                  mov eax, dword ptr [ebp+08]
:0046429E 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046429F FF1504D64B00            Call dword ptr [004BD604]
:004642A5 50                      push eax

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:004642A6 FF1504D44B00            Call dword ptr [004BD404]
:004642AC 6A00                    push 00000000
:004642AE 6A01                    push 00000001
:004642B0 6802100000              push 00001002
:004642B5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004642B8 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004642B9 FF1504D64B00            Call dword ptr [004BD604]
:004642BF 50                      push eax

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:004642C0 FF1504D44B00            Call dword ptr [004BD404]
:004642C6 8B4D10                  mov ecx, dword ptr [ebp+10]
:004642C9 E8B29BFCFF              call 0042DE80
:004642CE 8945F0                  mov dword ptr [ebp-10], eax
:004642D1 8B4D10                  mov ecx, dword ptr [ebp+10]
:004642D4 E8F7220000              call 004665D0
:004642D9 8945BC                  mov dword ptr [ebp-44], eax
:004642DC 8A55BC                  mov dl, byte ptr [ebp-44]
:004642DF 52                      push edx
:004642E0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004642E3 6BC950                  imul ecx, 00000050
:004642E6 81C1787F4900            add ecx, 00497F78
:004642EC E8EFEEF9FF              call 004031E0
:004642F1 25FF000000              and eax, 000000FF
:004642F6 8945F4                  mov dword ptr [ebp-0C], eax
:004642F9 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004642FB 6A08                    push 00000008
:004642FD 8D45C0                  lea eax, dword ptr [ebp-40]
:00464300 50                      push eax
:00464301 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00464304 51                      push ecx
:00464305 8B5508                  mov edx, dword ptr [ebp+08]
:00464308 52                      push edx

* Reference To: USER32.GetParent, Ord:011Dh
                                  |
:00464309 FF15C4D64B00            Call dword ptr [004BD6C4]
:0046430F 50                      push eax
:00464310 E84F40FBFF              call 00418364
:00464315 83C414                  add esp, 00000014
:00464318 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046431B 50                      push eax
:0046431C 8B4DC0                  mov ecx, dword ptr [ebp-40]
:0046431F 51                      push ecx
:00464320 8B55F8                  mov edx, dword ptr [ebp-08]
:00464323 52                      push edx
:00464324 E865EEFFFF              call 0046318E
:00464329 83C40C                  add esp, 0000000C
:0046432C 8B45F8                  mov eax, dword ptr [ebp-08]
:0046432F 50                      push eax
:00464330 6A01                    push 00000001
:00464332 6803100000              push 00001003
:00464337 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046433A 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046433B FF1504D64B00            Call dword ptr [004BD604]
:00464341 8B55C0                  mov edx, dword ptr [ebp-40]
:00464344 52                      push edx
:00464345 6A00                    push 00000000
:00464347 6803100000              push 00001003
:0046434C 8B4508                  mov eax, dword ptr [ebp+08]
:0046434F 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464350 FF1504D64B00            Call dword ptr [004BD604]
:00464356 C745C40F000000          mov [ebp-3C], 0000000F
:0046435D C745D000000000          mov [ebp-30], 00000000
:00464364 C745D400000000          mov [ebp-2C], 00000000
:0046436B C745CC00000000          mov [ebp-34], 00000000
:00464372 C745D8FFFFFFFF          mov [ebp-28], FFFFFFFF
:00464379 C745DC20000000          mov [ebp-24], 00000020
:00464380 C745FC01000000          mov [ebp-04], 00000001
:00464387 C745EC00000000          mov [ebp-14], 00000000
:0046438E EB09                    jmp 00464399

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004643EA(U), :00464454(U)
|
:00464390 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00464393 83C101                  add ecx, 00000001
:00464396 894DEC                  mov dword ptr [ebp-14], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046438E(U)
|
:00464399 837DEC03                cmp dword ptr [ebp-14], 00000003
:0046439D 0F8DB6000000            jnl 00464459
:004643A3 8B55EC                  mov edx, dword ptr [ebp-14]
:004643A6 52                      push edx
:004643A7 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004643AA 6BC922                  imul ecx, 00000022
:004643AD 81C1D0474900            add ecx, 004947D0
:004643B3 E8B8210000              call 00466570
:004643B8 25FFFF0000              and eax, 0000FFFF
:004643BD 8945B8                  mov dword ptr [ebp-48], eax
:004643C0 8B45EC                  mov eax, dword ptr [ebp-14]
:004643C3 8945C8                  mov dword ptr [ebp-38], eax
:004643C6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004643C9 894DE0                  mov dword ptr [ebp-20], ecx
:004643CC 817DB8FFFF0000          cmp dword ptr [ebp-48], 0000FFFF
:004643D3 7517                    jne 004643EC
:004643D5 6A00                    push 00000000
:004643D7 8B55EC                  mov edx, dword ptr [ebp-14]
:004643DA 52                      push edx
:004643DB 8B4508                  mov eax, dword ptr [ebp+08]
:004643DE 50                      push eax
:004643DF E8F54EFBFF              call 004192D9
:004643E4 83C40C                  add esp, 0000000C
:004643E7 8945E4                  mov dword ptr [ebp-1C], eax
:004643EA EBA4                    jmp 00464390

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004643D3(C)
|
:004643EC 8B4DB8                  mov ecx, dword ptr [ebp-48]
:004643EF 51                      push ecx
:004643F0 8B55EC                  mov edx, dword ptr [ebp-14]
:004643F3 52                      push edx
:004643F4 8B4508                  mov eax, dword ptr [ebp+08]
:004643F7 50                      push eax
:004643F8 E8DC4EFBFF              call 004192D9
:004643FD 83C40C                  add esp, 0000000C
:00464400 8945E4                  mov dword ptr [ebp-1C], eax
:00464403 8D4DC4                  lea ecx, dword ptr [ebp-3C]
:00464406 51                      push ecx
:00464407 6A00                    push 00000000
:00464409 6807100000              push 00001007
:0046440E 8B5508                  mov edx, dword ptr [ebp+08]
:00464411 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464412 FF1504D64B00            Call dword ptr [004BD604]
:00464418 8B45B8                  mov eax, dword ptr [ebp-48]
:0046441B 50                      push eax
:0046441C B978294B00              mov ecx, 004B2978
:00464421 E8B400FAFF              call 004044DA
:00464426 3DFFFF0000              cmp eax, 0000FFFF
:0046442B 7527                    jne 00464454
:0046442D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00464430 51                      push ecx
:00464431 8B55EC                  mov edx, dword ptr [ebp-14]
:00464434 52                      push edx
:00464435 E847000000              call 00464481
:0046443A 83C408                  add esp, 00000008
:0046443D 8B45C0                  mov eax, dword ptr [ebp-40]
:00464440 50                      push eax
:00464441 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00464444 51                      push ecx
:00464445 E837000000              call 00464481
:0046444A 83C408                  add esp, 00000008
:0046444D C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046442B(C)
|
:00464454 E937FFFFFF              jmp 00464390

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046439D(C)
|
:00464459 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046445D 7410                    je 0046446F

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046445F 6A02                    push 00000002
:00464461 8B5508                  mov edx, dword ptr [ebp+08]
:00464464 52                      push edx
:00464465 E8C3E3FFFF              call 0046282D
:0046446A 83C408                  add esp, 00000008
:0046446D EB0E                    jmp 0046447D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046445D(C)
|
:0046446F 6A01                    push 00000001
:00464471 8B4508                  mov eax, dword ptr [ebp+08]
:00464474 50                      push eax
:00464475 E8B3E3FFFF              call 0046282D
:0046447A 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046446D(U)
|
:0046447D 8BE5                    mov esp, ebp
:0046447F 5D                      pop ebp
:00464480 C3                      ret



* Referenced by a CALL at Addresses:
|:0045B405   , :0045B415   , :004632E8   , :004632F8   , :00464435   
|:00464445   
|
:00464481 55                      push ebp
:00464482 8BEC                    mov ebp, esp
:00464484 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00464485 6A03                    push 00000003
:00464487 8B4508                  mov eax, dword ptr [ebp+08]
:0046448A 50                      push eax
:0046448B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046448E 51                      push ecx

* Reference To: COMCTL32.ImageList_GetIcon, Ord:0021h
                                  |
:0046448F FF1518D44B00            Call dword ptr [004BD418]
:00464495 8945FC                  mov dword ptr [ebp-04], eax
:00464498 8B55FC                  mov edx, dword ptr [ebp-04]
:0046449B 52                      push edx
:0046449C 8B4508                  mov eax, dword ptr [ebp+08]
:0046449F 50                      push eax
:004644A0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004644A3 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:004644A4 FF1514D44B00            Call dword ptr [004BD414]
:004644AA 8B55FC                  mov edx, dword ptr [ebp-04]
:004644AD 52                      push edx

* Reference To: USER32.DestroyIcon, Ord:0088h
                                  |
:004644AE FF1550D64B00            Call dword ptr [004BD650]
:004644B4 8BE5                    mov esp, ebp
:004644B6 5D                      pop ebp
:004644B7 C3                      ret


:004644B8 55                      push ebp
:004644B9 8BEC                    mov ebp, esp
:004644BB 83EC18                  sub esp, 00000018
:004644BE 8B450C                  mov eax, dword ptr [ebp+0C]
:004644C1 8945EC                  mov dword ptr [ebp-14], eax
:004644C4 837DEC4E                cmp dword ptr [ebp-14], 0000004E
:004644C8 7715                    ja 004644DF
:004644CA 837DEC4E                cmp dword ptr [ebp-14], 0000004E
:004644CE 0F84AF000000            je 00464583
:004644D4 837DEC02                cmp dword ptr [ebp-14], 00000002
:004644D8 745B                    je 00464535
:004644DA E9D9010000              jmp 004646B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004644C8(C)
|
:004644DF 817DEC10010000          cmp dword ptr [ebp-14], 00000110
:004644E6 740E                    je 004644F6
:004644E8 817DEC11010000          cmp dword ptr [ebp-14], 00000111
:004644EF 7466                    je 00464557
:004644F1 E9C2010000              jmp 004646B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004644E6(C)
|
:004644F6 6A40                    push 00000040
:004644F8 6A00                    push 00000000
:004644FA 6860AE4800              push 0048AE60
:004644FF E8CCB50000              call 0046FAD0
:00464504 83C40C                  add esp, 0000000C
:00464507 8B0D80AA4800            mov ecx, dword ptr [0048AA80]
:0046450D 890DD84F4B00            mov dword ptr [004B4FD8], ecx
:00464513 C70548534B00FF000000    mov dword ptr [004B5348], 000000FF
:0046451D 8A1574534B00            mov dl, byte ptr [004B5374]
:00464523 52                      push edx
:00464524 8B4508                  mov eax, dword ptr [ebp+08]
:00464527 50                      push eax
:00464528 E8CF0B0000              call 004650FC
:0046452D 83C408                  add esp, 00000008
:00464530 E983010000              jmp 004646B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004644D8(C)
|
:00464535 6A40                    push 00000040
:00464537 6A00                    push 00000000
:00464539 6860AE4800              push 0048AE60
:0046453E E88DB50000              call 0046FAD0
:00464543 83C40C                  add esp, 0000000C
:00464546 8B0D48534B00            mov ecx, dword ptr [004B5348]
:0046454C 890D80AA4800            mov dword ptr [0048AA80], ecx
:00464552 E961010000              jmp 004646B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004644EF(C)
|
:00464557 6874534B00              push 004B5374
:0046455C 8B5514                  mov edx, dword ptr [ebp+14]
:0046455F 52                      push edx
:00464560 668B4510                mov ax, word ptr [ebp+10]
:00464564 50                      push eax
:00464565 8B4D10                  mov ecx, dword ptr [ebp+10]
:00464568 C1E910                  shr ecx, 10
:0046456B 81E1FFFF0000            and ecx, 0000FFFF
:00464571 51                      push ecx
:00464572 8B5508                  mov edx, dword ptr [ebp+08]
:00464575 52                      push edx
:00464576 E8DB100000              call 00465656
:0046457B 83C414                  add esp, 00000014
:0046457E E937010000              jmp 004646BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004644CE(C)
|
:00464583 8B4514                  mov eax, dword ptr [ebp+14]
:00464586 8945FC                  mov dword ptr [ebp-04], eax
:00464589 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046458C 8B5108                  mov edx, dword ptr [ecx+08]
:0046458F 8955E8                  mov dword ptr [ebp-18], edx
:00464592 8B45E8                  mov eax, dword ptr [ebp-18]
:00464595 83C065                  add eax, 00000065
:00464598 8945E8                  mov dword ptr [ebp-18], eax
:0046459B 837DE863                cmp dword ptr [ebp-18], 00000063
:0046459F 0F87D1000000            ja 00464676
:004645A5 8B55E8                  mov edx, dword ptr [ebp-18]
:004645A8 33C9                    xor ecx, ecx
:004645AA 8A8AD4464600            mov cl, byte ptr [edx+004646D4]
:004645B0 FF248DC0464600          jmp dword ptr [4*ecx+004646C0]
:004645B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004645BA 50                      push eax
:004645BB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004645BE 51                      push ecx
:004645BF E8C2010000              call 00464786
:004645C4 83C408                  add esp, 00000008
:004645C7 85C0                    test eax, eax
:004645C9 7416                    je 004645E1
:004645CB 6A01                    push 00000001
:004645CD 8B5508                  mov edx, dword ptr [ebp+08]
:004645D0 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004645D1 FF15D8D54B00            Call dword ptr [004BD5D8]
:004645D7 B801000000              mov eax, 00000001
:004645DC E9D9000000              jmp 004646BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004645C9(C)
|
:004645E1 E9D2000000              jmp 004646B8
:004645E6 8B45FC                  mov eax, dword ptr [ebp-04]
:004645E9 817804AB040000          cmp dword ptr [eax+04], 000004AB
:004645F0 7510                    jne 00464602
:004645F2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004645F5 51                      push ecx
:004645F6 8B5508                  mov edx, dword ptr [ebp+08]
:004645F9 52                      push edx
:004645FA E839010000              call 00464738
:004645FF 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004645F0(C)
|
:00464602 E9B1000000              jmp 004646B8
:00464607 8B45FC                  mov eax, dword ptr [ebp-04]
:0046460A 817804AB040000          cmp dword ptr [eax+04], 000004AB
:00464611 7510                    jne 00464623
:00464613 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464616 51                      push ecx
:00464617 8B5508                  mov edx, dword ptr [ebp+08]
:0046461A 52                      push edx
:0046461B E8C3010000              call 004647E3
:00464620 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464611(C)
|
:00464623 E990000000              jmp 004646B8
:00464628 8B4514                  mov eax, dword ptr [ebp+14]
:0046462B 8945F8                  mov dword ptr [ebp-08], eax
:0046462E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00464631 8B5114                  mov edx, dword ptr [ecx+14]
:00464634 83E202                  and edx, 00000002
:00464637 85D2                    test edx, edx
:00464639 7439                    je 00464674
:0046463B 8B4514                  mov eax, dword ptr [ebp+14]
:0046463E 8945F4                  mov dword ptr [ebp-0C], eax
:00464641 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00464644 8B510C                  mov edx, dword ptr [ecx+0C]
:00464647 52                      push edx
:00464648 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046464B 8B08                    mov ecx, dword ptr [eax]
:0046464D 51                      push ecx
:0046464E E8094CFBFF              call 0041925C
:00464653 83C408                  add esp, 00000008
:00464656 A348534B00              mov dword ptr [004B5348], eax
:0046465B 8B1548534B00            mov edx, dword ptr [004B5348]
:00464661 52                      push edx
:00464662 A1D84F4B00              mov eax, dword ptr [004B4FD8]
:00464667 50                      push eax
:00464668 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046466B 51                      push ecx
:0046466C E8B0010000              call 00464821
:00464671 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464639(C)
|
:00464674 EB42                    jmp 004646B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046459F(C)
|
:00464676 817D10AB040000          cmp dword ptr [ebp+10], 000004AB
:0046467D 7539                    jne 004646B8
:0046467F 6A00                    push 00000000
:00464681 6A00                    push 00000000
:00464683 68F0000000              push 000000F0
:00464688 68AC040000              push 000004AC
:0046468D 8B5508                  mov edx, dword ptr [ebp+08]
:00464690 52                      push edx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:00464691 FF15D4D54B00            Call dword ptr [004BD5D4]
:00464697 8945F0                  mov dword ptr [ebp-10], eax
:0046469A 8B45F0                  mov eax, dword ptr [ebp-10]
:0046469D 50                      push eax
:0046469E 8B4D14                  mov ecx, dword ptr [ebp+14]
:004646A1 51                      push ecx
:004646A2 8B5510                  mov edx, dword ptr [ebp+10]
:004646A5 52                      push edx
:004646A6 8B450C                  mov eax, dword ptr [ebp+0C]
:004646A9 50                      push eax
:004646AA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004646AD 51                      push ecx
:004646AE E8753EFBFF              call 00418528
:004646B3 83C414                  add esp, 00000014
:004646B6 EB02                    jmp 004646BA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004644DA(U), :004644F1(U), :00464530(U), :00464552(U), :004645E1(U)
|:00464602(U), :00464623(U), :00464674(U), :0046467D(C)
|
:004646B8 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046457E(U), :004645DC(U), :004646B6(U)
|
:004646BA 8BE5                    mov esp, ebp
:004646BC 5D                      pop ebp
:004646BD C21000                  ret 0010



:004646C0 28464600                DWORD 00464628
:004646C4 E6454600                DWORD 004645E6
:004646C8 B7454600                DWORD 004645B7
:004646CC 07464600                DWORD 00464607
:004646D0 76464600                DWORD 00464676


:004646D4 000404                  add byte ptr [esp+eax], al
:004646D7 0404                    add al, 04
:004646D9 0404                    add al, 04
:004646DB 0404                    add al, 04
:004646DD 0404                    add al, 04
:004646DF 0404                    add al, 04
:004646E1 0404                    add al, 04
:004646E3 0404                    add al, 04
:004646E5 0404                    add al, 04
:004646E7 0404                    add al, 04
:004646E9 0404                    add al, 04
:004646EB 0404                    add al, 04
:004646ED 0404                    add al, 04
:004646EF 0404                    add al, 04
:004646F1 0404                    add al, 04
:004646F3 0404                    add al, 04
:004646F5 0404                    add al, 04
:004646F7 0404                    add al, 04
:004646F9 0404                    add al, 04
:004646FB 0404                    add al, 04
:004646FD 0404                    add al, 04
:004646FF 0404                    add al, 04
:00464701 0404                    add al, 04
:00464703 0404                    add al, 04
:00464705 0404                    add al, 04
:00464707 0404                    add al, 04
:00464709 0404                    add al, 04
:0046470B 0404                    add al, 04
:0046470D 0404                    add al, 04
:0046470F 0404                    add al, 04
:00464711 0404                    add al, 04
:00464713 0404                    add al, 04
:00464715 0404                    add al, 04
:00464717 0404                    add al, 04
:00464719 0404                    add al, 04
:0046471B 0404                    add al, 04
:0046471D 0404                    add al, 04
:0046471F 0404                    add al, 04
:00464721 0404                    add al, 04
:00464723 0404                    add al, 04
:00464725 0404                    add al, 04
:00464727 0404                    add al, 04
:00464729 0404                    add al, 04
:0046472B 0404                    add al, 04
:0046472D 0404                    add al, 04
:0046472F 0404                    add al, 04
:00464731 0404                    add al, 04
:00464733 0401                    add al, 01
:00464735 0402                    add al, 02
:00464737 03                      BYTE 03h


* Referenced by a CALL at Address:
|:004645FA   
|
:00464738 55                      push ebp
:00464739 8BEC                    mov ebp, esp
:0046473B 83EC08                  sub esp, 00000008
:0046473E 8B450C                  mov eax, dword ptr [ebp+0C]
:00464741 8B08                    mov ecx, dword ptr [eax]
:00464743 894DFC                  mov dword ptr [ebp-04], ecx
:00464746 8B55FC                  mov edx, dword ptr [ebp-04]
:00464749 52                      push edx
:0046474A E87449FBFF              call 004190C3
:0046474F 83C404                  add esp, 00000004
:00464752 8945F8                  mov dword ptr [ebp-08], eax
:00464755 837DF800                cmp dword ptr [ebp-08], 00000000
:00464759 7D0C                    jge 00464767
:0046475B C70548534B00FF000000    mov dword ptr [004B5348], 000000FF
:00464765 EB1B                    jmp 00464782

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464759(C)
|
:00464767 8B45F8                  mov eax, dword ptr [ebp-08]
:0046476A 50                      push eax
:0046476B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046476E 8B11                    mov edx, dword ptr [ecx]
:00464770 52                      push edx
:00464771 E8E64AFBFF              call 0041925C
:00464776 83C408                  add esp, 00000008
:00464779 50                      push eax
:0046477A E876F7F9FF              call 00403EF5
:0046477F 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464765(U)
|
:00464782 8BE5                    mov esp, ebp
:00464784 5D                      pop ebp
:00464785 C3                      ret



* Referenced by a CALL at Address:
|:004645BF   
|
:00464786 55                      push ebp
:00464787 8BEC                    mov ebp, esp
:00464789 83EC08                  sub esp, 00000008
:0046478C 8B450C                  mov eax, dword ptr [ebp+0C]
:0046478F 8B08                    mov ecx, dword ptr [eax]
:00464791 51                      push ecx
:00464792 E82C49FBFF              call 004190C3
:00464797 83C404                  add esp, 00000004
:0046479A 8945F8                  mov dword ptr [ebp-08], eax
:0046479D 837DF800                cmp dword ptr [ebp-08], 00000000
:004647A1 7D19                    jge 004647BC
:004647A3 6A01                    push 00000001
:004647A5 8B15D84F4B00            mov edx, dword ptr [004B4FD8]
:004647AB 52                      push edx
:004647AC 8B4508                  mov eax, dword ptr [ebp+08]
:004647AF 50                      push eax
:004647B0 E8510B0000              call 00465306
:004647B5 83C40C                  add esp, 0000000C
:004647B8 33C0                    xor eax, eax
:004647BA EB23                    jmp 004647DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004647A1(C)
|
:004647BC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004647BF 51                      push ecx
:004647C0 8B550C                  mov edx, dword ptr [ebp+0C]
:004647C3 8B02                    mov eax, dword ptr [edx]
:004647C5 50                      push eax
:004647C6 E8914AFBFF              call 0041925C
:004647CB 83C408                  add esp, 00000008
:004647CE 8945FC                  mov dword ptr [ebp-04], eax
:004647D1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004647D4 890D48534B00            mov dword ptr [004B5348], ecx
:004647DA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004647BA(U)
|
:004647DF 8BE5                    mov esp, ebp
:004647E1 5D                      pop ebp
:004647E2 C3                      ret



* Referenced by a CALL at Address:
|:0046461B   
|
:004647E3 55                      push ebp
:004647E4 8BEC                    mov ebp, esp
:004647E6 51                      push ecx
:004647E7 8B450C                  mov eax, dword ptr [ebp+0C]
:004647EA 8B08                    mov ecx, dword ptr [eax]
:004647EC 51                      push ecx
:004647ED E8D148FBFF              call 004190C3
:004647F2 83C404                  add esp, 00000004
:004647F5 8945FC                  mov dword ptr [ebp-04], eax
:004647F8 837DFC00                cmp dword ptr [ebp-04], 00000000
:004647FC 7D1F                    jge 0046481D
:004647FE 6A01                    push 00000001
:00464800 8B15D84F4B00            mov edx, dword ptr [004B4FD8]
:00464806 52                      push edx
:00464807 8B4508                  mov eax, dword ptr [ebp+08]
:0046480A 50                      push eax
:0046480B E8F60A0000              call 00465306
:00464810 83C40C                  add esp, 0000000C
:00464813 C70548534B00FF000000    mov dword ptr [004B5348], 000000FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004647FC(C)
|
:0046481D 8BE5                    mov esp, ebp
:0046481F 5D                      pop ebp
:00464820 C3                      ret



* Referenced by a CALL at Address:
|:0046466C   
|
:00464821 55                      push ebp
:00464822 8BEC                    mov ebp, esp
:00464824 83EC1C                  sub esp, 0000001C
:00464827 53                      push ebx
:00464828 56                      push esi
:00464829 8B4508                  mov eax, dword ptr [ebp+08]
:0046482C 50                      push eax
:0046482D E86D050000              call 00464D9F
:00464832 83C404                  add esp, 00000004
:00464835 8B4D10                  mov ecx, dword ptr [ebp+10]
:00464838 6BC922                  imul ecx, 00000022
:0046483B 81C1D0474900            add ecx, 004947D0
:00464841 E81AB6FAFF              call 0040FE60
:00464846 25FF000000              and eax, 000000FF
:0046484B 8945F4                  mov dword ptr [ebp-0C], eax
:0046484E 837DF411                cmp dword ptr [ebp-0C], 00000011
:00464852 0F8F4F020000            jg 00464AA7
:00464858 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046485B 51                      push ecx
:0046485C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046485F 6BC950                  imul ecx, 00000050
:00464862 81C1787F4900            add ecx, 00497F78
:00464868 E8CCD1F9FF              call 00401A39
:0046486D 85C0                    test eax, eax
:0046486F 0F84FB010000            je 00464A70

* Possible StringData Ref from Data Obj ->"iH˳"
                                  |
:00464875 68B01B4800              push 00481BB0
:0046487A 68AA040000              push 000004AA
:0046487F 8B5508                  mov edx, dword ptr [ebp+08]
:00464882 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464883 FF1510D64B00            Call dword ptr [004BD610]
:00464889 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046488A FF1514D64B00            Call dword ptr [004BD614]
:00464890 68F4010000              push 000001F4
:00464895 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464898 6BC950                  imul ecx, 00000050
:0046489B 81C1787F4900            add ecx, 00497F78
:004648A1 E8AA4DFBFF              call 00419650
:004648A6 8AD8                    mov bl, al
:004648A8 81E3FF000000            and ebx, 000000FF
:004648AE 8B4D10                  mov ecx, dword ptr [ebp+10]
:004648B1 6BC922                  imul ecx, 00000022
:004648B4 81C1D0474900            add ecx, 004947D0
:004648BA E8A1E9F9FF              call 00403260
:004648BF 25FF000000              and eax, 000000FF
:004648C4 03D8                    add ebx, eax
:004648C6 53                      push ebx
:004648C7 6A00                    push 00000000
:004648C9 E8DBEFFBFF              call 004238A9
:004648CE 83C40C                  add esp, 0000000C
:004648D1 8945EC                  mov dword ptr [ebp-14], eax
:004648D4 68F4010000              push 000001F4
:004648D9 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004648DC 6BC950                  imul ecx, 00000050
:004648DF 81C1787F4900            add ecx, 00497F78
:004648E5 E8064EFBFF              call 004196F0
:004648EA 8AD8                    mov bl, al
:004648EC 81E3FF000000            and ebx, 000000FF
:004648F2 8B4D10                  mov ecx, dword ptr [ebp+10]
:004648F5 6BC922                  imul ecx, 00000022
:004648F8 81C1D0474900            add ecx, 004947D0
:004648FE E87DE9F9FF              call 00403280
:00464903 25FF000000              and eax, 000000FF
:00464908 99                      cdq
:00464909 2BC2                    sub eax, edx
:0046490B D1F8                    sar eax, 1
:0046490D 03D8                    add ebx, eax
:0046490F 53                      push ebx
:00464910 6A00                    push 00000000
:00464912 E892EFFBFF              call 004238A9
:00464917 83C40C                  add esp, 0000000C
:0046491A 8945E8                  mov dword ptr [ebp-18], eax
:0046491D 68FF000000              push 000000FF
:00464922 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464925 6BC950                  imul ecx, 00000050
:00464928 81C1787F4900            add ecx, 00497F78
:0046492E E8DD4DFBFF              call 00419710
:00464933 8AD8                    mov bl, al
:00464935 81E3FF000000            and ebx, 000000FF
:0046493B 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046493E 6BC922                  imul ecx, 00000022
:00464941 81C1D0474900            add ecx, 004947D0
:00464947 E88422FDFF              call 00436BD0
:0046494C 25FF000000              and eax, 000000FF
:00464951 2BD8                    sub ebx, eax
:00464953 53                      push ebx
:00464954 6A00                    push 00000000
:00464956 E84EEFFBFF              call 004238A9
:0046495B 83C40C                  add esp, 0000000C
:0046495E 8945E4                  mov dword ptr [ebp-1C], eax

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00464961 6A0A                    push 0000000A
:00464963 8D45F8                  lea eax, dword ptr [ebp-08]
:00464966 50                      push eax
:00464967 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046496A 51                      push ecx
:0046496B E8505C0000              call 0046A5C0
:00464970 83C40C                  add esp, 0000000C
:00464973 50                      push eax
:00464974 68B3040000              push 000004B3
:00464979 8B5508                  mov edx, dword ptr [ebp+08]
:0046497C 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046497D FF1510D64B00            Call dword ptr [004BD610]
:00464983 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464984 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046498A 6A0A                    push 0000000A
:0046498C 8D45F8                  lea eax, dword ptr [ebp-08]
:0046498F 50                      push eax
:00464990 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00464993 51                      push ecx
:00464994 E8275C0000              call 0046A5C0
:00464999 83C40C                  add esp, 0000000C
:0046499C 50                      push eax
:0046499D 68B9040000              push 000004B9
:004649A2 8B5508                  mov edx, dword ptr [ebp+08]
:004649A5 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004649A6 FF1510D64B00            Call dword ptr [004BD610]
:004649AC 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004649AD FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004649B3 6A0A                    push 0000000A
:004649B5 8D45F8                  lea eax, dword ptr [ebp-08]
:004649B8 50                      push eax
:004649B9 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004649BC 51                      push ecx
:004649BD E8FE5B0000              call 0046A5C0
:004649C2 83C40C                  add esp, 0000000C
:004649C5 50                      push eax
:004649C6 68BA040000              push 000004BA
:004649CB 8B5508                  mov edx, dword ptr [ebp+08]
:004649CE 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004649CF FF1510D64B00            Call dword ptr [004BD610]
:004649D5 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004649D6 FF1514D64B00            Call dword ptr [004BD614]
:004649DC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004649DF 6BC950                  imul ecx, 00000050
:004649E2 81C1787F4900            add ecx, 00497F78
:004649E8 E831D3F9FF              call 00401D1E
:004649ED 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004649F0 2BC8                    sub ecx, eax
:004649F2 51                      push ecx
:004649F3 68BB040000              push 000004BB
:004649F8 8B5508                  mov edx, dword ptr [ebp+08]
:004649FB 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004649FC FF1510D64B00            Call dword ptr [004BD610]
:00464A02 50                      push eax
:00464A03 E8C447FBFF              call 004191CC
:00464A08 83C408                  add esp, 00000008
:00464A0B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464A0E 6BC950                  imul ecx, 00000050
:00464A11 81C1787F4900            add ecx, 00497F78
:00464A17 E832D4F9FF              call 00401E4E
:00464A1C 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00464A1F 2BC8                    sub ecx, eax
:00464A21 51                      push ecx
:00464A22 68C0040000              push 000004C0
:00464A27 8B5508                  mov edx, dword ptr [ebp+08]
:00464A2A 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464A2B FF1510D64B00            Call dword ptr [004BD610]
:00464A31 50                      push eax
:00464A32 E89547FBFF              call 004191CC
:00464A37 83C408                  add esp, 00000008
:00464A3A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464A3D 6BC950                  imul ecx, 00000050
:00464A40 81C1787F4900            add ecx, 00497F78
:00464A46 E86FD4F9FF              call 00401EBA
:00464A4B 25FF000000              and eax, 000000FF
:00464A50 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00464A53 2BC8                    sub ecx, eax
:00464A55 51                      push ecx
:00464A56 68C2040000              push 000004C2
:00464A5B 8B5508                  mov edx, dword ptr [ebp+08]
:00464A5E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464A5F FF1510D64B00            Call dword ptr [004BD610]
:00464A65 50                      push eax
:00464A66 E86147FBFF              call 004191CC
:00464A6B 83C408                  add esp, 00000008
:00464A6E EB32                    jmp 00464AA2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046486F(C)
|
:00464A70 6A00                    push 00000000
:00464A72 8B450C                  mov eax, dword ptr [ebp+0C]
:00464A75 50                      push eax
:00464A76 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464A79 51                      push ecx
:00464A7A E887080000              call 00465306
:00464A7F 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"Z˳"
                                  |
:00464A82 68BC1B4800              push 00481BBC
:00464A87 68AA040000              push 000004AA
:00464A8C 8B5508                  mov edx, dword ptr [ebp+08]
:00464A8F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464A90 FF1510D64B00            Call dword ptr [004BD610]
:00464A96 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464A97 FF1514D64B00            Call dword ptr [004BD614]
:00464A9D E9F7020000              jmp 00464D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464A6E(U)
|
:00464AA2 E9F2020000              jmp 00464D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464852(C)
|
:00464AA7 837DF412                cmp dword ptr [ebp-0C], 00000012
:00464AAB 757F                    jne 00464B2C
:00464AAD 68F4010000              push 000001F4
:00464AB2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464AB5 6BC950                  imul ecx, 00000050
:00464AB8 81C1787F4900            add ecx, 00497F78
:00464ABE E8AD4BFBFF              call 00419670
:00464AC3 8AD8                    mov bl, al
:00464AC5 81E3FF000000            and ebx, 000000FF
:00464ACB 8B4D10                  mov ecx, dword ptr [ebp+10]
:00464ACE 6BC922                  imul ecx, 00000022
:00464AD1 81C1D0474900            add ecx, 004947D0
:00464AD7 E884E7F9FF              call 00403260
:00464ADC 25FF000000              and eax, 000000FF
:00464AE1 03D8                    add ebx, eax
:00464AE3 53                      push ebx
:00464AE4 6A00                    push 00000000
:00464AE6 E8BEEDFBFF              call 004238A9
:00464AEB 83C40C                  add esp, 0000000C
:00464AEE 8945F0                  mov dword ptr [ebp-10], eax
:00464AF1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464AF4 6BC950                  imul ecx, 00000050
:00464AF7 81C1787F4900            add ecx, 00497F78
:00464AFD E84FD2F9FF              call 00401D51
:00464B02 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00464B05 2BC8                    sub ecx, eax
:00464B07 51                      push ecx
:00464B08 8B55F0                  mov edx, dword ptr [ebp-10]
:00464B0B 52                      push edx
:00464B0C 68AA040000              push 000004AA
:00464B11 68BD040000              push 000004BD
:00464B16 68B4040000              push 000004B4
:00464B1B 8B4508                  mov eax, dword ptr [ebp+08]
:00464B1E 50                      push eax
:00464B1F E82446FBFF              call 00419148
:00464B24 83C418                  add esp, 00000018
:00464B27 E96D020000              jmp 00464D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464AAB(C)
|
:00464B2C 837DF413                cmp dword ptr [ebp-0C], 00000013
:00464B30 757F                    jne 00464BB1
:00464B32 68F4010000              push 000001F4
:00464B37 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464B3A 6BC950                  imul ecx, 00000050
:00464B3D 81C1787F4900            add ecx, 00497F78
:00464B43 E8484BFBFF              call 00419690
:00464B48 8AD8                    mov bl, al
:00464B4A 81E3FF000000            and ebx, 000000FF
:00464B50 8B4D10                  mov ecx, dword ptr [ebp+10]
:00464B53 6BC922                  imul ecx, 00000022
:00464B56 81C1D0474900            add ecx, 004947D0
:00464B5C E8FFE6F9FF              call 00403260
:00464B61 25FF000000              and eax, 000000FF
:00464B66 03D8                    add ebx, eax
:00464B68 53                      push ebx
:00464B69 6A00                    push 00000000
:00464B6B E839EDFBFF              call 004238A9
:00464B70 83C40C                  add esp, 0000000C
:00464B73 8945F0                  mov dword ptr [ebp-10], eax
:00464B76 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464B79 6BC950                  imul ecx, 00000050
:00464B7C 81C1787F4900            add ecx, 00497F78
:00464B82 E8FDD1F9FF              call 00401D84
:00464B87 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00464B8A 2BC8                    sub ecx, eax
:00464B8C 51                      push ecx
:00464B8D 8B55F0                  mov edx, dword ptr [ebp-10]
:00464B90 52                      push edx
:00464B91 68AA040000              push 000004AA
:00464B96 68BF040000              push 000004BF
:00464B9B 68B5040000              push 000004B5
:00464BA0 8B4508                  mov eax, dword ptr [ebp+08]
:00464BA3 50                      push eax
:00464BA4 E89F45FBFF              call 00419148
:00464BA9 83C418                  add esp, 00000018
:00464BAC E9E8010000              jmp 00464D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464B30(C)
|
:00464BB1 837DF414                cmp dword ptr [ebp-0C], 00000014
:00464BB5 757F                    jne 00464C36
:00464BB7 68F4010000              push 000001F4
:00464BBC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464BBF 6BC950                  imul ecx, 00000050
:00464BC2 81C1787F4900            add ecx, 00497F78
:00464BC8 E8E34AFBFF              call 004196B0
:00464BCD 8AD8                    mov bl, al
:00464BCF 81E3FF000000            and ebx, 000000FF
:00464BD5 8B4D10                  mov ecx, dword ptr [ebp+10]
:00464BD8 6BC922                  imul ecx, 00000022
:00464BDB 81C1D0474900            add ecx, 004947D0
:00464BE1 E87AE6F9FF              call 00403260
:00464BE6 25FF000000              and eax, 000000FF
:00464BEB 03D8                    add ebx, eax
:00464BED 53                      push ebx
:00464BEE 6A00                    push 00000000
:00464BF0 E8B4ECFBFF              call 004238A9
:00464BF5 83C40C                  add esp, 0000000C
:00464BF8 8945F0                  mov dword ptr [ebp-10], eax
:00464BFB 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464BFE 6BC950                  imul ecx, 00000050
:00464C01 81C1787F4900            add ecx, 00497F78
:00464C07 E8ABD1F9FF              call 00401DB7
:00464C0C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00464C0F 2BC8                    sub ecx, eax
:00464C11 51                      push ecx
:00464C12 8B55F0                  mov edx, dword ptr [ebp-10]
:00464C15 52                      push edx
:00464C16 68AA040000              push 000004AA
:00464C1B 68C1040000              push 000004C1
:00464C20 68B6040000              push 000004B6
:00464C25 8B4508                  mov eax, dword ptr [ebp+08]
:00464C28 50                      push eax
:00464C29 E81A45FBFF              call 00419148
:00464C2E 83C418                  add esp, 00000018
:00464C31 E963010000              jmp 00464D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464BB5(C)
|
:00464C36 837DF415                cmp dword ptr [ebp-0C], 00000015
:00464C3A 7579                    jne 00464CB5
:00464C3C 68E8030000              push 000003E8
:00464C41 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464C44 6BC950                  imul ecx, 00000050
:00464C47 81C1787F4900            add ecx, 00497F78
:00464C4D E87E5FFFFF              call 0045ABD0
:00464C52 8BF0                    mov esi, eax
:00464C54 8B4D10                  mov ecx, dword ptr [ebp+10]
:00464C57 6BC922                  imul ecx, 00000022
:00464C5A 81C1D0474900            add ecx, 004947D0
:00464C60 E8FBE5F9FF              call 00403260
:00464C65 25FF000000              and eax, 000000FF
:00464C6A 03F0                    add esi, eax
:00464C6C 56                      push esi
:00464C6D 6A00                    push 00000000
:00464C6F E835ECFBFF              call 004238A9
:00464C74 83C40C                  add esp, 0000000C
:00464C77 8945F0                  mov dword ptr [ebp-10], eax
:00464C7A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464C7D 6BC950                  imul ecx, 00000050
:00464C80 81C1787F4900            add ecx, 00497F78
:00464C86 E85FD1F9FF              call 00401DEA
:00464C8B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00464C8E 2BC8                    sub ecx, eax
:00464C90 51                      push ecx
:00464C91 8B55F0                  mov edx, dword ptr [ebp-10]
:00464C94 52                      push edx
:00464C95 68AA040000              push 000004AA
:00464C9A 68BC040000              push 000004BC
:00464C9F 68B7040000              push 000004B7
:00464CA4 8B4508                  mov eax, dword ptr [ebp+08]
:00464CA7 50                      push eax
:00464CA8 E89B44FBFF              call 00419148
:00464CAD 83C418                  add esp, 00000018
:00464CB0 E9E4000000              jmp 00464D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464C3A(C)
|
:00464CB5 837DF416                cmp dword ptr [ebp-0C], 00000016
:00464CB9 757C                    jne 00464D37
:00464CBB 68F4010000              push 000001F4
:00464CC0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464CC3 6BC950                  imul ecx, 00000050
:00464CC6 81C1787F4900            add ecx, 00497F78
:00464CCC E8FF49FBFF              call 004196D0
:00464CD1 8AD8                    mov bl, al
:00464CD3 81E3FF000000            and ebx, 000000FF
:00464CD9 8B4D10                  mov ecx, dword ptr [ebp+10]
:00464CDC 6BC922                  imul ecx, 00000022
:00464CDF 81C1D0474900            add ecx, 004947D0
:00464CE5 E876E5F9FF              call 00403260
:00464CEA 25FF000000              and eax, 000000FF
:00464CEF 03D8                    add ebx, eax
:00464CF1 53                      push ebx
:00464CF2 6A00                    push 00000000
:00464CF4 E8B0EBFBFF              call 004238A9
:00464CF9 83C40C                  add esp, 0000000C
:00464CFC 8945F0                  mov dword ptr [ebp-10], eax
:00464CFF 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464D02 6BC950                  imul ecx, 00000050
:00464D05 81C1787F4900            add ecx, 00497F78
:00464D0B E80BD1F9FF              call 00401E1B
:00464D10 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00464D13 2BC8                    sub ecx, eax
:00464D15 51                      push ecx
:00464D16 8B55F0                  mov edx, dword ptr [ebp-10]
:00464D19 52                      push edx
:00464D1A 68AA040000              push 000004AA
:00464D1F 68BE040000              push 000004BE
:00464D24 68B8040000              push 000004B8
:00464D29 8B4508                  mov eax, dword ptr [ebp+08]
:00464D2C 50                      push eax
:00464D2D E81644FBFF              call 00419148
:00464D32 83C418                  add esp, 00000018
:00464D35 EB62                    jmp 00464D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464CB9(C)
|
:00464D37 837DF425                cmp dword ptr [ebp-0C], 00000025
:00464D3B 7C2F                    jl 00464D6C
:00464D3D 6A00                    push 00000000
:00464D3F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464D42 51                      push ecx
:00464D43 8B5508                  mov edx, dword ptr [ebp+08]
:00464D46 52                      push edx
:00464D47 E8BA050000              call 00465306
:00464D4C 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"S"
                                  |
:00464D4F 68D01B4800              push 00481BD0
:00464D54 68AA040000              push 000004AA
:00464D59 8B4508                  mov eax, dword ptr [ebp+08]
:00464D5C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464D5D FF1510D64B00            Call dword ptr [004BD610]
:00464D63 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464D64 FF1514D64B00            Call dword ptr [004BD614]
:00464D6A EB2D                    jmp 00464D99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464D3B(C)
|
:00464D6C 6A00                    push 00000000
:00464D6E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464D71 51                      push ecx
:00464D72 8B5508                  mov edx, dword ptr [ebp+08]
:00464D75 52                      push edx
:00464D76 E88B050000              call 00465306
:00464D7B 83C40C                  add esp, 0000000C

* Possible StringData Ref from Data Obj ->"iH"
                                  |
:00464D7E 68DC1B4800              push 00481BDC
:00464D83 68AA040000              push 000004AA
:00464D88 8B4508                  mov eax, dword ptr [ebp+08]
:00464D8B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464D8C FF1510D64B00            Call dword ptr [004BD610]
:00464D92 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00464D93 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00464A9D(U), :00464AA2(U), :00464B27(U), :00464BAC(U), :00464C31(U)
|:00464CB0(U), :00464D35(U), :00464D6A(U)
|
:00464D99 5E                      pop esi
:00464D9A 5B                      pop ebx
:00464D9B 8BE5                    mov esp, ebp
:00464D9D 5D                      pop ebp
:00464D9E C3                      ret



* Referenced by a CALL at Addresses:
|:0046482D   , :0046564A   
|
:00464D9F 55                      push ebp
:00464DA0 8BEC                    mov ebp, esp
:00464DA2 6A00                    push 00000000
:00464DA4 68BB040000              push 000004BB
:00464DA9 8B4508                  mov eax, dword ptr [ebp+08]
:00464DAC 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464DAD FF1510D64B00            Call dword ptr [004BD610]
:00464DB3 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00464DB4 FF1500D74B00            Call dword ptr [004BD700]
:00464DBA 6A00                    push 00000000
:00464DBC 68BD040000              push 000004BD
:00464DC1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464DC4 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464DC5 FF1510D64B00            Call dword ptr [004BD610]
:00464DCB 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00464DCC FF1500D74B00            Call dword ptr [004BD700]
:00464DD2 6A00                    push 00000000
:00464DD4 68BF040000              push 000004BF
:00464DD9 8B5508                  mov edx, dword ptr [ebp+08]
:00464DDC 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464DDD FF1510D64B00            Call dword ptr [004BD610]
:00464DE3 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00464DE4 FF1500D74B00            Call dword ptr [004BD700]
:00464DEA 6A00                    push 00000000
:00464DEC 68C1040000              push 000004C1
:00464DF1 8B4508                  mov eax, dword ptr [ebp+08]
:00464DF4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464DF5 FF1510D64B00            Call dword ptr [004BD610]
:00464DFB 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00464DFC FF1500D74B00            Call dword ptr [004BD700]
:00464E02 6A00                    push 00000000
:00464E04 68BC040000              push 000004BC
:00464E09 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464E0C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464E0D FF1510D64B00            Call dword ptr [004BD610]
:00464E13 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00464E14 FF1500D74B00            Call dword ptr [004BD700]
:00464E1A 6A00                    push 00000000
:00464E1C 68BE040000              push 000004BE
:00464E21 8B5508                  mov edx, dword ptr [ebp+08]
:00464E24 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464E25 FF1510D64B00            Call dword ptr [004BD610]
:00464E2B 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00464E2C FF1500D74B00            Call dword ptr [004BD700]
:00464E32 6A00                    push 00000000
:00464E34 68C0040000              push 000004C0
:00464E39 8B4508                  mov eax, dword ptr [ebp+08]
:00464E3C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464E3D FF1510D64B00            Call dword ptr [004BD610]
:00464E43 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00464E44 FF1500D74B00            Call dword ptr [004BD700]
:00464E4A 6A00                    push 00000000
:00464E4C 68C2040000              push 000004C2
:00464E51 8B4D08                  mov ecx, dword ptr [ebp+08]
:00464E54 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00464E55 FF1510D64B00            Call dword ptr [004BD610]
:00464E5B 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00464E5C FF1500D74B00            Call dword ptr [004BD700]
:00464E62 5D                      pop ebp
:00464E63 C3                      ret



* Referenced by a CALL at Address:
|:00419067   
|
:00464E64 55                      push ebp
:00464E65 8BEC                    mov ebp, esp
:00464E67 83EC08                  sub esp, 00000008
:00464E6A 6A00                    push 00000000
:00464E6C 6A00                    push 00000000
:00464E6E 6809100000              push 00001009
:00464E73 8B450C                  mov eax, dword ptr [ebp+0C]
:00464E76 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464E77 FF1504D64B00            Call dword ptr [004BD604]
:00464E7D 6A00                    push 00000000
:00464E7F 6A00                    push 00000000
:00464E81 6802100000              push 00001002
:00464E86 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464E89 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464E8A FF1504D64B00            Call dword ptr [004BD604]
:00464E90 50                      push eax

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:00464E91 FF1504D44B00            Call dword ptr [004BD404]
:00464E97 6A00                    push 00000000
:00464E99 6A01                    push 00000001
:00464E9B 6802100000              push 00001002
:00464EA0 8B550C                  mov edx, dword ptr [ebp+0C]
:00464EA3 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464EA4 FF1504D64B00            Call dword ptr [004BD604]
:00464EAA 50                      push eax

* Reference To: COMCTL32.ImageList_Destroy, Ord:0017h
                                  |
:00464EAB FF1504D44B00            Call dword ptr [004BD404]
:00464EB1 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00464EB3 6A08                    push 00000008
:00464EB5 8D45FC                  lea eax, dword ptr [ebp-04]
:00464EB8 50                      push eax
:00464EB9 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00464EBC 51                      push ecx
:00464EBD 8B5508                  mov edx, dword ptr [ebp+08]
:00464EC0 52                      push edx
:00464EC1 E89E34FBFF              call 00418364
:00464EC6 83C414                  add esp, 00000014
:00464EC9 A1D84F4B00              mov eax, dword ptr [004B4FD8]
:00464ECE 50                      push eax
:00464ECF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00464ED2 51                      push ecx
:00464ED3 8B55F8                  mov edx, dword ptr [ebp-08]
:00464ED6 52                      push edx
:00464ED7 E851000000              call 00464F2D
:00464EDC 83C40C                  add esp, 0000000C
:00464EDF 8B45F8                  mov eax, dword ptr [ebp-08]
:00464EE2 50                      push eax
:00464EE3 6A01                    push 00000001
:00464EE5 6803100000              push 00001003
:00464EEA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464EED 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464EEE FF1504D64B00            Call dword ptr [004BD604]
:00464EF4 8B55FC                  mov edx, dword ptr [ebp-04]
:00464EF7 52                      push edx
:00464EF8 6A00                    push 00000000
:00464EFA 6803100000              push 00001003
:00464EFF 8B450C                  mov eax, dword ptr [ebp+0C]
:00464F02 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00464F03 FF1504D64B00            Call dword ptr [004BD604]
:00464F09 8B4D10                  mov ecx, dword ptr [ebp+10]
:00464F0C 51                      push ecx
:00464F0D 8B550C                  mov edx, dword ptr [ebp+0C]
:00464F10 52                      push edx
:00464F11 E811010000              call 00465027
:00464F16 83C408                  add esp, 00000008
:00464F19 8B4510                  mov eax, dword ptr [ebp+10]
:00464F1C 50                      push eax
:00464F1D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00464F20 51                      push ecx
:00464F21 E83908FBFF              call 0041575F
:00464F26 83C408                  add esp, 00000008
:00464F29 8BE5                    mov esp, ebp
:00464F2B 5D                      pop ebp
:00464F2C C3                      ret



* Referenced by a CALL at Addresses:
|:00464ED7   , :0046522F   
|
:00464F2D 55                      push ebp
:00464F2E 8BEC                    mov ebp, esp
:00464F30 83EC0C                  sub esp, 0000000C
:00464F33 C645F800                mov [ebp-08], 00
:00464F37 EB08                    jmp 00464F41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046501E(U)
|
:00464F39 8A45F8                  mov al, byte ptr [ebp-08]
:00464F3C 0401                    add al, 01
:00464F3E 8845F8                  mov byte ptr [ebp-08], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464F37(U)
|
:00464F41 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00464F44 81E1FF000000            and ecx, 000000FF
:00464F4A 83F908                  cmp ecx, 00000008
:00464F4D 0F8DD0000000            jnl 00465023
:00464F53 8A55F8                  mov dl, byte ptr [ebp-08]
:00464F56 52                      push edx
:00464F57 8B4D10                  mov ecx, dword ptr [ebp+10]
:00464F5A 6BC950                  imul ecx, 00000050
:00464F5D 81C1787F4900            add ecx, 00497F78
:00464F63 E878E2F9FF              call 004031E0
:00464F68 8845F4                  mov byte ptr [ebp-0C], al
:00464F6B 8B45F4                  mov eax, dword ptr [ebp-0C]
:00464F6E 25FF000000              and eax, 000000FF
:00464F73 3DFF000000              cmp eax, 000000FF
:00464F78 7517                    jne 00464F91
:00464F7A 68FA000000              push 000000FA
:00464F7F 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00464F85 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00464F86 FF15E4D64B00            Call dword ptr [004BD6E4]
:00464F8C 8945FC                  mov dword ptr [ebp-04], eax
:00464F8F EB37                    jmp 00464FC8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464F78(C)
|
:00464F91 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00464F94 81E1FF000000            and ecx, 000000FF
:00464F9A 6BC922                  imul ecx, 00000022
:00464F9D 81C1D0474900            add ecx, 004947D0
:00464FA3 E898E2F9FF              call 00403240
:00464FA8 25FF000000              and eax, 000000FF
:00464FAD 05FA000000              add eax, 000000FA
:00464FB2 25FFFF0000              and eax, 0000FFFF
:00464FB7 50                      push eax
:00464FB8 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00464FBE 52                      push edx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00464FBF FF15E4D64B00            Call dword ptr [004BD6E4]
:00464FC5 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464F8F(U)
|
:00464FC8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00464FCB 81E1FF000000            and ecx, 000000FF
:00464FD1 6BC922                  imul ecx, 00000022
:00464FD4 81C1D0474900            add ecx, 004947D0
:00464FDA E861E2F9FF              call 00403240
:00464FDF 25FF000000              and eax, 000000FF
:00464FE4 05FA000000              add eax, 000000FA
:00464FE9 25FFFF0000              and eax, 0000FFFF
:00464FEE 50                      push eax
:00464FEF A1A8554B00              mov eax, dword ptr [004B55A8]
:00464FF4 50                      push eax

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00464FF5 FF15E4D64B00            Call dword ptr [004BD6E4]
:00464FFB 8945FC                  mov dword ptr [ebp-04], eax
:00464FFE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465001 51                      push ecx
:00465002 6AFF                    push FFFFFFFF
:00465004 8B5508                  mov edx, dword ptr [ebp+08]
:00465007 52                      push edx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:00465008 FF1514D44B00            Call dword ptr [004BD414]
:0046500E 8B45FC                  mov eax, dword ptr [ebp-04]
:00465011 50                      push eax
:00465012 6AFF                    push FFFFFFFF
:00465014 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00465017 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:00465018 FF1514D44B00            Call dword ptr [004BD414]
:0046501E E916FFFFFF              jmp 00464F39

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00464F4D(C)
|
:00465023 8BE5                    mov esp, ebp
:00465025 5D                      pop ebp
:00465026 C3                      ret



* Referenced by a CALL at Addresses:
|:00464F11   , :004652EA   
|
:00465027 55                      push ebp
:00465028 8BEC                    mov ebp, esp
:0046502A 83EC30                  sub esp, 00000030
:0046502D C745D40F000000          mov [ebp-2C], 0000000F
:00465034 C745E000000000          mov [ebp-20], 00000000
:0046503B C745E400000000          mov [ebp-1C], 00000000
:00465042 C745DC00000000          mov [ebp-24], 00000000
:00465049 C745E8FFFFFFFF          mov [ebp-18], FFFFFFFF
:00465050 C745EC20000000          mov [ebp-14], 00000020
:00465057 C745D000000000          mov [ebp-30], 00000000
:0046505E EB09                    jmp 00465069

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004650F3(U)
|
:00465060 8B45D0                  mov eax, dword ptr [ebp-30]
:00465063 83C001                  add eax, 00000001
:00465066 8945D0                  mov dword ptr [ebp-30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046505E(U)
|
:00465069 837DD008                cmp dword ptr [ebp-30], 00000008
:0046506D 0F8D85000000            jnl 004650F8
:00465073 8A4DD0                  mov cl, byte ptr [ebp-30]
:00465076 51                      push ecx
:00465077 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046507A 6BC950                  imul ecx, 00000050
:0046507D 81C1787F4900            add ecx, 00497F78
:00465083 E858E1F9FF              call 004031E0
:00465088 25FF000000              and eax, 000000FF
:0046508D 8945FC                  mov dword ptr [ebp-04], eax
:00465090 8B55D0                  mov edx, dword ptr [ebp-30]
:00465093 8955D8                  mov dword ptr [ebp-28], edx
:00465096 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:0046509D 7522                    jne 004650C1
:0046509F 6A00                    push 00000000
:004650A1 8B45D0                  mov eax, dword ptr [ebp-30]
:004650A4 50                      push eax
:004650A5 8B4D08                  mov ecx, dword ptr [ebp+08]
:004650A8 51                      push ecx
:004650A9 E82B42FBFF              call 004192D9
:004650AE 83C40C                  add esp, 0000000C
:004650B1 C745F000000000          mov [ebp-10], 00000000
:004650B8 C745F400000000          mov [ebp-0C], 00000000
:004650BF EB1D                    jmp 004650DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046509D(C)
|
:004650C1 8B55D0                  mov edx, dword ptr [ebp-30]
:004650C4 8955F0                  mov dword ptr [ebp-10], edx
:004650C7 8B45FC                  mov eax, dword ptr [ebp-04]
:004650CA 50                      push eax
:004650CB 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004650CE 51                      push ecx
:004650CF 8B5508                  mov edx, dword ptr [ebp+08]
:004650D2 52                      push edx
:004650D3 E80142FBFF              call 004192D9
:004650D8 83C40C                  add esp, 0000000C
:004650DB 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004650BF(U)
|
:004650DE 8D45D4                  lea eax, dword ptr [ebp-2C]
:004650E1 50                      push eax
:004650E2 6A00                    push 00000000
:004650E4 6807100000              push 00001007
:004650E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:004650EC 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004650ED FF1504D64B00            Call dword ptr [004BD604]
:004650F3 E968FFFFFF              jmp 00465060

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046506D(C)
|
:004650F8 8BE5                    mov esp, ebp
:004650FA 5D                      pop ebp
:004650FB C3                      ret



* Referenced by a CALL at Address:
|:00464528   
|
:004650FC 55                      push ebp
:004650FD 8BEC                    mov ebp, esp
:004650FF 83EC0C                  sub esp, 0000000C
:00465102 C70548534B00FF000000    mov dword ptr [004B5348], 000000FF
:0046510C 8B450C                  mov eax, dword ptr [ebp+0C]
:0046510F 25FF000000              and eax, 000000FF
:00465114 85C0                    test eax, eax
:00465116 753F                    jne 00465157
:00465118 6A00                    push 00000000
:0046511A 6A01                    push 00000001
:0046511C 68F1000000              push 000000F1
:00465121 68AC040000              push 000004AC
:00465126 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465129 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046512A FF1510D64B00            Call dword ptr [004BD610]
:00465130 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465131 FF1504D64B00            Call dword ptr [004BD604]
:00465137 6A00                    push 00000000
:00465139 68AB040000              push 000004AB
:0046513E 8B5508                  mov edx, dword ptr [ebp+08]
:00465141 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465142 FF1510D64B00            Call dword ptr [004BD610]
:00465148 50                      push eax
:00465149 8B4508                  mov eax, dword ptr [ebp+08]
:0046514C 50                      push eax
:0046514D E8343FFBFF              call 00419086
:00465152 83C40C                  add esp, 0000000C
:00465155 EB3D                    jmp 00465194

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465116(C)
|
:00465157 6A00                    push 00000000
:00465159 6A01                    push 00000001
:0046515B 68F1000000              push 000000F1
:00465160 68AD040000              push 000004AD
:00465165 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465168 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465169 FF1510D64B00            Call dword ptr [004BD610]
:0046516F 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465170 FF1504D64B00            Call dword ptr [004BD604]
:00465176 6A01                    push 00000001
:00465178 68AB040000              push 000004AB
:0046517D 8B5508                  mov edx, dword ptr [ebp+08]
:00465180 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465181 FF1510D64B00            Call dword ptr [004BD610]
:00465187 50                      push eax
:00465188 8B4508                  mov eax, dword ptr [ebp+08]
:0046518B 50                      push eax
:0046518C E8F53EFBFF              call 00419086
:00465191 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465155(U)
|
:00465194 68AE040000              push 000004AE
:00465199 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046519C 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046519D FF1510D64B00            Call dword ptr [004BD610]
:004651A3 8945F4                  mov dword ptr [ebp-0C], eax
:004651A6 8B0DD84F4B00            mov ecx, dword ptr [004B4FD8]
:004651AC 6BC950                  imul ecx, 00000050
:004651AF 81C1787F4900            add ecx, 00497F78
:004651B5 E84ADFF9FF              call 00403104
:004651BA 50                      push eax
:004651BB 6A00                    push 00000000
:004651BD 6843010000              push 00000143
:004651C2 8B55F4                  mov edx, dword ptr [ebp-0C]
:004651C5 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004651C6 FF1504D64B00            Call dword ptr [004BD604]
:004651CC A1D84F4B00              mov eax, dword ptr [004B4FD8]
:004651D1 50                      push eax
:004651D2 6A00                    push 00000000
:004651D4 6851010000              push 00000151
:004651D9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004651DC 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004651DD FF1504D64B00            Call dword ptr [004BD604]
:004651E3 8B0DD84F4B00            mov ecx, dword ptr [004B4FD8]
:004651E9 6BC950                  imul ecx, 00000050
:004651EC 81C1787F4900            add ecx, 00497F78
:004651F2 E80DDFF9FF              call 00403104
:004651F7 50                      push eax
:004651F8 6AFF                    push FFFFFFFF
:004651FA 684D010000              push 0000014D
:004651FF 8B55F4                  mov edx, dword ptr [ebp-0C]
:00465202 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465203 FF1504D64B00            Call dword ptr [004BD604]
:00465209 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046520B 6A08                    push 00000008
:0046520D 8D45FC                  lea eax, dword ptr [ebp-04]
:00465210 50                      push eax
:00465211 8D4DF8                  lea ecx, dword ptr [ebp-08]
:00465214 51                      push ecx
:00465215 8B5508                  mov edx, dword ptr [ebp+08]
:00465218 52                      push edx
:00465219 E84631FBFF              call 00418364
:0046521E 83C414                  add esp, 00000014
:00465221 A1D84F4B00              mov eax, dword ptr [004B4FD8]
:00465226 50                      push eax
:00465227 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046522A 51                      push ecx
:0046522B 8B55F8                  mov edx, dword ptr [ebp-08]
:0046522E 52                      push edx
:0046522F E8F9FCFFFF              call 00464F2D
:00465234 83C40C                  add esp, 0000000C
:00465237 8B45FC                  mov eax, dword ptr [ebp-04]
:0046523A 50                      push eax
:0046523B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046523E 51                      push ecx
:0046523F 8B15D84F4B00            mov edx, dword ptr [004B4FD8]
:00465245 52                      push edx
:00465246 68AB040000              push 000004AB
:0046524B 8B4508                  mov eax, dword ptr [ebp+08]
:0046524E 50                      push eax
:0046524F E83F000000              call 00465293
:00465254 83C414                  add esp, 00000014
:00465257 68B0040000              push 000004B0
:0046525C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046525F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465260 FF1510D64B00            Call dword ptr [004BD610]
:00465266 50                      push eax
:00465267 8B15D84F4B00            mov edx, dword ptr [004B4FD8]
:0046526D 52                      push edx
:0046526E 8B4508                  mov eax, dword ptr [ebp+08]
:00465271 50                      push eax
:00465272 E8963EFBFF              call 0041910D
:00465277 83C40C                  add esp, 0000000C
:0046527A 6A01                    push 00000001
:0046527C 8B0DD84F4B00            mov ecx, dword ptr [004B4FD8]
:00465282 51                      push ecx
:00465283 8B5508                  mov edx, dword ptr [ebp+08]
:00465286 52                      push edx
:00465287 E87A000000              call 00465306
:0046528C 83C40C                  add esp, 0000000C
:0046528F 8BE5                    mov esp, ebp
:00465291 5D                      pop ebp
:00465292 C3                      ret



* Referenced by a CALL at Address:
|:0046524F   
|
:00465293 55                      push ebp
:00465294 8BEC                    mov ebp, esp
:00465296 51                      push ecx
:00465297 8B450C                  mov eax, dword ptr [ebp+0C]
:0046529A 50                      push eax
:0046529B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046529E 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046529F FF1510D64B00            Call dword ptr [004BD610]
:004652A5 8945FC                  mov dword ptr [ebp-04], eax
:004652A8 8B55FC                  mov edx, dword ptr [ebp-04]
:004652AB 52                      push edx
:004652AC 8B4508                  mov eax, dword ptr [ebp+08]
:004652AF 50                      push eax
:004652B0 E8DE31FBFF              call 00418493
:004652B5 83C408                  add esp, 00000008
:004652B8 8B4D14                  mov ecx, dword ptr [ebp+14]
:004652BB 51                      push ecx
:004652BC 6A01                    push 00000001
:004652BE 6803100000              push 00001003
:004652C3 8B55FC                  mov edx, dword ptr [ebp-04]
:004652C6 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004652C7 FF1504D64B00            Call dword ptr [004BD604]
:004652CD 8B4518                  mov eax, dword ptr [ebp+18]
:004652D0 50                      push eax
:004652D1 6A00                    push 00000000
:004652D3 6803100000              push 00001003
:004652D8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004652DB 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004652DC FF1504D64B00            Call dword ptr [004BD604]
:004652E2 8B5510                  mov edx, dword ptr [ebp+10]
:004652E5 52                      push edx
:004652E6 8B45FC                  mov eax, dword ptr [ebp-04]
:004652E9 50                      push eax
:004652EA E838FDFFFF              call 00465027
:004652EF 83C408                  add esp, 00000008
:004652F2 8B4D10                  mov ecx, dword ptr [ebp+10]
:004652F5 51                      push ecx
:004652F6 8B55FC                  mov edx, dword ptr [ebp-04]
:004652F9 52                      push edx
:004652FA E86004FBFF              call 0041575F
:004652FF 83C408                  add esp, 00000008
:00465302 8BE5                    mov esp, ebp
:00465304 5D                      pop ebp
:00465305 C3                      ret



* Referenced by a CALL at Addresses:
|:004647B0   , :0046480B   , :00464A7A   , :00464D47   , :00464D76   
|:00465287   , :00465714   , :0046575E   
|
:00465306 55                      push ebp
:00465307 8BEC                    mov ebp, esp
:00465309 83EC0C                  sub esp, 0000000C
:0046530C 837D1000                cmp dword ptr [ebp+10], 00000000
:00465310 741B                    je 0046532D

* Possible StringData Ref from Data Obj ->"п_"
                                  |
:00465312 68E81B4800              push 00481BE8
:00465317 68AA040000              push 000004AA
:0046531C 8B4508                  mov eax, dword ptr [ebp+08]
:0046531F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465320 FF1510D64B00            Call dword ptr [004BD610]
:00465326 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465327 FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465310(C)
|
:0046532D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00465330 6BC950                  imul ecx, 00000050
:00465333 81C1787F4900            add ecx, 00497F78
:00465339 E882DEF9FF              call 004031C0
:0046533E 8845FC                  mov byte ptr [ebp-04], al
:00465341 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465344 81E1FF000000            and ecx, 000000FF
:0046534A 81F9FF000000            cmp ecx, 000000FF
:00465350 7444                    je 00465396
:00465352 8A55FC                  mov dl, byte ptr [ebp-04]
:00465355 52                      push edx
:00465356 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00465359 6BC950                  imul ecx, 00000050
:0046535C 81C1787F4900            add ecx, 00497F78
:00465362 E879DEF9FF              call 004031E0
:00465367 8AC8                    mov cl, al
:00465369 81E1FF000000            and ecx, 000000FF
:0046536F 6BC922                  imul ecx, 00000022
:00465372 81C1D0474900            add ecx, 004947D0
:00465378 E87303FAFF              call 004056F0
:0046537D 50                      push eax
:0046537E 68B2040000              push 000004B2
:00465383 8B4508                  mov eax, dword ptr [ebp+08]
:00465386 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465387 FF1510D64B00            Call dword ptr [004BD610]
:0046538D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046538E FF1514D64B00            Call dword ptr [004BD614]
:00465394 EB1B                    jmp 004653B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465350(C)
|

* Possible StringData Ref from Data Obj ->"L˳_"
                                  |
:00465396 68F41B4800              push 00481BF4
:0046539B 68B2040000              push 000004B2
:004653A0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004653A3 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004653A4 FF1510D64B00            Call dword ptr [004BD610]
:004653AA 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004653AB FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465394(U)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004653B1 6A0A                    push 0000000A
:004653B3 8D55F4                  lea edx, dword ptr [ebp-0C]
:004653B6 52                      push edx
:004653B7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004653BA 6BC950                  imul ecx, 00000050
:004653BD 81C1787F4900            add ecx, 00497F78
:004653C3 E856C9F9FF              call 00401D1E
:004653C8 50                      push eax
:004653C9 E8F2510000              call 0046A5C0
:004653CE 83C40C                  add esp, 0000000C
:004653D1 50                      push eax
:004653D2 68B3040000              push 000004B3
:004653D7 8B4508                  mov eax, dword ptr [ebp+08]
:004653DA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004653DB FF1510D64B00            Call dword ptr [004BD610]
:004653E1 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004653E2 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004653E8 6A0A                    push 0000000A
:004653EA 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:004653ED 51                      push ecx
:004653EE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004653F1 6BC950                  imul ecx, 00000050
:004653F4 81C1787F4900            add ecx, 00497F78
:004653FA E852C9F9FF              call 00401D51
:004653FF 50                      push eax
:00465400 E8BB510000              call 0046A5C0
:00465405 83C40C                  add esp, 0000000C
:00465408 50                      push eax
:00465409 68B4040000              push 000004B4
:0046540E 8B5508                  mov edx, dword ptr [ebp+08]
:00465411 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465412 FF1510D64B00            Call dword ptr [004BD610]
:00465418 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465419 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046541F 6A0A                    push 0000000A
:00465421 8D45F4                  lea eax, dword ptr [ebp-0C]
:00465424 50                      push eax
:00465425 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00465428 6BC950                  imul ecx, 00000050
:0046542B 81C1787F4900            add ecx, 00497F78
:00465431 E84EC9F9FF              call 00401D84
:00465436 50                      push eax
:00465437 E884510000              call 0046A5C0
:0046543C 83C40C                  add esp, 0000000C
:0046543F 50                      push eax
:00465440 68B5040000              push 000004B5
:00465445 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465448 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465449 FF1510D64B00            Call dword ptr [004BD610]
:0046544F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465450 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00465456 6A0A                    push 0000000A
:00465458 8D55F4                  lea edx, dword ptr [ebp-0C]
:0046545B 52                      push edx
:0046545C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046545F 6BC950                  imul ecx, 00000050
:00465462 81C1787F4900            add ecx, 00497F78
:00465468 E84AC9F9FF              call 00401DB7
:0046546D 50                      push eax
:0046546E E84D510000              call 0046A5C0
:00465473 83C40C                  add esp, 0000000C
:00465476 50                      push eax
:00465477 68B6040000              push 000004B6
:0046547C 8B4508                  mov eax, dword ptr [ebp+08]
:0046547F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465480 FF1510D64B00            Call dword ptr [004BD610]
:00465486 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465487 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046548D 6A0A                    push 0000000A
:0046548F 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00465492 51                      push ecx
:00465493 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00465496 6BC950                  imul ecx, 00000050
:00465499 81C1787F4900            add ecx, 00497F78
:0046549F E846C9F9FF              call 00401DEA
:004654A4 50                      push eax
:004654A5 E816510000              call 0046A5C0
:004654AA 83C40C                  add esp, 0000000C
:004654AD 50                      push eax
:004654AE 68B7040000              push 000004B7
:004654B3 8B5508                  mov edx, dword ptr [ebp+08]
:004654B6 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004654B7 FF1510D64B00            Call dword ptr [004BD610]
:004654BD 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004654BE FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004654C4 6A0A                    push 0000000A
:004654C6 8D45F4                  lea eax, dword ptr [ebp-0C]
:004654C9 50                      push eax
:004654CA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004654CD 6BC950                  imul ecx, 00000050
:004654D0 81C1787F4900            add ecx, 00497F78
:004654D6 E840C9F9FF              call 00401E1B
:004654DB 50                      push eax
:004654DC E8DF500000              call 0046A5C0
:004654E1 83C40C                  add esp, 0000000C
:004654E4 50                      push eax
:004654E5 68B8040000              push 000004B8
:004654EA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004654ED 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004654EE FF1510D64B00            Call dword ptr [004BD610]
:004654F4 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004654F5 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004654FB 6A0A                    push 0000000A
:004654FD 8D55F4                  lea edx, dword ptr [ebp-0C]
:00465500 52                      push edx
:00465501 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00465504 6BC950                  imul ecx, 00000050
:00465507 81C1787F4900            add ecx, 00497F78
:0046550D E83CC9F9FF              call 00401E4E
:00465512 50                      push eax
:00465513 E8A8500000              call 0046A5C0
:00465518 83C40C                  add esp, 0000000C
:0046551B 50                      push eax
:0046551C 68B9040000              push 000004B9
:00465521 8B4508                  mov eax, dword ptr [ebp+08]
:00465524 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465525 FF1510D64B00            Call dword ptr [004BD610]
:0046552B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046552C FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00465532 6A0A                    push 0000000A
:00465534 8D4DF4                  lea ecx, dword ptr [ebp-0C]
:00465537 51                      push ecx
:00465538 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046553B 6BC950                  imul ecx, 00000050
:0046553E 81C1787F4900            add ecx, 00497F78
:00465544 E871C9F9FF              call 00401EBA
:00465549 25FF000000              and eax, 000000FF
:0046554E 50                      push eax
:0046554F E86C500000              call 0046A5C0
:00465554 83C40C                  add esp, 0000000C
:00465557 50                      push eax
:00465558 68BA040000              push 000004BA
:0046555D 8B5508                  mov edx, dword ptr [ebp+08]
:00465560 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465561 FF1510D64B00            Call dword ptr [004BD610]
:00465567 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465568 FF1514D64B00            Call dword ptr [004BD614]

* Possible StringData Ref from Data Obj ->"0"
                                  |
:0046556E 68001C4800              push 00481C00
:00465573 68BB040000              push 000004BB
:00465578 8B4508                  mov eax, dword ptr [ebp+08]
:0046557B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046557C FF1510D64B00            Call dword ptr [004BD610]
:00465582 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465583 FF1514D64B00            Call dword ptr [004BD614]

* Possible StringData Ref from Data Obj ->"0"
                                  |
:00465589 68041C4800              push 00481C04
:0046558E 68BD040000              push 000004BD
:00465593 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465596 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465597 FF1510D64B00            Call dword ptr [004BD610]
:0046559D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046559E FF1514D64B00            Call dword ptr [004BD614]

* Possible StringData Ref from Data Obj ->"0"
                                  |
:004655A4 68081C4800              push 00481C08
:004655A9 68BF040000              push 000004BF
:004655AE 8B5508                  mov edx, dword ptr [ebp+08]
:004655B1 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004655B2 FF1510D64B00            Call dword ptr [004BD610]
:004655B8 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004655B9 FF1514D64B00            Call dword ptr [004BD614]

* Possible StringData Ref from Data Obj ->"0"
                                  |
:004655BF 680C1C4800              push 00481C0C
:004655C4 68C1040000              push 000004C1
:004655C9 8B4508                  mov eax, dword ptr [ebp+08]
:004655CC 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004655CD FF1510D64B00            Call dword ptr [004BD610]
:004655D3 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004655D4 FF1514D64B00            Call dword ptr [004BD614]

* Possible StringData Ref from Data Obj ->"0"
                                  |
:004655DA 68101C4800              push 00481C10
:004655DF 68BC040000              push 000004BC
:004655E4 8B4D08                  mov ecx, dword ptr [ebp+08]
:004655E7 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004655E8 FF1510D64B00            Call dword ptr [004BD610]
:004655EE 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:004655EF FF1514D64B00            Call dword ptr [004BD614]

* Possible StringData Ref from Data Obj ->"0"
                                  |
:004655F5 68141C4800              push 00481C14
:004655FA 68BE040000              push 000004BE
:004655FF 8B5508                  mov edx, dword ptr [ebp+08]
:00465602 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465603 FF1510D64B00            Call dword ptr [004BD610]
:00465609 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046560A FF1514D64B00            Call dword ptr [004BD614]

* Possible StringData Ref from Data Obj ->"0"
                                  |
:00465610 68181C4800              push 00481C18
:00465615 68C0040000              push 000004C0
:0046561A 8B4508                  mov eax, dword ptr [ebp+08]
:0046561D 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046561E FF1510D64B00            Call dword ptr [004BD610]
:00465624 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465625 FF1514D64B00            Call dword ptr [004BD614]

* Possible StringData Ref from Data Obj ->"0"
                                  |
:0046562B 681C1C4800              push 00481C1C
:00465630 68C2040000              push 000004C2
:00465635 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465638 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465639 FF1510D64B00            Call dword ptr [004BD610]
:0046563F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:00465640 FF1514D64B00            Call dword ptr [004BD614]
:00465646 8B5508                  mov edx, dword ptr [ebp+08]
:00465649 52                      push edx
:0046564A E850F7FFFF              call 00464D9F
:0046564F 83C404                  add esp, 00000004
:00465652 8BE5                    mov esp, ebp
:00465654 5D                      pop ebp
:00465655 C3                      ret



* Referenced by a CALL at Address:
|:00464576   
|
:00465656 55                      push ebp
:00465657 8BEC                    mov ebp, esp
:00465659 51                      push ecx
:0046565A 8B4510                  mov eax, dword ptr [ebp+10]
:0046565D 25FFFF0000              and eax, 0000FFFF
:00465662 8945FC                  mov dword ptr [ebp-04], eax
:00465665 817DFCAC040000          cmp dword ptr [ebp-04], 000004AC
:0046566C 7F24                    jg 00465692
:0046566E 817DFCAC040000          cmp dword ptr [ebp-04], 000004AC
:00465675 7463                    je 004656DA
:00465677 837DFC01                cmp dword ptr [ebp-04], 00000001
:0046567B 7447                    je 004656C4
:0046567D 837DFC02                cmp dword ptr [ebp-04], 00000002
:00465681 7421                    je 004656A4
:00465683 837DFC03                cmp dword ptr [ebp-04], 00000003
:00465687 0F84E0000000            je 0046576D
:0046568D E9E8000000              jmp 0046577A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046566C(C)
|
:00465692 817DFCAD040000          cmp dword ptr [ebp-04], 000004AD
:00465699 0F8484000000            je 00465723
:0046569F E9D6000000              jmp 0046577A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465681(C)
|
:004656A4 C70548534B00FF000000    mov dword ptr [004B5348], 000000FF
:004656AE 6A01                    push 00000001
:004656B0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004656B3 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004656B4 FF15D8D54B00            Call dword ptr [004BD5D8]
:004656BA B801000000              mov eax, 00000001
:004656BF E9B8000000              jmp 0046577C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046567B(C)
|
:004656C4 6A01                    push 00000001
:004656C6 8B5508                  mov edx, dword ptr [ebp+08]
:004656C9 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004656CA FF15D8D54B00            Call dword ptr [004BD5D8]
:004656D0 B801000000              mov eax, 00000001
:004656D5 E9A2000000              jmp 0046577C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465675(C)
|
:004656DA 8B4518                  mov eax, dword ptr [ebp+18]
:004656DD C60000                  mov byte ptr [eax], 00
:004656E0 6A00                    push 00000000
:004656E2 68AB040000              push 000004AB
:004656E7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004656EA 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004656EB FF1510D64B00            Call dword ptr [004BD610]
:004656F1 50                      push eax
:004656F2 8B5508                  mov edx, dword ptr [ebp+08]
:004656F5 52                      push edx
:004656F6 E88B39FBFF              call 00419086
:004656FB 83C40C                  add esp, 0000000C
:004656FE C70548534B00FF000000    mov dword ptr [004B5348], 000000FF
:00465708 6A01                    push 00000001
:0046570A A1D84F4B00              mov eax, dword ptr [004B4FD8]
:0046570F 50                      push eax
:00465710 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465713 51                      push ecx
:00465714 E8EDFBFFFF              call 00465306
:00465719 83C40C                  add esp, 0000000C
:0046571C B801000000              mov eax, 00000001
:00465721 EB59                    jmp 0046577C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465699(C)
|
:00465723 8B5518                  mov edx, dword ptr [ebp+18]
:00465726 C60201                  mov byte ptr [edx], 01
:00465729 6A01                    push 00000001
:0046572B 68AB040000              push 000004AB
:00465730 8B4508                  mov eax, dword ptr [ebp+08]
:00465733 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465734 FF1510D64B00            Call dword ptr [004BD610]
:0046573A 50                      push eax
:0046573B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046573E 51                      push ecx
:0046573F E84239FBFF              call 00419086
:00465744 83C40C                  add esp, 0000000C
:00465747 C70548534B00FF000000    mov dword ptr [004B5348], 000000FF
:00465751 6A01                    push 00000001
:00465753 8B15D84F4B00            mov edx, dword ptr [004B4FD8]
:00465759 52                      push edx
:0046575A 8B4508                  mov eax, dword ptr [ebp+08]
:0046575D 50                      push eax
:0046575E E8A3FBFFFF              call 00465306
:00465763 83C40C                  add esp, 0000000C
:00465766 B801000000              mov eax, 00000001
:0046576B EB0F                    jmp 0046577C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465687(C)
|
:0046576D 68D4080000              push 000008D4
:00465772 E854430000              call 00469ACB
:00465777 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046568D(U), :0046569F(U)
|
:0046577A 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004656BF(U), :004656D5(U), :00465721(U), :0046576B(U)
|
:0046577C 8BE5                    mov esp, ebp
:0046577E 5D                      pop ebp
:0046577F C3                      ret


:00465780 55                      push ebp
:00465781 8BEC                    mov ebp, esp
:00465783 83EC14                  sub esp, 00000014
:00465786 8B450C                  mov eax, dword ptr [ebp+0C]
:00465789 8945F4                  mov dword ptr [ebp-0C], eax
:0046578C 837DF44E                cmp dword ptr [ebp-0C], 0000004E
:00465790 7711                    ja 004657A3
:00465792 837DF44E                cmp dword ptr [ebp-0C], 0000004E
:00465796 747D                    je 00465815
:00465798 837DF410                cmp dword ptr [ebp-0C], 00000010
:0046579C 742D                    je 004657CB
:0046579E E9F1000000              jmp 00465894

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465790(C)
|
:004657A3 817DF410010000          cmp dword ptr [ebp-0C], 00000110
:004657AA 740E                    je 004657BA
:004657AC 817DF411010000          cmp dword ptr [ebp-0C], 00000111
:004657B3 7427                    je 004657DC
:004657B5 E9DA000000              jmp 00465894

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004657AA(C)
|
:004657BA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004657BD 51                      push ecx
:004657BE E8D9000000              call 0046589C
:004657C3 83C404                  add esp, 00000004
:004657C6 E9C9000000              jmp 00465894

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046579C(C)
|
:004657CB 6A00                    push 00000000
:004657CD 8B5508                  mov edx, dword ptr [ebp+08]
:004657D0 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004657D1 FF15D8D54B00            Call dword ptr [004BD5D8]
:004657D7 E9B8000000              jmp 00465894

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004657B3(C)
|
:004657DC 8B4510                  mov eax, dword ptr [ebp+10]
:004657DF 25FFFF0000              and eax, 0000FFFF
:004657E4 8945F0                  mov dword ptr [ebp-10], eax
:004657E7 837DF002                cmp dword ptr [ebp-10], 00000002
:004657EB 740B                    je 004657F8
:004657ED 817DF03D040000          cmp dword ptr [ebp-10], 0000043D
:004657F4 7410                    je 00465806
:004657F6 EB1B                    jmp 00465813

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004657EB(C)
|
:004657F8 6A00                    push 00000000
:004657FA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004657FD 51                      push ecx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:004657FE FF15D8D54B00            Call dword ptr [004BD5D8]
:00465804 EB0D                    jmp 00465813

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004657F4(C)
|
:00465806 6868080000              push 00000868
:0046580B E8BB420000              call 00469ACB
:00465810 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004657F6(U), :00465804(U)
|
:00465813 EB7F                    jmp 00465894

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465796(C)
|
:00465815 8B5514                  mov edx, dword ptr [ebp+14]
:00465818 8955FC                  mov dword ptr [ebp-04], edx
:0046581B 8B45FC                  mov eax, dword ptr [ebp-04]
:0046581E 8B4808                  mov ecx, dword ptr [eax+08]
:00465821 894DEC                  mov dword ptr [ebp-14], ecx
:00465824 817DEC6AFFFFFF          cmp dword ptr [ebp-14], FFFFFF6A
:0046582B 742C                    je 00465859
:0046582D 837DEC94                cmp dword ptr [ebp-14], FFFFFF94
:00465831 7434                    je 00465867
:00465833 837DECFB                cmp dword ptr [ebp-14], FFFFFFFB
:00465837 7402                    je 0046583B
:00465839 EB59                    jmp 00465894

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465837(C)
|
:0046583B 8B55FC                  mov edx, dword ptr [ebp-04]
:0046583E 817A0448050000          cmp dword ptr [edx+04], 00000548
:00465845 7510                    jne 00465857
:00465847 8B45FC                  mov eax, dword ptr [ebp-04]
:0046584A 50                      push eax
:0046584B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046584E 51                      push ecx
:0046584F E8750C0000              call 004664C9
:00465854 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465845(C)
|
:00465857 EB3B                    jmp 00465894

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046582B(C)
|
:00465859 8B5514                  mov edx, dword ptr [ebp+14]
:0046585C 52                      push edx
:0046585D E83D040000              call 00465C9F
:00465862 83C404                  add esp, 00000004
:00465865 EB2D                    jmp 00465894

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465831(C)
|
:00465867 8B4514                  mov eax, dword ptr [ebp+14]
:0046586A 8945F8                  mov dword ptr [ebp-08], eax
:0046586D 6818624600              push 00466218
:00465872 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465875 8B5110                  mov edx, dword ptr [ecx+10]
:00465878 52                      push edx
:00465879 6830100000              push 00001030
:0046587E 8B45F8                  mov eax, dword ptr [ebp-08]
:00465881 8B08                    mov ecx, dword ptr [eax]
:00465883 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465884 FF1504D64B00            Call dword ptr [004BD604]
:0046588A B96CB34800              mov ecx, 0048B36C
:0046588F E8DC3EFBFF              call 00419770

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046579E(U), :004657B5(U), :004657C6(U), :004657D7(U), :00465813(U)
|:00465839(U), :00465857(U), :00465865(U)
|
:00465894 33C0                    xor eax, eax
:00465896 8BE5                    mov esp, ebp
:00465898 5D                      pop ebp
:00465899 C21000                  ret 0010



* Referenced by a CALL at Address:
|:004657BE   
|
:0046589C 55                      push ebp
:0046589D 8BEC                    mov ebp, esp
:0046589F 83EC0C                  sub esp, 0000000C
:004658A2 6A00                    push 00000000
:004658A4 6A26                    push 00000026
:004658A6 68FF000000              push 000000FF
:004658AB 6A10                    push 00000010
:004658AD 6A10                    push 00000010

* Reference To: COMCTL32.ImageList_Create, Ord:0016h
                                  |
:004658AF FF1510D44B00            Call dword ptr [004BD410]
:004658B5 8945F8                  mov dword ptr [ebp-08], eax
:004658B8 C745F400000000          mov [ebp-0C], 00000000
:004658BF EB09                    jmp 004658CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465900(U)
|
:004658C1 8B45F4                  mov eax, dword ptr [ebp-0C]
:004658C4 83C001                  add eax, 00000001
:004658C7 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004658BF(U)
|
:004658CA 837DF426                cmp dword ptr [ebp-0C], 00000026
:004658CE 7D32                    jge 00465902
:004658D0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004658D3 81C1FA000000            add ecx, 000000FA
:004658D9 81E1FFFF0000            and ecx, 0000FFFF
:004658DF 51                      push ecx
:004658E0 8B15A8554B00            mov edx, dword ptr [004B55A8]
:004658E6 52                      push edx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:004658E7 FF15E4D64B00            Call dword ptr [004BD6E4]
:004658ED 8945FC                  mov dword ptr [ebp-04], eax
:004658F0 8B45FC                  mov eax, dword ptr [ebp-04]
:004658F3 50                      push eax
:004658F4 6AFF                    push FFFFFFFF
:004658F6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004658F9 51                      push ecx

* Reference To: COMCTL32.ImageList_ReplaceIcon, Ord:002Dh
                                  |
:004658FA FF1514D44B00            Call dword ptr [004BD414]
:00465900 EBBF                    jmp 004658C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004658CE(C)
|
:00465902 8B55F8                  mov edx, dword ptr [ebp-08]
:00465905 52                      push edx
:00465906 6848050000              push 00000548
:0046590B 8B4508                  mov eax, dword ptr [ebp+08]
:0046590E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046590F FF1510D64B00            Call dword ptr [004BD610]
:00465915 50                      push eax
:00465916 E81A000000              call 00465935
:0046591B 83C408                  add esp, 00000008

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046591E 6A02                    push 00000002
:00465920 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465923 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00465924 FF1510D64B00            Call dword ptr [004BD610]
:0046592A 50                      push eax

* Reference To: USER32.SetFocus, Ord:01F5h
                                  |
:0046592B FF1500D64B00            Call dword ptr [004BD600]
:00465931 8BE5                    mov esp, ebp
:00465933 5D                      pop ebp
:00465934 C3                      ret



* Referenced by a CALL at Address:
|:00465916   
|
:00465935 55                      push ebp
:00465936 8BEC                    mov ebp, esp
:00465938 8B4508                  mov eax, dword ptr [ebp+08]
:0046593B 50                      push eax
:0046593C E826000000              call 00465967
:00465941 83C404                  add esp, 00000004
:00465944 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00465947 51                      push ecx
:00465948 6A01                    push 00000001
:0046594A 6803100000              push 00001003
:0046594F 8B5508                  mov edx, dword ptr [ebp+08]
:00465952 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465953 FF1504D64B00            Call dword ptr [004BD604]
:00465959 8B4508                  mov eax, dword ptr [ebp+08]
:0046595C 50                      push eax
:0046595D E817020000              call 00465B79
:00465962 83C404                  add esp, 00000004
:00465965 5D                      pop ebp
:00465966 C3                      ret



* Referenced by a CALL at Address:
|:0046593C   
|
:00465967 55                      push ebp
:00465968 8BEC                    mov ebp, esp
:0046596A 83EC48                  sub esp, 00000048

* Possible StringData Ref from Data Obj ->"DW"
                                  |
:0046596D C745DC201C4800          mov [ebp-24], 00481C20

* Possible StringData Ref from Data Obj ->"s@iબp"
                                  |
:00465974 C745E0281C4800          mov [ebp-20], 00481C28

* Possible StringData Ref from Data Obj ->"s@uKݩ"
                                  |
:0046597B C745E4381C4800          mov [ebp-1C], 00481C38

* Possible StringData Ref from Data Obj ->"ݩ"
                                  |
:00465982 C745E84C1C4800          mov [ebp-18], 00481C4C

* Possible StringData Ref from Data Obj ->"ĪG"
                                  |
:00465989 C745EC541C4800          mov [ebp-14], 00481C54

* Possible StringData Ref from Data Obj ->"p"
                                  |
:00465990 C745F05C1C4800          mov [ebp-10], 00481C5C

* Possible StringData Ref from Data Obj ->"1"
                                  |
:00465997 C745F4681C4800          mov [ebp-0C], 00481C68

* Possible StringData Ref from Data Obj ->"2"
                                  |
:0046599E C745F8701C4800          mov [ebp-08], 00481C70

* Possible StringData Ref from Data Obj ->"3"
                                  |
:004659A5 C745FC781C4800          mov [ebp-04], 00481C78
:004659AC 6A20                    push 00000020
:004659AE 6A00                    push 00000000
:004659B0 8D45BC                  lea eax, dword ptr [ebp-44]
:004659B3 50                      push eax
:004659B4 E817A10000              call 0046FAD0
:004659B9 83C40C                  add esp, 0000000C
:004659BC C745BC0F000000          mov [ebp-44], 0000000F
:004659C3 C745CC20000000          mov [ebp-34], 00000020
:004659CA C745B800000000          mov [ebp-48], 00000000
:004659D1 EB09                    jmp 004659DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465A27(U)
|
:004659D3 8B4DB8                  mov ecx, dword ptr [ebp-48]
:004659D6 83C101                  add ecx, 00000001
:004659D9 894DB8                  mov dword ptr [ebp-48], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004659D1(U)
|
:004659DC 837DB809                cmp dword ptr [ebp-48], 00000009
:004659E0 7D47                    jge 00465A29
:004659E2 8B55B8                  mov edx, dword ptr [ebp-48]
:004659E5 8B4495DC                mov eax, dword ptr [ebp+4*edx-24]
:004659E9 8945C8                  mov dword ptr [ebp-38], eax
:004659EC 8B4DB8                  mov ecx, dword ptr [ebp-48]
:004659EF 51                      push ecx
:004659F0 E8DE000000              call 00465AD3
:004659F5 83C404                  add esp, 00000004
:004659F8 8945C0                  mov dword ptr [ebp-40], eax
:004659FB 8B55B8                  mov edx, dword ptr [ebp-48]
:004659FE 52                      push edx
:004659FF E829000000              call 00465A2D
:00465A04 83C404                  add esp, 00000004
:00465A07 8945C4                  mov dword ptr [ebp-3C], eax
:00465A0A 8B45B8                  mov eax, dword ptr [ebp-48]
:00465A0D 8945D0                  mov dword ptr [ebp-30], eax
:00465A10 8D4DBC                  lea ecx, dword ptr [ebp-44]
:00465A13 51                      push ecx
:00465A14 8B55B8                  mov edx, dword ptr [ebp-48]
:00465A17 52                      push edx
:00465A18 681B100000              push 0000101B
:00465A1D 8B4508                  mov eax, dword ptr [ebp+08]
:00465A20 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465A21 FF1504D64B00            Call dword ptr [004BD604]
:00465A27 EBAA                    jmp 004659D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004659E0(C)
|
:00465A29 8BE5                    mov esp, ebp
:00465A2B 5D                      pop ebp
:00465A2C C3                      ret



* Referenced by a CALL at Address:
|:004659FF   
|
:00465A2D 55                      push ebp
:00465A2E 8BEC                    mov ebp, esp
:00465A30 83EC08                  sub esp, 00000008
:00465A33 C745FC00000000          mov [ebp-04], 00000000
:00465A3A 8B4508                  mov eax, dword ptr [ebp+08]
:00465A3D 8945F8                  mov dword ptr [ebp-08], eax
:00465A40 837DF808                cmp dword ptr [ebp-08], 00000008
:00465A44 775B                    ja 00465AA1
:00465A46 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465A49 FF248DAF5A4600          jmp dword ptr [4*ecx+00465AAF]
:00465A50 C745FC6E000000          mov [ebp-04], 0000006E
:00465A57 EB4F                    jmp 00465AA8
:00465A59 C745FC8C000000          mov [ebp-04], 0000008C
:00465A60 EB46                    jmp 00465AA8

* Possible Ref to Menu: APPMENU, Item: "}e(L)"
                                  |
:00465A62 C745FC66000000          mov [ebp-04], 00000066
:00465A69 EB3D                    jmp 00465AA8
:00465A6B C745FC2A000000          mov [ebp-04], 0000002A
:00465A72 EB34                    jmp 00465AA8
:00465A74 C745FC2A000000          mov [ebp-04], 0000002A
:00465A7B EB2B                    jmp 00465AA8
:00465A7D C745FC48000000          mov [ebp-04], 00000048
:00465A84 EB22                    jmp 00465AA8
:00465A86 C745FC64000000          mov [ebp-04], 00000064
:00465A8D EB19                    jmp 00465AA8
:00465A8F C745FC64000000          mov [ebp-04], 00000064
:00465A96 EB10                    jmp 00465AA8
:00465A98 C745FC64000000          mov [ebp-04], 00000064
:00465A9F EB07                    jmp 00465AA8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465A44(C)
|
:00465AA1 C745FC64000000          mov [ebp-04], 00000064

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465A57(U), :00465A60(U), :00465A69(U), :00465A72(U), :00465A7B(U)
|:00465A84(U), :00465A8D(U), :00465A96(U), :00465A9F(U)
|
:00465AA8 8B45FC                  mov eax, dword ptr [ebp-04]
:00465AAB 8BE5                    mov esp, ebp
:00465AAD 5D                      pop ebp
:00465AAE C3                      ret



:00465AAF 505A4600                DWORD 00465A50
:00465AB3 595A4600                DWORD 00465A59
:00465AB7 625A4600                DWORD 00465A62
:00465ABB 6B5A4600                DWORD 00465A6B
:00465ABF 745A4600                DWORD 00465A74
:00465AC3 7D5A4600                DWORD 00465A7D
:00465AC7 865A4600                DWORD 00465A86
:00465ACB 8F5A4600                DWORD 00465A8F
:00465ACF 985A4600                DWORD 00465A98



* Referenced by a CALL at Address:
|:004659F0   
|
:00465AD3 55                      push ebp
:00465AD4 8BEC                    mov ebp, esp
:00465AD6 83EC08                  sub esp, 00000008
:00465AD9 C745FC00000000          mov [ebp-04], 00000000
:00465AE0 8B4508                  mov eax, dword ptr [ebp+08]
:00465AE3 8945F8                  mov dword ptr [ebp-08], eax
:00465AE6 837DF808                cmp dword ptr [ebp-08], 00000008
:00465AEA 775B                    ja 00465B47
:00465AEC 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465AEF FF248D555B4600          jmp dword ptr [4*ecx+00465B55]
:00465AF6 C745FC00000000          mov [ebp-04], 00000000
:00465AFD EB4F                    jmp 00465B4E
:00465AFF C745FC00000000          mov [ebp-04], 00000000
:00465B06 EB46                    jmp 00465B4E
:00465B08 C745FC00000000          mov [ebp-04], 00000000
:00465B0F EB3D                    jmp 00465B4E
:00465B11 C745FC01000000          mov [ebp-04], 00000001
:00465B18 EB34                    jmp 00465B4E
:00465B1A C745FC01000000          mov [ebp-04], 00000001
:00465B21 EB2B                    jmp 00465B4E
:00465B23 C745FC00000000          mov [ebp-04], 00000000
:00465B2A EB22                    jmp 00465B4E

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00465B2C C745FC02000000          mov [ebp-04], 00000002
:00465B33 EB19                    jmp 00465B4E

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00465B35 C745FC02000000          mov [ebp-04], 00000002
:00465B3C EB10                    jmp 00465B4E

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00465B3E C745FC02000000          mov [ebp-04], 00000002
:00465B45 EB07                    jmp 00465B4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465AEA(C)
|
:00465B47 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465AFD(U), :00465B06(U), :00465B0F(U), :00465B18(U), :00465B21(U)
|:00465B2A(U), :00465B33(U), :00465B3C(U), :00465B45(U)
|
:00465B4E 8B45FC                  mov eax, dword ptr [ebp-04]
:00465B51 8BE5                    mov esp, ebp
:00465B53 5D                      pop ebp
:00465B54 C3                      ret



:00465B55 F65A4600                DWORD 00465AF6
:00465B59 FF5A4600                DWORD 00465AFF
:00465B5D 085B4600                DWORD 00465B08
:00465B61 115B4600                DWORD 00465B11
:00465B65 1A5B4600                DWORD 00465B1A
:00465B69 235B4600                DWORD 00465B23
:00465B6D 2C5B4600                DWORD 00465B2C
:00465B71 355B4600                DWORD 00465B35
:00465B75 3E5B4600                DWORD 00465B3E



* Referenced by a CALL at Address:
|:0046595D   
|
:00465B79 55                      push ebp
:00465B7A 8BEC                    mov ebp, esp
:00465B7C 83EC34                  sub esp, 00000034
:00465B7F C745D00F000000          mov [ebp-30], 0000000F
:00465B86 C745DC00000000          mov [ebp-24], 00000000
:00465B8D C745E000000000          mov [ebp-20], 00000000
:00465B94 C745D800000000          mov [ebp-28], 00000000
:00465B9B C745E4FFFFFFFF          mov [ebp-1C], FFFFFFFF
:00465BA2 C745E820000000          mov [ebp-18], 00000020
:00465BA9 C745ECFFFFFFFF          mov [ebp-14], FFFFFFFF
:00465BB0 C745F800000000          mov [ebp-08], 00000000

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:00465BB7 C745FCC8000000          mov [ebp-04], 000000C8
:00465BBE EB09                    jmp 00465BC9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465C96(U)
|
:00465BC0 8B45FC                  mov eax, dword ptr [ebp-04]
:00465BC3 83C001                  add eax, 00000001
:00465BC6 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465BBE(U)
|
:00465BC9 817DFC20030000          cmp dword ptr [ebp-04], 00000320
:00465BD0 0F83C5000000            jnb 00465C9B
:00465BD6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465BD9 51                      push ecx
:00465BDA E8B182FAFF              call 0040DE90
:00465BDF 83C404                  add esp, 00000004
:00465BE2 85C0                    test eax, eax
:00465BE4 0F84AC000000            je 00465C96
:00465BEA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465BED 6BC950                  imul ecx, 00000050
:00465BF0 81C1787F4900            add ecx, 00497F78
:00465BF6 E8356DFAFF              call 0040C930
:00465BFB 25FF000000              and eax, 000000FF
:00465C00 83F801                  cmp eax, 00000001
:00465C03 0F858D000000            jne 00465C96
:00465C09 C645CC00                mov [ebp-34], 00
:00465C0D EB09                    jmp 00465C18

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465C91(U)
|
:00465C0F 8A55CC                  mov dl, byte ptr [ebp-34]
:00465C12 80C201                  add dl, 01
:00465C15 8855CC                  mov byte ptr [ebp-34], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465C0D(U)
|
:00465C18 8B45CC                  mov eax, dword ptr [ebp-34]
:00465C1B 25FF000000              and eax, 000000FF
:00465C20 83F808                  cmp eax, 00000008
:00465C23 7D71                    jge 00465C96
:00465C25 8A4DCC                  mov cl, byte ptr [ebp-34]
:00465C28 51                      push ecx
:00465C29 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465C2C 6BC950                  imul ecx, 00000050
:00465C2F 81C1787F4900            add ecx, 00497F78
:00465C35 E8A6D5F9FF              call 004031E0
:00465C3A 25FF000000              and eax, 000000FF
:00465C3F 3DFF000000              cmp eax, 000000FF
:00465C44 744B                    je 00465C91
:00465C46 8B55F8                  mov edx, dword ptr [ebp-08]
:00465C49 8A45FC                  mov al, byte ptr [ebp-04]
:00465C4C 880455E84F4B00          mov byte ptr [2*edx+004B4FE8], al
:00465C53 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465C56 8A55CC                  mov dl, byte ptr [ebp-34]
:00465C59 88144DE94F4B00          mov byte ptr [2*ecx+004B4FE9], dl
:00465C60 8B45F8                  mov eax, dword ptr [ebp-08]
:00465C63 8D0C45E84F4B00          lea ecx, dword ptr [2*eax+004B4FE8]
:00465C6A 894DF0                  mov dword ptr [ebp-10], ecx
:00465C6D 8B55F8                  mov edx, dword ptr [ebp-08]
:00465C70 8955D4                  mov dword ptr [ebp-2C], edx
:00465C73 8D45D0                  lea eax, dword ptr [ebp-30]
:00465C76 50                      push eax
:00465C77 6A00                    push 00000000
:00465C79 6807100000              push 00001007
:00465C7E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465C81 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00465C82 FF1504D64B00            Call dword ptr [004BD604]
:00465C88 8B55F8                  mov edx, dword ptr [ebp-08]
:00465C8B 83C201                  add edx, 00000001
:00465C8E 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465C44(C)
|
:00465C91 E979FFFFFF              jmp 00465C0F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465BE4(C), :00465C03(C), :00465C23(C)
|
:00465C96 E925FFFFFF              jmp 00465BC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465BD0(C)
|
:00465C9B 8BE5                    mov esp, ebp
:00465C9D 5D                      pop ebp
:00465C9E C3                      ret



* Referenced by a CALL at Address:
|:0046585D   
|
:00465C9F 55                      push ebp
:00465CA0 8BEC                    mov ebp, esp
:00465CA2 83EC28                  sub esp, 00000028
:00465CA5 8B4508                  mov eax, dword ptr [ebp+08]
:00465CA8 8B482C                  mov ecx, dword ptr [eax+2C]
:00465CAB 894DE8                  mov dword ptr [ebp-18], ecx
:00465CAE 8B55E8                  mov edx, dword ptr [ebp-18]
:00465CB1 33C0                    xor eax, eax
:00465CB3 8A02                    mov al, byte ptr [edx]
:00465CB5 8945F8                  mov dword ptr [ebp-08], eax
:00465CB8 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00465CBB 8A5101                  mov dl, byte ptr [ecx+01]
:00465CBE 8855F4                  mov byte ptr [ebp-0C], dl
:00465CC1 817DF8FA000000          cmp dword ptr [ebp-08], 000000FA
:00465CC8 770D                    ja 00465CD7
:00465CCA 8B45F4                  mov eax, dword ptr [ebp-0C]
:00465CCD 25FF000000              and eax, 000000FF
:00465CD2 83F807                  cmp eax, 00000007
:00465CD5 7E05                    jle 00465CDC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465CC8(C)
|
:00465CD7 E975020000              jmp 00465F51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465CD5(C)
|
:00465CDC 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00465CDF 51                      push ecx
:00465CE0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465CE3 6BC950                  imul ecx, 00000050
:00465CE6 81C1787F4900            add ecx, 00497F78
:00465CEC E8EFD4F9FF              call 004031E0
:00465CF1 25FF000000              and eax, 000000FF
:00465CF6 8945FC                  mov dword ptr [ebp-04], eax
:00465CF9 8B5508                  mov edx, dword ptr [ebp+08]
:00465CFC 8B4214                  mov eax, dword ptr [edx+14]
:00465CFF 8945D8                  mov dword ptr [ebp-28], eax
:00465D02 837DD808                cmp dword ptr [ebp-28], 00000008
:00465D06 0F8745020000            ja 00465F51
:00465D0C 8B4DD8                  mov ecx, dword ptr [ebp-28]
:00465D0F FF248D555F4600          jmp dword ptr [4*ecx+00465F55]
:00465D16 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465D19 6BC922                  imul ecx, 00000022
:00465D1C 81C1D0474900            add ecx, 004947D0
:00465D22 E8C9F9F9FF              call 004056F0
:00465D27 8B5508                  mov edx, dword ptr [ebp+08]
:00465D2A 894220                  mov dword ptr [edx+20], eax
:00465D2D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465D30 6BC922                  imul ecx, 00000022
:00465D33 81C1D0474900            add ecx, 004947D0
:00465D39 E802D5F9FF              call 00403240
:00465D3E 25FF000000              and eax, 000000FF
:00465D43 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465D46 894128                  mov dword ptr [ecx+28], eax
:00465D49 E903020000              jmp 00465F51
:00465D4E 8B55FC                  mov edx, dword ptr [ebp-04]
:00465D51 52                      push edx
:00465D52 8B45F8                  mov eax, dword ptr [ebp-08]
:00465D55 50                      push eax
:00465D56 E869040000              call 004661C4
:00465D5B 83C408                  add esp, 00000008
:00465D5E 8845E0                  mov byte ptr [ebp-20], al
:00465D61 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00465D64 81E1FF000000            and ecx, 000000FF
:00465D6A 83F902                  cmp ecx, 00000002
:00465D6D 750C                    jne 00465D7B
:00465D6F 8B5508                  mov edx, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->"׽m"
                                  |
:00465D72 C74220801C4800          mov [edx+20], 00481C80
:00465D79 EB30                    jmp 00465DAB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465D6D(C)
|
:00465D7B 8B45E0                  mov eax, dword ptr [ebp-20]
:00465D7E 25FF000000              and eax, 000000FF
:00465D83 83F801                  cmp eax, 00000001
:00465D86 7519                    jne 00465DA1
:00465D88 6808534B00              push 004B5308
:00465D8D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465D90 51                      push ecx
:00465D91 E8E3010000              call 00465F79
:00465D96 83C408                  add esp, 00000008
:00465D99 8B5508                  mov edx, dword ptr [ebp+08]
:00465D9C 894220                  mov dword ptr [edx+20], eax
:00465D9F EB0A                    jmp 00465DAB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465D86(C)
|
:00465DA1 8B4508                  mov eax, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->"iHs@"
                                  |
:00465DA4 C740208C1C4800          mov [eax+20], 00481C8C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465D79(U), :00465D9F(U)
|
:00465DAB E9A1010000              jmp 00465F51
:00465DB0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00465DB3 6BC950                  imul ecx, 00000050
:00465DB6 81C1787F4900            add ecx, 00497F78
:00465DBC E843D3F9FF              call 00403104
:00465DC1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465DC4 894120                  mov dword ptr [ecx+20], eax
:00465DC7 E985010000              jmp 00465F51
:00465DCC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465DCF 6BC922                  imul ecx, 00000022
:00465DD2 81C1D0474900            add ecx, 004947D0
:00465DD8 E859D7F9FF              call 00403536
:00465DDD 25FF000000              and eax, 000000FF
:00465DE2 8B5508                  mov edx, dword ptr [ebp+08]
:00465DE5 8B048510D64700          mov eax, dword ptr [4*eax+0047D610]
:00465DEC 894220                  mov dword ptr [edx+20], eax
:00465DEF E95D010000              jmp 00465F51

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00465DF4 6A0A                    push 0000000A
:00465DF6 6808534B00              push 004B5308
:00465DFB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465DFE 6BC922                  imul ecx, 00000022
:00465E01 81C1D0474900            add ecx, 004947D0
:00465E07 E854D4F9FF              call 00403260
:00465E0C 25FF000000              and eax, 000000FF
:00465E11 50                      push eax
:00465E12 E8B9250100              call 004783D0
:00465E17 83C40C                  add esp, 0000000C
:00465E1A 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465E1D 894120                  mov dword ptr [ecx+20], eax
:00465E20 E92C010000              jmp 00465F51
:00465E25 8B55FC                  mov edx, dword ptr [ebp-04]
:00465E28 52                      push edx
:00465E29 E803030000              call 00466131
:00465E2E 83C404                  add esp, 00000004
:00465E31 8845DC                  mov byte ptr [ebp-24], al
:00465E34 8B45DC                  mov eax, dword ptr [ebp-24]
:00465E37 25FF000000              and eax, 000000FF
:00465E3C 85C0                    test eax, eax
:00465E3E 750C                    jne 00465E4C
:00465E40 8B4D08                  mov ecx, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->"sJܮw"
                                  |
:00465E43 C74120981C4800          mov [ecx+20], 00481C98
:00465E4A EB24                    jmp 00465E70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465E3E(C)
|
:00465E4C 8B55DC                  mov edx, dword ptr [ebp-24]
:00465E4F 81E2FF000000            and edx, 000000FF
:00465E55 83FA01                  cmp edx, 00000001
:00465E58 750C                    jne 00465E66
:00465E5A 8B4508                  mov eax, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->"ZN"
                                  |
:00465E5D C74020A41C4800          mov [eax+20], 00481CA4
:00465E64 EB0A                    jmp 00465E70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465E58(C)
|
:00465E66 8B4D08                  mov ecx, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->""
                                  |
:00465E69 C74120B01C4800          mov [ecx+20], 00481CB0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465E4A(U), :00465E64(U)
|
:00465E70 E9DC000000              jmp 00465F51
:00465E75 6A00                    push 00000000
:00465E77 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465E7A 6BC922                  imul ecx, 00000022
:00465E7D 81C1D0474900            add ecx, 004947D0
:00465E83 E8E8060000              call 00466570
:00465E88 25FFFF0000              and eax, 0000FFFF
:00465E8D 8945F0                  mov dword ptr [ebp-10], eax
:00465E90 817DF0FFFF0000          cmp dword ptr [ebp-10], 0000FFFF
:00465E97 7419                    je 00465EB2
:00465E99 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00465E9C 6BC922                  imul ecx, 00000022
:00465E9F 81C1D0474900            add ecx, 004947D0
:00465EA5 E846F8F9FF              call 004056F0
:00465EAA 8B5508                  mov edx, dword ptr [ebp+08]
:00465EAD 894220                  mov dword ptr [edx+20], eax
:00465EB0 EB0A                    jmp 00465EBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465E97(C)
|
:00465EB2 8B4508                  mov eax, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->"СС"
                                  |
:00465EB5 C74020B81C4800          mov [eax+20], 00481CB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465EB0(U)
|
:00465EBC E990000000              jmp 00465F51
:00465EC1 6A01                    push 00000001
:00465EC3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465EC6 6BC922                  imul ecx, 00000022
:00465EC9 81C1D0474900            add ecx, 004947D0
:00465ECF E89C060000              call 00466570
:00465ED4 25FFFF0000              and eax, 0000FFFF
:00465ED9 8945EC                  mov dword ptr [ebp-14], eax
:00465EDC 817DECFFFF0000          cmp dword ptr [ebp-14], 0000FFFF
:00465EE3 7419                    je 00465EFE
:00465EE5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00465EE8 6BC922                  imul ecx, 00000022
:00465EEB 81C1D0474900            add ecx, 004947D0
:00465EF1 E8FAF7F9FF              call 004056F0
:00465EF6 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465EF9 894120                  mov dword ptr [ecx+20], eax
:00465EFC EB0A                    jmp 00465F08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465EE3(C)
|
:00465EFE 8B5508                  mov edx, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->"СС"
                                  |
:00465F01 C74220C01C4800          mov [edx+20], 00481CC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465EFC(U)
|
:00465F08 EB47                    jmp 00465F51

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00465F0A 6A02                    push 00000002
:00465F0C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00465F0F 6BC922                  imul ecx, 00000022
:00465F12 81C1D0474900            add ecx, 004947D0
:00465F18 E853060000              call 00466570
:00465F1D 25FFFF0000              and eax, 0000FFFF
:00465F22 8945E4                  mov dword ptr [ebp-1C], eax
:00465F25 817DE4FFFF0000          cmp dword ptr [ebp-1C], 0000FFFF
:00465F2C 7419                    je 00465F47
:00465F2E 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00465F31 6BC922                  imul ecx, 00000022
:00465F34 81C1D0474900            add ecx, 004947D0
:00465F3A E8B1F7F9FF              call 004056F0
:00465F3F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465F42 894120                  mov dword ptr [ecx+20], eax
:00465F45 EB0A                    jmp 00465F51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465F2C(C)
|
:00465F47 8B5508                  mov edx, dword ptr [ebp+08]

* Possible StringData Ref from Data Obj ->"СС"
                                  |
:00465F4A C74220C81C4800          mov [edx+20], 00481CC8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465CD7(U), :00465D06(C), :00465D49(U), :00465DAB(U), :00465DC7(U)
|:00465DEF(U), :00465E20(U), :00465E70(U), :00465EBC(U), :00465F08(U)
|:00465F45(U)
|
:00465F51 8BE5                    mov esp, ebp
:00465F53 5D                      pop ebp
:00465F54 C3                      ret



:00465F55 165D4600                DWORD 00465D16
:00465F59 4E5D4600                DWORD 00465D4E
:00465F5D B05D4600                DWORD 00465DB0
:00465F61 CC5D4600                DWORD 00465DCC
:00465F65 F45D4600                DWORD 00465DF4
:00465F69 255E4600                DWORD 00465E25
:00465F6D 755E4600                DWORD 00465E75
:00465F71 C15E4600                DWORD 00465EC1
:00465F75 0A5F4600                DWORD 00465F0A



* Referenced by a CALL at Address:
|:00465D91   
|
:00465F79 55                      push ebp
:00465F7A 8BEC                    mov ebp, esp
:00465F7C 83EC38                  sub esp, 00000038
:00465F7F 6A00                    push 00000000
:00465F81 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465F84 6BC922                  imul ecx, 00000022
:00465F87 81C1D0474900            add ecx, 004947D0
:00465F8D E8DE050000              call 00466570
:00465F92 25FFFF0000              and eax, 0000FFFF
:00465F97 8945F0                  mov dword ptr [ebp-10], eax
:00465F9A 6A01                    push 00000001
:00465F9C 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465F9F 6BC922                  imul ecx, 00000022
:00465FA2 81C1D0474900            add ecx, 004947D0
:00465FA8 E8C3050000              call 00466570
:00465FAD 25FFFF0000              and eax, 0000FFFF
:00465FB2 8945EC                  mov dword ptr [ebp-14], eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00465FB5 6A02                    push 00000002
:00465FB7 8B4D08                  mov ecx, dword ptr [ebp+08]
:00465FBA 6BC922                  imul ecx, 00000022
:00465FBD 81C1D0474900            add ecx, 004947D0
:00465FC3 E8A8050000              call 00466570
:00465FC8 25FFFF0000              and eax, 0000FFFF
:00465FCD 8945E8                  mov dword ptr [ebp-18], eax
:00465FD0 817DF0FFFF0000          cmp dword ptr [ebp-10], 0000FFFF
:00465FD7 741E                    je 00465FF7
:00465FD9 8B45F0                  mov eax, dword ptr [ebp-10]
:00465FDC 50                      push eax
:00465FDD B978294B00              mov ecx, 004B2978
:00465FE2 E8F3E4F9FF              call 004044DA
:00465FE7 3DFFFF0000              cmp eax, 0000FFFF
:00465FEC 7509                    jne 00465FF7
:00465FEE C745E401000000          mov [ebp-1C], 00000001
:00465FF5 EB07                    jmp 00465FFE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00465FD7(C), :00465FEC(C)
|
:00465FF7 C745E400000000          mov [ebp-1C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00465FF5(U)
|
:00465FFE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00466001 894DFC                  mov dword ptr [ebp-04], ecx
:00466004 817DECFFFF0000          cmp dword ptr [ebp-14], 0000FFFF
:0046600B 741E                    je 0046602B
:0046600D 8B55EC                  mov edx, dword ptr [ebp-14]
:00466010 52                      push edx
:00466011 B978294B00              mov ecx, 004B2978
:00466016 E8BFE4F9FF              call 004044DA
:0046601B 3DFFFF0000              cmp eax, 0000FFFF
:00466020 7509                    jne 0046602B
:00466022 C745E001000000          mov [ebp-20], 00000001
:00466029 EB07                    jmp 00466032

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046600B(C), :00466020(C)
|
:0046602B C745E000000000          mov [ebp-20], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466029(U)
|
:00466032 8B45E0                  mov eax, dword ptr [ebp-20]
:00466035 8945F8                  mov dword ptr [ebp-08], eax
:00466038 817DE8FFFF0000          cmp dword ptr [ebp-18], 0000FFFF
:0046603F 741E                    je 0046605F
:00466041 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00466044 51                      push ecx
:00466045 B978294B00              mov ecx, 004B2978
:0046604A E88BE4F9FF              call 004044DA
:0046604F 3DFFFF0000              cmp eax, 0000FFFF
:00466054 7509                    jne 0046605F
:00466056 C745DC01000000          mov [ebp-24], 00000001
:0046605D EB07                    jmp 00466066

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046603F(C), :00466054(C)
|
:0046605F C745DC00000000          mov [ebp-24], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046605D(U)
|
:00466066 8B55DC                  mov edx, dword ptr [ebp-24]
:00466069 8955F4                  mov dword ptr [ebp-0C], edx
:0046606C 837DF400                cmp dword ptr [ebp-0C], 00000000
:00466070 7411                    je 00466083
:00466072 8B45E8                  mov eax, dword ptr [ebp-18]
:00466075 50                      push eax
:00466076 E898D4F9FF              call 00403513
:0046607B 83C404                  add esp, 00000004
:0046607E 8945D8                  mov dword ptr [ebp-28], eax
:00466081 EB07                    jmp 0046608A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466070(C)
|
:00466083 C745D8AC534B00          mov [ebp-28], 004B53AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466081(U)
|
:0046608A 837DF800                cmp dword ptr [ebp-08], 00000000
:0046608E 740F                    je 0046609F
:00466090 837DF400                cmp dword ptr [ebp-0C], 00000000
:00466094 7409                    je 0046609F

* Possible StringData Ref from Data Obj ->"N"
                                  |
:00466096 C745D4D01C4800          mov [ebp-2C], 00481CD0
:0046609D EB07                    jmp 004660A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046608E(C), :00466094(C)
|
:0046609F C745D4B0534B00          mov [ebp-2C], 004B53B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046609D(U)
|
:004660A6 837DF800                cmp dword ptr [ebp-08], 00000000
:004660AA 7411                    je 004660BD
:004660AC 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004660AF 51                      push ecx
:004660B0 E85ED4F9FF              call 00403513
:004660B5 83C404                  add esp, 00000004
:004660B8 8945D0                  mov dword ptr [ebp-30], eax
:004660BB EB07                    jmp 004660C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004660AA(C)
|
:004660BD C745D0B4534B00          mov [ebp-30], 004B53B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004660BB(U)
|
:004660C4 837DFC00                cmp dword ptr [ebp-04], 00000000
:004660C8 7415                    je 004660DF
:004660CA 837DF800                cmp dword ptr [ebp-08], 00000000
:004660CE 7506                    jne 004660D6
:004660D0 837DF400                cmp dword ptr [ebp-0C], 00000000
:004660D4 7409                    je 004660DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004660CE(C)
|

* Possible StringData Ref from Data Obj ->"N"
                                  |
:004660D6 C745CCD41C4800          mov [ebp-34], 00481CD4
:004660DD EB07                    jmp 004660E6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004660C8(C), :004660D4(C)
|
:004660DF C745CCB8534B00          mov [ebp-34], 004B53B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004660DD(U)
|
:004660E6 837DFC00                cmp dword ptr [ebp-04], 00000000
:004660EA 7411                    je 004660FD
:004660EC 8B55F0                  mov edx, dword ptr [ebp-10]
:004660EF 52                      push edx
:004660F0 E81ED4F9FF              call 00403513
:004660F5 83C404                  add esp, 00000004
:004660F8 8945C8                  mov dword ptr [ebp-38], eax
:004660FB EB07                    jmp 00466104

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004660EA(C)
|
:004660FD C745C8BC534B00          mov [ebp-38], 004B53BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004660FB(U)
|
:00466104 8B45D8                  mov eax, dword ptr [ebp-28]
:00466107 50                      push eax
:00466108 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0046610B 51                      push ecx
:0046610C 8B55D0                  mov edx, dword ptr [ebp-30]
:0046610F 52                      push edx
:00466110 8B45CC                  mov eax, dword ptr [ebp-34]
:00466113 50                      push eax
:00466114 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00466117 51                      push ecx

* Possible StringData Ref from Data Obj ->"%s%s%s%s%s"
                                  |
:00466118 68D81C4800              push 00481CD8
:0046611D 8B550C                  mov edx, dword ptr [ebp+0C]
:00466120 52                      push edx

* Reference To: USER32.wsprintfA, Ord:0264h
                                  |
:00466121 FF1504D74B00            Call dword ptr [004BD704]
:00466127 83C41C                  add esp, 0000001C
:0046612A 8B450C                  mov eax, dword ptr [ebp+0C]
:0046612D 8BE5                    mov esp, ebp
:0046612F 5D                      pop ebp
:00466130 C3                      ret



* Referenced by a CALL at Addresses:
|:00465E29   , :0046638C   , :0046639B   
|
:00466131 55                      push ebp
:00466132 8BEC                    mov ebp, esp
:00466134 8B4508                  mov eax, dword ptr [ebp+08]
:00466137 50                      push eax
:00466138 B978294B00              mov ecx, 004B2978
:0046613D E898E3F9FF              call 004044DA
:00466142 3DFFFF0000              cmp eax, 0000FFFF
:00466147 7404                    je 0046614D
:00466149 32C0                    xor al, al
:0046614B EB16                    jmp 00466163

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466147(C)
|
:0046614D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466150 51                      push ecx
:00466151 E80F000000              call 00466165
:00466156 83C404                  add esp, 00000004
:00466159 85C0                    test eax, eax
:0046615B 7404                    je 00466161
:0046615D B001                    mov al, 01
:0046615F EB02                    jmp 00466163

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046615B(C)
|
:00466161 B002                    mov al, 02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046614B(U), :0046615F(U)
|
:00466163 5D                      pop ebp
:00466164 C3                      ret



* Referenced by a CALL at Address:
|:00466151   
|
:00466165 55                      push ebp
:00466166 8BEC                    mov ebp, esp
:00466168 51                      push ecx
:00466169 C745FC00000000          mov [ebp-04], 00000000
:00466170 EB09                    jmp 0046617B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004661BC(U)
|
:00466172 8B45FC                  mov eax, dword ptr [ebp-04]
:00466175 83C001                  add eax, 00000001
:00466178 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466170(U)
|
:0046617B 817DFCC8000000          cmp dword ptr [ebp-04], 000000C8
:00466182 733A                    jnb 004661BE
:00466184 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00466187 51                      push ecx
:00466188 E8037DFAFF              call 0040DE90
:0046618D 83C404                  add esp, 00000004
:00466190 85C0                    test eax, eax
:00466192 7428                    je 004661BC
:00466194 8B5508                  mov edx, dword ptr [ebp+08]
:00466197 52                      push edx
:00466198 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046619B 6BC950                  imul ecx, 00000050
:0046619E 81C1787F4900            add ecx, 00497F78
:004661A4 E8F1BFF9FF              call 0040219A
:004661A9 25FF000000              and eax, 000000FF
:004661AE 3DFF000000              cmp eax, 000000FF
:004661B3 7407                    je 004661BC
:004661B5 B801000000              mov eax, 00000001
:004661BA EB04                    jmp 004661C0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00466192(C), :004661B3(C)
|
:004661BC EBB4                    jmp 00466172

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466182(C)
|
:004661BE 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004661BA(U)
|
:004661C0 8BE5                    mov esp, ebp
:004661C2 5D                      pop ebp
:004661C3 C3                      ret



* Referenced by a CALL at Addresses:
|:00465D56   , :004662CE   , :004662E1   
|
:004661C4 55                      push ebp
:004661C5 8BEC                    mov ebp, esp
:004661C7 53                      push ebx
:004661C8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004661CB 6BC950                  imul ecx, 00000050
:004661CE 81C1787F4900            add ecx, 00497F78
:004661D4 E8C79CFAFF              call 0040FEA0
:004661D9 8AD8                    mov bl, al
:004661DB 81E3FF000000            and ebx, 000000FF
:004661E1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004661E4 6BC922                  imul ecx, 00000022
:004661E7 81C1D0474900            add ecx, 004947D0
:004661ED E89E030000              call 00466590
:004661F2 25FF000000              and eax, 000000FF
:004661F7 3BD8                    cmp ebx, eax
:004661F9 7D04                    jge 004661FF
:004661FB B002                    mov al, 02
:004661FD EB16                    jmp 00466215

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004661F9(C)
|
:004661FF 8B450C                  mov eax, dword ptr [ebp+0C]
:00466202 50                      push eax
:00466203 E826B0FFFF              call 0046122E
:00466208 83C404                  add esp, 00000004
:0046620B 85C0                    test eax, eax
:0046620D 7504                    jne 00466213
:0046620F B001                    mov al, 01
:00466211 EB02                    jmp 00466215

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046620D(C)
|
:00466213 32C0                    xor al, al

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004661FD(U), :00466211(U)
|
:00466215 5B                      pop ebx
:00466216 5D                      pop ebp
:00466217 C3                      ret


:00466218 55                      push ebp
:00466219 8BEC                    mov ebp, esp
:0046621B 83EC40                  sub esp, 00000040
:0046621E 53                      push ebx
:0046621F 837D0800                cmp dword ptr [ebp+08], 00000000
:00466223 7406                    je 0046622B
:00466225 837D0C00                cmp dword ptr [ebp+0C], 00000000
:00466229 7507                    jne 00466232

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466223(C)
|
:0046622B 33C0                    xor eax, eax
:0046622D E96C020000              jmp 0046649E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466229(C)
|
:00466232 8B4508                  mov eax, dword ptr [ebp+08]
:00466235 8945E0                  mov dword ptr [ebp-20], eax
:00466238 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046623B 894DD8                  mov dword ptr [ebp-28], ecx
:0046623E 8B55E0                  mov edx, dword ptr [ebp-20]
:00466241 33C0                    xor eax, eax
:00466243 8A02                    mov al, byte ptr [edx]
:00466245 8945F0                  mov dword ptr [ebp-10], eax
:00466248 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0046624B 33D2                    xor edx, edx
:0046624D 8A11                    mov dl, byte ptr [ecx]
:0046624F 8955F8                  mov dword ptr [ebp-08], edx
:00466252 8B45E0                  mov eax, dword ptr [ebp-20]
:00466255 8A4801                  mov cl, byte ptr [eax+01]
:00466258 884DF4                  mov byte ptr [ebp-0C], cl
:0046625B 8B55D8                  mov edx, dword ptr [ebp-28]
:0046625E 8A4201                  mov al, byte ptr [edx+01]
:00466261 8845E4                  mov byte ptr [ebp-1C], al
:00466264 8A4DF4                  mov cl, byte ptr [ebp-0C]
:00466267 51                      push ecx
:00466268 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046626B 6BC950                  imul ecx, 00000050
:0046626E 81C1787F4900            add ecx, 00497F78
:00466274 E867CFF9FF              call 004031E0
:00466279 25FF000000              and eax, 000000FF
:0046627E 8945E8                  mov dword ptr [ebp-18], eax
:00466281 8A55E4                  mov dl, byte ptr [ebp-1C]
:00466284 52                      push edx
:00466285 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00466288 6BC950                  imul ecx, 00000050
:0046628B 81C1787F4900            add ecx, 00497F78
:00466291 E84ACFF9FF              call 004031E0
:00466296 25FF000000              and eax, 000000FF
:0046629B 8945FC                  mov dword ptr [ebp-04], eax
:0046629E 8B4510                  mov eax, dword ptr [ebp+10]
:004662A1 8945C0                  mov dword ptr [ebp-40], eax
:004662A4 837DC008                cmp dword ptr [ebp-40], 00000008
:004662A8 0F87D9010000            ja 00466487
:004662AE 8B4DC0                  mov ecx, dword ptr [ebp-40]
:004662B1 FF248DA5644600          jmp dword ptr [4*ecx+004664A5]
:004662B8 8B55E8                  mov edx, dword ptr [ebp-18]
:004662BB 2B55FC                  sub edx, dword ptr [ebp-04]
:004662BE 8955EC                  mov dword ptr [ebp-14], edx
:004662C1 E9C8010000              jmp 0046648E
:004662C6 8B45E8                  mov eax, dword ptr [ebp-18]
:004662C9 50                      push eax
:004662CA 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004662CD 51                      push ecx
:004662CE E8F1FEFFFF              call 004661C4
:004662D3 83C408                  add esp, 00000008
:004662D6 8845D0                  mov byte ptr [ebp-30], al
:004662D9 8B55FC                  mov edx, dword ptr [ebp-04]
:004662DC 52                      push edx
:004662DD 8B45F8                  mov eax, dword ptr [ebp-08]
:004662E0 50                      push eax
:004662E1 E8DEFEFFFF              call 004661C4
:004662E6 83C408                  add esp, 00000008
:004662E9 8845CC                  mov byte ptr [ebp-34], al
:004662EC 8B4DD0                  mov ecx, dword ptr [ebp-30]
:004662EF 81E1FF000000            and ecx, 000000FF
:004662F5 8B55CC                  mov edx, dword ptr [ebp-34]
:004662F8 81E2FF000000            and edx, 000000FF
:004662FE 2BCA                    sub ecx, edx
:00466300 894DEC                  mov dword ptr [ebp-14], ecx
:00466303 E986010000              jmp 0046648E
:00466308 8B45F0                  mov eax, dword ptr [ebp-10]
:0046630B 2B45F8                  sub eax, dword ptr [ebp-08]
:0046630E 8945EC                  mov dword ptr [ebp-14], eax
:00466311 E978010000              jmp 0046648E
:00466316 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00466319 6BC922                  imul ecx, 00000022
:0046631C 81C1D0474900            add ecx, 004947D0
:00466322 E8399BFAFF              call 0040FE60
:00466327 8AD8                    mov bl, al
:00466329 81E3FF000000            and ebx, 000000FF
:0046632F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00466332 6BC922                  imul ecx, 00000022
:00466335 81C1D0474900            add ecx, 004947D0
:0046633B E8209BFAFF              call 0040FE60
:00466340 25FF000000              and eax, 000000FF
:00466345 2BD8                    sub ebx, eax
:00466347 895DEC                  mov dword ptr [ebp-14], ebx
:0046634A E93F010000              jmp 0046648E
:0046634F 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00466352 6BC922                  imul ecx, 00000022
:00466355 81C1D0474900            add ecx, 004947D0
:0046635B E800CFF9FF              call 00403260
:00466360 8AD8                    mov bl, al
:00466362 81E3FF000000            and ebx, 000000FF
:00466368 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046636B 6BC922                  imul ecx, 00000022
:0046636E 81C1D0474900            add ecx, 004947D0
:00466374 E8E7CEF9FF              call 00403260
:00466379 25FF000000              and eax, 000000FF
:0046637E 2BD8                    sub ebx, eax
:00466380 895DEC                  mov dword ptr [ebp-14], ebx
:00466383 E906010000              jmp 0046648E
:00466388 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046638B 51                      push ecx
:0046638C E8A0FDFFFF              call 00466131
:00466391 83C404                  add esp, 00000004
:00466394 8845C8                  mov byte ptr [ebp-38], al
:00466397 8B55FC                  mov edx, dword ptr [ebp-04]
:0046639A 52                      push edx
:0046639B E891FDFFFF              call 00466131
:004663A0 83C404                  add esp, 00000004
:004663A3 8845C4                  mov byte ptr [ebp-3C], al
:004663A6 8B45C8                  mov eax, dword ptr [ebp-38]
:004663A9 25FF000000              and eax, 000000FF
:004663AE 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:004663B1 81E1FF000000            and ecx, 000000FF
:004663B7 2BC1                    sub eax, ecx
:004663B9 8945EC                  mov dword ptr [ebp-14], eax
:004663BC E9CD000000              jmp 0046648E
:004663C1 6A00                    push 00000000
:004663C3 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004663C6 6BC922                  imul ecx, 00000022
:004663C9 81C1D0474900            add ecx, 004947D0
:004663CF E89C010000              call 00466570
:004663D4 25FFFF0000              and eax, 0000FFFF
:004663D9 8945DC                  mov dword ptr [ebp-24], eax
:004663DC 6A00                    push 00000000
:004663DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004663E1 6BC922                  imul ecx, 00000022
:004663E4 81C1D0474900            add ecx, 004947D0
:004663EA E881010000              call 00466570
:004663EF 25FFFF0000              and eax, 0000FFFF
:004663F4 8945D4                  mov dword ptr [ebp-2C], eax
:004663F7 8B55DC                  mov edx, dword ptr [ebp-24]
:004663FA 2B55D4                  sub edx, dword ptr [ebp-2C]
:004663FD 8955EC                  mov dword ptr [ebp-14], edx
:00466400 E989000000              jmp 0046648E
:00466405 6A01                    push 00000001
:00466407 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046640A 6BC922                  imul ecx, 00000022
:0046640D 81C1D0474900            add ecx, 004947D0
:00466413 E858010000              call 00466570
:00466418 25FFFF0000              and eax, 0000FFFF
:0046641D 8945DC                  mov dword ptr [ebp-24], eax
:00466420 6A01                    push 00000001
:00466422 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00466425 6BC922                  imul ecx, 00000022
:00466428 81C1D0474900            add ecx, 004947D0
:0046642E E83D010000              call 00466570
:00466433 25FFFF0000              and eax, 0000FFFF
:00466438 8945D4                  mov dword ptr [ebp-2C], eax
:0046643B 8B45DC                  mov eax, dword ptr [ebp-24]
:0046643E 2B45D4                  sub eax, dword ptr [ebp-2C]
:00466441 8945EC                  mov dword ptr [ebp-14], eax
:00466444 EB48                    jmp 0046648E

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00466446 6A02                    push 00000002
:00466448 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046644B 6BC922                  imul ecx, 00000022
:0046644E 81C1D0474900            add ecx, 004947D0
:00466454 E817010000              call 00466570
:00466459 25FFFF0000              and eax, 0000FFFF
:0046645E 8945DC                  mov dword ptr [ebp-24], eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00466461 6A02                    push 00000002
:00466463 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00466466 6BC922                  imul ecx, 00000022
:00466469 81C1D0474900            add ecx, 004947D0
:0046646F E8FC000000              call 00466570
:00466474 25FFFF0000              and eax, 0000FFFF
:00466479 8945D4                  mov dword ptr [ebp-2C], eax
:0046647C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046647F 2B4DD4                  sub ecx, dword ptr [ebp-2C]
:00466482 894DEC                  mov dword ptr [ebp-14], ecx
:00466485 EB07                    jmp 0046648E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004662A8(C)
|
:00466487 C745EC00000000          mov [ebp-14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004662C1(U), :00466303(U), :00466311(U), :0046634A(U), :00466383(U)
|:004663BC(U), :00466400(U), :00466444(U), :00466485(U)
|
:0046648E B96CB34800              mov ecx, 0048B36C
:00466493 E8F832FBFF              call 00419790
:00466498 8B55EC                  mov edx, dword ptr [ebp-14]
:0046649B 0FAFC2                  imul eax, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046622D(U)
|
:0046649E 5B                      pop ebx
:0046649F 8BE5                    mov esp, ebp
:004664A1 5D                      pop ebp
:004664A2 C20C00                  ret 000C



:004664A5 B8624600                DWORD 004662B8
:004664A9 C6624600                DWORD 004662C6
:004664AD 08634600                DWORD 00466308
:004664B1 16634600                DWORD 00466316
:004664B5 4F634600                DWORD 0046634F
:004664B9 88634600                DWORD 00466388
:004664BD C1634600                DWORD 004663C1
:004664C1 05644600                DWORD 00466405
:004664C5 46644600                DWORD 00466446



* Referenced by a CALL at Address:
|:0046584F   
|
:004664C9 55                      push ebp
:004664CA 8BEC                    mov ebp, esp
:004664CC 83EC38                  sub esp, 00000038
:004664CF 8B450C                  mov eax, dword ptr [ebp+0C]
:004664D2 8B08                    mov ecx, dword ptr [eax]
:004664D4 894DF8                  mov dword ptr [ebp-08], ecx
:004664D7 8B55F8                  mov edx, dword ptr [ebp-08]
:004664DA 52                      push edx
:004664DB E8E32BFBFF              call 004190C3
:004664E0 83C404                  add esp, 00000004
:004664E3 8945FC                  mov dword ptr [ebp-04], eax
:004664E6 837DFC00                cmp dword ptr [ebp-04], 00000000
:004664EA 7D02                    jge 004664EE
:004664EC EB7A                    jmp 00466568

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004664EA(C)
|
:004664EE 8B45FC                  mov eax, dword ptr [ebp-04]
:004664F1 8945D4                  mov dword ptr [ebp-2C], eax
:004664F4 C745D800000000          mov [ebp-28], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004664FB C745D004000000          mov [ebp-30], 00000004
:00466502 8D4DD0                  lea ecx, dword ptr [ebp-30]
:00466505 51                      push ecx
:00466506 6A00                    push 00000000
:00466508 6805100000              push 00001005
:0046650D 8B55F8                  mov edx, dword ptr [ebp-08]
:00466510 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00466511 FF1504D64B00            Call dword ptr [004BD604]
:00466517 8B45F0                  mov eax, dword ptr [ebp-10]
:0046651A 8945CC                  mov dword ptr [ebp-34], eax
:0046651D 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00466520 33D2                    xor edx, edx
:00466522 8A5101                  mov dl, byte ptr [ecx+01]
:00466525 85D2                    test edx, edx
:00466527 7C3F                    jl 00466568
:00466529 8B45CC                  mov eax, dword ptr [ebp-34]
:0046652C 33C9                    xor ecx, ecx
:0046652E 8A4801                  mov cl, byte ptr [eax+01]
:00466531 83F908                  cmp ecx, 00000008
:00466534 7F32                    jg 00466568
:00466536 8B55CC                  mov edx, dword ptr [ebp-34]
:00466539 8A4201                  mov al, byte ptr [edx+01]
:0046653C 50                      push eax
:0046653D 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00466540 33D2                    xor edx, edx
:00466542 8A11                    mov dl, byte ptr [ecx]
:00466544 8BCA                    mov ecx, edx
:00466546 6BC950                  imul ecx, 00000050
:00466549 81C1787F4900            add ecx, 00497F78
:0046654F E88CCCF9FF              call 004031E0
:00466554 25FF000000              and eax, 000000FF
:00466559 8945C8                  mov dword ptr [ebp-38], eax
:0046655C 8B45C8                  mov eax, dword ptr [ebp-38]
:0046655F 50                      push eax
:00466560 E890D9F9FF              call 00403EF5
:00466565 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004664EC(U), :00466527(C), :00466534(C)
|
:00466568 8BE5                    mov esp, ebp
:0046656A 5D                      pop ebp
:0046656B C3                      ret


:0046656C CC                      int 03
:0046656D CC                      int 03
:0046656E CC                      int 03
:0046656F CC                      int 03

* Referenced by a CALL at Addresses:
|:00461262   , :004616B7   , :004616D5   , :004616F3   , :004631C0   
|:004643B3   , :00465E83   , :00465ECF   , :00465F18   , :00465F8D   
|:00465FA8   , :00465FC3   , :004663CF   , :004663EA   , :00466413   
|:0046642E   , :00466454   , :0046646F   
|
:00466570 55                      push ebp
:00466571 8BEC                    mov ebp, esp
:00466573 51                      push ecx
:00466574 894DFC                  mov dword ptr [ebp-04], ecx
:00466577 8B4508                  mov eax, dword ptr [ebp+08]
:0046657A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046657D 668B44411C              mov ax, word ptr [ecx+2*eax+1C]
:00466582 8BE5                    mov esp, ebp
:00466584 5D                      pop ebp
:00466585 C20400                  ret 0004


:00466588 CC                      int 03
:00466589 CC                      int 03
:0046658A CC                      int 03
:0046658B CC                      int 03
:0046658C CC                      int 03
:0046658D CC                      int 03
:0046658E CC                      int 03
:0046658F CC                      int 03

* Referenced by a CALL at Addresses:
|:00461570   , :004632D2   , :004661ED   
|
:00466590 55                      push ebp
:00466591 8BEC                    mov ebp, esp
:00466593 51                      push ecx
:00466594 894DFC                  mov dword ptr [ebp-04], ecx
:00466597 8B45FC                  mov eax, dword ptr [ebp-04]
:0046659A 8A4015                  mov al, byte ptr [eax+15]
:0046659D 8BE5                    mov esp, ebp
:0046659F 5D                      pop ebp
:004665A0 C3                      ret


:004665A1 CC                      int 03
:004665A2 CC                      int 03
:004665A3 CC                      int 03
:004665A4 CC                      int 03
:004665A5 CC                      int 03
:004665A6 CC                      int 03
:004665A7 CC                      int 03
:004665A8 CC                      int 03
:004665A9 CC                      int 03
:004665AA CC                      int 03
:004665AB CC                      int 03
:004665AC CC                      int 03
:004665AD CC                      int 03
:004665AE CC                      int 03
:004665AF CC                      int 03

* Referenced by a CALL at Address:
|:00461464   
|
:004665B0 55                      push ebp
:004665B1 8BEC                    mov ebp, esp
:004665B3 51                      push ecx
:004665B4 894DFC                  mov dword ptr [ebp-04], ecx
:004665B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004665BA C600FF                  mov byte ptr [eax], FF
:004665BD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004665C0 C74104FFFF0000          mov [ecx+04], 0000FFFF
:004665C7 8B45FC                  mov eax, dword ptr [ebp-04]
:004665CA 8BE5                    mov esp, ebp
:004665CC 5D                      pop ebp
:004665CD C3                      ret


:004665CE CC                      int 03
:004665CF CC                      int 03

* Referenced by a CALL at Addresses:
|:004614B0   , :00462EA0   , :004642D4   
|
:004665D0 55                      push ebp
:004665D1 8BEC                    mov ebp, esp
:004665D3 51                      push ecx
:004665D4 894DFC                  mov dword ptr [ebp-04], ecx
:004665D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004665DA 33C9                    xor ecx, ecx
:004665DC 8A08                    mov cl, byte ptr [eax]
:004665DE 8BC1                    mov eax, ecx
:004665E0 8BE5                    mov esp, ebp
:004665E2 5D                      pop ebp
:004665E3 C3                      ret


:004665E4 CC                      int 03
:004665E5 CC                      int 03
:004665E6 CC                      int 03
:004665E7 CC                      int 03
:004665E8 CC                      int 03
:004665E9 CC                      int 03
:004665EA CC                      int 03
:004665EB CC                      int 03
:004665EC CC                      int 03
:004665ED CC                      int 03
:004665EE CC                      int 03
:004665EF CC                      int 03

* Referenced by a CALL at Addresses:
|:00420CBF   , :00420EB1   , :00427C4A   , :0042CBD3   , :00462621   
|:00462B0A   , :00462E84   
|
:004665F0 55                      push ebp
:004665F1 8BEC                    mov ebp, esp
:004665F3 51                      push ecx
:004665F4 894DFC                  mov dword ptr [ebp-04], ecx
:004665F7 8B45FC                  mov eax, dword ptr [ebp-04]
:004665FA 8A4D08                  mov cl, byte ptr [ebp+08]
:004665FD 8808                    mov byte ptr [eax], cl
:004665FF 8BE5                    mov esp, ebp
:00466601 5D                      pop ebp
:00466602 C20400                  ret 0004


:00466605 CC                      int 03
:00466606 CC                      int 03
:00466607 CC                      int 03
:00466608 CC                      int 03
:00466609 CC                      int 03
:0046660A CC                      int 03
:0046660B CC                      int 03
:0046660C CC                      int 03
:0046660D CC                      int 03
:0046660E CC                      int 03
:0046660F CC                      int 03
:00466610 55                      push ebp
:00466611 8BEC                    mov ebp, esp
:00466613 E807000000              call 0046661F
:00466618 E811000000              call 0046662E
:0046661D 5D                      pop ebp
:0046661E C3                      ret



* Referenced by a CALL at Address:
|:00466613   
|
:0046661F 55                      push ebp
:00466620 8BEC                    mov ebp, esp
:00466622 B9C0534B00              mov ecx, 004B53C0
:00466627 E8B41A0000              call 004680E0
:0046662C 5D                      pop ebp
:0046662D C3                      ret



* Referenced by a CALL at Address:
|:00466618   
|
:0046662E 55                      push ebp
:0046662F 8BEC                    mov ebp, esp
:00466631 6840664600              push 00466640
:00466636 E8758E0000              call 0046F4B0
:0046663B 83C404                  add esp, 00000004
:0046663E 5D                      pop ebp
:0046663F C3                      ret


:00466640 55                      push ebp
:00466641 8BEC                    mov ebp, esp
:00466643 B9C0534B00              mov ecx, 004B53C0
:00466648 E8B383FCFF              call 0042EA00
:0046664D 5D                      pop ebp
:0046664E C3                      ret


:0046664F 55                      push ebp
:00466650 8BEC                    mov ebp, esp
:00466652 E807000000              call 0046665E
:00466657 E811000000              call 0046666D
:0046665C 5D                      pop ebp
:0046665D C3                      ret



* Referenced by a CALL at Address:
|:00466652   
|
:0046665E 55                      push ebp
:0046665F 8BEC                    mov ebp, esp
:00466661 B950544B00              mov ecx, 004B5450
:00466666 E8951A0000              call 00468100
:0046666B 5D                      pop ebp
:0046666C C3                      ret



* Referenced by a CALL at Address:
|:00466657   
|
:0046666D 55                      push ebp
:0046666E 8BEC                    mov ebp, esp
:00466670 687F664600              push 0046667F
:00466675 E8368E0000              call 0046F4B0
:0046667A 83C404                  add esp, 00000004
:0046667D 5D                      pop ebp
:0046667E C3                      ret


:0046667F 55                      push ebp
:00466680 8BEC                    mov ebp, esp
:00466682 B950544B00              mov ecx, 004B5450
:00466687 E87483FCFF              call 0042EA00
:0046668C 5D                      pop ebp
:0046668D C3                      ret



* Referenced by a CALL at Address:
|:0046A549   
|
:0046668E 55                      push ebp
:0046668F 8BEC                    mov ebp, esp
:00466691 83EC14                  sub esp, 00000014
:00466694 8B4508                  mov eax, dword ptr [ebp+08]
:00466697 50                      push eax
:00466698 E8B2020000              call 0046694F
:0046669D 83C404                  add esp, 00000004
:004666A0 85C0                    test eax, eax
:004666A2 7507                    jne 004666AB
:004666A4 33C0                    xor eax, eax
:004666A6 E9A0020000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004666A2(C)
|
:004666AB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004666AE 51                      push ecx
:004666AF E804030000              call 004669B8
:004666B4 83C404                  add esp, 00000004
:004666B7 85C0                    test eax, eax
:004666B9 7507                    jne 004666C2
:004666BB 33C0                    xor eax, eax
:004666BD E989020000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004666B9(C)
|
:004666C2 8B5508                  mov edx, dword ptr [ebp+08]
:004666C5 52                      push edx
:004666C6 E856030000              call 00466A21
:004666CB 83C404                  add esp, 00000004
:004666CE 85C0                    test eax, eax
:004666D0 7507                    jne 004666D9
:004666D2 33C0                    xor eax, eax
:004666D4 E972020000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004666D0(C)
|
:004666D9 8B4508                  mov eax, dword ptr [ebp+08]
:004666DC 50                      push eax
:004666DD E8B3030000              call 00466A95
:004666E2 83C404                  add esp, 00000004
:004666E5 85C0                    test eax, eax
:004666E7 7507                    jne 004666F0
:004666E9 33C0                    xor eax, eax
:004666EB E95B020000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004666E7(C)
|
:004666F0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004666F3 51                      push ecx
:004666F4 E805040000              call 00466AFE
:004666F9 83C404                  add esp, 00000004
:004666FC 85C0                    test eax, eax
:004666FE 7507                    jne 00466707
:00466700 33C0                    xor eax, eax
:00466702 E944020000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004666FE(C)
|
:00466707 8B5508                  mov edx, dword ptr [ebp+08]
:0046670A 52                      push edx
:0046670B E857040000              call 00466B67
:00466710 83C404                  add esp, 00000004
:00466713 85C0                    test eax, eax
:00466715 7507                    jne 0046671E
:00466717 33C0                    xor eax, eax
:00466719 E92D020000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466715(C)
|
:0046671E 8B4508                  mov eax, dword ptr [ebp+08]
:00466721 50                      push eax
:00466722 E8A9040000              call 00466BD0
:00466727 83C404                  add esp, 00000004
:0046672A 85C0                    test eax, eax
:0046672C 7507                    jne 00466735
:0046672E 33C0                    xor eax, eax
:00466730 E916020000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046672C(C)
|
:00466735 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466738 51                      push ecx
:00466739 E8FB040000              call 00466C39
:0046673E 83C404                  add esp, 00000004
:00466741 85C0                    test eax, eax
:00466743 7507                    jne 0046674C
:00466745 33C0                    xor eax, eax
:00466747 E9FF010000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466743(C)
|
:0046674C 8B5508                  mov edx, dword ptr [ebp+08]
:0046674F 52                      push edx
:00466750 E844050000              call 00466C99
:00466755 83C404                  add esp, 00000004
:00466758 85C0                    test eax, eax
:0046675A 7507                    jne 00466763
:0046675C 33C0                    xor eax, eax
:0046675E E9E8010000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046675A(C)
|
:00466763 8B4508                  mov eax, dword ptr [ebp+08]
:00466766 50                      push eax
:00466767 E88D050000              call 00466CF9
:0046676C 83C404                  add esp, 00000004
:0046676F 85C0                    test eax, eax
:00466771 7507                    jne 0046677A
:00466773 33C0                    xor eax, eax
:00466775 E9D1010000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466771(C)
|
:0046677A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046677D 51                      push ecx
:0046677E E8DF050000              call 00466D62
:00466783 83C404                  add esp, 00000004
:00466786 85C0                    test eax, eax
:00466788 7507                    jne 00466791
:0046678A 33C0                    xor eax, eax
:0046678C E9BA010000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466788(C)
|
:00466791 8B5508                  mov edx, dword ptr [ebp+08]
:00466794 52                      push edx
:00466795 E831060000              call 00466DCB
:0046679A 83C404                  add esp, 00000004
:0046679D 85C0                    test eax, eax
:0046679F 7507                    jne 004667A8
:004667A1 33C0                    xor eax, eax
:004667A3 E9A3010000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046679F(C)
|
:004667A8 8B4508                  mov eax, dword ptr [ebp+08]
:004667AB 50                      push eax
:004667AC E883060000              call 00466E34
:004667B1 83C404                  add esp, 00000004
:004667B4 85C0                    test eax, eax
:004667B6 7507                    jne 004667BF
:004667B8 33C0                    xor eax, eax
:004667BA E98C010000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004667B6(C)
|
:004667BF 8B4D08                  mov ecx, dword ptr [ebp+08]
:004667C2 51                      push ecx
:004667C3 E8CC060000              call 00466E94
:004667C8 83C404                  add esp, 00000004
:004667CB 85C0                    test eax, eax
:004667CD 7507                    jne 004667D6
:004667CF 33C0                    xor eax, eax
:004667D1 E975010000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004667CD(C)
|
:004667D6 8B5508                  mov edx, dword ptr [ebp+08]
:004667D9 52                      push edx
:004667DA E815070000              call 00466EF4
:004667DF 83C404                  add esp, 00000004
:004667E2 85C0                    test eax, eax
:004667E4 7507                    jne 004667ED
:004667E6 33C0                    xor eax, eax
:004667E8 E95E010000              jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004667E4(C)
|
:004667ED C745F800000000          mov [ebp-08], 00000000
:004667F4 EB09                    jmp 004667FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466937(U)
|
:004667F6 8B45F8                  mov eax, dword ptr [ebp-08]
:004667F9 83C001                  add eax, 00000001
:004667FC 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004667F4(U)
|
:004667FF 837DF80F                cmp dword ptr [ebp-08], 0000000F
:00466803 0F8D33010000            jnl 0046693C
:00466809 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046680C C1E104                  shl ecx, 04
:0046680F 8B91F8AF4700            mov edx, dword ptr [ecx+0047AFF8]
:00466815 8955F0                  mov dword ptr [ebp-10], edx
:00466818 8B45F8                  mov eax, dword ptr [ebp-08]
:0046681B C1E004                  shl eax, 04
:0046681E 8B88FCAF4700            mov ecx, dword ptr [eax+0047AFFC]
:00466824 894DF4                  mov dword ptr [ebp-0C], ecx
:00466827 8D55F0                  lea edx, dword ptr [ebp-10]
:0046682A 52                      push edx
:0046682B A1B0554B00              mov eax, dword ptr [004B55B0]
:00466830 50                      push eax

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:00466831 FF15D0D64B00            Call dword ptr [004BD6D0]
:00466837 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046683A 030D941E4800            add ecx, dword ptr [00481E94]
:00466840 894DFC                  mov dword ptr [ebp-04], ecx
:00466843 8B55F4                  mov edx, dword ptr [ebp-0C]
:00466846 0315981E4800            add edx, dword ptr [00481E98]
:0046684C 8955EC                  mov dword ptr [ebp-14], edx
:0046684F 837DF802                cmp dword ptr [ebp-08], 00000002
:00466853 744C                    je 004668A1
:00466855 6A00                    push 00000000
:00466857 8B4508                  mov eax, dword ptr [ebp+08]
:0046685A 50                      push eax
:0046685B 6A00                    push 00000000
:0046685D 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00466863 51                      push ecx
:00466864 6800000080              push 80000000
:00466869 6800000080              push 80000000
:0046686E 8B55EC                  mov edx, dword ptr [ebp-14]
:00466871 52                      push edx
:00466872 33C0                    xor eax, eax
:00466874 2B05941E4800            sub eax, dword ptr [00481E94]
:0046687A 50                      push eax
:0046687B 6800000054              push 54000000
:00466880 6A00                    push 00000000
:00466882 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00466885 8B148DF01C4800          mov edx, dword ptr [4*ecx+00481CF0]
:0046688C 52                      push edx
:0046688D 6A00                    push 00000000

* Reference To: USER32.CreateWindowExA, Ord:0055h
                                  |
:0046688F FF150CD74B00            Call dword ptr [004BD70C]
:00466895 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00466898 89048D10544B00          mov dword ptr [4*ecx+004B5410], eax
:0046689F EB4C                    jmp 004668ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466853(C)
|
:004668A1 6A00                    push 00000000
:004668A3 8B5508                  mov edx, dword ptr [ebp+08]
:004668A6 52                      push edx
:004668A7 6A00                    push 00000000
:004668A9 A1B0554B00              mov eax, dword ptr [004B55B0]
:004668AE 50                      push eax
:004668AF 6800000080              push 80000000
:004668B4 6800000080              push 80000000
:004668B9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004668BC 51                      push ecx
:004668BD 33D2                    xor edx, edx
:004668BF 2B15941E4800            sub edx, dword ptr [00481E94]
:004668C5 52                      push edx
:004668C6 680000C880              push 80C80000

* Possible StringData Ref from Data Obj ->"ԳYp"
                                  |
:004668CB 68301D4800              push 00481D30
:004668D0 8B45F8                  mov eax, dword ptr [ebp-08]
:004668D3 8B0C85F01C4800          mov ecx, dword ptr [4*eax+00481CF0]
:004668DA 51                      push ecx
:004668DB 6A00                    push 00000000

* Reference To: USER32.CreateWindowExA, Ord:0055h
                                  |
:004668DD FF150CD74B00            Call dword ptr [004BD70C]
:004668E3 8B55F8                  mov edx, dword ptr [ebp-08]
:004668E6 89049510544B00          mov dword ptr [4*edx+004B5410], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046689F(U)
|
:004668ED 8B45F8                  mov eax, dword ptr [ebp-08]
:004668F0 833C8510544B0000        cmp dword ptr [4*eax+004B5410], 00000000
:004668F8 750E                    jne 00466908
:004668FA 6A00                    push 00000000
:004668FC E80EED0000              call 0047560F
:00466901 83C404                  add esp, 00000004
:00466904 33C0                    xor eax, eax
:00466906 EB43                    jmp 0046694B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004668F8(C)
|
:00466908 6A00                    push 00000000
:0046690A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046690D C1E104                  shl ecx, 04
:00466910 8B9104B04700            mov edx, dword ptr [ecx+0047B004]
:00466916 52                      push edx
:00466917 8B45F8                  mov eax, dword ptr [ebp-08]
:0046691A C1E004                  shl eax, 04
:0046691D 8B8800B04700            mov ecx, dword ptr [eax+0047B000]
:00466923 51                      push ecx
:00466924 8B55F8                  mov edx, dword ptr [ebp-08]
:00466927 8B049510544B00          mov eax, dword ptr [4*edx+004B5410]
:0046692E 50                      push eax
:0046692F E880EC0000              call 004755B4
:00466934 83C410                  add esp, 00000010
:00466937 E9BAFEFFFF              jmp 004667F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466803(C)
|
:0046693C 6A00                    push 00000000
:0046693E E8CCEC0000              call 0047560F
:00466943 83C404                  add esp, 00000004
:00466946 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004666A6(U), :004666BD(U), :004666D4(U), :004666EB(U), :00466702(U)
|:00466719(U), :00466730(U), :00466747(U), :0046675E(U), :00466775(U)
|:0046678C(U), :004667A3(U), :004667BA(U), :004667D1(U), :004667E8(U)
|:00466906(U)
|
:0046694B 8BE5                    mov esp, ebp
:0046694D 5D                      pop ebp
:0046694E C3                      ret



* Referenced by a CALL at Address:
|:00466698   
|
:0046694F 55                      push ebp
:00466950 8BEC                    mov ebp, esp
:00466952 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00466955 C745D803000000          mov [ebp-28], 00000003
:0046695C C745DC546F4600          mov [ebp-24], 00466F54
:00466963 C745E000000000          mov [ebp-20], 00000000
:0046696A C745E400000000          mov [ebp-1C], 00000000
:00466971 8B4508                  mov eax, dword ptr [ebp+08]
:00466974 8945E8                  mov dword ptr [ebp-18], eax
:00466977 C745EC00000000          mov [ebp-14], 00000000
:0046697E 68007F0000              push 00007F00
:00466983 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00466985 FF15C8D54B00            Call dword ptr [004BD5C8]
:0046698B 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:0046698E C745F406000000          mov [ebp-0C], 00000006
:00466995 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"SoldierFace"
                                  |
:0046699C 8B0DF01C4800            mov ecx, dword ptr [00481CF0]
:004669A2 894DFC                  mov dword ptr [ebp-04], ecx
:004669A5 8D55D8                  lea edx, dword ptr [ebp-28]
:004669A8 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:004669A9 FF1510D74B00            Call dword ptr [004BD710]
:004669AF 25FFFF0000              and eax, 0000FFFF
:004669B4 8BE5                    mov esp, ebp
:004669B6 5D                      pop ebp
:004669B7 C3                      ret



* Referenced by a CALL at Address:
|:004666AF   
|
:004669B8 55                      push ebp
:004669B9 8BEC                    mov ebp, esp
:004669BB 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004669BE C745D803000000          mov [ebp-28], 00000003

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:004669C5 C745DC9F6F4600          mov [ebp-24], 00466F9F
:004669CC C745E000000000          mov [ebp-20], 00000000
:004669D3 C745E400000000          mov [ebp-1C], 00000000
:004669DA 8B4508                  mov eax, dword ptr [ebp+08]
:004669DD 8945E8                  mov dword ptr [ebp-18], eax
:004669E0 C745EC00000000          mov [ebp-14], 00000000
:004669E7 68007F0000              push 00007F00
:004669EC 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:004669EE FF15C8D54B00            Call dword ptr [004BD5C8]
:004669F4 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:004669F7 C745F406000000          mov [ebp-0C], 00000006
:004669FE C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"SoldierChar"
                                  |
:00466A05 8B0DF41C4800            mov ecx, dword ptr [00481CF4]
:00466A0B 894DFC                  mov dword ptr [ebp-04], ecx
:00466A0E 8D55D8                  lea edx, dword ptr [ebp-28]
:00466A11 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466A12 FF1510D74B00            Call dword ptr [004BD710]
:00466A18 25FFFF0000              and eax, 0000FFFF
:00466A1D 8BE5                    mov esp, ebp
:00466A1F 5D                      pop ebp
:00466A20 C3                      ret



* Referenced by a CALL at Address:
|:004666C6   
|
:00466A21 55                      push ebp
:00466A22 8BEC                    mov ebp, esp
:00466A24 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00466A27 C745D803000000          mov [ebp-28], 00000003

* Possible StringData Ref from Code Obj ->"UEE}w}tT}tk9"
                                  |
:00466A2E C745DCEA6F4600          mov [ebp-24], 00466FEA
:00466A35 C745E000000000          mov [ebp-20], 00000000
:00466A3C C745E400000000          mov [ebp-1C], 00000000
:00466A43 8B4508                  mov eax, dword ptr [ebp+08]
:00466A46 8945E8                  mov dword ptr [ebp-18], eax
:00466A49 6889000000              push 00000089
:00466A4E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466A51 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:00466A52 FF15E4D64B00            Call dword ptr [004BD6E4]
:00466A58 8945EC                  mov dword ptr [ebp-14], eax
:00466A5B 68007F0000              push 00007F00
:00466A60 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00466A62 FF15C8D54B00            Call dword ptr [004BD5C8]
:00466A68 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466A6B C745F406000000          mov [ebp-0C], 00000006

* Possible StringData Ref from Data Obj ->"SMAPMENU"
                                  |
:00466A72 C745F8E81D4800          mov [ebp-08], 00481DE8

* Possible StringData Ref from Data Obj ->"SmallMap"
                                  |
:00466A79 8B15F81C4800            mov edx, dword ptr [00481CF8]
:00466A7F 8955FC                  mov dword ptr [ebp-04], edx
:00466A82 8D45D8                  lea eax, dword ptr [ebp-28]
:00466A85 50                      push eax

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466A86 FF1510D74B00            Call dword ptr [004BD710]
:00466A8C 25FFFF0000              and eax, 0000FFFF
:00466A91 8BE5                    mov esp, ebp
:00466A93 5D                      pop ebp
:00466A94 C3                      ret



* Referenced by a CALL at Address:
|:004666DD   
|
:00466A95 55                      push ebp
:00466A96 8BEC                    mov ebp, esp
:00466A98 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00466A9B C745D803000000          mov [ebp-28], 00000003

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00466AA2 C745DC64714600          mov [ebp-24], 00467164
:00466AA9 C745E000000000          mov [ebp-20], 00000000
:00466AB0 C745E400000000          mov [ebp-1C], 00000000
:00466AB7 8B4508                  mov eax, dword ptr [ebp+08]
:00466ABA 8945E8                  mov dword ptr [ebp-18], eax
:00466ABD C745EC00000000          mov [ebp-14], 00000000
:00466AC4 68007F0000              push 00007F00
:00466AC9 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00466ACB FF15C8D54B00            Call dword ptr [004BD5C8]
:00466AD1 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466AD4 C745F406000000          mov [ebp-0C], 00000006
:00466ADB C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"Weather"
                                  |
:00466AE2 8B0DFC1C4800            mov ecx, dword ptr [00481CFC]
:00466AE8 894DFC                  mov dword ptr [ebp-04], ecx
:00466AEB 8D55D8                  lea edx, dword ptr [ebp-28]
:00466AEE 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466AEF FF1510D74B00            Call dword ptr [004BD710]
:00466AF5 25FFFF0000              and eax, 0000FFFF
:00466AFA 8BE5                    mov esp, ebp
:00466AFC 5D                      pop ebp
:00466AFD C3                      ret



* Referenced by a CALL at Address:
|:004666F4   
|
:00466AFE 55                      push ebp
:00466AFF 8BEC                    mov ebp, esp
:00466B01 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00466B04 C745D803000000          mov [ebp-28], 00000003

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00466B0B C745DCAF714600          mov [ebp-24], 004671AF
:00466B12 C745E000000000          mov [ebp-20], 00000000
:00466B19 C745E400000000          mov [ebp-1C], 00000000
:00466B20 8B4508                  mov eax, dword ptr [ebp+08]
:00466B23 8945E8                  mov dword ptr [ebp-18], eax
:00466B26 C745EC00000000          mov [ebp-14], 00000000
:00466B2D 68007F0000              push 00007F00
:00466B32 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00466B34 FF15C8D54B00            Call dword ptr [004BD5C8]
:00466B3A 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466B3D C745F406000000          mov [ebp-0C], 00000006
:00466B44 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"Effect"
                                  |
:00466B4B 8B0D001D4800            mov ecx, dword ptr [00481D00]
:00466B51 894DFC                  mov dword ptr [ebp-04], ecx
:00466B54 8D55D8                  lea edx, dword ptr [ebp-28]
:00466B57 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466B58 FF1510D74B00            Call dword ptr [004BD710]
:00466B5E 25FFFF0000              and eax, 0000FFFF
:00466B63 8BE5                    mov esp, ebp
:00466B65 5D                      pop ebp
:00466B66 C3                      ret



* Referenced by a CALL at Address:
|:0046670B   
|
:00466B67 55                      push ebp
:00466B68 8BEC                    mov ebp, esp
:00466B6A 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00466B6D C745D803000000          mov [ebp-28], 00000003

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00466B74 C745DCFA714600          mov [ebp-24], 004671FA
:00466B7B C745E000000000          mov [ebp-20], 00000000
:00466B82 C745E400000000          mov [ebp-1C], 00000000
:00466B89 8B4508                  mov eax, dword ptr [ebp+08]
:00466B8C 8945E8                  mov dword ptr [ebp-18], eax
:00466B8F C745EC00000000          mov [ebp-14], 00000000
:00466B96 68007F0000              push 00007F00
:00466B9B 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00466B9D FF15C8D54B00            Call dword ptr [004BD5C8]
:00466BA3 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466BA6 C745F406000000          mov [ebp-0C], 00000006
:00466BAD C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"Influence"
                                  |
:00466BB4 8B0D041D4800            mov ecx, dword ptr [00481D04]
:00466BBA 894DFC                  mov dword ptr [ebp-04], ecx
:00466BBD 8D55D8                  lea edx, dword ptr [ebp-28]
:00466BC0 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466BC1 FF1510D74B00            Call dword ptr [004BD710]
:00466BC7 25FFFF0000              and eax, 0000FFFF
:00466BCC 8BE5                    mov esp, ebp
:00466BCE 5D                      pop ebp
:00466BCF C3                      ret



* Referenced by a CALL at Address:
|:00466722   
|
:00466BD0 55                      push ebp
:00466BD1 8BEC                    mov ebp, esp
:00466BD3 83EC28                  sub esp, 00000028
:00466BD6 C745D80B000000          mov [ebp-28], 0000000B
:00466BDD C745DCD4A64500          mov [ebp-24], 0045A6D4
:00466BE4 C745E000000000          mov [ebp-20], 00000000
:00466BEB C745E400000000          mov [ebp-1C], 00000000
:00466BF2 8B4508                  mov eax, dword ptr [ebp+08]
:00466BF5 8945E8                  mov dword ptr [ebp-18], eax
:00466BF8 C745EC00000000          mov [ebp-14], 00000000
:00466BFF 68007F0000              push 00007F00
:00466C04 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00466C06 FF15C8D54B00            Call dword ptr [004BD5C8]
:00466C0C 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466C0F C745F406000000          mov [ebp-0C], 00000006
:00466C16 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"ButaiSlct"
                                  |
:00466C1D 8B0D081D4800            mov ecx, dword ptr [00481D08]
:00466C23 894DFC                  mov dword ptr [ebp-04], ecx
:00466C26 8D55D8                  lea edx, dword ptr [ebp-28]
:00466C29 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466C2A FF1510D74B00            Call dword ptr [004BD710]
:00466C30 25FFFF0000              and eax, 0000FFFF
:00466C35 8BE5                    mov esp, ebp
:00466C37 5D                      pop ebp
:00466C38 C3                      ret



* Referenced by a CALL at Address:
|:00466739   
|
:00466C39 55                      push ebp
:00466C3A 8BEC                    mov ebp, esp
:00466C3C 83EC28                  sub esp, 00000028
:00466C3F C745D80B000000          mov [ebp-28], 0000000B

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00466C46 C745DC45724600          mov [ebp-24], 00467245
:00466C4D C745E000000000          mov [ebp-20], 00000000
:00466C54 C745E400000000          mov [ebp-1C], 00000000
:00466C5B 8B4508                  mov eax, dword ptr [ebp+08]
:00466C5E 8945E8                  mov dword ptr [ebp-18], eax
:00466C61 C745EC00000000          mov [ebp-14], 00000000
:00466C68 C745F000000000          mov [ebp-10], 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466C6F C745F406000000          mov [ebp-0C], 00000006
:00466C76 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"NamePut"
                                  |
:00466C7D 8B0D0C1D4800            mov ecx, dword ptr [00481D0C]
:00466C83 894DFC                  mov dword ptr [ebp-04], ecx
:00466C86 8D55D8                  lea edx, dword ptr [ebp-28]
:00466C89 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466C8A FF1510D74B00            Call dword ptr [004BD710]
:00466C90 25FFFF0000              and eax, 0000FFFF
:00466C95 8BE5                    mov esp, ebp
:00466C97 5D                      pop ebp
:00466C98 C3                      ret



* Referenced by a CALL at Address:
|:00466750   
|
:00466C99 55                      push ebp
:00466C9A 8BEC                    mov ebp, esp
:00466C9C 83EC28                  sub esp, 00000028
:00466C9F C745D80B000000          mov [ebp-28], 0000000B

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00466CA6 C745DC90724600          mov [ebp-24], 00467290
:00466CAD C745E000000000          mov [ebp-20], 00000000
:00466CB4 C745E400000000          mov [ebp-1C], 00000000
:00466CBB 8B4508                  mov eax, dword ptr [ebp+08]
:00466CBE 8945E8                  mov dword ptr [ebp-18], eax
:00466CC1 C745EC00000000          mov [ebp-14], 00000000
:00466CC8 C745F000000000          mov [ebp-10], 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466CCF C745F406000000          mov [ebp-0C], 00000006
:00466CD6 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"Practice"
                                  |
:00466CDD 8B0D101D4800            mov ecx, dword ptr [00481D10]
:00466CE3 894DFC                  mov dword ptr [ebp-04], ecx
:00466CE6 8D55D8                  lea edx, dword ptr [ebp-28]
:00466CE9 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466CEA FF1510D74B00            Call dword ptr [004BD710]
:00466CF0 25FFFF0000              and eax, 0000FFFF
:00466CF5 8BE5                    mov esp, ebp
:00466CF7 5D                      pop ebp
:00466CF8 C3                      ret



* Referenced by a CALL at Address:
|:00466767   
|
:00466CF9 55                      push ebp
:00466CFA 8BEC                    mov ebp, esp
:00466CFC 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00466CFF C745D803000000          mov [ebp-28], 00000003

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00466D06 C745DCDB724600          mov [ebp-24], 004672DB
:00466D0D C745E000000000          mov [ebp-20], 00000000
:00466D14 C745E400000000          mov [ebp-1C], 00000000
:00466D1B 8B4508                  mov eax, dword ptr [ebp+08]
:00466D1E 8945E8                  mov dword ptr [ebp-18], eax
:00466D21 C745EC00000000          mov [ebp-14], 00000000
:00466D28 68007F0000              push 00007F00
:00466D2D 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00466D2F FF15C8D54B00            Call dword ptr [004BD5C8]
:00466D35 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466D38 C745F406000000          mov [ebp-0C], 00000006
:00466D3F C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"MgcEffect"
                                  |
:00466D46 8B0D141D4800            mov ecx, dword ptr [00481D14]
:00466D4C 894DFC                  mov dword ptr [ebp-04], ecx
:00466D4F 8D55D8                  lea edx, dword ptr [ebp-28]
:00466D52 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466D53 FF1510D74B00            Call dword ptr [004BD710]
:00466D59 25FFFF0000              and eax, 0000FFFF
:00466D5E 8BE5                    mov esp, ebp
:00466D60 5D                      pop ebp
:00466D61 C3                      ret



* Referenced by a CALL at Address:
|:0046677E   
|
:00466D62 55                      push ebp
:00466D63 8BEC                    mov ebp, esp
:00466D65 83EC28                  sub esp, 00000028

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00466D68 C745D803000000          mov [ebp-28], 00000003

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00466D6F C745DC26734600          mov [ebp-24], 00467326
:00466D76 C745E000000000          mov [ebp-20], 00000000
:00466D7D C745E400000000          mov [ebp-1C], 00000000
:00466D84 8B4508                  mov eax, dword ptr [ebp+08]
:00466D87 8945E8                  mov dword ptr [ebp-18], eax
:00466D8A C745EC00000000          mov [ebp-14], 00000000
:00466D91 68007F0000              push 00007F00
:00466D96 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00466D98 FF15C8D54B00            Call dword ptr [004BD5C8]
:00466D9E 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466DA1 C745F406000000          mov [ebp-0C], 00000006
:00466DA8 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"MgcInfluence"
                                  |
:00466DAF 8B0D181D4800            mov ecx, dword ptr [00481D18]
:00466DB5 894DFC                  mov dword ptr [ebp-04], ecx
:00466DB8 8D55D8                  lea edx, dword ptr [ebp-28]
:00466DBB 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466DBC FF1510D74B00            Call dword ptr [004BD710]
:00466DC2 25FFFF0000              and eax, 0000FFFF
:00466DC7 8BE5                    mov esp, ebp
:00466DC9 5D                      pop ebp
:00466DCA C3                      ret



* Referenced by a CALL at Address:
|:00466795   
|
:00466DCB 55                      push ebp
:00466DCC 8BEC                    mov ebp, esp
:00466DCE 83EC28                  sub esp, 00000028
:00466DD1 C745D80B000000          mov [ebp-28], 0000000B
:00466DD8 C745DCC9A84500          mov [ebp-24], 0045A8C9
:00466DDF C745E000000000          mov [ebp-20], 00000000
:00466DE6 C745E400000000          mov [ebp-1C], 00000000
:00466DED 8B4508                  mov eax, dword ptr [ebp+08]
:00466DF0 8945E8                  mov dword ptr [ebp-18], eax
:00466DF3 C745EC00000000          mov [ebp-14], 00000000
:00466DFA 68007F0000              push 00007F00
:00466DFF 6A00                    push 00000000

* Reference To: USER32.LoadCursorA, Ord:0172h
                                  |
:00466E01 FF15C8D54B00            Call dword ptr [004BD5C8]
:00466E07 8945F0                  mov dword ptr [ebp-10], eax

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466E0A C745F406000000          mov [ebp-0C], 00000006
:00466E11 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"HButaiSlct"
                                  |
:00466E18 8B0D1C1D4800            mov ecx, dword ptr [00481D1C]
:00466E1E 894DFC                  mov dword ptr [ebp-04], ecx
:00466E21 8D55D8                  lea edx, dword ptr [ebp-28]
:00466E24 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466E25 FF1510D74B00            Call dword ptr [004BD710]
:00466E2B 25FFFF0000              and eax, 0000FFFF
:00466E30 8BE5                    mov esp, ebp
:00466E32 5D                      pop ebp
:00466E33 C3                      ret



* Referenced by a CALL at Address:
|:004667AC   
|
:00466E34 55                      push ebp
:00466E35 8BEC                    mov ebp, esp
:00466E37 83EC28                  sub esp, 00000028
:00466E3A C745D80B000000          mov [ebp-28], 0000000B

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00466E41 C745DC71734600          mov [ebp-24], 00467371
:00466E48 C745E000000000          mov [ebp-20], 00000000
:00466E4F C745E400000000          mov [ebp-1C], 00000000
:00466E56 8B4508                  mov eax, dword ptr [ebp+08]
:00466E59 8945E8                  mov dword ptr [ebp-18], eax
:00466E5C C745EC00000000          mov [ebp-14], 00000000
:00466E63 C745F000000000          mov [ebp-10], 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466E6A C745F406000000          mov [ebp-0C], 00000006
:00466E71 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"PracMesBox"
                                  |
:00466E78 8B0D201D4800            mov ecx, dword ptr [00481D20]
:00466E7E 894DFC                  mov dword ptr [ebp-04], ecx
:00466E81 8D55D8                  lea edx, dword ptr [ebp-28]
:00466E84 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466E85 FF1510D74B00            Call dword ptr [004BD710]
:00466E8B 25FFFF0000              and eax, 0000FFFF
:00466E90 8BE5                    mov esp, ebp
:00466E92 5D                      pop ebp
:00466E93 C3                      ret



* Referenced by a CALL at Address:
|:004667C3   
|
:00466E94 55                      push ebp
:00466E95 8BEC                    mov ebp, esp
:00466E97 83EC28                  sub esp, 00000028
:00466E9A C745D80B000000          mov [ebp-28], 0000000B

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00466EA1 C745DCBC734600          mov [ebp-24], 004673BC
:00466EA8 C745E000000000          mov [ebp-20], 00000000
:00466EAF C745E400000000          mov [ebp-1C], 00000000
:00466EB6 8B4508                  mov eax, dword ptr [ebp+08]
:00466EB9 8945E8                  mov dword ptr [ebp-18], eax
:00466EBC C745EC00000000          mov [ebp-14], 00000000
:00466EC3 C745F000000000          mov [ebp-10], 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466ECA C745F406000000          mov [ebp-0C], 00000006
:00466ED1 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"TokugiEff"
                                  |
:00466ED8 8B0D241D4800            mov ecx, dword ptr [00481D24]
:00466EDE 894DFC                  mov dword ptr [ebp-04], ecx
:00466EE1 8D55D8                  lea edx, dword ptr [ebp-28]
:00466EE4 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466EE5 FF1510D74B00            Call dword ptr [004BD710]
:00466EEB 25FFFF0000              and eax, 0000FFFF
:00466EF0 8BE5                    mov esp, ebp
:00466EF2 5D                      pop ebp
:00466EF3 C3                      ret



* Referenced by a CALL at Address:
|:004667DA   
|
:00466EF4 55                      push ebp
:00466EF5 8BEC                    mov ebp, esp
:00466EF7 83EC28                  sub esp, 00000028
:00466EFA C745D80B000000          mov [ebp-28], 0000000B

* Possible StringData Ref from Code Obj ->"UQEE}"
                                  |
:00466F01 C745DC07744600          mov [ebp-24], 00467407
:00466F08 C745E000000000          mov [ebp-20], 00000000
:00466F0F C745E400000000          mov [ebp-1C], 00000000
:00466F16 8B4508                  mov eax, dword ptr [ebp+08]
:00466F19 8945E8                  mov dword ptr [ebp-18], eax
:00466F1C C745EC00000000          mov [ebp-14], 00000000
:00466F23 C745F000000000          mov [ebp-10], 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:00466F2A C745F406000000          mov [ebp-0C], 00000006
:00466F31 C745F800000000          mov [ebp-08], 00000000

* Possible StringData Ref from Data Obj ->"TokugiInf"
                                  |
:00466F38 8B0D281D4800            mov ecx, dword ptr [00481D28]
:00466F3E 894DFC                  mov dword ptr [ebp-04], ecx
:00466F41 8D55D8                  lea edx, dword ptr [ebp-28]
:00466F44 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:00466F45 FF1510D74B00            Call dword ptr [004BD710]
:00466F4B 25FFFF0000              and eax, 0000FFFF
:00466F50 8BE5                    mov esp, ebp
:00466F52 5D                      pop ebp
:00466F53 C3                      ret


:00466F54 55                      push ebp
:00466F55 8BEC                    mov ebp, esp
:00466F57 51                      push ecx
:00466F58 8B450C                  mov eax, dword ptr [ebp+0C]
:00466F5B 8945FC                  mov dword ptr [ebp-04], eax
:00466F5E 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00466F65 7402                    je 00466F69
:00466F67 EB18                    jmp 00466F81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466F65(C)
|
:00466F69 8B4D14                  mov ecx, dword ptr [ebp+14]
:00466F6C 51                      push ecx
:00466F6D 8B5510                  mov edx, dword ptr [ebp+10]
:00466F70 52                      push edx
:00466F71 8B450C                  mov eax, dword ptr [ebp+0C]
:00466F74 50                      push eax
:00466F75 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466F78 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:00466F79 FF155CD64B00            Call dword ptr [004BD65C]
:00466F7F EB18                    jmp 00466F99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466F67(U)
|
:00466F81 8B5514                  mov edx, dword ptr [ebp+14]
:00466F84 52                      push edx
:00466F85 8B4510                  mov eax, dword ptr [ebp+10]
:00466F88 50                      push eax
:00466F89 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00466F8C 51                      push ecx
:00466F8D 8B5508                  mov edx, dword ptr [ebp+08]
:00466F90 52                      push edx
:00466F91 E85B090100              call 004778F1
:00466F96 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466F7F(U)
|
:00466F99 8BE5                    mov esp, ebp
:00466F9B 5D                      pop ebp
:00466F9C C21000                  ret 0010


:00466F9F 55                      push ebp
:00466FA0 8BEC                    mov ebp, esp
:00466FA2 51                      push ecx
:00466FA3 8B450C                  mov eax, dword ptr [ebp+0C]
:00466FA6 8945FC                  mov dword ptr [ebp-04], eax
:00466FA9 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00466FB0 7402                    je 00466FB4
:00466FB2 EB18                    jmp 00466FCC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466FB0(C)
|
:00466FB4 8B4D14                  mov ecx, dword ptr [ebp+14]
:00466FB7 51                      push ecx
:00466FB8 8B5510                  mov edx, dword ptr [ebp+10]
:00466FBB 52                      push edx
:00466FBC 8B450C                  mov eax, dword ptr [ebp+0C]
:00466FBF 50                      push eax
:00466FC0 8B4D08                  mov ecx, dword ptr [ebp+08]
:00466FC3 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:00466FC4 FF155CD64B00            Call dword ptr [004BD65C]
:00466FCA EB18                    jmp 00466FE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466FB2(U)
|
:00466FCC 8B5514                  mov edx, dword ptr [ebp+14]
:00466FCF 52                      push edx
:00466FD0 8B4510                  mov eax, dword ptr [ebp+10]
:00466FD3 50                      push eax
:00466FD4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00466FD7 51                      push ecx
:00466FD8 8B5508                  mov edx, dword ptr [ebp+08]
:00466FDB 52                      push edx
:00466FDC E810090100              call 004778F1
:00466FE1 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466FCA(U)
|
:00466FE4 8BE5                    mov esp, ebp
:00466FE6 5D                      pop ebp
:00466FE7 C21000                  ret 0010


:00466FEA 55                      push ebp
:00466FEB 8BEC                    mov ebp, esp
:00466FED 83EC08                  sub esp, 00000008
:00466FF0 8B450C                  mov eax, dword ptr [ebp+0C]
:00466FF3 8945FC                  mov dword ptr [ebp-04], eax
:00466FF6 837DFC06                cmp dword ptr [ebp-04], 00000006
:00466FFA 7711                    ja 0046700D
:00466FFC 837DFC06                cmp dword ptr [ebp-04], 00000006
:00467000 7454                    je 00467056
:00467002 837DFC02                cmp dword ptr [ebp-04], 00000002
:00467006 746B                    je 00467073
:00467008 E939010000              jmp 00467146

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00466FFA(C)
|
:0046700D 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00467014 7714                    ja 0046702A
:00467016 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0046701D 7467                    je 00467086
:0046701F 837DFC10                cmp dword ptr [ebp-04], 00000010
:00467023 744E                    je 00467073
:00467025 E91C010000              jmp 00467146

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467014(C)
|
:0046702A 817DFC00020000          cmp dword ptr [ebp-04], 00000200
:00467031 0F849F000000            je 004670D6
:00467037 817DFC01020000          cmp dword ptr [ebp-04], 00000201
:0046703E 0F84BE000000            je 00467102
:00467044 817DFC02020000          cmp dword ptr [ebp-04], 00000202
:0046704B 0F84E1000000            je 00467132
:00467051 E9F0000000              jmp 00467146

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467000(C)
|
:00467056 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467059 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046705A FF1558D64B00            Call dword ptr [004BD658]
:00467060 85C0                    test eax, eax
:00467062 740A                    je 0046706E
:00467064 8B5508                  mov edx, dword ptr [ebp+08]
:00467067 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00467068 FF15FCD54B00            Call dword ptr [004BD5FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467062(C)
|
:0046706E E9D3000000              jmp 00467146

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467006(C), :00467023(C)
|
:00467073 6A00                    push 00000000
:00467075 8B4508                  mov eax, dword ptr [ebp+08]
:00467078 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00467079 FF1500D74B00            Call dword ptr [004BD700]
:0046707F 33C0                    xor eax, eax
:00467081 E9D8000000              jmp 0046715E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046701D(C)
|
:00467086 8B4D10                  mov ecx, dword ptr [ebp+10]
:00467089 894DF8                  mov dword ptr [ebp-08], ecx
:0046708C 817DF8BD9C0000          cmp dword ptr [ebp-08], 00009CBD
:00467093 740B                    je 004670A0
:00467095 817DF8BE9C0000          cmp dword ptr [ebp-08], 00009CBE
:0046709C 7410                    je 004670AE
:0046709E EB1B                    jmp 004670BB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467093(C)
|
:004670A0 6A00                    push 00000000
:004670A2 8B5508                  mov edx, dword ptr [ebp+08]
:004670A5 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004670A6 FF1500D74B00            Call dword ptr [004BD700]
:004670AC EB0D                    jmp 004670BB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046709C(C)
|
:004670AE 688E080000              push 0000088E
:004670B3 E8132A0000              call 00469ACB
:004670B8 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046709E(U), :004670AC(U)
|
:004670BB 8B4514                  mov eax, dword ptr [ebp+14]
:004670BE 50                      push eax
:004670BF 8B4D10                  mov ecx, dword ptr [ebp+10]
:004670C2 51                      push ecx
:004670C3 8B550C                  mov edx, dword ptr [ebp+0C]
:004670C6 52                      push edx
:004670C7 8B4508                  mov eax, dword ptr [ebp+08]
:004670CA 50                      push eax

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:004670CB FF155CD64B00            Call dword ptr [004BD65C]
:004670D1 E988000000              jmp 0046715E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467031(C)
|
:004670D6 8B4D10                  mov ecx, dword ptr [ebp+10]
:004670D9 83E101                  and ecx, 00000001
:004670DC 85C9                    test ecx, ecx
:004670DE 7420                    je 00467100
:004670E0 B9C0534B00              mov ecx, 004B53C0
:004670E5 E8966DFCFF              call 0042DE80
:004670EA 85C0                    test eax, eax
:004670EC 7412                    je 00467100
:004670EE 8B5514                  mov edx, dword ptr [ebp+14]
:004670F1 52                      push edx
:004670F2 8B4508                  mov eax, dword ptr [ebp+08]
:004670F5 50                      push eax
:004670F6 B9C0534B00              mov ecx, 004B53C0
:004670FB E87A0A0000              call 00467B7A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004670DE(C), :004670EC(C)
|
:00467100 EB44                    jmp 00467146

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046703E(C)
|
:00467102 B9784E4B00              mov ecx, 004B4E78
:00467107 E8C479FEFF              call 0044EAD0
:0046710C 85C0                    test eax, eax
:0046710E 7420                    je 00467130
:00467110 B9C0534B00              mov ecx, 004B53C0
:00467115 E8666DFCFF              call 0042DE80
:0046711A 85C0                    test eax, eax
:0046711C 7412                    je 00467130
:0046711E 8B4D14                  mov ecx, dword ptr [ebp+14]
:00467121 51                      push ecx
:00467122 8B5508                  mov edx, dword ptr [ebp+08]
:00467125 52                      push edx
:00467126 B9C0534B00              mov ecx, 004B53C0
:0046712B E83D080000              call 0046796D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046710E(C), :0046711C(C)
|
:00467130 EB14                    jmp 00467146

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046704B(C)
|
:00467132 B9C0534B00              mov ecx, 004B53C0
:00467137 E8D30C0000              call 00467E0F
:0046713C B958494B00              mov ecx, 004B4958
:00467141 E8CB57FEFF              call 0044C911

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467008(U), :00467025(U), :00467051(U), :0046706E(U), :00467100(U)
|:00467130(U)
|
:00467146 8B4514                  mov eax, dword ptr [ebp+14]
:00467149 50                      push eax
:0046714A 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046714D 51                      push ecx
:0046714E 8B550C                  mov edx, dword ptr [ebp+0C]
:00467151 52                      push edx
:00467152 8B4508                  mov eax, dword ptr [ebp+08]
:00467155 50                      push eax
:00467156 E896070100              call 004778F1
:0046715B 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467081(U), :004670D1(U)
|
:0046715E 8BE5                    mov esp, ebp
:00467160 5D                      pop ebp
:00467161 C21000                  ret 0010


:00467164 55                      push ebp
:00467165 8BEC                    mov ebp, esp
:00467167 51                      push ecx
:00467168 8B450C                  mov eax, dword ptr [ebp+0C]
:0046716B 8945FC                  mov dword ptr [ebp-04], eax
:0046716E 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00467175 7402                    je 00467179
:00467177 EB18                    jmp 00467191

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467175(C)
|
:00467179 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046717C 51                      push ecx
:0046717D 8B5510                  mov edx, dword ptr [ebp+10]
:00467180 52                      push edx
:00467181 8B450C                  mov eax, dword ptr [ebp+0C]
:00467184 50                      push eax
:00467185 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467188 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:00467189 FF155CD64B00            Call dword ptr [004BD65C]
:0046718F EB18                    jmp 004671A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467177(U)
|
:00467191 8B5514                  mov edx, dword ptr [ebp+14]
:00467194 52                      push edx
:00467195 8B4510                  mov eax, dword ptr [ebp+10]
:00467198 50                      push eax
:00467199 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046719C 51                      push ecx
:0046719D 8B5508                  mov edx, dword ptr [ebp+08]
:004671A0 52                      push edx
:004671A1 E84B070100              call 004778F1
:004671A6 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046718F(U)
|
:004671A9 8BE5                    mov esp, ebp
:004671AB 5D                      pop ebp
:004671AC C21000                  ret 0010


:004671AF 55                      push ebp
:004671B0 8BEC                    mov ebp, esp
:004671B2 51                      push ecx
:004671B3 8B450C                  mov eax, dword ptr [ebp+0C]
:004671B6 8945FC                  mov dword ptr [ebp-04], eax
:004671B9 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:004671C0 7402                    je 004671C4
:004671C2 EB18                    jmp 004671DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004671C0(C)
|
:004671C4 8B4D14                  mov ecx, dword ptr [ebp+14]
:004671C7 51                      push ecx
:004671C8 8B5510                  mov edx, dword ptr [ebp+10]
:004671CB 52                      push edx
:004671CC 8B450C                  mov eax, dword ptr [ebp+0C]
:004671CF 50                      push eax
:004671D0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004671D3 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:004671D4 FF155CD64B00            Call dword ptr [004BD65C]
:004671DA EB18                    jmp 004671F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004671C2(U)
|
:004671DC 8B5514                  mov edx, dword ptr [ebp+14]
:004671DF 52                      push edx
:004671E0 8B4510                  mov eax, dword ptr [ebp+10]
:004671E3 50                      push eax
:004671E4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004671E7 51                      push ecx
:004671E8 8B5508                  mov edx, dword ptr [ebp+08]
:004671EB 52                      push edx
:004671EC E800070100              call 004778F1
:004671F1 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004671DA(U)
|
:004671F4 8BE5                    mov esp, ebp
:004671F6 5D                      pop ebp
:004671F7 C21000                  ret 0010


:004671FA 55                      push ebp
:004671FB 8BEC                    mov ebp, esp
:004671FD 51                      push ecx
:004671FE 8B450C                  mov eax, dword ptr [ebp+0C]
:00467201 8945FC                  mov dword ptr [ebp-04], eax
:00467204 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0046720B 7402                    je 0046720F
:0046720D EB18                    jmp 00467227

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046720B(C)
|
:0046720F 8B4D14                  mov ecx, dword ptr [ebp+14]
:00467212 51                      push ecx
:00467213 8B5510                  mov edx, dword ptr [ebp+10]
:00467216 52                      push edx
:00467217 8B450C                  mov eax, dword ptr [ebp+0C]
:0046721A 50                      push eax
:0046721B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046721E 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0046721F FF155CD64B00            Call dword ptr [004BD65C]
:00467225 EB18                    jmp 0046723F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046720D(U)
|
:00467227 8B5514                  mov edx, dword ptr [ebp+14]
:0046722A 52                      push edx
:0046722B 8B4510                  mov eax, dword ptr [ebp+10]
:0046722E 50                      push eax
:0046722F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00467232 51                      push ecx
:00467233 8B5508                  mov edx, dword ptr [ebp+08]
:00467236 52                      push edx
:00467237 E8B5060100              call 004778F1
:0046723C 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467225(U)
|
:0046723F 8BE5                    mov esp, ebp
:00467241 5D                      pop ebp
:00467242 C21000                  ret 0010


:00467245 55                      push ebp
:00467246 8BEC                    mov ebp, esp
:00467248 51                      push ecx
:00467249 8B450C                  mov eax, dword ptr [ebp+0C]
:0046724C 8945FC                  mov dword ptr [ebp-04], eax
:0046724F 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00467256 7402                    je 0046725A
:00467258 EB18                    jmp 00467272

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467256(C)
|
:0046725A 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046725D 51                      push ecx
:0046725E 8B5510                  mov edx, dword ptr [ebp+10]
:00467261 52                      push edx
:00467262 8B450C                  mov eax, dword ptr [ebp+0C]
:00467265 50                      push eax
:00467266 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467269 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0046726A FF155CD64B00            Call dword ptr [004BD65C]
:00467270 EB18                    jmp 0046728A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467258(U)
|
:00467272 8B5514                  mov edx, dword ptr [ebp+14]
:00467275 52                      push edx
:00467276 8B4510                  mov eax, dword ptr [ebp+10]
:00467279 50                      push eax
:0046727A 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046727D 51                      push ecx
:0046727E 8B5508                  mov edx, dword ptr [ebp+08]
:00467281 52                      push edx
:00467282 E86A060100              call 004778F1
:00467287 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467270(U)
|
:0046728A 8BE5                    mov esp, ebp
:0046728C 5D                      pop ebp
:0046728D C21000                  ret 0010


:00467290 55                      push ebp
:00467291 8BEC                    mov ebp, esp
:00467293 51                      push ecx
:00467294 8B450C                  mov eax, dword ptr [ebp+0C]
:00467297 8945FC                  mov dword ptr [ebp-04], eax
:0046729A 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:004672A1 7402                    je 004672A5
:004672A3 EB18                    jmp 004672BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004672A1(C)
|
:004672A5 8B4D14                  mov ecx, dword ptr [ebp+14]
:004672A8 51                      push ecx
:004672A9 8B5510                  mov edx, dword ptr [ebp+10]
:004672AC 52                      push edx
:004672AD 8B450C                  mov eax, dword ptr [ebp+0C]
:004672B0 50                      push eax
:004672B1 8B4D08                  mov ecx, dword ptr [ebp+08]
:004672B4 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:004672B5 FF155CD64B00            Call dword ptr [004BD65C]
:004672BB EB18                    jmp 004672D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004672A3(U)
|
:004672BD 8B5514                  mov edx, dword ptr [ebp+14]
:004672C0 52                      push edx
:004672C1 8B4510                  mov eax, dword ptr [ebp+10]
:004672C4 50                      push eax
:004672C5 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004672C8 51                      push ecx
:004672C9 8B5508                  mov edx, dword ptr [ebp+08]
:004672CC 52                      push edx
:004672CD E81F060100              call 004778F1
:004672D2 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004672BB(U)
|
:004672D5 8BE5                    mov esp, ebp
:004672D7 5D                      pop ebp
:004672D8 C21000                  ret 0010


:004672DB 55                      push ebp
:004672DC 8BEC                    mov ebp, esp
:004672DE 51                      push ecx
:004672DF 8B450C                  mov eax, dword ptr [ebp+0C]
:004672E2 8945FC                  mov dword ptr [ebp-04], eax
:004672E5 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:004672EC 7402                    je 004672F0
:004672EE EB18                    jmp 00467308

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004672EC(C)
|
:004672F0 8B4D14                  mov ecx, dword ptr [ebp+14]
:004672F3 51                      push ecx
:004672F4 8B5510                  mov edx, dword ptr [ebp+10]
:004672F7 52                      push edx
:004672F8 8B450C                  mov eax, dword ptr [ebp+0C]
:004672FB 50                      push eax
:004672FC 8B4D08                  mov ecx, dword ptr [ebp+08]
:004672FF 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:00467300 FF155CD64B00            Call dword ptr [004BD65C]
:00467306 EB18                    jmp 00467320

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004672EE(U)
|
:00467308 8B5514                  mov edx, dword ptr [ebp+14]
:0046730B 52                      push edx
:0046730C 8B4510                  mov eax, dword ptr [ebp+10]
:0046730F 50                      push eax
:00467310 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00467313 51                      push ecx
:00467314 8B5508                  mov edx, dword ptr [ebp+08]
:00467317 52                      push edx
:00467318 E8D4050100              call 004778F1
:0046731D 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467306(U)
|
:00467320 8BE5                    mov esp, ebp
:00467322 5D                      pop ebp
:00467323 C21000                  ret 0010


:00467326 55                      push ebp
:00467327 8BEC                    mov ebp, esp
:00467329 51                      push ecx
:0046732A 8B450C                  mov eax, dword ptr [ebp+0C]
:0046732D 8945FC                  mov dword ptr [ebp-04], eax
:00467330 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00467337 7402                    je 0046733B
:00467339 EB18                    jmp 00467353

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467337(C)
|
:0046733B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046733E 51                      push ecx
:0046733F 8B5510                  mov edx, dword ptr [ebp+10]
:00467342 52                      push edx
:00467343 8B450C                  mov eax, dword ptr [ebp+0C]
:00467346 50                      push eax
:00467347 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046734A 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0046734B FF155CD64B00            Call dword ptr [004BD65C]
:00467351 EB18                    jmp 0046736B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467339(U)
|
:00467353 8B5514                  mov edx, dword ptr [ebp+14]
:00467356 52                      push edx
:00467357 8B4510                  mov eax, dword ptr [ebp+10]
:0046735A 50                      push eax
:0046735B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046735E 51                      push ecx
:0046735F 8B5508                  mov edx, dword ptr [ebp+08]
:00467362 52                      push edx
:00467363 E889050100              call 004778F1
:00467368 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467351(U)
|
:0046736B 8BE5                    mov esp, ebp
:0046736D 5D                      pop ebp
:0046736E C21000                  ret 0010


:00467371 55                      push ebp
:00467372 8BEC                    mov ebp, esp
:00467374 51                      push ecx
:00467375 8B450C                  mov eax, dword ptr [ebp+0C]
:00467378 8945FC                  mov dword ptr [ebp-04], eax
:0046737B 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00467382 7402                    je 00467386
:00467384 EB18                    jmp 0046739E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467382(C)
|
:00467386 8B4D14                  mov ecx, dword ptr [ebp+14]
:00467389 51                      push ecx
:0046738A 8B5510                  mov edx, dword ptr [ebp+10]
:0046738D 52                      push edx
:0046738E 8B450C                  mov eax, dword ptr [ebp+0C]
:00467391 50                      push eax
:00467392 8B4D08                  mov ecx, dword ptr [ebp+08]
:00467395 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:00467396 FF155CD64B00            Call dword ptr [004BD65C]
:0046739C EB18                    jmp 004673B6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467384(U)
|
:0046739E 8B5514                  mov edx, dword ptr [ebp+14]
:004673A1 52                      push edx
:004673A2 8B4510                  mov eax, dword ptr [ebp+10]
:004673A5 50                      push eax
:004673A6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004673A9 51                      push ecx
:004673AA 8B5508                  mov edx, dword ptr [ebp+08]
:004673AD 52                      push edx
:004673AE E83E050100              call 004778F1
:004673B3 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046739C(U)
|
:004673B6 8BE5                    mov esp, ebp
:004673B8 5D                      pop ebp
:004673B9 C21000                  ret 0010


:004673BC 55                      push ebp
:004673BD 8BEC                    mov ebp, esp
:004673BF 51                      push ecx
:004673C0 8B450C                  mov eax, dword ptr [ebp+0C]
:004673C3 8945FC                  mov dword ptr [ebp-04], eax
:004673C6 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:004673CD 7402                    je 004673D1
:004673CF EB18                    jmp 004673E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004673CD(C)
|
:004673D1 8B4D14                  mov ecx, dword ptr [ebp+14]
:004673D4 51                      push ecx
:004673D5 8B5510                  mov edx, dword ptr [ebp+10]
:004673D8 52                      push edx
:004673D9 8B450C                  mov eax, dword ptr [ebp+0C]
:004673DC 50                      push eax
:004673DD 8B4D08                  mov ecx, dword ptr [ebp+08]
:004673E0 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:004673E1 FF155CD64B00            Call dword ptr [004BD65C]
:004673E7 EB18                    jmp 00467401

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004673CF(U)
|
:004673E9 8B5514                  mov edx, dword ptr [ebp+14]
:004673EC 52                      push edx
:004673ED 8B4510                  mov eax, dword ptr [ebp+10]
:004673F0 50                      push eax
:004673F1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004673F4 51                      push ecx
:004673F5 8B5508                  mov edx, dword ptr [ebp+08]
:004673F8 52                      push edx
:004673F9 E8F3040100              call 004778F1
:004673FE 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004673E7(U)
|
:00467401 8BE5                    mov esp, ebp
:00467403 5D                      pop ebp
:00467404 C21000                  ret 0010


:00467407 55                      push ebp
:00467408 8BEC                    mov ebp, esp
:0046740A 51                      push ecx
:0046740B 8B450C                  mov eax, dword ptr [ebp+0C]
:0046740E 8945FC                  mov dword ptr [ebp-04], eax
:00467411 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00467418 7402                    je 0046741C
:0046741A EB18                    jmp 00467434

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467418(C)
|
:0046741C 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046741F 51                      push ecx
:00467420 8B5510                  mov edx, dword ptr [ebp+10]
:00467423 52                      push edx
:00467424 8B450C                  mov eax, dword ptr [ebp+0C]
:00467427 50                      push eax
:00467428 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046742B 51                      push ecx

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:0046742C FF155CD64B00            Call dword ptr [004BD65C]
:00467432 EB18                    jmp 0046744C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046741A(U)
|
:00467434 8B5514                  mov edx, dword ptr [ebp+14]
:00467437 52                      push edx
:00467438 8B4510                  mov eax, dword ptr [ebp+10]
:0046743B 50                      push eax
:0046743C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046743F 51                      push ecx
:00467440 8B5508                  mov edx, dword ptr [ebp+08]
:00467443 52                      push edx
:00467444 E8A8040100              call 004778F1
:00467449 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467432(U)
|
:0046744C 8BE5                    mov esp, ebp
:0046744E 5D                      pop ebp
:0046744F C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0042EEB4   , :0042F0D6   , :0046CBCF   
|
:00467452 55                      push ebp
:00467453 8BEC                    mov ebp, esp
:00467455 51                      push ecx
:00467456 C745FC00000000          mov [ebp-04], 00000000
:0046745D EB09                    jmp 00467468

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004674D2(U)
|
:0046745F 8B45FC                  mov eax, dword ptr [ebp-04]
:00467462 83C001                  add eax, 00000001
:00467465 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046745D(U)
|
:00467468 837DFC0F                cmp dword ptr [ebp-04], 0000000F
:0046746C 7D66                    jge 004674D4
:0046746E 6A00                    push 00000000
:00467470 8B0D04B04700            mov ecx, dword ptr [0047B004]
:00467476 51                      push ecx
:00467477 8B1500B04700            mov edx, dword ptr [0047B000]
:0046747D 52                      push edx
:0046747E 6A00                    push 00000000
:00467480 33C0                    xor eax, eax
:00467482 2B05941E4800            sub eax, dword ptr [00481E94]
:00467488 50                      push eax
:00467489 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046748C 8B148D10544B00          mov edx, dword ptr [4*ecx+004B5410]
:00467493 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00467494 FF15ECD54B00            Call dword ptr [004BD5EC]
:0046749A 837DFC02                cmp dword ptr [ebp-04], 00000002
:0046749E 7415                    je 004674B5
:004674A0 6A00                    push 00000000
:004674A2 8B45FC                  mov eax, dword ptr [ebp-04]
:004674A5 8B0C8510544B00          mov ecx, dword ptr [4*eax+004B5410]
:004674AC 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004674AD FF1500D74B00            Call dword ptr [004BD700]
:004674B3 EB1D                    jmp 004674D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046749E(C)
|
:004674B5 6A00                    push 00000000

* Possible Ref to Menu: SMAPMENU, Item: "s(C)"
                                  |
:004674B7 68BD9C0000              push 00009CBD
:004674BC 6811010000              push 00000111
:004674C1 8B55FC                  mov edx, dword ptr [ebp-04]
:004674C4 8B049510544B00          mov eax, dword ptr [4*edx+004B5410]
:004674CB 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:004674CC FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004674B3(U)
|
:004674D2 EB8B                    jmp 0046745F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046746C(C)
|
:004674D4 6A00                    push 00000000
:004674D6 E834E10000              call 0047560F
:004674DB 83C404                  add esp, 00000004
:004674DE 8BE5                    mov esp, ebp
:004674E0 5D                      pop ebp
:004674E1 C3                      ret



* Referenced by a CALL at Address:
|:0046BFCF   
|
:004674E2 55                      push ebp
:004674E3 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0434, ""
                                  |
:004674E5 6834040000              push 00000434
:004674EA A1E4554B00              mov eax, dword ptr [004B55E4]
:004674EF 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004674F0 FF1510D64B00            Call dword ptr [004BD610]
:004674F6 50                      push eax
:004674F7 8B0D10544B00            mov ecx, dword ptr [004B5410]
:004674FD 51                      push ecx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:004674FE FF15E8D54B00            Call dword ptr [004BD5E8]
:00467504 6A00                    push 00000000
:00467506 8B1504B04700            mov edx, dword ptr [0047B004]
:0046750C 52                      push edx
:0046750D A100B04700              mov eax, dword ptr [0047B000]
:00467512 50                      push eax
:00467513 6A00                    push 00000000
:00467515 6A00                    push 00000000
:00467517 8B0D10544B00            mov ecx, dword ptr [004B5410]
:0046751D 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0046751E FF15ECD54B00            Call dword ptr [004BD5EC]

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:00467524 68FA030000              push 000003FA
:00467529 8B15E4554B00            mov edx, dword ptr [004B55E4]
:0046752F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:00467530 FF1510D64B00            Call dword ptr [004BD610]
:00467536 50                      push eax
:00467537 A114544B00              mov eax, dword ptr [004B5414]
:0046753C 50                      push eax

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:0046753D FF15E8D54B00            Call dword ptr [004BD5E8]
:00467543 6A00                    push 00000000
:00467545 8B0D14B04700            mov ecx, dword ptr [0047B014]
:0046754B 51                      push ecx
:0046754C 8B1510B04700            mov edx, dword ptr [0047B010]
:00467552 52                      push edx
:00467553 6A00                    push 00000000
:00467555 6A00                    push 00000000
:00467557 A114544B00              mov eax, dword ptr [004B5414]
:0046755C 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0046755D FF15ECD54B00            Call dword ptr [004BD5EC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00467563 6A05                    push 00000005
:00467565 8B0D10544B00            mov ecx, dword ptr [004B5410]
:0046756B 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046756C FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00467572 6A05                    push 00000005
:00467574 8B1514544B00            mov edx, dword ptr [004B5414]
:0046757A 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046757B FF1500D74B00            Call dword ptr [004BD700]
:00467581 5D                      pop ebp
:00467582 C3                      ret



* Referenced by a CALL at Address:
|:0045C666   
|
:00467583 55                      push ebp
:00467584 8BEC                    mov ebp, esp
:00467586 A1C0554B00              mov eax, dword ptr [004B55C0]
:0046758B 50                      push eax

* Reference To: USER32.IsWindow, Ord:0167h
                                  |
:0046758C FF1544D64B00            Call dword ptr [004BD644]
:00467592 85C0                    test eax, eax
:00467594 7437                    je 004675CD
:00467596 8B0DC0554B00            mov ecx, dword ptr [004B55C0]
:0046759C 51                      push ecx
:0046759D 8B151C544B00            mov edx, dword ptr [004B541C]
:004675A3 52                      push edx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:004675A4 FF15E8D54B00            Call dword ptr [004BD5E8]
:004675AA 6A00                    push 00000000
:004675AC A134B04700              mov eax, dword ptr [0047B034]
:004675B1 50                      push eax
:004675B2 8B0D30B04700            mov ecx, dword ptr [0047B030]
:004675B8 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004675B9 6A04                    push 00000004
:004675BB 6848020000              push 00000248
:004675C0 8B151C544B00            mov edx, dword ptr [004B541C]
:004675C6 52                      push edx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004675C7 FF15ECD54B00            Call dword ptr [004BD5EC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467594(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004675CD 6A05                    push 00000005
:004675CF A11C544B00              mov eax, dword ptr [004B541C]
:004675D4 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004675D5 FF1500D74B00            Call dword ptr [004BD700]
:004675DB 5D                      pop ebp
:004675DC C3                      ret



* Referenced by a CALL at Address:
|:004038A4   
|
:004675DD 55                      push ebp
:004675DE 8BEC                    mov ebp, esp
:004675E0 68E9030000              push 000003E9
:004675E5 A168624B00              mov eax, dword ptr [004B6268]
:004675EA 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:004675EB FF1510D64B00            Call dword ptr [004BD610]
:004675F1 50                      push eax
:004675F2 8B0D20544B00            mov ecx, dword ptr [004B5420]
:004675F8 51                      push ecx

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:004675F9 FF15E8D54B00            Call dword ptr [004BD5E8]
:004675FF 6A00                    push 00000000
:00467601 8B1544B04700            mov edx, dword ptr [0047B044]
:00467607 52                      push edx
:00467608 A140B04700              mov eax, dword ptr [0047B040]
:0046760D 50                      push eax
:0046760E 6A00                    push 00000000
:00467610 6A00                    push 00000000
:00467612 8B0D20544B00            mov ecx, dword ptr [004B5420]
:00467618 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00467619 FF15ECD54B00            Call dword ptr [004BD5EC]

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0046761F 68EA030000              push 000003EA
:00467624 8B1568624B00            mov edx, dword ptr [004B6268]
:0046762A 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046762B FF1510D64B00            Call dword ptr [004BD610]
:00467631 50                      push eax
:00467632 A124544B00              mov eax, dword ptr [004B5424]
:00467637 50                      push eax

* Reference To: USER32.SetParent, Ord:0203h
                                  |
:00467638 FF15E8D54B00            Call dword ptr [004BD5E8]
:0046763E 6A00                    push 00000000
:00467640 8B0D54B04700            mov ecx, dword ptr [0047B054]
:00467646 51                      push ecx
:00467647 8B1550B04700            mov edx, dword ptr [0047B050]
:0046764D 52                      push edx
:0046764E 6A00                    push 00000000
:00467650 6A00                    push 00000000
:00467652 A124544B00              mov eax, dword ptr [004B5424]
:00467657 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00467658 FF15ECD54B00            Call dword ptr [004BD5EC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046765E 6A05                    push 00000005
:00467660 8B0D20544B00            mov ecx, dword ptr [004B5420]
:00467666 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00467667 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046766D 6A05                    push 00000005
:0046766F 8B1524544B00            mov edx, dword ptr [004B5424]
:00467675 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00467676 FF1500D74B00            Call dword ptr [004BD700]
:0046767C 5D                      pop ebp
:0046767D C3                      ret



* Referenced by a CALL at Address:
|:0041F00C   
|
:0046767E 55                      push ebp
:0046767F 8BEC                    mov ebp, esp
:00467681 83EC24                  sub esp, 00000024
:00467684 894DDC                  mov dword ptr [ebp-24], ecx
:00467687 B928B44800              mov ecx, 0048B428
:0046768C E87121FBFF              call 00419802
:00467691 B928B44800              mov ecx, 0048B428
:00467696 E8CB21FBFF              call 00419866
:0046769B 8945E8                  mov dword ptr [ebp-18], eax
:0046769E B928B44800              mov ecx, 0048B428
:004676A3 E8CF21FBFF              call 00419877
:004676A8 8945E4                  mov dword ptr [ebp-1C], eax
:004676AB 8D45F0                  lea eax, dword ptr [ebp-10]
:004676AE 50                      push eax
:004676AF 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:004676B5 51                      push ecx

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:004676B6 FF15D8D64B00            Call dword ptr [004BD6D8]
:004676BC 8B5508                  mov edx, dword ptr [ebp+08]
:004676BF 52                      push edx

* Reference To: KERNEL32.lstrlenA, Ord:02A1h
                                  |
:004676C0 FF15E8D44B00            Call dword ptr [004BD4E8]
:004676C6 8945EC                  mov dword ptr [ebp-14], eax
:004676C9 837DEC00                cmp dword ptr [ebp-14], 00000000
:004676CD 742C                    je 004676FB
:004676CF B978294B00              mov ecx, 004B2978
:004676D4 E8D3CDF9FF              call 004044AC
:004676D9 85C0                    test eax, eax
:004676DB 741E                    je 004676FB
:004676DD 837DE428                cmp dword ptr [ebp-1C], 00000028
:004676E1 7C18                    jl 004676FB
:004676E3 8B45E8                  mov eax, dword ptr [ebp-18]
:004676E6 3B45F0                  cmp eax, dword ptr [ebp-10]
:004676E9 7C10                    jl 004676FB
:004676EB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:004676EE 3B4DF8                  cmp ecx, dword ptr [ebp-08]
:004676F1 7F08                    jg 004676FB
:004676F3 8B55E4                  mov edx, dword ptr [ebp-1C]
:004676F6 3B55FC                  cmp edx, dword ptr [ebp-04]
:004676F9 7E21                    jle 0046771C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004676CD(C), :004676DB(C), :004676E1(C), :004676E9(C), :004676F1(C)
|
:004676FB 8B4DDC                  mov ecx, dword ptr [ebp-24]
:004676FE E857010000              call 0046785A
:00467703 686C544B00              push 004B546C
:00467708 8B45DC                  mov eax, dword ptr [ebp-24]
:0046770B 83C00C                  add eax, 0000000C
:0046770E 50                      push eax
:0046770F E81C0E0100              call 00478530
:00467714 83C408                  add esp, 00000008
:00467717 E938010000              jmp 00467854

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004676F9(C)
|
:0046771C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046771F E804020000              call 00467928
:00467724 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00467727 51                      push ecx
:00467728 8B5508                  mov edx, dword ptr [ebp+08]
:0046772B 52                      push edx
:0046772C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046772F E853010000              call 00467887
:00467734 8945E0                  mov dword ptr [ebp-20], eax
:00467737 8B45E8                  mov eax, dword ptr [ebp-18]
:0046773A 83C008                  add eax, 00000008
:0046773D 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00467740 3901                    cmp dword ptr [ecx], eax
:00467742 7F44                    jg 00467788
:00467744 8B55E8                  mov edx, dword ptr [ebp-18]
:00467747 83EA08                  sub edx, 00000008
:0046774A 8B45DC                  mov eax, dword ptr [ebp-24]
:0046774D 3910                    cmp dword ptr [eax], edx
:0046774F 7C37                    jl 00467788
:00467751 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00467754 83C108                  add ecx, 00000008
:00467757 8B55DC                  mov edx, dword ptr [ebp-24]
:0046775A 394A04                  cmp dword ptr [edx+04], ecx
:0046775D 7F29                    jg 00467788
:0046775F 8B45E4                  mov eax, dword ptr [ebp-1C]
:00467762 83E808                  sub eax, 00000008
:00467765 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00467768 394104                  cmp dword ptr [ecx+04], eax
:0046776B 7C1B                    jl 00467788
:0046776D 8B55DC                  mov edx, dword ptr [ebp-24]
:00467770 83C20C                  add edx, 0000000C
:00467773 52                      push edx
:00467774 8B4508                  mov eax, dword ptr [ebp+08]
:00467777 50                      push eax
:00467778 E8030E0100              call 00478580
:0046777D 83C408                  add esp, 00000008
:00467780 85C0                    test eax, eax
:00467782 0F84B5000000            je 0046783D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467742(C), :0046774F(C), :0046775D(C), :0046776B(C)
|
:00467788 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046778B E8CA000000              call 0046785A
:00467790 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00467793 8B55E8                  mov edx, dword ptr [ebp-18]
:00467796 8911                    mov dword ptr [ecx], edx
:00467798 8B45DC                  mov eax, dword ptr [ebp-24]
:0046779B 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0046779E 894804                  mov dword ptr [eax+04], ecx
:004677A1 B958494B00              mov ecx, 004B4958
:004677A6 E89871FEFF              call 0044E943
:004677AB 2B45E0                  sub eax, dword ptr [ebp-20]
:004677AE 83E820                  sub eax, 00000020
:004677B1 3945E8                  cmp dword ptr [ebp-18], eax
:004677B4 7C0C                    jl 004677C2
:004677B6 8B55E8                  mov edx, dword ptr [ebp-18]
:004677B9 2B55E0                  sub edx, dword ptr [ebp-20]
:004677BC 83EA28                  sub edx, 00000028
:004677BF 8955E8                  mov dword ptr [ebp-18], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004677B4(C)
|
:004677C2 6A00                    push 00000000
:004677C4 A174B04700              mov eax, dword ptr [0047B074]
:004677C9 50                      push eax
:004677CA 8B4DE0                  mov ecx, dword ptr [ebp-20]
:004677CD 51                      push ecx
:004677CE 8B55E4                  mov edx, dword ptr [ebp-1C]
:004677D1 52                      push edx
:004677D2 8B45E8                  mov eax, dword ptr [ebp-18]
:004677D5 83C020                  add eax, 00000020
:004677D8 50                      push eax
:004677D9 8B0D2C544B00            mov ecx, dword ptr [004B542C]
:004677DF 51                      push ecx

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:004677E0 FF15ECD54B00            Call dword ptr [004BD5EC]
:004677E6 8B55DC                  mov edx, dword ptr [ebp-24]
:004677E9 837A0800                cmp dword ptr [edx+08], 00000000
:004677ED 744C                    je 0046783B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004677EF 6A05                    push 00000005
:004677F1 A12C544B00              mov eax, dword ptr [004B542C]
:004677F6 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:004677F7 FF1500D74B00            Call dword ptr [004BD700]
:004677FD 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00467800 C7410800000000          mov [ecx+08], 00000000
:00467807 6870544B00              push 004B5470
:0046780C 8B55DC                  mov edx, dword ptr [ebp-24]
:0046780F 83C20C                  add edx, 0000000C
:00467812 52                      push edx
:00467813 E8180D0100              call 00478530
:00467818 83C408                  add esp, 00000008
:0046781B 8B4508                  mov eax, dword ptr [ebp+08]
:0046781E 50                      push eax
:0046781F 8B4DDC                  mov ecx, dword ptr [ebp-24]
:00467822 83C10C                  add ecx, 0000000C
:00467825 51                      push ecx
:00467826 E8050D0100              call 00478530
:0046782B 83C408                  add esp, 00000008
:0046782E 8B152C544B00            mov edx, dword ptr [004B542C]
:00467834 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00467835 FF15FCD54B00            Call dword ptr [004BD5FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004677ED(C)
|
:0046783B EB17                    jmp 00467854

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467782(C)
|
:0046783D B928B44800              mov ecx, 0048B428
:00467842 E80620FBFF              call 0041984D
:00467847 83F801                  cmp eax, 00000001
:0046784A 7508                    jne 00467854
:0046784C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046784F E806000000              call 0046785A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467717(U), :0046783B(U), :0046784A(C)
|
:00467854 8BE5                    mov esp, ebp
:00467856 5D                      pop ebp
:00467857 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0041E285   , :0041F018   , :0045C9C6   , :004676FE   , :0046778B   
|:0046784F   
|
:0046785A 55                      push ebp
:0046785B 8BEC                    mov ebp, esp
:0046785D 51                      push ecx
:0046785E 894DFC                  mov dword ptr [ebp-04], ecx
:00467861 8B45FC                  mov eax, dword ptr [ebp-04]
:00467864 83780800                cmp dword ptr [eax+08], 00000000
:00467868 7519                    jne 00467883
:0046786A 6A00                    push 00000000
:0046786C 8B0D2C544B00            mov ecx, dword ptr [004B542C]
:00467872 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00467873 FF1500D74B00            Call dword ptr [004BD700]
:00467879 8B55FC                  mov edx, dword ptr [ebp-04]
:0046787C C7420801000000          mov [edx+08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467868(C)
|
:00467883 8BE5                    mov esp, ebp
:00467885 5D                      pop ebp
:00467886 C3                      ret



* Referenced by a CALL at Address:
|:0046772F   
|
:00467887 55                      push ebp
:00467888 8BEC                    mov ebp, esp
:0046788A 83EC08                  sub esp, 00000008
:0046788D 894DF8                  mov dword ptr [ebp-08], ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00467890 6A08                    push 00000008
:00467892 E878DD0000              call 0047560F
:00467897 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0046789A 6A07                    push 00000007
:0046789C E855E40000              call 00475CF6
:004678A1 83C404                  add esp, 00000004
:004678A4 E88A88FAFF              call 00410133

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004678A9 6A02                    push 00000002
:004678AB 6A01                    push 00000001
:004678AD B9306D4800              mov ecx, 00486D30
:004678B2 E854E6F9FF              call 00405F0B

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004678B7 6A0A                    push 0000000A
:004678B9 B9306D4800              mov ecx, 00486D30
:004678BE E8F5E6F9FF              call 00405FB8
:004678C3 6A10                    push 00000010
:004678C5 B9306D4800              mov ecx, 00486D30
:004678CA E821E7F9FF              call 00405FF0
:004678CF 8B4508                  mov eax, dword ptr [ebp+08]
:004678D2 50                      push eax
:004678D3 68306D4800              push 00486D30
:004678D8 E8FBF2F9FF              call 00406BD8
:004678DD 83C408                  add esp, 00000008
:004678E0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004678E3 8D14CD10000000          lea edx, dword ptr [8*ecx+00000010]
:004678EA 8955FC                  mov dword ptr [ebp-04], edx
:004678ED 6A0B                    push 0000000B
:004678EF 6A01                    push 00000001
:004678F1 A174B04700              mov eax, dword ptr [0047B074]
:004678F6 50                      push eax
:004678F7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004678FA 51                      push ecx
:004678FB 8B156CB04700            mov edx, dword ptr [0047B06C]
:00467901 52                      push edx
:00467902 A168B04700              mov eax, dword ptr [0047B068]
:00467907 50                      push eax
:00467908 E8EE88FAFF              call 004101FB
:0046790D 83C418                  add esp, 00000018
:00467910 E83988FAFF              call 0041014E
:00467915 6A00                    push 00000000
:00467917 E8F3DC0000              call 0047560F
:0046791C 83C404                  add esp, 00000004
:0046791F 8B45FC                  mov eax, dword ptr [ebp-04]
:00467922 8BE5                    mov esp, ebp
:00467924 5D                      pop ebp
:00467925 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0046771F   
|
:00467928 55                      push ebp
:00467929 8BEC                    mov ebp, esp
:0046792B 51                      push ecx
:0046792C 894DFC                  mov dword ptr [ebp-04], ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046792F 6A08                    push 00000008
:00467931 E8D9DC0000              call 0047560F
:00467936 83C404                  add esp, 00000004
:00467939 6A10                    push 00000010
:0046793B 6A00                    push 00000000
:0046793D A174B04700              mov eax, dword ptr [0047B074]
:00467942 50                      push eax
:00467943 8B0D70B04700            mov ecx, dword ptr [0047B070]
:00467949 51                      push ecx
:0046794A 8B156CB04700            mov edx, dword ptr [0047B06C]
:00467950 52                      push edx
:00467951 A168B04700              mov eax, dword ptr [0047B068]
:00467956 50                      push eax
:00467957 E89F88FAFF              call 004101FB
:0046795C 83C418                  add esp, 00000018
:0046795F 6A00                    push 00000000
:00467961 E8A9DC0000              call 0047560F
:00467966 83C404                  add esp, 00000004
:00467969 8BE5                    mov esp, ebp
:0046796B 5D                      pop ebp
:0046796C C3                      ret



* Referenced by a CALL at Address:
|:0046712B   
|
:0046796D 55                      push ebp
:0046796E 8BEC                    mov ebp, esp
:00467970 51                      push ecx
:00467971 894DFC                  mov dword ptr [ebp-04], ecx
:00467974 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467977 E899000000              call 00467A15
:0046797C 8B450C                  mov eax, dword ptr [ebp+0C]
:0046797F 25FFFF0000              and eax, 0000FFFF
:00467984 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467987 894110                  mov dword ptr [ecx+10], eax
:0046798A 8B550C                  mov edx, dword ptr [ebp+0C]
:0046798D C1EA10                  shr edx, 10
:00467990 81E2FFFF0000            and edx, 0000FFFF
:00467996 81E2FFFF0000            and edx, 0000FFFF
:0046799C 8B45FC                  mov eax, dword ptr [ebp-04]
:0046799F 895014                  mov dword ptr [eax+14], edx
:004679A2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004679A5 8B55FC                  mov edx, dword ptr [ebp-04]
:004679A8 8B4110                  mov eax, dword ptr [ecx+10]
:004679AB 3B4228                  cmp eax, dword ptr [edx+28]
:004679AE 7C57                    jl 00467A07
:004679B0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004679B3 8B55FC                  mov edx, dword ptr [ebp-04]
:004679B6 8B4110                  mov eax, dword ptr [ecx+10]
:004679B9 3B4230                  cmp eax, dword ptr [edx+30]
:004679BC 7F49                    jg 00467A07
:004679BE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004679C1 8B55FC                  mov edx, dword ptr [ebp-04]
:004679C4 8B4114                  mov eax, dword ptr [ecx+14]
:004679C7 3B422C                  cmp eax, dword ptr [edx+2C]
:004679CA 7C3B                    jl 00467A07
:004679CC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004679CF 8B55FC                  mov edx, dword ptr [ebp-04]
:004679D2 8B4114                  mov eax, dword ptr [ecx+14]
:004679D5 3B4234                  cmp eax, dword ptr [edx+34]
:004679D8 7F2D                    jg 00467A07
:004679DA 8B4D08                  mov ecx, dword ptr [ebp+08]
:004679DD 51                      push ecx

* Reference To: USER32.SetCapture, Ord:01E3h
                                  |
:004679DE FF15B8D64B00            Call dword ptr [004BD6B8]
:004679E4 8B55FC                  mov edx, dword ptr [ebp-04]
:004679E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004679EA 8B4810                  mov ecx, dword ptr [eax+10]
:004679ED 894A08                  mov dword ptr [edx+08], ecx
:004679F0 8B55FC                  mov edx, dword ptr [ebp-04]
:004679F3 8B45FC                  mov eax, dword ptr [ebp-04]
:004679F6 8B4814                  mov ecx, dword ptr [eax+14]
:004679F9 894A0C                  mov dword ptr [edx+0C], ecx
:004679FC 8B55FC                  mov edx, dword ptr [ebp-04]
:004679FF C70201000000            mov dword ptr [edx], 00000001
:00467A05 EB08                    jmp 00467A0F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004679AE(C), :004679BC(C), :004679CA(C), :004679D8(C)
|
:00467A07 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467A0A E806000000              call 00467A15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467A05(U)
|
:00467A0F 8BE5                    mov esp, ebp
:00467A11 5D                      pop ebp
:00467A12 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:00467977   , :00467A0A   , :00467DBE   , :00467ECA   , :004680F4   
|
:00467A15 55                      push ebp
:00467A16 8BEC                    mov ebp, esp
:00467A18 51                      push ecx
:00467A19 894DFC                  mov dword ptr [ebp-04], ecx
:00467A1C 8B45FC                  mov eax, dword ptr [ebp-04]
:00467A1F C7401000000000          mov [eax+10], 00000000
:00467A26 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467A29 C7411400000000          mov [ecx+14], 00000000
:00467A30 8B55FC                  mov edx, dword ptr [ebp-04]
:00467A33 C7420800000000          mov [edx+08], 00000000
:00467A3A 8B45FC                  mov eax, dword ptr [ebp-04]
:00467A3D C7400C00000000          mov [eax+0C], 00000000
:00467A44 B9784E4B00              mov ecx, 004B4E78
:00467A49 E802070000              call 00468150
:00467A4E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467A51 8B10                    mov edx, dword ptr [eax]
:00467A53 895138                  mov dword ptr [ecx+38], edx
:00467A56 B9784E4B00              mov ecx, 004B4E78
:00467A5B E8F0060000              call 00468150
:00467A60 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467A63 8B5004                  mov edx, dword ptr [eax+04]
:00467A66 89513C                  mov dword ptr [ecx+3C], edx
:00467A69 B9784E4B00              mov ecx, 004B4E78
:00467A6E E8DD060000              call 00468150
:00467A73 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467A76 8B5008                  mov edx, dword ptr [eax+08]
:00467A79 895140                  mov dword ptr [ecx+40], edx
:00467A7C B9784E4B00              mov ecx, 004B4E78
:00467A81 E8CA060000              call 00468150
:00467A86 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467A89 8B500C                  mov edx, dword ptr [eax+0C]
:00467A8C 895144                  mov dword ptr [ecx+44], edx
:00467A8F B9784E4B00              mov ecx, 004B4E78
:00467A94 E8B7060000              call 00468150
:00467A99 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467A9C 8B10                    mov edx, dword ptr [eax]
:00467A9E 895128                  mov dword ptr [ecx+28], edx
:00467AA1 B9784E4B00              mov ecx, 004B4E78
:00467AA6 E8A5060000              call 00468150
:00467AAB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467AAE 8B5004                  mov edx, dword ptr [eax+04]
:00467AB1 89512C                  mov dword ptr [ecx+2C], edx
:00467AB4 B9784E4B00              mov ecx, 004B4E78
:00467AB9 E892060000              call 00468150
:00467ABE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467AC1 8B5008                  mov edx, dword ptr [eax+08]
:00467AC4 895130                  mov dword ptr [ecx+30], edx
:00467AC7 B9784E4B00              mov ecx, 004B4E78
:00467ACC E87F060000              call 00468150
:00467AD1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467AD4 8B500C                  mov edx, dword ptr [eax+0C]
:00467AD7 895134                  mov dword ptr [ecx+34], edx
:00467ADA 8B45FC                  mov eax, dword ptr [ebp-04]
:00467ADD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467AE0 8B5030                  mov edx, dword ptr [eax+30]
:00467AE3 2B5128                  sub edx, dword ptr [ecx+28]
:00467AE6 8B45FC                  mov eax, dword ptr [ebp-04]
:00467AE9 895048                  mov dword ptr [eax+48], edx
:00467AEC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467AEF 8B55FC                  mov edx, dword ptr [ebp-04]
:00467AF2 8B4134                  mov eax, dword ptr [ecx+34]
:00467AF5 2B422C                  sub eax, dword ptr [edx+2C]
:00467AF8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467AFB 89414C                  mov dword ptr [ecx+4C], eax
:00467AFE B9784E4B00              mov ecx, 004B4E78
:00467B03 E828060000              call 00468130
:00467B08 33D2                    xor edx, edx
:00467B0A 8A10                    mov dl, byte ptr [eax]
:00467B0C 8B45FC                  mov eax, dword ptr [ebp-04]
:00467B0F 895018                  mov dword ptr [eax+18], edx
:00467B12 B9784E4B00              mov ecx, 004B4E78
:00467B17 E814060000              call 00468130
:00467B1C 33C9                    xor ecx, ecx
:00467B1E 8A4801                  mov cl, byte ptr [eax+01]
:00467B21 8B55FC                  mov edx, dword ptr [ebp-04]
:00467B24 894A1C                  mov dword ptr [edx+1C], ecx
:00467B27 B958494B00              mov ecx, 004B4958
:00467B2C E84A6FFEFF              call 0044EA7B
:00467B31 99                      cdq
:00467B32 83E207                  and edx, 00000007
:00467B35 03C2                    add eax, edx
:00467B37 C1F803                  sar eax, 03
:00467B3A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467B3D 8B5118                  mov edx, dword ptr [ecx+18]
:00467B40 8D4402FE                lea eax, dword ptr [edx+eax-02]
:00467B44 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467B47 894120                  mov dword ptr [ecx+20], eax
:00467B4A B958494B00              mov ecx, 004B4958
:00467B4F E84E6FFEFF              call 0044EAA2
:00467B54 99                      cdq
:00467B55 83E207                  and edx, 00000007
:00467B58 03C2                    add eax, edx
:00467B5A C1F803                  sar eax, 03
:00467B5D 8B55FC                  mov edx, dword ptr [ebp-04]
:00467B60 8B4A1C                  mov ecx, dword ptr [edx+1C]
:00467B63 8D5401FE                lea edx, dword ptr [ecx+eax-02]
:00467B67 8B45FC                  mov eax, dword ptr [ebp-04]
:00467B6A 895024                  mov dword ptr [eax+24], edx
:00467B6D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467B70 C70100000000            mov dword ptr [ecx], 00000000
:00467B76 8BE5                    mov esp, ebp
:00467B78 5D                      pop ebp
:00467B79 C3                      ret



* Referenced by a CALL at Address:
|:004670FB   
|
:00467B7A 55                      push ebp
:00467B7B 8BEC                    mov ebp, esp
:00467B7D 83EC08                  sub esp, 00000008
:00467B80 894DF8                  mov dword ptr [ebp-08], ecx
:00467B83 8B45F8                  mov eax, dword ptr [ebp-08]
:00467B86 833800                  cmp dword ptr [eax], 00000000
:00467B89 0F847A020000            je 00467E09
:00467B8F 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00467B92 81E1FFFF0000            and ecx, 0000FFFF
:00467B98 8B55F8                  mov edx, dword ptr [ebp-08]
:00467B9B 894A10                  mov dword ptr [edx+10], ecx
:00467B9E 8B450C                  mov eax, dword ptr [ebp+0C]
:00467BA1 C1E810                  shr eax, 10
:00467BA4 25FFFF0000              and eax, 0000FFFF
:00467BA9 25FFFF0000              and eax, 0000FFFF
:00467BAE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467BB1 894114                  mov dword ptr [ecx+14], eax
:00467BB4 8B55F8                  mov edx, dword ptr [ebp-08]
:00467BB7 8B45F8                  mov eax, dword ptr [ebp-08]
:00467BBA 8B4A08                  mov ecx, dword ptr [edx+08]
:00467BBD 3B4810                  cmp ecx, dword ptr [eax+10]
:00467BC0 7512                    jne 00467BD4
:00467BC2 8B55F8                  mov edx, dword ptr [ebp-08]
:00467BC5 8B45F8                  mov eax, dword ptr [ebp-08]
:00467BC8 8B4A0C                  mov ecx, dword ptr [edx+0C]
:00467BCB 3B4814                  cmp ecx, dword ptr [eax+14]
:00467BCE 0F842B020000            je 00467DFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467BC0(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00467BD4 6A03                    push 00000003
:00467BD6 E834DA0000              call 0047560F
:00467BDB 83C404                  add esp, 00000004
:00467BDE 6A01                    push 00000001
:00467BE0 8B55F8                  mov edx, dword ptr [ebp-08]
:00467BE3 83C238                  add edx, 00000038
:00467BE6 83EC10                  sub esp, 00000010
:00467BE9 8BC4                    mov eax, esp
:00467BEB 8B0A                    mov ecx, dword ptr [edx]
:00467BED 8908                    mov dword ptr [eax], ecx
:00467BEF 8B4A04                  mov ecx, dword ptr [edx+04]
:00467BF2 894804                  mov dword ptr [eax+04], ecx
:00467BF5 8B4A08                  mov ecx, dword ptr [edx+08]
:00467BF8 894808                  mov dword ptr [eax+08], ecx
:00467BFB 8B520C                  mov edx, dword ptr [edx+0C]
:00467BFE 89500C                  mov dword ptr [eax+0C], edx
:00467C01 E8DD020000              call 00467EE3
:00467C06 83C414                  add esp, 00000014
:00467C09 8B45F8                  mov eax, dword ptr [ebp-08]
:00467C0C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467C0F 8B4010                  mov eax, dword ptr [eax+10]
:00467C12 2B4108                  sub eax, dword ptr [ecx+08]
:00467C15 99                      cdq

* Possible Reference to String Resource ID=00006: ""
                                  |
:00467C16 B906000000              mov ecx, 00000006
:00467C1B F7F9                    idiv ecx
:00467C1D 6BC006                  imul eax, 00000006
:00467C20 8945FC                  mov dword ptr [ebp-04], eax
:00467C23 8B55F8                  mov edx, dword ptr [ebp-08]
:00467C26 8B4228                  mov eax, dword ptr [edx+28]
:00467C29 0345FC                  add eax, dword ptr [ebp-04]
:00467C2C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467C2F 894138                  mov dword ptr [ecx+38], eax
:00467C32 8B55F8                  mov edx, dword ptr [ebp-08]
:00467C35 8B4230                  mov eax, dword ptr [edx+30]
:00467C38 0345FC                  add eax, dword ptr [ebp-04]
:00467C3B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467C3E 894140                  mov dword ptr [ecx+40], eax
:00467C41 8B55F8                  mov edx, dword ptr [ebp-08]
:00467C44 8B45F8                  mov eax, dword ptr [ebp-08]
:00467C47 8B4A38                  mov ecx, dword ptr [edx+38]
:00467C4A 3B4818                  cmp ecx, dword ptr [eax+18]
:00467C4D 7D20                    jge 00467C6F
:00467C4F 8B55F8                  mov edx, dword ptr [ebp-08]
:00467C52 8B45F8                  mov eax, dword ptr [ebp-08]
:00467C55 8B4818                  mov ecx, dword ptr [eax+18]
:00467C58 894A38                  mov dword ptr [edx+38], ecx
:00467C5B 8B55F8                  mov edx, dword ptr [ebp-08]
:00467C5E 8B4238                  mov eax, dword ptr [edx+38]
:00467C61 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467C64 034148                  add eax, dword ptr [ecx+48]
:00467C67 8B55F8                  mov edx, dword ptr [ebp-08]
:00467C6A 894240                  mov dword ptr [edx+40], eax
:00467C6D EB2C                    jmp 00467C9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467C4D(C)
|
:00467C6F 8B45F8                  mov eax, dword ptr [ebp-08]
:00467C72 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467C75 8B5040                  mov edx, dword ptr [eax+40]
:00467C78 3B5120                  cmp edx, dword ptr [ecx+20]
:00467C7B 7E1E                    jle 00467C9B
:00467C7D 8B45F8                  mov eax, dword ptr [ebp-08]
:00467C80 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467C83 8B5120                  mov edx, dword ptr [ecx+20]
:00467C86 895040                  mov dword ptr [eax+40], edx
:00467C89 8B45F8                  mov eax, dword ptr [ebp-08]
:00467C8C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467C8F 8B5040                  mov edx, dword ptr [eax+40]
:00467C92 2B5148                  sub edx, dword ptr [ecx+48]
:00467C95 8B45F8                  mov eax, dword ptr [ebp-08]
:00467C98 895038                  mov dword ptr [eax+38], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467C6D(U), :00467C7B(C)
|
:00467C9B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467C9E 8B55F8                  mov edx, dword ptr [ebp-08]
:00467CA1 8B4114                  mov eax, dword ptr [ecx+14]
:00467CA4 2B420C                  sub eax, dword ptr [edx+0C]
:00467CA7 99                      cdq

* Possible Reference to String Resource ID=00006: ""
                                  |
:00467CA8 B906000000              mov ecx, 00000006
:00467CAD F7F9                    idiv ecx
:00467CAF 6BC006                  imul eax, 00000006
:00467CB2 8945FC                  mov dword ptr [ebp-04], eax
:00467CB5 8B55F8                  mov edx, dword ptr [ebp-08]
:00467CB8 8B422C                  mov eax, dword ptr [edx+2C]
:00467CBB 0345FC                  add eax, dword ptr [ebp-04]
:00467CBE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467CC1 89413C                  mov dword ptr [ecx+3C], eax
:00467CC4 8B55F8                  mov edx, dword ptr [ebp-08]
:00467CC7 8B4234                  mov eax, dword ptr [edx+34]
:00467CCA 0345FC                  add eax, dword ptr [ebp-04]
:00467CCD 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467CD0 894144                  mov dword ptr [ecx+44], eax
:00467CD3 8B55F8                  mov edx, dword ptr [ebp-08]
:00467CD6 8B45F8                  mov eax, dword ptr [ebp-08]
:00467CD9 8B4A3C                  mov ecx, dword ptr [edx+3C]
:00467CDC 3B481C                  cmp ecx, dword ptr [eax+1C]
:00467CDF 7D20                    jge 00467D01
:00467CE1 8B55F8                  mov edx, dword ptr [ebp-08]
:00467CE4 8B45F8                  mov eax, dword ptr [ebp-08]
:00467CE7 8B481C                  mov ecx, dword ptr [eax+1C]
:00467CEA 894A3C                  mov dword ptr [edx+3C], ecx
:00467CED 8B55F8                  mov edx, dword ptr [ebp-08]
:00467CF0 8B423C                  mov eax, dword ptr [edx+3C]
:00467CF3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467CF6 03414C                  add eax, dword ptr [ecx+4C]
:00467CF9 8B55F8                  mov edx, dword ptr [ebp-08]
:00467CFC 894244                  mov dword ptr [edx+44], eax
:00467CFF EB2C                    jmp 00467D2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467CDF(C)
|
:00467D01 8B45F8                  mov eax, dword ptr [ebp-08]
:00467D04 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467D07 8B5044                  mov edx, dword ptr [eax+44]
:00467D0A 3B5124                  cmp edx, dword ptr [ecx+24]
:00467D0D 7E1E                    jle 00467D2D
:00467D0F 8B45F8                  mov eax, dword ptr [ebp-08]
:00467D12 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467D15 8B5124                  mov edx, dword ptr [ecx+24]
:00467D18 895044                  mov dword ptr [eax+44], edx
:00467D1B 8B45F8                  mov eax, dword ptr [ebp-08]
:00467D1E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467D21 8B5044                  mov edx, dword ptr [eax+44]
:00467D24 2B514C                  sub edx, dword ptr [ecx+4C]
:00467D27 8B45F8                  mov eax, dword ptr [ebp-08]
:00467D2A 89503C                  mov dword ptr [eax+3C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467CFF(U), :00467D0D(C)
|
:00467D2D 6A00                    push 00000000
:00467D2F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467D32 83C138                  add ecx, 00000038
:00467D35 83EC10                  sub esp, 00000010
:00467D38 8BD4                    mov edx, esp
:00467D3A 8B01                    mov eax, dword ptr [ecx]
:00467D3C 8902                    mov dword ptr [edx], eax
:00467D3E 8B4104                  mov eax, dword ptr [ecx+04]
:00467D41 894204                  mov dword ptr [edx+04], eax
:00467D44 8B4108                  mov eax, dword ptr [ecx+08]
:00467D47 894208                  mov dword ptr [edx+08], eax
:00467D4A 8B490C                  mov ecx, dword ptr [ecx+0C]
:00467D4D 894A0C                  mov dword ptr [edx+0C], ecx
:00467D50 E88E010000              call 00467EE3
:00467D55 83C414                  add esp, 00000014
:00467D58 8B55F8                  mov edx, dword ptr [ebp-08]
:00467D5B 8B45F8                  mov eax, dword ptr [ebp-08]
:00467D5E 8B4A10                  mov ecx, dword ptr [edx+10]
:00467D61 3B4818                  cmp ecx, dword ptr [eax+18]
:00467D64 7C2A                    jl 00467D90
:00467D66 8B55F8                  mov edx, dword ptr [ebp-08]
:00467D69 8B45F8                  mov eax, dword ptr [ebp-08]
:00467D6C 8B4A10                  mov ecx, dword ptr [edx+10]
:00467D6F 3B4820                  cmp ecx, dword ptr [eax+20]
:00467D72 7F1C                    jg 00467D90
:00467D74 8B55F8                  mov edx, dword ptr [ebp-08]
:00467D77 8B45F8                  mov eax, dword ptr [ebp-08]
:00467D7A 8B4A14                  mov ecx, dword ptr [edx+14]
:00467D7D 3B481C                  cmp ecx, dword ptr [eax+1C]
:00467D80 7C0E                    jl 00467D90
:00467D82 8B55F8                  mov edx, dword ptr [ebp-08]
:00467D85 8B45F8                  mov eax, dword ptr [ebp-08]
:00467D88 8B4A14                  mov ecx, dword ptr [edx+14]
:00467D8B 3B4824                  cmp ecx, dword ptr [eax+24]
:00467D8E 7E6F                    jle 00467DFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467D64(C), :00467D72(C), :00467D80(C)
|
:00467D90 6A01                    push 00000001
:00467D92 8B55F8                  mov edx, dword ptr [ebp-08]
:00467D95 83C238                  add edx, 00000038
:00467D98 83EC10                  sub esp, 00000010
:00467D9B 8BC4                    mov eax, esp
:00467D9D 8B0A                    mov ecx, dword ptr [edx]
:00467D9F 8908                    mov dword ptr [eax], ecx
:00467DA1 8B4A04                  mov ecx, dword ptr [edx+04]
:00467DA4 894804                  mov dword ptr [eax+04], ecx
:00467DA7 8B4A08                  mov ecx, dword ptr [edx+08]
:00467DAA 894808                  mov dword ptr [eax+08], ecx
:00467DAD 8B520C                  mov edx, dword ptr [edx+0C]
:00467DB0 89500C                  mov dword ptr [eax+0C], edx
:00467DB3 E82B010000              call 00467EE3
:00467DB8 83C414                  add esp, 00000014
:00467DBB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00467DBE E852FCFFFF              call 00467A15
:00467DC3 6A00                    push 00000000
:00467DC5 8B45F8                  mov eax, dword ptr [ebp-08]
:00467DC8 83C038                  add eax, 00000038
:00467DCB 83EC10                  sub esp, 00000010
:00467DCE 8BCC                    mov ecx, esp
:00467DD0 8B10                    mov edx, dword ptr [eax]
:00467DD2 8911                    mov dword ptr [ecx], edx
:00467DD4 8B5004                  mov edx, dword ptr [eax+04]
:00467DD7 895104                  mov dword ptr [ecx+04], edx
:00467DDA 8B5008                  mov edx, dword ptr [eax+08]
:00467DDD 895108                  mov dword ptr [ecx+08], edx
:00467DE0 8B400C                  mov eax, dword ptr [eax+0C]
:00467DE3 89410C                  mov dword ptr [ecx+0C], eax
:00467DE6 E8F8000000              call 00467EE3
:00467DEB 83C414                  add esp, 00000014

* Reference To: USER32.GetCapture, Ord:00D8h
                                  |
:00467DEE FF156CD64B00            Call dword ptr [004BD66C]
:00467DF4 3B4508                  cmp eax, dword ptr [ebp+08]
:00467DF7 7506                    jne 00467DFF

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:00467DF9 FF15D4D64B00            Call dword ptr [004BD6D4]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00467BCE(C), :00467D8E(C), :00467DF7(C)
|
:00467DFF 6A00                    push 00000000
:00467E01 E809D80000              call 0047560F
:00467E06 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467B89(C)
|
:00467E09 8BE5                    mov esp, ebp
:00467E0B 5D                      pop ebp
:00467E0C C20800                  ret 0008



* Referenced by a CALL at Address:
|:00467137   
|
:00467E0F 55                      push ebp
:00467E10 8BEC                    mov ebp, esp
:00467E12 51                      push ecx
:00467E13 894DFC                  mov dword ptr [ebp-04], ecx
:00467E16 8B45FC                  mov eax, dword ptr [ebp-04]
:00467E19 833800                  cmp dword ptr [eax], 00000000
:00467E1C 0F84B3000000            je 00467ED5
:00467E22 B958494B00              mov ecx, 004B4958
:00467E27 E87853FEFF              call 0044D1A4
:00467E2C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467E2F 83C138                  add ecx, 00000038
:00467E32 51                      push ecx
:00467E33 B9784E4B00              mov ecx, 004B4E78
:00467E38 E88F46FFFF              call 0045C4CC
:00467E3D B9784E4B00              mov ecx, 004B4E78
:00467E42 E8E9020000              call 00468130
:00467E47 33D2                    xor edx, edx
:00467E49 8A10                    mov dl, byte ptr [eax]
:00467E4B 8B45FC                  mov eax, dword ptr [ebp-04]
:00467E4E 8B4038                  mov eax, dword ptr [eax+38]
:00467E51 2BC2                    sub eax, edx
:00467E53 99                      cdq
:00467E54 2BC2                    sub eax, edx
:00467E56 D1F8                    sar eax, 1
:00467E58 50                      push eax
:00467E59 B958494B00              mov ecx, 004B4958
:00467E5E E8556AFEFF              call 0044E8B8
:00467E63 B9784E4B00              mov ecx, 004B4E78
:00467E68 E8C3020000              call 00468130
:00467E6D 33C9                    xor ecx, ecx
:00467E6F 8A4801                  mov cl, byte ptr [eax+01]
:00467E72 8B55FC                  mov edx, dword ptr [ebp-04]
:00467E75 8B423C                  mov eax, dword ptr [edx+3C]
:00467E78 2BC1                    sub eax, ecx
:00467E7A 99                      cdq
:00467E7B 2BC2                    sub eax, edx
:00467E7D D1F8                    sar eax, 1
:00467E7F 50                      push eax
:00467E80 B958494B00              mov ecx, 004B4958
:00467E85 E8556AFEFF              call 0044E8DF
:00467E8A 6A01                    push 00000001
:00467E8C B958494B00              mov ecx, 004B4958
:00467E91 E8116AFEFF              call 0044E8A7
:00467E96 C1E004                  shl eax, 04
:00467E99 50                      push eax
:00467E9A 6A00                    push 00000000
:00467E9C A1B0554B00              mov eax, dword ptr [004B55B0]
:00467EA1 50                      push eax

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:00467EA2 FF1560D64B00            Call dword ptr [004BD660]
:00467EA8 6A01                    push 00000001
:00467EAA B958494B00              mov ecx, 004B4958
:00467EAF E81A6AFEFF              call 0044E8CE
:00467EB4 C1E004                  shl eax, 04
:00467EB7 50                      push eax
:00467EB8 6A01                    push 00000001
:00467EBA 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00467EC0 51                      push ecx

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:00467EC1 FF1560D64B00            Call dword ptr [004BD660]
:00467EC7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00467ECA E846FBFFFF              call 00467A15

* Reference To: USER32.ReleaseCapture, Ord:01CCh
                                  |
:00467ECF FF15D4D64B00            Call dword ptr [004BD6D4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467E1C(C)
|
:00467ED5 6A00                    push 00000000
:00467ED7 E833D70000              call 0047560F
:00467EDC 83C404                  add esp, 00000004
:00467EDF 8BE5                    mov esp, ebp
:00467EE1 5D                      pop ebp
:00467EE2 C3                      ret



* Referenced by a CALL at Addresses:
|:0045C3EE   , :0045C4AC   , :00467C01   , :00467D50   , :00467DB3   
|:00467DE6   
|
:00467EE3 55                      push ebp
:00467EE4 8BEC                    mov ebp, esp
:00467EE6 A118544B00              mov eax, dword ptr [004B5418]
:00467EEB 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00467EEC FF1558D64B00            Call dword ptr [004BD658]
:00467EF2 85C0                    test eax, eax
:00467EF4 7505                    jne 00467EFB
:00467EF6 E9DF010000              jmp 004680DA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467EF4(C)
|
:00467EFB E83382FAFF              call 00410133
:00467F00 6A00                    push 00000000
:00467F02 6A10                    push 00000010
:00467F04 6A00                    push 00000000
:00467F06 E812DE0000              call 00475D1D
:00467F0B 83C40C                  add esp, 0000000C
:00467F0E 837D1800                cmp dword ptr [ebp+18], 00000000
:00467F12 0F84CD000000            je 00467FE5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00467F18 6A04                    push 00000004
:00467F1A 6A00                    push 00000000
:00467F1C 6A00                    push 00000000
:00467F1E B9B81C4B00              mov ecx, 004B1CB8
:00467F23 E868100100              call 00478F90
:00467F28 05000E0100              add eax, 00010E00
:00467F2D 50                      push eax
:00467F2E 6A01                    push 00000001
:00467F30 8B4D10                  mov ecx, dword ptr [ebp+10]
:00467F33 2B4D08                  sub ecx, dword ptr [ebp+08]
:00467F36 83C101                  add ecx, 00000001
:00467F39 51                      push ecx
:00467F3A 8B550C                  mov edx, dword ptr [ebp+0C]
:00467F3D 52                      push edx
:00467F3E 8B4508                  mov eax, dword ptr [ebp+08]
:00467F41 50                      push eax
:00467F42 E8ADEB0000              call 00476AF4
:00467F47 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00467F4A 6A04                    push 00000004
:00467F4C 6A00                    push 00000000
:00467F4E 6A00                    push 00000000
:00467F50 B9B81C4B00              mov ecx, 004B1CB8
:00467F55 E836100100              call 00478F90
:00467F5A 0500130100              add eax, 00011300
:00467F5F 50                      push eax
:00467F60 6A01                    push 00000001
:00467F62 8B4D10                  mov ecx, dword ptr [ebp+10]
:00467F65 2B4D08                  sub ecx, dword ptr [ebp+08]
:00467F68 83C101                  add ecx, 00000001
:00467F6B 51                      push ecx
:00467F6C 8B5514                  mov edx, dword ptr [ebp+14]
:00467F6F 52                      push edx
:00467F70 8B4508                  mov eax, dword ptr [ebp+08]
:00467F73 50                      push eax
:00467F74 E87BEB0000              call 00476AF4
:00467F79 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00467F7C 6A04                    push 00000004
:00467F7E 6A00                    push 00000000
:00467F80 6A00                    push 00000000
:00467F82 B9B81C4B00              mov ecx, 004B1CB8
:00467F87 E804100100              call 00478F90
:00467F8C 0500180100              add eax, 00011800
:00467F91 50                      push eax
:00467F92 8B4D14                  mov ecx, dword ptr [ebp+14]
:00467F95 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:00467F98 83C101                  add ecx, 00000001
:00467F9B 51                      push ecx
:00467F9C 6A01                    push 00000001
:00467F9E 8B550C                  mov edx, dword ptr [ebp+0C]
:00467FA1 52                      push edx
:00467FA2 8B4508                  mov eax, dword ptr [ebp+08]
:00467FA5 50                      push eax
:00467FA6 E849EB0000              call 00476AF4
:00467FAB 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00467FAE 6A04                    push 00000004
:00467FB0 6A00                    push 00000000
:00467FB2 6A00                    push 00000000
:00467FB4 B9B81C4B00              mov ecx, 004B1CB8
:00467FB9 E8D20F0100              call 00478F90
:00467FBE 05001D0100              add eax, 00011D00
:00467FC3 50                      push eax
:00467FC4 8B4D14                  mov ecx, dword ptr [ebp+14]
:00467FC7 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:00467FCA 83C101                  add ecx, 00000001
:00467FCD 51                      push ecx
:00467FCE 6A01                    push 00000001
:00467FD0 8B550C                  mov edx, dword ptr [ebp+0C]
:00467FD3 52                      push edx
:00467FD4 8B4510                  mov eax, dword ptr [ebp+10]
:00467FD7 50                      push eax
:00467FD8 E817EB0000              call 00476AF4
:00467FDD 83C414                  add esp, 00000014
:00467FE0 E9E2000000              jmp 004680C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467F12(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00467FE5 6A04                    push 00000004
:00467FE7 6A00                    push 00000000
:00467FE9 6A00                    push 00000000
:00467FEB B9B81C4B00              mov ecx, 004B1CB8
:00467FF0 E89B0F0100              call 00478F90
:00467FF5 05000E0100              add eax, 00010E00
:00467FFA 50                      push eax
:00467FFB 6A01                    push 00000001
:00467FFD 8B4D10                  mov ecx, dword ptr [ebp+10]
:00468000 2B4D08                  sub ecx, dword ptr [ebp+08]
:00468003 83C101                  add ecx, 00000001
:00468006 51                      push ecx
:00468007 8B550C                  mov edx, dword ptr [ebp+0C]
:0046800A 52                      push edx
:0046800B 8B4508                  mov eax, dword ptr [ebp+08]
:0046800E 50                      push eax
:0046800F E896EC0000              call 00476CAA
:00468014 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468017 6A04                    push 00000004
:00468019 6A00                    push 00000000
:0046801B 6A00                    push 00000000
:0046801D B9B81C4B00              mov ecx, 004B1CB8
:00468022 E8690F0100              call 00478F90
:00468027 0500130100              add eax, 00011300
:0046802C 50                      push eax
:0046802D 6A01                    push 00000001
:0046802F 8B4D10                  mov ecx, dword ptr [ebp+10]
:00468032 2B4D08                  sub ecx, dword ptr [ebp+08]
:00468035 83C101                  add ecx, 00000001
:00468038 51                      push ecx
:00468039 8B5514                  mov edx, dword ptr [ebp+14]
:0046803C 52                      push edx
:0046803D 8B4508                  mov eax, dword ptr [ebp+08]
:00468040 50                      push eax
:00468041 E864EC0000              call 00476CAA
:00468046 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468049 6A04                    push 00000004
:0046804B 6A00                    push 00000000
:0046804D 6A00                    push 00000000
:0046804F B9B81C4B00              mov ecx, 004B1CB8
:00468054 E8370F0100              call 00478F90
:00468059 0500180100              add eax, 00011800
:0046805E 50                      push eax
:0046805F 8B4D14                  mov ecx, dword ptr [ebp+14]
:00468062 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:00468065 83C101                  add ecx, 00000001
:00468068 51                      push ecx
:00468069 6A01                    push 00000001
:0046806B 8B550C                  mov edx, dword ptr [ebp+0C]
:0046806E 52                      push edx
:0046806F 8B4508                  mov eax, dword ptr [ebp+08]
:00468072 50                      push eax
:00468073 E832EC0000              call 00476CAA
:00468078 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046807B 6A04                    push 00000004
:0046807D 6A00                    push 00000000
:0046807F 6A00                    push 00000000
:00468081 B9B81C4B00              mov ecx, 004B1CB8
:00468086 E8050F0100              call 00478F90
:0046808B 05001D0100              add eax, 00011D00
:00468090 50                      push eax
:00468091 8B4D14                  mov ecx, dword ptr [ebp+14]
:00468094 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:00468097 83C101                  add ecx, 00000001
:0046809A 51                      push ecx
:0046809B 6A01                    push 00000001
:0046809D 8B550C                  mov edx, dword ptr [ebp+0C]
:004680A0 52                      push edx
:004680A1 8B4510                  mov eax, dword ptr [ebp+10]
:004680A4 50                      push eax
:004680A5 E800EC0000              call 00476CAA
:004680AA 83C414                  add esp, 00000014
:004680AD 6A01                    push 00000001
:004680AF 8B4D14                  mov ecx, dword ptr [ebp+14]
:004680B2 51                      push ecx
:004680B3 8B5510                  mov edx, dword ptr [ebp+10]
:004680B6 52                      push edx
:004680B7 8B450C                  mov eax, dword ptr [ebp+0C]
:004680BA 50                      push eax
:004680BB 8B4D08                  mov ecx, dword ptr [ebp+08]
:004680BE 51                      push ecx
:004680BF E858E50000              call 0047661C
:004680C4 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467FE0(U)
|
:004680C7 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004680C9 6A0A                    push 0000000A
:004680CB 6A00                    push 00000000
:004680CD E84BDC0000              call 00475D1D
:004680D2 83C40C                  add esp, 0000000C
:004680D5 E87480FAFF              call 0041014E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00467EF6(U)
|
:004680DA 5D                      pop ebp
:004680DB C3                      ret


:004680DC CC                      int 03
:004680DD CC                      int 03
:004680DE CC                      int 03
:004680DF CC                      int 03

* Referenced by a CALL at Address:
|:00466627   
|
:004680E0 55                      push ebp
:004680E1 8BEC                    mov ebp, esp
:004680E3 51                      push ecx
:004680E4 894DFC                  mov dword ptr [ebp-04], ecx
:004680E7 8B45FC                  mov eax, dword ptr [ebp-04]
:004680EA C7400401000000          mov [eax+04], 00000001
:004680F1 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004680F4 E81CF9FFFF              call 00467A15
:004680F9 8B45FC                  mov eax, dword ptr [ebp-04]
:004680FC 8BE5                    mov esp, ebp
:004680FE 5D                      pop ebp
:004680FF C3                      ret



* Referenced by a CALL at Address:
|:00466666   
|
:00468100 55                      push ebp
:00468101 8BEC                    mov ebp, esp
:00468103 51                      push ecx
:00468104 894DFC                  mov dword ptr [ebp-04], ecx
:00468107 8B45FC                  mov eax, dword ptr [ebp-04]
:0046810A C7400801000000          mov [eax+08], 00000001
:00468111 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00468114 C70100000000            mov dword ptr [ecx], 00000000
:0046811A 8B55FC                  mov edx, dword ptr [ebp-04]
:0046811D C7420400000000          mov [edx+04], 00000000
:00468124 8B45FC                  mov eax, dword ptr [ebp-04]
:00468127 8BE5                    mov esp, ebp
:00468129 5D                      pop ebp
:0046812A C3                      ret


:0046812B CC                      int 03
:0046812C CC                      int 03
:0046812D CC                      int 03
:0046812E CC                      int 03
:0046812F CC                      int 03

* Referenced by a CALL at Addresses:
|:00467B03   , :00467B17   , :00467E42   , :00467E68   
|
:00468130 55                      push ebp
:00468131 8BEC                    mov ebp, esp
:00468133 51                      push ecx
:00468134 894DFC                  mov dword ptr [ebp-04], ecx
:00468137 8B45FC                  mov eax, dword ptr [ebp-04]
:0046813A 83C030                  add eax, 00000030
:0046813D 8BE5                    mov esp, ebp
:0046813F 5D                      pop ebp
:00468140 C3                      ret


:00468141 CC                      int 03
:00468142 CC                      int 03
:00468143 CC                      int 03
:00468144 CC                      int 03
:00468145 CC                      int 03
:00468146 CC                      int 03
:00468147 CC                      int 03
:00468148 CC                      int 03
:00468149 CC                      int 03
:0046814A CC                      int 03
:0046814B CC                      int 03
:0046814C CC                      int 03
:0046814D CC                      int 03
:0046814E CC                      int 03
:0046814F CC                      int 03

* Referenced by a CALL at Addresses:
|:00467A49   , :00467A5B   , :00467A6E   , :00467A81   , :00467A94   
|:00467AA6   , :00467AB9   , :00467ACC   
|
:00468150 55                      push ebp
:00468151 8BEC                    mov ebp, esp
:00468153 51                      push ecx
:00468154 894DFC                  mov dword ptr [ebp-04], ecx
:00468157 8B45FC                  mov eax, dword ptr [ebp-04]
:0046815A 83C034                  add eax, 00000034
:0046815D 8BE5                    mov esp, ebp
:0046815F 5D                      pop ebp
:00468160 C3                      ret


:00468161 CC                      int 03
:00468162 CC                      int 03
:00468163 CC                      int 03
:00468164 CC                      int 03
:00468165 CC                      int 03
:00468166 CC                      int 03
:00468167 CC                      int 03
:00468168 CC                      int 03
:00468169 CC                      int 03
:0046816A CC                      int 03
:0046816B CC                      int 03
:0046816C CC                      int 03
:0046816D CC                      int 03
:0046816E CC                      int 03
:0046816F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042F18A   , :004681ED   
|
:00468170 55                      push ebp
:00468171 8BEC                    mov ebp, esp
:00468173 83EC08                  sub esp, 00000008
:00468176 894DF8                  mov dword ptr [ebp-08], ecx
:00468179 C745FC00000000          mov [ebp-04], 00000000
:00468180 EB09                    jmp 0046818B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004681D6(U)
|
:00468182 8B45FC                  mov eax, dword ptr [ebp-04]
:00468185 83C001                  add eax, 00000001
:00468188 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468180(U)
|
:0046818B 837DFC06                cmp dword ptr [ebp-04], 00000006
:0046818F 7347                    jnb 004681D8
:00468191 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00468194 8B55F8                  mov edx, dword ptr [ebp-08]
:00468197 C7048A00000000          mov dword ptr [edx+4*ecx], 00000000
:0046819E 8B45FC                  mov eax, dword ptr [ebp-04]
:004681A1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004681A4 C744811800000000        mov [ecx+4*eax+18], 00000000
:004681AC 8B55FC                  mov edx, dword ptr [ebp-04]
:004681AF 8B45F8                  mov eax, dword ptr [ebp-08]
:004681B2 C744903000000000        mov [eax+4*edx+30], 00000000
:004681BA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004681BD 8B55F8                  mov edx, dword ptr [ebp-08]
:004681C0 C7448A4800000000        mov [edx+4*ecx+48], 00000000
:004681C8 8B45FC                  mov eax, dword ptr [ebp-04]
:004681CB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004681CE C744816000000000        mov [ecx+4*eax+60], 00000000
:004681D6 EBAA                    jmp 00468182

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046818F(C)
|
:004681D8 8B55F8                  mov edx, dword ptr [ebp-08]
:004681DB C6427800                mov [edx+78], 00
:004681DF 8BE5                    mov esp, ebp
:004681E1 5D                      pop ebp
:004681E2 C3                      ret



* Referenced by a CALL at Address:
|:004690FC   
|
:004681E3 55                      push ebp
:004681E4 8BEC                    mov ebp, esp
:004681E6 51                      push ecx
:004681E7 894DFC                  mov dword ptr [ebp-04], ecx
:004681EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004681ED E87EFFFFFF              call 00468170
:004681F2 8B45FC                  mov eax, dword ptr [ebp-04]
:004681F5 C7407C00000000          mov [eax+7C], 00000000
:004681FC 8B45FC                  mov eax, dword ptr [ebp-04]
:004681FF 8BE5                    mov esp, ebp
:00468201 5D                      pop ebp
:00468202 C3                      ret



* Referenced by a CALL at Addresses:
|:00468355   , :00468390   , :004683AE   
|
:00468203 55                      push ebp
:00468204 8BEC                    mov ebp, esp
:00468206 83EC08                  sub esp, 00000008
:00468209 894DF8                  mov dword ptr [ebp-08], ecx
:0046820C 8B4510                  mov eax, dword ptr [ebp+10]
:0046820F 8B4D08                  mov ecx, dword ptr [ebp+08]
:00468212 8D5401F8                lea edx, dword ptr [ecx+eax-08]
:00468216 8955FC                  mov dword ptr [ebp-04], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468219 6A04                    push 00000004
:0046821B 6A00                    push 00000000
:0046821D 8B4514                  mov eax, dword ptr [ebp+14]
:00468220 8B0C85F81D4800          mov ecx, dword ptr [4*eax+00481DF8]
:00468227 51                      push ecx
:00468228 B9A01C4B00              mov ecx, 004B1CA0
:0046822D E85E0D0100              call 00478F90
:00468232 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468233 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468235 6A08                    push 00000008
:00468237 8B550C                  mov edx, dword ptr [ebp+0C]
:0046823A 52                      push edx
:0046823B 8B4508                  mov eax, dword ptr [ebp+08]
:0046823E 50                      push eax
:0046823F E8B0E80000              call 00476AF4
:00468244 83C414                  add esp, 00000014
:00468247 837D2000                cmp dword ptr [ebp+20], 00000000
:0046824B 744E                    je 0046829B
:0046824D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00468250 83C108                  add ecx, 00000008
:00468253 894D08                  mov dword ptr [ebp+08], ecx
:00468256 EB09                    jmp 00468261

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468297(U)
|
:00468258 8B5508                  mov edx, dword ptr [ebp+08]
:0046825B 83C208                  add edx, 00000008
:0046825E 895508                  mov dword ptr [ebp+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468256(U)
|
:00468261 8B4508                  mov eax, dword ptr [ebp+08]
:00468264 3B45FC                  cmp eax, dword ptr [ebp-04]
:00468267 7330                    jnb 00468299

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468269 6A04                    push 00000004
:0046826B 6A00                    push 00000000
:0046826D 8B4D18                  mov ecx, dword ptr [ebp+18]
:00468270 8B148DF81D4800          mov edx, dword ptr [4*ecx+00481DF8]
:00468277 52                      push edx
:00468278 B9A01C4B00              mov ecx, 004B1CA0
:0046827D E80E0D0100              call 00478F90
:00468282 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468283 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468285 6A08                    push 00000008
:00468287 8B450C                  mov eax, dword ptr [ebp+0C]
:0046828A 50                      push eax
:0046828B 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046828E 51                      push ecx
:0046828F E860E80000              call 00476AF4
:00468294 83C414                  add esp, 00000014
:00468297 EBBF                    jmp 00468258

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468267(C)
|
:00468299 EB06                    jmp 004682A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046824B(C)
|
:0046829B 8B55FC                  mov edx, dword ptr [ebp-04]
:0046829E 895508                  mov dword ptr [ebp+08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468299(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004682A1 6A04                    push 00000004
:004682A3 6A00                    push 00000000
:004682A5 8B451C                  mov eax, dword ptr [ebp+1C]
:004682A8 8B0C85F81D4800          mov ecx, dword ptr [4*eax+00481DF8]
:004682AF 51                      push ecx
:004682B0 B9A01C4B00              mov ecx, 004B1CA0
:004682B5 E8D60C0100              call 00478F90
:004682BA 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004682BB 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004682BD 6A08                    push 00000008
:004682BF 8B550C                  mov edx, dword ptr [ebp+0C]
:004682C2 52                      push edx
:004682C3 8B4508                  mov eax, dword ptr [ebp+08]
:004682C6 50                      push eax
:004682C7 E828E80000              call 00476AF4
:004682CC 83C414                  add esp, 00000014
:004682CF 8BE5                    mov esp, ebp
:004682D1 5D                      pop ebp
:004682D2 C21C00                  ret 001C



* Referenced by a CALL at Addresses:
|:0043070F   , :004353BE   , :0045EEDE   , :004684E1   
|
:004682D5 55                      push ebp
:004682D6 8BEC                    mov ebp, esp
:004682D8 83EC08                  sub esp, 00000008
:004682DB 894DF8                  mov dword ptr [ebp-08], ecx
:004682DE C745FC00000000          mov [ebp-04], 00000000
:004682E5 8B4518                  mov eax, dword ptr [ebp+18]
:004682E8 50                      push eax
:004682E9 B978544B00              mov ecx, 004B5478
:004682EE E81D0E0000              call 00469110
:004682F3 E83B7EFAFF              call 00410133
:004682F8 837D1C00                cmp dword ptr [ebp+1C], 00000000
:004682FC 7529                    jne 00468327
:004682FE 68FFFF0000              push 0000FFFF
:00468303 8B4D14                  mov ecx, dword ptr [ebp+14]
:00468306 83E910                  sub ecx, 00000010
:00468309 51                      push ecx
:0046830A 8B5510                  mov edx, dword ptr [ebp+10]
:0046830D 83EA10                  sub edx, 00000010
:00468310 52                      push edx
:00468311 8B450C                  mov eax, dword ptr [ebp+0C]
:00468314 83C008                  add eax, 00000008
:00468317 50                      push eax
:00468318 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046831B 83C108                  add ecx, 00000008
:0046831E 51                      push ecx
:0046831F E89781FAFF              call 004104BB
:00468324 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004682FC(C)
|
:00468327 8B5514                  mov edx, dword ptr [ebp+14]
:0046832A 8B450C                  mov eax, dword ptr [ebp+0C]
:0046832D 8D4C10F8                lea ecx, dword ptr [eax+edx-08]
:00468331 894DFC                  mov dword ptr [ebp-04], ecx
:00468334 6A00                    push 00000000
:00468336 E8D4D20000              call 0047560F
:0046833B 83C404                  add esp, 00000004
:0046833E 6A01                    push 00000001
:00468340 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468342 6A04                    push 00000004
:00468344 6A00                    push 00000000
:00468346 8B5510                  mov edx, dword ptr [ebp+10]
:00468349 52                      push edx
:0046834A 8B450C                  mov eax, dword ptr [ebp+0C]
:0046834D 50                      push eax
:0046834E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00468351 51                      push ecx
:00468352 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00468355 E8A9FEFFFF              call 00468203
:0046835A 8B550C                  mov edx, dword ptr [ebp+0C]
:0046835D 83C208                  add edx, 00000008
:00468360 89550C                  mov dword ptr [ebp+0C], edx
:00468363 EB09                    jmp 0046836E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468395(U)
|
:00468365 8B450C                  mov eax, dword ptr [ebp+0C]
:00468368 83C008                  add eax, 00000008
:0046836B 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468363(U)
|
:0046836E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00468371 3B4DFC                  cmp ecx, dword ptr [ebp-04]
:00468374 7321                    jnb 00468397
:00468376 6A00                    push 00000000

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00468378 6A07                    push 00000007
:0046837A 68FFFF0000              push 0000FFFF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046837F 6A05                    push 00000005
:00468381 8B5510                  mov edx, dword ptr [ebp+10]
:00468384 52                      push edx
:00468385 8B450C                  mov eax, dword ptr [ebp+0C]
:00468388 50                      push eax
:00468389 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046838C 51                      push ecx
:0046838D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00468390 E86EFEFFFF              call 00468203
:00468395 EBCE                    jmp 00468365

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468374(C)
|
:00468397 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00468399 6A03                    push 00000003

* Possible Reference to String Resource ID=00006: ""
                                  |
:0046839B 6A06                    push 00000006

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046839D 6A02                    push 00000002
:0046839F 8B5510                  mov edx, dword ptr [ebp+10]
:004683A2 52                      push edx
:004683A3 8B450C                  mov eax, dword ptr [ebp+0C]
:004683A6 50                      push eax
:004683A7 8B4D08                  mov ecx, dword ptr [ebp+08]
:004683AA 51                      push ecx
:004683AB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004683AE E850FEFFFF              call 00468203
:004683B3 E8967DFAFF              call 0041014E
:004683B8 8BE5                    mov esp, ebp
:004683BA 5D                      pop ebp
:004683BB C21800                  ret 0018



* Referenced by a CALL at Addresses:
|:0042FF88   , :004684C3   
|
:004683BE 55                      push ebp
:004683BF 8BEC                    mov ebp, esp
:004683C1 83EC0C                  sub esp, 0000000C
:004683C4 894DF4                  mov dword ptr [ebp-0C], ecx
:004683C7 8B45F4                  mov eax, dword ptr [ebp-0C]
:004683CA 33C9                    xor ecx, ecx
:004683CC 8A4878                  mov cl, byte ptr [eax+78]
:004683CF 8B55F4                  mov edx, dword ptr [ebp-0C]
:004683D2 8B4508                  mov eax, dword ptr [ebp+08]
:004683D5 89048A                  mov dword ptr [edx+4*ecx], eax
:004683D8 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004683DB 33D2                    xor edx, edx
:004683DD 8A5178                  mov dl, byte ptr [ecx+78]
:004683E0 8B45F4                  mov eax, dword ptr [ebp-0C]
:004683E3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004683E6 894C9018                mov dword ptr [eax+4*edx+18], ecx
:004683EA 8B55F4                  mov edx, dword ptr [ebp-0C]
:004683ED 33C0                    xor eax, eax
:004683EF 8A4278                  mov al, byte ptr [edx+78]
:004683F2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004683F5 8B5510                  mov edx, dword ptr [ebp+10]
:004683F8 89548130                mov dword ptr [ecx+4*eax+30], edx
:004683FC 8B45F4                  mov eax, dword ptr [ebp-0C]
:004683FF 33C9                    xor ecx, ecx
:00468401 8A4878                  mov cl, byte ptr [eax+78]
:00468404 8B55F4                  mov edx, dword ptr [ebp-0C]
:00468407 8B4514                  mov eax, dword ptr [ebp+14]
:0046840A 89448A48                mov dword ptr [edx+4*ecx+48], eax
:0046840E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00468411 0FAF4D14                imul ecx, dword ptr [ebp+14]
:00468415 8B55F4                  mov edx, dword ptr [ebp-0C]
:00468418 33C0                    xor eax, eax
:0046841A 8A4278                  mov al, byte ptr [edx+78]
:0046841D 8B55F4                  mov edx, dword ptr [ebp-0C]
:00468420 894C8260                mov dword ptr [edx+4*eax+60], ecx
:00468424 C745F800000000          mov [ebp-08], 00000000
:0046842B C745FC00000000          mov [ebp-04], 00000000
:00468432 EB09                    jmp 0046843D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046845A(U)
|
:00468434 8B45F8                  mov eax, dword ptr [ebp-08]
:00468437 83C001                  add eax, 00000001
:0046843A 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468432(U)
|
:0046843D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00468440 33D2                    xor edx, edx
:00468442 8A5178                  mov dl, byte ptr [ecx+78]
:00468445 3955F8                  cmp dword ptr [ebp-08], edx
:00468448 7312                    jnb 0046845C
:0046844A 8B45F8                  mov eax, dword ptr [ebp-08]
:0046844D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00468450 8B55FC                  mov edx, dword ptr [ebp-04]
:00468453 03548160                add edx, dword ptr [ecx+4*eax+60]
:00468457 8955FC                  mov dword ptr [ebp-04], edx
:0046845A EBD8                    jmp 00468434

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468448(C)
|
:0046845C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046845F 33D2                    xor edx, edx
:00468461 8A5178                  mov dl, byte ptr [ecx+78]
:00468464 83FA06                  cmp edx, 00000006
:00468467 7D0F                    jge 00468478
:00468469 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046846C 8A4878                  mov cl, byte ptr [eax+78]
:0046846F 80C101                  add cl, 01
:00468472 8B55F4                  mov edx, dword ptr [ebp-0C]
:00468475 884A78                  mov byte ptr [edx+78], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468467(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468478 6A04                    push 00000004
:0046847A 6A00                    push 00000000
:0046847C 8B45FC                  mov eax, dword ptr [ebp-04]
:0046847F 50                      push eax
:00468480 B9007D4A00              mov ecx, 004A7D00
:00468485 E8060B0100              call 00478F90
:0046848A 50                      push eax
:0046848B 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046848E 51                      push ecx
:0046848F 8B5510                  mov edx, dword ptr [ebp+10]
:00468492 52                      push edx
:00468493 8B450C                  mov eax, dword ptr [ebp+0C]
:00468496 50                      push eax
:00468497 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046849A 51                      push ecx
:0046849B E8D77CFAFF              call 00410177
:004684A0 83C414                  add esp, 00000014
:004684A3 8BE5                    mov esp, ebp
:004684A5 5D                      pop ebp
:004684A6 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0042FE7B   , :0043073E   , :004313CA   , :00431750   
|
:004684A9 55                      push ebp
:004684AA 8BEC                    mov ebp, esp
:004684AC 51                      push ecx
:004684AD 894DFC                  mov dword ptr [ebp-04], ecx
:004684B0 8B4514                  mov eax, dword ptr [ebp+14]
:004684B3 50                      push eax
:004684B4 8B4D10                  mov ecx, dword ptr [ebp+10]
:004684B7 51                      push ecx
:004684B8 8B550C                  mov edx, dword ptr [ebp+0C]
:004684BB 52                      push edx
:004684BC 8B4508                  mov eax, dword ptr [ebp+08]
:004684BF 50                      push eax
:004684C0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004684C3 E8F6FEFFFF              call 004683BE
:004684C8 6A00                    push 00000000
:004684CA 8B4D18                  mov ecx, dword ptr [ebp+18]
:004684CD 51                      push ecx
:004684CE 8B5514                  mov edx, dword ptr [ebp+14]
:004684D1 52                      push edx
:004684D2 8B4510                  mov eax, dword ptr [ebp+10]
:004684D5 50                      push eax
:004684D6 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004684D9 51                      push ecx
:004684DA 8B5508                  mov edx, dword ptr [ebp+08]
:004684DD 52                      push edx
:004684DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004684E1 E8EFFDFFFF              call 004682D5
:004684E6 8BE5                    mov esp, ebp
:004684E8 5D                      pop ebp
:004684E9 C21400                  ret 0014



* Referenced by a CALL at Address:
|:0046851D   
|
:004684EC 55                      push ebp
:004684ED 8BEC                    mov ebp, esp
:004684EF 51                      push ecx
:004684F0 894DFC                  mov dword ptr [ebp-04], ecx
:004684F3 8B45FC                  mov eax, dword ptr [ebp-04]
:004684F6 33C9                    xor ecx, ecx
:004684F8 8A4878                  mov cl, byte ptr [eax+78]
:004684FB 85C9                    test ecx, ecx
:004684FD 7E0E                    jle 0046850D
:004684FF 8B55FC                  mov edx, dword ptr [ebp-04]
:00468502 8A4278                  mov al, byte ptr [edx+78]
:00468505 2C01                    sub al, 01
:00468507 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046850A 884178                  mov byte ptr [ecx+78], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004684FD(C)
|
:0046850D 8BE5                    mov esp, ebp
:0046850F 5D                      pop ebp
:00468510 C3                      ret



* Referenced by a CALL at Addresses:
|:00430350   , :00430F5B   , :0043142A   , :004318FD   
|
:00468511 55                      push ebp
:00468512 8BEC                    mov ebp, esp
:00468514 83EC0C                  sub esp, 0000000C
:00468517 894DF4                  mov dword ptr [ebp-0C], ecx
:0046851A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046851D E8CAFFFFFF              call 004684EC
:00468522 C745F800000000          mov [ebp-08], 00000000
:00468529 C745FC00000000          mov [ebp-04], 00000000
:00468530 EB09                    jmp 0046853B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468558(U)
|
:00468532 8B45F8                  mov eax, dword ptr [ebp-08]
:00468535 83C001                  add eax, 00000001
:00468538 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468530(U)
|
:0046853B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046853E 33D2                    xor edx, edx
:00468540 8A5178                  mov dl, byte ptr [ecx+78]
:00468543 3955F8                  cmp dword ptr [ebp-08], edx
:00468546 7312                    jnb 0046855A
:00468548 8B45F8                  mov eax, dword ptr [ebp-08]
:0046854B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046854E 8B55FC                  mov edx, dword ptr [ebp-04]
:00468551 03548160                add edx, dword ptr [ecx+4*eax+60]
:00468555 8955FC                  mov dword ptr [ebp-04], edx
:00468558 EBD8                    jmp 00468532

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468546(C)
|
:0046855A E8D47BFAFF              call 00410133

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046855F 6A04                    push 00000004
:00468561 6A00                    push 00000000
:00468563 8B45FC                  mov eax, dword ptr [ebp-04]
:00468566 50                      push eax
:00468567 B9007D4A00              mov ecx, 004A7D00
:0046856C E81F0A0100              call 00478F90
:00468571 50                      push eax
:00468572 6A00                    push 00000000
:00468574 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00468577 33D2                    xor edx, edx
:00468579 8A5178                  mov dl, byte ptr [ecx+78]
:0046857C 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046857F 8B4C9048                mov ecx, dword ptr [eax+4*edx+48]
:00468583 51                      push ecx
:00468584 8B55F4                  mov edx, dword ptr [ebp-0C]
:00468587 33C0                    xor eax, eax
:00468589 8A4278                  mov al, byte ptr [edx+78]
:0046858C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046858F 8B548130                mov edx, dword ptr [ecx+4*eax+30]
:00468593 52                      push edx
:00468594 8B45F4                  mov eax, dword ptr [ebp-0C]
:00468597 33C9                    xor ecx, ecx
:00468599 8A4878                  mov cl, byte ptr [eax+78]
:0046859C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046859F 8B448A18                mov eax, dword ptr [edx+4*ecx+18]
:004685A3 50                      push eax
:004685A4 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004685A7 33D2                    xor edx, edx
:004685A9 8A5178                  mov dl, byte ptr [ecx+78]
:004685AC 8B45F4                  mov eax, dword ptr [ebp-0C]
:004685AF 8B0C90                  mov ecx, dword ptr [eax+4*edx]
:004685B2 51                      push ecx
:004685B3 E8EA7BFAFF              call 004101A2
:004685B8 83C418                  add esp, 00000018
:004685BB E88E7BFAFF              call 0041014E
:004685C0 8BE5                    mov esp, ebp
:004685C2 5D                      pop ebp
:004685C3 C3                      ret



* Referenced by a CALL at Address:
|:00430801   
|
:004685C4 55                      push ebp
:004685C5 8BEC                    mov ebp, esp
:004685C7 51                      push ecx
:004685C8 894DFC                  mov dword ptr [ebp-04], ecx
:004685CB 6A01                    push 00000001
:004685CD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004685D0 E8D1030000              call 004689A6

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004685D5 6A03                    push 00000003
:004685D7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004685DA E8C7030000              call 004689A6
:004685DF 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004685E2 E85D040000              call 00468A44
:004685E7 6A00                    push 00000000
:004685E9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004685EC E8B5030000              call 004689A6
:004685F1 8BE5                    mov esp, ebp
:004685F3 5D                      pop ebp
:004685F4 C3                      ret



* Referenced by a CALL at Address:
|:00430CAC   
|
:004685F5 55                      push ebp
:004685F6 8BEC                    mov ebp, esp
:004685F8 83EC1C                  sub esp, 0000001C
:004685FB 894DE4                  mov dword ptr [ebp-1C], ecx
:004685FE B928B44800              mov ecx, 0048B428
:00468603 E8FA11FBFF              call 00419802
:00468608 B928B44800              mov ecx, 0048B428
:0046860D E85412FBFF              call 00419866
:00468612 8945FC                  mov dword ptr [ebp-04], eax
:00468615 B928B44800              mov ecx, 0048B428
:0046861A E85812FBFF              call 00419877
:0046861F 8945F8                  mov dword ptr [ebp-08], eax
:00468622 8B45E4                  mov eax, dword ptr [ebp-1C]
:00468625 8B4814                  mov ecx, dword ptr [eax+14]
:00468628 894DF4                  mov dword ptr [ebp-0C], ecx
:0046862B 8B55E4                  mov edx, dword ptr [ebp-1C]
:0046862E 8B45FC                  mov eax, dword ptr [ebp-04]
:00468631 3B02                    cmp eax, dword ptr [edx]
:00468633 0F8CB9020000            jl 004688F2
:00468639 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0046863C 8B55F8                  mov edx, dword ptr [ebp-08]
:0046863F 3B5104                  cmp edx, dword ptr [ecx+04]
:00468642 0F8CAA020000            jl 004688F2
:00468648 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046864B 8B08                    mov ecx, dword ptr [eax]
:0046864D 83C110                  add ecx, 00000010
:00468650 394DFC                  cmp dword ptr [ebp-04], ecx
:00468653 0F8D99020000            jnl 004688F2
:00468659 8B55E4                  mov edx, dword ptr [ebp-1C]
:0046865C 8B4204                  mov eax, dword ptr [edx+04]
:0046865F 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00468662 034108                  add eax, dword ptr [ecx+08]
:00468665 3945F8                  cmp dword ptr [ebp-08], eax
:00468668 0F8D84020000            jnl 004688F2
:0046866E B928B44800              mov ecx, 0048B428
:00468673 E8D511FBFF              call 0041984D
:00468678 83F801                  cmp eax, 00000001
:0046867B 0F8571020000            jne 004688F2
:00468681 8B55E4                  mov edx, dword ptr [ebp-1C]
:00468684 8B45F8                  mov eax, dword ptr [ebp-08]
:00468687 3B4204                  cmp eax, dword ptr [edx+04]
:0046868A 7C48                    jl 004686D4
:0046868C 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0046868F 8B5104                  mov edx, dword ptr [ecx+04]
:00468692 83C210                  add edx, 00000010
:00468695 3955F8                  cmp dword ptr [ebp-08], edx
:00468698 7D3A                    jge 004686D4
:0046869A 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046869D 83781400                cmp dword ptr [eax+14], 00000000
:004686A1 762C                    jbe 004686CF
:004686A3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004686A6 83E901                  sub ecx, 00000001
:004686A9 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004686AC 6A02                    push 00000002
:004686AE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004686B1 E8F0020000              call 004689A6
:004686B6 B928B44800              mov ecx, 0048B428
:004686BB E88F17FBFF              call 00419E4F
:004686C0 E82B70FCFF              call 0042F6F0
:004686C5 6A01                    push 00000001
:004686C7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004686CA E8D7020000              call 004689A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004686A1(C)
|
:004686CF E91E020000              jmp 004688F2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046868A(C), :00468698(C)
|
:004686D4 8B55E4                  mov edx, dword ptr [ebp-1C]
:004686D7 8B4204                  mov eax, dword ptr [edx+04]
:004686DA 83C010                  add eax, 00000010
:004686DD 3945F8                  cmp dword ptr [ebp-08], eax
:004686E0 7C42                    jl 00468724
:004686E2 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004686E5 E8460A0000              call 00469130
:004686EA 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004686ED 8B5104                  mov edx, dword ptr [ecx+04]
:004686F0 03D0                    add edx, eax
:004686F2 3955F8                  cmp dword ptr [ebp-08], edx
:004686F5 7D2D                    jge 00468724
:004686F7 8B45E4                  mov eax, dword ptr [ebp-1C]
:004686FA 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004686FD 8B5014                  mov edx, dword ptr [eax+14]
:00468700 3B510C                  cmp edx, dword ptr [ecx+0C]
:00468703 7709                    ja 0046870E
:00468705 C745F400000000          mov [ebp-0C], 00000000
:0046870C EB0C                    jmp 0046871A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468703(C)
|
:0046870E 8B45E4                  mov eax, dword ptr [ebp-1C]
:00468711 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00468714 2B480C                  sub ecx, dword ptr [eax+0C]
:00468717 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046870C(U)
|
:0046871A E8D16FFCFF              call 0042F6F0
:0046871F E9CE010000              jmp 004688F2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004686E0(C), :004686F5(C)
|
:00468724 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00468727 E8040A0000              call 00469130
:0046872C 8B55E4                  mov edx, dword ptr [ebp-1C]
:0046872F 8B4A04                  mov ecx, dword ptr [edx+04]
:00468732 03C8                    add ecx, eax
:00468734 394DF8                  cmp dword ptr [ebp-08], ecx
:00468737 0F8CE3000000            jl 00468820
:0046873D 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00468740 E8EB090000              call 00469130
:00468745 8B55E4                  mov edx, dword ptr [ebp-1C]
:00468748 8B4A04                  mov ecx, dword ptr [edx+04]
:0046874B 8D540110                lea edx, dword ptr [ecx+eax+10]
:0046874F 3955F8                  cmp dword ptr [ebp-08], edx
:00468752 0F8DC8000000            jnl 00468820
:00468758 C745E800000000          mov [ebp-18], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468816(U)
|
:0046875F B928B44800              mov ecx, 0048B428
:00468764 E8E410FBFF              call 0041984D
:00468769 83F801                  cmp eax, 00000001
:0046876C 0F85A9000000            jne 0046881B
:00468772 B928B44800              mov ecx, 0048B428
:00468777 E88610FBFF              call 00419802
:0046877C B928B44800              mov ecx, 0048B428
:00468781 E8E010FBFF              call 00419866
:00468786 8945F0                  mov dword ptr [ebp-10], eax
:00468789 B928B44800              mov ecx, 0048B428
:0046878E E8E410FBFF              call 00419877
:00468793 8945EC                  mov dword ptr [ebp-14], eax
:00468796 8B45E4                  mov eax, dword ptr [ebp-1C]
:00468799 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046879C 3B08                    cmp ecx, dword ptr [eax]
:0046879E 7C30                    jl 004687D0
:004687A0 8B55E4                  mov edx, dword ptr [ebp-1C]
:004687A3 8B4204                  mov eax, dword ptr [edx+04]
:004687A6 83C010                  add eax, 00000010
:004687A9 3945EC                  cmp dword ptr [ebp-14], eax
:004687AC 7C22                    jl 004687D0
:004687AE 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004687B1 8B11                    mov edx, dword ptr [ecx]
:004687B3 83C210                  add edx, 00000010
:004687B6 3955F0                  cmp dword ptr [ebp-10], edx
:004687B9 7D15                    jge 004687D0
:004687BB 8B45E4                  mov eax, dword ptr [ebp-1C]
:004687BE 8B4804                  mov ecx, dword ptr [eax+04]
:004687C1 8B55E4                  mov edx, dword ptr [ebp-1C]
:004687C4 8B4208                  mov eax, dword ptr [edx+08]
:004687C7 8D4C01F0                lea ecx, dword ptr [ecx+eax-10]
:004687CB 394DEC                  cmp dword ptr [ebp-14], ecx
:004687CE 7C02                    jl 004687D2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046879E(C), :004687AC(C), :004687B9(C)
|
:004687D0 EB49                    jmp 0046881B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004687CE(C)
|
:004687D2 8B55EC                  mov edx, dword ptr [ebp-14]
:004687D5 52                      push edx
:004687D6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004687D9 E882090000              call 00469160
:004687DE 8945F4                  mov dword ptr [ebp-0C], eax
:004687E1 8B45E4                  mov eax, dword ptr [ebp-1C]
:004687E4 8B4814                  mov ecx, dword ptr [eax+14]
:004687E7 3B4DF4                  cmp ecx, dword ptr [ebp-0C]
:004687EA 7407                    je 004687F3
:004687EC C745E801000000          mov [ebp-18], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004687EA(C)
|
:004687F3 8B55F4                  mov edx, dword ptr [ebp-0C]
:004687F6 52                      push edx
:004687F7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004687FA E834010000              call 00468933
:004687FF 837DE800                cmp dword ptr [ebp-18], 00000000
:00468803 7411                    je 00468816
:00468805 B928B44800              mov ecx, 0048B428
:0046880A E84016FBFF              call 00419E4F
:0046880F C745E800000000          mov [ebp-18], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468803(C)
|
:00468816 E944FFFFFF              jmp 0046875F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046876C(C), :004687D0(U)
|
:0046881B E9D2000000              jmp 004688F2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00468737(C), :00468752(C)
|
:00468820 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00468823 E808090000              call 00469130
:00468828 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0046882B 8B5104                  mov edx, dword ptr [ecx+04]
:0046882E 8D440210                lea eax, dword ptr [edx+eax+10]
:00468832 3945F8                  cmp dword ptr [ebp-08], eax
:00468835 7C55                    jl 0046888C
:00468837 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0046883A 8B5104                  mov edx, dword ptr [ecx+04]
:0046883D 8B45E4                  mov eax, dword ptr [ebp-1C]
:00468840 8B4808                  mov ecx, dword ptr [eax+08]
:00468843 8D540AF0                lea edx, dword ptr [edx+ecx-10]
:00468847 3955F8                  cmp dword ptr [ebp-08], edx
:0046884A 7D40                    jge 0046888C
:0046884C 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046884F 8B4814                  mov ecx, dword ptr [eax+14]
:00468852 8B55E4                  mov edx, dword ptr [ebp-1C]
:00468855 034A0C                  add ecx, dword ptr [edx+0C]
:00468858 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046885B 8B55E4                  mov edx, dword ptr [ebp-1C]
:0046885E 8B4010                  mov eax, dword ptr [eax+10]
:00468861 2B420C                  sub eax, dword ptr [edx+0C]
:00468864 3BC8                    cmp ecx, eax
:00468866 7211                    jb 00468879
:00468868 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0046886B 8B55E4                  mov edx, dword ptr [ebp-1C]
:0046886E 8B4110                  mov eax, dword ptr [ecx+10]
:00468871 2B420C                  sub eax, dword ptr [edx+0C]
:00468874 8945F4                  mov dword ptr [ebp-0C], eax
:00468877 EB0C                    jmp 00468885

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468866(C)
|
:00468879 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:0046887C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046887F 03510C                  add edx, dword ptr [ecx+0C]
:00468882 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468877(U)
|
:00468885 E8666EFCFF              call 0042F6F0
:0046888A EB66                    jmp 004688F2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00468835(C), :0046884A(C)
|
:0046888C 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046888F 8B4804                  mov ecx, dword ptr [eax+04]
:00468892 8B55E4                  mov edx, dword ptr [ebp-1C]
:00468895 8B4208                  mov eax, dword ptr [edx+08]
:00468898 8D4C01F0                lea ecx, dword ptr [ecx+eax-10]
:0046889C 394DF8                  cmp dword ptr [ebp-08], ecx
:0046889F 7C51                    jl 004688F2
:004688A1 8B55E4                  mov edx, dword ptr [ebp-1C]
:004688A4 8B4204                  mov eax, dword ptr [edx+04]
:004688A7 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004688AA 034108                  add eax, dword ptr [ecx+08]
:004688AD 3945F8                  cmp dword ptr [ebp-08], eax
:004688B0 7D40                    jge 004688F2
:004688B2 8B55E4                  mov edx, dword ptr [ebp-1C]
:004688B5 8B45E4                  mov eax, dword ptr [ebp-1C]
:004688B8 8B4A10                  mov ecx, dword ptr [edx+10]
:004688BB 2B480C                  sub ecx, dword ptr [eax+0C]
:004688BE 8B55E4                  mov edx, dword ptr [ebp-1C]
:004688C1 394A14                  cmp dword ptr [edx+14], ecx
:004688C4 732C                    jnb 004688F2
:004688C6 8B45F4                  mov eax, dword ptr [ebp-0C]
:004688C9 83C001                  add eax, 00000001
:004688CC 8945F4                  mov dword ptr [ebp-0C], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004688CF 6A04                    push 00000004
:004688D1 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004688D4 E8CD000000              call 004689A6
:004688D9 B928B44800              mov ecx, 0048B428
:004688DE E86C15FBFF              call 00419E4F
:004688E3 E8086EFCFF              call 0042F6F0

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004688E8 6A03                    push 00000003
:004688EA 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004688ED E8B4000000              call 004689A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00468633(C), :00468642(C), :00468653(C), :00468668(C), :0046867B(C)
|:004686CF(U), :0046871F(U), :0046881B(U), :0046888A(U), :0046889F(C)
|:004688B0(C), :004688C4(C)
|
:004688F2 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:004688F5 51                      push ecx
:004688F6 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:004688F9 E835000000              call 00468933
:004688FE 8B55E4                  mov edx, dword ptr [ebp-1C]
:00468901 8B4214                  mov eax, dword ptr [edx+14]
:00468904 8BE5                    mov esp, ebp
:00468906 5D                      pop ebp
:00468907 C3                      ret


:00468908 55                      push ebp
:00468909 8BEC                    mov ebp, esp
:0046890B 51                      push ecx
:0046890C 894DFC                  mov dword ptr [ebp-04], ecx
:0046890F 8B45FC                  mov eax, dword ptr [ebp-04]
:00468912 8B4810                  mov ecx, dword ptr [eax+10]
:00468915 3B4D08                  cmp ecx, dword ptr [ebp+08]
:00468918 7413                    je 0046892D
:0046891A 6A00                    push 00000000
:0046891C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046891F E80F000000              call 00468933
:00468924 8B55FC                  mov edx, dword ptr [ebp-04]
:00468927 8B4508                  mov eax, dword ptr [ebp+08]
:0046892A 894210                  mov dword ptr [edx+10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468918(C)
|
:0046892D 8BE5                    mov esp, ebp
:0046892F 5D                      pop ebp
:00468930 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004307F9   , :004687FA   , :004688F9   , :0046891F   
|
:00468933 55                      push ebp
:00468934 8BEC                    mov ebp, esp
:00468936 51                      push ecx
:00468937 894DFC                  mov dword ptr [ebp-04], ecx
:0046893A 8B45FC                  mov eax, dword ptr [ebp-04]
:0046893D 8B4814                  mov ecx, dword ptr [eax+14]
:00468940 3B4D08                  cmp ecx, dword ptr [ebp+08]
:00468943 745B                    je 004689A0
:00468945 6A00                    push 00000000
:00468947 E8C3CC0000              call 0047560F
:0046894C 83C404                  add esp, 00000004
:0046894F E8DF77FAFF              call 00410133

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468954 6A04                    push 00000004
:00468956 6A00                    push 00000000
:00468958 6A00                    push 00000000
:0046895A B9A01C4B00              mov ecx, 004B1CA0
:0046895F E82C060100              call 00478F90
:00468964 50                      push eax
:00468965 6A10                    push 00000010
:00468967 6A10                    push 00000010
:00468969 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046896C E8BF070000              call 00469130
:00468971 8B55FC                  mov edx, dword ptr [ebp-04]
:00468974 8B4A04                  mov ecx, dword ptr [edx+04]
:00468977 03C8                    add ecx, eax
:00468979 51                      push ecx
:0046897A 8B55FC                  mov edx, dword ptr [ebp-04]
:0046897D 8B02                    mov eax, dword ptr [edx]
:0046897F 50                      push eax
:00468980 E86FE10000              call 00476AF4
:00468985 83C414                  add esp, 00000014
:00468988 E8C177FAFF              call 0041014E
:0046898D 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00468990 8B5508                  mov edx, dword ptr [ebp+08]
:00468993 895114                  mov dword ptr [ecx+14], edx
:00468996 6A00                    push 00000000
:00468998 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046899B E806000000              call 004689A6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468943(C)
|
:004689A0 8BE5                    mov esp, ebp
:004689A2 5D                      pop ebp
:004689A3 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:004685D0   , :004685DA   , :004685EC   , :004686B1   , :004686CA   
|:004688D4   , :004688ED   , :0046899B   
|
:004689A6 55                      push ebp
:004689A7 8BEC                    mov ebp, esp
:004689A9 83EC0C                  sub esp, 0000000C
:004689AC 894DF8                  mov dword ptr [ebp-08], ecx
:004689AF 8B45F8                  mov eax, dword ptr [ebp-08]
:004689B2 8B4804                  mov ecx, dword ptr [eax+04]
:004689B5 894DFC                  mov dword ptr [ebp-04], ecx
:004689B8 8A5508                  mov dl, byte ptr [ebp+08]
:004689BB 8855F4                  mov byte ptr [ebp-0C], dl
:004689BE 807DF400                cmp byte ptr [ebp-0C], 00
:004689C2 740E                    je 004689D2
:004689C4 807DF402                cmp byte ptr [ebp-0C], 02
:004689C8 762A                    jbe 004689F4
:004689CA 807DF404                cmp byte ptr [ebp-0C], 04
:004689CE 7614                    jbe 004689E4
:004689D0 EB22                    jmp 004689F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004689C2(C)
|
:004689D2 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004689D5 E856070000              call 00469130
:004689DA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004689DD 03C8                    add ecx, eax
:004689DF 894DFC                  mov dword ptr [ebp-04], ecx
:004689E2 EB10                    jmp 004689F4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004689CE(C)
|
:004689E4 8B55F8                  mov edx, dword ptr [ebp-08]
:004689E7 8B4208                  mov eax, dword ptr [edx+08]
:004689EA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004689ED 8D5401F0                lea edx, dword ptr [ecx+eax-10]
:004689F1 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004689C8(C), :004689D0(U), :004689E2(U)
|
:004689F4 6A00                    push 00000000
:004689F6 E814CC0000              call 0047560F
:004689FB 83C404                  add esp, 00000004
:004689FE E83077FAFF              call 00410133

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468A03 6A04                    push 00000004
:00468A05 6A00                    push 00000000
:00468A07 8B4508                  mov eax, dword ptr [ebp+08]
:00468A0A 25FF000000              and eax, 000000FF
:00468A0F C1E008                  shl eax, 08
:00468A12 0500010000              add eax, 00000100
:00468A17 50                      push eax
:00468A18 B9A01C4B00              mov ecx, 004B1CA0
:00468A1D E86E050100              call 00478F90
:00468A22 50                      push eax
:00468A23 6A10                    push 00000010
:00468A25 6A10                    push 00000010
:00468A27 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00468A2A 51                      push ecx
:00468A2B 8B55F8                  mov edx, dword ptr [ebp-08]
:00468A2E 8B02                    mov eax, dword ptr [edx]
:00468A30 50                      push eax
:00468A31 E8BEE00000              call 00476AF4
:00468A36 83C414                  add esp, 00000014
:00468A39 E81077FAFF              call 0041014E
:00468A3E 8BE5                    mov esp, ebp
:00468A40 5D                      pop ebp
:00468A41 C20400                  ret 0004



* Referenced by a CALL at Address:
|:004685E2   
|
:00468A44 55                      push ebp
:00468A45 8BEC                    mov ebp, esp
:00468A47 83EC0C                  sub esp, 0000000C
:00468A4A 894DF4                  mov dword ptr [ebp-0C], ecx
:00468A4D 8B45F4                  mov eax, dword ptr [ebp-0C]
:00468A50 8B4808                  mov ecx, dword ptr [eax+08]
:00468A53 83E920                  sub ecx, 00000020
:00468A56 C1E904                  shr ecx, 04
:00468A59 894DFC                  mov dword ptr [ebp-04], ecx
:00468A5C 6A00                    push 00000000
:00468A5E E8ACCB0000              call 0047560F
:00468A63 83C404                  add esp, 00000004
:00468A66 E8C876FAFF              call 00410133
:00468A6B C745F800000000          mov [ebp-08], 00000000
:00468A72 EB09                    jmp 00468A7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468AB9(U)
|
:00468A74 8B55F8                  mov edx, dword ptr [ebp-08]
:00468A77 83C201                  add edx, 00000001
:00468A7A 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468A72(U)
|
:00468A7D 8B45F8                  mov eax, dword ptr [ebp-08]
:00468A80 3B45FC                  cmp eax, dword ptr [ebp-04]
:00468A83 7336                    jnb 00468ABB

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468A85 6A04                    push 00000004
:00468A87 6A00                    push 00000000
:00468A89 6A00                    push 00000000
:00468A8B B9A01C4B00              mov ecx, 004B1CA0
:00468A90 E8FB040100              call 00478F90
:00468A95 50                      push eax
:00468A96 6A10                    push 00000010
:00468A98 6A10                    push 00000010
:00468A9A 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00468A9D 8B5104                  mov edx, dword ptr [ecx+04]
:00468AA0 8B45F8                  mov eax, dword ptr [ebp-08]
:00468AA3 C1E004                  shl eax, 04
:00468AA6 8D4C0210                lea ecx, dword ptr [edx+eax+10]
:00468AAA 51                      push ecx
:00468AAB 8B55F4                  mov edx, dword ptr [ebp-0C]
:00468AAE 8B02                    mov eax, dword ptr [edx]
:00468AB0 50                      push eax
:00468AB1 E83EE00000              call 00476AF4
:00468AB6 83C414                  add esp, 00000014
:00468AB9 EBB9                    jmp 00468A74

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468A83(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468ABB 6A04                    push 00000004
:00468ABD 6A00                    push 00000000
:00468ABF 6A00                    push 00000000
:00468AC1 B9A01C4B00              mov ecx, 004B1CA0
:00468AC6 E8C5040100              call 00478F90
:00468ACB 50                      push eax
:00468ACC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00468ACF C1E104                  shl ecx, 04
:00468AD2 8B55F4                  mov edx, dword ptr [ebp-0C]
:00468AD5 8B4208                  mov eax, dword ptr [edx+08]
:00468AD8 2BC1                    sub eax, ecx
:00468ADA 83E820                  sub eax, 00000020
:00468ADD 50                      push eax
:00468ADE 6A10                    push 00000010
:00468AE0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00468AE3 8B5104                  mov edx, dword ptr [ecx+04]
:00468AE6 8B45FC                  mov eax, dword ptr [ebp-04]
:00468AE9 C1E004                  shl eax, 04
:00468AEC 8D4C0210                lea ecx, dword ptr [edx+eax+10]
:00468AF0 51                      push ecx
:00468AF1 8B55F4                  mov edx, dword ptr [ebp-0C]
:00468AF4 8B02                    mov eax, dword ptr [edx]
:00468AF6 50                      push eax
:00468AF7 E8F8DF0000              call 00476AF4
:00468AFC 83C414                  add esp, 00000014
:00468AFF E84A76FAFF              call 0041014E
:00468B04 8BE5                    mov esp, ebp
:00468B06 5D                      pop ebp
:00468B07 C3                      ret



* Referenced by a CALL at Addresses:
|:00468EEE   , :00469031   
|
:00468B08 55                      push ebp
:00468B09 8BEC                    mov ebp, esp
:00468B0B 83EC14                  sub esp, 00000014
:00468B0E 894DF0                  mov dword ptr [ebp-10], ecx
:00468B11 8B45F0                  mov eax, dword ptr [ebp-10]
:00468B14 8B4810                  mov ecx, dword ptr [eax+10]
:00468B17 51                      push ecx
:00468B18 E8F3F90000              call 00478510
:00468B1D 83C404                  add esp, 00000004
:00468B20 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468B23 6A04                    push 00000004
:00468B25 B9306D4800              mov ecx, 00486D30
:00468B2A E825D5F9FF              call 00406054
:00468B2F 8B55F0                  mov edx, dword ptr [ebp-10]
:00468B32 33C0                    xor eax, eax
:00468B34 8A4215                  mov al, byte ptr [edx+15]
:00468B37 83E040                  and eax, 00000040
:00468B3A 85C0                    test eax, eax
:00468B3C 740E                    je 00468B4C
:00468B3E 6A0E                    push 0000000E
:00468B40 B9306D4800              mov ecx, 00486D30
:00468B45 E86ED4F9FF              call 00405FB8
:00468B4A EB0C                    jmp 00468B58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468B3C(C)
|
:00468B4C 6A10                    push 00000010
:00468B4E B9306D4800              mov ecx, 00486D30
:00468B53 E860D4F9FF              call 00405FB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468B4A(U)
|
:00468B58 6A00                    push 00000000
:00468B5A B9306D4800              mov ecx, 00486D30
:00468B5F E88CD4F9FF              call 00405FF0
:00468B64 6A00                    push 00000000
:00468B66 E8A4CA0000              call 0047560F
:00468B6B 83C404                  add esp, 00000004
:00468B6E E8C075FAFF              call 00410133

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468B73 6A04                    push 00000004
:00468B75 6A00                    push 00000000
:00468B77 6800060000              push 00000600
:00468B7C B9A01C4B00              mov ecx, 004B1CA0
:00468B81 E80A040100              call 00478F90
:00468B86 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00468B87 6A14                    push 00000014

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468B89 6A08                    push 00000008
:00468B8B 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00468B8E 8B5104                  mov edx, dword ptr [ecx+04]
:00468B91 52                      push edx
:00468B92 8B45F0                  mov eax, dword ptr [ebp-10]
:00468B95 8B08                    mov ecx, dword ptr [eax]
:00468B97 51                      push ecx
:00468B98 E857DF0000              call 00476AF4
:00468B9D 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468BA0 C745F408000000          mov [ebp-0C], 00000008
:00468BA7 EB09                    jmp 00468BB2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468BF0(U)
|
:00468BA9 8B55F4                  mov edx, dword ptr [ebp-0C]
:00468BAC 83C208                  add edx, 00000008
:00468BAF 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468BA7(U)
|
:00468BB2 8B45F0                  mov eax, dword ptr [ebp-10]
:00468BB5 8B4808                  mov ecx, dword ptr [eax+08]
:00468BB8 83E908                  sub ecx, 00000008
:00468BBB 394DF4                  cmp dword ptr [ebp-0C], ecx
:00468BBE 7332                    jnb 00468BF2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468BC0 6A04                    push 00000004
:00468BC2 6A00                    push 00000000
:00468BC4 68A0060000              push 000006A0
:00468BC9 B9A01C4B00              mov ecx, 004B1CA0
:00468BCE E8BD030100              call 00478F90
:00468BD3 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00468BD4 6A14                    push 00000014

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468BD6 6A08                    push 00000008
:00468BD8 8B55F0                  mov edx, dword ptr [ebp-10]
:00468BDB 8B4204                  mov eax, dword ptr [edx+04]
:00468BDE 50                      push eax
:00468BDF 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00468BE2 8B11                    mov edx, dword ptr [ecx]
:00468BE4 0355F4                  add edx, dword ptr [ebp-0C]
:00468BE7 52                      push edx
:00468BE8 E807DF0000              call 00476AF4
:00468BED 83C414                  add esp, 00000014
:00468BF0 EBB7                    jmp 00468BA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468BBE(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468BF2 6A04                    push 00000004
:00468BF4 6A00                    push 00000000
:00468BF6 6840070000              push 00000740
:00468BFB B9A01C4B00              mov ecx, 004B1CA0
:00468C00 E88B030100              call 00478F90
:00468C05 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00468C06 6A14                    push 00000014

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468C08 6A08                    push 00000008
:00468C0A 8B45F0                  mov eax, dword ptr [ebp-10]
:00468C0D 8B4804                  mov ecx, dword ptr [eax+04]
:00468C10 51                      push ecx
:00468C11 8B55F0                  mov edx, dword ptr [ebp-10]
:00468C14 8B02                    mov eax, dword ptr [edx]
:00468C16 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00468C19 8B5108                  mov edx, dword ptr [ecx+08]
:00468C1C 8D4410F8                lea eax, dword ptr [eax+edx-08]
:00468C20 50                      push eax
:00468C21 E8CEDE0000              call 00476AF4
:00468C26 83C414                  add esp, 00000014
:00468C29 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00468C2C 8B5104                  mov edx, dword ptr [ecx+04]
:00468C2F 83C203                  add edx, 00000003
:00468C32 52                      push edx
:00468C33 8B45F0                  mov eax, dword ptr [ebp-10]
:00468C36 8B08                    mov ecx, dword ptr [eax]
:00468C38 C1E903                  shr ecx, 03
:00468C3B 83C101                  add ecx, 00000001
:00468C3E 51                      push ecx
:00468C3F B9306D4800              mov ecx, 00486D30
:00468C44 E8C2D2F9FF              call 00405F0B
:00468C49 8B55F0                  mov edx, dword ptr [ebp-10]
:00468C4C 33C0                    xor eax, eax
:00468C4E 8A4215                  mov al, byte ptr [edx+15]
:00468C51 83E003                  and eax, 00000003
:00468C54 8945EC                  mov dword ptr [ebp-14], eax
:00468C57 837DEC00                cmp dword ptr [ebp-14], 00000000
:00468C5B 7C5B                    jl 00468CB8
:00468C5D 837DEC01                cmp dword ptr [ebp-14], 00000001
:00468C61 7E02                    jle 00468C65
:00468C63 EB53                    jmp 00468CB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468C61(C)
|
:00468C65 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00468C68 83791000                cmp dword ptr [ecx+10], 00000000
:00468C6C 744A                    je 00468CB8
:00468C6E 8B55F0                  mov edx, dword ptr [ebp-10]
:00468C71 8B4208                  mov eax, dword ptr [edx+08]
:00468C74 C1E803                  shr eax, 03
:00468C77 2B45F8                  sub eax, dword ptr [ebp-08]
:00468C7A D1E8                    shr eax, 1
:00468C7C 8945FC                  mov dword ptr [ebp-04], eax
:00468C7F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00468C82 8B5104                  mov edx, dword ptr [ecx+04]
:00468C85 83C203                  add edx, 00000003
:00468C88 52                      push edx
:00468C89 8B45F0                  mov eax, dword ptr [ebp-10]
:00468C8C 8B08                    mov ecx, dword ptr [eax]
:00468C8E C1E903                  shr ecx, 03
:00468C91 034DFC                  add ecx, dword ptr [ebp-04]
:00468C94 51                      push ecx
:00468C95 B9306D4800              mov ecx, 00486D30
:00468C9A E86CD2F9FF              call 00405F0B
:00468C9F 8B55F0                  mov edx, dword ptr [ebp-10]
:00468CA2 8B4210                  mov eax, dword ptr [edx+10]
:00468CA5 50                      push eax

* Possible StringData Ref from Data Obj ->"%s"
                                  |
:00468CA6 68181E4800              push 00481E18
:00468CAB 68306D4800              push 00486D30
:00468CB0 E823DFF9FF              call 00406BD8
:00468CB5 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00468C5B(C), :00468C63(U), :00468C6C(C)
|
:00468CB8 E89174FAFF              call 0041014E
:00468CBD 8BE5                    mov esp, ebp
:00468CBF 5D                      pop ebp
:00468CC0 C3                      ret



* Referenced by a CALL at Address:
|:0046908D   
|
:00468CC1 55                      push ebp
:00468CC2 8BEC                    mov ebp, esp
:00468CC4 83EC18                  sub esp, 00000018
:00468CC7 894DEC                  mov dword ptr [ebp-14], ecx
:00468CCA B928B44800              mov ecx, 0048B428
:00468CCF E82E0BFBFF              call 00419802
:00468CD4 B928B44800              mov ecx, 0048B428
:00468CD9 E8880BFBFF              call 00419866
:00468CDE 8945FC                  mov dword ptr [ebp-04], eax
:00468CE1 B928B44800              mov ecx, 0048B428
:00468CE6 E88C0BFBFF              call 00419877
:00468CEB 8945F8                  mov dword ptr [ebp-08], eax
:00468CEE C645F4FF                mov [ebp-0C], FF
:00468CF2 8B45EC                  mov eax, dword ptr [ebp-14]
:00468CF5 C6401600                mov [eax+16], 00
:00468CF9 B928B44800              mov ecx, 0048B428
:00468CFE E84A0BFBFF              call 0041984D
:00468D03 83F801                  cmp eax, 00000001
:00468D06 0F8539020000            jne 00468F45
:00468D0C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00468D0F 33D2                    xor edx, edx
:00468D11 8A5115                  mov dl, byte ptr [ecx+15]
:00468D14 83E240                  and edx, 00000040
:00468D17 85D2                    test edx, edx
:00468D19 0F8526020000            jne 00468F45
:00468D1F 8B45EC                  mov eax, dword ptr [ebp-14]
:00468D22 33C9                    xor ecx, ecx
:00468D24 8A4815                  mov cl, byte ptr [eax+15]
:00468D27 81E180000000            and ecx, 00000080
:00468D2D 85C9                    test ecx, ecx
:00468D2F 7546                    jne 00468D77
:00468D31 8B55EC                  mov edx, dword ptr [ebp-14]
:00468D34 8B45FC                  mov eax, dword ptr [ebp-04]
:00468D37 3B02                    cmp eax, dword ptr [edx]
:00468D39 0F8C06020000            jl 00468F45
:00468D3F 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00468D42 8B55F8                  mov edx, dword ptr [ebp-08]
:00468D45 3B5104                  cmp edx, dword ptr [ecx+04]
:00468D48 0F8CF7010000            jl 00468F45
:00468D4E 8B45EC                  mov eax, dword ptr [ebp-14]
:00468D51 8B08                    mov ecx, dword ptr [eax]
:00468D53 8B55EC                  mov edx, dword ptr [ebp-14]
:00468D56 034A08                  add ecx, dword ptr [edx+08]
:00468D59 394DFC                  cmp dword ptr [ebp-04], ecx
:00468D5C 0F8DE3010000            jnl 00468F45
:00468D62 8B45EC                  mov eax, dword ptr [ebp-14]
:00468D65 8B4804                  mov ecx, dword ptr [eax+04]
:00468D68 8B55EC                  mov edx, dword ptr [ebp-14]
:00468D6B 034A0C                  add ecx, dword ptr [edx+0C]
:00468D6E 394DF8                  cmp dword ptr [ebp-08], ecx
:00468D71 0F8DCE010000            jnl 00468F45

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468D2F(C)
|
:00468D77 B928B44800              mov ecx, 0048B428
:00468D7C E8CE10FBFF              call 00419E4F
:00468D81 8B45EC                  mov eax, dword ptr [ebp-14]
:00468D84 33C9                    xor ecx, ecx
:00468D86 8A4815                  mov cl, byte ptr [eax+15]
:00468D89 83E103                  and ecx, 00000003
:00468D8C 894DE8                  mov dword ptr [ebp-18], ecx
:00468D8F E89F73FAFF              call 00410133
:00468D94 B9D01C4B00              mov ecx, 004B1CD0
:00468D99 E82271FAFF              call 0040FEC0
:00468D9E 50                      push eax
:00468D9F 6A10                    push 00000010
:00468DA1 8B55EC                  mov edx, dword ptr [ebp-14]
:00468DA4 8B4208                  mov eax, dword ptr [edx+08]
:00468DA7 83E810                  sub eax, 00000010
:00468DAA 50                      push eax
:00468DAB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00468DAE 8B5104                  mov edx, dword ptr [ecx+04]
:00468DB1 83C203                  add edx, 00000003
:00468DB4 52                      push edx
:00468DB5 8B45EC                  mov eax, dword ptr [ebp-14]
:00468DB8 8B08                    mov ecx, dword ptr [eax]
:00468DBA 83C108                  add ecx, 00000008
:00468DBD 51                      push ecx
:00468DBE E8E7DE0000              call 00476CAA
:00468DC3 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468DC6 6A04                    push 00000004
:00468DC8 6A00                    push 00000000
:00468DCA 68E0070000              push 000007E0
:00468DCF B9A01C4B00              mov ecx, 004B1CA0
:00468DD4 E8B7010100              call 00478F90
:00468DD9 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00468DDA 6A14                    push 00000014

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468DDC 6A08                    push 00000008
:00468DDE 8B55EC                  mov edx, dword ptr [ebp-14]
:00468DE1 8B4204                  mov eax, dword ptr [edx+04]
:00468DE4 50                      push eax
:00468DE5 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00468DE8 8B11                    mov edx, dword ptr [ecx]
:00468DEA 52                      push edx
:00468DEB E804DD0000              call 00476AF4
:00468DF0 83C414                  add esp, 00000014

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468DF3 C745F008000000          mov [ebp-10], 00000008
:00468DFA EB09                    jmp 00468E05

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468E43(U)
|
:00468DFC 8B45F0                  mov eax, dword ptr [ebp-10]
:00468DFF 83C008                  add eax, 00000008
:00468E02 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468DFA(U)
|
:00468E05 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00468E08 8B5108                  mov edx, dword ptr [ecx+08]
:00468E0B 83EA08                  sub edx, 00000008
:00468E0E 3955F0                  cmp dword ptr [ebp-10], edx
:00468E11 7332                    jnb 00468E45

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468E13 6A04                    push 00000004
:00468E15 6A00                    push 00000000
:00468E17 6880080000              push 00000880
:00468E1C B9A01C4B00              mov ecx, 004B1CA0
:00468E21 E86A010100              call 00478F90
:00468E26 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00468E27 6A14                    push 00000014

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468E29 6A08                    push 00000008
:00468E2B 8B45EC                  mov eax, dword ptr [ebp-14]
:00468E2E 8B4804                  mov ecx, dword ptr [eax+04]
:00468E31 51                      push ecx
:00468E32 8B55EC                  mov edx, dword ptr [ebp-14]
:00468E35 8B02                    mov eax, dword ptr [edx]
:00468E37 0345F0                  add eax, dword ptr [ebp-10]
:00468E3A 50                      push eax
:00468E3B E8B4DC0000              call 00476AF4
:00468E40 83C414                  add esp, 00000014
:00468E43 EBB7                    jmp 00468DFC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468E11(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00468E45 6A04                    push 00000004
:00468E47 6A00                    push 00000000
:00468E49 6820090000              push 00000920
:00468E4E B9A01C4B00              mov ecx, 004B1CA0
:00468E53 E838010100              call 00478F90
:00468E58 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00468E59 6A14                    push 00000014

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00468E5B 6A08                    push 00000008
:00468E5D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00468E60 8B5104                  mov edx, dword ptr [ecx+04]
:00468E63 52                      push edx
:00468E64 8B45EC                  mov eax, dword ptr [ebp-14]
:00468E67 8B08                    mov ecx, dword ptr [eax]
:00468E69 8B55EC                  mov edx, dword ptr [ebp-14]
:00468E6C 8B4208                  mov eax, dword ptr [edx+08]
:00468E6F 8D4C01F8                lea ecx, dword ptr [ecx+eax-08]
:00468E73 51                      push ecx
:00468E74 E87BDC0000              call 00476AF4
:00468E79 83C414                  add esp, 00000014
:00468E7C B9D01C4B00              mov ecx, 004B1CD0
:00468E81 E83A70FAFF              call 0040FEC0
:00468E86 50                      push eax
:00468E87 6A0F                    push 0000000F
:00468E89 8B55EC                  mov edx, dword ptr [ebp-14]
:00468E8C 8B4208                  mov eax, dword ptr [edx+08]
:00468E8F 83E810                  sub eax, 00000010
:00468E92 50                      push eax
:00468E93 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00468E96 8B5104                  mov edx, dword ptr [ecx+04]
:00468E99 83C204                  add edx, 00000004
:00468E9C 52                      push edx
:00468E9D 8B45EC                  mov eax, dword ptr [ebp-14]
:00468EA0 8B08                    mov ecx, dword ptr [eax]
:00468EA2 83C108                  add ecx, 00000008
:00468EA5 51                      push ecx
:00468EA6 E849DC0000              call 00476AF4
:00468EAB 83C414                  add esp, 00000014
:00468EAE E89B72FAFF              call 0041014E
:00468EB3 E83868FCFF              call 0042F6F0
:00468EB8 B928B44800              mov ecx, 0048B428
:00468EBD E84009FBFF              call 00419802
:00468EC2 B928B44800              mov ecx, 0048B428
:00468EC7 E89A09FBFF              call 00419866
:00468ECC 8945FC                  mov dword ptr [ebp-04], eax
:00468ECF B928B44800              mov ecx, 0048B428
:00468ED4 E89E09FBFF              call 00419877
:00468ED9 8945F8                  mov dword ptr [ebp-08], eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00468EDC 6A02                    push 00000002
:00468EDE E8D866FCFF              call 0042F5BB
:00468EE3 83C404                  add esp, 00000004
:00468EE6 E8E566FCFF              call 0042F5D0
:00468EEB 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00468EEE E815FCFFFF              call 00468B08
:00468EF3 8B55EC                  mov edx, dword ptr [ebp-14]
:00468EF6 8B45FC                  mov eax, dword ptr [ebp-04]
:00468EF9 3B02                    cmp eax, dword ptr [edx]
:00468EFB 7C37                    jl 00468F34
:00468EFD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00468F00 8B55F8                  mov edx, dword ptr [ebp-08]
:00468F03 3B5104                  cmp edx, dword ptr [ecx+04]
:00468F06 7C2C                    jl 00468F34
:00468F08 8B45EC                  mov eax, dword ptr [ebp-14]
:00468F0B 8B08                    mov ecx, dword ptr [eax]
:00468F0D 8B55EC                  mov edx, dword ptr [ebp-14]
:00468F10 034A08                  add ecx, dword ptr [edx+08]
:00468F13 394DFC                  cmp dword ptr [ebp-04], ecx
:00468F16 7D1C                    jge 00468F34
:00468F18 8B45EC                  mov eax, dword ptr [ebp-14]
:00468F1B 8B4804                  mov ecx, dword ptr [eax+04]
:00468F1E 8B55EC                  mov edx, dword ptr [ebp-14]
:00468F21 034A0C                  add ecx, dword ptr [edx+0C]
:00468F24 394DF8                  cmp dword ptr [ebp-08], ecx
:00468F27 7D0B                    jge 00468F34
:00468F29 8B45EC                  mov eax, dword ptr [ebp-14]
:00468F2C 8A4814                  mov cl, byte ptr [eax+14]
:00468F2F 884DF4                  mov byte ptr [ebp-0C], cl
:00468F32 EB11                    jmp 00468F45

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00468EFB(C), :00468F06(C), :00468F16(C), :00468F27(C)
|
:00468F34 B928B44800              mov ecx, 0048B428
:00468F39 E8110FFBFF              call 00419E4F
:00468F3E 8B55EC                  mov edx, dword ptr [ebp-14]
:00468F41 C6421601                mov [edx+16], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00468D06(C), :00468D19(C), :00468D39(C), :00468D48(C), :00468D5C(C)
|:00468D71(C), :00468F32(U)
|
:00468F45 8A45F4                  mov al, byte ptr [ebp-0C]
:00468F48 8BE5                    mov esp, ebp
:00468F4A 5D                      pop ebp
:00468F4B C3                      ret



* Referenced by a CALL at Address:
|:0043097E   
|
:00468F4C 55                      push ebp
:00468F4D 8BEC                    mov ebp, esp
:00468F4F 83EC14                  sub esp, 00000014
:00468F52 894DF0                  mov dword ptr [ebp-10], ecx
:00468F55 8B45F0                  mov eax, dword ptr [ebp-10]
:00468F58 8A4801                  mov cl, byte ptr [eax+01]
:00468F5B 884DF8                  mov byte ptr [ebp-08], cl
:00468F5E C645F400                mov [ebp-0C], 00
:00468F62 E8CC71FAFF              call 00410133
:00468F67 C645FC00                mov [ebp-04], 00
:00468F6B EB08                    jmp 00468F75

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469036(U)
|
:00468F6D 8A45FC                  mov al, byte ptr [ebp-04]
:00468F70 0401                    add al, 01
:00468F72 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468F6B(U)
|
:00468F75 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00468F78 81E1FF000000            and ecx, 000000FF
:00468F7E 8B55F0                  mov edx, dword ptr [ebp-10]
:00468F81 33C0                    xor eax, eax
:00468F83 8A02                    mov al, byte ptr [edx]
:00468F85 3BC8                    cmp ecx, eax
:00468F87 0F8DAE000000            jnl 0046903B
:00468F8D 8B4D14                  mov ecx, dword ptr [ebp+14]
:00468F90 81E1FF000000            and ecx, 000000FF
:00468F96 85C9                    test ecx, ecx
:00468F98 7512                    jne 00468FAC
:00468F9A 8B55FC                  mov edx, dword ptr [ebp-04]
:00468F9D 81E2FF000000            and edx, 000000FF
:00468FA3 0FAF5510                imul edx, dword ptr [ebp+10]
:00468FA7 8955EC                  mov dword ptr [ebp-14], edx
:00468FAA EB07                    jmp 00468FB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468F98(C)
|
:00468FAC C745EC00000000          mov [ebp-14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468FAA(U)
|
:00468FB3 8B45FC                  mov eax, dword ptr [ebp-04]
:00468FB6 25FF000000              and eax, 000000FF
:00468FBB 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00468FBE 33D2                    xor edx, edx
:00468FC0 8A940128010000          mov dl, byte ptr [ecx+eax+00000128]
:00468FC7 83EA01                  sub edx, 00000001
:00468FCA F7DA                    neg edx
:00468FCC 1BD2                    sbb edx, edx
:00468FCE 83E2C0                  and edx, FFFFFFC0
:00468FD1 83C240                  add edx, 00000040
:00468FD4 52                      push edx
:00468FD5 8A45FC                  mov al, byte ptr [ebp-04]
:00468FD8 50                      push eax
:00468FD9 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00468FDC 81E1FF000000            and ecx, 000000FF
:00468FE2 8B55F0                  mov edx, dword ptr [ebp-10]
:00468FE5 8B4204                  mov eax, dword ptr [edx+04]
:00468FE8 8B0C88                  mov ecx, dword ptr [eax+4*ecx]
:00468FEB 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:00468FEC 6A14                    push 00000014
:00468FEE 8B55F8                  mov edx, dword ptr [ebp-08]
:00468FF1 81E2FF000000            and edx, 000000FF
:00468FF7 83C202                  add edx, 00000002
:00468FFA 52                      push edx
:00468FFB 8B45EC                  mov eax, dword ptr [ebp-14]
:00468FFE 03450C                  add eax, dword ptr [ebp+0C]
:00469001 50                      push eax
:00469002 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469005 51                      push ecx
:00469006 8B55FC                  mov edx, dword ptr [ebp-04]
:00469009 81E2FF000000            and edx, 000000FF
:0046900F 6BD218                  imul edx, 00000018
:00469012 8B45F0                  mov eax, dword ptr [ebp-10]
:00469015 8D4C1008                lea ecx, dword ptr [eax+edx+08]
:00469019 E8E28EFCFF              call 00431F00
:0046901E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469021 81E1FF000000            and ecx, 000000FF
:00469027 6BC918                  imul ecx, 00000018
:0046902A 8B55F0                  mov edx, dword ptr [ebp-10]
:0046902D 8D4C0A08                lea ecx, dword ptr [edx+ecx+08]
:00469031 E8D2FAFFFF              call 00468B08
:00469036 E932FFFFFF              jmp 00468F6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00468F87(C)
|
:0046903B E80E71FAFF              call 0041014E
:00469040 8BE5                    mov esp, ebp
:00469042 5D                      pop ebp
:00469043 C21000                  ret 0010



* Referenced by a CALL at Address:
|:004309F7   
|
:00469046 55                      push ebp
:00469047 8BEC                    mov ebp, esp
:00469049 83EC0C                  sub esp, 0000000C
:0046904C 894DF4                  mov dword ptr [ebp-0C], ecx
:0046904F C645FCFF                mov [ebp-04], FF
:00469053 C745F800000000          mov [ebp-08], 00000000
:0046905A EB09                    jmp 00469065

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469095(U)
|
:0046905C 8B45F8                  mov eax, dword ptr [ebp-08]
:0046905F 83C001                  add eax, 00000001
:00469062 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046905A(U)
|
:00469065 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00469068 33D2                    xor edx, edx
:0046906A 8A11                    mov dl, byte ptr [ecx]
:0046906C 3955F8                  cmp dword ptr [ebp-08], edx
:0046906F 7326                    jnb 00469097
:00469071 8B45FC                  mov eax, dword ptr [ebp-04]
:00469074 25FF000000              and eax, 000000FF
:00469079 3DFF000000              cmp eax, 000000FF
:0046907E 7517                    jne 00469097
:00469080 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469083 6BC918                  imul ecx, 00000018
:00469086 8B55F4                  mov edx, dword ptr [ebp-0C]
:00469089 8D4C0A08                lea ecx, dword ptr [edx+ecx+08]
:0046908D E82FFCFFFF              call 00468CC1
:00469092 8845FC                  mov byte ptr [ebp-04], al
:00469095 EBC5                    jmp 0046905C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046906F(C), :0046907E(C)
|
:00469097 8A45FC                  mov al, byte ptr [ebp-04]
:0046909A 8BE5                    mov esp, ebp
:0046909C 5D                      pop ebp
:0046909D C3                      ret



* Referenced by a CALL at Address:
|:00430A1E   
|
:0046909E 55                      push ebp
:0046909F 8BEC                    mov ebp, esp
:004690A1 83EC08                  sub esp, 00000008
:004690A4 894DF8                  mov dword ptr [ebp-08], ecx
:004690A7 C745FC00000000          mov [ebp-04], 00000000
:004690AE EB09                    jmp 004690B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004690E2(U)
|
:004690B0 8B45FC                  mov eax, dword ptr [ebp-04]
:004690B3 83C001                  add eax, 00000001
:004690B6 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004690AE(U)
|
:004690B9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004690BC 33D2                    xor edx, edx
:004690BE 8A11                    mov dl, byte ptr [ecx]
:004690C0 3955FC                  cmp dword ptr [ebp-04], edx
:004690C3 731F                    jnb 004690E4
:004690C5 8B45FC                  mov eax, dword ptr [ebp-04]
:004690C8 6BC018                  imul eax, 00000018
:004690CB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004690CE 8D4C0108                lea ecx, dword ptr [ecx+eax+08]
:004690D2 E8F9000000              call 004691D0
:004690D7 85C0                    test eax, eax
:004690D9 7407                    je 004690E2
:004690DB B801000000              mov eax, 00000001
:004690E0 EB04                    jmp 004690E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004690D9(C)
|
:004690E2 EBCC                    jmp 004690B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004690C3(C)
|
:004690E4 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004690E0(U)
|
:004690E6 8BE5                    mov esp, ebp
:004690E8 5D                      pop ebp
:004690E9 C3                      ret


:004690EA 55                      push ebp
:004690EB 8BEC                    mov ebp, esp
:004690ED E802000000              call 004690F4
:004690F2 5D                      pop ebp
:004690F3 C3                      ret



* Referenced by a CALL at Address:
|:004690ED   
|
:004690F4 55                      push ebp
:004690F5 8BEC                    mov ebp, esp
:004690F7 B978544B00              mov ecx, 004B5478
:004690FC E8E2F0FFFF              call 004681E3
:00469101 5D                      pop ebp
:00469102 C3                      ret


:00469103 CC                      int 03
:00469104 CC                      int 03
:00469105 CC                      int 03
:00469106 CC                      int 03
:00469107 CC                      int 03
:00469108 CC                      int 03
:00469109 CC                      int 03
:0046910A CC                      int 03
:0046910B CC                      int 03
:0046910C CC                      int 03
:0046910D CC                      int 03
:0046910E CC                      int 03
:0046910F CC                      int 03

* Referenced by a CALL at Address:
|:004682EE   
|
:00469110 55                      push ebp
:00469111 8BEC                    mov ebp, esp
:00469113 51                      push ecx
:00469114 894DFC                  mov dword ptr [ebp-04], ecx
:00469117 8B45FC                  mov eax, dword ptr [ebp-04]
:0046911A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046911D 89487C                  mov dword ptr [eax+7C], ecx
:00469120 8BE5                    mov esp, ebp
:00469122 5D                      pop ebp
:00469123 C20400                  ret 0004


:00469126 CC                      int 03
:00469127 CC                      int 03
:00469128 CC                      int 03
:00469129 CC                      int 03
:0046912A CC                      int 03
:0046912B CC                      int 03
:0046912C CC                      int 03
:0046912D CC                      int 03
:0046912E CC                      int 03
:0046912F CC                      int 03

* Referenced by a CALL at Addresses:
|:004686E5   , :00468727   , :00468740   , :00468823   , :0046896C   
|:004689D5   
|
:00469130 55                      push ebp
:00469131 8BEC                    mov ebp, esp
:00469133 51                      push ecx
:00469134 56                      push esi
:00469135 894DFC                  mov dword ptr [ebp-04], ecx
:00469138 8B45FC                  mov eax, dword ptr [ebp-04]
:0046913B 8B4008                  mov eax, dword ptr [eax+08]
:0046913E 83E830                  sub eax, 00000030
:00469141 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469144 0FAF4114                imul eax, dword ptr [ecx+14]
:00469148 8B55FC                  mov edx, dword ptr [ebp-04]
:0046914B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046914E 8B7210                  mov esi, dword ptr [edx+10]
:00469151 2B710C                  sub esi, dword ptr [ecx+0C]
:00469154 33D2                    xor edx, edx
:00469156 F7F6                    div esi
:00469158 83C010                  add eax, 00000010
:0046915B 5E                      pop esi
:0046915C 8BE5                    mov esp, ebp
:0046915E 5D                      pop ebp
:0046915F C3                      ret



* Referenced by a CALL at Address:
|:004687D9   
|
:00469160 55                      push ebp
:00469161 8BEC                    mov ebp, esp
:00469163 83EC0C                  sub esp, 0000000C
:00469166 56                      push esi
:00469167 894DF8                  mov dword ptr [ebp-08], ecx
:0046916A 8B45F8                  mov eax, dword ptr [ebp-08]
:0046916D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469170 2B4804                  sub ecx, dword ptr [eax+04]
:00469173 83E910                  sub ecx, 00000010
:00469176 8B55F8                  mov edx, dword ptr [ebp-08]
:00469179 8B45F8                  mov eax, dword ptr [ebp-08]
:0046917C 8B5210                  mov edx, dword ptr [edx+10]
:0046917F 2B500C                  sub edx, dword ptr [eax+0C]
:00469182 0FAFCA                  imul ecx, edx
:00469185 8B45F8                  mov eax, dword ptr [ebp-08]
:00469188 8B7008                  mov esi, dword ptr [eax+08]
:0046918B 83EE30                  sub esi, 00000030
:0046918E 8BC1                    mov eax, ecx
:00469190 33D2                    xor edx, edx
:00469192 F7F6                    div esi
:00469194 8945FC                  mov dword ptr [ebp-04], eax
:00469197 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046919A 8B55F8                  mov edx, dword ptr [ebp-08]
:0046919D 8B4110                  mov eax, dword ptr [ecx+10]
:004691A0 2B420C                  sub eax, dword ptr [edx+0C]
:004691A3 3945FC                  cmp dword ptr [ebp-04], eax
:004691A6 7D08                    jge 004691B0
:004691A8 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004691AB 894DF4                  mov dword ptr [ebp-0C], ecx
:004691AE EB0F                    jmp 004691BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004691A6(C)
|
:004691B0 8B55F8                  mov edx, dword ptr [ebp-08]
:004691B3 8B45F8                  mov eax, dword ptr [ebp-08]
:004691B6 8B4A10                  mov ecx, dword ptr [edx+10]
:004691B9 2B480C                  sub ecx, dword ptr [eax+0C]
:004691BC 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004691AE(U)
|
:004691BF 8B55F4                  mov edx, dword ptr [ebp-0C]
:004691C2 8955FC                  mov dword ptr [ebp-04], edx
:004691C5 8B45FC                  mov eax, dword ptr [ebp-04]
:004691C8 5E                      pop esi
:004691C9 8BE5                    mov esp, ebp
:004691CB 5D                      pop ebp
:004691CC C20400                  ret 0004


:004691CF CC                      int 03

* Referenced by a CALL at Address:
|:004690D2   
|
:004691D0 55                      push ebp
:004691D1 8BEC                    mov ebp, esp
:004691D3 51                      push ecx
:004691D4 894DFC                  mov dword ptr [ebp-04], ecx
:004691D7 8B45FC                  mov eax, dword ptr [ebp-04]
:004691DA 33C9                    xor ecx, ecx
:004691DC 8A4816                  mov cl, byte ptr [eax+16]
:004691DF 8BC1                    mov eax, ecx
:004691E1 F7D8                    neg eax
:004691E3 1BC0                    sbb eax, eax
:004691E5 F7D8                    neg eax
:004691E7 8BE5                    mov esp, ebp
:004691E9 5D                      pop ebp
:004691EA C3                      ret


:004691EB CC                      int 03
:004691EC CC                      int 03
:004691ED CC                      int 03
:004691EE CC                      int 03
:004691EF CC                      int 03
:004691F0 55                      push ebp
:004691F1 8BEC                    mov ebp, esp
:004691F3 E807000000              call 004691FF
:004691F8 E811000000              call 0046920E
:004691FD 5D                      pop ebp
:004691FE C3                      ret



* Referenced by a CALL at Address:
|:004691F3   
|
:004691FF 55                      push ebp
:00469200 8BEC                    mov ebp, esp
:00469202 B900554B00              mov ecx, 004B5500
:00469207 E854060000              call 00469860
:0046920C 5D                      pop ebp
:0046920D C3                      ret



* Referenced by a CALL at Address:
|:004691F8   
|
:0046920E 55                      push ebp
:0046920F 8BEC                    mov ebp, esp
:00469211 6820924600              push 00469220
:00469216 E895620000              call 0046F4B0
:0046921B 83C404                  add esp, 00000004
:0046921E 5D                      pop ebp
:0046921F C3                      ret


:00469220 55                      push ebp
:00469221 8BEC                    mov ebp, esp
:00469223 B900554B00              mov ecx, 004B5500
:00469228 E841000000              call 0046926E
:0046922D 5D                      pop ebp
:0046922E C3                      ret


:0046922F 55                      push ebp
:00469230 8BEC                    mov ebp, esp
:00469232 E807000000              call 0046923E
:00469237 E811000000              call 0046924D
:0046923C 5D                      pop ebp
:0046923D C3                      ret



* Referenced by a CALL at Address:
|:00469232   
|
:0046923E 55                      push ebp
:0046923F 8BEC                    mov ebp, esp
:00469241 B9F8544B00              mov ecx, 004B54F8
:00469246 E865060000              call 004698B0
:0046924B 5D                      pop ebp
:0046924C C3                      ret



* Referenced by a CALL at Address:
|:00469237   
|
:0046924D 55                      push ebp
:0046924E 8BEC                    mov ebp, esp
:00469250 685F924600              push 0046925F
:00469255 E856620000              call 0046F4B0
:0046925A 83C404                  add esp, 00000004
:0046925D 5D                      pop ebp
:0046925E C3                      ret


:0046925F 55                      push ebp
:00469260 8BEC                    mov ebp, esp
:00469262 B9F8544B00              mov ecx, 004B54F8
:00469267 E873020000              call 004694DF
:0046926C 5D                      pop ebp
:0046926D C3                      ret



* Referenced by a CALL at Address:
|:00469228   
|
:0046926E 55                      push ebp
:0046926F 8BEC                    mov ebp, esp
:00469271 51                      push ecx
:00469272 894DFC                  mov dword ptr [ebp-04], ecx
:00469275 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469278 E862000000              call 004692DF
:0046927D 8BE5                    mov esp, ebp
:0046927F 5D                      pop ebp
:00469280 C3                      ret



* Referenced by a CALL at Address:
|:0042F485   
|
:00469281 55                      push ebp
:00469282 8BEC                    mov ebp, esp
:00469284 51                      push ecx
:00469285 894DFC                  mov dword ptr [ebp-04], ecx

* Reference To: koeicda.CDAudioInitialize, Ord:0008h
                                  |
:00469288 FF1544D74B00            Call dword ptr [004BD744]
:0046928E 85C0                    test eax, eax
:00469290 7504                    jne 00469296
:00469292 33C0                    xor eax, eax
:00469294 EB45                    jmp 004692DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469290(C)
|

* Reference To: koeicda.CDAudioGetNumDrives, Ord:0003h
                                  |
:00469296 FF1548D74B00            Call dword ptr [004BD748]
:0046929C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046929F 8901                    mov dword ptr [ecx], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004692D0(U)
|

* Possible StringData Ref from Data Obj ->"MOURI"
                                  |
:004692A1 6874C34700              push 0047C374

* Reference To: koeicda.CDAudioOpen, Ord:000Dh
                                  |
:004692A6 FF154CD74B00            Call dword ptr [004BD74C]
:004692AC 83C404                  add esp, 00000004
:004692AF 8B55FC                  mov edx, dword ptr [ebp-04]
:004692B2 894204                  mov dword ptr [edx+04], eax
:004692B5 8B45FC                  mov eax, dword ptr [ebp-04]
:004692B8 837804FF                cmp dword ptr [eax+04], FFFFFFFF
:004692BC 7518                    jne 004692D6

* Possible StringData Ref from Data Obj ->"SQNФ
бNQNФ"
                                        ->"Jо"
                                  |
:004692BE 68201E4800              push 00481E20
:004692C3 E864070000              call 00469A2C
:004692C8 83C404                  add esp, 00000004
:004692CB 83F801                  cmp eax, 00000001
:004692CE 7502                    jne 004692D2
:004692D0 EBCF                    jmp 004692A1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004692CE(C)
|
:004692D2 33C0                    xor eax, eax
:004692D4 EB05                    jmp 004692DB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004692BC(C)
|
:004692D6 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469294(U), :004692D4(U)
|
:004692DB 8BE5                    mov esp, ebp
:004692DD 5D                      pop ebp
:004692DE C3                      ret



* Referenced by a CALL at Addresses:
|:0042EEC8   , :00469278   
|
:004692DF 55                      push ebp
:004692E0 8BEC                    mov ebp, esp
:004692E2 51                      push ecx
:004692E3 894DFC                  mov dword ptr [ebp-04], ecx
:004692E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004692E9 E886000000              call 00469374

* Reference To: koeicda.CDAudioTerminate, Ord:0013h
                                  |
:004692EE FF1540D74B00            Call dword ptr [004BD740]
:004692F4 8BE5                    mov esp, ebp
:004692F6 5D                      pop ebp
:004692F7 C3                      ret



* Referenced by a CALL at Address:
|:00469493   
|
:004692F8 55                      push ebp
:004692F9 8BEC                    mov ebp, esp
:004692FB 51                      push ecx
:004692FC 894DFC                  mov dword ptr [ebp-04], ecx
:004692FF 8B45FC                  mov eax, dword ptr [ebp-04]
:00469302 8B4804                  mov ecx, dword ptr [eax+04]
:00469305 51                      push ecx

* Reference To: koeicda.CDAudioGetDriveLetter, Ord:0002h
                                  |
:00469306 FF1554D74B00            Call dword ptr [004BD754]
:0046930C 83C404                  add esp, 00000004
:0046930F 0FBED0                  movsx edx, al
:00469312 85D2                    test edx, edx
:00469314 7504                    jne 0046931A
:00469316 33C0                    xor eax, eax
:00469318 EB54                    jmp 0046936E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469314(C)
|
:0046931A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046931D E8AF000000              call 004693D1
:00469322 85C0                    test eax, eax
:00469324 741A                    je 00469340
:00469326 8B45FC                  mov eax, dword ptr [ebp-04]
:00469329 8B480C                  mov ecx, dword ptr [eax+0C]
:0046932C 3B4D08                  cmp ecx, dword ptr [ebp+08]
:0046932F 7507                    jne 00469338
:00469331 B801000000              mov eax, 00000001
:00469336 EB36                    jmp 0046936E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046932F(C)
|
:00469338 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046933B E834000000              call 00469374

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469324(C)
|
:00469340 8B550C                  mov edx, dword ptr [ebp+0C]
:00469343 52                      push edx
:00469344 8B4508                  mov eax, dword ptr [ebp+08]
:00469347 50                      push eax
:00469348 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046934B 8B5104                  mov edx, dword ptr [ecx+04]
:0046934E 52                      push edx

* Reference To: koeicda.CDAudioPlayTrack, Ord:0010h
                                  |
:0046934F FF1550D74B00            Call dword ptr [004BD750]
:00469355 83C40C                  add esp, 0000000C
:00469358 85C0                    test eax, eax
:0046935A 7504                    jne 00469360
:0046935C 33C0                    xor eax, eax
:0046935E EB0E                    jmp 0046936E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046935A(C)
|
:00469360 8B45FC                  mov eax, dword ptr [ebp-04]
:00469363 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469366 89480C                  mov dword ptr [eax+0C], ecx
:00469369 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469318(U), :00469336(U), :0046935E(U)
|
:0046936E 8BE5                    mov esp, ebp
:00469370 5D                      pop ebp
:00469371 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004692E9   , :0046933B   , :004694C3   
|
:00469374 55                      push ebp
:00469375 8BEC                    mov ebp, esp
:00469377 51                      push ecx
:00469378 894DFC                  mov dword ptr [ebp-04], ecx
:0046937B 6A00                    push 00000000
:0046937D 8B45FC                  mov eax, dword ptr [ebp-04]
:00469380 8B4804                  mov ecx, dword ptr [eax+04]
:00469383 51                      push ecx

* Reference To: koeicda.CDAudioStop, Ord:0012h
                                  |
:00469384 FF1534D74B00            Call dword ptr [004BD734]
:0046938A 83C408                  add esp, 00000008
:0046938D 8B55FC                  mov edx, dword ptr [ebp-04]
:00469390 C7420C00000000          mov [edx+0C], 00000000
:00469397 8BE5                    mov esp, ebp
:00469399 5D                      pop ebp
:0046939A C3                      ret



* Referenced by a CALL at Address:
|:0046DDDC   
|
:0046939B 55                      push ebp
:0046939C 8BEC                    mov ebp, esp
:0046939E 51                      push ecx
:0046939F 894DFC                  mov dword ptr [ebp-04], ecx
:004693A2 8B45FC                  mov eax, dword ptr [ebp-04]
:004693A5 8B4804                  mov ecx, dword ptr [eax+04]
:004693A8 51                      push ecx

* Reference To: koeicda.CDAudioPause, Ord:000Eh
                                  |
:004693A9 FF1530D74B00            Call dword ptr [004BD730]
:004693AF 83C404                  add esp, 00000004
:004693B2 8BE5                    mov esp, ebp
:004693B4 5D                      pop ebp
:004693B5 C3                      ret



* Referenced by a CALL at Address:
|:0046DE82   
|
:004693B6 55                      push ebp
:004693B7 8BEC                    mov ebp, esp
:004693B9 51                      push ecx
:004693BA 894DFC                  mov dword ptr [ebp-04], ecx
:004693BD 8B45FC                  mov eax, dword ptr [ebp-04]
:004693C0 8B4804                  mov ecx, dword ptr [eax+04]
:004693C3 51                      push ecx

* Reference To: koeicda.CDAudioResume, Ord:0011h
                                  |
:004693C4 FF152CD74B00            Call dword ptr [004BD72C]
:004693CA 83C404                  add esp, 00000004
:004693CD 8BE5                    mov esp, ebp
:004693CF 5D                      pop ebp
:004693D0 C3                      ret



* Referenced by a CALL at Addresses:
|:0046931D   , :004694D6   
|
:004693D1 55                      push ebp
:004693D2 8BEC                    mov ebp, esp
:004693D4 51                      push ecx
:004693D5 894DFC                  mov dword ptr [ebp-04], ecx
:004693D8 8B45FC                  mov eax, dword ptr [ebp-04]
:004693DB 8B4804                  mov ecx, dword ptr [eax+04]
:004693DE 51                      push ecx

* Reference To: koeicda.CDAudioIsPlaying, Ord:000Ah
                                  |
:004693DF FF153CD74B00            Call dword ptr [004BD73C]
:004693E5 83C404                  add esp, 00000004
:004693E8 8BE5                    mov esp, ebp
:004693EA 5D                      pop ebp
:004693EB C3                      ret


:004693EC 55                      push ebp
:004693ED 8BEC                    mov ebp, esp
:004693EF 51                      push ecx
:004693F0 894DFC                  mov dword ptr [ebp-04], ecx
:004693F3 8B45FC                  mov eax, dword ptr [ebp-04]
:004693F6 83C01F                  add eax, 0000001F
:004693F9 50                      push eax
:004693FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004693FD 83C11E                  add ecx, 0000001E
:00469400 51                      push ecx
:00469401 8B55FC                  mov edx, dword ptr [ebp-04]
:00469404 83C21D                  add edx, 0000001D
:00469407 52                      push edx
:00469408 8B45FC                  mov eax, dword ptr [ebp-04]
:0046940B 83C01C                  add eax, 0000001C
:0046940E 50                      push eax
:0046940F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469412 8B5104                  mov edx, dword ptr [ecx+04]
:00469415 52                      push edx

* Reference To: koeicda.CDAudioGetPlayingPos, Ord:0005h
                                  |
:00469416 FF1538D74B00            Call dword ptr [004BD738]
:0046941C 83C414                  add esp, 00000014
:0046941F 85C0                    test eax, eax
:00469421 7505                    jne 00469428
:00469423 83C8FF                  or eax, FFFFFFFF
:00469426 EB0A                    jmp 00469432

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469421(C)
|
:00469428 8B45FC                  mov eax, dword ptr [ebp-04]
:0046942B 33C9                    xor ecx, ecx
:0046942D 8A481C                  mov cl, byte ptr [eax+1C]
:00469430 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469426(U)
|
:00469432 8BE5                    mov esp, ebp
:00469434 5D                      pop ebp
:00469435 C3                      ret


:00469436 55                      push ebp
:00469437 8BEC                    mov ebp, esp
:00469439 51                      push ecx
:0046943A 894DFC                  mov dword ptr [ebp-04], ecx
:0046943D 8B45FC                  mov eax, dword ptr [ebp-04]
:00469440 8B4804                  mov ecx, dword ptr [eax+04]
:00469443 51                      push ecx

* Reference To: koeicda.CDAudioGetNumTracks, Ord:0004h
                                  |
:00469444 FF1528D74B00            Call dword ptr [004BD728]
:0046944A 83C404                  add esp, 00000004
:0046944D 8BE5                    mov esp, ebp
:0046944F 5D                      pop ebp
:00469450 C3                      ret



* Referenced by a CALL at Address:
|:004694AE   
|
:00469451 55                      push ebp
:00469452 8BEC                    mov ebp, esp
:00469454 51                      push ecx
:00469455 894DFC                  mov dword ptr [ebp-04], ecx
:00469458 837D080E                cmp dword ptr [ebp+08], 0000000E
:0046945C 7202                    jb 00469460
:0046945E EB38                    jmp 00469498

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046945C(C)
|
:00469460 8B4508                  mov eax, dword ptr [ebp+08]
:00469463 25FF000000              and eax, 000000FF
:00469468 50                      push eax
:00469469 B978294B00              mov ecx, 004B2978
:0046946E E8CD4AFCFF              call 0042DF40
:00469473 B978294B00              mov ecx, 004B2978
:00469478 E83334FAFF              call 0040C8B0
:0046947D 2500200000              and eax, 00002000
:00469482 85C0                    test eax, eax
:00469484 7502                    jne 00469488
:00469486 EB10                    jmp 00469498

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469484(C)
|
:00469488 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046948B 51                      push ecx
:0046948C 8B5508                  mov edx, dword ptr [ebp+08]
:0046948F 52                      push edx
:00469490 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469493 E860FEFFFF              call 004692F8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046945E(U), :00469486(U)
|
:00469498 8BE5                    mov esp, ebp
:0046949A 5D                      pop ebp
:0046949B C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0040B77E   , :0040E834   , :0040F89B   , :0040FB30   , :00431C2E   
|:00434A2D   , :00434A66   , :0045FD08   , :0046D87F   
|
:0046949E 55                      push ebp
:0046949F 8BEC                    mov ebp, esp
:004694A1 51                      push ecx
:004694A2 894DFC                  mov dword ptr [ebp-04], ecx
:004694A5 6A01                    push 00000001
:004694A7 8B4508                  mov eax, dword ptr [ebp+08]
:004694AA 50                      push eax
:004694AB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004694AE E89EFFFFFF              call 00469451
:004694B3 8BE5                    mov esp, ebp
:004694B5 5D                      pop ebp
:004694B6 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040B799   , :0040E7DC   , :0040F881   , :0042EDE2   , :0042EEBE   
|:0042EF1B   , :0042F1F2   , :00431BD6   , :0045CA33   , :0046D828   
|
:004694B9 55                      push ebp
:004694BA 8BEC                    mov ebp, esp
:004694BC 51                      push ecx
:004694BD 894DFC                  mov dword ptr [ebp-04], ecx
:004694C0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004694C3 E8ACFEFFFF              call 00469374
:004694C8 8BE5                    mov esp, ebp
:004694CA 5D                      pop ebp
:004694CB C3                      ret


:004694CC 55                      push ebp
:004694CD 8BEC                    mov ebp, esp
:004694CF 51                      push ecx
:004694D0 894DFC                  mov dword ptr [ebp-04], ecx
:004694D3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004694D6 E8F6FEFFFF              call 004693D1
:004694DB 8BE5                    mov esp, ebp
:004694DD 5D                      pop ebp
:004694DE C3                      ret



* Referenced by a CALL at Address:
|:00469267   
|
:004694DF 55                      push ebp
:004694E0 8BEC                    mov ebp, esp
:004694E2 51                      push ecx
:004694E3 894DFC                  mov dword ptr [ebp-04], ecx
:004694E6 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004694E9 E804000000              call 004694F2
:004694EE 8BE5                    mov esp, ebp
:004694F0 5D                      pop ebp
:004694F1 C3                      ret



* Referenced by a CALL at Addresses:
|:0040E7FD   , :0040F837   , :0041FE3C   , :0042032E   , :0042EED2   
|:0042EF11   , :00431BE0   , :00441EC5   , :0044271C   , :00443CF2   
|:0045CA3D   , :0045CCE3   , :004694E9   , :00469721   , :00469741   
|:004697C3   , :0046980F   
|
:004694F2 55                      push ebp
:004694F3 8BEC                    mov ebp, esp
:004694F5 51                      push ecx
:004694F6 894DFC                  mov dword ptr [ebp-04], ecx
:004694F9 6A00                    push 00000000
:004694FB 6A00                    push 00000000

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:004694FD FF151CD74B00            Call dword ptr [004BD71C]
:00469503 8B45FC                  mov eax, dword ptr [ebp-04]
:00469506 C700FFFFFFFF            mov dword ptr [eax], FFFFFFFF
:0046950C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046950F C7410400000000          mov [ecx+04], 00000000
:00469516 8BE5                    mov esp, ebp
:00469518 5D                      pop ebp
:00469519 C3                      ret



* Referenced by a CALL at Addresses:
|:0040257A   , :004026D8   , :004027C0   , :004209E9   , :0042328F   
|:00423B01   , :00423B0F   , :00423E2F   , :00423E6B   , :00424F0C   
|:00424F1A   , :004260D9   , :004260E7   , :0042A919   , :0042A927   
|:0042A93E   , :0042A94C   , :0042A963   , :0042A971   , :0042A985   
|:0042A993   , :0042A9A7   , :0042A9B5   , :0042A9C9   , :0042A9D7   
|:0042AD0B   , :0042B877   , :0042B9FF   , :0042C0C7   , :0042C0D5   
|:0042C0E1   , :00434894   , :00435D03   , :00437509   , :004375C8   
|:00437631   , :0043771E   , :00437787   , :004377F4   , :00437837   
|:00437876   , :004378B9   , :00437914   , :0043794A   , :004379AA   
|:00437A07   , :00437A62   , :00437AA5   , :00437B17   , :00437B77   
|:00437BCE   , :00437CAB   , :00438A38   , :00438A81   , :00438AC3   
|:00438EF1   , :004392C0   , :0043935A   , :00439382   , :004395B0   
|:004395E5   , :00439834   , :00439B04   , :00439E76   , :0043A2EC   
|:0043A326   , :0043A360   , :0043A7E5   , :0043A818   , :0043A84B   
|:0043A87B   , :0043A8AB   , :0043AB8E   , :0043ABE1   , :0043AC17   
|:0043AD3E   , :0043B7AC   , :0043C2E9   , :0043C491   , :0043C64E   
|:0043C8A5   , :0043CB0C   , :0043CCF8   , :0043CD15   , :0043CE2D   
|:0043CEF1   , :0043D767   , :0043D897   , :0043DA0B   , :0043DB6B   
|:0043DEC6   , :0043DFB6   , :0043E10F   , :0043E220   , :0043E409   
|:0043E447   , :0043E52E   , :0043E6FF   , :0043E818   , :0043E8A6   
|:0043EB1D   , :0043EB9D   , :0043EC15   , :0043ECB4   , :0043ECEF   
|:0043ED2A   , :0043F142   , :0043FB36   , :0043FEA4   , :004402FE   
|:004405BC   , :004406E4   , :0044073E   , :00440C6D   , :00441E92   
|:00441EDA   , :0044249A   , :0044263F   , :004426D8   , :004426E6   
|:004426F4   , :00442702   , :00442710   , :00442746   , :00442754   
|:00442762   , :00442770   , :0044277E   , :0044464B   , :00444695   
|:0044814B   , :00449C5D   , :00449C8E   , :00449CB1   , :00449CD5   
|:00449CF5   , :00449D15   , :00449D36   , :00449D56   , :0044A661   
|:0044E021   , :0044E05D   , :0044E0BE   , :0044E0FA   , :0044E124   
|:0044E1A1   , :0044E70F   , :00451028   , :0045663A   , :004566AE   
|:00456943   , :00456A10   , :00456AE2   , :0045F8DA   , :0045FA17   
|:00460219   , :00469823   , :0046D7AA   
|
:0046951A 55                      push ebp
:0046951B 8BEC                    mov ebp, esp
:0046951D 51                      push ecx
:0046951E 894DFC                  mov dword ptr [ebp-04], ecx
:00469521 6A01                    push 00000001
:00469523 8B4508                  mov eax, dword ptr [ebp+08]
:00469526 50                      push eax
:00469527 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046952A E8AF000000              call 004695DE
:0046952F 8BE5                    mov esp, ebp
:00469531 5D                      pop ebp
:00469532 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0040E81A   , :0040F864   , :0041FE82   , :0045CA4C   , :004695CE   
|:004697CF   
|
:00469535 55                      push ebp
:00469536 8BEC                    mov ebp, esp
:00469538 83EC08                  sub esp, 00000008
:0046953B 894DF8                  mov dword ptr [ebp-08], ecx
:0046953E 6A00                    push 00000000
:00469540 8B4508                  mov eax, dword ptr [ebp+08]
:00469543 50                      push eax
:00469544 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469547 E892000000              call 004695DE
:0046954C 8945FC                  mov dword ptr [ebp-04], eax
:0046954F 837DFC00                cmp dword ptr [ebp-04], 00000000
:00469553 740A                    je 0046955F
:00469555 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469558 C7410401000000          mov [ecx+04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469553(C)
|
:0046955F 8B45FC                  mov eax, dword ptr [ebp-04]
:00469562 8BE5                    mov esp, ebp
:00469564 5D                      pop ebp
:00469565 C20400                  ret 0004



* Referenced by a CALL at Address:
|:00469835   
|
:00469568 55                      push ebp
:00469569 8BEC                    mov ebp, esp
:0046956B 51                      push ecx
:0046956C 894DFC                  mov dword ptr [ebp-04], ecx
:0046956F 8B450C                  mov eax, dword ptr [ebp+0C]
:00469572 50                      push eax
:00469573 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469576 51                      push ecx
:00469577 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046957A E85F000000              call 004695DE
:0046957F 8BE5                    mov esp, ebp
:00469581 5D                      pop ebp
:00469582 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0046DDE6   
|
:00469585 55                      push ebp
:00469586 8BEC                    mov ebp, esp
:00469588 51                      push ecx
:00469589 894DFC                  mov dword ptr [ebp-04], ecx
:0046958C 8B45FC                  mov eax, dword ptr [ebp-04]
:0046958F 83780400                cmp dword ptr [eax+04], 00000000
:00469593 740A                    je 0046959F
:00469595 6A00                    push 00000000
:00469597 6A00                    push 00000000

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:00469599 FF151CD74B00            Call dword ptr [004BD71C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469593(C)
|
:0046959F 8BE5                    mov esp, ebp
:004695A1 5D                      pop ebp
:004695A2 C3                      ret



* Referenced by a CALL at Address:
|:0046DE78   
|
:004695A3 55                      push ebp
:004695A4 8BEC                    mov ebp, esp
:004695A6 51                      push ecx
:004695A7 894DFC                  mov dword ptr [ebp-04], ecx
:004695AA 8B45FC                  mov eax, dword ptr [ebp-04]
:004695AD 83780400                cmp dword ptr [eax+04], 00000000
:004695B1 7422                    je 004695D5
:004695B3 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004695B6 8339FF                  cmp dword ptr [ecx], FFFFFFFF
:004695B9 741A                    je 004695D5
:004695BB 8B55FC                  mov edx, dword ptr [ebp-04]
:004695BE C7420400000000          mov [edx+04], 00000000
:004695C5 8B45FC                  mov eax, dword ptr [ebp-04]
:004695C8 8B08                    mov ecx, dword ptr [eax]
:004695CA 51                      push ecx
:004695CB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004695CE E862FFFFFF              call 00469535
:004695D3 EB05                    jmp 004695DA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004695B1(C), :004695B9(C)
|
:004695D5 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004695D3(U)
|
:004695DA 8BE5                    mov esp, ebp
:004695DC 5D                      pop ebp
:004695DD C3                      ret



* Referenced by a CALL at Addresses:
|:0046952A   , :00469547   , :0046957A   
|
:004695DE 55                      push ebp
:004695DF 8BEC                    mov ebp, esp
:004695E1 83EC38                  sub esp, 00000038
:004695E4 894DC8                  mov dword ptr [ebp-38], ecx
:004695E7 B978294B00              mov ecx, 004B2978
:004695EC E8BF32FAFF              call 0040C8B0
:004695F1 2500100000              and eax, 00001000
:004695F6 85C0                    test eax, eax
:004695F8 7507                    jne 00469601
:004695FA 33C0                    xor eax, eax
:004695FC E9AC010000              jmp 004697AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004695F8(C)
|
:00469601 817D0883000000          cmp dword ptr [ebp+08], 00000083
:00469608 7C07                    jl 00469611
:0046960A 33C0                    xor eax, eax
:0046960C E99C010000              jmp 004697AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469608(C)
|
:00469611 8B45C8                  mov eax, dword ptr [ebp-38]
:00469614 83780400                cmp dword ptr [eax+04], 00000000
:00469618 7407                    je 00469621
:0046961A 33C0                    xor eax, eax
:0046961C E98C010000              jmp 004697AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469618(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00469621 C745D403000000          mov [ebp-2C], 00000003
:00469628 C745D000000000          mov [ebp-30], 00000000
:0046962F 8B0D581E4800            mov ecx, dword ptr [00481E58]
:00469635 894DEC                  mov dword ptr [ebp-14], ecx
:00469638 8B155C1E4800            mov edx, dword ptr [00481E5C]
:0046963E 8955F0                  mov dword ptr [ebp-10], edx
:00469641 A0601E4800              mov al, byte ptr [00481E60]
:00469646 8845F4                  mov byte ptr [ebp-0C], al
:00469649 33C9                    xor ecx, ecx
:0046964B 894DF5                  mov dword ptr [ebp-0B], ecx
:0046964E 894DF9                  mov dword ptr [ebp-07], ecx
:00469651 66894DFD                mov word ptr [ebp-03], cx
:00469655 884DFF                  mov byte ptr [ebp-01], cl
:00469658 8B15641E4800            mov edx, dword ptr [00481E64]
:0046965E 8955D8                  mov dword ptr [ebp-28], edx
:00469661 A1681E4800              mov eax, dword ptr [00481E68]
:00469666 8945DC                  mov dword ptr [ebp-24], eax
:00469669 668B0D6C1E4800          mov cx, word ptr [00481E6C]
:00469670 66894DE0                mov word ptr [ebp-20], cx
:00469674 33D2                    xor edx, edx
:00469676 8955E2                  mov dword ptr [ebp-1E], edx
:00469679 8955E6                  mov dword ptr [ebp-1A], edx
:0046967C 668955EA                mov word ptr [ebp-16], dx
:00469680 837D0864                cmp dword ptr [ebp+08], 00000064
:00469684 7C3C                    jl 004696C2
:00469686 8B4508                  mov eax, dword ptr [ebp+08]
:00469689 83E864                  sub eax, 00000064
:0046968C 894508                  mov dword ptr [ebp+08], eax
:0046968F 8B4508                  mov eax, dword ptr [ebp+08]
:00469692 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00469693 B90A000000              mov ecx, 0000000A
:00469698 F7F9                    idiv ecx
:0046969A 83C030                  add eax, 00000030
:0046969D 8845DB                  mov byte ptr [ebp-25], al
:004696A0 8B4508                  mov eax, dword ptr [ebp+08]
:004696A3 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004696A4 B90A000000              mov ecx, 0000000A
:004696A9 F7F9                    idiv ecx
:004696AB 83C230                  add edx, 00000030
:004696AE 8855DC                  mov byte ptr [ebp-24], dl
:004696B1 8D55D8                  lea edx, dword ptr [ebp-28]
:004696B4 52                      push edx
:004696B5 E87A41FAFF              call 0040D834
:004696BA 83C404                  add esp, 00000004
:004696BD 8945CC                  mov dword ptr [ebp-34], eax
:004696C0 EB31                    jmp 004696F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469684(C)
|
:004696C2 8B4508                  mov eax, dword ptr [ebp+08]
:004696C5 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004696C6 B90A000000              mov ecx, 0000000A
:004696CB F7F9                    idiv ecx
:004696CD 83C030                  add eax, 00000030
:004696D0 8845EE                  mov byte ptr [ebp-12], al
:004696D3 8B4508                  mov eax, dword ptr [ebp+08]
:004696D6 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004696D7 B90A000000              mov ecx, 0000000A
:004696DC F7F9                    idiv ecx
:004696DE 83C230                  add edx, 00000030
:004696E1 8855EF                  mov byte ptr [ebp-11], dl
:004696E4 8D55EC                  lea edx, dword ptr [ebp-14]
:004696E7 52                      push edx
:004696E8 E84741FAFF              call 0040D834
:004696ED 83C404                  add esp, 00000004
:004696F0 8945CC                  mov dword ptr [ebp-34], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004696C0(U)
|
:004696F3 837D0C01                cmp dword ptr [ebp+0C], 00000001
:004696F7 7545                    jne 0046973E
:004696F9 8B45C8                  mov eax, dword ptr [ebp-38]
:004696FC 8B08                    mov ecx, dword ptr [eax]
:004696FE 3B4D08                  cmp ecx, dword ptr [ebp+08]
:00469701 751B                    jne 0046971E
:00469703 8B55D4                  mov edx, dword ptr [ebp-2C]
:00469706 83CA10                  or edx, 00000010
:00469709 52                      push edx
:0046970A 8B45CC                  mov eax, dword ptr [ebp-34]
:0046970D 50                      push eax

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:0046970E FF151CD74B00            Call dword ptr [004BD71C]
:00469714 B801000000              mov eax, 00000001
:00469719 E98F000000              jmp 004697AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469701(C)
|
:0046971E 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00469721 E8CCFDFFFF              call 004694F2
:00469726 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00469729 8B5508                  mov edx, dword ptr [ebp+08]
:0046972C 8911                    mov dword ptr [ecx], edx
:0046972E 8B45D4                  mov eax, dword ptr [ebp-2C]
:00469731 50                      push eax
:00469732 8B4DCC                  mov ecx, dword ptr [ebp-34]
:00469735 51                      push ecx

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:00469736 FF151CD74B00            Call dword ptr [004BD71C]
:0046973C EB6F                    jmp 004697AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004696F7(C)
|
:0046973E 8B4DC8                  mov ecx, dword ptr [ebp-38]
:00469741 E8ACFDFFFF              call 004694F2
:00469746 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0046974A 751B                    jne 00469767
:0046974C 8B55C8                  mov edx, dword ptr [ebp-38]
:0046974F 8B4508                  mov eax, dword ptr [ebp+08]
:00469752 8902                    mov dword ptr [edx], eax
:00469754 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:00469757 83C908                  or ecx, 00000008
:0046975A 51                      push ecx
:0046975B 8B55CC                  mov edx, dword ptr [ebp-34]
:0046975E 52                      push edx

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:0046975F FF151CD74B00            Call dword ptr [004BD71C]
:00469765 EB46                    jmp 004697AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046974A(C)
|
:00469767 8B45C8                  mov eax, dword ptr [ebp-38]
:0046976A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046976D 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046979D(C)
|
:0046976F 8B55D4                  mov edx, dword ptr [ebp-2C]
:00469772 83CA10                  or edx, 00000010
:00469775 52                      push edx
:00469776 8B45CC                  mov eax, dword ptr [ebp-34]
:00469779 50                      push eax

* Reference To: WINMM.sndPlaySoundA, Ord:0090h
                                  |
:0046977A FF151CD74B00            Call dword ptr [004BD71C]
:00469780 85C0                    test eax, eax
:00469782 7409                    je 0046978D
:00469784 8B4DD0                  mov ecx, dword ptr [ebp-30]
:00469787 83C101                  add ecx, 00000001
:0046978A 894DD0                  mov dword ptr [ebp-30], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469782(C)
|

* Possible Reference to String Resource ID=00006: ""
                                  |
:0046978D 6A06                    push 00000006
:0046978F E87E5EFCFF              call 0042F612
:00469794 83C404                  add esp, 00000004
:00469797 8B55D0                  mov edx, dword ptr [ebp-30]
:0046979A 3B550C                  cmp edx, dword ptr [ebp+0C]
:0046979D 7CD0                    jl 0046976F
:0046979F 8B45C8                  mov eax, dword ptr [ebp-38]
:004697A2 C700FFFFFFFF            mov dword ptr [eax], FFFFFFFF
:004697A8 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004695FC(U), :0046960C(U), :0046961C(U), :00469719(U), :0046973C(U)
|:00469765(U)
|
:004697AD 8BE5                    mov esp, ebp
:004697AF 5D                      pop ebp
:004697B0 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0040B725   
|
:004697B3 55                      push ebp
:004697B4 8BEC                    mov ebp, esp
:004697B6 51                      push ecx
:004697B7 894DFC                  mov dword ptr [ebp-04], ecx
:004697BA 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004697BE 7532                    jne 004697F2
:004697C0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004697C3 E82AFDFFFF              call 004694F2
:004697C8 8B4508                  mov eax, dword ptr [ebp+08]
:004697CB 50                      push eax
:004697CC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004697CF E861FDFFFF              call 00469535
:004697D4 6A00                    push 00000000
:004697D6 B978294B00              mov ecx, 004B2978
:004697DB E84066FAFF              call 0040FE20
:004697E0 8B4D08                  mov ecx, dword ptr [ebp+08]
:004697E3 51                      push ecx
:004697E4 6A00                    push 00000000
:004697E6 B978294B00              mov ecx, 004B2978
:004697EB E850000000              call 00469840
:004697F0 EB48                    jmp 0046983A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004697BE(C)
|
:004697F2 817D0CFF000000          cmp dword ptr [ebp+0C], 000000FF
:004697F9 751B                    jne 00469816
:004697FB 68FFFF0000              push 0000FFFF
:00469800 6A00                    push 00000000
:00469802 B978294B00              mov ecx, 004B2978
:00469807 E834000000              call 00469840
:0046980C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046980F E8DEFCFFFF              call 004694F2
:00469814 EB24                    jmp 0046983A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004697F9(C)
|
:00469816 837D0C01                cmp dword ptr [ebp+0C], 00000001
:0046981A 750E                    jne 0046982A
:0046981C 8B5508                  mov edx, dword ptr [ebp+08]
:0046981F 52                      push edx
:00469820 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469823 E8F2FCFFFF              call 0046951A
:00469828 EB10                    jmp 0046983A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046981A(C)
|
:0046982A 8B450C                  mov eax, dword ptr [ebp+0C]
:0046982D 50                      push eax
:0046982E 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469831 51                      push ecx
:00469832 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469835 E82EFDFFFF              call 00469568

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004697F0(U), :00469814(U), :00469828(U)
|
:0046983A 8BE5                    mov esp, ebp
:0046983C 5D                      pop ebp
:0046983D C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:004697EB   , :00469807   
|
:00469840 55                      push ebp
:00469841 8BEC                    mov ebp, esp
:00469843 51                      push ecx
:00469844 894DFC                  mov dword ptr [ebp-04], ecx
:00469847 8B4508                  mov eax, dword ptr [ebp+08]
:0046984A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046984D 668B550C                mov dx, word ptr [ebp+0C]
:00469851 6689544116              mov word ptr [ecx+2*eax+16], dx
:00469856 8BE5                    mov esp, ebp
:00469858 5D                      pop ebp
:00469859 C20800                  ret 0008


:0046985C CC                      int 03
:0046985D CC                      int 03
:0046985E CC                      int 03
:0046985F CC                      int 03

* Referenced by a CALL at Address:
|:00469207   
|
:00469860 55                      push ebp
:00469861 8BEC                    mov ebp, esp
:00469863 51                      push ecx
:00469864 894DFC                  mov dword ptr [ebp-04], ecx
:00469867 8B45FC                  mov eax, dword ptr [ebp-04]
:0046986A C70001000000            mov dword ptr [eax], 00000001
:00469870 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469873 C74104FFFFFFFF          mov [ecx+04], FFFFFFFF
:0046987A 8B55FC                  mov edx, dword ptr [ebp-04]
:0046987D C6420844                mov [edx+08], 44
:00469881 8B45FC                  mov eax, dword ptr [ebp-04]
:00469884 C7400C00000000          mov [eax+0C], 00000000
:0046988B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046988E C7411000000000          mov [ecx+10], 00000000
:00469895 8B55FC                  mov edx, dword ptr [ebp-04]
:00469898 C74220FFFF0000          mov [edx+20], 0000FFFF
:0046989F 8B45FC                  mov eax, dword ptr [ebp-04]
:004698A2 8BE5                    mov esp, ebp
:004698A4 5D                      pop ebp
:004698A5 C3                      ret


:004698A6 CC                      int 03
:004698A7 CC                      int 03
:004698A8 CC                      int 03
:004698A9 CC                      int 03
:004698AA CC                      int 03
:004698AB CC                      int 03
:004698AC CC                      int 03
:004698AD CC                      int 03
:004698AE CC                      int 03
:004698AF CC                      int 03

* Referenced by a CALL at Address:
|:00469246   
|
:004698B0 55                      push ebp
:004698B1 8BEC                    mov ebp, esp
:004698B3 51                      push ecx
:004698B4 894DFC                  mov dword ptr [ebp-04], ecx
:004698B7 8B45FC                  mov eax, dword ptr [ebp-04]
:004698BA C700FFFFFFFF            mov dword ptr [eax], FFFFFFFF
:004698C0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:004698C3 C7410400000000          mov [ecx+04], 00000000
:004698CA 8B45FC                  mov eax, dword ptr [ebp-04]
:004698CD 8BE5                    mov esp, ebp
:004698CF 5D                      pop ebp
:004698D0 C3                      ret


:004698D1 CC                      int 03
:004698D2 CC                      int 03
:004698D3 CC                      int 03
:004698D4 CC                      int 03
:004698D5 CC                      int 03
:004698D6 CC                      int 03
:004698D7 CC                      int 03
:004698D8 CC                      int 03
:004698D9 CC                      int 03
:004698DA CC                      int 03
:004698DB CC                      int 03
:004698DC CC                      int 03
:004698DD CC                      int 03
:004698DE CC                      int 03
:004698DF CC                      int 03

* Referenced by a CALL at Addresses:
|:004023C6   , :00402433   , :0040247C   , :0040DD7A   , :0040E53A   
|:0040FBCB   , :0041FB13   , :00423BA6   , :00431504   , :00461D45   
|:004699C8   
|
:004698E0 55                      push ebp
:004698E1 8BEC                    mov ebp, esp
:004698E3 83EC28                  sub esp, 00000028
:004698E6 837D0C00                cmp dword ptr [ebp+0C], 00000000
:004698EA 7507                    jne 004698F3

* Possible StringData Ref from Data Obj ->"^ǶǨtC QN"
                                  |
:004698EC C7450C9C1E4800          mov [ebp+0C], 00481E9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004698EA(C)
|
:004698F3 C745D828000000          mov [ebp-28], 00000028
:004698FA A1B0554B00              mov eax, dword ptr [004B55B0]
:004698FF 8945DC                  mov dword ptr [ebp-24], eax
:00469902 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00469908 894DE0                  mov dword ptr [ebp-20], ecx
:0046990B 8B5508                  mov edx, dword ptr [ebp+08]
:0046990E 8955E4                  mov dword ptr [ebp-1C], edx
:00469911 8B450C                  mov eax, dword ptr [ebp+0C]
:00469914 8945E8                  mov dword ptr [ebp-18], eax
:00469917 C745EC84200000          mov [ebp-14], 00002084
:0046991E C745F089000000          mov [ebp-10], 00000089
:00469925 C745F400000000          mov [ebp-0C], 00000000
:0046992C C745F800000000          mov [ebp-08], 00000000
:00469933 C745FC11040000          mov [ebp-04], 00000411
:0046993A 8D4DD8                  lea ecx, dword ptr [ebp-28]
:0046993D 51                      push ecx

* Reference To: USER32.MessageBoxIndirectA, Ord:0198h
                                  |
:0046993E FF15C0D64B00            Call dword ptr [004BD6C0]
:00469944 83F806                  cmp eax, 00000006
:00469947 7507                    jne 00469950
:00469949 B801000000              mov eax, 00000001
:0046994E EB02                    jmp 00469952

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469947(C)
|
:00469950 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046994E(U)
|
:00469952 8BE5                    mov esp, ebp
:00469954 5D                      pop ebp
:00469955 C3                      ret



* Referenced by a CALL at Addresses:
|:0040DFC4   , :0040E4D2   , :0040E5FF   , :0040FABF   , :004314D8   
|:0045E892   , :00461661   
|
:00469956 55                      push ebp
:00469957 8BEC                    mov ebp, esp
:00469959 83EC28                  sub esp, 00000028
:0046995C C745D828000000          mov [ebp-28], 00000028
:00469963 A1B0554B00              mov eax, dword ptr [004B55B0]
:00469968 8945DC                  mov dword ptr [ebp-24], eax
:0046996B 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00469971 894DE0                  mov dword ptr [ebp-20], ecx
:00469974 8B5508                  mov edx, dword ptr [ebp+08]
:00469977 8955E4                  mov dword ptr [ebp-1C], edx

* Possible StringData Ref from Data Obj ->"^ǶǨtC QN"
                                  |
:0046997A C745E8701E4800          mov [ebp-18], 00481E70
:00469981 C745EC80200000          mov [ebp-14], 00002080
:00469988 C745F089000000          mov [ebp-10], 00000089
:0046998F C745F400000000          mov [ebp-0C], 00000000
:00469996 C745F800000000          mov [ebp-08], 00000000
:0046999D C745FC11040000          mov [ebp-04], 00000411
:004699A4 8D45D8                  lea eax, dword ptr [ebp-28]
:004699A7 50                      push eax

* Reference To: USER32.MessageBoxIndirectA, Ord:0198h
                                  |
:004699A8 FF15C0D64B00            Call dword ptr [004BD6C0]
:004699AE 8BE5                    mov esp, ebp
:004699B0 5D                      pop ebp
:004699B1 C3                      ret



* Referenced by a CALL at Addresses:
|:0040DD88   , :0040DE87   
|
:004699B2 55                      push ebp
:004699B3 8BEC                    mov ebp, esp
:004699B5 833DB4554B0000          cmp dword ptr [004B55B4], 00000000
:004699BC 7532                    jne 004699F0

* Possible StringData Ref from Data Obj ->"m^ǶǨtC QNn"
                                  |
:004699BE 68B41E4800              push 00481EB4

* Possible StringData Ref from Data Obj ->"m^ǶǨtC QNn"
                                  |
:004699C3 68D41E4800              push 00481ED4
:004699C8 E813FFFFFF              call 004698E0
:004699CD 83C408                  add esp, 00000008
:004699D0 85C0                    test eax, eax
:004699D2 741C                    je 004699F0
:004699D4 E8DD4E0000              call 0046E8B6
:004699D9 E8AA56FCFF              call 0042F088
:004699DE 6A00                    push 00000000
:004699E0 6A00                    push 00000000
:004699E2 6A10                    push 00000010
:004699E4 A1B0554B00              mov eax, dword ptr [004B55B0]
:004699E9 50                      push eax

* Reference To: USER32.PostMessageA, Ord:01B1h
                                  |
:004699EA FF15D0D54B00            Call dword ptr [004BD5D0]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004699BC(C), :004699D2(C)
|
:004699F0 5D                      pop ebp
:004699F1 C3                      ret



* Referenced by a CALL at Addresses:
|:0040FC72   , :0046A17D   , :0046A1CB   , :0046A271   
|
:004699F2 55                      push ebp
:004699F3 8BEC                    mov ebp, esp
:004699F5 81EC80000000            sub esp, 00000080
:004699FB 8D450C                  lea eax, dword ptr [ebp+0C]
:004699FE 50                      push eax
:004699FF 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469A02 51                      push ecx
:00469A03 8D5580                  lea edx, dword ptr [ebp-80]
:00469A06 52                      push edx

* Reference To: USER32.wvsprintfA, Ord:0266h
                                  |
:00469A07 FF1534D64B00            Call dword ptr [004BD634]
:00469A0D 6830200000              push 00002030

* Possible StringData Ref from Data Obj ->"m^ǶǨtC QNn"
                                  |
:00469A12 68F41E4800              push 00481EF4
:00469A17 8D4580                  lea eax, dword ptr [ebp-80]
:00469A1A 50                      push eax
:00469A1B 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00469A21 51                      push ecx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00469A22 FF15E0D64B00            Call dword ptr [004BD6E0]
:00469A28 8BE5                    mov esp, ebp
:00469A2A 5D                      pop ebp
:00469A2B C3                      ret



* Referenced by a CALL at Addresses:
|:00410C30   , :004692C3   
|
:00469A2C 55                      push ebp
:00469A2D 8BEC                    mov ebp, esp
:00469A2F 81EC80000000            sub esp, 00000080
:00469A35 8D450C                  lea eax, dword ptr [ebp+0C]
:00469A38 50                      push eax
:00469A39 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469A3C 51                      push ecx
:00469A3D 8D5580                  lea edx, dword ptr [ebp-80]
:00469A40 52                      push edx

* Reference To: USER32.wvsprintfA, Ord:0266h
                                  |
:00469A41 FF1534D64B00            Call dword ptr [004BD634]
:00469A47 6835200000              push 00002035

* Possible StringData Ref from Data Obj ->"m^ǶǨtC QNn"
                                  |
:00469A4C 68181F4800              push 00481F18
:00469A51 8D4580                  lea eax, dword ptr [ebp-80]
:00469A54 50                      push eax
:00469A55 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00469A5B 51                      push ecx

* Reference To: USER32.MessageBoxA, Ord:0195h
                                  |
:00469A5C FF15E0D64B00            Call dword ptr [004BD6E0]
:00469A62 83F804                  cmp eax, 00000004
:00469A65 7507                    jne 00469A6E
:00469A67 B801000000              mov eax, 00000001
:00469A6C EB02                    jmp 00469A70

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469A65(C)
|
:00469A6E 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469A6C(U)
|
:00469A70 8BE5                    mov esp, ebp
:00469A72 5D                      pop ebp
:00469A73 C3                      ret


:00469A74 55                      push ebp
:00469A75 8BEC                    mov ebp, esp
:00469A77 51                      push ecx
:00469A78 8B450C                  mov eax, dword ptr [ebp+0C]
:00469A7B 8945FC                  mov dword ptr [ebp-04], eax
:00469A7E 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:00469A85 7435                    je 00469ABC
:00469A87 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:00469A8E 7402                    je 00469A92
:00469A90 EB31                    jmp 00469AC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469A8E(C)
|
:00469A92 8B4D10                  mov ecx, dword ptr [ebp+10]
:00469A95 81E1FFFF0000            and ecx, 0000FFFF
:00469A9B 83F901                  cmp ecx, 00000001
:00469A9E 740E                    je 00469AAE
:00469AA0 8B5510                  mov edx, dword ptr [ebp+10]
:00469AA3 81E2FFFF0000            and edx, 0000FFFF
:00469AA9 83FA02                  cmp edx, 00000002
:00469AAC 750C                    jne 00469ABA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469A9E(C)
|
:00469AAE 6A01                    push 00000001
:00469AB0 8B4508                  mov eax, dword ptr [ebp+08]
:00469AB3 50                      push eax

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:00469AB4 FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469AAC(C)
|
:00469ABA EB07                    jmp 00469AC3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469A85(C)
|
:00469ABC B801000000              mov eax, 00000001
:00469AC1 EB02                    jmp 00469AC5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469A90(U), :00469ABA(U)
|
:00469AC3 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469AC1(U)
|
:00469AC5 8BE5                    mov esp, ebp
:00469AC7 5D                      pop ebp
:00469AC8 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:00403EE5   , :004055D4   , :0040E9D0   , :0040F03C   , :0040F8EB   
|:0040FBF8   , :0040FC3D   , :004125BE   , :00413347   , :004154A7   
|:0041709E   , :00421E0D   , :0045A0DD   , :0045A1C6   , :0045B722   
|:0046305E   , :00465772   , :0046580B   , :004670B3   , :0046C6A8   
|:0046CEB0   , :0046D62F   
|
:00469ACB 55                      push ebp
:00469ACC 8BEC                    mov ebp, esp
:00469ACE 833D68D44700FF          cmp dword ptr [0047D468], FFFFFFFF
:00469AD5 7421                    je 00469AF8
:00469AD7 8B4508                  mov eax, dword ptr [ebp+08]
:00469ADA 50                      push eax
:00469ADB 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"MOURI95.HLP"
                                  |
:00469ADD 68881E4800              push 00481E88
:00469AE2 E84D3DFAFF              call 0040D834
:00469AE7 83C404                  add esp, 00000004
:00469AEA 50                      push eax
:00469AEB 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:00469AF1 51                      push ecx

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00469AF2 FF153CD64B00            Call dword ptr [004BD63C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469AD5(C)
|
:00469AF8 5D                      pop ebp
:00469AF9 C3                      ret



* Referenced by a CALL at Address:
|:00469ECC   
|
:00469AFA 55                      push ebp
:00469AFB 8BEC                    mov ebp, esp
:00469AFD 83EC08                  sub esp, 00000008
:00469B00 8B4510                  mov eax, dword ptr [ebp+10]
:00469B03 8945F8                  mov dword ptr [ebp-08], eax
:00469B06 837DF865                cmp dword ptr [ebp-08], 00000065
:00469B0A 7711                    ja 00469B1D
:00469B0C 837DF865                cmp dword ptr [ebp-08], 00000065
:00469B10 7464                    je 00469B76
:00469B12 837DF814                cmp dword ptr [ebp-08], 00000014
:00469B16 7457                    je 00469B6F
:00469B18 E9B6010000              jmp 00469CD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469B0A(C)
|
:00469B1D 817DF8859C0000          cmp dword ptr [ebp-08], 00009C85
:00469B24 772A                    ja 00469B50
:00469B26 817DF8859C0000          cmp dword ptr [ebp-08], 00009C85
:00469B2D 0F84F2000000            je 00469C25
:00469B33 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469B36 83E966                  sub ecx, 00000066
:00469B39 894DF8                  mov dword ptr [ebp-08], ecx
:00469B3C 837DF80A                cmp dword ptr [ebp-08], 0000000A
:00469B40 0F878D010000            ja 00469CD3
:00469B46 8B55F8                  mov edx, dword ptr [ebp-08]
:00469B49 FF2495D99C4600          jmp dword ptr [4*edx+00469CD9]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469B24(C)
|
:00469B50 8B45F8                  mov eax, dword ptr [ebp-08]
:00469B53 2D869C0000              sub eax, 00009C86
:00469B58 8945F8                  mov dword ptr [ebp-08], eax
:00469B5B 837DF804                cmp dword ptr [ebp-08], 00000004
:00469B5F 0F876E010000            ja 00469CD3
:00469B65 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469B68 FF248D059D4600          jmp dword ptr [4*ecx+00469D05]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469B16(C)
|
:00469B6F 33C0                    xor eax, eax
:00469B71 E95F010000              jmp 00469CD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469B10(C)
|
:00469B76 E81B50FAFF              call 0040EB96
:00469B7B E953010000              jmp 00469CD3
:00469B80 E8C24FFAFF              call 0040EB47
:00469B85 E949010000              jmp 00469CD3
:00469B8A 6A00                    push 00000000
:00469B8C 6A00                    push 00000000
:00469B8E 6A10                    push 00000010
:00469B90 8B15B0554B00            mov edx, dword ptr [004B55B0]
:00469B96 52                      push edx

* Reference To: USER32.PostMessageA, Ord:01B1h
                                  |
:00469B97 FF15D0D54B00            Call dword ptr [004BD5D0]
:00469B9D E931010000              jmp 00469CD3
:00469BA2 8B4508                  mov eax, dword ptr [ebp+08]
:00469BA5 50                      push eax
:00469BA6 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:00469BAC 51                      push ecx
:00469BAD E8BE310000              call 0046CD70
:00469BB2 83C408                  add esp, 00000008
:00469BB5 E919010000              jmp 00469CD3
:00469BBA 8B5508                  mov edx, dword ptr [ebp+08]
:00469BBD 52                      push edx
:00469BBE A1A8554B00              mov eax, dword ptr [004B55A8]
:00469BC3 50                      push eax
:00469BC4 E8AE5EFAFF              call 0040FA77
:00469BC9 83C408                  add esp, 00000008
:00469BCC E902010000              jmp 00469CD3
:00469BD1 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469BD4 51                      push ecx
:00469BD5 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00469BDB 52                      push edx
:00469BDC E8A93A0000              call 0046D68A
:00469BE1 83C408                  add esp, 00000008
:00469BE4 E9EA000000              jmp 00469CD3
:00469BE9 E8655EFAFF              call 0040FA53
:00469BEE E9E0000000              jmp 00469CD3
:00469BF3 E8D25AFFFF              call 0045F6CA
:00469BF8 E9D6000000              jmp 00469CD3
:00469BFD E83E44FFFF              call 0045E040
:00469C02 E9CC000000              jmp 00469CD3
:00469C07 6A01                    push 00000001
:00469C09 E85C44FFFF              call 0045E06A
:00469C0E 83C404                  add esp, 00000004
:00469C11 E9BD000000              jmp 00469CD3
:00469C16 6A00                    push 00000000
:00469C18 E84D44FFFF              call 0045E06A
:00469C1D 83C404                  add esp, 00000004
:00469C20 E9AE000000              jmp 00469CD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469B2D(C)
|
:00469C25 6A00                    push 00000000
:00469C27 6A0B                    push 0000000B

* Possible StringData Ref from Data Obj ->"MOURI95.HLP"
                                  |
:00469C29 68881E4800              push 00481E88
:00469C2E E8013CFAFF              call 0040D834
:00469C33 83C404                  add esp, 00000004
:00469C36 50                      push eax
:00469C37 8B4508                  mov eax, dword ptr [ebp+08]
:00469C3A 50                      push eax

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00469C3B FF153CD64B00            Call dword ptr [004BD63C]
:00469C41 E98D000000              jmp 00469CD3
:00469C46 C645FC00                mov [ebp-04], 00
:00469C4A 8D4DFC                  lea ecx, dword ptr [ebp-04]
:00469C4D 51                      push ecx
:00469C4E 6805010000              push 00000105

* Possible StringData Ref from Data Obj ->"MOURI95.HLP"
                                  |
:00469C53 68881E4800              push 00481E88
:00469C58 E8D73BFAFF              call 0040D834
:00469C5D 83C404                  add esp, 00000004
:00469C60 50                      push eax
:00469C61 8B5508                  mov edx, dword ptr [ebp+08]
:00469C64 52                      push edx

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00469C65 FF153CD64B00            Call dword ptr [004BD63C]
:00469C6B EB66                    jmp 00469CD3
:00469C6D 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00469C6F 6A04                    push 00000004

* Possible StringData Ref from Data Obj ->"MOURI95.HLP"
                                  |
:00469C71 68881E4800              push 00481E88
:00469C76 E8B93BFAFF              call 0040D834
:00469C7B 83C404                  add esp, 00000004
:00469C7E 50                      push eax
:00469C7F 8B4508                  mov eax, dword ptr [ebp+08]
:00469C82 50                      push eax

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00469C83 FF153CD64B00            Call dword ptr [004BD63C]
:00469C89 EB48                    jmp 00469CD3
:00469C8B 6A00                    push 00000000
:00469C8D 68749A4600              push 00469A74
:00469C92 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469C95 51                      push ecx

* Possible StringData Ref from Data Obj ->"AppVersion"
                                  |
:00469C96 683C1F4800              push 00481F3C
:00469C9B 8B15A8554B00            mov edx, dword ptr [004B55A8]
:00469CA1 52                      push edx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:00469CA2 FF15DCD64B00            Call dword ptr [004BD6DC]
:00469CA8 EB29                    jmp 00469CD3
:00469CAA 833D68D44700FF          cmp dword ptr [0047D468], FFFFFFFF
:00469CB1 7420                    je 00469CD3
:00469CB3 A168D44700              mov eax, dword ptr [0047D468]
:00469CB8 50                      push eax
:00469CB9 6A01                    push 00000001

* Possible StringData Ref from Data Obj ->"MOURI95.HLP"
                                  |
:00469CBB 68881E4800              push 00481E88
:00469CC0 E86F3BFAFF              call 0040D834
:00469CC5 83C404                  add esp, 00000004
:00469CC8 50                      push eax
:00469CC9 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469CCC 51                      push ecx

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00469CCD FF153CD64B00            Call dword ptr [004BD63C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469B18(U), :00469B40(C), :00469B5F(C), :00469B7B(U), :00469B85(U)
|:00469B9D(U), :00469BB5(U), :00469BCC(U), :00469BE4(U), :00469BEE(U)
|:00469BF8(U), :00469C02(U), :00469C11(U), :00469C20(U), :00469C41(U)
|:00469C6B(U), :00469C89(U), :00469CA8(U), :00469CB1(C)
|
:00469CD3 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469B71(U)
|
:00469CD5 8BE5                    mov esp, ebp
:00469CD7 5D                      pop ebp
:00469CD8 C3                      ret



:00469CD9 809B4600                DWORD 00469B80
:00469CDD D39C4600                DWORD 00469CD3
:00469CE1 8A9B4600                DWORD 00469B8A
:00469CE5 A29B4600                DWORD 00469BA2
:00469CE9 BA9B4600                DWORD 00469BBA
:00469CED E99B4600                DWORD 00469BE9
:00469CF1 F39B4600                DWORD 00469BF3
:00469CF5 FD9B4600                DWORD 00469BFD
:00469CF9 079C4600                DWORD 00469C07
:00469CFD 169C4600                DWORD 00469C16
:00469D01 D19B4600                DWORD 00469BD1
:00469D05 469C4600                DWORD 00469C46
:00469D09 6D9C4600                DWORD 00469C6D
:00469D0D D39C4600                DWORD 00469CD3
:00469D11 8B9C4600                DWORD 00469C8B
:00469D15 AA9C4600                DWORD 00469CAA


:00469D19 55                      push ebp
:00469D1A 8BEC                    mov ebp, esp
:00469D1C 83EC14                  sub esp, 00000014
:00469D1F 8B450C                  mov eax, dword ptr [ebp+0C]
:00469D22 8945F8                  mov dword ptr [ebp-08], eax
:00469D25 837DF814                cmp dword ptr [ebp-08], 00000014
:00469D29 7727                    ja 00469D52
:00469D2B 837DF814                cmp dword ptr [ebp-08], 00000014
:00469D2F 0F844B020000            je 00469F80
:00469D35 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469D38 83E901                  sub ecx, 00000001
:00469D3B 894DF8                  mov dword ptr [ebp-08], ecx
:00469D3E 837DF805                cmp dword ptr [ebp-08], 00000005
:00469D42 0F8751030000            ja 0046A099
:00469D48 8B55F8                  mov edx, dword ptr [ebp-08]
:00469D4B FF2495B7A04600          jmp dword ptr [4*edx+0046A0B7]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469D29(C)
|
:00469D52 837DF847                cmp dword ptr [ebp-08], 00000047
:00469D56 7719                    ja 00469D71
:00469D58 837DF847                cmp dword ptr [ebp-08], 00000047
:00469D5C 0F843C020000            je 00469F9E
:00469D62 837DF824                cmp dword ptr [ebp-08], 00000024
:00469D66 0F841B020000            je 00469F87
:00469D6C E928030000              jmp 0046A099

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469D56(C)
|
:00469D71 817DF800010000          cmp dword ptr [ebp-08], 00000100
:00469D78 771C                    ja 00469D96
:00469D7A 817DF800010000          cmp dword ptr [ebp-08], 00000100
:00469D81 0F8443020000            je 00469FCA
:00469D87 837DF84E                cmp dword ptr [ebp-08], 0000004E
:00469D8B 0F8444020000            je 00469FD5
:00469D91 E903030000              jmp 0046A099

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469D78(C)
|
:00469D96 817DF806020000          cmp dword ptr [ebp-08], 00000206
:00469D9D 772C                    ja 00469DCB
:00469D9F 817DF800020000          cmp dword ptr [ebp-08], 00000200
:00469DA6 0F8303020000            jnb 00469FAF
:00469DAC 8B45F8                  mov eax, dword ptr [ebp-08]
:00469DAF 2D11010000              sub eax, 00000111
:00469DB4 8945F8                  mov dword ptr [ebp-08], eax
:00469DB7 837DF804                cmp dword ptr [ebp-08], 00000004
:00469DBB 0F87D8020000            ja 0046A099
:00469DC1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00469DC4 FF248DCFA04600          jmp dword ptr [4*ecx+0046A0CF]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469D9D(C)
|
:00469DCB 817DF8B9030000          cmp dword ptr [ebp-08], 000003B9
:00469DD2 0F84B1020000            je 0046A089
:00469DD8 817DF801040000          cmp dword ptr [ebp-08], 00000401
:00469DDF 0F841E010000            je 00469F03
:00469DE5 E9AF020000              jmp 0046A099
:00469DEA E9AA020000              jmp 0046A099
:00469DEF 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00469DF1 6A03                    push 00000003
:00469DF3 8B15B0554B00            mov edx, dword ptr [004B55B0]
:00469DF9 52                      push edx

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:00469DFA FF1538D64B00            Call dword ptr [004BD638]
:00469E00 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00469E02 6A02                    push 00000002

* Possible StringData Ref from Data Obj ->"MOURI95.HLP"
                                  |
:00469E04 68881E4800              push 00481E88
:00469E09 E8263AFAFF              call 0040D834
:00469E0E 83C404                  add esp, 00000004
:00469E11 50                      push eax
:00469E12 8B4508                  mov eax, dword ptr [ebp+08]
:00469E15 50                      push eax

* Reference To: USER32.WinHelpA, Ord:025Eh
                                  |
:00469E16 FF153CD64B00            Call dword ptr [004BD63C]
:00469E1C E978020000              jmp 0046A099
:00469E21 8B4D10                  mov ecx, dword ptr [ebp+10]
:00469E24 894DF4                  mov dword ptr [ebp-0C], ecx
:00469E27 817DF420F00000          cmp dword ptr [ebp-0C], 0000F020
:00469E2E 7414                    je 00469E44
:00469E30 817DF430F00000          cmp dword ptr [ebp-0C], 0000F030
:00469E37 7442                    je 00469E7B
:00469E39 817DF420F10000          cmp dword ptr [ebp-0C], 0000F120
:00469E40 7447                    je 00469E89
:00469E42 EB73                    jmp 00469EB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469E2E(C)
|
:00469E44 8B5508                  mov edx, dword ptr [ebp+08]
:00469E47 52                      push edx
:00469E48 E8823F0000              call 0046DDCF
:00469E4D 83C404                  add esp, 00000004
:00469E50 A118544B00              mov eax, dword ptr [004B5418]
:00469E55 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:00469E56 FF1558D64B00            Call dword ptr [004BD658]
:00469E5C 85C0                    test eax, eax
:00469E5E 7419                    je 00469E79
:00469E60 C705BC554B0001000000    mov dword ptr [004B55BC], 00000001
:00469E6A 6A00                    push 00000000
:00469E6C 8B0D18544B00            mov ecx, dword ptr [004B5418]
:00469E72 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00469E73 FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469E5E(C)
|
:00469E79 EB3C                    jmp 00469EB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469E37(C)
|
:00469E7B 8B5508                  mov edx, dword ptr [ebp+08]
:00469E7E 52                      push edx
:00469E7F E8933F0000              call 0046DE17
:00469E84 83C404                  add esp, 00000004
:00469E87 EB2E                    jmp 00469EB7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469E40(C)
|
:00469E89 8B4508                  mov eax, dword ptr [ebp+08]
:00469E8C 50                      push eax
:00469E8D E8B43F0000              call 0046DE46
:00469E92 83C404                  add esp, 00000004
:00469E95 833DBC554B0000          cmp dword ptr [004B55BC], 00000000
:00469E9C 7419                    je 00469EB7
:00469E9E C705BC554B0000000000    mov dword ptr [004B55BC], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00469EA8 6A05                    push 00000005
:00469EAA 8B0D18544B00            mov ecx, dword ptr [004B5418]
:00469EB0 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00469EB1 FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469E42(U), :00469E79(U), :00469E87(U), :00469E9C(C)
|
:00469EB7 E9DD010000              jmp 0046A099
:00469EBC 8B5514                  mov edx, dword ptr [ebp+14]
:00469EBF 52                      push edx
:00469EC0 8B4510                  mov eax, dword ptr [ebp+10]
:00469EC3 50                      push eax
:00469EC4 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00469EC7 51                      push ecx
:00469EC8 8B5508                  mov edx, dword ptr [ebp+08]
:00469ECB 52                      push edx
:00469ECC E829FCFFFF              call 00469AFA
:00469ED1 83C410                  add esp, 00000010
:00469ED4 E9D8010000              jmp 0046A0B1
:00469ED9 8B4510                  mov eax, dword ptr [ebp+10]
:00469EDC A3B8554B00              mov dword ptr [004B55B8], eax
:00469EE1 833DB8554B0000          cmp dword ptr [004B55B8], 00000000
:00469EE8 7414                    je 00469EFE
:00469EEA 8B4D08                  mov ecx, dword ptr [ebp+08]
:00469EED 51                      push ecx

* Reference To: USER32.BringWindowToTop, Ord:000Ah
                                  |
:00469EEE FF1554D64B00            Call dword ptr [004BD654]
:00469EF4 8B5508                  mov edx, dword ptr [ebp+08]
:00469EF7 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00469EF8 FF15FCD54B00            Call dword ptr [004BD5FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469EE8(C)
|
:00469EFE E996010000              jmp 0046A099

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469DDF(C)
|
:00469F03 8B4514                  mov eax, dword ptr [ebp+14]
:00469F06 50                      push eax
:00469F07 8B4D10                  mov ecx, dword ptr [ebp+10]
:00469F0A 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00469F0B 6A05                    push 00000005
:00469F0D 8B15C0554B00            mov edx, dword ptr [004B55C0]
:00469F13 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:00469F14 FF1504D64B00            Call dword ptr [004BD604]
:00469F1A E97A010000              jmp 0046A099
:00469F1F 8B4514                  mov eax, dword ptr [ebp+14]
:00469F22 50                      push eax
:00469F23 8B4D10                  mov ecx, dword ptr [ebp+10]
:00469F26 51                      push ecx
:00469F27 8B5508                  mov edx, dword ptr [ebp+08]
:00469F2A 52                      push edx
:00469F2B E80B420000              call 0046E13B
:00469F30 83C40C                  add esp, 0000000C
:00469F33 8B4514                  mov eax, dword ptr [ebp+14]
:00469F36 50                      push eax
:00469F37 8B4D10                  mov ecx, dword ptr [ebp+10]
:00469F3A 51                      push ecx
:00469F3B 8B550C                  mov edx, dword ptr [ebp+0C]
:00469F3E 52                      push edx
:00469F3F 8B4508                  mov eax, dword ptr [ebp+08]
:00469F42 50                      push eax

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:00469F43 FF155CD64B00            Call dword ptr [004BD65C]
:00469F49 E963010000              jmp 0046A0B1
:00469F4E 8B4D14                  mov ecx, dword ptr [ebp+14]
:00469F51 51                      push ecx
:00469F52 8B5510                  mov edx, dword ptr [ebp+10]
:00469F55 52                      push edx
:00469F56 8B4508                  mov eax, dword ptr [ebp+08]
:00469F59 50                      push eax
:00469F5A E80C450000              call 0046E46B
:00469F5F 83C40C                  add esp, 0000000C
:00469F62 E932010000              jmp 0046A099
:00469F67 8B4D14                  mov ecx, dword ptr [ebp+14]
:00469F6A 51                      push ecx
:00469F6B 8B5510                  mov edx, dword ptr [ebp+10]
:00469F6E 52                      push edx
:00469F6F 8B4508                  mov eax, dword ptr [ebp+08]
:00469F72 50                      push eax
:00469F73 E8FA460000              call 0046E672
:00469F78 83C40C                  add esp, 0000000C
:00469F7B E919010000              jmp 0046A099

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469D2F(C)
|
:00469F80 33C0                    xor eax, eax
:00469F82 E92A010000              jmp 0046A0B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469D66(C)
|
:00469F87 8B4D14                  mov ecx, dword ptr [ebp+14]
:00469F8A 51                      push ecx
:00469F8B 8B5508                  mov edx, dword ptr [ebp+08]
:00469F8E 52                      push edx
:00469F8F E8FA3E0000              call 0046DE8E
:00469F94 83C408                  add esp, 00000008
:00469F97 33C0                    xor eax, eax
:00469F99 E913010000              jmp 0046A0B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469D5C(C)
|
:00469F9E 8B4508                  mov eax, dword ptr [ebp+08]
:00469FA1 50                      push eax
:00469FA2 E8446FFAFF              call 00410EEB
:00469FA7 83C404                  add esp, 00000004
:00469FAA E9EA000000              jmp 0046A099

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469DA6(C)
|
:00469FAF 8B4D14                  mov ecx, dword ptr [ebp+14]
:00469FB2 51                      push ecx
:00469FB3 8B550C                  mov edx, dword ptr [ebp+0C]
:00469FB6 52                      push edx
:00469FB7 8B4508                  mov eax, dword ptr [ebp+08]
:00469FBA 50                      push eax
:00469FBB B928B44800              mov ecx, 0048B428
:00469FC0 E8D6FEFAFF              call 00419E9B
:00469FC5 E9CF000000              jmp 0046A099

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469D81(C)
|
:00469FCA 8B4D10                  mov ecx, dword ptr [ebp+10]
:00469FCD 894DF0                  mov dword ptr [ebp-10], ecx
:00469FD0 E9C4000000              jmp 0046A099

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469D8B(C)
|
:00469FD5 8B5514                  mov edx, dword ptr [ebp+14]
:00469FD8 8955FC                  mov dword ptr [ebp-04], edx
:00469FDB 8B45FC                  mov eax, dword ptr [ebp-04]
:00469FDE 817808F8FDFFFF          cmp dword ptr [eax+08], FFFFFDF8
:00469FE5 0F859C000000            jne 0046A087
:00469FEB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00469FEE 8B5104                  mov edx, dword ptr [ecx+04]
:00469FF1 8955EC                  mov dword ptr [ebp-14], edx
:00469FF4 8B45EC                  mov eax, dword ptr [ebp-14]
:00469FF7 83E865                  sub eax, 00000065
:00469FFA 8945EC                  mov dword ptr [ebp-14], eax
:00469FFD 837DEC0A                cmp dword ptr [ebp-14], 0000000A
:0046A001 0F8780000000            ja 0046A087
:0046A007 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046A00A FF248DE3A04600          jmp dword ptr [4*ecx+0046A0E3]
:0046A011 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"xs"
                                  |
:0046A014 C7420C481F4800          mov [edx+0C], 00481F48
:0046A01B EB6A                    jmp 0046A087
:0046A01D 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"Ū"
                                  |
:0046A020 C7400C501F4800          mov [eax+0C], 00481F50
:0046A027 EB5E                    jmp 0046A087
:0046A029 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->""
                                  |
:0046A02C C7410C581F4800          mov [ecx+0C], 00481F58
:0046A033 EB52                    jmp 0046A087
:0046A035 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"ZN@"
                                  |
:0046A038 C7420C601F4800          mov [edx+0C], 00481F60
:0046A03F EB46                    jmp 0046A087
:0046A041 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"GƱ"
                                  |
:0046A044 C7400C6C1F4800          mov [eax+0C], 00481F6C
:0046A04B EB3A                    jmp 0046A087
:0046A04D 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"ҳ]w"
                                  |
:0046A050 C7410C781F4800          mov [ecx+0C], 00481F78
:0046A057 EB2E                    jmp 0046A087
:0046A059 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"ԳYp"
                                  |
:0046A05C C7420C841F4800          mov [edx+0C], 00481F84
:0046A063 EB22                    jmp 0046A087
:0046A065 8B45FC                  mov eax, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"^X"
                                  |
:0046A068 C7400C901F4800          mov [eax+0C], 00481F90
:0046A06F EB16                    jmp 0046A087
:0046A071 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"̦y"
                                  |
:0046A074 C7410C9C1F4800          mov [ecx+0C], 00481F9C
:0046A07B EB0A                    jmp 0046A087
:0046A07D 8B55FC                  mov edx, dword ptr [ebp-04]

* Possible StringData Ref from Data Obj ->"ϦVy"
                                  |
:0046A080 C7420CA81F4800          mov [edx+0C], 00481FA8

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469FE5(C), :0046A001(C), :0046A01B(U), :0046A027(U), :0046A033(U)
|:0046A03F(U), :0046A04B(U), :0046A057(U), :0046A063(U), :0046A06F(U)
|:0046A07B(U)
|
:0046A087 EB10                    jmp 0046A099

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00469DD2(C)
|
:0046A089 8B4514                  mov eax, dword ptr [ebp+14]
:0046A08C 50                      push eax
:0046A08D 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046A090 51                      push ecx
:0046A091 E83E6EFAFF              call 00410ED4
:0046A096 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469D42(C), :00469D6C(U), :00469D91(U), :00469DBB(C), :00469DE5(U)
|:00469DEA(U), :00469E1C(U), :00469EB7(U), :00469EFE(U), :00469F1A(U)
|:00469F62(U), :00469F7B(U), :00469FAA(U), :00469FC5(U), :00469FD0(U)
|:0046A087(U)
|
:0046A099 8B5514                  mov edx, dword ptr [ebp+14]
:0046A09C 52                      push edx
:0046A09D 8B4510                  mov eax, dword ptr [ebp+10]
:0046A0A0 50                      push eax
:0046A0A1 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046A0A4 51                      push ecx
:0046A0A5 8B5508                  mov edx, dword ptr [ebp+08]
:0046A0A8 52                      push edx
:0046A0A9 E843D80000              call 004778F1
:0046A0AE 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00469ED4(U), :00469F49(U), :00469F82(U), :00469F99(U)
|
:0046A0B1 8BE5                    mov esp, ebp
:0046A0B3 5D                      pop ebp
:0046A0B4 C21000                  ret 0010



:0046A0B7 EA9D4600                DWORD 00469DEA
:0046A0BB EF9D4600                DWORD 00469DEF
:0046A0BF 99A04600                DWORD 0046A099
:0046A0C3 99A04600                DWORD 0046A099
:0046A0C7 1F9F4600                DWORD 00469F1F
:0046A0CB D99E4600                DWORD 00469ED9
:0046A0CF BC9E4600                DWORD 00469EBC
:0046A0D3 219E4600                DWORD 00469E21
:0046A0D7 99A04600                DWORD 0046A099
:0046A0DB 4E9F4600                DWORD 00469F4E
:0046A0DF 679F4600                DWORD 00469F67
:0046A0E3 11A04600                DWORD 0046A011
:0046A0E7 1DA04600                DWORD 0046A01D
:0046A0EB 87A04600                DWORD 0046A087
:0046A0EF 29A04600                DWORD 0046A029
:0046A0F3 35A04600                DWORD 0046A035
:0046A0F7 41A04600                DWORD 0046A041
:0046A0FB 4DA04600                DWORD 0046A04D
:0046A0FF 59A04600                DWORD 0046A059
:0046A103 65A04600                DWORD 0046A065
:0046A107 71A04600                DWORD 0046A071
:0046A10B 7DA04600                DWORD 0046A07D



* Referenced by a CALL at Address:
|:0046A58D   
|
:0046A10F 55                      push ebp
:0046A110 8BEC                    mov ebp, esp
:0046A112 83EC7C                  sub esp, 0000007C
:0046A115 6A00                    push 00000000

* Possible StringData Ref from Data Obj ->"^ǶǨtC QN"
                                  |
:0046A117 68701E4800              push 00481E70

* Reference To: USER32.FindWindowA, Ord:00CDh
                                  |
:0046A11C FF152CD64B00            Call dword ptr [004BD62C]
:0046A122 8945F0                  mov dword ptr [ebp-10], eax
:0046A125 837DF000                cmp dword ptr [ebp-10], 00000000
:0046A129 7461                    je 0046A18C
:0046A12B 8B45F0                  mov eax, dword ptr [ebp-10]
:0046A12E 50                      push eax

* Reference To: USER32.IsIconic, Ord:0164h
                                  |
:0046A12F FF1508D74B00            Call dword ptr [004BD708]
:0046A135 85C0                    test eax, eax
:0046A137 7416                    je 0046A14F
:0046A139 6A00                    push 00000000
:0046A13B 6820F10000              push 0000F120
:0046A140 6812010000              push 00000112
:0046A145 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046A148 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A149 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A137(C)
|
:0046A14F 8B55F0                  mov edx, dword ptr [ebp-10]
:0046A152 52                      push edx

* Reference To: USER32.GetLastActivePopup, Ord:0108h
                                  |
:0046A153 FF1528D64B00            Call dword ptr [004BD628]
:0046A159 8945C0                  mov dword ptr [ebp-40], eax
:0046A15C 8B45F0                  mov eax, dword ptr [ebp-10]
:0046A15F 50                      push eax

* Reference To: USER32.BringWindowToTop, Ord:000Ah
                                  |
:0046A160 FF1554D64B00            Call dword ptr [004BD654]
:0046A166 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046A169 3B4DC0                  cmp ecx, dword ptr [ebp-40]
:0046A16C 740A                    je 0046A178
:0046A16E 8B55C0                  mov edx, dword ptr [ebp-40]
:0046A171 52                      push edx

* Reference To: USER32.BringWindowToTop, Ord:000Ah
                                  |
:0046A172 FF1554D64B00            Call dword ptr [004BD654]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A16C(C)
|

* Possible StringData Ref from Data Obj ->"b"
                                  |
:0046A178 68B41F4800              push 00481FB4
:0046A17D E870F8FFFF              call 004699F2
:0046A182 83C404                  add esp, 00000004
:0046A185 33C0                    xor eax, eax
:0046A187 E9ED030000              jmp 0046A579

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A129(C)
|
:0046A18C 8B4508                  mov eax, dword ptr [ebp+08]
:0046A18F A3A8554B00              mov dword ptr [004B55A8], eax
:0046A194 6A00                    push 00000000

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0046A196 FF1518D64B00            Call dword ptr [004BD618]
:0046A19C 8945C4                  mov dword ptr [ebp-3C], eax
:0046A19F 837DC400                cmp dword ptr [ebp-3C], 00000000
:0046A1A3 7435                    je 0046A1DA
:0046A1A5 6A0C                    push 0000000C
:0046A1A7 8B4DC4                  mov ecx, dword ptr [ebp-3C]
:0046A1AA 51                      push ecx

* Reference To: GDI32.GetDeviceCaps, Ord:00C7h
                                  |
:0046A1AB FF1550D44B00            Call dword ptr [004BD450]
:0046A1B1 8945B8                  mov dword ptr [ebp-48], eax
:0046A1B4 8B55C4                  mov edx, dword ptr [ebp-3C]
:0046A1B7 52                      push edx
:0046A1B8 6A00                    push 00000000

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0046A1BA FF151CD64B00            Call dword ptr [004BD61C]
:0046A1C0 837DB808                cmp dword ptr [ebp-48], 00000008
:0046A1C4 7D14                    jge 0046A1DA

* Possible StringData Ref from Data Obj ->"Шϥ256HWùѪRҦ"
                                  |
:0046A1C6 68C01F4800              push 00481FC0
:0046A1CB E822F8FFFF              call 004699F2
:0046A1D0 83C404                  add esp, 00000004
:0046A1D3 33C0                    xor eax, eax
:0046A1D5 E99F030000              jmp 0046A579

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A1A3(C), :0046A1C4(C)
|
:0046A1DA 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0046A1DE 756A                    jne 0046A24A
:0046A1E0 C745C80B100000          mov [ebp-38], 0000100B

* Possible StringData Ref from Code Obj ->"UEE}w'}K"
                                  |
:0046A1E7 C745CC199D4600          mov [ebp-34], 00469D19
:0046A1EE C745D400000000          mov [ebp-2C], 00000000
:0046A1F5 C745D000000000          mov [ebp-30], 00000000
:0046A1FC 8B4508                  mov eax, dword ptr [ebp+08]
:0046A1FF 8945D8                  mov dword ptr [ebp-28], eax
:0046A202 6889000000              push 00000089
:0046A207 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046A20A 51                      push ecx

* Reference To: USER32.LoadIconA, Ord:0176h
                                  |
:0046A20B FF15E4D64B00            Call dword ptr [004BD6E4]
:0046A211 8945DC                  mov dword ptr [ebp-24], eax
:0046A214 C745E000000000          mov [ebp-20], 00000000

* Possible Reference to String Resource ID=00006: ""
                                  |
:0046A21B C745E406000000          mov [ebp-1C], 00000006

* Possible StringData Ref from Data Obj ->"APPMENU"
                                  |
:0046A222 C745E8DC1F4800          mov [ebp-18], 00481FDC

* Possible StringData Ref from Data Obj ->"^ǶǨtC QN"
                                  |
:0046A229 C745EC701E4800          mov [ebp-14], 00481E70
:0046A230 8D55C8                  lea edx, dword ptr [ebp-38]
:0046A233 52                      push edx

* Reference To: USER32.RegisterClassA, Ord:01BEh
                                  |
:0046A234 FF1510D74B00            Call dword ptr [004BD710]
:0046A23A 25FFFF0000              and eax, 0000FFFF
:0046A23F 85C0                    test eax, eax
:0046A241 7507                    jne 0046A24A
:0046A243 33C0                    xor eax, eax
:0046A245 E92F030000              jmp 0046A579

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A1DE(C), :0046A241(C)
|
:0046A24A 8D45FC                  lea eax, dword ptr [ebp-04]
:0046A24D 50                      push eax
:0046A24E 8D4DF8                  lea ecx, dword ptr [ebp-08]
:0046A251 51                      push ecx
:0046A252 E866D30000              call 004775BD
:0046A257 83C408                  add esp, 00000008
:0046A25A 817DF880020000          cmp dword ptr [ebp-08], 00000280
:0046A261 7C09                    jl 0046A26C
:0046A263 817DFC88010000          cmp dword ptr [ebp-04], 00000188
:0046A26A 7D14                    jge 0046A280

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A261(C)
|

* Possible StringData Ref from Data Obj ->"éYpu@CAýTOùѪR׬640X480"
                                        ->"AҰʹC"
                                  |
:0046A26C 68E41F4800              push 00481FE4
:0046A271 E87CF7FFFF              call 004699F2
:0046A276 83C404                  add esp, 00000004
:0046A279 33C0                    xor eax, eax
:0046A27B E9F9020000              jmp 0046A579

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A26A(C)
|
:0046A280 817DF800050000          cmp dword ptr [ebp-08], 00000500
:0046A287 7C49                    jl 0046A2D2

* Possible Reference to Dialog: DialogID_00CD, CONTROL_ID:0500, ""
                                  |
:0046A289 C745BC00050000          mov [ebp-44], 00000500
:0046A290 817DFC00040000          cmp dword ptr [ebp-04], 00000400
:0046A297 7C09                    jl 0046A2A2

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:0046A299 C745AC00040000          mov [ebp-54], 00000400
:0046A2A0 EB25                    jmp 0046A2C7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A297(C)
|
:0046A2A2 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A2A5 83E2F0                  and edx, FFFFFFF0
:0046A2A8 81FAE0010000            cmp edx, 000001E0
:0046A2AE 7D09                    jge 0046A2B9
:0046A2B0 C745A8E0010000          mov [ebp-58], 000001E0
:0046A2B7 EB08                    jmp 0046A2C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A2AE(C)
|
:0046A2B9 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A2BC 24F0                    and al, F0
:0046A2BE 8945A8                  mov dword ptr [ebp-58], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A2B7(U)
|
:0046A2C1 8B4DA8                  mov ecx, dword ptr [ebp-58]
:0046A2C4 894DAC                  mov dword ptr [ebp-54], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A2A0(U)
|
:0046A2C7 8B55AC                  mov edx, dword ptr [ebp-54]
:0046A2CA 8955F4                  mov dword ptr [ebp-0C], edx
:0046A2CD E9EE000000              jmp 0046A3C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A287(C)
|
:0046A2D2 817DF800040000          cmp dword ptr [ebp-08], 00000400
:0046A2D9 7C48                    jl 0046A323

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:0046A2DB C745BC00040000          mov [ebp-44], 00000400
:0046A2E2 817DFC00030000          cmp dword ptr [ebp-04], 00000300
:0046A2E9 7C09                    jl 0046A2F4
:0046A2EB C745A400030000          mov [ebp-5C], 00000300
:0046A2F2 EB24                    jmp 0046A318

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A2E9(C)
|
:0046A2F4 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A2F7 24F0                    and al, F0
:0046A2F9 3DE0010000              cmp eax, 000001E0
:0046A2FE 7D09                    jge 0046A309
:0046A300 C745A0E0010000          mov [ebp-60], 000001E0
:0046A307 EB09                    jmp 0046A312

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A2FE(C)
|
:0046A309 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A30C 83E1F0                  and ecx, FFFFFFF0
:0046A30F 894DA0                  mov dword ptr [ebp-60], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A307(U)
|
:0046A312 8B55A0                  mov edx, dword ptr [ebp-60]
:0046A315 8955A4                  mov dword ptr [ebp-5C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A2F2(U)
|
:0046A318 8B45A4                  mov eax, dword ptr [ebp-5C]
:0046A31B 8945F4                  mov dword ptr [ebp-0C], eax
:0046A31E E99D000000              jmp 0046A3C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A2D9(C)
|
:0046A323 817DF820030000          cmp dword ptr [ebp-08], 00000320
:0046A32A 7C47                    jl 0046A373
:0046A32C C745BC20030000          mov [ebp-44], 00000320
:0046A333 817DFC58020000          cmp dword ptr [ebp-04], 00000258
:0046A33A 7C09                    jl 0046A345
:0046A33C C7459C58020000          mov [ebp-64], 00000258
:0046A343 EB26                    jmp 0046A36B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A33A(C)
|
:0046A345 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A348 83E1F0                  and ecx, FFFFFFF0
:0046A34B 81F9E0010000            cmp ecx, 000001E0
:0046A351 7D09                    jge 0046A35C
:0046A353 C74598E0010000          mov [ebp-68], 000001E0
:0046A35A EB09                    jmp 0046A365

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A351(C)
|
:0046A35C 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A35F 83E2F0                  and edx, FFFFFFF0
:0046A362 895598                  mov dword ptr [ebp-68], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A35A(U)
|
:0046A365 8B4598                  mov eax, dword ptr [ebp-68]
:0046A368 89459C                  mov dword ptr [ebp-64], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A343(U)
|
:0046A36B 8B4D9C                  mov ecx, dword ptr [ebp-64]
:0046A36E 894DF4                  mov dword ptr [ebp-0C], ecx
:0046A371 EB4D                    jmp 0046A3C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A32A(C)
|
:0046A373 817DF880020000          cmp dword ptr [ebp-08], 00000280
:0046A37A 7C44                    jl 0046A3C0
:0046A37C C745BC80020000          mov [ebp-44], 00000280
:0046A383 817DFCE0010000          cmp dword ptr [ebp-04], 000001E0
:0046A38A 7C09                    jl 0046A395
:0046A38C C74594E0010000          mov [ebp-6C], 000001E0
:0046A393 EB25                    jmp 0046A3BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A38A(C)
|
:0046A395 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A398 83E2F0                  and edx, FFFFFFF0
:0046A39B 81FAE0010000            cmp edx, 000001E0
:0046A3A1 7D09                    jge 0046A3AC
:0046A3A3 C74590E0010000          mov [ebp-70], 000001E0
:0046A3AA EB08                    jmp 0046A3B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A3A1(C)
|
:0046A3AC 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A3AF 24F0                    and al, F0
:0046A3B1 894590                  mov dword ptr [ebp-70], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A3AA(U)
|
:0046A3B4 8B4D90                  mov ecx, dword ptr [ebp-70]
:0046A3B7 894D94                  mov dword ptr [ebp-6C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A393(U)
|
:0046A3BA 8B5594                  mov edx, dword ptr [ebp-6C]
:0046A3BD 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A2CD(U), :0046A31E(U), :0046A371(U), :0046A37A(C)
|
:0046A3C0 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046A3C3 50                      push eax
:0046A3C4 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0046A3C7 51                      push ecx
:0046A3C8 E833350000              call 0046D900
:0046A3CD 83C408                  add esp, 00000008
:0046A3D0 6A00                    push 00000000
:0046A3D2 8B5508                  mov edx, dword ptr [ebp+08]
:0046A3D5 52                      push edx
:0046A3D6 6A00                    push 00000000
:0046A3D8 6A00                    push 00000000
:0046A3DA 6800000080              push 80000000
:0046A3DF 6800000080              push 80000000
:0046A3E4 6800000080              push 80000000
:0046A3E9 6800000080              push 80000000
:0046A3EE 6800003F02              push 023F0000

* Possible StringData Ref from Data Obj ->"^ǶǨtC QN"
                                  |
:0046A3F3 68701E4800              push 00481E70

* Possible StringData Ref from Data Obj ->"^ǶǨtC QN"
                                  |
:0046A3F8 68701E4800              push 00481E70
:0046A3FD 6A00                    push 00000000

* Reference To: USER32.CreateWindowExA, Ord:0055h
                                  |
:0046A3FF FF150CD74B00            Call dword ptr [004BD70C]
:0046A405 A3B0554B00              mov dword ptr [004B55B0], eax
:0046A40A 833DB0554B0000          cmp dword ptr [004B55B0], 00000000
:0046A411 0F8460010000            je 0046A577
:0046A417 6A01                    push 00000001
:0046A419 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046A41C 50                      push eax
:0046A41D 8B4DBC                  mov ecx, dword ptr [ebp-44]
:0046A420 51                      push ecx
:0046A421 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0046A427 52                      push edx
:0046A428 E887B10000              call 004755B4
:0046A42D 83C410                  add esp, 00000010
:0046A430 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046A432 6A03                    push 00000003
:0046A434 A1B0554B00              mov eax, dword ptr [004B55B0]
:0046A439 50                      push eax

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:0046A43A FF1538D64B00            Call dword ptr [004BD638]
:0046A440 6A00                    push 00000000
:0046A442 E8C8B10000              call 0047560F
:0046A447 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:0046A44A 6A15                    push 00000015

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0046A44C FF1578D64B00            Call dword ptr [004BD678]
:0046A452 8945B0                  mov dword ptr [ebp-50], eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046A455 6A02                    push 00000002

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0046A457 FF1578D64B00            Call dword ptr [004BD678]
:0046A45D 8945B4                  mov dword ptr [ebp-4C], eax
:0046A460 8B45B0                  mov eax, dword ptr [ebp-50]
:0046A463 99                      cdq
:0046A464 B930000000              mov ecx, 00000030
:0046A469 F7F9                    idiv ecx
:0046A46B 83FA08                  cmp edx, 00000008
:0046A46E 7E3F                    jle 0046A4AF
:0046A470 8B45B0                  mov eax, dword ptr [ebp-50]
:0046A473 99                      cdq
:0046A474 B930000000              mov ecx, 00000030
:0046A479 F7F9                    idiv ecx
:0046A47B 83FA10                  cmp edx, 00000010
:0046A47E 7D2F                    jge 0046A4AF
:0046A480 BA10000000              mov edx, 00000010
:0046A485 2B55B0                  sub edx, dword ptr [ebp-50]
:0046A488 85D2                    test edx, edx
:0046A48A 7D09                    jge 0046A495
:0046A48C C7458C00000000          mov [ebp-74], 00000000
:0046A493 EB0B                    jmp 0046A4A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A48A(C)
|
:0046A495 B810000000              mov eax, 00000010
:0046A49A 2B45B0                  sub eax, dword ptr [ebp-50]
:0046A49D 89458C                  mov dword ptr [ebp-74], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A493(U)
|
:0046A4A0 8B0D941E4800            mov ecx, dword ptr [00481E94]
:0046A4A6 2B4D8C                  sub ecx, dword ptr [ebp-74]
:0046A4A9 890D941E4800            mov dword ptr [00481E94], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A46E(C), :0046A47E(C)
|
:0046A4AF 8B45B4                  mov eax, dword ptr [ebp-4C]
:0046A4B2 99                      cdq
:0046A4B3 B930000000              mov ecx, 00000030
:0046A4B8 F7F9                    idiv ecx
:0046A4BA 83FA08                  cmp edx, 00000008
:0046A4BD 7E3F                    jle 0046A4FE
:0046A4BF 8B45B4                  mov eax, dword ptr [ebp-4C]
:0046A4C2 99                      cdq
:0046A4C3 B930000000              mov ecx, 00000030
:0046A4C8 F7F9                    idiv ecx
:0046A4CA 83FA10                  cmp edx, 00000010
:0046A4CD 7D2F                    jge 0046A4FE
:0046A4CF BA10000000              mov edx, 00000010
:0046A4D4 2B55B4                  sub edx, dword ptr [ebp-4C]
:0046A4D7 85D2                    test edx, edx
:0046A4D9 7D09                    jge 0046A4E4
:0046A4DB C7458800000000          mov [ebp-78], 00000000
:0046A4E2 EB0B                    jmp 0046A4EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A4D9(C)
|
:0046A4E4 B810000000              mov eax, 00000010
:0046A4E9 2B45B4                  sub eax, dword ptr [ebp-4C]
:0046A4EC 894588                  mov dword ptr [ebp-78], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A4E2(U)
|
:0046A4EF 8B0D981E4800            mov ecx, dword ptr [00481E98]
:0046A4F5 2B4D88                  sub ecx, dword ptr [ebp-78]
:0046A4F8 890D981E4800            mov dword ptr [00481E98], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A4BD(C), :0046A4CD(C)
|
:0046A4FE 8B15981E4800            mov edx, dword ptr [00481E98]
:0046A504 3B55F4                  cmp edx, dword ptr [ebp-0C]
:0046A507 7D0A                    jge 0046A513
:0046A509 A1981E4800              mov eax, dword ptr [00481E98]
:0046A50E 894584                  mov dword ptr [ebp-7C], eax
:0046A511 EB06                    jmp 0046A519

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A507(C)
|
:0046A513 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046A516 894D84                  mov dword ptr [ebp-7C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A511(U)
|
:0046A519 6A00                    push 00000000
:0046A51B 8B5584                  mov edx, dword ptr [ebp-7C]
:0046A51E 83EA28                  sub edx, 00000028
:0046A521 52                      push edx
:0046A522 A1941E4800              mov eax, dword ptr [00481E94]
:0046A527 50                      push eax
:0046A528 E8E7D00000              call 00477614
:0046A52D 83C40C                  add esp, 0000000C
:0046A530 B928B44800              mov ecx, 0048B428
:0046A535 E866F3FAFF              call 004198A0
:0046A53A 85C0                    test eax, eax
:0046A53C 7504                    jne 0046A542
:0046A53E 33C0                    xor eax, eax
:0046A540 EB37                    jmp 0046A579

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A53C(C)
|
:0046A542 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0046A548 51                      push ecx
:0046A549 E840C1FFFF              call 0046668E
:0046A54E 83C404                  add esp, 00000004
:0046A551 85C0                    test eax, eax
:0046A553 7504                    jne 0046A559
:0046A555 33C0                    xor eax, eax
:0046A557 EB20                    jmp 0046A579

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A553(C)
|
:0046A559 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0046A55F 52                      push edx
:0046A560 E827050000              call 0046AA8C
:0046A565 83C404                  add esp, 00000004
:0046A568 85C0                    test eax, eax
:0046A56A 7404                    je 0046A570
:0046A56C 33C0                    xor eax, eax
:0046A56E EB09                    jmp 0046A579

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A56A(C)
|
:0046A570 B801000000              mov eax, 00000001
:0046A575 EB02                    jmp 0046A579

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A411(C)
|
:0046A577 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A187(U), :0046A1D5(U), :0046A245(U), :0046A27B(U), :0046A540(U)
|:0046A557(U), :0046A56E(U), :0046A575(U)
|
:0046A579 8BE5                    mov esp, ebp
:0046A57B 5D                      pop ebp
:0046A57C C20800                  ret 0008



* Referenced by a CALL at Address:
|:0046FECA   
|
:0046A57F 55                      push ebp
:0046A580 8BEC                    mov ebp, esp
:0046A582 83EC1C                  sub esp, 0000001C
:0046A585 8B450C                  mov eax, dword ptr [ebp+0C]
:0046A588 50                      push eax
:0046A589 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046A58C 51                      push ecx
:0046A58D E87DFBFFFF              call 0046A10F
:0046A592 85C0                    test eax, eax
:0046A594 7504                    jne 0046A59A
:0046A596 33C0                    xor eax, eax
:0046A598 EB1F                    jmp 0046A5B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A594(C)
|
:0046A59A 68B2994600              push 004699B2
:0046A59F E8A8CE0000              call 0047744C
:0046A5A4 83C404                  add esp, 00000004
:0046A5A7 E85E4EFCFF              call 0042F40A
:0046A5AC B928B44800              mov ecx, 0048B428
:0046A5B1 E8DBF7FAFF              call 00419D91
:0046A5B6 8B45EC                  mov eax, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A598(U)
|
:0046A5B9 8BE5                    mov esp, ebp
:0046A5BB 5D                      pop ebp
:0046A5BC C21000                  ret 0010


:0046A5BF CC                      int 03

* Referenced by a CALL at Addresses:
|:004039DC   , :00403AD7   , :00403B95   , :00403BEE   , :00403C4A   
|:00403C7E   , :00404F0D   , :0040F21A   , :0040F27F   , :0040F2AF   
|:00412CC8   , :00412CF1   , :00412D1A   , :00414336   , :0041435F   
|:00414388   , :004148B4   , :004148DD   , :00414906   , :00416178   
|:004161A1   , :004161CA   , :00416A1A   , :004170C3   , :004174FD   
|:00417534   , :0041756B   , :004175A2   , :004175D9   , :00417610   
|:00417647   , :00417683   , :00417775   , :004177AC   , :004177E3   
|:0041781A   , :00417851   , :00417888   , :004178BF   , :004178FB   
|:004179EA   , :00417A21   , :00417A58   , :00417A8F   , :00417AC6   
|:00417AFD   , :00417B34   , :00417B70   , :00417C62   , :00417C99   
|:00417CD0   , :00417D07   , :00417D3E   , :00417D75   , :00417DAC   
|:00417DE8   , :004182B4   , :0041912E   , :00419172   , :004191E6   
|:004191FA   , :00420EE2   , :00424A7D   , :00424B6D   , :00424B9B   
|:00424BC9   , :00424BF7   , :00424C2A   , :00424C58   , :00424CAF   
|:00424D60   , :00424D8E   , :00424DBC   , :00424DEA   , :00424E1D   
|:00424E4B   , :00428E03   , :004633A9   , :004633E0   , :00463417   
|:0046344E   , :00463485   , :004634BC   , :004634F3   , :0046352F   
|:00463752   , :0046377B   , :004637A4   , :00463B0E   , :0046496B   
|:00464994   , :004649BD   , :004653C9   , :00465400   , :00465437   
|:0046546E   , :004654A5   , :004654DC   , :00465513   , :0046554F   
|:0046AD46   , :0046AD8A   , :0046ADCE   , :0046AE17   , :0046AE64   
|:0046AEB6   , :0046AF9F   , :0046AFE3   , :0046B02C   , :0046B05A   
|:0046B088   , :0046B11E   , :0046B19E   , :0046BD22   
|
:0046A5C0 55                      push ebp
:0046A5C1 8BEC                    mov ebp, esp
:0046A5C3 8B4510                  mov eax, dword ptr [ebp+10]
:0046A5C6 50                      push eax
:0046A5C7 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046A5CA 51                      push ecx
:0046A5CB 8B5508                  mov edx, dword ptr [ebp+08]
:0046A5CE 52                      push edx
:0046A5CF E8FCDD0000              call 004783D0
:0046A5D4 83C40C                  add esp, 0000000C
:0046A5D7 5D                      pop ebp
:0046A5D8 C3                      ret



* Referenced by a CALL at Addresses:
|:0040FAE2   , :0040FB76   , :0040FB99   , :0042F09A   , :0042F193   
|:0042F2C9   , :0042F2E8   , :0042F302   , :0042F326   
|
:0046A5D9 55                      push ebp
:0046A5DA 8BEC                    mov ebp, esp
:0046A5DC 8B4508                  mov eax, dword ptr [ebp+08]
:0046A5DF A368D44700              mov dword ptr [0047D468], eax
:0046A5E4 5D                      pop ebp
:0046A5E5 C3                      ret



* Referenced by a CALL at Address:
|:0042F4C4   
|
:0046A5E6 55                      push ebp
:0046A5E7 8BEC                    mov ebp, esp
:0046A5E9 83EC08                  sub esp, 00000008
:0046A5EC A1B0554B00              mov eax, dword ptr [004B55B0]
:0046A5F1 50                      push eax

* Reference To: USER32.GetMenu, Ord:0109h
                                  |
:0046A5F2 FF158CD64B00            Call dword ptr [004BD68C]
:0046A5F8 8945F8                  mov dword ptr [ebp-08], eax

* Possible StringData Ref from Data Obj ->"APPMENU"
                                  |
:0046A5FB 6880224800              push 00482280
:0046A600 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0046A606 51                      push ecx

* Reference To: USER32.LoadMenuA, Ord:017Eh
                                  |
:0046A607 FF15BCD54B00            Call dword ptr [004BD5BC]
:0046A60D 8945FC                  mov dword ptr [ebp-04], eax
:0046A610 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A613 52                      push edx
:0046A614 A1B0554B00              mov eax, dword ptr [004B55B0]
:0046A619 50                      push eax

* Reference To: USER32.SetMenu, Ord:01FBh
                                  |
:0046A61A FF1520D64B00            Call dword ptr [004BD620]
:0046A620 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0046A626 51                      push ecx

* Reference To: USER32.DrawMenuBar, Ord:00A6h
                                  |
:0046A627 FF1514D74B00            Call dword ptr [004BD714]
:0046A62D 8B55F8                  mov edx, dword ptr [ebp-08]
:0046A630 52                      push edx

* Reference To: USER32.DestroyMenu, Ord:0089h
                                  |
:0046A631 FF15E0D54B00            Call dword ptr [004BD5E0]
:0046A637 8BE5                    mov esp, ebp
:0046A639 5D                      pop ebp
:0046A63A C3                      ret



* Referenced by a CALL at Addresses:
|:00411B7A   , :00411E34   , :0041223D   , :00412277   , :0041A958   
|:0042EEAC   , :0042EF70   , :0042F212   , :0042F26B   , :0042F3A6   
|:0042F428   , :00431BC9   , :004390CD   , :00439250   , :0045CB54   
|:0045E186   , :0045E3AB   , :0045E555   , :0045E637   , :0045E694   
|:0045EB7A   , :0045EBC2   , :0045F000   , :0045F0A5   , :0046AAC4   
|
:0046A63B 55                      push ebp
:0046A63C 8BEC                    mov ebp, esp
:0046A63E 83EC14                  sub esp, 00000014
:0046A641 A1B0554B00              mov eax, dword ptr [004B55B0]
:0046A646 50                      push eax

* Reference To: USER32.GetMenu, Ord:0109h
                                  |
:0046A647 FF158CD64B00            Call dword ptr [004BD68C]
:0046A64D 8945FC                  mov dword ptr [ebp-04], eax
:0046A650 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A653 51                      push ecx

* Reference To: USER32.GetMenuItemCount, Ord:010Dh
                                  |
:0046A654 FF15ACD54B00            Call dword ptr [004BD5AC]
:0046A65A 8945EC                  mov dword ptr [ebp-14], eax
:0046A65D 8B5508                  mov edx, dword ptr [ebp+08]
:0046A660 52                      push edx
:0046A661 E824010000              call 0046A78A
:0046A666 83C404                  add esp, 00000004
:0046A669 8B4508                  mov eax, dword ptr [ebp+08]
:0046A66C F7D8                    neg eax
:0046A66E 1BC0                    sbb eax, eax
:0046A670 0501040000              add eax, 00000401
:0046A675 8945F4                  mov dword ptr [ebp-0C], eax
:0046A678 C745F000000000          mov [ebp-10], 00000000
:0046A67F EB09                    jmp 0046A68A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A6A2(U)
|
:0046A681 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046A684 83C101                  add ecx, 00000001
:0046A687 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A67F(U)
|
:0046A68A 837DF005                cmp dword ptr [ebp-10], 00000005
:0046A68E 7314                    jnb 0046A6A4
:0046A690 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046A693 52                      push edx
:0046A694 8B45F0                  mov eax, dword ptr [ebp-10]
:0046A697 50                      push eax
:0046A698 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A69B 51                      push ecx

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:0046A69C FF15A8D54B00            Call dword ptr [004BD5A8]
:0046A6A2 EBDD                    jmp 0046A681

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A68E(C)
|
:0046A6A4 6A01                    push 00000001
:0046A6A6 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A6A9 52                      push edx

* Reference To: USER32.GetSubMenu, Ord:0128h
                                  |
:0046A6AA FF15C0D54B00            Call dword ptr [004BD5C0]
:0046A6B0 8945F8                  mov dword ptr [ebp-08], eax
:0046A6B3 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046A6B6 50                      push eax
:0046A6B7 6A00                    push 00000000
:0046A6B9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046A6BC 51                      push ecx

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:0046A6BD FF15A8D54B00            Call dword ptr [004BD5A8]
:0046A6C3 837D0801                cmp dword ptr [ebp+08], 00000001
:0046A6C7 7522                    jne 0046A6EB
:0046A6C9 E8956EFAFF              call 00411563
:0046A6CE 25FF000000              and eax, 000000FF
:0046A6D3 83F803                  cmp eax, 00000003
:0046A6D6 7413                    je 0046A6EB

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A6D8 6801040000              push 00000401
:0046A6DD 6A01                    push 00000001
:0046A6DF 8B55F8                  mov edx, dword ptr [ebp-08]
:0046A6E2 52                      push edx

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:0046A6E3 FF15A8D54B00            Call dword ptr [004BD5A8]
:0046A6E9 EB10                    jmp 0046A6FB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A6C7(C), :0046A6D6(C)
|
:0046A6EB 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046A6EE 50                      push eax
:0046A6EF 6A01                    push 00000001
:0046A6F1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046A6F4 51                      push ecx

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:0046A6F5 FF15A8D54B00            Call dword ptr [004BD5A8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A6E9(U)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046A6FB 6A02                    push 00000002
:0046A6FD 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A700 52                      push edx

* Reference To: USER32.GetSubMenu, Ord:0128h
                                  |
:0046A701 FF15C0D54B00            Call dword ptr [004BD5C0]
:0046A707 8945F8                  mov dword ptr [ebp-08], eax
:0046A70A C745F000000000          mov [ebp-10], 00000000
:0046A711 EB09                    jmp 0046A71C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A734(U)
|
:0046A713 8B45F0                  mov eax, dword ptr [ebp-10]
:0046A716 83C001                  add eax, 00000001
:0046A719 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A711(U)
|
:0046A71C 837DF004                cmp dword ptr [ebp-10], 00000004
:0046A720 7314                    jnb 0046A736
:0046A722 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046A725 51                      push ecx
:0046A726 8B55F0                  mov edx, dword ptr [ebp-10]
:0046A729 52                      push edx
:0046A72A 8B45F8                  mov eax, dword ptr [ebp-08]
:0046A72D 50                      push eax

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:0046A72E FF15A8D54B00            Call dword ptr [004BD5A8]
:0046A734 EBDD                    jmp 0046A713

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A720(C)
|
:0046A736 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046A739 51                      push ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046A73A 6A02                    push 00000002
:0046A73C 8B55F8                  mov edx, dword ptr [ebp-08]
:0046A73F 52                      push edx

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:0046A740 FF15A8D54B00            Call dword ptr [004BD5A8]
:0046A746 837D0801                cmp dword ptr [ebp+08], 00000001
:0046A74A 7520                    jne 0046A76C
:0046A74C E8126EFAFF              call 00411563
:0046A751 25FF000000              and eax, 000000FF
:0046A756 83F803                  cmp eax, 00000003
:0046A759 7411                    je 0046A76C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A75B 6801040000              push 00000401

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046A760 6A03                    push 00000003
:0046A762 8B45F8                  mov eax, dword ptr [ebp-08]
:0046A765 50                      push eax

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:0046A766 FF15A8D54B00            Call dword ptr [004BD5A8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A74A(C), :0046A759(C)
|
:0046A76C 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0046A772 51                      push ecx

* Reference To: USER32.DrawMenuBar, Ord:00A6h
                                  |
:0046A773 FF1514D74B00            Call dword ptr [004BD714]
:0046A779 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0046A77F 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0046A780 FF15FCD54B00            Call dword ptr [004BD5FC]
:0046A786 8BE5                    mov esp, ebp
:0046A788 5D                      pop ebp
:0046A789 C3                      ret



* Referenced by a CALL at Address:
|:0046A661   
|
:0046A78A 55                      push ebp
:0046A78B 8BEC                    mov ebp, esp
:0046A78D 8B4508                  mov eax, dword ptr [ebp+08]
:0046A790 25FFFF0000              and eax, 0000FFFF
:0046A795 50                      push eax

* Possible Ref to Menu: APPMENU, Item: "X(S)"
                                  |
:0046A796 6A65                    push 00000065

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A798 6801040000              push 00000401
:0046A79D 8B0DC0554B00            mov ecx, dword ptr [004B55C0]
:0046A7A3 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A7A4 FF1504D64B00            Call dword ptr [004BD604]
:0046A7AA 8B5508                  mov edx, dword ptr [ebp+08]
:0046A7AD 81E2FFFF0000            and edx, 0000FFFF
:0046A7B3 52                      push edx

* Possible Ref to Menu: APPMENU, Item: "}e(L)"
                                  |
:0046A7B4 6A66                    push 00000066

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A7B6 6801040000              push 00000401
:0046A7BB A1C0554B00              mov eax, dword ptr [004B55C0]
:0046A7C0 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A7C1 FF1504D64B00            Call dword ptr [004BD604]
:0046A7C7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046A7CA 81E1FFFF0000            and ecx, 0000FFFF
:0046A7D0 51                      push ecx

* Possible Ref to Menu: APPMENU, Item: "(K)"
                                  |
:0046A7D1 6A6B                    push 0000006B

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A7D3 6801040000              push 00000401
:0046A7D8 8B15C0554B00            mov edx, dword ptr [004B55C0]
:0046A7DE 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A7DF FF1504D64B00            Call dword ptr [004BD604]
:0046A7E5 8B4508                  mov eax, dword ptr [ebp+08]
:0046A7E8 25FFFF0000              and eax, 0000FFFF
:0046A7ED 50                      push eax

* Possible Ref to Menu: APPMENU, Item: "fo(B)"
                                  |
:0046A7EE 6A69                    push 00000069

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A7F0 6801040000              push 00000401
:0046A7F5 8B0DC0554B00            mov ecx, dword ptr [004B55C0]
:0046A7FB 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A7FC FF1504D64B00            Call dword ptr [004BD604]
:0046A802 8B5508                  mov edx, dword ptr [ebp+08]
:0046A805 81E2FFFF0000            and edx, 0000FFFF
:0046A80B 52                      push edx

* Possible Ref to Menu: APPMENU, Item: ":)(J)"
                                  |
:0046A80C 6A6C                    push 0000006C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A80E 6801040000              push 00000401
:0046A813 A1C0554B00              mov eax, dword ptr [004B55C0]
:0046A818 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A819 FF1504D64B00            Call dword ptr [004BD604]
:0046A81F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046A822 81E1FFFF0000            and ecx, 0000FFFF
:0046A828 51                      push ecx

* Possible Ref to Menu: APPMENU, Item: "   _(E)"
                                  |
:0046A829 6A6D                    push 0000006D

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A82B 6801040000              push 00000401
:0046A830 8B15C0554B00            mov edx, dword ptr [004B55C0]
:0046A836 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A837 FF1504D64B00            Call dword ptr [004BD604]
:0046A83D 8B4508                  mov eax, dword ptr [ebp+08]
:0046A840 25FFFF0000              and eax, 0000FFFF
:0046A845 50                      push eax

* Possible Ref to Menu: APPMENU, Item: "g,o(T)"
                                  |
:0046A846 6A6A                    push 0000006A

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A848 6801040000              push 00000401
:0046A84D 8B0DC0554B00            mov ecx, dword ptr [004B55C0]
:0046A853 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A854 FF1504D64B00            Call dword ptr [004BD604]
:0046A85A 8B5508                  mov edx, dword ptr [ebp+08]
:0046A85D 81E2FFFF0000            and edx, 0000FFFF
:0046A863 52                      push edx
:0046A864 6A6E                    push 0000006E

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A866 6801040000              push 00000401
:0046A86B A1C0554B00              mov eax, dword ptr [004B55C0]
:0046A870 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A871 FF1504D64B00            Call dword ptr [004BD604]
:0046A877 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046A87A 81E1FFFF0000            and ecx, 0000FFFF
:0046A880 51                      push ecx
:0046A881 6A6F                    push 0000006F

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A883 6801040000              push 00000401
:0046A888 8B15C0554B00            mov edx, dword ptr [004B55C0]
:0046A88E 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A88F FF1504D64B00            Call dword ptr [004BD604]
:0046A895 837D0800                cmp dword ptr [ebp+08], 00000000
:0046A899 7465                    je 0046A900
:0046A89B E8C36CFAFF              call 00411563
:0046A8A0 25FF000000              and eax, 000000FF
:0046A8A5 83F803                  cmp eax, 00000003
:0046A8A8 7456                    je 0046A900
:0046A8AA 6A00                    push 00000000

* Possible Ref to Menu: APPMENU, Item: ":)(J)"
                                  |
:0046A8AC 6A6C                    push 0000006C

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A8AE 6801040000              push 00000401
:0046A8B3 A1C0554B00              mov eax, dword ptr [004B55C0]
:0046A8B8 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A8B9 FF1504D64B00            Call dword ptr [004BD604]
:0046A8BF 6A00                    push 00000000

* Possible Ref to Menu: APPMENU, Item: "   _(E)"
                                  |
:0046A8C1 6A6D                    push 0000006D

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A8C3 6801040000              push 00000401
:0046A8C8 8B0DC0554B00            mov ecx, dword ptr [004B55C0]
:0046A8CE 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A8CF FF1504D64B00            Call dword ptr [004BD604]
:0046A8D5 6A00                    push 00000000
:0046A8D7 6A6E                    push 0000006E

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A8D9 6801040000              push 00000401
:0046A8DE 8B15C0554B00            mov edx, dword ptr [004B55C0]
:0046A8E4 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A8E5 FF1504D64B00            Call dword ptr [004BD604]
:0046A8EB 6A00                    push 00000000
:0046A8ED 6A6F                    push 0000006F

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046A8EF 6801040000              push 00000401
:0046A8F4 A1C0554B00              mov eax, dword ptr [004B55C0]
:0046A8F9 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046A8FA FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046A899(C), :0046A8A8(C)
|
:0046A900 5D                      pop ebp
:0046A901 C3                      ret


:0046A902 55                      push ebp
:0046A903 8BEC                    mov ebp, esp
:0046A905 83EC10                  sub esp, 00000010
:0046A908 A1B0554B00              mov eax, dword ptr [004B55B0]
:0046A90D 50                      push eax

* Reference To: USER32.GetMenu, Ord:0109h
                                  |
:0046A90E FF158CD64B00            Call dword ptr [004BD68C]
:0046A914 8945FC                  mov dword ptr [ebp-04], eax
:0046A917 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A91A 51                      push ecx

* Reference To: USER32.GetMenuItemCount, Ord:010Dh
                                  |
:0046A91B FF15ACD54B00            Call dword ptr [004BD5AC]
:0046A921 8945F0                  mov dword ptr [ebp-10], eax
:0046A924 C745F400000000          mov [ebp-0C], 00000000
:0046A92B EB09                    jmp 0046A936

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A95E(U)
|
:0046A92D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046A930 83C201                  add edx, 00000001
:0046A933 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A92B(U)
|
:0046A936 837DF405                cmp dword ptr [ebp-0C], 00000005
:0046A93A 7324                    jnb 0046A960
:0046A93C 837DF403                cmp dword ptr [ebp-0C], 00000003
:0046A940 1BC0                    sbb eax, eax
:0046A942 F7D8                    neg eax
:0046A944 0500040000              add eax, 00000400
:0046A949 8945F8                  mov dword ptr [ebp-08], eax
:0046A94C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046A94F 51                      push ecx
:0046A950 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046A953 52                      push edx
:0046A954 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A957 50                      push eax

* Reference To: USER32.EnableMenuItem, Ord:00B0h
                                  |
:0046A958 FF15A8D54B00            Call dword ptr [004BD5A8]
:0046A95E EBCD                    jmp 0046A92D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A93A(C)
|
:0046A960 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0046A966 51                      push ecx

* Reference To: USER32.DrawMenuBar, Ord:00A6h
                                  |
:0046A967 FF1514D74B00            Call dword ptr [004BD714]
:0046A96D 8BE5                    mov esp, ebp
:0046A96F 5D                      pop ebp
:0046A970 C3                      ret


:0046A971 55                      push ebp
:0046A972 8BEC                    mov ebp, esp
:0046A974 51                      push ecx
:0046A975 C745FC00000000          mov [ebp-04], 00000000
:0046A97C EB09                    jmp 0046A987

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A9A2(U)
|
:0046A97E 8B45FC                  mov eax, dword ptr [ebp-04]
:0046A981 83C001                  add eax, 00000001
:0046A984 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A97C(U)
|
:0046A987 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046A98A 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:0046A98D 7315                    jnb 0046A9A4

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:0046A98F 6800040000              push 00000400
:0046A994 8B55FC                  mov edx, dword ptr [ebp-04]
:0046A997 52                      push edx
:0046A998 8B4508                  mov eax, dword ptr [ebp+08]
:0046A99B 50                      push eax

* Reference To: USER32.CheckMenuItem, Ord:0030h
                                  |
:0046A99C FF15B0D54B00            Call dword ptr [004BD5B0]
:0046A9A2 EBDA                    jmp 0046A97E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A98D(C)
|
:0046A9A4 8BE5                    mov esp, ebp
:0046A9A6 5D                      pop ebp
:0046A9A7 C3                      ret



* Referenced by a CALL at Address:
|:0046AA99   
|
:0046A9A8 55                      push ebp
:0046A9A9 8BEC                    mov ebp, esp

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0014, ""
                                  |
:0046A9AB 6A14                    push 00000014
:0046A9AD 6A00                    push 00000000
:0046A9AF 6A00                    push 00000000
:0046A9B1 6A1C                    push 0000001C
:0046A9B3 6A0E                    push 0000000E
:0046A9B5 6A0B                    push 0000000B
:0046A9B7 6828204800              push 00482028

* Possible Ref to Menu: APPMENU, Item: "g,o(T)"
                                  |
:0046A9BC 6A6A                    push 0000006A
:0046A9BE A1A8554B00              mov eax, dword ptr [004B55A8]
:0046A9C3 50                      push eax
:0046A9C4 6A0D                    push 0000000D
:0046A9C6 6A71                    push 00000071
:0046A9C8 6800010050              push 50000100
:0046A9CD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046A9D0 51                      push ecx

* Reference To: COMCTL32.CreateToolbarEx, Ord:0008h
                                  |
:0046A9D1 FF150CD44B00            Call dword ptr [004BD40C]
:0046A9D7 A3C0554B00              mov dword ptr [004B55C0], eax
:0046A9DC 833DC0554B0000          cmp dword ptr [004B55C0], 00000000
:0046A9E3 7504                    jne 0046A9E9
:0046A9E5 33C0                    xor eax, eax
:0046A9E7 EB05                    jmp 0046A9EE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A9E3(C)
|
:0046A9E9 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046A9E7(U)
|
:0046A9EE 5D                      pop ebp
:0046A9EF C3                      ret



* Referenced by a CALL at Addresses:
|:0040E908   , :004115A3   , :004119F6   , :0045F2D7   , :0046AA5E   
|
:0046A9F0 55                      push ebp
:0046A9F1 8BEC                    mov ebp, esp
:0046A9F3 8B4508                  mov eax, dword ptr [ebp+08]
:0046A9F6 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@^"
                                  |
:0046A9F7 68F7030000              push 000003F7
:0046A9FC 8B0D6C624B00            mov ecx, dword ptr [004B626C]
:0046AA02 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AA03 FF1510D64B00            Call dword ptr [004BD610]
:0046AA09 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AA0A FF1514D64B00            Call dword ptr [004BD614]
:0046AA10 5D                      pop ebp
:0046AA11 C3                      ret



* Referenced by a CALL at Addresses:
|:00412126   , :0041EFEF   , :0044D253   , :0046AA70   
|
:0046AA12 55                      push ebp
:0046AA13 8BEC                    mov ebp, esp
:0046AA15 8B4508                  mov eax, dword ptr [ebp+08]
:0046AA18 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:0046AA19 68F8030000              push 000003F8
:0046AA1E 8B0D6C624B00            mov ecx, dword ptr [004B626C]
:0046AA24 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AA25 FF1510D64B00            Call dword ptr [004BD610]
:0046AA2B 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AA2C FF1514D64B00            Call dword ptr [004BD614]
:0046AA32 5D                      pop ebp
:0046AA33 C3                      ret



* Referenced by a CALL at Addresses:
|:0044D196   , :0046AA82   
|
:0046AA34 55                      push ebp
:0046AA35 8BEC                    mov ebp, esp
:0046AA37 8B4508                  mov eax, dword ptr [ebp+08]
:0046AA3A 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:0046AA3B 68F9030000              push 000003F9
:0046AA40 8B0D6C624B00            mov ecx, dword ptr [004B626C]
:0046AA46 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AA47 FF1510D64B00            Call dword ptr [004BD610]
:0046AA4D 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AA4E FF1514D64B00            Call dword ptr [004BD614]
:0046AA54 5D                      pop ebp
:0046AA55 C3                      ret



* Referenced by a CALL at Address:
|:0046CC71   
|
:0046AA56 55                      push ebp
:0046AA57 8BEC                    mov ebp, esp
:0046AA59 6888624B00              push 004B6288
:0046AA5E E88DFFFFFF              call 0046A9F0
:0046AA63 83C404                  add esp, 00000004
:0046AA66 5D                      pop ebp
:0046AA67 C3                      ret



* Referenced by a CALL at Addresses:
|:00411C27   , :0044D1E6   , :0044D24A   , :0046CC7B   
|
:0046AA68 55                      push ebp
:0046AA69 8BEC                    mov ebp, esp
:0046AA6B 688C624B00              push 004B628C
:0046AA70 E89DFFFFFF              call 0046AA12
:0046AA75 83C404                  add esp, 00000004
:0046AA78 5D                      pop ebp
:0046AA79 C3                      ret



* Referenced by a CALL at Addresses:
|:0045E37C   , :0046CC76   
|
:0046AA7A 55                      push ebp
:0046AA7B 8BEC                    mov ebp, esp
:0046AA7D 6890624B00              push 004B6290
:0046AA82 E8ADFFFFFF              call 0046AA34
:0046AA87 83C404                  add esp, 00000004
:0046AA8A 5D                      pop ebp
:0046AA8B C3                      ret



* Referenced by a CALL at Address:
|:0046A560   
|
:0046AA8C 55                      push ebp
:0046AA8D 8BEC                    mov ebp, esp

* Reference To: COMCTL32.InitCommonControls, Ord:0011h
                                  |
:0046AA8F FF151CD44B00            Call dword ptr [004BD41C]
:0046AA95 8B4508                  mov eax, dword ptr [ebp+08]
:0046AA98 50                      push eax
:0046AA99 E80AFFFFFF              call 0046A9A8
:0046AA9E 83C404                  add esp, 00000004
:0046AAA1 85C0                    test eax, eax
:0046AAA3 7505                    jne 0046AAAA
:0046AAA5 83C8FF                  or eax, FFFFFFFF
:0046AAA8 EB24                    jmp 0046AACE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AAA3(C)
|
:0046AAAA 8B0DC0554B00            mov ecx, dword ptr [004B55C0]
:0046AAB0 51                      push ecx
:0046AAB1 E81A000000              call 0046AAD0
:0046AAB6 83C404                  add esp, 00000004
:0046AAB9 85C0                    test eax, eax
:0046AABB 7505                    jne 0046AAC2
:0046AABD 83C8FF                  or eax, FFFFFFFF
:0046AAC0 EB0C                    jmp 0046AACE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AABB(C)
|
:0046AAC2 6A00                    push 00000000
:0046AAC4 E872FBFFFF              call 0046A63B
:0046AAC9 83C404                  add esp, 00000004
:0046AACC 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046AAA8(U), :0046AAC0(U)
|
:0046AACE 5D                      pop ebp
:0046AACF C3                      ret



* Referenced by a CALL at Address:
|:0046AAB1   
|
:0046AAD0 55                      push ebp
:0046AAD1 8BEC                    mov ebp, esp
:0046AAD3 83EC10                  sub esp, 00000010
:0046AAD6 6A00                    push 00000000
:0046AAD8 68B1AB4600              push 0046ABB1
:0046AADD 8B4508                  mov eax, dword ptr [ebp+08]
:0046AAE0 50                      push eax

* Possible Reference to Dialog: DialogID_00D0 
                                  |
:0046AAE1 68D0000000              push 000000D0
:0046AAE6 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0046AAEC 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:0046AAED FF15F8D54B00            Call dword ptr [004BD5F8]
:0046AAF3 A36C624B00              mov dword ptr [004B626C], eax
:0046AAF8 8D55F0                  lea edx, dword ptr [ebp-10]
:0046AAFB 52                      push edx
:0046AAFC A16C624B00              mov eax, dword ptr [004B626C]
:0046AB01 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0046AB02 FF15A4D64B00            Call dword ptr [004BD6A4]
:0046AB08 6A00                    push 00000000
:0046AB0A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046AB0D 2B4DF4                  sub ecx, dword ptr [ebp-0C]
:0046AB10 83C101                  add ecx, 00000001
:0046AB13 51                      push ecx
:0046AB14 8B55F8                  mov edx, dword ptr [ebp-08]
:0046AB17 2B55F0                  sub edx, dword ptr [ebp-10]
:0046AB1A 83C201                  add edx, 00000001
:0046AB1D 52                      push edx
:0046AB1E 6A00                    push 00000000
:0046AB20 68E7000000              push 000000E7
:0046AB25 A16C624B00              mov eax, dword ptr [004B626C]
:0046AB2A 50                      push eax

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:0046AB2B FF15ECD54B00            Call dword ptr [004BD5EC]
:0046AB31 68B0474900              push 004947B0

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@^"
                                  |
:0046AB36 68F7030000              push 000003F7
:0046AB3B 8B0D6C624B00            mov ecx, dword ptr [004B626C]
:0046AB41 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AB42 FF1510D64B00            Call dword ptr [004BD610]
:0046AB48 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AB49 FF1514D64B00            Call dword ptr [004BD614]
:0046AB4F 6894624B00              push 004B6294

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:0046AB54 68F8030000              push 000003F8
:0046AB59 8B156C624B00            mov edx, dword ptr [004B626C]
:0046AB5F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AB60 FF1510D64B00            Call dword ptr [004BD610]
:0046AB66 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AB67 FF1514D64B00            Call dword ptr [004BD614]
:0046AB6D 6898624B00              push 004B6298

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:0046AB72 68F9030000              push 000003F9
:0046AB77 A16C624B00              mov eax, dword ptr [004B626C]
:0046AB7C 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AB7D FF1510D64B00            Call dword ptr [004BD610]
:0046AB83 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AB84 FF1514D64B00            Call dword ptr [004BD614]
:0046AB8A 689C624B00              push 004B629C

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03FA, ""
                                  |
:0046AB8F 68FA030000              push 000003FA
:0046AB94 8B0D6C624B00            mov ecx, dword ptr [004B626C]
:0046AB9A 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AB9B FF1510D64B00            Call dword ptr [004BD610]
:0046ABA1 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046ABA2 FF1514D64B00            Call dword ptr [004BD614]
:0046ABA8 B801000000              mov eax, 00000001
:0046ABAD 8BE5                    mov esp, ebp
:0046ABAF 5D                      pop ebp
:0046ABB0 C3                      ret


:0046ABB1 55                      push ebp
:0046ABB2 8BEC                    mov ebp, esp
:0046ABB4 33C0                    xor eax, eax
:0046ABB6 5D                      pop ebp
:0046ABB7 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:004630A3   , :0046CDF9   
|
:0046ABBA 55                      push ebp
:0046ABBB 8BEC                    mov ebp, esp
:0046ABBD 83EC08                  sub esp, 00000008
:0046ABC0 C745FC00000000          mov [ebp-04], 00000000
:0046ABC7 68800C0000              push 00000C80
:0046ABCC 68FFFF0000              push 0000FFFF
:0046ABD1 68E8554B00              push 004B55E8
:0046ABD6 E8F54E0000              call 0046FAD0
:0046ABDB 83C40C                  add esp, 0000000C
:0046ABDE C745F800000000          mov [ebp-08], 00000000
:0046ABE5 EB09                    jmp 0046ABF0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046AC09(U), :0046AC21(U)
|
:0046ABE7 8B45F8                  mov eax, dword ptr [ebp-08]
:0046ABEA 83C001                  add eax, 00000001
:0046ABED 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ABE5(U)
|
:0046ABF0 817DF8C8000000          cmp dword ptr [ebp-08], 000000C8
:0046ABF7 732A                    jnb 0046AC23
:0046ABF9 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046ABFC 51                      push ecx
:0046ABFD E88E32FAFF              call 0040DE90
:0046AC02 83C404                  add esp, 00000004
:0046AC05 85C0                    test eax, eax
:0046AC07 7502                    jne 0046AC0B
:0046AC09 EBDC                    jmp 0046ABE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AC07(C)
|
:0046AC0B 8B55FC                  mov edx, dword ptr [ebp-04]
:0046AC0E 8B45F8                  mov eax, dword ptr [ebp-08]
:0046AC11 890495E8554B00          mov dword ptr [4*edx+004B55E8], eax
:0046AC18 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046AC1B 83C101                  add ecx, 00000001
:0046AC1E 894DFC                  mov dword ptr [ebp-04], ecx
:0046AC21 EBC4                    jmp 0046ABE7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ABF7(C)
|
:0046AC23 8B45FC                  mov eax, dword ptr [ebp-04]
:0046AC26 8BE5                    mov esp, ebp
:0046AC28 5D                      pop ebp
:0046AC29 C3                      ret



* Referenced by a CALL at Addresses:
|:00403A15   , :00403B10   , :00403BCE   , :00403C2A   , :00404F5A   
|:00458CB7   , :00458CED   , :00458D23   , :00458D59   , :00458D8F   
|:00458EAE   , :00458F05   , :00458F5C   , :00458FB3   , :0045900A   
|:0046AD78   , :0046ADBC   , :0046AE00   , :0046AE4D   , :0046AE9A   
|:0046AEF1   , :0046AFD1   , :0046B015   , :0046B0BB   , :0046B939   
|
:0046AC2A 55                      push ebp
:0046AC2B 8BEC                    mov ebp, esp
:0046AC2D 51                      push ecx
:0046AC2E 8B450C                  mov eax, dword ptr [ebp+0C]
:0046AC31 25FFFF0000              and eax, 0000FFFF
:0046AC36 50                      push eax
:0046AC37 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046AC3A 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AC3B FF1510D64B00            Call dword ptr [004BD610]
:0046AC41 8945FC                  mov dword ptr [ebp-04], eax
:0046AC44 8B5514                  mov edx, dword ptr [ebp+14]
:0046AC47 81E2FFFF0000            and edx, 0000FFFF
:0046AC4D C1E210                  shl edx, 10
:0046AC50 52                      push edx
:0046AC51 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0401, "1000"
                                  |
:0046AC53 6801040000              push 00000401
:0046AC58 8B45FC                  mov eax, dword ptr [ebp-04]
:0046AC5B 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046AC5C FF1504D64B00            Call dword ptr [004BD604]
:0046AC62 6A00                    push 00000000
:0046AC64 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046AC67 81E1FFFF0000            and ecx, 0000FFFF
:0046AC6D 51                      push ecx

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0046AC6E 6802040000              push 00000402
:0046AC73 8B55FC                  mov edx, dword ptr [ebp-04]
:0046AC76 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046AC77 FF1504D64B00            Call dword ptr [004BD604]
:0046AC7D 8BE5                    mov esp, ebp
:0046AC7F 5D                      pop ebp
:0046AC80 C3                      ret



* Referenced by a CALL at Addresses:
|:0046C01F   , :0046C22E   
|
:0046AC81 55                      push ebp
:0046AC82 8BEC                    mov ebp, esp
:0046AC84 83EC78                  sub esp, 00000078
:0046AC87 894D88                  mov dword ptr [ebp-78], ecx

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03EE, "255"
                                  |
:0046AC8A 68EE030000              push 000003EE
:0046AC8F 8B4508                  mov eax, dword ptr [ebp+08]
:0046AC92 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AC93 FF1510D64B00            Call dword ptr [004BD610]
:0046AC99 85C0                    test eax, eax
:0046AC9B 7505                    jne 0046ACA2
:0046AC9D E957020000              jmp 0046AEF9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AC9B(C)
|
:0046ACA2 8B4D88                  mov ecx, dword ptr [ebp-78]
:0046ACA5 E87470F9FF              call 00401D1E
:0046ACAA 894594                  mov dword ptr [ebp-6C], eax
:0046ACAD 8B4D88                  mov ecx, dword ptr [ebp-78]
:0046ACB0 E89C70F9FF              call 00401D51
:0046ACB5 894590                  mov dword ptr [ebp-70], eax
:0046ACB8 8B4D88                  mov ecx, dword ptr [ebp-78]
:0046ACBB E8C470F9FF              call 00401D84
:0046ACC0 894598                  mov dword ptr [ebp-68], eax
:0046ACC3 E89B68FAFF              call 00411563
:0046ACC8 25FF000000              and eax, 000000FF
:0046ACCD 83F803                  cmp eax, 00000003
:0046ACD0 756A                    jne 0046AD3C
:0046ACD2 8B4D88                  mov ecx, dword ptr [ebp-78]
:0046ACD5 E81B050000              call 0046B1F5
:0046ACDA 88458C                  mov byte ptr [ebp-74], al
:0046ACDD 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046ACE0 81E1FF000000            and ecx, 000000FF
:0046ACE6 81F9FF000000            cmp ecx, 000000FF
:0046ACEC 744E                    je 0046AD3C
:0046ACEE 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046ACF1 81E1FF000000            and ecx, 000000FF
:0046ACF7 6BC924                  imul ecx, 00000024
:0046ACFA 81C1B83B4B00            add ecx, 004B3BB8
:0046AD00 E8B180FCFF              call 00432DB6
:0046AD05 894594                  mov dword ptr [ebp-6C], eax
:0046AD08 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046AD0B 81E1FF000000            and ecx, 000000FF
:0046AD11 6BC924                  imul ecx, 00000024
:0046AD14 81C1B83B4B00            add ecx, 004B3BB8
:0046AD1A E87E81FCFF              call 00432E9D
:0046AD1F 894590                  mov dword ptr [ebp-70], eax
:0046AD22 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046AD25 81E1FF000000            and ecx, 000000FF
:0046AD2B 6BC924                  imul ecx, 00000024
:0046AD2E 81C1B83B4B00            add ecx, 004B3BB8
:0046AD34 E89281FCFF              call 00432ECB
:0046AD39 894598                  mov dword ptr [ebp-68], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046ACD0(C), :0046ACEC(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046AD3C 6A0A                    push 0000000A
:0046AD3E 8D559C                  lea edx, dword ptr [ebp-64]
:0046AD41 52                      push edx
:0046AD42 8B4594                  mov eax, dword ptr [ebp-6C]
:0046AD45 50                      push eax
:0046AD46 E875F8FFFF              call 0046A5C0
:0046AD4B 83C40C                  add esp, 0000000C
:0046AD4E 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03EE, "255"
                                  |
:0046AD4F 68EE030000              push 000003EE
:0046AD54 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046AD57 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AD58 FF1510D64B00            Call dword ptr [004BD610]
:0046AD5E 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AD5F FF1514D64B00            Call dword ptr [004BD614]
:0046AD65 68F4010000              push 000001F4
:0046AD6A 668B5594                mov dx, word ptr [ebp-6C]
:0046AD6E 52                      push edx
:0046AD6F 6806040000              push 00000406
:0046AD74 8B4508                  mov eax, dword ptr [ebp+08]
:0046AD77 50                      push eax
:0046AD78 E8ADFEFFFF              call 0046AC2A
:0046AD7D 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046AD80 6A0A                    push 0000000A
:0046AD82 8D4D9C                  lea ecx, dword ptr [ebp-64]
:0046AD85 51                      push ecx
:0046AD86 8B5590                  mov edx, dword ptr [ebp-70]
:0046AD89 52                      push edx
:0046AD8A E831F8FFFF              call 0046A5C0
:0046AD8F 83C40C                  add esp, 0000000C
:0046AD92 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03EF, "255"
                                  |
:0046AD93 68EF030000              push 000003EF
:0046AD98 8B4508                  mov eax, dword ptr [ebp+08]
:0046AD9B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AD9C FF1510D64B00            Call dword ptr [004BD610]
:0046ADA2 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046ADA3 FF1514D64B00            Call dword ptr [004BD614]
:0046ADA9 68F4010000              push 000001F4
:0046ADAE 668B4D90                mov cx, word ptr [ebp-70]
:0046ADB2 51                      push ecx
:0046ADB3 680B040000              push 0000040B
:0046ADB8 8B5508                  mov edx, dword ptr [ebp+08]
:0046ADBB 52                      push edx
:0046ADBC E869FEFFFF              call 0046AC2A
:0046ADC1 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046ADC4 6A0A                    push 0000000A
:0046ADC6 8D459C                  lea eax, dword ptr [ebp-64]
:0046ADC9 50                      push eax
:0046ADCA 8B4D98                  mov ecx, dword ptr [ebp-68]
:0046ADCD 51                      push ecx
:0046ADCE E8EDF7FFFF              call 0046A5C0
:0046ADD3 83C40C                  add esp, 0000000C
:0046ADD6 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F0, "255"
                                  |
:0046ADD7 68F0030000              push 000003F0
:0046ADDC 8B5508                  mov edx, dword ptr [ebp+08]
:0046ADDF 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046ADE0 FF1510D64B00            Call dword ptr [004BD610]
:0046ADE6 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046ADE7 FF1514D64B00            Call dword ptr [004BD614]
:0046ADED 68F4010000              push 000001F4
:0046ADF2 668B4598                mov ax, word ptr [ebp-68]
:0046ADF6 50                      push eax
:0046ADF7 6807040000              push 00000407
:0046ADFC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046ADFF 51                      push ecx
:0046AE00 E825FEFFFF              call 0046AC2A
:0046AE05 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046AE08 6A0A                    push 0000000A
:0046AE0A 8D559C                  lea edx, dword ptr [ebp-64]
:0046AE0D 52                      push edx
:0046AE0E 8B4D88                  mov ecx, dword ptr [ebp-78]
:0046AE11 E8A16FF9FF              call 00401DB7
:0046AE16 50                      push eax
:0046AE17 E8A4F7FFFF              call 0046A5C0
:0046AE1C 83C40C                  add esp, 0000000C
:0046AE1F 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F1, "255"
                                  |
:0046AE20 68F1030000              push 000003F1
:0046AE25 8B4508                  mov eax, dword ptr [ebp+08]
:0046AE28 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AE29 FF1510D64B00            Call dword ptr [004BD610]
:0046AE2F 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AE30 FF1514D64B00            Call dword ptr [004BD614]
:0046AE36 68F4010000              push 000001F4
:0046AE3B 8B4D88                  mov ecx, dword ptr [ebp-78]
:0046AE3E E8746FF9FF              call 00401DB7
:0046AE43 50                      push eax
:0046AE44 680A040000              push 0000040A
:0046AE49 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046AE4C 51                      push ecx
:0046AE4D E8D8FDFFFF              call 0046AC2A
:0046AE52 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046AE55 6A0A                    push 0000000A
:0046AE57 8D559C                  lea edx, dword ptr [ebp-64]
:0046AE5A 52                      push edx
:0046AE5B 8B4D88                  mov ecx, dword ptr [ebp-78]
:0046AE5E E8EB6FF9FF              call 00401E4E
:0046AE63 50                      push eax
:0046AE64 E857F7FFFF              call 0046A5C0
:0046AE69 83C40C                  add esp, 0000000C
:0046AE6C 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F3, "255"
                                  |
:0046AE6D 68F3030000              push 000003F3
:0046AE72 8B4508                  mov eax, dword ptr [ebp+08]
:0046AE75 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AE76 FF1510D64B00            Call dword ptr [004BD610]
:0046AE7C 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AE7D FF1514D64B00            Call dword ptr [004BD614]
:0046AE83 68F4010000              push 000001F4
:0046AE88 8B4D88                  mov ecx, dword ptr [ebp-78]
:0046AE8B E8BE6FF9FF              call 00401E4E
:0046AE90 50                      push eax
:0046AE91 6808040000              push 00000408
:0046AE96 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046AE99 51                      push ecx
:0046AE9A E88BFDFFFF              call 0046AC2A
:0046AE9F 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046AEA2 6A0A                    push 0000000A
:0046AEA4 8D559C                  lea edx, dword ptr [ebp-64]
:0046AEA7 52                      push edx
:0046AEA8 8B4D88                  mov ecx, dword ptr [ebp-78]
:0046AEAB E80A70F9FF              call 00401EBA
:0046AEB0 25FF000000              and eax, 000000FF
:0046AEB5 50                      push eax
:0046AEB6 E805F7FFFF              call 0046A5C0
:0046AEBB 83C40C                  add esp, 0000000C
:0046AEBE 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F4, "255"
                                  |
:0046AEBF 68F4030000              push 000003F4
:0046AEC4 8B4508                  mov eax, dword ptr [ebp+08]
:0046AEC7 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AEC8 FF1510D64B00            Call dword ptr [004BD610]
:0046AECE 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AECF FF1514D64B00            Call dword ptr [004BD614]
:0046AED5 68FF000000              push 000000FF
:0046AEDA 8B4D88                  mov ecx, dword ptr [ebp-78]
:0046AEDD E8D86FF9FF              call 00401EBA
:0046AEE2 6633C9                  xor cx, cx
:0046AEE5 8AC8                    mov cl, al
:0046AEE7 51                      push ecx
:0046AEE8 6809040000              push 00000409
:0046AEED 8B5508                  mov edx, dword ptr [ebp+08]
:0046AEF0 52                      push edx
:0046AEF1 E834FDFFFF              call 0046AC2A
:0046AEF6 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AC9D(U)
|
:0046AEF9 8BE5                    mov esp, ebp
:0046AEFB 5D                      pop ebp
:0046AEFC C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046C035   , :0046C279   
|
:0046AEFF 55                      push ebp
:0046AF00 8BEC                    mov ebp, esp
:0046AF02 83EC74                  sub esp, 00000074
:0046AF05 894D8C                  mov dword ptr [ebp-74], ecx

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03FD, "1000"
                                  |
:0046AF08 68FD030000              push 000003FD
:0046AF0D 8B4508                  mov eax, dword ptr [ebp+08]
:0046AF10 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AF11 FF1510D64B00            Call dword ptr [004BD610]
:0046AF17 85C0                    test eax, eax
:0046AF19 7505                    jne 0046AF20
:0046AF1B E9CF020000              jmp 0046B1EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046AF19(C)
|
:0046AF20 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046AF23 E8C26EF9FF              call 00401DEA
:0046AF28 8945F8                  mov dword ptr [ebp-08], eax
:0046AF2B 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046AF2E E8E86EF9FF              call 00401E1B
:0046AF33 8945FC                  mov dword ptr [ebp-04], eax
:0046AF36 E82866FAFF              call 00411563
:0046AF3B 25FF000000              and eax, 000000FF
:0046AF40 83F803                  cmp eax, 00000003
:0046AF43 7550                    jne 0046AF95
:0046AF45 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046AF48 E8A8020000              call 0046B1F5
:0046AF4D 884590                  mov byte ptr [ebp-70], al
:0046AF50 8B4D90                  mov ecx, dword ptr [ebp-70]
:0046AF53 81E1FF000000            and ecx, 000000FF
:0046AF59 81F9FF000000            cmp ecx, 000000FF
:0046AF5F 7434                    je 0046AF95
:0046AF61 8B4D90                  mov ecx, dword ptr [ebp-70]
:0046AF64 81E1FF000000            and ecx, 000000FF
:0046AF6A 6BC924                  imul ecx, 00000024
:0046AF6D 81C1B83B4B00            add ecx, 004B3BB8
:0046AF73 E86883F9FF              call 004032E0
:0046AF78 8945F8                  mov dword ptr [ebp-08], eax
:0046AF7B 8B4D90                  mov ecx, dword ptr [ebp-70]
:0046AF7E 81E1FF000000            and ecx, 000000FF
:0046AF84 6BC924                  imul ecx, 00000024
:0046AF87 81C1B83B4B00            add ecx, 004B3BB8
:0046AF8D E86E83F9FF              call 00403300
:0046AF92 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046AF43(C), :0046AF5F(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046AF95 6A0A                    push 0000000A
:0046AF97 8D5594                  lea edx, dword ptr [ebp-6C]
:0046AF9A 52                      push edx
:0046AF9B 8B45F8                  mov eax, dword ptr [ebp-08]
:0046AF9E 50                      push eax
:0046AF9F E81CF6FFFF              call 0046A5C0
:0046AFA4 83C40C                  add esp, 0000000C
:0046AFA7 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03FD, "1000"
                                  |
:0046AFA8 68FD030000              push 000003FD
:0046AFAD 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046AFB0 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AFB1 FF1510D64B00            Call dword ptr [004BD610]
:0046AFB7 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AFB8 FF1514D64B00            Call dword ptr [004BD614]
:0046AFBE 68E8030000              push 000003E8
:0046AFC3 668B55F8                mov dx, word ptr [ebp-08]
:0046AFC7 52                      push edx
:0046AFC8 6806040000              push 00000406
:0046AFCD 8B4508                  mov eax, dword ptr [ebp+08]
:0046AFD0 50                      push eax
:0046AFD1 E854FCFFFF              call 0046AC2A
:0046AFD6 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046AFD9 6A0A                    push 0000000A
:0046AFDB 8D4D94                  lea ecx, dword ptr [ebp-6C]
:0046AFDE 51                      push ecx
:0046AFDF 8B55FC                  mov edx, dword ptr [ebp-04]
:0046AFE2 52                      push edx
:0046AFE3 E8D8F5FFFF              call 0046A5C0
:0046AFE8 83C40C                  add esp, 0000000C
:0046AFEB 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F2, "255"
                                  |
:0046AFEC 68F2030000              push 000003F2
:0046AFF1 8B4508                  mov eax, dword ptr [ebp+08]
:0046AFF4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046AFF5 FF1510D64B00            Call dword ptr [004BD610]
:0046AFFB 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046AFFC FF1514D64B00            Call dword ptr [004BD614]
:0046B002 68FF000000              push 000000FF
:0046B007 668B4DFC                mov cx, word ptr [ebp-04]
:0046B00B 51                      push ecx
:0046B00C 6807040000              push 00000407
:0046B011 8B5508                  mov edx, dword ptr [ebp+08]
:0046B014 52                      push edx
:0046B015 E810FCFFFF              call 0046AC2A
:0046B01A 83C410                  add esp, 00000010

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046B01D 6A0A                    push 0000000A
:0046B01F 8D4594                  lea eax, dword ptr [ebp-6C]
:0046B022 50                      push eax
:0046B023 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046B026 E8BF6DF9FF              call 00401DEA
:0046B02B 50                      push eax
:0046B02C E88FF5FFFF              call 0046A5C0
:0046B031 83C40C                  add esp, 0000000C
:0046B034 50                      push eax

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:03FE, "1000"
                                  |
:0046B035 68FE030000              push 000003FE
:0046B03A 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046B03D 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B03E FF1510D64B00            Call dword ptr [004BD610]
:0046B044 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046B045 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046B04B 6A0A                    push 0000000A
:0046B04D 8D5594                  lea edx, dword ptr [ebp-6C]
:0046B050 52                      push edx
:0046B051 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046B054 E8C26DF9FF              call 00401E1B
:0046B059 50                      push eax
:0046B05A E861F5FFFF              call 0046A5C0
:0046B05F 83C40C                  add esp, 0000000C
:0046B062 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F3, "255"
                                  |
:0046B063 68F3030000              push 000003F3
:0046B068 8B4508                  mov eax, dword ptr [ebp+08]
:0046B06B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B06C FF1510D64B00            Call dword ptr [004BD610]
:0046B072 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046B073 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046B079 6A0A                    push 0000000A
:0046B07B 8D4D94                  lea ecx, dword ptr [ebp-6C]
:0046B07E 51                      push ecx
:0046B07F 8B558C                  mov edx, dword ptr [ebp-74]
:0046B082 33C0                    xor eax, eax
:0046B084 8A4233                  mov al, byte ptr [edx+33]
:0046B087 50                      push eax
:0046B088 E833F5FFFF              call 0046A5C0
:0046B08D 83C40C                  add esp, 0000000C
:0046B090 50                      push eax

* Possible Reference to Dialog: DialogID_00B2, CONTROL_ID:03F5, "255"
                                  |
:0046B091 68F5030000              push 000003F5
:0046B096 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046B099 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B09A FF1510D64B00            Call dword ptr [004BD610]
:0046B0A0 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046B0A1 FF1514D64B00            Call dword ptr [004BD614]
:0046B0A7 6A64                    push 00000064
:0046B0A9 8B558C                  mov edx, dword ptr [ebp-74]
:0046B0AC 660FB64233              movzx ax, byte ptr [edx+33]
:0046B0B1 50                      push eax
:0046B0B2 6808040000              push 00000408
:0046B0B7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046B0BA 51                      push ecx
:0046B0BB E86AFBFFFF              call 0046AC2A
:0046B0C0 83C410                  add esp, 00000010
:0046B0C3 6A00                    push 00000000
:0046B0C5 E8C62DFAFF              call 0040DE90
:0046B0CA 83C404                  add esp, 00000004
:0046B0CD 85C0                    test eax, eax
:0046B0CF 7471                    je 0046B142
:0046B0D1 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046B0D4 E8A780F9FF              call 00403180
:0046B0D9 85C0                    test eax, eax
:0046B0DB 7565                    jne 0046B142

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046B0DD 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:052B, "@"
                                  |
:0046B0DF 682B050000              push 0000052B
:0046B0E4 8B5508                  mov edx, dword ptr [ebp+08]
:0046B0E7 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B0E8 FF1510D64B00            Call dword ptr [004BD610]
:0046B0EE 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046B0EF FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046B0F5 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:0432, "65535"
                                  |
:0046B0F7 6832040000              push 00000432
:0046B0FC 8B4508                  mov eax, dword ptr [ebp+08]
:0046B0FF 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B100 FF1510D64B00            Call dword ptr [004BD610]
:0046B106 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046B107 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046B10D 6A0A                    push 0000000A
:0046B10F 8D4D94                  lea ecx, dword ptr [ebp-6C]
:0046B112 51                      push ecx
:0046B113 B978294B00              mov ecx, 004B2978
:0046B118 E8C3B8FCFF              call 004369E0
:0046B11D 50                      push eax
:0046B11E E89DF4FFFF              call 0046A5C0
:0046B123 83C40C                  add esp, 0000000C
:0046B126 50                      push eax

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:0432, "65535"
                                  |
:0046B127 6832040000              push 00000432
:0046B12C 8B5508                  mov edx, dword ptr [ebp+08]
:0046B12F 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B130 FF1510D64B00            Call dword ptr [004BD610]
:0046B136 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046B137 FF1514D64B00            Call dword ptr [004BD614]
:0046B13D E9AD000000              jmp 0046B1EF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B0CF(C), :0046B0DB(C)
|
:0046B142 6A00                    push 00000000
:0046B144 E8472DFAFF              call 0040DE90
:0046B149 83C404                  add esp, 00000004
:0046B14C 85C0                    test eax, eax
:0046B14E 756F                    jne 0046B1BF
:0046B150 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046B153 E82880F9FF              call 00403180
:0046B158 83F802                  cmp eax, 00000002
:0046B15B 7562                    jne 0046B1BF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046B15D 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:052B, "@"
                                  |
:0046B15F 682B050000              push 0000052B
:0046B164 8B4508                  mov eax, dword ptr [ebp+08]
:0046B167 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B168 FF1510D64B00            Call dword ptr [004BD610]
:0046B16E 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046B16F FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046B175 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:0432, "65535"
                                  |
:0046B177 6832040000              push 00000432
:0046B17C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046B17F 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B180 FF1510D64B00            Call dword ptr [004BD610]
:0046B186 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046B187 FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046B18D 6A0A                    push 0000000A
:0046B18F 8D5594                  lea edx, dword ptr [ebp-6C]
:0046B192 52                      push edx
:0046B193 B978294B00              mov ecx, 004B2978
:0046B198 E843B8FCFF              call 004369E0
:0046B19D 50                      push eax
:0046B19E E81DF4FFFF              call 0046A5C0
:0046B1A3 83C40C                  add esp, 0000000C
:0046B1A6 50                      push eax

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:0432, "65535"
                                  |
:0046B1A7 6832040000              push 00000432
:0046B1AC 8B4508                  mov eax, dword ptr [ebp+08]
:0046B1AF 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B1B0 FF1510D64B00            Call dword ptr [004BD610]
:0046B1B6 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046B1B7 FF1514D64B00            Call dword ptr [004BD614]
:0046B1BD EB30                    jmp 0046B1EF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B14E(C), :0046B15B(C)
|
:0046B1BF 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:052B, "@"
                                  |
:0046B1C1 682B050000              push 0000052B
:0046B1C6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046B1C9 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B1CA FF1510D64B00            Call dword ptr [004BD610]
:0046B1D0 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046B1D1 FF1500D74B00            Call dword ptr [004BD700]
:0046B1D7 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00B3, CONTROL_ID:0432, "65535"
                                  |
:0046B1D9 6832040000              push 00000432
:0046B1DE 8B5508                  mov edx, dword ptr [ebp+08]
:0046B1E1 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B1E2 FF1510D64B00            Call dword ptr [004BD610]
:0046B1E8 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046B1E9 FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046AF1B(U), :0046B13D(U), :0046B1BD(U)
|
:0046B1EF 8BE5                    mov esp, ebp
:0046B1F1 5D                      pop ebp
:0046B1F2 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:00401329   , :00401362   , :00401725   , :004017A6   , :0040744C   
|:00407C04   , :00407C28   , :00407F9B   , :00408048   , :0040830D   
|:004083BA   , :0040AE84   , :0040B0B1   , :0042FCB8   , :0045B124   
|:0045BE8D   , :00460EAC   , :0046ACD5   , :0046AF48   , :0046B492   
|:0046BE49   
|
:0046B1F5 55                      push ebp
:0046B1F6 8BEC                    mov ebp, esp
:0046B1F8 83EC08                  sub esp, 00000008
:0046B1FB 56                      push esi
:0046B1FC 894DF8                  mov dword ptr [ebp-08], ecx
:0046B1FF E85F63FAFF              call 00411563
:0046B204 25FF000000              and eax, 000000FF
:0046B209 83F803                  cmp eax, 00000003
:0046B20C 7404                    je 0046B212
:0046B20E 0CFF                    or al, FF
:0046B210 EB6A                    jmp 0046B27C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B20C(C)
|
:0046B212 C645FC00                mov [ebp-04], 00
:0046B216 EB08                    jmp 0046B220

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B278(U)
|
:0046B218 8A45FC                  mov al, byte ptr [ebp-04]
:0046B21B 0401                    add al, 01
:0046B21D 8845FC                  mov byte ptr [ebp-04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B216(U)
|
:0046B220 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046B223 81E1FF000000            and ecx, 000000FF
:0046B229 83F95A                  cmp ecx, 0000005A
:0046B22C 7D4C                    jge 0046B27A
:0046B22E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046B231 81E1FF000000            and ecx, 000000FF
:0046B237 6BC924                  imul ecx, 00000024
:0046B23A 81C1B83B4B00            add ecx, 004B3BB8
:0046B240 E88B0EFFFF              call 0045C0D0
:0046B245 25FF000000              and eax, 000000FF
:0046B24A 85C0                    test eax, eax
:0046B24C 742A                    je 0046B278
:0046B24E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046B251 81E1FF000000            and ecx, 000000FF
:0046B257 6BC924                  imul ecx, 00000024
:0046B25A 81C1B83B4B00            add ecx, 004B3BB8
:0046B260 E87BB7FCFF              call 004369E0
:0046B265 8BF0                    mov esi, eax
:0046B267 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B26A E8117FF9FF              call 00403180
:0046B26F 3BF0                    cmp esi, eax
:0046B271 7505                    jne 0046B278
:0046B273 8A45FC                  mov al, byte ptr [ebp-04]
:0046B276 EB04                    jmp 0046B27C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B24C(C), :0046B271(C)
|
:0046B278 EB9E                    jmp 0046B218

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B22C(C)
|
:0046B27A 0CFF                    or al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B210(U), :0046B276(U)
|
:0046B27C 5E                      pop esi
:0046B27D 8BE5                    mov esp, ebp
:0046B27F 5D                      pop ebp
:0046B280 C3                      ret



* Referenced by a CALL at Addresses:
|:0046C077   , :0046C2F2   
|
:0046B281 55                      push ebp
:0046B282 8BEC                    mov ebp, esp
:0046B284 83EC18                  sub esp, 00000018
:0046B287 53                      push ebx
:0046B288 894DE8                  mov dword ptr [ebp-18], ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0521, ""
                                  |
:0046B28B 6821050000              push 00000521
:0046B290 8B4508                  mov eax, dword ptr [ebp+08]
:0046B293 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B294 FF1510D64B00            Call dword ptr [004BD610]
:0046B29A 8945F8                  mov dword ptr [ebp-08], eax
:0046B29D 837DF800                cmp dword ptr [ebp-08], 00000000
:0046B2A1 7505                    jne 0046B2A8
:0046B2A3 E9BF010000              jmp 0046B467

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B2A1(C)
|
:0046B2A8 6A00                    push 00000000
:0046B2AA 6A00                    push 00000000
:0046B2AC 6884010000              push 00000184
:0046B2B1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B2B4 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046B2B5 FF1504D64B00            Call dword ptr [004BD604]
:0046B2BB 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046B2BE E86D16FAFF              call 0040C930
:0046B2C3 25FF000000              and eax, 000000FF
:0046B2C8 85C0                    test eax, eax
:0046B2CA 7447                    je 0046B313

* Possible StringData Ref from Data Obj ->"S"
                                  |
:0046B2CC 6888224800              push 00482288
:0046B2D1 6A00                    push 00000000
:0046B2D3 6880010000              push 00000180
:0046B2D8 8B55F8                  mov edx, dword ptr [ebp-08]
:0046B2DB 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046B2DC FF1504D64B00            Call dword ptr [004BD604]
:0046B2E2 68FF000000              push 000000FF
:0046B2E7 6A00                    push 00000000
:0046B2E9 689A010000              push 0000019A
:0046B2EE 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B2F1 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046B2F2 FF1504D64B00            Call dword ptr [004BD604]

* Possible StringData Ref from Data Obj ->"S"
                                  |
:0046B2F8 6890224800              push 00482290
:0046B2FD 6AFF                    push FFFFFFFF
:0046B2FF 688C010000              push 0000018C
:0046B304 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B307 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046B308 FF1504D64B00            Call dword ptr [004BD604]
:0046B30E E954010000              jmp 0046B467

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B2CA(C)
|
:0046B313 C745FCFFFF0000          mov [ebp-04], 0000FFFF
:0046B31A 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046B31D E87E7EF9FF              call 004031A0
:0046B322 8845F0                  mov byte ptr [ebp-10], al
:0046B325 C745EC00000000          mov [ebp-14], 00000000
:0046B32C 8B55EC                  mov edx, dword ptr [ebp-14]
:0046B32F 8955F4                  mov dword ptr [ebp-0C], edx
:0046B332 EB09                    jmp 0046B33D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B3F5(U)
|
:0046B334 8B45EC                  mov eax, dword ptr [ebp-14]
:0046B337 83C001                  add eax, 00000001
:0046B33A 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B332(U)
|
:0046B33D 837DEC41                cmp dword ptr [ebp-14], 00000041
:0046B341 0F83B3000000            jnb 0046B3FA
:0046B347 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046B34A 81E1FF000000            and ecx, 000000FF
:0046B350 51                      push ecx
:0046B351 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046B354 6BC931                  imul ecx, 00000031
:0046B357 81C1001D4B00            add ecx, 004B1D00
:0046B35D E8AE70FAFF              call 00412410
:0046B362 25FF000000              and eax, 000000FF
:0046B367 85C0                    test eax, eax
:0046B369 0F8486000000            je 0046B3F5
:0046B36F 8B55F0                  mov edx, dword ptr [ebp-10]
:0046B372 81E2FF000000            and edx, 000000FF
:0046B378 52                      push edx
:0046B379 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046B37C 6BC931                  imul ecx, 00000031
:0046B37F 81C1001D4B00            add ecx, 004B1D00
:0046B385 E88670FAFF              call 00412410
:0046B38A 8AD8                    mov bl, al
:0046B38C 81E3FF000000            and ebx, 000000FF
:0046B392 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046B395 E8064BFAFF              call 0040FEA0
:0046B39A 25FF000000              and eax, 000000FF
:0046B39F 3BD8                    cmp ebx, eax
:0046B3A1 7F52                    jg 0046B3F5
:0046B3A3 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046B3A6 6BC931                  imul ecx, 00000031
:0046B3A9 81C1001D4B00            add ecx, 004B1D00
:0046B3AF E83CA3F9FF              call 004056F0
:0046B3B4 50                      push eax
:0046B3B5 6A00                    push 00000000
:0046B3B7 6880010000              push 00000180
:0046B3BC 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B3BF 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046B3C0 FF1504D64B00            Call dword ptr [004BD604]
:0046B3C6 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046B3C9 51                      push ecx
:0046B3CA 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046B3CD 52                      push edx
:0046B3CE 689A010000              push 0000019A
:0046B3D3 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B3D6 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046B3D7 FF1504D64B00            Call dword ptr [004BD604]
:0046B3DD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B3E0 83C101                  add ecx, 00000001
:0046B3E3 894DF4                  mov dword ptr [ebp-0C], ecx
:0046B3E6 817DFCFFFF0000          cmp dword ptr [ebp-04], 0000FFFF
:0046B3ED 7506                    jne 0046B3F5
:0046B3EF 8B55EC                  mov edx, dword ptr [ebp-14]
:0046B3F2 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B369(C), :0046B3A1(C), :0046B3ED(C)
|
:0046B3F5 E93AFFFFFF              jmp 0046B334

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B341(C)
|
:0046B3FA 837DF400                cmp dword ptr [ebp-0C], 00000000
:0046B3FE 7544                    jne 0046B444

* Possible StringData Ref from Data Obj ->"S"
                                  |
:0046B400 6898224800              push 00482298
:0046B405 6A00                    push 00000000
:0046B407 6880010000              push 00000180
:0046B40C 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B40F 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046B410 FF1504D64B00            Call dword ptr [004BD604]
:0046B416 68FF000000              push 000000FF
:0046B41B 6A00                    push 00000000
:0046B41D 689A010000              push 0000019A
:0046B422 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B425 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046B426 FF1504D64B00            Call dword ptr [004BD604]

* Possible StringData Ref from Data Obj ->"S"
                                  |
:0046B42C 68A0224800              push 004822A0
:0046B431 6AFF                    push FFFFFFFF
:0046B433 688C010000              push 0000018C
:0046B438 8B55F8                  mov edx, dword ptr [ebp-08]
:0046B43B 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046B43C FF1504D64B00            Call dword ptr [004BD604]
:0046B442 EB23                    jmp 0046B467

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B3FE(C)
|
:0046B444 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046B447 6BC931                  imul ecx, 00000031
:0046B44A 81C1001D4B00            add ecx, 004B1D00
:0046B450 E89BA2F9FF              call 004056F0
:0046B455 50                      push eax
:0046B456 6AFF                    push FFFFFFFF
:0046B458 688C010000              push 0000018C
:0046B45D 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B460 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046B461 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B2A3(U), :0046B30E(U), :0046B442(U)
|
:0046B467 5B                      pop ebx
:0046B468 8BE5                    mov esp, ebp
:0046B46A 5D                      pop ebp
:0046B46B C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046C061   , :0046C40C   
|
:0046B46E 55                      push ebp
:0046B46F 8BEC                    mov ebp, esp
:0046B471 83EC10                  sub esp, 00000010
:0046B474 894DF0                  mov dword ptr [ebp-10], ecx
:0046B477 6838050000              push 00000538
:0046B47C 8B4508                  mov eax, dword ptr [ebp+08]
:0046B47F 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B480 FF1510D64B00            Call dword ptr [004BD610]
:0046B486 85C0                    test eax, eax
:0046B488 7505                    jne 0046B48F
:0046B48A E9F6020000              jmp 0046B785

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B488(C)
|
:0046B48F 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046B492 E85EFDFFFF              call 0046B1F5
:0046B497 8845F4                  mov byte ptr [ebp-0C], al
:0046B49A C745FC01000000          mov [ebp-04], 00000001
:0046B4A1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B4A4 81E1FF000000            and ecx, 000000FF
:0046B4AA 81F9FF000000            cmp ecx, 000000FF
:0046B4B0 7507                    jne 0046B4B9
:0046B4B2 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B4B0(C)
|
:0046B4B9 6838050000              push 00000538
:0046B4BE 8B5508                  mov edx, dword ptr [ebp+08]
:0046B4C1 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B4C2 FF1510D64B00            Call dword ptr [004BD610]
:0046B4C8 8945F8                  mov dword ptr [ebp-08], eax
:0046B4CB 837DF800                cmp dword ptr [ebp-08], 00000000
:0046B4CF 7444                    je 0046B515
:0046B4D1 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046B4D5 742B                    je 0046B502
:0046B4D7 6838050000              push 00000538
:0046B4DC 8B4508                  mov eax, dword ptr [ebp+08]
:0046B4DF 50                      push eax
:0046B4E0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B4E3 81E1FF000000            and ecx, 000000FF
:0046B4E9 6BC924                  imul ecx, 00000024
:0046B4EC 81C1B83B4B00            add ecx, 004B3BB8
:0046B4F2 E819B5FCFF              call 00436A10
:0046B4F7 50                      push eax
:0046B4F8 E89E030000              call 0046B89B
:0046B4FD 83C40C                  add esp, 0000000C
:0046B500 EB13                    jmp 0046B515

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B4D5(C)
|
:0046B502 6838050000              push 00000538
:0046B507 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046B50A 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046B50B 6A03                    push 00000003
:0046B50D E889030000              call 0046B89B
:0046B512 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B4CF(C), :0046B500(U)
|
:0046B515 6839050000              push 00000539
:0046B51A 8B5508                  mov edx, dword ptr [ebp+08]
:0046B51D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B51E FF1510D64B00            Call dword ptr [004BD610]
:0046B524 8945F8                  mov dword ptr [ebp-08], eax
:0046B527 837DF800                cmp dword ptr [ebp-08], 00000000
:0046B52B 7444                    je 0046B571
:0046B52D 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046B531 742B                    je 0046B55E
:0046B533 6839050000              push 00000539
:0046B538 8B4508                  mov eax, dword ptr [ebp+08]
:0046B53B 50                      push eax
:0046B53C 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B53F 81E1FF000000            and ecx, 000000FF
:0046B545 6BC924                  imul ecx, 00000024
:0046B548 81C1B83B4B00            add ecx, 004B3BB8
:0046B54E E8DDB4FCFF              call 00436A30
:0046B553 50                      push eax
:0046B554 E842030000              call 0046B89B
:0046B559 83C40C                  add esp, 0000000C
:0046B55C EB13                    jmp 0046B571

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B531(C)
|
:0046B55E 6839050000              push 00000539
:0046B563 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046B566 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046B567 6A03                    push 00000003
:0046B569 E82D030000              call 0046B89B
:0046B56E 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B52B(C), :0046B55C(U)
|
:0046B571 683A050000              push 0000053A
:0046B576 8B5508                  mov edx, dword ptr [ebp+08]
:0046B579 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B57A FF1510D64B00            Call dword ptr [004BD610]
:0046B580 8945F8                  mov dword ptr [ebp-08], eax
:0046B583 837DF800                cmp dword ptr [ebp-08], 00000000
:0046B587 7444                    je 0046B5CD
:0046B589 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046B58D 742B                    je 0046B5BA
:0046B58F 683A050000              push 0000053A
:0046B594 8B4508                  mov eax, dword ptr [ebp+08]
:0046B597 50                      push eax
:0046B598 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B59B 81E1FF000000            and ecx, 000000FF
:0046B5A1 6BC924                  imul ecx, 00000024
:0046B5A4 81C1B83B4B00            add ecx, 004B3BB8
:0046B5AA E8A1B4FCFF              call 00436A50
:0046B5AF 50                      push eax
:0046B5B0 E8E6020000              call 0046B89B
:0046B5B5 83C40C                  add esp, 0000000C
:0046B5B8 EB13                    jmp 0046B5CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B58D(C)
|
:0046B5BA 683A050000              push 0000053A
:0046B5BF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046B5C2 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046B5C3 6A03                    push 00000003
:0046B5C5 E8D1020000              call 0046B89B
:0046B5CA 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B587(C), :0046B5B8(U)
|

* Possible Reference to Dialog: DialogID_00CD, CONTROL_ID:053B, ""
                                  |
:0046B5CD 683B050000              push 0000053B
:0046B5D2 8B5508                  mov edx, dword ptr [ebp+08]
:0046B5D5 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B5D6 FF1510D64B00            Call dword ptr [004BD610]
:0046B5DC 8945F8                  mov dword ptr [ebp-08], eax
:0046B5DF 837DF800                cmp dword ptr [ebp-08], 00000000
:0046B5E3 7440                    je 0046B625
:0046B5E5 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046B5E9 742A                    je 0046B615
:0046B5EB 6A10                    push 00000010
:0046B5ED 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B5F0 50                      push eax
:0046B5F1 6A10                    push 00000010
:0046B5F3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B5F6 81E1FF000000            and ecx, 000000FF
:0046B5FC 6BC924                  imul ecx, 00000024
:0046B5FF 81C1B83B4B00            add ecx, 004B3BB8
:0046B605 E866B4FCFF              call 00436A70
:0046B60A 50                      push eax
:0046B60B E87B010000              call 0046B78B
:0046B610 83C40C                  add esp, 0000000C
:0046B613 EB10                    jmp 0046B625

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B5E9(C)
|
:0046B615 6A10                    push 00000010
:0046B617 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B61A 51                      push ecx
:0046B61B 6A00                    push 00000000
:0046B61D E869010000              call 0046B78B
:0046B622 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B5E3(C), :0046B613(U)
|

* Possible Reference to Dialog: DialogID_00CD, CONTROL_ID:04FF, ""
                                  |
:0046B625 68FF040000              push 000004FF
:0046B62A 8B5508                  mov edx, dword ptr [ebp+08]
:0046B62D 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B62E FF1510D64B00            Call dword ptr [004BD610]
:0046B634 8945F8                  mov dword ptr [ebp-08], eax
:0046B637 837DF800                cmp dword ptr [ebp-08], 00000000
:0046B63B 7440                    je 0046B67D
:0046B63D 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046B641 742A                    je 0046B66D
:0046B643 6A01                    push 00000001
:0046B645 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B648 50                      push eax
:0046B649 6A01                    push 00000001
:0046B64B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B64E 81E1FF000000            and ecx, 000000FF
:0046B654 6BC924                  imul ecx, 00000024
:0046B657 81C1B83B4B00            add ecx, 004B3BB8
:0046B65D E80EB4FCFF              call 00436A70
:0046B662 50                      push eax
:0046B663 E823010000              call 0046B78B
:0046B668 83C40C                  add esp, 0000000C
:0046B66B EB10                    jmp 0046B67D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B641(C)
|
:0046B66D 6A01                    push 00000001
:0046B66F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B672 51                      push ecx
:0046B673 6A00                    push 00000000
:0046B675 E811010000              call 0046B78B
:0046B67A 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B63B(C), :0046B66B(U)
|

* Possible Reference to Dialog: DialogID_00CD, CONTROL_ID:0500, ""
                                  |
:0046B67D 6800050000              push 00000500
:0046B682 8B5508                  mov edx, dword ptr [ebp+08]
:0046B685 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B686 FF1510D64B00            Call dword ptr [004BD610]
:0046B68C 8945F8                  mov dword ptr [ebp-08], eax
:0046B68F 837DF800                cmp dword ptr [ebp-08], 00000000
:0046B693 7440                    je 0046B6D5
:0046B695 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046B699 742A                    je 0046B6C5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046B69B 6A04                    push 00000004
:0046B69D 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B6A0 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046B6A1 6A04                    push 00000004
:0046B6A3 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B6A6 81E1FF000000            and ecx, 000000FF
:0046B6AC 6BC924                  imul ecx, 00000024
:0046B6AF 81C1B83B4B00            add ecx, 004B3BB8
:0046B6B5 E8B6B3FCFF              call 00436A70
:0046B6BA 50                      push eax
:0046B6BB E8CB000000              call 0046B78B
:0046B6C0 83C40C                  add esp, 0000000C
:0046B6C3 EB10                    jmp 0046B6D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B699(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046B6C5 6A04                    push 00000004
:0046B6C7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B6CA 51                      push ecx
:0046B6CB 6A00                    push 00000000
:0046B6CD E8B9000000              call 0046B78B
:0046B6D2 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B693(C), :0046B6C3(U)
|

* Possible Reference to Dialog: DialogID_00CD, CONTROL_ID:0501, "v"
                                  |
:0046B6D5 6801050000              push 00000501
:0046B6DA 8B5508                  mov edx, dword ptr [ebp+08]
:0046B6DD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B6DE FF1510D64B00            Call dword ptr [004BD610]
:0046B6E4 8945F8                  mov dword ptr [ebp-08], eax
:0046B6E7 837DF800                cmp dword ptr [ebp-08], 00000000
:0046B6EB 7440                    je 0046B72D
:0046B6ED 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046B6F1 742A                    je 0046B71D

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046B6F3 6A02                    push 00000002
:0046B6F5 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B6F8 50                      push eax

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046B6F9 6A02                    push 00000002
:0046B6FB 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B6FE 81E1FF000000            and ecx, 000000FF
:0046B704 6BC924                  imul ecx, 00000024
:0046B707 81C1B83B4B00            add ecx, 004B3BB8
:0046B70D E85EB3FCFF              call 00436A70
:0046B712 50                      push eax
:0046B713 E873000000              call 0046B78B
:0046B718 83C40C                  add esp, 0000000C
:0046B71B EB10                    jmp 0046B72D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B6F1(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046B71D 6A02                    push 00000002
:0046B71F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B722 51                      push ecx
:0046B723 6A00                    push 00000000
:0046B725 E861000000              call 0046B78B
:0046B72A 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B6EB(C), :0046B71B(U)
|

* Possible Reference to Dialog: DialogID_00CD, CONTROL_ID:0502, ""
                                  |
:0046B72D 6802050000              push 00000502
:0046B732 8B5508                  mov edx, dword ptr [ebp+08]
:0046B735 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B736 FF1510D64B00            Call dword ptr [004BD610]
:0046B73C 8945F8                  mov dword ptr [ebp-08], eax
:0046B73F 837DF800                cmp dword ptr [ebp-08], 00000000
:0046B743 7440                    je 0046B785
:0046B745 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046B749 742A                    je 0046B775
:0046B74B 6A20                    push 00000020
:0046B74D 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B750 50                      push eax
:0046B751 6A20                    push 00000020
:0046B753 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B756 81E1FF000000            and ecx, 000000FF
:0046B75C 6BC924                  imul ecx, 00000024
:0046B75F 81C1B83B4B00            add ecx, 004B3BB8
:0046B765 E806B3FCFF              call 00436A70
:0046B76A 50                      push eax
:0046B76B E81B000000              call 0046B78B
:0046B770 83C40C                  add esp, 0000000C
:0046B773 EB10                    jmp 0046B785

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B749(C)
|
:0046B775 6A20                    push 00000020
:0046B777 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B77A 51                      push ecx
:0046B77B 6A00                    push 00000000
:0046B77D E809000000              call 0046B78B
:0046B782 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B48A(U), :0046B743(C), :0046B773(U)
|
:0046B785 8BE5                    mov esp, ebp
:0046B787 5D                      pop ebp
:0046B788 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046B60B   , :0046B61D   , :0046B663   , :0046B675   , :0046B6BB   
|:0046B6CD   , :0046B713   , :0046B725   , :0046B76B   , :0046B77D   
|
:0046B78B 55                      push ebp
:0046B78C 8BEC                    mov ebp, esp
:0046B78E 83EC24                  sub esp, 00000024
:0046B791 8B4508                  mov eax, dword ptr [ebp+08]
:0046B794 25FF000000              and eax, 000000FF
:0046B799 85C0                    test eax, eax
:0046B79B 0F849F000000            je 0046B840
:0046B7A1 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046B7A4 81E1FF000000            and ecx, 000000FF
:0046B7AA 894DDC                  mov dword ptr [ebp-24], ecx
:0046B7AD 8B55DC                  mov edx, dword ptr [ebp-24]
:0046B7B0 83EA01                  sub edx, 00000001
:0046B7B3 8955DC                  mov dword ptr [ebp-24], edx
:0046B7B6 837DDC1F                cmp dword ptr [ebp-24], 0000001F
:0046B7BA 7771                    ja 0046B82D
:0046B7BC 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046B7BF 33C0                    xor eax, eax
:0046B7C1 8A817BB84600            mov al, byte ptr [ecx+0046B87B]
:0046B7C7 FF248563B84600          jmp dword ptr [4*eax+0046B863]

* Possible StringData Ref from Data Obj ->"T"
                                  |
:0046B7CE 68A8224800              push 004822A8
:0046B7D3 8D55E0                  lea edx, dword ptr [ebp-20]
:0046B7D6 52                      push edx
:0046B7D7 E854CD0000              call 00478530
:0046B7DC 83C408                  add esp, 00000008
:0046B7DF EB5D                    jmp 0046B83E

* Possible StringData Ref from Data Obj ->"cB"
                                  |
:0046B7E1 68B0224800              push 004822B0
:0046B7E6 8D45E0                  lea eax, dword ptr [ebp-20]
:0046B7E9 50                      push eax
:0046B7EA E841CD0000              call 00478530
:0046B7EF 83C408                  add esp, 00000008
:0046B7F2 EB4A                    jmp 0046B83E

* Possible StringData Ref from Data Obj ->"ʭp"
                                  |
:0046B7F4 68B8224800              push 004822B8
:0046B7F9 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0046B7FC 51                      push ecx
:0046B7FD E82ECD0000              call 00478530
:0046B802 83C408                  add esp, 00000008
:0046B805 EB37                    jmp 0046B83E

* Possible StringData Ref from Data Obj ->"V"
                                  |
:0046B807 68C0224800              push 004822C0
:0046B80C 8D55E0                  lea edx, dword ptr [ebp-20]
:0046B80F 52                      push edx
:0046B810 E81BCD0000              call 00478530
:0046B815 83C408                  add esp, 00000008
:0046B818 EB24                    jmp 0046B83E

* Possible StringData Ref from Data Obj ->""
                                  |
:0046B81A 68C8224800              push 004822C8
:0046B81F 8D45E0                  lea eax, dword ptr [ebp-20]
:0046B822 50                      push eax
:0046B823 E808CD0000              call 00478530
:0046B828 83C408                  add esp, 00000008
:0046B82B EB11                    jmp 0046B83E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B7BA(C)
|

* Possible StringData Ref from Data Obj ->"@@"
                                  |
:0046B82D 68D0224800              push 004822D0
:0046B832 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0046B835 51                      push ecx
:0046B836 E8F5CC0000              call 00478530
:0046B83B 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B7DF(U), :0046B7F2(U), :0046B805(U), :0046B818(U), :0046B82B(U)
|
:0046B83E EB11                    jmp 0046B851

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B79B(C)
|

* Possible StringData Ref from Data Obj ->"@@"
                                  |
:0046B840 68D8224800              push 004822D8
:0046B845 8D55E0                  lea edx, dword ptr [ebp-20]
:0046B848 52                      push edx
:0046B849 E8E2CC0000              call 00478530
:0046B84E 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B83E(U)
|
:0046B851 8D45E0                  lea eax, dword ptr [ebp-20]
:0046B854 50                      push eax
:0046B855 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046B858 51                      push ecx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046B859 FF1514D64B00            Call dword ptr [004BD614]
:0046B85F 8BE5                    mov esp, ebp
:0046B861 5D                      pop ebp
:0046B862 C3                      ret



:0046B863 CEB74600                DWORD 0046B7CE
:0046B867 E1B74600                DWORD 0046B7E1
:0046B86B F4B74600                DWORD 0046B7F4
:0046B86F 07B84600                DWORD 0046B807
:0046B873 1AB84600                DWORD 0046B81A
:0046B877 2DB84600                DWORD 0046B82D


:0046B87B 0001                    add byte ptr [ecx], al
:0046B87D 0502050505              add eax, 05050502
:0046B882 0505050505              add eax, 05050505
:0046B887 0505050305              add eax, 05030505
:0046B88C 0505050505              add eax, 05050505
:0046B891 0505050505              add eax, 05050505
:0046B896 0505050504              add eax, 04050505

* Referenced by a CALL at Addresses:
|:0046B4F8   , :0046B50D   , :0046B554   , :0046B569   , :0046B5B0   
|:0046B5C5   
|
:0046B89B 55                      push ebp
:0046B89C 8BEC                    mov ebp, esp
:0046B89E 83EC0C                  sub esp, 0000000C
:0046B8A1 C745FC00000000          mov [ebp-04], 00000000
:0046B8A8 C645F82A                mov [ebp-08], 2A
:0046B8AC 8B4508                  mov eax, dword ptr [ebp+08]
:0046B8AF 25FF000000              and eax, 000000FF
:0046B8B4 8945F4                  mov dword ptr [ebp-0C], eax
:0046B8B7 837DF406                cmp dword ptr [ebp-0C], 00000006
:0046B8BB 7769                    ja 0046B926
:0046B8BD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046B8C0 FF248D45B94600          jmp dword ptr [4*ecx+0046B945]
:0046B8C7 C745FCFF000000          mov [ebp-04], 000000FF
:0046B8CE EB56                    jmp 0046B926
:0046B8D0 8B55F8                  mov edx, dword ptr [ebp-08]
:0046B8D3 81E2FF000000            and edx, 000000FF
:0046B8D9 6BD205                  imul edx, 00000005
:0046B8DC 8955FC                  mov dword ptr [ebp-04], edx
:0046B8DF EB45                    jmp 0046B926
:0046B8E1 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B8E4 25FF000000              and eax, 000000FF
:0046B8E9 C1E002                  shl eax, 02
:0046B8EC 8945FC                  mov dword ptr [ebp-04], eax
:0046B8EF EB35                    jmp 0046B926
:0046B8F1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B8F4 81E1FF000000            and ecx, 000000FF
:0046B8FA 6BC903                  imul ecx, 00000003
:0046B8FD 894DFC                  mov dword ptr [ebp-04], ecx
:0046B900 EB24                    jmp 0046B926
:0046B902 8B55F8                  mov edx, dword ptr [ebp-08]
:0046B905 81E2FF000000            and edx, 000000FF
:0046B90B D1E2                    shl edx, 1
:0046B90D 8955FC                  mov dword ptr [ebp-04], edx
:0046B910 EB14                    jmp 0046B926
:0046B912 8B45F8                  mov eax, dword ptr [ebp-08]
:0046B915 25FF000000              and eax, 000000FF
:0046B91A 8945FC                  mov dword ptr [ebp-04], eax
:0046B91D EB07                    jmp 0046B926
:0046B91F C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B8BB(C), :0046B8CE(U), :0046B8DF(U), :0046B8EF(U), :0046B900(U)
|:0046B910(U), :0046B91D(U)
|
:0046B926 68FF000000              push 000000FF
:0046B92B 668B4DFC                mov cx, word ptr [ebp-04]
:0046B92F 51                      push ecx
:0046B930 668B5510                mov dx, word ptr [ebp+10]
:0046B934 52                      push edx
:0046B935 8B450C                  mov eax, dword ptr [ebp+0C]
:0046B938 50                      push eax
:0046B939 E8ECF2FFFF              call 0046AC2A
:0046B93E 83C410                  add esp, 00000010
:0046B941 8BE5                    mov esp, ebp
:0046B943 5D                      pop ebp
:0046B944 C3                      ret



:0046B945 C7B84600                DWORD 0046B8C7
:0046B949 D0B84600                DWORD 0046B8D0
:0046B94D E1B84600                DWORD 0046B8E1
:0046B951 F1B84600                DWORD 0046B8F1
:0046B955 02B94600                DWORD 0046B902
:0046B959 12B94600                DWORD 0046B912
:0046B95D 1FB94600                DWORD 0046B91F



* Referenced by a CALL at Addresses:
|:0046C04B   , :0046C488   
|
:0046B961 55                      push ebp
:0046B962 8BEC                    mov ebp, esp
:0046B964 83EC0C                  sub esp, 0000000C
:0046B967 894DF4                  mov dword ptr [ebp-0C], ecx

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:0513, ""
                                  |
:0046B96A 6813050000              push 00000513
:0046B96F 8B4508                  mov eax, dword ptr [ebp+08]
:0046B972 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B973 FF1510D64B00            Call dword ptr [004BD610]
:0046B979 85C0                    test eax, eax
:0046B97B 7505                    jne 0046B982
:0046B97D E95C010000              jmp 0046BADE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B97B(C)
|
:0046B982 8B0D84624B00            mov ecx, dword ptr [004B6284]
:0046B988 8B0C8DE8554B00          mov ecx, dword ptr [4*ecx+004B55E8]
:0046B98F 6BC950                  imul ecx, 00000050
:0046B992 81C1787F4900            add ecx, 00497F78
:0046B998 E8930FFAFF              call 0040C930
:0046B99D 25FF000000              and eax, 000000FF
:0046B9A2 85C0                    test eax, eax
:0046B9A4 0F85B4000000            jne 0046BA5E
:0046B9AA 8B1584624B00            mov edx, dword ptr [004B6284]
:0046B9B0 8B0C95E8554B00          mov ecx, dword ptr [4*edx+004B55E8]
:0046B9B7 6BC950                  imul ecx, 00000050
:0046B9BA 81C1787F4900            add ecx, 00497F78
:0046B9C0 E84466F9FF              call 00402009
:0046B9C5 8945F8                  mov dword ptr [ebp-08], eax
:0046B9C8 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:0046B9CF 751D                    jne 0046B9EE

* Possible StringData Ref from Data Obj ->"S"
                                  |
:0046B9D1 68E0224800              push 004822E0

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:0513, ""
                                  |
:0046B9D6 6813050000              push 00000513
:0046B9DB 8B4508                  mov eax, dword ptr [ebp+08]
:0046B9DE 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046B9DF FF1510D64B00            Call dword ptr [004BD610]
:0046B9E5 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046B9E6 FF1514D64B00            Call dword ptr [004BD614]
:0046B9EC EB23                    jmp 0046BA11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B9CF(C)
|
:0046B9EE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046B9F1 51                      push ecx
:0046B9F2 E81C7BF9FF              call 00403513
:0046B9F7 83C404                  add esp, 00000004
:0046B9FA 50                      push eax

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:0513, ""
                                  |
:0046B9FB 6813050000              push 00000513
:0046BA00 8B5508                  mov edx, dword ptr [ebp+08]
:0046BA03 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BA04 FF1510D64B00            Call dword ptr [004BD610]
:0046BA0A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046BA0B FF1514D64B00            Call dword ptr [004BD614]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B9EC(U)
|

* Possible StringData Ref from Data Obj ->"D"
                                  |
:0046BA11 68E8224800              push 004822E8

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:052E, "@Sw"
                                  |
:0046BA16 682E050000              push 0000052E
:0046BA1B 8B4508                  mov eax, dword ptr [ebp+08]
:0046BA1E 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BA1F FF1510D64B00            Call dword ptr [004BD610]
:0046BA25 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046BA26 FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046BA2C 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:052F, ""
                                  |
:0046BA2E 682F050000              push 0000052F
:0046BA33 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046BA36 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BA37 FF1510D64B00            Call dword ptr [004BD610]
:0046BA3D 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046BA3E FF1500D74B00            Call dword ptr [004BD700]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046BA44 6A05                    push 00000005

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:0513, ""
                                  |
:0046BA46 6813050000              push 00000513
:0046BA4B 8B5508                  mov edx, dword ptr [ebp+08]
:0046BA4E 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BA4F FF1510D64B00            Call dword ptr [004BD610]
:0046BA55 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046BA56 FF1500D74B00            Call dword ptr [004BD700]
:0046BA5C EB4B                    jmp 0046BAA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046B9A4(C)
|

* Possible StringData Ref from Data Obj ->"iHs@D"
                                  |
:0046BA5E 68F4224800              push 004822F4

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:052E, "@Sw"
                                  |
:0046BA63 682E050000              push 0000052E
:0046BA68 8B4508                  mov eax, dword ptr [ebp+08]
:0046BA6B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BA6C FF1510D64B00            Call dword ptr [004BD610]
:0046BA72 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046BA73 FF1514D64B00            Call dword ptr [004BD614]
:0046BA79 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:052F, ""
                                  |
:0046BA7B 682F050000              push 0000052F
:0046BA80 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046BA83 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BA84 FF1510D64B00            Call dword ptr [004BD610]
:0046BA8A 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046BA8B FF1500D74B00            Call dword ptr [004BD700]
:0046BA91 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:0513, ""
                                  |
:0046BA93 6813050000              push 00000513
:0046BA98 8B5508                  mov edx, dword ptr [ebp+08]
:0046BA9B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BA9C FF1510D64B00            Call dword ptr [004BD610]
:0046BAA2 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046BAA3 FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BA5C(U)
|

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:03EB, ""
                                  |
:0046BAA9 68EB030000              push 000003EB
:0046BAAE 8B4508                  mov eax, dword ptr [ebp+08]
:0046BAB1 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BAB2 FF1510D64B00            Call dword ptr [004BD610]
:0046BAB8 8945FC                  mov dword ptr [ebp-04], eax
:0046BABB 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046BABF 741D                    je 0046BADE
:0046BAC1 8B0D84624B00            mov ecx, dword ptr [004B6284]
:0046BAC7 8B148DE8554B00          mov edx, dword ptr [4*ecx+004B55E8]
:0046BACE 52                      push edx
:0046BACF 8B45FC                  mov eax, dword ptr [ebp-04]
:0046BAD2 50                      push eax
:0046BAD3 E80C000000              call 0046BAE4
:0046BAD8 83C408                  add esp, 00000008
:0046BADB 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046B97D(U), :0046BABF(C)
|
:0046BADE 8BE5                    mov esp, ebp
:0046BAE0 5D                      pop ebp
:0046BAE1 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046BAD3   
|
:0046BAE4 55                      push ebp
:0046BAE5 8BEC                    mov ebp, esp
:0046BAE7 83EC10                  sub esp, 00000010
:0046BAEA 817D0C20030000          cmp dword ptr [ebp+0C], 00000320
:0046BAF1 760A                    jbe 0046BAFD
:0046BAF3 B8FFFF0000              mov eax, 0000FFFF
:0046BAF8 E922010000              jmp 0046BC1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BAF1(C)
|
:0046BAFD 6A00                    push 00000000
:0046BAFF 6A00                    push 00000000
:0046BB01 6884010000              push 00000184
:0046BB06 8B4508                  mov eax, dword ptr [ebp+08]
:0046BB09 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046BB0A FF1504D64B00            Call dword ptr [004BD604]
:0046BB10 C745F4FFFF0000          mov [ebp-0C], 0000FFFF
:0046BB17 C745F800000000          mov [ebp-08], 00000000
:0046BB1E 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046BB21 894DF0                  mov dword ptr [ebp-10], ecx
:0046BB24 EB09                    jmp 0046BB2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BBA8(U)
|
:0046BB26 8B55F0                  mov edx, dword ptr [ebp-10]
:0046BB29 83C201                  add edx, 00000001
:0046BB2C 8955F0                  mov dword ptr [ebp-10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BB24(U)
|
:0046BB2F 837DF008                cmp dword ptr [ebp-10], 00000008
:0046BB33 7378                    jnb 0046BBAD
:0046BB35 8A45F0                  mov al, byte ptr [ebp-10]
:0046BB38 50                      push eax
:0046BB39 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046BB3C 6BC950                  imul ecx, 00000050
:0046BB3F 81C1787F4900            add ecx, 00497F78
:0046BB45 E89676F9FF              call 004031E0
:0046BB4A 25FF000000              and eax, 000000FF
:0046BB4F 8945FC                  mov dword ptr [ebp-04], eax
:0046BB52 817DFCFF000000          cmp dword ptr [ebp-04], 000000FF
:0046BB59 744D                    je 0046BBA8
:0046BB5B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046BB5E 51                      push ecx
:0046BB5F E8AF79F9FF              call 00403513
:0046BB64 83C404                  add esp, 00000004
:0046BB67 50                      push eax
:0046BB68 6A00                    push 00000000
:0046BB6A 6880010000              push 00000180
:0046BB6F 8B5508                  mov edx, dword ptr [ebp+08]
:0046BB72 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046BB73 FF1504D64B00            Call dword ptr [004BD604]
:0046BB79 8B45FC                  mov eax, dword ptr [ebp-04]
:0046BB7C 50                      push eax
:0046BB7D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046BB80 51                      push ecx
:0046BB81 689A010000              push 0000019A
:0046BB86 8B5508                  mov edx, dword ptr [ebp+08]
:0046BB89 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046BB8A FF1504D64B00            Call dword ptr [004BD604]
:0046BB90 8B45F8                  mov eax, dword ptr [ebp-08]
:0046BB93 83C001                  add eax, 00000001
:0046BB96 8945F8                  mov dword ptr [ebp-08], eax
:0046BB99 817DF4FFFF0000          cmp dword ptr [ebp-0C], 0000FFFF
:0046BBA0 7506                    jne 0046BBA8
:0046BBA2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046BBA5 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BB59(C), :0046BBA0(C)
|
:0046BBA8 E979FFFFFF              jmp 0046BB26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BB33(C)
|
:0046BBAD 817DF4FFFF0000          cmp dword ptr [ebp-0C], 0000FFFF
:0046BBB4 741E                    je 0046BBD4
:0046BBB6 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046BBB9 52                      push edx
:0046BBBA E85479F9FF              call 00403513
:0046BBBF 83C404                  add esp, 00000004
:0046BBC2 50                      push eax
:0046BBC3 6AFF                    push FFFFFFFF
:0046BBC5 688C010000              push 0000018C
:0046BBCA 8B4508                  mov eax, dword ptr [ebp+08]
:0046BBCD 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046BBCE FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BBB4(C)
|
:0046BBD4 837DF800                cmp dword ptr [ebp-08], 00000000
:0046BBD8 7542                    jne 0046BC1C

* Possible StringData Ref from Data Obj ->"S"
                                  |
:0046BBDA 6804234800              push 00482304
:0046BBDF 6A00                    push 00000000
:0046BBE1 6880010000              push 00000180
:0046BBE6 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046BBE9 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046BBEA FF1504D64B00            Call dword ptr [004BD604]
:0046BBF0 68FFFF0000              push 0000FFFF
:0046BBF5 6A00                    push 00000000
:0046BBF7 689A010000              push 0000019A
:0046BBFC 8B5508                  mov edx, dword ptr [ebp+08]
:0046BBFF 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046BC00 FF1504D64B00            Call dword ptr [004BD604]

* Possible StringData Ref from Data Obj ->"S"
                                  |
:0046BC06 680C234800              push 0048230C
:0046BC0B 6AFF                    push FFFFFFFF
:0046BC0D 688C010000              push 0000018C
:0046BC12 8B4508                  mov eax, dword ptr [ebp+08]
:0046BC15 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046BC16 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BBD8(C)
|
:0046BC1C 8B45F4                  mov eax, dword ptr [ebp-0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BAF8(U)
|
:0046BC1F 8BE5                    mov esp, ebp
:0046BC21 5D                      pop ebp
:0046BC22 C3                      ret



* Referenced by a CALL at Addresses:
|:0046C1F4   , :0046C6E4   , :0046C74E   , :0046C86A   
|
:0046BC23 55                      push ebp
:0046BC24 8BEC                    mov ebp, esp
:0046BC26 6AFF                    push FFFFFFFF
:0046BC28 689C9A4700              push 00479A9C
:0046BC2D 64A100000000            mov eax, dword ptr fs:[00000000]
:0046BC33 50                      push eax
:0046BC34 64892500000000          mov dword ptr fs:[00000000], esp
:0046BC3B 81EC80010000            sub esp, 00000180
:0046BC41 898D78FEFFFF            mov dword ptr [ebp+FFFFFE78], ecx
:0046BC47 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046BC4D E8B274F9FF              call 00403104
:0046BC52 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03EA, ""
                                  |
:0046BC53 68EA030000              push 000003EA
:0046BC58 8B4508                  mov eax, dword ptr [ebp+08]
:0046BC5B 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BC5C FF1510D64B00            Call dword ptr [004BD610]
:0046BC62 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046BC63 FF1514D64B00            Call dword ptr [004BD614]
:0046BC69 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046BC6F 83C119                  add ecx, 00000019
:0046BC72 51                      push ecx
:0046BC73 68FB030000              push 000003FB
:0046BC78 8B5508                  mov edx, dword ptr [ebp+08]
:0046BC7B 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BC7C FF1510D64B00            Call dword ptr [004BD610]
:0046BC82 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046BC83 FF1514D64B00            Call dword ptr [004BD614]
:0046BC89 8B8578FEFFFF            mov eax, dword ptr [ebp+FFFFFE78]
:0046BC8F 33C9                    xor ecx, ecx
:0046BC91 8A4830                  mov cl, byte ptr [eax+30]
:0046BC94 8B148D38D64700          mov edx, dword ptr [4*ecx+0047D638]
:0046BC9B 52                      push edx

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F7, "@^"
                                  |
:0046BC9C 68F7030000              push 000003F7
:0046BCA1 8B4508                  mov eax, dword ptr [ebp+08]
:0046BCA4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BCA5 FF1510D64B00            Call dword ptr [004BD610]
:0046BCAB 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046BCAC FF1514D64B00            Call dword ptr [004BD614]
:0046BCB2 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046BCB8 33D2                    xor edx, edx
:0046BCBA 8A512F                  mov dl, byte ptr [ecx+2F]
:0046BCBD 85D2                    test edx, edx
:0046BCBF 751A                    jne 0046BCDB
:0046BCC1 8B8578FEFFFF            mov eax, dword ptr [ebp+FFFFFE78]
:0046BCC7 33C9                    xor ecx, ecx
:0046BCC9 8A4831                  mov cl, byte ptr [eax+31]
:0046BCCC 8B148DB0D64700          mov edx, dword ptr [4*ecx+0047D6B0]
:0046BCD3 899574FEFFFF            mov dword ptr [ebp+FFFFFE74], edx
:0046BCD9 EB18                    jmp 0046BCF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BCBF(C)
|
:0046BCDB 8B8578FEFFFF            mov eax, dword ptr [ebp+FFFFFE78]
:0046BCE1 33C9                    xor ecx, ecx
:0046BCE3 8A4831                  mov cl, byte ptr [eax+31]
:0046BCE6 8B148DC8D54700          mov edx, dword ptr [4*ecx+0047D5C8]
:0046BCED 899574FEFFFF            mov dword ptr [ebp+FFFFFE74], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BCD9(U)
|
:0046BCF3 8B8574FEFFFF            mov eax, dword ptr [ebp+FFFFFE74]
:0046BCF9 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F8, ""
                                  |
:0046BCFA 68F8030000              push 000003F8
:0046BCFF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046BD02 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BD03 FF1510D64B00            Call dword ptr [004BD610]
:0046BD09 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046BD0A FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046BD10 6A0A                    push 0000000A
:0046BD12 8D5590                  lea edx, dword ptr [ebp-70]
:0046BD15 52                      push edx
:0046BD16 8B8578FEFFFF            mov eax, dword ptr [ebp+FFFFFE78]
:0046BD1C 33C9                    xor ecx, ecx
:0046BD1E 8A4832                  mov cl, byte ptr [eax+32]
:0046BD21 51                      push ecx
:0046BD22 E899E8FFFF              call 0046A5C0
:0046BD27 83C40C                  add esp, 0000000C
:0046BD2A 50                      push eax

* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:03F9, "99"
                                  |
:0046BD2B 68F9030000              push 000003F9
:0046BD30 8B5508                  mov edx, dword ptr [ebp+08]
:0046BD33 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046BD34 FF1510D64B00            Call dword ptr [004BD610]
:0046BD3A 50                      push eax

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046BD3B FF1514D64B00            Call dword ptr [004BD614]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046BD41 6A04                    push 00000004
:0046BD43 6A00                    push 00000000
:0046BD45 6A00                    push 00000000
:0046BD47 B998474900              mov ecx, 00494798
:0046BD4C E83FD20000              call 00478F90
:0046BD51 50                      push eax
:0046BD52 8B8578FEFFFF            mov eax, dword ptr [ebp+FFFFFE78]
:0046BD58 8B4804                  mov ecx, dword ptr [eax+04]
:0046BD5B 51                      push ecx
:0046BD5C B940C74A00              mov ecx, 004AC740
:0046BD61 E8C355FAFF              call 00411329
:0046BD66 6A01                    push 00000001
:0046BD68 E8A2980000              call 0047560F
:0046BD6D 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0046BD70 6A07                    push 00000007
:0046BD72 E87F9F0000              call 00475CF6
:0046BD77 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046BD7A 6A04                    push 00000004
:0046BD7C 6A00                    push 00000000
:0046BD7E 68C0090000              push 000009C0
:0046BD83 B9A01C4B00              mov ecx, 004B1CA0
:0046BD88 E803D20000              call 00478F90
:0046BD8D 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046BD8E 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046BD90 6A08                    push 00000008
:0046BD92 E822A10000              call 00475EB9
:0046BD97 83C40C                  add esp, 0000000C
:0046BD9A 6A0D                    push 0000000D

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046BD9C 6A02                    push 00000002
:0046BD9E 8B1504B04700            mov edx, dword ptr [0047B004]
:0046BDA4 52                      push edx
:0046BDA5 A100B04700              mov eax, dword ptr [0047B000]
:0046BDAA 50                      push eax
:0046BDAB 6A00                    push 00000000
:0046BDAD 6A00                    push 00000000
:0046BDAF E84744FAFF              call 004101FB
:0046BDB4 83C418                  add esp, 00000018
:0046BDB7 6A00                    push 00000000
:0046BDB9 6A10                    push 00000010

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046BDBB 6A04                    push 00000004
:0046BDBD E85B9F0000              call 00475D1D
:0046BDC2 83C40C                  add esp, 0000000C
:0046BDC5 B998474900              mov ecx, 00494798
:0046BDCA E8F140FAFF              call 0040FEC0
:0046BDCF 50                      push eax
:0046BDD0 8B0D04B04700            mov ecx, dword ptr [0047B004]
:0046BDD6 51                      push ecx
:0046BDD7 8B1500B04700            mov edx, dword ptr [0047B000]
:0046BDDD 52                      push edx
:0046BDDE 6A00                    push 00000000
:0046BDE0 6A00                    push 00000000
:0046BDE2 E80DAD0000              call 00476AF4
:0046BDE7 83C414                  add esp, 00000014
:0046BDEA 8B8578FEFFFF            mov eax, dword ptr [ebp+FFFFFE78]
:0046BDF0 33C9                    xor ecx, ecx
:0046BDF2 8A482F                  mov cl, byte ptr [eax+2F]
:0046BDF5 85C9                    test ecx, ecx
:0046BDF7 0F85C8010000            jne 0046BFC5
:0046BDFD 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046BE03 E87873F9FF              call 00403180
:0046BE08 898580FEFFFF            mov dword ptr [ebp+FFFFFE80], eax
:0046BE0E 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046BE14 E89153F9FF              call 004011AA
:0046BE19 25FF000000              and eax, 000000FF
:0046BE1E 898584FEFFFF            mov dword ptr [ebp+FFFFFE84], eax
:0046BE24 81BD84FEFFFF94000000    cmp dword ptr [ebp+FFFFFE84], 00000094
:0046BE2E 0F8388000000            jnb 0046BEBC
:0046BE34 E82A57FAFF              call 00411563
:0046BE39 25FF000000              and eax, 000000FF
:0046BE3E 83F803                  cmp eax, 00000003
:0046BE41 7557                    jne 0046BE9A
:0046BE43 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046BE49 E8A7F3FFFF              call 0046B1F5
:0046BE4E 88857CFEFFFF            mov byte ptr [ebp+FFFFFE7C], al
:0046BE54 8B957CFEFFFF            mov edx, dword ptr [ebp+FFFFFE7C]
:0046BE5A 81E2FF000000            and edx, 000000FF
:0046BE60 81FAFF000000            cmp edx, 000000FF
:0046BE66 7430                    je 0046BE98
:0046BE68 8B8D7CFEFFFF            mov ecx, dword ptr [ebp+FFFFFE7C]
:0046BE6E 81E1FF000000            and ecx, 000000FF
:0046BE74 6BC924                  imul ecx, 00000024
:0046BE77 81C1B83B4B00            add ecx, 004B3BB8
:0046BE7D E8B662FCFF              call 00432138
:0046BE82 25FF000000              and eax, 000000FF
:0046BE87 6BC025                  imul eax, 00000025
:0046BE8A 8B8D84FEFFFF            mov ecx, dword ptr [ebp+FFFFFE84]
:0046BE90 03C8                    add ecx, eax
:0046BE92 898D84FEFFFF            mov dword ptr [ebp+FFFFFE84], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BE66(C)
|
:0046BE98 EB22                    jmp 0046BEBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BE41(C)
|
:0046BE9A 8B9580FEFFFF            mov edx, dword ptr [ebp+FFFFFE80]
:0046BEA0 52                      push edx
:0046BEA1 E8EA1FFAFF              call 0040DE90
:0046BEA6 83C404                  add esp, 00000004
:0046BEA9 85C0                    test eax, eax
:0046BEAB 750F                    jne 0046BEBC
:0046BEAD 8B8584FEFFFF            mov eax, dword ptr [ebp+FFFFFE84]
:0046BEB3 83C04A                  add eax, 0000004A
:0046BEB6 898584FEFFFF            mov dword ptr [ebp+FFFFFE84], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046BE2E(C), :0046BE98(U), :0046BEAB(C)
|
:0046BEBC 8D8D88FEFFFF            lea ecx, dword ptr [ebp+FFFFFE88]
:0046BEC2 E87997F9FF              call 00405640
:0046BEC7 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Data Obj ->"CHR_BS.E3"
                                  |
:0046BECE 68B8D54700              push 0047D5B8
:0046BED3 8D8D88FEFFFF            lea ecx, dword ptr [ebp+FFFFFE88]
:0046BED9 E8F752FAFF              call 004111D5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046BEDE 6A04                    push 00000004
:0046BEE0 6A00                    push 00000000
:0046BEE2 68007B0100              push 00017B00
:0046BEE7 B9F0174B00              mov ecx, 004B17F0
:0046BEEC E89FD00000              call 00478F90
:0046BEF1 50                      push eax
:0046BEF2 8B8D84FEFFFF            mov ecx, dword ptr [ebp+FFFFFE84]
:0046BEF8 51                      push ecx
:0046BEF9 8D8D88FEFFFF            lea ecx, dword ptr [ebp+FFFFFE88]
:0046BEFF E82554FAFF              call 00411329
:0046BF04 6800090000              push 00000900
:0046BF09 6848C84A00              push 004AC848

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046BF0E 6A04                    push 00000004
:0046BF10 6A00                    push 00000000
:0046BF12 6800B10100              push 0001B100
:0046BF17 B9F0174B00              mov ecx, 004B17F0
:0046BF1C E86FD00000              call 00478F90
:0046BF21 50                      push eax
:0046BF22 E899C60000              call 004785C0
:0046BF27 83C40C                  add esp, 0000000C
:0046BF2A 8D8D88FEFFFF            lea ecx, dword ptr [ebp+FFFFFE88]
:0046BF30 E8F01CFAFF              call 0040DC25

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046BF35 6A02                    push 00000002
:0046BF37 E8D3960000              call 0047560F
:0046BF3C 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00007: "
"
                                  |
:0046BF3F 6A07                    push 00000007
:0046BF41 E8B09D0000              call 00475CF6
:0046BF46 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046BF49 6A04                    push 00000004
:0046BF4B 6A00                    push 00000000
:0046BF4D 68C0090000              push 000009C0
:0046BF52 B9A01C4B00              mov ecx, 004B1CA0
:0046BF57 E834D00000              call 00478F90
:0046BF5C 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046BF5D 6A08                    push 00000008

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046BF5F 6A08                    push 00000008
:0046BF61 E8539F0000              call 00475EB9
:0046BF66 83C40C                  add esp, 0000000C
:0046BF69 6A0D                    push 0000000D

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046BF6B 6A02                    push 00000002
:0046BF6D 8B1514B04700            mov edx, dword ptr [0047B014]
:0046BF73 52                      push edx
:0046BF74 A110B04700              mov eax, dword ptr [0047B010]
:0046BF79 50                      push eax
:0046BF7A 6A00                    push 00000000
:0046BF7C 6A00                    push 00000000
:0046BF7E E87842FAFF              call 004101FB
:0046BF83 83C418                  add esp, 00000018
:0046BF86 6A00                    push 00000000
:0046BF88 6A10                    push 00000010

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046BF8A 6A04                    push 00000004
:0046BF8C E88C9D0000              call 00475D1D
:0046BF91 83C40C                  add esp, 0000000C
:0046BF94 6848C84A00              push 004AC848
:0046BF99 8B0D14B04700            mov ecx, dword ptr [0047B014]
:0046BF9F 51                      push ecx
:0046BFA0 8B1510B04700            mov edx, dword ptr [0047B010]
:0046BFA6 52                      push edx
:0046BFA7 6A00                    push 00000000
:0046BFA9 6A00                    push 00000000
:0046BFAB E844AB0000              call 00476AF4
:0046BFB0 83C414                  add esp, 00000014
:0046BFB3 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046BFBA 8D8D88FEFFFF            lea ecx, dword ptr [ebp+FFFFFE88]
:0046BFC0 E89B96F9FF              call 00405660

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BDF7(C)
|
:0046BFC5 6A00                    push 00000000
:0046BFC7 E843960000              call 0047560F
:0046BFCC 83C404                  add esp, 00000004
:0046BFCF E80EB5FFFF              call 004674E2
:0046BFD4 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046BFDA E85109FAFF              call 0040C930
:0046BFDF 25FF000000              and eax, 000000FF
:0046BFE4 85C0                    test eax, eax
:0046BFE6 740E                    je 0046BFF6
:0046BFE8 6A00                    push 00000000
:0046BFEA A114544B00              mov eax, dword ptr [004B5414]
:0046BFEF 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046BFF0 FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BFE6(C)
|
:0046BFF6 C7458C00000000          mov [ebp-74], 00000000
:0046BFFD EB09                    jmp 0046C008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C07C(U)
|
:0046BFFF 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046C002 83C101                  add ecx, 00000001
:0046C005 894D8C                  mov dword ptr [ebp-74], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046BFFD(U)
|
:0046C008 837D8C05                cmp dword ptr [ebp-74], 00000005
:0046C00C 7D70                    jge 0046C07E
:0046C00E 8B558C                  mov edx, dword ptr [ebp-74]
:0046C011 8B0495D0554B00          mov eax, dword ptr [4*edx+004B55D0]
:0046C018 50                      push eax
:0046C019 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046C01F E85DECFFFF              call 0046AC81
:0046C024 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046C027 8B148DD0554B00          mov edx, dword ptr [4*ecx+004B55D0]
:0046C02E 52                      push edx
:0046C02F 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046C035 E8C5EEFFFF              call 0046AEFF
:0046C03A 8B458C                  mov eax, dword ptr [ebp-74]
:0046C03D 8B0C85D0554B00          mov ecx, dword ptr [4*eax+004B55D0]
:0046C044 51                      push ecx
:0046C045 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046C04B E811F9FFFF              call 0046B961
:0046C050 8B558C                  mov edx, dword ptr [ebp-74]
:0046C053 8B0495D0554B00          mov eax, dword ptr [4*edx+004B55D0]
:0046C05A 50                      push eax
:0046C05B 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046C061 E808F4FFFF              call 0046B46E
:0046C066 8B4D8C                  mov ecx, dword ptr [ebp-74]
:0046C069 8B148DD0554B00          mov edx, dword ptr [4*ecx+004B55D0]
:0046C070 52                      push edx
:0046C071 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046C077 E805F2FFFF              call 0046B281
:0046C07C EB81                    jmp 0046BFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C00C(C)
|
:0046C07E 8B8D78FEFFFF            mov ecx, dword ptr [ebp+FFFFFE78]
:0046C084 E8A708FAFF              call 0040C930
:0046C089 25FF000000              and eax, 000000FF
:0046C08E 83F801                  cmp eax, 00000001
:0046C091 7529                    jne 0046C0BC
:0046C093 6A00                    push 00000000

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046C095 6A02                    push 00000002
:0046C097 680C130000              push 0000130C
:0046C09C 6805040000              push 00000405
:0046C0A1 8B4508                  mov eax, dword ptr [ebp+08]
:0046C0A4 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046C0A5 FF1510D64B00            Call dword ptr [004BD610]
:0046C0AB 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046C0AC FF1504D64B00            Call dword ptr [004BD604]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046C0B2 6A02                    push 00000002
:0046C0B4 E813000000              call 0046C0CC
:0046C0B9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C091(C)
|
:0046C0BC 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046C0BF 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046C0C6 8BE5                    mov esp, ebp
:0046C0C8 5D                      pop ebp
:0046C0C9 C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046C0B4   , :0046C1C6   , :0046C7A6   
|
:0046C0CC 55                      push ebp
:0046C0CD 8BEC                    mov ebp, esp
:0046C0CF 833D20204800FF          cmp dword ptr [00482020], FFFFFFFF
:0046C0D6 7415                    je 0046C0ED
:0046C0D8 6A00                    push 00000000
:0046C0DA A120204800              mov eax, dword ptr [00482020]
:0046C0DF 8B0C85D0554B00          mov ecx, dword ptr [4*eax+004B55D0]
:0046C0E6 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046C0E7 FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C0D6(C)
|
:0046C0ED 837D08FF                cmp dword ptr [ebp+08], FFFFFFFF
:0046C0F1 7507                    jne 0046C0FA
:0046C0F3 C7450800000000          mov [ebp+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C0F1(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046C0FA 6A05                    push 00000005
:0046C0FC 8B5508                  mov edx, dword ptr [ebp+08]
:0046C0FF 8B0495D0554B00          mov eax, dword ptr [4*edx+004B55D0]
:0046C106 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046C107 FF1500D74B00            Call dword ptr [004BD700]
:0046C10D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C110 890D20204800            mov dword ptr [00482020], ecx
:0046C116 5D                      pop ebp
:0046C117 C3                      ret



* Referenced by a CALL at Address:
|:0046C5DB   
|
:0046C118 55                      push ebp
:0046C119 8BEC                    mov ebp, esp
:0046C11B 83EC28                  sub esp, 00000028
:0046C11E 894DD8                  mov dword ptr [ebp-28], ecx
:0046C121 6AFA                    push FFFFFFFA
:0046C123 8B4508                  mov eax, dword ptr [ebp+08]
:0046C126 50                      push eax

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:0046C127 FF15B0D64B00            Call dword ptr [004BD6B0]
:0046C12D 8945FC                  mov dword ptr [ebp-04], eax
:0046C130 C745E001000000          mov [ebp-20], 00000001
:0046C137 C745DC00000000          mov [ebp-24], 00000000
:0046C13E EB09                    jmp 0046C149

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C1BD(U)
|
:0046C140 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046C143 83C101                  add ecx, 00000001
:0046C146 894DDC                  mov dword ptr [ebp-24], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C13E(U)
|
:0046C149 837DDC05                cmp dword ptr [ebp-24], 00000005
:0046C14D 7D70                    jge 0046C1BF
:0046C14F 8B55DC                  mov edx, dword ptr [ebp-24]
:0046C152 6BD20C                  imul edx, 0000000C
:0046C155 8B821C234800            mov eax, dword ptr [edx+0048231C]
:0046C15B 8945EC                  mov dword ptr [ebp-14], eax
:0046C15E 8D4DE0                  lea ecx, dword ptr [ebp-20]
:0046C161 51                      push ecx
:0046C162 8B55DC                  mov edx, dword ptr [ebp-24]
:0046C165 52                      push edx
:0046C166 6807130000              push 00001307
:0046C16B 6805040000              push 00000405
:0046C170 8B4508                  mov eax, dword ptr [ebp+08]
:0046C173 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0046C174 FF15D4D54B00            Call dword ptr [004BD5D4]
:0046C17A 6A00                    push 00000000
:0046C17C 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046C17F 6BC90C                  imul ecx, 0000000C
:0046C182 8B9120234800            mov edx, dword ptr [ecx+00482320]
:0046C188 52                      push edx
:0046C189 6805040000              push 00000405
:0046C18E 8B4508                  mov eax, dword ptr [ebp+08]
:0046C191 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046C192 FF1510D64B00            Call dword ptr [004BD610]
:0046C198 50                      push eax
:0046C199 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046C19C 6BC90C                  imul ecx, 0000000C
:0046C19F 33D2                    xor edx, edx
:0046C1A1 668B9118234800          mov dx, word ptr [ecx+00482318]
:0046C1A8 52                      push edx
:0046C1A9 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C1AC 50                      push eax

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:0046C1AD FF15F8D54B00            Call dword ptr [004BD5F8]
:0046C1B3 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046C1B6 89048DD0554B00          mov dword ptr [4*ecx+004B55D0], eax
:0046C1BD EB81                    jmp 0046C140

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C14D(C)
|
:0046C1BF 8B1520204800            mov edx, dword ptr [00482020]
:0046C1C5 52                      push edx
:0046C1C6 E801FFFFFF              call 0046C0CC
:0046C1CB 83C404                  add esp, 00000004
:0046C1CE 6A00                    push 00000000
:0046C1D0 A120204800              mov eax, dword ptr [00482020]
:0046C1D5 50                      push eax
:0046C1D6 680C130000              push 0000130C
:0046C1DB 6805040000              push 00000405
:0046C1E0 8B0DC4554B00            mov ecx, dword ptr [004B55C4]
:0046C1E6 51                      push ecx

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0046C1E7 FF15D4D54B00            Call dword ptr [004BD5D4]
:0046C1ED 8B5508                  mov edx, dword ptr [ebp+08]
:0046C1F0 52                      push edx
:0046C1F1 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0046C1F4 E82AFAFFFF              call 0046BC23
:0046C1F9 8BE5                    mov esp, ebp
:0046C1FB 5D                      pop ebp
:0046C1FC C20400                  ret 0004


:0046C1FF 55                      push ebp
:0046C200 8BEC                    mov ebp, esp
:0046C202 51                      push ecx
:0046C203 8B450C                  mov eax, dword ptr [ebp+0C]
:0046C206 8945FC                  mov dword ptr [ebp-04], eax
:0046C209 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:0046C210 7402                    je 0046C214
:0046C212 EB21                    jmp 0046C235

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C210(C)
|
:0046C214 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C217 51                      push ecx
:0046C218 8B1584624B00            mov edx, dword ptr [004B6284]
:0046C21E 8B0C95E8554B00          mov ecx, dword ptr [4*edx+004B55E8]
:0046C225 6BC950                  imul ecx, 00000050
:0046C228 81C1787F4900            add ecx, 00497F78
:0046C22E E84EEAFFFF              call 0046AC81
:0046C233 EB04                    jmp 0046C239

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C212(U)
|
:0046C235 33C0                    xor eax, eax
:0046C237 EB02                    jmp 0046C23B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C233(U)
|
:0046C239 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C237(U)
|
:0046C23B 8BE5                    mov esp, ebp
:0046C23D 5D                      pop ebp
:0046C23E C21000                  ret 0010


:0046C241 55                      push ebp
:0046C242 8BEC                    mov ebp, esp
:0046C244 51                      push ecx
:0046C245 8B450C                  mov eax, dword ptr [ebp+0C]
:0046C248 8945FC                  mov dword ptr [ebp-04], eax
:0046C24B 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:0046C252 740B                    je 0046C25F
:0046C254 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0046C25B 7423                    je 0046C280
:0046C25D EB4A                    jmp 0046C2A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C252(C)
|
:0046C25F 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C262 51                      push ecx
:0046C263 8B1584624B00            mov edx, dword ptr [004B6284]
:0046C269 8B0C95E8554B00          mov ecx, dword ptr [4*edx+004B55E8]
:0046C270 6BC950                  imul ecx, 00000050
:0046C273 81C1787F4900            add ecx, 00497F78
:0046C279 E881ECFFFF              call 0046AEFF
:0046C27E EB2D                    jmp 0046C2AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C25B(C)
|
:0046C280 8B4510                  mov eax, dword ptr [ebp+10]
:0046C283 25FFFF0000              and eax, 0000FFFF
:0046C288 83F801                  cmp eax, 00000001
:0046C28B 740E                    je 0046C29B
:0046C28D 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046C290 81E1FFFF0000            and ecx, 0000FFFF
:0046C296 83F902                  cmp ecx, 00000002
:0046C299 750C                    jne 0046C2A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C28B(C)
|
:0046C29B 6A01                    push 00000001
:0046C29D 8B5508                  mov edx, dword ptr [ebp+08]
:0046C2A0 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0046C2A1 FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C299(C)
|
:0046C2A7 EB04                    jmp 0046C2AD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C25D(U)
|
:0046C2A9 33C0                    xor eax, eax
:0046C2AB EB02                    jmp 0046C2AF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C27E(U), :0046C2A7(U)
|
:0046C2AD 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C2AB(U)
|
:0046C2AF 8BE5                    mov esp, ebp
:0046C2B1 5D                      pop ebp
:0046C2B2 C21000                  ret 0010


:0046C2B5 55                      push ebp
:0046C2B6 8BEC                    mov ebp, esp
:0046C2B8 83EC18                  sub esp, 00000018
:0046C2BB 8B450C                  mov eax, dword ptr [ebp+0C]
:0046C2BE 8945F0                  mov dword ptr [ebp-10], eax
:0046C2C1 817DF010010000          cmp dword ptr [ebp-10], 00000110
:0046C2C8 740E                    je 0046C2D8
:0046C2CA 817DF011010000          cmp dword ptr [ebp-10], 00000111
:0046C2D1 7429                    je 0046C2FC
:0046C2D3 E9ED000000              jmp 0046C3C5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C2C8(C)
|
:0046C2D8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C2DB 51                      push ecx
:0046C2DC 8B1584624B00            mov edx, dword ptr [004B6284]
:0046C2E2 8B0C95E8554B00          mov ecx, dword ptr [4*edx+004B55E8]
:0046C2E9 6BC950                  imul ecx, 00000050
:0046C2EC 81C1787F4900            add ecx, 00497F78
:0046C2F2 E88AEFFFFF              call 0046B281
:0046C2F7 E9CD000000              jmp 0046C3C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C2D1(C)
|
:0046C2FC 8B4510                  mov eax, dword ptr [ebp+10]
:0046C2FF 25FFFF0000              and eax, 0000FFFF
:0046C304 83F801                  cmp eax, 00000001
:0046C307 740E                    je 0046C317
:0046C309 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046C30C 81E1FFFF0000            and ecx, 0000FFFF
:0046C312 83F902                  cmp ecx, 00000002
:0046C315 750C                    jne 0046C323

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C307(C)
|
:0046C317 6A01                    push 00000001
:0046C319 8B5508                  mov edx, dword ptr [ebp+08]
:0046C31C 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0046C31D FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C315(C)
|
:0046C323 8B4510                  mov eax, dword ptr [ebp+10]
:0046C326 25FFFF0000              and eax, 0000FFFF
:0046C32B 8945EC                  mov dword ptr [ebp-14], eax
:0046C32E 817DEC21050000          cmp dword ptr [ebp-14], 00000521
:0046C335 7405                    je 0046C33C
:0046C337 E987000000              jmp 0046C3C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C335(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0521, ""
                                  |
:0046C33C 6821050000              push 00000521
:0046C341 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C344 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046C345 FF1510D64B00            Call dword ptr [004BD610]
:0046C34B 8945FC                  mov dword ptr [ebp-04], eax
:0046C34E 8B5510                  mov edx, dword ptr [ebp+10]
:0046C351 C1EA10                  shr edx, 10
:0046C354 81E2FFFF0000            and edx, 0000FFFF
:0046C35A 81E2FFFF0000            and edx, 0000FFFF
:0046C360 8955E8                  mov dword ptr [ebp-18], edx
:0046C363 837DE801                cmp dword ptr [ebp-18], 00000001
:0046C367 7402                    je 0046C36B
:0046C369 EB58                    jmp 0046C3C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C367(C)
|
:0046C36B 6A00                    push 00000000
:0046C36D 6A00                    push 00000000
:0046C36F 6888010000              push 00000188

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0521, ""
                                  |
:0046C374 6821050000              push 00000521
:0046C379 8B4508                  mov eax, dword ptr [ebp+08]
:0046C37C 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0046C37D FF15D4D54B00            Call dword ptr [004BD5D4]
:0046C383 668945F8                mov word ptr [ebp-08], ax
:0046C387 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046C38A 81E1FFFF0000            and ecx, 0000FFFF
:0046C390 83F9FF                  cmp ecx, FFFFFFFF
:0046C393 7502                    jne 0046C397
:0046C395 EB2C                    jmp 0046C3C3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C393(C)
|
:0046C397 6A00                    push 00000000
:0046C399 8B55F8                  mov edx, dword ptr [ebp-08]
:0046C39C 81E2FFFF0000            and edx, 0000FFFF
:0046C3A2 52                      push edx
:0046C3A3 6899010000              push 00000199
:0046C3A8 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C3AB 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046C3AC FF1504D64B00            Call dword ptr [004BD604]
:0046C3B2 8945F4                  mov dword ptr [ebp-0C], eax
:0046C3B5 8A4DF4                  mov cl, byte ptr [ebp-0C]
:0046C3B8 51                      push ecx
:0046C3B9 B9B04B4800              mov ecx, 00484BB0
:0046C3BE E8BF8AF9FF              call 00404E82

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C337(U), :0046C369(U), :0046C395(U)
|
:0046C3C3 EB04                    jmp 0046C3C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C2D3(U)
|
:0046C3C5 33C0                    xor eax, eax
:0046C3C7 EB05                    jmp 0046C3CE

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C2F7(U), :0046C3C3(U)
|
:0046C3C9 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C3C7(U)
|
:0046C3CE 8BE5                    mov esp, ebp
:0046C3D0 5D                      pop ebp
:0046C3D1 C21000                  ret 0010


:0046C3D4 55                      push ebp
:0046C3D5 8BEC                    mov ebp, esp
:0046C3D7 51                      push ecx
:0046C3D8 8B450C                  mov eax, dword ptr [ebp+0C]
:0046C3DB 8945FC                  mov dword ptr [ebp-04], eax
:0046C3DE 817DFC10010000          cmp dword ptr [ebp-04], 00000110
:0046C3E5 740B                    je 0046C3F2
:0046C3E7 817DFC11010000          cmp dword ptr [ebp-04], 00000111
:0046C3EE 7423                    je 0046C413
:0046C3F0 EB4A                    jmp 0046C43C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C3E5(C)
|
:0046C3F2 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C3F5 51                      push ecx
:0046C3F6 8B1584624B00            mov edx, dword ptr [004B6284]
:0046C3FC 8B0C95E8554B00          mov ecx, dword ptr [4*edx+004B55E8]
:0046C403 6BC950                  imul ecx, 00000050
:0046C406 81C1787F4900            add ecx, 00497F78
:0046C40C E85DF0FFFF              call 0046B46E
:0046C411 EB2D                    jmp 0046C440

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C3EE(C)
|
:0046C413 8B4510                  mov eax, dword ptr [ebp+10]
:0046C416 25FFFF0000              and eax, 0000FFFF
:0046C41B 83F801                  cmp eax, 00000001
:0046C41E 740E                    je 0046C42E
:0046C420 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046C423 81E1FFFF0000            and ecx, 0000FFFF
:0046C429 83F902                  cmp ecx, 00000002
:0046C42C 750C                    jne 0046C43A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C41E(C)
|
:0046C42E 6A01                    push 00000001
:0046C430 8B5508                  mov edx, dword ptr [ebp+08]
:0046C433 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0046C434 FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C42C(C)
|
:0046C43A EB04                    jmp 0046C440

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C3F0(U)
|
:0046C43C 33C0                    xor eax, eax
:0046C43E EB05                    jmp 0046C445

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C411(U), :0046C43A(U)
|
:0046C440 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C43E(U)
|
:0046C445 8BE5                    mov esp, ebp
:0046C447 5D                      pop ebp
:0046C448 C21000                  ret 0010


:0046C44B 55                      push ebp
:0046C44C 8BEC                    mov ebp, esp
:0046C44E 83EC14                  sub esp, 00000014
:0046C451 8B450C                  mov eax, dword ptr [ebp+0C]
:0046C454 8945F4                  mov dword ptr [ebp-0C], eax
:0046C457 817DF410010000          cmp dword ptr [ebp-0C], 00000110
:0046C45E 740E                    je 0046C46E
:0046C460 817DF411010000          cmp dword ptr [ebp-0C], 00000111
:0046C467 7429                    je 0046C492
:0046C469 E9F6000000              jmp 0046C564

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C45E(C)
|
:0046C46E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C471 51                      push ecx
:0046C472 8B1584624B00            mov edx, dword ptr [004B6284]
:0046C478 8B0C95E8554B00          mov ecx, dword ptr [4*edx+004B55E8]
:0046C47F 6BC950                  imul ecx, 00000050
:0046C482 81C1787F4900            add ecx, 00497F78
:0046C488 E8D4F4FFFF              call 0046B961
:0046C48D E9D6000000              jmp 0046C568

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C467(C)
|
:0046C492 8B4510                  mov eax, dword ptr [ebp+10]
:0046C495 25FFFF0000              and eax, 0000FFFF
:0046C49A 83F801                  cmp eax, 00000001
:0046C49D 740E                    je 0046C4AD
:0046C49F 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046C4A2 81E1FFFF0000            and ecx, 0000FFFF
:0046C4A8 83F902                  cmp ecx, 00000002
:0046C4AB 750C                    jne 0046C4B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C49D(C)
|
:0046C4AD 6A01                    push 00000001
:0046C4AF 8B5508                  mov edx, dword ptr [ebp+08]
:0046C4B2 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0046C4B3 FF15D8D54B00            Call dword ptr [004BD5D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C4AB(C)
|
:0046C4B9 8B4510                  mov eax, dword ptr [ebp+10]
:0046C4BC 25FFFF0000              and eax, 0000FFFF
:0046C4C1 8945F0                  mov dword ptr [ebp-10], eax
:0046C4C4 817DF0EB030000          cmp dword ptr [ebp-10], 000003EB
:0046C4CB 7405                    je 0046C4D2
:0046C4CD E98C000000              jmp 0046C55E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C4CB(C)
|

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:03EB, ""
                                  |
:0046C4D2 68EB030000              push 000003EB
:0046C4D7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C4DA 51                      push ecx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046C4DB FF1510D64B00            Call dword ptr [004BD610]
:0046C4E1 8945FC                  mov dword ptr [ebp-04], eax
:0046C4E4 8B5510                  mov edx, dword ptr [ebp+10]
:0046C4E7 C1EA10                  shr edx, 10
:0046C4EA 81E2FFFF0000            and edx, 0000FFFF
:0046C4F0 81E2FFFF0000            and edx, 0000FFFF
:0046C4F6 8955EC                  mov dword ptr [ebp-14], edx
:0046C4F9 837DEC01                cmp dword ptr [ebp-14], 00000001
:0046C4FD 7402                    je 0046C501
:0046C4FF EB5B                    jmp 0046C55C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C4FD(C)
|
:0046C501 6A00                    push 00000000
:0046C503 6A00                    push 00000000
:0046C505 6888010000              push 00000188

* Possible Reference to Dialog: DialogID_00C8, CONTROL_ID:03EB, ""
                                  |
:0046C50A 68EB030000              push 000003EB
:0046C50F 8B4508                  mov eax, dword ptr [ebp+08]
:0046C512 50                      push eax

* Reference To: USER32.SendDlgItemMessageA, Ord:01D8h
                                  |
:0046C513 FF15D4D54B00            Call dword ptr [004BD5D4]
:0046C519 668945F8                mov word ptr [ebp-08], ax
:0046C51D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046C520 81E1FFFF0000            and ecx, 0000FFFF
:0046C526 83F9FF                  cmp ecx, FFFFFFFF
:0046C529 7502                    jne 0046C52D
:0046C52B EB2F                    jmp 0046C55C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C529(C)
|
:0046C52D 6A00                    push 00000000
:0046C52F 8B55F8                  mov edx, dword ptr [ebp-08]
:0046C532 81E2FFFF0000            and edx, 0000FFFF
:0046C538 52                      push edx
:0046C539 6899010000              push 00000199
:0046C53E 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C541 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046C542 FF1504D64B00            Call dword ptr [004BD604]
:0046C548 A380AA4800              mov dword ptr [0048AA80], eax
:0046C54D 8B0D80AA4800            mov ecx, dword ptr [0048AA80]
:0046C553 51                      push ecx
:0046C554 E89C79F9FF              call 00403EF5
:0046C559 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C4FF(U), :0046C52B(U)
|
:0046C55C EB04                    jmp 0046C562

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C4CD(U)
|
:0046C55E 33C0                    xor eax, eax
:0046C560 EB08                    jmp 0046C56A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C55C(U)
|
:0046C562 EB04                    jmp 0046C568

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C469(U)
|
:0046C564 33C0                    xor eax, eax
:0046C566 EB02                    jmp 0046C56A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C48D(U), :0046C562(U)
|
:0046C568 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C560(U), :0046C566(U)
|
:0046C56A 8BE5                    mov esp, ebp
:0046C56C 5D                      pop ebp
:0046C56D C21000                  ret 0010


:0046C570 55                      push ebp
:0046C571 8BEC                    mov ebp, esp
:0046C573 83EC20                  sub esp, 00000020
:0046C576 8B450C                  mov eax, dword ptr [ebp+0C]
:0046C579 8945EC                  mov dword ptr [ebp-14], eax
:0046C57C 817DEC10010000          cmp dword ptr [ebp-14], 00000110
:0046C583 7718                    ja 0046C59D
:0046C585 817DEC10010000          cmp dword ptr [ebp-14], 00000110
:0046C58C 7433                    je 0046C5C1
:0046C58E 837DEC4E                cmp dword ptr [ebp-14], 0000004E
:0046C592 0F84D8010000            je 0046C770
:0046C598 E911020000              jmp 0046C7AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C583(C)
|
:0046C59D 817DEC11010000          cmp dword ptr [ebp-14], 00000111
:0046C5A4 0F8498000000            je 0046C642
:0046C5AA 817DEC12010000          cmp dword ptr [ebp-14], 00000112
:0046C5B1 7449                    je 0046C5FC
:0046C5B3 817DEC11030000          cmp dword ptr [ebp-14], 00000311
:0046C5BA 7429                    je 0046C5E5
:0046C5BC E9ED010000              jmp 0046C7AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C58C(C)
|
:0046C5C1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C5C4 51                      push ecx
:0046C5C5 8B1584624B00            mov edx, dword ptr [004B6284]
:0046C5CB 8B0C95E8554B00          mov ecx, dword ptr [4*edx+004B55E8]
:0046C5D2 6BC950                  imul ecx, 00000050
:0046C5D5 81C1787F4900            add ecx, 00497F78
:0046C5DB E838FBFFFF              call 0046C118
:0046C5E0 E9C9010000              jmp 0046C7AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C5BA(C)
|
:0046C5E5 6A00                    push 00000000
:0046C5E7 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:0046C5E9 6A06                    push 00000006
:0046C5EB A1B0554B00              mov eax, dword ptr [004B55B0]
:0046C5F0 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046C5F1 FF1504D64B00            Call dword ptr [004BD604]
:0046C5F7 E9B2010000              jmp 0046C7AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C5B1(C)
|
:0046C5FC 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046C5FF 894DE8                  mov dword ptr [ebp-18], ecx
:0046C602 817DE820F00000          cmp dword ptr [ebp-18], 0000F020
:0046C609 740B                    je 0046C616
:0046C60B 817DE820F10000          cmp dword ptr [ebp-18], 0000F120
:0046C612 7404                    je 0046C618
:0046C614 EB27                    jmp 0046C63D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C609(C)
|
:0046C616 EB25                    jmp 0046C63D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C612(C)
|
:0046C618 6A00                    push 00000000
:0046C61A 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:0046C61C 6A06                    push 00000006
:0046C61E 8B1518544B00            mov edx, dword ptr [004B5418]
:0046C624 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046C625 FF1504D64B00            Call dword ptr [004BD604]
:0046C62B 6A00                    push 00000000
:0046C62D 6A01                    push 00000001

* Possible Reference to String Resource ID=00006: ""
                                  |
:0046C62F 6A06                    push 00000006
:0046C631 A1B0554B00              mov eax, dword ptr [004B55B0]
:0046C636 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046C637 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C614(U), :0046C616(U)
|
:0046C63D E96C010000              jmp 0046C7AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C5A4(C)
|
:0046C642 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046C645 81E1FFFF0000            and ecx, 0000FFFF
:0046C64B 894DF8                  mov dword ptr [ebp-08], ecx
:0046C64E 8B55F8                  mov edx, dword ptr [ebp-08]
:0046C651 8955E4                  mov dword ptr [ebp-1C], edx
:0046C654 817DE403040000          cmp dword ptr [ebp-1C], 00000403
:0046C65B 7F1E                    jg 0046C67B
:0046C65D 817DE403040000          cmp dword ptr [ebp-1C], 00000403
:0046C664 744F                    je 0046C6B5
:0046C666 837DE400                cmp dword ptr [ebp-1C], 00000000
:0046C66A 0F8EFE000000            jle 0046C76E
:0046C670 837DE402                cmp dword ptr [ebp-1C], 00000002
:0046C674 7E1C                    jle 0046C692
:0046C676 E9F3000000              jmp 0046C76E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C65B(C)
|
:0046C67B 817DE404040000          cmp dword ptr [ebp-1C], 00000404
:0046C682 747D                    je 0046C701
:0046C684 817DE4A9040000          cmp dword ptr [ebp-1C], 000004A9
:0046C68B 7416                    je 0046C6A3
:0046C68D E9DC000000              jmp 0046C76E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C674(C)
|
:0046C692 6A00                    push 00000000
:0046C694 8B4508                  mov eax, dword ptr [ebp+08]
:0046C697 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046C698 FF1500D74B00            Call dword ptr [004BD700]
:0046C69E E9CB000000              jmp 0046C76E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C68B(C)
|
:0046C6A3 6810090000              push 00000910
:0046C6A8 E81ED4FFFF              call 00469ACB
:0046C6AD 83C404                  add esp, 00000004
:0046C6B0 E9B9000000              jmp 0046C76E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C664(C)
|
:0046C6B5 6A01                    push 00000001
:0046C6B7 8B0D84624B00            mov ecx, dword ptr [004B6284]
:0046C6BD 51                      push ecx
:0046C6BE E85DBC0000              call 00478320
:0046C6C3 83C408                  add esp, 00000008
:0046C6C6 A384624B00              mov dword ptr [004B6284], eax
:0046C6CB 8B5508                  mov edx, dword ptr [ebp+08]
:0046C6CE 52                      push edx
:0046C6CF A184624B00              mov eax, dword ptr [004B6284]
:0046C6D4 8B0C85E8554B00          mov ecx, dword ptr [4*eax+004B55E8]
:0046C6DB 6BC950                  imul ecx, 00000050
:0046C6DE 81C1787F4900            add ecx, 00497F78
:0046C6E4 E83AF5FFFF              call 0046BC23
:0046C6E9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C6EC 51                      push ecx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0046C6ED FF15FCD54B00            Call dword ptr [004BD5FC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046C6F3 6A05                    push 00000005
:0046C6F5 8B5508                  mov edx, dword ptr [ebp+08]
:0046C6F8 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046C6F9 FF1500D74B00            Call dword ptr [004BD700]
:0046C6FF EB6D                    jmp 0046C76E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C682(C)
|
:0046C701 6820030000              push 00000320
:0046C706 6A01                    push 00000001
:0046C708 A184624B00              mov eax, dword ptr [004B6284]
:0046C70D 50                      push eax
:0046C70E E8EDBB0000              call 00478300
:0046C713 83C40C                  add esp, 0000000C
:0046C716 8945FC                  mov dword ptr [ebp-04], eax
:0046C719 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046C71C 813C8DE8554B0020030000  cmp dword ptr [4*ecx+004B55E8], 00000320
:0046C727 7345                    jnb 0046C76E
:0046C729 8B55FC                  mov edx, dword ptr [ebp-04]
:0046C72C 891584624B00            mov dword ptr [004B6284], edx
:0046C732 A1E4554B00              mov eax, dword ptr [004B55E4]
:0046C737 50                      push eax
:0046C738 8B0D84624B00            mov ecx, dword ptr [004B6284]
:0046C73E 8B0C8DE8554B00          mov ecx, dword ptr [4*ecx+004B55E8]
:0046C745 6BC950                  imul ecx, 00000050
:0046C748 81C1787F4900            add ecx, 00497F78
:0046C74E E8D0F4FFFF              call 0046BC23
:0046C753 8B15E4554B00            mov edx, dword ptr [004B55E4]
:0046C759 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0046C75A FF15FCD54B00            Call dword ptr [004BD5FC]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046C760 6A05                    push 00000005
:0046C762 A1E4554B00              mov eax, dword ptr [004B55E4]
:0046C767 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046C768 FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C66A(C), :0046C676(U), :0046C68D(U), :0046C69E(U), :0046C6B0(U)
|:0046C6FF(U), :0046C727(C)
|
:0046C76E EB3E                    jmp 0046C7AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C592(C)
|
:0046C770 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046C773 894DF4                  mov dword ptr [ebp-0C], ecx
:0046C776 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046C779 8B4208                  mov eax, dword ptr [edx+08]
:0046C77C 8945E0                  mov dword ptr [ebp-20], eax
:0046C77F 817DE0D9FDFFFF          cmp dword ptr [ebp-20], FFFFFDD9
:0046C786 7402                    je 0046C78A
:0046C788 EB24                    jmp 0046C7AE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C786(C)
|
:0046C78A 6A00                    push 00000000
:0046C78C 6A00                    push 00000000
:0046C78E 680B130000              push 0000130B
:0046C793 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046C796 8B11                    mov edx, dword ptr [ecx]
:0046C798 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046C799 FF1504D64B00            Call dword ptr [004BD604]
:0046C79F 8945F0                  mov dword ptr [ebp-10], eax
:0046C7A2 8B45F0                  mov eax, dword ptr [ebp-10]
:0046C7A5 50                      push eax
:0046C7A6 E821F9FFFF              call 0046C0CC
:0046C7AB 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C598(U), :0046C5BC(U), :0046C5E0(U), :0046C5F7(U), :0046C63D(U)
|:0046C76E(U), :0046C788(U)
|
:0046C7AE 33C0                    xor eax, eax
:0046C7B0 8BE5                    mov esp, ebp
:0046C7B2 5D                      pop ebp
:0046C7B3 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0046C89E   , :0046C8C5   , :0046C8EC   , :0046CAB5   
|
:0046C7B6 55                      push ebp
:0046C7B7 8BEC                    mov ebp, esp
:0046C7B9 83EC08                  sub esp, 00000008
:0046C7BC C745F8FFFF0000          mov [ebp-08], 0000FFFF
:0046C7C3 C745FC00000000          mov [ebp-04], 00000000
:0046C7CA EB09                    jmp 0046C7D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C7F5(U)
|
:0046C7CC 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C7CF 83C001                  add eax, 00000001
:0046C7D2 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C7CA(U)
|
:0046C7D5 817DFC20030000          cmp dword ptr [ebp-04], 00000320
:0046C7DC 7319                    jnb 0046C7F7
:0046C7DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046C7E1 8B148DE8554B00          mov edx, dword ptr [4*ecx+004B55E8]
:0046C7E8 3B5508                  cmp edx, dword ptr [ebp+08]
:0046C7EB 7508                    jne 0046C7F5
:0046C7ED 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C7F0 8945F8                  mov dword ptr [ebp-08], eax
:0046C7F3 EB02                    jmp 0046C7F7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C7EB(C)
|
:0046C7F5 EBD5                    jmp 0046C7CC

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C7DC(C), :0046C7F3(U)
|
:0046C7F7 8B45F8                  mov eax, dword ptr [ebp-08]
:0046C7FA 8BE5                    mov esp, ebp
:0046C7FC 5D                      pop ebp
:0046C7FD C3                      ret



* Referenced by a CALL at Address:
|:0046CD40   
|
:0046C7FE 55                      push ebp
:0046C7FF 8BEC                    mov ebp, esp
:0046C801 83EC08                  sub esp, 00000008
:0046C804 C745F8FFFF0000          mov [ebp-08], 0000FFFF
:0046C80B C745FC00000000          mov [ebp-04], 00000000
:0046C812 EB09                    jmp 0046C81D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C841(U)
|
:0046C814 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C817 83C001                  add eax, 00000001
:0046C81A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C812(U)
|
:0046C81D 837DFC5A                cmp dword ptr [ebp-04], 0000005A
:0046C821 7320                    jnb 0046C843
:0046C823 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046C826 6BC924                  imul ecx, 00000024
:0046C829 81C1B83B4B00            add ecx, 004B3BB8
:0046C82F E8ACA1FCFF              call 004369E0
:0046C834 3B4508                  cmp eax, dword ptr [ebp+08]
:0046C837 7508                    jne 0046C841
:0046C839 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046C83C 894DF8                  mov dword ptr [ebp-08], ecx
:0046C83F EB02                    jmp 0046C843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C837(C)
|
:0046C841 EBD1                    jmp 0046C814

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C821(C), :0046C83F(U)
|
:0046C843 8B45F8                  mov eax, dword ptr [ebp-08]
:0046C846 8BE5                    mov esp, ebp
:0046C848 5D                      pop ebp
:0046C849 C3                      ret



* Referenced by a CALL at Addresses:
|:0046C906   , :0046CA3B   , :0046CA97   , :0046CB12   
|
:0046C84A 55                      push ebp
:0046C84B 8BEC                    mov ebp, esp
:0046C84D 817D0820030000          cmp dword ptr [ebp+08], 00000320
:0046C854 7202                    jb 0046C858
:0046C856 EB3D                    jmp 0046C895

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C854(C)
|
:0046C858 A1E4554B00              mov eax, dword ptr [004B55E4]
:0046C85D 50                      push eax
:0046C85E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C861 6BC950                  imul ecx, 00000050
:0046C864 81C1787F4900            add ecx, 00497F78
:0046C86A E8B4F3FFFF              call 0046BC23
:0046C86F 8B0DE4554B00            mov ecx, dword ptr [004B55E4]
:0046C875 51                      push ecx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0046C876 FF15FCD54B00            Call dword ptr [004BD5FC]

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0046C87C 6A09                    push 00000009
:0046C87E 8B15E4554B00            mov edx, dword ptr [004B55E4]
:0046C884 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046C885 FF1500D74B00            Call dword ptr [004BD700]
:0046C88B 6A00                    push 00000000
:0046C88D E87D8D0000              call 0047560F
:0046C892 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C856(U)
|
:0046C895 5D                      pop ebp
:0046C896 C3                      ret



* Referenced by a CALL at Addresses:
|:004386E4   , :00438F50   , :0045E5EE   , :004630C1   , :0046CB47   
|:0046CD00   
|
:0046C897 55                      push ebp
:0046C898 8BEC                    mov ebp, esp
:0046C89A 8B4508                  mov eax, dword ptr [ebp+08]
:0046C89D 50                      push eax
:0046C89E E813FFFFFF              call 0046C7B6
:0046C8A3 83C404                  add esp, 00000004
:0046C8A6 A384624B00              mov dword ptr [004B6284], eax
:0046C8AB 813D84624B00FFFF0000    cmp dword ptr [004B6284], 0000FFFF
:0046C8B5 7542                    jne 0046C8F9
:0046C8B7 6A01                    push 00000001
:0046C8B9 E852000000              call 0046C910
:0046C8BE 83C404                  add esp, 00000004
:0046C8C1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046C8C4 51                      push ecx
:0046C8C5 E8ECFEFFFF              call 0046C7B6
:0046C8CA 83C404                  add esp, 00000004
:0046C8CD A384624B00              mov dword ptr [004B6284], eax
:0046C8D2 813D84624B00FFFF0000    cmp dword ptr [004B6284], 0000FFFF
:0046C8DC 751B                    jne 0046C8F9
:0046C8DE 6A00                    push 00000000
:0046C8E0 E82B000000              call 0046C910
:0046C8E5 83C404                  add esp, 00000004
:0046C8E8 8B5508                  mov edx, dword ptr [ebp+08]
:0046C8EB 52                      push edx
:0046C8EC E8C5FEFFFF              call 0046C7B6
:0046C8F1 83C404                  add esp, 00000004
:0046C8F4 A384624B00              mov dword ptr [004B6284], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C8B5(C), :0046C8DC(C)
|
:0046C8F9 A184624B00              mov eax, dword ptr [004B6284]
:0046C8FE 8B0C85E8554B00          mov ecx, dword ptr [4*eax+004B55E8]
:0046C905 51                      push ecx
:0046C906 E83FFFFFFF              call 0046C84A
:0046C90B 83C404                  add esp, 00000004
:0046C90E 5D                      pop ebp
:0046C90F C3                      ret



* Referenced by a CALL at Addresses:
|:0046C8B9   , :0046C8E0   , :0046D50F   , :0046D63B   , :0046D65C   
|
:0046C910 55                      push ebp
:0046C911 8BEC                    mov ebp, esp
:0046C913 83EC08                  sub esp, 00000008
:0046C916 C745FC00000000          mov [ebp-04], 00000000
:0046C91D 68800C0000              push 00000C80
:0046C922 68FFFF0000              push 0000FFFF
:0046C927 68E8554B00              push 004B55E8
:0046C92C E89F310000              call 0046FAD0
:0046C931 83C40C                  add esp, 0000000C
:0046C934 C745F800000000          mov [ebp-08], 00000000
:0046C93B EB09                    jmp 0046C946

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C982(U), :0046C99F(U), :0046C9C5(U)
|
:0046C93D 8B45F8                  mov eax, dword ptr [ebp-08]
:0046C940 83C001                  add eax, 00000001
:0046C943 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C93B(U)
|
:0046C946 837DF85A                cmp dword ptr [ebp-08], 0000005A
:0046C94A 737E                    jnb 0046C9CA
:0046C94C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046C94F 6BC924                  imul ecx, 00000024
:0046C952 81C1B83B4B00            add ecx, 004B3BB8
:0046C958 E873F7FEFF              call 0045C0D0
:0046C95D 25FF000000              and eax, 000000FF
:0046C962 83F802                  cmp eax, 00000002
:0046C965 755E                    jne 0046C9C5
:0046C967 837D0800                cmp dword ptr [ebp+08], 00000000
:0046C96B 7417                    je 0046C984
:0046C96D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046C970 6BC924                  imul ecx, 00000024
:0046C973 81C1B83B4B00            add ecx, 004B3BB8
:0046C979 E892FFF9FF              call 0040C910
:0046C97E 85C0                    test eax, eax
:0046C980 7502                    jne 0046C984
:0046C982 EBB9                    jmp 0046C93D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C96B(C), :0046C980(C)
|
:0046C984 837D0800                cmp dword ptr [ebp+08], 00000000
:0046C988 7517                    jne 0046C9A1
:0046C98A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046C98D 6BC924                  imul ecx, 00000024
:0046C990 81C1B83B4B00            add ecx, 004B3BB8
:0046C996 E875FFF9FF              call 0040C910
:0046C99B 85C0                    test eax, eax
:0046C99D 7402                    je 0046C9A1
:0046C99F EB9C                    jmp 0046C93D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046C988(C), :0046C99D(C)
|
:0046C9A1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046C9A4 6BC924                  imul ecx, 00000024
:0046C9A7 81C1B83B4B00            add ecx, 004B3BB8
:0046C9AD E82EA0FCFF              call 004369E0
:0046C9B2 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046C9B5 89048DE8554B00          mov dword ptr [4*ecx+004B55E8], eax
:0046C9BC 8B55FC                  mov edx, dword ptr [ebp-04]
:0046C9BF 83C201                  add edx, 00000001
:0046C9C2 8955FC                  mov dword ptr [ebp-04], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C965(C)
|
:0046C9C5 E973FFFFFF              jmp 0046C93D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C94A(C)
|
:0046C9CA 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C9CD 8BE5                    mov esp, ebp
:0046C9CF 5D                      pop ebp
:0046C9D0 C3                      ret



* Referenced by a CALL at Address:
|:0044ED8B   
|
:0046C9D1 55                      push ebp
:0046C9D2 8BEC                    mov ebp, esp
:0046C9D4 6A00                    push 00000000
:0046C9D6 6A01                    push 00000001
:0046C9D8 6811010000              push 00000111
:0046C9DD A1E4554B00              mov eax, dword ptr [004B55E4]
:0046C9E2 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046C9E3 FF1504D64B00            Call dword ptr [004BD604]
:0046C9E9 5D                      pop ebp
:0046C9EA C3                      ret



* Referenced by a CALL at Address:
|:0046CAFB   
|
:0046C9EB 55                      push ebp
:0046C9EC 8BEC                    mov ebp, esp
:0046C9EE 51                      push ecx
:0046C9EF C745FC00000000          mov [ebp-04], 00000000
:0046C9F6 EB09                    jmp 0046CA01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CA18(U)
|
:0046C9F8 8B45FC                  mov eax, dword ptr [ebp-04]
:0046C9FB 83C001                  add eax, 00000001
:0046C9FE 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046C9F6(U)
|
:0046CA01 817DFC20030000          cmp dword ptr [ebp-04], 00000320
:0046CA08 7310                    jnb 0046CA1A
:0046CA0A 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046CA0D C7048DE8554B00FFFF0000  mov dword ptr [4*ecx+004B55E8], 0000FFFF
:0046CA18 EBDE                    jmp 0046C9F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CA08(C)
|
:0046CA1A C70584624B0000000000    mov dword ptr [004B6284], 00000000
:0046CA24 8B5508                  mov edx, dword ptr [ebp+08]
:0046CA27 8915E8554B00            mov dword ptr [004B55E8], edx
:0046CA2D C705EC554B00FFFF0000    mov dword ptr [004B55EC], 0000FFFF
:0046CA37 8B4508                  mov eax, dword ptr [ebp+08]
:0046CA3A 50                      push eax
:0046CA3B E80AFEFFFF              call 0046C84A
:0046CA40 83C404                  add esp, 00000004
:0046CA43 8BE5                    mov esp, ebp
:0046CA45 5D                      pop ebp
:0046CA46 C3                      ret



* Referenced by a CALL at Address:
|:0046CAED   
|
:0046CA47 55                      push ebp
:0046CA48 8BEC                    mov ebp, esp
:0046CA4A 51                      push ecx
:0046CA4B C745FC00000000          mov [ebp-04], 00000000
:0046CA52 EB09                    jmp 0046CA5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CA74(U)
|
:0046CA54 8B45FC                  mov eax, dword ptr [ebp-04]
:0046CA57 83C001                  add eax, 00000001
:0046CA5A 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CA52(U)
|
:0046CA5D 817DFC20030000          cmp dword ptr [ebp-04], 00000320
:0046CA64 7310                    jnb 0046CA76
:0046CA66 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046CA69 C7048DE8554B00FFFF0000  mov dword ptr [4*ecx+004B55E8], 0000FFFF
:0046CA74 EBDE                    jmp 0046CA54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CA64(C)
|
:0046CA76 C70584624B0000000000    mov dword ptr [004B6284], 00000000
:0046CA80 8B5508                  mov edx, dword ptr [ebp+08]
:0046CA83 8915E8554B00            mov dword ptr [004B55E8], edx
:0046CA89 C705EC554B00FFFF0000    mov dword ptr [004B55EC], 0000FFFF
:0046CA93 8B4508                  mov eax, dword ptr [ebp+08]
:0046CA96 50                      push eax
:0046CA97 E8AEFDFFFF              call 0046C84A
:0046CA9C 83C404                  add esp, 00000004
:0046CA9F 8BE5                    mov esp, ebp
:0046CAA1 5D                      pop ebp
:0046CAA2 C3                      ret



* Referenced by a CALL at Address:
|:0044ED35   
|
:0046CAA3 55                      push ebp
:0046CAA4 8BEC                    mov ebp, esp
:0046CAA6 817D0820030000          cmp dword ptr [ebp+08], 00000320
:0046CAAD 7202                    jb 0046CAB1
:0046CAAF EB69                    jmp 0046CB1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CAAD(C)
|
:0046CAB1 8B4508                  mov eax, dword ptr [ebp+08]
:0046CAB4 50                      push eax
:0046CAB5 E8FCFCFFFF              call 0046C7B6
:0046CABA 83C404                  add esp, 00000004
:0046CABD A384624B00              mov dword ptr [004B6284], eax
:0046CAC2 813D84624B00FFFF0000    cmp dword ptr [004B6284], 0000FFFF
:0046CACC 7537                    jne 0046CB05
:0046CACE 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046CAD1 6BC950                  imul ecx, 00000050
:0046CAD4 81C1787F4900            add ecx, 00497F78
:0046CADA E851FEF9FF              call 0040C930
:0046CADF 25FF000000              and eax, 000000FF
:0046CAE4 83F801                  cmp eax, 00000001
:0046CAE7 750E                    jne 0046CAF7
:0046CAE9 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046CAEC 51                      push ecx
:0046CAED E855FFFFFF              call 0046CA47
:0046CAF2 83C404                  add esp, 00000004
:0046CAF5 EB0C                    jmp 0046CB03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CAE7(C)
|
:0046CAF7 8B5508                  mov edx, dword ptr [ebp+08]
:0046CAFA 52                      push edx
:0046CAFB E8EBFEFFFF              call 0046C9EB
:0046CB00 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CAF5(U)
|
:0046CB03 EB15                    jmp 0046CB1A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CACC(C)
|
:0046CB05 A184624B00              mov eax, dword ptr [004B6284]
:0046CB0A 8B0C85E8554B00          mov ecx, dword ptr [4*eax+004B55E8]
:0046CB11 51                      push ecx
:0046CB12 E833FDFFFF              call 0046C84A
:0046CB17 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CAAF(U), :0046CB03(U)
|
:0046CB1A 5D                      pop ebp
:0046CB1B C3                      ret



* Referenced by a CALL at Addresses:
|:0040273A   , :0040283F   , :004087E2   , :00408A0D   , :0040A9EA   
|:0040AF76   , :0040B102   , :0040B455   , :004329B9   , :004348B1   
|:004397E1   , :0043990E   , :00439967   , :004399E4   , :00439B79   
|:0043A464   , :0043A4A3   , :0043A4E2   , :0043ACC8   , :0043D1DA   
|:0043D86A   , :0043DB3E   , :0043DF89   , :0043E003   , :0043E2F1   
|:0043E5F1   , :0043E904   , :0043EBEA   , :0043EC62   , :0043F0F5   
|:0043F115   , :0043FBE3   , :0044017C   , :004401BB   , :004401FA   
|:004403CC   , :0044058F   , :00440C40   , :00443554   , :00444522   
|:0044453E   , :004446D9   , :0045AB13   , :0045AB83   , :0045EA85   
|:0045FB12   , :00460ACF   
|
:0046CB1C 55                      push ebp
:0046CB1D 8BEC                    mov ebp, esp
:0046CB1F A1E4554B00              mov eax, dword ptr [004B55E4]
:0046CB24 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046CB25 FF1558D64B00            Call dword ptr [004BD658]
:0046CB2B 85C0                    test eax, eax
:0046CB2D 7502                    jne 0046CB31
:0046CB2F EB1E                    jmp 0046CB4F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CB2D(C)
|
:0046CB31 8B0D84624B00            mov ecx, dword ptr [004B6284]
:0046CB37 8B148DE8554B00          mov edx, dword ptr [4*ecx+004B55E8]
:0046CB3E 3B5508                  cmp edx, dword ptr [ebp+08]
:0046CB41 750C                    jne 0046CB4F
:0046CB43 8B4508                  mov eax, dword ptr [ebp+08]
:0046CB46 50                      push eax
:0046CB47 E84BFDFFFF              call 0046C897
:0046CB4C 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CB2F(U), :0046CB41(C)
|
:0046CB4F 5D                      pop ebp
:0046CB50 C3                      ret



* Referenced by a CALL at Address:
|:0046CBA8   
|
:0046CB51 55                      push ebp
:0046CB52 8BEC                    mov ebp, esp
:0046CB54 C70584624B0000000000    mov dword ptr [004B6284], 00000000
:0046CB5E 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"U EE}"
                                  |
:0046CB60 6870C54600              push 0046C570
:0046CB65 A1B0554B00              mov eax, dword ptr [004B55B0]
:0046CB6A 50                      push eax

* Possible Reference to Dialog: DialogID_00A6 
                                  |
:0046CB6B 68A6000000              push 000000A6
:0046CB70 8B0DA8554B00            mov ecx, dword ptr [004B55A8]
:0046CB76 51                      push ecx

* Reference To: USER32.CreateDialogParamA, Ord:004Bh
                                  |
:0046CB77 FF15F8D54B00            Call dword ptr [004BD5F8]
:0046CB7D A3E4554B00              mov dword ptr [004B55E4], eax
:0046CB82 833DE4554B0000          cmp dword ptr [004B55E4], 00000000
:0046CB89 7504                    jne 0046CB8F
:0046CB8B 33C0                    xor eax, eax
:0046CB8D EB14                    jmp 0046CBA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CB89(C)
|
:0046CB8F 6A00                    push 00000000
:0046CB91 8B15E4554B00            mov edx, dword ptr [004B55E4]
:0046CB97 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046CB98 FF1500D74B00            Call dword ptr [004BD700]
:0046CB9E B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CB8D(U)
|
:0046CBA3 5D                      pop ebp
:0046CBA4 C3                      ret



* Referenced by a CALL at Address:
|:0040FC64   
|
:0046CBA5 55                      push ebp
:0046CBA6 8BEC                    mov ebp, esp
:0046CBA8 E8A4FFFFFF              call 0046CB51
:0046CBAD 85C0                    test eax, eax
:0046CBAF 7504                    jne 0046CBB5
:0046CBB1 33C0                    xor eax, eax
:0046CBB3 EB24                    jmp 0046CBD9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CBAF(C)
|
:0046CBB5 E89973F9FF              call 00403F53
:0046CBBA 85C0                    test eax, eax
:0046CBBC 7504                    jne 0046CBC2
:0046CBBE 33C0                    xor eax, eax
:0046CBC0 EB17                    jmp 0046CBD9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CBBC(C)
|
:0046CBC2 E81D8AF9FF              call 004055E4
:0046CBC7 85C0                    test eax, eax
:0046CBC9 7504                    jne 0046CBCF
:0046CBCB 33C0                    xor eax, eax
:0046CBCD EB0A                    jmp 0046CBD9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CBC9(C)
|
:0046CBCF E87EA8FFFF              call 00467452
:0046CBD4 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CBB3(U), :0046CBC0(U), :0046CBCD(U)
|
:0046CBD9 5D                      pop ebp
:0046CBDA C3                      ret



* Referenced by a CALL at Addresses:
|:0045C9AC   , :0045EE48   
|
:0046CBDB 55                      push ebp
:0046CBDC 8BEC                    mov ebp, esp
:0046CBDE 6A00                    push 00000000
:0046CBE0 A1E4554B00              mov eax, dword ptr [004B55E4]
:0046CBE5 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046CBE6 FF1500D74B00            Call dword ptr [004BD700]
:0046CBEC 6A00                    push 00000000
:0046CBEE 8B0D68624B00            mov ecx, dword ptr [004B6268]
:0046CBF4 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046CBF5 FF1500D74B00            Call dword ptr [004BD700]
:0046CBFB B9B04B4800              mov ecx, 00484BB0
:0046CC00 E85C84F9FF              call 00405061
:0046CC05 5D                      pop ebp
:0046CC06 C3                      ret



* Referenced by a CALL at Address:
|:0045EE1F   
|
:0046CC07 55                      push ebp
:0046CC08 8BEC                    mov ebp, esp
:0046CC0A 6A00                    push 00000000
:0046CC0C A118544B00              mov eax, dword ptr [004B5418]
:0046CC11 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046CC12 FF1500D74B00            Call dword ptr [004BD700]
:0046CC18 6A00                    push 00000000
:0046CC1A 8B0D1C544B00            mov ecx, dword ptr [004B541C]
:0046CC20 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046CC21 FF1500D74B00            Call dword ptr [004BD700]
:0046CC27 6A00                    push 00000000
:0046CC29 8B15E4554B00            mov edx, dword ptr [004B55E4]
:0046CC2F 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046CC30 FF1500D74B00            Call dword ptr [004BD700]
:0046CC36 6A00                    push 00000000
:0046CC38 A168624B00              mov eax, dword ptr [004B6268]
:0046CC3D 50                      push eax

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046CC3E FF1500D74B00            Call dword ptr [004BD700]
:0046CC44 B9B04B4800              mov ecx, 00484BB0
:0046CC49 E81384F9FF              call 00405061
:0046CC4E C70560D44700FFFF0000    mov dword ptr [0047D460], 0000FFFF
:0046CC58 C7055CD44700FFFF0000    mov dword ptr [0047D45C], 0000FFFF
:0046CC62 C70558D44700FFFF0000    mov dword ptr [0047D458], 0000FFFF
:0046CC6C E86DDDFAFF              call 0041A9DE
:0046CC71 E8E0DDFFFF              call 0046AA56
:0046CC76 E8FFDDFFFF              call 0046AA7A
:0046CC7B E8E8DDFFFF              call 0046AA68
:0046CC80 5D                      pop ebp
:0046CC81 C3                      ret



* Referenced by a CALL at Addresses:
|:0046CD28   , :0046CE51   
|
:0046CC82 55                      push ebp
:0046CC83 8BEC                    mov ebp, esp
:0046CC85 83EC34                  sub esp, 00000034
:0046CC88 8B450C                  mov eax, dword ptr [ebp+0C]
:0046CC8B 8945D4                  mov dword ptr [ebp-2C], eax
:0046CC8E C745D800000000          mov [ebp-28], 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046CC95 C745D004000000          mov [ebp-30], 00000004
:0046CC9C 8D4DD0                  lea ecx, dword ptr [ebp-30]
:0046CC9F 51                      push ecx
:0046CCA0 6A00                    push 00000000
:0046CCA2 6805100000              push 00001005
:0046CCA7 8B5508                  mov edx, dword ptr [ebp+08]
:0046CCAA 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046CCAB FF1504D64B00            Call dword ptr [004BD604]
:0046CCB1 8B45F0                  mov eax, dword ptr [ebp-10]
:0046CCB4 8945F8                  mov dword ptr [ebp-08], eax
:0046CCB7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046CCBA E8C164F9FF              call 00403180
:0046CCBF 8945CC                  mov dword ptr [ebp-34], eax
:0046CCC2 C745FC00000000          mov [ebp-04], 00000000
:0046CCC9 EB09                    jmp 0046CCD4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CD0D(U)
|
:0046CCCB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046CCCE 83C101                  add ecx, 00000001
:0046CCD1 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CCC9(U)
|
:0046CCD4 817DFC20030000          cmp dword ptr [ebp-04], 00000320
:0046CCDB 7332                    jnb 0046CD0F
:0046CCDD 8B55FC                  mov edx, dword ptr [ebp-04]
:0046CCE0 813C95E8554B00FFFF0000  cmp dword ptr [4*edx+004B55E8], 0000FFFF
:0046CCEB 7420                    je 0046CD0D
:0046CCED 8B45FC                  mov eax, dword ptr [ebp-04]
:0046CCF0 8B0C85E8554B00          mov ecx, dword ptr [4*eax+004B55E8]
:0046CCF7 3B4DCC                  cmp ecx, dword ptr [ebp-34]
:0046CCFA 7511                    jne 0046CD0D
:0046CCFC 8B55CC                  mov edx, dword ptr [ebp-34]
:0046CCFF 52                      push edx
:0046CD00 E892FBFFFF              call 0046C897
:0046CD05 83C404                  add esp, 00000004
:0046CD08 8B45CC                  mov eax, dword ptr [ebp-34]
:0046CD0B EB07                    jmp 0046CD14

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CCEB(C), :0046CCFA(C)
|
:0046CD0D EBBC                    jmp 0046CCCB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CCDB(C)
|
:0046CD0F B8FFFF0000              mov eax, 0000FFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CD0B(U)
|
:0046CD14 8BE5                    mov esp, ebp
:0046CD16 5D                      pop ebp
:0046CD17 C3                      ret



* Referenced by a CALL at Addresses:
|:0046D564   , :0046D620   
|
:0046CD18 55                      push ebp
:0046CD19 8BEC                    mov ebp, esp
:0046CD1B 83EC08                  sub esp, 00000008
:0046CD1E A180AA4800              mov eax, dword ptr [0048AA80]
:0046CD23 50                      push eax
:0046CD24 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046CD27 51                      push ecx
:0046CD28 E855FFFFFF              call 0046CC82
:0046CD2D 83C408                  add esp, 00000008
:0046CD30 8945FC                  mov dword ptr [ebp-04], eax
:0046CD33 817DFCFFFF0000          cmp dword ptr [ebp-04], 0000FFFF
:0046CD3A 7430                    je 0046CD6C
:0046CD3C 8B55FC                  mov edx, dword ptr [ebp-04]
:0046CD3F 52                      push edx
:0046CD40 E8B9FAFFFF              call 0046C7FE
:0046CD45 83C404                  add esp, 00000004
:0046CD48 8945F8                  mov dword ptr [ebp-08], eax
:0046CD4B 817DF8FFFF0000          cmp dword ptr [ebp-08], 0000FFFF
:0046CD52 7418                    je 0046CD6C
:0046CD54 B958494B00              mov ecx, 004B4958
:0046CD59 E804FEFDFF              call 0044CB62
:0046CD5E 8A45F8                  mov al, byte ptr [ebp-08]
:0046CD61 50                      push eax
:0046CD62 B958494B00              mov ecx, 004B4958
:0046CD67 E8AF0FFEFF              call 0044DD1B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CD3A(C), :0046CD52(C)
|
:0046CD6C 8BE5                    mov esp, ebp
:0046CD6E 5D                      pop ebp
:0046CD6F C3                      ret



* Referenced by a CALL at Address:
|:00469BAD   
|
:0046CD70 55                      push ebp
:0046CD71 8BEC                    mov ebp, esp
:0046CD73 E8EB47FAFF              call 00411563
:0046CD78 25FF000000              and eax, 000000FF
:0046CD7D 83F803                  cmp eax, 00000003
:0046CD80 741C                    je 0046CD9E
:0046CD82 6A00                    push 00000000
:0046CD84 68BACD4600              push 0046CDBA
:0046CD89 8B450C                  mov eax, dword ptr [ebp+0C]
:0046CD8C 50                      push eax

* Possible Reference to Dialog: DialogID_00D4 
                                  |
:0046CD8D 68D4000000              push 000000D4
:0046CD92 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046CD95 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0046CD96 FF15DCD64B00            Call dword ptr [004BD6DC]
:0046CD9C EB1A                    jmp 0046CDB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CD80(C)
|
:0046CD9E 6A00                    push 00000000
:0046CDA0 68B4D44600              push 0046D4B4
:0046CDA5 8B550C                  mov edx, dword ptr [ebp+0C]
:0046CDA8 52                      push edx

* Possible Reference to Dialog: DialogID_00BA 
                                  |
:0046CDA9 68BA000000              push 000000BA
:0046CDAE 8B4508                  mov eax, dword ptr [ebp+08]
:0046CDB1 50                      push eax

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0046CDB2 FF15DCD64B00            Call dword ptr [004BD6DC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CD9C(U)
|
:0046CDB8 5D                      pop ebp
:0046CDB9 C3                      ret


:0046CDBA 55                      push ebp
:0046CDBB 8BEC                    mov ebp, esp
:0046CDBD 83EC18                  sub esp, 00000018

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0046CDC0 6802040000              push 00000402
:0046CDC5 8B4508                  mov eax, dword ptr [ebp+08]
:0046CDC8 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046CDC9 FF1510D64B00            Call dword ptr [004BD610]
:0046CDCF 8945FC                  mov dword ptr [ebp-04], eax
:0046CDD2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046CDD5 894DF0                  mov dword ptr [ebp-10], ecx
:0046CDD8 837DF04E                cmp dword ptr [ebp-10], 0000004E
:0046CDDC 743A                    je 0046CE18
:0046CDDE 817DF010010000          cmp dword ptr [ebp-10], 00000110
:0046CDE5 7412                    je 0046CDF9
:0046CDE7 817DF011010000          cmp dword ptr [ebp-10], 00000111
:0046CDEE 0F8483000000            je 0046CE77
:0046CDF4 E9C9000000              jmp 0046CEC2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CDE5(C)
|
:0046CDF9 E8BCDDFFFF              call 0046ABBA
:0046CDFE 8945F8                  mov dword ptr [ebp-08], eax
:0046CE01 6A01                    push 00000001
:0046CE03 8B55F8                  mov edx, dword ptr [ebp-08]
:0046CE06 52                      push edx
:0046CE07 8B4508                  mov eax, dword ptr [ebp+08]
:0046CE0A 50                      push eax
:0046CE0B E807050000              call 0046D317
:0046CE10 83C40C                  add esp, 0000000C
:0046CE13 E9AE000000              jmp 0046CEC6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CDDC(C)
|
:0046CE18 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046CE1B 8B5108                  mov edx, dword ptr [ecx+08]
:0046CE1E 8955EC                  mov dword ptr [ebp-14], edx
:0046CE21 837DEC9B                cmp dword ptr [ebp-14], FFFFFF9B
:0046CE25 7402                    je 0046CE29
:0046CE27 EB32                    jmp 0046CE5B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CE25(C)
|
:0046CE29 8B4514                  mov eax, dword ptr [ebp+14]
:0046CE2C 8945F4                  mov dword ptr [ebp-0C], eax
:0046CE2F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046CE32 81790C20030000          cmp dword ptr [ecx+0C], 00000320
:0046CE39 7D0B                    jge 0046CE46
:0046CE3B 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046CE3E 8B420C                  mov eax, dword ptr [edx+0C]
:0046CE41 A380AA4800              mov dword ptr [0048AA80], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CE39(C)
|
:0046CE46 8B0D80AA4800            mov ecx, dword ptr [0048AA80]
:0046CE4C 51                      push ecx
:0046CE4D 8B55FC                  mov edx, dword ptr [ebp-04]
:0046CE50 52                      push edx
:0046CE51 E82CFEFFFF              call 0046CC82
:0046CE56 83C408                  add esp, 00000008
:0046CE59 EB1A                    jmp 0046CE75

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CE27(U)
|
:0046CE5B 8B4514                  mov eax, dword ptr [ebp+14]
:0046CE5E 50                      push eax
:0046CE5F 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046CE62 51                      push ecx
:0046CE63 8B550C                  mov edx, dword ptr [ebp+0C]
:0046CE66 52                      push edx
:0046CE67 8B4508                  mov eax, dword ptr [ebp+08]
:0046CE6A 50                      push eax
:0046CE6B E861000000              call 0046CED1
:0046CE70 83C410                  add esp, 00000010
:0046CE73 EB56                    jmp 0046CECB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CE59(U)
|
:0046CE75 EB4F                    jmp 0046CEC6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CDEE(C)
|
:0046CE77 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046CE7A 81E1FFFF0000            and ecx, 0000FFFF
:0046CE80 894DE8                  mov dword ptr [ebp-18], ecx
:0046CE83 837DE802                cmp dword ptr [ebp-18], 00000002
:0046CE87 7414                    je 0046CE9D
:0046CE89 817DE802040000          cmp dword ptr [ebp-18], 00000402
:0046CE90 7428                    je 0046CEBA
:0046CE92 817DE8A9040000          cmp dword ptr [ebp-18], 000004A9
:0046CE99 7410                    je 0046CEAB
:0046CE9B EB1F                    jmp 0046CEBC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CE87(C)
|
:0046CE9D 6A01                    push 00000001
:0046CE9F 8B5508                  mov edx, dword ptr [ebp+08]
:0046CEA2 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0046CEA3 FF15D8D54B00            Call dword ptr [004BD5D8]
:0046CEA9 EB15                    jmp 0046CEC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CE99(C)
|
:0046CEAB 6806090000              push 00000906
:0046CEB0 E816CCFFFF              call 00469ACB
:0046CEB5 83C404                  add esp, 00000004
:0046CEB8 EB06                    jmp 0046CEC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CE90(C)
|
:0046CEBA EB04                    jmp 0046CEC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CE9B(U)
|
:0046CEBC 33C0                    xor eax, eax
:0046CEBE EB0B                    jmp 0046CECB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CEA9(U), :0046CEB8(U), :0046CEBA(U)
|
:0046CEC0 EB04                    jmp 0046CEC6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CDF4(U)
|
:0046CEC2 33C0                    xor eax, eax
:0046CEC4 EB05                    jmp 0046CECB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CE13(U), :0046CE75(U), :0046CEC0(U)
|
:0046CEC6 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CE73(U), :0046CEBE(U), :0046CEC4(U)
|
:0046CECB 8BE5                    mov esp, ebp
:0046CECD 5D                      pop ebp
:0046CECE C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0046CE6B   , :0046D57E   
|
:0046CED1 55                      push ebp
:0046CED2 8BEC                    mov ebp, esp
:0046CED4 83EC0C                  sub esp, 0000000C
:0046CED7 8B4514                  mov eax, dword ptr [ebp+14]
:0046CEDA 8945F8                  mov dword ptr [ebp-08], eax
:0046CEDD 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046CEE0 894DFC                  mov dword ptr [ebp-04], ecx
:0046CEE3 817D1002040000          cmp dword ptr [ebp+10], 00000402
:0046CEEA 7404                    je 0046CEF0
:0046CEEC 33C0                    xor eax, eax
:0046CEEE EB6F                    jmp 0046CF5F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CEEA(C)
|
:0046CEF0 8B55F8                  mov edx, dword ptr [ebp-08]
:0046CEF3 8B4208                  mov eax, dword ptr [edx+08]
:0046CEF6 8945F4                  mov dword ptr [ebp-0C], eax
:0046CEF9 817DF46AFFFFFF          cmp dword ptr [ebp-0C], FFFFFF6A
:0046CF00 740E                    je 0046CF10
:0046CF02 837DF494                cmp dword ptr [ebp-0C], FFFFFF94
:0046CF06 741D                    je 0046CF25
:0046CF08 837DF497                cmp dword ptr [ebp-0C], FFFFFF97
:0046CF0C 7410                    je 0046CF1E
:0046CF0E EB4D                    jmp 0046CF5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CF00(C)
|
:0046CF10 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046CF13 51                      push ecx
:0046CF14 E8FB010000              call 0046D114
:0046CF19 83C404                  add esp, 00000004
:0046CF1C EB41                    jmp 0046CF5F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CF0C(C)
|
:0046CF1E B801000000              mov eax, 00000001
:0046CF23 EB3A                    jmp 0046CF5F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CF06(C)
|
:0046CF25 6863CF4600              push 0046CF63
:0046CF2A 8B55FC                  mov edx, dword ptr [ebp-04]
:0046CF2D 8B4210                  mov eax, dword ptr [edx+10]
:0046CF30 50                      push eax
:0046CF31 6830100000              push 00001030
:0046CF36 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046CF39 8B11                    mov edx, dword ptr [ecx]
:0046CF3B 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046CF3C FF1504D64B00            Call dword ptr [004BD604]
:0046CF42 B96CB34800              mov ecx, 0048B36C
:0046CF47 E824C8FAFF              call 00419770
:0046CF4C 8B4508                  mov eax, dword ptr [ebp+08]
:0046CF4F 50                      push eax

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0046CF50 FF15FCD54B00            Call dword ptr [004BD5FC]
:0046CF56 B801000000              mov eax, 00000001
:0046CF5B EB02                    jmp 0046CF5F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CF0E(U)
|
:0046CF5D 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CEEE(U), :0046CF1C(U), :0046CF23(U), :0046CF5B(U)
|
:0046CF5F 8BE5                    mov esp, ebp
:0046CF61 5D                      pop ebp
:0046CF62 C3                      ret


:0046CF63 55                      push ebp
:0046CF64 8BEC                    mov ebp, esp
:0046CF66 83EC14                  sub esp, 00000014
:0046CF69 53                      push ebx
:0046CF6A 56                      push esi
:0046CF6B 8B4508                  mov eax, dword ptr [ebp+08]
:0046CF6E 8945F8                  mov dword ptr [ebp-08], eax
:0046CF71 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046CF74 894DF4                  mov dword ptr [ebp-0C], ecx
:0046CF77 837DF800                cmp dword ptr [ebp-08], 00000000
:0046CF7B 0F8453010000            je 0046D0D4
:0046CF81 837DF400                cmp dword ptr [ebp-0C], 00000000
:0046CF85 0F8449010000            je 0046D0D4
:0046CF8B 8B5510                  mov edx, dword ptr [ebp+10]
:0046CF8E 8955EC                  mov dword ptr [ebp-14], edx
:0046CF91 837DEC09                cmp dword ptr [ebp-14], 00000009
:0046CF95 0F8732010000            ja 0046D0CD
:0046CF9B 8B45EC                  mov eax, dword ptr [ebp-14]
:0046CF9E FF2485ECD04600          jmp dword ptr [4*eax+0046D0EC]
:0046CFA5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046CFA8 E88321FBFF              call 0041F130
:0046CFAD 8BF0                    mov esi, eax
:0046CFAF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046CFB2 E87921FBFF              call 0041F130
:0046CFB7 2BF0                    sub esi, eax
:0046CFB9 8975FC                  mov dword ptr [ebp-04], esi
:0046CFBC E913010000              jmp 0046D0D4
:0046CFC1 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046CFC4 E8554DF9FF              call 00401D1E
:0046CFC9 8BF0                    mov esi, eax
:0046CFCB 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046CFCE E84B4DF9FF              call 00401D1E
:0046CFD3 2BF0                    sub esi, eax
:0046CFD5 8975FC                  mov dword ptr [ebp-04], esi
:0046CFD8 E9F7000000              jmp 0046D0D4
:0046CFDD 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046CFE0 E86C4DF9FF              call 00401D51
:0046CFE5 8BF0                    mov esi, eax
:0046CFE7 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046CFEA E8624DF9FF              call 00401D51
:0046CFEF 2BF0                    sub esi, eax
:0046CFF1 8975FC                  mov dword ptr [ebp-04], esi
:0046CFF4 E9DB000000              jmp 0046D0D4
:0046CFF9 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046CFFC E8834DF9FF              call 00401D84
:0046D001 8BF0                    mov esi, eax
:0046D003 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D006 E8794DF9FF              call 00401D84
:0046D00B 2BF0                    sub esi, eax
:0046D00D 8975FC                  mov dword ptr [ebp-04], esi
:0046D010 E9BF000000              jmp 0046D0D4
:0046D015 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046D018 E89A4DF9FF              call 00401DB7
:0046D01D 8BF0                    mov esi, eax
:0046D01F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D022 E8904DF9FF              call 00401DB7
:0046D027 2BF0                    sub esi, eax
:0046D029 8975FC                  mov dword ptr [ebp-04], esi
:0046D02C E9A3000000              jmp 0046D0D4
:0046D031 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046D034 E8B14DF9FF              call 00401DEA
:0046D039 8BF0                    mov esi, eax
:0046D03B 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D03E E8A74DF9FF              call 00401DEA
:0046D043 2BF0                    sub esi, eax
:0046D045 8975FC                  mov dword ptr [ebp-04], esi
:0046D048 E987000000              jmp 0046D0D4
:0046D04D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046D050 E8C64DF9FF              call 00401E1B
:0046D055 8BF0                    mov esi, eax
:0046D057 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D05A E8BC4DF9FF              call 00401E1B
:0046D05F 2BF0                    sub esi, eax
:0046D061 8975FC                  mov dword ptr [ebp-04], esi
:0046D064 EB6E                    jmp 0046D0D4
:0046D066 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046D069 E8E04DF9FF              call 00401E4E
:0046D06E 8BF0                    mov esi, eax
:0046D070 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D073 E8D64DF9FF              call 00401E4E
:0046D078 2BF0                    sub esi, eax
:0046D07A 8975FC                  mov dword ptr [ebp-04], esi
:0046D07D EB55                    jmp 0046D0D4
:0046D07F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046D082 E8334EF9FF              call 00401EBA
:0046D087 8AD8                    mov bl, al
:0046D089 81E3FF000000            and ebx, 000000FF
:0046D08F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D092 E8234EF9FF              call 00401EBA
:0046D097 25FF000000              and eax, 000000FF
:0046D09C 2BD8                    sub ebx, eax
:0046D09E 895DFC                  mov dword ptr [ebp-04], ebx
:0046D0A1 EB31                    jmp 0046D0D4
:0046D0A3 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046D0A6 83E901                  sub ecx, 00000001
:0046D0A9 894DF0                  mov dword ptr [ebp-10], ecx
:0046D0AC 8B55F0                  mov edx, dword ptr [ebp-10]
:0046D0AF 52                      push edx
:0046D0B0 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046D0B3 E88241F9FF              call 0040123A
:0046D0B8 8BF0                    mov esi, eax
:0046D0BA 8B45F0                  mov eax, dword ptr [ebp-10]
:0046D0BD 50                      push eax
:0046D0BE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D0C1 E87441F9FF              call 0040123A
:0046D0C6 2BF0                    sub esi, eax
:0046D0C8 8975FC                  mov dword ptr [ebp-04], esi
:0046D0CB EB07                    jmp 0046D0D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046CF95(C)
|
:0046D0CD C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046CF7B(C), :0046CF85(C), :0046CFBC(U), :0046CFD8(U), :0046CFF4(U)
|:0046D010(U), :0046D02C(U), :0046D048(U), :0046D064(U), :0046D07D(U)
|:0046D0A1(U), :0046D0CB(U)
|
:0046D0D4 B96CB34800              mov ecx, 0048B36C
:0046D0D9 E8B2C6FAFF              call 00419790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D10C(C)
|
:0046D0DE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D0E1 0FAFC1                  imul eax, ecx
:0046D0E4 5E                      pop esi
:0046D0E5 5B                      pop ebx
:0046D0E6 8BE5                    mov esp, ebp
:0046D0E8 5D                      pop ebp
:0046D0E9 C20C00                  ret 000C



:0046D0EC A5CF4600                DWORD 0046CFA5
:0046D0F0 C1CF4600                DWORD 0046CFC1
:0046D0F4 DDCF4600                DWORD 0046CFDD
:0046D0F8 F9CF4600                DWORD 0046CFF9
:0046D0FC 15D04600                DWORD 0046D015
:0046D100 31D04600                DWORD 0046D031
:0046D104 4DD04600                DWORD 0046D04D
:0046D108 66D04600                DWORD 0046D066
:0046D10C 7FD04600                DWORD 0046D07F
:0046D110 A3D04600                DWORD 0046D0A3



* Referenced by a CALL at Address:
|:0046CF14   
|
:0046D114 55                      push ebp
:0046D115 8BEC                    mov ebp, esp
:0046D117 83EC0C                  sub esp, 0000000C
:0046D11A 8B4508                  mov eax, dword ptr [ebp+08]
:0046D11D 8B482C                  mov ecx, dword ptr [eax+2C]
:0046D120 894DFC                  mov dword ptr [ebp-04], ecx
:0046D123 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046D127 750A                    jne 0046D133
:0046D129 B801000000              mov eax, 00000001
:0046D12E E9BC010000              jmp 0046D2EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D127(C)
|
:0046D133 8B5508                  mov edx, dword ptr [ebp+08]
:0046D136 8B4214                  mov eax, dword ptr [edx+14]
:0046D139 8945F8                  mov dword ptr [ebp-08], eax
:0046D13C 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D13F 894DF4                  mov dword ptr [ebp-0C], ecx
:0046D142 837DF408                cmp dword ptr [ebp-0C], 00000008
:0046D146 0F876C010000            ja 0046D2B8
:0046D14C 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046D14F FF2495F3D24600          jmp dword ptr [4*edx+0046D2F3]
:0046D156 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D159 E8A65FF9FF              call 00403104
:0046D15E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D161 894120                  mov dword ptr [ecx+20], eax
:0046D164 E981010000              jmp 0046D2EA
:0046D169 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D16C E8AD4BF9FF              call 00401D1E
:0046D171 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0046D172 687C234800              push 0048237C
:0046D177 6870624B00              push 004B6270
:0046D17C E88FBC0000              call 00478E10
:0046D181 83C40C                  add esp, 0000000C
:0046D184 8B5508                  mov edx, dword ptr [ebp+08]
:0046D187 C7422070624B00          mov [edx+20], 004B6270
:0046D18E E957010000              jmp 0046D2EA
:0046D193 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D196 E8B64BF9FF              call 00401D51
:0046D19B 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0046D19C 6880234800              push 00482380
:0046D1A1 6870624B00              push 004B6270
:0046D1A6 E865BC0000              call 00478E10
:0046D1AB 83C40C                  add esp, 0000000C
:0046D1AE 8B4508                  mov eax, dword ptr [ebp+08]
:0046D1B1 C7402070624B00          mov [eax+20], 004B6270
:0046D1B8 E92D010000              jmp 0046D2EA
:0046D1BD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D1C0 E8BF4BF9FF              call 00401D84
:0046D1C5 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0046D1C6 6884234800              push 00482384
:0046D1CB 6870624B00              push 004B6270
:0046D1D0 E83BBC0000              call 00478E10
:0046D1D5 83C40C                  add esp, 0000000C
:0046D1D8 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D1DB C7412070624B00          mov [ecx+20], 004B6270
:0046D1E2 E903010000              jmp 0046D2EA
:0046D1E7 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D1EA E8C84BF9FF              call 00401DB7
:0046D1EF 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0046D1F0 6888234800              push 00482388
:0046D1F5 6870624B00              push 004B6270
:0046D1FA E811BC0000              call 00478E10
:0046D1FF 83C40C                  add esp, 0000000C
:0046D202 8B5508                  mov edx, dword ptr [ebp+08]
:0046D205 C7422070624B00          mov [edx+20], 004B6270
:0046D20C E9D9000000              jmp 0046D2EA
:0046D211 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D214 E8D14BF9FF              call 00401DEA
:0046D219 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0046D21A 688C234800              push 0048238C
:0046D21F 6870624B00              push 004B6270
:0046D224 E8E7BB0000              call 00478E10
:0046D229 83C40C                  add esp, 0000000C
:0046D22C 8B4508                  mov eax, dword ptr [ebp+08]
:0046D22F C7402070624B00          mov [eax+20], 004B6270
:0046D236 E9AF000000              jmp 0046D2EA
:0046D23B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D23E E8D84BF9FF              call 00401E1B
:0046D243 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0046D244 6890234800              push 00482390
:0046D249 6870624B00              push 004B6270
:0046D24E E8BDBB0000              call 00478E10
:0046D253 83C40C                  add esp, 0000000C
:0046D256 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D259 C7412070624B00          mov [ecx+20], 004B6270
:0046D260 E985000000              jmp 0046D2EA
:0046D265 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D268 E8E14BF9FF              call 00401E4E
:0046D26D 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0046D26E 6894234800              push 00482394
:0046D273 6870624B00              push 004B6270
:0046D278 E893BB0000              call 00478E10
:0046D27D 83C40C                  add esp, 0000000C
:0046D280 8B5508                  mov edx, dword ptr [ebp+08]
:0046D283 C7422070624B00          mov [edx+20], 004B6270
:0046D28A EB5E                    jmp 0046D2EA
:0046D28C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D28F E8264CF9FF              call 00401EBA
:0046D294 25FF000000              and eax, 000000FF
:0046D299 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0046D29A 6898234800              push 00482398
:0046D29F 6870624B00              push 004B6270
:0046D2A4 E867BB0000              call 00478E10
:0046D2A9 83C40C                  add esp, 0000000C
:0046D2AC 8B4508                  mov eax, dword ptr [ebp+08]
:0046D2AF C7402070624B00          mov [eax+20], 004B6270
:0046D2B6 EB32                    jmp 0046D2EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D146(C)
|
:0046D2B8 837DF811                cmp dword ptr [ebp-08], 00000011
:0046D2BC 732C                    jnb 0046D2EA
:0046D2BE 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D2C1 83E901                  sub ecx, 00000001
:0046D2C4 51                      push ecx
:0046D2C5 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D2C8 E86D3FF9FF              call 0040123A
:0046D2CD 50                      push eax

* Possible StringData Ref from Data Obj ->"%u"
                                  |
:0046D2CE 689C234800              push 0048239C
:0046D2D3 6870624B00              push 004B6270
:0046D2D8 E833BB0000              call 00478E10
:0046D2DD 83C40C                  add esp, 0000000C
:0046D2E0 8B5508                  mov edx, dword ptr [ebp+08]
:0046D2E3 C7422070624B00          mov [edx+20], 004B6270

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D164(U), :0046D18E(U), :0046D1B8(U), :0046D1E2(U), :0046D20C(U)
|:0046D236(U), :0046D260(U), :0046D28A(U), :0046D2B6(U), :0046D2BC(C)
|
:0046D2EA B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D12E(U)
|
:0046D2EF 8BE5                    mov esp, ebp
:0046D2F1 5D                      pop ebp
:0046D2F2 C3                      ret



:0046D2F3 56D14600                DWORD 0046D156
:0046D2F7 69D14600                DWORD 0046D169
:0046D2FB 93D14600                DWORD 0046D193
:0046D2FF BDD14600                DWORD 0046D1BD
:0046D303 E7D14600                DWORD 0046D1E7
:0046D307 11D24600                DWORD 0046D211
:0046D30B 3BD24600                DWORD 0046D23B
:0046D30F 65D24600                DWORD 0046D265
:0046D313 8CD24600                DWORD 0046D28C



* Referenced by a CALL at Addresses:
|:0046CE0B   , :0046D524   , :0046D650   , :0046D671   
|
:0046D317 55                      push ebp
:0046D318 8BEC                    mov ebp, esp
:0046D31A 83EC6C                  sub esp, 0000006C

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0046D31D 6802040000              push 00000402
:0046D322 8B4508                  mov eax, dword ptr [ebp+08]
:0046D325 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046D326 FF1510D64B00            Call dword ptr [004BD610]
:0046D32C 8945FC                  mov dword ptr [ebp-04], eax
:0046D32F C745D40F000000          mov [ebp-2C], 0000000F
:0046D336 C745D800000000          mov [ebp-28], 00000000
:0046D33D 6A00                    push 00000000
:0046D33F 6A00                    push 00000000
:0046D341 6809100000              push 00001009
:0046D346 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D349 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046D34A FF1504D64B00            Call dword ptr [004BD604]
:0046D350 894594                  mov dword ptr [ebp-6C], eax
:0046D353 837D1000                cmp dword ptr [ebp+10], 00000000
:0046D357 0F84AC000000            je 0046D409
:0046D35D C745F800000000          mov [ebp-08], 00000000
:0046D364 EB09                    jmp 0046D36F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D404(U)
|
:0046D366 8B55F8                  mov edx, dword ptr [ebp-08]
:0046D369 83C201                  add edx, 00000001
:0046D36C 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D364(U)
|
:0046D36F 837DF80A                cmp dword ptr [ebp-08], 0000000A
:0046D373 0F8390000000            jnb 0046D409
:0046D379 8B45F8                  mov eax, dword ptr [ebp-08]
:0046D37C 8945E8                  mov dword ptr [ebp-18], eax
:0046D37F 837DF800                cmp dword ptr [ebp-08], 00000000
:0046D383 745A                    je 0046D3DF
:0046D385 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D388 83E901                  sub ecx, 00000001
:0046D38B 83F905                  cmp ecx, 00000005
:0046D38E 740B                    je 0046D39B
:0046D390 8B55F8                  mov edx, dword ptr [ebp-08]
:0046D393 83EA01                  sub edx, 00000001
:0046D396 83FA04                  cmp edx, 00000004
:0046D399 751A                    jne 0046D3B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D38E(C)
|

* Possible StringData Ref from Data Obj ->"̤j"
                                  |
:0046D39B 68A0234800              push 004823A0
:0046D3A0 8D45C0                  lea eax, dword ptr [ebp-40]
:0046D3A3 50                      push eax
:0046D3A4 E887B10000              call 00478530
:0046D3A9 83C408                  add esp, 00000008
:0046D3AC C745DC4B000000          mov [ebp-24], 0000004B
:0046D3B3 EB0B                    jmp 0046D3C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D399(C)
|
:0046D3B5 C645C000                mov [ebp-40], 00

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003C, ""
                                  |
:0046D3B9 C745DC3C000000          mov [ebp-24], 0000003C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D3B3(U)
|
:0046D3C0 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D3C3 8B148D84D64700          mov edx, dword ptr [4*ecx+0047D684]
:0046D3CA 52                      push edx
:0046D3CB 8D45C0                  lea eax, dword ptr [ebp-40]
:0046D3CE 50                      push eax
:0046D3CF E87CB10000              call 00478550
:0046D3D4 83C408                  add esp, 00000008
:0046D3D7 8D4DC0                  lea ecx, dword ptr [ebp-40]
:0046D3DA 894DE0                  mov dword ptr [ebp-20], ecx
:0046D3DD EB0E                    jmp 0046D3ED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D383(C)
|

* Possible StringData Ref from Data Obj ->"ZNW"
                                  |
:0046D3DF C745E0A8234800          mov [ebp-20], 004823A8
:0046D3E6 C745DC5A000000          mov [ebp-24], 0000005A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D3DD(U)
|
:0046D3ED 8D55D4                  lea edx, dword ptr [ebp-2C]
:0046D3F0 52                      push edx
:0046D3F1 8B45F8                  mov eax, dword ptr [ebp-08]
:0046D3F4 50                      push eax
:0046D3F5 681B100000              push 0000101B
:0046D3FA 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D3FD 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046D3FE FF1504D64B00            Call dword ptr [004BD604]
:0046D404 E95DFFFFFF              jmp 0046D366

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D357(C), :0046D373(C)
|
:0046D409 8D5598                  lea edx, dword ptr [ebp-68]
:0046D40C 52                      push edx
:0046D40D E862000000              call 0046D474
:0046D412 83C404                  add esp, 00000004
:0046D415 C745ACFFFFFFFF          mov [ebp-54], FFFFFFFF
:0046D41C C745F400000000          mov [ebp-0C], 00000000
:0046D423 EB09                    jmp 0046D42E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D46E(U)
|
:0046D425 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046D428 83C001                  add eax, 00000001
:0046D42B 8945F4                  mov dword ptr [ebp-0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D423(U)
|
:0046D42E 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046D431 3B4D0C                  cmp ecx, dword ptr [ebp+0C]
:0046D434 733A                    jnb 0046D470
:0046D436 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046D439 89559C                  mov dword ptr [ebp-64], edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046D43C C7459805000000          mov [ebp-68], 00000005
:0046D443 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046D446 8B0C85E8554B00          mov ecx, dword ptr [4*eax+004B55E8]
:0046D44D 6BC950                  imul ecx, 00000050
:0046D450 81C1787F4900            add ecx, 00497F78
:0046D456 894DB8                  mov dword ptr [ebp-48], ecx
:0046D459 8D5598                  lea edx, dword ptr [ebp-68]
:0046D45C 52                      push edx
:0046D45D 6A00                    push 00000000
:0046D45F 6807100000              push 00001007
:0046D464 8B45FC                  mov eax, dword ptr [ebp-04]
:0046D467 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046D468 FF1504D64B00            Call dword ptr [004BD604]
:0046D46E EBB5                    jmp 0046D425

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D434(C)
|
:0046D470 8BE5                    mov esp, ebp
:0046D472 5D                      pop ebp
:0046D473 C3                      ret



* Referenced by a CALL at Address:
|:0046D40D   
|
:0046D474 55                      push ebp
:0046D475 8BEC                    mov ebp, esp
:0046D477 8B4508                  mov eax, dword ptr [ebp+08]
:0046D47A C7000F000000            mov dword ptr [eax], 0000000F
:0046D480 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D483 C7410C00000000          mov [ecx+0C], 00000000
:0046D48A 8B5508                  mov edx, dword ptr [ebp+08]
:0046D48D C7421000000000          mov [edx+10], 00000000
:0046D494 8B4508                  mov eax, dword ptr [ebp+08]
:0046D497 C7400800000000          mov [eax+08], 00000000
:0046D49E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D4A1 C74114FFFFFFFF          mov [ecx+14], FFFFFFFF
:0046D4A8 8B5508                  mov edx, dword ptr [ebp+08]
:0046D4AB C7421811000000          mov [edx+18], 00000011
:0046D4B2 5D                      pop ebp
:0046D4B3 C3                      ret


:0046D4B4 55                      push ebp
:0046D4B5 8BEC                    mov ebp, esp
:0046D4B7 83EC1C                  sub esp, 0000001C

* Possible Reference to Dialog: DialogID_0091, CONTROL_ID:0402, ""
                                  |
:0046D4BA 6802040000              push 00000402
:0046D4BF 8B4508                  mov eax, dword ptr [ebp+08]
:0046D4C2 50                      push eax

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046D4C3 FF1510D64B00            Call dword ptr [004BD610]
:0046D4C9 8945FC                  mov dword ptr [ebp-04], eax
:0046D4CC 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046D4CF 894DEC                  mov dword ptr [ebp-14], ecx
:0046D4D2 837DEC4E                cmp dword ptr [ebp-14], 0000004E
:0046D4D6 7459                    je 0046D531
:0046D4D8 817DEC10010000          cmp dword ptr [ebp-14], 00000110
:0046D4DF 7412                    je 0046D4F3
:0046D4E1 817DEC11010000          cmp dword ptr [ebp-14], 00000111
:0046D4E8 0F84A2000000            je 0046D590
:0046D4EE E988010000              jmp 0046D67B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D4DF(C)
|
:0046D4F3 6A01                    push 00000001
:0046D4F5 6809040000              push 00000409
:0046D4FA 8B5508                  mov edx, dword ptr [ebp+08]
:0046D4FD 52                      push edx

* Reference To: USER32.GetDlgItem, Ord:00F3h
                                  |
:0046D4FE FF1510D64B00            Call dword ptr [004BD610]
:0046D504 50                      push eax
:0046D505 E8D721FAFF              call 0040F6E1
:0046D50A 83C408                  add esp, 00000008
:0046D50D 6A01                    push 00000001
:0046D50F E8FCF3FFFF              call 0046C910
:0046D514 83C404                  add esp, 00000004
:0046D517 8945F8                  mov dword ptr [ebp-08], eax
:0046D51A 6A01                    push 00000001
:0046D51C 8B45F8                  mov eax, dword ptr [ebp-08]
:0046D51F 50                      push eax
:0046D520 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D523 51                      push ecx
:0046D524 E8EEFDFFFF              call 0046D317
:0046D529 83C40C                  add esp, 0000000C
:0046D52C E94E010000              jmp 0046D67F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D4D6(C)
|
:0046D531 8B5514                  mov edx, dword ptr [ebp+14]
:0046D534 8B4208                  mov eax, dword ptr [edx+08]
:0046D537 8945E8                  mov dword ptr [ebp-18], eax
:0046D53A 837DE89B                cmp dword ptr [ebp-18], FFFFFF9B
:0046D53E 7402                    je 0046D542
:0046D540 EB2C                    jmp 0046D56E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D53E(C)
|
:0046D542 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046D545 894DF4                  mov dword ptr [ebp-0C], ecx
:0046D548 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046D54B 817A0C20030000          cmp dword ptr [edx+0C], 00000320
:0046D552 7D0C                    jge 0046D560
:0046D554 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046D557 8B480C                  mov ecx, dword ptr [eax+0C]
:0046D55A 890D80AA4800            mov dword ptr [0048AA80], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D552(C)
|
:0046D560 8B55FC                  mov edx, dword ptr [ebp-04]
:0046D563 52                      push edx
:0046D564 E8AFF7FFFF              call 0046CD18
:0046D569 83C404                  add esp, 00000004
:0046D56C EB1D                    jmp 0046D58B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D540(U)
|
:0046D56E 8B4514                  mov eax, dword ptr [ebp+14]
:0046D571 50                      push eax
:0046D572 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046D575 51                      push ecx
:0046D576 8B550C                  mov edx, dword ptr [ebp+0C]
:0046D579 52                      push edx
:0046D57A 8B4508                  mov eax, dword ptr [ebp+08]
:0046D57D 50                      push eax
:0046D57E E84EF9FFFF              call 0046CED1
:0046D583 83C410                  add esp, 00000010
:0046D586 E9F9000000              jmp 0046D684

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D56C(U)
|
:0046D58B E9EF000000              jmp 0046D67F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D4E8(C)
|
:0046D590 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046D593 81E1FFFF0000            and ecx, 0000FFFF
:0046D599 894DE4                  mov dword ptr [ebp-1C], ecx
:0046D59C 817DE409040000          cmp dword ptr [ebp-1C], 00000409
:0046D5A3 7F1E                    jg 0046D5C3
:0046D5A5 817DE409040000          cmp dword ptr [ebp-1C], 00000409
:0046D5AC 0F8487000000            je 0046D639
:0046D5B2 837DE401                cmp dword ptr [ebp-1C], 00000001
:0046D5B6 7448                    je 0046D600
:0046D5B8 837DE402                cmp dword ptr [ebp-1C], 00000002
:0046D5BC 7420                    je 0046D5DE
:0046D5BE E9B6000000              jmp 0046D679

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D5A3(C)
|
:0046D5C3 817DE413040000          cmp dword ptr [ebp-1C], 00000413
:0046D5CA 0F848A000000            je 0046D65A
:0046D5D0 817DE4A9040000          cmp dword ptr [ebp-1C], 000004A9
:0046D5D7 7451                    je 0046D62A
:0046D5D9 E99B000000              jmp 0046D679

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D5BC(C)
|
:0046D5DE 6A01                    push 00000001
:0046D5E0 8B5508                  mov edx, dword ptr [ebp+08]
:0046D5E3 52                      push edx

* Reference To: USER32.EndDialog, Ord:00B4h
                                  |
:0046D5E4 FF15D8D54B00            Call dword ptr [004BD5D8]
:0046D5EA B958494B00              mov ecx, 004B4958
:0046D5EF E86EF5FDFF              call 0044CB62
:0046D5F4 C705A04E4B0000000000    mov dword ptr [004B4EA0], 00000000
:0046D5FE EB79                    jmp 0046D679

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D5B6(C)
|
:0046D600 6A00                    push 00000000
:0046D602 6A00                    push 00000000
:0046D604 6832100000              push 00001032
:0046D609 8B45FC                  mov eax, dword ptr [ebp-04]
:0046D60C 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046D60D FF1504D64B00            Call dword ptr [004BD604]
:0046D613 8945F0                  mov dword ptr [ebp-10], eax
:0046D616 837DF001                cmp dword ptr [ebp-10], 00000001
:0046D61A 750C                    jne 0046D628
:0046D61C 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D61F 51                      push ecx
:0046D620 E8F3F6FFFF              call 0046CD18
:0046D625 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D61A(C)
|
:0046D628 EB4F                    jmp 0046D679

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D5D7(C)
|
:0046D62A 6806090000              push 00000906
:0046D62F E897C4FFFF              call 00469ACB
:0046D634 83C404                  add esp, 00000004
:0046D637 EB40                    jmp 0046D679

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D5AC(C)
|
:0046D639 6A01                    push 00000001
:0046D63B E8D0F2FFFF              call 0046C910
:0046D640 83C404                  add esp, 00000004
:0046D643 8945F8                  mov dword ptr [ebp-08], eax
:0046D646 6A00                    push 00000000
:0046D648 8B55F8                  mov edx, dword ptr [ebp-08]
:0046D64B 52                      push edx
:0046D64C 8B4508                  mov eax, dword ptr [ebp+08]
:0046D64F 50                      push eax
:0046D650 E8C2FCFFFF              call 0046D317
:0046D655 83C40C                  add esp, 0000000C
:0046D658 EB1F                    jmp 0046D679

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D5CA(C)
|
:0046D65A 6A00                    push 00000000
:0046D65C E8AFF2FFFF              call 0046C910
:0046D661 83C404                  add esp, 00000004
:0046D664 8945F8                  mov dword ptr [ebp-08], eax
:0046D667 6A00                    push 00000000
:0046D669 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D66C 51                      push ecx
:0046D66D 8B5508                  mov edx, dword ptr [ebp+08]
:0046D670 52                      push edx
:0046D671 E8A1FCFFFF              call 0046D317
:0046D676 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D5BE(U), :0046D5D9(U), :0046D5FE(U), :0046D628(U), :0046D637(U)
|:0046D658(U)
|
:0046D679 EB04                    jmp 0046D67F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D4EE(U)
|
:0046D67B 33C0                    xor eax, eax
:0046D67D EB05                    jmp 0046D684

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D52C(U), :0046D58B(U), :0046D679(U)
|
:0046D67F B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D586(U), :0046D67D(U)
|
:0046D684 8BE5                    mov esp, ebp
:0046D686 5D                      pop ebp
:0046D687 C21000                  ret 0010



* Referenced by a CALL at Addresses:
|:0046143E   , :00469BDC   
|
:0046D68A 55                      push ebp
:0046D68B 8BEC                    mov ebp, esp
:0046D68D 6A00                    push 00000000
:0046D68F 6880574600              push 00465780
:0046D694 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D697 50                      push eax
:0046D698 6826010000              push 00000126
:0046D69D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046D6A0 51                      push ecx

* Reference To: USER32.DialogBoxParamA, Ord:008Eh
                                  |
:0046D6A1 FF15DCD64B00            Call dword ptr [004BD6DC]
:0046D6A7 5D                      pop ebp
:0046D6A8 C3                      ret



* Referenced by a CALL at Address:
|:0046D82D   
|
:0046D6A9 55                      push ebp
:0046D6AA 8BEC                    mov ebp, esp
:0046D6AC B8FC160000              mov eax, 000016FC
:0046D6B1 E86A1E0000              call 0046F520
:0046D6B6 8D8578E9FFFF            lea eax, dword ptr [ebp+FFFFE978]
:0046D6BC 898508E9FFFF            mov dword ptr [ebp+FFFFE908], eax
:0046D6C2 C7850CE9FFFF00000000    mov dword ptr [ebp+FFFFE90C], 00000000
:0046D6CC EB0F                    jmp 0046D6DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D74B(U)
|
:0046D6CE 8B8D0CE9FFFF            mov ecx, dword ptr [ebp+FFFFE90C]
:0046D6D4 83C101                  add ecx, 00000001
:0046D6D7 898D0CE9FFFF            mov dword ptr [ebp+FFFFE90C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D6CC(U)
|
:0046D6DD 83BD0CE9FFFF6D          cmp dword ptr [ebp+FFFFE90C], 0000006D
:0046D6E4 7367                    jnb 0046D74D
:0046D6E6 8B950CE9FFFF            mov edx, dword ptr [ebp+FFFFE90C]
:0046D6EC 81C213020000            add edx, 00000213
:0046D6F2 52                      push edx
:0046D6F3 8D8510E9FFFF            lea eax, dword ptr [ebp+FFFFE910]
:0046D6F9 50                      push eax
:0046D6FA E8855EF9FF              call 00403584
:0046D6FF 83C408                  add esp, 00000008
:0046D702 6A28                    push 00000028
:0046D704 8B8D0CE9FFFF            mov ecx, dword ptr [ebp+FFFFE90C]
:0046D70A 6BC928                  imul ecx, 00000028
:0046D70D 8D940D88EBFFFF          lea edx, dword ptr [ebp+ecx-00001478]
:0046D714 52                      push edx
:0046D715 8D8510E9FFFF            lea eax, dword ptr [ebp+FFFFE910]
:0046D71B 50                      push eax
:0046D71C E89FAE0000              call 004785C0
:0046D721 83C40C                  add esp, 0000000C
:0046D724 8B8D0CE9FFFF            mov ecx, dword ptr [ebp+FFFFE90C]
:0046D72A 6BC928                  imul ecx, 00000028
:0046D72D 8D940D88EBFFFF          lea edx, dword ptr [ebp+ecx-00001478]
:0046D734 8B8508E9FFFF            mov eax, dword ptr [ebp+FFFFE908]
:0046D73A 8910                    mov dword ptr [eax], edx
:0046D73C 8B8D08E9FFFF            mov ecx, dword ptr [ebp+FFFFE908]
:0046D742 83C104                  add ecx, 00000004
:0046D745 898D08E9FFFF            mov dword ptr [ebp+FFFFE908], ecx
:0046D74B EB81                    jmp 0046D6CE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D6E4(C)
|
:0046D74D 8B9508E9FFFF            mov edx, dword ptr [ebp+FFFFE908]
:0046D753 C70200000000            mov dword ptr [edx], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D7AF(U)
|
:0046D759 6A00                    push 00000000
:0046D75B 6A0C                    push 0000000C
:0046D75D 6A00                    push 00000000

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:0046D75F 68A0000000              push 000000A0
:0046D764 6A12                    push 00000012
:0046D766 8D8578E9FFFF            lea eax, dword ptr [ebp+FFFFE978]
:0046D76C 50                      push eax

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:003C, ""
                                  |
:0046D76D 6A3C                    push 0000003C

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0046D76F 68C8000000              push 000000C8
:0046D774 E8672CFCFF              call 004303E0
:0046D779 83C420                  add esp, 00000020
:0046D77C 888504E9FFFF            mov byte ptr [ebp+FFFFE904], al
:0046D782 8B8D04E9FFFF            mov ecx, dword ptr [ebp+FFFFE904]
:0046D788 81E1FF000000            and ecx, 000000FF
:0046D78E 81F9FF000000            cmp ecx, 000000FF
:0046D794 7502                    jne 0046D798
:0046D796 EB19                    jmp 0046D7B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D794(C)
|
:0046D798 8B9504E9FFFF            mov edx, dword ptr [ebp+FFFFE904]
:0046D79E 81E2FF000000            and edx, 000000FF
:0046D7A4 52                      push edx
:0046D7A5 B9F8544B00              mov ecx, 004B54F8
:0046D7AA E86BBDFFFF              call 0046951A
:0046D7AF EBA8                    jmp 0046D759

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D796(U)
|
:0046D7B1 8BE5                    mov esp, ebp
:0046D7B3 5D                      pop ebp
:0046D7B4 C3                      ret



* Referenced by a CALL at Address:
|:0040FC1C   
|
:0046D7B5 55                      push ebp
:0046D7B6 8BEC                    mov ebp, esp
:0046D7B8 83EC08                  sub esp, 00000008
:0046D7BB E8272AFAFF              call 004101E7
:0046D7C0 E82129FAFF              call 004100E6
:0046D7C5 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046D7C7 6A08                    push 00000008
:0046D7C9 6A00                    push 00000000
:0046D7CB 6880000000              push 00000080

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046D7D0 6A04                    push 00000004

* Possible Indirect StringData Ref from Data Obj ->""
                                  |
:0046D7D2 6808214800              push 00482108
:0046D7D7 6A64                    push 00000064
:0046D7D9 682C010000              push 0000012C
:0046D7DE E8FD2BFCFF              call 004303E0
:0046D7E3 83C420                  add esp, 00000020
:0046D7E6 8845FC                  mov byte ptr [ebp-04], al
:0046D7E9 8B45FC                  mov eax, dword ptr [ebp-04]
:0046D7EC 25FF000000              and eax, 000000FF
:0046D7F1 8945F8                  mov dword ptr [ebp-08], eax
:0046D7F4 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:0046D7FB 7F21                    jg 0046D81E
:0046D7FD 817DF8FF000000          cmp dword ptr [ebp-08], 000000FF
:0046D804 0F84CE000000            je 0046D8D8
:0046D80A 837DF803                cmp dword ptr [ebp-08], 00000003
:0046D80E 0F87C9000000            ja 0046D8DD
:0046D814 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D817 FF248DE3D84600          jmp dword ptr [4*ecx+0046D8E3]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D7FB(C)
|
:0046D81E E9BA000000              jmp 0046D8DD
:0046D823 B900554B00              mov ecx, 004B5500
:0046D828 E88CBCFFFF              call 004694B9
:0046D82D E877FEFFFF              call 0046D6A9
:0046D832 E9A6000000              jmp 0046D8DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D884(U)
|
:0046D837 6A00                    push 00000000
:0046D839 6A0C                    push 0000000C
:0046D83B 6A00                    push 00000000

* Possible Ref to Menu: DBGMENU, Item: "fh"
                                  |
:0046D83D 68A0000000              push 000000A0
:0046D842 6A0C                    push 0000000C

* Possible Indirect StringData Ref from Data Obj ->"1:D@"
                                  |
:0046D844 6820214800              push 00482120
:0046D849 6A64                    push 00000064

* Possible Reference to Dialog: DialogID_00C8 
                                  |
:0046D84B 68C8000000              push 000000C8
:0046D850 E88B2BFCFF              call 004303E0
:0046D855 83C420                  add esp, 00000020
:0046D858 8845FC                  mov byte ptr [ebp-04], al
:0046D85B 8B55FC                  mov edx, dword ptr [ebp-04]
:0046D85E 81E2FF000000            and edx, 000000FF
:0046D864 81FAFF000000            cmp edx, 000000FF
:0046D86A 7502                    jne 0046D86E
:0046D86C EB18                    jmp 0046D886

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D86A(C)
|
:0046D86E 8B45FC                  mov eax, dword ptr [ebp-04]
:0046D871 25FF000000              and eax, 000000FF
:0046D876 83C002                  add eax, 00000002
:0046D879 50                      push eax
:0046D87A B900554B00              mov ecx, 004B5500
:0046D87F E81ABCFFFF              call 0046949E
:0046D884 EBB1                    jmp 0046D837

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D86C(U)
|
:0046D886 EB55                    jmp 0046D8DD
:0046D888 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046D88A 6A04                    push 00000004
:0046D88C 6A00                    push 00000000
:0046D88E 6880000000              push 00000080

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:0046D893 6A08                    push 00000008

* Possible Indirect StringData Ref from Data Obj ->"ˤ"
                                  |
:0046D895 6858214800              push 00482158
:0046D89A 6A64                    push 00000064
:0046D89C 682C010000              push 0000012C
:0046D8A1 E83A2BFCFF              call 004303E0
:0046D8A6 83C420                  add esp, 00000020
:0046D8A9 8845FC                  mov byte ptr [ebp-04], al
:0046D8AC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D8AF 81E1FF000000            and ecx, 000000FF
:0046D8B5 81F9FF000000            cmp ecx, 000000FF
:0046D8BB 7412                    je 0046D8CF
:0046D8BD 8B55FC                  mov edx, dword ptr [ebp-04]
:0046D8C0 81E2FF000000            and edx, 000000FF
:0046D8C6 52                      push edx
:0046D8C7 E8C342FCFF              call 00431B8F
:0046D8CC 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D8BB(C)
|
:0046D8CF EB0C                    jmp 0046D8DD
:0046D8D1 E87B29FAFF              call 00410251
:0046D8D6 EB05                    jmp 0046D8DD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D804(C)
|
:0046D8D8 E80A29FAFF              call 004101E7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046D80E(C), :0046D81E(U), :0046D832(U), :0046D886(U), :0046D8CF(U)
|:0046D8D6(U)
|
:0046D8DD 33C0                    xor eax, eax
:0046D8DF 8BE5                    mov esp, ebp
:0046D8E1 5D                      pop ebp
:0046D8E2 C3                      ret



:0046D8E3 23D84600                DWORD 0046D823
:0046D8E7 37D84600                DWORD 0046D837
:0046D8EB 88D84600                DWORD 0046D888
:0046D8EF D1D84600                DWORD 0046D8D1


:0046D8F3 CC                      int 03
:0046D8F4 CC                      int 03
:0046D8F5 CC                      int 03
:0046D8F6 CC                      int 03
:0046D8F7 CC                      int 03
:0046D8F8 CC                      int 03
:0046D8F9 CC                      int 03
:0046D8FA CC                      int 03
:0046D8FB CC                      int 03
:0046D8FC CC                      int 03
:0046D8FD CC                      int 03
:0046D8FE CC                      int 03
:0046D8FF CC                      int 03

* Referenced by a CALL at Address:
|:0046A3C8   
|
:0046D900 55                      push ebp
:0046D901 8BEC                    mov ebp, esp
:0046D903 83EC0C                  sub esp, 0000000C
:0046D906 8B4508                  mov eax, dword ptr [ebp+08]
:0046D909 99                      cdq
:0046D90A B930000000              mov ecx, 00000030
:0046D90F F7F9                    idiv ecx
:0046D911 6BC030                  imul eax, 00000030
:0046D914 8945F8                  mov dword ptr [ebp-08], eax
:0046D917 8B450C                  mov eax, dword ptr [ebp+0C]
:0046D91A 83E828                  sub eax, 00000028
:0046D91D 99                      cdq
:0046D91E B930000000              mov ecx, 00000030
:0046D923 F7F9                    idiv ecx
:0046D925 6BC030                  imul eax, 00000030
:0046D928 83C028                  add eax, 00000028
:0046D92B 8945FC                  mov dword ptr [ebp-04], eax
:0046D92E 8B55F8                  mov edx, dword ptr [ebp-08]
:0046D931 52                      push edx
:0046D932 B958494B00              mov ecx, 004B4958
:0046D937 E80211FEFF              call 0044EA3E
:0046D93C 8B45F8                  mov eax, dword ptr [ebp-08]
:0046D93F 50                      push eax
:0046D940 B958494B00              mov ecx, 004B4958
:0046D945 E8A610FEFF              call 0044E9F0
:0046D94A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046D94D 51                      push ecx
:0046D94E B958494B00              mov ecx, 004B4958
:0046D953 E83411FEFF              call 0044EA8C
:0046D958 8B55FC                  mov edx, dword ptr [ebp-04]
:0046D95B 52                      push edx
:0046D95C B958494B00              mov ecx, 004B4958
:0046D961 E8FF10FEFF              call 0044EA65
:0046D966 8B45FC                  mov eax, dword ptr [ebp-04]
:0046D969 50                      push eax
:0046D96A B958494B00              mov ecx, 004B4958
:0046D96F E8A310FEFF              call 0044EA17
:0046D974 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046D977 51                      push ecx
:0046D978 B958494B00              mov ecx, 004B4958
:0046D97D E83111FEFF              call 0044EAB3
:0046D982 6A00                    push 00000000
:0046D984 B958494B00              mov ecx, 004B4958
:0046D989 E8780FFEFF              call 0044E906
:0046D98E 6A00                    push 00000000
:0046D990 B958494B00              mov ecx, 004B4958
:0046D995 E8930FFEFF              call 0044E92D
:0046D99A 6A00                    push 00000000
:0046D99C B958494B00              mov ecx, 004B4958
:0046D9A1 E8EC0EFEFF              call 0044E892
:0046D9A6 8B15941E4800            mov edx, dword ptr [00481E94]
:0046D9AC 52                      push edx
:0046D9AD B958494B00              mov ecx, 004B4958
:0046D9B2 E89D0FFEFF              call 0044E954
:0046D9B7 A1981E4800              mov eax, dword ptr [00481E98]
:0046D9BC 3B450C                  cmp eax, dword ptr [ebp+0C]
:0046D9BF 7D0B                    jge 0046D9CC
:0046D9C1 8B0D981E4800            mov ecx, dword ptr [00481E98]
:0046D9C7 894DF4                  mov dword ptr [ebp-0C], ecx
:0046D9CA EB06                    jmp 0046D9D2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D9BF(C)
|
:0046D9CC 8B550C                  mov edx, dword ptr [ebp+0C]
:0046D9CF 8955F4                  mov dword ptr [ebp-0C], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D9CA(U)
|
:0046D9D2 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046D9D5 83E828                  sub eax, 00000028
:0046D9D8 50                      push eax
:0046D9D9 B958494B00              mov ecx, 004B4958
:0046D9DE E8980FFEFF              call 0044E97B
:0046D9E3 8BE5                    mov esp, ebp
:0046D9E5 5D                      pop ebp
:0046D9E6 C3                      ret



* Referenced by a CALL at Addresses:
|:0040EB8A   , :00411999   , :004119AF   , :0042EDD8   , :0042EEA5   
|:0042F201   , :0042F395   , :0042F45B   
|
:0046D9E7 55                      push ebp
:0046D9E8 8BEC                    mov ebp, esp
:0046D9EA 83EC2C                  sub esp, 0000002C
:0046D9ED 56                      push esi
:0046D9EE A1B0554B00              mov eax, dword ptr [004B55B0]
:0046D9F3 50                      push eax

* Reference To: USER32.IsZoomed, Ord:016Bh
                                  |
:0046D9F4 FF15B4D54B00            Call dword ptr [004BD5B4]
:0046D9FA 85C0                    test eax, eax
:0046D9FC 7419                    je 0046DA17
:0046D9FE 6A00                    push 00000000
:0046DA00 6820F10000              push 0000F120
:0046DA05 6812010000              push 00000112
:0046DA0A 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0046DA10 51                      push ecx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046DA11 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046D9FC(C)
|
:0046DA17 6A00                    push 00000000
:0046DA19 B958494B00              mov ecx, 004B4958
:0046DA1E E8950EFEFF              call 0044E8B8
:0046DA23 6A00                    push 00000000
:0046DA25 B958494B00              mov ecx, 004B4958
:0046DA2A E8B00EFEFF              call 0044E8DF
:0046DA2F B958494B00              mov ecx, 004B4958
:0046DA34 E8F40FFEFF              call 0044EA2D
:0046DA39 3905941E4800            cmp dword ptr [00481E94], eax
:0046DA3F 7D0B                    jge 0046DA4C
:0046DA41 8B15941E4800            mov edx, dword ptr [00481E94]
:0046DA47 8955E0                  mov dword ptr [ebp-20], edx
:0046DA4A EB0D                    jmp 0046DA59

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DA3F(C)
|
:0046DA4C B958494B00              mov ecx, 004B4958
:0046DA51 E8D70FFEFF              call 0044EA2D
:0046DA56 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DA4A(U)
|
:0046DA59 8B45E0                  mov eax, dword ptr [ebp-20]
:0046DA5C 50                      push eax
:0046DA5D B958494B00              mov ecx, 004B4958
:0046DA62 E8890FFEFF              call 0044E9F0
:0046DA67 B958494B00              mov ecx, 004B4958
:0046DA6C E8E30FFEFF              call 0044EA54
:0046DA71 3905981E4800            cmp dword ptr [00481E98], eax
:0046DA77 7D0B                    jge 0046DA84
:0046DA79 8B0D981E4800            mov ecx, dword ptr [00481E98]
:0046DA7F 894DDC                  mov dword ptr [ebp-24], ecx
:0046DA82 EB0D                    jmp 0046DA91

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DA77(C)
|
:0046DA84 B958494B00              mov ecx, 004B4958
:0046DA89 E8C60FFEFF              call 0044EA54
:0046DA8E 8945DC                  mov dword ptr [ebp-24], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DA82(U)
|
:0046DA91 8B55DC                  mov edx, dword ptr [ebp-24]
:0046DA94 52                      push edx
:0046DA95 B958494B00              mov ecx, 004B4958
:0046DA9A E8780FFEFF              call 0044EA17
:0046DA9F A1941E4800              mov eax, dword ptr [00481E94]
:0046DAA4 50                      push eax
:0046DAA5 B958494B00              mov ecx, 004B4958
:0046DAAA E8DD0FFEFF              call 0044EA8C
:0046DAAF 8B0D981E4800            mov ecx, dword ptr [00481E98]
:0046DAB5 51                      push ecx
:0046DAB6 B958494B00              mov ecx, 004B4958
:0046DABB E8F30FFEFF              call 0044EAB3
:0046DAC0 8B15941E4800            mov edx, dword ptr [00481E94]
:0046DAC6 52                      push edx
:0046DAC7 B958494B00              mov ecx, 004B4958
:0046DACC E8830EFEFF              call 0044E954
:0046DAD1 A1981E4800              mov eax, dword ptr [00481E98]
:0046DAD6 83E828                  sub eax, 00000028
:0046DAD9 50                      push eax
:0046DADA B958494B00              mov ecx, 004B4958
:0046DADF E8970EFEFF              call 0044E97B
:0046DAE4 6A00                    push 00000000
:0046DAE6 B958494B00              mov ecx, 004B4958
:0046DAEB E8A20DFEFF              call 0044E892
:0046DAF0 6AF0                    push FFFFFFF0
:0046DAF2 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0046DAF8 51                      push ecx

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:0046DAF9 FF15B0D64B00            Call dword ptr [004BD6B0]
:0046DAFF 8945E4                  mov dword ptr [ebp-1C], eax
:0046DB02 8B55E4                  mov edx, dword ptr [ebp-1C]
:0046DB05 81CA00000200            or edx, 00020000
:0046DB0B 81E2FFFFFBFF            and edx, FFFBFFFF
:0046DB11 81E2FFFFFEFF            and edx, FFFEFFFF
:0046DB17 81E2FFFFEFFF            and edx, FFEFFFFF
:0046DB1D 81E2FFFFDFFF            and edx, FFDFFFFF
:0046DB23 8955E4                  mov dword ptr [ebp-1C], edx
:0046DB26 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046DB29 50                      push eax
:0046DB2A 6AF0                    push FFFFFFF0
:0046DB2C 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0046DB32 51                      push ecx

* Reference To: USER32.SetWindowLongA, Ord:021Bh
                                  |
:0046DB33 FF15B4D64B00            Call dword ptr [004BD6B4]
:0046DB39 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046DB3B 6A03                    push 00000003
:0046DB3D 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0046DB43 52                      push edx

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:0046DB44 FF1538D64B00            Call dword ptr [004BD638]
:0046DB4A C745F000000000          mov [ebp-10], 00000000
:0046DB51 C745F400000000          mov [ebp-0C], 00000000
:0046DB58 B958494B00              mov ecx, 004B4958
:0046DB5D E87D0EFEFF              call 0044E9DF
:0046DB62 83E801                  sub eax, 00000001
:0046DB65 8945F8                  mov dword ptr [ebp-08], eax
:0046DB68 B958494B00              mov ecx, 004B4958
:0046DB6D E8940EFEFF              call 0044EA06
:0046DB72 83E829                  sub eax, 00000029
:0046DB75 8945FC                  mov dword ptr [ebp-04], eax
:0046DB78 6A00                    push 00000000
:0046DB7A 6800003F02              push 023F0000
:0046DB7F 8D45F0                  lea eax, dword ptr [ebp-10]
:0046DB82 50                      push eax

* Reference To: USER32.AdjustWindowRect, Ord:0001h
                                  |
:0046DB83 FF154CD64B00            Call dword ptr [004BD64C]
:0046DB89 B958494B00              mov ecx, 004B4958
:0046DB8E E8E80EFEFF              call 0044EA7B
:0046DB93 8BF0                    mov esi, eax
:0046DB95 B958494B00              mov ecx, 004B4958
:0046DB9A E8A40DFEFF              call 0044E943
:0046DB9F 99                      cdq
:0046DBA0 83E20F                  and edx, 0000000F
:0046DBA3 03C2                    add eax, edx
:0046DBA5 C1F804                  sar eax, 04
:0046DBA8 C1E004                  shl eax, 04
:0046DBAB 2BF0                    sub esi, eax
:0046DBAD 85F6                    test esi, esi
:0046DBAF 7D09                    jge 0046DBBA
:0046DBB1 C745D800000000          mov [ebp-28], 00000000
:0046DBB8 EB27                    jmp 0046DBE1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DBAF(C)
|
:0046DBBA B958494B00              mov ecx, 004B4958
:0046DBBF E8B70EFEFF              call 0044EA7B
:0046DBC4 8BF0                    mov esi, eax
:0046DBC6 B958494B00              mov ecx, 004B4958
:0046DBCB E8730DFEFF              call 0044E943
:0046DBD0 99                      cdq
:0046DBD1 83E20F                  and edx, 0000000F
:0046DBD4 03C2                    add eax, edx
:0046DBD6 C1F804                  sar eax, 04
:0046DBD9 C1E004                  shl eax, 04
:0046DBDC 2BF0                    sub esi, eax
:0046DBDE 8975D8                  mov dword ptr [ebp-28], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DBB8(U)
|
:0046DBE1 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0046DBE4 894DEC                  mov dword ptr [ebp-14], ecx
:0046DBE7 B958494B00              mov ecx, 004B4958
:0046DBEC E8B10EFEFF              call 0044EAA2
:0046DBF1 8BF0                    mov esi, eax
:0046DBF3 B958494B00              mov ecx, 004B4958
:0046DBF8 E86D0DFEFF              call 0044E96A
:0046DBFD 83E828                  sub eax, 00000028
:0046DC00 99                      cdq
:0046DC01 83E20F                  and edx, 0000000F
:0046DC04 03C2                    add eax, edx
:0046DC06 C1F804                  sar eax, 04
:0046DC09 C1E004                  shl eax, 04
:0046DC0C 2BF0                    sub esi, eax
:0046DC0E 85F6                    test esi, esi
:0046DC10 7D09                    jge 0046DC1B
:0046DC12 C745D400000000          mov [ebp-2C], 00000000
:0046DC19 EB2A                    jmp 0046DC45

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DC10(C)
|
:0046DC1B B958494B00              mov ecx, 004B4958
:0046DC20 E87D0EFEFF              call 0044EAA2
:0046DC25 8BF0                    mov esi, eax
:0046DC27 B958494B00              mov ecx, 004B4958
:0046DC2C E8390DFEFF              call 0044E96A
:0046DC31 83E828                  sub eax, 00000028
:0046DC34 99                      cdq
:0046DC35 83E20F                  and edx, 0000000F
:0046DC38 03C2                    add eax, edx
:0046DC3A C1F804                  sar eax, 04
:0046DC3D C1E004                  shl eax, 04
:0046DC40 2BF0                    sub esi, eax
:0046DC42 8975D4                  mov dword ptr [ebp-2C], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DC19(U)
|
:0046DC45 8B55D4                  mov edx, dword ptr [ebp-2C]
:0046DC48 8955E8                  mov dword ptr [ebp-18], edx
:0046DC4B 8B45EC                  mov eax, dword ptr [ebp-14]
:0046DC4E 50                      push eax
:0046DC4F B958494B00              mov ecx, 004B4958
:0046DC54 E8AD0CFEFF              call 0044E906
:0046DC59 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046DC5C 51                      push ecx
:0046DC5D B958494B00              mov ecx, 004B4958
:0046DC62 E8C60CFEFF              call 0044E92D
:0046DC67 6A00                    push 00000000
:0046DC69 E8A1790000              call 0047560F
:0046DC6E 83C404                  add esp, 00000004
:0046DC71 6A00                    push 00000000
:0046DC73 8B55FC                  mov edx, dword ptr [ebp-04]
:0046DC76 2B55F4                  sub edx, dword ptr [ebp-0C]
:0046DC79 83C201                  add edx, 00000001
:0046DC7C 52                      push edx
:0046DC7D 8B45F8                  mov eax, dword ptr [ebp-08]
:0046DC80 2B45F0                  sub eax, dword ptr [ebp-10]
:0046DC83 83C001                  add eax, 00000001
:0046DC86 50                      push eax
:0046DC87 E888990000              call 00477614
:0046DC8C 83C40C                  add esp, 0000000C
:0046DC8F B958494B00              mov ecx, 004B4958
:0046DC94 E8D10CFEFF              call 0044E96A
:0046DC99 50                      push eax
:0046DC9A B958494B00              mov ecx, 004B4958
:0046DC9F E89F0CFEFF              call 0044E943
:0046DCA4 50                      push eax
:0046DCA5 6A00                    push 00000000
:0046DCA7 6A00                    push 00000000
:0046DCA9 E8FF800000              call 00475DAD
:0046DCAE 83C410                  add esp, 00000010
:0046DCB1 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046DCB4 2B4DF0                  sub ecx, dword ptr [ebp-10]
:0046DCB7 83C101                  add ecx, 00000001
:0046DCBA 8B55FC                  mov edx, dword ptr [ebp-04]
:0046DCBD 2B55F4                  sub edx, dword ptr [ebp-0C]
:0046DCC0 83C201                  add edx, 00000001
:0046DCC3 C1E208                  shl edx, 08
:0046DCC6 0BCA                    or ecx, edx
:0046DCC8 51                      push ecx
:0046DCC9 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046DCCB 6A05                    push 00000005
:0046DCCD A1C0554B00              mov eax, dword ptr [004B55C0]
:0046DCD2 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046DCD3 FF1504D64B00            Call dword ptr [004BD604]

* Possible StringData Ref from Data Obj ->"^ǶǨtC QN"
                                  |
:0046DCD9 68701E4800              push 00481E70
:0046DCDE 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0046DCE4 51                      push ecx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046DCE5 FF1514D64B00            Call dword ptr [004BD614]
:0046DCEB 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0046DCF1 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0046DCF2 FF15FCD54B00            Call dword ptr [004BD5FC]
:0046DCF8 5E                      pop esi
:0046DCF9 8BE5                    mov esp, ebp
:0046DCFB 5D                      pop ebp
:0046DCFC C3                      ret



* Referenced by a CALL at Addresses:
|:00432225   , :004329C5   , :0043378A   , :004339E2   , :004390E7   
|:00439246   , :00439A36   , :00439B94   , :0043AD84   , :0043B309   
|:004441F0   , :0044471E   , :0044AE5D   , :0044E272   , :0045EB95   
|:0045EBB8   
|
:0046DCFD 55                      push ebp
:0046DCFE 8BEC                    mov ebp, esp
:0046DD00 83EC08                  sub esp, 00000008
:0046DD03 6AF0                    push FFFFFFF0
:0046DD05 A1B0554B00              mov eax, dword ptr [004B55B0]
:0046DD0A 50                      push eax

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:0046DD0B FF15B0D64B00            Call dword ptr [004BD6B0]
:0046DD11 8945F8                  mov dword ptr [ebp-08], eax
:0046DD14 837D0800                cmp dword ptr [ebp+08], 00000000
:0046DD18 7426                    je 0046DD40
:0046DD1A 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046DD1D 81C900000400            or ecx, 00040000
:0046DD23 81C900000100            or ecx, 00010000
:0046DD29 81C900000200            or ecx, 00020000
:0046DD2F 81C900001000            or ecx, 00100000
:0046DD35 81C900002000            or ecx, 00200000
:0046DD3B 894DF8                  mov dword ptr [ebp-08], ecx
:0046DD3E EB1E                    jmp 0046DD5E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DD18(C)
|
:0046DD40 8B55F8                  mov edx, dword ptr [ebp-08]
:0046DD43 81E2FFFFFEFF            and edx, FFFEFFFF
:0046DD49 81E2FFFFFDFF            and edx, FFFDFFFF
:0046DD4F 81CA00001000            or edx, 00100000
:0046DD55 81CA00002000            or edx, 00200000
:0046DD5B 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DD3E(U)
|
:0046DD5E 8B45F8                  mov eax, dword ptr [ebp-08]
:0046DD61 50                      push eax
:0046DD62 6AF0                    push FFFFFFF0
:0046DD64 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0046DD6A 51                      push ecx

* Reference To: USER32.SetWindowLongA, Ord:021Bh
                                  |
:0046DD6B FF15B4D64B00            Call dword ptr [004BD6B4]
:0046DD71 8945FC                  mov dword ptr [ebp-04], eax
:0046DD74 837D0C00                cmp dword ptr [ebp+0C], 00000000
:0046DD78 7411                    je 0046DD8B
:0046DD7A 6A01                    push 00000001

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046DD7C 6A03                    push 00000003
:0046DD7E 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0046DD84 52                      push edx

* Reference To: USER32.ShowScrollBar, Ord:022Bh
                                  |
:0046DD85 FF1538D64B00            Call dword ptr [004BD638]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DD78(C)
|
:0046DD8B A1B0554B00              mov eax, dword ptr [004B55B0]
:0046DD90 50                      push eax

* Reference To: USER32.IsIconic, Ord:0164h
                                  |
:0046DD91 FF1508D74B00            Call dword ptr [004BD708]
:0046DD97 85C0                    test eax, eax
:0046DD99 7512                    jne 0046DDAD
:0046DD9B 68A0624B00              push 004B62A0
:0046DDA0 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0046DDA6 51                      push ecx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0046DDA7 FF15A4D64B00            Call dword ptr [004BD6A4]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DD99(C)
|

* Possible StringData Ref from Data Obj ->"^ǶǨtC QN"
                                  |
:0046DDAD 68701E4800              push 00481E70
:0046DDB2 8B15B0554B00            mov edx, dword ptr [004B55B0]
:0046DDB8 52                      push edx

* Reference To: USER32.SetWindowTextA, Ord:0221h
                                  |
:0046DDB9 FF1514D64B00            Call dword ptr [004BD614]
:0046DDBF A1B0554B00              mov eax, dword ptr [004B55B0]
:0046DDC4 50                      push eax

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0046DDC5 FF15FCD54B00            Call dword ptr [004BD5FC]
:0046DDCB 8BE5                    mov esp, ebp
:0046DDCD 5D                      pop ebp
:0046DDCE C3                      ret



* Referenced by a CALL at Address:
|:00469E48   
|
:0046DDCF 55                      push ebp
:0046DDD0 8BEC                    mov ebp, esp
:0046DDD2 E87931FAFF              call 00410F50
:0046DDD7 B900554B00              mov ecx, 004B5500
:0046DDDC E8BAB5FFFF              call 0046939B
:0046DDE1 B9F8544B00              mov ecx, 004B54F8
:0046DDE6 E89AB7FFFF              call 00469585
:0046DDEB B958494B00              mov ecx, 004B4958
:0046DDF0 E84E0BFEFF              call 0044E943
:0046DDF5 50                      push eax
:0046DDF6 B958494B00              mov ecx, 004B4958
:0046DDFB E8A20BFEFF              call 0044E9A2
:0046DE00 B958494B00              mov ecx, 004B4958
:0046DE05 E8600BFEFF              call 0044E96A
:0046DE0A 50                      push eax
:0046DE0B B958494B00              mov ecx, 004B4958
:0046DE10 E8B40BFEFF              call 0044E9C9
:0046DE15 5D                      pop ebp
:0046DE16 C3                      ret



* Referenced by a CALL at Address:
|:00469E7F   
|
:0046DE17 55                      push ebp
:0046DE18 8BEC                    mov ebp, esp
:0046DE1A B958494B00              mov ecx, 004B4958
:0046DE1F E81F0BFEFF              call 0044E943
:0046DE24 50                      push eax
:0046DE25 B958494B00              mov ecx, 004B4958
:0046DE2A E8730BFEFF              call 0044E9A2
:0046DE2F B958494B00              mov ecx, 004B4958
:0046DE34 E8310BFEFF              call 0044E96A
:0046DE39 50                      push eax
:0046DE3A B958494B00              mov ecx, 004B4958
:0046DE3F E8850BFEFF              call 0044E9C9
:0046DE44 5D                      pop ebp
:0046DE45 C3                      ret



* Referenced by a CALL at Address:
|:00469E8D   
|
:0046DE46 55                      push ebp
:0046DE47 8BEC                    mov ebp, esp
:0046DE49 B958494B00              mov ecx, 004B4958
:0046DE4E E83E0BFEFF              call 0044E991
:0046DE53 50                      push eax
:0046DE54 B958494B00              mov ecx, 004B4958
:0046DE59 E8F60AFEFF              call 0044E954
:0046DE5E B958494B00              mov ecx, 004B4958
:0046DE63 E8500BFEFF              call 0044E9B8
:0046DE68 50                      push eax
:0046DE69 B958494B00              mov ecx, 004B4958
:0046DE6E E8080BFEFF              call 0044E97B
:0046DE73 B9F8544B00              mov ecx, 004B54F8
:0046DE78 E826B7FFFF              call 004695A3
:0046DE7D B900554B00              mov ecx, 004B5500
:0046DE82 E82FB5FFFF              call 004693B6
:0046DE87 E8D330FAFF              call 00410F5F
:0046DE8C 5D                      pop ebp
:0046DE8D C3                      ret



* Referenced by a CALL at Address:
|:00469F8F   
|
:0046DE8E 55                      push ebp
:0046DE8F 8BEC                    mov ebp, esp
:0046DE91 83EC20                  sub esp, 00000020
:0046DE94 56                      push esi
:0046DE95 C745F000000000          mov [ebp-10], 00000000
:0046DE9C C745F400000000          mov [ebp-0C], 00000000
:0046DEA3 B958494B00              mov ecx, 004B4958
:0046DEA8 E8D509FEFF              call 0044E882
:0046DEAD 85C0                    test eax, eax
:0046DEAF 0F8598000000            jne 0046DF4D
:0046DEB5 B958494B00              mov ecx, 004B4958
:0046DEBA E8840AFEFF              call 0044E943
:0046DEBF 83E801                  sub eax, 00000001
:0046DEC2 8945F8                  mov dword ptr [ebp-08], eax
:0046DEC5 B958494B00              mov ecx, 004B4958
:0046DECA E89B0AFEFF              call 0044E96A
:0046DECF 83E801                  sub eax, 00000001
:0046DED2 8945FC                  mov dword ptr [ebp-04], eax
:0046DED5 6A01                    push 00000001
:0046DED7 6AF0                    push FFFFFFF0
:0046DED9 8B4508                  mov eax, dword ptr [ebp+08]
:0046DEDC 50                      push eax

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:0046DEDD FF15B0D64B00            Call dword ptr [004BD6B0]
:0046DEE3 50                      push eax
:0046DEE4 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0046DEE7 51                      push ecx

* Reference To: USER32.AdjustWindowRect, Ord:0001h
                                  |
:0046DEE8 FF154CD64B00            Call dword ptr [004BD64C]
:0046DEEE 8B550C                  mov edx, dword ptr [ebp+0C]
:0046DEF1 8955EC                  mov dword ptr [ebp-14], edx
:0046DEF4 8B45F8                  mov eax, dword ptr [ebp-08]
:0046DEF7 2B45F0                  sub eax, dword ptr [ebp-10]
:0046DEFA 83C001                  add eax, 00000001
:0046DEFD 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046DF00 894118                  mov dword ptr [ecx+18], eax
:0046DF03 8B55FC                  mov edx, dword ptr [ebp-04]
:0046DF06 2B55F4                  sub edx, dword ptr [ebp-0C]
:0046DF09 83C201                  add edx, 00000001
:0046DF0C 8B45EC                  mov eax, dword ptr [ebp-14]
:0046DF0F 89501C                  mov dword ptr [eax+1C], edx
:0046DF12 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046DF15 2B4DF0                  sub ecx, dword ptr [ebp-10]
:0046DF18 83C101                  add ecx, 00000001
:0046DF1B 8B55EC                  mov edx, dword ptr [ebp-14]
:0046DF1E 894A08                  mov dword ptr [edx+08], ecx
:0046DF21 8B45FC                  mov eax, dword ptr [ebp-04]
:0046DF24 2B45F4                  sub eax, dword ptr [ebp-0C]
:0046DF27 83C001                  add eax, 00000001
:0046DF2A 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046DF2D 89410C                  mov dword ptr [ecx+0C], eax
:0046DF30 8B55EC                  mov edx, dword ptr [ebp-14]
:0046DF33 8B45EC                  mov eax, dword ptr [ebp-14]
:0046DF36 8B4808                  mov ecx, dword ptr [eax+08]
:0046DF39 894A20                  mov dword ptr [edx+20], ecx
:0046DF3C 8B55EC                  mov edx, dword ptr [ebp-14]
:0046DF3F 8B45EC                  mov eax, dword ptr [ebp-14]
:0046DF42 8B480C                  mov ecx, dword ptr [eax+0C]
:0046DF45 894A24                  mov dword ptr [edx+24], ecx
:0046DF48 E9E9010000              jmp 0046E136

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DEAF(C)
|
:0046DF4D B9784E4B00              mov ecx, 004B4E78
:0046DF52 E8790BFEFF              call 0044EAD0
:0046DF57 85C0                    test eax, eax
:0046DF59 0F8472010000            je 0046E0D1
:0046DF5F B9C0534B00              mov ecx, 004B53C0
:0046DF64 E817FFFBFF              call 0042DE80
:0046DF69 85C0                    test eax, eax
:0046DF6B 0F8460010000            je 0046E0D1
:0046DF71 B958494B00              mov ecx, 004B4958
:0046DF76 E8640AFEFF              call 0044E9DF
:0046DF7B 8BF0                    mov esi, eax
:0046DF7D 83EE01                  sub esi, 00000001
:0046DF80 B958494B00              mov ecx, 004B4958
:0046DF85 E8F10AFEFF              call 0044EA7B
:0046DF8A 83E801                  sub eax, 00000001
:0046DF8D 3BF0                    cmp esi, eax
:0046DF8F 7D12                    jge 0046DFA3
:0046DF91 B958494B00              mov ecx, 004B4958
:0046DF96 E8440AFEFF              call 0044E9DF
:0046DF9B 83E801                  sub eax, 00000001
:0046DF9E 8945E8                  mov dword ptr [ebp-18], eax
:0046DFA1 EB10                    jmp 0046DFB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DF8F(C)
|
:0046DFA3 B958494B00              mov ecx, 004B4958
:0046DFA8 E8CE0AFEFF              call 0044EA7B
:0046DFAD 83E801                  sub eax, 00000001
:0046DFB0 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DFA1(U)
|
:0046DFB3 8B55E8                  mov edx, dword ptr [ebp-18]
:0046DFB6 8955F8                  mov dword ptr [ebp-08], edx
:0046DFB9 B958494B00              mov ecx, 004B4958
:0046DFBE E8430AFEFF              call 0044EA06
:0046DFC3 8BF0                    mov esi, eax
:0046DFC5 83EE01                  sub esi, 00000001
:0046DFC8 B958494B00              mov ecx, 004B4958
:0046DFCD E8D00AFEFF              call 0044EAA2
:0046DFD2 83C027                  add eax, 00000027
:0046DFD5 3BF0                    cmp esi, eax
:0046DFD7 7D12                    jge 0046DFEB
:0046DFD9 B958494B00              mov ecx, 004B4958
:0046DFDE E8230AFEFF              call 0044EA06
:0046DFE3 83E801                  sub eax, 00000001
:0046DFE6 8945E4                  mov dword ptr [ebp-1C], eax
:0046DFE9 EB10                    jmp 0046DFFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DFD7(C)
|
:0046DFEB B958494B00              mov ecx, 004B4958
:0046DFF0 E8AD0AFEFF              call 0044EAA2
:0046DFF5 83C027                  add eax, 00000027
:0046DFF8 8945E4                  mov dword ptr [ebp-1C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046DFE9(U)
|
:0046DFFB 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046DFFE 8945FC                  mov dword ptr [ebp-04], eax
:0046E001 6A01                    push 00000001
:0046E003 6AF0                    push FFFFFFF0
:0046E005 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046E008 51                      push ecx

* Reference To: USER32.GetWindowLongA, Ord:013Ah
                                  |
:0046E009 FF15B0D64B00            Call dword ptr [004BD6B0]
:0046E00F 50                      push eax
:0046E010 8D55F0                  lea edx, dword ptr [ebp-10]
:0046E013 52                      push edx

* Reference To: USER32.AdjustWindowRect, Ord:0001h
                                  |
:0046E014 FF154CD64B00            Call dword ptr [004BD64C]
:0046E01A 8B450C                  mov eax, dword ptr [ebp+0C]
:0046E01D 8945EC                  mov dword ptr [ebp-14], eax
:0046E020 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046E023 D1E1                    shl ecx, 1
:0046E025 8B15941E4800            mov edx, dword ptr [00481E94]
:0046E02B 2BD1                    sub edx, ecx
:0046E02D 8B45EC                  mov eax, dword ptr [ebp-14]
:0046E030 895018                  mov dword ptr [eax+18], edx
:0046E033 B958494B00              mov ecx, 004B4958
:0046E038 E8C909FEFF              call 0044EA06
:0046E03D 3905981E4800            cmp dword ptr [00481E98], eax
:0046E043 7D0B                    jge 0046E050
:0046E045 8B0D981E4800            mov ecx, dword ptr [00481E98]
:0046E04B 894DE0                  mov dword ptr [ebp-20], ecx
:0046E04E EB0D                    jmp 0046E05D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E043(C)
|
:0046E050 B958494B00              mov ecx, 004B4958
:0046E055 E8AC09FEFF              call 0044EA06
:0046E05A 8945E0                  mov dword ptr [ebp-20], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E04E(U)
|
:0046E05D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046E060 8D441250                lea eax, dword ptr [edx+edx+50]
:0046E064 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0046E067 2BC8                    sub ecx, eax
:0046E069 83C102                  add ecx, 00000002
:0046E06C 8B55EC                  mov edx, dword ptr [ebp-14]
:0046E06F 894A1C                  mov dword ptr [edx+1C], ecx
:0046E072 8B45F8                  mov eax, dword ptr [ebp-08]
:0046E075 2B45F0                  sub eax, dword ptr [ebp-10]
:0046E078 83C001                  add eax, 00000001
:0046E07B 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046E07E 894108                  mov dword ptr [ecx+08], eax
:0046E081 8B55FC                  mov edx, dword ptr [ebp-04]
:0046E084 2B55F4                  sub edx, dword ptr [ebp-0C]
:0046E087 83C201                  add edx, 00000001
:0046E08A 8B45EC                  mov eax, dword ptr [ebp-14]
:0046E08D 89500C                  mov dword ptr [eax+0C], edx
:0046E090 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046E093 8B55EC                  mov edx, dword ptr [ebp-14]
:0046E096 8B4208                  mov eax, dword ptr [edx+08]
:0046E099 894120                  mov dword ptr [ecx+20], eax
:0046E09C 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046E09F 8B55EC                  mov edx, dword ptr [ebp-14]
:0046E0A2 8B420C                  mov eax, dword ptr [edx+0C]
:0046E0A5 894124                  mov dword ptr [ecx+24], eax
:0046E0A8 8B0D18544B00            mov ecx, dword ptr [004B5418]
:0046E0AE 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046E0AF FF1558D64B00            Call dword ptr [004BD658]
:0046E0B5 85C0                    test eax, eax
:0046E0B7 7416                    je 0046E0CF
:0046E0B9 6A00                    push 00000000
:0046E0BB 6A01                    push 00000001
:0046E0BD 6811010000              push 00000111
:0046E0C2 8B1518544B00            mov edx, dword ptr [004B5418]
:0046E0C8 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046E0C9 FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E0B7(C)
|
:0046E0CF EB65                    jmp 0046E136

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DF59(C), :0046DF6B(C)
|
:0046E0D1 8B450C                  mov eax, dword ptr [ebp+0C]
:0046E0D4 8945EC                  mov dword ptr [ebp-14], eax
:0046E0D7 8B0DA8624B00            mov ecx, dword ptr [004B62A8]
:0046E0DD 2B0DA0624B00            sub ecx, dword ptr [004B62A0]
:0046E0E3 8B55EC                  mov edx, dword ptr [ebp-14]
:0046E0E6 894A18                  mov dword ptr [edx+18], ecx
:0046E0E9 A1AC624B00              mov eax, dword ptr [004B62AC]
:0046E0EE 2B05A4624B00            sub eax, dword ptr [004B62A4]
:0046E0F4 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046E0F7 89411C                  mov dword ptr [ecx+1C], eax
:0046E0FA 8B15A8624B00            mov edx, dword ptr [004B62A8]
:0046E100 2B15A0624B00            sub edx, dword ptr [004B62A0]
:0046E106 8B45EC                  mov eax, dword ptr [ebp-14]
:0046E109 895008                  mov dword ptr [eax+08], edx
:0046E10C 8B0DAC624B00            mov ecx, dword ptr [004B62AC]
:0046E112 2B0DA4624B00            sub ecx, dword ptr [004B62A4]
:0046E118 8B55EC                  mov edx, dword ptr [ebp-14]
:0046E11B 894A0C                  mov dword ptr [edx+0C], ecx
:0046E11E 8B45EC                  mov eax, dword ptr [ebp-14]
:0046E121 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046E124 8B5108                  mov edx, dword ptr [ecx+08]
:0046E127 895020                  mov dword ptr [eax+20], edx
:0046E12A 8B45EC                  mov eax, dword ptr [ebp-14]
:0046E12D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046E130 8B510C                  mov edx, dword ptr [ecx+0C]
:0046E133 895024                  mov dword ptr [eax+24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046DF48(U), :0046E0CF(U)
|
:0046E136 5E                      pop esi
:0046E137 8BE5                    mov esp, ebp
:0046E139 5D                      pop ebp
:0046E13A C3                      ret



* Referenced by a CALL at Address:
|:00469F2B   
|
:0046E13B 55                      push ebp
:0046E13C 8BEC                    mov ebp, esp
:0046E13E 83EC38                  sub esp, 00000038
:0046E141 8B4510                  mov eax, dword ptr [ebp+10]
:0046E144 50                      push eax
:0046E145 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046E148 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0046E149 6A05                    push 00000005
:0046E14B 8B15C0554B00            mov edx, dword ptr [004B55C0]
:0046E151 52                      push edx

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046E152 FF1504D64B00            Call dword ptr [004BD604]
:0046E158 B958494B00              mov ecx, 004B4958
:0046E15D E82007FEFF              call 0044E882
:0046E162 85C0                    test eax, eax
:0046E164 0F84FD020000            je 0046E467
:0046E16A B958494B00              mov ecx, 004B4958
:0046E16F E853EAFDFF              call 0044CBC7
:0046E174 85C0                    test eax, eax
:0046E176 740A                    je 0046E182
:0046E178 B958494B00              mov ecx, 004B4958
:0046E17D E8E0E9FDFF              call 0044CB62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E176(C)
|
:0046E182 8B4510                  mov eax, dword ptr [ebp+10]
:0046E185 25FFFF0000              and eax, 0000FFFF
:0046E18A 8945D4                  mov dword ptr [ebp-2C], eax
:0046E18D 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046E190 C1E910                  shr ecx, 10
:0046E193 81E1FFFF0000            and ecx, 0000FFFF
:0046E199 81E1FFFF0000            and ecx, 0000FFFF
:0046E19F 894DD0                  mov dword ptr [ebp-30], ecx
:0046E1A2 C745F000000000          mov [ebp-10], 00000000
:0046E1A9 C745F400000000          mov [ebp-0C], 00000000
:0046E1B0 8B55D4                  mov edx, dword ptr [ebp-2C]
:0046E1B3 83EA01                  sub edx, 00000001
:0046E1B6 8955F8                  mov dword ptr [ebp-08], edx
:0046E1B9 8B45D0                  mov eax, dword ptr [ebp-30]
:0046E1BC 83E801                  sub eax, 00000001
:0046E1BF 8945FC                  mov dword ptr [ebp-04], eax
:0046E1C2 6A00                    push 00000000
:0046E1C4 6800003F02              push 023F0000
:0046E1C9 8D4DF0                  lea ecx, dword ptr [ebp-10]
:0046E1CC 51                      push ecx

* Reference To: USER32.AdjustWindowRect, Ord:0001h
                                  |
:0046E1CD FF154CD64B00            Call dword ptr [004BD64C]
:0046E1D3 8B45D4                  mov eax, dword ptr [ebp-2C]
:0046E1D6 83C02F                  add eax, 0000002F
:0046E1D9 99                      cdq
:0046E1DA B930000000              mov ecx, 00000030
:0046E1DF F7F9                    idiv ecx
:0046E1E1 6BC030                  imul eax, 00000030
:0046E1E4 8945D4                  mov dword ptr [ebp-2C], eax
:0046E1E7 8B45D0                  mov eax, dword ptr [ebp-30]
:0046E1EA 83C007                  add eax, 00000007
:0046E1ED 99                      cdq
:0046E1EE B930000000              mov ecx, 00000030
:0046E1F3 F7F9                    idiv ecx
:0046E1F5 6BC030                  imul eax, 00000030
:0046E1F8 8945D0                  mov dword ptr [ebp-30], eax
:0046E1FB 8B55D4                  mov edx, dword ptr [ebp-2C]
:0046E1FE 52                      push edx
:0046E1FF B958494B00              mov ecx, 004B4958
:0046E204 E84B07FEFF              call 0044E954
:0046E209 8B45D0                  mov eax, dword ptr [ebp-30]
:0046E20C 50                      push eax
:0046E20D B958494B00              mov ecx, 004B4958
:0046E212 E86407FEFF              call 0044E97B
:0046E217 B958494B00              mov ecx, 004B4958
:0046E21C E85A08FEFF              call 0044EA7B
:0046E221 8945E0                  mov dword ptr [ebp-20], eax
:0046E224 B958494B00              mov ecx, 004B4958
:0046E229 E87408FEFF              call 0044EAA2
:0046E22E 8945EC                  mov dword ptr [ebp-14], eax
:0046E231 8B45D4                  mov eax, dword ptr [ebp-2C]
:0046E234 99                      cdq
:0046E235 83E20F                  and edx, 0000000F
:0046E238 03C2                    add eax, edx
:0046E23A C1F804                  sar eax, 04
:0046E23D C1E004                  shl eax, 04
:0046E240 8B4DE0                  mov ecx, dword ptr [ebp-20]
:0046E243 2BC8                    sub ecx, eax
:0046E245 85C9                    test ecx, ecx
:0046E247 7D09                    jge 0046E252
:0046E249 C745CC00000000          mov [ebp-34], 00000000
:0046E250 EB17                    jmp 0046E269

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E247(C)
|
:0046E252 8B45D4                  mov eax, dword ptr [ebp-2C]
:0046E255 99                      cdq
:0046E256 83E20F                  and edx, 0000000F
:0046E259 03C2                    add eax, edx
:0046E25B C1F804                  sar eax, 04
:0046E25E C1E004                  shl eax, 04
:0046E261 8B55E0                  mov edx, dword ptr [ebp-20]
:0046E264 2BD0                    sub edx, eax
:0046E266 8955CC                  mov dword ptr [ebp-34], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E250(U)
|
:0046E269 8B45CC                  mov eax, dword ptr [ebp-34]
:0046E26C 8945E8                  mov dword ptr [ebp-18], eax
:0046E26F 8B45D0                  mov eax, dword ptr [ebp-30]
:0046E272 99                      cdq
:0046E273 83E20F                  and edx, 0000000F
:0046E276 03C2                    add eax, edx
:0046E278 C1F804                  sar eax, 04
:0046E27B C1E004                  shl eax, 04
:0046E27E 8B4DEC                  mov ecx, dword ptr [ebp-14]
:0046E281 2BC8                    sub ecx, eax
:0046E283 85C9                    test ecx, ecx
:0046E285 7D09                    jge 0046E290
:0046E287 C745C800000000          mov [ebp-38], 00000000
:0046E28E EB17                    jmp 0046E2A7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E285(C)
|
:0046E290 8B45D0                  mov eax, dword ptr [ebp-30]
:0046E293 99                      cdq
:0046E294 83E20F                  and edx, 0000000F
:0046E297 03C2                    add eax, edx
:0046E299 C1F804                  sar eax, 04
:0046E29C C1E004                  shl eax, 04
:0046E29F 8B55EC                  mov edx, dword ptr [ebp-14]
:0046E2A2 2BD0                    sub edx, eax
:0046E2A4 8955C8                  mov dword ptr [ebp-38], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E28E(U)
|
:0046E2A7 8B45C8                  mov eax, dword ptr [ebp-38]
:0046E2AA 8945E4                  mov dword ptr [ebp-1C], eax
:0046E2AD 8B4DE8                  mov ecx, dword ptr [ebp-18]
:0046E2B0 51                      push ecx
:0046E2B1 B958494B00              mov ecx, 004B4958
:0046E2B6 E84B06FEFF              call 0044E906
:0046E2BB 8B55E4                  mov edx, dword ptr [ebp-1C]
:0046E2BE 52                      push edx
:0046E2BF B958494B00              mov ecx, 004B4958
:0046E2C4 E86406FEFF              call 0044E92D
:0046E2C9 B958494B00              mov ecx, 004B4958
:0046E2CE E8D405FEFF              call 0044E8A7
:0046E2D3 8945DC                  mov dword ptr [ebp-24], eax
:0046E2D6 8B45D4                  mov eax, dword ptr [ebp-2C]
:0046E2D9 99                      cdq
:0046E2DA 83E20F                  and edx, 0000000F
:0046E2DD 03C2                    add eax, edx
:0046E2DF C1F804                  sar eax, 04
:0046E2E2 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046E2E5 03C8                    add ecx, eax
:0046E2E7 8B45E0                  mov eax, dword ptr [ebp-20]
:0046E2EA 99                      cdq
:0046E2EB 83E20F                  and edx, 0000000F
:0046E2EE 03C2                    add eax, edx
:0046E2F0 C1F804                  sar eax, 04
:0046E2F3 3BC8                    cmp ecx, eax
:0046E2F5 7E35                    jle 0046E32C
:0046E2F7 8B45D4                  mov eax, dword ptr [ebp-2C]
:0046E2FA 99                      cdq
:0046E2FB 83E20F                  and edx, 0000000F
:0046E2FE 03C2                    add eax, edx
:0046E300 C1F804                  sar eax, 04
:0046E303 8B4DDC                  mov ecx, dword ptr [ebp-24]
:0046E306 03C8                    add ecx, eax
:0046E308 8B45E0                  mov eax, dword ptr [ebp-20]
:0046E30B 99                      cdq
:0046E30C 83E20F                  and edx, 0000000F
:0046E30F 03C2                    add eax, edx
:0046E311 C1F804                  sar eax, 04
:0046E314 2BC8                    sub ecx, eax
:0046E316 8B55DC                  mov edx, dword ptr [ebp-24]
:0046E319 2BD1                    sub edx, ecx
:0046E31B 8955DC                  mov dword ptr [ebp-24], edx
:0046E31E 8B45DC                  mov eax, dword ptr [ebp-24]
:0046E321 50                      push eax
:0046E322 B958494B00              mov ecx, 004B4958
:0046E327 E88C05FEFF              call 0044E8B8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E2F5(C)
|
:0046E32C B958494B00              mov ecx, 004B4958
:0046E331 E89805FEFF              call 0044E8CE
:0046E336 8945D8                  mov dword ptr [ebp-28], eax
:0046E339 8B45D0                  mov eax, dword ptr [ebp-30]
:0046E33C 99                      cdq
:0046E33D 83E20F                  and edx, 0000000F
:0046E340 03C2                    add eax, edx
:0046E342 C1F804                  sar eax, 04
:0046E345 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0046E348 03C8                    add ecx, eax
:0046E34A 8B45EC                  mov eax, dword ptr [ebp-14]
:0046E34D 99                      cdq
:0046E34E 83E20F                  and edx, 0000000F
:0046E351 03C2                    add eax, edx
:0046E353 C1F804                  sar eax, 04
:0046E356 3BC8                    cmp ecx, eax
:0046E358 7E35                    jle 0046E38F
:0046E35A 8B45D0                  mov eax, dword ptr [ebp-30]
:0046E35D 99                      cdq
:0046E35E 83E20F                  and edx, 0000000F
:0046E361 03C2                    add eax, edx
:0046E363 C1F804                  sar eax, 04
:0046E366 8B4DD8                  mov ecx, dword ptr [ebp-28]
:0046E369 03C8                    add ecx, eax
:0046E36B 8B45EC                  mov eax, dword ptr [ebp-14]
:0046E36E 99                      cdq
:0046E36F 83E20F                  and edx, 0000000F
:0046E372 03C2                    add eax, edx
:0046E374 C1F804                  sar eax, 04
:0046E377 2BC8                    sub ecx, eax
:0046E379 8B55D8                  mov edx, dword ptr [ebp-28]
:0046E37C 2BD1                    sub edx, ecx
:0046E37E 8955D8                  mov dword ptr [ebp-28], edx
:0046E381 8B45D8                  mov eax, dword ptr [ebp-28]
:0046E384 50                      push eax
:0046E385 B958494B00              mov ecx, 004B4958
:0046E38A E85005FEFF              call 0044E8DF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E358(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046E38F 6A02                    push 00000002

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0046E391 FF1578D64B00            Call dword ptr [004BD678]
:0046E397 8B4DD4                  mov ecx, dword ptr [ebp-2C]
:0046E39A 03C8                    add ecx, eax
:0046E39C 3B4DE0                  cmp ecx, dword ptr [ebp-20]
:0046E39F 7C14                    jl 0046E3B5
:0046E3A1 6A00                    push 00000000
:0046E3A3 6A00                    push 00000000
:0046E3A5 6A00                    push 00000000
:0046E3A7 6A00                    push 00000000
:0046E3A9 8B5508                  mov edx, dword ptr [ebp+08]
:0046E3AC 52                      push edx

* Reference To: USER32.SetScrollRange, Ord:020Ch
                                  |
:0046E3AD FF15B8D54B00            Call dword ptr [004BD5B8]
:0046E3B3 EB29                    jmp 0046E3DE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E39F(C)
|
:0046E3B5 6A00                    push 00000000
:0046E3B7 8B45E8                  mov eax, dword ptr [ebp-18]
:0046E3BA 50                      push eax
:0046E3BB 6A00                    push 00000000
:0046E3BD 6A00                    push 00000000
:0046E3BF 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046E3C2 51                      push ecx

* Reference To: USER32.SetScrollRange, Ord:020Ch
                                  |
:0046E3C3 FF15B8D54B00            Call dword ptr [004BD5B8]
:0046E3C9 6A01                    push 00000001
:0046E3CB 8B55DC                  mov edx, dword ptr [ebp-24]
:0046E3CE C1E204                  shl edx, 04
:0046E3D1 52                      push edx
:0046E3D2 6A00                    push 00000000
:0046E3D4 8B4508                  mov eax, dword ptr [ebp+08]
:0046E3D7 50                      push eax

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:0046E3D8 FF1560D64B00            Call dword ptr [004BD660]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E3B3(U)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046E3DE 6A03                    push 00000003

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:0046E3E0 FF1578D64B00            Call dword ptr [004BD678]
:0046E3E6 8B4DD0                  mov ecx, dword ptr [ebp-30]
:0046E3E9 03C8                    add ecx, eax
:0046E3EB 3B4DEC                  cmp ecx, dword ptr [ebp-14]
:0046E3EE 7C14                    jl 0046E404
:0046E3F0 6A00                    push 00000000
:0046E3F2 6A00                    push 00000000
:0046E3F4 6A00                    push 00000000
:0046E3F6 6A01                    push 00000001
:0046E3F8 8B5508                  mov edx, dword ptr [ebp+08]
:0046E3FB 52                      push edx

* Reference To: USER32.SetScrollRange, Ord:020Ch
                                  |
:0046E3FC FF15B8D54B00            Call dword ptr [004BD5B8]
:0046E402 EB29                    jmp 0046E42D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E3EE(C)
|
:0046E404 6A00                    push 00000000
:0046E406 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046E409 50                      push eax
:0046E40A 6A00                    push 00000000
:0046E40C 6A01                    push 00000001
:0046E40E 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046E411 51                      push ecx

* Reference To: USER32.SetScrollRange, Ord:020Ch
                                  |
:0046E412 FF15B8D54B00            Call dword ptr [004BD5B8]
:0046E418 6A01                    push 00000001
:0046E41A 8B55D8                  mov edx, dword ptr [ebp-28]
:0046E41D C1E204                  shl edx, 04
:0046E420 52                      push edx
:0046E421 6A01                    push 00000001
:0046E423 8B4508                  mov eax, dword ptr [ebp+08]
:0046E426 50                      push eax

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:0046E427 FF1560D64B00            Call dword ptr [004BD660]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E402(U)
|
:0046E42D 6A00                    push 00000000
:0046E42F B958494B00              mov ecx, 004B4958
:0046E434 E89504FEFF              call 0044E8CE
:0046E439 50                      push eax
:0046E43A B958494B00              mov ecx, 004B4958
:0046E43F E86304FEFF              call 0044E8A7
:0046E444 50                      push eax
:0046E445 B958494B00              mov ecx, 004B4958
:0046E44A E88BF3FDFF              call 0044D7DA
:0046E44F 6A01                    push 00000001
:0046E451 6A00                    push 00000000
:0046E453 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046E456 51                      push ecx

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:0046E457 FF1524D64B00            Call dword ptr [004BD624]
:0046E45D 8B5508                  mov edx, dword ptr [ebp+08]
:0046E460 52                      push edx

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:0046E461 FF15FCD54B00            Call dword ptr [004BD5FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E164(C)
|
:0046E467 8BE5                    mov esp, ebp
:0046E469 5D                      pop ebp
:0046E46A C3                      ret



* Referenced by a CALL at Address:
|:00469F5A   
|
:0046E46B 55                      push ebp
:0046E46C 8BEC                    mov ebp, esp
:0046E46E 83EC14                  sub esp, 00000014
:0046E471 B9784E4B00              mov ecx, 004B4E78
:0046E476 E85506FEFF              call 0044EAD0
:0046E47B 85C0                    test eax, eax
:0046E47D 0F84D3010000            je 0046E656
:0046E483 B9C0534B00              mov ecx, 004B53C0
:0046E488 E8F3F9FBFF              call 0042DE80
:0046E48D 85C0                    test eax, eax
:0046E48F 0F84C1010000            je 0046E656
:0046E495 B958494B00              mov ecx, 004B4958
:0046E49A E80804FEFF              call 0044E8A7
:0046E49F 8945F8                  mov dword ptr [ebp-08], eax
:0046E4A2 6A00                    push 00000000
:0046E4A4 8B4508                  mov eax, dword ptr [ebp+08]
:0046E4A7 50                      push eax

* Reference To: USER32.GetScrollPos, Ord:0125h
                                  |
:0046E4A8 FF15DCD54B00            Call dword ptr [004BD5DC]
:0046E4AE 8945FC                  mov dword ptr [ebp-04], eax
:0046E4B1 B958494B00              mov ecx, 004B4958
:0046E4B6 E8E9ECFDFF              call 0044D1A4
:0046E4BB B958494B00              mov ecx, 004B4958
:0046E4C0 E802E7FDFF              call 0044CBC7
:0046E4C5 85C0                    test eax, eax
:0046E4C7 740A                    je 0046E4D3
:0046E4C9 B958494B00              mov ecx, 004B4958
:0046E4CE E88FE6FDFF              call 0044CB62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E4C7(C)
|
:0046E4D3 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046E4D6 81E1FFFF0000            and ecx, 0000FFFF
:0046E4DC 894DF4                  mov dword ptr [ebp-0C], ecx
:0046E4DF 837DF405                cmp dword ptr [ebp-0C], 00000005
:0046E4E3 0F871E010000            ja 0046E607
:0046E4E9 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046E4EC FF24955AE64600          jmp dword ptr [4*edx+0046E65A]
:0046E4F3 8B45F8                  mov eax, dword ptr [ebp-08]
:0046E4F6 83E803                  sub eax, 00000003
:0046E4F9 8945F8                  mov dword ptr [ebp-08], eax
:0046E4FC 33C9                    xor ecx, ecx
:0046E4FE 837DF800                cmp dword ptr [ebp-08], 00000000
:0046E502 0F9CC1                  setl cl
:0046E505 49                      dec ecx
:0046E506 234DF8                  and ecx, dword ptr [ebp-08]
:0046E509 894DF8                  mov dword ptr [ebp-08], ecx
:0046E50C E9F6000000              jmp 0046E607
:0046E511 8B55F8                  mov edx, dword ptr [ebp-08]
:0046E514 83C203                  add edx, 00000003
:0046E517 8955F8                  mov dword ptr [ebp-08], edx
:0046E51A B958494B00              mov ecx, 004B4958
:0046E51F E8D103FEFF              call 0044E8F5
:0046E524 99                      cdq
:0046E525 B930000000              mov ecx, 00000030
:0046E52A F7F9                    idiv ecx
:0046E52C 6BC003                  imul eax, 00000003
:0046E52F 3945F8                  cmp dword ptr [ebp-08], eax
:0046E532 7D08                    jge 0046E53C
:0046E534 8B55F8                  mov edx, dword ptr [ebp-08]
:0046E537 8955F0                  mov dword ptr [ebp-10], edx
:0046E53A EB18                    jmp 0046E554

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E532(C)
|
:0046E53C B958494B00              mov ecx, 004B4958
:0046E541 E8AF03FEFF              call 0044E8F5
:0046E546 99                      cdq
:0046E547 B930000000              mov ecx, 00000030
:0046E54C F7F9                    idiv ecx
:0046E54E 6BC003                  imul eax, 00000003
:0046E551 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E53A(U)
|
:0046E554 8B55F0                  mov edx, dword ptr [ebp-10]
:0046E557 8955F8                  mov dword ptr [ebp-08], edx
:0046E55A E9A8000000              jmp 0046E607
:0046E55F B958494B00              mov ecx, 004B4958
:0046E564 E8DA03FEFF              call 0044E943
:0046E569 99                      cdq
:0046E56A 83E20F                  and edx, 0000000F
:0046E56D 03C2                    add eax, edx
:0046E56F C1F804                  sar eax, 04
:0046E572 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046E575 2BC8                    sub ecx, eax
:0046E577 894DF8                  mov dword ptr [ebp-08], ecx
:0046E57A 33D2                    xor edx, edx
:0046E57C 837DF800                cmp dword ptr [ebp-08], 00000000
:0046E580 0F9CC2                  setl dl
:0046E583 4A                      dec edx
:0046E584 2355F8                  and edx, dword ptr [ebp-08]
:0046E587 8955F8                  mov dword ptr [ebp-08], edx
:0046E58A EB7B                    jmp 0046E607
:0046E58C B958494B00              mov ecx, 004B4958
:0046E591 E8AD03FEFF              call 0044E943
:0046E596 99                      cdq
:0046E597 83E20F                  and edx, 0000000F
:0046E59A 03C2                    add eax, edx
:0046E59C C1F804                  sar eax, 04
:0046E59F 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046E5A2 03C8                    add ecx, eax
:0046E5A4 894DF8                  mov dword ptr [ebp-08], ecx
:0046E5A7 B958494B00              mov ecx, 004B4958
:0046E5AC E84403FEFF              call 0044E8F5
:0046E5B1 99                      cdq
:0046E5B2 B930000000              mov ecx, 00000030
:0046E5B7 F7F9                    idiv ecx
:0046E5B9 6BC003                  imul eax, 00000003
:0046E5BC 3945F8                  cmp dword ptr [ebp-08], eax
:0046E5BF 7D08                    jge 0046E5C9
:0046E5C1 8B55F8                  mov edx, dword ptr [ebp-08]
:0046E5C4 8955EC                  mov dword ptr [ebp-14], edx
:0046E5C7 EB18                    jmp 0046E5E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E5BF(C)
|
:0046E5C9 B958494B00              mov ecx, 004B4958
:0046E5CE E82203FEFF              call 0044E8F5
:0046E5D3 99                      cdq
:0046E5D4 B930000000              mov ecx, 00000030
:0046E5D9 F7F9                    idiv ecx
:0046E5DB 6BC003                  imul eax, 00000003
:0046E5DE 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E5C7(U)
|
:0046E5E1 8B55EC                  mov edx, dword ptr [ebp-14]
:0046E5E4 8955F8                  mov dword ptr [ebp-08], edx
:0046E5E7 EB1E                    jmp 0046E607
:0046E5E9 8B450C                  mov eax, dword ptr [ebp+0C]
:0046E5EC C1E810                  shr eax, 10
:0046E5EF 25FFFF0000              and eax, 0000FFFF
:0046E5F4 25FFFF0000              and eax, 0000FFFF
:0046E5F9 99                      cdq
:0046E5FA B930000000              mov ecx, 00000030
:0046E5FF F7F9                    idiv ecx
:0046E601 6BC003                  imul eax, 00000003
:0046E604 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E4E3(C), :0046E50C(U), :0046E55A(U), :0046E58A(U), :0046E5E7(U)
|
:0046E607 8B45FC                  mov eax, dword ptr [ebp-04]
:0046E60A 99                      cdq
:0046E60B 83E20F                  and edx, 0000000F
:0046E60E 03C2                    add eax, edx
:0046E610 C1F804                  sar eax, 04
:0046E613 3945F8                  cmp dword ptr [ebp-08], eax
:0046E616 743E                    je 0046E656
:0046E618 8B55F8                  mov edx, dword ptr [ebp-08]
:0046E61B 52                      push edx
:0046E61C B958494B00              mov ecx, 004B4958
:0046E621 E89202FEFF              call 0044E8B8
:0046E626 6A01                    push 00000001
:0046E628 8B45F8                  mov eax, dword ptr [ebp-08]
:0046E62B C1E004                  shl eax, 04
:0046E62E 50                      push eax
:0046E62F 6A00                    push 00000000
:0046E631 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046E634 51                      push ecx

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:0046E635 FF1560D64B00            Call dword ptr [004BD660]
:0046E63B 8B1518544B00            mov edx, dword ptr [004B5418]
:0046E641 52                      push edx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046E642 FF1558D64B00            Call dword ptr [004BD658]
:0046E648 85C0                    test eax, eax
:0046E64A 740A                    je 0046E656
:0046E64C B9784E4B00              mov ecx, 004B4E78
:0046E651 E851DDFEFF              call 0045C3A7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E47D(C), :0046E48F(C), :0046E616(C), :0046E64A(C)
|
:0046E656 8BE5                    mov esp, ebp
:0046E658 5D                      pop ebp
:0046E659 C3                      ret



:0046E65A F3E44600                DWORD 0046E4F3
:0046E65E 11E54600                DWORD 0046E511
:0046E662 5FE54600                DWORD 0046E55F
:0046E666 8CE54600                DWORD 0046E58C
:0046E66A 07E64600                DWORD 0046E607
:0046E66E E9E54600                DWORD 0046E5E9



* Referenced by a CALL at Address:
|:00469F73   
|
:0046E672 55                      push ebp
:0046E673 8BEC                    mov ebp, esp
:0046E675 83EC14                  sub esp, 00000014
:0046E678 B9784E4B00              mov ecx, 004B4E78
:0046E67D E84E04FEFF              call 0044EAD0
:0046E682 85C0                    test eax, eax
:0046E684 0F84D3010000            je 0046E85D
:0046E68A B9C0534B00              mov ecx, 004B53C0
:0046E68F E8ECF7FBFF              call 0042DE80
:0046E694 85C0                    test eax, eax
:0046E696 0F84C1010000            je 0046E85D
:0046E69C B958494B00              mov ecx, 004B4958
:0046E6A1 E82802FEFF              call 0044E8CE
:0046E6A6 8945F8                  mov dword ptr [ebp-08], eax
:0046E6A9 6A01                    push 00000001
:0046E6AB 8B4508                  mov eax, dword ptr [ebp+08]
:0046E6AE 50                      push eax

* Reference To: USER32.GetScrollPos, Ord:0125h
                                  |
:0046E6AF FF15DCD54B00            Call dword ptr [004BD5DC]
:0046E6B5 8945FC                  mov dword ptr [ebp-04], eax
:0046E6B8 B958494B00              mov ecx, 004B4958
:0046E6BD E8E2EAFDFF              call 0044D1A4
:0046E6C2 B958494B00              mov ecx, 004B4958
:0046E6C7 E8FBE4FDFF              call 0044CBC7
:0046E6CC 85C0                    test eax, eax
:0046E6CE 740A                    je 0046E6DA
:0046E6D0 B958494B00              mov ecx, 004B4958
:0046E6D5 E888E4FDFF              call 0044CB62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E6CE(C)
|
:0046E6DA 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046E6DD 81E1FFFF0000            and ecx, 0000FFFF
:0046E6E3 894DF4                  mov dword ptr [ebp-0C], ecx
:0046E6E6 837DF405                cmp dword ptr [ebp-0C], 00000005
:0046E6EA 0F871E010000            ja 0046E80E
:0046E6F0 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046E6F3 FF249561E84600          jmp dword ptr [4*edx+0046E861]
:0046E6FA 8B45F8                  mov eax, dword ptr [ebp-08]
:0046E6FD 83E803                  sub eax, 00000003
:0046E700 8945F8                  mov dword ptr [ebp-08], eax
:0046E703 33C9                    xor ecx, ecx
:0046E705 837DF800                cmp dword ptr [ebp-08], 00000000
:0046E709 0F9CC1                  setl cl
:0046E70C 49                      dec ecx
:0046E70D 234DF8                  and ecx, dword ptr [ebp-08]
:0046E710 894DF8                  mov dword ptr [ebp-08], ecx
:0046E713 E9F6000000              jmp 0046E80E
:0046E718 8B55F8                  mov edx, dword ptr [ebp-08]
:0046E71B 83C203                  add edx, 00000003
:0046E71E 8955F8                  mov dword ptr [ebp-08], edx
:0046E721 B958494B00              mov ecx, 004B4958
:0046E726 E8F101FEFF              call 0044E91C
:0046E72B 99                      cdq
:0046E72C B930000000              mov ecx, 00000030
:0046E731 F7F9                    idiv ecx
:0046E733 6BC003                  imul eax, 00000003
:0046E736 3945F8                  cmp dword ptr [ebp-08], eax
:0046E739 7D08                    jge 0046E743
:0046E73B 8B55F8                  mov edx, dword ptr [ebp-08]
:0046E73E 8955F0                  mov dword ptr [ebp-10], edx
:0046E741 EB18                    jmp 0046E75B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E739(C)
|
:0046E743 B958494B00              mov ecx, 004B4958
:0046E748 E8CF01FEFF              call 0044E91C
:0046E74D 99                      cdq
:0046E74E B930000000              mov ecx, 00000030
:0046E753 F7F9                    idiv ecx
:0046E755 6BC003                  imul eax, 00000003
:0046E758 8945F0                  mov dword ptr [ebp-10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E741(U)
|
:0046E75B 8B55F0                  mov edx, dword ptr [ebp-10]
:0046E75E 8955F8                  mov dword ptr [ebp-08], edx
:0046E761 E9A8000000              jmp 0046E80E
:0046E766 B958494B00              mov ecx, 004B4958
:0046E76B E8FA01FEFF              call 0044E96A
:0046E770 99                      cdq
:0046E771 83E20F                  and edx, 0000000F
:0046E774 03C2                    add eax, edx
:0046E776 C1F804                  sar eax, 04
:0046E779 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046E77C 2BC8                    sub ecx, eax
:0046E77E 894DF8                  mov dword ptr [ebp-08], ecx
:0046E781 33D2                    xor edx, edx
:0046E783 837DF800                cmp dword ptr [ebp-08], 00000000
:0046E787 0F9CC2                  setl dl
:0046E78A 4A                      dec edx
:0046E78B 2355F8                  and edx, dword ptr [ebp-08]
:0046E78E 8955F8                  mov dword ptr [ebp-08], edx
:0046E791 EB7B                    jmp 0046E80E
:0046E793 B958494B00              mov ecx, 004B4958
:0046E798 E8CD01FEFF              call 0044E96A
:0046E79D 99                      cdq
:0046E79E 83E20F                  and edx, 0000000F
:0046E7A1 03C2                    add eax, edx
:0046E7A3 C1F804                  sar eax, 04
:0046E7A6 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046E7A9 03C8                    add ecx, eax
:0046E7AB 894DF8                  mov dword ptr [ebp-08], ecx
:0046E7AE B958494B00              mov ecx, 004B4958
:0046E7B3 E86401FEFF              call 0044E91C
:0046E7B8 99                      cdq
:0046E7B9 B930000000              mov ecx, 00000030
:0046E7BE F7F9                    idiv ecx
:0046E7C0 6BC003                  imul eax, 00000003
:0046E7C3 3945F8                  cmp dword ptr [ebp-08], eax
:0046E7C6 7D08                    jge 0046E7D0
:0046E7C8 8B55F8                  mov edx, dword ptr [ebp-08]
:0046E7CB 8955EC                  mov dword ptr [ebp-14], edx
:0046E7CE EB18                    jmp 0046E7E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E7C6(C)
|
:0046E7D0 B958494B00              mov ecx, 004B4958
:0046E7D5 E84201FEFF              call 0044E91C
:0046E7DA 99                      cdq
:0046E7DB B930000000              mov ecx, 00000030
:0046E7E0 F7F9                    idiv ecx
:0046E7E2 6BC003                  imul eax, 00000003
:0046E7E5 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E7CE(U)
|
:0046E7E8 8B55EC                  mov edx, dword ptr [ebp-14]
:0046E7EB 8955F8                  mov dword ptr [ebp-08], edx
:0046E7EE EB1E                    jmp 0046E80E
:0046E7F0 8B450C                  mov eax, dword ptr [ebp+0C]
:0046E7F3 C1E810                  shr eax, 10
:0046E7F6 25FFFF0000              and eax, 0000FFFF
:0046E7FB 25FFFF0000              and eax, 0000FFFF
:0046E800 99                      cdq
:0046E801 B930000000              mov ecx, 00000030
:0046E806 F7F9                    idiv ecx
:0046E808 6BC003                  imul eax, 00000003
:0046E80B 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E6EA(C), :0046E713(U), :0046E761(U), :0046E791(U), :0046E7EE(U)
|
:0046E80E 8B45FC                  mov eax, dword ptr [ebp-04]
:0046E811 99                      cdq
:0046E812 83E20F                  and edx, 0000000F
:0046E815 03C2                    add eax, edx
:0046E817 C1F804                  sar eax, 04
:0046E81A 3945F8                  cmp dword ptr [ebp-08], eax
:0046E81D 743E                    je 0046E85D
:0046E81F 8B55F8                  mov edx, dword ptr [ebp-08]
:0046E822 52                      push edx
:0046E823 B958494B00              mov ecx, 004B4958
:0046E828 E8B200FEFF              call 0044E8DF
:0046E82D 6A01                    push 00000001
:0046E82F 8B45F8                  mov eax, dword ptr [ebp-08]
:0046E832 C1E004                  shl eax, 04
:0046E835 50                      push eax
:0046E836 6A01                    push 00000001
:0046E838 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046E83B 51                      push ecx

* Reference To: USER32.SetScrollPos, Ord:020Bh
                                  |
:0046E83C FF1560D64B00            Call dword ptr [004BD660]
:0046E842 8B1518544B00            mov edx, dword ptr [004B5418]
:0046E848 52                      push edx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046E849 FF1558D64B00            Call dword ptr [004BD658]
:0046E84F 85C0                    test eax, eax
:0046E851 740A                    je 0046E85D
:0046E853 B9784E4B00              mov ecx, 004B4E78
:0046E858 E84ADBFEFF              call 0045C3A7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E684(C), :0046E696(C), :0046E81D(C), :0046E851(C)
|
:0046E85D 8BE5                    mov esp, ebp
:0046E85F 5D                      pop ebp
:0046E860 C3                      ret



:0046E861 FAE64600                DWORD 0046E6FA
:0046E865 18E74600                DWORD 0046E718
:0046E869 66E74600                DWORD 0046E766
:0046E86D 93E74600                DWORD 0046E793
:0046E871 0EE84600                DWORD 0046E80E
:0046E875 F0E74600                DWORD 0046E7F0


:0046E879 55                      push ebp
:0046E87A 8BEC                    mov ebp, esp
:0046E87C 83EC08                  sub esp, 00000008
:0046E87F 837D0801                cmp dword ptr [ebp+08], 00000001
:0046E883 7D09                    jge 0046E88E
:0046E885 C745FC01000000          mov [ebp-04], 00000001
:0046E88C EB06                    jmp 0046E894

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E883(C)
|
:0046E88E 8B4508                  mov eax, dword ptr [ebp+08]
:0046E891 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E88C(U)
|
:0046E894 837D0818                cmp dword ptr [ebp+08], 00000018
:0046E898 7E09                    jle 0046E8A3
:0046E89A C745F818000000          mov [ebp-08], 00000018
:0046E8A1 EB06                    jmp 0046E8A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E898(C)
|
:0046E8A3 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046E8A6 894DF8                  mov dword ptr [ebp-08], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E8A1(U)
|
:0046E8A9 8B5508                  mov edx, dword ptr [ebp+08]
:0046E8AC 8915B0234800            mov dword ptr [004823B0], edx
:0046E8B2 8BE5                    mov esp, ebp
:0046E8B4 5D                      pop ebp
:0046E8B5 C3                      ret



* Referenced by a CALL at Addresses:
|:0040FC7A   , :004699D4   
|
:0046E8B6 55                      push ebp
:0046E8B7 8BEC                    mov ebp, esp
:0046E8B9 A11C544B00              mov eax, dword ptr [004B541C]
:0046E8BE 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046E8BF FF1558D64B00            Call dword ptr [004BD658]
:0046E8C5 85C0                    test eax, eax
:0046E8C7 740F                    je 0046E8D8
:0046E8C9 6A00                    push 00000000
:0046E8CB 8B0D1C544B00            mov ecx, dword ptr [004B541C]
:0046E8D1 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046E8D2 FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E8C7(C)
|
:0046E8D8 8B1518544B00            mov edx, dword ptr [004B5418]
:0046E8DE 52                      push edx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046E8DF FF1558D64B00            Call dword ptr [004BD658]
:0046E8E5 85C0                    test eax, eax
:0046E8E7 7418                    je 0046E901
:0046E8E9 6A00                    push 00000000

* Possible Ref to Menu: SMAPMENU, Item: "s(C)"
                                  |
:0046E8EB 68BD9C0000              push 00009CBD
:0046E8F0 6811010000              push 00000111
:0046E8F5 A118544B00              mov eax, dword ptr [004B5418]
:0046E8FA 50                      push eax

* Reference To: USER32.SendMessageA, Ord:01DAh
                                  |
:0046E8FB FF1504D64B00            Call dword ptr [004BD604]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E8E7(C)
|
:0046E901 8B0D68624B00            mov ecx, dword ptr [004B6268]
:0046E907 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046E908 FF1558D64B00            Call dword ptr [004BD658]
:0046E90E 85C0                    test eax, eax
:0046E910 740F                    je 0046E921
:0046E912 6A00                    push 00000000
:0046E914 8B1568624B00            mov edx, dword ptr [004B6268]
:0046E91A 52                      push edx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046E91B FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E910(C)
|
:0046E921 A1E4554B00              mov eax, dword ptr [004B55E4]
:0046E926 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046E927 FF1558D64B00            Call dword ptr [004BD658]
:0046E92D 85C0                    test eax, eax
:0046E92F 740F                    je 0046E940
:0046E931 6A00                    push 00000000
:0046E933 8B0DE4554B00            mov ecx, dword ptr [004B55E4]
:0046E939 51                      push ecx

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:0046E93A FF1500D74B00            Call dword ptr [004BD700]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E92F(C)
|
:0046E940 5D                      pop ebp
:0046E941 C3                      ret



* Referenced by a CALL at Addresses:
|:0042EFD8   , :0044D2C9   
|
:0046E942 55                      push ebp
:0046E943 8BEC                    mov ebp, esp
:0046E945 83EC1C                  sub esp, 0000001C
:0046E948 C745FC00000000          mov [ebp-04], 00000000
:0046E94F A1B0554B00              mov eax, dword ptr [004B55B0]
:0046E954 50                      push eax
:0046E955 B928B44800              mov ecx, 0048B428
:0046E95A E867B6FAFF              call 00419FC6
:0046E95F 8B08                    mov ecx, dword ptr [eax]
:0046E961 8B5004                  mov edx, dword ptr [eax+04]
:0046E964 894DF4                  mov dword ptr [ebp-0C], ecx
:0046E967 8955F8                  mov dword ptr [ebp-08], edx
:0046E96A 8D45F4                  lea eax, dword ptr [ebp-0C]
:0046E96D 50                      push eax
:0046E96E 8B0DB0554B00            mov ecx, dword ptr [004B55B0]
:0046E974 51                      push ecx

* Reference To: USER32.ClientToScreen, Ord:0036h
                                  |
:0046E975 FF15D0D64B00            Call dword ptr [004BD6D0]
:0046E97B 8D55E4                  lea edx, dword ptr [ebp-1C]
:0046E97E 52                      push edx
:0046E97F A1B0554B00              mov eax, dword ptr [004B55B0]
:0046E984 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0046E985 FF15A4D64B00            Call dword ptr [004BD6A4]
:0046E98B 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046E98E 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:0046E991 7C18                    jl 0046E9AB
:0046E993 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046E996 3B55EC                  cmp edx, dword ptr [ebp-14]
:0046E999 7F10                    jg 0046E9AB
:0046E99B 8B45F8                  mov eax, dword ptr [ebp-08]
:0046E99E 3B45E8                  cmp eax, dword ptr [ebp-18]
:0046E9A1 7C08                    jl 0046E9AB
:0046E9A3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046E9A6 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:0046E9A9 7E08                    jle 0046E9B3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E991(C), :0046E999(C), :0046E9A1(C)
|
:0046E9AB 8B45FC                  mov eax, dword ptr [ebp-04]
:0046E9AE E92D010000              jmp 0046EAE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E9A9(C)
|
:0046E9B3 8B1518544B00            mov edx, dword ptr [004B5418]
:0046E9B9 52                      push edx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046E9BA FF1558D64B00            Call dword ptr [004BD658]
:0046E9C0 85C0                    test eax, eax
:0046E9C2 7438                    je 0046E9FC
:0046E9C4 8D45E4                  lea eax, dword ptr [ebp-1C]
:0046E9C7 50                      push eax
:0046E9C8 8B0D18544B00            mov ecx, dword ptr [004B5418]
:0046E9CE 51                      push ecx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0046E9CF FF15A4D64B00            Call dword ptr [004BD6A4]
:0046E9D5 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046E9D8 3B55E4                  cmp edx, dword ptr [ebp-1C]
:0046E9DB 7C1F                    jl 0046E9FC
:0046E9DD 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046E9E0 3B45EC                  cmp eax, dword ptr [ebp-14]
:0046E9E3 7F17                    jg 0046E9FC
:0046E9E5 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046E9E8 3B4DE8                  cmp ecx, dword ptr [ebp-18]
:0046E9EB 7C0F                    jl 0046E9FC
:0046E9ED 8B55F8                  mov edx, dword ptr [ebp-08]
:0046E9F0 3B55F0                  cmp edx, dword ptr [ebp-10]
:0046E9F3 7F07                    jg 0046E9FC
:0046E9F5 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046E9C2(C), :0046E9DB(C), :0046E9E3(C), :0046E9EB(C), :0046E9F3(C)
|
:0046E9FC A1E4554B00              mov eax, dword ptr [004B55E4]
:0046EA01 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046EA02 FF1558D64B00            Call dword ptr [004BD658]
:0046EA08 85C0                    test eax, eax
:0046EA0A 7438                    je 0046EA44
:0046EA0C 8D4DE4                  lea ecx, dword ptr [ebp-1C]
:0046EA0F 51                      push ecx
:0046EA10 8B15E4554B00            mov edx, dword ptr [004B55E4]
:0046EA16 52                      push edx

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0046EA17 FF15A4D64B00            Call dword ptr [004BD6A4]
:0046EA1D 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046EA20 3B45E4                  cmp eax, dword ptr [ebp-1C]
:0046EA23 7C1F                    jl 0046EA44
:0046EA25 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046EA28 3B4DEC                  cmp ecx, dword ptr [ebp-14]
:0046EA2B 7F17                    jg 0046EA44
:0046EA2D 8B55F8                  mov edx, dword ptr [ebp-08]
:0046EA30 3B55E8                  cmp edx, dword ptr [ebp-18]
:0046EA33 7C0F                    jl 0046EA44
:0046EA35 8B45F8                  mov eax, dword ptr [ebp-08]
:0046EA38 3B45F0                  cmp eax, dword ptr [ebp-10]
:0046EA3B 7F07                    jg 0046EA44
:0046EA3D C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EA0A(C), :0046EA23(C), :0046EA2B(C), :0046EA33(C), :0046EA3B(C)
|
:0046EA44 8B0D68624B00            mov ecx, dword ptr [004B6268]
:0046EA4A 51                      push ecx

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046EA4B FF1558D64B00            Call dword ptr [004BD658]
:0046EA51 85C0                    test eax, eax
:0046EA53 7437                    je 0046EA8C
:0046EA55 8D55E4                  lea edx, dword ptr [ebp-1C]
:0046EA58 52                      push edx
:0046EA59 A168624B00              mov eax, dword ptr [004B6268]
:0046EA5E 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0046EA5F FF15A4D64B00            Call dword ptr [004BD6A4]
:0046EA65 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046EA68 3B4DE4                  cmp ecx, dword ptr [ebp-1C]
:0046EA6B 7C1F                    jl 0046EA8C
:0046EA6D 8B55F4                  mov edx, dword ptr [ebp-0C]
:0046EA70 3B55EC                  cmp edx, dword ptr [ebp-14]
:0046EA73 7F17                    jg 0046EA8C
:0046EA75 8B45F8                  mov eax, dword ptr [ebp-08]
:0046EA78 3B45E8                  cmp eax, dword ptr [ebp-18]
:0046EA7B 7C0F                    jl 0046EA8C
:0046EA7D 8B4DF8                  mov ecx, dword ptr [ebp-08]
:0046EA80 3B4DF0                  cmp ecx, dword ptr [ebp-10]
:0046EA83 7F07                    jg 0046EA8C
:0046EA85 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EA53(C), :0046EA6B(C), :0046EA73(C), :0046EA7B(C), :0046EA83(C)
|
:0046EA8C B9B04B4800              mov ecx, 00484BB0
:0046EA91 E84A7FFCFF              call 004369E0
:0046EA96 50                      push eax

* Reference To: USER32.IsWindowVisible, Ord:016Ah
                                  |
:0046EA97 FF1558D64B00            Call dword ptr [004BD658]
:0046EA9D 85C0                    test eax, eax
:0046EA9F 743C                    je 0046EADD
:0046EAA1 8D55E4                  lea edx, dword ptr [ebp-1C]
:0046EAA4 52                      push edx
:0046EAA5 B9B04B4800              mov ecx, 00484BB0
:0046EAAA E8317FFCFF              call 004369E0
:0046EAAF 50                      push eax

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:0046EAB0 FF15A4D64B00            Call dword ptr [004BD6A4]
:0046EAB6 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046EAB9 3B45E4                  cmp eax, dword ptr [ebp-1C]
:0046EABC 7C1F                    jl 0046EADD
:0046EABE 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046EAC1 3B4DEC                  cmp ecx, dword ptr [ebp-14]
:0046EAC4 7F17                    jg 0046EADD
:0046EAC6 8B55F8                  mov edx, dword ptr [ebp-08]
:0046EAC9 3B55E8                  cmp edx, dword ptr [ebp-18]
:0046EACC 7C0F                    jl 0046EADD
:0046EACE 8B45F8                  mov eax, dword ptr [ebp-08]
:0046EAD1 3B45F0                  cmp eax, dword ptr [ebp-10]
:0046EAD4 7F07                    jg 0046EADD
:0046EAD6 C745FC01000000          mov [ebp-04], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EA9F(C), :0046EABC(C), :0046EAC4(C), :0046EACC(C), :0046EAD4(C)
|
:0046EADD 8B45FC                  mov eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046E9AE(U)
|
:0046EAE0 8BE5                    mov esp, ebp
:0046EAE2 5D                      pop ebp
:0046EAE3 C3                      ret


:0046EAE4 CC                      int 03
:0046EAE5 CC                      int 03
:0046EAE6 CC                      int 03
:0046EAE7 CC                      int 03
:0046EAE8 CC                      int 03
:0046EAE9 CC                      int 03
:0046EAEA CC                      int 03
:0046EAEB CC                      int 03
:0046EAEC CC                      int 03
:0046EAED CC                      int 03
:0046EAEE CC                      int 03
:0046EAEF CC                      int 03

* Referenced by a CALL at Address:
|:0046ED6A   
|
:0046EAF0 55                      push ebp
:0046EAF1 8BEC                    mov ebp, esp
:0046EAF3 51                      push ecx
:0046EAF4 894DFC                  mov dword ptr [ebp-04], ecx
:0046EAF7 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EAFA C7401400000000          mov [eax+14], 00000000
:0046EB01 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EB04 C7411000000000          mov [ecx+10], 00000000
:0046EB0B 8B55FC                  mov edx, dword ptr [ebp-04]
:0046EB0E C7420C00000000          mov [edx+0C], 00000000
:0046EB15 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EB18 C7400800000000          mov [eax+08], 00000000
:0046EB1F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EB22 C70100000000            mov dword ptr [ecx], 00000000
:0046EB28 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EB2B 8BE5                    mov esp, ebp
:0046EB2D 5D                      pop ebp
:0046EB2E C3                      ret



* Referenced by a CALL at Address:
|:0046ED9E   
|
:0046EB2F 55                      push ebp
:0046EB30 8BEC                    mov ebp, esp
:0046EB32 51                      push ecx
:0046EB33 894DFC                  mov dword ptr [ebp-04], ecx
:0046EB36 8BE5                    mov esp, ebp
:0046EB38 5D                      pop ebp
:0046EB39 C3                      ret



* Referenced by a CALL at Address:
|:0046EE76   
|
:0046EB3A 55                      push ebp
:0046EB3B 8BEC                    mov ebp, esp
:0046EB3D 51                      push ecx
:0046EB3E 894DFC                  mov dword ptr [ebp-04], ecx
:0046EB41 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EB44 83C004                  add eax, 00000004
:0046EB47 50                      push eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0046EB48 6A04                    push 00000004
:0046EB4A 6A00                    push 00000000
:0046EB4C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046EB4F 51                      push ecx
:0046EB50 6A00                    push 00000000
:0046EB52 6A00                    push 00000000

* Reference To: KERNEL32.CreateThread, Ord:0043h
                                  |
:0046EB54 FF15B8D44B00            Call dword ptr [004BD4B8]
:0046EB5A 8B55FC                  mov edx, dword ptr [ebp-04]
:0046EB5D 8902                    mov dword ptr [edx], eax
:0046EB5F 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EB62 833800                  cmp dword ptr [eax], 00000000
:0046EB65 7507                    jne 0046EB6E
:0046EB67 E83603FCFF              call 0042EEA2
:0046EB6C EB16                    jmp 0046EB84

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EB65(C)
|
:0046EB6E 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046EB71 51                      push ecx
:0046EB72 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EB75 E810000000              call 0046EB8A
:0046EB7A 8B55FC                  mov edx, dword ptr [ebp-04]
:0046EB7D C7420800000000          mov [edx+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EB6C(U)
|
:0046EB84 8BE5                    mov esp, ebp
:0046EB86 5D                      pop ebp
:0046EB87 C20800                  ret 0008



* Referenced by a CALL at Address:
|:0046EB75   
|
:0046EB8A 55                      push ebp
:0046EB8B 8BEC                    mov ebp, esp
:0046EB8D 51                      push ecx
:0046EB8E 894DFC                  mov dword ptr [ebp-04], ecx
:0046EB91 8B4508                  mov eax, dword ptr [ebp+08]
:0046EB94 50                      push eax
:0046EB95 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EB98 8B11                    mov edx, dword ptr [ecx]
:0046EB9A 52                      push edx

* Reference To: KERNEL32.SetThreadPriority, Ord:0233h
                                  |
:0046EB9B FF15B4D44B00            Call dword ptr [004BD4B4]
:0046EBA1 85C0                    test eax, eax
:0046EBA3 7505                    jne 0046EBAA
:0046EBA5 E8F802FCFF              call 0042EEA2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EBA3(C)
|
:0046EBAA 8BE5                    mov esp, ebp
:0046EBAC 5D                      pop ebp
:0046EBAD C20400                  ret 0004



* Referenced by a CALL at Addresses:
|:0046EDB1   , :0046EE44   
|
:0046EBB0 55                      push ebp
:0046EBB1 8BEC                    mov ebp, esp
:0046EBB3 83EC08                  sub esp, 00000008
:0046EBB6 894DF8                  mov dword ptr [ebp-08], ecx
:0046EBB9 8B45F8                  mov eax, dword ptr [ebp-08]
:0046EBBC 833800                  cmp dword ptr [eax], 00000000
:0046EBBF 7507                    jne 0046EBC8
:0046EBC1 B801000000              mov eax, 00000001
:0046EBC6 EB22                    jmp 0046EBEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EBBF(C)
|
:0046EBC8 8D4DFC                  lea ecx, dword ptr [ebp-04]
:0046EBCB 51                      push ecx
:0046EBCC 8B55F8                  mov edx, dword ptr [ebp-08]
:0046EBCF 8B02                    mov eax, dword ptr [edx]
:0046EBD1 50                      push eax

* Reference To: KERNEL32.GetExitCodeThread, Ord:00E7h
                                  |
:0046EBD2 FF15A4D44B00            Call dword ptr [004BD4A4]
:0046EBD8 817DFC03010000          cmp dword ptr [ebp-04], 00000103
:0046EBDF 7504                    jne 0046EBE5
:0046EBE1 33C0                    xor eax, eax
:0046EBE3 EB05                    jmp 0046EBEA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EBDF(C)
|
:0046EBE5 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EBC6(U), :0046EBE3(U)
|
:0046EBEA 8BE5                    mov esp, ebp
:0046EBEC 5D                      pop ebp
:0046EBED C3                      ret


:0046EBEE 55                      push ebp
:0046EBEF 8BEC                    mov ebp, esp
:0046EBF1 51                      push ecx
:0046EBF2 894DFC                  mov dword ptr [ebp-04], ecx
:0046EBF5 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EBF8 833800                  cmp dword ptr [eax], 00000000
:0046EBFB 741F                    je 0046EC1C
:0046EBFD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EC00 83790800                cmp dword ptr [ecx+08], 00000000
:0046EC04 7416                    je 0046EC1C
:0046EC06 8B55FC                  mov edx, dword ptr [ebp-04]
:0046EC09 8B02                    mov eax, dword ptr [edx]
:0046EC0B 50                      push eax

* Reference To: KERNEL32.SuspendThread, Ord:0241h
                                  |
:0046EC0C FF15ACD44B00            Call dword ptr [004BD4AC]
:0046EC12 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EC15 C7410800000000          mov [ecx+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EBFB(C), :0046EC04(C)
|
:0046EC1C 8BE5                    mov esp, ebp
:0046EC1E 5D                      pop ebp
:0046EC1F C3                      ret



* Referenced by a CALL at Address:
|:0046EE7E   
|
:0046EC20 55                      push ebp
:0046EC21 8BEC                    mov ebp, esp
:0046EC23 51                      push ecx
:0046EC24 894DFC                  mov dword ptr [ebp-04], ecx
:0046EC27 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EC2A 833800                  cmp dword ptr [eax], 00000000
:0046EC2D 741F                    je 0046EC4E
:0046EC2F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EC32 83790800                cmp dword ptr [ecx+08], 00000000
:0046EC36 7516                    jne 0046EC4E
:0046EC38 8B55FC                  mov edx, dword ptr [ebp-04]
:0046EC3B 8B02                    mov eax, dword ptr [edx]
:0046EC3D 50                      push eax

* Reference To: KERNEL32.ResumeThread, Ord:01E2h
                                  |
:0046EC3E FF15A8D44B00            Call dword ptr [004BD4A8]
:0046EC44 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EC47 C7410801000000          mov [ecx+08], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EC2D(C), :0046EC36(C)
|
:0046EC4E 8BE5                    mov esp, ebp
:0046EC50 5D                      pop ebp
:0046EC51 C3                      ret


:0046EC52 55                      push ebp
:0046EC53 8BEC                    mov ebp, esp
:0046EC55 51                      push ecx
:0046EC56 894DFC                  mov dword ptr [ebp-04], ecx
:0046EC59 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EC5C 83780C00                cmp dword ptr [eax+0C], 00000000
:0046EC60 7427                    je 0046EC89
:0046EC62 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EC65 C7410800000000          mov [ecx+08], 00000000
:0046EC6C 8B55FC                  mov edx, dword ptr [ebp-04]
:0046EC6F C7420C00000000          mov [edx+0C], 00000000
:0046EC76 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EC79 C70000000000            mov dword ptr [eax], 00000000
:0046EC7F 6A00                    push 00000000

* Reference To: KERNEL32.ExitThread, Ord:006Ch
                                  |
:0046EC81 FF159CD44B00            Call dword ptr [004BD49C]
:0046EC87 EB2D                    jmp 0046ECB6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EC60(C)
|
:0046EC89 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EC8C 83791000                cmp dword ptr [ecx+10], 00000000
:0046EC90 7424                    je 0046ECB6
:0046EC92 8B55FC                  mov edx, dword ptr [ebp-04]
:0046EC95 C7421401000000          mov [edx+14], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ECAA(U)
|
:0046EC9C 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EC9F 83781000                cmp dword ptr [eax+10], 00000000
:0046ECA3 7407                    je 0046ECAC
:0046ECA5 E8AC870000              call 00477456
:0046ECAA EBF0                    jmp 0046EC9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ECA3(C)
|
:0046ECAC 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046ECAF C7411400000000          mov [ecx+14], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EC87(U), :0046EC90(C)
|
:0046ECB6 8BE5                    mov esp, ebp
:0046ECB8 5D                      pop ebp
:0046ECB9 C3                      ret



* Referenced by a CALL at Address:
|:0046ED13   
|
:0046ECBA 55                      push ebp
:0046ECBB 8BEC                    mov ebp, esp
:0046ECBD 51                      push ecx
:0046ECBE 894DFC                  mov dword ptr [ebp-04], ecx
:0046ECC1 8B45FC                  mov eax, dword ptr [ebp-04]
:0046ECC4 833800                  cmp dword ptr [eax], 00000000
:0046ECC7 7421                    je 0046ECEA
:0046ECC9 6A00                    push 00000000
:0046ECCB 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046ECCE 8B11                    mov edx, dword ptr [ecx]
:0046ECD0 52                      push edx

* Reference To: KERNEL32.TerminateThread, Ord:0247h
                                  |
:0046ECD1 FF15A0D44B00            Call dword ptr [004BD4A0]
:0046ECD7 8B45FC                  mov eax, dword ptr [ebp-04]
:0046ECDA C70000000000            mov dword ptr [eax], 00000000
:0046ECE0 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046ECE3 C7410800000000          mov [ecx+08], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ECC7(C)
|
:0046ECEA 8BE5                    mov esp, ebp
:0046ECEC 5D                      pop ebp
:0046ECED C3                      ret


:0046ECEE 55                      push ebp
:0046ECEF 8BEC                    mov ebp, esp
:0046ECF1 51                      push ecx
:0046ECF2 894DFC                  mov dword ptr [ebp-04], ecx
:0046ECF5 8B45FC                  mov eax, dword ptr [ebp-04]
:0046ECF8 833800                  cmp dword ptr [eax], 00000000
:0046ECFB 742A                    je 0046ED27
:0046ECFD 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046ED00 C7410C01000000          mov [ecx+0C], 00000001
:0046ED07 8B55FC                  mov edx, dword ptr [ebp-04]
:0046ED0A 837A0800                cmp dword ptr [edx+08], 00000000
:0046ED0E 7508                    jne 0046ED18
:0046ED10 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046ED13 E8A2FFFFFF              call 0046ECBA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046ED0E(C), :0046ED25(U)
|
:0046ED18 8B45FC                  mov eax, dword ptr [ebp-04]
:0046ED1B 833800                  cmp dword ptr [eax], 00000000
:0046ED1E 7407                    je 0046ED27
:0046ED20 E831870000              call 00477456
:0046ED25 EBF1                    jmp 0046ED18

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046ECFB(C), :0046ED1E(C)
|
:0046ED27 8BE5                    mov esp, ebp
:0046ED29 5D                      pop ebp
:0046ED2A C3                      ret


:0046ED2B 55                      push ebp
:0046ED2C 8BEC                    mov ebp, esp
:0046ED2E 51                      push ecx
:0046ED2F 894DFC                  mov dword ptr [ebp-04], ecx
:0046ED32 8B45FC                  mov eax, dword ptr [ebp-04]
:0046ED35 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046ED38 894810                  mov dword ptr [eax+10], ecx
:0046ED3B 8B55FC                  mov edx, dword ptr [ebp-04]
:0046ED3E 837A0800                cmp dword ptr [edx+08], 00000000
:0046ED42 7416                    je 0046ED5A
:0046ED44 837D0800                cmp dword ptr [ebp+08], 00000000
:0046ED48 7410                    je 0046ED5A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046ED58(U)
|
:0046ED4A 8B45FC                  mov eax, dword ptr [ebp-04]
:0046ED4D 83781400                cmp dword ptr [eax+14], 00000000
:0046ED51 7507                    jne 0046ED5A
:0046ED53 E8FE860000              call 00477456
:0046ED58 EBF0                    jmp 0046ED4A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046ED42(C), :0046ED48(C), :0046ED51(C)
|
:0046ED5A 8BE5                    mov esp, ebp
:0046ED5C 5D                      pop ebp
:0046ED5D C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046EEA5   
|
:0046ED60 55                      push ebp
:0046ED61 8BEC                    mov ebp, esp
:0046ED63 51                      push ecx
:0046ED64 894DFC                  mov dword ptr [ebp-04], ecx
:0046ED67 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046ED6A E881FDFFFF              call 0046EAF0
:0046ED6F 8B45FC                  mov eax, dword ptr [ebp-04]
:0046ED72 C7401800000000          mov [eax+18], 00000000
:0046ED79 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046ED7C C7411C00000000          mov [ecx+1C], 00000000
:0046ED83 8B55FC                  mov edx, dword ptr [ebp-04]
:0046ED86 C7422000000000          mov [edx+20], 00000000
:0046ED8D 8B45FC                  mov eax, dword ptr [ebp-04]
:0046ED90 8BE5                    mov esp, ebp
:0046ED92 5D                      pop ebp
:0046ED93 C3                      ret



* Referenced by a CALL at Address:
|:0046EEC6   
|
:0046ED94 55                      push ebp
:0046ED95 8BEC                    mov ebp, esp
:0046ED97 51                      push ecx
:0046ED98 894DFC                  mov dword ptr [ebp-04], ecx
:0046ED9B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046ED9E E88CFDFFFF              call 0046EB2F
:0046EDA3 8BE5                    mov esp, ebp
:0046EDA5 5D                      pop ebp
:0046EDA6 C3                      ret



* Referenced by a CALL at Address:
|:0045C972   
|
:0046EDA7 55                      push ebp
:0046EDA8 8BEC                    mov ebp, esp
:0046EDAA 51                      push ecx
:0046EDAB 894DFC                  mov dword ptr [ebp-04], ecx
:0046EDAE 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EDB1 E8FAFDFFFF              call 0046EBB0
:0046EDB6 8BE5                    mov esp, ebp
:0046EDB8 5D                      pop ebp
:0046EDB9 C3                      ret



* Referenced by a CALL at Address:
|:0046EF20   
|
:0046EDBA 55                      push ebp
:0046EDBB 8BEC                    mov ebp, esp
:0046EDBD 51                      push ecx
:0046EDBE 894DFC                  mov dword ptr [ebp-04], ecx
:0046EDC1 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EDC4 8B4018                  mov eax, dword ptr [eax+18]
:0046EDC7 8BE5                    mov esp, ebp
:0046EDC9 5D                      pop ebp
:0046EDCA C3                      ret


:0046EDCB 55                      push ebp
:0046EDCC 8BEC                    mov ebp, esp
:0046EDCE 51                      push ecx
:0046EDCF 894DFC                  mov dword ptr [ebp-04], ecx
:0046EDD2 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EDD5 8B401C                  mov eax, dword ptr [eax+1C]
:0046EDD8 8BE5                    mov esp, ebp
:0046EDDA 5D                      pop ebp
:0046EDDB C3                      ret



* Referenced by a CALL at Address:
|:0046EF2D   
|
:0046EDDC 55                      push ebp
:0046EDDD 8BEC                    mov ebp, esp
:0046EDDF 51                      push ecx
:0046EDE0 894DFC                  mov dword ptr [ebp-04], ecx
:0046EDE3 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EDE6 8B4020                  mov eax, dword ptr [eax+20]
:0046EDE9 8BE5                    mov esp, ebp
:0046EDEB 5D                      pop ebp
:0046EDEC C3                      ret



* Referenced by a CALL at Address:
|:0046EE5B   
|
:0046EDED 55                      push ebp
:0046EDEE 8BEC                    mov ebp, esp
:0046EDF0 51                      push ecx
:0046EDF1 894DFC                  mov dword ptr [ebp-04], ecx
:0046EDF4 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EDF7 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046EDFA 894818                  mov dword ptr [eax+18], ecx
:0046EDFD 8BE5                    mov esp, ebp
:0046EDFF 5D                      pop ebp
:0046EE00 C20400                  ret 0004


:0046EE03 55                      push ebp
:0046EE04 8BEC                    mov ebp, esp
:0046EE06 51                      push ecx
:0046EE07 894DFC                  mov dword ptr [ebp-04], ecx
:0046EE0A 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EE0D 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046EE10 89481C                  mov dword ptr [eax+1C], ecx
:0046EE13 8BE5                    mov esp, ebp
:0046EE15 5D                      pop ebp
:0046EE16 C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046EE67   
|
:0046EE19 55                      push ebp
:0046EE1A 8BEC                    mov ebp, esp
:0046EE1C 51                      push ecx
:0046EE1D 894DFC                  mov dword ptr [ebp-04], ecx
:0046EE20 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EE23 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046EE26 894820                  mov dword ptr [eax+20], ecx
:0046EE29 8BE5                    mov esp, ebp
:0046EE2B 5D                      pop ebp
:0046EE2C C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046EFA7   
|
:0046EE2F 55                      push ebp
:0046EE30 8BEC                    mov ebp, esp
:0046EE32 51                      push ecx
:0046EE33 894DFC                  mov dword ptr [ebp-04], ecx
:0046EE36 8BE5                    mov esp, ebp
:0046EE38 5D                      pop ebp
:0046EE39 C3                      ret



* Referenced by a CALL at Address:
|:0045C94C   
|
:0046EE3A 55                      push ebp
:0046EE3B 8BEC                    mov ebp, esp
:0046EE3D 51                      push ecx
:0046EE3E 894DFC                  mov dword ptr [ebp-04], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EE52(U)
|
:0046EE41 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EE44 E867FDFFFF              call 0046EBB0
:0046EE49 85C0                    test eax, eax
:0046EE4B 7507                    jne 0046EE54
:0046EE4D E804860000              call 00477456
:0046EE52 EBED                    jmp 0046EE41

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EE4B(C)
|
:0046EE54 8B4508                  mov eax, dword ptr [ebp+08]
:0046EE57 50                      push eax
:0046EE58 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EE5B E88DFFFFFF              call 0046EDED
:0046EE60 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046EE63 51                      push ecx
:0046EE64 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EE67 E8ADFFFFFF              call 0046EE19
:0046EE6C 6A01                    push 00000001
:0046EE6E 68CDEE4600              push 0046EECD
:0046EE73 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EE76 E8BFFCFFFF              call 0046EB3A
:0046EE7B 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046EE7E E89DFDFFFF              call 0046EC20
:0046EE83 B801000000              mov eax, 00000001
:0046EE88 8BE5                    mov esp, ebp
:0046EE8A 5D                      pop ebp
:0046EE8B C20800                  ret 0008


:0046EE8E 55                      push ebp
:0046EE8F 8BEC                    mov ebp, esp
:0046EE91 E807000000              call 0046EE9D
:0046EE96 E811000000              call 0046EEAC
:0046EE9B 5D                      pop ebp
:0046EE9C C3                      ret



* Referenced by a CALL at Address:
|:0046EE91   
|
:0046EE9D 55                      push ebp
:0046EE9E 8BEC                    mov ebp, esp
:0046EEA0 B9B0624B00              mov ecx, 004B62B0
:0046EEA5 E8B6FEFFFF              call 0046ED60
:0046EEAA 5D                      pop ebp
:0046EEAB C3                      ret



* Referenced by a CALL at Address:
|:0046EE96   
|
:0046EEAC 55                      push ebp
:0046EEAD 8BEC                    mov ebp, esp
:0046EEAF 68BEEE4600              push 0046EEBE
:0046EEB4 E8F7050000              call 0046F4B0
:0046EEB9 83C404                  add esp, 00000004
:0046EEBC 5D                      pop ebp
:0046EEBD C3                      ret


:0046EEBE 55                      push ebp
:0046EEBF 8BEC                    mov ebp, esp
:0046EEC1 B9B0624B00              mov ecx, 004B62B0
:0046EEC6 E8C9FEFFFF              call 0046ED94
:0046EECB 5D                      pop ebp
:0046EECC C3                      ret


:0046EECD 55                      push ebp
:0046EECE 8BEC                    mov ebp, esp
:0046EED0 51                      push ecx
:0046EED1 C745FC00000000          mov [ebp-04], 00000000
:0046EED8 E814000000              call 0046EEF1
:0046EEDD 85C0                    test eax, eax
:0046EEDF 7507                    jne 0046EEE8
:0046EEE1 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EEDF(C)
|
:0046EEE8 8B45FC                  mov eax, dword ptr [ebp-04]
:0046EEEB 8BE5                    mov esp, ebp
:0046EEED 5D                      pop ebp
:0046EEEE C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046EED8   
|
:0046EEF1 55                      push ebp
:0046EEF2 8BEC                    mov ebp, esp
:0046EEF4 6AFF                    push FFFFFFFF
:0046EEF6 68B99A4700              push 00479AB9
:0046EEFB 64A100000000            mov eax, dword ptr fs:[00000000]
:0046EF01 50                      push eax
:0046EF02 64892500000000          mov dword ptr fs:[00000000], esp
:0046EF09 83EC18                  sub esp, 00000018
:0046EF0C 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046EF0F E88C68F9FF              call 004057A0
:0046EF14 C745FC00000000          mov [ebp-04], 00000000
:0046EF1B B9B0624B00              mov ecx, 004B62B0
:0046EF20 E895FEFFFF              call 0046EDBA
:0046EF25 8945EC                  mov dword ptr [ebp-14], eax
:0046EF28 B9B0624B00              mov ecx, 004B62B0
:0046EF2D E8AAFEFFFF              call 0046EDDC
:0046EF32 8945F0                  mov dword ptr [ebp-10], eax
:0046EF35 6A00                    push 00000000
:0046EF37 8B45EC                  mov eax, dword ptr [ebp-14]
:0046EF3A 50                      push eax
:0046EF3B 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046EF3E E879E9F9FF              call 0040D8BC
:0046EF43 85C0                    test eax, eax
:0046EF45 751B                    jne 0046EF62
:0046EF47 C745E400000000          mov [ebp-1C], 00000000
:0046EF4E C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046EF55 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046EF58 E84CE9F9FF              call 0040D8A9
:0046EF5D 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046EF60 EB63                    jmp 0046EFC5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EF45(C)
|
:0046EF62 6800804300              push 00438000
:0046EF67 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046EF6A 51                      push ecx
:0046EF6B 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046EF6E E854EBF9FF              call 0040DAC7
:0046EF73 85C0                    test eax, eax
:0046EF75 7523                    jne 0046EF9A
:0046EF77 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046EF7A E8A6ECF9FF              call 0040DC25
:0046EF7F C745E000000000          mov [ebp-20], 00000000
:0046EF86 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046EF8D 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046EF90 E814E9F9FF              call 0040D8A9
:0046EF95 8B45E0                  mov eax, dword ptr [ebp-20]
:0046EF98 EB2B                    jmp 0046EFC5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046EF75(C)
|
:0046EF9A 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046EF9D E883ECF9FF              call 0040DC25
:0046EFA2 B9B0624B00              mov ecx, 004B62B0
:0046EFA7 E883FEFFFF              call 0046EE2F
:0046EFAC C745DC01000000          mov [ebp-24], 00000001
:0046EFB3 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046EFBA 8D4DE8                  lea ecx, dword ptr [ebp-18]
:0046EFBD E8E7E8F9FF              call 0040D8A9
:0046EFC2 8B45DC                  mov eax, dword ptr [ebp-24]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046EF60(U), :0046EF98(U)
|
:0046EFC5 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:0046EFC8 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046EFCF 8BE5                    mov esp, ebp
:0046EFD1 5D                      pop ebp
:0046EFD2 C3                      ret


:0046EFD3 CC                      int 03

* Referenced by a CALL at Address:
|:0040D2D2   
|

* Reference To: USER32.DdeClientTransaction, Ord:005Ch
                                  |
:0046EFD4 FF25E4D54B00            Jmp dword ptr [004BD5E4]
:0046EFDA CC                      int 03
:0046EFDB CC                      int 03
:0046EFDC CC                      int 03
:0046EFDD CC                      int 03
:0046EFDE CC                      int 03
:0046EFDF CC                      int 03

* Referenced by a CALL at Address:
|:0047050F   
|
:0046EFE0 55                      push ebp
:0046EFE1 8BEC                    mov ebp, esp
:0046EFE3 51                      push ecx
:0046EFE4 53                      push ebx
:0046EFE5 56                      push esi
:0046EFE6 57                      push edi
:0046EFE7 8B450C                  mov eax, dword ptr [ebp+0C]
:0046EFEA 83C00C                  add eax, 0000000C
:0046EFED 8945FC                  mov dword ptr [ebp-04], eax
:0046EFF0 648B1D00000000          mov ebx, dword ptr fs:[00000000]
:0046EFF7 8B03                    mov eax, dword ptr [ebx]
:0046EFF9 64A300000000            mov dword ptr fs:[00000000], eax
:0046EFFF 8B4508                  mov eax, dword ptr [ebp+08]
:0046F002 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046F005 8B63FC                  mov esp, dword ptr [ebx-04]
:0046F008 8B6DFC                  mov ebp, dword ptr [ebp-04]
:0046F00B FFE0                    jmp eax
:0046F00D 5F                      pop edi
:0046F00E 5E                      pop esi
:0046F00F 5B                      pop ebx
:0046F010 8BE5                    mov esp, ebp
:0046F012 5D                      pop ebp
:0046F013 C20800                  ret 0008


:0046F016 CC                      int 03
:0046F017 CC                      int 03
:0046F018 CC                      int 03
:0046F019 CC                      int 03
:0046F01A CC                      int 03
:0046F01B CC                      int 03
:0046F01C CC                      int 03
:0046F01D CC                      int 03
:0046F01E CC                      int 03
:0046F01F CC                      int 03

* Referenced by a CALL at Addresses:
|:00470850   , :0047086D   , :004708F3   
|
:0046F020 58                      pop eax
:0046F021 59                      pop ecx
:0046F022 870424                  xchg dword ptr [esp], eax
:0046F025 FFE0                    jmp eax
:0046F027 CC                      int 03
:0046F028 CC                      int 03
:0046F029 CC                      int 03
:0046F02A CC                      int 03
:0046F02B CC                      int 03
:0046F02C CC                      int 03
:0046F02D CC                      int 03
:0046F02E CC                      int 03
:0046F02F CC                      int 03

* Referenced by a CALL at Addresses:
|:0046F296   , :004704C1   
|
:0046F030 55                      push ebp
:0046F031 8BEC                    mov ebp, esp
:0046F033 83EC08                  sub esp, 00000008
:0046F036 53                      push ebx
:0046F037 56                      push esi
:0046F038 57                      push edi
:0046F039 64A100000000            mov eax, dword ptr fs:[00000000]
:0046F03F 8945F8                  mov dword ptr [ebp-08], eax

* Possible StringData Ref from Code Obj ->"EHUJd"
                                  |
:0046F042 C745FC5CF04600          mov [ebp-04], 0046F05C
:0046F049 6A00                    push 00000000
:0046F04B 8B450C                  mov eax, dword ptr [ebp+0C]
:0046F04E 50                      push eax
:0046F04F 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0046F052 51                      push ecx
:0046F053 8B5508                  mov edx, dword ptr [ebp+08]
:0046F056 52                      push edx

* Reference To: KERNEL32.RtlUnwind, Ord:01E5h
                                  |
:0046F057 E860A40000              Call 004794BC
:0046F05C 8B450C                  mov eax, dword ptr [ebp+0C]
:0046F05F 8B4804                  mov ecx, dword ptr [eax+04]
:0046F062 83E1FD                  and ecx, FFFFFFFD
:0046F065 8B550C                  mov edx, dword ptr [ebp+0C]
:0046F068 894A04                  mov dword ptr [edx+04], ecx
:0046F06B 64A100000000            mov eax, dword ptr fs:[00000000]
:0046F071 8B5DF8                  mov ebx, dword ptr [ebp-08]
:0046F074 8903                    mov dword ptr [ebx], eax
:0046F076 64891D00000000          mov dword ptr fs:[00000000], ebx
:0046F07D 5F                      pop edi
:0046F07E 5E                      pop esi
:0046F07F 5B                      pop ebx
:0046F080 8BE5                    mov esp, ebp
:0046F082 5D                      pop ebp
:0046F083 C20800                  ret 0008


:0046F086 CC                      int 03
:0046F087 CC                      int 03
:0046F088 CC                      int 03
:0046F089 CC                      int 03
:0046F08A CC                      int 03
:0046F08B CC                      int 03
:0046F08C CC                      int 03
:0046F08D CC                      int 03
:0046F08E CC                      int 03
:0046F08F CC                      int 03

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004794E1(U), :004794F7(U), :0047950D(U), :0047952E(U), :00479551(U)
|:0047956E(U), :00479581(U), :00479594(U), :004795AE(U), :004795CE(U)
|:004795E4(U), :004795F7(U), :0047960D(U), :00479623(U), :00479641(U)
|:00479661(U), :00479677(U), :00479691(U), :004796A7(U), :004796BD(U)
|:004796D3(U), :004796E9(U), :004796FF(U), :00479715(U), :0047972B(U)
|:00479741(U), :00479757(U), :0047976D(U), :00479783(U), :00479799(U)
|:004797AF(U), :004797DA(U), :004797ED(U), :0047981A(U), :00479831(U)
|:00479847(U), :0047985D(U), :00479881(U), :00479897(U), :004798AD(U)
|:004798D1(U), :004798E7(U), :004798FD(U), :00479913(U), :00479929(U)
|:0047993F(U), :00479955(U), :0047996B(U), :00479981(U), :004799A1(U)
|:004799B6(U), :004799CB(U), :004799E1(U), :004799F7(U), :00479A11(U)
|:00479A31(U), :00479A47(U), :00479A5D(U), :00479A7E(U), :00479AA1(U)
|:00479ABE(U)
|
:0046F090 55                      push ebp
:0046F091 8BEC                    mov ebp, esp
:0046F093 83EC04                  sub esp, 00000004
:0046F096 53                      push ebx
:0046F097 56                      push esi
:0046F098 57                      push edi
:0046F099 FC                      cld
:0046F09A 8945FC                  mov dword ptr [ebp-04], eax
:0046F09D 8B45FC                  mov eax, dword ptr [ebp-04]
:0046F0A0 8B4D14                  mov ecx, dword ptr [ebp+14]
:0046F0A3 8B5510                  mov edx, dword ptr [ebp+10]
:0046F0A6 6A00                    push 00000000
:0046F0A8 6A00                    push 00000000
:0046F0AA 6A00                    push 00000000
:0046F0AC 50                      push eax
:0046F0AD 8B450C                  mov eax, dword ptr [ebp+0C]
:0046F0B0 51                      push ecx
:0046F0B1 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046F0B4 52                      push edx
:0046F0B5 50                      push eax
:0046F0B6 51                      push ecx
:0046F0B7 E8A40E0000              call 0046FF60
:0046F0BC 83C420                  add esp, 00000020
:0046F0BF 894514                  mov dword ptr [ebp+14], eax
:0046F0C2 5F                      pop edi
:0046F0C3 5E                      pop esi
:0046F0C4 5B                      pop ebx
:0046F0C5 8B4514                  mov eax, dword ptr [ebp+14]
:0046F0C8 8BE5                    mov esp, ebp
:0046F0CA 5D                      pop ebp
:0046F0CB C3                      ret


:0046F0CC 90                      nop
:0046F0CD 90                      nop
:0046F0CE 90                      nop
:0046F0CF 90                      nop

* Referenced by a CALL at Address:
|:00470596   
|
:0046F0D0 55                      push ebp
:0046F0D1 8BEC                    mov ebp, esp
:0046F0D3 83EC14                  sub esp, 00000014
:0046F0D6 8B5514                  mov edx, dword ptr [ebp+14]
:0046F0D9 8B450C                  mov eax, dword ptr [ebp+0C]
:0046F0DC 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046F0DF 42                      inc edx
:0046F0E0 C745EC00000000          mov [ebp-14], 00000000
:0046F0E7 C745F030F14600          mov [ebp-10], 0046F130
:0046F0EE 8945F4                  mov dword ptr [ebp-0C], eax
:0046F0F1 894DF8                  mov dword ptr [ebp-08], ecx
:0046F0F4 8955FC                  mov dword ptr [ebp-04], edx
:0046F0F7 64A100000000            mov eax, dword ptr fs:[00000000]
:0046F0FD 8945EC                  mov dword ptr [ebp-14], eax
:0046F100 8D85ECFFFFFF            lea eax, dword ptr [ebp+FFFFFFEC]
:0046F106 64A300000000            mov dword ptr fs:[00000000], eax
:0046F10C 8B4518                  mov eax, dword ptr [ebp+18]
:0046F10F 50                      push eax
:0046F110 51                      push ecx
:0046F111 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046F114 51                      push ecx
:0046F115 E846180000              call 00470960
:0046F11A 8BC8                    mov ecx, eax
:0046F11C 8B45EC                  mov eax, dword ptr [ebp-14]
:0046F11F 64A300000000            mov dword ptr fs:[00000000], eax
:0046F125 8BC1                    mov eax, ecx
:0046F127 8BE5                    mov esp, ebp
:0046F129 5D                      pop ebp
:0046F12A C3                      ret


:0046F12B 90                      nop
:0046F12C 90                      nop
:0046F12D 90                      nop
:0046F12E 90                      nop
:0046F12F 90                      nop
:0046F130 55                      push ebp
:0046F131 8BEC                    mov ebp, esp
:0046F133 FC                      cld
:0046F134 8B450C                  mov eax, dword ptr [ebp+0C]
:0046F137 6A00                    push 00000000
:0046F139 50                      push eax
:0046F13A 8B4810                  mov ecx, dword ptr [eax+10]
:0046F13D 8B5008                  mov edx, dword ptr [eax+08]
:0046F140 51                      push ecx
:0046F141 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046F144 52                      push edx
:0046F145 8B500C                  mov edx, dword ptr [eax+0C]
:0046F148 8B4508                  mov eax, dword ptr [ebp+08]
:0046F14B 6A00                    push 00000000
:0046F14D 51                      push ecx
:0046F14E 52                      push edx
:0046F14F 50                      push eax
:0046F150 E80B0E0000              call 0046FF60
:0046F155 83C420                  add esp, 00000020
:0046F158 5D                      pop ebp
:0046F159 C3                      ret


:0046F15A 90                      nop
:0046F15B 90                      nop
:0046F15C 90                      nop
:0046F15D 90                      nop
:0046F15E 90                      nop
:0046F15F 90                      nop

* Referenced by a CALL at Address:
|:00470310   
|
:0046F160 55                      push ebp
:0046F161 8BEC                    mov ebp, esp
:0046F163 83EC34                  sub esp, 00000034
:0046F166 53                      push ebx
:0046F167 56                      push esi
:0046F168 57                      push edi
:0046F169 C745D800000000          mov [ebp-28], 00000000
:0046F170 C745DC30F24600          mov [ebp-24], 0046F230
:0046F177 8B4518                  mov eax, dword ptr [ebp+18]
:0046F17A 8945E0                  mov dword ptr [ebp-20], eax
:0046F17D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046F180 894DE4                  mov dword ptr [ebp-1C], ecx
:0046F183 8B551C                  mov edx, dword ptr [ebp+1C]
:0046F186 8955E8                  mov dword ptr [ebp-18], edx
:0046F189 8B4520                  mov eax, dword ptr [ebp+20]
:0046F18C 8945EC                  mov dword ptr [ebp-14], eax
:0046F18F C745F000000000          mov [ebp-10], 00000000
:0046F196 C745F400000000          mov [ebp-0C], 00000000
:0046F19D C745F800000000          mov [ebp-08], 00000000
:0046F1A4 C745FC00000000          mov [ebp-04], 00000000

* Possible StringData Ref from Code Obj ->"}"
                                  |
:0046F1AB C745F0FAF14600          mov [ebp-10], 0046F1FA
:0046F1B2 8965F4                  mov dword ptr [ebp-0C], esp
:0046F1B5 896DF8                  mov dword ptr [ebp-08], ebp
:0046F1B8 64A100000000            mov eax, dword ptr fs:[00000000]
:0046F1BE 8945D8                  mov dword ptr [ebp-28], eax
:0046F1C1 8D85D8FFFFFF            lea eax, dword ptr [ebp+FFFFFFD8]
:0046F1C7 64A300000000            mov dword ptr fs:[00000000], eax
:0046F1CD C745CC01000000          mov [ebp-34], 00000001
:0046F1D4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046F1D7 894DD0                  mov dword ptr [ebp-30], ecx
:0046F1DA 8B5510                  mov edx, dword ptr [ebp+10]
:0046F1DD 8955D4                  mov dword ptr [ebp-2C], edx
:0046F1E0 8D45D0                  lea eax, dword ptr [ebp-30]
:0046F1E3 50                      push eax
:0046F1E4 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046F1E7 8B11                    mov edx, dword ptr [ecx]
:0046F1E9 52                      push edx
:0046F1EA FF15F0624B00            call dword ptr [004B62F0]
:0046F1F0 83C408                  add esp, 00000008
:0046F1F3 C745CC00000000          mov [ebp-34], 00000000
:0046F1FA 837DFC00                cmp dword ptr [ebp-04], 00000000
:0046F1FE 7417                    je 0046F217
:0046F200 648B1D00000000          mov ebx, dword ptr fs:[00000000]
:0046F207 8B03                    mov eax, dword ptr [ebx]
:0046F209 8B5DD8                  mov ebx, dword ptr [ebp-28]
:0046F20C 8903                    mov dword ptr [ebx], eax
:0046F20E 64891D00000000          mov dword ptr fs:[00000000], ebx
:0046F215 EB09                    jmp 0046F220

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F1FE(C)
|
:0046F217 8B45D8                  mov eax, dword ptr [ebp-28]
:0046F21A 64A300000000            mov dword ptr fs:[00000000], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F215(U)
|
:0046F220 8B45CC                  mov eax, dword ptr [ebp-34]
:0046F223 5F                      pop edi
:0046F224 5E                      pop esi
:0046F225 5B                      pop ebx
:0046F226 8BE5                    mov esp, ebp
:0046F228 5D                      pop ebp
:0046F229 C3                      ret


:0046F22A CC                      int 03
:0046F22B CC                      int 03
:0046F22C CC                      int 03
:0046F22D CC                      int 03
:0046F22E CC                      int 03
:0046F22F CC                      int 03
:0046F230 55                      push ebp
:0046F231 8BEC                    mov ebp, esp
:0046F233 53                      push ebx
:0046F234 56                      push esi
:0046F235 57                      push edi
:0046F236 FC                      cld
:0046F237 8B4508                  mov eax, dword ptr [ebp+08]
:0046F23A 8B4804                  mov ecx, dword ptr [eax+04]
:0046F23D 83E166                  and ecx, 00000066
:0046F240 85C9                    test ecx, ecx
:0046F242 7411                    je 0046F255
:0046F244 8B550C                  mov edx, dword ptr [ebp+0C]
:0046F247 C7422401000000          mov [edx+24], 00000001
:0046F24E B801000000              mov eax, 00000001
:0046F253 EB57                    jmp 0046F2AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F242(C)
|
:0046F255 6A01                    push 00000001
:0046F257 8B450C                  mov eax, dword ptr [ebp+0C]
:0046F25A 8B4814                  mov ecx, dword ptr [eax+14]
:0046F25D 51                      push ecx
:0046F25E 8B550C                  mov edx, dword ptr [ebp+0C]
:0046F261 8B4210                  mov eax, dword ptr [edx+10]
:0046F264 50                      push eax
:0046F265 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046F268 8B5108                  mov edx, dword ptr [ecx+08]
:0046F26B 52                      push edx
:0046F26C 6A00                    push 00000000
:0046F26E 8B4510                  mov eax, dword ptr [ebp+10]
:0046F271 50                      push eax
:0046F272 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046F275 8B510C                  mov edx, dword ptr [ecx+0C]
:0046F278 52                      push edx
:0046F279 8B4508                  mov eax, dword ptr [ebp+08]
:0046F27C 50                      push eax
:0046F27D E8DE0C0000              call 0046FF60
:0046F282 83C420                  add esp, 00000020
:0046F285 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0046F288 83792400                cmp dword ptr [ecx+24], 00000000
:0046F28C 750D                    jne 0046F29B
:0046F28E 8B5508                  mov edx, dword ptr [ebp+08]
:0046F291 52                      push edx
:0046F292 8B450C                  mov eax, dword ptr [ebp+0C]
:0046F295 50                      push eax
:0046F296 E895FDFFFF              call 0046F030

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F28C(C)
|
:0046F29B 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046F29E 8B631C                  mov esp, dword ptr [ebx+1C]
:0046F2A1 8B6B20                  mov ebp, dword ptr [ebx+20]
:0046F2A4 FF6318                  jmp [ebx+18]
:0046F2A7 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F253(U)
|
:0046F2AC 5F                      pop edi
:0046F2AD 5E                      pop esi
:0046F2AE 5B                      pop ebx
:0046F2AF 5D                      pop ebp
:0046F2B0 C3                      ret


:0046F2B1 CC                      int 03
:0046F2B2 CC                      int 03
:0046F2B3 CC                      int 03
:0046F2B4 CC                      int 03
:0046F2B5 CC                      int 03
:0046F2B6 CC                      int 03
:0046F2B7 CC                      int 03
:0046F2B8 CC                      int 03
:0046F2B9 CC                      int 03
:0046F2BA CC                      int 03
:0046F2BB CC                      int 03
:0046F2BC CC                      int 03
:0046F2BD CC                      int 03
:0046F2BE CC                      int 03
:0046F2BF CC                      int 03

* Referenced by a CALL at Addresses:
|:00470106   , :00470331   
|
:0046F2C0 51                      push ecx
:0046F2C1 8B442408                mov eax, dword ptr [esp+08]
:0046F2C5 53                      push ebx
:0046F2C6 8B5C2410                mov ebx, dword ptr [esp+10]
:0046F2CA 55                      push ebp
:0046F2CB 8B4810                  mov ecx, dword ptr [eax+10]
:0046F2CE 56                      push esi
:0046F2CF 8B700C                  mov esi, dword ptr [eax+0C]
:0046F2D2 57                      push edi
:0046F2D3 85DB                    test ebx, ebx
:0046F2D5 894C2410                mov dword ptr [esp+10], ecx
:0046F2D9 8BEE                    mov ebp, esi
:0046F2DB 8BFE                    mov edi, esi
:0046F2DD 7C35                    jl 0046F314

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F30E(C)
|
:0046F2DF 83FEFF                  cmp esi, FFFFFFFF
:0046F2E2 7505                    jne 0046F2E9
:0046F2E4 E857170000              call 00470A40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F2E2(C)
|
:0046F2E9 8B442410                mov eax, dword ptr [esp+10]
:0046F2ED 4E                      dec esi
:0046F2EE 8B4C2420                mov ecx, dword ptr [esp+20]
:0046F2F2 8D14B6                  lea edx, dword ptr [esi+4*esi]
:0046F2F5 8D0490                  lea eax, dword ptr [eax+4*edx]
:0046F2F8 394804                  cmp dword ptr [eax+04], ecx
:0046F2FB 7D05                    jge 0046F302
:0046F2FD 3B4808                  cmp ecx, dword ptr [eax+08]
:0046F300 7E05                    jle 0046F307

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F2FB(C)
|
:0046F302 83FEFF                  cmp esi, FFFFFFFF
:0046F305 7505                    jne 0046F30C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F300(C)
|
:0046F307 8BEF                    mov ebp, edi
:0046F309 4B                      dec ebx
:0046F30A 8BFE                    mov edi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F305(C)
|
:0046F30C 85DB                    test ebx, ebx
:0046F30E 7DCF                    jge 0046F2DF
:0046F310 8B442418                mov eax, dword ptr [esp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F2DD(C)
|
:0046F314 8B4C2424                mov ecx, dword ptr [esp+24]
:0046F318 8B542428                mov edx, dword ptr [esp+28]
:0046F31C 46                      inc esi
:0046F31D 8931                    mov dword ptr [ecx], esi
:0046F31F 892A                    mov dword ptr [edx], ebp
:0046F321 3B680C                  cmp ebp, dword ptr [eax+0C]
:0046F324 7704                    ja 0046F32A
:0046F326 3BF5                    cmp esi, ebp
:0046F328 7605                    jbe 0046F32F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F324(C)
|
:0046F32A E811170000              call 00470A40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F328(C)
|
:0046F32F 8B4C2410                mov ecx, dword ptr [esp+10]
:0046F333 8D04B6                  lea eax, dword ptr [esi+4*esi]
:0046F336 5F                      pop edi
:0046F337 5E                      pop esi
:0046F338 5D                      pop ebp
:0046F339 8D0481                  lea eax, dword ptr [ecx+4*eax]
:0046F33C 5B                      pop ebx
:0046F33D 59                      pop ecx
:0046F33E C3                      ret


:0046F33F 90                      nop

* Referenced by a CALL at Address:
|:00471532   
|
:0046F340 55                      push ebp
:0046F341 8BEC                    mov ebp, esp
:0046F343 53                      push ebx
:0046F344 56                      push esi
:0046F345 57                      push edi
:0046F346 55                      push ebp
:0046F347 6A00                    push 00000000
:0046F349 6A00                    push 00000000

* Possible StringData Ref from Code Obj ->"]_^[]ËL$A"
                                  |
:0046F34B 6858F34600              push 0046F358
:0046F350 FF7508                  push [ebp+08]

* Reference To: KERNEL32.RtlUnwind, Ord:01E5h
                                  |
:0046F353 E864A10000              Call 004794BC
:0046F358 5D                      pop ebp
:0046F359 5F                      pop edi
:0046F35A 5E                      pop esi
:0046F35B 5B                      pop ebx
:0046F35C 8BE5                    mov esp, ebp
:0046F35E 5D                      pop ebp
:0046F35F C3                      ret


:0046F360 8B4C2404                mov ecx, dword ptr [esp+04]

* Possible Reference to String Resource ID=00006: ""
                                  |
:0046F364 F7410406000000          test [ecx+04], 00000006
:0046F36B B801000000              mov eax, 00000001
:0046F370 740F                    je 0046F381
:0046F372 8B442408                mov eax, dword ptr [esp+08]
:0046F376 8B542410                mov edx, dword ptr [esp+10]
:0046F37A 8902                    mov dword ptr [edx], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046F37C B803000000              mov eax, 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F370(C)
|
:0046F381 C3                      ret

* Referenced by a CALL at Addresses:
|:004705E6   , :0047153F   , :0047157F   , :004715A4   
|
:0046F382 53                      push ebx
:0046F383 56                      push esi
:0046F384 57                      push edi
:0046F385 8B442410                mov eax, dword ptr [esp+10]
:0046F389 50                      push eax
:0046F38A 6AFE                    push FFFFFFFE
:0046F38C 6860F34600              push 0046F360
:0046F391 64FF3500000000          push dword ptr fs:[00000000]
:0046F398 64892500000000          mov dword ptr fs:[00000000], esp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F3DA(U)
|
:0046F39F 8B442420                mov eax, dword ptr [esp+20]
:0046F3A3 8B5808                  mov ebx, dword ptr [eax+08]
:0046F3A6 8B700C                  mov esi, dword ptr [eax+0C]
:0046F3A9 83FEFF                  cmp esi, FFFFFFFF
:0046F3AC 742E                    je 0046F3DC
:0046F3AE 3B742424                cmp esi, dword ptr [esp+24]
:0046F3B2 7428                    je 0046F3DC
:0046F3B4 8D3476                  lea esi, dword ptr [esi+2*esi]
:0046F3B7 8B0CB3                  mov ecx, dword ptr [ebx+4*esi]
:0046F3BA 894C2408                mov dword ptr [esp+08], ecx
:0046F3BE 89480C                  mov dword ptr [eax+0C], ecx
:0046F3C1 837CB30400              cmp dword ptr [ebx+4*esi+04], 00000000
:0046F3C6 7512                    jne 0046F3DA
:0046F3C8 6801010000              push 00000101
:0046F3CD 8B44B308                mov eax, dword ptr [ebx+4*esi+08]
:0046F3D1 E840000000              call 0046F416
:0046F3D6 FF54B308                call [ebx+4*esi+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F3C6(C)
|
:0046F3DA EBC3                    jmp 0046F39F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F3AC(C), :0046F3B2(C)
|
:0046F3DC 648F0500000000          pop dword ptr fs:[00000000]
:0046F3E3 83C40C                  add esp, 0000000C
:0046F3E6 5F                      pop edi
:0046F3E7 5E                      pop esi
:0046F3E8 5B                      pop ebx
:0046F3E9 C3                      ret



* Referenced by a CALL at Address:
|:00470644   
|
:0046F3EA 33C0                    xor eax, eax
:0046F3EC 648B0D00000000          mov ecx, dword ptr fs:[00000000]
:0046F3F3 81790460F34600          cmp dword ptr [ecx+04], 0046F360
:0046F3FA 7510                    jne 0046F40C
:0046F3FC 8B510C                  mov edx, dword ptr [ecx+0C]
:0046F3FF 8B520C                  mov edx, dword ptr [edx+0C]
:0046F402 395108                  cmp dword ptr [ecx+08], edx
:0046F405 7505                    jne 0046F40C
:0046F407 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F3FA(C), :0046F405(C)
|
:0046F40C C3                      ret

* Referenced by a CALL at Addresses:
|:0047097E   , :004709A0   
|
:0046F40D 53                      push ebx
:0046F40E 51                      push ecx

* Possible StringData Ref from Data Obj ->" "
                                  |
:0046F40F BBB4234800              mov ebx, 004823B4
:0046F414 EB0A                    jmp 0046F420

* Referenced by a CALL at Addresses:
|:0046F3D1   , :00471550   
|
:0046F416 53                      push ebx
:0046F417 51                      push ecx

* Possible StringData Ref from Data Obj ->" "
                                  |
:0046F418 BBB4234800              mov ebx, 004823B4
:0046F41D 8B4D08                  mov ecx, dword ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F414(U)
|
:0046F420 894B08                  mov dword ptr [ebx+08], ecx
:0046F423 894304                  mov dword ptr [ebx+04], eax
:0046F426 896B0C                  mov dword ptr [ebx+0C], ebp
:0046F429 59                      pop ecx
:0046F42A 5B                      pop ebx
:0046F42B C20400                  ret 0004


:0046F42E CC                      int 03
:0046F42F CC                      int 03

* Referenced by a CALL at Address:
|:0046F4B5   
|
:0046F430 A1E8BD4B00              mov eax, dword ptr [004BBDE8]
:0046F435 56                      push esi
:0046F436 50                      push eax
:0046F437 E874190000              call 00470DB0
:0046F43C 8B0DE4BD4B00            mov ecx, dword ptr [004BBDE4]
:0046F442 8B15E8BD4B00            mov edx, dword ptr [004BBDE8]
:0046F448 8BF1                    mov esi, ecx
:0046F44A 83C404                  add esp, 00000004
:0046F44D 2BF2                    sub esi, edx
:0046F44F 83C604                  add esi, 00000004
:0046F452 3BC6                    cmp eax, esi
:0046F454 7341                    jnb 0046F497
:0046F456 52                      push edx
:0046F457 E854190000              call 00470DB0
:0046F45C 8B0DE8BD4B00            mov ecx, dword ptr [004BBDE8]
:0046F462 83C404                  add esp, 00000004
:0046F465 83C010                  add eax, 00000010
:0046F468 50                      push eax
:0046F469 51                      push ecx
:0046F46A E861160000              call 00470AD0
:0046F46F 83C408                  add esp, 00000008
:0046F472 85C0                    test eax, eax
:0046F474 7502                    jne 0046F478
:0046F476 5E                      pop esi
:0046F477 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F474(C)
|
:0046F478 8B15E4BD4B00            mov edx, dword ptr [004BBDE4]
:0046F47E 8B35E8BD4B00            mov esi, dword ptr [004BBDE8]
:0046F484 2BD6                    sub edx, esi
:0046F486 A3E8BD4B00              mov dword ptr [004BBDE8], eax
:0046F48B C1FA02                  sar edx, 02
:0046F48E 8D0C90                  lea ecx, dword ptr [eax+4*edx]
:0046F491 890DE4BD4B00            mov dword ptr [004BBDE4], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F454(C)
|
:0046F497 8B442408                mov eax, dword ptr [esp+08]
:0046F49B 5E                      pop esi
:0046F49C 8901                    mov dword ptr [ecx], eax
:0046F49E 8B0DE4BD4B00            mov ecx, dword ptr [004BBDE4]
:0046F4A4 83C104                  add ecx, 00000004
:0046F4A7 890DE4BD4B00            mov dword ptr [004BBDE4], ecx
:0046F4AD C3                      ret


:0046F4AE 90                      nop
:0046F4AF 90                      nop

* Referenced by a CALL at Addresses:
|:004054B8   , :00406CB6   , :00410676   , :004106B5   , :00412486   
|:004197D6   , :0041A5A4   , :0041A5EC   , :0041A63C   , :0041F9DA   
|:0042E4C7   , :0042E520   , :0042E576   , :0042E5CC   , :0042E614   
|:0042E664   , :0042E6C0   , :0042E719   , :0042E85B   , :0042E89A   
|:0042E8D9   , :00431F94   , :00442046   , :004449A6   , :00449DA6   
|:00449DF2   , :0044CC42   , :0044CD5C   , :0044CED1   , :0044F920   
|:0045992E   , :0045996D   , :004599AC   , :0045ACF6   , :0045C176   
|:00466636   , :00466675   , :00469216   , :00469255   , :0046EEB4   
|
:0046F4B0 8B442404                mov eax, dword ptr [esp+04]
:0046F4B4 50                      push eax
:0046F4B5 E876FFFFFF              call 0046F430
:0046F4BA 83C404                  add esp, 00000004
:0046F4BD F7D8                    neg eax
:0046F4BF 1BC0                    sbb eax, eax
:0046F4C1 F7D8                    neg eax
:0046F4C3 48                      dec eax
:0046F4C4 C3                      ret


:0046F4C5 90                      nop
:0046F4C6 90                      nop
:0046F4C7 90                      nop
:0046F4C8 90                      nop
:0046F4C9 90                      nop
:0046F4CA 90                      nop
:0046F4CB 90                      nop
:0046F4CC 90                      nop
:0046F4CD 90                      nop
:0046F4CE 90                      nop
:0046F4CF 90                      nop
:0046F4D0 6880000000              push 00000080
:0046F4D5 E816190000              call 00470DF0
:0046F4DA 83C404                  add esp, 00000004
:0046F4DD A3E8BD4B00              mov dword ptr [004BBDE8], eax
:0046F4E2 85C0                    test eax, eax
:0046F4E4 750F                    jne 0046F4F5
:0046F4E6 6A18                    push 00000018
:0046F4E8 E8430A0000              call 0046FF30
:0046F4ED A1E8BD4B00              mov eax, dword ptr [004BBDE8]
:0046F4F2 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F4E4(C)
|
:0046F4F5 C70000000000            mov dword ptr [eax], 00000000
:0046F4FB A1E8BD4B00              mov eax, dword ptr [004BBDE8]
:0046F500 A3E4BD4B00              mov dword ptr [004BBDE4], eax
:0046F505 C3                      ret


:0046F506 90                      nop
:0046F507 90                      nop
:0046F508 90                      nop
:0046F509 90                      nop
:0046F50A 90                      nop
:0046F50B 90                      nop
:0046F50C 90                      nop
:0046F50D 90                      nop
:0046F50E 90                      nop
:0046F50F 90                      nop

* Referenced by a CALL at Addresses:
|:0040C7FE   , :0040C815   , :0040C82A   , :0040CDA1   , :0040CDB8   
|:0040CE45   , :0040CEC2   , :0040D160   , :0045ABBD   , :004799AA   
|:004799BF   
|
:0046F510 8B442404                mov eax, dword ptr [esp+04]
:0046F514 50                      push eax
:0046F515 E886190000              call 00470EA0
:0046F51A 83C404                  add esp, 00000004
:0046F51D C3                      ret


:0046F51E 90                      nop
:0046F51F 90                      nop

* Referenced by a CALL at Addresses:
|:004090B4   , :0042005C   , :00424355   , :0042774F   , :004289FF   
|:0045BD0D   , :0046D6B1   
|
:0046F520 51                      push ecx
:0046F521 3D00100000              cmp eax, 00001000
:0046F526 8D4C2408                lea ecx, dword ptr [esp+08]
:0046F52A 7214                    jb 0046F540

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F53E(C)
|
:0046F52C 81E900100000            sub ecx, 00001000
:0046F532 2D00100000              sub eax, 00001000
:0046F537 8501                    test dword ptr [ecx], eax
:0046F539 3D00100000              cmp eax, 00001000
:0046F53E 73EC                    jnb 0046F52C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F52A(C)
|
:0046F540 2BC8                    sub ecx, eax
:0046F542 8BC4                    mov eax, esp
:0046F544 8501                    test dword ptr [ecx], eax
:0046F546 8BE1                    mov esp, ecx
:0046F548 8B08                    mov ecx, dword ptr [eax]
:0046F54A 8B4004                  mov eax, dword ptr [eax+04]
:0046F54D 50                      push eax
:0046F54E C3                      ret


:0046F54F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040C017   , :0040CDD3   , :0040CE15   , :0040D308   , :00459A85   
|:00459B9E   
|
:0046F550 8B442404                mov eax, dword ptr [esp+04]
:0046F554 6A01                    push 00000001
:0046F556 50                      push eax
:0046F557 E8B4180000              call 00470E10
:0046F55C 83C408                  add esp, 00000008
:0046F55F C3                      ret



* Referenced by a CALL at Addresses:
|:0040CF37   , :0040CF61   , :0040D332   , :004255D0   , :004258A9   
|:00425FA9   , :004277DD   , :00428A21   , :00428A50   , :00428A75   
|:00428D90   , :004290EB   , :00429187   , :0045F2B6   , :00475EE3   
|:00477FF3   , :0047813E   
|
:0046F560 55                      push ebp
:0046F561 8BEC                    mov ebp, esp
:0046F563 57                      push edi
:0046F564 56                      push esi
:0046F565 8B750C                  mov esi, dword ptr [ebp+0C]
:0046F568 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046F56B 8B7D08                  mov edi, dword ptr [ebp+08]
:0046F56E 8BC1                    mov eax, ecx
:0046F570 8BD1                    mov edx, ecx
:0046F572 03C6                    add eax, esi
:0046F574 3BFE                    cmp edi, esi
:0046F576 7608                    jbe 0046F580
:0046F578 3BF8                    cmp edi, eax
:0046F57A 0F8278010000            jb 0046F6F8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F576(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046F580 F7C703000000            test edi, 00000003
:0046F586 7514                    jne 0046F59C
:0046F588 C1E902                  shr ecx, 02
:0046F58B 83E203                  and edx, 00000003
:0046F58E 83F908                  cmp ecx, 00000008
:0046F591 7229                    jb 0046F5BC
:0046F593 F3                      repz
:0046F594 A5                      movsd
:0046F595 FF2495A8F64600          jmp dword ptr [4*edx+0046F6A8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F586(C)
|
:0046F59C 8BC7                    mov eax, edi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046F59E BA03000000              mov edx, 00000003
:0046F5A3 83E904                  sub ecx, 00000004
:0046F5A6 720C                    jb 0046F5B4
:0046F5A8 83E003                  and eax, 00000003
:0046F5AB 03C8                    add ecx, eax
:0046F5AD FF2485C0F54600          jmp dword ptr [4*eax+0046F5C0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F5A6(C)
|
:0046F5B4 FF248DB8F64600          jmp dword ptr [4*ecx+0046F6B8]
:0046F5BB 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F591(C), :0046F5EE(C), :0046F614(C), :0046F62E(C)
|
:0046F5BC FF248D3CF64600          jmp dword ptr [4*ecx+0046F63C]
:0046F5C3 90                      nop

:0046F5C4 D0F54600                DWORD 0046F5D0
:0046F5C8 FCF54600                DWORD 0046F5FC
:0046F5CC 20F64600                DWORD 0046F620


:0046F5D0 23D1                    and edx, ecx
:0046F5D2 8A06                    mov al, byte ptr [esi]
:0046F5D4 8807                    mov byte ptr [edi], al
:0046F5D6 8A4601                  mov al, byte ptr [esi+01]
:0046F5D9 884701                  mov byte ptr [edi+01], al
:0046F5DC 8A4602                  mov al, byte ptr [esi+02]
:0046F5DF C1E902                  shr ecx, 02
:0046F5E2 884702                  mov byte ptr [edi+02], al
:0046F5E5 83C603                  add esi, 00000003
:0046F5E8 83C703                  add edi, 00000003
:0046F5EB 83F908                  cmp ecx, 00000008
:0046F5EE 72CC                    jb 0046F5BC
:0046F5F0 F3                      repz
:0046F5F1 A5                      movsd
:0046F5F2 FF2495A8F64600          jmp dword ptr [4*edx+0046F6A8]
:0046F5F9 2E8BC0                  mov eax, eax
:0046F5FC 23D1                    and edx, ecx
:0046F5FE 8A06                    mov al, byte ptr [esi]
:0046F600 8807                    mov byte ptr [edi], al
:0046F602 8A4601                  mov al, byte ptr [esi+01]
:0046F605 C1E902                  shr ecx, 02
:0046F608 884701                  mov byte ptr [edi+01], al
:0046F60B 83C602                  add esi, 00000002
:0046F60E 83C702                  add edi, 00000002
:0046F611 83F908                  cmp ecx, 00000008
:0046F614 72A6                    jb 0046F5BC
:0046F616 F3                      repz
:0046F617 A5                      movsd
:0046F618 FF2495A8F64600          jmp dword ptr [4*edx+0046F6A8]
:0046F61F 90                      nop
:0046F620 23D1                    and edx, ecx
:0046F622 8A06                    mov al, byte ptr [esi]
:0046F624 8807                    mov byte ptr [edi], al
:0046F626 46                      inc esi
:0046F627 C1E902                  shr ecx, 02
:0046F62A 47                      inc edi
:0046F62B 83F908                  cmp ecx, 00000008
:0046F62E 728C                    jb 0046F5BC
:0046F630 F3                      repz
:0046F631 A5                      movsd
:0046F632 FF2495A8F64600          jmp dword ptr [4*edx+0046F6A8]
:0046F639 2E8BC0                  mov eax, eax

:0046F63C 9FF64600                DWORD 0046F69F
:0046F640 8CF64600                DWORD 0046F68C
:0046F644 84F64600                DWORD 0046F684
:0046F648 7CF64600                DWORD 0046F67C
:0046F64C 74F64600                DWORD 0046F674
:0046F650 6CF64600                DWORD 0046F66C
:0046F654 64F64600                DWORD 0046F664
:0046F658 5CF64600                DWORD 0046F65C


:0046F65C 8B448EE4                mov eax, dword ptr [esi+4*ecx-1C]
:0046F660 89448FE4                mov dword ptr [edi+4*ecx-1C], eax
:0046F664 8B448EE8                mov eax, dword ptr [esi+4*ecx-18]
:0046F668 89448FE8                mov dword ptr [edi+4*ecx-18], eax
:0046F66C 8B448EEC                mov eax, dword ptr [esi+4*ecx-14]
:0046F670 89448FEC                mov dword ptr [edi+4*ecx-14], eax
:0046F674 8B448EF0                mov eax, dword ptr [esi+4*ecx-10]
:0046F678 89448FF0                mov dword ptr [edi+4*ecx-10], eax
:0046F67C 8B448EF4                mov eax, dword ptr [esi+4*ecx-0C]
:0046F680 89448FF4                mov dword ptr [edi+4*ecx-0C], eax
:0046F684 8B448EF8                mov eax, dword ptr [esi+4*ecx-08]
:0046F688 89448FF8                mov dword ptr [edi+4*ecx-08], eax
:0046F68C 8B448EFC                mov eax, dword ptr [esi+4*ecx-04]
:0046F690 89448FFC                mov dword ptr [edi+4*ecx-04], eax
:0046F694 8D048D00000000          lea eax, dword ptr [4*ecx+00000000]
:0046F69B 03F0                    add esi, eax
:0046F69D 03F8                    add edi, eax
:0046F69F FF2495A8F64600          jmp dword ptr [4*edx+0046F6A8]
:0046F6A6 8BC0                    mov eax, eax

:0046F6A8 B8F64600                DWORD 0046F6B8
:0046F6AC C0F64600                DWORD 0046F6C0
:0046F6B0 CCF64600                DWORD 0046F6CC
:0046F6B4 E0F64600                DWORD 0046F6E0


:0046F6B8 8B4508                  mov eax, dword ptr [ebp+08]
:0046F6BB 5E                      pop esi
:0046F6BC 5F                      pop edi
:0046F6BD C9                      leave
:0046F6BE C3                      ret


:0046F6BF 90                      nop
:0046F6C0 8A06                    mov al, byte ptr [esi]
:0046F6C2 8807                    mov byte ptr [edi], al
:0046F6C4 8B4508                  mov eax, dword ptr [ebp+08]
:0046F6C7 5E                      pop esi
:0046F6C8 5F                      pop edi
:0046F6C9 C9                      leave
:0046F6CA C3                      ret


:0046F6CB 90                      nop
:0046F6CC 8A06                    mov al, byte ptr [esi]
:0046F6CE 8807                    mov byte ptr [edi], al
:0046F6D0 8A4601                  mov al, byte ptr [esi+01]
:0046F6D3 884701                  mov byte ptr [edi+01], al
:0046F6D6 8B4508                  mov eax, dword ptr [ebp+08]
:0046F6D9 5E                      pop esi
:0046F6DA 5F                      pop edi
:0046F6DB C9                      leave
:0046F6DC C3                      ret


:0046F6DD 2E8BC0                  mov eax, eax
:0046F6E0 8A06                    mov al, byte ptr [esi]
:0046F6E2 8807                    mov byte ptr [edi], al
:0046F6E4 8A4601                  mov al, byte ptr [esi+01]
:0046F6E7 884701                  mov byte ptr [edi+01], al
:0046F6EA 8A4602                  mov al, byte ptr [esi+02]
:0046F6ED 884702                  mov byte ptr [edi+02], al
:0046F6F0 8B4508                  mov eax, dword ptr [ebp+08]
:0046F6F3 5E                      pop esi
:0046F6F4 5F                      pop edi
:0046F6F5 C9                      leave
:0046F6F6 C3                      ret


:0046F6F7 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F57A(C)
|
:0046F6F8 8D7431FC                lea esi, dword ptr [ecx+esi-04]
:0046F6FC 8D7C39FC                lea edi, dword ptr [ecx+edi-04]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046F700 F7C703000000            test edi, 00000003
:0046F706 7524                    jne 0046F72C
:0046F708 C1E902                  shr ecx, 02
:0046F70B 83E203                  and edx, 00000003
:0046F70E 83F908                  cmp ecx, 00000008
:0046F711 720D                    jb 0046F720
:0046F713 FD                      std
:0046F714 F3                      repz
:0046F715 A5                      movsd
:0046F716 FC                      cld
:0046F717 FF249540F84600          jmp dword ptr [4*edx+0046F840]
:0046F71E 8BC0                    mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F711(C), :0046F792(C), :0046F7C0(C)
|
:0046F720 F7D9                    neg ecx
:0046F722 FF248DF0F74600          jmp dword ptr [4*ecx+0046F7F0]
:0046F729 2E8BC0                  mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F706(C)
|
:0046F72C 8BC7                    mov eax, edi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046F72E BA03000000              mov edx, 00000003
:0046F733 83F904                  cmp ecx, 00000004
:0046F736 720C                    jb 0046F744
:0046F738 83E003                  and eax, 00000003
:0046F73B 2BC8                    sub ecx, eax
:0046F73D FF248548F74600          jmp dword ptr [4*eax+0046F748]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F736(C)
|
:0046F744 FF248D40F84600          jmp dword ptr [4*ecx+0046F840]
:0046F74B 90                      nop

:0046F74C 58F74600                DWORD 0046F758
:0046F750 78F74600                DWORD 0046F778
:0046F754 A0F74600                DWORD 0046F7A0


:0046F758 8A4603                  mov al, byte ptr [esi+03]
:0046F75B 23D1                    and edx, ecx
:0046F75D 884703                  mov byte ptr [edi+03], al
:0046F760 4E                      dec esi
:0046F761 C1E902                  shr ecx, 02
:0046F764 4F                      dec edi
:0046F765 83F908                  cmp ecx, 00000008
:0046F768 72B6                    jb 0046F720
:0046F76A FD                      std
:0046F76B F3                      repz
:0046F76C A5                      movsd
:0046F76D FC                      cld
:0046F76E FF249540F84600          jmp dword ptr [4*edx+0046F840]
:0046F775 2E8BC0                  mov eax, eax
:0046F778 8A4603                  mov al, byte ptr [esi+03]
:0046F77B 23D1                    and edx, ecx
:0046F77D 884703                  mov byte ptr [edi+03], al
:0046F780 8A4602                  mov al, byte ptr [esi+02]
:0046F783 C1E902                  shr ecx, 02
:0046F786 884702                  mov byte ptr [edi+02], al
:0046F789 83EE02                  sub esi, 00000002
:0046F78C 83EF02                  sub edi, 00000002
:0046F78F 83F908                  cmp ecx, 00000008
:0046F792 728C                    jb 0046F720
:0046F794 FD                      std
:0046F795 F3                      repz
:0046F796 A5                      movsd
:0046F797 FC                      cld
:0046F798 FF249540F84600          jmp dword ptr [4*edx+0046F840]
:0046F79F 90                      nop
:0046F7A0 8A4603                  mov al, byte ptr [esi+03]
:0046F7A3 23D1                    and edx, ecx
:0046F7A5 884703                  mov byte ptr [edi+03], al
:0046F7A8 8A4602                  mov al, byte ptr [esi+02]
:0046F7AB 884702                  mov byte ptr [edi+02], al
:0046F7AE 8A4601                  mov al, byte ptr [esi+01]
:0046F7B1 C1E902                  shr ecx, 02
:0046F7B4 884701                  mov byte ptr [edi+01], al
:0046F7B7 83EE03                  sub esi, 00000003
:0046F7BA 83EF03                  sub edi, 00000003
:0046F7BD 83F908                  cmp ecx, 00000008
:0046F7C0 0F825AFFFFFF            jb 0046F720
:0046F7C6 FD                      std
:0046F7C7 F3                      repz
:0046F7C8 A5                      movsd
:0046F7C9 FC                      cld
:0046F7CA FF249540F84600          jmp dword ptr [4*edx+0046F840]
:0046F7D1 2E8BC0                  mov eax, eax

:0046F7D4 F4F74600                DWORD 0046F7F4
:0046F7D8 FCF74600                DWORD 0046F7FC
:0046F7DC 04F84600                DWORD 0046F804
:0046F7E0 0CF84600                DWORD 0046F80C
:0046F7E4 14F84600                DWORD 0046F814
:0046F7E8 1CF84600                DWORD 0046F81C
:0046F7EC 24F84600                DWORD 0046F824
:0046F7F0 37F84600                DWORD 0046F837


:0046F7F4 8B448E1C                mov eax, dword ptr [esi+4*ecx+1C]
:0046F7F8 89448F1C                mov dword ptr [edi+4*ecx+1C], eax
:0046F7FC 8B448E18                mov eax, dword ptr [esi+4*ecx+18]
:0046F800 89448F18                mov dword ptr [edi+4*ecx+18], eax
:0046F804 8B448E14                mov eax, dword ptr [esi+4*ecx+14]
:0046F808 89448F14                mov dword ptr [edi+4*ecx+14], eax
:0046F80C 8B448E10                mov eax, dword ptr [esi+4*ecx+10]
:0046F810 89448F10                mov dword ptr [edi+4*ecx+10], eax
:0046F814 8B448E0C                mov eax, dword ptr [esi+4*ecx+0C]
:0046F818 89448F0C                mov dword ptr [edi+4*ecx+0C], eax
:0046F81C 8B448E08                mov eax, dword ptr [esi+4*ecx+08]
:0046F820 89448F08                mov dword ptr [edi+4*ecx+08], eax
:0046F824 8B448E04                mov eax, dword ptr [esi+4*ecx+04]
:0046F828 89448F04                mov dword ptr [edi+4*ecx+04], eax
:0046F82C 8D048D00000000          lea eax, dword ptr [4*ecx+00000000]
:0046F833 03F0                    add esi, eax
:0046F835 03F8                    add edi, eax
:0046F837 FF249540F84600          jmp dword ptr [4*edx+0046F840]
:0046F83E 8BC0                    mov eax, eax

:0046F840 50F84600                DWORD 0046F850
:0046F844 58F84600                DWORD 0046F858
:0046F848 68F84600                DWORD 0046F868
:0046F84C 7CF84600                DWORD 0046F87C


:0046F850 8B4508                  mov eax, dword ptr [ebp+08]
:0046F853 5E                      pop esi
:0046F854 5F                      pop edi
:0046F855 C9                      leave
:0046F856 C3                      ret


:0046F857 90                      nop
:0046F858 8A4603                  mov al, byte ptr [esi+03]
:0046F85B 884703                  mov byte ptr [edi+03], al
:0046F85E 8B4508                  mov eax, dword ptr [ebp+08]
:0046F861 5E                      pop esi
:0046F862 5F                      pop edi
:0046F863 C9                      leave
:0046F864 C3                      ret


:0046F865 2E8BC0                  mov eax, eax
:0046F868 8A4603                  mov al, byte ptr [esi+03]
:0046F86B 884703                  mov byte ptr [edi+03], al
:0046F86E 8A4602                  mov al, byte ptr [esi+02]
:0046F871 884702                  mov byte ptr [edi+02], al
:0046F874 8B4508                  mov eax, dword ptr [ebp+08]
:0046F877 5E                      pop esi
:0046F878 5F                      pop edi
:0046F879 C9                      leave
:0046F87A C3                      ret


:0046F87B 90                      nop
:0046F87C 8A4603                  mov al, byte ptr [esi+03]
:0046F87F 884703                  mov byte ptr [edi+03], al
:0046F882 8A4602                  mov al, byte ptr [esi+02]
:0046F885 884702                  mov byte ptr [edi+02], al
:0046F888 8A4601                  mov al, byte ptr [esi+01]
:0046F88B 884701                  mov byte ptr [edi+01], al
:0046F88E 8B4508                  mov eax, dword ptr [ebp+08]
:0046F891 5E                      pop esi
:0046F892 5F                      pop edi
:0046F893 C9                      leave
:0046F894 C3                      ret


:0046F895 CC                      int 03
:0046F896 CC                      int 03
:0046F897 CC                      int 03
:0046F898 CC                      int 03
:0046F899 CC                      int 03
:0046F89A CC                      int 03
:0046F89B CC                      int 03
:0046F89C CC                      int 03
:0046F89D CC                      int 03
:0046F89E CC                      int 03
:0046F89F CC                      int 03

* Referenced by a CALL at Address:
|:0040D183   
|
:0046F8A0 8B44240C                mov eax, dword ptr [esp+0C]
:0046F8A4 85C0                    test eax, eax
:0046F8A6 7444                    je 0046F8EC
:0046F8A8 8B542404                mov edx, dword ptr [esp+04]
:0046F8AC 56                      push esi
:0046F8AD 57                      push edi
:0046F8AE 8BF2                    mov esi, edx
:0046F8B0 8B7C2410                mov edi, dword ptr [esp+10]
:0046F8B4 0BD7                    or edx, edi
:0046F8B6 83E203                  and edx, 00000003
:0046F8B9 7432                    je 0046F8ED
:0046F8BB A901000000              test eax, 00000001
:0046F8C0 740B                    je 0046F8CD
:0046F8C2 8A0E                    mov cl, byte ptr [esi]
:0046F8C4 3A0F                    cmp cl, byte ptr [edi]
:0046F8C6 7552                    jne 0046F91A
:0046F8C8 46                      inc esi
:0046F8C9 47                      inc edi
:0046F8CA 48                      dec eax
:0046F8CB 741D                    je 0046F8EA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F8C0(C), :0046F8E8(C)
|
:0046F8CD 8A0E                    mov cl, byte ptr [esi]
:0046F8CF 8A17                    mov dl, byte ptr [edi]
:0046F8D1 38D1                    cmp cl, dl
:0046F8D3 7545                    jne 0046F91A
:0046F8D5 8A4E01                  mov cl, byte ptr [esi+01]
:0046F8D8 8A5701                  mov dl, byte ptr [edi+01]
:0046F8DB 38D1                    cmp cl, dl
:0046F8DD 753B                    jne 0046F91A
:0046F8DF 83C702                  add edi, 00000002
:0046F8E2 83C602                  add esi, 00000002
:0046F8E5 83E802                  sub eax, 00000002
:0046F8E8 75E3                    jne 0046F8CD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F8CB(C), :0046F924(C)
|
:0046F8EA 5F                      pop edi
:0046F8EB 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F8A6(C)
|
:0046F8EC C3                      ret

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F8B9(C)
|
:0046F8ED 8BC8                    mov ecx, eax
:0046F8EF 83E003                  and eax, 00000003
:0046F8F2 C1E902                  shr ecx, 02
:0046F8F5 742B                    je 0046F922
:0046F8F7 F3                      repz
:0046F8F8 A7                      cmpsd
:0046F8F9 7427                    je 0046F922
:0046F8FB 8B4EFC                  mov ecx, dword ptr [esi-04]
:0046F8FE 8B57FC                  mov edx, dword ptr [edi-04]
:0046F901 38D1                    cmp cl, dl
:0046F903 7510                    jne 0046F915
:0046F905 38F5                    cmp ch, dh
:0046F907 750C                    jne 0046F915
:0046F909 C1E910                  shr ecx, 10
:0046F90C C1EA10                  shr edx, 10
:0046F90F 38D1                    cmp cl, dl
:0046F911 7502                    jne 0046F915
:0046F913 38F5                    cmp ch, dh

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F903(C), :0046F907(C), :0046F911(C), :0046F92C(C), :0046F933(C)
|:0046F946(C)
|
:0046F915 B800000000              mov eax, 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F8C6(C), :0046F8D3(C), :0046F8DD(C)
|
:0046F91A 1BC0                    sbb eax, eax
:0046F91C 5F                      pop edi
:0046F91D 83D8FF                  sbb eax, FFFFFFFF
:0046F920 5E                      pop esi
:0046F921 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F8F5(C), :0046F8F9(C)
|
:0046F922 85C0                    test eax, eax
:0046F924 74C4                    je 0046F8EA
:0046F926 8B16                    mov edx, dword ptr [esi]
:0046F928 8B0F                    mov ecx, dword ptr [edi]
:0046F92A 38CA                    cmp dl, cl
:0046F92C 75E7                    jne 0046F915
:0046F92E 48                      dec eax
:0046F92F 7418                    je 0046F949
:0046F931 38EE                    cmp dh, ch
:0046F933 75E0                    jne 0046F915
:0046F935 48                      dec eax
:0046F936 7411                    je 0046F949
:0046F938 81E10000FF00            and ecx, 00FF0000
:0046F93E 81E20000FF00            and edx, 00FF0000
:0046F944 3BD1                    cmp edx, ecx
:0046F946 75CD                    jne 0046F915
:0046F948 48                      dec eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F92F(C), :0046F936(C)
|
:0046F949 5F                      pop edi
:0046F94A 5E                      pop esi
:0046F94B C3                      ret


:0046F94C CC                      int 03
:0046F94D CC                      int 03
:0046F94E CC                      int 03
:0046F94F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040D802   , :0040D87B   
|
:0046F950 57                      push edi
:0046F951 8B7C2408                mov edi, dword ptr [esp+08]
:0046F955 EB6A                    jmp 0046F9C1
:0046F957 2E8BC0                  mov eax, eax
:0046F95A 2E8BC0                  mov eax, eax
:0046F95D 2E8BC0                  mov eax, eax

* Referenced by a CALL at Addresses:
|:0040D814   , :0040D825   
|
:0046F960 8B4C2404                mov ecx, dword ptr [esp+04]
:0046F964 57                      push edi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046F965 F7C103000000            test ecx, 00000003
:0046F96B 740F                    je 0046F97C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F97A(C)
|
:0046F96D 8A01                    mov al, byte ptr [ecx]
:0046F96F 41                      inc ecx
:0046F970 84C0                    test al, al
:0046F972 743B                    je 0046F9AF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046F974 F7C103000000            test ecx, 00000003
:0046F97A 75F1                    jne 0046F96D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F96B(C), :0046F992(C), :0046F9AD(U)
|
:0046F97C 8B01                    mov eax, dword ptr [ecx]
:0046F97E BAFFFEFE7E              mov edx, 7EFEFEFF
:0046F983 03D0                    add edx, eax
:0046F985 83F0FF                  xor eax, FFFFFFFF
:0046F988 33C2                    xor eax, edx
:0046F98A 83C104                  add ecx, 00000004
:0046F98D A900010181              test eax, 81010100
:0046F992 74E8                    je 0046F97C
:0046F994 8B41FC                  mov eax, dword ptr [ecx-04]
:0046F997 84C0                    test al, al
:0046F999 7423                    je 0046F9BE
:0046F99B 84E4                    test ah, ah
:0046F99D 741A                    je 0046F9B9
:0046F99F A90000FF00              test eax, 00FF0000
:0046F9A4 740E                    je 0046F9B4
:0046F9A6 A9000000FF              test eax, FF000000
:0046F9AB 7402                    je 0046F9AF
:0046F9AD EBCD                    jmp 0046F97C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F972(C), :0046F9AB(C)
|
:0046F9AF 8D79FF                  lea edi, dword ptr [ecx-01]
:0046F9B2 EB0D                    jmp 0046F9C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F9A4(C)
|
:0046F9B4 8D79FE                  lea edi, dword ptr [ecx-02]
:0046F9B7 EB08                    jmp 0046F9C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F99D(C)
|
:0046F9B9 8D79FD                  lea edi, dword ptr [ecx-03]
:0046F9BC EB03                    jmp 0046F9C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F999(C)
|
:0046F9BE 8D79FC                  lea edi, dword ptr [ecx-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F955(U), :0046F9B2(U), :0046F9B7(U), :0046F9BC(U)
|
:0046F9C1 8B4C240C                mov ecx, dword ptr [esp+0C]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046F9C5 F7C103000000            test ecx, 00000003
:0046F9CB 7419                    je 0046F9E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046F9DD(C)
|
:0046F9CD 8A11                    mov dl, byte ptr [ecx]
:0046F9CF 41                      inc ecx
:0046F9D0 84D2                    test dl, dl
:0046F9D2 7464                    je 0046FA38
:0046F9D4 8817                    mov byte ptr [edi], dl
:0046F9D6 47                      inc edi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046F9D7 F7C103000000            test ecx, 00000003
:0046F9DD 75EE                    jne 0046F9CD
:0046F9DF EB05                    jmp 0046F9E6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F9FE(C), :0046FA18(U)
|
:0046F9E1 8917                    mov dword ptr [edi], edx
:0046F9E3 83C704                  add edi, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F9CB(C), :0046F9DF(U)
|
:0046F9E6 BAFFFEFE7E              mov edx, 7EFEFEFF
:0046F9EB 8B01                    mov eax, dword ptr [ecx]
:0046F9ED 03D0                    add edx, eax
:0046F9EF 83F0FF                  xor eax, FFFFFFFF
:0046F9F2 33C2                    xor eax, edx
:0046F9F4 8B11                    mov edx, dword ptr [ecx]
:0046F9F6 83C104                  add ecx, 00000004
:0046F9F9 A900010181              test eax, 81010100
:0046F9FE 74E1                    je 0046F9E1
:0046FA00 84D2                    test dl, dl
:0046FA02 7434                    je 0046FA38
:0046FA04 84F6                    test dh, dh
:0046FA06 7427                    je 0046FA2F
:0046FA08 F7C20000FF00            test edx, 00FF0000
:0046FA0E 7412                    je 0046FA22
:0046FA10 F7C2000000FF            test edx, FF000000
:0046FA16 7402                    je 0046FA1A
:0046FA18 EBC7                    jmp 0046F9E1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FA16(C)
|
:0046FA1A 8917                    mov dword ptr [edi], edx
:0046FA1C 8B442408                mov eax, dword ptr [esp+08]
:0046FA20 5F                      pop edi
:0046FA21 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FA0E(C)
|
:0046FA22 668917                  mov word ptr [edi], dx
:0046FA25 8B442408                mov eax, dword ptr [esp+08]
:0046FA29 C6470200                mov [edi+02], 00
:0046FA2D 5F                      pop edi
:0046FA2E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FA06(C)
|
:0046FA2F 668917                  mov word ptr [edi], dx
:0046FA32 8B442408                mov eax, dword ptr [esp+08]
:0046FA36 5F                      pop edi
:0046FA37 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046F9D2(C), :0046FA02(C)
|
:0046FA38 8817                    mov byte ptr [edi], dl
:0046FA3A 8B442408                mov eax, dword ptr [esp+08]
:0046FA3E 5F                      pop edi
:0046FA3F C3                      ret



* Referenced by a CALL at Address:
|:0040DE30   
|
:0046FA40 8B542404                mov edx, dword ptr [esp+04]
:0046FA44 8B4C2408                mov ecx, dword ptr [esp+08]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0046FA48 F7C203000000            test edx, 00000003
:0046FA4E 753C                    jne 0046FA8C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FA7C(C), :0046FAA6(C), :0046FAC2(U)
|
:0046FA50 8B02                    mov eax, dword ptr [edx]
:0046FA52 3A01                    cmp al, byte ptr [ecx]
:0046FA54 752E                    jne 0046FA84
:0046FA56 0AC0                    or al, al
:0046FA58 7426                    je 0046FA80
:0046FA5A 3A6101                  cmp ah, byte ptr [ecx+01]
:0046FA5D 7525                    jne 0046FA84
:0046FA5F 0AE4                    or ah, ah
:0046FA61 741D                    je 0046FA80
:0046FA63 C1E810                  shr eax, 10
:0046FA66 3A4102                  cmp al, byte ptr [ecx+02]
:0046FA69 7519                    jne 0046FA84
:0046FA6B 0AC0                    or al, al
:0046FA6D 7411                    je 0046FA80
:0046FA6F 3A6103                  cmp ah, byte ptr [ecx+03]
:0046FA72 7510                    jne 0046FA84
:0046FA74 83C104                  add ecx, 00000004
:0046FA77 83C204                  add edx, 00000004
:0046FA7A 0AE4                    or ah, ah
:0046FA7C 75D2                    jne 0046FA50
:0046FA7E 8BC0                    mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FA58(C), :0046FA61(C), :0046FA6D(C), :0046FA9E(C), :0046FAB4(C)
|:0046FABD(C)
|
:0046FA80 33C0                    xor eax, eax
:0046FA82 C3                      ret


:0046FA83 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FA54(C), :0046FA5D(C), :0046FA69(C), :0046FA72(C), :0046FA99(C)
|:0046FAB0(C), :0046FAB9(C)
|
:0046FA84 1BC0                    sbb eax, eax
:0046FA86 D1E0                    shl eax, 1
:0046FA88 40                      inc eax
:0046FA89 C3                      ret


:0046FA8A 8BC0                    mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FA4E(C)
|
:0046FA8C F7C201000000            test edx, 00000001
:0046FA92 7414                    je 0046FAA8
:0046FA94 8A02                    mov al, byte ptr [edx]
:0046FA96 42                      inc edx
:0046FA97 3A01                    cmp al, byte ptr [ecx]
:0046FA99 75E9                    jne 0046FA84
:0046FA9B 41                      inc ecx
:0046FA9C 0AC0                    or al, al
:0046FA9E 74E0                    je 0046FA80

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0046FAA0 F7C202000000            test edx, 00000002
:0046FAA6 74A8                    je 0046FA50

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FA92(C)
|
:0046FAA8 668B02                  mov ax, word ptr [edx]
:0046FAAB 83C202                  add edx, 00000002
:0046FAAE 3A01                    cmp al, byte ptr [ecx]
:0046FAB0 75D2                    jne 0046FA84
:0046FAB2 0AC0                    or al, al
:0046FAB4 74CA                    je 0046FA80
:0046FAB6 3A6101                  cmp ah, byte ptr [ecx+01]
:0046FAB9 75C9                    jne 0046FA84
:0046FABB 0AE4                    or ah, ah
:0046FABD 74C1                    je 0046FA80
:0046FABF 83C102                  add ecx, 00000002
:0046FAC2 EB8C                    jmp 0046FA50
:0046FAC4 CC                      int 03
:0046FAC5 CC                      int 03
:0046FAC6 CC                      int 03
:0046FAC7 CC                      int 03
:0046FAC8 CC                      int 03
:0046FAC9 CC                      int 03
:0046FACA CC                      int 03
:0046FACB CC                      int 03
:0046FACC CC                      int 03
:0046FACD CC                      int 03
:0046FACE CC                      int 03
:0046FACF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040DF1A   , :0040DF33   , :0040DF4B   , :0040DF5E   , :004126DB   
|:004126EC   , :0041271A   , :0041272B   , :00413D8A   , :00413D9B   
|:00413DC9   , :00413DDA   , :00415B01   , :00415B12   , :00415B26   
|:00415B57   , :00415B68   , :00415B7C   , :004184A1   , :00418982   
|:00418993   , :00418A1C   , :00418A2C   , :00418AC4   , :00418AD4   
|:00420C95   , :00420CA6   , :004225E5   , :004225F6   , :00423387   
|:00423D1F   , :0042456E   , :004245BA   , :004245CA   , :004245DA   
|:00424EC2   , :004254F1   , :00425504   , :004257CA   , :004257DD   
|:00425ECA   , :00425EDD   , :00426222   , :00426366   , :00426432   
|:00427B99   , :00428401   , :0042863D   , :00428721   , :00428F79   
|:004297E7   , :0042B237   , :0042B607   , :0042B80A   , :0042B820   
|:0042B88E   , :0042B90C   , :0042D8AA   , :0042E9A1   , :0042E9BA   
|:0042E9D2   , :0042E9E5   , :0045B480   , :0045B575   , :004623EA   
|:004623FB   , :00462453   , :00462464   , :00463DF1   , :004644FF   
|:0046453E   , :004659B4   , :0046ABD6   , :0046C92C   , :004757B3   
|:00477113   , :004771B8   , :00477FA5   , :00477FC8   
|
:0046FAD0 8B54240C                mov edx, dword ptr [esp+0C]
:0046FAD4 8B4C2404                mov ecx, dword ptr [esp+04]
:0046FAD8 85D2                    test edx, edx
:0046FADA 7447                    je 0046FB23
:0046FADC 33C0                    xor eax, eax
:0046FADE 8A442408                mov al, byte ptr [esp+08]
:0046FAE2 57                      push edi
:0046FAE3 8BF9                    mov edi, ecx
:0046FAE5 83FA04                  cmp edx, 00000004
:0046FAE8 722D                    jb 0046FB17
:0046FAEA F7D9                    neg ecx
:0046FAEC 83E103                  and ecx, 00000003
:0046FAEF 7408                    je 0046FAF9
:0046FAF1 2BD1                    sub edx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FAF7(C)
|
:0046FAF3 8807                    mov byte ptr [edi], al
:0046FAF5 47                      inc edi
:0046FAF6 49                      dec ecx
:0046FAF7 75FA                    jne 0046FAF3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FAEF(C)
|
:0046FAF9 8BC8                    mov ecx, eax
:0046FAFB C1E008                  shl eax, 08
:0046FAFE 03C1                    add eax, ecx
:0046FB00 8BC8                    mov ecx, eax
:0046FB02 C1E010                  shl eax, 10
:0046FB05 03C1                    add eax, ecx
:0046FB07 8BCA                    mov ecx, edx
:0046FB09 83E203                  and edx, 00000003
:0046FB0C C1E902                  shr ecx, 02
:0046FB0F 7406                    je 0046FB17
:0046FB11 F3                      repz
:0046FB12 AB                      stosd
:0046FB13 85D2                    test edx, edx
:0046FB15 7406                    je 0046FB1D

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FAE8(C), :0046FB0F(C), :0046FB1B(C)
|
:0046FB17 8807                    mov byte ptr [edi], al
:0046FB19 47                      inc edi
:0046FB1A 4A                      dec edx
:0046FB1B 75FA                    jne 0046FB17

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FB15(C)
|
:0046FB1D 8B442408                mov eax, dword ptr [esp+08]
:0046FB21 5F                      pop edi
:0046FB22 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FADA(C)
|
:0046FB23 8B442404                mov eax, dword ptr [esp+04]
:0046FB27 C3                      ret


:0046FB28 CC                      int 03
:0046FB29 CC                      int 03
:0046FB2A CC                      int 03
:0046FB2B CC                      int 03
:0046FB2C CC                      int 03
:0046FB2D CC                      int 03
:0046FB2E CC                      int 03
:0046FB2F CC                      int 03
:0046FB30 E82B000000              call 0046FB60
:0046FB35 E826140000              call 00470F60
:0046FB3A A3D8624B00              mov dword ptr [004B62D8], eax
:0046FB3F E8AC130000              call 00470EF0
:0046FB44 DBE2                    fclex
:0046FB46 C3                      ret


:0046FB47 90                      nop
:0046FB48 90                      nop
:0046FB49 90                      nop
:0046FB4A 90                      nop
:0046FB4B 90                      nop
:0046FB4C 90                      nop
:0046FB4D 90                      nop
:0046FB4E 90                      nop
:0046FB4F 90                      nop
:0046FB50 C3                      ret


:0046FB51 90                      nop
:0046FB52 90                      nop
:0046FB53 90                      nop
:0046FB54 90                      nop
:0046FB55 90                      nop
:0046FB56 90                      nop
:0046FB57 90                      nop
:0046FB58 90                      nop
:0046FB59 90                      nop
:0046FB5A 90                      nop
:0046FB5B 90                      nop
:0046FB5C 90                      nop
:0046FB5D 90                      nop
:0046FB5E 90                      nop
:0046FB5F 90                      nop

* Referenced by a CALL at Address:
|:0046FB30   
|
:0046FB60 B830144700              mov eax, 00471430
:0046FB65 C705FC234800F00F4700    mov dword ptr [004823FC], 00470FF0
:0046FB6F A3F8234800              mov dword ptr [004823F8], eax
:0046FB74 C7050024480080104700    mov dword ptr [00482400], 00471080
:0046FB7E C70504244800900F4700    mov dword ptr [00482404], 00470F90
:0046FB88 C7050824480060104700    mov dword ptr [00482408], 00471060
:0046FB92 A30C244800              mov dword ptr [0048240C], eax
:0046FB97 C3                      ret


:0046FB98 90                      nop
:0046FB99 90                      nop
:0046FB9A 90                      nop
:0046FB9B 90                      nop
:0046FB9C 90                      nop
:0046FB9D 90                      nop
:0046FB9E 90                      nop
:0046FB9F 90                      nop

* Referenced by a CALL at Addresses:
|:004182A2   , :00420577   , :004205E1   , :004206BE   , :0042078A   
|:00429A8A   , :00429D9B   , :0042AEF6   , :0042AF4D   , :0042AFA3   
|:0042B001   , :0042B058   , :0042B0AB   , :0042B11F   , :0042B142   
|:0042B188   , :0042B1AB   , :0042CD47   , :00461BB5   , :00463F2B   
|
:0046FBA0 55                      push ebp
:0046FBA1 8BEC                    mov ebp, esp
:0046FBA3 83C4F4                  add esp, FFFFFFF4
:0046FBA6 9B                      wait
:0046FBA7 D97DFE                  fstcw word ptr [ebp-02]
:0046FBAA 9B                      wait
:0046FBAB 668B45FE                mov ax, word ptr [ebp-02]
:0046FBAF 80CC0C                  or ah, 0C
:0046FBB2 668945FC                mov word ptr [ebp-04], ax
:0046FBB6 D96DFC                  fldcw  [ebp-04]
:0046FBB9 DF7DF4                  fistp qword ptr [ebp-0C]
:0046FBBC D96DFE                  fldcw  [ebp-02]
:0046FBBF 8B45F4                  mov eax, dword ptr [ebp-0C]
:0046FBC2 8B55F8                  mov edx, dword ptr [ebp-08]
:0046FBC5 C9                      leave
:0046FBC6 C3                      ret


:0046FBC7 CC                      int 03
:0046FBC8 CC                      int 03
:0046FBC9 CC                      int 03
:0046FBCA CC                      int 03
:0046FBCB CC                      int 03
:0046FBCC CC                      int 03
:0046FBCD CC                      int 03
:0046FBCE CC                      int 03
:0046FBCF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041A595   , :0041A62D   , :0042E4B8   , :0042E511   , :0042E567   
|:0042E5BD   , :0042E655   , :0042E6B1   , :0042E70A   , :00431CFF   
|:00431F85   
|
:0046FBD0 55                      push ebp
:0046FBD1 8BEC                    mov ebp, esp
:0046FBD3 6AFF                    push FFFFFFFF
:0046FBD5 68E8B04700              push 0047B0E8
:0046FBDA 68D8144700              push 004714D8
:0046FBDF 64A100000000            mov eax, dword ptr fs:[00000000]
:0046FBE5 50                      push eax
:0046FBE6 64892500000000          mov dword ptr fs:[00000000], esp
:0046FBED 83C4F0                  add esp, FFFFFFF0
:0046FBF0 53                      push ebx
:0046FBF1 56                      push esi
:0046FBF2 57                      push edi
:0046FBF3 33F6                    xor esi, esi
:0046FBF5 8975E0                  mov dword ptr [ebp-20], esi
:0046FBF8 8975FC                  mov dword ptr [ebp-04], esi
:0046FBFB 8975E4                  mov dword ptr [ebp-1C], esi
:0046FBFE 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046FC01 8B7D08                  mov edi, dword ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FC17(U)
|
:0046FC04 3B7510                  cmp esi, dword ptr [ebp+10]
:0046FC07 7D10                    jge 0046FC19
:0046FC09 8BCF                    mov ecx, edi
:0046FC0B FF5514                  call [ebp+14]
:0046FC0E 03FB                    add edi, ebx
:0046FC10 897D08                  mov dword ptr [ebp+08], edi
:0046FC13 46                      inc esi
:0046FC14 8975E4                  mov dword ptr [ebp-1C], esi
:0046FC17 EBEB                    jmp 0046FC04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FC07(C)
|
:0046FC19 C745E001000000          mov [ebp-20], 00000001
:0046FC20 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046FC27 E81C000000              call 0046FC48
:0046FC2C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046FC2F 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046FC36 5F                      pop edi
:0046FC37 5E                      pop esi
:0046FC38 5B                      pop ebx
:0046FC39 8BE5                    mov esp, ebp
:0046FC3B 5D                      pop ebp
:0046FC3C C21400                  ret 0014


:0046FC3F 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0046FC42 8B7D08                  mov edi, dword ptr [ebp+08]
:0046FC45 8B75E4                  mov esi, dword ptr [ebp-1C]

* Referenced by a CALL at Address:
|:0046FC27   
|
:0046FC48 8B45E0                  mov eax, dword ptr [ebp-20]
:0046FC4B 85C0                    test eax, eax
:0046FC4D 750C                    jne 0046FC5B
:0046FC4F 8B4518                  mov eax, dword ptr [ebp+18]
:0046FC52 50                      push eax
:0046FC53 56                      push esi
:0046FC54 53                      push ebx
:0046FC55 57                      push edi
:0046FC56 E8C5000000              call 0046FD20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FC4D(C)
|
:0046FC5B C3                      ret
:0046FC5C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046FC5F 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046FC66 5F                      pop edi
:0046FC67 5E                      pop esi
:0046FC68 5B                      pop ebx
:0046FC69 8BE5                    mov esp, ebp
:0046FC6B 5D                      pop ebp
:0046FC6C C21400                  ret 0014


:0046FC6F 90                      nop

* Referenced by a CALL at Addresses:
|:0041A5BF   , :0041A65A   , :0042E4E5   , :0042E53B   , :0042E591   
|:0042E5E7   , :0042E682   , :0042E6DE   , :0042E734   , :00431E87   
|:00431FAF   
|
:0046FC70 55                      push ebp
:0046FC71 8BEC                    mov ebp, esp
:0046FC73 6AFF                    push FFFFFFFF
:0046FC75 68F8B04700              push 0047B0F8
:0046FC7A 68D8144700              push 004714D8
:0046FC7F 64A100000000            mov eax, dword ptr fs:[00000000]
:0046FC85 50                      push eax
:0046FC86 64892500000000          mov dword ptr fs:[00000000], esp
:0046FC8D 83C4F4                  add esp, FFFFFFF4
:0046FC90 53                      push ebx
:0046FC91 56                      push esi
:0046FC92 57                      push edi
:0046FC93 33C0                    xor eax, eax
:0046FC95 8945E4                  mov dword ptr [ebp-1C], eax
:0046FC98 8B4D10                  mov ecx, dword ptr [ebp+10]
:0046FC9B 8B7D0C                  mov edi, dword ptr [ebp+0C]
:0046FC9E 0FAFCF                  imul ecx, edi
:0046FCA1 8B7508                  mov esi, dword ptr [ebp+08]
:0046FCA4 03F1                    add esi, ecx
:0046FCA6 897508                  mov dword ptr [ebp+08], esi
:0046FCA9 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FCBB(U)
|
:0046FCAC FF4D10                  dec [ebp+10]
:0046FCAF 780C                    js 0046FCBD
:0046FCB1 2BF7                    sub esi, edi
:0046FCB3 897508                  mov dword ptr [ebp+08], esi
:0046FCB6 8BCE                    mov ecx, esi
:0046FCB8 FF5514                  call [ebp+14]
:0046FCBB EBEF                    jmp 0046FCAC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FCAF(C)
|
:0046FCBD C745E401000000          mov [ebp-1C], 00000001
:0046FCC4 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046FCCB E819000000              call 0046FCE9
:0046FCD0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046FCD3 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046FCDA 5F                      pop edi
:0046FCDB 5E                      pop esi
:0046FCDC 5B                      pop ebx
:0046FCDD 8BE5                    mov esp, ebp
:0046FCDF 5D                      pop ebp
:0046FCE0 C21000                  ret 0010


:0046FCE3 8B7D0C                  mov edi, dword ptr [ebp+0C]
:0046FCE6 8B7508                  mov esi, dword ptr [ebp+08]

* Referenced by a CALL at Address:
|:0046FCCB   
|
:0046FCE9 8B45E4                  mov eax, dword ptr [ebp-1C]
:0046FCEC 85C0                    test eax, eax
:0046FCEE 750F                    jne 0046FCFF
:0046FCF0 8B5514                  mov edx, dword ptr [ebp+14]
:0046FCF3 52                      push edx
:0046FCF4 8B4510                  mov eax, dword ptr [ebp+10]
:0046FCF7 50                      push eax
:0046FCF8 57                      push edi
:0046FCF9 56                      push esi
:0046FCFA E821000000              call 0046FD20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FCEE(C)
|
:0046FCFF C3                      ret
:0046FD00 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046FD03 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046FD0A 5F                      pop edi
:0046FD0B 5E                      pop esi
:0046FD0C 5B                      pop ebx
:0046FD0D 8BE5                    mov esp, ebp
:0046FD0F 5D                      pop ebp
:0046FD10 C21000                  ret 0010


:0046FD13 90                      nop
:0046FD14 90                      nop
:0046FD15 90                      nop
:0046FD16 90                      nop
:0046FD17 90                      nop
:0046FD18 90                      nop
:0046FD19 90                      nop
:0046FD1A 90                      nop
:0046FD1B 90                      nop
:0046FD1C 90                      nop
:0046FD1D 90                      nop
:0046FD1E 90                      nop
:0046FD1F 90                      nop

* Referenced by a CALL at Addresses:
|:0046FC56   , :0046FCFA   
|
:0046FD20 55                      push ebp
:0046FD21 8BEC                    mov ebp, esp
:0046FD23 6AFF                    push FFFFFFFF
:0046FD25 6808B14700              push 0047B108
:0046FD2A 68D8144700              push 004714D8
:0046FD2F 64A100000000            mov eax, dword ptr fs:[00000000]
:0046FD35 50                      push eax
:0046FD36 64892500000000          mov dword ptr fs:[00000000], esp
:0046FD3D 83EC08                  sub esp, 00000008
:0046FD40 53                      push ebx
:0046FD41 56                      push esi
:0046FD42 57                      push edi
:0046FD43 8965E8                  mov dword ptr [ebp-18], esp
:0046FD46 C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD5E(U)
|
:0046FD4D FF4D10                  dec [ebp+10]
:0046FD50 781E                    js 0046FD70
:0046FD52 8B4D08                  mov ecx, dword ptr [ebp+08]
:0046FD55 2B4D0C                  sub ecx, dword ptr [ebp+0C]
:0046FD58 894D08                  mov dword ptr [ebp+08], ecx
:0046FD5B FF5514                  call [ebp+14]
:0046FD5E EBED                    jmp 0046FD4D
:0046FD60 8B45EC                  mov eax, dword ptr [ebp-14]
:0046FD63 50                      push eax
:0046FD64 E807070000              call 00470470
:0046FD69 83C404                  add esp, 00000004
:0046FD6C C3                      ret


:0046FD6D 8B65E8                  mov esp, dword ptr [ebp-18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FD50(C)
|
:0046FD70 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046FD77 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046FD7A 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046FD81 5F                      pop edi
:0046FD82 5E                      pop esi
:0046FD83 5B                      pop ebx
:0046FD84 8BE5                    mov esp, ebp
:0046FD86 5D                      pop ebp
:0046FD87 C21000                  ret 0010


:0046FD8A 90                      nop
:0046FD8B 90                      nop
:0046FD8C 90                      nop
:0046FD8D 90                      nop
:0046FD8E 90                      nop
:0046FD8F 90                      nop

//******************** Program Entry Point ********
:0046FD90 55                      push ebp
:0046FD91 8BEC                    mov ebp, esp
:0046FD93 6AFF                    push FFFFFFFF
:0046FD95 6818B14700              push 0047B118
:0046FD9A 68D8144700              push 004714D8
:0046FD9F 64A100000000            mov eax, dword ptr fs:[00000000]
:0046FDA5 50                      push eax
:0046FDA6 64892500000000          mov dword ptr fs:[00000000], esp
:0046FDAD 83C4A8                  add esp, FFFFFFA8
:0046FDB0 53                      push ebx
:0046FDB1 56                      push esi
:0046FDB2 57                      push edi
:0046FDB3 8965E8                  mov dword ptr [ebp-18], esp

* Reference To: KERNEL32.GetVersion, Ord:014Ch
                                  |
:0046FDB6 FF1598D54B00            Call dword ptr [004BD598]
:0046FDBC 33D2                    xor edx, edx
:0046FDBE 8AD4                    mov dl, ah
:0046FDC0 891510634B00            mov dword ptr [004B6310], edx
:0046FDC6 8BC8                    mov ecx, eax
:0046FDC8 81E1FF000000            and ecx, 000000FF
:0046FDCE 890D0C634B00            mov dword ptr [004B630C], ecx
:0046FDD4 C1E108                  shl ecx, 08
:0046FDD7 03CA                    add ecx, edx
:0046FDD9 890D08634B00            mov dword ptr [004B6308], ecx
:0046FDDF C1E810                  shr eax, 10
:0046FDE2 A304634B00              mov dword ptr [004B6304], eax
:0046FDE7 E894230000              call 00472180
:0046FDEC 85C0                    test eax, eax
:0046FDEE 750A                    jne 0046FDFA
:0046FDF0 6A1C                    push 0000001C
:0046FDF2 E839010000              call 0046FF30
:0046FDF7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FDEE(C)
|
:0046FDFA C745FC00000000          mov [ebp-04], 00000000
:0046FE01 E87A210000              call 00471F80
:0046FE06 E865210000              call 00471F70

* Reference To: KERNEL32.GetCommandLineA, Ord:00AAh
                                  |
:0046FE0B FF1590D54B00            Call dword ptr [004BD590]
:0046FE11 A3ECBD4B00              mov dword ptr [004BBDEC], eax
:0046FE16 E8251D0000              call 00471B40
:0046FE1B A3DC624B00              mov dword ptr [004B62DC], eax
:0046FE20 85C0                    test eax, eax
:0046FE22 7409                    je 0046FE2D
:0046FE24 A1ECBD4B00              mov eax, dword ptr [004BBDEC]
:0046FE29 85C0                    test eax, eax
:0046FE2B 750A                    jne 0046FE37

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FE22(C)
|
:0046FE2D 6AFF                    push FFFFFFFF
:0046FE2F E86C0E0000              call 00470CA0
:0046FE34 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FE2B(C)
|
:0046FE37 E8541A0000              call 00471890
:0046FE3C E85F190000              call 004717A0
:0046FE41 E82A0E0000              call 00470C70
:0046FE46 8B35ECBD4B00            mov esi, dword ptr [004BBDEC]
:0046FE4C 89759C                  mov dword ptr [ebp-64], esi
:0046FE4F 803E22                  cmp byte ptr [esi], 22
:0046FE52 0F85BE000000            jne 0046FF16

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FE76(C), :0046FE7C(U)
|
:0046FE58 46                      inc esi
:0046FE59 89759C                  mov dword ptr [ebp-64], esi
:0046FE5C 8A06                    mov al, byte ptr [esi]
:0046FE5E 3C22                    cmp al, 22
:0046FE60 741C                    je 0046FE7E
:0046FE62 84C0                    test al, al
:0046FE64 7418                    je 0046FE7E
:0046FE66 25FF000000              and eax, 000000FF
:0046FE6B 50                      push eax
:0046FE6C E8CF180000              call 00471740
:0046FE71 83C404                  add esp, 00000004
:0046FE74 85C0                    test eax, eax
:0046FE76 74E0                    je 0046FE58
:0046FE78 46                      inc esi
:0046FE79 89759C                  mov dword ptr [ebp-64], esi
:0046FE7C EBDA                    jmp 0046FE58

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FE60(C), :0046FE64(C)
|
:0046FE7E 803E22                  cmp byte ptr [esi], 22
:0046FE81 7504                    jne 0046FE87
:0046FE83 46                      inc esi
:0046FE84 89759C                  mov dword ptr [ebp-64], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FE81(C), :0046FE95(U), :0046FF19(C)
|
:0046FE87 8A06                    mov al, byte ptr [esi]
:0046FE89 84C0                    test al, al
:0046FE8B 740A                    je 0046FE97
:0046FE8D 3C20                    cmp al, 20
:0046FE8F 7706                    ja 0046FE97
:0046FE91 46                      inc esi
:0046FE92 89759C                  mov dword ptr [ebp-64], esi
:0046FE95 EBF0                    jmp 0046FE87

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FE8B(C), :0046FE8F(C)
|
:0046FE97 C745D000000000          mov [ebp-30], 00000000
:0046FE9E 8D45A4                  lea eax, dword ptr [ebp-5C]
:0046FEA1 50                      push eax

* Reference To: KERNEL32.GetStartupInfoA, Ord:0128h
                                  |
:0046FEA2 FF1594D54B00            Call dword ptr [004BD594]
:0046FEA8 F645D001                test [ebp-30], 01
:0046FEAC 740A                    je 0046FEB8
:0046FEAE 8B45D4                  mov eax, dword ptr [ebp-2C]
:0046FEB1 25FFFF0000              and eax, 0000FFFF
:0046FEB6 EB05                    jmp 0046FEBD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FEAC(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0046FEB8 B80A000000              mov eax, 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FEB6(U)
|
:0046FEBD 50                      push eax
:0046FEBE 56                      push esi
:0046FEBF 6A00                    push 00000000
:0046FEC1 6A00                    push 00000000

* Reference To: KERNEL32.GetModuleHandleA, Ord:00FEh
                                  |
:0046FEC3 FF159CD54B00            Call dword ptr [004BD59C]
:0046FEC9 50                      push eax
:0046FECA E8B0A6FFFF              call 0046A57F
:0046FECF 8945A0                  mov dword ptr [ebp-60], eax
:0046FED2 50                      push eax
:0046FED3 E8C80D0000              call 00470CA0
:0046FED8 EB21                    jmp 0046FEFB
:0046FEDA 8B45EC                  mov eax, dword ptr [ebp-14]
:0046FEDD 8B08                    mov ecx, dword ptr [eax]
:0046FEDF 8B09                    mov ecx, dword ptr [ecx]
:0046FEE1 894D98                  mov dword ptr [ebp-68], ecx
:0046FEE4 50                      push eax
:0046FEE5 51                      push ecx
:0046FEE6 E8C5160000              call 004715B0
:0046FEEB 83C408                  add esp, 00000008
:0046FEEE C3                      ret


:0046FEEF 8B65E8                  mov esp, dword ptr [ebp-18]
:0046FEF2 8B5598                  mov edx, dword ptr [ebp-68]
:0046FEF5 52                      push edx
:0046FEF6 E8C50D0000              call 00470CC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FED8(U)
|
:0046FEFB 83C404                  add esp, 00000004
:0046FEFE C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0046FF05 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0046FF08 64890D00000000          mov dword ptr fs:[00000000], ecx
:0046FF0F 5F                      pop edi
:0046FF10 5E                      pop esi
:0046FF11 5B                      pop ebx
:0046FF12 8BE5                    mov esp, ebp
:0046FF14 5D                      pop ebp
:0046FF15 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FE52(C), :0046FF23(U)
|
:0046FF16 803E20                  cmp byte ptr [esi], 20
:0046FF19 0F8668FFFFFF            jbe 0046FE87
:0046FF1F 46                      inc esi
:0046FF20 89759C                  mov dword ptr [ebp-64], esi
:0046FF23 EBF1                    jmp 0046FF16
:0046FF25 90                      nop
:0046FF26 90                      nop
:0046FF27 90                      nop
:0046FF28 90                      nop
:0046FF29 90                      nop
:0046FF2A 90                      nop
:0046FF2B 90                      nop
:0046FF2C 90                      nop
:0046FF2D 90                      nop
:0046FF2E 90                      nop
:0046FF2F 90                      nop

* Referenced by a CALL at Addresses:
|:0046F4E8   , :0046FDF2   , :004717F2   , :0047182C   , :004718F4   
|:00471F9C   , :00473A82   
|
:0046FF30 833DE4624B0001          cmp dword ptr [004B62E4], 00000001
:0046FF37 7505                    jne 0046FF3E
:0046FF39 E882220000              call 004721C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FF37(C)
|
:0046FF3E 8B442404                mov eax, dword ptr [esp+04]
:0046FF42 50                      push eax
:0046FF43 E8B8220000              call 00472200
:0046FF48 83C404                  add esp, 00000004
:0046FF4B 68FF000000              push 000000FF
:0046FF50 FF15E4234800            call dword ptr [004823E4]
:0046FF56 83C404                  add esp, 00000004
:0046FF59 C3                      ret


:0046FF5A 90                      nop
:0046FF5B 90                      nop
:0046FF5C 90                      nop
:0046FF5D 90                      nop
:0046FF5E 90                      nop
:0046FF5F 90                      nop

* Referenced by a CALL at Addresses:
|:0046F0B7   , :0046F150   , :0046F27D   
|
:0046FF60 56                      push esi
:0046FF61 8B742418                mov esi, dword ptr [esp+18]
:0046FF65 813E20059319            cmp dword ptr [esi], 19930520
:0046FF6B 7405                    je 0046FF72
:0046FF6D E8CE0A0000              call 00470A40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FF6B(C)
|
:0046FF72 8B442408                mov eax, dword ptr [esp+08]
:0046FF76 F6400466                test [eax+04], 66
:0046FF7A 7433                    je 0046FFAF
:0046FF7C 8B4604                  mov eax, dword ptr [esi+04]
:0046FF7F 85C0                    test eax, eax
:0046FF81 0F8499000000            je 00470020
:0046FF87 8B44241C                mov eax, dword ptr [esp+1C]
:0046FF8B 85C0                    test eax, eax
:0046FF8D 0F858D000000            jne 00470020
:0046FF93 8B442414                mov eax, dword ptr [esp+14]
:0046FF97 8B4C240C                mov ecx, dword ptr [esp+0C]
:0046FF9B 6AFF                    push FFFFFFFF
:0046FF9D 56                      push esi
:0046FF9E 50                      push eax
:0046FF9F 51                      push ecx
:0046FFA0 E80B040000              call 004703B0
:0046FFA5 83C410                  add esp, 00000010
:0046FFA8 B801000000              mov eax, 00000001
:0046FFAD 5E                      pop esi
:0046FFAE C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0046FF7A(C)
|
:0046FFAF 8B4E0C                  mov ecx, dword ptr [esi+0C]
:0046FFB2 85C9                    test ecx, ecx
:0046FFB4 746A                    je 00470020
:0046FFB6 813863736DE0            cmp dword ptr [eax], E06D7363
:0046FFBC 753A                    jne 0046FFF8
:0046FFBE 81781420059319          cmp dword ptr [eax+14], 19930520
:0046FFC5 7631                    jbe 0046FFF8
:0046FFC7 8B501C                  mov edx, dword ptr [eax+1C]
:0046FFCA 8B4A08                  mov ecx, dword ptr [edx+08]
:0046FFCD 85C9                    test ecx, ecx
:0046FFCF 7427                    je 0046FFF8
:0046FFD1 8B542424                mov edx, dword ptr [esp+24]
:0046FFD5 52                      push edx
:0046FFD6 8B542424                mov edx, dword ptr [esp+24]
:0046FFDA 52                      push edx
:0046FFDB 8B542424                mov edx, dword ptr [esp+24]
:0046FFDF 52                      push edx
:0046FFE0 8B542420                mov edx, dword ptr [esp+20]
:0046FFE4 56                      push esi
:0046FFE5 52                      push edx
:0046FFE6 8B542424                mov edx, dword ptr [esp+24]
:0046FFEA 52                      push edx
:0046FFEB 8B542424                mov edx, dword ptr [esp+24]
:0046FFEF 52                      push edx
:0046FFF0 50                      push eax
:0046FFF1 FFD1                    call ecx
:0046FFF3 83C420                  add esp, 00000020
:0046FFF6 5E                      pop esi
:0046FFF7 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FFBC(C), :0046FFC5(C), :0046FFCF(C)
|
:0046FFF8 8B4C2420                mov ecx, dword ptr [esp+20]
:0046FFFC 8B54241C                mov edx, dword ptr [esp+1C]
:00470000 51                      push ecx
:00470001 8B4C2428                mov ecx, dword ptr [esp+28]
:00470005 52                      push edx
:00470006 8B54241C                mov edx, dword ptr [esp+1C]
:0047000A 51                      push ecx
:0047000B 8B4C241C                mov ecx, dword ptr [esp+1C]
:0047000F 56                      push esi
:00470010 52                      push edx
:00470011 8B542420                mov edx, dword ptr [esp+20]
:00470015 51                      push ecx
:00470016 52                      push edx
:00470017 50                      push eax
:00470018 E813000000              call 00470030
:0047001D 83C420                  add esp, 00000020

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0046FF81(C), :0046FF8D(C), :0046FFB4(C)
|
:00470020 B801000000              mov eax, 00000001
:00470025 5E                      pop esi
:00470026 C3                      ret


:00470027 90                      nop
:00470028 90                      nop
:00470029 90                      nop
:0047002A 90                      nop
:0047002B 90                      nop
:0047002C 90                      nop
:0047002D 90                      nop
:0047002E 90                      nop
:0047002F 90                      nop

* Referenced by a CALL at Address:
|:00470018   
|
:00470030 83EC24                  sub esp, 00000024
:00470033 8B44242C                mov eax, dword ptr [esp+2C]
:00470037 53                      push ebx
:00470038 55                      push ebp
:00470039 56                      push esi
:0047003A 8B6808                  mov ebp, dword ptr [eax+08]
:0047003D 57                      push edi
:0047003E 83FDFF                  cmp ebp, FFFFFFFF
:00470041 896C2424                mov dword ptr [esp+24], ebp
:00470045 7C09                    jl 00470050
:00470047 8B4C2448                mov ecx, dword ptr [esp+48]
:0047004B 3B6904                  cmp ebp, dword ptr [ecx+04]
:0047004E 7C05                    jl 00470055

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470045(C)
|
:00470050 E8EB090000              call 00470A40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047004E(C)
|
:00470055 8B5C2438                mov ebx, dword ptr [esp+38]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00470059 BE03000000              mov esi, 00000003
:0047005E BF20059319              mov edi, 19930520
:00470063 813B63736DE0            cmp dword ptr [ebx], E06D7363
:00470069 0F852C020000            jne 0047029B
:0047006F 397310                  cmp dword ptr [ebx+10], esi
:00470072 755F                    jne 004700D3
:00470074 397B14                  cmp dword ptr [ebx+14], edi
:00470077 755A                    jne 004700D3
:00470079 8B431C                  mov eax, dword ptr [ebx+1C]
:0047007C 85C0                    test eax, eax
:0047007E 7553                    jne 004700D3
:00470080 A1E8624B00              mov eax, dword ptr [004B62E8]
:00470085 85C0                    test eax, eax
:00470087 0F844B020000            je 004702D8
:0047008D 8B15EC624B00            mov edx, dword ptr [004B62EC]
:00470093 8BD8                    mov ebx, eax
:00470095 6A01                    push 00000001
:00470097 53                      push ebx
:00470098 895C2440                mov dword ptr [esp+40], ebx
:0047009C 89542448                mov dword ptr [esp+48], edx
:004700A0 E8CB230000              call 00472470
:004700A5 83C408                  add esp, 00000008
:004700A8 85C0                    test eax, eax
:004700AA 7505                    jne 004700B1
:004700AC E88F090000              call 00470A40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004700AA(C)
|
:004700B1 813B63736DE0            cmp dword ptr [ebx], E06D7363
:004700B7 0F85DE010000            jne 0047029B
:004700BD 397310                  cmp dword ptr [ebx+10], esi
:004700C0 7511                    jne 004700D3
:004700C2 397B14                  cmp dword ptr [ebx+14], edi
:004700C5 750C                    jne 004700D3
:004700C7 8B431C                  mov eax, dword ptr [ebx+1C]
:004700CA 85C0                    test eax, eax
:004700CC 7505                    jne 004700D3
:004700CE E86D090000              call 00470A40

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470072(C), :00470077(C), :0047007E(C), :004700C0(C), :004700C5(C)
|:004700CC(C)
|
:004700D3 813B63736DE0            cmp dword ptr [ebx], E06D7363
:004700D9 0F85BC010000            jne 0047029B
:004700DF 397310                  cmp dword ptr [ebx+10], esi
:004700E2 0F85B3010000            jne 0047029B
:004700E8 397B14                  cmp dword ptr [ebx+14], edi
:004700EB 0F85AA010000            jne 0047029B
:004700F1 8B542450                mov edx, dword ptr [esp+50]
:004700F5 8D442428                lea eax, dword ptr [esp+28]
:004700F9 8D4C2414                lea ecx, dword ptr [esp+14]
:004700FD 50                      push eax
:004700FE 8B44244C                mov eax, dword ptr [esp+4C]
:00470102 51                      push ecx
:00470103 55                      push ebp
:00470104 52                      push edx
:00470105 50                      push eax
:00470106 E8B5F1FFFF              call 0046F2C0
:0047010B 8B4C2428                mov ecx, dword ptr [esp+28]
:0047010F 8B54243C                mov edx, dword ptr [esp+3C]
:00470113 83C414                  add esp, 00000014
:00470116 3BCA                    cmp ecx, edx
:00470118 89442418                mov dword ptr [esp+18], eax
:0047011C 0F835E010000            jnb 00470280

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047027A(C)
|
:00470122 3928                    cmp dword ptr [eax], ebp
:00470124 0F8F3A010000            jg 00470264
:0047012A 3B6804                  cmp ebp, dword ptr [eax+04]
:0047012D 0F8F31010000            jg 00470264
:00470133 8B480C                  mov ecx, dword ptr [eax+0C]
:00470136 8B7010                  mov esi, dword ptr [eax+10]
:00470139 85C9                    test ecx, ecx
:0047013B 89742410                mov dword ptr [esp+10], esi
:0047013F 894C2420                mov dword ptr [esp+20], ecx
:00470143 0F8E17010000            jle 00470260
:00470149 8B431C                  mov eax, dword ptr [ebx+1C]
:0047014C 8B400C                  mov eax, dword ptr [eax+0C]
:0047014F 8D5004                  lea edx, dword ptr [eax+04]
:00470152 8B00                    mov eax, dword ptr [eax]
:00470154 8954242C                mov dword ptr [esp+2C], edx
:00470158 89442430                mov dword ptr [esp+30], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470223(C)
|
:0047015C 8B442430                mov eax, dword ptr [esp+30]
:00470160 8B6C242C                mov ebp, dword ptr [esp+2C]
:00470164 85C0                    test eax, eax
:00470166 8944241C                mov dword ptr [esp+1C], eax
:0047016A 0F8EA5000000            jle 00470215
:00470170 8B5604                  mov edx, dword ptr [esi+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047020B(C)
|
:00470173 8B7D00                  mov edi, dword ptr [ebp+00]
:00470176 85D2                    test edx, edx
:00470178 747A                    je 004701F4
:0047017A 8A4A08                  mov cl, byte ptr [edx+08]
:0047017D 8D4208                  lea eax, dword ptr [edx+08]
:00470180 84C9                    test cl, cl
:00470182 7470                    je 004701F4
:00470184 8B4F04                  mov ecx, dword ptr [edi+04]
:00470187 3BD1                    cmp edx, ecx
:00470189 7444                    je 004701CF
:0047018B 8D7108                  lea esi, dword ptr [ecx+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004701AC(C)
|
:0047018E 8A18                    mov bl, byte ptr [eax]
:00470190 8ACB                    mov cl, bl
:00470192 3A1E                    cmp bl, byte ptr [esi]
:00470194 751C                    jne 004701B2
:00470196 84C9                    test cl, cl
:00470198 7414                    je 004701AE
:0047019A 8A5801                  mov bl, byte ptr [eax+01]
:0047019D 8ACB                    mov cl, bl
:0047019F 3A5E01                  cmp bl, byte ptr [esi+01]
:004701A2 750E                    jne 004701B2
:004701A4 83C002                  add eax, 00000002
:004701A7 83C602                  add esi, 00000002
:004701AA 84C9                    test cl, cl
:004701AC 75E0                    jne 0047018E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470198(C)
|
:004701AE 33C0                    xor eax, eax
:004701B0 EB05                    jmp 004701B7

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470194(C), :004701A2(C)
|
:004701B2 1BC0                    sbb eax, eax
:004701B4 83D8FF                  sbb eax, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004701B0(U)
|
:004701B7 85C0                    test eax, eax
:004701B9 740C                    je 004701C7
:004701BB 8B5C2438                mov ebx, dword ptr [esp+38]
:004701BF 8B742410                mov esi, dword ptr [esp+10]
:004701C3 33C0                    xor eax, eax
:004701C5 EB32                    jmp 004701F9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004701B9(C)
|
:004701C7 8B5C2438                mov ebx, dword ptr [esp+38]
:004701CB 8B742410                mov esi, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470189(C)
|
:004701CF F60702                  test byte ptr [edi], 02
:004701D2 7405                    je 004701D9
:004701D4 F60608                  test byte ptr [esi], 08
:004701D7 7417                    je 004701F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004701D2(C)
|
:004701D9 8B431C                  mov eax, dword ptr [ebx+1C]
:004701DC 8B00                    mov eax, dword ptr [eax]
:004701DE A801                    test al, 01
:004701E0 7405                    je 004701E7
:004701E2 F60601                  test byte ptr [esi], 01
:004701E5 7409                    je 004701F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004701E0(C)
|
:004701E7 A802                    test al, 02
:004701E9 7409                    je 004701F4
:004701EB F60602                  test byte ptr [esi], 02
:004701EE 7504                    jne 004701F4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004701D7(C), :004701E5(C)
|
:004701F0 33C0                    xor eax, eax
:004701F2 EB05                    jmp 004701F9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470178(C), :00470182(C), :004701E9(C), :004701EE(C)
|
:004701F4 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004701C5(U), :004701F2(U)
|
:004701F9 85C0                    test eax, eax
:004701FB 752E                    jne 0047022B
:004701FD 8B44241C                mov eax, dword ptr [esp+1C]
:00470201 83C504                  add ebp, 00000004
:00470204 48                      dec eax
:00470205 85C0                    test eax, eax
:00470207 8944241C                mov dword ptr [esp+1C], eax
:0047020B 0F8F62FFFFFF            jg 00470173
:00470211 8B4C2420                mov ecx, dword ptr [esp+20]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047016A(C)
|
:00470215 49                      dec ecx
:00470216 83C610                  add esi, 00000010
:00470219 85C9                    test ecx, ecx
:0047021B 894C2420                mov dword ptr [esp+20], ecx
:0047021F 89742410                mov dword ptr [esp+10], esi
:00470223 0F8F33FFFFFF            jg 0047015C
:00470229 EB31                    jmp 0047025C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004701FB(C)
|
:0047022B 8B4C2454                mov ecx, dword ptr [esp+54]
:0047022F 8B542450                mov edx, dword ptr [esp+50]
:00470233 8B442418                mov eax, dword ptr [esp+18]
:00470237 51                      push ecx
:00470238 8B4D00                  mov ecx, dword ptr [ebp+00]
:0047023B 52                      push edx
:0047023C 8B542450                mov edx, dword ptr [esp+50]
:00470240 50                      push eax
:00470241 8B442450                mov eax, dword ptr [esp+50]
:00470245 51                      push ecx
:00470246 8B4C2450                mov ecx, dword ptr [esp+50]
:0047024A 56                      push esi
:0047024B 52                      push edx
:0047024C 8B542454                mov edx, dword ptr [esp+54]
:00470250 50                      push eax
:00470251 51                      push ecx
:00470252 52                      push edx
:00470253 53                      push ebx
:00470254 E837020000              call 00470490
:00470259 83C428                  add esp, 00000028

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470229(U)
|
:0047025C 8B6C2424                mov ebp, dword ptr [esp+24]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470143(C)
|
:00470260 8B442418                mov eax, dword ptr [esp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470124(C), :0047012D(C)
|
:00470264 8B4C2414                mov ecx, dword ptr [esp+14]
:00470268 8B542428                mov edx, dword ptr [esp+28]
:0047026C 41                      inc ecx
:0047026D 83C014                  add eax, 00000014
:00470270 3BCA                    cmp ecx, edx
:00470272 894C2414                mov dword ptr [esp+14], ecx
:00470276 89442418                mov dword ptr [esp+18], eax
:0047027A 0F82A2FEFFFF            jb 00470122

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047011C(C)
|
:00470280 8A44244C                mov al, byte ptr [esp+4C]
:00470284 84C0                    test al, al
:00470286 7450                    je 004702D8
:00470288 6A01                    push 00000001
:0047028A 53                      push ebx
:0047028B E820060000              call 004708B0
:00470290 83C408                  add esp, 00000008
:00470293 5F                      pop edi
:00470294 5E                      pop esi
:00470295 5D                      pop ebp
:00470296 5B                      pop ebx
:00470297 83C424                  add esp, 00000024
:0047029A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470069(C), :004700B7(C), :004700D9(C), :004700E2(C), :004700EB(C)
|
:0047029B 8A44244C                mov al, byte ptr [esp+4C]
:0047029F 84C0                    test al, al
:004702A1 7530                    jne 004702D3
:004702A3 8B442454                mov eax, dword ptr [esp+54]
:004702A7 8B4C2450                mov ecx, dword ptr [esp+50]
:004702AB 8B542448                mov edx, dword ptr [esp+48]
:004702AF 50                      push eax
:004702B0 8B442448                mov eax, dword ptr [esp+48]
:004702B4 51                      push ecx
:004702B5 8B4C2448                mov ecx, dword ptr [esp+48]
:004702B9 55                      push ebp
:004702BA 52                      push edx
:004702BB 8B54244C                mov edx, dword ptr [esp+4C]
:004702BF 50                      push eax
:004702C0 51                      push ecx
:004702C1 52                      push edx
:004702C2 53                      push ebx
:004702C3 E818000000              call 004702E0
:004702C8 83C420                  add esp, 00000020
:004702CB 5F                      pop edi
:004702CC 5E                      pop esi
:004702CD 5D                      pop ebp
:004702CE 5B                      pop ebx
:004702CF 83C424                  add esp, 00000024
:004702D2 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004702A1(C)
|
:004702D3 E8D8060000              call 004709B0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470087(C), :00470286(C)
|
:004702D8 5F                      pop edi
:004702D9 5E                      pop esi
:004702DA 5D                      pop ebp
:004702DB 5B                      pop ebx
:004702DC 83C424                  add esp, 00000024
:004702DF C3                      ret



* Referenced by a CALL at Address:
|:004702C3   
|
:004702E0 A1F0624B00              mov eax, dword ptr [004B62F0]
:004702E5 53                      push ebx
:004702E6 8B5C2418                mov ebx, dword ptr [esp+18]
:004702EA 55                      push ebp
:004702EB 8B6C2428                mov ebp, dword ptr [esp+28]
:004702EF 56                      push esi
:004702F0 57                      push edi
:004702F1 8B7C242C                mov edi, dword ptr [esp+2C]
:004702F5 85C0                    test eax, eax
:004702F7 7427                    je 00470320
:004702F9 8B442420                mov eax, dword ptr [esp+20]
:004702FD 8B4C241C                mov ecx, dword ptr [esp+1C]
:00470301 8B542418                mov edx, dword ptr [esp+18]
:00470305 55                      push ebp
:00470306 57                      push edi
:00470307 53                      push ebx
:00470308 50                      push eax
:00470309 8B442424                mov eax, dword ptr [esp+24]
:0047030D 51                      push ecx
:0047030E 52                      push edx
:0047030F 50                      push eax
:00470310 E84BEEFFFF              call 0046F160
:00470315 83C41C                  add esp, 0000001C
:00470318 85C0                    test eax, eax
:0047031A 0F8589000000            jne 004703A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004702F7(C)
|
:00470320 8B442428                mov eax, dword ptr [esp+28]
:00470324 8D4C242C                lea ecx, dword ptr [esp+2C]
:00470328 8D542430                lea edx, dword ptr [esp+30]
:0047032C 51                      push ecx
:0047032D 52                      push edx
:0047032E 50                      push eax
:0047032F 57                      push edi
:00470330 53                      push ebx
:00470331 E88AEFFFFF              call 0046F2C0
:00470336 8B4C2444                mov ecx, dword ptr [esp+44]
:0047033A 8BF0                    mov esi, eax
:0047033C 8B442440                mov eax, dword ptr [esp+40]
:00470340 83C414                  add esp, 00000014
:00470343 3BC8                    cmp ecx, eax
:00470345 7362                    jnb 004703A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004703A7(C)
|
:00470347 8B442428                mov eax, dword ptr [esp+28]
:0047034B 8B0E                    mov ecx, dword ptr [esi]
:0047034D 3BC1                    cmp eax, ecx
:0047034F 7C44                    jl 00470395
:00470351 3B4604                  cmp eax, dword ptr [esi+04]
:00470354 7F3F                    jg 00470395
:00470356 8B560C                  mov edx, dword ptr [esi+0C]
:00470359 8B4610                  mov eax, dword ptr [esi+10]
:0047035C C1E204                  shl edx, 04
:0047035F 03C2                    add eax, edx
:00470361 8B48F4                  mov ecx, dword ptr [eax-0C]
:00470364 85C9                    test ecx, ecx
:00470366 7407                    je 0047036F
:00470368 8A5108                  mov dl, byte ptr [ecx+08]
:0047036B 84D2                    test dl, dl
:0047036D 7526                    jne 00470395

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470366(C)
|
:0047036F 8B4C2420                mov ecx, dword ptr [esp+20]
:00470373 8B54241C                mov edx, dword ptr [esp+1C]
:00470377 55                      push ebp
:00470378 57                      push edi
:00470379 56                      push esi
:0047037A 83C0F0                  add eax, FFFFFFF0
:0047037D 6A00                    push 00000000
:0047037F 50                      push eax
:00470380 8B44242C                mov eax, dword ptr [esp+2C]
:00470384 53                      push ebx
:00470385 51                      push ecx
:00470386 8B4C2430                mov ecx, dword ptr [esp+30]
:0047038A 52                      push edx
:0047038B 50                      push eax
:0047038C 51                      push ecx
:0047038D E8FE000000              call 00470490
:00470392 83C428                  add esp, 00000028

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047034F(C), :00470354(C), :0047036D(C)
|
:00470395 8B442430                mov eax, dword ptr [esp+30]
:00470399 8B4C242C                mov ecx, dword ptr [esp+2C]
:0047039D 40                      inc eax
:0047039E 83C614                  add esi, 00000014
:004703A1 3BC1                    cmp eax, ecx
:004703A3 89442430                mov dword ptr [esp+30], eax
:004703A7 729E                    jb 00470347

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047031A(C), :00470345(C)
|
:004703A9 5F                      pop edi
:004703AA 5E                      pop esi
:004703AB 5D                      pop ebp
:004703AC 5B                      pop ebx
:004703AD C3                      ret


:004703AE 90                      nop
:004703AF 90                      nop

* Referenced by a CALL at Addresses:
|:0046FFA0   , :004704D8   
|
:004703B0 55                      push ebp
:004703B1 8BEC                    mov ebp, esp
:004703B3 6AFF                    push FFFFFFFF
:004703B5 6828B14700              push 0047B128
:004703BA 68D8144700              push 004714D8
:004703BF 64A100000000            mov eax, dword ptr fs:[00000000]
:004703C5 50                      push eax
:004703C6 64892500000000          mov dword ptr fs:[00000000], esp
:004703CD 83C4F4                  add esp, FFFFFFF4
:004703D0 53                      push ebx
:004703D1 56                      push esi
:004703D2 57                      push edi
:004703D3 8965E8                  mov dword ptr [ebp-18], esp
:004703D6 8B5D08                  mov ebx, dword ptr [ebp+08]
:004703D9 8B7308                  mov esi, dword ptr [ebx+08]
:004703DC 8975E4                  mov dword ptr [ebp-1C], esi
:004703DF 8B7D10                  mov edi, dword ptr [ebp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470424(U), :0047044F(U)
|
:004703E2 3B7514                  cmp esi, dword ptr [ebp+14]
:004703E5 746A                    je 00470451
:004703E7 83FEFF                  cmp esi, FFFFFFFF
:004703EA 7E05                    jle 004703F1
:004703EC 3B7704                  cmp esi, dword ptr [edi+04]
:004703EF 7C05                    jl 004703F6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004703EA(C)
|
:004703F1 E84A060000              call 00470A40

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004703EF(C)
|
:004703F6 C745FC00000000          mov [ebp-04], 00000000
:004703FD 8B4708                  mov eax, dword ptr [edi+08]
:00470400 8B44F004                mov eax, dword ptr [eax+8*esi+04]
:00470404 85C0                    test eax, eax
:00470406 740C                    je 00470414
:00470408 6803010000              push 00000103
:0047040D 53                      push ebx
:0047040E 50                      push eax
:0047040F E84C050000              call 00470960

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470406(C)
|
:00470414 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0047041B 8B5708                  mov edx, dword ptr [edi+08]
:0047041E 8B34F2                  mov esi, dword ptr [edx+8*esi]
:00470421 8975E4                  mov dword ptr [ebp-1C], esi
:00470424 EBBC                    jmp 004703E2
:00470426 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00470429 51                      push ecx
:0047042A E841000000              call 00470470
:0047042F 83C404                  add esp, 00000004
:00470432 C3                      ret


:00470433 8B65E8                  mov esp, dword ptr [ebp-18]
:00470436 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:0047043D 8B7D10                  mov edi, dword ptr [ebp+10]
:00470440 8B5D08                  mov ebx, dword ptr [ebp+08]
:00470443 8B75E4                  mov esi, dword ptr [ebp-1C]
:00470446 8B5708                  mov edx, dword ptr [edi+08]
:00470449 8B34F2                  mov esi, dword ptr [edx+8*esi]
:0047044C 8975E4                  mov dword ptr [ebp-1C], esi
:0047044F EB91                    jmp 004703E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004703E5(C)
|
:00470451 897308                  mov dword ptr [ebx+08], esi
:00470454 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00470457 64890D00000000          mov dword ptr fs:[00000000], ecx
:0047045E 5F                      pop edi
:0047045F 5E                      pop esi
:00470460 5B                      pop ebx
:00470461 8BE5                    mov esp, ebp
:00470463 5D                      pop ebp
:00470464 C3                      ret


:00470465 90                      nop
:00470466 90                      nop
:00470467 90                      nop
:00470468 90                      nop
:00470469 90                      nop
:0047046A 90                      nop
:0047046B 90                      nop
:0047046C 90                      nop
:0047046D 90                      nop
:0047046E 90                      nop
:0047046F 90                      nop

* Referenced by a CALL at Addresses:
|:0046FD64   , :0047042A   
|
:00470470 8B442404                mov eax, dword ptr [esp+04]
:00470474 8B08                    mov ecx, dword ptr [eax]
:00470476 813963736DE0            cmp dword ptr [ecx], E06D7363
:0047047C 7505                    jne 00470483
:0047047E E82D050000              call 004709B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047047C(C)
|
:00470483 33C0                    xor eax, eax
:00470485 C3                      ret


:00470486 90                      nop
:00470487 90                      nop
:00470488 90                      nop
:00470489 90                      nop
:0047048A 90                      nop
:0047048B 90                      nop
:0047048C 90                      nop
:0047048D 90                      nop
:0047048E 90                      nop
:0047048F 90                      nop

* Referenced by a CALL at Addresses:
|:00470254   , :0047038D   
|
:00470490 8B44241C                mov eax, dword ptr [esp+1C]
:00470494 53                      push ebx
:00470495 55                      push ebp
:00470496 8B6C240C                mov ebp, dword ptr [esp+0C]
:0047049A 56                      push esi
:0047049B 8B742414                mov esi, dword ptr [esp+14]
:0047049F 85C0                    test eax, eax
:004704A1 57                      push edi
:004704A2 7410                    je 004704B4
:004704A4 50                      push eax
:004704A5 8B44242C                mov eax, dword ptr [esp+2C]
:004704A9 50                      push eax
:004704AA 56                      push esi
:004704AB 55                      push ebp
:004704AC E8EF010000              call 004706A0
:004704B1 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004704A2(C)
|
:004704B4 8B442438                mov eax, dword ptr [esp+38]
:004704B8 55                      push ebp
:004704B9 85C0                    test eax, eax
:004704BB 7503                    jne 004704C0
:004704BD 56                      push esi
:004704BE EB01                    jmp 004704C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004704BB(C)
|
:004704C0 50                      push eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004704BE(U)
|
:004704C1 E86AEBFFFF              call 0046F030
:004704C6 8B7C2430                mov edi, dword ptr [esp+30]
:004704CA 8B5C2424                mov ebx, dword ptr [esp+24]
:004704CE 8B542420                mov edx, dword ptr [esp+20]
:004704D2 8B0F                    mov ecx, dword ptr [edi]
:004704D4 51                      push ecx
:004704D5 53                      push ebx
:004704D6 52                      push edx
:004704D7 56                      push esi
:004704D8 E8D3FEFFFF              call 004703B0
:004704DD 8B4704                  mov eax, dword ptr [edi+04]
:004704E0 8B542438                mov edx, dword ptr [esp+38]
:004704E4 8B4C2444                mov ecx, dword ptr [esp+44]
:004704E8 83C410                  add esp, 00000010
:004704EB 40                      inc eax
:004704EC 894608                  mov dword ptr [esi+08], eax
:004704EF 8B420C                  mov eax, dword ptr [edx+0C]
:004704F2 6800010000              push 00000100
:004704F7 51                      push ecx
:004704F8 8B4C2424                mov ecx, dword ptr [esp+24]
:004704FC 50                      push eax
:004704FD 53                      push ebx
:004704FE 51                      push ecx
:004704FF 56                      push esi
:00470500 55                      push ebp
:00470501 E81A000000              call 00470520
:00470506 83C41C                  add esp, 0000001C
:00470509 85C0                    test eax, eax
:0047050B 7407                    je 00470514
:0047050D 56                      push esi
:0047050E 50                      push eax
:0047050F E8CCEAFFFF              call 0046EFE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047050B(C)
|
:00470514 5F                      pop edi
:00470515 5E                      pop esi
:00470516 5D                      pop ebp
:00470517 5B                      pop ebx
:00470518 C3                      ret


:00470519 90                      nop
:0047051A 90                      nop
:0047051B 90                      nop
:0047051C 90                      nop
:0047051D 90                      nop
:0047051E 90                      nop
:0047051F 90                      nop

* Referenced by a CALL at Address:
|:00470501   
|
:00470520 55                      push ebp
:00470521 8BEC                    mov ebp, esp
:00470523 6AFF                    push FFFFFFFF
:00470525 6838B14700              push 0047B138
:0047052A 68D8144700              push 004714D8
:0047052F 64A100000000            mov eax, dword ptr fs:[00000000]
:00470535 50                      push eax
:00470536 64892500000000          mov dword ptr fs:[00000000], esp
:0047053D 83C4E4                  add esp, FFFFFFE4
:00470540 53                      push ebx
:00470541 56                      push esi
:00470542 57                      push edi
:00470543 8965E8                  mov dword ptr [ebp-18], esp
:00470546 8B4518                  mov eax, dword ptr [ebp+18]
:00470549 8945D4                  mov dword ptr [ebp-2C], eax
:0047054C 33C9                    xor ecx, ecx
:0047054E 894DDC                  mov dword ptr [ebp-24], ecx
:00470551 8B750C                  mov esi, dword ptr [ebp+0C]
:00470554 8B56FC                  mov edx, dword ptr [esi-04]
:00470557 8955D8                  mov dword ptr [ebp-28], edx
:0047055A 8B15E8624B00            mov edx, dword ptr [004B62E8]
:00470560 8955E4                  mov dword ptr [ebp-1C], edx
:00470563 8B15EC624B00            mov edx, dword ptr [004B62EC]
:00470569 8955E0                  mov dword ptr [ebp-20], edx
:0047056C 8B7D08                  mov edi, dword ptr [ebp+08]
:0047056F 893DE8624B00            mov dword ptr [004B62E8], edi
:00470575 8B5510                  mov edx, dword ptr [ebp+10]
:00470578 8915EC624B00            mov dword ptr [004B62EC], edx
:0047057E 894DFC                  mov dword ptr [ebp-04], ecx
:00470581 C745FC01000000          mov [ebp-04], 00000001
:00470588 8B4D20                  mov ecx, dword ptr [ebp+20]
:0047058B 51                      push ecx
:0047058C 8B551C                  mov edx, dword ptr [ebp+1C]
:0047058F 52                      push edx
:00470590 50                      push eax
:00470591 8B4514                  mov eax, dword ptr [ebp+14]
:00470594 50                      push eax
:00470595 56                      push esi
:00470596 E835EBFFFF              call 0046F0D0
:0047059B 83C414                  add esp, 00000014
:0047059E 8BD8                    mov ebx, eax
:004705A0 895DD4                  mov dword ptr [ebp-2C], ebx
:004705A3 C745FC00000000          mov [ebp-04], 00000000
:004705AA C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:004705B1 E854000000              call 0047060A
:004705B6 8BC3                    mov eax, ebx
:004705B8 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004705BB 64890D00000000          mov dword ptr fs:[00000000], ecx
:004705C2 5F                      pop edi
:004705C3 5E                      pop esi
:004705C4 5B                      pop ebx
:004705C5 8BE5                    mov esp, ebp
:004705C7 5D                      pop ebp
:004705C8 C3                      ret


:004705C9 8B4DEC                  mov ecx, dword ptr [ebp-14]
:004705CC 51                      push ecx
:004705CD E89E000000              call 00470670
:004705D2 83C404                  add esp, 00000004
:004705D5 C3                      ret


:004705D6 8B65E8                  mov esp, dword ptr [ebp-18]
:004705D9 C745D400000000          mov [ebp-2C], 00000000
:004705E0 6AFF                    push FFFFFFFF
:004705E2 8D55F0                  lea edx, dword ptr [ebp-10]
:004705E5 52                      push edx
:004705E6 E897EDFFFF              call 0046F382
:004705EB 83C408                  add esp, 00000008
:004705EE 33C0                    xor eax, eax
:004705F0 8B4DF0                  mov ecx, dword ptr [ebp-10]
:004705F3 64890D00000000          mov dword ptr fs:[00000000], ecx
:004705FA 5F                      pop edi
:004705FB 5E                      pop esi
:004705FC 5B                      pop ebx
:004705FD 8BE5                    mov esp, ebp
:004705FF 5D                      pop ebp
:00470600 C3                      ret


:00470601 8B750C                  mov esi, dword ptr [ebp+0C]
:00470604 8B7D08                  mov edi, dword ptr [ebp+08]
:00470607 8B5DD4                  mov ebx, dword ptr [ebp-2C]

* Referenced by a CALL at Address:
|:004705B1   
|
:0047060A 8B45D8                  mov eax, dword ptr [ebp-28]
:0047060D 8946FC                  mov dword ptr [esi-04], eax
:00470610 8B4DE4                  mov ecx, dword ptr [ebp-1C]
:00470613 890DE8624B00            mov dword ptr [004B62E8], ecx
:00470619 8B55E0                  mov edx, dword ptr [ebp-20]
:0047061C 8915EC624B00            mov dword ptr [004B62EC], edx
:00470622 813F63736DE0            cmp dword ptr [edi], E06D7363
:00470628 7529                    jne 00470653
:0047062A 837F1003                cmp dword ptr [edi+10], 00000003
:0047062E 7523                    jne 00470653
:00470630 817F1420059319          cmp dword ptr [edi+14], 19930520
:00470637 751A                    jne 00470653
:00470639 8B45DC                  mov eax, dword ptr [ebp-24]
:0047063C 85C0                    test eax, eax
:0047063E 7513                    jne 00470653
:00470640 85DB                    test ebx, ebx
:00470642 740F                    je 00470653
:00470644 E8A1EDFFFF              call 0046F3EA
:00470649 50                      push eax
:0047064A 57                      push edi
:0047064B E860020000              call 004708B0
:00470650 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470628(C), :0047062E(C), :00470637(C), :0047063E(C), :00470642(C)
|
:00470653 C3                      ret
:00470654 8BC3                    mov eax, ebx
:00470656 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00470659 64890D00000000          mov dword ptr fs:[00000000], ecx
:00470660 5F                      pop edi
:00470661 5E                      pop esi
:00470662 5B                      pop ebx
:00470663 8BE5                    mov esp, ebp
:00470665 5D                      pop ebp
:00470666 C3                      ret


:00470667 90                      nop
:00470668 90                      nop
:00470669 90                      nop
:0047066A 90                      nop
:0047066B 90                      nop
:0047066C 90                      nop
:0047066D 90                      nop
:0047066E 90                      nop
:0047066F 90                      nop

* Referenced by a CALL at Address:
|:004705CD   
|
:00470670 8B442404                mov eax, dword ptr [esp+04]
:00470674 8B00                    mov eax, dword ptr [eax]
:00470676 813863736DE0            cmp dword ptr [eax], E06D7363
:0047067C 751C                    jne 0047069A
:0047067E 83781003                cmp dword ptr [eax+10], 00000003
:00470682 7516                    jne 0047069A
:00470684 81781420059319          cmp dword ptr [eax+14], 19930520
:0047068B 750D                    jne 0047069A
:0047068D 8B481C                  mov ecx, dword ptr [eax+1C]
:00470690 85C9                    test ecx, ecx
:00470692 7506                    jne 0047069A
:00470694 B801000000              mov eax, 00000001
:00470699 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047067C(C), :00470682(C), :0047068B(C), :00470692(C)
|
:0047069A 33C0                    xor eax, eax
:0047069C C3                      ret


:0047069D 90                      nop
:0047069E 90                      nop
:0047069F 90                      nop

* Referenced by a CALL at Address:
|:004704AC   
|
:004706A0 55                      push ebp
:004706A1 8BEC                    mov ebp, esp
:004706A3 6AFF                    push FFFFFFFF
:004706A5 6850B14700              push 0047B150
:004706AA 68D8144700              push 004714D8
:004706AF 64A100000000            mov eax, dword ptr fs:[00000000]
:004706B5 50                      push eax
:004706B6 64892500000000          mov dword ptr fs:[00000000], esp
:004706BD 83C4F4                  add esp, FFFFFFF4
:004706C0 53                      push ebx
:004706C1 56                      push esi
:004706C2 57                      push edi
:004706C3 8965E8                  mov dword ptr [ebp-18], esp
:004706C6 8B4D10                  mov ecx, dword ptr [ebp+10]
:004706C9 8B4104                  mov eax, dword ptr [ecx+04]
:004706CC 85C0                    test eax, eax
:004706CE 0F84BC010000            je 00470890
:004706D4 8A5008                  mov dl, byte ptr [eax+08]
:004706D7 84D2                    test dl, dl
:004706D9 0F84B1010000            je 00470890
:004706DF 8B4108                  mov eax, dword ptr [ecx+08]
:004706E2 85C0                    test eax, eax
:004706E4 0F84A6010000            je 00470890
:004706EA 8B550C                  mov edx, dword ptr [ebp+0C]
:004706ED 8D74020C                lea esi, dword ptr [edx+eax+0C]
:004706F1 C745FC00000000          mov [ebp-04], 00000000
:004706F8 F60108                  test byte ptr [ecx], 08
:004706FB 7448                    je 00470745
:004706FD 8B7D08                  mov edi, dword ptr [ebp+08]
:00470700 6A01                    push 00000001
:00470702 8B4718                  mov eax, dword ptr [edi+18]
:00470705 50                      push eax
:00470706 E8651D0000              call 00472470
:0047070B 83C408                  add esp, 00000008
:0047070E 85C0                    test eax, eax
:00470710 0F845E010000            je 00470874
:00470716 6A01                    push 00000001
:00470718 56                      push esi
:00470719 E8721D0000              call 00472490
:0047071E 83C408                  add esp, 00000008
:00470721 85C0                    test eax, eax
:00470723 0F844B010000            je 00470874
:00470729 8B4718                  mov eax, dword ptr [edi+18]
:0047072C 8906                    mov dword ptr [esi], eax
:0047072E 8B4D14                  mov ecx, dword ptr [ebp+14]
:00470731 83C108                  add ecx, 00000008
:00470734 51                      push ecx
:00470735 50                      push eax
:00470736 E8F5010000              call 00470930
:0047073B 83C408                  add esp, 00000008
:0047073E 8906                    mov dword ptr [esi], eax
:00470740 E944010000              jmp 00470889

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004706FB(C)
|
:00470745 8B7D14                  mov edi, dword ptr [ebp+14]
:00470748 F60701                  test byte ptr [edi], 01
:0047074B 7465                    je 004707B2
:0047074D 8B5D08                  mov ebx, dword ptr [ebp+08]
:00470750 6A01                    push 00000001
:00470752 8B5318                  mov edx, dword ptr [ebx+18]
:00470755 52                      push edx
:00470756 E8151D0000              call 00472470
:0047075B 83C408                  add esp, 00000008
:0047075E 85C0                    test eax, eax
:00470760 0F840E010000            je 00470874
:00470766 6A01                    push 00000001
:00470768 56                      push esi
:00470769 E8221D0000              call 00472490
:0047076E 83C408                  add esp, 00000008
:00470771 85C0                    test eax, eax
:00470773 0F84FB000000            je 00470874
:00470779 8B4714                  mov eax, dword ptr [edi+14]
:0047077C 50                      push eax
:0047077D 8B4B18                  mov ecx, dword ptr [ebx+18]
:00470780 51                      push ecx
:00470781 56                      push esi
:00470782 E8491D0000              call 004724D0
:00470787 83C40C                  add esp, 0000000C
:0047078A 837F1404                cmp dword ptr [edi+14], 00000004
:0047078E 0F85F5000000            jne 00470889
:00470794 8B06                    mov eax, dword ptr [esi]
:00470796 85C0                    test eax, eax
:00470798 0F84EB000000            je 00470889
:0047079E 83C708                  add edi, 00000008
:004707A1 57                      push edi
:004707A2 50                      push eax
:004707A3 E888010000              call 00470930
:004707A8 83C408                  add esp, 00000008
:004707AB 8906                    mov dword ptr [esi], eax
:004707AD E9D7000000              jmp 00470889

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047074B(C)
|
:004707B2 8B4718                  mov eax, dword ptr [edi+18]
:004707B5 85C0                    test eax, eax
:004707B7 8B5D08                  mov ebx, dword ptr [ebp+08]
:004707BA 6A01                    push 00000001
:004707BC 8B5318                  mov edx, dword ptr [ebx+18]
:004707BF 52                      push edx
:004707C0 7546                    jne 00470808
:004707C2 E8A91C0000              call 00472470
:004707C7 83C408                  add esp, 00000008
:004707CA 85C0                    test eax, eax
:004707CC 0F84A2000000            je 00470874
:004707D2 6A01                    push 00000001
:004707D4 56                      push esi
:004707D5 E8B61C0000              call 00472490
:004707DA 83C408                  add esp, 00000008
:004707DD 85C0                    test eax, eax
:004707DF 0F848F000000            je 00470874
:004707E5 8B4714                  mov eax, dword ptr [edi+14]
:004707E8 50                      push eax
:004707E9 83C708                  add edi, 00000008
:004707EC 57                      push edi
:004707ED 8B4B18                  mov ecx, dword ptr [ebx+18]
:004707F0 51                      push ecx
:004707F1 E83A010000              call 00470930
:004707F6 83C408                  add esp, 00000008
:004707F9 50                      push eax
:004707FA 56                      push esi
:004707FB E8D01C0000              call 004724D0
:00470800 83C40C                  add esp, 0000000C
:00470803 E981000000              jmp 00470889

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004707C0(C)
|
:00470808 E8631C0000              call 00472470
:0047080D 83C408                  add esp, 00000008
:00470810 85C0                    test eax, eax
:00470812 7460                    je 00470874
:00470814 6A01                    push 00000001
:00470816 56                      push esi
:00470817 E8741C0000              call 00472490
:0047081C 83C408                  add esp, 00000008
:0047081F 85C0                    test eax, eax
:00470821 7451                    je 00470874
:00470823 8B4718                  mov eax, dword ptr [edi+18]
:00470826 50                      push eax
:00470827 E8841C0000              call 004724B0
:0047082C 83C404                  add esp, 00000004
:0047082F 85C0                    test eax, eax
:00470831 7441                    je 00470874
:00470833 F60704                  test byte ptr [edi], 04
:00470836 741F                    je 00470857
:00470838 6A01                    push 00000001
:0047083A 8D4F08                  lea ecx, dword ptr [edi+08]
:0047083D 51                      push ecx
:0047083E 8B5318                  mov edx, dword ptr [ebx+18]
:00470841 52                      push edx
:00470842 E8E9000000              call 00470930
:00470847 83C408                  add esp, 00000008
:0047084A 50                      push eax
:0047084B 8B4718                  mov eax, dword ptr [edi+18]
:0047084E 50                      push eax
:0047084F 56                      push esi
:00470850 E8CBE7FFFF              call 0046F020
:00470855 EB32                    jmp 00470889

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470836(C)
|
:00470857 8D4F08                  lea ecx, dword ptr [edi+08]
:0047085A 51                      push ecx
:0047085B 8B5318                  mov edx, dword ptr [ebx+18]
:0047085E 52                      push edx
:0047085F E8CC000000              call 00470930
:00470864 83C408                  add esp, 00000008
:00470867 50                      push eax
:00470868 8B4718                  mov eax, dword ptr [edi+18]
:0047086B 50                      push eax
:0047086C 56                      push esi
:0047086D E8AEE7FFFF              call 0046F020
:00470872 EB15                    jmp 00470889

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470710(C), :00470723(C), :00470760(C), :00470773(C), :004707CC(C)
|:004707DF(C), :00470812(C), :00470821(C), :00470831(C)
|
:00470874 E8C7010000              call 00470A40
:00470879 EB0E                    jmp 00470889
:0047087B B801000000              mov eax, 00000001
:00470880 C3                      ret


:00470881 8B65E8                  mov esp, dword ptr [ebp-18]
:00470884 E827010000              call 004709B0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470740(U), :0047078E(C), :00470798(C), :004707AD(U), :00470803(U)
|:00470855(U), :00470872(U), :00470879(U)
|
:00470889 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004706CE(C), :004706D9(C), :004706E4(C)
|
:00470890 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00470893 64890D00000000          mov dword ptr fs:[00000000], ecx
:0047089A 5F                      pop edi
:0047089B 5E                      pop esi
:0047089C 5B                      pop ebx
:0047089D 8BE5                    mov esp, ebp
:0047089F 5D                      pop ebp
:004708A0 C3                      ret


:004708A1 90                      nop
:004708A2 90                      nop
:004708A3 90                      nop
:004708A4 90                      nop
:004708A5 90                      nop
:004708A6 90                      nop
:004708A7 90                      nop
:004708A8 90                      nop
:004708A9 90                      nop
:004708AA 90                      nop
:004708AB 90                      nop
:004708AC 90                      nop
:004708AD 90                      nop
:004708AE 90                      nop
:004708AF 90                      nop

* Referenced by a CALL at Addresses:
|:0047028B   , :0047064B   
|
:004708B0 55                      push ebp
:004708B1 8BEC                    mov ebp, esp
:004708B3 6AFF                    push FFFFFFFF
:004708B5 6860B14700              push 0047B160
:004708BA 68D8144700              push 004714D8
:004708BF 64A100000000            mov eax, dword ptr fs:[00000000]
:004708C5 50                      push eax
:004708C6 64892500000000          mov dword ptr fs:[00000000], esp
:004708CD 83EC08                  sub esp, 00000008
:004708D0 53                      push ebx
:004708D1 56                      push esi
:004708D2 57                      push edi
:004708D3 8965E8                  mov dword ptr [ebp-18], esp
:004708D6 8B4D08                  mov ecx, dword ptr [ebp+08]
:004708D9 85C9                    test ecx, ecx
:004708DB 7437                    je 00470914
:004708DD 8B411C                  mov eax, dword ptr [ecx+1C]
:004708E0 8B4004                  mov eax, dword ptr [eax+04]
:004708E3 85C0                    test eax, eax
:004708E5 742D                    je 00470914
:004708E7 C745FC00000000          mov [ebp-04], 00000000
:004708EE 50                      push eax
:004708EF 8B4918                  mov ecx, dword ptr [ecx+18]
:004708F2 51                      push ecx
:004708F3 E828E7FFFF              call 0046F020
:004708F8 EB13                    jmp 0047090D
:004708FA 33C0                    xor eax, eax
:004708FC 8A4D0C                  mov cl, byte ptr [ebp+0C]
:004708FF 84C9                    test cl, cl
:00470901 0F95C0                  setne al
:00470904 C3                      ret


:00470905 8B65E8                  mov esp, dword ptr [ebp-18]
:00470908 E8A3000000              call 004709B0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004708F8(U)
|
:0047090D C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004708DB(C), :004708E5(C)
|
:00470914 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00470917 64890D00000000          mov dword ptr fs:[00000000], ecx
:0047091E 5F                      pop edi
:0047091F 5E                      pop esi
:00470920 5B                      pop ebx
:00470921 8BE5                    mov esp, ebp
:00470923 5D                      pop ebp
:00470924 C3                      ret


:00470925 90                      nop
:00470926 90                      nop
:00470927 90                      nop
:00470928 90                      nop
:00470929 90                      nop
:0047092A 90                      nop
:0047092B 90                      nop
:0047092C 90                      nop
:0047092D 90                      nop
:0047092E 90                      nop
:0047092F 90                      nop

* Referenced by a CALL at Addresses:
|:00470736   , :004707A3   , :004707F1   , :00470842   , :0047085F   
|
:00470930 8B542408                mov edx, dword ptr [esp+08]
:00470934 56                      push esi
:00470935 8B742408                mov esi, dword ptr [esp+08]
:00470939 8B0A                    mov ecx, dword ptr [edx]
:0047093B 8BC6                    mov eax, esi
:0047093D 03C1                    add eax, ecx
:0047093F 8B4A04                  mov ecx, dword ptr [edx+04]
:00470942 85C9                    test ecx, ecx
:00470944 7C0D                    jl 00470953
:00470946 8B340E                  mov esi, dword ptr [esi+ecx]
:00470949 8B5208                  mov edx, dword ptr [edx+08]
:0047094C 8B1416                  mov edx, dword ptr [esi+edx]
:0047094F 03D1                    add edx, ecx
:00470951 03C2                    add eax, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470944(C)
|
:00470953 5E                      pop esi
:00470954 C3                      ret


:00470955 90                      nop
:00470956 90                      nop
:00470957 90                      nop
:00470958 90                      nop
:00470959 90                      nop
:0047095A 90                      nop
:0047095B 90                      nop
:0047095C 90                      nop
:0047095D 90                      nop
:0047095E 90                      nop
:0047095F 90                      nop

* Referenced by a CALL at Addresses:
|:0046F115   , :0047040F   
|
:00470960 55                      push ebp
:00470961 8BEC                    mov ebp, esp
:00470963 83EC04                  sub esp, 00000004
:00470966 53                      push ebx
:00470967 51                      push ecx
:00470968 8B450C                  mov eax, dword ptr [ebp+0C]
:0047096B 83C00C                  add eax, 0000000C
:0047096E 8945FC                  mov dword ptr [ebp-04], eax
:00470971 8B4508                  mov eax, dword ptr [ebp+08]
:00470974 55                      push ebp
:00470975 FF7510                  push [ebp+10]
:00470978 8B4D10                  mov ecx, dword ptr [ebp+10]
:0047097B 8B6DFC                  mov ebp, dword ptr [ebp-04]
:0047097E E88AEAFFFF              call 0046F40D
:00470983 56                      push esi
:00470984 57                      push edi
:00470985 FFD0                    call eax
:00470987 5F                      pop edi
:00470988 5E                      pop esi
:00470989 8BDD                    mov ebx, ebp
:0047098B 5D                      pop ebp
:0047098C 8B4D10                  mov ecx, dword ptr [ebp+10]
:0047098F 55                      push ebp
:00470990 8BEB                    mov ebp, ebx
:00470992 81F900010000            cmp ecx, 00000100
:00470998 7505                    jne 0047099F

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0047099A B902000000              mov ecx, 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470998(C)
|
:0047099F 51                      push ecx
:004709A0 E868EAFFFF              call 0046F40D
:004709A5 5D                      pop ebp
:004709A6 59                      pop ecx
:004709A7 5B                      pop ebx
:004709A8 C9                      leave
:004709A9 C20C00                  ret 000C


:004709AC CC                      int 03
:004709AD CC                      int 03
:004709AE CC                      int 03
:004709AF CC                      int 03

* Referenced by a CALL at Addresses:
|:004702D3   , :0047047E   , :00470884   , :00470908   , :00470AAE   
|:004723FE   
|
:004709B0 55                      push ebp
:004709B1 8BEC                    mov ebp, esp
:004709B3 6AFF                    push FFFFFFFF
:004709B5 6870B14700              push 0047B170
:004709BA 68D8144700              push 004714D8
:004709BF 64A100000000            mov eax, dword ptr fs:[00000000]
:004709C5 50                      push eax
:004709C6 64892500000000          mov dword ptr fs:[00000000], esp
:004709CD 83EC08                  sub esp, 00000008
:004709D0 53                      push ebx
:004709D1 56                      push esi
:004709D2 57                      push edi
:004709D3 8965E8                  mov dword ptr [ebp-18], esp
:004709D6 C745FC00000000          mov [ebp-04], 00000000
:004709DD A1F4624B00              mov eax, dword ptr [004B62F4]
:004709E2 85C0                    test eax, eax
:004709E4 741B                    je 00470A01
:004709E6 C745FC01000000          mov [ebp-04], 00000001
:004709ED FFD0                    call eax
:004709EF EB09                    jmp 004709FA
:004709F1 B801000000              mov eax, 00000001
:004709F6 C3                      ret


:004709F7 8B65E8                  mov esp, dword ptr [ebp-18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004709EF(U)
|
:004709FA C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004709E4(C)
|
:00470A01 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00470A08 E811000000              call 00470A1E
:00470A0D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00470A10 64890D00000000          mov dword ptr fs:[00000000], ecx
:00470A17 5F                      pop edi
:00470A18 5E                      pop esi
:00470A19 5B                      pop ebx
:00470A1A 8BE5                    mov esp, ebp
:00470A1C 5D                      pop ebp
:00470A1D C3                      ret



* Referenced by a CALL at Address:
|:00470A08   
|
:00470A1E E8ED1D0000              call 00472810
:00470A23 C3                      ret


:00470A24 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00470A27 64890D00000000          mov dword ptr fs:[00000000], ecx
:00470A2E 5F                      pop edi
:00470A2F 5E                      pop esi
:00470A30 5B                      pop ebx
:00470A31 8BE5                    mov esp, ebp
:00470A33 5D                      pop ebp
:00470A34 C3                      ret


:00470A35 90                      nop
:00470A36 90                      nop
:00470A37 90                      nop
:00470A38 90                      nop
:00470A39 90                      nop
:00470A3A 90                      nop
:00470A3B 90                      nop
:00470A3C 90                      nop
:00470A3D 90                      nop
:00470A3E 90                      nop
:00470A3F 90                      nop

* Referenced by a CALL at Addresses:
|:0046F2E4   , :0046F32A   , :0046FF6D   , :00470050   , :004700AC   
|:004700CE   , :004703F1   , :00470874   
|
:00470A40 55                      push ebp
:00470A41 8BEC                    mov ebp, esp
:00470A43 6AFF                    push FFFFFFFF
:00470A45 6888B14700              push 0047B188
:00470A4A 68D8144700              push 004714D8
:00470A4F 64A100000000            mov eax, dword ptr fs:[00000000]
:00470A55 50                      push eax
:00470A56 64892500000000          mov dword ptr fs:[00000000], esp
:00470A5D 83EC08                  sub esp, 00000008
:00470A60 53                      push ebx
:00470A61 56                      push esi
:00470A62 57                      push edi
:00470A63 8965E8                  mov dword ptr [ebp-18], esp
:00470A66 C745FC00000000          mov [ebp-04], 00000000
:00470A6D A1F4234800              mov eax, dword ptr [004823F4]
:00470A72 85C0                    test eax, eax
:00470A74 741B                    je 00470A91
:00470A76 C745FC01000000          mov [ebp-04], 00000001
:00470A7D FFD0                    call eax
:00470A7F EB09                    jmp 00470A8A
:00470A81 B801000000              mov eax, 00000001
:00470A86 C3                      ret


:00470A87 8B65E8                  mov esp, dword ptr [ebp-18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A7F(U)
|
:00470A8A C745FC00000000          mov [ebp-04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470A74(C)
|
:00470A91 C745FCFFFFFFFF          mov [ebp-04], FFFFFFFF
:00470A98 E811000000              call 00470AAE
:00470A9D 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00470AA0 64890D00000000          mov dword ptr fs:[00000000], ecx
:00470AA7 5F                      pop edi
:00470AA8 5E                      pop esi
:00470AA9 5B                      pop ebx
:00470AAA 8BE5                    mov esp, ebp
:00470AAC 5D                      pop ebp
:00470AAD C3                      ret



* Referenced by a CALL at Address:
|:00470A98   
|
:00470AAE E8FDFEFFFF              call 004709B0
:00470AB3 C3                      ret


:00470AB4 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00470AB7 64890D00000000          mov dword ptr fs:[00000000], ecx
:00470ABE 5F                      pop edi
:00470ABF 5E                      pop esi
:00470AC0 5B                      pop ebx
:00470AC1 8BE5                    mov esp, ebp
:00470AC3 5D                      pop ebp
:00470AC4 C3                      ret


:00470AC5 90                      nop
:00470AC6 90                      nop
:00470AC7 90                      nop
:00470AC8 90                      nop
:00470AC9 90                      nop
:00470ACA 90                      nop
:00470ACB 90                      nop
:00470ACC 90                      nop
:00470ACD 90                      nop
:00470ACE 90                      nop
:00470ACF 90                      nop

* Referenced by a CALL at Address:
|:0046F46A   
|
:00470AD0 83EC08                  sub esp, 00000008
:00470AD3 53                      push ebx
:00470AD4 55                      push ebp
:00470AD5 56                      push esi
:00470AD6 57                      push edi
:00470AD7 8B7C241C                mov edi, dword ptr [esp+1C]
:00470ADB 85FF                    test edi, edi
:00470ADD 7515                    jne 00470AF4
:00470ADF 8B442420                mov eax, dword ptr [esp+20]
:00470AE3 50                      push eax
:00470AE4 E807030000              call 00470DF0
:00470AE9 83C404                  add esp, 00000004
:00470AEC 5F                      pop edi
:00470AED 5E                      pop esi
:00470AEE 5D                      pop ebp
:00470AEF 5B                      pop ebx
:00470AF0 83C408                  add esp, 00000008
:00470AF3 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470ADD(C)
|
:00470AF4 8B6C2420                mov ebp, dword ptr [esp+20]
:00470AF8 85ED                    test ebp, ebp
:00470AFA 7513                    jne 00470B0F
:00470AFC 57                      push edi
:00470AFD E89E030000              call 00470EA0
:00470B02 83C404                  add esp, 00000004
:00470B05 33C0                    xor eax, eax
:00470B07 5F                      pop edi
:00470B08 5E                      pop esi
:00470B09 5D                      pop ebp
:00470B0A 5B                      pop ebx
:00470B0B 83C408                  add esp, 00000008
:00470B0E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470AFA(C)
|
:00470B0F 83FDE0                  cmp ebp, FFFFFFE0
:00470B12 7717                    ja 00470B2B
:00470B14 85ED                    test ebp, ebp
:00470B16 7608                    jbe 00470B20
:00470B18 83C50F                  add ebp, 0000000F
:00470B1B 83E5F0                  and ebp, FFFFFFF0
:00470B1E EB0B                    jmp 00470B2B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B16(C)
|
:00470B20 BD10000000              mov ebp, 00000010
:00470B25 EB04                    jmp 00470B2B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470C52(C)
|
:00470B27 8B7C241C                mov edi, dword ptr [esp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470B12(C), :00470B1E(U), :00470B25(U)
|
:00470B2B 33DB                    xor ebx, ebx
:00470B2D 83FDE0                  cmp ebp, FFFFFFE0
:00470B30 0F8704010000            ja 00470C3A
:00470B36 8D4C2410                lea ecx, dword ptr [esp+10]
:00470B3A 8D542414                lea edx, dword ptr [esp+14]
:00470B3E 51                      push ecx
:00470B3F 52                      push edx
:00470B40 57                      push edi
:00470B41 E8BA1F0000              call 00472B00
:00470B46 8BF0                    mov esi, eax
:00470B48 83C40C                  add esp, 0000000C
:00470B4B 85F6                    test esi, esi
:00470B4D 89742420                mov dword ptr [esp+20], esi
:00470B51 0F84D1000000            je 00470C28
:00470B57 3B2D54464800            cmp ebp, dword ptr [00484654]
:00470B5D 7370                    jnb 00470BCF
:00470B5F 8B442410                mov eax, dword ptr [esp+10]
:00470B63 8B4C2414                mov ecx, dword ptr [esp+14]
:00470B67 8BFD                    mov edi, ebp
:00470B69 C1EF04                  shr edi, 04
:00470B6C 57                      push edi
:00470B6D 56                      push esi
:00470B6E 50                      push eax
:00470B6F 51                      push ecx
:00470B70 E80B240000              call 00472F80
:00470B75 83C410                  add esp, 00000010
:00470B78 85C0                    test eax, eax
:00470B7A 7406                    je 00470B82
:00470B7C 8B5C241C                mov ebx, dword ptr [esp+1C]
:00470B80 EB4D                    jmp 00470BCF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B7A(C)
|
:00470B82 57                      push edi
:00470B83 E838200000              call 00472BC0
:00470B88 8BD8                    mov ebx, eax
:00470B8A 83C404                  add esp, 00000004
:00470B8D 85DB                    test ebx, ebx
:00470B8F 7446                    je 00470BD7
:00470B91 33C0                    xor eax, eax
:00470B93 8A06                    mov al, byte ptr [esi]
:00470B95 C1E004                  shl eax, 04
:00470B98 3BC5                    cmp eax, ebp
:00470B9A 7202                    jb 00470B9E
:00470B9C 8BC5                    mov eax, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B9A(C)
|
:00470B9E 8B74241C                mov esi, dword ptr [esp+1C]
:00470BA2 8BC8                    mov ecx, eax
:00470BA4 8BD1                    mov edx, ecx
:00470BA6 8BFB                    mov edi, ebx
:00470BA8 C1E902                  shr ecx, 02
:00470BAB F3                      repz
:00470BAC A5                      movsd
:00470BAD 8B442420                mov eax, dword ptr [esp+20]
:00470BB1 8BCA                    mov ecx, edx
:00470BB3 83E103                  and ecx, 00000003
:00470BB6 50                      push eax
:00470BB7 F3                      repz
:00470BB8 A4                      movsb
:00470BB9 8B4C2414                mov ecx, dword ptr [esp+14]
:00470BBD 8B542418                mov edx, dword ptr [esp+18]
:00470BC1 51                      push ecx
:00470BC2 52                      push edx
:00470BC3 E8981F0000              call 00472B60
:00470BC8 8B74242C                mov esi, dword ptr [esp+2C]
:00470BCC 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470B5D(C), :00470B80(U)
|
:00470BCF 85DB                    test ebx, ebx
:00470BD1 0F8589000000            jne 00470C60

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B8F(C)
|
:00470BD7 A1D4BC4B00              mov eax, dword ptr [004BBCD4]
:00470BDC 55                      push ebp
:00470BDD 6A00                    push 00000000
:00470BDF 50                      push eax

* Reference To: KERNEL32.HeapAlloc, Ord:0168h
                                  |
:00470BE0 FF1584D54B00            Call dword ptr [004BD584]
:00470BE6 8BD8                    mov ebx, eax
:00470BE8 85DB                    test ebx, ebx
:00470BEA 7452                    je 00470C3E
:00470BEC 33C0                    xor eax, eax
:00470BEE 8A06                    mov al, byte ptr [esi]
:00470BF0 C1E004                  shl eax, 04
:00470BF3 3BC5                    cmp eax, ebp
:00470BF5 7202                    jb 00470BF9
:00470BF7 8BC5                    mov eax, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470BF5(C)
|
:00470BF9 8B74241C                mov esi, dword ptr [esp+1C]
:00470BFD 8BC8                    mov ecx, eax
:00470BFF 8BD1                    mov edx, ecx
:00470C01 8BFB                    mov edi, ebx
:00470C03 C1E902                  shr ecx, 02
:00470C06 F3                      repz
:00470C07 A5                      movsd
:00470C08 8B442420                mov eax, dword ptr [esp+20]
:00470C0C 8BCA                    mov ecx, edx
:00470C0E 83E103                  and ecx, 00000003
:00470C11 50                      push eax
:00470C12 F3                      repz
:00470C13 A4                      movsb
:00470C14 8B4C2414                mov ecx, dword ptr [esp+14]
:00470C18 8B542418                mov edx, dword ptr [esp+18]
:00470C1C 51                      push ecx
:00470C1D 52                      push edx
:00470C1E E83D1F0000              call 00472B60
:00470C23 83C40C                  add esp, 0000000C
:00470C26 EB12                    jmp 00470C3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470B51(C)
|
:00470C28 A1D4BC4B00              mov eax, dword ptr [004BBCD4]
:00470C2D 55                      push ebp
:00470C2E 57                      push edi
:00470C2F 6A00                    push 00000000
:00470C31 50                      push eax

* Reference To: KERNEL32.HeapReAlloc, Ord:0171h
                                  |
:00470C32 FF1588D54B00            Call dword ptr [004BD588]
:00470C38 8BD8                    mov ebx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470B30(C), :00470C26(U)
|
:00470C3A 85DB                    test ebx, ebx
:00470C3C 7522                    jne 00470C60

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470BEA(C)
|
:00470C3E A194654B00              mov eax, dword ptr [004B6594]
:00470C43 85C0                    test eax, eax
:00470C45 7419                    je 00470C60
:00470C47 55                      push ebp
:00470C48 E8F31B0000              call 00472840
:00470C4D 83C404                  add esp, 00000004
:00470C50 85C0                    test eax, eax
:00470C52 0F85CFFEFFFF            jne 00470B27
:00470C58 5F                      pop edi
:00470C59 5E                      pop esi
:00470C5A 5D                      pop ebp
:00470C5B 5B                      pop ebx
:00470C5C 83C408                  add esp, 00000008
:00470C5F C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470BD1(C), :00470C3C(C), :00470C45(C)
|
:00470C60 5F                      pop edi
:00470C61 5E                      pop esi
:00470C62 8BC3                    mov eax, ebx
:00470C64 5D                      pop ebp
:00470C65 5B                      pop ebx
:00470C66 83C408                  add esp, 00000008
:00470C69 C3                      ret


:00470C6A 90                      nop
:00470C6B 90                      nop
:00470C6C 90                      nop
:00470C6D 90                      nop
:00470C6E 90                      nop
:00470C6F 90                      nop

* Referenced by a CALL at Address:
|:0046FE41   
|
:00470C70 A1D8234800              mov eax, dword ptr [004823D8]
:00470C75 85C0                    test eax, eax
:00470C77 7402                    je 00470C7B
:00470C79 FFD0                    call eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470C77(C)
|
:00470C7B 6828C14700              push 0047C128
:00470C80 681CC14700              push 0047C11C
:00470C85 E806010000              call 00470D90
:00470C8A 83C408                  add esp, 00000008
:00470C8D 6818C14700              push 0047C118
:00470C92 6800C04700              push 0047C000
:00470C97 E8F4000000              call 00470D90
:00470C9C 83C408                  add esp, 00000008
:00470C9F C3                      ret



* Referenced by a CALL at Addresses:
|:0046FE2F   , :0046FED3   
|
:00470CA0 8B442404                mov eax, dword ptr [esp+04]
:00470CA4 6A00                    push 00000000
:00470CA6 6A00                    push 00000000
:00470CA8 50                      push eax
:00470CA9 E832000000              call 00470CE0
:00470CAE 83C40C                  add esp, 0000000C
:00470CB1 C3                      ret


:00470CB2 90                      nop
:00470CB3 90                      nop
:00470CB4 90                      nop
:00470CB5 90                      nop
:00470CB6 90                      nop
:00470CB7 90                      nop
:00470CB8 90                      nop
:00470CB9 90                      nop
:00470CBA 90                      nop
:00470CBB 90                      nop
:00470CBC 90                      nop
:00470CBD 90                      nop
:00470CBE 90                      nop
:00470CBF 90                      nop

* Referenced by a CALL at Addresses:
|:0046FEF6   , :00472826   , :00473C99   
|
:00470CC0 8B442404                mov eax, dword ptr [esp+04]
:00470CC4 6A00                    push 00000000
:00470CC6 6A01                    push 00000001
:00470CC8 50                      push eax
:00470CC9 E812000000              call 00470CE0
:00470CCE 83C40C                  add esp, 0000000C
:00470CD1 C3                      ret


:00470CD2 90                      nop
:00470CD3 90                      nop
:00470CD4 90                      nop
:00470CD5 90                      nop
:00470CD6 90                      nop
:00470CD7 90                      nop
:00470CD8 90                      nop
:00470CD9 90                      nop
:00470CDA 90                      nop
:00470CDB 90                      nop
:00470CDC 90                      nop
:00470CDD 90                      nop
:00470CDE 90                      nop
:00470CDF 90                      nop

* Referenced by a CALL at Addresses:
|:00470CA9   , :00470CC9   
|
:00470CE0 A140634B00              mov eax, dword ptr [004B6340]
:00470CE5 53                      push ebx
:00470CE6 55                      push ebp
:00470CE7 8B6C240C                mov ebp, dword ptr [esp+0C]
:00470CEB 83F801                  cmp eax, 00000001
:00470CEE 56                      push esi
:00470CEF 750E                    jne 00470CFF
:00470CF1 55                      push ebp

* Reference To: KERNEL32.GetCurrentProcess, Ord:00D3h
                                  |
:00470CF2 FF1578D54B00            Call dword ptr [004BD578]
:00470CF8 50                      push eax

* Reference To: KERNEL32.TerminateProcess, Ord:0246h
                                  |
:00470CF9 FF157CD54B00            Call dword ptr [004BD57C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470CEF(C)
|
:00470CFF 8B442414                mov eax, dword ptr [esp+14]
:00470D03 8B5C2418                mov ebx, dword ptr [esp+18]
:00470D07 85C0                    test eax, eax
:00470D09 C7053C634B0001000000    mov dword ptr [004B633C], 00000001
:00470D13 881D38634B00            mov byte ptr [004B6338], bl
:00470D19 753E                    jne 00470D59
:00470D1B 8B0DE8BD4B00            mov ecx, dword ptr [004BBDE8]
:00470D21 85C9                    test ecx, ecx
:00470D23 7422                    je 00470D47
:00470D25 8B35E4BD4B00            mov esi, dword ptr [004BBDE4]
:00470D2B 83EE04                  sub esi, 00000004
:00470D2E 3BF1                    cmp esi, ecx
:00470D30 7215                    jb 00470D47

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D45(C)
|
:00470D32 8B06                    mov eax, dword ptr [esi]
:00470D34 85C0                    test eax, eax
:00470D36 7408                    je 00470D40
:00470D38 FFD0                    call eax
:00470D3A 8B0DE8BD4B00            mov ecx, dword ptr [004BBDE8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D36(C)
|
:00470D40 83EE04                  sub esi, 00000004
:00470D43 3BF1                    cmp esi, ecx
:00470D45 73EB                    jnb 00470D32

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470D23(C), :00470D30(C)
|
:00470D47 6830C14700              push 0047C130
:00470D4C 682CC14700              push 0047C12C
:00470D51 E83A000000              call 00470D90
:00470D56 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D19(C)
|
:00470D59 683CC14700              push 0047C13C
:00470D5E 6834C14700              push 0047C134
:00470D63 E828000000              call 00470D90
:00470D68 83C408                  add esp, 00000008
:00470D6B 85DB                    test ebx, ebx
:00470D6D 7511                    jne 00470D80
:00470D6F 55                      push ebp
:00470D70 C70540634B0001000000    mov dword ptr [004B6340], 00000001

* Reference To: KERNEL32.ExitProcess, Ord:006Bh
                                  |
:00470D7A FF158CD54B00            Call dword ptr [004BD58C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D6D(C)
|
:00470D80 5E                      pop esi
:00470D81 5D                      pop ebp
:00470D82 5B                      pop ebx
:00470D83 C3                      ret


:00470D84 90                      nop
:00470D85 90                      nop
:00470D86 90                      nop
:00470D87 90                      nop
:00470D88 90                      nop
:00470D89 90                      nop
:00470D8A 90                      nop
:00470D8B 90                      nop
:00470D8C 90                      nop
:00470D8D 90                      nop
:00470D8E 90                      nop
:00470D8F 90                      nop

* Referenced by a CALL at Addresses:
|:00470C85   , :00470C97   , :00470D51   , :00470D63   
|
:00470D90 56                      push esi
:00470D91 8B742408                mov esi, dword ptr [esp+08]
:00470D95 57                      push edi
:00470D96 8B7C2410                mov edi, dword ptr [esp+10]
:00470D9A 3BF7                    cmp esi, edi
:00470D9C 730F                    jnb 00470DAD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470DAB(C)
|
:00470D9E 8B06                    mov eax, dword ptr [esi]
:00470DA0 85C0                    test eax, eax
:00470DA2 7402                    je 00470DA6
:00470DA4 FFD0                    call eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470DA2(C)
|
:00470DA6 83C604                  add esi, 00000004
:00470DA9 3BF7                    cmp esi, edi
:00470DAB 72F1                    jb 00470D9E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470D9C(C)
|
:00470DAD 5F                      pop edi
:00470DAE 5E                      pop esi
:00470DAF C3                      ret



* Referenced by a CALL at Addresses:
|:0046F437   , :0046F457   
|
:00470DB0 51                      push ecx
:00470DB1 8D442408                lea eax, dword ptr [esp+08]
:00470DB5 56                      push esi
:00470DB6 8B74240C                mov esi, dword ptr [esp+0C]
:00470DBA 8D4C2404                lea ecx, dword ptr [esp+04]
:00470DBE 50                      push eax
:00470DBF 51                      push ecx
:00470DC0 56                      push esi
:00470DC1 E83A1D0000              call 00472B00
:00470DC6 83C40C                  add esp, 0000000C
:00470DC9 85C0                    test eax, eax
:00470DCB 740C                    je 00470DD9
:00470DCD 33D2                    xor edx, edx
:00470DCF 8A10                    mov dl, byte ptr [eax]
:00470DD1 8BC2                    mov eax, edx
:00470DD3 C1E004                  shl eax, 04
:00470DD6 5E                      pop esi
:00470DD7 59                      pop ecx
:00470DD8 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470DCB(C)
|
:00470DD9 A1D4BC4B00              mov eax, dword ptr [004BBCD4]
:00470DDE 56                      push esi
:00470DDF 6A00                    push 00000000
:00470DE1 50                      push eax

* Reference To: KERNEL32.HeapSize, Ord:0172h
                                  |
:00470DE2 FF1580D54B00            Call dword ptr [004BD580]
:00470DE8 5E                      pop esi
:00470DE9 59                      pop ecx
:00470DEA C3                      ret


:00470DEB 90                      nop
:00470DEC 90                      nop
:00470DED 90                      nop
:00470DEE 90                      nop
:00470DEF 90                      nop

* Referenced by a CALL at Addresses:
|:0046F4D5   , :00470AE4   , :004717D8   , :0047181C   , :004718E4   
|:00471BD7   , :00471C51   , :00471F8C   , :00472037   , :00474004   
|:004740A5   
|
:00470DF0 A194654B00              mov eax, dword ptr [004B6594]
:00470DF5 8B4C2404                mov ecx, dword ptr [esp+04]
:00470DF9 50                      push eax
:00470DFA 51                      push ecx
:00470DFB E810000000              call 00470E10
:00470E00 83C408                  add esp, 00000008
:00470E03 C3                      ret


:00470E04 90                      nop
:00470E05 90                      nop
:00470E06 90                      nop
:00470E07 90                      nop
:00470E08 90                      nop
:00470E09 90                      nop
:00470E0A 90                      nop
:00470E0B 90                      nop
:00470E0C 90                      nop
:00470E0D 90                      nop
:00470E0E 90                      nop
:00470E0F 90                      nop

* Referenced by a CALL at Addresses:
|:0046F557   , :00470DFB   
|
:00470E10 56                      push esi
:00470E11 8B742408                mov esi, dword ptr [esp+08]
:00470E15 83FEE0                  cmp esi, FFFFFFE0
:00470E18 57                      push edi
:00470E19 7734                    ja 00470E4F
:00470E1B 85F6                    test esi, esi
:00470E1D 7505                    jne 00470E24
:00470E1F BE01000000              mov esi, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470E1D(C)
|
:00470E24 8B7C2410                mov edi, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470E4D(C)
|
:00470E28 83FEE0                  cmp esi, FFFFFFE0
:00470E2B 770B                    ja 00470E38
:00470E2D 56                      push esi
:00470E2E E82D000000              call 00470E60
:00470E33 83C404                  add esp, 00000004
:00470E36 EB02                    jmp 00470E3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470E2B(C)
|
:00470E38 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470E36(U)
|
:00470E3A 85C0                    test eax, eax
:00470E3C 7513                    jne 00470E51
:00470E3E 85FF                    test edi, edi
:00470E40 740F                    je 00470E51
:00470E42 56                      push esi
:00470E43 E8F8190000              call 00472840
:00470E48 83C404                  add esp, 00000004
:00470E4B 85C0                    test eax, eax
:00470E4D 75D9                    jne 00470E28

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470E19(C)
|
:00470E4F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470E3C(C), :00470E40(C)
|
:00470E51 5F                      pop edi
:00470E52 5E                      pop esi
:00470E53 C3                      ret


:00470E54 90                      nop
:00470E55 90                      nop
:00470E56 90                      nop
:00470E57 90                      nop
:00470E58 90                      nop
:00470E59 90                      nop
:00470E5A 90                      nop
:00470E5B 90                      nop
:00470E5C 90                      nop
:00470E5D 90                      nop
:00470E5E 90                      nop
:00470E5F 90                      nop

* Referenced by a CALL at Address:
|:00470E2E   
|
:00470E60 8B442404                mov eax, dword ptr [esp+04]
:00470E64 56                      push esi
:00470E65 8D700F                  lea esi, dword ptr [eax+0F]
:00470E68 A154464800              mov eax, dword ptr [00484654]
:00470E6D 83E6F0                  and esi, FFFFFFF0
:00470E70 3BF0                    cmp esi, eax
:00470E72 7712                    ja 00470E86
:00470E74 8BCE                    mov ecx, esi
:00470E76 C1E904                  shr ecx, 04
:00470E79 51                      push ecx
:00470E7A E8411D0000              call 00472BC0
:00470E7F 83C404                  add esp, 00000004
:00470E82 85C0                    test eax, eax
:00470E84 7510                    jne 00470E96

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470E72(C)
|
:00470E86 8B15D4BC4B00            mov edx, dword ptr [004BBCD4]
:00470E8C 56                      push esi
:00470E8D 6A00                    push 00000000
:00470E8F 52                      push edx

* Reference To: KERNEL32.HeapAlloc, Ord:0168h
                                  |
:00470E90 FF1584D54B00            Call dword ptr [004BD584]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470E84(C)
|
:00470E96 5E                      pop esi
:00470E97 C3                      ret


:00470E98 90                      nop
:00470E99 90                      nop
:00470E9A 90                      nop
:00470E9B 90                      nop
:00470E9C 90                      nop
:00470E9D 90                      nop
:00470E9E 90                      nop
:00470E9F 90                      nop

* Referenced by a CALL at Addresses:
|:0046F515   , :00470AFD   , :00471870   , :00471BFC   , :00473EC9   
|:00473EDE   , :00474085   , :00474092   , :00474120   , :0047412D   
|
:00470EA0 51                      push ecx
:00470EA1 56                      push esi
:00470EA2 8B74240C                mov esi, dword ptr [esp+0C]
:00470EA6 85F6                    test esi, esi
:00470EA8 743D                    je 00470EE7
:00470EAA 8D44240C                lea eax, dword ptr [esp+0C]
:00470EAE 8D4C2404                lea ecx, dword ptr [esp+04]
:00470EB2 50                      push eax
:00470EB3 51                      push ecx
:00470EB4 56                      push esi
:00470EB5 E8461C0000              call 00472B00
:00470EBA 83C40C                  add esp, 0000000C
:00470EBD 85C0                    test eax, eax
:00470EBF 7416                    je 00470ED7
:00470EC1 8B54240C                mov edx, dword ptr [esp+0C]
:00470EC5 50                      push eax
:00470EC6 8B442408                mov eax, dword ptr [esp+08]
:00470ECA 52                      push edx
:00470ECB 50                      push eax
:00470ECC E88F1C0000              call 00472B60
:00470ED1 83C40C                  add esp, 0000000C
:00470ED4 5E                      pop esi
:00470ED5 59                      pop ecx
:00470ED6 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470EBF(C)
|
:00470ED7 8B0DD4BC4B00            mov ecx, dword ptr [004BBCD4]
:00470EDD 56                      push esi
:00470EDE 6A00                    push 00000000
:00470EE0 51                      push ecx

* Reference To: KERNEL32.HeapFree, Ord:016Eh
                                  |
:00470EE1 FF1570D54B00            Call dword ptr [004BD570]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470EA8(C)
|
:00470EE7 5E                      pop esi
:00470EE8 59                      pop ecx
:00470EE9 C3                      ret


:00470EEA 90                      nop
:00470EEB 90                      nop
:00470EEC 90                      nop
:00470EED 90                      nop
:00470EEE 90                      nop
:00470EEF 90                      nop

* Referenced by a CALL at Address:
|:0046FB3F   
|
:00470EF0 6800000300              push 00030000
:00470EF5 6800000100              push 00010000
:00470EFA E891210000              call 00473090
:00470EFF 83C408                  add esp, 00000008
:00470F02 C3                      ret


:00470F03 90                      nop
:00470F04 90                      nop
:00470F05 90                      nop
:00470F06 90                      nop
:00470F07 90                      nop
:00470F08 90                      nop
:00470F09 90                      nop
:00470F0A 90                      nop
:00470F0B 90                      nop
:00470F0C 90                      nop
:00470F0D 90                      nop
:00470F0E 90                      nop
:00470F0F 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470F84(U)
|
:00470F10 55                      push ebp
:00470F11 8BEC                    mov ebp, esp
:00470F13 83EC18                  sub esp, 00000018
:00470F16 C745F800000080          mov [ebp-08], 80000000
:00470F1D C745FCFFFF4741          mov [ebp-04], 4147FFFF
:00470F24 C745F0000000C0          mov [ebp-10], C0000000
:00470F2B C745F47E015041          mov [ebp-0C], 4150017E
:00470F32 DD45F0                  fld qword ptr [ebp-10]
:00470F35 DC75F8                  fdiv qword ptr [ebp-08]
:00470F38 DC4DF8                  fmul qword ptr [ebp-08]
:00470F3B DC6DF0                  fsubr qword ptr [ebp-10]
:00470F3E DD5DE8                  fstp qword ptr [ebp-18]
:00470F41 DD45E8                  fld qword ptr [ebp-18]
:00470F44 DC1DA0B14700            fcomp qword ptr [0047B1A0]
:00470F4A DFE0                    fstsw ax
:00470F4C F6C441                  test ah, 41
:00470F4F 7509                    jne 00470F5A
:00470F51 B801000000              mov eax, 00000001
:00470F56 8BE5                    mov esp, ebp
:00470F58 5D                      pop ebp
:00470F59 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470F4F(C)
|
:00470F5A 33C0                    xor eax, eax
:00470F5C 8BE5                    mov esp, ebp
:00470F5E 5D                      pop ebp
:00470F5F C3                      ret



* Referenced by a CALL at Address:
|:0046FB35   
|
:00470F60 68C4B14700              push 0047B1C4

* Reference To: KERNEL32.GetModuleHandleA, Ord:00FEh
                                  |
:00470F65 FF159CD54B00            Call dword ptr [004BD59C]
:00470F6B 85C0                    test eax, eax
:00470F6D 7415                    je 00470F84
:00470F6F 68A8B14700              push 0047B1A8
:00470F74 50                      push eax

* Reference To: KERNEL32.GetProcAddress, Ord:0116h
                                  |
:00470F75 FF156CD54B00            Call dword ptr [004BD56C]
:00470F7B 85C0                    test eax, eax
:00470F7D 7405                    je 00470F84
:00470F7F 6A00                    push 00000000
:00470F81 FFD0                    call eax
:00470F83 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470F6D(C), :00470F7D(C)
|
:00470F84 E987FFFFFF              jmp 00470F10
:00470F89 90                      nop
:00470F8A 90                      nop
:00470F8B 90                      nop
:00470F8C 90                      nop
:00470F8D 90                      nop
:00470F8E 90                      nop
:00470F8F 90                      nop
:00470F90 56                      push esi
:00470F91 8B742408                mov esi, dword ptr [esp+08]
:00470F95 0FBE06                  movsx eax, byte ptr [esi]
:00470F98 50                      push eax
:00470F99 E8E2220000              call 00473280
:00470F9E 83C404                  add esp, 00000004
:00470FA1 83F865                  cmp eax, 00000065
:00470FA4 742D                    je 00470FD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470FD1(C)
|
:00470FA6 A158464800              mov eax, dword ptr [00484658]
:00470FAB 46                      inc esi
:00470FAC 83F801                  cmp eax, 00000001
:00470FAF 7E10                    jle 00470FC1
:00470FB1 0FBE0E                  movsx ecx, byte ptr [esi]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00470FB4 6A04                    push 00000004
:00470FB6 51                      push ecx
:00470FB7 E824220000              call 004731E0
:00470FBC 83C408                  add esp, 00000008
:00470FBF EB0E                    jmp 00470FCF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470FAF(C)
|
:00470FC1 0FBE16                  movsx edx, byte ptr [esi]

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00470FC4 A168464800              mov eax, dword ptr [00484668]
:00470FC9 8A0450                  mov al, byte ptr [eax+2*edx]
:00470FCC 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470FBF(U)
|
:00470FCF 85C0                    test eax, eax
:00470FD1 75D3                    jne 00470FA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470FA4(C)
|
:00470FD3 8A0D5C464800            mov cl, byte ptr [0048465C]
:00470FD9 8A06                    mov al, byte ptr [esi]
:00470FDB 880E                    mov byte ptr [esi], cl
:00470FDD 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00470FE9(C)
|
:00470FDE 8A0E                    mov cl, byte ptr [esi]
:00470FE0 8806                    mov byte ptr [esi], al
:00470FE2 8A16                    mov dl, byte ptr [esi]
:00470FE4 46                      inc esi
:00470FE5 84D2                    test dl, dl
:00470FE7 8AC1                    mov al, cl
:00470FE9 75F3                    jne 00470FDE
:00470FEB 5E                      pop esi
:00470FEC C3                      ret


:00470FED 90                      nop
:00470FEE 90                      nop
:00470FEF 90                      nop
:00470FF0 8B442404                mov eax, dword ptr [esp+04]
:00470FF4 53                      push ebx
:00470FF5 8A1D5C464800            mov bl, byte ptr [0048465C]
:00470FFB 8A08                    mov cl, byte ptr [eax]
:00470FFD 84C9                    test cl, cl
:00470FFF 740C                    je 0047100D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047100B(C)
|
:00471001 3ACB                    cmp cl, bl
:00471003 7408                    je 0047100D
:00471005 8A4801                  mov cl, byte ptr [eax+01]
:00471008 40                      inc eax
:00471009 84C9                    test cl, cl
:0047100B 75F4                    jne 00471001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00470FFF(C), :00471003(C)
|
:0047100D 8A08                    mov cl, byte ptr [eax]
:0047100F 40                      inc eax
:00471010 84C9                    test cl, cl
:00471012 7445                    je 00471059
:00471014 8A08                    mov cl, byte ptr [eax]
:00471016 84C9                    test cl, cl
:00471018 7412                    je 0047102C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047102A(C)
|
:0047101A 80F965                  cmp cl, 65
:0047101D 740D                    je 0047102C
:0047101F 80F945                  cmp cl, 45
:00471022 7408                    je 0047102C
:00471024 8A4801                  mov cl, byte ptr [eax+01]
:00471027 40                      inc eax
:00471028 84C9                    test cl, cl
:0047102A 75EE                    jne 0047101A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471018(C), :0047101D(C), :00471022(C)
|
:0047102C 8A48FF                  mov cl, byte ptr [eax-01]
:0047102F 8BD0                    mov edx, eax
:00471031 48                      dec eax
:00471032 80F930                  cmp cl, 30
:00471035 7509                    jne 00471040

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047103E(C)
|
:00471037 8A48FF                  mov cl, byte ptr [eax-01]
:0047103A 48                      dec eax
:0047103B 80F930                  cmp cl, 30
:0047103E 74F7                    je 00471037

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471035(C)
|
:00471040 3818                    cmp byte ptr [eax], bl
:00471042 7501                    jne 00471045
:00471044 48                      dec eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471042(C)
|
:00471045 8A0A                    mov cl, byte ptr [edx]
:00471047 40                      inc eax
:00471048 42                      inc edx
:00471049 84C9                    test cl, cl
:0047104B 8808                    mov byte ptr [eax], cl
:0047104D 740A                    je 00471059

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471057(C)
|
:0047104F 8A0A                    mov cl, byte ptr [edx]
:00471051 40                      inc eax
:00471052 42                      inc edx
:00471053 84C9                    test cl, cl
:00471055 8808                    mov byte ptr [eax], cl
:00471057 75F6                    jne 0047104F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471012(C), :0047104D(C)
|
:00471059 5B                      pop ebx
:0047105A C3                      ret


:0047105B 90                      nop
:0047105C 90                      nop
:0047105D 90                      nop
:0047105E 90                      nop
:0047105F 90                      nop
:00471060 8B442404                mov eax, dword ptr [esp+04]
:00471064 DD00                    fld qword ptr [eax]
:00471066 DC1DD0B14700            fcomp qword ptr [0047B1D0]
:0047106C DFE0                    fstsw ax
:0047106E F6C401                  test ah, 01
:00471071 7506                    jne 00471079
:00471073 B801000000              mov eax, 00000001
:00471078 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471071(C)
|
:00471079 33C0                    xor eax, eax
:0047107B C3                      ret


:0047107C 90                      nop
:0047107D 90                      nop
:0047107E 90                      nop
:0047107F 90                      nop
:00471080 8B442404                mov eax, dword ptr [esp+04]
:00471084 83EC08                  sub esp, 00000008
:00471087 85C0                    test eax, eax
:00471089 7427                    je 004710B2
:0047108B 8B442414                mov eax, dword ptr [esp+14]
:0047108F 8D4C2400                lea ecx, dword ptr [esp]
:00471093 50                      push eax
:00471094 51                      push ecx
:00471095 E886270000              call 00473820
:0047109A 8B442418                mov eax, dword ptr [esp+18]
:0047109E 8B542408                mov edx, dword ptr [esp+08]
:004710A2 8B4C240C                mov ecx, dword ptr [esp+0C]
:004710A6 83C408                  add esp, 00000008
:004710A9 8910                    mov dword ptr [eax], edx
:004710AB 894804                  mov dword ptr [eax+04], ecx
:004710AE 83C408                  add esp, 00000008
:004710B1 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471089(C)
|
:004710B2 8B542414                mov edx, dword ptr [esp+14]
:004710B6 8D442414                lea eax, dword ptr [esp+14]
:004710BA 52                      push edx
:004710BB 50                      push eax
:004710BC E89F270000              call 00473860
:004710C1 8B4C2418                mov ecx, dword ptr [esp+18]
:004710C5 8B54241C                mov edx, dword ptr [esp+1C]
:004710C9 83C408                  add esp, 00000008
:004710CC 8911                    mov dword ptr [ecx], edx
:004710CE 83C408                  add esp, 00000008
:004710D1 C3                      ret


:004710D2 90                      nop
:004710D3 90                      nop
:004710D4 90                      nop
:004710D5 90                      nop
:004710D6 90                      nop
:004710D7 90                      nop
:004710D8 90                      nop
:004710D9 90                      nop
:004710DA 90                      nop
:004710DB 90                      nop
:004710DC 90                      nop
:004710DD 90                      nop
:004710DE 90                      nop
:004710DF 90                      nop

* Referenced by a CALL at Addresses:
|:004713EB   , :0047148C   
|
:004710E0 A048634B00              mov al, byte ptr [004B6348]
:004710E5 53                      push ebx
:004710E6 56                      push esi
:004710E7 57                      push edi
:004710E8 84C0                    test al, al
:004710EA 742D                    je 00471119
:004710EC 8B742418                mov esi, dword ptr [esp+18]
:004710F0 8B3D44634B00            mov edi, dword ptr [004B6344]
:004710F6 8B5C2414                mov ebx, dword ptr [esp+14]
:004710FA 33C0                    xor eax, eax
:004710FC 8B17                    mov edx, dword ptr [edi]
:004710FE 85F6                    test esi, esi
:00471100 0F9FC0                  setg al
:00471103 33C9                    xor ecx, ecx
:00471105 83FA2D                  cmp edx, 0000002D
:00471108 0F94C1                  sete cl
:0047110B 03CB                    add ecx, ebx
:0047110D 50                      push eax
:0047110E 51                      push ecx
:0047110F E88C030000              call 004714A0
:00471114 83C408                  add esp, 00000008
:00471117 EB42                    jmp 0047115B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004710EA(C)
|
:00471119 8B442410                mov eax, dword ptr [esp+10]
:0047111D 8B5004                  mov edx, dword ptr [eax+04]
:00471120 8B00                    mov eax, dword ptr [eax]
:00471122 52                      push edx
:00471123 50                      push eax
:00471124 E817280000              call 00473940
:00471129 8B742420                mov esi, dword ptr [esp+20]
:0047112D 8B5C241C                mov ebx, dword ptr [esp+1C]
:00471131 83C408                  add esp, 00000008
:00471134 8BF8                    mov edi, eax
:00471136 8D4E01                  lea ecx, dword ptr [esi+01]
:00471139 33D2                    xor edx, edx
:0047113B 57                      push edi
:0047113C 51                      push ecx
:0047113D 8B0F                    mov ecx, dword ptr [edi]
:0047113F 85F6                    test esi, esi
:00471141 0F9FC2                  setg dl
:00471144 33C0                    xor eax, eax
:00471146 83F92D                  cmp ecx, 0000002D
:00471149 8BCB                    mov ecx, ebx
:0047114B 0F94C0                  sete al
:0047114E 03CA                    add ecx, edx
:00471150 03C1                    add eax, ecx
:00471152 50                      push eax
:00471153 E848270000              call 004738A0
:00471158 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471117(U)
|
:0047115B 8B0F                    mov ecx, dword ptr [edi]
:0047115D 8BC3                    mov eax, ebx
:0047115F 83F92D                  cmp ecx, 0000002D
:00471162 7506                    jne 0047116A
:00471164 C6032D                  mov byte ptr [ebx], 2D
:00471167 8D4301                  lea eax, dword ptr [ebx+01]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471162(C)
|
:0047116A 85F6                    test esi, esi
:0047116C 7E0E                    jle 0047117C
:0047116E 8A5001                  mov dl, byte ptr [eax+01]
:00471171 8810                    mov byte ptr [eax], dl
:00471173 8A0D5C464800            mov cl, byte ptr [0048465C]
:00471179 40                      inc eax
:0047117A 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047116C(C)
|
:0047117C 8A0D48634B00            mov cl, byte ptr [004B6348]
:00471182 33D2                    xor edx, edx
:00471184 84C9                    test cl, cl
:00471186 8B0DD8B14700            mov ecx, dword ptr [0047B1D8]
:0047118C 0F94C2                  sete dl
:0047118F 03D0                    add edx, eax
:00471191 03F2                    add esi, edx
:00471193 8BC6                    mov eax, esi
:00471195 8908                    mov dword ptr [eax], ecx
:00471197 668B15DCB14700          mov dx, word ptr [0047B1DC]
:0047119E 66895004                mov word ptr [eax+04], dx
:004711A2 8B44241C                mov eax, dword ptr [esp+1C]
:004711A6 85C0                    test eax, eax
:004711A8 7403                    je 004711AD
:004711AA C60645                  mov byte ptr [esi], 45

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004711A8(C)
|
:004711AD 8B470C                  mov eax, dword ptr [edi+0C]
:004711B0 46                      inc esi
:004711B1 803830                  cmp byte ptr [eax], 30
:004711B4 7460                    je 00471216
:004711B6 8B4F04                  mov ecx, dword ptr [edi+04]
:004711B9 49                      dec ecx
:004711BA 7905                    jns 004711C1
:004711BC F7D9                    neg ecx
:004711BE C6062D                  mov byte ptr [esi], 2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004711BA(C)
|
:004711C1 46                      inc esi
:004711C2 83F964                  cmp ecx, 00000064
:004711C5 7C23                    jl 004711EA
:004711C7 B81F85EB51              mov eax, 51EB851F
:004711CC F7E9                    imul ecx
:004711CE C1FA05                  sar edx, 05
:004711D1 8BC2                    mov eax, edx
:004711D3 C1E81F                  shr eax, 1F
:004711D6 03D0                    add edx, eax
:004711D8 8A06                    mov al, byte ptr [esi]
:004711DA 02C2                    add al, dl
:004711DC 8806                    mov byte ptr [esi], al
:004711DE 8BC1                    mov eax, ecx
:004711E0 99                      cdq
:004711E1 B964000000              mov ecx, 00000064
:004711E6 F7F9                    idiv ecx
:004711E8 8BCA                    mov ecx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004711C5(C)
|
:004711EA 46                      inc esi
:004711EB 83F90A                  cmp ecx, 0000000A
:004711EE 7C23                    jl 00471213
:004711F0 B867666666              mov eax, 66666667
:004711F5 F7E9                    imul ecx
:004711F7 C1FA02                  sar edx, 02
:004711FA 8BC2                    mov eax, edx
:004711FC C1E81F                  shr eax, 1F
:004711FF 03D0                    add edx, eax
:00471201 8A06                    mov al, byte ptr [esi]
:00471203 02C2                    add al, dl
:00471205 8806                    mov byte ptr [esi], al
:00471207 8BC1                    mov eax, ecx
:00471209 99                      cdq

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0047120A B90A000000              mov ecx, 0000000A
:0047120F F7F9                    idiv ecx
:00471211 8BCA                    mov ecx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004711EE(C)
|
:00471213 004E01                  add byte ptr [esi+01], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004711B4(C)
|
:00471216 5F                      pop edi
:00471217 8BC3                    mov eax, ebx
:00471219 5E                      pop esi
:0047121A 5B                      pop ebx
:0047121B C3                      ret


:0047121C 90                      nop
:0047121D 90                      nop
:0047121E 90                      nop
:0047121F 90                      nop

* Referenced by a CALL at Addresses:
|:00471416   , :00471452   
|
:00471220 A048634B00              mov al, byte ptr [004B6348]
:00471225 53                      push ebx
:00471226 55                      push ebp
:00471227 56                      push esi
:00471228 84C0                    test al, al
:0047122A 57                      push edi
:0047122B 742F                    je 0047125C
:0047122D 8B3544634B00            mov esi, dword ptr [004B6344]
:00471233 8B6C2418                mov ebp, dword ptr [esp+18]
:00471237 8B0D4C634B00            mov ecx, dword ptr [004B634C]
:0047123D 33C0                    xor eax, eax
:0047123F 8B1E                    mov ebx, dword ptr [esi]
:00471241 83FB2D                  cmp ebx, 0000002D
:00471244 8B5C241C                mov ebx, dword ptr [esp+1C]
:00471248 0F94C0                  sete al
:0047124B 03C5                    add eax, ebp
:0047124D 3BCB                    cmp ecx, ebx
:0047124F 7544                    jne 00471295
:00471251 03C1                    add eax, ecx
:00471253 C60030                  mov byte ptr [eax], 30
:00471256 C6400100                mov [eax+01], 00
:0047125A EB39                    jmp 00471295

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047122B(C)
|
:0047125C 8B442414                mov eax, dword ptr [esp+14]
:00471260 8B4804                  mov ecx, dword ptr [eax+04]
:00471263 8B10                    mov edx, dword ptr [eax]
:00471265 51                      push ecx
:00471266 52                      push edx
:00471267 E8D4260000              call 00473940
:0047126C 8B5C2424                mov ebx, dword ptr [esp+24]
:00471270 8BF0                    mov esi, eax
:00471272 83C408                  add esp, 00000008
:00471275 33C9                    xor ecx, ecx
:00471277 8B4604                  mov eax, dword ptr [esi+04]
:0047127A 8B2E                    mov ebp, dword ptr [esi]
:0047127C 03C3                    add eax, ebx
:0047127E 83FD2D                  cmp ebp, 0000002D
:00471281 8B6C2418                mov ebp, dword ptr [esp+18]
:00471285 56                      push esi
:00471286 0F94C1                  sete cl
:00471289 03CD                    add ecx, ebp
:0047128B 50                      push eax
:0047128C 51                      push ecx
:0047128D E80E260000              call 004738A0
:00471292 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047124F(C), :0047125A(U)
|
:00471295 8B06                    mov eax, dword ptr [esi]
:00471297 8BFD                    mov edi, ebp
:00471299 83F82D                  cmp eax, 0000002D
:0047129C 7507                    jne 004712A5
:0047129E C645002D                mov [ebp+00], 2D
:004712A2 8D7D01                  lea edi, dword ptr [ebp+01]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047129C(C)
|
:004712A5 8B4604                  mov eax, dword ptr [esi+04]
:004712A8 85C0                    test eax, eax
:004712AA 7F11                    jg 004712BD
:004712AC 6A01                    push 00000001
:004712AE 57                      push edi
:004712AF E8EC010000              call 004714A0
:004712B4 83C408                  add esp, 00000008
:004712B7 C60730                  mov byte ptr [edi], 30
:004712BA 47                      inc edi
:004712BB EB02                    jmp 004712BF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004712AA(C)
|
:004712BD 03F8                    add edi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004712BB(U)
|
:004712BF 85DB                    test ebx, ebx
:004712C1 7E4F                    jle 00471312
:004712C3 6A01                    push 00000001
:004712C5 57                      push edi
:004712C6 E8D5010000              call 004714A0
:004712CB 8A155C464800            mov dl, byte ptr [0048465C]
:004712D1 83C408                  add esp, 00000008
:004712D4 8817                    mov byte ptr [edi], dl
:004712D6 8B7604                  mov esi, dword ptr [esi+04]
:004712D9 47                      inc edi
:004712DA 85F6                    test esi, esi
:004712DC 7D34                    jge 00471312
:004712DE A048634B00              mov al, byte ptr [004B6348]
:004712E3 84C0                    test al, al
:004712E5 7404                    je 004712EB
:004712E7 F7DE                    neg esi
:004712E9 EB06                    jmp 004712F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004712E5(C)
|
:004712EB F7DE                    neg esi
:004712ED 3BDE                    cmp ebx, esi
:004712EF 7C02                    jl 004712F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004712E9(U)
|
:004712F1 8BDE                    mov ebx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004712EF(C)
|
:004712F3 53                      push ebx
:004712F4 57                      push edi
:004712F5 E8A6010000              call 004714A0
:004712FA 8BCB                    mov ecx, ebx
:004712FC B830303030              mov eax, 30303030
:00471301 8BD1                    mov edx, ecx
:00471303 83C408                  add esp, 00000008
:00471306 C1E902                  shr ecx, 02
:00471309 F3                      repz
:0047130A AB                      stosd
:0047130B 8BCA                    mov ecx, edx
:0047130D 83E103                  and ecx, 00000003
:00471310 F3                      repz
:00471311 AA                      stosb

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004712C1(C), :004712DC(C)
|
:00471312 5F                      pop edi
:00471313 8BC5                    mov eax, ebp
:00471315 5E                      pop esi
:00471316 5D                      pop ebp
:00471317 5B                      pop ebx
:00471318 C3                      ret


:00471319 90                      nop
:0047131A 90                      nop
:0047131B 90                      nop
:0047131C 90                      nop
:0047131D 90                      nop
:0047131E 90                      nop
:0047131F 90                      nop

* Referenced by a CALL at Address:
|:0047146F   
|
:00471320 53                      push ebx
:00471321 55                      push ebp
:00471322 56                      push esi
:00471323 57                      push edi
:00471324 8B7C2414                mov edi, dword ptr [esp+14]
:00471328 8B4704                  mov eax, dword ptr [edi+04]
:0047132B 8B0F                    mov ecx, dword ptr [edi]
:0047132D 50                      push eax
:0047132E 51                      push ecx
:0047132F E80C260000              call 00473940
:00471334 A344634B00              mov dword ptr [004B6344], eax
:00471339 8B5004                  mov edx, dword ptr [eax+04]
:0047133C 83C408                  add esp, 00000008
:0047133F 8B6C2418                mov ebp, dword ptr [esp+18]
:00471343 4A                      dec edx
:00471344 33C9                    xor ecx, ecx
:00471346 89154C634B00            mov dword ptr [004B634C], edx
:0047134C 8B18                    mov ebx, dword ptr [eax]
:0047134E 83FB2D                  cmp ebx, 0000002D
:00471351 8B5C241C                mov ebx, dword ptr [esp+1C]
:00471355 0F94C1                  sete cl
:00471358 03CD                    add ecx, ebp
:0047135A 50                      push eax
:0047135B 8BF1                    mov esi, ecx
:0047135D 53                      push ebx
:0047135E 56                      push esi
:0047135F E83C250000              call 004738A0
:00471364 A144634B00              mov eax, dword ptr [004B6344]
:00471369 83C40C                  add esp, 0000000C
:0047136C 33C9                    xor ecx, ecx
:0047136E 8B5004                  mov edx, dword ptr [eax+04]
:00471371 4A                      dec edx
:00471372 39154C634B00            cmp dword ptr [004B634C], edx
:00471378 0F9CC1                  setl cl
:0047137B 880D50634B00            mov byte ptr [004B6350], cl
:00471381 8B4004                  mov eax, dword ptr [eax+04]
:00471384 48                      dec eax
:00471385 83F8FC                  cmp eax, FFFFFFFC
:00471388 A34C634B00              mov dword ptr [004B634C], eax
:0047138D 7C2A                    jl 004713B9
:0047138F 3BC3                    cmp eax, ebx
:00471391 7D26                    jge 004713B9
:00471393 84C9                    test cl, cl
:00471395 7412                    je 004713A9
:00471397 8A06                    mov al, byte ptr [esi]
:00471399 46                      inc esi
:0047139A 84C0                    test al, al
:0047139C 7407                    je 004713A5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004713A3(C)
|
:0047139E 8A0E                    mov cl, byte ptr [esi]
:004713A0 46                      inc esi
:004713A1 84C9                    test cl, cl
:004713A3 75F9                    jne 0047139E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047139C(C)
|
:004713A5 C646FE00                mov [esi-02], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471395(C)
|
:004713A9 53                      push ebx
:004713AA 55                      push ebp
:004713AB 57                      push edi
:004713AC E84F000000              call 00471400
:004713B1 83C40C                  add esp, 0000000C
:004713B4 5F                      pop edi
:004713B5 5E                      pop esi
:004713B6 5D                      pop ebp
:004713B7 5B                      pop ebx
:004713B8 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047138D(C), :00471391(C)
|
:004713B9 8B542420                mov edx, dword ptr [esp+20]
:004713BD 52                      push edx
:004713BE 53                      push ebx
:004713BF 55                      push ebp
:004713C0 57                      push edi
:004713C1 E80A000000              call 004713D0
:004713C6 83C410                  add esp, 00000010
:004713C9 5F                      pop edi
:004713CA 5E                      pop esi
:004713CB 5D                      pop ebp
:004713CC 5B                      pop ebx
:004713CD C3                      ret


:004713CE 90                      nop
:004713CF 90                      nop

* Referenced by a CALL at Address:
|:004713C1   
|
:004713D0 8B442410                mov eax, dword ptr [esp+10]
:004713D4 8B4C240C                mov ecx, dword ptr [esp+0C]
:004713D8 8B542408                mov edx, dword ptr [esp+08]
:004713DC 50                      push eax
:004713DD 8B442408                mov eax, dword ptr [esp+08]
:004713E1 51                      push ecx
:004713E2 52                      push edx
:004713E3 50                      push eax
:004713E4 C60548634B0001          mov byte ptr [004B6348], 01
:004713EB E8F0FCFFFF              call 004710E0
:004713F0 83C410                  add esp, 00000010
:004713F3 C60548634B0000          mov byte ptr [004B6348], 00
:004713FA C3                      ret


:004713FB 90                      nop
:004713FC 90                      nop
:004713FD 90                      nop
:004713FE 90                      nop
:004713FF 90                      nop

* Referenced by a CALL at Address:
|:004713AC   
|
:00471400 8B44240C                mov eax, dword ptr [esp+0C]
:00471404 8B4C2408                mov ecx, dword ptr [esp+08]
:00471408 8B542404                mov edx, dword ptr [esp+04]
:0047140C 50                      push eax
:0047140D 51                      push ecx
:0047140E 52                      push edx
:0047140F C60548634B0001          mov byte ptr [004B6348], 01
:00471416 E805FEFFFF              call 00471220
:0047141B 83C40C                  add esp, 0000000C
:0047141E C60548634B0000          mov byte ptr [004B6348], 00
:00471425 C3                      ret


:00471426 90                      nop
:00471427 90                      nop
:00471428 90                      nop
:00471429 90                      nop
:0047142A 90                      nop
:0047142B 90                      nop
:0047142C 90                      nop
:0047142D 90                      nop
:0047142E 90                      nop
:0047142F 90                      nop
:00471430 8B44240C                mov eax, dword ptr [esp+0C]
:00471434 83F865                  cmp eax, 00000065
:00471437 743F                    je 00471478
:00471439 83F845                  cmp eax, 00000045
:0047143C 743A                    je 00471478
:0047143E 83F866                  cmp eax, 00000066
:00471441 7518                    jne 0047145B
:00471443 8B442410                mov eax, dword ptr [esp+10]
:00471447 8B4C2408                mov ecx, dword ptr [esp+08]
:0047144B 8B542404                mov edx, dword ptr [esp+04]
:0047144F 50                      push eax
:00471450 51                      push ecx
:00471451 52                      push edx
:00471452 E8C9FDFFFF              call 00471220
:00471457 83C40C                  add esp, 0000000C
:0047145A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471441(C)
|
:0047145B 8B442414                mov eax, dword ptr [esp+14]
:0047145F 8B4C2410                mov ecx, dword ptr [esp+10]
:00471463 8B542408                mov edx, dword ptr [esp+08]
:00471467 50                      push eax
:00471468 8B442408                mov eax, dword ptr [esp+08]
:0047146C 51                      push ecx
:0047146D 52                      push edx
:0047146E 50                      push eax
:0047146F E8ACFEFFFF              call 00471320
:00471474 83C410                  add esp, 00000010
:00471477 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471437(C), :0047143C(C)
|
:00471478 8B4C2414                mov ecx, dword ptr [esp+14]
:0047147C 8B542410                mov edx, dword ptr [esp+10]
:00471480 8B442408                mov eax, dword ptr [esp+08]
:00471484 51                      push ecx
:00471485 8B4C2408                mov ecx, dword ptr [esp+08]
:00471489 52                      push edx
:0047148A 50                      push eax
:0047148B 51                      push ecx
:0047148C E84FFCFFFF              call 004710E0
:00471491 83C410                  add esp, 00000010
:00471494 C3                      ret


:00471495 90                      nop
:00471496 90                      nop
:00471497 90                      nop
:00471498 90                      nop
:00471499 90                      nop
:0047149A 90                      nop
:0047149B 90                      nop
:0047149C 90                      nop
:0047149D 90                      nop
:0047149E 90                      nop
:0047149F 90                      nop

* Referenced by a CALL at Addresses:
|:0047110F   , :004712AF   , :004712C6   , :004712F5   
|
:004714A0 56                      push esi
:004714A1 8B74240C                mov esi, dword ptr [esp+0C]
:004714A5 85F6                    test esi, esi
:004714A7 741E                    je 004714C7
:004714A9 8B542408                mov edx, dword ptr [esp+08]
:004714AD 57                      push edi
:004714AE 8BFA                    mov edi, edx
:004714B0 83C9FF                  or ecx, FFFFFFFF
:004714B3 33C0                    xor eax, eax
:004714B5 03F2                    add esi, edx
:004714B7 F2                      repnz
:004714B8 AE                      scasb
:004714B9 F7D1                    not ecx
:004714BB 51                      push ecx
:004714BC 52                      push edx
:004714BD 56                      push esi
:004714BE E80D100000              call 004724D0
:004714C3 83C40C                  add esp, 0000000C
:004714C6 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004714A7(C)
|
:004714C7 5E                      pop esi
:004714C8 C3                      ret


:004714C9 90                      nop
:004714CA 90                      nop
:004714CB 90                      nop
:004714CC 90                      nop
:004714CD 90                      nop
:004714CE 90                      nop
:004714CF 90                      nop
:004714D0 56                      push esi
:004714D1 43                      inc ebx
:004714D2 3230                    xor dh, byte ptr [eax]
:004714D4 58                      pop eax
:004714D5 43                      inc ebx
:004714D6 3030                    xor byte ptr [eax], dh
:004714D8 55                      push ebp
:004714D9 8BEC                    mov ebp, esp
:004714DB 83EC08                  sub esp, 00000008
:004714DE 53                      push ebx
:004714DF 56                      push esi
:004714E0 57                      push edi
:004714E1 55                      push ebp
:004714E2 FC                      cld
:004714E3 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:004714E6 8B4508                  mov eax, dword ptr [ebp+08]

* Possible Reference to String Resource ID=00006: ""
                                  |
:004714E9 F7400406000000          test [eax+04], 00000006
:004714F0 0F8582000000            jne 00471578
:004714F6 8945F8                  mov dword ptr [ebp-08], eax
:004714F9 8B4510                  mov eax, dword ptr [ebp+10]
:004714FC 8945FC                  mov dword ptr [ebp-04], eax
:004714FF 8D45F8                  lea eax, dword ptr [ebp-08]
:00471502 8943FC                  mov dword ptr [ebx-04], eax
:00471505 8B730C                  mov esi, dword ptr [ebx+0C]
:00471508 8B7B08                  mov edi, dword ptr [ebx+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471568(U)
|
:0047150B 83FEFF                  cmp esi, FFFFFFFF
:0047150E 7461                    je 00471571
:00471510 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:00471513 837C8F0400              cmp dword ptr [edi+4*ecx+04], 00000000
:00471518 7445                    je 0047155F
:0047151A 56                      push esi
:0047151B 55                      push ebp
:0047151C 8D6B10                  lea ebp, dword ptr [ebx+10]
:0047151F FF548F04                call [edi+4*ecx+04]
:00471523 5D                      pop ebp
:00471524 5E                      pop esi
:00471525 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:00471528 0BC0                    or eax, eax
:0047152A 7433                    je 0047155F
:0047152C 783C                    js 0047156A
:0047152E 8B7B08                  mov edi, dword ptr [ebx+08]
:00471531 53                      push ebx
:00471532 E809DEFFFF              call 0046F340
:00471537 83C404                  add esp, 00000004
:0047153A 8D6B10                  lea ebp, dword ptr [ebx+10]
:0047153D 56                      push esi
:0047153E 53                      push ebx
:0047153F E83EDEFFFF              call 0046F382
:00471544 83C408                  add esp, 00000008
:00471547 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:0047154A 6A01                    push 00000001
:0047154C 8B448F08                mov eax, dword ptr [edi+4*ecx+08]
:00471550 E8C1DEFFFF              call 0046F416
:00471555 8B048F                  mov eax, dword ptr [edi+4*ecx]
:00471558 89430C                  mov dword ptr [ebx+0C], eax
:0047155B FF548F08                call [edi+4*ecx+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471518(C), :0047152A(C)
|
:0047155F 8B7B08                  mov edi, dword ptr [ebx+08]
:00471562 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:00471565 8B348F                  mov esi, dword ptr [edi+4*ecx]
:00471568 EBA1                    jmp 0047150B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047152C(C)
|
:0047156A B800000000              mov eax, 00000000
:0047156F EB1C                    jmp 0047158D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047150E(C)
|
:00471571 B801000000              mov eax, 00000001
:00471576 EB15                    jmp 0047158D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004714F0(C)
|
:00471578 55                      push ebp
:00471579 8D6B10                  lea ebp, dword ptr [ebx+10]
:0047157C 6AFF                    push FFFFFFFF
:0047157E 53                      push ebx
:0047157F E8FEDDFFFF              call 0046F382
:00471584 83C408                  add esp, 00000008
:00471587 5D                      pop ebp
:00471588 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047156F(U), :00471576(U)
|
:0047158D 5D                      pop ebp
:0047158E 5F                      pop edi
:0047158F 5E                      pop esi
:00471590 5B                      pop ebx
:00471591 8BE5                    mov esp, ebp
:00471593 5D                      pop ebp
:00471594 C3                      ret


:00471595 55                      push ebp
:00471596 8B4C2408                mov ecx, dword ptr [esp+08]
:0047159A 8B29                    mov ebp, dword ptr [ecx]
:0047159C 8B411C                  mov eax, dword ptr [ecx+1C]
:0047159F 50                      push eax
:004715A0 8B4118                  mov eax, dword ptr [ecx+18]
:004715A3 50                      push eax
:004715A4 E8D9DDFFFF              call 0046F382
:004715A9 83C408                  add esp, 00000008
:004715AC 5D                      pop ebp
:004715AD C20400                  ret 0004



* Referenced by a CALL at Address:
|:0046FEE6   
|
:004715B0 8B442404                mov eax, dword ptr [esp+04]
:004715B4 53                      push ebx
:004715B5 55                      push ebp
:004715B6 56                      push esi
:004715B7 50                      push eax
:004715B8 E833010000              call 004716F0
:004715BD 83C404                  add esp, 00000004
:004715C0 85C0                    test eax, eax
:004715C2 0F8417010000            je 004716DF
:004715C8 8B5808                  mov ebx, dword ptr [eax+08]
:004715CB 85DB                    test ebx, ebx
:004715CD 0F840C010000            je 004716DF
:004715D3 83FB05                  cmp ebx, 00000005
:004715D6 7510                    jne 004715E8
:004715D8 C7400800000000          mov [eax+08], 00000000
:004715DF B801000000              mov eax, 00000001
:004715E4 5E                      pop esi
:004715E5 5D                      pop ebp
:004715E6 5B                      pop ebx
:004715E7 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004715D6(C)
|
:004715E8 83FB01                  cmp ebx, 00000001
:004715EB 7507                    jne 004715F4
:004715ED 83C8FF                  or eax, FFFFFFFF
:004715F0 5E                      pop esi
:004715F1 5D                      pop ebp
:004715F2 5B                      pop ebx
:004715F3 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004715EB(C)
|
:004715F4 8B4C2414                mov ecx, dword ptr [esp+14]
:004715F8 8B2D54634B00            mov ebp, dword ptr [004B6354]
:004715FE 890D54634B00            mov dword ptr [004B6354], ecx
:00471604 8B4804                  mov ecx, dword ptr [eax+04]
:00471607 83F908                  cmp ecx, 00000008
:0047160A 0F85B5000000            jne 004716C5
:00471610 8B3588244800            mov esi, dword ptr [00482488]
:00471616 8B158C244800            mov edx, dword ptr [0048248C]
:0047161C 03D6                    add edx, esi
:0047161E 3BF2                    cmp esi, edx
:00471620 7D18                    jge 0047163A
:00471622 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:00471625 2BD6                    sub edx, esi
:00471627 8D0C8D18244800          lea ecx, dword ptr [4*ecx+00482418]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471638(C)
|
:0047162E C70100000000            mov dword ptr [ecx], 00000000
:00471634 83C10C                  add ecx, 0000000C
:00471637 4A                      dec edx
:00471638 75F4                    jne 0047162E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471620(C)
|
:0047163A 8B00                    mov eax, dword ptr [eax]
:0047163C 8B0D94244800            mov ecx, dword ptr [00482494]
:00471642 3D8E0000C0              cmp eax, C000008E
:00471647 8BF1                    mov esi, ecx
:00471649 7507                    jne 00471652
:0047164B B983000000              mov ecx, 00000083
:00471650 EB52                    jmp 004716A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471649(C)
|
:00471652 3D900000C0              cmp eax, C0000090
:00471657 7507                    jne 00471660
:00471659 B981000000              mov ecx, 00000081
:0047165E EB44                    jmp 004716A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471657(C)
|
:00471660 3D910000C0              cmp eax, C0000091
:00471665 7507                    jne 0047166E
:00471667 B984000000              mov ecx, 00000084
:0047166C EB36                    jmp 004716A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471665(C)
|
:0047166E 3D930000C0              cmp eax, C0000093
:00471673 7507                    jne 0047167C
:00471675 B985000000              mov ecx, 00000085
:0047167A EB28                    jmp 004716A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471673(C)
|
:0047167C 3D8D0000C0              cmp eax, C000008D
:00471681 7507                    jne 0047168A
:00471683 B982000000              mov ecx, 00000082
:00471688 EB1A                    jmp 004716A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471681(C)
|
:0047168A 3D8F0000C0              cmp eax, C000008F
:0047168F 7507                    jne 00471698
:00471691 B986000000              mov ecx, 00000086
:00471696 EB0C                    jmp 004716A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047168F(C)
|
:00471698 3D920000C0              cmp eax, C0000092
:0047169D 750B                    jne 004716AA
:0047169F B98A000000              mov ecx, 0000008A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471650(U), :0047165E(U), :0047166C(U), :0047167A(U), :00471688(U)
|:00471696(U)
|
:004716A4 890D94244800            mov dword ptr [00482494], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047169D(C)
|
:004716AA 51                      push ecx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004716AB 6A08                    push 00000008
:004716AD FFD3                    call ebx
:004716AF 83C408                  add esp, 00000008
:004716B2 893594244800            mov dword ptr [00482494], esi
:004716B8 892D54634B00            mov dword ptr [004B6354], ebp
:004716BE 83C8FF                  or eax, FFFFFFFF
:004716C1 5E                      pop esi
:004716C2 5D                      pop ebp
:004716C3 5B                      pop ebx
:004716C4 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047160A(C)
|
:004716C5 51                      push ecx
:004716C6 C7400800000000          mov [eax+08], 00000000
:004716CD FFD3                    call ebx
:004716CF 83C404                  add esp, 00000004
:004716D2 892D54634B00            mov dword ptr [004B6354], ebp
:004716D8 83C8FF                  or eax, FFFFFFFF
:004716DB 5E                      pop esi
:004716DC 5D                      pop ebp
:004716DD 5B                      pop ebx
:004716DE C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004715C2(C), :004715CD(C)
|
:004716DF 8B542414                mov edx, dword ptr [esp+14]
:004716E3 52                      push edx

* Reference To: KERNEL32.UnhandledExceptionFilter, Ord:0250h
                                  |
:004716E4 FF1574D54B00            Call dword ptr [004BD574]
:004716EA 5E                      pop esi
:004716EB 5D                      pop ebp
:004716EC 5B                      pop ebx
:004716ED C3                      ret


:004716EE 90                      nop
:004716EF 90                      nop

* Referenced by a CALL at Address:
|:004715B8   
|
:004716F0 8B542404                mov edx, dword ptr [esp+04]
:004716F4 8B0D10244800            mov ecx, dword ptr [00482410]
:004716FA 56                      push esi
:004716FB 8B3590244800            mov esi, dword ptr [00482490]
:00471701 3BCA                    cmp ecx, edx

* Possible StringData Ref from Data Obj ->""
                                  |
:00471703 B810244800              mov eax, 00482410
:00471708 7415                    je 0047171F
:0047170A 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:0047170D 8D0C8D10244800          lea ecx, dword ptr [4*ecx+00482410]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047171D(C)
|
:00471714 83C00C                  add eax, 0000000C
:00471717 3BC1                    cmp eax, ecx
:00471719 7304                    jnb 0047171F
:0047171B 3910                    cmp dword ptr [eax], edx
:0047171D 75F5                    jne 00471714

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471708(C), :00471719(C)
|
:0047171F 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:00471722 8D0C8D10244800          lea ecx, dword ptr [4*ecx+00482410]
:00471729 3BC1                    cmp eax, ecx
:0047172B 7304                    jnb 00471731
:0047172D 3910                    cmp dword ptr [eax], edx
:0047172F 7402                    je 00471733

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047172B(C)
|
:00471731 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047172F(C)
|
:00471733 5E                      pop esi
:00471734 C3                      ret


:00471735 90                      nop
:00471736 90                      nop
:00471737 90                      nop
:00471738 90                      nop
:00471739 90                      nop
:0047173A 90                      nop
:0047173B 90                      nop
:0047173C 90                      nop
:0047173D 90                      nop
:0047173E 90                      nop
:0047173F 90                      nop

* Referenced by a CALL at Address:
|:0046FE6C   
|
:00471740 8B442404                mov eax, dword ptr [esp+04]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00471744 6A04                    push 00000004
:00471746 6A00                    push 00000000
:00471748 50                      push eax
:00471749 E812000000              call 00471760
:0047174E 83C40C                  add esp, 0000000C
:00471751 C3                      ret


:00471752 90                      nop
:00471753 90                      nop
:00471754 90                      nop
:00471755 90                      nop
:00471756 90                      nop
:00471757 90                      nop
:00471758 90                      nop
:00471759 90                      nop
:0047175A 90                      nop
:0047175B 90                      nop
:0047175C 90                      nop
:0047175D 90                      nop
:0047175E 90                      nop
:0047175F 90                      nop

* Referenced by a CALL at Address:
|:00471749   
|
:00471760 8B442404                mov eax, dword ptr [esp+04]
:00471764 8A4C240C                mov cl, byte ptr [esp+0C]
:00471768 25FF000000              and eax, 000000FF
:0047176D 848869644B00            test byte ptr [eax+004B6469], cl
:00471773 751F                    jne 00471794
:00471775 8B4C2408                mov ecx, dword ptr [esp+08]
:00471779 85C9                    test ecx, ecx
:0047177B 7410                    je 0047178D
:0047177D 33D2                    xor edx, edx
:0047177F 668B144572464800        mov dx, word ptr [2*eax+00484672]
:00471787 8BC2                    mov eax, edx
:00471789 23C1                    and eax, ecx
:0047178B EB02                    jmp 0047178F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047177B(C)
|
:0047178D 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047178B(U)
|
:0047178F 85C0                    test eax, eax
:00471791 7501                    jne 00471794
:00471793 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471773(C), :00471791(C)
|
:00471794 B801000000              mov eax, 00000001
:00471799 C3                      ret


:0047179A 90                      nop
:0047179B 90                      nop
:0047179C 90                      nop
:0047179D 90                      nop
:0047179E 90                      nop
:0047179F 90                      nop

* Referenced by a CALL at Address:
|:0046FE3C   
|
:004717A0 51                      push ecx
:004717A1 8B15DC624B00            mov edx, dword ptr [004B62DC]
:004717A7 53                      push ebx
:004717A8 55                      push ebp
:004717A9 56                      push esi
:004717AA 8A02                    mov al, byte ptr [edx]
:004717AC 33F6                    xor esi, esi
:004717AE 84C0                    test al, al
:004717B0 57                      push edi
:004717B1 741D                    je 004717D0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004717CE(C)
|
:004717B3 3C3D                    cmp al, 3D
:004717B5 7401                    je 004717B8
:004717B7 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004717B5(C)
|
:004717B8 8BFA                    mov edi, edx
:004717BA 83C9FF                  or ecx, FFFFFFFF
:004717BD 33C0                    xor eax, eax
:004717BF F2                      repnz
:004717C0 AE                      scasb
:004717C1 F7D1                    not ecx
:004717C3 49                      dec ecx
:004717C4 8A440A01                mov al, byte ptr [edx+ecx+01]
:004717C8 8D540A01                lea edx, dword ptr [edx+ecx+01]
:004717CC 84C0                    test al, al
:004717CE 75E3                    jne 004717B3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004717B1(C)
|
:004717D0 8D04B504000000          lea eax, dword ptr [4*esi+00000004]
:004717D7 50                      push eax
:004717D8 E813F6FFFF              call 00470DF0
:004717DD 8BF0                    mov esi, eax
:004717DF 83C404                  add esp, 00000004
:004717E2 85F6                    test esi, esi
:004717E4 89742410                mov dword ptr [esp+10], esi
:004717E8 893520634B00            mov dword ptr [004B6320], esi
:004717EE 750A                    jne 004717FA

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:004717F0 6A09                    push 00000009
:004717F2 E839E7FFFF              call 0046FF30
:004717F7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004717EE(C)
|
:004717FA 8B2DDC624B00            mov ebp, dword ptr [004B62DC]
:00471800 8A5500                  mov dl, byte ptr [ebp+00]
:00471803 84D2                    test dl, dl
:00471805 7463                    je 0047186A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471868(C)
|
:00471807 8BFD                    mov edi, ebp
:00471809 83C9FF                  or ecx, FFFFFFFF
:0047180C 33C0                    xor eax, eax
:0047180E F2                      repnz
:0047180F AE                      scasb
:00471810 F7D1                    not ecx
:00471812 49                      dec ecx
:00471813 8BD9                    mov ebx, ecx
:00471815 43                      inc ebx
:00471816 80FA3D                  cmp dl, 3D
:00471819 7445                    je 00471860
:0047181B 53                      push ebx
:0047181C E8CFF5FFFF              call 00470DF0
:00471821 83C404                  add esp, 00000004
:00471824 8906                    mov dword ptr [esi], eax
:00471826 85C0                    test eax, eax
:00471828 750A                    jne 00471834

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:0047182A 6A09                    push 00000009
:0047182C E8FFE6FFFF              call 0046FF30
:00471831 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471828(C)
|
:00471834 8BFD                    mov edi, ebp
:00471836 83C9FF                  or ecx, FFFFFFFF
:00471839 33C0                    xor eax, eax
:0047183B F2                      repnz
:0047183C AE                      scasb
:0047183D 8B442410                mov eax, dword ptr [esp+10]
:00471841 F7D1                    not ecx
:00471843 2BF9                    sub edi, ecx
:00471845 8BD1                    mov edx, ecx
:00471847 8BF7                    mov esi, edi
:00471849 8B38                    mov edi, dword ptr [eax]
:0047184B C1E902                  shr ecx, 02
:0047184E F3                      repz
:0047184F A5                      movsd
:00471850 8BCA                    mov ecx, edx
:00471852 83E103                  and ecx, 00000003
:00471855 83C004                  add eax, 00000004
:00471858 F3                      repz
:00471859 A4                      movsb
:0047185A 89442410                mov dword ptr [esp+10], eax
:0047185E 8BF0                    mov esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471819(C)
|
:00471860 8A541D00                mov dl, byte ptr [ebp+ebx]
:00471864 03EB                    add ebp, ebx
:00471866 84D2                    test dl, dl
:00471868 759D                    jne 00471807

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471805(C)
|
:0047186A A1DC624B00              mov eax, dword ptr [004B62DC]
:0047186F 50                      push eax
:00471870 E82BF6FFFF              call 00470EA0
:00471875 83C404                  add esp, 00000004
:00471878 C705DC624B0000000000    mov dword ptr [004B62DC], 00000000
:00471882 C70600000000            mov dword ptr [esi], 00000000
:00471888 5F                      pop edi
:00471889 5E                      pop esi
:0047188A 5D                      pop ebp
:0047188B 5B                      pop ebx
:0047188C 59                      pop ecx
:0047188D C3                      ret


:0047188E 90                      nop
:0047188F 90                      nop

* Referenced by a CALL at Address:
|:0046FE37   
|
:00471890 83EC08                  sub esp, 00000008
:00471893 56                      push esi
:00471894 57                      push edi
:00471895 6804010000              push 00000104
:0047189A 6858634B00              push 004B6358
:0047189F 6A00                    push 00000000

* Reference To: KERNEL32.GetModuleFileNameA, Ord:00FCh
                                  |
:004718A1 FF1564D54B00            Call dword ptr [004BD564]
:004718A7 8B3DECBD4B00            mov edi, dword ptr [004BBDEC]
:004718AD C70530634B0058634B00    mov dword ptr [004B6330], 004B6358
:004718B7 803F00                  cmp byte ptr [edi], 00
:004718BA 7505                    jne 004718C1
:004718BC BF58634B00              mov edi, 004B6358

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004718BA(C)
|
:004718C1 8D44240C                lea eax, dword ptr [esp+0C]
:004718C5 8D4C2408                lea ecx, dword ptr [esp+08]
:004718C9 50                      push eax
:004718CA 51                      push ecx
:004718CB 6A00                    push 00000000
:004718CD 6A00                    push 00000000
:004718CF 57                      push edi
:004718D0 E85B000000              call 00471930
:004718D5 8B542420                mov edx, dword ptr [esp+20]
:004718D9 8B44241C                mov eax, dword ptr [esp+1C]
:004718DD 83C414                  add esp, 00000014
:004718E0 8D0C82                  lea ecx, dword ptr [edx+4*eax]
:004718E3 51                      push ecx
:004718E4 E807F5FFFF              call 00470DF0
:004718E9 8BF0                    mov esi, eax
:004718EB 83C404                  add esp, 00000004
:004718EE 85F6                    test esi, esi
:004718F0 750A                    jne 004718FC

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004718F2 6A08                    push 00000008
:004718F4 E837E6FFFF              call 0046FF30
:004718F9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004718F0(C)
|
:004718FC 8B4C2408                mov ecx, dword ptr [esp+08]
:00471900 8D54240C                lea edx, dword ptr [esp+0C]
:00471904 52                      push edx
:00471905 8D44240C                lea eax, dword ptr [esp+0C]
:00471909 8D148E                  lea edx, dword ptr [esi+4*ecx]
:0047190C 50                      push eax
:0047190D 52                      push edx
:0047190E 56                      push esi
:0047190F 57                      push edi
:00471910 E81B000000              call 00471930
:00471915 8B44241C                mov eax, dword ptr [esp+1C]
:00471919 83C414                  add esp, 00000014
:0047191C 48                      dec eax
:0047191D 893518634B00            mov dword ptr [004B6318], esi
:00471923 5F                      pop edi
:00471924 A314634B00              mov dword ptr [004B6314], eax
:00471929 5E                      pop esi
:0047192A 83C408                  add esp, 00000008
:0047192D C3                      ret


:0047192E 90                      nop
:0047192F 90                      nop

* Referenced by a CALL at Addresses:
|:004718D0   , :00471910   
|
:00471930 8B442410                mov eax, dword ptr [esp+10]
:00471934 53                      push ebx
:00471935 55                      push ebp
:00471936 8B6C2410                mov ebp, dword ptr [esp+10]
:0047193A 56                      push esi
:0047193B 8B742418                mov esi, dword ptr [esp+18]
:0047193F 57                      push edi
:00471940 8B7C2424                mov edi, dword ptr [esp+24]
:00471944 85ED                    test ebp, ebp
:00471946 C70700000000            mov dword ptr [edi], 00000000
:0047194C C70001000000            mov dword ptr [eax], 00000001
:00471952 8B442414                mov eax, dword ptr [esp+14]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00471956 BB04000000              mov ebx, 00000004
:0047195B 7409                    je 00471966
:0047195D 897500                  mov dword ptr [ebp+00], esi
:00471960 03EB                    add ebp, ebx
:00471962 896C2418                mov dword ptr [esp+18], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047195B(C)
|
:00471966 803822                  cmp byte ptr [eax], 22
:00471969 7556                    jne 004719C1
:0047196B 8A4801                  mov cl, byte ptr [eax+01]
:0047196E 40                      inc eax
:0047196F 80F922                  cmp cl, 22
:00471972 7438                    je 004719AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004719AA(C)
|
:00471974 84C9                    test cl, cl
:00471976 7434                    je 004719AC
:00471978 81E1FF000000            and ecx, 000000FF
:0047197E 849969644B00            test byte ptr [ecx+004B6469], bl
:00471984 740F                    je 00471995
:00471986 8B17                    mov edx, dword ptr [edi]
:00471988 42                      inc edx
:00471989 85F6                    test esi, esi
:0047198B 8917                    mov dword ptr [edi], edx
:0047198D 7406                    je 00471995
:0047198F 8A08                    mov cl, byte ptr [eax]
:00471991 880E                    mov byte ptr [esi], cl
:00471993 46                      inc esi
:00471994 40                      inc eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471984(C), :0047198D(C)
|
:00471995 8B17                    mov edx, dword ptr [edi]
:00471997 42                      inc edx
:00471998 85F6                    test esi, esi
:0047199A 8917                    mov dword ptr [edi], edx
:0047199C 7405                    je 004719A3
:0047199E 8A10                    mov dl, byte ptr [eax]
:004719A0 8816                    mov byte ptr [esi], dl
:004719A2 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047199C(C)
|
:004719A3 8A4801                  mov cl, byte ptr [eax+01]
:004719A6 40                      inc eax
:004719A7 80F922                  cmp cl, 22
:004719AA 75C8                    jne 00471974

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471972(C), :00471976(C)
|
:004719AC 8B17                    mov edx, dword ptr [edi]
:004719AE 42                      inc edx
:004719AF 85F6                    test esi, esi
:004719B1 8917                    mov dword ptr [edi], edx
:004719B3 7404                    je 004719B9
:004719B5 C60600                  mov byte ptr [esi], 00
:004719B8 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004719B3(C)
|
:004719B9 803822                  cmp byte ptr [eax], 22
:004719BC 7556                    jne 00471A14
:004719BE 40                      inc eax
:004719BF EB53                    jmp 00471A14

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471969(C), :00471A03(C)
|
:004719C1 8B17                    mov edx, dword ptr [edi]
:004719C3 42                      inc edx
:004719C4 85F6                    test esi, esi
:004719C6 8917                    mov dword ptr [edi], edx
:004719C8 7405                    je 004719CF
:004719CA 8A08                    mov cl, byte ptr [eax]
:004719CC 880E                    mov byte ptr [esi], cl
:004719CE 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004719C8(C)
|
:004719CF 8A08                    mov cl, byte ptr [eax]
:004719D1 40                      inc eax
:004719D2 884C2424                mov byte ptr [esp+24], cl
:004719D6 8B542424                mov edx, dword ptr [esp+24]
:004719DA 81E2FF000000            and edx, 000000FF
:004719E0 849A69644B00            test byte ptr [edx+004B6469], bl
:004719E6 740F                    je 004719F7
:004719E8 8B17                    mov edx, dword ptr [edi]
:004719EA 42                      inc edx
:004719EB 85F6                    test esi, esi
:004719ED 8917                    mov dword ptr [edi], edx
:004719EF 7405                    je 004719F6
:004719F1 8A10                    mov dl, byte ptr [eax]
:004719F3 8816                    mov byte ptr [esi], dl
:004719F5 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004719EF(C)
|
:004719F6 40                      inc eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004719E6(C)
|
:004719F7 80F920                  cmp cl, 20
:004719FA 7409                    je 00471A05
:004719FC 84C9                    test cl, cl
:004719FE 7409                    je 00471A09
:00471A00 80F909                  cmp cl, 09
:00471A03 75BC                    jne 004719C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004719FA(C)
|
:00471A05 84C9                    test cl, cl
:00471A07 7503                    jne 00471A0C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004719FE(C)
|
:00471A09 48                      dec eax
:00471A0A EB08                    jmp 00471A14

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A07(C)
|
:00471A0C 85F6                    test esi, esi
:00471A0E 7404                    je 00471A14
:00471A10 C646FF00                mov [esi-01], 00

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004719BC(C), :004719BF(U), :00471A0A(U), :00471A0E(C)
|
:00471A14 33D2                    xor edx, edx
:00471A16 89542424                mov dword ptr [esp+24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471B21(U)
|
:00471A1A 803800                  cmp byte ptr [eax], 00
:00471A1D 0F8403010000            je 00471B26

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A30(U)
|
:00471A23 8A08                    mov cl, byte ptr [eax]
:00471A25 80F920                  cmp cl, 20
:00471A28 7405                    je 00471A2F
:00471A2A 80F909                  cmp cl, 09
:00471A2D 7503                    jne 00471A32

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A28(C)
|
:00471A2F 40                      inc eax
:00471A30 EBF1                    jmp 00471A23

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A2D(C)
|
:00471A32 803800                  cmp byte ptr [eax], 00
:00471A35 0F84EB000000            je 00471B26
:00471A3B 85ED                    test ebp, ebp
:00471A3D 7409                    je 00471A48
:00471A3F 897500                  mov dword ptr [ebp+00], esi
:00471A42 03EB                    add ebp, ebx
:00471A44 896C2418                mov dword ptr [esp+18], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A3D(C)
|
:00471A48 8B4C2420                mov ecx, dword ptr [esp+20]
:00471A4C FF01                    inc dword ptr [ecx]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471AE9(U), :00471B06(U)
|
:00471A4E 8A18                    mov bl, byte ptr [eax]
:00471A50 33C9                    xor ecx, ecx
:00471A52 80FB5C                  cmp bl, 5C
:00471A55 BD01000000              mov ebp, 00000001
:00471A5A 750A                    jne 00471A66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A64(C)
|
:00471A5C 8A5801                  mov bl, byte ptr [eax+01]
:00471A5F 40                      inc eax
:00471A60 41                      inc ecx
:00471A61 80FB5C                  cmp bl, 5C
:00471A64 74F6                    je 00471A5C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A5A(C)
|
:00471A66 803822                  cmp byte ptr [eax], 22
:00471A69 7525                    jne 00471A90
:00471A6B F6C101                  test cl, 01
:00471A6E 751E                    jne 00471A8E
:00471A70 85D2                    test edx, edx
:00471A72 7409                    je 00471A7D
:00471A74 80780122                cmp byte ptr [eax+01], 22
:00471A78 7503                    jne 00471A7D
:00471A7A 40                      inc eax
:00471A7B EB02                    jmp 00471A7F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471A72(C), :00471A78(C)
|
:00471A7D 33ED                    xor ebp, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A7B(U)
|
:00471A7F 8B5C2424                mov ebx, dword ptr [esp+24]
:00471A83 33D2                    xor edx, edx
:00471A85 85DB                    test ebx, ebx
:00471A87 0F94C2                  sete dl
:00471A8A 89542424                mov dword ptr [esp+24], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A6E(C)
|
:00471A8E D1E9                    shr ecx, 1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A69(C)
|
:00471A90 8BD9                    mov ebx, ecx
:00471A92 49                      dec ecx
:00471A93 85DB                    test ebx, ebx
:00471A95 7411                    je 00471AA8
:00471A97 41                      inc ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471AA6(C)
|
:00471A98 85F6                    test esi, esi
:00471A9A 7404                    je 00471AA0
:00471A9C C6065C                  mov byte ptr [esi], 5C
:00471A9F 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A9A(C)
|
:00471AA0 8B1F                    mov ebx, dword ptr [edi]
:00471AA2 43                      inc ebx
:00471AA3 49                      dec ecx
:00471AA4 891F                    mov dword ptr [edi], ebx
:00471AA6 75F0                    jne 00471A98

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471A95(C)
|
:00471AA8 8A08                    mov cl, byte ptr [eax]
:00471AAA 84C9                    test cl, cl
:00471AAC 745D                    je 00471B0B
:00471AAE 85D2                    test edx, edx
:00471AB0 750A                    jne 00471ABC
:00471AB2 80F920                  cmp cl, 20
:00471AB5 7454                    je 00471B0B
:00471AB7 80F909                  cmp cl, 09
:00471ABA 744F                    je 00471B0B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471AB0(C)
|
:00471ABC 85ED                    test ebp, ebp
:00471ABE 7445                    je 00471B05
:00471AC0 85F6                    test esi, esi
:00471AC2 742A                    je 00471AEE
:00471AC4 8BD9                    mov ebx, ecx
:00471AC6 81E3FF000000            and ebx, 000000FF
:00471ACC F68369644B0004          test byte ptr [ebx+004B6469], 04
:00471AD3 7409                    je 00471ADE
:00471AD5 880E                    mov byte ptr [esi], cl
:00471AD7 8B0F                    mov ecx, dword ptr [edi]
:00471AD9 46                      inc esi
:00471ADA 40                      inc eax
:00471ADB 41                      inc ecx
:00471ADC 890F                    mov dword ptr [edi], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471AD3(C)
|
:00471ADE 8A08                    mov cl, byte ptr [eax]
:00471AE0 880E                    mov byte ptr [esi], cl
:00471AE2 8B0F                    mov ecx, dword ptr [edi]
:00471AE4 46                      inc esi
:00471AE5 41                      inc ecx
:00471AE6 890F                    mov dword ptr [edi], ecx
:00471AE8 40                      inc eax
:00471AE9 E960FFFFFF              jmp 00471A4E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471AC2(C)
|
:00471AEE 81E1FF000000            and ecx, 000000FF
:00471AF4 F68169644B0004          test byte ptr [ecx+004B6469], 04
:00471AFB 7406                    je 00471B03
:00471AFD 8B0F                    mov ecx, dword ptr [edi]
:00471AFF 40                      inc eax
:00471B00 41                      inc ecx
:00471B01 890F                    mov dword ptr [edi], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471AFB(C)
|
:00471B03 FF07                    inc dword ptr [edi]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471ABE(C)
|
:00471B05 40                      inc eax
:00471B06 E943FFFFFF              jmp 00471A4E

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471AAC(C), :00471AB5(C), :00471ABA(C)
|
:00471B0B 85F6                    test esi, esi
:00471B0D 7404                    je 00471B13
:00471B0F C60600                  mov byte ptr [esi], 00
:00471B12 46                      inc esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471B0D(C)
|
:00471B13 8B0F                    mov ecx, dword ptr [edi]
:00471B15 8B6C2418                mov ebp, dword ptr [esp+18]
:00471B19 41                      inc ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00471B1A BB04000000              mov ebx, 00000004
:00471B1F 890F                    mov dword ptr [edi], ecx
:00471B21 E9F4FEFFFF              jmp 00471A1A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471A1D(C), :00471A35(C)
|
:00471B26 85ED                    test ebp, ebp
:00471B28 7407                    je 00471B31
:00471B2A C7450000000000          mov [ebp+00], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471B28(C)
|
:00471B31 8B442420                mov eax, dword ptr [esp+20]
:00471B35 5F                      pop edi
:00471B36 5E                      pop esi
:00471B37 5D                      pop ebp
:00471B38 8B08                    mov ecx, dword ptr [eax]
:00471B3A 5B                      pop ebx
:00471B3B 41                      inc ecx
:00471B3C 8908                    mov dword ptr [eax], ecx
:00471B3E C3                      ret


:00471B3F 90                      nop

* Referenced by a CALL at Address:
|:0046FE16   
|
:00471B40 A160644B00              mov eax, dword ptr [004B6460]
:00471B45 53                      push ebx
:00471B46 55                      push ebp

* Reference To: KERNEL32.GetEnvironmentStrings, Ord:00E1h
                                  |
:00471B47 8B2D54D54B00            mov ebp, dword ptr [004BD554]
:00471B4D 56                      push esi
:00471B4E 33F6                    xor esi, esi
:00471B50 33DB                    xor ebx, ebx
:00471B52 57                      push edi

* Reference To: KERNEL32.GetEnvironmentStringsW, Ord:00E3h
                                  |
:00471B53 8B3D5CD54B00            mov edi, dword ptr [004BD55C]
:00471B59 85C0                    test eax, eax
:00471B5B 7525                    jne 00471B82
:00471B5D FFD7                    call edi
:00471B5F 8BF0                    mov esi, eax
:00471B61 85F6                    test esi, esi
:00471B63 7407                    je 00471B6C
:00471B65 B801000000              mov eax, 00000001
:00471B6A EB11                    jmp 00471B7D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471B63(C)
|
:00471B6C FFD5                    call ebp
:00471B6E 8BD8                    mov ebx, eax
:00471B70 85DB                    test ebx, ebx
:00471B72 0F8417010000            je 00471C8F

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00471B78 B802000000              mov eax, 00000002

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471B6A(U)
|
:00471B7D A360644B00              mov dword ptr [004B6460], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471B5B(C)
|
:00471B82 83F801                  cmp eax, 00000001
:00471B85 0F8597000000            jne 00471C22
:00471B8B 85F6                    test esi, esi
:00471B8D 750C                    jne 00471B9B
:00471B8F FFD7                    call edi
:00471B91 8BF0                    mov esi, eax
:00471B93 85F6                    test esi, esi
:00471B95 0F84F4000000            je 00471C8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471B8D(C)
|
:00471B9B 66833E00                cmp word ptr [esi], 0000
:00471B9F 8BC6                    mov eax, esi
:00471BA1 7412                    je 00471BB5

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471BAA(C), :00471BB3(C)
|
:00471BA3 83C002                  add eax, 00000002
:00471BA6 66833800                cmp word ptr [eax], 0000
:00471BAA 75F7                    jne 00471BA3
:00471BAC 83C002                  add eax, 00000002
:00471BAF 66833800                cmp word ptr [eax], 0000
:00471BB3 75EE                    jne 00471BA3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471BA1(C)
|
:00471BB5 2BC6                    sub eax, esi
:00471BB7 6A00                    push 00000000
:00471BB9 D1F8                    sar eax, 1
:00471BBB 40                      inc eax
:00471BBC 6A00                    push 00000000
:00471BBE 8BE8                    mov ebp, eax
:00471BC0 6A00                    push 00000000
:00471BC2 6A00                    push 00000000
:00471BC4 55                      push ebp
:00471BC5 56                      push esi
:00471BC6 6A00                    push 00000000
:00471BC8 6A00                    push 00000000

* Reference To: KERNEL32.WideCharToMultiByte, Ord:026Eh
                                  |
:00471BCA FF154CD54B00            Call dword ptr [004BD54C]
:00471BD0 8BF8                    mov edi, eax
:00471BD2 85FF                    test edi, edi
:00471BD4 743E                    je 00471C14
:00471BD6 57                      push edi
:00471BD7 E814F2FFFF              call 00470DF0
:00471BDC 8BD8                    mov ebx, eax
:00471BDE 83C404                  add esp, 00000004
:00471BE1 85DB                    test ebx, ebx
:00471BE3 742F                    je 00471C14
:00471BE5 6A00                    push 00000000
:00471BE7 6A00                    push 00000000
:00471BE9 57                      push edi
:00471BEA 53                      push ebx
:00471BEB 55                      push ebp
:00471BEC 56                      push esi
:00471BED 6A00                    push 00000000
:00471BEF 6A00                    push 00000000

* Reference To: KERNEL32.WideCharToMultiByte, Ord:026Eh
                                  |
:00471BF1 FF154CD54B00            Call dword ptr [004BD54C]
:00471BF7 85C0                    test eax, eax
:00471BF9 750B                    jne 00471C06
:00471BFB 53                      push ebx
:00471BFC E89FF2FFFF              call 00470EA0
:00471C01 83C404                  add esp, 00000004
:00471C04 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471BF9(C)
|
:00471C06 56                      push esi

* Reference To: KERNEL32.FreeEnvironmentStringsW, Ord:0097h
                                  |
:00471C07 FF1558D54B00            Call dword ptr [004BD558]
:00471C0D 8BC3                    mov eax, ebx
:00471C0F 5F                      pop edi
:00471C10 5E                      pop esi
:00471C11 5D                      pop ebp
:00471C12 5B                      pop ebx
:00471C13 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471BD4(C), :00471BE3(C)
|
:00471C14 56                      push esi

* Reference To: KERNEL32.FreeEnvironmentStringsW, Ord:0097h
                                  |
:00471C15 FF1558D54B00            Call dword ptr [004BD558]
:00471C1B 33C0                    xor eax, eax
:00471C1D 5F                      pop edi
:00471C1E 5E                      pop esi
:00471C1F 5D                      pop ebp
:00471C20 5B                      pop ebx
:00471C21 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471B85(C)
|
:00471C22 83F802                  cmp eax, 00000002
:00471C25 7568                    jne 00471C8F
:00471C27 85DB                    test ebx, ebx
:00471C29 7508                    jne 00471C33
:00471C2B FFD5                    call ebp
:00471C2D 8BD8                    mov ebx, eax
:00471C2F 85DB                    test ebx, ebx
:00471C31 745C                    je 00471C8F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471C29(C)
|
:00471C33 8A0B                    mov cl, byte ptr [ebx]
:00471C35 8BC3                    mov eax, ebx
:00471C37 84C9                    test cl, cl
:00471C39 7410                    je 00471C4B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471C41(C), :00471C49(C)
|
:00471C3B 8A4801                  mov cl, byte ptr [eax+01]
:00471C3E 40                      inc eax
:00471C3F 84C9                    test cl, cl
:00471C41 75F8                    jne 00471C3B
:00471C43 8A4801                  mov cl, byte ptr [eax+01]
:00471C46 40                      inc eax
:00471C47 84C9                    test cl, cl
:00471C49 75F0                    jne 00471C3B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471C39(C)
|
:00471C4B 2BC3                    sub eax, ebx
:00471C4D 40                      inc eax
:00471C4E 8BF0                    mov esi, eax
:00471C50 56                      push esi
:00471C51 E89AF1FFFF              call 00470DF0
:00471C56 8BE8                    mov ebp, eax
:00471C58 83C404                  add esp, 00000004
:00471C5B 85ED                    test ebp, ebp
:00471C5D 750E                    jne 00471C6D
:00471C5F 53                      push ebx

* Reference To: KERNEL32.FreeEnvironmentStringsA, Ord:0096h
                                  |
:00471C60 FF1560D54B00            Call dword ptr [004BD560]
:00471C66 33C0                    xor eax, eax
:00471C68 5F                      pop edi
:00471C69 5E                      pop esi
:00471C6A 5D                      pop ebp
:00471C6B 5B                      pop ebx
:00471C6C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471C5D(C)
|
:00471C6D 8BCE                    mov ecx, esi
:00471C6F 8BF3                    mov esi, ebx
:00471C71 8BC1                    mov eax, ecx
:00471C73 8BFD                    mov edi, ebp
:00471C75 C1E902                  shr ecx, 02
:00471C78 F3                      repz
:00471C79 A5                      movsd
:00471C7A 8BC8                    mov ecx, eax
:00471C7C 53                      push ebx
:00471C7D 83E103                  and ecx, 00000003
:00471C80 F3                      repz
:00471C81 A4                      movsb

* Reference To: KERNEL32.FreeEnvironmentStringsA, Ord:0096h
                                  |
:00471C82 FF1560D54B00            Call dword ptr [004BD560]
:00471C88 8BC5                    mov eax, ebp
:00471C8A 5F                      pop edi
:00471C8B 5E                      pop esi
:00471C8C 5D                      pop ebp
:00471C8D 5B                      pop ebx
:00471C8E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471B72(C), :00471B95(C), :00471C25(C), :00471C31(C)
|
:00471C8F 5F                      pop edi
:00471C90 5E                      pop esi
:00471C91 5D                      pop ebp
:00471C92 33C0                    xor eax, eax
:00471C94 5B                      pop ebx
:00471C95 C3                      ret


:00471C96 90                      nop
:00471C97 90                      nop
:00471C98 90                      nop
:00471C99 90                      nop
:00471C9A 90                      nop
:00471C9B 90                      nop
:00471C9C 90                      nop
:00471C9D 90                      nop
:00471C9E 90                      nop
:00471C9F 90                      nop

* Referenced by a CALL at Address:
|:00471F72   
|
:00471CA0 8B442404                mov eax, dword ptr [esp+04]
:00471CA4 83EC14                  sub esp, 00000014
:00471CA7 53                      push ebx
:00471CA8 55                      push ebp
:00471CA9 56                      push esi
:00471CAA 57                      push edi
:00471CAB 50                      push eax
:00471CAC E8DF010000              call 00471E90
:00471CB1 8BE8                    mov ebp, eax
:00471CB3 A16C654B00              mov eax, dword ptr [004B656C]
:00471CB8 83C404                  add esp, 00000004
:00471CBB 3BE8                    cmp ebp, eax
:00471CBD 896C2428                mov dword ptr [esp+28], ebp
:00471CC1 750A                    jne 00471CCD
:00471CC3 33C0                    xor eax, eax
:00471CC5 5F                      pop edi
:00471CC6 5E                      pop esi
:00471CC7 5D                      pop ebp
:00471CC8 5B                      pop ebx
:00471CC9 83C414                  add esp, 00000014
:00471CCC C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471CC1(C)
|
:00471CCD 33F6                    xor esi, esi
:00471CCF 3BEE                    cmp ebp, esi
:00471CD1 750F                    jne 00471CE2
:00471CD3 E868020000              call 00471F40
:00471CD8 33C0                    xor eax, eax
:00471CDA 5F                      pop edi
:00471CDB 5E                      pop esi
:00471CDC 5D                      pop ebp
:00471CDD 5B                      pop ebx
:00471CDE 83C414                  add esp, 00000014
:00471CE1 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471CD1(C)
|
:00471CE2 33D2                    xor edx, edx

* Possible StringData Ref from Data Obj ->""
                                  |
:00471CE4 B8A0244800              mov eax, 004824A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471CFA(C)
|
:00471CE9 3928                    cmp dword ptr [eax], ebp
:00471CEB 0F84F3000000            je 00471DE4
:00471CF1 83C030                  add eax, 00000030
:00471CF4 42                      inc edx
:00471CF5 3D90254800              cmp eax, 00482590
:00471CFA 72ED                    jb 00471CE9
:00471CFC 8D4C2410                lea ecx, dword ptr [esp+10]
:00471D00 51                      push ecx
:00471D01 55                      push ebp

* Reference To: KERNEL32.GetCPInfo, Ord:00A3h
                                  |
:00471D02 FF1548D54B00            Call dword ptr [004BD548]
:00471D08 83F801                  cmp eax, 00000001
:00471D0B 0F85B1000000            jne 00471DC2
:00471D11 B940000000              mov ecx, 00000040
:00471D16 33C0                    xor eax, eax
:00471D18 BF68644B00              mov edi, 004B6468
:00471D1D F3                      repz
:00471D1E AB                      stosd
:00471D1F AA                      stosb
:00471D20 837C241001              cmp dword ptr [esp+10], 00000001
:00471D25 7671                    jbe 00471D98
:00471D27 8A442416                mov al, byte ptr [esp+16]
:00471D2B 84C0                    test al, al
:00471D2D 7437                    je 00471D66
:00471D2F 8D542417                lea edx, dword ptr [esp+17]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D64(C)
|
:00471D33 8A0A                    mov cl, byte ptr [edx]
:00471D35 84C9                    test cl, cl
:00471D37 742D                    je 00471D66
:00471D39 33C0                    xor eax, eax
:00471D3B 81E1FF000000            and ecx, 000000FF
:00471D41 8A42FF                  mov al, byte ptr [edx-01]
:00471D44 3BC1                    cmp eax, ecx
:00471D46 7714                    ja 00471D5C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D5A(C)
|
:00471D48 8A9869644B00            mov bl, byte ptr [eax+004B6469]
:00471D4E 80CB04                  or bl, 04
:00471D51 889869644B00            mov byte ptr [eax+004B6469], bl
:00471D57 40                      inc eax
:00471D58 3BC1                    cmp eax, ecx
:00471D5A 76EC                    jbe 00471D48

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D46(C)
|
:00471D5C 8A4201                  mov al, byte ptr [edx+01]
:00471D5F 83C202                  add edx, 00000002
:00471D62 84C0                    test al, al
:00471D64 75CD                    jne 00471D33

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471D2D(C), :00471D37(C)
|
:00471D66 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D80(C)
|
:00471D6B 8A9869644B00            mov bl, byte ptr [eax+004B6469]
:00471D71 80CB08                  or bl, 08
:00471D74 889869644B00            mov byte ptr [eax+004B6469], bl
:00471D7A 40                      inc eax
:00471D7B 3DFF000000              cmp eax, 000000FF
:00471D80 72E9                    jb 00471D6B
:00471D82 55                      push ebp
:00471D83 892D6C654B00            mov dword ptr [004B656C], ebp
:00471D89 E852010000              call 00471EE0
:00471D8E 83C404                  add esp, 00000004
:00471D91 A370654B00              mov dword ptr [004B6570], eax
:00471D96 EB0C                    jmp 00471DA4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D25(C)
|
:00471D98 89356C654B00            mov dword ptr [004B656C], esi
:00471D9E 893570654B00            mov dword ptr [004B6570], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D96(U)
|
:00471DA4 33D2                    xor edx, edx
:00471DA6 33C0                    xor eax, eax
:00471DA8 891578654B00            mov dword ptr [004B6578], edx
:00471DAE 89157C654B00            mov dword ptr [004B657C], edx
:00471DB4 891580654B00            mov dword ptr [004B6580], edx
:00471DBA 5F                      pop edi
:00471DBB 5E                      pop esi
:00471DBC 5D                      pop ebp
:00471DBD 5B                      pop ebx
:00471DBE 83C414                  add esp, 00000014
:00471DC1 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471D0B(C)
|
:00471DC2 393584654B00            cmp dword ptr [004B6584], esi
:00471DC8 740F                    je 00471DD9
:00471DCA E871010000              call 00471F40
:00471DCF 33C0                    xor eax, eax
:00471DD1 5F                      pop edi
:00471DD2 5E                      pop esi
:00471DD3 5D                      pop ebp
:00471DD4 5B                      pop ebx
:00471DD5 83C414                  add esp, 00000014
:00471DD8 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471DC8(C)
|
:00471DD9 83C8FF                  or eax, FFFFFFFF
:00471DDC 5F                      pop edi
:00471DDD 5E                      pop esi
:00471DDE 5D                      pop ebp
:00471DDF 5B                      pop ebx
:00471DE0 83C414                  add esp, 00000014
:00471DE3 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471CEB(C)
|
:00471DE4 B940000000              mov ecx, 00000040
:00471DE9 33C0                    xor eax, eax
:00471DEB BF68644B00              mov edi, 004B6468
:00471DF0 8D1C52                  lea ebx, dword ptr [edx+2*edx]
:00471DF3 F3                      repz
:00471DF4 AB                      stosd
:00471DF5 AA                      stosb
:00471DF6 33FF                    xor edi, edi
:00471DF8 C1E304                  shl ebx, 04
:00471DFB 8DABB0244800            lea ebp, dword ptr [ebx+004824B0]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471E41(C)
|
:00471E01 8A4500                  mov al, byte ptr [ebp+00]
:00471E04 8BF5                    mov esi, ebp
:00471E06 84C0                    test al, al
:00471E08 7430                    je 00471E3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471E38(C)
|
:00471E0A 8A4E01                  mov cl, byte ptr [esi+01]
:00471E0D 84C9                    test cl, cl
:00471E0F 7429                    je 00471E3A
:00471E11 33C0                    xor eax, eax
:00471E13 81E1FF000000            and ecx, 000000FF
:00471E19 8A06                    mov al, byte ptr [esi]
:00471E1B 3BC1                    cmp eax, ecx
:00471E1D 7711                    ja 00471E30
:00471E1F 8A9798244800            mov dl, byte ptr [edi+00482498]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471E2E(C)
|
:00471E25 089069644B00            or byte ptr [eax+004B6469], dl
:00471E2B 40                      inc eax
:00471E2C 3BC1                    cmp eax, ecx
:00471E2E 76F5                    jbe 00471E25

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471E1D(C)
|
:00471E30 8A4602                  mov al, byte ptr [esi+02]
:00471E33 83C602                  add esi, 00000002
:00471E36 84C0                    test al, al
:00471E38 75D0                    jne 00471E0A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471E08(C), :00471E0F(C)
|
:00471E3A 47                      inc edi
:00471E3B 83C508                  add ebp, 00000008
:00471E3E 83FF04                  cmp edi, 00000004
:00471E41 72BE                    jb 00471E01
:00471E43 8B442428                mov eax, dword ptr [esp+28]
:00471E47 50                      push eax
:00471E48 A36C654B00              mov dword ptr [004B656C], eax
:00471E4D E88E000000              call 00471EE0
:00471E52 8B8BA4244800            mov ecx, dword ptr [ebx+004824A4]
:00471E58 8B93A8244800            mov edx, dword ptr [ebx+004824A8]
:00471E5E A370654B00              mov dword ptr [004B6570], eax
:00471E63 8D83A4244800            lea eax, dword ptr [ebx+004824A4]
:00471E69 83C404                  add esp, 00000004
:00471E6C 890D78654B00            mov dword ptr [004B6578], ecx
:00471E72 8B4008                  mov eax, dword ptr [eax+08]
:00471E75 89157C654B00            mov dword ptr [004B657C], edx
:00471E7B 5F                      pop edi
:00471E7C 5E                      pop esi
:00471E7D A380654B00              mov dword ptr [004B6580], eax
:00471E82 5D                      pop ebp
:00471E83 33C0                    xor eax, eax
:00471E85 5B                      pop ebx
:00471E86 83C414                  add esp, 00000014
:00471E89 C3                      ret


:00471E8A 90                      nop
:00471E8B 90                      nop
:00471E8C 90                      nop
:00471E8D 90                      nop
:00471E8E 90                      nop
:00471E8F 90                      nop

* Referenced by a CALL at Address:
|:00471CAC   
|
:00471E90 8B442404                mov eax, dword ptr [esp+04]
:00471E94 C70584654B0000000000    mov dword ptr [004B6584], 00000000
:00471E9E 83F8FE                  cmp eax, FFFFFFFE
:00471EA1 7510                    jne 00471EB3
:00471EA3 C70584654B0001000000    mov dword ptr [004B6584], 00000001

* Reference To: KERNEL32.GetOEMCP, Ord:0109h
                                  |
:00471EAD FF2540D54B00            Jmp dword ptr [004BD540]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471EA1(C)
|
:00471EB3 83F8FD                  cmp eax, FFFFFFFD
:00471EB6 7510                    jne 00471EC8
:00471EB8 C70584654B0001000000    mov dword ptr [004B6584], 00000001

* Reference To: KERNEL32.GetACP, Ord:009Dh
                                  |
:00471EC2 FF2550D54B00            Jmp dword ptr [004BD550]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471EB6(C)
|
:00471EC8 83F8FC                  cmp eax, FFFFFFFC
:00471ECB 750F                    jne 00471EDC
:00471ECD A1E8654B00              mov eax, dword ptr [004B65E8]
:00471ED2 C70584654B0001000000    mov dword ptr [004B6584], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471ECB(C)
|
:00471EDC C3                      ret
:00471EDD 90                      nop
:00471EDE 90                      nop
:00471EDF 90                      nop

* Referenced by a CALL at Addresses:
|:00471D89   , :00471E4D   
|
:00471EE0 8B442404                mov eax, dword ptr [esp+04]
:00471EE4 055CFCFFFF              add eax, FFFFFC5C
:00471EE9 83F812                  cmp eax, 00000012
:00471EEC 7727                    ja 00471F15
:00471EEE 33C9                    xor ecx, ecx
:00471EF0 8A882C1F4700            mov cl, byte ptr [eax+00471F2C]
:00471EF6 FF248D181F4700          jmp dword ptr [4*ecx+00471F18]
:00471EFD B811040000              mov eax, 00000411
:00471F02 C3                      ret


:00471F03 B804080000              mov eax, 00000804
:00471F08 C3                      ret


:00471F09 B812040000              mov eax, 00000412
:00471F0E C3                      ret



* Possible Reference to Dialog: DialogID_00A6, CONTROL_ID:0404, ""
                                  |
:00471F0F B804040000              mov eax, 00000404
:00471F14 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471EEC(C)
|
:00471F15 33C0                    xor eax, eax
:00471F17 C3                      ret



:00471F18 FD1E4700                DWORD 00471EFD
:00471F1C 031F4700                DWORD 00471F03
:00471F20 091F4700                DWORD 00471F09
:00471F24 0F1F4700                DWORD 00471F0F
:00471F28 151F4700                DWORD 00471F15


:00471F2C 000404                  add byte ptr [esp+eax], al
:00471F2F 0401                    add al, 01
:00471F31 0404                    add al, 04
:00471F33 0404                    add al, 04
:00471F35 0404                    add al, 04
:00471F37 0404                    add al, 04
:00471F39 0404                    add al, 04
:00471F3B 0404                    add al, 04
:00471F3D 0203                    add al, byte ptr [ebx]
:00471F3F 90                      nop

* Referenced by a CALL at Addresses:
|:00471CD3   , :00471DCA   
|
:00471F40 57                      push edi
:00471F41 B940000000              mov ecx, 00000040
:00471F46 33C0                    xor eax, eax
:00471F48 BF68644B00              mov edi, 004B6468
:00471F4D F3                      repz
:00471F4E AB                      stosd
:00471F4F AA                      stosb
:00471F50 33C0                    xor eax, eax
:00471F52 5F                      pop edi
:00471F53 A36C654B00              mov dword ptr [004B656C], eax
:00471F58 A370654B00              mov dword ptr [004B6570], eax
:00471F5D A378654B00              mov dword ptr [004B6578], eax
:00471F62 A37C654B00              mov dword ptr [004B657C], eax
:00471F67 A380654B00              mov dword ptr [004B6580], eax
:00471F6C C3                      ret


:00471F6D 90                      nop
:00471F6E 90                      nop
:00471F6F 90                      nop

* Referenced by a CALL at Address:
|:0046FE06   
|
:00471F70 6AFD                    push FFFFFFFD
:00471F72 E829FDFFFF              call 00471CA0
:00471F77 83C404                  add esp, 00000004
:00471F7A C3                      ret


:00471F7B 90                      nop
:00471F7C 90                      nop
:00471F7D 90                      nop
:00471F7E 90                      nop
:00471F7F 90                      nop

* Referenced by a CALL at Address:
|:0046FE01   
|
:00471F80 83EC48                  sub esp, 00000048
:00471F83 53                      push ebx
:00471F84 55                      push ebp
:00471F85 56                      push esi
:00471F86 57                      push edi
:00471F87 6800010000              push 00000100
:00471F8C E85FEEFFFF              call 00470DF0
:00471F91 8BF0                    mov esi, eax
:00471F93 83C404                  add esp, 00000004
:00471F96 85F6                    test esi, esi
:00471F98 750A                    jne 00471FA4
:00471F9A 6A1B                    push 0000001B
:00471F9C E88FDFFFFF              call 0046FF30
:00471FA1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471F98(C)
|
:00471FA4 8D8600010000            lea eax, dword ptr [esi+00000100]
:00471FAA 8935E0BC4B00            mov dword ptr [004BBCE0], esi
:00471FB0 3BF0                    cmp esi, eax
:00471FB2 C705E0BD4B0020000000    mov dword ptr [004BBDE0], 00000020
:00471FBC B30A                    mov bl, 0A
:00471FBE 7320                    jnb 00471FE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471FDE(C)
|
:00471FC0 C6460400                mov [esi+04], 00
:00471FC4 C706FFFFFFFF            mov dword ptr [esi], FFFFFFFF
:00471FCA 885E05                  mov byte ptr [esi+05], bl
:00471FCD 8B0DE0BC4B00            mov ecx, dword ptr [004BBCE0]
:00471FD3 83C608                  add esi, 00000008
:00471FD6 81C100010000            add ecx, 00000100
:00471FDC 3BF1                    cmp esi, ecx
:00471FDE 72E0                    jb 00471FC0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00471FBE(C)
|
:00471FE0 8D542414                lea edx, dword ptr [esp+14]
:00471FE4 52                      push edx

* Reference To: KERNEL32.GetStartupInfoA, Ord:0128h
                                  |
:00471FE5 FF1594D54B00            Call dword ptr [004BD594]
:00471FEB 66837C244600            cmp word ptr [esp+46], 0000
:00471FF1 0F84F2000000            je 004720E9
:00471FF7 8B442448                mov eax, dword ptr [esp+48]
:00471FFB 85C0                    test eax, eax
:00471FFD 0F84E6000000            je 004720E9
:00472003 8B08                    mov ecx, dword ptr [eax]
:00472005 8D7804                  lea edi, dword ptr [eax+04]
:00472008 81F900080000            cmp ecx, 00000800
:0047200E 894C2410                mov dword ptr [esp+10], ecx
:00472012 8D2C0F                  lea ebp, dword ptr [edi+ecx]
:00472015 7C08                    jl 0047201F
:00472017 C744241000080000        mov [esp+10], 00000800

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472015(C)
|
:0047201F 8B442410                mov eax, dword ptr [esp+10]
:00472023 8B0DE0BD4B00            mov ecx, dword ptr [004BBDE0]
:00472029 3BC8                    cmp ecx, eax
:0047202B 7D69                    jge 00472096
:0047202D BEE4BC4B00              mov esi, 004BBCE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472088(C)
|
:00472032 6800010000              push 00000100
:00472037 E8B4EDFFFF              call 00470DF0
:0047203C 83C404                  add esp, 00000004
:0047203F 85C0                    test eax, eax
:00472041 7449                    je 0047208C
:00472043 8B0DE0BD4B00            mov ecx, dword ptr [004BBDE0]
:00472049 8906                    mov dword ptr [esi], eax
:0047204B 83C120                  add ecx, 00000020
:0047204E 890DE0BD4B00            mov dword ptr [004BBDE0], ecx
:00472054 8D8800010000            lea ecx, dword ptr [eax+00000100]
:0047205A 3BC1                    cmp eax, ecx
:0047205C 731C                    jnb 0047207A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472078(C)
|
:0047205E C6400400                mov [eax+04], 00
:00472062 C700FFFFFFFF            mov dword ptr [eax], FFFFFFFF
:00472068 885805                  mov byte ptr [eax+05], bl
:0047206B 8B16                    mov edx, dword ptr [esi]
:0047206D 83C008                  add eax, 00000008
:00472070 81C200010000            add edx, 00000100
:00472076 3BC2                    cmp eax, edx
:00472078 72E4                    jb 0047205E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047205C(C)
|
:0047207A A1E0BD4B00              mov eax, dword ptr [004BBDE0]
:0047207F 8B4C2410                mov ecx, dword ptr [esp+10]
:00472083 83C604                  add esi, 00000004
:00472086 3BC1                    cmp eax, ecx
:00472088 7CA8                    jl 00472032
:0047208A EB0A                    jmp 00472096

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472041(C)
|
:0047208C 8B0DE0BD4B00            mov ecx, dword ptr [004BBDE0]
:00472092 894C2410                mov dword ptr [esp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047202B(C), :0047208A(U)
|
:00472096 8B442410                mov eax, dword ptr [esp+10]
:0047209A 33F6                    xor esi, esi
:0047209C 85C0                    test eax, eax
:0047209E 7E49                    jle 004720E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004720E7(C)
|
:004720A0 8B4D00                  mov ecx, dword ptr [ebp+00]
:004720A3 83F9FF                  cmp ecx, FFFFFFFF
:004720A6 7434                    je 004720DC
:004720A8 8A07                    mov al, byte ptr [edi]
:004720AA A801                    test al, 01
:004720AC 742E                    je 004720DC
:004720AE A808                    test al, 08
:004720B0 750B                    jne 004720BD
:004720B2 51                      push ecx

* Reference To: KERNEL32.GetFileType, Ord:00EFh
                                  |
:004720B3 FF1534D54B00            Call dword ptr [004BD534]
:004720B9 85C0                    test eax, eax
:004720BB 741F                    je 004720DC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004720B0(C)
|
:004720BD 8BD6                    mov edx, esi
:004720BF 8BC6                    mov eax, esi
:004720C1 C1FA05                  sar edx, 05
:004720C4 83E01F                  and eax, 0000001F
:004720C7 8B0C95E0BC4B00          mov ecx, dword ptr [4*edx+004BBCE0]
:004720CE 8B5500                  mov edx, dword ptr [ebp+00]
:004720D1 8914C1                  mov dword ptr [ecx+8*eax], edx
:004720D4 8D04C1                  lea eax, dword ptr [ecx+8*eax]
:004720D7 8A0F                    mov cl, byte ptr [edi]
:004720D9 884804                  mov byte ptr [eax+04], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004720A6(C), :004720AC(C), :004720BB(C)
|
:004720DC 8B442410                mov eax, dword ptr [esp+10]
:004720E0 46                      inc esi
:004720E1 47                      inc edi
:004720E2 83C504                  add ebp, 00000004
:004720E5 3BF0                    cmp esi, eax
:004720E7 7CB7                    jl 004720A0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00471FF1(C), :00471FFD(C), :0047209E(C)
|

* Reference To: KERNEL32.GetStdHandle, Ord:012Ah
                                  |
:004720E9 8B2D44D54B00            mov ebp, dword ptr [004BD544]
:004720EF 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472162(C)
|
:004720F1 8B15E0BC4B00            mov edx, dword ptr [004BBCE0]
:004720F7 8B04DA                  mov eax, dword ptr [edx+8*ebx]
:004720FA 8D34DA                  lea esi, dword ptr [edx+8*ebx]
:004720FD 83F8FF                  cmp eax, FFFFFFFF
:00472100 7554                    jne 00472156
:00472102 85DB                    test ebx, ebx
:00472104 C6460481                mov [esi+04], 81
:00472108 7507                    jne 00472111
:0047210A B8F6FFFFFF              mov eax, FFFFFFF6
:0047210F EB0A                    jmp 0047211B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472108(C)
|
:00472111 8BC3                    mov eax, ebx
:00472113 48                      dec eax
:00472114 F7D8                    neg eax
:00472116 1BC0                    sbb eax, eax
:00472118 83C0F5                  add eax, FFFFFFF5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047210F(U)
|
:0047211B 50                      push eax
:0047211C FFD5                    call ebp
:0047211E 8BF8                    mov edi, eax
:00472120 83FFFF                  cmp edi, FFFFFFFF
:00472123 742A                    je 0047214F
:00472125 57                      push edi

* Reference To: KERNEL32.GetFileType, Ord:00EFh
                                  |
:00472126 FF1534D54B00            Call dword ptr [004BD534]
:0047212C 85C0                    test eax, eax
:0047212E 741F                    je 0047214F
:00472130 25FF000000              and eax, 000000FF
:00472135 893E                    mov dword ptr [esi], edi
:00472137 83F802                  cmp eax, 00000002
:0047213A 7507                    jne 00472143
:0047213C 8A4604                  mov al, byte ptr [esi+04]
:0047213F 0C40                    or al, 40
:00472141 EB18                    jmp 0047215B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047213A(C)
|
:00472143 83F803                  cmp eax, 00000003
:00472146 7516                    jne 0047215E
:00472148 8A4604                  mov al, byte ptr [esi+04]
:0047214B 0C08                    or al, 08
:0047214D EB0C                    jmp 0047215B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472123(C), :0047212E(C)
|
:0047214F 8A4604                  mov al, byte ptr [esi+04]
:00472152 0C40                    or al, 40
:00472154 EB05                    jmp 0047215B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472100(C)
|
:00472156 8A4604                  mov al, byte ptr [esi+04]
:00472159 0C80                    or al, 80

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472141(U), :0047214D(U), :00472154(U)
|
:0047215B 884604                  mov byte ptr [esi+04], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472146(C)
|
:0047215E 43                      inc ebx
:0047215F 83FB03                  cmp ebx, 00000003
:00472162 7C8D                    jl 004720F1
:00472164 A1E0BD4B00              mov eax, dword ptr [004BBDE0]
:00472169 50                      push eax

* Reference To: KERNEL32.SetHandleCount, Ord:021Bh
                                  |
:0047216A FF153CD54B00            Call dword ptr [004BD53C]
:00472170 5F                      pop edi
:00472171 5E                      pop esi
:00472172 5D                      pop ebp
:00472173 5B                      pop ebx
:00472174 83C448                  add esp, 00000048
:00472177 C3                      ret


:00472178 90                      nop
:00472179 90                      nop
:0047217A 90                      nop
:0047217B 90                      nop
:0047217C 90                      nop
:0047217D 90                      nop
:0047217E 90                      nop
:0047217F 90                      nop

* Referenced by a CALL at Address:
|:0046FDE7   
|
:00472180 6A00                    push 00000000
:00472182 6800100000              push 00001000
:00472187 6A01                    push 00000001

* Reference To: KERNEL32.HeapCreate, Ord:016Ah
                                  |
:00472189 FF1538D54B00            Call dword ptr [004BD538]
:0047218F 85C0                    test eax, eax
:00472191 A3D4BC4B00              mov dword ptr [004BBCD4], eax
:00472196 7501                    jne 00472199
:00472198 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472196(C)
|
:00472199 E8C2060000              call 00472860
:0047219E 85C0                    test eax, eax
:004721A0 750F                    jne 004721B1
:004721A2 A1D4BC4B00              mov eax, dword ptr [004BBCD4]
:004721A7 50                      push eax

* Reference To: KERNEL32.HeapDestroy, Ord:016Ch
                                  |
:004721A8 FF1530D54B00            Call dword ptr [004BD530]
:004721AE 33C0                    xor eax, eax
:004721B0 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004721A0(C)
|
:004721B1 B801000000              mov eax, 00000001
:004721B6 C3                      ret


:004721B7 90                      nop
:004721B8 90                      nop
:004721B9 90                      nop
:004721BA 90                      nop
:004721BB 90                      nop
:004721BC 90                      nop
:004721BD 90                      nop
:004721BE 90                      nop
:004721BF 90                      nop

* Referenced by a CALL at Address:
|:0046FF39   
|
:004721C0 A1E4624B00              mov eax, dword ptr [004B62E4]
:004721C5 83F801                  cmp eax, 00000001
:004721C8 740D                    je 004721D7
:004721CA 85C0                    test eax, eax
:004721CC 752E                    jne 004721FC
:004721CE 833DE823480001          cmp dword ptr [004823E8], 00000001
:004721D5 7525                    jne 004721FC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004721C8(C)
|
:004721D7 68FC000000              push 000000FC
:004721DC E81F000000              call 00472200
:004721E1 A188654B00              mov eax, dword ptr [004B6588]
:004721E6 83C404                  add esp, 00000004
:004721E9 85C0                    test eax, eax
:004721EB 7402                    je 004721EF
:004721ED FFD0                    call eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004721EB(C)
|
:004721EF 68FF000000              push 000000FF
:004721F4 E807000000              call 00472200
:004721F9 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004721CC(C), :004721D5(C)
|
:004721FC C3                      ret
:004721FD 90                      nop
:004721FE 90                      nop
:004721FF 90                      nop

* Referenced by a CALL at Addresses:
|:0046FF43   , :004721DC   , :004721F4   , :00472812   
|
:00472200 8B4C2404                mov ecx, dword ptr [esp+04]
:00472204 81ECA8010000            sub esp, 000001A8

* Possible StringData Ref from Data Obj ->""
                                  |
:0047220A B8A0254800              mov eax, 004825A0
:0047220F 53                      push ebx
:00472210 55                      push ebp
:00472211 56                      push esi
:00472212 57                      push edi
:00472213 33ED                    xor ebp, ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472222(C)
|
:00472215 3B08                    cmp ecx, dword ptr [eax]
:00472217 740B                    je 00472224
:00472219 83C008                  add eax, 00000008
:0047221C 45                      inc ebp
:0047221D 3D30264800              cmp eax, 00482630
:00472222 72F1                    jb 00472215

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472217(C)
|
:00472224 3B0CEDA0254800          cmp ecx, dword ptr [8*ebp+004825A0]
:0047222B 0F859A010000            jne 004723CB
:00472231 A1E4624B00              mov eax, dword ptr [004B62E4]
:00472236 83F801                  cmp eax, 00000001
:00472239 0F844E010000            je 0047238D
:0047223F 85C0                    test eax, eax
:00472241 750D                    jne 00472250
:00472243 833DE823480001          cmp dword ptr [004823E8], 00000001
:0047224A 0F843D010000            je 0047238D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472241(C)
|
:00472250 81F9FC000000            cmp ecx, 000000FC
:00472256 0F846F010000            je 004723CB
:0047225C 8D8424B4000000          lea eax, dword ptr [esp+000000B4]
:00472263 6804010000              push 00000104
:00472268 50                      push eax
:00472269 6A00                    push 00000000

* Reference To: KERNEL32.GetModuleFileNameA, Ord:00FCh
                                  |
:0047226B FF1564D54B00            Call dword ptr [004BD564]
:00472271 85C0                    test eax, eax
:00472273 7516                    jne 0047228B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00472275 B905000000              mov ecx, 00000005
:0047227A BEB8B44700              mov esi, 0047B4B8
:0047227F 8DBC24B4000000          lea edi, dword ptr [esp+000000B4]
:00472286 F3                      repz
:00472287 A5                      movsd
:00472288 66A5                    movsw
:0047228A A4                      movsb

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472273(C)
|
:0047228B 8DBC24B4000000          lea edi, dword ptr [esp+000000B4]
:00472292 83C9FF                  or ecx, FFFFFFFF
:00472295 33C0                    xor eax, eax
:00472297 8D9C24B4000000          lea ebx, dword ptr [esp+000000B4]
:0047229E F2                      repnz
:0047229F AE                      scasb
:004722A0 F7D1                    not ecx
:004722A2 83F93C                  cmp ecx, 0000003C
:004722A5 762D                    jbe 004722D4
:004722A7 8DBC24B4000000          lea edi, dword ptr [esp+000000B4]
:004722AE 83C9FF                  or ecx, FFFFFFFF
:004722B1 F2                      repnz
:004722B2 AE                      scasb
:004722B3 F7D1                    not ecx
:004722B5 49                      dec ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004722B6 6A03                    push 00000003
:004722B8 8BD9                    mov ebx, ecx
:004722BA 8D8C24B8000000          lea ecx, dword ptr [esp+000000B8]
:004722C1 83E93B                  sub ecx, 0000003B
:004722C4 68B4B44700              push 0047B4B4
:004722C9 03D9                    add ebx, ecx
:004722CB 53                      push ebx
:004722CC E84F180000              call 00473B20
:004722D1 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004722A5(C)
|

* Possible Reference to String Resource ID=00006: ""
                                  |
:004722D4 B906000000              mov ecx, 00000006
:004722D9 BE98B44700              mov esi, 0047B498
:004722DE 8D7C2414                lea edi, dword ptr [esp+14]
:004722E2 33C0                    xor eax, eax
:004722E4 F3                      repz
:004722E5 A5                      movsd
:004722E6 66A5                    movsw
:004722E8 83C9FF                  or ecx, FFFFFFFF
:004722EB 8BFB                    mov edi, ebx
:004722ED F2                      repnz
:004722EE AE                      scasb
:004722EF F7D1                    not ecx
:004722F1 2BF9                    sub edi, ecx
:004722F3 8D542414                lea edx, dword ptr [esp+14]
:004722F7 8BD9                    mov ebx, ecx
:004722F9 8BF7                    mov esi, edi
:004722FB 83C9FF                  or ecx, FFFFFFFF
:004722FE 8BFA                    mov edi, edx
:00472300 F2                      repnz
:00472301 AE                      scasb
:00472302 8BCB                    mov ecx, ebx
:00472304 4F                      dec edi
:00472305 C1E902                  shr ecx, 02
:00472308 F3                      repz
:00472309 A5                      movsd
:0047230A 8BCB                    mov ecx, ebx
:0047230C 8D542414                lea edx, dword ptr [esp+14]
:00472310 83E103                  and ecx, 00000003
:00472313 6810200100              push 00012010
:00472318 F3                      repz
:00472319 A4                      movsb
:0047231A BF94B44700              mov edi, 0047B494
:0047231F 83C9FF                  or ecx, FFFFFFFF
:00472322 F2                      repnz
:00472323 AE                      scasb
:00472324 F7D1                    not ecx
:00472326 2BF9                    sub edi, ecx
:00472328 686CB44700              push 0047B46C
:0047232D 8BF7                    mov esi, edi
:0047232F 8BD9                    mov ebx, ecx
:00472331 8BFA                    mov edi, edx
:00472333 83C9FF                  or ecx, FFFFFFFF
:00472336 F2                      repnz
:00472337 AE                      scasb
:00472338 8BCB                    mov ecx, ebx
:0047233A 4F                      dec edi
:0047233B C1E902                  shr ecx, 02
:0047233E F3                      repz
:0047233F A5                      movsd
:00472340 8BCB                    mov ecx, ebx
:00472342 8D54241C                lea edx, dword ptr [esp+1C]
:00472346 83E103                  and ecx, 00000003
:00472349 F3                      repz
:0047234A A4                      movsb
:0047234B 8B3CEDA4254800          mov edi, dword ptr [8*ebp+004825A4]
:00472352 83C9FF                  or ecx, FFFFFFFF
:00472355 F2                      repnz
:00472356 AE                      scasb
:00472357 F7D1                    not ecx
:00472359 2BF9                    sub edi, ecx
:0047235B 8BF7                    mov esi, edi
:0047235D 8BD9                    mov ebx, ecx
:0047235F 8BFA                    mov edi, edx
:00472361 83C9FF                  or ecx, FFFFFFFF
:00472364 F2                      repnz
:00472365 AE                      scasb
:00472366 8BCB                    mov ecx, ebx
:00472368 4F                      dec edi
:00472369 C1E902                  shr ecx, 02
:0047236C F3                      repz
:0047236D A5                      movsd
:0047236E 8BCB                    mov ecx, ebx
:00472370 8D44241C                lea eax, dword ptr [esp+1C]
:00472374 83E103                  and ecx, 00000003
:00472377 50                      push eax
:00472378 F3                      repz
:00472379 A4                      movsb
:0047237A E811170000              call 00473A90
:0047237F 83C40C                  add esp, 0000000C
:00472382 5F                      pop edi
:00472383 5E                      pop esi
:00472384 5D                      pop ebp
:00472385 5B                      pop ebx
:00472386 81C4A8010000            add esp, 000001A8
:0047238C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472239(C), :0047224A(C)
|
:0047238D A1E0BC4B00              mov eax, dword ptr [004BBCE0]
:00472392 85C0                    test eax, eax
:00472394 7408                    je 0047239E
:00472396 8B7010                  mov esi, dword ptr [eax+10]
:00472399 83FEFF                  cmp esi, FFFFFFFF
:0047239C 750A                    jne 004723A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472394(C)
|
:0047239E 6AF4                    push FFFFFFF4

* Reference To: KERNEL32.GetStdHandle, Ord:012Ah
                                  |
:004723A0 FF1544D54B00            Call dword ptr [004BD544]
:004723A6 8BF0                    mov esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047239C(C)
|
:004723A8 8B14EDA4254800          mov edx, dword ptr [8*ebp+004825A4]
:004723AF 8D4C2410                lea ecx, dword ptr [esp+10]
:004723B3 6A00                    push 00000000
:004723B5 51                      push ecx
:004723B6 8BFA                    mov edi, edx
:004723B8 83C9FF                  or ecx, FFFFFFFF
:004723BB 33C0                    xor eax, eax
:004723BD F2                      repnz
:004723BE AE                      scasb
:004723BF F7D1                    not ecx
:004723C1 49                      dec ecx
:004723C2 51                      push ecx
:004723C3 52                      push edx
:004723C4 56                      push esi

* Reference To: KERNEL32.WriteFile, Ord:027Bh
                                  |
:004723C5 FF15C8D44B00            Call dword ptr [004BD4C8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047222B(C), :00472256(C)
|
:004723CB 5F                      pop edi
:004723CC 5E                      pop esi
:004723CD 5D                      pop ebp
:004723CE 5B                      pop ebx
:004723CF 81C4A8010000            add esp, 000001A8
:004723D5 C3                      ret


:004723D6 90                      nop
:004723D7 90                      nop
:004723D8 90                      nop
:004723D9 90                      nop
:004723DA 90                      nop
:004723DB 90                      nop
:004723DC 90                      nop
:004723DD 90                      nop
:004723DE 90                      nop
:004723DF 90                      nop
:004723E0 56                      push esi
:004723E1 8B742408                mov esi, dword ptr [esp+08]
:004723E5 8B06                    mov eax, dword ptr [esi]
:004723E7 813863736DE0            cmp dword ptr [eax], E06D7363
:004723ED 751D                    jne 0047240C
:004723EF 83781003                cmp dword ptr [eax+10], 00000003
:004723F3 7517                    jne 0047240C
:004723F5 81781420059319          cmp dword ptr [eax+14], 19930520
:004723FC 750E                    jne 0047240C
:004723FE E8ADE5FFFF              call 004709B0
:00472403 B801000000              mov eax, 00000001
:00472408 5E                      pop esi
:00472409 C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004723ED(C), :004723F3(C), :004723FC(C)
|
:0047240C A18C654B00              mov eax, dword ptr [004B658C]
:00472411 85C0                    test eax, eax
:00472413 7418                    je 0047242D
:00472415 50                      push eax
:00472416 E895000000              call 004724B0
:0047241B 83C404                  add esp, 00000004
:0047241E 85C0                    test eax, eax
:00472420 740B                    je 0047242D
:00472422 56                      push esi
:00472423 FF158C654B00            call dword ptr [004B658C]
:00472429 5E                      pop esi
:0047242A C20400                  ret 0004



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472413(C), :00472420(C)
|
:0047242D 33C0                    xor eax, eax
:0047242F 5E                      pop esi
:00472430 C20400                  ret 0004


:00472433 90                      nop
:00472434 90                      nop
:00472435 90                      nop
:00472436 90                      nop
:00472437 90                      nop
:00472438 90                      nop
:00472439 90                      nop
:0047243A 90                      nop
:0047243B 90                      nop
:0047243C 90                      nop
:0047243D 90                      nop
:0047243E 90                      nop
:0047243F 90                      nop
:00472440 68E0234700              push 004723E0

* Reference To: KERNEL32.SetUnhandledExceptionFilter, Ord:0236h
                                  |
:00472445 FF1524D54B00            Call dword ptr [004BD524]
:0047244B A38C654B00              mov dword ptr [004B658C], eax
:00472450 C3                      ret


:00472451 90                      nop
:00472452 90                      nop
:00472453 90                      nop
:00472454 90                      nop
:00472455 90                      nop
:00472456 90                      nop
:00472457 90                      nop
:00472458 90                      nop
:00472459 90                      nop
:0047245A 90                      nop
:0047245B 90                      nop
:0047245C 90                      nop
:0047245D 90                      nop
:0047245E 90                      nop
:0047245F 90                      nop
:00472460 A18C654B00              mov eax, dword ptr [004B658C]
:00472465 50                      push eax

* Reference To: KERNEL32.SetUnhandledExceptionFilter, Ord:0236h
                                  |
:00472466 FF1524D54B00            Call dword ptr [004BD524]
:0047246C C3                      ret


:0047246D 90                      nop
:0047246E 90                      nop
:0047246F 90                      nop

* Referenced by a CALL at Addresses:
|:004700A0   , :00470706   , :00470756   , :004707C2   , :00470808   
|
:00472470 8B442408                mov eax, dword ptr [esp+08]
:00472474 8B4C2404                mov ecx, dword ptr [esp+04]
:00472478 56                      push esi
:00472479 50                      push eax
:0047247A 51                      push ecx
:0047247B BE01000000              mov esi, 00000001

* Reference To: KERNEL32.IsBadReadPtr, Ord:0183h
                                  |
:00472480 FF152CD54B00            Call dword ptr [004BD52C]
:00472486 85C0                    test eax, eax
:00472488 7402                    je 0047248C
:0047248A 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472488(C)
|
:0047248C 8BC6                    mov eax, esi
:0047248E 5E                      pop esi
:0047248F C3                      ret



* Referenced by a CALL at Addresses:
|:00470719   , :00470769   , :004707D5   , :00470817   
|
:00472490 8B442408                mov eax, dword ptr [esp+08]
:00472494 8B4C2404                mov ecx, dword ptr [esp+04]
:00472498 56                      push esi
:00472499 50                      push eax
:0047249A 51                      push ecx
:0047249B BE01000000              mov esi, 00000001

* Reference To: KERNEL32.IsBadWritePtr, Ord:0186h
                                  |
:004724A0 FF151CD54B00            Call dword ptr [004BD51C]
:004724A6 85C0                    test eax, eax
:004724A8 7402                    je 004724AC
:004724AA 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004724A8(C)
|
:004724AC 8BC6                    mov eax, esi
:004724AE 5E                      pop esi
:004724AF C3                      ret



* Referenced by a CALL at Addresses:
|:00470827   , :00472416   
|
:004724B0 8B442404                mov eax, dword ptr [esp+04]
:004724B4 56                      push esi
:004724B5 50                      push eax
:004724B6 BE01000000              mov esi, 00000001

* Reference To: KERNEL32.IsBadCodePtr, Ord:0180h
                                  |
:004724BB FF1518D54B00            Call dword ptr [004BD518]
:004724C1 85C0                    test eax, eax
:004724C3 7402                    je 004724C7
:004724C5 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004724C3(C)
|
:004724C7 8BC6                    mov eax, esi
:004724C9 5E                      pop esi
:004724CA C3                      ret


:004724CB 90                      nop
:004724CC 90                      nop
:004724CD 90                      nop
:004724CE 90                      nop
:004724CF 90                      nop

* Referenced by a CALL at Addresses:
|:00470782   , :004707FB   , :004714BE   , :004785CF   
|
:004724D0 55                      push ebp
:004724D1 8BEC                    mov ebp, esp
:004724D3 57                      push edi
:004724D4 56                      push esi
:004724D5 8B750C                  mov esi, dword ptr [ebp+0C]
:004724D8 8B4D10                  mov ecx, dword ptr [ebp+10]
:004724DB 8B7D08                  mov edi, dword ptr [ebp+08]
:004724DE 8BC1                    mov eax, ecx
:004724E0 8BD1                    mov edx, ecx
:004724E2 03C6                    add eax, esi
:004724E4 3BFE                    cmp edi, esi
:004724E6 7608                    jbe 004724F0
:004724E8 3BF8                    cmp edi, eax
:004724EA 0F8278010000            jb 00472668

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004724E6(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004724F0 F7C703000000            test edi, 00000003
:004724F6 7514                    jne 0047250C
:004724F8 C1E902                  shr ecx, 02
:004724FB 83E203                  and edx, 00000003
:004724FE 83F908                  cmp ecx, 00000008
:00472501 7229                    jb 0047252C
:00472503 F3                      repz
:00472504 A5                      movsd
:00472505 FF249518264700          jmp dword ptr [4*edx+00472618]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004724F6(C)
|
:0047250C 8BC7                    mov eax, edi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0047250E BA03000000              mov edx, 00000003
:00472513 83E904                  sub ecx, 00000004
:00472516 720C                    jb 00472524
:00472518 83E003                  and eax, 00000003
:0047251B 03C8                    add ecx, eax
:0047251D FF248530254700          jmp dword ptr [4*eax+00472530]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472516(C)
|
:00472524 FF248D28264700          jmp dword ptr [4*ecx+00472628]
:0047252B 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472501(C), :0047255E(C), :00472584(C), :0047259E(C)
|
:0047252C FF248DAC254700          jmp dword ptr [4*ecx+004725AC]
:00472533 90                      nop

:00472534 40254700                DWORD 00472540
:00472538 6C254700                DWORD 0047256C
:0047253C 90254700                DWORD 00472590


:00472540 23D1                    and edx, ecx
:00472542 8A06                    mov al, byte ptr [esi]
:00472544 8807                    mov byte ptr [edi], al
:00472546 8A4601                  mov al, byte ptr [esi+01]
:00472549 884701                  mov byte ptr [edi+01], al
:0047254C 8A4602                  mov al, byte ptr [esi+02]
:0047254F C1E902                  shr ecx, 02
:00472552 884702                  mov byte ptr [edi+02], al
:00472555 83C603                  add esi, 00000003
:00472558 83C703                  add edi, 00000003
:0047255B 83F908                  cmp ecx, 00000008
:0047255E 72CC                    jb 0047252C
:00472560 F3                      repz
:00472561 A5                      movsd
:00472562 FF249518264700          jmp dword ptr [4*edx+00472618]
:00472569 2E8BC0                  mov eax, eax
:0047256C 23D1                    and edx, ecx
:0047256E 8A06                    mov al, byte ptr [esi]
:00472570 8807                    mov byte ptr [edi], al
:00472572 8A4601                  mov al, byte ptr [esi+01]
:00472575 C1E902                  shr ecx, 02
:00472578 884701                  mov byte ptr [edi+01], al
:0047257B 83C602                  add esi, 00000002
:0047257E 83C702                  add edi, 00000002
:00472581 83F908                  cmp ecx, 00000008
:00472584 72A6                    jb 0047252C
:00472586 F3                      repz
:00472587 A5                      movsd
:00472588 FF249518264700          jmp dword ptr [4*edx+00472618]
:0047258F 90                      nop
:00472590 23D1                    and edx, ecx
:00472592 8A06                    mov al, byte ptr [esi]
:00472594 8807                    mov byte ptr [edi], al
:00472596 46                      inc esi
:00472597 C1E902                  shr ecx, 02
:0047259A 47                      inc edi
:0047259B 83F908                  cmp ecx, 00000008
:0047259E 728C                    jb 0047252C
:004725A0 F3                      repz
:004725A1 A5                      movsd
:004725A2 FF249518264700          jmp dword ptr [4*edx+00472618]
:004725A9 2E8BC0                  mov eax, eax

:004725AC 0F264700                DWORD 0047260F
:004725B0 FC254700                DWORD 004725FC
:004725B4 F4254700                DWORD 004725F4
:004725B8 EC254700                DWORD 004725EC
:004725BC E4254700                DWORD 004725E4
:004725C0 DC254700                DWORD 004725DC
:004725C4 D4254700                DWORD 004725D4
:004725C8 CC254700                DWORD 004725CC


:004725CC 8B448EE4                mov eax, dword ptr [esi+4*ecx-1C]
:004725D0 89448FE4                mov dword ptr [edi+4*ecx-1C], eax
:004725D4 8B448EE8                mov eax, dword ptr [esi+4*ecx-18]
:004725D8 89448FE8                mov dword ptr [edi+4*ecx-18], eax
:004725DC 8B448EEC                mov eax, dword ptr [esi+4*ecx-14]
:004725E0 89448FEC                mov dword ptr [edi+4*ecx-14], eax
:004725E4 8B448EF0                mov eax, dword ptr [esi+4*ecx-10]
:004725E8 89448FF0                mov dword ptr [edi+4*ecx-10], eax
:004725EC 8B448EF4                mov eax, dword ptr [esi+4*ecx-0C]
:004725F0 89448FF4                mov dword ptr [edi+4*ecx-0C], eax
:004725F4 8B448EF8                mov eax, dword ptr [esi+4*ecx-08]
:004725F8 89448FF8                mov dword ptr [edi+4*ecx-08], eax
:004725FC 8B448EFC                mov eax, dword ptr [esi+4*ecx-04]
:00472600 89448FFC                mov dword ptr [edi+4*ecx-04], eax
:00472604 8D048D00000000          lea eax, dword ptr [4*ecx+00000000]
:0047260B 03F0                    add esi, eax
:0047260D 03F8                    add edi, eax
:0047260F FF249518264700          jmp dword ptr [4*edx+00472618]
:00472616 8BC0                    mov eax, eax

:00472618 28264700                DWORD 00472628
:0047261C 30264700                DWORD 00472630
:00472620 3C264700                DWORD 0047263C
:00472624 50264700                DWORD 00472650


:00472628 8B4508                  mov eax, dword ptr [ebp+08]
:0047262B 5E                      pop esi
:0047262C 5F                      pop edi
:0047262D C9                      leave
:0047262E C3                      ret


:0047262F 90                      nop
:00472630 8A06                    mov al, byte ptr [esi]
:00472632 8807                    mov byte ptr [edi], al
:00472634 8B4508                  mov eax, dword ptr [ebp+08]
:00472637 5E                      pop esi
:00472638 5F                      pop edi
:00472639 C9                      leave
:0047263A C3                      ret


:0047263B 90                      nop
:0047263C 8A06                    mov al, byte ptr [esi]
:0047263E 8807                    mov byte ptr [edi], al
:00472640 8A4601                  mov al, byte ptr [esi+01]
:00472643 884701                  mov byte ptr [edi+01], al
:00472646 8B4508                  mov eax, dword ptr [ebp+08]
:00472649 5E                      pop esi
:0047264A 5F                      pop edi
:0047264B C9                      leave
:0047264C C3                      ret


:0047264D 2E8BC0                  mov eax, eax
:00472650 8A06                    mov al, byte ptr [esi]
:00472652 8807                    mov byte ptr [edi], al
:00472654 8A4601                  mov al, byte ptr [esi+01]
:00472657 884701                  mov byte ptr [edi+01], al
:0047265A 8A4602                  mov al, byte ptr [esi+02]
:0047265D 884702                  mov byte ptr [edi+02], al
:00472660 8B4508                  mov eax, dword ptr [ebp+08]
:00472663 5E                      pop esi
:00472664 5F                      pop edi
:00472665 C9                      leave
:00472666 C3                      ret


:00472667 90                      nop

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004724EA(C)
|
:00472668 8D7431FC                lea esi, dword ptr [ecx+esi-04]
:0047266C 8D7C39FC                lea edi, dword ptr [ecx+edi-04]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00472670 F7C703000000            test edi, 00000003
:00472676 7524                    jne 0047269C
:00472678 C1E902                  shr ecx, 02
:0047267B 83E203                  and edx, 00000003
:0047267E 83F908                  cmp ecx, 00000008
:00472681 720D                    jb 00472690
:00472683 FD                      std
:00472684 F3                      repz
:00472685 A5                      movsd
:00472686 FC                      cld
:00472687 FF2495B0274700          jmp dword ptr [4*edx+004727B0]
:0047268E 8BC0                    mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472681(C), :004726D8(C), :00472702(C), :00472730(C)
|
:00472690 F7D9                    neg ecx
:00472692 FF248D60274700          jmp dword ptr [4*ecx+00472760]
:00472699 2E8BC0                  mov eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472676(C)
|
:0047269C 8BC7                    mov eax, edi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0047269E BA03000000              mov edx, 00000003
:004726A3 83F904                  cmp ecx, 00000004
:004726A6 720C                    jb 004726B4
:004726A8 83E003                  and eax, 00000003
:004726AB 2BC8                    sub ecx, eax
:004726AD FF2485B8264700          jmp dword ptr [4*eax+004726B8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004726A6(C)
|
:004726B4 FF248DB0274700          jmp dword ptr [4*ecx+004727B0]
:004726BB 90                      nop

:004726BC C8264700                DWORD 004726C8
:004726C0 E8264700                DWORD 004726E8
:004726C4 10274700                DWORD 00472710


:004726C8 8A4603                  mov al, byte ptr [esi+03]
:004726CB 23D1                    and edx, ecx
:004726CD 884703                  mov byte ptr [edi+03], al
:004726D0 4E                      dec esi
:004726D1 C1E902                  shr ecx, 02
:004726D4 4F                      dec edi
:004726D5 83F908                  cmp ecx, 00000008
:004726D8 72B6                    jb 00472690
:004726DA FD                      std
:004726DB F3                      repz
:004726DC A5                      movsd
:004726DD FC                      cld
:004726DE FF2495B0274700          jmp dword ptr [4*edx+004727B0]
:004726E5 2E8BC0                  mov eax, eax
:004726E8 8A4603                  mov al, byte ptr [esi+03]
:004726EB 23D1                    and edx, ecx
:004726ED 884703                  mov byte ptr [edi+03], al
:004726F0 8A4602                  mov al, byte ptr [esi+02]
:004726F3 C1E902                  shr ecx, 02
:004726F6 884702                  mov byte ptr [edi+02], al
:004726F9 83EE02                  sub esi, 00000002
:004726FC 83EF02                  sub edi, 00000002
:004726FF 83F908                  cmp ecx, 00000008
:00472702 728C                    jb 00472690
:00472704 FD                      std
:00472705 F3                      repz
:00472706 A5                      movsd
:00472707 FC                      cld
:00472708 FF2495B0274700          jmp dword ptr [4*edx+004727B0]
:0047270F 90                      nop
:00472710 8A4603                  mov al, byte ptr [esi+03]
:00472713 23D1                    and edx, ecx
:00472715 884703                  mov byte ptr [edi+03], al
:00472718 8A4602                  mov al, byte ptr [esi+02]
:0047271B 884702                  mov byte ptr [edi+02], al
:0047271E 8A4601                  mov al, byte ptr [esi+01]
:00472721 C1E902                  shr ecx, 02
:00472724 884701                  mov byte ptr [edi+01], al
:00472727 83EE03                  sub esi, 00000003
:0047272A 83EF03                  sub edi, 00000003
:0047272D 83F908                  cmp ecx, 00000008
:00472730 0F825AFFFFFF            jb 00472690
:00472736 FD                      std
:00472737 F3                      repz
:00472738 A5                      movsd
:00472739 FC                      cld
:0047273A FF2495B0274700          jmp dword ptr [4*edx+004727B0]
:00472741 2E8BC0                  mov eax, eax

:00472744 64274700                DWORD 00472764
:00472748 6C274700                DWORD 0047276C
:0047274C 74274700                DWORD 00472774
:00472750 7C274700                DWORD 0047277C
:00472754 84274700                DWORD 00472784
:00472758 8C274700                DWORD 0047278C
:0047275C 94274700                DWORD 00472794
:00472760 A7274700                DWORD 004727A7


:00472764 8B448E1C                mov eax, dword ptr [esi+4*ecx+1C]
:00472768 89448F1C                mov dword ptr [edi+4*ecx+1C], eax
:0047276C 8B448E18                mov eax, dword ptr [esi+4*ecx+18]
:00472770 89448F18                mov dword ptr [edi+4*ecx+18], eax
:00472774 8B448E14                mov eax, dword ptr [esi+4*ecx+14]
:00472778 89448F14                mov dword ptr [edi+4*ecx+14], eax
:0047277C 8B448E10                mov eax, dword ptr [esi+4*ecx+10]
:00472780 89448F10                mov dword ptr [edi+4*ecx+10], eax
:00472784 8B448E0C                mov eax, dword ptr [esi+4*ecx+0C]
:00472788 89448F0C                mov dword ptr [edi+4*ecx+0C], eax
:0047278C 8B448E08                mov eax, dword ptr [esi+4*ecx+08]
:00472790 89448F08                mov dword ptr [edi+4*ecx+08], eax
:00472794 8B448E04                mov eax, dword ptr [esi+4*ecx+04]
:00472798 89448F04                mov dword ptr [edi+4*ecx+04], eax
:0047279C 8D048D00000000          lea eax, dword ptr [4*ecx+00000000]
:004727A3 03F0                    add esi, eax
:004727A5 03F8                    add edi, eax
:004727A7 FF2495B0274700          jmp dword ptr [4*edx+004727B0]
:004727AE 8BC0                    mov eax, eax

:004727B0 C0274700                DWORD 004727C0
:004727B4 C8274700                DWORD 004727C8
:004727B8 D8274700                DWORD 004727D8
:004727BC EC274700                DWORD 004727EC


:004727C0 8B4508                  mov eax, dword ptr [ebp+08]
:004727C3 5E                      pop esi
:004727C4 5F                      pop edi
:004727C5 C9                      leave
:004727C6 C3                      ret


:004727C7 90                      nop
:004727C8 8A4603                  mov al, byte ptr [esi+03]
:004727CB 884703                  mov byte ptr [edi+03], al
:004727CE 8B4508                  mov eax, dword ptr [ebp+08]
:004727D1 5E                      pop esi
:004727D2 5F                      pop edi
:004727D3 C9                      leave
:004727D4 C3                      ret


:004727D5 2E8BC0                  mov eax, eax
:004727D8 8A4603                  mov al, byte ptr [esi+03]
:004727DB 884703                  mov byte ptr [edi+03], al
:004727DE 8A4602                  mov al, byte ptr [esi+02]
:004727E1 884702                  mov byte ptr [edi+02], al
:004727E4 8B4508                  mov eax, dword ptr [ebp+08]
:004727E7 5E                      pop esi
:004727E8 5F                      pop edi
:004727E9 C9                      leave
:004727EA C3                      ret


:004727EB 90                      nop
:004727EC 8A4603                  mov al, byte ptr [esi+03]
:004727EF 884703                  mov byte ptr [edi+03], al
:004727F2 8A4602                  mov al, byte ptr [esi+02]
:004727F5 884702                  mov byte ptr [edi+02], al
:004727F8 8A4601                  mov al, byte ptr [esi+01]
:004727FB 884701                  mov byte ptr [edi+01], al
:004727FE 8B4508                  mov eax, dword ptr [ebp+08]
:00472801 5E                      pop esi
:00472802 5F                      pop edi
:00472803 C9                      leave
:00472804 C3                      ret


:00472805 CC                      int 03
:00472806 CC                      int 03
:00472807 CC                      int 03
:00472808 CC                      int 03
:00472809 CC                      int 03
:0047280A CC                      int 03
:0047280B CC                      int 03
:0047280C CC                      int 03
:0047280D CC                      int 03
:0047280E CC                      int 03
:0047280F CC                      int 03

* Referenced by a CALL at Address:
|:00470A1E   
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00472810 6A0A                    push 0000000A
:00472812 E8E9F9FFFF              call 00472200
:00472817 83C404                  add esp, 00000004
:0047281A 6A16                    push 00000016
:0047281C E8FF130000              call 00473C20
:00472821 83C404                  add esp, 00000004

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00472824 6A03                    push 00000003
:00472826 E895E4FFFF              call 00470CC0
:0047282B 83C404                  add esp, 00000004
:0047282E C3                      ret


:0047282F 90                      nop

* Referenced by a CALL at Addresses:
|:004790BC   , :0047911B   
|
:00472830 8B4C2404                mov ecx, dword ptr [esp+04]
:00472834 A190654B00              mov eax, dword ptr [004B6590]
:00472839 890D90654B00            mov dword ptr [004B6590], ecx
:0047283F C3                      ret



* Referenced by a CALL at Addresses:
|:00470C48   , :00470E43   , :00474F10   
|
:00472840 A190654B00              mov eax, dword ptr [004B6590]
:00472845 85C0                    test eax, eax
:00472847 7414                    je 0047285D
:00472849 8B4C2404                mov ecx, dword ptr [esp+04]
:0047284D 51                      push ecx
:0047284E FFD0                    call eax
:00472850 83C404                  add esp, 00000004
:00472853 85C0                    test eax, eax
:00472855 7406                    je 0047285D
:00472857 B801000000              mov eax, 00000001
:0047285C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472847(C), :00472855(C)
|
:0047285D 33C0                    xor eax, eax
:0047285F C3                      ret



* Referenced by a CALL at Addresses:
|:00472199   , :00472DAD   
|
:00472860 A140264800              mov eax, dword ptr [00482640]
:00472865 55                      push ebp
:00472866 56                      push esi
:00472867 83F8FF                  cmp eax, FFFFFFFF
:0047286A 57                      push edi
:0047286B 7507                    jne 00472874

* Possible Indirect StringData Ref from Data Obj ->"0&H"
                                  |
:0047286D BD30264800              mov ebp, 00482630
:00472872 EB1D                    jmp 00472891

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047286B(C)
|
:00472874 A1D4BC4B00              mov eax, dword ptr [004BBCD4]
:00472879 6820200000              push 00002020
:0047287E 6A00                    push 00000000
:00472880 50                      push eax

* Reference To: KERNEL32.HeapAlloc, Ord:0168h
                                  |
:00472881 FF1584D54B00            Call dword ptr [004BD584]
:00472887 8BE8                    mov ebp, eax
:00472889 85ED                    test ebp, ebp
:0047288B 0F842B010000            je 004729BC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472872(U)
|

* Reference To: KERNEL32.VirtualAlloc, Ord:025Bh
                                  |
:00472891 8B3D20D54B00            mov edi, dword ptr [004BD520]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00472897 6A04                    push 00000004
:00472899 6800200000              push 00002000
:0047289E 6800004000              push 00400000
:004728A3 6A00                    push 00000000
:004728A5 FFD7                    call edi
:004728A7 8BF0                    mov esi, eax
:004728A9 85F6                    test esi, esi
:004728AB 0F84F4000000            je 004729A5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004728B1 6A04                    push 00000004
:004728B3 6800100000              push 00001000
:004728B8 6800000100              push 00010000
:004728BD 56                      push esi
:004728BE FFD7                    call edi
:004728C0 85C0                    test eax, eax
:004728C2 0F84CF000000            je 00472997
:004728C8 81FD30264800            cmp ebp, 00482630
:004728CE 7528                    jne 004728F8

* Possible StringData Ref from Data Obj ->"0&H"
                                  |
:004728D0 A130264800              mov eax, dword ptr [00482630]
:004728D5 85C0                    test eax, eax
:004728D7 750A                    jne 004728E3

* Possible Indirect StringData Ref from Data Obj ->"0&H"
                                  |
:004728D9 C7053026480030264800    mov dword ptr [00482630], 00482630

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004728D7(C)
|

* Possible StringData Ref from Data Obj ->"0&H"
                                  |
:004728E3 A134264800              mov eax, dword ptr [00482634]
:004728E8 85C0                    test eax, eax
:004728EA 7527                    jne 00472913

* Possible Indirect StringData Ref from Data Obj ->"0&H"
                                  |
:004728EC C7053426480030264800    mov dword ptr [00482634], 00482630
:004728F6 EB1B                    jmp 00472913

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004728CE(C)
|

* Possible Indirect StringData Ref from Data Obj ->"0&H"
                                  |
:004728F8 C7450030264800          mov [ebp+00], 00482630

* Possible StringData Ref from Data Obj ->"0&H"
                                  |
:004728FF 8B0D34264800            mov ecx, dword ptr [00482634]
:00472905 894D04                  mov dword ptr [ebp+04], ecx
:00472908 892D34264800            mov dword ptr [00482634], ebp
:0047290E 8B5504                  mov edx, dword ptr [ebp+04]
:00472911 892A                    mov dword ptr [edx], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004728EA(C), :004728F6(U)
|
:00472913 8D8600004000            lea eax, dword ptr [esi+00400000]
:00472919 8D4D18                  lea ecx, dword ptr [ebp+18]
:0047291C 8D9598000000            lea edx, dword ptr [ebp+00000098]
:00472922 894514                  mov dword ptr [ebp+14], eax
:00472925 897510                  mov dword ptr [ebp+10], esi
:00472928 894D08                  mov dword ptr [ebp+08], ecx
:0047292B 89550C                  mov dword ptr [ebp+0C], edx
:0047292E 33C0                    xor eax, eax
:00472930 BFF1000000              mov edi, 000000F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472950(C)
|
:00472935 33D2                    xor edx, edx
:00472937 83F810                  cmp eax, 00000010
:0047293A 0F9DC2                  setnl dl
:0047293D 4A                      dec edx
:0047293E 83C108                  add ecx, 00000008
:00472941 23D7                    and edx, edi
:00472943 4A                      dec edx
:00472944 40                      inc eax
:00472945 8951F8                  mov dword ptr [ecx-08], edx
:00472948 8979FC                  mov dword ptr [ecx-04], edi

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:0047294B 3D00040000              cmp eax, 00000400
:00472950 7CE3                    jl 00472935
:00472952 B900400000              mov ecx, 00004000
:00472957 33C0                    xor eax, eax
:00472959 8BFE                    mov edi, esi
:0047295B F3                      repz
:0047295C AB                      stosd
:0047295D 8B4510                  mov eax, dword ptr [ebp+10]
:00472960 0500000100              add eax, 00010000
:00472965 3BF0                    cmp esi, eax
:00472967 7328                    jnb 00472991
:00472969 B9F0000000              mov ecx, 000000F0
:0047296E B0FF                    mov al, FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047298F(C)
|
:00472970 8D5608                  lea edx, dword ptr [esi+08]
:00472973 894E04                  mov dword ptr [esi+04], ecx
:00472976 8916                    mov dword ptr [esi], edx
:00472978 8886F8000000            mov byte ptr [esi+000000F8], al
:0047297E 8B5510                  mov edx, dword ptr [ebp+10]
:00472981 81C600100000            add esi, 00001000
:00472987 81C200000100            add edx, 00010000
:0047298D 3BF2                    cmp esi, edx
:0047298F 72DF                    jb 00472970

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472967(C)
|
:00472991 8BC5                    mov eax, ebp
:00472993 5F                      pop edi
:00472994 5E                      pop esi
:00472995 5D                      pop ebp
:00472996 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004728C2(C)
|
:00472997 6800800000              push 00008000
:0047299C 6A00                    push 00000000
:0047299E 56                      push esi

* Reference To: KERNEL32.VirtualFree, Ord:025Eh
                                  |
:0047299F FF1528D54B00            Call dword ptr [004BD528]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004728AB(C)
|
:004729A5 81FD30264800            cmp ebp, 00482630
:004729AB 740F                    je 004729BC
:004729AD A1D4BC4B00              mov eax, dword ptr [004BBCD4]
:004729B2 55                      push ebp
:004729B3 6A00                    push 00000000
:004729B5 50                      push eax

* Reference To: KERNEL32.HeapFree, Ord:016Eh
                                  |
:004729B6 FF1570D54B00            Call dword ptr [004BD570]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047288B(C), :004729AB(C)
|
:004729BC 5F                      pop edi
:004729BD 5E                      pop esi
:004729BE 33C0                    xor eax, eax
:004729C0 5D                      pop ebp
:004729C1 C3                      ret


:004729C2 90                      nop
:004729C3 90                      nop
:004729C4 90                      nop
:004729C5 90                      nop
:004729C6 90                      nop
:004729C7 90                      nop
:004729C8 90                      nop
:004729C9 90                      nop
:004729CA 90                      nop
:004729CB 90                      nop
:004729CC 90                      nop
:004729CD 90                      nop
:004729CE 90                      nop
:004729CF 90                      nop

* Referenced by a CALL at Address:
|:00472ADC   
|
:004729D0 56                      push esi
:004729D1 8B742408                mov esi, dword ptr [esp+08]
:004729D5 6800800000              push 00008000
:004729DA 6A00                    push 00000000
:004729DC 8B4610                  mov eax, dword ptr [esi+10]
:004729DF 50                      push eax

* Reference To: KERNEL32.VirtualFree, Ord:025Eh
                                  |
:004729E0 FF1528D54B00            Call dword ptr [004BD528]
:004729E6 393550464800            cmp dword ptr [00484650], esi
:004729EC 7509                    jne 004729F7
:004729EE 8B4E04                  mov ecx, dword ptr [esi+04]
:004729F1 890D50464800            mov dword ptr [00484650], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004729EC(C)
|
:004729F7 81FE30264800            cmp esi, 00482630
:004729FD 7420                    je 00472A1F
:004729FF 8B5604                  mov edx, dword ptr [esi+04]
:00472A02 8B06                    mov eax, dword ptr [esi]
:00472A04 56                      push esi
:00472A05 6A00                    push 00000000
:00472A07 8902                    mov dword ptr [edx], eax
:00472A09 8B0E                    mov ecx, dword ptr [esi]
:00472A0B 8B5604                  mov edx, dword ptr [esi+04]
:00472A0E 895104                  mov dword ptr [ecx+04], edx
:00472A11 A1D4BC4B00              mov eax, dword ptr [004BBCD4]
:00472A16 50                      push eax

* Reference To: KERNEL32.HeapFree, Ord:016Eh
                                  |
:00472A17 FF1570D54B00            Call dword ptr [004BD570]
:00472A1D 5E                      pop esi
:00472A1E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004729FD(C)
|
:00472A1F C70540264800FFFFFFFF    mov dword ptr [00482640], FFFFFFFF
:00472A29 5E                      pop esi
:00472A2A C3                      ret


:00472A2B 90                      nop
:00472A2C 90                      nop
:00472A2D 90                      nop
:00472A2E 90                      nop
:00472A2F 90                      nop

* Referenced by a CALL at Address:
|:00472BA9   
|
:00472A30 53                      push ebx
:00472A31 55                      push ebp
:00472A32 56                      push esi
:00472A33 57                      push edi

* Possible StringData Ref from Data Obj ->"0&H"
                                  |
:00472A34 8B3D34264800            mov edi, dword ptr [00482634]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472AF2(C)
|
:00472A3A 837F10FF                cmp dword ptr [edi+10], FFFFFFFF
:00472A3E 0F84A0000000            je 00472AE4
:00472A44 33ED                    xor ebp, ebp
:00472A46 8DB710200000            lea esi, dword ptr [edi+00002010]
:00472A4C BB00F03F00              mov ebx, 003FF000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472AAB(C)
|
:00472A51 813EF0000000            cmp dword ptr [esi], 000000F0
:00472A57 7547                    jne 00472AA0
:00472A59 8B4710                  mov eax, dword ptr [edi+10]
:00472A5C 6800400000              push 00004000
:00472A61 03C3                    add eax, ebx
:00472A63 6800100000              push 00001000
:00472A68 50                      push eax

* Reference To: KERNEL32.VirtualFree, Ord:025Eh
                                  |
:00472A69 FF1528D54B00            Call dword ptr [004BD528]
:00472A6F 85C0                    test eax, eax
:00472A71 742D                    je 00472AA0
:00472A73 C706FFFFFFFF            mov dword ptr [esi], FFFFFFFF
:00472A79 8B1598654B00            mov edx, dword ptr [004B6598]
:00472A7F 4A                      dec edx
:00472A80 891598654B00            mov dword ptr [004B6598], edx
:00472A86 8B470C                  mov eax, dword ptr [edi+0C]
:00472A89 85C0                    test eax, eax
:00472A8B 7404                    je 00472A91
:00472A8D 3BC6                    cmp eax, esi
:00472A8F 7603                    jbe 00472A94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472A8B(C)
|
:00472A91 89770C                  mov dword ptr [edi+0C], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472A8F(C)
|
:00472A94 8B442414                mov eax, dword ptr [esp+14]
:00472A98 45                      inc ebp
:00472A99 48                      dec eax
:00472A9A 89442414                mov dword ptr [esp+14], eax
:00472A9E 740D                    je 00472AAD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472A57(C), :00472A71(C)
|
:00472AA0 81EB00100000            sub ebx, 00001000
:00472AA6 83EE08                  sub esi, 00000008
:00472AA9 85DB                    test ebx, ebx
:00472AAB 7DA4                    jge 00472A51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472A9E(C)
|
:00472AAD 8BD7                    mov edx, edi
:00472AAF 8B7F04                  mov edi, dword ptr [edi+04]
:00472AB2 85ED                    test ebp, ebp
:00472AB4 742E                    je 00472AE4
:00472AB6 837A18FF                cmp dword ptr [edx+18], FFFFFFFF
:00472ABA 7528                    jne 00472AE4
:00472ABC B801000000              mov eax, 00000001
:00472AC1 8D4A20                  lea ecx, dword ptr [edx+20]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472AD2(C)
|
:00472AC4 8339FF                  cmp dword ptr [ecx], FFFFFFFF
:00472AC7 750B                    jne 00472AD4
:00472AC9 40                      inc eax
:00472ACA 83C108                  add ecx, 00000008

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:00472ACD 3D00040000              cmp eax, 00000400
:00472AD2 7CF0                    jl 00472AC4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472AC7(C)
|

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:00472AD4 3D00040000              cmp eax, 00000400
:00472AD9 7509                    jne 00472AE4
:00472ADB 52                      push edx
:00472ADC E8EFFEFFFF              call 004729D0
:00472AE1 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472A3E(C), :00472AB4(C), :00472ABA(C), :00472AD9(C)
|
:00472AE4 3B3D34264800            cmp edi, dword ptr [00482634]
:00472AEA 740C                    je 00472AF8
:00472AEC 8B442414                mov eax, dword ptr [esp+14]
:00472AF0 85C0                    test eax, eax
:00472AF2 0F8F42FFFFFF            jg 00472A3A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472AEA(C)
|
:00472AF8 5F                      pop edi
:00472AF9 5E                      pop esi
:00472AFA 5D                      pop ebp
:00472AFB 5B                      pop ebx
:00472AFC C3                      ret


:00472AFD 90                      nop
:00472AFE 90                      nop
:00472AFF 90                      nop

* Referenced by a CALL at Addresses:
|:00470B41   , :00470DC1   , :00470EB5   
|
:00472B00 8B4C2404                mov ecx, dword ptr [esp+04]

* Possible Indirect StringData Ref from Data Obj ->"0&H"
                                  |
:00472B04 B830264800              mov eax, 00482630

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472B1C(U)
|
:00472B09 3B4810                  cmp ecx, dword ptr [eax+10]
:00472B0C 7605                    jbe 00472B13
:00472B0E 3B4814                  cmp ecx, dword ptr [eax+14]
:00472B11 720B                    jb 00472B1E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472B0C(C)
|
:00472B13 8B00                    mov eax, dword ptr [eax]
:00472B15 3D30264800              cmp eax, 00482630
:00472B1A 743A                    je 00472B56
:00472B1C EBEB                    jmp 00472B09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472B11(C)
|
:00472B1E F6C10F                  test cl, 0F
:00472B21 7533                    jne 00472B56
:00472B23 8BD1                    mov edx, ecx
:00472B25 81E2FF0F0000            and edx, 00000FFF
:00472B2B 81FA00010000            cmp edx, 00000100
:00472B31 7223                    jb 00472B56
:00472B33 8B542408                mov edx, dword ptr [esp+08]
:00472B37 8902                    mov dword ptr [edx], eax
:00472B39 8B54240C                mov edx, dword ptr [esp+0C]
:00472B3D 8BC1                    mov eax, ecx
:00472B3F 2500F0FFFF              and eax, FFFFF000
:00472B44 2BC8                    sub ecx, eax
:00472B46 8902                    mov dword ptr [edx], eax
:00472B48 81E900010000            sub ecx, 00000100
:00472B4E C1F904                  sar ecx, 04
:00472B51 8D440108                lea eax, dword ptr [ecx+eax+08]
:00472B55 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472B1A(C), :00472B21(C), :00472B31(C)
|
:00472B56 33C0                    xor eax, eax
:00472B58 C3                      ret


:00472B59 90                      nop
:00472B5A 90                      nop
:00472B5B 90                      nop
:00472B5C 90                      nop
:00472B5D 90                      nop
:00472B5E 90                      nop
:00472B5F 90                      nop

* Referenced by a CALL at Addresses:
|:00470BC3   , :00470C1E   , :00470ECC   
|
:00472B60 8B442404                mov eax, dword ptr [esp+04]
:00472B64 8B4C2408                mov ecx, dword ptr [esp+08]
:00472B68 56                      push esi
:00472B69 33D2                    xor edx, edx
:00472B6B 2B4810                  sub ecx, dword ptr [eax+10]
:00472B6E C1F90C                  sar ecx, 0C
:00472B71 8B74C818                mov esi, dword ptr [eax+8*ecx+18]
:00472B75 8D44C818                lea eax, dword ptr [eax+8*ecx+18]
:00472B79 8B4C2410                mov ecx, dword ptr [esp+10]
:00472B7D 8A11                    mov dl, byte ptr [ecx]
:00472B7F 03F2                    add esi, edx
:00472B81 8930                    mov dword ptr [eax], esi
:00472B83 C60100                  mov byte ptr [ecx], 00
:00472B86 8B08                    mov ecx, dword ptr [eax]
:00472B88 C74004F1000000          mov [eax+04], 000000F1
:00472B8F 81F9F0000000            cmp ecx, 000000F0
:00472B95 751A                    jne 00472BB1
:00472B97 A198654B00              mov eax, dword ptr [004B6598]
:00472B9C 40                      inc eax
:00472B9D 83F820                  cmp eax, 00000020
:00472BA0 A398654B00              mov dword ptr [004B6598], eax
:00472BA5 750A                    jne 00472BB1
:00472BA7 6A10                    push 00000010
:00472BA9 E882FEFFFF              call 00472A30
:00472BAE 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472B95(C), :00472BA5(C)
|
:00472BB1 5E                      pop esi
:00472BB2 C3                      ret


:00472BB3 90                      nop
:00472BB4 90                      nop
:00472BB5 90                      nop
:00472BB6 90                      nop
:00472BB7 90                      nop
:00472BB8 90                      nop
:00472BB9 90                      nop
:00472BBA 90                      nop
:00472BBB 90                      nop
:00472BBC 90                      nop
:00472BBD 90                      nop
:00472BBE 90                      nop
:00472BBF 90                      nop

* Referenced by a CALL at Addresses:
|:00470B83   , :00470E7A   , :00474ECE   
|
:00472BC0 51                      push ecx

* Possible StringData Ref from Data Obj ->"0&H"
                                  |
:00472BC1 8B0D50464800            mov ecx, dword ptr [00484650]
:00472BC7 53                      push ebx
:00472BC8 8B5C240C                mov ebx, dword ptr [esp+0C]
:00472BCC 55                      push ebp
:00472BCD 56                      push esi
:00472BCE 57                      push edi
:00472BCF 894C2410                mov dword ptr [esp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C73(U)
|
:00472BD3 8B4110                  mov eax, dword ptr [ecx+10]
:00472BD6 83F8FF                  cmp eax, FFFFFFFF
:00472BD9 0F8485000000            je 00472C64
:00472BDF 8B7908                  mov edi, dword ptr [ecx+08]
:00472BE2 8DA918200000            lea ebp, dword ptr [ecx+00002018]
:00472BE8 8BF7                    mov esi, edi
:00472BEA 2BF1                    sub esi, ecx
:00472BEC 83EE18                  sub esi, 00000018
:00472BEF C1FE03                  sar esi, 03
:00472BF2 C1E60C                  shl esi, 0C
:00472BF5 03F0                    add esi, eax
:00472BF7 3BFD                    cmp edi, ebp
:00472BF9 732E                    jnb 00472C29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C27(C)
|
:00472BFB 8B07                    mov eax, dword ptr [edi]
:00472BFD 3BC3                    cmp eax, ebx
:00472BFF 7C1B                    jl 00472C1C
:00472C01 395F04                  cmp dword ptr [edi+04], ebx
:00472C04 7616                    jbe 00472C1C
:00472C06 53                      push ebx
:00472C07 50                      push eax
:00472C08 56                      push esi
:00472C09 E8F2010000              call 00472E00
:00472C0E 83C40C                  add esp, 0000000C
:00472C11 85C0                    test eax, eax
:00472C13 7563                    jne 00472C78
:00472C15 8B4C2410                mov ecx, dword ptr [esp+10]
:00472C19 895F04                  mov dword ptr [edi+04], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472BFF(C), :00472C04(C)
|
:00472C1C 83C708                  add edi, 00000008
:00472C1F 81C600100000            add esi, 00001000
:00472C25 3BFD                    cmp edi, ebp
:00472C27 72D2                    jb 00472BFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472BF9(C)
|
:00472C29 8B6908                  mov ebp, dword ptr [ecx+08]
:00472C2C 8B7910                  mov edi, dword ptr [ecx+10]
:00472C2F 8D7118                  lea esi, dword ptr [ecx+18]
:00472C32 3BF5                    cmp esi, ebp
:00472C34 732E                    jnb 00472C64

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C62(C)
|
:00472C36 8B06                    mov eax, dword ptr [esi]
:00472C38 3BC3                    cmp eax, ebx
:00472C3A 7C1B                    jl 00472C57
:00472C3C 395E04                  cmp dword ptr [esi+04], ebx
:00472C3F 7616                    jbe 00472C57
:00472C41 53                      push ebx
:00472C42 50                      push eax
:00472C43 57                      push edi
:00472C44 E8B7010000              call 00472E00
:00472C49 83C40C                  add esp, 0000000C
:00472C4C 85C0                    test eax, eax
:00472C4E 7541                    jne 00472C91
:00472C50 8B4C2410                mov ecx, dword ptr [esp+10]
:00472C54 895E04                  mov dword ptr [esi+04], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472C3A(C), :00472C3F(C)
|
:00472C57 83C608                  add esi, 00000008
:00472C5A 81C700100000            add edi, 00001000
:00472C60 3BF5                    cmp esi, ebp
:00472C62 72D2                    jb 00472C36

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472BD9(C), :00472C34(C)
|
:00472C64 8B09                    mov ecx, dword ptr [ecx]

* Possible StringData Ref from Data Obj ->"0&H"
                                  |
:00472C66 A150464800              mov eax, dword ptr [00484650]
:00472C6B 3BC8                    cmp ecx, eax
:00472C6D 894C2410                mov dword ptr [esp+10], ecx
:00472C71 7437                    je 00472CAA
:00472C73 E95BFFFFFF              jmp 00472BD3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C13(C)
|
:00472C78 8B4C2410                mov ecx, dword ptr [esp+10]
:00472C7C 890D50464800            mov dword ptr [00484650], ecx
:00472C82 8B17                    mov edx, dword ptr [edi]
:00472C84 2BD3                    sub edx, ebx
:00472C86 8917                    mov dword ptr [edi], edx
:00472C88 897908                  mov dword ptr [ecx+08], edi
:00472C8B 5F                      pop edi
:00472C8C 5E                      pop esi
:00472C8D 5D                      pop ebp
:00472C8E 5B                      pop ebx
:00472C8F 59                      pop ecx
:00472C90 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C4E(C)
|
:00472C91 8B4C2410                mov ecx, dword ptr [esp+10]
:00472C95 890D50464800            mov dword ptr [00484650], ecx
:00472C9B 8B16                    mov edx, dword ptr [esi]
:00472C9D 2BD3                    sub edx, ebx
:00472C9F 8916                    mov dword ptr [esi], edx
:00472CA1 897108                  mov dword ptr [ecx+08], esi
:00472CA4 5F                      pop edi
:00472CA5 5E                      pop esi
:00472CA6 5D                      pop ebp
:00472CA7 5B                      pop ebx
:00472CA8 59                      pop ecx
:00472CA9 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472C71(C)
|

* Possible Indirect StringData Ref from Data Obj ->"0&H"
                                  |
:00472CAA BD30264800              mov ebp, 00482630
:00472CAF 83C9FF                  or ecx, FFFFFFFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472CCD(U)
|
:00472CB2 394D10                  cmp dword ptr [ebp+10], ecx
:00472CB5 7407                    je 00472CBE
:00472CB7 8B450C                  mov eax, dword ptr [ebp+0C]
:00472CBA 85C0                    test eax, eax
:00472CBC 7511                    jne 00472CCF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472CB5(C)
|
:00472CBE 8B6D00                  mov ebp, dword ptr [ebp+00]
:00472CC1 81FD30264800            cmp ebp, 00482630
:00472CC7 0F84E0000000            je 00472DAD
:00472CCD EBE3                    jmp 00472CB2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472CBC(C)
|
:00472CCF 8B450C                  mov eax, dword ptr [ebp+0C]
:00472CD2 8B7510                  mov esi, dword ptr [ebp+10]
:00472CD5 8BF8                    mov edi, eax
:00472CD7 89442418                mov dword ptr [esp+18], eax
:00472CDB 2BFD                    sub edi, ebp
:00472CDD 8B10                    mov edx, dword ptr [eax]
:00472CDF 83EF18                  sub edi, 00000018
:00472CE2 C1FF03                  sar edi, 03
:00472CE5 C1E70C                  shl edi, 0C
:00472CE8 03FE                    add edi, esi
:00472CEA 33F6                    xor esi, esi
:00472CEC 3BD1                    cmp edx, ecx
:00472CEE 7510                    jne 00472D00

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472CFE(C)
|
:00472CF0 83FE10                  cmp esi, 00000010
:00472CF3 7D0B                    jge 00472D00
:00472CF5 8B5008                  mov edx, dword ptr [eax+08]
:00472CF8 83C008                  add eax, 00000008
:00472CFB 46                      inc esi
:00472CFC 3BD1                    cmp edx, ecx
:00472CFE 74F0                    je 00472CF0

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472CEE(C), :00472CF3(C)
|
:00472D00 8BC6                    mov eax, esi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00472D02 6A04                    push 00000004
:00472D04 C1E00C                  shl eax, 0C
:00472D07 6800100000              push 00001000
:00472D0C 50                      push eax
:00472D0D 57                      push edi
:00472D0E 89442420                mov dword ptr [esp+20], eax

* Reference To: KERNEL32.VirtualAlloc, Ord:025Bh
                                  |
:00472D12 FF1520D54B00            Call dword ptr [004BD520]
:00472D18 3BC7                    cmp eax, edi
:00472D1A 0F85CB000000            jne 00472DEB
:00472D20 8B542418                mov edx, dword ptr [esp+18]
:00472D24 8B442410                mov eax, dword ptr [esp+10]
:00472D28 33C9                    xor ecx, ecx
:00472D2A 85F6                    test esi, esi
:00472D2C 8BCA                    mov ecx, edx
:00472D2E 7E32                    jle 00472D62
:00472D30 8D4704                  lea eax, dword ptr [edi+04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D5C(C)
|
:00472D33 8D5004                  lea edx, dword ptr [eax+04]
:00472D36 C700F0000000            mov dword ptr [eax], 000000F0
:00472D3C 8950FC                  mov dword ptr [eax-04], edx
:00472D3F C680F4000000FF          mov byte ptr [eax+000000F4], FF
:00472D46 C701F0000000            mov dword ptr [ecx], 000000F0
:00472D4C C74104F1000000          mov [ecx+04], 000000F1
:00472D53 0500100000              add eax, 00001000
:00472D58 83C108                  add ecx, 00000008
:00472D5B 4E                      dec esi
:00472D5C 75D5                    jne 00472D33
:00472D5E 8B542418                mov edx, dword ptr [esp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D2E(C)
|
:00472D62 8D8518200000            lea eax, dword ptr [ebp+00002018]
:00472D68 892D50464800            mov dword ptr [00484650], ebp
:00472D6E 3BC8                    cmp ecx, eax
:00472D70 730E                    jnb 00472D80

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D7C(C)
|
:00472D72 8339FF                  cmp dword ptr [ecx], FFFFFFFF
:00472D75 7407                    je 00472D7E
:00472D77 83C108                  add ecx, 00000008
:00472D7A 3BC8                    cmp ecx, eax
:00472D7C 72F4                    jb 00472D72

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D75(C)
|
:00472D7E 3BC8                    cmp ecx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472D70(C)
|
:00472D80 1BC0                    sbb eax, eax
:00472D82 23C1                    and eax, ecx
:00472D84 89450C                  mov dword ptr [ebp+0C], eax
:00472D87 885F08                  mov byte ptr [edi+08], bl
:00472D8A 895508                  mov dword ptr [ebp+08], edx
:00472D8D 8B0A                    mov ecx, dword ptr [edx]
:00472D8F 2BCB                    sub ecx, ebx
:00472D91 890A                    mov dword ptr [edx], ecx
:00472D93 8B4704                  mov eax, dword ptr [edi+04]
:00472D96 2BC3                    sub eax, ebx
:00472D98 8D4C1F08                lea ecx, dword ptr [edi+ebx+08]
:00472D9C 894704                  mov dword ptr [edi+04], eax
:00472D9F 890F                    mov dword ptr [edi], ecx
:00472DA1 8D8700010000            lea eax, dword ptr [edi+00000100]
:00472DA7 5F                      pop edi
:00472DA8 5E                      pop esi
:00472DA9 5D                      pop ebp
:00472DAA 5B                      pop ebx
:00472DAB 59                      pop ecx
:00472DAC C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472CC7(C)
|
:00472DAD E8AEFAFFFF              call 00472860
:00472DB2 85C0                    test eax, eax
:00472DB4 7435                    je 00472DEB
:00472DB6 8B4810                  mov ecx, dword ptr [eax+10]
:00472DB9 885908                  mov byte ptr [ecx+08], bl
:00472DBC 8D541908                lea edx, dword ptr [ecx+ebx+08]
:00472DC0 A350464800              mov dword ptr [00484650], eax
:00472DC5 8911                    mov dword ptr [ecx], edx
:00472DC7 BAF0000000              mov edx, 000000F0
:00472DCC 2BD3                    sub edx, ebx
:00472DCE 81E3FF000000            and ebx, 000000FF
:00472DD4 895104                  mov dword ptr [ecx+04], edx
:00472DD7 8B5018                  mov edx, dword ptr [eax+18]
:00472DDA 2BD3                    sub edx, ebx
:00472DDC 895018                  mov dword ptr [eax+18], edx
:00472DDF 8D8100010000            lea eax, dword ptr [ecx+00000100]
:00472DE5 5F                      pop edi
:00472DE6 5E                      pop esi
:00472DE7 5D                      pop ebp
:00472DE8 5B                      pop ebx
:00472DE9 59                      pop ecx
:00472DEA C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472D1A(C), :00472DB4(C)
|
:00472DEB 5F                      pop edi
:00472DEC 5E                      pop esi
:00472DED 5D                      pop ebp
:00472DEE 33C0                    xor eax, eax
:00472DF0 5B                      pop ebx
:00472DF1 59                      pop ecx
:00472DF2 C3                      ret


:00472DF3 90                      nop
:00472DF4 90                      nop
:00472DF5 90                      nop
:00472DF6 90                      nop
:00472DF7 90                      nop
:00472DF8 90                      nop
:00472DF9 90                      nop
:00472DFA 90                      nop
:00472DFB 90                      nop
:00472DFC 90                      nop
:00472DFD 90                      nop
:00472DFE 90                      nop
:00472DFF 90                      nop

* Referenced by a CALL at Addresses:
|:00472C09   , :00472C44   
|
:00472E00 8B54240C                mov edx, dword ptr [esp+0C]
:00472E04 53                      push ebx
:00472E05 55                      push ebp
:00472E06 56                      push esi
:00472E07 57                      push edi
:00472E08 8B7C2414                mov edi, dword ptr [esp+14]
:00472E0C 8B4704                  mov eax, dword ptr [edi+04]
:00472E0F 8B0F                    mov ecx, dword ptr [edi]
:00472E11 3BC2                    cmp eax, edx
:00472E13 894C2414                mov dword ptr [esp+14], ecx
:00472E17 8BF1                    mov esi, ecx
:00472E19 8D9FF8000000            lea ebx, dword ptr [edi+000000F8]
:00472E1F 723A                    jb 00472E5B
:00472E21 8D0411                  lea eax, dword ptr [ecx+edx]
:00472E24 8811                    mov byte ptr [ecx], dl
:00472E26 3BC3                    cmp eax, ebx
:00472E28 7310                    jnb 00472E3A
:00472E2A 8B37                    mov esi, dword ptr [edi]
:00472E2C 8B4704                  mov eax, dword ptr [edi+04]
:00472E2F 03F2                    add esi, edx
:00472E31 2BC2                    sub eax, edx
:00472E33 8937                    mov dword ptr [edi], esi
:00472E35 894704                  mov dword ptr [edi+04], eax
:00472E38 EB0C                    jmp 00472E46

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472E28(C)
|
:00472E3A 8D5708                  lea edx, dword ptr [edi+08]
:00472E3D C7470400000000          mov [edi+04], 00000000
:00472E44 8917                    mov dword ptr [edi], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472E38(U)
|
:00472E46 8D047F                  lea eax, dword ptr [edi+2*edi]
:00472E49 8D0480                  lea eax, dword ptr [eax+4*eax]
:00472E4C 8BD0                    mov edx, eax
:00472E4E 8D4108                  lea eax, dword ptr [ecx+08]
:00472E51 C1E004                  shl eax, 04
:00472E54 2BC2                    sub eax, edx
:00472E56 5F                      pop edi
:00472E57 5E                      pop esi
:00472E58 5D                      pop ebp
:00472E59 5B                      pop ebx
:00472E5A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472E1F(C)
|
:00472E5B 03C1                    add eax, ecx
:00472E5D 803800                  cmp byte ptr [eax], 00
:00472E60 7402                    je 00472E64
:00472E62 8BF0                    mov esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472E60(C)
|
:00472E64 8D0416                  lea eax, dword ptr [esi+edx]
:00472E67 3BC3                    cmp eax, ebx
:00472E69 8B5C2418                mov ebx, dword ptr [esp+18]
:00472E6D 7375                    jnb 00472EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472EC3(C)
|
:00472E6F 8A06                    mov al, byte ptr [esi]
:00472E71 84C0                    test al, al
:00472E73 753C                    jne 00472EB1
:00472E75 807E0100                cmp byte ptr [esi+01], 00
:00472E79 8D4601                  lea eax, dword ptr [esi+01]
:00472E7C B901000000              mov ecx, 00000001
:00472E81 7507                    jne 00472E8A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472E88(C)
|
:00472E83 40                      inc eax
:00472E84 41                      inc ecx
:00472E85 803800                  cmp byte ptr [eax], 00
:00472E88 74F9                    je 00472E83

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472E81(C)
|
:00472E8A 3BCA                    cmp ecx, edx
:00472E8C 7339                    jnb 00472EC7
:00472E8E 8B6C2414                mov ebp, dword ptr [esp+14]
:00472E92 3BF5                    cmp esi, ebp
:00472E94 7509                    jne 00472E9F
:00472E96 894F04                  mov dword ptr [edi+04], ecx
:00472E99 8BF0                    mov esi, eax
:00472E9B 8BCD                    mov ecx, ebp
:00472E9D EB19                    jmp 00472EB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472E94(C)
|
:00472E9F 2BD9                    sub ebx, ecx
:00472EA1 3BDA                    cmp ebx, edx
:00472EA3 0F82C2000000            jb 00472F6B
:00472EA9 8B4C2414                mov ecx, dword ptr [esp+14]
:00472EAD 8BF0                    mov esi, eax
:00472EAF EB07                    jmp 00472EB8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472E73(C)
|
:00472EB1 25FF000000              and eax, 000000FF
:00472EB6 03F0                    add esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472E9D(U), :00472EAF(U)
|
:00472EB8 8D2C16                  lea ebp, dword ptr [esi+edx]
:00472EBB 8D87F8000000            lea eax, dword ptr [edi+000000F8]
:00472EC1 3BE8                    cmp ebp, eax
:00472EC3 72AA                    jb 00472E6F
:00472EC5 EB1D                    jmp 00472EE4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472E8C(C)
|
:00472EC7 8D0416                  lea eax, dword ptr [esi+edx]
:00472ECA 8D9FF8000000            lea ebx, dword ptr [edi+000000F8]
:00472ED0 3BC3                    cmp eax, ebx
:00472ED2 7309                    jnb 00472EDD
:00472ED4 2BCA                    sub ecx, edx
:00472ED6 8907                    mov dword ptr [edi], eax
:00472ED8 894F04                  mov dword ptr [edi+04], ecx
:00472EDB EB79                    jmp 00472F56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472ED2(C)
|
:00472EDD 8D4F08                  lea ecx, dword ptr [edi+08]
:00472EE0 890F                    mov dword ptr [edi], ecx
:00472EE2 EB6B                    jmp 00472F4F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472E6D(C), :00472EC5(U)
|
:00472EE4 8D6F08                  lea ebp, dword ptr [edi+08]
:00472EE7 8BF5                    mov esi, ebp
:00472EE9 3BF1                    cmp esi, ecx
:00472EEB 737E                    jnb 00472F6B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472F2E(C)
|
:00472EED 8D0C16                  lea ecx, dword ptr [esi+edx]
:00472EF0 8D87F8000000            lea eax, dword ptr [edi+000000F8]
:00472EF6 3BC8                    cmp ecx, eax
:00472EF8 7371                    jnb 00472F6B
:00472EFA 8A06                    mov al, byte ptr [esi]
:00472EFC 84C0                    test al, al
:00472EFE 7523                    jne 00472F23
:00472F00 807E0100                cmp byte ptr [esi+01], 00
:00472F04 8D4601                  lea eax, dword ptr [esi+01]
:00472F07 B901000000              mov ecx, 00000001
:00472F0C 7507                    jne 00472F15

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472F13(C)
|
:00472F0E 40                      inc eax
:00472F0F 41                      inc ecx
:00472F10 803800                  cmp byte ptr [eax], 00
:00472F13 74F9                    je 00472F0E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472F0C(C)
|
:00472F15 3BCA                    cmp ecx, edx
:00472F17 731E                    jnb 00472F37
:00472F19 2BD9                    sub ebx, ecx
:00472F1B 3BDA                    cmp ebx, edx
:00472F1D 724C                    jb 00472F6B
:00472F1F 8BF0                    mov esi, eax
:00472F21 EB07                    jmp 00472F2A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472EFE(C)
|
:00472F23 25FF000000              and eax, 000000FF
:00472F28 03F0                    add esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472F21(U)
|
:00472F2A 3B742414                cmp esi, dword ptr [esp+14]
:00472F2E 72BD                    jb 00472EED
:00472F30 33C0                    xor eax, eax
:00472F32 5F                      pop edi
:00472F33 5E                      pop esi
:00472F34 5D                      pop ebp
:00472F35 5B                      pop ebx
:00472F36 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472F17(C)
|
:00472F37 8D0416                  lea eax, dword ptr [esi+edx]
:00472F3A 8D9FF8000000            lea ebx, dword ptr [edi+000000F8]
:00472F40 3BC3                    cmp eax, ebx
:00472F42 7309                    jnb 00472F4D
:00472F44 2BCA                    sub ecx, edx
:00472F46 8907                    mov dword ptr [edi], eax
:00472F48 894F04                  mov dword ptr [edi+04], ecx
:00472F4B EB09                    jmp 00472F56

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472F42(C)
|
:00472F4D 892F                    mov dword ptr [edi], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472EE2(U)
|
:00472F4F C7470400000000          mov [edi+04], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472EDB(U), :00472F4B(U)
|
:00472F56 8D047F                  lea eax, dword ptr [edi+2*edi]
:00472F59 8816                    mov byte ptr [esi], dl
:00472F5B 8D1480                  lea edx, dword ptr [eax+4*eax]
:00472F5E 8D4608                  lea eax, dword ptr [esi+08]
:00472F61 C1E004                  shl eax, 04
:00472F64 2BC2                    sub eax, edx
:00472F66 5F                      pop edi
:00472F67 5E                      pop esi
:00472F68 5D                      pop ebp
:00472F69 5B                      pop ebx
:00472F6A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472EA3(C), :00472EEB(C), :00472EF8(C), :00472F1D(C)
|
:00472F6B 5F                      pop edi
:00472F6C 5E                      pop esi
:00472F6D 5D                      pop ebp
:00472F6E 33C0                    xor eax, eax
:00472F70 5B                      pop ebx
:00472F71 C3                      ret


:00472F72 90                      nop
:00472F73 90                      nop
:00472F74 90                      nop
:00472F75 90                      nop
:00472F76 90                      nop
:00472F77 90                      nop
:00472F78 90                      nop
:00472F79 90                      nop
:00472F7A 90                      nop
:00472F7B 90                      nop
:00472F7C 90                      nop
:00472F7D 90                      nop
:00472F7E 90                      nop
:00472F7F 90                      nop

* Referenced by a CALL at Address:
|:00470B70   
|
:00472F80 8B4C2404                mov ecx, dword ptr [esp+04]
:00472F84 53                      push ebx
:00472F85 55                      push ebp
:00472F86 8B6C2410                mov ebp, dword ptr [esp+10]
:00472F8A 56                      push esi
:00472F8B 57                      push edi
:00472F8C 8B7910                  mov edi, dword ptr [ecx+10]
:00472F8F 8BD5                    mov edx, ebp
:00472F91 2BD7                    sub edx, edi
:00472F93 8B7C241C                mov edi, dword ptr [esp+1C]
:00472F97 C1FA0C                  sar edx, 0C
:00472F9A 8B5C2420                mov ebx, dword ptr [esp+20]
:00472F9E 33C0                    xor eax, eax
:00472FA0 8D4CD118                lea ecx, dword ptr [ecx+8*edx+18]
:00472FA4 33D2                    xor edx, edx
:00472FA6 8A17                    mov dl, byte ptr [edi]
:00472FA8 894C2418                mov dword ptr [esp+18], ecx
:00472FAC 8BF2                    mov esi, edx
:00472FAE 3BF3                    cmp esi, ebx
:00472FB0 761B                    jbe 00472FCD
:00472FB2 881F                    mov byte ptr [edi], bl
:00472FB4 8B01                    mov eax, dword ptr [ecx]
:00472FB6 2BF3                    sub esi, ebx
:00472FB8 C74104F1000000          mov [ecx+04], 000000F1
:00472FBF 03C6                    add eax, esi
:00472FC1 8901                    mov dword ptr [ecx], eax
:00472FC3 B801000000              mov eax, 00000001
:00472FC8 5F                      pop edi
:00472FC9 5E                      pop esi
:00472FCA 5D                      pop ebp
:00472FCB 5B                      pop ebx
:00472FCC C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472FB0(C)
|
:00472FCD 7370                    jnb 0047303F
:00472FCF 8D0C3B                  lea ecx, dword ptr [ebx+edi]
:00472FD2 8D95F8000000            lea edx, dword ptr [ebp+000000F8]
:00472FD8 3BCA                    cmp ecx, edx
:00472FDA 7763                    ja 0047303F
:00472FDC 8D143E                  lea edx, dword ptr [esi+edi]
:00472FDF 3BD1                    cmp edx, ecx
:00472FE1 730C                    jnb 00472FEF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472FEB(C)
|
:00472FE3 803A00                  cmp byte ptr [edx], 00
:00472FE6 7505                    jne 00472FED
:00472FE8 42                      inc edx
:00472FE9 3BD1                    cmp edx, ecx
:00472FEB 72F6                    jb 00472FE3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472FE6(C)
|
:00472FED 3BD1                    cmp edx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00472FE1(C)
|
:00472FEF 754E                    jne 0047303F
:00472FF1 881F                    mov byte ptr [edi], bl
:00472FF3 8B4500                  mov eax, dword ptr [ebp+00]
:00472FF6 3BF8                    cmp edi, eax
:00472FF8 7734                    ja 0047302E
:00472FFA 3BC8                    cmp ecx, eax
:00472FFC 7630                    jbe 0047302E
:00472FFE 8D85F8000000            lea eax, dword ptr [ebp+000000F8]
:00473004 3BC8                    cmp ecx, eax
:00473006 7319                    jnb 00473021
:00473008 894D00                  mov dword ptr [ebp+00], ecx
:0047300B 8A11                    mov dl, byte ptr [ecx]
:0047300D 33C0                    xor eax, eax
:0047300F 84D2                    test dl, dl
:00473011 7509                    jne 0047301C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047301A(C)
|
:00473013 8A540801                mov dl, byte ptr [eax+ecx+01]
:00473017 40                      inc eax
:00473018 84D2                    test dl, dl
:0047301A 74F7                    je 00473013

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473011(C)
|
:0047301C 894504                  mov dword ptr [ebp+04], eax
:0047301F EB0D                    jmp 0047302E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473006(C)
|
:00473021 8D4508                  lea eax, dword ptr [ebp+08]
:00473024 C7450400000000          mov [ebp+04], 00000000
:0047302B 894500                  mov dword ptr [ebp+00], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472FF8(C), :00472FFC(C), :0047301F(U)
|
:0047302E 8B442418                mov eax, dword ptr [esp+18]
:00473032 2BF3                    sub esi, ebx
:00473034 8B08                    mov ecx, dword ptr [eax]
:00473036 03CE                    add ecx, esi
:00473038 8908                    mov dword ptr [eax], ecx
:0047303A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00472FCD(C), :00472FDA(C), :00472FEF(C)
|
:0047303F 5F                      pop edi
:00473040 5E                      pop esi
:00473041 5D                      pop ebp
:00473042 5B                      pop ebx
:00473043 C3                      ret


:00473044 90                      nop
:00473045 90                      nop
:00473046 90                      nop
:00473047 90                      nop
:00473048 90                      nop
:00473049 90                      nop
:0047304A 90                      nop
:0047304B 90                      nop
:0047304C 90                      nop
:0047304D 90                      nop
:0047304E 90                      nop
:0047304F 90                      nop

* Referenced by a CALL at Address:
|:0047309F   
|
:00473050 55                      push ebp
:00473051 8BEC                    mov ebp, esp
:00473053 51                      push ecx
:00473054 56                      push esi
:00473055 9B                      wait
:00473056 D97DFC                  fstcw word ptr [ebp-04]
:00473059 8B45FC                  mov eax, dword ptr [ebp-04]
:0047305C 50                      push eax
:0047305D E84E000000              call 004730B0
:00473062 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00473065 8B5508                  mov edx, dword ptr [ebp+08]
:00473068 8BF1                    mov esi, ecx
:0047306A 83C404                  add esp, 00000004
:0047306D F7D1                    not ecx
:0047306F 23F2                    and esi, edx
:00473071 23C8                    and ecx, eax
:00473073 0BF1                    or esi, ecx
:00473075 56                      push esi
:00473076 E8D5000000              call 00473150
:0047307B 83C404                  add esp, 00000004
:0047307E 89450C                  mov dword ptr [ebp+0C], eax
:00473081 D96D0C                  fldcw  [ebp+0C]
:00473084 8BC6                    mov eax, esi
:00473086 5E                      pop esi
:00473087 8BE5                    mov esp, ebp
:00473089 5D                      pop ebp
:0047308A C3                      ret


:0047308B 90                      nop
:0047308C 90                      nop
:0047308D 90                      nop
:0047308E 90                      nop
:0047308F 90                      nop

* Referenced by a CALL at Address:
|:00470EFA   
|
:00473090 8B442408                mov eax, dword ptr [esp+08]
:00473094 8B4C2404                mov ecx, dword ptr [esp+04]
:00473098 25FFFFF7FF              and eax, FFF7FFFF
:0047309D 50                      push eax
:0047309E 51                      push ecx
:0047309F E8ACFFFFFF              call 00473050
:004730A4 83C408                  add esp, 00000008
:004730A7 C3                      ret


:004730A8 90                      nop
:004730A9 90                      nop
:004730AA 90                      nop
:004730AB 90                      nop
:004730AC 90                      nop
:004730AD 90                      nop
:004730AE 90                      nop
:004730AF 90                      nop

* Referenced by a CALL at Address:
|:0047305D   
|
:004730B0 53                      push ebx
:004730B1 8B5C2408                mov ebx, dword ptr [esp+08]
:004730B5 33C0                    xor eax, eax
:004730B7 F6C301                  test bl, 01
:004730BA 7405                    je 004730C1
:004730BC B810000000              mov eax, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004730BA(C)
|
:004730C1 F6C304                  test bl, 04
:004730C4 7402                    je 004730C8
:004730C6 0C08                    or al, 08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004730C4(C)
|
:004730C8 F6C308                  test bl, 08
:004730CB 7402                    je 004730CF
:004730CD 0C04                    or al, 04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004730CB(C)
|
:004730CF F6C310                  test bl, 10
:004730D2 7402                    je 004730D6
:004730D4 0C02                    or al, 02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004730D2(C)
|
:004730D6 F6C320                  test bl, 20
:004730D9 7402                    je 004730DD
:004730DB 0C01                    or al, 01

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004730D9(C)
|
:004730DD F6C302                  test bl, 02
:004730E0 7405                    je 004730E7
:004730E2 0D00000800              or eax, 00080000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004730E0(C)
|
:004730E7 8BD3                    mov edx, ebx
:004730E9 81E2FFFF0000            and edx, 0000FFFF
:004730EF 8BCA                    mov ecx, edx
:004730F1 81E1000C0000            and ecx, 00000C00
:004730F7 81F900040000            cmp ecx, 00000400
:004730FD 7F07                    jg 00473106
:004730FF 751D                    jne 0047311E
:00473101 80CC01                  or ah, 01
:00473104 EB18                    jmp 0047311E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004730FD(C)
|
:00473106 81F900080000            cmp ecx, 00000800
:0047310C 740D                    je 0047311B
:0047310E 81F9000C0000            cmp ecx, 00000C00
:00473114 7508                    jne 0047311E
:00473116 80CC03                  or ah, 03
:00473119 EB03                    jmp 0047311E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047310C(C)
|
:0047311B 80CC02                  or ah, 02

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004730FF(C), :00473104(U), :00473114(C), :00473119(U)
|
:0047311E 81E200030000            and edx, 00000300
:00473124 740F                    je 00473135
:00473126 81FA00020000            cmp edx, 00000200
:0047312C 750C                    jne 0047313A
:0047312E 0D00000100              or eax, 00010000
:00473133 EB05                    jmp 0047313A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473124(C)
|
:00473135 0D00000200              or eax, 00020000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047312C(C), :00473133(U)
|
:0047313A F6C710                  test bh, 10
:0047313D 7405                    je 00473144
:0047313F 0D00000400              or eax, 00040000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047313D(C)
|
:00473144 5B                      pop ebx
:00473145 C3                      ret


:00473146 90                      nop
:00473147 90                      nop
:00473148 90                      nop
:00473149 90                      nop
:0047314A 90                      nop
:0047314B 90                      nop
:0047314C 90                      nop
:0047314D 90                      nop
:0047314E 90                      nop
:0047314F 90                      nop

* Referenced by a CALL at Address:
|:00473076   
|
:00473150 8B542404                mov edx, dword ptr [esp+04]
:00473154 33C0                    xor eax, eax
:00473156 F6C210                  test dl, 10
:00473159 7405                    je 00473160
:0047315B B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473159(C)
|
:00473160 F6C208                  test dl, 08
:00473163 7402                    je 00473167
:00473165 0C04                    or al, 04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473163(C)
|
:00473167 F6C204                  test dl, 04
:0047316A 7402                    je 0047316E
:0047316C 0C08                    or al, 08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047316A(C)
|
:0047316E F6C202                  test dl, 02
:00473171 7402                    je 00473175
:00473173 0C10                    or al, 10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473171(C)
|
:00473175 F6C201                  test dl, 01
:00473178 7402                    je 0047317C
:0047317A 0C20                    or al, 20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473178(C)
|
:0047317C F7C200000800            test edx, 00080000
:00473182 7402                    je 00473186
:00473184 0C02                    or al, 02

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473182(C)
|
:00473186 8BCA                    mov ecx, edx
:00473188 81E100030000            and ecx, 00000300
:0047318E 81F900010000            cmp ecx, 00000100
:00473194 7707                    ja 0047319D
:00473196 751D                    jne 004731B5
:00473198 80CC04                  or ah, 04
:0047319B EB18                    jmp 004731B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473194(C)
|
:0047319D 81F900020000            cmp ecx, 00000200
:004731A3 740D                    je 004731B2
:004731A5 81F900030000            cmp ecx, 00000300
:004731AB 7508                    jne 004731B5
:004731AD 80CC0C                  or ah, 0C
:004731B0 EB03                    jmp 004731B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004731A3(C)
|
:004731B2 80CC08                  or ah, 08

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473196(C), :0047319B(U), :004731AB(C), :004731B0(U)
|
:004731B5 8BCA                    mov ecx, edx
:004731B7 81E100000300            and ecx, 00030000
:004731BD 740D                    je 004731CC
:004731BF 81F900000100            cmp ecx, 00010000
:004731C5 7508                    jne 004731CF
:004731C7 80CC02                  or ah, 02
:004731CA EB03                    jmp 004731CF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004731BD(C)
|
:004731CC 80CC03                  or ah, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004731C5(C), :004731CA(U)
|
:004731CF F7C200000400            test edx, 00040000
:004731D5 7403                    je 004731DA
:004731D7 80CC10                  or ah, 10

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004731D5(C)
|
:004731DA C3                      ret
:004731DB 90                      nop
:004731DC 90                      nop
:004731DD 90                      nop
:004731DE 90                      nop
:004731DF 90                      nop

* Referenced by a CALL at Addresses:
|:00470FB7   , :004732C3   , :00474503   , :004745C8   , :00474667   
|:0047475A   , :004747BC   
|
:004731E0 51                      push ecx
:004731E1 8B4C2408                mov ecx, dword ptr [esp+08]
:004731E5 56                      push esi
:004731E6 8D4101                  lea eax, dword ptr [ecx+01]
:004731E9 3D00010000              cmp eax, 00000100
:004731EE 7715                    ja 00473205

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:004731F0 8B1568464800            mov edx, dword ptr [00484668]
:004731F6 33C0                    xor eax, eax
:004731F8 668B044A                mov ax, word ptr [edx+2*ecx]
:004731FC 8B4C2410                mov ecx, dword ptr [esp+10]
:00473200 23C1                    and eax, ecx
:00473202 5E                      pop esi
:00473203 59                      pop ecx
:00473204 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004731EE(C)
|

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00473205 8B3568464800            mov esi, dword ptr [00484668]
:0047320B 8BC1                    mov eax, ecx
:0047320D C1F808                  sar eax, 08
:00473210 8BD0                    mov edx, eax
:00473212 81E2FF000000            and edx, 000000FF
:00473218 F644560180              test [esi+2*edx+01], 80
:0047321D 7414                    je 00473233
:0047321F 8844240C                mov byte ptr [esp+0C], al
:00473223 884C240D                mov byte ptr [esp+0D], cl
:00473227 C644240E00              mov [esp+0E], 00

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0047322C B802000000              mov eax, 00000002
:00473231 EB0E                    jmp 00473241

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047321D(C)
|
:00473233 884C240C                mov byte ptr [esp+0C], cl
:00473237 C644240D00              mov [esp+0D], 00
:0047323C B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473231(U)
|
:00473241 6A00                    push 00000000
:00473243 8D4C2408                lea ecx, dword ptr [esp+08]
:00473247 6A00                    push 00000000
:00473249 51                      push ecx
:0047324A 8D542418                lea edx, dword ptr [esp+18]
:0047324E 50                      push eax
:0047324F 52                      push edx
:00473250 6A01                    push 00000001
:00473252 E8990B0000              call 00473DF0
:00473257 83C418                  add esp, 00000018
:0047325A 85C0                    test eax, eax
:0047325C 7503                    jne 00473261
:0047325E 5E                      pop esi
:0047325F 59                      pop ecx
:00473260 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047325C(C)
|
:00473261 8B442404                mov eax, dword ptr [esp+04]
:00473265 8B4C2410                mov ecx, dword ptr [esp+10]
:00473269 25FFFF0000              and eax, 0000FFFF
:0047326E 5E                      pop esi
:0047326F 23C1                    and eax, ecx
:00473271 59                      pop ecx
:00473272 C3                      ret


:00473273 90                      nop
:00473274 90                      nop
:00473275 90                      nop
:00473276 90                      nop
:00473277 90                      nop
:00473278 90                      nop
:00473279 90                      nop
:0047327A 90                      nop
:0047327B 90                      nop
:0047327C 90                      nop
:0047327D 90                      nop
:0047327E 90                      nop
:0047327F 90                      nop

* Referenced by a CALL at Address:
|:00470F99   
|
:00473280 A1D8654B00              mov eax, dword ptr [004B65D8]
:00473285 83EC08                  sub esp, 00000008
:00473288 85C0                    test eax, eax
:0047328A 53                      push ebx
:0047328B 751E                    jne 004732AB
:0047328D 8B442410                mov eax, dword ptr [esp+10]
:00473291 83F841                  cmp eax, 00000041
:00473294 0F8CDD000000            jl 00473377
:0047329A 83F85A                  cmp eax, 0000005A
:0047329D 0F8FD4000000            jg 00473377
:004732A3 83C020                  add eax, 00000020
:004732A6 5B                      pop ebx
:004732A7 83C408                  add esp, 00000008
:004732AA C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047328B(C)
|
:004732AB 8B5C2410                mov ebx, dword ptr [esp+10]
:004732AF 81FB00010000            cmp ebx, 00000100
:004732B5 7D2C                    jge 004732E3
:004732B7 833D5846480001          cmp dword ptr [00484658], 00000001
:004732BE 7E0D                    jle 004732CD
:004732C0 6A01                    push 00000001
:004732C2 53                      push ebx
:004732C3 E818FFFFFF              call 004731E0
:004732C8 83C408                  add esp, 00000008
:004732CB EB0B                    jmp 004732D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004732BE(C)
|

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:004732CD A168464800              mov eax, dword ptr [00484668]
:004732D2 8A0458                  mov al, byte ptr [eax+2*ebx]
:004732D5 83E001                  and eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004732CB(U)
|
:004732D8 85C0                    test eax, eax
:004732DA 7507                    jne 004732E3
:004732DC 8BC3                    mov eax, ebx
:004732DE 5B                      pop ebx
:004732DF 83C408                  add esp, 00000008
:004732E2 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004732B5(C), :004732DA(C)
|

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:004732E3 8B1568464800            mov edx, dword ptr [00484668]
:004732E9 8BC3                    mov eax, ebx
:004732EB C1F808                  sar eax, 08
:004732EE 8BC8                    mov ecx, eax
:004732F0 81E1FF000000            and ecx, 000000FF
:004732F6 F6444A0180              test [edx+2*ecx+01], 80
:004732FB 7414                    je 00473311
:004732FD 88442410                mov byte ptr [esp+10], al
:00473301 885C2411                mov byte ptr [esp+11], bl
:00473305 C644241200              mov [esp+12], 00

* Possible Reference to String Resource ID=00002: "
"
                                  |
:0047330A B802000000              mov eax, 00000002
:0047330F EB0E                    jmp 0047331F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004732FB(C)
|
:00473311 885C2410                mov byte ptr [esp+10], bl
:00473315 C644241100              mov [esp+11], 00
:0047331A B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047330F(U)
|
:0047331F 6A00                    push 00000000
:00473321 8D4C2408                lea ecx, dword ptr [esp+08]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00473325 6A03                    push 00000003
:00473327 51                      push ecx
:00473328 8D54241C                lea edx, dword ptr [esp+1C]
:0047332C 50                      push eax
:0047332D A1D8654B00              mov eax, dword ptr [004B65D8]
:00473332 52                      push edx
:00473333 6800010000              push 00000100
:00473338 50                      push eax
:00473339 E8E20B0000              call 00473F20
:0047333E 83C41C                  add esp, 0000001C
:00473341 85C0                    test eax, eax
:00473343 7507                    jne 0047334C
:00473345 8BC3                    mov eax, ebx
:00473347 5B                      pop ebx
:00473348 83C408                  add esp, 00000008
:0047334B C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473343(C)
|
:0047334C 83F801                  cmp eax, 00000001
:0047334F 750E                    jne 0047335F
:00473351 8B442404                mov eax, dword ptr [esp+04]
:00473355 25FF000000              and eax, 000000FF
:0047335A 5B                      pop ebx
:0047335B 83C408                  add esp, 00000008
:0047335E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047334F(C)
|
:0047335F 8B442405                mov eax, dword ptr [esp+05]
:00473363 8B4C2404                mov ecx, dword ptr [esp+04]
:00473367 25FF000000              and eax, 000000FF
:0047336C 81E1FF000000            and ecx, 000000FF
:00473372 C1E008                  shl eax, 08
:00473375 0BC1                    or eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473294(C), :0047329D(C)
|
:00473377 5B                      pop ebx
:00473378 83C408                  add esp, 00000008
:0047337B C3                      ret


:0047337C 90                      nop
:0047337D 90                      nop
:0047337E 90                      nop
:0047337F 90                      nop

* Referenced by a CALL at Address:
|:004734B0   
|
:00473380 8B4C2408                mov ecx, dword ptr [esp+08]
:00473384 56                      push esi
:00473385 8BC1                    mov eax, ecx
:00473387 99                      cdq
:00473388 83E21F                  and edx, 0000001F
:0047338B 03C2                    add eax, edx
:0047338D 8BF0                    mov esi, eax
:0047338F 8BC1                    mov eax, ecx
:00473391 99                      cdq
:00473392 33C2                    xor eax, edx
:00473394 B91F000000              mov ecx, 0000001F
:00473399 2BC2                    sub eax, edx
:0047339B 83E01F                  and eax, 0000001F
:0047339E 33C2                    xor eax, edx
:004733A0 2BC2                    sub eax, edx
:004733A2 83CAFF                  or edx, FFFFFFFF
:004733A5 2BC8                    sub ecx, eax
:004733A7 8B442408                mov eax, dword ptr [esp+08]
:004733AB D3E2                    shl edx, cl
:004733AD C1FE05                  sar esi, 05
:004733B0 8B0CB0                  mov ecx, dword ptr [eax+4*esi]
:004733B3 F7D2                    not edx
:004733B5 85D1                    test ecx, edx
:004733B7 7404                    je 004733BD
:004733B9 33C0                    xor eax, eax
:004733BB 5E                      pop esi
:004733BC C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004733B7(C)
|
:004733BD 46                      inc esi
:004733BE 83FE03                  cmp esi, 00000003
:004733C1 7D1C                    jge 004733DF
:004733C3 8D04B0                  lea eax, dword ptr [eax+4*esi]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004733D2(C)
|
:004733C6 833800                  cmp dword ptr [eax], 00000000
:004733C9 7510                    jne 004733DB
:004733CB 46                      inc esi
:004733CC 83C004                  add eax, 00000004
:004733CF 83FE03                  cmp esi, 00000003
:004733D2 7CF2                    jl 004733C6
:004733D4 B801000000              mov eax, 00000001
:004733D9 5E                      pop esi
:004733DA C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004733C9(C)
|
:004733DB 33C0                    xor eax, eax
:004733DD 5E                      pop esi
:004733DE C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004733C1(C)
|
:004733DF B801000000              mov eax, 00000001
:004733E4 5E                      pop esi
:004733E5 C3                      ret


:004733E6 90                      nop
:004733E7 90                      nop
:004733E8 90                      nop
:004733E9 90                      nop
:004733EA 90                      nop
:004733EB 90                      nop
:004733EC 90                      nop
:004733ED 90                      nop
:004733EE 90                      nop
:004733EF 90                      nop

* Referenced by a CALL at Address:
|:004734C2   
|
:004733F0 8B4C2408                mov ecx, dword ptr [esp+08]
:004733F4 53                      push ebx
:004733F5 8BC1                    mov eax, ecx
:004733F7 56                      push esi
:004733F8 99                      cdq
:004733F9 83E21F                  and edx, 0000001F
:004733FC 8B5C240C                mov ebx, dword ptr [esp+0C]
:00473400 03C2                    add eax, edx
:00473402 57                      push edi
:00473403 8BF0                    mov esi, eax
:00473405 8BC1                    mov eax, ecx
:00473407 99                      cdq
:00473408 33C2                    xor eax, edx
:0047340A B91F000000              mov ecx, 0000001F
:0047340F 2BC2                    sub eax, edx
:00473411 83E01F                  and eax, 0000001F
:00473414 33C2                    xor eax, edx
:00473416 2BC2                    sub eax, edx
:00473418 2BC8                    sub ecx, eax
:0047341A B801000000              mov eax, 00000001
:0047341F C1FE05                  sar esi, 05
:00473422 D3E0                    shl eax, cl
:00473424 8B0CB3                  mov ecx, dword ptr [ebx+4*esi]
:00473427 8D3CB3                  lea edi, dword ptr [ebx+4*esi]
:0047342A 57                      push edi
:0047342B 50                      push eax
:0047342C 51                      push ecx
:0047342D E83E0D0000              call 00474170
:00473432 83C40C                  add esp, 0000000C
:00473435 4E                      dec esi
:00473436 781D                    js 00473455
:00473438 8D3CB3                  lea edi, dword ptr [ebx+4*esi]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473453(C)
|
:0047343B 85C0                    test eax, eax
:0047343D 7416                    je 00473455
:0047343F 8B17                    mov edx, dword ptr [edi]
:00473441 57                      push edi
:00473442 6A01                    push 00000001
:00473444 52                      push edx
:00473445 E8260D0000              call 00474170
:0047344A 83C40C                  add esp, 0000000C
:0047344D 4E                      dec esi
:0047344E 83EF04                  sub edi, 00000004
:00473451 85F6                    test esi, esi
:00473453 7DE6                    jge 0047343B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473436(C), :0047343D(C)
|
:00473455 5F                      pop edi
:00473456 5E                      pop esi
:00473457 5B                      pop ebx
:00473458 C3                      ret


:00473459 90                      nop
:0047345A 90                      nop
:0047345B 90                      nop
:0047345C 90                      nop
:0047345D 90                      nop
:0047345E 90                      nop
:0047345F 90                      nop

* Referenced by a CALL at Addresses:
|:004736A5   , :0047370A   
|
:00473460 51                      push ecx
:00473461 8B44240C                mov eax, dword ptr [esp+0C]
:00473465 53                      push ebx
:00473466 55                      push ebp
:00473467 56                      push esi
:00473468 8D68FF                  lea ebp, dword ptr [eax-01]
:0047346B 8B5C2414                mov ebx, dword ptr [esp+14]
:0047346F 896C2418                mov dword ptr [esp+18], ebp
:00473473 45                      inc ebp
:00473474 8BC5                    mov eax, ebp
:00473476 57                      push edi
:00473477 99                      cdq
:00473478 83E21F                  and edx, 0000001F
:0047347B BF1F000000              mov edi, 0000001F
:00473480 03C2                    add eax, edx
:00473482 C744241000000000        mov [esp+10], 00000000
:0047348A 8BF0                    mov esi, eax
:0047348C 8BC5                    mov eax, ebp
:0047348E 99                      cdq
:0047348F 33C2                    xor eax, edx
:00473491 2BC2                    sub eax, edx
:00473493 83E01F                  and eax, 0000001F
:00473496 33C2                    xor eax, edx
:00473498 2BC2                    sub eax, edx
:0047349A BA01000000              mov edx, 00000001
:0047349F 2BF8                    sub edi, eax
:004734A1 8BCF                    mov ecx, edi
:004734A3 C1FE05                  sar esi, 05
:004734A6 D3E2                    shl edx, cl
:004734A8 8514B3                  test dword ptr [ebx+4*esi], edx
:004734AB 7421                    je 004734CE
:004734AD 45                      inc ebp
:004734AE 55                      push ebp
:004734AF 53                      push ebx
:004734B0 E8CBFEFFFF              call 00473380
:004734B5 83C408                  add esp, 00000008
:004734B8 85C0                    test eax, eax
:004734BA 7512                    jne 004734CE
:004734BC 8B44241C                mov eax, dword ptr [esp+1C]
:004734C0 50                      push eax
:004734C1 53                      push ebx
:004734C2 E829FFFFFF              call 004733F0
:004734C7 83C408                  add esp, 00000008
:004734CA 8BD0                    mov edx, eax
:004734CC EB04                    jmp 004734D2

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004734AB(C), :004734BA(C)
|
:004734CE 8B542410                mov edx, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004734CC(U)
|
:004734D2 83C8FF                  or eax, FFFFFFFF
:004734D5 8BCF                    mov ecx, edi
:004734D7 D3E0                    shl eax, cl
:004734D9 8B0CB3                  mov ecx, dword ptr [ebx+4*esi]
:004734DC 23C8                    and ecx, eax
:004734DE 890CB3                  mov dword ptr [ebx+4*esi], ecx
:004734E1 46                      inc esi
:004734E2 83FE03                  cmp esi, 00000003
:004734E5 7D0E                    jge 004734F5

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004734E7 B903000000              mov ecx, 00000003
:004734EC 8D3CB3                  lea edi, dword ptr [ebx+4*esi]
:004734EF 2BCE                    sub ecx, esi
:004734F1 33C0                    xor eax, eax
:004734F3 F3                      repz
:004734F4 AB                      stosd

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004734E5(C)
|
:004734F5 5F                      pop edi
:004734F6 5E                      pop esi
:004734F7 5D                      pop ebp
:004734F8 8BC2                    mov eax, edx
:004734FA 5B                      pop ebx
:004734FB 59                      pop ecx
:004734FC C3                      ret


:004734FD 90                      nop
:004734FE 90                      nop
:004734FF 90                      nop

* Referenced by a CALL at Addresses:
|:00473694   , :004736EB   
|
:00473500 8B442408                mov eax, dword ptr [esp+08]
:00473504 8B4C2404                mov ecx, dword ptr [esp+04]
:00473508 56                      push esi
:00473509 2BC8                    sub ecx, eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:0047350B BA03000000              mov edx, 00000003

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473519(C)
|
:00473510 8B30                    mov esi, dword ptr [eax]
:00473512 893408                  mov dword ptr [eax+ecx], esi
:00473515 83C004                  add eax, 00000004
:00473518 4A                      dec edx
:00473519 75F5                    jne 00473510
:0047351B 5E                      pop esi
:0047351C C3                      ret


:0047351D 90                      nop
:0047351E 90                      nop
:0047351F 90                      nop

* Referenced by a CALL at Addresses:
|:00473678   , :004736C5   , :00473736   
|
:00473520 8B4C2404                mov ecx, dword ptr [esp+04]
:00473524 33C0                    xor eax, eax
:00473526 8901                    mov dword ptr [ecx], eax
:00473528 894104                  mov dword ptr [ecx+04], eax
:0047352B 894108                  mov dword ptr [ecx+08], eax
:0047352E C3                      ret


:0047352F 90                      nop

* Referenced by a CALL at Address:
|:00473663   
|
:00473530 8B4C2404                mov ecx, dword ptr [esp+04]
:00473534 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473542(C)
|
:00473536 833900                  cmp dword ptr [ecx], 00000000
:00473539 750F                    jne 0047354A
:0047353B 40                      inc eax
:0047353C 83C104                  add ecx, 00000004
:0047353F 83F803                  cmp eax, 00000003
:00473542 7CF2                    jl 00473536
:00473544 B801000000              mov eax, 00000001
:00473549 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473539(C)
|
:0047354A 33C0                    xor eax, eax
:0047354C C3                      ret


:0047354D 90                      nop
:0047354E 90                      nop
:0047354F 90                      nop

* Referenced by a CALL at Addresses:
|:004736F9   , :0047371C   , :00473755   , :00473787   
|
:00473550 83EC08                  sub esp, 00000008
:00473553 8B4C2410                mov ecx, dword ptr [esp+10]
:00473557 53                      push ebx
:00473558 8BC1                    mov eax, ecx
:0047355A 55                      push ebp
:0047355B 99                      cdq
:0047355C 83E21F                  and edx, 0000001F
:0047355F 56                      push esi
:00473560 03C2                    add eax, edx
:00473562 57                      push edi
:00473563 C1F805                  sar eax, 05
:00473566 89442414                mov dword ptr [esp+14], eax
:0047356A 8BC1                    mov eax, ecx
:0047356C 99                      cdq
:0047356D 33C2                    xor eax, edx
:0047356F 8B74241C                mov esi, dword ptr [esp+1C]
:00473573 2BC2                    sub eax, edx
:00473575 83CFFF                  or edi, FFFFFFFF
:00473578 83E01F                  and eax, 0000001F
:0047357B BD20000000              mov ebp, 00000020
:00473580 33C2                    xor eax, edx
:00473582 33DB                    xor ebx, ebx
:00473584 2BC2                    sub eax, edx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00473586 C744242003000000        mov [esp+20], 00000003
:0047358E 8BC8                    mov ecx, eax
:00473590 D3E7                    shl edi, cl
:00473592 2BE8                    sub ebp, eax
:00473594 F7D7                    not edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004735BD(C)
|
:00473596 8B16                    mov edx, dword ptr [esi]
:00473598 8BCF                    mov ecx, edi
:0047359A 23CA                    and ecx, edx
:0047359C 83C604                  add esi, 00000004
:0047359F 894C2410                mov dword ptr [esp+10], ecx
:004735A3 8BC8                    mov ecx, eax
:004735A5 D3EA                    shr edx, cl
:004735A7 8BCD                    mov ecx, ebp
:004735A9 0BD3                    or edx, ebx
:004735AB 8B5C2410                mov ebx, dword ptr [esp+10]
:004735AF D3E3                    shl ebx, cl
:004735B1 8B4C2420                mov ecx, dword ptr [esp+20]
:004735B5 8956FC                  mov dword ptr [esi-04], edx
:004735B8 49                      dec ecx
:004735B9 894C2420                mov dword ptr [esp+20], ecx
:004735BD 75D7                    jne 00473596
:004735BF 8B5C2414                mov ebx, dword ptr [esp+14]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004735C3 BE02000000              mov esi, 00000002

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004735C8 B908000000              mov ecx, 00000008
:004735CD 8D3C9D00000000          lea edi, dword ptr [4*ebx+00000000]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004735F7(C)
|
:004735D4 3BF3                    cmp esi, ebx
:004735D6 7C10                    jl 004735E8
:004735D8 8B54241C                mov edx, dword ptr [esp+1C]
:004735DC 8BC1                    mov eax, ecx
:004735DE 2BC7                    sub eax, edi
:004735E0 8B0402                  mov eax, dword ptr [edx+eax]
:004735E3 89040A                  mov dword ptr [edx+ecx], eax
:004735E6 EB0B                    jmp 004735F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004735D6(C)
|
:004735E8 8B54241C                mov edx, dword ptr [esp+1C]
:004735EC C7040A00000000          mov dword ptr [edx+ecx], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004735E6(U)
|
:004735F3 4E                      dec esi
:004735F4 83E904                  sub ecx, 00000004
:004735F7 79DB                    jns 004735D4
:004735F9 5F                      pop edi
:004735FA 5E                      pop esi
:004735FB 5D                      pop ebp
:004735FC 5B                      pop ebx
:004735FD 83C408                  add esp, 00000008
:00473600 C3                      ret


:00473601 90                      nop
:00473602 90                      nop
:00473603 90                      nop
:00473604 90                      nop
:00473605 90                      nop
:00473606 90                      nop
:00473607 90                      nop
:00473608 90                      nop
:00473609 90                      nop
:0047360A 90                      nop
:0047360B 90                      nop
:0047360C 90                      nop
:0047360D 90                      nop
:0047360E 90                      nop
:0047360F 90                      nop

* Referenced by a CALL at Addresses:
|:004737EF   , :0047380F   
|
:00473610 83EC18                  sub esp, 00000018
:00473613 8B4C241C                mov ecx, dword ptr [esp+1C]
:00473617 33C0                    xor eax, eax
:00473619 53                      push ebx
:0047361A 55                      push ebp
:0047361B 668B410A                mov ax, word ptr [ecx+0A]
:0047361F 8B5102                  mov edx, dword ptr [ecx+02]
:00473622 8BD8                    mov ebx, eax
:00473624 2500800000              and eax, 00008000
:00473629 8BE8                    mov ebp, eax
:0047362B 8B4106                  mov eax, dword ptr [ecx+06]
:0047362E 89442408                mov dword ptr [esp+08], eax
:00473632 33C0                    xor eax, eax
:00473634 668B01                  mov ax, word ptr [ecx]
:00473637 81E3FF7F0000            and ebx, 00007FFF
:0047363D 81EBFF3F0000            sub ebx, 00003FFF
:00473643 56                      push esi
:00473644 C1E010                  shl eax, 10
:00473647 57                      push edi
:00473648 8B7C2434                mov edi, dword ptr [esp+34]
:0047364C 81FB01C0FFFF            cmp ebx, FFFFC001
:00473652 89542414                mov dword ptr [esp+14], edx
:00473656 89442418                mov dword ptr [esp+18], eax
:0047365A 752E                    jne 0047368A
:0047365C 8D4C2410                lea ecx, dword ptr [esp+10]
:00473660 33F6                    xor esi, esi
:00473662 51                      push ecx
:00473663 E8C8FEFFFF              call 00473530
:00473668 83C404                  add esp, 00000004
:0047366B 85C0                    test eax, eax
:0047366D 0F851C010000            jne 0047378F
:00473673 8D542410                lea edx, dword ptr [esp+10]
:00473677 52                      push edx
:00473678 E8A3FEFFFF              call 00473520
:0047367D 83C404                  add esp, 00000004

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00473680 B802000000              mov eax, 00000002
:00473685 E907010000              jmp 00473791

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047365A(C)
|
:0047368A 8D442410                lea eax, dword ptr [esp+10]
:0047368E 8D4C241C                lea ecx, dword ptr [esp+1C]
:00473692 50                      push eax
:00473693 51                      push ecx
:00473694 E867FEFFFF              call 00473500
:00473699 8B5708                  mov edx, dword ptr [edi+08]
:0047369C 83C408                  add esp, 00000008
:0047369F 8D442410                lea eax, dword ptr [esp+10]
:004736A3 52                      push edx
:004736A4 50                      push eax
:004736A5 E8B6FDFFFF              call 00473460
:004736AA 83C408                  add esp, 00000008
:004736AD 85C0                    test eax, eax
:004736AF 7401                    je 004736B2
:004736B1 43                      inc ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004736AF(C)
|
:004736B2 8B4704                  mov eax, dword ptr [edi+04]
:004736B5 8B7708                  mov esi, dword ptr [edi+08]
:004736B8 8BC8                    mov ecx, eax
:004736BA 2BCE                    sub ecx, esi
:004736BC 3BD9                    cmp ebx, ecx
:004736BE 7D19                    jge 004736D9
:004736C0 8D542410                lea edx, dword ptr [esp+10]
:004736C4 52                      push edx
:004736C5 E856FEFFFF              call 00473520
:004736CA 83C404                  add esp, 00000004
:004736CD 33F6                    xor esi, esi

* Possible Reference to String Resource ID=00002: "
"
                                  |
:004736CF B802000000              mov eax, 00000002
:004736D4 E9B8000000              jmp 00473791

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004736BE(C)
|
:004736D9 3BD8                    cmp ebx, eax
:004736DB 7F50                    jg 0047372D
:004736DD 2BC3                    sub eax, ebx
:004736DF 8D4C2410                lea ecx, dword ptr [esp+10]
:004736E3 8BF0                    mov esi, eax
:004736E5 8D44241C                lea eax, dword ptr [esp+1C]
:004736E9 50                      push eax
:004736EA 51                      push ecx
:004736EB E810FEFFFF              call 00473500
:004736F0 83C408                  add esp, 00000008
:004736F3 8D542410                lea edx, dword ptr [esp+10]
:004736F7 56                      push esi
:004736F8 52                      push edx
:004736F9 E852FEFFFF              call 00473550
:004736FE 8B4708                  mov eax, dword ptr [edi+08]
:00473701 83C408                  add esp, 00000008
:00473704 8D4C2410                lea ecx, dword ptr [esp+10]
:00473708 50                      push eax
:00473709 51                      push ecx
:0047370A E851FDFFFF              call 00473460
:0047370F 8B570C                  mov edx, dword ptr [edi+0C]
:00473712 83C408                  add esp, 00000008
:00473715 42                      inc edx
:00473716 8D442410                lea eax, dword ptr [esp+10]
:0047371A 52                      push edx
:0047371B 50                      push eax
:0047371C E82FFEFFFF              call 00473550
:00473721 83C408                  add esp, 00000008
:00473724 33F6                    xor esi, esi

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00473726 B802000000              mov eax, 00000002
:0047372B EB64                    jmp 00473791

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004736DB(C)
|
:0047372D 3B1F                    cmp ebx, dword ptr [edi]
:0047372F 7C3A                    jl 0047376B
:00473731 8D4C2410                lea ecx, dword ptr [esp+10]
:00473735 51                      push ecx
:00473736 E8E5FDFFFF              call 00473520
:0047373B 8B5C2414                mov ebx, dword ptr [esp+14]
:0047373F 8B570C                  mov edx, dword ptr [edi+0C]
:00473742 83C404                  add esp, 00000004
:00473745 8D442410                lea eax, dword ptr [esp+10]
:00473749 81CB00000080            or ebx, 80000000
:0047374F 52                      push edx
:00473750 50                      push eax
:00473751 895C2418                mov dword ptr [esp+18], ebx
:00473755 E8F6FDFFFF              call 00473550
:0047375A 8B7714                  mov esi, dword ptr [edi+14]
:0047375D 8B07                    mov eax, dword ptr [edi]
:0047375F 83C408                  add esp, 00000008
:00473762 03F0                    add esi, eax
:00473764 B801000000              mov eax, 00000001
:00473769 EB26                    jmp 00473791

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047372F(C)
|
:0047376B 8B7714                  mov esi, dword ptr [edi+14]
:0047376E 8B4F0C                  mov ecx, dword ptr [edi+0C]
:00473771 03F3                    add esi, ebx
:00473773 8B5C2410                mov ebx, dword ptr [esp+10]
:00473777 8D542410                lea edx, dword ptr [esp+10]
:0047377B 81E3FFFFFF7F            and ebx, 7FFFFFFF
:00473781 51                      push ecx
:00473782 52                      push edx
:00473783 895C2418                mov dword ptr [esp+18], ebx
:00473787 E8C4FDFFFF              call 00473550
:0047378C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047366D(C)
|
:0047378F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473685(U), :004736D4(U), :0047372B(U), :00473769(U)
|
:00473791 8B570C                  mov edx, dword ptr [edi+0C]
:00473794 B91F000000              mov ecx, 0000001F
:00473799 2BCA                    sub ecx, edx
:0047379B 8B542410                mov edx, dword ptr [esp+10]
:0047379F D3E6                    shl esi, cl
:004737A1 8B7F10                  mov edi, dword ptr [edi+10]
:004737A4 F7DD                    neg ebp
:004737A6 1BED                    sbb ebp, ebp
:004737A8 81E500000080            and ebp, 80000000
:004737AE 0BF5                    or esi, ebp
:004737B0 0BF2                    or esi, edx
:004737B2 83FF40                  cmp edi, 00000040
:004737B5 7515                    jne 004737CC
:004737B7 8B4C2430                mov ecx, dword ptr [esp+30]
:004737BB 8B542414                mov edx, dword ptr [esp+14]
:004737BF 897104                  mov dword ptr [ecx+04], esi
:004737C2 8911                    mov dword ptr [ecx], edx
:004737C4 5F                      pop edi
:004737C5 5E                      pop esi
:004737C6 5D                      pop ebp
:004737C7 5B                      pop ebx
:004737C8 83C418                  add esp, 00000018
:004737CB C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004737B5(C)
|
:004737CC 83FF20                  cmp edi, 00000020
:004737CF 7506                    jne 004737D7
:004737D1 8B4C2430                mov ecx, dword ptr [esp+30]
:004737D5 8931                    mov dword ptr [ecx], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004737CF(C)
|
:004737D7 5F                      pop edi
:004737D8 5E                      pop esi
:004737D9 5D                      pop ebp
:004737DA 5B                      pop ebx
:004737DB 83C418                  add esp, 00000018
:004737DE C3                      ret


:004737DF 90                      nop

* Referenced by a CALL at Address:
|:0047384C   
|
:004737E0 8B442408                mov eax, dword ptr [esp+08]
:004737E4 8B4C2404                mov ecx, dword ptr [esp+04]
:004737E8 6878484800              push 00484878
:004737ED 50                      push eax
:004737EE 51                      push ecx
:004737EF E81CFEFFFF              call 00473610
:004737F4 83C40C                  add esp, 0000000C
:004737F7 C3                      ret


:004737F8 90                      nop
:004737F9 90                      nop
:004737FA 90                      nop
:004737FB 90                      nop
:004737FC 90                      nop
:004737FD 90                      nop
:004737FE 90                      nop
:004737FF 90                      nop

* Referenced by a CALL at Address:
|:0047388C   
|
:00473800 8B442408                mov eax, dword ptr [esp+08]
:00473804 8B4C2404                mov ecx, dword ptr [esp+04]

* Possible StringData Ref from Data Obj ->""
                                  |
:00473808 6890484800              push 00484890
:0047380D 50                      push eax
:0047380E 51                      push ecx
:0047380F E8FCFDFFFF              call 00473610
:00473814 83C40C                  add esp, 0000000C
:00473817 C3                      ret


:00473818 90                      nop
:00473819 90                      nop
:0047381A 90                      nop
:0047381B 90                      nop
:0047381C 90                      nop
:0047381D 90                      nop
:0047381E 90                      nop
:0047381F 90                      nop

* Referenced by a CALL at Address:
|:00471095   
|
:00473820 8B442408                mov eax, dword ptr [esp+08]
:00473824 83EC0C                  sub esp, 0000000C
:00473827 8D4C2414                lea ecx, dword ptr [esp+14]
:0047382B 8D542400                lea edx, dword ptr [esp]
:0047382F 6A00                    push 00000000
:00473831 6A00                    push 00000000
:00473833 6A00                    push 00000000
:00473835 6A00                    push 00000000
:00473837 50                      push eax
:00473838 51                      push ecx
:00473839 52                      push edx
:0047383A E8310B0000              call 00474370
:0047383F 8B44242C                mov eax, dword ptr [esp+2C]
:00473843 83C41C                  add esp, 0000001C
:00473846 8D4C2400                lea ecx, dword ptr [esp]
:0047384A 50                      push eax
:0047384B 51                      push ecx
:0047384C E88FFFFFFF              call 004737E0
:00473851 83C408                  add esp, 00000008
:00473854 83C40C                  add esp, 0000000C
:00473857 C3                      ret


:00473858 90                      nop
:00473859 90                      nop
:0047385A 90                      nop
:0047385B 90                      nop
:0047385C 90                      nop
:0047385D 90                      nop
:0047385E 90                      nop
:0047385F 90                      nop

* Referenced by a CALL at Address:
|:004710BC   
|
:00473860 8B442408                mov eax, dword ptr [esp+08]
:00473864 83EC0C                  sub esp, 0000000C
:00473867 8D4C2414                lea ecx, dword ptr [esp+14]
:0047386B 8D542400                lea edx, dword ptr [esp]
:0047386F 6A00                    push 00000000
:00473871 6A00                    push 00000000
:00473873 6A00                    push 00000000
:00473875 6A00                    push 00000000
:00473877 50                      push eax
:00473878 51                      push ecx
:00473879 52                      push edx
:0047387A E8F10A0000              call 00474370
:0047387F 8B44242C                mov eax, dword ptr [esp+2C]
:00473883 83C41C                  add esp, 0000001C
:00473886 8D4C2400                lea ecx, dword ptr [esp]
:0047388A 50                      push eax
:0047388B 51                      push ecx
:0047388C E86FFFFFFF              call 00473800
:00473891 83C408                  add esp, 00000008
:00473894 83C40C                  add esp, 0000000C
:00473897 C3                      ret


:00473898 90                      nop
:00473899 90                      nop
:0047389A 90                      nop
:0047389B 90                      nop
:0047389C 90                      nop
:0047389D 90                      nop
:0047389E 90                      nop
:0047389F 90                      nop

* Referenced by a CALL at Addresses:
|:00471153   , :0047128D   , :0047135F   
|
:004738A0 8B4C240C                mov ecx, dword ptr [esp+0C]
:004738A4 53                      push ebx
:004738A5 55                      push ebp
:004738A6 8B6C240C                mov ebp, dword ptr [esp+0C]
:004738AA 8B510C                  mov edx, dword ptr [ecx+0C]
:004738AD 56                      push esi
:004738AE 8B742414                mov esi, dword ptr [esp+14]
:004738B2 57                      push edi
:004738B3 8D7D01                  lea edi, dword ptr [ebp+01]
:004738B6 C6450030                mov [ebp+00], 30
:004738BA 85F6                    test esi, esi
:004738BC 8BC7                    mov eax, edi
:004738BE 7E1E                    jle 004738DE
:004738C0 8BDE                    mov ebx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004738D8(C)
|
:004738C2 8A0A                    mov cl, byte ptr [edx]
:004738C4 84C9                    test cl, cl
:004738C6 7406                    je 004738CE
:004738C8 0FBEC9                  movsx ecx, cl
:004738CB 42                      inc edx
:004738CC EB05                    jmp 004738D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004738C6(C)
|
:004738CE B930000000              mov ecx, 00000030

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004738CC(U)
|
:004738D3 8808                    mov byte ptr [eax], cl
:004738D5 40                      inc eax
:004738D6 4E                      dec esi
:004738D7 4B                      dec ebx
:004738D8 75E8                    jne 004738C2
:004738DA 8B4C241C                mov ecx, dword ptr [esp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004738BE(C)
|
:004738DE 85F6                    test esi, esi
:004738E0 C60000                  mov byte ptr [eax], 00
:004738E3 7C1C                    jl 00473901
:004738E5 803A35                  cmp byte ptr [edx], 35
:004738E8 7C17                    jl 00473901
:004738EA 8A50FF                  mov dl, byte ptr [eax-01]
:004738ED 48                      dec eax
:004738EE 80FA39                  cmp dl, 39
:004738F1 750C                    jne 004738FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004738FD(C)
|
:004738F3 C60030                  mov byte ptr [eax], 30
:004738F6 8A50FF                  mov dl, byte ptr [eax-01]
:004738F9 48                      dec eax
:004738FA 80FA39                  cmp dl, 39
:004738FD 74F4                    je 004738F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004738F1(C)
|
:004738FF FE00                    inc byte ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004738E3(C), :004738E8(C)
|
:00473901 807D0031                cmp byte ptr [ebp+00], 31
:00473905 7508                    jne 0047390F
:00473907 FF4104                  inc [ecx+04]
:0047390A 5F                      pop edi
:0047390B 5E                      pop esi
:0047390C 5D                      pop ebp
:0047390D 5B                      pop ebx
:0047390E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473905(C)
|
:0047390F 83C9FF                  or ecx, FFFFFFFF
:00473912 33C0                    xor eax, eax
:00473914 F2                      repnz
:00473915 AE                      scasb
:00473916 F7D1                    not ecx
:00473918 2BF9                    sub edi, ecx
:0047391A 8BC1                    mov eax, ecx
:0047391C 8BF7                    mov esi, edi
:0047391E 8BFD                    mov edi, ebp
:00473920 C1E902                  shr ecx, 02
:00473923 F3                      repz
:00473924 A5                      movsd
:00473925 8BC8                    mov ecx, eax
:00473927 83E103                  and ecx, 00000003
:0047392A F3                      repz
:0047392B A4                      movsb
:0047392C 5F                      pop edi
:0047392D 5E                      pop esi
:0047392E 5D                      pop ebp
:0047392F 5B                      pop ebx
:00473930 C3                      ret


:00473931 90                      nop
:00473932 90                      nop
:00473933 90                      nop
:00473934 90                      nop
:00473935 90                      nop
:00473936 90                      nop
:00473937 90                      nop
:00473938 90                      nop
:00473939 90                      nop
:0047393A 90                      nop
:0047393B 90                      nop
:0047393C 90                      nop
:0047393D 90                      nop
:0047393E 90                      nop
:0047393F 90                      nop

* Referenced by a CALL at Addresses:
|:00471124   , :00471267   , :0047132F   
|
:00473940 83EC0C                  sub esp, 0000000C
:00473943 8D442410                lea eax, dword ptr [esp+10]
:00473947 8D4C2400                lea ecx, dword ptr [esp]
:0047394B 50                      push eax
:0047394C 51                      push ecx
:0047394D E86E000000              call 004739C0
:00473952 83C408                  add esp, 00000008
:00473955 8B442400                mov eax, dword ptr [esp]
:00473959 8B4C2404                mov ecx, dword ptr [esp+04]
:0047395D 68A0654B00              push 004B65A0
:00473962 6A00                    push 00000000
:00473964 6A11                    push 00000011
:00473966 83EC0C                  sub esp, 0000000C
:00473969 8BD4                    mov edx, esp
:0047396B 8902                    mov dword ptr [edx], eax
:0047396D 668B442420              mov ax, word ptr [esp+20]
:00473972 894A04                  mov dword ptr [edx+04], ecx
:00473975 66894208                mov word ptr [edx+08], ax
:00473979 E882110000              call 00474B00
:0047397E 0FBE0DA2654B00          movsx ecx, byte ptr [004B65A2]
:00473985 0FBF15A0654B00          movsx edx, word ptr [004B65A0]
:0047398C A3C8654B00              mov dword ptr [004B65C8], eax
:00473991 83C418                  add esp, 00000018
:00473994 890DC0654B00            mov dword ptr [004B65C0], ecx
:0047399A 8915C4654B00            mov dword ptr [004B65C4], edx
:004739A0 C705CC654B00A4654B00    mov dword ptr [004B65CC], 004B65A4
:004739AA B8C0654B00              mov eax, 004B65C0
:004739AF 83C40C                  add esp, 0000000C
:004739B2 C3                      ret


:004739B3 90                      nop
:004739B4 90                      nop
:004739B5 90                      nop
:004739B6 90                      nop
:004739B7 90                      nop
:004739B8 90                      nop
:004739B9 90                      nop
:004739BA 90                      nop
:004739BB 90                      nop
:004739BC 90                      nop
:004739BD 90                      nop
:004739BE 90                      nop
:004739BF 90                      nop

* Referenced by a CALL at Address:
|:0047394D   
|
:004739C0 53                      push ebx
:004739C1 55                      push ebp
:004739C2 56                      push esi
:004739C3 8B742414                mov esi, dword ptr [esp+14]
:004739C7 57                      push edi
:004739C8 BB00000080              mov ebx, 80000000
:004739CD 668B4E06                mov cx, word ptr [esi+06]
:004739D1 8B5604                  mov edx, dword ptr [esi+04]
:004739D4 8BC1                    mov eax, ecx
:004739D6 8B3E                    mov edi, dword ptr [esi]
:004739D8 C1E804                  shr eax, 04
:004739DB 81E100800000            and ecx, 00008000
:004739E1 25FF070000              and eax, 000007FF
:004739E6 8BE9                    mov ebp, ecx
:004739E8 8BC8                    mov ecx, eax
:004739EA 81E2FFFF0F00            and edx, 000FFFFF
:004739F0 81E1FFFF0000            and ecx, 0000FFFF
:004739F6 7417                    je 00473A0F
:004739F8 81F9FF070000            cmp ecx, 000007FF
:004739FE 7408                    je 00473A08
:00473A00 8DB0003C0000            lea esi, dword ptr [eax+00003C00]
:00473A06 EB29                    jmp 00473A31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004739FE(C)
|
:00473A08 BEFF7F0000              mov esi, 00007FFF
:00473A0D EB22                    jmp 00473A31

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004739F6(C)
|
:00473A0F 33DB                    xor ebx, ebx
:00473A11 3BD3                    cmp edx, ebx
:00473A13 7516                    jne 00473A2B
:00473A15 3BFB                    cmp edi, ebx
:00473A17 7512                    jne 00473A2B
:00473A19 8B442414                mov eax, dword ptr [esp+14]
:00473A1D 895804                  mov dword ptr [eax+04], ebx
:00473A20 8918                    mov dword ptr [eax], ebx
:00473A22 66895808                mov word ptr [eax+08], bx
:00473A26 5F                      pop edi
:00473A27 5E                      pop esi
:00473A28 5D                      pop ebp
:00473A29 5B                      pop ebx
:00473A2A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473A13(C), :00473A17(C)
|
:00473A2B 8DB0013C0000            lea esi, dword ptr [eax+00003C01]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473A06(U), :00473A0D(U)
|
:00473A31 8B442414                mov eax, dword ptr [esp+14]
:00473A35 8BCF                    mov ecx, edi
:00473A37 C1E915                  shr ecx, 15
:00473A3A C1E20B                  shl edx, 0B
:00473A3D 0BCA                    or ecx, edx
:00473A3F 0BCB                    or ecx, ebx
:00473A41 C1E70B                  shl edi, 0B
:00473A44 F7C100000080            test ecx, 80000000
:00473A4A 894804                  mov dword ptr [eax+04], ecx
:00473A4D 8938                    mov dword ptr [eax], edi
:00473A4F 7522                    jne 00473A73

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473A71(C)
|
:00473A51 8B10                    mov edx, dword ptr [eax]
:00473A53 03C9                    add ecx, ecx
:00473A55 8BFA                    mov edi, edx
:00473A57 03D2                    add edx, edx
:00473A59 C1EF1F                  shr edi, 1F
:00473A5C 0BF9                    or edi, ecx
:00473A5E 81C6FFFF0000            add esi, 0000FFFF
:00473A64 8BCF                    mov ecx, edi
:00473A66 897804                  mov dword ptr [eax+04], edi
:00473A69 F7C100000080            test ecx, 80000000
:00473A6F 8910                    mov dword ptr [eax], edx
:00473A71 74DE                    je 00473A51

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473A4F(C)
|
:00473A73 0BF5                    or esi, ebp
:00473A75 5F                      pop edi
:00473A76 66897008                mov word ptr [eax+08], si
:00473A7A 5E                      pop esi
:00473A7B 5D                      pop ebp
:00473A7C 5B                      pop ebx
:00473A7D C3                      ret


:00473A7E 90                      nop
:00473A7F 90                      nop

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00473A80 6A02                    push 00000002
:00473A82 E8A9C4FFFF              call 0046FF30
:00473A87 83C404                  add esp, 00000004
:00473A8A C3                      ret


:00473A8B 90                      nop
:00473A8C 90                      nop
:00473A8D 90                      nop
:00473A8E 90                      nop
:00473A8F 90                      nop

* Referenced by a CALL at Address:
|:0047237A   
|
:00473A90 A1EC654B00              mov eax, dword ptr [004B65EC]
:00473A95 53                      push ebx
:00473A96 33DB                    xor ebx, ebx
:00473A98 56                      push esi
:00473A99 85C0                    test eax, eax
:00473A9B 57                      push edi
:00473A9C 7542                    jne 00473AE0
:00473A9E 6800B54700              push 0047B500

* Reference To: KERNEL32.LoadLibraryA, Ord:0190h
                                  |
:00473AA3 FF15ECD44B00            Call dword ptr [004BD4EC]
:00473AA9 8BF0                    mov esi, eax
:00473AAB 85F6                    test esi, esi
:00473AAD 746A                    je 00473B19

* Reference To: KERNEL32.GetProcAddress, Ord:0116h
                                  |
:00473AAF 8B3D6CD54B00            mov edi, dword ptr [004BD56C]
:00473AB5 68F4B44700              push 0047B4F4
:00473ABA 56                      push esi
:00473ABB FFD7                    call edi
:00473ABD 85C0                    test eax, eax
:00473ABF A3EC654B00              mov dword ptr [004B65EC], eax
:00473AC4 7453                    je 00473B19
:00473AC6 68E4B44700              push 0047B4E4
:00473ACB 56                      push esi
:00473ACC FFD7                    call edi
:00473ACE 68D0B44700              push 0047B4D0
:00473AD3 56                      push esi
:00473AD4 A3F0654B00              mov dword ptr [004B65F0], eax
:00473AD9 FFD7                    call edi
:00473ADB A3F4654B00              mov dword ptr [004B65F4], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473A9C(C)
|
:00473AE0 A1F0654B00              mov eax, dword ptr [004B65F0]
:00473AE5 85C0                    test eax, eax
:00473AE7 7404                    je 00473AED
:00473AE9 FFD0                    call eax
:00473AEB 8BD8                    mov ebx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473AE7(C)
|
:00473AED 85DB                    test ebx, ebx
:00473AEF 740E                    je 00473AFF
:00473AF1 A1F4654B00              mov eax, dword ptr [004B65F4]
:00473AF6 85C0                    test eax, eax
:00473AF8 7405                    je 00473AFF
:00473AFA 53                      push ebx
:00473AFB FFD0                    call eax
:00473AFD 8BD8                    mov ebx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473AEF(C), :00473AF8(C)
|
:00473AFF 8B442418                mov eax, dword ptr [esp+18]
:00473B03 8B4C2414                mov ecx, dword ptr [esp+14]
:00473B07 8B542410                mov edx, dword ptr [esp+10]
:00473B0B 50                      push eax
:00473B0C 51                      push ecx
:00473B0D 52                      push edx
:00473B0E 53                      push ebx
:00473B0F FF15EC654B00            call dword ptr [004B65EC]
:00473B15 5F                      pop edi
:00473B16 5E                      pop esi
:00473B17 5B                      pop ebx
:00473B18 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473AAD(C), :00473AC4(C)
|
:00473B19 5F                      pop edi
:00473B1A 5E                      pop esi
:00473B1B 33C0                    xor eax, eax
:00473B1D 5B                      pop ebx
:00473B1E C3                      ret


:00473B1F 90                      nop

* Referenced by a CALL at Address:
|:004722CC   
|
:00473B20 8B4C240C                mov ecx, dword ptr [esp+0C]
:00473B24 57                      push edi
:00473B25 85C9                    test ecx, ecx
:00473B27 747A                    je 00473BA3
:00473B29 56                      push esi
:00473B2A 53                      push ebx
:00473B2B 8BD9                    mov ebx, ecx
:00473B2D 8B742414                mov esi, dword ptr [esp+14]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00473B31 F7C603000000            test esi, 00000003
:00473B37 8B7C2410                mov edi, dword ptr [esp+10]
:00473B3B 7507                    jne 00473B44
:00473B3D C1E902                  shr ecx, 02
:00473B40 756F                    jne 00473BB1
:00473B42 EB21                    jmp 00473B65

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473B3B(C), :00473B57(C)
|
:00473B44 8A06                    mov al, byte ptr [esi]
:00473B46 46                      inc esi
:00473B47 8807                    mov byte ptr [edi], al
:00473B49 47                      inc edi
:00473B4A 49                      dec ecx
:00473B4B 7425                    je 00473B72
:00473B4D 84C0                    test al, al
:00473B4F 7429                    je 00473B7A

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00473B51 F7C603000000            test esi, 00000003
:00473B57 75EB                    jne 00473B44
:00473B59 8BD9                    mov ebx, ecx
:00473B5B C1E902                  shr ecx, 02
:00473B5E 7551                    jne 00473BB1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473BAF(C)
|
:00473B60 83E303                  and ebx, 00000003
:00473B63 740D                    je 00473B72

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473B42(U), :00473B70(C)
|
:00473B65 8A06                    mov al, byte ptr [esi]
:00473B67 46                      inc esi
:00473B68 8807                    mov byte ptr [edi], al
:00473B6A 47                      inc edi
:00473B6B 84C0                    test al, al
:00473B6D 742F                    je 00473B9E
:00473B6F 4B                      dec ebx
:00473B70 75F3                    jne 00473B65

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473B4B(C), :00473B63(C)
|
:00473B72 8B442410                mov eax, dword ptr [esp+10]
:00473B76 5B                      pop ebx
:00473B77 5E                      pop esi
:00473B78 5F                      pop edi
:00473B79 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473B4F(C)
|

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00473B7A F7C703000000            test edi, 00000003
:00473B80 7412                    je 00473B94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473B92(C)
|
:00473B82 8807                    mov byte ptr [edi], al
:00473B84 47                      inc edi
:00473B85 49                      dec ecx
:00473B86 0F848A000000            je 00473C16

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00473B8C F7C703000000            test edi, 00000003
:00473B92 75EE                    jne 00473B82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473B80(C)
|
:00473B94 8BD9                    mov ebx, ecx
:00473B96 C1E902                  shr ecx, 02
:00473B99 756C                    jne 00473C07

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473B9F(C), :00473C14(C)
|
:00473B9B 8807                    mov byte ptr [edi], al
:00473B9D 47                      inc edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473B6D(C)
|
:00473B9E 4B                      dec ebx
:00473B9F 75FA                    jne 00473B9B
:00473BA1 5B                      pop ebx
:00473BA2 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473B27(C)
|
:00473BA3 8B442408                mov eax, dword ptr [esp+08]
:00473BA7 5F                      pop edi
:00473BA8 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473BC9(C), :00473BE1(C)
|
:00473BA9 8917                    mov dword ptr [edi], edx
:00473BAB 83C704                  add edi, 00000004
:00473BAE 49                      dec ecx
:00473BAF 74AF                    je 00473B60

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473B40(C), :00473B5E(C)
|
:00473BB1 BAFFFEFE7E              mov edx, 7EFEFEFF
:00473BB6 8B06                    mov eax, dword ptr [esi]
:00473BB8 03D0                    add edx, eax
:00473BBA 83F0FF                  xor eax, FFFFFFFF
:00473BBD 33C2                    xor eax, edx
:00473BBF 8B16                    mov edx, dword ptr [esi]
:00473BC1 83C604                  add esi, 00000004
:00473BC4 A900010181              test eax, 81010100
:00473BC9 74DE                    je 00473BA9
:00473BCB 84D2                    test dl, dl
:00473BCD 742C                    je 00473BFB
:00473BCF 84F6                    test dh, dh
:00473BD1 741E                    je 00473BF1
:00473BD3 F7C20000FF00            test edx, 00FF0000
:00473BD9 740C                    je 00473BE7
:00473BDB F7C2000000FF            test edx, FF000000
:00473BE1 75C6                    jne 00473BA9
:00473BE3 8917                    mov dword ptr [edi], edx
:00473BE5 EB18                    jmp 00473BFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473BD9(C)
|
:00473BE7 81E2FFFF0000            and edx, 0000FFFF
:00473BED 8917                    mov dword ptr [edi], edx
:00473BEF EB0E                    jmp 00473BFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473BD1(C)
|
:00473BF1 81E2FF000000            and edx, 000000FF
:00473BF7 8917                    mov dword ptr [edi], edx
:00473BF9 EB04                    jmp 00473BFF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473BCD(C)
|
:00473BFB 33D2                    xor edx, edx
:00473BFD 8917                    mov dword ptr [edi], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473BE5(U), :00473BEF(U), :00473BF9(U)
|
:00473BFF 83C704                  add edi, 00000004
:00473C02 33C0                    xor eax, eax
:00473C04 49                      dec ecx
:00473C05 740A                    je 00473C11

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473B99(C)
|
:00473C07 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473C0F(C)
|
:00473C09 8907                    mov dword ptr [edi], eax
:00473C0B 83C704                  add edi, 00000004
:00473C0E 49                      dec ecx
:00473C0F 75F8                    jne 00473C09

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473C05(C)
|
:00473C11 83E303                  and ebx, 00000003
:00473C14 7585                    jne 00473B9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473B86(C)
|
:00473C16 8B442410                mov eax, dword ptr [esp+10]
:00473C1A 5B                      pop ebx
:00473C1B 5E                      pop esi
:00473C1C 5F                      pop edi
:00473C1D C3                      ret


:00473C1E CC                      int 03
:00473C1F CC                      int 03

* Referenced by a CALL at Address:
|:0047281C   
|
:00473C20 53                      push ebx
:00473C21 55                      push ebp
:00473C22 56                      push esi
:00473C23 57                      push edi
:00473C24 8B7C2414                mov edi, dword ptr [esp+14]
:00473C28 8D47FE                  lea eax, dword ptr [edi-02]
:00473C2B 83F814                  cmp eax, 00000014
:00473C2E 0F8727010000            ja 00473D5B
:00473C34 33C9                    xor ecx, ecx
:00473C36 8A88843D4700            mov cl, byte ptr [eax+00473D84]
:00473C3C FF248D643D4700          jmp dword ptr [4*ecx+00473D64]
:00473C43 8B1DF8654B00            mov ebx, dword ptr [004B65F8]
:00473C49 BEF8654B00              mov esi, 004B65F8
:00473C4E EB37                    jmp 00473C87
:00473C50 8B1DFC654B00            mov ebx, dword ptr [004B65FC]
:00473C56 BEFC654B00              mov esi, 004B65FC
:00473C5B EB2A                    jmp 00473C87
:00473C5D 8B1D00664B00            mov ebx, dword ptr [004B6600]
:00473C63 BE00664B00              mov esi, 004B6600
:00473C68 EB1D                    jmp 00473C87
:00473C6A 8B1D04664B00            mov ebx, dword ptr [004B6604]
:00473C70 BE04664B00              mov esi, 004B6604
:00473C75 EB10                    jmp 00473C87
:00473C77 57                      push edi
:00473C78 E823010000              call 00473DA0
:00473C7D 8BF0                    mov esi, eax
:00473C7F 83C404                  add esp, 00000004
:00473C82 83C608                  add esi, 00000008
:00473C85 8B1E                    mov ebx, dword ptr [esi]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473C4E(U), :00473C5B(U), :00473C68(U), :00473C75(U)
|
:00473C87 83FB01                  cmp ebx, 00000001
:00473C8A 7507                    jne 00473C93
:00473C8C 33C0                    xor eax, eax
:00473C8E 5F                      pop edi
:00473C8F 5E                      pop esi
:00473C90 5D                      pop ebp
:00473C91 5B                      pop ebx
:00473C92 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473C8A(C)
|
:00473C93 85DB                    test ebx, ebx
:00473C95 750A                    jne 00473CA1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00473C97 6A03                    push 00000003
:00473C99 E822D0FFFF              call 00470CC0
:00473C9E 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473C95(C)
|
:00473CA1 83FF08                  cmp edi, 00000008
:00473CA4 740A                    je 00473CB0
:00473CA6 83FF0B                  cmp edi, 0000000B
:00473CA9 7405                    je 00473CB0
:00473CAB 83FF04                  cmp edi, 00000004
:00473CAE 752B                    jne 00473CDB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473CA4(C), :00473CA9(C)
|
:00473CB0 8B2D54634B00            mov ebp, dword ptr [004B6354]
:00473CB6 83FF08                  cmp edi, 00000008
:00473CB9 C70554634B0000000000    mov dword ptr [004B6354], 00000000
:00473CC3 754B                    jne 00473D10
:00473CC5 8B1594244800            mov edx, dword ptr [00482494]
:00473CCB C705942448008C000000    mov dword ptr [00482494], 0000008C
:00473CD5 89542414                mov dword ptr [esp+14], edx
:00473CD9 EB04                    jmp 00473CDF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473CAE(C)
|
:00473CDB 8B6C2414                mov ebp, dword ptr [esp+14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473CD9(U)
|
:00473CDF 83FF08                  cmp edi, 00000008
:00473CE2 752C                    jne 00473D10
:00473CE4 8B1588244800            mov edx, dword ptr [00482488]
:00473CEA A18C244800              mov eax, dword ptr [0048248C]
:00473CEF 8D0C10                  lea ecx, dword ptr [eax+edx]
:00473CF2 3BD1                    cmp edx, ecx
:00473CF4 7D20                    jge 00473D16
:00473CF6 8D0452                  lea eax, dword ptr [edx+2*edx]
:00473CF9 2BCA                    sub ecx, edx
:00473CFB 8D048518244800          lea eax, dword ptr [4*eax+00482418]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473D0C(C)
|
:00473D02 C70000000000            mov dword ptr [eax], 00000000
:00473D08 83C00C                  add eax, 0000000C
:00473D0B 49                      dec ecx
:00473D0C 75F4                    jne 00473D02
:00473D0E EB06                    jmp 00473D16

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473CC3(C), :00473CE2(C)
|
:00473D10 C70600000000            mov dword ptr [esi], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473CF4(C), :00473D0E(U)
|
:00473D16 83FF08                  cmp edi, 00000008
:00473D19 750F                    jne 00473D2A
:00473D1B 8B0D94244800            mov ecx, dword ptr [00482494]
:00473D21 51                      push ecx
:00473D22 57                      push edi
:00473D23 FFD3                    call ebx
:00473D25 83C408                  add esp, 00000008
:00473D28 EB06                    jmp 00473D30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473D19(C)
|
:00473D2A 57                      push edi
:00473D2B FFD3                    call ebx
:00473D2D 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473D28(U)
|
:00473D30 83FF08                  cmp edi, 00000008
:00473D33 740A                    je 00473D3F
:00473D35 83FF0B                  cmp edi, 0000000B
:00473D38 7405                    je 00473D3F
:00473D3A 83FF04                  cmp edi, 00000004
:00473D3D 7515                    jne 00473D54

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473D33(C), :00473D38(C)
|
:00473D3F 83FF08                  cmp edi, 00000008
:00473D42 892D54634B00            mov dword ptr [004B6354], ebp
:00473D48 750A                    jne 00473D54
:00473D4A 8B542414                mov edx, dword ptr [esp+14]
:00473D4E 891594244800            mov dword ptr [00482494], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473D3D(C), :00473D48(C)
|
:00473D54 33C0                    xor eax, eax
:00473D56 5F                      pop edi
:00473D57 5E                      pop esi
:00473D58 5D                      pop ebp
:00473D59 5B                      pop ebx
:00473D5A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473C2E(C)
|
:00473D5B 5F                      pop edi
:00473D5C 5E                      pop esi
:00473D5D 5D                      pop ebp
:00473D5E 83C8FF                  or eax, FFFFFFFF
:00473D61 5B                      pop ebx
:00473D62 C3                      ret


:00473D63 90                      nop

:00473D64 433C4700                DWORD 00473C43
:00473D68 773C4700                DWORD 00473C77
:00473D6C 773C4700                DWORD 00473C77
:00473D70 773C4700                DWORD 00473C77
:00473D74 6A3C4700                DWORD 00473C6A
:00473D78 503C4700                DWORD 00473C50
:00473D7C 5D3C4700                DWORD 00473C5D
:00473D80 5B3D4700                DWORD 00473D5B


:00473D84 0007                    add byte ptr [edi], al
:00473D86 0107                    add dword ptr [edi], eax
:00473D88 07                      pop es
:00473D89 07                      pop es
:00473D8A 0207                    add al, byte ptr [edi]
:00473D8C 07                      pop es
:00473D8D 0307                    add eax, dword ptr [edi]
:00473D8F 07                      pop es
:00473D90 07                      pop es
:00473D91 0407                    add al, 07
:00473D93 07                      pop es
:00473D94 07                      pop es
:00473D95 07                      pop es
:00473D96 07                      pop es
:00473D97 0506909090              add eax, 90909006
:00473D9C 90                      nop
:00473D9D 90                      nop
:00473D9E 90                      nop
:00473D9F 90                      nop

* Referenced by a CALL at Address:
|:00473C78   
|
:00473DA0 8B542404                mov edx, dword ptr [esp+04]
:00473DA4 8B0D14244800            mov ecx, dword ptr [00482414]
:00473DAA 56                      push esi
:00473DAB 8B3590244800            mov esi, dword ptr [00482490]
:00473DB1 3BCA                    cmp ecx, edx

* Possible StringData Ref from Data Obj ->""
                                  |
:00473DB3 B810244800              mov eax, 00482410
:00473DB8 7416                    je 00473DD0
:00473DBA 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:00473DBD 8D0C8D10244800          lea ecx, dword ptr [4*ecx+00482410]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473DCE(C)
|
:00473DC4 83C00C                  add eax, 0000000C
:00473DC7 3BC1                    cmp eax, ecx
:00473DC9 7305                    jnb 00473DD0
:00473DCB 395004                  cmp dword ptr [eax+04], edx
:00473DCE 75F4                    jne 00473DC4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473DB8(C), :00473DC9(C)
|
:00473DD0 8D0C76                  lea ecx, dword ptr [esi+2*esi]
:00473DD3 8D0C8D10244800          lea ecx, dword ptr [4*ecx+00482410]
:00473DDA 3BC1                    cmp eax, ecx
:00473DDC 7305                    jnb 00473DE3
:00473DDE 395004                  cmp dword ptr [eax+04], edx
:00473DE1 7402                    je 00473DE5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473DDC(C)
|
:00473DE3 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473DE1(C)
|
:00473DE5 5E                      pop esi
:00473DE6 C3                      ret


:00473DE7 90                      nop
:00473DE8 90                      nop
:00473DE9 90                      nop
:00473DEA 90                      nop
:00473DEB 90                      nop
:00473DEC 90                      nop
:00473DED 90                      nop
:00473DEE 90                      nop
:00473DEF 90                      nop

* Referenced by a CALL at Address:
|:00473252   
|
:00473DF0 51                      push ecx
:00473DF1 A110664B00              mov eax, dword ptr [004B6610]
:00473DF6 53                      push ebx
:00473DF7 55                      push ebp
:00473DF8 56                      push esi

* Reference To: KERNEL32.GetStringTypeA, Ord:012Bh
                                  |
:00473DF9 8B3514D54B00            mov esi, dword ptr [004BD514]
:00473DFF 57                      push edi
:00473E00 33FF                    xor edi, edi
:00473E02 3BC7                    cmp eax, edi
:00473E04 7523                    jne 00473E29
:00473E06 8D442412                lea eax, dword ptr [esp+12]
:00473E0A 50                      push eax
:00473E0B 6A01                    push 00000001
:00473E0D 680CB54700              push 0047B50C
:00473E12 6A01                    push 00000001
:00473E14 57                      push edi
:00473E15 FFD6                    call esi
:00473E17 85C0                    test eax, eax
:00473E19 0F84CF000000            je 00473EEE

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00473E1F B802000000              mov eax, 00000002
:00473E24 A310664B00              mov dword ptr [004B6610], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473E04(C), :00473F10(U)
|
:00473E29 83F802                  cmp eax, 00000002
:00473E2C 752A                    jne 00473E58
:00473E2E 8B44242C                mov eax, dword ptr [esp+2C]
:00473E32 3BC7                    cmp eax, edi
:00473E34 7505                    jne 00473E3B
:00473E36 A1D8654B00              mov eax, dword ptr [004B65D8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473E34(C)
|
:00473E3B 8B542424                mov edx, dword ptr [esp+24]
:00473E3F 8B4C2420                mov ecx, dword ptr [esp+20]
:00473E43 52                      push edx
:00473E44 8B542420                mov edx, dword ptr [esp+20]
:00473E48 51                      push ecx
:00473E49 8B4C2420                mov ecx, dword ptr [esp+20]
:00473E4D 52                      push edx
:00473E4E 51                      push ecx
:00473E4F 50                      push eax
:00473E50 FFD6                    call esi
:00473E52 5F                      pop edi
:00473E53 5E                      pop esi
:00473E54 5D                      pop ebp
:00473E55 5B                      pop ebx
:00473E56 59                      pop ecx
:00473E57 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473E2C(C)
|
:00473E58 83F801                  cmp eax, 00000001
:00473E5B 0F8587000000            jne 00473EE8
:00473E61 8B5C2428                mov ebx, dword ptr [esp+28]
:00473E65 897C242C                mov dword ptr [esp+2C], edi
:00473E69 3BDF                    cmp ebx, edi
:00473E6B 7506                    jne 00473E73
:00473E6D 8B1DE8654B00            mov ebx, dword ptr [004B65E8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473E6B(C)
|
:00473E73 8B6C2420                mov ebp, dword ptr [esp+20]
:00473E77 8B54241C                mov edx, dword ptr [esp+1C]
:00473E7B 57                      push edi
:00473E7C 57                      push edi
:00473E7D 55                      push ebp
:00473E7E 52                      push edx

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00473E7F 6A09                    push 00000009
:00473E81 53                      push ebx

* Reference To: KERNEL32.MultiByteToWideChar, Ord:01ABh
                                  |
:00473E82 FF1568D54B00            Call dword ptr [004BD568]
:00473E88 8BF0                    mov esi, eax
:00473E8A 85F6                    test esi, esi
:00473E8C 744B                    je 00473ED9
:00473E8E 56                      push esi

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00473E8F 6A02                    push 00000002
:00473E91 E8FA0F0000              call 00474E90
:00473E96 8BF8                    mov edi, eax
:00473E98 83C408                  add esp, 00000008
:00473E9B 85FF                    test edi, edi
:00473E9D 743A                    je 00473ED9
:00473E9F 8B44241C                mov eax, dword ptr [esp+1C]
:00473EA3 56                      push esi
:00473EA4 57                      push edi
:00473EA5 55                      push ebp
:00473EA6 50                      push eax
:00473EA7 6A01                    push 00000001
:00473EA9 53                      push ebx

* Reference To: KERNEL32.MultiByteToWideChar, Ord:01ABh
                                  |
:00473EAA FF1568D54B00            Call dword ptr [004BD568]
:00473EB0 85C0                    test eax, eax
:00473EB2 7425                    je 00473ED9
:00473EB4 8B4C2424                mov ecx, dword ptr [esp+24]
:00473EB8 8B542418                mov edx, dword ptr [esp+18]
:00473EBC 51                      push ecx
:00473EBD 50                      push eax
:00473EBE 57                      push edi
:00473EBF 52                      push edx

* Reference To: KERNEL32.GetStringTypeW, Ord:012Eh
                                  |
:00473EC0 FF150CD54B00            Call dword ptr [004BD50C]
:00473EC6 57                      push edi
:00473EC7 8BF0                    mov esi, eax
:00473EC9 E8D2CFFFFF              call 00470EA0
:00473ECE 83C404                  add esp, 00000004
:00473ED1 8BC6                    mov eax, esi
:00473ED3 5F                      pop edi
:00473ED4 5E                      pop esi
:00473ED5 5D                      pop ebp
:00473ED6 5B                      pop ebx
:00473ED7 59                      pop ecx
:00473ED8 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00473E8C(C), :00473E9D(C), :00473EB2(C)
|
:00473ED9 8B74242C                mov esi, dword ptr [esp+2C]
:00473EDD 57                      push edi
:00473EDE E8BDCFFFFF              call 00470EA0
:00473EE3 83C404                  add esp, 00000004
:00473EE6 8BC6                    mov eax, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473E5B(C)
|
:00473EE8 5F                      pop edi
:00473EE9 5E                      pop esi
:00473EEA 5D                      pop ebp
:00473EEB 5B                      pop ebx
:00473EEC 59                      pop ecx
:00473EED C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473E19(C)
|
:00473EEE 8D4C2412                lea ecx, dword ptr [esp+12]
:00473EF2 51                      push ecx
:00473EF3 6A01                    push 00000001
:00473EF5 6810B54700              push 0047B510
:00473EFA 6A01                    push 00000001

* Reference To: KERNEL32.GetStringTypeW, Ord:012Eh
                                  |
:00473EFC FF150CD54B00            Call dword ptr [004BD50C]
:00473F02 85C0                    test eax, eax
:00473F04 740F                    je 00473F15
:00473F06 B801000000              mov eax, 00000001
:00473F0B A310664B00              mov dword ptr [004B6610], eax
:00473F10 E914FFFFFF              jmp 00473E29

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473F04(C)
|
:00473F15 5F                      pop edi
:00473F16 5E                      pop esi
:00473F17 5D                      pop ebp
:00473F18 33C0                    xor eax, eax
:00473F1A 5B                      pop ebx
:00473F1B 59                      pop ecx
:00473F1C C3                      ret


:00473F1D 90                      nop
:00473F1E 90                      nop
:00473F1F 90                      nop

* Referenced by a CALL at Address:
|:00473339   
|
:00473F20 A118664B00              mov eax, dword ptr [004B6618]
:00473F25 53                      push ebx

* Reference To: KERNEL32.LCMapStringA, Ord:018Dh
                                  |
:00473F26 8B1D08D54B00            mov ebx, dword ptr [004BD508]
:00473F2C 55                      push ebp
:00473F2D 56                      push esi
:00473F2E 57                      push edi
:00473F2F 85C0                    test eax, eax
:00473F31 7549                    jne 00473F7C
:00473F33 6A00                    push 00000000
:00473F35 6A00                    push 00000000
:00473F37 6A01                    push 00000001
:00473F39 680CB54700              push 0047B50C
:00473F3E 6800010000              push 00000100
:00473F43 6A00                    push 00000000
:00473F45 FFD3                    call ebx
:00473F47 85C0                    test eax, eax
:00473F49 7407                    je 00473F52

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00473F4B B802000000              mov eax, 00000002
:00473F50 EB25                    jmp 00473F77

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473F49(C)
|
:00473F52 6A00                    push 00000000
:00473F54 6A00                    push 00000000
:00473F56 6A01                    push 00000001
:00473F58 6810B54700              push 0047B510
:00473F5D 6800010000              push 00000100
:00473F62 6A00                    push 00000000

* Reference To: KERNEL32.LCMapStringW, Ord:018Eh
                                  |
:00473F64 FF1510D54B00            Call dword ptr [004BD510]
:00473F6A 85C0                    test eax, eax
:00473F6C 0F84C3010000            je 00474135
:00473F72 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473F50(U)
|
:00473F77 A318664B00              mov dword ptr [004B6618], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473F31(C)
|
:00473F7C 8B742420                mov esi, dword ptr [esp+20]
:00473F80 85F6                    test esi, esi
:00473F82 7E17                    jle 00473F9B
:00473F84 8B7C241C                mov edi, dword ptr [esp+1C]
:00473F88 56                      push esi
:00473F89 57                      push edi
:00473F8A E8B1010000              call 00474140
:00473F8F 8BF0                    mov esi, eax
:00473F91 A118664B00              mov eax, dword ptr [004B6618]
:00473F96 83C408                  add esp, 00000008
:00473F99 EB04                    jmp 00473F9F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473F82(C)
|
:00473F9B 8B7C241C                mov edi, dword ptr [esp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473F99(U)
|
:00473F9F 83F802                  cmp eax, 00000002
:00473FA2 751D                    jne 00473FC1
:00473FA4 8B442428                mov eax, dword ptr [esp+28]
:00473FA8 8B4C2424                mov ecx, dword ptr [esp+24]
:00473FAC 8B542418                mov edx, dword ptr [esp+18]
:00473FB0 50                      push eax
:00473FB1 8B442418                mov eax, dword ptr [esp+18]
:00473FB5 51                      push ecx
:00473FB6 56                      push esi
:00473FB7 57                      push edi
:00473FB8 52                      push edx
:00473FB9 50                      push eax
:00473FBA FFD3                    call ebx
:00473FBC 5F                      pop edi
:00473FBD 5E                      pop esi
:00473FBE 5D                      pop ebp
:00473FBF 5B                      pop ebx
:00473FC0 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473FA2(C)
|
:00473FC1 83F801                  cmp eax, 00000001
:00473FC4 0F85D2000000            jne 0047409C
:00473FCA 8B6C242C                mov ebp, dword ptr [esp+2C]
:00473FCE C744242000000000        mov [esp+20], 00000000
:00473FD6 85ED                    test ebp, ebp
:00473FD8 750C                    jne 00473FE6
:00473FDA 8B0DE8654B00            mov ecx, dword ptr [004B65E8]
:00473FE0 894C242C                mov dword ptr [esp+2C], ecx
:00473FE4 8BE9                    mov ebp, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473FD8(C)
|
:00473FE6 6A00                    push 00000000
:00473FE8 6A00                    push 00000000
:00473FEA 56                      push esi
:00473FEB 57                      push edi

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00473FEC 6A09                    push 00000009
:00473FEE 55                      push ebp

* Reference To: KERNEL32.MultiByteToWideChar, Ord:01ABh
                                  |
:00473FEF FF1568D54B00            Call dword ptr [004BD568]
:00473FF5 8BF8                    mov edi, eax
:00473FF7 85FF                    test edi, edi
:00473FF9 7505                    jne 00474000
:00473FFB 5F                      pop edi
:00473FFC 5E                      pop esi
:00473FFD 5D                      pop ebp
:00473FFE 5B                      pop ebx
:00473FFF C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473FF9(C)
|
:00474000 8D143F                  lea edx, dword ptr [edi+edi]
:00474003 52                      push edx
:00474004 E8E7CDFFFF              call 00470DF0
:00474009 8BD8                    mov ebx, eax
:0047400B 83C404                  add esp, 00000004
:0047400E 85DB                    test ebx, ebx
:00474010 7505                    jne 00474017
:00474012 5F                      pop edi
:00474013 5E                      pop esi
:00474014 5D                      pop ebp
:00474015 5B                      pop ebx
:00474016 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474010(C)
|
:00474017 8B44241C                mov eax, dword ptr [esp+1C]
:0047401B 57                      push edi
:0047401C 53                      push ebx
:0047401D 56                      push esi
:0047401E 50                      push eax
:0047401F 6A01                    push 00000001
:00474021 55                      push ebp

* Reference To: KERNEL32.MultiByteToWideChar, Ord:01ABh
                                  |
:00474022 FF1568D54B00            Call dword ptr [004BD568]
:00474028 85C0                    test eax, eax
:0047402A 0F84EF000000            je 0047411F
:00474030 8B6C2418                mov ebp, dword ptr [esp+18]
:00474034 8B4C2414                mov ecx, dword ptr [esp+14]
:00474038 6A00                    push 00000000
:0047403A 6A00                    push 00000000
:0047403C 57                      push edi
:0047403D 53                      push ebx
:0047403E 55                      push ebp
:0047403F 51                      push ecx

* Reference To: KERNEL32.LCMapStringW, Ord:018Eh
                                  |
:00474040 FF1510D54B00            Call dword ptr [004BD510]
:00474046 8BF0                    mov esi, eax
:00474048 85F6                    test esi, esi
:0047404A 0F84CF000000            je 0047411F

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:00474050 F7C500040000            test ebp, 00000400
:00474056 7449                    je 004740A1
:00474058 8B442428                mov eax, dword ptr [esp+28]
:0047405C 85C0                    test eax, eax
:0047405E 7424                    je 00474084
:00474060 3BF0                    cmp esi, eax
:00474062 0F8FB7000000            jg 0047411F
:00474068 8B542424                mov edx, dword ptr [esp+24]
:0047406C 50                      push eax
:0047406D 8B442418                mov eax, dword ptr [esp+18]
:00474071 52                      push edx
:00474072 57                      push edi
:00474073 53                      push ebx
:00474074 55                      push ebp
:00474075 50                      push eax

* Reference To: KERNEL32.LCMapStringW, Ord:018Eh
                                  |
:00474076 FF1510D54B00            Call dword ptr [004BD510]
:0047407C 85C0                    test eax, eax
:0047407E 0F849B000000            je 0047411F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047405E(C), :004740F7(U), :00474119(C)
|
:00474084 53                      push ebx
:00474085 E816CEFFFF              call 00470EA0
:0047408A 8B4C2424                mov ecx, dword ptr [esp+24]
:0047408E 83C404                  add esp, 00000004
:00474091 51                      push ecx
:00474092 E809CEFFFF              call 00470EA0
:00474097 83C404                  add esp, 00000004
:0047409A 8BC6                    mov eax, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473FC4(C)
|
:0047409C 5F                      pop edi
:0047409D 5E                      pop esi
:0047409E 5D                      pop ebp
:0047409F 5B                      pop ebx
:004740A0 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474056(C)
|
:004740A1 8D0C36                  lea ecx, dword ptr [esi+esi]
:004740A4 51                      push ecx
:004740A5 E846CDFFFF              call 00470DF0
:004740AA 83C404                  add esp, 00000004
:004740AD 89442420                mov dword ptr [esp+20], eax
:004740B1 85C0                    test eax, eax
:004740B3 746A                    je 0047411F
:004740B5 8BD0                    mov edx, eax
:004740B7 8B442414                mov eax, dword ptr [esp+14]
:004740BB 56                      push esi
:004740BC 52                      push edx
:004740BD 57                      push edi
:004740BE 53                      push ebx
:004740BF 55                      push ebp
:004740C0 50                      push eax

* Reference To: KERNEL32.LCMapStringW, Ord:018Eh
                                  |
:004740C1 FF1510D54B00            Call dword ptr [004BD510]
:004740C7 85C0                    test eax, eax
:004740C9 7454                    je 0047411F
:004740CB 8B442428                mov eax, dword ptr [esp+28]
:004740CF 6A00                    push 00000000
:004740D1 85C0                    test eax, eax
:004740D3 6A00                    push 00000000
:004740D5 7522                    jne 004740F9
:004740D7 8B4C2428                mov ecx, dword ptr [esp+28]
:004740DB 8B542434                mov edx, dword ptr [esp+34]
:004740DF 6A00                    push 00000000
:004740E1 6A00                    push 00000000
:004740E3 56                      push esi
:004740E4 51                      push ecx
:004740E5 6820020000              push 00000220
:004740EA 52                      push edx

* Reference To: KERNEL32.WideCharToMultiByte, Ord:026Eh
                                  |
:004740EB FF154CD54B00            Call dword ptr [004BD54C]
:004740F1 8BF0                    mov esi, eax
:004740F3 85F6                    test esi, esi
:004740F5 7428                    je 0047411F
:004740F7 EB8B                    jmp 00474084

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004740D5(C)
|
:004740F9 8B4C2428                mov ecx, dword ptr [esp+28]
:004740FD 8B542434                mov edx, dword ptr [esp+34]
:00474101 50                      push eax
:00474102 8B442430                mov eax, dword ptr [esp+30]
:00474106 50                      push eax
:00474107 56                      push esi
:00474108 51                      push ecx
:00474109 6820020000              push 00000220
:0047410E 52                      push edx

* Reference To: KERNEL32.WideCharToMultiByte, Ord:026Eh
                                  |
:0047410F FF154CD54B00            Call dword ptr [004BD54C]
:00474115 8BF0                    mov esi, eax
:00474117 85F6                    test esi, esi
:00474119 0F8565FFFFFF            jne 00474084

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047402A(C), :0047404A(C), :00474062(C), :0047407E(C), :004740B3(C)
|:004740C9(C), :004740F5(C)
|
:0047411F 53                      push ebx
:00474120 E87BCDFFFF              call 00470EA0
:00474125 8B442424                mov eax, dword ptr [esp+24]
:00474129 83C404                  add esp, 00000004
:0047412C 50                      push eax
:0047412D E86ECDFFFF              call 00470EA0
:00474132 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00473F6C(C)
|
:00474135 5F                      pop edi
:00474136 5E                      pop esi
:00474137 5D                      pop ebp
:00474138 33C0                    xor eax, eax
:0047413A 5B                      pop ebx
:0047413B C3                      ret


:0047413C 90                      nop
:0047413D 90                      nop
:0047413E 90                      nop
:0047413F 90                      nop

* Referenced by a CALL at Address:
|:00473F8A   
|
:00474140 8B542408                mov edx, dword ptr [esp+08]
:00474144 56                      push esi
:00474145 8B742408                mov esi, dword ptr [esp+08]
:00474149 85D2                    test edx, edx
:0047414B 57                      push edi
:0047414C 8BC6                    mov eax, esi
:0047414E 8D4AFF                  lea ecx, dword ptr [edx-01]
:00474151 740D                    je 00474160

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047415E(C)
|
:00474153 803800                  cmp byte ptr [eax], 00
:00474156 7408                    je 00474160
:00474158 40                      inc eax
:00474159 8BF9                    mov edi, ecx
:0047415B 49                      dec ecx
:0047415C 85FF                    test edi, edi
:0047415E 75F3                    jne 00474153

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474151(C), :00474156(C)
|
:00474160 803800                  cmp byte ptr [eax], 00
:00474163 7505                    jne 0047416A
:00474165 2BC6                    sub eax, esi
:00474167 5F                      pop edi
:00474168 5E                      pop esi
:00474169 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474163(C)
|
:0047416A 5F                      pop edi
:0047416B 5E                      pop esi
:0047416C 8BC2                    mov eax, edx
:0047416E C3                      ret


:0047416F 90                      nop

* Referenced by a CALL at Addresses:
|:0047342D   , :00473445   , :004741B1   , :004741C7   , :004741E2   
|:004741FD   , :00475045   
|
:00474170 8B542404                mov edx, dword ptr [esp+04]
:00474174 56                      push esi
:00474175 8B74240C                mov esi, dword ptr [esp+0C]
:00474179 33C0                    xor eax, eax
:0047417B 8D0C16                  lea ecx, dword ptr [esi+edx]
:0047417E 3BCA                    cmp ecx, edx
:00474180 7204                    jb 00474186
:00474182 3BCE                    cmp ecx, esi
:00474184 7305                    jnb 0047418B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474180(C)
|
:00474186 B801000000              mov eax, 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474184(C)
|
:0047418B 8B542410                mov edx, dword ptr [esp+10]
:0047418F 5E                      pop esi
:00474190 890A                    mov dword ptr [edx], ecx
:00474192 C3                      ret


:00474193 90                      nop
:00474194 90                      nop
:00474195 90                      nop
:00474196 90                      nop
:00474197 90                      nop
:00474198 90                      nop
:00474199 90                      nop
:0047419A 90                      nop
:0047419B 90                      nop
:0047419C 90                      nop
:0047419D 90                      nop
:0047419E 90                      nop
:0047419F 90                      nop

* Referenced by a CALL at Addresses:
|:004742C8   , :004742EE   , :00474DCA   
|
:004741A0 56                      push esi
:004741A1 8B742408                mov esi, dword ptr [esp+08]
:004741A5 57                      push edi
:004741A6 8B7C2410                mov edi, dword ptr [esp+10]
:004741AA 8B0E                    mov ecx, dword ptr [esi]
:004741AC 56                      push esi
:004741AD 8B07                    mov eax, dword ptr [edi]
:004741AF 50                      push eax
:004741B0 51                      push ecx
:004741B1 E8BAFFFFFF              call 00474170
:004741B6 83C40C                  add esp, 0000000C
:004741B9 85C0                    test eax, eax
:004741BB 7419                    je 004741D6
:004741BD 8B5604                  mov edx, dword ptr [esi+04]
:004741C0 8D4604                  lea eax, dword ptr [esi+04]
:004741C3 50                      push eax
:004741C4 6A01                    push 00000001
:004741C6 52                      push edx
:004741C7 E8A4FFFFFF              call 00474170
:004741CC 83C40C                  add esp, 0000000C
:004741CF 85C0                    test eax, eax
:004741D1 7403                    je 004741D6
:004741D3 FF4608                  inc [esi+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004741BB(C), :004741D1(C)
|
:004741D6 8B4F04                  mov ecx, dword ptr [edi+04]
:004741D9 8B5604                  mov edx, dword ptr [esi+04]
:004741DC 8D4604                  lea eax, dword ptr [esi+04]
:004741DF 50                      push eax
:004741E0 51                      push ecx
:004741E1 52                      push edx
:004741E2 E889FFFFFF              call 00474170
:004741E7 83C40C                  add esp, 0000000C
:004741EA 85C0                    test eax, eax
:004741EC 7403                    je 004741F1
:004741EE FF4608                  inc [esi+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004741EC(C)
|
:004741F1 8B4F08                  mov ecx, dword ptr [edi+08]
:004741F4 8B5608                  mov edx, dword ptr [esi+08]
:004741F7 8D4608                  lea eax, dword ptr [esi+08]
:004741FA 50                      push eax
:004741FB 51                      push ecx
:004741FC 52                      push edx
:004741FD E86EFFFFFF              call 00474170
:00474202 83C40C                  add esp, 0000000C
:00474205 5F                      pop edi
:00474206 5E                      pop esi
:00474207 C3                      ret


:00474208 90                      nop
:00474209 90                      nop
:0047420A 90                      nop
:0047420B 90                      nop
:0047420C 90                      nop
:0047420D 90                      nop
:0047420E 90                      nop
:0047420F 90                      nop

* Referenced by a CALL at Addresses:
|:004742B1   , :004742BA   , :004742D1   , :00474340   , :00474D59   
|:00474DAB   , :00474DB8   , :00474DD7   , :004750B1   
|
:00474210 8B442404                mov eax, dword ptr [esp+04]
:00474214 56                      push esi
:00474215 57                      push edi
:00474216 8B30                    mov esi, dword ptr [eax]
:00474218 8B7804                  mov edi, dword ptr [eax+04]
:0047421B 8BCE                    mov ecx, esi
:0047421D 03F6                    add esi, esi
:0047421F 8930                    mov dword ptr [eax], esi
:00474221 8D343F                  lea esi, dword ptr [edi+edi]
:00474224 C1E91F                  shr ecx, 1F
:00474227 0BF1                    or esi, ecx
:00474229 8B4808                  mov ecx, dword ptr [eax+08]
:0047422C 8BD7                    mov edx, edi
:0047422E 897004                  mov dword ptr [eax+04], esi
:00474231 C1EA1F                  shr edx, 1F
:00474234 D1E1                    shl ecx, 1
:00474236 0BCA                    or ecx, edx
:00474238 5F                      pop edi
:00474239 894808                  mov dword ptr [eax+08], ecx
:0047423C 5E                      pop esi
:0047423D C3                      ret


:0047423E 90                      nop
:0047423F 90                      nop

* Referenced by a CALL at Addresses:
|:00474D77   , :00475104   
|
:00474240 8B442404                mov eax, dword ptr [esp+04]
:00474244 56                      push esi
:00474245 57                      push edi
:00474246 8B5008                  mov edx, dword ptr [eax+08]
:00474249 8B4804                  mov ecx, dword ptr [eax+04]
:0047424C 8BF2                    mov esi, edx
:0047424E 8BF9                    mov edi, ecx
:00474250 C1E61F                  shl esi, 1F
:00474253 D1E9                    shr ecx, 1
:00474255 0BCE                    or ecx, esi
:00474257 894804                  mov dword ptr [eax+04], ecx
:0047425A 8B08                    mov ecx, dword ptr [eax]
:0047425C C1E71F                  shl edi, 1F
:0047425F D1E9                    shr ecx, 1
:00474261 D1EA                    shr edx, 1
:00474263 0BCF                    or ecx, edi
:00474265 5F                      pop edi
:00474266 895008                  mov dword ptr [eax+08], edx
:00474269 8908                    mov dword ptr [eax], ecx
:0047426B 5E                      pop esi
:0047426C C3                      ret


:0047426D 90                      nop
:0047426E 90                      nop
:0047426F 90                      nop

* Referenced by a CALL at Address:
|:004748B7   
|
:00474270 8B442408                mov eax, dword ptr [esp+08]
:00474274 83EC0C                  sub esp, 0000000C
:00474277 53                      push ebx
:00474278 55                      push ebp
:00474279 56                      push esi
:0047427A 8B742424                mov esi, dword ptr [esp+24]
:0047427E 33ED                    xor ebp, ebp
:00474280 57                      push edi
:00474281 3BC5                    cmp eax, ebp
:00474283 BF4E400000              mov edi, 0000404E
:00474288 892E                    mov dword ptr [esi], ebp
:0047428A 896E04                  mov dword ptr [esi+04], ebp
:0047428D 896E08                  mov dword ptr [esi+08], ebp
:00474290 7670                    jbe 00474302
:00474292 8B5C2420                mov ebx, dword ptr [esp+20]
:00474296 89442428                mov dword ptr [esp+28], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474300(C)
|
:0047429A 8BC6                    mov eax, esi
:0047429C 56                      push esi
:0047429D 8B08                    mov ecx, dword ptr [eax]
:0047429F 894C2414                mov dword ptr [esp+14], ecx
:004742A3 8B5004                  mov edx, dword ptr [eax+04]
:004742A6 89542418                mov dword ptr [esp+18], edx
:004742AA 8B4008                  mov eax, dword ptr [eax+08]
:004742AD 8944241C                mov dword ptr [esp+1C], eax
:004742B1 E85AFFFFFF              call 00474210
:004742B6 83C404                  add esp, 00000004
:004742B9 56                      push esi
:004742BA E851FFFFFF              call 00474210
:004742BF 83C404                  add esp, 00000004
:004742C2 8D4C2410                lea ecx, dword ptr [esp+10]
:004742C6 51                      push ecx
:004742C7 56                      push esi
:004742C8 E8D3FEFFFF              call 004741A0
:004742CD 83C408                  add esp, 00000008
:004742D0 56                      push esi
:004742D1 E83AFFFFFF              call 00474210
:004742D6 0FBE13                  movsx edx, byte ptr [ebx]
:004742D9 83C404                  add esp, 00000004
:004742DC 8D442410                lea eax, dword ptr [esp+10]
:004742E0 89542410                mov dword ptr [esp+10], edx
:004742E4 896C2414                mov dword ptr [esp+14], ebp
:004742E8 50                      push eax
:004742E9 56                      push esi
:004742EA 896C2420                mov dword ptr [esp+20], ebp
:004742EE E8ADFEFFFF              call 004741A0
:004742F3 8B442430                mov eax, dword ptr [esp+30]
:004742F7 83C408                  add esp, 00000008
:004742FA 43                      inc ebx
:004742FB 48                      dec eax
:004742FC 89442428                mov dword ptr [esp+28], eax
:00474300 7598                    jne 0047429A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474290(C)
|
:00474302 396E08                  cmp dword ptr [esi+08], ebp
:00474305 752C                    jne 00474333

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474331(C)
|
:00474307 8B4604                  mov eax, dword ptr [esi+04]
:0047430A 81C7F0FF0000            add edi, 0000FFF0
:00474310 8BC8                    mov ecx, eax
:00474312 C1E910                  shr ecx, 10
:00474315 894E08                  mov dword ptr [esi+08], ecx
:00474318 8B0E                    mov ecx, dword ptr [esi]
:0047431A 8BD1                    mov edx, ecx
:0047431C C1EA10                  shr edx, 10
:0047431F C1E010                  shl eax, 10
:00474322 0BD0                    or edx, eax
:00474324 8B4608                  mov eax, dword ptr [esi+08]
:00474327 C1E110                  shl ecx, 10
:0047432A 3BC5                    cmp eax, ebp
:0047432C 895604                  mov dword ptr [esi+04], edx
:0047432F 890E                    mov dword ptr [esi], ecx
:00474331 74D4                    je 00474307

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474305(C)
|
:00474333 8B4608                  mov eax, dword ptr [esi+08]
:00474336 BB00800000              mov ebx, 00008000
:0047433B 85C3                    test ebx, eax
:0047433D 7516                    jne 00474355

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474353(C)
|
:0047433F 56                      push esi
:00474340 E8CBFEFFFF              call 00474210
:00474345 8B4608                  mov eax, dword ptr [esi+08]
:00474348 83C404                  add esp, 00000004
:0047434B 81C7FFFF0000            add edi, 0000FFFF
:00474351 85C3                    test ebx, eax
:00474353 74EA                    je 0047433F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047433D(C)
|
:00474355 66897E0A                mov word ptr [esi+0A], di
:00474359 5F                      pop edi
:0047435A 5E                      pop esi
:0047435B 5D                      pop ebp
:0047435C 5B                      pop ebx
:0047435D 83C40C                  add esp, 0000000C
:00474360 C3                      ret


:00474361 90                      nop
:00474362 90                      nop
:00474363 90                      nop
:00474364 90                      nop
:00474365 90                      nop
:00474366 90                      nop
:00474367 90                      nop
:00474368 90                      nop
:00474369 90                      nop
:0047436A 90                      nop
:0047436B 90                      nop
:0047436C 90                      nop
:0047436D 90                      nop
:0047436E 90                      nop
:0047436F 90                      nop

* Referenced by a CALL at Addresses:
|:0047383A   , :0047387A   
|
:00474370 83EC60                  sub esp, 00000060
:00474373 8B4C246C                mov ecx, dword ptr [esp+6C]
:00474377 53                      push ebx
:00474378 8D442448                lea eax, dword ptr [esp+48]
:0047437C 55                      push ebp
:0047437D 56                      push esi
:0047437E 89442410                mov dword ptr [esp+10], eax
:00474382 57                      push edi
:00474383 33C0                    xor eax, eax
:00474385 33F6                    xor esi, esi
:00474387 33D2                    xor edx, edx
:00474389 8BF9                    mov edi, ecx
:0047438B 89442434                mov dword ptr [esp+34], eax
:0047438F C744242401000000        mov [esp+24], 00000001
:00474397 8974241C                mov dword ptr [esp+1C], esi
:0047439B 89442418                mov dword ptr [esp+18], eax
:0047439F 89442430                mov dword ptr [esp+30], eax
:004743A3 8944242C                mov dword ptr [esp+2C], eax
:004743A7 89442438                mov dword ptr [esp+38], eax
:004743AB 8944243C                mov dword ptr [esp+3C], eax
:004743AF 89442428                mov dword ptr [esp+28], eax
:004743B3 89542410                mov dword ptr [esp+10], edx
:004743B7 89442440                mov dword ptr [esp+40], eax
:004743BB 8BE9                    mov ebp, ecx
:004743BD 897C2420                mov dword ptr [esp+20], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004743D9(U)
|
:004743C1 8A4D00                  mov cl, byte ptr [ebp+00]
:004743C4 80F920                  cmp cl, 20
:004743C7 740F                    je 004743D8
:004743C9 80F909                  cmp cl, 09
:004743CC 740A                    je 004743D8
:004743CE 80F90A                  cmp cl, 0A
:004743D1 7405                    je 004743D8
:004743D3 80F90D                  cmp cl, 0D
:004743D6 7503                    jne 004743DB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004743C7(C), :004743CC(C), :004743D1(C)
|
:004743D8 45                      inc ebp
:004743D9 EBE6                    jmp 004743C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004743D6(C)
|
:004743DB B901000000              mov ecx, 00000001
:004743E0 EB04                    jmp 004743E6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474846(C)
|
:004743E2 8B542410                mov edx, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004743E0(U)
|
:004743E6 8A5D00                  mov bl, byte ptr [ebp+00]
:004743E9 45                      inc ebp
:004743EA 83F80B                  cmp eax, 0000000B
:004743ED 885C247C                mov byte ptr [esp+7C], bl
:004743F1 0F874C040000            ja 00474843
:004743F7 FF2485D0494700          jmp dword ptr [4*eax+004749D0]
:004743FE 80FB31                  cmp bl, 31
:00474401 7C0F                    jl 00474412
:00474403 80FB39                  cmp bl, 39
:00474406 7F0A                    jg 00474412

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00474408 B803000000              mov eax, 00000003
:0047440D E930040000              jmp 00474842

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474401(C), :00474406(C)
|
:00474412 3A1D5C464800            cmp bl, byte ptr [0048465C]
:00474418 750A                    jne 00474424

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:0047441A B805000000              mov eax, 00000005
:0047441F E91F040000              jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474418(C)
|
:00474424 0FBEC3                  movsx eax, bl
:00474427 83E82B                  sub eax, 0000002B
:0047442A 7427                    je 00474453
:0047442C 83E802                  sub eax, 00000002
:0047442F 7410                    je 00474441
:00474431 83E803                  sub eax, 00000003
:00474434 0F8503040000            jne 0047483D
:0047443A 8BC1                    mov eax, ecx
:0047443C E902040000              jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047442F(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00474441 B802000000              mov eax, 00000002
:00474446 C744243400800000        mov [esp+34], 00008000
:0047444E E9F0030000              jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047442A(C)
|

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00474453 B802000000              mov eax, 00000002
:00474458 C744243400000000        mov [esp+34], 00000000
:00474460 E9DE030000              jmp 00474843
:00474465 80FB31                  cmp bl, 31
:00474468 894C2418                mov dword ptr [esp+18], ecx
:0047446C 7C0F                    jl 0047447D
:0047446E 80FB39                  cmp bl, 39
:00474471 7F0A                    jg 0047447D

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00474473 B803000000              mov eax, 00000003
:00474478 E9C5030000              jmp 00474842

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047446C(C), :00474471(C)
|
:0047447D 3A1D5C464800            cmp bl, byte ptr [0048465C]
:00474483 750A                    jne 0047448F

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00474485 B804000000              mov eax, 00000004
:0047448A E9B4030000              jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474483(C)
|
:0047448F 0FBEC3                  movsx eax, bl
:00474492 83C0D5                  add eax, FFFFFFD5
:00474495 83F83A                  cmp eax, 0000003A
:00474498 0F879F030000            ja 0047483D
:0047449E 33D2                    xor edx, edx
:004744A0 8A90184A4700            mov dl, byte ptr [eax+00474A18]
:004744A6 FF2495004A4700          jmp dword ptr [4*edx+00474A00]
:004744AD 80FB31                  cmp bl, 31
:004744B0 7C0F                    jl 004744C1
:004744B2 80FB39                  cmp bl, 39
:004744B5 7F0A                    jg 004744C1

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:004744B7 B803000000              mov eax, 00000003
:004744BC E981030000              jmp 00474842

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004744B0(C), :004744B5(C)
|
:004744C1 3A1D5C464800            cmp bl, byte ptr [0048465C]
:004744C7 750A                    jne 004744D3

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:004744C9 B805000000              mov eax, 00000005
:004744CE E970030000              jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004744C7(C)
|
:004744D3 80FB30                  cmp bl, 30
:004744D6 740C                    je 004744E4

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004744D8 B80A000000              mov eax, 0000000A
:004744DD 8BEF                    mov ebp, edi
:004744DF E95F030000              jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004744D6(C)
|
:004744E4 8BC1                    mov eax, ecx
:004744E6 E958030000              jmp 00474843
:004744EB 894C2418                mov dword ptr [esp+18], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474547(U), :0047455A(U)
|
:004744EF 390D58464800            cmp dword ptr [00484658], ecx
:004744F5 7E1B                    jle 00474512
:004744F7 8B44247C                mov eax, dword ptr [esp+7C]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004744FB 6A04                    push 00000004
:004744FD 25FF000000              and eax, 000000FF
:00474502 50                      push eax
:00474503 E8D8ECFFFF              call 004731E0
:00474508 83C408                  add esp, 00000008
:0047450B B901000000              mov ecx, 00000001
:00474510 EB15                    jmp 00474527

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004744F5(C)
|
:00474512 8B54247C                mov edx, dword ptr [esp+7C]

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00474516 A168464800              mov eax, dword ptr [00484668]
:0047451B 81E2FF000000            and edx, 000000FF
:00474521 8A0450                  mov al, byte ptr [eax+2*edx]
:00474524 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474510(U)
|
:00474527 85C0                    test eax, eax
:00474529 7431                    je 0047455C
:0047452B 83FE19                  cmp esi, 00000019
:0047452E 7319                    jnb 00474549
:00474530 8B442414                mov eax, dword ptr [esp+14]
:00474534 80EB30                  sub bl, 30
:00474537 46                      inc esi
:00474538 8818                    mov byte ptr [eax], bl
:0047453A 8A5D00                  mov bl, byte ptr [ebp+00]
:0047453D 40                      inc eax
:0047453E 885C247C                mov byte ptr [esp+7C], bl
:00474542 89442414                mov dword ptr [esp+14], eax
:00474546 45                      inc ebp
:00474547 EBA6                    jmp 004744EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047452E(C)
|
:00474549 8B442410                mov eax, dword ptr [esp+10]
:0047454D 8A5D00                  mov bl, byte ptr [ebp+00]
:00474550 40                      inc eax
:00474551 885C247C                mov byte ptr [esp+7C], bl
:00474555 89442410                mov dword ptr [esp+10], eax
:00474559 45                      inc ebp
:0047455A EB93                    jmp 004744EF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474529(C)
|
:0047455C A05C464800              mov al, byte ptr [0048465C]
:00474561 8974241C                mov dword ptr [esp+1C], esi
:00474565 3AD8                    cmp bl, al
:00474567 750A                    jne 00474573

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00474569 B804000000              mov eax, 00000004
:0047456E E9D0020000              jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474567(C)
|
:00474573 0FBEC3                  movsx eax, bl
:00474576 83C0D5                  add eax, FFFFFFD5
:00474579 83F83A                  cmp eax, 0000003A
:0047457C 0F87BB020000            ja 0047483D
:00474582 33D2                    xor edx, edx
:00474584 8A90684A4700            mov dl, byte ptr [eax+00474A68]
:0047458A FF2495544A4700          jmp dword ptr [4*edx+00474A54]
:00474591 85F6                    test esi, esi
:00474593 894C2418                mov dword ptr [esp+18], ecx
:00474597 894C2430                mov dword ptr [esp+30], ecx
:0047459B 7517                    jne 004745B4
:0047459D 80FB30                  cmp bl, 30
:004745A0 7512                    jne 004745B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004745AE(C)
|
:004745A2 8A5D00                  mov bl, byte ptr [ebp+00]
:004745A5 4A                      dec edx
:004745A6 45                      inc ebp
:004745A7 80FB30                  cmp bl, 30
:004745AA 885C247C                mov byte ptr [esp+7C], bl
:004745AE 74F2                    je 004745A2
:004745B0 89542410                mov dword ptr [esp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047459B(C), :004745A0(C), :00474615(U)
|
:004745B4 390D58464800            cmp dword ptr [00484658], ecx
:004745BA 7E1B                    jle 004745D7
:004745BC 8B44247C                mov eax, dword ptr [esp+7C]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004745C0 6A04                    push 00000004
:004745C2 25FF000000              and eax, 000000FF
:004745C7 50                      push eax
:004745C8 E813ECFFFF              call 004731E0
:004745CD 83C408                  add esp, 00000008
:004745D0 B901000000              mov ecx, 00000001
:004745D5 EB15                    jmp 004745EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004745BA(C)
|
:004745D7 8B54247C                mov edx, dword ptr [esp+7C]

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:004745DB A168464800              mov eax, dword ptr [00484668]
:004745E0 81E2FF000000            and edx, 000000FF
:004745E6 8A0450                  mov al, byte ptr [eax+2*edx]
:004745E9 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004745D5(U)
|
:004745EC 85C0                    test eax, eax
:004745EE 7427                    je 00474617
:004745F0 83FE19                  cmp esi, 00000019
:004745F3 7318                    jnb 0047460D
:004745F5 8B442414                mov eax, dword ptr [esp+14]
:004745F9 80EB30                  sub bl, 30
:004745FC 46                      inc esi
:004745FD 8818                    mov byte ptr [eax], bl
:004745FF 40                      inc eax
:00474600 89442414                mov dword ptr [esp+14], eax
:00474604 8B442410                mov eax, dword ptr [esp+10]
:00474608 48                      dec eax
:00474609 89442410                mov dword ptr [esp+10], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004745F3(C)
|
:0047460D 8A5D00                  mov bl, byte ptr [ebp+00]
:00474610 45                      inc ebp
:00474611 885C247C                mov byte ptr [esp+7C], bl
:00474615 EB9D                    jmp 004745B4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004745EE(C)
|
:00474617 0FBEC3                  movsx eax, bl
:0047461A 83C0D5                  add eax, FFFFFFD5
:0047461D 8974241C                mov dword ptr [esp+1C], esi
:00474621 83F83A                  cmp eax, 0000003A
:00474624 0F8713020000            ja 0047483D
:0047462A 33D2                    xor edx, edx
:0047462C 8A90B84A4700            mov dl, byte ptr [eax+00474AB8]
:00474632 FF2495A44A4700          jmp dword ptr [4*edx+00474AA4]

* Possible Reference to String Resource ID=00006: ""
                                  |
:00474639 B806000000              mov eax, 00000006
:0047463E E900020000              jmp 00474843
:00474643 4D                      dec ebp
:00474644 B80B000000              mov eax, 0000000B
:00474649 E9F5010000              jmp 00474843
:0047464E A158464800              mov eax, dword ptr [00484658]
:00474653 894C2430                mov dword ptr [esp+30], ecx
:00474657 3BC1                    cmp eax, ecx
:00474659 7E16                    jle 00474671
:0047465B 8B44247C                mov eax, dword ptr [esp+7C]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0047465F 6A04                    push 00000004
:00474661 25FF000000              and eax, 000000FF
:00474666 50                      push eax
:00474667 E874EBFFFF              call 004731E0
:0047466C 83C408                  add esp, 00000008
:0047466F EB16                    jmp 00474687

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474659(C)
|
:00474671 8B4C247C                mov ecx, dword ptr [esp+7C]

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00474675 8B1568464800            mov edx, dword ptr [00484668]
:0047467B 81E1FF000000            and ecx, 000000FF
:00474681 8A044A                  mov al, byte ptr [edx+2*ecx]
:00474684 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047466F(U)
|
:00474687 85C0                    test eax, eax
:00474689 7410                    je 0047469B

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:0047468B B804000000              mov eax, 00000004
:00474690 4D                      dec ebp
:00474691 B901000000              mov ecx, 00000001
:00474696 E9A8010000              jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474689(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0047469B B80A000000              mov eax, 0000000A
:004746A0 8BEF                    mov ebp, edi
:004746A2 B901000000              mov ecx, 00000001
:004746A7 E997010000              jmp 00474843
:004746AC 8D7DFE                  lea edi, dword ptr [ebp-02]
:004746AF 80FB31                  cmp bl, 31
:004746B2 897C2420                mov dword ptr [esp+20], edi
:004746B6 7C0F                    jl 004746C7
:004746B8 80FB39                  cmp bl, 39
:004746BB 7F0A                    jg 004746C7

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:004746BD B809000000              mov eax, 00000009
:004746C2 E97B010000              jmp 00474842

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004746B6(C), :004746BB(C)
|
:004746C7 0FBEC3                  movsx eax, bl
:004746CA 83E82B                  sub eax, 0000002B
:004746CD 0F8463010000            je 00474836
:004746D3 83E802                  sub eax, 00000002
:004746D6 0F844B010000            je 00474827
:004746DC 83E803                  sub eax, 00000003
:004746DF EB45                    jmp 00474726
:004746E1 80FB30                  cmp bl, 30
:004746E4 894C242C                mov dword ptr [esp+2C], ecx
:004746E8 7509                    jne 004746F3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004746F1(C)
|
:004746EA 8A5D00                  mov bl, byte ptr [ebp+00]
:004746ED 45                      inc ebp
:004746EE 80FB30                  cmp bl, 30
:004746F1 74F7                    je 004746EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004746E8(C)
|
:004746F3 80FB31                  cmp bl, 31
:004746F6 0F8C41010000            jl 0047483D
:004746FC 80FB39                  cmp bl, 39
:004746FF 0F8F38010000            jg 0047483D

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00474705 B809000000              mov eax, 00000009
:0047470A E933010000              jmp 00474842
:0047470F 80FB31                  cmp bl, 31
:00474712 7C0F                    jl 00474723
:00474714 80FB39                  cmp bl, 39
:00474717 7F0A                    jg 00474723

* Possible Reference to String Resource ID=00009: "LM"
                                  |
:00474719 B809000000              mov eax, 00000009
:0047471E E91F010000              jmp 00474842

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474712(C), :00474717(C)
|
:00474723 80FB30                  cmp bl, 30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004746DF(U)
|
:00474726 740C                    je 00474734

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00474728 B80A000000              mov eax, 0000000A
:0047472D 8BEF                    mov ebp, edi
:0047472F E90F010000              jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474726(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00474734 B808000000              mov eax, 00000008
:00474739 E905010000              jmp 00474843
:0047473E 894C242C                mov dword ptr [esp+2C], ecx
:00474742 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047479F(U)
|
:00474744 390D58464800            cmp dword ptr [00484658], ecx
:0047474A 7E18                    jle 00474764
:0047474C 8B74247C                mov esi, dword ptr [esp+7C]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00474750 6A04                    push 00000004
:00474752 8BC6                    mov eax, esi
:00474754 25FF000000              and eax, 000000FF
:00474759 50                      push eax
:0047475A E881EAFFFF              call 004731E0
:0047475F 83C408                  add esp, 00000008
:00474762 EB18                    jmp 0047477C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047474A(C)
|
:00474764 8B74247C                mov esi, dword ptr [esp+7C]

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:00474768 8B1568464800            mov edx, dword ptr [00484668]
:0047476E 8BCE                    mov ecx, esi
:00474770 81E1FF000000            and ecx, 000000FF
:00474776 8A044A                  mov al, byte ptr [edx+2*ecx]
:00474779 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474762(U)
|
:0047477C 85C0                    test eax, eax
:0047477E 7426                    je 004747A6
:00474780 0FBECB                  movsx ecx, bl
:00474783 8D04BF                  lea eax, dword ptr [edi+4*edi]
:00474786 8D7C41D0                lea edi, dword ptr [ecx+2*eax-30]
:0047478A 81FF50140000            cmp edi, 00001450
:00474790 7F0F                    jg 004747A1
:00474792 8A5D00                  mov bl, byte ptr [ebp+00]
:00474795 45                      inc ebp
:00474796 885C247C                mov byte ptr [esp+7C], bl
:0047479A B901000000              mov ecx, 00000001
:0047479F EBA3                    jmp 00474744

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474790(C)
|
:004747A1 BF51140000              mov edi, 00001451

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047477E(C)
|
:004747A6 897C2428                mov dword ptr [esp+28], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004747E8(U)
|
:004747AA 833D5846480001          cmp dword ptr [00484658], 00000001
:004747B1 7E13                    jle 004747C6
:004747B3 81E6FF000000            and esi, 000000FF

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004747B9 6A04                    push 00000004
:004747BB 56                      push esi
:004747BC E81FEAFFFF              call 004731E0
:004747C1 83C408                  add esp, 00000008
:004747C4 EB12                    jmp 004747D8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004747B1(C)
|

* Possible StringData Ref from Data Obj ->"         (((((                "
                                        ->"  H"
                                  |
:004747C6 8B1568464800            mov edx, dword ptr [00484668]
:004747CC 81E6FF000000            and esi, 000000FF
:004747D2 8A0472                  mov al, byte ptr [edx+2*esi]
:004747D5 83E004                  and eax, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004747C4(U)
|
:004747D8 85C0                    test eax, eax
:004747DA 740E                    je 004747EA
:004747DC 8A4500                  mov al, byte ptr [ebp+00]
:004747DF 45                      inc ebp
:004747E0 8844247C                mov byte ptr [esp+7C], al
:004747E4 8B74247C                mov esi, dword ptr [esp+7C]
:004747E8 EBC0                    jmp 004747AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004747DA(C)
|
:004747EA 8B74241C                mov esi, dword ptr [esp+1C]
:004747EE 8B7C2420                mov edi, dword ptr [esp+20]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004747F2 B80A000000              mov eax, 0000000A
:004747F7 4D                      dec ebp
:004747F8 B901000000              mov ecx, 00000001
:004747FD EB44                    jmp 00474843
:004747FF 8B84248C000000          mov eax, dword ptr [esp+0000008C]
:00474806 85C0                    test eax, eax
:00474808 7433                    je 0047483D
:0047480A 0FBEC3                  movsx eax, bl
:0047480D 8D7DFF                  lea edi, dword ptr [ebp-01]
:00474810 83E82B                  sub eax, 0000002B
:00474813 897C2420                mov dword ptr [esp+20], edi
:00474817 741D                    je 00474836
:00474819 83E802                  sub eax, 00000002
:0047481C 7409                    je 00474827

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0047481E B80A000000              mov eax, 0000000A
:00474823 8BEF                    mov ebp, edi
:00474825 EB1C                    jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004746D6(C), :0047481C(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00474827 B807000000              mov eax, 00000007
:0047482C C7442424FFFFFFFF        mov [esp+24], FFFFFFFF
:00474834 EB0D                    jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004746CD(C), :00474817(C)
|

* Possible Reference to String Resource ID=00007: "
"
                                  |
:00474836 B807000000              mov eax, 00000007
:0047483B EB06                    jmp 00474843

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474434(C), :00474498(C), :0047457C(C), :00474624(C), :004746F6(C)
|:004746FF(C), :00474808(C)
|

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0047483D B80A000000              mov eax, 0000000A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047440D(U), :00474478(U), :004744BC(U), :004746C2(U), :0047470A(U)
|:0047471E(U)
|
:00474842 4D                      dec ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004743F1(C), :0047441F(U), :0047443C(U), :0047444E(U), :00474460(U)
|:0047448A(U), :004744CE(U), :004744DF(U), :004744E6(U), :0047456E(U)
|:0047463E(U), :00474649(U), :00474696(U), :004746A7(U), :0047472F(U)
|:00474739(U), :004747FD(U), :00474825(U), :00474834(U), :0047483B(U)
|
:00474843 83F80A                  cmp eax, 0000000A
:00474846 0F8596FBFFFF            jne 004743E2
:0047484C 8B4C2478                mov ecx, dword ptr [esp+78]
:00474850 8B442418                mov eax, dword ptr [esp+18]
:00474854 85C0                    test eax, eax
:00474856 8929                    mov dword ptr [ecx], ebp
:00474858 0F84A6000000            je 00474904
:0047485E 83FE18                  cmp esi, 00000018
:00474861 7623                    jbe 00474886
:00474863 8A44246B                mov al, byte ptr [esp+6B]
:00474867 3C05                    cmp al, 05
:00474869 7C06                    jl 00474871
:0047486B FEC0                    inc al
:0047486D 8844246B                mov byte ptr [esp+6B], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474869(C)
|
:00474871 8B442414                mov eax, dword ptr [esp+14]
:00474875 8B4C2410                mov ecx, dword ptr [esp+10]
:00474879 48                      dec eax
:0047487A 41                      inc ecx
:0047487B BE18000000              mov esi, 00000018
:00474880 894C2410                mov dword ptr [esp+10], ecx
:00474884 EB08                    jmp 0047488E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474861(C)
|
:00474886 8B442414                mov eax, dword ptr [esp+14]
:0047488A 8B4C2410                mov ecx, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474884(U)
|
:0047488E 85F6                    test esi, esi
:00474890 0F862D010000            jbe 004749C3
:00474896 8A50FF                  mov dl, byte ptr [eax-01]
:00474899 48                      dec eax
:0047489A 84D2                    test dl, dl
:0047489C 750E                    jne 004748AC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004748A6(C)
|
:0047489E 8A50FF                  mov dl, byte ptr [eax-01]
:004748A1 4E                      dec esi
:004748A2 41                      inc ecx
:004748A3 48                      dec eax
:004748A4 84D2                    test dl, dl
:004748A6 74F6                    je 0047489E
:004748A8 894C2410                mov dword ptr [esp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047489C(C)
|
:004748AC 8D542444                lea edx, dword ptr [esp+44]
:004748B0 8D442454                lea eax, dword ptr [esp+54]
:004748B4 52                      push edx
:004748B5 56                      push esi
:004748B6 50                      push eax
:004748B7 E8B4F9FFFF              call 00474270
:004748BC 8B442430                mov eax, dword ptr [esp+30]
:004748C0 83C40C                  add esp, 0000000C
:004748C3 85C0                    test eax, eax
:004748C5 8B442428                mov eax, dword ptr [esp+28]
:004748C9 7D02                    jge 004748CD
:004748CB F7D8                    neg eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004748C9(C)
|
:004748CD 8B542410                mov edx, dword ptr [esp+10]
:004748D1 8B4C242C                mov ecx, dword ptr [esp+2C]
:004748D5 03C2                    add eax, edx
:004748D7 85C9                    test ecx, ecx
:004748D9 7507                    jne 004748E2
:004748DB 03842484000000          add eax, dword ptr [esp+00000084]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004748D9(C)
|
:004748E2 8B4C2430                mov ecx, dword ptr [esp+30]
:004748E6 85C9                    test ecx, ecx
:004748E8 7507                    jne 004748F1
:004748EA 2B842488000000          sub eax, dword ptr [esp+00000088]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004748E8(C)
|
:004748F1 3D50140000              cmp eax, 00001450
:004748F6 0F8E88000000            jle 00474984
:004748FC C744243801000000        mov [esp+38], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474858(C), :00474993(U)
|
:00474904 8B74247C                mov esi, dword ptr [esp+7C]
:00474908 8B54247C                mov edx, dword ptr [esp+7C]
:0047490C 8B44247C                mov eax, dword ptr [esp+7C]
:00474910 8B4C247C                mov ecx, dword ptr [esp+7C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004749BE(U), :004749CB(U)
|
:00474914 8B7C2418                mov edi, dword ptr [esp+18]
:00474918 85FF                    test edi, edi
:0047491A 750F                    jne 0047492B
:0047491C 33C9                    xor ecx, ecx
:0047491E 33C0                    xor eax, eax
:00474920 33D2                    xor edx, edx
:00474922 33F6                    xor esi, esi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00474924 BB04000000              mov ebx, 00000004
:00474929 EB38                    jmp 00474963

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047491A(C)
|
:0047492B 8B7C2438                mov edi, dword ptr [esp+38]
:0047492F 85FF                    test edi, edi
:00474931 7415                    je 00474948
:00474933 33F6                    xor esi, esi
:00474935 B8FF7F0000              mov eax, 00007FFF
:0047493A BA00000080              mov edx, 80000000
:0047493F 33C9                    xor ecx, ecx

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00474941 BB02000000              mov ebx, 00000002
:00474946 EB1B                    jmp 00474963

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474931(C)
|
:00474948 8B7C243C                mov edi, dword ptr [esp+3C]
:0047494C 85FF                    test edi, edi
:0047494E 740F                    je 0047495F
:00474950 33C9                    xor ecx, ecx
:00474952 33C0                    xor eax, eax
:00474954 33D2                    xor edx, edx
:00474956 33F6                    xor esi, esi
:00474958 BB01000000              mov ebx, 00000001
:0047495D EB04                    jmp 00474963

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047494E(C)
|
:0047495F 8B5C2440                mov ebx, dword ptr [esp+40]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474929(U), :00474946(U), :0047495D(U)
|
:00474963 8B7C2474                mov edi, dword ptr [esp+74]
:00474967 66890F                  mov word ptr [edi], cx
:0047496A 8B4C2434                mov ecx, dword ptr [esp+34]
:0047496E 0BC1                    or eax, ecx
:00474970 897702                  mov dword ptr [edi+02], esi
:00474973 895706                  mov dword ptr [edi+06], edx
:00474976 6689470A                mov word ptr [edi+0A], ax
:0047497A 5F                      pop edi
:0047497B 5E                      pop esi
:0047497C 8BC3                    mov eax, ebx
:0047497E 5D                      pop ebp
:0047497F 5B                      pop ebx
:00474980 83C460                  add esp, 00000060
:00474983 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004748F6(C)
|
:00474984 3DB0EBFFFF              cmp eax, FFFFEBB0
:00474989 7D0D                    jge 00474998
:0047498B C744243C01000000        mov [esp+3C], 00000001
:00474993 E96CFFFFFF              jmp 00474904

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474989(C)
|
:00474998 8B8C2480000000          mov ecx, dword ptr [esp+00000080]
:0047499F 8D542444                lea edx, dword ptr [esp+44]
:004749A3 51                      push ecx
:004749A4 50                      push eax
:004749A5 52                      push edx
:004749A6 E845080000              call 004751F0
:004749AB 8B4C2450                mov ecx, dword ptr [esp+50]
:004749AF 8B742452                mov esi, dword ptr [esp+52]
:004749B3 8B542456                mov edx, dword ptr [esp+56]
:004749B7 8B44245A                mov eax, dword ptr [esp+5A]
:004749BB 83C40C                  add esp, 0000000C
:004749BE E951FFFFFF              jmp 00474914

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474890(C)
|
:004749C3 33C9                    xor ecx, ecx
:004749C5 33C0                    xor eax, eax
:004749C7 33D2                    xor edx, edx
:004749C9 33F6                    xor esi, esi
:004749CB E944FFFFFF              jmp 00474914

:004749D0 FE434700                DWORD 004743FE
:004749D4 65444700                DWORD 00474465
:004749D8 AD444700                DWORD 004744AD
:004749DC EB444700                DWORD 004744EB
:004749E0 91454700                DWORD 00474591
:004749E4 4E464700                DWORD 0047464E
:004749E8 AC464700                DWORD 004746AC
:004749EC 0F474700                DWORD 0047470F
:004749F0 E1464700                DWORD 004746E1
:004749F4 3E474700                DWORD 0047473E
:004749F8 43484700                DWORD 00474843
:004749FC FF474700                DWORD 004747FF
:00474A00 43464700                DWORD 00474643
:00474A04 43464700                DWORD 00474643
:00474A08 E4444700                DWORD 004744E4
:00474A0C 39464700                DWORD 00474639
:00474A10 39464700                DWORD 00474639
:00474A14 3D484700                DWORD 0047483D


:00474A18 000501050502            add byte ptr [02050501], al
:00474A1E 0505050505              add eax, 05050505
:00474A23 0505050505              add eax, 05050505
:00474A28 0505050505              add eax, 05050505
:00474A2D 0505050503              add eax, 03050505
:00474A32 030505050505            add eax, dword ptr [05050505]
:00474A38 0505050505              add eax, 05050505
:00474A3D 0505050505              add eax, 05050505
:00474A42 0505050505              add eax, 05050505
:00474A47 0505050505              add eax, 05050505
:00474A4C 0505050505              add eax, 05050505
:00474A51 0404                    add al, 04
:00474A53 90                      nop

:00474A54 43464700                DWORD 00474643
:00474A58 43464700                DWORD 00474643
:00474A5C 39464700                DWORD 00474639
:00474A60 39464700                DWORD 00474639
:00474A64 3D484700                DWORD 0047483D


:00474A68 000401                  add byte ptr [ecx+eax], al
:00474A6B 0404                    add al, 04
:00474A6D 0404                    add al, 04
:00474A6F 0404                    add al, 04
:00474A71 0404                    add al, 04
:00474A73 0404                    add al, 04
:00474A75 0404                    add al, 04
:00474A77 0404                    add al, 04
:00474A79 0404                    add al, 04
:00474A7B 0404                    add al, 04
:00474A7D 0404                    add al, 04
:00474A7F 0404                    add al, 04
:00474A81 0202                    add al, byte ptr [edx]
:00474A83 0404                    add al, 04
:00474A85 0404                    add al, 04
:00474A87 0404                    add al, 04
:00474A89 0404                    add al, 04
:00474A8B 0404                    add al, 04
:00474A8D 0404                    add al, 04
:00474A8F 0404                    add al, 04
:00474A91 0404                    add al, 04
:00474A93 0404                    add al, 04
:00474A95 0404                    add al, 04
:00474A97 0404                    add al, 04
:00474A99 0404                    add al, 04
:00474A9B 0404                    add al, 04
:00474A9D 0404                    add al, 04
:00474A9F 0404                    add al, 04
:00474AA1 0303                    add eax, dword ptr [ebx]
:00474AA3 90                      nop

:00474AA4 43464700                DWORD 00474643
:00474AA8 43464700                DWORD 00474643
:00474AAC 39464700                DWORD 00474639
:00474AB0 39464700                DWORD 00474639
:00474AB4 3D484700                DWORD 0047483D


:00474AB8 000401                  add byte ptr [ecx+eax], al
:00474ABB 0404                    add al, 04
:00474ABD 0404                    add al, 04
:00474ABF 0404                    add al, 04
:00474AC1 0404                    add al, 04
:00474AC3 0404                    add al, 04
:00474AC5 0404                    add al, 04
:00474AC7 0404                    add al, 04
:00474AC9 0404                    add al, 04
:00474ACB 0404                    add al, 04
:00474ACD 0404                    add al, 04
:00474ACF 0404                    add al, 04
:00474AD1 0202                    add al, byte ptr [edx]
:00474AD3 0404                    add al, 04
:00474AD5 0404                    add al, 04
:00474AD7 0404                    add al, 04
:00474AD9 0404                    add al, 04
:00474ADB 0404                    add al, 04
:00474ADD 0404                    add al, 04
:00474ADF 0404                    add al, 04
:00474AE1 0404                    add al, 04
:00474AE3 0404                    add al, 04
:00474AE5 0404                    add al, 04
:00474AE7 0404                    add al, 04
:00474AE9 0404                    add al, 04
:00474AEB 0404                    add al, 04
:00474AED 0404                    add al, 04
:00474AEF 0404                    add al, 04
:00474AF1 0303                    add eax, dword ptr [ebx]
:00474AF3 90                      nop
:00474AF4 90                      nop
:00474AF5 90                      nop
:00474AF6 90                      nop
:00474AF7 90                      nop
:00474AF8 90                      nop
:00474AF9 90                      nop
:00474AFA 90                      nop
:00474AFB 90                      nop
:00474AFC 90                      nop
:00474AFD 90                      nop
:00474AFE 90                      nop
:00474AFF 90                      nop

* Referenced by a CALL at Address:
|:00473979   
|
:00474B00 83EC20                  sub esp, 00000020
:00474B03 8B4C242C                mov ecx, dword ptr [esp+2C]
:00474B07 B0CC                    mov al, CC
:00474B09 88442404                mov byte ptr [esp+04], al
:00474B0D 88442405                mov byte ptr [esp+05], al
:00474B11 88442406                mov byte ptr [esp+06], al
:00474B15 88442407                mov byte ptr [esp+07], al
:00474B19 88442408                mov byte ptr [esp+08], al
:00474B1D 88442409                mov byte ptr [esp+09], al
:00474B21 8844240A                mov byte ptr [esp+0A], al
:00474B25 8844240B                mov byte ptr [esp+0B], al
:00474B29 8844240C                mov byte ptr [esp+0C], al
:00474B2D 8844240D                mov byte ptr [esp+0D], al
:00474B31 8BC1                    mov eax, ecx
:00474B33 53                      push ebx
:00474B34 2500800000              and eax, 00008000
:00474B39 55                      push ebp
:00474B3A 81E1FF7F0000            and ecx, 00007FFF
:00474B40 56                      push esi
:00474B41 6685C0                  test ax, ax
:00474B44 57                      push edi
:00474B45 C644241EFB              mov [esp+1E], FB
:00474B4A C644241F3F              mov [esp+1F], 3F
:00474B4F C744241001000000        mov [esp+10], 00000001
:00474B57 740A                    je 00474B63
:00474B59 8B7C2448                mov edi, dword ptr [esp+48]
:00474B5D C647022D                mov [edi+02], 2D
:00474B61 EB0A                    jmp 00474B6D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474B57(C)
|
:00474B63 8B542448                mov edx, dword ptr [esp+48]
:00474B67 8BFA                    mov edi, edx
:00474B69 C6420220                mov [edx+02], 20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474B61(U)
|
:00474B6D 8B542438                mov edx, dword ptr [esp+38]
:00474B71 8B5C2434                mov ebx, dword ptr [esp+34]
:00474B75 6685C9                  test cx, cx
:00474B78 7510                    jne 00474B8A
:00474B7A 85D2                    test edx, edx
:00474B7C 750C                    jne 00474B8A
:00474B7E 85DB                    test ebx, ebx
:00474B80 7508                    jne 00474B8A
:00474B82 66891F                  mov word ptr [edi], bx
:00474B85 E985010000              jmp 00474D0F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474B78(C), :00474B7C(C), :00474B80(C)
|
:00474B8A 6681F9FF7F              cmp cx, 7FFF
:00474B8F 0F85D8000000            jne 00474C6D
:00474B95 81FA00000080            cmp edx, 80000000
:00474B9B 66C7070100              mov word ptr [edi], 0001
:00474BA0 7504                    jne 00474BA6
:00474BA2 85DB                    test ebx, ebx
:00474BA4 7436                    je 00474BDC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474BA0(C)
|
:00474BA6 F7C200000040            test edx, 40000000
:00474BAC 752E                    jne 00474BDC
:00474BAE 8B0D2CB54700            mov ecx, dword ptr [0047B52C]
:00474BB4 8D4704                  lea eax, dword ptr [edi+04]
:00474BB7 894F04                  mov dword ptr [edi+04], ecx
:00474BBA 668B1530B54700          mov dx, word ptr [0047B530]
:00474BC1 66895004                mov word ptr [eax+04], dx
:00474BC5 8A0D32B54700            mov cl, byte ptr [0047B532]
:00474BCB C6470306                mov [edi+03], 06
:00474BCF 884806                  mov byte ptr [eax+06], cl
:00474BD2 33C0                    xor eax, eax
:00474BD4 5F                      pop edi
:00474BD5 5E                      pop esi
:00474BD6 5D                      pop ebp
:00474BD7 5B                      pop ebx
:00474BD8 83C420                  add esp, 00000020
:00474BDB C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474BA4(C), :00474BAC(C)
|
:00474BDC 6685C0                  test ax, ax
:00474BDF 7430                    je 00474C11
:00474BE1 81FA000000C0            cmp edx, C0000000
:00474BE7 7528                    jne 00474C11
:00474BE9 85DB                    test ebx, ebx
:00474BEB 7524                    jne 00474C11
:00474BED A124B54700              mov eax, dword ptr [0047B524]
:00474BF2 8D5704                  lea edx, dword ptr [edi+04]
:00474BF5 894704                  mov dword ptr [edi+04], eax
:00474BF8 668B0D28B54700          mov cx, word ptr [0047B528]
:00474BFF C6470305                mov [edi+03], 05
:00474C03 33C0                    xor eax, eax
:00474C05 66894A04                mov word ptr [edx+04], cx
:00474C09 5F                      pop edi
:00474C0A 5E                      pop esi
:00474C0B 5D                      pop ebp
:00474C0C 5B                      pop ebx
:00474C0D 83C420                  add esp, 00000020
:00474C10 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474BDF(C), :00474BE7(C), :00474BEB(C)
|
:00474C11 81FA00000080            cmp edx, 80000000
:00474C17 7528                    jne 00474C41
:00474C19 85DB                    test ebx, ebx
:00474C1B 7524                    jne 00474C41
:00474C1D A11CB54700              mov eax, dword ptr [0047B51C]
:00474C22 8D5704                  lea edx, dword ptr [edi+04]
:00474C25 894704                  mov dword ptr [edi+04], eax
:00474C28 668B0D20B54700          mov cx, word ptr [0047B520]
:00474C2F C6470305                mov [edi+03], 05
:00474C33 33C0                    xor eax, eax
:00474C35 66894A04                mov word ptr [edx+04], cx
:00474C39 5F                      pop edi
:00474C3A 5E                      pop esi
:00474C3B 5D                      pop ebp
:00474C3C 5B                      pop ebx
:00474C3D 83C420                  add esp, 00000020
:00474C40 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474C17(C), :00474C1B(C)
|
:00474C41 A114B54700              mov eax, dword ptr [0047B514]
:00474C46 8D5704                  lea edx, dword ptr [edi+04]
:00474C49 894704                  mov dword ptr [edi+04], eax
:00474C4C 668B0D18B54700          mov cx, word ptr [0047B518]
:00474C53 66894A04                mov word ptr [edx+04], cx
:00474C57 A01AB54700              mov al, byte ptr [0047B51A]
:00474C5C C6470306                mov [edi+03], 06
:00474C60 884206                  mov byte ptr [edx+06], al
:00474C63 33C0                    xor eax, eax
:00474C65 5F                      pop edi
:00474C66 5E                      pop esi
:00474C67 5D                      pop ebp
:00474C68 5B                      pop ebx
:00474C69 83C420                  add esp, 00000020
:00474C6C C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474B8F(C)
|
:00474C6D 8BC2                    mov eax, edx
:00474C6F 8BF1                    mov esi, ecx
:00474C71 C1E818                  shr eax, 18
:00474C74 81E6FFFF0000            and esi, 0000FFFF
:00474C7A 25FFFF0000              and eax, 0000FFFF
:00474C7F C1EE08                  shr esi, 08
:00474C82 66894C242A              mov word ptr [esp+2A], cx
:00474C87 89542426                mov dword ptr [esp+26], edx
:00474C8B 8D0446                  lea eax, dword ptr [esi+2*eax]
:00474C8E 895C2422                mov dword ptr [esp+22], ebx
:00474C92 6A01                    push 00000001
:00474C94 8D542424                lea edx, dword ptr [esp+24]
:00474C98 8D34C0                  lea esi, dword ptr [eax+8*eax]
:00474C9B 33DB                    xor ebx, ebx
:00474C9D 66895C2424              mov word ptr [esp+24], bx
:00474CA2 8D3470                  lea esi, dword ptr [eax+2*esi]
:00474CA5 8D34B0                  lea esi, dword ptr [eax+4*esi]
:00474CA8 8BC1                    mov eax, ecx
:00474CAA 25FFFF0000              and eax, 0000FFFF
:00474CAF 8BE8                    mov ebp, eax
:00474CB1 C1E504                  shl ebp, 04
:00474CB4 03E8                    add ebp, eax
:00474CB6 8D04E8                  lea eax, dword ptr [eax+8*ebp]
:00474CB9 8D04C0                  lea eax, dword ptr [eax+8*eax]
:00474CBC C1E004                  shl eax, 04
:00474CBF 8DB4060CEDBCEC          lea esi, dword ptr [esi+eax-134312F4]
:00474CC6 C1FE10                  sar esi, 10
:00474CC9 0FBFCE                  movsx ecx, si
:00474CCC F7D9                    neg ecx
:00474CCE 51                      push ecx
:00474CCF 52                      push edx
:00474CD0 E81B050000              call 004751F0
:00474CD5 83C40C                  add esp, 0000000C
:00474CD8 66817C242AFF3F          cmp word ptr [esp+2A], 3FFF
:00474CDF 7213                    jb 00474CF4
:00474CE1 8D442414                lea eax, dword ptr [esp+14]
:00474CE5 8D4C2420                lea ecx, dword ptr [esp+20]
:00474CE9 50                      push eax
:00474CEA 51                      push ecx
:00474CEB 46                      inc esi
:00474CEC E83F020000              call 00474F30
:00474CF1 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474CDF(C)
|
:00474CF4 8A442444                mov al, byte ptr [esp+44]
:00474CF8 668937                  mov word ptr [edi], si
:00474CFB A801                    test al, 01
:00474CFD 742D                    je 00474D2C
:00474CFF 8B6C2440                mov ebp, dword ptr [esp+40]
:00474D03 0FBFD6                  movsx edx, si
:00474D06 03EA                    add ebp, edx
:00474D08 3BEB                    cmp ebp, ebx
:00474D0A 7F24                    jg 00474D30
:00474D0C 66891F                  mov word ptr [edi], bx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474B85(U)
|
:00474D0F C6470220                mov [edi+02], 20
:00474D13 C6470301                mov [edi+03], 01
:00474D17 C6470430                mov [edi+04], 30
:00474D1B C6470500                mov [edi+05], 00
:00474D1F B801000000              mov eax, 00000001
:00474D24 5F                      pop edi
:00474D25 5E                      pop esi
:00474D26 5D                      pop ebp
:00474D27 5B                      pop ebx
:00474D28 83C420                  add esp, 00000020
:00474D2B C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474CFD(C)
|
:00474D2C 8B6C2440                mov ebp, dword ptr [esp+40]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474D0A(C)
|
:00474D30 83FD15                  cmp ebp, 00000015
:00474D33 7E05                    jle 00474D3A

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0015, ""
                                  |
:00474D35 BD15000000              mov ebp, 00000015

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474D33(C)
|
:00474D3A 8B74242A                mov esi, dword ptr [esp+2A]
:00474D3E 66895C242A              mov word ptr [esp+2A], bx
:00474D43 81E6FFFF0000            and esi, 0000FFFF

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00474D49 BB08000000              mov ebx, 00000008
:00474D4E 81EEFE3F0000            sub esi, 00003FFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474D62(C)
|
:00474D54 8D442420                lea eax, dword ptr [esp+20]
:00474D58 50                      push eax
:00474D59 E8B2F4FFFF              call 00474210
:00474D5E 83C404                  add esp, 00000004
:00474D61 4B                      dec ebx
:00474D62 75F0                    jne 00474D54
:00474D64 85F6                    test esi, esi
:00474D66 7D1A                    jge 00474D82
:00474D68 F7DE                    neg esi
:00474D6A 81E6FF000000            and esi, 000000FF
:00474D70 7E10                    jle 00474D82

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474D80(C)
|
:00474D72 8D4C2420                lea ecx, dword ptr [esp+20]
:00474D76 51                      push ecx
:00474D77 E8C4F4FFFF              call 00474240
:00474D7C 83C404                  add esp, 00000004
:00474D7F 4E                      dec esi
:00474D80 75F0                    jne 00474D72

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474D66(C), :00474D70(C)
|
:00474D82 8D7704                  lea esi, dword ptr [edi+04]
:00474D85 8D7D01                  lea edi, dword ptr [ebp+01]
:00474D88 85FF                    test edi, edi
:00474D8A 8BDE                    mov ebx, esi
:00474D8C 7E63                    jle 00474DF1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474DEF(C)
|
:00474D8E 8B542420                mov edx, dword ptr [esp+20]
:00474D92 8B442424                mov eax, dword ptr [esp+24]
:00474D96 8B4C2428                mov ecx, dword ptr [esp+28]
:00474D9A 89542434                mov dword ptr [esp+34], edx
:00474D9E 8D542420                lea edx, dword ptr [esp+20]
:00474DA2 89442438                mov dword ptr [esp+38], eax
:00474DA6 52                      push edx
:00474DA7 894C2440                mov dword ptr [esp+40], ecx
:00474DAB E860F4FFFF              call 00474210
:00474DB0 83C404                  add esp, 00000004
:00474DB3 8D442420                lea eax, dword ptr [esp+20]
:00474DB7 50                      push eax
:00474DB8 E853F4FFFF              call 00474210
:00474DBD 83C404                  add esp, 00000004
:00474DC0 8D4C2434                lea ecx, dword ptr [esp+34]
:00474DC4 8D542420                lea edx, dword ptr [esp+20]
:00474DC8 51                      push ecx
:00474DC9 52                      push edx
:00474DCA E8D1F3FFFF              call 004741A0
:00474DCF 83C408                  add esp, 00000008
:00474DD2 8D442420                lea eax, dword ptr [esp+20]
:00474DD6 50                      push eax
:00474DD7 E834F4FFFF              call 00474210
:00474DDC 8A4C242F                mov cl, byte ptr [esp+2F]
:00474DE0 83C404                  add esp, 00000004
:00474DE3 80C130                  add cl, 30
:00474DE6 C644242B00              mov [esp+2B], 00
:00474DEB 880B                    mov byte ptr [ebx], cl
:00474DED 43                      inc ebx
:00474DEE 4F                      dec edi
:00474DEF 759D                    jne 00474D8E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474D8C(C)
|
:00474DF1 8A43FF                  mov al, byte ptr [ebx-01]
:00474DF4 4B                      dec ebx
:00474DF5 4B                      dec ebx
:00474DF6 3C35                    cmp al, 35
:00474DF8 7C31                    jl 00474E2B
:00474DFA 3BDE                    cmp ebx, esi
:00474DFC 7211                    jb 00474E0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474E09(C)
|
:00474DFE 803B39                  cmp byte ptr [ebx], 39
:00474E01 7508                    jne 00474E0B
:00474E03 C60330                  mov byte ptr [ebx], 30
:00474E06 4B                      dec ebx
:00474E07 3BDE                    cmp ebx, esi
:00474E09 73F3                    jnb 00474DFE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474E01(C)
|
:00474E0B 3BDE                    cmp ebx, esi
:00474E0D 7310                    jnb 00474E1F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474DFC(C)
|
:00474E0F 8B442448                mov eax, dword ptr [esp+48]
:00474E13 43                      inc ebx
:00474E14 66FF00                  inc word ptr [eax]
:00474E17 8A0B                    mov cl, byte ptr [ebx]
:00474E19 FEC1                    inc cl
:00474E1B 880B                    mov byte ptr [ebx], cl
:00474E1D EB47                    jmp 00474E66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474E0D(C)
|
:00474E1F 8A0B                    mov cl, byte ptr [ebx]
:00474E21 8B442448                mov eax, dword ptr [esp+48]
:00474E25 FEC1                    inc cl
:00474E27 880B                    mov byte ptr [ebx], cl
:00474E29 EB3B                    jmp 00474E66

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474DF8(C)
|
:00474E2B 3BDE                    cmp ebx, esi
:00474E2D 720E                    jb 00474E3D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474E37(C)
|
:00474E2F 803B30                  cmp byte ptr [ebx], 30
:00474E32 7505                    jne 00474E39
:00474E34 4B                      dec ebx
:00474E35 3BDE                    cmp ebx, esi
:00474E37 73F6                    jnb 00474E2F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474E32(C)
|
:00474E39 3BDE                    cmp ebx, esi
:00474E3B 7325                    jnb 00474E62

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474E2D(C)
|
:00474E3D 8B442448                mov eax, dword ptr [esp+48]
:00474E41 C60630                  mov byte ptr [esi], 30
:00474E44 66C7000000              mov word ptr [eax], 0000
:00474E49 C6400220                mov [eax+02], 20
:00474E4D C6400301                mov [eax+03], 01
:00474E51 C6400500                mov [eax+05], 00
:00474E55 B801000000              mov eax, 00000001
:00474E5A 5F                      pop edi
:00474E5B 5E                      pop esi
:00474E5C 5D                      pop ebp
:00474E5D 5B                      pop ebx
:00474E5E 83C420                  add esp, 00000020
:00474E61 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474E3B(C)
|
:00474E62 8B442448                mov eax, dword ptr [esp+48]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474E1D(U), :00474E29(U)
|
:00474E66 2AD8                    sub bl, al
:00474E68 5F                      pop edi
:00474E69 80EB03                  sub bl, 03
:00474E6C 5E                      pop esi
:00474E6D 0FBED3                  movsx edx, bl
:00474E70 885803                  mov byte ptr [eax+03], bl
:00474E73 5D                      pop ebp
:00474E74 C644100400              mov [eax+edx+04], 00
:00474E79 8B442404                mov eax, dword ptr [esp+04]
:00474E7D 5B                      pop ebx
:00474E7E 83C420                  add esp, 00000020
:00474E81 C3                      ret


:00474E82 90                      nop
:00474E83 90                      nop
:00474E84 90                      nop
:00474E85 90                      nop
:00474E86 90                      nop
:00474E87 90                      nop
:00474E88 90                      nop
:00474E89 90                      nop
:00474E8A 90                      nop
:00474E8B 90                      nop
:00474E8C 90                      nop
:00474E8D 90                      nop
:00474E8E 90                      nop
:00474E8F 90                      nop

* Referenced by a CALL at Address:
|:00473E91   
|
:00474E90 53                      push ebx
:00474E91 55                      push ebp
:00474E92 56                      push esi
:00474E93 8B742414                mov esi, dword ptr [esp+14]
:00474E97 0FAF742410              imul esi, dword ptr [esp+10]
:00474E9C 83FEE0                  cmp esi, FFFFFFE0
:00474E9F 57                      push edi
:00474EA0 7711                    ja 00474EB3
:00474EA2 85F6                    test esi, esi
:00474EA4 7608                    jbe 00474EAE
:00474EA6 83C60F                  add esi, 0000000F
:00474EA9 83E6F0                  and esi, FFFFFFF0
:00474EAC EB05                    jmp 00474EB3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474EA4(C)
|
:00474EAE BE10000000              mov esi, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474EA0(C), :00474EAC(U)
|

* Reference To: KERNEL32.HeapAlloc, Ord:0168h
                                  |
:00474EB3 8B1D84D54B00            mov ebx, dword ptr [004BD584]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474F1A(C)
|
:00474EB9 33D2                    xor edx, edx
:00474EBB 83FEE0                  cmp esi, FFFFFFE0
:00474EBE 7742                    ja 00474F02
:00474EC0 3B3554464800            cmp esi, dword ptr [00484654]
:00474EC6 7728                    ja 00474EF0
:00474EC8 8BC6                    mov eax, esi
:00474ECA C1E804                  shr eax, 04
:00474ECD 50                      push eax
:00474ECE E8EDDCFFFF              call 00472BC0
:00474ED3 8BD0                    mov edx, eax
:00474ED5 83C404                  add esp, 00000004
:00474ED8 85D2                    test edx, edx
:00474EDA 7418                    je 00474EF4
:00474EDC 8BCE                    mov ecx, esi
:00474EDE 33C0                    xor eax, eax
:00474EE0 8BE9                    mov ebp, ecx
:00474EE2 8BFA                    mov edi, edx
:00474EE4 C1E902                  shr ecx, 02
:00474EE7 F3                      repz
:00474EE8 AB                      stosd
:00474EE9 8BCD                    mov ecx, ebp
:00474EEB 83E103                  and ecx, 00000003
:00474EEE F3                      repz
:00474EEF AA                      stosb

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474EC6(C)
|
:00474EF0 85D2                    test edx, edx
:00474EF2 752D                    jne 00474F21

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474EDA(C)
|
:00474EF4 8B0DD4BC4B00            mov ecx, dword ptr [004BBCD4]
:00474EFA 56                      push esi

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00474EFB 6A08                    push 00000008
:00474EFD 51                      push ecx
:00474EFE FFD3                    call ebx
:00474F00 8BD0                    mov edx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474EBE(C)
|
:00474F02 85D2                    test edx, edx
:00474F04 751B                    jne 00474F21
:00474F06 A194654B00              mov eax, dword ptr [004B6594]
:00474F0B 85C0                    test eax, eax
:00474F0D 7412                    je 00474F21
:00474F0F 56                      push esi
:00474F10 E82BD9FFFF              call 00472840
:00474F15 83C404                  add esp, 00000004
:00474F18 85C0                    test eax, eax
:00474F1A 759D                    jne 00474EB9
:00474F1C 5F                      pop edi
:00474F1D 5E                      pop esi
:00474F1E 5D                      pop ebp
:00474F1F 5B                      pop ebx
:00474F20 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474EF2(C), :00474F04(C), :00474F0D(C)
|
:00474F21 5F                      pop edi
:00474F22 5E                      pop esi
:00474F23 5D                      pop ebp
:00474F24 8BC2                    mov eax, edx
:00474F26 5B                      pop ebx
:00474F27 C3                      ret


:00474F28 90                      nop
:00474F29 90                      nop
:00474F2A 90                      nop
:00474F2B 90                      nop
:00474F2C 90                      nop
:00474F2D 90                      nop
:00474F2E 90                      nop
:00474F2F 90                      nop

* Referenced by a CALL at Addresses:
|:00474CEC   , :00475267   
|
:00474F30 83EC24                  sub esp, 00000024
:00474F33 8B542428                mov edx, dword ptr [esp+28]
:00474F37 53                      push ebx
:00474F38 55                      push ebp
:00474F39 56                      push esi
:00474F3A 668B420A                mov ax, word ptr [edx+0A]
:00474F3E 57                      push edi
:00474F3F 8B7C243C                mov edi, dword ptr [esp+3C]
:00474F43 33ED                    xor ebp, ebp
:00474F45 896C2420                mov dword ptr [esp+20], ebp
:00474F49 896C2428                mov dword ptr [esp+28], ebp
:00474F4D 668B4F0A                mov cx, word ptr [edi+0A]
:00474F51 896C242C                mov dword ptr [esp+2C], ebp
:00474F55 8BF1                    mov esi, ecx
:00474F57 81E1FF7F0000            and ecx, 00007FFF
:00474F5D 33F0                    xor esi, eax
:00474F5F 25FF7F0000              and eax, 00007FFF
:00474F64 81E600800000            and esi, 00008000
:00474F6A 663DFF7F                cmp ax, 7FFF
:00474F6E 8D1C01                  lea ebx, dword ptr [ecx+eax]
:00474F71 896C2430                mov dword ptr [esp+30], ebp
:00474F75 89742418                mov dword ptr [esp+18], esi
:00474F79 895C2410                mov dword ptr [esp+10], ebx
:00474F7D 0F8344020000            jnb 004751C7
:00474F83 6681F9FF7F              cmp cx, 7FFF
:00474F88 0F8339020000            jnb 004751C7
:00474F8E 6681FBFDBF              cmp bx, BFFD
:00474F93 0F872E020000            ja 004751C7
:00474F99 6681FBBF3F              cmp bx, 3FBF
:00474F9E 7710                    ja 00474FB0
:00474FA0 896A08                  mov dword ptr [edx+08], ebp
:00474FA3 896A04                  mov dword ptr [edx+04], ebp
:00474FA6 892A                    mov dword ptr [edx], ebp
:00474FA8 5F                      pop edi
:00474FA9 5E                      pop esi
:00474FAA 5D                      pop ebp
:00474FAB 5B                      pop ebx
:00474FAC 83C424                  add esp, 00000024
:00474FAF C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00474F9E(C)
|
:00474FB0 663BC5                  cmp ax, bp
:00474FB3 7524                    jne 00474FD9
:00474FB5 8B4208                  mov eax, dword ptr [edx+08]
:00474FB8 43                      inc ebx
:00474FB9 A9FFFFFF7F              test eax, 7FFFFFFF
:00474FBE 895C2410                mov dword ptr [esp+10], ebx
:00474FC2 7515                    jne 00474FD9
:00474FC4 396A04                  cmp dword ptr [edx+04], ebp
:00474FC7 7510                    jne 00474FD9
:00474FC9 392A                    cmp dword ptr [edx], ebp
:00474FCB 750C                    jne 00474FD9
:00474FCD 66896A0A                mov word ptr [edx+0A], bp
:00474FD1 5F                      pop edi
:00474FD2 5E                      pop esi
:00474FD3 5D                      pop ebp
:00474FD4 5B                      pop ebx
:00474FD5 83C424                  add esp, 00000024
:00474FD8 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474FB3(C), :00474FC2(C), :00474FC7(C), :00474FCB(C)
|
:00474FD9 663BCD                  cmp cx, bp
:00474FDC 7528                    jne 00475006
:00474FDE 8B4708                  mov eax, dword ptr [edi+08]
:00474FE1 43                      inc ebx
:00474FE2 A9FFFFFF7F              test eax, 7FFFFFFF
:00474FE7 895C2410                mov dword ptr [esp+10], ebx
:00474FEB 7519                    jne 00475006
:00474FED 396F04                  cmp dword ptr [edi+04], ebp
:00474FF0 7514                    jne 00475006
:00474FF2 392F                    cmp dword ptr [edi], ebp
:00474FF4 7510                    jne 00475006
:00474FF6 896A08                  mov dword ptr [edx+08], ebp
:00474FF9 896A04                  mov dword ptr [edx+04], ebp
:00474FFC 892A                    mov dword ptr [edx], ebp
:00474FFE 5F                      pop edi
:00474FFF 5E                      pop esi
:00475000 5D                      pop ebp
:00475001 5B                      pop ebx
:00475002 83C424                  add esp, 00000024
:00475005 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474FDC(C), :00474FEB(C), :00474FF0(C), :00474FF4(C)
|
:00475006 8D44242C                lea eax, dword ptr [esp+2C]
:0047500A 896C241C                mov dword ptr [esp+1C], ebp
:0047500E 89442414                mov dword ptr [esp+14], eax

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00475012 BD05000000              mov ebp, 00000005

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475090(C)
|
:00475017 8B4C241C                mov ecx, dword ptr [esp+1C]
:0047501B 85ED                    test ebp, ebp
:0047501D 8D0409                  lea eax, dword ptr [ecx+ecx]
:00475020 7E57                    jle 00475079
:00475022 8B4C2414                mov ecx, dword ptr [esp+14]
:00475026 83C708                  add edi, 00000008
:00475029 8D3410                  lea esi, dword ptr [eax+edx]
:0047502C 896C2424                mov dword ptr [esp+24], ebp
:00475030 8D59FC                  lea ebx, dword ptr [ecx-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475067(C)
|
:00475033 33D2                    xor edx, edx
:00475035 33C0                    xor eax, eax
:00475037 668B17                  mov dx, word ptr [edi]
:0047503A 668B06                  mov ax, word ptr [esi]
:0047503D 0FAFD0                  imul edx, eax
:00475040 8B0B                    mov ecx, dword ptr [ebx]
:00475042 53                      push ebx
:00475043 52                      push edx
:00475044 51                      push ecx
:00475045 E826F1FFFF              call 00474170
:0047504A 83C40C                  add esp, 0000000C
:0047504D 85C0                    test eax, eax
:0047504F 7407                    je 00475058
:00475051 8B442414                mov eax, dword ptr [esp+14]
:00475055 66FF00                  inc word ptr [eax]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047504F(C)
|
:00475058 8B442424                mov eax, dword ptr [esp+24]
:0047505C 83C602                  add esi, 00000002
:0047505F 83EF02                  sub edi, 00000002
:00475062 48                      dec eax
:00475063 89442424                mov dword ptr [esp+24], eax
:00475067 75CA                    jne 00475033
:00475069 8B7C243C                mov edi, dword ptr [esp+3C]
:0047506D 8B542438                mov edx, dword ptr [esp+38]
:00475071 8B5C2410                mov ebx, dword ptr [esp+10]
:00475075 8B742418                mov esi, dword ptr [esp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475020(C)
|
:00475079 8B4C2414                mov ecx, dword ptr [esp+14]
:0047507D 8B44241C                mov eax, dword ptr [esp+1C]
:00475081 83C102                  add ecx, 00000002
:00475084 40                      inc eax
:00475085 4D                      dec ebp
:00475086 894C2414                mov dword ptr [esp+14], ecx
:0047508A 85ED                    test ebp, ebp
:0047508C 8944241C                mov dword ptr [esp+1C], eax
:00475090 7F85                    jg 00475017
:00475092 81C302C00000            add ebx, 0000C002
:00475098 BD00000080              mov ebp, 80000000
:0047509D 6685DB                  test bx, bx
:004750A0 895C2410                mov dword ptr [esp+10], ebx
:004750A4 7E2F                    jle 004750D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004750D3(C)
|
:004750A6 856C2430                test dword ptr [esp+30], ebp
:004750AA 7529                    jne 004750D5
:004750AC 8D542428                lea edx, dword ptr [esp+28]
:004750B0 52                      push edx
:004750B1 E85AF1FFFF              call 00474210
:004750B6 8B442414                mov eax, dword ptr [esp+14]
:004750BA 8B54243C                mov edx, dword ptr [esp+3C]
:004750BE 8B74241C                mov esi, dword ptr [esp+1C]
:004750C2 05FFFF0000              add eax, 0000FFFF
:004750C7 83C404                  add esp, 00000004
:004750CA 89442410                mov dword ptr [esp+10], eax
:004750CE 6685C0                  test ax, ax
:004750D1 8BD8                    mov ebx, eax
:004750D3 7FD1                    jg 004750A6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004750A4(C), :004750AA(C)
|
:004750D5 33C9                    xor ecx, ecx
:004750D7 663BD9                  cmp bx, cx
:004750DA 7F4E                    jg 0047512A
:004750DC 81C3FFFF0000            add ebx, 0000FFFF
:004750E2 663BD9                  cmp bx, cx
:004750E5 7D34                    jge 0047511B
:004750E7 0FBFC3                  movsx eax, bx
:004750EA F7D8                    neg eax
:004750EC 03D8                    add ebx, eax
:004750EE 8BF0                    mov esi, eax
:004750F0 895C2410                mov dword ptr [esp+10], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047510D(C)
|
:004750F4 F644242801              test [esp+28], 01
:004750F9 7404                    je 004750FF
:004750FB FF442420                inc [esp+20]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004750F9(C)
|
:004750FF 8D442428                lea eax, dword ptr [esp+28]
:00475103 50                      push eax
:00475104 E837F1FFFF              call 00474240
:00475109 83C404                  add esp, 00000004
:0047510C 4E                      dec esi
:0047510D 75E5                    jne 004750F4
:0047510F 8B542438                mov edx, dword ptr [esp+38]
:00475113 8B5C2410                mov ebx, dword ptr [esp+10]
:00475117 8B742418                mov esi, dword ptr [esp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004750E5(C)
|
:0047511B 8B442420                mov eax, dword ptr [esp+20]
:0047511F 33C9                    xor ecx, ecx
:00475121 3BC1                    cmp eax, ecx
:00475123 7405                    je 0047512A
:00475125 804C242801              or byte ptr [esp+28], 01

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004750DA(C), :00475123(C)
|
:0047512A BF00800000              mov edi, 00008000
:0047512F 66397C2428              cmp word ptr [esp+28], di
:00475134 7710                    ja 00475146
:00475136 8B442428                mov eax, dword ptr [esp+28]
:0047513A 25FFFF0100              and eax, 0001FFFF
:0047513F 3D00800100              cmp eax, 00018000
:00475144 7539                    jne 0047517F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475134(C)
|
:00475146 83C8FF                  or eax, FFFFFFFF
:00475149 3944242A                cmp dword ptr [esp+2A], eax
:0047514D 752C                    jne 0047517B
:0047514F 3944242E                cmp dword ptr [esp+2E], eax
:00475153 894C242A                mov dword ptr [esp+2A], ecx
:00475157 751C                    jne 00475175
:00475159 66817C2432FFFF          cmp word ptr [esp+32], FFFF
:00475160 894C242E                mov dword ptr [esp+2E], ecx
:00475164 7508                    jne 0047516E
:00475166 66897C2432              mov word ptr [esp+32], di
:0047516B 43                      inc ebx
:0047516C EB11                    jmp 0047517F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475164(C)
|
:0047516E 66FF442432              inc [esp+32]
:00475173 EB0A                    jmp 0047517F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475157(C)
|
:00475175 FF44242E                inc [esp+2E]
:00475179 EB04                    jmp 0047517F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047514D(C)
|
:0047517B FF44242A                inc [esp+2A]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00475144(C), :0047516C(U), :00475173(U), :00475179(U)
|
:0047517F 6681FBFF7F              cmp bx, 7FFF
:00475184 721D                    jb 004751A3
:00475186 66F7DE                  neg si
:00475189 1BF6                    sbb esi, esi
:0047518B 894A04                  mov dword ptr [edx+04], ecx
:0047518E 23F5                    and esi, ebp
:00475190 890A                    mov dword ptr [edx], ecx
:00475192 81C60080FF7F            add esi, 7FFF8000
:00475198 897208                  mov dword ptr [edx+08], esi
:0047519B 5F                      pop edi
:0047519C 5E                      pop esi
:0047519D 5D                      pop ebp
:0047519E 5B                      pop ebx
:0047519F 83C424                  add esp, 00000024
:004751A2 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475184(C)
|
:004751A3 668B4C242A              mov cx, word ptr [esp+2A]
:004751A8 8B44242C                mov eax, dword ptr [esp+2C]
:004751AC 66890A                  mov word ptr [edx], cx
:004751AF 8B4C2430                mov ecx, dword ptr [esp+30]
:004751B3 0BDE                    or ebx, esi
:004751B5 894202                  mov dword ptr [edx+02], eax
:004751B8 894A06                  mov dword ptr [edx+06], ecx
:004751BB 66895A0A                mov word ptr [edx+0A], bx
:004751BF 5F                      pop edi
:004751C0 5E                      pop esi
:004751C1 5D                      pop ebp
:004751C2 5B                      pop ebx
:004751C3 83C424                  add esp, 00000024
:004751C6 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00474F7D(C), :00474F88(C), :00474F93(C)
|
:004751C7 66F7DE                  neg si
:004751CA 1BF6                    sbb esi, esi
:004751CC 5F                      pop edi
:004751CD 81E600000080            and esi, 80000000
:004751D3 896A04                  mov dword ptr [edx+04], ebp
:004751D6 81C60080FF7F            add esi, 7FFF8000
:004751DC 892A                    mov dword ptr [edx], ebp
:004751DE 897208                  mov dword ptr [edx+08], esi
:004751E1 5E                      pop esi
:004751E2 5D                      pop ebp
:004751E3 5B                      pop ebx
:004751E4 83C424                  add esp, 00000024
:004751E7 C3                      ret


:004751E8 90                      nop
:004751E9 90                      nop
:004751EA 90                      nop
:004751EB 90                      nop
:004751EC 90                      nop
:004751ED 90                      nop
:004751EE 90                      nop
:004751EF 90                      nop

* Referenced by a CALL at Addresses:
|:004749A6   , :00474CD0   
|
:004751F0 83EC0C                  sub esp, 0000000C
:004751F3 53                      push ebx
:004751F4 56                      push esi
:004751F5 8B74241C                mov esi, dword ptr [esp+1C]
:004751F9 57                      push edi
:004751FA BFB0484800              mov edi, 004848B0
:004751FF 83EF60                  sub edi, 00000060
:00475202 85F6                    test esi, esi
:00475204 746D                    je 00475273
:00475206 7D0A                    jge 00475212

* Possible StringData Ref from Data Obj ->"?q=
ףp=
ף?Zd;On?,eX"
                                        ->"?#GGŧ?@il7?3=BzՔ?aw"
                                        ->"̫?/L[Mľ?S;uD?g9Eϔ?$#⼺"
                                        ->";1az?aUY"
                                  |
:00475208 BF104A4800              mov edi, 00484A10
:0047520D F7DE                    neg esi
:0047520F 83EF60                  sub edi, 00000060

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475206(C)
|
:00475212 8B442424                mov eax, dword ptr [esp+24]
:00475216 8B5C241C                mov ebx, dword ptr [esp+1C]
:0047521A 85C0                    test eax, eax
:0047521C 7505                    jne 00475223
:0047521E 66C7030000              mov word ptr [ebx], 0000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047521C(C)
|
:00475223 85F6                    test esi, esi
:00475225 744C                    je 00475273

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475271(C)
|
:00475227 8BC6                    mov eax, esi
:00475229 83C754                  add edi, 00000054
:0047522C 83E007                  and eax, 00000007
:0047522F C1FE03                  sar esi, 03
:00475232 85C0                    test eax, eax
:00475234 7439                    je 0047526F
:00475236 8D0440                  lea eax, dword ptr [eax+2*eax]
:00475239 66813C870080            cmp word ptr [edi+4*eax], 8000
:0047523F 8D0487                  lea eax, dword ptr [edi+4*eax]
:00475242 7221                    jb 00475265
:00475244 8B08                    mov ecx, dword ptr [eax]
:00475246 894C240C                mov dword ptr [esp+0C], ecx
:0047524A 8B5004                  mov edx, dword ptr [eax+04]
:0047524D 89542410                mov dword ptr [esp+10], edx
:00475251 8B4008                  mov eax, dword ptr [eax+08]
:00475254 89442414                mov dword ptr [esp+14], eax
:00475258 8B44240E                mov eax, dword ptr [esp+0E]
:0047525C 48                      dec eax
:0047525D 8944240E                mov dword ptr [esp+0E], eax
:00475261 8D44240C                lea eax, dword ptr [esp+0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475242(C)
|
:00475265 50                      push eax
:00475266 53                      push ebx
:00475267 E8C4FCFFFF              call 00474F30
:0047526C 83C408                  add esp, 00000008

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475234(C)
|
:0047526F 85F6                    test esi, esi
:00475271 75B4                    jne 00475227

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00475204(C), :00475225(C)
|
:00475273 5F                      pop edi
:00475274 5E                      pop esi
:00475275 5B                      pop ebx
:00475276 83C40C                  add esp, 0000000C
:00475279 C3                      ret


:0047527A 90                      nop
:0047527B 90                      nop
:0047527C 90                      nop
:0047527D 90                      nop
:0047527E 90                      nop
:0047527F 90                      nop

* Referenced by a CALL at Addresses:
|:00410C06   , :00410C43   , :00410D1B   , :00410EC5   , :00477A82   
|
:00475280 55                      push ebp
:00475281 8BEC                    mov ebp, esp
:00475283 51                      push ecx
:00475284 A17C7C4B00              mov eax, dword ptr [004B7C7C]
:00475289 53                      push ebx
:0047528A 33DB                    xor ebx, ebx
:0047528C 3BC3                    cmp eax, ebx
:0047528E 0F8418010000            je 004753AC
:00475294 57                      push edi
:00475295 56                      push esi
:00475296 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00475297 FF1544D44B00            Call dword ptr [004BD444]
:0047529D E85C2C0000              call 00477EFE
:004752A2 BFE8854B00              mov edi, 004B85E8
:004752A7 57                      push edi
:004752A8 FF750C                  push [ebp+0C]
:004752AB FF7508                  push [ebp+08]
:004752AE E8242B0000              call 00477DD7
:004752B3 83C40C                  add esp, 0000000C
:004752B6 BE00010000              mov esi, 00000100
:004752BB A37C7C4B00              mov dword ptr [004B7C7C], eax
:004752C0 68B08E4B00              push 004B8EB0
:004752C5 56                      push esi
:004752C6 53                      push ebx
:004752C7 50                      push eax

* Reference To: GDI32.GetPaletteEntries, Ord:00EFh
                                  |
:004752C8 FF153CD44B00            Call dword ptr [004BD43C]
:004752CE 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004752FC(C)
|
:004752D0 8A88B28E4B00            mov cl, byte ptr [eax+004B8EB2]
:004752D6 8888E8854B00            mov byte ptr [eax+004B85E8], cl
:004752DC 8A88B08E4B00            mov cl, byte ptr [eax+004B8EB0]
:004752E2 8888EA854B00            mov byte ptr [eax+004B85EA], cl
:004752E8 8A88B18E4B00            mov cl, byte ptr [eax+004B8EB1]
:004752EE 8888E9854B00            mov byte ptr [eax+004B85E9], cl
:004752F4 83C004                  add eax, 00000004

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:004752F7 3D00040000              cmp eax, 00000400
:004752FC 7CD2                    jl 004752D0
:004752FE 391D506E4B00            cmp dword ptr [004B6E50], ebx
:00475304 742B                    je 00475331
:00475306 833DC8B04B0000          cmp dword ptr [004BB0C8], 00000000
:0047530D 7E22                    jle 00475331
:0047530F C745FCE8894B00          mov [ebp-04], 004B89E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047532F(C)
|
:00475316 8B45FC                  mov eax, dword ptr [ebp-04]
:00475319 57                      push edi
:0047531A 56                      push esi
:0047531B 6A00                    push 00000000
:0047531D FF30                    push dword ptr [eax]
:0047531F E8702A0000              call 00477D94
:00475324 8345FC04                add dword ptr [ebp-04], 00000004
:00475328 43                      inc ebx
:00475329 3B1DC8B04B00            cmp ebx, dword ptr [004BB0C8]
:0047532F 7CE5                    jl 00475316

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00475304(C), :0047530D(C)
|
:00475331 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475336 FF348520AF4B00          push dword ptr [4*eax+004BAF20]

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:0047533D FF1518D64B00            Call dword ptr [004BD618]
:00475343 6A00                    push 00000000
:00475345 8BF0                    mov esi, eax
:00475347 FF357C7C4B00            push dword ptr [004B7C7C]
:0047534D 56                      push esi

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:0047534E FF1578D44B00            Call dword ptr [004BD478]
:00475354 56                      push esi

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:00475355 FF157CD44B00            Call dword ptr [004BD47C]
:0047535B 85C0                    test eax, eax
:0047535D 7428                    je 00475387
:0047535F A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475364 6A01                    push 00000001
:00475366 6A00                    push 00000000
:00475368 FF348520AF4B00          push dword ptr [4*eax+004BAF20]

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:0047536F FF1524D64B00            Call dword ptr [004BD624]
:00475375 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:0047537A FF348520AF4B00          push dword ptr [4*eax+004BAF20]

* Reference To: USER32.UpdateWindow, Ord:0251h
                                  |
:00475381 FF15FCD54B00            Call dword ptr [004BD5FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047535D(C)
|
:00475387 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:0047538C 56                      push esi
:0047538D FF348520AF4B00          push dword ptr [4*eax+004BAF20]

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00475394 FF151CD64B00            Call dword ptr [004BD61C]
:0047539A 8B4508                  mov eax, dword ptr [ebp+08]
:0047539D 5E                      pop esi
:0047539E A3787C4B00              mov dword ptr [004B7C78], eax
:004753A3 8B450C                  mov eax, dword ptr [ebp+0C]
:004753A6 A3788B4B00              mov dword ptr [004B8B78], eax
:004753AB 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047528E(C)
|
:004753AC 5B                      pop ebx
:004753AD C9                      leave
:004753AE C3                      ret



* Referenced by a CALL at Addresses:
|:00475EB0   , :004760D5   , :004767DB   , :0047687E   , :00476A3B   
|:00476A70   , :00476AAB   , :00476AE7   , :00476C9D   , :00477034   
|
:004753AF 55                      push ebp
:004753B0 8BEC                    mov ebp, esp
:004753B2 53                      push ebx
:004753B3 56                      push esi
:004753B4 57                      push edi
:004753B5 8B7D10                  mov edi, dword ptr [ebp+10]
:004753B8 85FF                    test edi, edi
:004753BA 0F84CD000000            je 0047548D
:004753C0 8B5D14                  mov ebx, dword ptr [ebp+14]
:004753C3 85DB                    test ebx, ebx
:004753C5 0F84C2000000            je 0047548D
:004753CB 833DB8B04B0000          cmp dword ptr [004BB0B8], 00000000
:004753D2 751B                    jne 004753EF
:004753D4 53                      push ebx
:004753D5 57                      push edi
:004753D6 FF750C                  push [ebp+0C]
:004753D9 FF7508                  push [ebp+08]
:004753DC FF35F0BD4B00            push dword ptr [004BBDF0]
:004753E2 E8AB000000              call 00475492
:004753E7 83C414                  add esp, 00000014
:004753EA E99E000000              jmp 0047548D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004753D2(C)
|
:004753EF A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:004753F4 C1E002                  shl eax, 02
:004753F7 8BB0306B4B00            mov esi, dword ptr [eax+004B6B30]
:004753FD 85F6                    test esi, esi
:004753FF 7511                    jne 00475412
:00475401 8B4D08                  mov ecx, dword ptr [ebp+08]
:00475404 89B8306B4B00            mov dword ptr [eax+004B6B30], edi
:0047540A 8988686E4B00            mov dword ptr [eax+004B6E68], ecx
:00475410 EB31                    jmp 00475443

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004753FF(C)
|
:00475412 8B5508                  mov edx, dword ptr [ebp+08]
:00475415 8B88686E4B00            mov ecx, dword ptr [eax+004B6E68]
:0047541B 03F1                    add esi, ecx
:0047541D 8D1C17                  lea ebx, dword ptr [edi+edx]
:00475420 3BDE                    cmp ebx, esi
:00475422 7E0A                    jle 0047542E
:00475424 03FA                    add edi, edx
:00475426 2BF9                    sub edi, ecx
:00475428 89B8306B4B00            mov dword ptr [eax+004B6B30], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475422(C)
|
:0047542E 3BD1                    cmp edx, ecx
:00475430 7D0E                    jge 00475440
:00475432 2BCA                    sub ecx, edx
:00475434 8990686E4B00            mov dword ptr [eax+004B6E68], edx
:0047543A 0188306B4B00            add dword ptr [eax+004B6B30], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475430(C)
|
:00475440 8B5D14                  mov ebx, dword ptr [ebp+14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475410(U)
|
:00475443 8B90C06C4B00            mov edx, dword ptr [eax+004B6CC0]
:00475449 85D2                    test edx, edx
:0047544B 7511                    jne 0047545E
:0047544D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00475450 8998C06C4B00            mov dword ptr [eax+004B6CC0], ebx
:00475456 8988F86F4B00            mov dword ptr [eax+004B6FF8], ecx
:0047545C EB2F                    jmp 0047548D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047544B(C)
|
:0047545E 8B88F86F4B00            mov ecx, dword ptr [eax+004B6FF8]
:00475464 8D3411                  lea esi, dword ptr [ecx+edx]
:00475467 8B550C                  mov edx, dword ptr [ebp+0C]
:0047546A 8D3C13                  lea edi, dword ptr [ebx+edx]
:0047546D 3BFE                    cmp edi, esi
:0047546F 7E0A                    jle 0047547B
:00475471 03DA                    add ebx, edx
:00475473 2BD9                    sub ebx, ecx
:00475475 8998C06C4B00            mov dword ptr [eax+004B6CC0], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047546F(C)
|
:0047547B 3BD1                    cmp edx, ecx
:0047547D 7D0E                    jge 0047548D
:0047547F 2BCA                    sub ecx, edx
:00475481 8990F86F4B00            mov dword ptr [eax+004B6FF8], edx
:00475487 0188C06C4B00            add dword ptr [eax+004B6CC0], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004753BA(C), :004753C5(C), :004753EA(U), :0047545C(U), :0047547D(C)
|
:0047548D 5F                      pop edi
:0047548E 5E                      pop esi
:0047548F 5B                      pop ebx
:00475490 5D                      pop ebp
:00475491 C3                      ret



* Referenced by a CALL at Addresses:
|:004753E2   , :004773E7   , :00477573   , :00477A13   
|
:00475492 55                      push ebp
:00475493 8BEC                    mov ebp, esp
:00475495 81EC00080000            sub esp, 00000800
:0047549B 53                      push ebx
:0047549C 33DB                    xor ebx, ebx
:0047549E 391DCCB04B00            cmp dword ptr [004BB0CC], ebx
:004754A4 56                      push esi
:004754A5 0F8505010000            jne 004755B0
:004754AB 395D14                  cmp dword ptr [ebp+14], ebx
:004754AE 0F84FC000000            je 004755B0
:004754B4 395D18                  cmp dword ptr [ebp+18], ebx
:004754B7 0F84F3000000            je 004755B0
:004754BD 8B4508                  mov eax, dword ptr [ebp+08]
:004754C0 8BF0                    mov esi, eax
:004754C2 C1E602                  shl esi, 02
:004754C5 399EE8894B00            cmp dword ptr [esi+004B89E8], ebx
:004754CB 0F84DF000000            je 004755B0
:004754D1 391D506E4B00            cmp dword ptr [004B6E50], ebx
:004754D7 57                      push edi
:004754D8 756B                    jne 00475545
:004754DA 8D8500F8FFFF            lea eax, dword ptr [ebp+FFFFF800]
:004754E0 BF00010000              mov edi, 00000100
:004754E5 50                      push eax
:004754E6 57                      push edi
:004754E7 53                      push ebx
:004754E8 FF357C7C4B00            push dword ptr [004B7C7C]

* Reference To: GDI32.GetPaletteEntries, Ord:00EFh
                                  |
:004754EE FF153CD44B00            Call dword ptr [004BD43C]
:004754F4 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047552F(C)
|
:004754F6 8A8C0502F8FFFF          mov cl, byte ptr [ebp+eax-000007FE]
:004754FD 888C0500FCFFFF          mov byte ptr [ebp+eax-00000400], cl
:00475504 8A8C0500F8FFFF          mov cl, byte ptr [ebp+eax-00000800]
:0047550B 888C0502FCFFFF          mov byte ptr [ebp+eax-000003FE], cl
:00475512 8A8C0501F8FFFF          mov cl, byte ptr [ebp+eax-000007FF]
:00475519 888C0501FCFFFF          mov byte ptr [ebp+eax-000003FF], cl
:00475520 889C0503FCFFFF          mov byte ptr [ebp+eax-000003FD], bl
:00475527 83C004                  add eax, 00000004

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:0047552A 3D00040000              cmp eax, 00000400
:0047552F 7CC5                    jl 004754F6
:00475531 8D8500FCFFFF            lea eax, dword ptr [ebp+FFFFFC00]
:00475537 50                      push eax
:00475538 57                      push edi
:00475539 53                      push ebx
:0047553A FFB6E8894B00            push dword ptr [esi+004B89E8]
:00475540 E84F280000              call 00477D94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004754D8(C)
|
:00475545 8B86C0824B00            mov eax, dword ptr [esi+004B82C0]
:0047554B 394514                  cmp dword ptr [ebp+14], eax
:0047554E 7E03                    jle 00475553
:00475550 894514                  mov dword ptr [ebp+14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047554E(C)
|
:00475553 8B86808B4B00            mov eax, dword ptr [esi+004B8B80]
:00475559 394518                  cmp dword ptr [ebp+18], eax
:0047555C 7E03                    jle 00475561
:0047555E 894518                  mov dword ptr [ebp+18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047555C(C)
|
:00475561 FFB620AF4B00            push dword ptr [esi+004BAF20]

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00475567 FF1518D64B00            Call dword ptr [004BD618]
:0047556D 53                      push ebx
:0047556E 8BF8                    mov edi, eax
:00475570 FF357C7C4B00            push dword ptr [004B7C7C]
:00475576 57                      push edi

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:00475577 FF1578D44B00            Call dword ptr [004BD478]
:0047557D 57                      push edi

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:0047557E FF157CD44B00            Call dword ptr [004BD47C]
:00475584 FF7510                  push [ebp+10]
:00475587 FF750C                  push [ebp+0C]
:0047558A FFB6E8894B00            push dword ptr [esi+004B89E8]
:00475590 FF7518                  push [ebp+18]
:00475593 FF7514                  push [ebp+14]
:00475596 FF7510                  push [ebp+10]
:00475599 FF750C                  push [ebp+0C]
:0047559C 57                      push edi
:0047559D E80B280000              call 00477DAD
:004755A2 57                      push edi
:004755A3 FFB620AF4B00            push dword ptr [esi+004BAF20]

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:004755A9 FF151CD64B00            Call dword ptr [004BD61C]
:004755AF 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004754A5(C), :004754AE(C), :004754B7(C), :004754CB(C)
|
:004755B0 5E                      pop esi
:004755B1 5B                      pop ebx
:004755B2 C9                      leave
:004755B3 C3                      ret



* Referenced by a CALL at Addresses:
|:0046692F   , :0046A428   
|
:004755B4 55                      push ebp
:004755B5 8BEC                    mov ebp, esp
:004755B7 A1C8B04B00              mov eax, dword ptr [004BB0C8]
:004755BC FF7510                  push [ebp+10]
:004755BF 8B5508                  mov edx, dword ptr [ebp+08]
:004755C2 8BC8                    mov ecx, eax
:004755C4 FF750C                  push [ebp+0C]
:004755C7 A3F0BD4B00              mov dword ptr [004BBDF0], eax
:004755CC C1E102                  shl ecx, 02
:004755CF 8389C0824B00FF          or dword ptr [ecx+004B82C0], FFFFFFFF
:004755D6 899120AF4B00            mov dword ptr [ecx+004BAF20], edx
:004755DC E8BE210000              call 0047779F
:004755E1 8B4514                  mov eax, dword ptr [ebp+14]
:004755E4 59                      pop ecx
:004755E5 F7D8                    neg eax
:004755E7 1BC0                    sbb eax, eax
:004755E9 59                      pop ecx
:004755EA 66250180                and ax, 8001
:004755EE 0500800000              add eax, 00008000
:004755F3 50                      push eax
:004755F4 FF7510                  push [ebp+10]
:004755F7 FF750C                  push [ebp+0C]
:004755FA E815200000              call 00477614
:004755FF A1C8B04B00              mov eax, dword ptr [004BB0C8]
:00475604 83C40C                  add esp, 0000000C
:00475607 FF05C8B04B00            inc dword ptr [004BB0C8]
:0047560D 5D                      pop ebp
:0047560E C3                      ret



* Referenced by a CALL at Addresses:
|:004037D5   , :0040385C   , :0040389C   , :00403F3C   , :00405047   
|:004051DB   , :00405220   , :004052FA   , :00405342   , :004101A7   
|:004101EC   , :004103C6   , :004119A2   , :0041B835   , :0041BDD3   
|:0041FF8C   , :0041FFDA   , :00420063   , :00420C4E   , :00420C6B   
|:004223EE   , :00424289   , :004244CE   , :004244EB   , :004249E3   
|:00425FF3   , :00426048   , :0042892B   , :00428B13   , :00428C86   
|:0042902B   , :00429315   , :004294BF   , :0042956E   , :00429708   
|:0042CB70   , :0042CD84   , :0042EE3B   , :00430B79   , :004590C2   
|:004590CE   , :0045911C   , :00459172   , :0045917E   , :0045925C   
|:00459864   , :00459870   , :004598FC   , :0045A2A7   , :0045A30C   
|:0045A405   , :0045A422   , :0045A4FA   , :0045A55F   , :0045A658   
|:0045A675   , :0045BD5D   , :0045BDBF   , :0045BE1C   , :0045BE5B   
|:0045BEA6   , :0045BEB2   , :0045C1F9   , :0045C39B   , :0045C3B0   
|:0045C4C0   , :0045C53C   , :0045C5F3   , :0045C65E   , :0045C6C5   
|:0045C731   , :0045C79C   , :004668FC   , :0046693E   , :004674D6   
|:00467892   , :00467917   , :00467931   , :00467961   , :00467BD6   
|:00467E01   , :00467ED7   , :00468336   , :00468947   , :004689F6   
|:00468A5E   , :00468B66   , :0046A442   , :0046BD68   , :0046BF37   
|:0046BFC7   , :0046C88D   , :0046DC69   , :00475C05   , :00475C1A   
|:004777EA   
|
:0047560F 55                      push ebp
:00475610 8BEC                    mov ebp, esp
:00475612 81EC28040000            sub esp, 00000428
:00475618 8B4508                  mov eax, dword ptr [ebp+08]
:0047561B 3B05C8B04B00            cmp eax, dword ptr [004BB0C8]
:00475621 7D1D                    jge 00475640
:00475623 8D8DD8FBFFFF            lea ecx, dword ptr [ebp+FFFFFBD8]
:00475629 A3F0BD4B00              mov dword ptr [004BBDF0], eax
:0047562E 51                      push ecx
:0047562F FF3485F0674B00          push dword ptr [4*eax+004B67F0]
:00475636 E83D270000              call 00477D78
:0047563B A3BC924B00              mov dword ptr [004B92BC], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475621(C)
|
:00475640 C9                      leave
:00475641 C3                      ret



* Referenced by a CALL at Addresses:
|:004777D3   , :00478FFB   , :00479035   
|
:00475642 55                      push ebp
:00475643 8BEC                    mov ebp, esp
:00475645 81EC04050000            sub esp, 00000504
:0047564B 53                      push ebx
:0047564C 33DB                    xor ebx, ebx
:0047564E 391DE8894B00            cmp dword ptr [004B89E8], ebx
:00475654 56                      push esi
:00475655 57                      push edi
:00475656 0F8513020000            jne 0047586F
:0047565C 391DC8B04B00            cmp dword ptr [004BB0C8], ebx

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:00475662 8B3D30D44B00            mov edi, dword ptr [004BD430]
:00475668 895DF8                  mov dword ptr [ebp-08], ebx
:0047566B 7E52                    jle 004756BF
:0047566D C745FCC0824B00          mov [ebp-04], 004B82C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004756BD(C)
|
:00475674 8B45F8                  mov eax, dword ptr [ebp-08]
:00475677 8B4DFC                  mov ecx, dword ptr [ebp-04]
:0047567A 8BF0                    mov esi, eax
:0047567C C1E602                  shl esi, 02
:0047567F FFB6808B4B00            push dword ptr [esi+004B8B80]
:00475685 899E98694B00            mov dword ptr [esi+004B6998], ebx
:0047568B FF31                    push dword ptr [ecx]
:0047568D 50                      push eax
:0047568E E862210000              call 004777F5
:00475693 83C40C                  add esp, 0000000C
:00475696 3BC3                    cmp eax, ebx
:00475698 8986E8894B00            mov dword ptr [esi+004B89E8], eax
:0047569E 0F84D2010000            je 00475876
:004756A4 FFB6F0674B00            push dword ptr [esi+004B67F0]
:004756AA 50                      push eax
:004756AB FFD7                    call edi
:004756AD FF45F8                  inc [ebp-08]
:004756B0 8345FC04                add dword ptr [ebp-04], 00000004
:004756B4 8B45F8                  mov eax, dword ptr [ebp-08]
:004756B7 3B05C8B04B00            cmp eax, dword ptr [004BB0C8]
:004756BD 7CB5                    jl 00475674

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047566B(C)
|
:004756BF 8D85FCFAFFFF            lea eax, dword ptr [ebp+FFFFFAFC]
:004756C5 50                      push eax
:004756C6 FF35F0674B00            push dword ptr [004B67F0]
:004756CC E8A7260000              call 00477D78
:004756D1 A3BC924B00              mov dword ptr [004B92BC], eax
:004756D6 E8A0010000              call 0047587B
:004756DB 33F6                    xor esi, esi
:004756DD 391DC8B04B00            cmp dword ptr [004BB0C8], ebx
:004756E3 7E29                    jle 0047570E
:004756E5 C745FCE8894B00          mov [ebp-04], 004B89E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047570C(C)
|
:004756EC 8B45FC                  mov eax, dword ptr [ebp-04]
:004756EF 68E8854B00              push 004B85E8
:004756F4 6800010000              push 00000100
:004756F9 53                      push ebx
:004756FA FF30                    push dword ptr [eax]
:004756FC E893260000              call 00477D94
:00475701 8345FC04                add dword ptr [ebp-04], 00000004
:00475705 46                      inc esi
:00475706 3B35C8B04B00            cmp esi, dword ptr [004BB0C8]
:0047570C 7CDE                    jl 004756EC

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004756E3(C)
|
:0047570E 686C4B4800              push 00484B6C
:00475713 53                      push ebx
:00475714 53                      push ebx
:00475715 53                      push ebx
:00475716 53                      push ebx
:00475717 6888000000              push 00000088
:0047571C 53                      push ebx
:0047571D 53                      push ebx
:0047571E 53                      push ebx
:0047571F 53                      push ebx
:00475720 53                      push ebx
:00475721 53                      push ebx

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00475722 6A08                    push 00000008
:00475724 6AF0                    push FFFFFFF0

* Reference To: GDI32.CreateFontA, Ord:002Bh
                                  |
:00475726 FF1580D44B00            Call dword ptr [004BD480]
:0047572C 800D4E664B00FF          or byte ptr [004B664E], FF
:00475733 800D4C664B00FF          or byte ptr [004B664C], FF
:0047573A 800D4D664B00FF          or byte ptr [004B664D], FF
:00475741 A3A48E4B00              mov dword ptr [004B8EA4], eax
:00475746 6A40                    push 00000040
:00475748 8D45B8                  lea eax, dword ptr [ebp-48]
:0047574B 53                      push ebx
:0047574C 50                      push eax
:0047574D C70520664B0028000000    mov dword ptr [004B6620], 00000028
:00475757 C70524664B0020000000    mov dword ptr [004B6624], 00000020
:00475761 C70528664B0010000000    mov dword ptr [004B6628], 00000010
:0047576B 66C7052C664B000100      mov word ptr [004B662C], 0001
:00475774 66C7052E664B000100      mov word ptr [004B662E], 0001
:0047577D 891D30664B00            mov dword ptr [004B6630], ebx
:00475783 891D34664B00            mov dword ptr [004B6634], ebx
:00475789 891D38664B00            mov dword ptr [004B6638], ebx
:0047578F 891D3C664B00            mov dword ptr [004B663C], ebx
:00475795 891D40664B00            mov dword ptr [004B6640], ebx
:0047579B 891D44664B00            mov dword ptr [004B6644], ebx
:004757A1 881D4A664B00            mov byte ptr [004B664A], bl
:004757A7 881D48664B00            mov byte ptr [004B6648], bl
:004757AD 881D49664B00            mov byte ptr [004B6649], bl
:004757B3 E818A3FFFF              call 0046FAD0
:004757B8 83C40C                  add esp, 0000000C
:004757BB FF3520AF4B00            push dword ptr [004BAF20]

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:004757C1 FF1518D64B00            Call dword ptr [004BD618]
:004757C7 8BF0                    mov esi, eax
:004757C9 56                      push esi

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:004757CA FF1540D44B00            Call dword ptr [004BD440]
:004757D0 A380694B00              mov dword ptr [004B6980], eax
:004757D5 B820664B00              mov eax, 004B6620
:004757DA 53                      push ebx
:004757DB 8D4DB8                  lea ecx, dword ptr [ebp-48]
:004757DE 50                      push eax
:004757DF 51                      push ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:004757E0 6A04                    push 00000004
:004757E2 50                      push eax
:004757E3 56                      push esi

* Reference To: GDI32.CreateDIBitmap, Ord:0025h
                                  |
:004757E4 FF152CD44B00            Call dword ptr [004BD42C]
:004757EA 50                      push eax
:004757EB A3A08E4B00              mov dword ptr [004B8EA0], eax
:004757F0 FF3580694B00            push dword ptr [004B6980]
:004757F6 FFD7                    call edi
:004757F8 6A01                    push 00000001
:004757FA A3286B4B00              mov dword ptr [004B6B28], eax
:004757FF FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.SetMapMode, Ord:0161h
                                  |
:00475805 FF1534D44B00            Call dword ptr [004BD434]
:0047580B FF35A48E4B00            push dword ptr [004B8EA4]
:00475811 A35C944B00              mov dword ptr [004B945C], eax
:00475816 FF3580694B00            push dword ptr [004B6980]
:0047581C FFD7                    call edi
:0047581E 6880BE4B00              push 004BBE80
:00475823 A3B8924B00              mov dword ptr [004B92B8], eax
:00475828 FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.GetTextMetricsA, Ord:010Bh
                                  |
:0047582E FF155CD44B00            Call dword ptr [004BD45C]
:00475834 56                      push esi
:00475835 FF3520AF4B00            push dword ptr [004BAF20]

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:0047583B FF151CD64B00            Call dword ptr [004BD61C]
:00475841 8D8524FFFFFF            lea eax, dword ptr [ebp+FFFFFF24]
:00475847 C78524FFFFFF94000000    mov dword ptr [ebp+FFFFFF24], 00000094
:00475851 50                      push eax

* Reference To: KERNEL32.GetVersionExA, Ord:014Dh
                                  |
:00475852 FF1500D54B00            Call dword ptr [004BD500]
:00475858 33C0                    xor eax, eax
:0047585A 83BD34FFFFFF01          cmp dword ptr [ebp+FFFFFF34], 00000001
:00475861 0F94C0                  sete al
:00475864 A3506E4B00              mov dword ptr [004B6E50], eax
:00475869 891DF0BD4B00            mov dword ptr [004BBDF0], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475656(C)
|
:0047586F 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475879(U)
|
:00475871 5F                      pop edi
:00475872 5E                      pop esi
:00475873 5B                      pop ebx
:00475874 C9                      leave
:00475875 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047569E(C)
|
:00475876 83C8FF                  or eax, FFFFFFFF
:00475879 EBF6                    jmp 00475871

* Referenced by a CALL at Address:
|:004756D6   
|
:0047587B 53                      push ebx
:0047587C 33DB                    xor ebx, ebx
:0047587E 56                      push esi
:0047587F 33D2                    xor edx, edx
:00475881 B8EA854B00              mov eax, 004B85EA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004758DD(C)
|
:00475886 8ACA                    mov cl, dl
:00475888 8850FE                  mov byte ptr [eax-02], dl
:0047588B 8810                    mov byte ptr [eax], dl
:0047588D 80C107                  add cl, 07
:00475890 8850FF                  mov byte ptr [eax-01], dl
:00475893 884802                  mov byte ptr [eax+02], cl
:00475896 885804                  mov byte ptr [eax+04], bl
:00475899 885803                  mov byte ptr [eax+03], bl
:0047589C 885806                  mov byte ptr [eax+06], bl
:0047589F 884808                  mov byte ptr [eax+08], cl
:004758A2 885807                  mov byte ptr [eax+07], bl
:004758A5 88480A                  mov byte ptr [eax+0A], cl
:004758A8 88480C                  mov byte ptr [eax+0C], cl
:004758AB 88580B                  mov byte ptr [eax+0B], bl
:004758AE 88580E                  mov byte ptr [eax+0E], bl
:004758B1 885810                  mov byte ptr [eax+10], bl
:004758B4 88480F                  mov byte ptr [eax+0F], cl
:004758B7 884812                  mov byte ptr [eax+12], cl
:004758BA 885814                  mov byte ptr [eax+14], bl
:004758BD 884813                  mov byte ptr [eax+13], cl
:004758C0 885816                  mov byte ptr [eax+16], bl
:004758C3 884818                  mov byte ptr [eax+18], cl
:004758C6 884817                  mov byte ptr [eax+17], cl
:004758C9 88481A                  mov byte ptr [eax+1A], cl
:004758CC 88481C                  mov byte ptr [eax+1C], cl
:004758CF 88481B                  mov byte ptr [eax+1B], cl
:004758D2 83C020                  add eax, 00000020
:004758D5 83C208                  add edx, 00000008
:004758D8 3DEA894B00              cmp eax, 004B89EA
:004758DD 7CA7                    jl 00475886
:004758DF B0FF                    mov al, FF
:004758E1 881D28864B00            mov byte ptr [004B8628], bl
:004758E7 881D2A864B00            mov byte ptr [004B862A], bl
:004758ED 881D29864B00            mov byte ptr [004B8629], bl
:004758F3 C6052C864B00A0          mov byte ptr [004B862C], A0
:004758FA 881D2E864B00            mov byte ptr [004B862E], bl
:00475900 881D2D864B00            mov byte ptr [004B862D], bl
:00475906 881D30864B00            mov byte ptr [004B8630], bl
:0047590C C60532864B00A0          mov byte ptr [004B8632], A0
:00475913 881D31864B00            mov byte ptr [004B8631], bl
:00475919 C60534864B00A0          mov byte ptr [004B8634], A0
:00475920 C60536864B00A0          mov byte ptr [004B8636], A0
:00475927 881D35864B00            mov byte ptr [004B8635], bl
:0047592D 881D38864B00            mov byte ptr [004B8638], bl
:00475933 881D3A864B00            mov byte ptr [004B863A], bl
:00475939 C60539864B00A0          mov byte ptr [004B8639], A0
:00475940 C6053C864B00A0          mov byte ptr [004B863C], A0
:00475947 881D3E864B00            mov byte ptr [004B863E], bl
:0047594D C6053D864B00A0          mov byte ptr [004B863D], A0
:00475954 881D40864B00            mov byte ptr [004B8640], bl
:0047595A C60542864B00A0          mov byte ptr [004B8642], A0
:00475961 C60541864B00A0          mov byte ptr [004B8641], A0
:00475968 C60544864B00A0          mov byte ptr [004B8644], A0
:0047596F C60546864B00A0          mov byte ptr [004B8646], A0
:00475976 C60545864B00A0          mov byte ptr [004B8645], A0
:0047597D C60548864B0080          mov byte ptr [004B8648], 80
:00475984 C6054A864B0080          mov byte ptr [004B864A], 80
:0047598B C60549864B0080          mov byte ptr [004B8649], 80
:00475992 A24C864B00              mov byte ptr [004B864C], al
:00475997 881D4E864B00            mov byte ptr [004B864E], bl
:0047599D 881D4D864B00            mov byte ptr [004B864D], bl
:004759A3 881D50864B00            mov byte ptr [004B8650], bl
:004759A9 A252864B00              mov byte ptr [004B8652], al
:004759AE 881D51864B00            mov byte ptr [004B8651], bl
:004759B4 A254864B00              mov byte ptr [004B8654], al
:004759B9 A256864B00              mov byte ptr [004B8656], al
:004759BE 881D55864B00            mov byte ptr [004B8655], bl
:004759C4 881D58864B00            mov byte ptr [004B8658], bl
:004759CA 881D5A864B00            mov byte ptr [004B865A], bl
:004759D0 A259864B00              mov byte ptr [004B8659], al
:004759D5 A25C864B00              mov byte ptr [004B865C], al
:004759DA 881D5E864B00            mov byte ptr [004B865E], bl
:004759E0 A25D864B00              mov byte ptr [004B865D], al
:004759E5 881D60864B00            mov byte ptr [004B8660], bl
:004759EB A262864B00              mov byte ptr [004B8662], al
:004759F0 A261864B00              mov byte ptr [004B8661], al
:004759F5 A264864B00              mov byte ptr [004B8664], al
:004759FA A266864B00              mov byte ptr [004B8666], al
:004759FF A265864B00              mov byte ptr [004B8665], al
:00475A04 E8F5240000              call 00477EFE
:00475A09 BE00010000              mov esi, 00000100
:00475A0E 68E8854B00              push 004B85E8
:00475A13 56                      push esi
:00475A14 53                      push ebx
:00475A15 E8BD230000              call 00477DD7
:00475A1A 83C40C                  add esp, 0000000C
:00475A1D A37C7C4B00              mov dword ptr [004B7C7C], eax
:00475A22 68B08E4B00              push 004B8EB0
:00475A27 56                      push esi
:00475A28 53                      push ebx
:00475A29 50                      push eax

* Reference To: GDI32.GetPaletteEntries, Ord:00EFh
                                  |
:00475A2A FF153CD44B00            Call dword ptr [004BD43C]
:00475A30 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475A64(C)
|
:00475A32 8A88B28E4B00            mov cl, byte ptr [eax+004B8EB2]
:00475A38 8888E8854B00            mov byte ptr [eax+004B85E8], cl
:00475A3E 8A88B08E4B00            mov cl, byte ptr [eax+004B8EB0]
:00475A44 8888EA854B00            mov byte ptr [eax+004B85EA], cl
:00475A4A 8A88B18E4B00            mov cl, byte ptr [eax+004B8EB1]
:00475A50 8888E9854B00            mov byte ptr [eax+004B85E9], cl
:00475A56 8898EB854B00            mov byte ptr [eax+004B85EB], bl
:00475A5C 83C004                  add eax, 00000004

* Possible Reference to Dialog: DialogID_00DA, CONTROL_ID:0400, "1000"
                                  |
:00475A5F 3D00040000              cmp eax, 00000400
:00475A64 7CCC                    jl 00475A32
:00475A66 8935788B4B00            mov dword ptr [004B8B78], esi
:00475A6C 891D787C4B00            mov dword ptr [004B7C78], ebx
:00475A72 5E                      pop esi
:00475A73 5B                      pop ebx
:00475A74 C3                      ret



* Referenced by a CALL at Address:
|:004792B1   
|
:00475A75 55                      push ebp
:00475A76 8BEC                    mov ebp, esp
:00475A78 83EC18                  sub esp, 00000018
:00475A7B 8B15C8B04B00            mov edx, dword ptr [004BB0C8]
:00475A81 53                      push ebx
:00475A82 33DB                    xor ebx, ebx
:00475A84 56                      push esi
:00475A85 3BD3                    cmp edx, ebx
:00475A87 57                      push edi
:00475A88 895DF0                  mov dword ptr [ebp-10], ebx
:00475A8B 0F8E49010000            jle 00475BDA
:00475A91 8BF2                    mov esi, edx
:00475A93 6A0F                    push 0000000F
:00475A95 C1E602                  shl esi, 02
:00475A98 8BCE                    mov ecx, esi
:00475A9A 58                      pop eax
:00475A9B C1E902                  shr ecx, 02
:00475A9E BF18734B00              mov edi, 004B7318
:00475AA3 6A10                    push 00000010
:00475AA5 F3                      repz
:00475AA6 AB                      stosd
:00475AA7 8BCE                    mov ecx, esi
:00475AA9 58                      pop eax
:00475AAA C1E902                  shr ecx, 02
:00475AAD BFA8744B00              mov edi, 004B74A8
:00475AB2 6A1F                    push 0000001F
:00475AB4 F3                      repz
:00475AB5 AB                      stosd
:00475AB6 8BCE                    mov ecx, esi
:00475AB8 58                      pop eax
:00475AB9 C1E902                  shr ecx, 02
:00475ABC BF88714B00              mov edi, 004B7188
:00475AC1 6A10                    push 00000010
:00475AC3 F3                      repz
:00475AC4 AB                      stosd
:00475AC5 8BCE                    mov ecx, esi
:00475AC7 58                      pop eax
:00475AC8 C1E902                  shr ecx, 02
:00475ACB BF58844B00              mov edi, 004B8458
:00475AD0 6A1F                    push 0000001F
:00475AD2 F3                      repz
:00475AD3 AB                      stosd
:00475AD4 8BCE                    mov ecx, esi
:00475AD6 58                      pop eax
:00475AD7 C1E902                  shr ecx, 02
:00475ADA BF108D4B00              mov edi, 004B8D10

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00475ADF 6A04                    push 00000004
:00475AE1 F3                      repz
:00475AE2 AB                      stosd
:00475AE3 8BCE                    mov ecx, esi
:00475AE5 33C0                    xor eax, eax
:00475AE7 C1E902                  shr ecx, 02
:00475AEA BF60664B00              mov edi, 004B6660
:00475AEF C745E83C764B00          mov [ebp-18], 004B763C
:00475AF6 F3                      repz
:00475AF7 AB                      stosd
:00475AF8 8BCE                    mov ecx, esi
:00475AFA BF80944B00              mov edi, 004B9480
:00475AFF C1E902                  shr ecx, 02
:00475B02 F3                      repz
:00475B03 AB                      stosd
:00475B04 8BCE                    mov ecx, esi
:00475B06 58                      pop eax
:00475B07 C1E902                  shr ecx, 02
:00475B0A BFC8924B00              mov edi, 004B92C8

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00475B0F 6A03                    push 00000003
:00475B11 F3                      repz
:00475B12 AB                      stosd
:00475B13 8BCE                    mov ecx, esi
:00475B15 58                      pop eax
:00475B16 C1E902                  shr ecx, 02
:00475B19 BF58794B00              mov edi, 004B7958
:00475B1E C745F4808B4B00          mov [ebp-0C], 004B8B80
:00475B25 F3                      repz
:00475B26 AB                      stosd
:00475B27 8BCE                    mov ecx, esi
:00475B29 33C0                    xor eax, eax
:00475B2B C1E902                  shr ecx, 02
:00475B2E BF306B4B00              mov edi, 004B6B30
:00475B33 C745ECC8BE4B00          mov [ebp-14], 004BBEC8
:00475B3A F3                      repz
:00475B3B AB                      stosd
:00475B3C 8BCE                    mov ecx, esi
:00475B3E BFC06C4B00              mov edi, 004B6CC0
:00475B43 C1E902                  shr ecx, 02
:00475B46 2145FC                  and dword ptr [ebp-04], eax
:00475B49 C745F8C0BE4B00          mov [ebp-08], 004BBEC0
:00475B50 F3                      repz
:00475B51 AB                      stosd

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475BD2(C)
|
:00475B52 8B45FC                  mov eax, dword ptr [ebp-04]
:00475B55 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00475B58 8B3C9DC0824B00          mov edi, dword ptr [4*ebx+004B82C0]
:00475B5F 8345F404                add dword ptr [ebp-0C], 00000004
:00475B63 8B09                    mov ecx, dword ptr [ecx]
:00475B65 83A0847C4B0000          and dword ptr [eax+004B7C84], 00000000
:00475B6C 83A0807C4B0000          and dword ptr [eax+004B7C80], 00000000
:00475B73 8D80807C4B00            lea eax, dword ptr [eax+004B7C80]
:00475B79 8D71FF                  lea esi, dword ptr [ecx-01]
:00475B7C 8D5FFF                  lea ebx, dword ptr [edi-01]
:00475B7F 89700C                  mov dword ptr [eax+0C], esi
:00475B82 895808                  mov dword ptr [eax+08], ebx
:00475B85 8B45FC                  mov eax, dword ptr [ebp-04]
:00475B88 8345FC10                add dword ptr [ebp-04], 00000010
:00475B8C 83A0C4BE4B0000          and dword ptr [eax+004BBEC4], 00000000
:00475B93 8B45F8                  mov eax, dword ptr [ebp-08]
:00475B96 8345F810                add dword ptr [ebp-08], 00000010
:00475B9A 832000                  and dword ptr [eax], 00000000
:00475B9D 8B45EC                  mov eax, dword ptr [ebp-14]
:00475BA0 897004                  mov dword ptr [eax+04], esi
:00475BA3 8918                    mov dword ptr [eax], ebx
:00475BA5 8B5DF0                  mov ebx, dword ptr [ebp-10]
:00475BA8 83C010                  add eax, 00000010
:00475BAB 8945EC                  mov dword ptr [ebp-14], eax
:00475BAE 890C9DF86F4B00          mov dword ptr [4*ebx+004B6FF8], ecx
:00475BB5 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00475BB8 893C9D686E4B00          mov dword ptr [4*ebx+004B6E68], edi
:00475BBF 8361FC00                and dword ptr [ecx-04], 00000000
:00475BC3 832100                  and dword ptr [ecx], 00000000
:00475BC6 43                      inc ebx
:00475BC7 83C108                  add ecx, 00000008
:00475BCA 3BDA                    cmp ebx, edx
:00475BCC 895DF0                  mov dword ptr [ebp-10], ebx
:00475BCF 894DE8                  mov dword ptr [ebp-18], ecx
:00475BD2 0F8C7AFFFFFF            jl 00475B52
:00475BD8 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475A8B(C)
|
:00475BDA 8B35F0BD4B00            mov esi, dword ptr [004BBDF0]
:00475BE0 33FF                    xor edi, edi
:00475BE2 3BD3                    cmp edx, ebx
:00475BE4 891D58944B00            mov dword ptr [004B9458], ebx
:00475BEA 891DB0924B00            mov dword ptr [004B92B0], ebx
:00475BF0 891DBCB04B00            mov dword ptr [004BB0BC], ebx
:00475BF6 891DC0B04B00            mov dword ptr [004BB0C0], ebx
:00475BFC 891DC4B04B00            mov dword ptr [004BB0C4], ebx
:00475C02 7E15                    jle 00475C19

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475C17(C)
|
:00475C04 57                      push edi
:00475C05 E805FAFFFF              call 0047560F
:00475C0A 59                      pop ecx
:00475C0B E85C020000              call 00475E6C
:00475C10 47                      inc edi
:00475C11 3B3DC8B04B00            cmp edi, dword ptr [004BB0C8]
:00475C17 7CEB                    jl 00475C04

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475C02(C)
|
:00475C19 56                      push esi
:00475C1A E8F0F9FFFF              call 0047560F
:00475C1F 59                      pop ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0005, "
"
                                  |

* Possible Reference to String Resource ID=00005: "H"
                                  |
:00475C20 6A05                    push 00000005
:00475C22 FF3520AF4B00            push dword ptr [004BAF20]

* Reference To: USER32.ShowWindow, Ord:022Dh
                                  |
:00475C28 FF1500D74B00            Call dword ptr [004BD700]
:00475C2E 5F                      pop edi
:00475C2F 5E                      pop esi
:00475C30 5B                      pop ebx
:00475C31 C9                      leave
:00475C32 C3                      ret



* Referenced by a CALL at Addresses:
|:004777CE   , :00477914   , :00479148   
|
:00475C33 833DE8894B0000          cmp dword ptr [004B89E8], 00000000
:00475C3A 53                      push ebx

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00475C3B 8B1D44D44B00            mov ebx, dword ptr [004BD444]
:00475C41 56                      push esi
:00475C42 57                      push edi
:00475C43 7475                    je 00475CBA
:00475C45 33F6                    xor esi, esi
:00475C47 3935C8B04B00            cmp dword ptr [004BB0C8], esi
:00475C4D 7E1B                    jle 00475C6A
:00475C4F BFE8894B00              mov edi, 004B89E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475C68(C)
|
:00475C54 56                      push esi
:00475C55 E8571C0000              call 004778B1
:00475C5A 832700                  and dword ptr [edi], 00000000
:00475C5D 46                      inc esi
:00475C5E 83C704                  add edi, 00000004
:00475C61 3B35C8B04B00            cmp esi, dword ptr [004BB0C8]
:00475C67 59                      pop ecx
:00475C68 7CEA                    jl 00475C54

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475C4D(C)
|
:00475C6A FF355C944B00            push dword ptr [004B945C]
:00475C70 FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.SetMapMode, Ord:0161h
                                  |
:00475C76 FF1534D44B00            Call dword ptr [004BD434]
:00475C7C FF35B8924B00            push dword ptr [004B92B8]

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:00475C82 8B3530D44B00            mov esi, dword ptr [004BD430]
:00475C88 FF3580694B00            push dword ptr [004B6980]
:00475C8E FFD6                    call esi
:00475C90 FF35286B4B00            push dword ptr [004B6B28]
:00475C96 FF3580694B00            push dword ptr [004B6980]
:00475C9C FFD6                    call esi
:00475C9E FF35A08E4B00            push dword ptr [004B8EA0]
:00475CA4 FFD3                    call ebx
:00475CA6 FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:00475CAC FF1538D44B00            Call dword ptr [004BD438]
:00475CB2 FF35A48E4B00            push dword ptr [004B8EA4]
:00475CB8 FFD3                    call ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475C43(C)
|
:00475CBA A17C7C4B00              mov eax, dword ptr [004B7C7C]
:00475CBF 85C0                    test eax, eax
:00475CC1 740A                    je 00475CCD
:00475CC3 50                      push eax
:00475CC4 FFD3                    call ebx
:00475CC6 83257C7C4B0000          and dword ptr [004B7C7C], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475CC1(C)
|
:00475CCD 5F                      pop edi
:00475CCE 5E                      pop esi
:00475CCF 5B                      pop ebx
:00475CD0 C3                      ret



* Referenced by a CALL at Address:
|:004792C2   
|
:00475CD1 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475CD6 8B4C2404                mov ecx, dword ptr [esp+04]
:00475CDA 8B0485C0824B00          mov eax, dword ptr [4*eax+004B82C0]
:00475CE1 8901                    mov dword ptr [ecx], eax
:00475CE3 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475CE8 8B4C2408                mov ecx, dword ptr [esp+08]
:00475CEC 8B0485808B4B00          mov eax, dword ptr [4*eax+004B8B80]
:00475CF3 8901                    mov dword ptr [ecx], eax
:00475CF5 C3                      ret



* Referenced by a CALL at Addresses:
|:004037DF   , :00403866   , :004051E5   , :00405304   , :0040FF92   
|:004100FB   , :0041017C   , :004101B1   , :004119CF   , :0041FF96   
|:00424293   , :0045A2B1   , :0045A504   , :0045BD67   , :0045BDC9   
|:0045C203   , :0045C3BA   , :0045C546   , :0045C5FD   , :0045C6CF   
|:0045C73B   , :0046789C   , :0046BD72   , :0046BF41   , :00479325   
|
:00475CF6 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475CFB 8B542404                mov edx, dword ptr [esp+04]

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00475CFF 6A03                    push 00000003
:00475D01 C1E002                  shl eax, 02
:00475D04 59                      pop ecx
:00475D05 3BD1                    cmp edx, ecx
:00475D07 899058794B00            mov dword ptr [eax+004B7958], edx
:00475D0D 7F0D                    jg 00475D1C
:00475D0F 6A0F                    push 0000000F
:00475D11 2BCA                    sub ecx, edx
:00475D13 5A                      pop edx
:00475D14 D3FA                    sar edx, cl
:00475D16 899018734B00            mov dword ptr [eax+004B7318], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475D0D(C)
|
:00475D1C C3                      ret

* Referenced by a CALL at Addresses:
|:004037ED   , :00403874   , :004051F3   , :00405312   , :004101C1   
|:00410206   , :0041B843   , :0041B8E9   , :0041BDE1   , :0041FFA4   
|:0041FFE8   , :0042007B   , :00420C61   , :00422438   , :00424307   
|:004243B9   , :004244E1   , :004249F1   , :00426001   , :00426056   
|:00428943   , :004289AF   , :00428B2B   , :00428B9A   , :00428C1E   
|:00428CBB   , :00429039   , :004292A8   , :00429323   , :004294CD   
|:0042957C   , :00429716   , :0042CD92   , :0042CDA8   , :0042FEC0   
|:0042FF93   , :004300F8   , :00434E2D   , :00434EAD   , :0044ABF0   
|:0044AC1A   , :0045818B   , :004581FF   , :0045824F   , :004582BD   
|:004590DC   , :00459112   , :004591C2   , :00459204   , :00459252   
|:004594A6   , :004594E2   , :0045A2DE   , :0045A418   , :0045A531   
|:0045A66B   , :0045BE2F   , :0045BE6E   , :0045C267   , :0045C291   
|:0045C2BC   , :0045C2CC   , :0045C391   , :0045C554   , :0045C60B   
|:0045C6DD   , :0045C749   , :00467F06   , :004680CD   , :0046BDBD   
|:0046BF8C   
|
:00475D1D 55                      push ebp
:00475D1E 8BEC                    mov ebp, esp
:00475D20 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475D25 8B4D08                  mov ecx, dword ptr [ebp+08]
:00475D28 C1E002                  shl eax, 02
:00475D2B 83B858794B0003          cmp dword ptr [eax+004B7958], 00000003
:00475D32 898880944B00            mov dword ptr [eax+004B9480], ecx
:00475D38 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00475D3B 7F17                    jg 00475D54
:00475D3D 83E10F                  and ecx, 0000000F
:00475D40 83C110                  add ecx, 00000010
:00475D43 8988108D4B00            mov dword ptr [eax+004B8D10], ecx
:00475D49 8B4D10                  mov ecx, dword ptr [ebp+10]
:00475D4C 83E10F                  and ecx, 0000000F
:00475D4F 83C110                  add ecx, 00000010
:00475D52 EB09                    jmp 00475D5D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475D3B(C)
|
:00475D54 8988108D4B00            mov dword ptr [eax+004B8D10], ecx
:00475D5A 8B4D10                  mov ecx, dword ptr [ebp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475D52(U)
|
:00475D5D 898858844B00            mov dword ptr [eax+004B8458], ecx
:00475D63 5D                      pop ebp
:00475D64 C3                      ret



* Referenced by a CALL at Addresses:
|:00405FE2   , :0040601A   , :0040607D   , :0040682D   , :0040696F   
|:004069CA   , :00406A16   , :00406A69   , :00479404   
|
:00475D65 55                      push ebp
:00475D66 8BEC                    mov ebp, esp
:00475D68 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475D6D 8B4D08                  mov ecx, dword ptr [ebp+08]
:00475D70 C1E002                  shl eax, 02
:00475D73 83B858794B0003          cmp dword ptr [eax+004B7958], 00000003
:00475D7A 898860664B00            mov dword ptr [eax+004B6660], ecx
:00475D80 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00475D83 7F17                    jg 00475D9C
:00475D85 83E10F                  and ecx, 0000000F
:00475D88 83C110                  add ecx, 00000010
:00475D8B 898888714B00            mov dword ptr [eax+004B7188], ecx
:00475D91 8B4D10                  mov ecx, dword ptr [ebp+10]
:00475D94 83E10F                  and ecx, 0000000F
:00475D97 83C110                  add ecx, 00000010
:00475D9A EB09                    jmp 00475DA5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475D83(C)
|
:00475D9C 898888714B00            mov dword ptr [eax+004B7188], ecx
:00475DA2 8B4D10                  mov ecx, dword ptr [ebp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475D9A(U)
|
:00475DA5 8988A8744B00            mov dword ptr [eax+004B74A8], ecx
:00475DAB 5D                      pop ebp
:00475DAC C3                      ret



* Referenced by a CALL at Addresses:
|:0041BDA9   , :0041BEED   , :004248A7   , :004248C2   , :004248DA   
|:004248F5   , :0044211A   , :004421E3   , :0044ABE0   , :0044AC5B   
|:0045A2CB   , :0045A477   , :0045A51E   , :0045A6CA   , :0046DCA9   
|
:00475DAD 8B0DF0BD4B00            mov ecx, dword ptr [004BBDF0]
:00475DB3 53                      push ebx
:00475DB4 8B442408                mov eax, dword ptr [esp+08]
:00475DB8 56                      push esi
:00475DB9 57                      push edi
:00475DBA 8BF9                    mov edi, ecx
:00475DBC C1E703                  shl edi, 03
:00475DBF 8B9738764B00            mov edx, dword ptr [edi+004B7638]
:00475DC5 8D3410                  lea esi, dword ptr [eax+edx]
:00475DC8 8BC1                    mov eax, ecx
:00475DCA C1E004                  shl eax, 04
:00475DCD 85F6                    test esi, esi
:00475DCF 8D98C0BE4B00            lea ebx, dword ptr [eax+004BBEC0]
:00475DD5 8933                    mov dword ptr [ebx], esi
:00475DD7 7D03                    jge 00475DDC
:00475DD9 832300                  and dword ptr [ebx], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475DD7(C)
|
:00475DDC 8B742418                mov esi, dword ptr [esp+18]
:00475DE0 C1E102                  shl ecx, 02
:00475DE3 03D6                    add edx, esi
:00475DE5 8DB0C8BE4B00            lea esi, dword ptr [eax+004BBEC8]
:00475DEB 8B99C0824B00            mov ebx, dword ptr [ecx+004B82C0]
:00475DF1 4B                      dec ebx
:00475DF2 8916                    mov dword ptr [esi], edx
:00475DF4 3BD3                    cmp edx, ebx
:00475DF6 7E02                    jle 00475DFA
:00475DF8 891E                    mov dword ptr [esi], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475DF6(C)
|
:00475DFA 8B973C764B00            mov edx, dword ptr [edi+004B763C]
:00475E00 8B742414                mov esi, dword ptr [esp+14]
:00475E04 03F2                    add esi, edx
:00475E06 8DB8C4BE4B00            lea edi, dword ptr [eax+004BBEC4]
:00475E0C 85F6                    test esi, esi
:00475E0E 8937                    mov dword ptr [edi], esi
:00475E10 7D03                    jge 00475E15
:00475E12 832700                  and dword ptr [edi], 00000000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475E10(C)
|
:00475E15 8B74241C                mov esi, dword ptr [esp+1C]
:00475E19 8B89808B4B00            mov ecx, dword ptr [ecx+004B8B80]
:00475E1F 03D6                    add edx, esi
:00475E21 8D80CCBE4B00            lea eax, dword ptr [eax+004BBECC]
:00475E27 49                      dec ecx
:00475E28 3BD1                    cmp edx, ecx
:00475E2A 8910                    mov dword ptr [eax], edx
:00475E2C 7E02                    jle 00475E30
:00475E2E 8908                    mov dword ptr [eax], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475E2C(C)
|
:00475E30 5F                      pop edi
:00475E31 5E                      pop esi
:00475E32 5B                      pop ebx
:00475E33 C3                      ret



* Referenced by a CALL at Addresses:
|:004761DF   , :004762FF   , :004765B5   , :004766EB   , :0047682C   
|:00476BA2   , :00476D17   , :00476E9B   
|
:00475E34 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475E39 C1E002                  shl eax, 02
:00475E3C 83B8E87A4B0000          cmp dword ptr [eax+004B7AE8], 00000000
:00475E43 7D06                    jge 00475E4B
:00475E45 8B4C2408                mov ecx, dword ptr [esp+08]
:00475E49 EB0D                    jmp 00475E58

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475E43(C)
|
:00475E4B 8B88808B4B00            mov ecx, dword ptr [eax+004B8B80]
:00475E51 2B4C2408                sub ecx, dword ptr [esp+08]
:00475E55 83C10F                  add ecx, 0000000F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475E49(U)
|
:00475E58 8B80C0824B00            mov eax, dword ptr [eax+004B82C0]
:00475E5E 0FAFC1                  imul eax, ecx
:00475E61 03442404                add eax, dword ptr [esp+04]
:00475E65 0305BC924B00            add eax, dword ptr [004B92BC]
:00475E6B C3                      ret



* Referenced by a CALL at Addresses:
|:004101F4   , :00420C56   , :004244D6   , :0045A2D3   , :0045A40D   
|:0045A526   , :0045A660   , :0045BE24   , :0045BE63   , :00475C0B   
|:0047913C   
|
:00475E6C A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475E71 C1E002                  shl eax, 02
:00475E74 FFB058794B00            push dword ptr [eax+004B7958]
:00475E7A 8B88808B4B00            mov ecx, dword ptr [eax+004B8B80]
:00475E80 83C110                  add ecx, 00000010
:00475E83 FF35BC924B00            push dword ptr [004B92BC]
:00475E89 51                      push ecx
:00475E8A FFB0C0824B00            push dword ptr [eax+004B82C0]
:00475E90 E8F6200000              call 00477F8B
:00475E95 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475E9A 83C410                  add esp, 00000010
:00475E9D C1E002                  shl eax, 02
:00475EA0 FFB0808B4B00            push dword ptr [eax+004B8B80]
:00475EA6 FFB0C0824B00            push dword ptr [eax+004B82C0]
:00475EAC 6A00                    push 00000000
:00475EAE 6A00                    push 00000000
:00475EB0 E8FAF4FFFF              call 004753AF
:00475EB5 83C410                  add esp, 00000010
:00475EB8 C3                      ret



* Referenced by a CALL at Addresses:
|:004104DB   , :0044A983   , :0046BD92   , :0046BF61   
|
:00475EB9 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475EBE 8B542408                mov edx, dword ptr [esp+08]
:00475EC2 8B4C240C                mov ecx, dword ptr [esp+0C]
:00475EC6 56                      push esi
:00475EC7 833C8558794B0007        cmp dword ptr [4*eax+004B7958], 00000007
:00475ECF 891500C54B00            mov dword ptr [004BC500], edx
:00475ED5 7516                    jne 00475EED
:00475ED7 8BC2                    mov eax, edx
:00475ED9 C1E003                  shl eax, 03
:00475EDC 50                      push eax
:00475EDD 51                      push ecx
:00475EDE 6800BE4B00              push 004BBE00
:00475EE3 E87896FFFF              call 0046F560
:00475EE8 83C40C                  add esp, 0000000C
:00475EEB 5E                      pop esi
:00475EEC C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475ED5(C)
|
:00475EED C1E202                  shl edx, 02
:00475EF0 85D2                    test edx, edx
:00475EF2 B800BE4B00              mov eax, 004BBE00
:00475EF7 7E1C                    jle 00475F15
:00475EF9 8BF2                    mov esi, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475F13(C)
|
:00475EFB 8A11                    mov dl, byte ptr [ecx]
:00475EFD C0EA04                  shr dl, 04
:00475F00 80C210                  add dl, 10
:00475F03 8810                    mov byte ptr [eax], dl
:00475F05 8A11                    mov dl, byte ptr [ecx]
:00475F07 80E20F                  and dl, 0F
:00475F0A 40                      inc eax
:00475F0B 80C210                  add dl, 10
:00475F0E 8810                    mov byte ptr [eax], dl
:00475F10 40                      inc eax
:00475F11 41                      inc ecx
:00475F12 4E                      dec esi
:00475F13 75E6                    jne 00475EFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475EF7(C)
|
:00475F15 5E                      pop esi
:00475F16 C3                      ret



* Referenced by a CALL at Address:
|:00434E9D   
|
:00475F17 55                      push ebp
:00475F18 8BEC                    mov ebp, esp
:00475F1A 83EC20                  sub esp, 00000020
:00475F1D A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00475F22 53                      push ebx
:00475F23 8B5D10                  mov ebx, dword ptr [ebp+10]
:00475F26 56                      push esi
:00475F27 C1E003                  shl eax, 03
:00475F2A 8B750C                  mov esi, dword ptr [ebp+0C]
:00475F2D 57                      push edi
:00475F2E 8B8838764B00            mov ecx, dword ptr [eax+004B7638]
:00475F34 8B7D08                  mov edi, dword ptr [ebp+08]
:00475F37 8B803C764B00            mov eax, dword ptr [eax+004B763C]
:00475F3D FF7518                  push [ebp+18]
:00475F40 8D140F                  lea edx, dword ptr [edi+ecx]
:00475F43 03CB                    add ecx, ebx
:00475F45 894DF8                  mov dword ptr [ebp-08], ecx
:00475F48 8B4D14                  mov ecx, dword ptr [ebp+14]
:00475F4B 8955F0                  mov dword ptr [ebp-10], edx
:00475F4E 8D1406                  lea edx, dword ptr [esi+eax]
:00475F51 03C8                    add ecx, eax
:00475F53 8955F4                  mov dword ptr [ebp-0C], edx
:00475F56 894DFC                  mov dword ptr [ebp-04], ecx
:00475F59 E81E020000              call 0047617C
:00475F5E 3BFB                    cmp edi, ebx
:00475F60 59                      pop ecx
:00475F61 757E                    jne 00475FE1
:00475F63 8B15F0BD4B00            mov edx, dword ptr [004BBDF0]
:00475F69 8B7DF0                  mov edi, dword ptr [ebp-10]
:00475F6C 8BF2                    mov esi, edx
:00475F6E C1E604                  shl esi, 04
:00475F71 3BBEC0BE4B00            cmp edi, dword ptr [esi+004BBEC0]
:00475F77 0F8C60010000            jl 004760DD
:00475F7D 3BBEC8BE4B00            cmp edi, dword ptr [esi+004BBEC8]
:00475F83 0F8F54010000            jg 004760DD
:00475F89 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00475F8C 8B45FC                  mov eax, dword ptr [ebp-04]
:00475F8F 3BC8                    cmp ecx, eax
:00475F91 7E17                    jle 00475FAA
:00475F93 8B04D53C764B00          mov eax, dword ptr [8*edx+004B763C]
:00475F9A 8B4D14                  mov ecx, dword ptr [ebp+14]
:00475F9D 8B550C                  mov edx, dword ptr [ebp+0C]
:00475FA0 03C8                    add ecx, eax
:00475FA2 03C2                    add eax, edx
:00475FA4 894DF4                  mov dword ptr [ebp-0C], ecx
:00475FA7 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475F91(C)
|
:00475FAA 8B96C4BE4B00            mov edx, dword ptr [esi+004BBEC4]
:00475FB0 3BCA                    cmp ecx, edx
:00475FB2 7D05                    jge 00475FB9
:00475FB4 8BCA                    mov ecx, edx
:00475FB6 894DF4                  mov dword ptr [ebp-0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475FB2(C)
|
:00475FB9 8BB6CCBE4B00            mov esi, dword ptr [esi+004BBECC]
:00475FBF 3BC6                    cmp eax, esi
:00475FC1 7E05                    jle 00475FC8
:00475FC3 8BC6                    mov eax, esi
:00475FC5 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475FC1(C)
|
:00475FC8 2BC1                    sub eax, ecx
:00475FCA 897DE0                  mov dword ptr [ebp-20], edi
:00475FCD 40                      inc eax
:00475FCE 6A01                    push 00000001
:00475FD0 8BF8                    mov edi, eax
:00475FD2 5E                      pop esi
:00475FD3 8D45F0                  lea eax, dword ptr [ebp-10]
:00475FD6 894DE4                  mov dword ptr [ebp-1C], ecx
:00475FD9 50                      push eax
:00475FDA E815030000              call 004762F4
:00475FDF EB7F                    jmp 00476060

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475F61(C)
|
:00475FE1 3B7514                  cmp esi, dword ptr [ebp+14]
:00475FE4 757D                    jne 00476063
:00475FE6 8B15F0BD4B00            mov edx, dword ptr [004BBDF0]
:00475FEC 8B45F4                  mov eax, dword ptr [ebp-0C]
:00475FEF 8BF2                    mov esi, edx
:00475FF1 C1E604                  shl esi, 04
:00475FF4 3B86C4BE4B00            cmp eax, dword ptr [esi+004BBEC4]
:00475FFA 0F8CDD000000            jl 004760DD
:00476000 3B86CCBE4B00            cmp eax, dword ptr [esi+004BBECC]
:00476006 0F8FD1000000            jg 004760DD
:0047600C 8B4DF0                  mov ecx, dword ptr [ebp-10]
:0047600F 8B45F8                  mov eax, dword ptr [ebp-08]
:00476012 3BC8                    cmp ecx, eax
:00476014 7E12                    jle 00476028
:00476016 8B04D538764B00          mov eax, dword ptr [8*edx+004B7638]
:0047601D 8D0C03                  lea ecx, dword ptr [ebx+eax]
:00476020 03C7                    add eax, edi
:00476022 894DF0                  mov dword ptr [ebp-10], ecx
:00476025 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476014(C)
|
:00476028 8B96C0BE4B00            mov edx, dword ptr [esi+004BBEC0]
:0047602E 3BCA                    cmp ecx, edx
:00476030 7D05                    jge 00476037
:00476032 8BCA                    mov ecx, edx
:00476034 894DF0                  mov dword ptr [ebp-10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476030(C)
|
:00476037 8BB6C8BE4B00            mov esi, dword ptr [esi+004BBEC8]
:0047603D 3BC6                    cmp eax, esi
:0047603F 7E05                    jle 00476046
:00476041 8BC6                    mov eax, esi
:00476043 8945F8                  mov dword ptr [ebp-08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047603F(C)
|
:00476046 8B55F4                  mov edx, dword ptr [ebp-0C]
:00476049 2BC1                    sub eax, ecx
:0047604B 40                      inc eax
:0047604C 6A01                    push 00000001
:0047604E 8BF0                    mov esi, eax
:00476050 5F                      pop edi
:00476051 8D45F0                  lea eax, dword ptr [ebp-10]
:00476054 8955E4                  mov dword ptr [ebp-1C], edx
:00476057 50                      push eax
:00476058 894DE0                  mov dword ptr [ebp-20], ecx
:0047605B E874010000              call 004761D4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475FDF(U)
|
:00476060 59                      pop ecx
:00476061 EB6A                    jmp 004760CD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00475FE4(C)
|
:00476063 8B45F0                  mov eax, dword ptr [ebp-10]
:00476066 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00476069 3BC1                    cmp eax, ecx
:0047606B 7D08                    jge 00476075
:0047606D 8945E0                  mov dword ptr [ebp-20], eax
:00476070 894DE8                  mov dword ptr [ebp-18], ecx
:00476073 EB06                    jmp 0047607B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047606B(C)
|
:00476075 894DE0                  mov dword ptr [ebp-20], ecx
:00476078 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476073(U)
|
:0047607B 8B45F4                  mov eax, dword ptr [ebp-0C]
:0047607E 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00476081 3BC1                    cmp eax, ecx
:00476083 7D08                    jge 0047608D
:00476085 8945E4                  mov dword ptr [ebp-1C], eax
:00476088 894DEC                  mov dword ptr [ebp-14], ecx
:0047608B EB06                    jmp 00476093

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476083(C)
|
:0047608D 894DE4                  mov dword ptr [ebp-1C], ecx
:00476090 8945EC                  mov dword ptr [ebp-14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047608B(U)
|
:00476093 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476098 C1E004                  shl eax, 04
:0047609B 05C0BE4B00              add eax, 004BBEC0
:004760A0 50                      push eax
:004760A1 8D45E0                  lea eax, dword ptr [ebp-20]
:004760A4 50                      push eax
:004760A5 8D45E0                  lea eax, dword ptr [ebp-20]
:004760A8 50                      push eax
:004760A9 E834000000              call 004760E2
:004760AE 83C40C                  add esp, 0000000C
:004760B1 85C0                    test eax, eax
:004760B3 7428                    je 004760DD
:004760B5 8D45F0                  lea eax, dword ptr [ebp-10]
:004760B8 50                      push eax
:004760B9 E8A4030000              call 00476462
:004760BE 8B75E8                  mov esi, dword ptr [ebp-18]
:004760C1 8B7DEC                  mov edi, dword ptr [ebp-14]
:004760C4 2B75E0                  sub esi, dword ptr [ebp-20]
:004760C7 2B7DE4                  sub edi, dword ptr [ebp-1C]
:004760CA 59                      pop ecx
:004760CB 46                      inc esi
:004760CC 47                      inc edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476061(U)
|
:004760CD 57                      push edi
:004760CE 56                      push esi
:004760CF FF75E4                  push [ebp-1C]
:004760D2 FF75E0                  push [ebp-20]
:004760D5 E8D5F2FFFF              call 004753AF
:004760DA 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00475F77(C), :00475F83(C), :00475FFA(C), :00476006(C), :004760B3(C)
|
:004760DD 5F                      pop edi
:004760DE 5E                      pop esi
:004760DF 5B                      pop ebx
:004760E0 C9                      leave
:004760E1 C3                      ret



* Referenced by a CALL at Addresses:
|:004760A9   , :004766C4   , :00476803   , :004769F3   , :00476B4C   
|:00476D01   , :00476E32   
|
:004760E2 55                      push ebp
:004760E3 8BEC                    mov ebp, esp
:004760E5 53                      push ebx
:004760E6 56                      push esi
:004760E7 8B750C                  mov esi, dword ptr [ebp+0C]
:004760EA 57                      push edi
:004760EB 8B7D10                  mov edi, dword ptr [ebp+10]
:004760EE 8B4604                  mov eax, dword ptr [esi+04]
:004760F1 8B4F04                  mov ecx, dword ptr [edi+04]
:004760F4 89450C                  mov dword ptr [ebp+0C], eax
:004760F7 3BC1                    cmp eax, ecx
:004760F9 7F03                    jg 004760FE
:004760FB 894D0C                  mov dword ptr [ebp+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004760F9(C)
|
:004760FE 8B4508                  mov eax, dword ptr [ebp+08]
:00476101 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00476104 894804                  mov dword ptr [eax+04], ecx
:00476107 8B0E                    mov ecx, dword ptr [esi]
:00476109 8B17                    mov edx, dword ptr [edi]
:0047610B 3BCA                    cmp ecx, edx
:0047610D 7E02                    jle 00476111
:0047610F 8BD1                    mov edx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047610D(C)
|
:00476111 895510                  mov dword ptr [ebp+10], edx
:00476114 8910                    mov dword ptr [eax], edx
:00476116 8B4E08                  mov ecx, dword ptr [esi+08]
:00476119 8B5708                  mov edx, dword ptr [edi+08]
:0047611C 3BCA                    cmp ecx, edx
:0047611E 7C02                    jl 00476122
:00476120 8BCA                    mov ecx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047611E(C)
|
:00476122 894808                  mov dword ptr [eax+08], ecx
:00476125 8B560C                  mov edx, dword ptr [esi+0C]
:00476128 8B5F0C                  mov ebx, dword ptr [edi+0C]
:0047612B 3BD3                    cmp edx, ebx
:0047612D 7D02                    jge 00476131
:0047612F 8BDA                    mov ebx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047612D(C)
|
:00476131 89580C                  mov dword ptr [eax+0C], ebx
:00476134 8B4510                  mov eax, dword ptr [ebp+10]
:00476137 03C1                    add eax, ecx
:00476139 99                      cdq
:0047613A 2BC2                    sub eax, edx
:0047613C 8BC8                    mov ecx, eax
:0047613E 8B450C                  mov eax, dword ptr [ebp+0C]
:00476141 03C3                    add eax, ebx
:00476143 99                      cdq
:00476144 2BC2                    sub eax, edx
:00476146 D1F9                    sar ecx, 1
:00476148 D1F8                    sar eax, 1
:0047614A 390E                    cmp dword ptr [esi], ecx
:0047614C 7F27                    jg 00476175
:0047614E 3B4E08                  cmp ecx, dword ptr [esi+08]
:00476151 7F22                    jg 00476175
:00476153 394604                  cmp dword ptr [esi+04], eax
:00476156 7F1D                    jg 00476175
:00476158 3B460C                  cmp eax, dword ptr [esi+0C]
:0047615B 7F18                    jg 00476175
:0047615D 390F                    cmp dword ptr [edi], ecx
:0047615F 7F14                    jg 00476175
:00476161 3B4F08                  cmp ecx, dword ptr [edi+08]
:00476164 7F0F                    jg 00476175
:00476166 394704                  cmp dword ptr [edi+04], eax
:00476169 7F0A                    jg 00476175
:0047616B 3B470C                  cmp eax, dword ptr [edi+0C]
:0047616E 7F05                    jg 00476175
:00476170 6A01                    push 00000001
:00476172 58                      pop eax
:00476173 EB02                    jmp 00476177

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047614C(C), :00476151(C), :00476156(C), :0047615B(C), :0047615F(C)
|:00476164(C), :00476169(C), :0047616E(C)
|
:00476175 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476173(U)
|
:00476177 5F                      pop edi
:00476178 5E                      pop esi
:00476179 5B                      pop ebx
:0047617A 5D                      pop ebp
:0047617B C3                      ret



* Referenced by a CALL at Addresses:
|:00475F59   , :0047668A   
|
:0047617C A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476181 C1E002                  shl eax, 02
:00476184 8B8880944B00            mov ecx, dword ptr [eax+004B9480]
:0047618A 83F905                  cmp ecx, 00000005
:0047618D 7417                    je 004761A6
:0047618F 8B90108D4B00            mov edx, dword ptr [eax+004B8D10]
:00476195 83F904                  cmp ecx, 00000004
:00476198 7504                    jne 0047619E
:0047619A 33C0                    xor eax, eax
:0047619C EB14                    jmp 004761B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476198(C)
|
:0047619E 8B8058844B00            mov eax, dword ptr [eax+004B8458]
:004761A4 EB0C                    jmp 004761B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047618D(C)
|
:004761A6 8B9058844B00            mov edx, dword ptr [eax+004B8458]
:004761AC 8B80108D4B00            mov eax, dword ptr [eax+004B8D10]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047619C(U), :004761A4(U)
|
:004761B2 33C9                    xor ecx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004761D1(C)
|
:004761B4 F644240580              test [esp+05], 80
:004761B9 7408                    je 004761C3
:004761BB 889188694B00            mov byte ptr [ecx+004B6988], dl
:004761C1 EB06                    jmp 004761C9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004761B9(C)
|
:004761C3 888188694B00            mov byte ptr [ecx+004B6988], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004761C1(U)
|
:004761C9 D1642404                shl dword ptr [esp+04], 1
:004761CD 41                      inc ecx
:004761CE 83F910                  cmp ecx, 00000010
:004761D1 7CE1                    jl 004761B4
:004761D3 C3                      ret



* Referenced by a CALL at Addresses:
|:0047605B   , :00476A2C   , :00476A9C   
|
:004761D4 56                      push esi
:004761D5 8B742408                mov esi, dword ptr [esp+08]
:004761D9 57                      push edi
:004761DA FF7604                  push [esi+04]
:004761DD FF36                    push dword ptr [esi]
:004761DF E850FCFFFF              call 00475E34
:004761E4 59                      pop ecx
:004761E5 59                      pop ecx
:004761E6 8B0DF0BD4B00            mov ecx, dword ptr [004BBDF0]
:004761EC 8B0C8D80944B00          mov ecx, dword ptr [4*ecx+004B9480]
:004761F3 83E900                  sub ecx, 00000000
:004761F6 0F84D4000000            je 004762D0
:004761FC 49                      dec ecx
:004761FD 0F8490000000            je 00476293
:00476203 49                      dec ecx
:00476204 746A                    je 00476270
:00476206 49                      dec ecx
:00476207 743D                    je 00476246
:00476209 49                      dec ecx
:0047620A 740C                    je 00476218
:0047620C 49                      dec ecx
:0047620D 0F84BD000000            je 004762D0
:00476213 E9D9000000              jmp 004762F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047620A(C)
|
:00476218 8B4E08                  mov ecx, dword ptr [esi+08]
:0047621B 33D2                    xor edx, edx
:0047621D 2B0E                    sub ecx, dword ptr [esi]
:0047621F 0F88CC000000            js 004762F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047623F(C)
|
:00476225 8BCA                    mov ecx, edx
:00476227 83E10F                  and ecx, 0000000F
:0047622A 8A8988694B00            mov cl, byte ptr [ecx+004B6988]
:00476230 84C9                    test cl, cl
:00476232 7402                    je 00476236
:00476234 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476232(C)
|
:00476236 8B4E08                  mov ecx, dword ptr [esi+08]
:00476239 40                      inc eax
:0047623A 2B0E                    sub ecx, dword ptr [esi]
:0047623C 42                      inc edx
:0047623D 3BD1                    cmp edx, ecx
:0047623F 7EE4                    jle 00476225
:00476241 E9AB000000              jmp 004762F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476207(C)
|
:00476246 8B5608                  mov edx, dword ptr [esi+08]
:00476249 33C9                    xor ecx, ecx
:0047624B 2B16                    sub edx, dword ptr [esi]
:0047624D 0F889E000000            js 004762F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476269(C)
|
:00476253 8BD1                    mov edx, ecx
:00476255 83E20F                  and edx, 0000000F
:00476258 8A9288694B00            mov dl, byte ptr [edx+004B6988]
:0047625E 0810                    or byte ptr [eax], dl
:00476260 8B5608                  mov edx, dword ptr [esi+08]
:00476263 2B16                    sub edx, dword ptr [esi]
:00476265 40                      inc eax
:00476266 41                      inc ecx
:00476267 3BCA                    cmp ecx, edx
:00476269 7EE8                    jle 00476253
:0047626B E981000000              jmp 004762F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476204(C)
|
:00476270 8B5608                  mov edx, dword ptr [esi+08]
:00476273 33C9                    xor ecx, ecx
:00476275 2B16                    sub edx, dword ptr [esi]
:00476277 7878                    js 004762F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047628F(C)
|
:00476279 8BD1                    mov edx, ecx
:0047627B 83E20F                  and edx, 0000000F
:0047627E 8A9288694B00            mov dl, byte ptr [edx+004B6988]
:00476284 2010                    and byte ptr [eax], dl
:00476286 8B5608                  mov edx, dword ptr [esi+08]
:00476289 2B16                    sub edx, dword ptr [esi]
:0047628B 40                      inc eax
:0047628C 41                      inc ecx
:0047628D 3BCA                    cmp ecx, edx
:0047628F 7EE8                    jle 00476279
:00476291 EB5E                    jmp 004762F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004761FD(C)
|
:00476293 8B4E08                  mov ecx, dword ptr [esi+08]
:00476296 33D2                    xor edx, edx
:00476298 2B0E                    sub ecx, dword ptr [esi]
:0047629A 7855                    js 004762F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004762CC(C)
|
:0047629C 8BCA                    mov ecx, edx
:0047629E 83E10F                  and ecx, 0000000F
:004762A1 8A8988694B00            mov cl, byte ptr [ecx+004B6988]
:004762A7 3008                    xor byte ptr [eax], cl
:004762A9 8B3DF0BD4B00            mov edi, dword ptr [004BBDF0]
:004762AF 8A08                    mov cl, byte ptr [eax]
:004762B1 833CBD58794B0007        cmp dword ptr [4*edi+004B7958], 00000007
:004762B9 7408                    je 004762C3
:004762BB 80E10F                  and cl, 0F
:004762BE 80C910                  or cl, 10
:004762C1 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004762B9(C)
|
:004762C3 8B4E08                  mov ecx, dword ptr [esi+08]
:004762C6 40                      inc eax
:004762C7 2B0E                    sub ecx, dword ptr [esi]
:004762C9 42                      inc edx
:004762CA 3BD1                    cmp edx, ecx
:004762CC 7ECE                    jle 0047629C
:004762CE EB21                    jmp 004762F1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004761F6(C), :0047620D(C)
|
:004762D0 8B5608                  mov edx, dword ptr [esi+08]
:004762D3 33C9                    xor ecx, ecx
:004762D5 2B16                    sub edx, dword ptr [esi]
:004762D7 7818                    js 004762F1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004762EF(C)
|
:004762D9 8BD1                    mov edx, ecx
:004762DB 83E20F                  and edx, 0000000F
:004762DE 8A9288694B00            mov dl, byte ptr [edx+004B6988]
:004762E4 8810                    mov byte ptr [eax], dl
:004762E6 8B5608                  mov edx, dword ptr [esi+08]
:004762E9 2B16                    sub edx, dword ptr [esi]
:004762EB 40                      inc eax
:004762EC 41                      inc ecx
:004762ED 3BCA                    cmp ecx, edx
:004762EF 7EE8                    jle 004762D9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476213(U), :0047621F(C), :00476241(U), :0047624D(C), :0047626B(U)
|:00476277(C), :00476291(U), :0047629A(C), :004762CE(U), :004762D7(C)
|
:004762F1 5F                      pop edi
:004762F2 5E                      pop esi
:004762F3 C3                      ret



* Referenced by a CALL at Addresses:
|:00475FDA   , :00476A61   , :00476AD8   
|
:004762F4 56                      push esi
:004762F5 8B742408                mov esi, dword ptr [esp+08]
:004762F9 57                      push edi
:004762FA FF7604                  push [esi+04]
:004762FD FF36                    push dword ptr [esi]
:004762FF E830FBFFFF              call 00475E34
:00476304 59                      pop ecx
:00476305 59                      pop ecx
:00476306 8B0DF0BD4B00            mov ecx, dword ptr [004BBDF0]
:0047630C 8B0C8D80944B00          mov ecx, dword ptr [4*ecx+004B9480]
:00476313 83E900                  sub ecx, 00000000
:00476316 0F8414010000            je 00476430
:0047631C 49                      dec ecx
:0047631D 0F84C2000000            je 004763E5
:00476323 49                      dec ecx
:00476324 0F8486000000            je 004763B0
:0047632A 49                      dec ecx
:0047632B 744B                    je 00476378
:0047632D 49                      dec ecx
:0047632E 740C                    je 0047633C
:00476330 49                      dec ecx
:00476331 0F84F9000000            je 00476430
:00476337 E923010000              jmp 0047645F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047632E(C)
|
:0047633C 8B4E0C                  mov ecx, dword ptr [esi+0C]
:0047633F 33D2                    xor edx, edx
:00476341 2B4E04                  sub ecx, dword ptr [esi+04]
:00476344 0F8815010000            js 0047645F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476371(C)
|
:0047634A 8BCA                    mov ecx, edx
:0047634C 83E10F                  and ecx, 0000000F
:0047634F 8A8988694B00            mov cl, byte ptr [ecx+004B6988]
:00476355 84C9                    test cl, cl
:00476357 7402                    je 0047635B
:00476359 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476357(C)
|
:0047635B 8B0DF0BD4B00            mov ecx, dword ptr [004BBDF0]
:00476361 03048D10964B00          add eax, dword ptr [4*ecx+004B9610]
:00476368 8B4E0C                  mov ecx, dword ptr [esi+0C]
:0047636B 2B4E04                  sub ecx, dword ptr [esi+04]
:0047636E 42                      inc edx
:0047636F 3BD1                    cmp edx, ecx
:00476371 7ED7                    jle 0047634A
:00476373 E9E7000000              jmp 0047645F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047632B(C)
|
:00476378 8B560C                  mov edx, dword ptr [esi+0C]
:0047637B 33C9                    xor ecx, ecx
:0047637D 2B5604                  sub edx, dword ptr [esi+04]
:00476380 0F88D9000000            js 0047645F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004763A9(C)
|
:00476386 8BD1                    mov edx, ecx
:00476388 83E20F                  and edx, 0000000F
:0047638B 8A9288694B00            mov dl, byte ptr [edx+004B6988]
:00476391 0810                    or byte ptr [eax], dl
:00476393 8B15F0BD4B00            mov edx, dword ptr [004BBDF0]
:00476399 03049510964B00          add eax, dword ptr [4*edx+004B9610]
:004763A0 8B560C                  mov edx, dword ptr [esi+0C]
:004763A3 2B5604                  sub edx, dword ptr [esi+04]
:004763A6 41                      inc ecx
:004763A7 3BCA                    cmp ecx, edx
:004763A9 7EDB                    jle 00476386
:004763AB E9AF000000              jmp 0047645F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476324(C)
|
:004763B0 8B560C                  mov edx, dword ptr [esi+0C]
:004763B3 33C9                    xor ecx, ecx
:004763B5 2B5604                  sub edx, dword ptr [esi+04]
:004763B8 0F88A1000000            js 0047645F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004763E1(C)
|
:004763BE 8BD1                    mov edx, ecx
:004763C0 83E20F                  and edx, 0000000F
:004763C3 8A9288694B00            mov dl, byte ptr [edx+004B6988]
:004763C9 2010                    and byte ptr [eax], dl
:004763CB 8B15F0BD4B00            mov edx, dword ptr [004BBDF0]
:004763D1 03049510964B00          add eax, dword ptr [4*edx+004B9610]
:004763D8 8B560C                  mov edx, dword ptr [esi+0C]
:004763DB 2B5604                  sub edx, dword ptr [esi+04]
:004763DE 41                      inc ecx
:004763DF 3BCA                    cmp ecx, edx
:004763E1 7EDB                    jle 004763BE
:004763E3 EB7A                    jmp 0047645F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047631D(C)
|
:004763E5 8B4E0C                  mov ecx, dword ptr [esi+0C]
:004763E8 33D2                    xor edx, edx
:004763EA 2B4E04                  sub ecx, dword ptr [esi+04]
:004763ED 7870                    js 0047645F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047642C(C)
|
:004763EF 8BCA                    mov ecx, edx
:004763F1 83E10F                  and ecx, 0000000F
:004763F4 8A8988694B00            mov cl, byte ptr [ecx+004B6988]
:004763FA 3008                    xor byte ptr [eax], cl
:004763FC 8B3DF0BD4B00            mov edi, dword ptr [004BBDF0]
:00476402 8A08                    mov cl, byte ptr [eax]
:00476404 833CBD58794B0007        cmp dword ptr [4*edi+004B7958], 00000007
:0047640C 7408                    je 00476416
:0047640E 80E10F                  and cl, 0F
:00476411 80C910                  or cl, 10
:00476414 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047640C(C)
|
:00476416 8B0DF0BD4B00            mov ecx, dword ptr [004BBDF0]
:0047641C 03048D10964B00          add eax, dword ptr [4*ecx+004B9610]
:00476423 8B4E0C                  mov ecx, dword ptr [esi+0C]
:00476426 2B4E04                  sub ecx, dword ptr [esi+04]
:00476429 42                      inc edx
:0047642A 3BD1                    cmp edx, ecx
:0047642C 7EC1                    jle 004763EF
:0047642E EB2F                    jmp 0047645F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476316(C), :00476331(C)
|
:00476430 8B560C                  mov edx, dword ptr [esi+0C]
:00476433 33C9                    xor ecx, ecx
:00476435 2B5604                  sub edx, dword ptr [esi+04]
:00476438 7825                    js 0047645F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047645D(C)
|
:0047643A 8BD1                    mov edx, ecx
:0047643C 83E20F                  and edx, 0000000F
:0047643F 8A9288694B00            mov dl, byte ptr [edx+004B6988]
:00476445 8810                    mov byte ptr [eax], dl
:00476447 8B15F0BD4B00            mov edx, dword ptr [004BBDF0]
:0047644D 03049510964B00          add eax, dword ptr [4*edx+004B9610]
:00476454 8B560C                  mov edx, dword ptr [esi+0C]
:00476457 2B5604                  sub edx, dword ptr [esi+04]
:0047645A 41                      inc ecx
:0047645B 3BCA                    cmp ecx, edx
:0047645D 7EDB                    jle 0047643A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476337(U), :00476344(C), :00476373(U), :00476380(C), :004763AB(U)
|:004763B8(C), :004763E3(U), :004763ED(C), :0047642E(U), :00476438(C)
|
:0047645F 5F                      pop edi
:00476460 5E                      pop esi
:00476461 C3                      ret



* Referenced by a CALL at Address:
|:004760B9   
|
:00476462 55                      push ebp
:00476463 8BEC                    mov ebp, esp
:00476465 51                      push ecx
:00476466 51                      push ecx
:00476467 53                      push ebx
:00476468 56                      push esi
:00476469 8B7508                  mov esi, dword ptr [ebp+08]
:0047646C 57                      push edi
:0047646D 8B7E08                  mov edi, dword ptr [esi+08]
:00476470 8B16                    mov edx, dword ptr [esi]
:00476472 8BC7                    mov eax, edi
:00476474 2BC2                    sub eax, edx
:00476476 8945FC                  mov dword ptr [ebp-04], eax
:00476479 7905                    jns 00476480
:0047647B F7D8                    neg eax
:0047647D 8945FC                  mov dword ptr [ebp-04], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476479(C)
|
:00476480 8B460C                  mov eax, dword ptr [esi+0C]
:00476483 8B4E04                  mov ecx, dword ptr [esi+04]
:00476486 8BD8                    mov ebx, eax
:00476488 2BD9                    sub ebx, ecx
:0047648A 895DF8                  mov dword ptr [ebp-08], ebx
:0047648D 7905                    jns 00476494
:0047648F F7DB                    neg ebx
:00476491 895DF8                  mov dword ptr [ebp-08], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047648D(C)
|
:00476494 395DFC                  cmp dword ptr [ebp-04], ebx
:00476497 7E72                    jle 0047650B
:00476499 33DB                    xor ebx, ebx
:0047649B 3BC8                    cmp ecx, eax
:0047649D 0F9DC3                  setnl bl
:004764A0 4B                      dec ebx
:004764A1 83E302                  and ebx, 00000002
:004764A4 4B                      dec ebx
:004764A5 3BD7                    cmp edx, edi
:004764A7 7E0D                    jle 004764B6
:004764A9 893E                    mov dword ptr [esi], edi
:004764AB 895608                  mov dword ptr [esi+08], edx
:004764AE 894604                  mov dword ptr [esi+04], eax
:004764B1 894E0C                  mov dword ptr [esi+0C], ecx
:004764B4 F7DB                    neg ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004764A7(C)
|
:004764B6 A088694B00              mov al, byte ptr [004B6988]
:004764BB 50                      push eax
:004764BC FF7604                  push [esi+04]
:004764BF FF36                    push dword ptr [esi]
:004764C1 E8B8000000              call 0047657E
:004764C6 8B7DFC                  mov edi, dword ptr [ebp-04]
:004764C9 83C40C                  add esp, 0000000C
:004764CC C7450801000000          mov [ebp+08], 00000001
:004764D3 D1FF                    sar edi, 1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476509(U)
|
:004764D5 FF06                    inc dword ptr [esi]
:004764D7 8B06                    mov eax, dword ptr [esi]
:004764D9 3B4608                  cmp eax, dword ptr [esi+08]
:004764DC 0F8F97000000            jg 00476579
:004764E2 2B7DF8                  sub edi, dword ptr [ebp-08]
:004764E5 7906                    jns 004764ED
:004764E7 037DFC                  add edi, dword ptr [ebp-04]
:004764EA 015E04                  add dword ptr [esi+04], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004764E5(C)
|
:004764ED 8B4D08                  mov ecx, dword ptr [ebp+08]
:004764F0 83E10F                  and ecx, 0000000F
:004764F3 8A8988694B00            mov cl, byte ptr [ecx+004B6988]
:004764F9 51                      push ecx
:004764FA FF7604                  push [esi+04]
:004764FD 50                      push eax
:004764FE E87B000000              call 0047657E
:00476503 83C40C                  add esp, 0000000C
:00476506 FF4508                  inc [ebp+08]
:00476509 EBCA                    jmp 004764D5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476497(C)
|
:0047650B 33DB                    xor ebx, ebx
:0047650D 3BD7                    cmp edx, edi
:0047650F 0F9DC3                  setnl bl
:00476512 4B                      dec ebx
:00476513 83E302                  and ebx, 00000002
:00476516 4B                      dec ebx
:00476517 3BC8                    cmp ecx, eax
:00476519 7E0D                    jle 00476528
:0047651B 894604                  mov dword ptr [esi+04], eax
:0047651E 894E0C                  mov dword ptr [esi+0C], ecx
:00476521 893E                    mov dword ptr [esi], edi
:00476523 895608                  mov dword ptr [esi+08], edx
:00476526 F7DB                    neg ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476519(C)
|
:00476528 A088694B00              mov al, byte ptr [004B6988]
:0047652D 50                      push eax
:0047652E FF7604                  push [esi+04]
:00476531 FF36                    push dword ptr [esi]
:00476533 E846000000              call 0047657E
:00476538 8B7DF8                  mov edi, dword ptr [ebp-08]
:0047653B 83C40C                  add esp, 0000000C
:0047653E C7450801000000          mov [ebp+08], 00000001
:00476545 D1FF                    sar edi, 1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476577(U)
|
:00476547 FF4604                  inc [esi+04]
:0047654A 8B4604                  mov eax, dword ptr [esi+04]
:0047654D 3B460C                  cmp eax, dword ptr [esi+0C]
:00476550 7F27                    jg 00476579
:00476552 2B7DFC                  sub edi, dword ptr [ebp-04]
:00476555 7905                    jns 0047655C
:00476557 037DF8                  add edi, dword ptr [ebp-08]
:0047655A 011E                    add dword ptr [esi], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476555(C)
|
:0047655C 8B4D08                  mov ecx, dword ptr [ebp+08]
:0047655F 83E10F                  and ecx, 0000000F
:00476562 8A8988694B00            mov cl, byte ptr [ecx+004B6988]
:00476568 51                      push ecx
:00476569 50                      push eax
:0047656A FF36                    push dword ptr [esi]
:0047656C E80D000000              call 0047657E
:00476571 83C40C                  add esp, 0000000C
:00476574 FF4508                  inc [ebp+08]
:00476577 EBCE                    jmp 00476547

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004764DC(C), :00476550(C)
|
:00476579 5F                      pop edi
:0047657A 5E                      pop esi
:0047657B 5B                      pop ebx
:0047657C C9                      leave
:0047657D C3                      ret



* Referenced by a CALL at Addresses:
|:004764C1   , :004764FE   , :00476533   , :0047656C   
|
:0047657E 55                      push ebp
:0047657F 8BEC                    mov ebp, esp
:00476581 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476586 8B5508                  mov edx, dword ptr [ebp+08]
:00476589 C1E004                  shl eax, 04
:0047658C 3B90C0BE4B00            cmp edx, dword ptr [eax+004BBEC0]
:00476592 0F8C82000000            jl 0047661A
:00476598 3B90C8BE4B00            cmp edx, dword ptr [eax+004BBEC8]
:0047659E 7F7A                    jg 0047661A
:004765A0 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004765A3 3B88C4BE4B00            cmp ecx, dword ptr [eax+004BBEC4]
:004765A9 7C6F                    jl 0047661A
:004765AB 3B88CCBE4B00            cmp ecx, dword ptr [eax+004BBECC]
:004765B1 7F67                    jg 0047661A
:004765B3 51                      push ecx
:004765B4 52                      push edx
:004765B5 E87AF8FFFF              call 00475E34
:004765BA 59                      pop ecx
:004765BB 59                      pop ecx
:004765BC 8B0DF0BD4B00            mov ecx, dword ptr [004BBDF0]
:004765C2 8B0C8D80944B00          mov ecx, dword ptr [4*ecx+004B9480]
:004765C9 83E900                  sub ecx, 00000000
:004765CC 7447                    je 00476615
:004765CE 49                      dec ecx
:004765CF 7425                    je 004765F6
:004765D1 49                      dec ecx
:004765D2 741B                    je 004765EF
:004765D4 49                      dec ecx
:004765D5 7411                    je 004765E8
:004765D7 49                      dec ecx
:004765D8 7405                    je 004765DF
:004765DA 49                      dec ecx
:004765DB 7438                    je 00476615
:004765DD 5D                      pop ebp
:004765DE C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004765D8(C)
|
:004765DF 8A4D10                  mov cl, byte ptr [ebp+10]
:004765E2 84C9                    test cl, cl
:004765E4 7434                    je 0047661A
:004765E6 EB30                    jmp 00476618

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004765D5(C)
|
:004765E8 8A4D10                  mov cl, byte ptr [ebp+10]
:004765EB 0808                    or byte ptr [eax], cl
:004765ED 5D                      pop ebp
:004765EE C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004765D2(C)
|
:004765EF 8A4D10                  mov cl, byte ptr [ebp+10]
:004765F2 2008                    and byte ptr [eax], cl
:004765F4 5D                      pop ebp
:004765F5 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004765CF(C)
|
:004765F6 8A4D10                  mov cl, byte ptr [ebp+10]
:004765F9 3008                    xor byte ptr [eax], cl
:004765FB 8B15F0BD4B00            mov edx, dword ptr [004BBDF0]
:00476601 8A08                    mov cl, byte ptr [eax]
:00476603 833C9558794B0007        cmp dword ptr [4*edx+004B7958], 00000007
:0047660B 740D                    je 0047661A
:0047660D 80E10F                  and cl, 0F
:00476610 80C910                  or cl, 10
:00476613 EB03                    jmp 00476618

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004765CC(C), :004765DB(C)
|
:00476615 8A4D10                  mov cl, byte ptr [ebp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004765E6(U), :00476613(U)
|
:00476618 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476592(C), :0047659E(C), :004765A9(C), :004765B1(C), :004765E4(C)
|:0047660B(C)
|
:0047661A 5D                      pop ebp
:0047661B C3                      ret



* Referenced by a CALL at Addresses:
|:00410230   , :00410503   , :0044A9CD   , :0045C379   , :004680BF   
|
:0047661C 55                      push ebp
:0047661D 8BEC                    mov ebp, esp
:0047661F 83EC10                  sub esp, 00000010
:00476622 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476627 8B5508                  mov edx, dword ptr [ebp+08]
:0047662A C1E003                  shl eax, 03
:0047662D 56                      push esi
:0047662E 8B750C                  mov esi, dword ptr [ebp+0C]
:00476631 8B8838764B00            mov ecx, dword ptr [eax+004B7638]
:00476637 8B803C764B00            mov eax, dword ptr [eax+004B763C]
:0047663D 57                      push edi
:0047663E 8B7D10                  mov edi, dword ptr [ebp+10]
:00476641 03D1                    add edx, ecx
:00476643 03CF                    add ecx, edi
:00476645 8B7D14                  mov edi, dword ptr [ebp+14]
:00476648 03F0                    add esi, eax
:0047664A 03C7                    add eax, edi
:0047664C 3BD1                    cmp edx, ecx
:0047664E 8955F0                  mov dword ptr [ebp-10], edx
:00476651 8975F4                  mov dword ptr [ebp-0C], esi
:00476654 894DF8                  mov dword ptr [ebp-08], ecx
:00476657 8945FC                  mov dword ptr [ebp-04], eax
:0047665A 7E06                    jle 00476662
:0047665C 894DF0                  mov dword ptr [ebp-10], ecx
:0047665F 8955F8                  mov dword ptr [ebp-08], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047665A(C)
|
:00476662 3BF0                    cmp esi, eax
:00476664 7E06                    jle 0047666C
:00476666 8945F4                  mov dword ptr [ebp-0C], eax
:00476669 8975FC                  mov dword ptr [ebp-04], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476664(C)
|
:0047666C 8B4518                  mov eax, dword ptr [ebp+18]
:0047666F 83E800                  sub eax, 00000000
:00476672 7427                    je 0047669B
:00476674 48                      dec eax
:00476675 740E                    je 00476685
:00476677 48                      dec eax
:00476678 752B                    jne 004766A5
:0047667A 8D45F0                  lea eax, dword ptr [ebp-10]
:0047667D 50                      push eax
:0047667E E865010000              call 004767E8
:00476683 EB1F                    jmp 004766A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476675(C)
|
:00476685 68FFFF0000              push 0000FFFF
:0047668A E8EDFAFFFF              call 0047617C
:0047668F 59                      pop ecx
:00476690 8D45F0                  lea eax, dword ptr [ebp-10]
:00476693 50                      push eax
:00476694 E83B030000              call 004769D4
:00476699 EB09                    jmp 004766A4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476672(C)
|
:0047669B 8D45F0                  lea eax, dword ptr [ebp-10]
:0047669E 50                      push eax
:0047669F E805000000              call 004766A9

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476683(U), :00476699(U)
|
:004766A4 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476678(C)
|
:004766A5 5F                      pop edi
:004766A6 5E                      pop esi
:004766A7 C9                      leave
:004766A8 C3                      ret



* Referenced by a CALL at Address:
|:0047669F   
|
:004766A9 55                      push ebp
:004766AA 8BEC                    mov ebp, esp
:004766AC 83EC18                  sub esp, 00000018
:004766AF A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:004766B4 C1E004                  shl eax, 04
:004766B7 05C0BE4B00              add eax, 004BBEC0
:004766BC 50                      push eax
:004766BD 8D45E8                  lea eax, dword ptr [ebp-18]
:004766C0 FF7508                  push [ebp+08]
:004766C3 50                      push eax
:004766C4 E819FAFFFF              call 004760E2
:004766C9 83C40C                  add esp, 0000000C
:004766CC 85C0                    test eax, eax
:004766CE 0F8412010000            je 004767E6
:004766D4 57                      push edi
:004766D5 8B7DF4                  mov edi, dword ptr [ebp-0C]
:004766D8 2B7DEC                  sub edi, dword ptr [ebp-14]
:004766DB 56                      push esi
:004766DC 8B75F0                  mov esi, dword ptr [ebp-10]
:004766DF 53                      push ebx
:004766E0 FF75EC                  push [ebp-14]
:004766E3 2B75E8                  sub esi, dword ptr [ebp-18]
:004766E6 FF75E8                  push [ebp-18]
:004766E9 46                      inc esi
:004766EA 47                      inc edi
:004766EB E844F7FFFF              call 00475E34
:004766F0 59                      pop ecx
:004766F1 59                      pop ecx
:004766F2 8B0DF0BD4B00            mov ecx, dword ptr [004BBDF0]
:004766F8 C1E102                  shl ecx, 02
:004766FB 8A91108D4B00            mov dl, byte ptr [ecx+004B8D10]
:00476701 8B9910964B00            mov ebx, dword ptr [ecx+004B9610]
:00476707 885508                  mov byte ptr [ebp+08], dl
:0047670A 8B9180944B00            mov edx, dword ptr [ecx+004B9480]
:00476710 895DF8                  mov dword ptr [ebp-08], ebx
:00476713 2BDE                    sub ebx, esi
:00476715 83EA00                  sub edx, 00000000
:00476718 0F84A0000000            je 004767BE
:0047671E 4A                      dec edx
:0047671F 7461                    je 00476782
:00476721 4A                      dec edx
:00476722 743F                    je 00476763
:00476724 4A                      dec edx
:00476725 7419                    je 00476740
:00476727 4A                      dec edx
:00476728 0F8490000000            je 004767BE
:0047672E 4A                      dec edx
:0047672F 0F859E000000            jne 004767D3
:00476735 8A8958844B00            mov cl, byte ptr [ecx+004B8458]
:0047673B E981000000              jmp 004767C1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476725(C)
|
:00476740 85FF                    test edi, edi
:00476742 0F8E8B000000            jle 004767D3
:00476748 897DFC                  mov dword ptr [ebp-04], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047675F(C)
|
:0047674B 85F6                    test esi, esi
:0047674D 7E0B                    jle 0047675A
:0047674F 8BCE                    mov ecx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476758(C)
|
:00476751 8A5508                  mov dl, byte ptr [ebp+08]
:00476754 0810                    or byte ptr [eax], dl
:00476756 40                      inc eax
:00476757 49                      dec ecx
:00476758 75F7                    jne 00476751

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047674D(C)
|
:0047675A 03C3                    add eax, ebx
:0047675C FF4DFC                  dec [ebp-04]
:0047675F 75EA                    jne 0047674B
:00476761 EB70                    jmp 004767D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476722(C)
|
:00476763 85FF                    test edi, edi
:00476765 7E6C                    jle 004767D3
:00476767 897DFC                  mov dword ptr [ebp-04], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047677E(C)
|
:0047676A 85F6                    test esi, esi
:0047676C 7E0B                    jle 00476779
:0047676E 8BCE                    mov ecx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476777(C)
|
:00476770 8A5508                  mov dl, byte ptr [ebp+08]
:00476773 2010                    and byte ptr [eax], dl
:00476775 40                      inc eax
:00476776 49                      dec ecx
:00476777 75F7                    jne 00476770

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047676C(C)
|
:00476779 03C3                    add eax, ebx
:0047677B FF4DFC                  dec [ebp-04]
:0047677E 75EA                    jne 0047676A
:00476780 EB51                    jmp 004767D3

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047671F(C)
|
:00476782 85FF                    test edi, edi
:00476784 7E4D                    jle 004767D3
:00476786 897DF8                  mov dword ptr [ebp-08], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004767BA(C)
|
:00476789 85F6                    test esi, esi
:0047678B 7E28                    jle 004767B5
:0047678D 8975FC                  mov dword ptr [ebp-04], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004767B3(C)
|
:00476790 8A4D08                  mov cl, byte ptr [ebp+08]
:00476793 3008                    xor byte ptr [eax], cl
:00476795 8B15F0BD4B00            mov edx, dword ptr [004BBDF0]
:0047679B 8A08                    mov cl, byte ptr [eax]
:0047679D 833C9558794B0007        cmp dword ptr [4*edx+004B7958], 00000007
:004767A5 7408                    je 004767AF
:004767A7 80E10F                  and cl, 0F
:004767AA 80C910                  or cl, 10
:004767AD 8808                    mov byte ptr [eax], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004767A5(C)
|
:004767AF 40                      inc eax
:004767B0 FF4DFC                  dec [ebp-04]
:004767B3 75DB                    jne 00476790

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047678B(C)
|
:004767B5 03C3                    add eax, ebx
:004767B7 FF4DF8                  dec [ebp-08]
:004767BA 75CD                    jne 00476789
:004767BC EB15                    jmp 004767D3

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476718(C), :00476728(C)
|
:004767BE 8A4D08                  mov cl, byte ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047673B(U)
|
:004767C1 50                      push eax
:004767C2 0FB6C1                  movzx eax, cl
:004767C5 50                      push eax
:004767C6 FF75F8                  push [ebp-08]
:004767C9 57                      push edi
:004767CA 56                      push esi
:004767CB E8DF170000              call 00477FAF
:004767D0 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047672F(C), :00476742(C), :00476761(U), :00476765(C), :00476780(U)
|:00476784(C), :004767BC(U)
|
:004767D3 57                      push edi
:004767D4 56                      push esi
:004767D5 FF75EC                  push [ebp-14]
:004767D8 FF75E8                  push [ebp-18]
:004767DB E8CFEBFFFF              call 004753AF
:004767E0 83C410                  add esp, 00000010
:004767E3 5B                      pop ebx
:004767E4 5E                      pop esi
:004767E5 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004766CE(C)
|
:004767E6 C9                      leave
:004767E7 C3                      ret



* Referenced by a CALL at Address:
|:0047667E   
|
:004767E8 55                      push ebp
:004767E9 8BEC                    mov ebp, esp
:004767EB 83EC18                  sub esp, 00000018
:004767EE A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:004767F3 C1E004                  shl eax, 04
:004767F6 05C0BE4B00              add eax, 004BBEC0
:004767FB 50                      push eax
:004767FC 8D45E8                  lea eax, dword ptr [ebp-18]
:004767FF FF7508                  push [ebp+08]
:00476802 50                      push eax
:00476803 E8DAF8FFFF              call 004760E2
:00476808 83C40C                  add esp, 0000000C
:0047680B 85C0                    test eax, eax
:0047680D 747A                    je 00476889
:0047680F 8B45F4                  mov eax, dword ptr [ebp-0C]
:00476812 57                      push edi
:00476813 2B45EC                  sub eax, dword ptr [ebp-14]
:00476816 56                      push esi
:00476817 8B75F0                  mov esi, dword ptr [ebp-10]
:0047681A 53                      push ebx
:0047681B 2B75E8                  sub esi, dword ptr [ebp-18]
:0047681E FF75EC                  push [ebp-14]
:00476821 FF75E8                  push [ebp-18]
:00476824 46                      inc esi
:00476825 40                      inc eax
:00476826 8975F8                  mov dword ptr [ebp-08], esi
:00476829 8945FC                  mov dword ptr [ebp-04], eax
:0047682C E803F6FFFF              call 00475E34
:00476831 59                      pop ecx
:00476832 59                      pop ecx
:00476833 8BC8                    mov ecx, eax
:00476835 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:0047683A C1E002                  shl eax, 02
:0047683D 8B9810964B00            mov ebx, dword ptr [eax+004B9610]
:00476843 8B8080944B00            mov eax, dword ptr [eax+004B9480]
:00476849 2BDE                    sub ebx, esi
:0047684B 83E800                  sub eax, 00000000
:0047684E 895D08                  mov dword ptr [ebp+08], ebx
:00476851 0F843F010000            je 00476996
:00476857 48                      dec eax
:00476858 0F84E1000000            je 0047693F
:0047685E 48                      dec eax
:0047685F 0F849C000000            je 00476901
:00476865 48                      dec eax
:00476866 745F                    je 004768C7
:00476868 48                      dec eax
:00476869 7420                    je 0047688B
:0047686B 48                      dec eax
:0047686C 0F8424010000            je 00476996

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476891(C), :004768CD(C), :00476907(C), :00476945(C), :0047699C(C)
|
:00476872 FF75FC                  push [ebp-04]
:00476875 FF75F8                  push [ebp-08]
:00476878 FF75EC                  push [ebp-14]
:0047687B FF75E8                  push [ebp-18]
:0047687E E82CEBFFFF              call 004753AF
:00476883 83C410                  add esp, 00000010
:00476886 5B                      pop ebx
:00476887 5E                      pop esi
:00476888 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047680D(C)
|
:00476889 C9                      leave
:0047688A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476869(C)
|
:0047688B 8B7DEC                  mov edi, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004768C5(U)
|
:0047688E 3B7DF4                  cmp edi, dword ptr [ebp-0C]
:00476891 7FDF                    jg 00476872
:00476893 8B75E8                  mov esi, dword ptr [ebp-18]
:00476896 8BC7                    mov eax, edi
:00476898 99                      cdq
:00476899 F73D00C54B00            idiv dword ptr [004BC500]
:0047689F 8B45F0                  mov eax, dword ptr [ebp-10]
:004768A2 3BF0                    cmp esi, eax
:004768A4 7F1C                    jg 004768C2
:004768A6 C1E203                  shl edx, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004768C0(C)
|
:004768A9 8BC6                    mov eax, esi
:004768AB 83E007                  and eax, 00000007
:004768AE 8A841000BE4B00          mov al, byte ptr [eax+edx+004BBE00]
:004768B5 84C0                    test al, al
:004768B7 7402                    je 004768BB
:004768B9 8801                    mov byte ptr [ecx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004768B7(C)
|
:004768BB 41                      inc ecx
:004768BC 46                      inc esi
:004768BD 3B75F0                  cmp esi, dword ptr [ebp-10]
:004768C0 7EE7                    jle 004768A9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004768A4(C)
|
:004768C2 03CB                    add ecx, ebx
:004768C4 47                      inc edi
:004768C5 EBC7                    jmp 0047688E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476866(C)
|
:004768C7 8B7DEC                  mov edi, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004768FF(U)
|
:004768CA 3B7DF4                  cmp edi, dword ptr [ebp-0C]
:004768CD 7FA3                    jg 00476872
:004768CF 8B75E8                  mov esi, dword ptr [ebp-18]
:004768D2 8BC7                    mov eax, edi
:004768D4 99                      cdq
:004768D5 F73D00C54B00            idiv dword ptr [004BC500]
:004768DB 8B45F0                  mov eax, dword ptr [ebp-10]
:004768DE 3BF0                    cmp esi, eax
:004768E0 7F1A                    jg 004768FC
:004768E2 8BC2                    mov eax, edx
:004768E4 C1E003                  shl eax, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004768FA(C)
|
:004768E7 8BD6                    mov edx, esi
:004768E9 83E207                  and edx, 00000007
:004768EC 8A940200BE4B00          mov dl, byte ptr [edx+eax+004BBE00]
:004768F3 0811                    or byte ptr [ecx], dl
:004768F5 41                      inc ecx
:004768F6 46                      inc esi
:004768F7 3B75F0                  cmp esi, dword ptr [ebp-10]
:004768FA 7EEB                    jle 004768E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004768E0(C)
|
:004768FC 03CB                    add ecx, ebx
:004768FE 47                      inc edi
:004768FF EBC9                    jmp 004768CA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047685F(C)
|
:00476901 8B7DEC                  mov edi, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047693D(U)
|
:00476904 3B7DF4                  cmp edi, dword ptr [ebp-0C]
:00476907 0F8F65FFFFFF            jg 00476872
:0047690D 8B75E8                  mov esi, dword ptr [ebp-18]
:00476910 8BC7                    mov eax, edi
:00476912 99                      cdq
:00476913 F73D00C54B00            idiv dword ptr [004BC500]
:00476919 8B45F0                  mov eax, dword ptr [ebp-10]
:0047691C 3BF0                    cmp esi, eax
:0047691E 7F1A                    jg 0047693A
:00476920 8BC2                    mov eax, edx
:00476922 C1E003                  shl eax, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476938(C)
|
:00476925 8BD6                    mov edx, esi
:00476927 83E207                  and edx, 00000007
:0047692A 8A940200BE4B00          mov dl, byte ptr [edx+eax+004BBE00]
:00476931 2011                    and byte ptr [ecx], dl
:00476933 41                      inc ecx
:00476934 46                      inc esi
:00476935 3B75F0                  cmp esi, dword ptr [ebp-10]
:00476938 7EEB                    jle 00476925

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047691E(C)
|
:0047693A 03CB                    add ecx, ebx
:0047693C 47                      inc edi
:0047693D EBC5                    jmp 00476904

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476858(C)
|
:0047693F 8B7DEC                  mov edi, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476994(U)
|
:00476942 3B7DF4                  cmp edi, dword ptr [ebp-0C]
:00476945 0F8F27FFFFFF            jg 00476872
:0047694B 8B75E8                  mov esi, dword ptr [ebp-18]
:0047694E 8BC7                    mov eax, edi
:00476950 99                      cdq
:00476951 F73D00C54B00            idiv dword ptr [004BC500]
:00476957 8B45F0                  mov eax, dword ptr [ebp-10]
:0047695A 3BF0                    cmp esi, eax
:0047695C 7F33                    jg 00476991
:0047695E C1E203                  shl edx, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047698C(C)
|
:00476961 8BC6                    mov eax, esi
:00476963 83E007                  and eax, 00000007
:00476966 8A841000BE4B00          mov al, byte ptr [eax+edx+004BBE00]
:0047696D 3001                    xor byte ptr [ecx], al
:0047696F 8B1DF0BD4B00            mov ebx, dword ptr [004BBDF0]
:00476975 8A01                    mov al, byte ptr [ecx]
:00476977 833C9D58794B0007        cmp dword ptr [4*ebx+004B7958], 00000007
:0047697F 7406                    je 00476987
:00476981 240F                    and al, 0F
:00476983 0C10                    or al, 10
:00476985 8801                    mov byte ptr [ecx], al

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047697F(C)
|
:00476987 41                      inc ecx
:00476988 46                      inc esi
:00476989 3B75F0                  cmp esi, dword ptr [ebp-10]
:0047698C 7ED3                    jle 00476961
:0047698E 8B5D08                  mov ebx, dword ptr [ebp+08]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047695C(C)
|
:00476991 03CB                    add ecx, ebx
:00476993 47                      inc edi
:00476994 EBAC                    jmp 00476942

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476851(C), :0047686C(C)
|
:00476996 8B7DEC                  mov edi, dword ptr [ebp-14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004769D2(U)
|
:00476999 3B7DF4                  cmp edi, dword ptr [ebp-0C]
:0047699C 0F8FD0FEFFFF            jg 00476872
:004769A2 8B75E8                  mov esi, dword ptr [ebp-18]
:004769A5 8BC7                    mov eax, edi
:004769A7 99                      cdq
:004769A8 F73D00C54B00            idiv dword ptr [004BC500]
:004769AE 8B45F0                  mov eax, dword ptr [ebp-10]
:004769B1 3BF0                    cmp esi, eax
:004769B3 7F1A                    jg 004769CF
:004769B5 8BC2                    mov eax, edx
:004769B7 C1E003                  shl eax, 03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004769CD(C)
|
:004769BA 8BD6                    mov edx, esi
:004769BC 83E207                  and edx, 00000007
:004769BF 8A940200BE4B00          mov dl, byte ptr [edx+eax+004BBE00]
:004769C6 8811                    mov byte ptr [ecx], dl
:004769C8 41                      inc ecx
:004769C9 46                      inc esi
:004769CA 3B75F0                  cmp esi, dword ptr [ebp-10]
:004769CD 7EEB                    jle 004769BA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004769B3(C)
|
:004769CF 03CB                    add ecx, ebx
:004769D1 47                      inc edi
:004769D2 EBC5                    jmp 00476999

* Referenced by a CALL at Address:
|:00476694   
|
:004769D4 55                      push ebp
:004769D5 8BEC                    mov ebp, esp
:004769D7 83EC10                  sub esp, 00000010
:004769DA A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:004769DF 53                      push ebx
:004769E0 C1E004                  shl eax, 04
:004769E3 56                      push esi
:004769E4 8B7508                  mov esi, dword ptr [ebp+08]
:004769E7 05C0BE4B00              add eax, 004BBEC0
:004769EC 57                      push edi
:004769ED 50                      push eax
:004769EE 8D45F0                  lea eax, dword ptr [ebp-10]
:004769F1 56                      push esi
:004769F2 50                      push eax
:004769F3 E8EAF6FFFF              call 004760E2
:004769F8 83C40C                  add esp, 0000000C
:004769FB 85C0                    test eax, eax
:004769FD 0F84EC000000            je 00476AEF
:00476A03 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00476A06 8B45FC                  mov eax, dword ptr [ebp-04]
:00476A09 8B55F4                  mov edx, dword ptr [ebp-0C]
:00476A0C 8BF9                    mov edi, ecx
:00476A0E 2B7DF0                  sub edi, dword ptr [ebp-10]
:00476A11 8BD8                    mov ebx, eax
:00476A13 2BDA                    sub ebx, edx
:00476A15 47                      inc edi
:00476A16 43                      inc ebx
:00476A17 395604                  cmp dword ptr [esi+04], edx
:00476A1A 752D                    jne 00476A49
:00476A1C 8B16                    mov edx, dword ptr [esi]
:00476A1E 3B55F0                  cmp edx, dword ptr [ebp-10]
:00476A21 7F26                    jg 00476A49
:00476A23 394E08                  cmp dword ptr [esi+08], ecx
:00476A26 7C21                    jl 00476A49
:00476A28 8D45F0                  lea eax, dword ptr [ebp-10]
:00476A2B 50                      push eax
:00476A2C E8A3F7FFFF              call 004761D4
:00476A31 59                      pop ecx
:00476A32 6A01                    push 00000001
:00476A34 57                      push edi
:00476A35 FF75F4                  push [ebp-0C]
:00476A38 FF75F0                  push [ebp-10]
:00476A3B E86FE9FFFF              call 004753AF
:00476A40 8B45FC                  mov eax, dword ptr [ebp-04]
:00476A43 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00476A46 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476A1A(C), :00476A21(C), :00476A26(C)
|
:00476A49 8B55F0                  mov edx, dword ptr [ebp-10]
:00476A4C 3916                    cmp dword ptr [esi], edx
:00476A4E 752E                    jne 00476A7E
:00476A50 8B5604                  mov edx, dword ptr [esi+04]
:00476A53 3B55F4                  cmp edx, dword ptr [ebp-0C]
:00476A56 7F26                    jg 00476A7E
:00476A58 39460C                  cmp dword ptr [esi+0C], eax
:00476A5B 7C62                    jl 00476ABF
:00476A5D 8D45F0                  lea eax, dword ptr [ebp-10]
:00476A60 50                      push eax
:00476A61 E88EF8FFFF              call 004762F4
:00476A66 59                      pop ecx
:00476A67 53                      push ebx
:00476A68 6A01                    push 00000001
:00476A6A FF75F4                  push [ebp-0C]
:00476A6D FF75F0                  push [ebp-10]
:00476A70 E83AE9FFFF              call 004753AF
:00476A75 8B45FC                  mov eax, dword ptr [ebp-04]
:00476A78 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00476A7B 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476A4E(C), :00476A56(C)
|
:00476A7E 39460C                  cmp dword ptr [esi+0C], eax
:00476A81 753C                    jne 00476ABF
:00476A83 8B55F0                  mov edx, dword ptr [ebp-10]
:00476A86 3916                    cmp dword ptr [esi], edx
:00476A88 7F35                    jg 00476ABF
:00476A8A 394E08                  cmp dword ptr [esi+08], ecx
:00476A8D 7C60                    jl 00476AEF
:00476A8F 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00476A92 8945F4                  mov dword ptr [ebp-0C], eax
:00476A95 8D45F0                  lea eax, dword ptr [ebp-10]
:00476A98 894D08                  mov dword ptr [ebp+08], ecx
:00476A9B 50                      push eax
:00476A9C E833F7FFFF              call 004761D4
:00476AA1 59                      pop ecx
:00476AA2 6A01                    push 00000001
:00476AA4 57                      push edi
:00476AA5 FF75F4                  push [ebp-0C]
:00476AA8 FF75F0                  push [ebp-10]
:00476AAB E8FFE8FFFF              call 004753AF
:00476AB0 8B4508                  mov eax, dword ptr [ebp+08]
:00476AB3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:00476AB6 8945F4                  mov dword ptr [ebp-0C], eax
:00476AB9 8B45FC                  mov eax, dword ptr [ebp-04]
:00476ABC 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476A5B(C), :00476A81(C), :00476A88(C)
|
:00476ABF 394E08                  cmp dword ptr [esi+08], ecx
:00476AC2 752B                    jne 00476AEF
:00476AC4 8B55F4                  mov edx, dword ptr [ebp-0C]
:00476AC7 395604                  cmp dword ptr [esi+04], edx
:00476ACA 7F23                    jg 00476AEF
:00476ACC 39460C                  cmp dword ptr [esi+0C], eax
:00476ACF 7C1E                    jl 00476AEF
:00476AD1 8D45F0                  lea eax, dword ptr [ebp-10]
:00476AD4 894DF0                  mov dword ptr [ebp-10], ecx
:00476AD7 50                      push eax
:00476AD8 E817F8FFFF              call 004762F4
:00476ADD 59                      pop ecx
:00476ADE 53                      push ebx
:00476ADF 6A01                    push 00000001
:00476AE1 FF75F4                  push [ebp-0C]
:00476AE4 FF75F0                  push [ebp-10]
:00476AE7 E8C3E8FFFF              call 004753AF
:00476AEC 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004769FD(C), :00476A8D(C), :00476AC2(C), :00476ACA(C), :00476ACF(C)
|
:00476AEF 5F                      pop edi
:00476AF0 5E                      pop esi
:00476AF1 5B                      pop ebx
:00476AF2 C9                      leave
:00476AF3 C3                      ret



* Referenced by a CALL at Addresses:
|:0040380C   , :00403892   , :00405216   , :00405338   , :004101DD   
|:004103DE   , :004119E9   , :0041BE9F   , :0041E5ED   , :0041FFCB   
|:004200AF   , :004200CC   , :0042432E   , :00424417   , :00424431   
|:0042447C   , :00424493   , :0042896F   , :004289A1   , :00428B59   
|:00428B8C   , :0042922F   , :00429259   , :00429447   , :0042CDD2   
|:0042CE06   , :0042CE39   , :0042CE7B   , :0042CEA9   , :0042CEE1   
|:0042EE64   , :0042FF53   , :0042FFD9   , :0043001F   , :004300BE   
|:00430377   , :00430BBC   , :0044AC0C   , :004582AF   , :00459104   
|:004591F6   , :00459238   , :004594D4   , :0045A302   , :0045A555   
|:0045BD7E   , :0045BDE0   , :0045C5CF   , :0045C654   , :0045C704   
|:0045C792   , :00467F42   , :00467F74   , :00467FA6   , :00467FD8   
|:0046823F   , :0046828F   , :004682C7   , :00468980   , :00468A31   
|:00468AB1   , :00468AF7   , :00468B98   , :00468BE8   , :00468C21   
|:00468DEB   , :00468E3B   , :00468E74   , :00468EA6   , :0046BDE2   
|:0046BFAB   
|
:00476AF4 55                      push ebp
:00476AF5 8BEC                    mov ebp, esp
:00476AF7 83EC20                  sub esp, 00000020
:00476AFA A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476AFF 53                      push ebx
:00476B00 56                      push esi
:00476B01 8B7508                  mov esi, dword ptr [ebp+08]
:00476B04 8B0CC538764B00          mov ecx, dword ptr [8*eax+004B7638]
:00476B0B 57                      push edi
:00476B0C 8B7D0C                  mov edi, dword ptr [ebp+0C]
:00476B0F 8D140E                  lea edx, dword ptr [esi+ecx]
:00476B12 8955E0                  mov dword ptr [ebp-20], edx
:00476B15 8B14C53C764B00          mov edx, dword ptr [8*eax+004B763C]
:00476B1C C1E004                  shl eax, 04
:00476B1F 8D1C17                  lea ebx, dword ptr [edi+edx]
:00476B22 05C0BE4B00              add eax, 004BBEC0
:00476B27 895DE4                  mov dword ptr [ebp-1C], ebx
:00476B2A 8B5D10                  mov ebx, dword ptr [ebp+10]
:00476B2D 03F3                    add esi, ebx
:00476B2F 50                      push eax
:00476B30 8D45E0                  lea eax, dword ptr [ebp-20]
:00476B33 8D4C0EFF                lea ecx, dword ptr [esi+ecx-01]
:00476B37 8B7514                  mov esi, dword ptr [ebp+14]
:00476B3A 894DE8                  mov dword ptr [ebp-18], ecx
:00476B3D 50                      push eax
:00476B3E 8D0C3E                  lea ecx, dword ptr [esi+edi]
:00476B41 8D45F0                  lea eax, dword ptr [ebp-10]
:00476B44 50                      push eax
:00476B45 8D4C11FF                lea ecx, dword ptr [ecx+edx-01]
:00476B49 894DEC                  mov dword ptr [ebp-14], ecx
:00476B4C E891F5FFFF              call 004760E2
:00476B51 83C40C                  add esp, 0000000C
:00476B54 85C0                    test eax, eax
:00476B56 0F8449010000            je 00476CA5
:00476B5C A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476B61 833C8558794B0007        cmp dword ptr [4*eax+004B7958], 00000007
:00476B69 7508                    jne 00476B73
:00476B6B 8B4518                  mov eax, dword ptr [ebp+18]
:00476B6E 894508                  mov dword ptr [ebp+08], eax
:00476B71 EB29                    jmp 00476B9C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476B69(C)
|
:00476B73 8BC6                    mov eax, esi
:00476B75 0FAFC3                  imul eax, ebx
:00476B78 50                      push eax
:00476B79 6A00                    push 00000000

* Reference To: KERNEL32.GlobalAlloc, Ord:0155h
                                  |
:00476B7B FF15F0D44B00            Call dword ptr [004BD4F0]
:00476B81 50                      push eax
:00476B82 89450C                  mov dword ptr [ebp+0C], eax

* Reference To: KERNEL32.GlobalLock, Ord:0160h
                                  |
:00476B85 FF15F4D44B00            Call dword ptr [004BD4F4]
:00476B8B 50                      push eax
:00476B8C 894508                  mov dword ptr [ebp+08], eax
:00476B8F FF7518                  push [ebp+18]
:00476B92 56                      push esi
:00476B93 53                      push ebx
:00476B94 E8FE160000              call 00478297
:00476B99 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476B71(U)
|
:00476B9C FF75F4                  push [ebp-0C]
:00476B9F FF75F0                  push [ebp-10]
:00476BA2 E88DF2FFFF              call 00475E34
:00476BA7 59                      pop ecx
:00476BA8 8B75F8                  mov esi, dword ptr [ebp-08]
:00476BAB 59                      pop ecx
:00476BAC 8B7DFC                  mov edi, dword ptr [ebp-04]
:00476BAF 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00476BB2 2B75F0                  sub esi, dword ptr [ebp-10]
:00476BB5 2B4DE4                  sub ecx, dword ptr [ebp-1C]
:00476BB8 2B7DF4                  sub edi, dword ptr [ebp-0C]
:00476BBB 0FAFCB                  imul ecx, ebx
:00476BBE 034DF0                  add ecx, dword ptr [ebp-10]
:00476BC1 2B4DE0                  sub ecx, dword ptr [ebp-20]
:00476BC4 014D08                  add dword ptr [ebp+08], ecx
:00476BC7 8B0DF0BD4B00            mov ecx, dword ptr [004BBDF0]
:00476BCD C1E102                  shl ecx, 02
:00476BD0 46                      inc esi
:00476BD1 47                      inc edi
:00476BD2 8B9180944B00            mov edx, dword ptr [ecx+004B9480]
:00476BD8 83EA00                  sub edx, 00000000
:00476BDB 747C                    je 00476C59
:00476BDD 4A                      dec edx
:00476BDE 745F                    je 00476C3F
:00476BE0 4A                      dec edx
:00476BE1 7442                    je 00476C25
:00476BE3 4A                      dec edx
:00476BE4 7425                    je 00476C0B
:00476BE6 4A                      dec edx
:00476BE7 7408                    je 00476BF1
:00476BE9 4A                      dec edx
:00476BEA 746D                    je 00476C59
:00476BEC E983000000              jmp 00476C74

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476BE7(C)
|
:00476BF1 FFB158794B00            push dword ptr [ecx+004B7958]
:00476BF7 50                      push eax
:00476BF8 FF7508                  push [ebp+08]
:00476BFB 53                      push ebx
:00476BFC FFB110964B00            push dword ptr [ecx+004B9610]
:00476C02 57                      push edi
:00476C03 56                      push esi
:00476C04 E8C9140000              call 004780D2
:00476C09 EB66                    jmp 00476C71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476BE4(C)
|
:00476C0B FFB158794B00            push dword ptr [ecx+004B7958]
:00476C11 50                      push eax
:00476C12 FF7508                  push [ebp+08]
:00476C15 53                      push ebx
:00476C16 FFB110964B00            push dword ptr [ecx+004B9610]
:00476C1C 57                      push edi
:00476C1D 56                      push esi
:00476C1E E826140000              call 00478049
:00476C23 EB4C                    jmp 00476C71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476BE1(C)
|
:00476C25 FFB158794B00            push dword ptr [ecx+004B7958]
:00476C2B 50                      push eax
:00476C2C FF7508                  push [ebp+08]
:00476C2F 53                      push ebx
:00476C30 FFB110964B00            push dword ptr [ecx+004B9610]
:00476C36 57                      push edi
:00476C37 56                      push esi
:00476C38 E8CC130000              call 00478009
:00476C3D EB32                    jmp 00476C71

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476BDE(C)
|
:00476C3F FFB158794B00            push dword ptr [ecx+004B7958]
:00476C45 50                      push eax
:00476C46 FF7508                  push [ebp+08]
:00476C49 53                      push ebx
:00476C4A FFB110964B00            push dword ptr [ecx+004B9610]
:00476C50 57                      push edi
:00476C51 56                      push esi
:00476C52 E832140000              call 00478089
:00476C57 EB18                    jmp 00476C71

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476BDB(C), :00476BEA(C)
|
:00476C59 FFB158794B00            push dword ptr [ecx+004B7958]
:00476C5F 50                      push eax
:00476C60 FF7508                  push [ebp+08]
:00476C63 53                      push ebx
:00476C64 FFB110964B00            push dword ptr [ecx+004B9610]
:00476C6A 57                      push edi
:00476C6B 56                      push esi
:00476C6C E86A130000              call 00477FDB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476C09(U), :00476C23(U), :00476C3D(U), :00476C57(U)
|
:00476C71 83C41C                  add esp, 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476BEC(U)
|
:00476C74 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476C79 833C8558794B0007        cmp dword ptr [4*eax+004B7958], 00000007
:00476C81 7412                    je 00476C95
:00476C83 FF750C                  push [ebp+0C]

* Reference To: KERNEL32.GlobalUnlock, Ord:0166h
                                  |
:00476C86 FF1504D54B00            Call dword ptr [004BD504]
:00476C8C FF750C                  push [ebp+0C]

* Reference To: KERNEL32.GlobalFree, Ord:015Ch
                                  |
:00476C8F FF15FCD44B00            Call dword ptr [004BD4FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476C81(C)
|
:00476C95 57                      push edi
:00476C96 56                      push esi
:00476C97 FF75F4                  push [ebp-0C]
:00476C9A FF75F0                  push [ebp-10]
:00476C9D E80DE7FFFF              call 004753AF
:00476CA2 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476B56(C)
|
:00476CA5 5F                      pop edi
:00476CA6 5E                      pop esi
:00476CA7 5B                      pop ebx
:00476CA8 C9                      leave
:00476CA9 C3                      ret



* Referenced by a CALL at Addresses:
|:00410198   , :0042FF10   , :00430C1F   , :0044AC7C   , :0044E2A6   
|:004598F0   , :0046800F   , :00468041   , :00468073   , :004680A5   
|:00468DBE   
|
:00476CAA 55                      push ebp
:00476CAB 8BEC                    mov ebp, esp
:00476CAD 83EC20                  sub esp, 00000020
:00476CB0 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476CB5 53                      push ebx
:00476CB6 56                      push esi
:00476CB7 8B7508                  mov esi, dword ptr [ebp+08]
:00476CBA 8B0CC538764B00          mov ecx, dword ptr [8*eax+004B7638]
:00476CC1 57                      push edi
:00476CC2 8B7D0C                  mov edi, dword ptr [ebp+0C]
:00476CC5 8D140E                  lea edx, dword ptr [esi+ecx]
:00476CC8 8955E0                  mov dword ptr [ebp-20], edx
:00476CCB 8B14C53C764B00          mov edx, dword ptr [8*eax+004B763C]
:00476CD2 C1E004                  shl eax, 04
:00476CD5 8D1C17                  lea ebx, dword ptr [edi+edx]
:00476CD8 05807C4B00              add eax, 004B7C80
:00476CDD 895DE4                  mov dword ptr [ebp-1C], ebx
:00476CE0 8B5D10                  mov ebx, dword ptr [ebp+10]
:00476CE3 03F3                    add esi, ebx
:00476CE5 50                      push eax
:00476CE6 8D45E0                  lea eax, dword ptr [ebp-20]
:00476CE9 8D4C0EFF                lea ecx, dword ptr [esi+ecx-01]
:00476CED 50                      push eax
:00476CEE 894DE8                  mov dword ptr [ebp-18], ecx
:00476CF1 8B4D14                  mov ecx, dword ptr [ebp+14]
:00476CF4 03CF                    add ecx, edi
:00476CF6 8D45F0                  lea eax, dword ptr [ebp-10]
:00476CF9 50                      push eax
:00476CFA 8D4C11FF                lea ecx, dword ptr [ecx+edx-01]
:00476CFE 894DEC                  mov dword ptr [ebp-14], ecx
:00476D01 E8DCF3FFFF              call 004760E2
:00476D06 83C40C                  add esp, 0000000C
:00476D09 85C0                    test eax, eax
:00476D0B 0F84C5000000            je 00476DD6
:00476D11 FF75F4                  push [ebp-0C]
:00476D14 FF75F0                  push [ebp-10]
:00476D17 E818F1FFFF              call 00475E34
:00476D1C 8B75F8                  mov esi, dword ptr [ebp-08]
:00476D1F 8B7DFC                  mov edi, dword ptr [ebp-04]
:00476D22 2B75F0                  sub esi, dword ptr [ebp-10]
:00476D25 59                      pop ecx
:00476D26 59                      pop ecx
:00476D27 89450C                  mov dword ptr [ebp+0C], eax
:00476D2A 8B45F4                  mov eax, dword ptr [ebp-0C]
:00476D2D 8B0DF0BD4B00            mov ecx, dword ptr [004BBDF0]
:00476D33 2BF8                    sub edi, eax
:00476D35 46                      inc esi
:00476D36 C1E102                  shl ecx, 02
:00476D39 47                      inc edi
:00476D3A 83B958794B0003          cmp dword ptr [ecx+004B7958], 00000003
:00476D41 7F6F                    jg 00476DB2
:00476D43 8B4514                  mov eax, dword ptr [ebp+14]
:00476D46 0FAFC3                  imul eax, ebx
:00476D49 40                      inc eax
:00476D4A 50                      push eax
:00476D4B 6A00                    push 00000000

* Reference To: KERNEL32.GlobalAlloc, Ord:0155h
                                  |
:00476D4D FF15F0D44B00            Call dword ptr [004BD4F0]
:00476D53 50                      push eax
:00476D54 894508                  mov dword ptr [ebp+08], eax

* Reference To: KERNEL32.GlobalLock, Ord:0160h
                                  |
:00476D57 FF15F4D44B00            Call dword ptr [004BD4F4]
:00476D5D 8B4DF4                  mov ecx, dword ptr [ebp-0C]
:00476D60 894510                  mov dword ptr [ebp+10], eax
:00476D63 2B4DE4                  sub ecx, dword ptr [ebp-1C]
:00476D66 0FAFCB                  imul ecx, ebx
:00476D69 03C8                    add ecx, eax
:00476D6B A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476D70 034DF0                  add ecx, dword ptr [ebp-10]
:00476D73 2B4DE0                  sub ecx, dword ptr [ebp-20]
:00476D76 51                      push ecx
:00476D77 FF750C                  push [ebp+0C]
:00476D7A 53                      push ebx
:00476D7B FF348510964B00          push dword ptr [4*eax+004B9610]
:00476D82 57                      push edi
:00476D83 56                      push esi
:00476D84 E89D130000              call 00478126
:00476D89 83C418                  add esp, 00000018
:00476D8C FF7518                  push [ebp+18]
:00476D8F FF7510                  push [ebp+10]
:00476D92 FF7514                  push [ebp+14]
:00476D95 53                      push ebx
:00476D96 E8A3140000              call 0047823E
:00476D9B 83C410                  add esp, 00000010
:00476D9E FF7508                  push [ebp+08]

* Reference To: KERNEL32.GlobalUnlock, Ord:0166h
                                  |
:00476DA1 FF1504D54B00            Call dword ptr [004BD504]
:00476DA7 FF7508                  push [ebp+08]

* Reference To: KERNEL32.GlobalFree, Ord:015Ch
                                  |
:00476DAA FF15FCD44B00            Call dword ptr [004BD4FC]
:00476DB0 EB24                    jmp 00476DD6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476D41(C)
|
:00476DB2 2B45E4                  sub eax, dword ptr [ebp-1C]
:00476DB5 0FAFC3                  imul eax, ebx
:00476DB8 0345F0                  add eax, dword ptr [ebp-10]
:00476DBB 034518                  add eax, dword ptr [ebp+18]
:00476DBE 2B45E0                  sub eax, dword ptr [ebp-20]
:00476DC1 50                      push eax
:00476DC2 FF750C                  push [ebp+0C]
:00476DC5 53                      push ebx
:00476DC6 FFB110964B00            push dword ptr [ecx+004B9610]
:00476DCC 57                      push edi
:00476DCD 56                      push esi
:00476DCE E853130000              call 00478126
:00476DD3 83C418                  add esp, 00000018

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476D0B(C), :00476DB0(U)
|
:00476DD6 5F                      pop edi
:00476DD7 5E                      pop esi
:00476DD8 5B                      pop ebx
:00476DD9 C9                      leave
:00476DDA C3                      ret



* Referenced by a CALL at Addresses:
|:0040684F   , :0040699A   , :004069F2   , :00406A3E   , :00479372   
|
:00476DDB 55                      push ebp
:00476DDC 8BEC                    mov ebp, esp
:00476DDE 83EC28                  sub esp, 00000028
:00476DE1 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476DE6 53                      push ebx
:00476DE7 56                      push esi
:00476DE8 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:00476DEB 8B0CC538764B00          mov ecx, dword ptr [8*eax+004B7638]
:00476DF2 57                      push edi
:00476DF3 8B7D08                  mov edi, dword ptr [ebp+08]
:00476DF6 8D140F                  lea edx, dword ptr [edi+ecx]
:00476DF9 8955D8                  mov dword ptr [ebp-28], edx
:00476DFC 8B14C53C764B00          mov edx, dword ptr [8*eax+004B763C]
:00476E03 C1E004                  shl eax, 04
:00476E06 8D3413                  lea esi, dword ptr [ebx+edx]
:00476E09 05C0BE4B00              add eax, 004BBEC0
:00476E0E 8975DC                  mov dword ptr [ebp-24], esi
:00476E11 8B7510                  mov esi, dword ptr [ebp+10]
:00476E14 03FE                    add edi, esi
:00476E16 50                      push eax
:00476E17 8D45D8                  lea eax, dword ptr [ebp-28]
:00476E1A 8D4C0FFF                lea ecx, dword ptr [edi+ecx-01]
:00476E1E 50                      push eax
:00476E1F 894DE0                  mov dword ptr [ebp-20], ecx
:00476E22 8B4D14                  mov ecx, dword ptr [ebp+14]
:00476E25 03CB                    add ecx, ebx
:00476E27 8D45E8                  lea eax, dword ptr [ebp-18]
:00476E2A 50                      push eax
:00476E2B 8D4C11FF                lea ecx, dword ptr [ecx+edx-01]
:00476E2F 894DE4                  mov dword ptr [ebp-1C], ecx
:00476E32 E8ABF2FFFF              call 004760E2
:00476E37 83C40C                  add esp, 0000000C
:00476E3A 85C0                    test eax, eax
:00476E3C 0F84FA010000            je 0047703C
:00476E42 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476E47 C1E002                  shl eax, 02
:00476E4A 8B8860664B00            mov ecx, dword ptr [eax+004B6660]
:00476E50 85C9                    test ecx, ecx
:00476E52 7C41                    jl 00476E95
:00476E54 83F903                  cmp ecx, 00000003
:00476E57 7E2A                    jle 00476E83
:00476E59 83F904                  cmp ecx, 00000004
:00476E5C 7416                    je 00476E74
:00476E5E 83F905                  cmp ecx, 00000005
:00476E61 7532                    jne 00476E95
:00476E63 8B88A8744B00            mov ecx, dword ptr [eax+004B74A8]
:00476E69 8B8088714B00            mov eax, dword ptr [eax+004B7188]
:00476E6F 894D10                  mov dword ptr [ebp+10], ecx
:00476E72 EB1E                    jmp 00476E92

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476E5C(C)
|
:00476E74 8B8088714B00            mov eax, dword ptr [eax+004B7188]
:00476E7A 83650C00                and dword ptr [ebp+0C], 00000000
:00476E7E 894510                  mov dword ptr [ebp+10], eax
:00476E81 EB12                    jmp 00476E95

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476E57(C)
|
:00476E83 8B8888714B00            mov ecx, dword ptr [eax+004B7188]
:00476E89 8B80A8744B00            mov eax, dword ptr [eax+004B74A8]
:00476E8F 894D10                  mov dword ptr [ebp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476E72(U)
|
:00476E92 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476E52(C), :00476E61(C), :00476E81(U)
|
:00476E95 FF75EC                  push [ebp-14]
:00476E98 FF75E8                  push [ebp-18]
:00476E9B E894EFFFFF              call 00475E34
:00476EA0 8B55F4                  mov edx, dword ptr [ebp-0C]
:00476EA3 8B7DF0                  mov edi, dword ptr [ebp-10]
:00476EA6 59                      pop ecx
:00476EA7 894508                  mov dword ptr [ebp+08], eax
:00476EAA 8B45EC                  mov eax, dword ptr [ebp-14]
:00476EAD 59                      pop ecx
:00476EAE 8B4DE8                  mov ecx, dword ptr [ebp-18]
:00476EB1 8BDA                    mov ebx, edx
:00476EB3 2BF9                    sub edi, ecx
:00476EB5 2BD8                    sub ebx, eax
:00476EB7 47                      inc edi
:00476EB8 43                      inc ebx
:00476EB9 3B45DC                  cmp eax, dword ptr [ebp-24]
:00476EBC 7539                    jne 00476EF7
:00476EBE 3B4DD8                  cmp ecx, dword ptr [ebp-28]
:00476EC1 7534                    jne 00476EF7
:00476EC3 3B55E4                  cmp edx, dword ptr [ebp-1C]
:00476EC6 752F                    jne 00476EF7
:00476EC8 8B45F0                  mov eax, dword ptr [ebp-10]
:00476ECB 3B45E0                  cmp eax, dword ptr [ebp-20]
:00476ECE 7527                    jne 00476EF7
:00476ED0 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476ED5 C1E002                  shl eax, 02
:00476ED8 8B8860664B00            mov ecx, dword ptr [eax+004B6660]
:00476EDE 83E900                  sub ecx, 00000000
:00476EE1 0F8475010000            je 0047705C
:00476EE7 83E904                  sub ecx, 00000004
:00476EEA 0F8451010000            je 00477041
:00476EF0 49                      dec ecx
:00476EF1 0F8465010000            je 0047705C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476EBC(C), :00476EC1(C), :00476EC6(C), :00476ECE(C)
|
:00476EF7 8D4607                  lea eax, dword ptr [esi+07]
:00476EFA 0FAF4514                imul eax, dword ptr [ebp+14]
:00476EFE 50                      push eax
:00476EFF 6A00                    push 00000000

* Reference To: KERNEL32.GlobalAlloc, Ord:0155h
                                  |
:00476F01 FF15F0D44B00            Call dword ptr [004BD4F0]
:00476F07 50                      push eax
:00476F08 8945FC                  mov dword ptr [ebp-04], eax

* Reference To: KERNEL32.GlobalLock, Ord:0160h
                                  |
:00476F0B FF15F4D44B00            Call dword ptr [004BD4F4]
:00476F11 FF750C                  push [ebp+0C]
:00476F14 8945F8                  mov dword ptr [ebp-08], eax
:00476F17 FF7510                  push [ebp+10]
:00476F1A 50                      push eax
:00476F1B FF7518                  push [ebp+18]
:00476F1E FF7514                  push [ebp+14]
:00476F21 56                      push esi
:00476F22 E853010000              call 0047707A
:00476F27 8B45EC                  mov eax, dword ptr [ebp-14]
:00476F2A 8B55F8                  mov edx, dword ptr [ebp-08]
:00476F2D 2B45DC                  sub eax, dword ptr [ebp-24]
:00476F30 83C418                  add esp, 00000018
:00476F33 0FAFC6                  imul eax, esi
:00476F36 0345E8                  add eax, dword ptr [ebp-18]
:00476F39 2B45D8                  sub eax, dword ptr [ebp-28]
:00476F3C 03D0                    add edx, eax
:00476F3E A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00476F43 C1E002                  shl eax, 02
:00476F46 8B8860664B00            mov ecx, dword ptr [eax+004B6660]
:00476F4C 83E900                  sub ecx, 00000000
:00476F4F 0F84AA000000            je 00476FFF
:00476F55 49                      dec ecx
:00476F56 0F8489000000            je 00476FE5
:00476F5C 49                      dec ecx
:00476F5D 746C                    je 00476FCB
:00476F5F 49                      dec ecx
:00476F60 744F                    je 00476FB1
:00476F62 49                      dec ecx
:00476F63 740C                    je 00476F71
:00476F65 49                      dec ecx
:00476F66 0F8493000000            je 00476FFF
:00476F6C E9A9000000              jmp 0047701A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476F63(C)
|
:00476F71 8B8010964B00            mov eax, dword ptr [eax+004B9610]
:00476F77 2BF7                    sub esi, edi
:00476F79 2BC7                    sub eax, edi
:00476F7B 89750C                  mov dword ptr [ebp+0C], esi
:00476F7E 85DB                    test ebx, ebx
:00476F80 0F8E94000000            jle 0047701A
:00476F86 895D14                  mov dword ptr [ebp+14], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476FAD(C)
|
:00476F89 85FF                    test edi, edi
:00476F8B 7E17                    jle 00476FA4
:00476F8D 897D18                  mov dword ptr [ebp+18], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476FA2(C)
|
:00476F90 8A0A                    mov cl, byte ptr [edx]
:00476F92 84C9                    test cl, cl
:00476F94 7405                    je 00476F9B
:00476F96 8B7508                  mov esi, dword ptr [ebp+08]
:00476F99 880E                    mov byte ptr [esi], cl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476F94(C)
|
:00476F9B FF4508                  inc [ebp+08]
:00476F9E 42                      inc edx
:00476F9F FF4D18                  dec [ebp+18]
:00476FA2 75EC                    jne 00476F90

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476F8B(C)
|
:00476FA4 014508                  add dword ptr [ebp+08], eax
:00476FA7 03550C                  add edx, dword ptr [ebp+0C]
:00476FAA FF4D14                  dec [ebp+14]
:00476FAD 75DA                    jne 00476F89
:00476FAF EB69                    jmp 0047701A

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476F60(C)
|
:00476FB1 FFB058794B00            push dword ptr [eax+004B7958]
:00476FB7 FF7508                  push [ebp+08]
:00476FBA 52                      push edx
:00476FBB 56                      push esi
:00476FBC FFB010964B00            push dword ptr [eax+004B9610]
:00476FC2 53                      push ebx
:00476FC3 57                      push edi
:00476FC4 E880100000              call 00478049
:00476FC9 EB4C                    jmp 00477017

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476F5D(C)
|
:00476FCB FFB058794B00            push dword ptr [eax+004B7958]
:00476FD1 FF7508                  push [ebp+08]
:00476FD4 52                      push edx
:00476FD5 56                      push esi
:00476FD6 FFB010964B00            push dword ptr [eax+004B9610]
:00476FDC 53                      push ebx
:00476FDD 57                      push edi
:00476FDE E826100000              call 00478009
:00476FE3 EB32                    jmp 00477017

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476F56(C)
|
:00476FE5 FFB058794B00            push dword ptr [eax+004B7958]
:00476FEB FF7508                  push [ebp+08]
:00476FEE 52                      push edx
:00476FEF 56                      push esi
:00476FF0 FFB010964B00            push dword ptr [eax+004B9610]
:00476FF6 53                      push ebx
:00476FF7 57                      push edi
:00476FF8 E88C100000              call 00478089
:00476FFD EB18                    jmp 00477017

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476F4F(C), :00476F66(C)
|
:00476FFF FFB058794B00            push dword ptr [eax+004B7958]
:00477005 FF7508                  push [ebp+08]
:00477008 52                      push edx
:00477009 56                      push esi
:0047700A FFB010964B00            push dword ptr [eax+004B9610]
:00477010 53                      push ebx
:00477011 57                      push edi
:00477012 E8C40F0000              call 00477FDB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476FC9(U), :00476FE3(U), :00476FFD(U)
|
:00477017 83C41C                  add esp, 0000001C

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476F6C(U), :00476F80(C), :00476FAF(U)
|
:0047701A FF75FC                  push [ebp-04]

* Reference To: KERNEL32.GlobalUnlock, Ord:0166h
                                  |
:0047701D FF1504D54B00            Call dword ptr [004BD504]
:00477023 FF75FC                  push [ebp-04]

* Reference To: KERNEL32.GlobalFree, Ord:015Ch
                                  |
:00477026 FF15FCD44B00            Call dword ptr [004BD4FC]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477078(U)
|
:0047702C 53                      push ebx
:0047702D 57                      push edi
:0047702E FF75EC                  push [ebp-14]
:00477031 FF75E8                  push [ebp-18]
:00477034 E876E3FFFF              call 004753AF
:00477039 83C410                  add esp, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476E3C(C)
|
:0047703C 5F                      pop edi
:0047703D 5E                      pop esi
:0047703E 5B                      pop ebx
:0047703F C9                      leave
:00477040 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00476EEA(C)
|
:00477041 FF7508                  push [ebp+08]
:00477044 FF7518                  push [ebp+18]
:00477047 FF750C                  push [ebp+0C]
:0047704A FF7510                  push [ebp+10]
:0047704D FFB010964B00            push dword ptr [eax+004B9610]
:00477053 53                      push ebx
:00477054 57                      push edi
:00477055 E873110000              call 004781CD
:0047705A EB19                    jmp 00477075

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00476EE1(C), :00476EF1(C)
|
:0047705C FF7508                  push [ebp+08]
:0047705F FF7518                  push [ebp+18]
:00477062 FF750C                  push [ebp+0C]
:00477065 FF7510                  push [ebp+10]
:00477068 FFB010964B00            push dword ptr [eax+004B9610]
:0047706E 53                      push ebx
:0047706F 57                      push edi
:00477070 E8DF100000              call 00478154

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047705A(U)
|
:00477075 83C41C                  add esp, 0000001C
:00477078 EBB2                    jmp 0047702C

* Referenced by a CALL at Address:
|:00476F22   
|
:0047707A 55                      push ebp
:0047707B 8BEC                    mov ebp, esp
:0047707D 51                      push ecx
:0047707E 8B4508                  mov eax, dword ptr [ebp+08]
:00477081 56                      push esi
:00477082 8BF0                    mov esi, eax
:00477084 83E007                  and eax, 00000007
:00477087 8945FC                  mov dword ptr [ebp-04], eax
:0047708A 8B450C                  mov eax, dword ptr [ebp+0C]
:0047708D C1FE03                  sar esi, 03
:00477090 85C0                    test eax, eax
:00477092 7E5A                    jle 004770EE
:00477094 8B5514                  mov edx, dword ptr [ebp+14]
:00477097 57                      push edi
:00477098 8B7D10                  mov edi, dword ptr [ebp+10]
:0047709B 53                      push ebx
:0047709C 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004770EA(C)
|
:0047709F 85F6                    test esi, esi
:004770A1 7423                    je 004770C6
:004770A3 8D06                    lea eax, dword ptr [esi]
:004770A5 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004770C4(C)
|
:004770A8 8A0F                    mov cl, byte ptr [edi]

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004770AA 6A08                    push 00000008
:004770AC 47                      inc edi
:004770AD 5B                      pop ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004770BF(C)
|
:004770AE 8A4518                  mov al, byte ptr [ebp+18]
:004770B1 F6C180                  test cl, 80
:004770B4 7503                    jne 004770B9
:004770B6 8A451C                  mov al, byte ptr [ebp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004770B4(C)
|
:004770B9 8802                    mov byte ptr [edx], al
:004770BB 42                      inc edx
:004770BC D0E1                    shl cl, 1
:004770BE 4B                      dec ebx
:004770BF 75ED                    jne 004770AE
:004770C1 FF4D08                  dec [ebp+08]
:004770C4 75E2                    jne 004770A8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004770A1(C)
|
:004770C6 8B45FC                  mov eax, dword ptr [ebp-04]
:004770C9 85C0                    test eax, eax
:004770CB 741A                    je 004770E7
:004770CD 8A0F                    mov cl, byte ptr [edi]
:004770CF 47                      inc edi
:004770D0 85C0                    test eax, eax
:004770D2 7E13                    jle 004770E7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004770E5(C)
|
:004770D4 8A5D18                  mov bl, byte ptr [ebp+18]
:004770D7 F6C180                  test cl, 80
:004770DA 7503                    jne 004770DF
:004770DC 8A5D1C                  mov bl, byte ptr [ebp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004770DA(C)
|
:004770DF 881A                    mov byte ptr [edx], bl
:004770E1 42                      inc edx
:004770E2 D0E1                    shl cl, 1
:004770E4 48                      dec eax
:004770E5 75ED                    jne 004770D4

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004770CB(C), :004770D2(C)
|
:004770E7 FF4D0C                  dec [ebp+0C]
:004770EA 75B3                    jne 0047709F
:004770EC 5B                      pop ebx
:004770ED 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477092(C)
|
:004770EE 5E                      pop esi
:004770EF C9                      leave
:004770F0 C3                      ret



* Referenced by a CALL at Addresses:
|:0040690D   , :004793AC   
|
:004770F1 FF742408                push [esp+08]
:004770F5 FF742408                push [esp+08]
:004770F9 E803000000              call 00477101
:004770FE 59                      pop ecx
:004770FF 59                      pop ecx
:00477100 C3                      ret



* Referenced by a CALL at Address:
|:004770F9   
|
:00477101 55                      push ebp
:00477102 8BEC                    mov ebp, esp
:00477104 83EC40                  sub esp, 00000040
:00477107 53                      push ebx
:00477108 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0047710B 56                      push esi
:0047710C 57                      push edi
:0047710D 33F6                    xor esi, esi
:0047710F 6A20                    push 00000020
:00477111 56                      push esi
:00477112 53                      push ebx
:00477113 E8B889FFFF              call 0046FAD0
:00477118 83C40C                  add esp, 0000000C
:0047711B 8B4508                  mov eax, dword ptr [ebp+08]
:0047711E 8BC8                    mov ecx, eax
:00477120 88450D                  mov byte ptr [ebp+0D], al
:00477123 6A42                    push 00000042
:00477125 6A10                    push 00000010
:00477127 5F                      pop edi
:00477128 57                      push edi
:00477129 57                      push edi
:0047712A 56                      push esi
:0047712B 56                      push esi
:0047712C FF3580694B00            push dword ptr [004B6980]
:00477132 C1F908                  sar ecx, 08
:00477135 884D0C                  mov byte ptr [ebp+0C], cl

* Reference To: GDI32.PatBlt, Ord:0122h
                                  |
:00477138 FF154CD44B00            Call dword ptr [004BD44C]
:0047713E 6A01                    push 00000001
:00477140 FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.SetBkMode, Ord:0151h
                                  |
:00477146 FF1588D44B00            Call dword ptr [004BD488]
:0047714C 68FFFFFF00              push 00FFFFFF
:00477151 FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.SetTextColor, Ord:0172h
                                  |
:00477157 FF1584D44B00            Call dword ptr [004BD484]
:0047715D 8D450C                  lea eax, dword ptr [ebp+0C]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00477160 6A02                    push 00000002
:00477162 50                      push eax
:00477163 56                      push esi
:00477164 56                      push esi
:00477165 FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.TextOutA, Ord:0183h
                                  |
:0047716B FF1594D44B00            Call dword ptr [004BD494]
:00477171 56                      push esi
:00477172 8D45C0                  lea eax, dword ptr [ebp-40]
:00477175 6820664B00              push 004B6620
:0047717A 50                      push eax
:0047717B 57                      push edi
:0047717C 56                      push esi
:0047717D FF35A08E4B00            push dword ptr [004B8EA0]
:00477183 FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.GetDIBits, Ord:00C6h
                                  |
:00477189 FF1590D44B00            Call dword ptr [004BD490]
:0047718F 8D45FC                  lea eax, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047719E(C)
|
:00477192 668B08                  mov cx, word ptr [eax]
:00477195 83E804                  sub eax, 00000004
:00477198 66890B                  mov word ptr [ebx], cx
:0047719B 43                      inc ebx
:0047719C 43                      inc ebx
:0047719D 4F                      dec edi
:0047719E 75F2                    jne 00477192
:004771A0 5F                      pop edi
:004771A1 5E                      pop esi
:004771A2 5B                      pop ebx
:004771A3 C9                      leave
:004771A4 C3                      ret



* Referenced by a CALL at Addresses:
|:004068F1   , :004793D5   
|
:004771A5 55                      push ebp
:004771A6 8BEC                    mov ebp, esp
:004771A8 83EC40                  sub esp, 00000040
:004771AB 53                      push ebx
:004771AC 56                      push esi
:004771AD 57                      push edi
:004771AE 6A10                    push 00000010
:004771B0 5F                      pop edi
:004771B1 33F6                    xor esi, esi
:004771B3 57                      push edi
:004771B4 56                      push esi
:004771B5 FF750C                  push [ebp+0C]
:004771B8 E81389FFFF              call 0046FAD0
:004771BD 83C40C                  add esp, 0000000C
:004771C0 837D0820                cmp dword ptr [ebp+08], 00000020
:004771C4 0F84A3000000            je 0047726D
:004771CA 6A42                    push 00000042
:004771CC 57                      push edi
:004771CD 57                      push edi
:004771CE 56                      push esi
:004771CF 56                      push esi
:004771D0 FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.PatBlt, Ord:0122h
                                  |
:004771D6 FF154CD44B00            Call dword ptr [004BD44C]
:004771DC 6A01                    push 00000001
:004771DE FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.SetBkMode, Ord:0151h
                                  |
:004771E4 FF1588D44B00            Call dword ptr [004BD488]
:004771EA 68FFFFFF00              push 00FFFFFF
:004771EF FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.SetTextColor, Ord:0172h
                                  |
:004771F5 FF1584D44B00            Call dword ptr [004BD484]
:004771FB 0FBE4508                movsx eax, byte ptr [ebp+08]
:004771FF 6A01                    push 00000001
:00477201 50                      push eax
:00477202 56                      push esi
:00477203 56                      push esi
:00477204 FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.TextOutA, Ord:0183h
                                  |
:0047720A FF1594D44B00            Call dword ptr [004BD494]
:00477210 56                      push esi
:00477211 8D45C0                  lea eax, dword ptr [ebp-40]
:00477214 6820664B00              push 004B6620
:00477219 50                      push eax
:0047721A 57                      push edi
:0047721B 56                      push esi
:0047721C FF35A08E4B00            push dword ptr [004B8EA0]
:00477222 FF3580694B00            push dword ptr [004B6980]

* Reference To: GDI32.GetDIBits, Ord:00C6h
                                  |
:00477228 FF1590D44B00            Call dword ptr [004BD490]
:0047722E A188BE4B00              mov eax, dword ptr [004BBE88]
:00477233 8B0D90BE4B00            mov ecx, dword ptr [004BBE90]
:00477239 3BC1                    cmp eax, ecx
:0047723B 7C02                    jl 0047723F
:0047723D 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047723B(C)
|
:0047723F 2B0580BE4B00            sub eax, dword ptr [004BBE80]
:00477245 03C7                    add eax, edi
:00477247 8BD8                    mov ebx, eax
:00477249 7902                    jns 0047724D
:0047724B 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477249(C)
|
:0047724D 8BC3                    mov eax, ebx
:0047724F 99                      cdq
:00477250 2BC2                    sub eax, edx
:00477252 D1F8                    sar eax, 1
:00477254 03450C                  add eax, dword ptr [ebp+0C]
:00477257 3BDF                    cmp ebx, edi
:00477259 7D12                    jge 0047726D
:0047725B 8BCF                    mov ecx, edi
:0047725D 8D75FC                  lea esi, dword ptr [ebp-04]
:00477260 2BCB                    sub ecx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047726B(C)
|
:00477262 8A16                    mov dl, byte ptr [esi]
:00477264 83EE04                  sub esi, 00000004
:00477267 8810                    mov byte ptr [eax], dl
:00477269 40                      inc eax
:0047726A 49                      dec ecx
:0047726B 75F5                    jne 00477262

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004771C4(C), :00477259(C)
|
:0047726D 5F                      pop edi
:0047726E 5E                      pop esi
:0047726F 5B                      pop ebx
:00477270 C9                      leave
:00477271 C3                      ret



* Referenced by a CALL at Addresses:
|:004100B3   , :004100CB   , :00410118   
|
:00477272 55                      push ebp
:00477273 8BEC                    mov ebp, esp
:00477275 51                      push ecx
:00477276 51                      push ecx
:00477277 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:0047727C 53                      push ebx
:0047727D C1E002                  shl eax, 02
:00477280 56                      push esi
:00477281 8B7510                  mov esi, dword ptr [ebp+10]
:00477284 83B858794B0007          cmp dword ptr [eax+004B7958], 00000007
:0047728B 57                      push edi
:0047728C 8B7D08                  mov edi, dword ptr [ebp+08]
:0047728F 8945FC                  mov dword ptr [ebp-04], eax
:00477292 7403                    je 00477297
:00477294 83C710                  add edi, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477292(C)
|
:00477297 83FF0A                  cmp edi, 0000000A
:0047729A 7D12                    jge 004772AE
:0047729C 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:0047729F 2BF7                    sub esi, edi

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:004772A1 6A0A                    push 0000000A
:004772A3 83C60A                  add esi, 0000000A
:004772A6 8D4C39F6                lea ecx, dword ptr [ecx+edi-0A]
:004772AA 5F                      pop edi
:004772AB 894D0C                  mov dword ptr [ebp+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047729A(C)
|
:004772AE 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004772B1 8D1439                  lea edx, dword ptr [ecx+edi]
:004772B4 B9F6000000              mov ecx, 000000F6
:004772B9 3BD1                    cmp edx, ecx
:004772BB 7C05                    jl 004772C2
:004772BD 2BCF                    sub ecx, edi
:004772BF 894D0C                  mov dword ptr [ebp+0C], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004772BB(C)
|
:004772C2 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004772C5 897D08                  mov dword ptr [ebp+08], edi
:004772C8 03CF                    add ecx, edi
:004772CA 3BF9                    cmp edi, ecx
:004772CC 894DF8                  mov dword ptr [ebp-08], ecx
:004772CF 7D69                    jge 0047733A
:004772D1 8D0CBDB18E4B00          lea ecx, dword ptr [4*edi+004B8EB1]
:004772D8 8D1CBDEA854B00          lea ebx, dword ptr [4*edi+004B85EA]
:004772DF 894D10                  mov dword ptr [ebp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477338(C)
|
:004772E2 8A16                    mov dl, byte ptr [esi]
:004772E4 8B88C8924B00            mov ecx, dword ptr [eax+004B92C8]
:004772EA 8B4508                  mov eax, dword ptr [ebp+08]
:004772ED D2E2                    shl dl, cl
:004772EF C1E002                  shl eax, 02
:004772F2 46                      inc esi
:004772F3 8890E8854B00            mov byte ptr [eax+004B85E8], dl
:004772F9 8890B28E4B00            mov byte ptr [eax+004B8EB2], dl
:004772FF 8A16                    mov dl, byte ptr [esi]
:00477301 D2E2                    shl dl, cl
:00477303 8B4DFC                  mov ecx, dword ptr [ebp-04]
:00477306 46                      inc esi
:00477307 8B89C8924B00            mov ecx, dword ptr [ecx+004B92C8]
:0047730D 8813                    mov byte ptr [ebx], dl
:0047730F 8890B08E4B00            mov byte ptr [eax+004B8EB0], dl
:00477315 8A16                    mov dl, byte ptr [esi]
:00477317 83C304                  add ebx, 00000004
:0047731A D2E2                    shl dl, cl
:0047731C 46                      inc esi
:0047731D FF4508                  inc [ebp+08]
:00477320 8890E9854B00            mov byte ptr [eax+004B85E9], dl
:00477326 8B4510                  mov eax, dword ptr [ebp+10]
:00477329 83451004                add dword ptr [ebp+10], 00000004
:0047732D 8810                    mov byte ptr [eax], dl
:0047732F 8B4508                  mov eax, dword ptr [ebp+08]
:00477332 3B45F8                  cmp eax, dword ptr [ebp-08]
:00477335 8B45FC                  mov eax, dword ptr [ebp-04]
:00477338 7CA8                    jl 004772E2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004772CF(C)
|
:0047733A 33F6                    xor esi, esi
:0047733C 3935506E4B00            cmp dword ptr [004B6E50], esi
:00477342 7435                    je 00477379
:00477344 33DB                    xor ebx, ebx
:00477346 3935C8B04B00            cmp dword ptr [004BB0C8], esi
:0047734C 7E50                    jle 0047739E
:0047734E C74508E8894B00          mov [ebp+08], 004B89E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477375(C)
|
:00477355 8B4508                  mov eax, dword ptr [ebp+08]
:00477358 68E8854B00              push 004B85E8
:0047735D 6800010000              push 00000100
:00477362 56                      push esi
:00477363 FF30                    push dword ptr [eax]
:00477365 E82A0A0000              call 00477D94
:0047736A 83450804                add dword ptr [ebp+08], 00000004
:0047736E 43                      inc ebx
:0047736F 3B1DC8B04B00            cmp ebx, dword ptr [004BB0C8]
:00477375 7CDE                    jl 00477355
:00477377 EB25                    jmp 0047739E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477342(C)
|
:00477379 56                      push esi
:0047737A FF357C7C4B00            push dword ptr [004B7C7C]
:00477380 FFB0E8894B00            push dword ptr [eax+004B89E8]

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:00477386 FF1578D44B00            Call dword ptr [004BD478]
:0047738C A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00477391 FF3485E8894B00          push dword ptr [4*eax+004B89E8]

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:00477398 FF157CD44B00            Call dword ptr [004BD47C]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047734C(C), :00477377(U)
|
:0047739E 8D04BDB08E4B00          lea eax, dword ptr [4*edi+004B8EB0]
:004773A5 50                      push eax
:004773A6 FF750C                  push [ebp+0C]
:004773A9 57                      push edi
:004773AA FF357C7C4B00            push dword ptr [004B7C7C]

* Reference To: GDI32.AnimatePalette, Ord:0006h
                                  |
:004773B0 FF1570D44B00            Call dword ptr [004BD470]
:004773B6 56                      push esi

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:004773B7 FF1518D64B00            Call dword ptr [004BD618]
:004773BD 8BF8                    mov edi, eax
:004773BF 3BFE                    cmp edi, esi
:004773C1 7434                    je 004773F7
:004773C3 6A0C                    push 0000000C
:004773C5 57                      push edi

* Reference To: GDI32.GetDeviceCaps, Ord:00C7h
                                  |
:004773C6 FF1550D44B00            Call dword ptr [004BD450]
:004773CC 83F808                  cmp eax, 00000008
:004773CF 7E1E                    jle 004773EF
:004773D1 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:004773D6 FF3485808B4B00          push dword ptr [4*eax+004B8B80]
:004773DD FF3485C0824B00          push dword ptr [4*eax+004B82C0]
:004773E4 56                      push esi
:004773E5 56                      push esi
:004773E6 50                      push eax
:004773E7 E8A6E0FFFF              call 00475492
:004773EC 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004773CF(C)
|
:004773EF 57                      push edi
:004773F0 56                      push esi

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:004773F1 FF151CD64B00            Call dword ptr [004BD61C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004773C1(C)
|
:004773F7 5F                      pop edi
:004773F8 5E                      pop esi
:004773F9 5B                      pop ebx
:004773FA C9                      leave
:004773FB C3                      ret



* Referenced by a CALL at Address:
|:0047750B   
|
:004773FC E855000000              call 00477456
:00477401 33C0                    xor eax, eax
:00477403 3905BCB04B00            cmp dword ptr [004BB0BC], eax
:00477409 0F95C0                  setne al
:0047740C C3                      ret



* Referenced by a CALL at Address:
|:0047751C   
|

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047741B(U)
|
:0047740D 833DBCB04B0000          cmp dword ptr [004BB0BC], 00000000
:00477414 7507                    jne 0047741D
:00477416 E83B000000              call 00477456
:0047741B EBF0                    jmp 0047740D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477414(C)
|
:0047741D A1C4B04B00              mov eax, dword ptr [004BB0C4]
:00477422 8B4C2404                mov ecx, dword ptr [esp+04]
:00477426 0FB7044560944B00        movzx eax, word ptr [2*eax+004B9460]
:0047742E 8901                    mov dword ptr [ecx], eax
:00477430 8B442408                mov eax, dword ptr [esp+08]
:00477434 832000                  and dword ptr [eax], 00000000
:00477437 A1C4B04B00              mov eax, dword ptr [004BB0C4]
:0047743C 40                      inc eax
:0047743D 83E00F                  and eax, 0000000F
:00477440 FF0DBCB04B00            dec dword ptr [004BB0BC]
:00477446 A3C4B04B00              mov dword ptr [004BB0C4], eax
:0047744B C3                      ret



* Referenced by a CALL at Address:
|:0046A59F   
|
:0047744C 8B442404                mov eax, dword ptr [esp+04]
:00477450 A3B4B04B00              mov dword ptr [004BB0B4], eax
:00477455 C3                      ret



* Referenced by a CALL at Addresses:
|:00410C7A   , :00419809   , :0041A1B7   , :0041A2B4   , :0041A339   
|:0042EF90   , :0042F5E1   , :0042F609   , :0042F654   , :0042F65F   
|:0042F6FC   , :0042F723   , :0042F779   , :0042F862   , :0042F979   
|:004309C4   , :00434B88   , :0044B428   , :0044CF63   , :0044CFF8   
|:0044DF4A   , :0044EB76   , :004565E9   , :0045665D   , :00458AA0   
|:0045C97B   , :0045D52C   , :0045D5E3   , :0045D834   , :0045E1AC   
|:0045E1CD   , :0045E381   , :0045F255   , :0046ECA5   , :0046ED20   
|:0046ED53   , :0046EE4D   , :004773FC   , :00477416   
|
:00477456 55                      push ebp
:00477457 8BEC                    mov ebp, esp
:00477459 83EC1C                  sub esp, 0000001C
:0047745C 33C0                    xor eax, eax
:0047745E 6A01                    push 00000001
:00477460 50                      push eax
:00477461 50                      push eax
:00477462 50                      push eax
:00477463 8D45E4                  lea eax, dword ptr [ebp-1C]
:00477466 50                      push eax

* Reference To: USER32.PeekMessageA, Ord:01AFh
                                  |
:00477467 FF15F0D64B00            Call dword ptr [004BD6F0]
:0047746D 85C0                    test eax, eax
:0047746F 7414                    je 00477485
:00477471 8D45E4                  lea eax, dword ptr [ebp-1C]
:00477474 50                      push eax

* Reference To: USER32.TranslateMessage, Ord:0245h
                                  |
:00477475 FF15ECD64B00            Call dword ptr [004BD6EC]
:0047747B 8D45E4                  lea eax, dword ptr [ebp-1C]
:0047747E 50                      push eax

* Reference To: USER32.DispatchMessageA, Ord:0090h
                                  |
:0047747F FF15E8D64B00            Call dword ptr [004BD6E8]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047746F(C)
|
:00477485 C9                      leave
:00477486 C3                      ret



* Referenced by a CALL at Addresses:
|:0042F64C   , :0042F971   
|
:00477487 55                      push ebp
:00477488 8BEC                    mov ebp, esp
:0047748A 83EC20                  sub esp, 00000020
:0047748D 8B4508                  mov eax, dword ptr [ebp+08]
:00477490 56                      push esi
:00477491 48                      dec eax
:00477492 57                      push edi
:00477493 7476                    je 0047750B
:00477495 48                      dec eax
:00477496 0F8589000000            jne 00477525

* Reference To: USER32.PeekMessageA, Ord:01AFh
                                  |
:0047749C 8B35F0D64B00            mov esi, dword ptr [004BD6F0]
:004774A2 33FF                    xor edi, edi
:004774A4 6A01                    push 00000001
:004774A6 57                      push edi
:004774A7 57                      push edi
:004774A8 8D45E0                  lea eax, dword ptr [ebp-20]
:004774AB 57                      push edi
:004774AC 50                      push eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477509(U)
|
:004774AD FFD6                    call esi
:004774AF 85C0                    test eax, eax
:004774B1 7472                    je 00477525
:004774B3 8B45E4                  mov eax, dword ptr [ebp-1C]
:004774B6 2D01020000              sub eax, 00000201
:004774BB 7425                    je 004774E2
:004774BD 48                      dec eax
:004774BE 7419                    je 004774D9
:004774C0 48                      dec eax
:004774C1 48                      dec eax
:004774C2 740C                    je 004774D0
:004774C4 48                      dec eax
:004774C5 7525                    jne 004774EC
:004774C7 832558944B00FD          and dword ptr [004B9458], FFFFFFFD
:004774CE EB19                    jmp 004774E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004774C2(C)
|
:004774D0 830D58944B0002          or dword ptr [004B9458], 00000002
:004774D7 EB10                    jmp 004774E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004774BE(C)
|
:004774D9 832558944B00FE          and dword ptr [004B9458], FFFFFFFE
:004774E0 EB07                    jmp 004774E9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004774BB(C)
|
:004774E2 830D58944B0001          or dword ptr [004B9458], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004774CE(U), :004774D7(U), :004774E0(U)
|
:004774E9 897DE4                  mov dword ptr [ebp-1C], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004774C5(C)
|
:004774EC 8D45E0                  lea eax, dword ptr [ebp-20]
:004774EF 50                      push eax

* Reference To: USER32.TranslateMessage, Ord:0245h
                                  |
:004774F0 FF15ECD64B00            Call dword ptr [004BD6EC]
:004774F6 8D45E0                  lea eax, dword ptr [ebp-20]
:004774F9 50                      push eax

* Reference To: USER32.DispatchMessageA, Ord:0090h
                                  |
:004774FA FF15E8D64B00            Call dword ptr [004BD6E8]
:00477500 6A01                    push 00000001
:00477502 57                      push edi
:00477503 57                      push edi
:00477504 8D45E0                  lea eax, dword ptr [ebp-20]
:00477507 57                      push edi
:00477508 50                      push eax
:00477509 EBA2                    jmp 004774AD

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00477493(C), :00477523(U)
|
:0047750B E8ECFEFFFF              call 004773FC
:00477510 85C0                    test eax, eax
:00477512 7411                    je 00477525
:00477514 8D4508                  lea eax, dword ptr [ebp+08]
:00477517 50                      push eax
:00477518 8D45FC                  lea eax, dword ptr [ebp-04]
:0047751B 50                      push eax
:0047751C E8ECFEFFFF              call 0047740D
:00477521 59                      pop ecx
:00477522 59                      pop ecx
:00477523 EBE6                    jmp 0047750B

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00477496(C), :004774B1(C), :00477512(C)
|
:00477525 5F                      pop edi
:00477526 5E                      pop esi
:00477527 C9                      leave
:00477528 C3                      ret



* Referenced by a CALL at Addresses:
|:0041E236   , :0042F556   , :0042F572   , :0042F57E   , :0042F59F   
|:0042F5AE   
|

* Reference To: KERNEL32.GetTickCount, Ord:0145h
                                  |
:00477529 FF15F8D44B00            Call dword ptr [004BD4F8]
:0047752F 6A32                    push 00000032
:00477531 33D2                    xor edx, edx
:00477533 59                      pop ecx
:00477534 F7F1                    div ecx
:00477536 C3                      ret



* Referenced by a CALL at Addresses:
|:00410144   , :0041015E   , :0041FF3C   , :0041FF7B   , :0042006D   
|:004200FA   , :004223F8   , :00422488   , :00425FC3   , :00425FE4   
|:004287EE   , :0042880B   , :00428935   , :004289DC   , :00428B1D   
|:00428BC7   , :00428C90   , :00428CE8   , :0042901C   , :00429191   
|:00429292   , :004292DE   , :00429306   , :00429419   , :004294AD   
|:00429528   , :0042955F   , :0042968E   , :004296F6   , :00429758   
|:0042CB61   , :0042CB7F   
|
:00477537 837C240401              cmp dword ptr [esp+04], 00000001
:0047753C 756D                    jne 004775AB
:0047753E 833DB8B04B0000          cmp dword ptr [004BB0B8], 00000000
:00477545 7E6A                    jle 004775B1
:00477547 FF0DB8B04B00            dec dword ptr [004BB0B8]
:0047754D 7562                    jne 004775B1
:0047754F 8B0DF0BD4B00            mov ecx, dword ptr [004BBDF0]
:00477555 8BC1                    mov eax, ecx
:00477557 C1E002                  shl eax, 02
:0047755A FFB0C06C4B00            push dword ptr [eax+004B6CC0]
:00477560 FFB0306B4B00            push dword ptr [eax+004B6B30]
:00477566 FFB0F86F4B00            push dword ptr [eax+004B6FF8]
:0047756C FFB0686E4B00            push dword ptr [eax+004B6E68]
:00477572 51                      push ecx
:00477573 E81ADFFFFF              call 00475492
:00477578 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:0047757D 83C414                  add esp, 00000014
:00477580 C1E002                  shl eax, 02
:00477583 8B88C0824B00            mov ecx, dword ptr [eax+004B82C0]
:00477589 83A0C06C4B0000          and dword ptr [eax+004B6CC0], 00000000
:00477590 83A0306B4B0000          and dword ptr [eax+004B6B30], 00000000
:00477597 8988686E4B00            mov dword ptr [eax+004B6E68], ecx
:0047759D 8B88808B4B00            mov ecx, dword ptr [eax+004B8B80]
:004775A3 8988F86F4B00            mov dword ptr [eax+004B6FF8], ecx
:004775A9 EB06                    jmp 004775B1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047753C(C)
|
:004775AB FF05B8B04B00            inc dword ptr [004BB0B8]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00477545(C), :0047754D(C), :004775A9(U)
|
:004775B1 33C0                    xor eax, eax
:004775B3 3905B8B04B00            cmp dword ptr [004BB0B8], eax
:004775B9 0F9FC0                  setg al
:004775BC C3                      ret



* Referenced by a CALL at Addresses:
|:0045F3AA   , :0046A252   
|
:004775BD 55                      push ebp
:004775BE 8BEC                    mov ebp, esp
:004775C0 83EC10                  sub esp, 00000010
:004775C3 53                      push ebx
:004775C4 56                      push esi
:004775C5 57                      push edi
:004775C6 33FF                    xor edi, edi
:004775C8 8D45F0                  lea eax, dword ptr [ebp-10]
:004775CB 57                      push edi
:004775CC 50                      push eax
:004775CD 57                      push edi
:004775CE 6A30                    push 00000030

* Reference To: USER32.SystemParametersInfoA, Ord:0234h
                                  |
:004775D0 FF15F4D64B00            Call dword ptr [004BD6F4]

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:004775D6 8B3578D64B00            mov esi, dword ptr [004BD678]
:004775DC 85C0                    test eax, eax
:004775DE 7410                    je 004775F0
:004775E0 8B4508                  mov eax, dword ptr [ebp+08]
:004775E3 8B4DF8                  mov ecx, dword ptr [ebp-08]
:004775E6 8B7D0C                  mov edi, dword ptr [ebp+0C]
:004775E9 8908                    mov dword ptr [eax], ecx
:004775EB 8B45FC                  mov eax, dword ptr [ebp-04]
:004775EE EB0F                    jmp 004775FF

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004775DE(C)
|
:004775F0 57                      push edi
:004775F1 FFD6                    call esi
:004775F3 8B4D08                  mov ecx, dword ptr [ebp+08]
:004775F6 6A01                    push 00000001
:004775F8 8901                    mov dword ptr [ecx], eax
:004775FA FFD6                    call esi
:004775FC 8B7D0C                  mov edi, dword ptr [ebp+0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004775EE(U)
|
:004775FF 6A0F                    push 0000000F
:00477601 8907                    mov dword ptr [edi], eax
:00477603 FFD6                    call esi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0004, ""
                                  |

* Possible Reference to String Resource ID=00004: "<"
                                  |
:00477605 6A04                    push 00000004
:00477607 8BD8                    mov ebx, eax
:00477609 FFD6                    call esi
:0047760B 03D8                    add ebx, eax
:0047760D 291F                    sub dword ptr [edi], ebx
:0047760F 5F                      pop edi
:00477610 5E                      pop esi
:00477611 5B                      pop ebx
:00477612 C9                      leave
:00477613 C3                      ret



* Referenced by a CALL at Addresses:
|:0042F453   , :0046A528   , :0046DC87   , :004755FA   , :00477967   
|
:00477614 55                      push ebp
:00477615 8BEC                    mov ebp, esp
:00477617 83EC1C                  sub esp, 0000001C
:0047761A 8B450C                  mov eax, dword ptr [ebp+0C]
:0047761D 834DF8FF                or dword ptr [ebp-08], FFFFFFFF
:00477621 834DF4FF                or dword ptr [ebp-0C], FFFFFFFF
:00477625 53                      push ebx
:00477626 57                      push edi
:00477627 8B7D08                  mov edi, dword ptr [ebp+08]
:0047762A A3C0924B00              mov dword ptr [004B92C0], eax
:0047762F 8B4510                  mov eax, dword ptr [ebp+10]
:00477632 33DB                    xor ebx, ebx
:00477634 893D58664B00            mov dword ptr [004B6658], edi
:0047763A 391DCCB04B00            cmp dword ptr [004BB0CC], ebx
:00477640 A3A88E4B00              mov dword ptr [004B8EA8], eax
:00477645 0F8550010000            jne 0047779B
:0047764B 56                      push esi
:0047764C 8D45E4                  lea eax, dword ptr [ebp-1C]
:0047764F 53                      push ebx
:00477650 50                      push eax
:00477651 53                      push ebx
:00477652 6A30                    push 00000030

* Reference To: USER32.SystemParametersInfoA, Ord:0234h
                                  |
:00477654 FF15F4D64B00            Call dword ptr [004BD6F4]
:0047765A 85C0                    test eax, eax
:0047765C 740B                    je 00477669
:0047765E 8B45EC                  mov eax, dword ptr [ebp-14]
:00477661 894508                  mov dword ptr [ebp+08], eax
:00477664 8B45F0                  mov eax, dword ptr [ebp-10]
:00477667 EB10                    jmp 00477679

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047765C(C)
|

* Reference To: USER32.GetSystemMetrics, Ord:012Ch
                                  |
:00477669 8B3578D64B00            mov esi, dword ptr [004BD678]
:0047766F 53                      push ebx
:00477670 FFD6                    call esi
:00477672 6A01                    push 00000001
:00477674 894508                  mov dword ptr [ebp+08], eax
:00477677 FFD6                    call esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477667(U)
|
:00477679 8945FC                  mov dword ptr [ebp-04], eax
:0047767C A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00477681 8BC8                    mov ecx, eax
:00477683 C1E102                  shl ecx, 02
:00477686 8B81C0824B00            mov eax, dword ptr [ecx+004B82C0]
:0047768C 3BF8                    cmp edi, eax
:0047768E 7E02                    jle 00477692
:00477690 8BF8                    mov edi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047768E(C)
|
:00477692 8B81808B4B00            mov eax, dword ptr [ecx+004B8B80]
:00477698 39450C                  cmp dword ptr [ebp+0C], eax
:0047769B 7E03                    jle 004776A0
:0047769D 89450C                  mov dword ptr [ebp+0C], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047769B(C), :00477710(C), :00477715(C)
|
:004776A0 A1F0BD4B00              mov eax, dword ptr [004BBDF0]

* Possible Reference to String Resource ID=00006: ""
                                  |
:004776A5 6A06                    push 00000006
:004776A7 FF750C                  push [ebp+0C]
:004776AA 57                      push edi
:004776AB 53                      push ebx
:004776AC 53                      push ebx
:004776AD 53                      push ebx
:004776AE FF348520AF4B00          push dword ptr [4*eax+004BAF20]

* Reference To: USER32.SetWindowPos, Ord:021Eh
                                  |
:004776B5 FF15F0D54B00            Call dword ptr [004BD5F0]
:004776BB 8D45E4                  lea eax, dword ptr [ebp-1C]
:004776BE 50                      push eax
:004776BF A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:004776C4 FF348520AF4B00          push dword ptr [4*eax+004BAF20]

* Reference To: USER32.GetClientRect, Ord:00E4h
                                  |
:004776CB FF15D8D64B00            Call dword ptr [004BD6D8]
:004776D1 8B55EC                  mov edx, dword ptr [ebp-14]
:004776D4 A158664B00              mov eax, dword ptr [004B6658]
:004776D9 8B0DC0924B00            mov ecx, dword ptr [004B92C0]
:004776DF 3BD0                    cmp edx, eax
:004776E1 7505                    jne 004776E8
:004776E3 394DF0                  cmp dword ptr [ebp-10], ecx
:004776E6 7426                    je 0047770E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004776E1(C)
|
:004776E8 3B55F8                  cmp edx, dword ptr [ebp-08]
:004776EB 7508                    jne 004776F5
:004776ED 8B75F0                  mov esi, dword ptr [ebp-10]
:004776F0 3B75F4                  cmp esi, dword ptr [ebp-0C]
:004776F3 7422                    je 00477717

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004776EB(C)
|
:004776F5 8BF0                    mov esi, eax
:004776F7 8955F8                  mov dword ptr [ebp-08], edx
:004776FA 2BF2                    sub esi, edx
:004776FC 03FE                    add edi, esi
:004776FE 8BF1                    mov esi, ecx
:00477700 2B75F0                  sub esi, dword ptr [ebp-10]
:00477703 01750C                  add dword ptr [ebp+0C], esi
:00477706 8B75F0                  mov esi, dword ptr [ebp-10]
:00477709 8975F4                  mov dword ptr [ebp-0C], esi
:0047770C 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004776E6(C)
|
:0047770E 3BD0                    cmp edx, eax
:00477710 758E                    jne 004776A0
:00477712 394DF0                  cmp dword ptr [ebp-10], ecx
:00477715 7589                    jne 004776A0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004776F3(C)
|
:00477717 8D45E4                  lea eax, dword ptr [ebp-1C]
:0047771A 50                      push eax
:0047771B A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:00477720 FF348520AF4B00          push dword ptr [4*eax+004BAF20]

* Reference To: USER32.GetWindowRect, Ord:013Dh
                                  |
:00477727 FF15A4D64B00            Call dword ptr [004BD6A4]
:0047772D 8B4DEC                  mov ecx, dword ptr [ebp-14]
:00477730 8B7DE4                  mov edi, dword ptr [ebp-1C]
:00477733 8B75F0                  mov esi, dword ptr [ebp-10]
:00477736 8B45E8                  mov eax, dword ptr [ebp-18]
:00477739 2BCF                    sub ecx, edi
:0047773B 2BF0                    sub esi, eax
:0047773D F6451001                test [ebp+10], 01
:00477741 741B                    je 0047775E
:00477743 8B4508                  mov eax, dword ptr [ebp+08]
:00477746 2BC1                    sub eax, ecx
:00477748 99                      cdq
:00477749 2BC2                    sub eax, edx
:0047774B 8BF8                    mov edi, eax
:0047774D 8B45FC                  mov eax, dword ptr [ebp-04]
:00477750 2BC6                    sub eax, esi
:00477752 99                      cdq
:00477753 D1FF                    sar edi, 1
:00477755 2BC2                    sub eax, edx
:00477757 897DE4                  mov dword ptr [ebp-1C], edi
:0047775A D1F8                    sar eax, 1
:0047775C EB21                    jmp 0047777F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477741(C)
|
:0047775E F6451180                test [ebp+11], 80
:00477762 741E                    je 00477782
:00477764 8B5508                  mov edx, dword ptr [ebp+08]
:00477767 3955EC                  cmp dword ptr [ebp-14], edx
:0047776A 7E07                    jle 00477773
:0047776C 2BD1                    sub edx, ecx
:0047776E 8BFA                    mov edi, edx
:00477770 897DE4                  mov dword ptr [ebp-1C], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047776A(C)
|
:00477773 8B55FC                  mov edx, dword ptr [ebp-04]
:00477776 3955F0                  cmp dword ptr [ebp-10], edx
:00477779 7E07                    jle 00477782
:0047777B 2BD6                    sub edx, esi
:0047777D 8BC2                    mov eax, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047775C(U)
|
:0047777F 8945E8                  mov dword ptr [ebp-18], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00477762(C), :00477779(C)
|
:00477782 6A01                    push 00000001
:00477784 56                      push esi
:00477785 51                      push ecx
:00477786 50                      push eax
:00477787 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:0047778C 57                      push edi
:0047778D FF348520AF4B00          push dword ptr [4*eax+004BAF20]

* Reference To: USER32.MoveWindow, Ord:019Dh
                                  |
:00477794 FF15ECD54B00            Call dword ptr [004BD5EC]
:0047779A 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477645(C)
|
:0047779B 5F                      pop edi
:0047779C 5B                      pop ebx
:0047779D C9                      leave
:0047779E C3                      ret



* Referenced by a CALL at Address:
|:004755DC   
|
:0047779F A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:004777A4 33D2                    xor edx, edx
:004777A6 C1E002                  shl eax, 02
:004777A9 83B8C0824B00FF          cmp dword ptr [eax+004B82C0], FFFFFFFF
:004777B0 56                      push esi
:004777B1 8B742408                mov esi, dword ptr [esp+08]
:004777B5 8D88C0824B00            lea ecx, dword ptr [eax+004B82C0]
:004777BB 0F94C2                  sete dl
:004777BE 8931                    mov dword ptr [ecx], esi
:004777C0 8B4C240C                mov ecx, dword ptr [esp+0C]
:004777C4 85D2                    test edx, edx
:004777C6 8988808B4B00            mov dword ptr [eax+004B8B80], ecx
:004777CC 7522                    jne 004777F0
:004777CE E860E4FFFF              call 00475C33
:004777D3 E86ADEFFFF              call 00475642
:004777D8 85C0                    test eax, eax
:004777DA 7404                    je 004777E0
:004777DC 33C0                    xor eax, eax
:004777DE 5E                      pop esi
:004777DF C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004777DA(C)
|
:004777E0 A1F0BD4B00              mov eax, dword ptr [004BBDF0]
:004777E5 85C0                    test eax, eax
:004777E7 7407                    je 004777F0
:004777E9 50                      push eax
:004777EA E820DEFFFF              call 0047560F
:004777EF 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004777CC(C), :004777E7(C)
|
:004777F0 6A01                    push 00000001
:004777F2 58                      pop eax
:004777F3 5E                      pop esi
:004777F4 C3                      ret



* Referenced by a CALL at Address:
|:0047568E   
|
:004777F5 55                      push ebp
:004777F6 8BEC                    mov ebp, esp
:004777F8 81EC2C040000            sub esp, 0000042C
:004777FE 8D85D4FBFFFF            lea eax, dword ptr [ebp+FFFFFBD4]
:00477804 50                      push eax
:00477805 E8F6040000              call 00477D00
:0047780A 85C0                    test eax, eax
:0047780C 7502                    jne 00477810
:0047780E C9                      leave
:0047780F C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047780C(C)
|
:00477810 8B4508                  mov eax, dword ptr [ebp+08]
:00477813 83BDDCFBFFFF00          cmp dword ptr [ebp+FFFFFBDC], 00000000
:0047781A 57                      push edi
:0047781B 56                      push esi
:0047781C 53                      push ebx
:0047781D 8BF0                    mov esi, eax
:0047781F 7D15                    jge 00477836
:00477821 8B450C                  mov eax, dword ptr [ebp+0C]
:00477824 C1E602                  shl esi, 02
:00477827 838EE87A4B00FF          or dword ptr [esi+004B7AE8], FFFFFFFF
:0047782E 898610964B00            mov dword ptr [esi+004B9610], eax
:00477834 EB1A                    jmp 00477850

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047781F(C)
|
:00477836 8B450C                  mov eax, dword ptr [ebp+0C]
:00477839 8BC8                    mov ecx, eax
:0047783B C1E602                  shl esi, 02
:0047783E F7D9                    neg ecx
:00477840 C786E87A4B0001000000    mov dword ptr [esi+004B7AE8], 00000001
:0047784A 898E10964B00            mov dword ptr [esi+004B9610], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477834(U)
|
:00477850 8B4D10                  mov ecx, dword ptr [ebp+10]
:00477853 8985D8FBFFFF            mov dword ptr [ebp+FFFFFBD8], eax
:00477859 83C110                  add ecx, 00000010
:0047785C 0FAF8DDCFBFFFF          imul ecx, dword ptr [ebp+FFFFFBDC]
:00477863 898DDCFBFFFF            mov dword ptr [ebp+FFFFFBDC], ecx
:00477869 E862040000              call 00477CD0
:0047786E 8BF8                    mov edi, eax
:00477870 85FF                    test edi, edi
:00477872 7436                    je 004778AA
:00477874 8D45FC                  lea eax, dword ptr [ebp-04]
:00477877 50                      push eax
:00477878 8D85D4FBFFFF            lea eax, dword ptr [ebp+FFFFFBD4]
:0047787E 50                      push eax
:0047787F 57                      push edi
:00477880 E8D9040000              call 00477D5E
:00477885 8BD8                    mov ebx, eax
:00477887 85DB                    test ebx, ebx
:00477889 7416                    je 004778A1
:0047788B 53                      push ebx
:0047788C 57                      push edi

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:0047788D FF1530D44B00            Call dword ptr [004BD430]
:00477893 898698694B00            mov dword ptr [esi+004B6998], eax
:00477899 899EF0674B00            mov dword ptr [esi+004B67F0], ebx
:0047789F EB09                    jmp 004778AA

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477889(C)
|
:004778A1 57                      push edi

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:004778A2 FF1538D44B00            Call dword ptr [004BD438]
:004778A8 33FF                    xor edi, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00477872(C), :0047789F(U)
|
:004778AA 5B                      pop ebx
:004778AB 8BC7                    mov eax, edi
:004778AD 5E                      pop esi
:004778AE 5F                      pop edi
:004778AF C9                      leave
:004778B0 C3                      ret



* Referenced by a CALL at Address:
|:00475C55   
|
:004778B1 8B442404                mov eax, dword ptr [esp+04]
:004778B5 56                      push esi
:004778B6 8BF0                    mov esi, eax
:004778B8 C1E602                  shl esi, 02
:004778BB 8B86E8894B00            mov eax, dword ptr [esi+004B89E8]
:004778C1 85C0                    test eax, eax
:004778C3 742A                    je 004778EF
:004778C5 8B8E98694B00            mov ecx, dword ptr [esi+004B6998]
:004778CB 85C9                    test ecx, ecx
:004778CD 7420                    je 004778EF
:004778CF 51                      push ecx
:004778D0 50                      push eax

* Reference To: GDI32.SelectObject, Ord:014Ah
                                  |
:004778D1 FF1530D44B00            Call dword ptr [004BD430]
:004778D7 FFB6F0674B00            push dword ptr [esi+004B67F0]

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:004778DD FF1544D44B00            Call dword ptr [004BD444]
:004778E3 FFB6E8894B00            push dword ptr [esi+004B89E8]

* Reference To: GDI32.DeleteDC, Ord:0043h
                                  |
:004778E9 FF1538D44B00            Call dword ptr [004BD438]

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004778C3(C), :004778CD(C)
|
:004778EF 5E                      pop esi
:004778F0 C3                      ret



* Referenced by a CALL at Addresses:
|:0045A7B2   , :0045A9B8   , :00466F91   , :00466FDC   , :00467156   
|:004671A1   , :004671EC   , :00467237   , :00467282   , :004672CD   
|:00467318   , :00467363   , :004673AE   , :004673F9   , :00467444   
|:0046A0A9   
|
:004778F1 55                      push ebp
:004778F2 8BEC                    mov ebp, esp
:004778F4 83EC40                  sub esp, 00000040
:004778F7 53                      push ebx
:004778F8 56                      push esi
:004778F9 8B750C                  mov esi, dword ptr [ebp+0C]
:004778FC 57                      push edi
:004778FD 8B7D10                  mov edi, dword ptr [ebp+10]
:00477900 83FE05                  cmp esi, 00000005
:00477903 776F                    ja 00477974
:00477905 83FE05                  cmp esi, 00000005
:00477908 7420                    je 0047792A
:0047790A 8BC6                    mov eax, esi
:0047790C 48                      dec eax
:0047790D 48                      dec eax
:0047790E 0F856A020000            jne 00477B7E
:00477914 E81AE3FFFF              call 00475C33
:00477919 FF3554844B00            push dword ptr [004B8454]

* Reference To: USER32.PostQuitMessage, Ord:01B3h
                                  |
:0047791F FF15F8D64B00            Call dword ptr [004BD6F8]
:00477925 E971020000              jmp 00477B9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477908(C)
|
:0047792A 6A01                    push 00000001
:0047792C 58                      pop eax
:0047792D 3BF8                    cmp edi, eax
:0047792F 750A                    jne 0047793B
:00477931 A3CCB04B00              mov dword ptr [004BB0CC], eax
:00477936 E943020000              jmp 00477B7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047792F(C)
|
:0047793B 85FF                    test edi, edi
:0047793D 0F853B020000            jne 00477B7E
:00477943 393DCCB04B00            cmp dword ptr [004BB0CC], edi
:00477949 0F842F020000            je 00477B7E
:0047794F FF35A88E4B00            push dword ptr [004B8EA8]
:00477955 213DCCB04B00            and dword ptr [004BB0CC], edi
:0047795B FF35C0924B00            push dword ptr [004B92C0]
:00477961 FF3558664B00            push dword ptr [004B6658]
:00477967 E8A8FCFFFF              call 00477614
:0047796C 83C40C                  add esp, 0000000C
:0047796F E90A020000              jmp 00477B7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477903(C)
|
:00477974 83FE0F                  cmp esi, 0000000F
:00477977 0F87AE000000            ja 00477A2B
:0047797D 743C                    je 004779BB
:0047797F 8BC6                    mov eax, esi
:00477981 83E806                  sub eax, 00000006
:00477984 7419                    je 0047799F
:00477986 48                      dec eax
:00477987 0F85F1010000            jne 00477B7E
:0047798D 6A01                    push 00000001
:0047798F 6A00                    push 00000000
:00477991 FF7508                  push [ebp+08]

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:00477994 FF1524D64B00            Call dword ptr [004BD624]
:0047799A E9FC010000              jmp 00477B9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477984(C)
|
:0047799F A1B0B04B00              mov eax, dword ptr [004BB0B0]
:004779A4 85C0                    test eax, eax
:004779A6 0F84D2010000            je 00477B7E
:004779AC 33C9                    xor ecx, ecx
:004779AE 85FF                    test edi, edi
:004779B0 0F95C1                  setne cl
:004779B3 51                      push ecx
:004779B4 FFD0                    call eax
:004779B6 E9CD000000              jmp 00477A88

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047797D(C)
|
:004779BB 8B5D08                  mov ebx, dword ptr [ebp+08]
:004779BE 8D45C0                  lea eax, dword ptr [ebp-40]
:004779C1 50                      push eax
:004779C2 53                      push ebx

* Reference To: USER32.BeginPaint, Ord:0009h
                                  |
:004779C3 FF1508D64B00            Call dword ptr [004BD608]
:004779C9 8BF0                    mov esi, eax
:004779CB A17C7C4B00              mov eax, dword ptr [004B7C7C]
:004779D0 33FF                    xor edi, edi
:004779D2 3BC7                    cmp eax, edi
:004779D4 7410                    je 004779E6
:004779D6 57                      push edi
:004779D7 50                      push eax
:004779D8 56                      push esi

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:004779D9 FF1578D44B00            Call dword ptr [004BD478]
:004779DF 56                      push esi

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:004779E0 FF157CD44B00            Call dword ptr [004BD47C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004779D4(C)
|
:004779E6 A1C8B04B00              mov eax, dword ptr [004BB0C8]
:004779EB 33C9                    xor ecx, ecx
:004779ED 3BC7                    cmp eax, edi
:004779EF 7E11                    jle 00477A02
:004779F1 BA20AF4B00              mov edx, 004BAF20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477A00(C)
|
:004779F6 391A                    cmp dword ptr [edx], ebx
:004779F8 7408                    je 00477A02
:004779FA 41                      inc ecx
:004779FB 83C204                  add edx, 00000004
:004779FE 3BC8                    cmp ecx, eax
:00477A00 7CF4                    jl 004779F6

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004779EF(C), :004779F8(C)
|
:00477A02 FF348D808B4B00          push dword ptr [4*ecx+004B8B80]
:00477A09 FF348DC0824B00          push dword ptr [4*ecx+004B82C0]
:00477A10 57                      push edi
:00477A11 57                      push edi
:00477A12 51                      push ecx
:00477A13 E87ADAFFFF              call 00475492
:00477A18 83C414                  add esp, 00000014
:00477A1B 8D45C0                  lea eax, dword ptr [ebp-40]
:00477A1E 50                      push eax
:00477A1F 53                      push ebx

* Reference To: USER32.EndPaint, Ord:00B6h
                                  |
:00477A20 FF150CD64B00            Call dword ptr [004BD60C]
:00477A26 E970010000              jmp 00477B9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477977(C)
|
:00477A2B 83FE14                  cmp esi, 00000014
:00477A2E 7732                    ja 00477A62
:00477A30 0F8465010000            je 00477B9B
:00477A36 83FE10                  cmp esi, 00000010
:00477A39 0F853F010000            jne 00477B7E
:00477A3F A1B4B04B00              mov eax, dword ptr [004BB0B4]
:00477A44 85C0                    test eax, eax
:00477A46 0F844F010000            je 00477B9B
:00477A4C 8325B4B04B0000          and dword ptr [004BB0B4], 00000000
:00477A53 8BF0                    mov esi, eax
:00477A55 FFD6                    call esi
:00477A57 8935B4B04B00            mov dword ptr [004BB0B4], esi
:00477A5D E939010000              jmp 00477B9B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477A2E(C)
|
:00477A62 BB00010000              mov ebx, 00000100
:00477A67 3BF3                    cmp esi, ebx
:00477A69 7733                    ja 00477A9E
:00477A6B 7421                    je 00477A8E
:00477A6D 83FE7E                  cmp esi, 0000007E
:00477A70 0F8508010000            jne 00477B7E
:00477A76 FF35788B4B00            push dword ptr [004B8B78]
:00477A7C FF35787C4B00            push dword ptr [004B7C78]
:00477A82 E8F9D7FFFF              call 00475280
:00477A87 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004779B6(U)
|
:00477A88 59                      pop ecx
:00477A89 E9F0000000              jmp 00477B7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477A6B(C)
|
:00477A8E FF7514                  push [ebp+14]
:00477A91 FF7510                  push [ebp+10]
:00477A94 E844010000              call 00477BDD
:00477A99 E9FB000000              jmp 00477B99

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477A69(C)
|
:00477A9E 8BC6                    mov eax, esi
:00477AA0 2D02010000              sub eax, 00000102
:00477AA5 0F84E3000000            je 00477B8E
:00477AAB 2DFF000000              sub eax, 000000FF
:00477AB0 0F84C1000000            je 00477B77
:00477AB6 48                      dec eax
:00477AB7 0F84B1000000            je 00477B6E
:00477ABD 48                      dec eax
:00477ABE 48                      dec eax
:00477ABF 0F84A0000000            je 00477B65
:00477AC5 48                      dec eax
:00477AC6 0F8490000000            je 00477B5C
:00477ACC 2D0A010000              sub eax, 0000010A
:00477AD1 7411                    je 00477AE4
:00477AD3 48                      dec eax
:00477AD4 48                      dec eax
:00477AD5 0F85A3000000            jne 00477B7E
:00477ADB 3B7D08                  cmp edi, dword ptr [ebp+08]
:00477ADE 0F849A000000            je 00477B7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477AD1(C)
|
:00477AE4 33F6                    xor esi, esi
:00477AE6 3935506E4B00            cmp dword ptr [004B6E50], esi
:00477AEC 7428                    je 00477B16
:00477AEE 3935C8B04B00            cmp dword ptr [004BB0C8], esi
:00477AF4 7E20                    jle 00477B16
:00477AF6 BFE8894B00              mov edi, 004B89E8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477B14(C)
|
:00477AFB 68E8854B00              push 004B85E8
:00477B00 53                      push ebx
:00477B01 6A00                    push 00000000
:00477B03 FF37                    push dword ptr [edi]
:00477B05 E88A020000              call 00477D94
:00477B0A 46                      inc esi
:00477B0B 83C704                  add edi, 00000004
:00477B0E 3B35C8B04B00            cmp esi, dword ptr [004BB0C8]
:00477B14 7CE5                    jl 00477AFB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00477AEC(C), :00477AF4(C)
|
:00477B16 FF7508                  push [ebp+08]

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00477B19 FF1518D64B00            Call dword ptr [004BD618]
:00477B1F 8BF0                    mov esi, eax
:00477B21 A17C7C4B00              mov eax, dword ptr [004B7C7C]
:00477B26 85C0                    test eax, eax
:00477B28 740A                    je 00477B34
:00477B2A 6A00                    push 00000000
:00477B2C 50                      push eax
:00477B2D 56                      push esi

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:00477B2E FF1578D44B00            Call dword ptr [004BD478]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477B28(C)
|
:00477B34 56                      push esi

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:00477B35 FF157CD44B00            Call dword ptr [004BD47C]
:00477B3B 56                      push esi
:00477B3C 8BF8                    mov edi, eax
:00477B3E FF7508                  push [ebp+08]

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00477B41 FF151CD64B00            Call dword ptr [004BD61C]
:00477B47 85FF                    test edi, edi
:00477B49 740D                    je 00477B58
:00477B4B 6A01                    push 00000001
:00477B4D 6A00                    push 00000000
:00477B4F FF7508                  push [ebp+08]

* Reference To: USER32.InvalidateRect, Ord:0152h
                                  |
:00477B52 FF1524D64B00            Call dword ptr [004BD624]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477B49(C)
|
:00477B58 8BC7                    mov eax, edi
:00477B5A EB41                    jmp 00477B9D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477AC6(C)
|
:00477B5C 832558944B00FD          and dword ptr [004B9458], FFFFFFFD
:00477B63 EB19                    jmp 00477B7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477ABF(C)
|
:00477B65 830D58944B0002          or dword ptr [004B9458], 00000002
:00477B6C EB10                    jmp 00477B7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477AB7(C)
|
:00477B6E 832558944B00FE          and dword ptr [004B9458], FFFFFFFE
:00477B75 EB07                    jmp 00477B7E

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477AB0(C)
|
:00477B77 830D58944B0001          or dword ptr [004B9458], 00000001

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047790E(C), :00477936(U), :0047793D(C), :00477949(C), :0047796F(U)
|:00477987(C), :004779A6(C), :00477A39(C), :00477A70(C), :00477A89(U)
|:00477AD5(C), :00477ADE(C), :00477B63(U), :00477B6C(U), :00477B75(U)
|
:00477B7E FF7514                  push [ebp+14]
:00477B81 57                      push edi
:00477B82 56                      push esi
:00477B83 FF7508                  push [ebp+08]

* Reference To: USER32.DefWindowProcA, Ord:0080h
                                  |
:00477B86 FF155CD64B00            Call dword ptr [004BD65C]
:00477B8C EB0F                    jmp 00477B9D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477AA5(C)
|
:00477B8E FF7514                  push [ebp+14]
:00477B91 FF7510                  push [ebp+10]
:00477B94 E809000000              call 00477BA2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477A99(U)
|
:00477B99 59                      pop ecx
:00477B9A 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00477925(U), :0047799A(U), :00477A26(U), :00477A30(C), :00477A46(C)
|:00477A5D(U)
|
:00477B9B 33C0                    xor eax, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00477B5A(U), :00477B8C(U)
|
:00477B9D 5F                      pop edi
:00477B9E 5E                      pop esi
:00477B9F 5B                      pop ebx
:00477BA0 C9                      leave
:00477BA1 C3                      ret



* Referenced by a CALL at Address:
|:00477B94   
|
:00477BA2 8A442404                mov al, byte ptr [esp+04]
:00477BA6 6625FF00                and ax, 00FF
:00477BAA 50                      push eax
:00477BAB E802000000              call 00477BB2
:00477BB0 59                      pop ecx
:00477BB1 C3                      ret



* Referenced by a CALL at Addresses:
|:00477BAB   , :00477C57   
|
:00477BB2 833DBCB04B0010          cmp dword ptr [004BB0BC], 00000010
:00477BB9 7D21                    jge 00477BDC
:00477BBB A1C0B04B00              mov eax, dword ptr [004BB0C0]
:00477BC0 668B4C2404              mov cx, word ptr [esp+04]
:00477BC5 66890C4560944B00        mov word ptr [2*eax+004B9460], cx
:00477BCD 40                      inc eax
:00477BCE 83E00F                  and eax, 0000000F
:00477BD1 FF05BCB04B00            inc dword ptr [004BB0BC]
:00477BD7 A3C0B04B00              mov dword ptr [004BB0C0], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477BB9(C)
|
:00477BDC C3                      ret

* Referenced by a CALL at Address:
|:00477A94   
|
:00477BDD 8B442404                mov eax, dword ptr [esp+04]
:00477BE1 33C9                    xor ecx, ecx
:00477BE3 663D7000                cmp ax, 0070
:00477BE7 7212                    jb 00477BFB
:00477BE9 663D7900                cmp ax, 0079
:00477BED 770C                    ja 00477BFB
:00477BEF 83E00F                  and eax, 0000000F
:00477BF2 05003B0000              add eax, 00003B00
:00477BF7 8BC8                    mov ecx, eax
:00477BF9 EB56                    jmp 00477C51

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00477BE7(C), :00477BED(C)
|
:00477BFB 0FB7C0                  movzx eax, ax
:00477BFE 83C0DF                  add eax, FFFFFFDF
:00477C01 83F80D                  cmp eax, 0000000D
:00477C04 774B                    ja 00477C51
:00477C06 FF24855E7C4700          jmp dword ptr [4*eax+00477C5E]
:00477C0D B900490000              mov ecx, 00004900
:00477C12 EB3D                    jmp 00477C51
:00477C14 B900510000              mov ecx, 00005100
:00477C19 EB36                    jmp 00477C51
:00477C1B B9004F0000              mov ecx, 00004F00
:00477C20 EB2F                    jmp 00477C51
:00477C22 B900470000              mov ecx, 00004700
:00477C27 EB28                    jmp 00477C51
:00477C29 B9004B0000              mov ecx, 00004B00
:00477C2E EB21                    jmp 00477C51
:00477C30 B900480000              mov ecx, 00004800
:00477C35 EB1A                    jmp 00477C51
:00477C37 B9004D0000              mov ecx, 00004D00
:00477C3C EB13                    jmp 00477C51
:00477C3E B900500000              mov ecx, 00005000
:00477C43 EB0C                    jmp 00477C51
:00477C45 B900520000              mov ecx, 00005200
:00477C4A EB05                    jmp 00477C51
:00477C4C B900530000              mov ecx, 00005300

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00477BF9(U), :00477C04(C), :00477C12(U), :00477C19(U), :00477C20(U)
|:00477C27(U), :00477C2E(U), :00477C35(U), :00477C3C(U), :00477C43(U)
|:00477C4A(U)
|
:00477C51 6685C9                  test cx, cx
:00477C54 7407                    je 00477C5D
:00477C56 51                      push ecx
:00477C57 E856FFFFFF              call 00477BB2
:00477C5C 59                      pop ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477C54(C)
|
:00477C5D C3                      ret

:00477C5E 0D7C4700                DWORD 00477C0D
:00477C62 147C4700                DWORD 00477C14
:00477C66 1B7C4700                DWORD 00477C1B
:00477C6A 227C4700                DWORD 00477C22
:00477C6E 297C4700                DWORD 00477C29
:00477C72 307C4700                DWORD 00477C30
:00477C76 377C4700                DWORD 00477C37
:00477C7A 3E7C4700                DWORD 00477C3E
:00477C7E 517C4700                DWORD 00477C51
:00477C82 517C4700                DWORD 00477C51
:00477C86 517C4700                DWORD 00477C51
:00477C8A 517C4700                DWORD 00477C51
:00477C8E 457C4700                DWORD 00477C45
:00477C92 4C7C4700                DWORD 00477C4C



* Referenced by a CALL at Address:
|:00479152   
|
:00477C96 833DD0B04B0000          cmp dword ptr [004BB0D0], 00000000
:00477C9D 7530                    jne 00477CCF
:00477C9F 8325B4B04B0000          and dword ptr [004BB0B4], 00000000
:00477CA6 56                      push esi
:00477CA7 8B742408                mov esi, dword ptr [esp+08]
:00477CAB FF3520AF4B00            push dword ptr [004BAF20]
:00477CB1 C705D0B04B0001000000    mov dword ptr [004BB0D0], 00000001
:00477CBB 893554844B00            mov dword ptr [004B8454], esi

* Reference To: USER32.DestroyWindow, Ord:008Ah
                                  |
:00477CC1 FF15FCD64B00            Call dword ptr [004BD6FC]
:00477CC7 56                      push esi

* Reference To: KERNEL32.ExitProcess, Ord:006Bh
                                  |
:00477CC8 FF158CD54B00            Call dword ptr [004BD58C]
:00477CCE 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477C9D(C)
|
:00477CCF C3                      ret

* Referenced by a CALL at Address:
|:00477869   
|
:00477CD0 56                      push esi
:00477CD1 57                      push edi
:00477CD2 6A00                    push 00000000

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00477CD4 FF1518D64B00            Call dword ptr [004BD618]
:00477CDA 8BF8                    mov edi, eax
:00477CDC 57                      push edi

* Reference To: GDI32.CreateCompatibleDC, Ord:001Fh
                                  |
:00477CDD FF1540D44B00            Call dword ptr [004BD440]
:00477CE3 8BF0                    mov esi, eax
:00477CE5 85F6                    test esi, esi
:00477CE7 7409                    je 00477CF2

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00477CE9 6A03                    push 00000003
:00477CEB 56                      push esi

* Reference To: GDI32.SetStretchBltMode, Ord:016Eh
                                  |
:00477CEC FF156CD44B00            Call dword ptr [004BD46C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477CE7(C)
|
:00477CF2 57                      push edi
:00477CF3 6A00                    push 00000000

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00477CF5 FF151CD64B00            Call dword ptr [004BD61C]
:00477CFB 8BC6                    mov eax, esi
:00477CFD 5F                      pop edi
:00477CFE 5E                      pop esi
:00477CFF C3                      ret



* Referenced by a CALL at Address:
|:00477805   
|
:00477D00 53                      push ebx
:00477D01 33DB                    xor ebx, ebx
:00477D03 56                      push esi
:00477D04 53                      push ebx

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00477D05 FF1518D64B00            Call dword ptr [004BD618]
:00477D0B 8BF0                    mov esi, eax
:00477D0D 6A0C                    push 0000000C
:00477D0F 56                      push esi

* Reference To: GDI32.GetDeviceCaps, Ord:00C7h
                                  |
:00477D10 FF1550D44B00            Call dword ptr [004BD450]
:00477D16 56                      push esi
:00477D17 53                      push ebx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00477D18 FF151CD64B00            Call dword ptr [004BD61C]
:00477D1E 6A01                    push 00000001
:00477D20 8B4C2410                mov ecx, dword ptr [esp+10]
:00477D24 58                      pop eax
:00477D25 5E                      pop esi
:00477D26 895910                  mov dword ptr [ecx+10], ebx
:00477D29 895914                  mov dword ptr [ecx+14], ebx
:00477D2C 895918                  mov dword ptr [ecx+18], ebx
:00477D2F 89591C                  mov dword ptr [ecx+1C], ebx
:00477D32 895920                  mov dword ptr [ecx+20], ebx
:00477D35 895924                  mov dword ptr [ecx+24], ebx
:00477D38 885928                  mov byte ptr [ecx+28], bl
:00477D3B 88592A                  mov byte ptr [ecx+2A], bl
:00477D3E 885929                  mov byte ptr [ecx+29], bl
:00477D41 88592B                  mov byte ptr [ecx+2B], bl
:00477D44 C70128000000            mov dword ptr [ecx], 00000028
:00477D4A 894104                  mov dword ptr [ecx+04], eax
:00477D4D 894108                  mov dword ptr [ecx+08], eax
:00477D50 6689410C                mov word ptr [ecx+0C], ax
:00477D54 66C7410E0800            mov [ecx+0E], 0008
:00477D5A 5B                      pop ebx
:00477D5B C20400                  ret 0004



* Referenced by a CALL at Address:
|:00477880   
|
:00477D5E 33C0                    xor eax, eax
:00477D60 50                      push eax
:00477D61 50                      push eax
:00477D62 FF742414                push [esp+14]
:00477D66 50                      push eax
:00477D67 FF742418                push [esp+18]
:00477D6B FF742418                push [esp+18]

* Reference To: GDI32.CreateDIBSection, Ord:0024h
                                  |
:00477D6F FF1574D44B00            Call dword ptr [004BD474]
:00477D75 C20C00                  ret 000C



* Referenced by a CALL at Addresses:
|:00475636   , :004756CC   
|
:00477D78 55                      push ebp
:00477D79 8BEC                    mov ebp, esp
:00477D7B 83EC18                  sub esp, 00000018
:00477D7E 8D45E8                  lea eax, dword ptr [ebp-18]
:00477D81 50                      push eax
:00477D82 6A18                    push 00000018
:00477D84 FF7508                  push [ebp+08]

* Reference To: GDI32.GetObjectA, Ord:00EAh
                                  |
:00477D87 FF1564D44B00            Call dword ptr [004BD464]
:00477D8D 8B45FC                  mov eax, dword ptr [ebp-04]
:00477D90 C9                      leave
:00477D91 C20800                  ret 0008



* Referenced by a CALL at Addresses:
|:0047531F   , :00475540   , :004756FC   , :00477365   , :00477B05   
|
:00477D94 FF742410                push [esp+10]
:00477D98 FF742410                push [esp+10]
:00477D9C FF742410                push [esp+10]
:00477DA0 FF742410                push [esp+10]

* Reference To: GDI32.SetDIBColorTable, Ord:0156h
                                  |
:00477DA4 FF1568D44B00            Call dword ptr [004BD468]
:00477DAA C21000                  ret 0010



* Referenced by a CALL at Address:
|:0047559D   
|
:00477DAD 55                      push ebp
:00477DAE 8BEC                    mov ebp, esp
:00477DB0 682000CC00              push 00CC0020
:00477DB5 FF7524                  push [ebp+24]
:00477DB8 FF7520                  push [ebp+20]
:00477DBB FF751C                  push [ebp+1C]
:00477DBE FF7518                  push [ebp+18]
:00477DC1 FF7514                  push [ebp+14]
:00477DC4 FF7510                  push [ebp+10]
:00477DC7 FF750C                  push [ebp+0C]
:00477DCA FF7508                  push [ebp+08]

* Reference To: GDI32.BitBlt, Ord:000Ah
                                  |
:00477DCD FF158CD44B00            Call dword ptr [004BD48C]
:00477DD3 5D                      pop ebp
:00477DD4 C22000                  ret 0020



* Referenced by a CALL at Addresses:
|:004752AE   , :00475A15   
|
:00477DD7 55                      push ebp
:00477DD8 8BEC                    mov ebp, esp
:00477DDA 81EC08040000            sub esp, 00000408
:00477DE0 53                      push ebx
:00477DE1 56                      push esi
:00477DE2 BB00010000              mov ebx, 00000100
:00477DE7 57                      push edi
:00477DE8 8BCB                    mov ecx, ebx
:00477DEA 33C0                    xor eax, eax
:00477DEC 8DBDFCFBFFFF            lea edi, dword ptr [ebp+FFFFFBFC]
:00477DF2 66C785F8FBFFFF0003      mov word ptr [ebp+FFFFFBF8], 0300
:00477DFB 66899DFAFBFFFF          mov word ptr [ebp+FFFFFBFA], bx
:00477E02 50                      push eax
:00477E03 F3                      repz
:00477E04 AB                      stosd

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00477E05 FF1518D64B00            Call dword ptr [004BD618]
:00477E0B 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:00477E0E 8B5508                  mov edx, dword ptr [ebp+08]
:00477E11 6A18                    push 00000018
:00477E13 50                      push eax
:00477E14 8945FC                  mov dword ptr [ebp-04], eax
:00477E17 8D7411FF                lea esi, dword ptr [ecx+edx-01]

* Reference To: GDI32.GetDeviceCaps, Ord:00C7h
                                  |
:00477E1B FF1550D44B00            Call dword ptr [004BD450]
:00477E21 99                      cdq
:00477E22 2BC2                    sub eax, edx
:00477E24 8BF8                    mov edi, eax
:00477E26 8D85FCFBFFFF            lea eax, dword ptr [ebp+FFFFFBFC]
:00477E2C 50                      push eax
:00477E2D 53                      push ebx
:00477E2E 6A00                    push 00000000
:00477E30 FF75FC                  push [ebp-04]
:00477E33 D1FF                    sar edi, 1

* Reference To: GDI32.GetSystemPaletteEntries, Ord:00FCh
                                  |
:00477E35 FF1528D44B00            Call dword ptr [004BD428]
:00477E3B 397D08                  cmp dword ptr [ebp+08], edi
:00477E3E 7D03                    jge 00477E43
:00477E40 897D08                  mov dword ptr [ebp+08], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477E3E(C)
|
:00477E43 B8FF000000              mov eax, 000000FF
:00477E48 2BC7                    sub eax, edi
:00477E4A 3BF0                    cmp esi, eax
:00477E4C 7E02                    jle 00477E50
:00477E4E 8BF0                    mov esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477E4C(C)
|
:00477E50 8B4D08                  mov ecx, dword ptr [ebp+08]
:00477E53 33D2                    xor edx, edx
:00477E55 85C9                    test ecx, ecx
:00477E57 7E11                    jle 00477E6A
:00477E59 8D85FFFBFFFF            lea eax, dword ptr [ebp+FFFFFBFF]
:00477E5F 8BD1                    mov edx, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477E68(C)
|
:00477E61 802000                  and byte ptr [eax], 00
:00477E64 83C004                  add eax, 00000004
:00477E67 49                      dec ecx
:00477E68 75F7                    jne 00477E61

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477E57(C)
|
:00477E6A 3BD6                    cmp edx, esi
:00477E6C 7F5D                    jg 00477ECB
:00477E6E 8B4D10                  mov ecx, dword ptr [ebp+10]
:00477E71 8D9DFCFBFFFF            lea ebx, dword ptr [ebp+FFFFFBFC]
:00477E77 2BD9                    sub ebx, ecx
:00477E79 8DBDFBFBFFFF            lea edi, dword ptr [ebp+FFFFFBFB]
:00477E7F 895D0C                  mov dword ptr [ebp+0C], ebx
:00477E82 8D9DFDFBFFFF            lea ebx, dword ptr [ebp+FFFFFBFD]
:00477E88 2BD9                    sub ebx, ecx
:00477E8A 2BF2                    sub esi, edx
:00477E8C 895D10                  mov dword ptr [ebp+10], ebx
:00477E8F 8D9DFEFBFFFF            lea ebx, dword ptr [ebp+FFFFFBFE]
:00477E95 2BF9                    sub edi, ecx
:00477E97 2BD9                    sub ebx, ecx
:00477E99 46                      inc esi
:00477E9A 8D449101                lea eax, dword ptr [ecx+4*edx+01]
:00477E9E 897508                  mov dword ptr [ebp+08], esi
:00477EA1 03D6                    add edx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477EC4(C)
|
:00477EA3 8A4801                  mov cl, byte ptr [eax+01]
:00477EA6 8B750C                  mov esi, dword ptr [ebp+0C]
:00477EA9 880C07                  mov byte ptr [edi+eax], cl
:00477EAC 8A08                    mov cl, byte ptr [eax]
:00477EAE 880C06                  mov byte ptr [esi+eax], cl
:00477EB1 8B7510                  mov esi, dword ptr [ebp+10]
:00477EB4 8A48FF                  mov cl, byte ptr [eax-01]
:00477EB7 880C06                  mov byte ptr [esi+eax], cl
:00477EBA C6040301                mov byte ptr [ebx+eax], 01
:00477EBE 83C004                  add eax, 00000004
:00477EC1 FF4D08                  dec [ebp+08]
:00477EC4 75DD                    jne 00477EA3
:00477EC6 BB00010000              mov ebx, 00000100

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477E6C(C)
|
:00477ECB 3BD3                    cmp edx, ebx
:00477ECD 7D12                    jge 00477EE1
:00477ECF 8D8495FFFBFFFF          lea eax, dword ptr [ebp+4*edx-00000401]
:00477ED6 2BDA                    sub ebx, edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477EDF(C)
|
:00477ED8 802000                  and byte ptr [eax], 00
:00477EDB 83C004                  add eax, 00000004
:00477EDE 4B                      dec ebx
:00477EDF 75F7                    jne 00477ED8

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477ECD(C)
|
:00477EE1 FF75FC                  push [ebp-04]
:00477EE4 6A00                    push 00000000

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00477EE6 FF151CD64B00            Call dword ptr [004BD61C]
:00477EEC 8D85F8FBFFFF            lea eax, dword ptr [ebp+FFFFFBF8]
:00477EF2 50                      push eax

* Reference To: GDI32.CreatePalette, Ord:0035h
                                  |
:00477EF3 FF1524D44B00            Call dword ptr [004BD424]
:00477EF9 5F                      pop edi
:00477EFA 5E                      pop esi
:00477EFB 5B                      pop ebx
:00477EFC C9                      leave
:00477EFD C3                      ret



* Referenced by a CALL at Addresses:
|:0047529D   , :00475A04   
|
:00477EFE 55                      push ebp
:00477EFF 8BEC                    mov ebp, esp
:00477F01 81EC08040000            sub esp, 00000408
:00477F07 53                      push ebx
:00477F08 56                      push esi
:00477F09 BA00010000              mov edx, 00000100
:00477F0E 57                      push edi
:00477F0F 8BCA                    mov ecx, edx
:00477F11 33C0                    xor eax, eax
:00477F13 8DBDFCFBFFFF            lea edi, dword ptr [ebp+FFFFFBFC]
:00477F19 66C785F8FBFFFF0003      mov word ptr [ebp+FFFFFBF8], 0300
:00477F22 668995FAFBFFFF          mov word ptr [ebp+FFFFFBFA], dx
:00477F29 33DB                    xor ebx, ebx
:00477F2B F3                      repz
:00477F2C AB                      stosd
:00477F2D 8D85FDFBFFFF            lea eax, dword ptr [ebp+FFFFFBFD]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477F43(C)
|
:00477F33 8858FF                  mov byte ptr [eax-01], bl
:00477F36 8818                    mov byte ptr [eax], bl
:00477F38 885801                  mov byte ptr [eax+01], bl
:00477F3B C6400204                mov [eax+02], 04
:00477F3F 83C004                  add eax, 00000004
:00477F42 4A                      dec edx
:00477F43 75EE                    jne 00477F33
:00477F45 53                      push ebx

* Reference To: USER32.GetDC, Ord:00EEh
                                  |
:00477F46 FF1518D64B00            Call dword ptr [004BD618]
:00477F4C 8BF8                    mov edi, eax
:00477F4E 8D85F8FBFFFF            lea eax, dword ptr [ebp+FFFFFBF8]
:00477F54 50                      push eax

* Reference To: GDI32.CreatePalette, Ord:0035h
                                  |
:00477F55 FF1524D44B00            Call dword ptr [004BD424]

* Reference To: GDI32.SelectPalette, Ord:014Bh
                                  |
:00477F5B 8B3578D44B00            mov esi, dword ptr [004BD478]
:00477F61 53                      push ebx
:00477F62 50                      push eax
:00477F63 57                      push edi
:00477F64 FFD6                    call esi
:00477F66 57                      push edi
:00477F67 8945FC                  mov dword ptr [ebp-04], eax

* Reference To: GDI32.RealizePalette, Ord:0137h
                                  |
:00477F6A FF157CD44B00            Call dword ptr [004BD47C]
:00477F70 53                      push ebx
:00477F71 FF75FC                  push [ebp-04]
:00477F74 57                      push edi
:00477F75 FFD6                    call esi
:00477F77 50                      push eax

* Reference To: GDI32.DeleteObject, Ord:0046h
                                  |
:00477F78 FF1544D44B00            Call dword ptr [004BD444]
:00477F7E 57                      push edi
:00477F7F 53                      push ebx

* Reference To: USER32.ReleaseDC, Ord:01CDh
                                  |
:00477F80 FF151CD64B00            Call dword ptr [004BD61C]
:00477F86 5F                      pop edi
:00477F87 5E                      pop esi
:00477F88 5B                      pop ebx
:00477F89 C9                      leave
:00477F8A C3                      ret



* Referenced by a CALL at Address:
|:00475E90   
|
:00477F8B 55                      push ebp
:00477F8C 8BEC                    mov ebp, esp
:00477F8E 8B450C                  mov eax, dword ptr [ebp+0C]
:00477F91 0FAF4508                imul eax, dword ptr [ebp+08]
:00477F95 837D1407                cmp dword ptr [ebp+14], 00000007
:00477F99 50                      push eax
:00477F9A 7504                    jne 00477FA0
:00477F9C 6A00                    push 00000000
:00477F9E EB02                    jmp 00477FA2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477F9A(C)
|
:00477FA0 6A10                    push 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477F9E(U)
|
:00477FA2 FF7510                  push [ebp+10]
:00477FA5 E8267BFFFF              call 0046FAD0
:00477FAA 83C40C                  add esp, 0000000C
:00477FAD 5D                      pop ebp
:00477FAE C3                      ret



* Referenced by a CALL at Address:
|:004767CB   
|
:00477FAF 55                      push ebp
:00477FB0 8BEC                    mov ebp, esp
:00477FB2 53                      push ebx
:00477FB3 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:00477FB6 85DB                    test ebx, ebx
:00477FB8 7E1E                    jle 00477FD8
:00477FBA 57                      push edi
:00477FBB 8B7D18                  mov edi, dword ptr [ebp+18]
:00477FBE 56                      push esi
:00477FBF 0FB67514                movzx esi, byte ptr [ebp+14]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477FD4(C)
|
:00477FC3 FF7508                  push [ebp+08]
:00477FC6 56                      push esi
:00477FC7 57                      push edi
:00477FC8 E8037BFFFF              call 0046FAD0
:00477FCD 037D10                  add edi, dword ptr [ebp+10]
:00477FD0 83C40C                  add esp, 0000000C
:00477FD3 4B                      dec ebx
:00477FD4 75ED                    jne 00477FC3
:00477FD6 5E                      pop esi
:00477FD7 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477FB8(C)
|
:00477FD8 5B                      pop ebx
:00477FD9 5D                      pop ebp
:00477FDA C3                      ret



* Referenced by a CALL at Addresses:
|:00476C6C   , :00477012   
|
:00477FDB 55                      push ebp
:00477FDC 8BEC                    mov ebp, esp
:00477FDE 53                      push ebx
:00477FDF 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:00477FE2 85DB                    test ebx, ebx
:00477FE4 7E20                    jle 00478006
:00477FE6 57                      push edi
:00477FE7 8B7D18                  mov edi, dword ptr [ebp+18]
:00477FEA 56                      push esi
:00477FEB 8B751C                  mov esi, dword ptr [ebp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478002(C)
|
:00477FEE FF7508                  push [ebp+08]
:00477FF1 57                      push edi
:00477FF2 56                      push esi
:00477FF3 E86875FFFF              call 0046F560
:00477FF8 037510                  add esi, dword ptr [ebp+10]
:00477FFB 037D14                  add edi, dword ptr [ebp+14]
:00477FFE 83C40C                  add esp, 0000000C
:00478001 4B                      dec ebx
:00478002 75EA                    jne 00477FEE
:00478004 5E                      pop esi
:00478005 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00477FE4(C)
|
:00478006 5B                      pop ebx
:00478007 5D                      pop ebp
:00478008 C3                      ret



* Referenced by a CALL at Addresses:
|:00476C38   , :00476FDE   
|
:00478009 55                      push ebp
:0047800A 8BEC                    mov ebp, esp
:0047800C 8B4510                  mov eax, dword ptr [ebp+10]
:0047800F 8B4D14                  mov ecx, dword ptr [ebp+14]
:00478012 8B550C                  mov edx, dword ptr [ebp+0C]
:00478015 2B4508                  sub eax, dword ptr [ebp+08]
:00478018 2B4D08                  sub ecx, dword ptr [ebp+08]
:0047801B 85D2                    test edx, edx
:0047801D 7E28                    jle 00478047
:0047801F 57                      push edi
:00478020 8B7D18                  mov edi, dword ptr [ebp+18]
:00478023 56                      push esi
:00478024 8B751C                  mov esi, dword ptr [ebp+1C]
:00478027 53                      push ebx
:00478028 895510                  mov dword ptr [ebp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478042(C)
|
:0047802B 8B5508                  mov edx, dword ptr [ebp+08]
:0047802E 85D2                    test edx, edx
:00478030 7E09                    jle 0047803B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478039(C)
|
:00478032 8A1F                    mov bl, byte ptr [edi]
:00478034 201E                    and byte ptr [esi], bl
:00478036 47                      inc edi
:00478037 46                      inc esi
:00478038 4A                      dec edx
:00478039 75F7                    jne 00478032

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478030(C)
|
:0047803B 03F0                    add esi, eax
:0047803D 03F9                    add edi, ecx
:0047803F FF4D10                  dec [ebp+10]
:00478042 75E7                    jne 0047802B
:00478044 5B                      pop ebx
:00478045 5E                      pop esi
:00478046 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047801D(C)
|
:00478047 5D                      pop ebp
:00478048 C3                      ret



* Referenced by a CALL at Addresses:
|:00476C1E   , :00476FC4   
|
:00478049 55                      push ebp
:0047804A 8BEC                    mov ebp, esp
:0047804C 8B4510                  mov eax, dword ptr [ebp+10]
:0047804F 8B4D14                  mov ecx, dword ptr [ebp+14]
:00478052 8B550C                  mov edx, dword ptr [ebp+0C]
:00478055 2B4508                  sub eax, dword ptr [ebp+08]
:00478058 2B4D08                  sub ecx, dword ptr [ebp+08]
:0047805B 85D2                    test edx, edx
:0047805D 7E28                    jle 00478087
:0047805F 57                      push edi
:00478060 8B7D18                  mov edi, dword ptr [ebp+18]
:00478063 56                      push esi
:00478064 8B751C                  mov esi, dword ptr [ebp+1C]
:00478067 53                      push ebx
:00478068 895510                  mov dword ptr [ebp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478082(C)
|
:0047806B 8B5508                  mov edx, dword ptr [ebp+08]
:0047806E 85D2                    test edx, edx
:00478070 7E09                    jle 0047807B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478079(C)
|
:00478072 8A1F                    mov bl, byte ptr [edi]
:00478074 081E                    or byte ptr [esi], bl
:00478076 47                      inc edi
:00478077 46                      inc esi
:00478078 4A                      dec edx
:00478079 75F7                    jne 00478072

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478070(C)
|
:0047807B 03F0                    add esi, eax
:0047807D 03F9                    add edi, ecx
:0047807F FF4D10                  dec [ebp+10]
:00478082 75E7                    jne 0047806B
:00478084 5B                      pop ebx
:00478085 5E                      pop esi
:00478086 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047805D(C)
|
:00478087 5D                      pop ebp
:00478088 C3                      ret



* Referenced by a CALL at Addresses:
|:00476C52   , :00476FF8   
|
:00478089 55                      push ebp
:0047808A 8BEC                    mov ebp, esp
:0047808C 8B4510                  mov eax, dword ptr [ebp+10]
:0047808F 8B4D14                  mov ecx, dword ptr [ebp+14]
:00478092 8B550C                  mov edx, dword ptr [ebp+0C]
:00478095 2B4508                  sub eax, dword ptr [ebp+08]
:00478098 2B4D08                  sub ecx, dword ptr [ebp+08]
:0047809B 85D2                    test edx, edx
:0047809D 7E31                    jle 004780D0
:0047809F 57                      push edi
:004780A0 8B7D18                  mov edi, dword ptr [ebp+18]
:004780A3 56                      push esi
:004780A4 8B751C                  mov esi, dword ptr [ebp+1C]
:004780A7 53                      push ebx
:004780A8 895510                  mov dword ptr [ebp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004780CB(C)
|
:004780AB 8B5508                  mov edx, dword ptr [ebp+08]
:004780AE 85D2                    test edx, edx
:004780B0 7E12                    jle 004780C4

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004780C2(C)
|
:004780B2 837D2007                cmp dword ptr [ebp+20], 00000007
:004780B6 7403                    je 004780BB
:004780B8 80260F                  and byte ptr [esi], 0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004780B6(C)
|
:004780BB 8A1F                    mov bl, byte ptr [edi]
:004780BD 301E                    xor byte ptr [esi], bl
:004780BF 47                      inc edi
:004780C0 46                      inc esi
:004780C1 4A                      dec edx
:004780C2 75EE                    jne 004780B2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004780B0(C)
|
:004780C4 03F0                    add esi, eax
:004780C6 03F9                    add edi, ecx
:004780C8 FF4D10                  dec [ebp+10]
:004780CB 75DE                    jne 004780AB
:004780CD 5B                      pop ebx
:004780CE 5E                      pop esi
:004780CF 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047809D(C)
|
:004780D0 5D                      pop ebp
:004780D1 C3                      ret



* Referenced by a CALL at Address:
|:00476C04   
|
:004780D2 55                      push ebp
:004780D3 8BEC                    mov ebp, esp
:004780D5 8B4510                  mov eax, dword ptr [ebp+10]
:004780D8 8B4D14                  mov ecx, dword ptr [ebp+14]
:004780DB 8B550C                  mov edx, dword ptr [ebp+0C]
:004780DE 2B4508                  sub eax, dword ptr [ebp+08]
:004780E1 2B4D08                  sub ecx, dword ptr [ebp+08]
:004780E4 85D2                    test edx, edx
:004780E6 7E3C                    jle 00478124
:004780E8 57                      push edi
:004780E9 8B7D1C                  mov edi, dword ptr [ebp+1C]
:004780EC 56                      push esi
:004780ED 8B7518                  mov esi, dword ptr [ebp+18]
:004780F0 53                      push ebx
:004780F1 895514                  mov dword ptr [ebp+14], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047811F(C)
|
:004780F4 8B5508                  mov edx, dword ptr [ebp+08]
:004780F7 85D2                    test edx, edx
:004780F9 7E1D                    jle 00478118
:004780FB 895510                  mov dword ptr [ebp+10], edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478116(C)
|
:004780FE 8A16                    mov dl, byte ptr [esi]
:00478100 837D2007                cmp dword ptr [ebp+20], 00000007
:00478104 8ADA                    mov bl, dl
:00478106 7403                    je 0047810B
:00478108 80E30F                  and bl, 0F

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478106(C)
|
:0047810B 84DB                    test bl, bl
:0047810D 7402                    je 00478111
:0047810F 8817                    mov byte ptr [edi], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047810D(C)
|
:00478111 47                      inc edi
:00478112 46                      inc esi
:00478113 FF4D10                  dec [ebp+10]
:00478116 75E6                    jne 004780FE

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004780F9(C)
|
:00478118 03F8                    add edi, eax
:0047811A 03F1                    add esi, ecx
:0047811C FF4D14                  dec [ebp+14]
:0047811F 75D3                    jne 004780F4
:00478121 5B                      pop ebx
:00478122 5E                      pop esi
:00478123 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004780E6(C)
|
:00478124 5D                      pop ebp
:00478125 C3                      ret



* Referenced by a CALL at Addresses:
|:00476D84   , :00476DCE   
|
:00478126 55                      push ebp
:00478127 8BEC                    mov ebp, esp
:00478129 53                      push ebx
:0047812A 8B5D0C                  mov ebx, dword ptr [ebp+0C]
:0047812D 85DB                    test ebx, ebx
:0047812F 7E20                    jle 00478151
:00478131 57                      push edi
:00478132 8B7D18                  mov edi, dword ptr [ebp+18]
:00478135 56                      push esi
:00478136 8B751C                  mov esi, dword ptr [ebp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047814D(C)
|
:00478139 FF7508                  push [ebp+08]
:0047813C 57                      push edi
:0047813D 56                      push esi
:0047813E E81D74FFFF              call 0046F560
:00478143 037514                  add esi, dword ptr [ebp+14]
:00478146 037D10                  add edi, dword ptr [ebp+10]
:00478149 83C40C                  add esp, 0000000C
:0047814C 4B                      dec ebx
:0047814D 75EA                    jne 00478139
:0047814F 5E                      pop esi
:00478150 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047812F(C)
|
:00478151 5B                      pop ebx
:00478152 5D                      pop ebp
:00478153 C3                      ret



* Referenced by a CALL at Address:
|:00477070   
|
:00478154 55                      push ebp
:00478155 8BEC                    mov ebp, esp
:00478157 51                      push ecx
:00478158 8B450C                  mov eax, dword ptr [ebp+0C]
:0047815B 85C0                    test eax, eax
:0047815D 7E6C                    jle 004781CB
:0047815F 57                      push edi
:00478160 8B7D1C                  mov edi, dword ptr [ebp+1C]
:00478163 56                      push esi
:00478164 53                      push ebx
:00478165 8B5D08                  mov ebx, dword ptr [ebp+08]
:00478168 89450C                  mov dword ptr [ebp+0C], eax
:0047816B C1FB03                  sar ebx, 03
:0047816E 895DFC                  mov dword ptr [ebp-04], ebx
:00478171 EB03                    jmp 00478176

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004781C6(C)
|
:00478173 8B5DFC                  mov ebx, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478171(U)
|
:00478176 8B7520                  mov esi, dword ptr [ebp+20]
:00478179 85DB                    test ebx, ebx
:0047817B 741E                    je 0047819B
:0047817D 7E1C                    jle 0047819B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478199(C)
|
:0047817F 8A0F                    mov cl, byte ptr [edi]

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00478181 6A08                    push 00000008
:00478183 47                      inc edi
:00478184 5A                      pop edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478196(C)
|
:00478185 8B4514                  mov eax, dword ptr [ebp+14]
:00478188 F6C180                  test cl, 80
:0047818B 7503                    jne 00478190
:0047818D 8B4518                  mov eax, dword ptr [ebp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047818B(C)
|
:00478190 8806                    mov byte ptr [esi], al
:00478192 46                      inc esi
:00478193 D0E1                    shl cl, 1
:00478195 4A                      dec edx
:00478196 75ED                    jne 00478185
:00478198 4B                      dec ebx
:00478199 75E4                    jne 0047817F

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047817B(C), :0047817D(C)
|
:0047819B 8B4508                  mov eax, dword ptr [ebp+08]
:0047819E 83E007                  and eax, 00000007
:004781A1 741A                    je 004781BD
:004781A3 8A17                    mov dl, byte ptr [edi]
:004781A5 47                      inc edi
:004781A6 85C0                    test eax, eax
:004781A8 7E13                    jle 004781BD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004781BB(C)
|
:004781AA 8B4D14                  mov ecx, dword ptr [ebp+14]
:004781AD F6C280                  test dl, 80
:004781B0 7503                    jne 004781B5
:004781B2 8B4D18                  mov ecx, dword ptr [ebp+18]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004781B0(C)
|
:004781B5 880E                    mov byte ptr [esi], cl
:004781B7 46                      inc esi
:004781B8 D0E2                    shl dl, 1
:004781BA 48                      dec eax
:004781BB 75ED                    jne 004781AA

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004781A1(C), :004781A8(C)
|
:004781BD 8B4510                  mov eax, dword ptr [ebp+10]
:004781C0 014520                  add dword ptr [ebp+20], eax
:004781C3 FF4D0C                  dec [ebp+0C]
:004781C6 75AB                    jne 00478173
:004781C8 5B                      pop ebx
:004781C9 5E                      pop esi
:004781CA 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047815D(C)
|
:004781CB C9                      leave
:004781CC C3                      ret



* Referenced by a CALL at Address:
|:00477055   
|
:004781CD 55                      push ebp
:004781CE 8BEC                    mov ebp, esp
:004781D0 51                      push ecx
:004781D1 8B450C                  mov eax, dword ptr [ebp+0C]
:004781D4 85C0                    test eax, eax
:004781D6 7E64                    jle 0047823C
:004781D8 8B4D08                  mov ecx, dword ptr [ebp+08]
:004781DB 57                      push edi
:004781DC 8B7D1C                  mov edi, dword ptr [ebp+1C]
:004781DF 56                      push esi
:004781E0 C1F903                  sar ecx, 03
:004781E3 53                      push ebx
:004781E4 8A5D14                  mov bl, byte ptr [ebp+14]
:004781E7 894DFC                  mov dword ptr [ebp-04], ecx
:004781EA 89450C                  mov dword ptr [ebp+0C], eax
:004781ED EB03                    jmp 004781F2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478237(C)
|
:004781EF 8B4DFC                  mov ecx, dword ptr [ebp-04]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004781ED(U)
|
:004781F2 8B5520                  mov edx, dword ptr [ebp+20]
:004781F5 85C9                    test ecx, ecx
:004781F7 7417                    je 00478210
:004781F9 7E15                    jle 00478210

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047820E(C)
|
:004781FB 8A07                    mov al, byte ptr [edi]

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004781FD 6A08                    push 00000008
:004781FF 47                      inc edi
:00478200 5E                      pop esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047820B(C)
|
:00478201 A880                    test al, 80
:00478203 7402                    je 00478207
:00478205 881A                    mov byte ptr [edx], bl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478203(C)
|
:00478207 42                      inc edx
:00478208 D0E0                    shl al, 1
:0047820A 4E                      dec esi
:0047820B 75F4                    jne 00478201
:0047820D 49                      dec ecx
:0047820E 75EB                    jne 004781FB

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004781F7(C), :004781F9(C)
|
:00478210 8B4508                  mov eax, dword ptr [ebp+08]
:00478213 83E007                  and eax, 00000007
:00478216 7416                    je 0047822E
:00478218 8A0F                    mov cl, byte ptr [edi]
:0047821A 47                      inc edi
:0047821B 85C0                    test eax, eax
:0047821D 7E0F                    jle 0047822E
:0047821F 8BF0                    mov esi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047822C(C)
|
:00478221 F6C180                  test cl, 80
:00478224 7402                    je 00478228
:00478226 881A                    mov byte ptr [edx], bl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478224(C)
|
:00478228 42                      inc edx
:00478229 D0E1                    shl cl, 1
:0047822B 4E                      dec esi
:0047822C 75F3                    jne 00478221

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00478216(C), :0047821D(C)
|
:0047822E 8B4510                  mov eax, dword ptr [ebp+10]
:00478231 014520                  add dword ptr [ebp+20], eax
:00478234 FF4D0C                  dec [ebp+0C]
:00478237 75B6                    jne 004781EF
:00478239 5B                      pop ebx
:0047823A 5E                      pop esi
:0047823B 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004781D6(C)
|
:0047823C C9                      leave
:0047823D C3                      ret



* Referenced by a CALL at Address:
|:00476D96   
|
:0047823E 55                      push ebp
:0047823F 8BEC                    mov ebp, esp
:00478241 51                      push ecx
:00478242 8B4508                  mov eax, dword ptr [ebp+08]
:00478245 56                      push esi
:00478246 8BF0                    mov esi, eax
:00478248 83E001                  and eax, 00000001
:0047824B 8945FC                  mov dword ptr [ebp-04], eax
:0047824E 8B450C                  mov eax, dword ptr [ebp+0C]
:00478251 D1FE                    sar esi, 1
:00478253 85C0                    test eax, eax
:00478255 7E3D                    jle 00478294
:00478257 8B5510                  mov edx, dword ptr [ebp+10]
:0047825A 57                      push edi
:0047825B 8B7D14                  mov edi, dword ptr [ebp+14]
:0047825E 53                      push ebx
:0047825F 894508                  mov dword ptr [ebp+08], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478290(C)
|
:00478262 85F6                    test esi, esi
:00478264 7418                    je 0047827E
:00478266 7E16                    jle 0047827E
:00478268 8BDE                    mov ebx, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047827C(C)
|
:0047826A 8A0A                    mov cl, byte ptr [edx]
:0047826C 8A4201                  mov al, byte ptr [edx+01]
:0047826F 42                      inc edx
:00478270 240F                    and al, 0F
:00478272 C0E104                  shl cl, 04
:00478275 02C1                    add al, cl
:00478277 42                      inc edx
:00478278 8807                    mov byte ptr [edi], al
:0047827A 47                      inc edi
:0047827B 4B                      dec ebx
:0047827C 75EC                    jne 0047826A

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00478264(C), :00478266(C)
|
:0047827E 837DFC00                cmp dword ptr [ebp-04], 00000000
:00478282 7409                    je 0047828D
:00478284 8A02                    mov al, byte ptr [edx]
:00478286 42                      inc edx
:00478287 C0E004                  shl al, 04
:0047828A 8807                    mov byte ptr [edi], al
:0047828C 47                      inc edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478282(C)
|
:0047828D FF4D08                  dec [ebp+08]
:00478290 75D0                    jne 00478262
:00478292 5B                      pop ebx
:00478293 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478255(C)
|
:00478294 5E                      pop esi
:00478295 C9                      leave
:00478296 C3                      ret



* Referenced by a CALL at Address:
|:00476B94   
|
:00478297 55                      push ebp
:00478298 8BEC                    mov ebp, esp
:0047829A 8B4508                  mov eax, dword ptr [ebp+08]
:0047829D 8B4D0C                  mov ecx, dword ptr [ebp+0C]
:004782A0 56                      push esi
:004782A1 8BF0                    mov esi, eax
:004782A3 D1FE                    sar esi, 1
:004782A5 83E001                  and eax, 00000001
:004782A8 85C9                    test ecx, ecx
:004782AA 7E44                    jle 004782F0
:004782AC 8B5510                  mov edx, dword ptr [ebp+10]
:004782AF 57                      push edi
:004782B0 894D08                  mov dword ptr [ebp+08], ecx
:004782B3 8B4D14                  mov ecx, dword ptr [ebp+14]
:004782B6 53                      push ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004782EC(C)
|
:004782B7 85F6                    test esi, esi
:004782B9 741E                    je 004782D9
:004782BB 7E1C                    jle 004782D9
:004782BD 8BFE                    mov edi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004782D7(C)
|
:004782BF 8A1A                    mov bl, byte ptr [edx]
:004782C1 C0EB04                  shr bl, 04
:004782C4 80CB10                  or bl, 10
:004782C7 8819                    mov byte ptr [ecx], bl
:004782C9 8A1A                    mov bl, byte ptr [edx]
:004782CB 80E30F                  and bl, 0F
:004782CE 41                      inc ecx
:004782CF 80CB10                  or bl, 10
:004782D2 8819                    mov byte ptr [ecx], bl
:004782D4 41                      inc ecx
:004782D5 42                      inc edx
:004782D6 4F                      dec edi
:004782D7 75E6                    jne 004782BF

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004782B9(C), :004782BB(C)
|
:004782D9 85C0                    test eax, eax
:004782DB 740C                    je 004782E9
:004782DD 8A1A                    mov bl, byte ptr [edx]
:004782DF C0EB04                  shr bl, 04
:004782E2 80CB10                  or bl, 10
:004782E5 8819                    mov byte ptr [ecx], bl
:004782E7 41                      inc ecx
:004782E8 42                      inc edx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004782DB(C)
|
:004782E9 FF4D08                  dec [ebp+08]
:004782EC 75C9                    jne 004782B7
:004782EE 5B                      pop ebx
:004782EF 5F                      pop edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004782AA(C)
|
:004782F0 5E                      pop esi
:004782F1 5D                      pop ebp
:004782F2 C3                      ret


:004782F3 CC                      int 03
:004782F4 CC                      int 03
:004782F5 CC                      int 03
:004782F6 CC                      int 03
:004782F7 CC                      int 03
:004782F8 CC                      int 03
:004782F9 CC                      int 03
:004782FA CC                      int 03
:004782FB CC                      int 03
:004782FC CC                      int 03
:004782FD CC                      int 03
:004782FE CC                      int 03
:004782FF CC                      int 03

* Referenced by a CALL at Addresses:
|:00401454   , :00401488   , :004014BC   , :004014F0   , :00401524   
|:00401558   , :0040158C   , :004015BE   , :004015EF   , :00401623   
|:0040165B   , :00401695   , :004016CC   , :00401703   , :00401769   
|:004017EC   , :0040183D   , :00401D45   , :00401D78   , :00401DAB   
|:00401DDE   , :00401E0F   , :00401E42   , :00401EAE   , :0040481F   
|:0046C70E   
|
:00478300 8B4C2408                mov ecx, dword ptr [esp+08]
:00478304 8B44240C                mov eax, dword ptr [esp+0C]
:00478308 034C2404                add ecx, dword ptr [esp+04]
:0047830C 3BC1                    cmp eax, ecx
:0047830E 7C02                    jl 00478312
:00478310 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047830E(C)
|
:00478312 C3                      ret
:00478313 CC                      int 03
:00478314 CC                      int 03
:00478315 CC                      int 03
:00478316 CC                      int 03
:00478317 CC                      int 03
:00478318 CC                      int 03
:00478319 CC                      int 03
:0047831A CC                      int 03
:0047831B CC                      int 03
:0047831C CC                      int 03
:0047831D CC                      int 03
:0047831E CC                      int 03
:0047831F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040485E   , :004089D0   , :00438170   , :0043B937   , :0043C717   
|:00440C15   , :0044101A   , :004593B9   , :0046C6BE   
|
:00478320 8B4C2408                mov ecx, dword ptr [esp+08]
:00478324 8B442404                mov eax, dword ptr [esp+04]
:00478328 3BC8                    cmp ecx, eax
:0047832A 7303                    jnb 0047832F
:0047832C 2BC1                    sub eax, ecx
:0047832E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047832A(C)
|
:0047832F 33C0                    xor eax, eax
:00478331 C3                      ret


:00478332 CC                      int 03
:00478333 CC                      int 03
:00478334 CC                      int 03
:00478335 CC                      int 03
:00478336 CC                      int 03
:00478337 CC                      int 03
:00478338 CC                      int 03
:00478339 CC                      int 03
:0047833A CC                      int 03
:0047833B CC                      int 03
:0047833C CC                      int 03
:0047833D CC                      int 03
:0047833E CC                      int 03
:0047833F CC                      int 03

* Referenced by a CALL at Address:
|:00402177   
|
:00478340 33C0                    xor eax, eax
:00478342 33C9                    xor ecx, ecx
:00478344 8A442408                mov al, byte ptr [esp+08]
:00478348 8A4C2404                mov cl, byte ptr [esp+04]
:0047834C 03C1                    add eax, ecx
:0047834E 33C9                    xor ecx, ecx
:00478350 8A4C240C                mov cl, byte ptr [esp+0C]
:00478354 3BC1                    cmp eax, ecx
:00478356 7202                    jb 0047835A
:00478358 8BC1                    mov eax, ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478356(C)
|
:0047835A C3                      ret
:0047835B CC                      int 03
:0047835C CC                      int 03
:0047835D CC                      int 03
:0047835E CC                      int 03
:0047835F CC                      int 03

* Referenced by a CALL at Addresses:
|:00401ED1   , :004028D6   
|
:00478360 8A442404                mov al, byte ptr [esp+04]
:00478364 8A4C2408                mov cl, byte ptr [esp+08]
:00478368 3AC1                    cmp al, cl
:0047836A 7603                    jbe 0047836F
:0047836C 2AC1                    sub al, cl
:0047836E C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047836A(C)
|
:0047836F 32C0                    xor al, al
:00478371 C3                      ret


:00478372 CC                      int 03
:00478373 CC                      int 03
:00478374 CC                      int 03
:00478375 CC                      int 03
:00478376 CC                      int 03
:00478377 CC                      int 03
:00478378 CC                      int 03
:00478379 CC                      int 03
:0047837A CC                      int 03
:0047837B CC                      int 03
:0047837C CC                      int 03
:0047837D CC                      int 03
:0047837E CC                      int 03
:0047837F CC                      int 03

* Referenced by a CALL at Address:
|:004783BE   
|
:00478380 A1744B4800              mov eax, dword ptr [00484B74]
:00478385 69C06D4EC641            imul eax, 41C64E6D
:0047838B 0539300000              add eax, 00003039
:00478390 A3744B4800              mov dword ptr [00484B74], eax
:00478395 250000FF7F              and eax, 7FFF0000
:0047839A C1E810                  shr eax, 10
:0047839D C3                      ret


:0047839E CC                      int 03
:0047839F CC                      int 03

* Referenced by a CALL at Addresses:
|:0041E23C   , :0042F337   , :0042F4BC   
|
:004783A0 8B442404                mov eax, dword ptr [esp+04]
:004783A4 A3744B4800              mov dword ptr [00484B74], eax
:004783A9 C3                      ret


:004783AA CC                      int 03
:004783AB CC                      int 03
:004783AC CC                      int 03
:004783AD CC                      int 03
:004783AE CC                      int 03
:004783AF CC                      int 03

* Referenced by a CALL at Addresses:
|:0041D58C   , :0041D724   , :0041D734   , :0041E885   , :0041FBB0   
|:004211A9   , :004211BD   , :004211E7   , :00421211   , :00425276   
|:0042544D   , :004256E3   , :00425791   , :00425B1C   , :00425D9C   
|:00425E93   , :00427829   , :004278B7   , :00428038   , :004280F1   
|:004281B8   , :0042827F   , :00428338   , :004283CE   , :004297F4   
|:00429863   , :00429991   , :0042999F   , :00429C37   , :00429C45   
|:00429E29   , :00429E37   , :00429F01   , :00429F0F   , :0042A0DA   
|:0042A0E8   , :0042AE57   , :0042B207   , :0042B29E   , :0042B46F   
|:0042BA6D   , :0042BA7B   , :0042D52C   , :0042D54B   , :0042D56A   
|:00432F2C   , :00432F93   , :004336C9   , :004337FA   , :00433AB2   
|:00433B80   , :004370EE   , :004370FC   , :00438196   , :0043BFA6   
|:0043CF45   , :0043CF53   , :00440DE2   , :0044159A   , :004415A8   
|:00441644   , :00441652   , :0044169C   , :004416AA   , :00441741   
|:0044174F   , :00441775   , :00441783   , :0044179E   , :004417D8   
|:004417E6   , :0044183E   , :0044194F   , :00441961   , :00441973   
|:00441A7C   , :00441A8A   , :00441AE5   , :00441AF3   , :004428EA   
|:004428FC   , :0044290C   , :0044291E   , :0044292E   , :00442940   
|:00442950   , :00442962   , :004436A7   , :0044370C   , :0044483C   
|:0045387A   , :0045399C   , :00454115   , :00454329   , :00454918   
|:00454C40   , :00454D39   , :00454D6C   , :00454DA8   , :00454E50   
|:00454E5F   , :00455371   , :0045537F   , :004553DA   , :004553E8   
|:0045F2F3   , :004606FD   
|
:004783B0 56                      push esi
:004783B1 8B742408                mov esi, dword ptr [esp+08]
:004783B5 83FE02                  cmp esi, 00000002
:004783B8 7304                    jnb 004783BE
:004783BA 33C0                    xor eax, eax
:004783BC 5E                      pop esi
:004783BD C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004783B8(C)
|
:004783BE E8BDFFFFFF              call 00478380
:004783C3 2BD2                    sub edx, edx
:004783C5 F7F6                    div esi
:004783C7 8BC2                    mov eax, edx
:004783C9 5E                      pop esi
:004783CA C3                      ret


:004783CB CC                      int 03
:004783CC CC                      int 03
:004783CD CC                      int 03
:004783CE CC                      int 03
:004783CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00465E12   , :0046A5CF   
|
:004783D0 8B442404                mov eax, dword ptr [esp+04]
:004783D4 56                      push esi
:004783D5 8B74240C                mov esi, dword ptr [esp+0C]
:004783D9 8B4C2410                mov ecx, dword ptr [esp+10]
:004783DD 8BD6                    mov edx, esi
:004783DF 85C0                    test eax, eax
:004783E1 7D0D                    jge 004783F0
:004783E3 83F90A                  cmp ecx, 0000000A
:004783E6 7508                    jne 004783F0
:004783E8 8D5601                  lea edx, dword ptr [esi+01]
:004783EB C6062D                  mov byte ptr [esi], 2D
:004783EE F7D8                    neg eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004783E1(C), :004783E6(C)
|
:004783F0 51                      push ecx
:004783F1 52                      push edx
:004783F2 50                      push eax
:004783F3 E808000000              call 00478400
:004783F8 83C40C                  add esp, 0000000C
:004783FB 8BC6                    mov eax, esi
:004783FD 5E                      pop esi
:004783FE C3                      ret


:004783FF CC                      int 03

* Referenced by a CALL at Addresses:
|:004783F3   , :0047841B   
|
:00478400 56                      push esi
:00478401 57                      push edi
:00478402 8B7C2414                mov edi, dword ptr [esp+14]
:00478406 8B74240C                mov esi, dword ptr [esp+0C]
:0047840A 3BF7                    cmp esi, edi
:0047840C 7219                    jb 00478427
:0047840E 8B4C2410                mov ecx, dword ptr [esp+10]
:00478412 57                      push edi
:00478413 51                      push ecx
:00478414 8BC6                    mov eax, esi
:00478416 2BD2                    sub edx, edx
:00478418 F7F7                    div edi
:0047841A 50                      push eax
:0047841B E8E0FFFFFF              call 00478400
:00478420 83C40C                  add esp, 0000000C
:00478423 8BC8                    mov ecx, eax
:00478425 EB04                    jmp 0047842B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047840C(C)
|
:00478427 8B4C2410                mov ecx, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478425(U)
|
:0047842B 8BC6                    mov eax, esi
:0047842D 2BD2                    sub edx, edx
:0047842F F7F7                    div edi
:00478431 80C230                  add dl, 30
:00478434 8811                    mov byte ptr [ecx], dl
:00478436 80FA39                  cmp dl, 39
:00478439 7605                    jbe 00478440
:0047843B 80C227                  add dl, 27
:0047843E 8811                    mov byte ptr [ecx], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478439(C)
|
:00478440 C6410100                mov [ecx+01], 00
:00478444 41                      inc ecx
:00478445 8BC1                    mov eax, ecx
:00478447 5F                      pop edi
:00478448 5E                      pop esi
:00478449 C3                      ret


:0047844A CC                      int 03
:0047844B CC                      int 03
:0047844C CC                      int 03
:0047844D CC                      int 03
:0047844E CC                      int 03
:0047844F CC                      int 03

* Referenced by a CALL at Addresses:
|:0047846B   , :00478B06   
|
:00478450 56                      push esi
:00478451 57                      push edi
:00478452 8B7C2414                mov edi, dword ptr [esp+14]
:00478456 8B74240C                mov esi, dword ptr [esp+0C]
:0047845A 3BFE                    cmp edi, esi
:0047845C 7719                    ja 00478477
:0047845E 8B4C2410                mov ecx, dword ptr [esp+10]
:00478462 57                      push edi
:00478463 51                      push ecx
:00478464 8BC6                    mov eax, esi
:00478466 2BD2                    sub edx, edx
:00478468 F7F7                    div edi
:0047846A 50                      push eax
:0047846B E8E0FFFFFF              call 00478450
:00478470 83C40C                  add esp, 0000000C
:00478473 8BC8                    mov ecx, eax
:00478475 EB04                    jmp 0047847B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047845C(C)
|
:00478477 8B4C2410                mov ecx, dword ptr [esp+10]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478475(U)
|
:0047847B 8BC6                    mov eax, esi
:0047847D 2BD2                    sub edx, edx
:0047847F F7F7                    div edi
:00478481 80C230                  add dl, 30
:00478484 8811                    mov byte ptr [ecx], dl
:00478486 80FA39                  cmp dl, 39
:00478489 7605                    jbe 00478490
:0047848B 80C227                  add dl, 27
:0047848E 8811                    mov byte ptr [ecx], dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478489(C)
|
:00478490 C6410100                mov [ecx+01], 00
:00478494 41                      inc ecx
:00478495 8BC1                    mov eax, ecx
:00478497 5F                      pop edi
:00478498 5E                      pop esi
:00478499 C3                      ret


:0047849A CC                      int 03
:0047849B CC                      int 03
:0047849C CC                      int 03
:0047849D CC                      int 03
:0047849E CC                      int 03
:0047849F CC                      int 03

* Referenced by a CALL at Address:
|:00479391   
|
:004784A0 8B442404                mov eax, dword ptr [esp+04]
:004784A4 3D81000000              cmp eax, 00000081
:004784A9 7207                    jb 004784B2

* Possible Ref to Menu: DBGMENU, Item: ""
                                  |
:004784AB 3D9F000000              cmp eax, 0000009F
:004784B0 760E                    jbe 004784C0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004784A9(C)
|
:004784B2 3DE0000000              cmp eax, 000000E0
:004784B7 720D                    jb 004784C6
:004784B9 3DFC000000              cmp eax, 000000FC
:004784BE 7706                    ja 004784C6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004784B0(C)
|
:004784C0 B801000000              mov eax, 00000001
:004784C5 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004784B7(C), :004784BE(C)
|
:004784C6 33C0                    xor eax, eax
:004784C8 C3                      ret


:004784C9 CC                      int 03
:004784CA CC                      int 03
:004784CB CC                      int 03
:004784CC CC                      int 03
:004784CD CC                      int 03
:004784CE CC                      int 03
:004784CF CC                      int 03

* Referenced by a CALL at Address:
|:0047939E   
|
:004784D0 8B542404                mov edx, dword ptr [esp+04]
:004784D4 8BC2                    mov eax, edx
:004784D6 80EA1F                  sub dl, 1F
:004784D9 C1E808                  shr eax, 08
:004784DC F6C280                  test dl, 80
:004784DF 8D0C4500000000          lea ecx, dword ptr [2*eax+00000000]
:004784E6 750A                    jne 004784F2
:004784E8 80FA61                  cmp dl, 61
:004784EB 7302                    jnb 004784EF
:004784ED FEC2                    inc dl

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004784EB(C)
|
:004784EF 80EA22                  sub dl, 22

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004784E6(C)
|
:004784F2 33C0                    xor eax, eax
:004784F4 8AC1                    mov al, cl
:004784F6 33C9                    xor ecx, ecx
:004784F8 C1E008                  shl eax, 08
:004784FB 8ACA                    mov cl, dl
:004784FD 03C1                    add eax, ecx
:004784FF 05A11F0000              add eax, 00001FA1
:00478504 257F7F0000              and eax, 00007F7F
:00478509 C3                      ret


:0047850A CC                      int 03
:0047850B CC                      int 03
:0047850C CC                      int 03
:0047850D CC                      int 03
:0047850E CC                      int 03
:0047850F CC                      int 03

* Referenced by a CALL at Addresses:
|:00405B33   , :00406B7B   , :0040FA8E   , :0042FB54   , :00430887   
|:00430E04   , :004311B0   , :00431270   , :004312DD   , :0043137D   
|:00435436   , :00438B42   , :00438C69   , :00449E34   , :0045EEA7   
|:00468B18   , :0047855B   , :00478B2D   , :00478D3C   , :00478D49   
|
:00478510 8B542404                mov edx, dword ptr [esp+04]
:00478514 85D2                    test edx, edx
:00478516 7503                    jne 0047851B
:00478518 33C0                    xor eax, eax
:0047851A C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478516(C)
|
:0047851B 33C0                    xor eax, eax
:0047851D 8BCA                    mov ecx, edx
:0047851F 42                      inc edx
:00478520 3801                    cmp byte ptr [ecx], al
:00478522 7409                    je 0047852D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047852B(C)
|
:00478524 40                      inc eax
:00478525 8BCA                    mov ecx, edx
:00478527 42                      inc edx
:00478528 803900                  cmp byte ptr [ecx], 00
:0047852B 75F7                    jne 00478524

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478522(C)
|
:0047852D C3                      ret
:0047852E CC                      int 03
:0047852F CC                      int 03

* Referenced by a CALL at Addresses:
|:004025D6   , :0040E3DB   , :0040E63D   , :0040ED65   , :00411597   
|:0042B8D5   , :004312D1   , :00432023   , :00438B93   , :0045DE8D   
|:0046770F   , :00467813   , :00467826   , :0046B7D7   , :0046B7EA   
|:0046B7FD   , :0046B810   , :0046B823   , :0046B836   , :0046B849   
|:0046D3A4   , :00478566   
|
:00478530 8B4C2404                mov ecx, dword ptr [esp+04]
:00478534 53                      push ebx
:00478535 8BC1                    mov eax, ecx
:00478537 8B54240C                mov edx, dword ptr [esp+0C]
:0047853B 803A00                  cmp byte ptr [edx], 00
:0047853E 740B                    je 0047854B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478549(C)
|
:00478540 8A1A                    mov bl, byte ptr [edx]
:00478542 42                      inc edx
:00478543 8819                    mov byte ptr [ecx], bl
:00478545 41                      inc ecx
:00478546 803A00                  cmp byte ptr [edx], 00
:00478549 75F5                    jne 00478540

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047853E(C)
|
:0047854B 5B                      pop ebx
:0047854C C60100                  mov byte ptr [ecx], 00
:0047854F C3                      ret



* Referenced by a CALL at Addresses:
|:00402653   , :0040391A   , :00403D56   , :00403D67   , :00403D7A   
|:0040E19F   , :0040E1E9   , :0040E209   , :0040E251   , :0040E273   
|:0040E2AD   , :004255AB   , :004255BE   , :00425884   , :00425897   
|:00425F84   , :00425F97   , :0042B96A   , :004311A2   , :0043204B   
|:0043205C   , :00432085   , :00432096   , :00438BCC   , :00438C00   
|:00438C24   , :00438C91   , :00438CB6   , :0046D3CF   
|
:00478550 8B442408                mov eax, dword ptr [esp+08]
:00478554 56                      push esi
:00478555 8B742408                mov esi, dword ptr [esp+08]
:00478559 50                      push eax
:0047855A 56                      push esi
:0047855B E8B0FFFFFF              call 00478510
:00478560 83C404                  add esp, 00000004
:00478563 03C6                    add eax, esi
:00478565 50                      push eax
:00478566 E8C5FFFFFF              call 00478530
:0047856B 83C408                  add esp, 00000008
:0047856E 8BC6                    mov eax, esi
:00478570 5E                      pop esi
:00478571 C3                      ret


:00478572 CC                      int 03
:00478573 CC                      int 03
:00478574 CC                      int 03
:00478575 CC                      int 03
:00478576 CC                      int 03
:00478577 CC                      int 03
:00478578 CC                      int 03
:00478579 CC                      int 03
:0047857A CC                      int 03
:0047857B CC                      int 03
:0047857C CC                      int 03
:0047857D CC                      int 03
:0047857E CC                      int 03
:0047857F CC                      int 03

* Referenced by a CALL at Addresses:
|:00410610   , :00467778   
|
:00478580 8B4C2404                mov ecx, dword ptr [esp+04]
:00478584 53                      push ebx
:00478585 8B44240C                mov eax, dword ptr [esp+0C]
:00478589 803900                  cmp byte ptr [ecx], 00
:0047858C 7427                    je 004785B5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047859D(C)
|
:0047858E 8A18                    mov bl, byte ptr [eax]
:00478590 8A11                    mov dl, byte ptr [ecx]
:00478592 3ADA                    cmp bl, dl
:00478594 7711                    ja 004785A7
:00478596 7216                    jb 004785AE
:00478598 41                      inc ecx
:00478599 40                      inc eax
:0047859A 803900                  cmp byte ptr [ecx], 00
:0047859D 75EF                    jne 0047858E
:0047859F 5B                      pop ebx
:004785A0 803801                  cmp byte ptr [eax], 01
:004785A3 1BC0                    sbb eax, eax
:004785A5 40                      inc eax
:004785A6 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478594(C)
|
:004785A7 B8FFFFFFFF              mov eax, FFFFFFFF
:004785AC 5B                      pop ebx
:004785AD C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478596(C)
|
:004785AE B801000000              mov eax, 00000001
:004785B3 5B                      pop ebx
:004785B4 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047858C(C)
|
:004785B5 5B                      pop ebx
:004785B6 803801                  cmp byte ptr [eax], 01
:004785B9 1BC0                    sbb eax, eax
:004785BB 40                      inc eax
:004785BC C3                      ret


:004785BD CC                      int 03
:004785BE CC                      int 03
:004785BF CC                      int 03

* Referenced by a CALL at Addresses:
|:0040659F   , :0040689B   , :0040E5E3   , :0041A4FB   , :0041A536   
|:0042EB00   , :0043434A   , :004343A6   , :0043464A   , :00442D7A   
|:004431C1   , :0044322E   , :00443262   , :00443459   , :0044348C   
|:004434BC   , :00445CBE   , :00445D02   , :00445D89   , :00445E0D   
|:00445E51   , :00445F77   , :00446001   , :00446042   , :004460C7   
|:00446151   , :00446192   , :004471D4   , :00447264   , :00447643   
|:004476CA   , :0044770B   , :0044B8DB   , :00458A80   , :0045C8B6   
|:0045DF02   , :0045DF1E   , :0045E003   , :0045E01F   , :004601E4   
|:0046BF22   , :0046D71C   
|
:004785C0 8B44240C                mov eax, dword ptr [esp+0C]
:004785C4 8B4C2404                mov ecx, dword ptr [esp+04]
:004785C8 8B542408                mov edx, dword ptr [esp+08]
:004785CC 50                      push eax
:004785CD 51                      push ecx
:004785CE 52                      push edx
:004785CF E8FC9EFFFF              call 004724D0
:004785D4 83C40C                  add esp, 0000000C
:004785D7 C3                      ret


:004785D8 CC                      int 03
:004785D9 CC                      int 03
:004785DA CC                      int 03
:004785DB CC                      int 03
:004785DC CC                      int 03
:004785DD CC                      int 03
:004785DE CC                      int 03
:004785DF CC                      int 03

* Referenced by a CALL at Addresses:
|:00405E6F   , :0040FB12   , :00410097   , :0041A3BB   , :00431252   
|:00439D23   , :00439FD5   , :0043A1BA   , :0043A6B1   , :0043B580   
|:0043B86A   , :0043BB2E   , :0043BD47   , :0043C157   , :0043C29E   
|:0043C446   , :0043C603   , :0043C960   , :0043CAC1   , :0043CDE2   
|:0043D3CE   , :0043DDA7   , :0043E0C4   , :0043E6B4   , :0043F5B0   
|:0043FF08   , :00441D22   , :0044A7A2   , :0044AE8D   , :0044AEB3   
|:0044C8E8   , :0044DE4A   , :00450C2F   , :00450D0F   , :004514CB   
|:00451E5D   , :00452445   , :0045CAC6   
|
:004785E0 8B542408                mov edx, dword ptr [esp+08]
:004785E4 57                      push edi
:004785E5 33C0                    xor eax, eax
:004785E7 8A442410                mov al, byte ptr [esp+10]
:004785EB 8B7C2408                mov edi, dword ptr [esp+08]
:004785EF 8AC8                    mov cl, al
:004785F1 8AE9                    mov ch, cl
:004785F3 8AC8                    mov cl, al
:004785F5 8BC1                    mov eax, ecx
:004785F7 C1E010                  shl eax, 10
:004785FA 668BC1                  mov ax, cx
:004785FD 8BCA                    mov ecx, edx
:004785FF C1E902                  shr ecx, 02
:00478602 F3                      repz
:00478603 AB                      stosd
:00478604 8BCA                    mov ecx, edx
:00478606 83E103                  and ecx, 00000003
:00478609 F3                      repz
:0047860A AA                      stosb
:0047860B 5F                      pop edi
:0047860C C3                      ret


:0047860D CC                      int 03
:0047860E CC                      int 03
:0047860F CC                      int 03

* Referenced by a CALL at Address:
|:00478E28   
|
:00478610 83EC08                  sub esp, 00000008
:00478613 8B442410                mov eax, dword ptr [esp+10]
:00478617 53                      push ebx
:00478618 56                      push esi
:00478619 33DB                    xor ebx, ebx
:0047861B 895C240C                mov dword ptr [esp+0C], ebx
:0047861F 57                      push edi
:00478620 55                      push ebp
:00478621 3818                    cmp byte ptr [eax], bl
:00478623 0F849D020000            je 004788C6
:00478629 8B742424                mov esi, dword ptr [esp+24]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004788C0(C)
|
:0047862D 8B442420                mov eax, dword ptr [esp+20]
:00478631 803825                  cmp byte ptr [eax], 25
:00478634 7416                    je 0047864C
:00478636 33C9                    xor ecx, ecx
:00478638 43                      inc ebx
:00478639 FF442420                inc [esp+20]
:0047863D 8A08                    mov cl, byte ptr [eax]
:0047863F 51                      push ecx
:00478640 FF542420                call [esp+20]
:00478644 83C404                  add esp, 00000004
:00478647 E96D020000              jmp 004788B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478634(C)
|
:0047864C FF442420                inc [esp+20]
:00478650 8B442420                mov eax, dword ptr [esp+20]
:00478654 803825                  cmp byte ptr [eax], 25
:00478657 7516                    jne 0047866F
:00478659 33C9                    xor ecx, ecx
:0047865B 43                      inc ebx
:0047865C FF442420                inc [esp+20]
:00478660 8A08                    mov cl, byte ptr [eax]
:00478662 51                      push ecx
:00478663 FF542420                call [esp+20]
:00478667 83C404                  add esp, 00000004
:0047866A E94A020000              jmp 004788B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478657(C)
|
:0047866F 8D442420                lea eax, dword ptr [esp+20]
:00478673 50                      push eax
:00478674 E8A7020000              call 00478920
:00478679 83C404                  add esp, 00000004
:0047867C 8BF8                    mov edi, eax
:0047867E 8D442420                lea eax, dword ptr [esp+20]
:00478682 50                      push eax
:00478683 E848030000              call 004789D0
:00478688 83C404                  add esp, 00000004
:0047868B 8BE8                    mov ebp, eax
:0047868D 83FDFF                  cmp ebp, FFFFFFFF
:00478690 7505                    jne 00478697
:00478692 8B2E                    mov ebp, dword ptr [esi]
:00478694 83C604                  add esi, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478690(C)
|
:00478697 8D442420                lea eax, dword ptr [esp+20]
:0047869B 50                      push eax
:0047869C E86F030000              call 00478A10
:004786A1 89442414                mov dword ptr [esp+14], eax
:004786A5 83C404                  add esp, 00000004
:004786A8 83F8FF                  cmp eax, FFFFFFFF
:004786AB 7509                    jne 004786B6
:004786AD 8B0E                    mov ecx, dword ptr [esi]
:004786AF 83C604                  add esi, 00000004
:004786B2 894C2410                mov dword ptr [esp+10], ecx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004786AB(C)
|
:004786B6 8D442420                lea eax, dword ptr [esp+20]
:004786BA 50                      push eax
:004786BB E870030000              call 00478A30
:004786C0 8B542424                mov edx, dword ptr [esp+24]
:004786C4 83C404                  add esp, 00000004
:004786C7 33C9                    xor ecx, ecx
:004786C9 FF442420                inc [esp+20]
:004786CD 8A0A                    mov cl, byte ptr [edx]
:004786CF 83E958                  sub ecx, 00000058
:004786D2 83F920                  cmp ecx, 00000020
:004786D5 0F87DE010000            ja 004788B9
:004786DB 33D2                    xor edx, edx
:004786DD 8A91F4884700            mov dl, byte ptr [ecx+004788F4]
:004786E3 FF2495D0884700          jmp dword ptr [4*edx+004788D0]
:004786EA 83C604                  add esi, 00000004
:004786ED 33C0                    xor eax, eax
:004786EF 43                      inc ebx
:004786F0 8A46FC                  mov al, byte ptr [esi-04]
:004786F3 50                      push eax
:004786F4 FF542420                call [esp+20]
:004786F8 83C404                  add esp, 00000004
:004786FB E9B9010000              jmp 004788B9
:00478700 83E7EF                  and edi, FFFFFFEF
:00478703 83F801                  cmp eax, 00000001
:00478706 7531                    jne 00478739
:00478708 8B06                    mov eax, dword ptr [esi]
:0047870A 83C604                  add esi, 00000004
:0047870D 85C0                    test eax, eax
:0047870F 7D08                    jge 00478719
:00478711 F7D8                    neg eax
:00478713 83CF40                  or edi, 00000040
:00478716 83E7FD                  and edi, FFFFFFFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047870F(C)
|
:00478719 8B4C2410                mov ecx, dword ptr [esp+10]
:0047871D 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:0047871F 6A0A                    push 0000000A
:00478721 51                      push ecx
:00478722 55                      push ebp
:00478723 57                      push edi
:00478724 50                      push eax
:00478725 8B442434                mov eax, dword ptr [esp+34]
:00478729 50                      push eax
:0047872A E891030000              call 00478AC0
:0047872F 83C41C                  add esp, 0000001C
:00478732 03D8                    add ebx, eax
:00478734 E980010000              jmp 004788B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478706(C)
|
:00478739 8B06                    mov eax, dword ptr [esi]
:0047873B 83C604                  add esi, 00000004
:0047873E 85C0                    test eax, eax
:00478740 7D08                    jge 0047874A
:00478742 F7D8                    neg eax
:00478744 83CF40                  or edi, 00000040
:00478747 83E7FD                  and edi, FFFFFFFD

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478740(C)
|
:0047874A 8B4C2410                mov ecx, dword ptr [esp+10]
:0047874E 6A00                    push 00000000

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00478750 6A0A                    push 0000000A
:00478752 51                      push ecx
:00478753 55                      push ebp
:00478754 57                      push edi
:00478755 50                      push eax
:00478756 8B442434                mov eax, dword ptr [esp+34]
:0047875A 50                      push eax
:0047875B E860030000              call 00478AC0
:00478760 83C41C                  add esp, 0000001C
:00478763 03D8                    add ebx, eax
:00478765 E94F010000              jmp 004788B9
:0047876A 83E7F5                  and edi, FFFFFFF5
:0047876D 83F801                  cmp eax, 00000001
:00478770 7525                    jne 00478797
:00478772 8B06                    mov eax, dword ptr [esi]
:00478774 83C604                  add esi, 00000004
:00478777 8B4C2410                mov ecx, dword ptr [esp+10]
:0047877B 6A00                    push 00000000
:0047877D 8B542420                mov edx, dword ptr [esp+20]

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00478781 6A08                    push 00000008
:00478783 51                      push ecx
:00478784 55                      push ebp
:00478785 57                      push edi
:00478786 50                      push eax
:00478787 52                      push edx
:00478788 E833030000              call 00478AC0
:0047878D 83C41C                  add esp, 0000001C
:00478790 03D8                    add ebx, eax
:00478792 E922010000              jmp 004788B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478770(C)
|
:00478797 8B06                    mov eax, dword ptr [esi]
:00478799 83C604                  add esi, 00000004
:0047879C 8B4C2410                mov ecx, dword ptr [esp+10]
:004787A0 6A00                    push 00000000
:004787A2 8B542420                mov edx, dword ptr [esp+20]

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004787A6 6A08                    push 00000008
:004787A8 51                      push ecx
:004787A9 55                      push ebp
:004787AA 57                      push edi
:004787AB 50                      push eax
:004787AC 52                      push edx
:004787AD E80E030000              call 00478AC0
:004787B2 83C41C                  add esp, 0000001C
:004787B5 03D8                    add ebx, eax
:004787B7 E9FD000000              jmp 004788B9
:004787BC 83F802                  cmp eax, 00000002
:004787BF 7521                    jne 004787E2
:004787C1 8B06                    mov eax, dword ptr [esi]
:004787C3 83C604                  add esi, 00000004
:004787C6 8B4C2410                mov ecx, dword ptr [esp+10]
:004787CA 8B54241C                mov edx, dword ptr [esp+1C]
:004787CE 51                      push ecx
:004787CF 55                      push ebp
:004787D0 57                      push edi
:004787D1 50                      push eax
:004787D2 52                      push edx
:004787D3 E848050000              call 00478D20
:004787D8 83C414                  add esp, 00000014
:004787DB 03D8                    add ebx, eax
:004787DD E9D7000000              jmp 004788B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004787BF(C)
|
:004787E2 83F803                  cmp eax, 00000003
:004787E5 7521                    jne 00478808
:004787E7 8B06                    mov eax, dword ptr [esi]
:004787E9 83C604                  add esi, 00000004
:004787EC 8B4C2410                mov ecx, dword ptr [esp+10]
:004787F0 8B54241C                mov edx, dword ptr [esp+1C]
:004787F4 51                      push ecx
:004787F5 55                      push ebp
:004787F6 57                      push edi
:004787F7 50                      push eax
:004787F8 52                      push edx
:004787F9 E822050000              call 00478D20
:004787FE 83C414                  add esp, 00000014
:00478801 03D8                    add ebx, eax
:00478803 E9B1000000              jmp 004788B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004787E5(C)
|
:00478808 8B06                    mov eax, dword ptr [esi]
:0047880A 83C604                  add esi, 00000004
:0047880D 8B4C2410                mov ecx, dword ptr [esp+10]
:00478811 8B54241C                mov edx, dword ptr [esp+1C]
:00478815 51                      push ecx
:00478816 55                      push ebp
:00478817 57                      push edi
:00478818 50                      push eax
:00478819 52                      push edx
:0047881A E801050000              call 00478D20
:0047881F 83C414                  add esp, 00000014
:00478822 03D8                    add ebx, eax
:00478824 E990000000              jmp 004788B9
:00478829 83E7EF                  and edi, FFFFFFEF
:0047882C 83F801                  cmp eax, 00000001
:0047882F 7522                    jne 00478853
:00478831 8B06                    mov eax, dword ptr [esi]
:00478833 83C604                  add esi, 00000004
:00478836 8B4C2410                mov ecx, dword ptr [esp+10]
:0047883A 6A00                    push 00000000
:0047883C 8B542420                mov edx, dword ptr [esp+20]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00478840 6A0A                    push 0000000A
:00478842 51                      push ecx
:00478843 55                      push ebp
:00478844 57                      push edi
:00478845 50                      push eax
:00478846 52                      push edx
:00478847 E874020000              call 00478AC0
:0047884C 83C41C                  add esp, 0000001C
:0047884F 03D8                    add ebx, eax
:00478851 EB66                    jmp 004788B9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047882F(C)
|
:00478853 8B06                    mov eax, dword ptr [esi]
:00478855 83C604                  add esi, 00000004
:00478858 8B4C2410                mov ecx, dword ptr [esp+10]
:0047885C 6A00                    push 00000000
:0047885E 8B542420                mov edx, dword ptr [esp+20]

* Possible Reference to Dialog: DialogID_00F2, CONTROL_ID:000A, ""
                                  |

* Possible Reference to String Resource ID=00010: "I"
                                  |
:00478862 6A0A                    push 0000000A
:00478864 51                      push ecx
:00478865 55                      push ebp
:00478866 57                      push edi
:00478867 50                      push eax
:00478868 52                      push edx
:00478869 E852020000              call 00478AC0
:0047886E 83C41C                  add esp, 0000001C
:00478871 03D8                    add ebx, eax
:00478873 EB44                    jmp 004788B9
:00478875 C744241420000000        mov [esp+14], 00000020
:0047887D 83E7F5                  and edi, FFFFFFF5
:00478880 F7C710000000            test edi, 00000010
:00478886 7403                    je 0047888B
:00478888 83CF20                  or edi, 00000020

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478886(C)
|
:0047888B 83F801                  cmp eax, 00000001
:0047888E 8B16                    mov edx, dword ptr [esi]
:00478890 83C604                  add esi, 00000004
:00478893 8B442414                mov eax, dword ptr [esp+14]
:00478897 8B4C2410                mov ecx, dword ptr [esp+10]
:0047889B 50                      push eax
:0047889C 6A10                    push 00000010
:0047889E 8B442424                mov eax, dword ptr [esp+24]
:004788A2 51                      push ecx
:004788A3 55                      push ebp
:004788A4 57                      push edi
:004788A5 52                      push edx
:004788A6 50                      push eax
:004788A7 E814020000              call 00478AC0
:004788AC C744243000000000        mov [esp+30], 00000000
:004788B4 83C41C                  add esp, 0000001C
:004788B7 03D8                    add ebx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00478647(U), :0047866A(U), :004786D5(C), :004786FB(U), :00478734(U)
|:00478765(U), :00478792(U), :004787B7(U), :004787DD(U), :00478803(U)
|:00478824(U), :00478851(U), :00478873(U)
|
:004788B9 8B442420                mov eax, dword ptr [esp+20]
:004788BD 803800                  cmp byte ptr [eax], 00
:004788C0 0F8567FDFFFF            jne 0047862D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478623(C)
|
:004788C6 8BC3                    mov eax, ebx
:004788C8 5D                      pop ebp
:004788C9 5F                      pop edi
:004788CA 5E                      pop esi
:004788CB 5B                      pop ebx
:004788CC 83C408                  add esp, 00000008
:004788CF C3                      ret



:004788D0 7D884700                DWORD 0047887D
:004788D4 EA864700                DWORD 004786EA
:004788D8 00874700                DWORD 00478700
:004788DC 00874700                DWORD 00478700
:004788E0 6A874700                DWORD 0047876A
:004788E4 BC874700                DWORD 004787BC
:004788E8 29884700                DWORD 00478829
:004788EC 75884700                DWORD 00478875
:004788F0 B9884700                DWORD 004788B9


:004788F4 0008                    add byte ptr [eax], cl
:004788F6 0808                    or byte ptr [eax], cl
:004788F8 0808                    or byte ptr [eax], cl
:004788FA 0808                    or byte ptr [eax], cl
:004788FC 0808                    or byte ptr [eax], cl
:004788FE 0801                    or byte ptr [ecx], al
:00478900 0208                    add cl, byte ptr [eax]
:00478902 0808                    or byte ptr [eax], cl
:00478904 0803                    or byte ptr [ebx], al
:00478906 0808                    or byte ptr [eax], cl
:00478908 0808                    or byte ptr [eax], cl
:0047890A 080408                  or byte ptr [eax+ecx], al
:0047890D 0808                    or byte ptr [eax], cl
:0047890F 0508060808              add eax, 08080608
:00478914 07                      pop es
:00478915 CC                      int 03
:00478916 CC                      int 03
:00478917 CC                      int 03
:00478918 CC                      int 03
:00478919 CC                      int 03
:0047891A CC                      int 03
:0047891B CC                      int 03
:0047891C CC                      int 03
:0047891D CC                      int 03
:0047891E CC                      int 03
:0047891F CC                      int 03

* Referenced by a CALL at Address:
|:00478674   
|
:00478920 53                      push ebx
:00478921 33C0                    xor eax, eax
:00478923 8B4C2408                mov ecx, dword ptr [esp+08]
:00478927 56                      push esi
:00478928 57                      push edi
:00478929 33F6                    xor esi, esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478972(C)
|
:0047892B 8B39                    mov edi, dword ptr [ecx]
:0047892D 33D2                    xor edx, edx
:0047892F 8A17                    mov dl, byte ptr [edi]
:00478931 83EA20                  sub edx, 00000020
:00478934 83FA1D                  cmp edx, 0000001D
:00478937 770F                    ja 00478948
:00478939 33DB                    xor ebx, ebx
:0047893B 8A9AA4894700            mov bl, byte ptr [edx+004789A4]
:00478941 FF249D88894700          jmp dword ptr [4*ebx+00478988]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478937(C)
|
:00478948 BE01000000              mov esi, 00000001
:0047894D EB21                    jmp 00478970
:0047894F 83C808                  or eax, 00000008
:00478952 EB19                    jmp 0047896D
:00478954 83C810                  or eax, 00000010
:00478957 EB14                    jmp 0047896D
:00478959 83C802                  or eax, 00000002
:0047895C EB0F                    jmp 0047896D
:0047895E 83C801                  or eax, 00000001
:00478961 EB0A                    jmp 0047896D
:00478963 83C804                  or eax, 00000004
:00478966 EB05                    jmp 0047896D
:00478968 0D80000000              or eax, 00000080

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00478952(U), :00478957(U), :0047895C(U), :00478961(U), :00478966(U)
|
:0047896D 47                      inc edi
:0047896E 8939                    mov dword ptr [ecx], edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047894D(U)
|
:00478970 85F6                    test esi, esi
:00478972 74B7                    je 0047892B
:00478974 A881                    test al, 81
:00478976 7403                    je 0047897B
:00478978 83E0FB                  and eax, FFFFFFFB

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478976(C)
|
:0047897B A802                    test al, 02
:0047897D 7403                    je 00478982
:0047897F 83E0F7                  and eax, FFFFFFF7

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047897D(C)
|
:00478982 5F                      pop edi
:00478983 5E                      pop esi
:00478984 5B                      pop ebx
:00478985 C3                      ret


:00478986 8BFF                    mov edi, edi

:00478988 4F894700                DWORD 0047894F
:0047898C 54894700                DWORD 00478954
:00478990 59894700                DWORD 00478959
:00478994 5E894700                DWORD 0047895E
:00478998 63894700                DWORD 00478963
:0047899C 68894700                DWORD 00478968
:004789A0 48894700                DWORD 00478948


:004789A4 0006                    add byte ptr [esi], al
:004789A6 06                      push es
:004789A7 0106                    add dword ptr [esi], eax
:004789A9 06                      push es
:004789AA 06                      push es
:004789AB 06                      push es
:004789AC 06                      push es
:004789AD 06                      push es
:004789AE 06                      push es
:004789AF 0206                    add al, byte ptr [esi]
:004789B1 0306                    add eax, dword ptr [esi]
:004789B3 06                      push es
:004789B4 0406                    add al, 06
:004789B6 06                      push es
:004789B7 06                      push es
:004789B8 06                      push es
:004789B9 06                      push es
:004789BA 06                      push es
:004789BB 06                      push es
:004789BC 06                      push es
:004789BD 06                      push es
:004789BE 06                      push es
:004789BF 06                      push es
:004789C0 06                      push es
:004789C1 05CCCCCCCC              add eax, CCCCCCCC
:004789C6 CC                      int 03
:004789C7 CC                      int 03
:004789C8 CC                      int 03
:004789C9 CC                      int 03
:004789CA CC                      int 03
:004789CB CC                      int 03
:004789CC CC                      int 03
:004789CD CC                      int 03
:004789CE CC                      int 03
:004789CF CC                      int 03

* Referenced by a CALL at Addresses:
|:00478683   , :00478A21   
|
:004789D0 53                      push ebx
:004789D1 33C0                    xor eax, eax
:004789D3 56                      push esi
:004789D4 8B74240C                mov esi, dword ptr [esp+0C]
:004789D8 8B0E                    mov ecx, dword ptr [esi]
:004789DA 8A11                    mov dl, byte ptr [ecx]
:004789DC 80FA2A                  cmp dl, 2A
:004789DF 750B                    jne 004789EC
:004789E1 41                      inc ecx
:004789E2 B8FFFFFFFF              mov eax, FFFFFFFF
:004789E7 890E                    mov dword ptr [esi], ecx
:004789E9 5E                      pop esi
:004789EA 5B                      pop ebx
:004789EB C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004789DF(C)
|
:004789EC 80FA30                  cmp dl, 30
:004789EF 721C                    jb 00478A0D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478A0B(C)
|
:004789F1 8B0E                    mov ecx, dword ptr [esi]
:004789F3 8A19                    mov bl, byte ptr [ecx]
:004789F5 80FB39                  cmp bl, 39
:004789F8 7713                    ja 00478A0D
:004789FA 33D2                    xor edx, edx
:004789FC 8D0480                  lea eax, dword ptr [eax+4*eax]
:004789FF 8AD3                    mov dl, bl
:00478A01 41                      inc ecx
:00478A02 890E                    mov dword ptr [esi], ecx
:00478A04 8D4442D0                lea eax, dword ptr [edx+2*eax-30]
:00478A08 803930                  cmp byte ptr [ecx], 30
:00478A0B 73E4                    jnb 004789F1

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:004789EF(C), :004789F8(C)
|
:00478A0D 5E                      pop esi
:00478A0E 5B                      pop ebx
:00478A0F C3                      ret



* Referenced by a CALL at Address:
|:0047869C   
|
:00478A10 33C0                    xor eax, eax
:00478A12 8B4C2404                mov ecx, dword ptr [esp+04]
:00478A16 8B11                    mov edx, dword ptr [ecx]
:00478A18 803A2E                  cmp byte ptr [edx], 2E
:00478A1B 750C                    jne 00478A29
:00478A1D 42                      inc edx
:00478A1E 51                      push ecx
:00478A1F 8911                    mov dword ptr [ecx], edx
:00478A21 E8AAFFFFFF              call 004789D0
:00478A26 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478A1B(C)
|
:00478A29 C3                      ret
:00478A2A CC                      int 03
:00478A2B CC                      int 03
:00478A2C CC                      int 03
:00478A2D CC                      int 03
:00478A2E CC                      int 03
:00478A2F CC                      int 03

* Referenced by a CALL at Address:
|:004786BB   
|
:00478A30 53                      push ebx
:00478A31 33C0                    xor eax, eax
:00478A33 8B4C2408                mov ecx, dword ptr [esp+08]
:00478A37 56                      push esi
:00478A38 33D2                    xor edx, edx
:00478A3A 8B31                    mov esi, dword ptr [ecx]
:00478A3C 8A16                    mov dl, byte ptr [esi]
:00478A3E 83EA46                  sub edx, 00000046
:00478A41 83FA26                  cmp edx, 00000026
:00478A44 772D                    ja 00478A73
:00478A46 33DB                    xor ebx, ebx
:00478A48 8A9A8C8A4700            mov bl, byte ptr [edx+00478A8C]
:00478A4E FF249D788A4700          jmp dword ptr [4*ebx+00478A78]

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00478A55 B802000000              mov eax, 00000002
:00478A5A 46                      inc esi
:00478A5B 8931                    mov dword ptr [ecx], esi
:00478A5D 5E                      pop esi
:00478A5E 5B                      pop ebx
:00478A5F C3                      ret



* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00478A60 B803000000              mov eax, 00000003
:00478A65 46                      inc esi
:00478A66 8931                    mov dword ptr [ecx], esi
:00478A68 5E                      pop esi
:00478A69 5B                      pop ebx
:00478A6A C3                      ret


:00478A6B B801000000              mov eax, 00000001
:00478A70 46                      inc esi
:00478A71 8931                    mov dword ptr [ecx], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478A44(C)
|
:00478A73 5E                      pop esi
:00478A74 5B                      pop ebx
:00478A75 C3                      ret


:00478A76 8BFF                    mov edi, edi

:00478A78 558A4700                DWORD 00478A55
:00478A7C 608A4700                DWORD 00478A60
:00478A80 708A4700                DWORD 00478A70
:00478A84 6B8A4700                DWORD 00478A6B
:00478A88 738A4700                DWORD 00478A73


:00478A8C 000404                  add byte ptr [esp+eax], al
:00478A8F 0404                    add al, 04
:00478A91 0404                    add al, 04
:00478A93 0401                    add al, 01
:00478A95 0404                    add al, 04
:00478A97 0404                    add al, 04
:00478A99 0404                    add al, 04
:00478A9B 0404                    add al, 04
:00478A9D 0404                    add al, 04
:00478A9F 0404                    add al, 04
:00478AA1 0404                    add al, 04
:00478AA3 0404                    add al, 04
:00478AA5 0404                    add al, 04
:00478AA7 0404                    add al, 04
:00478AA9 0404                    add al, 04
:00478AAB 0404                    add al, 04
:00478AAD 0402                    add al, 02
:00478AAF 0404                    add al, 04
:00478AB1 0403                    add al, 03
:00478AB3 CC                      int 03
:00478AB4 CC                      int 03
:00478AB5 CC                      int 03
:00478AB6 CC                      int 03
:00478AB7 CC                      int 03
:00478AB8 CC                      int 03
:00478AB9 CC                      int 03
:00478ABA CC                      int 03
:00478ABB CC                      int 03
:00478ABC CC                      int 03
:00478ABD CC                      int 03
:00478ABE CC                      int 03
:00478ABF CC                      int 03

* Referenced by a CALL at Addresses:
|:0047872A   , :0047875B   , :00478788   , :004787AD   , :00478847   
|:00478869   , :004788A7   
|
:00478AC0 83EC18                  sub esp, 00000018
:00478AC3 53                      push ebx
:00478AC4 56                      push esi
:00478AC5 57                      push edi
:00478AC6 33DB                    xor ebx, ebx
:00478AC8 8B742430                mov esi, dword ptr [esp+30]
:00478ACC 55                      push ebp
:00478ACD 33ED                    xor ebp, ebp

* Possible Reference to String Resource ID=00002: "
"
                                  |
:00478ACF F7C602000000            test esi, 00000002
:00478AD5 7402                    je 00478AD9
:00478AD7 B32B                    mov bl, 2B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478AD5(C)
|

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:00478AD9 F7C608000000            test esi, 00000008
:00478ADF 7402                    je 00478AE3
:00478AE1 B320                    mov bl, 20

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478ADF(C)
|
:00478AE3 F7C610000000            test esi, 00000010
:00478AE9 7402                    je 00478AED
:00478AEB B330                    mov bl, 30

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478AE9(C)
|
:00478AED F7C640000000            test esi, 00000040
:00478AF3 7402                    je 00478AF7
:00478AF5 B32D                    mov bl, 2D

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478AF3(C)
|
:00478AF7 8B442440                mov eax, dword ptr [esp+40]
:00478AFB 8D4C241C                lea ecx, dword ptr [esp+1C]
:00478AFF 8B542430                mov edx, dword ptr [esp+30]
:00478B03 50                      push eax
:00478B04 51                      push ecx
:00478B05 52                      push edx
:00478B06 E845F9FFFF              call 00478450
:00478B0B 83C40C                  add esp, 0000000C
:00478B0E 807C241C61              cmp byte ptr [esp+1C], 61
:00478B13 7213                    jb 00478B28
:00478B15 807C241C66              cmp byte ptr [esp+1C], 66
:00478B1A 770C                    ja 00478B28
:00478B1C 837C244400              cmp dword ptr [esp+44], 00000000
:00478B21 7505                    jne 00478B28
:00478B23 806C241C20              sub byte ptr [esp+1C], 20

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00478B13(C), :00478B1A(C), :00478B21(C)
|
:00478B28 8D44241C                lea eax, dword ptr [esp+1C]
:00478B2C 50                      push eax
:00478B2D E8DEF9FFFF              call 00478510
:00478B32 83C404                  add esp, 00000004
:00478B35 8BD6                    mov edx, esi
:00478B37 83E220                  and edx, 00000020
:00478B3A 8B7C243C                mov edi, dword ptr [esp+3C]
:00478B3E C1EA05                  shr edx, 05
:00478B41 80FB01                  cmp bl, 01
:00478B44 1BC9                    sbb ecx, ecx
:00478B46 41                      inc ecx
:00478B47 03D1                    add edx, ecx
:00478B49 3BC7                    cmp eax, edi
:00478B4B 8BC8                    mov ecx, eax
:00478B4D 7F02                    jg 00478B51
:00478B4F 8BCF                    mov ecx, edi

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478B4D(C)
|
:00478B51 03D1                    add edx, ecx
:00478B53 2944243C                sub dword ptr [esp+3C], eax
:00478B57 29542438                sub dword ptr [esp+38], edx
:00478B5B F7C601000000            test esi, 00000001
:00478B61 7447                    je 00478BAA
:00478B63 8B442444                mov eax, dword ptr [esp+44]
:00478B67 8B7C242C                mov edi, dword ptr [esp+2C]
:00478B6B 50                      push eax
:00478B6C 56                      push esi
:00478B6D 53                      push ebx
:00478B6E 57                      push edi
:00478B6F E83C010000              call 00478CB0
:00478B74 8D4C242C                lea ecx, dword ptr [esp+2C]
:00478B78 83C410                  add esp, 00000010
:00478B7B 8BE8                    mov ebp, eax
:00478B7D 8B44243C                mov eax, dword ptr [esp+3C]
:00478B81 50                      push eax
:00478B82 51                      push ecx
:00478B83 57                      push edi
:00478B84 E8E7000000              call 00478C70
:00478B89 8B4C2444                mov ecx, dword ptr [esp+44]
:00478B8D 83C40C                  add esp, 0000000C
:00478B90 03E8                    add ebp, eax
:00478B92 6A20                    push 00000020
:00478B94 51                      push ecx
:00478B95 57                      push edi
:00478B96 E855010000              call 00478CF0
:00478B9B 83C40C                  add esp, 0000000C
:00478B9E 03E8                    add ebp, eax
:00478BA0 8BC5                    mov eax, ebp
:00478BA2 5D                      pop ebp
:00478BA3 5F                      pop edi
:00478BA4 5E                      pop esi
:00478BA5 5B                      pop ebx
:00478BA6 83C418                  add esp, 00000018
:00478BA9 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478B61(C)
|
:00478BAA 8BC6                    mov eax, esi
:00478BAC 83E004                  and eax, 00000004
:00478BAF 89442410                mov dword ptr [esp+10], eax
:00478BB3 7418                    je 00478BCD
:00478BB5 8B442444                mov eax, dword ptr [esp+44]
:00478BB9 8B7C242C                mov edi, dword ptr [esp+2C]
:00478BBD 50                      push eax
:00478BBE 56                      push esi
:00478BBF 53                      push ebx
:00478BC0 57                      push edi
:00478BC1 E8EA000000              call 00478CB0
:00478BC6 83C410                  add esp, 00000010
:00478BC9 8BE8                    mov ebp, eax
:00478BCB EB04                    jmp 00478BD1

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478BB3(C)
|
:00478BCD 8B7C242C                mov edi, dword ptr [esp+2C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478BCB(U)
|
:00478BD1 8B442438                mov eax, dword ptr [esp+38]
:00478BD5 89442414                mov dword ptr [esp+14], eax
:00478BD9 8BC6                    mov eax, esi
:00478BDB 2580000000              and eax, 00000080
:00478BE0 89442418                mov dword ptr [esp+18], eax
:00478BE4 740E                    je 00478BF4
:00478BE6 8B442438                mov eax, dword ptr [esp+38]
:00478BEA 99                      cdq
:00478BEB 2BC2                    sub eax, edx
:00478BED C1F801                  sar eax, 01
:00478BF0 89442414                mov dword ptr [esp+14], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478BE4(C)
|
:00478BF4 837C241001              cmp dword ptr [esp+10], 00000001
:00478BF9 1AC0                    sbb al, al
:00478BFB 8B4C2414                mov ecx, dword ptr [esp+14]
:00478BFF 24F0                    and al, F0
:00478C01 0430                    add al, 30
:00478C03 50                      push eax
:00478C04 51                      push ecx
:00478C05 57                      push edi
:00478C06 E8E5000000              call 00478CF0
:00478C0B 83C40C                  add esp, 0000000C
:00478C0E 03E8                    add ebp, eax
:00478C10 837C241000              cmp dword ptr [esp+10], 00000000
:00478C15 7512                    jne 00478C29
:00478C17 8B442444                mov eax, dword ptr [esp+44]
:00478C1B 50                      push eax
:00478C1C 56                      push esi
:00478C1D 53                      push ebx
:00478C1E 57                      push edi
:00478C1F E88C000000              call 00478CB0
:00478C24 83C410                  add esp, 00000010
:00478C27 03E8                    add ebp, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478C15(C)
|
:00478C29 8B44243C                mov eax, dword ptr [esp+3C]
:00478C2D 8D4C241C                lea ecx, dword ptr [esp+1C]
:00478C31 50                      push eax
:00478C32 51                      push ecx
:00478C33 57                      push edi
:00478C34 E837000000              call 00478C70
:00478C39 83C40C                  add esp, 0000000C
:00478C3C 03E8                    add ebp, eax
:00478C3E 837C241800              cmp dword ptr [esp+18], 00000000
:00478C43 7416                    je 00478C5B
:00478C45 8B442438                mov eax, dword ptr [esp+38]
:00478C49 6A20                    push 00000020
:00478C4B 2B442418                sub eax, dword ptr [esp+18]
:00478C4F 50                      push eax
:00478C50 57                      push edi
:00478C51 E89A000000              call 00478CF0
:00478C56 83C40C                  add esp, 0000000C
:00478C59 03E8                    add ebp, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478C43(C)
|
:00478C5B 8BC5                    mov eax, ebp
:00478C5D 5D                      pop ebp
:00478C5E 5F                      pop edi
:00478C5F 5E                      pop esi
:00478C60 5B                      pop ebx
:00478C61 83C418                  add esp, 00000018
:00478C64 C3                      ret


:00478C65 CC                      int 03
:00478C66 CC                      int 03
:00478C67 CC                      int 03
:00478C68 CC                      int 03
:00478C69 CC                      int 03
:00478C6A CC                      int 03
:00478C6B CC                      int 03
:00478C6C CC                      int 03
:00478C6D CC                      int 03
:00478C6E CC                      int 03
:00478C6F CC                      int 03

* Referenced by a CALL at Addresses:
|:00478B84   , :00478C34   
|
:00478C70 53                      push ebx
:00478C71 56                      push esi
:00478C72 8B742414                mov esi, dword ptr [esp+14]
:00478C76 57                      push edi
:00478C77 8BFE                    mov edi, esi
:00478C79 8B5C2410                mov ebx, dword ptr [esp+10]
:00478C7D 85F6                    test esi, esi
:00478C7F 7E0A                    jle 00478C8B

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478C89(C)
|
:00478C81 6A30                    push 00000030
:00478C83 FFD3                    call ebx
:00478C85 83C404                  add esp, 00000004
:00478C88 4E                      dec esi
:00478C89 75F6                    jne 00478C81

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478C7F(C)
|
:00478C8B 8B742414                mov esi, dword ptr [esp+14]
:00478C8F 803E00                  cmp byte ptr [esi], 00
:00478C92 7412                    je 00478CA6

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478CA4(C)
|
:00478C94 33C0                    xor eax, eax
:00478C96 46                      inc esi
:00478C97 47                      inc edi
:00478C98 8A46FF                  mov al, byte ptr [esi-01]
:00478C9B 50                      push eax
:00478C9C FFD3                    call ebx
:00478C9E 83C404                  add esp, 00000004
:00478CA1 803E00                  cmp byte ptr [esi], 00
:00478CA4 75EE                    jne 00478C94

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478C92(C)
|
:00478CA6 8BC7                    mov eax, edi
:00478CA8 5F                      pop edi
:00478CA9 5E                      pop esi
:00478CAA 5B                      pop ebx
:00478CAB C3                      ret


:00478CAC CC                      int 03
:00478CAD CC                      int 03
:00478CAE CC                      int 03
:00478CAF CC                      int 03

* Referenced by a CALL at Addresses:
|:00478B6F   , :00478BC1   , :00478C1F   
|
:00478CB0 8A442408                mov al, byte ptr [esp+08]
:00478CB4 56                      push esi
:00478CB5 57                      push edi
:00478CB6 33F6                    xor esi, esi
:00478CB8 84C0                    test al, al
:00478CBA 7415                    je 00478CD1
:00478CBC 33C9                    xor ecx, ecx
:00478CBE 8B7C240C                mov edi, dword ptr [esp+0C]
:00478CC2 8AC8                    mov cl, al
:00478CC4 BE01000000              mov esi, 00000001
:00478CC9 51                      push ecx
:00478CCA FFD7                    call edi
:00478CCC 83C404                  add esp, 00000004
:00478CCF EB04                    jmp 00478CD5

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478CBA(C)
|
:00478CD1 8B7C240C                mov edi, dword ptr [esp+0C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478CCF(U)
|
:00478CD5 F644241420              test [esp+14], 20
:00478CDA 740E                    je 00478CEA
:00478CDC 8B442418                mov eax, dword ptr [esp+18]
:00478CE0 46                      inc esi
:00478CE1 83C058                  add eax, 00000058
:00478CE4 50                      push eax
:00478CE5 FFD7                    call edi
:00478CE7 83C404                  add esp, 00000004

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478CDA(C)
|
:00478CEA 8BC6                    mov eax, esi
:00478CEC 5F                      pop edi
:00478CED 5E                      pop esi
:00478CEE C3                      ret


:00478CEF CC                      int 03

* Referenced by a CALL at Addresses:
|:00478B96   , :00478C06   , :00478C51   , :00478DC0   , :00478DEF   
|
:00478CF0 53                      push ebx
:00478CF1 56                      push esi
:00478CF2 57                      push edi
:00478CF3 55                      push ebp
:00478CF4 8B7C2418                mov edi, dword ptr [esp+18]
:00478CF8 8BEF                    mov ebp, edi
:00478CFA 85FF                    test edi, edi
:00478CFC 7E13                    jle 00478D11
:00478CFE 33DB                    xor ebx, ebx
:00478D00 8B742414                mov esi, dword ptr [esp+14]
:00478D04 8A5C241C                mov bl, byte ptr [esp+1C]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478D0F(C)
|
:00478D08 53                      push ebx
:00478D09 FFD6                    call esi
:00478D0B 83C404                  add esp, 00000004
:00478D0E 4F                      dec edi
:00478D0F 75F7                    jne 00478D08

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478CFC(C)
|
:00478D11 8BC5                    mov eax, ebp
:00478D13 5D                      pop ebp
:00478D14 5F                      pop edi
:00478D15 5E                      pop esi
:00478D16 5B                      pop ebx
:00478D17 C3                      ret


:00478D18 CC                      int 03
:00478D19 CC                      int 03
:00478D1A CC                      int 03
:00478D1B CC                      int 03
:00478D1C CC                      int 03
:00478D1D CC                      int 03
:00478D1E CC                      int 03
:00478D1F CC                      int 03

* Referenced by a CALL at Addresses:
|:004787D3   , :004787F9   , :0047881A   
|
:00478D20 83EC0C                  sub esp, 0000000C
:00478D23 C744240000000000        mov [esp], 00000000
:00478D2B 53                      push ebx
:00478D2C 56                      push esi
:00478D2D 57                      push edi
:00478D2E 55                      push ebp
:00478D2F 8B6C2430                mov ebp, dword ptr [esp+30]
:00478D33 8B7C2424                mov edi, dword ptr [esp+24]
:00478D37 85ED                    test ebp, ebp
:00478D39 740D                    je 00478D48
:00478D3B 57                      push edi
:00478D3C E8CFF7FFFF              call 00478510
:00478D41 83C404                  add esp, 00000004
:00478D44 3BC5                    cmp eax, ebp
:00478D46 730B                    jnb 00478D53

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478D39(C)
|
:00478D48 57                      push edi
:00478D49 E8C2F7FFFF              call 00478510
:00478D4E 83C404                  add esp, 00000004
:00478D51 8BE8                    mov ebp, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478D46(C)
|
:00478D53 8B5C242C                mov ebx, dword ptr [esp+2C]
:00478D57 2BDD                    sub ebx, ebp
:00478D59 7902                    jns 00478D5D
:00478D5B 33DB                    xor ebx, ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478D59(C)
|
:00478D5D 8B4C2428                mov ecx, dword ptr [esp+28]
:00478D61 F6C101                  test cl, 01
:00478D64 7424                    je 00478D8A
:00478D66 85ED                    test ebp, ebp
:00478D68 7E18                    jle 00478D82
:00478D6A 8B742420                mov esi, dword ptr [esp+20]
:00478D6E 896C2410                mov dword ptr [esp+10], ebp

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478D7E(C)
|
:00478D72 33C0                    xor eax, eax
:00478D74 8A07                    mov al, byte ptr [edi]
:00478D76 47                      inc edi
:00478D77 50                      push eax
:00478D78 FFD6                    call esi
:00478D7A 83C404                  add esp, 00000004
:00478D7D 4D                      dec ebp
:00478D7E 75F2                    jne 00478D72
:00478D80 EB04                    jmp 00478D86

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478D68(C)
|
:00478D82 8B742420                mov esi, dword ptr [esp+20]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478D80(U)
|
:00478D86 6A20                    push 00000020
:00478D88 EB63                    jmp 00478DED

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478D64(C)
|
:00478D8A 8BC1                    mov eax, ecx
:00478D8C 2580000000              and eax, 00000080
:00478D91 89442418                mov dword ptr [esp+18], eax
:00478D95 740E                    je 00478DA5
:00478D97 8BC3                    mov eax, ebx
:00478D99 99                      cdq
:00478D9A 2BC2                    sub eax, edx
:00478D9C C1F801                  sar eax, 01
:00478D9F 89442414                mov dword ptr [esp+14], eax
:00478DA3 EB04                    jmp 00478DA9

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478D95(C)
|
:00478DA5 895C2414                mov dword ptr [esp+14], ebx

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478DA3(U)
|
:00478DA9 83E104                  and ecx, 00000004
:00478DAC 83F901                  cmp ecx, 00000001
:00478DAF 8B4C2414                mov ecx, dword ptr [esp+14]
:00478DB3 1AC0                    sbb al, al
:00478DB5 8B742420                mov esi, dword ptr [esp+20]
:00478DB9 24F0                    and al, F0
:00478DBB 0430                    add al, 30
:00478DBD 50                      push eax
:00478DBE 51                      push ecx
:00478DBF 56                      push esi
:00478DC0 E82BFFFFFF              call 00478CF0
:00478DC5 83C40C                  add esp, 0000000C
:00478DC8 03C5                    add eax, ebp
:00478DCA 85ED                    test ebp, ebp
:00478DCC 89442410                mov dword ptr [esp+10], eax
:00478DD0 7E0E                    jle 00478DE0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478DDE(C)
|
:00478DD2 33C0                    xor eax, eax
:00478DD4 8A07                    mov al, byte ptr [edi]
:00478DD6 47                      inc edi
:00478DD7 50                      push eax
:00478DD8 FFD6                    call esi
:00478DDA 83C404                  add esp, 00000004
:00478DDD 4D                      dec ebp
:00478DDE 75F2                    jne 00478DD2

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478DD0(C)
|
:00478DE0 837C241800              cmp dword ptr [esp+18], 00000000
:00478DE5 7414                    je 00478DFB
:00478DE7 2B5C2414                sub ebx, dword ptr [esp+14]
:00478DEB 6A20                    push 00000020

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478D88(U)
|
:00478DED 53                      push ebx
:00478DEE 56                      push esi
:00478DEF E8FCFEFFFF              call 00478CF0
:00478DF4 0144241C                add dword ptr [esp+1C], eax
:00478DF8 83C40C                  add esp, 0000000C

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478DE5(C)
|
:00478DFB 8B442410                mov eax, dword ptr [esp+10]
:00478DFF 5D                      pop ebp
:00478E00 5F                      pop edi
:00478E01 5E                      pop esi
:00478E02 5B                      pop ebx
:00478E03 83C40C                  add esp, 0000000C
:00478E06 C3                      ret


:00478E07 CC                      int 03
:00478E08 CC                      int 03
:00478E09 CC                      int 03
:00478E0A CC                      int 03
:00478E0B CC                      int 03
:00478E0C CC                      int 03
:00478E0D CC                      int 03
:00478E0E CC                      int 03
:00478E0F CC                      int 03

* Referenced by a CALL at Addresses:
|:0046D17C   , :0046D1A6   , :0046D1D0   , :0046D1FA   , :0046D224   
|:0046D24E   , :0046D278   , :0046D2A4   , :0046D2D8   
|
:00478E10 8B442404                mov eax, dword ptr [esp+04]
:00478E14 8D4C240C                lea ecx, dword ptr [esp+0C]
:00478E18 8B542408                mov edx, dword ptr [esp+08]
:00478E1C 51                      push ecx
:00478E1D 52                      push edx
:00478E1E A318BC4B00              mov dword ptr [004BBC18], eax
:00478E23 68408E4700              push 00478E40
:00478E28 E8E3F7FFFF              call 00478610
:00478E2D 83C40C                  add esp, 0000000C
:00478E30 8B0D18BC4B00            mov ecx, dword ptr [004BBC18]
:00478E36 C60100                  mov byte ptr [ecx], 00
:00478E39 C3                      ret


:00478E3A CC                      int 03
:00478E3B CC                      int 03
:00478E3C CC                      int 03
:00478E3D CC                      int 03
:00478E3E CC                      int 03
:00478E3F CC                      int 03
:00478E40 A118BC4B00              mov eax, dword ptr [004BBC18]
:00478E45 8A4C2404                mov cl, byte ptr [esp+04]
:00478E49 8808                    mov byte ptr [eax], cl
:00478E4B FF0518BC4B00            inc dword ptr [004BBC18]
:00478E51 C3                      ret


:00478E52 CC                      int 03
:00478E53 CC                      int 03
:00478E54 CC                      int 03
:00478E55 CC                      int 03
:00478E56 CC                      int 03
:00478E57 CC                      int 03
:00478E58 CC                      int 03
:00478E59 CC                      int 03
:00478E5A CC                      int 03
:00478E5B CC                      int 03
:00478E5C CC                      int 03
:00478E5D CC                      int 03
:00478E5E CC                      int 03
:00478E5F CC                      int 03

* Referenced by a CALL at Address:
|:0047904D   
|
:00478E60 C70530BC4B0000000000    mov dword ptr [004BBC30], 00000000
:00478E6A 33C0                    xor eax, eax
:00478E6C C3                      ret


:00478E6D CC                      int 03
:00478E6E CC                      int 03
:00478E6F CC                      int 03

* Referenced by a CALL at Addresses:
|:00478F14   , :00479110   
|
:00478E70 C3                      ret
:00478E71 CC                      int 03
:00478E72 CC                      int 03
:00478E73 CC                      int 03
:00478E74 CC                      int 03
:00478E75 CC                      int 03
:00478E76 CC                      int 03
:00478E77 CC                      int 03
:00478E78 CC                      int 03
:00478E79 CC                      int 03
:00478E7A CC                      int 03
:00478E7B CC                      int 03
:00478E7C CC                      int 03
:00478E7D CC                      int 03
:00478E7E CC                      int 03
:00478E7F CC                      int 03

* Referenced by a CALL at Address:
|:00478F69   
|
:00478E80 33C0                    xor eax, eax
:00478E82 C20800                  ret 0008


:00478E85 CC                      int 03
:00478E86 CC                      int 03
:00478E87 CC                      int 03
:00478E88 CC                      int 03
:00478E89 CC                      int 03
:00478E8A CC                      int 03
:00478E8B CC                      int 03
:00478E8C CC                      int 03
:00478E8D CC                      int 03
:00478E8E CC                      int 03
:00478E8F CC                      int 03

* Referenced by a CALL at Addresses:
|:00420D11   , :00420D22   , :00420D33   , :00420D44   , :0042DF94   
|:0042DFB4   , :0042DFD4   , :0042EC14   , :0042EC36   , :0042EC58   
|:0042EC7F   , :0042ECA1   , :0042ECC3   , :0042ECE5   , :0042ED07   
|:0042ED29   , :0042ED4B   , :00432A3E   , :004588AC   , :004588CF   
|
:00478E90 56                      push esi
:00478E91 8BF1                    mov esi, ecx
:00478E93 80791000                cmp byte ptr [ecx+10], 00
:00478E97 7406                    je 00478E9F
:00478E99 33C0                    xor eax, eax
:00478E9B 5E                      pop esi
:00478E9C C20800                  ret 0008



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478E97(C)
|
:00478E9F 8B442408                mov eax, dword ptr [esp+08]
:00478EA3 8B4C240C                mov ecx, dword ptr [esp+0C]
:00478EA7 F6C107                  test cl, 07
:00478EAA 894604                  mov dword ptr [esi+04], eax
:00478EAD 7427                    je 00478ED6
:00478EAF 50                      push eax
:00478EB0 6A00                    push 00000000

* Reference To: KERNEL32.GlobalAlloc, Ord:0155h
                                  |
:00478EB2 FF15F0D44B00            Call dword ptr [004BD4F0]
:00478EB8 894608                  mov dword ptr [esi+08], eax
:00478EBB 85C0                    test eax, eax
:00478EBD 7417                    je 00478ED6
:00478EBF 50                      push eax

* Reference To: KERNEL32.GlobalLock, Ord:0160h
                                  |
:00478EC0 FF15F4D44B00            Call dword ptr [004BD4F4]
:00478EC6 C6461001                mov [esi+10], 01
:00478ECA 89460C                  mov dword ptr [esi+0C], eax
:00478ECD B801000000              mov eax, 00000001
:00478ED2 5E                      pop esi
:00478ED3 C20800                  ret 0008



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00478EAD(C), :00478EBD(C)
|
:00478ED6 33C0                    xor eax, eax
:00478ED8 5E                      pop esi
:00478ED9 C20800                  ret 0008


:00478EDC CC                      int 03
:00478EDD CC                      int 03
:00478EDE CC                      int 03
:00478EDF CC                      int 03

* Referenced by a CALL at Addresses:
|:00420C16   , :00420C20   , :00420C2A   , :00420C34   , :0042DFED   
|:0042E00D   , :0042E02D   , :0042EB3C   , :0042EB46   , :0042EB50   
|:0042EB5F   , :0042EB69   , :0042EB73   , :0042EB7D   , :0042EB87   
|:0042EB96   , :0042EBA0   , :00432C8F   , :004588F9   , :00458904   
|
:00478EE0 56                      push esi
:00478EE1 33C0                    xor eax, eax
:00478EE3 8A4110                  mov al, byte ptr [ecx+10]
:00478EE6 8BF1                    mov esi, ecx
:00478EE8 83F801                  cmp eax, 00000001
:00478EEB 740B                    je 00478EF8
:00478EED 83F802                  cmp eax, 00000002
:00478EF0 7420                    je 00478F12
:00478EF2 C6461000                mov [esi+10], 00
:00478EF6 5E                      pop esi
:00478EF7 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478EEB(C)
|
:00478EF8 8B4608                  mov eax, dword ptr [esi+08]
:00478EFB 50                      push eax

* Reference To: KERNEL32.GlobalUnlock, Ord:0166h
                                  |
:00478EFC FF1504D54B00            Call dword ptr [004BD504]
:00478F02 8B4E08                  mov ecx, dword ptr [esi+08]
:00478F05 51                      push ecx

* Reference To: KERNEL32.GlobalFree, Ord:015Ch
                                  |
:00478F06 FF15FCD44B00            Call dword ptr [004BD4FC]
:00478F0C C6461000                mov [esi+10], 00
:00478F10 5E                      pop esi
:00478F11 C3                      ret



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478EF0(C)
|
:00478F12 8BCE                    mov ecx, esi
:00478F14 E857FFFFFF              call 00478E70
:00478F19 C6461000                mov [esi+10], 00
:00478F1D 5E                      pop esi
:00478F1E C3                      ret


:00478F1F CC                      int 03

* Referenced by a CALL at Address:
|:00478FC9   
|
:00478F20 83EC08                  sub esp, 00000008
:00478F23 894C2400                mov dword ptr [esp], ecx
:00478F27 53                      push ebx
:00478F28 56                      push esi
:00478F29 33DB                    xor ebx, ebx
:00478F2B 8B742418                mov esi, dword ptr [esp+18]
:00478F2F 57                      push edi
:00478F30 8B7C2418                mov edi, dword ptr [esp+18]
:00478F34 55                      push ebp
:00478F35 89742414                mov dword ptr [esp+14], esi
:00478F39 81FF00400000            cmp edi, 00004000
:00478F3F 720C                    jb 00478F4D
:00478F41 8BC7                    mov eax, edi
:00478F43 C1E80E                  shr eax, 0E
:00478F46 8BD8                    mov ebx, eax
:00478F48 C1E00E                  shl eax, 0E
:00478F4B 2BF8                    sub edi, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478F3F(C)
|
:00478F4D 8B6C2424                mov ebp, dword ptr [esp+24]
:00478F51 8BC5                    mov eax, ebp
:00478F53 4D                      dec ebp
:00478F54 85C0                    test eax, eax
:00478F56 741D                    je 00478F75

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478F73(C)
|
:00478F58 83FE04                  cmp esi, 00000004
:00478F5B 7D18                    jge 00478F75
:00478F5D 56                      push esi
:00478F5E 8BCE                    mov ecx, esi
:00478F60 53                      push ebx
:00478F61 46                      inc esi
:00478F62 8BC3                    mov eax, ebx
:00478F64 8B4C2418                mov ecx, dword ptr [esp+18]
:00478F68 43                      inc ebx
:00478F69 E812FFFFFF              call 00478E80
:00478F6E 8BCD                    mov ecx, ebp
:00478F70 4D                      dec ebp
:00478F71 85C9                    test ecx, ecx
:00478F73 75E3                    jne 00478F58

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00478F56(C), :00478F5B(C)
|
:00478F75 8B442414                mov eax, dword ptr [esp+14]
:00478F79 50                      push eax
:00478F7A E8D1020000              call 00479250
:00478F7F 83C404                  add esp, 00000004
:00478F82 03C7                    add eax, edi
:00478F84 5D                      pop ebp
:00478F85 5F                      pop edi
:00478F86 5E                      pop esi
:00478F87 5B                      pop ebx
:00478F88 83C408                  add esp, 00000008
:00478F8B C20C00                  ret 000C


:00478F8E CC                      int 03
:00478F8F CC                      int 03

* Referenced by a CALL at Addresses:
|:0040FAFF   , :0040FED0   , :004104D1   , :004118F9   , :00411934   
|:0041196D   , :0041A3B5   , :0041A3EC   , :0041A4C5   , :0041A4F5   
|:0041A52B   , :0041A977   , :0041AA7D   , :0041AC7C   , :0041AF4D   
|:0041BE82   , :0041C118   , :0041C4B1   , :0041C7C9   , :0041CEC1   
|:0041D20C   , :0041E681   , :0041ED0D   , :0041ED75   , :0041FFB7   
|:004200DF   , :004217B3   , :00421817   , :0042431A   , :0042652C   
|:0042657D   , :004265BC   , :004265D8   , :00428956   , :00428982   
|:00428A14   , :00428A39   , :00428A4A   , :00428A6F   , :00428B3E   
|:00428B6C   , :004290D4   , :004290E5   , :00429170   , :00429181   
|:0042921F   , :00429249   , :00429435   , :0042A513   , :0042A6B1   
|:0042A700   , :0042A71C   , :0042A738   , :0042AB34   , :0042AB7F   
|:0042BBC6   , :0042BC15   , :0042BE82   , :0042BED1   , :0042BEED   
|:0042BF09   , :0042C2AD   , :0042C61D   , :0042C822   , :0042CDBF   
|:0042CDF3   , :0042CE29   , :0042CE65   , :0042CE93   , :0042CECC   
|:0042CF69   , :0042CFBD   , :0042CFDD   , :0042D062   , :0042D0B6   
|:0042D0D6   , :0042D15B   , :0042D1AF   , :0042D1CF   , :0042D1EF   
|:0042E305   , :0042EAE9   , :0042EAFA   , :0042FF26   , :0042FFA9   
|:0042FFEF   , :0043003E   , :00430059   , :00432B84   , :00432BED   
|:00432C23   , :00432C6C   , :00434313   , :0043436F   , :004344CE   
|:004345FE   , :00434639   , :004350F9   , :004358E0   , :004360E3   
|:0043645C   , :00436789   , :0044120A   , :00441D1C   , :004420C3   
|:0044218B   , :0044235E   , :004423F8   , :0044256B   , :00442682   
|:004429D1   , :00442A7D   , :00442AD1   , :00442B86   , :00442BDA   
|:00442CEE   , :00442D25   , :00442D39   , :00442D60   , :00442D74   
|:00442E40   , :00442F2D   , :00442F63   , :00443123   , :004431A5   
|:004431DC   , :00443212   , :00443246   , :004433AB   , :004433E1   
|:00443402   , :00443441   , :004434A4   , :00444FDA   , :004459F5   
|:00445B5E   , :00445C92   , :00445CB4   , :00445CD6   , :00445CF8   
|:00445D1A   , :00445D32   , :00445D5D   , :00445D7F   , :00445DD6   
|:00445E03   , :00445E25   , :00445E47   , :00445E69   , :00445E8C   
|:00445EB7   , :00445ECF   , :00445F4B   , :00445F6D   , :00445F8F   
|:00445FA7   , :00445FD5   , :00445FF7   , :00446016   , :00446038   
|:0044609B   , :004460BD   , :004460DF   , :004460F7   , :00446125   
|:00446147   , :00446166   , :00446188   , :0044696D   , :004469FC   
|:00446A12   , :00446B94   , :00446E6A   , :00446F7B   , :0044709C   
|:00447168   , :00447180   , :004471A8   , :004471C5   , :004471F5   
|:0044720D   , :00447238   , :00447255   , :00447509   , :00447617   
|:00447634   , :0044765B   , :00447673   , :0044769E   , :004476BB   
|:004476DF   , :004476FC   , :00447864   , :004478EA   , :00447900   
|:00448215   , :0044826C   , :0044829C   , :004482DE   , :0044831D   
|:0044835C   , :004483B6   , :0044859A   , :00448641   , :004486A4   
|:004486EC   , :00448729   , :0044876D   , :0044879A   , :004487D2   
|:00448879   , :004488A5   , :004488E2   , :00448916   , :00448942   
|:00448998   , :00448BAF   , :00448BF0   , :00448C4B   , :00448C77   
|:00448CCC   , :00448D97   , :00448EED   , :00449044   , :0044919B   
|:00449293   , :004492FC   , :00449326   , :00449352   , :00449383   
|:004493AD   , :004493D9   , :004494C1   , :00449523   , :0044955F   
|:00449594   , :004495CF   , :00449649   , :00449675   , :004496C5   
|:00449813   , :00449852   , :004498AB   , :004498D5   , :00449928   
|:0044A1F5   , :0044A3B1   , :0044A3E5   , :0044A4FE   , :0044A61D   
|:0044A979   , :0044AE87   , :0044AEAD   , :0044B057   , :0044B06D   
|:0044B0CE   , :0044B0EB   , :0044B108   , :0044B16C   , :0044B65D   
|:0044B687   , :0044B7CA   , :0044B88F   , :0044BCD8   , :0044C7CE   
|:0044D13F   , :0044D79E   , :0044DE44   , :0044DF9B   , :0044F0FF   
|:0044F815   , :0044F88D   , :0044FA0C   , :004508EB   , :00450925   
|:0045096A   , :00450D04   , :00450E23   , :00450ECC   , :00450F16   
|:004514C5   , :00451507   , :0045191F   , :0045198C   , :00451A4A   
|:00451C54   , :00451DCD   , :00451E70   , :004521B4   , :004521D1   
|:0045231B   , :0045233D   , :00452369   , :0045243A   , :00455702   
|:0045579B   , :00456881   , :00458077   , :00458272   , :00458A66   
|:00458A7A   , :004590F2   , :004591DE   , :00459220   , :004594BC   
|:004598A9   , :0045A279   , :0045A4CC   , :0045C589   , :0045C63D   
|:0045C77B   , :0045C843   , :0045C866   , :0045C89F   , :0045C8B0   
|:0045CAC0   , :0045DE37   , :0045DEFC   , :0045DF82   , :0045DFF9   
|:0045FF66   , :0046002C   , :0046007B   , :00460168   , :00467F23   
|:00467F55   , :00467F87   , :00467FB9   , :00467FF0   , :00468022   
|:00468054   , :00468086   , :0046822D   , :0046827D   , :004682B5   
|:00468485   , :0046856C   , :0046895F   , :00468A1D   , :00468A90   
|:00468AC6   , :00468B81   , :00468BCE   , :00468C00   , :00468DD4   
|:00468E21   , :00468E53   , :0046BD4C   , :0046BD88   , :0046BEEC   
|:0046BF1C   , :0046BF57   
|
:00478F90 8B4104                  mov eax, dword ptr [ecx+04]
:00478F93 8B542404                mov edx, dword ptr [esp+04]
:00478F97 3BD0                    cmp edx, eax
:00478F99 7602                    jbe 00478F9D
:00478F9B 8BD0                    mov edx, eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478F99(C)
|
:00478F9D 33C0                    xor eax, eax
:00478F9F 8A4110                  mov al, byte ptr [ecx+10]
:00478FA2 83F801                  cmp eax, 00000001
:00478FA5 740F                    je 00478FB6
:00478FA7 83F802                  cmp eax, 00000002
:00478FAA 7412                    je 00478FBE
:00478FAC 83F804                  cmp eax, 00000004
:00478FAF 7405                    je 00478FB6
:00478FB1 33C0                    xor eax, eax
:00478FB3 C20C00                  ret 000C



* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00478FA5(C), :00478FAF(C)
|
:00478FB6 8B410C                  mov eax, dword ptr [ecx+0C]
:00478FB9 03C2                    add eax, edx
:00478FBB C20C00                  ret 000C



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00478FAA(C)
|
:00478FBE 8B44240C                mov eax, dword ptr [esp+0C]
:00478FC2 50                      push eax
:00478FC3 8B44240C                mov eax, dword ptr [esp+0C]
:00478FC7 50                      push eax
:00478FC8 52                      push edx
:00478FC9 E852FFFFFF              call 00478F20
:00478FCE C20C00                  ret 000C


:00478FD1 CC                      int 03
:00478FD2 CC                      int 03
:00478FD3 CC                      int 03
:00478FD4 CC                      int 03
:00478FD5 CC                      int 03
:00478FD6 CC                      int 03
:00478FD7 CC                      int 03
:00478FD8 CC                      int 03
:00478FD9 CC                      int 03
:00478FDA CC                      int 03
:00478FDB CC                      int 03
:00478FDC CC                      int 03
:00478FDD CC                      int 03
:00478FDE CC                      int 03
:00478FDF CC                      int 03

* Referenced by a CALL at Address:
|:004792DA   
|
:00478FE0 8B442404                mov eax, dword ptr [esp+04]
:00478FE4 8901                    mov dword ptr [ecx], eax
:00478FE6 894104                  mov dword ptr [ecx+04], eax
:00478FE9 8BC1                    mov eax, ecx
:00478FEB C20400                  ret 0004


:00478FEE CC                      int 03
:00478FEF CC                      int 03

* Referenced by a CALL at Address:
|:0042F465   
|

* Possible Reference to String Resource ID=00006: ""
                                  |
:00478FF0 C70590BC4B0006000000    mov dword ptr [004BBC90], 00000006
:00478FFA 56                      push esi
:00478FFB E842C6FFFF              call 00475642
:00479000 85C0                    test eax, eax
:00479002 7519                    jne 0047901D
:00479004 B998BC4B00              mov ecx, 004BBC98
:00479009 E8A2020000              call 004792B0
:0047900E A190BC4B00              mov eax, dword ptr [004BBC90]
:00479013 0D00080000              or eax, 00000800
:00479018 A390BC4B00              mov dword ptr [004BBC90], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00479002(C)
|
:0047901D E83E020000              call 00479260
:00479022 85C0                    test eax, eax
:00479024 740F                    je 00479035
:00479026 A190BC4B00              mov eax, dword ptr [004BBC90]
:0047902B 0D00040000              or eax, 00000400
:00479030 A390BC4B00              mov dword ptr [004BBC90], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00479024(C)
|
:00479035 E808C6FFFF              call 00475642
:0047903A 85C0                    test eax, eax
:0047903C 750F                    jne 0047904D
:0047903E A190BC4B00              mov eax, dword ptr [004BBC90]
:00479043 0D00020000              or eax, 00000200
:00479048 A390BC4B00              mov dword ptr [004BBC90], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047903C(C)
|
:0047904D E80EFEFFFF              call 00478E60
:00479052 85C0                    test eax, eax
:00479054 A190BC4B00              mov eax, dword ptr [004BBC90]
:00479059 7405                    je 00479060
:0047905B 0D00100000              or eax, 00001000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00479059(C)
|
:00479060 83C810                  or eax, 00000010
:00479063 BE01000000              mov esi, 00000001
:00479068 C70558BC4B0000000000    mov dword ptr [004BBC58], 00000000
:00479072 A390BC4B00              mov dword ptr [004BBC90], eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047909D(C)
|
:00479077 56                      push esi
:00479078 E863010000              call 004791E0
:0047907D 83C404                  add esp, 00000004
:00479080 833D58BC4B0000          cmp dword ptr [004BBC58], 00000000
:00479087 750A                    jne 00479093
:00479089 85C0                    test eax, eax
:0047908B 7506                    jne 00479093
:0047908D 893558BC4B00            mov dword ptr [004BBC58], esi

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00479087(C), :0047908B(C)
|
:00479093 888668BC4B00            mov byte ptr [esi+004BBC68], al
:00479099 46                      inc esi
:0047909A 83FE1A                  cmp esi, 0000001A
:0047909D 7ED8                    jle 00479077
:0047909F 33F6                    xor esi, esi
:004790A1 E80A010000              call 004791B0
:004790A6 8A8068BC4B00            mov al, byte ptr [eax+004BBC68]
:004790AC 6860914700              push 00479160
:004790B1 A268BC4B00              mov byte ptr [004BBC68], al
:004790B6 893588BC4B00            mov dword ptr [004BBC88], esi
:004790BC E86F97FFFF              call 00472830
:004790C1 83C404                  add esp, 00000004
:004790C4 A360BC4B00              mov dword ptr [004BBC60], eax
:004790C9 89358CBC4B00            mov dword ptr [004BBC8C], esi
:004790CF 893584BC4B00            mov dword ptr [004BBC84], esi
:004790D5 6880914700              push 00479180
:004790DA E871010000              call 00479250
:004790DF 83C404                  add esp, 00000004
:004790E2 85C0                    test eax, eax
:004790E4 A190BC4B00              mov eax, dword ptr [004BBC90]
:004790E9 7405                    je 004790F0
:004790EB 0D00200000              or eax, 00002000

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004790E9(C)
|
:004790F0 5E                      pop esi
:004790F1 A390BC4B00              mov dword ptr [004BBC90], eax
:004790F6 25000E0000              and eax, 00000E00
:004790FB 2D000E0000              sub eax, 00000E00
:00479100 83F801                  cmp eax, 00000001
:00479103 1BC0                    sbb eax, eax
:00479105 F7D8                    neg eax
:00479107 C3                      ret


:00479108 CC                      int 03
:00479109 CC                      int 03
:0047910A CC                      int 03
:0047910B CC                      int 03
:0047910C CC                      int 03
:0047910D CC                      int 03
:0047910E CC                      int 03
:0047910F CC                      int 03

* Referenced by a CALL at Addresses:
|:0042EBFE   , :0042EF02   
|
:00479110 E85BFDFFFF              call 00478E70
:00479115 A160BC4B00              mov eax, dword ptr [004BBC60]
:0047911A 50                      push eax
:0047911B E81097FFFF              call 00472830
:00479120 83C404                  add esp, 00000004
:00479123 A190BC4B00              mov eax, dword ptr [004BBC90]
:00479128 F6C404                  test ah, 04
:0047912B 740A                    je 00479137
:0047912D E81E010000              call 00479250
:00479132 A190BC4B00              mov eax, dword ptr [004BBC90]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047912B(C)
|
:00479137 F6C408                  test ah, 08
:0047913A 7411                    je 0047914D
:0047913C E82BCDFFFF              call 00475E6C
:00479141 837C240800              cmp dword ptr [esp+08], 00000000
:00479146 7405                    je 0047914D
:00479148 E8E6CAFFFF              call 00475C33

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:0047913A(C), :00479146(C)
|
:0047914D 8B442404                mov eax, dword ptr [esp+04]
:00479151 50                      push eax
:00479152 E83FEBFFFF              call 00477C96
:00479157 83C404                  add esp, 00000004
:0047915A C20800                  ret 0008


:0047915D CC                      int 03
:0047915E CC                      int 03
:0047915F CC                      int 03
:00479160 A188BC4B00              mov eax, dword ptr [004BBC88]
:00479165 85C0                    test eax, eax
:00479167 7402                    je 0047916B
:00479169 FFD0                    call eax

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00479167(C)
|
:0047916B B801000000              mov eax, 00000001
:00479170 C3                      ret


:00479171 CC                      int 03
:00479172 CC                      int 03
:00479173 CC                      int 03
:00479174 CC                      int 03
:00479175 CC                      int 03
:00479176 CC                      int 03
:00479177 CC                      int 03
:00479178 CC                      int 03
:00479179 CC                      int 03
:0047917A CC                      int 03
:0047917B CC                      int 03
:0047917C CC                      int 03
:0047917D CC                      int 03
:0047917E CC                      int 03
:0047917F CC                      int 03
:00479180 FF058CBC4B00            inc dword ptr [004BBC8C]
:00479186 C3                      ret


:00479187 CC                      int 03
:00479188 CC                      int 03
:00479189 CC                      int 03
:0047918A CC                      int 03
:0047918B CC                      int 03
:0047918C CC                      int 03
:0047918D CC                      int 03
:0047918E CC                      int 03
:0047918F CC                      int 03
:00479190 E90B000000              jmp 004791A0
:00479195 CC                      int 03
:00479196 CC                      int 03
:00479197 CC                      int 03
:00479198 CC                      int 03
:00479199 CC                      int 03
:0047919A CC                      int 03
:0047919B CC                      int 03
:0047919C CC                      int 03
:0047919D CC                      int 03
:0047919E CC                      int 03
:0047919F CC                      int 03

* Referenced by a (U)nconditional or (C)onditional Jump at Addresses:
|:00479190(U), :00479270(U), :00479280(U), :00479290(U), :004792A0(U)
|
:004791A0 C3                      ret
:004791A1 CC                      int 03
:004791A2 CC                      int 03
:004791A3 CC                      int 03
:004791A4 CC                      int 03
:004791A5 CC                      int 03
:004791A6 CC                      int 03
:004791A7 CC                      int 03
:004791A8 CC                      int 03
:004791A9 CC                      int 03
:004791AA CC                      int 03
:004791AB CC                      int 03
:004791AC CC                      int 03
:004791AD CC                      int 03
:004791AE CC                      int 03
:004791AF CC                      int 03

* Referenced by a CALL at Address:
|:004790A1   
|
:004791B0 81EC00010000            sub esp, 00000100
:004791B6 8D442400                lea eax, dword ptr [esp]
:004791BA 50                      push eax
:004791BB 6800010000              push 00000100

* Reference To: KERNEL32.GetCurrentDirectoryA, Ord:00D1h
                                  |
:004791C0 FF15E4D44B00            Call dword ptr [004BD4E4]
:004791C6 8A4C2400                mov cl, byte ptr [esp]
:004791CA 33C0                    xor eax, eax
:004791CC 80C920                  or cl, 20
:004791CF 81C400010000            add esp, 00000100
:004791D5 8AC1                    mov al, cl
:004791D7 83E860                  sub eax, 00000060
:004791DA C3                      ret


:004791DB CC                      int 03
:004791DC CC                      int 03
:004791DD CC                      int 03
:004791DE CC                      int 03
:004791DF CC                      int 03

* Referenced by a CALL at Address:
|:00479078   
|
:004791E0 83EC04                  sub esp, 00000004
:004791E3 A1804B4800              mov eax, dword ptr [00484B80]
:004791E8 89442400                mov dword ptr [esp], eax
:004791EC 8B442408                mov eax, dword ptr [esp+08]
:004791F0 83F801                  cmp eax, 00000001
:004791F3 8D4840                  lea ecx, dword ptr [eax+40]
:004791F6 B800000000              mov eax, 00000000
:004791FB 884C2400                mov byte ptr [esp], cl
:004791FF 83D0FF                  adc eax, FFFFFFFF
:00479202 8D4C2400                lea ecx, dword ptr [esp]
:00479206 23C1                    and eax, ecx
:00479208 50                      push eax

* Reference To: KERNEL32.GetDriveTypeA, Ord:00DFh
                                  |
:00479209 FF15C0D44B00            Call dword ptr [004BD4C0]
:0047920F 83E802                  sub eax, 00000002
:00479212 83F804                  cmp eax, 00000004
:00479215 7707                    ja 0047921E
:00479217 FF248538924700          jmp dword ptr [4*eax+00479238]

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00479215(C)
|
:0047921E B8FFFFFFFF              mov eax, FFFFFFFF
:00479223 83C404                  add esp, 00000004
:00479226 C3                      ret


:00479227 33C0                    xor eax, eax
:00479229 83C404                  add esp, 00000004
:0047922C C3                      ret


:0047922D B801000000              mov eax, 00000001
:00479232 83C404                  add esp, 00000004
:00479235 C3                      ret


:00479236 8BFF                    mov edi, edi

:00479238 27924700                DWORD 00479227
:0047923C 2D924700                DWORD 0047922D
:00479240 1E924700                DWORD 0047921E
:00479244 2D924700                DWORD 0047922D
:00479248 2D924700                DWORD 0047922D


:0047924C CC                      int 03
:0047924D CC                      int 03
:0047924E CC                      int 03
:0047924F CC                      int 03

* Referenced by a CALL at Addresses:
|:00478F7A   , :004790DA   , :0047912D   
|
:00479250 33C0                    xor eax, eax
:00479252 C3                      ret


:00479253 CC                      int 03
:00479254 CC                      int 03
:00479255 CC                      int 03
:00479256 CC                      int 03
:00479257 CC                      int 03
:00479258 CC                      int 03
:00479259 CC                      int 03
:0047925A CC                      int 03
:0047925B CC                      int 03
:0047925C CC                      int 03
:0047925D CC                      int 03
:0047925E CC                      int 03
:0047925F CC                      int 03

* Referenced by a CALL at Address:
|:0047901D   
|
:00479260 B8FFFFFFFF              mov eax, FFFFFFFF
:00479265 C3                      ret


:00479266 CC                      int 03
:00479267 CC                      int 03
:00479268 CC                      int 03
:00479269 CC                      int 03
:0047926A CC                      int 03
:0047926B CC                      int 03
:0047926C CC                      int 03
:0047926D CC                      int 03
:0047926E CC                      int 03
:0047926F CC                      int 03
:00479270 E92BFFFFFF              jmp 004791A0
:00479275 CC                      int 03
:00479276 CC                      int 03
:00479277 CC                      int 03
:00479278 CC                      int 03
:00479279 CC                      int 03
:0047927A CC                      int 03
:0047927B CC                      int 03
:0047927C CC                      int 03
:0047927D CC                      int 03
:0047927E CC                      int 03
:0047927F CC                      int 03
:00479280 E91BFFFFFF              jmp 004791A0
:00479285 CC                      int 03
:00479286 CC                      int 03
:00479287 CC                      int 03
:00479288 CC                      int 03
:00479289 CC                      int 03
:0047928A CC                      int 03
:0047928B CC                      int 03
:0047928C CC                      int 03
:0047928D CC                      int 03
:0047928E CC                      int 03
:0047928F CC                      int 03
:00479290 E90BFFFFFF              jmp 004791A0
:00479295 CC                      int 03
:00479296 CC                      int 03
:00479297 CC                      int 03
:00479298 CC                      int 03
:00479299 CC                      int 03
:0047929A CC                      int 03
:0047929B CC                      int 03
:0047929C CC                      int 03
:0047929D CC                      int 03
:0047929E CC                      int 03
:0047929F CC                      int 03
:004792A0 E9FBFEFFFF              jmp 004791A0
:004792A5 CC                      int 03
:004792A6 CC                      int 03
:004792A7 CC                      int 03
:004792A8 CC                      int 03
:004792A9 CC                      int 03
:004792AA CC                      int 03
:004792AB CC                      int 03
:004792AC CC                      int 03
:004792AD CC                      int 03
:004792AE CC                      int 03
:004792AF CC                      int 03

* Referenced by a CALL at Address:
|:00479009   
|
:004792B0 56                      push esi
:004792B1 E8BFC7FFFF              call 00475A75
:004792B6 68ACBC4B00              push 004BBCAC
:004792BB 33F6                    xor esi, esi
:004792BD 68A8BC4B00              push 004BBCA8
:004792C2 E80ACAFFFF              call 00475CD1
:004792C7 83C408                  add esp, 00000008
:004792CA B9A0BC4B00              mov ecx, 004BBCA0

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004792CF C705D0BC4B0008000000    mov dword ptr [004BBCD0], 00000008
:004792D9 56                      push esi
:004792DA E801FDFFFF              call 00478FE0
:004792DF 8B15A0BC4B00            mov edx, dword ptr [004BBCA0]
:004792E5 8B0DA4BC4B00            mov ecx, dword ptr [004BBCA4]
:004792EB A1A8BC4B00              mov eax, dword ptr [004BBCA8]
:004792F0 8915B8BC4B00            mov dword ptr [004BBCB8], edx
:004792F6 8B15ACBC4B00            mov edx, dword ptr [004BBCAC]
:004792FC 890DBCBC4B00            mov dword ptr [004BBCBC], ecx

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00479302 6A03                    push 00000003
:00479304 A3C0BC4B00              mov dword ptr [004BBCC0], eax
:00479309 8915C4BC4B00            mov dword ptr [004BBCC4], edx
:0047930F 8935B4BC4B00            mov dword ptr [004BBCB4], esi

* Possible Reference to Dialog: DialogID_00ED, CONTROL_ID:0003, "("
                                  |

* Possible Reference to String Resource ID=00003: "^'"
                                  |
:00479315 C705884B480003000000    mov dword ptr [00484B88], 00000003
:0047931F 8935B0BC4B00            mov dword ptr [004BBCB0], esi
:00479325 E8CCC9FFFF              call 00475CF6
:0047932A 83C404                  add esp, 00000004
:0047932D 89358C4B4800            mov dword ptr [00484B8C], esi
:00479333 8935CCBC4B00            mov dword ptr [004BBCCC], esi
:00479339 8935C8BC4B00            mov dword ptr [004BBCC8], esi
:0047933F 5E                      pop esi
:00479340 C3                      ret


:00479341 CC                      int 03
:00479342 CC                      int 03
:00479343 CC                      int 03
:00479344 CC                      int 03
:00479345 CC                      int 03
:00479346 CC                      int 03
:00479347 CC                      int 03
:00479348 CC                      int 03
:00479349 CC                      int 03
:0047934A CC                      int 03
:0047934B CC                      int 03
:0047934C CC                      int 03
:0047934D CC                      int 03
:0047934E CC                      int 03
:0047934F CC                      int 03

* Referenced by a CALL at Address:
|:00479420   
|
:00479350 833DA84B480000          cmp dword ptr [00484BA8], 00000000
:00479357 7421                    je 0047937A
:00479359 8B442414                mov eax, dword ptr [esp+14]
:0047935D 8B4C2410                mov ecx, dword ptr [esp+10]
:00479361 8B54240C                mov edx, dword ptr [esp+0C]
:00479365 50                      push eax
:00479366 8B44240C                mov eax, dword ptr [esp+0C]
:0047936A 51                      push ecx
:0047936B 8B4C240C                mov ecx, dword ptr [esp+0C]
:0047936F 52                      push edx
:00479370 50                      push eax
:00479371 51                      push ecx
:00479372 E864DAFFFF              call 00476DDB
:00479377 83C414                  add esp, 00000014

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00479357(C)
|
:0047937A C21400                  ret 0014
:0047937D CC                      int 03
:0047937E CC                      int 03
:0047937F CC                      int 03
:00479380 83EC20                  sub esp, 00000020
:00479383 56                      push esi
:00479384 57                      push edi
:00479385 8BF1                    mov esi, ecx
:00479387 8B7C2434                mov edi, dword ptr [esp+34]
:0047938B 8BC7                    mov eax, edi
:0047938D C1E808                  shr eax, 08
:00479390 50                      push eax
:00479391 E80AF1FFFF              call 004784A0
:00479396 83C404                  add esp, 00000004
:00479399 85C0                    test eax, eax
:0047939B 742C                    je 004793C9
:0047939D 57                      push edi
:0047939E E82DF1FFFF              call 004784D0
:004793A3 8D4C240C                lea ecx, dword ptr [esp+0C]
:004793A7 83C404                  add esp, 00000004
:004793AA 51                      push ecx
:004793AB 50                      push eax
:004793AC E840DDFFFF              call 004770F1
:004793B1 8D442410                lea eax, dword ptr [esp+10]
:004793B5 83C408                  add esp, 00000008
:004793B8 8BCE                    mov ecx, esi
:004793BA BF10000000              mov edi, 00000010
:004793BF 6A00                    push 00000000
:004793C1 50                      push eax
:004793C2 E869000000              call 00479430
:004793C7 EB27                    jmp 004793F0

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047939B(C)
|
:004793C9 8D442408                lea eax, dword ptr [esp+08]
:004793CD 81E7FF000000            and edi, 000000FF
:004793D3 50                      push eax
:004793D4 57                      push edi
:004793D5 E8CBDDFFFF              call 004771A5
:004793DA 8D442410                lea eax, dword ptr [esp+10]
:004793DE 83C408                  add esp, 00000008
:004793E1 8BCE                    mov ecx, esi

* Possible Reference to Dialog: DialogID_00EE, CONTROL_ID:0008, ""
                                  |

* Possible Reference to String Resource ID=00008: ""
                                  |
:004793E3 BF08000000              mov edi, 00000008
:004793E8 6A01                    push 00000001
:004793EA 50                      push eax
:004793EB E840000000              call 00479430

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004793C7(U)
|
:004793F0 8B0DA04B4800            mov ecx, dword ptr [00484BA0]
:004793F6 A19C4B4800              mov eax, dword ptr [00484B9C]
:004793FB 50                      push eax
:004793FC 8B15984B4800            mov edx, dword ptr [00484B98]
:00479402 52                      push edx
:00479403 51                      push ecx
:00479404 E85CC9FFFF              call 00475D65
:00479409 8D4C2414                lea ecx, dword ptr [esp+14]
:0047940D 8B54243C                mov edx, dword ptr [esp+3C]
:00479411 8B442438                mov eax, dword ptr [esp+38]
:00479415 83C40C                  add esp, 0000000C
:00479418 51                      push ecx
:00479419 6A10                    push 00000010
:0047941B 57                      push edi
:0047941C 8BCE                    mov ecx, esi
:0047941E 52                      push edx
:0047941F 50                      push eax
:00479420 E82BFFFFFF              call 00479350
:00479425 5F                      pop edi
:00479426 5E                      pop esi
:00479427 83C420                  add esp, 00000020
:0047942A C20C00                  ret 000C


:0047942D CC                      int 03
:0047942E CC                      int 03
:0047942F CC                      int 03

* Referenced by a CALL at Addresses:
|:004793C2   , :004793EB   
|
:00479430 833D8C4B480001          cmp dword ptr [00484B8C], 00000001
:00479437 53                      push ebx
:00479438 56                      push esi
:00479439 57                      push edi
:0047943A 7557                    jne 00479493
:0047943C 837C241400              cmp dword ptr [esp+14], 00000000
:00479441 8B542410                mov edx, dword ptr [esp+10]
:00479445 741D                    je 00479464
:00479447 B810000000              mov eax, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047945C(C)
|
:0047944C 8A0A                    mov cl, byte ptr [edx]
:0047944E 42                      inc edx
:0047944F 8D1C4D00000000          lea ebx, dword ptr [2*ecx+00000000]
:00479456 0AD9                    or bl, cl
:00479458 48                      dec eax
:00479459 885AFF                  mov byte ptr [edx-01], bl
:0047945C 75EE                    jne 0047944C
:0047945E 5F                      pop edi
:0047945F 5E                      pop esi
:00479460 5B                      pop ebx
:00479461 C20800                  ret 0008



* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00479445(C)
|
:00479464 BE10000000              mov esi, 00000010

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:00479491(C)
|
:00479469 8D7A01                  lea edi, dword ptr [edx+01]
:0047946C 8A0A                    mov cl, byte ptr [edx]
:0047946E 660FB6C1                movzx ax, cl
:00479472 66C1E008                shl ax, 08
:00479476 660FB61F                movzx bx, byte ptr [edi]
:0047947A 6603C3                  add ax, bx
:0047947D 6603C0                  add ax, ax
:00479480 668BD8                  mov bx, ax
:00479483 66C1EB08                shr bx, 08
:00479487 0AD9                    or bl, cl
:00479489 881A                    mov byte ptr [edx], bl
:0047948B 8D5701                  lea edx, dword ptr [edi+01]
:0047948E 0807                    or byte ptr [edi], al
:00479490 4E                      dec esi
:00479491 75D6                    jne 00479469

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:0047943A(C)
|
:00479493 5F                      pop edi
:00479494 5E                      pop esi
:00479495 5B                      pop ebx
:00479496 C20800                  ret 0008


:00479499 CC                      int 03
:0047949A CC                      int 03
:0047949B CC                      int 03
:0047949C CC                      int 03
:0047949D CC                      int 03
:0047949E CC                      int 03
:0047949F CC                      int 03
:004794A0 E90B000000              jmp 004794B0
:004794A5 CC                      int 03
:004794A6 CC                      int 03
:004794A7 CC                      int 03
:004794A8 CC                      int 03
:004794A9 CC                      int 03
:004794AA CC                      int 03
:004794AB CC                      int 03
:004794AC CC                      int 03
:004794AD CC                      int 03
:004794AE CC                      int 03
:004794AF CC                      int 03

* Referenced by a (U)nconditional or (C)onditional Jump at Address:
|:004794A0(U)
|
:004794B0 C70598BC4B0034B54700    mov dword ptr [004BBC98], 0047B534
:004794BA C3                      ret


:004794BB CC                      int 03

* Referenced by a CALL at Addresses:
|:0046F057   , :0046F353   
|

* Reference To: KERNEL32.RtlUnwind, Ord:01E5h
                                  |
:004794BC FF25A0D54B00            Jmp dword ptr [004BD5A0]
:004794C2 CC                      int 03
:004794C3 CC                      int 03
:004794C4 CC                      int 03
:004794C5 CC                      int 03
:004794C6 CC                      int 03
:004794C7 CC                      int 03
:004794C8 CC                      int 03
:004794C9 CC                      int 03
:004794CA CC                      int 03
:004794CB CC                      int 03
:004794CC CC                      int 03
:004794CD CC                      int 03
:004794CE CC                      int 03
:004794CF CC                      int 03
:004794D0 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004794D6 E885C1F8FF              call 00405660
:004794DB C3                      ret


:004794DC B838B54700              mov eax, 0047B538
:004794E1 E9AA5BFFFF              jmp 0046F090
:004794E6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004794EC E86FC1F8FF              call 00405660
:004794F1 C3                      ret


:004794F2 B860B54700              mov eax, 0047B560
:004794F7 E9945BFFFF              jmp 0046F090
:004794FC 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00479502 E859C1F8FF              call 00405660
:00479507 C3                      ret


:00479508 B888B54700              mov eax, 0047B588
:0047950D E97E5BFFFF              jmp 0046F090
:00479512 CC                      int 03
:00479513 CC                      int 03
:00479514 CC                      int 03
:00479515 CC                      int 03
:00479516 CC                      int 03
:00479517 CC                      int 03
:00479518 CC                      int 03
:00479519 CC                      int 03
:0047951A CC                      int 03
:0047951B CC                      int 03
:0047951C CC                      int 03
:0047951D CC                      int 03
:0047951E CC                      int 03
:0047951F CC                      int 03
:00479520 8B4DF0                  mov ecx, dword ptr [ebp-10]
:00479523 E87832F9FF              call 0040C7A0
:00479528 C3                      ret


:00479529 B8B0B54700              mov eax, 0047B5B0
:0047952E E95D5BFFFF              jmp 0046F090
:00479533 CC                      int 03
:00479534 CC                      int 03
:00479535 CC                      int 03
:00479536 CC                      int 03
:00479537 CC                      int 03
:00479538 CC                      int 03
:00479539 CC                      int 03
:0047953A CC                      int 03
:0047953B CC                      int 03
:0047953C CC                      int 03
:0047953D CC                      int 03
:0047953E CC                      int 03
:0047953F CC                      int 03
:00479540 8B4DE0                  mov ecx, dword ptr [ebp-20]
:00479543 83C104                  add ecx, 00000004
:00479546 E8B554FBFF              call 0042EA00
:0047954B C3                      ret


:0047954C B8D8B54700              mov eax, 0047B5D8
:00479551 E93A5BFFFF              jmp 0046F090
:00479556 CC                      int 03
:00479557 CC                      int 03
:00479558 CC                      int 03
:00479559 CC                      int 03
:0047955A CC                      int 03
:0047955B CC                      int 03
:0047955C CC                      int 03
:0047955D CC                      int 03
:0047955E CC                      int 03
:0047955F CC                      int 03
:00479560 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00479563 E84143F9FF              call 0040D8A9
:00479568 C3                      ret


:00479569 B800B64700              mov eax, 0047B600
:0047956E E91D5BFFFF              jmp 0046F090
:00479573 8D4DF0                  lea ecx, dword ptr [ebp-10]
:00479576 E82E43F9FF              call 0040D8A9
:0047957B C3                      ret


:0047957C B828B64700              mov eax, 0047B628
:00479581 E90A5BFFFF              jmp 0046F090
:00479586 8D4DE8                  lea ecx, dword ptr [ebp-18]
:00479589 E81B43F9FF              call 0040D8A9
:0047958E C3                      ret


:0047958F B850B64700              mov eax, 0047B650
:00479594 E9F75AFFFF              jmp 0046F090
:00479599 CC                      int 03
:0047959A CC                      int 03
:0047959B CC                      int 03
:0047959C CC                      int 03
:0047959D CC                      int 03
:0047959E CC                      int 03
:0047959F CC                      int 03
:004795A0 8D4DE0                  lea ecx, dword ptr [ebp-20]
:004795A3 E85854FBFF              call 0042EA00
:004795A8 C3                      ret


:004795A9 B878B64700              mov eax, 0047B678
:004795AE E9DD5AFFFF              jmp 0046F090
:004795B3 CC                      int 03
:004795B4 CC                      int 03
:004795B5 CC                      int 03
:004795B6 CC                      int 03
:004795B7 CC                      int 03
:004795B8 CC                      int 03
:004795B9 CC                      int 03
:004795BA CC                      int 03
:004795BB CC                      int 03
:004795BC CC                      int 03
:004795BD CC                      int 03
:004795BE CC                      int 03
:004795BF CC                      int 03
:004795C0 8D4DD0                  lea ecx, dword ptr [ebp-30]
:004795C3 E8E142F9FF              call 0040D8A9
:004795C8 C3                      ret


:004795C9 B8A0B64700              mov eax, 0047B6A0
:004795CE E9BD5AFFFF              jmp 0046F090
:004795D3 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004795D9 E8CB42F9FF              call 0040D8A9
:004795DE C3                      ret


:004795DF B8C8B64700              mov eax, 0047B6C8
:004795E4 E9A75AFFFF              jmp 0046F090
:004795E9 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004795EC E8B842F9FF              call 0040D8A9
:004795F1 C3                      ret


:004795F2 B8F0B64700              mov eax, 0047B6F0
:004795F7 E9945AFFFF              jmp 0046F090
:004795FC 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00479602 E8A242F9FF              call 0040D8A9
:00479607 C3                      ret


:00479608 B818B74700              mov eax, 0047B718
:0047960D E97E5AFFFF              jmp 0046F090
:00479612 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479618 E843C0F8FF              call 00405660
:0047961D C3                      ret


:0047961E B840B74700              mov eax, 0047B740
:00479623 E9685AFFFF              jmp 0046F090
:00479628 CC                      int 03
:00479629 CC                      int 03
:0047962A CC                      int 03
:0047962B CC                      int 03
:0047962C CC                      int 03
:0047962D CC                      int 03
:0047962E CC                      int 03
:0047962F CC                      int 03
:00479630 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00479636 E825C0F8FF              call 00405660
:0047963B C3                      ret


:0047963C B868B74700              mov eax, 0047B768
:00479641 E94A5AFFFF              jmp 0046F090
:00479646 CC                      int 03
:00479647 CC                      int 03
:00479648 CC                      int 03
:00479649 CC                      int 03
:0047964A CC                      int 03
:0047964B CC                      int 03
:0047964C CC                      int 03
:0047964D CC                      int 03
:0047964E CC                      int 03
:0047964F CC                      int 03
:00479650 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00479656 E805C0F8FF              call 00405660
:0047965B C3                      ret


:0047965C B890B74700              mov eax, 0047B790
:00479661 E92A5AFFFF              jmp 0046F090
:00479666 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0047966C E8EFBFF8FF              call 00405660
:00479671 C3                      ret


:00479672 B8B8B74700              mov eax, 0047B7B8
:00479677 E9145AFFFF              jmp 0046F090
:0047967C CC                      int 03
:0047967D CC                      int 03
:0047967E CC                      int 03
:0047967F CC                      int 03
:00479680 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479686 E8D5BFF8FF              call 00405660
:0047968B C3                      ret


:0047968C B8E0B74700              mov eax, 0047B7E0
:00479691 E9FA59FFFF              jmp 0046F090
:00479696 8D8D0CB8FFFF            lea ecx, dword ptr [ebp+FFFFB80C]
:0047969C E8BFBFF8FF              call 00405660
:004796A1 C3                      ret


:004796A2 B808B84700              mov eax, 0047B808
:004796A7 E9E459FFFF              jmp 0046F090
:004796AC 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004796B2 E8A9BFF8FF              call 00405660
:004796B7 C3                      ret


:004796B8 B830B84700              mov eax, 0047B830
:004796BD E9CE59FFFF              jmp 0046F090
:004796C2 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004796C8 E893BFF8FF              call 00405660
:004796CD C3                      ret


:004796CE B858B84700              mov eax, 0047B858
:004796D3 E9B859FFFF              jmp 0046F090
:004796D8 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004796DE E87DBFF8FF              call 00405660
:004796E3 C3                      ret


:004796E4 B880B84700              mov eax, 0047B880
:004796E9 E9A259FFFF              jmp 0046F090
:004796EE 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004796F4 E867BFF8FF              call 00405660
:004796F9 C3                      ret


:004796FA B8A8B84700              mov eax, 0047B8A8
:004796FF E98C59FFFF              jmp 0046F090
:00479704 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0047970A E851BFF8FF              call 00405660
:0047970F C3                      ret


:00479710 B8D0B84700              mov eax, 0047B8D0
:00479715 E97659FFFF              jmp 0046F090
:0047971A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479720 E83BBFF8FF              call 00405660
:00479725 C3                      ret


:00479726 B8F8B84700              mov eax, 0047B8F8
:0047972B E96059FFFF              jmp 0046F090
:00479730 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479736 E825BFF8FF              call 00405660
:0047973B C3                      ret


:0047973C B820B94700              mov eax, 0047B920
:00479741 E94A59FFFF              jmp 0046F090
:00479746 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0047974C E80FBFF8FF              call 00405660
:00479751 C3                      ret


:00479752 B848B94700              mov eax, 0047B948
:00479757 E93459FFFF              jmp 0046F090
:0047975C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479762 E8F9BEF8FF              call 00405660
:00479767 C3                      ret


:00479768 B870B94700              mov eax, 0047B970
:0047976D E91E59FFFF              jmp 0046F090
:00479772 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479778 E8E3BEF8FF              call 00405660
:0047977D C3                      ret


:0047977E B898B94700              mov eax, 0047B998
:00479783 E90859FFFF              jmp 0046F090
:00479788 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0047978E E8CDBEF8FF              call 00405660
:00479793 C3                      ret


:00479794 B8C0B94700              mov eax, 0047B9C0
:00479799 E9F258FFFF              jmp 0046F090
:0047979E 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004797A4 E8B7BEF8FF              call 00405660
:004797A9 C3                      ret


:004797AA B8E8B94700              mov eax, 0047B9E8
:004797AF E9DC58FFFF              jmp 0046F090
:004797B4 CC                      int 03
:004797B5 CC                      int 03
:004797B6 CC                      int 03
:004797B7 CC                      int 03
:004797B8 CC                      int 03
:004797B9 CC                      int 03
:004797BA CC                      int 03
:004797BB CC                      int 03
:004797BC CC                      int 03
:004797BD CC                      int 03
:004797BE CC                      int 03
:004797BF CC                      int 03
:004797C0 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:004797C6 E895BEF8FF              call 00405660
:004797CB C3                      ret


:004797CC 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004797CF E8D540F9FF              call 0040D8A9
:004797D4 C3                      ret


:004797D5 B810BA4700              mov eax, 0047BA10
:004797DA E9B158FFFF              jmp 0046F090
:004797DF 8D4DF0                  lea ecx, dword ptr [ebp-10]
:004797E2 E8C240F9FF              call 0040D8A9
:004797E7 C3                      ret


:004797E8 B840BA4700              mov eax, 0047BA40
:004797ED E99E58FFFF              jmp 0046F090
:004797F2 CC                      int 03
:004797F3 CC                      int 03
:004797F4 CC                      int 03
:004797F5 CC                      int 03
:004797F6 CC                      int 03
:004797F7 CC                      int 03
:004797F8 CC                      int 03
:004797F9 CC                      int 03
:004797FA CC                      int 03
:004797FB CC                      int 03
:004797FC CC                      int 03
:004797FD CC                      int 03
:004797FE CC                      int 03
:004797FF CC                      int 03
:00479800 8D8D8CFEFFFF            lea ecx, dword ptr [ebp+FFFFFE8C]
:00479806 E86586FBFF              call 00431E70
:0047980B C3                      ret


:0047980C 8D4DC0                  lea ecx, dword ptr [ebp-40]
:0047980F E8EC51FBFF              call 0042EA00
:00479814 C3                      ret


:00479815 B868BA4700              mov eax, 0047BA68
:0047981A E97158FFFF              jmp 0046F090
:0047981F CC                      int 03
:00479820 8D8DDCFEFFFF            lea ecx, dword ptr [ebp+FFFFFEDC]
:00479826 E835BEF8FF              call 00405660
:0047982B C3                      ret


:0047982C B898BA4700              mov eax, 0047BA98
:00479831 E95A58FFFF              jmp 0046F090
:00479836 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:0047983C E81FBEF8FF              call 00405660
:00479841 C3                      ret


:00479842 B8C0BA4700              mov eax, 0047BAC0
:00479847 E94458FFFF              jmp 0046F090
:0047984C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00479852 E809BEF8FF              call 00405660
:00479857 C3                      ret


:00479858 B8E8BA4700              mov eax, 0047BAE8
:0047985D E92E58FFFF              jmp 0046F090
:00479862 CC                      int 03
:00479863 CC                      int 03
:00479864 CC                      int 03
:00479865 CC                      int 03
:00479866 CC                      int 03
:00479867 CC                      int 03
:00479868 CC                      int 03
:00479869 CC                      int 03
:0047986A CC                      int 03
:0047986B CC                      int 03
:0047986C CC                      int 03
:0047986D CC                      int 03
:0047986E CC                      int 03
:0047986F CC                      int 03
:00479870 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00479876 E8E5BDF8FF              call 00405660
:0047987B C3                      ret


:0047987C B810BB4700              mov eax, 0047BB10
:00479881 E90A58FFFF              jmp 0046F090
:00479886 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0047988C E8CFBDF8FF              call 00405660
:00479891 C3                      ret


:00479892 B838BB4700              mov eax, 0047BB38
:00479897 E9F457FFFF              jmp 0046F090
:0047989C 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:004798A2 E8B9BDF8FF              call 00405660
:004798A7 C3                      ret


:004798A8 B860BB4700              mov eax, 0047BB60
:004798AD E9DE57FFFF              jmp 0046F090
:004798B2 CC                      int 03
:004798B3 CC                      int 03
:004798B4 CC                      int 03
:004798B5 CC                      int 03
:004798B6 CC                      int 03
:004798B7 CC                      int 03
:004798B8 CC                      int 03
:004798B9 CC                      int 03
:004798BA CC                      int 03
:004798BB CC                      int 03
:004798BC CC                      int 03
:004798BD CC                      int 03
:004798BE CC                      int 03
:004798BF CC                      int 03
:004798C0 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004798C6 E895BDF8FF              call 00405660
:004798CB C3                      ret


:004798CC B888BB4700              mov eax, 0047BB88
:004798D1 E9BA57FFFF              jmp 0046F090
:004798D6 8D8DE8FEFFFF            lea ecx, dword ptr [ebp+FFFFFEE8]
:004798DC E87FBDF8FF              call 00405660
:004798E1 C3                      ret


:004798E2 B8B0BB4700              mov eax, 0047BBB0
:004798E7 E9A457FFFF              jmp 0046F090
:004798EC 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004798F2 E869BDF8FF              call 00405660
:004798F7 C3                      ret


:004798F8 B8D8BB4700              mov eax, 0047BBD8
:004798FD E98E57FFFF              jmp 0046F090
:00479902 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479908 E853BDF8FF              call 00405660
:0047990D C3                      ret


:0047990E B800BC4700              mov eax, 0047BC00
:00479913 E97857FFFF              jmp 0046F090
:00479918 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0047991E E83DBDF8FF              call 00405660
:00479923 C3                      ret


:00479924 B828BC4700              mov eax, 0047BC28
:00479929 E96257FFFF              jmp 0046F090
:0047992E 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:00479934 E827BDF8FF              call 00405660
:00479939 C3                      ret


:0047993A B850BC4700              mov eax, 0047BC50
:0047993F E94C57FFFF              jmp 0046F090
:00479944 8D8DECFEFFFF            lea ecx, dword ptr [ebp+FFFFFEEC]
:0047994A E811BDF8FF              call 00405660
:0047994F C3                      ret


:00479950 B878BC4700              mov eax, 0047BC78
:00479955 E93657FFFF              jmp 0046F090
:0047995A 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479960 E8FBBCF8FF              call 00405660
:00479965 C3                      ret


:00479966 B8A0BC4700              mov eax, 0047BCA0
:0047996B E92057FFFF              jmp 0046F090
:00479970 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479976 E8E5BCF8FF              call 00405660
:0047997B C3                      ret


:0047997C B8C8BC4700              mov eax, 0047BCC8
:00479981 E90A57FFFF              jmp 0046F090
:00479986 CC                      int 03
:00479987 CC                      int 03
:00479988 CC                      int 03
:00479989 CC                      int 03
:0047998A CC                      int 03
:0047998B CC                      int 03
:0047998C CC                      int 03
:0047998D CC                      int 03
:0047998E CC                      int 03
:0047998F CC                      int 03
:00479990 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479996 E8C5BCF8FF              call 00405660
:0047999B C3                      ret


:0047999C B8F0BC4700              mov eax, 0047BCF0
:004799A1 E9EA56FFFF              jmp 0046F090
:004799A6 8B45E8                  mov eax, dword ptr [ebp-18]
:004799A9 50                      push eax
:004799AA E8615BFFFF              call 0046F510
:004799AF 59                      pop ecx
:004799B0 C3                      ret


:004799B1 B818BD4700              mov eax, 0047BD18
:004799B6 E9D556FFFF              jmp 0046F090
:004799BB 8B45E4                  mov eax, dword ptr [ebp-1C]
:004799BE 50                      push eax
:004799BF E84C5BFFFF              call 0046F510
:004799C4 59                      pop ecx
:004799C5 C3                      ret


:004799C6 B840BD4700              mov eax, 0047BD40
:004799CB E9C056FFFF              jmp 0046F090
:004799D0 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004799D6 E885BCF8FF              call 00405660
:004799DB C3                      ret


:004799DC B868BD4700              mov eax, 0047BD68
:004799E1 E9AA56FFFF              jmp 0046F090
:004799E6 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:004799EC E86FBCF8FF              call 00405660
:004799F1 C3                      ret


:004799F2 B890BD4700              mov eax, 0047BD90
:004799F7 E99456FFFF              jmp 0046F090
:004799FC CC                      int 03
:004799FD CC                      int 03
:004799FE CC                      int 03
:004799FF CC                      int 03
:00479A00 8D8DF0EEFFFF            lea ecx, dword ptr [ebp+FFFFEEF0]
:00479A06 E855BCF8FF              call 00405660
:00479A0B C3                      ret


:00479A0C B8B8BD4700              mov eax, 0047BDB8
:00479A11 E97A56FFFF              jmp 0046F090
:00479A16 CC                      int 03
:00479A17 CC                      int 03
:00479A18 CC                      int 03
:00479A19 CC                      int 03
:00479A1A CC                      int 03
:00479A1B CC                      int 03
:00479A1C CC                      int 03
:00479A1D CC                      int 03
:00479A1E CC                      int 03
:00479A1F CC                      int 03
:00479A20 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479A26 E835BCF8FF              call 00405660
:00479A2B C3                      ret


:00479A2C B8E0BD4700              mov eax, 0047BDE0
:00479A31 E95A56FFFF              jmp 0046F090
:00479A36 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479A3C E81FBCF8FF              call 00405660
:00479A41 C3                      ret


:00479A42 B808BE4700              mov eax, 0047BE08
:00479A47 E94456FFFF              jmp 0046F090
:00479A4C 8D8DF0FEFFFF            lea ecx, dword ptr [ebp+FFFFFEF0]
:00479A52 E809BCF8FF              call 00405660
:00479A57 C3                      ret


:00479A58 B830BE4700              mov eax, 0047BE30
:00479A5D E92E56FFFF              jmp 0046F090
:00479A62 CC                      int 03
:00479A63 CC                      int 03
:00479A64 CC                      int 03
:00479A65 CC                      int 03
:00479A66 CC                      int 03
:00479A67 CC                      int 03
:00479A68 CC                      int 03
:00479A69 CC                      int 03
:00479A6A CC                      int 03
:00479A6B CC                      int 03
:00479A6C CC                      int 03
:00479A6D CC                      int 03
:00479A6E CC                      int 03
:00479A6F CC                      int 03
:00479A70 8D4DE8                  lea ecx, dword ptr [ebp-18]
:00479A73 E8884FFBFF              call 0042EA00
:00479A78 C3                      ret


:00479A79 B858BE4700              mov eax, 0047BE58
:00479A7E E90D56FFFF              jmp 0046F090
:00479A83 CC                      int 03
:00479A84 CC                      int 03
:00479A85 CC                      int 03
:00479A86 CC                      int 03
:00479A87 CC                      int 03
:00479A88 CC                      int 03
:00479A89 CC                      int 03
:00479A8A CC                      int 03
:00479A8B CC                      int 03
:00479A8C CC                      int 03
:00479A8D CC                      int 03
:00479A8E CC                      int 03
:00479A8F CC                      int 03
:00479A90 8D8D88FEFFFF            lea ecx, dword ptr [ebp+FFFFFE88]
:00479A96 E8C5BBF8FF              call 00405660
:00479A9B C3                      ret


:00479A9C B880BE4700              mov eax, 0047BE80
:00479AA1 E9EA55FFFF              jmp 0046F090
:00479AA6 CC                      int 03
:00479AA7 CC                      int 03
:00479AA8 CC                      int 03
:00479AA9 CC                      int 03
:00479AAA CC                      int 03
:00479AAB CC                      int 03
:00479AAC CC                      int 03
:00479AAD CC                      int 03
:00479AAE CC                      int 03
:00479AAF CC                      int 03
:00479AB0 8D4DE8                  lea ecx, dword ptr [ebp-18]
:00479AB3 E8F13DF9FF              call 0040D8A9
:00479AB8 C3                      ret


:00479AB9 B8A8BE4700              mov eax, 0047BEA8
:00479ABE E9CD55FFFF              jmp 0046F090
:00479AC3 00000000000000000000    BYTE 10 DUP(0)
:00479ACD 00000000000000000000    BYTE 10 DUP(0)
:00479AD7 00000000000000000000    BYTE 10 DUP(0)
:00479AE1 00000000000000000000    BYTE 10 DUP(0)
:00479AEB 00000000000000000000    BYTE 10 DUP(0)
:00479AF5 00000000000000000000    BYTE 10 DUP(0)
:00479AFF 00000000000000000000    BYTE 10 DUP(0)
:00479B09 00000000000000000000    BYTE 10 DUP(0)
:00479B13 00000000000000000000    BYTE 10 DUP(0)
:00479B1D 00000000000000000000    BYTE 10 DUP(0)
:00479B27 00000000000000000000    BYTE 10 DUP(0)
:00479B31 00000000000000000000    BYTE 10 DUP(0)
:00479B3B 00000000000000000000    BYTE 10 DUP(0)
:00479B45 00000000000000000000    BYTE 10 DUP(0)
:00479B4F 00000000000000000000    BYTE 10 DUP(0)
:00479B59 00000000000000000000    BYTE 10 DUP(0)
:00479B63 00000000000000000000    BYTE 10 DUP(0)
:00479B6D 00000000000000000000    BYTE 10 DUP(0)
:00479B77 00000000000000000000    BYTE 10 DUP(0)
:00479B81 00000000000000000000    BYTE 10 DUP(0)
:00479B8B 00000000000000000000    BYTE 10 DUP(0)
:00479B95 00000000000000000000    BYTE 10 DUP(0)
:00479B9F 00000000000000000000    BYTE 10 DUP(0)
:00479BA9 00000000000000000000    BYTE 10 DUP(0)
:00479BB3 00000000000000000000    BYTE 10 DUP(0)
:00479BBD 00000000000000000000    BYTE 10 DUP(0)
:00479BC7 00000000000000000000    BYTE 10 DUP(0)
:00479BD1 00000000000000000000    BYTE 10 DUP(0)
:00479BDB 00000000000000000000    BYTE 10 DUP(0)
:00479BE5 00000000000000000000    BYTE 10 DUP(0)
:00479BEF 00000000000000000000    BYTE 10 DUP(0)
:00479BF9 00000000000000040000    BYTE 10 DUP(0)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
:FFFFFFFF    End Of Listing
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
